?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
mtd: tests: fix read buffer overflows
[linux-2.6/mini2440.git] / drivers / char / applicom.c
blob73a0765344b63a4cde03de5cfbb1381a7b410a5d
1 /* Derived from Applicom driver ac.c for SCO Unix */
2 /* Ported by David Woodhouse, Axiom (Cambridge) Ltd. */
3 /* dwmw2@infradead.org 30/8/98 */
4 /* $Id: ac.c,v 1.30 2000/03/22 16:03:57 dwmw2 Exp $ */
5 /* This module is for Linux 2.1 and 2.2 series kernels. */
6 /*****************************************************************************/
7 /* J PAGET 18/02/94 passage V2.4.2 ioctl avec code 2 reset to les interrupt */
8 /* ceci pour reseter correctement apres une sortie sauvage */
9 /* J PAGET 02/05/94 passage V2.4.3 dans le traitement de d'interruption, */
10 /* LoopCount n'etait pas initialise a 0. */
11 /* F LAFORSE 04/07/95 version V2.6.0 lecture bidon apres acces a une carte */
12 /* pour liberer le bus */
13 /* J.PAGET 19/11/95 version V2.6.1 Nombre, addresse,irq n'est plus configure */
14 /* et passe en argument a acinit, mais est scrute sur le bus pour s'adapter */
15 /* au nombre de cartes presentes sur le bus. IOCL code 6 affichait V2.4.3 */
16 /* F.LAFORSE 28/11/95 creation de fichiers acXX.o avec les differentes */
17 /* adresses de base des cartes, IOCTL 6 plus complet */
18 /* J.PAGET le 19/08/96 copie de la version V2.6 en V2.8.0 sans modification */
19 /* de code autre que le texte V2.6.1 en V2.8.0 */
20 /*****************************************************************************/
21
22
23 #include <linux/kernel.h>
24 #include <linux/module.h>
25 #include <linux/interrupt.h>
26 #include <linux/slab.h>
27 #include <linux/errno.h>
28 #include <linux/miscdevice.h>
29 #include <linux/pci.h>
30 #include <linux/wait.h>
31 #include <linux/init.h>
32 #include <linux/fs.h>
33
34 #include <asm/io.h>
35 #include <asm/uaccess.h>
36
37 #include "applicom.h"
38
39
40 /* NOTE: We use for loops with {write,read}b() instead of
41 memcpy_{from,to}io throughout this driver. This is because
42 the board doesn't correctly handle word accesses - only
43 bytes.
44 */
45
46
47 #undef DEBUG
48
49 #define MAX_BOARD 8 /* maximum of pc board possible */
50 #define MAX_ISA_BOARD 4
51 #define LEN_RAM_IO 0x800
52 #define AC_MINOR 157
53
54 #ifndef PCI_VENDOR_ID_APPLICOM
55 #define PCI_VENDOR_ID_APPLICOM 0x1389
56 #define PCI_DEVICE_ID_APPLICOM_PCIGENERIC 0x0001
57 #define PCI_DEVICE_ID_APPLICOM_PCI2000IBS_CAN 0x0002
58 #define PCI_DEVICE_ID_APPLICOM_PCI2000PFB 0x0003
59 #endif
60
61 static char *applicom_pci_devnames[] = {
62 "PCI board",
63 "PCI2000IBS / PCI2000CAN",
64 "PCI2000PFB"
65 };
66
67 static struct pci_device_id applicom_pci_tbl[] = {
68 { PCI_VDEVICE(APPLICOM, PCI_DEVICE_ID_APPLICOM_PCIGENERIC) },
69 { PCI_VDEVICE(APPLICOM, PCI_DEVICE_ID_APPLICOM_PCI2000IBS_CAN) },
70 { PCI_VDEVICE(APPLICOM, PCI_DEVICE_ID_APPLICOM_PCI2000PFB) },
71 { 0 }
72 };
73 MODULE_DEVICE_TABLE(pci, applicom_pci_tbl);
74
75 MODULE_AUTHOR("David Woodhouse & Applicom International");
76 MODULE_DESCRIPTION("Driver for Applicom Profibus card");
77 MODULE_LICENSE("GPL");
78 MODULE_ALIAS_MISCDEV(AC_MINOR);
79
80 MODULE_SUPPORTED_DEVICE("ac");
81
82
83 static struct applicom_board {
84 unsigned long PhysIO;
85 void __iomem *RamIO;
86 wait_queue_head_t FlagSleepSend;
87 long irq;
88 spinlock_t mutex;
89 } apbs[MAX_BOARD];
90
91 static unsigned int irq = 0; /* interrupt number IRQ */
92 static unsigned long mem = 0; /* physical segment of board */
93
94 module_param(irq, uint, 0);
95 MODULE_PARM_DESC(irq, "IRQ of the Applicom board");
96 module_param(mem, ulong, 0);
97 MODULE_PARM_DESC(mem, "Shared Memory Address of Applicom board");
98
99 static unsigned int numboards; /* number of installed boards */
100 static volatile unsigned char Dummy;
101 static DECLARE_WAIT_QUEUE_HEAD(FlagSleepRec);
102 static unsigned int WriteErrorCount; /* number of write error */
103 static unsigned int ReadErrorCount; /* number of read error */
104 static unsigned int DeviceErrorCount; /* number of device error */
105
106 static ssize_t ac_read (struct file *, char __user *, size_t, loff_t *);
107 static ssize_t ac_write (struct file *, const char __user *, size_t, loff_t *);
108 static int ac_ioctl(struct inode *, struct file *, unsigned int,
109 unsigned long);
110 static irqreturn_t ac_interrupt(int, void *);
111
112 static const struct file_operations ac_fops = {
113 .owner = THIS_MODULE,
114 .llseek = no_llseek,
115 .read = ac_read,
116 .write = ac_write,
117 .ioctl = ac_ioctl,
118 };
119
120 static struct miscdevice ac_miscdev = {
121 AC_MINOR,
122 "ac",
123 &ac_fops
124 };
125
126 static int dummy; /* dev_id for request_irq() */
127
128 static int ac_register_board(unsigned long physloc, void __iomem *loc,
129 unsigned char boardno)
130 {
131 volatile unsigned char byte_reset_it;
132
133 if((readb(loc + CONF_END_TEST) != 0x00) ||
134 (readb(loc + CONF_END_TEST + 1) != 0x55) ||
135 (readb(loc + CONF_END_TEST + 2) != 0xAA) ||
136 (readb(loc + CONF_END_TEST + 3) != 0xFF))
137 return 0;
138
139 if (!boardno)
140 boardno = readb(loc + NUMCARD_OWNER_TO_PC);
141
142 if (!boardno || boardno > MAX_BOARD) {
143 printk(KERN_WARNING "Board #%d (at 0x%lx) is out of range (1 <= x <= %d).\n",
144 boardno, physloc, MAX_BOARD);
145 return 0;
146 }
147
148 if (apbs[boardno - 1].RamIO) {
149 printk(KERN_WARNING "Board #%d (at 0x%lx) conflicts with previous board #%d (at 0x%lx)\n",
150 boardno, physloc, boardno, apbs[boardno-1].PhysIO);
151 return 0;
152 }
153
154 boardno--;
155
156 apbs[boardno].PhysIO = physloc;
157 apbs[boardno].RamIO = loc;
158 init_waitqueue_head(&apbs[boardno].FlagSleepSend);
159 spin_lock_init(&apbs[boardno].mutex);
160 byte_reset_it = readb(loc + RAM_IT_TO_PC);
161
162 numboards++;
163 return boardno + 1;
164 }
165
166 static void __exit applicom_exit(void)
167 {
168 unsigned int i;
169
170 misc_deregister(&ac_miscdev);
171
172 for (i = 0; i < MAX_BOARD; i++) {
173
174 if (!apbs[i].RamIO)
175 continue;
176
177 if (apbs[i].irq)
178 free_irq(apbs[i].irq, &dummy);
179
180 iounmap(apbs[i].RamIO);
181 }
182 }
183
184 static int __init applicom_init(void)
185 {
186 int i, numisa = 0;
187 struct pci_dev *dev = NULL;
188 void __iomem *RamIO;
189 int boardno, ret;
190
191 printk(KERN_INFO "Applicom driver: $Id: ac.c,v 1.30 2000/03/22 16:03:57 dwmw2 Exp $\n");
192
193 /* No mem and irq given - check for a PCI card */
194
195 while ( (dev = pci_get_class(PCI_CLASS_OTHERS << 16, dev))) {
196
197 if (!pci_match_id(applicom_pci_tbl, dev))
198 continue;
199
200 if (pci_enable_device(dev))
201 return -EIO;
202
203 RamIO = ioremap_nocache(pci_resource_start(dev, 0), LEN_RAM_IO);
204
205 if (!RamIO) {
206 printk(KERN_INFO "ac.o: Failed to ioremap PCI memory "
207 "space at 0x%llx\n",
208 (unsigned long long)pci_resource_start(dev, 0));
209 pci_disable_device(dev);
210 return -EIO;
211 }
212
213 printk(KERN_INFO "Applicom %s found at mem 0x%llx, irq %d\n",
214 applicom_pci_devnames[dev->device-1],
215 (unsigned long long)pci_resource_start(dev, 0),
216 dev->irq);
217
218 boardno = ac_register_board(pci_resource_start(dev, 0),
219 RamIO, 0);
220 if (!boardno) {
221 printk(KERN_INFO "ac.o: PCI Applicom device doesn't have correct signature.\n");
222 iounmap(RamIO);
223 pci_disable_device(dev);
224 continue;
225 }
226
227 if (request_irq(dev->irq, &ac_interrupt, IRQF_SHARED, "Applicom PCI", &dummy)) {
228 printk(KERN_INFO "Could not allocate IRQ %d for PCI Applicom device.\n", dev->irq);
229 iounmap(RamIO);
230 pci_disable_device(dev);
231 apbs[boardno - 1].RamIO = NULL;
232 continue;
233 }
234
235 /* Enable interrupts. */
236
237 writeb(0x40, apbs[boardno - 1].RamIO + RAM_IT_FROM_PC);
238
239 apbs[boardno - 1].irq = dev->irq;
240 }
241
242 /* Finished with PCI cards. If none registered,
243 * and there was no mem/irq specified, exit */
244
245 if (!mem || !irq) {
246 if (numboards)
247 goto fin;
248 else {
249 printk(KERN_INFO "ac.o: No PCI boards found.\n");
250 printk(KERN_INFO "ac.o: For an ISA board you must supply memory and irq parameters.\n");
251 return -ENXIO;
252 }
253 }
254
255 /* Now try the specified ISA cards */
256
257 for (i = 0; i < MAX_ISA_BOARD; i++) {
258 RamIO = ioremap_nocache(mem + (LEN_RAM_IO * i), LEN_RAM_IO);
259
260 if (!RamIO) {
261 printk(KERN_INFO "ac.o: Failed to ioremap the ISA card's memory space (slot #%d)\n", i + 1);
262 continue;
263 }
264
265 if (!(boardno = ac_register_board((unsigned long)mem+ (LEN_RAM_IO*i),
266 RamIO,i+1))) {
267 iounmap(RamIO);
268 continue;
269 }
270
271 printk(KERN_NOTICE "Applicom ISA card found at mem 0x%lx, irq %d\n", mem + (LEN_RAM_IO*i), irq);
272
273 if (!numisa) {
274 if (request_irq(irq, &ac_interrupt, IRQF_SHARED, "Applicom ISA", &dummy)) {
275 printk(KERN_WARNING "Could not allocate IRQ %d for ISA Applicom device.\n", irq);
276 iounmap(RamIO);
277 apbs[boardno - 1].RamIO = NULL;
278 }
279 else
280 apbs[boardno - 1].irq = irq;
281 }
282 else
283 apbs[boardno - 1].irq = 0;
284
285 numisa++;
286 }
287
288 if (!numisa)
289 printk(KERN_WARNING "ac.o: No valid ISA Applicom boards found "
290 "at mem 0x%lx\n", mem);
291
292 fin:
293 init_waitqueue_head(&FlagSleepRec);
294
295 WriteErrorCount = 0;
296 ReadErrorCount = 0;
297 DeviceErrorCount = 0;
298
299 if (numboards) {
300 ret = misc_register(&ac_miscdev);
301 if (ret) {
302 printk(KERN_WARNING "ac.o: Unable to register misc device\n");
303 goto out;
304 }
305 for (i = 0; i < MAX_BOARD; i++) {
306 int serial;
307 char boardname[(SERIAL_NUMBER - TYPE_CARD) + 1];
308
309 if (!apbs[i].RamIO)
310 continue;
311
312 for (serial = 0; serial < SERIAL_NUMBER - TYPE_CARD; serial++)
313 boardname[serial] = readb(apbs[i].RamIO + TYPE_CARD + serial);
314
315 boardname[serial] = 0;
316
317
318 printk(KERN_INFO "Applicom board %d: %s, PROM V%d.%d",
319 i+1, boardname,
320 (int)(readb(apbs[i].RamIO + VERS) >> 4),
321 (int)(readb(apbs[i].RamIO + VERS) & 0xF));
322
323 serial = (readb(apbs[i].RamIO + SERIAL_NUMBER) << 16) +
324 (readb(apbs[i].RamIO + SERIAL_NUMBER + 1) << 8) +
325 (readb(apbs[i].RamIO + SERIAL_NUMBER + 2) );
326
327 if (serial != 0)
328 printk(" S/N %d\n", serial);
329 else
330 printk("\n");
331 }
332 return 0;
333 }
334
335 else
336 return -ENXIO;
337
338 out:
339 for (i = 0; i < MAX_BOARD; i++) {
340 if (!apbs[i].RamIO)
341 continue;
342 if (apbs[i].irq)
343 free_irq(apbs[i].irq, &dummy);
344 iounmap(apbs[i].RamIO);
345 }
346 pci_disable_device(dev);
347 return ret;
348 }
349
350 module_init(applicom_init);
351 module_exit(applicom_exit);
352
353
354 static ssize_t ac_write(struct file *file, const char __user *buf, size_t count, loff_t * ppos)
355 {
356 unsigned int NumCard; /* Board number 1 -> 8 */
357 unsigned int IndexCard; /* Index board number 0 -> 7 */
358 unsigned char TicCard; /* Board TIC to send */
359 unsigned long flags; /* Current priority */
360 struct st_ram_io st_loc;
361 struct mailbox tmpmailbox;
362 #ifdef DEBUG
363 int c;
364 #endif
365 DECLARE_WAITQUEUE(wait, current);
366
367 if (count != sizeof(struct st_ram_io) + sizeof(struct mailbox)) {
368 static int warncount = 5;
369 if (warncount) {
370 printk(KERN_INFO "Hmmm. write() of Applicom card, length %zd != expected %zd\n",
371 count, sizeof(struct st_ram_io) + sizeof(struct mailbox));
372 warncount--;
373 }
374 return -EINVAL;
375 }
376
377 if(copy_from_user(&st_loc, buf, sizeof(struct st_ram_io)))
378 return -EFAULT;
379
380 if(copy_from_user(&tmpmailbox, &buf[sizeof(struct st_ram_io)],
381 sizeof(struct mailbox)))
382 return -EFAULT;
383
384 NumCard = st_loc.num_card; /* board number to send */
385 TicCard = st_loc.tic_des_from_pc; /* tic number to send */
386 IndexCard = NumCard - 1;
387
388 if((NumCard < 1) || (NumCard > MAX_BOARD) || !apbs[IndexCard].RamIO)
389 return -EINVAL;
390
391 #ifdef DEBUG
392 printk("Write to applicom card #%d. struct st_ram_io follows:",
393 IndexCard+1);
394
395 for (c = 0; c < sizeof(struct st_ram_io);) {
396
397 printk("\n%5.5X: %2.2X", c, ((unsigned char *) &st_loc)[c]);
398
399 for (c++; c % 8 && c < sizeof(struct st_ram_io); c++) {
400 printk(" %2.2X", ((unsigned char *) &st_loc)[c]);
401 }
402 }
403
404 printk("\nstruct mailbox follows:");
405
406 for (c = 0; c < sizeof(struct mailbox);) {
407 printk("\n%5.5X: %2.2X", c, ((unsigned char *) &tmpmailbox)[c]);
408
409 for (c++; c % 8 && c < sizeof(struct mailbox); c++) {
410 printk(" %2.2X", ((unsigned char *) &tmpmailbox)[c]);
411 }
412 }
413
414 printk("\n");
415 #endif
416
417 spin_lock_irqsave(&apbs[IndexCard].mutex, flags);
418
419 /* Test octet ready correct */
420 if(readb(apbs[IndexCard].RamIO + DATA_FROM_PC_READY) > 2) {
421 Dummy = readb(apbs[IndexCard].RamIO + VERS);
422 spin_unlock_irqrestore(&apbs[IndexCard].mutex, flags);
423 printk(KERN_WARNING "APPLICOM driver write error board %d, DataFromPcReady = %d\n",
424 IndexCard,(int)readb(apbs[IndexCard].RamIO + DATA_FROM_PC_READY));
425 DeviceErrorCount++;
426 return -EIO;
427 }
428
429 /* Place ourselves on the wait queue */
430 set_current_state(TASK_INTERRUPTIBLE);
431 add_wait_queue(&apbs[IndexCard].FlagSleepSend, &wait);
432
433 /* Check whether the card is ready for us */
434 while (readb(apbs[IndexCard].RamIO + DATA_FROM_PC_READY) != 0) {
435 Dummy = readb(apbs[IndexCard].RamIO + VERS);
436 /* It's busy. Sleep. */
437
438 spin_unlock_irqrestore(&apbs[IndexCard].mutex, flags);
439 schedule();
440 if (signal_pending(current)) {
441 remove_wait_queue(&apbs[IndexCard].FlagSleepSend,
442 &wait);
443 return -EINTR;
444 }
445 spin_lock_irqsave(&apbs[IndexCard].mutex, flags);
446 set_current_state(TASK_INTERRUPTIBLE);
447 }
448
449 /* We may not have actually slept */
450 set_current_state(TASK_RUNNING);
451 remove_wait_queue(&apbs[IndexCard].FlagSleepSend, &wait);
452
453 writeb(1, apbs[IndexCard].RamIO + DATA_FROM_PC_READY);
454
455 /* Which is best - lock down the pages with rawio and then
456 copy directly, or use bounce buffers? For now we do the latter
457 because it works with 2.2 still */
458 {
459 unsigned char *from = (unsigned char *) &tmpmailbox;
460 void __iomem *to = apbs[IndexCard].RamIO + RAM_FROM_PC;
461 int c;
462
463 for (c = 0; c < sizeof(struct mailbox); c++)
464 writeb(*(from++), to++);
465 }
466
467 writeb(0x20, apbs[IndexCard].RamIO + TIC_OWNER_FROM_PC);
468 writeb(0xff, apbs[IndexCard].RamIO + NUMCARD_OWNER_FROM_PC);
469 writeb(TicCard, apbs[IndexCard].RamIO + TIC_DES_FROM_PC);
470 writeb(NumCard, apbs[IndexCard].RamIO + NUMCARD_DES_FROM_PC);
471 writeb(2, apbs[IndexCard].RamIO + DATA_FROM_PC_READY);
472 writeb(1, apbs[IndexCard].RamIO + RAM_IT_FROM_PC);
473 Dummy = readb(apbs[IndexCard].RamIO + VERS);
474 spin_unlock_irqrestore(&apbs[IndexCard].mutex, flags);
475 return 0;
476 }
477
478 static int do_ac_read(int IndexCard, char __user *buf,
479 struct st_ram_io *st_loc, struct mailbox *mailbox)
480 {
481 void __iomem *from = apbs[IndexCard].RamIO + RAM_TO_PC;
482 unsigned char *to = (unsigned char *)mailbox;
483 #ifdef DEBUG
484 int c;
485 #endif
486
487 st_loc->tic_owner_to_pc = readb(apbs[IndexCard].RamIO + TIC_OWNER_TO_PC);
488 st_loc->numcard_owner_to_pc = readb(apbs[IndexCard].RamIO + NUMCARD_OWNER_TO_PC);
489
490
491 {
492 int c;
493
494 for (c = 0; c < sizeof(struct mailbox); c++)
495 *(to++) = readb(from++);
496 }
497 writeb(1, apbs[IndexCard].RamIO + ACK_FROM_PC_READY);
498 writeb(1, apbs[IndexCard].RamIO + TYP_ACK_FROM_PC);
499 writeb(IndexCard+1, apbs[IndexCard].RamIO + NUMCARD_ACK_FROM_PC);
500 writeb(readb(apbs[IndexCard].RamIO + TIC_OWNER_TO_PC),
501 apbs[IndexCard].RamIO + TIC_ACK_FROM_PC);
502 writeb(2, apbs[IndexCard].RamIO + ACK_FROM_PC_READY);
503 writeb(0, apbs[IndexCard].RamIO + DATA_TO_PC_READY);
504 writeb(2, apbs[IndexCard].RamIO + RAM_IT_FROM_PC);
505 Dummy = readb(apbs[IndexCard].RamIO + VERS);
506
507 #ifdef DEBUG
508 printk("Read from applicom card #%d. struct st_ram_io follows:", NumCard);
509
510 for (c = 0; c < sizeof(struct st_ram_io);) {
511 printk("\n%5.5X: %2.2X", c, ((unsigned char *)st_loc)[c]);
512
513 for (c++; c % 8 && c < sizeof(struct st_ram_io); c++) {
514 printk(" %2.2X", ((unsigned char *)st_loc)[c]);
515 }
516 }
517
518 printk("\nstruct mailbox follows:");
519
520 for (c = 0; c < sizeof(struct mailbox);) {
521 printk("\n%5.5X: %2.2X", c, ((unsigned char *)mailbox)[c]);
522
523 for (c++; c % 8 && c < sizeof(struct mailbox); c++) {
524 printk(" %2.2X", ((unsigned char *)mailbox)[c]);
525 }
526 }
527 printk("\n");
528 #endif
529 return (sizeof(struct st_ram_io) + sizeof(struct mailbox));
530 }
531
532 static ssize_t ac_read (struct file *filp, char __user *buf, size_t count, loff_t *ptr)
533 {
534 unsigned long flags;
535 unsigned int i;
536 unsigned char tmp;
537 int ret = 0;
538 DECLARE_WAITQUEUE(wait, current);
539 #ifdef DEBUG
540 int loopcount=0;
541 #endif
542 /* No need to ratelimit this. Only root can trigger it anyway */
543 if (count != sizeof(struct st_ram_io) + sizeof(struct mailbox)) {
544 printk( KERN_WARNING "Hmmm. read() of Applicom card, length %zd != expected %zd\n",
545 count,sizeof(struct st_ram_io) + sizeof(struct mailbox));
546 return -EINVAL;
547 }
548
549 while(1) {
550 /* Stick ourself on the wait queue */
551 set_current_state(TASK_INTERRUPTIBLE);
552 add_wait_queue(&FlagSleepRec, &wait);
553
554 /* Scan each board, looking for one which has a packet for us */
555 for (i=0; i < MAX_BOARD; i++) {
556 if (!apbs[i].RamIO)
557 continue;
558 spin_lock_irqsave(&apbs[i].mutex, flags);
559
560 tmp = readb(apbs[i].RamIO + DATA_TO_PC_READY);
561
562 if (tmp == 2) {
563 struct st_ram_io st_loc;
564 struct mailbox mailbox;
565
566 /* Got a packet for us */
567 ret = do_ac_read(i, buf, &st_loc, &mailbox);
568 spin_unlock_irqrestore(&apbs[i].mutex, flags);
569 set_current_state(TASK_RUNNING);
570 remove_wait_queue(&FlagSleepRec, &wait);
571
572 if (copy_to_user(buf, &st_loc, sizeof(st_loc)))
573 return -EFAULT;
574 if (copy_to_user(buf + sizeof(st_loc), &mailbox, sizeof(mailbox)))
575 return -EFAULT;
576 return tmp;
577 }
578
579 if (tmp > 2) {
580 /* Got an error */
581 Dummy = readb(apbs[i].RamIO + VERS);
582
583 spin_unlock_irqrestore(&apbs[i].mutex, flags);
584 set_current_state(TASK_RUNNING);
585 remove_wait_queue(&FlagSleepRec, &wait);
586
587 printk(KERN_WARNING "APPLICOM driver read error board %d, DataToPcReady = %d\n",
588 i,(int)readb(apbs[i].RamIO + DATA_TO_PC_READY));
589 DeviceErrorCount++;
590 return -EIO;
591 }
592
593 /* Nothing for us. Try the next board */
594 Dummy = readb(apbs[i].RamIO + VERS);
595 spin_unlock_irqrestore(&apbs[i].mutex, flags);
596
597 } /* per board */
598
599 /* OK - No boards had data for us. Sleep now */
600
601 schedule();
602 remove_wait_queue(&FlagSleepRec, &wait);
603
604 if (signal_pending(current))
605 return -EINTR;
606
607 #ifdef DEBUG
608 if (loopcount++ > 2) {
609 printk(KERN_DEBUG "Looping in ac_read. loopcount %d\n", loopcount);
610 }
611 #endif
612 }
613 }
614
615 static irqreturn_t ac_interrupt(int vec, void *dev_instance)
616 {
617 unsigned int i;
618 unsigned int FlagInt;
619 unsigned int LoopCount;
620 int handled = 0;
621
622 // printk("Applicom interrupt on IRQ %d occurred\n", vec);
623
624 LoopCount = 0;
625
626 do {
627 FlagInt = 0;
628 for (i = 0; i < MAX_BOARD; i++) {
629
630 /* Skip if this board doesn't exist */
631 if (!apbs[i].RamIO)
632 continue;
633
634 spin_lock(&apbs[i].mutex);
635
636 /* Skip if this board doesn't want attention */
637 if(readb(apbs[i].RamIO + RAM_IT_TO_PC) == 0) {
638 spin_unlock(&apbs[i].mutex);
639 continue;
640 }
641
642 handled = 1;
643 FlagInt = 1;
644 writeb(0, apbs[i].RamIO + RAM_IT_TO_PC);
645
646 if (readb(apbs[i].RamIO + DATA_TO_PC_READY) > 2) {
647 printk(KERN_WARNING "APPLICOM driver interrupt err board %d, DataToPcReady = %d\n",
648 i+1,(int)readb(apbs[i].RamIO + DATA_TO_PC_READY));
649 DeviceErrorCount++;
650 }
651
652 if((readb(apbs[i].RamIO + DATA_FROM_PC_READY) > 2) &&
653 (readb(apbs[i].RamIO + DATA_FROM_PC_READY) != 6)) {
654
655 printk(KERN_WARNING "APPLICOM driver interrupt err board %d, DataFromPcReady = %d\n",
656 i+1,(int)readb(apbs[i].RamIO + DATA_FROM_PC_READY));
657 DeviceErrorCount++;
658 }
659
660 if (readb(apbs[i].RamIO + DATA_TO_PC_READY) == 2) { /* mailbox sent by the card ? */
661 if (waitqueue_active(&FlagSleepRec)) {
662 wake_up_interruptible(&FlagSleepRec);
663 }
664 }
665
666 if (readb(apbs[i].RamIO + DATA_FROM_PC_READY) == 0) { /* ram i/o free for write by pc ? */
667 if (waitqueue_active(&apbs[i].FlagSleepSend)) { /* process sleep during read ? */
668 wake_up_interruptible(&apbs[i].FlagSleepSend);
669 }
670 }
671 Dummy = readb(apbs[i].RamIO + VERS);
672
673 if(readb(apbs[i].RamIO + RAM_IT_TO_PC)) {
674 /* There's another int waiting on this card */
675 spin_unlock(&apbs[i].mutex);
676 i--;
677 } else {
678 spin_unlock(&apbs[i].mutex);
679 }
680 }
681 if (FlagInt)
682 LoopCount = 0;
683 else
684 LoopCount++;
685 } while(LoopCount < 2);
686 return IRQ_RETVAL(handled);
687 }
688
689
690
691 static int ac_ioctl(struct inode *inode, struct file *file, unsigned int cmd, unsigned long arg)
692
693 { /* @ ADG ou ATO selon le cas */
694 int i;
695 unsigned char IndexCard;
696 void __iomem *pmem;
697 int ret = 0;
698 volatile unsigned char byte_reset_it;
699 struct st_ram_io *adgl;
700 void __user *argp = (void __user *)arg;
701
702 /* In general, the device is only openable by root anyway, so we're not
703 particularly concerned that bogus ioctls can flood the console. */
704
705 adgl = kmalloc(sizeof(struct st_ram_io), GFP_KERNEL);
706 if (!adgl)
707 return -ENOMEM;
708
709 if (copy_from_user(adgl, argp, sizeof(struct st_ram_io))) {
710 kfree(adgl);
711 return -EFAULT;
712 }
713
714 IndexCard = adgl->num_card-1;
715
716 if(cmd != 6 && ((IndexCard >= MAX_BOARD) || !apbs[IndexCard].RamIO)) {
717 static int warncount = 10;
718 if (warncount) {
719 printk( KERN_WARNING "APPLICOM driver IOCTL, bad board number %d\n",(int)IndexCard+1);
720 warncount--;
721 }
722 kfree(adgl);
723 return -EINVAL;
724 }
725
726 switch (cmd) {
727
728 case 0:
729 pmem = apbs[IndexCard].RamIO;
730 for (i = 0; i < sizeof(struct st_ram_io); i++)
731 ((unsigned char *)adgl)[i]=readb(pmem++);
732 if (copy_to_user(argp, adgl, sizeof(struct st_ram_io)))
733 ret = -EFAULT;
734 break;
735 case 1:
736 pmem = apbs[IndexCard].RamIO + CONF_END_TEST;
737 for (i = 0; i < 4; i++)
738 adgl->conf_end_test[i] = readb(pmem++);
739 for (i = 0; i < 2; i++)
740 adgl->error_code[i] = readb(pmem++);
741 for (i = 0; i < 4; i++)
742 adgl->parameter_error[i] = readb(pmem++);
743 pmem = apbs[IndexCard].RamIO + VERS;
744 adgl->vers = readb(pmem);
745 pmem = apbs[IndexCard].RamIO + TYPE_CARD;
746 for (i = 0; i < 20; i++)
747 adgl->reserv1[i] = readb(pmem++);
748 *(int *)&adgl->reserv1[20] =
749 (readb(apbs[IndexCard].RamIO + SERIAL_NUMBER) << 16) +
750 (readb(apbs[IndexCard].RamIO + SERIAL_NUMBER + 1) << 8) +
751 (readb(apbs[IndexCard].RamIO + SERIAL_NUMBER + 2) );
752
753 if (copy_to_user(argp, adgl, sizeof(struct st_ram_io)))
754 ret = -EFAULT;
755 break;
756 case 2:
757 pmem = apbs[IndexCard].RamIO + CONF_END_TEST;
758 for (i = 0; i < 10; i++)
759 writeb(0xff, pmem++);
760 writeb(adgl->data_from_pc_ready,
761 apbs[IndexCard].RamIO + DATA_FROM_PC_READY);
762
763 writeb(1, apbs[IndexCard].RamIO + RAM_IT_FROM_PC);
764
765 for (i = 0; i < MAX_BOARD; i++) {
766 if (apbs[i].RamIO) {
767 byte_reset_it = readb(apbs[i].RamIO + RAM_IT_TO_PC);
768 }
769 }
770 break;
771 case 3:
772 pmem = apbs[IndexCard].RamIO + TIC_DES_FROM_PC;
773 writeb(adgl->tic_des_from_pc, pmem);
774 break;
775 case 4:
776 pmem = apbs[IndexCard].RamIO + TIC_OWNER_TO_PC;
777 adgl->tic_owner_to_pc = readb(pmem++);
778 adgl->numcard_owner_to_pc = readb(pmem);
779 if (copy_to_user(argp, adgl,sizeof(struct st_ram_io)))
780 ret = -EFAULT;
781 break;
782 case 5:
783 writeb(adgl->num_card, apbs[IndexCard].RamIO + NUMCARD_OWNER_TO_PC);
784 writeb(adgl->num_card, apbs[IndexCard].RamIO + NUMCARD_DES_FROM_PC);
785 writeb(adgl->num_card, apbs[IndexCard].RamIO + NUMCARD_ACK_FROM_PC);
786 writeb(4, apbs[IndexCard].RamIO + DATA_FROM_PC_READY);
787 writeb(1, apbs[IndexCard].RamIO + RAM_IT_FROM_PC);
788 break;
789 case 6:
790 printk(KERN_INFO "APPLICOM driver release .... V2.8.0 ($Revision: 1.30 $)\n");
791 printk(KERN_INFO "Number of installed boards . %d\n", (int) numboards);
792 printk(KERN_INFO "Segment of board ........... %X\n", (int) mem);
793 printk(KERN_INFO "Interrupt IRQ number ....... %d\n", (int) irq);
794 for (i = 0; i < MAX_BOARD; i++) {
795 int serial;
796 char boardname[(SERIAL_NUMBER - TYPE_CARD) + 1];
797
798 if (!apbs[i].RamIO)
799 continue;
800
801 for (serial = 0; serial < SERIAL_NUMBER - TYPE_CARD; serial++)
802 boardname[serial] = readb(apbs[i].RamIO + TYPE_CARD + serial);
803 boardname[serial] = 0;
804
805 printk(KERN_INFO "Prom version board %d ....... V%d.%d %s",
806 i+1,
807 (int)(readb(apbs[IndexCard].RamIO + VERS) >> 4),
808 (int)(readb(apbs[IndexCard].RamIO + VERS) & 0xF),
809 boardname);
810
811
812 serial = (readb(apbs[i].RamIO + SERIAL_NUMBER) << 16) +
813 (readb(apbs[i].RamIO + SERIAL_NUMBER + 1) << 8) +
814 (readb(apbs[i].RamIO + SERIAL_NUMBER + 2) );
815
816 if (serial != 0)
817 printk(" S/N %d\n", serial);
818 else
819 printk("\n");
820 }
821 if (DeviceErrorCount != 0)
822 printk(KERN_INFO "DeviceErrorCount ........... %d\n", DeviceErrorCount);
823 if (ReadErrorCount != 0)
824 printk(KERN_INFO "ReadErrorCount ............. %d\n", ReadErrorCount);
825 if (WriteErrorCount != 0)
826 printk(KERN_INFO "WriteErrorCount ............ %d\n", WriteErrorCount);
827 if (waitqueue_active(&FlagSleepRec))
828 printk(KERN_INFO "Process in read pending\n");
829 for (i = 0; i < MAX_BOARD; i++) {
830 if (apbs[i].RamIO && waitqueue_active(&apbs[i].FlagSleepSend))
831 printk(KERN_INFO "Process in write pending board %d\n",i+1);
832 }
833 break;
834 default:
835 ret = -ENOTTY;
836 break;
837 }
838 Dummy = readb(apbs[IndexCard].RamIO + VERS);
839 kfree(adgl);
840 return 0;
841 }
842
Support for the Chinese Samsung S3C2440 based development boards