| // SPDX-License-Identifier: GPL-2.0-only |
| /* |
| * Goodix Touchscreen firmware upload support |
| * |
| * Copyright (c) 2021 Hans de Goede <hdegoede@redhat.com> |
| * |
| * This is a rewrite of gt9xx_update.c from the Allwinner H3 BSP which is: |
| * Copyright (c) 2010 - 2012 Goodix Technology. |
| * Author: andrew@goodix.com |
| */ |
| |
| #include <linux/device.h> |
| #include <linux/firmware.h> |
| #include <linux/i2c.h> |
| #include "goodix.h" |
| |
| #define GOODIX_FW_HEADER_LENGTH sizeof(struct goodix_fw_header) |
| #define GOODIX_FW_SECTION_LENGTH 0x2000 |
| #define GOODIX_FW_DSP_LENGTH 0x1000 |
| #define GOODIX_FW_UPLOAD_ADDRESS 0xc000 |
| |
| #define GOODIX_CFG_LOC_HAVE_KEY 7 |
| #define GOODIX_CFG_LOC_DRVA_NUM 27 |
| #define GOODIX_CFG_LOC_DRVB_NUM 28 |
| #define GOODIX_CFG_LOC_SENS_NUM 29 |
| |
| struct goodix_fw_header { |
| u8 hw_info[4]; |
| u8 pid[8]; |
| u8 vid[2]; |
| } __packed; |
| |
| static u16 goodix_firmware_checksum(const u8 *data, int size) |
| { |
| u16 checksum = 0; |
| int i; |
| |
| for (i = 0; i < size; i += 2) |
| checksum += (data[i] << 8) + data[i + 1]; |
| |
| return checksum; |
| } |
| |
| static int goodix_firmware_verify(struct device *dev, const struct firmware *fw) |
| { |
| const struct goodix_fw_header *fw_header; |
| size_t expected_size; |
| const u8 *data; |
| u16 checksum; |
| char buf[9]; |
| |
| expected_size = GOODIX_FW_HEADER_LENGTH + 4 * GOODIX_FW_SECTION_LENGTH + |
| GOODIX_FW_DSP_LENGTH; |
| if (fw->size != expected_size) { |
| dev_err(dev, "Firmware has wrong size, expected %zu got %zu\n", |
| expected_size, fw->size); |
| return -EINVAL; |
| } |
| |
| data = fw->data + GOODIX_FW_HEADER_LENGTH; |
| checksum = goodix_firmware_checksum(data, 4 * GOODIX_FW_SECTION_LENGTH); |
| if (checksum) { |
| dev_err(dev, "Main firmware checksum error\n"); |
| return -EINVAL; |
| } |
| |
| data += 4 * GOODIX_FW_SECTION_LENGTH; |
| checksum = goodix_firmware_checksum(data, GOODIX_FW_DSP_LENGTH); |
| if (checksum) { |
| dev_err(dev, "DSP firmware checksum error\n"); |
| return -EINVAL; |
| } |
| |
| fw_header = (const struct goodix_fw_header *)fw->data; |
| dev_info(dev, "Firmware hardware info %02x%02x%02x%02x\n", |
| fw_header->hw_info[0], fw_header->hw_info[1], |
| fw_header->hw_info[2], fw_header->hw_info[3]); |
| /* pid is a 8 byte buffer containing a string, weird I know */ |
| memcpy(buf, fw_header->pid, 8); |
| buf[8] = 0; |
| dev_info(dev, "Firmware PID: %s VID: %02x%02x\n", buf, |
| fw_header->vid[0], fw_header->vid[1]); |
| return 0; |
| } |
| |
| static int goodix_enter_upload_mode(struct i2c_client *client) |
| { |
| int tries, error; |
| u8 val; |
| |
| tries = 200; |
| do { |
| error = goodix_i2c_write_u8(client, |
| GOODIX_REG_MISCTL_SWRST, 0x0c); |
| if (error) |
| return error; |
| |
| error = goodix_i2c_read(client, |
| GOODIX_REG_MISCTL_SWRST, &val, 1); |
| if (error) |
| return error; |
| |
| if (val == 0x0c) |
| break; |
| } while (--tries); |
| |
| if (!tries) { |
| dev_err(&client->dev, "Error could not hold ss51 & dsp\n"); |
| return -EIO; |
| } |
| |
| /* DSP_CK and DSP_ALU_CK PowerOn */ |
| error = goodix_i2c_write_u8(client, GOODIX_REG_MISCTL_DSP_CTL, 0x00); |
| if (error) |
| return error; |
| |
| /* Disable watchdog */ |
| error = goodix_i2c_write_u8(client, GOODIX_REG_MISCTL_TMR0_EN, 0x00); |
| if (error) |
| return error; |
| |
| /* Clear cache enable */ |
| error = goodix_i2c_write_u8(client, GOODIX_REG_MISCTL_CACHE_EN, 0x00); |
| if (error) |
| return error; |
| |
| /* Set boot from SRAM */ |
| error = goodix_i2c_write_u8(client, GOODIX_REG_MISCTL_BOOTCTL, 0x02); |
| if (error) |
| return error; |
| |
| /* Software reboot */ |
| error = goodix_i2c_write_u8(client, |
| GOODIX_REG_MISCTL_CPU_SWRST_PULSE, 0x01); |
| if (error) |
| return error; |
| |
| /* Clear control flag */ |
| error = goodix_i2c_write_u8(client, GOODIX_REG_MISCTL_BOOTCTL, 0x00); |
| if (error) |
| return error; |
| |
| /* Set scramble */ |
| error = goodix_i2c_write_u8(client, GOODIX_REG_MISCTL_BOOT_OPT, 0x00); |
| if (error) |
| return error; |
| |
| /* Enable accessing code */ |
| error = goodix_i2c_write_u8(client, GOODIX_REG_MISCTL_MEM_CD_EN, 0x01); |
| if (error) |
| return error; |
| |
| return 0; |
| } |
| |
| static int goodix_start_firmware(struct i2c_client *client) |
| { |
| int error; |
| u8 val; |
| |
| /* Init software watchdog */ |
| error = goodix_i2c_write_u8(client, GOODIX_REG_SW_WDT, 0xaa); |
| if (error) |
| return error; |
| |
| /* Release SS51 & DSP */ |
| error = goodix_i2c_write_u8(client, GOODIX_REG_MISCTL_SWRST, 0x00); |
| if (error) |
| return error; |
| |
| error = goodix_i2c_read(client, GOODIX_REG_SW_WDT, &val, 1); |
| if (error) |
| return error; |
| |
| /* The value we've written to SW_WDT should have been cleared now */ |
| if (val == 0xaa) { |
| dev_err(&client->dev, "Error SW_WDT reg not cleared on fw startup\n"); |
| return -EIO; |
| } |
| |
| /* Re-init software watchdog */ |
| error = goodix_i2c_write_u8(client, GOODIX_REG_SW_WDT, 0xaa); |
| if (error) |
| return error; |
| |
| return 0; |
| } |
| |
| static int goodix_firmware_upload(struct goodix_ts_data *ts) |
| { |
| const struct firmware *fw; |
| char fw_name[64]; |
| const u8 *data; |
| int error; |
| |
| snprintf(fw_name, sizeof(fw_name), "goodix/%s", ts->firmware_name); |
| |
| error = request_firmware(&fw, fw_name, &ts->client->dev); |
| if (error) { |
| dev_err(&ts->client->dev, "Firmware request error %d\n", error); |
| return error; |
| } |
| |
| error = goodix_firmware_verify(&ts->client->dev, fw); |
| if (error) |
| goto release; |
| |
| error = goodix_reset_no_int_sync(ts); |
| if (error) |
| goto release; |
| |
| error = goodix_enter_upload_mode(ts->client); |
| if (error) |
| goto release; |
| |
| /* Select SRAM bank 0 and upload section 1 & 2 */ |
| error = goodix_i2c_write_u8(ts->client, |
| GOODIX_REG_MISCTL_SRAM_BANK, 0x00); |
| if (error) |
| goto release; |
| |
| data = fw->data + GOODIX_FW_HEADER_LENGTH; |
| error = goodix_i2c_write(ts->client, GOODIX_FW_UPLOAD_ADDRESS, |
| data, 2 * GOODIX_FW_SECTION_LENGTH); |
| if (error) |
| goto release; |
| |
| /* Select SRAM bank 1 and upload section 3 & 4 */ |
| error = goodix_i2c_write_u8(ts->client, |
| GOODIX_REG_MISCTL_SRAM_BANK, 0x01); |
| if (error) |
| goto release; |
| |
| data += 2 * GOODIX_FW_SECTION_LENGTH; |
| error = goodix_i2c_write(ts->client, GOODIX_FW_UPLOAD_ADDRESS, |
| data, 2 * GOODIX_FW_SECTION_LENGTH); |
| if (error) |
| goto release; |
| |
| /* Select SRAM bank 2 and upload the DSP firmware */ |
| error = goodix_i2c_write_u8(ts->client, |
| GOODIX_REG_MISCTL_SRAM_BANK, 0x02); |
| if (error) |
| goto release; |
| |
| data += 2 * GOODIX_FW_SECTION_LENGTH; |
| error = goodix_i2c_write(ts->client, GOODIX_FW_UPLOAD_ADDRESS, |
| data, GOODIX_FW_DSP_LENGTH); |
| if (error) |
| goto release; |
| |
| error = goodix_start_firmware(ts->client); |
| if (error) |
| goto release; |
| |
| error = goodix_int_sync(ts); |
| release: |
| release_firmware(fw); |
| return error; |
| } |
| |
| static int goodix_prepare_bak_ref(struct goodix_ts_data *ts) |
| { |
| u8 have_key, driver_num, sensor_num; |
| |
| if (ts->bak_ref) |
| return 0; /* Already done */ |
| |
| have_key = (ts->config[GOODIX_CFG_LOC_HAVE_KEY] & 0x01); |
| |
| driver_num = (ts->config[GOODIX_CFG_LOC_DRVA_NUM] & 0x1f) + |
| (ts->config[GOODIX_CFG_LOC_DRVB_NUM] & 0x1f); |
| if (have_key) |
| driver_num--; |
| |
| sensor_num = (ts->config[GOODIX_CFG_LOC_SENS_NUM] & 0x0f) + |
| ((ts->config[GOODIX_CFG_LOC_SENS_NUM] >> 4) & 0x0f); |
| |
| dev_dbg(&ts->client->dev, "Drv %d Sen %d Key %d\n", |
| driver_num, sensor_num, have_key); |
| |
| ts->bak_ref_len = (driver_num * (sensor_num - 2) + 2) * 2; |
| |
| ts->bak_ref = devm_kzalloc(&ts->client->dev, |
| ts->bak_ref_len, GFP_KERNEL); |
| if (!ts->bak_ref) |
| return -ENOMEM; |
| |
| /* |
| * The bak_ref array contains the backup of an array of (self/auto) |
| * calibration related values which the Android version of the driver |
| * stores on the filesystem so that it can be restored after reboot. |
| * The mainline kernel never writes directly to the filesystem like |
| * this, we always start will all the values which give a correction |
| * factor in approx. the -20 - +20 range (in 2s complement) set to 0. |
| * |
| * Note the touchscreen works fine without restoring the reference |
| * values after a reboot / power-cycle. |
| * |
| * The last 2 bytes are a 16 bits unsigned checksum which is expected |
| * to make the addition al all 16 bit unsigned values in the array add |
| * up to 1 (rather then the usual 0), so we must set the last byte to 1. |
| */ |
| ts->bak_ref[ts->bak_ref_len - 1] = 1; |
| |
| return 0; |
| } |
| |
| static int goodix_send_main_clock(struct goodix_ts_data *ts) |
| { |
| u32 main_clk = 54; /* Default main clock */ |
| u8 checksum = 0; |
| int i; |
| |
| device_property_read_u32(&ts->client->dev, |
| "goodix,main-clk", &main_clk); |
| |
| for (i = 0; i < (GOODIX_MAIN_CLK_LEN - 1); i++) { |
| ts->main_clk[i] = main_clk; |
| checksum += main_clk; |
| } |
| |
| /* The value of all bytes combines must be 0 */ |
| ts->main_clk[GOODIX_MAIN_CLK_LEN - 1] = 256 - checksum; |
| |
| return goodix_i2c_write(ts->client, GOODIX_REG_MAIN_CLK, |
| ts->main_clk, GOODIX_MAIN_CLK_LEN); |
| } |
| |
| int goodix_firmware_check(struct goodix_ts_data *ts) |
| { |
| device_property_read_string(&ts->client->dev, |
| "firmware-name", &ts->firmware_name); |
| if (!ts->firmware_name) |
| return 0; |
| |
| if (ts->irq_pin_access_method == IRQ_PIN_ACCESS_NONE) { |
| dev_err(&ts->client->dev, "Error no IRQ-pin access method, cannot upload fw.\n"); |
| return -EINVAL; |
| } |
| |
| dev_info(&ts->client->dev, "Touchscreen controller needs fw-upload\n"); |
| ts->load_cfg_from_disk = true; |
| |
| return goodix_firmware_upload(ts); |
| } |
| |
| bool goodix_handle_fw_request(struct goodix_ts_data *ts) |
| { |
| int error; |
| u8 val; |
| |
| error = goodix_i2c_read(ts->client, GOODIX_REG_REQUEST, &val, 1); |
| if (error) |
| return false; |
| |
| switch (val) { |
| case GOODIX_RQST_RESPONDED: |
| /* |
| * If we read back our own last ack the IRQ was not for |
| * a request. |
| */ |
| return false; |
| case GOODIX_RQST_CONFIG: |
| error = goodix_send_cfg(ts, ts->config, ts->chip->config_len); |
| if (error) |
| return false; |
| |
| break; |
| case GOODIX_RQST_BAK_REF: |
| error = goodix_prepare_bak_ref(ts); |
| if (error) |
| return false; |
| |
| error = goodix_i2c_write(ts->client, GOODIX_REG_BAK_REF, |
| ts->bak_ref, ts->bak_ref_len); |
| if (error) |
| return false; |
| |
| break; |
| case GOODIX_RQST_RESET: |
| error = goodix_firmware_upload(ts); |
| if (error) |
| return false; |
| |
| break; |
| case GOODIX_RQST_MAIN_CLOCK: |
| error = goodix_send_main_clock(ts); |
| if (error) |
| return false; |
| |
| break; |
| case GOODIX_RQST_UNKNOWN: |
| case GOODIX_RQST_IDLE: |
| break; |
| default: |
| dev_err_ratelimited(&ts->client->dev, "Unknown Request: 0x%02x\n", val); |
| } |
| |
| /* Ack the request */ |
| goodix_i2c_write_u8(ts->client, |
| GOODIX_REG_REQUEST, GOODIX_RQST_RESPONDED); |
| return true; |
| } |
| |
| void goodix_save_bak_ref(struct goodix_ts_data *ts) |
| { |
| int error; |
| u8 val; |
| |
| if (!ts->firmware_name) |
| return; |
| |
| error = goodix_i2c_read(ts->client, GOODIX_REG_STATUS, &val, 1); |
| if (error) |
| return; |
| |
| if (!(val & 0x80)) |
| return; |
| |
| error = goodix_i2c_read(ts->client, GOODIX_REG_BAK_REF, |
| ts->bak_ref, ts->bak_ref_len); |
| if (error) { |
| memset(ts->bak_ref, 0, ts->bak_ref_len); |
| ts->bak_ref[ts->bak_ref_len - 1] = 1; |
| } |
| } |