1/*-
2 * Copyright (c) 2006 Bernd Walter.  All rights reserved.
3 * Copyright (c) 2006 M. Warner Losh.  All rights reserved.
4 * Copyright (c) 2017 Marius Strobl <marius@FreeBSD.org>
5 *
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
8 * are met:
9 * 1. Redistributions of source code must retain the above copyright
10 *    notice, this list of conditions and the following disclaimer.
11 * 2. Redistributions in binary form must reproduce the above copyright
12 *    notice, this list of conditions and the following disclaimer in the
13 *    documentation and/or other materials provided with the distribution.
14 *
15 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
16 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
17 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
18 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
19 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
20 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
21 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
22 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
23 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
24 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
25 *
26 * Portions of this software may have been developed with reference to
27 * the SD Simplified Specification.  The following disclaimer may apply:
28 *
29 * The following conditions apply to the release of the simplified
30 * specification ("Simplified Specification") by the SD Card Association and
31 * the SD Group. The Simplified Specification is a subset of the complete SD
32 * Specification which is owned by the SD Card Association and the SD
33 * Group. This Simplified Specification is provided on a non-confidential
34 * basis subject to the disclaimers below. Any implementation of the
35 * Simplified Specification may require a license from the SD Card
36 * Association, SD Group, SD-3C LLC or other third parties.
37 *
38 * Disclaimers:
39 *
40 * The information contained in the Simplified Specification is presented only
41 * as a standard specification for SD Cards and SD Host/Ancillary products and
42 * is provided "AS-IS" without any representations or warranties of any
43 * kind. No responsibility is assumed by the SD Group, SD-3C LLC or the SD
44 * Card Association for any damages, any infringements of patents or other
45 * right of the SD Group, SD-3C LLC, the SD Card Association or any third
46 * parties, which may result from its use. No license is granted by
47 * implication, estoppel or otherwise under any patent or other rights of the
48 * SD Group, SD-3C LLC, the SD Card Association or any third party. Nothing
49 * herein shall be construed as an obligation by the SD Group, the SD-3C LLC
50 * or the SD Card Association to disclose or distribute any technical
51 * information, know-how or other confidential information to any third party.
52 */
53
54#include <sys/cdefs.h>
55__FBSDID("$FreeBSD: stable/10/sys/dev/mmc/mmcsd.c 338638 2018-09-13 10:18:50Z marius $");
56
57#include <sys/param.h>
58#include <sys/systm.h>
59#include <sys/bio.h>
60#include <sys/bus.h>
61#include <sys/conf.h>
62#include <sys/endian.h>
63#include <sys/fcntl.h>
64#include <sys/ioccom.h>
65#include <sys/kernel.h>
66#include <sys/kthread.h>
67#include <sys/lock.h>
68#include <sys/malloc.h>
69#include <sys/module.h>
70#include <sys/mutex.h>
71#include <sys/priv.h>
72#include <sys/slicer.h>
73#include <sys/sysctl.h>
74#include <sys/time.h>
75
76#include <geom/geom.h>
77#include <geom/geom_disk.h>
78
79#include <dev/mmc/bridge.h>
80#include <dev/mmc/mmc_ioctl.h>
81#include <dev/mmc/mmc_subr.h>
82#include <dev/mmc/mmcbrvar.h>
83#include <dev/mmc/mmcreg.h>
84#include <dev/mmc/mmcvar.h>
85
86#include "mmcbus_if.h"
87
88#if __FreeBSD_version < 800002
89#define	kproc_create	kthread_create
90#define	kproc_exit	kthread_exit
91#endif
92
93#define	MMCSD_CMD_RETRIES	5
94
95#define	MMCSD_FMT_BOOT		"mmcsd%dboot"
96#define	MMCSD_FMT_GP		"mmcsd%dgp"
97#define	MMCSD_FMT_RPMB		"mmcsd%drpmb"
98#define	MMCSD_LABEL_ENH		"enh"
99
100#define	MMCSD_PART_NAMELEN	(16 + 1)
101
102struct mmcsd_softc;
103
104struct mmcsd_part {
105	struct mtx disk_mtx;
106	struct mtx ioctl_mtx;
107	struct mmcsd_softc *sc;
108	struct disk *disk;
109	struct proc *p;
110	struct bio_queue_head bio_queue;
111	daddr_t eblock, eend;	/* Range remaining after the last erase. */
112	u_int cnt;
113	u_int type;
114	int running;
115	int suspend;
116	int ioctl;
117	bool ro;
118	char name[MMCSD_PART_NAMELEN];
119};
120
121struct mmcsd_softc {
122	device_t dev;
123	device_t mmcbus;
124	struct mmcsd_part *part[MMC_PART_MAX];
125	enum mmc_card_mode mode;
126	u_int max_data;		/* Maximum data size [blocks] */
127	u_int erase_sector;	/* Device native erase sector size [blocks] */
128	uint8_t	high_cap;	/* High Capacity device (block addressed) */
129	uint8_t part_curr;	/* Partition currently switched to */
130	uint8_t ext_csd[MMC_EXTCSD_SIZE];
131	uint16_t rca;
132	uint32_t flags;
133#define	MMCSD_INAND_CMD38	0x0001
134#define	MMCSD_USE_TRIM		0x0002
135#define	MMCSD_FLUSH_CACHE	0x0004
136#define	MMCSD_DIRTY		0x0008
137	uint32_t cmd6_time;	/* Generic switch timeout [us] */
138	uint32_t part_time;	/* Partition switch timeout [us] */
139	off_t enh_base;		/* Enhanced user data area slice base ... */
140	off_t enh_size;		/* ... and size [bytes] */
141	int log_count;
142	struct timeval log_time;
143	struct cdev *rpmb_dev;
144};
145
146static const char *errmsg[] =
147{
148	"None",
149	"Timeout",
150	"Bad CRC",
151	"Fifo",
152	"Failed",
153	"Invalid",
154	"NO MEMORY"
155};
156
157static SYSCTL_NODE(_hw, OID_AUTO, mmcsd, CTLFLAG_RD, NULL, "mmcsd driver");
158
159static int mmcsd_cache = 1;
160TUNABLE_INT("hw.mmcsd.cache", &mmcsd_cache);
161SYSCTL_INT(_hw_mmcsd, OID_AUTO, cache, CTLFLAG_RDTUN, &mmcsd_cache, 0,
162    "Device R/W cache enabled if present");
163
164#define	LOG_PPS		5 /* Log no more than 5 errors per second. */
165
166/* bus entry points */
167static int mmcsd_attach(device_t dev);
168static int mmcsd_detach(device_t dev);
169static int mmcsd_probe(device_t dev);
170static int mmcsd_shutdown(device_t dev);
171
172/* disk routines */
173static int mmcsd_close(struct disk *dp);
174static int mmcsd_dump(void *arg, void *virtual, vm_offset_t physical,
175    off_t offset, size_t length);
176static int mmcsd_getattr(struct bio *);
177static int mmcsd_ioctl_disk(struct disk *disk, u_long cmd, void *data,
178    int fflag, struct thread *td);
179static void mmcsd_strategy(struct bio *bp);
180static void mmcsd_task(void *arg);
181
182/* RMPB cdev interface */
183static int mmcsd_ioctl_rpmb(struct cdev *dev, u_long cmd, caddr_t data,
184    int fflag, struct thread *td);
185
186static void mmcsd_add_part(struct mmcsd_softc *sc, u_int type,
187    const char *name, u_int cnt, off_t media_size, bool ro);
188static int mmcsd_bus_bit_width(device_t dev);
189static daddr_t mmcsd_delete(struct mmcsd_part *part, struct bio *bp);
190static const char *mmcsd_errmsg(int e);
191static int mmcsd_flush_cache(struct mmcsd_softc *sc);
192static int mmcsd_ioctl(struct mmcsd_part *part, u_long cmd, void *data,
193    int fflag, struct thread *td);
194static int mmcsd_ioctl_cmd(struct mmcsd_part *part, struct mmc_ioc_cmd *mic,
195    int fflag);
196static uintmax_t mmcsd_pretty_size(off_t size, char *unit);
197static daddr_t mmcsd_rw(struct mmcsd_part *part, struct bio *bp);
198static int mmcsd_set_blockcount(struct mmcsd_softc *sc, u_int count, bool rel);
199static int mmcsd_slicer(device_t dev, const char *provider,
200    struct flash_slice *slices, int *nslices);
201static int mmcsd_switch_part(device_t bus, device_t dev, uint16_t rca,
202    u_int part);
203
204#define	MMCSD_DISK_LOCK(_part)		mtx_lock(&(_part)->disk_mtx)
205#define	MMCSD_DISK_UNLOCK(_part)	mtx_unlock(&(_part)->disk_mtx)
206#define	MMCSD_DISK_LOCK_INIT(_part)					\
207	mtx_init(&(_part)->disk_mtx, (_part)->name, "mmcsd disk", MTX_DEF)
208#define	MMCSD_DISK_LOCK_DESTROY(_part)	mtx_destroy(&(_part)->disk_mtx);
209#define	MMCSD_DISK_ASSERT_LOCKED(_part)					\
210	mtx_assert(&(_part)->disk_mtx, MA_OWNED);
211#define	MMCSD_DISK_ASSERT_UNLOCKED(_part)				\
212	mtx_assert(&(_part)->disk_mtx, MA_NOTOWNED);
213
214#define	MMCSD_IOCTL_LOCK(_part)		mtx_lock(&(_part)->ioctl_mtx)
215#define	MMCSD_IOCTL_UNLOCK(_part)	mtx_unlock(&(_part)->ioctl_mtx)
216#define	MMCSD_IOCTL_LOCK_INIT(_part)					\
217	mtx_init(&(_part)->ioctl_mtx, (_part)->name, "mmcsd IOCTL", MTX_DEF)
218#define	MMCSD_IOCTL_LOCK_DESTROY(_part)	mtx_destroy(&(_part)->ioctl_mtx);
219#define	MMCSD_IOCTL_ASSERT_LOCKED(_part)				\
220	mtx_assert(&(_part)->ioctl_mtx, MA_OWNED);
221#define	MMCSD_IOCLT_ASSERT_UNLOCKED(_part)				\
222	mtx_assert(&(_part)->ioctl_mtx, MA_NOTOWNED);
223
224static int
225mmcsd_probe(device_t dev)
226{
227
228	device_quiet(dev);
229	device_set_desc(dev, "MMC/SD Memory Card");
230	return (0);
231}
232
233static int
234mmcsd_attach(device_t dev)
235{
236	device_t mmcbus;
237	struct mmcsd_softc *sc;
238	const uint8_t *ext_csd;
239	off_t erase_size, sector_size, size, wp_size;
240	uintmax_t bytes;
241	int err, i;
242	uint32_t quirks;
243	uint8_t rev;
244	bool comp, ro;
245	char unit[2];
246
247	sc = device_get_softc(dev);
248	sc->dev = dev;
249	sc->mmcbus = mmcbus = device_get_parent(dev);
250	sc->mode = mmc_get_card_type(dev);
251	/*
252	 * Note that in principle with an SDHCI-like re-tuning implementation,
253	 * the maximum data size can change at runtime due to a device removal/
254	 * insertion that results in switches to/from a transfer mode involving
255	 * re-tuning, iff there are multiple devices on a given bus.  Until now
256	 * mmc(4) lacks support for rescanning already attached buses, however,
257	 * and sdhci(4) to date has no support for shared buses in the first
258	 * place either.
259	 */
260	sc->max_data = mmc_get_max_data(dev);
261	sc->high_cap = mmc_get_high_cap(dev);
262	sc->rca = mmc_get_rca(dev);
263	sc->cmd6_time = mmc_get_cmd6_timeout(dev);
264	quirks = mmc_get_quirks(dev);
265
266	/* Only MMC >= 4.x devices support EXT_CSD. */
267	if (mmc_get_spec_vers(dev) >= 4) {
268		MMCBUS_ACQUIRE_BUS(mmcbus, dev);
269		err = mmc_send_ext_csd(mmcbus, dev, sc->ext_csd);
270		MMCBUS_RELEASE_BUS(mmcbus, dev);
271		if (err != MMC_ERR_NONE) {
272			device_printf(dev, "Error reading EXT_CSD %s\n",
273			    mmcsd_errmsg(err));
274			return (ENXIO);
275		}
276	}
277	ext_csd = sc->ext_csd;
278
279	if ((quirks & MMC_QUIRK_INAND_CMD38) != 0) {
280		if (mmc_get_spec_vers(dev) < 4) {
281			device_printf(dev,
282			    "MMC_QUIRK_INAND_CMD38 set but no EXT_CSD\n");
283			return (EINVAL);
284		}
285		sc->flags |= MMCSD_INAND_CMD38;
286	}
287
288	/*
289	 * EXT_CSD_SEC_FEATURE_SUPPORT_GB_CL_EN denotes support for both
290	 * insecure and secure TRIM.
291	 */
292	if ((ext_csd[EXT_CSD_SEC_FEATURE_SUPPORT] &
293	    EXT_CSD_SEC_FEATURE_SUPPORT_GB_CL_EN) != 0 &&
294	    (quirks & MMC_QUIRK_BROKEN_TRIM) == 0) {
295		if (bootverbose)
296			device_printf(dev, "taking advantage of TRIM\n");
297		sc->flags |= MMCSD_USE_TRIM;
298		sc->erase_sector = 1;
299	} else
300		sc->erase_sector = mmc_get_erase_sector(dev);
301
302	/*
303	 * Enhanced user data area and general purpose partitions are only
304	 * supported in revision 1.4 (EXT_CSD_REV == 4) and later, the RPMB
305	 * partition in revision 1.5 (MMC v4.41, EXT_CSD_REV == 5) and later.
306	 */
307	rev = ext_csd[EXT_CSD_REV];
308
309	/*
310	 * With revision 1.5 (MMC v4.5, EXT_CSD_REV == 6) and later, take
311	 * advantage of the device R/W cache if present and useage is not
312	 * disabled.
313	 */
314	if (rev >= 6 && mmcsd_cache != 0) {
315		size = le32dec(&ext_csd[EXT_CSD_CACHE_SIZE]);
316		if (bootverbose)
317			device_printf(dev, "cache size %juKB\n", size);
318		if (size > 0) {
319			MMCBUS_ACQUIRE_BUS(mmcbus, dev);
320			err = mmc_switch(mmcbus, dev, sc->rca,
321			    EXT_CSD_CMD_SET_NORMAL, EXT_CSD_CACHE_CTRL,
322			    EXT_CSD_CACHE_CTRL_CACHE_EN, sc->cmd6_time, true);
323			MMCBUS_RELEASE_BUS(mmcbus, dev);
324			if (err != MMC_ERR_NONE)
325				device_printf(dev, "failed to enable cache\n");
326			else
327				sc->flags |= MMCSD_FLUSH_CACHE;
328		}
329	}
330
331	/*
332	 * Ignore user-creatable enhanced user data area and general purpose
333	 * partitions partitions as long as partitioning hasn't been finished.
334	 */
335	comp = (ext_csd[EXT_CSD_PART_SET] & EXT_CSD_PART_SET_COMPLETED) != 0;
336
337	/*
338	 * Add enhanced user data area slice, unless it spans the entirety of
339	 * the user data area.  The enhanced area is of a multiple of high
340	 * capacity write protect groups ((ERASE_GRP_SIZE + HC_WP_GRP_SIZE) *
341	 * 512 KB) and its offset given in either sectors or bytes, depending
342	 * on whether it's a high capacity device or not.
343	 * NB: The slicer and its slices need to be registered before adding
344	 *     the disk for the corresponding user data area as re-tasting is
345	 *     racy.
346	 */
347	sector_size = mmc_get_sector_size(dev);
348	size = ext_csd[EXT_CSD_ENH_SIZE_MULT] +
349	    (ext_csd[EXT_CSD_ENH_SIZE_MULT + 1] << 8) +
350	    (ext_csd[EXT_CSD_ENH_SIZE_MULT + 2] << 16);
351	if (rev >= 4 && comp == TRUE && size > 0 &&
352	    (ext_csd[EXT_CSD_PART_SUPPORT] &
353	    EXT_CSD_PART_SUPPORT_ENH_ATTR_EN) != 0 &&
354	    (ext_csd[EXT_CSD_PART_ATTR] & (EXT_CSD_PART_ATTR_ENH_USR)) != 0) {
355		erase_size = ext_csd[EXT_CSD_ERASE_GRP_SIZE] * 1024 *
356		    MMC_SECTOR_SIZE;
357		wp_size = ext_csd[EXT_CSD_HC_WP_GRP_SIZE];
358		size *= erase_size * wp_size;
359		if (size != mmc_get_media_size(dev) * sector_size) {
360			sc->enh_size = size;
361			sc->enh_base =
362			    le32dec(&ext_csd[EXT_CSD_ENH_START_ADDR]) *
363			    (sc->high_cap != 0 ? MMC_SECTOR_SIZE : 1);
364		} else if (bootverbose)
365			device_printf(dev,
366			    "enhanced user data area spans entire device\n");
367	}
368
369	/*
370	 * Add default partition.  This may be the only one or the user
371	 * data area in case partitions are supported.
372	 */
373	ro = mmc_get_read_only(dev);
374	mmcsd_add_part(sc, EXT_CSD_PART_CONFIG_ACC_DEFAULT, "mmcsd",
375	    device_get_unit(dev), mmc_get_media_size(dev) * sector_size, ro);
376
377	if (mmc_get_spec_vers(dev) < 3)
378		return (0);
379
380	/* Belatedly announce enhanced user data slice. */
381	if (sc->enh_size != 0) {
382		bytes = mmcsd_pretty_size(size, unit);
383		printf(FLASH_SLICES_FMT ": %ju%sB enhanced user data area "
384		    "slice offset 0x%jx at %s\n", device_get_nameunit(dev),
385		    MMCSD_LABEL_ENH, bytes, unit, (uintmax_t)sc->enh_base,
386		    device_get_nameunit(dev));
387	}
388
389	/*
390	 * Determine partition switch timeout (provided in units of 10 ms)
391	 * and ensure it's at least 300 ms as some eMMC chips lie.
392	 */
393	sc->part_time = max(ext_csd[EXT_CSD_PART_SWITCH_TO] * 10 * 1000,
394	    300 * 1000);
395
396	/* Add boot partitions, which are of a fixed multiple of 128 KB. */
397	size = ext_csd[EXT_CSD_BOOT_SIZE_MULT] * MMC_BOOT_RPMB_BLOCK_SIZE;
398	if (size > 0 && (mmcbr_get_caps(mmcbus) & MMC_CAP_BOOT_NOACC) == 0) {
399		mmcsd_add_part(sc, EXT_CSD_PART_CONFIG_ACC_BOOT0,
400		    MMCSD_FMT_BOOT, 0, size,
401		    ro | ((ext_csd[EXT_CSD_BOOT_WP_STATUS] &
402		    EXT_CSD_BOOT_WP_STATUS_BOOT0_MASK) != 0));
403		mmcsd_add_part(sc, EXT_CSD_PART_CONFIG_ACC_BOOT1,
404		    MMCSD_FMT_BOOT, 1, size,
405		    ro | ((ext_csd[EXT_CSD_BOOT_WP_STATUS] &
406		    EXT_CSD_BOOT_WP_STATUS_BOOT1_MASK) != 0));
407	}
408
409	/* Add RPMB partition, which also is of a fixed multiple of 128 KB. */
410	size = ext_csd[EXT_CSD_RPMB_MULT] * MMC_BOOT_RPMB_BLOCK_SIZE;
411	if (rev >= 5 && size > 0)
412		mmcsd_add_part(sc, EXT_CSD_PART_CONFIG_ACC_RPMB,
413		    MMCSD_FMT_RPMB, 0, size, ro);
414
415	if (rev <= 3 || comp == FALSE)
416		return (0);
417
418	/*
419	 * Add general purpose partitions, which are of a multiple of high
420	 * capacity write protect groups, too.
421	 */
422	if ((ext_csd[EXT_CSD_PART_SUPPORT] & EXT_CSD_PART_SUPPORT_EN) != 0) {
423		erase_size = ext_csd[EXT_CSD_ERASE_GRP_SIZE] * 1024 *
424		    MMC_SECTOR_SIZE;
425		wp_size = ext_csd[EXT_CSD_HC_WP_GRP_SIZE];
426		for (i = 0; i < MMC_PART_GP_MAX; i++) {
427			size = ext_csd[EXT_CSD_GP_SIZE_MULT + i * 3] +
428			    (ext_csd[EXT_CSD_GP_SIZE_MULT + i * 3 + 1] << 8) +
429			    (ext_csd[EXT_CSD_GP_SIZE_MULT + i * 3 + 2] << 16);
430			if (size == 0)
431				continue;
432			mmcsd_add_part(sc, EXT_CSD_PART_CONFIG_ACC_GP0 + i,
433			    MMCSD_FMT_GP, i, size * erase_size * wp_size, ro);
434		}
435	}
436	return (0);
437}
438
439static uintmax_t
440mmcsd_pretty_size(off_t size, char *unit)
441{
442	uintmax_t bytes;
443	int i;
444
445	/*
446	 * Display in most natural units.  There's no card < 1MB.  However,
447	 * RPMB partitions occasionally are smaller than that, though.  The
448	 * SD standard goes to 2 GiB due to its reliance on FAT, but the data
449	 * format supports up to 4 GiB and some card makers push it up to this
450	 * limit.  The SDHC standard only goes to 32 GiB due to FAT32, but the
451	 * data format supports up to 2 TiB however.  2048 GB isn't too ugly,
452	 * so we note it in passing here and don't add the code to print TB).
453	 * Since these cards are sold in terms of MB and GB not MiB and GiB,
454	 * report them like that.  We also round to the nearest unit, since
455	 * many cards are a few percent short, even of the power of 10 size.
456	 */
457	bytes = size;
458	unit[0] = unit[1] = '\0';
459	for (i = 0; i <= 2 && bytes >= 1000; i++) {
460		bytes = (bytes + 1000 / 2 - 1) / 1000;
461		switch (i) {
462		case 0:
463			unit[0] = 'k';
464			break;
465		case 1:
466			unit[0] = 'M';
467			break;
468		case 2:
469			unit[0] = 'G';
470			break;
471		default:
472			break;
473		}
474	}
475	return (bytes);
476}
477
478static struct cdevsw mmcsd_rpmb_cdevsw = {
479	.d_version	= D_VERSION,
480	.d_name		= "mmcsdrpmb",
481	.d_ioctl	= mmcsd_ioctl_rpmb
482};
483
484static void
485mmcsd_add_part(struct mmcsd_softc *sc, u_int type, const char *name, u_int cnt,
486    off_t media_size, bool ro)
487{
488	struct make_dev_args args;
489	device_t dev, mmcbus;
490	const char *ext;
491	const uint8_t *ext_csd;
492	struct mmcsd_part *part;
493	struct disk *d;
494	uintmax_t bytes;
495	u_int gp;
496	uint32_t speed;
497	uint8_t extattr;
498	bool enh;
499	char unit[2];
500
501	dev = sc->dev;
502	mmcbus = sc->mmcbus;
503	part = sc->part[type] = malloc(sizeof(*part), M_DEVBUF,
504	    M_WAITOK | M_ZERO);
505	part->sc = sc;
506	part->cnt = cnt;
507	part->type = type;
508	part->ro = ro;
509	snprintf(part->name, sizeof(part->name), name, device_get_unit(dev));
510
511	MMCSD_IOCTL_LOCK_INIT(part);
512
513	/*
514	 * For the RPMB partition, allow IOCTL access only.
515	 * NB: If ever attaching RPMB partitions to disk(9), the re-tuning
516	 *     implementation and especially its pausing need to be revisited,
517	 *     because then re-tuning requests may be issued by the IOCTL half
518	 *     of this driver while re-tuning is already paused by the disk(9)
519	 *     one and vice versa.
520	 */
521	if (type == EXT_CSD_PART_CONFIG_ACC_RPMB) {
522		make_dev_args_init(&args);
523		args.mda_flags = MAKEDEV_CHECKNAME | MAKEDEV_WAITOK;
524		args.mda_devsw = &mmcsd_rpmb_cdevsw;
525		args.mda_uid = UID_ROOT;
526		args.mda_gid = GID_OPERATOR;
527		args.mda_mode = 0640;
528		args.mda_si_drv1 = part;
529		if (make_dev_s(&args, &sc->rpmb_dev, "%s", part->name) != 0) {
530			device_printf(dev, "Failed to make RPMB device\n");
531			free(part, M_DEVBUF);
532			return;
533		}
534	} else {
535		MMCSD_DISK_LOCK_INIT(part);
536
537		d = part->disk = disk_alloc();
538		d->d_close = mmcsd_close;
539		d->d_strategy = mmcsd_strategy;
540		d->d_ioctl = mmcsd_ioctl_disk;
541		d->d_dump = mmcsd_dump;
542		d->d_getattr = mmcsd_getattr;
543		d->d_name = part->name;
544		d->d_drv1 = part;
545		d->d_sectorsize = mmc_get_sector_size(dev);
546		d->d_maxsize = sc->max_data * d->d_sectorsize;
547		d->d_mediasize = media_size;
548		d->d_stripesize = sc->erase_sector * d->d_sectorsize;
549		d->d_unit = cnt;
550		d->d_flags = DISKFLAG_CANDELETE;
551		if ((sc->flags & MMCSD_FLUSH_CACHE) != 0)
552			d->d_flags |= DISKFLAG_CANFLUSHCACHE;
553		d->d_delmaxsize = mmc_get_erase_sector(dev) * d->d_sectorsize;
554		strlcpy(d->d_ident, mmc_get_card_sn_string(dev),
555		    sizeof(d->d_ident));
556		strlcpy(d->d_descr, mmc_get_card_id_string(dev),
557		    sizeof(d->d_descr));
558		d->d_rotation_rate = DISK_RR_NON_ROTATING;
559
560		disk_create(d, DISK_VERSION);
561		bioq_init(&part->bio_queue);
562
563		part->running = 1;
564		kproc_create(&mmcsd_task, part, &part->p, 0, 0,
565		    "%s%d: mmc/sd card", part->name, cnt);
566	}
567
568	bytes = mmcsd_pretty_size(media_size, unit);
569	if (type == EXT_CSD_PART_CONFIG_ACC_DEFAULT) {
570		speed = mmcbr_get_clock(mmcbus);
571		printf("%s%d: %ju%sB <%s>%s at %s %d.%01dMHz/%dbit/%d-block\n",
572		    part->name, cnt, bytes, unit, mmc_get_card_id_string(dev),
573		    ro ? " (read-only)" : "", device_get_nameunit(mmcbus),
574		    speed / 1000000, (speed / 100000) % 10,
575		    mmcsd_bus_bit_width(dev), sc->max_data);
576	} else if (type == EXT_CSD_PART_CONFIG_ACC_RPMB) {
577		printf("%s: %ju%sB partion %d%s at %s\n", part->name, bytes,
578		    unit, type, ro ? " (read-only)" : "",
579		    device_get_nameunit(dev));
580	} else {
581		enh = false;
582		ext = NULL;
583		extattr = 0;
584		if (type >= EXT_CSD_PART_CONFIG_ACC_GP0 &&
585		    type <= EXT_CSD_PART_CONFIG_ACC_GP3) {
586			ext_csd = sc->ext_csd;
587			gp = type - EXT_CSD_PART_CONFIG_ACC_GP0;
588			if ((ext_csd[EXT_CSD_PART_SUPPORT] &
589			    EXT_CSD_PART_SUPPORT_ENH_ATTR_EN) != 0 &&
590			    (ext_csd[EXT_CSD_PART_ATTR] &
591			    (EXT_CSD_PART_ATTR_ENH_GP0 << gp)) != 0)
592				enh = true;
593			else if ((ext_csd[EXT_CSD_PART_SUPPORT] &
594			    EXT_CSD_PART_SUPPORT_EXT_ATTR_EN) != 0) {
595				extattr = (ext_csd[EXT_CSD_EXT_PART_ATTR +
596				    (gp / 2)] >> (4 * (gp % 2))) & 0xF;
597				switch (extattr) {
598					case EXT_CSD_EXT_PART_ATTR_DEFAULT:
599						break;
600					case EXT_CSD_EXT_PART_ATTR_SYSTEMCODE:
601						ext = "system code";
602						break;
603					case EXT_CSD_EXT_PART_ATTR_NPERSISTENT:
604						ext = "non-persistent";
605						break;
606					default:
607						ext = "reserved";
608						break;
609				}
610			}
611		}
612		if (ext == NULL)
613			printf("%s%d: %ju%sB partion %d%s%s at %s\n",
614			    part->name, cnt, bytes, unit, type, enh ?
615			    " enhanced" : "", ro ? " (read-only)" : "",
616			    device_get_nameunit(dev));
617		else
618			printf("%s%d: %ju%sB partion %d extended 0x%x "
619			    "(%s)%s at %s\n", part->name, cnt, bytes, unit,
620			    type, extattr, ext, ro ? " (read-only)" : "",
621			    device_get_nameunit(dev));
622	}
623}
624
625static int
626mmcsd_slicer(device_t dev, const char *provider,
627    struct flash_slice *slices, int *nslices)
628{
629	char name[MMCSD_PART_NAMELEN];
630	struct mmcsd_softc *sc;
631	struct mmcsd_part *part;
632
633	*nslices = 0;
634	if (slices == NULL)
635		return (ENOMEM);
636
637	sc = device_get_softc(dev);
638	if (sc->enh_size == 0)
639		return (ENXIO);
640
641	part = sc->part[EXT_CSD_PART_CONFIG_ACC_DEFAULT];
642	snprintf(name, sizeof(name), "%s%d", part->disk->d_name,
643	    part->disk->d_unit);
644	if (strcmp(name, provider) != 0)
645		return (ENXIO);
646
647	*nslices = 1;
648	slices[0].base = sc->enh_base;
649	slices[0].size = sc->enh_size;
650	slices[0].label = MMCSD_LABEL_ENH;
651	return (0);
652}
653
654static int
655mmcsd_detach(device_t dev)
656{
657	struct mmcsd_softc *sc = device_get_softc(dev);
658	struct mmcsd_part *part;
659	int i;
660
661	for (i = 0; i < MMC_PART_MAX; i++) {
662		part = sc->part[i];
663		if (part != NULL) {
664			if (part->disk != NULL) {
665				MMCSD_DISK_LOCK(part);
666				part->suspend = 0;
667				if (part->running > 0) {
668					/* kill thread */
669					part->running = 0;
670					wakeup(part);
671					/* wait for thread to finish. */
672					while (part->running != -1)
673						msleep(part, &part->disk_mtx, 0,
674						    "mmcsd disk detach", 0);
675				}
676				MMCSD_DISK_UNLOCK(part);
677			}
678			MMCSD_IOCTL_LOCK(part);
679			while (part->ioctl > 0)
680				msleep(part, &part->ioctl_mtx, 0,
681				    "mmcsd IOCTL detach", 0);
682			part->ioctl = -1;
683			MMCSD_IOCTL_UNLOCK(part);
684		}
685	}
686
687	if (sc->rpmb_dev != NULL)
688		destroy_dev(sc->rpmb_dev);
689
690	for (i = 0; i < MMC_PART_MAX; i++) {
691		part = sc->part[i];
692		if (part != NULL) {
693			if (part->disk != NULL) {
694				/* Flush the request queue. */
695				bioq_flush(&part->bio_queue, NULL, ENXIO);
696				/* kill disk */
697				disk_destroy(part->disk);
698
699				MMCSD_DISK_LOCK_DESTROY(part);
700			}
701			MMCSD_IOCTL_LOCK_DESTROY(part);
702			free(part, M_DEVBUF);
703		}
704	}
705	if (mmcsd_flush_cache(sc) != MMC_ERR_NONE)
706		device_printf(dev, "failed to flush cache\n");
707	return (0);
708}
709
710static int
711mmcsd_shutdown(device_t dev)
712{
713	struct mmcsd_softc *sc = device_get_softc(dev);
714
715	if (mmcsd_flush_cache(sc) != MMC_ERR_NONE)
716		device_printf(dev, "failed to flush cache\n");
717	return (0);
718}
719
720static int
721mmcsd_suspend(device_t dev)
722{
723	struct mmcsd_softc *sc = device_get_softc(dev);
724	struct mmcsd_part *part;
725	int i;
726
727	for (i = 0; i < MMC_PART_MAX; i++) {
728		part = sc->part[i];
729		if (part != NULL) {
730			if (part->disk != NULL) {
731				MMCSD_DISK_LOCK(part);
732				part->suspend = 1;
733				if (part->running > 0) {
734					/* kill thread */
735					part->running = 0;
736					wakeup(part);
737					/* wait for thread to finish. */
738					while (part->running != -1)
739						msleep(part, &part->disk_mtx, 0,
740						    "mmcsd disk suspension", 0);
741				}
742				MMCSD_DISK_UNLOCK(part);
743			}
744			MMCSD_IOCTL_LOCK(part);
745			while (part->ioctl > 0)
746				msleep(part, &part->ioctl_mtx, 0,
747				    "mmcsd IOCTL suspension", 0);
748			part->ioctl = -1;
749			MMCSD_IOCTL_UNLOCK(part);
750		}
751	}
752	if (mmcsd_flush_cache(sc) != MMC_ERR_NONE)
753		device_printf(dev, "failed to flush cache\n");
754	return (0);
755}
756
757static int
758mmcsd_resume(device_t dev)
759{
760	struct mmcsd_softc *sc = device_get_softc(dev);
761	struct mmcsd_part *part;
762	int i;
763
764	for (i = 0; i < MMC_PART_MAX; i++) {
765		part = sc->part[i];
766		if (part != NULL) {
767			if (part->disk != NULL) {
768				MMCSD_DISK_LOCK(part);
769				part->suspend = 0;
770				if (part->running <= 0) {
771					part->running = 1;
772					MMCSD_DISK_UNLOCK(part);
773					kproc_create(&mmcsd_task, part,
774					    &part->p, 0, 0, "%s%d: mmc/sd card",
775					    part->name, part->cnt);
776				} else
777					MMCSD_DISK_UNLOCK(part);
778			}
779			MMCSD_IOCTL_LOCK(part);
780			part->ioctl = 0;
781			MMCSD_IOCTL_UNLOCK(part);
782		}
783	}
784	return (0);
785}
786
787static int
788mmcsd_close(struct disk *dp)
789{
790	struct mmcsd_softc *sc;
791
792	if ((dp->d_flags & DISKFLAG_OPEN) != 0) {
793		sc = ((struct mmcsd_part *)dp->d_drv1)->sc;
794		if (mmcsd_flush_cache(sc) != MMC_ERR_NONE)
795			device_printf(sc->dev, "failed to flush cache\n");
796	}
797	return (0);
798}
799
800static void
801mmcsd_strategy(struct bio *bp)
802{
803	struct mmcsd_softc *sc;
804	struct mmcsd_part *part;
805
806	part = bp->bio_disk->d_drv1;
807	sc = part->sc;
808	MMCSD_DISK_LOCK(part);
809	if (part->running > 0 || part->suspend > 0) {
810		bioq_disksort(&part->bio_queue, bp);
811		MMCSD_DISK_UNLOCK(part);
812		wakeup(part);
813	} else {
814		MMCSD_DISK_UNLOCK(part);
815		biofinish(bp, NULL, ENXIO);
816	}
817}
818
819static int
820mmcsd_ioctl_rpmb(struct cdev *dev, u_long cmd, caddr_t data,
821    int fflag, struct thread *td)
822{
823
824	return (mmcsd_ioctl(dev->si_drv1, cmd, data, fflag, td));
825}
826
827static int
828mmcsd_ioctl_disk(struct disk *disk, u_long cmd, void *data, int fflag,
829    struct thread *td)
830{
831
832	return (mmcsd_ioctl(disk->d_drv1, cmd, data, fflag, td));
833}
834
835static int
836mmcsd_ioctl(struct mmcsd_part *part, u_long cmd, void *data, int fflag,
837    struct thread *td)
838{
839	struct mmc_ioc_cmd *mic;
840	struct mmc_ioc_multi_cmd *mimc;
841	int i, err;
842	u_long cnt, size;
843
844	if ((fflag & FREAD) == 0)
845		return (EBADF);
846
847	err = priv_check(td, PRIV_DRIVER);
848	if (err != 0)
849		return (err);
850
851	err = 0;
852	switch (cmd) {
853	case MMC_IOC_CMD:
854		mic = data;
855		err = mmcsd_ioctl_cmd(part, mic, fflag);
856		break;
857	case MMC_IOC_MULTI_CMD:
858		mimc = data;
859		if (mimc->num_of_cmds == 0)
860			break;
861		if (mimc->num_of_cmds > MMC_IOC_MAX_CMDS)
862			return (EINVAL);
863		cnt = mimc->num_of_cmds;
864		size = sizeof(*mic) * cnt;
865		mic = malloc(size, M_TEMP, M_WAITOK);
866		err = copyin((const void *)mimc->cmds, mic, size);
867		if (err == 0) {
868			for (i = 0; i < cnt; i++) {
869				err = mmcsd_ioctl_cmd(part, &mic[i], fflag);
870				if (err != 0)
871					break;
872			}
873		}
874		free(mic, M_TEMP);
875		break;
876	default:
877		return (ENOIOCTL);
878	}
879	return (err);
880}
881
882static int
883mmcsd_ioctl_cmd(struct mmcsd_part *part, struct mmc_ioc_cmd *mic, int fflag)
884{
885	struct mmc_command cmd;
886	struct mmc_data data;
887	struct mmcsd_softc *sc;
888	device_t dev, mmcbus;
889	void *dp;
890	u_long len;
891	int err, retries;
892	uint32_t status;
893	uint16_t rca;
894
895	if ((fflag & FWRITE) == 0 && mic->write_flag != 0)
896		return (EBADF);
897
898	if (part->ro == TRUE && mic->write_flag != 0)
899		return (EROFS);
900
901	/*
902	 * We don't need to explicitly lock against the disk(9) half of this
903	 * driver as MMCBUS_ACQUIRE_BUS() will serialize us.  However, it's
904	 * necessary to protect against races with detachment and suspension,
905	 * especially since it's required to switch away from RPMB partitions
906	 * again after an access (see mmcsd_switch_part()).
907	 */
908	MMCSD_IOCTL_LOCK(part);
909	while (part->ioctl != 0) {
910		if (part->ioctl < 0) {
911			MMCSD_IOCTL_UNLOCK(part);
912			return (ENXIO);
913		}
914		msleep(part, &part->ioctl_mtx, 0, "mmcsd IOCTL", 0);
915	}
916	part->ioctl = 1;
917	MMCSD_IOCTL_UNLOCK(part);
918
919	err = 0;
920	dp = NULL;
921	len = mic->blksz * mic->blocks;
922	if (len > MMC_IOC_MAX_BYTES) {
923		err = EOVERFLOW;
924		goto out;
925	}
926	if (len != 0) {
927		dp = malloc(len, M_TEMP, M_WAITOK);
928		err = copyin((void *)(uintptr_t)mic->data_ptr, dp, len);
929		if (err != 0)
930			goto out;
931	}
932	memset(&cmd, 0, sizeof(cmd));
933	memset(&data, 0, sizeof(data));
934	cmd.opcode = mic->opcode;
935	cmd.arg = mic->arg;
936	cmd.flags = mic->flags;
937	if (len != 0) {
938		data.len = len;
939		data.data = dp;
940		data.flags = mic->write_flag != 0 ? MMC_DATA_WRITE :
941		    MMC_DATA_READ;
942		cmd.data = &data;
943	}
944	sc = part->sc;
945	rca = sc->rca;
946	if (mic->is_acmd == 0) {
947		/* Enforce/patch/restrict RCA-based commands */
948		switch (cmd.opcode) {
949		case MMC_SET_RELATIVE_ADDR:
950		case MMC_SELECT_CARD:
951			err = EPERM;
952			goto out;
953		case MMC_STOP_TRANSMISSION:
954			if ((cmd.arg & 0x1) == 0)
955				break;
956			/* FALLTHROUGH */
957		case MMC_SLEEP_AWAKE:
958		case MMC_SEND_CSD:
959		case MMC_SEND_CID:
960		case MMC_SEND_STATUS:
961		case MMC_GO_INACTIVE_STATE:
962		case MMC_FAST_IO:
963		case MMC_APP_CMD:
964			cmd.arg = (cmd.arg & 0x0000FFFF) | (rca << 16);
965			break;
966		default:
967			break;
968		}
969		/*
970		 * No partition switching in userland; it's almost impossible
971		 * to recover from that, especially if things go wrong.
972		 */
973		if (cmd.opcode == MMC_SWITCH_FUNC && dp != NULL &&
974		    (((uint8_t *)dp)[EXT_CSD_PART_CONFIG] &
975		    EXT_CSD_PART_CONFIG_ACC_MASK) != part->type) {
976			err = EINVAL;
977			goto out;
978		}
979	}
980	dev = sc->dev;
981	mmcbus = sc->mmcbus;
982	MMCBUS_ACQUIRE_BUS(mmcbus, dev);
983	err = mmcsd_switch_part(mmcbus, dev, rca, part->type);
984	if (err != MMC_ERR_NONE)
985		goto release;
986	if (part->type == EXT_CSD_PART_CONFIG_ACC_RPMB) {
987		err = mmcsd_set_blockcount(sc, mic->blocks,
988		    mic->write_flag & (1 << 31));
989		if (err != MMC_ERR_NONE)
990			goto switch_back;
991	}
992	if (mic->write_flag != 0)
993		sc->flags |= MMCSD_DIRTY;
994	if (mic->is_acmd != 0)
995		(void)mmc_wait_for_app_cmd(mmcbus, dev, rca, &cmd, 0);
996	else
997		(void)mmc_wait_for_cmd(mmcbus, dev, &cmd, 0);
998	if (part->type == EXT_CSD_PART_CONFIG_ACC_RPMB) {
999		/*
1000		 * If the request went to the RPMB partition, try to ensure
1001		 * that the command actually has completed.
1002		 */
1003		retries = MMCSD_CMD_RETRIES;
1004		do {
1005			err = mmc_send_status(mmcbus, dev, rca, &status);
1006			if (err != MMC_ERR_NONE)
1007				break;
1008			if (R1_STATUS(status) == 0 &&
1009			    R1_CURRENT_STATE(status) != R1_STATE_PRG)
1010				break;
1011			DELAY(1000);
1012		} while (retries-- > 0);
1013	}
1014	/*
1015	 * If EXT_CSD was changed, our copy is outdated now.  Specifically,
1016	 * the upper bits of EXT_CSD_PART_CONFIG used in mmcsd_switch_part(),
1017	 * so retrieve EXT_CSD again.
1018	 */
1019	if (cmd.opcode == MMC_SWITCH_FUNC) {
1020		err = mmc_send_ext_csd(mmcbus, dev, sc->ext_csd);
1021		if (err != MMC_ERR_NONE)
1022			goto release;
1023	}
1024switch_back:
1025	if (part->type == EXT_CSD_PART_CONFIG_ACC_RPMB) {
1026		/*
1027		 * If the request went to the RPMB partition, always switch
1028		 * back to the default partition (see mmcsd_switch_part()).
1029		 */
1030		err = mmcsd_switch_part(mmcbus, dev, rca,
1031		    EXT_CSD_PART_CONFIG_ACC_DEFAULT);
1032		if (err != MMC_ERR_NONE)
1033			goto release;
1034	}
1035	MMCBUS_RELEASE_BUS(mmcbus, dev);
1036	if (cmd.error != MMC_ERR_NONE) {
1037		switch (cmd.error) {
1038		case MMC_ERR_TIMEOUT:
1039			err = ETIMEDOUT;
1040			break;
1041		case MMC_ERR_BADCRC:
1042			err = EILSEQ;
1043			break;
1044		case MMC_ERR_INVALID:
1045			err = EINVAL;
1046			break;
1047		case MMC_ERR_NO_MEMORY:
1048			err = ENOMEM;
1049			break;
1050		default:
1051			err = EIO;
1052			break;
1053		}
1054		goto out;
1055	}
1056	memcpy(mic->response, cmd.resp, 4 * sizeof(uint32_t));
1057	if (mic->write_flag == 0 && len != 0) {
1058		err = copyout(dp, (void *)(uintptr_t)mic->data_ptr, len);
1059		if (err != 0)
1060			goto out;
1061	}
1062	goto out;
1063
1064release:
1065	MMCBUS_RELEASE_BUS(mmcbus, dev);
1066	err = EIO;
1067
1068out:
1069	MMCSD_IOCTL_LOCK(part);
1070	part->ioctl = 0;
1071	MMCSD_IOCTL_UNLOCK(part);
1072	wakeup(part);
1073	if (dp != NULL)
1074		free(dp, M_TEMP);
1075	return (err);
1076}
1077
1078static int
1079mmcsd_getattr(struct bio *bp)
1080{
1081	struct mmcsd_part *part;
1082	device_t dev;
1083
1084	if (strcmp(bp->bio_attribute, "MMC::device") == 0) {
1085		if (bp->bio_length != sizeof(dev))
1086			return (EFAULT);
1087		part = bp->bio_disk->d_drv1;
1088		dev = part->sc->dev;
1089		bcopy(&dev, bp->bio_data, sizeof(dev));
1090		bp->bio_completed = bp->bio_length;
1091		return (0);
1092	}
1093	return (-1);
1094}
1095
1096static int
1097mmcsd_set_blockcount(struct mmcsd_softc *sc, u_int count, bool reliable)
1098{
1099	struct mmc_command cmd;
1100	struct mmc_request req;
1101
1102	memset(&req, 0, sizeof(req));
1103	memset(&cmd, 0, sizeof(cmd));
1104	cmd.mrq = &req;
1105	req.cmd = &cmd;
1106	cmd.opcode = MMC_SET_BLOCK_COUNT;
1107	cmd.arg = count & 0x0000FFFF;
1108	if (reliable)
1109		cmd.arg |= 1 << 31;
1110	cmd.flags = MMC_RSP_R1 | MMC_CMD_AC;
1111	MMCBUS_WAIT_FOR_REQUEST(sc->mmcbus, sc->dev, &req);
1112	return (cmd.error);
1113}
1114
1115static int
1116mmcsd_switch_part(device_t bus, device_t dev, uint16_t rca, u_int part)
1117{
1118	struct mmcsd_softc *sc;
1119	int err;
1120	uint8_t	value;
1121
1122	sc = device_get_softc(dev);
1123
1124	if (sc->mode == mode_sd)
1125		return (MMC_ERR_NONE);
1126
1127	/*
1128	 * According to section "6.2.2 Command restrictions" of the eMMC
1129	 * specification v5.1, CMD19/CMD21 aren't allowed to be used with
1130	 * RPMB partitions.  So we pause re-tuning along with triggering
1131	 * it up-front to decrease the likelihood of re-tuning becoming
1132	 * necessary while accessing an RPMB partition.  Consequently, an
1133	 * RPMB partition should immediately be switched away from again
1134	 * after an access in order to allow for re-tuning to take place
1135	 * anew.
1136	 */
1137	if (part == EXT_CSD_PART_CONFIG_ACC_RPMB)
1138		MMCBUS_RETUNE_PAUSE(sc->mmcbus, sc->dev, true);
1139
1140	if (sc->part_curr == part)
1141		return (MMC_ERR_NONE);
1142
1143	value = (sc->ext_csd[EXT_CSD_PART_CONFIG] &
1144	    ~EXT_CSD_PART_CONFIG_ACC_MASK) | part;
1145	/* Jump! */
1146	err = mmc_switch(bus, dev, rca, EXT_CSD_CMD_SET_NORMAL,
1147	    EXT_CSD_PART_CONFIG, value, sc->part_time, true);
1148	if (err != MMC_ERR_NONE) {
1149		if (part == EXT_CSD_PART_CONFIG_ACC_RPMB)
1150			MMCBUS_RETUNE_UNPAUSE(sc->mmcbus, sc->dev);
1151		return (err);
1152	}
1153
1154	sc->ext_csd[EXT_CSD_PART_CONFIG] = value;
1155	if (sc->part_curr == EXT_CSD_PART_CONFIG_ACC_RPMB)
1156		MMCBUS_RETUNE_UNPAUSE(sc->mmcbus, sc->dev);
1157	sc->part_curr = part;
1158	return (MMC_ERR_NONE);
1159}
1160
1161static const char *
1162mmcsd_errmsg(int e)
1163{
1164
1165	if (e < 0 || e > MMC_ERR_MAX)
1166		return "Bad error code";
1167	return (errmsg[e]);
1168}
1169
1170static daddr_t
1171mmcsd_rw(struct mmcsd_part *part, struct bio *bp)
1172{
1173	daddr_t block, end;
1174	struct mmc_command cmd;
1175	struct mmc_command stop;
1176	struct mmc_request req;
1177	struct mmc_data data;
1178	struct mmcsd_softc *sc;
1179	device_t dev, mmcbus;
1180	u_int numblocks, sz;
1181	char *vaddr;
1182
1183	sc = part->sc;
1184	dev = sc->dev;
1185	mmcbus = sc->mmcbus;
1186
1187	block = bp->bio_pblkno;
1188	sz = part->disk->d_sectorsize;
1189	end = bp->bio_pblkno + (bp->bio_bcount / sz);
1190	while (block < end) {
1191		vaddr = bp->bio_data + (block - bp->bio_pblkno) * sz;
1192		numblocks = min(end - block, sc->max_data);
1193		memset(&req, 0, sizeof(req));
1194		memset(&cmd, 0, sizeof(cmd));
1195		memset(&stop, 0, sizeof(stop));
1196		memset(&data, 0, sizeof(data));
1197		cmd.mrq = &req;
1198		req.cmd = &cmd;
1199		cmd.data = &data;
1200		if (bp->bio_cmd == BIO_READ) {
1201			if (numblocks > 1)
1202				cmd.opcode = MMC_READ_MULTIPLE_BLOCK;
1203			else
1204				cmd.opcode = MMC_READ_SINGLE_BLOCK;
1205		} else {
1206			sc->flags |= MMCSD_DIRTY;
1207			if (numblocks > 1)
1208				cmd.opcode = MMC_WRITE_MULTIPLE_BLOCK;
1209			else
1210				cmd.opcode = MMC_WRITE_BLOCK;
1211		}
1212		cmd.arg = block;
1213		if (sc->high_cap == 0)
1214			cmd.arg <<= 9;
1215		cmd.flags = MMC_RSP_R1 | MMC_CMD_ADTC;
1216		data.data = vaddr;
1217		data.mrq = &req;
1218		if (bp->bio_cmd == BIO_READ)
1219			data.flags = MMC_DATA_READ;
1220		else
1221			data.flags = MMC_DATA_WRITE;
1222		data.len = numblocks * sz;
1223		if (numblocks > 1) {
1224			data.flags |= MMC_DATA_MULTI;
1225			stop.opcode = MMC_STOP_TRANSMISSION;
1226			stop.arg = 0;
1227			stop.flags = MMC_RSP_R1B | MMC_CMD_AC;
1228			stop.mrq = &req;
1229			req.stop = &stop;
1230		}
1231		MMCBUS_WAIT_FOR_REQUEST(mmcbus, dev, &req);
1232		if (req.cmd->error != MMC_ERR_NONE) {
1233			if (ppsratecheck(&sc->log_time, &sc->log_count,
1234			    LOG_PPS))
1235				device_printf(dev, "Error indicated: %d %s\n",
1236				    req.cmd->error,
1237				    mmcsd_errmsg(req.cmd->error));
1238			break;
1239		}
1240		block += numblocks;
1241	}
1242	return (block);
1243}
1244
1245static daddr_t
1246mmcsd_delete(struct mmcsd_part *part, struct bio *bp)
1247{
1248	daddr_t block, end, start, stop;
1249	struct mmc_command cmd;
1250	struct mmc_request req;
1251	struct mmcsd_softc *sc;
1252	device_t dev, mmcbus;
1253	u_int erase_sector, sz;
1254	int err;
1255	bool use_trim;
1256
1257	sc = part->sc;
1258	dev = sc->dev;
1259	mmcbus = sc->mmcbus;
1260
1261	block = bp->bio_pblkno;
1262	sz = part->disk->d_sectorsize;
1263	end = bp->bio_pblkno + (bp->bio_bcount / sz);
1264	use_trim = sc->flags & MMCSD_USE_TRIM;
1265	if (use_trim == true) {
1266		start = block;
1267		stop = end;
1268	} else {
1269		/* Coalesce with the remainder of the previous request. */
1270		if (block > part->eblock && block <= part->eend)
1271			block = part->eblock;
1272		if (end >= part->eblock && end < part->eend)
1273			end = part->eend;
1274		/* Safely round to the erase sector boundaries. */
1275		erase_sector = sc->erase_sector;
1276		start = block + erase_sector - 1;	 /* Round up. */
1277		start -= start % erase_sector;
1278		stop = end;				/* Round down. */
1279		stop -= end % erase_sector;
1280		/*
1281		 * We can't erase an area smaller than an erase sector, so
1282		 * store it for later.
1283		 */
1284		if (start >= stop) {
1285			part->eblock = block;
1286			part->eend = end;
1287			return (end);
1288		}
1289	}
1290
1291	if ((sc->flags & MMCSD_INAND_CMD38) != 0) {
1292		err = mmc_switch(mmcbus, dev, sc->rca, EXT_CSD_CMD_SET_NORMAL,
1293		    EXT_CSD_INAND_CMD38, use_trim == true ?
1294		    EXT_CSD_INAND_CMD38_TRIM : EXT_CSD_INAND_CMD38_ERASE,
1295		    sc->cmd6_time, true);
1296		if (err != MMC_ERR_NONE) {
1297			device_printf(dev,
1298			    "Setting iNAND erase command failed %s\n",
1299			    mmcsd_errmsg(err));
1300			return (block);
1301		}
1302	}
1303
1304	/*
1305	 * Pause re-tuning so it won't interfere with the order of erase
1306	 * commands.  Note that these latter don't use the data lines, so
1307	 * re-tuning shouldn't actually become necessary during erase.
1308	 */
1309	MMCBUS_RETUNE_PAUSE(mmcbus, dev, false);
1310	/* Set erase start position. */
1311	memset(&req, 0, sizeof(req));
1312	memset(&cmd, 0, sizeof(cmd));
1313	cmd.mrq = &req;
1314	req.cmd = &cmd;
1315	if (sc->mode == mode_sd)
1316		cmd.opcode = SD_ERASE_WR_BLK_START;
1317	else
1318		cmd.opcode = MMC_ERASE_GROUP_START;
1319	cmd.arg = start;
1320	if (sc->high_cap == 0)
1321		cmd.arg <<= 9;
1322	cmd.flags = MMC_RSP_R1 | MMC_CMD_AC;
1323	MMCBUS_WAIT_FOR_REQUEST(mmcbus, dev, &req);
1324	if (req.cmd->error != MMC_ERR_NONE) {
1325		device_printf(dev, "Setting erase start position failed %s\n",
1326		    mmcsd_errmsg(req.cmd->error));
1327		block = bp->bio_pblkno;
1328		goto unpause;
1329	}
1330	/* Set erase stop position. */
1331	memset(&req, 0, sizeof(req));
1332	memset(&cmd, 0, sizeof(cmd));
1333	req.cmd = &cmd;
1334	if (sc->mode == mode_sd)
1335		cmd.opcode = SD_ERASE_WR_BLK_END;
1336	else
1337		cmd.opcode = MMC_ERASE_GROUP_END;
1338	cmd.arg = stop;
1339	if (sc->high_cap == 0)
1340		cmd.arg <<= 9;
1341	cmd.arg--;
1342	cmd.flags = MMC_RSP_R1 | MMC_CMD_AC;
1343	MMCBUS_WAIT_FOR_REQUEST(mmcbus, dev, &req);
1344	if (req.cmd->error != MMC_ERR_NONE) {
1345		device_printf(dev, "Setting erase stop position failed %s\n",
1346		    mmcsd_errmsg(req.cmd->error));
1347		block = bp->bio_pblkno;
1348		goto unpause;
1349	}
1350	/* Erase range. */
1351	memset(&req, 0, sizeof(req));
1352	memset(&cmd, 0, sizeof(cmd));
1353	req.cmd = &cmd;
1354	cmd.opcode = MMC_ERASE;
1355	cmd.arg = use_trim == true ? MMC_ERASE_TRIM : MMC_ERASE_ERASE;
1356	cmd.flags = MMC_RSP_R1B | MMC_CMD_AC;
1357	MMCBUS_WAIT_FOR_REQUEST(mmcbus, dev, &req);
1358	if (req.cmd->error != MMC_ERR_NONE) {
1359		device_printf(dev, "Issuing erase command failed %s\n",
1360		    mmcsd_errmsg(req.cmd->error));
1361		block = bp->bio_pblkno;
1362		goto unpause;
1363	}
1364	if (use_trim == false) {
1365		/* Store one of the remaining parts for the next call. */
1366		if (bp->bio_pblkno >= part->eblock || block == start) {
1367			part->eblock = stop;	/* Predict next forward. */
1368			part->eend = end;
1369		} else {
1370			part->eblock = block;	/* Predict next backward. */
1371			part->eend = start;
1372		}
1373	}
1374	block = end;
1375unpause:
1376	MMCBUS_RETUNE_UNPAUSE(mmcbus, dev);
1377	return (block);
1378}
1379
1380static int
1381mmcsd_dump(void *arg, void *virtual, vm_offset_t physical, off_t offset,
1382    size_t length)
1383{
1384	struct bio bp;
1385	daddr_t block, end;
1386	struct disk *disk;
1387	struct mmcsd_softc *sc;
1388	struct mmcsd_part *part;
1389	device_t dev, mmcbus;
1390	int err;
1391
1392	disk = arg;
1393	part = disk->d_drv1;
1394	sc = part->sc;
1395
1396	/* length zero is special and really means flush buffers to media */
1397	if (length == 0) {
1398		err = mmcsd_flush_cache(sc);
1399		if (err != MMC_ERR_NONE)
1400			return (EIO);
1401		return (0);
1402	}
1403
1404	dev = sc->dev;
1405	mmcbus = sc->mmcbus;
1406
1407	bzero(&bp, sizeof(struct bio));
1408	bp.bio_disk = disk;
1409	bp.bio_pblkno = offset / disk->d_sectorsize;
1410	bp.bio_bcount = length;
1411	bp.bio_data = virtual;
1412	bp.bio_cmd = BIO_WRITE;
1413	end = bp.bio_pblkno + bp.bio_bcount / disk->d_sectorsize;
1414	MMCBUS_ACQUIRE_BUS(mmcbus, dev);
1415	err = mmcsd_switch_part(mmcbus, dev, sc->rca, part->type);
1416	if (err != MMC_ERR_NONE) {
1417		if (ppsratecheck(&sc->log_time, &sc->log_count, LOG_PPS))
1418			device_printf(dev, "Partition switch error\n");
1419		MMCBUS_RELEASE_BUS(mmcbus, dev);
1420		return (EIO);
1421	}
1422	block = mmcsd_rw(part, &bp);
1423	MMCBUS_RELEASE_BUS(mmcbus, dev);
1424	return ((end < block) ? EIO : 0);
1425}
1426
1427static void
1428mmcsd_task(void *arg)
1429{
1430	daddr_t block, end;
1431	struct mmcsd_part *part;
1432	struct mmcsd_softc *sc;
1433	struct bio *bp;
1434	device_t dev, mmcbus;
1435	int err, sz;
1436
1437	part = arg;
1438	sc = part->sc;
1439	dev = sc->dev;
1440	mmcbus = sc->mmcbus;
1441
1442	while (1) {
1443		MMCSD_DISK_LOCK(part);
1444		do {
1445			if (part->running == 0)
1446				goto out;
1447			bp = bioq_takefirst(&part->bio_queue);
1448			if (bp == NULL)
1449				msleep(part, &part->disk_mtx, PRIBIO,
1450				    "mmcsd disk jobqueue", 0);
1451		} while (bp == NULL);
1452		MMCSD_DISK_UNLOCK(part);
1453		if (__predict_false(bp->bio_cmd == BIO_FLUSH)) {
1454			if (mmcsd_flush_cache(sc) != MMC_ERR_NONE) {
1455				bp->bio_error = EIO;
1456				bp->bio_flags |= BIO_ERROR;
1457			}
1458			biodone(bp);
1459			continue;
1460		}
1461		if (bp->bio_cmd != BIO_READ && part->ro) {
1462			bp->bio_error = EROFS;
1463			bp->bio_resid = bp->bio_bcount;
1464			bp->bio_flags |= BIO_ERROR;
1465			biodone(bp);
1466			continue;
1467		}
1468		MMCBUS_ACQUIRE_BUS(mmcbus, dev);
1469		sz = part->disk->d_sectorsize;
1470		block = bp->bio_pblkno;
1471		end = bp->bio_pblkno + (bp->bio_bcount / sz);
1472		err = mmcsd_switch_part(mmcbus, dev, sc->rca, part->type);
1473		if (err != MMC_ERR_NONE) {
1474			if (ppsratecheck(&sc->log_time, &sc->log_count,
1475			    LOG_PPS))
1476				device_printf(dev, "Partition switch error\n");
1477			goto release;
1478		}
1479		if (bp->bio_cmd == BIO_READ || bp->bio_cmd == BIO_WRITE) {
1480			/* Access to the remaining erase block obsoletes it. */
1481			if (block < part->eend && end > part->eblock)
1482				part->eblock = part->eend = 0;
1483			block = mmcsd_rw(part, bp);
1484		} else if (bp->bio_cmd == BIO_DELETE) {
1485			block = mmcsd_delete(part, bp);
1486		}
1487release:
1488		MMCBUS_RELEASE_BUS(mmcbus, dev);
1489		if (block < end) {
1490			bp->bio_error = EIO;
1491			bp->bio_resid = (end - block) * sz;
1492			bp->bio_flags |= BIO_ERROR;
1493		} else {
1494			bp->bio_resid = 0;
1495		}
1496		biodone(bp);
1497	}
1498out:
1499	/* tell parent we're done */
1500	part->running = -1;
1501	MMCSD_DISK_UNLOCK(part);
1502	wakeup(part);
1503
1504	kproc_exit(0);
1505}
1506
1507static int
1508mmcsd_bus_bit_width(device_t dev)
1509{
1510
1511	if (mmc_get_bus_width(dev) == bus_width_1)
1512		return (1);
1513	if (mmc_get_bus_width(dev) == bus_width_4)
1514		return (4);
1515	return (8);
1516}
1517
1518static int
1519mmcsd_flush_cache(struct mmcsd_softc *sc)
1520{
1521	device_t dev, mmcbus;
1522	int err;
1523
1524	if ((sc->flags & MMCSD_FLUSH_CACHE) == 0)
1525		return (MMC_ERR_NONE);
1526
1527	dev = sc->dev;
1528	mmcbus = sc->mmcbus;
1529	MMCBUS_ACQUIRE_BUS(mmcbus, dev);
1530	if ((sc->flags & MMCSD_DIRTY) == 0) {
1531		MMCBUS_RELEASE_BUS(mmcbus, dev);
1532		return (MMC_ERR_NONE);
1533	}
1534	err = mmc_switch(mmcbus, dev, sc->rca, EXT_CSD_CMD_SET_NORMAL,
1535	    EXT_CSD_FLUSH_CACHE, EXT_CSD_FLUSH_CACHE_FLUSH, 60 * 1000, true);
1536	if (err == MMC_ERR_NONE)
1537		sc->flags &= ~MMCSD_DIRTY;
1538	MMCBUS_RELEASE_BUS(mmcbus, dev);
1539	return (err);
1540}
1541
1542static device_method_t mmcsd_methods[] = {
1543	DEVMETHOD(device_probe, mmcsd_probe),
1544	DEVMETHOD(device_attach, mmcsd_attach),
1545	DEVMETHOD(device_detach, mmcsd_detach),
1546	DEVMETHOD(device_shutdown, mmcsd_shutdown),
1547	DEVMETHOD(device_suspend, mmcsd_suspend),
1548	DEVMETHOD(device_resume, mmcsd_resume),
1549	DEVMETHOD_END
1550};
1551
1552static driver_t mmcsd_driver = {
1553	"mmcsd",
1554	mmcsd_methods,
1555	sizeof(struct mmcsd_softc),
1556};
1557static devclass_t mmcsd_devclass;
1558
1559static int
1560mmcsd_handler(module_t mod __unused, int what, void *arg __unused)
1561{
1562
1563	switch (what) {
1564	case MOD_LOAD:
1565		flash_register_slicer(mmcsd_slicer, FLASH_SLICES_TYPE_MMC,
1566		    TRUE);
1567		return (0);
1568	case MOD_UNLOAD:
1569		flash_register_slicer(NULL, FLASH_SLICES_TYPE_MMC, TRUE);
1570		return (0);
1571	}
1572	return (0);
1573}
1574
1575DRIVER_MODULE(mmcsd, mmc, mmcsd_driver, mmcsd_devclass, mmcsd_handler, NULL);
1576MODULE_DEPEND(mmcsd, g_flashmap, 0, 0, 0);
1577MMC_DEPEND(mmcsd);
1578