110  * fw_csr_string() - reads a string from the configuration ROM
514  * the config ROM.  We do all this with a cached bus generation.  If the bus
517  * are reading the ROM may have changed the ROM during the reset.
524 	u32 *rom, *stack;  in read_config_rom()  local
528 	rom = kmalloc(sizeof(*rom) * MAX_CONFIG_ROM_SIZE +  in read_config_rom()
530 	if (rom == NULL)  in read_config_rom()
533 	stack = &rom[MAX_CONFIG_ROM_SIZE];  in read_config_rom()
534 	memset(rom, 0, sizeof(*rom) * MAX_CONFIG_ROM_SIZE);  in read_config_rom()
540 		ret = read_rom(device, generation, i, &rom[i]);  in read_config_rom()
546 		 * rom to indicate that they are booting (for example,  in read_config_rom()
551 		if (i == 0 && rom[i] == 0) {  in read_config_rom()
568 	if ((rom[2] & 0x7) < device->max_speed ||  in read_config_rom()
586 	 * Now parse the config rom.  The config rom is a recursive  in read_config_rom()
598 		 * lower 24 bits is the offset into the config rom,  in read_config_rom()
610 		ret = read_rom(device, generation, i, &rom[i]);  in read_config_rom()
613 		end = i + (rom[i] >> 16) + 1;  in read_config_rom()
616 			 * This block extends outside the config ROM which is  in read_config_rom()
620 			fw_err(card, "skipped invalid ROM block %x at %llx\n",  in read_config_rom()
621 			       rom[i],  in read_config_rom()
623 			rom[i] = 0;  in read_config_rom()
634 			ret = read_rom(device, generation, i, &rom[i]);  in read_config_rom()
638 			if ((key >> 30) != 3 || (rom[i] >> 30) < 2)  in read_config_rom()
641 			 * Offset points outside the ROM.  May be a firmware  in read_config_rom()
642 			 * bug or an Extended ROM entry (IEEE 1212-2001 clause  in read_config_rom()
645 			 * the ROM don't have to check offsets all the time.  in read_config_rom()
647 			if (i + (rom[i] & 0xffffff) >= MAX_CONFIG_ROM_SIZE) {  in read_config_rom()
649 				       "skipped unsupported ROM entry %x at %llx\n",  in read_config_rom()
650 				       rom[i],  in read_config_rom()
652 				rom[i] = 0;  in read_config_rom()
655 			stack[sp++] = i + rom[i];  in read_config_rom()
662 	new_rom = kmemdup(rom, length * 4, GFP_KERNEL);  in read_config_rom()
675 	device->max_rec	= rom[2] >> 12 & 0xf;  in read_config_rom()
676 	device->cmc	= rom[2] >> 30 & 1;  in read_config_rom()
677 	device->irmc	= rom[2] >> 31 & 1;  in read_config_rom()
679 	kfree(rom);  in read_config_rom()
788  * rom.  It shouldn't be necessary to tweak these; if the device
789  * doesn't respond to a config rom read within 10 seconds, it's not
1019 				fw_notice(card, "giving up on node %x: reading config rom failed: %s\n",  in fw_device_init()
1097 	 * root node config rom.  If this races with a bus reset we  in fw_device_init()
1263 		 * first config rom scan half a second after bus reset.  in fw_node_event()
1311 		 * process of reading its config rom  in fw_node_event()
1315 		 * scheduled to read it's config rom, and we just put  in fw_node_event()