1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3 * Copyright 2010 Google Inc. All Rights Reserved.
4 * Author: dlaurie@google.com (Duncan Laurie)
5 *
6 * Re-worked to expose sysfs APIs by mikew@google.com (Mike Waychison)
7 *
8 * EFI SMI interface for Google platforms
9 */
10
11 #include <linux/kernel.h>
12 #include <linux/init.h>
13 #include <linux/types.h>
14 #include <linux/device.h>
15 #include <linux/platform_device.h>
16 #include <linux/errno.h>
17 #include <linux/string.h>
18 #include <linux/spinlock.h>
19 #include <linux/dma-mapping.h>
20 #include <linux/dmapool.h>
21 #include <linux/fs.h>
22 #include <linux/slab.h>
23 #include <linux/ioctl.h>
24 #include <linux/acpi.h>
25 #include <linux/io.h>
26 #include <linux/uaccess.h>
27 #include <linux/dmi.h>
28 #include <linux/kdebug.h>
29 #include <linux/reboot.h>
30 #include <linux/efi.h>
31 #include <linux/module.h>
32 #include <linux/ucs2_string.h>
33 #include <linux/suspend.h>
34
35 #define GSMI_SHUTDOWN_CLEAN 0 /* Clean Shutdown */
36 /* TODO(mikew@google.com): Tie in HARDLOCKUP_DETECTOR with NMIWDT */
37 #define GSMI_SHUTDOWN_NMIWDT 1 /* NMI Watchdog */
38 #define GSMI_SHUTDOWN_PANIC 2 /* Panic */
39 #define GSMI_SHUTDOWN_OOPS 3 /* Oops */
40 #define GSMI_SHUTDOWN_DIE 4 /* Die -- No longer meaningful */
41 #define GSMI_SHUTDOWN_MCE 5 /* Machine Check */
42 #define GSMI_SHUTDOWN_SOFTWDT 6 /* Software Watchdog */
43 #define GSMI_SHUTDOWN_MBE 7 /* Uncorrected ECC */
44 #define GSMI_SHUTDOWN_TRIPLE 8 /* Triple Fault */
45
46 #define DRIVER_VERSION "1.0"
47 #define GSMI_GUID_SIZE 16
48 #define GSMI_BUF_SIZE 1024
49 #define GSMI_BUF_ALIGN sizeof(u64)
50 #define GSMI_CALLBACK 0xef
51
52 /* SMI return codes */
53 #define GSMI_SUCCESS 0x00
54 #define GSMI_UNSUPPORTED2 0x03
55 #define GSMI_LOG_FULL 0x0b
56 #define GSMI_VAR_NOT_FOUND 0x0e
57 #define GSMI_HANDSHAKE_SPIN 0x7d
58 #define GSMI_HANDSHAKE_CF 0x7e
59 #define GSMI_HANDSHAKE_NONE 0x7f
60 #define GSMI_INVALID_PARAMETER 0x82
61 #define GSMI_UNSUPPORTED 0x83
62 #define GSMI_BUFFER_TOO_SMALL 0x85
63 #define GSMI_NOT_READY 0x86
64 #define GSMI_DEVICE_ERROR 0x87
65 #define GSMI_NOT_FOUND 0x8e
66
67 #define QUIRKY_BOARD_HASH 0x78a30a50
68
69 /* Internally used commands passed to the firmware */
70 #define GSMI_CMD_GET_NVRAM_VAR 0x01
71 #define GSMI_CMD_GET_NEXT_VAR 0x02
72 #define GSMI_CMD_SET_NVRAM_VAR 0x03
73 #define GSMI_CMD_SET_EVENT_LOG 0x08
74 #define GSMI_CMD_CLEAR_EVENT_LOG 0x09
75 #define GSMI_CMD_LOG_S0IX_SUSPEND 0x0a
76 #define GSMI_CMD_LOG_S0IX_RESUME 0x0b
77 #define GSMI_CMD_CLEAR_CONFIG 0x20
78 #define GSMI_CMD_HANDSHAKE_TYPE 0xC1
79 #define GSMI_CMD_RESERVED 0xff
80
81 /* Magic entry type for kernel events */
82 #define GSMI_LOG_ENTRY_TYPE_KERNEL 0xDEAD
83
84 /* SMI buffers must be in 32bit physical address space */
85 struct gsmi_buf {
86 u8 *start; /* start of buffer */
87 size_t length; /* length of buffer */
88 dma_addr_t handle; /* dma allocation handle */
89 u32 address; /* physical address of buffer */
90 };
91
92 static struct gsmi_device {
93 struct platform_device *pdev; /* platform device */
94 struct gsmi_buf *name_buf; /* variable name buffer */
95 struct gsmi_buf *data_buf; /* generic data buffer */
96 struct gsmi_buf *param_buf; /* parameter buffer */
97 spinlock_t lock; /* serialize access to SMIs */
98 u16 smi_cmd; /* SMI command port */
99 int handshake_type; /* firmware handler interlock type */
100 struct dma_pool *dma_pool; /* DMA buffer pool */
101 } gsmi_dev;
102
103 /* Packed structures for communicating with the firmware */
104 struct gsmi_nvram_var_param {
105 efi_guid_t guid;
106 u32 name_ptr;
107 u32 attributes;
108 u32 data_len;
109 u32 data_ptr;
110 } __packed;
111
112 struct gsmi_get_next_var_param {
113 u8 guid[GSMI_GUID_SIZE];
114 u32 name_ptr;
115 u32 name_len;
116 } __packed;
117
118 struct gsmi_set_eventlog_param {
119 u32 data_ptr;
120 u32 data_len;
121 u32 type;
122 } __packed;
123
124 /* Event log formats */
125 struct gsmi_log_entry_type_1 {
126 u16 type;
127 u32 instance;
128 } __packed;
129
130 /*
131 * Some platforms don't have explicit SMI handshake
132 * and need to wait for SMI to complete.
133 */
134 #define GSMI_DEFAULT_SPINCOUNT 0x10000
135 static unsigned int spincount = GSMI_DEFAULT_SPINCOUNT;
136 module_param(spincount, uint, 0600);
137 MODULE_PARM_DESC(spincount,
138 "The number of loop iterations to use when using the spin handshake.");
139
140 /*
141 * Platforms might not support S0ix logging in their GSMI handlers. In order to
142 * avoid any side-effects of generating an SMI for S0ix logging, use the S0ix
143 * related GSMI commands only for those platforms that explicitly enable this
144 * option.
145 */
146 static bool s0ix_logging_enable;
147 module_param(s0ix_logging_enable, bool, 0600);
148
gsmi_buf_alloc(void)149 static struct gsmi_buf *gsmi_buf_alloc(void)
150 {
151 struct gsmi_buf *smibuf;
152
153 smibuf = kzalloc(sizeof(*smibuf), GFP_KERNEL);
154 if (!smibuf) {
155 printk(KERN_ERR "gsmi: out of memory\n");
156 return NULL;
157 }
158
159 /* allocate buffer in 32bit address space */
160 smibuf->start = dma_pool_alloc(gsmi_dev.dma_pool, GFP_KERNEL,
161 &smibuf->handle);
162 if (!smibuf->start) {
163 printk(KERN_ERR "gsmi: failed to allocate name buffer\n");
164 kfree(smibuf);
165 return NULL;
166 }
167
168 /* fill in the buffer handle */
169 smibuf->length = GSMI_BUF_SIZE;
170 smibuf->address = (u32)virt_to_phys(smibuf->start);
171
172 return smibuf;
173 }
174
gsmi_buf_free(struct gsmi_buf * smibuf)175 static void gsmi_buf_free(struct gsmi_buf *smibuf)
176 {
177 if (smibuf) {
178 if (smibuf->start)
179 dma_pool_free(gsmi_dev.dma_pool, smibuf->start,
180 smibuf->handle);
181 kfree(smibuf);
182 }
183 }
184
185 /*
186 * Make a call to gsmi func(sub). GSMI error codes are translated to
187 * in-kernel errnos (0 on success, -ERRNO on error).
188 */
gsmi_exec(u8 func,u8 sub)189 static int gsmi_exec(u8 func, u8 sub)
190 {
191 u16 cmd = (sub << 8) | func;
192 u16 result = 0;
193 int rc = 0;
194
195 /*
196 * AH : Subfunction number
197 * AL : Function number
198 * EBX : Parameter block address
199 * DX : SMI command port
200 *
201 * Three protocols here. See also the comment in gsmi_init().
202 */
203 if (gsmi_dev.handshake_type == GSMI_HANDSHAKE_CF) {
204 /*
205 * If handshake_type == HANDSHAKE_CF then set CF on the
206 * way in and wait for the handler to clear it; this avoids
207 * corrupting register state on those chipsets which have
208 * a delay between writing the SMI trigger register and
209 * entering SMM.
210 */
211 asm volatile (
212 "stc\n"
213 "outb %%al, %%dx\n"
214 "1: jc 1b\n"
215 : "=a" (result)
216 : "0" (cmd),
217 "d" (gsmi_dev.smi_cmd),
218 "b" (gsmi_dev.param_buf->address)
219 : "memory", "cc"
220 );
221 } else if (gsmi_dev.handshake_type == GSMI_HANDSHAKE_SPIN) {
222 /*
223 * If handshake_type == HANDSHAKE_SPIN we spin a
224 * hundred-ish usecs to ensure the SMI has triggered.
225 */
226 asm volatile (
227 "outb %%al, %%dx\n"
228 "1: loop 1b\n"
229 : "=a" (result)
230 : "0" (cmd),
231 "d" (gsmi_dev.smi_cmd),
232 "b" (gsmi_dev.param_buf->address),
233 "c" (spincount)
234 : "memory", "cc"
235 );
236 } else {
237 /*
238 * If handshake_type == HANDSHAKE_NONE we do nothing;
239 * either we don't need to or it's legacy firmware that
240 * doesn't understand the CF protocol.
241 */
242 asm volatile (
243 "outb %%al, %%dx\n\t"
244 : "=a" (result)
245 : "0" (cmd),
246 "d" (gsmi_dev.smi_cmd),
247 "b" (gsmi_dev.param_buf->address)
248 : "memory", "cc"
249 );
250 }
251
252 /* check return code from SMI handler */
253 switch (result) {
254 case GSMI_SUCCESS:
255 break;
256 case GSMI_VAR_NOT_FOUND:
257 /* not really an error, but let the caller know */
258 rc = 1;
259 break;
260 case GSMI_INVALID_PARAMETER:
261 printk(KERN_ERR "gsmi: exec 0x%04x: Invalid parameter\n", cmd);
262 rc = -EINVAL;
263 break;
264 case GSMI_BUFFER_TOO_SMALL:
265 printk(KERN_ERR "gsmi: exec 0x%04x: Buffer too small\n", cmd);
266 rc = -ENOMEM;
267 break;
268 case GSMI_UNSUPPORTED:
269 case GSMI_UNSUPPORTED2:
270 if (sub != GSMI_CMD_HANDSHAKE_TYPE)
271 printk(KERN_ERR "gsmi: exec 0x%04x: Not supported\n",
272 cmd);
273 rc = -ENOSYS;
274 break;
275 case GSMI_NOT_READY:
276 printk(KERN_ERR "gsmi: exec 0x%04x: Not ready\n", cmd);
277 rc = -EBUSY;
278 break;
279 case GSMI_DEVICE_ERROR:
280 printk(KERN_ERR "gsmi: exec 0x%04x: Device error\n", cmd);
281 rc = -EFAULT;
282 break;
283 case GSMI_NOT_FOUND:
284 printk(KERN_ERR "gsmi: exec 0x%04x: Data not found\n", cmd);
285 rc = -ENOENT;
286 break;
287 case GSMI_LOG_FULL:
288 printk(KERN_ERR "gsmi: exec 0x%04x: Log full\n", cmd);
289 rc = -ENOSPC;
290 break;
291 case GSMI_HANDSHAKE_CF:
292 case GSMI_HANDSHAKE_SPIN:
293 case GSMI_HANDSHAKE_NONE:
294 rc = result;
295 break;
296 default:
297 printk(KERN_ERR "gsmi: exec 0x%04x: Unknown error 0x%04x\n",
298 cmd, result);
299 rc = -ENXIO;
300 }
301
302 return rc;
303 }
304
305 #ifdef CONFIG_EFI
306
307 static struct efivars efivars;
308
gsmi_get_variable(efi_char16_t * name,efi_guid_t * vendor,u32 * attr,unsigned long * data_size,void * data)309 static efi_status_t gsmi_get_variable(efi_char16_t *name,
310 efi_guid_t *vendor, u32 *attr,
311 unsigned long *data_size,
312 void *data)
313 {
314 struct gsmi_nvram_var_param param = {
315 .name_ptr = gsmi_dev.name_buf->address,
316 .data_ptr = gsmi_dev.data_buf->address,
317 .data_len = (u32)*data_size,
318 };
319 efi_status_t ret = EFI_SUCCESS;
320 unsigned long flags;
321 size_t name_len = ucs2_strnlen(name, GSMI_BUF_SIZE / 2);
322 int rc;
323
324 if (name_len >= GSMI_BUF_SIZE / 2)
325 return EFI_BAD_BUFFER_SIZE;
326
327 spin_lock_irqsave(&gsmi_dev.lock, flags);
328
329 /* Vendor guid */
330 memcpy(¶m.guid, vendor, sizeof(param.guid));
331
332 /* variable name, already in UTF-16 */
333 memset(gsmi_dev.name_buf->start, 0, gsmi_dev.name_buf->length);
334 memcpy(gsmi_dev.name_buf->start, name, name_len * 2);
335
336 /* data pointer */
337 memset(gsmi_dev.data_buf->start, 0, gsmi_dev.data_buf->length);
338
339 /* parameter buffer */
340 memset(gsmi_dev.param_buf->start, 0, gsmi_dev.param_buf->length);
341 memcpy(gsmi_dev.param_buf->start, ¶m, sizeof(param));
342
343 rc = gsmi_exec(GSMI_CALLBACK, GSMI_CMD_GET_NVRAM_VAR);
344 if (rc < 0) {
345 printk(KERN_ERR "gsmi: Get Variable failed\n");
346 ret = EFI_LOAD_ERROR;
347 } else if (rc == 1) {
348 /* variable was not found */
349 ret = EFI_NOT_FOUND;
350 } else {
351 /* Get the arguments back */
352 memcpy(¶m, gsmi_dev.param_buf->start, sizeof(param));
353
354 /* The size reported is the min of all of our buffers */
355 *data_size = min_t(unsigned long, *data_size,
356 gsmi_dev.data_buf->length);
357 *data_size = min_t(unsigned long, *data_size, param.data_len);
358
359 /* Copy data back to return buffer. */
360 memcpy(data, gsmi_dev.data_buf->start, *data_size);
361
362 /* All variables are have the following attributes */
363 if (attr)
364 *attr = EFI_VARIABLE_NON_VOLATILE |
365 EFI_VARIABLE_BOOTSERVICE_ACCESS |
366 EFI_VARIABLE_RUNTIME_ACCESS;
367 }
368
369 spin_unlock_irqrestore(&gsmi_dev.lock, flags);
370
371 return ret;
372 }
373
gsmi_get_next_variable(unsigned long * name_size,efi_char16_t * name,efi_guid_t * vendor)374 static efi_status_t gsmi_get_next_variable(unsigned long *name_size,
375 efi_char16_t *name,
376 efi_guid_t *vendor)
377 {
378 struct gsmi_get_next_var_param param = {
379 .name_ptr = gsmi_dev.name_buf->address,
380 .name_len = gsmi_dev.name_buf->length,
381 };
382 efi_status_t ret = EFI_SUCCESS;
383 int rc;
384 unsigned long flags;
385
386 /* For the moment, only support buffers that exactly match in size */
387 if (*name_size != GSMI_BUF_SIZE)
388 return EFI_BAD_BUFFER_SIZE;
389
390 /* Let's make sure the thing is at least null-terminated */
391 if (ucs2_strnlen(name, GSMI_BUF_SIZE / 2) == GSMI_BUF_SIZE / 2)
392 return EFI_INVALID_PARAMETER;
393
394 spin_lock_irqsave(&gsmi_dev.lock, flags);
395
396 /* guid */
397 memcpy(¶m.guid, vendor, sizeof(param.guid));
398
399 /* variable name, already in UTF-16 */
400 memcpy(gsmi_dev.name_buf->start, name, *name_size);
401
402 /* parameter buffer */
403 memset(gsmi_dev.param_buf->start, 0, gsmi_dev.param_buf->length);
404 memcpy(gsmi_dev.param_buf->start, ¶m, sizeof(param));
405
406 rc = gsmi_exec(GSMI_CALLBACK, GSMI_CMD_GET_NEXT_VAR);
407 if (rc < 0) {
408 printk(KERN_ERR "gsmi: Get Next Variable Name failed\n");
409 ret = EFI_LOAD_ERROR;
410 } else if (rc == 1) {
411 /* variable not found -- end of list */
412 ret = EFI_NOT_FOUND;
413 } else {
414 /* copy variable data back to return buffer */
415 memcpy(¶m, gsmi_dev.param_buf->start, sizeof(param));
416
417 /* Copy the name back */
418 memcpy(name, gsmi_dev.name_buf->start, GSMI_BUF_SIZE);
419 *name_size = ucs2_strnlen(name, GSMI_BUF_SIZE / 2) * 2;
420
421 /* copy guid to return buffer */
422 memcpy(vendor, ¶m.guid, sizeof(param.guid));
423 ret = EFI_SUCCESS;
424 }
425
426 spin_unlock_irqrestore(&gsmi_dev.lock, flags);
427
428 return ret;
429 }
430
gsmi_set_variable(efi_char16_t * name,efi_guid_t * vendor,u32 attr,unsigned long data_size,void * data)431 static efi_status_t gsmi_set_variable(efi_char16_t *name,
432 efi_guid_t *vendor,
433 u32 attr,
434 unsigned long data_size,
435 void *data)
436 {
437 struct gsmi_nvram_var_param param = {
438 .name_ptr = gsmi_dev.name_buf->address,
439 .data_ptr = gsmi_dev.data_buf->address,
440 .data_len = (u32)data_size,
441 .attributes = EFI_VARIABLE_NON_VOLATILE |
442 EFI_VARIABLE_BOOTSERVICE_ACCESS |
443 EFI_VARIABLE_RUNTIME_ACCESS,
444 };
445 size_t name_len = ucs2_strnlen(name, GSMI_BUF_SIZE / 2);
446 efi_status_t ret = EFI_SUCCESS;
447 int rc;
448 unsigned long flags;
449
450 if (name_len >= GSMI_BUF_SIZE / 2)
451 return EFI_BAD_BUFFER_SIZE;
452
453 spin_lock_irqsave(&gsmi_dev.lock, flags);
454
455 /* guid */
456 memcpy(¶m.guid, vendor, sizeof(param.guid));
457
458 /* variable name, already in UTF-16 */
459 memset(gsmi_dev.name_buf->start, 0, gsmi_dev.name_buf->length);
460 memcpy(gsmi_dev.name_buf->start, name, name_len * 2);
461
462 /* data pointer */
463 memset(gsmi_dev.data_buf->start, 0, gsmi_dev.data_buf->length);
464 memcpy(gsmi_dev.data_buf->start, data, data_size);
465
466 /* parameter buffer */
467 memset(gsmi_dev.param_buf->start, 0, gsmi_dev.param_buf->length);
468 memcpy(gsmi_dev.param_buf->start, ¶m, sizeof(param));
469
470 rc = gsmi_exec(GSMI_CALLBACK, GSMI_CMD_SET_NVRAM_VAR);
471 if (rc < 0) {
472 printk(KERN_ERR "gsmi: Set Variable failed\n");
473 ret = EFI_INVALID_PARAMETER;
474 }
475
476 spin_unlock_irqrestore(&gsmi_dev.lock, flags);
477
478 return ret;
479 }
480
481 static const struct efivar_operations efivar_ops = {
482 .get_variable = gsmi_get_variable,
483 .set_variable = gsmi_set_variable,
484 .get_next_variable = gsmi_get_next_variable,
485 };
486
487 #endif /* CONFIG_EFI */
488
eventlog_write(struct file * filp,struct kobject * kobj,struct bin_attribute * bin_attr,char * buf,loff_t pos,size_t count)489 static ssize_t eventlog_write(struct file *filp, struct kobject *kobj,
490 struct bin_attribute *bin_attr,
491 char *buf, loff_t pos, size_t count)
492 {
493 struct gsmi_set_eventlog_param param = {
494 .data_ptr = gsmi_dev.data_buf->address,
495 };
496 int rc = 0;
497 unsigned long flags;
498
499 /* Pull the type out */
500 if (count < sizeof(u32))
501 return -EINVAL;
502 param.type = *(u32 *)buf;
503 buf += sizeof(u32);
504
505 /* The remaining buffer is the data payload */
506 if ((count - sizeof(u32)) > gsmi_dev.data_buf->length)
507 return -EINVAL;
508 param.data_len = count - sizeof(u32);
509
510 spin_lock_irqsave(&gsmi_dev.lock, flags);
511
512 /* data pointer */
513 memset(gsmi_dev.data_buf->start, 0, gsmi_dev.data_buf->length);
514 memcpy(gsmi_dev.data_buf->start, buf, param.data_len);
515
516 /* parameter buffer */
517 memset(gsmi_dev.param_buf->start, 0, gsmi_dev.param_buf->length);
518 memcpy(gsmi_dev.param_buf->start, ¶m, sizeof(param));
519
520 rc = gsmi_exec(GSMI_CALLBACK, GSMI_CMD_SET_EVENT_LOG);
521 if (rc < 0)
522 printk(KERN_ERR "gsmi: Set Event Log failed\n");
523
524 spin_unlock_irqrestore(&gsmi_dev.lock, flags);
525
526 return (rc == 0) ? count : rc;
527
528 }
529
530 static struct bin_attribute eventlog_bin_attr = {
531 .attr = {.name = "append_to_eventlog", .mode = 0200},
532 .write = eventlog_write,
533 };
534
gsmi_clear_eventlog_store(struct kobject * kobj,struct kobj_attribute * attr,const char * buf,size_t count)535 static ssize_t gsmi_clear_eventlog_store(struct kobject *kobj,
536 struct kobj_attribute *attr,
537 const char *buf, size_t count)
538 {
539 int rc;
540 unsigned long flags;
541 unsigned long val;
542 struct {
543 u32 percentage;
544 u32 data_type;
545 } param;
546
547 rc = kstrtoul(buf, 0, &val);
548 if (rc)
549 return rc;
550
551 /*
552 * Value entered is a percentage, 0 through 100, anything else
553 * is invalid.
554 */
555 if (val > 100)
556 return -EINVAL;
557
558 /* data_type here selects the smbios event log. */
559 param.percentage = val;
560 param.data_type = 0;
561
562 spin_lock_irqsave(&gsmi_dev.lock, flags);
563
564 /* parameter buffer */
565 memset(gsmi_dev.param_buf->start, 0, gsmi_dev.param_buf->length);
566 memcpy(gsmi_dev.param_buf->start, ¶m, sizeof(param));
567
568 rc = gsmi_exec(GSMI_CALLBACK, GSMI_CMD_CLEAR_EVENT_LOG);
569
570 spin_unlock_irqrestore(&gsmi_dev.lock, flags);
571
572 if (rc)
573 return rc;
574 return count;
575 }
576
577 static struct kobj_attribute gsmi_clear_eventlog_attr = {
578 .attr = {.name = "clear_eventlog", .mode = 0200},
579 .store = gsmi_clear_eventlog_store,
580 };
581
gsmi_clear_config_store(struct kobject * kobj,struct kobj_attribute * attr,const char * buf,size_t count)582 static ssize_t gsmi_clear_config_store(struct kobject *kobj,
583 struct kobj_attribute *attr,
584 const char *buf, size_t count)
585 {
586 int rc;
587 unsigned long flags;
588
589 spin_lock_irqsave(&gsmi_dev.lock, flags);
590
591 /* clear parameter buffer */
592 memset(gsmi_dev.param_buf->start, 0, gsmi_dev.param_buf->length);
593
594 rc = gsmi_exec(GSMI_CALLBACK, GSMI_CMD_CLEAR_CONFIG);
595
596 spin_unlock_irqrestore(&gsmi_dev.lock, flags);
597
598 if (rc)
599 return rc;
600 return count;
601 }
602
603 static struct kobj_attribute gsmi_clear_config_attr = {
604 .attr = {.name = "clear_config", .mode = 0200},
605 .store = gsmi_clear_config_store,
606 };
607
608 static const struct attribute *gsmi_attrs[] = {
609 &gsmi_clear_config_attr.attr,
610 &gsmi_clear_eventlog_attr.attr,
611 NULL,
612 };
613
gsmi_shutdown_reason(int reason)614 static int gsmi_shutdown_reason(int reason)
615 {
616 struct gsmi_log_entry_type_1 entry = {
617 .type = GSMI_LOG_ENTRY_TYPE_KERNEL,
618 .instance = reason,
619 };
620 struct gsmi_set_eventlog_param param = {
621 .data_len = sizeof(entry),
622 .type = 1,
623 };
624 static int saved_reason;
625 int rc = 0;
626 unsigned long flags;
627
628 /* avoid duplicate entries in the log */
629 if (saved_reason & (1 << reason))
630 return 0;
631
632 spin_lock_irqsave(&gsmi_dev.lock, flags);
633
634 saved_reason |= (1 << reason);
635
636 /* data pointer */
637 memset(gsmi_dev.data_buf->start, 0, gsmi_dev.data_buf->length);
638 memcpy(gsmi_dev.data_buf->start, &entry, sizeof(entry));
639
640 /* parameter buffer */
641 param.data_ptr = gsmi_dev.data_buf->address;
642 memset(gsmi_dev.param_buf->start, 0, gsmi_dev.param_buf->length);
643 memcpy(gsmi_dev.param_buf->start, ¶m, sizeof(param));
644
645 rc = gsmi_exec(GSMI_CALLBACK, GSMI_CMD_SET_EVENT_LOG);
646
647 spin_unlock_irqrestore(&gsmi_dev.lock, flags);
648
649 if (rc < 0)
650 printk(KERN_ERR "gsmi: Log Shutdown Reason failed\n");
651 else
652 printk(KERN_EMERG "gsmi: Log Shutdown Reason 0x%02x\n",
653 reason);
654
655 return rc;
656 }
657
gsmi_reboot_callback(struct notifier_block * nb,unsigned long reason,void * arg)658 static int gsmi_reboot_callback(struct notifier_block *nb,
659 unsigned long reason, void *arg)
660 {
661 gsmi_shutdown_reason(GSMI_SHUTDOWN_CLEAN);
662 return NOTIFY_DONE;
663 }
664
665 static struct notifier_block gsmi_reboot_notifier = {
666 .notifier_call = gsmi_reboot_callback
667 };
668
gsmi_die_callback(struct notifier_block * nb,unsigned long reason,void * arg)669 static int gsmi_die_callback(struct notifier_block *nb,
670 unsigned long reason, void *arg)
671 {
672 if (reason == DIE_OOPS)
673 gsmi_shutdown_reason(GSMI_SHUTDOWN_OOPS);
674 return NOTIFY_DONE;
675 }
676
677 static struct notifier_block gsmi_die_notifier = {
678 .notifier_call = gsmi_die_callback
679 };
680
gsmi_panic_callback(struct notifier_block * nb,unsigned long reason,void * arg)681 static int gsmi_panic_callback(struct notifier_block *nb,
682 unsigned long reason, void *arg)
683 {
684
685 /*
686 * Panic callbacks are executed with all other CPUs stopped,
687 * so we must not attempt to spin waiting for gsmi_dev.lock
688 * to be released.
689 */
690 if (spin_is_locked(&gsmi_dev.lock))
691 return NOTIFY_DONE;
692
693 gsmi_shutdown_reason(GSMI_SHUTDOWN_PANIC);
694 return NOTIFY_DONE;
695 }
696
697 static struct notifier_block gsmi_panic_notifier = {
698 .notifier_call = gsmi_panic_callback,
699 };
700
701 /*
702 * This hash function was blatantly copied from include/linux/hash.h.
703 * It is used by this driver to obfuscate a board name that requires a
704 * quirk within this driver.
705 *
706 * Please do not remove this copy of the function as any changes to the
707 * global utility hash_64() function would break this driver's ability
708 * to identify a board and provide the appropriate quirk -- mikew@google.com
709 */
local_hash_64(u64 val,unsigned bits)710 static u64 __init local_hash_64(u64 val, unsigned bits)
711 {
712 u64 hash = val;
713
714 /* Sigh, gcc can't optimise this alone like it does for 32 bits. */
715 u64 n = hash;
716 n <<= 18;
717 hash -= n;
718 n <<= 33;
719 hash -= n;
720 n <<= 3;
721 hash += n;
722 n <<= 3;
723 hash -= n;
724 n <<= 4;
725 hash += n;
726 n <<= 2;
727 hash += n;
728
729 /* High bits are more random, so use them. */
730 return hash >> (64 - bits);
731 }
732
hash_oem_table_id(char s[8])733 static u32 __init hash_oem_table_id(char s[8])
734 {
735 u64 input;
736 memcpy(&input, s, 8);
737 return local_hash_64(input, 32);
738 }
739
740 static const struct dmi_system_id gsmi_dmi_table[] __initconst = {
741 {
742 .ident = "Google Board",
743 .matches = {
744 DMI_MATCH(DMI_BOARD_VENDOR, "Google, Inc."),
745 },
746 },
747 {
748 .ident = "Coreboot Firmware",
749 .matches = {
750 DMI_MATCH(DMI_BIOS_VENDOR, "coreboot"),
751 },
752 },
753 {}
754 };
755 MODULE_DEVICE_TABLE(dmi, gsmi_dmi_table);
756
gsmi_system_valid(void)757 static __init int gsmi_system_valid(void)
758 {
759 u32 hash;
760 u16 cmd, result;
761
762 if (!dmi_check_system(gsmi_dmi_table))
763 return -ENODEV;
764
765 /*
766 * Only newer firmware supports the gsmi interface. All older
767 * firmware that didn't support this interface used to plug the
768 * table name in the first four bytes of the oem_table_id field.
769 * Newer firmware doesn't do that though, so use that as the
770 * discriminant factor. We have to do this in order to
771 * whitewash our board names out of the public driver.
772 */
773 if (!strncmp(acpi_gbl_FADT.header.oem_table_id, "FACP", 4)) {
774 printk(KERN_INFO "gsmi: Board is too old\n");
775 return -ENODEV;
776 }
777
778 /* Disable on board with 1.0 BIOS due to Google bug 2602657 */
779 hash = hash_oem_table_id(acpi_gbl_FADT.header.oem_table_id);
780 if (hash == QUIRKY_BOARD_HASH) {
781 const char *bios_ver = dmi_get_system_info(DMI_BIOS_VERSION);
782 if (strncmp(bios_ver, "1.0", 3) == 0) {
783 pr_info("gsmi: disabled on this board's BIOS %s\n",
784 bios_ver);
785 return -ENODEV;
786 }
787 }
788
789 /* check for valid SMI command port in ACPI FADT */
790 if (acpi_gbl_FADT.smi_command == 0) {
791 pr_info("gsmi: missing smi_command\n");
792 return -ENODEV;
793 }
794
795 /* Test the smihandler with a bogus command. If it leaves the
796 * calling argument in %ax untouched, there is no handler for
797 * GSMI commands.
798 */
799 cmd = GSMI_CALLBACK | GSMI_CMD_RESERVED << 8;
800 asm volatile (
801 "outb %%al, %%dx\n\t"
802 : "=a" (result)
803 : "0" (cmd),
804 "d" (acpi_gbl_FADT.smi_command)
805 : "memory", "cc"
806 );
807 if (cmd == result) {
808 pr_info("gsmi: no gsmi handler in firmware\n");
809 return -ENODEV;
810 }
811
812 /* Found */
813 return 0;
814 }
815
816 static struct kobject *gsmi_kobj;
817
818 static const struct platform_device_info gsmi_dev_info = {
819 .name = "gsmi",
820 .id = -1,
821 /* SMI callbacks require 32bit addresses */
822 .dma_mask = DMA_BIT_MASK(32),
823 };
824
825 #ifdef CONFIG_PM
gsmi_log_s0ix_info(u8 cmd)826 static void gsmi_log_s0ix_info(u8 cmd)
827 {
828 unsigned long flags;
829
830 /*
831 * If platform has not enabled S0ix logging, then no action is
832 * necessary.
833 */
834 if (!s0ix_logging_enable)
835 return;
836
837 spin_lock_irqsave(&gsmi_dev.lock, flags);
838
839 memset(gsmi_dev.param_buf->start, 0, gsmi_dev.param_buf->length);
840
841 gsmi_exec(GSMI_CALLBACK, cmd);
842
843 spin_unlock_irqrestore(&gsmi_dev.lock, flags);
844 }
845
gsmi_log_s0ix_suspend(struct device * dev)846 static int gsmi_log_s0ix_suspend(struct device *dev)
847 {
848 /*
849 * If system is not suspending via firmware using the standard ACPI Sx
850 * types, then make a GSMI call to log the suspend info.
851 */
852 if (!pm_suspend_via_firmware())
853 gsmi_log_s0ix_info(GSMI_CMD_LOG_S0IX_SUSPEND);
854
855 /*
856 * Always return success, since we do not want suspend
857 * to fail just because of logging failure.
858 */
859 return 0;
860 }
861
gsmi_log_s0ix_resume(struct device * dev)862 static int gsmi_log_s0ix_resume(struct device *dev)
863 {
864 /*
865 * If system did not resume via firmware, then make a GSMI call to log
866 * the resume info and wake source.
867 */
868 if (!pm_resume_via_firmware())
869 gsmi_log_s0ix_info(GSMI_CMD_LOG_S0IX_RESUME);
870
871 /*
872 * Always return success, since we do not want resume
873 * to fail just because of logging failure.
874 */
875 return 0;
876 }
877
878 static const struct dev_pm_ops gsmi_pm_ops = {
879 .suspend_noirq = gsmi_log_s0ix_suspend,
880 .resume_noirq = gsmi_log_s0ix_resume,
881 };
882
gsmi_platform_driver_probe(struct platform_device * dev)883 static int gsmi_platform_driver_probe(struct platform_device *dev)
884 {
885 return 0;
886 }
887
888 static struct platform_driver gsmi_driver_info = {
889 .driver = {
890 .name = "gsmi",
891 .pm = &gsmi_pm_ops,
892 },
893 .probe = gsmi_platform_driver_probe,
894 };
895 #endif
896
gsmi_init(void)897 static __init int gsmi_init(void)
898 {
899 unsigned long flags;
900 int ret;
901
902 ret = gsmi_system_valid();
903 if (ret)
904 return ret;
905
906 gsmi_dev.smi_cmd = acpi_gbl_FADT.smi_command;
907
908 #ifdef CONFIG_PM
909 ret = platform_driver_register(&gsmi_driver_info);
910 if (unlikely(ret)) {
911 printk(KERN_ERR "gsmi: unable to register platform driver\n");
912 return ret;
913 }
914 #endif
915
916 /* register device */
917 gsmi_dev.pdev = platform_device_register_full(&gsmi_dev_info);
918 if (IS_ERR(gsmi_dev.pdev)) {
919 printk(KERN_ERR "gsmi: unable to register platform device\n");
920 return PTR_ERR(gsmi_dev.pdev);
921 }
922
923 /* SMI access needs to be serialized */
924 spin_lock_init(&gsmi_dev.lock);
925
926 ret = -ENOMEM;
927 gsmi_dev.dma_pool = dma_pool_create("gsmi", &gsmi_dev.pdev->dev,
928 GSMI_BUF_SIZE, GSMI_BUF_ALIGN, 0);
929 if (!gsmi_dev.dma_pool)
930 goto out_err;
931
932 /*
933 * pre-allocate buffers because sometimes we are called when
934 * this is not feasible: oops, panic, die, mce, etc
935 */
936 gsmi_dev.name_buf = gsmi_buf_alloc();
937 if (!gsmi_dev.name_buf) {
938 printk(KERN_ERR "gsmi: failed to allocate name buffer\n");
939 goto out_err;
940 }
941
942 gsmi_dev.data_buf = gsmi_buf_alloc();
943 if (!gsmi_dev.data_buf) {
944 printk(KERN_ERR "gsmi: failed to allocate data buffer\n");
945 goto out_err;
946 }
947
948 gsmi_dev.param_buf = gsmi_buf_alloc();
949 if (!gsmi_dev.param_buf) {
950 printk(KERN_ERR "gsmi: failed to allocate param buffer\n");
951 goto out_err;
952 }
953
954 /*
955 * Determine type of handshake used to serialize the SMI
956 * entry. See also gsmi_exec().
957 *
958 * There's a "behavior" present on some chipsets where writing the
959 * SMI trigger register in the southbridge doesn't result in an
960 * immediate SMI. Rather, the processor can execute "a few" more
961 * instructions before the SMI takes effect. To ensure synchronous
962 * behavior, implement a handshake between the kernel driver and the
963 * firmware handler to spin until released. This ioctl determines
964 * the type of handshake.
965 *
966 * NONE: The firmware handler does not implement any
967 * handshake. Either it doesn't need to, or it's legacy firmware
968 * that doesn't know it needs to and never will.
969 *
970 * CF: The firmware handler will clear the CF in the saved
971 * state before returning. The driver may set the CF and test for
972 * it to clear before proceeding.
973 *
974 * SPIN: The firmware handler does not implement any handshake
975 * but the driver should spin for a hundred or so microseconds
976 * to ensure the SMI has triggered.
977 *
978 * Finally, the handler will return -ENOSYS if
979 * GSMI_CMD_HANDSHAKE_TYPE is unimplemented, which implies
980 * HANDSHAKE_NONE.
981 */
982 spin_lock_irqsave(&gsmi_dev.lock, flags);
983 gsmi_dev.handshake_type = GSMI_HANDSHAKE_SPIN;
984 gsmi_dev.handshake_type =
985 gsmi_exec(GSMI_CALLBACK, GSMI_CMD_HANDSHAKE_TYPE);
986 if (gsmi_dev.handshake_type == -ENOSYS)
987 gsmi_dev.handshake_type = GSMI_HANDSHAKE_NONE;
988 spin_unlock_irqrestore(&gsmi_dev.lock, flags);
989
990 /* Remove and clean up gsmi if the handshake could not complete. */
991 if (gsmi_dev.handshake_type == -ENXIO) {
992 printk(KERN_INFO "gsmi version " DRIVER_VERSION
993 " failed to load\n");
994 ret = -ENODEV;
995 goto out_err;
996 }
997
998 /* Register in the firmware directory */
999 ret = -ENOMEM;
1000 gsmi_kobj = kobject_create_and_add("gsmi", firmware_kobj);
1001 if (!gsmi_kobj) {
1002 printk(KERN_INFO "gsmi: Failed to create firmware kobj\n");
1003 goto out_err;
1004 }
1005
1006 /* Setup eventlog access */
1007 ret = sysfs_create_bin_file(gsmi_kobj, &eventlog_bin_attr);
1008 if (ret) {
1009 printk(KERN_INFO "gsmi: Failed to setup eventlog");
1010 goto out_err;
1011 }
1012
1013 /* Other attributes */
1014 ret = sysfs_create_files(gsmi_kobj, gsmi_attrs);
1015 if (ret) {
1016 printk(KERN_INFO "gsmi: Failed to add attrs");
1017 goto out_remove_bin_file;
1018 }
1019
1020 #ifdef CONFIG_EFI
1021 ret = efivars_register(&efivars, &efivar_ops, gsmi_kobj);
1022 if (ret) {
1023 printk(KERN_INFO "gsmi: Failed to register efivars\n");
1024 sysfs_remove_files(gsmi_kobj, gsmi_attrs);
1025 goto out_remove_bin_file;
1026 }
1027 #endif
1028
1029 register_reboot_notifier(&gsmi_reboot_notifier);
1030 register_die_notifier(&gsmi_die_notifier);
1031 atomic_notifier_chain_register(&panic_notifier_list,
1032 &gsmi_panic_notifier);
1033
1034 printk(KERN_INFO "gsmi version " DRIVER_VERSION " loaded\n");
1035
1036 return 0;
1037
1038 out_remove_bin_file:
1039 sysfs_remove_bin_file(gsmi_kobj, &eventlog_bin_attr);
1040 out_err:
1041 kobject_put(gsmi_kobj);
1042 gsmi_buf_free(gsmi_dev.param_buf);
1043 gsmi_buf_free(gsmi_dev.data_buf);
1044 gsmi_buf_free(gsmi_dev.name_buf);
1045 dma_pool_destroy(gsmi_dev.dma_pool);
1046 platform_device_unregister(gsmi_dev.pdev);
1047 pr_info("gsmi: failed to load: %d\n", ret);
1048 #ifdef CONFIG_PM
1049 platform_driver_unregister(&gsmi_driver_info);
1050 #endif
1051 return ret;
1052 }
1053
gsmi_exit(void)1054 static void __exit gsmi_exit(void)
1055 {
1056 unregister_reboot_notifier(&gsmi_reboot_notifier);
1057 unregister_die_notifier(&gsmi_die_notifier);
1058 atomic_notifier_chain_unregister(&panic_notifier_list,
1059 &gsmi_panic_notifier);
1060 #ifdef CONFIG_EFI
1061 efivars_unregister(&efivars);
1062 #endif
1063
1064 sysfs_remove_files(gsmi_kobj, gsmi_attrs);
1065 sysfs_remove_bin_file(gsmi_kobj, &eventlog_bin_attr);
1066 kobject_put(gsmi_kobj);
1067 gsmi_buf_free(gsmi_dev.param_buf);
1068 gsmi_buf_free(gsmi_dev.data_buf);
1069 gsmi_buf_free(gsmi_dev.name_buf);
1070 dma_pool_destroy(gsmi_dev.dma_pool);
1071 platform_device_unregister(gsmi_dev.pdev);
1072 #ifdef CONFIG_PM
1073 platform_driver_unregister(&gsmi_driver_info);
1074 #endif
1075 }
1076
1077 module_init(gsmi_init);
1078 module_exit(gsmi_exit);
1079
1080 MODULE_AUTHOR("Google, Inc.");
1081 MODULE_LICENSE("GPL");
1082