97  * fw_csr_string() - reads a string from the configuration ROM
500  * the config ROM.  We do all this with a cached bus generation.  If the bus
503  * are reading the ROM may have changed the ROM during the reset.
510 	u32 *rom, *stack;  in read_config_rom()  local
514 	rom = kmalloc(sizeof(*rom) * MAX_CONFIG_ROM_SIZE +  in read_config_rom()
516 	if (rom == NULL)  in read_config_rom()
519 	stack = &rom[MAX_CONFIG_ROM_SIZE];  in read_config_rom()
520 	memset(rom, 0, sizeof(*rom) * MAX_CONFIG_ROM_SIZE);  in read_config_rom()
526 		ret = read_rom(device, generation, i, &rom[i]);  in read_config_rom()
532 		 * rom to indicate that they are booting (for example,  in read_config_rom()
537 		if (i == 0 && rom[i] == 0) {  in read_config_rom()
554 	if ((rom[2] & 0x7) < device->max_speed ||  in read_config_rom()
572 	 * Now parse the config rom.  The config rom is a recursive  in read_config_rom()
584 		 * lower 24 bits is the offset into the config rom,  in read_config_rom()
596 		ret = read_rom(device, generation, i, &rom[i]);  in read_config_rom()
599 		end = i + (rom[i] >> 16) + 1;  in read_config_rom()
602 			 * This block extends outside the config ROM which is  in read_config_rom()
606 			fw_err(card, "skipped invalid ROM block %x at %llx\n",  in read_config_rom()
607 			       rom[i],  in read_config_rom()
609 			rom[i] = 0;  in read_config_rom()
620 			ret = read_rom(device, generation, i, &rom[i]);  in read_config_rom()
624 			if ((key >> 30) != 3 || (rom[i] >> 30) < 2)  in read_config_rom()
627 			 * Offset points outside the ROM.  May be a firmware  in read_config_rom()
628 			 * bug or an Extended ROM entry (IEEE 1212-2001 clause  in read_config_rom()
631 			 * the ROM don't have to check offsets all the time.  in read_config_rom()
633 			if (i + (rom[i] & 0xffffff) >= MAX_CONFIG_ROM_SIZE) {  in read_config_rom()
635 				       "skipped unsupported ROM entry %x at %llx\n",  in read_config_rom()
636 				       rom[i],  in read_config_rom()
638 				rom[i] = 0;  in read_config_rom()
641 			stack[sp++] = i + rom[i];  in read_config_rom()
648 	new_rom = kmemdup(rom, length * 4, GFP_KERNEL);  in read_config_rom()
661 	device->max_rec	= rom[2] >> 12 & 0xf;  in read_config_rom()
662 	device->cmc	= rom[2] >> 30 & 1;  in read_config_rom()
663 	device->irmc	= rom[2] >> 31 & 1;  in read_config_rom()
665 	kfree(rom);  in read_config_rom()
771  * rom.  It shouldn't be necessary to tweak these; if the device
772  * doesn't respond to a config rom read within 10 seconds, it's not
1002 				fw_notice(card, "giving up on node %x: reading config rom failed: %s\n",  in fw_device_init()
1080 	 * root node config rom.  If this races with a bus reset we  in fw_device_init()
1246 		 * first config rom scan half a second after bus reset.  in fw_node_event()
1294 		 * process of reading its config rom  in fw_node_event()
1298 		 * scheduled to read it's config rom, and we just put  in fw_node_event()