97  * fw_csr_string() - reads a string from the configuration ROM
498  * the config ROM.  We do all this with a cached bus generation.  If the bus
501  * are reading the ROM may have changed the ROM during the reset.
508 	u32 *rom, *stack;  in read_config_rom()  local
512 	rom = kmalloc(sizeof(*rom) * MAX_CONFIG_ROM_SIZE +  in read_config_rom()
514 	if (rom == NULL)  in read_config_rom()
517 	stack = &rom[MAX_CONFIG_ROM_SIZE];  in read_config_rom()
518 	memset(rom, 0, sizeof(*rom) * MAX_CONFIG_ROM_SIZE);  in read_config_rom()
524 		ret = read_rom(device, generation, i, &rom[i]);  in read_config_rom()
530 		 * rom to indicate that they are booting (for example,  in read_config_rom()
535 		if (i == 0 && rom[i] == 0) {  in read_config_rom()
552 	if ((rom[2] & 0x7) < device->max_speed ||  in read_config_rom()
570 	 * Now parse the config rom.  The config rom is a recursive  in read_config_rom()
582 		 * lower 24 bits is the offset into the config rom,  in read_config_rom()
594 		ret = read_rom(device, generation, i, &rom[i]);  in read_config_rom()
597 		end = i + (rom[i] >> 16) + 1;  in read_config_rom()
600 			 * This block extends outside the config ROM which is  in read_config_rom()
604 			fw_err(card, "skipped invalid ROM block %x at %llx\n",  in read_config_rom()
605 			       rom[i],  in read_config_rom()
607 			rom[i] = 0;  in read_config_rom()
618 			ret = read_rom(device, generation, i, &rom[i]);  in read_config_rom()
622 			if ((key >> 30) != 3 || (rom[i] >> 30) < 2)  in read_config_rom()
625 			 * Offset points outside the ROM.  May be a firmware  in read_config_rom()
626 			 * bug or an Extended ROM entry (IEEE 1212-2001 clause  in read_config_rom()
629 			 * the ROM don't have to check offsets all the time.  in read_config_rom()
631 			if (i + (rom[i] & 0xffffff) >= MAX_CONFIG_ROM_SIZE) {  in read_config_rom()
633 				       "skipped unsupported ROM entry %x at %llx\n",  in read_config_rom()
634 				       rom[i],  in read_config_rom()
636 				rom[i] = 0;  in read_config_rom()
639 			stack[sp++] = i + rom[i];  in read_config_rom()
646 	new_rom = kmemdup(rom, length * 4, GFP_KERNEL);  in read_config_rom()
659 	device->max_rec	= rom[2] >> 12 & 0xf;  in read_config_rom()
660 	device->cmc	= rom[2] >> 30 & 1;  in read_config_rom()
661 	device->irmc	= rom[2] >> 31 & 1;  in read_config_rom()
663 	kfree(rom);  in read_config_rom()
769  * rom.  It shouldn't be necessary to tweak these; if the device
770  * doesn't respond to a config rom read within 10 seconds, it's not
1000 				fw_notice(card, "giving up on node %x: reading config rom failed: %s\n",  in fw_device_init()
1078 	 * root node config rom.  If this races with a bus reset we  in fw_device_init()
1244 		 * first config rom scan half a second after bus reset.  in fw_node_event()
1292 		 * process of reading its config rom  in fw_node_event()
1296 		 * scheduled to read it's config rom, and we just put  in fw_node_event()