dbg.c 52.6 KB
Newer Older
1 2 3 4 5 6 7 8 9
/******************************************************************************
 *
 * This file is provided under a dual BSD/GPLv2 license.  When using or
 * redistributing this file, you may do so under either license.
 *
 * GPL LICENSE SUMMARY
 *
 * Copyright(c) 2008 - 2014 Intel Corporation. All rights reserved.
 * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH
10
 * Copyright(c) 2015 - 2017 Intel Deutschland GmbH
11
 * Copyright(c) 2018        Intel Corporation
12 13 14 15 16 17 18 19 20 21 22 23 24 25
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of version 2 of the GNU General Public License as
 * published by the Free Software Foundation.
 *
 * This program is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * General Public License for more details.
 *
 * The full GNU General Public License is included in this distribution
 * in the file called COPYING.
 *
 * Contact Information:
26
 *  Intel Linux Wireless <linuxwifi@intel.com>
27 28 29 30 31 32
 * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
 *
 * BSD LICENSE
 *
 * Copyright(c) 2005 - 2014 Intel Corporation. All rights reserved.
 * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH
33
 * Copyright(c) 2015 - 2017 Intel Deutschland GmbH
34
 * Copyright(c) 2018        Intel Corporation
35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 *  * Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 *  * Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in
 *    the documentation and/or other materials provided with the
 *    distribution.
 *  * Neither the name Intel Corporation nor the names of its
 *    contributors may be used to endorse or promote products derived
 *    from this software without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
 * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 *
 *****************************************************************************/
#include <linux/devcoredump.h>
65 66 67
#include "iwl-drv.h"
#include "runtime.h"
#include "dbg.h"
68
#include "debugfs.h"
69 70 71 72
#include "iwl-io.h"
#include "iwl-prph.h"
#include "iwl-csr.h"

73 74 75 76 77 78 79 80 81 82 83 84 85 86 87
/**
 * struct iwl_fw_dump_ptrs - set of pointers needed for the fw-error-dump
 *
 * @fwrt_ptr: pointer to the buffer coming from fwrt
 * @trans_ptr: pointer to struct %iwl_trans_dump_data which contains the
 *	transport's data.
 * @trans_len: length of the valid data in trans_ptr
 * @fwrt_len: length of the valid data in fwrt_ptr
 */
struct iwl_fw_dump_ptrs {
	struct iwl_trans_dump_data *trans_ptr;
	void *fwrt_ptr;
	u32 fwrt_len;
};

88
#define RADIO_REG_MAX_READ 0x2ad
89 90
static void iwl_read_radio_regs(struct iwl_fw_runtime *fwrt,
				struct iwl_fw_error_dump_data **dump_data)
91 92 93 94 95
{
	u8 *pos = (void *)(*dump_data)->data;
	unsigned long flags;
	int i;

96 97
	IWL_DEBUG_INFO(fwrt, "WRT radio registers dump\n");

98
	if (!iwl_trans_grab_nic_access(fwrt->trans, &flags))
99 100 101 102 103 104 105 106 107
		return;

	(*dump_data)->type = cpu_to_le32(IWL_FW_ERROR_DUMP_RADIO_REG);
	(*dump_data)->len = cpu_to_le32(RADIO_REG_MAX_READ);

	for (i = 0; i < RADIO_REG_MAX_READ; i++) {
		u32 rd_cmd = RADIO_RSP_RD_CMD;

		rd_cmd |= i << RADIO_RSP_ADDR_POS;
108 109
		iwl_write_prph_no_grab(fwrt->trans, RSP_RADIO_CMD, rd_cmd);
		*pos = (u8)iwl_read_prph_no_grab(fwrt->trans, RSP_RADIO_RDDAT);
110 111 112 113 114 115

		pos++;
	}

	*dump_data = iwl_fw_error_next_data(*dump_data);

116
	iwl_trans_release_nic_access(fwrt->trans, &flags);
117 118
}

119 120 121
static void iwl_fwrt_dump_rxf(struct iwl_fw_runtime *fwrt,
			      struct iwl_fw_error_dump_data **dump_data,
			      int size, u32 offset, int fifo_num)
122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141
{
	struct iwl_fw_error_dump_fifo *fifo_hdr;
	u32 *fifo_data;
	u32 fifo_len;
	int i;

	fifo_hdr = (void *)(*dump_data)->data;
	fifo_data = (void *)fifo_hdr->data;
	fifo_len = size;

	/* No need to try to read the data if the length is 0 */
	if (fifo_len == 0)
		return;

	/* Add a TLV for the RXF */
	(*dump_data)->type = cpu_to_le32(IWL_FW_ERROR_DUMP_RXF);
	(*dump_data)->len = cpu_to_le32(fifo_len + sizeof(*fifo_hdr));

	fifo_hdr->fifo_num = cpu_to_le32(fifo_num);
	fifo_hdr->available_bytes =
142
		cpu_to_le32(iwl_trans_read_prph(fwrt->trans,
143 144
						RXF_RD_D_SPACE + offset));
	fifo_hdr->wr_ptr =
145
		cpu_to_le32(iwl_trans_read_prph(fwrt->trans,
146 147
						RXF_RD_WR_PTR + offset));
	fifo_hdr->rd_ptr =
148
		cpu_to_le32(iwl_trans_read_prph(fwrt->trans,
149 150
						RXF_RD_RD_PTR + offset));
	fifo_hdr->fence_ptr =
151
		cpu_to_le32(iwl_trans_read_prph(fwrt->trans,
152 153
						RXF_RD_FENCE_PTR + offset));
	fifo_hdr->fence_mode =
154
		cpu_to_le32(iwl_trans_read_prph(fwrt->trans,
155 156 157
						RXF_SET_FENCE_MODE + offset));

	/* Lock fence */
158
	iwl_trans_write_prph(fwrt->trans, RXF_SET_FENCE_MODE + offset, 0x1);
159
	/* Set fence pointer to the same place like WR pointer */
160
	iwl_trans_write_prph(fwrt->trans, RXF_LD_WR2FENCE + offset, 0x1);
161
	/* Set fence offset */
162
	iwl_trans_write_prph(fwrt->trans,
163 164 165 166 167
			     RXF_LD_FENCE_OFFSET_ADDR + offset, 0x0);

	/* Read FIFO */
	fifo_len /= sizeof(u32); /* Size in DWORDS */
	for (i = 0; i < fifo_len; i++)
168
		fifo_data[i] = iwl_trans_read_prph(fwrt->trans,
169 170 171 172 173
						 RXF_FIFO_RD_FENCE_INC +
						 offset);
	*dump_data = iwl_fw_error_next_data(*dump_data);
}

174 175 176
static void iwl_fwrt_dump_txf(struct iwl_fw_runtime *fwrt,
			      struct iwl_fw_error_dump_data **dump_data,
			      int size, u32 offset, int fifo_num)
177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196
{
	struct iwl_fw_error_dump_fifo *fifo_hdr;
	u32 *fifo_data;
	u32 fifo_len;
	int i;

	fifo_hdr = (void *)(*dump_data)->data;
	fifo_data = (void *)fifo_hdr->data;
	fifo_len = size;

	/* No need to try to read the data if the length is 0 */
	if (fifo_len == 0)
		return;

	/* Add a TLV for the FIFO */
	(*dump_data)->type = cpu_to_le32(IWL_FW_ERROR_DUMP_TXF);
	(*dump_data)->len = cpu_to_le32(fifo_len + sizeof(*fifo_hdr));

	fifo_hdr->fifo_num = cpu_to_le32(fifo_num);
	fifo_hdr->available_bytes =
197
		cpu_to_le32(iwl_trans_read_prph(fwrt->trans,
198 199
						TXF_FIFO_ITEM_CNT + offset));
	fifo_hdr->wr_ptr =
200
		cpu_to_le32(iwl_trans_read_prph(fwrt->trans,
201 202
						TXF_WR_PTR + offset));
	fifo_hdr->rd_ptr =
203
		cpu_to_le32(iwl_trans_read_prph(fwrt->trans,
204 205
						TXF_RD_PTR + offset));
	fifo_hdr->fence_ptr =
206
		cpu_to_le32(iwl_trans_read_prph(fwrt->trans,
207 208
						TXF_FENCE_PTR + offset));
	fifo_hdr->fence_mode =
209
		cpu_to_le32(iwl_trans_read_prph(fwrt->trans,
210 211 212
						TXF_LOCK_FENCE + offset));

	/* Set the TXF_READ_MODIFY_ADDR to TXF_WR_PTR */
213
	iwl_trans_write_prph(fwrt->trans, TXF_READ_MODIFY_ADDR + offset,
214 215 216
			     TXF_WR_PTR + offset);

	/* Dummy-read to advance the read pointer to the head */
217
	iwl_trans_read_prph(fwrt->trans, TXF_READ_MODIFY_DATA + offset);
218 219 220 221

	/* Read FIFO */
	fifo_len /= sizeof(u32); /* Size in DWORDS */
	for (i = 0; i < fifo_len; i++)
222
		fifo_data[i] = iwl_trans_read_prph(fwrt->trans,
223 224 225 226 227
						  TXF_READ_MODIFY_DATA +
						  offset);
	*dump_data = iwl_fw_error_next_data(*dump_data);
}

S
Sara Sharon 已提交
228 229
static void iwl_fw_dump_rxf(struct iwl_fw_runtime *fwrt,
			    struct iwl_fw_error_dump_data **dump_data)
230
{
231
	struct iwl_fwrt_shared_mem_cfg *cfg = &fwrt->smem_cfg;
232 233
	unsigned long flags;

S
Sara Sharon 已提交
234
	IWL_DEBUG_INFO(fwrt, "WRT RX FIFO dump\n");
235

236
	if (!iwl_trans_grab_nic_access(fwrt->trans, &flags))
237 238
		return;

239
	if (iwl_fw_dbg_type_on(fwrt, IWL_FW_ERROR_DUMP_RXF)) {
240 241 242 243 244 245 246 247 248 249 250
		/* Pull RXF1 */
		iwl_fwrt_dump_rxf(fwrt, dump_data,
				  cfg->lmac[0].rxfifo1_size, 0, 0);
		/* Pull RXF2 */
		iwl_fwrt_dump_rxf(fwrt, dump_data, cfg->rxfifo2_size,
				  RXF_DIFF_FROM_PREV, 1);
		/* Pull LMAC2 RXF1 */
		if (fwrt->smem_cfg.num_lmacs > 1)
			iwl_fwrt_dump_rxf(fwrt, dump_data,
					  cfg->lmac[1].rxfifo1_size,
					  LMAC2_PRPH_OFFSET, 2);
251
	}
252

S
Sara Sharon 已提交
253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270
	iwl_trans_release_nic_access(fwrt->trans, &flags);
}

static void iwl_fw_dump_txf(struct iwl_fw_runtime *fwrt,
			    struct iwl_fw_error_dump_data **dump_data)
{
	struct iwl_fw_error_dump_fifo *fifo_hdr;
	struct iwl_fwrt_shared_mem_cfg *cfg = &fwrt->smem_cfg;
	u32 *fifo_data;
	u32 fifo_len;
	unsigned long flags;
	int i, j;

	IWL_DEBUG_INFO(fwrt, "WRT TX FIFO dump\n");

	if (!iwl_trans_grab_nic_access(fwrt->trans, &flags))
		return;

271
	if (iwl_fw_dbg_type_on(fwrt, IWL_FW_ERROR_DUMP_TXF)) {
272
		/* Pull TXF data from LMAC1 */
273
		for (i = 0; i < fwrt->smem_cfg.num_txfifo_entries; i++) {
274
			/* Mark the number of TXF we're pulling now */
275
			iwl_trans_write_prph(fwrt->trans, TXF_LARC_NUM, i);
276
			iwl_fwrt_dump_txf(fwrt, dump_data,
277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292
					  cfg->lmac[0].txfifo_size[i], 0, i);
		}

		/* Pull TXF data from LMAC2 */
		if (fwrt->smem_cfg.num_lmacs > 1) {
			for (i = 0; i < fwrt->smem_cfg.num_txfifo_entries;
			     i++) {
				/* Mark the number of TXF we're pulling now */
				iwl_trans_write_prph(fwrt->trans,
						     TXF_LARC_NUM +
						     LMAC2_PRPH_OFFSET, i);
				iwl_fwrt_dump_txf(fwrt, dump_data,
						  cfg->lmac[1].txfifo_size[i],
						  LMAC2_PRPH_OFFSET,
						  i + cfg->num_txfifo_entries);
			}
293
		}
294 295
	}

296
	if (iwl_fw_dbg_type_on(fwrt, IWL_FW_ERROR_DUMP_INTERNAL_TXF) &&
297
	    fw_has_capa(&fwrt->fw->ucode_capa,
298 299 300
			IWL_UCODE_TLV_CAPA_EXTEND_SHARED_MEM_CFG)) {
		/* Pull UMAC internal TXF data from all TXFs */
		for (i = 0;
301
		     i < ARRAY_SIZE(fwrt->smem_cfg.internal_txfifo_size);
302 303 304
		     i++) {
			fifo_hdr = (void *)(*dump_data)->data;
			fifo_data = (void *)fifo_hdr->data;
305
			fifo_len = fwrt->smem_cfg.internal_txfifo_size[i];
306 307 308 309 310 311 312 313 314 315 316 317

			/* No need to try to read the data if the length is 0 */
			if (fifo_len == 0)
				continue;

			/* Add a TLV for the internal FIFOs */
			(*dump_data)->type =
				cpu_to_le32(IWL_FW_ERROR_DUMP_INTERNAL_TXF);
			(*dump_data)->len =
				cpu_to_le32(fifo_len + sizeof(*fifo_hdr));

			fifo_hdr->fifo_num = cpu_to_le32(i);
318 319

			/* Mark the number of TXF we're pulling now */
320 321
			iwl_trans_write_prph(fwrt->trans, TXF_CPU2_NUM, i +
				fwrt->smem_cfg.num_txfifo_entries);
322

323
			fifo_hdr->available_bytes =
324
				cpu_to_le32(iwl_trans_read_prph(fwrt->trans,
325 326
								TXF_CPU2_FIFO_ITEM_CNT));
			fifo_hdr->wr_ptr =
327
				cpu_to_le32(iwl_trans_read_prph(fwrt->trans,
328 329
								TXF_CPU2_WR_PTR));
			fifo_hdr->rd_ptr =
330
				cpu_to_le32(iwl_trans_read_prph(fwrt->trans,
331 332
								TXF_CPU2_RD_PTR));
			fifo_hdr->fence_ptr =
333
				cpu_to_le32(iwl_trans_read_prph(fwrt->trans,
334 335
								TXF_CPU2_FENCE_PTR));
			fifo_hdr->fence_mode =
336
				cpu_to_le32(iwl_trans_read_prph(fwrt->trans,
337 338 339
								TXF_CPU2_LOCK_FENCE));

			/* Set TXF_CPU2_READ_MODIFY_ADDR to TXF_CPU2_WR_PTR */
340
			iwl_trans_write_prph(fwrt->trans,
341 342 343 344
					     TXF_CPU2_READ_MODIFY_ADDR,
					     TXF_CPU2_WR_PTR);

			/* Dummy-read to advance the read pointer to head */
345
			iwl_trans_read_prph(fwrt->trans,
346 347 348 349 350 351
					    TXF_CPU2_READ_MODIFY_DATA);

			/* Read FIFO */
			fifo_len /= sizeof(u32); /* Size in DWORDS */
			for (j = 0; j < fifo_len; j++)
				fifo_data[j] =
352
					iwl_trans_read_prph(fwrt->trans,
353 354 355 356 357
							    TXF_CPU2_READ_MODIFY_DATA);
			*dump_data = iwl_fw_error_next_data(*dump_data);
		}
	}

358
	iwl_trans_release_nic_access(fwrt->trans, &flags);
359 360 361 362 363
}

#define IWL8260_ICCM_OFFSET		0x44000 /* Only for B-step */
#define IWL8260_ICCM_LEN		0xC000 /* Only for B-step */

364
struct iwl_prph_range {
365
	u32 start, end;
366 367 368
};

static const struct iwl_prph_range iwl_prph_dump_addr_comm[] = {
369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464
	{ .start = 0x00a00000, .end = 0x00a00000 },
	{ .start = 0x00a0000c, .end = 0x00a00024 },
	{ .start = 0x00a0002c, .end = 0x00a0003c },
	{ .start = 0x00a00410, .end = 0x00a00418 },
	{ .start = 0x00a00420, .end = 0x00a00420 },
	{ .start = 0x00a00428, .end = 0x00a00428 },
	{ .start = 0x00a00430, .end = 0x00a0043c },
	{ .start = 0x00a00444, .end = 0x00a00444 },
	{ .start = 0x00a004c0, .end = 0x00a004cc },
	{ .start = 0x00a004d8, .end = 0x00a004d8 },
	{ .start = 0x00a004e0, .end = 0x00a004f0 },
	{ .start = 0x00a00840, .end = 0x00a00840 },
	{ .start = 0x00a00850, .end = 0x00a00858 },
	{ .start = 0x00a01004, .end = 0x00a01008 },
	{ .start = 0x00a01010, .end = 0x00a01010 },
	{ .start = 0x00a01018, .end = 0x00a01018 },
	{ .start = 0x00a01024, .end = 0x00a01024 },
	{ .start = 0x00a0102c, .end = 0x00a01034 },
	{ .start = 0x00a0103c, .end = 0x00a01040 },
	{ .start = 0x00a01048, .end = 0x00a01094 },
	{ .start = 0x00a01c00, .end = 0x00a01c20 },
	{ .start = 0x00a01c58, .end = 0x00a01c58 },
	{ .start = 0x00a01c7c, .end = 0x00a01c7c },
	{ .start = 0x00a01c28, .end = 0x00a01c54 },
	{ .start = 0x00a01c5c, .end = 0x00a01c5c },
	{ .start = 0x00a01c60, .end = 0x00a01cdc },
	{ .start = 0x00a01ce0, .end = 0x00a01d0c },
	{ .start = 0x00a01d18, .end = 0x00a01d20 },
	{ .start = 0x00a01d2c, .end = 0x00a01d30 },
	{ .start = 0x00a01d40, .end = 0x00a01d5c },
	{ .start = 0x00a01d80, .end = 0x00a01d80 },
	{ .start = 0x00a01d98, .end = 0x00a01d9c },
	{ .start = 0x00a01da8, .end = 0x00a01da8 },
	{ .start = 0x00a01db8, .end = 0x00a01df4 },
	{ .start = 0x00a01dc0, .end = 0x00a01dfc },
	{ .start = 0x00a01e00, .end = 0x00a01e2c },
	{ .start = 0x00a01e40, .end = 0x00a01e60 },
	{ .start = 0x00a01e68, .end = 0x00a01e6c },
	{ .start = 0x00a01e74, .end = 0x00a01e74 },
	{ .start = 0x00a01e84, .end = 0x00a01e90 },
	{ .start = 0x00a01e9c, .end = 0x00a01ec4 },
	{ .start = 0x00a01ed0, .end = 0x00a01ee0 },
	{ .start = 0x00a01f00, .end = 0x00a01f1c },
	{ .start = 0x00a01f44, .end = 0x00a01ffc },
	{ .start = 0x00a02000, .end = 0x00a02048 },
	{ .start = 0x00a02068, .end = 0x00a020f0 },
	{ .start = 0x00a02100, .end = 0x00a02118 },
	{ .start = 0x00a02140, .end = 0x00a0214c },
	{ .start = 0x00a02168, .end = 0x00a0218c },
	{ .start = 0x00a021c0, .end = 0x00a021c0 },
	{ .start = 0x00a02400, .end = 0x00a02410 },
	{ .start = 0x00a02418, .end = 0x00a02420 },
	{ .start = 0x00a02428, .end = 0x00a0242c },
	{ .start = 0x00a02434, .end = 0x00a02434 },
	{ .start = 0x00a02440, .end = 0x00a02460 },
	{ .start = 0x00a02468, .end = 0x00a024b0 },
	{ .start = 0x00a024c8, .end = 0x00a024cc },
	{ .start = 0x00a02500, .end = 0x00a02504 },
	{ .start = 0x00a0250c, .end = 0x00a02510 },
	{ .start = 0x00a02540, .end = 0x00a02554 },
	{ .start = 0x00a02580, .end = 0x00a025f4 },
	{ .start = 0x00a02600, .end = 0x00a0260c },
	{ .start = 0x00a02648, .end = 0x00a02650 },
	{ .start = 0x00a02680, .end = 0x00a02680 },
	{ .start = 0x00a026c0, .end = 0x00a026d0 },
	{ .start = 0x00a02700, .end = 0x00a0270c },
	{ .start = 0x00a02804, .end = 0x00a02804 },
	{ .start = 0x00a02818, .end = 0x00a0281c },
	{ .start = 0x00a02c00, .end = 0x00a02db4 },
	{ .start = 0x00a02df4, .end = 0x00a02fb0 },
	{ .start = 0x00a03000, .end = 0x00a03014 },
	{ .start = 0x00a0301c, .end = 0x00a0302c },
	{ .start = 0x00a03034, .end = 0x00a03038 },
	{ .start = 0x00a03040, .end = 0x00a03048 },
	{ .start = 0x00a03060, .end = 0x00a03068 },
	{ .start = 0x00a03070, .end = 0x00a03074 },
	{ .start = 0x00a0307c, .end = 0x00a0307c },
	{ .start = 0x00a03080, .end = 0x00a03084 },
	{ .start = 0x00a0308c, .end = 0x00a03090 },
	{ .start = 0x00a03098, .end = 0x00a03098 },
	{ .start = 0x00a030a0, .end = 0x00a030a0 },
	{ .start = 0x00a030a8, .end = 0x00a030b4 },
	{ .start = 0x00a030bc, .end = 0x00a030bc },
	{ .start = 0x00a030c0, .end = 0x00a0312c },
	{ .start = 0x00a03c00, .end = 0x00a03c5c },
	{ .start = 0x00a04400, .end = 0x00a04454 },
	{ .start = 0x00a04460, .end = 0x00a04474 },
	{ .start = 0x00a044c0, .end = 0x00a044ec },
	{ .start = 0x00a04500, .end = 0x00a04504 },
	{ .start = 0x00a04510, .end = 0x00a04538 },
	{ .start = 0x00a04540, .end = 0x00a04548 },
	{ .start = 0x00a04560, .end = 0x00a0457c },
	{ .start = 0x00a04590, .end = 0x00a04598 },
	{ .start = 0x00a045c0, .end = 0x00a045f4 },
};

465 466 467 468 469 470 471
static const struct iwl_prph_range iwl_prph_dump_addr_9000[] = {
	{ .start = 0x00a05c00, .end = 0x00a05c18 },
	{ .start = 0x00a05400, .end = 0x00a056e8 },
	{ .start = 0x00a08000, .end = 0x00a098bc },
	{ .start = 0x00a02400, .end = 0x00a02758 },
};

472 473
static void iwl_read_prph_block(struct iwl_trans *trans, u32 start,
				u32 len_bytes, __le32 *data)
474 475 476 477 478 479 480
{
	u32 i;

	for (i = 0; i < len_bytes; i += 4)
		*data++ = cpu_to_le32(iwl_read_prph_no_grab(trans, start + i));
}

481 482 483 484
static void iwl_dump_prph(struct iwl_trans *trans,
			  struct iwl_fw_error_dump_data **data,
			  const struct iwl_prph_range *iwl_prph_dump_addr,
			  u32 range_len)
485 486 487
{
	struct iwl_fw_error_dump_prph *prph;
	unsigned long flags;
488
	u32 i;
489

490 491
	IWL_DEBUG_INFO(trans, "WRT PRPH dump\n");

492
	if (!iwl_trans_grab_nic_access(trans, &flags))
493
		return;
494

495
	for (i = 0; i < range_len; i++) {
496 497 498 499 500 501 502 503 504 505
		/* The range includes both boundaries */
		int num_bytes_in_chunk = iwl_prph_dump_addr[i].end -
			 iwl_prph_dump_addr[i].start + 4;

		(*data)->type = cpu_to_le32(IWL_FW_ERROR_DUMP_PRPH);
		(*data)->len = cpu_to_le32(sizeof(*prph) +
					num_bytes_in_chunk);
		prph = (void *)(*data)->data;
		prph->prph_start = cpu_to_le32(iwl_prph_dump_addr[i].start);

506 507 508 509 510
		iwl_read_prph_block(trans, iwl_prph_dump_addr[i].start,
				    /* our range is inclusive, hence + 4 */
				    iwl_prph_dump_addr[i].end -
				    iwl_prph_dump_addr[i].start + 4,
				    (void *)prph->data);
511

D
Dan Carpenter 已提交
512
		*data = iwl_fw_error_next_data(*data);
513 514 515 516 517
	}

	iwl_trans_release_nic_access(trans, &flags);
}

518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554
/*
 * alloc_sgtable - allocates scallerlist table in the given size,
 * fills it with pages and returns it
 * @size: the size (in bytes) of the table
*/
static struct scatterlist *alloc_sgtable(int size)
{
	int alloc_size, nents, i;
	struct page *new_page;
	struct scatterlist *iter;
	struct scatterlist *table;

	nents = DIV_ROUND_UP(size, PAGE_SIZE);
	table = kcalloc(nents, sizeof(*table), GFP_KERNEL);
	if (!table)
		return NULL;
	sg_init_table(table, nents);
	iter = table;
	for_each_sg(table, iter, sg_nents(table), i) {
		new_page = alloc_page(GFP_KERNEL);
		if (!new_page) {
			/* release all previous allocated pages in the table */
			iter = table;
			for_each_sg(table, iter, sg_nents(table), i) {
				new_page = sg_page(iter);
				if (new_page)
					__free_page(new_page);
			}
			return NULL;
		}
		alloc_size = min_t(int, size, PAGE_SIZE);
		size -= PAGE_SIZE;
		sg_set_page(iter, new_page, alloc_size, 0);
	}
	return table;
}

S
Shahar S Matityahu 已提交
555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589
static int iwl_fw_get_prph_len(struct iwl_fw_runtime *fwrt)
{
	u32 prph_len = 0;
	int i;

	for (i = 0; i < ARRAY_SIZE(iwl_prph_dump_addr_comm);
	     i++) {
		/* The range includes both boundaries */
		int num_bytes_in_chunk =
			iwl_prph_dump_addr_comm[i].end -
			iwl_prph_dump_addr_comm[i].start + 4;

		prph_len += sizeof(struct iwl_fw_error_dump_data) +
			sizeof(struct iwl_fw_error_dump_prph) +
			num_bytes_in_chunk;
	}

	if (fwrt->trans->cfg->mq_rx_supported) {
		for (i = 0; i <
			ARRAY_SIZE(iwl_prph_dump_addr_9000); i++) {
			/* The range includes both boundaries */
			int num_bytes_in_chunk =
				iwl_prph_dump_addr_9000[i].end -
				iwl_prph_dump_addr_9000[i].start + 4;

			prph_len += sizeof(struct iwl_fw_error_dump_data) +
				sizeof(struct iwl_fw_error_dump_prph) +
				num_bytes_in_chunk;
		}
	}
	return prph_len;
}

static void iwl_fw_dump_mem(struct iwl_fw_runtime *fwrt,
			    struct iwl_fw_error_dump_data **dump_data,
590
			    u32 len, u32 ofs, u32 type)
S
Shahar S Matityahu 已提交
591 592 593
{
	struct iwl_fw_error_dump_mem *dump_mem;

594 595
	if (!len)
		return;
S
Shahar S Matityahu 已提交
596

597 598 599 600 601 602 603
	(*dump_data)->type = cpu_to_le32(IWL_FW_ERROR_DUMP_MEM);
	(*dump_data)->len = cpu_to_le32(len + sizeof(*dump_mem));
	dump_mem = (void *)(*dump_data)->data;
	dump_mem->type = cpu_to_le32(type);
	dump_mem->offset = cpu_to_le32(ofs);
	iwl_trans_read_mem_bytes(fwrt->trans, ofs, dump_mem->data, len);
	*dump_data = iwl_fw_error_next_data(*dump_data);
S
Shahar S Matityahu 已提交
604

605
	IWL_DEBUG_INFO(fwrt, "WRT memory dump. Type=%u\n", dump_mem->type);
S
Shahar S Matityahu 已提交
606 607
}

608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 629
static void iwl_fw_dump_named_mem(struct iwl_fw_runtime *fwrt,
				  struct iwl_fw_error_dump_data **dump_data,
				  u32 len, u32 ofs, u8 *name, u8 name_len)
{
	struct iwl_fw_error_dump_named_mem *dump_mem;

	if (!len)
		return;

	(*dump_data)->type = cpu_to_le32(IWL_FW_ERROR_DUMP_MEM);
	(*dump_data)->len = cpu_to_le32(len + sizeof(*dump_mem));
	dump_mem = (void *)(*dump_data)->data;
	dump_mem->type = cpu_to_le32(IWL_FW_ERROR_DUMP_MEM_NAMED_MEM);
	dump_mem->offset = cpu_to_le32(ofs);
	dump_mem->name_len = name_len;
	memcpy(dump_mem->name, name, name_len);
	iwl_trans_read_mem_bytes(fwrt->trans, ofs, dump_mem->data, len);
	*dump_data = iwl_fw_error_next_data(*dump_data);

	IWL_DEBUG_INFO(fwrt, "WRT memory dump. Type=%u\n", dump_mem->type);
}

630 631 632 633
#define ADD_LEN(len, item_len, const_len) \
	do {size_t item = item_len; len += (!!item) * const_len + item; } \
	while (0)

S
Sara Sharon 已提交
634 635
static int iwl_fw_rxf_len(struct iwl_fw_runtime *fwrt,
			  struct iwl_fwrt_shared_mem_cfg *mem_cfg)
636 637 638 639 640 641
{
	size_t hdr_len = sizeof(struct iwl_fw_error_dump_data) +
			 sizeof(struct iwl_fw_error_dump_fifo);
	u32 fifo_len = 0;
	int i;

642
	if (!iwl_fw_dbg_type_on(fwrt, IWL_FW_ERROR_DUMP_RXF))
S
Sara Sharon 已提交
643
		return 0;
644 645 646 647 648 649 650 651

	/* Count RXF2 size */
	ADD_LEN(fifo_len, mem_cfg->rxfifo2_size, hdr_len);

	/* Count RXF1 sizes */
	for (i = 0; i < mem_cfg->num_lmacs; i++)
		ADD_LEN(fifo_len, mem_cfg->lmac[i].rxfifo1_size, hdr_len);

S
Sara Sharon 已提交
652 653 654 655 656 657 658 659 660 661 662
	return fifo_len;
}

static int iwl_fw_txf_len(struct iwl_fw_runtime *fwrt,
			  struct iwl_fwrt_shared_mem_cfg *mem_cfg)
{
	size_t hdr_len = sizeof(struct iwl_fw_error_dump_data) +
			 sizeof(struct iwl_fw_error_dump_fifo);
	u32 fifo_len = 0;
	int i;

663
	if (!iwl_fw_dbg_type_on(fwrt, IWL_FW_ERROR_DUMP_TXF))
664 665 666 667 668 669 670 671 672 673 674 675
		goto dump_internal_txf;

	/* Count TXF sizes */
	for (i = 0; i < mem_cfg->num_lmacs; i++) {
		int j;

		for (j = 0; j < mem_cfg->num_txfifo_entries; j++)
			ADD_LEN(fifo_len, mem_cfg->lmac[i].txfifo_size[j],
				hdr_len);
	}

dump_internal_txf:
676
	if (!(iwl_fw_dbg_type_on(fwrt, IWL_FW_ERROR_DUMP_INTERNAL_TXF) &&
677 678 679 680 681 682 683 684 685 686 687
	      fw_has_capa(&fwrt->fw->ucode_capa,
			  IWL_UCODE_TLV_CAPA_EXTEND_SHARED_MEM_CFG)))
		goto out;

	for (i = 0; i < ARRAY_SIZE(mem_cfg->internal_txfifo_size); i++)
		ADD_LEN(fifo_len, mem_cfg->internal_txfifo_size[i], hdr_len);

out:
	return fifo_len;
}

688 689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713
static void iwl_dump_paging(struct iwl_fw_runtime *fwrt,
			    struct iwl_fw_error_dump_data **data)
{
	int i;

	IWL_DEBUG_INFO(fwrt, "WRT paging dump\n");
	for (i = 1; i < fwrt->num_of_paging_blk + 1; i++) {
		struct iwl_fw_error_dump_paging *paging;
		struct page *pages =
			fwrt->fw_paging_db[i].fw_paging_block;
		dma_addr_t addr = fwrt->fw_paging_db[i].fw_paging_phys;

		(*data)->type = cpu_to_le32(IWL_FW_ERROR_DUMP_PAGING);
		(*data)->len = cpu_to_le32(sizeof(*paging) +
					     PAGING_BLOCK_SIZE);
		paging =  (void *)(*data)->data;
		paging->index = cpu_to_le32(i);
		dma_sync_single_for_cpu(fwrt->trans->dev, addr,
					PAGING_BLOCK_SIZE,
					DMA_BIDIRECTIONAL);
		memcpy(paging->data, page_address(pages),
		       PAGING_BLOCK_SIZE);
		(*data) = iwl_fw_error_next_data(*data);
	}
}

714 715 716
static struct iwl_fw_error_dump_file *
_iwl_fw_error_dump(struct iwl_fw_runtime *fwrt,
		   struct iwl_fw_dump_ptrs *fw_error_dump)
717 718 719 720
{
	struct iwl_fw_error_dump_file *dump_file;
	struct iwl_fw_error_dump_data *dump_data;
	struct iwl_fw_error_dump_info *dump_info;
721
	struct iwl_fw_error_dump_smem_cfg *dump_smem_cfg;
722 723
	struct iwl_fw_error_dump_trigger_desc *dump_trig;
	u32 sram_len, sram_ofs;
724
	const struct iwl_fw_dbg_mem_seg_tlv *fw_mem = fwrt->fw->dbg.mem_tlv;
725
	struct iwl_fwrt_shared_mem_cfg *mem_cfg = &fwrt->smem_cfg;
726
	u32 file_len, fifo_len = 0, prph_len = 0, radio_len = 0;
727 728
	u32 smem_len = fwrt->fw->dbg.n_mem_tlv ? 0 : fwrt->trans->cfg->smem_len;
	u32 sram2_len = fwrt->fw->dbg.n_mem_tlv ?
729
				0 : fwrt->trans->cfg->dccm2_len;
730 731 732
	int i;

	/* SRAM - include stack CCM if driver knows the values for it */
733
	if (!fwrt->trans->cfg->dccm_offset || !fwrt->trans->cfg->dccm_len) {
734 735
		const struct fw_img *img;

736
		img = &fwrt->fw->img[fwrt->cur_fw_img];
737 738 739
		sram_ofs = img->sec[IWL_UCODE_SECTION_DATA].offset;
		sram_len = img->sec[IWL_UCODE_SECTION_DATA].len;
	} else {
740 741
		sram_ofs = fwrt->trans->cfg->dccm_offset;
		sram_len = fwrt->trans->cfg->dccm_len;
742 743 744
	}

	/* reading RXF/TXF sizes */
745
	if (test_bit(STATUS_FW_ERROR, &fwrt->trans->status)) {
S
Sara Sharon 已提交
746 747
		fifo_len = iwl_fw_rxf_len(fwrt, mem_cfg);
		fifo_len += iwl_fw_txf_len(fwrt, mem_cfg);
748

749
		/* Make room for PRPH registers */
750
		if (!fwrt->trans->cfg->gen2 &&
751
		   iwl_fw_dbg_type_on(fwrt, IWL_FW_ERROR_DUMP_PRPH))
S
Shahar S Matityahu 已提交
752
			prph_len += iwl_fw_get_prph_len(fwrt);
753

754
		if (fwrt->trans->cfg->device_family == IWL_DEVICE_FAMILY_7000 &&
755
		    iwl_fw_dbg_type_on(fwrt, IWL_FW_ERROR_DUMP_RADIO_REG))
756
			radio_len = sizeof(*dump_data) + RADIO_REG_MAX_READ;
757 758
	}

759
	file_len = sizeof(*dump_file) + fifo_len + prph_len + radio_len;
760

761
	if (iwl_fw_dbg_type_on(fwrt, IWL_FW_ERROR_DUMP_DEV_FW_INFO))
762
		file_len += sizeof(*dump_data) + sizeof(*dump_info);
763
	if (iwl_fw_dbg_type_on(fwrt, IWL_FW_ERROR_DUMP_MEM_CFG))
764 765
		file_len += sizeof(*dump_data) + sizeof(*dump_smem_cfg);

766
	if (iwl_fw_dbg_type_on(fwrt, IWL_FW_ERROR_DUMP_MEM)) {
767 768 769 770 771 772 773 774 775 776 777 778 779
		size_t hdr_len = sizeof(*dump_data) +
				 sizeof(struct iwl_fw_error_dump_mem);

		/* Dump SRAM only if no mem_tlvs */
		if (!fwrt->fw->dbg.n_mem_tlv)
			ADD_LEN(file_len, sram_len, hdr_len);

		/* Make room for all mem types that exist */
		ADD_LEN(file_len, smem_len, hdr_len);
		ADD_LEN(file_len, sram2_len, hdr_len);

		for (i = 0; i < fwrt->fw->dbg.n_mem_tlv; i++)
			ADD_LEN(file_len, le32_to_cpu(fw_mem[i].len), hdr_len);
780 781
	}

782
	/* Make room for fw's virtual image pages, if it exists */
783
	if (iwl_fw_dbg_is_paging_enabled(fwrt))
784
		file_len += fwrt->num_of_paging_blk *
785 786 787 788
			(sizeof(*dump_data) +
			 sizeof(struct iwl_fw_error_dump_paging) +
			 PAGING_BLOCK_SIZE);

789 790 791 792 793
	if (iwl_fw_dbg_is_d3_debug_enabled(fwrt) && fwrt->dump.d3_debug_data) {
		file_len += sizeof(*dump_data) +
			fwrt->trans->cfg->d3_debug_data_length * 2;
	}

794
	/* If we only want a monitor dump, reset the file length */
795
	if (fwrt->dump.monitor_only) {
796 797
		file_len = sizeof(*dump_file) + sizeof(*dump_data) * 2 +
			   sizeof(*dump_info) + sizeof(*dump_smem_cfg);
798 799
	}

800
	if (iwl_fw_dbg_type_on(fwrt, IWL_FW_ERROR_DUMP_ERROR_INFO) &&
801
	    fwrt->dump.desc)
802
		file_len += sizeof(*dump_data) + sizeof(*dump_trig) +
803
			    fwrt->dump.desc->len;
804 805

	dump_file = vzalloc(file_len);
806 807
	if (!dump_file)
		return NULL;
808

809
	fw_error_dump->fwrt_ptr = dump_file;
810 811 812 813

	dump_file->barker = cpu_to_le32(IWL_FW_ERROR_DUMP_BARKER);
	dump_data = (void *)dump_file->data;

814
	if (iwl_fw_dbg_type_on(fwrt, IWL_FW_ERROR_DUMP_DEV_FW_INFO)) {
815 816 817 818 819 820 821 822 823 824 825 826 827 828 829 830
		dump_data->type = cpu_to_le32(IWL_FW_ERROR_DUMP_DEV_FW_INFO);
		dump_data->len = cpu_to_le32(sizeof(*dump_info));
		dump_info = (void *)dump_data->data;
		dump_info->device_family =
			fwrt->trans->cfg->device_family ==
			IWL_DEVICE_FAMILY_7000 ?
				cpu_to_le32(IWL_FW_ERROR_DUMP_FAMILY_7) :
				cpu_to_le32(IWL_FW_ERROR_DUMP_FAMILY_8);
		dump_info->hw_step =
			cpu_to_le32(CSR_HW_REV_STEP(fwrt->trans->hw_rev));
		memcpy(dump_info->fw_human_readable, fwrt->fw->human_readable,
		       sizeof(dump_info->fw_human_readable));
		strncpy(dump_info->dev_human_readable, fwrt->trans->cfg->name,
			sizeof(dump_info->dev_human_readable) - 1);
		strncpy(dump_info->bus_human_readable, fwrt->dev->bus->name,
			sizeof(dump_info->bus_human_readable) - 1);
831 832 833 834 835 836 837
		dump_info->num_of_lmacs = fwrt->smem_cfg.num_lmacs;
		dump_info->lmac_err_id[0] =
			cpu_to_le32(fwrt->dump.lmac_err_id[0]);
		if (fwrt->smem_cfg.num_lmacs > 1)
			dump_info->lmac_err_id[1] =
				cpu_to_le32(fwrt->dump.lmac_err_id[1]);
		dump_info->umac_err_id = cpu_to_le32(fwrt->dump.umac_err_id);
838 839

		dump_data = iwl_fw_error_next_data(dump_data);
840 841
	}

842
	if (iwl_fw_dbg_type_on(fwrt, IWL_FW_ERROR_DUMP_MEM_CFG)) {
843 844 845 846 847 848 849 850 851 852 853 854 855 856 857 858 859 860 861 862 863 864 865 866 867 868 869 870
		/* Dump shared memory configuration */
		dump_data->type = cpu_to_le32(IWL_FW_ERROR_DUMP_MEM_CFG);
		dump_data->len = cpu_to_le32(sizeof(*dump_smem_cfg));
		dump_smem_cfg = (void *)dump_data->data;
		dump_smem_cfg->num_lmacs = cpu_to_le32(mem_cfg->num_lmacs);
		dump_smem_cfg->num_txfifo_entries =
			cpu_to_le32(mem_cfg->num_txfifo_entries);
		for (i = 0; i < MAX_NUM_LMAC; i++) {
			int j;
			u32 *txf_size = mem_cfg->lmac[i].txfifo_size;

			for (j = 0; j < TX_FIFO_MAX_NUM; j++)
				dump_smem_cfg->lmac[i].txfifo_size[j] =
					cpu_to_le32(txf_size[j]);
			dump_smem_cfg->lmac[i].rxfifo1_size =
				cpu_to_le32(mem_cfg->lmac[i].rxfifo1_size);
		}
		dump_smem_cfg->rxfifo2_size =
			cpu_to_le32(mem_cfg->rxfifo2_size);
		dump_smem_cfg->internal_txfifo_addr =
			cpu_to_le32(mem_cfg->internal_txfifo_addr);
		for (i = 0; i < TX_FIFO_INTERNAL_MAX_NUM; i++) {
			dump_smem_cfg->internal_txfifo_size[i] =
				cpu_to_le32(mem_cfg->internal_txfifo_size[i]);
		}

		dump_data = iwl_fw_error_next_data(dump_data);
	}
871

872
	/* We only dump the FIFOs if the FW is in error state */
873
	if (fifo_len) {
S
Sara Sharon 已提交
874 875
		iwl_fw_dump_rxf(fwrt, &dump_data);
		iwl_fw_dump_txf(fwrt, &dump_data);
876
		if (radio_len)
877
			iwl_read_radio_regs(fwrt, &dump_data);
878
	}
879

880
	if (iwl_fw_dbg_type_on(fwrt, IWL_FW_ERROR_DUMP_ERROR_INFO) &&
881
	    fwrt->dump.desc) {
882 883
		dump_data->type = cpu_to_le32(IWL_FW_ERROR_DUMP_ERROR_INFO);
		dump_data->len = cpu_to_le32(sizeof(*dump_trig) +
884
					     fwrt->dump.desc->len);
885
		dump_trig = (void *)dump_data->data;
886 887
		memcpy(dump_trig, &fwrt->dump.desc->trig_desc,
		       sizeof(*dump_trig) + fwrt->dump.desc->len);
888 889 890 891 892

		dump_data = iwl_fw_error_next_data(dump_data);
	}

	/* In case we only want monitor dump, skip to dump trasport data */
893
	if (fwrt->dump.monitor_only)
894
		goto out;
895

896
	if (iwl_fw_dbg_type_on(fwrt, IWL_FW_ERROR_DUMP_MEM)) {
897 898 899 900 901 902 903 904 905 906
		const struct iwl_fw_dbg_mem_seg_tlv *fw_dbg_mem =
			fwrt->fw->dbg.mem_tlv;

		if (!fwrt->fw->dbg.n_mem_tlv)
			iwl_fw_dump_mem(fwrt, &dump_data, sram_len, sram_ofs,
					IWL_FW_ERROR_DUMP_MEM_SRAM);

		for (i = 0; i < fwrt->fw->dbg.n_mem_tlv; i++) {
			u32 len = le32_to_cpu(fw_dbg_mem[i].len);
			u32 ofs = le32_to_cpu(fw_dbg_mem[i].ofs);
S
Shahar S Matityahu 已提交
907

908 909 910 911 912 913 914 915 916 917 918 919
			iwl_fw_dump_mem(fwrt, &dump_data, len, ofs,
					le32_to_cpu(fw_dbg_mem[i].data_type));
		}

		iwl_fw_dump_mem(fwrt, &dump_data, smem_len,
				fwrt->trans->cfg->smem_offset,
				IWL_FW_ERROR_DUMP_MEM_SMEM);

		iwl_fw_dump_mem(fwrt, &dump_data, sram2_len,
				fwrt->trans->cfg->dccm2_offset,
				IWL_FW_ERROR_DUMP_MEM_SRAM);
	}
920

921 922 923 924 925 926 927
	if (iwl_fw_dbg_is_d3_debug_enabled(fwrt) && fwrt->dump.d3_debug_data) {
		u32 addr = fwrt->trans->cfg->d3_debug_data_base_addr;
		size_t data_size = fwrt->trans->cfg->d3_debug_data_length;

		dump_data->type = cpu_to_le32(IWL_FW_ERROR_DUMP_D3_DEBUG_DATA);
		dump_data->len = cpu_to_le32(data_size * 2);

S
Shahar S Matityahu 已提交
928
		memcpy(dump_data->data, fwrt->dump.d3_debug_data, data_size);
929 930 931 932 933 934 935 936 937 938 939

		kfree(fwrt->dump.d3_debug_data);
		fwrt->dump.d3_debug_data = NULL;

		iwl_trans_read_mem_bytes(fwrt->trans, addr,
					 dump_data->data + data_size,
					 data_size);

		dump_data = iwl_fw_error_next_data(dump_data);
	}

940
	/* Dump fw's virtual image */
941 942
	if (iwl_fw_dbg_is_paging_enabled(fwrt))
		iwl_dump_paging(fwrt, &dump_data);
943

944
	if (prph_len) {
945
		iwl_dump_prph(fwrt->trans, &dump_data,
946 947 948
			      iwl_prph_dump_addr_comm,
			      ARRAY_SIZE(iwl_prph_dump_addr_comm));

949 950
		if (fwrt->trans->cfg->mq_rx_supported)
			iwl_dump_prph(fwrt->trans, &dump_data,
951 952 953
				      iwl_prph_dump_addr_9000,
				      ARRAY_SIZE(iwl_prph_dump_addr_9000));
	}
954

955 956 957 958 959
out:
	dump_file->file_len = cpu_to_le32(file_len);
	return dump_file;
}

960 961 962 963 964 965 966 967 968 969 970 971 972 973 974 975 976 977 978 979 980 981 982 983 984 985 986 987 988 989 990 991 992 993 994 995 996 997 998 999 1000 1001 1002 1003 1004 1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015 1016 1017 1018 1019 1020 1021 1022 1023 1024 1025 1026 1027 1028 1029 1030 1031 1032 1033 1034 1035 1036 1037 1038 1039 1040 1041 1042 1043 1044 1045 1046 1047 1048 1049 1050 1051 1052 1053 1054 1055 1056 1057 1058 1059 1060 1061 1062 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072 1073 1074 1075 1076 1077 1078 1079 1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142 1143 1144 1145 1146 1147 1148 1149 1150 1151 1152 1153 1154 1155 1156 1157 1158 1159 1160 1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171 1172 1173 1174 1175 1176 1177 1178 1179 1180 1181 1182 1183 1184 1185 1186 1187 1188 1189 1190 1191
static void iwl_dump_prph_ini(struct iwl_trans *trans,
			      struct iwl_fw_error_dump_data **data,
			      struct iwl_fw_ini_region_cfg *reg)
{
	struct iwl_fw_error_dump_prph *prph;
	unsigned long flags;
	u32 i, size = le32_to_cpu(reg->num_regions);

	IWL_DEBUG_INFO(trans, "WRT PRPH dump\n");

	if (!iwl_trans_grab_nic_access(trans, &flags))
		return;

	for (i = 0; i < size; i++) {
		(*data)->type = cpu_to_le32(IWL_FW_ERROR_DUMP_PRPH);
		(*data)->len = cpu_to_le32(le32_to_cpu(reg->size) +
					   sizeof(*prph));
		prph = (void *)(*data)->data;
		prph->prph_start = reg->start_addr[i];
		prph->data[0] = cpu_to_le32(iwl_read_prph_no_grab(trans,
								  le32_to_cpu(prph->prph_start)));
		*data = iwl_fw_error_next_data(*data);
	}
	iwl_trans_release_nic_access(trans, &flags);
}

static void iwl_dump_csr_ini(struct iwl_trans *trans,
			     struct iwl_fw_error_dump_data **data,
			     struct iwl_fw_ini_region_cfg *reg)
{
	int i, num = le32_to_cpu(reg->num_regions);
	u32 size = le32_to_cpu(reg->size);

	IWL_DEBUG_INFO(trans, "WRT CSR dump\n");

	for (i = 0; i < num; i++) {
		u32 add = le32_to_cpu(reg->start_addr[i]);
		__le32 *val;
		int j;

		(*data)->type = cpu_to_le32(IWL_FW_ERROR_DUMP_CSR);
		(*data)->len = cpu_to_le32(size);
		val = (void *)(*data)->data;

		for (j = 0; j < size; j += 4)
			*val++ = cpu_to_le32(iwl_trans_read32(trans, j + add));

		*data = iwl_fw_error_next_data(*data);
	}
}

static int iwl_fw_ini_get_trigger_len(struct iwl_fw_runtime *fwrt,
				      struct iwl_fw_ini_trigger *trigger)
{
	int i, num, size = 0, hdr_len = sizeof(struct iwl_fw_error_dump_data);

	if (!trigger || !trigger->num_regions)
		return 0;

	num = le32_to_cpu(trigger->num_regions);
	for (i = 0; i < num; i++) {
		u32 reg_id = le32_to_cpu(trigger->data[i]);
		struct iwl_fw_ini_region_cfg *reg;
		enum iwl_fw_ini_region_type type;
		u32 num_entries;

		if (WARN_ON(reg_id >= ARRAY_SIZE(fwrt->dump.active_regs)))
			continue;

		reg = fwrt->dump.active_regs[reg_id].reg;
		if (WARN(!reg, "Unassigned region %d\n", reg_id))
			continue;

		type = le32_to_cpu(reg->region_type);
		num_entries = le32_to_cpu(reg->num_regions);

		switch (type) {
		case IWL_FW_INI_REGION_DEVICE_MEMORY:
			size += hdr_len +
				sizeof(struct iwl_fw_error_dump_named_mem) +
				le32_to_cpu(reg->size);
			break;
		case IWL_FW_INI_REGION_PERIPHERY_MAC:
		case IWL_FW_INI_REGION_PERIPHERY_PHY:
		case IWL_FW_INI_REGION_PERIPHERY_AUX:
			size += num_entries *
				(hdr_len +
				 sizeof(struct iwl_fw_error_dump_prph) +
				 sizeof(u32));
			break;
		case IWL_FW_INI_REGION_TXF:
			size += iwl_fw_txf_len(fwrt, &fwrt->smem_cfg);
			break;
		case IWL_FW_INI_REGION_RXF:
			size += iwl_fw_rxf_len(fwrt, &fwrt->smem_cfg);
			break;
		case IWL_FW_INI_REGION_PAGING:
			if (!iwl_fw_dbg_is_paging_enabled(fwrt))
				break;
			size += fwrt->num_of_paging_blk *
				(hdr_len +
				 sizeof(struct iwl_fw_error_dump_paging) +
				 PAGING_BLOCK_SIZE);
			break;
		case IWL_FW_INI_REGION_CSR:
			size += num_entries *
				(hdr_len + le32_to_cpu(reg->size));
			break;
		case IWL_FW_INI_REGION_DRAM_BUFFER:
			/* Transport takes care of DRAM dumping */
		case IWL_FW_INI_REGION_INTERNAL_BUFFER:
		case IWL_FW_INI_REGION_DRAM_IMR:
			/* Undefined yet */
		default:
			break;
		}
	}
	return size;
}

static void iwl_fw_ini_dump_trigger(struct iwl_fw_runtime *fwrt,
				    struct iwl_fw_ini_trigger *trigger,
				    struct iwl_fw_error_dump_data **data,
				    u32 *dump_mask)
{
	int i, num = le32_to_cpu(trigger->num_regions);

	for (i = 0; i < num; i++) {
		u32 reg_id = le32_to_cpu(trigger->data[i]);
		enum iwl_fw_ini_region_type type;
		struct iwl_fw_ini_region_cfg *reg;

		if (reg_id >= ARRAY_SIZE(fwrt->dump.active_regs))
			continue;

		reg = fwrt->dump.active_regs[reg_id].reg;
		/* Don't warn, get_trigger_len already warned */
		if (!reg)
			continue;

		type = le32_to_cpu(reg->region_type);
		switch (type) {
		case IWL_FW_INI_REGION_DEVICE_MEMORY:
			if (WARN_ON(le32_to_cpu(reg->num_regions) > 1))
				continue;
			iwl_fw_dump_named_mem(fwrt, data,
					      le32_to_cpu(reg->size),
					      le32_to_cpu(reg->start_addr[0]),
					      reg->name,
					      le32_to_cpu(reg->name_len));
			break;
		case IWL_FW_INI_REGION_PERIPHERY_MAC:
		case IWL_FW_INI_REGION_PERIPHERY_PHY:
		case IWL_FW_INI_REGION_PERIPHERY_AUX:
			iwl_dump_prph_ini(fwrt->trans, data, reg);
			break;
		case IWL_FW_INI_REGION_DRAM_BUFFER:
			*dump_mask |= IWL_FW_ERROR_DUMP_FW_MONITOR;
			break;
		case IWL_FW_INI_REGION_PAGING:
			if (iwl_fw_dbg_is_paging_enabled(fwrt))
				iwl_dump_paging(fwrt, data);
			else
				*dump_mask |= IWL_FW_ERROR_DUMP_PAGING;
			break;
		case IWL_FW_INI_REGION_TXF:
			iwl_fw_dump_txf(fwrt, data);
			break;
		case IWL_FW_INI_REGION_RXF:
			iwl_fw_dump_rxf(fwrt, data);
			break;
		case IWL_FW_INI_REGION_CSR:
			iwl_dump_csr_ini(fwrt->trans, data, reg);
			break;
		case IWL_FW_INI_REGION_DRAM_IMR:
		case IWL_FW_INI_REGION_INTERNAL_BUFFER:
			/* This is undefined yet */
		default:
			break;
		}
	}
}

static struct iwl_fw_error_dump_file *
_iwl_fw_error_ini_dump(struct iwl_fw_runtime *fwrt,
		       struct iwl_fw_dump_ptrs *fw_error_dump,
		       u32 *dump_mask)
{
	int size, id = le32_to_cpu(fwrt->dump.desc->trig_desc.type);
	struct iwl_fw_error_dump_data *dump_data;
	struct iwl_fw_error_dump_file *dump_file;
	struct iwl_fw_ini_trigger *trigger, *ext;

	if (id == FW_DBG_TRIGGER_FW_ASSERT)
		id = IWL_FW_TRIGGER_ID_FW_ASSERT;
	else if (id == FW_DBG_TRIGGER_USER)
		id = IWL_FW_TRIGGER_ID_USER_TRIGGER;
	else if (id < FW_DBG_TRIGGER_MAX)
		return NULL;

	if (WARN_ON(id >= ARRAY_SIZE(fwrt->dump.active_trigs)))
		return NULL;

	trigger = fwrt->dump.active_trigs[id].conf;
	ext = fwrt->dump.active_trigs[id].conf_ext;

	size = sizeof(*dump_file);
	size += iwl_fw_ini_get_trigger_len(fwrt, trigger);
	size += iwl_fw_ini_get_trigger_len(fwrt, ext);

	if (!size)
		return NULL;

	dump_file = vzalloc(size);
	if (!dump_file)
		return NULL;

	fw_error_dump->fwrt_ptr = dump_file;

	dump_file->barker = cpu_to_le32(IWL_FW_ERROR_DUMP_BARKER);
	dump_data = (void *)dump_file->data;
	dump_file->file_len = cpu_to_le32(size);

	*dump_mask = 0;
	if (trigger)
		iwl_fw_ini_dump_trigger(fwrt, trigger, &dump_data, dump_mask);
	if (ext)
		iwl_fw_ini_dump_trigger(fwrt, ext, &dump_data, dump_mask);

	return dump_file;
}

1192 1193 1194 1195 1196 1197
void iwl_fw_error_dump(struct iwl_fw_runtime *fwrt)
{
	struct iwl_fw_dump_ptrs *fw_error_dump;
	struct iwl_fw_error_dump_file *dump_file;
	struct scatterlist *sg_dump_data;
	u32 file_len;
1198
	u32 dump_mask = fwrt->fw->dbg.dump_mask;
1199 1200 1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211

	IWL_DEBUG_INFO(fwrt, "WRT dump start\n");

	/* there's no point in fw dump if the bus is dead */
	if (test_bit(STATUS_TRANS_DEAD, &fwrt->trans->status)) {
		IWL_ERR(fwrt, "Skip fw error dump since bus is dead\n");
		goto out;
	}

	fw_error_dump = kzalloc(sizeof(*fw_error_dump), GFP_KERNEL);
	if (!fw_error_dump)
		goto out;

1212 1213 1214 1215 1216 1217
	if (fwrt->trans->ini_valid)
		dump_file = _iwl_fw_error_ini_dump(fwrt, fw_error_dump,
						   &dump_mask);
	else
		dump_file = _iwl_fw_error_dump(fwrt, fw_error_dump);

1218 1219 1220 1221 1222
	if (!dump_file) {
		kfree(fw_error_dump);
		goto out;
	}

1223
	if (!fwrt->trans->ini_valid && fwrt->dump.monitor_only)
1224 1225 1226
		dump_mask &= IWL_FW_ERROR_DUMP_FW_MONITOR;

	fw_error_dump->trans_ptr = iwl_trans_dump_data(fwrt->trans, dump_mask);
1227
	file_len = le32_to_cpu(dump_file->file_len);
1228
	fw_error_dump->fwrt_len = file_len;
1229
	if (fw_error_dump->trans_ptr) {
1230
		file_len += fw_error_dump->trans_ptr->len;
1231 1232
		dump_file->file_len = cpu_to_le32(file_len);
	}
1233

1234 1235 1236 1237
	sg_dump_data = alloc_sgtable(file_len);
	if (sg_dump_data) {
		sg_pcopy_from_buffer(sg_dump_data,
				     sg_nents(sg_dump_data),
1238 1239
				     fw_error_dump->fwrt_ptr,
				     fw_error_dump->fwrt_len, 0);
1240 1241 1242 1243 1244
		if (fw_error_dump->trans_ptr)
			sg_pcopy_from_buffer(sg_dump_data,
					     sg_nents(sg_dump_data),
					     fw_error_dump->trans_ptr->data,
					     fw_error_dump->trans_ptr->len,
1245 1246
					     fw_error_dump->fwrt_len);
		dev_coredumpsg(fwrt->trans->dev, sg_dump_data, file_len,
1247 1248
			       GFP_KERNEL);
	}
1249
	vfree(fw_error_dump->fwrt_ptr);
1250 1251
	vfree(fw_error_dump->trans_ptr);
	kfree(fw_error_dump);
1252

1253
out:
1254 1255
	iwl_fw_free_dump_desc(fwrt);
	clear_bit(IWL_FWRT_STATUS_DUMPING, &fwrt->status);
1256
	IWL_DEBUG_INFO(fwrt, "WRT dump done\n");
1257
}
1258
IWL_EXPORT_SYMBOL(iwl_fw_error_dump);
1259

1260
const struct iwl_fw_dump_desc iwl_dump_desc_assert = {
1261 1262 1263 1264
	.trig_desc = {
		.type = cpu_to_le32(FW_DBG_TRIGGER_FW_ASSERT),
	},
};
1265
IWL_EXPORT_SYMBOL(iwl_dump_desc_assert);
1266

1267 1268 1269 1270 1271 1272 1273 1274
void iwl_fw_assert_error_dump(struct iwl_fw_runtime *fwrt)
{
	IWL_INFO(fwrt, "error dump due to fw assert\n");
	fwrt->dump.desc = &iwl_dump_desc_assert;
	iwl_fw_error_dump(fwrt);
}
IWL_EXPORT_SYMBOL(iwl_fw_assert_error_dump);

1275 1276 1277 1278 1279 1280 1281 1282 1283 1284 1285 1286 1287 1288 1289 1290 1291 1292 1293 1294 1295 1296 1297 1298
void iwl_fw_alive_error_dump(struct iwl_fw_runtime *fwrt)
{
	struct iwl_fw_dump_desc *iwl_dump_desc_no_alive =
		kmalloc(sizeof(*iwl_dump_desc_no_alive), GFP_KERNEL);

	if (!iwl_dump_desc_no_alive)
		return;

	iwl_dump_desc_no_alive->trig_desc.type =
		cpu_to_le32(FW_DBG_TRIGGER_NO_ALIVE);
	iwl_dump_desc_no_alive->len = 0;

	if (WARN_ON(fwrt->dump.desc))
		iwl_fw_free_dump_desc(fwrt);

	IWL_WARN(fwrt, "Collecting data: trigger %d fired.\n",
		 FW_DBG_TRIGGER_NO_ALIVE);

	fwrt->dump.desc = iwl_dump_desc_no_alive;
	iwl_fw_error_dump(fwrt);
	clear_bit(IWL_FWRT_STATUS_WAIT_ALIVE, &fwrt->status);
}
IWL_EXPORT_SYMBOL(iwl_fw_alive_error_dump);

1299
int iwl_fw_dbg_collect_desc(struct iwl_fw_runtime *fwrt,
1300 1301
			    const struct iwl_fw_dump_desc *desc,
			    bool monitor_only,
1302
			    unsigned int delay)
1303
{
1304 1305 1306 1307
	/*
	 * If the loading of the FW completed successfully, the next step is to
	 * get the SMEM config data. Thus, if fwrt->smem_cfg.num_lmacs is non
	 * zero, the FW was already loaded successully. If the state is "NO_FW"
1308
	 * in such a case - exit, since FW may be dead. Otherwise, we
1309 1310 1311 1312 1313 1314 1315
	 * can try to collect the data, since FW might just not be fully
	 * loaded (no "ALIVE" yet), and the debug data is accessible.
	 *
	 * Corner case: got the FW alive but crashed before getting the SMEM
	 *	config. In such a case, due to HW access problems, we might
	 *	collect garbage.
	 */
1316 1317
	if (fwrt->trans->state == IWL_TRANS_NO_FW &&
	    fwrt->smem_cfg.num_lmacs)
1318 1319
		return -EIO;

1320 1321
	if (test_and_set_bit(IWL_FWRT_STATUS_DUMPING, &fwrt->status) ||
	    test_bit(IWL_FWRT_STATUS_WAIT_ALIVE, &fwrt->status))
1322 1323
		return -EBUSY;

1324 1325
	if (WARN_ON(fwrt->dump.desc))
		iwl_fw_free_dump_desc(fwrt);
1326

1327
	IWL_WARN(fwrt, "Collecting data: trigger %d fired.\n",
1328 1329
		 le32_to_cpu(desc->trig_desc.type));

1330
	fwrt->dump.desc = desc;
1331
	fwrt->dump.monitor_only = monitor_only;
1332

1333
	schedule_delayed_work(&fwrt->dump.wk, delay);
1334 1335 1336

	return 0;
}
1337
IWL_EXPORT_SYMBOL(iwl_fw_dbg_collect_desc);
1338

1339 1340 1341 1342
int _iwl_fw_dbg_collect(struct iwl_fw_runtime *fwrt,
			enum iwl_fw_dbg_trigger trig,
			const char *str, size_t len,
			struct iwl_fw_dbg_trigger_tlv *trigger)
1343
{
1344
	struct iwl_fw_dump_desc *desc;
1345
	unsigned int delay = 0;
1346
	bool monitor_only = false;
1347

1348 1349
	if (trigger) {
		u16 occurrences = le16_to_cpu(trigger->occurrences) - 1;
1350

1351 1352 1353 1354 1355 1356 1357 1358 1359 1360 1361 1362
		if (!le16_to_cpu(trigger->occurrences))
			return 0;

		if (trigger->flags & IWL_FW_DBG_FORCE_RESTART) {
			IWL_WARN(fwrt, "Force restart: trigger %d fired.\n",
				 trig);
			iwl_force_nmi(fwrt->trans);
			return 0;
		}

		trigger->occurrences = cpu_to_le16(occurrences);
		delay = le16_to_cpu(trigger->trig_dis_ms);
1363
		monitor_only = trigger->mode & IWL_FW_DBG_TRIGGER_MONITOR_ONLY;
1364 1365
	}

1366 1367 1368 1369
	desc = kzalloc(sizeof(*desc) + len, GFP_ATOMIC);
	if (!desc)
		return -ENOMEM;

1370

1371 1372 1373 1374
	desc->len = len;
	desc->trig_desc.type = cpu_to_le32(trig);
	memcpy(desc->trig_desc.data, str, len);

1375
	return iwl_fw_dbg_collect_desc(fwrt, desc, monitor_only, delay);
1376
}
1377 1378 1379 1380 1381 1382 1383 1384 1385 1386 1387 1388 1389 1390 1391 1392 1393 1394 1395 1396 1397 1398 1399 1400 1401 1402 1403 1404 1405 1406 1407 1408 1409 1410 1411 1412 1413 1414 1415 1416 1417
IWL_EXPORT_SYMBOL(_iwl_fw_dbg_collect);

int iwl_fw_dbg_collect(struct iwl_fw_runtime *fwrt,
		       u32 id, const char *str, size_t len)
{
	struct iwl_fw_dump_desc *desc;
	u32 occur, delay;

	if (!fwrt->trans->ini_valid)
		return _iwl_fw_dbg_collect(fwrt, id, str, len, NULL);

	if (id == FW_DBG_TRIGGER_USER)
		id = IWL_FW_TRIGGER_ID_USER_TRIGGER;

	if (WARN_ON(!fwrt->dump.active_trigs[id].active))
		return -EINVAL;

	delay = le32_to_cpu(fwrt->dump.active_trigs[id].conf->ignore_consec);
	occur = le32_to_cpu(fwrt->dump.active_trigs[id].conf->occurrences);
	if (!occur)
		return 0;

	if (le32_to_cpu(fwrt->dump.active_trigs[id].conf->force_restart)) {
		IWL_WARN(fwrt, "Force restart: trigger %d fired.\n", id);
		iwl_force_nmi(fwrt->trans);
		return 0;
	}

	desc = kzalloc(sizeof(*desc) + len, GFP_ATOMIC);
	if (!desc)
		return -ENOMEM;

	occur--;
	fwrt->dump.active_trigs[id].conf->occurrences = cpu_to_le32(occur);

	desc->len = len;
	desc->trig_desc.type = cpu_to_le32(id);
	memcpy(desc->trig_desc.data, str, len);

	return iwl_fw_dbg_collect_desc(fwrt, desc, true, delay);
}
1418
IWL_EXPORT_SYMBOL(iwl_fw_dbg_collect);
1419

1420 1421 1422
int iwl_fw_dbg_collect_trig(struct iwl_fw_runtime *fwrt,
			    struct iwl_fw_dbg_trigger_tlv *trigger,
			    const char *fmt, ...)
1423 1424 1425 1426
{
	int ret, len = 0;
	char buf[64];

1427 1428 1429
	if (fwrt->trans->ini_valid)
		return 0;

1430 1431 1432 1433 1434 1435 1436 1437 1438 1439 1440 1441 1442 1443 1444 1445
	if (fmt) {
		va_list ap;

		buf[sizeof(buf) - 1] = '\0';

		va_start(ap, fmt);
		vsnprintf(buf, sizeof(buf), fmt, ap);
		va_end(ap);

		/* check for truncation */
		if (WARN_ON_ONCE(buf[sizeof(buf) - 1]))
			buf[sizeof(buf) - 1] = '\0';

		len = strlen(buf) + 1;
	}

1446 1447
	ret = _iwl_fw_dbg_collect(fwrt, le32_to_cpu(trigger->id), buf, len,
				  trigger);
1448 1449 1450 1451 1452 1453

	if (ret)
		return ret;

	return 0;
}
1454
IWL_EXPORT_SYMBOL(iwl_fw_dbg_collect_trig);
1455

1456
int iwl_fw_start_dbg_conf(struct iwl_fw_runtime *fwrt, u8 conf_id)
1457 1458 1459 1460 1461
{
	u8 *ptr;
	int ret;
	int i;

1462
	if (WARN_ONCE(conf_id >= ARRAY_SIZE(fwrt->fw->dbg.conf_tlv),
1463 1464 1465 1466
		      "Invalid configuration %d\n", conf_id))
		return -EINVAL;

	/* EARLY START - firmware's configuration is hard coded */
1467 1468
	if ((!fwrt->fw->dbg.conf_tlv[conf_id] ||
	     !fwrt->fw->dbg.conf_tlv[conf_id]->num_of_hcmds) &&
1469
	    conf_id == FW_DBG_START_FROM_ALIVE)
1470 1471
		return 0;

1472
	if (!fwrt->fw->dbg.conf_tlv[conf_id])
1473 1474
		return -EINVAL;

1475 1476 1477
	if (fwrt->dump.conf != FW_DBG_INVALID)
		IWL_WARN(fwrt, "FW already configured (%d) - re-configuring\n",
			 fwrt->dump.conf);
1478 1479

	/* Send all HCMDs for configuring the FW debug */
1480 1481
	ptr = (void *)&fwrt->fw->dbg.conf_tlv[conf_id]->hcmd;
	for (i = 0; i < fwrt->fw->dbg.conf_tlv[conf_id]->num_of_hcmds; i++) {
1482
		struct iwl_fw_dbg_conf_hcmd *cmd = (void *)ptr;
1483 1484 1485 1486 1487
		struct iwl_host_cmd hcmd = {
			.id = cmd->id,
			.len = { le16_to_cpu(cmd->len), },
			.data = { cmd->data, },
		};
1488

1489
		ret = iwl_trans_send_cmd(fwrt->trans, &hcmd);
1490 1491 1492 1493 1494 1495 1496
		if (ret)
			return ret;

		ptr += sizeof(*cmd);
		ptr += le16_to_cpu(cmd->len);
	}

1497
	fwrt->dump.conf = conf_id;
1498 1499

	return 0;
1500
}
1501 1502
IWL_EXPORT_SYMBOL(iwl_fw_start_dbg_conf);

1503 1504 1505 1506
/* this function assumes dump_start was called beforehand and dump_end will be
 * called afterwards
 */
void iwl_fw_dbg_collect_sync(struct iwl_fw_runtime *fwrt)
1507
{
1508
	struct iwl_fw_dbg_params params = {0};
1509

1510
	if (!test_bit(IWL_FWRT_STATUS_DUMPING, &fwrt->status))
1511 1512
		return;

1513 1514 1515 1516 1517
	if (fwrt->ops && fwrt->ops->fw_running &&
	    !fwrt->ops->fw_running(fwrt->ops_ctx)) {
		IWL_ERR(fwrt, "Firmware not running - cannot dump error\n");
		iwl_fw_free_dump_desc(fwrt);
		clear_bit(IWL_FWRT_STATUS_DUMPING, &fwrt->status);
1518
		return;
1519 1520
	}

1521
	iwl_fw_dbg_stop_recording(fwrt, &params);
1522 1523

	iwl_fw_error_dump(fwrt);
1524

1525 1526
	/* start recording again if the firmware is not crashed */
	if (!test_bit(STATUS_FW_ERROR, &fwrt->trans->status) &&
1527
	    fwrt->fw->dbg.dest_tlv) {
1528 1529
		/* wait before we collect the data till the DBGC stop */
		udelay(500);
1530
		iwl_fw_dbg_restart_recording(fwrt, &params);
1531
	}
1532 1533 1534 1535 1536 1537 1538 1539 1540 1541 1542 1543 1544 1545
}
IWL_EXPORT_SYMBOL(iwl_fw_dbg_collect_sync);

void iwl_fw_error_dump_wk(struct work_struct *work)
{
	struct iwl_fw_runtime *fwrt =
		container_of(work, struct iwl_fw_runtime, dump.wk.work);

	if (fwrt->ops && fwrt->ops->dump_start &&
	    fwrt->ops->dump_start(fwrt->ops_ctx))
		return;

	iwl_fw_dbg_collect_sync(fwrt);

1546 1547 1548 1549
	if (fwrt->ops && fwrt->ops->dump_end)
		fwrt->ops->dump_end(fwrt->ops_ctx);
}

1550 1551 1552 1553 1554 1555 1556 1557 1558 1559 1560 1561 1562 1563 1564 1565 1566 1567 1568 1569 1570 1571 1572
void iwl_fw_dbg_read_d3_debug_data(struct iwl_fw_runtime *fwrt)
{
	const struct iwl_cfg *cfg = fwrt->trans->cfg;

	if (!iwl_fw_dbg_is_d3_debug_enabled(fwrt))
		return;

	if (!fwrt->dump.d3_debug_data) {
		fwrt->dump.d3_debug_data = kmalloc(cfg->d3_debug_data_length,
						   GFP_KERNEL);
		if (!fwrt->dump.d3_debug_data) {
			IWL_ERR(fwrt,
				"failed to allocate memory for D3 debug data\n");
			return;
		}
	}

	/* if the buffer holds previous debug data it is overwritten */
	iwl_trans_read_mem_bytes(fwrt->trans, cfg->d3_debug_data_base_addr,
				 fwrt->dump.d3_debug_data,
				 cfg->d3_debug_data_length);
}
IWL_EXPORT_SYMBOL(iwl_fw_dbg_read_d3_debug_data);
S
Sara Sharon 已提交
1573 1574 1575 1576 1577 1578 1579 1580 1581 1582 1583 1584 1585 1586 1587 1588 1589 1590 1591 1592 1593 1594 1595 1596 1597 1598 1599 1600 1601 1602 1603 1604 1605 1606 1607 1608 1609 1610 1611 1612 1613 1614 1615 1616 1617 1618 1619 1620 1621 1622 1623 1624 1625 1626 1627 1628 1629 1630 1631 1632 1633 1634 1635 1636 1637 1638 1639 1640 1641 1642 1643 1644 1645 1646 1647 1648 1649 1650 1651 1652 1653 1654 1655

static void
iwl_fw_dbg_buffer_allocation(struct iwl_fw_runtime *fwrt,
			     struct iwl_fw_ini_allocation_tlv *alloc)
{
	struct iwl_trans *trans = fwrt->trans;
	struct iwl_continuous_record_cmd cont_rec = {};
	struct iwl_buffer_allocation_cmd *cmd = (void *)&cont_rec.pad[0];
	struct iwl_host_cmd hcmd = {
		.id = LDBG_CONFIG_CMD,
		.flags = CMD_ASYNC,
		.data[0] = &cont_rec,
		.len[0] = sizeof(cont_rec),
	};
	void *virtual_addr = NULL;
	u32 size = le32_to_cpu(alloc->size);
	dma_addr_t phys_addr;

	cont_rec.record_mode.enable_recording = cpu_to_le16(BUFFER_ALLOCATION);

	if (!trans->num_blocks &&
	    le32_to_cpu(alloc->buffer_location) !=
	    IWL_FW_INI_LOCATION_DRAM_PATH)
		return;

	virtual_addr = dma_alloc_coherent(fwrt->trans->dev, size,
					  &phys_addr, GFP_KERNEL);

	/* TODO: alloc fragments if needed */
	if (!virtual_addr)
		IWL_ERR(fwrt, "Failed to allocate debug memory\n");

	if (WARN_ON_ONCE(trans->num_blocks == ARRAY_SIZE(trans->fw_mon)))
		return;

	trans->fw_mon[trans->num_blocks].block = virtual_addr;
	trans->fw_mon[trans->num_blocks].physical = phys_addr;
	trans->fw_mon[trans->num_blocks].size = size;
	trans->num_blocks++;

	IWL_DEBUG_FW(trans, "Allocated debug block of size %d\n", size);

	/* First block is assigned via registers / context info */
	if (trans->num_blocks == 1)
		return;

	cmd->num_frags = cpu_to_le32(1);
	cmd->fragments[0].address = cpu_to_le64(phys_addr);
	cmd->fragments[0].size = alloc->size;
	cmd->allocation_id = alloc->allocation_id;
	cmd->buffer_location = alloc->buffer_location;

	iwl_trans_send_cmd(trans, &hcmd);
}

static void iwl_fw_dbg_send_hcmd(struct iwl_fw_runtime *fwrt,
				 struct iwl_ucode_tlv *tlv)
{
	struct iwl_fw_ini_hcmd_tlv *hcmd_tlv = (void *)&tlv->data[0];
	struct iwl_fw_ini_hcmd *data = &hcmd_tlv->hcmd;
	u16 len = le32_to_cpu(tlv->length) - sizeof(*hcmd_tlv);

	struct iwl_host_cmd hcmd = {
		.id = WIDE_ID(data->group, data->id),
		.len = { len, },
		.data = { data->data, },
	};

	iwl_trans_send_cmd(fwrt->trans, &hcmd);
}

static void iwl_fw_dbg_update_regions(struct iwl_fw_runtime *fwrt,
				      struct iwl_fw_ini_region_tlv *tlv,
				      bool ext, enum iwl_fw_ini_apply_point pnt)
{
	void *iter = (void *)tlv->region_config;
	int i, size = le32_to_cpu(tlv->num_regions);

	for (i = 0; i < size; i++) {
		struct iwl_fw_ini_region_cfg *reg = iter;
		int id = le32_to_cpu(reg->region_id);
		struct iwl_fw_ini_active_regs *active;

1656 1657
		if (WARN(id >= ARRAY_SIZE(fwrt->dump.active_regs),
			 "Invalid region id %d for apply point %d\n", id, pnt))
S
Sara Sharon 已提交
1658 1659 1660 1661 1662 1663 1664 1665 1666 1667 1668 1669 1670 1671 1672 1673 1674 1675 1676 1677 1678 1679 1680 1681 1682 1683 1684 1685 1686 1687 1688 1689 1690 1691 1692 1693 1694 1695 1696 1697 1698 1699 1700 1701 1702 1703 1704 1705 1706 1707 1708 1709 1710 1711 1712 1713 1714 1715 1716 1717 1718 1719
			break;

		active = &fwrt->dump.active_regs[id];

		if (ext && active->apply_point == pnt)
			IWL_WARN(fwrt->trans,
				 "External region TLV overrides FW default %x\n",
				 id);

		IWL_DEBUG_FW(fwrt,
			     "%s: apply point %d, activating region ID %d\n",
			     __func__, pnt, id);

		active->reg = reg;
		active->apply_point = pnt;

		if (le32_to_cpu(reg->region_type) !=
		    IWL_FW_INI_REGION_DRAM_BUFFER)
			iter += le32_to_cpu(reg->num_regions) * sizeof(__le32);

		iter += sizeof(*reg);
	}
}

static void iwl_fw_dbg_update_triggers(struct iwl_fw_runtime *fwrt,
				       struct iwl_fw_ini_trigger_tlv *tlv,
				       bool ext,
				       enum iwl_fw_ini_apply_point apply_point)
{
	int i, size = le32_to_cpu(tlv->num_triggers);
	void *iter = (void *)tlv->trigger_config;

	for (i = 0; i < size; i++) {
		struct iwl_fw_ini_trigger *trig = iter;
		struct iwl_fw_ini_active_triggers *active;
		int id = le32_to_cpu(trig->trigger_id);
		u32 num;

		if (WARN_ON(id >= ARRAY_SIZE(fwrt->dump.active_trigs)))
			break;

		active = &fwrt->dump.active_trigs[id];

		if (active->apply_point != apply_point) {
			active->conf = NULL;
			active->conf_ext = NULL;
		}

		num = le32_to_cpu(trig->num_regions);

		if (ext && active->apply_point == apply_point) {
			num += le32_to_cpu(active->conf->num_regions);
			if (trig->ignore_default) {
				active->conf_ext = active->conf;
				active->conf = trig;
			} else {
				active->conf_ext = trig;
			}
		} else {
			active->conf = trig;
		}

1720 1721 1722 1723 1724 1725
		/* Since zero means infinity - just set to -1 */
		if (!le32_to_cpu(trig->occurrences))
			trig->occurrences = cpu_to_le32(-1);
		if (!le32_to_cpu(trig->ignore_consec))
			trig->ignore_consec = cpu_to_le32(-1);

S
Sara Sharon 已提交
1726 1727 1728 1729 1730 1731 1732 1733 1734 1735 1736 1737 1738 1739 1740 1741 1742 1743 1744 1745 1746 1747 1748 1749 1750 1751 1752 1753 1754 1755 1756 1757 1758 1759 1760 1761 1762 1763 1764 1765 1766 1767 1768 1769 1770 1771 1772 1773 1774 1775 1776 1777 1778 1779 1780 1781 1782 1783 1784 1785 1786
		iter += sizeof(*trig) +
			le32_to_cpu(trig->num_regions) * sizeof(__le32);

		active->active = num;
		active->apply_point = apply_point;
	}
}

static void _iwl_fw_dbg_apply_point(struct iwl_fw_runtime *fwrt,
				    struct iwl_apply_point_data *data,
				    enum iwl_fw_ini_apply_point pnt,
				    bool ext)
{
	void *iter = data->data;

	while (iter && iter < data->data + data->size) {
		struct iwl_ucode_tlv *tlv = iter;
		void *ini_tlv = (void *)tlv->data;
		u32 type = le32_to_cpu(tlv->type);

		switch (type) {
		case IWL_UCODE_TLV_TYPE_BUFFER_ALLOCATION:
			iwl_fw_dbg_buffer_allocation(fwrt, ini_tlv);
			break;
		case IWL_UCODE_TLV_TYPE_HCMD:
			if (pnt < IWL_FW_INI_APPLY_AFTER_ALIVE) {
				IWL_ERR(fwrt,
					"Invalid apply point %x for host command\n",
					pnt);
				goto next;
			}
			iwl_fw_dbg_send_hcmd(fwrt, tlv);
			break;
		case IWL_UCODE_TLV_TYPE_REGIONS:
			iwl_fw_dbg_update_regions(fwrt, ini_tlv, ext, pnt);
			break;
		case IWL_UCODE_TLV_TYPE_TRIGGERS:
			iwl_fw_dbg_update_triggers(fwrt, ini_tlv, ext, pnt);
			break;
		case IWL_UCODE_TLV_TYPE_DEBUG_FLOW:
			break;
		default:
			WARN_ONCE(1, "Invalid TLV %x for apply point\n", type);
			break;
		}
next:
		iter += sizeof(*tlv) + le32_to_cpu(tlv->length);
	}
}

void iwl_fw_dbg_apply_point(struct iwl_fw_runtime *fwrt,
			    enum iwl_fw_ini_apply_point apply_point)
{
	void *data = &fwrt->trans->apply_points[apply_point];

	_iwl_fw_dbg_apply_point(fwrt, data, apply_point, false);

	data = &fwrt->trans->apply_points_ext[apply_point];
	_iwl_fw_dbg_apply_point(fwrt, data, apply_point, true);
}
IWL_EXPORT_SYMBOL(iwl_fw_dbg_apply_point);