atmel_mxt_ts.c 75.1 KB
Newer Older
1
/*
2
 * Atmel maXTouch Touchscreen driver
3 4
 *
 * Copyright (C) 2010 Samsung Electronics Co.Ltd
5
 * Copyright (C) 2011-2014 Atmel Corporation
6
 * Copyright (C) 2012 Google, Inc.
7
 * Copyright (C) 2016 Zodiac Inflight Innovations
8
 *
9 10 11 12 13 14 15 16 17
 * Author: Joonyoung Shim <jy0922.shim@samsung.com>
 *
 * This program is free software; you can redistribute  it and/or modify it
 * under  the terms of  the GNU General  Public License as published by the
 * Free Software Foundation;  either version 2 of the  License, or (at your
 * option) any later version.
 *
 */

18 19
#include <linux/acpi.h>
#include <linux/dmi.h>
20
#include <linux/module.h>
21 22
#include <linux/init.h>
#include <linux/completion.h>
23 24 25
#include <linux/delay.h>
#include <linux/firmware.h>
#include <linux/i2c.h>
26
#include <linux/input/mt.h>
27
#include <linux/interrupt.h>
28
#include <linux/of.h>
29
#include <linux/property.h>
30
#include <linux/slab.h>
31
#include <linux/gpio/consumer.h>
32
#include <asm/unaligned.h>
33 34 35 36
#include <media/v4l2-device.h>
#include <media/v4l2-ioctl.h>
#include <media/videobuf2-v4l2.h>
#include <media/videobuf2-vmalloc.h>
37

38
/* Firmware files */
39
#define MXT_FW_NAME		"maxtouch.fw"
40 41
#define MXT_CFG_NAME		"maxtouch.cfg"
#define MXT_CFG_MAGIC		"OBP_RAW V1"
42 43

/* Registers */
44 45
#define MXT_OBJECT_START	0x07
#define MXT_OBJECT_SIZE		6
46 47
#define MXT_INFO_CHECKSUM_SIZE	3
#define MXT_MAX_BLOCK_WRITE	256
48 49

/* Object types */
50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76
#define MXT_DEBUG_DIAGNOSTIC_T37	37
#define MXT_GEN_MESSAGE_T5		5
#define MXT_GEN_COMMAND_T6		6
#define MXT_GEN_POWER_T7		7
#define MXT_GEN_ACQUIRE_T8		8
#define MXT_GEN_DATASOURCE_T53		53
#define MXT_TOUCH_MULTI_T9		9
#define MXT_TOUCH_KEYARRAY_T15		15
#define MXT_TOUCH_PROXIMITY_T23		23
#define MXT_TOUCH_PROXKEY_T52		52
#define MXT_PROCI_GRIPFACE_T20		20
#define MXT_PROCG_NOISE_T22		22
#define MXT_PROCI_ONETOUCH_T24		24
#define MXT_PROCI_TWOTOUCH_T27		27
#define MXT_PROCI_GRIP_T40		40
#define MXT_PROCI_PALM_T41		41
#define MXT_PROCI_TOUCHSUPPRESSION_T42	42
#define MXT_PROCI_STYLUS_T47		47
#define MXT_PROCG_NOISESUPPRESSION_T48	48
#define MXT_SPT_COMMSCONFIG_T18		18
#define MXT_SPT_GPIOPWM_T19		19
#define MXT_SPT_SELFTEST_T25		25
#define MXT_SPT_CTECONFIG_T28		28
#define MXT_SPT_USERDATA_T38		38
#define MXT_SPT_DIGITIZER_T43		43
#define MXT_SPT_MESSAGECOUNT_T44	44
#define MXT_SPT_CTECONFIG_T46		46
77
#define MXT_SPT_DYNAMICCONFIGURATIONCONTAINER_T71 71
78
#define MXT_TOUCH_MULTITOUCHSCREEN_T100 100
79

80 81 82
/* MXT_GEN_MESSAGE_T5 object */
#define MXT_RPTID_NOMSG		0xff

83
/* MXT_GEN_COMMAND_T6 field */
84 85 86 87 88 89
#define MXT_COMMAND_RESET	0
#define MXT_COMMAND_BACKUPNV	1
#define MXT_COMMAND_CALIBRATE	2
#define MXT_COMMAND_REPORTALL	3
#define MXT_COMMAND_DIAGNOSTIC	5

90
/* Define for T6 status byte */
91 92 93 94 95 96
#define MXT_T6_STATUS_RESET	BIT(7)
#define MXT_T6_STATUS_OFL	BIT(6)
#define MXT_T6_STATUS_SIGERR	BIT(5)
#define MXT_T6_STATUS_CAL	BIT(4)
#define MXT_T6_STATUS_CFGERR	BIT(3)
#define MXT_T6_STATUS_COMSERR	BIT(2)
97

98
/* MXT_GEN_POWER_T7 field */
99 100 101 102 103 104 105
struct t7_config {
	u8 idle;
	u8 active;
} __packed;

#define MXT_POWER_CFG_RUN		0
#define MXT_POWER_CFG_DEEPSLEEP		1
106

107
/* MXT_TOUCH_MULTI_T9 field */
108
#define MXT_T9_CTRL		0
109 110
#define MXT_T9_XSIZE		3
#define MXT_T9_YSIZE		4
111 112 113
#define MXT_T9_ORIENT		9
#define MXT_T9_RANGE		18

114
/* MXT_TOUCH_MULTI_T9 status */
115 116 117 118 119 120 121 122
#define MXT_T9_UNGRIP		BIT(0)
#define MXT_T9_SUPPRESS		BIT(1)
#define MXT_T9_AMP		BIT(2)
#define MXT_T9_VECTOR		BIT(3)
#define MXT_T9_MOVE		BIT(4)
#define MXT_T9_RELEASE		BIT(5)
#define MXT_T9_PRESS		BIT(6)
#define MXT_T9_DETECT		BIT(7)
123

124
struct t9_range {
125 126
	__le16 x;
	__le16 y;
127 128
} __packed;

129
/* MXT_TOUCH_MULTI_T9 orient */
130 131 132
#define MXT_T9_ORIENT_SWITCH	BIT(0)
#define MXT_T9_ORIENT_INVERTX	BIT(1)
#define MXT_T9_ORIENT_INVERTY	BIT(2)
133

134
/* MXT_SPT_COMMSCONFIG_T18 */
135 136 137
#define MXT_COMMS_CTRL		0
#define MXT_COMMS_CMD		1

138 139 140
/* MXT_DEBUG_DIAGNOSTIC_T37 */
#define MXT_DIAGNOSTIC_PAGEUP	0x01
#define MXT_DIAGNOSTIC_DELTAS	0x10
141
#define MXT_DIAGNOSTIC_REFS	0x11
142 143
#define MXT_DIAGNOSTIC_SIZE	128

144 145 146 147
#define MXT_FAMILY_1386			160
#define MXT1386_COLUMNS			3
#define MXT1386_PAGES_PER_COLUMN	8

148 149 150 151 152 153 154 155
struct t37_debug {
#ifdef CONFIG_TOUCHSCREEN_ATMEL_MXT_T37
	u8 mode;
	u8 page;
	u8 data[MXT_DIAGNOSTIC_SIZE];
#endif
};

156
/* Define for MXT_GEN_COMMAND_T6 */
157
#define MXT_BOOT_VALUE		0xa5
158
#define MXT_RESET_VALUE		0x01
159
#define MXT_BACKUP_VALUE	0x55
160

161 162 163 164
/* T100 Multiple Touch Touchscreen */
#define MXT_T100_CTRL		0
#define MXT_T100_CFG1		1
#define MXT_T100_TCHAUX		3
165
#define MXT_T100_XSIZE		9
166
#define MXT_T100_XRANGE		13
167
#define MXT_T100_YSIZE		20
168 169 170
#define MXT_T100_YRANGE		24

#define MXT_T100_CFG_SWITCHXY	BIT(5)
171 172
#define MXT_T100_CFG_INVERTY	BIT(6)
#define MXT_T100_CFG_INVERTX	BIT(7)
173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194

#define MXT_T100_TCHAUX_VECT	BIT(0)
#define MXT_T100_TCHAUX_AMPL	BIT(1)
#define MXT_T100_TCHAUX_AREA	BIT(2)

#define MXT_T100_DETECT		BIT(7)
#define MXT_T100_TYPE_MASK	0x70

enum t100_type {
	MXT_T100_TYPE_FINGER		= 1,
	MXT_T100_TYPE_PASSIVE_STYLUS	= 2,
	MXT_T100_TYPE_HOVERING_FINGER	= 4,
	MXT_T100_TYPE_GLOVE		= 5,
	MXT_T100_TYPE_LARGE_TOUCH	= 6,
};

#define MXT_DISTANCE_ACTIVE_TOUCH	0
#define MXT_DISTANCE_HOVERING		1

#define MXT_TOUCH_MAJOR_DEFAULT		1
#define MXT_PRESSURE_DEFAULT		1

195
/* Delay times */
196
#define MXT_BACKUP_TIME		50	/* msec */
197 198
#define MXT_RESET_GPIO_TIME	20	/* msec */
#define MXT_RESET_INVALID_CHG	100	/* msec */
199
#define MXT_RESET_TIME		200	/* msec */
200
#define MXT_RESET_TIMEOUT	3000	/* msec */
201
#define MXT_CRC_TIMEOUT		1000	/* msec */
202 203
#define MXT_FW_RESET_TIME	3000	/* msec */
#define MXT_FW_CHG_TIMEOUT	300	/* msec */
204 205

/* Command to unlock bootloader */
206 207
#define MXT_UNLOCK_CMD_MSB	0xaa
#define MXT_UNLOCK_CMD_LSB	0xdc
208 209

/* Bootloader mode status */
210 211 212 213 214 215 216
#define MXT_WAITING_BOOTLOAD_CMD	0xc0	/* valid 7 6 bit only */
#define MXT_WAITING_FRAME_DATA	0x80	/* valid 7 6 bit only */
#define MXT_FRAME_CRC_CHECK	0x02
#define MXT_FRAME_CRC_FAIL	0x03
#define MXT_FRAME_CRC_PASS	0x04
#define MXT_APP_CRC_FAIL	0x40	/* valid 7 8 bit only */
#define MXT_BOOT_STATUS_MASK	0x3f
217
#define MXT_BOOT_EXTENDED_ID	BIT(5)
218
#define MXT_BOOT_ID_MASK	0x1f
219 220

/* Touchscreen absolute values */
221
#define MXT_MAX_AREA		0xff
222

223 224
#define MXT_PIXELS_PER_MM	20

225
struct mxt_info {
226 227 228 229 230 231 232 233 234
	u8 family_id;
	u8 variant_id;
	u8 version;
	u8 build;
	u8 matrix_xsize;
	u8 matrix_ysize;
	u8 object_num;
};

235
struct mxt_object {
236 237
	u8 type;
	u16 start_address;
238 239
	u8 size_minus_one;
	u8 instances_minus_one;
240
	u8 num_report_ids;
241
} __packed;
242

243 244 245 246 247 248
struct mxt_dbg {
	u16 t37_address;
	u16 diag_cmd_address;
	struct t37_debug *t37_buf;
	unsigned int t37_pages;
	unsigned int t37_nodes;
249 250 251 252 253 254 255 256 257

	struct v4l2_device v4l2;
	struct v4l2_pix_format format;
	struct video_device vdev;
	struct vb2_queue queue;
	struct mutex lock;
	int input;
};

258 259 260 261 262 263
enum v4l_dbg_inputs {
	MXT_V4L_INPUT_DELTAS,
	MXT_V4L_INPUT_REFS,
	MXT_V4L_INPUT_MAX,
};

264 265 266 267 268 269 270 271
static const struct v4l2_file_operations mxt_video_fops = {
	.owner = THIS_MODULE,
	.open = v4l2_fh_open,
	.release = vb2_fop_release,
	.unlocked_ioctl = video_ioctl2,
	.read = vb2_fop_read,
	.mmap = vb2_fop_mmap,
	.poll = vb2_fop_poll,
272 273
};

274 275 276 277 278
enum mxt_suspend_mode {
	MXT_SUSPEND_DEEP_SLEEP	= 0,
	MXT_SUSPEND_T9_CTRL	= 1,
};

279 280
/* Config update context */
struct mxt_cfg {
281
	u8 *raw;
282 283 284 285 286 287 288 289 290 291
	size_t raw_size;
	off_t raw_pos;

	u8 *mem;
	size_t mem_size;
	int start_ofs;

	struct mxt_info info;
};

292
/* Each client has this additional data */
293
struct mxt_data {
294 295
	struct i2c_client *client;
	struct input_dev *input_dev;
296
	char phys[64];		/* device physical location */
297
	struct mxt_object *object_table;
298 299
	struct mxt_info *info;
	void *raw_info_block;
300
	unsigned int irq;
301 302
	unsigned int max_x;
	unsigned int max_y;
303 304
	bool invertx;
	bool inverty;
305
	bool xy_switch;
306 307
	u8 xsize;
	u8 ysize;
308
	bool in_bootloader;
309
	u16 mem_size;
310 311 312
	u8 t100_aux_ampl;
	u8 t100_aux_area;
	u8 t100_aux_vect;
313
	u8 max_reportid;
314
	u32 config_crc;
315
	u32 info_crc;
316
	u8 bootloader_addr;
317
	u8 *msg_buf;
318
	u8 t6_status;
319
	bool update_input;
320 321
	u8 last_message_count;
	u8 num_touchids;
322
	u8 multitouch;
323
	struct t7_config t7_cfg;
324
	struct mxt_dbg dbg;
325
	struct gpio_desc *reset_gpio;
326 327

	/* Cached parameters from object table */
328
	u16 T5_address;
329
	u8 T5_msg_size;
330
	u8 T6_reportid;
331
	u16 T6_address;
332
	u16 T7_address;
333
	u16 T71_address;
334 335
	u8 T9_reportid_min;
	u8 T9_reportid_max;
336
	u8 T19_reportid;
337
	u16 T44_address;
338 339
	u8 T100_reportid_min;
	u8 T100_reportid_max;
340 341 342

	/* for fw update in bootloader */
	struct completion bl_completion;
343 344 345

	/* for reset handling */
	struct completion reset_completion;
346 347 348

	/* for config update handling */
	struct completion crc_completion;
349

350 351 352
	u32 *t19_keymap;
	unsigned int t19_num_keys;

353
	enum mxt_suspend_mode suspend_mode;
354 355
};

356 357 358 359 360
struct mxt_vb2_buffer {
	struct vb2_buffer	vb;
	struct list_head	list;
};

361 362 363 364 365 366 367 368 369 370
static size_t mxt_obj_size(const struct mxt_object *obj)
{
	return obj->size_minus_one + 1;
}

static size_t mxt_obj_instances(const struct mxt_object *obj)
{
	return obj->instances_minus_one + 1;
}

371
static bool mxt_object_readable(unsigned int type)
372 373
{
	switch (type) {
374 375 376 377 378 379 380 381
	case MXT_GEN_COMMAND_T6:
	case MXT_GEN_POWER_T7:
	case MXT_GEN_ACQUIRE_T8:
	case MXT_GEN_DATASOURCE_T53:
	case MXT_TOUCH_MULTI_T9:
	case MXT_TOUCH_KEYARRAY_T15:
	case MXT_TOUCH_PROXIMITY_T23:
	case MXT_TOUCH_PROXKEY_T52:
382
	case MXT_TOUCH_MULTITOUCHSCREEN_T100:
383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398
	case MXT_PROCI_GRIPFACE_T20:
	case MXT_PROCG_NOISE_T22:
	case MXT_PROCI_ONETOUCH_T24:
	case MXT_PROCI_TWOTOUCH_T27:
	case MXT_PROCI_GRIP_T40:
	case MXT_PROCI_PALM_T41:
	case MXT_PROCI_TOUCHSUPPRESSION_T42:
	case MXT_PROCI_STYLUS_T47:
	case MXT_PROCG_NOISESUPPRESSION_T48:
	case MXT_SPT_COMMSCONFIG_T18:
	case MXT_SPT_GPIOPWM_T19:
	case MXT_SPT_SELFTEST_T25:
	case MXT_SPT_CTECONFIG_T28:
	case MXT_SPT_USERDATA_T38:
	case MXT_SPT_DIGITIZER_T43:
	case MXT_SPT_CTECONFIG_T46:
399
	case MXT_SPT_DYNAMICCONFIGURATIONCONTAINER_T71:
400 401 402 403 404 405
		return true;
	default:
		return false;
	}
}

406
static void mxt_dump_message(struct mxt_data *data, u8 *message)
407
{
408 409
	dev_dbg(&data->client->dev, "message: %*ph\n",
		data->T5_msg_size, message);
410 411
}

412 413 414
static int mxt_wait_for_completion(struct mxt_data *data,
				   struct completion *comp,
				   unsigned int timeout_ms)
415 416 417 418 419 420 421 422 423 424 425 426 427 428 429
{
	struct device *dev = &data->client->dev;
	unsigned long timeout = msecs_to_jiffies(timeout_ms);
	long ret;

	ret = wait_for_completion_interruptible_timeout(comp, timeout);
	if (ret < 0) {
		return ret;
	} else if (ret == 0) {
		dev_err(dev, "Wait for completion timed out.\n");
		return -ETIMEDOUT;
	}
	return 0;
}

430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476
static int mxt_bootloader_read(struct mxt_data *data,
			       u8 *val, unsigned int count)
{
	int ret;
	struct i2c_msg msg;

	msg.addr = data->bootloader_addr;
	msg.flags = data->client->flags & I2C_M_TEN;
	msg.flags |= I2C_M_RD;
	msg.len = count;
	msg.buf = val;

	ret = i2c_transfer(data->client->adapter, &msg, 1);
	if (ret == 1) {
		ret = 0;
	} else {
		ret = ret < 0 ? ret : -EIO;
		dev_err(&data->client->dev, "%s: i2c recv failed (%d)\n",
			__func__, ret);
	}

	return ret;
}

static int mxt_bootloader_write(struct mxt_data *data,
				const u8 * const val, unsigned int count)
{
	int ret;
	struct i2c_msg msg;

	msg.addr = data->bootloader_addr;
	msg.flags = data->client->flags & I2C_M_TEN;
	msg.len = count;
	msg.buf = (u8 *)val;

	ret = i2c_transfer(data->client->adapter, &msg, 1);
	if (ret == 1) {
		ret = 0;
	} else {
		ret = ret < 0 ? ret : -EIO;
		dev_err(&data->client->dev, "%s: i2c send failed (%d)\n",
			__func__, ret);
	}

	return ret;
}

477
static int mxt_lookup_bootloader_address(struct mxt_data *data, bool retry)
478 479 480
{
	u8 appmode = data->client->addr;
	u8 bootloader;
481
	u8 family_id = data->info ? data->info->family_id : 0;
482 483 484 485

	switch (appmode) {
	case 0x4a:
	case 0x4b:
486
		/* Chips after 1664S use different scheme */
487
		if (retry || family_id >= 0xa2) {
488 489 490 491
			bootloader = appmode - 0x24;
			break;
		}
		/* Fall through for normal case */
492 493 494 495 496 497
	case 0x4c:
	case 0x4d:
	case 0x5a:
	case 0x5b:
		bootloader = appmode - 0x26;
		break;
498

499 500 501 502 503 504 505 506 507 508 509
	default:
		dev_err(&data->client->dev,
			"Appmode i2c address 0x%02x not found\n",
			appmode);
		return -EINVAL;
	}

	data->bootloader_addr = bootloader;
	return 0;
}

510
static int mxt_probe_bootloader(struct mxt_data *data, bool alt_address)
511 512
{
	struct device *dev = &data->client->dev;
513
	int error;
514 515 516
	u8 val;
	bool crc_failure;

517 518 519
	error = mxt_lookup_bootloader_address(data, alt_address);
	if (error)
		return error;
520

521 522 523
	error = mxt_bootloader_read(data, &val, 1);
	if (error)
		return error;
524 525 526 527 528 529 530 531 532 533

	/* Check app crc fail mode */
	crc_failure = (val & ~MXT_BOOT_STATUS_MASK) == MXT_APP_CRC_FAIL;

	dev_err(dev, "Detected bootloader, status:%02X%s\n",
			val, crc_failure ? ", APP_CRC_FAIL" : "");

	return 0;
}

534 535 536 537 538 539 540 541
static u8 mxt_get_bootloader_version(struct mxt_data *data, u8 val)
{
	struct device *dev = &data->client->dev;
	u8 buf[3];

	if (val & MXT_BOOT_EXTENDED_ID) {
		if (mxt_bootloader_read(data, &buf[0], 3) != 0) {
			dev_err(dev, "%s: i2c failure\n", __func__);
542
			return val;
543 544 545 546 547 548 549 550 551 552 553 554
		}

		dev_dbg(dev, "Bootloader ID:%d Version:%d\n", buf[1], buf[2]);

		return buf[0];
	} else {
		dev_dbg(dev, "Bootloader ID:%d\n", val & MXT_BOOT_ID_MASK);

		return val;
	}
}

555 556
static int mxt_check_bootloader(struct mxt_data *data, unsigned int state,
				bool wait)
557
{
558
	struct device *dev = &data->client->dev;
559
	u8 val;
560
	int ret;
561 562

recheck:
563
	if (wait) {
564 565 566 567 568 569
		/*
		 * In application update mode, the interrupt
		 * line signals state transitions. We must wait for the
		 * CHG assertion before reading the status byte.
		 * Once the status byte has been read, the line is deasserted.
		 */
570 571
		ret = mxt_wait_for_completion(data, &data->bl_completion,
					      MXT_FW_CHG_TIMEOUT);
572 573 574 575 576 577 578
		if (ret) {
			/*
			 * TODO: handle -ERESTARTSYS better by terminating
			 * fw update process before returning to userspace
			 * by writing length 0x000 to device (iff we are in
			 * WAITING_FRAME_DATA state).
			 */
579
			dev_err(dev, "Update wait error %d\n", ret);
580 581 582 583
			return ret;
		}
	}

584 585 586
	ret = mxt_bootloader_read(data, &val, 1);
	if (ret)
		return ret;
587

588 589 590
	if (state == MXT_WAITING_BOOTLOAD_CMD)
		val = mxt_get_bootloader_version(data, val);

591
	switch (state) {
592 593
	case MXT_WAITING_BOOTLOAD_CMD:
	case MXT_WAITING_FRAME_DATA:
594
	case MXT_APP_CRC_FAIL:
595
		val &= ~MXT_BOOT_STATUS_MASK;
596
		break;
597
	case MXT_FRAME_CRC_PASS:
598
		if (val == MXT_FRAME_CRC_CHECK) {
599
			goto recheck;
600 601 602 603
		} else if (val == MXT_FRAME_CRC_FAIL) {
			dev_err(dev, "Bootloader CRC fail\n");
			return -EINVAL;
		}
604 605 606 607 608 609
		break;
	default:
		return -EINVAL;
	}

	if (val != state) {
610
		dev_err(dev, "Invalid bootloader state %02X != %02X\n",
611
			val, state);
612 613 614 615 616 617
		return -EINVAL;
	}

	return 0;
}

618
static int mxt_send_bootloader_cmd(struct mxt_data *data, bool unlock)
619
{
620
	int ret;
621 622
	u8 buf[2];

623 624 625 626 627 628 629
	if (unlock) {
		buf[0] = MXT_UNLOCK_CMD_LSB;
		buf[1] = MXT_UNLOCK_CMD_MSB;
	} else {
		buf[0] = 0x01;
		buf[1] = 0x01;
	}
630

631 632 633
	ret = mxt_bootloader_write(data, buf, 2);
	if (ret)
		return ret;
634 635 636 637

	return 0;
}

638
static int __mxt_read_reg(struct i2c_client *client,
639 640 641 642
			       u16 reg, u16 len, void *val)
{
	struct i2c_msg xfer[2];
	u8 buf[2];
643
	int ret;
644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659

	buf[0] = reg & 0xff;
	buf[1] = (reg >> 8) & 0xff;

	/* Write register */
	xfer[0].addr = client->addr;
	xfer[0].flags = 0;
	xfer[0].len = 2;
	xfer[0].buf = buf;

	/* Read data */
	xfer[1].addr = client->addr;
	xfer[1].flags = I2C_M_RD;
	xfer[1].len = len;
	xfer[1].buf = val;

660 661 662 663 664 665 666 667
	ret = i2c_transfer(client->adapter, xfer, 2);
	if (ret == 2) {
		ret = 0;
	} else {
		if (ret >= 0)
			ret = -EIO;
		dev_err(&client->dev, "%s: i2c transfer failed (%d)\n",
			__func__, ret);
668 669
	}

670
	return ret;
671 672
}

673 674
static int __mxt_write_reg(struct i2c_client *client, u16 reg, u16 len,
			   const void *val)
675
{
676 677
	u8 *buf;
	size_t count;
678
	int ret;
679

680 681 682 683
	count = len + 2;
	buf = kmalloc(count, GFP_KERNEL);
	if (!buf)
		return -ENOMEM;
684 685 686

	buf[0] = reg & 0xff;
	buf[1] = (reg >> 8) & 0xff;
687
	memcpy(&buf[2], val, len);
688

689 690
	ret = i2c_master_send(client, buf, count);
	if (ret == count) {
691 692 693 694 695 696
		ret = 0;
	} else {
		if (ret >= 0)
			ret = -EIO;
		dev_err(&client->dev, "%s: i2c send failed (%d)\n",
			__func__, ret);
697 698
	}

699
	kfree(buf);
700
	return ret;
701 702
}

703
static int mxt_write_reg(struct i2c_client *client, u16 reg, u8 val)
704
{
705
	return __mxt_write_reg(client, reg, 1, &val);
706 707
}

708 709
static struct mxt_object *
mxt_get_object(struct mxt_data *data, u8 type)
710
{
711
	struct mxt_object *object;
712 713
	int i;

714
	for (i = 0; i < data->info->object_num; i++) {
715 716 717 718 719
		object = data->object_table + i;
		if (object->type == type)
			return object;
	}

720
	dev_warn(&data->client->dev, "Invalid object type T%u\n", type);
721 722 723
	return NULL;
}

724 725 726 727 728 729 730 731 732 733 734
static void mxt_proc_t6_messages(struct mxt_data *data, u8 *msg)
{
	struct device *dev = &data->client->dev;
	u8 status = msg[1];
	u32 crc = msg[2] | (msg[3] << 8) | (msg[4] << 16);

	if (crc != data->config_crc) {
		data->config_crc = crc;
		dev_dbg(dev, "T6 Config Checksum: 0x%06X\n", crc);
	}

735 736
	complete(&data->crc_completion);

737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756
	/* Detect reset */
	if (status & MXT_T6_STATUS_RESET)
		complete(&data->reset_completion);

	/* Output debug if status has changed */
	if (status != data->t6_status)
		dev_dbg(dev, "T6 Status 0x%02X%s%s%s%s%s%s%s\n",
			status,
			status == 0 ? " OK" : "",
			status & MXT_T6_STATUS_RESET ? " RESET" : "",
			status & MXT_T6_STATUS_OFL ? " OFL" : "",
			status & MXT_T6_STATUS_SIGERR ? " SIGERR" : "",
			status & MXT_T6_STATUS_CAL ? " CAL" : "",
			status & MXT_T6_STATUS_CFGERR ? " CFGERR" : "",
			status & MXT_T6_STATUS_COMSERR ? " COMSERR" : "");

	/* Save current status */
	data->t6_status = status;
}

757 758 759 760 761 762 763 764 765 766 767 768 769 770
static int mxt_write_object(struct mxt_data *data,
				 u8 type, u8 offset, u8 val)
{
	struct mxt_object *object;
	u16 reg;

	object = mxt_get_object(data, type);
	if (!object || offset >= mxt_obj_size(object))
		return -EINVAL;

	reg = object->start_address;
	return mxt_write_reg(data->client, reg + offset, val);
}

771
static void mxt_input_button(struct mxt_data *data, u8 *message)
772 773 774 775
{
	struct input_dev *input = data->input_dev;
	int i;

776 777
	for (i = 0; i < data->t19_num_keys; i++) {
		if (data->t19_keymap[i] == KEY_RESERVED)
778
			continue;
779 780

		/* Active-low switch */
781
		input_report_key(input, data->t19_keymap[i],
782
				 !(message[1] & BIT(i)));
783 784 785
	}
}

786
static void mxt_input_sync(struct mxt_data *data)
787
{
788
	input_mt_report_pointer_emulation(data->input_dev,
789
					  data->t19_num_keys);
790
	input_sync(data->input_dev);
791 792
}

793
static void mxt_proc_t9_message(struct mxt_data *data, u8 *message)
794 795
{
	struct device *dev = &data->client->dev;
796
	struct input_dev *input_dev = data->input_dev;
797 798
	int id;
	u8 status;
799 800 801
	int x;
	int y;
	int area;
802
	int amplitude;
803

804 805 806 807
	id = message[0] - data->T9_reportid_min;
	status = message[1];
	x = (message[2] << 4) | ((message[4] >> 4) & 0xf);
	y = (message[3] << 4) | ((message[4] & 0xf));
808 809

	/* Handle 10/12 bit switching */
810
	if (data->max_x < 1024)
811
		x >>= 2;
812
	if (data->max_y < 1024)
813
		y >>= 2;
814

815 816
	area = message[5];
	amplitude = message[6];
817

818 819 820
	dev_dbg(dev,
		"[%u] %c%c%c%c%c%c%c%c x: %5u y: %5u area: %3u amp: %3u\n",
		id,
821 822 823 824 825 826 827 828
		(status & MXT_T9_DETECT) ? 'D' : '.',
		(status & MXT_T9_PRESS) ? 'P' : '.',
		(status & MXT_T9_RELEASE) ? 'R' : '.',
		(status & MXT_T9_MOVE) ? 'M' : '.',
		(status & MXT_T9_VECTOR) ? 'V' : '.',
		(status & MXT_T9_AMP) ? 'A' : '.',
		(status & MXT_T9_SUPPRESS) ? 'S' : '.',
		(status & MXT_T9_UNGRIP) ? 'U' : '.',
829
		x, y, area, amplitude);
830

831 832
	input_mt_slot(input_dev, id);

833
	if (status & MXT_T9_DETECT) {
834 835 836 837 838 839 840 841
		/*
		 * Multiple bits may be set if the host is slow to read
		 * the status messages, indicating all the events that
		 * have happened.
		 */
		if (status & MXT_T9_RELEASE) {
			input_mt_report_slot_state(input_dev,
						   MT_TOOL_FINGER, 0);
842
			mxt_input_sync(data);
843 844
		}

845 846 847 848
		/* if active, pressure must be non-zero */
		if (!amplitude)
			amplitude = MXT_PRESSURE_DEFAULT;

849 850
		/* Touch active */
		input_mt_report_slot_state(input_dev, MT_TOOL_FINGER, 1);
851 852
		input_report_abs(input_dev, ABS_MT_POSITION_X, x);
		input_report_abs(input_dev, ABS_MT_POSITION_Y, y);
853
		input_report_abs(input_dev, ABS_MT_PRESSURE, amplitude);
854
		input_report_abs(input_dev, ABS_MT_TOUCH_MAJOR, area);
855 856 857
	} else {
		/* Touch no longer active, close out slot */
		input_mt_report_slot_state(input_dev, MT_TOOL_FINGER, 0);
858
	}
859 860

	data->update_input = true;
861 862
}

863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878 879 880 881 882 883 884 885 886 887 888 889 890 891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916 917 918 919 920 921 922 923 924 925 926 927 928 929 930 931 932 933 934 935 936 937 938 939 940 941 942 943 944 945 946 947 948 949 950 951 952 953 954 955 956 957 958 959 960 961 962 963 964 965 966 967 968 969 970
static void mxt_proc_t100_message(struct mxt_data *data, u8 *message)
{
	struct device *dev = &data->client->dev;
	struct input_dev *input_dev = data->input_dev;
	int id;
	u8 status;
	u8 type = 0;
	u16 x;
	u16 y;
	int distance = 0;
	int tool = 0;
	u8 major = 0;
	u8 pressure = 0;
	u8 orientation = 0;

	id = message[0] - data->T100_reportid_min - 2;

	/* ignore SCRSTATUS events */
	if (id < 0)
		return;

	status = message[1];
	x = get_unaligned_le16(&message[2]);
	y = get_unaligned_le16(&message[4]);

	if (status & MXT_T100_DETECT) {
		type = (status & MXT_T100_TYPE_MASK) >> 4;

		switch (type) {
		case MXT_T100_TYPE_HOVERING_FINGER:
			tool = MT_TOOL_FINGER;
			distance = MXT_DISTANCE_HOVERING;

			if (data->t100_aux_vect)
				orientation = message[data->t100_aux_vect];

			break;

		case MXT_T100_TYPE_FINGER:
		case MXT_T100_TYPE_GLOVE:
			tool = MT_TOOL_FINGER;
			distance = MXT_DISTANCE_ACTIVE_TOUCH;

			if (data->t100_aux_area)
				major = message[data->t100_aux_area];

			if (data->t100_aux_ampl)
				pressure = message[data->t100_aux_ampl];

			if (data->t100_aux_vect)
				orientation = message[data->t100_aux_vect];

			break;

		case MXT_T100_TYPE_PASSIVE_STYLUS:
			tool = MT_TOOL_PEN;

			/*
			 * Passive stylus is reported with size zero so
			 * hardcode.
			 */
			major = MXT_TOUCH_MAJOR_DEFAULT;

			if (data->t100_aux_ampl)
				pressure = message[data->t100_aux_ampl];

			break;

		case MXT_T100_TYPE_LARGE_TOUCH:
			/* Ignore suppressed touch */
			break;

		default:
			dev_dbg(dev, "Unexpected T100 type\n");
			return;
		}
	}

	/*
	 * Values reported should be non-zero if tool is touching the
	 * device
	 */
	if (!pressure && type != MXT_T100_TYPE_HOVERING_FINGER)
		pressure = MXT_PRESSURE_DEFAULT;

	input_mt_slot(input_dev, id);

	if (status & MXT_T100_DETECT) {
		dev_dbg(dev, "[%u] type:%u x:%u y:%u a:%02X p:%02X v:%02X\n",
			id, type, x, y, major, pressure, orientation);

		input_mt_report_slot_state(input_dev, tool, 1);
		input_report_abs(input_dev, ABS_MT_POSITION_X, x);
		input_report_abs(input_dev, ABS_MT_POSITION_Y, y);
		input_report_abs(input_dev, ABS_MT_TOUCH_MAJOR, major);
		input_report_abs(input_dev, ABS_MT_PRESSURE, pressure);
		input_report_abs(input_dev, ABS_MT_DISTANCE, distance);
		input_report_abs(input_dev, ABS_MT_ORIENTATION, orientation);
	} else {
		dev_dbg(dev, "[%u] release\n", id);

		/* close out slot */
		input_mt_report_slot_state(input_dev, 0, 0);
	}

	data->update_input = true;
}

971
static int mxt_proc_message(struct mxt_data *data, u8 *message)
972
{
973 974 975 976 977 978 979 980 981 982 983 984 985
	u8 report_id = message[0];

	if (report_id == MXT_RPTID_NOMSG)
		return 0;

	if (report_id == data->T6_reportid) {
		mxt_proc_t6_messages(data, message);
	} else if (!data->input_dev) {
		/*
		 * Do not report events if input device
		 * is not yet registered.
		 */
		mxt_dump_message(data, message);
986 987
	} else if (report_id >= data->T9_reportid_min &&
		   report_id <= data->T9_reportid_max) {
988
		mxt_proc_t9_message(data, message);
989 990 991
	} else if (report_id >= data->T100_reportid_min &&
		   report_id <= data->T100_reportid_max) {
		mxt_proc_t100_message(data, message);
992 993 994 995 996 997 998 999
	} else if (report_id == data->T19_reportid) {
		mxt_input_button(data, message);
		data->update_input = true;
	} else {
		mxt_dump_message(data, message);
	}

	return 1;
1000 1001
}

1002
static int mxt_read_and_process_messages(struct mxt_data *data, u8 count)
1003 1004
{
	struct device *dev = &data->client->dev;
1005
	int ret;
1006 1007 1008 1009 1010 1011
	int i;
	u8 num_valid = 0;

	/* Safety check for msg_buf */
	if (count > data->max_reportid)
		return -EINVAL;
1012

1013
	/* Process remaining messages if necessary */
1014
	ret = __mxt_read_reg(data->client, data->T5_address,
1015
				data->T5_msg_size * count, data->msg_buf);
1016
	if (ret) {
1017
		dev_err(dev, "Failed to read %u messages (%d)\n", count, ret);
1018 1019
		return ret;
	}
1020

1021 1022 1023 1024 1025 1026 1027 1028 1029 1030
	for (i = 0;  i < count; i++) {
		ret = mxt_proc_message(data,
			data->msg_buf + data->T5_msg_size * i);

		if (ret == 1)
			num_valid++;
	}

	/* return number of messages read */
	return num_valid;
1031
}
1032

1033
static irqreturn_t mxt_process_messages_t44(struct mxt_data *data)
1034
{
1035
	struct device *dev = &data->client->dev;
1036
	int ret;
1037
	u8 count, num_left;
1038

1039 1040 1041 1042 1043 1044 1045 1046 1047 1048
	/* Read T44 and T5 together */
	ret = __mxt_read_reg(data->client, data->T44_address,
		data->T5_msg_size + 1, data->msg_buf);
	if (ret) {
		dev_err(dev, "Failed to read T44 and T5 (%d)\n", ret);
		return IRQ_NONE;
	}

	count = data->msg_buf[0];

1049 1050 1051 1052 1053
	/*
	 * This condition may be caused by the CHG line being configured in
	 * Mode 0. It results in unnecessary I2C operations but it is benign.
	 */
	if (count == 0)
1054
		return IRQ_NONE;
1055 1056 1057

	if (count > data->max_reportid) {
		dev_warn(dev, "T44 count %d exceeded max report id\n", count);
1058 1059 1060 1061 1062 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072
		count = data->max_reportid;
	}

	/* Process first message */
	ret = mxt_proc_message(data, data->msg_buf + 1);
	if (ret < 0) {
		dev_warn(dev, "Unexpected invalid message\n");
		return IRQ_NONE;
	}

	num_left = count - 1;

	/* Process remaining messages if necessary */
	if (num_left) {
		ret = mxt_read_and_process_messages(data, num_left);
1073
		if (ret < 0)
1074 1075 1076 1077 1078 1079 1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131
			goto end;
		else if (ret != num_left)
			dev_warn(dev, "Unexpected invalid message\n");
	}

end:
	if (data->update_input) {
		mxt_input_sync(data);
		data->update_input = false;
	}

	return IRQ_HANDLED;
}

static int mxt_process_messages_until_invalid(struct mxt_data *data)
{
	struct device *dev = &data->client->dev;
	int count, read;
	u8 tries = 2;

	count = data->max_reportid;

	/* Read messages until we force an invalid */
	do {
		read = mxt_read_and_process_messages(data, count);
		if (read < count)
			return 0;
	} while (--tries);

	if (data->update_input) {
		mxt_input_sync(data);
		data->update_input = false;
	}

	dev_err(dev, "CHG pin isn't cleared\n");
	return -EBUSY;
}

static irqreturn_t mxt_process_messages(struct mxt_data *data)
{
	int total_handled, num_handled;
	u8 count = data->last_message_count;

	if (count < 1 || count > data->max_reportid)
		count = 1;

	/* include final invalid message */
	total_handled = mxt_read_and_process_messages(data, count + 1);
	if (total_handled < 0)
		return IRQ_NONE;
	/* if there were invalid messages, then we are done */
	else if (total_handled <= count)
		goto update_count;

	/* keep reading two msgs until one is invalid or reportid limit */
	do {
		num_handled = mxt_read_and_process_messages(data, 2);
		if (num_handled < 0)
1132
			return IRQ_NONE;
1133 1134 1135 1136 1137 1138 1139 1140 1141

		total_handled += num_handled;

		if (num_handled < 2)
			break;
	} while (total_handled < data->num_touchids);

update_count:
	data->last_message_count = total_handled;
1142 1143

	if (data->update_input) {
1144
		mxt_input_sync(data);
1145 1146
		data->update_input = false;
	}
1147

1148 1149 1150
	return IRQ_HANDLED;
}

1151 1152 1153 1154 1155 1156 1157 1158 1159 1160
static irqreturn_t mxt_interrupt(int irq, void *dev_id)
{
	struct mxt_data *data = dev_id;

	if (data->in_bootloader) {
		/* bootloader state transition completion */
		complete(&data->bl_completion);
		return IRQ_HANDLED;
	}

1161 1162 1163
	if (!data->object_table)
		return IRQ_HANDLED;

1164 1165 1166 1167 1168
	if (data->T44_address) {
		return mxt_process_messages_t44(data);
	} else {
		return mxt_process_messages(data);
	}
1169 1170
}

1171 1172 1173 1174 1175 1176 1177 1178 1179 1180 1181 1182 1183 1184 1185 1186 1187 1188 1189 1190 1191 1192 1193 1194 1195 1196 1197 1198 1199 1200 1201 1202
static int mxt_t6_command(struct mxt_data *data, u16 cmd_offset,
			  u8 value, bool wait)
{
	u16 reg;
	u8 command_register;
	int timeout_counter = 0;
	int ret;

	reg = data->T6_address + cmd_offset;

	ret = mxt_write_reg(data->client, reg, value);
	if (ret)
		return ret;

	if (!wait)
		return 0;

	do {
		msleep(20);
		ret = __mxt_read_reg(data->client, reg, 1, &command_register);
		if (ret)
			return ret;
	} while (command_register != 0 && timeout_counter++ <= 100);

	if (timeout_counter > 100) {
		dev_err(&data->client->dev, "Command failed!\n");
		return -EIO;
	}

	return 0;
}

1203 1204 1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215
static int mxt_acquire_irq(struct mxt_data *data)
{
	int error;

	enable_irq(data->irq);

	error = mxt_process_messages_until_invalid(data);
	if (error)
		return error;

	return 0;
}

1216 1217 1218 1219 1220
static int mxt_soft_reset(struct mxt_data *data)
{
	struct device *dev = &data->client->dev;
	int ret = 0;

1221 1222 1223
	dev_info(dev, "Resetting device\n");

	disable_irq(data->irq);
1224 1225 1226 1227 1228 1229 1230

	reinit_completion(&data->reset_completion);

	ret = mxt_t6_command(data, MXT_COMMAND_RESET, MXT_RESET_VALUE, false);
	if (ret)
		return ret;

1231
	/* Ignore CHG line for 100ms after reset */
1232
	msleep(MXT_RESET_INVALID_CHG);
1233

1234
	mxt_acquire_irq(data);
1235

1236 1237 1238 1239 1240 1241 1242 1243
	ret = mxt_wait_for_completion(data, &data->reset_completion,
				      MXT_RESET_TIMEOUT);
	if (ret)
		return ret;

	return 0;
}

1244 1245 1246 1247 1248 1249 1250 1251 1252 1253 1254 1255 1256 1257 1258 1259 1260 1261
static void mxt_update_crc(struct mxt_data *data, u8 cmd, u8 value)
{
	/*
	 * On failure, CRC is set to 0 and config will always be
	 * downloaded.
	 */
	data->config_crc = 0;
	reinit_completion(&data->crc_completion);

	mxt_t6_command(data, cmd, value, true);

	/*
	 * Wait for crc message. On failure, CRC is set to 0 and config will
	 * always be downloaded.
	 */
	mxt_wait_for_completion(data, &data->crc_completion, MXT_CRC_TIMEOUT);
}

1262 1263 1264 1265 1266 1267 1268 1269 1270 1271 1272 1273 1274 1275 1276 1277 1278 1279 1280 1281 1282 1283 1284 1285 1286 1287 1288 1289 1290 1291 1292 1293 1294 1295 1296 1297 1298 1299 1300
static void mxt_calc_crc24(u32 *crc, u8 firstbyte, u8 secondbyte)
{
	static const unsigned int crcpoly = 0x80001B;
	u32 result;
	u32 data_word;

	data_word = (secondbyte << 8) | firstbyte;
	result = ((*crc << 1) ^ data_word);

	if (result & 0x1000000)
		result ^= crcpoly;

	*crc = result;
}

static u32 mxt_calculate_crc(u8 *base, off_t start_off, off_t end_off)
{
	u32 crc = 0;
	u8 *ptr = base + start_off;
	u8 *last_val = base + end_off - 1;

	if (end_off < start_off)
		return -EINVAL;

	while (ptr < last_val) {
		mxt_calc_crc24(&crc, *ptr, *(ptr + 1));
		ptr += 2;
	}

	/* if len is odd, fill the last byte with 0 */
	if (ptr == last_val)
		mxt_calc_crc24(&crc, *ptr, 0);

	/* Mask to 24-bit */
	crc &= 0x00FFFFFF;

	return crc;
}

1301
static int mxt_prepare_cfg_mem(struct mxt_data *data, struct mxt_cfg *cfg)
1302 1303 1304 1305 1306 1307 1308 1309 1310 1311
{
	struct device *dev = &data->client->dev;
	struct mxt_object *object;
	unsigned int type, instance, size, byte_offset;
	int offset;
	int ret;
	int i;
	u16 reg;
	u8 val;

1312
	while (cfg->raw_pos < cfg->raw_size) {
1313
		/* Read type, instance, length */
1314
		ret = sscanf(cfg->raw + cfg->raw_pos, "%x %x %x%n",
1315 1316 1317 1318 1319 1320 1321 1322
			     &type, &instance, &size, &offset);
		if (ret == 0) {
			/* EOF */
			break;
		} else if (ret != 3) {
			dev_err(dev, "Bad format: failed to parse object\n");
			return -EINVAL;
		}
1323
		cfg->raw_pos += offset;
1324 1325 1326 1327 1328

		object = mxt_get_object(data, type);
		if (!object) {
			/* Skip object */
			for (i = 0; i < size; i++) {
1329
				ret = sscanf(cfg->raw + cfg->raw_pos, "%hhx%n",
1330 1331 1332 1333 1334 1335
					     &val, &offset);
				if (ret != 1) {
					dev_err(dev, "Bad format in T%d at %d\n",
						type, i);
					return -EINVAL;
				}
1336
				cfg->raw_pos += offset;
1337 1338 1339 1340 1341 1342 1343 1344 1345 1346 1347 1348 1349 1350 1351 1352 1353 1354 1355 1356 1357 1358 1359 1360 1361 1362 1363 1364 1365 1366 1367 1368 1369 1370
			}
			continue;
		}

		if (size > mxt_obj_size(object)) {
			/*
			 * Either we are in fallback mode due to wrong
			 * config or config from a later fw version,
			 * or the file is corrupt or hand-edited.
			 */
			dev_warn(dev, "Discarding %zu byte(s) in T%u\n",
				 size - mxt_obj_size(object), type);
		} else if (mxt_obj_size(object) > size) {
			/*
			 * If firmware is upgraded, new bytes may be added to
			 * end of objects. It is generally forward compatible
			 * to zero these bytes - previous behaviour will be
			 * retained. However this does invalidate the CRC and
			 * will force fallback mode until the configuration is
			 * updated. We warn here but do nothing else - the
			 * malloc has zeroed the entire configuration.
			 */
			dev_warn(dev, "Zeroing %zu byte(s) in T%d\n",
				 mxt_obj_size(object) - size, type);
		}

		if (instance >= mxt_obj_instances(object)) {
			dev_err(dev, "Object instances exceeded!\n");
			return -EINVAL;
		}

		reg = object->start_address + mxt_obj_size(object) * instance;

		for (i = 0; i < size; i++) {
1371
			ret = sscanf(cfg->raw + cfg->raw_pos, "%hhx%n",
1372 1373 1374
				     &val,
				     &offset);
			if (ret != 1) {
1375 1376
				dev_err(dev, "Bad format in T%d at %d\n",
					type, i);
1377 1378
				return -EINVAL;
			}
1379
			cfg->raw_pos += offset;
1380 1381 1382 1383

			if (i > mxt_obj_size(object))
				continue;

1384
			byte_offset = reg + i - cfg->start_ofs;
1385

1386 1387
			if (byte_offset >= 0 && byte_offset < cfg->mem_size) {
				*(cfg->mem + byte_offset) = val;
1388 1389 1390 1391 1392 1393 1394 1395 1396 1397 1398
			} else {
				dev_err(dev, "Bad object: reg:%d, T%d, ofs=%d\n",
					reg, object->type, byte_offset);
				return -EINVAL;
			}
		}
	}

	return 0;
}

1399
static int mxt_upload_cfg_mem(struct mxt_data *data, struct mxt_cfg *cfg)
1400 1401 1402 1403 1404
{
	unsigned int byte_offset = 0;
	int error;

	/* Write configuration as blocks */
1405 1406
	while (byte_offset < cfg->mem_size) {
		unsigned int size = cfg->mem_size - byte_offset;
1407 1408 1409 1410 1411

		if (size > MXT_MAX_BLOCK_WRITE)
			size = MXT_MAX_BLOCK_WRITE;

		error = __mxt_write_reg(data->client,
1412 1413
					cfg->start_ofs + byte_offset,
					size, cfg->mem + byte_offset);
1414 1415 1416 1417 1418 1419 1420 1421 1422 1423 1424 1425
		if (error) {
			dev_err(&data->client->dev,
				"Config write error, ret=%d\n", error);
			return error;
		}

		byte_offset += size;
	}

	return 0;
}

1426 1427
static int mxt_init_t7_power_cfg(struct mxt_data *data);

1428 1429 1430 1431 1432 1433 1434 1435 1436 1437 1438 1439 1440 1441 1442 1443 1444 1445 1446
/*
 * mxt_update_cfg - download configuration to chip
 *
 * Atmel Raw Config File Format
 *
 * The first four lines of the raw config file contain:
 *  1) Version
 *  2) Chip ID Information (first 7 bytes of device memory)
 *  3) Chip Information Block 24-bit CRC Checksum
 *  4) Chip Configuration 24-bit CRC Checksum
 *
 * The rest of the file consists of one line per object instance:
 *   <TYPE> <INSTANCE> <SIZE> <CONTENTS>
 *
 *   <TYPE> - 2-byte object type as hex
 *   <INSTANCE> - 2-byte object instance number as hex
 *   <SIZE> - 2-byte object size as hex
 *   <CONTENTS> - array of <SIZE> 1-byte hex values
 */
1447
static int mxt_update_cfg(struct mxt_data *data, const struct firmware *fw)
1448 1449
{
	struct device *dev = &data->client->dev;
1450
	struct mxt_cfg cfg;
1451
	int ret;
1452 1453
	int offset;
	int i;
1454
	u32 info_crc, config_crc, calculated_crc;
1455
	u16 crc_start = 0;
1456

1457 1458 1459 1460 1461
	/* Make zero terminated copy of the OBP_RAW file */
	cfg.raw = kmemdup_nul(fw->data, fw->size, GFP_KERNEL);
	if (!cfg.raw)
		return -ENOMEM;

1462 1463
	cfg.raw_size = fw->size;

1464 1465
	mxt_update_crc(data, MXT_COMMAND_REPORTALL, 1);

1466
	if (strncmp(cfg.raw, MXT_CFG_MAGIC, strlen(MXT_CFG_MAGIC))) {
1467
		dev_err(dev, "Unrecognised config file\n");
1468 1469
		ret = -EINVAL;
		goto release_raw;
1470 1471
	}

1472
	cfg.raw_pos = strlen(MXT_CFG_MAGIC);
1473 1474 1475

	/* Load information block and check */
	for (i = 0; i < sizeof(struct mxt_info); i++) {
1476 1477
		ret = sscanf(cfg.raw + cfg.raw_pos, "%hhx%n",
			     (unsigned char *)&cfg.info + i,
1478 1479 1480
			     &offset);
		if (ret != 1) {
			dev_err(dev, "Bad format\n");
1481 1482
			ret = -EINVAL;
			goto release_raw;
1483
		}
1484

1485
		cfg.raw_pos += offset;
1486 1487
	}

1488
	if (cfg.info.family_id != data->info->family_id) {
1489
		dev_err(dev, "Family ID mismatch!\n");
1490 1491
		ret = -EINVAL;
		goto release_raw;
1492
	}
1493

1494
	if (cfg.info.variant_id != data->info->variant_id) {
1495
		dev_err(dev, "Variant ID mismatch!\n");
1496 1497
		ret = -EINVAL;
		goto release_raw;
1498
	}
1499

1500
	/* Read CRCs */
1501
	ret = sscanf(cfg.raw + cfg.raw_pos, "%x%n", &info_crc, &offset);
1502 1503
	if (ret != 1) {
		dev_err(dev, "Bad format: failed to parse Info CRC\n");
1504 1505
		ret = -EINVAL;
		goto release_raw;
1506
	}
1507
	cfg.raw_pos += offset;
1508

1509
	ret = sscanf(cfg.raw + cfg.raw_pos, "%x%n", &config_crc, &offset);
1510 1511
	if (ret != 1) {
		dev_err(dev, "Bad format: failed to parse Config CRC\n");
1512 1513
		ret = -EINVAL;
		goto release_raw;
1514
	}
1515
	cfg.raw_pos += offset;
1516

1517 1518 1519 1520 1521 1522 1523 1524 1525 1526 1527 1528
	/*
	 * The Info Block CRC is calculated over mxt_info and the object
	 * table. If it does not match then we are trying to load the
	 * configuration from a different chip or firmware version, so
	 * the configuration CRC is invalid anyway.
	 */
	if (info_crc == data->info_crc) {
		if (config_crc == 0 || data->config_crc == 0) {
			dev_info(dev, "CRC zero, attempting to apply config\n");
		} else if (config_crc == data->config_crc) {
			dev_dbg(dev, "Config CRC 0x%06X: OK\n",
				 data->config_crc);
1529
			return 0;
1530 1531 1532 1533 1534 1535 1536 1537
		} else {
			dev_info(dev, "Config CRC 0x%06X: does not match file 0x%06X\n",
				 data->config_crc, config_crc);
		}
	} else {
		dev_warn(dev,
			 "Warning: Info CRC error - device=0x%06X file=0x%06X\n",
			 data->info_crc, info_crc);
1538 1539
	}

1540
	/* Malloc memory to store configuration */
1541
	cfg.start_ofs = MXT_OBJECT_START +
1542
			data->info->object_num * sizeof(struct mxt_object) +
1543
			MXT_INFO_CHECKSUM_SIZE;
1544 1545
	cfg.mem_size = data->mem_size - cfg.start_ofs;
	cfg.mem = kzalloc(cfg.mem_size, GFP_KERNEL);
1546 1547 1548 1549
	if (!cfg.mem) {
		ret = -ENOMEM;
		goto release_raw;
	}
1550

1551
	ret = mxt_prepare_cfg_mem(data, &cfg);
1552 1553
	if (ret)
		goto release_mem;
1554

1555
	/* Calculate crc of the received configs (not the raw config file) */
1556 1557 1558 1559 1560 1561 1562
	if (data->T71_address)
		crc_start = data->T71_address;
	else if (data->T7_address)
		crc_start = data->T7_address;
	else
		dev_warn(dev, "Could not find CRC start\n");

1563 1564 1565 1566
	if (crc_start > cfg.start_ofs) {
		calculated_crc = mxt_calculate_crc(cfg.mem,
						   crc_start - cfg.start_ofs,
						   cfg.mem_size);
1567 1568 1569 1570

		if (config_crc > 0 && config_crc != calculated_crc)
			dev_warn(dev, "Config CRC in file inconsistent, calculated=%06X, file=%06X\n",
				 calculated_crc, config_crc);
1571
	}
1572

1573
	ret = mxt_upload_cfg_mem(data, &cfg);
1574 1575
	if (ret)
		goto release_mem;
1576

1577 1578 1579 1580
	mxt_update_crc(data, MXT_COMMAND_BACKUPNV, MXT_BACKUP_VALUE);

	ret = mxt_soft_reset(data);
	if (ret)
1581
		goto release_mem;
1582 1583 1584

	dev_info(dev, "Config successfully updated\n");

1585 1586 1587
	/* T7 config may have changed */
	mxt_init_t7_power_cfg(data);

1588 1589
release_raw:
	kfree(cfg.raw);
1590
release_mem:
1591
	kfree(cfg.mem);
1592
	return ret;
1593 1594
}

1595
static void mxt_free_input_device(struct mxt_data *data)
1596
{
1597 1598 1599 1600 1601
	if (data->input_dev) {
		input_unregister_device(data->input_dev);
		data->input_dev = NULL;
	}
}
1602

1603 1604
static void mxt_free_object_table(struct mxt_data *data)
{
1605 1606 1607 1608
#ifdef CONFIG_TOUCHSCREEN_ATMEL_MXT_T37
	video_unregister_device(&data->dbg.vdev);
	v4l2_device_unregister(&data->dbg.v4l2);
#endif
1609
	data->object_table = NULL;
1610 1611 1612
	data->info = NULL;
	kfree(data->raw_info_block);
	data->raw_info_block = NULL;
1613 1614
	kfree(data->msg_buf);
	data->msg_buf = NULL;
1615
	data->T5_address = 0;
1616 1617 1618
	data->T5_msg_size = 0;
	data->T6_reportid = 0;
	data->T7_address = 0;
1619
	data->T71_address = 0;
1620 1621 1622
	data->T9_reportid_min = 0;
	data->T9_reportid_max = 0;
	data->T19_reportid = 0;
1623
	data->T44_address = 0;
1624 1625
	data->T100_reportid_min = 0;
	data->T100_reportid_max = 0;
1626
	data->max_reportid = 0;
1627 1628
}

1629 1630
static int mxt_parse_object_table(struct mxt_data *data,
				  struct mxt_object *object_table)
1631
{
1632
	struct i2c_client *client = data->client;
1633
	int i;
1634
	u8 reportid;
1635
	u16 end_address;
1636 1637 1638

	/* Valid Report IDs start counting from 1 */
	reportid = 1;
1639
	data->mem_size = 0;
1640
	for (i = 0; i < data->info->object_num; i++) {
1641
		struct mxt_object *object = object_table + i;
1642
		u8 min_id, max_id;
1643

1644
		le16_to_cpus(&object->start_address);
1645 1646

		if (object->num_report_ids) {
1647
			min_id = reportid;
1648
			reportid += object->num_report_ids *
1649
					mxt_obj_instances(object);
1650 1651 1652 1653 1654 1655 1656
			max_id = reportid - 1;
		} else {
			min_id = 0;
			max_id = 0;
		}

		dev_dbg(&data->client->dev,
1657
			"T%u Start:%u Size:%zu Instances:%zu Report IDs:%u-%u\n",
1658 1659 1660
			object->type, object->start_address,
			mxt_obj_size(object), mxt_obj_instances(object),
			min_id, max_id);
1661 1662

		switch (object->type) {
1663
		case MXT_GEN_MESSAGE_T5:
1664 1665
			if (data->info->family_id == 0x80 &&
			    data->info->version < 0x20) {
1666
				/*
1667 1668 1669
				 * On mXT224 firmware versions prior to V2.0
				 * read and discard unused CRC byte otherwise
				 * DMA reads are misaligned.
1670 1671 1672 1673 1674 1675
				 */
				data->T5_msg_size = mxt_obj_size(object);
			} else {
				/* CRC not enabled, so skip last byte */
				data->T5_msg_size = mxt_obj_size(object) - 1;
			}
1676
			data->T5_address = object->start_address;
1677
			break;
1678 1679
		case MXT_GEN_COMMAND_T6:
			data->T6_reportid = min_id;
1680
			data->T6_address = object->start_address;
1681
			break;
1682 1683 1684
		case MXT_GEN_POWER_T7:
			data->T7_address = object->start_address;
			break;
1685 1686 1687
		case MXT_SPT_DYNAMICCONFIGURATIONCONTAINER_T71:
			data->T71_address = object->start_address;
			break;
1688
		case MXT_TOUCH_MULTI_T9:
1689
			data->multitouch = MXT_TOUCH_MULTI_T9;
1690
			/* Only handle messages from first T9 instance */
1691
			data->T9_reportid_min = min_id;
1692 1693 1694
			data->T9_reportid_max = min_id +
						object->num_report_ids - 1;
			data->num_touchids = object->num_report_ids;
1695 1696 1697
			break;
		case MXT_SPT_MESSAGECOUNT_T44:
			data->T44_address = object->start_address;
1698
			break;
1699 1700 1701
		case MXT_SPT_GPIOPWM_T19:
			data->T19_reportid = min_id;
			break;
1702 1703 1704 1705 1706 1707 1708
		case MXT_TOUCH_MULTITOUCHSCREEN_T100:
			data->multitouch = MXT_TOUCH_MULTITOUCHSCREEN_T100;
			data->T100_reportid_min = min_id;
			data->T100_reportid_max = max_id;
			/* first two report IDs reserved */
			data->num_touchids = object->num_report_ids - 2;
			break;
1709
		}
1710 1711 1712 1713 1714 1715

		end_address = object->start_address
			+ mxt_obj_size(object) * mxt_obj_instances(object) - 1;

		if (end_address >= data->mem_size)
			data->mem_size = end_address + 1;
1716 1717
	}

1718 1719 1720 1721 1722 1723
	/* Store maximum reportid */
	data->max_reportid = reportid;

	/* If T44 exists, T5 position has to be directly after */
	if (data->T44_address && (data->T5_address != data->T44_address + 1)) {
		dev_err(&client->dev, "Invalid T44 position\n");
1724
		return -EINVAL;
1725 1726 1727 1728
	}

	data->msg_buf = kcalloc(data->max_reportid,
				data->T5_msg_size, GFP_KERNEL);
1729 1730 1731 1732 1733 1734 1735 1736 1737 1738 1739 1740 1741 1742 1743 1744 1745 1746 1747 1748 1749 1750 1751 1752 1753 1754 1755 1756 1757 1758 1759 1760 1761 1762 1763 1764 1765
	if (!data->msg_buf)
		return -ENOMEM;

	return 0;
}

static int mxt_read_info_block(struct mxt_data *data)
{
	struct i2c_client *client = data->client;
	int error;
	size_t size;
	void *id_buf, *buf;
	uint8_t num_objects;
	u32 calculated_crc;
	u8 *crc_ptr;

	/* If info block already allocated, free it */
	if (data->raw_info_block)
		mxt_free_object_table(data);

	/* Read 7-byte ID information block starting at address 0 */
	size = sizeof(struct mxt_info);
	id_buf = kzalloc(size, GFP_KERNEL);
	if (!id_buf)
		return -ENOMEM;

	error = __mxt_read_reg(client, 0, size, id_buf);
	if (error)
		goto err_free_mem;

	/* Resize buffer to give space for rest of info block */
	num_objects = ((struct mxt_info *)id_buf)->object_num;
	size += (num_objects * sizeof(struct mxt_object))
		+ MXT_INFO_CHECKSUM_SIZE;

	buf = krealloc(id_buf, size, GFP_KERNEL);
	if (!buf) {
1766
		error = -ENOMEM;
1767 1768 1769 1770 1771 1772 1773 1774 1775 1776 1777 1778 1779 1780 1781 1782 1783 1784 1785 1786 1787 1788 1789 1790 1791 1792 1793 1794 1795 1796 1797 1798 1799 1800 1801 1802 1803 1804 1805 1806 1807 1808 1809 1810 1811
		goto err_free_mem;
	}
	id_buf = buf;

	/* Read rest of info block */
	error = __mxt_read_reg(client, MXT_OBJECT_START,
			       size - MXT_OBJECT_START,
			       id_buf + MXT_OBJECT_START);
	if (error)
		goto err_free_mem;

	/* Extract & calculate checksum */
	crc_ptr = id_buf + size - MXT_INFO_CHECKSUM_SIZE;
	data->info_crc = crc_ptr[0] | (crc_ptr[1] << 8) | (crc_ptr[2] << 16);

	calculated_crc = mxt_calculate_crc(id_buf, 0,
					   size - MXT_INFO_CHECKSUM_SIZE);

	/*
	 * CRC mismatch can be caused by data corruption due to I2C comms
	 * issue or else device is not using Object Based Protocol (eg i2c-hid)
	 */
	if ((data->info_crc == 0) || (data->info_crc != calculated_crc)) {
		dev_err(&client->dev,
			"Info Block CRC error calculated=0x%06X read=0x%06X\n",
			calculated_crc, data->info_crc);
		error = -EIO;
		goto err_free_mem;
	}

	data->raw_info_block = id_buf;
	data->info = (struct mxt_info *)id_buf;

	dev_info(&client->dev,
		 "Family: %u Variant: %u Firmware V%u.%u.%02X Objects: %u\n",
		 data->info->family_id, data->info->variant_id,
		 data->info->version >> 4, data->info->version & 0xf,
		 data->info->build, data->info->object_num);

	/* Parse object table information */
	error = mxt_parse_object_table(data, id_buf + MXT_OBJECT_START);
	if (error) {
		dev_err(&client->dev, "Error %d parsing object table\n", error);
		mxt_free_object_table(data);
		goto err_free_mem;
1812 1813
	}

1814
	data->object_table = (struct mxt_object *)(id_buf + MXT_OBJECT_START);
1815

1816 1817
	return 0;

1818 1819
err_free_mem:
	kfree(id_buf);
1820
	return error;
1821 1822
}

1823 1824 1825 1826 1827 1828 1829 1830 1831 1832 1833 1834
static int mxt_read_t9_resolution(struct mxt_data *data)
{
	struct i2c_client *client = data->client;
	int error;
	struct t9_range range;
	unsigned char orient;
	struct mxt_object *object;

	object = mxt_get_object(data, MXT_TOUCH_MULTI_T9);
	if (!object)
		return -EINVAL;

1835 1836 1837 1838 1839 1840 1841 1842 1843 1844 1845 1846
	error = __mxt_read_reg(client,
			       object->start_address + MXT_T9_XSIZE,
			       sizeof(data->xsize), &data->xsize);
	if (error)
		return error;

	error = __mxt_read_reg(client,
			       object->start_address + MXT_T9_YSIZE,
			       sizeof(data->ysize), &data->ysize);
	if (error)
		return error;

1847 1848 1849 1850 1851 1852
	error = __mxt_read_reg(client,
			       object->start_address + MXT_T9_RANGE,
			       sizeof(range), &range);
	if (error)
		return error;

1853 1854
	data->max_x = get_unaligned_le16(&range.x);
	data->max_y = get_unaligned_le16(&range.y);
1855 1856 1857 1858 1859 1860 1861

	error =  __mxt_read_reg(client,
				object->start_address + MXT_T9_ORIENT,
				1, &orient);
	if (error)
		return error;

1862
	data->xy_switch = orient & MXT_T9_ORIENT_SWITCH;
1863 1864
	data->invertx = orient & MXT_T9_ORIENT_INVERTX;
	data->inverty = orient & MXT_T9_ORIENT_INVERTY;
1865 1866 1867 1868

	return 0;
}

1869 1870 1871 1872 1873 1874 1875 1876 1877 1878 1879 1880 1881
static int mxt_read_t100_config(struct mxt_data *data)
{
	struct i2c_client *client = data->client;
	int error;
	struct mxt_object *object;
	u16 range_x, range_y;
	u8 cfg, tchaux;
	u8 aux;

	object = mxt_get_object(data, MXT_TOUCH_MULTITOUCHSCREEN_T100);
	if (!object)
		return -EINVAL;

1882
	/* read touchscreen dimensions */
1883 1884 1885 1886 1887 1888
	error = __mxt_read_reg(client,
			       object->start_address + MXT_T100_XRANGE,
			       sizeof(range_x), &range_x);
	if (error)
		return error;

1889
	data->max_x = get_unaligned_le16(&range_x);
1890 1891 1892 1893 1894 1895 1896

	error = __mxt_read_reg(client,
			       object->start_address + MXT_T100_YRANGE,
			       sizeof(range_y), &range_y);
	if (error)
		return error;

1897
	data->max_y = get_unaligned_le16(&range_y);
1898

1899 1900 1901 1902 1903 1904 1905 1906 1907 1908 1909 1910
	error = __mxt_read_reg(client,
			       object->start_address + MXT_T100_XSIZE,
			       sizeof(data->xsize), &data->xsize);
	if (error)
		return error;

	error = __mxt_read_reg(client,
			       object->start_address + MXT_T100_YSIZE,
			       sizeof(data->ysize), &data->ysize);
	if (error)
		return error;

1911
	/* read orientation config */
1912 1913 1914 1915 1916 1917
	error =  __mxt_read_reg(client,
				object->start_address + MXT_T100_CFG1,
				1, &cfg);
	if (error)
		return error;

1918
	data->xy_switch = cfg & MXT_T100_CFG_SWITCHXY;
1919 1920
	data->invertx = cfg & MXT_T100_CFG_INVERTX;
	data->inverty = cfg & MXT_T100_CFG_INVERTY;
1921 1922

	/* allocate aux bytes */
1923 1924 1925 1926 1927 1928 1929 1930 1931 1932 1933 1934 1935 1936 1937 1938 1939 1940 1941 1942 1943 1944 1945 1946
	error =  __mxt_read_reg(client,
				object->start_address + MXT_T100_TCHAUX,
				1, &tchaux);
	if (error)
		return error;

	aux = 6;

	if (tchaux & MXT_T100_TCHAUX_VECT)
		data->t100_aux_vect = aux++;

	if (tchaux & MXT_T100_TCHAUX_AMPL)
		data->t100_aux_ampl = aux++;

	if (tchaux & MXT_T100_TCHAUX_AREA)
		data->t100_aux_area = aux++;

	dev_dbg(&client->dev,
		"T100 aux mappings vect:%u ampl:%u area:%u\n",
		data->t100_aux_vect, data->t100_aux_ampl, data->t100_aux_area);

	return 0;
}

1947 1948 1949
static int mxt_input_open(struct input_dev *dev);
static void mxt_input_close(struct input_dev *dev);

1950 1951 1952 1953 1954 1955 1956 1957 1958 1959 1960 1961 1962 1963 1964 1965
static void mxt_set_up_as_touchpad(struct input_dev *input_dev,
				   struct mxt_data *data)
{
	int i;

	input_dev->name = "Atmel maXTouch Touchpad";

	__set_bit(INPUT_PROP_BUTTONPAD, input_dev->propbit);

	input_abs_set_res(input_dev, ABS_X, MXT_PIXELS_PER_MM);
	input_abs_set_res(input_dev, ABS_Y, MXT_PIXELS_PER_MM);
	input_abs_set_res(input_dev, ABS_MT_POSITION_X,
			  MXT_PIXELS_PER_MM);
	input_abs_set_res(input_dev, ABS_MT_POSITION_Y,
			  MXT_PIXELS_PER_MM);

1966 1967
	for (i = 0; i < data->t19_num_keys; i++)
		if (data->t19_keymap[i] != KEY_RESERVED)
1968
			input_set_capability(input_dev, EV_KEY,
1969
					     data->t19_keymap[i]);
1970 1971
}

1972
static int mxt_initialize_input_device(struct mxt_data *data)
1973
{
1974
	struct device *dev = &data->client->dev;
1975 1976 1977 1978 1979
	struct input_dev *input_dev;
	int error;
	unsigned int num_mt_slots;
	unsigned int mt_flags = 0;

1980 1981 1982 1983 1984 1985 1986 1987 1988 1989 1990 1991 1992 1993 1994 1995 1996 1997 1998
	switch (data->multitouch) {
	case MXT_TOUCH_MULTI_T9:
		num_mt_slots = data->T9_reportid_max - data->T9_reportid_min + 1;
		error = mxt_read_t9_resolution(data);
		if (error)
			dev_warn(dev, "Failed to initialize T9 resolution\n");
		break;

	case MXT_TOUCH_MULTITOUCHSCREEN_T100:
		num_mt_slots = data->num_touchids;
		error = mxt_read_t100_config(data);
		if (error)
			dev_warn(dev, "Failed to read T100 config\n");
		break;

	default:
		dev_err(dev, "Invalid multitouch object\n");
		return -EINVAL;
	}
1999

2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012
	/* Handle default values and orientation switch */
	if (data->max_x == 0)
		data->max_x = 1023;

	if (data->max_y == 0)
		data->max_y = 1023;

	if (data->xy_switch)
		swap(data->max_x, data->max_y);

	dev_info(dev, "Touchscreen size X%uY%u\n", data->max_x, data->max_y);

	/* Register input device */
2013
	input_dev = input_allocate_device();
2014
	if (!input_dev)
2015 2016 2017 2018 2019 2020 2021 2022 2023
		return -ENOMEM;

	input_dev->name = "Atmel maXTouch Touchscreen";
	input_dev->phys = data->phys;
	input_dev->id.bustype = BUS_I2C;
	input_dev->dev.parent = dev;
	input_dev->open = mxt_input_open;
	input_dev->close = mxt_input_close;

2024
	input_set_capability(input_dev, EV_KEY, BTN_TOUCH);
2025 2026

	/* For single touch */
2027 2028 2029 2030 2031 2032 2033 2034
	input_set_abs_params(input_dev, ABS_X, 0, data->max_x, 0, 0);
	input_set_abs_params(input_dev, ABS_Y, 0, data->max_y, 0, 0);

	if (data->multitouch == MXT_TOUCH_MULTI_T9 ||
	    (data->multitouch == MXT_TOUCH_MULTITOUCHSCREEN_T100 &&
	     data->t100_aux_ampl)) {
		input_set_abs_params(input_dev, ABS_PRESSURE, 0, 255, 0, 0);
	}
2035

2036
	/* If device has buttons we assume it is a touchpad */
2037
	if (data->t19_num_keys) {
2038 2039
		mxt_set_up_as_touchpad(input_dev, data);
		mt_flags |= INPUT_MT_POINTER;
2040 2041
	} else {
		mt_flags |= INPUT_MT_DIRECT;
2042 2043
	}

2044 2045 2046 2047 2048 2049 2050
	/* For multi touch */
	error = input_mt_init_slots(input_dev, num_mt_slots, mt_flags);
	if (error) {
		dev_err(dev, "Error %d initialising slots\n", error);
		goto err_free_mem;
	}

2051 2052 2053 2054 2055 2056 2057 2058 2059
	if (data->multitouch == MXT_TOUCH_MULTITOUCHSCREEN_T100) {
		input_set_abs_params(input_dev, ABS_MT_TOOL_TYPE,
				     0, MT_TOOL_MAX, 0, 0);
		input_set_abs_params(input_dev, ABS_MT_DISTANCE,
				     MXT_DISTANCE_ACTIVE_TOUCH,
				     MXT_DISTANCE_HOVERING,
				     0, 0);
	}

2060 2061 2062 2063
	input_set_abs_params(input_dev, ABS_MT_POSITION_X,
			     0, data->max_x, 0, 0);
	input_set_abs_params(input_dev, ABS_MT_POSITION_Y,
			     0, data->max_y, 0, 0);
2064 2065 2066 2067 2068 2069 2070 2071 2072 2073 2074 2075 2076 2077 2078 2079 2080 2081 2082 2083 2084 2085 2086 2087 2088 2089

	if (data->multitouch == MXT_TOUCH_MULTI_T9 ||
	    (data->multitouch == MXT_TOUCH_MULTITOUCHSCREEN_T100 &&
	     data->t100_aux_area)) {
		input_set_abs_params(input_dev, ABS_MT_TOUCH_MAJOR,
				     0, MXT_MAX_AREA, 0, 0);
	}

	if (data->multitouch == MXT_TOUCH_MULTI_T9 ||
	    (data->multitouch == MXT_TOUCH_MULTITOUCHSCREEN_T100 &&
	     data->t100_aux_ampl)) {
		input_set_abs_params(input_dev, ABS_MT_PRESSURE,
				     0, 255, 0, 0);
	}

	if (data->multitouch == MXT_TOUCH_MULTITOUCHSCREEN_T100 &&
	    data->t100_aux_vect) {
		input_set_abs_params(input_dev, ABS_MT_ORIENTATION,
				     0, 255, 0, 0);
	}

	if (data->multitouch == MXT_TOUCH_MULTITOUCHSCREEN_T100 &&
	    data->t100_aux_vect) {
		input_set_abs_params(input_dev, ABS_MT_ORIENTATION,
				     0, 255, 0, 0);
	}
2090 2091 2092 2093 2094 2095 2096 2097 2098 2099 2100 2101 2102 2103 2104 2105 2106 2107

	input_set_drvdata(input_dev, data);

	error = input_register_device(input_dev);
	if (error) {
		dev_err(dev, "Error %d registering input device\n", error);
		goto err_free_mem;
	}

	data->input_dev = input_dev;

	return 0;

err_free_mem:
	input_free_device(input_dev);
	return error;
}

2108 2109 2110 2111 2112 2113
static int mxt_configure_objects(struct mxt_data *data,
				 const struct firmware *cfg);

static void mxt_config_cb(const struct firmware *cfg, void *ctx)
{
	mxt_configure_objects(ctx, cfg);
2114
	release_firmware(cfg);
2115 2116
}

2117
static int mxt_initialize(struct mxt_data *data)
2118 2119
{
	struct i2c_client *client = data->client;
2120
	int recovery_attempts = 0;
2121 2122
	int error;

2123
	while (1) {
2124
		error = mxt_read_info_block(data);
2125 2126 2127 2128 2129
		if (!error)
			break;

		/* Check bootloader state */
		error = mxt_probe_bootloader(data, false);
2130
		if (error) {
2131 2132 2133
			dev_info(&client->dev, "Trying alternate bootloader address\n");
			error = mxt_probe_bootloader(data, true);
			if (error) {
2134 2135 2136
				/* Chip is not in appmode or bootloader mode */
				return error;
			}
2137
		}
2138

2139 2140 2141 2142 2143 2144 2145 2146 2147
		/* OK, we are in bootloader, see if we can recover */
		if (++recovery_attempts > 1) {
			dev_err(&client->dev, "Could not recover from bootloader mode\n");
			/*
			 * We can reflash from this state, so do not
			 * abort initialization.
			 */
			data->in_bootloader = true;
			return 0;
2148
		}
2149 2150 2151 2152

		/* Attempt to exit bootloader into app mode */
		mxt_send_bootloader_cmd(data, false);
		msleep(MXT_FW_RESET_TIME);
2153
	}
2154

2155
	error = mxt_acquire_irq(data);
2156
	if (error)
2157
		return error;
2158

2159 2160 2161 2162 2163 2164
	error = request_firmware_nowait(THIS_MODULE, true, MXT_CFG_NAME,
					&client->dev, GFP_KERNEL, data,
					mxt_config_cb);
	if (error) {
		dev_err(&client->dev, "Failed to invoke firmware loader: %d\n",
			error);
2165
		return error;
2166
	}
2167 2168 2169 2170

	return 0;
}

2171 2172 2173 2174 2175 2176 2177 2178 2179 2180 2181 2182 2183 2184 2185 2186 2187 2188 2189 2190 2191 2192 2193 2194 2195 2196 2197 2198 2199 2200 2201 2202 2203 2204 2205 2206 2207 2208 2209 2210 2211 2212 2213 2214 2215 2216 2217 2218 2219 2220 2221 2222 2223 2224
static int mxt_set_t7_power_cfg(struct mxt_data *data, u8 sleep)
{
	struct device *dev = &data->client->dev;
	int error;
	struct t7_config *new_config;
	struct t7_config deepsleep = { .active = 0, .idle = 0 };

	if (sleep == MXT_POWER_CFG_DEEPSLEEP)
		new_config = &deepsleep;
	else
		new_config = &data->t7_cfg;

	error = __mxt_write_reg(data->client, data->T7_address,
				sizeof(data->t7_cfg), new_config);
	if (error)
		return error;

	dev_dbg(dev, "Set T7 ACTV:%d IDLE:%d\n",
		new_config->active, new_config->idle);

	return 0;
}

static int mxt_init_t7_power_cfg(struct mxt_data *data)
{
	struct device *dev = &data->client->dev;
	int error;
	bool retry = false;

recheck:
	error = __mxt_read_reg(data->client, data->T7_address,
				sizeof(data->t7_cfg), &data->t7_cfg);
	if (error)
		return error;

	if (data->t7_cfg.active == 0 || data->t7_cfg.idle == 0) {
		if (!retry) {
			dev_dbg(dev, "T7 cfg zero, resetting\n");
			mxt_soft_reset(data);
			retry = true;
			goto recheck;
		} else {
			dev_dbg(dev, "T7 cfg zero after reset, overriding\n");
			data->t7_cfg.active = 20;
			data->t7_cfg.idle = 100;
			return mxt_set_t7_power_cfg(data, MXT_POWER_CFG_RUN);
		}
	}

	dev_dbg(dev, "Initialized power cfg: ACTV %d, IDLE %d\n",
		data->t7_cfg.active, data->t7_cfg.idle);
	return 0;
}

2225 2226 2227 2228
#ifdef CONFIG_TOUCHSCREEN_ATMEL_MXT_T37
static u16 mxt_get_debug_value(struct mxt_data *data, unsigned int x,
			       unsigned int y)
{
2229
	struct mxt_info *info = data->info;
2230 2231
	struct mxt_dbg *dbg = &data->dbg;
	unsigned int ofs, page;
2232 2233 2234 2235 2236 2237 2238 2239 2240 2241
	unsigned int col = 0;
	unsigned int col_width;

	if (info->family_id == MXT_FAMILY_1386) {
		col_width = info->matrix_ysize / MXT1386_COLUMNS;
		col = y / col_width;
		y = y % col_width;
	} else {
		col_width = info->matrix_ysize;
	}
2242

2243
	ofs = (y + (x * col_width)) * sizeof(u16);
2244 2245 2246
	page = ofs / MXT_DIAGNOSTIC_SIZE;
	ofs %= MXT_DIAGNOSTIC_SIZE;

2247 2248 2249
	if (info->family_id == MXT_FAMILY_1386)
		page += col * MXT1386_PAGES_PER_COLUMN;

2250 2251 2252 2253 2254 2255 2256 2257
	return get_unaligned_le16(&dbg->t37_buf[page].data[ofs]);
}

static int mxt_convert_debug_pages(struct mxt_data *data, u16 *outbuf)
{
	struct mxt_dbg *dbg = &data->dbg;
	unsigned int x = 0;
	unsigned int y = 0;
2258
	unsigned int i, rx, ry;
2259 2260

	for (i = 0; i < dbg->t37_nodes; i++) {
2261 2262 2263 2264 2265 2266 2267
		/* Handle orientation */
		rx = data->xy_switch ? y : x;
		ry = data->xy_switch ? x : y;
		rx = data->invertx ? (data->xsize - 1 - rx) : rx;
		ry = data->inverty ? (data->ysize - 1 - ry) : ry;

		outbuf[i] = mxt_get_debug_value(data, rx, ry);
2268 2269

		/* Next value */
2270
		if (++x >= (data->xy_switch ? data->ysize : data->xsize)) {
2271 2272 2273 2274 2275 2276 2277 2278 2279 2280 2281 2282 2283 2284 2285 2286 2287 2288 2289 2290 2291 2292 2293 2294 2295 2296 2297 2298 2299 2300 2301 2302 2303 2304 2305 2306 2307 2308 2309 2310 2311 2312 2313 2314 2315 2316 2317 2318 2319 2320 2321 2322 2323 2324 2325 2326 2327 2328 2329 2330 2331 2332 2333 2334 2335 2336
			x = 0;
			y++;
		}
	}

	return 0;
}

static int mxt_read_diagnostic_debug(struct mxt_data *data, u8 mode,
				     u16 *outbuf)
{
	struct mxt_dbg *dbg = &data->dbg;
	int retries = 0;
	int page;
	int ret;
	u8 cmd = mode;
	struct t37_debug *p;
	u8 cmd_poll;

	for (page = 0; page < dbg->t37_pages; page++) {
		p = dbg->t37_buf + page;

		ret = mxt_write_reg(data->client, dbg->diag_cmd_address,
				    cmd);
		if (ret)
			return ret;

		retries = 0;
		msleep(20);
wait_cmd:
		/* Read back command byte */
		ret = __mxt_read_reg(data->client, dbg->diag_cmd_address,
				     sizeof(cmd_poll), &cmd_poll);
		if (ret)
			return ret;

		/* Field is cleared once the command has been processed */
		if (cmd_poll) {
			if (retries++ > 100)
				return -EINVAL;

			msleep(20);
			goto wait_cmd;
		}

		/* Read T37 page */
		ret = __mxt_read_reg(data->client, dbg->t37_address,
				     sizeof(struct t37_debug), p);
		if (ret)
			return ret;

		if (p->mode != mode || p->page != page) {
			dev_err(&data->client->dev, "T37 page mismatch\n");
			return -EINVAL;
		}

		dev_dbg(&data->client->dev, "%s page:%d retries:%d\n",
			__func__, page, retries);

		/* For remaining pages, write PAGEUP rather than mode */
		cmd = MXT_DIAGNOSTIC_PAGEUP;
	}

	return mxt_convert_debug_pages(data, outbuf);
}

2337 2338 2339 2340 2341 2342 2343 2344 2345 2346 2347 2348 2349 2350 2351 2352 2353 2354 2355 2356 2357
static int mxt_queue_setup(struct vb2_queue *q,
		       unsigned int *nbuffers, unsigned int *nplanes,
		       unsigned int sizes[], struct device *alloc_devs[])
{
	struct mxt_data *data = q->drv_priv;
	size_t size = data->dbg.t37_nodes * sizeof(u16);

	if (*nplanes)
		return sizes[0] < size ? -EINVAL : 0;

	*nplanes = 1;
	sizes[0] = size;

	return 0;
}

static void mxt_buffer_queue(struct vb2_buffer *vb)
{
	struct mxt_data *data = vb2_get_drv_priv(vb->vb2_queue);
	u16 *ptr;
	int ret;
2358
	u8 mode;
2359 2360 2361 2362 2363 2364 2365

	ptr = vb2_plane_vaddr(vb, 0);
	if (!ptr) {
		dev_err(&data->client->dev, "Error acquiring frame ptr\n");
		goto fault;
	}

2366 2367 2368 2369 2370 2371 2372 2373 2374 2375 2376 2377
	switch (data->dbg.input) {
	case MXT_V4L_INPUT_DELTAS:
	default:
		mode = MXT_DIAGNOSTIC_DELTAS;
		break;

	case MXT_V4L_INPUT_REFS:
		mode = MXT_DIAGNOSTIC_REFS;
		break;
	}

	ret = mxt_read_diagnostic_debug(data, mode, ptr);
2378 2379 2380 2381 2382 2383 2384 2385 2386 2387 2388 2389 2390 2391 2392 2393 2394 2395 2396 2397 2398 2399 2400 2401 2402 2403 2404 2405 2406 2407 2408 2409 2410 2411 2412 2413 2414 2415 2416 2417 2418 2419 2420 2421
	if (ret)
		goto fault;

	vb2_set_plane_payload(vb, 0, data->dbg.t37_nodes * sizeof(u16));
	vb2_buffer_done(vb, VB2_BUF_STATE_DONE);
	return;

fault:
	vb2_buffer_done(vb, VB2_BUF_STATE_ERROR);
}

/* V4L2 structures */
static const struct vb2_ops mxt_queue_ops = {
	.queue_setup		= mxt_queue_setup,
	.buf_queue		= mxt_buffer_queue,
	.wait_prepare		= vb2_ops_wait_prepare,
	.wait_finish		= vb2_ops_wait_finish,
};

static const struct vb2_queue mxt_queue = {
	.type = V4L2_BUF_TYPE_VIDEO_CAPTURE,
	.io_modes = VB2_MMAP | VB2_USERPTR | VB2_DMABUF | VB2_READ,
	.buf_struct_size = sizeof(struct mxt_vb2_buffer),
	.ops = &mxt_queue_ops,
	.mem_ops = &vb2_vmalloc_memops,
	.timestamp_flags = V4L2_BUF_FLAG_TIMESTAMP_MONOTONIC,
	.min_buffers_needed = 1,
};

static int mxt_vidioc_querycap(struct file *file, void *priv,
				 struct v4l2_capability *cap)
{
	struct mxt_data *data = video_drvdata(file);

	strlcpy(cap->driver, "atmel_mxt_ts", sizeof(cap->driver));
	strlcpy(cap->card, "atmel_mxt_ts touch", sizeof(cap->card));
	snprintf(cap->bus_info, sizeof(cap->bus_info),
		 "I2C:%s", dev_name(&data->client->dev));
	return 0;
}

static int mxt_vidioc_enum_input(struct file *file, void *priv,
				   struct v4l2_input *i)
{
2422
	if (i->index >= MXT_V4L_INPUT_MAX)
2423 2424 2425
		return -EINVAL;

	i->type = V4L2_INPUT_TYPE_TOUCH;
2426 2427 2428 2429 2430 2431 2432 2433 2434 2435 2436

	switch (i->index) {
	case MXT_V4L_INPUT_REFS:
		strlcpy(i->name, "Mutual Capacitance References",
			sizeof(i->name));
		break;
	case MXT_V4L_INPUT_DELTAS:
		strlcpy(i->name, "Mutual Capacitance Deltas", sizeof(i->name));
		break;
	}

2437 2438 2439 2440 2441 2442 2443
	return 0;
}

static int mxt_set_input(struct mxt_data *data, unsigned int i)
{
	struct v4l2_pix_format *f = &data->dbg.format;

2444
	if (i >= MXT_V4L_INPUT_MAX)
2445 2446
		return -EINVAL;

2447 2448 2449 2450 2451
	if (i == MXT_V4L_INPUT_DELTAS)
		f->pixelformat = V4L2_TCH_FMT_DELTA_TD16;
	else
		f->pixelformat = V4L2_TCH_FMT_TU16;

2452 2453
	f->width = data->xy_switch ? data->ysize : data->xsize;
	f->height = data->xy_switch ? data->xsize : data->ysize;
2454 2455 2456 2457 2458 2459 2460 2461 2462 2463 2464 2465 2466 2467 2468 2469 2470 2471 2472 2473 2474 2475 2476 2477 2478 2479 2480 2481 2482 2483 2484 2485 2486 2487 2488 2489 2490 2491 2492 2493
	f->field = V4L2_FIELD_NONE;
	f->colorspace = V4L2_COLORSPACE_RAW;
	f->bytesperline = f->width * sizeof(u16);
	f->sizeimage = f->width * f->height * sizeof(u16);

	data->dbg.input = i;

	return 0;
}

static int mxt_vidioc_s_input(struct file *file, void *priv, unsigned int i)
{
	return mxt_set_input(video_drvdata(file), i);
}

static int mxt_vidioc_g_input(struct file *file, void *priv, unsigned int *i)
{
	struct mxt_data *data = video_drvdata(file);

	*i = data->dbg.input;

	return 0;
}

static int mxt_vidioc_fmt(struct file *file, void *priv, struct v4l2_format *f)
{
	struct mxt_data *data = video_drvdata(file);

	f->type = V4L2_BUF_TYPE_VIDEO_CAPTURE;
	f->fmt.pix = data->dbg.format;

	return 0;
}

static int mxt_vidioc_enum_fmt(struct file *file, void *priv,
				 struct v4l2_fmtdesc *fmt)
{
	if (fmt->type != V4L2_BUF_TYPE_VIDEO_CAPTURE)
		return -EINVAL;

2494 2495 2496 2497 2498 2499 2500 2501 2502 2503 2504 2505 2506
	switch (fmt->index) {
	case 0:
		fmt->pixelformat = V4L2_TCH_FMT_TU16;
		break;

	case 1:
		fmt->pixelformat = V4L2_TCH_FMT_DELTA_TD16;
		break;

	default:
		return -EINVAL;
	}

2507 2508 2509 2510 2511 2512 2513 2514 2515 2516 2517 2518 2519 2520 2521 2522 2523 2524 2525 2526 2527 2528 2529 2530 2531 2532 2533 2534 2535 2536 2537 2538 2539 2540 2541 2542 2543 2544 2545 2546 2547 2548 2549 2550 2551 2552 2553 2554
	return 0;
}

static int mxt_vidioc_g_parm(struct file *file, void *fh,
			     struct v4l2_streamparm *a)
{
	if (a->type != V4L2_BUF_TYPE_VIDEO_CAPTURE)
		return -EINVAL;

	a->parm.capture.readbuffers = 1;
	a->parm.capture.timeperframe.numerator = 1;
	a->parm.capture.timeperframe.denominator = 10;
	return 0;
}

static const struct v4l2_ioctl_ops mxt_video_ioctl_ops = {
	.vidioc_querycap        = mxt_vidioc_querycap,

	.vidioc_enum_fmt_vid_cap = mxt_vidioc_enum_fmt,
	.vidioc_s_fmt_vid_cap   = mxt_vidioc_fmt,
	.vidioc_g_fmt_vid_cap   = mxt_vidioc_fmt,
	.vidioc_try_fmt_vid_cap	= mxt_vidioc_fmt,
	.vidioc_g_parm		= mxt_vidioc_g_parm,

	.vidioc_enum_input      = mxt_vidioc_enum_input,
	.vidioc_g_input         = mxt_vidioc_g_input,
	.vidioc_s_input         = mxt_vidioc_s_input,

	.vidioc_reqbufs         = vb2_ioctl_reqbufs,
	.vidioc_create_bufs     = vb2_ioctl_create_bufs,
	.vidioc_querybuf        = vb2_ioctl_querybuf,
	.vidioc_qbuf            = vb2_ioctl_qbuf,
	.vidioc_dqbuf           = vb2_ioctl_dqbuf,
	.vidioc_expbuf          = vb2_ioctl_expbuf,

	.vidioc_streamon        = vb2_ioctl_streamon,
	.vidioc_streamoff       = vb2_ioctl_streamoff,
};

static const struct video_device mxt_video_device = {
	.name = "Atmel maxTouch",
	.fops = &mxt_video_fops,
	.ioctl_ops = &mxt_video_ioctl_ops,
	.release = video_device_release_empty,
	.device_caps = V4L2_CAP_VIDEO_CAPTURE | V4L2_CAP_TOUCH |
		       V4L2_CAP_READWRITE | V4L2_CAP_STREAMING,
};

2555 2556
static void mxt_debug_init(struct mxt_data *data)
{
2557
	struct mxt_info *info = data->info;
2558 2559
	struct mxt_dbg *dbg = &data->dbg;
	struct mxt_object *object;
2560
	int error;
2561 2562 2563 2564 2565 2566 2567 2568 2569 2570 2571 2572 2573 2574 2575 2576 2577 2578 2579

	object = mxt_get_object(data, MXT_GEN_COMMAND_T6);
	if (!object)
		goto error;

	dbg->diag_cmd_address = object->start_address + MXT_COMMAND_DIAGNOSTIC;

	object = mxt_get_object(data, MXT_DEBUG_DIAGNOSTIC_T37);
	if (!object)
		goto error;

	if (mxt_obj_size(object) != sizeof(struct t37_debug)) {
		dev_warn(&data->client->dev, "Bad T37 size");
		goto error;
	}

	dbg->t37_address = object->start_address;

	/* Calculate size of data and allocate buffer */
2580
	dbg->t37_nodes = data->xsize * data->ysize;
2581 2582 2583 2584 2585

	if (info->family_id == MXT_FAMILY_1386)
		dbg->t37_pages = MXT1386_COLUMNS * MXT1386_PAGES_PER_COLUMN;
	else
		dbg->t37_pages = DIV_ROUND_UP(data->xsize *
2586
					      info->matrix_ysize *
2587 2588
					      sizeof(u16),
					      sizeof(dbg->t37_buf->data));
2589 2590 2591 2592 2593 2594

	dbg->t37_buf = devm_kmalloc_array(&data->client->dev, dbg->t37_pages,
					  sizeof(struct t37_debug), GFP_KERNEL);
	if (!dbg->t37_buf)
		goto error;

2595 2596 2597 2598 2599 2600 2601 2602 2603 2604 2605 2606 2607 2608 2609 2610 2611 2612 2613 2614 2615 2616 2617 2618 2619 2620 2621 2622 2623 2624 2625
	/* init channel to zero */
	mxt_set_input(data, 0);

	/* register video device */
	snprintf(dbg->v4l2.name, sizeof(dbg->v4l2.name), "%s", "atmel_mxt_ts");
	error = v4l2_device_register(&data->client->dev, &dbg->v4l2);
	if (error)
		goto error;

	/* initialize the queue */
	mutex_init(&dbg->lock);
	dbg->queue = mxt_queue;
	dbg->queue.drv_priv = data;
	dbg->queue.lock = &dbg->lock;
	dbg->queue.dev = &data->client->dev;

	error = vb2_queue_init(&dbg->queue);
	if (error)
		goto error_unreg_v4l2;

	dbg->vdev = mxt_video_device;
	dbg->vdev.v4l2_dev = &dbg->v4l2;
	dbg->vdev.lock = &dbg->lock;
	dbg->vdev.vfl_dir = VFL_DIR_RX;
	dbg->vdev.queue = &dbg->queue;
	video_set_drvdata(&dbg->vdev, data);

	error = video_register_device(&dbg->vdev, VFL_TYPE_TOUCH, -1);
	if (error)
		goto error_unreg_v4l2;

2626 2627
	return;

2628 2629
error_unreg_v4l2:
	v4l2_device_unregister(&dbg->v4l2);
2630 2631 2632 2633 2634 2635 2636 2637 2638
error:
	dev_warn(&data->client->dev, "Error initializing T37\n");
}
#else
static void mxt_debug_init(struct mxt_data *data)
{
}
#endif

2639 2640 2641 2642 2643 2644
static int mxt_configure_objects(struct mxt_data *data,
				 const struct firmware *cfg)
{
	struct device *dev = &data->client->dev;
	int error;

2645 2646 2647 2648 2649 2650
	error = mxt_init_t7_power_cfg(data);
	if (error) {
		dev_err(dev, "Failed to initialize power cfg\n");
		return error;
	}

2651 2652 2653 2654
	if (cfg) {
		error = mxt_update_cfg(data, cfg);
		if (error)
			dev_warn(dev, "Error %d updating config\n", error);
2655
	}
2656

2657 2658 2659 2660 2661 2662 2663
	if (data->multitouch) {
		error = mxt_initialize_input_device(data);
		if (error)
			return error;
	} else {
		dev_warn(dev, "No touch object detected\n");
	}
2664

2665 2666
	mxt_debug_init(data);

2667 2668 2669
	return 0;
}

2670 2671 2672 2673 2674
/* Firmware Version is returned as Major.Minor.Build */
static ssize_t mxt_fw_version_show(struct device *dev,
				   struct device_attribute *attr, char *buf)
{
	struct mxt_data *data = dev_get_drvdata(dev);
2675
	struct mxt_info *info = data->info;
2676 2677 2678 2679 2680 2681 2682 2683 2684
	return scnprintf(buf, PAGE_SIZE, "%u.%u.%02X\n",
			 info->version >> 4, info->version & 0xf, info->build);
}

/* Hardware Version is returned as FamilyID.VariantID */
static ssize_t mxt_hw_version_show(struct device *dev,
				   struct device_attribute *attr, char *buf)
{
	struct mxt_data *data = dev_get_drvdata(dev);
2685
	struct mxt_info *info = data->info;
2686 2687 2688 2689
	return scnprintf(buf, PAGE_SIZE, "%u.%u\n",
			 info->family_id, info->variant_id);
}

2690 2691 2692 2693 2694 2695
static ssize_t mxt_show_instance(char *buf, int count,
				 struct mxt_object *object, int instance,
				 const u8 *val)
{
	int i;

2696
	if (mxt_obj_instances(object) > 1)
2697 2698 2699
		count += scnprintf(buf + count, PAGE_SIZE - count,
				   "Instance %u\n", instance);

2700
	for (i = 0; i < mxt_obj_size(object); i++)
2701 2702 2703 2704 2705 2706 2707
		count += scnprintf(buf + count, PAGE_SIZE - count,
				"\t[%2u]: %02x (%d)\n", i, val[i], val[i]);
	count += scnprintf(buf + count, PAGE_SIZE - count, "\n");

	return count;
}

2708
static ssize_t mxt_object_show(struct device *dev,
2709 2710
				    struct device_attribute *attr, char *buf)
{
2711 2712
	struct mxt_data *data = dev_get_drvdata(dev);
	struct mxt_object *object;
2713 2714 2715
	int count = 0;
	int i, j;
	int error;
2716
	u8 *obuf;
2717

2718 2719 2720 2721
	/* Pre-allocate buffer large enough to hold max sized object. */
	obuf = kmalloc(256, GFP_KERNEL);
	if (!obuf)
		return -ENOMEM;
2722

2723
	error = 0;
2724
	for (i = 0; i < data->info->object_num; i++) {
2725 2726
		object = data->object_table + i;

2727
		if (!mxt_object_readable(object->type))
2728 2729
			continue;

2730 2731
		count += scnprintf(buf + count, PAGE_SIZE - count,
				"T%u:\n", object->type);
2732

2733 2734
		for (j = 0; j < mxt_obj_instances(object); j++) {
			u16 size = mxt_obj_size(object);
2735
			u16 addr = object->start_address + j * size;
2736

2737
			error = __mxt_read_reg(data->client, addr, size, obuf);
2738
			if (error)
2739
				goto done;
2740

2741
			count = mxt_show_instance(buf, count, object, j, obuf);
2742 2743 2744
		}
	}

2745
done:
2746 2747
	kfree(obuf);
	return error ?: count;
2748 2749
}

2750 2751 2752 2753 2754 2755 2756 2757 2758 2759 2760 2761 2762 2763 2764 2765 2766 2767 2768 2769 2770 2771 2772 2773
static int mxt_check_firmware_format(struct device *dev,
				     const struct firmware *fw)
{
	unsigned int pos = 0;
	char c;

	while (pos < fw->size) {
		c = *(fw->data + pos);

		if (c < '0' || (c > '9' && c < 'A') || c > 'F')
			return 0;

		pos++;
	}

	/*
	 * To convert file try:
	 * xxd -r -p mXTXXX__APP_VX-X-XX.enc > maxtouch.fw
	 */
	dev_err(dev, "Aborting: firmware file must be in binary format\n");

	return -EINVAL;
}

2774
static int mxt_load_fw(struct device *dev, const char *fn)
2775
{
2776
	struct mxt_data *data = dev_get_drvdata(dev);
2777 2778 2779
	const struct firmware *fw = NULL;
	unsigned int frame_size;
	unsigned int pos = 0;
2780
	unsigned int retry = 0;
2781
	unsigned int frame = 0;
2782 2783 2784 2785 2786 2787 2788 2789
	int ret;

	ret = request_firmware(&fw, fn, dev);
	if (ret) {
		dev_err(dev, "Unable to open firmware %s\n", fn);
		return ret;
	}

2790 2791 2792 2793 2794
	/* Check for incorrect enc file */
	ret = mxt_check_firmware_format(dev, fw);
	if (ret)
		goto release_firmware;

2795 2796 2797
	if (!data->in_bootloader) {
		/* Change to the bootloader mode */
		data->in_bootloader = true;
2798

2799 2800 2801 2802
		ret = mxt_t6_command(data, MXT_COMMAND_RESET,
				     MXT_BOOT_VALUE, false);
		if (ret)
			goto release_firmware;
2803

2804
		msleep(MXT_RESET_TIME);
2805 2806 2807 2808 2809

		/* Do not need to scan since we know family ID */
		ret = mxt_lookup_bootloader_address(data, 0);
		if (ret)
			goto release_firmware;
2810 2811 2812

		mxt_free_input_device(data);
		mxt_free_object_table(data);
2813 2814
	} else {
		enable_irq(data->irq);
2815
	}
2816

2817 2818
	reinit_completion(&data->bl_completion);

2819 2820 2821 2822 2823 2824 2825 2826
	ret = mxt_check_bootloader(data, MXT_WAITING_BOOTLOAD_CMD, false);
	if (ret) {
		/* Bootloader may still be unlocked from previous attempt */
		ret = mxt_check_bootloader(data, MXT_WAITING_FRAME_DATA, false);
		if (ret)
			goto disable_irq;
	} else {
		dev_info(dev, "Unlocking bootloader\n");
2827

2828
		/* Unlock bootloader */
2829
		ret = mxt_send_bootloader_cmd(data, true);
2830 2831 2832
		if (ret)
			goto disable_irq;
	}
2833 2834

	while (pos < fw->size) {
2835
		ret = mxt_check_bootloader(data, MXT_WAITING_FRAME_DATA, true);
2836
		if (ret)
2837
			goto disable_irq;
2838 2839 2840

		frame_size = ((*(fw->data + pos) << 8) | *(fw->data + pos + 1));

2841
		/* Take account of CRC bytes */
2842 2843 2844
		frame_size += 2;

		/* Write one frame to device */
2845 2846 2847
		ret = mxt_bootloader_write(data, fw->data + pos, frame_size);
		if (ret)
			goto disable_irq;
2848

2849
		ret = mxt_check_bootloader(data, MXT_FRAME_CRC_PASS, true);
2850 2851 2852 2853 2854
		if (ret) {
			retry++;

			/* Back off by 20ms per retry */
			msleep(retry * 20);
2855

2856 2857 2858 2859 2860 2861 2862
			if (retry > 20) {
				dev_err(dev, "Retry count exceeded\n");
				goto disable_irq;
			}
		} else {
			retry = 0;
			pos += frame_size;
2863
			frame++;
2864
		}
2865

2866 2867 2868
		if (frame % 50 == 0)
			dev_dbg(dev, "Sent %d frames, %d/%zd bytes\n",
				frame, pos, fw->size);
2869 2870
	}

2871
	/* Wait for flash. */
2872 2873
	ret = mxt_wait_for_completion(data, &data->bl_completion,
				      MXT_FW_RESET_TIME);
2874 2875 2876
	if (ret)
		goto disable_irq;

2877 2878
	dev_dbg(dev, "Sent %d frames, %d bytes\n", frame, pos);

2879 2880 2881 2882 2883
	/*
	 * Wait for device to reset. Some bootloader versions do not assert
	 * the CHG line after bootloading has finished, so ignore potential
	 * errors.
	 */
2884
	mxt_wait_for_completion(data, &data->bl_completion, MXT_FW_RESET_TIME);
2885

2886 2887 2888 2889
	data->in_bootloader = false;

disable_irq:
	disable_irq(data->irq);
2890
release_firmware:
2891 2892 2893 2894
	release_firmware(fw);
	return ret;
}

2895
static ssize_t mxt_update_fw_store(struct device *dev,
2896 2897 2898
					struct device_attribute *attr,
					const char *buf, size_t count)
{
2899
	struct mxt_data *data = dev_get_drvdata(dev);
2900 2901
	int error;

2902
	error = mxt_load_fw(dev, MXT_FW_NAME);
2903 2904 2905 2906
	if (error) {
		dev_err(dev, "The firmware update failed(%d)\n", error);
		count = error;
	} else {
2907 2908
		dev_info(dev, "The firmware update succeeded\n");

2909
		error = mxt_initialize(data);
2910 2911 2912
		if (error)
			return error;
	}
2913

2914 2915 2916
	return count;
}

2917 2918
static DEVICE_ATTR(fw_version, S_IRUGO, mxt_fw_version_show, NULL);
static DEVICE_ATTR(hw_version, S_IRUGO, mxt_hw_version_show, NULL);
2919 2920
static DEVICE_ATTR(object, S_IRUGO, mxt_object_show, NULL);
static DEVICE_ATTR(update_fw, S_IWUSR, NULL, mxt_update_fw_store);
2921

2922
static struct attribute *mxt_attrs[] = {
2923 2924
	&dev_attr_fw_version.attr,
	&dev_attr_hw_version.attr,
2925 2926 2927 2928 2929
	&dev_attr_object.attr,
	&dev_attr_update_fw.attr,
	NULL
};

2930 2931
static const struct attribute_group mxt_attr_group = {
	.attrs = mxt_attrs,
2932 2933
};

2934
static void mxt_start(struct mxt_data *data)
2935
{
2936
	switch (data->suspend_mode) {
2937 2938 2939 2940 2941 2942 2943 2944 2945 2946 2947 2948 2949 2950 2951 2952 2953
	case MXT_SUSPEND_T9_CTRL:
		mxt_soft_reset(data);

		/* Touch enable */
		/* 0x83 = SCANEN | RPTEN | ENABLE */
		mxt_write_object(data,
				MXT_TOUCH_MULTI_T9, MXT_T9_CTRL, 0x83);
		break;

	case MXT_SUSPEND_DEEP_SLEEP:
	default:
		mxt_set_t7_power_cfg(data, MXT_POWER_CFG_RUN);

		/* Recalibrate since chip has been in deep sleep */
		mxt_t6_command(data, MXT_COMMAND_CALIBRATE, 1, false);
		break;
	}
2954 2955
}

2956
static void mxt_stop(struct mxt_data *data)
2957
{
2958
	switch (data->suspend_mode) {
2959 2960 2961 2962 2963 2964 2965 2966 2967 2968 2969
	case MXT_SUSPEND_T9_CTRL:
		/* Touch disable */
		mxt_write_object(data,
				MXT_TOUCH_MULTI_T9, MXT_T9_CTRL, 0);
		break;

	case MXT_SUSPEND_DEEP_SLEEP:
	default:
		mxt_set_t7_power_cfg(data, MXT_POWER_CFG_DEEPSLEEP);
		break;
	}
2970 2971
}

2972
static int mxt_input_open(struct input_dev *dev)
2973
{
2974
	struct mxt_data *data = input_get_drvdata(dev);
2975

2976
	mxt_start(data);
2977 2978 2979 2980

	return 0;
}

2981
static void mxt_input_close(struct input_dev *dev)
2982
{
2983
	struct mxt_data *data = input_get_drvdata(dev);
2984

2985
	mxt_stop(data);
2986 2987
}

2988
static int mxt_parse_device_properties(struct mxt_data *data)
2989
{
2990
	static const char keymap_property[] = "linux,gpio-keymap";
2991
	struct device *dev = &data->client->dev;
2992
	u32 *keymap;
2993 2994
	int n_keys;
	int error;
2995

2996 2997
	if (device_property_present(dev, keymap_property)) {
		n_keys = device_property_read_u32_array(dev, keymap_property,
2998 2999 3000
							NULL, 0);
		if (n_keys <= 0) {
			error = n_keys < 0 ? n_keys : -EINVAL;
3001
			dev_err(dev, "invalid/malformed '%s' property: %d\n",
3002
				keymap_property, error);
3003
			return error;
3004
		}
3005

3006
		keymap = devm_kmalloc_array(dev, n_keys, sizeof(*keymap),
3007
					    GFP_KERNEL);
3008
		if (!keymap)
3009
			return -ENOMEM;
3010

3011
		error = device_property_read_u32_array(dev, keymap_property,
3012 3013
						       keymap, n_keys);
		if (error) {
3014
			dev_err(dev, "failed to parse '%s' property: %d\n",
3015
				keymap_property, error);
3016
			return error;
3017
		}
3018

3019 3020
		data->t19_keymap = keymap;
		data->t19_num_keys = n_keys;
3021 3022
	}

3023
	return 0;
3024
}
3025

3026 3027 3028 3029 3030 3031 3032 3033 3034 3035 3036 3037 3038 3039 3040
static const struct dmi_system_id chromebook_T9_suspend_dmi[] = {
	{
		.matches = {
			DMI_MATCH(DMI_SYS_VENDOR, "GOOGLE"),
			DMI_MATCH(DMI_PRODUCT_NAME, "Link"),
		},
	},
	{
		.matches = {
			DMI_MATCH(DMI_PRODUCT_NAME, "Peppy"),
		},
	},
	{ }
};

3041
static int mxt_probe(struct i2c_client *client, const struct i2c_device_id *id)
3042
{
3043
	struct mxt_data *data;
3044 3045
	int error;

3046 3047 3048 3049 3050 3051 3052 3053 3054 3055 3056 3057
	/*
	 * Ignore devices that do not have device properties attached to
	 * them, as we need help determining whether we are dealing with
	 * touch screen or touchpad.
	 *
	 * So far on x86 the only users of Atmel touch controllers are
	 * Chromebooks, and chromeos_laptop driver will ensure that
	 * necessary properties are provided (if firmware does not do that).
	 */
	if (!device_property_present(&client->dev, "compatible"))
		return -ENXIO;

3058 3059 3060 3061 3062 3063 3064 3065 3066 3067 3068 3069
	/*
	 * Ignore ACPI devices representing bootloader mode.
	 *
	 * This is a bit of a hack: Google Chromebook BIOS creates ACPI
	 * devices for both application and bootloader modes, but we are
	 * interested in application mode only (if device is in bootloader
	 * mode we'll end up switching into application anyway). So far
	 * application mode addresses were all above 0x40, so we'll use it
	 * as a threshold.
	 */
	if (ACPI_COMPANION(&client->dev) && client->addr < 0x40)
		return -ENXIO;
3070

3071 3072
	data = devm_kzalloc(&client->dev, sizeof(struct mxt_data), GFP_KERNEL);
	if (!data)
3073
		return -ENOMEM;
3074

3075 3076
	snprintf(data->phys, sizeof(data->phys), "i2c-%u-%04x/input0",
		 client->adapter->nr, client->addr);
3077

3078 3079
	data->client = client;
	data->irq = client->irq;
3080
	i2c_set_clientdata(client, data);
3081

3082
	init_completion(&data->bl_completion);
3083
	init_completion(&data->reset_completion);
3084
	init_completion(&data->crc_completion);
3085

3086 3087 3088
	data->suspend_mode = dmi_check_system(chromebook_T9_suspend_dmi) ?
		MXT_SUSPEND_T9_CTRL : MXT_SUSPEND_DEEP_SLEEP;

3089 3090 3091 3092
	error = mxt_parse_device_properties(data);
	if (error)
		return error;

3093 3094 3095 3096 3097 3098 3099 3100
	data->reset_gpio = devm_gpiod_get_optional(&client->dev,
						   "reset", GPIOD_OUT_LOW);
	if (IS_ERR(data->reset_gpio)) {
		error = PTR_ERR(data->reset_gpio);
		dev_err(&client->dev, "Failed to get reset gpio: %d\n", error);
		return error;
	}

3101
	error = devm_request_threaded_irq(&client->dev, client->irq,
3102
					  NULL, mxt_interrupt, IRQF_ONESHOT,
3103
					  client->name, data);
3104 3105
	if (error) {
		dev_err(&client->dev, "Failed to register interrupt\n");
3106
		return error;
3107 3108
	}

3109 3110
	disable_irq(client->irq);

3111
	if (data->reset_gpio) {
3112
		msleep(MXT_RESET_GPIO_TIME);
3113
		gpiod_set_value(data->reset_gpio, 1);
3114
		msleep(MXT_RESET_INVALID_CHG);
3115 3116
	}

3117 3118
	error = mxt_initialize(data);
	if (error)
3119
		return error;
3120

3121
	error = sysfs_create_group(&client->dev.kobj, &mxt_attr_group);
3122 3123 3124
	if (error) {
		dev_err(&client->dev, "Failure %d creating sysfs group\n",
			error);
3125
		goto err_free_object;
3126
	}
3127 3128 3129 3130

	return 0;

err_free_object:
3131
	mxt_free_input_device(data);
3132
	mxt_free_object_table(data);
3133 3134 3135
	return error;
}

B
Bill Pemberton 已提交
3136
static int mxt_remove(struct i2c_client *client)
3137
{
3138
	struct mxt_data *data = i2c_get_clientdata(client);
3139

3140
	disable_irq(data->irq);
3141
	sysfs_remove_group(&client->dev.kobj, &mxt_attr_group);
3142
	mxt_free_input_device(data);
3143
	mxt_free_object_table(data);
3144 3145 3146 3147

	return 0;
}

3148
static int __maybe_unused mxt_suspend(struct device *dev)
3149
{
3150
	struct i2c_client *client = to_i2c_client(dev);
3151
	struct mxt_data *data = i2c_get_clientdata(client);
3152 3153
	struct input_dev *input_dev = data->input_dev;

3154 3155 3156
	if (!input_dev)
		return 0;

3157 3158 3159
	mutex_lock(&input_dev->mutex);

	if (input_dev->users)
3160
		mxt_stop(data);
3161 3162 3163 3164 3165 3166

	mutex_unlock(&input_dev->mutex);

	return 0;
}

3167
static int __maybe_unused mxt_resume(struct device *dev)
3168
{
3169
	struct i2c_client *client = to_i2c_client(dev);
3170
	struct mxt_data *data = i2c_get_clientdata(client);
3171 3172
	struct input_dev *input_dev = data->input_dev;

3173 3174 3175
	if (!input_dev)
		return 0;

3176 3177 3178
	mutex_lock(&input_dev->mutex);

	if (input_dev->users)
3179
		mxt_start(data);
3180 3181 3182 3183 3184 3185

	mutex_unlock(&input_dev->mutex);

	return 0;
}

3186 3187
static SIMPLE_DEV_PM_OPS(mxt_pm_ops, mxt_suspend, mxt_resume);

3188 3189
static const struct of_device_id mxt_of_match[] = {
	{ .compatible = "atmel,maxtouch", },
3190 3191 3192 3193 3194
	/* Compatibles listed below are deprecated */
	{ .compatible = "atmel,qt602240_ts", },
	{ .compatible = "atmel,atmel_mxt_ts", },
	{ .compatible = "atmel,atmel_mxt_tp", },
	{ .compatible = "atmel,mXT224", },
3195 3196 3197 3198
	{},
};
MODULE_DEVICE_TABLE(of, mxt_of_match);

3199 3200 3201 3202 3203 3204 3205 3206 3207
#ifdef CONFIG_ACPI
static const struct acpi_device_id mxt_acpi_id[] = {
	{ "ATML0000", 0 },	/* Touchpad */
	{ "ATML0001", 0 },	/* Touchscreen */
	{ }
};
MODULE_DEVICE_TABLE(acpi, mxt_acpi_id);
#endif

3208
static const struct i2c_device_id mxt_id[] = {
3209
	{ "qt602240_ts", 0 },
3210
	{ "atmel_mxt_ts", 0 },
3211
	{ "atmel_mxt_tp", 0 },
3212
	{ "maxtouch", 0 },
3213
	{ "mXT224", 0 },
3214 3215
	{ }
};
3216
MODULE_DEVICE_TABLE(i2c, mxt_id);
3217

3218
static struct i2c_driver mxt_driver = {
3219
	.driver = {
3220
		.name	= "atmel_mxt_ts",
3221
		.of_match_table = mxt_of_match,
3222
		.acpi_match_table = ACPI_PTR(mxt_acpi_id),
3223
		.pm	= &mxt_pm_ops,
3224
	},
3225
	.probe		= mxt_probe,
B
Bill Pemberton 已提交
3226
	.remove		= mxt_remove,
3227
	.id_table	= mxt_id,
3228 3229
};

3230
module_i2c_driver(mxt_driver);
3231 3232 3233

/* Module information */
MODULE_AUTHOR("Joonyoung Shim <jy0922.shim@samsung.com>");
3234
MODULE_DESCRIPTION("Atmel maXTouch Touchscreen driver");
3235
MODULE_LICENSE("GPL");