// SPDX-License-Identifier: GPL-2.0-only /* * Goodix Touchscreen firmware upload support * * Copyright (c) 2021 Hans de Goede * * This is a rewrite of gt9xx_update.c from the Allwinner H3 BSP which is: * Copyright (c) 2010 - 2012 Goodix Technology. * Author: andrew@goodix.com */ #include #include #include #include "goodix.h" #define GOODIX_FW_HEADER_LENGTH sizeof(struct goodix_fw_header) #define GOODIX_FW_SECTION_LENGTH 0x2000 #define GOODIX_FW_DSP_LENGTH 0x1000 #define GOODIX_FW_UPLOAD_ADDRESS 0xc000 #define GOODIX_CFG_LOC_HAVE_KEY 7 #define GOODIX_CFG_LOC_DRVA_NUM 27 #define GOODIX_CFG_LOC_DRVB_NUM 28 #define GOODIX_CFG_LOC_SENS_NUM 29 struct goodix_fw_header { u8 hw_info[4]; u8 pid[8]; u8 vid[2]; } __packed; static u16 goodix_firmware_checksum(const u8 *data, int size) { u16 checksum = 0; int i; for (i = 0; i < size; i += 2) checksum += (data[i] << 8) + data[i + 1]; return checksum; } static int goodix_firmware_verify(struct device *dev, const struct firmware *fw) { const struct goodix_fw_header *fw_header; size_t expected_size; const u8 *data; u16 checksum; char buf[9]; expected_size = GOODIX_FW_HEADER_LENGTH + 4 * GOODIX_FW_SECTION_LENGTH + GOODIX_FW_DSP_LENGTH; if (fw->size != expected_size) { dev_err(dev, "Firmware has wrong size, expected %zu got %zu\n", expected_size, fw->size); return -EINVAL; } data = fw->data + GOODIX_FW_HEADER_LENGTH; checksum = goodix_firmware_checksum(data, 4 * GOODIX_FW_SECTION_LENGTH); if (checksum) { dev_err(dev, "Main firmware checksum error\n"); return -EINVAL; } data += 4 * GOODIX_FW_SECTION_LENGTH; checksum = goodix_firmware_checksum(data, GOODIX_FW_DSP_LENGTH); if (checksum) { dev_err(dev, "DSP firmware checksum error\n"); return -EINVAL; } fw_header = (const struct goodix_fw_header *)fw->data; dev_info(dev, "Firmware hardware info %02x%02x%02x%02x\n", fw_header->hw_info[0], fw_header->hw_info[1], fw_header->hw_info[2], fw_header->hw_info[3]); /* pid is a 8 byte buffer containing a string, weird I know */ memcpy(buf, fw_header->pid, 8); buf[8] = 0; dev_info(dev, "Firmware PID: %s VID: %02x%02x\n", buf, fw_header->vid[0], fw_header->vid[1]); return 0; } static int goodix_enter_upload_mode(struct i2c_client *client) { int tries, error; u8 val; tries = 200; do { error = goodix_i2c_write_u8(client, GOODIX_REG_MISCTL_SWRST, 0x0c); if (error) return error; error = goodix_i2c_read(client, GOODIX_REG_MISCTL_SWRST, &val, 1); if (error) return error; if (val == 0x0c) break; } while (--tries); if (!tries) { dev_err(&client->dev, "Error could not hold ss51 & dsp\n"); return -EIO; } /* DSP_CK and DSP_ALU_CK PowerOn */ error = goodix_i2c_write_u8(client, GOODIX_REG_MISCTL_DSP_CTL, 0x00); if (error) return error; /* Disable watchdog */ error = goodix_i2c_write_u8(client, GOODIX_REG_MISCTL_TMR0_EN, 0x00); if (error) return error; /* Clear cache enable */ error = goodix_i2c_write_u8(client, GOODIX_REG_MISCTL_CACHE_EN, 0x00); if (error) return error; /* Set boot from SRAM */ error = goodix_i2c_write_u8(client, GOODIX_REG_MISCTL_BOOTCTL, 0x02); if (error) return error; /* Software reboot */ error = goodix_i2c_write_u8(client, GOODIX_REG_MISCTL_CPU_SWRST_PULSE, 0x01); if (error) return error; /* Clear control flag */ error = goodix_i2c_write_u8(client, GOODIX_REG_MISCTL_BOOTCTL, 0x00); if (error) return error; /* Set scramble */ error = goodix_i2c_write_u8(client, GOODIX_REG_MISCTL_BOOT_OPT, 0x00); if (error) return error; /* Enable accessing code */ error = goodix_i2c_write_u8(client, GOODIX_REG_MISCTL_MEM_CD_EN, 0x01); if (error) return error; return 0; } static int goodix_start_firmware(struct i2c_client *client) { int error; u8 val; /* Init software watchdog */ error = goodix_i2c_write_u8(client, GOODIX_REG_SW_WDT, 0xaa); if (error) return error; /* Release SS51 & DSP */ error = goodix_i2c_write_u8(client, GOODIX_REG_MISCTL_SWRST, 0x00); if (error) return error; error = goodix_i2c_read(client, GOODIX_REG_SW_WDT, &val, 1); if (error) return error; /* The value we've written to SW_WDT should have been cleared now */ if (val == 0xaa) { dev_err(&client->dev, "Error SW_WDT reg not cleared on fw startup\n"); return -EIO; } /* Re-init software watchdog */ error = goodix_i2c_write_u8(client, GOODIX_REG_SW_WDT, 0xaa); if (error) return error; return 0; } static int goodix_firmware_upload(struct goodix_ts_data *ts) { const struct firmware *fw; char fw_name[64]; const u8 *data; int error; snprintf(fw_name, sizeof(fw_name), "goodix/%s", ts->firmware_name); error = request_firmware(&fw, fw_name, &ts->client->dev); if (error) { dev_err(&ts->client->dev, "Firmware request error %d\n", error); return error; } error = goodix_firmware_verify(&ts->client->dev, fw); if (error) goto release; error = goodix_reset_no_int_sync(ts); if (error) goto release; error = goodix_enter_upload_mode(ts->client); if (error) goto release; /* Select SRAM bank 0 and upload section 1 & 2 */ error = goodix_i2c_write_u8(ts->client, GOODIX_REG_MISCTL_SRAM_BANK, 0x00); if (error) goto release; data = fw->data + GOODIX_FW_HEADER_LENGTH; error = goodix_i2c_write(ts->client, GOODIX_FW_UPLOAD_ADDRESS, data, 2 * GOODIX_FW_SECTION_LENGTH); if (error) goto release; /* Select SRAM bank 1 and upload section 3 & 4 */ error = goodix_i2c_write_u8(ts->client, GOODIX_REG_MISCTL_SRAM_BANK, 0x01); if (error) goto release; data += 2 * GOODIX_FW_SECTION_LENGTH; error = goodix_i2c_write(ts->client, GOODIX_FW_UPLOAD_ADDRESS, data, 2 * GOODIX_FW_SECTION_LENGTH); if (error) goto release; /* Select SRAM bank 2 and upload the DSP firmware */ error = goodix_i2c_write_u8(ts->client, GOODIX_REG_MISCTL_SRAM_BANK, 0x02); if (error) goto release; data += 2 * GOODIX_FW_SECTION_LENGTH; error = goodix_i2c_write(ts->client, GOODIX_FW_UPLOAD_ADDRESS, data, GOODIX_FW_DSP_LENGTH); if (error) goto release; error = goodix_start_firmware(ts->client); if (error) goto release; error = goodix_int_sync(ts); release: release_firmware(fw); return error; } static int goodix_prepare_bak_ref(struct goodix_ts_data *ts) { u8 have_key, driver_num, sensor_num; if (ts->bak_ref) return 0; /* Already done */ have_key = (ts->config[GOODIX_CFG_LOC_HAVE_KEY] & 0x01); driver_num = (ts->config[GOODIX_CFG_LOC_DRVA_NUM] & 0x1f) + (ts->config[GOODIX_CFG_LOC_DRVB_NUM] & 0x1f); if (have_key) driver_num--; sensor_num = (ts->config[GOODIX_CFG_LOC_SENS_NUM] & 0x0f) + ((ts->config[GOODIX_CFG_LOC_SENS_NUM] >> 4) & 0x0f); dev_dbg(&ts->client->dev, "Drv %d Sen %d Key %d\n", driver_num, sensor_num, have_key); ts->bak_ref_len = (driver_num * (sensor_num - 2) + 2) * 2; ts->bak_ref = devm_kzalloc(&ts->client->dev, ts->bak_ref_len, GFP_KERNEL); if (!ts->bak_ref) return -ENOMEM; /* * The bak_ref array contains the backup of an array of (self/auto) * calibration related values which the Android version of the driver * stores on the filesystem so that it can be restored after reboot. * The mainline kernel never writes directly to the filesystem like * this, we always start will all the values which give a correction * factor in approx. the -20 - +20 range (in 2s complement) set to 0. * * Note the touchscreen works fine without restoring the reference * values after a reboot / power-cycle. * * The last 2 bytes are a 16 bits unsigned checksum which is expected * to make the addition al all 16 bit unsigned values in the array add * up to 1 (rather then the usual 0), so we must set the last byte to 1. */ ts->bak_ref[ts->bak_ref_len - 1] = 1; return 0; } static int goodix_send_main_clock(struct goodix_ts_data *ts) { u32 main_clk = 54; /* Default main clock */ u8 checksum = 0; int i; device_property_read_u32(&ts->client->dev, "goodix,main-clk", &main_clk); for (i = 0; i < (GOODIX_MAIN_CLK_LEN - 1); i++) { ts->main_clk[i] = main_clk; checksum += main_clk; } /* The value of all bytes combines must be 0 */ ts->main_clk[GOODIX_MAIN_CLK_LEN - 1] = 256 - checksum; return goodix_i2c_write(ts->client, GOODIX_REG_MAIN_CLK, ts->main_clk, GOODIX_MAIN_CLK_LEN); } int goodix_firmware_check(struct goodix_ts_data *ts) { device_property_read_string(&ts->client->dev, "firmware-name", &ts->firmware_name); if (!ts->firmware_name) return 0; if (ts->irq_pin_access_method == IRQ_PIN_ACCESS_NONE) { dev_err(&ts->client->dev, "Error no IRQ-pin access method, cannot upload fw.\n"); return -EINVAL; } dev_info(&ts->client->dev, "Touchscreen controller needs fw-upload\n"); ts->load_cfg_from_disk = true; return goodix_firmware_upload(ts); } bool goodix_handle_fw_request(struct goodix_ts_data *ts) { int error; u8 val; error = goodix_i2c_read(ts->client, GOODIX_REG_REQUEST, &val, 1); if (error) return false; switch (val) { case GOODIX_RQST_RESPONDED: /* * If we read back our own last ack the IRQ was not for * a request. */ return false; case GOODIX_RQST_CONFIG: error = goodix_send_cfg(ts, ts->config, ts->chip->config_len); if (error) return false; break; case GOODIX_RQST_BAK_REF: error = goodix_prepare_bak_ref(ts); if (error) return false; error = goodix_i2c_write(ts->client, GOODIX_REG_BAK_REF, ts->bak_ref, ts->bak_ref_len); if (error) return false; break; case GOODIX_RQST_RESET: error = goodix_firmware_upload(ts); if (error) return false; break; case GOODIX_RQST_MAIN_CLOCK: error = goodix_send_main_clock(ts); if (error) return false; break; case GOODIX_RQST_UNKNOWN: case GOODIX_RQST_IDLE: break; default: dev_err_ratelimited(&ts->client->dev, "Unknown Request: 0x%02x\n", val); } /* Ack the request */ goodix_i2c_write_u8(ts->client, GOODIX_REG_REQUEST, GOODIX_RQST_RESPONDED); return true; } void goodix_save_bak_ref(struct goodix_ts_data *ts) { int error; u8 val; if (!ts->firmware_name) return; error = goodix_i2c_read(ts->client, GOODIX_REG_STATUS, &val, 1); if (error) return; if (!(val & 0x80)) return; error = goodix_i2c_read(ts->client, GOODIX_REG_BAK_REF, ts->bak_ref, ts->bak_ref_len); if (error) { memset(ts->bak_ref, 0, ts->bak_ref_len); ts->bak_ref[ts->bak_ref_len - 1] = 1; } }