On Thu, 31 Oct 2019, Jeff LaBundy wrote:
> On Thu, Oct 31, 2019 at 01:44:10PM +0000, Lee Jones wrote:
> > On Sun, 20 Oct 2019, Jeff LaBundy wrote:
> >
> > > This patch adds support for core functions common to all six-channel
> > > members of the Azoteq ProxFusion family of sensor devices.
> > >
> > > Signed-off-by: Jeff LaBundy <jeff@xxxxxxxxxxx>
> > > ---
> > > drivers/mfd/Kconfig | 13 +
> > > drivers/mfd/Makefile | 2 +
> > > drivers/mfd/iqs62x-core.c | 638 ++++++++++++++++++++++++++++++++++++++++++++
> > > drivers/mfd/iqs62x-tables.c | 424 +++++++++++++++++++++++++++++
> > > include/linux/mfd/iqs62x.h | 148 ++++++++++
> > > 5 files changed, 1225 insertions(+)
> > > create mode 100644 drivers/mfd/iqs62x-core.c
> > > create mode 100644 drivers/mfd/iqs62x-tables.c
> > > create mode 100644 include/linux/mfd/iqs62x.h
> > >
> > > diff --git a/drivers/mfd/Kconfig b/drivers/mfd/Kconfig
> > > index ae24d3e..df391f7 100644
> > > --- a/drivers/mfd/Kconfig
> > > +++ b/drivers/mfd/Kconfig
> > > @@ -642,6 +642,19 @@ config MFD_IPAQ_MICRO
> > > AT90LS8535 microcontroller flashed with a special iPAQ
> > > firmware using the custom protocol implemented in this driver.
[...]
> > What is preventing a very naughty person from providing their own
> > register map (firmware) in order to read/write unsuitable registers
> > from kernel context for their own gains; simply by swapping out a file
> > contained in userspace?
>
> I would argue that if someone is willing to go that length, they likely understand
> that their dock switch sensitivity may change or their ambient light sensor may no
> longer function properly.
>
> > It would probably be a better idea to compile the register definitions
> > with the kernel/module to be safe. You can use Device Tree for
> > run-time configuration changes.
>
> Taking the IQS620A as an example, there are over 100 individual fields that need
> configured. Forcing customers to manually transfer the values derived within the
> GUI to a corresponding collection of device tree bindings would be prohibitively
> complex.
>
> To complicate matters, many registers change meaning or restrict their available
> values based on the values stored in other registers. Duplicating all of the de-
> pendencies and restrictions comprehended by the vendor's tool in the driver and/
> or the bindings document would not be practical.
>
> Just to clarify, we're not storing register definitions (i.e. addresses) in this
> "firmware"; rather, we're storing application-specific register values that don't
> belong in the driver source.
Okay, this allays my fears. I was under the impression that you could
manipulate addresses in the firmware in order to read/write from
non-expected registers in kernel context.
[...]
> > > + /*
> > > + * The device resets itself in response to the I2C master stalling
> > > + * communication beyond a timeout. In this case, all registers are
> > > + * restored and any interested sub-device drivers are notified.
> > > + */
> > > + if (event_flags & BIT(IQS62X_EVENT_SYS_RESET)) {
> > > + dev_err(&iqs62x->client->dev, "Unexpected device reset\n");
> > > +
> > > + error = iqs62x_dev_init(iqs62x);
> >
> > Is it safe to re-initialise the entire device in IRQ context?
> >
>
> Here, we are simply re-writing several registers from memory. This is a threaded
> interrupt handler, so it should be safe to do so. But if I've misunderstood your
> concern, please let me know.
My intent here is to ensure it's been thought about. I see that you
are in a threaded handler, so it should be save to read/write register
and sleep.
> > > + if (error) {
> > > + dev_err(&iqs62x->client->dev,
> > > + "Failed to re-initialize device: %d\n", error);
> > > + return IRQ_NONE;
> > > + }
> > > + }
> > > +
> > > + error = blocking_notifier_call_chain(&iqs62x->nh, event_flags,
> > > + &event_data);
> > > + if (error & NOTIFY_STOP_MASK)
> > > + return IRQ_NONE;
> > > +
> > > + /*
> > > + * Once the communication window is closed, a small delay is added to
> > > + * ensure the device's RDY output has been deasserted by the time the
> > > + * interrupt handler returns.
> > > + */
> > > + usleep_range(50, 100);
> > > +
> > > + return IRQ_HANDLED;
> > > +}
> >
> > [...]
> >
> > > +static int iqs62x_probe(struct i2c_client *client,
> > > + const struct i2c_device_id *id)
> > > +{
> > > + struct iqs62x_core *iqs62x;
> > > + struct iqs62x_info info;
> > > + unsigned int val;
> > > + int error, i, j;
> >
> > Nit: It's more common to use 'ret' or 'err' - my preference is 'ret'.
> >
>
> I think there are valid arguments both ways, but in my experience, the preference
> is not consistent across the audience of this patch series. Unless this is a deal
> breaker, I'd like to leave it as 'error' simply for consistency.
The difference is *very* significant, more than an order of magnitude:
$ git grep "int.* ret[;\|,]" | wc -l
40549
$ git grep "int.* err[;\|,]" | wc -l
18558
$ git grep "int.* error[;\|,]" | wc -l
3381
[...]
> > > + for (j = 0; j < iqs62x->dev_desc->num_cal_regs; j++) {
> >
> > What are you doing here? Please provide a comment.
>
> The search process here is as follows:
>
> 1. Check if the product number (device ID) is recognized, and if so:
> 2. Check that the software number (FW revision) is valid, and if so:
> 3. Check that the device's calibration (OTP) registers are non-zero (i.e.
> programmed) in which case some additional functionality is awarded, or
> the device is bad.
>
> For example, the IQS620A device can report its absolute die temperature if
> its scale/offset registers (0xC2 through 0xC4) have been programmed at the
> factory. In that case, we're actually talking to an IQS620AT device and we
> load an additional hwmon (soon to be iio) driver. However if they're blank,
> we're talking to a plain IQS620A device and stick to input and pwm drivers.
>
> In another example, the IQS621 (which includes an ambient light sensor) is
> _only_ sold in a calibrated version. If we happen to come across a device
> with empty calibration registers, its lux output will be garbage. In this
> case we don't register the device at all.
>
> I would be happy to add some comments here to explain what's happening.
Please.
> > > + error = regmap_read(iqs62x->map,
> > > + iqs62x->dev_desc->cal_regs[j],
> > > + &val);
> > > + if (error)
> > > + return error;
> > > +
> > > + if (!val)
> > > + break;
> > > + }
> > > +
> > > + if (j == iqs62x->dev_desc->num_cal_regs)
> > > + break;
> >
> > Is there a reason not to break here? If the product number matched
> > once, can it match for a second time?
> >
>
> It can in the case of the aforementioned IQS620A (no 'T') device. The driver
> first looks for the IQS620AT which defines 3 calibration registers. If we're
> talking to an IQS620A, the first pass of the loop (i = 0) will find 0xC2 = 0,
> then j < num_cal_regs and the outer loop will wind forward (i = 1).
>
> At that point, the second pass of the outer loop will check for an IQS620A,
> which has the same product number but defines num_cal_regs as zero. In that
> case, j = num_cal_regs = 0 and the outer loop will break.
>
> After the outer loop finishes, if i < NUM_DEV then we know the following:
>
> 1. The product number is recognized, and:
> 2. The software number is valid, and:
> 3. All calibration registers, if any, are nonzero.
>
> Again, this process warrants some comments and I would be happy to add some.
Great, thanks.
[...]
> > > +static const struct mfd_cell iqs625_sub_devs[] = {
> > > + {
> > > + .name = IQS62X_DRV_NAME_KEYS,
> > > + .of_compatible = "azoteq,iqs625-keys",
> > > + },
> > > + {
> > > + .name = IQS624_DRV_NAME_POS,
> > > + },
> > > +};
> >
> > These should be moved into the core driver.
> >
>
> The reason they're placed here is because they're referenced in the iqs62x_devs
> array, members of which are then referenced by devm_mfd_add_devices in the core
> driver.
>
> If the mfd_cell arrays move to the core driver (where they're not used directly),
> I think I'd have to make them extern. I think it's cleaner to limit the scope of
> any given element to the minimum level that is necessary.
>
> However if I have misunderstood or I could possibly make this more clear with a
> comment or two, please let me know.
Leave them where they are for now. I still need to do a review of this
file. It's strange to see such an odd weave of; registers, masks,
files, values and names bundled up in structure arrays like this. It
may take a little time.
[...]
--
Lee Jones [李琼斯]
Linaro Services Technical Lead
Linaro.org │ Open source software for ARM SoCs
Follow Linaro: Facebook | Twitter | Blog
