drivers/rapidio/devices/rio_mport_cdev.c

   1 /*
   2  * RapidIO mport character device
   3  *
   4  * Copyright 2014-2015 Integrated Device Technology, Inc.
   5  *    Alexandre Bounine <alexandre.bounine@idt.com>
   6  * Copyright 2014-2015 Prodrive Technologies
   7  *    Andre van Herk <andre.van.herk@prodrive-technologies.com>
   8  *    Jerry Jacobs <jerry.jacobs@prodrive-technologies.com>
   9  * Copyright (C) 2014 Texas Instruments Incorporated
  10  *    Aurelien Jacquiot <a-jacquiot@ti.com>
  11  *
  12  * This program is free software; you can redistribute  it and/or modify it
  13  * under  the terms of  the GNU General  Public License as published by the
  14  * Free Software Foundation;  either version 2 of the  License, or (at your
  15  * option) any later version.
  16  */
  17 #include <linux/module.h>
  18 #include <linux/kernel.h>
  19 #include <linux/cdev.h>
  20 #include <linux/ioctl.h>
  21 #include <linux/uaccess.h>
  22 #include <linux/list.h>
  23 #include <linux/fs.h>
  24 #include <linux/err.h>
  25 #include <linux/net.h>
  26 #include <linux/poll.h>
  27 #include <linux/spinlock.h>
  28 #include <linux/sched.h>
  29 #include <linux/kfifo.h>
  30
  31 #include <linux/mm.h>
  32 #include <linux/slab.h>
  33 #include <linux/vmalloc.h>
  34 #include <linux/mman.h>
  35
  36 #include <linux/dma-mapping.h>
  37 #ifdef CONFIG_RAPIDIO_DMA_ENGINE
  38 #include <linux/dmaengine.h>
  39 #endif
  40
  41 #include <linux/rio.h>
  42 #include <linux/rio_ids.h>
  43 #include <linux/rio_drv.h>
  44 #include <linux/rio_mport_cdev.h>
  45
  46 #include "../rio.h"
  47
  48 #define DRV_NAME        "rio_mport"
  49 #define DRV_PREFIX      DRV_NAME ": "
  50 #define DEV_NAME        "rio_mport"
  51 #define DRV_VERSION     "1.0.0"
  52
  53 /* Debug output filtering masks */
  54 enum {
  55         DBG_NONE        = 0,
  56         DBG_INIT        = BIT(0), /* driver init */
  57         DBG_EXIT        = BIT(1), /* driver exit */
  58         DBG_MPORT       = BIT(2), /* mport add/remove */
  59         DBG_RDEV        = BIT(3), /* RapidIO device add/remove */
  60         DBG_DMA         = BIT(4), /* DMA transfer messages */
  61         DBG_MMAP        = BIT(5), /* mapping messages */
  62         DBG_IBW         = BIT(6), /* inbound window */
  63         DBG_EVENT       = BIT(7), /* event handling messages */
  64         DBG_OBW         = BIT(8), /* outbound window messages */
  65         DBG_DBELL       = BIT(9), /* doorbell messages */
  66         DBG_ALL         = ~0,
  67 };
  68
  69 #ifdef DEBUG
  70 #define rmcd_debug(level, fmt, arg...)          \
  71         do {                                    \
  72                 if (DBG_##level & dbg_level)    \
  73                         pr_debug(DRV_PREFIX "%s: " fmt "\n", __func__, ##arg); \
  74         } while (0)
  75 #else
  76 #define rmcd_debug(level, fmt, arg...) \
  77                 no_printk(KERN_DEBUG pr_fmt(DRV_PREFIX fmt "\n"), ##arg)
  78 #endif
  79
  80 #define rmcd_warn(fmt, arg...) \
  81         pr_warn(DRV_PREFIX "%s WARNING " fmt "\n", __func__, ##arg)
  82
  83 #define rmcd_error(fmt, arg...) \
  84         pr_err(DRV_PREFIX "%s ERROR " fmt "\n", __func__, ##arg)
  85
  86 MODULE_AUTHOR("Jerry Jacobs <jerry.jacobs@prodrive-technologies.com>");
  87 MODULE_AUTHOR("Aurelien Jacquiot <a-jacquiot@ti.com>");
  88 MODULE_AUTHOR("Alexandre Bounine <alexandre.bounine@idt.com>");
  89 MODULE_AUTHOR("Andre van Herk <andre.van.herk@prodrive-technologies.com>");
  90 MODULE_DESCRIPTION("RapidIO mport character device driver");
  91 MODULE_LICENSE("GPL");
  92 MODULE_VERSION(DRV_VERSION);
  93
  94 static int dma_timeout = 3000; /* DMA transfer timeout in msec */
  95 module_param(dma_timeout, int, S_IRUGO);
  96 MODULE_PARM_DESC(dma_timeout, "DMA Transfer Timeout in msec (default: 3000)");
  97
  98 #ifdef DEBUG
  99 static u32 dbg_level = DBG_NONE;
 100 module_param(dbg_level, uint, S_IWUSR | S_IWGRP | S_IRUGO);
 101 MODULE_PARM_DESC(dbg_level, "Debugging output level (default 0 = none)");
 102 #endif
 103
 104 /*
 105  * An internal DMA coherent buffer
 106  */
 107 struct mport_dma_buf {
 108         void            *ib_base;
 109         dma_addr_t      ib_phys;
 110         u32             ib_size;
 111         u64             ib_rio_base;
 112         bool            ib_map;
 113         struct file     *filp;
 114 };
 115
 116 /*
 117  * Internal memory mapping structure
 118  */
 119 enum rio_mport_map_dir {
 120         MAP_INBOUND,
 121         MAP_OUTBOUND,
 122         MAP_DMA,
 123 };
 124
 125 struct rio_mport_mapping {
 126         struct list_head node;
 127         struct mport_dev *md;
 128         enum rio_mport_map_dir dir;
 129         u16 rioid;
 130         u64 rio_addr;
 131         dma_addr_t phys_addr; /* for mmap */
 132         void *virt_addr; /* kernel address, for dma_free_coherent */
 133         u64 size;
 134         struct kref ref; /* refcount of vmas sharing the mapping */
 135         struct file *filp;
 136 };
 137
 138 struct rio_mport_dma_map {
 139         int valid;
 140         u64 length;
 141         void *vaddr;
 142         dma_addr_t paddr;
 143 };
 144
 145 #define MPORT_MAX_DMA_BUFS      16
 146 #define MPORT_EVENT_DEPTH       10
 147
 148 /*
 149  * mport_dev  driver-specific structure that represents mport device
 150  * @active    mport device status flag
 151  * @node      list node to maintain list of registered mports
 152  * @cdev      character device
 153  * @dev       associated device object
 154  * @mport     associated subsystem's master port device object
 155  * @buf_mutex lock for buffer handling
 156  * @file_mutex - lock for open files list
 157  * @file_list  - list of open files on given mport
 158  * @properties properties of this mport
 159  * @portwrites queue of inbound portwrites
 160  * @pw_lock    lock for port write queue
 161  * @mappings   queue for memory mappings
 162  * @dma_chan   DMA channels associated with this device
 163  * @dma_ref:
 164  * @comp:
 165  */
 166 struct mport_dev {
 167         atomic_t                active;
 168         struct list_head        node;
 169         struct cdev             cdev;
 170         struct device           dev;
 171         struct rio_mport        *mport;
 172         struct mutex            buf_mutex;
 173         struct mutex            file_mutex;
 174         struct list_head        file_list;
 175         struct rio_mport_properties     properties;
 176         struct list_head                doorbells;
 177         spinlock_t                      db_lock;
 178         struct list_head                portwrites;
 179         spinlock_t                      pw_lock;
 180         struct list_head        mappings;
 181 #ifdef CONFIG_RAPIDIO_DMA_ENGINE
 182         struct dma_chan *dma_chan;
 183         struct kref     dma_ref;
 184         struct completion comp;
 185 #endif
 186 };
 187
 188 /*
 189  * mport_cdev_priv - data structure specific to individual file object
 190  *                   associated with an open device
 191  * @md    master port character device object
 192  * @async_queue - asynchronous notification queue
 193  * @list - file objects tracking list
 194  * @db_filters    inbound doorbell filters for this descriptor
 195  * @pw_filters    portwrite filters for this descriptor
 196  * @event_fifo    event fifo for this descriptor
 197  * @event_rx_wait wait queue for this descriptor
 198  * @fifo_lock     lock for event_fifo
 199  * @event_mask    event mask for this descriptor
 200  * @dmach DMA engine channel allocated for specific file object
 201  */
 202 struct mport_cdev_priv {
 203         struct mport_dev        *md;
 204         struct fasync_struct    *async_queue;
 205         struct list_head        list;
 206         struct list_head        db_filters;
 207         struct list_head        pw_filters;
 208         struct kfifo            event_fifo;
 209         wait_queue_head_t       event_rx_wait;
 210         spinlock_t              fifo_lock;
 211         u32                     event_mask; /* RIO_DOORBELL, RIO_PORTWRITE */
 212 #ifdef CONFIG_RAPIDIO_DMA_ENGINE
 213         struct dma_chan         *dmach;
 214         struct list_head        async_list;
 215         struct list_head        pend_list;
 216         spinlock_t              req_lock;
 217         struct mutex            dma_lock;
 218         struct kref             dma_ref;
 219         struct completion       comp;
 220 #endif
 221 };
 222
 223 /*
 224  * rio_mport_pw_filter - structure to describe a portwrite filter
 225  * md_node   node in mport device's list
 226  * priv_node node in private file object's list
 227  * priv      reference to private data
 228  * filter    actual portwrite filter
 229  */
 230 struct rio_mport_pw_filter {
 231         struct list_head md_node;
 232         struct list_head priv_node;
 233         struct mport_cdev_priv *priv;
 234         struct rio_pw_filter filter;
 235 };
 236
 237 /*
 238  * rio_mport_db_filter - structure to describe a doorbell filter
 239  * @data_node reference to device node
 240  * @priv_node node in private data
 241  * @priv      reference to private data
 242  * @filter    actual doorbell filter
 243  */
 244 struct rio_mport_db_filter {
 245         struct list_head data_node;
 246         struct list_head priv_node;
 247         struct mport_cdev_priv *priv;
 248         struct rio_doorbell_filter filter;
 249 };
 250
 251 static LIST_HEAD(mport_devs);
 252 static DEFINE_MUTEX(mport_devs_lock);
 253
 254 #if (0) /* used by commented out portion of poll function : FIXME */
 255 static DECLARE_WAIT_QUEUE_HEAD(mport_cdev_wait);
 256 #endif
 257
 258 static struct class *dev_class;
 259 static dev_t dev_number;
 260
 261 static struct workqueue_struct *dma_wq;
 262
 263 static void mport_release_mapping(struct kref *ref);
 264
 265 static int rio_mport_maint_rd(struct mport_cdev_priv *priv, void __user *arg,
 266                               int local)
 267 {
 268         struct rio_mport *mport = priv->md->mport;
 269         struct rio_mport_maint_io maint_io;
 270         u32 *buffer;
 271         u32 offset;
 272         size_t length;
 273         int ret, i;
 274
 275         if (unlikely(copy_from_user(&maint_io, arg, sizeof(maint_io))))
 276                 return -EFAULT;
 277
 278         if ((maint_io.offset % 4) ||
 279             (maint_io.length == 0) || (maint_io.length % 4) ||
 280             (maint_io.length + maint_io.offset) > RIO_MAINT_SPACE_SZ)
 281                 return -EINVAL;
 282
 283         buffer = vmalloc(maint_io.length);
 284         if (buffer == NULL)
 285                 return -ENOMEM;
 286         length = maint_io.length/sizeof(u32);
 287         offset = maint_io.offset;
 288
 289         for (i = 0; i < length; i++) {
 290                 if (local)
 291                         ret = __rio_local_read_config_32(mport,
 292                                 offset, &buffer[i]);
 293                 else
 294                         ret = rio_mport_read_config_32(mport, maint_io.rioid,
 295                                 maint_io.hopcount, offset, &buffer[i]);
 296                 if (ret)
 297                         goto out;
 298
 299                 offset += 4;
 300         }
 301
 302         if (unlikely(copy_to_user((void __user *)(uintptr_t)maint_io.buffer,
 303                                    buffer, maint_io.length)))
 304                 ret = -EFAULT;
 305 out:
 306         vfree(buffer);
 307         return ret;
 308 }
 309
 310 static int rio_mport_maint_wr(struct mport_cdev_priv *priv, void __user *arg,
 311                               int local)
 312 {
 313         struct rio_mport *mport = priv->md->mport;
 314         struct rio_mport_maint_io maint_io;
 315         u32 *buffer;
 316         u32 offset;
 317         size_t length;
 318         int ret = -EINVAL, i;
 319
 320         if (unlikely(copy_from_user(&maint_io, arg, sizeof(maint_io))))
 321                 return -EFAULT;
 322
 323         if ((maint_io.offset % 4) ||
 324             (maint_io.length == 0) || (maint_io.length % 4) ||
 325             (maint_io.length + maint_io.offset) > RIO_MAINT_SPACE_SZ)
 326                 return -EINVAL;
 327
 328         buffer = vmalloc(maint_io.length);
 329         if (buffer == NULL)
 330                 return -ENOMEM;
 331         length = maint_io.length;
 332
 333         if (unlikely(copy_from_user(buffer,
 334                         (void __user *)(uintptr_t)maint_io.buffer, length))) {
 335                 ret = -EFAULT;
 336                 goto out;
 337         }
 338
 339         offset = maint_io.offset;
 340         length /= sizeof(u32);
 341
 342         for (i = 0; i < length; i++) {
 343                 if (local)
 344                         ret = __rio_local_write_config_32(mport,
 345                                                           offset, buffer[i]);
 346                 else
 347                         ret = rio_mport_write_config_32(mport, maint_io.rioid,
 348                                                         maint_io.hopcount,
 349                                                         offset, buffer[i]);
 350                 if (ret)
 351                         goto out;
 352
 353                 offset += 4;
 354         }
 355
 356 out:
 357         vfree(buffer);
 358         return ret;
 359 }
 360
 361
 362 /*
 363  * Inbound/outbound memory mapping functions
 364  */
 365 static int
 366 rio_mport_create_outbound_mapping(struct mport_dev *md, struct file *filp,
 367                                   u16 rioid, u64 raddr, u32 size,
 368                                   dma_addr_t *paddr)
 369 {
 370         struct rio_mport *mport = md->mport;
 371         struct rio_mport_mapping *map;
 372         int ret;
 373
 374         rmcd_debug(OBW, "did=%d ra=0x%llx sz=0x%x", rioid, raddr, size);
 375
 376         map = kzalloc(sizeof(*map), GFP_KERNEL);
 377         if (map == NULL)
 378                 return -ENOMEM;
 379
 380         ret = rio_map_outb_region(mport, rioid, raddr, size, 0, paddr);
 381         if (ret < 0)
 382                 goto err_map_outb;
 383
 384         map->dir = MAP_OUTBOUND;
 385         map->rioid = rioid;
 386         map->rio_addr = raddr;
 387         map->size = size;
 388         map->phys_addr = *paddr;
 389         map->filp = filp;
 390         map->md = md;
 391         kref_init(&map->ref);
 392         list_add_tail(&map->node, &md->mappings);
 393         return 0;
 394 err_map_outb:
 395         kfree(map);
 396         return ret;
 397 }
 398
 399 static int
 400 rio_mport_get_outbound_mapping(struct mport_dev *md, struct file *filp,
 401                                u16 rioid, u64 raddr, u32 size,
 402                                dma_addr_t *paddr)
 403 {
 404         struct rio_mport_mapping *map;
 405         int err = -ENOMEM;
 406
 407         mutex_lock(&md->buf_mutex);
 408         list_for_each_entry(map, &md->mappings, node) {
 409                 if (map->dir != MAP_OUTBOUND)
 410                         continue;
 411                 if (rioid == map->rioid &&
 412                     raddr == map->rio_addr && size == map->size) {
 413                         *paddr = map->phys_addr;
 414                         err = 0;
 415                         break;
 416                 } else if (rioid == map->rioid &&
 417                            raddr < (map->rio_addr + map->size - 1) &&
 418                            (raddr + size) > map->rio_addr) {
 419                         err = -EBUSY;
 420                         break;
 421                 }
 422         }
 423
 424         /* If not found, create new */
 425         if (err == -ENOMEM)
 426                 err = rio_mport_create_outbound_mapping(md, filp, rioid, raddr,
 427                                                 size, paddr);
 428         mutex_unlock(&md->buf_mutex);
 429         return err;
 430 }
 431
 432 static int rio_mport_obw_map(struct file *filp, void __user *arg)
 433 {
 434         struct mport_cdev_priv *priv = filp->private_data;
 435         struct mport_dev *data = priv->md;
 436         struct rio_mmap map;
 437         dma_addr_t paddr;
 438         int ret;
 439
 440         if (unlikely(copy_from_user(&map, arg, sizeof(map))))
 441                 return -EFAULT;
 442
 443         rmcd_debug(OBW, "did=%d ra=0x%llx sz=0x%llx",
 444                    map.rioid, map.rio_addr, map.length);
 445
 446         ret = rio_mport_get_outbound_mapping(data, filp, map.rioid,
 447                                              map.rio_addr, map.length, &paddr);
 448         if (ret < 0) {
 449                 rmcd_error("Failed to set OBW err= %d", ret);
 450                 return ret;
 451         }
 452
 453         map.handle = paddr;
 454
 455         if (unlikely(copy_to_user(arg, &map, sizeof(map))))
 456                 return -EFAULT;
 457         return 0;
 458 }
 459
 460 /*
 461  * rio_mport_obw_free() - unmap an OutBound Window from RapidIO address space
 462  *
 463  * @priv: driver private data
 464  * @arg:  buffer handle returned by allocation routine
 465  */
 466 static int rio_mport_obw_free(struct file *filp, void __user *arg)
 467 {
 468         struct mport_cdev_priv *priv = filp->private_data;
 469         struct mport_dev *md = priv->md;
 470         u64 handle;
 471         struct rio_mport_mapping *map, *_map;
 472
 473         if (!md->mport->ops->unmap_outb)
 474                 return -EPROTONOSUPPORT;
 475
 476         if (copy_from_user(&handle, arg, sizeof(handle)))
 477                 return -EFAULT;
 478
 479         rmcd_debug(OBW, "h=0x%llx", handle);
 480
 481         mutex_lock(&md->buf_mutex);
 482         list_for_each_entry_safe(map, _map, &md->mappings, node) {
 483                 if (map->dir == MAP_OUTBOUND && map->phys_addr == handle) {
 484                         if (map->filp == filp) {
 485                                 rmcd_debug(OBW, "kref_put h=0x%llx", handle);
 486                                 map->filp = NULL;
 487                                 kref_put(&map->ref, mport_release_mapping);
 488                         }
 489                         break;
 490                 }
 491         }
 492         mutex_unlock(&md->buf_mutex);
 493
 494         return 0;
 495 }
 496
 497 /*
 498  * maint_hdid_set() - Set the host Device ID
 499  * @priv: driver private data
 500  * @arg:        Device Id
 501  */
 502 static int maint_hdid_set(struct mport_cdev_priv *priv, void __user *arg)
 503 {
 504         struct mport_dev *md = priv->md;
 505         u16 hdid;
 506
 507         if (copy_from_user(&hdid, arg, sizeof(hdid)))
 508                 return -EFAULT;
 509
 510         md->mport->host_deviceid = hdid;
 511         md->properties.hdid = hdid;
 512         rio_local_set_device_id(md->mport, hdid);
 513
 514         rmcd_debug(MPORT, "Set host device Id to %d", hdid);
 515
 516         return 0;
 517 }
 518
 519 /*
 520  * maint_comptag_set() - Set the host Component Tag
 521  * @priv: driver private data
 522  * @arg:        Component Tag
 523  */
 524 static int maint_comptag_set(struct mport_cdev_priv *priv, void __user *arg)
 525 {
 526         struct mport_dev *md = priv->md;
 527         u32 comptag;
 528
 529         if (copy_from_user(&comptag, arg, sizeof(comptag)))
 530                 return -EFAULT;
 531
 532         rio_local_write_config_32(md->mport, RIO_COMPONENT_TAG_CSR, comptag);
 533
 534         rmcd_debug(MPORT, "Set host Component Tag to %d", comptag);
 535
 536         return 0;
 537 }
 538
 539 #ifdef CONFIG_RAPIDIO_DMA_ENGINE
 540
 541 struct mport_dma_req {
 542         struct list_head node;
 543         struct file *filp;
 544         struct mport_cdev_priv *priv;
 545         enum rio_transfer_sync sync;
 546         struct sg_table sgt;
 547         struct page **page_list;
 548         unsigned int nr_pages;
 549         struct rio_mport_mapping *map;
 550         struct dma_chan *dmach;
 551         enum dma_data_direction dir;
 552         dma_cookie_t cookie;
 553         enum dma_status status;
 554         struct completion req_comp;
 555 };
 556
 557 struct mport_faf_work {
 558         struct work_struct work;
 559         struct mport_dma_req *req;
 560 };
 561
 562 static void mport_release_def_dma(struct kref *dma_ref)
 563 {
 564         struct mport_dev *md =
 565                         container_of(dma_ref, struct mport_dev, dma_ref);
 566
 567         rmcd_debug(EXIT, "DMA_%d", md->dma_chan->chan_id);
 568         rio_release_dma(md->dma_chan);
 569         md->dma_chan = NULL;
 570 }
 571
 572 static void mport_release_dma(struct kref *dma_ref)
 573 {
 574         struct mport_cdev_priv *priv =
 575                         container_of(dma_ref, struct mport_cdev_priv, dma_ref);
 576
 577         rmcd_debug(EXIT, "DMA_%d", priv->dmach->chan_id);
 578         complete(&priv->comp);
 579 }
 580
 581 static void dma_req_free(struct mport_dma_req *req)
 582 {
 583         struct mport_cdev_priv *priv = req->priv;
 584         unsigned int i;
 585
 586         dma_unmap_sg(req->dmach->device->dev,
 587                      req->sgt.sgl, req->sgt.nents, req->dir);
 588         sg_free_table(&req->sgt);
 589         if (req->page_list) {
 590                 for (i = 0; i < req->nr_pages; i++)
 591                         put_page(req->page_list[i]);
 592                 kfree(req->page_list);
 593         }
 594
 595         if (req->map) {
 596                 mutex_lock(&req->map->md->buf_mutex);
 597                 kref_put(&req->map->ref, mport_release_mapping);
 598                 mutex_unlock(&req->map->md->buf_mutex);
 599         }
 600
 601         kref_put(&priv->dma_ref, mport_release_dma);
 602
 603         kfree(req);
 604 }
 605
 606 static void dma_xfer_callback(void *param)
 607 {
 608         struct mport_dma_req *req = (struct mport_dma_req *)param;
 609         struct mport_cdev_priv *priv = req->priv;
 610
 611         req->status = dma_async_is_tx_complete(priv->dmach, req->cookie,
 612                                                NULL, NULL);
 613         complete(&req->req_comp);
 614 }
 615
 616 static void dma_faf_cleanup(struct work_struct *_work)
 617 {
 618         struct mport_faf_work *work = container_of(_work,
 619                                                 struct mport_faf_work, work);
 620         struct mport_dma_req *req = work->req;
 621
 622         dma_req_free(req);
 623         kfree(work);
 624 }
 625
 626 static void dma_faf_callback(void *param)
 627 {
 628         struct mport_dma_req *req = (struct mport_dma_req *)param;
 629         struct mport_faf_work *work;
 630
 631         work = kmalloc(sizeof(*work), GFP_ATOMIC);
 632         if (!work)
 633                 return;
 634
 635         INIT_WORK(&work->work, dma_faf_cleanup);
 636         work->req = req;
 637         queue_work(dma_wq, &work->work);
 638 }
 639
 640 /*
 641  * prep_dma_xfer() - Configure and send request to DMAengine to prepare DMA
 642  *                   transfer object.
 643  * Returns pointer to DMA transaction descriptor allocated by DMA driver on
 644  * success or ERR_PTR (and/or NULL) if failed. Caller must check returned
 645  * non-NULL pointer using IS_ERR macro.
 646  */
 647 static struct dma_async_tx_descriptor
 648 *prep_dma_xfer(struct dma_chan *chan, struct rio_transfer_io *transfer,
 649         struct sg_table *sgt, int nents, enum dma_transfer_direction dir,
 650         enum dma_ctrl_flags flags)
 651 {
 652         struct rio_dma_data tx_data;
 653
 654         tx_data.sg = sgt->sgl;
 655         tx_data.sg_len = nents;
 656         tx_data.rio_addr_u = 0;
 657         tx_data.rio_addr = transfer->rio_addr;
 658         if (dir == DMA_MEM_TO_DEV) {
 659                 switch (transfer->method) {
 660                 case RIO_EXCHANGE_NWRITE:
 661                         tx_data.wr_type = RDW_ALL_NWRITE;
 662                         break;
 663                 case RIO_EXCHANGE_NWRITE_R_ALL:
 664                         tx_data.wr_type = RDW_ALL_NWRITE_R;
 665                         break;
 666                 case RIO_EXCHANGE_NWRITE_R:
 667                         tx_data.wr_type = RDW_LAST_NWRITE_R;
 668                         break;
 669                 case RIO_EXCHANGE_DEFAULT:
 670                         tx_data.wr_type = RDW_DEFAULT;
 671                         break;
 672                 default:
 673                         return ERR_PTR(-EINVAL);
 674                 }
 675         }
 676
 677         return rio_dma_prep_xfer(chan, transfer->rioid, &tx_data, dir, flags);
 678 }
 679
 680 /* Request DMA channel associated with this mport device.
 681  * Try to request DMA channel for every new process that opened given
 682  * mport. If a new DMA channel is not available use default channel
 683  * which is the first DMA channel opened on mport device.
 684  */
 685 static int get_dma_channel(struct mport_cdev_priv *priv)
 686 {
 687         mutex_lock(&priv->dma_lock);
 688         if (!priv->dmach) {
 689                 priv->dmach = rio_request_mport_dma(priv->md->mport);
 690                 if (!priv->dmach) {
 691                         /* Use default DMA channel if available */
 692                         if (priv->md->dma_chan) {
 693                                 priv->dmach = priv->md->dma_chan;
 694                                 kref_get(&priv->md->dma_ref);
 695                         } else {
 696                                 rmcd_error("Failed to get DMA channel");
 697                                 mutex_unlock(&priv->dma_lock);
 698                                 return -ENODEV;
 699                         }
 700                 } else if (!priv->md->dma_chan) {
 701                         /* Register default DMA channel if we do not have one */
 702                         priv->md->dma_chan = priv->dmach;
 703                         kref_init(&priv->md->dma_ref);
 704                         rmcd_debug(DMA, "Register DMA_chan %d as default",
 705                                    priv->dmach->chan_id);
 706                 }
 707
 708                 kref_init(&priv->dma_ref);
 709                 init_completion(&priv->comp);
 710         }
 711
 712         kref_get(&priv->dma_ref);
 713         mutex_unlock(&priv->dma_lock);
 714         return 0;
 715 }
 716
 717 static void put_dma_channel(struct mport_cdev_priv *priv)
 718 {
 719         kref_put(&priv->dma_ref, mport_release_dma);
 720 }
 721
 722 /*
 723  * DMA transfer functions
 724  */
 725 static int do_dma_request(struct mport_dma_req *req,
 726                           struct rio_transfer_io *xfer,
 727                           enum rio_transfer_sync sync, int nents)
 728 {
 729         struct mport_cdev_priv *priv;
 730         struct sg_table *sgt;
 731         struct dma_chan *chan;
 732         struct dma_async_tx_descriptor *tx;
 733         dma_cookie_t cookie;
 734         unsigned long tmo = msecs_to_jiffies(dma_timeout);
 735         enum dma_transfer_direction dir;
 736         long wret;
 737         int ret = 0;
 738
 739         priv = req->priv;
 740         sgt = &req->sgt;
 741
 742         chan = priv->dmach;
 743         dir = (req->dir == DMA_FROM_DEVICE) ? DMA_DEV_TO_MEM : DMA_MEM_TO_DEV;
 744
 745         rmcd_debug(DMA, "%s(%d) uses %s for DMA_%s",
 746                    current->comm, task_pid_nr(current),
 747                    dev_name(&chan->dev->device),
 748                    (dir == DMA_DEV_TO_MEM)?"READ":"WRITE");
 749
 750         /* Initialize DMA transaction request */
 751         tx = prep_dma_xfer(chan, xfer, sgt, nents, dir,
 752                            DMA_CTRL_ACK | DMA_PREP_INTERRUPT);
 753
 754         if (!tx) {
 755                 rmcd_debug(DMA, "prep error for %s A:0x%llx L:0x%llx",
 756                         (dir == DMA_DEV_TO_MEM)?"READ":"WRITE",
 757                         xfer->rio_addr, xfer->length);
 758                 ret = -EIO;
 759                 goto err_out;
 760         } else if (IS_ERR(tx)) {
 761                 ret = PTR_ERR(tx);
 762                 rmcd_debug(DMA, "prep error %d for %s A:0x%llx L:0x%llx", ret,
 763                         (dir == DMA_DEV_TO_MEM)?"READ":"WRITE",
 764                         xfer->rio_addr, xfer->length);
 765                 goto err_out;
 766         }
 767
 768         if (sync == RIO_TRANSFER_FAF)
 769                 tx->callback = dma_faf_callback;
 770         else
 771                 tx->callback = dma_xfer_callback;
 772         tx->callback_param = req;
 773
 774         req->dmach = chan;
 775         req->sync = sync;
 776         req->status = DMA_IN_PROGRESS;
 777         init_completion(&req->req_comp);
 778
 779         cookie = dmaengine_submit(tx);
 780         req->cookie = cookie;
 781
 782         rmcd_debug(DMA, "pid=%d DMA_%s tx_cookie = %d", task_pid_nr(current),
 783                    (dir == DMA_DEV_TO_MEM)?"READ":"WRITE", cookie);
 784
 785         if (dma_submit_error(cookie)) {
 786                 rmcd_error("submit err=%d (addr:0x%llx len:0x%llx)",
 787                            cookie, xfer->rio_addr, xfer->length);
 788                 ret = -EIO;
 789                 goto err_out;
 790         }
 791
 792         dma_async_issue_pending(chan);
 793
 794         if (sync == RIO_TRANSFER_ASYNC) {
 795                 spin_lock(&priv->req_lock);
 796                 list_add_tail(&req->node, &priv->async_list);
 797                 spin_unlock(&priv->req_lock);
 798                 return cookie;
 799         } else if (sync == RIO_TRANSFER_FAF)
 800                 return 0;
 801
 802         wret = wait_for_completion_interruptible_timeout(&req->req_comp, tmo);
 803
 804         if (wret == 0) {
 805                 /* Timeout on wait occurred */
 806                 rmcd_error("%s(%d) timed out waiting for DMA_%s %d",
 807                        current->comm, task_pid_nr(current),
 808                        (dir == DMA_DEV_TO_MEM)?"READ":"WRITE", cookie);
 809                 return -ETIMEDOUT;
 810         } else if (wret == -ERESTARTSYS) {
 811                 /* Wait_for_completion was interrupted by a signal but DMA may
 812                  * be in progress
 813                  */
 814                 rmcd_error("%s(%d) wait for DMA_%s %d was interrupted",
 815                         current->comm, task_pid_nr(current),
 816                         (dir == DMA_DEV_TO_MEM)?"READ":"WRITE", cookie);
 817                 return -EINTR;
 818         }
 819
 820         if (req->status != DMA_COMPLETE) {
 821                 /* DMA transaction completion was signaled with error */
 822                 rmcd_error("%s(%d) DMA_%s %d completed with status %d (ret=%d)",
 823                         current->comm, task_pid_nr(current),
 824                         (dir == DMA_DEV_TO_MEM)?"READ":"WRITE",
 825                         cookie, req->status, ret);
 826                 ret = -EIO;
 827         }
 828
 829 err_out:
 830         return ret;
 831 }
 832
 833 /*
 834  * rio_dma_transfer() - Perform RapidIO DMA data transfer to/from
 835  *                      the remote RapidIO device
 836  * @filp: file pointer associated with the call
 837  * @transfer_mode: DMA transfer mode
 838  * @sync: synchronization mode
 839  * @dir: DMA transfer direction (DMA_MEM_TO_DEV = write OR
 840  *                               DMA_DEV_TO_MEM = read)
 841  * @xfer: data transfer descriptor structure
 842  */
 843 static int
 844 rio_dma_transfer(struct file *filp, u32 transfer_mode,
 845                  enum rio_transfer_sync sync, enum dma_data_direction dir,
 846                  struct rio_transfer_io *xfer)
 847 {
 848         struct mport_cdev_priv *priv = filp->private_data;
 849         unsigned long nr_pages = 0;
 850         struct page **page_list = NULL;
 851         struct mport_dma_req *req;
 852         struct mport_dev *md = priv->md;
 853         struct dma_chan *chan;
 854         int i, ret;
 855         int nents;
 856
 857         if (xfer->length == 0)
 858                 return -EINVAL;
 859         req = kzalloc(sizeof(*req), GFP_KERNEL);
 860         if (!req)
 861                 return -ENOMEM;
 862
 863         ret = get_dma_channel(priv);
 864         if (ret) {
 865                 kfree(req);
 866                 return ret;
 867         }
 868
 869         /*
 870          * If parameter loc_addr != NULL, we are transferring data from/to
 871          * data buffer allocated in user-space: lock in memory user-space
 872          * buffer pages and build an SG table for DMA transfer request
 873          *
 874          * Otherwise (loc_addr == NULL) contiguous kernel-space buffer is
 875          * used for DMA data transfers: build single entry SG table using
 876          * offset within the internal buffer specified by handle parameter.
 877          */
 878         if (xfer->loc_addr) {
 879                 unsigned long offset;
 880                 long pinned;
 881
 882                 offset = (unsigned long)(uintptr_t)xfer->loc_addr & ~PAGE_MASK;
 883                 nr_pages = PAGE_ALIGN(xfer->length + offset) >> PAGE_SHIFT;
 884
 885                 page_list = kmalloc_array(nr_pages,
 886                                           sizeof(*page_list), GFP_KERNEL);
 887                 if (page_list == NULL) {
 888                         ret = -ENOMEM;
 889                         goto err_req;
 890                 }
 891
 892                 down_read(&current->mm->mmap_sem);
 893                 pinned = get_user_pages(
 894                                 (unsigned long)xfer->loc_addr & PAGE_MASK,
 895                                 nr_pages,
 896                                 dir == DMA_FROM_DEVICE ? FOLL_WRITE : 0,
 897                                 page_list, NULL);
 898                 up_read(&current->mm->mmap_sem);
 899
 900                 if (pinned != nr_pages) {
 901                         if (pinned < 0) {
 902                                 rmcd_error("get_user_pages err=%ld", pinned);
 903                                 nr_pages = 0;
 904                         } else {
 905                                 rmcd_error("pinned %ld out of %ld pages",
 906                                            pinned, nr_pages);
 907                                 /*
 908                                  * Set nr_pages up to mean "how many pages to unpin, in
 909                                  * the error handler:
 910                                  */
 911                                 nr_pages = pinned;
 912                         }
 913                         ret = -EFAULT;
 914                         goto err_pg;
 915                 }
 916
 917                 ret = sg_alloc_table_from_pages(&req->sgt, page_list, nr_pages,
 918                                         offset, xfer->length, GFP_KERNEL);
 919                 if (ret) {
 920                         rmcd_error("sg_alloc_table failed with err=%d", ret);
 921                         goto err_pg;
 922                 }
 923
 924                 req->page_list = page_list;
 925                 req->nr_pages = nr_pages;
 926         } else {
 927                 dma_addr_t baddr;
 928                 struct rio_mport_mapping *map;
 929
 930                 baddr = (dma_addr_t)xfer->handle;
 931
 932                 mutex_lock(&md->buf_mutex);
 933                 list_for_each_entry(map, &md->mappings, node) {
 934                         if (baddr >= map->phys_addr &&
 935                             baddr < (map->phys_addr + map->size)) {
 936                                 kref_get(&map->ref);
 937                                 req->map = map;
 938                                 break;
 939                         }
 940                 }
 941                 mutex_unlock(&md->buf_mutex);
 942
 943                 if (req->map == NULL) {
 944                         ret = -ENOMEM;
 945                         goto err_req;
 946                 }
 947
 948                 if (xfer->length + xfer->offset > map->size) {
 949                         ret = -EINVAL;
 950                         goto err_req;
 951                 }
 952
 953                 ret = sg_alloc_table(&req->sgt, 1, GFP_KERNEL);
 954                 if (unlikely(ret)) {
 955                         rmcd_error("sg_alloc_table failed for internal buf");
 956                         goto err_req;
 957                 }
 958
 959                 sg_set_buf(req->sgt.sgl,
 960                            map->virt_addr + (baddr - map->phys_addr) +
 961                                 xfer->offset, xfer->length);
 962         }
 963
 964         req->dir = dir;
 965         req->filp = filp;
 966         req->priv = priv;
 967         chan = priv->dmach;
 968
 969         nents = dma_map_sg(chan->device->dev,
 970                            req->sgt.sgl, req->sgt.nents, dir);
 971         if (nents == -EFAULT) {
 972                 rmcd_error("Failed to map SG list");
 973                 ret = -EFAULT;
 974                 goto err_pg;
 975         }
 976
 977         ret = do_dma_request(req, xfer, sync, nents);
 978
 979         if (ret >= 0) {
 980                 if (sync == RIO_TRANSFER_SYNC)
 981                         goto sync_out;
 982                 return ret; /* return ASYNC cookie */
 983         }
 984
 985         if (ret == -ETIMEDOUT || ret == -EINTR) {
 986                 /*
 987                  * This can happen only in case of SYNC transfer.
 988                  * Do not free unfinished request structure immediately.
 989                  * Place it into pending list and deal with it later
 990                  */
 991                 spin_lock(&priv->req_lock);
 992                 list_add_tail(&req->node, &priv->pend_list);
 993                 spin_unlock(&priv->req_lock);
 994                 return ret;
 995         }
 996
 997
 998         rmcd_debug(DMA, "do_dma_request failed with err=%d", ret);
 999 sync_out:
1000         dma_unmap_sg(chan->device->dev, req->sgt.sgl, req->sgt.nents, dir);
1001         sg_free_table(&req->sgt);
1002 err_pg:
1003         if (page_list) {
1004                 for (i = 0; i < nr_pages; i++)
1005                         put_page(page_list[i]);
1006                 kfree(page_list);
1007         }
1008 err_req:
1009         if (req->map) {
1010                 mutex_lock(&md->buf_mutex);
1011                 kref_put(&req->map->ref, mport_release_mapping);
1012                 mutex_unlock(&md->buf_mutex);
1013         }
1014         put_dma_channel(priv);
1015         kfree(req);
1016         return ret;
1017 }
1018
1019 static int rio_mport_transfer_ioctl(struct file *filp, void __user *arg)
1020 {
1021         struct mport_cdev_priv *priv = filp->private_data;
1022         struct rio_transaction transaction;
1023         struct rio_transfer_io *transfer;
1024         enum dma_data_direction dir;
1025         int i, ret = 0;
1026
1027         if (unlikely(copy_from_user(&transaction, arg, sizeof(transaction))))
1028                 return -EFAULT;
1029
1030         if (transaction.count != 1) /* only single transfer for now */
1031                 return -EINVAL;
1032
1033         if ((transaction.transfer_mode &
1034              priv->md->properties.transfer_mode) == 0)
1035                 return -ENODEV;
1036
1037         transfer = vmalloc(transaction.count * sizeof(*transfer));
1038         if (!transfer)
1039                 return -ENOMEM;
1040
1041         if (unlikely(copy_from_user(transfer,
1042                                     (void __user *)(uintptr_t)transaction.block,
1043                                     transaction.count * sizeof(*transfer)))) {
1044                 ret = -EFAULT;
1045                 goto out_free;
1046         }
1047
1048         dir = (transaction.dir == RIO_TRANSFER_DIR_READ) ?
1049                                         DMA_FROM_DEVICE : DMA_TO_DEVICE;
1050         for (i = 0; i < transaction.count && ret == 0; i++)
1051                 ret = rio_dma_transfer(filp, transaction.transfer_mode,
1052                         transaction.sync, dir, &transfer[i]);
1053
1054         if (unlikely(copy_to_user((void __user *)(uintptr_t)transaction.block,
1055                                   transfer,
1056                                   transaction.count * sizeof(*transfer))))
1057                 ret = -EFAULT;
1058
1059 out_free:
1060         vfree(transfer);
1061
1062         return ret;
1063 }
1064
1065 static int rio_mport_wait_for_async_dma(struct file *filp, void __user *arg)
1066 {
1067         struct mport_cdev_priv *priv;
1068         struct mport_dev *md;
1069         struct rio_async_tx_wait w_param;
1070         struct mport_dma_req *req;
1071         dma_cookie_t cookie;
1072         unsigned long tmo;
1073         long wret;
1074         int found = 0;
1075         int ret;
1076
1077         priv = (struct mport_cdev_priv *)filp->private_data;
1078         md = priv->md;
1079
1080         if (unlikely(copy_from_user(&w_param, arg, sizeof(w_param))))
1081                 return -EFAULT;
1082
1083         cookie = w_param.token;
1084         if (w_param.timeout)
1085                 tmo = msecs_to_jiffies(w_param.timeout);
1086         else /* Use default DMA timeout */
1087                 tmo = msecs_to_jiffies(dma_timeout);
1088
1089         spin_lock(&priv->req_lock);
1090         list_for_each_entry(req, &priv->async_list, node) {
1091                 if (req->cookie == cookie) {
1092                         list_del(&req->node);
1093                         found = 1;
1094                         break;
1095                 }
1096         }
1097         spin_unlock(&priv->req_lock);
1098
1099         if (!found)
1100                 return -EAGAIN;
1101
1102         wret = wait_for_completion_interruptible_timeout(&req->req_comp, tmo);
1103
1104         if (wret == 0) {
1105                 /* Timeout on wait occurred */
1106                 rmcd_error("%s(%d) timed out waiting for ASYNC DMA_%s",
1107                        current->comm, task_pid_nr(current),
1108                        (req->dir == DMA_FROM_DEVICE)?"READ":"WRITE");
1109                 ret = -ETIMEDOUT;
1110                 goto err_tmo;
1111         } else if (wret == -ERESTARTSYS) {
1112                 /* Wait_for_completion was interrupted by a signal but DMA may
1113                  * be still in progress
1114                  */
1115                 rmcd_error("%s(%d) wait for ASYNC DMA_%s was interrupted",
1116                         current->comm, task_pid_nr(current),
1117                         (req->dir == DMA_FROM_DEVICE)?"READ":"WRITE");
1118                 ret = -EINTR;
1119                 goto err_tmo;
1120         }
1121
1122         if (req->status != DMA_COMPLETE) {
1123                 /* DMA transaction completion signaled with transfer error */
1124                 rmcd_error("%s(%d) ASYNC DMA_%s completion with status %d",
1125                         current->comm, task_pid_nr(current),
1126                         (req->dir == DMA_FROM_DEVICE)?"READ":"WRITE",
1127                         req->status);
1128                 ret = -EIO;
1129         } else
1130                 ret = 0;
1131
1132         if (req->status != DMA_IN_PROGRESS && req->status != DMA_PAUSED)
1133                 dma_req_free(req);
1134
1135         return ret;
1136
1137 err_tmo:
1138         /* Return request back into async queue */
1139         spin_lock(&priv->req_lock);
1140         list_add_tail(&req->node, &priv->async_list);
1141         spin_unlock(&priv->req_lock);
1142         return ret;
1143 }
1144
1145 static int rio_mport_create_dma_mapping(struct mport_dev *md, struct file *filp,
1146                         u64 size, struct rio_mport_mapping **mapping)
1147 {
1148         struct rio_mport_mapping *map;
1149
1150         map = kzalloc(sizeof(*map), GFP_KERNEL);
1151         if (map == NULL)
1152                 return -ENOMEM;
1153
1154         map->virt_addr = dma_alloc_coherent(md->mport->dev.parent, size,
1155                                             &map->phys_addr, GFP_KERNEL);
1156         if (map->virt_addr == NULL) {
1157                 kfree(map);
1158                 return -ENOMEM;
1159         }
1160
1161         map->dir = MAP_DMA;
1162         map->size = size;
1163         map->filp = filp;
1164         map->md = md;
1165         kref_init(&map->ref);
1166         mutex_lock(&md->buf_mutex);
1167         list_add_tail(&map->node, &md->mappings);
1168         mutex_unlock(&md->buf_mutex);
1169         *mapping = map;
1170
1171         return 0;
1172 }
1173
1174 static int rio_mport_alloc_dma(struct file *filp, void __user *arg)
1175 {
1176         struct mport_cdev_priv *priv = filp->private_data;
1177         struct mport_dev *md = priv->md;
1178         struct rio_dma_mem map;
1179         struct rio_mport_mapping *mapping = NULL;
1180         int ret;
1181
1182         if (unlikely(copy_from_user(&map, arg, sizeof(map))))
1183                 return -EFAULT;
1184
1185         ret = rio_mport_create_dma_mapping(md, filp, map.length, &mapping);
1186         if (ret)
1187                 return ret;
1188
1189         map.dma_handle = mapping->phys_addr;
1190
1191         if (unlikely(copy_to_user(arg, &map, sizeof(map)))) {
1192                 mutex_lock(&md->buf_mutex);
1193                 kref_put(&mapping->ref, mport_release_mapping);
1194                 mutex_unlock(&md->buf_mutex);
1195                 return -EFAULT;
1196         }
1197
1198         return 0;
1199 }
1200
1201 static int rio_mport_free_dma(struct file *filp, void __user *arg)
1202 {
1203         struct mport_cdev_priv *priv = filp->private_data;
1204         struct mport_dev *md = priv->md;
1205         u64 handle;
1206         int ret = -EFAULT;
1207         struct rio_mport_mapping *map, *_map;
1208
1209         if (copy_from_user(&handle, arg, sizeof(handle)))
1210                 return -EFAULT;
1211         rmcd_debug(EXIT, "filp=%p", filp);
1212
1213         mutex_lock(&md->buf_mutex);
1214         list_for_each_entry_safe(map, _map, &md->mappings, node) {
1215                 if (map->dir == MAP_DMA && map->phys_addr == handle &&
1216                     map->filp == filp) {
1217                         kref_put(&map->ref, mport_release_mapping);
1218                         ret = 0;
1219                         break;
1220                 }
1221         }
1222         mutex_unlock(&md->buf_mutex);
1223
1224         if (ret == -EFAULT) {
1225                 rmcd_debug(DMA, "ERR no matching mapping");
1226                 return ret;
1227         }
1228
1229         return 0;
1230 }
1231 #else
1232 static int rio_mport_transfer_ioctl(struct file *filp, void *arg)
1233 {
1234         return -ENODEV;
1235 }
1236
1237 static int rio_mport_wait_for_async_dma(struct file *filp, void __user *arg)
1238 {
1239         return -ENODEV;
1240 }
1241
1242 static int rio_mport_alloc_dma(struct file *filp, void __user *arg)
1243 {
1244         return -ENODEV;
1245 }
1246
1247 static int rio_mport_free_dma(struct file *filp, void __user *arg)
1248 {
1249         return -ENODEV;
1250 }
1251 #endif /* CONFIG_RAPIDIO_DMA_ENGINE */
1252
1253 /*
1254  * Inbound/outbound memory mapping functions
1255  */
1256
1257 static int
1258 rio_mport_create_inbound_mapping(struct mport_dev *md, struct file *filp,
1259                                 u64 raddr, u64 size,
1260                                 struct rio_mport_mapping **mapping)
1261 {
1262         struct rio_mport *mport = md->mport;
1263         struct rio_mport_mapping *map;
1264         int ret;
1265
1266         /* rio_map_inb_region() accepts u32 size */
1267         if (size > 0xffffffff)
1268                 return -EINVAL;
1269
1270         map = kzalloc(sizeof(*map), GFP_KERNEL);
1271         if (map == NULL)
1272                 return -ENOMEM;
1273
1274         map->virt_addr = dma_alloc_coherent(mport->dev.parent, size,
1275                                             &map->phys_addr, GFP_KERNEL);
1276         if (map->virt_addr == NULL) {
1277                 ret = -ENOMEM;
1278                 goto err_dma_alloc;
1279         }
1280
1281         if (raddr == RIO_MAP_ANY_ADDR)
1282                 raddr = map->phys_addr;
1283         ret = rio_map_inb_region(mport, map->phys_addr, raddr, (u32)size, 0);
1284         if (ret < 0)
1285                 goto err_map_inb;
1286
1287         map->dir = MAP_INBOUND;
1288         map->rio_addr = raddr;
1289         map->size = size;
1290         map->filp = filp;
1291         map->md = md;
1292         kref_init(&map->ref);
1293         mutex_lock(&md->buf_mutex);
1294         list_add_tail(&map->node, &md->mappings);
1295         mutex_unlock(&md->buf_mutex);
1296         *mapping = map;
1297         return 0;
1298
1299 err_map_inb:
1300         dma_free_coherent(mport->dev.parent, size,
1301                           map->virt_addr, map->phys_addr);
1302 err_dma_alloc:
1303         kfree(map);
1304         return ret;
1305 }
1306
1307 static int
1308 rio_mport_get_inbound_mapping(struct mport_dev *md, struct file *filp,
1309                               u64 raddr, u64 size,
1310                               struct rio_mport_mapping **mapping)
1311 {
1312         struct rio_mport_mapping *map;
1313         int err = -ENOMEM;
1314
1315         if (raddr == RIO_MAP_ANY_ADDR)
1316                 goto get_new;
1317
1318         mutex_lock(&md->buf_mutex);
1319         list_for_each_entry(map, &md->mappings, node) {
1320                 if (map->dir != MAP_INBOUND)
1321                         continue;
1322                 if (raddr == map->rio_addr && size == map->size) {
1323                         /* allow exact match only */
1324                         *mapping = map;
1325                         err = 0;
1326                         break;
1327                 } else if (raddr < (map->rio_addr + map->size - 1) &&
1328                            (raddr + size) > map->rio_addr) {
1329                         err = -EBUSY;
1330                         break;
1331                 }
1332         }
1333         mutex_unlock(&md->buf_mutex);
1334
1335         if (err != -ENOMEM)
1336                 return err;
1337 get_new:
1338         /* not found, create new */
1339         return rio_mport_create_inbound_mapping(md, filp, raddr, size, mapping);
1340 }
1341
1342 static int rio_mport_map_inbound(struct file *filp, void __user *arg)
1343 {
1344         struct mport_cdev_priv *priv = filp->private_data;
1345         struct mport_dev *md = priv->md;
1346         struct rio_mmap map;
1347         struct rio_mport_mapping *mapping = NULL;
1348         int ret;
1349
1350         if (!md->mport->ops->map_inb)
1351                 return -EPROTONOSUPPORT;
1352         if (unlikely(copy_from_user(&map, arg, sizeof(map))))
1353                 return -EFAULT;
1354
1355         rmcd_debug(IBW, "%s filp=%p", dev_name(&priv->md->dev), filp);
1356
1357         ret = rio_mport_get_inbound_mapping(md, filp, map.rio_addr,
1358                                             map.length, &mapping);
1359         if (ret)
1360                 return ret;
1361
1362         map.handle = mapping->phys_addr;
1363         map.rio_addr = mapping->rio_addr;
1364
1365         if (unlikely(copy_to_user(arg, &map, sizeof(map)))) {
1366                 /* Delete mapping if it was created by this request */
1367                 if (ret == 0 && mapping->filp == filp) {
1368                         mutex_lock(&md->buf_mutex);
1369                         kref_put(&mapping->ref, mport_release_mapping);
1370                         mutex_unlock(&md->buf_mutex);
1371                 }
1372                 return -EFAULT;
1373         }
1374
1375         return 0;
1376 }
1377
1378 /*
1379  * rio_mport_inbound_free() - unmap from RapidIO address space and free
1380  *                    previously allocated inbound DMA coherent buffer
1381  * @priv: driver private data
1382  * @arg:  buffer handle returned by allocation routine
1383  */
1384 static int rio_mport_inbound_free(struct file *filp, void __user *arg)
1385 {
1386         struct mport_cdev_priv *priv = filp->private_data;
1387         struct mport_dev *md = priv->md;
1388         u64 handle;
1389         struct rio_mport_mapping *map, *_map;
1390
1391         rmcd_debug(IBW, "%s filp=%p", dev_name(&priv->md->dev), filp);
1392
1393         if (!md->mport->ops->unmap_inb)
1394                 return -EPROTONOSUPPORT;
1395
1396         if (copy_from_user(&handle, arg, sizeof(handle)))
1397                 return -EFAULT;
1398
1399         mutex_lock(&md->buf_mutex);
1400         list_for_each_entry_safe(map, _map, &md->mappings, node) {
1401                 if (map->dir == MAP_INBOUND && map->phys_addr == handle) {
1402                         if (map->filp == filp) {
1403                                 map->filp = NULL;
1404                                 kref_put(&map->ref, mport_release_mapping);
1405                         }
1406                         break;
1407                 }
1408         }
1409         mutex_unlock(&md->buf_mutex);
1410
1411         return 0;
1412 }
1413
1414 /*
1415  * maint_port_idx_get() - Get the port index of the mport instance
1416  * @priv: driver private data
1417  * @arg:  port index
1418  */
1419 static int maint_port_idx_get(struct mport_cdev_priv *priv, void __user *arg)
1420 {
1421         struct mport_dev *md = priv->md;
1422         u32 port_idx = md->mport->index;
1423
1424         rmcd_debug(MPORT, "port_index=%d", port_idx);
1425
1426         if (copy_to_user(arg, &port_idx, sizeof(port_idx)))
1427                 return -EFAULT;
1428
1429         return 0;
1430 }
1431
1432 static int rio_mport_add_event(struct mport_cdev_priv *priv,
1433                                struct rio_event *event)
1434 {
1435         int overflow;
1436
1437         if (!(priv->event_mask & event->header))
1438                 return -EACCES;
1439
1440         spin_lock(&priv->fifo_lock);
1441         overflow = kfifo_avail(&priv->event_fifo) < sizeof(*event)
1442                 || kfifo_in(&priv->event_fifo, (unsigned char *)event,
1443                         sizeof(*event)) != sizeof(*event);
1444         spin_unlock(&priv->fifo_lock);
1445
1446         wake_up_interruptible(&priv->event_rx_wait);
1447
1448         if (overflow) {
1449                 dev_warn(&priv->md->dev, DRV_NAME ": event fifo overflow\n");
1450                 return -EBUSY;
1451         }
1452
1453         return 0;
1454 }
1455
1456 static void rio_mport_doorbell_handler(struct rio_mport *mport, void *dev_id,
1457                                        u16 src, u16 dst, u16 info)
1458 {
1459         struct mport_dev *data = dev_id;
1460         struct mport_cdev_priv *priv;
1461         struct rio_mport_db_filter *db_filter;
1462         struct rio_event event;
1463         int handled;
1464
1465         event.header = RIO_DOORBELL;
1466         event.u.doorbell.rioid = src;
1467         event.u.doorbell.payload = info;
1468
1469         handled = 0;
1470         spin_lock(&data->db_lock);
1471         list_for_each_entry(db_filter, &data->doorbells, data_node) {
1472                 if (((db_filter->filter.rioid == RIO_INVALID_DESTID ||
1473                       db_filter->filter.rioid == src)) &&
1474                       info >= db_filter->filter.low &&
1475                       info <= db_filter->filter.high) {
1476                         priv = db_filter->priv;
1477                         rio_mport_add_event(priv, &event);
1478                         handled = 1;
1479                 }
1480         }
1481         spin_unlock(&data->db_lock);
1482
1483         if (!handled)
1484                 dev_warn(&data->dev,
1485                         "%s: spurious DB received from 0x%x, info=0x%04x\n",
1486                         __func__, src, info);
1487 }
1488
1489 static int rio_mport_add_db_filter(struct mport_cdev_priv *priv,
1490                                    void __user *arg)
1491 {
1492         struct mport_dev *md = priv->md;
1493         struct rio_mport_db_filter *db_filter;
1494         struct rio_doorbell_filter filter;
1495         unsigned long flags;
1496         int ret;
1497
1498         if (copy_from_user(&filter, arg, sizeof(filter)))
1499                 return -EFAULT;
1500
1501         if (filter.low > filter.high)
1502                 return -EINVAL;
1503
1504         ret = rio_request_inb_dbell(md->mport, md, filter.low, filter.high,
1505                                     rio_mport_doorbell_handler);
1506         if (ret) {
1507                 rmcd_error("%s failed to register IBDB, err=%d",
1508                            dev_name(&md->dev), ret);
1509                 return ret;
1510         }
1511
1512         db_filter = kzalloc(sizeof(*db_filter), GFP_KERNEL);
1513         if (db_filter == NULL) {
1514                 rio_release_inb_dbell(md->mport, filter.low, filter.high);
1515                 return -ENOMEM;
1516         }
1517
1518         db_filter->filter = filter;
1519         db_filter->priv = priv;
1520         spin_lock_irqsave(&md->db_lock, flags);
1521         list_add_tail(&db_filter->priv_node, &priv->db_filters);
1522         list_add_tail(&db_filter->data_node, &md->doorbells);
1523         spin_unlock_irqrestore(&md->db_lock, flags);
1524
1525         return 0;
1526 }
1527
1528 static void rio_mport_delete_db_filter(struct rio_mport_db_filter *db_filter)
1529 {
1530         list_del(&db_filter->data_node);
1531         list_del(&db_filter->priv_node);
1532         kfree(db_filter);
1533 }
1534
1535 static int rio_mport_remove_db_filter(struct mport_cdev_priv *priv,
1536                                       void __user *arg)
1537 {
1538         struct rio_mport_db_filter *db_filter;
1539         struct rio_doorbell_filter filter;
1540         unsigned long flags;
1541         int ret = -EINVAL;
1542
1543         if (copy_from_user(&filter, arg, sizeof(filter)))
1544                 return -EFAULT;
1545
1546         if (filter.low > filter.high)
1547                 return -EINVAL;
1548
1549         spin_lock_irqsave(&priv->md->db_lock, flags);
1550         list_for_each_entry(db_filter, &priv->db_filters, priv_node) {
1551                 if (db_filter->filter.rioid == filter.rioid &&
1552                     db_filter->filter.low == filter.low &&
1553                     db_filter->filter.high == filter.high) {
1554                         rio_mport_delete_db_filter(db_filter);
1555                         ret = 0;
1556                         break;
1557                 }
1558         }
1559         spin_unlock_irqrestore(&priv->md->db_lock, flags);
1560
1561         if (!ret)
1562                 rio_release_inb_dbell(priv->md->mport, filter.low, filter.high);
1563
1564         return ret;
1565 }
1566
1567 static int rio_mport_match_pw(union rio_pw_msg *msg,
1568                               struct rio_pw_filter *filter)
1569 {
1570         if ((msg->em.comptag & filter->mask) < filter->low ||
1571                 (msg->em.comptag & filter->mask) > filter->high)
1572                 return 0;
1573         return 1;
1574 }
1575
1576 static int rio_mport_pw_handler(struct rio_mport *mport, void *context,
1577                                 union rio_pw_msg *msg, int step)
1578 {
1579         struct mport_dev *md = context;
1580         struct mport_cdev_priv *priv;
1581         struct rio_mport_pw_filter *pw_filter;
1582         struct rio_event event;
1583         int handled;
1584
1585         event.header = RIO_PORTWRITE;
1586         memcpy(event.u.portwrite.payload, msg->raw, RIO_PW_MSG_SIZE);
1587
1588         handled = 0;
1589         spin_lock(&md->pw_lock);
1590         list_for_each_entry(pw_filter, &md->portwrites, md_node) {
1591                 if (rio_mport_match_pw(msg, &pw_filter->filter)) {
1592                         priv = pw_filter->priv;
1593                         rio_mport_add_event(priv, &event);
1594                         handled = 1;
1595                 }
1596         }
1597         spin_unlock(&md->pw_lock);
1598
1599         if (!handled) {
1600                 printk_ratelimited(KERN_WARNING DRV_NAME
1601                         ": mport%d received spurious PW from 0x%08x\n",
1602                         mport->id, msg->em.comptag);
1603         }
1604
1605         return 0;
1606 }
1607
1608 static int rio_mport_add_pw_filter(struct mport_cdev_priv *priv,
1609                                    void __user *arg)
1610 {
1611         struct mport_dev *md = priv->md;
1612         struct rio_mport_pw_filter *pw_filter;
1613         struct rio_pw_filter filter;
1614         unsigned long flags;
1615         int hadd = 0;
1616
1617         if (copy_from_user(&filter, arg, sizeof(filter)))
1618                 return -EFAULT;
1619
1620         pw_filter = kzalloc(sizeof(*pw_filter), GFP_KERNEL);
1621         if (pw_filter == NULL)
1622                 return -ENOMEM;
1623
1624         pw_filter->filter = filter;
1625         pw_filter->priv = priv;
1626         spin_lock_irqsave(&md->pw_lock, flags);
1627         if (list_empty(&md->portwrites))
1628                 hadd = 1;
1629         list_add_tail(&pw_filter->priv_node, &priv->pw_filters);
1630         list_add_tail(&pw_filter->md_node, &md->portwrites);
1631         spin_unlock_irqrestore(&md->pw_lock, flags);
1632
1633         if (hadd) {
1634                 int ret;
1635
1636                 ret = rio_add_mport_pw_handler(md->mport, md,
1637                                                rio_mport_pw_handler);
1638                 if (ret) {
1639                         dev_err(&md->dev,
1640                                 "%s: failed to add IB_PW handler, err=%d\n",
1641                                 __func__, ret);
1642                         return ret;
1643                 }
1644                 rio_pw_enable(md->mport, 1);
1645         }
1646
1647         return 0;
1648 }
1649
1650 static void rio_mport_delete_pw_filter(struct rio_mport_pw_filter *pw_filter)
1651 {
1652         list_del(&pw_filter->md_node);
1653         list_del(&pw_filter->priv_node);
1654         kfree(pw_filter);
1655 }
1656
1657 static int rio_mport_match_pw_filter(struct rio_pw_filter *a,
1658                                      struct rio_pw_filter *b)
1659 {
1660         if ((a->mask == b->mask) && (a->low == b->low) && (a->high == b->high))
1661                 return 1;
1662         return 0;
1663 }
1664
1665 static int rio_mport_remove_pw_filter(struct mport_cdev_priv *priv,
1666                                       void __user *arg)
1667 {
1668         struct mport_dev *md = priv->md;
1669         struct rio_mport_pw_filter *pw_filter;
1670         struct rio_pw_filter filter;
1671         unsigned long flags;
1672         int ret = -EINVAL;
1673         int hdel = 0;
1674
1675         if (copy_from_user(&filter, arg, sizeof(filter)))
1676                 return -EFAULT;
1677
1678         spin_lock_irqsave(&md->pw_lock, flags);
1679         list_for_each_entry(pw_filter, &priv->pw_filters, priv_node) {
1680                 if (rio_mport_match_pw_filter(&pw_filter->filter, &filter)) {
1681                         rio_mport_delete_pw_filter(pw_filter);
1682                         ret = 0;
1683                         break;
1684                 }
1685         }
1686
1687         if (list_empty(&md->portwrites))
1688                 hdel = 1;
1689         spin_unlock_irqrestore(&md->pw_lock, flags);
1690
1691         if (hdel) {
1692                 rio_del_mport_pw_handler(md->mport, priv->md,
1693                                          rio_mport_pw_handler);
1694                 rio_pw_enable(md->mport, 0);
1695         }
1696
1697         return ret;
1698 }
1699
1700 /*
1701  * rio_release_dev - release routine for kernel RIO device object
1702  * @dev: kernel device object associated with a RIO device structure
1703  *
1704  * Frees a RIO device struct associated a RIO device struct.
1705  * The RIO device struct is freed.
1706  */
1707 static void rio_release_dev(struct device *dev)
1708 {
1709         struct rio_dev *rdev;
1710
1711         rdev = to_rio_dev(dev);
1712         pr_info(DRV_PREFIX "%s: %s\n", __func__, rio_name(rdev));
1713         kfree(rdev);
1714 }
1715
1716
1717 static void rio_release_net(struct device *dev)
1718 {
1719         struct rio_net *net;
1720
1721         net = to_rio_net(dev);
1722         rmcd_debug(RDEV, "net_%d", net->id);
1723         kfree(net);
1724 }
1725
1726
1727 /*
1728  * rio_mport_add_riodev - creates a kernel RIO device object
1729  *
1730  * Allocates a RIO device data structure and initializes required fields based
1731  * on device's configuration space contents.
1732  * If the device has switch capabilities, then a switch specific portion is
1733  * allocated and configured.
1734  */
1735 static int rio_mport_add_riodev(struct mport_cdev_priv *priv,
1736                                    void __user *arg)
1737 {
1738         struct mport_dev *md = priv->md;
1739         struct rio_rdev_info dev_info;
1740         struct rio_dev *rdev;
1741         struct rio_switch *rswitch = NULL;
1742         struct rio_mport *mport;
1743         struct device *dev;
1744         size_t size;
1745         u32 rval;
1746         u32 swpinfo = 0;
1747         u16 destid;
1748         u8 hopcount;
1749         int err;
1750
1751         if (copy_from_user(&dev_info, arg, sizeof(dev_info)))
1752                 return -EFAULT;
1753         dev_info.name[sizeof(dev_info.name) - 1] = '\0';
1754
1755         rmcd_debug(RDEV, "name:%s ct:0x%x did:0x%x hc:0x%x", dev_info.name,
1756                    dev_info.comptag, dev_info.destid, dev_info.hopcount);
1757
1758         dev = bus_find_device_by_name(&rio_bus_type, NULL, dev_info.name);
1759         if (dev) {
1760                 rmcd_debug(RDEV, "device %s already exists", dev_info.name);
1761                 put_device(dev);
1762                 return -EEXIST;
1763         }
1764
1765         size = sizeof(*rdev);
1766         mport = md->mport;
1767         destid = dev_info.destid;
1768         hopcount = dev_info.hopcount;
1769
1770         if (rio_mport_read_config_32(mport, destid, hopcount,
1771                                      RIO_PEF_CAR, &rval))
1772                 return -EIO;
1773
1774         if (rval & RIO_PEF_SWITCH) {
1775                 rio_mport_read_config_32(mport, destid, hopcount,
1776                                          RIO_SWP_INFO_CAR, &swpinfo);
1777                 size += (RIO_GET_TOTAL_PORTS(swpinfo) *
1778                          sizeof(rswitch->nextdev[0])) + sizeof(*rswitch);
1779         }
1780
1781         rdev = kzalloc(size, GFP_KERNEL);
1782         if (rdev == NULL)
1783                 return -ENOMEM;
1784
1785         if (mport->net == NULL) {
1786                 struct rio_net *net;
1787
1788                 net = rio_alloc_net(mport);
1789                 if (!net) {
1790                         err = -ENOMEM;
1791                         rmcd_debug(RDEV, "failed to allocate net object");
1792                         goto cleanup;
1793                 }
1794
1795                 net->id = mport->id;
1796                 net->hport = mport;
1797                 dev_set_name(&net->dev, "rnet_%d", net->id);
1798                 net->dev.parent = &mport->dev;
1799                 net->dev.release = rio_release_net;
1800                 err = rio_add_net(net);
1801                 if (err) {
1802                         rmcd_debug(RDEV, "failed to register net, err=%d", err);
1803                         kfree(net);
1804                         goto cleanup;
1805                 }
1806         }
1807
1808         rdev->net = mport->net;
1809         rdev->pef = rval;
1810         rdev->swpinfo = swpinfo;
1811         rio_mport_read_config_32(mport, destid, hopcount,
1812                                  RIO_DEV_ID_CAR, &rval);
1813         rdev->did = rval >> 16;
1814         rdev->vid = rval & 0xffff;
1815         rio_mport_read_config_32(mport, destid, hopcount, RIO_DEV_INFO_CAR,
1816                                  &rdev->device_rev);
1817         rio_mport_read_config_32(mport, destid, hopcount, RIO_ASM_ID_CAR,
1818                                  &rval);
1819         rdev->asm_did = rval >> 16;
1820         rdev->asm_vid = rval & 0xffff;
1821         rio_mport_read_config_32(mport, destid, hopcount, RIO_ASM_INFO_CAR,
1822                                  &rval);
1823         rdev->asm_rev = rval >> 16;
1824
1825         if (rdev->pef & RIO_PEF_EXT_FEATURES) {
1826                 rdev->efptr = rval & 0xffff;
1827                 rdev->phys_efptr = rio_mport_get_physefb(mport, 0, destid,
1828                                                 hopcount, &rdev->phys_rmap);
1829
1830                 rdev->em_efptr = rio_mport_get_feature(mport, 0, destid,
1831                                                 hopcount, RIO_EFB_ERR_MGMNT);
1832         }
1833
1834         rio_mport_read_config_32(mport, destid, hopcount, RIO_SRC_OPS_CAR,
1835                                  &rdev->src_ops);
1836         rio_mport_read_config_32(mport, destid, hopcount, RIO_DST_OPS_CAR,
1837                                  &rdev->dst_ops);
1838
1839         rdev->comp_tag = dev_info.comptag;
1840         rdev->destid = destid;
1841         /* hopcount is stored as specified by a caller, regardles of EP or SW */
1842         rdev->hopcount = hopcount;
1843
1844         if (rdev->pef & RIO_PEF_SWITCH) {
1845                 rswitch = rdev->rswitch;
1846                 rswitch->route_table = NULL;
1847         }
1848
1849         if (strlen(dev_info.name))
1850                 dev_set_name(&rdev->dev, "%s", dev_info.name);
1851         else if (rdev->pef & RIO_PEF_SWITCH)
1852                 dev_set_name(&rdev->dev, "%02x:s:%04x", mport->id,
1853                              rdev->comp_tag & RIO_CTAG_UDEVID);
1854         else
1855                 dev_set_name(&rdev->dev, "%02x:e:%04x", mport->id,
1856                              rdev->comp_tag & RIO_CTAG_UDEVID);
1857
1858         INIT_LIST_HEAD(&rdev->net_list);
1859         rdev->dev.parent = &mport->net->dev;
1860         rio_attach_device(rdev);
1861         rdev->dev.release = rio_release_dev;
1862
1863         if (rdev->dst_ops & RIO_DST_OPS_DOORBELL)
1864                 rio_init_dbell_res(&rdev->riores[RIO_DOORBELL_RESOURCE],
1865                                    0, 0xffff);
1866         err = rio_add_device(rdev);
1867         if (err)
1868                 goto cleanup;
1869         rio_dev_get(rdev);
1870
1871         return 0;
1872 cleanup:
1873         kfree(rdev);
1874         return err;
1875 }
1876
1877 static int rio_mport_del_riodev(struct mport_cdev_priv *priv, void __user *arg)
1878 {
1879         struct rio_rdev_info dev_info;
1880         struct rio_dev *rdev = NULL;
1881         struct device  *dev;
1882         struct rio_mport *mport;
1883         struct rio_net *net;
1884
1885         if (copy_from_user(&dev_info, arg, sizeof(dev_info)))
1886                 return -EFAULT;
1887         dev_info.name[sizeof(dev_info.name) - 1] = '\0';
1888
1889         mport = priv->md->mport;
1890
1891         /* If device name is specified, removal by name has priority */
1892         if (strlen(dev_info.name)) {
1893                 dev = bus_find_device_by_name(&rio_bus_type, NULL,
1894                                               dev_info.name);
1895                 if (dev)
1896                         rdev = to_rio_dev(dev);
1897         } else {
1898                 do {
1899                         rdev = rio_get_comptag(dev_info.comptag, rdev);
1900                         if (rdev && rdev->dev.parent == &mport->net->dev &&
1901                             rdev->destid == dev_info.destid &&
1902                             rdev->hopcount == dev_info.hopcount)
1903                                 break;
1904                 } while (rdev);
1905         }
1906
1907         if (!rdev) {
1908                 rmcd_debug(RDEV,
1909                         "device name:%s ct:0x%x did:0x%x hc:0x%x not found",
1910                         dev_info.name, dev_info.comptag, dev_info.destid,
1911                         dev_info.hopcount);
1912                 return -ENODEV;
1913         }
1914
1915         net = rdev->net;
1916         rio_dev_put(rdev);
1917         rio_del_device(rdev, RIO_DEVICE_SHUTDOWN);
1918
1919         if (list_empty(&net->devices)) {
1920                 rio_free_net(net);
1921                 mport->net = NULL;
1922         }
1923
1924         return 0;
1925 }
1926
1927 /*
1928  * Mport cdev management
1929  */
1930
1931 /*
1932  * mport_cdev_open() - Open character device (mport)
1933  */
1934 static int mport_cdev_open(struct inode *inode, struct file *filp)
1935 {
1936         int ret;
1937         int minor = iminor(inode);
1938         struct mport_dev *chdev;
1939         struct mport_cdev_priv *priv;
1940
1941         /* Test for valid device */
1942         if (minor >= RIO_MAX_MPORTS) {
1943                 rmcd_error("Invalid minor device number");
1944                 return -EINVAL;
1945         }
1946
1947         chdev = container_of(inode->i_cdev, struct mport_dev, cdev);
1948
1949         rmcd_debug(INIT, "%s filp=%p", dev_name(&chdev->dev), filp);
1950
1951         if (atomic_read(&chdev->active) == 0)
1952                 return -ENODEV;
1953
1954         get_device(&chdev->dev);
1955
1956         priv = kzalloc(sizeof(*priv), GFP_KERNEL);
1957         if (!priv) {
1958                 put_device(&chdev->dev);
1959                 return -ENOMEM;
1960         }
1961
1962         priv->md = chdev;
1963
1964         mutex_lock(&chdev->file_mutex);
1965         list_add_tail(&priv->list, &chdev->file_list);
1966         mutex_unlock(&chdev->file_mutex);
1967
1968         INIT_LIST_HEAD(&priv->db_filters);
1969         INIT_LIST_HEAD(&priv->pw_filters);
1970         spin_lock_init(&priv->fifo_lock);
1971         init_waitqueue_head(&priv->event_rx_wait);
1972         ret = kfifo_alloc(&priv->event_fifo,
1973                           sizeof(struct rio_event) * MPORT_EVENT_DEPTH,
1974                           GFP_KERNEL);
1975         if (ret < 0) {
1976                 dev_err(&chdev->dev, DRV_NAME ": kfifo_alloc failed\n");
1977                 ret = -ENOMEM;
1978                 goto err_fifo;
1979         }
1980
1981 #ifdef CONFIG_RAPIDIO_DMA_ENGINE
1982         INIT_LIST_HEAD(&priv->async_list);
1983         INIT_LIST_HEAD(&priv->pend_list);
1984         spin_lock_init(&priv->req_lock);
1985         mutex_init(&priv->dma_lock);
1986 #endif
1987
1988         filp->private_data = priv;
1989         goto out;
1990 err_fifo:
1991         kfree(priv);
1992 out:
1993         return ret;
1994 }
1995
1996 static int mport_cdev_fasync(int fd, struct file *filp, int mode)
1997 {
1998         struct mport_cdev_priv *priv = filp->private_data;
1999
2000         return fasync_helper(fd, filp, mode, &priv->async_queue);
2001 }
2002
2003 #ifdef CONFIG_RAPIDIO_DMA_ENGINE
2004 static void mport_cdev_release_dma(struct file *filp)
2005 {
2006         struct mport_cdev_priv *priv = filp->private_data;
2007         struct mport_dev *md;
2008         struct mport_dma_req *req, *req_next;
2009         unsigned long tmo = msecs_to_jiffies(dma_timeout);
2010         long wret;
2011         LIST_HEAD(list);
2012
2013         rmcd_debug(EXIT, "from filp=%p %s(%d)",
2014                    filp, current->comm, task_pid_nr(current));
2015
2016         if (!priv->dmach) {
2017                 rmcd_debug(EXIT, "No DMA channel for filp=%p", filp);
2018                 return;
2019         }
2020
2021         md = priv->md;
2022
2023         flush_workqueue(dma_wq);
2024
2025         spin_lock(&priv->req_lock);
2026         if (!list_empty(&priv->async_list)) {
2027                 rmcd_debug(EXIT, "async list not empty filp=%p %s(%d)",
2028                            filp, current->comm, task_pid_nr(current));
2029                 list_splice_init(&priv->async_list, &list);
2030         }
2031         spin_unlock(&priv->req_lock);
2032
2033         if (!list_empty(&list)) {
2034                 rmcd_debug(EXIT, "temp list not empty");
2035                 list_for_each_entry_safe(req, req_next, &list, node) {
2036                         rmcd_debug(EXIT, "free req->filp=%p cookie=%d compl=%s",
2037                                    req->filp, req->cookie,
2038                                    completion_done(&req->req_comp)?"yes":"no");
2039                         list_del(&req->node);
2040                         dma_req_free(req);
2041                 }
2042         }
2043
2044         if (!list_empty(&priv->pend_list)) {
2045                 rmcd_debug(EXIT, "Free pending DMA requests for filp=%p %s(%d)",
2046                            filp, current->comm, task_pid_nr(current));
2047                 list_for_each_entry_safe(req,
2048                                          req_next, &priv->pend_list, node) {
2049                         rmcd_debug(EXIT, "free req->filp=%p cookie=%d compl=%s",
2050                                    req->filp, req->cookie,
2051                                    completion_done(&req->req_comp)?"yes":"no");
2052                         list_del(&req->node);
2053                         dma_req_free(req);
2054                 }
2055         }
2056
2057         put_dma_channel(priv);
2058         wret = wait_for_completion_interruptible_timeout(&priv->comp, tmo);
2059
2060         if (wret <= 0) {
2061                 rmcd_error("%s(%d) failed waiting for DMA release err=%ld",
2062                         current->comm, task_pid_nr(current), wret);
2063         }
2064
2065         spin_lock(&priv->req_lock);
2066
2067         if (!list_empty(&priv->pend_list)) {
2068                 rmcd_debug(EXIT, "ATTN: pending DMA requests, filp=%p %s(%d)",
2069                            filp, current->comm, task_pid_nr(current));
2070         }
2071
2072         spin_unlock(&priv->req_lock);
2073
2074         if (priv->dmach != priv->md->dma_chan) {
2075                 rmcd_debug(EXIT, "Release DMA channel for filp=%p %s(%d)",
2076                            filp, current->comm, task_pid_nr(current));
2077                 rio_release_dma(priv->dmach);
2078         } else {
2079                 rmcd_debug(EXIT, "Adjust default DMA channel refcount");
2080                 kref_put(&md->dma_ref, mport_release_def_dma);
2081         }
2082
2083         priv->dmach = NULL;
2084 }
2085 #else
2086 #define mport_cdev_release_dma(priv) do {} while (0)
2087 #endif
2088
2089 /*
2090  * mport_cdev_release() - Release character device
2091  */
2092 static int mport_cdev_release(struct inode *inode, struct file *filp)
2093 {
2094         struct mport_cdev_priv *priv = filp->private_data;
2095         struct mport_dev *chdev;
2096         struct rio_mport_pw_filter *pw_filter, *pw_filter_next;
2097         struct rio_mport_db_filter *db_filter, *db_filter_next;
2098         struct rio_mport_mapping *map, *_map;
2099         unsigned long flags;
2100
2101         rmcd_debug(EXIT, "%s filp=%p", dev_name(&priv->md->dev), filp);
2102
2103         chdev = priv->md;
2104         mport_cdev_release_dma(filp);
2105
2106         priv->event_mask = 0;
2107
2108         spin_lock_irqsave(&chdev->pw_lock, flags);
2109         if (!list_empty(&priv->pw_filters)) {
2110                 list_for_each_entry_safe(pw_filter, pw_filter_next,
2111                                          &priv->pw_filters, priv_node)
2112                         rio_mport_delete_pw_filter(pw_filter);
2113         }
2114         spin_unlock_irqrestore(&chdev->pw_lock, flags);
2115
2116         spin_lock_irqsave(&chdev->db_lock, flags);
2117         list_for_each_entry_safe(db_filter, db_filter_next,
2118                                  &priv->db_filters, priv_node) {
2119                 rio_mport_delete_db_filter(db_filter);
2120         }
2121         spin_unlock_irqrestore(&chdev->db_lock, flags);
2122
2123         kfifo_free(&priv->event_fifo);
2124
2125         mutex_lock(&chdev->buf_mutex);
2126         list_for_each_entry_safe(map, _map, &chdev->mappings, node) {
2127                 if (map->filp == filp) {
2128                         rmcd_debug(EXIT, "release mapping %p filp=%p",
2129                                    map->virt_addr, filp);
2130                         kref_put(&map->ref, mport_release_mapping);
2131                 }
2132         }
2133         mutex_unlock(&chdev->buf_mutex);
2134
2135         mport_cdev_fasync(-1, filp, 0);
2136         filp->private_data = NULL;
2137         mutex_lock(&chdev->file_mutex);
2138         list_del(&priv->list);
2139         mutex_unlock(&chdev->file_mutex);
2140         put_device(&chdev->dev);
2141         kfree(priv);
2142         return 0;
2143 }
2144
2145 /*
2146  * mport_cdev_ioctl() - IOCTLs for character device
2147  */
2148 static long mport_cdev_ioctl(struct file *filp,
2149                 unsigned int cmd, unsigned long arg)
2150 {
2151         int err = -EINVAL;
2152         struct mport_cdev_priv *data = filp->private_data;
2153         struct mport_dev *md = data->md;
2154
2155         if (atomic_read(&md->active) == 0)
2156                 return -ENODEV;
2157
2158         switch (cmd) {
2159         case RIO_MPORT_MAINT_READ_LOCAL:
2160                 return rio_mport_maint_rd(data, (void __user *)arg, 1);
2161         case RIO_MPORT_MAINT_WRITE_LOCAL:
2162                 return rio_mport_maint_wr(data, (void __user *)arg, 1);
2163         case RIO_MPORT_MAINT_READ_REMOTE:
2164                 return rio_mport_maint_rd(data, (void __user *)arg, 0);
2165         case RIO_MPORT_MAINT_WRITE_REMOTE:
2166                 return rio_mport_maint_wr(data, (void __user *)arg, 0);
2167         case RIO_MPORT_MAINT_HDID_SET:
2168                 return maint_hdid_set(data, (void __user *)arg);
2169         case RIO_MPORT_MAINT_COMPTAG_SET:
2170                 return maint_comptag_set(data, (void __user *)arg);
2171         case RIO_MPORT_MAINT_PORT_IDX_GET:
2172                 return maint_port_idx_get(data, (void __user *)arg);
2173         case RIO_MPORT_GET_PROPERTIES:
2174                 md->properties.hdid = md->mport->host_deviceid;
2175                 if (copy_to_user((void __user *)arg, &(md->properties),
2176                                  sizeof(md->properties)))
2177                         return -EFAULT;
2178                 return 0;
2179         case RIO_ENABLE_DOORBELL_RANGE:
2180                 return rio_mport_add_db_filter(data, (void __user *)arg);
2181         case RIO_DISABLE_DOORBELL_RANGE:
2182                 return rio_mport_remove_db_filter(data, (void __user *)arg);
2183         case RIO_ENABLE_PORTWRITE_RANGE:
2184                 return rio_mport_add_pw_filter(data, (void __user *)arg);
2185         case RIO_DISABLE_PORTWRITE_RANGE:
2186                 return rio_mport_remove_pw_filter(data, (void __user *)arg);
2187         case RIO_SET_EVENT_MASK:
2188                 data->event_mask = (u32)arg;
2189                 return 0;
2190         case RIO_GET_EVENT_MASK:
2191                 if (copy_to_user((void __user *)arg, &data->event_mask,
2192                                     sizeof(u32)))
2193                         return -EFAULT;
2194                 return 0;
2195         case RIO_MAP_OUTBOUND:
2196                 return rio_mport_obw_map(filp, (void __user *)arg);
2197         case RIO_MAP_INBOUND:
2198                 return rio_mport_map_inbound(filp, (void __user *)arg);
2199         case RIO_UNMAP_OUTBOUND:
2200                 return rio_mport_obw_free(filp, (void __user *)arg);
2201         case RIO_UNMAP_INBOUND:
2202                 return rio_mport_inbound_free(filp, (void __user *)arg);
2203         case RIO_ALLOC_DMA:
2204                 return rio_mport_alloc_dma(filp, (void __user *)arg);
2205         case RIO_FREE_DMA:
2206                 return rio_mport_free_dma(filp, (void __user *)arg);
2207         case RIO_WAIT_FOR_ASYNC:
2208                 return rio_mport_wait_for_async_dma(filp, (void __user *)arg);
2209         case RIO_TRANSFER:
2210                 return rio_mport_transfer_ioctl(filp, (void __user *)arg);
2211         case RIO_DEV_ADD:
2212                 return rio_mport_add_riodev(data, (void __user *)arg);
2213         case RIO_DEV_DEL:
2214                 return rio_mport_del_riodev(data, (void __user *)arg);
2215         default:
2216                 break;
2217         }
2218
2219         return err;
2220 }
2221
2222 /*
2223  * mport_release_mapping - free mapping resources and info structure
2224  * @ref: a pointer to the kref within struct rio_mport_mapping
2225  *
2226  * NOTE: Shall be called while holding buf_mutex.
2227  */
2228 static void mport_release_mapping(struct kref *ref)
2229 {
2230         struct rio_mport_mapping *map =
2231                         container_of(ref, struct rio_mport_mapping, ref);
2232         struct rio_mport *mport = map->md->mport;
2233
2234         rmcd_debug(MMAP, "type %d mapping @ %p (phys = %pad) for %s",
2235                    map->dir, map->virt_addr,
2236                    &map->phys_addr, mport->name);
2237
2238         list_del(&map->node);
2239
2240         switch (map->dir) {
2241         case MAP_INBOUND:
2242                 rio_unmap_inb_region(mport, map->phys_addr);
2243         case MAP_DMA:
2244                 dma_free_coherent(mport->dev.parent, map->size,
2245                                   map->virt_addr, map->phys_addr);
2246                 break;
2247         case MAP_OUTBOUND:
2248                 rio_unmap_outb_region(mport, map->rioid, map->rio_addr);
2249                 break;
2250         }
2251         kfree(map);
2252 }
2253
2254 static void mport_mm_open(struct vm_area_struct *vma)
2255 {
2256         struct rio_mport_mapping *map = vma->vm_private_data;
2257
2258         rmcd_debug(MMAP, "%pad", &map->phys_addr);
2259         kref_get(&map->ref);
2260 }
2261
2262 static void mport_mm_close(struct vm_area_struct *vma)
2263 {
2264         struct rio_mport_mapping *map = vma->vm_private_data;
2265
2266         rmcd_debug(MMAP, "%pad", &map->phys_addr);
2267         mutex_lock(&map->md->buf_mutex);
2268         kref_put(&map->ref, mport_release_mapping);
2269         mutex_unlock(&map->md->buf_mutex);
2270 }
2271
2272 static const struct vm_operations_struct vm_ops = {
2273         .open = mport_mm_open,
2274         .close = mport_mm_close,
2275 };
2276
2277 static int mport_cdev_mmap(struct file *filp, struct vm_area_struct *vma)
2278 {
2279         struct mport_cdev_priv *priv = filp->private_data;
2280         struct mport_dev *md;
2281         size_t size = vma->vm_end - vma->vm_start;
2282         dma_addr_t baddr;
2283         unsigned long offset;
2284         int found = 0, ret;
2285         struct rio_mport_mapping *map;
2286
2287         rmcd_debug(MMAP, "0x%x bytes at offset 0x%lx",
2288                    (unsigned int)size, vma->vm_pgoff);
2289
2290         md = priv->md;
2291         baddr = ((dma_addr_t)vma->vm_pgoff << PAGE_SHIFT);
2292
2293         mutex_lock(&md->buf_mutex);
2294         list_for_each_entry(map, &md->mappings, node) {
2295                 if (baddr >= map->phys_addr &&
2296                     baddr < (map->phys_addr + map->size)) {
2297                         found = 1;
2298                         break;
2299                 }
2300         }
2301         mutex_unlock(&md->buf_mutex);
2302
2303         if (!found)
2304                 return -ENOMEM;
2305
2306         offset = baddr - map->phys_addr;
2307
2308         if (size + offset > map->size)
2309                 return -EINVAL;
2310
2311         vma->vm_pgoff = offset >> PAGE_SHIFT;
2312         rmcd_debug(MMAP, "MMAP adjusted offset = 0x%lx", vma->vm_pgoff);
2313
2314         if (map->dir == MAP_INBOUND || map->dir == MAP_DMA)
2315                 ret = dma_mmap_coherent(md->mport->dev.parent, vma,
2316                                 map->virt_addr, map->phys_addr, map->size);
2317         else if (map->dir == MAP_OUTBOUND) {
2318                 vma->vm_page_prot = pgprot_noncached(vma->vm_page_prot);
2319                 ret = vm_iomap_memory(vma, map->phys_addr, map->size);
2320         } else {
2321                 rmcd_error("Attempt to mmap unsupported mapping type");
2322                 ret = -EIO;
2323         }
2324
2325         if (!ret) {
2326                 vma->vm_private_data = map;
2327                 vma->vm_ops = &vm_ops;
2328                 mport_mm_open(vma);
2329         } else {
2330                 rmcd_error("MMAP exit with err=%d", ret);
2331         }
2332
2333         return ret;
2334 }
2335
2336 static unsigned int mport_cdev_poll(struct file *filp, poll_table *wait)
2337 {
2338         struct mport_cdev_priv *priv = filp->private_data;
2339
2340         poll_wait(filp, &priv->event_rx_wait, wait);
2341         if (kfifo_len(&priv->event_fifo))
2342                 return POLLIN | POLLRDNORM;
2343
2344         return 0;
2345 }
2346
2347 static ssize_t mport_read(struct file *filp, char __user *buf, size_t count,
2348                         loff_t *ppos)
2349 {
2350         struct mport_cdev_priv *priv = filp->private_data;
2351         int copied;
2352         ssize_t ret;
2353
2354         if (!count)
2355                 return 0;
2356
2357         if (kfifo_is_empty(&priv->event_fifo) &&
2358             (filp->f_flags & O_NONBLOCK))
2359                 return -EAGAIN;
2360
2361         if (count % sizeof(struct rio_event))
2362                 return -EINVAL;
2363
2364         ret = wait_event_interruptible(priv->event_rx_wait,
2365                                         kfifo_len(&priv->event_fifo) != 0);
2366         if (ret)
2367                 return ret;
2368
2369         while (ret < count) {
2370                 if (kfifo_to_user(&priv->event_fifo, buf,
2371                       sizeof(struct rio_event), &copied))
2372                         return -EFAULT;
2373                 ret += copied;
2374                 buf += copied;
2375         }
2376
2377         return ret;
2378 }
2379
2380 static ssize_t mport_write(struct file *filp, const char __user *buf,
2381                          size_t count, loff_t *ppos)
2382 {
2383         struct mport_cdev_priv *priv = filp->private_data;
2384         struct rio_mport *mport = priv->md->mport;
2385         struct rio_event event;
2386         int len, ret;
2387
2388         if (!count)
2389                 return 0;
2390
2391         if (count % sizeof(event))
2392                 return -EINVAL;
2393
2394         len = 0;
2395         while ((count - len) >= (int)sizeof(event)) {
2396                 if (copy_from_user(&event, buf, sizeof(event)))
2397                         return -EFAULT;
2398
2399                 if (event.header != RIO_DOORBELL)
2400                         return -EINVAL;
2401
2402                 ret = rio_mport_send_doorbell(mport,
2403                                               event.u.doorbell.rioid,
2404                                               event.u.doorbell.payload);
2405                 if (ret < 0)
2406                         return ret;
2407
2408                 len += sizeof(event);
2409                 buf += sizeof(event);
2410         }
2411
2412         return len;
2413 }
2414
2415 static const struct file_operations mport_fops = {
2416         .owner          = THIS_MODULE,
2417         .open           = mport_cdev_open,
2418         .release        = mport_cdev_release,
2419         .poll           = mport_cdev_poll,
2420         .read           = mport_read,
2421         .write          = mport_write,
2422         .mmap           = mport_cdev_mmap,
2423         .fasync         = mport_cdev_fasync,
2424         .unlocked_ioctl = mport_cdev_ioctl
2425 };
2426
2427 /*
2428  * Character device management
2429  */
2430
2431 static void mport_device_release(struct device *dev)
2432 {
2433         struct mport_dev *md;
2434
2435         rmcd_debug(EXIT, "%s", dev_name(dev));
2436         md = container_of(dev, struct mport_dev, dev);
2437         kfree(md);
2438 }
2439
2440 /*
2441  * mport_cdev_add() - Create mport_dev from rio_mport
2442  * @mport:      RapidIO master port
2443  */
2444 static struct mport_dev *mport_cdev_add(struct rio_mport *mport)
2445 {
2446         int ret = 0;
2447         struct mport_dev *md;
2448         struct rio_mport_attr attr;
2449
2450         md = kzalloc(sizeof(*md), GFP_KERNEL);
2451         if (!md) {
2452                 rmcd_error("Unable allocate a device object");
2453                 return NULL;
2454         }
2455
2456         md->mport = mport;
2457         mutex_init(&md->buf_mutex);
2458         mutex_init(&md->file_mutex);
2459         INIT_LIST_HEAD(&md->file_list);
2460         cdev_init(&md->cdev, &mport_fops);
2461         md->cdev.owner = THIS_MODULE;
2462         ret = cdev_add(&md->cdev, MKDEV(MAJOR(dev_number), mport->id), 1);
2463         if (ret < 0) {
2464                 kfree(md);
2465                 rmcd_error("Unable to register a device, err=%d", ret);
2466                 return NULL;
2467         }
2468
2469         md->dev.devt = md->cdev.dev;
2470         md->dev.class = dev_class;
2471         md->dev.parent = &mport->dev;
2472         md->dev.release = mport_device_release;
2473         dev_set_name(&md->dev, DEV_NAME "%d", mport->id);
2474         atomic_set(&md->active, 1);
2475
2476         ret = device_register(&md->dev);
2477         if (ret) {
2478                 rmcd_error("Failed to register mport %d (err=%d)",
2479                        mport->id, ret);
2480                 goto err_cdev;
2481         }
2482
2483         get_device(&md->dev);
2484
2485         INIT_LIST_HEAD(&md->doorbells);
2486         spin_lock_init(&md->db_lock);
2487         INIT_LIST_HEAD(&md->portwrites);
2488         spin_lock_init(&md->pw_lock);
2489         INIT_LIST_HEAD(&md->mappings);
2490
2491         md->properties.id = mport->id;
2492         md->properties.sys_size = mport->sys_size;
2493         md->properties.hdid = mport->host_deviceid;
2494         md->properties.index = mport->index;
2495
2496         /* The transfer_mode property will be returned through mport query
2497          * interface
2498          */
2499 #ifdef CONFIG_FSL_RIO /* for now: only on Freescale's SoCs */
2500         md->properties.transfer_mode |= RIO_TRANSFER_MODE_MAPPED;
2501 #else
2502         md->properties.transfer_mode |= RIO_TRANSFER_MODE_TRANSFER;
2503 #endif
2504         ret = rio_query_mport(mport, &attr);
2505         if (!ret) {
2506                 md->properties.flags = attr.flags;
2507                 md->properties.link_speed = attr.link_speed;
2508                 md->properties.link_width = attr.link_width;
2509                 md->properties.dma_max_sge = attr.dma_max_sge;
2510                 md->properties.dma_max_size = attr.dma_max_size;
2511                 md->properties.dma_align = attr.dma_align;
2512                 md->properties.cap_sys_size = 0;
2513                 md->properties.cap_transfer_mode = 0;
2514                 md->properties.cap_addr_size = 0;
2515         } else
2516                 pr_info(DRV_PREFIX "Failed to obtain info for %s cdev(%d:%d)\n",
2517                         mport->name, MAJOR(dev_number), mport->id);
2518
2519         mutex_lock(&mport_devs_lock);
2520         list_add_tail(&md->node, &mport_devs);
2521         mutex_unlock(&mport_devs_lock);
2522
2523         pr_info(DRV_PREFIX "Added %s cdev(%d:%d)\n",
2524                 mport->name, MAJOR(dev_number), mport->id);
2525
2526         return md;
2527
2528 err_cdev:
2529         cdev_del(&md->cdev);
2530         kfree(md);
2531         return NULL;
2532 }
2533
2534 /*
2535  * mport_cdev_terminate_dma() - Stop all active DMA data transfers and release
2536  *                              associated DMA channels.
2537  */
2538 static void mport_cdev_terminate_dma(struct mport_dev *md)
2539 {
2540 #ifdef CONFIG_RAPIDIO_DMA_ENGINE
2541         struct mport_cdev_priv *client;
2542
2543         rmcd_debug(DMA, "%s", dev_name(&md->dev));
2544
2545         mutex_lock(&md->file_mutex);
2546         list_for_each_entry(client, &md->file_list, list) {
2547                 if (client->dmach) {
2548                         dmaengine_terminate_all(client->dmach);
2549                         rio_release_dma(client->dmach);
2550                 }
2551         }
2552         mutex_unlock(&md->file_mutex);
2553
2554         if (md->dma_chan) {
2555                 dmaengine_terminate_all(md->dma_chan);
2556                 rio_release_dma(md->dma_chan);
2557                 md->dma_chan = NULL;
2558         }
2559 #endif
2560 }
2561
2562
2563 /*
2564  * mport_cdev_kill_fasync() - Send SIGIO signal to all processes with open
2565  *                            mport_cdev files.
2566  */
2567 static int mport_cdev_kill_fasync(struct mport_dev *md)
2568 {
2569         unsigned int files = 0;
2570         struct mport_cdev_priv *client;
2571
2572         mutex_lock(&md->file_mutex);
2573         list_for_each_entry(client, &md->file_list, list) {
2574                 if (client->async_queue)
2575                         kill_fasync(&client->async_queue, SIGIO, POLL_HUP);
2576                 files++;
2577         }
2578         mutex_unlock(&md->file_mutex);
2579         return files;
2580 }
2581
2582 /*
2583  * mport_cdev_remove() - Remove mport character device
2584  * @dev:        Mport device to remove
2585  */
2586 static void mport_cdev_remove(struct mport_dev *md)
2587 {
2588         struct rio_mport_mapping *map, *_map;
2589
2590         rmcd_debug(EXIT, "Remove %s cdev", md->mport->name);
2591         atomic_set(&md->active, 0);
2592         mport_cdev_terminate_dma(md);
2593         rio_del_mport_pw_handler(md->mport, md, rio_mport_pw_handler);
2594         cdev_del(&(md->cdev));
2595         mport_cdev_kill_fasync(md);
2596
2597         flush_workqueue(dma_wq);
2598
2599         /* TODO: do we need to give clients some time to close file
2600          * descriptors? Simple wait for XX, or kref?
2601          */
2602
2603         /*
2604          * Release DMA buffers allocated for the mport device.
2605          * Disable associated inbound Rapidio requests mapping if applicable.
2606          */
2607         mutex_lock(&md->buf_mutex);
2608         list_for_each_entry_safe(map, _map, &md->mappings, node) {
2609                 kref_put(&map->ref, mport_release_mapping);
2610         }
2611         mutex_unlock(&md->buf_mutex);
2612
2613         if (!list_empty(&md->mappings))
2614                 rmcd_warn("WARNING: %s pending mappings on removal",
2615                           md->mport->name);
2616
2617         rio_release_inb_dbell(md->mport, 0, 0x0fff);
2618
2619         device_unregister(&md->dev);
2620         put_device(&md->dev);
2621 }
2622
2623 /*
2624  * RIO rio_mport_interface driver
2625  */
2626
2627 /*
2628  * mport_add_mport() - Add rio_mport from LDM device struct
2629  * @dev:                Linux device model struct
2630  * @class_intf: Linux class_interface
2631  */
2632 static int mport_add_mport(struct device *dev,
2633                 struct class_interface *class_intf)
2634 {
2635         struct rio_mport *mport = NULL;
2636         struct mport_dev *chdev = NULL;
2637
2638         mport = to_rio_mport(dev);
2639         if (!mport)
2640                 return -ENODEV;
2641
2642         chdev = mport_cdev_add(mport);
2643         if (!chdev)
2644                 return -ENODEV;
2645
2646         return 0;
2647 }
2648
2649 /*
2650  * mport_remove_mport() - Remove rio_mport from global list
2651  * TODO remove device from global mport_dev list
2652  */
2653 static void mport_remove_mport(struct device *dev,
2654                 struct class_interface *class_intf)
2655 {
2656         struct rio_mport *mport = NULL;
2657         struct mport_dev *chdev;
2658         int found = 0;
2659
2660         mport = to_rio_mport(dev);
2661         rmcd_debug(EXIT, "Remove %s", mport->name);
2662
2663         mutex_lock(&mport_devs_lock);
2664         list_for_each_entry(chdev, &mport_devs, node) {
2665                 if (chdev->mport->id == mport->id) {
2666                         atomic_set(&chdev->active, 0);
2667                         list_del(&chdev->node);
2668                         found = 1;
2669                         break;
2670                 }
2671         }
2672         mutex_unlock(&mport_devs_lock);
2673
2674         if (found)
2675                 mport_cdev_remove(chdev);
2676 }
2677
2678 /* the rio_mport_interface is used to handle local mport devices */
2679 static struct class_interface rio_mport_interface __refdata = {
2680         .class          = &rio_mport_class,
2681         .add_dev        = mport_add_mport,
2682         .remove_dev     = mport_remove_mport,
2683 };
2684
2685 /*
2686  * Linux kernel module
2687  */
2688
2689 /*
2690  * mport_init - Driver module loading
2691  */
2692 static int __init mport_init(void)
2693 {
2694         int ret;
2695
2696         /* Create device class needed by udev */
2697         dev_class = class_create(THIS_MODULE, DRV_NAME);
2698         if (IS_ERR(dev_class)) {
2699                 rmcd_error("Unable to create " DRV_NAME " class");
2700                 return PTR_ERR(dev_class);
2701         }
2702
2703         ret = alloc_chrdev_region(&dev_number, 0, RIO_MAX_MPORTS, DRV_NAME);
2704         if (ret < 0)
2705                 goto err_chr;
2706
2707         rmcd_debug(INIT, "Registered class with major=%d", MAJOR(dev_number));
2708
2709         /* Register to rio_mport_interface */
2710         ret = class_interface_register(&rio_mport_interface);
2711         if (ret) {
2712                 rmcd_error("class_interface_register() failed, err=%d", ret);
2713                 goto err_cli;
2714         }
2715
2716         dma_wq = create_singlethread_workqueue("dma_wq");
2717         if (!dma_wq) {
2718                 rmcd_error("failed to create DMA work queue");
2719                 ret = -ENOMEM;
2720                 goto err_wq;
2721         }
2722
2723         return 0;
2724
2725 err_wq:
2726         class_interface_unregister(&rio_mport_interface);
2727 err_cli:
2728         unregister_chrdev_region(dev_number, RIO_MAX_MPORTS);
2729 err_chr:
2730         class_destroy(dev_class);
2731         return ret;
2732 }
2733
2734 /**
2735  * mport_exit - Driver module unloading
2736  */
2737 static void __exit mport_exit(void)
2738 {
2739         class_interface_unregister(&rio_mport_interface);
2740         class_destroy(dev_class);
2741         unregister_chrdev_region(dev_number, RIO_MAX_MPORTS);
2742         destroy_workqueue(dma_wq);
2743 }
2744
2745 module_init(mport_init);
2746 module_exit(mport_exit);