drivers/mtd/nand/ecc-realtek.c

// SPDX-License-Identifier: GPL-2.0
/*
 * Support for Realtek hardware ECC engine in RTL93xx SoCs
 */

#include <linux/bitfield.h>
#include <linux/dma-mapping.h>
#include <linux/mtd/nand.h>
#include <linux/mutex.h>
#include <linux/platform_device.h>
#include <linux/regmap.h>

/*
 * The Realtek ECC engine has two operation modes.
 *
 * - BCH6  : Generate 10 ECC bytes from 512 data bytes plus 6 free bytes
 * - BCH12 : Generate 20 ECC bytes from 512 data bytes plus 6 free bytes
 *
 * It can run for arbitrary NAND flash chips with different block and OOB sizes. Currently there
 * are a few known devices in the wild that make use of this ECC engine
 * (Linksys LGS328C, LGS352C & Netlink HG323DAC). To keep compatibility with vendor firmware,
 * new modes can only be added when new data layouts have been analyzed. For now allow BCH6 on
 * flash with 2048 byte blocks and at least 64 bytes oob. Some vendors make use of
 * 128 bytes OOB NAND chips (e.g. Macronix MX35LF1G24AD) but only use BCH6 and thus the first
 * 64 bytes of the OOB area. In this case the engine leaves any extra bytes unused.
 *
 * This driver aligns with kernel ECC naming conventions. Neverthless a short notice on the
 * Realtek naming conventions for the different structures in the OOB area.
 *
 * - BBI      : Bad block indicator. The first two bytes of OOB. Protected by ECC!
 * - tag      : 6 User/free bytes. First tag "contains" 2 bytes BBI. Protected by ECC!
 * - syndrome : ECC/parity bytes
 *
 * Altogether this gives currently the following block layout.
 *
 * +------+------+------+------+-----+------+------+------+------+-----+-----+-----+-----+
 * |  512 |  512 |  512 |  512 |   2 |    4 |    6 |    6 |    6 |  10 |  10 |  10 |  10 |
 * +------+------+------+------+-----+------+------+------+------+-----+-----+-----+-----+
 * | data | data | data | data | BBI | free | free | free | free | ECC | ECC | ECC | ECC |
 * +------+------+------+------+-----+------+------+------+------+-----+-----+-----+-----+
 */

#define RTL_ECC_ALLOWED_PAGE_SIZE 	2048
#define RTL_ECC_ALLOWED_MIN_OOB_SIZE	64
#define RTL_ECC_ALLOWED_STRENGTH	6

#define RTL_ECC_BLOCK_SIZE 		512
#define RTL_ECC_FREE_SIZE 		6
#define RTL_ECC_PARITY_SIZE_BCH6	10
#define RTL_ECC_PARITY_SIZE_BCH12	20

/*
 * The engine is fed with two DMA regions. One for data (always 512 bytes) and one for free bytes
 * and parity (either 16 bytes for BCH6 or 26 bytes for BCH12). Start and length of each must be
 * aligned to a multiple of 4.
 */

#define RTL_ECC_DMA_FREE_PARITY_SIZE	ALIGN(RTL_ECC_FREE_SIZE + RTL_ECC_PARITY_SIZE_BCH12, 4)
#define RTL_ECC_DMA_SIZE		(RTL_ECC_BLOCK_SIZE + RTL_ECC_DMA_FREE_PARITY_SIZE)

#define RTL_ECC_CFG			0x00
#define   RTL_ECC_BCH6			0
#define   RTL_ECC_BCH12			BIT(28)
#define   RTL_ECC_DMA_PRECISE		BIT(12)
#define   RTL_ECC_BURST_128		GENMASK(1, 0)
#define RTL_ECC_DMA_TRIGGER 		0x08
#define   RTL_ECC_OP_DECODE		0
#define   RTL_ECC_OP_ENCODE		BIT(0)
#define RTL_ECC_DMA_START		0x0c
#define RTL_ECC_DMA_TAG			0x10
#define RTL_ECC_STATUS			0x14
#define   RTL_ECC_CORR_COUNT		GENMASK(19, 12)
#define   RTL_ECC_RESULT		BIT(8)
#define   RTL_ECC_ALL_ONE		BIT(4)
#define   RTL_ECC_OP_STATUS		BIT(0)

struct rtl_ecc_engine {
	struct device *dev;
	struct nand_ecc_engine engine;
	struct mutex lock;
	char *buf;
	dma_addr_t buf_dma;
	struct regmap *regmap;
};

struct rtl_ecc_ctx {
	struct rtl_ecc_engine * rtlc;
	struct nand_ecc_req_tweak_ctx req_ctx;
	int steps;
	int bch_mode;
	int strength;
	int parity_size;
};

static const struct regmap_config rtl_ecc_regmap_config = {
	.reg_bits	= 32,
	.val_bits	= 32,
	.reg_stride	= 4,
};

static inline void *nand_to_ctx(struct nand_device *nand)
{
	return nand->ecc.ctx.priv;
}

static inline struct rtl_ecc_engine *nand_to_rtlc(struct nand_device *nand)
{
	struct nand_ecc_engine *eng = nand->ecc.engine;

	return container_of(eng, struct rtl_ecc_engine, engine);
}

static int rtl_ecc_ooblayout_ecc(struct mtd_info *mtd, int section,
				 struct mtd_oob_region *oobregion)
{
	struct nand_device *nand = mtd_to_nanddev(mtd);
	struct rtl_ecc_ctx *ctx = nand_to_ctx(nand);

	if (section < 0 || section >= ctx->steps)
		return -ERANGE;

	oobregion->offset = ctx->steps * RTL_ECC_FREE_SIZE + section * ctx->parity_size;
	oobregion->length = ctx->parity_size;

	return 0;
}

static int rtl_ecc_ooblayout_free(struct mtd_info *mtd, int section,
				  struct mtd_oob_region *oobregion)
{
	struct nand_device *nand = mtd_to_nanddev(mtd);
	struct rtl_ecc_ctx *ctx = nand_to_ctx(nand);
	int bbm;

	if (section < 0 || section >= ctx->steps)
		return -ERANGE;

	/* reserve 2 BBM bytes in first block */
	bbm = section ? 0 : 2;
	oobregion->offset = section * RTL_ECC_FREE_SIZE + bbm;
	oobregion->length = RTL_ECC_FREE_SIZE - bbm;

	return 0;
}

static const struct mtd_ooblayout_ops rtl_ecc_ooblayout_ops = {
	.ecc = rtl_ecc_ooblayout_ecc,
	.free = rtl_ecc_ooblayout_free,
};

static void rtl_ecc_kick_engine(struct rtl_ecc_ctx *ctx, int operation)
{
	struct rtl_ecc_engine *rtlc = ctx->rtlc;

	regmap_write(rtlc->regmap, RTL_ECC_CFG,
		     ctx->bch_mode | RTL_ECC_BURST_128 | RTL_ECC_DMA_PRECISE);

	regmap_write(rtlc->regmap, RTL_ECC_DMA_START, rtlc->buf_dma);
	regmap_write(rtlc->regmap, RTL_ECC_DMA_TAG, rtlc->buf_dma + RTL_ECC_BLOCK_SIZE);
	regmap_write(rtlc->regmap, RTL_ECC_DMA_TRIGGER, operation);
}

static int rtl_ecc_wait_for_engine(struct rtl_ecc_ctx *ctx)
{
	struct rtl_ecc_engine *rtlc = ctx->rtlc;
	int ret, status, bitflips;
	bool all_one;

	/*
	 * The ECC engine needs 6-8 us to encode/decode a BCH6 syndrome for 512 bytes of data
	 * and 6 free bytes. In case the NAND area has been erased and all data and oob is
	 * set to 0xff, decoding takes 30us (reason unknown). Although the engine can trigger
	 * interrupts when finished, use active polling for now. 12 us maximum wait time has
	 * proven to be a good tradeoff between performance and overhead.
	 */

	ret = regmap_read_poll_timeout(rtlc->regmap, RTL_ECC_STATUS, status,
				       !(status & RTL_ECC_OP_STATUS), 12, 1000000);
	if (ret)
		return ret;

	ret = FIELD_GET(RTL_ECC_RESULT, status);
	all_one = FIELD_GET(RTL_ECC_ALL_ONE, status);
	bitflips = FIELD_GET(RTL_ECC_CORR_COUNT, status);

	/* For erased blocks (all bits one) error status can be ignored */
	if (all_one)
		ret = 0;

	return ret ? -EBADMSG : bitflips;
}

static int rtl_ecc_run_engine(struct rtl_ecc_ctx *ctx, char *data, char *free,
			      char *parity, int operation)
{
	struct rtl_ecc_engine *rtlc = ctx->rtlc;
	char *buf_parity = rtlc->buf + RTL_ECC_BLOCK_SIZE + RTL_ECC_FREE_SIZE;
	char *buf_free = rtlc->buf + RTL_ECC_BLOCK_SIZE;
	char *buf_data = rtlc->buf;
	int ret;

	mutex_lock(&rtlc->lock);

	memcpy(buf_data, data, RTL_ECC_BLOCK_SIZE);
	memcpy(buf_free, free, RTL_ECC_FREE_SIZE);
	memcpy(buf_parity, parity, ctx->parity_size);

	dma_sync_single_for_device(rtlc->dev, rtlc->buf_dma, RTL_ECC_DMA_SIZE, DMA_TO_DEVICE);
	rtl_ecc_kick_engine(ctx, operation);
	ret = rtl_ecc_wait_for_engine(ctx);
	dma_sync_single_for_cpu(rtlc->dev, rtlc->buf_dma, RTL_ECC_DMA_SIZE, DMA_FROM_DEVICE);

	if (ret >= 0) {
		memcpy(data, buf_data, RTL_ECC_BLOCK_SIZE);
		memcpy(free, buf_free, RTL_ECC_FREE_SIZE);
		memcpy(parity, buf_parity, ctx->parity_size);
	}

	mutex_unlock(&rtlc->lock);

	return ret;
}

static int rtl_ecc_prepare_io_req(struct nand_device *nand, struct nand_page_io_req *req)
{
	struct rtl_ecc_engine *rtlc = nand_to_rtlc(nand);
	struct rtl_ecc_ctx *ctx = nand_to_ctx(nand);
	char *data, *free, *parity;
	int ret = 0;

	if (req->mode == MTD_OPS_RAW)
		return 0;

	nand_ecc_tweak_req(&ctx->req_ctx, req);

	if (req->type == NAND_PAGE_READ)
		return 0;

	free = req->oobbuf.in;
	data = req->databuf.in;
	parity = req->oobbuf.in + ctx->steps * RTL_ECC_FREE_SIZE;

	for (int i = 0; i < ctx->steps; i++) {
		ret |= rtl_ecc_run_engine(ctx, data, free, parity, RTL_ECC_OP_ENCODE);

		free += RTL_ECC_FREE_SIZE;
		data += RTL_ECC_BLOCK_SIZE;
		parity += ctx->parity_size;
	}

	if (unlikely(ret))
		dev_dbg(rtlc->dev, "ECC calculation failed\n");

	return ret ? -EBADMSG : 0;
}

static int rtl_ecc_finish_io_req(struct nand_device *nand, struct nand_page_io_req *req)
{
	struct rtl_ecc_engine *rtlc = nand_to_rtlc(nand);
	struct rtl_ecc_ctx *ctx = nand_to_ctx(nand);
	struct mtd_info *mtd = nanddev_to_mtd(nand);
	char *data, *free, *parity;
	bool failure = false;
	int bitflips = 0;

	if (req->mode == MTD_OPS_RAW)
		return 0;

	if (req->type == NAND_PAGE_WRITE) {
		nand_ecc_restore_req(&ctx->req_ctx, req);
		return 0;
	}

	free = req->oobbuf.in;
	data = req->databuf.in;
	parity = req->oobbuf.in + ctx->steps * RTL_ECC_FREE_SIZE;

	for (int i = 0 ; i < ctx->steps; i++) {
		int ret = rtl_ecc_run_engine(ctx, data, free, parity, RTL_ECC_OP_DECODE);

		if (unlikely(ret < 0))
			/* ECC totally fails for bitflips in erased blocks */
			ret = nand_check_erased_ecc_chunk(data, RTL_ECC_BLOCK_SIZE,
							  parity, ctx->parity_size,
							  free, RTL_ECC_FREE_SIZE,
							  ctx->strength);
		if (unlikely(ret < 0)) {
			failure = true;
			mtd->ecc_stats.failed++;
		} else {
			mtd->ecc_stats.corrected += ret;
			bitflips = max_t(unsigned int, bitflips, ret);
		}

		free += RTL_ECC_FREE_SIZE;
		data += RTL_ECC_BLOCK_SIZE;
		parity += ctx->parity_size;
	}

	nand_ecc_restore_req(&ctx->req_ctx, req);

	if (unlikely(failure))
		dev_dbg(rtlc->dev, "ECC correction failed\n");
	else if (unlikely(bitflips > 2))
		dev_dbg(rtlc->dev, "%d bitflips detected\n", bitflips);

	return failure ? -EBADMSG : bitflips;
}

static int rtl_ecc_check_support(struct nand_device *nand)
{
	struct mtd_info *mtd = nanddev_to_mtd(nand);
	struct device *dev = nand->ecc.engine->dev;

	if (mtd->oobsize < RTL_ECC_ALLOWED_MIN_OOB_SIZE ||
	    mtd->writesize != RTL_ECC_ALLOWED_PAGE_SIZE) {
		dev_err(dev, "only flash geometry data=%d, oob>=%d supported\n",
			RTL_ECC_ALLOWED_PAGE_SIZE, RTL_ECC_ALLOWED_MIN_OOB_SIZE);
		return -EINVAL;
	}

	if (nand->ecc.user_conf.algo != NAND_ECC_ALGO_BCH ||
	    nand->ecc.user_conf.strength != RTL_ECC_ALLOWED_STRENGTH ||
	    nand->ecc.user_conf.placement != NAND_ECC_PLACEMENT_OOB ||
	    nand->ecc.user_conf.step_size != RTL_ECC_BLOCK_SIZE) {
		dev_err(dev, "only algo=bch, strength=%d, placement=oob, step=%d supported\n",
			RTL_ECC_ALLOWED_STRENGTH, RTL_ECC_BLOCK_SIZE);
		return -EINVAL;
	}

	return 0;
}

static int rtl_ecc_init_ctx(struct nand_device *nand)
{
	struct nand_ecc_props *conf = &nand->ecc.ctx.conf;
	struct rtl_ecc_engine *rtlc = nand_to_rtlc(nand);
	struct mtd_info *mtd = nanddev_to_mtd(nand);
	int strength = nand->ecc.user_conf.strength;
	struct device *dev = nand->ecc.engine->dev;
	struct rtl_ecc_ctx *ctx;
	int ret;

	ret = rtl_ecc_check_support(nand);
	if (ret)
		return ret;

	ctx = devm_kzalloc_obj(dev, *ctx);
	if (!ctx)
		return -ENOMEM;

	nand->ecc.ctx.priv = ctx;
	mtd_set_ooblayout(mtd, &rtl_ecc_ooblayout_ops);

	conf->algo = NAND_ECC_ALGO_BCH;
	conf->strength = strength;
	conf->step_size = RTL_ECC_BLOCK_SIZE;
	conf->engine_type = NAND_ECC_ENGINE_TYPE_ON_HOST;

	ctx->rtlc = rtlc;
	ctx->steps = mtd->writesize / RTL_ECC_BLOCK_SIZE;
	ctx->strength = strength;
	ctx->bch_mode = strength == 6 ? RTL_ECC_BCH6 : RTL_ECC_BCH12;
	ctx->parity_size = strength == 6 ? RTL_ECC_PARITY_SIZE_BCH6 : RTL_ECC_PARITY_SIZE_BCH12;

	ret = nand_ecc_init_req_tweaking(&ctx->req_ctx, nand);
	if (ret)
		return ret;

	dev_dbg(dev, "using bch%d with geometry data=%dx%d, free=%dx6, parity=%dx%d",
		conf->strength, ctx->steps, conf->step_size,
		ctx->steps, ctx->steps, ctx->parity_size);

	return 0;
}

static void rtl_ecc_cleanup_ctx(struct nand_device *nand)
{
	struct rtl_ecc_ctx *ctx = nand_to_ctx(nand);

	if (ctx)
		nand_ecc_cleanup_req_tweaking(&ctx->req_ctx);
}

static const struct nand_ecc_engine_ops rtl_ecc_engine_ops = {
	.init_ctx = rtl_ecc_init_ctx,
	.cleanup_ctx = rtl_ecc_cleanup_ctx,
	.prepare_io_req = rtl_ecc_prepare_io_req,
	.finish_io_req = rtl_ecc_finish_io_req,
};

static int rtl_ecc_probe(struct platform_device *pdev)
{
	struct device *dev = &pdev->dev;
	struct rtl_ecc_engine *rtlc;
	void __iomem *base;
	int ret;

	rtlc = devm_kzalloc_obj(dev, *rtlc);
	if (!rtlc)
		return -ENOMEM;

	base = devm_platform_ioremap_resource(pdev, 0);
	if (IS_ERR(base))
		return PTR_ERR(base);

	ret = devm_mutex_init(dev, &rtlc->lock);
	if (ret)
		return ret;

	rtlc->regmap = devm_regmap_init_mmio(dev, base, &rtl_ecc_regmap_config);
	if (IS_ERR(rtlc->regmap))
		return PTR_ERR(rtlc->regmap);

	/*
	 * Focus on simplicity and use a preallocated DMA buffer for data exchange with the
	 * engine. For now make it a noncoherent memory model as invalidating/flushing caches
	 * is faster than reading/writing uncached memory on the known architectures.
	 */

	rtlc->buf = dma_alloc_noncoherent(dev, RTL_ECC_DMA_SIZE, &rtlc->buf_dma,
					  DMA_BIDIRECTIONAL, GFP_KERNEL);
	if (!rtlc->buf)
		return -ENOMEM;

	rtlc->dev = dev;
	rtlc->engine.dev = dev;
	rtlc->engine.ops = &rtl_ecc_engine_ops;
	rtlc->engine.integration = NAND_ECC_ENGINE_INTEGRATION_EXTERNAL;

	nand_ecc_register_on_host_hw_engine(&rtlc->engine);

	platform_set_drvdata(pdev, rtlc);

	return 0;
}

static void rtl_ecc_remove(struct platform_device *pdev)
{
	struct rtl_ecc_engine *rtlc = platform_get_drvdata(pdev);

	nand_ecc_unregister_on_host_hw_engine(&rtlc->engine);
	dma_free_noncoherent(rtlc->dev, RTL_ECC_DMA_SIZE, rtlc->buf, rtlc->buf_dma,
			     DMA_BIDIRECTIONAL);
}

static const struct of_device_id rtl_ecc_of_ids[] = {
	{
		.compatible = "realtek,rtl9301-ecc",
	},
	{ /* sentinel */ },
};
MODULE_DEVICE_TABLE(of, rtl_ecc_of_ids);

static struct platform_driver rtl_ecc_driver = {
	.driver	= {
		.name = "rtl-nand-ecc-engine",
		.of_match_table = rtl_ecc_of_ids,
	},
	.probe = rtl_ecc_probe,
	.remove = rtl_ecc_remove,
};
module_platform_driver(rtl_ecc_driver);

MODULE_LICENSE("GPL");
MODULE_AUTHOR("Markus Stockhausen <markus.stockhausen@gmx.de>");
MODULE_DESCRIPTION("Realtek NAND hardware ECC controller");