drivers/char/diag/diag_dci.c

   1 /* Copyright (c) 2012-2019, The Linux Foundation. All rights reserved.
   2  *
   3  * This program is free software; you can redistribute it and/or modify
   4  * it under the terms of the GNU General Public License version 2 and
   5  * only version 2 as published by the Free Software Foundation.
   6  *
   7  * This program is distributed in the hope that it will be useful,
   8  * but WITHOUT ANY WARRANTY; without even the implied warranty of
   9  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  10  * GNU General Public License for more details.
  11  */
  12
  13 #include <linux/slab.h>
  14 #include <linux/init.h>
  15 #include <linux/uaccess.h>
  16 #include <linux/diagchar.h>
  17 #include <linux/sched.h>
  18 #include <linux/err.h>
  19 #include <linux/delay.h>
  20 #include <linux/workqueue.h>
  21 #include <linux/pm_runtime.h>
  22 #include <linux/platform_device.h>
  23 #include <linux/pm_wakeup.h>
  24 #include <linux/spinlock.h>
  25 #include <linux/ratelimit.h>
  26 #include <linux/reboot.h>
  27 #include <asm/current.h>
  28 #include <soc/qcom/restart.h>
  29 #include <linux/vmalloc.h>
  30 #ifdef CONFIG_DIAG_OVER_USB
  31 #include <linux/usb/usbdiag.h>
  32 #endif
  33 #include "diagchar_hdlc.h"
  34 #include "diagmem.h"
  35 #include "diagchar.h"
  36 #include "diagfwd.h"
  37 #include "diagfwd_cntl.h"
  38 #include "diag_dci.h"
  39 #include "diag_masks.h"
  40 #include "diagfwd_bridge.h"
  41 #include "diagfwd_peripheral.h"
  42 #include "diag_ipc_logging.h"
  43
  44 static struct timer_list dci_drain_timer;
  45 static int dci_timer_in_progress;
  46 static struct work_struct dci_data_drain_work;
  47
  48 struct diag_dci_partial_pkt_t partial_pkt;
  49
  50 unsigned int dci_max_reg = 100;
  51 unsigned int dci_max_clients = 10;
  52 struct mutex dci_log_mask_mutex;
  53 struct mutex dci_event_mask_mutex;
  54
  55 /*
  56  * DCI_HANDSHAKE_RETRY_TIME: Time to wait (in microseconds) before checking the
  57  * connection status again.
  58  *
  59  * DCI_HANDSHAKE_WAIT_TIME: Timeout (in milliseconds) to check for dci
  60  * connection status
  61  */
  62 #define DCI_HANDSHAKE_RETRY_TIME        500000
  63 #define DCI_HANDSHAKE_WAIT_TIME         200
  64
  65 spinlock_t ws_lock;
  66 unsigned long ws_lock_flags;
  67
  68 struct dci_ops_tbl_t dci_ops_tbl[NUM_DCI_PROC] = {
  69         {
  70                 .ctx = 0,
  71                 .send_log_mask = diag_send_dci_log_mask,
  72                 .send_event_mask = diag_send_dci_event_mask,
  73                 .peripheral_status = 0,
  74                 .mempool = 0,
  75         },
  76 #ifdef CONFIG_DIAGFWD_BRIDGE_CODE
  77         {
  78                 .ctx = DIAGFWD_MDM_DCI,
  79                 .send_log_mask = diag_send_dci_log_mask_remote,
  80                 .send_event_mask = diag_send_dci_event_mask_remote,
  81                 .peripheral_status = 0,
  82                 .mempool = POOL_TYPE_MDM_DCI_WRITE,
  83         }
  84 #endif
  85 };
  86
  87 struct dci_channel_status_t dci_channel_status[NUM_DCI_PROC] = {
  88         {
  89                 .id = 0,
  90                 .open = 0,
  91                 .retry_count = 0
  92         },
  93 #ifdef CONFIG_DIAGFWD_BRIDGE_CODE
  94         {
  95                 .id = DIAGFWD_MDM_DCI,
  96                 .open = 0,
  97                 .retry_count = 0
  98         }
  99 #endif
 100 };
 101
 102 /* Number of milliseconds anticipated to process the DCI data */
 103 #define DCI_WAKEUP_TIMEOUT 1
 104
 105 #define DCI_CAN_ADD_BUF_TO_LIST(buf)                                    \
 106         (buf && buf->data && !buf->in_busy && buf->data_len > 0)        \
 107
 108 #ifdef CONFIG_DEBUG_FS
 109 struct diag_dci_data_info *dci_traffic;
 110 struct mutex dci_stat_mutex;
 111 void diag_dci_record_traffic(int read_bytes, uint8_t ch_type,
 112                              uint8_t peripheral, uint8_t proc)
 113 {
 114         static int curr_dci_data;
 115         static unsigned long iteration;
 116         struct diag_dci_data_info *temp_data = dci_traffic;
 117         if (!temp_data)
 118                 return;
 119         mutex_lock(&dci_stat_mutex);
 120         if (curr_dci_data == DIAG_DCI_DEBUG_CNT)
 121                 curr_dci_data = 0;
 122         temp_data += curr_dci_data;
 123         temp_data->iteration = iteration + 1;
 124         temp_data->data_size = read_bytes;
 125         temp_data->peripheral = peripheral;
 126         temp_data->ch_type = ch_type;
 127         temp_data->proc = proc;
 128         diag_get_timestamp(temp_data->time_stamp);
 129         curr_dci_data++;
 130         iteration++;
 131         mutex_unlock(&dci_stat_mutex);
 132 }
 133 #else
 134 void diag_dci_record_traffic(int read_bytes, uint8_t ch_type,
 135                              uint8_t peripheral, uint8_t proc) { }
 136 #endif
 137
 138 static int check_peripheral_dci_support(int peripheral_id, int dci_proc_id)
 139 {
 140         int dci_peripheral_list = 0;
 141
 142         if (dci_proc_id < 0 || dci_proc_id >= NUM_DCI_PROC) {
 143                 pr_err("diag:In %s,not a supported DCI proc id\n", __func__);
 144                 return 0;
 145         }
 146         if (peripheral_id < 0 || peripheral_id >= NUM_PERIPHERALS) {
 147                 pr_err("diag:In %s,not a valid peripheral id\n", __func__);
 148                 return 0;
 149         }
 150         dci_peripheral_list = dci_ops_tbl[dci_proc_id].peripheral_status;
 151
 152         if (dci_peripheral_list <= 0 || dci_peripheral_list > DIAG_CON_ALL) {
 153                 pr_err("diag:In %s,not a valid dci peripheral mask\n",
 154                          __func__);
 155                 return 0;
 156         }
 157         /* Remove APSS bit mask information */
 158         dci_peripheral_list = dci_peripheral_list >> 1;
 159
 160         if ((1 << peripheral_id) & (dci_peripheral_list))
 161                 return 1;
 162         else
 163                 return 0;
 164 }
 165
 166 static void create_dci_log_mask_tbl(unsigned char *mask, uint8_t dirty)
 167 {
 168         unsigned char *temp = mask;
 169         uint8_t i;
 170
 171         if (!mask)
 172                 return;
 173
 174         /* create hard coded table for log mask with 16 categories */
 175         for (i = 0; i < DCI_MAX_LOG_CODES; i++) {
 176                 *temp = i;
 177                 temp++;
 178                 *temp = dirty ? 1 : 0;
 179                 temp++;
 180                 memset(temp, 0, DCI_MAX_ITEMS_PER_LOG_CODE);
 181                 temp += DCI_MAX_ITEMS_PER_LOG_CODE;
 182         }
 183 }
 184
 185 static void create_dci_event_mask_tbl(unsigned char *tbl_buf)
 186 {
 187         if (tbl_buf)
 188                 memset(tbl_buf, 0, DCI_EVENT_MASK_SIZE);
 189 }
 190
 191 void dci_drain_data(unsigned long data)
 192 {
 193         queue_work(driver->diag_dci_wq, &dci_data_drain_work);
 194 }
 195
 196 static void dci_check_drain_timer(void)
 197 {
 198         if (!dci_timer_in_progress) {
 199                 dci_timer_in_progress = 1;
 200                 mod_timer(&dci_drain_timer, jiffies + msecs_to_jiffies(200));
 201         }
 202 }
 203
 204 #ifdef CONFIG_DIAGFWD_BRIDGE_CODE
 205 static void dci_handshake_work_fn(struct work_struct *work)
 206 {
 207         int err = 0;
 208         int max_retries = 5;
 209
 210         struct dci_channel_status_t *status = container_of(work,
 211                                                 struct dci_channel_status_t,
 212                                                 handshake_work);
 213
 214         if (status->open) {
 215                 pr_debug("diag: In %s, remote dci channel is open, index: %d\n",
 216                          __func__, status->id);
 217                 return;
 218         }
 219
 220         if (status->retry_count == max_retries) {
 221                 status->retry_count = 0;
 222                 pr_info("diag: dci channel connection handshake timed out, id: %d\n",
 223                         status->id);
 224                 err = diagfwd_bridge_close(TOKEN_TO_BRIDGE(status->id));
 225                 if (err) {
 226                         pr_err("diag: In %s, unable to close dci channel id: %d, err: %d\n",
 227                                __func__, status->id, err);
 228                 }
 229                 return;
 230         }
 231         status->retry_count++;
 232         /*
 233          * Sleep for sometime to check for the connection status again. The
 234          * value should be optimum to include a roundabout time for a small
 235          * packet to the remote processor.
 236          */
 237         usleep_range(DCI_HANDSHAKE_RETRY_TIME, DCI_HANDSHAKE_RETRY_TIME + 100);
 238         mod_timer(&status->wait_time,
 239                   jiffies + msecs_to_jiffies(DCI_HANDSHAKE_WAIT_TIME));
 240 }
 241
 242 static void dci_chk_handshake(unsigned long data)
 243 {
 244         int index = (int)data;
 245
 246         if (index < 0 || index >= NUM_DCI_PROC)
 247                 return;
 248
 249         queue_work(driver->diag_dci_wq,
 250                    &dci_channel_status[index].handshake_work);
 251 }
 252 #endif
 253
 254 static int diag_dci_init_buffer(struct diag_dci_buffer_t *buffer, int type)
 255 {
 256         if (!buffer || buffer->data)
 257                 return -EINVAL;
 258
 259         switch (type) {
 260         case DCI_BUF_PRIMARY:
 261                 buffer->capacity = IN_BUF_SIZE;
 262                 buffer->data = vzalloc(buffer->capacity);
 263                 if (!buffer->data)
 264                         return -ENOMEM;
 265                 break;
 266         case DCI_BUF_SECONDARY:
 267                 buffer->data = NULL;
 268                 buffer->capacity = IN_BUF_SIZE;
 269                 break;
 270         case DCI_BUF_CMD:
 271                 buffer->capacity = DIAG_MAX_REQ_SIZE + DCI_BUF_SIZE;
 272                 buffer->data = vzalloc(buffer->capacity);
 273                 if (!buffer->data)
 274                         return -ENOMEM;
 275                 break;
 276         default:
 277                 pr_err("diag: In %s, unknown type %d", __func__, type);
 278                 return -EINVAL;
 279         }
 280
 281         buffer->data_len = 0;
 282         buffer->in_busy = 0;
 283         buffer->buf_type = type;
 284         mutex_init(&buffer->data_mutex);
 285
 286         return 0;
 287 }
 288
 289 static inline int diag_dci_check_buffer(struct diag_dci_buffer_t *buf, int len)
 290 {
 291         if (!buf)
 292                 return -EINVAL;
 293
 294         /* Return 1 if the buffer is not busy and can hold new data */
 295         if ((buf->data_len + len < buf->capacity) && !buf->in_busy)
 296                 return 1;
 297
 298         return 0;
 299 }
 300
 301 static void dci_add_buffer_to_list(struct diag_dci_client_tbl *client,
 302                                    struct diag_dci_buffer_t *buf)
 303 {
 304         if (!buf || !client || !buf->data)
 305                 return;
 306
 307         if (buf->in_list || buf->data_len == 0)
 308                 return;
 309
 310         mutex_lock(&client->write_buf_mutex);
 311         list_add_tail(&buf->buf_track, &client->list_write_buf);
 312         /*
 313          * In the case of DCI, there can be multiple packets in one read. To
 314          * calculate the wakeup source reference count, we must account for each
 315          * packet in a single read.
 316          */
 317         diag_ws_on_read(DIAG_WS_DCI, buf->data_len);
 318         mutex_lock(&buf->data_mutex);
 319         buf->in_busy = 1;
 320         buf->in_list = 1;
 321         mutex_unlock(&buf->data_mutex);
 322         mutex_unlock(&client->write_buf_mutex);
 323 }
 324
 325 static int diag_dci_get_buffer(struct diag_dci_client_tbl *client,
 326                                int data_source, int len)
 327 {
 328         struct diag_dci_buffer_t *buf_primary = NULL;
 329         struct diag_dci_buffer_t *buf_temp = NULL;
 330         struct diag_dci_buffer_t *curr = NULL;
 331
 332         if (!client)
 333                 return -EINVAL;
 334         if (len < 0 || len > IN_BUF_SIZE)
 335                 return -EINVAL;
 336
 337         curr = client->buffers[data_source].buf_curr;
 338         buf_primary = client->buffers[data_source].buf_primary;
 339
 340         if (curr && diag_dci_check_buffer(curr, len) == 1)
 341                 return 0;
 342
 343         dci_add_buffer_to_list(client, curr);
 344         client->buffers[data_source].buf_curr = NULL;
 345
 346         if (diag_dci_check_buffer(buf_primary, len) == 1) {
 347                 client->buffers[data_source].buf_curr = buf_primary;
 348                 return 0;
 349         }
 350
 351         buf_temp = kzalloc(sizeof(struct diag_dci_buffer_t), GFP_KERNEL);
 352         if (!buf_temp)
 353                 return -EIO;
 354
 355         if (!diag_dci_init_buffer(buf_temp, DCI_BUF_SECONDARY)) {
 356                 buf_temp->data = diagmem_alloc(driver, IN_BUF_SIZE,
 357                                                POOL_TYPE_DCI);
 358                 if (!buf_temp->data) {
 359                         kfree(buf_temp);
 360                         buf_temp = NULL;
 361                         return -ENOMEM;
 362                 }
 363                 client->buffers[data_source].buf_curr = buf_temp;
 364                 return 0;
 365         }
 366
 367         kfree(buf_temp);
 368         buf_temp = NULL;
 369         return -EIO;
 370 }
 371
 372 void diag_dci_wakeup_clients()
 373 {
 374         struct list_head *start, *temp;
 375         struct diag_dci_client_tbl *entry = NULL;
 376
 377         mutex_lock(&driver->dci_mutex);
 378         list_for_each_safe(start, temp, &driver->dci_client_list) {
 379                 entry = list_entry(start, struct diag_dci_client_tbl, track);
 380
 381                 /*
 382                  * Don't wake up the client when there is no pending buffer to
 383                  * write or when it is writing to user space
 384                  */
 385                 if (!list_empty(&entry->list_write_buf) && !entry->in_service) {
 386                         mutex_lock(&entry->write_buf_mutex);
 387                         entry->in_service = 1;
 388                         mutex_unlock(&entry->write_buf_mutex);
 389                         diag_update_sleeping_process(entry->client->tgid,
 390                                                      DCI_DATA_TYPE);
 391                 }
 392         }
 393         mutex_unlock(&driver->dci_mutex);
 394 }
 395
 396 void dci_data_drain_work_fn(struct work_struct *work)
 397 {
 398         int i;
 399         struct list_head *start, *temp;
 400         struct diag_dci_client_tbl *entry = NULL;
 401         struct diag_dci_buf_peripheral_t *proc_buf = NULL;
 402         struct diag_dci_buffer_t *buf_temp = NULL;
 403
 404         mutex_lock(&driver->dci_mutex);
 405         list_for_each_safe(start, temp, &driver->dci_client_list) {
 406                 entry = list_entry(start, struct diag_dci_client_tbl, track);
 407                 for (i = 0; i < entry->num_buffers; i++) {
 408                         proc_buf = &entry->buffers[i];
 409
 410                         mutex_lock(&proc_buf->buf_mutex);
 411                         buf_temp = proc_buf->buf_primary;
 412                         if (DCI_CAN_ADD_BUF_TO_LIST(buf_temp))
 413                                 dci_add_buffer_to_list(entry, buf_temp);
 414
 415                         buf_temp = proc_buf->buf_cmd;
 416                         if (DCI_CAN_ADD_BUF_TO_LIST(buf_temp))
 417                                 dci_add_buffer_to_list(entry, buf_temp);
 418
 419                         buf_temp = proc_buf->buf_curr;
 420                         if (DCI_CAN_ADD_BUF_TO_LIST(buf_temp)) {
 421                                 dci_add_buffer_to_list(entry, buf_temp);
 422                                 proc_buf->buf_curr = NULL;
 423                         }
 424                         mutex_unlock(&proc_buf->buf_mutex);
 425                 }
 426                 if (!list_empty(&entry->list_write_buf) && !entry->in_service) {
 427                         mutex_lock(&entry->write_buf_mutex);
 428                         entry->in_service = 1;
 429                         mutex_unlock(&entry->write_buf_mutex);
 430                         diag_update_sleeping_process(entry->client->tgid,
 431                                                      DCI_DATA_TYPE);
 432                 }
 433         }
 434         mutex_unlock(&driver->dci_mutex);
 435         dci_timer_in_progress = 0;
 436 }
 437
 438 static int diag_process_single_dci_pkt(unsigned char *buf, int len,
 439                                        int data_source, int token)
 440 {
 441         uint8_t cmd_code = 0;
 442
 443         if (!buf || len < 0) {
 444                 pr_err("diag: Invalid input in %s, buf: %pK, len: %d\n",
 445                         __func__, buf, len);
 446                 return -EIO;
 447         }
 448
 449         cmd_code = *(uint8_t *)buf;
 450
 451         switch (cmd_code) {
 452         case LOG_CMD_CODE:
 453                 extract_dci_log(buf, len, data_source, token, NULL);
 454                 break;
 455         case EVENT_CMD_CODE:
 456                 extract_dci_events(buf, len, data_source, token, NULL);
 457                 break;
 458         case EXT_HDR_CMD_CODE:
 459                 extract_dci_ext_pkt(buf, len, data_source, token);
 460                 break;
 461         case DCI_PKT_RSP_CODE:
 462         case DCI_DELAYED_RSP_CODE:
 463                 extract_dci_pkt_rsp(buf, len, data_source, token);
 464                 break;
 465         case DCI_CONTROL_PKT_CODE:
 466                 extract_dci_ctrl_pkt(buf, len, token);
 467                 break;
 468         default:
 469                 pr_err("diag: Unable to process single DCI packet, cmd_code: %d, data_source: %d",
 470                         cmd_code, data_source);
 471                 return -EINVAL;
 472         }
 473
 474         return 0;
 475 }
 476
 477 /* Process the data read from apps userspace client */
 478 void diag_process_apps_dci_read_data(int data_type, void *buf, int recd_bytes)
 479 {
 480         int err = 0;
 481
 482         if (!buf) {
 483                 pr_err_ratelimited("diag: In %s, Null buf pointer\n", __func__);
 484                 return;
 485         }
 486
 487         if (data_type != DATA_TYPE_DCI_LOG && data_type != DATA_TYPE_DCI_EVENT
 488                                                 && data_type != DCI_PKT_TYPE) {
 489                 pr_err("diag: In %s, unsupported data_type: 0x%x\n",
 490                                 __func__, (unsigned int)data_type);
 491                 return;
 492         }
 493
 494         err = diag_process_single_dci_pkt(buf, recd_bytes, APPS_DATA,
 495                                           DCI_LOCAL_PROC);
 496         if (err)
 497                 return;
 498
 499         /* wake up all sleeping DCI clients which have some data */
 500         diag_dci_wakeup_clients();
 501         dci_check_drain_timer();
 502 }
 503
 504 void diag_process_remote_dci_read_data(int index, void *buf, int recd_bytes)
 505 {
 506         int read_bytes = 0, err = 0;
 507         uint16_t dci_pkt_len;
 508         struct diag_dci_header_t *header = NULL;
 509         int header_len = sizeof(struct diag_dci_header_t);
 510         int token = BRIDGE_TO_TOKEN(index);
 511
 512         if (!buf)
 513                 return;
 514
 515         diag_dci_record_traffic(recd_bytes, 0, 0, token);
 516
 517         if (!partial_pkt.processing)
 518                 goto start;
 519
 520         if (partial_pkt.remaining > recd_bytes) {
 521                 if ((partial_pkt.read_len + recd_bytes) >
 522                                                         (MAX_DCI_PACKET_SZ)) {
 523                         pr_err("diag: Invalid length %d, %d received in %s\n",
 524                                partial_pkt.read_len, recd_bytes, __func__);
 525                         goto end;
 526                 }
 527                 memcpy(partial_pkt.data + partial_pkt.read_len, buf,
 528                                                                 recd_bytes);
 529                 read_bytes += recd_bytes;
 530                 buf += read_bytes;
 531                 partial_pkt.read_len += recd_bytes;
 532                 partial_pkt.remaining -= recd_bytes;
 533         } else {
 534                 if ((partial_pkt.read_len + partial_pkt.remaining) >
 535                                                         (MAX_DCI_PACKET_SZ)) {
 536                         pr_err("diag: Invalid length during partial read %d, %d received in %s\n",
 537                                partial_pkt.read_len,
 538                                partial_pkt.remaining, __func__);
 539                         goto end;
 540                 }
 541                 memcpy(partial_pkt.data + partial_pkt.read_len, buf,
 542                                                 partial_pkt.remaining);
 543                 read_bytes += partial_pkt.remaining;
 544                 buf += read_bytes;
 545                 partial_pkt.read_len += partial_pkt.remaining;
 546                 partial_pkt.remaining = 0;
 547         }
 548
 549         if (partial_pkt.remaining == 0) {
 550                 /*
 551                  * Retrieve from the DCI control packet after the header = start
 552                  * (1 byte) + version (1 byte) + length (2 bytes)
 553                  */
 554                 diag_process_single_dci_pkt(partial_pkt.data + 4,
 555                                 partial_pkt.read_len - header_len,
 556                                 DCI_REMOTE_DATA, token);
 557                 partial_pkt.read_len = 0;
 558                 partial_pkt.total_len = 0;
 559                 partial_pkt.processing = 0;
 560                 goto start;
 561         }
 562         goto end;
 563
 564 start:
 565         while (read_bytes < recd_bytes) {
 566                 header = (struct diag_dci_header_t *)buf;
 567                 dci_pkt_len = header->length;
 568
 569                 if (header->cmd_code != DCI_CONTROL_PKT_CODE &&
 570                         driver->num_dci_client == 0) {
 571                         read_bytes += header_len + dci_pkt_len;
 572                         buf += header_len + dci_pkt_len;
 573                         continue;
 574                 }
 575
 576                 if (dci_pkt_len + header_len > MAX_DCI_PACKET_SZ) {
 577                         pr_err("diag: Invalid length in the dci packet field %d\n",
 578                                                                 dci_pkt_len);
 579                         break;
 580                 }
 581
 582                 if ((dci_pkt_len + header_len) > (recd_bytes - read_bytes)) {
 583                         partial_pkt.read_len = recd_bytes - read_bytes;
 584                         partial_pkt.total_len = dci_pkt_len + header_len;
 585                         partial_pkt.remaining = partial_pkt.total_len -
 586                                                 partial_pkt.read_len;
 587                         partial_pkt.processing = 1;
 588                         memcpy(partial_pkt.data, buf, partial_pkt.read_len);
 589                         break;
 590                 }
 591                 /*
 592                  * Retrieve from the DCI control packet after the header = start
 593                  * (1 byte) + version (1 byte) + length (2 bytes)
 594                  */
 595                 err = diag_process_single_dci_pkt(buf + 4, dci_pkt_len,
 596                                                  DCI_REMOTE_DATA, DCI_MDM_PROC);
 597                 if (err)
 598                         break;
 599                 read_bytes += header_len + dci_pkt_len;
 600                 buf += header_len + dci_pkt_len; /* advance to next DCI pkt */
 601         }
 602 end:
 603         if (err)
 604                 return;
 605         /* wake up all sleeping DCI clients which have some data */
 606         diag_dci_wakeup_clients();
 607         dci_check_drain_timer();
 608         return;
 609 }
 610
 611 /* Process the data read from the peripheral dci channels */
 612 void diag_dci_process_peripheral_data(struct diagfwd_info *p_info, void *buf,
 613                                       int recd_bytes)
 614 {
 615         int read_bytes = 0, err = 0;
 616         uint16_t dci_pkt_len;
 617         struct diag_dci_pkt_header_t *header = NULL;
 618         uint8_t recv_pkt_cmd_code;
 619
 620         if (!buf || !p_info)
 621                 return;
 622
 623         /*
 624          * Release wakeup source when there are no more clients to
 625          * process DCI data
 626          */
 627         if (driver->num_dci_client == 0) {
 628                 diag_ws_reset(DIAG_WS_DCI);
 629                 return;
 630         }
 631
 632         diag_dci_record_traffic(recd_bytes, p_info->type, p_info->peripheral,
 633                                 DCI_LOCAL_PROC);
 634         while (read_bytes < recd_bytes) {
 635                 header = (struct diag_dci_pkt_header_t *)buf;
 636                 recv_pkt_cmd_code = header->pkt_code;
 637                 dci_pkt_len = header->len;
 638
 639                 /*
 640                  * Check if the length of the current packet is lesser than the
 641                  * remaining bytes in the received buffer. This includes space
 642                  * for the Start byte (1), Version byte (1), length bytes (2)
 643                  * and End byte (1)
 644                  */
 645                 if ((dci_pkt_len + 5) > (recd_bytes - read_bytes)) {
 646                         pr_err("diag: Invalid length in %s, len: %d, dci_pkt_len: %d",
 647                                 __func__, recd_bytes, dci_pkt_len);
 648                         diag_ws_release();
 649                         return;
 650                 }
 651                 /*
 652                  * Retrieve from the DCI control packet after the header = start
 653                  * (1 byte) + version (1 byte) + length (2 bytes)
 654                  */
 655                 err = diag_process_single_dci_pkt(buf + 4, dci_pkt_len,
 656                                                   (int)p_info->peripheral,
 657                                                   DCI_LOCAL_PROC);
 658                 if (err) {
 659                         diag_ws_release();
 660                         break;
 661                 }
 662                 read_bytes += 5 + dci_pkt_len;
 663                 buf += 5 + dci_pkt_len; /* advance to next DCI pkt */
 664         }
 665
 666         if (err)
 667                 return;
 668         /* wake up all sleeping DCI clients which have some data */
 669         diag_dci_wakeup_clients();
 670         dci_check_drain_timer();
 671         return;
 672 }
 673
 674 int diag_dci_query_log_mask(struct diag_dci_client_tbl *entry,
 675                             uint16_t log_code)
 676 {
 677         uint16_t item_num;
 678         uint8_t equip_id, *log_mask_ptr, byte_mask;
 679         int byte_index, offset;
 680
 681         if (!entry) {
 682                 pr_err("diag: In %s, invalid client entry\n", __func__);
 683                 return 0;
 684         }
 685
 686         equip_id = LOG_GET_EQUIP_ID(log_code);
 687         item_num = LOG_GET_ITEM_NUM(log_code);
 688         byte_index = item_num/8 + 2;
 689         byte_mask = 0x01 << (item_num % 8);
 690         offset = equip_id * 514;
 691
 692         if (offset + byte_index >= DCI_LOG_MASK_SIZE) {
 693                 pr_err("diag: In %s, invalid offset: %d, log_code: %d, byte_index: %d\n",
 694                                 __func__, offset, log_code, byte_index);
 695                 return 0;
 696         }
 697
 698         log_mask_ptr = entry->dci_log_mask;
 699         log_mask_ptr = log_mask_ptr + offset + byte_index;
 700         return ((*log_mask_ptr & byte_mask) == byte_mask) ? 1 : 0;
 701
 702 }
 703
 704 int diag_dci_query_event_mask(struct diag_dci_client_tbl *entry,
 705                               uint16_t event_id)
 706 {
 707         uint8_t *event_mask_ptr, byte_mask;
 708         int byte_index, bit_index;
 709
 710         if (!entry) {
 711                 pr_err("diag: In %s, invalid client entry\n", __func__);
 712                 return 0;
 713         }
 714
 715         byte_index = event_id/8;
 716         bit_index = event_id % 8;
 717         byte_mask = 0x1 << bit_index;
 718
 719         if (byte_index >= DCI_EVENT_MASK_SIZE) {
 720                 pr_err("diag: In %s, invalid, event_id: %d, byte_index: %d\n",
 721                                 __func__, event_id, byte_index);
 722                 return 0;
 723         }
 724
 725         event_mask_ptr = entry->dci_event_mask;
 726         event_mask_ptr = event_mask_ptr + byte_index;
 727         return ((*event_mask_ptr & byte_mask) == byte_mask) ? 1 : 0;
 728 }
 729
 730 static int diag_dci_filter_commands(struct diag_pkt_header_t *header)
 731 {
 732         if (!header)
 733                 return -ENOMEM;
 734
 735         switch (header->cmd_code) {
 736         case 0x7d: /* Msg Mask Configuration */
 737         case 0x73: /* Log Mask Configuration */
 738         case 0x81: /* Event Mask Configuration */
 739         case 0x82: /* Event Mask Change */
 740         case 0x60: /* Event Mask Toggle */
 741                 return 1;
 742         }
 743
 744         if (header->cmd_code == 0x4b && header->subsys_id == 0x12) {
 745                 switch (header->subsys_cmd_code) {
 746                 case 0x60: /* Extended Event Mask Config */
 747                 case 0x61: /* Extended Msg Mask Config */
 748                 case 0x62: /* Extended Log Mask Config */
 749                 case 0x20C: /* Set current Preset ID */
 750                 case 0x20D: /* Get current Preset ID */
 751                 case 0x218: /* HDLC Disabled Command */
 752                         return 1;
 753                 }
 754         }
 755
 756         return 0;
 757 }
 758
 759 static struct dci_pkt_req_entry_t *diag_register_dci_transaction(int uid,
 760                                                                  int client_id)
 761 {
 762         struct dci_pkt_req_entry_t *entry = NULL;
 763         entry = kzalloc(sizeof(struct dci_pkt_req_entry_t), GFP_KERNEL);
 764         if (!entry)
 765                 return NULL;
 766
 767         driver->dci_tag++;
 768         entry->client_id = client_id;
 769         entry->uid = uid;
 770         entry->tag = driver->dci_tag;
 771         pr_debug("diag: Registering DCI cmd req, client_id: %d, uid: %d, tag:%d\n",
 772                                 entry->client_id, entry->uid, entry->tag);
 773         list_add_tail(&entry->track, &driver->dci_req_list);
 774
 775         return entry;
 776 }
 777
 778 static struct dci_pkt_req_entry_t *diag_dci_get_request_entry(int tag)
 779 {
 780         struct list_head *start, *temp;
 781         struct dci_pkt_req_entry_t *entry = NULL;
 782         list_for_each_safe(start, temp, &driver->dci_req_list) {
 783                 entry = list_entry(start, struct dci_pkt_req_entry_t, track);
 784                 if (entry->tag == tag)
 785                         return entry;
 786         }
 787         return NULL;
 788 }
 789
 790 static int diag_dci_remove_req_entry(unsigned char *buf, int len,
 791                                      struct dci_pkt_req_entry_t *entry)
 792 {
 793         uint16_t rsp_count = 0, delayed_rsp_id = 0;
 794         if (!buf || len <= 0 || !entry) {
 795                 pr_err("diag: In %s, invalid input buf: %pK, len: %d, entry: %pK\n",
 796                         __func__, buf, len, entry);
 797                 return -EIO;
 798         }
 799
 800         /* It is an immediate response, delete it from the table */
 801         if (*buf != 0x80) {
 802                 list_del(&entry->track);
 803                 kfree(entry);
 804                 entry = NULL;
 805                 return 1;
 806         }
 807
 808         /* It is a delayed response. Check if the length is valid */
 809         if (len < MIN_DELAYED_RSP_LEN) {
 810                 pr_err("diag: Invalid delayed rsp packet length %d\n", len);
 811                 return -EINVAL;
 812         }
 813
 814         /*
 815          * If the delayed response id field (uint16_t at byte 8) is 0 then
 816          * there is only one response and we can remove the request entry.
 817          */
 818         delayed_rsp_id = *(uint16_t *)(buf + 8);
 819         if (delayed_rsp_id == 0) {
 820                 list_del(&entry->track);
 821                 kfree(entry);
 822                 entry = NULL;
 823                 return 1;
 824         }
 825
 826         /*
 827          * Check the response count field (uint16 at byte 10). The request
 828          * entry can be deleted it it is the last response in the sequence.
 829          * It is the last response in the sequence if the response count
 830          * is 1 or if the signed bit gets dropped.
 831          */
 832         rsp_count = *(uint16_t *)(buf + 10);
 833         if (rsp_count > 0 && rsp_count < 0x1000) {
 834                 list_del(&entry->track);
 835                 kfree(entry);
 836                 entry = NULL;
 837                 return 1;
 838         }
 839
 840         return 0;
 841 }
 842
 843 static void dci_process_ctrl_status(unsigned char *buf, int len, int token)
 844 {
 845         struct diag_ctrl_dci_status *header = NULL;
 846         unsigned char *temp = buf;
 847         uint32_t read_len = 0;
 848         uint8_t i;
 849         int peripheral_mask, status;
 850
 851         if (!buf || (len < sizeof(struct diag_ctrl_dci_status))) {
 852                 pr_err("diag: In %s, invalid buf %pK or length: %d\n",
 853                        __func__, buf, len);
 854                 return;
 855         }
 856
 857         if (!VALID_DCI_TOKEN(token)) {
 858                 pr_err("diag: In %s, invalid DCI token %d\n", __func__, token);
 859                 return;
 860         }
 861
 862         header = (struct diag_ctrl_dci_status *)temp;
 863         temp += sizeof(struct diag_ctrl_dci_status);
 864         read_len += sizeof(struct diag_ctrl_dci_status);
 865
 866         for (i = 0; i < header->count; i++) {
 867                 if (read_len > (len - 2)) {
 868                         pr_err("diag: In %s, Invalid length len: %d\n",
 869                                __func__, len);
 870                         return;
 871                 }
 872
 873                 switch (*(uint8_t *)temp) {
 874                 case PERIPHERAL_MODEM:
 875                         peripheral_mask = DIAG_CON_MPSS;
 876                         break;
 877                 case PERIPHERAL_LPASS:
 878                         peripheral_mask = DIAG_CON_LPASS;
 879                         break;
 880                 case PERIPHERAL_WCNSS:
 881                         peripheral_mask = DIAG_CON_WCNSS;
 882                         break;
 883                 case PERIPHERAL_SENSORS:
 884                         peripheral_mask = DIAG_CON_SENSORS;
 885                         break;
 886                 default:
 887                         pr_err("diag: In %s, unknown peripheral, peripheral: %d\n",
 888                                 __func__, *(uint8_t *)temp);
 889                         return;
 890                 }
 891                 temp += sizeof(uint8_t);
 892                 read_len += sizeof(uint8_t);
 893
 894                 status = (*(uint8_t *)temp) ? DIAG_STATUS_OPEN :
 895                                                         DIAG_STATUS_CLOSED;
 896                 temp += sizeof(uint8_t);
 897                 read_len += sizeof(uint8_t);
 898                 diag_dci_notify_client(peripheral_mask, status, token);
 899         }
 900 }
 901
 902 static void dci_process_ctrl_handshake_pkt(unsigned char *buf, int len,
 903                                            int token)
 904 {
 905         struct diag_ctrl_dci_handshake_pkt *header = NULL;
 906         unsigned char *temp = buf;
 907         int err = 0;
 908
 909         if (!buf || (len < sizeof(struct diag_ctrl_dci_handshake_pkt)))
 910                 return;
 911
 912         if (!VALID_DCI_TOKEN(token))
 913                 return;
 914
 915         header = (struct diag_ctrl_dci_handshake_pkt *)temp;
 916         if (header->magic == DCI_MAGIC) {
 917                 dci_channel_status[token].open = 1;
 918                 err = dci_ops_tbl[token].send_log_mask(token);
 919                 if (err) {
 920                         pr_err("diag: In %s, unable to send log mask to token: %d, err: %d\n",
 921                                __func__, token, err);
 922                 }
 923                 err = dci_ops_tbl[token].send_event_mask(token);
 924                 if (err) {
 925                         pr_err("diag: In %s, unable to send event mask to token: %d, err: %d\n",
 926                                __func__, token, err);
 927                 }
 928         }
 929 }
 930
 931 void extract_dci_ctrl_pkt(unsigned char *buf, int len, int token)
 932 {
 933         unsigned char *temp = buf;
 934         uint32_t ctrl_pkt_id;
 935
 936         diag_ws_on_read(DIAG_WS_DCI, len);
 937         if (!buf) {
 938                 pr_err("diag: Invalid buffer in %s\n", __func__);
 939                 goto err;
 940         }
 941
 942         if (len < (sizeof(uint8_t) + sizeof(uint32_t))) {
 943                 pr_err("diag: In %s, invalid length %d\n", __func__, len);
 944                 goto err;
 945         }
 946
 947         /* Skip the Control packet command code */
 948         temp += sizeof(uint8_t);
 949         len -= sizeof(uint8_t);
 950         ctrl_pkt_id = *(uint32_t *)temp;
 951         switch (ctrl_pkt_id) {
 952         case DIAG_CTRL_MSG_DCI_CONNECTION_STATUS:
 953                 dci_process_ctrl_status(temp, len, token);
 954                 break;
 955         case DIAG_CTRL_MSG_DCI_HANDSHAKE_PKT:
 956                 dci_process_ctrl_handshake_pkt(temp, len, token);
 957                 break;
 958         default:
 959                 pr_debug("diag: In %s, unknown control pkt %d\n",
 960                          __func__, ctrl_pkt_id);
 961                 break;
 962         }
 963
 964 err:
 965         /*
 966          * DCI control packets are not consumed by the clients. Mimic client
 967          * consumption by setting and clearing the wakeup source copy_count
 968          * explicitly.
 969          */
 970         diag_ws_on_copy_fail(DIAG_WS_DCI);
 971 }
 972
 973 void extract_dci_pkt_rsp(unsigned char *buf, int len, int data_source,
 974                          int token)
 975 {
 976         int tag;
 977         struct diag_dci_client_tbl *entry = NULL;
 978         void *temp_buf = NULL;
 979         uint8_t dci_cmd_code, cmd_code_len, delete_flag = 0;
 980         uint32_t rsp_len = 0;
 981         struct diag_dci_buffer_t *rsp_buf = NULL;
 982         struct dci_pkt_req_entry_t *req_entry = NULL;
 983         unsigned char *temp = buf;
 984         int save_req_uid = 0;
 985         struct diag_dci_pkt_rsp_header_t pkt_rsp_header;
 986
 987         if (!buf) {
 988                 pr_err("diag: Invalid pointer in %s\n", __func__);
 989                 return;
 990         }
 991         dci_cmd_code = *(uint8_t *)(temp);
 992         if (dci_cmd_code == DCI_PKT_RSP_CODE) {
 993                 cmd_code_len = sizeof(uint8_t);
 994         } else if (dci_cmd_code == DCI_DELAYED_RSP_CODE) {
 995                 cmd_code_len = sizeof(uint32_t);
 996         } else {
 997                 pr_err("diag: In %s, invalid command code %d\n", __func__,
 998                                                                 dci_cmd_code);
 999                 return;
1000         }
1001         temp += cmd_code_len;
1002         tag = *(int *)temp;
1003         temp += sizeof(int);
1004
1005         /*
1006          * The size of the response is (total length) - (length of the command
1007          * code, the tag (int)
1008          */
1009         rsp_len = len - (cmd_code_len + sizeof(int));
1010         if ((rsp_len == 0) || (rsp_len > (len - 5))) {
1011                 pr_err("diag: Invalid length in %s, len: %d, rsp_len: %d",
1012                                                 __func__, len, rsp_len);
1013                 return;
1014         }
1015
1016         mutex_lock(&driver->dci_mutex);
1017         req_entry = diag_dci_get_request_entry(tag);
1018         if (!req_entry) {
1019                 pr_err_ratelimited("diag: No matching client for DCI data\n");
1020                 mutex_unlock(&driver->dci_mutex);
1021                 return;
1022         }
1023
1024         entry = diag_dci_get_client_entry(req_entry->client_id);
1025         if (!entry) {
1026                 pr_err("diag: In %s, couldn't find client entry, id:%d\n",
1027                                                 __func__, req_entry->client_id);
1028                 mutex_unlock(&driver->dci_mutex);
1029                 return;
1030         }
1031
1032         save_req_uid = req_entry->uid;
1033         /* Remove the headers and send only the response to this function */
1034         delete_flag = diag_dci_remove_req_entry(temp, rsp_len, req_entry);
1035         if (delete_flag < 0) {
1036                 mutex_unlock(&driver->dci_mutex);
1037                 return;
1038         }
1039
1040         mutex_lock(&entry->buffers[data_source].buf_mutex);
1041         rsp_buf = entry->buffers[data_source].buf_cmd;
1042
1043         mutex_lock(&rsp_buf->data_mutex);
1044         /*
1045          * Check if we can fit the data in the rsp buffer. The total length of
1046          * the rsp is the rsp length (write_len) + DCI_PKT_RSP_TYPE header (int)
1047          * + field for length (int) + delete_flag (uint8_t)
1048          */
1049         if ((rsp_buf->data_len + 9 + rsp_len) > rsp_buf->capacity) {
1050                 pr_alert("diag: create capacity for pkt rsp\n");
1051                 rsp_buf->capacity += 9 + rsp_len;
1052                 temp_buf = krealloc(rsp_buf->data, rsp_buf->capacity,
1053                                     GFP_KERNEL);
1054                 if (!temp_buf) {
1055                         pr_err("diag: DCI realloc failed\n");
1056                         mutex_unlock(&rsp_buf->data_mutex);
1057                         mutex_unlock(&entry->buffers[data_source].buf_mutex);
1058                         mutex_unlock(&driver->dci_mutex);
1059                         return;
1060                 } else {
1061                         rsp_buf->data = temp_buf;
1062                 }
1063         }
1064
1065         /* Fill in packet response header information */
1066         pkt_rsp_header.type = DCI_PKT_RSP_TYPE;
1067         /* Packet Length = Response Length + Length of uid field (int) */
1068         pkt_rsp_header.length = rsp_len + sizeof(int);
1069         pkt_rsp_header.delete_flag = delete_flag;
1070         pkt_rsp_header.uid = save_req_uid;
1071         memcpy(rsp_buf->data + rsp_buf->data_len, &pkt_rsp_header,
1072                 sizeof(struct diag_dci_pkt_rsp_header_t));
1073         rsp_buf->data_len += sizeof(struct diag_dci_pkt_rsp_header_t);
1074         memcpy(rsp_buf->data + rsp_buf->data_len, temp, rsp_len);
1075         rsp_buf->data_len += rsp_len;
1076         rsp_buf->data_source = data_source;
1077
1078         mutex_unlock(&rsp_buf->data_mutex);
1079
1080         /*
1081          * Add directly to the list for writing responses to the
1082          * userspace as these shouldn't be buffered and shouldn't wait
1083          * for log and event buffers to be full
1084          */
1085         dci_add_buffer_to_list(entry, rsp_buf);
1086         mutex_unlock(&entry->buffers[data_source].buf_mutex);
1087         mutex_unlock(&driver->dci_mutex);
1088 }
1089
1090 static void copy_ext_hdr(struct diag_dci_buffer_t *data_buffer, void *ext_hdr)
1091 {
1092         if (!data_buffer) {
1093                 pr_err("diag: In %s, data buffer is NULL", __func__);
1094                 return;
1095         }
1096
1097         *(int *)(data_buffer->data + data_buffer->data_len) =
1098                         DCI_EXT_HDR_TYPE;
1099         data_buffer->data_len += sizeof(int);
1100         memcpy(data_buffer->data + data_buffer->data_len, ext_hdr,
1101                         EXT_HDR_LEN);
1102         data_buffer->data_len += EXT_HDR_LEN;
1103 }
1104
1105 static void copy_dci_event(unsigned char *buf, int len,
1106                         struct diag_dci_client_tbl *client, int data_source,
1107                         void *ext_hdr)
1108 {
1109         struct diag_dci_buffer_t *data_buffer = NULL;
1110         struct diag_dci_buf_peripheral_t *proc_buf = NULL;
1111         int err = 0, total_len = 0;
1112
1113         if (!buf || !client) {
1114                 pr_err("diag: Invalid pointers in %s", __func__);
1115                 return;
1116         }
1117
1118         total_len = sizeof(int) + len;
1119         if (ext_hdr)
1120                 total_len += sizeof(int) + EXT_HDR_LEN;
1121
1122         proc_buf = &client->buffers[data_source];
1123         mutex_lock(&proc_buf->buf_mutex);
1124         mutex_lock(&proc_buf->health_mutex);
1125         err = diag_dci_get_buffer(client, data_source, total_len);
1126         if (err) {
1127                 if (err == -ENOMEM)
1128                         proc_buf->health.dropped_events++;
1129                 else
1130                         pr_err("diag: In %s, invalid packet\n", __func__);
1131                 mutex_unlock(&proc_buf->health_mutex);
1132                 mutex_unlock(&proc_buf->buf_mutex);
1133                 return;
1134         }
1135
1136         data_buffer = proc_buf->buf_curr;
1137
1138         proc_buf->health.received_events++;
1139         mutex_unlock(&proc_buf->health_mutex);
1140         mutex_unlock(&proc_buf->buf_mutex);
1141
1142         mutex_lock(&data_buffer->data_mutex);
1143         if (ext_hdr)
1144                 copy_ext_hdr(data_buffer, ext_hdr);
1145
1146         *(int *)(data_buffer->data + data_buffer->data_len) = DCI_EVENT_TYPE;
1147         data_buffer->data_len += sizeof(int);
1148         memcpy(data_buffer->data + data_buffer->data_len, buf, len);
1149         data_buffer->data_len += len;
1150         data_buffer->data_source = data_source;
1151         mutex_unlock(&data_buffer->data_mutex);
1152
1153 }
1154
1155 void extract_dci_events(unsigned char *buf, int len, int data_source,
1156                 int token, void *ext_hdr)
1157 {
1158         uint16_t event_id, event_id_packet, length, temp_len;
1159         uint8_t payload_len, payload_len_field;
1160         uint8_t timestamp[8] = {0}, timestamp_len;
1161         unsigned char event_data[MAX_EVENT_SIZE];
1162         unsigned int total_event_len;
1163         struct list_head *start, *temp;
1164         struct diag_dci_client_tbl *entry = NULL;
1165
1166         if (!buf) {
1167                 pr_err("diag: In %s buffer is NULL\n", __func__);
1168                 return;
1169         }
1170         /*
1171          * 1 byte for event code and 2 bytes for the length field.
1172          * The length field indicates the total length removing the cmd_code
1173          * and the lenght field. The event parsing in that case should happen
1174          * till the end.
1175          */
1176         if (len < 3) {
1177                 pr_err("diag: In %s invalid len: %d\n", __func__, len);
1178                 return;
1179         }
1180         length = *(uint16_t *)(buf + 1); /* total length of event series */
1181         if ((length == 0) || (len != (length + 3))) {
1182                 pr_err("diag: Incoming dci event length: %d is invalid\n",
1183                         length);
1184                 return;
1185         }
1186         /*
1187          * Move directly to the start of the event series.
1188          * The event parsing should happen from start of event
1189          * series till the end.
1190          */
1191         temp_len = 3;
1192         while (temp_len < length) {
1193                 event_id_packet = *(uint16_t *)(buf + temp_len);
1194                 event_id = event_id_packet & 0x0FFF; /* extract 12 bits */
1195                 if (event_id_packet & 0x8000) {
1196                         /* The packet has the two smallest byte of the
1197                          * timestamp
1198                          */
1199                         timestamp_len = 2;
1200                 } else {
1201                         /* The packet has the full timestamp. The first event
1202                          * will always have full timestamp. Save it in the
1203                          * timestamp buffer and use it for subsequent events if
1204                          * necessary.
1205                          */
1206                         timestamp_len = 8;
1207                         if ((temp_len + timestamp_len + 2) <= len)
1208                                 memcpy(timestamp, buf + temp_len + 2,
1209                                         timestamp_len);
1210                         else {
1211                                 pr_err("diag: Invalid length in %s, len: %d, temp_len: %d",
1212                                                 __func__, len, temp_len);
1213                                 return;
1214                         }
1215                 }
1216                 /* 13th and 14th bit represent the payload length */
1217                 if (((event_id_packet & 0x6000) >> 13) == 3) {
1218                         payload_len_field = 1;
1219                         if ((temp_len + timestamp_len + 3) <= len) {
1220                                 payload_len = *(uint8_t *)
1221                                         (buf + temp_len + 2 + timestamp_len);
1222                         } else {
1223                                 pr_err("diag: Invalid length in %s, len: %d, temp_len: %d",
1224                                                 __func__, len, temp_len);
1225                                 return;
1226                         }
1227                         if ((payload_len < (MAX_EVENT_SIZE - 13)) &&
1228                         ((temp_len + timestamp_len + payload_len + 3) <= len)) {
1229                                 /*
1230                                  * Copy the payload length and the payload
1231                                  * after skipping temp_len bytes for already
1232                                  * parsed packet, timestamp_len for timestamp
1233                                  * buffer, 2 bytes for event_id_packet.
1234                                  */
1235                                 memcpy(event_data + 12, buf + temp_len + 2 +
1236                                                         timestamp_len, 1);
1237                                 memcpy(event_data + 13, buf + temp_len + 2 +
1238                                         timestamp_len + 1, payload_len);
1239                         } else {
1240                                 pr_err("diag: event > %d, payload_len = %d, temp_len = %d\n",
1241                                 (MAX_EVENT_SIZE - 13), payload_len, temp_len);
1242                                 return;
1243                         }
1244                 } else {
1245                         payload_len_field = 0;
1246                         payload_len = (event_id_packet & 0x6000) >> 13;
1247                         /*
1248                          * Copy the payload after skipping temp_len bytes
1249                          * for already parsed packet, timestamp_len for
1250                          * timestamp buffer, 2 bytes for event_id_packet.
1251                          */
1252                         if ((payload_len < (MAX_EVENT_SIZE - 12)) &&
1253                         ((temp_len + timestamp_len + payload_len + 2) <= len))
1254                                 memcpy(event_data + 12, buf + temp_len + 2 +
1255                                                 timestamp_len, payload_len);
1256                         else {
1257                                 pr_err("diag: event > %d, payload_len = %d, temp_len = %d\n",
1258                                 (MAX_EVENT_SIZE - 12), payload_len, temp_len);
1259                                 return;
1260                         }
1261                 }
1262
1263                 /* Before copying the data to userspace, check if we are still
1264                  * within the buffer limit. This is an error case, don't count
1265                  * it towards the health statistics.
1266                  *
1267                  * Here, the offset of 2 bytes(uint16_t) is for the
1268                  * event_id_packet length
1269                  */
1270                 temp_len += sizeof(uint16_t) + timestamp_len +
1271                                                 payload_len_field + payload_len;
1272                 if (temp_len > len) {
1273                         pr_err("diag: Invalid length in %s, len: %d, read: %d",
1274                                                 __func__, len, temp_len);
1275                         return;
1276                 }
1277
1278                 /* 2 bytes for the event id & timestamp len is hard coded to 8,
1279                    as individual events have full timestamp */
1280                 *(uint16_t *)(event_data) = 10 +
1281                                         payload_len_field + payload_len;
1282                 *(uint16_t *)(event_data + 2) = event_id_packet & 0x7FFF;
1283                 memcpy(event_data + 4, timestamp, 8);
1284                 /* 2 bytes for the event length field which is added to
1285                    the event data */
1286                 total_event_len = 2 + 10 + payload_len_field + payload_len;
1287                 /* parse through event mask tbl of each client and check mask */
1288                 mutex_lock(&driver->dci_mutex);
1289                 list_for_each_safe(start, temp, &driver->dci_client_list) {
1290                         entry = list_entry(start, struct diag_dci_client_tbl,
1291                                                                         track);
1292                         if (entry->client_info.token != token)
1293                                 continue;
1294                         if (diag_dci_query_event_mask(entry, event_id)) {
1295                                 /* copy to client buffer */
1296                                 copy_dci_event(event_data, total_event_len,
1297                                                entry, data_source, ext_hdr);
1298                         }
1299                 }
1300                 mutex_unlock(&driver->dci_mutex);
1301         }
1302 }
1303
1304 static void copy_dci_log(unsigned char *buf, int len,
1305                          struct diag_dci_client_tbl *client, int data_source,
1306                          void *ext_hdr)
1307 {
1308         uint16_t log_length = 0;
1309         struct diag_dci_buffer_t *data_buffer = NULL;
1310         struct diag_dci_buf_peripheral_t *proc_buf = NULL;
1311         int err = 0, total_len = 0;
1312
1313         if (!buf || !client) {
1314                 pr_err("diag: Invalid pointers in %s", __func__);
1315                 return;
1316         }
1317
1318         log_length = *(uint16_t *)(buf + 2);
1319         if (log_length > USHRT_MAX - 4) {
1320                 pr_err("diag: Integer overflow in %s, log_len: %d",
1321                                 __func__, log_length);
1322                 return;
1323         }
1324         total_len = sizeof(int) + log_length;
1325         if (ext_hdr)
1326                 total_len += sizeof(int) + EXT_HDR_LEN;
1327
1328         /* Check if we are within the len. The check should include the
1329          * first 4 bytes for the Log code(2) and the length bytes (2)
1330          */
1331         if ((log_length + sizeof(uint16_t) + 2) > len) {
1332                 pr_err("diag: Invalid length in %s, log_len: %d, len: %d",
1333                                                 __func__, log_length, len);
1334                 return;
1335         }
1336
1337         proc_buf = &client->buffers[data_source];
1338         mutex_lock(&proc_buf->buf_mutex);
1339         mutex_lock(&proc_buf->health_mutex);
1340         err = diag_dci_get_buffer(client, data_source, total_len);
1341         if (err) {
1342                 if (err == -ENOMEM)
1343                         proc_buf->health.dropped_logs++;
1344                 else
1345                         pr_err("diag: In %s, invalid packet\n", __func__);
1346                 mutex_unlock(&proc_buf->health_mutex);
1347                 mutex_unlock(&proc_buf->buf_mutex);
1348                 return;
1349         }
1350
1351         data_buffer = proc_buf->buf_curr;
1352         proc_buf->health.received_logs++;
1353         mutex_unlock(&proc_buf->health_mutex);
1354         mutex_unlock(&proc_buf->buf_mutex);
1355
1356         mutex_lock(&data_buffer->data_mutex);
1357         if (!data_buffer->data) {
1358                 mutex_unlock(&data_buffer->data_mutex);
1359                 return;
1360         }
1361         if (ext_hdr)
1362                 copy_ext_hdr(data_buffer, ext_hdr);
1363
1364         *(int *)(data_buffer->data + data_buffer->data_len) = DCI_LOG_TYPE;
1365         data_buffer->data_len += sizeof(int);
1366         memcpy(data_buffer->data + data_buffer->data_len, buf + sizeof(int),
1367                log_length);
1368         data_buffer->data_len += log_length;
1369         data_buffer->data_source = data_source;
1370         mutex_unlock(&data_buffer->data_mutex);
1371 }
1372
1373 void extract_dci_log(unsigned char *buf, int len, int data_source, int token,
1374                         void *ext_hdr)
1375 {
1376         uint16_t log_code, read_bytes = 0;
1377         struct list_head *start, *temp;
1378         struct diag_dci_client_tbl *entry = NULL;
1379
1380         if (!buf) {
1381                 pr_err("diag: In %s buffer is NULL\n", __func__);
1382                 return;
1383         }
1384         /*
1385          * The first eight bytes for the incoming log packet contains
1386          * Command code (2), the length of the packet (2), the length
1387          * of the log (2) and log code (2)
1388          */
1389         if (len < 8) {
1390                 pr_err("diag: In %s invalid len: %d\n", __func__, len);
1391                 return;
1392         }
1393
1394         log_code = *(uint16_t *)(buf + 6);
1395         read_bytes += sizeof(uint16_t) + 6;
1396
1397         /* parse through log mask table of each client and check mask */
1398         mutex_lock(&driver->dci_mutex);
1399         list_for_each_safe(start, temp, &driver->dci_client_list) {
1400                 entry = list_entry(start, struct diag_dci_client_tbl, track);
1401                 if (entry->client_info.token != token)
1402                         continue;
1403                 if (diag_dci_query_log_mask(entry, log_code)) {
1404                         pr_debug("\t log code %x needed by client %d",
1405                                  log_code, entry->client->tgid);
1406                         /* copy to client buffer */
1407                         copy_dci_log(buf, len, entry, data_source, ext_hdr);
1408                 }
1409         }
1410         mutex_unlock(&driver->dci_mutex);
1411 }
1412
1413 void extract_dci_ext_pkt(unsigned char *buf, int len, int data_source,
1414                 int token)
1415 {
1416         uint8_t version, pkt_cmd_code = 0;
1417         unsigned char *pkt = NULL;
1418
1419         if (!buf) {
1420                 pr_err("diag: In %s buffer is NULL\n", __func__);
1421                 return;
1422         }
1423         if (len < (EXT_HDR_LEN + sizeof(uint8_t))) {
1424                 pr_err("diag: In %s invalid len: %d\n", __func__, len);
1425                 return;
1426         }
1427
1428         version = *(uint8_t *)buf + 1;
1429         if (version < EXT_HDR_VERSION)  {
1430                 pr_err("diag: %s, Extended header with invalid version: %d\n",
1431                         __func__, version);
1432                 return;
1433         }
1434
1435         pkt = buf + EXT_HDR_LEN;
1436         pkt_cmd_code = *(uint8_t *)pkt;
1437         len -= EXT_HDR_LEN;
1438
1439         switch (pkt_cmd_code) {
1440         case LOG_CMD_CODE:
1441                 extract_dci_log(pkt, len, data_source, token, buf);
1442                 break;
1443         case EVENT_CMD_CODE:
1444                 extract_dci_events(pkt, len, data_source, token, buf);
1445                 break;
1446         default:
1447                 pr_err("diag: %s unsupported cmd_code: %d, data_source: %d\n",
1448                         __func__, pkt_cmd_code, data_source);
1449                 return;
1450         }
1451 }
1452
1453 void diag_dci_channel_open_work(struct work_struct *work)
1454 {
1455         int i, j;
1456         char dirty_bits[16];
1457         uint8_t *client_log_mask_ptr;
1458         uint8_t *log_mask_ptr;
1459         int ret;
1460         struct list_head *start, *temp;
1461         struct diag_dci_client_tbl *entry = NULL;
1462
1463         /* Update apps and peripheral(s) with the dci log and event masks */
1464         memset(dirty_bits, 0, 16 * sizeof(uint8_t));
1465
1466         /*
1467          * From each log entry used by each client, determine
1468          * which log entries in the cumulative logs that need
1469          * to be updated on the peripheral.
1470          */
1471         mutex_lock(&driver->dci_mutex);
1472         list_for_each_safe(start, temp, &driver->dci_client_list) {
1473                 entry = list_entry(start, struct diag_dci_client_tbl, track);
1474                 if (entry->client_info.token != DCI_LOCAL_PROC)
1475                         continue;
1476                 client_log_mask_ptr = entry->dci_log_mask;
1477                 for (j = 0; j < 16; j++) {
1478                         if (*(client_log_mask_ptr+1))
1479                                 dirty_bits[j] = 1;
1480                         client_log_mask_ptr += 514;
1481                 }
1482         }
1483         mutex_unlock(&driver->dci_mutex);
1484
1485         mutex_lock(&dci_log_mask_mutex);
1486         /* Update the appropriate dirty bits in the cumulative mask */
1487         log_mask_ptr = dci_ops_tbl[DCI_LOCAL_PROC].log_mask_composite;
1488         for (i = 0; i < 16; i++) {
1489                 if (dirty_bits[i])
1490                         *(log_mask_ptr+1) = dirty_bits[i];
1491
1492                 log_mask_ptr += 514;
1493         }
1494         mutex_unlock(&dci_log_mask_mutex);
1495
1496         /* Send updated mask to userspace clients */
1497         diag_update_userspace_clients(DCI_LOG_MASKS_TYPE);
1498         /* Send updated log mask to peripherals */
1499         ret = dci_ops_tbl[DCI_LOCAL_PROC].send_log_mask(DCI_LOCAL_PROC);
1500
1501         /* Send updated event mask to userspace clients */
1502         diag_update_userspace_clients(DCI_EVENT_MASKS_TYPE);
1503         /* Send updated event mask to peripheral */
1504         ret = dci_ops_tbl[DCI_LOCAL_PROC].send_event_mask(DCI_LOCAL_PROC);
1505 }
1506
1507 void diag_dci_notify_client(int peripheral_mask, int data, int proc)
1508 {
1509         int stat = 0;
1510         struct siginfo info;
1511         struct list_head *start, *temp;
1512         struct diag_dci_client_tbl *entry = NULL;
1513         struct pid *pid_struct = NULL;
1514         struct task_struct *dci_task = NULL;
1515
1516         memset(&info, 0, sizeof(struct siginfo));
1517         info.si_code = SI_QUEUE;
1518         info.si_int = (peripheral_mask | data);
1519         if (data == DIAG_STATUS_OPEN)
1520                 dci_ops_tbl[proc].peripheral_status |= peripheral_mask;
1521         else
1522                 dci_ops_tbl[proc].peripheral_status &= ~peripheral_mask;
1523
1524         /* Notify the DCI process that the peripheral DCI Channel is up */
1525         mutex_lock(&driver->dci_mutex);
1526         list_for_each_safe(start, temp, &driver->dci_client_list) {
1527                 entry = list_entry(start, struct diag_dci_client_tbl, track);
1528                 if (entry->client_info.token != proc)
1529                         continue;
1530                 if (entry->client_info.notification_list & peripheral_mask) {
1531                         info.si_signo = entry->client_info.signal_type;
1532                         pid_struct = find_get_pid(entry->tgid);
1533                         if (pid_struct) {
1534                                 dci_task = get_pid_task(pid_struct,
1535                                                 PIDTYPE_PID);
1536                                 if (!dci_task) {
1537                                         DIAG_LOG(DIAG_DEBUG_PERIPHERALS,
1538                                                 "diag: dci client with pid = %d Exited..\n",
1539                                                 entry->tgid);
1540                                         put_pid(pid_struct);
1541                                         mutex_unlock(&driver->dci_mutex);
1542                                         return;
1543                                 }
1544                                 if (entry->client &&
1545                                         entry->tgid == dci_task->tgid) {
1546                                         DIAG_LOG(DIAG_DEBUG_DCI,
1547                                                 "entry tgid = %d, dci client tgid = %d\n",
1548                                                 entry->tgid, dci_task->tgid);
1549                                         stat = send_sig_info(
1550                                                 entry->client_info.signal_type,
1551                                                 &info, dci_task);
1552                                         if (stat)
1553                                                 pr_err("diag: Err sending dci signal to client, signal data: 0x%x, stat: %d\n",
1554                                                         info.si_int, stat);
1555                                 } else {
1556                                         pr_err("diag: client data is corrupted, signal data: 0x%x, stat: %d\n",
1557                                                 info.si_int, stat);
1558                                 }
1559                                 put_task_struct(dci_task);
1560                                 put_pid(pid_struct);
1561                         }
1562                 }
1563         }
1564         mutex_unlock(&driver->dci_mutex);
1565 }
1566
1567 static int diag_send_dci_pkt(struct diag_cmd_reg_t *entry,
1568                              unsigned char *buf, int len, int tag)
1569 {
1570         int i, status = DIAG_DCI_NO_ERROR;
1571         uint32_t write_len = 0;
1572         struct diag_dci_pkt_header_t header;
1573
1574         if (!entry)
1575                 return -EIO;
1576
1577         if (len < 1 || len > DIAG_MAX_REQ_SIZE) {
1578                 pr_err("diag: dci: In %s, invalid length %d, max_length: %d\n",
1579                        __func__, len, (int)(DCI_REQ_BUF_SIZE - sizeof(header)));
1580                 return -EIO;
1581         }
1582
1583         if ((len + sizeof(header) + sizeof(uint8_t)) > DCI_BUF_SIZE) {
1584                 pr_err("diag: dci: In %s, invalid length %d for apps_dci_buf, max_length: %d\n",
1585                        __func__, len, DIAG_MAX_REQ_SIZE);
1586                 return -EIO;
1587         }
1588
1589         mutex_lock(&driver->dci_mutex);
1590         /* prepare DCI packet */
1591         header.start = CONTROL_CHAR;
1592         header.version = 1;
1593         header.len = len + sizeof(int) + sizeof(uint8_t);
1594         header.pkt_code = DCI_PKT_RSP_CODE;
1595         header.tag = tag;
1596         memcpy(driver->apps_dci_buf, &header, sizeof(header));
1597         write_len += sizeof(header);
1598         memcpy(driver->apps_dci_buf + write_len , buf, len);
1599         write_len += len;
1600         *(uint8_t *)(driver->apps_dci_buf + write_len) = CONTROL_CHAR;
1601         write_len += sizeof(uint8_t);
1602
1603         /* This command is registered locally on the Apps */
1604         if (entry->proc == APPS_DATA) {
1605                 diag_update_pkt_buffer(driver->apps_dci_buf, write_len,
1606                                        DCI_PKT_TYPE);
1607                 diag_update_sleeping_process(entry->pid, DCI_PKT_TYPE);
1608                 mutex_unlock(&driver->dci_mutex);
1609                 return DIAG_DCI_NO_ERROR;
1610         }
1611
1612         for (i = 0; i < NUM_PERIPHERALS; i++)
1613                 if (entry->proc == i) {
1614                         status = 1;
1615                         break;
1616                 }
1617
1618         if (status) {
1619                 status = diag_dci_write_proc(entry->proc,
1620                                              DIAG_DATA_TYPE,
1621                                              driver->apps_dci_buf,
1622                                              write_len);
1623         } else {
1624                 pr_err("diag: Cannot send packet to peripheral %d",
1625                        entry->proc);
1626                 status = DIAG_DCI_SEND_DATA_FAIL;
1627         }
1628         mutex_unlock(&driver->dci_mutex);
1629         return status;
1630 }
1631
1632 #ifdef CONFIG_DIAGFWD_BRIDGE_CODE
1633 unsigned char *dci_get_buffer_from_bridge(int token)
1634 {
1635         uint8_t retries = 0, max_retries = 3;
1636         unsigned char *buf = NULL;
1637
1638         do {
1639                 buf = diagmem_alloc(driver, DIAG_MDM_BUF_SIZE,
1640                                     dci_ops_tbl[token].mempool);
1641                 if (!buf) {
1642                         usleep_range(5000, 5100);
1643                         retries++;
1644                 } else
1645                         break;
1646         } while (retries < max_retries);
1647
1648         return buf;
1649 }
1650
1651 int diag_dci_write_bridge(int token, unsigned char *buf, int len)
1652 {
1653         return diagfwd_bridge_write(TOKEN_TO_BRIDGE(token), buf, len);
1654 }
1655
1656 int diag_dci_write_done_bridge(int index, unsigned char *buf, int len)
1657 {
1658         int token = BRIDGE_TO_TOKEN(index);
1659         if (!VALID_DCI_TOKEN(token)) {
1660                 pr_err("diag: Invalid DCI token %d in %s\n", token, __func__);
1661                 return -EINVAL;
1662         }
1663         diagmem_free(driver, buf, dci_ops_tbl[token].mempool);
1664         return 0;
1665 }
1666 #endif
1667
1668 #ifdef CONFIG_DIAGFWD_BRIDGE_CODE
1669 static int diag_send_dci_pkt_remote(unsigned char *data, int len, int tag,
1670                                     int token)
1671 {
1672         unsigned char *buf = NULL;
1673         struct diag_dci_header_t dci_header;
1674         int dci_header_size = sizeof(struct diag_dci_header_t);
1675         int ret = DIAG_DCI_NO_ERROR;
1676         uint32_t write_len = 0;
1677
1678         if (!data)
1679                 return -EIO;
1680
1681         buf = dci_get_buffer_from_bridge(token);
1682         if (!buf) {
1683                 pr_err("diag: In %s, unable to get dci buffers to write data\n",
1684                         __func__);
1685                 return -EAGAIN;
1686         }
1687
1688         dci_header.start = CONTROL_CHAR;
1689         dci_header.version = 1;
1690         /*
1691          * The Length of the DCI packet = length of the command + tag (int) +
1692          * the command code size (uint8_t)
1693          */
1694         dci_header.length = len + sizeof(int) + sizeof(uint8_t);
1695         dci_header.cmd_code = DCI_PKT_RSP_CODE;
1696
1697         memcpy(buf + write_len, &dci_header, dci_header_size);
1698         write_len += dci_header_size;
1699         *(int *)(buf + write_len) = tag;
1700         write_len += sizeof(int);
1701         memcpy(buf + write_len, data, len);
1702         write_len += len;
1703         *(buf + write_len) = CONTROL_CHAR; /* End Terminator */
1704         write_len += sizeof(uint8_t);
1705
1706         ret = diag_dci_write_bridge(token, buf, write_len);
1707         if (ret) {
1708                 pr_err("diag: error writing dci pkt to remote proc, token: %d, err: %d\n",
1709                         token, ret);
1710                 diagmem_free(driver, buf, dci_ops_tbl[token].mempool);
1711         } else {
1712                 ret = DIAG_DCI_NO_ERROR;
1713         }
1714
1715         return ret;
1716 }
1717 #else
1718 static int diag_send_dci_pkt_remote(unsigned char *data, int len, int tag,
1719                                     int token)
1720 {
1721         return DIAG_DCI_NO_ERROR;
1722 }
1723 #endif
1724
1725 #ifdef CONFIG_DIAGFWD_BRIDGE_CODE
1726 int diag_dci_send_handshake_pkt(int index)
1727 {
1728         int err = 0;
1729         int token = BRIDGE_TO_TOKEN(index);
1730         int write_len = 0;
1731         struct diag_ctrl_dci_handshake_pkt ctrl_pkt;
1732         unsigned char *buf = NULL;
1733         struct diag_dci_header_t dci_header;
1734
1735         if (!VALID_DCI_TOKEN(token)) {
1736                 pr_err("diag: In %s, invalid DCI token %d\n", __func__, token);
1737                 return -EINVAL;
1738         }
1739
1740         buf = dci_get_buffer_from_bridge(token);
1741         if (!buf) {
1742                 pr_err("diag: In %s, unable to get dci buffers to write data\n",
1743                         __func__);
1744                 return -EAGAIN;
1745         }
1746
1747         dci_header.start = CONTROL_CHAR;
1748         dci_header.version = 1;
1749         /* Include the cmd code (uint8_t) in the length */
1750         dci_header.length = sizeof(ctrl_pkt) + sizeof(uint8_t);
1751         dci_header.cmd_code = DCI_CONTROL_PKT_CODE;
1752         memcpy(buf, &dci_header, sizeof(dci_header));
1753         write_len += sizeof(dci_header);
1754
1755         ctrl_pkt.ctrl_pkt_id = DIAG_CTRL_MSG_DCI_HANDSHAKE_PKT;
1756         /*
1757          *  The control packet data length accounts for the version (uint32_t)
1758          *  of the packet and the magic number (uint32_t).
1759          */
1760         ctrl_pkt.ctrl_pkt_data_len = 2 * sizeof(uint32_t);
1761         ctrl_pkt.version = 1;
1762         ctrl_pkt.magic = DCI_MAGIC;
1763         memcpy(buf + write_len, &ctrl_pkt, sizeof(ctrl_pkt));
1764         write_len += sizeof(ctrl_pkt);
1765
1766         *(uint8_t *)(buf + write_len) = CONTROL_CHAR;
1767         write_len += sizeof(uint8_t);
1768
1769         err = diag_dci_write_bridge(token, buf, write_len);
1770         if (err) {
1771                 pr_err("diag: error writing ack packet to remote proc, token: %d, err: %d\n",
1772                        token, err);
1773                 diagmem_free(driver, buf, dci_ops_tbl[token].mempool);
1774                 return err;
1775         }
1776
1777         mod_timer(&(dci_channel_status[token].wait_time),
1778                   jiffies + msecs_to_jiffies(DCI_HANDSHAKE_WAIT_TIME));
1779
1780         return 0;
1781 }
1782 #else
1783 int diag_dci_send_handshake_pkt(int index)
1784 {
1785         return 0;
1786 }
1787 #endif
1788
1789 static int diag_dci_process_apps_pkt(struct diag_pkt_header_t *pkt_header,
1790                                      unsigned char *req_buf, int req_len,
1791                                      int tag)
1792 {
1793         uint8_t cmd_code, subsys_id, i, goto_download = 0;
1794         uint8_t header_len = sizeof(struct diag_dci_pkt_header_t);
1795         uint16_t ss_cmd_code;
1796         uint32_t write_len = 0;
1797         unsigned char *dest_buf = driver->apps_dci_buf;
1798         unsigned char *payload_ptr = driver->apps_dci_buf + header_len;
1799         struct diag_dci_pkt_header_t dci_header;
1800
1801         if (!pkt_header || !req_buf || req_len <= 0 || tag < 0)
1802                 return -EIO;
1803
1804         cmd_code = pkt_header->cmd_code;
1805         subsys_id = pkt_header->subsys_id;
1806         ss_cmd_code = pkt_header->subsys_cmd_code;
1807
1808         if (cmd_code == DIAG_CMD_DOWNLOAD) {
1809                 *payload_ptr = DIAG_CMD_DOWNLOAD;
1810                 write_len = sizeof(uint8_t);
1811                 goto_download = 1;
1812                 goto fill_buffer;
1813         } else if (cmd_code == DIAG_CMD_VERSION) {
1814                 if (chk_polling_response()) {
1815                         for (i = 0; i < 55; i++, write_len++, payload_ptr++)
1816                                 *(payload_ptr) = 0;
1817                         goto fill_buffer;
1818                 }
1819         } else if (cmd_code == DIAG_CMD_EXT_BUILD) {
1820                 if (chk_polling_response()) {
1821                         *payload_ptr = DIAG_CMD_EXT_BUILD;
1822                         write_len = sizeof(uint8_t);
1823                         payload_ptr += sizeof(uint8_t);
1824                         for (i = 0; i < 8; i++, write_len++, payload_ptr++)
1825                                 *(payload_ptr) = 0;
1826                         *(int *)(payload_ptr) = chk_config_get_id();
1827                         write_len += sizeof(int);
1828                         goto fill_buffer;
1829                 }
1830         } else if (cmd_code == DIAG_CMD_LOG_ON_DMND) {
1831                 write_len = diag_cmd_log_on_demand(req_buf, req_len,
1832                                                    payload_ptr,
1833                                                    APPS_BUF_SIZE - header_len);
1834                 goto fill_buffer;
1835         } else if (cmd_code != DIAG_CMD_DIAG_SUBSYS) {
1836                 return DIAG_DCI_TABLE_ERR;
1837         }
1838
1839         if (subsys_id == DIAG_SS_DIAG) {
1840                 if (ss_cmd_code == DIAG_DIAG_MAX_PKT_SZ) {
1841                         memcpy(payload_ptr, pkt_header,
1842                                         sizeof(struct diag_pkt_header_t));
1843                         write_len = sizeof(struct diag_pkt_header_t);
1844                         *(uint32_t *)(payload_ptr + write_len) =
1845                                                         DIAG_MAX_REQ_SIZE;
1846                         write_len += sizeof(uint32_t);
1847                 } else if (ss_cmd_code == DIAG_DIAG_STM) {
1848                         write_len = diag_process_stm_cmd(req_buf, payload_ptr);
1849                 }
1850         } else if (subsys_id == DIAG_SS_PARAMS) {
1851                 if (ss_cmd_code == DIAG_DIAG_POLL) {
1852                         if (chk_polling_response()) {
1853                                 memcpy(payload_ptr, pkt_header,
1854                                         sizeof(struct diag_pkt_header_t));
1855                                 write_len = sizeof(struct diag_pkt_header_t);
1856                                 payload_ptr += write_len;
1857                                 for (i = 0; i < 12; i++, write_len++) {
1858                                         *(payload_ptr) = 0;
1859                                         payload_ptr++;
1860                                 }
1861                         }
1862                 } else if (ss_cmd_code == DIAG_DEL_RSP_WRAP) {
1863                         memcpy(payload_ptr, pkt_header,
1864                                         sizeof(struct diag_pkt_header_t));
1865                         write_len = sizeof(struct diag_pkt_header_t);
1866                         *(int *)(payload_ptr + write_len) = wrap_enabled;
1867                         write_len += sizeof(int);
1868                 } else if (ss_cmd_code == DIAG_DEL_RSP_WRAP_CNT) {
1869                         wrap_enabled = true;
1870                         memcpy(payload_ptr, pkt_header,
1871                                         sizeof(struct diag_pkt_header_t));
1872                         write_len = sizeof(struct diag_pkt_header_t);
1873                         *(uint16_t *)(payload_ptr + write_len) = wrap_count;
1874                         write_len += sizeof(uint16_t);
1875                 } else if (ss_cmd_code == DIAG_EXT_MOBILE_ID) {
1876                         write_len = diag_cmd_get_mobile_id(req_buf, req_len,
1877                                                    payload_ptr,
1878                                                    APPS_BUF_SIZE - header_len);
1879                 }
1880         }
1881
1882 fill_buffer:
1883         if (write_len > 0) {
1884                 /* Check if we are within the range of the buffer*/
1885                 if (write_len + header_len > DIAG_MAX_REQ_SIZE) {
1886                         pr_err("diag: In %s, invalid length %d\n", __func__,
1887                                                 write_len + header_len);
1888                         return -ENOMEM;
1889                 }
1890                 dci_header.start = CONTROL_CHAR;
1891                 dci_header.version = 1;
1892                 /*
1893                  * Length of the rsp pkt = actual data len + pkt rsp code
1894                  * (uint8_t) + tag (int)
1895                  */
1896                 dci_header.len = write_len + sizeof(uint8_t) + sizeof(int);
1897                 dci_header.pkt_code = DCI_PKT_RSP_CODE;
1898                 dci_header.tag = tag;
1899                 driver->in_busy_dcipktdata = 1;
1900                 memcpy(dest_buf, &dci_header, header_len);
1901                 diag_process_apps_dci_read_data(DCI_PKT_TYPE, dest_buf + 4,
1902                                                 dci_header.len);
1903                 driver->in_busy_dcipktdata = 0;
1904
1905                 if (goto_download) {
1906                         /*
1907                          * Sleep for sometime so that the response reaches the
1908                          * client. The value 5000 empirically as an optimum
1909                          * time for the response to reach the client.
1910                          */
1911                         usleep_range(5000, 5100);
1912                         /* call download API */
1913                         msm_set_restart_mode(RESTART_DLOAD);
1914                         pr_alert("diag: download mode set, Rebooting SoC..\n");
1915                         kernel_restart(NULL);
1916                 }
1917                 return DIAG_DCI_NO_ERROR;
1918         }
1919
1920         return DIAG_DCI_TABLE_ERR;
1921 }
1922
1923 static int diag_process_dci_pkt_rsp(unsigned char *buf, int len)
1924 {
1925         int ret = DIAG_DCI_TABLE_ERR;
1926         int common_cmd = 0;
1927         struct diag_pkt_header_t *header = NULL;
1928         unsigned char *temp = buf;
1929         unsigned char *req_buf = NULL;
1930         uint8_t retry_count = 0, max_retries = 3;
1931         uint32_t read_len = 0, req_len = len;
1932         struct dci_pkt_req_entry_t *req_entry = NULL;
1933         struct diag_dci_client_tbl *dci_entry = NULL;
1934         struct dci_pkt_req_t req_hdr;
1935         struct diag_cmd_reg_t *reg_item;
1936         struct diag_cmd_reg_entry_t reg_entry;
1937         struct diag_cmd_reg_entry_t *temp_entry;
1938
1939         if (!buf)
1940                 return -EIO;
1941
1942         if (len <= sizeof(struct dci_pkt_req_t) || len > DCI_REQ_BUF_SIZE) {
1943                 pr_err("diag: dci: Invalid length %d len in %s", len, __func__);
1944                 return -EIO;
1945         }
1946
1947         req_hdr = *(struct dci_pkt_req_t *)temp;
1948         temp += sizeof(struct dci_pkt_req_t);
1949         read_len += sizeof(struct dci_pkt_req_t);
1950         req_len -= sizeof(struct dci_pkt_req_t);
1951         req_buf = temp; /* Start of the Request */
1952         header = (struct diag_pkt_header_t *)temp;
1953         temp += sizeof(struct diag_pkt_header_t);
1954         read_len += sizeof(struct diag_pkt_header_t);
1955         if (read_len >= DCI_REQ_BUF_SIZE) {
1956                 pr_err("diag: dci: In %s, invalid read_len: %d\n", __func__,
1957                        read_len);
1958                 return -EIO;
1959         }
1960
1961         mutex_lock(&driver->dci_mutex);
1962         dci_entry = diag_dci_get_client_entry(req_hdr.client_id);
1963         if (!dci_entry) {
1964                 pr_err("diag: Invalid client %d in %s\n",
1965                        req_hdr.client_id, __func__);
1966                 mutex_unlock(&driver->dci_mutex);
1967                 return DIAG_DCI_NO_REG;
1968         }
1969
1970         /* Check if the command is allowed on DCI */
1971         if (diag_dci_filter_commands(header)) {
1972                 pr_debug("diag: command not supported %d %d %d",
1973                          header->cmd_code, header->subsys_id,
1974                          header->subsys_cmd_code);
1975                 mutex_unlock(&driver->dci_mutex);
1976                 return DIAG_DCI_SEND_DATA_FAIL;
1977         }
1978
1979         common_cmd = diag_check_common_cmd(header);
1980         if (common_cmd < 0) {
1981                 pr_debug("diag: error in checking common command, %d\n",
1982                          common_cmd);
1983                 mutex_unlock(&driver->dci_mutex);
1984                 return DIAG_DCI_SEND_DATA_FAIL;
1985         }
1986
1987         /*
1988          * Previous packet is yet to be consumed by the client. Wait
1989          * till the buffer is free.
1990          */
1991         while (retry_count < max_retries) {
1992                 retry_count++;
1993                 if (driver->in_busy_dcipktdata)
1994                         usleep_range(10000, 10100);
1995                 else
1996                         break;
1997         }
1998         /* The buffer is still busy */
1999         if (driver->in_busy_dcipktdata) {
2000                 pr_err("diag: In %s, apps dci buffer is still busy. Dropping packet\n",
2001                                                                 __func__);
2002                 mutex_unlock(&driver->dci_mutex);
2003                 return -EAGAIN;
2004         }
2005
2006         /* Register this new DCI packet */
2007         req_entry = diag_register_dci_transaction(req_hdr.uid,
2008                                                   req_hdr.client_id);
2009         if (!req_entry) {
2010                 pr_alert("diag: registering new DCI transaction failed\n");
2011                 mutex_unlock(&driver->dci_mutex);
2012                 return DIAG_DCI_NO_REG;
2013         }
2014         mutex_unlock(&driver->dci_mutex);
2015
2016         /*
2017          * If the client has registered for remote data, route the packet to the
2018          * remote processor
2019          */
2020         if (dci_entry->client_info.token > 0) {
2021                 ret = diag_send_dci_pkt_remote(req_buf, req_len, req_entry->tag,
2022                                                dci_entry->client_info.token);
2023                 return ret;
2024         }
2025
2026         /* Check if it is a dedicated Apps command */
2027         ret = diag_dci_process_apps_pkt(header, req_buf, req_len,
2028                                         req_entry->tag);
2029         if ((ret == DIAG_DCI_NO_ERROR && !common_cmd) || ret < 0)
2030                 return ret;
2031
2032         reg_entry.cmd_code = header->cmd_code;
2033         reg_entry.subsys_id = header->subsys_id;
2034         reg_entry.cmd_code_hi = header->subsys_cmd_code;
2035         reg_entry.cmd_code_lo = header->subsys_cmd_code;
2036
2037         mutex_lock(&driver->cmd_reg_mutex);
2038         temp_entry = diag_cmd_search(&reg_entry, ALL_PROC);
2039         if (temp_entry) {
2040                 reg_item = container_of(temp_entry, struct diag_cmd_reg_t,
2041                                                                 entry);
2042                 ret = diag_send_dci_pkt(reg_item, req_buf, req_len,
2043                                         req_entry->tag);
2044         } else {
2045                 DIAG_LOG(DIAG_DEBUG_DCI, "Command not found: %02x %02x %02x\n",
2046                                 reg_entry.cmd_code, reg_entry.subsys_id,
2047                                 reg_entry.cmd_code_hi);
2048         }
2049         mutex_unlock(&driver->cmd_reg_mutex);
2050
2051         return ret;
2052 }
2053
2054 int diag_process_dci_transaction(unsigned char *buf, int len)
2055 {
2056         unsigned char *temp = buf;
2057         uint16_t log_code, item_num;
2058         int ret = -1, found = 0, client_id = 0, client_token = 0;
2059         int count, set_mask, num_codes, bit_index, event_id, offset = 0;
2060         unsigned int byte_index, read_len = 0;
2061         uint8_t equip_id, *log_mask_ptr, *head_log_mask_ptr, byte_mask;
2062         uint8_t *event_mask_ptr;
2063         struct diag_dci_client_tbl *dci_entry = NULL;
2064
2065         if (!temp) {
2066                 pr_err("diag: Invalid buffer in %s\n", __func__);
2067                 return -ENOMEM;
2068         }
2069
2070         /* This is Pkt request/response transaction */
2071         if (*(int *)temp > 0) {
2072                 return diag_process_dci_pkt_rsp(buf, len);
2073         } else if (*(int *)temp == DCI_LOG_TYPE) {
2074                 /* Minimum length of a log mask config is 12 + 2 bytes for
2075                    atleast one log code to be set or reset */
2076                 if (len < DCI_LOG_CON_MIN_LEN || len > USER_SPACE_DATA) {
2077                         pr_err("diag: dci: Invalid length in %s\n", __func__);
2078                         return -EIO;
2079                 }
2080
2081                 /* Extract each log code and put in client table */
2082                 temp += sizeof(int);
2083                 read_len += sizeof(int);
2084                 client_id = *(int *)temp;
2085                 temp += sizeof(int);
2086                 read_len += sizeof(int);
2087                 set_mask = *(int *)temp;
2088                 temp += sizeof(int);
2089                 read_len += sizeof(int);
2090                 num_codes = *(int *)temp;
2091                 temp += sizeof(int);
2092                 read_len += sizeof(int);
2093
2094                 /* find client table entry */
2095                 mutex_lock(&driver->dci_mutex);
2096                 dci_entry = diag_dci_get_client_entry(client_id);
2097                 if (!dci_entry) {
2098                         pr_err("diag: In %s, invalid client\n", __func__);
2099                         mutex_unlock(&driver->dci_mutex);
2100                         return ret;
2101                 }
2102                 client_token = dci_entry->client_info.token;
2103
2104                 if (num_codes == 0 || (num_codes >= (USER_SPACE_DATA - 8)/2)) {
2105                         pr_err("diag: dci: Invalid number of log codes %d\n",
2106                                                                 num_codes);
2107                         mutex_unlock(&driver->dci_mutex);
2108                         return -EIO;
2109                 }
2110
2111                 head_log_mask_ptr = dci_entry->dci_log_mask;
2112                 if (!head_log_mask_ptr) {
2113                         pr_err("diag: dci: Invalid Log mask pointer in %s\n",
2114                                                                 __func__);
2115                         mutex_unlock(&driver->dci_mutex);
2116                         return -ENOMEM;
2117                 }
2118                 pr_debug("diag: head of dci log mask %pK\n", head_log_mask_ptr);
2119                 count = 0; /* iterator for extracting log codes */
2120
2121                 while (count < num_codes) {
2122                         if (read_len >= USER_SPACE_DATA) {
2123                                 pr_err("diag: dci: Invalid length for log type in %s",
2124                                                                 __func__);
2125                                 mutex_unlock(&driver->dci_mutex);
2126                                 return -EIO;
2127                         }
2128                         log_code = *(uint16_t *)temp;
2129                         equip_id = LOG_GET_EQUIP_ID(log_code);
2130                         item_num = LOG_GET_ITEM_NUM(log_code);
2131                         byte_index = item_num/8 + 2;
2132                         if (byte_index >= (DCI_MAX_ITEMS_PER_LOG_CODE+2)) {
2133                                 pr_err("diag: dci: Log type, invalid byte index\n");
2134                                 mutex_unlock(&driver->dci_mutex);
2135                                 return ret;
2136                         }
2137                         byte_mask = 0x01 << (item_num % 8);
2138                         /*
2139                          * Parse through log mask table and find
2140                          * relevant range
2141                          */
2142                         log_mask_ptr = head_log_mask_ptr;
2143                         found = 0;
2144                         offset = 0;
2145                         while (log_mask_ptr && (offset < DCI_LOG_MASK_SIZE)) {
2146                                 if (*log_mask_ptr == equip_id) {
2147                                         found = 1;
2148                                         pr_debug("diag: find equip id = %x at %pK\n",
2149                                                  equip_id, log_mask_ptr);
2150                                         break;
2151                                 } else {
2152                                         pr_debug("diag: did not find equip id = %x at %d\n",
2153                                                  equip_id, *log_mask_ptr);
2154                                         log_mask_ptr += 514;
2155                                         offset += 514;
2156                                 }
2157                         }
2158                         if (!found) {
2159                                 pr_err("diag: dci equip id not found\n");
2160                                 mutex_unlock(&driver->dci_mutex);
2161                                 return ret;
2162                         }
2163                         *(log_mask_ptr+1) = 1; /* set the dirty byte */
2164                         log_mask_ptr = log_mask_ptr + byte_index;
2165                         if (set_mask)
2166                                 *log_mask_ptr |= byte_mask;
2167                         else
2168                                 *log_mask_ptr &= ~byte_mask;
2169                         /* add to cumulative mask */
2170                         update_dci_cumulative_log_mask(
2171                                 offset, byte_index,
2172                                 byte_mask, client_token);
2173                         temp += 2;
2174                         read_len += 2;
2175                         count++;
2176                         ret = DIAG_DCI_NO_ERROR;
2177                 }
2178                 /* send updated mask to userspace clients */
2179                 if (client_token == DCI_LOCAL_PROC)
2180                         diag_update_userspace_clients(DCI_LOG_MASKS_TYPE);
2181                 /* send updated mask to peripherals */
2182                 ret = dci_ops_tbl[client_token].send_log_mask(client_token);
2183                 mutex_unlock(&driver->dci_mutex);
2184         } else if (*(int *)temp == DCI_EVENT_TYPE) {
2185                 /* Minimum length of a event mask config is 12 + 4 bytes for
2186                   atleast one event id to be set or reset. */
2187                 if (len < DCI_EVENT_CON_MIN_LEN || len > USER_SPACE_DATA) {
2188                         pr_err("diag: dci: Invalid length in %s\n", __func__);
2189                         return -EIO;
2190                 }
2191
2192                 /* Extract each event id and put in client table */
2193                 temp += sizeof(int);
2194                 read_len += sizeof(int);
2195                 client_id = *(int *)temp;
2196                 temp += sizeof(int);
2197                 read_len += sizeof(int);
2198                 set_mask = *(int *)temp;
2199                 temp += sizeof(int);
2200                 read_len += sizeof(int);
2201                 num_codes = *(int *)temp;
2202                 temp += sizeof(int);
2203                 read_len += sizeof(int);
2204
2205                 /* find client table entry */
2206                 mutex_lock(&driver->dci_mutex);
2207                 dci_entry = diag_dci_get_client_entry(client_id);
2208                 if (!dci_entry) {
2209                         pr_err("diag: In %s, invalid client\n", __func__);
2210                         mutex_unlock(&driver->dci_mutex);
2211                         return ret;
2212                 }
2213                 client_token = dci_entry->client_info.token;
2214
2215                 /* Check for positive number of event ids. Also, the number of
2216                    event ids should fit in the buffer along with set_mask and
2217                    num_codes which are 4 bytes each */
2218                 if (num_codes == 0 || (num_codes >= (USER_SPACE_DATA - 8)/2)) {
2219                         pr_err("diag: dci: Invalid number of event ids %d\n",
2220                                                                 num_codes);
2221                         mutex_unlock(&driver->dci_mutex);
2222                         return -EIO;
2223                 }
2224
2225                 event_mask_ptr = dci_entry->dci_event_mask;
2226                 if (!event_mask_ptr) {
2227                         pr_err("diag: dci: Invalid event mask pointer in %s\n",
2228                                                                 __func__);
2229                         mutex_unlock(&driver->dci_mutex);
2230                         return -ENOMEM;
2231                 }
2232                 pr_debug("diag: head of dci event mask %pK\n", event_mask_ptr);
2233                 count = 0; /* iterator for extracting log codes */
2234                 while (count < num_codes) {
2235                         if (read_len >= USER_SPACE_DATA) {
2236                                 pr_err("diag: dci: Invalid length for event type in %s",
2237                                                                 __func__);
2238                                 mutex_unlock(&driver->dci_mutex);
2239                                 return -EIO;
2240                         }
2241                         event_id = *(int *)temp;
2242                         byte_index = event_id/8;
2243                         if (byte_index >= DCI_EVENT_MASK_SIZE) {
2244                                 pr_err("diag: dci: Event type, invalid byte index\n");
2245                                 mutex_unlock(&driver->dci_mutex);
2246                                 return ret;
2247                         }
2248                         bit_index = event_id % 8;
2249                         byte_mask = 0x1 << bit_index;
2250                         /*
2251                          * Parse through event mask table and set
2252                          * relevant byte & bit combination
2253                          */
2254                         if (set_mask)
2255                                 *(event_mask_ptr + byte_index) |= byte_mask;
2256                         else
2257                                 *(event_mask_ptr + byte_index) &= ~byte_mask;
2258                         /* add to cumulative mask */
2259                         update_dci_cumulative_event_mask(byte_index, byte_mask,
2260                                                          client_token);
2261                         temp += sizeof(int);
2262                         read_len += sizeof(int);
2263                         count++;
2264                         ret = DIAG_DCI_NO_ERROR;
2265                 }
2266                 /* send updated mask to userspace clients */
2267                 if (dci_entry->client_info.token == DCI_LOCAL_PROC)
2268                         diag_update_userspace_clients(DCI_EVENT_MASKS_TYPE);
2269                 /* send updated mask to peripherals */
2270                 ret = dci_ops_tbl[client_token].send_event_mask(client_token);
2271                 mutex_unlock(&driver->dci_mutex);
2272         } else {
2273                 pr_alert("diag: Incorrect DCI transaction\n");
2274         }
2275         return ret;
2276 }
2277
2278
2279 struct diag_dci_client_tbl *diag_dci_get_client_entry(int client_id)
2280 {
2281         struct list_head *start, *temp;
2282         struct diag_dci_client_tbl *entry = NULL;
2283         list_for_each_safe(start, temp, &driver->dci_client_list) {
2284                 entry = list_entry(start, struct diag_dci_client_tbl, track);
2285                 if (entry->client_info.client_id == client_id)
2286                         return entry;
2287         }
2288         return NULL;
2289 }
2290
2291 struct diag_dci_client_tbl *dci_lookup_client_entry_pid(int tgid)
2292 {
2293         struct list_head *start, *temp;
2294         struct diag_dci_client_tbl *entry = NULL;
2295         struct pid *pid_struct = NULL;
2296         struct task_struct *task_s = NULL;
2297
2298         list_for_each_safe(start, temp, &driver->dci_client_list) {
2299                 entry = list_entry(start, struct diag_dci_client_tbl, track);
2300                 pid_struct = find_get_pid(entry->tgid);
2301                 if (!pid_struct) {
2302                         DIAG_LOG(DIAG_DEBUG_DCI,
2303                         "diag: Exited pid (%d) doesn't match dci client of pid (%d)\n",
2304                         tgid, entry->tgid);
2305                         continue;
2306                 }
2307                 task_s = get_pid_task(pid_struct, PIDTYPE_PID);
2308                 if (!task_s) {
2309                         DIAG_LOG(DIAG_DEBUG_DCI,
2310                                 "diag: valid task doesn't exist for pid = %d\n",
2311                                 entry->tgid);
2312                         put_pid(pid_struct);
2313                         continue;
2314                 }
2315                 if (task_s == entry->client) {
2316                         if (entry->client->tgid == tgid) {
2317                                 put_task_struct(task_s);
2318                                 put_pid(pid_struct);
2319                                 return entry;
2320                         }
2321                 }
2322                 put_task_struct(task_s);
2323                 put_pid(pid_struct);
2324         }
2325         return NULL;
2326 }
2327
2328 void update_dci_cumulative_event_mask(int offset, uint8_t byte_mask, int token)
2329 {
2330         uint8_t *event_mask_ptr, *update_ptr = NULL;
2331         struct list_head *start, *temp;
2332         struct diag_dci_client_tbl *entry = NULL;
2333         bool is_set = false;
2334
2335         mutex_lock(&dci_event_mask_mutex);
2336         update_ptr = dci_ops_tbl[token].event_mask_composite;
2337         if (!update_ptr) {
2338                 mutex_unlock(&dci_event_mask_mutex);
2339                 return;
2340         }
2341         update_ptr += offset;
2342         list_for_each_safe(start, temp, &driver->dci_client_list) {
2343                 entry = list_entry(start, struct diag_dci_client_tbl, track);
2344                 if (entry->client_info.token != token)
2345                         continue;
2346                 event_mask_ptr = entry->dci_event_mask;
2347                 event_mask_ptr += offset;
2348                 if ((*event_mask_ptr & byte_mask) == byte_mask) {
2349                         is_set = true;
2350                         /* break even if one client has the event mask set */
2351                         break;
2352                 }
2353         }
2354         if (is_set == false)
2355                 *update_ptr &= ~byte_mask;
2356         else
2357                 *update_ptr |= byte_mask;
2358         mutex_unlock(&dci_event_mask_mutex);
2359 }
2360
2361 void diag_dci_invalidate_cumulative_event_mask(int token)
2362 {
2363         int i = 0;
2364         struct list_head *start, *temp;
2365         struct diag_dci_client_tbl *entry = NULL;
2366         uint8_t *event_mask_ptr, *update_ptr = NULL;
2367
2368         mutex_lock(&dci_event_mask_mutex);
2369         update_ptr = dci_ops_tbl[token].event_mask_composite;
2370         if (!update_ptr) {
2371                 mutex_unlock(&dci_event_mask_mutex);
2372                 return;
2373         }
2374
2375         create_dci_event_mask_tbl(update_ptr);
2376         list_for_each_safe(start, temp, &driver->dci_client_list) {
2377                 entry = list_entry(start, struct diag_dci_client_tbl, track);
2378                 if (entry->client_info.token != token)
2379                         continue;
2380                 event_mask_ptr = entry->dci_event_mask;
2381                 for (i = 0; i < DCI_EVENT_MASK_SIZE; i++)
2382                         *(update_ptr+i) |= *(event_mask_ptr+i);
2383         }
2384         mutex_unlock(&dci_event_mask_mutex);
2385 }
2386
2387 #ifdef CONFIG_DIAGFWD_BRIDGE_CODE
2388 int diag_send_dci_event_mask_remote(int token)
2389 {
2390         unsigned char *buf = NULL;
2391         struct diag_dci_header_t dci_header;
2392         struct diag_ctrl_event_mask event_mask;
2393         int dci_header_size = sizeof(struct diag_dci_header_t);
2394         int event_header_size = sizeof(struct diag_ctrl_event_mask);
2395         int i, ret = DIAG_DCI_NO_ERROR, err = DIAG_DCI_NO_ERROR;
2396         unsigned char *event_mask_ptr = NULL;
2397         uint32_t write_len = 0;
2398
2399         mutex_lock(&dci_event_mask_mutex);
2400         event_mask_ptr = dci_ops_tbl[token].event_mask_composite;
2401         if (!event_mask_ptr) {
2402                 mutex_unlock(&dci_event_mask_mutex);
2403                 return -EINVAL;
2404         }
2405         buf = dci_get_buffer_from_bridge(token);
2406         if (!buf) {
2407                 pr_err("diag: In %s, unable to get dci buffers to write data\n",
2408                         __func__);
2409                 mutex_unlock(&dci_event_mask_mutex);
2410                 return -EAGAIN;
2411         }
2412
2413         /* Frame the DCI header */
2414         dci_header.start = CONTROL_CHAR;
2415         dci_header.version = 1;
2416         dci_header.length = event_header_size + DCI_EVENT_MASK_SIZE + 1;
2417         dci_header.cmd_code = DCI_CONTROL_PKT_CODE;
2418
2419         event_mask.cmd_type = DIAG_CTRL_MSG_EVENT_MASK;
2420         event_mask.data_len = EVENT_MASK_CTRL_HEADER_LEN + DCI_EVENT_MASK_SIZE;
2421         event_mask.stream_id = DCI_MASK_STREAM;
2422         event_mask.status = DIAG_CTRL_MASK_VALID;
2423         event_mask.event_config = 0; /* event config */
2424         event_mask.event_mask_size = DCI_EVENT_MASK_SIZE;
2425         for (i = 0; i < DCI_EVENT_MASK_SIZE; i++) {
2426                 if (event_mask_ptr[i] != 0) {
2427                         event_mask.event_config = 1;
2428                         break;
2429                 }
2430         }
2431         memcpy(buf + write_len, &dci_header, dci_header_size);
2432         write_len += dci_header_size;
2433         memcpy(buf + write_len, &event_mask, event_header_size);
2434         write_len += event_header_size;
2435         memcpy(buf + write_len, event_mask_ptr, DCI_EVENT_MASK_SIZE);
2436         write_len += DCI_EVENT_MASK_SIZE;
2437         *(buf + write_len) = CONTROL_CHAR; /* End Terminator */
2438         write_len += sizeof(uint8_t);
2439         err = diag_dci_write_bridge(token, buf, write_len);
2440         if (err) {
2441                 pr_err("diag: error writing event mask to remote proc, token: %d, err: %d\n",
2442                        token, err);
2443                 diagmem_free(driver, buf, dci_ops_tbl[token].mempool);
2444                 ret = err;
2445         } else {
2446                 ret = DIAG_DCI_NO_ERROR;
2447         }
2448         mutex_unlock(&dci_event_mask_mutex);
2449         return ret;
2450 }
2451 #endif
2452
2453 int diag_send_dci_event_mask(int token)
2454 {
2455         void *buf = event_mask.update_buf;
2456         struct diag_ctrl_event_mask header;
2457         int header_size = sizeof(struct diag_ctrl_event_mask);
2458         int ret = DIAG_DCI_NO_ERROR, err = DIAG_DCI_NO_ERROR, i;
2459         unsigned char *event_mask_ptr = NULL;
2460
2461         mutex_lock(&dci_event_mask_mutex);
2462         event_mask_ptr = dci_ops_tbl[DCI_LOCAL_PROC].event_mask_composite;
2463         if (!event_mask_ptr) {
2464                 mutex_unlock(&dci_event_mask_mutex);
2465                 return -EINVAL;
2466         }
2467
2468         mutex_lock(&event_mask.lock);
2469         /* send event mask update */
2470         header.cmd_type = DIAG_CTRL_MSG_EVENT_MASK;
2471         header.data_len = EVENT_MASK_CTRL_HEADER_LEN + DCI_EVENT_MASK_SIZE;
2472         header.stream_id = DCI_MASK_STREAM;
2473         header.status = DIAG_CTRL_MASK_VALID;
2474         header.event_config = 0; /* event config */
2475         header.event_mask_size = DCI_EVENT_MASK_SIZE;
2476         for (i = 0; i < DCI_EVENT_MASK_SIZE; i++) {
2477                 if (event_mask_ptr[i] != 0) {
2478                         header.event_config = 1;
2479                         break;
2480                 }
2481         }
2482         memcpy(buf, &header, header_size);
2483         memcpy(buf+header_size, event_mask_ptr, DCI_EVENT_MASK_SIZE);
2484         for (i = 0; i < NUM_PERIPHERALS; i++) {
2485                 /*
2486                  * Don't send to peripheral if its regular channel
2487                  * is down. It may also mean that the peripheral doesn't
2488                  * support DCI.
2489                  */
2490                 if (check_peripheral_dci_support(i, DCI_LOCAL_PROC)) {
2491                         err = diag_dci_write_proc(i, DIAG_CNTL_TYPE, buf,
2492                                   header_size + DCI_EVENT_MASK_SIZE);
2493                         if (err != DIAG_DCI_NO_ERROR)
2494                                 ret = DIAG_DCI_SEND_DATA_FAIL;
2495                 }
2496         }
2497
2498         mutex_unlock(&event_mask.lock);
2499         mutex_unlock(&dci_event_mask_mutex);
2500
2501         return ret;
2502 }
2503
2504 void update_dci_cumulative_log_mask(int offset, unsigned int byte_index,
2505                                                 uint8_t byte_mask, int token)
2506 {
2507         uint8_t *log_mask_ptr, *update_ptr = NULL;
2508         bool is_set = false;
2509         struct list_head *start, *temp;
2510         struct diag_dci_client_tbl *entry = NULL;
2511
2512         mutex_lock(&dci_log_mask_mutex);
2513         update_ptr = dci_ops_tbl[token].log_mask_composite;
2514         if (!update_ptr) {
2515                 mutex_unlock(&dci_log_mask_mutex);
2516                 return;
2517         }
2518
2519         update_ptr += offset;
2520         /* update the dirty bit */
2521         *(update_ptr+1) = 1;
2522         update_ptr = update_ptr + byte_index;
2523         list_for_each_safe(start, temp, &driver->dci_client_list) {
2524                 entry = list_entry(start, struct diag_dci_client_tbl, track);
2525                 if (entry->client_info.token != token)
2526                         continue;
2527                 log_mask_ptr = entry->dci_log_mask;
2528                 log_mask_ptr = log_mask_ptr + offset + byte_index;
2529                 if ((*log_mask_ptr & byte_mask) == byte_mask) {
2530                         is_set = true;
2531                         /* break even if one client has the log mask set */
2532                         break;
2533                 }
2534         }
2535
2536         if (is_set == false)
2537                 *update_ptr &= ~byte_mask;
2538         else
2539                 *update_ptr |= byte_mask;
2540         mutex_unlock(&dci_log_mask_mutex);
2541 }
2542
2543 void diag_dci_invalidate_cumulative_log_mask(int token)
2544 {
2545         int i = 0;
2546         struct list_head *start, *temp;
2547         struct diag_dci_client_tbl *entry = NULL;
2548         uint8_t *log_mask_ptr, *update_ptr = NULL;
2549
2550         /* Clear the composite mask and redo all the masks */
2551         mutex_lock(&dci_log_mask_mutex);
2552         update_ptr = dci_ops_tbl[token].log_mask_composite;
2553         if (!update_ptr) {
2554                 mutex_unlock(&dci_log_mask_mutex);
2555                 return;
2556         }
2557
2558         create_dci_log_mask_tbl(update_ptr, DCI_LOG_MASK_DIRTY);
2559         list_for_each_safe(start, temp, &driver->dci_client_list) {
2560                 entry = list_entry(start, struct diag_dci_client_tbl, track);
2561                 if (entry->client_info.token != token)
2562                         continue;
2563                 log_mask_ptr = entry->dci_log_mask;
2564                 for (i = 0; i < DCI_LOG_MASK_SIZE; i++)
2565                         *(update_ptr+i) |= *(log_mask_ptr+i);
2566         }
2567         mutex_unlock(&dci_log_mask_mutex);
2568 }
2569
2570 static int dci_fill_log_mask(unsigned char *dest_ptr, unsigned char *src_ptr)
2571 {
2572         struct diag_ctrl_log_mask header;
2573         int header_len = sizeof(struct diag_ctrl_log_mask);
2574
2575         header.cmd_type = DIAG_CTRL_MSG_LOG_MASK;
2576         header.num_items = DCI_MAX_ITEMS_PER_LOG_CODE;
2577         header.data_len = 11 + DCI_MAX_ITEMS_PER_LOG_CODE;
2578         header.stream_id = DCI_MASK_STREAM;
2579         header.status = 3;
2580         header.equip_id = *src_ptr;
2581         header.log_mask_size = DCI_MAX_ITEMS_PER_LOG_CODE;
2582         memcpy(dest_ptr, &header, header_len);
2583         memcpy(dest_ptr + header_len, src_ptr + 2, DCI_MAX_ITEMS_PER_LOG_CODE);
2584
2585         return header_len + DCI_MAX_ITEMS_PER_LOG_CODE;
2586 }
2587
2588 #ifdef CONFIG_DIAGFWD_BRIDGE_CODE
2589 int diag_send_dci_log_mask_remote(int token)
2590 {
2591
2592         unsigned char *buf = NULL;
2593         struct diag_dci_header_t dci_header;
2594         int dci_header_size = sizeof(struct diag_dci_header_t);
2595         int log_header_size = sizeof(struct diag_ctrl_log_mask);
2596         uint8_t *log_mask_ptr = NULL;
2597         int i, ret = DIAG_DCI_NO_ERROR, err = DIAG_DCI_NO_ERROR;
2598         int updated;
2599         uint32_t write_len = 0;
2600
2601         mutex_lock(&dci_log_mask_mutex);
2602         log_mask_ptr = dci_ops_tbl[token].log_mask_composite;
2603         if (!log_mask_ptr) {
2604                 mutex_unlock(&dci_log_mask_mutex);
2605                 return -EINVAL;
2606         }
2607
2608         /* DCI header is common to all equipment IDs */
2609         dci_header.start = CONTROL_CHAR;
2610         dci_header.version = 1;
2611         dci_header.length = log_header_size + DCI_MAX_ITEMS_PER_LOG_CODE + 1;
2612         dci_header.cmd_code = DCI_CONTROL_PKT_CODE;
2613
2614         for (i = 0; i < DCI_MAX_LOG_CODES; i++) {
2615                 updated = 1;
2616                 write_len = 0;
2617                 if (!*(log_mask_ptr + 1)) {
2618                         log_mask_ptr += 514;
2619                         continue;
2620                 }
2621
2622                 buf = dci_get_buffer_from_bridge(token);
2623                 if (!buf) {
2624                         pr_err("diag: In %s, unable to get dci buffers to write data\n",
2625                                 __func__);
2626                         mutex_unlock(&dci_log_mask_mutex);
2627                         return -EAGAIN;
2628                 }
2629
2630                 memcpy(buf + write_len, &dci_header, dci_header_size);
2631                 write_len += dci_header_size;
2632                 write_len += dci_fill_log_mask(buf + write_len, log_mask_ptr);
2633                 *(buf + write_len) = CONTROL_CHAR; /* End Terminator */
2634                 write_len += sizeof(uint8_t);
2635                 err = diag_dci_write_bridge(token, buf, write_len);
2636                 if (err) {
2637                         pr_err("diag: error writing log mask to remote processor, equip_id: %d, token: %d, err: %d\n",
2638                                i, token, err);
2639                         diagmem_free(driver, buf, dci_ops_tbl[token].mempool);
2640                         updated = 0;
2641                 }
2642                 if (updated)
2643                         *(log_mask_ptr + 1) = 0; /* clear dirty byte */
2644                 log_mask_ptr += 514;
2645         }
2646         mutex_unlock(&dci_log_mask_mutex);
2647         return ret;
2648 }
2649 #endif
2650
2651 int diag_send_dci_log_mask(int token)
2652 {
2653         void *buf = log_mask.update_buf;
2654         int write_len = 0;
2655         uint8_t *log_mask_ptr = NULL;
2656         int i, j, ret = DIAG_DCI_NO_ERROR, err = DIAG_DCI_NO_ERROR;
2657         int updated;
2658
2659
2660         mutex_lock(&dci_log_mask_mutex);
2661         log_mask_ptr = dci_ops_tbl[DCI_LOCAL_PROC].log_mask_composite;
2662         if (!log_mask_ptr) {
2663                 mutex_unlock(&dci_log_mask_mutex);
2664                 return -EINVAL;
2665         }
2666
2667         mutex_lock(&log_mask.lock);
2668         for (i = 0; i < 16; i++) {
2669                 updated = 1;
2670                 /* Dirty bit is set don't update the mask for this equip id */
2671                 if (!(*(log_mask_ptr + 1))) {
2672                         log_mask_ptr += 514;
2673                         continue;
2674                 }
2675                 write_len = dci_fill_log_mask(buf, log_mask_ptr);
2676                 for (j = 0; j < NUM_PERIPHERALS && write_len; j++) {
2677                         if (check_peripheral_dci_support(j, DCI_LOCAL_PROC)) {
2678                                 err = diag_dci_write_proc(j, DIAG_CNTL_TYPE,
2679                                         buf, write_len);
2680                                 if (err != DIAG_DCI_NO_ERROR) {
2681                                         updated = 0;
2682                                         ret = DIAG_DCI_SEND_DATA_FAIL;
2683                                 }
2684                         }
2685                 }
2686                 if (updated)
2687                         *(log_mask_ptr+1) = 0; /* clear dirty byte */
2688                 log_mask_ptr += 514;
2689         }
2690         mutex_unlock(&log_mask.lock);
2691         mutex_unlock(&dci_log_mask_mutex);
2692         return ret;
2693 }
2694
2695 static int diag_dci_init_local(void)
2696 {
2697         struct dci_ops_tbl_t *temp = &dci_ops_tbl[DCI_LOCAL_PROC];
2698
2699         create_dci_log_mask_tbl(temp->log_mask_composite, DCI_LOG_MASK_CLEAN);
2700         create_dci_event_mask_tbl(temp->event_mask_composite);
2701         temp->peripheral_status |= DIAG_CON_APSS;
2702
2703         return 0;
2704 }
2705
2706 #ifdef CONFIG_DIAGFWD_BRIDGE_CODE
2707 static void diag_dci_init_handshake_remote(void)
2708 {
2709         int i;
2710         struct dci_channel_status_t *temp = NULL;
2711
2712         for (i = DCI_REMOTE_BASE; i < NUM_DCI_PROC; i++) {
2713                 temp = &dci_channel_status[i];
2714                 temp->id = i;
2715                 setup_timer(&temp->wait_time, dci_chk_handshake, i);
2716                 INIT_WORK(&temp->handshake_work, dci_handshake_work_fn);
2717         }
2718 }
2719
2720 static int diag_dci_init_remote(void)
2721 {
2722         int i;
2723         struct dci_ops_tbl_t *temp = NULL;
2724
2725         diagmem_init(driver, POOL_TYPE_MDM_DCI_WRITE);
2726
2727         for (i = DCI_REMOTE_BASE; i < DCI_REMOTE_LAST; i++) {
2728                 temp = &dci_ops_tbl[i];
2729                 create_dci_log_mask_tbl(temp->log_mask_composite,
2730                                         DCI_LOG_MASK_CLEAN);
2731                 create_dci_event_mask_tbl(temp->event_mask_composite);
2732         }
2733
2734         partial_pkt.data = vzalloc(MAX_DCI_PACKET_SZ);
2735         if (!partial_pkt.data) {
2736                 pr_err("diag: Unable to create partial pkt data\n");
2737                 return -ENOMEM;
2738         }
2739
2740         partial_pkt.total_len = 0;
2741         partial_pkt.read_len = 0;
2742         partial_pkt.remaining = 0;
2743         partial_pkt.processing = 0;
2744
2745         diag_dci_init_handshake_remote();
2746
2747         return 0;
2748 }
2749 #else
2750 static int diag_dci_init_remote(void)
2751 {
2752         return 0;
2753 }
2754 #endif
2755
2756 static int diag_dci_init_ops_tbl(void)
2757 {
2758         int err = 0;
2759
2760         err = diag_dci_init_local();
2761         if (err)
2762                 goto err;
2763         err = diag_dci_init_remote();
2764         if (err)
2765                 goto err;
2766
2767         return 0;
2768
2769 err:
2770         return -ENOMEM;
2771 }
2772
2773 int diag_dci_init(void)
2774 {
2775         int ret = 0;
2776
2777         driver->dci_tag = 0;
2778         driver->dci_client_id = 0;
2779         driver->num_dci_client = 0;
2780         mutex_init(&driver->dci_mutex);
2781         mutex_init(&dci_log_mask_mutex);
2782         mutex_init(&dci_event_mask_mutex);
2783         spin_lock_init(&ws_lock);
2784
2785         ret = diag_dci_init_ops_tbl();
2786         if (ret)
2787                 goto err;
2788
2789         if (driver->apps_dci_buf == NULL) {
2790                 driver->apps_dci_buf = vzalloc(DCI_BUF_SIZE);
2791                 if (driver->apps_dci_buf == NULL)
2792                         goto err;
2793         }
2794         INIT_LIST_HEAD(&driver->dci_client_list);
2795         INIT_LIST_HEAD(&driver->dci_req_list);
2796
2797         driver->diag_dci_wq = create_singlethread_workqueue("diag_dci_wq");
2798         if (!driver->diag_dci_wq)
2799                 goto err;
2800
2801         INIT_WORK(&dci_data_drain_work, dci_data_drain_work_fn);
2802
2803         setup_timer(&dci_drain_timer, dci_drain_data, 0);
2804         return DIAG_DCI_NO_ERROR;
2805 err:
2806         pr_err("diag: Could not initialize diag DCI buffers");
2807         vfree(driver->apps_dci_buf);
2808         driver->apps_dci_buf = NULL;
2809
2810         if (driver->diag_dci_wq)
2811                 destroy_workqueue(driver->diag_dci_wq);
2812         vfree(partial_pkt.data);
2813         partial_pkt.data = NULL;
2814         mutex_destroy(&driver->dci_mutex);
2815         mutex_destroy(&dci_log_mask_mutex);
2816         mutex_destroy(&dci_event_mask_mutex);
2817         return DIAG_DCI_NO_REG;
2818 }
2819
2820 void diag_dci_channel_init(void)
2821 {
2822         uint8_t peripheral;
2823
2824         for (peripheral = 0; peripheral < NUM_PERIPHERALS; peripheral++) {
2825                 diagfwd_open(peripheral, TYPE_DCI);
2826                 diagfwd_open(peripheral, TYPE_DCI_CMD);
2827         }
2828 }
2829
2830 void diag_dci_exit(void)
2831 {
2832         vfree(partial_pkt.data);
2833         partial_pkt.data = NULL;
2834         vfree(driver->apps_dci_buf);
2835         driver->apps_dci_buf = NULL;
2836         mutex_destroy(&driver->dci_mutex);
2837         mutex_destroy(&dci_log_mask_mutex);
2838         mutex_destroy(&dci_event_mask_mutex);
2839         destroy_workqueue(driver->diag_dci_wq);
2840 }
2841
2842 int diag_dci_clear_log_mask(int client_id)
2843 {
2844         int err = DIAG_DCI_NO_ERROR, token = DCI_LOCAL_PROC;
2845         uint8_t *update_ptr;
2846         struct diag_dci_client_tbl *entry = NULL;
2847
2848         entry = diag_dci_get_client_entry(client_id);
2849         if (!entry) {
2850                 pr_err("diag: In %s, invalid client entry\n", __func__);
2851                 return DIAG_DCI_TABLE_ERR;
2852         }
2853         token = entry->client_info.token;
2854         update_ptr = dci_ops_tbl[token].log_mask_composite;
2855
2856         create_dci_log_mask_tbl(entry->dci_log_mask, DCI_LOG_MASK_CLEAN);
2857         diag_dci_invalidate_cumulative_log_mask(token);
2858
2859         /*
2860          * Send updated mask to userspace clients only if the client
2861          * is registered on the local processor
2862          */
2863         if (token == DCI_LOCAL_PROC)
2864                 diag_update_userspace_clients(DCI_LOG_MASKS_TYPE);
2865         /* Send updated mask to peripherals */
2866         err = dci_ops_tbl[token].send_log_mask(token);
2867         return err;
2868 }
2869
2870 int diag_dci_clear_event_mask(int client_id)
2871 {
2872         int err = DIAG_DCI_NO_ERROR, token = DCI_LOCAL_PROC;
2873         uint8_t *update_ptr;
2874         struct diag_dci_client_tbl *entry = NULL;
2875
2876         entry = diag_dci_get_client_entry(client_id);
2877         if (!entry) {
2878                 pr_err("diag: In %s, invalid client entry\n", __func__);
2879                 return DIAG_DCI_TABLE_ERR;
2880         }
2881         token = entry->client_info.token;
2882         update_ptr = dci_ops_tbl[token].event_mask_composite;
2883
2884         create_dci_event_mask_tbl(entry->dci_event_mask);
2885         diag_dci_invalidate_cumulative_event_mask(token);
2886
2887         /*
2888          * Send updated mask to userspace clients only if the client is
2889          * registerted on the local processor
2890          */
2891         if (token == DCI_LOCAL_PROC)
2892                 diag_update_userspace_clients(DCI_EVENT_MASKS_TYPE);
2893         /* Send updated mask to peripherals */
2894         err = dci_ops_tbl[token].send_event_mask(token);
2895         return err;
2896 }
2897
2898 uint8_t diag_dci_get_cumulative_real_time(int token)
2899 {
2900         uint8_t real_time = MODE_NONREALTIME;
2901         struct list_head *start, *temp;
2902         struct diag_dci_client_tbl *entry = NULL;
2903
2904         list_for_each_safe(start, temp, &driver->dci_client_list) {
2905                 entry = list_entry(start, struct diag_dci_client_tbl, track);
2906                 if (entry->real_time == MODE_REALTIME &&
2907                                         entry->client_info.token == token) {
2908                         real_time = 1;
2909                         break;
2910                 }
2911         }
2912         return real_time;
2913 }
2914
2915 int diag_dci_set_real_time(struct diag_dci_client_tbl *entry, uint8_t real_time)
2916 {
2917         if (!entry) {
2918                 pr_err("diag: In %s, invalid client entry\n", __func__);
2919                 return 0;
2920         }
2921         entry->real_time = real_time;
2922         return 1;
2923 }
2924
2925 int diag_dci_register_client(struct diag_dci_reg_tbl_t *reg_entry)
2926 {
2927         int i, err = 0;
2928         struct diag_dci_client_tbl *new_entry = NULL;
2929         struct diag_dci_buf_peripheral_t *proc_buf = NULL;
2930
2931         if (!reg_entry)
2932                 return DIAG_DCI_NO_REG;
2933         if (!VALID_DCI_TOKEN(reg_entry->token)) {
2934                 pr_alert("diag: Invalid DCI client token, %d\n",
2935                                                 reg_entry->token);
2936                 return DIAG_DCI_NO_REG;
2937         }
2938
2939         if (driver->dci_state == DIAG_DCI_NO_REG)
2940                 return DIAG_DCI_NO_REG;
2941
2942         if (driver->num_dci_client >= MAX_DCI_CLIENTS)
2943                 return DIAG_DCI_NO_REG;
2944
2945         new_entry = kzalloc(sizeof(struct diag_dci_client_tbl), GFP_KERNEL);
2946         if (new_entry == NULL) {
2947                 pr_err("diag: unable to alloc memory\n");
2948                 return DIAG_DCI_NO_REG;
2949         }
2950
2951         mutex_lock(&driver->dci_mutex);
2952
2953         get_task_struct(current);
2954         new_entry->client = current;
2955         new_entry->tgid = current->tgid;
2956         new_entry->client_info.notification_list =
2957                                 reg_entry->notification_list;
2958         new_entry->client_info.signal_type =
2959                                 reg_entry->signal_type;
2960         new_entry->client_info.token = reg_entry->token;
2961         switch (reg_entry->token) {
2962         case DCI_LOCAL_PROC:
2963                 new_entry->num_buffers = NUM_DCI_PERIPHERALS;
2964                 break;
2965         case DCI_MDM_PROC:
2966                 new_entry->num_buffers = 1;
2967                 break;
2968         }
2969
2970         new_entry->buffers = NULL;
2971         new_entry->real_time = MODE_REALTIME;
2972         new_entry->in_service = 0;
2973         INIT_LIST_HEAD(&new_entry->list_write_buf);
2974         mutex_init(&new_entry->write_buf_mutex);
2975         new_entry->dci_log_mask =  vzalloc(DCI_LOG_MASK_SIZE);
2976         if (!new_entry->dci_log_mask) {
2977                 pr_err("diag: Unable to create log mask for client, %d",
2978                                                         driver->dci_client_id);
2979                 goto fail_alloc;
2980         }
2981         create_dci_log_mask_tbl(new_entry->dci_log_mask, DCI_LOG_MASK_CLEAN);
2982
2983         new_entry->dci_event_mask =  vzalloc(DCI_EVENT_MASK_SIZE);
2984         if (!new_entry->dci_event_mask) {
2985                 pr_err("diag: Unable to create event mask for client, %d",
2986                                                         driver->dci_client_id);
2987                 goto fail_alloc;
2988         }
2989         create_dci_event_mask_tbl(new_entry->dci_event_mask);
2990
2991         new_entry->buffers = kzalloc(new_entry->num_buffers *
2992                                      sizeof(struct diag_dci_buf_peripheral_t),
2993                                         GFP_KERNEL);
2994         if (!new_entry->buffers) {
2995                 pr_err("diag: Unable to allocate buffers for peripherals in %s\n",
2996                                                                 __func__);
2997                 goto fail_alloc;
2998         }
2999
3000         for (i = 0; i < new_entry->num_buffers; i++) {
3001                 proc_buf = &new_entry->buffers[i];
3002                 if (!proc_buf)
3003                         goto fail_alloc;
3004
3005                 mutex_init(&proc_buf->health_mutex);
3006                 mutex_init(&proc_buf->buf_mutex);
3007                 proc_buf->health.dropped_events = 0;
3008                 proc_buf->health.dropped_logs = 0;
3009                 proc_buf->health.received_events = 0;
3010                 proc_buf->health.received_logs = 0;
3011                 proc_buf->buf_primary = kzalloc(
3012                                         sizeof(struct diag_dci_buffer_t),
3013                                         GFP_KERNEL);
3014                 if (!proc_buf->buf_primary)
3015                         goto fail_alloc;
3016                 proc_buf->buf_cmd = kzalloc(sizeof(struct diag_dci_buffer_t),
3017                                         GFP_KERNEL);
3018                 if (!proc_buf->buf_cmd)
3019                         goto fail_alloc;
3020                 err = diag_dci_init_buffer(proc_buf->buf_primary,
3021                                            DCI_BUF_PRIMARY);
3022                 if (err)
3023                         goto fail_alloc;
3024                 err = diag_dci_init_buffer(proc_buf->buf_cmd, DCI_BUF_CMD);
3025                 if (err)
3026                         goto fail_alloc;
3027                 proc_buf->buf_curr = proc_buf->buf_primary;
3028         }
3029
3030         list_add_tail(&new_entry->track, &driver->dci_client_list);
3031         driver->dci_client_id++;
3032         new_entry->client_info.client_id = driver->dci_client_id;
3033         reg_entry->client_id = driver->dci_client_id;
3034         driver->num_dci_client++;
3035         if (driver->num_dci_client == 1)
3036                 diag_update_proc_vote(DIAG_PROC_DCI, VOTE_UP, reg_entry->token);
3037         queue_work(driver->diag_real_time_wq, &driver->diag_real_time_work);
3038         mutex_unlock(&driver->dci_mutex);
3039
3040         return driver->dci_client_id;
3041
3042 fail_alloc:
3043         if (new_entry) {
3044                 for (i = 0; ((i < new_entry->num_buffers) &&
3045                         new_entry->buffers); i++) {
3046                         proc_buf = &new_entry->buffers[i];
3047                         if (proc_buf) {
3048                                 mutex_destroy(&proc_buf->health_mutex);
3049                                 if (proc_buf->buf_primary) {
3050                                         vfree(proc_buf->buf_primary->data);
3051                                         proc_buf->buf_primary->data = NULL;
3052                                         mutex_destroy(
3053                                            &proc_buf->buf_primary->data_mutex);
3054                                 }
3055                                 kfree(proc_buf->buf_primary);
3056                                 proc_buf->buf_primary = NULL;
3057                                 if (proc_buf->buf_cmd) {
3058                                         vfree(proc_buf->buf_cmd->data);
3059                                         proc_buf->buf_cmd->data = NULL;
3060                                         mutex_destroy(
3061                                            &proc_buf->buf_cmd->data_mutex);
3062                                 }
3063                                 kfree(proc_buf->buf_cmd);
3064                                 proc_buf->buf_cmd = NULL;
3065                         }
3066                 }
3067                 vfree(new_entry->dci_event_mask);
3068                 new_entry->dci_event_mask = NULL;
3069                 vfree(new_entry->dci_log_mask);
3070                 new_entry->dci_log_mask = NULL;
3071                 kfree(new_entry->buffers);
3072                 new_entry->buffers = NULL;
3073                 kfree(new_entry);
3074                 new_entry = NULL;
3075         }
3076         mutex_unlock(&driver->dci_mutex);
3077         return DIAG_DCI_NO_REG;
3078 }
3079
3080 int diag_dci_deinit_client(struct diag_dci_client_tbl *entry)
3081 {
3082         int ret = DIAG_DCI_NO_ERROR, real_time = MODE_REALTIME, i, peripheral;
3083         struct diag_dci_buf_peripheral_t *proc_buf = NULL;
3084         struct diag_dci_buffer_t *buf_entry, *temp;
3085         struct list_head *start, *req_temp;
3086         struct dci_pkt_req_entry_t *req_entry = NULL;
3087         int token = DCI_LOCAL_PROC;
3088
3089         if (!entry)
3090                 return DIAG_DCI_NOT_SUPPORTED;
3091
3092         token = entry->client_info.token;
3093         /*
3094          * Remove the entry from the list before freeing the buffers
3095          * to ensure that we don't have any invalid access.
3096          */
3097         if (!list_empty(&entry->track))
3098                 list_del(&entry->track);
3099         driver->num_dci_client--;
3100
3101         put_task_struct(entry->client);
3102         entry->client = NULL;
3103         /*
3104          * Clear the client's log and event masks, update the cumulative
3105          * masks and send the masks to peripherals
3106          */
3107         vfree(entry->dci_log_mask);
3108         entry->dci_log_mask = NULL;
3109         diag_dci_invalidate_cumulative_log_mask(token);
3110         if (token == DCI_LOCAL_PROC)
3111                 diag_update_userspace_clients(DCI_LOG_MASKS_TYPE);
3112         ret = dci_ops_tbl[token].send_log_mask(token);
3113         if (ret != DIAG_DCI_NO_ERROR) {
3114                 return ret;
3115         }
3116         vfree(entry->dci_event_mask);
3117         entry->dci_event_mask = NULL;
3118         diag_dci_invalidate_cumulative_event_mask(token);
3119         if (token == DCI_LOCAL_PROC)
3120                 diag_update_userspace_clients(DCI_EVENT_MASKS_TYPE);
3121         ret = dci_ops_tbl[token].send_event_mask(token);
3122         if (ret != DIAG_DCI_NO_ERROR) {
3123                 return ret;
3124         }
3125
3126         list_for_each_safe(start, req_temp, &driver->dci_req_list) {
3127                 req_entry = list_entry(start, struct dci_pkt_req_entry_t,
3128                                        track);
3129                 if (req_entry->client_id == entry->client_info.client_id) {
3130                         if (!list_empty(&req_entry->track))
3131                                 list_del(&req_entry->track);
3132                         kfree(req_entry);
3133                         req_entry = NULL;
3134                 }
3135         }
3136
3137         /* Clean up any buffer that is pending write */
3138         mutex_lock(&entry->write_buf_mutex);
3139         list_for_each_entry_safe(buf_entry, temp, &entry->list_write_buf,
3140                                                         buf_track) {
3141                 if (!list_empty(&buf_entry->buf_track))
3142                         list_del(&buf_entry->buf_track);
3143                 if (buf_entry->buf_type == DCI_BUF_SECONDARY) {
3144                         mutex_lock(&buf_entry->data_mutex);
3145                         diagmem_free(driver, buf_entry->data, POOL_TYPE_DCI);
3146                         buf_entry->data = NULL;
3147                         mutex_unlock(&buf_entry->data_mutex);
3148                         kfree(buf_entry);
3149                         buf_entry = NULL;
3150                 } else if (buf_entry->buf_type == DCI_BUF_CMD) {
3151                         peripheral = buf_entry->data_source;
3152                         if (peripheral == APPS_DATA)
3153                                 continue;
3154                 }
3155                 /*
3156                  * These are buffers that can't be written to the client which
3157                  * means that the copy cannot be completed. Make sure that we
3158                  * remove those references in DCI wakeup source.
3159                  */
3160                 diag_ws_on_copy_fail(DIAG_WS_DCI);
3161         }
3162         mutex_unlock(&entry->write_buf_mutex);
3163
3164         for (i = 0; i < entry->num_buffers; i++) {
3165                 proc_buf = &entry->buffers[i];
3166                 buf_entry = proc_buf->buf_curr;
3167                 mutex_lock(&proc_buf->buf_mutex);
3168                 /* Clean up secondary buffer from mempool that is active */
3169                 if (buf_entry && buf_entry->buf_type == DCI_BUF_SECONDARY) {
3170                         mutex_lock(&buf_entry->data_mutex);
3171                         diagmem_free(driver, buf_entry->data, POOL_TYPE_DCI);
3172                         buf_entry->data = NULL;
3173                         mutex_unlock(&buf_entry->data_mutex);
3174                         mutex_destroy(&buf_entry->data_mutex);
3175                         kfree(buf_entry);
3176                         buf_entry = NULL;
3177                 }
3178
3179                 mutex_lock(&proc_buf->buf_primary->data_mutex);
3180                 vfree(proc_buf->buf_primary->data);
3181                 proc_buf->buf_primary->data = NULL;
3182                 mutex_unlock(&proc_buf->buf_primary->data_mutex);
3183
3184                 mutex_lock(&proc_buf->buf_cmd->data_mutex);
3185                 vfree(proc_buf->buf_cmd->data);
3186                 proc_buf->buf_cmd->data = NULL;
3187                 mutex_unlock(&proc_buf->buf_cmd->data_mutex);
3188
3189                 mutex_destroy(&proc_buf->health_mutex);
3190                 mutex_destroy(&proc_buf->buf_primary->data_mutex);
3191                 mutex_destroy(&proc_buf->buf_cmd->data_mutex);
3192
3193                 kfree(proc_buf->buf_primary);
3194                 proc_buf->buf_primary = NULL;
3195                 kfree(proc_buf->buf_cmd);
3196                 proc_buf->buf_cmd = NULL;
3197                 mutex_unlock(&proc_buf->buf_mutex);
3198         }
3199         mutex_destroy(&entry->write_buf_mutex);
3200
3201         kfree(entry->buffers);
3202         entry->buffers = NULL;
3203         kfree(entry);
3204         entry = NULL;
3205
3206         if (driver->num_dci_client == 0) {
3207                 diag_update_proc_vote(DIAG_PROC_DCI, VOTE_DOWN, token);
3208         } else {
3209                 real_time = diag_dci_get_cumulative_real_time(token);
3210                 diag_update_real_time_vote(DIAG_PROC_DCI, real_time, token);
3211         }
3212         queue_work(driver->diag_real_time_wq, &driver->diag_real_time_work);
3213
3214         return DIAG_DCI_NO_ERROR;
3215 }
3216
3217 int diag_dci_write_proc(uint8_t peripheral, int pkt_type, char *buf, int len)
3218 {
3219         uint8_t dest_channel = TYPE_DATA;
3220         int err = 0;
3221
3222         if (!buf || peripheral >= NUM_PERIPHERALS || len < 0 ||
3223             !(driver->feature[PERIPHERAL_MODEM].rcvd_feature_mask)) {
3224                 DIAG_LOG(DIAG_DEBUG_DCI,
3225                         "buf: 0x%pK, p: %d, len: %d, f_mask: %d\n",
3226                         buf, peripheral, len,
3227                         driver->feature[PERIPHERAL_MODEM].rcvd_feature_mask);
3228                 return -EINVAL;
3229         }
3230
3231         if (pkt_type == DIAG_DATA_TYPE) {
3232                 dest_channel = TYPE_DCI_CMD;
3233         } else if (pkt_type == DIAG_CNTL_TYPE) {
3234                 dest_channel = TYPE_CNTL;
3235         } else {
3236                 pr_err("diag: Invalid DCI pkt type in %s", __func__);
3237                 return -EINVAL;
3238         }
3239
3240         err = diagfwd_write(peripheral, dest_channel, buf, len);
3241         if (err && err != -ENODEV) {
3242                 pr_err("diag: In %s, unable to write to peripheral: %d, type: %d, len: %d, err: %d\n",
3243                        __func__, peripheral, dest_channel, len, err);
3244         } else {
3245                 err = DIAG_DCI_NO_ERROR;
3246         }
3247
3248         return err;
3249 }
3250
3251 int diag_dci_copy_health_stats(struct diag_dci_health_stats_proc *stats_proc)
3252 {
3253         struct diag_dci_client_tbl *entry = NULL;
3254         struct diag_dci_health_t *health = NULL;
3255         struct diag_dci_health_stats *stats = NULL;
3256         int i, proc;
3257
3258         if (!stats_proc)
3259                 return -EINVAL;
3260
3261         stats = &stats_proc->health;
3262         proc = stats_proc->proc;
3263         if (proc < ALL_PROC || proc > APPS_DATA)
3264                 return -EINVAL;
3265
3266         entry = diag_dci_get_client_entry(stats_proc->client_id);
3267         if (!entry)
3268                 return DIAG_DCI_NOT_SUPPORTED;
3269
3270         /*
3271          * If the client has registered for remote processor, the
3272          * proc field doesn't have any effect as they have only one buffer.
3273          */
3274         if (entry->client_info.token)
3275                 proc = 0;
3276
3277         stats->stats.dropped_logs = 0;
3278         stats->stats.dropped_events = 0;
3279         stats->stats.received_logs = 0;
3280         stats->stats.received_events = 0;
3281
3282         if (proc != ALL_PROC) {
3283                 health = &entry->buffers[proc].health;
3284                 stats->stats.dropped_logs = health->dropped_logs;
3285                 stats->stats.dropped_events = health->dropped_events;
3286                 stats->stats.received_logs = health->received_logs;
3287                 stats->stats.received_events = health->received_events;
3288                 if (stats->reset_status) {
3289                         mutex_lock(&entry->buffers[proc].health_mutex);
3290                         health->dropped_logs = 0;
3291                         health->dropped_events = 0;
3292                         health->received_logs = 0;
3293                         health->received_events = 0;
3294                         mutex_unlock(&entry->buffers[proc].health_mutex);
3295                 }
3296                 return DIAG_DCI_NO_ERROR;
3297         }
3298
3299         for (i = 0; i < entry->num_buffers; i++) {
3300                 health = &entry->buffers[i].health;
3301                 stats->stats.dropped_logs += health->dropped_logs;
3302                 stats->stats.dropped_events += health->dropped_events;
3303                 stats->stats.received_logs += health->received_logs;
3304                 stats->stats.received_events += health->received_events;
3305                 if (stats->reset_status) {
3306                         mutex_lock(&entry->buffers[i].health_mutex);
3307                         health->dropped_logs = 0;
3308                         health->dropped_events = 0;
3309                         health->received_logs = 0;
3310                         health->received_events = 0;
3311                         mutex_unlock(&entry->buffers[i].health_mutex);
3312                 }
3313         }
3314         return DIAG_DCI_NO_ERROR;
3315 }
3316
3317 int diag_dci_get_support_list(struct diag_dci_peripherals_t *support_list)
3318 {
3319         if (!support_list)
3320                 return -ENOMEM;
3321
3322         if (!VALID_DCI_TOKEN(support_list->proc))
3323                 return -EIO;
3324
3325         support_list->list = dci_ops_tbl[support_list->proc].peripheral_status;
3326         return DIAG_DCI_NO_ERROR;
3327 }