drivers/char/diag/diag_dci.c

   1 /* Copyright (c) 2012-2018, The Linux Foundation. All rights reserved.
   2  *
   3  * This program is free software; you can redistribute it and/or modify
   4  * it under the terms of the GNU General Public License version 2 and
   5  * only version 2 as published by the Free Software Foundation.
   6  *
   7  * This program is distributed in the hope that it will be useful,
   8  * but WITHOUT ANY WARRANTY; without even the implied warranty of
   9  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  10  * GNU General Public License for more details.
  11  */
  12
  13 #include <linux/slab.h>
  14 #include <linux/init.h>
  15 #include <linux/uaccess.h>
  16 #include <linux/diagchar.h>
  17 #include <linux/sched.h>
  18 #include <linux/err.h>
  19 #include <linux/delay.h>
  20 #include <linux/workqueue.h>
  21 #include <linux/pm_runtime.h>
  22 #include <linux/platform_device.h>
  23 #include <linux/pm_wakeup.h>
  24 #include <linux/spinlock.h>
  25 #include <linux/ratelimit.h>
  26 #include <linux/reboot.h>
  27 #include <asm/current.h>
  28 #include <soc/qcom/restart.h>
  29 #include <linux/vmalloc.h>
  30 #ifdef CONFIG_DIAG_OVER_USB
  31 #include <linux/usb/usbdiag.h>
  32 #endif
  33 #include "diagchar_hdlc.h"
  34 #include "diagmem.h"
  35 #include "diagchar.h"
  36 #include "diagfwd.h"
  37 #include "diagfwd_cntl.h"
  38 #include "diag_dci.h"
  39 #include "diag_masks.h"
  40 #include "diagfwd_bridge.h"
  41 #include "diagfwd_peripheral.h"
  42 #include "diag_ipc_logging.h"
  43
  44 static struct timer_list dci_drain_timer;
  45 static int dci_timer_in_progress;
  46 static struct work_struct dci_data_drain_work;
  47
  48 struct diag_dci_partial_pkt_t partial_pkt;
  49
  50 unsigned int dci_max_reg = 100;
  51 unsigned int dci_max_clients = 10;
  52 struct mutex dci_log_mask_mutex;
  53 struct mutex dci_event_mask_mutex;
  54
  55 /*
  56  * DCI_HANDSHAKE_RETRY_TIME: Time to wait (in microseconds) before checking the
  57  * connection status again.
  58  *
  59  * DCI_HANDSHAKE_WAIT_TIME: Timeout (in milliseconds) to check for dci
  60  * connection status
  61  */
  62 #define DCI_HANDSHAKE_RETRY_TIME        500000
  63 #define DCI_HANDSHAKE_WAIT_TIME         200
  64
  65 spinlock_t ws_lock;
  66 unsigned long ws_lock_flags;
  67
  68 struct dci_ops_tbl_t dci_ops_tbl[NUM_DCI_PROC] = {
  69         {
  70                 .ctx = 0,
  71                 .send_log_mask = diag_send_dci_log_mask,
  72                 .send_event_mask = diag_send_dci_event_mask,
  73                 .peripheral_status = 0,
  74                 .mempool = 0,
  75         },
  76 #ifdef CONFIG_DIAGFWD_BRIDGE_CODE
  77         {
  78                 .ctx = DIAGFWD_MDM_DCI,
  79                 .send_log_mask = diag_send_dci_log_mask_remote,
  80                 .send_event_mask = diag_send_dci_event_mask_remote,
  81                 .peripheral_status = 0,
  82                 .mempool = POOL_TYPE_MDM_DCI_WRITE,
  83         }
  84 #endif
  85 };
  86
  87 struct dci_channel_status_t dci_channel_status[NUM_DCI_PROC] = {
  88         {
  89                 .id = 0,
  90                 .open = 0,
  91                 .retry_count = 0
  92         },
  93 #ifdef CONFIG_DIAGFWD_BRIDGE_CODE
  94         {
  95                 .id = DIAGFWD_MDM_DCI,
  96                 .open = 0,
  97                 .retry_count = 0
  98         }
  99 #endif
 100 };
 101
 102 /* Number of milliseconds anticipated to process the DCI data */
 103 #define DCI_WAKEUP_TIMEOUT 1
 104
 105 #define DCI_CAN_ADD_BUF_TO_LIST(buf)                                    \
 106         (buf && buf->data && !buf->in_busy && buf->data_len > 0)        \
 107
 108 #ifdef CONFIG_DEBUG_FS
 109 struct diag_dci_data_info *dci_traffic;
 110 struct mutex dci_stat_mutex;
 111 void diag_dci_record_traffic(int read_bytes, uint8_t ch_type,
 112                              uint8_t peripheral, uint8_t proc)
 113 {
 114         static int curr_dci_data;
 115         static unsigned long iteration;
 116         struct diag_dci_data_info *temp_data = dci_traffic;
 117         if (!temp_data)
 118                 return;
 119         mutex_lock(&dci_stat_mutex);
 120         if (curr_dci_data == DIAG_DCI_DEBUG_CNT)
 121                 curr_dci_data = 0;
 122         temp_data += curr_dci_data;
 123         temp_data->iteration = iteration + 1;
 124         temp_data->data_size = read_bytes;
 125         temp_data->peripheral = peripheral;
 126         temp_data->ch_type = ch_type;
 127         temp_data->proc = proc;
 128         diag_get_timestamp(temp_data->time_stamp);
 129         curr_dci_data++;
 130         iteration++;
 131         mutex_unlock(&dci_stat_mutex);
 132 }
 133 #else
 134 void diag_dci_record_traffic(int read_bytes, uint8_t ch_type,
 135                              uint8_t peripheral, uint8_t proc) { }
 136 #endif
 137
 138 static int check_peripheral_dci_support(int peripheral_id, int dci_proc_id)
 139 {
 140         int dci_peripheral_list = 0;
 141
 142         if (dci_proc_id < 0 || dci_proc_id >= NUM_DCI_PROC) {
 143                 pr_err("diag:In %s,not a supported DCI proc id\n", __func__);
 144                 return 0;
 145         }
 146         if (peripheral_id < 0 || peripheral_id >= NUM_PERIPHERALS) {
 147                 pr_err("diag:In %s,not a valid peripheral id\n", __func__);
 148                 return 0;
 149         }
 150         dci_peripheral_list = dci_ops_tbl[dci_proc_id].peripheral_status;
 151
 152         if (dci_peripheral_list <= 0 || dci_peripheral_list > DIAG_CON_ALL) {
 153                 pr_err("diag:In %s,not a valid dci peripheral mask\n",
 154                          __func__);
 155                 return 0;
 156         }
 157         /* Remove APSS bit mask information */
 158         dci_peripheral_list = dci_peripheral_list >> 1;
 159
 160         if ((1 << peripheral_id) & (dci_peripheral_list))
 161                 return 1;
 162         else
 163                 return 0;
 164 }
 165
 166 static void create_dci_log_mask_tbl(unsigned char *mask, uint8_t dirty)
 167 {
 168         unsigned char *temp = mask;
 169         uint8_t i;
 170
 171         if (!mask)
 172                 return;
 173
 174         /* create hard coded table for log mask with 16 categories */
 175         for (i = 0; i < DCI_MAX_LOG_CODES; i++) {
 176                 *temp = i;
 177                 temp++;
 178                 *temp = dirty ? 1 : 0;
 179                 temp++;
 180                 memset(temp, 0, DCI_MAX_ITEMS_PER_LOG_CODE);
 181                 temp += DCI_MAX_ITEMS_PER_LOG_CODE;
 182         }
 183 }
 184
 185 static void create_dci_event_mask_tbl(unsigned char *tbl_buf)
 186 {
 187         if (tbl_buf)
 188                 memset(tbl_buf, 0, DCI_EVENT_MASK_SIZE);
 189 }
 190
 191 void dci_drain_data(unsigned long data)
 192 {
 193         queue_work(driver->diag_dci_wq, &dci_data_drain_work);
 194 }
 195
 196 static void dci_check_drain_timer(void)
 197 {
 198         if (!dci_timer_in_progress) {
 199                 dci_timer_in_progress = 1;
 200                 mod_timer(&dci_drain_timer, jiffies + msecs_to_jiffies(200));
 201         }
 202 }
 203
 204 #ifdef CONFIG_DIAGFWD_BRIDGE_CODE
 205 static void dci_handshake_work_fn(struct work_struct *work)
 206 {
 207         int err = 0;
 208         int max_retries = 5;
 209
 210         struct dci_channel_status_t *status = container_of(work,
 211                                                 struct dci_channel_status_t,
 212                                                 handshake_work);
 213
 214         if (status->open) {
 215                 pr_debug("diag: In %s, remote dci channel is open, index: %d\n",
 216                          __func__, status->id);
 217                 return;
 218         }
 219
 220         if (status->retry_count == max_retries) {
 221                 status->retry_count = 0;
 222                 pr_info("diag: dci channel connection handshake timed out, id: %d\n",
 223                         status->id);
 224                 err = diagfwd_bridge_close(TOKEN_TO_BRIDGE(status->id));
 225                 if (err) {
 226                         pr_err("diag: In %s, unable to close dci channel id: %d, err: %d\n",
 227                                __func__, status->id, err);
 228                 }
 229                 return;
 230         }
 231         status->retry_count++;
 232         /*
 233          * Sleep for sometime to check for the connection status again. The
 234          * value should be optimum to include a roundabout time for a small
 235          * packet to the remote processor.
 236          */
 237         usleep_range(DCI_HANDSHAKE_RETRY_TIME, DCI_HANDSHAKE_RETRY_TIME + 100);
 238         mod_timer(&status->wait_time,
 239                   jiffies + msecs_to_jiffies(DCI_HANDSHAKE_WAIT_TIME));
 240 }
 241
 242 static void dci_chk_handshake(unsigned long data)
 243 {
 244         int index = (int)data;
 245
 246         if (index < 0 || index >= NUM_DCI_PROC)
 247                 return;
 248
 249         queue_work(driver->diag_dci_wq,
 250                    &dci_channel_status[index].handshake_work);
 251 }
 252 #endif
 253
 254 static int diag_dci_init_buffer(struct diag_dci_buffer_t *buffer, int type)
 255 {
 256         if (!buffer || buffer->data)
 257                 return -EINVAL;
 258
 259         switch (type) {
 260         case DCI_BUF_PRIMARY:
 261                 buffer->capacity = IN_BUF_SIZE;
 262                 buffer->data = vzalloc(buffer->capacity);
 263                 if (!buffer->data)
 264                         return -ENOMEM;
 265                 break;
 266         case DCI_BUF_SECONDARY:
 267                 buffer->data = NULL;
 268                 buffer->capacity = IN_BUF_SIZE;
 269                 break;
 270         case DCI_BUF_CMD:
 271                 buffer->capacity = DIAG_MAX_REQ_SIZE + DCI_BUF_SIZE;
 272                 buffer->data = vzalloc(buffer->capacity);
 273                 if (!buffer->data)
 274                         return -ENOMEM;
 275                 break;
 276         default:
 277                 pr_err("diag: In %s, unknown type %d", __func__, type);
 278                 return -EINVAL;
 279         }
 280
 281         buffer->data_len = 0;
 282         buffer->in_busy = 0;
 283         buffer->buf_type = type;
 284         mutex_init(&buffer->data_mutex);
 285
 286         return 0;
 287 }
 288
 289 static inline int diag_dci_check_buffer(struct diag_dci_buffer_t *buf, int len)
 290 {
 291         if (!buf)
 292                 return -EINVAL;
 293
 294         /* Return 1 if the buffer is not busy and can hold new data */
 295         if ((buf->data_len + len < buf->capacity) && !buf->in_busy)
 296                 return 1;
 297
 298         return 0;
 299 }
 300
 301 static void dci_add_buffer_to_list(struct diag_dci_client_tbl *client,
 302                                    struct diag_dci_buffer_t *buf)
 303 {
 304         if (!buf || !client || !buf->data)
 305                 return;
 306
 307         if (buf->in_list || buf->data_len == 0)
 308                 return;
 309
 310         mutex_lock(&client->write_buf_mutex);
 311         list_add_tail(&buf->buf_track, &client->list_write_buf);
 312         /*
 313          * In the case of DCI, there can be multiple packets in one read. To
 314          * calculate the wakeup source reference count, we must account for each
 315          * packet in a single read.
 316          */
 317         diag_ws_on_read(DIAG_WS_DCI, buf->data_len);
 318         mutex_lock(&buf->data_mutex);
 319         buf->in_busy = 1;
 320         buf->in_list = 1;
 321         mutex_unlock(&buf->data_mutex);
 322         mutex_unlock(&client->write_buf_mutex);
 323 }
 324
 325 static int diag_dci_get_buffer(struct diag_dci_client_tbl *client,
 326                                int data_source, int len)
 327 {
 328         struct diag_dci_buffer_t *buf_primary = NULL;
 329         struct diag_dci_buffer_t *buf_temp = NULL;
 330         struct diag_dci_buffer_t *curr = NULL;
 331
 332         if (!client)
 333                 return -EINVAL;
 334         if (len < 0 || len > IN_BUF_SIZE)
 335                 return -EINVAL;
 336
 337         curr = client->buffers[data_source].buf_curr;
 338         buf_primary = client->buffers[data_source].buf_primary;
 339
 340         if (curr && diag_dci_check_buffer(curr, len) == 1)
 341                 return 0;
 342
 343         dci_add_buffer_to_list(client, curr);
 344         client->buffers[data_source].buf_curr = NULL;
 345
 346         if (diag_dci_check_buffer(buf_primary, len) == 1) {
 347                 client->buffers[data_source].buf_curr = buf_primary;
 348                 return 0;
 349         }
 350
 351         buf_temp = kzalloc(sizeof(struct diag_dci_buffer_t), GFP_KERNEL);
 352         if (!buf_temp)
 353                 return -EIO;
 354
 355         if (!diag_dci_init_buffer(buf_temp, DCI_BUF_SECONDARY)) {
 356                 buf_temp->data = diagmem_alloc(driver, IN_BUF_SIZE,
 357                                                POOL_TYPE_DCI);
 358                 if (!buf_temp->data) {
 359                         kfree(buf_temp);
 360                         buf_temp = NULL;
 361                         return -ENOMEM;
 362                 }
 363                 client->buffers[data_source].buf_curr = buf_temp;
 364                 return 0;
 365         }
 366
 367         kfree(buf_temp);
 368         buf_temp = NULL;
 369         return -EIO;
 370 }
 371
 372 void diag_dci_wakeup_clients()
 373 {
 374         struct list_head *start, *temp;
 375         struct diag_dci_client_tbl *entry = NULL;
 376
 377         mutex_lock(&driver->dci_mutex);
 378         list_for_each_safe(start, temp, &driver->dci_client_list) {
 379                 entry = list_entry(start, struct diag_dci_client_tbl, track);
 380
 381                 /*
 382                  * Don't wake up the client when there is no pending buffer to
 383                  * write or when it is writing to user space
 384                  */
 385                 if (!list_empty(&entry->list_write_buf) && !entry->in_service) {
 386                         mutex_lock(&entry->write_buf_mutex);
 387                         entry->in_service = 1;
 388                         mutex_unlock(&entry->write_buf_mutex);
 389                         diag_update_sleeping_process(entry->client->tgid,
 390                                                      DCI_DATA_TYPE);
 391                 }
 392         }
 393         mutex_unlock(&driver->dci_mutex);
 394 }
 395
 396 void dci_data_drain_work_fn(struct work_struct *work)
 397 {
 398         int i;
 399         struct list_head *start, *temp;
 400         struct diag_dci_client_tbl *entry = NULL;
 401         struct diag_dci_buf_peripheral_t *proc_buf = NULL;
 402         struct diag_dci_buffer_t *buf_temp = NULL;
 403
 404         mutex_lock(&driver->dci_mutex);
 405         list_for_each_safe(start, temp, &driver->dci_client_list) {
 406                 entry = list_entry(start, struct diag_dci_client_tbl, track);
 407                 for (i = 0; i < entry->num_buffers; i++) {
 408                         proc_buf = &entry->buffers[i];
 409
 410                         mutex_lock(&proc_buf->buf_mutex);
 411                         buf_temp = proc_buf->buf_primary;
 412                         if (DCI_CAN_ADD_BUF_TO_LIST(buf_temp))
 413                                 dci_add_buffer_to_list(entry, buf_temp);
 414
 415                         buf_temp = proc_buf->buf_cmd;
 416                         if (DCI_CAN_ADD_BUF_TO_LIST(buf_temp))
 417                                 dci_add_buffer_to_list(entry, buf_temp);
 418
 419                         buf_temp = proc_buf->buf_curr;
 420                         if (DCI_CAN_ADD_BUF_TO_LIST(buf_temp)) {
 421                                 dci_add_buffer_to_list(entry, buf_temp);
 422                                 proc_buf->buf_curr = NULL;
 423                         }
 424                         mutex_unlock(&proc_buf->buf_mutex);
 425                 }
 426                 if (!list_empty(&entry->list_write_buf) && !entry->in_service) {
 427                         mutex_lock(&entry->write_buf_mutex);
 428                         entry->in_service = 1;
 429                         mutex_unlock(&entry->write_buf_mutex);
 430                         diag_update_sleeping_process(entry->client->tgid,
 431                                                      DCI_DATA_TYPE);
 432                 }
 433         }
 434         mutex_unlock(&driver->dci_mutex);
 435         dci_timer_in_progress = 0;
 436 }
 437
 438 static int diag_process_single_dci_pkt(unsigned char *buf, int len,
 439                                        int data_source, int token)
 440 {
 441         uint8_t cmd_code = 0;
 442
 443         if (!buf || len < 0) {
 444                 pr_err("diag: Invalid input in %s, buf: %pK, len: %d\n",
 445                         __func__, buf, len);
 446                 return -EIO;
 447         }
 448
 449         cmd_code = *(uint8_t *)buf;
 450
 451         switch (cmd_code) {
 452         case LOG_CMD_CODE:
 453                 extract_dci_log(buf, len, data_source, token, NULL);
 454                 break;
 455         case EVENT_CMD_CODE:
 456                 extract_dci_events(buf, len, data_source, token, NULL);
 457                 break;
 458         case EXT_HDR_CMD_CODE:
 459                 extract_dci_ext_pkt(buf, len, data_source, token);
 460                 break;
 461         case DCI_PKT_RSP_CODE:
 462         case DCI_DELAYED_RSP_CODE:
 463                 extract_dci_pkt_rsp(buf, len, data_source, token);
 464                 break;
 465         case DCI_CONTROL_PKT_CODE:
 466                 extract_dci_ctrl_pkt(buf, len, token);
 467                 break;
 468         default:
 469                 pr_err("diag: Unable to process single DCI packet, cmd_code: %d, data_source: %d",
 470                         cmd_code, data_source);
 471                 return -EINVAL;
 472         }
 473
 474         return 0;
 475 }
 476
 477 /* Process the data read from apps userspace client */
 478 void diag_process_apps_dci_read_data(int data_type, void *buf, int recd_bytes)
 479 {
 480         int err = 0;
 481
 482         if (!buf) {
 483                 pr_err_ratelimited("diag: In %s, Null buf pointer\n", __func__);
 484                 return;
 485         }
 486
 487         if (data_type != DATA_TYPE_DCI_LOG && data_type != DATA_TYPE_DCI_EVENT
 488                                                 && data_type != DCI_PKT_TYPE) {
 489                 pr_err("diag: In %s, unsupported data_type: 0x%x\n",
 490                                 __func__, (unsigned int)data_type);
 491                 return;
 492         }
 493
 494         err = diag_process_single_dci_pkt(buf, recd_bytes, APPS_DATA,
 495                                           DCI_LOCAL_PROC);
 496         if (err)
 497                 return;
 498
 499         /* wake up all sleeping DCI clients which have some data */
 500         diag_dci_wakeup_clients();
 501         dci_check_drain_timer();
 502 }
 503
 504 void diag_process_remote_dci_read_data(int index, void *buf, int recd_bytes)
 505 {
 506         int read_bytes = 0, err = 0;
 507         uint16_t dci_pkt_len;
 508         struct diag_dci_header_t *header = NULL;
 509         int header_len = sizeof(struct diag_dci_header_t);
 510         int token = BRIDGE_TO_TOKEN(index);
 511
 512         if (!buf)
 513                 return;
 514
 515         diag_dci_record_traffic(recd_bytes, 0, 0, token);
 516
 517         if (!partial_pkt.processing)
 518                 goto start;
 519
 520         if (partial_pkt.remaining > recd_bytes) {
 521                 if ((partial_pkt.read_len + recd_bytes) >
 522                                                         (MAX_DCI_PACKET_SZ)) {
 523                         pr_err("diag: Invalid length %d, %d received in %s\n",
 524                                partial_pkt.read_len, recd_bytes, __func__);
 525                         goto end;
 526                 }
 527                 memcpy(partial_pkt.data + partial_pkt.read_len, buf,
 528                                                                 recd_bytes);
 529                 read_bytes += recd_bytes;
 530                 buf += read_bytes;
 531                 partial_pkt.read_len += recd_bytes;
 532                 partial_pkt.remaining -= recd_bytes;
 533         } else {
 534                 if ((partial_pkt.read_len + partial_pkt.remaining) >
 535                                                         (MAX_DCI_PACKET_SZ)) {
 536                         pr_err("diag: Invalid length during partial read %d, %d received in %s\n",
 537                                partial_pkt.read_len,
 538                                partial_pkt.remaining, __func__);
 539                         goto end;
 540                 }
 541                 memcpy(partial_pkt.data + partial_pkt.read_len, buf,
 542                                                 partial_pkt.remaining);
 543                 read_bytes += partial_pkt.remaining;
 544                 buf += read_bytes;
 545                 partial_pkt.read_len += partial_pkt.remaining;
 546                 partial_pkt.remaining = 0;
 547         }
 548
 549         if (partial_pkt.remaining == 0) {
 550                 /*
 551                  * Retrieve from the DCI control packet after the header = start
 552                  * (1 byte) + version (1 byte) + length (2 bytes)
 553                  */
 554                 diag_process_single_dci_pkt(partial_pkt.data + 4,
 555                                 partial_pkt.read_len - header_len,
 556                                 DCI_REMOTE_DATA, token);
 557                 partial_pkt.read_len = 0;
 558                 partial_pkt.total_len = 0;
 559                 partial_pkt.processing = 0;
 560                 goto start;
 561         }
 562         goto end;
 563
 564 start:
 565         while (read_bytes < recd_bytes) {
 566                 header = (struct diag_dci_header_t *)buf;
 567                 dci_pkt_len = header->length;
 568
 569                 if (header->cmd_code != DCI_CONTROL_PKT_CODE &&
 570                         driver->num_dci_client == 0) {
 571                         read_bytes += header_len + dci_pkt_len;
 572                         buf += header_len + dci_pkt_len;
 573                         continue;
 574                 }
 575
 576                 if (dci_pkt_len + header_len > MAX_DCI_PACKET_SZ) {
 577                         pr_err("diag: Invalid length in the dci packet field %d\n",
 578                                                                 dci_pkt_len);
 579                         break;
 580                 }
 581
 582                 if ((dci_pkt_len + header_len) > (recd_bytes - read_bytes)) {
 583                         partial_pkt.read_len = recd_bytes - read_bytes;
 584                         partial_pkt.total_len = dci_pkt_len + header_len;
 585                         partial_pkt.remaining = partial_pkt.total_len -
 586                                                 partial_pkt.read_len;
 587                         partial_pkt.processing = 1;
 588                         memcpy(partial_pkt.data, buf, partial_pkt.read_len);
 589                         break;
 590                 }
 591                 /*
 592                  * Retrieve from the DCI control packet after the header = start
 593                  * (1 byte) + version (1 byte) + length (2 bytes)
 594                  */
 595                 err = diag_process_single_dci_pkt(buf + 4, dci_pkt_len,
 596                                                  DCI_REMOTE_DATA, DCI_MDM_PROC);
 597                 if (err)
 598                         break;
 599                 read_bytes += header_len + dci_pkt_len;
 600                 buf += header_len + dci_pkt_len; /* advance to next DCI pkt */
 601         }
 602 end:
 603         if (err)
 604                 return;
 605         /* wake up all sleeping DCI clients which have some data */
 606         diag_dci_wakeup_clients();
 607         dci_check_drain_timer();
 608         return;
 609 }
 610
 611 /* Process the data read from the peripheral dci channels */
 612 void diag_dci_process_peripheral_data(struct diagfwd_info *p_info, void *buf,
 613                                       int recd_bytes)
 614 {
 615         int read_bytes = 0, err = 0;
 616         uint16_t dci_pkt_len;
 617         struct diag_dci_pkt_header_t *header = NULL;
 618         uint8_t recv_pkt_cmd_code;
 619
 620         if (!buf || !p_info)
 621                 return;
 622
 623         /*
 624          * Release wakeup source when there are no more clients to
 625          * process DCI data
 626          */
 627         if (driver->num_dci_client == 0) {
 628                 diag_ws_reset(DIAG_WS_DCI);
 629                 return;
 630         }
 631
 632         diag_dci_record_traffic(recd_bytes, p_info->type, p_info->peripheral,
 633                                 DCI_LOCAL_PROC);
 634         while (read_bytes < recd_bytes) {
 635                 header = (struct diag_dci_pkt_header_t *)buf;
 636                 recv_pkt_cmd_code = header->pkt_code;
 637                 dci_pkt_len = header->len;
 638
 639                 /*
 640                  * Check if the length of the current packet is lesser than the
 641                  * remaining bytes in the received buffer. This includes space
 642                  * for the Start byte (1), Version byte (1), length bytes (2)
 643                  * and End byte (1)
 644                  */
 645                 if ((dci_pkt_len + 5) > (recd_bytes - read_bytes)) {
 646                         pr_err("diag: Invalid length in %s, len: %d, dci_pkt_len: %d",
 647                                 __func__, recd_bytes, dci_pkt_len);
 648                         diag_ws_release();
 649                         return;
 650                 }
 651                 /*
 652                  * Retrieve from the DCI control packet after the header = start
 653                  * (1 byte) + version (1 byte) + length (2 bytes)
 654                  */
 655                 err = diag_process_single_dci_pkt(buf + 4, dci_pkt_len,
 656                                                   (int)p_info->peripheral,
 657                                                   DCI_LOCAL_PROC);
 658                 if (err) {
 659                         diag_ws_release();
 660                         break;
 661                 }
 662                 read_bytes += 5 + dci_pkt_len;
 663                 buf += 5 + dci_pkt_len; /* advance to next DCI pkt */
 664         }
 665
 666         if (err)
 667                 return;
 668         /* wake up all sleeping DCI clients which have some data */
 669         diag_dci_wakeup_clients();
 670         dci_check_drain_timer();
 671         return;
 672 }
 673
 674 int diag_dci_query_log_mask(struct diag_dci_client_tbl *entry,
 675                             uint16_t log_code)
 676 {
 677         uint16_t item_num;
 678         uint8_t equip_id, *log_mask_ptr, byte_mask;
 679         int byte_index, offset;
 680
 681         if (!entry) {
 682                 pr_err("diag: In %s, invalid client entry\n", __func__);
 683                 return 0;
 684         }
 685
 686         equip_id = LOG_GET_EQUIP_ID(log_code);
 687         item_num = LOG_GET_ITEM_NUM(log_code);
 688         byte_index = item_num/8 + 2;
 689         byte_mask = 0x01 << (item_num % 8);
 690         offset = equip_id * 514;
 691
 692         if (offset + byte_index >= DCI_LOG_MASK_SIZE) {
 693                 pr_err("diag: In %s, invalid offset: %d, log_code: %d, byte_index: %d\n",
 694                                 __func__, offset, log_code, byte_index);
 695                 return 0;
 696         }
 697
 698         log_mask_ptr = entry->dci_log_mask;
 699         log_mask_ptr = log_mask_ptr + offset + byte_index;
 700         return ((*log_mask_ptr & byte_mask) == byte_mask) ? 1 : 0;
 701
 702 }
 703
 704 int diag_dci_query_event_mask(struct diag_dci_client_tbl *entry,
 705                               uint16_t event_id)
 706 {
 707         uint8_t *event_mask_ptr, byte_mask;
 708         int byte_index, bit_index;
 709
 710         if (!entry) {
 711                 pr_err("diag: In %s, invalid client entry\n", __func__);
 712                 return 0;
 713         }
 714
 715         byte_index = event_id/8;
 716         bit_index = event_id % 8;
 717         byte_mask = 0x1 << bit_index;
 718
 719         if (byte_index >= DCI_EVENT_MASK_SIZE) {
 720                 pr_err("diag: In %s, invalid, event_id: %d, byte_index: %d\n",
 721                                 __func__, event_id, byte_index);
 722                 return 0;
 723         }
 724
 725         event_mask_ptr = entry->dci_event_mask;
 726         event_mask_ptr = event_mask_ptr + byte_index;
 727         return ((*event_mask_ptr & byte_mask) == byte_mask) ? 1 : 0;
 728 }
 729
 730 static int diag_dci_filter_commands(struct diag_pkt_header_t *header)
 731 {
 732         if (!header)
 733                 return -ENOMEM;
 734
 735         switch (header->cmd_code) {
 736         case 0x7d: /* Msg Mask Configuration */
 737         case 0x73: /* Log Mask Configuration */
 738         case 0x81: /* Event Mask Configuration */
 739         case 0x82: /* Event Mask Change */
 740         case 0x60: /* Event Mask Toggle */
 741                 return 1;
 742         }
 743
 744         if (header->cmd_code == 0x4b && header->subsys_id == 0x12) {
 745                 switch (header->subsys_cmd_code) {
 746                 case 0x60: /* Extended Event Mask Config */
 747                 case 0x61: /* Extended Msg Mask Config */
 748                 case 0x62: /* Extended Log Mask Config */
 749                 case 0x20C: /* Set current Preset ID */
 750                 case 0x20D: /* Get current Preset ID */
 751                 case 0x218: /* HDLC Disabled Command */
 752                         return 1;
 753                 }
 754         }
 755
 756         return 0;
 757 }
 758
 759 static struct dci_pkt_req_entry_t *diag_register_dci_transaction(int uid,
 760                                                                  int client_id)
 761 {
 762         struct dci_pkt_req_entry_t *entry = NULL;
 763         entry = kzalloc(sizeof(struct dci_pkt_req_entry_t), GFP_KERNEL);
 764         if (!entry)
 765                 return NULL;
 766
 767         driver->dci_tag++;
 768         entry->client_id = client_id;
 769         entry->uid = uid;
 770         entry->tag = driver->dci_tag;
 771         pr_debug("diag: Registering DCI cmd req, client_id: %d, uid: %d, tag:%d\n",
 772                                 entry->client_id, entry->uid, entry->tag);
 773         list_add_tail(&entry->track, &driver->dci_req_list);
 774
 775         return entry;
 776 }
 777
 778 static struct dci_pkt_req_entry_t *diag_dci_get_request_entry(int tag)
 779 {
 780         struct list_head *start, *temp;
 781         struct dci_pkt_req_entry_t *entry = NULL;
 782         list_for_each_safe(start, temp, &driver->dci_req_list) {
 783                 entry = list_entry(start, struct dci_pkt_req_entry_t, track);
 784                 if (entry->tag == tag)
 785                         return entry;
 786         }
 787         return NULL;
 788 }
 789
 790 static int diag_dci_remove_req_entry(unsigned char *buf, int len,
 791                                      struct dci_pkt_req_entry_t *entry)
 792 {
 793         uint16_t rsp_count = 0, delayed_rsp_id = 0;
 794         if (!buf || len <= 0 || !entry) {
 795                 pr_err("diag: In %s, invalid input buf: %pK, len: %d, entry: %pK\n",
 796                         __func__, buf, len, entry);
 797                 return -EIO;
 798         }
 799
 800         /* It is an immediate response, delete it from the table */
 801         if (*buf != 0x80) {
 802                 list_del(&entry->track);
 803                 kfree(entry);
 804                 entry = NULL;
 805                 return 1;
 806         }
 807
 808         /* It is a delayed response. Check if the length is valid */
 809         if (len < MIN_DELAYED_RSP_LEN) {
 810                 pr_err("diag: Invalid delayed rsp packet length %d\n", len);
 811                 return -EINVAL;
 812         }
 813
 814         /*
 815          * If the delayed response id field (uint16_t at byte 8) is 0 then
 816          * there is only one response and we can remove the request entry.
 817          */
 818         delayed_rsp_id = *(uint16_t *)(buf + 8);
 819         if (delayed_rsp_id == 0) {
 820                 list_del(&entry->track);
 821                 kfree(entry);
 822                 entry = NULL;
 823                 return 1;
 824         }
 825
 826         /*
 827          * Check the response count field (uint16 at byte 10). The request
 828          * entry can be deleted it it is the last response in the sequence.
 829          * It is the last response in the sequence if the response count
 830          * is 1 or if the signed bit gets dropped.
 831          */
 832         rsp_count = *(uint16_t *)(buf + 10);
 833         if (rsp_count > 0 && rsp_count < 0x1000) {
 834                 list_del(&entry->track);
 835                 kfree(entry);
 836                 entry = NULL;
 837                 return 1;
 838         }
 839
 840         return 0;
 841 }
 842
 843 static void dci_process_ctrl_status(unsigned char *buf, int len, int token)
 844 {
 845         struct diag_ctrl_dci_status *header = NULL;
 846         unsigned char *temp = buf;
 847         uint32_t read_len = 0;
 848         uint8_t i;
 849         int peripheral_mask, status;
 850
 851         if (!buf || (len < sizeof(struct diag_ctrl_dci_status))) {
 852                 pr_err("diag: In %s, invalid buf %pK or length: %d\n",
 853                        __func__, buf, len);
 854                 return;
 855         }
 856
 857         if (!VALID_DCI_TOKEN(token)) {
 858                 pr_err("diag: In %s, invalid DCI token %d\n", __func__, token);
 859                 return;
 860         }
 861
 862         header = (struct diag_ctrl_dci_status *)temp;
 863         temp += sizeof(struct diag_ctrl_dci_status);
 864         read_len += sizeof(struct diag_ctrl_dci_status);
 865
 866         for (i = 0; i < header->count; i++) {
 867                 if (read_len > (len - 2)) {
 868                         pr_err("diag: In %s, Invalid length len: %d\n",
 869                                __func__, len);
 870                         return;
 871                 }
 872
 873                 switch (*(uint8_t *)temp) {
 874                 case PERIPHERAL_MODEM:
 875                         peripheral_mask = DIAG_CON_MPSS;
 876                         break;
 877                 case PERIPHERAL_LPASS:
 878                         peripheral_mask = DIAG_CON_LPASS;
 879                         break;
 880                 case PERIPHERAL_WCNSS:
 881                         peripheral_mask = DIAG_CON_WCNSS;
 882                         break;
 883                 case PERIPHERAL_SENSORS:
 884                         peripheral_mask = DIAG_CON_SENSORS;
 885                         break;
 886                 default:
 887                         pr_err("diag: In %s, unknown peripheral, peripheral: %d\n",
 888                                 __func__, *(uint8_t *)temp);
 889                         return;
 890                 }
 891                 temp += sizeof(uint8_t);
 892                 read_len += sizeof(uint8_t);
 893
 894                 status = (*(uint8_t *)temp) ? DIAG_STATUS_OPEN :
 895                                                         DIAG_STATUS_CLOSED;
 896                 temp += sizeof(uint8_t);
 897                 read_len += sizeof(uint8_t);
 898                 diag_dci_notify_client(peripheral_mask, status, token);
 899         }
 900 }
 901
 902 static void dci_process_ctrl_handshake_pkt(unsigned char *buf, int len,
 903                                            int token)
 904 {
 905         struct diag_ctrl_dci_handshake_pkt *header = NULL;
 906         unsigned char *temp = buf;
 907         int err = 0;
 908
 909         if (!buf || (len < sizeof(struct diag_ctrl_dci_handshake_pkt)))
 910                 return;
 911
 912         if (!VALID_DCI_TOKEN(token))
 913                 return;
 914
 915         header = (struct diag_ctrl_dci_handshake_pkt *)temp;
 916         if (header->magic == DCI_MAGIC) {
 917                 dci_channel_status[token].open = 1;
 918                 err = dci_ops_tbl[token].send_log_mask(token);
 919                 if (err) {
 920                         pr_err("diag: In %s, unable to send log mask to token: %d, err: %d\n",
 921                                __func__, token, err);
 922                 }
 923                 err = dci_ops_tbl[token].send_event_mask(token);
 924                 if (err) {
 925                         pr_err("diag: In %s, unable to send event mask to token: %d, err: %d\n",
 926                                __func__, token, err);
 927                 }
 928         }
 929 }
 930
 931 void extract_dci_ctrl_pkt(unsigned char *buf, int len, int token)
 932 {
 933         unsigned char *temp = buf;
 934         uint32_t ctrl_pkt_id;
 935
 936         diag_ws_on_read(DIAG_WS_DCI, len);
 937         if (!buf) {
 938                 pr_err("diag: Invalid buffer in %s\n", __func__);
 939                 goto err;
 940         }
 941
 942         if (len < (sizeof(uint8_t) + sizeof(uint32_t))) {
 943                 pr_err("diag: In %s, invalid length %d\n", __func__, len);
 944                 goto err;
 945         }
 946
 947         /* Skip the Control packet command code */
 948         temp += sizeof(uint8_t);
 949         len -= sizeof(uint8_t);
 950         ctrl_pkt_id = *(uint32_t *)temp;
 951         switch (ctrl_pkt_id) {
 952         case DIAG_CTRL_MSG_DCI_CONNECTION_STATUS:
 953                 dci_process_ctrl_status(temp, len, token);
 954                 break;
 955         case DIAG_CTRL_MSG_DCI_HANDSHAKE_PKT:
 956                 dci_process_ctrl_handshake_pkt(temp, len, token);
 957                 break;
 958         default:
 959                 pr_debug("diag: In %s, unknown control pkt %d\n",
 960                          __func__, ctrl_pkt_id);
 961                 break;
 962         }
 963
 964 err:
 965         /*
 966          * DCI control packets are not consumed by the clients. Mimic client
 967          * consumption by setting and clearing the wakeup source copy_count
 968          * explicitly.
 969          */
 970         diag_ws_on_copy_fail(DIAG_WS_DCI);
 971 }
 972
 973 void extract_dci_pkt_rsp(unsigned char *buf, int len, int data_source,
 974                          int token)
 975 {
 976         int tag;
 977         struct diag_dci_client_tbl *entry = NULL;
 978         void *temp_buf = NULL;
 979         uint8_t dci_cmd_code, cmd_code_len, delete_flag = 0;
 980         uint32_t rsp_len = 0;
 981         struct diag_dci_buffer_t *rsp_buf = NULL;
 982         struct dci_pkt_req_entry_t *req_entry = NULL;
 983         unsigned char *temp = buf;
 984         int save_req_uid = 0;
 985         struct diag_dci_pkt_rsp_header_t pkt_rsp_header;
 986
 987         if (!buf) {
 988                 pr_err("diag: Invalid pointer in %s\n", __func__);
 989                 return;
 990         }
 991         dci_cmd_code = *(uint8_t *)(temp);
 992         if (dci_cmd_code == DCI_PKT_RSP_CODE) {
 993                 cmd_code_len = sizeof(uint8_t);
 994         } else if (dci_cmd_code == DCI_DELAYED_RSP_CODE) {
 995                 cmd_code_len = sizeof(uint32_t);
 996         } else {
 997                 pr_err("diag: In %s, invalid command code %d\n", __func__,
 998                                                                 dci_cmd_code);
 999                 return;
1000         }
1001         temp += cmd_code_len;
1002         tag = *(int *)temp;
1003         temp += sizeof(int);
1004
1005         /*
1006          * The size of the response is (total length) - (length of the command
1007          * code, the tag (int)
1008          */
1009         rsp_len = len - (cmd_code_len + sizeof(int));
1010         if ((rsp_len == 0) || (rsp_len > (len - 5))) {
1011                 pr_err("diag: Invalid length in %s, len: %d, rsp_len: %d",
1012                                                 __func__, len, rsp_len);
1013                 return;
1014         }
1015
1016         mutex_lock(&driver->dci_mutex);
1017         req_entry = diag_dci_get_request_entry(tag);
1018         if (!req_entry) {
1019                 pr_err_ratelimited("diag: No matching client for DCI data\n");
1020                 mutex_unlock(&driver->dci_mutex);
1021                 return;
1022         }
1023
1024         entry = diag_dci_get_client_entry(req_entry->client_id);
1025         if (!entry) {
1026                 pr_err("diag: In %s, couldn't find client entry, id:%d\n",
1027                                                 __func__, req_entry->client_id);
1028                 mutex_unlock(&driver->dci_mutex);
1029                 return;
1030         }
1031
1032         save_req_uid = req_entry->uid;
1033         /* Remove the headers and send only the response to this function */
1034         delete_flag = diag_dci_remove_req_entry(temp, rsp_len, req_entry);
1035         if (delete_flag < 0) {
1036                 mutex_unlock(&driver->dci_mutex);
1037                 return;
1038         }
1039
1040         mutex_lock(&entry->buffers[data_source].buf_mutex);
1041         rsp_buf = entry->buffers[data_source].buf_cmd;
1042
1043         mutex_lock(&rsp_buf->data_mutex);
1044         /*
1045          * Check if we can fit the data in the rsp buffer. The total length of
1046          * the rsp is the rsp length (write_len) + DCI_PKT_RSP_TYPE header (int)
1047          * + field for length (int) + delete_flag (uint8_t)
1048          */
1049         if ((rsp_buf->data_len + 9 + rsp_len) > rsp_buf->capacity) {
1050                 pr_alert("diag: create capacity for pkt rsp\n");
1051                 rsp_buf->capacity += 9 + rsp_len;
1052                 temp_buf = krealloc(rsp_buf->data, rsp_buf->capacity,
1053                                     GFP_KERNEL);
1054                 if (!temp_buf) {
1055                         pr_err("diag: DCI realloc failed\n");
1056                         mutex_unlock(&rsp_buf->data_mutex);
1057                         mutex_unlock(&entry->buffers[data_source].buf_mutex);
1058                         mutex_unlock(&driver->dci_mutex);
1059                         return;
1060                 } else {
1061                         rsp_buf->data = temp_buf;
1062                 }
1063         }
1064
1065         /* Fill in packet response header information */
1066         pkt_rsp_header.type = DCI_PKT_RSP_TYPE;
1067         /* Packet Length = Response Length + Length of uid field (int) */
1068         pkt_rsp_header.length = rsp_len + sizeof(int);
1069         pkt_rsp_header.delete_flag = delete_flag;
1070         pkt_rsp_header.uid = save_req_uid;
1071         memcpy(rsp_buf->data + rsp_buf->data_len, &pkt_rsp_header,
1072                 sizeof(struct diag_dci_pkt_rsp_header_t));
1073         rsp_buf->data_len += sizeof(struct diag_dci_pkt_rsp_header_t);
1074         memcpy(rsp_buf->data + rsp_buf->data_len, temp, rsp_len);
1075         rsp_buf->data_len += rsp_len;
1076         rsp_buf->data_source = data_source;
1077
1078         mutex_unlock(&rsp_buf->data_mutex);
1079
1080         /*
1081          * Add directly to the list for writing responses to the
1082          * userspace as these shouldn't be buffered and shouldn't wait
1083          * for log and event buffers to be full
1084          */
1085         dci_add_buffer_to_list(entry, rsp_buf);
1086         mutex_unlock(&entry->buffers[data_source].buf_mutex);
1087         mutex_unlock(&driver->dci_mutex);
1088 }
1089
1090 static void copy_ext_hdr(struct diag_dci_buffer_t *data_buffer, void *ext_hdr)
1091 {
1092         if (!data_buffer) {
1093                 pr_err("diag: In %s, data buffer is NULL", __func__);
1094                 return;
1095         }
1096
1097         *(int *)(data_buffer->data + data_buffer->data_len) =
1098                         DCI_EXT_HDR_TYPE;
1099         data_buffer->data_len += sizeof(int);
1100         memcpy(data_buffer->data + data_buffer->data_len, ext_hdr,
1101                         EXT_HDR_LEN);
1102         data_buffer->data_len += EXT_HDR_LEN;
1103 }
1104
1105 static void copy_dci_event(unsigned char *buf, int len,
1106                         struct diag_dci_client_tbl *client, int data_source,
1107                         void *ext_hdr)
1108 {
1109         struct diag_dci_buffer_t *data_buffer = NULL;
1110         struct diag_dci_buf_peripheral_t *proc_buf = NULL;
1111         int err = 0, total_len = 0;
1112
1113         if (!buf || !client) {
1114                 pr_err("diag: Invalid pointers in %s", __func__);
1115                 return;
1116         }
1117
1118         total_len = sizeof(int) + len;
1119         if (ext_hdr)
1120                 total_len += sizeof(int) + EXT_HDR_LEN;
1121
1122         proc_buf = &client->buffers[data_source];
1123         mutex_lock(&proc_buf->buf_mutex);
1124         mutex_lock(&proc_buf->health_mutex);
1125         err = diag_dci_get_buffer(client, data_source, total_len);
1126         if (err) {
1127                 if (err == -ENOMEM)
1128                         proc_buf->health.dropped_events++;
1129                 else
1130                         pr_err("diag: In %s, invalid packet\n", __func__);
1131                 mutex_unlock(&proc_buf->health_mutex);
1132                 mutex_unlock(&proc_buf->buf_mutex);
1133                 return;
1134         }
1135
1136         data_buffer = proc_buf->buf_curr;
1137
1138         proc_buf->health.received_events++;
1139         mutex_unlock(&proc_buf->health_mutex);
1140         mutex_unlock(&proc_buf->buf_mutex);
1141
1142         mutex_lock(&data_buffer->data_mutex);
1143         if (ext_hdr)
1144                 copy_ext_hdr(data_buffer, ext_hdr);
1145
1146         *(int *)(data_buffer->data + data_buffer->data_len) = DCI_EVENT_TYPE;
1147         data_buffer->data_len += sizeof(int);
1148         memcpy(data_buffer->data + data_buffer->data_len, buf, len);
1149         data_buffer->data_len += len;
1150         data_buffer->data_source = data_source;
1151         mutex_unlock(&data_buffer->data_mutex);
1152
1153 }
1154
1155 void extract_dci_events(unsigned char *buf, int len, int data_source,
1156                 int token, void *ext_hdr)
1157 {
1158         uint16_t event_id, event_id_packet, length, temp_len;
1159         uint8_t payload_len, payload_len_field;
1160         uint8_t timestamp[8] = {0}, timestamp_len;
1161         unsigned char event_data[MAX_EVENT_SIZE];
1162         unsigned int total_event_len;
1163         struct list_head *start, *temp;
1164         struct diag_dci_client_tbl *entry = NULL;
1165
1166         if (!buf) {
1167                 pr_err("diag: In %s buffer is NULL\n", __func__);
1168                 return;
1169         }
1170         /*
1171          * 1 byte for event code and 2 bytes for the length field.
1172          * The length field indicates the total length removing the cmd_code
1173          * and the lenght field. The event parsing in that case should happen
1174          * till the end.
1175          */
1176         if (len < 3) {
1177                 pr_err("diag: In %s invalid len: %d\n", __func__, len);
1178                 return;
1179         }
1180         length = *(uint16_t *)(buf + 1); /* total length of event series */
1181         if ((length == 0) || (len != (length + 3))) {
1182                 pr_err("diag: Incoming dci event length: %d is invalid\n",
1183                         length);
1184                 return;
1185         }
1186         /*
1187          * Move directly to the start of the event series.
1188          * The event parsing should happen from start of event
1189          * series till the end.
1190          */
1191         temp_len = 3;
1192         while (temp_len < length) {
1193                 event_id_packet = *(uint16_t *)(buf + temp_len);
1194                 event_id = event_id_packet & 0x0FFF; /* extract 12 bits */
1195                 if (event_id_packet & 0x8000) {
1196                         /* The packet has the two smallest byte of the
1197                          * timestamp
1198                          */
1199                         timestamp_len = 2;
1200                 } else {
1201                         /* The packet has the full timestamp. The first event
1202                          * will always have full timestamp. Save it in the
1203                          * timestamp buffer and use it for subsequent events if
1204                          * necessary.
1205                          */
1206                         timestamp_len = 8;
1207                         if ((temp_len + timestamp_len + 2) <= len)
1208                                 memcpy(timestamp, buf + temp_len + 2,
1209                                         timestamp_len);
1210                         else {
1211                                 pr_err("diag: Invalid length in %s, len: %d, temp_len: %d",
1212                                                 __func__, len, temp_len);
1213                                 return;
1214                         }
1215                 }
1216                 /* 13th and 14th bit represent the payload length */
1217                 if (((event_id_packet & 0x6000) >> 13) == 3) {
1218                         payload_len_field = 1;
1219                         if ((temp_len + timestamp_len + 3) <= len) {
1220                                 payload_len = *(uint8_t *)
1221                                         (buf + temp_len + 2 + timestamp_len);
1222                         } else {
1223                                 pr_err("diag: Invalid length in %s, len: %d, temp_len: %d",
1224                                                 __func__, len, temp_len);
1225                                 return;
1226                         }
1227                         if ((payload_len < (MAX_EVENT_SIZE - 13)) &&
1228                         ((temp_len + timestamp_len + payload_len + 3) <= len)) {
1229                                 /*
1230                                  * Copy the payload length and the payload
1231                                  * after skipping temp_len bytes for already
1232                                  * parsed packet, timestamp_len for timestamp
1233                                  * buffer, 2 bytes for event_id_packet.
1234                                  */
1235                                 memcpy(event_data + 12, buf + temp_len + 2 +
1236                                                         timestamp_len, 1);
1237                                 memcpy(event_data + 13, buf + temp_len + 2 +
1238                                         timestamp_len + 1, payload_len);
1239                         } else {
1240                                 pr_err("diag: event > %d, payload_len = %d, temp_len = %d\n",
1241                                 (MAX_EVENT_SIZE - 13), payload_len, temp_len);
1242                                 return;
1243                         }
1244                 } else {
1245                         payload_len_field = 0;
1246                         payload_len = (event_id_packet & 0x6000) >> 13;
1247                         /*
1248                          * Copy the payload after skipping temp_len bytes
1249                          * for already parsed packet, timestamp_len for
1250                          * timestamp buffer, 2 bytes for event_id_packet.
1251                          */
1252                         if ((payload_len < (MAX_EVENT_SIZE - 12)) &&
1253                         ((temp_len + timestamp_len + payload_len + 2) <= len))
1254                                 memcpy(event_data + 12, buf + temp_len + 2 +
1255                                                 timestamp_len, payload_len);
1256                         else {
1257                                 pr_err("diag: event > %d, payload_len = %d, temp_len = %d\n",
1258                                 (MAX_EVENT_SIZE - 12), payload_len, temp_len);
1259                                 return;
1260                         }
1261                 }
1262
1263                 /* Before copying the data to userspace, check if we are still
1264                  * within the buffer limit. This is an error case, don't count
1265                  * it towards the health statistics.
1266                  *
1267                  * Here, the offset of 2 bytes(uint16_t) is for the
1268                  * event_id_packet length
1269                  */
1270                 temp_len += sizeof(uint16_t) + timestamp_len +
1271                                                 payload_len_field + payload_len;
1272                 if (temp_len > len) {
1273                         pr_err("diag: Invalid length in %s, len: %d, read: %d",
1274                                                 __func__, len, temp_len);
1275                         return;
1276                 }
1277
1278                 /* 2 bytes for the event id & timestamp len is hard coded to 8,
1279                    as individual events have full timestamp */
1280                 *(uint16_t *)(event_data) = 10 +
1281                                         payload_len_field + payload_len;
1282                 *(uint16_t *)(event_data + 2) = event_id_packet & 0x7FFF;
1283                 memcpy(event_data + 4, timestamp, 8);
1284                 /* 2 bytes for the event length field which is added to
1285                    the event data */
1286                 total_event_len = 2 + 10 + payload_len_field + payload_len;
1287                 /* parse through event mask tbl of each client and check mask */
1288                 mutex_lock(&driver->dci_mutex);
1289                 list_for_each_safe(start, temp, &driver->dci_client_list) {
1290                         entry = list_entry(start, struct diag_dci_client_tbl,
1291                                                                         track);
1292                         if (entry->client_info.token != token)
1293                                 continue;
1294                         if (diag_dci_query_event_mask(entry, event_id)) {
1295                                 /* copy to client buffer */
1296                                 copy_dci_event(event_data, total_event_len,
1297                                                entry, data_source, ext_hdr);
1298                         }
1299                 }
1300                 mutex_unlock(&driver->dci_mutex);
1301         }
1302 }
1303
1304 static void copy_dci_log(unsigned char *buf, int len,
1305                          struct diag_dci_client_tbl *client, int data_source,
1306                          void *ext_hdr)
1307 {
1308         uint16_t log_length = 0;
1309         struct diag_dci_buffer_t *data_buffer = NULL;
1310         struct diag_dci_buf_peripheral_t *proc_buf = NULL;
1311         int err = 0, total_len = 0;
1312
1313         if (!buf || !client) {
1314                 pr_err("diag: Invalid pointers in %s", __func__);
1315                 return;
1316         }
1317
1318         log_length = *(uint16_t *)(buf + 2);
1319         if (log_length > USHRT_MAX - 4) {
1320                 pr_err("diag: Integer overflow in %s, log_len: %d",
1321                                 __func__, log_length);
1322                 return;
1323         }
1324         total_len = sizeof(int) + log_length;
1325         if (ext_hdr)
1326                 total_len += sizeof(int) + EXT_HDR_LEN;
1327
1328         /* Check if we are within the len. The check should include the
1329          * first 4 bytes for the Log code(2) and the length bytes (2)
1330          */
1331         if ((log_length + sizeof(uint16_t) + 2) > len) {
1332                 pr_err("diag: Invalid length in %s, log_len: %d, len: %d",
1333                                                 __func__, log_length, len);
1334                 return;
1335         }
1336
1337         proc_buf = &client->buffers[data_source];
1338         mutex_lock(&proc_buf->buf_mutex);
1339         mutex_lock(&proc_buf->health_mutex);
1340         err = diag_dci_get_buffer(client, data_source, total_len);
1341         if (err) {
1342                 if (err == -ENOMEM)
1343                         proc_buf->health.dropped_logs++;
1344                 else
1345                         pr_err("diag: In %s, invalid packet\n", __func__);
1346                 mutex_unlock(&proc_buf->health_mutex);
1347                 mutex_unlock(&proc_buf->buf_mutex);
1348                 return;
1349         }
1350
1351         data_buffer = proc_buf->buf_curr;
1352         proc_buf->health.received_logs++;
1353         mutex_unlock(&proc_buf->health_mutex);
1354         mutex_unlock(&proc_buf->buf_mutex);
1355
1356         mutex_lock(&data_buffer->data_mutex);
1357         if (!data_buffer->data) {
1358                 mutex_unlock(&data_buffer->data_mutex);
1359                 return;
1360         }
1361         if (ext_hdr)
1362                 copy_ext_hdr(data_buffer, ext_hdr);
1363
1364         *(int *)(data_buffer->data + data_buffer->data_len) = DCI_LOG_TYPE;
1365         data_buffer->data_len += sizeof(int);
1366         memcpy(data_buffer->data + data_buffer->data_len, buf + sizeof(int),
1367                log_length);
1368         data_buffer->data_len += log_length;
1369         data_buffer->data_source = data_source;
1370         mutex_unlock(&data_buffer->data_mutex);
1371 }
1372
1373 void extract_dci_log(unsigned char *buf, int len, int data_source, int token,
1374                         void *ext_hdr)
1375 {
1376         uint16_t log_code, read_bytes = 0;
1377         struct list_head *start, *temp;
1378         struct diag_dci_client_tbl *entry = NULL;
1379
1380         if (!buf) {
1381                 pr_err("diag: In %s buffer is NULL\n", __func__);
1382                 return;
1383         }
1384         /*
1385          * The first eight bytes for the incoming log packet contains
1386          * Command code (2), the length of the packet (2), the length
1387          * of the log (2) and log code (2)
1388          */
1389         if (len < 8) {
1390                 pr_err("diag: In %s invalid len: %d\n", __func__, len);
1391                 return;
1392         }
1393
1394         log_code = *(uint16_t *)(buf + 6);
1395         read_bytes += sizeof(uint16_t) + 6;
1396
1397         /* parse through log mask table of each client and check mask */
1398         mutex_lock(&driver->dci_mutex);
1399         list_for_each_safe(start, temp, &driver->dci_client_list) {
1400                 entry = list_entry(start, struct diag_dci_client_tbl, track);
1401                 if (entry->client_info.token != token)
1402                         continue;
1403                 if (diag_dci_query_log_mask(entry, log_code)) {
1404                         pr_debug("\t log code %x needed by client %d",
1405                                  log_code, entry->client->tgid);
1406                         /* copy to client buffer */
1407                         copy_dci_log(buf, len, entry, data_source, ext_hdr);
1408                 }
1409         }
1410         mutex_unlock(&driver->dci_mutex);
1411 }
1412
1413 void extract_dci_ext_pkt(unsigned char *buf, int len, int data_source,
1414                 int token)
1415 {
1416         uint8_t version, pkt_cmd_code = 0;
1417         unsigned char *pkt = NULL;
1418
1419         if (!buf) {
1420                 pr_err("diag: In %s buffer is NULL\n", __func__);
1421                 return;
1422         }
1423         if (len < (EXT_HDR_LEN + sizeof(uint8_t))) {
1424                 pr_err("diag: In %s invalid len: %d\n", __func__, len);
1425                 return;
1426         }
1427
1428         version = *(uint8_t *)buf + 1;
1429         if (version < EXT_HDR_VERSION)  {
1430                 pr_err("diag: %s, Extended header with invalid version: %d\n",
1431                         __func__, version);
1432                 return;
1433         }
1434
1435         pkt = buf + EXT_HDR_LEN;
1436         pkt_cmd_code = *(uint8_t *)pkt;
1437         len -= EXT_HDR_LEN;
1438
1439         switch (pkt_cmd_code) {
1440         case LOG_CMD_CODE:
1441                 extract_dci_log(pkt, len, data_source, token, buf);
1442                 break;
1443         case EVENT_CMD_CODE:
1444                 extract_dci_events(pkt, len, data_source, token, buf);
1445                 break;
1446         default:
1447                 pr_err("diag: %s unsupported cmd_code: %d, data_source: %d\n",
1448                         __func__, pkt_cmd_code, data_source);
1449                 return;
1450         }
1451 }
1452
1453 void diag_dci_channel_open_work(struct work_struct *work)
1454 {
1455         int i, j;
1456         char dirty_bits[16];
1457         uint8_t *client_log_mask_ptr;
1458         uint8_t *log_mask_ptr;
1459         int ret;
1460         struct list_head *start, *temp;
1461         struct diag_dci_client_tbl *entry = NULL;
1462
1463         /* Update apps and peripheral(s) with the dci log and event masks */
1464         memset(dirty_bits, 0, 16 * sizeof(uint8_t));
1465
1466         /*
1467          * From each log entry used by each client, determine
1468          * which log entries in the cumulative logs that need
1469          * to be updated on the peripheral.
1470          */
1471         mutex_lock(&driver->dci_mutex);
1472         list_for_each_safe(start, temp, &driver->dci_client_list) {
1473                 entry = list_entry(start, struct diag_dci_client_tbl, track);
1474                 if (entry->client_info.token != DCI_LOCAL_PROC)
1475                         continue;
1476                 client_log_mask_ptr = entry->dci_log_mask;
1477                 for (j = 0; j < 16; j++) {
1478                         if (*(client_log_mask_ptr+1))
1479                                 dirty_bits[j] = 1;
1480                         client_log_mask_ptr += 514;
1481                 }
1482         }
1483         mutex_unlock(&driver->dci_mutex);
1484
1485         mutex_lock(&dci_log_mask_mutex);
1486         /* Update the appropriate dirty bits in the cumulative mask */
1487         log_mask_ptr = dci_ops_tbl[DCI_LOCAL_PROC].log_mask_composite;
1488         for (i = 0; i < 16; i++) {
1489                 if (dirty_bits[i])
1490                         *(log_mask_ptr+1) = dirty_bits[i];
1491
1492                 log_mask_ptr += 514;
1493         }
1494         mutex_unlock(&dci_log_mask_mutex);
1495
1496         /* Send updated mask to userspace clients */
1497         diag_update_userspace_clients(DCI_LOG_MASKS_TYPE);
1498         /* Send updated log mask to peripherals */
1499         ret = dci_ops_tbl[DCI_LOCAL_PROC].send_log_mask(DCI_LOCAL_PROC);
1500
1501         /* Send updated event mask to userspace clients */
1502         diag_update_userspace_clients(DCI_EVENT_MASKS_TYPE);
1503         /* Send updated event mask to peripheral */
1504         ret = dci_ops_tbl[DCI_LOCAL_PROC].send_event_mask(DCI_LOCAL_PROC);
1505 }
1506
1507 void diag_dci_notify_client(int peripheral_mask, int data, int proc)
1508 {
1509         int stat = 0;
1510         struct siginfo info;
1511         struct list_head *start, *temp;
1512         struct diag_dci_client_tbl *entry = NULL;
1513         struct pid *pid_struct = NULL;
1514         struct task_struct *dci_task = NULL;
1515
1516         memset(&info, 0, sizeof(struct siginfo));
1517         info.si_code = SI_QUEUE;
1518         info.si_int = (peripheral_mask | data);
1519         if (data == DIAG_STATUS_OPEN)
1520                 dci_ops_tbl[proc].peripheral_status |= peripheral_mask;
1521         else
1522                 dci_ops_tbl[proc].peripheral_status &= ~peripheral_mask;
1523
1524         /* Notify the DCI process that the peripheral DCI Channel is up */
1525         mutex_lock(&driver->dci_mutex);
1526         list_for_each_safe(start, temp, &driver->dci_client_list) {
1527                 entry = list_entry(start, struct diag_dci_client_tbl, track);
1528                 if (entry->client_info.token != proc)
1529                         continue;
1530                 if (entry->client_info.notification_list & peripheral_mask) {
1531                         info.si_signo = entry->client_info.signal_type;
1532                         pid_struct = find_get_pid(entry->tgid);
1533                         if (pid_struct) {
1534                                 dci_task = get_pid_task(pid_struct,
1535                                                 PIDTYPE_PID);
1536                                 if (!dci_task) {
1537                                         DIAG_LOG(DIAG_DEBUG_PERIPHERALS,
1538                                                 "diag: dci client with pid = %d Exited..\n",
1539                                                 entry->tgid);
1540                                         mutex_unlock(&driver->dci_mutex);
1541                                         return;
1542                                 }
1543                                 if (entry->client &&
1544                                         entry->tgid == dci_task->tgid) {
1545                                         DIAG_LOG(DIAG_DEBUG_DCI,
1546                                                 "entry tgid = %d, dci client tgid = %d\n",
1547                                                 entry->tgid, dci_task->tgid);
1548                                         stat = send_sig_info(
1549                                                 entry->client_info.signal_type,
1550                                                 &info, dci_task);
1551                                         if (stat)
1552                                                 pr_err("diag: Err sending dci signal to client, signal data: 0x%x, stat: %d\n",
1553                                                         info.si_int, stat);
1554                                 } else
1555                                         pr_err("diag: client data is corrupted, signal data: 0x%x, stat: %d\n",
1556                                                 info.si_int, stat);
1557                         }
1558                 }
1559         }
1560         mutex_unlock(&driver->dci_mutex);
1561 }
1562
1563 static int diag_send_dci_pkt(struct diag_cmd_reg_t *entry,
1564                              unsigned char *buf, int len, int tag)
1565 {
1566         int i, status = DIAG_DCI_NO_ERROR;
1567         uint32_t write_len = 0;
1568         struct diag_dci_pkt_header_t header;
1569
1570         if (!entry)
1571                 return -EIO;
1572
1573         if (len < 1 || len > DIAG_MAX_REQ_SIZE) {
1574                 pr_err("diag: dci: In %s, invalid length %d, max_length: %d\n",
1575                        __func__, len, (int)(DCI_REQ_BUF_SIZE - sizeof(header)));
1576                 return -EIO;
1577         }
1578
1579         if ((len + sizeof(header) + sizeof(uint8_t)) > DCI_BUF_SIZE) {
1580                 pr_err("diag: dci: In %s, invalid length %d for apps_dci_buf, max_length: %d\n",
1581                        __func__, len, DIAG_MAX_REQ_SIZE);
1582                 return -EIO;
1583         }
1584
1585         mutex_lock(&driver->dci_mutex);
1586         /* prepare DCI packet */
1587         header.start = CONTROL_CHAR;
1588         header.version = 1;
1589         header.len = len + sizeof(int) + sizeof(uint8_t);
1590         header.pkt_code = DCI_PKT_RSP_CODE;
1591         header.tag = tag;
1592         memcpy(driver->apps_dci_buf, &header, sizeof(header));
1593         write_len += sizeof(header);
1594         memcpy(driver->apps_dci_buf + write_len , buf, len);
1595         write_len += len;
1596         *(uint8_t *)(driver->apps_dci_buf + write_len) = CONTROL_CHAR;
1597         write_len += sizeof(uint8_t);
1598
1599         /* This command is registered locally on the Apps */
1600         if (entry->proc == APPS_DATA) {
1601                 diag_update_pkt_buffer(driver->apps_dci_buf, write_len,
1602                                        DCI_PKT_TYPE);
1603                 diag_update_sleeping_process(entry->pid, DCI_PKT_TYPE);
1604                 mutex_unlock(&driver->dci_mutex);
1605                 return DIAG_DCI_NO_ERROR;
1606         }
1607
1608         for (i = 0; i < NUM_PERIPHERALS; i++)
1609                 if (entry->proc == i) {
1610                         status = 1;
1611                         break;
1612                 }
1613
1614         if (status) {
1615                 status = diag_dci_write_proc(entry->proc,
1616                                              DIAG_DATA_TYPE,
1617                                              driver->apps_dci_buf,
1618                                              write_len);
1619         } else {
1620                 pr_err("diag: Cannot send packet to peripheral %d",
1621                        entry->proc);
1622                 status = DIAG_DCI_SEND_DATA_FAIL;
1623         }
1624         mutex_unlock(&driver->dci_mutex);
1625         return status;
1626 }
1627
1628 #ifdef CONFIG_DIAGFWD_BRIDGE_CODE
1629 unsigned char *dci_get_buffer_from_bridge(int token)
1630 {
1631         uint8_t retries = 0, max_retries = 3;
1632         unsigned char *buf = NULL;
1633
1634         do {
1635                 buf = diagmem_alloc(driver, DIAG_MDM_BUF_SIZE,
1636                                     dci_ops_tbl[token].mempool);
1637                 if (!buf) {
1638                         usleep_range(5000, 5100);
1639                         retries++;
1640                 } else
1641                         break;
1642         } while (retries < max_retries);
1643
1644         return buf;
1645 }
1646
1647 int diag_dci_write_bridge(int token, unsigned char *buf, int len)
1648 {
1649         return diagfwd_bridge_write(TOKEN_TO_BRIDGE(token), buf, len);
1650 }
1651
1652 int diag_dci_write_done_bridge(int index, unsigned char *buf, int len)
1653 {
1654         int token = BRIDGE_TO_TOKEN(index);
1655         if (!VALID_DCI_TOKEN(token)) {
1656                 pr_err("diag: Invalid DCI token %d in %s\n", token, __func__);
1657                 return -EINVAL;
1658         }
1659         diagmem_free(driver, buf, dci_ops_tbl[token].mempool);
1660         return 0;
1661 }
1662 #endif
1663
1664 #ifdef CONFIG_DIAGFWD_BRIDGE_CODE
1665 static int diag_send_dci_pkt_remote(unsigned char *data, int len, int tag,
1666                                     int token)
1667 {
1668         unsigned char *buf = NULL;
1669         struct diag_dci_header_t dci_header;
1670         int dci_header_size = sizeof(struct diag_dci_header_t);
1671         int ret = DIAG_DCI_NO_ERROR;
1672         uint32_t write_len = 0;
1673
1674         if (!data)
1675                 return -EIO;
1676
1677         buf = dci_get_buffer_from_bridge(token);
1678         if (!buf) {
1679                 pr_err("diag: In %s, unable to get dci buffers to write data\n",
1680                         __func__);
1681                 return -EAGAIN;
1682         }
1683
1684         dci_header.start = CONTROL_CHAR;
1685         dci_header.version = 1;
1686         /*
1687          * The Length of the DCI packet = length of the command + tag (int) +
1688          * the command code size (uint8_t)
1689          */
1690         dci_header.length = len + sizeof(int) + sizeof(uint8_t);
1691         dci_header.cmd_code = DCI_PKT_RSP_CODE;
1692
1693         memcpy(buf + write_len, &dci_header, dci_header_size);
1694         write_len += dci_header_size;
1695         *(int *)(buf + write_len) = tag;
1696         write_len += sizeof(int);
1697         memcpy(buf + write_len, data, len);
1698         write_len += len;
1699         *(buf + write_len) = CONTROL_CHAR; /* End Terminator */
1700         write_len += sizeof(uint8_t);
1701
1702         ret = diag_dci_write_bridge(token, buf, write_len);
1703         if (ret) {
1704                 pr_err("diag: error writing dci pkt to remote proc, token: %d, err: %d\n",
1705                         token, ret);
1706                 diagmem_free(driver, buf, dci_ops_tbl[token].mempool);
1707         } else {
1708                 ret = DIAG_DCI_NO_ERROR;
1709         }
1710
1711         return ret;
1712 }
1713 #else
1714 static int diag_send_dci_pkt_remote(unsigned char *data, int len, int tag,
1715                                     int token)
1716 {
1717         return DIAG_DCI_NO_ERROR;
1718 }
1719 #endif
1720
1721 #ifdef CONFIG_DIAGFWD_BRIDGE_CODE
1722 int diag_dci_send_handshake_pkt(int index)
1723 {
1724         int err = 0;
1725         int token = BRIDGE_TO_TOKEN(index);
1726         int write_len = 0;
1727         struct diag_ctrl_dci_handshake_pkt ctrl_pkt;
1728         unsigned char *buf = NULL;
1729         struct diag_dci_header_t dci_header;
1730
1731         if (!VALID_DCI_TOKEN(token)) {
1732                 pr_err("diag: In %s, invalid DCI token %d\n", __func__, token);
1733                 return -EINVAL;
1734         }
1735
1736         buf = dci_get_buffer_from_bridge(token);
1737         if (!buf) {
1738                 pr_err("diag: In %s, unable to get dci buffers to write data\n",
1739                         __func__);
1740                 return -EAGAIN;
1741         }
1742
1743         dci_header.start = CONTROL_CHAR;
1744         dci_header.version = 1;
1745         /* Include the cmd code (uint8_t) in the length */
1746         dci_header.length = sizeof(ctrl_pkt) + sizeof(uint8_t);
1747         dci_header.cmd_code = DCI_CONTROL_PKT_CODE;
1748         memcpy(buf, &dci_header, sizeof(dci_header));
1749         write_len += sizeof(dci_header);
1750
1751         ctrl_pkt.ctrl_pkt_id = DIAG_CTRL_MSG_DCI_HANDSHAKE_PKT;
1752         /*
1753          *  The control packet data length accounts for the version (uint32_t)
1754          *  of the packet and the magic number (uint32_t).
1755          */
1756         ctrl_pkt.ctrl_pkt_data_len = 2 * sizeof(uint32_t);
1757         ctrl_pkt.version = 1;
1758         ctrl_pkt.magic = DCI_MAGIC;
1759         memcpy(buf + write_len, &ctrl_pkt, sizeof(ctrl_pkt));
1760         write_len += sizeof(ctrl_pkt);
1761
1762         *(uint8_t *)(buf + write_len) = CONTROL_CHAR;
1763         write_len += sizeof(uint8_t);
1764
1765         err = diag_dci_write_bridge(token, buf, write_len);
1766         if (err) {
1767                 pr_err("diag: error writing ack packet to remote proc, token: %d, err: %d\n",
1768                        token, err);
1769                 diagmem_free(driver, buf, dci_ops_tbl[token].mempool);
1770                 return err;
1771         }
1772
1773         mod_timer(&(dci_channel_status[token].wait_time),
1774                   jiffies + msecs_to_jiffies(DCI_HANDSHAKE_WAIT_TIME));
1775
1776         return 0;
1777 }
1778 #else
1779 int diag_dci_send_handshake_pkt(int index)
1780 {
1781         return 0;
1782 }
1783 #endif
1784
1785 static int diag_dci_process_apps_pkt(struct diag_pkt_header_t *pkt_header,
1786                                      unsigned char *req_buf, int req_len,
1787                                      int tag)
1788 {
1789         uint8_t cmd_code, subsys_id, i, goto_download = 0;
1790         uint8_t header_len = sizeof(struct diag_dci_pkt_header_t);
1791         uint16_t ss_cmd_code;
1792         uint32_t write_len = 0;
1793         unsigned char *dest_buf = driver->apps_dci_buf;
1794         unsigned char *payload_ptr = driver->apps_dci_buf + header_len;
1795         struct diag_dci_pkt_header_t dci_header;
1796
1797         if (!pkt_header || !req_buf || req_len <= 0 || tag < 0)
1798                 return -EIO;
1799
1800         cmd_code = pkt_header->cmd_code;
1801         subsys_id = pkt_header->subsys_id;
1802         ss_cmd_code = pkt_header->subsys_cmd_code;
1803
1804         if (cmd_code == DIAG_CMD_DOWNLOAD) {
1805                 *payload_ptr = DIAG_CMD_DOWNLOAD;
1806                 write_len = sizeof(uint8_t);
1807                 goto_download = 1;
1808                 goto fill_buffer;
1809         } else if (cmd_code == DIAG_CMD_VERSION) {
1810                 if (chk_polling_response()) {
1811                         for (i = 0; i < 55; i++, write_len++, payload_ptr++)
1812                                 *(payload_ptr) = 0;
1813                         goto fill_buffer;
1814                 }
1815         } else if (cmd_code == DIAG_CMD_EXT_BUILD) {
1816                 if (chk_polling_response()) {
1817                         *payload_ptr = DIAG_CMD_EXT_BUILD;
1818                         write_len = sizeof(uint8_t);
1819                         payload_ptr += sizeof(uint8_t);
1820                         for (i = 0; i < 8; i++, write_len++, payload_ptr++)
1821                                 *(payload_ptr) = 0;
1822                         *(int *)(payload_ptr) = chk_config_get_id();
1823                         write_len += sizeof(int);
1824                         goto fill_buffer;
1825                 }
1826         } else if (cmd_code == DIAG_CMD_LOG_ON_DMND) {
1827                 write_len = diag_cmd_log_on_demand(req_buf, req_len,
1828                                                    payload_ptr,
1829                                                    APPS_BUF_SIZE - header_len);
1830                 goto fill_buffer;
1831         } else if (cmd_code != DIAG_CMD_DIAG_SUBSYS) {
1832                 return DIAG_DCI_TABLE_ERR;
1833         }
1834
1835         if (subsys_id == DIAG_SS_DIAG) {
1836                 if (ss_cmd_code == DIAG_DIAG_MAX_PKT_SZ) {
1837                         memcpy(payload_ptr, pkt_header,
1838                                         sizeof(struct diag_pkt_header_t));
1839                         write_len = sizeof(struct diag_pkt_header_t);
1840                         *(uint32_t *)(payload_ptr + write_len) =
1841                                                         DIAG_MAX_REQ_SIZE;
1842                         write_len += sizeof(uint32_t);
1843                 } else if (ss_cmd_code == DIAG_DIAG_STM) {
1844                         write_len = diag_process_stm_cmd(req_buf, payload_ptr);
1845                 }
1846         } else if (subsys_id == DIAG_SS_PARAMS) {
1847                 if (ss_cmd_code == DIAG_DIAG_POLL) {
1848                         if (chk_polling_response()) {
1849                                 memcpy(payload_ptr, pkt_header,
1850                                         sizeof(struct diag_pkt_header_t));
1851                                 write_len = sizeof(struct diag_pkt_header_t);
1852                                 payload_ptr += write_len;
1853                                 for (i = 0; i < 12; i++, write_len++) {
1854                                         *(payload_ptr) = 0;
1855                                         payload_ptr++;
1856                                 }
1857                         }
1858                 } else if (ss_cmd_code == DIAG_DEL_RSP_WRAP) {
1859                         memcpy(payload_ptr, pkt_header,
1860                                         sizeof(struct diag_pkt_header_t));
1861                         write_len = sizeof(struct diag_pkt_header_t);
1862                         *(int *)(payload_ptr + write_len) = wrap_enabled;
1863                         write_len += sizeof(int);
1864                 } else if (ss_cmd_code == DIAG_DEL_RSP_WRAP_CNT) {
1865                         wrap_enabled = true;
1866                         memcpy(payload_ptr, pkt_header,
1867                                         sizeof(struct diag_pkt_header_t));
1868                         write_len = sizeof(struct diag_pkt_header_t);
1869                         *(uint16_t *)(payload_ptr + write_len) = wrap_count;
1870                         write_len += sizeof(uint16_t);
1871                 } else if (ss_cmd_code == DIAG_EXT_MOBILE_ID) {
1872                         write_len = diag_cmd_get_mobile_id(req_buf, req_len,
1873                                                    payload_ptr,
1874                                                    APPS_BUF_SIZE - header_len);
1875                 }
1876         }
1877
1878 fill_buffer:
1879         if (write_len > 0) {
1880                 /* Check if we are within the range of the buffer*/
1881                 if (write_len + header_len > DIAG_MAX_REQ_SIZE) {
1882                         pr_err("diag: In %s, invalid length %d\n", __func__,
1883                                                 write_len + header_len);
1884                         return -ENOMEM;
1885                 }
1886                 dci_header.start = CONTROL_CHAR;
1887                 dci_header.version = 1;
1888                 /*
1889                  * Length of the rsp pkt = actual data len + pkt rsp code
1890                  * (uint8_t) + tag (int)
1891                  */
1892                 dci_header.len = write_len + sizeof(uint8_t) + sizeof(int);
1893                 dci_header.pkt_code = DCI_PKT_RSP_CODE;
1894                 dci_header.tag = tag;
1895                 driver->in_busy_dcipktdata = 1;
1896                 memcpy(dest_buf, &dci_header, header_len);
1897                 diag_process_apps_dci_read_data(DCI_PKT_TYPE, dest_buf + 4,
1898                                                 dci_header.len);
1899                 driver->in_busy_dcipktdata = 0;
1900
1901                 if (goto_download) {
1902                         /*
1903                          * Sleep for sometime so that the response reaches the
1904                          * client. The value 5000 empirically as an optimum
1905                          * time for the response to reach the client.
1906                          */
1907                         usleep_range(5000, 5100);
1908                         /* call download API */
1909                         msm_set_restart_mode(RESTART_DLOAD);
1910                         pr_alert("diag: download mode set, Rebooting SoC..\n");
1911                         kernel_restart(NULL);
1912                 }
1913                 return DIAG_DCI_NO_ERROR;
1914         }
1915
1916         return DIAG_DCI_TABLE_ERR;
1917 }
1918
1919 static int diag_process_dci_pkt_rsp(unsigned char *buf, int len)
1920 {
1921         int ret = DIAG_DCI_TABLE_ERR;
1922         int common_cmd = 0;
1923         struct diag_pkt_header_t *header = NULL;
1924         unsigned char *temp = buf;
1925         unsigned char *req_buf = NULL;
1926         uint8_t retry_count = 0, max_retries = 3;
1927         uint32_t read_len = 0, req_len = len;
1928         struct dci_pkt_req_entry_t *req_entry = NULL;
1929         struct diag_dci_client_tbl *dci_entry = NULL;
1930         struct dci_pkt_req_t req_hdr;
1931         struct diag_cmd_reg_t *reg_item;
1932         struct diag_cmd_reg_entry_t reg_entry;
1933         struct diag_cmd_reg_entry_t *temp_entry;
1934
1935         if (!buf)
1936                 return -EIO;
1937
1938         if (len <= sizeof(struct dci_pkt_req_t) || len > DCI_REQ_BUF_SIZE) {
1939                 pr_err("diag: dci: Invalid length %d len in %s", len, __func__);
1940                 return -EIO;
1941         }
1942
1943         req_hdr = *(struct dci_pkt_req_t *)temp;
1944         temp += sizeof(struct dci_pkt_req_t);
1945         read_len += sizeof(struct dci_pkt_req_t);
1946         req_len -= sizeof(struct dci_pkt_req_t);
1947         req_buf = temp; /* Start of the Request */
1948         header = (struct diag_pkt_header_t *)temp;
1949         temp += sizeof(struct diag_pkt_header_t);
1950         read_len += sizeof(struct diag_pkt_header_t);
1951         if (read_len >= DCI_REQ_BUF_SIZE) {
1952                 pr_err("diag: dci: In %s, invalid read_len: %d\n", __func__,
1953                        read_len);
1954                 return -EIO;
1955         }
1956
1957         mutex_lock(&driver->dci_mutex);
1958         dci_entry = diag_dci_get_client_entry(req_hdr.client_id);
1959         if (!dci_entry) {
1960                 pr_err("diag: Invalid client %d in %s\n",
1961                        req_hdr.client_id, __func__);
1962                 mutex_unlock(&driver->dci_mutex);
1963                 return DIAG_DCI_NO_REG;
1964         }
1965
1966         /* Check if the command is allowed on DCI */
1967         if (diag_dci_filter_commands(header)) {
1968                 pr_debug("diag: command not supported %d %d %d",
1969                          header->cmd_code, header->subsys_id,
1970                          header->subsys_cmd_code);
1971                 mutex_unlock(&driver->dci_mutex);
1972                 return DIAG_DCI_SEND_DATA_FAIL;
1973         }
1974
1975         common_cmd = diag_check_common_cmd(header);
1976         if (common_cmd < 0) {
1977                 pr_debug("diag: error in checking common command, %d\n",
1978                          common_cmd);
1979                 mutex_unlock(&driver->dci_mutex);
1980                 return DIAG_DCI_SEND_DATA_FAIL;
1981         }
1982
1983         /*
1984          * Previous packet is yet to be consumed by the client. Wait
1985          * till the buffer is free.
1986          */
1987         while (retry_count < max_retries) {
1988                 retry_count++;
1989                 if (driver->in_busy_dcipktdata)
1990                         usleep_range(10000, 10100);
1991                 else
1992                         break;
1993         }
1994         /* The buffer is still busy */
1995         if (driver->in_busy_dcipktdata) {
1996                 pr_err("diag: In %s, apps dci buffer is still busy. Dropping packet\n",
1997                                                                 __func__);
1998                 mutex_unlock(&driver->dci_mutex);
1999                 return -EAGAIN;
2000         }
2001
2002         /* Register this new DCI packet */
2003         req_entry = diag_register_dci_transaction(req_hdr.uid,
2004                                                   req_hdr.client_id);
2005         if (!req_entry) {
2006                 pr_alert("diag: registering new DCI transaction failed\n");
2007                 mutex_unlock(&driver->dci_mutex);
2008                 return DIAG_DCI_NO_REG;
2009         }
2010         mutex_unlock(&driver->dci_mutex);
2011
2012         /*
2013          * If the client has registered for remote data, route the packet to the
2014          * remote processor
2015          */
2016         if (dci_entry->client_info.token > 0) {
2017                 ret = diag_send_dci_pkt_remote(req_buf, req_len, req_entry->tag,
2018                                                dci_entry->client_info.token);
2019                 return ret;
2020         }
2021
2022         /* Check if it is a dedicated Apps command */
2023         ret = diag_dci_process_apps_pkt(header, req_buf, req_len,
2024                                         req_entry->tag);
2025         if ((ret == DIAG_DCI_NO_ERROR && !common_cmd) || ret < 0)
2026                 return ret;
2027
2028         reg_entry.cmd_code = header->cmd_code;
2029         reg_entry.subsys_id = header->subsys_id;
2030         reg_entry.cmd_code_hi = header->subsys_cmd_code;
2031         reg_entry.cmd_code_lo = header->subsys_cmd_code;
2032
2033         mutex_lock(&driver->cmd_reg_mutex);
2034         temp_entry = diag_cmd_search(&reg_entry, ALL_PROC);
2035         if (temp_entry) {
2036                 reg_item = container_of(temp_entry, struct diag_cmd_reg_t,
2037                                                                 entry);
2038                 ret = diag_send_dci_pkt(reg_item, req_buf, req_len,
2039                                         req_entry->tag);
2040         } else {
2041                 DIAG_LOG(DIAG_DEBUG_DCI, "Command not found: %02x %02x %02x\n",
2042                                 reg_entry.cmd_code, reg_entry.subsys_id,
2043                                 reg_entry.cmd_code_hi);
2044         }
2045         mutex_unlock(&driver->cmd_reg_mutex);
2046
2047         return ret;
2048 }
2049
2050 int diag_process_dci_transaction(unsigned char *buf, int len)
2051 {
2052         unsigned char *temp = buf;
2053         uint16_t log_code, item_num;
2054         int ret = -1, found = 0, client_id = 0, client_token = 0;
2055         int count, set_mask, num_codes, bit_index, event_id, offset = 0;
2056         unsigned int byte_index, read_len = 0;
2057         uint8_t equip_id, *log_mask_ptr, *head_log_mask_ptr, byte_mask;
2058         uint8_t *event_mask_ptr;
2059         struct diag_dci_client_tbl *dci_entry = NULL;
2060
2061         if (!temp) {
2062                 pr_err("diag: Invalid buffer in %s\n", __func__);
2063                 return -ENOMEM;
2064         }
2065
2066         /* This is Pkt request/response transaction */
2067         if (*(int *)temp > 0) {
2068                 return diag_process_dci_pkt_rsp(buf, len);
2069         } else if (*(int *)temp == DCI_LOG_TYPE) {
2070                 /* Minimum length of a log mask config is 12 + 2 bytes for
2071                    atleast one log code to be set or reset */
2072                 if (len < DCI_LOG_CON_MIN_LEN || len > USER_SPACE_DATA) {
2073                         pr_err("diag: dci: Invalid length in %s\n", __func__);
2074                         return -EIO;
2075                 }
2076
2077                 /* Extract each log code and put in client table */
2078                 temp += sizeof(int);
2079                 read_len += sizeof(int);
2080                 client_id = *(int *)temp;
2081                 temp += sizeof(int);
2082                 read_len += sizeof(int);
2083                 set_mask = *(int *)temp;
2084                 temp += sizeof(int);
2085                 read_len += sizeof(int);
2086                 num_codes = *(int *)temp;
2087                 temp += sizeof(int);
2088                 read_len += sizeof(int);
2089
2090                 /* find client table entry */
2091                 mutex_lock(&driver->dci_mutex);
2092                 dci_entry = diag_dci_get_client_entry(client_id);
2093                 if (!dci_entry) {
2094                         pr_err("diag: In %s, invalid client\n", __func__);
2095                         mutex_unlock(&driver->dci_mutex);
2096                         return ret;
2097                 }
2098                 client_token = dci_entry->client_info.token;
2099
2100                 if (num_codes == 0 || (num_codes >= (USER_SPACE_DATA - 8)/2)) {
2101                         pr_err("diag: dci: Invalid number of log codes %d\n",
2102                                                                 num_codes);
2103                         mutex_unlock(&driver->dci_mutex);
2104                         return -EIO;
2105                 }
2106
2107                 head_log_mask_ptr = dci_entry->dci_log_mask;
2108                 if (!head_log_mask_ptr) {
2109                         pr_err("diag: dci: Invalid Log mask pointer in %s\n",
2110                                                                 __func__);
2111                         mutex_unlock(&driver->dci_mutex);
2112                         return -ENOMEM;
2113                 }
2114                 pr_debug("diag: head of dci log mask %pK\n", head_log_mask_ptr);
2115                 count = 0; /* iterator for extracting log codes */
2116
2117                 while (count < num_codes) {
2118                         if (read_len >= USER_SPACE_DATA) {
2119                                 pr_err("diag: dci: Invalid length for log type in %s",
2120                                                                 __func__);
2121                                 mutex_unlock(&driver->dci_mutex);
2122                                 return -EIO;
2123                         }
2124                         log_code = *(uint16_t *)temp;
2125                         equip_id = LOG_GET_EQUIP_ID(log_code);
2126                         item_num = LOG_GET_ITEM_NUM(log_code);
2127                         byte_index = item_num/8 + 2;
2128                         if (byte_index >= (DCI_MAX_ITEMS_PER_LOG_CODE+2)) {
2129                                 pr_err("diag: dci: Log type, invalid byte index\n");
2130                                 mutex_unlock(&driver->dci_mutex);
2131                                 return ret;
2132                         }
2133                         byte_mask = 0x01 << (item_num % 8);
2134                         /*
2135                          * Parse through log mask table and find
2136                          * relevant range
2137                          */
2138                         log_mask_ptr = head_log_mask_ptr;
2139                         found = 0;
2140                         offset = 0;
2141                         while (log_mask_ptr && (offset < DCI_LOG_MASK_SIZE)) {
2142                                 if (*log_mask_ptr == equip_id) {
2143                                         found = 1;
2144                                         pr_debug("diag: find equip id = %x at %pK\n",
2145                                                  equip_id, log_mask_ptr);
2146                                         break;
2147                                 } else {
2148                                         pr_debug("diag: did not find equip id = %x at %d\n",
2149                                                  equip_id, *log_mask_ptr);
2150                                         log_mask_ptr += 514;
2151                                         offset += 514;
2152                                 }
2153                         }
2154                         if (!found) {
2155                                 pr_err("diag: dci equip id not found\n");
2156                                 mutex_unlock(&driver->dci_mutex);
2157                                 return ret;
2158                         }
2159                         *(log_mask_ptr+1) = 1; /* set the dirty byte */
2160                         log_mask_ptr = log_mask_ptr + byte_index;
2161                         if (set_mask)
2162                                 *log_mask_ptr |= byte_mask;
2163                         else
2164                                 *log_mask_ptr &= ~byte_mask;
2165                         /* add to cumulative mask */
2166                         update_dci_cumulative_log_mask(
2167                                 offset, byte_index,
2168                                 byte_mask, client_token);
2169                         temp += 2;
2170                         read_len += 2;
2171                         count++;
2172                         ret = DIAG_DCI_NO_ERROR;
2173                 }
2174                 /* send updated mask to userspace clients */
2175                 if (client_token == DCI_LOCAL_PROC)
2176                         diag_update_userspace_clients(DCI_LOG_MASKS_TYPE);
2177                 /* send updated mask to peripherals */
2178                 ret = dci_ops_tbl[client_token].send_log_mask(client_token);
2179                 mutex_unlock(&driver->dci_mutex);
2180         } else if (*(int *)temp == DCI_EVENT_TYPE) {
2181                 /* Minimum length of a event mask config is 12 + 4 bytes for
2182                   atleast one event id to be set or reset. */
2183                 if (len < DCI_EVENT_CON_MIN_LEN || len > USER_SPACE_DATA) {
2184                         pr_err("diag: dci: Invalid length in %s\n", __func__);
2185                         return -EIO;
2186                 }
2187
2188                 /* Extract each event id and put in client table */
2189                 temp += sizeof(int);
2190                 read_len += sizeof(int);
2191                 client_id = *(int *)temp;
2192                 temp += sizeof(int);
2193                 read_len += sizeof(int);
2194                 set_mask = *(int *)temp;
2195                 temp += sizeof(int);
2196                 read_len += sizeof(int);
2197                 num_codes = *(int *)temp;
2198                 temp += sizeof(int);
2199                 read_len += sizeof(int);
2200
2201                 /* find client table entry */
2202                 mutex_lock(&driver->dci_mutex);
2203                 dci_entry = diag_dci_get_client_entry(client_id);
2204                 if (!dci_entry) {
2205                         pr_err("diag: In %s, invalid client\n", __func__);
2206                         mutex_unlock(&driver->dci_mutex);
2207                         return ret;
2208                 }
2209                 client_token = dci_entry->client_info.token;
2210
2211                 /* Check for positive number of event ids. Also, the number of
2212                    event ids should fit in the buffer along with set_mask and
2213                    num_codes which are 4 bytes each */
2214                 if (num_codes == 0 || (num_codes >= (USER_SPACE_DATA - 8)/2)) {
2215                         pr_err("diag: dci: Invalid number of event ids %d\n",
2216                                                                 num_codes);
2217                         mutex_unlock(&driver->dci_mutex);
2218                         return -EIO;
2219                 }
2220
2221                 event_mask_ptr = dci_entry->dci_event_mask;
2222                 if (!event_mask_ptr) {
2223                         pr_err("diag: dci: Invalid event mask pointer in %s\n",
2224                                                                 __func__);
2225                         mutex_unlock(&driver->dci_mutex);
2226                         return -ENOMEM;
2227                 }
2228                 pr_debug("diag: head of dci event mask %pK\n", event_mask_ptr);
2229                 count = 0; /* iterator for extracting log codes */
2230                 while (count < num_codes) {
2231                         if (read_len >= USER_SPACE_DATA) {
2232                                 pr_err("diag: dci: Invalid length for event type in %s",
2233                                                                 __func__);
2234                                 mutex_unlock(&driver->dci_mutex);
2235                                 return -EIO;
2236                         }
2237                         event_id = *(int *)temp;
2238                         byte_index = event_id/8;
2239                         if (byte_index >= DCI_EVENT_MASK_SIZE) {
2240                                 pr_err("diag: dci: Event type, invalid byte index\n");
2241                                 mutex_unlock(&driver->dci_mutex);
2242                                 return ret;
2243                         }
2244                         bit_index = event_id % 8;
2245                         byte_mask = 0x1 << bit_index;
2246                         /*
2247                          * Parse through event mask table and set
2248                          * relevant byte & bit combination
2249                          */
2250                         if (set_mask)
2251                                 *(event_mask_ptr + byte_index) |= byte_mask;
2252                         else
2253                                 *(event_mask_ptr + byte_index) &= ~byte_mask;
2254                         /* add to cumulative mask */
2255                         update_dci_cumulative_event_mask(byte_index, byte_mask,
2256                                                          client_token);
2257                         temp += sizeof(int);
2258                         read_len += sizeof(int);
2259                         count++;
2260                         ret = DIAG_DCI_NO_ERROR;
2261                 }
2262                 /* send updated mask to userspace clients */
2263                 if (dci_entry->client_info.token == DCI_LOCAL_PROC)
2264                         diag_update_userspace_clients(DCI_EVENT_MASKS_TYPE);
2265                 /* send updated mask to peripherals */
2266                 ret = dci_ops_tbl[client_token].send_event_mask(client_token);
2267                 mutex_unlock(&driver->dci_mutex);
2268         } else {
2269                 pr_alert("diag: Incorrect DCI transaction\n");
2270         }
2271         return ret;
2272 }
2273
2274
2275 struct diag_dci_client_tbl *diag_dci_get_client_entry(int client_id)
2276 {
2277         struct list_head *start, *temp;
2278         struct diag_dci_client_tbl *entry = NULL;
2279         list_for_each_safe(start, temp, &driver->dci_client_list) {
2280                 entry = list_entry(start, struct diag_dci_client_tbl, track);
2281                 if (entry->client_info.client_id == client_id)
2282                         return entry;
2283         }
2284         return NULL;
2285 }
2286
2287 struct diag_dci_client_tbl *dci_lookup_client_entry_pid(int tgid)
2288 {
2289         struct list_head *start, *temp;
2290         struct diag_dci_client_tbl *entry = NULL;
2291         struct pid *pid_struct = NULL;
2292         struct task_struct *task_s = NULL;
2293
2294         list_for_each_safe(start, temp, &driver->dci_client_list) {
2295                 entry = list_entry(start, struct diag_dci_client_tbl, track);
2296                 pid_struct = find_get_pid(entry->tgid);
2297                 if (!pid_struct) {
2298                         DIAG_LOG(DIAG_DEBUG_DCI,
2299                                 "diag: valid pid doesn't exist for pid = %d\n",
2300                                 entry->tgid);
2301                         continue;
2302                 }
2303                 task_s = get_pid_task(pid_struct, PIDTYPE_PID);
2304                 if (!task_s) {
2305                         DIAG_LOG(DIAG_DEBUG_DCI,
2306                                 "diag: valid task doesn't exist for pid = %d\n",
2307                                 entry->tgid);
2308                         continue;
2309                 }
2310                 if (task_s == entry->client)
2311                         if (entry->client->tgid == tgid)
2312                                 return entry;
2313         }
2314         return NULL;
2315 }
2316
2317 void update_dci_cumulative_event_mask(int offset, uint8_t byte_mask, int token)
2318 {
2319         uint8_t *event_mask_ptr, *update_ptr = NULL;
2320         struct list_head *start, *temp;
2321         struct diag_dci_client_tbl *entry = NULL;
2322         bool is_set = false;
2323
2324         mutex_lock(&dci_event_mask_mutex);
2325         update_ptr = dci_ops_tbl[token].event_mask_composite;
2326         if (!update_ptr) {
2327                 mutex_unlock(&dci_event_mask_mutex);
2328                 return;
2329         }
2330         update_ptr += offset;
2331         list_for_each_safe(start, temp, &driver->dci_client_list) {
2332                 entry = list_entry(start, struct diag_dci_client_tbl, track);
2333                 if (entry->client_info.token != token)
2334                         continue;
2335                 event_mask_ptr = entry->dci_event_mask;
2336                 event_mask_ptr += offset;
2337                 if ((*event_mask_ptr & byte_mask) == byte_mask) {
2338                         is_set = true;
2339                         /* break even if one client has the event mask set */
2340                         break;
2341                 }
2342         }
2343         if (is_set == false)
2344                 *update_ptr &= ~byte_mask;
2345         else
2346                 *update_ptr |= byte_mask;
2347         mutex_unlock(&dci_event_mask_mutex);
2348 }
2349
2350 void diag_dci_invalidate_cumulative_event_mask(int token)
2351 {
2352         int i = 0;
2353         struct list_head *start, *temp;
2354         struct diag_dci_client_tbl *entry = NULL;
2355         uint8_t *event_mask_ptr, *update_ptr = NULL;
2356
2357         mutex_lock(&dci_event_mask_mutex);
2358         update_ptr = dci_ops_tbl[token].event_mask_composite;
2359         if (!update_ptr) {
2360                 mutex_unlock(&dci_event_mask_mutex);
2361                 return;
2362         }
2363
2364         create_dci_event_mask_tbl(update_ptr);
2365         list_for_each_safe(start, temp, &driver->dci_client_list) {
2366                 entry = list_entry(start, struct diag_dci_client_tbl, track);
2367                 if (entry->client_info.token != token)
2368                         continue;
2369                 event_mask_ptr = entry->dci_event_mask;
2370                 for (i = 0; i < DCI_EVENT_MASK_SIZE; i++)
2371                         *(update_ptr+i) |= *(event_mask_ptr+i);
2372         }
2373         mutex_unlock(&dci_event_mask_mutex);
2374 }
2375
2376 #ifdef CONFIG_DIAGFWD_BRIDGE_CODE
2377 int diag_send_dci_event_mask_remote(int token)
2378 {
2379         unsigned char *buf = NULL;
2380         struct diag_dci_header_t dci_header;
2381         struct diag_ctrl_event_mask event_mask;
2382         int dci_header_size = sizeof(struct diag_dci_header_t);
2383         int event_header_size = sizeof(struct diag_ctrl_event_mask);
2384         int i, ret = DIAG_DCI_NO_ERROR, err = DIAG_DCI_NO_ERROR;
2385         unsigned char *event_mask_ptr = NULL;
2386         uint32_t write_len = 0;
2387
2388         mutex_lock(&dci_event_mask_mutex);
2389         event_mask_ptr = dci_ops_tbl[token].event_mask_composite;
2390         if (!event_mask_ptr) {
2391                 mutex_unlock(&dci_event_mask_mutex);
2392                 return -EINVAL;
2393         }
2394         buf = dci_get_buffer_from_bridge(token);
2395         if (!buf) {
2396                 pr_err("diag: In %s, unable to get dci buffers to write data\n",
2397                         __func__);
2398                 mutex_unlock(&dci_event_mask_mutex);
2399                 return -EAGAIN;
2400         }
2401
2402         /* Frame the DCI header */
2403         dci_header.start = CONTROL_CHAR;
2404         dci_header.version = 1;
2405         dci_header.length = event_header_size + DCI_EVENT_MASK_SIZE + 1;
2406         dci_header.cmd_code = DCI_CONTROL_PKT_CODE;
2407
2408         event_mask.cmd_type = DIAG_CTRL_MSG_EVENT_MASK;
2409         event_mask.data_len = EVENT_MASK_CTRL_HEADER_LEN + DCI_EVENT_MASK_SIZE;
2410         event_mask.stream_id = DCI_MASK_STREAM;
2411         event_mask.status = DIAG_CTRL_MASK_VALID;
2412         event_mask.event_config = 0; /* event config */
2413         event_mask.event_mask_size = DCI_EVENT_MASK_SIZE;
2414         for (i = 0; i < DCI_EVENT_MASK_SIZE; i++) {
2415                 if (event_mask_ptr[i] != 0) {
2416                         event_mask.event_config = 1;
2417                         break;
2418                 }
2419         }
2420         memcpy(buf + write_len, &dci_header, dci_header_size);
2421         write_len += dci_header_size;
2422         memcpy(buf + write_len, &event_mask, event_header_size);
2423         write_len += event_header_size;
2424         memcpy(buf + write_len, event_mask_ptr, DCI_EVENT_MASK_SIZE);
2425         write_len += DCI_EVENT_MASK_SIZE;
2426         *(buf + write_len) = CONTROL_CHAR; /* End Terminator */
2427         write_len += sizeof(uint8_t);
2428         err = diag_dci_write_bridge(token, buf, write_len);
2429         if (err) {
2430                 pr_err("diag: error writing event mask to remote proc, token: %d, err: %d\n",
2431                        token, err);
2432                 diagmem_free(driver, buf, dci_ops_tbl[token].mempool);
2433                 ret = err;
2434         } else {
2435                 ret = DIAG_DCI_NO_ERROR;
2436         }
2437         mutex_unlock(&dci_event_mask_mutex);
2438         return ret;
2439 }
2440 #endif
2441
2442 int diag_send_dci_event_mask(int token)
2443 {
2444         void *buf = event_mask.update_buf;
2445         struct diag_ctrl_event_mask header;
2446         int header_size = sizeof(struct diag_ctrl_event_mask);
2447         int ret = DIAG_DCI_NO_ERROR, err = DIAG_DCI_NO_ERROR, i;
2448         unsigned char *event_mask_ptr = NULL;
2449
2450         mutex_lock(&dci_event_mask_mutex);
2451         event_mask_ptr = dci_ops_tbl[DCI_LOCAL_PROC].event_mask_composite;
2452         if (!event_mask_ptr) {
2453                 mutex_unlock(&dci_event_mask_mutex);
2454                 return -EINVAL;
2455         }
2456
2457         mutex_lock(&event_mask.lock);
2458         /* send event mask update */
2459         header.cmd_type = DIAG_CTRL_MSG_EVENT_MASK;
2460         header.data_len = EVENT_MASK_CTRL_HEADER_LEN + DCI_EVENT_MASK_SIZE;
2461         header.stream_id = DCI_MASK_STREAM;
2462         header.status = DIAG_CTRL_MASK_VALID;
2463         header.event_config = 0; /* event config */
2464         header.event_mask_size = DCI_EVENT_MASK_SIZE;
2465         for (i = 0; i < DCI_EVENT_MASK_SIZE; i++) {
2466                 if (event_mask_ptr[i] != 0) {
2467                         header.event_config = 1;
2468                         break;
2469                 }
2470         }
2471         memcpy(buf, &header, header_size);
2472         memcpy(buf+header_size, event_mask_ptr, DCI_EVENT_MASK_SIZE);
2473         for (i = 0; i < NUM_PERIPHERALS; i++) {
2474                 /*
2475                  * Don't send to peripheral if its regular channel
2476                  * is down. It may also mean that the peripheral doesn't
2477                  * support DCI.
2478                  */
2479                 if (check_peripheral_dci_support(i, DCI_LOCAL_PROC)) {
2480                         err = diag_dci_write_proc(i, DIAG_CNTL_TYPE, buf,
2481                                   header_size + DCI_EVENT_MASK_SIZE);
2482                         if (err != DIAG_DCI_NO_ERROR)
2483                                 ret = DIAG_DCI_SEND_DATA_FAIL;
2484                 }
2485         }
2486
2487         mutex_unlock(&event_mask.lock);
2488         mutex_unlock(&dci_event_mask_mutex);
2489
2490         return ret;
2491 }
2492
2493 void update_dci_cumulative_log_mask(int offset, unsigned int byte_index,
2494                                                 uint8_t byte_mask, int token)
2495 {
2496         uint8_t *log_mask_ptr, *update_ptr = NULL;
2497         bool is_set = false;
2498         struct list_head *start, *temp;
2499         struct diag_dci_client_tbl *entry = NULL;
2500
2501         mutex_lock(&dci_log_mask_mutex);
2502         update_ptr = dci_ops_tbl[token].log_mask_composite;
2503         if (!update_ptr) {
2504                 mutex_unlock(&dci_log_mask_mutex);
2505                 return;
2506         }
2507
2508         update_ptr += offset;
2509         /* update the dirty bit */
2510         *(update_ptr+1) = 1;
2511         update_ptr = update_ptr + byte_index;
2512         list_for_each_safe(start, temp, &driver->dci_client_list) {
2513                 entry = list_entry(start, struct diag_dci_client_tbl, track);
2514                 if (entry->client_info.token != token)
2515                         continue;
2516                 log_mask_ptr = entry->dci_log_mask;
2517                 log_mask_ptr = log_mask_ptr + offset + byte_index;
2518                 if ((*log_mask_ptr & byte_mask) == byte_mask) {
2519                         is_set = true;
2520                         /* break even if one client has the log mask set */
2521                         break;
2522                 }
2523         }
2524
2525         if (is_set == false)
2526                 *update_ptr &= ~byte_mask;
2527         else
2528                 *update_ptr |= byte_mask;
2529         mutex_unlock(&dci_log_mask_mutex);
2530 }
2531
2532 void diag_dci_invalidate_cumulative_log_mask(int token)
2533 {
2534         int i = 0;
2535         struct list_head *start, *temp;
2536         struct diag_dci_client_tbl *entry = NULL;
2537         uint8_t *log_mask_ptr, *update_ptr = NULL;
2538
2539         /* Clear the composite mask and redo all the masks */
2540         mutex_lock(&dci_log_mask_mutex);
2541         update_ptr = dci_ops_tbl[token].log_mask_composite;
2542         if (!update_ptr) {
2543                 mutex_unlock(&dci_log_mask_mutex);
2544                 return;
2545         }
2546
2547         create_dci_log_mask_tbl(update_ptr, DCI_LOG_MASK_DIRTY);
2548         list_for_each_safe(start, temp, &driver->dci_client_list) {
2549                 entry = list_entry(start, struct diag_dci_client_tbl, track);
2550                 if (entry->client_info.token != token)
2551                         continue;
2552                 log_mask_ptr = entry->dci_log_mask;
2553                 for (i = 0; i < DCI_LOG_MASK_SIZE; i++)
2554                         *(update_ptr+i) |= *(log_mask_ptr+i);
2555         }
2556         mutex_unlock(&dci_log_mask_mutex);
2557 }
2558
2559 static int dci_fill_log_mask(unsigned char *dest_ptr, unsigned char *src_ptr)
2560 {
2561         struct diag_ctrl_log_mask header;
2562         int header_len = sizeof(struct diag_ctrl_log_mask);
2563
2564         header.cmd_type = DIAG_CTRL_MSG_LOG_MASK;
2565         header.num_items = DCI_MAX_ITEMS_PER_LOG_CODE;
2566         header.data_len = 11 + DCI_MAX_ITEMS_PER_LOG_CODE;
2567         header.stream_id = DCI_MASK_STREAM;
2568         header.status = 3;
2569         header.equip_id = *src_ptr;
2570         header.log_mask_size = DCI_MAX_ITEMS_PER_LOG_CODE;
2571         memcpy(dest_ptr, &header, header_len);
2572         memcpy(dest_ptr + header_len, src_ptr + 2, DCI_MAX_ITEMS_PER_LOG_CODE);
2573
2574         return header_len + DCI_MAX_ITEMS_PER_LOG_CODE;
2575 }
2576
2577 #ifdef CONFIG_DIAGFWD_BRIDGE_CODE
2578 int diag_send_dci_log_mask_remote(int token)
2579 {
2580
2581         unsigned char *buf = NULL;
2582         struct diag_dci_header_t dci_header;
2583         int dci_header_size = sizeof(struct diag_dci_header_t);
2584         int log_header_size = sizeof(struct diag_ctrl_log_mask);
2585         uint8_t *log_mask_ptr = NULL;
2586         int i, ret = DIAG_DCI_NO_ERROR, err = DIAG_DCI_NO_ERROR;
2587         int updated;
2588         uint32_t write_len = 0;
2589
2590         mutex_lock(&dci_log_mask_mutex);
2591         log_mask_ptr = dci_ops_tbl[token].log_mask_composite;
2592         if (!log_mask_ptr) {
2593                 mutex_unlock(&dci_log_mask_mutex);
2594                 return -EINVAL;
2595         }
2596
2597         /* DCI header is common to all equipment IDs */
2598         dci_header.start = CONTROL_CHAR;
2599         dci_header.version = 1;
2600         dci_header.length = log_header_size + DCI_MAX_ITEMS_PER_LOG_CODE + 1;
2601         dci_header.cmd_code = DCI_CONTROL_PKT_CODE;
2602
2603         for (i = 0; i < DCI_MAX_LOG_CODES; i++) {
2604                 updated = 1;
2605                 write_len = 0;
2606                 if (!*(log_mask_ptr + 1)) {
2607                         log_mask_ptr += 514;
2608                         continue;
2609                 }
2610
2611                 buf = dci_get_buffer_from_bridge(token);
2612                 if (!buf) {
2613                         pr_err("diag: In %s, unable to get dci buffers to write data\n",
2614                                 __func__);
2615                         mutex_unlock(&dci_log_mask_mutex);
2616                         return -EAGAIN;
2617                 }
2618
2619                 memcpy(buf + write_len, &dci_header, dci_header_size);
2620                 write_len += dci_header_size;
2621                 write_len += dci_fill_log_mask(buf + write_len, log_mask_ptr);
2622                 *(buf + write_len) = CONTROL_CHAR; /* End Terminator */
2623                 write_len += sizeof(uint8_t);
2624                 err = diag_dci_write_bridge(token, buf, write_len);
2625                 if (err) {
2626                         pr_err("diag: error writing log mask to remote processor, equip_id: %d, token: %d, err: %d\n",
2627                                i, token, err);
2628                         diagmem_free(driver, buf, dci_ops_tbl[token].mempool);
2629                         updated = 0;
2630                 }
2631                 if (updated)
2632                         *(log_mask_ptr + 1) = 0; /* clear dirty byte */
2633                 log_mask_ptr += 514;
2634         }
2635         mutex_unlock(&dci_log_mask_mutex);
2636         return ret;
2637 }
2638 #endif
2639
2640 int diag_send_dci_log_mask(int token)
2641 {
2642         void *buf = log_mask.update_buf;
2643         int write_len = 0;
2644         uint8_t *log_mask_ptr = NULL;
2645         int i, j, ret = DIAG_DCI_NO_ERROR, err = DIAG_DCI_NO_ERROR;
2646         int updated;
2647
2648
2649         mutex_lock(&dci_log_mask_mutex);
2650         log_mask_ptr = dci_ops_tbl[DCI_LOCAL_PROC].log_mask_composite;
2651         if (!log_mask_ptr) {
2652                 mutex_unlock(&dci_log_mask_mutex);
2653                 return -EINVAL;
2654         }
2655
2656         mutex_lock(&log_mask.lock);
2657         for (i = 0; i < 16; i++) {
2658                 updated = 1;
2659                 /* Dirty bit is set don't update the mask for this equip id */
2660                 if (!(*(log_mask_ptr + 1))) {
2661                         log_mask_ptr += 514;
2662                         continue;
2663                 }
2664                 write_len = dci_fill_log_mask(buf, log_mask_ptr);
2665                 for (j = 0; j < NUM_PERIPHERALS && write_len; j++) {
2666                         if (check_peripheral_dci_support(j, DCI_LOCAL_PROC)) {
2667                                 err = diag_dci_write_proc(j, DIAG_CNTL_TYPE,
2668                                         buf, write_len);
2669                                 if (err != DIAG_DCI_NO_ERROR) {
2670                                         updated = 0;
2671                                         ret = DIAG_DCI_SEND_DATA_FAIL;
2672                                 }
2673                         }
2674                 }
2675                 if (updated)
2676                         *(log_mask_ptr+1) = 0; /* clear dirty byte */
2677                 log_mask_ptr += 514;
2678         }
2679         mutex_unlock(&log_mask.lock);
2680         mutex_unlock(&dci_log_mask_mutex);
2681         return ret;
2682 }
2683
2684 static int diag_dci_init_local(void)
2685 {
2686         struct dci_ops_tbl_t *temp = &dci_ops_tbl[DCI_LOCAL_PROC];
2687
2688         create_dci_log_mask_tbl(temp->log_mask_composite, DCI_LOG_MASK_CLEAN);
2689         create_dci_event_mask_tbl(temp->event_mask_composite);
2690         temp->peripheral_status |= DIAG_CON_APSS;
2691
2692         return 0;
2693 }
2694
2695 #ifdef CONFIG_DIAGFWD_BRIDGE_CODE
2696 static void diag_dci_init_handshake_remote(void)
2697 {
2698         int i;
2699         struct dci_channel_status_t *temp = NULL;
2700
2701         for (i = DCI_REMOTE_BASE; i < NUM_DCI_PROC; i++) {
2702                 temp = &dci_channel_status[i];
2703                 temp->id = i;
2704                 setup_timer(&temp->wait_time, dci_chk_handshake, i);
2705                 INIT_WORK(&temp->handshake_work, dci_handshake_work_fn);
2706         }
2707 }
2708
2709 static int diag_dci_init_remote(void)
2710 {
2711         int i;
2712         struct dci_ops_tbl_t *temp = NULL;
2713
2714         diagmem_init(driver, POOL_TYPE_MDM_DCI_WRITE);
2715
2716         for (i = DCI_REMOTE_BASE; i < DCI_REMOTE_LAST; i++) {
2717                 temp = &dci_ops_tbl[i];
2718                 create_dci_log_mask_tbl(temp->log_mask_composite,
2719                                         DCI_LOG_MASK_CLEAN);
2720                 create_dci_event_mask_tbl(temp->event_mask_composite);
2721         }
2722
2723         partial_pkt.data = vzalloc(MAX_DCI_PACKET_SZ);
2724         if (!partial_pkt.data) {
2725                 pr_err("diag: Unable to create partial pkt data\n");
2726                 return -ENOMEM;
2727         }
2728
2729         partial_pkt.total_len = 0;
2730         partial_pkt.read_len = 0;
2731         partial_pkt.remaining = 0;
2732         partial_pkt.processing = 0;
2733
2734         diag_dci_init_handshake_remote();
2735
2736         return 0;
2737 }
2738 #else
2739 static int diag_dci_init_remote(void)
2740 {
2741         return 0;
2742 }
2743 #endif
2744
2745 static int diag_dci_init_ops_tbl(void)
2746 {
2747         int err = 0;
2748
2749         err = diag_dci_init_local();
2750         if (err)
2751                 goto err;
2752         err = diag_dci_init_remote();
2753         if (err)
2754                 goto err;
2755
2756         return 0;
2757
2758 err:
2759         return -ENOMEM;
2760 }
2761
2762 int diag_dci_init(void)
2763 {
2764         int ret = 0;
2765
2766         driver->dci_tag = 0;
2767         driver->dci_client_id = 0;
2768         driver->num_dci_client = 0;
2769         mutex_init(&driver->dci_mutex);
2770         mutex_init(&dci_log_mask_mutex);
2771         mutex_init(&dci_event_mask_mutex);
2772         spin_lock_init(&ws_lock);
2773
2774         ret = diag_dci_init_ops_tbl();
2775         if (ret)
2776                 goto err;
2777
2778         if (driver->apps_dci_buf == NULL) {
2779                 driver->apps_dci_buf = vzalloc(DCI_BUF_SIZE);
2780                 if (driver->apps_dci_buf == NULL)
2781                         goto err;
2782         }
2783         INIT_LIST_HEAD(&driver->dci_client_list);
2784         INIT_LIST_HEAD(&driver->dci_req_list);
2785
2786         driver->diag_dci_wq = create_singlethread_workqueue("diag_dci_wq");
2787         if (!driver->diag_dci_wq)
2788                 goto err;
2789
2790         INIT_WORK(&dci_data_drain_work, dci_data_drain_work_fn);
2791
2792         setup_timer(&dci_drain_timer, dci_drain_data, 0);
2793         return DIAG_DCI_NO_ERROR;
2794 err:
2795         pr_err("diag: Could not initialize diag DCI buffers");
2796         vfree(driver->apps_dci_buf);
2797         driver->apps_dci_buf = NULL;
2798
2799         if (driver->diag_dci_wq)
2800                 destroy_workqueue(driver->diag_dci_wq);
2801         vfree(partial_pkt.data);
2802         partial_pkt.data = NULL;
2803         mutex_destroy(&driver->dci_mutex);
2804         mutex_destroy(&dci_log_mask_mutex);
2805         mutex_destroy(&dci_event_mask_mutex);
2806         return DIAG_DCI_NO_REG;
2807 }
2808
2809 void diag_dci_channel_init(void)
2810 {
2811         uint8_t peripheral;
2812
2813         for (peripheral = 0; peripheral < NUM_PERIPHERALS; peripheral++) {
2814                 diagfwd_open(peripheral, TYPE_DCI);
2815                 diagfwd_open(peripheral, TYPE_DCI_CMD);
2816         }
2817 }
2818
2819 void diag_dci_exit(void)
2820 {
2821         vfree(partial_pkt.data);
2822         partial_pkt.data = NULL;
2823         vfree(driver->apps_dci_buf);
2824         driver->apps_dci_buf = NULL;
2825         mutex_destroy(&driver->dci_mutex);
2826         mutex_destroy(&dci_log_mask_mutex);
2827         mutex_destroy(&dci_event_mask_mutex);
2828         destroy_workqueue(driver->diag_dci_wq);
2829 }
2830
2831 int diag_dci_clear_log_mask(int client_id)
2832 {
2833         int err = DIAG_DCI_NO_ERROR, token = DCI_LOCAL_PROC;
2834         uint8_t *update_ptr;
2835         struct diag_dci_client_tbl *entry = NULL;
2836
2837         entry = diag_dci_get_client_entry(client_id);
2838         if (!entry) {
2839                 pr_err("diag: In %s, invalid client entry\n", __func__);
2840                 return DIAG_DCI_TABLE_ERR;
2841         }
2842         token = entry->client_info.token;
2843         update_ptr = dci_ops_tbl[token].log_mask_composite;
2844
2845         create_dci_log_mask_tbl(entry->dci_log_mask, DCI_LOG_MASK_CLEAN);
2846         diag_dci_invalidate_cumulative_log_mask(token);
2847
2848         /*
2849          * Send updated mask to userspace clients only if the client
2850          * is registered on the local processor
2851          */
2852         if (token == DCI_LOCAL_PROC)
2853                 diag_update_userspace_clients(DCI_LOG_MASKS_TYPE);
2854         /* Send updated mask to peripherals */
2855         err = dci_ops_tbl[token].send_log_mask(token);
2856         return err;
2857 }
2858
2859 int diag_dci_clear_event_mask(int client_id)
2860 {
2861         int err = DIAG_DCI_NO_ERROR, token = DCI_LOCAL_PROC;
2862         uint8_t *update_ptr;
2863         struct diag_dci_client_tbl *entry = NULL;
2864
2865         entry = diag_dci_get_client_entry(client_id);
2866         if (!entry) {
2867                 pr_err("diag: In %s, invalid client entry\n", __func__);
2868                 return DIAG_DCI_TABLE_ERR;
2869         }
2870         token = entry->client_info.token;
2871         update_ptr = dci_ops_tbl[token].event_mask_composite;
2872
2873         create_dci_event_mask_tbl(entry->dci_event_mask);
2874         diag_dci_invalidate_cumulative_event_mask(token);
2875
2876         /*
2877          * Send updated mask to userspace clients only if the client is
2878          * registerted on the local processor
2879          */
2880         if (token == DCI_LOCAL_PROC)
2881                 diag_update_userspace_clients(DCI_EVENT_MASKS_TYPE);
2882         /* Send updated mask to peripherals */
2883         err = dci_ops_tbl[token].send_event_mask(token);
2884         return err;
2885 }
2886
2887 uint8_t diag_dci_get_cumulative_real_time(int token)
2888 {
2889         uint8_t real_time = MODE_NONREALTIME;
2890         struct list_head *start, *temp;
2891         struct diag_dci_client_tbl *entry = NULL;
2892
2893         list_for_each_safe(start, temp, &driver->dci_client_list) {
2894                 entry = list_entry(start, struct diag_dci_client_tbl, track);
2895                 if (entry->real_time == MODE_REALTIME &&
2896                                         entry->client_info.token == token) {
2897                         real_time = 1;
2898                         break;
2899                 }
2900         }
2901         return real_time;
2902 }
2903
2904 int diag_dci_set_real_time(struct diag_dci_client_tbl *entry, uint8_t real_time)
2905 {
2906         if (!entry) {
2907                 pr_err("diag: In %s, invalid client entry\n", __func__);
2908                 return 0;
2909         }
2910         entry->real_time = real_time;
2911         return 1;
2912 }
2913
2914 int diag_dci_register_client(struct diag_dci_reg_tbl_t *reg_entry)
2915 {
2916         int i, err = 0;
2917         struct diag_dci_client_tbl *new_entry = NULL;
2918         struct diag_dci_buf_peripheral_t *proc_buf = NULL;
2919
2920         if (!reg_entry)
2921                 return DIAG_DCI_NO_REG;
2922         if (!VALID_DCI_TOKEN(reg_entry->token)) {
2923                 pr_alert("diag: Invalid DCI client token, %d\n",
2924                                                 reg_entry->token);
2925                 return DIAG_DCI_NO_REG;
2926         }
2927
2928         if (driver->dci_state == DIAG_DCI_NO_REG)
2929                 return DIAG_DCI_NO_REG;
2930
2931         if (driver->num_dci_client >= MAX_DCI_CLIENTS)
2932                 return DIAG_DCI_NO_REG;
2933
2934         new_entry = kzalloc(sizeof(struct diag_dci_client_tbl), GFP_KERNEL);
2935         if (new_entry == NULL) {
2936                 pr_err("diag: unable to alloc memory\n");
2937                 return DIAG_DCI_NO_REG;
2938         }
2939
2940         mutex_lock(&driver->dci_mutex);
2941
2942         new_entry->client = current;
2943         new_entry->tgid = current->tgid;
2944         new_entry->client_info.notification_list =
2945                                 reg_entry->notification_list;
2946         new_entry->client_info.signal_type =
2947                                 reg_entry->signal_type;
2948         new_entry->client_info.token = reg_entry->token;
2949         switch (reg_entry->token) {
2950         case DCI_LOCAL_PROC:
2951                 new_entry->num_buffers = NUM_DCI_PERIPHERALS;
2952                 break;
2953         case DCI_MDM_PROC:
2954                 new_entry->num_buffers = 1;
2955                 break;
2956         }
2957
2958         new_entry->buffers = NULL;
2959         new_entry->real_time = MODE_REALTIME;
2960         new_entry->in_service = 0;
2961         INIT_LIST_HEAD(&new_entry->list_write_buf);
2962         mutex_init(&new_entry->write_buf_mutex);
2963         new_entry->dci_log_mask =  vzalloc(DCI_LOG_MASK_SIZE);
2964         if (!new_entry->dci_log_mask) {
2965                 pr_err("diag: Unable to create log mask for client, %d",
2966                                                         driver->dci_client_id);
2967                 goto fail_alloc;
2968         }
2969         create_dci_log_mask_tbl(new_entry->dci_log_mask, DCI_LOG_MASK_CLEAN);
2970
2971         new_entry->dci_event_mask =  vzalloc(DCI_EVENT_MASK_SIZE);
2972         if (!new_entry->dci_event_mask) {
2973                 pr_err("diag: Unable to create event mask for client, %d",
2974                                                         driver->dci_client_id);
2975                 goto fail_alloc;
2976         }
2977         create_dci_event_mask_tbl(new_entry->dci_event_mask);
2978
2979         new_entry->buffers = kzalloc(new_entry->num_buffers *
2980                                      sizeof(struct diag_dci_buf_peripheral_t),
2981                                         GFP_KERNEL);
2982         if (!new_entry->buffers) {
2983                 pr_err("diag: Unable to allocate buffers for peripherals in %s\n",
2984                                                                 __func__);
2985                 goto fail_alloc;
2986         }
2987
2988         for (i = 0; i < new_entry->num_buffers; i++) {
2989                 proc_buf = &new_entry->buffers[i];
2990                 if (!proc_buf)
2991                         goto fail_alloc;
2992
2993                 mutex_init(&proc_buf->health_mutex);
2994                 mutex_init(&proc_buf->buf_mutex);
2995                 proc_buf->health.dropped_events = 0;
2996                 proc_buf->health.dropped_logs = 0;
2997                 proc_buf->health.received_events = 0;
2998                 proc_buf->health.received_logs = 0;
2999                 proc_buf->buf_primary = kzalloc(
3000                                         sizeof(struct diag_dci_buffer_t),
3001                                         GFP_KERNEL);
3002                 if (!proc_buf->buf_primary)
3003                         goto fail_alloc;
3004                 proc_buf->buf_cmd = kzalloc(sizeof(struct diag_dci_buffer_t),
3005                                         GFP_KERNEL);
3006                 if (!proc_buf->buf_cmd)
3007                         goto fail_alloc;
3008                 err = diag_dci_init_buffer(proc_buf->buf_primary,
3009                                            DCI_BUF_PRIMARY);
3010                 if (err)
3011                         goto fail_alloc;
3012                 err = diag_dci_init_buffer(proc_buf->buf_cmd, DCI_BUF_CMD);
3013                 if (err)
3014                         goto fail_alloc;
3015                 proc_buf->buf_curr = proc_buf->buf_primary;
3016         }
3017
3018         list_add_tail(&new_entry->track, &driver->dci_client_list);
3019         driver->dci_client_id++;
3020         new_entry->client_info.client_id = driver->dci_client_id;
3021         reg_entry->client_id = driver->dci_client_id;
3022         driver->num_dci_client++;
3023         if (driver->num_dci_client == 1)
3024                 diag_update_proc_vote(DIAG_PROC_DCI, VOTE_UP, reg_entry->token);
3025         queue_work(driver->diag_real_time_wq, &driver->diag_real_time_work);
3026         mutex_unlock(&driver->dci_mutex);
3027
3028         return driver->dci_client_id;
3029
3030 fail_alloc:
3031         if (new_entry) {
3032                 for (i = 0; ((i < new_entry->num_buffers) &&
3033                         new_entry->buffers); i++) {
3034                         proc_buf = &new_entry->buffers[i];
3035                         if (proc_buf) {
3036                                 mutex_destroy(&proc_buf->health_mutex);
3037                                 if (proc_buf->buf_primary) {
3038                                         vfree(proc_buf->buf_primary->data);
3039                                         proc_buf->buf_primary->data = NULL;
3040                                         mutex_destroy(
3041                                            &proc_buf->buf_primary->data_mutex);
3042                                 }
3043                                 kfree(proc_buf->buf_primary);
3044                                 proc_buf->buf_primary = NULL;
3045                                 if (proc_buf->buf_cmd) {
3046                                         vfree(proc_buf->buf_cmd->data);
3047                                         proc_buf->buf_cmd->data = NULL;
3048                                         mutex_destroy(
3049                                            &proc_buf->buf_cmd->data_mutex);
3050                                 }
3051                                 kfree(proc_buf->buf_cmd);
3052                                 proc_buf->buf_cmd = NULL;
3053                         }
3054                 }
3055                 vfree(new_entry->dci_event_mask);
3056                 new_entry->dci_event_mask = NULL;
3057                 vfree(new_entry->dci_log_mask);
3058                 new_entry->dci_log_mask = NULL;
3059                 kfree(new_entry->buffers);
3060                 new_entry->buffers = NULL;
3061                 kfree(new_entry);
3062                 new_entry = NULL;
3063         }
3064         mutex_unlock(&driver->dci_mutex);
3065         return DIAG_DCI_NO_REG;
3066 }
3067
3068 int diag_dci_deinit_client(struct diag_dci_client_tbl *entry)
3069 {
3070         int ret = DIAG_DCI_NO_ERROR, real_time = MODE_REALTIME, i, peripheral;
3071         struct diag_dci_buf_peripheral_t *proc_buf = NULL;
3072         struct diag_dci_buffer_t *buf_entry, *temp;
3073         struct list_head *start, *req_temp;
3074         struct dci_pkt_req_entry_t *req_entry = NULL;
3075         int token = DCI_LOCAL_PROC;
3076
3077         if (!entry)
3078                 return DIAG_DCI_NOT_SUPPORTED;
3079
3080         token = entry->client_info.token;
3081         /*
3082          * Remove the entry from the list before freeing the buffers
3083          * to ensure that we don't have any invalid access.
3084          */
3085         if (!list_empty(&entry->track))
3086                 list_del(&entry->track);
3087         driver->num_dci_client--;
3088         /*
3089          * Clear the client's log and event masks, update the cumulative
3090          * masks and send the masks to peripherals
3091          */
3092         vfree(entry->dci_log_mask);
3093         entry->dci_log_mask = NULL;
3094         diag_dci_invalidate_cumulative_log_mask(token);
3095         if (token == DCI_LOCAL_PROC)
3096                 diag_update_userspace_clients(DCI_LOG_MASKS_TYPE);
3097         ret = dci_ops_tbl[token].send_log_mask(token);
3098         if (ret != DIAG_DCI_NO_ERROR) {
3099                 return ret;
3100         }
3101         vfree(entry->dci_event_mask);
3102         entry->dci_event_mask = NULL;
3103         diag_dci_invalidate_cumulative_event_mask(token);
3104         if (token == DCI_LOCAL_PROC)
3105                 diag_update_userspace_clients(DCI_EVENT_MASKS_TYPE);
3106         ret = dci_ops_tbl[token].send_event_mask(token);
3107         if (ret != DIAG_DCI_NO_ERROR) {
3108                 return ret;
3109         }
3110
3111         list_for_each_safe(start, req_temp, &driver->dci_req_list) {
3112                 req_entry = list_entry(start, struct dci_pkt_req_entry_t,
3113                                        track);
3114                 if (req_entry->client_id == entry->client_info.client_id) {
3115                         if (!list_empty(&req_entry->track))
3116                                 list_del(&req_entry->track);
3117                         kfree(req_entry);
3118                         req_entry = NULL;
3119                 }
3120         }
3121
3122         /* Clean up any buffer that is pending write */
3123         mutex_lock(&entry->write_buf_mutex);
3124         list_for_each_entry_safe(buf_entry, temp, &entry->list_write_buf,
3125                                                         buf_track) {
3126                 if (!list_empty(&buf_entry->buf_track))
3127                         list_del(&buf_entry->buf_track);
3128                 if (buf_entry->buf_type == DCI_BUF_SECONDARY) {
3129                         mutex_lock(&buf_entry->data_mutex);
3130                         diagmem_free(driver, buf_entry->data, POOL_TYPE_DCI);
3131                         buf_entry->data = NULL;
3132                         mutex_unlock(&buf_entry->data_mutex);
3133                         kfree(buf_entry);
3134                         buf_entry = NULL;
3135                 } else if (buf_entry->buf_type == DCI_BUF_CMD) {
3136                         peripheral = buf_entry->data_source;
3137                         if (peripheral == APPS_DATA)
3138                                 continue;
3139                 }
3140                 /*
3141                  * These are buffers that can't be written to the client which
3142                  * means that the copy cannot be completed. Make sure that we
3143                  * remove those references in DCI wakeup source.
3144                  */
3145                 diag_ws_on_copy_fail(DIAG_WS_DCI);
3146         }
3147         mutex_unlock(&entry->write_buf_mutex);
3148
3149         for (i = 0; i < entry->num_buffers; i++) {
3150                 proc_buf = &entry->buffers[i];
3151                 buf_entry = proc_buf->buf_curr;
3152                 mutex_lock(&proc_buf->buf_mutex);
3153                 /* Clean up secondary buffer from mempool that is active */
3154                 if (buf_entry && buf_entry->buf_type == DCI_BUF_SECONDARY) {
3155                         mutex_lock(&buf_entry->data_mutex);
3156                         diagmem_free(driver, buf_entry->data, POOL_TYPE_DCI);
3157                         buf_entry->data = NULL;
3158                         mutex_unlock(&buf_entry->data_mutex);
3159                         mutex_destroy(&buf_entry->data_mutex);
3160                         kfree(buf_entry);
3161                         buf_entry = NULL;
3162                 }
3163
3164                 mutex_lock(&proc_buf->buf_primary->data_mutex);
3165                 vfree(proc_buf->buf_primary->data);
3166                 proc_buf->buf_primary->data = NULL;
3167                 mutex_unlock(&proc_buf->buf_primary->data_mutex);
3168
3169                 mutex_lock(&proc_buf->buf_cmd->data_mutex);
3170                 vfree(proc_buf->buf_cmd->data);
3171                 proc_buf->buf_cmd->data = NULL;
3172                 mutex_unlock(&proc_buf->buf_cmd->data_mutex);
3173
3174                 mutex_destroy(&proc_buf->health_mutex);
3175                 mutex_destroy(&proc_buf->buf_primary->data_mutex);
3176                 mutex_destroy(&proc_buf->buf_cmd->data_mutex);
3177
3178                 kfree(proc_buf->buf_primary);
3179                 proc_buf->buf_primary = NULL;
3180                 kfree(proc_buf->buf_cmd);
3181                 proc_buf->buf_cmd = NULL;
3182                 mutex_unlock(&proc_buf->buf_mutex);
3183         }
3184         mutex_destroy(&entry->write_buf_mutex);
3185
3186         kfree(entry->buffers);
3187         entry->buffers = NULL;
3188         kfree(entry);
3189         entry = NULL;
3190
3191         if (driver->num_dci_client == 0) {
3192                 diag_update_proc_vote(DIAG_PROC_DCI, VOTE_DOWN, token);
3193         } else {
3194                 real_time = diag_dci_get_cumulative_real_time(token);
3195                 diag_update_real_time_vote(DIAG_PROC_DCI, real_time, token);
3196         }
3197         queue_work(driver->diag_real_time_wq, &driver->diag_real_time_work);
3198
3199         return DIAG_DCI_NO_ERROR;
3200 }
3201
3202 int diag_dci_write_proc(uint8_t peripheral, int pkt_type, char *buf, int len)
3203 {
3204         uint8_t dest_channel = TYPE_DATA;
3205         int err = 0;
3206
3207         if (!buf || peripheral >= NUM_PERIPHERALS || len < 0 ||
3208             !(driver->feature[PERIPHERAL_MODEM].rcvd_feature_mask)) {
3209                 DIAG_LOG(DIAG_DEBUG_DCI,
3210                         "buf: 0x%pK, p: %d, len: %d, f_mask: %d\n",
3211                         buf, peripheral, len,
3212                         driver->feature[PERIPHERAL_MODEM].rcvd_feature_mask);
3213                 return -EINVAL;
3214         }
3215
3216         if (pkt_type == DIAG_DATA_TYPE) {
3217                 dest_channel = TYPE_DCI_CMD;
3218         } else if (pkt_type == DIAG_CNTL_TYPE) {
3219                 dest_channel = TYPE_CNTL;
3220         } else {
3221                 pr_err("diag: Invalid DCI pkt type in %s", __func__);
3222                 return -EINVAL;
3223         }
3224
3225         err = diagfwd_write(peripheral, dest_channel, buf, len);
3226         if (err && err != -ENODEV) {
3227                 pr_err("diag: In %s, unable to write to peripheral: %d, type: %d, len: %d, err: %d\n",
3228                        __func__, peripheral, dest_channel, len, err);
3229         } else {
3230                 err = DIAG_DCI_NO_ERROR;
3231         }
3232
3233         return err;
3234 }
3235
3236 int diag_dci_copy_health_stats(struct diag_dci_health_stats_proc *stats_proc)
3237 {
3238         struct diag_dci_client_tbl *entry = NULL;
3239         struct diag_dci_health_t *health = NULL;
3240         struct diag_dci_health_stats *stats = NULL;
3241         int i, proc;
3242
3243         if (!stats_proc)
3244                 return -EINVAL;
3245
3246         stats = &stats_proc->health;
3247         proc = stats_proc->proc;
3248         if (proc < ALL_PROC || proc > APPS_DATA)
3249                 return -EINVAL;
3250
3251         entry = diag_dci_get_client_entry(stats_proc->client_id);
3252         if (!entry)
3253                 return DIAG_DCI_NOT_SUPPORTED;
3254
3255         /*
3256          * If the client has registered for remote processor, the
3257          * proc field doesn't have any effect as they have only one buffer.
3258          */
3259         if (entry->client_info.token)
3260                 proc = 0;
3261
3262         stats->stats.dropped_logs = 0;
3263         stats->stats.dropped_events = 0;
3264         stats->stats.received_logs = 0;
3265         stats->stats.received_events = 0;
3266
3267         if (proc != ALL_PROC) {
3268                 health = &entry->buffers[proc].health;
3269                 stats->stats.dropped_logs = health->dropped_logs;
3270                 stats->stats.dropped_events = health->dropped_events;
3271                 stats->stats.received_logs = health->received_logs;
3272                 stats->stats.received_events = health->received_events;
3273                 if (stats->reset_status) {
3274                         mutex_lock(&entry->buffers[proc].health_mutex);
3275                         health->dropped_logs = 0;
3276                         health->dropped_events = 0;
3277                         health->received_logs = 0;
3278                         health->received_events = 0;
3279                         mutex_unlock(&entry->buffers[proc].health_mutex);
3280                 }
3281                 return DIAG_DCI_NO_ERROR;
3282         }
3283
3284         for (i = 0; i < entry->num_buffers; i++) {
3285                 health = &entry->buffers[i].health;
3286                 stats->stats.dropped_logs += health->dropped_logs;
3287                 stats->stats.dropped_events += health->dropped_events;
3288                 stats->stats.received_logs += health->received_logs;
3289                 stats->stats.received_events += health->received_events;
3290                 if (stats->reset_status) {
3291                         mutex_lock(&entry->buffers[i].health_mutex);
3292                         health->dropped_logs = 0;
3293                         health->dropped_events = 0;
3294                         health->received_logs = 0;
3295                         health->received_events = 0;
3296                         mutex_unlock(&entry->buffers[i].health_mutex);
3297                 }
3298         }
3299         return DIAG_DCI_NO_ERROR;
3300 }
3301
3302 int diag_dci_get_support_list(struct diag_dci_peripherals_t *support_list)
3303 {
3304         if (!support_list)
3305                 return -ENOMEM;
3306
3307         if (!VALID_DCI_TOKEN(support_list->proc))
3308                 return -EIO;
3309
3310         support_list->list = dci_ops_tbl[support_list->proc].peripheral_status;
3311         return DIAG_DCI_NO_ERROR;
3312 }