Skip to content

Commit d04b21b

Browse files
fancervinodkoul
authored andcommitted
dmaengine: dw: Add memory bus width verification
Currently in case of the DEV_TO_MEM or MEM_TO_DEV DMA transfers the memory data width (single transfer width) is determined based on the buffer length, buffer base address or DMA master-channel max address width capability. It isn't enough in case of the channel disabling prior the block transfer is finished. Here is what DW AHB DMA IP-core databook says regarding the port suspension (DMA-transfer pause) implementation in the controller: "When CTLx.SRC_TR_WIDTH < CTLx.DST_TR_WIDTH and the CFGx.CH_SUSP bit is high, the CFGx.FIFO_EMPTY is asserted once the contents of the FIFO do not permit a single word of CTLx.DST_TR_WIDTH to be formed. However, there may still be data in the channel FIFO, but not enough to form a single transfer of CTLx.DST_TR_WIDTH. In this scenario, once the channel is disabled, the remaining data in the channel FIFO is not transferred to the destination peripheral." So in case if the port gets to be suspended and then disabled it's possible to have the data silently discarded even though the controller reported that FIFO is empty and the CTLx.BLOCK_TS indicated the dropped data already received from the source device. This looks as if the data somehow got lost on a way from the peripheral device to memory and causes problems for instance in the DW APB UART driver, which pauses and disables the DMA-transfer as soon as the recv data timeout happens. Here is the way it looks: Memory <------- DMA FIFO <------ UART FIFO <---------------- UART DST_TR_WIDTH -+--------| | | | | | | No more data Current lvl -+--------| |---------+- DMA-burst lvl | | |---------+- Leftover data | | |---------+- SRC_TR_WIDTH -+--------+-------+---------+ In the example above: no more data is getting received over the UART port and BLOCK_TS is not even close to be fully received; some data is left in the UART FIFO, but not enough to perform a bursted DMA-xfer to the DMA FIFO; some data is left in the DMA FIFO, but not enough to be passed further to the system memory in a single transfer. In this situation the 8250 UART driver catches the recv timeout interrupt, pauses the DMA-transfer and terminates it completely, after which the IRQ handler manually fetches the leftover data from the UART FIFO into the recv-buffer. But since the DMA-channel has been disabled with the data left in the DMA FIFO, that data will be just discarded and the recv-buffer will have a gap of the "current lvl" size in the recv-buffer at the tail of the lately received data portion. So the data will be lost just due to the misconfigured DMA transfer. Note this is only relevant for the case of the transfer suspension and _disabling_. No problem will happen if the transfer will be re-enabled afterwards or the block transfer is fully completed. In the later case the "FIFO flush mode" will be executed at the transfer final stage in order to push out the data left in the DMA FIFO. In order to fix the denoted problem the DW AHB DMA-engine driver needs to make sure that the _bursted_ source transfer width is greater or equal to the single destination transfer (note the HW databook describes more strict constraint than actually required). Since the peripheral-device side is prescribed by the client driver logic, the memory-side can be only used for that. The solution can be easily implemented for the DEV_TO_MEM transfers just by adjusting the memory-channel address width. Sadly it's not that easy for the MEM_TO_DEV transfers since the mem-to-dma burst size is normally dynamically determined by the controller. So the only thing that can be done is to make sure that memory-side address width is greater than the peripheral device address width. Fixes: a098200 ("dw_dmac: autoconfigure data_width or get it via platform data") Signed-off-by: Serge Semin <fancer.lancer@gmail.com> Acked-by: Andy Shevchenko <andy@kernel.org> Link: https://lore.kernel.org/r/20240802075100.6475-3-fancer.lancer@gmail.com Signed-off-by: Vinod Koul <vkoul@kernel.org>
1 parent b336268 commit d04b21b

1 file changed

Lines changed: 44 additions & 7 deletions

File tree

drivers/dma/dw/core.c

Lines changed: 44 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -622,12 +622,10 @@ dwc_prep_slave_sg(struct dma_chan *chan, struct scatterlist *sgl,
622622
struct dw_desc *prev;
623623
struct dw_desc *first;
624624
u32 ctllo, ctlhi;
625-
u8 m_master = dwc->dws.m_master;
626-
u8 lms = DWC_LLP_LMS(m_master);
625+
u8 lms = DWC_LLP_LMS(dwc->dws.m_master);
627626
dma_addr_t reg;
628627
unsigned int reg_width;
629628
unsigned int mem_width;
630-
unsigned int data_width = dw->pdata->data_width[m_master];
631629
unsigned int i;
632630
struct scatterlist *sg;
633631
size_t total_len = 0;
@@ -661,7 +659,7 @@ dwc_prep_slave_sg(struct dma_chan *chan, struct scatterlist *sgl,
661659
mem = sg_dma_address(sg);
662660
len = sg_dma_len(sg);
663661

664-
mem_width = __ffs(data_width | mem | len);
662+
mem_width = __ffs(sconfig->src_addr_width | mem | len);
665663

666664
slave_sg_todev_fill_desc:
667665
desc = dwc_desc_get(dwc);
@@ -721,7 +719,7 @@ dwc_prep_slave_sg(struct dma_chan *chan, struct scatterlist *sgl,
721719
lli_write(desc, sar, reg);
722720
lli_write(desc, dar, mem);
723721
lli_write(desc, ctlhi, ctlhi);
724-
mem_width = __ffs(data_width | mem);
722+
mem_width = __ffs(sconfig->dst_addr_width | mem);
725723
lli_write(desc, ctllo, ctllo | DWC_CTLL_DST_WIDTH(mem_width));
726724
desc->len = dlen;
727725

@@ -813,6 +811,41 @@ static int dwc_verify_p_buswidth(struct dma_chan *chan)
813811
return 0;
814812
}
815813

814+
static int dwc_verify_m_buswidth(struct dma_chan *chan)
815+
{
816+
struct dw_dma_chan *dwc = to_dw_dma_chan(chan);
817+
struct dw_dma *dw = to_dw_dma(chan->device);
818+
u32 reg_width, reg_burst, mem_width;
819+
820+
mem_width = dw->pdata->data_width[dwc->dws.m_master];
821+
822+
/*
823+
* It's possible to have a data portion locked in the DMA FIFO in case
824+
* of the channel suspension. Subsequent channel disabling will cause
825+
* that data silent loss. In order to prevent that maintain the src and
826+
* dst transfer widths coherency by means of the relation:
827+
* (CTLx.SRC_TR_WIDTH * CTLx.SRC_MSIZE >= CTLx.DST_TR_WIDTH)
828+
* Look for the details in the commit message that brings this change.
829+
*
830+
* Note the DMA configs utilized in the calculations below must have
831+
* been verified to have correct values by this method call.
832+
*/
833+
if (dwc->dma_sconfig.direction == DMA_MEM_TO_DEV) {
834+
reg_width = dwc->dma_sconfig.dst_addr_width;
835+
if (mem_width < reg_width)
836+
return -EINVAL;
837+
838+
dwc->dma_sconfig.src_addr_width = mem_width;
839+
} else if (dwc->dma_sconfig.direction == DMA_DEV_TO_MEM) {
840+
reg_width = dwc->dma_sconfig.src_addr_width;
841+
reg_burst = rounddown_pow_of_two(dwc->dma_sconfig.src_maxburst);
842+
843+
dwc->dma_sconfig.dst_addr_width = min(mem_width, reg_width * reg_burst);
844+
}
845+
846+
return 0;
847+
}
848+
816849
static int dwc_config(struct dma_chan *chan, struct dma_slave_config *sconfig)
817850
{
818851
struct dw_dma_chan *dwc = to_dw_dma_chan(chan);
@@ -822,14 +855,18 @@ static int dwc_config(struct dma_chan *chan, struct dma_slave_config *sconfig)
822855
memcpy(&dwc->dma_sconfig, sconfig, sizeof(*sconfig));
823856

824857
dwc->dma_sconfig.src_maxburst =
825-
clamp(dwc->dma_sconfig.src_maxburst, 0U, dwc->max_burst);
858+
clamp(dwc->dma_sconfig.src_maxburst, 1U, dwc->max_burst);
826859
dwc->dma_sconfig.dst_maxburst =
827-
clamp(dwc->dma_sconfig.dst_maxburst, 0U, dwc->max_burst);
860+
clamp(dwc->dma_sconfig.dst_maxburst, 1U, dwc->max_burst);
828861

829862
ret = dwc_verify_p_buswidth(chan);
830863
if (ret)
831864
return ret;
832865

866+
ret = dwc_verify_m_buswidth(chan);
867+
if (ret)
868+
return ret;
869+
833870
dw->encode_maxburst(dwc, &dwc->dma_sconfig.src_maxburst);
834871
dw->encode_maxburst(dwc, &dwc->dma_sconfig.dst_maxburst);
835872

0 commit comments

Comments
 (0)