xref: /dragonfly/sys/dev/drm/drm_dp_mst_topology.c (revision abf903a5)
1 /*
2  * Copyright © 2014 Red Hat
3  *
4  * Permission to use, copy, modify, distribute, and sell this software and its
5  * documentation for any purpose is hereby granted without fee, provided that
6  * the above copyright notice appear in all copies and that both that copyright
7  * notice and this permission notice appear in supporting documentation, and
8  * that the name of the copyright holders not be used in advertising or
9  * publicity pertaining to distribution of the software without specific,
10  * written prior permission.  The copyright holders make no representations
11  * about the suitability of this software for any purpose.  It is provided "as
12  * is" without express or implied warranty.
13  *
14  * THE COPYRIGHT HOLDERS DISCLAIM ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
15  * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
16  * EVENT SHALL THE COPYRIGHT HOLDERS BE LIABLE FOR ANY SPECIAL, INDIRECT OR
17  * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
18  * DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
19  * TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE
20  * OF THIS SOFTWARE.
21  */
22 
23 #include <linux/kernel.h>
24 #include <linux/delay.h>
25 #include <linux/errno.h>
26 #include <linux/sched.h>
27 #include <linux/seq_file.h>
28 #include <linux/i2c.h>
29 #include <drm/drm_dp_mst_helper.h>
30 #include <drm/drmP.h>
31 
32 #include <drm/drm_fixed.h>
33 
34 /**
35  * DOC: dp mst helper
36  *
37  * These functions contain parts of the DisplayPort 1.2a MultiStream Transport
38  * protocol. The helpers contain a topology manager and bandwidth manager.
39  * The helpers encapsulate the sending and received of sideband msgs.
40  */
41 static bool dump_dp_payload_table(struct drm_dp_mst_topology_mgr *mgr,
42 				  char *buf);
43 static int test_calc_pbn_mode(void);
44 
45 static void drm_dp_put_port(struct drm_dp_mst_port *port);
46 
47 static int drm_dp_dpcd_write_payload(struct drm_dp_mst_topology_mgr *mgr,
48 				     int id,
49 				     struct drm_dp_payload *payload);
50 
51 static int drm_dp_send_dpcd_write(struct drm_dp_mst_topology_mgr *mgr,
52 				  struct drm_dp_mst_port *port,
53 				  int offset, int size, u8 *bytes);
54 
55 static void drm_dp_send_link_address(struct drm_dp_mst_topology_mgr *mgr,
56 				     struct drm_dp_mst_branch *mstb);
57 static int drm_dp_send_enum_path_resources(struct drm_dp_mst_topology_mgr *mgr,
58 					   struct drm_dp_mst_branch *mstb,
59 					   struct drm_dp_mst_port *port);
60 static bool drm_dp_validate_guid(struct drm_dp_mst_topology_mgr *mgr,
61 				 u8 *guid);
62 
63 static int drm_dp_mst_register_i2c_bus(struct drm_dp_aux *aux);
64 static void drm_dp_mst_unregister_i2c_bus(struct drm_dp_aux *aux);
65 static void drm_dp_mst_kick_tx(struct drm_dp_mst_topology_mgr *mgr);
66 /* sideband msg handling */
67 static u8 drm_dp_msg_header_crc4(const uint8_t *data, size_t num_nibbles)
68 {
69 	u8 bitmask = 0x80;
70 	u8 bitshift = 7;
71 	u8 array_index = 0;
72 	int number_of_bits = num_nibbles * 4;
73 	u8 remainder = 0;
74 
75 	while (number_of_bits != 0) {
76 		number_of_bits--;
77 		remainder <<= 1;
78 		remainder |= (data[array_index] & bitmask) >> bitshift;
79 		bitmask >>= 1;
80 		bitshift--;
81 		if (bitmask == 0) {
82 			bitmask = 0x80;
83 			bitshift = 7;
84 			array_index++;
85 		}
86 		if ((remainder & 0x10) == 0x10)
87 			remainder ^= 0x13;
88 	}
89 
90 	number_of_bits = 4;
91 	while (number_of_bits != 0) {
92 		number_of_bits--;
93 		remainder <<= 1;
94 		if ((remainder & 0x10) != 0)
95 			remainder ^= 0x13;
96 	}
97 
98 	return remainder;
99 }
100 
101 static u8 drm_dp_msg_data_crc4(const uint8_t *data, u8 number_of_bytes)
102 {
103 	u8 bitmask = 0x80;
104 	u8 bitshift = 7;
105 	u8 array_index = 0;
106 	int number_of_bits = number_of_bytes * 8;
107 	u16 remainder = 0;
108 
109 	while (number_of_bits != 0) {
110 		number_of_bits--;
111 		remainder <<= 1;
112 		remainder |= (data[array_index] & bitmask) >> bitshift;
113 		bitmask >>= 1;
114 		bitshift--;
115 		if (bitmask == 0) {
116 			bitmask = 0x80;
117 			bitshift = 7;
118 			array_index++;
119 		}
120 		if ((remainder & 0x100) == 0x100)
121 			remainder ^= 0xd5;
122 	}
123 
124 	number_of_bits = 8;
125 	while (number_of_bits != 0) {
126 		number_of_bits--;
127 		remainder <<= 1;
128 		if ((remainder & 0x100) != 0)
129 			remainder ^= 0xd5;
130 	}
131 
132 	return remainder & 0xff;
133 }
134 static inline u8 drm_dp_calc_sb_hdr_size(struct drm_dp_sideband_msg_hdr *hdr)
135 {
136 	u8 size = 3;
137 	size += (hdr->lct / 2);
138 	return size;
139 }
140 
141 static void drm_dp_encode_sideband_msg_hdr(struct drm_dp_sideband_msg_hdr *hdr,
142 					   u8 *buf, int *len)
143 {
144 	int idx = 0;
145 	int i;
146 	u8 crc4;
147 	buf[idx++] = ((hdr->lct & 0xf) << 4) | (hdr->lcr & 0xf);
148 	for (i = 0; i < (hdr->lct / 2); i++)
149 		buf[idx++] = hdr->rad[i];
150 	buf[idx++] = (hdr->broadcast << 7) | (hdr->path_msg << 6) |
151 		(hdr->msg_len & 0x3f);
152 	buf[idx++] = (hdr->somt << 7) | (hdr->eomt << 6) | (hdr->seqno << 4);
153 
154 	crc4 = drm_dp_msg_header_crc4(buf, (idx * 2) - 1);
155 	buf[idx - 1] |= (crc4 & 0xf);
156 
157 	*len = idx;
158 }
159 
160 static bool drm_dp_decode_sideband_msg_hdr(struct drm_dp_sideband_msg_hdr *hdr,
161 					   u8 *buf, int buflen, u8 *hdrlen)
162 {
163 	u8 crc4;
164 	u8 len;
165 	int i;
166 	u8 idx;
167 	if (buf[0] == 0)
168 		return false;
169 	len = 3;
170 	len += ((buf[0] & 0xf0) >> 4) / 2;
171 	if (len > buflen)
172 		return false;
173 	crc4 = drm_dp_msg_header_crc4(buf, (len * 2) - 1);
174 
175 	if ((crc4 & 0xf) != (buf[len - 1] & 0xf)) {
176 		DRM_DEBUG_KMS("crc4 mismatch 0x%x 0x%x\n", crc4, buf[len - 1]);
177 		return false;
178 	}
179 
180 	hdr->lct = (buf[0] & 0xf0) >> 4;
181 	hdr->lcr = (buf[0] & 0xf);
182 	idx = 1;
183 	for (i = 0; i < (hdr->lct / 2); i++)
184 		hdr->rad[i] = buf[idx++];
185 	hdr->broadcast = (buf[idx] >> 7) & 0x1;
186 	hdr->path_msg = (buf[idx] >> 6) & 0x1;
187 	hdr->msg_len = buf[idx] & 0x3f;
188 	idx++;
189 	hdr->somt = (buf[idx] >> 7) & 0x1;
190 	hdr->eomt = (buf[idx] >> 6) & 0x1;
191 	hdr->seqno = (buf[idx] >> 4) & 0x1;
192 	idx++;
193 	*hdrlen = idx;
194 	return true;
195 }
196 
197 static void drm_dp_encode_sideband_req(struct drm_dp_sideband_msg_req_body *req,
198 				       struct drm_dp_sideband_msg_tx *raw)
199 {
200 	int idx = 0;
201 	int i;
202 	u8 *buf = raw->msg;
203 	buf[idx++] = req->req_type & 0x7f;
204 
205 	switch (req->req_type) {
206 	case DP_ENUM_PATH_RESOURCES:
207 		buf[idx] = (req->u.port_num.port_number & 0xf) << 4;
208 		idx++;
209 		break;
210 	case DP_ALLOCATE_PAYLOAD:
211 		buf[idx] = (req->u.allocate_payload.port_number & 0xf) << 4 |
212 			(req->u.allocate_payload.number_sdp_streams & 0xf);
213 		idx++;
214 		buf[idx] = (req->u.allocate_payload.vcpi & 0x7f);
215 		idx++;
216 		buf[idx] = (req->u.allocate_payload.pbn >> 8);
217 		idx++;
218 		buf[idx] = (req->u.allocate_payload.pbn & 0xff);
219 		idx++;
220 		for (i = 0; i < req->u.allocate_payload.number_sdp_streams / 2; i++) {
221 			buf[idx] = ((req->u.allocate_payload.sdp_stream_sink[i * 2] & 0xf) << 4) |
222 				(req->u.allocate_payload.sdp_stream_sink[i * 2 + 1] & 0xf);
223 			idx++;
224 		}
225 		if (req->u.allocate_payload.number_sdp_streams & 1) {
226 			i = req->u.allocate_payload.number_sdp_streams - 1;
227 			buf[idx] = (req->u.allocate_payload.sdp_stream_sink[i] & 0xf) << 4;
228 			idx++;
229 		}
230 		break;
231 	case DP_QUERY_PAYLOAD:
232 		buf[idx] = (req->u.query_payload.port_number & 0xf) << 4;
233 		idx++;
234 		buf[idx] = (req->u.query_payload.vcpi & 0x7f);
235 		idx++;
236 		break;
237 	case DP_REMOTE_DPCD_READ:
238 		buf[idx] = (req->u.dpcd_read.port_number & 0xf) << 4;
239 		buf[idx] |= ((req->u.dpcd_read.dpcd_address & 0xf0000) >> 16) & 0xf;
240 		idx++;
241 		buf[idx] = (req->u.dpcd_read.dpcd_address & 0xff00) >> 8;
242 		idx++;
243 		buf[idx] = (req->u.dpcd_read.dpcd_address & 0xff);
244 		idx++;
245 		buf[idx] = (req->u.dpcd_read.num_bytes);
246 		idx++;
247 		break;
248 
249 	case DP_REMOTE_DPCD_WRITE:
250 		buf[idx] = (req->u.dpcd_write.port_number & 0xf) << 4;
251 		buf[idx] |= ((req->u.dpcd_write.dpcd_address & 0xf0000) >> 16) & 0xf;
252 		idx++;
253 		buf[idx] = (req->u.dpcd_write.dpcd_address & 0xff00) >> 8;
254 		idx++;
255 		buf[idx] = (req->u.dpcd_write.dpcd_address & 0xff);
256 		idx++;
257 		buf[idx] = (req->u.dpcd_write.num_bytes);
258 		idx++;
259 		memcpy(&buf[idx], req->u.dpcd_write.bytes, req->u.dpcd_write.num_bytes);
260 		idx += req->u.dpcd_write.num_bytes;
261 		break;
262 	case DP_REMOTE_I2C_READ:
263 		buf[idx] = (req->u.i2c_read.port_number & 0xf) << 4;
264 		buf[idx] |= (req->u.i2c_read.num_transactions & 0x3);
265 		idx++;
266 		for (i = 0; i < (req->u.i2c_read.num_transactions & 0x3); i++) {
267 			buf[idx] = req->u.i2c_read.transactions[i].i2c_dev_id & 0x7f;
268 			idx++;
269 			buf[idx] = req->u.i2c_read.transactions[i].num_bytes;
270 			idx++;
271 			memcpy(&buf[idx], req->u.i2c_read.transactions[i].bytes, req->u.i2c_read.transactions[i].num_bytes);
272 			idx += req->u.i2c_read.transactions[i].num_bytes;
273 
274 			buf[idx] = (req->u.i2c_read.transactions[i].no_stop_bit & 0x1) << 5;
275 			buf[idx] |= (req->u.i2c_read.transactions[i].i2c_transaction_delay & 0xf);
276 			idx++;
277 		}
278 		buf[idx] = (req->u.i2c_read.read_i2c_device_id) & 0x7f;
279 		idx++;
280 		buf[idx] = (req->u.i2c_read.num_bytes_read);
281 		idx++;
282 		break;
283 
284 	case DP_REMOTE_I2C_WRITE:
285 		buf[idx] = (req->u.i2c_write.port_number & 0xf) << 4;
286 		idx++;
287 		buf[idx] = (req->u.i2c_write.write_i2c_device_id) & 0x7f;
288 		idx++;
289 		buf[idx] = (req->u.i2c_write.num_bytes);
290 		idx++;
291 		memcpy(&buf[idx], req->u.i2c_write.bytes, req->u.i2c_write.num_bytes);
292 		idx += req->u.i2c_write.num_bytes;
293 		break;
294 	}
295 	raw->cur_len = idx;
296 }
297 
298 static void drm_dp_crc_sideband_chunk_req(u8 *msg, u8 len)
299 {
300 	u8 crc4;
301 	crc4 = drm_dp_msg_data_crc4(msg, len);
302 	msg[len] = crc4;
303 }
304 
305 static void drm_dp_encode_sideband_reply(struct drm_dp_sideband_msg_reply_body *rep,
306 					 struct drm_dp_sideband_msg_tx *raw)
307 {
308 	int idx = 0;
309 	u8 *buf = raw->msg;
310 
311 	buf[idx++] = (rep->reply_type & 0x1) << 7 | (rep->req_type & 0x7f);
312 
313 	raw->cur_len = idx;
314 }
315 
316 /* this adds a chunk of msg to the builder to get the final msg */
317 static bool drm_dp_sideband_msg_build(struct drm_dp_sideband_msg_rx *msg,
318 				      u8 *replybuf, u8 replybuflen, bool hdr)
319 {
320 	int ret;
321 	u8 crc4;
322 
323 	if (hdr) {
324 		u8 hdrlen;
325 		struct drm_dp_sideband_msg_hdr recv_hdr;
326 		ret = drm_dp_decode_sideband_msg_hdr(&recv_hdr, replybuf, replybuflen, &hdrlen);
327 		if (ret == false) {
328 			print_hex_dump(KERN_DEBUG, "failed hdr", DUMP_PREFIX_NONE, 16, 1, replybuf, replybuflen, false);
329 			return false;
330 		}
331 
332 		/* get length contained in this portion */
333 		msg->curchunk_len = recv_hdr.msg_len;
334 		msg->curchunk_hdrlen = hdrlen;
335 
336 		/* we have already gotten an somt - don't bother parsing */
337 		if (recv_hdr.somt && msg->have_somt)
338 			return false;
339 
340 		if (recv_hdr.somt) {
341 			memcpy(&msg->initial_hdr, &recv_hdr, sizeof(struct drm_dp_sideband_msg_hdr));
342 			msg->have_somt = true;
343 		}
344 		if (recv_hdr.eomt)
345 			msg->have_eomt = true;
346 
347 		/* copy the bytes for the remainder of this header chunk */
348 		msg->curchunk_idx = min(msg->curchunk_len, (u8)(replybuflen - hdrlen));
349 		memcpy(&msg->chunk[0], replybuf + hdrlen, msg->curchunk_idx);
350 	} else {
351 		memcpy(&msg->chunk[msg->curchunk_idx], replybuf, replybuflen);
352 		msg->curchunk_idx += replybuflen;
353 	}
354 
355 	if (msg->curchunk_idx >= msg->curchunk_len) {
356 		/* do CRC */
357 		crc4 = drm_dp_msg_data_crc4(msg->chunk, msg->curchunk_len - 1);
358 		/* copy chunk into bigger msg */
359 		memcpy(&msg->msg[msg->curlen], msg->chunk, msg->curchunk_len - 1);
360 		msg->curlen += msg->curchunk_len - 1;
361 	}
362 	return true;
363 }
364 
365 static bool drm_dp_sideband_parse_link_address(struct drm_dp_sideband_msg_rx *raw,
366 					       struct drm_dp_sideband_msg_reply_body *repmsg)
367 {
368 	int idx = 1;
369 	int i;
370 	memcpy(repmsg->u.link_addr.guid, &raw->msg[idx], 16);
371 	idx += 16;
372 	repmsg->u.link_addr.nports = raw->msg[idx] & 0xf;
373 	idx++;
374 	if (idx > raw->curlen)
375 		goto fail_len;
376 	for (i = 0; i < repmsg->u.link_addr.nports; i++) {
377 		if (raw->msg[idx] & 0x80)
378 			repmsg->u.link_addr.ports[i].input_port = 1;
379 
380 		repmsg->u.link_addr.ports[i].peer_device_type = (raw->msg[idx] >> 4) & 0x7;
381 		repmsg->u.link_addr.ports[i].port_number = (raw->msg[idx] & 0xf);
382 
383 		idx++;
384 		if (idx > raw->curlen)
385 			goto fail_len;
386 		repmsg->u.link_addr.ports[i].mcs = (raw->msg[idx] >> 7) & 0x1;
387 		repmsg->u.link_addr.ports[i].ddps = (raw->msg[idx] >> 6) & 0x1;
388 		if (repmsg->u.link_addr.ports[i].input_port == 0)
389 			repmsg->u.link_addr.ports[i].legacy_device_plug_status = (raw->msg[idx] >> 5) & 0x1;
390 		idx++;
391 		if (idx > raw->curlen)
392 			goto fail_len;
393 		if (repmsg->u.link_addr.ports[i].input_port == 0) {
394 			repmsg->u.link_addr.ports[i].dpcd_revision = (raw->msg[idx]);
395 			idx++;
396 			if (idx > raw->curlen)
397 				goto fail_len;
398 			memcpy(repmsg->u.link_addr.ports[i].peer_guid, &raw->msg[idx], 16);
399 			idx += 16;
400 			if (idx > raw->curlen)
401 				goto fail_len;
402 			repmsg->u.link_addr.ports[i].num_sdp_streams = (raw->msg[idx] >> 4) & 0xf;
403 			repmsg->u.link_addr.ports[i].num_sdp_stream_sinks = (raw->msg[idx] & 0xf);
404 			idx++;
405 
406 		}
407 		if (idx > raw->curlen)
408 			goto fail_len;
409 	}
410 
411 	return true;
412 fail_len:
413 	DRM_DEBUG_KMS("link address reply parse length fail %d %d\n", idx, raw->curlen);
414 	return false;
415 }
416 
417 static bool drm_dp_sideband_parse_remote_dpcd_read(struct drm_dp_sideband_msg_rx *raw,
418 						   struct drm_dp_sideband_msg_reply_body *repmsg)
419 {
420 	int idx = 1;
421 	repmsg->u.remote_dpcd_read_ack.port_number = raw->msg[idx] & 0xf;
422 	idx++;
423 	if (idx > raw->curlen)
424 		goto fail_len;
425 	repmsg->u.remote_dpcd_read_ack.num_bytes = raw->msg[idx];
426 	if (idx > raw->curlen)
427 		goto fail_len;
428 
429 	memcpy(repmsg->u.remote_dpcd_read_ack.bytes, &raw->msg[idx], repmsg->u.remote_dpcd_read_ack.num_bytes);
430 	return true;
431 fail_len:
432 	DRM_DEBUG_KMS("link address reply parse length fail %d %d\n", idx, raw->curlen);
433 	return false;
434 }
435 
436 static bool drm_dp_sideband_parse_remote_dpcd_write(struct drm_dp_sideband_msg_rx *raw,
437 						      struct drm_dp_sideband_msg_reply_body *repmsg)
438 {
439 	int idx = 1;
440 	repmsg->u.remote_dpcd_write_ack.port_number = raw->msg[idx] & 0xf;
441 	idx++;
442 	if (idx > raw->curlen)
443 		goto fail_len;
444 	return true;
445 fail_len:
446 	DRM_DEBUG_KMS("parse length fail %d %d\n", idx, raw->curlen);
447 	return false;
448 }
449 
450 static bool drm_dp_sideband_parse_remote_i2c_read_ack(struct drm_dp_sideband_msg_rx *raw,
451 						      struct drm_dp_sideband_msg_reply_body *repmsg)
452 {
453 	int idx = 1;
454 
455 	repmsg->u.remote_i2c_read_ack.port_number = (raw->msg[idx] & 0xf);
456 	idx++;
457 	if (idx > raw->curlen)
458 		goto fail_len;
459 	repmsg->u.remote_i2c_read_ack.num_bytes = raw->msg[idx];
460 	idx++;
461 	/* TODO check */
462 	memcpy(repmsg->u.remote_i2c_read_ack.bytes, &raw->msg[idx], repmsg->u.remote_i2c_read_ack.num_bytes);
463 	return true;
464 fail_len:
465 	DRM_DEBUG_KMS("remote i2c reply parse length fail %d %d\n", idx, raw->curlen);
466 	return false;
467 }
468 
469 static bool drm_dp_sideband_parse_enum_path_resources_ack(struct drm_dp_sideband_msg_rx *raw,
470 							  struct drm_dp_sideband_msg_reply_body *repmsg)
471 {
472 	int idx = 1;
473 	repmsg->u.path_resources.port_number = (raw->msg[idx] >> 4) & 0xf;
474 	idx++;
475 	if (idx > raw->curlen)
476 		goto fail_len;
477 	repmsg->u.path_resources.full_payload_bw_number = (raw->msg[idx] << 8) | (raw->msg[idx+1]);
478 	idx += 2;
479 	if (idx > raw->curlen)
480 		goto fail_len;
481 	repmsg->u.path_resources.avail_payload_bw_number = (raw->msg[idx] << 8) | (raw->msg[idx+1]);
482 	idx += 2;
483 	if (idx > raw->curlen)
484 		goto fail_len;
485 	return true;
486 fail_len:
487 	DRM_DEBUG_KMS("enum resource parse length fail %d %d\n", idx, raw->curlen);
488 	return false;
489 }
490 
491 static bool drm_dp_sideband_parse_allocate_payload_ack(struct drm_dp_sideband_msg_rx *raw,
492 							  struct drm_dp_sideband_msg_reply_body *repmsg)
493 {
494 	int idx = 1;
495 	repmsg->u.allocate_payload.port_number = (raw->msg[idx] >> 4) & 0xf;
496 	idx++;
497 	if (idx > raw->curlen)
498 		goto fail_len;
499 	repmsg->u.allocate_payload.vcpi = raw->msg[idx];
500 	idx++;
501 	if (idx > raw->curlen)
502 		goto fail_len;
503 	repmsg->u.allocate_payload.allocated_pbn = (raw->msg[idx] << 8) | (raw->msg[idx+1]);
504 	idx += 2;
505 	if (idx > raw->curlen)
506 		goto fail_len;
507 	return true;
508 fail_len:
509 	DRM_DEBUG_KMS("allocate payload parse length fail %d %d\n", idx, raw->curlen);
510 	return false;
511 }
512 
513 static bool drm_dp_sideband_parse_query_payload_ack(struct drm_dp_sideband_msg_rx *raw,
514 						    struct drm_dp_sideband_msg_reply_body *repmsg)
515 {
516 	int idx = 1;
517 	repmsg->u.query_payload.port_number = (raw->msg[idx] >> 4) & 0xf;
518 	idx++;
519 	if (idx > raw->curlen)
520 		goto fail_len;
521 	repmsg->u.query_payload.allocated_pbn = (raw->msg[idx] << 8) | (raw->msg[idx + 1]);
522 	idx += 2;
523 	if (idx > raw->curlen)
524 		goto fail_len;
525 	return true;
526 fail_len:
527 	DRM_DEBUG_KMS("query payload parse length fail %d %d\n", idx, raw->curlen);
528 	return false;
529 }
530 
531 static bool drm_dp_sideband_parse_reply(struct drm_dp_sideband_msg_rx *raw,
532 					struct drm_dp_sideband_msg_reply_body *msg)
533 {
534 	memset(msg, 0, sizeof(*msg));
535 	msg->reply_type = (raw->msg[0] & 0x80) >> 7;
536 	msg->req_type = (raw->msg[0] & 0x7f);
537 
538 	if (msg->reply_type) {
539 		memcpy(msg->u.nak.guid, &raw->msg[1], 16);
540 		msg->u.nak.reason = raw->msg[17];
541 		msg->u.nak.nak_data = raw->msg[18];
542 		return false;
543 	}
544 
545 	switch (msg->req_type) {
546 	case DP_LINK_ADDRESS:
547 		return drm_dp_sideband_parse_link_address(raw, msg);
548 	case DP_QUERY_PAYLOAD:
549 		return drm_dp_sideband_parse_query_payload_ack(raw, msg);
550 	case DP_REMOTE_DPCD_READ:
551 		return drm_dp_sideband_parse_remote_dpcd_read(raw, msg);
552 	case DP_REMOTE_DPCD_WRITE:
553 		return drm_dp_sideband_parse_remote_dpcd_write(raw, msg);
554 	case DP_REMOTE_I2C_READ:
555 		return drm_dp_sideband_parse_remote_i2c_read_ack(raw, msg);
556 	case DP_ENUM_PATH_RESOURCES:
557 		return drm_dp_sideband_parse_enum_path_resources_ack(raw, msg);
558 	case DP_ALLOCATE_PAYLOAD:
559 		return drm_dp_sideband_parse_allocate_payload_ack(raw, msg);
560 	default:
561 		DRM_ERROR("Got unknown reply 0x%02x\n", msg->req_type);
562 		return false;
563 	}
564 }
565 
566 static bool drm_dp_sideband_parse_connection_status_notify(struct drm_dp_sideband_msg_rx *raw,
567 							   struct drm_dp_sideband_msg_req_body *msg)
568 {
569 	int idx = 1;
570 
571 	msg->u.conn_stat.port_number = (raw->msg[idx] & 0xf0) >> 4;
572 	idx++;
573 	if (idx > raw->curlen)
574 		goto fail_len;
575 
576 	memcpy(msg->u.conn_stat.guid, &raw->msg[idx], 16);
577 	idx += 16;
578 	if (idx > raw->curlen)
579 		goto fail_len;
580 
581 	msg->u.conn_stat.legacy_device_plug_status = (raw->msg[idx] >> 6) & 0x1;
582 	msg->u.conn_stat.displayport_device_plug_status = (raw->msg[idx] >> 5) & 0x1;
583 	msg->u.conn_stat.message_capability_status = (raw->msg[idx] >> 4) & 0x1;
584 	msg->u.conn_stat.input_port = (raw->msg[idx] >> 3) & 0x1;
585 	msg->u.conn_stat.peer_device_type = (raw->msg[idx] & 0x7);
586 	idx++;
587 	return true;
588 fail_len:
589 	DRM_DEBUG_KMS("connection status reply parse length fail %d %d\n", idx, raw->curlen);
590 	return false;
591 }
592 
593 static bool drm_dp_sideband_parse_resource_status_notify(struct drm_dp_sideband_msg_rx *raw,
594 							   struct drm_dp_sideband_msg_req_body *msg)
595 {
596 	int idx = 1;
597 
598 	msg->u.resource_stat.port_number = (raw->msg[idx] & 0xf0) >> 4;
599 	idx++;
600 	if (idx > raw->curlen)
601 		goto fail_len;
602 
603 	memcpy(msg->u.resource_stat.guid, &raw->msg[idx], 16);
604 	idx += 16;
605 	if (idx > raw->curlen)
606 		goto fail_len;
607 
608 	msg->u.resource_stat.available_pbn = (raw->msg[idx] << 8) | (raw->msg[idx + 1]);
609 	idx++;
610 	return true;
611 fail_len:
612 	DRM_DEBUG_KMS("resource status reply parse length fail %d %d\n", idx, raw->curlen);
613 	return false;
614 }
615 
616 static bool drm_dp_sideband_parse_req(struct drm_dp_sideband_msg_rx *raw,
617 				      struct drm_dp_sideband_msg_req_body *msg)
618 {
619 	memset(msg, 0, sizeof(*msg));
620 	msg->req_type = (raw->msg[0] & 0x7f);
621 
622 	switch (msg->req_type) {
623 	case DP_CONNECTION_STATUS_NOTIFY:
624 		return drm_dp_sideband_parse_connection_status_notify(raw, msg);
625 	case DP_RESOURCE_STATUS_NOTIFY:
626 		return drm_dp_sideband_parse_resource_status_notify(raw, msg);
627 	default:
628 		DRM_ERROR("Got unknown request 0x%02x\n", msg->req_type);
629 		return false;
630 	}
631 }
632 
633 static int build_dpcd_write(struct drm_dp_sideband_msg_tx *msg, u8 port_num, u32 offset, u8 num_bytes, u8 *bytes)
634 {
635 	struct drm_dp_sideband_msg_req_body req;
636 
637 	req.req_type = DP_REMOTE_DPCD_WRITE;
638 	req.u.dpcd_write.port_number = port_num;
639 	req.u.dpcd_write.dpcd_address = offset;
640 	req.u.dpcd_write.num_bytes = num_bytes;
641 	req.u.dpcd_write.bytes = bytes;
642 	drm_dp_encode_sideband_req(&req, msg);
643 
644 	return 0;
645 }
646 
647 static int build_link_address(struct drm_dp_sideband_msg_tx *msg)
648 {
649 	struct drm_dp_sideband_msg_req_body req;
650 
651 	req.req_type = DP_LINK_ADDRESS;
652 	drm_dp_encode_sideband_req(&req, msg);
653 	return 0;
654 }
655 
656 static int build_enum_path_resources(struct drm_dp_sideband_msg_tx *msg, int port_num)
657 {
658 	struct drm_dp_sideband_msg_req_body req;
659 
660 	req.req_type = DP_ENUM_PATH_RESOURCES;
661 	req.u.port_num.port_number = port_num;
662 	drm_dp_encode_sideband_req(&req, msg);
663 	msg->path_msg = true;
664 	return 0;
665 }
666 
667 static int build_allocate_payload(struct drm_dp_sideband_msg_tx *msg, int port_num,
668 				  u8 vcpi, uint16_t pbn,
669 				  u8 number_sdp_streams,
670 				  u8 *sdp_stream_sink)
671 {
672 	struct drm_dp_sideband_msg_req_body req;
673 	memset(&req, 0, sizeof(req));
674 	req.req_type = DP_ALLOCATE_PAYLOAD;
675 	req.u.allocate_payload.port_number = port_num;
676 	req.u.allocate_payload.vcpi = vcpi;
677 	req.u.allocate_payload.pbn = pbn;
678 	req.u.allocate_payload.number_sdp_streams = number_sdp_streams;
679 	memcpy(req.u.allocate_payload.sdp_stream_sink, sdp_stream_sink,
680 		   number_sdp_streams);
681 	drm_dp_encode_sideband_req(&req, msg);
682 	msg->path_msg = true;
683 	return 0;
684 }
685 
686 static int drm_dp_mst_assign_payload_id(struct drm_dp_mst_topology_mgr *mgr,
687 					struct drm_dp_vcpi *vcpi)
688 {
689 	int ret, vcpi_ret;
690 
691 	mutex_lock(&mgr->payload_lock);
692 	ret = find_first_zero_bit(&mgr->payload_mask, mgr->max_payloads + 1);
693 	if (ret > mgr->max_payloads) {
694 		ret = -EINVAL;
695 		DRM_DEBUG_KMS("out of payload ids %d\n", ret);
696 		goto out_unlock;
697 	}
698 
699 	vcpi_ret = find_first_zero_bit(&mgr->vcpi_mask, mgr->max_payloads + 1);
700 	if (vcpi_ret > mgr->max_payloads) {
701 		ret = -EINVAL;
702 		DRM_DEBUG_KMS("out of vcpi ids %d\n", ret);
703 		goto out_unlock;
704 	}
705 
706 	set_bit(ret, &mgr->payload_mask);
707 	set_bit(vcpi_ret, &mgr->vcpi_mask);
708 	vcpi->vcpi = vcpi_ret + 1;
709 	mgr->proposed_vcpis[ret - 1] = vcpi;
710 out_unlock:
711 	mutex_unlock(&mgr->payload_lock);
712 	return ret;
713 }
714 
715 static void drm_dp_mst_put_payload_id(struct drm_dp_mst_topology_mgr *mgr,
716 				      int vcpi)
717 {
718 	int i;
719 	if (vcpi == 0)
720 		return;
721 
722 	mutex_lock(&mgr->payload_lock);
723 	DRM_DEBUG_KMS("putting payload %d\n", vcpi);
724 	clear_bit(vcpi - 1, &mgr->vcpi_mask);
725 
726 	for (i = 0; i < mgr->max_payloads; i++) {
727 		if (mgr->proposed_vcpis[i])
728 			if (mgr->proposed_vcpis[i]->vcpi == vcpi) {
729 				mgr->proposed_vcpis[i] = NULL;
730 				clear_bit(i + 1, &mgr->payload_mask);
731 			}
732 	}
733 	mutex_unlock(&mgr->payload_lock);
734 }
735 
736 static bool check_txmsg_state(struct drm_dp_mst_topology_mgr *mgr,
737 			      struct drm_dp_sideband_msg_tx *txmsg)
738 {
739 	bool ret;
740 
741 	/*
742 	 * All updates to txmsg->state are protected by mgr->qlock, and the two
743 	 * cases we check here are terminal states. For those the barriers
744 	 * provided by the wake_up/wait_event pair are enough.
745 	 */
746 	ret = (txmsg->state == DRM_DP_SIDEBAND_TX_RX ||
747 	       txmsg->state == DRM_DP_SIDEBAND_TX_TIMEOUT);
748 	return ret;
749 }
750 
751 static int drm_dp_mst_wait_tx_reply(struct drm_dp_mst_branch *mstb,
752 				    struct drm_dp_sideband_msg_tx *txmsg)
753 {
754 	struct drm_dp_mst_topology_mgr *mgr = mstb->mgr;
755 	int ret;
756 
757 	ret = wait_event_timeout(mgr->tx_waitq,
758 				 check_txmsg_state(mgr, txmsg),
759 				 (4 * HZ));
760 	mutex_lock(&mstb->mgr->qlock);
761 	if (ret > 0) {
762 		if (txmsg->state == DRM_DP_SIDEBAND_TX_TIMEOUT) {
763 			ret = -EIO;
764 			goto out;
765 		}
766 	} else {
767 		DRM_DEBUG_KMS("timedout msg send %p %d %d\n", txmsg, txmsg->state, txmsg->seqno);
768 
769 		/* dump some state */
770 		ret = -EIO;
771 
772 		/* remove from q */
773 		if (txmsg->state == DRM_DP_SIDEBAND_TX_QUEUED ||
774 		    txmsg->state == DRM_DP_SIDEBAND_TX_START_SEND) {
775 			list_del(&txmsg->next);
776 		}
777 
778 		if (txmsg->state == DRM_DP_SIDEBAND_TX_START_SEND ||
779 		    txmsg->state == DRM_DP_SIDEBAND_TX_SENT) {
780 			mstb->tx_slots[txmsg->seqno] = NULL;
781 		}
782 	}
783 out:
784 	mutex_unlock(&mgr->qlock);
785 
786 	return ret;
787 }
788 
789 static struct drm_dp_mst_branch *drm_dp_add_mst_branch_device(u8 lct, u8 *rad)
790 {
791 	struct drm_dp_mst_branch *mstb;
792 
793 	mstb = kzalloc(sizeof(*mstb), GFP_KERNEL);
794 	if (!mstb)
795 		return NULL;
796 
797 	mstb->lct = lct;
798 	if (lct > 1)
799 		memcpy(mstb->rad, rad, lct / 2);
800 	INIT_LIST_HEAD(&mstb->ports);
801 	kref_init(&mstb->kref);
802 	return mstb;
803 }
804 
805 static void drm_dp_free_mst_port(struct kref *kref);
806 
807 static void drm_dp_free_mst_branch_device(struct kref *kref)
808 {
809 	struct drm_dp_mst_branch *mstb = container_of(kref, struct drm_dp_mst_branch, kref);
810 	if (mstb->port_parent) {
811 		if (list_empty(&mstb->port_parent->next))
812 			kref_put(&mstb->port_parent->kref, drm_dp_free_mst_port);
813 	}
814 	kfree(mstb);
815 }
816 
817 static void drm_dp_destroy_mst_branch_device(struct kref *kref)
818 {
819 	struct drm_dp_mst_branch *mstb = container_of(kref, struct drm_dp_mst_branch, kref);
820 	struct drm_dp_mst_port *port, *tmp;
821 	bool wake_tx = false;
822 
823 	/*
824 	 * init kref again to be used by ports to remove mst branch when it is
825 	 * not needed anymore
826 	 */
827 	kref_init(kref);
828 
829 	if (mstb->port_parent && list_empty(&mstb->port_parent->next))
830 		kref_get(&mstb->port_parent->kref);
831 
832 	/*
833 	 * destroy all ports - don't need lock
834 	 * as there are no more references to the mst branch
835 	 * device at this point.
836 	 */
837 	list_for_each_entry_safe(port, tmp, &mstb->ports, next) {
838 		list_del(&port->next);
839 		drm_dp_put_port(port);
840 	}
841 
842 	/* drop any tx slots msg */
843 	mutex_lock(&mstb->mgr->qlock);
844 	if (mstb->tx_slots[0]) {
845 		mstb->tx_slots[0]->state = DRM_DP_SIDEBAND_TX_TIMEOUT;
846 		mstb->tx_slots[0] = NULL;
847 		wake_tx = true;
848 	}
849 	if (mstb->tx_slots[1]) {
850 		mstb->tx_slots[1]->state = DRM_DP_SIDEBAND_TX_TIMEOUT;
851 		mstb->tx_slots[1] = NULL;
852 		wake_tx = true;
853 	}
854 	mutex_unlock(&mstb->mgr->qlock);
855 
856 	if (wake_tx)
857 		wake_up(&mstb->mgr->tx_waitq);
858 
859 	kref_put(kref, drm_dp_free_mst_branch_device);
860 }
861 
862 static void drm_dp_put_mst_branch_device(struct drm_dp_mst_branch *mstb)
863 {
864 	kref_put(&mstb->kref, drm_dp_destroy_mst_branch_device);
865 }
866 
867 
868 static void drm_dp_port_teardown_pdt(struct drm_dp_mst_port *port, int old_pdt)
869 {
870 	struct drm_dp_mst_branch *mstb;
871 
872 	switch (old_pdt) {
873 	case DP_PEER_DEVICE_DP_LEGACY_CONV:
874 	case DP_PEER_DEVICE_SST_SINK:
875 		/* remove i2c over sideband */
876 		drm_dp_mst_unregister_i2c_bus(&port->aux);
877 		break;
878 	case DP_PEER_DEVICE_MST_BRANCHING:
879 		mstb = port->mstb;
880 		port->mstb = NULL;
881 		drm_dp_put_mst_branch_device(mstb);
882 		break;
883 	}
884 }
885 
886 static void drm_dp_destroy_port(struct kref *kref)
887 {
888 	struct drm_dp_mst_port *port = container_of(kref, struct drm_dp_mst_port, kref);
889 	struct drm_dp_mst_topology_mgr *mgr = port->mgr;
890 
891 	if (!port->input) {
892 		port->vcpi.num_slots = 0;
893 
894 		kfree(port->cached_edid);
895 
896 		/*
897 		 * The only time we don't have a connector
898 		 * on an output port is if the connector init
899 		 * fails.
900 		 */
901 		if (port->connector) {
902 			/* we can't destroy the connector here, as
903 			 * we might be holding the mode_config.mutex
904 			 * from an EDID retrieval */
905 
906 			mutex_lock(&mgr->destroy_connector_lock);
907 			kref_get(&port->parent->kref);
908 			list_add(&port->next, &mgr->destroy_connector_list);
909 			mutex_unlock(&mgr->destroy_connector_lock);
910 			schedule_work(&mgr->destroy_connector_work);
911 			return;
912 		}
913 		/* no need to clean up vcpi
914 		 * as if we have no connector we never setup a vcpi */
915 		drm_dp_port_teardown_pdt(port, port->pdt);
916 		port->pdt = DP_PEER_DEVICE_NONE;
917 	}
918 	kfree(port);
919 }
920 
921 static void drm_dp_put_port(struct drm_dp_mst_port *port)
922 {
923 	kref_put(&port->kref, drm_dp_destroy_port);
924 }
925 
926 static struct drm_dp_mst_branch *drm_dp_mst_get_validated_mstb_ref_locked(struct drm_dp_mst_branch *mstb, struct drm_dp_mst_branch *to_find)
927 {
928 	struct drm_dp_mst_port *port;
929 	struct drm_dp_mst_branch *rmstb;
930 	if (to_find == mstb) {
931 		kref_get(&mstb->kref);
932 		return mstb;
933 	}
934 	list_for_each_entry(port, &mstb->ports, next) {
935 		if (port->mstb) {
936 			rmstb = drm_dp_mst_get_validated_mstb_ref_locked(port->mstb, to_find);
937 			if (rmstb)
938 				return rmstb;
939 		}
940 	}
941 	return NULL;
942 }
943 
944 static struct drm_dp_mst_branch *drm_dp_get_validated_mstb_ref(struct drm_dp_mst_topology_mgr *mgr, struct drm_dp_mst_branch *mstb)
945 {
946 	struct drm_dp_mst_branch *rmstb = NULL;
947 	mutex_lock(&mgr->lock);
948 	if (mgr->mst_primary)
949 		rmstb = drm_dp_mst_get_validated_mstb_ref_locked(mgr->mst_primary, mstb);
950 	mutex_unlock(&mgr->lock);
951 	return rmstb;
952 }
953 
954 static struct drm_dp_mst_port *drm_dp_mst_get_port_ref_locked(struct drm_dp_mst_branch *mstb, struct drm_dp_mst_port *to_find)
955 {
956 	struct drm_dp_mst_port *port, *mport;
957 
958 	list_for_each_entry(port, &mstb->ports, next) {
959 		if (port == to_find) {
960 			kref_get(&port->kref);
961 			return port;
962 		}
963 		if (port->mstb) {
964 			mport = drm_dp_mst_get_port_ref_locked(port->mstb, to_find);
965 			if (mport)
966 				return mport;
967 		}
968 	}
969 	return NULL;
970 }
971 
972 static struct drm_dp_mst_port *drm_dp_get_validated_port_ref(struct drm_dp_mst_topology_mgr *mgr, struct drm_dp_mst_port *port)
973 {
974 	struct drm_dp_mst_port *rport = NULL;
975 	mutex_lock(&mgr->lock);
976 	if (mgr->mst_primary)
977 		rport = drm_dp_mst_get_port_ref_locked(mgr->mst_primary, port);
978 	mutex_unlock(&mgr->lock);
979 	return rport;
980 }
981 
982 static struct drm_dp_mst_port *drm_dp_get_port(struct drm_dp_mst_branch *mstb, u8 port_num)
983 {
984 	struct drm_dp_mst_port *port;
985 
986 	list_for_each_entry(port, &mstb->ports, next) {
987 		if (port->port_num == port_num) {
988 			kref_get(&port->kref);
989 			return port;
990 		}
991 	}
992 
993 	return NULL;
994 }
995 
996 /*
997  * calculate a new RAD for this MST branch device
998  * if parent has an LCT of 2 then it has 1 nibble of RAD,
999  * if parent has an LCT of 3 then it has 2 nibbles of RAD,
1000  */
1001 static u8 drm_dp_calculate_rad(struct drm_dp_mst_port *port,
1002 				 u8 *rad)
1003 {
1004 	int parent_lct = port->parent->lct;
1005 	int shift = 4;
1006 	int idx = (parent_lct - 1) / 2;
1007 	if (parent_lct > 1) {
1008 		memcpy(rad, port->parent->rad, idx + 1);
1009 		shift = (parent_lct % 2) ? 4 : 0;
1010 	} else
1011 		rad[0] = 0;
1012 
1013 	rad[idx] |= port->port_num << shift;
1014 	return parent_lct + 1;
1015 }
1016 
1017 /*
1018  * return sends link address for new mstb
1019  */
1020 static bool drm_dp_port_setup_pdt(struct drm_dp_mst_port *port)
1021 {
1022 	int ret;
1023 	u8 rad[6], lct;
1024 	bool send_link = false;
1025 	switch (port->pdt) {
1026 	case DP_PEER_DEVICE_DP_LEGACY_CONV:
1027 	case DP_PEER_DEVICE_SST_SINK:
1028 		/* add i2c over sideband */
1029 		ret = drm_dp_mst_register_i2c_bus(&port->aux);
1030 		break;
1031 	case DP_PEER_DEVICE_MST_BRANCHING:
1032 		lct = drm_dp_calculate_rad(port, rad);
1033 
1034 		port->mstb = drm_dp_add_mst_branch_device(lct, rad);
1035 		port->mstb->mgr = port->mgr;
1036 		port->mstb->port_parent = port;
1037 
1038 		send_link = true;
1039 		break;
1040 	}
1041 	return send_link;
1042 }
1043 
1044 static void drm_dp_check_mstb_guid(struct drm_dp_mst_branch *mstb, u8 *guid)
1045 {
1046 	int ret;
1047 
1048 	memcpy(mstb->guid, guid, 16);
1049 
1050 	if (!drm_dp_validate_guid(mstb->mgr, mstb->guid)) {
1051 		if (mstb->port_parent) {
1052 			ret = drm_dp_send_dpcd_write(
1053 					mstb->mgr,
1054 					mstb->port_parent,
1055 					DP_GUID,
1056 					16,
1057 					mstb->guid);
1058 		} else {
1059 
1060 			ret = drm_dp_dpcd_write(
1061 					mstb->mgr->aux,
1062 					DP_GUID,
1063 					mstb->guid,
1064 					16);
1065 		}
1066 	}
1067 }
1068 
1069 static void build_mst_prop_path(const struct drm_dp_mst_branch *mstb,
1070 				int pnum,
1071 				char *proppath,
1072 				size_t proppath_size)
1073 {
1074 	int i;
1075 	char temp[8];
1076 	ksnprintf(proppath, proppath_size, "mst:%d", mstb->mgr->conn_base_id);
1077 	for (i = 0; i < (mstb->lct - 1); i++) {
1078 		int shift = (i % 2) ? 0 : 4;
1079 		int port_num = (mstb->rad[i / 2] >> shift) & 0xf;
1080 		ksnprintf(temp, sizeof(temp), "-%d", port_num);
1081 		strlcat(proppath, temp, proppath_size);
1082 	}
1083 	ksnprintf(temp, sizeof(temp), "-%d", pnum);
1084 	strlcat(proppath, temp, proppath_size);
1085 }
1086 
1087 static void drm_dp_add_port(struct drm_dp_mst_branch *mstb,
1088 			    struct device *dev,
1089 			    struct drm_dp_link_addr_reply_port *port_msg)
1090 {
1091 	struct drm_dp_mst_port *port;
1092 	bool ret;
1093 	bool created = false;
1094 	int old_pdt = 0;
1095 	int old_ddps = 0;
1096 	port = drm_dp_get_port(mstb, port_msg->port_number);
1097 	if (!port) {
1098 		port = kzalloc(sizeof(*port), GFP_KERNEL);
1099 		if (!port)
1100 			return;
1101 		kref_init(&port->kref);
1102 		port->parent = mstb;
1103 		port->port_num = port_msg->port_number;
1104 		port->mgr = mstb->mgr;
1105 		port->aux.name = "DPMST";
1106 		port->aux.dev = dev;
1107 		created = true;
1108 	} else {
1109 		old_pdt = port->pdt;
1110 		old_ddps = port->ddps;
1111 	}
1112 
1113 	port->pdt = port_msg->peer_device_type;
1114 	port->input = port_msg->input_port;
1115 	port->mcs = port_msg->mcs;
1116 	port->ddps = port_msg->ddps;
1117 	port->ldps = port_msg->legacy_device_plug_status;
1118 	port->dpcd_rev = port_msg->dpcd_revision;
1119 	port->num_sdp_streams = port_msg->num_sdp_streams;
1120 	port->num_sdp_stream_sinks = port_msg->num_sdp_stream_sinks;
1121 
1122 	/* manage mstb port lists with mgr lock - take a reference
1123 	   for this list */
1124 	if (created) {
1125 		mutex_lock(&mstb->mgr->lock);
1126 		kref_get(&port->kref);
1127 		list_add(&port->next, &mstb->ports);
1128 		mutex_unlock(&mstb->mgr->lock);
1129 	}
1130 
1131 	if (old_ddps != port->ddps) {
1132 		if (port->ddps) {
1133 			if (!port->input)
1134 				drm_dp_send_enum_path_resources(mstb->mgr, mstb, port);
1135 		} else {
1136 			port->available_pbn = 0;
1137 			}
1138 	}
1139 
1140 	if (old_pdt != port->pdt && !port->input) {
1141 		drm_dp_port_teardown_pdt(port, old_pdt);
1142 
1143 		ret = drm_dp_port_setup_pdt(port);
1144 		if (ret == true)
1145 			drm_dp_send_link_address(mstb->mgr, port->mstb);
1146 	}
1147 
1148 	if (created && !port->input) {
1149 		char proppath[255];
1150 
1151 		build_mst_prop_path(mstb, port->port_num, proppath, sizeof(proppath));
1152 		port->connector = (*mstb->mgr->cbs->add_connector)(mstb->mgr, port, proppath);
1153 		if (!port->connector) {
1154 			/* remove it from the port list */
1155 			mutex_lock(&mstb->mgr->lock);
1156 			list_del(&port->next);
1157 			mutex_unlock(&mstb->mgr->lock);
1158 			/* drop port list reference */
1159 			drm_dp_put_port(port);
1160 			goto out;
1161 		}
1162 		if ((port->pdt == DP_PEER_DEVICE_DP_LEGACY_CONV ||
1163 		     port->pdt == DP_PEER_DEVICE_SST_SINK) &&
1164 		    port->port_num >= DP_MST_LOGICAL_PORT_0) {
1165 			port->cached_edid = drm_get_edid(port->connector, &port->aux.ddc);
1166 			drm_mode_connector_set_tile_property(port->connector);
1167 		}
1168 		(*mstb->mgr->cbs->register_connector)(port->connector);
1169 	}
1170 
1171 out:
1172 	/* put reference to this port */
1173 	drm_dp_put_port(port);
1174 }
1175 
1176 static void drm_dp_update_port(struct drm_dp_mst_branch *mstb,
1177 			       struct drm_dp_connection_status_notify *conn_stat)
1178 {
1179 	struct drm_dp_mst_port *port;
1180 	int old_pdt;
1181 	int old_ddps;
1182 	bool dowork = false;
1183 	port = drm_dp_get_port(mstb, conn_stat->port_number);
1184 	if (!port)
1185 		return;
1186 
1187 	old_ddps = port->ddps;
1188 	old_pdt = port->pdt;
1189 	port->pdt = conn_stat->peer_device_type;
1190 	port->mcs = conn_stat->message_capability_status;
1191 	port->ldps = conn_stat->legacy_device_plug_status;
1192 	port->ddps = conn_stat->displayport_device_plug_status;
1193 
1194 	if (old_ddps != port->ddps) {
1195 		if (port->ddps) {
1196 			dowork = true;
1197 		} else {
1198 			port->available_pbn = 0;
1199 		}
1200 	}
1201 	if (old_pdt != port->pdt && !port->input) {
1202 		drm_dp_port_teardown_pdt(port, old_pdt);
1203 
1204 		if (drm_dp_port_setup_pdt(port))
1205 			dowork = true;
1206 	}
1207 
1208 	drm_dp_put_port(port);
1209 	if (dowork)
1210 		queue_work(system_long_wq, &mstb->mgr->work);
1211 
1212 }
1213 
1214 static struct drm_dp_mst_branch *drm_dp_get_mst_branch_device(struct drm_dp_mst_topology_mgr *mgr,
1215 							       u8 lct, u8 *rad)
1216 {
1217 	struct drm_dp_mst_branch *mstb;
1218 	struct drm_dp_mst_port *port;
1219 	int i;
1220 	/* find the port by iterating down */
1221 
1222 	mutex_lock(&mgr->lock);
1223 	mstb = mgr->mst_primary;
1224 
1225 	for (i = 0; i < lct - 1; i++) {
1226 		int shift = (i % 2) ? 0 : 4;
1227 		int port_num = (rad[i / 2] >> shift) & 0xf;
1228 
1229 		list_for_each_entry(port, &mstb->ports, next) {
1230 			if (port->port_num == port_num) {
1231 				mstb = port->mstb;
1232 				if (!mstb) {
1233 					DRM_ERROR("failed to lookup MSTB with lct %d, rad %02x\n", lct, rad[0]);
1234 					goto out;
1235 				}
1236 
1237 				break;
1238 			}
1239 		}
1240 	}
1241 	kref_get(&mstb->kref);
1242 out:
1243 	mutex_unlock(&mgr->lock);
1244 	return mstb;
1245 }
1246 
1247 static struct drm_dp_mst_branch *get_mst_branch_device_by_guid_helper(
1248 	struct drm_dp_mst_branch *mstb,
1249 	uint8_t *guid)
1250 {
1251 	struct drm_dp_mst_branch *found_mstb;
1252 	struct drm_dp_mst_port *port;
1253 
1254 	if (memcmp(mstb->guid, guid, 16) == 0)
1255 		return mstb;
1256 
1257 
1258 	list_for_each_entry(port, &mstb->ports, next) {
1259 		if (!port->mstb)
1260 			continue;
1261 
1262 		found_mstb = get_mst_branch_device_by_guid_helper(port->mstb, guid);
1263 
1264 		if (found_mstb)
1265 			return found_mstb;
1266 	}
1267 
1268 	return NULL;
1269 }
1270 
1271 static struct drm_dp_mst_branch *drm_dp_get_mst_branch_device_by_guid(
1272 	struct drm_dp_mst_topology_mgr *mgr,
1273 	uint8_t *guid)
1274 {
1275 	struct drm_dp_mst_branch *mstb;
1276 
1277 	/* find the port by iterating down */
1278 	mutex_lock(&mgr->lock);
1279 
1280 	mstb = get_mst_branch_device_by_guid_helper(mgr->mst_primary, guid);
1281 
1282 	if (mstb)
1283 		kref_get(&mstb->kref);
1284 
1285 	mutex_unlock(&mgr->lock);
1286 	return mstb;
1287 }
1288 
1289 static void drm_dp_check_and_send_link_address(struct drm_dp_mst_topology_mgr *mgr,
1290 					       struct drm_dp_mst_branch *mstb)
1291 {
1292 	struct drm_dp_mst_port *port;
1293 	struct drm_dp_mst_branch *mstb_child;
1294 	if (!mstb->link_address_sent)
1295 		drm_dp_send_link_address(mgr, mstb);
1296 
1297 	list_for_each_entry(port, &mstb->ports, next) {
1298 		if (port->input)
1299 			continue;
1300 
1301 		if (!port->ddps)
1302 			continue;
1303 
1304 		if (!port->available_pbn)
1305 			drm_dp_send_enum_path_resources(mgr, mstb, port);
1306 
1307 		if (port->mstb) {
1308 			mstb_child = drm_dp_get_validated_mstb_ref(mgr, port->mstb);
1309 			if (mstb_child) {
1310 				drm_dp_check_and_send_link_address(mgr, mstb_child);
1311 				drm_dp_put_mst_branch_device(mstb_child);
1312 			}
1313 		}
1314 	}
1315 }
1316 
1317 static void drm_dp_mst_link_probe_work(struct work_struct *work)
1318 {
1319 	struct drm_dp_mst_topology_mgr *mgr = container_of(work, struct drm_dp_mst_topology_mgr, work);
1320 	struct drm_dp_mst_branch *mstb;
1321 
1322 	mutex_lock(&mgr->lock);
1323 	mstb = mgr->mst_primary;
1324 	if (mstb) {
1325 		kref_get(&mstb->kref);
1326 	}
1327 	mutex_unlock(&mgr->lock);
1328 	if (mstb) {
1329 		drm_dp_check_and_send_link_address(mgr, mstb);
1330 		drm_dp_put_mst_branch_device(mstb);
1331 	}
1332 }
1333 
1334 static bool drm_dp_validate_guid(struct drm_dp_mst_topology_mgr *mgr,
1335 				 u8 *guid)
1336 {
1337 	static u8 zero_guid[16];
1338 
1339 	if (!memcmp(guid, zero_guid, 16)) {
1340 		u64 salt = get_jiffies_64();
1341 		memcpy(&guid[0], &salt, sizeof(u64));
1342 		memcpy(&guid[8], &salt, sizeof(u64));
1343 		return false;
1344 	}
1345 	return true;
1346 }
1347 
1348 #if 0
1349 static int build_dpcd_read(struct drm_dp_sideband_msg_tx *msg, u8 port_num, u32 offset, u8 num_bytes)
1350 {
1351 	struct drm_dp_sideband_msg_req_body req;
1352 
1353 	req.req_type = DP_REMOTE_DPCD_READ;
1354 	req.u.dpcd_read.port_number = port_num;
1355 	req.u.dpcd_read.dpcd_address = offset;
1356 	req.u.dpcd_read.num_bytes = num_bytes;
1357 	drm_dp_encode_sideband_req(&req, msg);
1358 
1359 	return 0;
1360 }
1361 #endif
1362 
1363 static int drm_dp_send_sideband_msg(struct drm_dp_mst_topology_mgr *mgr,
1364 				    bool up, u8 *msg, int len)
1365 {
1366 	int ret;
1367 	int regbase = up ? DP_SIDEBAND_MSG_UP_REP_BASE : DP_SIDEBAND_MSG_DOWN_REQ_BASE;
1368 	int tosend, total, offset;
1369 	int retries = 0;
1370 
1371 retry:
1372 	total = len;
1373 	offset = 0;
1374 	do {
1375 		tosend = min3(mgr->max_dpcd_transaction_bytes, 16, total);
1376 
1377 		ret = drm_dp_dpcd_write(mgr->aux, regbase + offset,
1378 					&msg[offset],
1379 					tosend);
1380 		if (ret != tosend) {
1381 			if (ret == -EIO && retries < 5) {
1382 				retries++;
1383 				goto retry;
1384 			}
1385 			DRM_DEBUG_KMS("failed to dpcd write %d %d\n", tosend, ret);
1386 
1387 			return -EIO;
1388 		}
1389 		offset += tosend;
1390 		total -= tosend;
1391 	} while (total > 0);
1392 	return 0;
1393 }
1394 
1395 static int set_hdr_from_dst_qlock(struct drm_dp_sideband_msg_hdr *hdr,
1396 				  struct drm_dp_sideband_msg_tx *txmsg)
1397 {
1398 	struct drm_dp_mst_branch *mstb = txmsg->dst;
1399 	u8 req_type;
1400 
1401 	/* both msg slots are full */
1402 	if (txmsg->seqno == -1) {
1403 		if (mstb->tx_slots[0] && mstb->tx_slots[1]) {
1404 			DRM_DEBUG_KMS("%s: failed to find slot\n", __func__);
1405 			return -EAGAIN;
1406 		}
1407 		if (mstb->tx_slots[0] == NULL && mstb->tx_slots[1] == NULL) {
1408 			txmsg->seqno = mstb->last_seqno;
1409 			mstb->last_seqno ^= 1;
1410 		} else if (mstb->tx_slots[0] == NULL)
1411 			txmsg->seqno = 0;
1412 		else
1413 			txmsg->seqno = 1;
1414 		mstb->tx_slots[txmsg->seqno] = txmsg;
1415 	}
1416 
1417 	req_type = txmsg->msg[0] & 0x7f;
1418 	if (req_type == DP_CONNECTION_STATUS_NOTIFY ||
1419 		req_type == DP_RESOURCE_STATUS_NOTIFY)
1420 		hdr->broadcast = 1;
1421 	else
1422 		hdr->broadcast = 0;
1423 	hdr->path_msg = txmsg->path_msg;
1424 	hdr->lct = mstb->lct;
1425 	hdr->lcr = mstb->lct - 1;
1426 	if (mstb->lct > 1)
1427 		memcpy(hdr->rad, mstb->rad, mstb->lct / 2);
1428 	hdr->seqno = txmsg->seqno;
1429 	return 0;
1430 }
1431 /*
1432  * process a single block of the next message in the sideband queue
1433  */
1434 static int process_single_tx_qlock(struct drm_dp_mst_topology_mgr *mgr,
1435 				   struct drm_dp_sideband_msg_tx *txmsg,
1436 				   bool up)
1437 {
1438 	u8 chunk[48];
1439 	struct drm_dp_sideband_msg_hdr hdr;
1440 	int len, space, idx, tosend;
1441 	int ret;
1442 
1443 	memset(&hdr, 0, sizeof(struct drm_dp_sideband_msg_hdr));
1444 
1445 	if (txmsg->state == DRM_DP_SIDEBAND_TX_QUEUED) {
1446 		txmsg->seqno = -1;
1447 		txmsg->state = DRM_DP_SIDEBAND_TX_START_SEND;
1448 	}
1449 
1450 	/* make hdr from dst mst - for replies use seqno
1451 	   otherwise assign one */
1452 	ret = set_hdr_from_dst_qlock(&hdr, txmsg);
1453 	if (ret < 0)
1454 		return ret;
1455 
1456 	/* amount left to send in this message */
1457 	len = txmsg->cur_len - txmsg->cur_offset;
1458 
1459 	/* 48 - sideband msg size - 1 byte for data CRC, x header bytes */
1460 	space = 48 - 1 - drm_dp_calc_sb_hdr_size(&hdr);
1461 
1462 	tosend = min(len, space);
1463 	if (len == txmsg->cur_len)
1464 		hdr.somt = 1;
1465 	if (space >= len)
1466 		hdr.eomt = 1;
1467 
1468 
1469 	hdr.msg_len = tosend + 1;
1470 	drm_dp_encode_sideband_msg_hdr(&hdr, chunk, &idx);
1471 	memcpy(&chunk[idx], &txmsg->msg[txmsg->cur_offset], tosend);
1472 	/* add crc at end */
1473 	drm_dp_crc_sideband_chunk_req(&chunk[idx], tosend);
1474 	idx += tosend + 1;
1475 
1476 	ret = drm_dp_send_sideband_msg(mgr, up, chunk, idx);
1477 	if (ret) {
1478 		DRM_DEBUG_KMS("sideband msg failed to send\n");
1479 		return ret;
1480 	}
1481 
1482 	txmsg->cur_offset += tosend;
1483 	if (txmsg->cur_offset == txmsg->cur_len) {
1484 		txmsg->state = DRM_DP_SIDEBAND_TX_SENT;
1485 		return 1;
1486 	}
1487 	return 0;
1488 }
1489 
1490 static void process_single_down_tx_qlock(struct drm_dp_mst_topology_mgr *mgr)
1491 {
1492 	struct drm_dp_sideband_msg_tx *txmsg;
1493 	int ret;
1494 
1495 	WARN_ON(!mutex_is_locked(&mgr->qlock));
1496 
1497 	/* construct a chunk from the first msg in the tx_msg queue */
1498 	if (list_empty(&mgr->tx_msg_downq))
1499 		return;
1500 
1501 	txmsg = list_first_entry(&mgr->tx_msg_downq, struct drm_dp_sideband_msg_tx, next);
1502 	ret = process_single_tx_qlock(mgr, txmsg, false);
1503 	if (ret == 1) {
1504 		/* txmsg is sent it should be in the slots now */
1505 		list_del(&txmsg->next);
1506 	} else if (ret) {
1507 		DRM_DEBUG_KMS("failed to send msg in q %d\n", ret);
1508 		list_del(&txmsg->next);
1509 		if (txmsg->seqno != -1)
1510 			txmsg->dst->tx_slots[txmsg->seqno] = NULL;
1511 		txmsg->state = DRM_DP_SIDEBAND_TX_TIMEOUT;
1512 		wake_up(&mgr->tx_waitq);
1513 	}
1514 }
1515 
1516 /* called holding qlock */
1517 static void process_single_up_tx_qlock(struct drm_dp_mst_topology_mgr *mgr,
1518 				       struct drm_dp_sideband_msg_tx *txmsg)
1519 {
1520 	int ret;
1521 
1522 	/* construct a chunk from the first msg in the tx_msg queue */
1523 	ret = process_single_tx_qlock(mgr, txmsg, true);
1524 
1525 	if (ret != 1)
1526 		DRM_DEBUG_KMS("failed to send msg in q %d\n", ret);
1527 
1528 	txmsg->dst->tx_slots[txmsg->seqno] = NULL;
1529 }
1530 
1531 static void drm_dp_queue_down_tx(struct drm_dp_mst_topology_mgr *mgr,
1532 				 struct drm_dp_sideband_msg_tx *txmsg)
1533 {
1534 	mutex_lock(&mgr->qlock);
1535 	list_add_tail(&txmsg->next, &mgr->tx_msg_downq);
1536 	if (list_is_singular(&mgr->tx_msg_downq))
1537 		process_single_down_tx_qlock(mgr);
1538 	mutex_unlock(&mgr->qlock);
1539 }
1540 
1541 static void drm_dp_send_link_address(struct drm_dp_mst_topology_mgr *mgr,
1542 				     struct drm_dp_mst_branch *mstb)
1543 {
1544 	int len;
1545 	struct drm_dp_sideband_msg_tx *txmsg;
1546 	int ret;
1547 
1548 	txmsg = kzalloc(sizeof(*txmsg), GFP_KERNEL);
1549 	if (!txmsg)
1550 		return;
1551 
1552 	txmsg->dst = mstb;
1553 	len = build_link_address(txmsg);
1554 
1555 	mstb->link_address_sent = true;
1556 	drm_dp_queue_down_tx(mgr, txmsg);
1557 
1558 	ret = drm_dp_mst_wait_tx_reply(mstb, txmsg);
1559 	if (ret > 0) {
1560 		int i;
1561 
1562 		if (txmsg->reply.reply_type == 1)
1563 			DRM_DEBUG_KMS("link address nak received\n");
1564 		else {
1565 			DRM_DEBUG_KMS("link address reply: %d\n", txmsg->reply.u.link_addr.nports);
1566 			for (i = 0; i < txmsg->reply.u.link_addr.nports; i++) {
1567 				DRM_DEBUG_KMS("port %d: input %d, pdt: %d, pn: %d, dpcd_rev: %02x, mcs: %d, ddps: %d, ldps %d, sdp %d/%d\n", i,
1568 				       txmsg->reply.u.link_addr.ports[i].input_port,
1569 				       txmsg->reply.u.link_addr.ports[i].peer_device_type,
1570 				       txmsg->reply.u.link_addr.ports[i].port_number,
1571 				       txmsg->reply.u.link_addr.ports[i].dpcd_revision,
1572 				       txmsg->reply.u.link_addr.ports[i].mcs,
1573 				       txmsg->reply.u.link_addr.ports[i].ddps,
1574 				       txmsg->reply.u.link_addr.ports[i].legacy_device_plug_status,
1575 				       txmsg->reply.u.link_addr.ports[i].num_sdp_streams,
1576 				       txmsg->reply.u.link_addr.ports[i].num_sdp_stream_sinks);
1577 			}
1578 
1579 			drm_dp_check_mstb_guid(mstb, txmsg->reply.u.link_addr.guid);
1580 
1581 			for (i = 0; i < txmsg->reply.u.link_addr.nports; i++) {
1582 				drm_dp_add_port(mstb, mgr->dev, &txmsg->reply.u.link_addr.ports[i]);
1583 			}
1584 			(*mgr->cbs->hotplug)(mgr);
1585 		}
1586 	} else {
1587 		mstb->link_address_sent = false;
1588 		DRM_DEBUG_KMS("link address failed %d\n", ret);
1589 	}
1590 
1591 	kfree(txmsg);
1592 }
1593 
1594 static int drm_dp_send_enum_path_resources(struct drm_dp_mst_topology_mgr *mgr,
1595 					   struct drm_dp_mst_branch *mstb,
1596 					   struct drm_dp_mst_port *port)
1597 {
1598 	int len;
1599 	struct drm_dp_sideband_msg_tx *txmsg;
1600 	int ret;
1601 
1602 	txmsg = kzalloc(sizeof(*txmsg), GFP_KERNEL);
1603 	if (!txmsg)
1604 		return -ENOMEM;
1605 
1606 	txmsg->dst = mstb;
1607 	len = build_enum_path_resources(txmsg, port->port_num);
1608 
1609 	drm_dp_queue_down_tx(mgr, txmsg);
1610 
1611 	ret = drm_dp_mst_wait_tx_reply(mstb, txmsg);
1612 	if (ret > 0) {
1613 		if (txmsg->reply.reply_type == 1)
1614 			DRM_DEBUG_KMS("enum path resources nak received\n");
1615 		else {
1616 			if (port->port_num != txmsg->reply.u.path_resources.port_number)
1617 				DRM_ERROR("got incorrect port in response\n");
1618 			DRM_DEBUG_KMS("enum path resources %d: %d %d\n", txmsg->reply.u.path_resources.port_number, txmsg->reply.u.path_resources.full_payload_bw_number,
1619 			       txmsg->reply.u.path_resources.avail_payload_bw_number);
1620 			port->available_pbn = txmsg->reply.u.path_resources.avail_payload_bw_number;
1621 		}
1622 	}
1623 
1624 	kfree(txmsg);
1625 	return 0;
1626 }
1627 
1628 static struct drm_dp_mst_port *drm_dp_get_last_connected_port_to_mstb(struct drm_dp_mst_branch *mstb)
1629 {
1630 	if (!mstb->port_parent)
1631 		return NULL;
1632 
1633 	if (mstb->port_parent->mstb != mstb)
1634 		return mstb->port_parent;
1635 
1636 	return drm_dp_get_last_connected_port_to_mstb(mstb->port_parent->parent);
1637 }
1638 
1639 static struct drm_dp_mst_branch *drm_dp_get_last_connected_port_and_mstb(struct drm_dp_mst_topology_mgr *mgr,
1640 									 struct drm_dp_mst_branch *mstb,
1641 									 int *port_num)
1642 {
1643 	struct drm_dp_mst_branch *rmstb = NULL;
1644 	struct drm_dp_mst_port *found_port;
1645 	mutex_lock(&mgr->lock);
1646 	if (mgr->mst_primary) {
1647 		found_port = drm_dp_get_last_connected_port_to_mstb(mstb);
1648 
1649 		if (found_port) {
1650 			rmstb = found_port->parent;
1651 			kref_get(&rmstb->kref);
1652 			*port_num = found_port->port_num;
1653 		}
1654 	}
1655 	mutex_unlock(&mgr->lock);
1656 	return rmstb;
1657 }
1658 
1659 static int drm_dp_payload_send_msg(struct drm_dp_mst_topology_mgr *mgr,
1660 				   struct drm_dp_mst_port *port,
1661 				   int id,
1662 				   int pbn)
1663 {
1664 	struct drm_dp_sideband_msg_tx *txmsg;
1665 	struct drm_dp_mst_branch *mstb;
1666 	int len, ret, port_num;
1667 	u8 sinks[DRM_DP_MAX_SDP_STREAMS];
1668 	int i;
1669 
1670 	port = drm_dp_get_validated_port_ref(mgr, port);
1671 	if (!port)
1672 		return -EINVAL;
1673 
1674 	port_num = port->port_num;
1675 	mstb = drm_dp_get_validated_mstb_ref(mgr, port->parent);
1676 	if (!mstb) {
1677 		mstb = drm_dp_get_last_connected_port_and_mstb(mgr, port->parent, &port_num);
1678 
1679 		if (!mstb) {
1680 			drm_dp_put_port(port);
1681 			return -EINVAL;
1682 		}
1683 	}
1684 
1685 	txmsg = kzalloc(sizeof(*txmsg), GFP_KERNEL);
1686 	if (!txmsg) {
1687 		ret = -ENOMEM;
1688 		goto fail_put;
1689 	}
1690 
1691 	for (i = 0; i < port->num_sdp_streams; i++)
1692 		sinks[i] = i;
1693 
1694 	txmsg->dst = mstb;
1695 	len = build_allocate_payload(txmsg, port_num,
1696 				     id,
1697 				     pbn, port->num_sdp_streams, sinks);
1698 
1699 	drm_dp_queue_down_tx(mgr, txmsg);
1700 
1701 	ret = drm_dp_mst_wait_tx_reply(mstb, txmsg);
1702 	if (ret > 0) {
1703 		if (txmsg->reply.reply_type == 1) {
1704 			ret = -EINVAL;
1705 		} else
1706 			ret = 0;
1707 	}
1708 	kfree(txmsg);
1709 fail_put:
1710 	drm_dp_put_mst_branch_device(mstb);
1711 	drm_dp_put_port(port);
1712 	return ret;
1713 }
1714 
1715 static int drm_dp_create_payload_step1(struct drm_dp_mst_topology_mgr *mgr,
1716 				       int id,
1717 				       struct drm_dp_payload *payload)
1718 {
1719 	int ret;
1720 
1721 	ret = drm_dp_dpcd_write_payload(mgr, id, payload);
1722 	if (ret < 0) {
1723 		payload->payload_state = 0;
1724 		return ret;
1725 	}
1726 	payload->payload_state = DP_PAYLOAD_LOCAL;
1727 	return 0;
1728 }
1729 
1730 static int drm_dp_create_payload_step2(struct drm_dp_mst_topology_mgr *mgr,
1731 				       struct drm_dp_mst_port *port,
1732 				       int id,
1733 				       struct drm_dp_payload *payload)
1734 {
1735 	int ret;
1736 	ret = drm_dp_payload_send_msg(mgr, port, id, port->vcpi.pbn);
1737 	if (ret < 0)
1738 		return ret;
1739 	payload->payload_state = DP_PAYLOAD_REMOTE;
1740 	return ret;
1741 }
1742 
1743 static int drm_dp_destroy_payload_step1(struct drm_dp_mst_topology_mgr *mgr,
1744 					struct drm_dp_mst_port *port,
1745 					int id,
1746 					struct drm_dp_payload *payload)
1747 {
1748 	DRM_DEBUG_KMS("\n");
1749 	/* its okay for these to fail */
1750 	if (port) {
1751 		drm_dp_payload_send_msg(mgr, port, id, 0);
1752 	}
1753 
1754 	drm_dp_dpcd_write_payload(mgr, id, payload);
1755 	payload->payload_state = DP_PAYLOAD_DELETE_LOCAL;
1756 	return 0;
1757 }
1758 
1759 static int drm_dp_destroy_payload_step2(struct drm_dp_mst_topology_mgr *mgr,
1760 					int id,
1761 					struct drm_dp_payload *payload)
1762 {
1763 	payload->payload_state = 0;
1764 	return 0;
1765 }
1766 
1767 /**
1768  * drm_dp_update_payload_part1() - Execute payload update part 1
1769  * @mgr: manager to use.
1770  *
1771  * This iterates over all proposed virtual channels, and tries to
1772  * allocate space in the link for them. For 0->slots transitions,
1773  * this step just writes the VCPI to the MST device. For slots->0
1774  * transitions, this writes the updated VCPIs and removes the
1775  * remote VC payloads.
1776  *
1777  * after calling this the driver should generate ACT and payload
1778  * packets.
1779  */
1780 int drm_dp_update_payload_part1(struct drm_dp_mst_topology_mgr *mgr)
1781 {
1782 	int i, j;
1783 	int cur_slots = 1;
1784 	struct drm_dp_payload req_payload;
1785 	struct drm_dp_mst_port *port;
1786 
1787 	mutex_lock(&mgr->payload_lock);
1788 	for (i = 0; i < mgr->max_payloads; i++) {
1789 		/* solve the current payloads - compare to the hw ones
1790 		   - update the hw view */
1791 		req_payload.start_slot = cur_slots;
1792 		if (mgr->proposed_vcpis[i]) {
1793 			port = container_of(mgr->proposed_vcpis[i], struct drm_dp_mst_port, vcpi);
1794 			port = drm_dp_get_validated_port_ref(mgr, port);
1795 			if (!port) {
1796 				mutex_unlock(&mgr->payload_lock);
1797 				return -EINVAL;
1798 			}
1799 			req_payload.num_slots = mgr->proposed_vcpis[i]->num_slots;
1800 			req_payload.vcpi = mgr->proposed_vcpis[i]->vcpi;
1801 		} else {
1802 			port = NULL;
1803 			req_payload.num_slots = 0;
1804 		}
1805 
1806 		if (mgr->payloads[i].start_slot != req_payload.start_slot) {
1807 			mgr->payloads[i].start_slot = req_payload.start_slot;
1808 		}
1809 		/* work out what is required to happen with this payload */
1810 		if (mgr->payloads[i].num_slots != req_payload.num_slots) {
1811 
1812 			/* need to push an update for this payload */
1813 			if (req_payload.num_slots) {
1814 				drm_dp_create_payload_step1(mgr, mgr->proposed_vcpis[i]->vcpi, &req_payload);
1815 				mgr->payloads[i].num_slots = req_payload.num_slots;
1816 				mgr->payloads[i].vcpi = req_payload.vcpi;
1817 			} else if (mgr->payloads[i].num_slots) {
1818 				mgr->payloads[i].num_slots = 0;
1819 				drm_dp_destroy_payload_step1(mgr, port, port->vcpi.vcpi, &mgr->payloads[i]);
1820 				req_payload.payload_state = mgr->payloads[i].payload_state;
1821 				mgr->payloads[i].start_slot = 0;
1822 			}
1823 			mgr->payloads[i].payload_state = req_payload.payload_state;
1824 		}
1825 		cur_slots += req_payload.num_slots;
1826 
1827 		if (port)
1828 			drm_dp_put_port(port);
1829 	}
1830 
1831 	for (i = 0; i < mgr->max_payloads; i++) {
1832 		if (mgr->payloads[i].payload_state == DP_PAYLOAD_DELETE_LOCAL) {
1833 			DRM_DEBUG_KMS("removing payload %d\n", i);
1834 			for (j = i; j < mgr->max_payloads - 1; j++) {
1835 				memcpy(&mgr->payloads[j], &mgr->payloads[j + 1], sizeof(struct drm_dp_payload));
1836 				mgr->proposed_vcpis[j] = mgr->proposed_vcpis[j + 1];
1837 				if (mgr->proposed_vcpis[j] && mgr->proposed_vcpis[j]->num_slots) {
1838 					set_bit(j + 1, &mgr->payload_mask);
1839 				} else {
1840 					clear_bit(j + 1, &mgr->payload_mask);
1841 				}
1842 			}
1843 			memset(&mgr->payloads[mgr->max_payloads - 1], 0, sizeof(struct drm_dp_payload));
1844 			mgr->proposed_vcpis[mgr->max_payloads - 1] = NULL;
1845 			clear_bit(mgr->max_payloads, &mgr->payload_mask);
1846 
1847 		}
1848 	}
1849 	mutex_unlock(&mgr->payload_lock);
1850 
1851 	return 0;
1852 }
1853 EXPORT_SYMBOL(drm_dp_update_payload_part1);
1854 
1855 /**
1856  * drm_dp_update_payload_part2() - Execute payload update part 2
1857  * @mgr: manager to use.
1858  *
1859  * This iterates over all proposed virtual channels, and tries to
1860  * allocate space in the link for them. For 0->slots transitions,
1861  * this step writes the remote VC payload commands. For slots->0
1862  * this just resets some internal state.
1863  */
1864 int drm_dp_update_payload_part2(struct drm_dp_mst_topology_mgr *mgr)
1865 {
1866 	struct drm_dp_mst_port *port;
1867 	int i;
1868 	int ret = 0;
1869 	mutex_lock(&mgr->payload_lock);
1870 	for (i = 0; i < mgr->max_payloads; i++) {
1871 
1872 		if (!mgr->proposed_vcpis[i])
1873 			continue;
1874 
1875 		port = container_of(mgr->proposed_vcpis[i], struct drm_dp_mst_port, vcpi);
1876 
1877 		DRM_DEBUG_KMS("payload %d %d\n", i, mgr->payloads[i].payload_state);
1878 		if (mgr->payloads[i].payload_state == DP_PAYLOAD_LOCAL) {
1879 			ret = drm_dp_create_payload_step2(mgr, port, mgr->proposed_vcpis[i]->vcpi, &mgr->payloads[i]);
1880 		} else if (mgr->payloads[i].payload_state == DP_PAYLOAD_DELETE_LOCAL) {
1881 			ret = drm_dp_destroy_payload_step2(mgr, mgr->proposed_vcpis[i]->vcpi, &mgr->payloads[i]);
1882 		}
1883 		if (ret) {
1884 			mutex_unlock(&mgr->payload_lock);
1885 			return ret;
1886 		}
1887 	}
1888 	mutex_unlock(&mgr->payload_lock);
1889 	return 0;
1890 }
1891 EXPORT_SYMBOL(drm_dp_update_payload_part2);
1892 
1893 #if 0 /* unused as of yet */
1894 static int drm_dp_send_dpcd_read(struct drm_dp_mst_topology_mgr *mgr,
1895 				 struct drm_dp_mst_port *port,
1896 				 int offset, int size)
1897 {
1898 	int len;
1899 	struct drm_dp_sideband_msg_tx *txmsg;
1900 
1901 	txmsg = kzalloc(sizeof(*txmsg), GFP_KERNEL);
1902 	if (!txmsg)
1903 		return -ENOMEM;
1904 
1905 	len = build_dpcd_read(txmsg, port->port_num, 0, 8);
1906 	txmsg->dst = port->parent;
1907 
1908 	drm_dp_queue_down_tx(mgr, txmsg);
1909 
1910 	return 0;
1911 }
1912 #endif
1913 
1914 static int drm_dp_send_dpcd_write(struct drm_dp_mst_topology_mgr *mgr,
1915 				  struct drm_dp_mst_port *port,
1916 				  int offset, int size, u8 *bytes)
1917 {
1918 	int len;
1919 	int ret;
1920 	struct drm_dp_sideband_msg_tx *txmsg;
1921 	struct drm_dp_mst_branch *mstb;
1922 
1923 	mstb = drm_dp_get_validated_mstb_ref(mgr, port->parent);
1924 	if (!mstb)
1925 		return -EINVAL;
1926 
1927 	txmsg = kzalloc(sizeof(*txmsg), GFP_KERNEL);
1928 	if (!txmsg) {
1929 		ret = -ENOMEM;
1930 		goto fail_put;
1931 	}
1932 
1933 	len = build_dpcd_write(txmsg, port->port_num, offset, size, bytes);
1934 	txmsg->dst = mstb;
1935 
1936 	drm_dp_queue_down_tx(mgr, txmsg);
1937 
1938 	ret = drm_dp_mst_wait_tx_reply(mstb, txmsg);
1939 	if (ret > 0) {
1940 		if (txmsg->reply.reply_type == 1) {
1941 			ret = -EINVAL;
1942 		} else
1943 			ret = 0;
1944 	}
1945 	kfree(txmsg);
1946 fail_put:
1947 	drm_dp_put_mst_branch_device(mstb);
1948 	return ret;
1949 }
1950 
1951 static int drm_dp_encode_up_ack_reply(struct drm_dp_sideband_msg_tx *msg, u8 req_type)
1952 {
1953 	struct drm_dp_sideband_msg_reply_body reply;
1954 
1955 	reply.reply_type = 0;
1956 	reply.req_type = req_type;
1957 	drm_dp_encode_sideband_reply(&reply, msg);
1958 	return 0;
1959 }
1960 
1961 static int drm_dp_send_up_ack_reply(struct drm_dp_mst_topology_mgr *mgr,
1962 				    struct drm_dp_mst_branch *mstb,
1963 				    int req_type, int seqno, bool broadcast)
1964 {
1965 	struct drm_dp_sideband_msg_tx *txmsg;
1966 
1967 	txmsg = kzalloc(sizeof(*txmsg), GFP_KERNEL);
1968 	if (!txmsg)
1969 		return -ENOMEM;
1970 
1971 	txmsg->dst = mstb;
1972 	txmsg->seqno = seqno;
1973 	drm_dp_encode_up_ack_reply(txmsg, req_type);
1974 
1975 	mutex_lock(&mgr->qlock);
1976 
1977 	process_single_up_tx_qlock(mgr, txmsg);
1978 
1979 	mutex_unlock(&mgr->qlock);
1980 
1981 	kfree(txmsg);
1982 	return 0;
1983 }
1984 
1985 static bool drm_dp_get_vc_payload_bw(int dp_link_bw,
1986 				     int dp_link_count,
1987 				     int *out)
1988 {
1989 	switch (dp_link_bw) {
1990 	default:
1991 		DRM_DEBUG_KMS("invalid link bandwidth in DPCD: %x (link count: %d)\n",
1992 			      dp_link_bw, dp_link_count);
1993 		return false;
1994 
1995 	case DP_LINK_BW_1_62:
1996 		*out = 3 * dp_link_count;
1997 		break;
1998 	case DP_LINK_BW_2_7:
1999 		*out = 5 * dp_link_count;
2000 		break;
2001 	case DP_LINK_BW_5_4:
2002 		*out = 10 * dp_link_count;
2003 		break;
2004 	}
2005 	return true;
2006 }
2007 
2008 /**
2009  * drm_dp_mst_topology_mgr_set_mst() - Set the MST state for a topology manager
2010  * @mgr: manager to set state for
2011  * @mst_state: true to enable MST on this connector - false to disable.
2012  *
2013  * This is called by the driver when it detects an MST capable device plugged
2014  * into a DP MST capable port, or when a DP MST capable device is unplugged.
2015  */
2016 int drm_dp_mst_topology_mgr_set_mst(struct drm_dp_mst_topology_mgr *mgr, bool mst_state)
2017 {
2018 	int ret = 0;
2019 	struct drm_dp_mst_branch *mstb = NULL;
2020 
2021 	mutex_lock(&mgr->lock);
2022 	if (mst_state == mgr->mst_state)
2023 		goto out_unlock;
2024 
2025 	mgr->mst_state = mst_state;
2026 	/* set the device into MST mode */
2027 	if (mst_state) {
2028 		WARN_ON(mgr->mst_primary);
2029 
2030 		/* get dpcd info */
2031 		ret = drm_dp_dpcd_read(mgr->aux, DP_DPCD_REV, mgr->dpcd, DP_RECEIVER_CAP_SIZE);
2032 		if (ret != DP_RECEIVER_CAP_SIZE) {
2033 			DRM_DEBUG_KMS("failed to read DPCD\n");
2034 			goto out_unlock;
2035 		}
2036 
2037 		if (!drm_dp_get_vc_payload_bw(mgr->dpcd[1],
2038 					      mgr->dpcd[2] & DP_MAX_LANE_COUNT_MASK,
2039 					      &mgr->pbn_div)) {
2040 			ret = -EINVAL;
2041 			goto out_unlock;
2042 		}
2043 
2044 		mgr->total_pbn = 2560;
2045 		mgr->total_slots = DIV_ROUND_UP(mgr->total_pbn, mgr->pbn_div);
2046 		mgr->avail_slots = mgr->total_slots;
2047 
2048 		/* add initial branch device at LCT 1 */
2049 		mstb = drm_dp_add_mst_branch_device(1, NULL);
2050 		if (mstb == NULL) {
2051 			ret = -ENOMEM;
2052 			goto out_unlock;
2053 		}
2054 		mstb->mgr = mgr;
2055 
2056 		/* give this the main reference */
2057 		mgr->mst_primary = mstb;
2058 		kref_get(&mgr->mst_primary->kref);
2059 
2060 		ret = drm_dp_dpcd_writeb(mgr->aux, DP_MSTM_CTRL,
2061 							 DP_MST_EN | DP_UP_REQ_EN | DP_UPSTREAM_IS_SRC);
2062 		if (ret < 0) {
2063 			goto out_unlock;
2064 		}
2065 
2066 		{
2067 			struct drm_dp_payload reset_pay;
2068 			reset_pay.start_slot = 0;
2069 			reset_pay.num_slots = 0x3f;
2070 			drm_dp_dpcd_write_payload(mgr, 0, &reset_pay);
2071 		}
2072 
2073 		queue_work(system_long_wq, &mgr->work);
2074 
2075 		ret = 0;
2076 	} else {
2077 		/* disable MST on the device */
2078 		mstb = mgr->mst_primary;
2079 		mgr->mst_primary = NULL;
2080 		/* this can fail if the device is gone */
2081 		drm_dp_dpcd_writeb(mgr->aux, DP_MSTM_CTRL, 0);
2082 		ret = 0;
2083 		memset(mgr->payloads, 0, mgr->max_payloads * sizeof(struct drm_dp_payload));
2084 		mgr->payload_mask = 0;
2085 		set_bit(0, &mgr->payload_mask);
2086 		mgr->vcpi_mask = 0;
2087 	}
2088 
2089 out_unlock:
2090 	mutex_unlock(&mgr->lock);
2091 	if (mstb)
2092 		drm_dp_put_mst_branch_device(mstb);
2093 	return ret;
2094 
2095 }
2096 EXPORT_SYMBOL(drm_dp_mst_topology_mgr_set_mst);
2097 
2098 /**
2099  * drm_dp_mst_topology_mgr_suspend() - suspend the MST manager
2100  * @mgr: manager to suspend
2101  *
2102  * This function tells the MST device that we can't handle UP messages
2103  * anymore. This should stop it from sending any since we are suspended.
2104  */
2105 void drm_dp_mst_topology_mgr_suspend(struct drm_dp_mst_topology_mgr *mgr)
2106 {
2107 	mutex_lock(&mgr->lock);
2108 	drm_dp_dpcd_writeb(mgr->aux, DP_MSTM_CTRL,
2109 			   DP_MST_EN | DP_UPSTREAM_IS_SRC);
2110 	mutex_unlock(&mgr->lock);
2111 	flush_work(&mgr->work);
2112 	flush_work(&mgr->destroy_connector_work);
2113 }
2114 EXPORT_SYMBOL(drm_dp_mst_topology_mgr_suspend);
2115 
2116 /**
2117  * drm_dp_mst_topology_mgr_resume() - resume the MST manager
2118  * @mgr: manager to resume
2119  *
2120  * This will fetch DPCD and see if the device is still there,
2121  * if it is, it will rewrite the MSTM control bits, and return.
2122  *
2123  * if the device fails this returns -1, and the driver should do
2124  * a full MST reprobe, in case we were undocked.
2125  */
2126 int drm_dp_mst_topology_mgr_resume(struct drm_dp_mst_topology_mgr *mgr)
2127 {
2128 	int ret = 0;
2129 
2130 	mutex_lock(&mgr->lock);
2131 
2132 	if (mgr->mst_primary) {
2133 		int sret;
2134 		u8 guid[16];
2135 
2136 		sret = drm_dp_dpcd_read(mgr->aux, DP_DPCD_REV, mgr->dpcd, DP_RECEIVER_CAP_SIZE);
2137 		if (sret != DP_RECEIVER_CAP_SIZE) {
2138 			DRM_DEBUG_KMS("dpcd read failed - undocked during suspend?\n");
2139 			ret = -1;
2140 			goto out_unlock;
2141 		}
2142 
2143 		ret = drm_dp_dpcd_writeb(mgr->aux, DP_MSTM_CTRL,
2144 					 DP_MST_EN | DP_UP_REQ_EN | DP_UPSTREAM_IS_SRC);
2145 		if (ret < 0) {
2146 			DRM_DEBUG_KMS("mst write failed - undocked during suspend?\n");
2147 			ret = -1;
2148 			goto out_unlock;
2149 		}
2150 
2151 		/* Some hubs forget their guids after they resume */
2152 		sret = drm_dp_dpcd_read(mgr->aux, DP_GUID, guid, 16);
2153 		if (sret != 16) {
2154 			DRM_DEBUG_KMS("dpcd read failed - undocked during suspend?\n");
2155 			ret = -1;
2156 			goto out_unlock;
2157 		}
2158 		drm_dp_check_mstb_guid(mgr->mst_primary, guid);
2159 
2160 		ret = 0;
2161 	} else
2162 		ret = -1;
2163 
2164 out_unlock:
2165 	mutex_unlock(&mgr->lock);
2166 	return ret;
2167 }
2168 EXPORT_SYMBOL(drm_dp_mst_topology_mgr_resume);
2169 
2170 static void drm_dp_get_one_sb_msg(struct drm_dp_mst_topology_mgr *mgr, bool up)
2171 {
2172 	int len;
2173 	u8 replyblock[32];
2174 	int replylen, origlen, curreply;
2175 	int ret;
2176 	struct drm_dp_sideband_msg_rx *msg;
2177 	int basereg = up ? DP_SIDEBAND_MSG_UP_REQ_BASE : DP_SIDEBAND_MSG_DOWN_REP_BASE;
2178 	msg = up ? &mgr->up_req_recv : &mgr->down_rep_recv;
2179 
2180 	len = min(mgr->max_dpcd_transaction_bytes, 16);
2181 	ret = drm_dp_dpcd_read(mgr->aux, basereg,
2182 			       replyblock, len);
2183 	if (ret != len) {
2184 		DRM_DEBUG_KMS("failed to read DPCD down rep %d %d\n", len, ret);
2185 		return;
2186 	}
2187 	ret = drm_dp_sideband_msg_build(msg, replyblock, len, true);
2188 	if (!ret) {
2189 		DRM_DEBUG_KMS("sideband msg build failed %d\n", replyblock[0]);
2190 		return;
2191 	}
2192 	replylen = msg->curchunk_len + msg->curchunk_hdrlen;
2193 
2194 	origlen = replylen;
2195 	replylen -= len;
2196 	curreply = len;
2197 	while (replylen > 0) {
2198 		len = min3(replylen, mgr->max_dpcd_transaction_bytes, 16);
2199 		ret = drm_dp_dpcd_read(mgr->aux, basereg + curreply,
2200 				    replyblock, len);
2201 		if (ret != len) {
2202 			DRM_DEBUG_KMS("failed to read a chunk\n");
2203 		}
2204 		ret = drm_dp_sideband_msg_build(msg, replyblock, len, false);
2205 		if (ret == false)
2206 			DRM_DEBUG_KMS("failed to build sideband msg\n");
2207 		curreply += len;
2208 		replylen -= len;
2209 	}
2210 }
2211 
2212 static int drm_dp_mst_handle_down_rep(struct drm_dp_mst_topology_mgr *mgr)
2213 {
2214 	int ret = 0;
2215 
2216 	drm_dp_get_one_sb_msg(mgr, false);
2217 
2218 	if (mgr->down_rep_recv.have_eomt) {
2219 		struct drm_dp_sideband_msg_tx *txmsg;
2220 		struct drm_dp_mst_branch *mstb;
2221 		int slot = -1;
2222 		mstb = drm_dp_get_mst_branch_device(mgr,
2223 						    mgr->down_rep_recv.initial_hdr.lct,
2224 						    mgr->down_rep_recv.initial_hdr.rad);
2225 
2226 		if (!mstb) {
2227 			DRM_DEBUG_KMS("Got MST reply from unknown device %d\n", mgr->down_rep_recv.initial_hdr.lct);
2228 			memset(&mgr->down_rep_recv, 0, sizeof(struct drm_dp_sideband_msg_rx));
2229 			return 0;
2230 		}
2231 
2232 		/* find the message */
2233 		slot = mgr->down_rep_recv.initial_hdr.seqno;
2234 		mutex_lock(&mgr->qlock);
2235 		txmsg = mstb->tx_slots[slot];
2236 		/* remove from slots */
2237 		mutex_unlock(&mgr->qlock);
2238 
2239 		if (!txmsg) {
2240 			DRM_DEBUG_KMS("Got MST reply with no msg %p %d %d %02x %02x\n",
2241 			       mstb,
2242 			       mgr->down_rep_recv.initial_hdr.seqno,
2243 			       mgr->down_rep_recv.initial_hdr.lct,
2244 				      mgr->down_rep_recv.initial_hdr.rad[0],
2245 				      mgr->down_rep_recv.msg[0]);
2246 			drm_dp_put_mst_branch_device(mstb);
2247 			memset(&mgr->down_rep_recv, 0, sizeof(struct drm_dp_sideband_msg_rx));
2248 			return 0;
2249 		}
2250 
2251 		drm_dp_sideband_parse_reply(&mgr->down_rep_recv, &txmsg->reply);
2252 		if (txmsg->reply.reply_type == 1) {
2253 			DRM_DEBUG_KMS("Got NAK reply: req 0x%02x, reason 0x%02x, nak data 0x%02x\n", txmsg->reply.req_type, txmsg->reply.u.nak.reason, txmsg->reply.u.nak.nak_data);
2254 		}
2255 
2256 		memset(&mgr->down_rep_recv, 0, sizeof(struct drm_dp_sideband_msg_rx));
2257 		drm_dp_put_mst_branch_device(mstb);
2258 
2259 		mutex_lock(&mgr->qlock);
2260 		txmsg->state = DRM_DP_SIDEBAND_TX_RX;
2261 		mstb->tx_slots[slot] = NULL;
2262 		mutex_unlock(&mgr->qlock);
2263 
2264 		wake_up(&mgr->tx_waitq);
2265 	}
2266 	return ret;
2267 }
2268 
2269 static int drm_dp_mst_handle_up_req(struct drm_dp_mst_topology_mgr *mgr)
2270 {
2271 	int ret = 0;
2272 	drm_dp_get_one_sb_msg(mgr, true);
2273 
2274 	if (mgr->up_req_recv.have_eomt) {
2275 		struct drm_dp_sideband_msg_req_body msg;
2276 		struct drm_dp_mst_branch *mstb = NULL;
2277 		bool seqno;
2278 
2279 		if (!mgr->up_req_recv.initial_hdr.broadcast) {
2280 			mstb = drm_dp_get_mst_branch_device(mgr,
2281 							    mgr->up_req_recv.initial_hdr.lct,
2282 							    mgr->up_req_recv.initial_hdr.rad);
2283 			if (!mstb) {
2284 				DRM_DEBUG_KMS("Got MST reply from unknown device %d\n", mgr->up_req_recv.initial_hdr.lct);
2285 				memset(&mgr->up_req_recv, 0, sizeof(struct drm_dp_sideband_msg_rx));
2286 				return 0;
2287 			}
2288 		}
2289 
2290 		seqno = mgr->up_req_recv.initial_hdr.seqno;
2291 		drm_dp_sideband_parse_req(&mgr->up_req_recv, &msg);
2292 
2293 		if (msg.req_type == DP_CONNECTION_STATUS_NOTIFY) {
2294 			drm_dp_send_up_ack_reply(mgr, mgr->mst_primary, msg.req_type, seqno, false);
2295 
2296 			if (!mstb)
2297 				mstb = drm_dp_get_mst_branch_device_by_guid(mgr, msg.u.conn_stat.guid);
2298 
2299 			if (!mstb) {
2300 				DRM_DEBUG_KMS("Got MST reply from unknown device %d\n", mgr->up_req_recv.initial_hdr.lct);
2301 				memset(&mgr->up_req_recv, 0, sizeof(struct drm_dp_sideband_msg_rx));
2302 				return 0;
2303 			}
2304 
2305 			drm_dp_update_port(mstb, &msg.u.conn_stat);
2306 
2307 			DRM_DEBUG_KMS("Got CSN: pn: %d ldps:%d ddps: %d mcs: %d ip: %d pdt: %d\n", msg.u.conn_stat.port_number, msg.u.conn_stat.legacy_device_plug_status, msg.u.conn_stat.displayport_device_plug_status, msg.u.conn_stat.message_capability_status, msg.u.conn_stat.input_port, msg.u.conn_stat.peer_device_type);
2308 			(*mgr->cbs->hotplug)(mgr);
2309 
2310 		} else if (msg.req_type == DP_RESOURCE_STATUS_NOTIFY) {
2311 			drm_dp_send_up_ack_reply(mgr, mgr->mst_primary, msg.req_type, seqno, false);
2312 			if (!mstb)
2313 				mstb = drm_dp_get_mst_branch_device_by_guid(mgr, msg.u.resource_stat.guid);
2314 
2315 			if (!mstb) {
2316 				DRM_DEBUG_KMS("Got MST reply from unknown device %d\n", mgr->up_req_recv.initial_hdr.lct);
2317 				memset(&mgr->up_req_recv, 0, sizeof(struct drm_dp_sideband_msg_rx));
2318 				return 0;
2319 			}
2320 
2321 			DRM_DEBUG_KMS("Got RSN: pn: %d avail_pbn %d\n", msg.u.resource_stat.port_number, msg.u.resource_stat.available_pbn);
2322 		}
2323 
2324 		drm_dp_put_mst_branch_device(mstb);
2325 		memset(&mgr->up_req_recv, 0, sizeof(struct drm_dp_sideband_msg_rx));
2326 	}
2327 	return ret;
2328 }
2329 
2330 /**
2331  * drm_dp_mst_hpd_irq() - MST hotplug IRQ notify
2332  * @mgr: manager to notify irq for.
2333  * @esi: 4 bytes from SINK_COUNT_ESI
2334  * @handled: whether the hpd interrupt was consumed or not
2335  *
2336  * This should be called from the driver when it detects a short IRQ,
2337  * along with the value of the DEVICE_SERVICE_IRQ_VECTOR_ESI0. The
2338  * topology manager will process the sideband messages received as a result
2339  * of this.
2340  */
2341 int drm_dp_mst_hpd_irq(struct drm_dp_mst_topology_mgr *mgr, u8 *esi, bool *handled)
2342 {
2343 	int ret = 0;
2344 	int sc;
2345 	*handled = false;
2346 	sc = esi[0] & 0x3f;
2347 
2348 	if (sc != mgr->sink_count) {
2349 		mgr->sink_count = sc;
2350 		*handled = true;
2351 	}
2352 
2353 	if (esi[1] & DP_DOWN_REP_MSG_RDY) {
2354 		ret = drm_dp_mst_handle_down_rep(mgr);
2355 		*handled = true;
2356 	}
2357 
2358 	if (esi[1] & DP_UP_REQ_MSG_RDY) {
2359 		ret |= drm_dp_mst_handle_up_req(mgr);
2360 		*handled = true;
2361 	}
2362 
2363 	drm_dp_mst_kick_tx(mgr);
2364 	return ret;
2365 }
2366 EXPORT_SYMBOL(drm_dp_mst_hpd_irq);
2367 
2368 /**
2369  * drm_dp_mst_detect_port() - get connection status for an MST port
2370  * @connector: DRM connector for this port
2371  * @mgr: manager for this port
2372  * @port: unverified pointer to a port
2373  *
2374  * This returns the current connection state for a port. It validates the
2375  * port pointer still exists so the caller doesn't require a reference
2376  */
2377 enum drm_connector_status drm_dp_mst_detect_port(struct drm_connector *connector,
2378 						 struct drm_dp_mst_topology_mgr *mgr, struct drm_dp_mst_port *port)
2379 {
2380 	enum drm_connector_status status = connector_status_disconnected;
2381 
2382 	/* we need to search for the port in the mgr in case its gone */
2383 	port = drm_dp_get_validated_port_ref(mgr, port);
2384 	if (!port)
2385 		return connector_status_disconnected;
2386 
2387 	if (!port->ddps)
2388 		goto out;
2389 
2390 	switch (port->pdt) {
2391 	case DP_PEER_DEVICE_NONE:
2392 	case DP_PEER_DEVICE_MST_BRANCHING:
2393 		break;
2394 
2395 	case DP_PEER_DEVICE_SST_SINK:
2396 		status = connector_status_connected;
2397 		/* for logical ports - cache the EDID */
2398 		if (port->port_num >= 8 && !port->cached_edid) {
2399 			port->cached_edid = drm_get_edid(connector, &port->aux.ddc);
2400 		}
2401 		break;
2402 	case DP_PEER_DEVICE_DP_LEGACY_CONV:
2403 		if (port->ldps)
2404 			status = connector_status_connected;
2405 		break;
2406 	}
2407 out:
2408 	drm_dp_put_port(port);
2409 	return status;
2410 }
2411 EXPORT_SYMBOL(drm_dp_mst_detect_port);
2412 
2413 /**
2414  * drm_dp_mst_port_has_audio() - Check whether port has audio capability or not
2415  * @mgr: manager for this port
2416  * @port: unverified pointer to a port.
2417  *
2418  * This returns whether the port supports audio or not.
2419  */
2420 bool drm_dp_mst_port_has_audio(struct drm_dp_mst_topology_mgr *mgr,
2421 					struct drm_dp_mst_port *port)
2422 {
2423 	bool ret = false;
2424 
2425 	port = drm_dp_get_validated_port_ref(mgr, port);
2426 	if (!port)
2427 		return ret;
2428 	ret = port->has_audio;
2429 	drm_dp_put_port(port);
2430 	return ret;
2431 }
2432 EXPORT_SYMBOL(drm_dp_mst_port_has_audio);
2433 
2434 /**
2435  * drm_dp_mst_get_edid() - get EDID for an MST port
2436  * @connector: toplevel connector to get EDID for
2437  * @mgr: manager for this port
2438  * @port: unverified pointer to a port.
2439  *
2440  * This returns an EDID for the port connected to a connector,
2441  * It validates the pointer still exists so the caller doesn't require a
2442  * reference.
2443  */
2444 struct edid *drm_dp_mst_get_edid(struct drm_connector *connector, struct drm_dp_mst_topology_mgr *mgr, struct drm_dp_mst_port *port)
2445 {
2446 	struct edid *edid = NULL;
2447 
2448 	/* we need to search for the port in the mgr in case its gone */
2449 	port = drm_dp_get_validated_port_ref(mgr, port);
2450 	if (!port)
2451 		return NULL;
2452 
2453 	if (port->cached_edid)
2454 		edid = drm_edid_duplicate(port->cached_edid);
2455 	else {
2456 		edid = drm_get_edid(connector, &port->aux.ddc);
2457 		drm_mode_connector_set_tile_property(connector);
2458 	}
2459 	port->has_audio = drm_detect_monitor_audio(edid);
2460 	drm_dp_put_port(port);
2461 	return edid;
2462 }
2463 EXPORT_SYMBOL(drm_dp_mst_get_edid);
2464 
2465 /**
2466  * drm_dp_find_vcpi_slots() - find slots for this PBN value
2467  * @mgr: manager to use
2468  * @pbn: payload bandwidth to convert into slots.
2469  */
2470 int drm_dp_find_vcpi_slots(struct drm_dp_mst_topology_mgr *mgr,
2471 			   int pbn)
2472 {
2473 	int num_slots;
2474 
2475 	num_slots = DIV_ROUND_UP(pbn, mgr->pbn_div);
2476 
2477 	if (num_slots > mgr->avail_slots)
2478 		return -ENOSPC;
2479 	return num_slots;
2480 }
2481 EXPORT_SYMBOL(drm_dp_find_vcpi_slots);
2482 
2483 static int drm_dp_init_vcpi(struct drm_dp_mst_topology_mgr *mgr,
2484 			    struct drm_dp_vcpi *vcpi, int pbn)
2485 {
2486 	int num_slots;
2487 	int ret;
2488 
2489 	num_slots = DIV_ROUND_UP(pbn, mgr->pbn_div);
2490 
2491 	if (num_slots > mgr->avail_slots)
2492 		return -ENOSPC;
2493 
2494 	vcpi->pbn = pbn;
2495 	vcpi->aligned_pbn = num_slots * mgr->pbn_div;
2496 	vcpi->num_slots = num_slots;
2497 
2498 	ret = drm_dp_mst_assign_payload_id(mgr, vcpi);
2499 	if (ret < 0)
2500 		return ret;
2501 	return 0;
2502 }
2503 
2504 /**
2505  * drm_dp_mst_allocate_vcpi() - Allocate a virtual channel
2506  * @mgr: manager for this port
2507  * @port: port to allocate a virtual channel for.
2508  * @pbn: payload bandwidth number to request
2509  * @slots: returned number of slots for this PBN.
2510  */
2511 bool drm_dp_mst_allocate_vcpi(struct drm_dp_mst_topology_mgr *mgr, struct drm_dp_mst_port *port, int pbn, int *slots)
2512 {
2513 	int ret;
2514 
2515 	port = drm_dp_get_validated_port_ref(mgr, port);
2516 	if (!port)
2517 		return false;
2518 
2519 	if (port->vcpi.vcpi > 0) {
2520 		DRM_DEBUG_KMS("payload: vcpi %d already allocated for pbn %d - requested pbn %d\n", port->vcpi.vcpi, port->vcpi.pbn, pbn);
2521 		if (pbn == port->vcpi.pbn) {
2522 			*slots = port->vcpi.num_slots;
2523 			drm_dp_put_port(port);
2524 			return true;
2525 		}
2526 	}
2527 
2528 	ret = drm_dp_init_vcpi(mgr, &port->vcpi, pbn);
2529 	if (ret) {
2530 		DRM_DEBUG_KMS("failed to init vcpi %d %d %d\n", DIV_ROUND_UP(pbn, mgr->pbn_div), mgr->avail_slots, ret);
2531 		goto out;
2532 	}
2533 	DRM_DEBUG_KMS("initing vcpi for %d %d\n", pbn, port->vcpi.num_slots);
2534 	*slots = port->vcpi.num_slots;
2535 
2536 	drm_dp_put_port(port);
2537 	return true;
2538 out:
2539 	return false;
2540 }
2541 EXPORT_SYMBOL(drm_dp_mst_allocate_vcpi);
2542 
2543 int drm_dp_mst_get_vcpi_slots(struct drm_dp_mst_topology_mgr *mgr, struct drm_dp_mst_port *port)
2544 {
2545 	int slots = 0;
2546 	port = drm_dp_get_validated_port_ref(mgr, port);
2547 	if (!port)
2548 		return slots;
2549 
2550 	slots = port->vcpi.num_slots;
2551 	drm_dp_put_port(port);
2552 	return slots;
2553 }
2554 EXPORT_SYMBOL(drm_dp_mst_get_vcpi_slots);
2555 
2556 /**
2557  * drm_dp_mst_reset_vcpi_slots() - Reset number of slots to 0 for VCPI
2558  * @mgr: manager for this port
2559  * @port: unverified pointer to a port.
2560  *
2561  * This just resets the number of slots for the ports VCPI for later programming.
2562  */
2563 void drm_dp_mst_reset_vcpi_slots(struct drm_dp_mst_topology_mgr *mgr, struct drm_dp_mst_port *port)
2564 {
2565 	port = drm_dp_get_validated_port_ref(mgr, port);
2566 	if (!port)
2567 		return;
2568 	port->vcpi.num_slots = 0;
2569 	drm_dp_put_port(port);
2570 }
2571 EXPORT_SYMBOL(drm_dp_mst_reset_vcpi_slots);
2572 
2573 /**
2574  * drm_dp_mst_deallocate_vcpi() - deallocate a VCPI
2575  * @mgr: manager for this port
2576  * @port: unverified port to deallocate vcpi for
2577  */
2578 void drm_dp_mst_deallocate_vcpi(struct drm_dp_mst_topology_mgr *mgr, struct drm_dp_mst_port *port)
2579 {
2580 	port = drm_dp_get_validated_port_ref(mgr, port);
2581 	if (!port)
2582 		return;
2583 
2584 	drm_dp_mst_put_payload_id(mgr, port->vcpi.vcpi);
2585 	port->vcpi.num_slots = 0;
2586 	port->vcpi.pbn = 0;
2587 	port->vcpi.aligned_pbn = 0;
2588 	port->vcpi.vcpi = 0;
2589 	drm_dp_put_port(port);
2590 }
2591 EXPORT_SYMBOL(drm_dp_mst_deallocate_vcpi);
2592 
2593 static int drm_dp_dpcd_write_payload(struct drm_dp_mst_topology_mgr *mgr,
2594 				     int id, struct drm_dp_payload *payload)
2595 {
2596 	u8 payload_alloc[3], status;
2597 	int ret;
2598 	int retries = 0;
2599 
2600 	drm_dp_dpcd_writeb(mgr->aux, DP_PAYLOAD_TABLE_UPDATE_STATUS,
2601 			   DP_PAYLOAD_TABLE_UPDATED);
2602 
2603 	payload_alloc[0] = id;
2604 	payload_alloc[1] = payload->start_slot;
2605 	payload_alloc[2] = payload->num_slots;
2606 
2607 	ret = drm_dp_dpcd_write(mgr->aux, DP_PAYLOAD_ALLOCATE_SET, payload_alloc, 3);
2608 	if (ret != 3) {
2609 		DRM_DEBUG_KMS("failed to write payload allocation %d\n", ret);
2610 		goto fail;
2611 	}
2612 
2613 retry:
2614 	ret = drm_dp_dpcd_readb(mgr->aux, DP_PAYLOAD_TABLE_UPDATE_STATUS, &status);
2615 	if (ret < 0) {
2616 		DRM_DEBUG_KMS("failed to read payload table status %d\n", ret);
2617 		goto fail;
2618 	}
2619 
2620 	if (!(status & DP_PAYLOAD_TABLE_UPDATED)) {
2621 		retries++;
2622 		if (retries < 20) {
2623 			usleep_range(10000, 20000);
2624 			goto retry;
2625 		}
2626 		DRM_DEBUG_KMS("status not set after read payload table status %d\n", status);
2627 		ret = -EINVAL;
2628 		goto fail;
2629 	}
2630 	ret = 0;
2631 fail:
2632 	return ret;
2633 }
2634 
2635 
2636 /**
2637  * drm_dp_check_act_status() - Check ACT handled status.
2638  * @mgr: manager to use
2639  *
2640  * Check the payload status bits in the DPCD for ACT handled completion.
2641  */
2642 int drm_dp_check_act_status(struct drm_dp_mst_topology_mgr *mgr)
2643 {
2644 	u8 status;
2645 	int ret;
2646 	int count = 0;
2647 
2648 	do {
2649 		ret = drm_dp_dpcd_readb(mgr->aux, DP_PAYLOAD_TABLE_UPDATE_STATUS, &status);
2650 
2651 		if (ret < 0) {
2652 			DRM_DEBUG_KMS("failed to read payload table status %d\n", ret);
2653 			goto fail;
2654 		}
2655 
2656 		if (status & DP_PAYLOAD_ACT_HANDLED)
2657 			break;
2658 		count++;
2659 		udelay(100);
2660 
2661 	} while (count < 30);
2662 
2663 	if (!(status & DP_PAYLOAD_ACT_HANDLED)) {
2664 		DRM_DEBUG_KMS("failed to get ACT bit %d after %d retries\n", status, count);
2665 		ret = -EINVAL;
2666 		goto fail;
2667 	}
2668 	return 0;
2669 fail:
2670 	return ret;
2671 }
2672 EXPORT_SYMBOL(drm_dp_check_act_status);
2673 
2674 /**
2675  * drm_dp_calc_pbn_mode() - Calculate the PBN for a mode.
2676  * @clock: dot clock for the mode
2677  * @bpp: bpp for the mode.
2678  *
2679  * This uses the formula in the spec to calculate the PBN value for a mode.
2680  */
2681 int drm_dp_calc_pbn_mode(int clock, int bpp)
2682 {
2683 	u64 kbps;
2684 	s64 peak_kbps;
2685 	u32 numerator;
2686 	u32 denominator;
2687 
2688 	kbps = clock * bpp;
2689 
2690 	/*
2691 	 * margin 5300ppm + 300ppm ~ 0.6% as per spec, factor is 1.006
2692 	 * The unit of 54/64Mbytes/sec is an arbitrary unit chosen based on
2693 	 * common multiplier to render an integer PBN for all link rate/lane
2694 	 * counts combinations
2695 	 * calculate
2696 	 * peak_kbps *= (1006/1000)
2697 	 * peak_kbps *= (64/54)
2698 	 * peak_kbps *= 8    convert to bytes
2699 	 */
2700 
2701 	numerator = 64 * 1006;
2702 	denominator = 54 * 8 * 1000 * 1000;
2703 
2704 	kbps *= numerator;
2705 	peak_kbps = drm_fixp_from_fraction(kbps, denominator);
2706 
2707 	return drm_fixp2int_ceil(peak_kbps);
2708 }
2709 EXPORT_SYMBOL(drm_dp_calc_pbn_mode);
2710 
2711 static int test_calc_pbn_mode(void)
2712 {
2713 	int ret;
2714 	ret = drm_dp_calc_pbn_mode(154000, 30);
2715 	if (ret != 689) {
2716 		DRM_ERROR("PBN calculation test failed - clock %d, bpp %d, expected PBN %d, actual PBN %d.\n",
2717 				154000, 30, 689, ret);
2718 		return -EINVAL;
2719 	}
2720 	ret = drm_dp_calc_pbn_mode(234000, 30);
2721 	if (ret != 1047) {
2722 		DRM_ERROR("PBN calculation test failed - clock %d, bpp %d, expected PBN %d, actual PBN %d.\n",
2723 				234000, 30, 1047, ret);
2724 		return -EINVAL;
2725 	}
2726 	ret = drm_dp_calc_pbn_mode(297000, 24);
2727 	if (ret != 1063) {
2728 		DRM_ERROR("PBN calculation test failed - clock %d, bpp %d, expected PBN %d, actual PBN %d.\n",
2729 				297000, 24, 1063, ret);
2730 		return -EINVAL;
2731 	}
2732 	return 0;
2733 }
2734 
2735 /* we want to kick the TX after we've ack the up/down IRQs. */
2736 static void drm_dp_mst_kick_tx(struct drm_dp_mst_topology_mgr *mgr)
2737 {
2738 	queue_work(system_long_wq, &mgr->tx_work);
2739 }
2740 
2741 static void drm_dp_mst_dump_mstb(struct seq_file *m,
2742 				 struct drm_dp_mst_branch *mstb)
2743 {
2744 	struct drm_dp_mst_port *port;
2745 	int tabs = mstb->lct;
2746 	char prefix[10];
2747 	int i;
2748 
2749 	for (i = 0; i < tabs; i++)
2750 		prefix[i] = '\t';
2751 	prefix[i] = '\0';
2752 
2753 	seq_printf(m, "%smst: %p, %d\n", prefix, mstb, mstb->num_ports);
2754 	list_for_each_entry(port, &mstb->ports, next) {
2755 		seq_printf(m, "%sport: %d: input: %d: pdt: %d, ddps: %d ldps: %d, sdp: %d/%d, %p, conn: %p\n", prefix, port->port_num, port->input, port->pdt, port->ddps, port->ldps, port->num_sdp_streams, port->num_sdp_stream_sinks, port, port->connector);
2756 		if (port->mstb)
2757 			drm_dp_mst_dump_mstb(m, port->mstb);
2758 	}
2759 }
2760 
2761 static bool dump_dp_payload_table(struct drm_dp_mst_topology_mgr *mgr,
2762 				  char *buf)
2763 {
2764 	int ret;
2765 	int i;
2766 	for (i = 0; i < 4; i++) {
2767 		ret = drm_dp_dpcd_read(mgr->aux, DP_PAYLOAD_TABLE_UPDATE_STATUS + (i * 16), &buf[i * 16], 16);
2768 		if (ret != 16)
2769 			break;
2770 	}
2771 	if (i == 4)
2772 		return true;
2773 	return false;
2774 }
2775 
2776 static void fetch_monitor_name(struct drm_dp_mst_topology_mgr *mgr,
2777 			       struct drm_dp_mst_port *port, char *name,
2778 			       int namelen)
2779 {
2780 	struct edid *mst_edid;
2781 
2782 	mst_edid = drm_dp_mst_get_edid(port->connector, mgr, port);
2783 	drm_edid_get_monitor_name(mst_edid, name, namelen);
2784 }
2785 
2786 /**
2787  * drm_dp_mst_dump_topology(): dump topology to seq file.
2788  * @m: seq_file to dump output to
2789  * @mgr: manager to dump current topology for.
2790  *
2791  * helper to dump MST topology to a seq file for debugfs.
2792  */
2793 void drm_dp_mst_dump_topology(struct seq_file *m,
2794 			      struct drm_dp_mst_topology_mgr *mgr)
2795 {
2796 	int i;
2797 	struct drm_dp_mst_port *port;
2798 
2799 	mutex_lock(&mgr->lock);
2800 	if (mgr->mst_primary)
2801 		drm_dp_mst_dump_mstb(m, mgr->mst_primary);
2802 
2803 	/* dump VCPIs */
2804 	mutex_unlock(&mgr->lock);
2805 
2806 	mutex_lock(&mgr->payload_lock);
2807 	seq_printf(m, "vcpi: %lx %lx %d\n", mgr->payload_mask, mgr->vcpi_mask,
2808 		mgr->max_payloads);
2809 
2810 	for (i = 0; i < mgr->max_payloads; i++) {
2811 		if (mgr->proposed_vcpis[i]) {
2812 			char name[14];
2813 
2814 			port = container_of(mgr->proposed_vcpis[i], struct drm_dp_mst_port, vcpi);
2815 			fetch_monitor_name(mgr, port, name, sizeof(name));
2816 			seq_printf(m, "vcpi %d: %d %d %d sink name: %s\n", i,
2817 				   port->port_num, port->vcpi.vcpi,
2818 				   port->vcpi.num_slots,
2819 				   (*name != 0) ? name :  "Unknown");
2820 		} else
2821 			seq_printf(m, "vcpi %d:unused\n", i);
2822 	}
2823 	for (i = 0; i < mgr->max_payloads; i++) {
2824 		seq_printf(m, "payload %d: %d, %d, %d\n",
2825 			   i,
2826 			   mgr->payloads[i].payload_state,
2827 			   mgr->payloads[i].start_slot,
2828 			   mgr->payloads[i].num_slots);
2829 
2830 
2831 	}
2832 	mutex_unlock(&mgr->payload_lock);
2833 
2834 	mutex_lock(&mgr->lock);
2835 	if (mgr->mst_primary) {
2836 		u8 buf[64];
2837 		bool bret;
2838 		int ret;
2839 		ret = drm_dp_dpcd_read(mgr->aux, DP_DPCD_REV, buf, DP_RECEIVER_CAP_SIZE);
2840 		seq_printf(m, "dpcd: ");
2841 		for (i = 0; i < DP_RECEIVER_CAP_SIZE; i++)
2842 			seq_printf(m, "%02x ", buf[i]);
2843 		seq_printf(m, "\n");
2844 		ret = drm_dp_dpcd_read(mgr->aux, DP_FAUX_CAP, buf, 2);
2845 		seq_printf(m, "faux/mst: ");
2846 		for (i = 0; i < 2; i++)
2847 			seq_printf(m, "%02x ", buf[i]);
2848 		seq_printf(m, "\n");
2849 		ret = drm_dp_dpcd_read(mgr->aux, DP_MSTM_CTRL, buf, 1);
2850 		seq_printf(m, "mst ctrl: ");
2851 		for (i = 0; i < 1; i++)
2852 			seq_printf(m, "%02x ", buf[i]);
2853 		seq_printf(m, "\n");
2854 
2855 		/* dump the standard OUI branch header */
2856 		ret = drm_dp_dpcd_read(mgr->aux, DP_BRANCH_OUI, buf, DP_BRANCH_OUI_HEADER_SIZE);
2857 		seq_printf(m, "branch oui: ");
2858 		for (i = 0; i < 0x3; i++)
2859 			seq_printf(m, "%02x", buf[i]);
2860 		seq_printf(m, " devid: ");
2861 		for (i = 0x3; i < 0x8 && buf[i]; i++)
2862 			seq_printf(m, "%c", buf[i]);
2863 
2864 		seq_printf(m, " revision: hw: %x.%x sw: %x.%x", buf[0x9] >> 4, buf[0x9] & 0xf, buf[0xa], buf[0xb]);
2865 		seq_printf(m, "\n");
2866 		bret = dump_dp_payload_table(mgr, buf);
2867 		if (bret == true) {
2868 			seq_printf(m, "payload table: ");
2869 			for (i = 0; i < 63; i++)
2870 				seq_printf(m, "%02x ", buf[i]);
2871 			seq_printf(m, "\n");
2872 		}
2873 
2874 	}
2875 
2876 	mutex_unlock(&mgr->lock);
2877 
2878 }
2879 EXPORT_SYMBOL(drm_dp_mst_dump_topology);
2880 
2881 static void drm_dp_tx_work(struct work_struct *work)
2882 {
2883 	struct drm_dp_mst_topology_mgr *mgr = container_of(work, struct drm_dp_mst_topology_mgr, tx_work);
2884 
2885 	mutex_lock(&mgr->qlock);
2886 	if (!list_empty(&mgr->tx_msg_downq))
2887 		process_single_down_tx_qlock(mgr);
2888 	mutex_unlock(&mgr->qlock);
2889 }
2890 
2891 static void drm_dp_free_mst_port(struct kref *kref)
2892 {
2893 	struct drm_dp_mst_port *port = container_of(kref, struct drm_dp_mst_port, kref);
2894 	kref_put(&port->parent->kref, drm_dp_free_mst_branch_device);
2895 	kfree(port);
2896 }
2897 
2898 static void drm_dp_destroy_connector_work(struct work_struct *work)
2899 {
2900 	struct drm_dp_mst_topology_mgr *mgr = container_of(work, struct drm_dp_mst_topology_mgr, destroy_connector_work);
2901 	struct drm_dp_mst_port *port;
2902 	bool send_hotplug = false;
2903 	/*
2904 	 * Not a regular list traverse as we have to drop the destroy
2905 	 * connector lock before destroying the connector, to avoid AB->BA
2906 	 * ordering between this lock and the config mutex.
2907 	 */
2908 	for (;;) {
2909 		mutex_lock(&mgr->destroy_connector_lock);
2910 		port = list_first_entry_or_null(&mgr->destroy_connector_list, struct drm_dp_mst_port, next);
2911 		if (!port) {
2912 			mutex_unlock(&mgr->destroy_connector_lock);
2913 			break;
2914 		}
2915 		list_del(&port->next);
2916 		mutex_unlock(&mgr->destroy_connector_lock);
2917 
2918 		kref_init(&port->kref);
2919 		INIT_LIST_HEAD(&port->next);
2920 
2921 		mgr->cbs->destroy_connector(mgr, port->connector);
2922 
2923 		drm_dp_port_teardown_pdt(port, port->pdt);
2924 		port->pdt = DP_PEER_DEVICE_NONE;
2925 
2926 		if (!port->input && port->vcpi.vcpi > 0) {
2927 			drm_dp_mst_reset_vcpi_slots(mgr, port);
2928 			drm_dp_update_payload_part1(mgr);
2929 			drm_dp_mst_put_payload_id(mgr, port->vcpi.vcpi);
2930 		}
2931 
2932 		kref_put(&port->kref, drm_dp_free_mst_port);
2933 		send_hotplug = true;
2934 	}
2935 	if (send_hotplug)
2936 		(*mgr->cbs->hotplug)(mgr);
2937 }
2938 
2939 /**
2940  * drm_dp_mst_topology_mgr_init - initialise a topology manager
2941  * @mgr: manager struct to initialise
2942  * @dev: device providing this structure - for i2c addition.
2943  * @aux: DP helper aux channel to talk to this device
2944  * @max_dpcd_transaction_bytes: hw specific DPCD transaction limit
2945  * @max_payloads: maximum number of payloads this GPU can source
2946  * @conn_base_id: the connector object ID the MST device is connected to.
2947  *
2948  * Return 0 for success, or negative error code on failure
2949  */
2950 int drm_dp_mst_topology_mgr_init(struct drm_dp_mst_topology_mgr *mgr,
2951 				 struct device *dev, struct drm_dp_aux *aux,
2952 				 int max_dpcd_transaction_bytes,
2953 				 int max_payloads, int conn_base_id)
2954 {
2955 	lockinit(&mgr->lock, "drmml", 0, LK_CANRECURSE);
2956 	lockinit(&mgr->qlock, "drmmql", 0, LK_CANRECURSE);
2957 	lockinit(&mgr->payload_lock, "drmmpl", 0, LK_CANRECURSE);
2958 	lockinit(&mgr->destroy_connector_lock, "drmmdcl", 0, LK_CANRECURSE);
2959 	INIT_LIST_HEAD(&mgr->tx_msg_downq);
2960 	INIT_LIST_HEAD(&mgr->destroy_connector_list);
2961 	INIT_WORK(&mgr->work, drm_dp_mst_link_probe_work);
2962 	INIT_WORK(&mgr->tx_work, drm_dp_tx_work);
2963 	INIT_WORK(&mgr->destroy_connector_work, drm_dp_destroy_connector_work);
2964 	init_waitqueue_head(&mgr->tx_waitq);
2965 	mgr->dev = dev;
2966 	mgr->aux = aux;
2967 	mgr->max_dpcd_transaction_bytes = max_dpcd_transaction_bytes;
2968 	mgr->max_payloads = max_payloads;
2969 	mgr->conn_base_id = conn_base_id;
2970 	if (max_payloads + 1 > sizeof(mgr->payload_mask) * 8 ||
2971 	    max_payloads + 1 > sizeof(mgr->vcpi_mask) * 8)
2972 		return -EINVAL;
2973 	mgr->payloads = kcalloc(max_payloads, sizeof(struct drm_dp_payload), GFP_KERNEL);
2974 	if (!mgr->payloads)
2975 		return -ENOMEM;
2976 	mgr->proposed_vcpis = kcalloc(max_payloads, sizeof(struct drm_dp_vcpi *), GFP_KERNEL);
2977 	if (!mgr->proposed_vcpis)
2978 		return -ENOMEM;
2979 	set_bit(0, &mgr->payload_mask);
2980 	if (test_calc_pbn_mode() < 0)
2981 		DRM_ERROR("MST PBN self-test failed\n");
2982 
2983 	return 0;
2984 }
2985 EXPORT_SYMBOL(drm_dp_mst_topology_mgr_init);
2986 
2987 /**
2988  * drm_dp_mst_topology_mgr_destroy() - destroy topology manager.
2989  * @mgr: manager to destroy
2990  */
2991 void drm_dp_mst_topology_mgr_destroy(struct drm_dp_mst_topology_mgr *mgr)
2992 {
2993 	flush_work(&mgr->work);
2994 	flush_work(&mgr->destroy_connector_work);
2995 	mutex_lock(&mgr->payload_lock);
2996 	kfree(mgr->payloads);
2997 	mgr->payloads = NULL;
2998 	kfree(mgr->proposed_vcpis);
2999 	mgr->proposed_vcpis = NULL;
3000 	mutex_unlock(&mgr->payload_lock);
3001 	mgr->dev = NULL;
3002 	mgr->aux = NULL;
3003 }
3004 EXPORT_SYMBOL(drm_dp_mst_topology_mgr_destroy);
3005 
3006 /* I2C device */
3007 static int drm_dp_mst_i2c_xfer(struct i2c_adapter *adapter, struct i2c_msg *msgs,
3008 			       int num)
3009 {
3010 	struct drm_dp_aux *aux = adapter->algo_data;
3011 	struct drm_dp_mst_port *port = container_of(aux, struct drm_dp_mst_port, aux);
3012 	struct drm_dp_mst_branch *mstb;
3013 	struct drm_dp_mst_topology_mgr *mgr = port->mgr;
3014 	unsigned int i;
3015 	bool reading = false;
3016 	struct drm_dp_sideband_msg_req_body msg;
3017 	struct drm_dp_sideband_msg_tx *txmsg = NULL;
3018 	int ret;
3019 
3020 	mstb = drm_dp_get_validated_mstb_ref(mgr, port->parent);
3021 	if (!mstb)
3022 		return -EREMOTEIO;
3023 
3024 	/* construct i2c msg */
3025 	/* see if last msg is a read */
3026 	if (msgs[num - 1].flags & I2C_M_RD)
3027 		reading = true;
3028 
3029 	if (!reading || (num - 1 > DP_REMOTE_I2C_READ_MAX_TRANSACTIONS)) {
3030 		DRM_DEBUG_KMS("Unsupported I2C transaction for MST device\n");
3031 		ret = -EIO;
3032 		goto out;
3033 	}
3034 
3035 	memset(&msg, 0, sizeof(msg));
3036 	msg.req_type = DP_REMOTE_I2C_READ;
3037 	msg.u.i2c_read.num_transactions = num - 1;
3038 	msg.u.i2c_read.port_number = port->port_num;
3039 	for (i = 0; i < num - 1; i++) {
3040 		msg.u.i2c_read.transactions[i].i2c_dev_id = msgs[i].addr;
3041 		msg.u.i2c_read.transactions[i].num_bytes = msgs[i].len;
3042 		msg.u.i2c_read.transactions[i].bytes = msgs[i].buf;
3043 	}
3044 	msg.u.i2c_read.read_i2c_device_id = msgs[num - 1].addr;
3045 	msg.u.i2c_read.num_bytes_read = msgs[num - 1].len;
3046 
3047 	txmsg = kzalloc(sizeof(*txmsg), GFP_KERNEL);
3048 	if (!txmsg) {
3049 		ret = -ENOMEM;
3050 		goto out;
3051 	}
3052 
3053 	txmsg->dst = mstb;
3054 	drm_dp_encode_sideband_req(&msg, txmsg);
3055 
3056 	drm_dp_queue_down_tx(mgr, txmsg);
3057 
3058 	ret = drm_dp_mst_wait_tx_reply(mstb, txmsg);
3059 	if (ret > 0) {
3060 
3061 		if (txmsg->reply.reply_type == 1) { /* got a NAK back */
3062 			ret = -EREMOTEIO;
3063 			goto out;
3064 		}
3065 		if (txmsg->reply.u.remote_i2c_read_ack.num_bytes != msgs[num - 1].len) {
3066 			ret = -EIO;
3067 			goto out;
3068 		}
3069 		memcpy(msgs[num - 1].buf, txmsg->reply.u.remote_i2c_read_ack.bytes, msgs[num - 1].len);
3070 		ret = num;
3071 	}
3072 out:
3073 	kfree(txmsg);
3074 	drm_dp_put_mst_branch_device(mstb);
3075 	return ret;
3076 }
3077 
3078 static u32 drm_dp_mst_i2c_functionality(struct i2c_adapter *adapter)
3079 {
3080 	return I2C_FUNC_I2C | I2C_FUNC_SMBUS_EMUL |
3081 	       I2C_FUNC_SMBUS_READ_BLOCK_DATA |
3082 	       I2C_FUNC_SMBUS_BLOCK_PROC_CALL |
3083 	       I2C_FUNC_10BIT_ADDR;
3084 }
3085 
3086 static const struct i2c_algorithm drm_dp_mst_i2c_algo = {
3087 	.functionality = drm_dp_mst_i2c_functionality,
3088 	.master_xfer = drm_dp_mst_i2c_xfer,
3089 };
3090 
3091 /**
3092  * drm_dp_mst_register_i2c_bus() - register an I2C adapter for I2C-over-AUX
3093  * @aux: DisplayPort AUX channel
3094  *
3095  * Returns 0 on success or a negative error code on failure.
3096  */
3097 static int drm_dp_mst_register_i2c_bus(struct drm_dp_aux *aux)
3098 {
3099 	aux->ddc.algo = &drm_dp_mst_i2c_algo;
3100 	aux->ddc.algo_data = aux;
3101 	aux->ddc.retries = 3;
3102 
3103 #if 0
3104 	aux->ddc.class = I2C_CLASS_DDC;
3105 	aux->ddc.owner = THIS_MODULE;
3106 #endif
3107 	aux->ddc.dev.parent = aux->dev;
3108 #if 0
3109 	aux->ddc.dev.of_node = aux->dev->of_node;
3110 #endif
3111 
3112 	strlcpy(aux->ddc.name, aux->name ? aux->name : dev_name(aux->dev),
3113 		sizeof(aux->ddc.name));
3114 
3115 	return i2c_add_adapter(&aux->ddc);
3116 }
3117 
3118 /**
3119  * drm_dp_mst_unregister_i2c_bus() - unregister an I2C-over-AUX adapter
3120  * @aux: DisplayPort AUX channel
3121  */
3122 static void drm_dp_mst_unregister_i2c_bus(struct drm_dp_aux *aux)
3123 {
3124 	i2c_del_adapter(&aux->ddc);
3125 }
3126