1 /* SPDX-License-Identifier: GPL-2.0+ */
3 * Surface Serial Hub (SSH) protocol and communication interface.
5 * Lower-level communication layers and SSH protocol definitions for the
6 * Surface System Aggregator Module (SSAM). Provides the interface for basic
7 * packet- and request-based communication with the SSAM EC via SSH.
12 #ifndef _LINUX_SURFACE_AGGREGATOR_SERIAL_HUB_H
13 #define _LINUX_SURFACE_AGGREGATOR_SERIAL_HUB_H
15 #include <linux/crc-ccitt.h>
16 #include <linux/kref.h>
17 #include <linux/ktime.h>
18 #include <linux/list.h>
19 #include <linux/types.h>
22 /* -- Data structures for SAM-over-SSH communication. ----------------------- */
25 * enum ssh_frame_type - Frame types for SSH frames.
27 * @SSH_FRAME_TYPE_DATA_SEQ:
28 * Indicates a data frame, followed by a payload with the length specified
29 * in the ``struct ssh_frame.len`` field. This frame is sequenced, meaning
30 * that an ACK is required.
32 * @SSH_FRAME_TYPE_DATA_NSQ:
33 * Same as %SSH_FRAME_TYPE_DATA_SEQ, but unsequenced, meaning that the
34 * message does not have to be ACKed.
36 * @SSH_FRAME_TYPE_ACK:
37 * Indicates an ACK message.
39 * @SSH_FRAME_TYPE_NAK:
40 * Indicates an error response for previously sent frame. In general, this
41 * means that the frame and/or payload is malformed, e.g. a CRC is wrong.
42 * For command-type payloads, this can also mean that the command is
46 SSH_FRAME_TYPE_DATA_SEQ = 0x80,
47 SSH_FRAME_TYPE_DATA_NSQ = 0x00,
48 SSH_FRAME_TYPE_ACK = 0x40,
49 SSH_FRAME_TYPE_NAK = 0x04,
53 * struct ssh_frame - SSH communication frame.
54 * @type: The type of the frame. See &enum ssh_frame_type.
55 * @len: The length of the frame payload directly following the CRC for this
56 * frame. Does not include the final CRC for that payload.
57 * @seq: The sequence number for this message/exchange.
65 static_assert(sizeof(struct ssh_frame) == 4);
68 * SSH_FRAME_MAX_PAYLOAD_SIZE - Maximum SSH frame payload length in bytes.
70 * This is the physical maximum length of the protocol. Implementations may
71 * set a more constrained limit.
73 #define SSH_FRAME_MAX_PAYLOAD_SIZE U16_MAX
76 * enum ssh_payload_type - Type indicator for the SSH payload.
77 * @SSH_PLD_TYPE_CMD: The payload is a command structure with optional command
80 enum ssh_payload_type {
81 SSH_PLD_TYPE_CMD = 0x80,
85 * struct ssh_command - Payload of a command-type frame.
86 * @type: The type of the payload. See &enum ssh_payload_type. Should be
87 * SSH_PLD_TYPE_CMD for this struct.
88 * @tc: Command target category.
89 * @tid_out: Output target ID. Should be zero if this an incoming (EC to host)
91 * @tid_in: Input target ID. Should be zero if this is an outgoing (host to
94 * @rqid: Request ID. Used to match requests with responses and differentiate
95 * between responses and events.
108 static_assert(sizeof(struct ssh_command) == 8);
111 * SSH_COMMAND_MAX_PAYLOAD_SIZE - Maximum SSH command payload length in bytes.
113 * This is the physical maximum length of the protocol. Implementations may
114 * set a more constrained limit.
116 #define SSH_COMMAND_MAX_PAYLOAD_SIZE \
117 (SSH_FRAME_MAX_PAYLOAD_SIZE - sizeof(struct ssh_command))
120 * SSH_MSG_LEN_BASE - Base-length of a SSH message.
122 * This is the minimum number of bytes required to form a message. The actual
123 * message length is SSH_MSG_LEN_BASE plus the length of the frame payload.
125 #define SSH_MSG_LEN_BASE (sizeof(struct ssh_frame) + 3ull * sizeof(u16))
128 * SSH_MSG_LEN_CTRL - Length of a SSH control message.
130 * This is the length of a SSH control message, which is equal to a SSH
131 * message without any payload.
133 #define SSH_MSG_LEN_CTRL SSH_MSG_LEN_BASE
136 * SSH_MESSAGE_LENGTH() - Compute length of SSH message.
137 * @payload_size: Length of the payload inside the SSH frame.
139 * Return: Returns the length of a SSH message with payload of specified size.
141 #define SSH_MESSAGE_LENGTH(payload_size) (SSH_MSG_LEN_BASE + (payload_size))
144 * SSH_COMMAND_MESSAGE_LENGTH() - Compute length of SSH command message.
145 * @payload_size: Length of the command payload.
147 * Return: Returns the length of a SSH command message with command payload of
150 #define SSH_COMMAND_MESSAGE_LENGTH(payload_size) \
151 SSH_MESSAGE_LENGTH(sizeof(struct ssh_command) + (payload_size))
154 * SSH_MSGOFFSET_FRAME() - Compute offset in SSH message to specified field in
156 * @field: The field for which the offset should be computed.
158 * Return: Returns the offset of the specified &struct ssh_frame field in the
159 * raw SSH message data as. Takes SYN bytes (u16) preceding the frame into
162 #define SSH_MSGOFFSET_FRAME(field) \
163 (sizeof(u16) + offsetof(struct ssh_frame, field))
166 * SSH_MSGOFFSET_COMMAND() - Compute offset in SSH message to specified field
168 * @field: The field for which the offset should be computed.
170 * Return: Returns the offset of the specified &struct ssh_command field in
171 * the raw SSH message data. Takes SYN bytes (u16) preceding the frame and the
172 * frame CRC (u16) between frame and command into account.
174 #define SSH_MSGOFFSET_COMMAND(field) \
175 (2ull * sizeof(u16) + sizeof(struct ssh_frame) \
176 + offsetof(struct ssh_command, field))
179 * SSH_MSG_SYN - SSH message synchronization (SYN) bytes as u16.
181 #define SSH_MSG_SYN ((u16)0x55aa)
184 * ssh_crc() - Compute CRC for SSH messages.
185 * @buf: The pointer pointing to the data for which the CRC should be computed.
186 * @len: The length of the data for which the CRC should be computed.
188 * Return: Returns the CRC computed on the provided data, as used for SSH
191 static inline u16 ssh_crc(const u8 *buf, size_t len)
193 return crc_ccitt_false(0xffff, buf, len);
197 * SSH_NUM_EVENTS - The number of reserved event IDs.
199 * The number of reserved event IDs, used for registering an SSH event
200 * handler. Valid event IDs are numbers below or equal to this value, with
201 * exception of zero, which is not an event ID. Thus, this is also the
202 * absolute maximum number of event handlers that can be registered.
204 #define SSH_NUM_EVENTS 38
207 * SSH_NUM_TARGETS - The number of communication targets used in the protocol.
209 #define SSH_NUM_TARGETS 2
212 * ssh_rqid_next_valid() - Return the next valid request ID.
213 * @rqid: The current request ID.
215 * Return: Returns the next valid request ID, following the current request ID
216 * provided to this function. This function skips any request IDs reserved for
219 static inline u16 ssh_rqid_next_valid(u16 rqid)
221 return rqid > 0 ? rqid + 1u : rqid + SSH_NUM_EVENTS + 1u;
225 * ssh_rqid_to_event() - Convert request ID to its corresponding event ID.
226 * @rqid: The request ID to convert.
228 static inline u16 ssh_rqid_to_event(u16 rqid)
234 * ssh_rqid_is_event() - Check if given request ID is a valid event ID.
235 * @rqid: The request ID to check.
237 static inline bool ssh_rqid_is_event(u16 rqid)
239 return ssh_rqid_to_event(rqid) < SSH_NUM_EVENTS;
243 * ssh_tc_to_rqid() - Convert target category to its corresponding request ID.
244 * @tc: The target category to convert.
246 static inline u16 ssh_tc_to_rqid(u8 tc)
252 * ssh_tid_to_index() - Convert target ID to its corresponding target index.
253 * @tid: The target ID to convert.
255 static inline u8 ssh_tid_to_index(u8 tid)
261 * ssh_tid_is_valid() - Check if target ID is valid/supported.
262 * @tid: The target ID to check.
264 static inline bool ssh_tid_is_valid(u8 tid)
266 return ssh_tid_to_index(tid) < SSH_NUM_TARGETS;
270 * struct ssam_span - Reference to a buffer region.
271 * @ptr: Pointer to the buffer region.
272 * @len: Length of the buffer region.
274 * A reference to a (non-owned) buffer segment, consisting of pointer and
275 * length. Use of this struct indicates non-owned data, i.e. data of which the
276 * life-time is managed (i.e. it is allocated/freed) via another pointer.
284 * Known SSH/EC target categories.
286 * List of currently known target category values; "Known" as in we know they
287 * exist and are valid on at least some device/model. Detailed functionality
288 * or the full category name is only known for some of these categories and
289 * is detailed in the respective comment below.
291 * These values and abbreviations have been extracted from strings inside the
295 /* Category 0x00 is invalid for EC use. */
296 SSAM_SSH_TC_SAM = 0x01, /* Generic system functionality, real-time clock. */
297 SSAM_SSH_TC_BAT = 0x02, /* Battery/power subsystem. */
298 SSAM_SSH_TC_TMP = 0x03, /* Thermal subsystem. */
299 SSAM_SSH_TC_PMC = 0x04,
300 SSAM_SSH_TC_FAN = 0x05,
301 SSAM_SSH_TC_PoM = 0x06,
302 SSAM_SSH_TC_DBG = 0x07,
303 SSAM_SSH_TC_KBD = 0x08, /* Legacy keyboard (Laptop 1/2). */
304 SSAM_SSH_TC_FWU = 0x09,
305 SSAM_SSH_TC_UNI = 0x0a,
306 SSAM_SSH_TC_LPC = 0x0b,
307 SSAM_SSH_TC_TCL = 0x0c,
308 SSAM_SSH_TC_SFL = 0x0d,
309 SSAM_SSH_TC_KIP = 0x0e, /* Manages detachable peripherals (Pro X/8 keyboard cover) */
310 SSAM_SSH_TC_EXT = 0x0f,
311 SSAM_SSH_TC_BLD = 0x10,
312 SSAM_SSH_TC_BAS = 0x11, /* Detachment system (Surface Book 2/3). */
313 SSAM_SSH_TC_SEN = 0x12,
314 SSAM_SSH_TC_SRQ = 0x13,
315 SSAM_SSH_TC_MCU = 0x14,
316 SSAM_SSH_TC_HID = 0x15, /* Generic HID input subsystem. */
317 SSAM_SSH_TC_TCH = 0x16,
318 SSAM_SSH_TC_BKL = 0x17,
319 SSAM_SSH_TC_TAM = 0x18,
320 SSAM_SSH_TC_ACC0 = 0x19,
321 SSAM_SSH_TC_UFI = 0x1a,
322 SSAM_SSH_TC_USC = 0x1b,
323 SSAM_SSH_TC_PEN = 0x1c,
324 SSAM_SSH_TC_VID = 0x1d,
325 SSAM_SSH_TC_AUD = 0x1e,
326 SSAM_SSH_TC_SMC = 0x1f,
327 SSAM_SSH_TC_KPD = 0x20,
328 SSAM_SSH_TC_REG = 0x21, /* Extended event registry. */
329 SSAM_SSH_TC_SPT = 0x22,
330 SSAM_SSH_TC_SYS = 0x23,
331 SSAM_SSH_TC_ACC1 = 0x24,
332 SSAM_SSH_TC_SHB = 0x25,
333 SSAM_SSH_TC_POS = 0x26, /* For obtaining Laptop Studio screen position. */
337 /* -- Packet transport layer (ptl). ----------------------------------------- */
340 * enum ssh_packet_base_priority - Base priorities for &struct ssh_packet.
341 * @SSH_PACKET_PRIORITY_FLUSH: Base priority for flush packets.
342 * @SSH_PACKET_PRIORITY_DATA: Base priority for normal data packets.
343 * @SSH_PACKET_PRIORITY_NAK: Base priority for NAK packets.
344 * @SSH_PACKET_PRIORITY_ACK: Base priority for ACK packets.
346 enum ssh_packet_base_priority {
347 SSH_PACKET_PRIORITY_FLUSH = 0, /* same as DATA to sequence flush */
348 SSH_PACKET_PRIORITY_DATA = 0,
349 SSH_PACKET_PRIORITY_NAK = 1,
350 SSH_PACKET_PRIORITY_ACK = 2,
354 * Same as SSH_PACKET_PRIORITY() below, only with actual values.
356 #define __SSH_PACKET_PRIORITY(base, try) \
357 (((base) << 4) | ((try) & 0x0f))
360 * SSH_PACKET_PRIORITY() - Compute packet priority from base priority and
362 * @base: The base priority as suffix of &enum ssh_packet_base_priority, e.g.
363 * ``FLUSH``, ``DATA``, ``ACK``, or ``NAK``.
364 * @try: The number of tries (must be less than 16).
366 * Compute the combined packet priority. The combined priority is dominated by
367 * the base priority, whereas the number of (re-)tries decides the precedence
368 * of packets with the same base priority, giving higher priority to packets
369 * that already have more tries.
371 * Return: Returns the computed priority as value fitting inside a &u8. A
372 * higher number means a higher priority.
374 #define SSH_PACKET_PRIORITY(base, try) \
375 __SSH_PACKET_PRIORITY(SSH_PACKET_PRIORITY_##base, (try))
378 * ssh_packet_priority_get_try() - Get number of tries from packet priority.
379 * @priority: The packet priority.
381 * Return: Returns the number of tries encoded in the specified packet
384 static inline u8 ssh_packet_priority_get_try(u8 priority)
386 return priority & 0x0f;
390 * ssh_packet_priority_get_base - Get base priority from packet priority.
391 * @priority: The packet priority.
393 * Return: Returns the base priority encoded in the given packet priority.
395 static inline u8 ssh_packet_priority_get_base(u8 priority)
397 return (priority & 0xf0) >> 4;
400 enum ssh_packet_flags {
402 SSH_PACKET_SF_LOCKED_BIT,
403 SSH_PACKET_SF_QUEUED_BIT,
404 SSH_PACKET_SF_PENDING_BIT,
405 SSH_PACKET_SF_TRANSMITTING_BIT,
406 SSH_PACKET_SF_TRANSMITTED_BIT,
407 SSH_PACKET_SF_ACKED_BIT,
408 SSH_PACKET_SF_CANCELED_BIT,
409 SSH_PACKET_SF_COMPLETED_BIT,
412 SSH_PACKET_TY_FLUSH_BIT,
413 SSH_PACKET_TY_SEQUENCED_BIT,
414 SSH_PACKET_TY_BLOCKING_BIT,
416 /* mask for state flags */
417 SSH_PACKET_FLAGS_SF_MASK =
418 BIT(SSH_PACKET_SF_LOCKED_BIT)
419 | BIT(SSH_PACKET_SF_QUEUED_BIT)
420 | BIT(SSH_PACKET_SF_PENDING_BIT)
421 | BIT(SSH_PACKET_SF_TRANSMITTING_BIT)
422 | BIT(SSH_PACKET_SF_TRANSMITTED_BIT)
423 | BIT(SSH_PACKET_SF_ACKED_BIT)
424 | BIT(SSH_PACKET_SF_CANCELED_BIT)
425 | BIT(SSH_PACKET_SF_COMPLETED_BIT),
427 /* mask for type flags */
428 SSH_PACKET_FLAGS_TY_MASK =
429 BIT(SSH_PACKET_TY_FLUSH_BIT)
430 | BIT(SSH_PACKET_TY_SEQUENCED_BIT)
431 | BIT(SSH_PACKET_TY_BLOCKING_BIT),
438 * struct ssh_packet_ops - Callback operations for a SSH packet.
439 * @release: Function called when the packet reference count reaches zero.
440 * This callback must be relied upon to ensure that the packet has
441 * left the transport system(s).
442 * @complete: Function called when the packet is completed, either with
443 * success or failure. In case of failure, the reason for the
444 * failure is indicated by the value of the provided status code
445 * argument. This value will be zero in case of success. Note that
446 * a call to this callback does not guarantee that the packet is
447 * not in use by the transport system any more.
449 struct ssh_packet_ops {
450 void (*release)(struct ssh_packet *p);
451 void (*complete)(struct ssh_packet *p, int status);
455 * struct ssh_packet - SSH transport packet.
456 * @ptl: Pointer to the packet transport layer. May be %NULL if the packet
457 * (or enclosing request) has not been submitted yet.
458 * @refcnt: Reference count of the packet.
459 * @priority: Priority of the packet. Must be computed via
460 * SSH_PACKET_PRIORITY(). Must only be accessed while holding the
461 * queue lock after first submission.
462 * @data: Raw message data.
463 * @data.len: Length of the raw message data.
464 * @data.ptr: Pointer to the raw message data buffer.
465 * @state: State and type flags describing current packet state (dynamic)
466 * and type (static). See &enum ssh_packet_flags for possible
468 * @timestamp: Timestamp specifying when the latest transmission of a
469 * currently pending packet has been started. May be %KTIME_MAX
470 * before or in-between transmission attempts. Used for the packet
471 * timeout implementation. Must only be accessed while holding the
472 * pending lock after first submission.
473 * @queue_node: The list node for the packet queue.
474 * @pending_node: The list node for the set of pending packets.
475 * @ops: Packet operations.
491 struct list_head queue_node;
492 struct list_head pending_node;
494 const struct ssh_packet_ops *ops;
497 struct ssh_packet *ssh_packet_get(struct ssh_packet *p);
498 void ssh_packet_put(struct ssh_packet *p);
501 * ssh_packet_set_data() - Set raw message data of packet.
502 * @p: The packet for which the message data should be set.
503 * @ptr: Pointer to the memory holding the message data.
504 * @len: Length of the message data.
506 * Sets the raw message data buffer of the packet to the provided memory. The
507 * memory is not copied. Instead, the caller is responsible for management
508 * (i.e. allocation and deallocation) of the memory. The caller must ensure
509 * that the provided memory is valid and contains a valid SSH message,
510 * starting from the time of submission of the packet until the ``release``
511 * callback has been called. During this time, the memory may not be altered
514 static inline void ssh_packet_set_data(struct ssh_packet *p, u8 *ptr, size_t len)
521 /* -- Request transport layer (rtl). ---------------------------------------- */
523 enum ssh_request_flags {
525 SSH_REQUEST_SF_LOCKED_BIT,
526 SSH_REQUEST_SF_QUEUED_BIT,
527 SSH_REQUEST_SF_PENDING_BIT,
528 SSH_REQUEST_SF_TRANSMITTING_BIT,
529 SSH_REQUEST_SF_TRANSMITTED_BIT,
530 SSH_REQUEST_SF_RSPRCVD_BIT,
531 SSH_REQUEST_SF_CANCELED_BIT,
532 SSH_REQUEST_SF_COMPLETED_BIT,
535 SSH_REQUEST_TY_FLUSH_BIT,
536 SSH_REQUEST_TY_HAS_RESPONSE_BIT,
538 /* mask for state flags */
539 SSH_REQUEST_FLAGS_SF_MASK =
540 BIT(SSH_REQUEST_SF_LOCKED_BIT)
541 | BIT(SSH_REQUEST_SF_QUEUED_BIT)
542 | BIT(SSH_REQUEST_SF_PENDING_BIT)
543 | BIT(SSH_REQUEST_SF_TRANSMITTING_BIT)
544 | BIT(SSH_REQUEST_SF_TRANSMITTED_BIT)
545 | BIT(SSH_REQUEST_SF_RSPRCVD_BIT)
546 | BIT(SSH_REQUEST_SF_CANCELED_BIT)
547 | BIT(SSH_REQUEST_SF_COMPLETED_BIT),
549 /* mask for type flags */
550 SSH_REQUEST_FLAGS_TY_MASK =
551 BIT(SSH_REQUEST_TY_FLUSH_BIT)
552 | BIT(SSH_REQUEST_TY_HAS_RESPONSE_BIT),
559 * struct ssh_request_ops - Callback operations for a SSH request.
560 * @release: Function called when the request's reference count reaches zero.
561 * This callback must be relied upon to ensure that the request has
562 * left the transport systems (both, packet an request systems).
563 * @complete: Function called when the request is completed, either with
564 * success or failure. The command data for the request response
565 * is provided via the &struct ssh_command parameter (``cmd``),
566 * the command payload of the request response via the &struct
567 * ssh_span parameter (``data``).
569 * If the request does not have any response or has not been
570 * completed with success, both ``cmd`` and ``data`` parameters will
571 * be NULL. If the request response does not have any command
572 * payload, the ``data`` span will be an empty (zero-length) span.
574 * In case of failure, the reason for the failure is indicated by
575 * the value of the provided status code argument (``status``). This
576 * value will be zero in case of success and a regular errno
579 * Note that a call to this callback does not guarantee that the
580 * request is not in use by the transport systems any more.
582 struct ssh_request_ops {
583 void (*release)(struct ssh_request *rqst);
584 void (*complete)(struct ssh_request *rqst,
585 const struct ssh_command *cmd,
586 const struct ssam_span *data, int status);
590 * struct ssh_request - SSH transport request.
591 * @packet: The underlying SSH transport packet.
592 * @node: List node for the request queue and pending set.
593 * @state: State and type flags describing current request state (dynamic)
594 * and type (static). See &enum ssh_request_flags for possible
596 * @timestamp: Timestamp specifying when we start waiting on the response of
597 * the request. This is set once the underlying packet has been
598 * completed and may be %KTIME_MAX before that, or when the request
599 * does not expect a response. Used for the request timeout
601 * @ops: Request Operations.
604 struct ssh_packet packet;
605 struct list_head node;
610 const struct ssh_request_ops *ops;
614 * to_ssh_request() - Cast a SSH packet to its enclosing SSH request.
615 * @p: The packet to cast.
617 * Casts the given &struct ssh_packet to its enclosing &struct ssh_request.
618 * The caller is responsible for making sure that the packet is actually
619 * wrapped in a &struct ssh_request.
621 * Return: Returns the &struct ssh_request wrapping the provided packet.
623 static inline struct ssh_request *to_ssh_request(struct ssh_packet *p)
625 return container_of(p, struct ssh_request, packet);
629 * ssh_request_get() - Increment reference count of request.
630 * @r: The request to increment the reference count of.
632 * Increments the reference count of the given request by incrementing the
633 * reference count of the underlying &struct ssh_packet, enclosed in it.
635 * See also ssh_request_put(), ssh_packet_get().
637 * Return: Returns the request provided as input.
639 static inline struct ssh_request *ssh_request_get(struct ssh_request *r)
641 return r ? to_ssh_request(ssh_packet_get(&r->packet)) : NULL;
645 * ssh_request_put() - Decrement reference count of request.
646 * @r: The request to decrement the reference count of.
648 * Decrements the reference count of the given request by decrementing the
649 * reference count of the underlying &struct ssh_packet, enclosed in it. If
650 * the reference count reaches zero, the ``release`` callback specified in the
651 * request's &struct ssh_request_ops, i.e. ``r->ops->release``, will be
654 * See also ssh_request_get(), ssh_packet_put().
656 static inline void ssh_request_put(struct ssh_request *r)
659 ssh_packet_put(&r->packet);
663 * ssh_request_set_data() - Set raw message data of request.
664 * @r: The request for which the message data should be set.
665 * @ptr: Pointer to the memory holding the message data.
666 * @len: Length of the message data.
668 * Sets the raw message data buffer of the underlying packet to the specified
669 * buffer. Does not copy the actual message data, just sets the buffer pointer
670 * and length. Refer to ssh_packet_set_data() for more details.
672 static inline void ssh_request_set_data(struct ssh_request *r, u8 *ptr, size_t len)
674 ssh_packet_set_data(&r->packet, ptr, len);
677 #endif /* _LINUX_SURFACE_AGGREGATOR_SERIAL_HUB_H */