Merge "touch: Add synaptics_tcm touch driver for khaje"

Android.mk

@@ -66,5 +66,15 @@ ifeq ($(TOUCH_DLKM_ENABLE),  true)
 	include $(DLKM_DIR)/Build_external_kernelmodule.mk
 	###########################################################
 
+	###########################################################
+	include $(CLEAR_VARS)
+	LOCAL_SRC_FILES   := $(wildcard $(LOCAL_PATH)/**/*) $(wildcard $(LOCAL_PATH)/*)
+	LOCAL_MODULE              := synaptics_tcm_ts.ko
+	LOCAL_MODULE_KBUILD_NAME  := synaptics_tcm_ts.ko
+	LOCAL_MODULE_TAGS         := optional
+	#LOCAL_MODULE_DEBUG_ENABLE := true
+	LOCAL_MODULE_PATH         := $(KERNEL_MODULES_OUT)
+	include $(DLKM_DIR)/Build_external_kernelmodule.mk
+	###########################################################
 	endif # DLKM check
 endif

Kbuild

@@ -11,6 +11,11 @@ endif
 	LINUX_INC += -include $(TOUCH_ROOT)/config/gki_kalamatouchconf.h
 #endif
 
+#ifeq ($(CONFIG_ARCH_KHAJE), y)
+	include $(TOUCH_ROOT)/config/gki_khajetouch.conf
+	LINUX_INC += -include $(TOUCH_ROOT)/config/gki_khajetouchconf.h
+#endif
+
 LINUX_INC +=	-Iinclude/linux \
 		-Iinclude/linux/drm \
 		-Iinclude/linux/gunyah \
@@ -121,4 +126,14 @@ ifeq ($(CONFIG_TOUCHSCREEN_DUMMY), y)
 	obj-$(CONFIG_MSM_TOUCH) += dummy_ts.o
 endif
 
+ifeq ($(CONFIG_TOUCHSCREEN_SYNAPTICS_TCM), y)
+	synaptics_tcm_ts-y := \
+		 ./synaptics_tcm/synaptics_tcm_core.o \
+		 ./synaptics_tcm/synaptics_tcm_i2c.o \
+		 ./synaptics_tcm/synaptics_tcm_touch.o
+
+	obj-$(CONFIG_MSM_TOUCH) += synaptics_tcm_ts.o
+
+endif
+
 CDEFINES += -DBUILD_TIMESTAMP=\"$(shell date -u +'%Y-%m-%dT%H:%M:%SZ')\"

config/gki_khajetouch.conf

@@ -0,0 +1,5 @@
+export CONFIG_TOUCHSCREEN_SYNAPTICS_TCM=y
+export CONFIG_TOUCHSCREEN_SYNAPTICS_TCM_I2C=y
+export CONFIG_TOUCHSCREEN_SYNAPTICS_TCM_CORE=y
+export CONFIG_TOUCHSCREEN_SYNAPTICS_TCM_TOUCH=y
+export CONFIG_MSM_TOUCH=m

config/gki_khajetouchconf.h

@@ -0,0 +1,10 @@
+/* SPDX-License-Identifier: GPL-2.0-only */
+/*
+ * Copyright (c) 2022 Qualcomm Innovation Center, Inc. All rights reserved.
+ */
+
+#define CONFIG_TOUCHSCREEN_SYNAPTICS_TCM 1
+#define CONFIG_TOUCHSCREEN_SYNAPTICS_TCM_I2C 1
+#define CONFIG_TOUCHSCREEN_SYNAPTICS_TCM_CORE 1
+#define CONFIG_TOUCHSCREEN_SYNAPTICS_TCM_TOUCH 1
+

synaptics_tcm/synaptics_tcm.h

@@ -0,0 +1,65 @@
+/*
+ * Synaptics TCM touchscreen driver
+ *
+ * Copyright (C) 2017-2019 Synaptics Incorporated. All rights reserved.
+ *
+ * Copyright (C) 2017-2019 Scott Lin <scott.lin@tw.synaptics.com>
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 2 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * INFORMATION CONTAINED IN THIS DOCUMENT IS PROVIDED "AS-IS," AND SYNAPTICS
+ * EXPRESSLY DISCLAIMS ALL EXPRESS AND IMPLIED WARRANTIES, INCLUDING ANY
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE,
+ * AND ANY WARRANTIES OF NON-INFRINGEMENT OF ANY INTELLECTUAL PROPERTY RIGHTS.
+ * IN NO EVENT SHALL SYNAPTICS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES ARISING OUT OF OR IN CONNECTION
+ * WITH THE USE OF THE INFORMATION CONTAINED IN THIS DOCUMENT, HOWEVER CAUSED
+ * AND BASED ON ANY THEORY OF LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+ * NEGLIGENCE OR OTHER TORTIOUS ACTION, AND EVEN IF SYNAPTICS WAS ADVISED OF
+ * THE POSSIBILITY OF SUCH DAMAGE. IF A TRIBUNAL OF COMPETENT JURISDICTION DOES
+ * NOT PERMIT THE DISCLAIMER OF DIRECT DAMAGES OR ANY OTHER DAMAGES, SYNAPTICS'
+ * TOTAL CUMULATIVE LIABILITY TO ANY PARTY SHALL NOT EXCEED ONE HUNDRED U.S.
+ * DOLLARS.
+ */
+
+#ifndef _SYNAPTICS_TCM_H_
+#define _SYNAPTICS_TCM_H_
+
+#define I2C_MODULE_NAME "synaptics_tcm_i2c"
+#define SPI_MODULE_NAME "synaptics_tcm_spi"
+
+struct syna_tcm_board_data {
+	bool x_flip;
+	bool y_flip;
+	bool swap_axes;
+	int irq_gpio;
+	int irq_on_state;
+	int power_gpio;
+	int power_on_state;
+	int reset_gpio;
+	int reset_on_state;
+	unsigned int spi_mode;
+	unsigned int power_delay_ms;
+	unsigned int reset_delay_ms;
+	unsigned int reset_active_ms;
+	unsigned int byte_delay_us;
+	unsigned int block_delay_us;
+	unsigned int ubl_i2c_addr;
+	unsigned int ubl_max_freq;
+	unsigned int ubl_byte_delay_us;
+	unsigned long irq_flags;
+	const char *pwr_reg_name;
+	const char *bus_reg_name;
+	const char *fw_name;
+	bool extend_report;
+};
+
+#endif

synaptics_tcm/synaptics_tcm_core.h

@@ -0,0 +1,686 @@
+/*
+ * Synaptics TCM touchscreen driver
+ *
+ * Copyright (C) 2017-2019 Synaptics Incorporated. All rights reserved.
+ *
+ * Copyright (C) 2017-2019 Scott Lin <scott.lin@tw.synaptics.com>
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 2 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * INFORMATION CONTAINED IN THIS DOCUMENT IS PROVIDED "AS-IS," AND SYNAPTICS
+ * EXPRESSLY DISCLAIMS ALL EXPRESS AND IMPLIED WARRANTIES, INCLUDING ANY
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE,
+ * AND ANY WARRANTIES OF NON-INFRINGEMENT OF ANY INTELLECTUAL PROPERTY RIGHTS.
+ * IN NO EVENT SHALL SYNAPTICS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES ARISING OUT OF OR IN CONNECTION
+ * WITH THE USE OF THE INFORMATION CONTAINED IN THIS DOCUMENT, HOWEVER CAUSED
+ * AND BASED ON ANY THEORY OF LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+ * NEGLIGENCE OR OTHER TORTIOUS ACTION, AND EVEN IF SYNAPTICS WAS ADVISED OF
+ * THE POSSIBILITY OF SUCH DAMAGE. IF A TRIBUNAL OF COMPETENT JURISDICTION DOES
+ * NOT PERMIT THE DISCLAIMER OF DIRECT DAMAGES OR ANY OTHER DAMAGES, SYNAPTICS'
+ * TOTAL CUMULATIVE LIABILITY TO ANY PARTY SHALL NOT EXCEED ONE HUNDRED U.S.
+ * DOLLARS.
+ */
+
+#ifndef _SYNAPTICS_TCM_CORE_H_
+#define _SYNAPTICS_TCM_CORE_H_
+
+#include <linux/version.h>
+#include <linux/kernel.h>
+#include <linux/module.h>
+#include <linux/input.h>
+#include <linux/delay.h>
+#include <linux/platform_device.h>
+#include <linux/slab.h>
+#include "synaptics_tcm.h"
+#ifdef CONFIG_DRM
+#include <drm/drm_panel.h>
+#include <linux/soc/qcom/panel_event_notifier.h>
+#elif CONFIG_FB
+#include <linux/fb.h>
+#include <linux/notifier.h>
+#endif
+#include <uapi/linux/sched/types.h>
+
+#define SYNAPTICS_TCM_ID_PRODUCT (1 << 0)
+#define SYNAPTICS_TCM_ID_VERSION 0x0101
+#define SYNAPTICS_TCM_ID_SUBVERSION 0
+
+#define PLATFORM_DRIVER_NAME "synaptics_tcm"
+
+#define TOUCH_INPUT_NAME "synaptics_tcm_touch"
+#define TOUCH_INPUT_PHYS_PATH "synaptics_tcm/touch_input"
+
+/* #define WAKEUP_GESTURE */
+
+#define RD_CHUNK_SIZE 0 /* read length limit in bytes, 0 = unlimited */
+#define WR_CHUNK_SIZE 0 /* write length limit in bytes, 0 = unlimited */
+
+#define MESSAGE_HEADER_SIZE 4
+#define MESSAGE_MARKER 0xa5
+#define MESSAGE_PADDING 0x5a
+
+#define LOGx(func, dev, log, ...) \
+	func(dev, "%s: " log, __func__, ##__VA_ARGS__)
+
+#define LOGy(func, dev, log, ...) \
+	func(dev, "%s (line %d): " log, __func__, __LINE__, ##__VA_ARGS__)
+
+#define LOGD(dev, log, ...) LOGx(dev_dbg, dev, log, ##__VA_ARGS__)
+#define LOGI(dev, log, ...) LOGx(dev_info, dev, log, ##__VA_ARGS__)
+#define LOGN(dev, log, ...) LOGx(dev_notice, dev, log, ##__VA_ARGS__)
+#define LOGW(dev, log, ...) LOGy(dev_warn, dev, log, ##__VA_ARGS__)
+#define LOGE(dev, log, ...) LOGy(dev_err, dev, log, ##__VA_ARGS__)
+
+#define INIT_BUFFER(buffer, is_clone) \
+	mutex_init(&buffer.buf_mutex); \
+	buffer.clone = is_clone
+
+#define LOCK_BUFFER(buffer) \
+	mutex_lock(&buffer.buf_mutex)
+
+#define UNLOCK_BUFFER(buffer) \
+	mutex_unlock(&buffer.buf_mutex)
+
+#define RELEASE_BUFFER(buffer) \
+	do { \
+		if (buffer.clone == false) { \
+			kfree(buffer.buf); \
+			buffer.buf_size = 0; \
+			buffer.data_length = 0; \
+		} \
+	} while (0)
+
+#define MAX(a, b) \
+	({__typeof__(a) _a = (a); \
+	__typeof__(b) _b = (b); \
+	_a > _b ? _a : _b; })
+
+#define MIN(a, b) \
+	({__typeof__(a) _a = (a); \
+	__typeof__(b) _b = (b); \
+	_a < _b ? _a : _b; })
+
+#define STR(x) #x
+
+#define CONCAT(a, b) a##b
+
+#define SHOW_PROTOTYPE(m_name, a_name) \
+static ssize_t CONCAT(m_name##_sysfs, _##a_name##_show)(struct device *dev, \
+		struct device_attribute *attr, char *buf); \
+\
+static struct device_attribute dev_attr_##a_name = \
+		__ATTR(a_name, 0444, \
+		CONCAT(m_name##_sysfs, _##a_name##_show), \
+		syna_tcm_store_error)
+
+#define STORE_PROTOTYPE(m_name, a_name) \
+static ssize_t CONCAT(m_name##_sysfs, _##a_name##_store)(struct device *dev, \
+		struct device_attribute *attr, const char *buf, size_t count); \
+\
+static struct device_attribute dev_attr_##a_name = \
+		__ATTR(a_name, 0220, \
+		syna_tcm_show_error, \
+		CONCAT(m_name##_sysfs, _##a_name##_store))
+
+#define SHOW_STORE_PROTOTYPE(m_name, a_name) \
+static ssize_t CONCAT(m_name##_sysfs, _##a_name##_show)(struct device *dev, \
+		struct device_attribute *attr, char *buf); \
+\
+static ssize_t CONCAT(m_name##_sysfs, _##a_name##_store)(struct device *dev, \
+		struct device_attribute *attr, const char *buf, size_t count); \
+\
+static struct device_attribute dev_attr_##a_name = \
+		__ATTR(a_name, 0664, \
+		CONCAT(m_name##_sysfs, _##a_name##_show), \
+		CONCAT(m_name##_sysfs, _##a_name##_store))
+
+#define ATTRIFY(a_name) (&dev_attr_##a_name)
+
+#define PINCTRL_STATE_ACTIVE    "pmx_ts_active"
+#define PINCTRL_STATE_SUSPEND   "pmx_ts_suspend"
+#define PINCTRL_STATE_RELEASE   "pmx_ts_release"
+
+enum module_type {
+	TCM_TOUCH = 0,
+	TCM_DEVICE = 1,
+	TCM_TESTING = 2,
+	TCM_REFLASH = 3,
+	TCM_RECOVERY = 4,
+	TCM_ZEROFLASH = 5,
+	TCM_DIAGNOSTICS = 6,
+	TCM_LAST,
+};
+
+enum boot_mode {
+	MODE_APPLICATION = 0x01,
+	MODE_HOST_DOWNLOAD = 0x02,
+	MODE_BOOTLOADER = 0x0b,
+	MODE_TDDI_BOOTLOADER = 0x0c,
+	MODE_PRODUCTION_TEST = 0x0e,
+};
+
+enum boot_status {
+	BOOT_STATUS_OK = 0x00,
+	BOOT_STATUS_BOOTING = 0x01,
+	BOOT_STATUS_APP_BAD_DISPLAY_CRC = 0xfc,
+	BOOT_STATUS_BAD_DISPLAY_CONFIG = 0xfd,
+	BOOT_STATUS_BAD_APP_FIRMWARE = 0xfe,
+	BOOT_STATUS_WARM_BOOT = 0xff,
+};
+
+enum app_status {
+	APP_STATUS_OK = 0x00,
+	APP_STATUS_BOOTING = 0x01,
+	APP_STATUS_UPDATING = 0x02,
+	APP_STATUS_BAD_APP_CONFIG = 0xff,
+};
+
+enum firmware_mode {
+	FW_MODE_BOOTLOADER = 0,
+	FW_MODE_APPLICATION = 1,
+	FW_MODE_PRODUCTION_TEST = 2,
+};
+
+enum dynamic_config_id {
+	DC_UNKNOWN = 0x00,
+	DC_NO_DOZE,
+	DC_DISABLE_NOISE_MITIGATION,
+	DC_INHIBIT_FREQUENCY_SHIFT,
+	DC_REQUESTED_FREQUENCY,
+	DC_DISABLE_HSYNC,
+	DC_REZERO_ON_EXIT_DEEP_SLEEP,
+	DC_CHARGER_CONNECTED,
+	DC_NO_BASELINE_RELAXATION,
+	DC_IN_WAKEUP_GESTURE_MODE,
+	DC_STIMULUS_FINGERS,
+	DC_GRIP_SUPPRESSION_ENABLED,
+	DC_ENABLE_THICK_GLOVE,
+	DC_ENABLE_GLOVE,
+};
+
+enum command {
+	CMD_NONE = 0x00,
+	CMD_CONTINUE_WRITE = 0x01,
+	CMD_IDENTIFY = 0x02,
+	CMD_RESET = 0x04,
+	CMD_ENABLE_REPORT = 0x05,
+	CMD_DISABLE_REPORT = 0x06,
+	CMD_GET_BOOT_INFO = 0x10,
+	CMD_ERASE_FLASH = 0x11,
+	CMD_WRITE_FLASH = 0x12,
+	CMD_READ_FLASH = 0x13,
+	CMD_RUN_APPLICATION_FIRMWARE = 0x14,
+	CMD_SPI_MASTER_WRITE_THEN_READ = 0x15,
+	CMD_REBOOT_TO_ROM_BOOTLOADER = 0x16,
+	CMD_RUN_BOOTLOADER_FIRMWARE = 0x1f,
+	CMD_GET_APPLICATION_INFO = 0x20,
+	CMD_GET_STATIC_CONFIG = 0x21,
+	CMD_SET_STATIC_CONFIG = 0x22,
+	CMD_GET_DYNAMIC_CONFIG = 0x23,
+	CMD_SET_DYNAMIC_CONFIG = 0x24,
+	CMD_GET_TOUCH_REPORT_CONFIG = 0x25,
+	CMD_SET_TOUCH_REPORT_CONFIG = 0x26,
+	CMD_REZERO = 0x27,
+	CMD_COMMIT_CONFIG = 0x28,
+	CMD_DESCRIBE_DYNAMIC_CONFIG = 0x29,
+	CMD_PRODUCTION_TEST = 0x2a,
+	CMD_SET_CONFIG_ID = 0x2b,
+	CMD_ENTER_DEEP_SLEEP = 0x2c,
+	CMD_EXIT_DEEP_SLEEP = 0x2d,
+	CMD_GET_TOUCH_INFO = 0x2e,
+	CMD_GET_DATA_LOCATION = 0x2f,
+	CMD_DOWNLOAD_CONFIG = 0x30,
+	CMD_ENTER_PRODUCTION_TEST_MODE = 0x31,
+	CMD_GET_FEATURES = 0x32,
+};
+
+enum status_code {
+	STATUS_IDLE = 0x00,
+	STATUS_OK = 0x01,
+	STATUS_BUSY = 0x02,
+	STATUS_CONTINUED_READ = 0x03,
+	STATUS_NOT_EXECUTED_IN_DEEP_SLEEP = 0x0b,
+	STATUS_RECEIVE_BUFFER_OVERFLOW = 0x0c,
+	STATUS_PREVIOUS_COMMAND_PENDING = 0x0d,
+	STATUS_NOT_IMPLEMENTED = 0x0e,
+	STATUS_ERROR = 0x0f,
+	STATUS_INVALID = 0xff,
+};
+
+enum report_type {
+	REPORT_IDENTIFY = 0x10,
+	REPORT_TOUCH = 0x11,
+	REPORT_DELTA = 0x12,
+	REPORT_RAW = 0x13,
+	REPORT_STATUS = 0x1b,
+	REPORT_PRINTF = 0x82,
+	REPORT_HDL = 0xfe,
+};
+
+enum command_status {
+	CMD_IDLE = 0,
+	CMD_BUSY = 1,
+	CMD_ERROR = -1,
+};
+
+enum flash_area {
+	BOOTLOADER = 0,
+	BOOT_CONFIG,
+	APP_FIRMWARE,
+	APP_CONFIG,
+	DISP_CONFIG,
+	CUSTOM_OTP,
+	CUSTOM_LCM,
+	CUSTOM_OEM,
+	PPDT,
+};
+
+enum flash_data {
+	LCM_DATA = 1,
+	OEM_DATA,
+	PPDT_DATA,
+};
+
+enum helper_task {
+	HELP_NONE = 0,
+	HELP_RUN_APPLICATION_FIRMWARE,
+	HELP_SEND_RESET_NOTIFICATION,
+};
+
+struct syna_tcm_helper {
+	atomic_t task;
+	struct work_struct work;
+	struct workqueue_struct *workqueue;
+};
+
+struct syna_tcm_watchdog {
+	bool run;
+	unsigned char count;
+	struct delayed_work work;
+	struct workqueue_struct *workqueue;
+};
+
+struct syna_tcm_buffer {
+	bool clone;
+	unsigned char *buf;
+	unsigned int buf_size;
+	unsigned int data_length;
+	struct mutex buf_mutex;
+};
+
+struct syna_tcm_report {
+	unsigned char id;
+	struct syna_tcm_buffer buffer;
+};
+
+struct syna_tcm_identification {
+	unsigned char version;
+	unsigned char mode;
+	unsigned char part_number[16];
+	unsigned char build_id[4];
+	unsigned char max_write_size[2];
+};
+
+struct syna_tcm_boot_info {
+	unsigned char version;
+	unsigned char status;
+	unsigned char asic_id[2];
+	unsigned char write_block_size_words;
+	unsigned char erase_page_size_words[2];
+	unsigned char max_write_payload_size[2];
+	unsigned char last_reset_reason;
+	unsigned char pc_at_time_of_last_reset[2];
+	unsigned char boot_config_start_block[2];
+	unsigned char boot_config_size_blocks[2];
+	unsigned char display_config_start_block[4];
+	unsigned char display_config_length_blocks[2];
+	unsigned char backup_display_config_start_block[4];
+	unsigned char backup_display_config_length_blocks[2];
+	unsigned char custom_otp_start_block[2];
+	unsigned char custom_otp_length_blocks[2];
+};
+
+struct syna_tcm_app_info {
+	unsigned char version[2];
+	unsigned char status[2];
+	unsigned char static_config_size[2];
+	unsigned char dynamic_config_size[2];
+	unsigned char app_config_start_write_block[2];
+	unsigned char app_config_size[2];
+	unsigned char max_touch_report_config_size[2];
+	unsigned char max_touch_report_payload_size[2];
+	unsigned char customer_config_id[16];
+	unsigned char max_x[2];
+	unsigned char max_y[2];
+	unsigned char max_objects[2];
+	unsigned char num_of_buttons[2];
+	unsigned char num_of_image_rows[2];
+	unsigned char num_of_image_cols[2];
+	unsigned char has_hybrid_data[2];
+};
+
+struct syna_tcm_touch_info {
+	unsigned char image_2d_scale_factor[4];
+	unsigned char image_0d_scale_factor[4];
+	unsigned char hybrid_x_scale_factor[4];
+	unsigned char hybrid_y_scale_factor[4];
+};
+
+struct syna_tcm_message_header {
+	unsigned char marker;
+	unsigned char code;
+	unsigned char length[2];
+};
+
+struct syna_tcm_features {
+	unsigned char byte_0_reserved;
+	unsigned char byte_1_reserved;
+	unsigned char dual_firmware:1;
+	unsigned char byte_2_reserved:7;
+} __packed;
+
+struct syna_tcm_hcd {
+	pid_t isr_pid;
+	atomic_t command_status;
+	atomic_t host_downloading;
+	atomic_t firmware_flashing;
+	wait_queue_head_t hdl_wq;
+	wait_queue_head_t reflash_wq;
+	int irq;
+	bool init_okay;
+	bool do_polling;
+	bool in_suspend;
+	bool irq_enabled;
+	bool host_download_mode;
+	unsigned char marker;
+	unsigned char fb_ready;
+	unsigned char command;
+	unsigned char async_report_id;
+	unsigned char status_report_code;
+	unsigned char response_code;
+	unsigned int read_length;
+	unsigned int payload_length;
+	unsigned int packrat_number;
+	unsigned int rd_chunk_size;
+	unsigned int wr_chunk_size;
+	unsigned int app_status;
+	struct platform_device *pdev;
+	struct regulator *pwr_reg;
+	struct regulator *bus_reg;
+	struct kobject *sysfs_dir;
+	struct kobject *dynamnic_config_sysfs_dir;
+	struct mutex extif_mutex;
+	struct mutex reset_mutex;
+	struct mutex irq_en_mutex;
+	struct mutex io_ctrl_mutex;
+	struct mutex rw_ctrl_mutex;
+	struct mutex command_mutex;
+	struct mutex identify_mutex;
+	struct delayed_work polling_work;
+	struct workqueue_struct *polling_workqueue;
+	struct task_struct *notifier_thread;
+	struct pinctrl *ts_pinctrl;
+	struct pinctrl_state *pinctrl_state_active;
+	struct pinctrl_state *pinctrl_state_suspend;
+	struct pinctrl_state *pinctrl_state_release;
+#if defined(CONFIG_DRM) || defined(CONFIG_FB)
+	struct notifier_block fb_notifier;
+#endif
+	void   *notifier_cookie;
+	struct syna_tcm_buffer in;
+	struct syna_tcm_buffer out;
+	struct syna_tcm_buffer resp;
+	struct syna_tcm_buffer temp;
+	struct syna_tcm_buffer config;
+	struct syna_tcm_report report;
+	struct syna_tcm_app_info app_info;
+	struct syna_tcm_boot_info boot_info;
+	struct syna_tcm_touch_info touch_info;
+	struct syna_tcm_identification id_info;
+	struct syna_tcm_helper helper;
+	struct syna_tcm_watchdog watchdog;
+	struct syna_tcm_features features;
+	const struct syna_tcm_hw_interface *hw_if;
+	int (*reset)(struct syna_tcm_hcd *tcm_hcd, bool hw, bool update_wd);
+	int (*sleep)(struct syna_tcm_hcd *tcm_hcd, bool en);
+	int (*identify)(struct syna_tcm_hcd *tcm_hcd, bool id);
+	int (*enable_irq)(struct syna_tcm_hcd *tcm_hcd, bool en, bool ns);
+	int (*switch_mode)(struct syna_tcm_hcd *tcm_hcd,
+			enum firmware_mode mode);
+	int (*read_message)(struct syna_tcm_hcd *tcm_hcd,
+			unsigned char *in_buf, unsigned int length);
+	int (*write_message)(struct syna_tcm_hcd *tcm_hcd,
+			unsigned char command, unsigned char *payload,
+			unsigned int length, unsigned char **resp_buf,
+			unsigned int *resp_buf_size, unsigned int *resp_length,
+			unsigned char *response_code,
+			unsigned int polling_delay_ms);
+	int (*get_dynamic_config)(struct syna_tcm_hcd *tcm_hcd,
+			enum dynamic_config_id id, unsigned short *value);
+	int (*set_dynamic_config)(struct syna_tcm_hcd *tcm_hcd,
+			enum dynamic_config_id id, unsigned short value);
+	int (*get_data_location)(struct syna_tcm_hcd *tcm_hcd,
+			enum flash_area area, unsigned int *addr,
+			unsigned int *length);
+	int (*read_flash_data)(enum flash_area area, bool run_app_firmware,
+			struct syna_tcm_buffer *output);
+	void (*report_touch)(void);
+	void (*update_watchdog)(struct syna_tcm_hcd *tcm_hcd, bool en);
+};
+
+struct syna_tcm_module_cb {
+	enum module_type type;
+	int (*init)(struct syna_tcm_hcd *tcm_hcd);
+	int (*remove)(struct syna_tcm_hcd *tcm_hcd);
+	int (*syncbox)(struct syna_tcm_hcd *tcm_hcd);
+	int (*asyncbox)(struct syna_tcm_hcd *tcm_hcd);
+	int (*reset)(struct syna_tcm_hcd *tcm_hcd);
+	int (*suspend)(struct syna_tcm_hcd *tcm_hcd);
+	int (*resume)(struct syna_tcm_hcd *tcm_hcd);
+	int (*early_suspend)(struct syna_tcm_hcd *tcm_hcd);
+};
+
+struct syna_tcm_module_handler {
+	bool insert;
+	bool detach;
+	struct list_head link;
+	struct syna_tcm_module_cb *mod_cb;
+};
+
+struct syna_tcm_module_pool {
+	bool initialized;
+	bool queue_work;
+	bool reconstructing;
+	struct mutex mutex;
+	struct list_head list;
+	struct work_struct work;
+	struct workqueue_struct *workqueue;
+	struct syna_tcm_hcd *tcm_hcd;
+};
+
+struct syna_tcm_bus_io {
+	unsigned char type;
+	int (*rmi_read)(struct syna_tcm_hcd *tcm_hcd, unsigned short addr,
+			unsigned char *data, unsigned int length);
+	int (*rmi_write)(struct syna_tcm_hcd *tcm_hcd, unsigned short addr,
+			unsigned char *data, unsigned int length);
+	int (*read)(struct syna_tcm_hcd *tcm_hcd, unsigned char *data,
+			unsigned int length);
+	int (*write)(struct syna_tcm_hcd *tcm_hcd, unsigned char *data,
+			unsigned int length);
+};
+
+struct syna_tcm_hw_interface {
+	struct syna_tcm_board_data *bdata;
+	const struct syna_tcm_bus_io *bus_io;
+};
+
+struct drm_panel *tcm_get_panel(void);
+
+int syna_tcm_bus_init(void);
+
+void syna_tcm_bus_exit(void);
+
+int syna_tcm_bus_init_spi(void);
+
+void syna_tcm_bus_exit_spi(void);
+
+int syna_tcm_add_module(struct syna_tcm_module_cb *mod_cb, bool insert);
+
+static inline int syna_tcm_rmi_read(struct syna_tcm_hcd *tcm_hcd,
+		unsigned short addr, unsigned char *data, unsigned int length)
+{
+	return tcm_hcd->hw_if->bus_io->rmi_read(tcm_hcd, addr, data, length);
+}
+
+static inline int syna_tcm_rmi_write(struct syna_tcm_hcd *tcm_hcd,
+		unsigned short addr, unsigned char *data, unsigned int length)
+{
+	return tcm_hcd->hw_if->bus_io->rmi_write(tcm_hcd, addr, data, length);
+}
+
+static inline int syna_tcm_read(struct syna_tcm_hcd *tcm_hcd,
+		unsigned char *data, unsigned int length)
+{
+	return tcm_hcd->hw_if->bus_io->read(tcm_hcd, data, length);
+}
+
+static inline int syna_tcm_write(struct syna_tcm_hcd *tcm_hcd,
+		unsigned char *data, unsigned int length)
+{
+	return tcm_hcd->hw_if->bus_io->write(tcm_hcd, data, length);
+}
+
+static inline ssize_t syna_tcm_show_error(struct device *dev,
+		struct device_attribute *attr, char *buf)
+{
+	pr_err("%s: Attribute not readable\n",
+			__func__);
+
+	return -EPERM;
+}
+
+static inline ssize_t syna_tcm_store_error(struct device *dev,
+		struct device_attribute *attr, const char *buf, size_t count)
+{
+	pr_err("%s: Attribute not writable\n",
+			__func__);
+
+	return -EPERM;
+}
+
+static inline int secure_memcpy(unsigned char *dest, unsigned int dest_size,
+		const unsigned char *src, unsigned int src_size,
+		unsigned int count)
+{
+	if (dest == NULL || src == NULL)
+		return -EINVAL;
+
+	if (count > dest_size || count > src_size) {
+		pr_err("%s: src_size = %d, dest_size = %d, count = %d\n",
+				__func__, src_size, dest_size, count);
+		return -EINVAL;
+	}
+
+	memcpy((void *)dest, (const void *)src, count);
+
+	return 0;
+}
+
+static inline int syna_tcm_realloc_mem(struct syna_tcm_hcd *tcm_hcd,
+		struct syna_tcm_buffer *buffer, unsigned int size)
+{
+	int retval;
+	unsigned char *temp;
+
+	if (size > buffer->buf_size) {
+		temp = buffer->buf;
+
+		buffer->buf = kmalloc(size, GFP_KERNEL);
+		if (!(buffer->buf)) {
+			dev_err(tcm_hcd->pdev->dev.parent,
+					"%s: Failed to allocate memory\n",
+					__func__);
+			kfree(temp);
+			buffer->buf_size = 0;
+			return -ENOMEM;
+		}
+
+		retval = secure_memcpy(buffer->buf,
+				size,
+				temp,
+				buffer->buf_size,
+				buffer->buf_size);
+		if (retval < 0) {
+			dev_err(tcm_hcd->pdev->dev.parent,
+					"%s: Failed to copy data\n",
+					__func__);
+			kfree(temp);
+			kfree(buffer->buf);
+			buffer->buf_size = 0;
+			return retval;
+		}
+
+		kfree(temp);
+		buffer->buf_size = size;
+	}
+
+	return 0;
+}
+
+static inline int syna_tcm_alloc_mem(struct syna_tcm_hcd *tcm_hcd,
+		struct syna_tcm_buffer *buffer, unsigned int size)
+{
+	if (size > buffer->buf_size) {
+		kfree(buffer->buf);
+		buffer->buf = kmalloc(size, GFP_KERNEL);
+		if (!(buffer->buf)) {
+			dev_err(tcm_hcd->pdev->dev.parent,
+					"%s: Failed to allocate memory\n",
+					__func__);
+			dev_err(tcm_hcd->pdev->dev.parent,
+					"%s: Allocation size = %d\n",
+					__func__, size);
+			buffer->buf_size = 0;
+			buffer->data_length = 0;
+			return -ENOMEM;
+		}
+		buffer->buf_size = size;
+	}
+
+	memset(buffer->buf, 0x00, buffer->buf_size);
+	buffer->data_length = 0;
+
+	return 0;
+}
+
+static inline unsigned int le2_to_uint(const unsigned char *src)
+{
+	return (unsigned int)src[0] +
+			(unsigned int)src[1] * 0x100;
+}
+
+static inline unsigned int le4_to_uint(const unsigned char *src)
+{
+	return (unsigned int)src[0] +
+			(unsigned int)src[1] * 0x100 +
+			(unsigned int)src[2] * 0x10000 +
+			(unsigned int)src[3] * 0x1000000;
+}
+
+static inline unsigned int ceil_div(unsigned int dividend,
+		unsigned int divisor)
+{
+	return (dividend + divisor - 1) / divisor;
+}
+
+#endif

synaptics_tcm/synaptics_tcm_device.c

@@ -0,0 +1,707 @@
+/*
+ * Synaptics TCM touchscreen driver
+ *
+ * Copyright (C) 2017-2019 Synaptics Incorporated. All rights reserved.
+ *
+ * Copyright (C) 2017-2019 Scott Lin <scott.lin@tw.synaptics.com>
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 2 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * INFORMATION CONTAINED IN THIS DOCUMENT IS PROVIDED "AS-IS," AND SYNAPTICS
+ * EXPRESSLY DISCLAIMS ALL EXPRESS AND IMPLIED WARRANTIES, INCLUDING ANY
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE,
+ * AND ANY WARRANTIES OF NON-INFRINGEMENT OF ANY INTELLECTUAL PROPERTY RIGHTS.
+ * IN NO EVENT SHALL SYNAPTICS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES ARISING OUT OF OR IN CONNECTION
+ * WITH THE USE OF THE INFORMATION CONTAINED IN THIS DOCUMENT, HOWEVER CAUSED
+ * AND BASED ON ANY THEORY OF LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+ * NEGLIGENCE OR OTHER TORTIOUS ACTION, AND EVEN IF SYNAPTICS WAS ADVISED OF
+ * THE POSSIBILITY OF SUCH DAMAGE. IF A TRIBUNAL OF COMPETENT JURISDICTION DOES
+ * NOT PERMIT THE DISCLAIMER OF DIRECT DAMAGES OR ANY OTHER DAMAGES, SYNAPTICS'
+ * TOTAL CUMULATIVE LIABILITY TO ANY PARTY SHALL NOT EXCEED ONE HUNDRED U.S.
+ * DOLLARS.
+ */
+
+#include <linux/cdev.h>
+#include <linux/gpio.h>
+#include <linux/uaccess.h>
+#include "synaptics_tcm_core.h"
+
+#define CHAR_DEVICE_NAME "tcm"
+
+#define CONCURRENT true
+
+#define DEVICE_IOC_MAGIC 's'
+#define DEVICE_IOC_RESET _IO(DEVICE_IOC_MAGIC, 0) /* 0x00007300 */
+#define DEVICE_IOC_IRQ _IOW(DEVICE_IOC_MAGIC, 1, int) /* 0x40047301 */
+#define DEVICE_IOC_RAW _IOW(DEVICE_IOC_MAGIC, 2, int) /* 0x40047302 */
+#define DEVICE_IOC_CONCURRENT _IOW(DEVICE_IOC_MAGIC, 3, int) /* 0x40047303 */
+
+struct device_hcd {
+	dev_t dev_num;
+	bool raw_mode;
+	bool concurrent;
+	unsigned int ref_count;
+	struct cdev char_dev;
+	struct class *class;
+	struct device *device;
+	struct syna_tcm_buffer out;
+	struct syna_tcm_buffer resp;
+	struct syna_tcm_buffer report;
+	struct syna_tcm_hcd *tcm_hcd;
+};
+
+DECLARE_COMPLETION(device_remove_complete);
+
+static struct device_hcd *device_hcd;
+
+static int rmidev_major_num;
+
+static void device_capture_touch_report(unsigned int count)
+{
+	int retval;
+	unsigned char id;
+	unsigned int idx;
+	unsigned int size;
+	unsigned char *data;
+	struct syna_tcm_hcd *tcm_hcd = device_hcd->tcm_hcd;
+	static bool report;
+	static unsigned int offset;
+	static unsigned int remaining_size;
+
+	if (count < 2)
+		return;
+
+	data = &device_hcd->resp.buf[0];
+
+	if (data[0] != MESSAGE_MARKER)
+		return;
+
+	id = data[1];
+
+	size = 0;
+
+	LOCK_BUFFER(device_hcd->report);
+
+	switch (id) {
+	case REPORT_TOUCH:
+		if (count >= 4) {
+			remaining_size = le2_to_uint(&data[2]);
+		} else {
+			report = false;
+			goto exit;
+		}
+		retval = syna_tcm_alloc_mem(tcm_hcd,
+				&device_hcd->report,
+				remaining_size);
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to allocate memory for report.buf\n");
+			report = false;
+			goto exit;
+		}
+		idx = 4;
+		size = count - idx;
+		offset = 0;
+		report = true;
+		break;
+	case STATUS_CONTINUED_READ:
+		if (report == false)
+			goto exit;
+		if (count >= 2) {
+			idx = 2;
+			size = count - idx;
+		}
+		break;
+	default:
+		goto exit;
+	}
+
+	if (size) {
+		size = MIN(size, remaining_size);
+		retval = secure_memcpy(&device_hcd->report.buf[offset],
+				device_hcd->report.buf_size - offset,
+				&data[idx],
+				count - idx,
+				size);
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+					"Failed to copy touch report data\n");
+			report = false;
+			goto exit;
+		} else {
+			offset += size;
+			remaining_size -= size;
+			device_hcd->report.data_length += size;
+		}
+	}
+
+	if (remaining_size)
+		goto exit;
+
+	LOCK_BUFFER(tcm_hcd->report.buffer);
+
+	tcm_hcd->report.buffer.buf = device_hcd->report.buf;
+	tcm_hcd->report.buffer.buf_size = device_hcd->report.buf_size;
+	tcm_hcd->report.buffer.data_length = device_hcd->report.data_length;
+
+	tcm_hcd->report_touch();
+
+	UNLOCK_BUFFER(tcm_hcd->report.buffer);
+
+	report = false;
+
+exit:
+	UNLOCK_BUFFER(device_hcd->report);
+}
+
+static int device_capture_touch_report_config(unsigned int count)
+{
+	int retval;
+	unsigned int size;
+	unsigned int buf_size;
+	unsigned char *data;
+	struct syna_tcm_hcd *tcm_hcd = device_hcd->tcm_hcd;
+
+	if (device_hcd->raw_mode) {
+		if (count < 3) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+					"Invalid write data\n");
+			return -EINVAL;
+		}
+
+		size = le2_to_uint(&device_hcd->out.buf[1]);
+
+		if (count - 3 < size) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+					"Incomplete write data\n");
+			return -EINVAL;
+		}
+
+		if (!size)
+			return 0;
+
+		data = &device_hcd->out.buf[3];
+		buf_size = device_hcd->out.buf_size - 3;
+	} else {
+		size = count - 1;
+
+		if (!size)
+			return 0;
+
+		data = &device_hcd->out.buf[1];
+		buf_size = device_hcd->out.buf_size - 1;
+	}
+
+	LOCK_BUFFER(tcm_hcd->config);
+
+	retval = syna_tcm_alloc_mem(tcm_hcd,
+			&tcm_hcd->config,
+			size);
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+			"Failed to allocate memory for tcm_hcd->config.buf\n");
+		UNLOCK_BUFFER(tcm_hcd->config);
+		return retval;
+	}
+
+	retval = secure_memcpy(tcm_hcd->config.buf,
+			tcm_hcd->config.buf_size,
+			data,
+			buf_size,
+			size);
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to copy touch report config data\n");
+		UNLOCK_BUFFER(tcm_hcd->config);
+		return retval;
+	}
+
+	tcm_hcd->config.data_length = size;
+
+	UNLOCK_BUFFER(tcm_hcd->config);
+
+	return 0;
+}
+
+#ifdef HAVE_UNLOCKED_IOCTL
+static long device_ioctl(struct file *filp, unsigned int cmd, unsigned long arg)
+#else
+static int device_ioctl(struct inode *inp, struct file *filp, unsigned int cmd,
+		unsigned long arg)
+#endif
+{
+	int retval;
+	struct syna_tcm_hcd *tcm_hcd = device_hcd->tcm_hcd;
+
+	mutex_lock(&tcm_hcd->extif_mutex);
+
+	retval = 0;
+
+	switch (cmd) {
+	case DEVICE_IOC_RESET:
+		retval = tcm_hcd->reset(tcm_hcd, false, true);
+		break;
+	case DEVICE_IOC_IRQ:
+		if (arg == 0)
+			retval = tcm_hcd->enable_irq(tcm_hcd, false, false);
+		else if (arg == 1)
+			retval = tcm_hcd->enable_irq(tcm_hcd, true, NULL);
+		break;
+	case DEVICE_IOC_RAW:
+		if (arg == 0) {
+			device_hcd->raw_mode = false;
+			tcm_hcd->update_watchdog(tcm_hcd, true);
+		} else if (arg == 1) {
+			device_hcd->raw_mode = true;
+			tcm_hcd->update_watchdog(tcm_hcd, false);
+		}
+		break;
+	case DEVICE_IOC_CONCURRENT:
+		if (arg == 0)
+			device_hcd->concurrent = false;
+		else if (arg == 1)
+			device_hcd->concurrent = true;
+		break;
+	default:
+		retval = -ENOTTY;
+		break;
+	}
+
+	mutex_unlock(&tcm_hcd->extif_mutex);
+
+	return retval;
+}
+
+static loff_t device_llseek(struct file *filp, loff_t off, int whence)
+{
+	return -EINVAL;
+}
+
+static ssize_t device_read(struct file *filp, char __user *buf,
+		size_t count, loff_t *f_pos)
+{
+	int retval;
+	struct syna_tcm_hcd *tcm_hcd = device_hcd->tcm_hcd;
+
+	if (count == 0)
+		return 0;
+
+	mutex_lock(&tcm_hcd->extif_mutex);
+
+	LOCK_BUFFER(device_hcd->resp);
+
+	if (device_hcd->raw_mode) {
+		retval = syna_tcm_alloc_mem(tcm_hcd,
+				&device_hcd->resp,
+				count);
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to allocate memory for resp.buf\n");
+			UNLOCK_BUFFER(device_hcd->resp);
+			goto exit;
+		}
+
+		retval = tcm_hcd->read_message(tcm_hcd,
+				device_hcd->resp.buf,
+				count);
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+					"Failed to read message\n");
+			UNLOCK_BUFFER(device_hcd->resp);
+			goto exit;
+		}
+	} else {
+		if (count != device_hcd->resp.data_length) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+					"Invalid length information\n");
+			UNLOCK_BUFFER(device_hcd->resp);
+			retval = -EINVAL;
+			goto exit;
+		}
+	}
+
+	if (copy_to_user(buf, device_hcd->resp.buf, count)) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to copy data to user space\n");
+		UNLOCK_BUFFER(device_hcd->resp);
+		retval = -EINVAL;
+		goto exit;
+	}
+
+	if (!device_hcd->concurrent)
+		goto skip_concurrent;
+
+	if (tcm_hcd->report_touch == NULL) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Unable to report touch\n");
+		device_hcd->concurrent = false;
+	}
+
+	if (device_hcd->raw_mode)
+		device_capture_touch_report(count);
+
+skip_concurrent:
+	UNLOCK_BUFFER(device_hcd->resp);
+
+	retval = count;
+
+exit:
+	mutex_unlock(&tcm_hcd->extif_mutex);
+
+	return retval;
+}
+
+static ssize_t device_write(struct file *filp, const char __user *buf,
+		size_t count, loff_t *f_pos)
+{
+	int retval;
+	struct syna_tcm_hcd *tcm_hcd = device_hcd->tcm_hcd;
+
+	if (count == 0)
+		return 0;
+
+	mutex_lock(&tcm_hcd->extif_mutex);
+
+	LOCK_BUFFER(device_hcd->out);
+
+	retval = syna_tcm_alloc_mem(tcm_hcd,
+			&device_hcd->out,
+			count == 1 ? count + 1 : count);
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+			"Failed to allocate memory for device_hcd->out.buf\n");
+		UNLOCK_BUFFER(device_hcd->out);
+		goto exit;
+	}
+
+	if (copy_from_user(device_hcd->out.buf, buf, count)) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+			"Failed to copy data from user space\n");
+		UNLOCK_BUFFER(device_hcd->out);
+		retval = -EINVAL;
+		goto exit;
+	}
+
+	LOCK_BUFFER(device_hcd->resp);
+
+	if (device_hcd->raw_mode) {
+		retval = tcm_hcd->write_message(tcm_hcd,
+				device_hcd->out.buf[0],
+				&device_hcd->out.buf[1],
+				count - 1,
+				NULL,
+				NULL,
+				NULL,
+				NULL,
+				0);
+	} else {
+		mutex_lock(&tcm_hcd->reset_mutex);
+		retval = tcm_hcd->write_message(tcm_hcd,
+				device_hcd->out.buf[0],
+				&device_hcd->out.buf[1],
+				count - 1,
+				&device_hcd->resp.buf,
+				&device_hcd->resp.buf_size,
+				&device_hcd->resp.data_length,
+				NULL,
+				0);
+		mutex_unlock(&tcm_hcd->reset_mutex);
+	}
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+			"Failed to write command 0x%02x\n",
+			device_hcd->out.buf[0]);
+		UNLOCK_BUFFER(device_hcd->resp);
+		UNLOCK_BUFFER(device_hcd->out);
+		goto exit;
+	}
+
+	if (count && device_hcd->out.buf[0] == CMD_SET_TOUCH_REPORT_CONFIG) {
+		retval = device_capture_touch_report_config(count);
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to capture touch report config\n");
+		}
+	}
+
+	UNLOCK_BUFFER(device_hcd->out);
+
+	if (device_hcd->raw_mode)
+		retval = count;
+	else
+		retval = device_hcd->resp.data_length;
+
+	UNLOCK_BUFFER(device_hcd->resp);
+
+exit:
+	mutex_unlock(&tcm_hcd->extif_mutex);
+
+	return retval;
+}
+
+static int device_open(struct inode *inp, struct file *filp)
+{
+	int retval;
+	struct syna_tcm_hcd *tcm_hcd = device_hcd->tcm_hcd;
+
+	mutex_lock(&tcm_hcd->extif_mutex);
+
+	if (device_hcd->ref_count < 1) {
+		device_hcd->ref_count++;
+		retval = 0;
+	} else {
+		retval = -EACCES;
+	}
+
+	mutex_unlock(&tcm_hcd->extif_mutex);
+
+	return retval;
+}
+
+static int device_release(struct inode *inp, struct file *filp)
+{
+	struct syna_tcm_hcd *tcm_hcd = device_hcd->tcm_hcd;
+
+	mutex_lock(&tcm_hcd->extif_mutex);
+
+	if (device_hcd->ref_count)
+		device_hcd->ref_count--;
+
+	mutex_unlock(&tcm_hcd->extif_mutex);
+
+	return 0;
+}
+
+static char *device_devnode(struct device *dev, umode_t *mode)
+{
+	if (!mode)
+		return NULL;
+
+	/* S_IRUSR | S_IWUSR | S_IRGRP | S_IWGRP | S_IROTH | S_IWOTH; */
+	*mode = 0666;
+
+	return kasprintf(GFP_KERNEL, "%s/%s", PLATFORM_DRIVER_NAME,
+			dev_name(dev));
+}
+
+static int device_create_class(void)
+{
+	struct syna_tcm_hcd *tcm_hcd = device_hcd->tcm_hcd;
+
+	if (device_hcd->class != NULL)
+		return 0;
+
+	device_hcd->class = class_create(THIS_MODULE, PLATFORM_DRIVER_NAME);
+
+	if (IS_ERR(device_hcd->class)) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to create class\n");
+		return -ENODEV;
+	}
+
+	device_hcd->class->devnode = device_devnode;
+
+	return 0;
+}
+
+static const struct file_operations device_fops = {
+	.owner = THIS_MODULE,
+#ifdef HAVE_UNLOCKED_IOCTL
+	.unlocked_ioctl = device_ioctl,
+#ifdef HAVE_COMPAT_IOCTL
+	.compat_ioctl = device_ioctl,
+#endif
+#else
+	.ioctl = device_ioctl,
+#endif
+	.llseek = device_llseek,
+	.read = device_read,
+	.write = device_write,
+	.open = device_open,
+	.release = device_release,
+};
+
+static int device_init(struct syna_tcm_hcd *tcm_hcd)
+{
+	int retval;
+	dev_t dev_num;
+	const struct syna_tcm_board_data *bdata = tcm_hcd->hw_if->bdata;
+
+	device_hcd = kzalloc(sizeof(*device_hcd), GFP_KERNEL);
+	if (!device_hcd) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to allocate memory for device_hcd\n");
+		return -ENOMEM;
+	}
+
+	device_hcd->tcm_hcd = tcm_hcd;
+
+	device_hcd->concurrent = CONCURRENT;
+
+	INIT_BUFFER(device_hcd->out, false);
+	INIT_BUFFER(device_hcd->resp, false);
+	INIT_BUFFER(device_hcd->report, false);
+
+	if (rmidev_major_num) {
+		dev_num = MKDEV(rmidev_major_num, 0);
+		retval = register_chrdev_region(dev_num, 1,
+				PLATFORM_DRIVER_NAME);
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+					"Failed to register char device\n");
+			goto err_register_chrdev_region;
+		}
+	} else {
+		retval = alloc_chrdev_region(&dev_num, 0, 1,
+				PLATFORM_DRIVER_NAME);
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+					"Failed to allocate char device\n");
+			goto err_alloc_chrdev_region;
+		}
+
+		rmidev_major_num = MAJOR(dev_num);
+	}
+
+	device_hcd->dev_num = dev_num;
+
+	cdev_init(&device_hcd->char_dev, &device_fops);
+
+	retval = cdev_add(&device_hcd->char_dev, dev_num, 1);
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to add char device\n");
+		goto err_add_chardev;
+	}
+
+	retval = device_create_class();
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to create class\n");
+		goto err_create_class;
+	}
+
+	device_hcd->device = device_create(device_hcd->class, NULL,
+			device_hcd->dev_num, NULL, CHAR_DEVICE_NAME"%d",
+			MINOR(device_hcd->dev_num));
+	if (IS_ERR(device_hcd->device)) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to create device\n");
+		retval = -ENODEV;
+		goto err_create_device;
+	}
+
+	if (bdata->irq_gpio >= 0) {
+		retval = gpio_export(bdata->irq_gpio, false);
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+					"Failed to export GPIO\n");
+		} else {
+			retval = gpio_export_link(&tcm_hcd->pdev->dev,
+					"attn", bdata->irq_gpio);
+			if (retval < 0)
+				LOGE(tcm_hcd->pdev->dev.parent,
+						"Failed to export GPIO link\n");
+		}
+	}
+
+	return 0;
+
+err_create_device:
+	class_destroy(device_hcd->class);
+
+err_create_class:
+	cdev_del(&device_hcd->char_dev);
+
+err_add_chardev:
+	unregister_chrdev_region(dev_num, 1);
+
+err_alloc_chrdev_region:
+err_register_chrdev_region:
+	RELEASE_BUFFER(device_hcd->report);
+	RELEASE_BUFFER(device_hcd->resp);
+	RELEASE_BUFFER(device_hcd->out);
+
+	kfree(device_hcd);
+	device_hcd = NULL;
+
+	return retval;
+}
+
+static int device_remove(struct syna_tcm_hcd *tcm_hcd)
+{
+	if (!device_hcd)
+		goto exit;
+
+	device_destroy(device_hcd->class, device_hcd->dev_num);
+
+	class_destroy(device_hcd->class);
+
+	cdev_del(&device_hcd->char_dev);
+
+	unregister_chrdev_region(device_hcd->dev_num, 1);
+
+	RELEASE_BUFFER(device_hcd->report);
+	RELEASE_BUFFER(device_hcd->resp);
+	RELEASE_BUFFER(device_hcd->out);
+
+	kfree(device_hcd);
+	device_hcd = NULL;
+
+exit:
+	complete(&device_remove_complete);
+
+	return 0;
+}
+
+static int device_reset(struct syna_tcm_hcd *tcm_hcd)
+{
+	int retval;
+
+	if (!device_hcd) {
+		retval = device_init(tcm_hcd);
+		return retval;
+	}
+
+	return 0;
+}
+
+static struct syna_tcm_module_cb device_module = {
+	.type = TCM_DEVICE,
+	.init = device_init,
+	.remove = device_remove,
+	.syncbox = NULL,
+	.asyncbox = NULL,
+	.reset = device_reset,
+	.suspend = NULL,
+	.resume = NULL,
+	.early_suspend = NULL,
+};
+
+static int __init device_module_init(void)
+{
+	return syna_tcm_add_module(&device_module, true);
+}
+
+static void __exit device_module_exit(void)
+{
+	syna_tcm_add_module(&device_module, false);
+
+	wait_for_completion(&device_remove_complete);
+}
+
+module_init(device_module_init);
+module_exit(device_module_exit);
+
+MODULE_AUTHOR("Synaptics, Inc.");
+MODULE_DESCRIPTION("Synaptics TCM Device Module");
+MODULE_LICENSE("GPL v2");

synaptics_tcm/synaptics_tcm_diagnostics.c

@@ -0,0 +1,561 @@
+/*
+ * Synaptics TCM touchscreen driver
+ *
+ * Copyright (C) 2017-2019 Synaptics Incorporated. All rights reserved.
+ *
+ * Copyright (C) 2017-2019 Scott Lin <scott.lin@tw.synaptics.com>
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 2 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * INFORMATION CONTAINED IN THIS DOCUMENT IS PROVIDED "AS-IS," AND SYNAPTICS
+ * EXPRESSLY DISCLAIMS ALL EXPRESS AND IMPLIED WARRANTIES, INCLUDING ANY
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE,
+ * AND ANY WARRANTIES OF NON-INFRINGEMENT OF ANY INTELLECTUAL PROPERTY RIGHTS.
+ * IN NO EVENT SHALL SYNAPTICS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES ARISING OUT OF OR IN CONNECTION
+ * WITH THE USE OF THE INFORMATION CONTAINED IN THIS DOCUMENT, HOWEVER CAUSED
+ * AND BASED ON ANY THEORY OF LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+ * NEGLIGENCE OR OTHER TORTIOUS ACTION, AND EVEN IF SYNAPTICS WAS ADVISED OF
+ * THE POSSIBILITY OF SUCH DAMAGE. IF A TRIBUNAL OF COMPETENT JURISDICTION DOES
+ * NOT PERMIT THE DISCLAIMER OF DIRECT DAMAGES OR ANY OTHER DAMAGES, SYNAPTICS'
+ * TOTAL CUMULATIVE LIABILITY TO ANY PARTY SHALL NOT EXCEED ONE HUNDRED U.S.
+ * DOLLARS.
+ */
+
+#include <linux/sched/signal.h>
+#include "synaptics_tcm_core.h"
+
+#define SYSFS_DIR_NAME "diagnostics"
+
+enum pingpong_state {
+	PING = 0,
+	PONG = 1,
+};
+
+struct diag_hcd {
+	pid_t pid;
+	unsigned char report_type;
+	enum pingpong_state state;
+	struct kobject *sysfs_dir;
+	struct siginfo sigio;
+	struct task_struct *task;
+	struct syna_tcm_buffer ping;
+	struct syna_tcm_buffer pong;
+	struct syna_tcm_hcd *tcm_hcd;
+};
+
+DECLARE_COMPLETION(diag_remove_complete);
+
+static struct diag_hcd *diag_hcd;
+
+STORE_PROTOTYPE(diag, pid);
+SHOW_PROTOTYPE(diag, size);
+STORE_PROTOTYPE(diag, type);
+SHOW_PROTOTYPE(diag, rows);
+SHOW_PROTOTYPE(diag, cols);
+SHOW_PROTOTYPE(diag, hybrid);
+SHOW_PROTOTYPE(diag, buttons);
+
+static struct device_attribute *attrs[] = {
+	ATTRIFY(pid),
+	ATTRIFY(size),
+	ATTRIFY(type),
+	ATTRIFY(rows),
+	ATTRIFY(cols),
+	ATTRIFY(hybrid),
+	ATTRIFY(buttons),
+};
+
+static ssize_t diag_sysfs_data_show(struct file *data_file,
+		struct kobject *kobj, struct bin_attribute *attributes,
+		char *buf, loff_t pos, size_t count);
+
+static struct bin_attribute bin_attr = {
+	.attr = {
+		.name = "data",
+		.mode = 0444,
+	},
+	.size = 0,
+	.read = diag_sysfs_data_show,
+};
+
+static ssize_t diag_sysfs_pid_store(struct device *dev,
+		struct device_attribute *attr, const char *buf, size_t count)
+{
+	int retval;
+	unsigned int input;
+	struct syna_tcm_hcd *tcm_hcd = diag_hcd->tcm_hcd;
+
+	if (kstrtouint(buf, 10, &input))
+		return -EINVAL;
+
+	mutex_lock(&tcm_hcd->extif_mutex);
+
+	diag_hcd->pid = input;
+
+	if (diag_hcd->pid) {
+		diag_hcd->task = pid_task(find_vpid(diag_hcd->pid),
+				PIDTYPE_PID);
+		if (!diag_hcd->task) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+					"Failed to locate task\n");
+			retval = -EINVAL;
+			goto exit;
+		}
+	}
+
+	retval = count;
+
+exit:
+	mutex_unlock(&tcm_hcd->extif_mutex);
+
+	return retval;
+}
+
+static ssize_t diag_sysfs_size_show(struct device *dev,
+		struct device_attribute *attr, char *buf)
+{
+	int retval;
+	struct syna_tcm_hcd *tcm_hcd = diag_hcd->tcm_hcd;
+
+	mutex_lock(&tcm_hcd->extif_mutex);
+
+	if (diag_hcd->state == PING) {
+		LOCK_BUFFER(diag_hcd->ping);
+
+		retval = snprintf(buf, PAGE_SIZE,
+				"%u\n",
+				diag_hcd->ping.data_length);
+
+		UNLOCK_BUFFER(diag_hcd->ping);
+	} else {
+		LOCK_BUFFER(diag_hcd->pong);
+
+		retval = snprintf(buf, PAGE_SIZE,
+				"%u\n",
+				diag_hcd->pong.data_length);
+
+		UNLOCK_BUFFER(diag_hcd->pong);
+	}
+
+	mutex_unlock(&tcm_hcd->extif_mutex);
+
+	return retval;
+}
+
+static ssize_t diag_sysfs_type_store(struct device *dev,
+		struct device_attribute *attr, const char *buf, size_t count)
+{
+	unsigned int input;
+	struct syna_tcm_hcd *tcm_hcd = diag_hcd->tcm_hcd;
+
+	if (kstrtouint(buf, 10, &input))
+		return -EINVAL;
+
+	mutex_lock(&tcm_hcd->extif_mutex);
+
+	diag_hcd->report_type = (unsigned char)input;
+
+	mutex_unlock(&tcm_hcd->extif_mutex);
+
+	return count;
+}
+
+static ssize_t diag_sysfs_rows_show(struct device *dev,
+		struct device_attribute *attr, char *buf)
+{
+	int retval;
+	unsigned int rows;
+	struct syna_tcm_app_info *app_info;
+	struct syna_tcm_hcd *tcm_hcd = diag_hcd->tcm_hcd;
+
+	mutex_lock(&tcm_hcd->extif_mutex);
+
+	if (tcm_hcd->id_info.mode != MODE_APPLICATION ||
+			tcm_hcd->app_status != APP_STATUS_OK) {
+		retval = -ENODEV;
+		goto exit;
+	}
+
+	app_info = &tcm_hcd->app_info;
+	rows = le2_to_uint(app_info->num_of_image_rows);
+
+	retval = snprintf(buf, PAGE_SIZE, "%u\n", rows);
+
+exit:
+	mutex_unlock(&tcm_hcd->extif_mutex);
+
+	return retval;
+}
+
+static ssize_t diag_sysfs_cols_show(struct device *dev,
+		struct device_attribute *attr, char *buf)
+{
+	int retval;
+	unsigned int cols;
+	struct syna_tcm_app_info *app_info;
+	struct syna_tcm_hcd *tcm_hcd = diag_hcd->tcm_hcd;
+
+	mutex_lock(&tcm_hcd->extif_mutex);
+
+	if (tcm_hcd->id_info.mode != MODE_APPLICATION ||
+			tcm_hcd->app_status != APP_STATUS_OK) {
+		retval = -ENODEV;
+		goto exit;
+	}
+
+	app_info = &tcm_hcd->app_info;
+	cols = le2_to_uint(app_info->num_of_image_cols);
+
+	retval = snprintf(buf, PAGE_SIZE, "%u\n", cols);
+
+exit:
+	mutex_unlock(&tcm_hcd->extif_mutex);
+
+	return retval;
+}
+
+static ssize_t diag_sysfs_hybrid_show(struct device *dev,
+		struct device_attribute *attr, char *buf)
+{
+	int retval;
+	unsigned int hybrid;
+	struct syna_tcm_app_info *app_info;
+	struct syna_tcm_hcd *tcm_hcd = diag_hcd->tcm_hcd;
+
+	mutex_lock(&tcm_hcd->extif_mutex);
+
+	if (tcm_hcd->id_info.mode != MODE_APPLICATION ||
+			tcm_hcd->app_status != APP_STATUS_OK) {
+		retval = -ENODEV;
+		goto exit;
+	}
+
+	app_info = &tcm_hcd->app_info;
+	hybrid = le2_to_uint(app_info->has_hybrid_data);
+
+	retval = snprintf(buf, PAGE_SIZE, "%u\n", hybrid);
+
+exit:
+	mutex_unlock(&tcm_hcd->extif_mutex);
+
+	return retval;
+}
+
+static ssize_t diag_sysfs_buttons_show(struct device *dev,
+		struct device_attribute *attr, char *buf)
+{
+	int retval;
+	unsigned int buttons;
+	struct syna_tcm_app_info *app_info;
+	struct syna_tcm_hcd *tcm_hcd = diag_hcd->tcm_hcd;
+
+	mutex_lock(&tcm_hcd->extif_mutex);
+
+	if (tcm_hcd->id_info.mode != MODE_APPLICATION ||
+			tcm_hcd->app_status != APP_STATUS_OK) {
+		retval = -ENODEV;
+		goto exit;
+	}
+
+	app_info = &tcm_hcd->app_info;
+	buttons = le2_to_uint(app_info->num_of_buttons);
+
+	retval = snprintf(buf, PAGE_SIZE, "%u\n", buttons);
+
+exit:
+	mutex_unlock(&tcm_hcd->extif_mutex);
+
+	return retval;
+}
+
+static ssize_t diag_sysfs_data_show(struct file *data_file,
+		struct kobject *kobj, struct bin_attribute *attributes,
+		char *buf, loff_t pos, size_t count)
+{
+	int retval;
+	unsigned int readlen;
+	struct syna_tcm_hcd *tcm_hcd = diag_hcd->tcm_hcd;
+
+	mutex_lock(&tcm_hcd->extif_mutex);
+
+	retval = 0;
+
+	if (diag_hcd->state == PING) {
+		LOCK_BUFFER(diag_hcd->ping);
+
+		if (diag_hcd->ping.data_length == 0) {
+			readlen = 0;
+			goto exit;
+		}
+
+		readlen = MIN(count, diag_hcd->ping.data_length - pos);
+
+		if (diag_hcd->ping.data_length) {
+			retval = secure_memcpy(buf,
+					count,
+					&diag_hcd->ping.buf[pos],
+					diag_hcd->ping.buf_size - pos,
+					readlen);
+		}
+
+		UNLOCK_BUFFER(diag_hcd->ping);
+	} else {
+		LOCK_BUFFER(diag_hcd->pong);
+
+		if (diag_hcd->pong.data_length == 0) {
+			readlen = 0;
+			goto exit;
+		}
+
+		readlen = MIN(count, diag_hcd->pong.data_length - pos);
+
+		if (diag_hcd->pong.data_length) {
+			retval = secure_memcpy(buf,
+					count,
+					&diag_hcd->pong.buf[pos],
+					diag_hcd->pong.buf_size - pos,
+					readlen);
+		}
+
+		UNLOCK_BUFFER(diag_hcd->pong);
+	}
+
+exit:
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to copy report data\n");
+	} else {
+		retval = readlen;
+	}
+
+	mutex_unlock(&tcm_hcd->extif_mutex);
+
+	return retval;
+}
+
+static void diag_report(void)
+{
+	int retval;
+	static enum pingpong_state state = PING;
+	struct syna_tcm_hcd *tcm_hcd = diag_hcd->tcm_hcd;
+
+	if (state == PING) {
+		LOCK_BUFFER(diag_hcd->ping);
+
+		retval = syna_tcm_alloc_mem(tcm_hcd,
+				&diag_hcd->ping,
+				tcm_hcd->report.buffer.data_length);
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to allocate memory for ping.buf\n");
+			UNLOCK_BUFFER(diag_hcd->ping);
+			return;
+		}
+
+		retval = secure_memcpy(diag_hcd->ping.buf,
+				diag_hcd->ping.buf_size,
+				tcm_hcd->report.buffer.buf,
+				tcm_hcd->report.buffer.buf_size,
+				tcm_hcd->report.buffer.data_length);
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+					"Failed to copy report data\n");
+			UNLOCK_BUFFER(diag_hcd->ping);
+			return;
+		}
+
+		diag_hcd->ping.data_length = tcm_hcd->report.buffer.data_length;
+
+		UNLOCK_BUFFER(diag_hcd->ping);
+
+		diag_hcd->state = state;
+		state = PONG;
+	} else {
+		LOCK_BUFFER(diag_hcd->pong);
+
+		retval = syna_tcm_alloc_mem(tcm_hcd,
+				&diag_hcd->pong,
+				tcm_hcd->report.buffer.data_length);
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to allocate memory for pong.buf\n");
+			UNLOCK_BUFFER(diag_hcd->pong);
+			return;
+		}
+
+		retval = secure_memcpy(diag_hcd->pong.buf,
+				diag_hcd->pong.buf_size,
+				tcm_hcd->report.buffer.buf,
+				tcm_hcd->report.buffer.buf_size,
+				tcm_hcd->report.buffer.data_length);
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+					"Failed to copy report data\n");
+			UNLOCK_BUFFER(diag_hcd->pong);
+			return;
+		}
+
+		diag_hcd->pong.data_length = tcm_hcd->report.buffer.data_length;
+
+		UNLOCK_BUFFER(diag_hcd->pong);
+
+		diag_hcd->state = state;
+		state = PING;
+	}
+}
+
+static int diag_init(struct syna_tcm_hcd *tcm_hcd)
+{
+	int retval;
+	int idx;
+
+	diag_hcd = kzalloc(sizeof(*diag_hcd), GFP_KERNEL);
+	if (!diag_hcd) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to allocate memory for diag_hcd\n");
+		return -ENOMEM;
+	}
+
+	diag_hcd->tcm_hcd = tcm_hcd;
+	diag_hcd->state = PING;
+
+	INIT_BUFFER(diag_hcd->ping, false);
+	INIT_BUFFER(diag_hcd->pong, false);
+
+	memset(&diag_hcd->sigio, 0x00, sizeof(diag_hcd->sigio));
+	diag_hcd->sigio.si_signo = SIGIO;
+	diag_hcd->sigio.si_code = SI_USER;
+
+	diag_hcd->sysfs_dir = kobject_create_and_add(SYSFS_DIR_NAME,
+			tcm_hcd->sysfs_dir);
+	if (!diag_hcd->sysfs_dir) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to create sysfs directory\n");
+		retval = -EINVAL;
+		goto err_sysfs_create_dir;
+	}
+
+	for (idx = 0; idx < ARRAY_SIZE(attrs); idx++) {
+		retval = sysfs_create_file(diag_hcd->sysfs_dir,
+				&(*attrs[idx]).attr);
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+					"Failed to create sysfs file\n");
+			goto err_sysfs_create_file;
+		}
+	}
+
+	retval = sysfs_create_bin_file(diag_hcd->sysfs_dir, &bin_attr);
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to create sysfs bin file\n");
+		goto err_sysfs_create_bin_file;
+	}
+
+	return 0;
+
+err_sysfs_create_bin_file:
+err_sysfs_create_file:
+	for (idx--; idx >= 0; idx--)
+		sysfs_remove_file(diag_hcd->sysfs_dir, &(*attrs[idx]).attr);
+
+	kobject_put(diag_hcd->sysfs_dir);
+
+err_sysfs_create_dir:
+	RELEASE_BUFFER(diag_hcd->pong);
+	RELEASE_BUFFER(diag_hcd->ping);
+
+	kfree(diag_hcd);
+	diag_hcd = NULL;
+
+	return retval;
+}
+
+static int diag_remove(struct syna_tcm_hcd *tcm_hcd)
+{
+	int idx;
+
+	if (!diag_hcd)
+		goto exit;
+
+	sysfs_remove_bin_file(diag_hcd->sysfs_dir, &bin_attr);
+
+	for (idx = 0; idx < ARRAY_SIZE(attrs); idx++)
+		sysfs_remove_file(diag_hcd->sysfs_dir, &(*attrs[idx]).attr);
+
+	kobject_put(diag_hcd->sysfs_dir);
+
+	RELEASE_BUFFER(diag_hcd->pong);
+	RELEASE_BUFFER(diag_hcd->ping);
+
+	kfree(diag_hcd);
+	diag_hcd = NULL;
+
+exit:
+	complete(&diag_remove_complete);
+
+	return 0;
+}
+
+static int diag_syncbox(struct syna_tcm_hcd *tcm_hcd)
+{
+	if (!diag_hcd)
+		return 0;
+
+	if (tcm_hcd->report.id == diag_hcd->report_type)
+		diag_report();
+
+	return 0;
+}
+
+static int diag_reset(struct syna_tcm_hcd *tcm_hcd)
+{
+	int retval;
+
+	if (!diag_hcd) {
+		retval = diag_init(tcm_hcd);
+		return retval;
+	}
+
+	return 0;
+}
+
+static struct syna_tcm_module_cb diag_module = {
+	.type = TCM_DIAGNOSTICS,
+	.init = diag_init,
+	.remove = diag_remove,
+	.syncbox = diag_syncbox,
+	.asyncbox = NULL,
+	.reset = diag_reset,
+	.suspend = NULL,
+	.resume = NULL,
+	.early_suspend = NULL,
+};
+
+static int __init diag_module_init(void)
+{
+	return syna_tcm_add_module(&diag_module, true);
+}
+
+static void __exit diag_module_exit(void)
+{
+	syna_tcm_add_module(&diag_module, false);
+
+	wait_for_completion(&diag_remove_complete);
+}
+
+module_init(diag_module_init);
+module_exit(diag_module_exit);
+
+MODULE_AUTHOR("Synaptics, Inc.");
+MODULE_DESCRIPTION("Synaptics TCM Diagnostics Module");
+MODULE_LICENSE("GPL v2");

synaptics_tcm/synaptics_tcm_i2c.c

@@ -0,0 +1,523 @@
+/*
+ * Synaptics TCM touchscreen driver
+ *
+ * Copyright (C) 2017-2019 Synaptics Incorporated. All rights reserved.
+ *
+ * Copyright (C) 2017-2019 Scott Lin <scott.lin@tw.synaptics.com>
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 2 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * INFORMATION CONTAINED IN THIS DOCUMENT IS PROVIDED "AS-IS," AND SYNAPTICS
+ * EXPRESSLY DISCLAIMS ALL EXPRESS AND IMPLIED WARRANTIES, INCLUDING ANY
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE,
+ * AND ANY WARRANTIES OF NON-INFRINGEMENT OF ANY INTELLECTUAL PROPERTY RIGHTS.
+ * IN NO EVENT SHALL SYNAPTICS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES ARISING OUT OF OR IN CONNECTION
+ * WITH THE USE OF THE INFORMATION CONTAINED IN THIS DOCUMENT, HOWEVER CAUSED
+ * AND BASED ON ANY THEORY OF LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+ * NEGLIGENCE OR OTHER TORTIOUS ACTION, AND EVEN IF SYNAPTICS WAS ADVISED OF
+ * THE POSSIBILITY OF SUCH DAMAGE. IF A TRIBUNAL OF COMPETENT JURISDICTION DOES
+ * NOT PERMIT THE DISCLAIMER OF DIRECT DAMAGES OR ANY OTHER DAMAGES, SYNAPTICS'
+ * TOTAL CUMULATIVE LIABILITY TO ANY PARTY SHALL NOT EXCEED ONE HUNDRED U.S.
+ * DOLLARS.
+ */
+
+#include <linux/i2c.h>
+#include <linux/of_gpio.h>
+#include "synaptics_tcm_core.h"
+#include "linux/moduleparam.h"
+
+#define XFER_ATTEMPTS 10
+
+static unsigned char *buf;
+
+static unsigned int buf_size;
+
+static struct syna_tcm_bus_io bus_io;
+
+static struct syna_tcm_hw_interface hw_if;
+
+static struct platform_device *syna_tcm_i2c_device;
+
+static struct drm_panel *active_tcm_panel;
+
+struct drm_panel *tcm_get_panel(void)
+{
+	return active_tcm_panel;
+}
+EXPORT_SYMBOL(tcm_get_panel);
+
+#ifdef CONFIG_OF
+static int parse_dt(struct device *dev, struct syna_tcm_board_data *bdata)
+{
+	int retval;
+	struct device_node *np = dev->of_node;
+
+	retval = of_get_named_gpio_flags(np,
+			"synaptics,irq-gpio", 0,
+			(enum of_gpio_flags *)&bdata->irq_flags);
+	if (!gpio_is_valid(retval)) {
+		if (retval != -EPROBE_DEFER)
+			dev_err(dev, "Error getting irq_gpio\n");
+		return retval;
+	}
+	bdata->irq_gpio = retval;
+
+	of_property_read_u32(np, "synaptics,irq-on-state",
+			&bdata->irq_on_state);
+	of_property_read_string(np, "synaptics,pwr-reg-name",
+			&bdata->pwr_reg_name);
+	of_property_read_string(np, "synaptics,bus-reg-name",
+			&bdata->bus_reg_name);
+	of_property_read_string(np, "synaptics,firmware-name",
+			&bdata->fw_name);
+
+	bdata->power_gpio = of_get_named_gpio_flags(np,
+			"synaptics,power-gpio", 0, NULL);
+
+	retval = of_property_read_u32(np, "synaptics,power-on-state",
+			&bdata->power_on_state);
+	if (retval < 0) {
+		LOGD(dev, "Failed to read synaptics,power-on-state\n");
+		bdata->power_on_state = 0;
+	}
+
+	retval = of_property_read_u32(np, "synaptics,power-delay-ms",
+			&bdata->power_delay_ms);
+	if (retval < 0) {
+		LOGE(dev, "Failed to read synaptics,power-delay-ms\n");
+		return retval;
+	}
+
+	retval = of_get_named_gpio_flags(np,
+			"synaptics,reset-gpio", 0, NULL);
+	if (!gpio_is_valid(retval)) {
+		if (retval != -EPROBE_DEFER)
+			dev_err(dev, "Error getting reset gpio\n");
+		return retval;
+	}
+	bdata->reset_gpio = retval;
+
+	retval = of_property_read_u32(np, "synaptics,reset-on-state",
+			&bdata->reset_on_state);
+	if (retval < 0) {
+		LOGE(dev, "Failed to read synaptics,reset-on-state\n");
+		return retval;
+	}
+
+	retval = of_property_read_u32(np, "synaptics,reset-active-ms",
+			&bdata->reset_active_ms);
+	if (retval < 0) {
+		LOGE(dev, "Failed to read synaptics,reset-active-ms\n");
+		return retval;
+	}
+
+	retval = of_property_read_u32(np, "synaptics,reset-delay-ms",
+			&bdata->reset_delay_ms);
+	if (retval < 0) {
+		LOGE(dev, "Unable to read synaptics,reset-delay-ms\n");
+		return retval;
+	}
+
+	bdata->x_flip = of_property_read_bool(np, "synaptics,x-flip");
+	bdata->y_flip = of_property_read_bool(np, "synaptics,y-flip");
+	bdata->swap_axes = of_property_read_bool(np, "synaptics,swap-axes");
+
+	retval = of_property_read_u32(np, "synaptics,ubl-i2c-addr",
+			&bdata->ubl_i2c_addr);
+	if (retval < 0) {
+		LOGE(dev, "Unable to read synaptics,ubl-i2c-addr\n");
+		return retval;
+	}
+
+	bdata->extend_report = of_property_read_bool(np,
+			"synaptics,extend_report");
+
+	return 0;
+}
+#endif
+
+static int syna_tcm_i2c_alloc_mem(struct syna_tcm_hcd *tcm_hcd,
+		unsigned int size)
+{
+	struct i2c_client *i2c = to_i2c_client(tcm_hcd->pdev->dev.parent);
+
+	if (size > buf_size) {
+		if (buf_size)
+			kfree(buf);
+		buf = kmalloc(size, GFP_KERNEL);
+		if (!buf) {
+			LOGE(&i2c->dev,
+					"Failed to allocate memory for buf\n");
+			buf_size = 0;
+			return -ENOMEM;
+		}
+		buf_size = size;
+	}
+
+	return 0;
+}
+
+static int syna_tcm_i2c_rmi_read(struct syna_tcm_hcd *tcm_hcd,
+		unsigned short addr, unsigned char *data, unsigned int length)
+{
+	int retval = 0;
+	unsigned char address;
+	unsigned int attempt;
+	struct i2c_msg msg[2];
+	struct i2c_client *i2c = to_i2c_client(tcm_hcd->pdev->dev.parent);
+	const struct syna_tcm_board_data *bdata = tcm_hcd->hw_if->bdata;
+
+	mutex_lock(&tcm_hcd->io_ctrl_mutex);
+
+	address = (unsigned char)addr;
+
+	msg[0].addr = bdata->ubl_i2c_addr;
+	msg[0].flags = 0;
+	msg[0].len = 1;
+	msg[0].buf = &address;
+
+	msg[1].addr = bdata->ubl_i2c_addr;
+	msg[1].flags = I2C_M_RD;
+	msg[1].len = length;
+	msg[1].buf = data;
+
+	for (attempt = 0; attempt < XFER_ATTEMPTS; attempt++) {
+		if (i2c_transfer(i2c->adapter, msg, 2) == 2) {
+			retval = length;
+			goto exit;
+		}
+
+		LOGD(&i2c->dev, "Transfer attempt %d times\n", attempt + 1);
+
+		if (attempt + 1 == XFER_ATTEMPTS) {
+			LOGE(&i2c->dev, "Transfer failed\n");
+			retval = -EIO;
+			goto exit;
+		}
+
+		msleep(20);
+	}
+
+exit:
+	mutex_unlock(&tcm_hcd->io_ctrl_mutex);
+
+	return retval;
+}
+
+static int syna_tcm_i2c_rmi_write(struct syna_tcm_hcd *tcm_hcd,
+		unsigned short addr, unsigned char *data, unsigned int length)
+{
+	int retval;
+	unsigned int attempt;
+	unsigned int byte_count;
+	struct i2c_msg msg;
+	struct i2c_client *i2c = to_i2c_client(tcm_hcd->pdev->dev.parent);
+	const struct syna_tcm_board_data *bdata = tcm_hcd->hw_if->bdata;
+
+	mutex_lock(&tcm_hcd->io_ctrl_mutex);
+
+	byte_count = length + 1;
+
+	retval = syna_tcm_i2c_alloc_mem(tcm_hcd, byte_count);
+	if (retval < 0) {
+		LOGE(&i2c->dev,
+				"Failed to allocate memory\n");
+		goto exit;
+	}
+
+	buf[0] = (unsigned char)addr;
+	retval = secure_memcpy(&buf[1],
+			buf_size - 1,
+			data,
+			length,
+			length);
+	if (retval < 0) {
+		LOGE(&i2c->dev,
+				"Failed to copy write data\n");
+		goto exit;
+	}
+
+	msg.addr = bdata->ubl_i2c_addr;
+	msg.flags = 0;
+	msg.len = byte_count;
+	msg.buf = buf;
+
+	for (attempt = 0; attempt < XFER_ATTEMPTS; attempt++) {
+		if (i2c_transfer(i2c->adapter, &msg, 1) == 1) {
+			retval = length;
+			goto exit;
+		}
+
+		LOGD(&i2c->dev, "Transfer attempt %d times\n", attempt + 1);
+
+		if (attempt + 1 == XFER_ATTEMPTS) {
+			LOGE(&i2c->dev, "Transfer failed\n");
+			retval = -EIO;
+			goto exit;
+		}
+
+		msleep(20);
+	}
+
+exit:
+	mutex_unlock(&tcm_hcd->io_ctrl_mutex);
+
+	return retval;
+}
+
+static int syna_tcm_i2c_read(struct syna_tcm_hcd *tcm_hcd, unsigned char *data,
+		unsigned int length)
+{
+	int retval = 0;
+	unsigned int attempt;
+	struct i2c_msg msg;
+	struct i2c_client *i2c = to_i2c_client(tcm_hcd->pdev->dev.parent);
+
+	mutex_lock(&tcm_hcd->io_ctrl_mutex);
+
+	msg.addr = i2c->addr;
+	msg.flags = I2C_M_RD;
+	msg.len = length;
+	msg.buf = data;
+
+	for (attempt = 0; attempt < XFER_ATTEMPTS; attempt++) {
+		if (i2c_transfer(i2c->adapter, &msg, 1) == 1) {
+			retval = length;
+			goto exit;
+		}
+
+		LOGD(&i2c->dev, "Transfer attempt %d times\n", attempt + 1);
+
+		if (attempt + 1 == XFER_ATTEMPTS) {
+			LOGE(&i2c->dev, "Transfer failed\n");
+			retval = -EIO;
+			goto exit;
+		}
+
+		msleep(20);
+	}
+
+exit:
+	mutex_unlock(&tcm_hcd->io_ctrl_mutex);
+
+	return retval;
+}
+
+static int syna_tcm_i2c_write(struct syna_tcm_hcd *tcm_hcd, unsigned char *data,
+		unsigned int length)
+{
+	int retval = 0;
+	unsigned int attempt;
+	struct i2c_msg msg;
+	struct i2c_client *i2c = to_i2c_client(tcm_hcd->pdev->dev.parent);
+
+	mutex_lock(&tcm_hcd->io_ctrl_mutex);
+
+	msg.addr = i2c->addr;
+	msg.flags = 0;
+	msg.len = length;
+	msg.buf = data;
+
+	for (attempt = 0; attempt < XFER_ATTEMPTS; attempt++) {
+		if (i2c_transfer(i2c->adapter, &msg, 1) == 1) {
+			retval = length;
+			goto exit;
+		}
+
+		LOGD(&i2c->dev, "Transfer attempt %d times\n", attempt + 1);
+
+		if (attempt + 1 == XFER_ATTEMPTS) {
+			LOGE(&i2c->dev, "Transfer failed\n");
+			retval = -EIO;
+			goto exit;
+		}
+
+		msleep(20);
+	}
+
+exit:
+	mutex_unlock(&tcm_hcd->io_ctrl_mutex);
+
+	return retval;
+}
+
+static int syna_tcm_check_dt(struct device_node *np)
+{
+	int i;
+	int count;
+	struct device_node *node;
+	struct drm_panel *panel;
+
+	count = of_count_phandle_with_args(np, "panel", NULL);
+	if (count <= 0)
+		return 0;
+
+	for (i = 0; i < count; i++) {
+		node = of_parse_phandle(np, "panel", i);
+		panel = of_drm_find_panel(node);
+		of_node_put(node);
+		if (!IS_ERR(panel)) {
+			active_tcm_panel = panel;
+			return 0;
+		}
+	}
+
+	return PTR_ERR(panel);
+}
+
+static int syna_tcm_check_default_tp(struct device_node *dt, const char *prop)
+{
+	const char *active_tp;
+	const char *compatible;
+	char *start;
+	int ret;
+
+	ret = of_property_read_string(dt->parent, prop, &active_tp);
+	if (ret) {
+		pr_err(" %s:fail to read %s %d\n", __func__, prop, ret);
+		return -ENODEV;
+	}
+
+	ret = of_property_read_string(dt, "compatible", &compatible);
+	if (ret < 0) {
+		pr_err(" %s:fail to read %s %d\n", __func__, "compatible", ret);
+		return -ENODEV;
+	}
+
+	start = strnstr(active_tp, compatible, strlen(active_tp));
+	if (start == NULL) {
+		pr_err(" %s:no match compatible, %s, %s\n",
+			__func__, compatible, active_tp);
+		ret = -ENODEV;
+	}
+
+	return ret;
+}
+
+static int syna_tcm_i2c_probe(struct i2c_client *i2c,
+		const struct i2c_device_id *dev_id)
+{
+	int retval;
+	struct device_node *dt = i2c->dev.of_node;
+
+	retval = syna_tcm_check_dt(dt);
+	if (retval == -EPROBE_DEFER)
+		return retval;
+
+	if (retval) {
+		if (!syna_tcm_check_default_tp(dt, "qcom,i2c-touch-active"))
+			retval = -EPROBE_DEFER;
+		else
+			retval = -ENODEV;
+
+		return retval;
+	}
+
+	syna_tcm_i2c_device = platform_device_alloc(PLATFORM_DRIVER_NAME, 0);
+	if (!syna_tcm_i2c_device) {
+		LOGE(&i2c->dev,
+				"Failed to allocate platform device\n");
+		return -ENOMEM;
+	}
+
+#ifdef CONFIG_OF
+	hw_if.bdata = devm_kzalloc(&i2c->dev, sizeof(*hw_if.bdata), GFP_KERNEL);
+	if (!hw_if.bdata) {
+		LOGE(&i2c->dev,
+				"Failed to allocate memory for board data\n");
+		return -ENOMEM;
+	}
+	retval = parse_dt(&i2c->dev, hw_if.bdata);
+	if (retval < 0) {
+		LOGE(&i2c->dev, "Failed to parse dt\n");
+		return retval;
+	}
+#else
+	hw_if.bdata = i2c->dev.platform_data;
+#endif
+
+	bus_io.type = BUS_I2C;
+	bus_io.read = syna_tcm_i2c_read;
+	bus_io.write = syna_tcm_i2c_write;
+	bus_io.rmi_read = syna_tcm_i2c_rmi_read;
+	bus_io.rmi_write = syna_tcm_i2c_rmi_write;
+
+	hw_if.bus_io = &bus_io;
+
+	syna_tcm_i2c_device->dev.parent = &i2c->dev;
+	syna_tcm_i2c_device->dev.platform_data = &hw_if;
+
+	retval = platform_device_add(syna_tcm_i2c_device);
+	if (retval < 0) {
+		LOGE(&i2c->dev,
+				"Failed to add platform device\n");
+		return retval;
+	}
+
+	return 0;
+}
+
+static int syna_tcm_i2c_remove(struct i2c_client *i2c)
+{
+	syna_tcm_i2c_device->dev.platform_data = NULL;
+
+	platform_device_unregister(syna_tcm_i2c_device);
+
+	return 0;
+}
+
+static const struct i2c_device_id syna_tcm_id_table[] = {
+	{I2C_MODULE_NAME, 0},
+	{},
+};
+MODULE_DEVICE_TABLE(i2c, syna_tcm_id_table);
+
+#ifdef CONFIG_OF
+static const struct of_device_id syna_tcm_of_match_table[] = {
+	{
+		.compatible = "synaptics,tcm-i2c",
+	},
+	{},
+};
+MODULE_DEVICE_TABLE(of, syna_tcm_of_match_table);
+#else
+#define syna_tcm_of_match_table NULL
+#endif
+
+static struct i2c_driver syna_tcm_i2c_driver = {
+	.driver = {
+		.name = I2C_MODULE_NAME,
+		.owner = THIS_MODULE,
+		.of_match_table = syna_tcm_of_match_table,
+	},
+	.probe = syna_tcm_i2c_probe,
+	.remove = syna_tcm_i2c_remove,
+	.id_table = syna_tcm_id_table,
+};
+
+int syna_tcm_bus_init(void)
+{
+	return i2c_add_driver(&syna_tcm_i2c_driver);
+}
+EXPORT_SYMBOL(syna_tcm_bus_init);
+
+void syna_tcm_bus_exit(void)
+{
+	kfree(buf);
+
+	i2c_del_driver(&syna_tcm_i2c_driver);
+}
+EXPORT_SYMBOL(syna_tcm_bus_exit);
+
+MODULE_AUTHOR("Synaptics, Inc.");
+MODULE_DESCRIPTION("Synaptics TCM I2C Bus Module");
+MODULE_LICENSE("GPL v2");

synaptics_tcm/synaptics_tcm_recovery.c

@@ -0,0 +1,898 @@
+/*
+ * Synaptics TCM touchscreen driver
+ *
+ * Copyright (C) 2017-2019 Synaptics Incorporated. All rights reserved.
+ *
+ * Copyright (C) 2017-2019 Scott Lin <scott.lin@tw.synaptics.com>
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 2 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * INFORMATION CONTAINED IN THIS DOCUMENT IS PROVIDED "AS-IS," AND SYNAPTICS
+ * EXPRESSLY DISCLAIMS ALL EXPRESS AND IMPLIED WARRANTIES, INCLUDING ANY
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE,
+ * AND ANY WARRANTIES OF NON-INFRINGEMENT OF ANY INTELLECTUAL PROPERTY RIGHTS.
+ * IN NO EVENT SHALL SYNAPTICS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES ARISING OUT OF OR IN CONNECTION
+ * WITH THE USE OF THE INFORMATION CONTAINED IN THIS DOCUMENT, HOWEVER CAUSED
+ * AND BASED ON ANY THEORY OF LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+ * NEGLIGENCE OR OTHER TORTIOUS ACTION, AND EVEN IF SYNAPTICS WAS ADVISED OF
+ * THE POSSIBILITY OF SUCH DAMAGE. IF A TRIBUNAL OF COMPETENT JURISDICTION DOES
+ * NOT PERMIT THE DISCLAIMER OF DIRECT DAMAGES OR ANY OTHER DAMAGES, SYNAPTICS'
+ * TOTAL CUMULATIVE LIABILITY TO ANY PARTY SHALL NOT EXCEED ONE HUNDRED U.S.
+ * DOLLARS.
+ */
+
+#include "synaptics_tcm_core.h"
+
+#define SET_UP_RECOVERY_MODE true
+
+#define ENABLE_SYSFS_INTERFACE true
+
+#define SYSFS_DIR_NAME "recovery"
+
+#define IHEX_BUF_SIZE (2048 * 1024)
+
+#define DATA_BUF_SIZE (512 * 1024)
+
+#define IHEX_RECORD_SIZE 14
+
+#define PDT_START_ADDR 0x00e9
+
+#define UBL_FN_NUMBER 0x35
+
+#define F35_CHUNK_SIZE 16
+
+#define F35_CHUNK_SIZE_WORDS 8
+
+#define F35_ERASE_ALL_WAIT_MS 5000
+
+#define F35_ERASE_ALL_POLL_MS 100
+
+#define F35_DATA5_OFFSET 5
+
+#define F35_CTRL3_OFFSET 18
+
+#define F35_RESET_COMMAND 16
+
+#define F35_ERASE_ALL_COMMAND 3
+
+#define F35_WRITE_CHUNK_COMMAND 2
+
+#define F35_READ_FLASH_STATUS_COMMAND 1
+
+struct rmi_pdt_entry {
+	unsigned char query_base_addr;
+	unsigned char command_base_addr;
+	unsigned char control_base_addr;
+	unsigned char data_base_addr;
+	unsigned char intr_src_count:3;
+	unsigned char reserved_1:2;
+	unsigned char fn_version:2;
+	unsigned char reserved_2:1;
+	unsigned char fn_number;
+} __packed;
+
+struct rmi_addr {
+	unsigned short query_base;
+	unsigned short command_base;
+	unsigned short control_base;
+	unsigned short data_base;
+};
+
+struct recovery_hcd {
+	bool set_up_recovery_mode;
+	unsigned char chunk_buf[F35_CHUNK_SIZE + 3];
+	unsigned char out_buf[3];
+	unsigned char *ihex_buf;
+	unsigned char *data_buf;
+	unsigned int ihex_size;
+	unsigned int ihex_records;
+	unsigned int data_entries;
+	struct kobject *sysfs_dir;
+	struct rmi_addr f35_addr;
+	struct syna_tcm_hcd *tcm_hcd;
+};
+
+DECLARE_COMPLETION(recovery_remove_complete);
+
+static struct recovery_hcd *recovery_hcd;
+
+static int recovery_do_recovery(void);
+
+STORE_PROTOTYPE(recovery, recovery);
+
+static struct device_attribute *attrs[] = {
+	ATTRIFY(recovery),
+};
+
+static ssize_t recovery_sysfs_ihex_store(struct file *data_file,
+		struct kobject *kobj, struct bin_attribute *attributes,
+		char *buf, loff_t pos, size_t count);
+
+static struct bin_attribute bin_attr = {
+	.attr = {
+		.name = "ihex",
+		.mode = 0220,
+	},
+	.size = 0,
+	.write = recovery_sysfs_ihex_store,
+};
+
+static ssize_t recovery_sysfs_recovery_store(struct device *dev,
+		struct device_attribute *attr, const char *buf, size_t count)
+{
+	int retval;
+	unsigned int input;
+	struct syna_tcm_hcd *tcm_hcd = recovery_hcd->tcm_hcd;
+
+	if (kstrtouint(buf, 10, &input))
+		return -EINVAL;
+
+	if (input == 1)
+		recovery_hcd->set_up_recovery_mode = true;
+	else if (input == 2)
+		recovery_hcd->set_up_recovery_mode = false;
+	else
+		return -EINVAL;
+
+	mutex_lock(&tcm_hcd->extif_mutex);
+
+	if (recovery_hcd->ihex_size == 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to get ihex data\n");
+		retval = -EINVAL;
+		goto exit;
+	}
+
+	if (recovery_hcd->ihex_size % IHEX_RECORD_SIZE) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Invalid ihex data\n");
+		retval = -EINVAL;
+		goto exit;
+	}
+
+	recovery_hcd->ihex_records = recovery_hcd->ihex_size / IHEX_RECORD_SIZE;
+
+	retval = recovery_do_recovery();
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to do recovery\n");
+		goto exit;
+	}
+
+	retval = count;
+
+exit:
+	recovery_hcd->set_up_recovery_mode = SET_UP_RECOVERY_MODE;
+
+	mutex_unlock(&tcm_hcd->extif_mutex);
+
+	return retval;
+}
+
+static ssize_t recovery_sysfs_ihex_store(struct file *data_file,
+		struct kobject *kobj, struct bin_attribute *attributes,
+		char *buf, loff_t pos, size_t count)
+{
+	int retval;
+	struct syna_tcm_hcd *tcm_hcd = recovery_hcd->tcm_hcd;
+
+	mutex_lock(&tcm_hcd->extif_mutex);
+
+	retval = secure_memcpy(&recovery_hcd->ihex_buf[pos],
+			IHEX_BUF_SIZE - pos,
+			buf,
+			count,
+			count);
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to copy ihex data\n");
+		recovery_hcd->ihex_size = 0;
+		goto exit;
+	}
+
+	recovery_hcd->ihex_size = pos + count;
+
+	retval = count;
+
+exit:
+	mutex_unlock(&tcm_hcd->extif_mutex);
+
+	return retval;
+}
+
+static int recovery_device_reset(void)
+{
+	int retval;
+	unsigned char command;
+	struct syna_tcm_hcd *tcm_hcd = recovery_hcd->tcm_hcd;
+	const struct syna_tcm_board_data *bdata = tcm_hcd->hw_if->bdata;
+
+	command = F35_RESET_COMMAND;
+
+	retval = syna_tcm_rmi_write(tcm_hcd,
+			recovery_hcd->f35_addr.control_base + F35_CTRL3_OFFSET,
+			&command,
+			sizeof(command));
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to write F$35 command\n");
+		return retval;
+	}
+
+	msleep(bdata->reset_delay_ms);
+
+	return 0;
+}
+
+static int recovery_add_data_entry(unsigned char data)
+{
+	struct syna_tcm_hcd *tcm_hcd = recovery_hcd->tcm_hcd;
+
+	if (recovery_hcd->data_entries >= DATA_BUF_SIZE) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Reached data buffer size limit\n");
+		return -EINVAL;
+	}
+
+	recovery_hcd->data_buf[recovery_hcd->data_entries++] = data;
+
+	return 0;
+}
+
+static int recovery_add_padding(unsigned int *words)
+{
+	int retval;
+	unsigned int padding;
+	struct syna_tcm_hcd *tcm_hcd = recovery_hcd->tcm_hcd;
+
+	padding = (F35_CHUNK_SIZE_WORDS - *words % F35_CHUNK_SIZE_WORDS);
+	padding %= F35_CHUNK_SIZE_WORDS;
+
+	while (padding) {
+		retval = recovery_add_data_entry(0xff);
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+					"Failed to add data entry\n");
+			return retval;
+		}
+
+		retval = recovery_add_data_entry(0xff);
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+					"Failed to add data entry\n");
+			return retval;
+		}
+
+		(*words)++;
+		padding--;
+	}
+
+	return 0;
+}
+
+static int recovery_parse_ihex(void)
+{
+	int retval;
+	unsigned char colon;
+	unsigned char *buf;
+	unsigned int addr;
+	unsigned int type;
+	unsigned int addrl;
+	unsigned int addrh;
+	unsigned int data0;
+	unsigned int data1;
+	unsigned int count;
+	unsigned int words;
+	unsigned int offset;
+	unsigned int record;
+	struct syna_tcm_hcd *tcm_hcd = recovery_hcd->tcm_hcd;
+
+	words = 0;
+
+	offset = 0;
+
+	buf = recovery_hcd->ihex_buf;
+
+	recovery_hcd->data_entries = 0;
+
+	for (record = 0; record < recovery_hcd->ihex_records; record++) {
+		buf[(record + 1) * IHEX_RECORD_SIZE - 1] = 0x00;
+		retval = sscanf(&buf[record * IHEX_RECORD_SIZE],
+				"%c%02x%02x%02x%02x%02x%02x",
+				&colon,
+				&count,
+				&addrh,
+				&addrl,
+				&type,
+				&data0,
+				&data1);
+		if (retval != 7) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+					"Failed to read ihex record\n");
+			return -EINVAL;
+		}
+
+		if (type == 0x00) {
+			if ((words % F35_CHUNK_SIZE_WORDS) == 0) {
+				addr = (addrh << 8) + addrl;
+				addr += offset;
+				addr >>= 4;
+
+				retval = recovery_add_data_entry(addr);
+				if (retval < 0) {
+					LOGE(tcm_hcd->pdev->dev.parent,
+						"Failed to add data entry\n");
+					return retval;
+				}
+
+				retval = recovery_add_data_entry(addr >> 8);
+				if (retval < 0) {
+					LOGE(tcm_hcd->pdev->dev.parent,
+						"Failed to add data entry\n");
+					return retval;
+				}
+			}
+
+			retval = recovery_add_data_entry(data0);
+			if (retval < 0) {
+				LOGE(tcm_hcd->pdev->dev.parent,
+						"Failed to add data entry\n");
+				return retval;
+			}
+
+			retval = recovery_add_data_entry(data1);
+			if (retval < 0) {
+				LOGE(tcm_hcd->pdev->dev.parent,
+						"Failed to add data entry\n");
+				return retval;
+			}
+
+			words++;
+		} else if (type == 0x02) {
+			retval = recovery_add_padding(&words);
+			if (retval < 0) {
+				LOGE(tcm_hcd->pdev->dev.parent,
+						"Failed to add padding\n");
+				return retval;
+			}
+
+			offset = (data0 << 8) + data1;
+			offset <<= 4;
+		}
+	}
+
+	retval = recovery_add_padding(&words);
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to add padding\n");
+		return retval;
+	}
+
+	return 0;
+}
+
+static int recovery_check_status(void)
+{
+	int retval;
+	unsigned char status;
+	struct syna_tcm_hcd *tcm_hcd = recovery_hcd->tcm_hcd;
+
+	retval = syna_tcm_rmi_read(tcm_hcd,
+			recovery_hcd->f35_addr.data_base,
+			&status,
+			sizeof(status));
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to read status\n");
+		return retval;
+	}
+
+	status = status & 0x1f;
+
+	if (status != 0x00) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Recovery mode status = 0x%02x\n",
+				status);
+		return -EINVAL;
+	}
+
+	return 0;
+}
+
+static int recovery_write_flash(void)
+{
+	int retval;
+	unsigned char *data_ptr;
+	unsigned int chunk_buf_size;
+	unsigned int chunk_data_size;
+	unsigned int entries_written;
+	unsigned int entries_to_write;
+	struct syna_tcm_hcd *tcm_hcd = recovery_hcd->tcm_hcd;
+
+	entries_written = 0;
+
+	data_ptr = recovery_hcd->data_buf;
+
+	chunk_buf_size = sizeof(recovery_hcd->chunk_buf);
+
+	chunk_data_size = chunk_buf_size - 1;
+
+	recovery_hcd->chunk_buf[chunk_buf_size - 1] = F35_WRITE_CHUNK_COMMAND;
+
+	while (entries_written < recovery_hcd->data_entries) {
+		entries_to_write = F35_CHUNK_SIZE + 2;
+
+		retval = secure_memcpy(recovery_hcd->chunk_buf,
+				chunk_buf_size - 1,
+				data_ptr,
+				recovery_hcd->data_entries - entries_written,
+				entries_to_write);
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+					"Failed to copy chunk data\n");
+			return retval;
+		}
+
+		retval = syna_tcm_rmi_write(tcm_hcd,
+				recovery_hcd->f35_addr.control_base,
+				recovery_hcd->chunk_buf,
+				chunk_buf_size);
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+					"Failed to write chunk data\n");
+			return retval;
+		}
+
+		data_ptr += entries_to_write;
+		entries_written += entries_to_write;
+	}
+
+	retval = recovery_check_status();
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+			"Failed to get no error recovery mode status\n");
+		return retval;
+	}
+
+	return 0;
+}
+
+static int recovery_poll_erase_completion(void)
+{
+	int retval;
+	unsigned char status;
+	unsigned char command;
+	unsigned char data_base;
+	unsigned int timeout;
+	struct syna_tcm_hcd *tcm_hcd = recovery_hcd->tcm_hcd;
+
+	timeout = F35_ERASE_ALL_WAIT_MS;
+
+	data_base = recovery_hcd->f35_addr.data_base;
+
+	do {
+		command = F35_READ_FLASH_STATUS_COMMAND;
+
+		retval = syna_tcm_rmi_write(tcm_hcd,
+				recovery_hcd->f35_addr.command_base,
+				&command,
+				sizeof(command));
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+					"Failed to write F$35 command\n");
+			return retval;
+		}
+
+		do {
+			retval = syna_tcm_rmi_read(tcm_hcd,
+					recovery_hcd->f35_addr.command_base,
+					&command,
+					sizeof(command));
+			if (retval < 0) {
+				LOGE(tcm_hcd->pdev->dev.parent,
+					"Failed to read command status\n");
+				return retval;
+			}
+
+			if (command == 0x00)
+				break;
+
+			if (timeout == 0)
+				break;
+
+			msleep(F35_ERASE_ALL_POLL_MS);
+			timeout -= F35_ERASE_ALL_POLL_MS;
+		} while (true);
+
+		if (command != 0 && timeout == 0) {
+			retval = -EINVAL;
+			goto exit;
+		}
+
+		retval = syna_tcm_rmi_read(tcm_hcd,
+				data_base + F35_DATA5_OFFSET,
+				&status,
+				sizeof(status));
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+					"Failed to read flash status\n");
+			return retval;
+		}
+
+		if ((status & 0x01) == 0x00)
+			break;
+
+		if (timeout == 0) {
+			retval = -EINVAL;
+			goto exit;
+		}
+
+		msleep(F35_ERASE_ALL_POLL_MS);
+		timeout -= F35_ERASE_ALL_POLL_MS;
+	} while (true);
+
+	retval = 0;
+
+exit:
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to get erase completion\n");
+	}
+
+	return retval;
+}
+
+static int recovery_erase_flash(void)
+{
+	int retval;
+	unsigned char command;
+	struct syna_tcm_hcd *tcm_hcd = recovery_hcd->tcm_hcd;
+
+	command = F35_ERASE_ALL_COMMAND;
+
+	retval = syna_tcm_rmi_write(tcm_hcd,
+			recovery_hcd->f35_addr.control_base + F35_CTRL3_OFFSET,
+			&command,
+			sizeof(command));
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to write F$35 command\n");
+		return retval;
+	}
+
+	if (recovery_hcd->f35_addr.command_base) {
+		retval = recovery_poll_erase_completion();
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to wait for erase completion\n");
+			return retval;
+		}
+	} else {
+		msleep(F35_ERASE_ALL_WAIT_MS);
+	}
+
+	retval = recovery_check_status();
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+			"Failed to get no error recovery mode status\n");
+		return retval;
+	}
+
+	return 0;
+}
+
+static int recovery_set_up_recovery_mode(void)
+{
+	int retval;
+	struct syna_tcm_hcd *tcm_hcd = recovery_hcd->tcm_hcd;
+	const struct syna_tcm_board_data *bdata = tcm_hcd->hw_if->bdata;
+
+	retval = tcm_hcd->identify(tcm_hcd, true);
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to do identification\n");
+		return retval;
+	}
+
+	if (tcm_hcd->id_info.mode == MODE_APPLICATION) {
+		retval = tcm_hcd->switch_mode(tcm_hcd, FW_MODE_BOOTLOADER);
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to enter bootloader mode\n");
+			return retval;
+		}
+	}
+
+	retval = tcm_hcd->write_message(tcm_hcd,
+			recovery_hcd->out_buf[0],
+			&recovery_hcd->out_buf[1],
+			2,
+			NULL,
+			NULL,
+			NULL,
+			NULL,
+			0);
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to write command %s\n",
+				STR(CMD_REBOOT_TO_ROM_BOOTLOADER));
+		return retval;
+	}
+
+	msleep(bdata->reset_delay_ms);
+
+	return 0;
+}
+
+static int recovery_do_recovery(void)
+{
+	int retval;
+	struct rmi_pdt_entry p_entry;
+	struct syna_tcm_hcd *tcm_hcd = recovery_hcd->tcm_hcd;
+
+	retval = recovery_parse_ihex();
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to parse ihex data\n");
+		return retval;
+	}
+
+	if (recovery_hcd->set_up_recovery_mode) {
+		retval = recovery_set_up_recovery_mode();
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+					"Failed to set up recovery mode\n");
+			return retval;
+		}
+	}
+
+	tcm_hcd->update_watchdog(tcm_hcd, false);
+
+	retval = syna_tcm_rmi_read(tcm_hcd,
+			PDT_START_ADDR,
+			(unsigned char *)&p_entry,
+			sizeof(p_entry));
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to read PDT entry\n");
+		return retval;
+	}
+
+	if (p_entry.fn_number != UBL_FN_NUMBER) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to find F$35\n");
+		return -ENODEV;
+	}
+
+	recovery_hcd->f35_addr.query_base = p_entry.query_base_addr;
+	recovery_hcd->f35_addr.command_base = p_entry.command_base_addr;
+	recovery_hcd->f35_addr.control_base = p_entry.control_base_addr;
+	recovery_hcd->f35_addr.data_base = p_entry.data_base_addr;
+
+	LOGN(tcm_hcd->pdev->dev.parent,
+			"Start of recovery\n");
+
+	retval = recovery_erase_flash();
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to erase flash\n");
+		return retval;
+	}
+
+	LOGN(tcm_hcd->pdev->dev.parent,
+			"Flash erased\n");
+
+	retval = recovery_write_flash();
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to write to flash\n");
+		return retval;
+	}
+
+	LOGN(tcm_hcd->pdev->dev.parent,
+			"Flash written\n");
+
+	retval = recovery_device_reset();
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to do reset\n");
+		return retval;
+	}
+
+	LOGN(tcm_hcd->pdev->dev.parent,
+			"End of recovery\n");
+
+	if (recovery_hcd->set_up_recovery_mode)
+		return 0;
+
+	tcm_hcd->update_watchdog(tcm_hcd, true);
+
+	retval = tcm_hcd->enable_irq(tcm_hcd, true, NULL);
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to enable interrupt\n");
+		return retval;
+	}
+
+	retval = tcm_hcd->identify(tcm_hcd, true);
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to do identification\n");
+		return retval;
+	}
+
+	if (tcm_hcd->id_info.mode != MODE_APPLICATION) {
+		retval = tcm_hcd->switch_mode(tcm_hcd, FW_MODE_APPLICATION);
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+					"Failed to run application firmware\n");
+			return retval;
+		}
+	}
+
+	return 0;
+}
+
+static int recovery_init(struct syna_tcm_hcd *tcm_hcd)
+{
+	int retval = 0;
+	int idx;
+
+	recovery_hcd = kzalloc(sizeof(*recovery_hcd), GFP_KERNEL);
+	if (!recovery_hcd) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to allocate memory for recovery_hcd\n");
+		return -ENOMEM;
+	}
+
+	recovery_hcd->ihex_buf = kzalloc(IHEX_BUF_SIZE, GFP_KERNEL);
+	if (!recovery_hcd->ihex_buf) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+			"Failed to allocate memory for ihex_buf\n");
+		goto err_allocate_ihex_buf;
+	}
+
+	recovery_hcd->data_buf = kzalloc(DATA_BUF_SIZE, GFP_KERNEL);
+	if (!recovery_hcd->data_buf) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+			"Failed to allocate memory for data_buf\n");
+		goto err_allocate_data_buf;
+	}
+
+	recovery_hcd->tcm_hcd = tcm_hcd;
+
+	recovery_hcd->set_up_recovery_mode = SET_UP_RECOVERY_MODE;
+
+	recovery_hcd->out_buf[0] = CMD_REBOOT_TO_ROM_BOOTLOADER;
+	recovery_hcd->out_buf[1] = 0;
+	recovery_hcd->out_buf[2] = 0;
+
+	if (!ENABLE_SYSFS_INTERFACE)
+		return 0;
+
+	recovery_hcd->sysfs_dir = kobject_create_and_add(SYSFS_DIR_NAME,
+			tcm_hcd->sysfs_dir);
+	if (!recovery_hcd->sysfs_dir) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to create sysfs directory\n");
+		retval = -EINVAL;
+		goto err_sysfs_create_dir;
+	}
+
+	for (idx = 0; idx < ARRAY_SIZE(attrs); idx++) {
+		retval = sysfs_create_file(recovery_hcd->sysfs_dir,
+				&(*attrs[idx]).attr);
+		if (retval < 0) {
+			LOGE(tcm_hcd->pdev->dev.parent,
+					"Failed to create sysfs file\n");
+			goto err_sysfs_create_file;
+		}
+	}
+
+	retval = sysfs_create_bin_file(recovery_hcd->sysfs_dir, &bin_attr);
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to create sysfs bin file\n");
+		goto err_sysfs_create_bin_file;
+	}
+
+	return 0;
+
+err_sysfs_create_bin_file:
+err_sysfs_create_file:
+	for (idx--; idx >= 0; idx--)
+		sysfs_remove_file(recovery_hcd->sysfs_dir, &(*attrs[idx]).attr);
+
+	kobject_put(recovery_hcd->sysfs_dir);
+
+err_sysfs_create_dir:
+	kfree(recovery_hcd->data_buf);
+err_allocate_data_buf:
+	kfree(recovery_hcd->ihex_buf);
+err_allocate_ihex_buf:
+	kfree(recovery_hcd);
+	recovery_hcd = NULL;
+
+	return retval;
+}
+
+static int recovery_remove(struct syna_tcm_hcd *tcm_hcd)
+{
+	int idx;
+
+	if (!recovery_hcd)
+		goto exit;
+
+	if (ENABLE_SYSFS_INTERFACE) {
+		sysfs_remove_bin_file(recovery_hcd->sysfs_dir, &bin_attr);
+
+		for (idx = 0; idx < ARRAY_SIZE(attrs); idx++) {
+			sysfs_remove_file(recovery_hcd->sysfs_dir,
+					&(*attrs[idx]).attr);
+		}
+
+		kobject_put(recovery_hcd->sysfs_dir);
+	}
+
+	kfree(recovery_hcd->data_buf);
+	kfree(recovery_hcd->ihex_buf);
+	kfree(recovery_hcd);
+	recovery_hcd = NULL;
+
+exit:
+	complete(&recovery_remove_complete);
+
+	return 0;
+}
+
+static int recovery_reset(struct syna_tcm_hcd *tcm_hcd)
+{
+	int retval;
+
+	if (!recovery_hcd) {
+		retval = recovery_init(tcm_hcd);
+		return retval;
+	}
+
+	return 0;
+}
+
+static struct syna_tcm_module_cb recovery_module = {
+	.type = TCM_RECOVERY,
+	.init = recovery_init,
+	.remove = recovery_remove,
+	.syncbox = NULL,
+	.asyncbox = NULL,
+	.reset = recovery_reset,
+	.suspend = NULL,
+	.resume = NULL,
+	.early_suspend = NULL,
+};
+
+static int __init recovery_module_init(void)
+{
+	return syna_tcm_add_module(&recovery_module, true);
+}
+
+static void __exit recovery_module_exit(void)
+{
+	syna_tcm_add_module(&recovery_module, false);
+
+	wait_for_completion(&recovery_remove_complete);
+}
+
+module_init(recovery_module_init);
+module_exit(recovery_module_exit);
+
+MODULE_AUTHOR("Synaptics, Inc.");
+MODULE_DESCRIPTION("Synaptics TCM Recovery Module");
+MODULE_LICENSE("GPL v2");

synaptics_tcm/synaptics_tcm_spi.c

@@ -0,0 +1,670 @@
+/*
+ * Synaptics TCM touchscreen driver
+ *
+ * Copyright (C) 2017-2019 Synaptics Incorporated. All rights reserved.
+ *
+ * Copyright (C) 2017-2019 Scott Lin <scott.lin@tw.synaptics.com>
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 2 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * INFORMATION CONTAINED IN THIS DOCUMENT IS PROVIDED "AS-IS," AND SYNAPTICS
+ * EXPRESSLY DISCLAIMS ALL EXPRESS AND IMPLIED WARRANTIES, INCLUDING ANY
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE,
+ * AND ANY WARRANTIES OF NON-INFRINGEMENT OF ANY INTELLECTUAL PROPERTY RIGHTS.
+ * IN NO EVENT SHALL SYNAPTICS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES ARISING OUT OF OR IN CONNECTION
+ * WITH THE USE OF THE INFORMATION CONTAINED IN THIS DOCUMENT, HOWEVER CAUSED
+ * AND BASED ON ANY THEORY OF LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+ * NEGLIGENCE OR OTHER TORTIOUS ACTION, AND EVEN IF SYNAPTICS WAS ADVISED OF
+ * THE POSSIBILITY OF SUCH DAMAGE. IF A TRIBUNAL OF COMPETENT JURISDICTION DOES
+ * NOT PERMIT THE DISCLAIMER OF DIRECT DAMAGES OR ANY OTHER DAMAGES, SYNAPTICS'
+ * TOTAL CUMULATIVE LIABILITY TO ANY PARTY SHALL NOT EXCEED ONE HUNDRED U.S.
+ * DOLLARS.
+ */
+
+#include <linux/spi/spi.h>
+#include <linux/of_gpio.h>
+#include "synaptics_tcm_core.h"
+
+static unsigned char *buf;
+
+static unsigned int buf_size;
+
+static struct spi_transfer *xfer;
+
+static struct syna_tcm_bus_io bus_io;
+
+static struct syna_tcm_hw_interface hw_if;
+
+static struct platform_device *syna_tcm_spi_device;
+
+#ifdef CONFIG_OF
+static int parse_dt(struct device *dev, struct syna_tcm_board_data *bdata)
+{
+	int retval;
+	u32 value;
+	struct property *prop;
+	struct device_node *np = dev->of_node;
+	const char *name;
+
+	prop = of_find_property(np, "synaptics,irq-gpio", NULL);
+	if (prop && prop->length) {
+		bdata->irq_gpio = of_get_named_gpio_flags(np,
+				"synaptics,irq-gpio", 0,
+				(enum of_gpio_flags *)&bdata->irq_flags);
+	} else {
+		bdata->irq_gpio = -1;
+	}
+
+	retval = of_property_read_u32(np, "synaptics,irq-on-state", &value);
+	if (retval < 0)
+		bdata->irq_on_state = 0;
+	else
+		bdata->irq_on_state = value;
+
+	retval = of_property_read_string(np, "synaptics,pwr-reg-name", &name);
+	if (retval < 0)
+		bdata->pwr_reg_name = NULL;
+	else
+		bdata->pwr_reg_name = name;
+
+	retval = of_property_read_string(np, "synaptics,bus-reg-name", &name);
+	if (retval < 0)
+		bdata->bus_reg_name = NULL;
+	else
+		bdata->bus_reg_name = name;
+
+	prop = of_find_property(np, "synaptics,power-gpio", NULL);
+	if (prop && prop->length) {
+		bdata->power_gpio = of_get_named_gpio_flags(np,
+				"synaptics,power-gpio", 0, NULL);
+	} else {
+		bdata->power_gpio = -1;
+	}
+
+	prop = of_find_property(np, "synaptics,power-on-state", NULL);
+	if (prop && prop->length) {
+		retval = of_property_read_u32(np, "synaptics,power-on-state",
+				&value);
+		if (retval < 0) {
+			LOGE(dev,
+				"Failed to read synaptics,power-on-state\n");
+			return retval;
+		}
+		bdata->power_on_state = value;
+	} else {
+		bdata->power_on_state = 0;
+	}
+
+	prop = of_find_property(np, "synaptics,power-delay-ms", NULL);
+	if (prop && prop->length) {
+		retval = of_property_read_u32(np, "synaptics,power-delay-ms",
+				&value);
+		if (retval < 0) {
+			LOGE(dev, "Failed to read synaptics,power-delay-ms\n");
+			return retval;
+		}
+		bdata->power_delay_ms = value;
+	} else {
+		bdata->power_delay_ms = 0;
+	}
+
+	prop = of_find_property(np, "synaptics,reset-gpio", NULL);
+	if (prop && prop->length) {
+		bdata->reset_gpio = of_get_named_gpio_flags(np,
+				"synaptics,reset-gpio", 0, NULL);
+	} else {
+		bdata->reset_gpio = -1;
+	}
+
+	prop = of_find_property(np, "synaptics,reset-on-state", NULL);
+	if (prop && prop->length) {
+		retval = of_property_read_u32(np, "synaptics,reset-on-state",
+				&value);
+		if (retval < 0) {
+			LOGE(dev, "Failed to read synaptics,reset-on-state\n");
+			return retval;
+		}
+		bdata->reset_on_state = value;
+	} else {
+		bdata->reset_on_state = 0;
+	}
+
+	prop = of_find_property(np, "synaptics,reset-active-ms", NULL);
+	if (prop && prop->length) {
+		retval = of_property_read_u32(np, "synaptics,reset-active-ms",
+				&value);
+		if (retval < 0) {
+			LOGE(dev, "Failed to read synaptics,reset-active-ms\n");
+			return retval;
+		}
+		bdata->reset_active_ms = value;
+	} else {
+		bdata->reset_active_ms = 0;
+	}
+
+	prop = of_find_property(np, "synaptics,reset-delay-ms", NULL);
+	if (prop && prop->length) {
+		retval = of_property_read_u32(np, "synaptics,reset-delay-ms",
+				&value);
+		if (retval < 0) {
+			LOGE(dev, "Unable to read synaptics,reset-delay-ms\n");
+			return retval;
+		}
+		bdata->reset_delay_ms = value;
+	} else {
+		bdata->reset_delay_ms = 0;
+	}
+
+	prop = of_find_property(np, "synaptics,x-flip", NULL);
+	bdata->x_flip = prop > 0 ? true : false;
+
+	prop = of_find_property(np, "synaptics,y-flip", NULL);
+	bdata->y_flip = prop > 0 ? true : false;
+
+	prop = of_find_property(np, "synaptics,swap-axes", NULL);
+	bdata->swap_axes = prop > 0 ? true : false;
+
+	prop = of_find_property(np, "synaptics,byte-delay-us", NULL);
+	if (prop && prop->length) {
+		retval = of_property_read_u32(np, "synaptics,byte-delay-us",
+				&value);
+		if (retval < 0) {
+			LOGE(dev, "Unable to read synaptics,byte-delay-us\n");
+			return retval;
+		}
+		bdata->byte_delay_us = value;
+	} else {
+		bdata->byte_delay_us = 0;
+	}
+
+	prop = of_find_property(np, "synaptics,block-delay-us", NULL);
+	if (prop && prop->length) {
+		retval = of_property_read_u32(np, "synaptics,block-delay-us",
+				&value);
+		if (retval < 0) {
+			LOGE(dev, "Unable to read synaptics,block-delay-us\n");
+			return retval;
+		}
+		bdata->block_delay_us = value;
+	} else {
+		bdata->block_delay_us = 0;
+	}
+
+	prop = of_find_property(np, "synaptics,spi-mode", NULL);
+	if (prop && prop->length) {
+		retval = of_property_read_u32(np, "synaptics,spi-mode",
+				&value);
+		if (retval < 0) {
+			LOGE(dev, "Unable to read synaptics,spi-mode\n");
+			return retval;
+		}
+		bdata->spi_mode = value;
+
+	} else {
+		bdata->spi_mode = 0;
+	}
+
+	prop = of_find_property(np, "synaptics,ubl-max-freq", NULL);
+	if (prop && prop->length) {
+		retval = of_property_read_u32(np, "synaptics,ubl-max-freq",
+				&value);
+		if (retval < 0) {
+			LOGE(dev, "Unable to read synaptics,ubl-max-freq\n");
+			return retval;
+		}
+		bdata->ubl_max_freq = value;
+	} else {
+		bdata->ubl_max_freq = 0;
+	}
+
+	prop = of_find_property(np, "synaptics,ubl-byte-delay-us", NULL);
+	if (prop && prop->length) {
+		retval = of_property_read_u32(np, "synaptics,ubl-byte-delay-us",
+				&value);
+		if (retval < 0) {
+			LOGE(dev,
+				"Unable to read synaptics,ubl-byte-delay-us\n");
+			return retval;
+		}
+		bdata->ubl_byte_delay_us = value;
+	} else {
+		bdata->ubl_byte_delay_us = 0;
+	}
+
+	return 0;
+}
+#endif
+
+static int syna_tcm_spi_alloc_mem(struct syna_tcm_hcd *tcm_hcd,
+		unsigned int count, unsigned int size)
+{
+	static unsigned int xfer_count;
+	struct spi_device *spi = to_spi_device(tcm_hcd->pdev->dev.parent);
+
+	if (count > xfer_count) {
+		kfree(xfer);
+		xfer = kcalloc(count, sizeof(*xfer), GFP_KERNEL);
+		if (!xfer) {
+			LOGE(&spi->dev,
+					"Failed to allocate memory for xfer\n");
+			xfer_count = 0;
+			return -ENOMEM;
+		}
+		xfer_count = count;
+	} else {
+		memset(xfer, 0, count * sizeof(*xfer));
+	}
+
+	if (size > buf_size) {
+		if (buf_size)
+			kfree(buf);
+		buf = kmalloc(size, GFP_KERNEL);
+		if (!buf) {
+			LOGE(&spi->dev,
+					"Failed to allocate memory for buf\n");
+			buf_size = 0;
+			return -ENOMEM;
+		}
+		buf_size = size;
+	}
+
+	return 0;
+}
+
+static int syna_tcm_spi_rmi_read(struct syna_tcm_hcd *tcm_hcd,
+		unsigned short addr, unsigned char *data, unsigned int length)
+{
+	int retval;
+	unsigned int idx;
+	unsigned int mode;
+	unsigned int byte_count;
+	struct spi_message msg;
+	struct spi_device *spi = to_spi_device(tcm_hcd->pdev->dev.parent);
+	const struct syna_tcm_board_data *bdata = tcm_hcd->hw_if->bdata;
+
+	mutex_lock(&tcm_hcd->io_ctrl_mutex);
+
+	spi_message_init(&msg);
+
+	byte_count = length + 2;
+
+	if (bdata->ubl_byte_delay_us == 0)
+		retval = syna_tcm_spi_alloc_mem(tcm_hcd, 2, byte_count);
+	else
+		retval = syna_tcm_spi_alloc_mem(tcm_hcd, byte_count, 3);
+	if (retval < 0) {
+		LOGE(&spi->dev,
+				"Failed to allocate memory\n");
+		goto exit;
+	}
+
+	buf[0] = (unsigned char)(addr >> 8) | 0x80;
+	buf[1] = (unsigned char)addr;
+
+	if (bdata->ubl_byte_delay_us == 0) {
+		xfer[0].len = 2;
+		xfer[0].tx_buf = buf;
+		xfer[0].speed_hz = bdata->ubl_max_freq;
+		spi_message_add_tail(&xfer[0], &msg);
+		memset(&buf[2], 0xff, length);
+		xfer[1].len = length;
+		xfer[1].tx_buf = &buf[2];
+		xfer[1].rx_buf = data;
+		if (bdata->block_delay_us)
+			xfer[1].delay_usecs = bdata->block_delay_us;
+		xfer[1].speed_hz = bdata->ubl_max_freq;
+		spi_message_add_tail(&xfer[1], &msg);
+	} else {
+		buf[2] = 0xff;
+		for (idx = 0; idx < byte_count; idx++) {
+			xfer[idx].len = 1;
+			if (idx < 2) {
+				xfer[idx].tx_buf = &buf[idx];
+			} else {
+				xfer[idx].tx_buf = &buf[2];
+				xfer[idx].rx_buf = &data[idx - 2];
+			}
+			xfer[idx].delay_usecs = bdata->ubl_byte_delay_us;
+			if (bdata->block_delay_us && (idx == byte_count - 1))
+				xfer[idx].delay_usecs = bdata->block_delay_us;
+			xfer[idx].speed_hz = bdata->ubl_max_freq;
+			spi_message_add_tail(&xfer[idx], &msg);
+		}
+	}
+
+	mode = spi->mode;
+	spi->mode = SPI_MODE_3;
+
+	retval = spi_sync(spi, &msg);
+	if (retval == 0) {
+		retval = length;
+	} else {
+		LOGE(&spi->dev,
+				"Failed to complete SPI transfer, error = %d\n",
+				retval);
+	}
+
+	spi->mode = mode;
+
+exit:
+	mutex_unlock(&tcm_hcd->io_ctrl_mutex);
+
+	return retval;
+}
+
+static int syna_tcm_spi_rmi_write(struct syna_tcm_hcd *tcm_hcd,
+		unsigned short addr, unsigned char *data, unsigned int length)
+{
+	int retval;
+	unsigned int mode;
+	unsigned int byte_count;
+	struct spi_message msg;
+	struct spi_device *spi = to_spi_device(tcm_hcd->pdev->dev.parent);
+	const struct syna_tcm_board_data *bdata = tcm_hcd->hw_if->bdata;
+
+	mutex_lock(&tcm_hcd->io_ctrl_mutex);
+
+	spi_message_init(&msg);
+
+	byte_count = length + 2;
+
+	retval = syna_tcm_spi_alloc_mem(tcm_hcd, 1, byte_count);
+	if (retval < 0) {
+		LOGE(&spi->dev,
+				"Failed to allocate memory\n");
+		goto exit;
+	}
+
+	buf[0] = (unsigned char)(addr >> 8) & ~0x80;
+	buf[1] = (unsigned char)addr;
+	retval = secure_memcpy(&buf[2],
+			buf_size - 2,
+			data,
+			length,
+			length);
+	if (retval < 0) {
+		LOGE(&spi->dev,
+				"Failed to copy write data\n");
+		goto exit;
+	}
+
+	xfer[0].len = byte_count;
+	xfer[0].tx_buf = buf;
+	if (bdata->block_delay_us)
+		xfer[0].delay_usecs = bdata->block_delay_us;
+	spi_message_add_tail(&xfer[0], &msg);
+
+	mode = spi->mode;
+	spi->mode = SPI_MODE_3;
+
+	retval = spi_sync(spi, &msg);
+	if (retval == 0) {
+		retval = length;
+	} else {
+		LOGE(&spi->dev,
+				"Failed to complete SPI transfer, error = %d\n",
+				retval);
+	}
+
+	spi->mode = mode;
+
+exit:
+	mutex_unlock(&tcm_hcd->io_ctrl_mutex);
+
+	return retval;
+}
+
+static int syna_tcm_spi_read(struct syna_tcm_hcd *tcm_hcd, unsigned char *data,
+		unsigned int length)
+{
+	int retval;
+	unsigned int idx;
+	struct spi_message msg;
+	struct spi_device *spi = to_spi_device(tcm_hcd->pdev->dev.parent);
+	const struct syna_tcm_board_data *bdata = tcm_hcd->hw_if->bdata;
+
+	mutex_lock(&tcm_hcd->io_ctrl_mutex);
+
+	spi_message_init(&msg);
+
+	if (bdata->byte_delay_us == 0)
+		retval = syna_tcm_spi_alloc_mem(tcm_hcd, 1, length);
+	else
+		retval = syna_tcm_spi_alloc_mem(tcm_hcd, length, 1);
+	if (retval < 0) {
+		LOGE(tcm_hcd->pdev->dev.parent,
+				"Failed to allocate memory\n");
+		goto exit;
+	}
+
+	if (bdata->byte_delay_us == 0) {
+		memset(buf, 0xff, length);
+		xfer[0].len = length;
+		xfer[0].tx_buf = buf;
+		xfer[0].rx_buf = data;
+		if (bdata->block_delay_us)
+			xfer[0].delay_usecs = bdata->block_delay_us;
+		spi_message_add_tail(&xfer[0], &msg);
+	} else {
+		buf[0] = 0xff;
+		for (idx = 0; idx < length; idx++) {
+			xfer[idx].len = 1;
+			xfer[idx].tx_buf = buf;
+			xfer[idx].rx_buf = &data[idx];
+			xfer[idx].delay_usecs = bdata->byte_delay_us;
+			if (bdata->block_delay_us && (idx == length - 1))
+				xfer[idx].delay_usecs = bdata->block_delay_us;
+			spi_message_add_tail(&xfer[idx], &msg);
+		}
+	}
+
+	retval = spi_sync(spi, &msg);
+	if (retval == 0) {
+		retval = length;
+	} else {
+		LOGE(&spi->dev,
+				"Failed to complete SPI transfer, error = %d\n",
+				retval);
+	}
+
+exit:
+	mutex_unlock(&tcm_hcd->io_ctrl_mutex);
+
+	return retval;
+}
+
+static int syna_tcm_spi_write(struct syna_tcm_hcd *tcm_hcd, unsigned char *data,
+		unsigned int length)
+{
+	int retval;
+	unsigned int idx;
+	struct spi_message msg;
+	struct spi_device *spi = to_spi_device(tcm_hcd->pdev->dev.parent);
+	const struct syna_tcm_board_data *bdata = tcm_hcd->hw_if->bdata;
+
+	mutex_lock(&tcm_hcd->io_ctrl_mutex);
+
+	spi_message_init(&msg);
+
+	if (bdata->byte_delay_us == 0)
+		retval = syna_tcm_spi_alloc_mem(tcm_hcd, 1, 0);
+	else
+		retval = syna_tcm_spi_alloc_mem(tcm_hcd, length, 0);
+	if (retval < 0) {
+		LOGE(&spi->dev,
+				"Failed to allocate memory\n");
+		goto exit;
+	}
+
+	if (bdata->byte_delay_us == 0) {
+		xfer[0].len = length;
+		xfer[0].tx_buf = data;
+		if (bdata->block_delay_us)
+			xfer[0].delay_usecs = bdata->block_delay_us;
+		spi_message_add_tail(&xfer[0], &msg);
+	} else {
+		for (idx = 0; idx < length; idx++) {
+			xfer[idx].len = 1;
+			xfer[idx].tx_buf = &data[idx];
+			xfer[idx].delay_usecs = bdata->byte_delay_us;
+			if (bdata->block_delay_us && (idx == length - 1))
+				xfer[idx].delay_usecs = bdata->block_delay_us;
+			spi_message_add_tail(&xfer[idx], &msg);
+		}
+	}
+
+	retval = spi_sync(spi, &msg);
+	if (retval == 0) {
+		retval = length;
+	} else {
+		LOGE(&spi->dev,
+				"Failed to complete SPI transfer, error = %d\n",
+				retval);
+	}
+
+exit:
+	mutex_unlock(&tcm_hcd->io_ctrl_mutex);
+
+	return retval;
+}
+
+static int syna_tcm_spi_probe(struct spi_device *spi)
+{
+	int retval;
+
+	if (spi->master->flags & SPI_MASTER_HALF_DUPLEX) {
+		LOGE(&spi->dev,
+				"Full duplex not supported by host\n");
+		return -EIO;
+	}
+
+	syna_tcm_spi_device = platform_device_alloc(PLATFORM_DRIVER_NAME, 0);
+	if (!syna_tcm_spi_device) {
+		LOGE(&spi->dev,
+				"Failed to allocate platform device\n");
+		return -ENOMEM;
+	}
+
+#ifdef CONFIG_OF
+	hw_if.bdata = devm_kzalloc(&spi->dev, sizeof(*hw_if.bdata), GFP_KERNEL);
+	if (!hw_if.bdata) {
+		LOGE(&spi->dev,
+				"Failed to allocate memory for board data\n");
+		return -ENOMEM;
+	}
+	parse_dt(&spi->dev, hw_if.bdata);
+#else
+	hw_if.bdata = spi->dev.platform_data;
+#endif
+
+	switch (hw_if.bdata->spi_mode) {
+	case 0:
+		spi->mode = SPI_MODE_0;
+		break;
+	case 1:
+		spi->mode = SPI_MODE_1;
+		break;
+	case 2:
+		spi->mode = SPI_MODE_2;
+		break;
+	case 3:
+		spi->mode = SPI_MODE_3;
+		break;
+	}
+
+	bus_io.type = BUS_SPI;
+	bus_io.read = syna_tcm_spi_read;
+	bus_io.write = syna_tcm_spi_write;
+	bus_io.rmi_read = syna_tcm_spi_rmi_read;
+	bus_io.rmi_write = syna_tcm_spi_rmi_write;
+
+	hw_if.bus_io = &bus_io;
+
+	spi->bits_per_word = 8;
+
+	retval = spi_setup(spi);
+	if (retval < 0) {
+		LOGE(&spi->dev,
+				"Failed to set up SPI protocol driver\n");
+		return retval;
+	}
+
+	syna_tcm_spi_device->dev.parent = &spi->dev;
+	syna_tcm_spi_device->dev.platform_data = &hw_if;
+
+	retval = platform_device_add(syna_tcm_spi_device);
+	if (retval < 0) {
+		LOGE(&spi->dev,
+				"Failed to add platform device\n");
+		return retval;
+	}
+
+	return 0;
+}
+
+static int syna_tcm_spi_remove(struct spi_device *spi)
+{
+	syna_tcm_spi_device->dev.platform_data = NULL;
+
+	platform_device_unregister(syna_tcm_spi_device);
+
+	return 0;
+}
+
+static const struct spi_device_id syna_tcm_id_table[] = {
+	{SPI_MODULE_NAME, 0},
+	{},
+};
+MODULE_DEVICE_TABLE(spi, syna_tcm_id_table);
+
+#ifdef CONFIG_OF
+static const struct of_device_id syna_tcm_of_match_table[] = {
+	{
+		.compatible = "synaptics,tcm-spi",
+	},
+	{},
+};
+MODULE_DEVICE_TABLE(of, syna_tcm_of_match_table);
+#else
+#define syna_tcm_of_match_table NULL
+#endif
+
+static struct spi_driver syna_tcm_spi_driver = {
+	.driver = {
+		.name = SPI_MODULE_NAME,
+		.owner = THIS_MODULE,
+		.of_match_table = syna_tcm_of_match_table,
+	},
+	.probe = syna_tcm_spi_probe,
+	.remove = syna_tcm_spi_remove,
+	.id_table = syna_tcm_id_table,
+};
+
+int syna_tcm_bus_init_spi(void)
+{
+	return spi_register_driver(&syna_tcm_spi_driver);
+}
+EXPORT_SYMBOL(syna_tcm_bus_init_spi);
+
+void syna_tcm_bus_exit_spi(void)
+{
+	kfree(buf);
+
+	kfree(xfer);
+
+	spi_unregister_driver(&syna_tcm_spi_driver);
+}
+EXPORT_SYMBOL(syna_tcm_bus_exit_spi);
+
+MODULE_AUTHOR("Synaptics, Inc.");
+MODULE_DESCRIPTION("Synaptics TCM SPI Bus Module");
+MODULE_LICENSE("GPL v2");

synaptics_tcm/synaptics_tcm_testing.h

@@ -0,0 +1,85 @@
+/*
+ * Synaptics TCM touchscreen driver
+ *
+ * Copyright (C) 2017-2019 Synaptics Incorporated. All rights reserved.
+ *
+ * Copyright (C) 2017-2019 Scott Lin <scott.lin@tw.synaptics.com>
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 2 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * INFORMATION CONTAINED IN THIS DOCUMENT IS PROVIDED "AS-IS," AND SYNAPTICS
+ * EXPRESSLY DISCLAIMS ALL EXPRESS AND IMPLIED WARRANTIES, INCLUDING ANY
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE,
+ * AND ANY WARRANTIES OF NON-INFRINGEMENT OF ANY INTELLECTUAL PROPERTY RIGHTS.
+ * IN NO EVENT SHALL SYNAPTICS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES ARISING OUT OF OR IN CONNECTION
+ * WITH THE USE OF THE INFORMATION CONTAINED IN THIS DOCUMENT, HOWEVER CAUSED
+ * AND BASED ON ANY THEORY OF LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+ * NEGLIGENCE OR OTHER TORTIOUS ACTION, AND EVEN IF SYNAPTICS WAS ADVISED OF
+ * THE POSSIBILITY OF SUCH DAMAGE. IF A TRIBUNAL OF COMPETENT JURISDICTION DOES
+ * NOT PERMIT THE DISCLAIMER OF DIRECT DAMAGES OR ANY OTHER DAMAGES, SYNAPTICS'
+ * TOTAL CUMULATIVE LIABILITY TO ANY PARTY SHALL NOT EXCEED ONE HUNDRED U.S.
+ * DOLLARS.
+ */
+
+#ifndef _SYNAPTICS_TCM_TESTING_H_
+#define _SYNAPTICS_TCM_TESTING_H_
+
+static const unsigned short drt_hi_limits[32][32] = {
+	{0},
+};
+
+static const unsigned short drt_lo_limits[32][32] = {
+	{0,},
+};
+
+static const unsigned short noise_limits[32][32] = {
+	{0,},
+};
+
+static const short pt11_hi_limits[32][32] = {
+	{0,},
+};
+
+static const short pt11_lo_limits[32][32] = {
+	{0,},
+};
+
+static const short pt12_limits[32][32] = {
+	{0,},
+};
+
+static const short pt13_limits[32][32] = {
+	{0,},
+};
+
+static const unsigned char lockdown_limits[] = {
+	0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+	0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+	0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+	0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+	0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+	0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+	0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+	0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+	0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+	0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+	0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+	0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+	0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+	0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+	0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+	0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+};
+
+static const unsigned char reset_open_limit = 0x13;
+
+#endif

touch_driver_board.mk

@@ -10,7 +10,8 @@ ifeq ($(TOUCH_DLKM_ENABLE),  true)
 		ifeq ($(call is-board-platform-in-list,$(TARGET_BOARD_PLATFORM)),true)
 			BOARD_VENDOR_KERNEL_MODULES += $(KERNEL_MODULES_OUT)/nt36xxx-i2c.ko \
 				$(KERNEL_MODULES_OUT)/goodix_ts.ko \
-				$(KERNEL_MODULES_OUT)/atmel_mxt_ts.ko
+				$(KERNEL_MODULES_OUT)/atmel_mxt_ts.ko \
+				$(KERNEL_MODULES_OUT)/synaptics_tcm_ts.ko
 		endif
 	endif
 endif

touch_driver_product.mk

@@ -8,5 +8,6 @@ endif
 ifeq ($(TOUCH_DLKM_ENABLE),  true)
 	PRODUCT_PACKAGES += $(KERNEL_MODULES_OUT)/nt36xxx-i2c.ko \
 		$(KERNEL_MODULES_OUT)/goodix_ts.ko \
-		$(KERNEL_MODULES_OUT)/atmel_mxt_ts.ko
+		$(KERNEL_MODULES_OUT)/atmel_mxt_ts.ko \
+		$(KERNEL_MODULES_OUT)/synaptics_tcm_ts.ko
 endif