Project

General

Profile

XMMBoot » History » Version 210

Denis 'GNUtoo' Carikli, 03/24/2021 04:45 PM

1 1 Denis 'GNUtoo' Carikli
h1. XMMBoot
2
3 59 Denis 'GNUtoo' Carikli
{{toc}}
4
5 1 Denis 'GNUtoo' Carikli
h2.  Introduction
6
7
For both libsamsung-ipc and the Linux driver it's interesting to understand better the boot of the modem in order to come with good names for the abstraction.
8
9 194 Denis 'GNUtoo' Carikli
h2. High level boot process 
10
11
The exact boot sequence is different on different devices:
12
* On most / all the devices we need to start by powering off the modem, and the link between the SOC and the modem. This makes sure that we can reliabily boot the modem at all times. 
13
* Then we need to configure the hardware to put the modem in loading mode and have everything ready for loading its firmware. On some device, the link needed to load the modem needs to be configured as well.
14
* Then we send the modem firmware to the modem
15
* Then on some devices we need extra step (like triggering an HSIC re-enumeration) once it's done. 
16
17 58 Denis 'GNUtoo' Carikli
h2. Abstraction
18
19
* hci_power -> link_power
20
21 63 Denis 'GNUtoo' Carikli
TODO:
22
* Find the difference between power_on and boot_power_on
23
** Look at the GPIOs and understand what they do
24
** Just read the code that use the GPIOs
25
** Diff both procedures
26 67 Denis 'GNUtoo' Carikli
* Look which device has which XMM626X
27
* Add XMM6210 devices too
28 63 Denis 'GNUtoo' Carikli
29 16 Denis 'GNUtoo' Carikli
h2. GPIOs
30
31 55 Denis 'GNUtoo' Carikli
h3. Devices GPIOs assignement and drivers
32 47 Denis 'GNUtoo' Carikli
33 79 Denis 'GNUtoo' Carikli
|_\4. Hardware |_\2. Linux |_\1. libsamsung-ipc |
34
|_. Variant |_. SOC |_. Modem  |_. Link |_. GPIO usage |_. GPIO assignement |_. device driver name |
35
| Galaxy Tab:
36 109 Denis 'GNUtoo' Carikli
  GT-P1000 | Exynos 3310 | | RAM | | | aries | 
37 77 Denis 'GNUtoo' Carikli
| Galaxy S:
38 110 Denis 'GNUtoo' Carikli
  GT-I9000 | Exynos 3110 | "XMM6160":https://www.wikidata.org/wiki/Q88838210#Q88838210$d5389045-4624-171a-18c5-ed1b15e1b3f5 | RAM | | | aries |
39 1 Denis 'GNUtoo' Carikli
| Nexus S:
40
  GT-I9020
41
  GT-I9020A
42 79 Denis 'GNUtoo' Carikli
  GT-I9023 | Exynos 3110 | | RAM | | | crespo |
43 74 Denis 'GNUtoo' Carikli
| Galaxy SII:
44 105 Denis 'GNUtoo' Carikli
  GT-I9100 | Exynos 4210 | XMM6260 | HSIC | "CONFIG_UMTS_MODEM_XMM6260=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9100_defconfig#n1321 | | galaxys2 |
45
| Galaxy Note:
46
  GT-N7000 | Exynos 4210 | XMM6260 | HSIC | "CONFIG_UMTS_MODEM_XMM6260=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_n7000_defconfig#n1330 | | galaxys2 |
47 74 Denis 'GNUtoo' Carikli
| Galaxy Nexus:
48 111 Denis 'GNUtoo' Carikli
  GT-I9250 | OMAP 4460 | XMM6260 | MIPI | "CONFIG_UMTS_MODEM_XMM6260=y":https://git.replicant.us/replicant/kernel_samsung_tuna/tree/arch/arm/configs/tuna_defconfig#n1209
49
                                          "Makefile":https://git.replicant.us/replicant/kernel_samsung_tuna/tree/drivers/misc/modem_if/Makefile#n10
50
                                          "modem_modemctl_device_xmm6260.c":https://git.replicant.us/replicant/kernel_samsung_tuna/tree/drivers/misc/modem_if/modem_modemctl_device_xmm6260.c | | maguro |
51 74 Denis 'GNUtoo' Carikli
| Galaxy SIII:
52 49 Denis 'GNUtoo' Carikli
  GT-I9300 | Exynos 4412 | XMM6262 | HSIC | "CONFIG_UMTS_MODEM_XMM6262=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n1350
53 1 Denis 'GNUtoo' Carikli
"Makefile":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/misc/modem_if/Makefile#n10
54
"modem_modemctl_device_xmm6262.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/misc/modem_if/modem_modemctl_device_xmm6262.c | "CONFIG_SEC_MODEM_M0=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n541
55
"Makefile":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/Makefile#n320
56 50 Denis 'GNUtoo' Carikli
"board-m0-modems.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c 
57 1 Denis 'GNUtoo' Carikli
"CONFIG_MACH_M0=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n455
58
"gpio-midas.h":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/include/mach/gpio-midas.h#n28
59 79 Denis 'GNUtoo' Carikli
"gpio-rev00-m0.h":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/include/mach/gpio-rev00-m0.h | i9300 |
60 74 Denis 'GNUtoo' Carikli
| Galaxy Note 8.0 GSM:
61 104 Denis 'GNUtoo' Carikli
  GT-N5100 | Exynos 4412 | XMM6262 | HSIC | "CONFIG_UMTS_MODEM_XMM6262=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_n5100_defconfig#n1335 | | n5100 |
62 74 Denis 'GNUtoo' Carikli
| Galaxy Note II:
63 79 Denis 'GNUtoo' Carikli
  GT-N7100 | Exynos 4412 | XMM6262 | HSIC | "CONFIG_UMTS_MODEM_XMM6262=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_n7100_defconfig#n1356 | | n7100 |
64 74 Denis 'GNUtoo' Carikli
| Galaxy Tab 2:
65
  GT-P3100 
66 103 Denis 'GNUtoo' Carikli
  GT-P5100 | OMAP 4430 | XMM6262 | MIPI | "CONFIG_UMTS_MODEM_XMM6262=y":https://git.replicant.us/replicant/kernel_samsung_espresso10/tree/arch/arm/configs/espresso_defconfig#n224 | | piranah |
67 55 Denis 'GNUtoo' Carikli
68
h3. GPIOs usage
69
70 65 Denis 'GNUtoo' Carikli
TODO: make sure to mention what applies to what device
71
* Start with I9300. Assume I9300 if device is not mentioned. Mention device when not I9300
72
* Add more devices and mention them
73
74 91 Denis 'GNUtoo' Carikli
Note that we don't limit ourselves to the drivers that are in use on the devices supported by Replicant.
75
As Samsung wrote drivers for the modem interfaces, and that the interface is similar across many different modems, other unused drivers and their comments also gives many hints about what the GPIOs are supposed to be used for.
76
77 204 Denis 'GNUtoo' Carikli
|_. gpio platform data name |_. present |_. absent |_. direction |_. comments |
78 196 Denis 'GNUtoo' Carikli
| "gpio_cp_on":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n237 | | | powers on the modem? in which state (PMIC?, CPU?)
79 89 Denis 'GNUtoo' Carikli
                     * On GT-I9100 it's connected to the ON1 modem pin and ON2 is not connected. |
80 205 Denis 'GNUtoo' Carikli
| "gpio_cp_reset":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n239| | read + write | Resets the modem CPU? PMIC?:
81 89 Denis 'GNUtoo' Carikli
                        * "''check the reset timming with C2C connection''":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/misc/modem_if/modem_modemctl_device_xmm6262.c#n106 : Here C2C probably means chip to chip
82
                        Can also read the modem CPU? and/or PMIC? reset state?
83 210 Denis 'GNUtoo' Carikli
                        * "Reads from the GPIO and ''CP not ready, Active State low'' comment":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n287
84
                        Also used in umts_link_reconnect (todo: check firmware status) |
85 208 Denis 'GNUtoo' Carikli
| "gpio_reset_req_n":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n238 ("define":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/include/mach/gpio-rev00-m0.h#n261) | | | It seems to reset the modem. On some device with an MSM SOC (modem? AP?) in the smdk4412 kernel, it resets the modem PMIC. It can also be used to keep the modem (SOC? PMIC? CPU?) in reset mode while powered on.
86 206 Denis 'GNUtoo' Carikli
It could very well be the PMIC with the GT-I9300 as we have the following sequence in "xmm6262_on":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/misc/modem_if/modem_modemctl_device_xmm6262.c#n31 :
87
<pre>
88
	gpio_set_value(mc->gpio_reset_req_n, 0);
89
	gpio_set_value(mc->gpio_cp_on, 0);
90
	gpio_set_value(mc->gpio_cp_reset, 0);
91
	msleep(100);
92
	gpio_set_value(mc->gpio_cp_reset, 1);
93
	/* If XMM6262 was connected with C2C, AP wait 50ms to BB Reset*/
94
	msleep(50);
95
	gpio_set_value(mc->gpio_reset_req_n, 1);
96
97
	gpio_set_value(mc->gpio_cp_on, 1);
98
	udelay(60);
99
	gpio_set_value(mc->gpio_cp_on, 0);
100
	msleep(20);
101
</pre> 
102
SOCs probably need to have a very specific voltage ramp up sequences to boot (voltage ramps and so on are described in the SOC datasheets, TODO: check with a specific example).
103
If that's true it would mean that the CPU has to not be off at boot but still be in some reset mode to accept a firmware?
104
In that case, once everything is off, the CPU power would be turned on first, then the PMIC, then the reset line for the firmware loading (way later) |
105 196 Denis 'GNUtoo' Carikli
| "gpio_pda_active":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n240| | | Tell the modem if the SOC CPUs are sleeping/active or not?
106 89 Denis 'GNUtoo' Carikli
                          * "PDA == Application processor":https://android.stackexchange.com/questions/176515/what-do-the-terms-bl-ap-cp-and-csc-mean-in-odin
107
                          * "''PDA_ACTIVE, let cp know AP sleep'' comment in status gc1-gpio.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/gc1-gpio.c#n213
108
                          * "PDA_ACTIVE set to 0 right after cpu_pm_enter()":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/cpuidle-exynos4.c#n701
109
                          * "PDA_ACTIVE set to 1 right before cpu_pm_exit()":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/cpuidle-exynos4.c#n796
110 94 Denis 'GNUtoo' Carikli
                          * GPIO direction is output on AP side and input on BP side, which is also confirmed by the "pinout table in XDA":https://forum.xda-developers.com/galaxy-s2/help/how-to-talk-to-modem-commands-t1471241/page4
111
                          Also indicates when the CPU is ready to process modem stuff:
112
                          * "set to 1 *at the end* of xmm6262_on in modem_modemctl_device_xmm6262.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/misc/modem_if/modem_modemctl_device_xmm6262.c#n68
113 95 Denis 'GNUtoo' Carikli
                          * The CPU can't process stuff if the HSIC link is in low power mode, "as shown in set_hsic_lpa_states in board-m0-modems.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n310 so it sets gpio_pda_active to 0 in these cases. |
114 196 Denis 'GNUtoo' Carikli
| "gpio_phone_active":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n241 | | | Seem the modem counterpart of gpio_pda_active:
115 90 Denis 'GNUtoo' Carikli
                            * See "umts_link_reconnect in board-m0-modems.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n341
116 93 Denis 'GNUtoo' Carikli
                            * See also "mc_work in the unused modemctl.c driver":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/svnet/modemctl.c#n484 where that GPIO is used both to signal when the modem finished booting everything and is ready, and when the modem crashes or is reset 
117
                            * "phone_active_irq_handler in modem_modemctl_device_xmm6262.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/misc/modem_if/modem_modemctl_device_xmm6262.c#n139 seem to be doing exactly the same thing. |
118 197 Denis 'GNUtoo' Carikli
| "gpio_cp_dump_int":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n246 | | | Maybe used for crash dump. Reference: [[AcademicPapersAndPresentations#A-walk-with-Shannon-Walkthrough-of-a-pwn2own-baseband-exploit|Presentation about exploiting XMM modems]]: The nonfree s-boot 4.0 bootloader can probably get the modem crashdump. (cp is the modem) |
119 196 Denis 'GNUtoo' Carikli
| "gpio_flm_uart_sel":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | Only used for the Galaxy Nexus in libsamsung-ipc | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n242 | | Modem download mode ? 
120 112 Denis 'GNUtoo' Carikli
                                                                                                                                                                                         * FLM could be Firmware Load mode ?
121 1 Denis 'GNUtoo' Carikli
                                                                                                                                                                                         * On several devices, that GPIO seem to be used to switch between different UART, and the PMIC seem involved too in some devices. Not sure how it switches |
122 196 Denis 'GNUtoo' Carikli
| "gpio_cp_warm_reset":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n248 | | |
123 199 Denis 'GNUtoo' Carikli
| gpio_revers_bias_clear | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n268 | | | |
124
| gpio_revers_bias_restore | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n268 | | | |
125 209 Denis 'GNUtoo' Carikli
| "gpio_sim_detect":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n255 (GPIO_SIM_DETECT is not set)| | Detect SIM card presence ? |
126 201 Denis 'GNUtoo' Carikli
| "gpio_link_enable":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n112 | | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n221 | | "power management (modemlink_pm_data)":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n218 |
127
| "gpio_link_active":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n112 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n222 ("define":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/include/mach/gpio-rev00-m0.h#n257) | | | set to 0 when the (HSIC) link is in low power and to 1 when it's back, "like in set_hsic_lpa_states in board-m0-modems.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n304 , "power management (modemlink_pm_data)":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n218 |
128
| "gpio_link_hostwake":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n112 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n223 ("define":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/include/mach/gpio-rev00-m0.h#n264) | | | "power management (modemlink_pm_data)":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n218 |
129 202 Denis 'GNUtoo' Carikli
| "gpio_link_slavewake":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n112 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n224 ("define":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/include/mach/gpio-rev00-m0.h#n263)| | | "power management (modemlink_pm_data)":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n218 |
130 197 Denis 'GNUtoo' Carikli
| gpio_ap_dump_int | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n244 ("define":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/include/mach/gpio-rev00-m0.h#n268)| | | Maybe used for crash dump. Reference: [[AcademicPapersAndPresentations#A-walk-with-Shannon-Walkthrough-of-a-pwn2own-baseband-exploit|Presentation about exploiting XMM modems]]: The nonfree s-boot 4.0 bootloader can probably get the modem crashdump. Here it would indicate that the host somehow can send crashdumps to the modem somehow? |
131 196 Denis 'GNUtoo' Carikli
| gpio_sim_io_sel | | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n250 ("define":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n539) | |/3. Seem to be used for some dual modem feature which is not present in any Replicant kernels (aries, crespo, espresso10, smdk4412, tuna) for Replicant 6 (or 4.2 for aries and crespo) |
132
| gpio_cp_ctrl1 | | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n251 ("define":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n539) | |
133
| gpio_cp_ctrl2 | | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n252 ("define":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n539) | |
134 47 Denis 'GNUtoo' Carikli
135 53 Denis 'GNUtoo' Carikli
h3. Libsamsung-ipc
136 52 Denis 'GNUtoo' Carikli
137 165 Denis 'GNUtoo' Carikli
|/2. ioctl / function |\8. Devices |
138 166 Denis 'GNUtoo' Carikli
| GT-I9250 | GT-I9100 / GT-N7000 | GT-I9300 | GT-N5100 | GT-N7100 | GT-P3100 / GT-P5100 | Galaxy S (GT-I9000) / Galaxy Tab  | Nexus S (GT-I902x) |
139
| libsamsung-ipc driver | maguro | galaxys2 | i9300 | n5100 | n7100 | piranah | aries | crespo |
140 52 Denis 'GNUtoo' Carikli
| open, close, read, write 
141 1 Denis 'GNUtoo' Carikli
fmt/rfs
142
gprs
143 54 Denis 'GNUtoo' Carikli
power |\6. Yes |
144 52 Denis 'GNUtoo' Carikli
| boot_power
145 168 Denis 'GNUtoo' Carikli
status_online_wait | Yes |\5. No |/3\2. No |
146 1 Denis 'GNUtoo' Carikli
| hci_power
147 52 Denis 'GNUtoo' Carikli
link_control_active
148 167 Denis 'GNUtoo' Carikli
link_connected_wait
149 160 Denis 'GNUtoo' Carikli
link_get_hostwake_wait |/2. No |\4. Yes |/2. No |
150 163 Denis 'GNUtoo' Carikli
| link_control_enable | Yes (ignored by Linux[4][5][6]) |\3. Yes (ignored by Linux[1][2][3]) |
151 169 Denis 'GNUtoo' Carikli
| psi_send | xmm626_mipi_psi_send |\4. xmm626_hsic_psi_send | xmm626_mipi_psi_send |\2. xmm616_psi_send | 
152 170 Denis 'GNUtoo' Carikli
| firmware_send | xmm626_mipi_firmware_send |\4. xmm626_hsic_firmware_send | xmm626_mipi_firmware_send |\2. xmm616_firmware_send | 
153
| nv_data_send | xmm626_mipi_nv_data_send |\4. xmm626_hsic_nv_data_send | xmm626_mipi_nv_data_send |\2. xmm616_nv_data_send | 
154 52 Denis 'GNUtoo' Carikli
155 161 Denis 'GNUtoo' Carikli
fn1. https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n221
156
157
fn2. https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n218
158
159 1 Denis 'GNUtoo' Carikli
fn3. https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n136
160 162 Denis 'GNUtoo' Carikli
161
fn4. https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-u1-modems.c#n153
162
163
fn5. https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-u1-modems.c#n151
164
165
fn6. https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-u1-modems.c#n139
166 66 Denis 'GNUtoo' Carikli
167 56 Denis 'GNUtoo' Carikli
h3. libsamsung-ipc <-> kernel functions <-> gpios
168 10 Denis 'GNUtoo' Carikli
169 56 Denis 'GNUtoo' Carikli
|_. libsamsung-ipc |_\3. Kernel |
170 157 Denis 'GNUtoo' Carikli
|_. Function using the ioctl |_. ioctl name |_. pointer signature |_. GPIO used | comment |
171 57 Denis 'GNUtoo' Carikli
| xmm626_kernel_smdk4412_power | IOCTL_MODEM_ON
172 156 Denis 'GNUtoo' Carikli
                                 IOCTL_MODEM_OFF | <pre>int (*modem_on)(struct modem_ctl*);</pre>
173
                                                   <pre>int (*modem_off)(struct modem_ctl*);</pre> | gpio_cp_on
174 153 Denis 'GNUtoo' Carikli
                                                                                      gpio_cp_reset
175
                                                                                      gpio_reset_req_n
176
                                                                                      gpio_pda_active |
177 56 Denis 'GNUtoo' Carikli
| | | | gpio_phone_active |
178 1 Denis 'GNUtoo' Carikli
| | | | gpio_cp_dump_int |
179 56 Denis 'GNUtoo' Carikli
| xmm626_kernel_smdk4412_boot_power | IOCTL_MODEM_BOOT_ON
180 156 Denis 'GNUtoo' Carikli
                                      IOCTL_MODEM_BOOT_OFF | <pre>int (*modem_boot_on)(struct modem_ctl*);</pre>
181
                                                             <pre>int (*modem_boot_off)(struct modem_ctl*);</pre> | gpio_flm_uart_sel |
182 56 Denis 'GNUtoo' Carikli
| | | | gpio_cp_warm_reset |
183
| | | | gpio_revers_bias_clear |
184
| | | | gpio_revers_bias_restore |
185 1 Denis 'GNUtoo' Carikli
| | | | gpio_sim_detect |
186 157 Denis 'GNUtoo' Carikli
| xmm626_kernel_smdk4412_status_online_wait | IOCTL_MODEM_STATUS | int phone_state; | gpio_cp_on
187
                                                                                      gpio_cp_reset
188
                                                                                      gpio_pda_active
189
                                                                                      gpio_reset_req_n
190 158 Denis 'GNUtoo' Carikli
                                                                                      gpio_phone_active | int phone_state get assigned the status computed from the various GPIO states
191
                                                                                                          xmm626_kernel_smdk4412_status_online_wait only waits for the online status    |
192 159 Denis 'GNUtoo' Carikli
| xmm626_kernel_smdk4412_link_control_enable | IOCTL_LINK_CONTROL_ENABLE | <pre>int (*link_ldo_enable)(bool);</pre> | gpio_link_enable | on i9300:
193
                                                                                                                                        * link_ldo_enable only returns 0 and has a comment ("Exynos HSIC V1.2 LDO was controlled by kernel")
194
                                                                                                                                        * gpio_link_enable is set to 0 (so it's ignored) |
195 44 Denis 'GNUtoo' Carikli
196
h3. Glossary
197
198 72 Denis 'GNUtoo' Carikli
Terms for the modem CPU:
199 61 Denis 'GNUtoo' Carikli
* BP: Baseband processor
200
* CP: Cellular? processor
201 60 Denis 'GNUtoo' Carikli
202 72 Denis 'GNUtoo' Carikli
Term for the CPU of the system on a chip running Replicant:
203 60 Denis 'GNUtoo' Carikli
* AP: Application processor
204 1 Denis 'GNUtoo' Carikli
205 62 Denis 'GNUtoo' Carikli
TODO: move in its own page and point to it
206
207 101 Denis 'GNUtoo' Carikli
LPA: Low power mode active (Related to ULPI specs only?)
208
209
ULPI: Probably a USB PHY spec
210
211 16 Denis 'GNUtoo' Carikli
h3. SIM card presence detection
212 7 Denis 'GNUtoo' Carikli
213
Do we really want to check the SIM card presence?
214
215
Would it be possible not to for privacy reasons?
216
217
Example:
218
* Boot a modem with a SIM
219
* Take away the SIM card
220 1 Denis 'GNUtoo' Carikli
* Go to a protest with only the SIM card and a phone with no data on it to be able to call if necessary.
221 7 Denis 'GNUtoo' Carikli
222 16 Denis 'GNUtoo' Carikli
h3. TODO
223 1 Denis 'GNUtoo' Carikli
224
* check gpio_flm_uart_sel in smdk4412 kernel too
225 16 Denis 'GNUtoo' Carikli
226 82 Denis 'GNUtoo' Carikli
h2. Potential privacy and security issues
227
228 83 Denis 'GNUtoo' Carikli
h3. gpio_pda_active
229
230
From "cpuidle-exynos4.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/cpuidle-exynos4.c#n701 we have things like that:
231
<pre>
232
	cpu_pm_enter();
233
234
#if defined(CONFIG_INTERNAL_MODEM_IF) || defined(CONFIG_SAMSUNG_PHONE_TTY)
235
	gpio_set_value(GPIO_PDA_ACTIVE, 0);
236
#endif
237
238
	if (log_en)
239
		pr_debug("+++lpa\n")
240
</pre>
241
242
and:
243
<pre>
244
	if (log_en)
245
		pr_debug("---lpa\n");
246
#if defined(CONFIG_INTERNAL_MODEM_IF) || defined(CONFIG_SAMSUNG_PHONE_TTY)
247
	gpio_set_value(GPIO_PDA_ACTIVE, 1);
248
#endif
249
250
	cpu_pm_exit();
251
</pre>
252 84 Denis 'GNUtoo' Carikli
253 83 Denis 'GNUtoo' Carikli
Does it means that we are telling the modem about each time we go in suspend to RAM?
254 84 Denis 'GNUtoo' Carikli
255 85 Denis 'GNUtoo' Carikli
Devices affected or not affected:
256
257 84 Denis 'GNUtoo' Carikli
|_. Device |_. Config |
258
| GT-I9300 | "# CONFIG_INTERNAL_MODEM_IF is not set":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n1373
259
             "# CONFIG_SAMSUNG_PHONE_TTY is not set":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n3039 |
260 83 Denis 'GNUtoo' Carikli
261 82 Denis 'GNUtoo' Carikli
h3. gpio_phone_active 
262
263
From "ehci-s5p.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/usb/host/ehci-s5p.c#n129 we have things like that:
264
<pre>
265
#if defined(CONFIG_UMTS_MODEM_XMM6262)
266
	if (pdata->get_cp_active_state && !pdata->get_cp_active_state()) {
267
		s5p_ehci_port_control(pdev, CP_PORT, 0);
268
		pr_err("mif: force port%d off by cp reset\n", CP_PORT);
269
	}
270
#endif
271
</pre>
272 86 Denis 'GNUtoo' Carikli
273 82 Denis 'GNUtoo' Carikli
Does it allows the modem to trigger a re-enumeration of the HSIC bus?
274 86 Denis 'GNUtoo' Carikli
275
Devices affected or not affected:
276
277
|_. Device |_. Config |
278 87 Denis 'GNUtoo' Carikli
| GT-I9300 | "CONFIG_UMTS_MODEM_XMM6262=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n1350
279
             ".gpio_phone_active = GPIO_PHONE_ACTIVE":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n241 |
280 82 Denis 'GNUtoo' Carikli
281 1 Denis 'GNUtoo' Carikli
h2. Links
282
283 45 Denis 'GNUtoo' Carikli
* "modem_modemctl_device_xmm6262.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/misc/modem_if/modem_modemctl_device_xmm6262.c
284 1 Denis 'GNUtoo' Carikli
* https://forum.xda-developers.com/galaxy-s2/help/how-to-talk-to-modem-commands-t1471241/page4
285 45 Denis 'GNUtoo' Carikli
* http://www.arteris.com/blog/bid/59433/Interchip-Connectivity-HSIC-UniPro-HSI-C2C-LLI-oh-my
286 64 Denis 'GNUtoo' Carikli
** TODO: move this link somewhere where it's more useful