Project

General

Profile

XMMBoot » History » Version 205

Denis 'GNUtoo' Carikli, 03/14/2021 06:07 PM
fix typo

1 1 Denis 'GNUtoo' Carikli
h1. XMMBoot
2
3 59 Denis 'GNUtoo' Carikli
{{toc}}
4
5 1 Denis 'GNUtoo' Carikli
h2.  Introduction
6
7
For both libsamsung-ipc and the Linux driver it's interesting to understand better the boot of the modem in order to come with good names for the abstraction.
8
9 194 Denis 'GNUtoo' Carikli
h2. High level boot process 
10
11
The exact boot sequence is different on different devices:
12
* On most / all the devices we need to start by powering off the modem, and the link between the SOC and the modem. This makes sure that we can reliabily boot the modem at all times. 
13
* Then we need to configure the hardware to put the modem in loading mode and have everything ready for loading its firmware. On some device, the link needed to load the modem needs to be configured as well.
14
* Then we send the modem firmware to the modem
15
* Then on some devices we need extra step (like triggering an HSIC re-enumeration) once it's done. 
16
17 58 Denis 'GNUtoo' Carikli
h2. Abstraction
18
19
* hci_power -> link_power
20
21 63 Denis 'GNUtoo' Carikli
TODO:
22
* Find the difference between power_on and boot_power_on
23
** Look at the GPIOs and understand what they do
24
** Just read the code that use the GPIOs
25
** Diff both procedures
26 67 Denis 'GNUtoo' Carikli
* Look which device has which XMM626X
27
* Add XMM6210 devices too
28 63 Denis 'GNUtoo' Carikli
29 16 Denis 'GNUtoo' Carikli
h2. GPIOs
30
31 55 Denis 'GNUtoo' Carikli
h3. Devices GPIOs assignement and drivers
32 47 Denis 'GNUtoo' Carikli
33 79 Denis 'GNUtoo' Carikli
|_\4. Hardware |_\2. Linux |_\1. libsamsung-ipc |
34
|_. Variant |_. SOC |_. Modem  |_. Link |_. GPIO usage |_. GPIO assignement |_. device driver name |
35
| Galaxy Tab:
36 109 Denis 'GNUtoo' Carikli
  GT-P1000 | Exynos 3310 | | RAM | | | aries | 
37 77 Denis 'GNUtoo' Carikli
| Galaxy S:
38 110 Denis 'GNUtoo' Carikli
  GT-I9000 | Exynos 3110 | "XMM6160":https://www.wikidata.org/wiki/Q88838210#Q88838210$d5389045-4624-171a-18c5-ed1b15e1b3f5 | RAM | | | aries |
39 1 Denis 'GNUtoo' Carikli
| Nexus S:
40
  GT-I9020
41
  GT-I9020A
42 79 Denis 'GNUtoo' Carikli
  GT-I9023 | Exynos 3110 | | RAM | | | crespo |
43 74 Denis 'GNUtoo' Carikli
| Galaxy SII:
44 105 Denis 'GNUtoo' Carikli
  GT-I9100 | Exynos 4210 | XMM6260 | HSIC | "CONFIG_UMTS_MODEM_XMM6260=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9100_defconfig#n1321 | | galaxys2 |
45
| Galaxy Note:
46
  GT-N7000 | Exynos 4210 | XMM6260 | HSIC | "CONFIG_UMTS_MODEM_XMM6260=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_n7000_defconfig#n1330 | | galaxys2 |
47 74 Denis 'GNUtoo' Carikli
| Galaxy Nexus:
48 111 Denis 'GNUtoo' Carikli
  GT-I9250 | OMAP 4460 | XMM6260 | MIPI | "CONFIG_UMTS_MODEM_XMM6260=y":https://git.replicant.us/replicant/kernel_samsung_tuna/tree/arch/arm/configs/tuna_defconfig#n1209
49
                                          "Makefile":https://git.replicant.us/replicant/kernel_samsung_tuna/tree/drivers/misc/modem_if/Makefile#n10
50
                                          "modem_modemctl_device_xmm6260.c":https://git.replicant.us/replicant/kernel_samsung_tuna/tree/drivers/misc/modem_if/modem_modemctl_device_xmm6260.c | | maguro |
51 74 Denis 'GNUtoo' Carikli
| Galaxy SIII:
52 49 Denis 'GNUtoo' Carikli
  GT-I9300 | Exynos 4412 | XMM6262 | HSIC | "CONFIG_UMTS_MODEM_XMM6262=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n1350
53 1 Denis 'GNUtoo' Carikli
"Makefile":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/misc/modem_if/Makefile#n10
54
"modem_modemctl_device_xmm6262.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/misc/modem_if/modem_modemctl_device_xmm6262.c | "CONFIG_SEC_MODEM_M0=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n541
55
"Makefile":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/Makefile#n320
56 50 Denis 'GNUtoo' Carikli
"board-m0-modems.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c 
57 1 Denis 'GNUtoo' Carikli
"CONFIG_MACH_M0=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n455
58
"gpio-midas.h":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/include/mach/gpio-midas.h#n28
59 79 Denis 'GNUtoo' Carikli
"gpio-rev00-m0.h":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/include/mach/gpio-rev00-m0.h | i9300 |
60 74 Denis 'GNUtoo' Carikli
| Galaxy Note 8.0 GSM:
61 104 Denis 'GNUtoo' Carikli
  GT-N5100 | Exynos 4412 | XMM6262 | HSIC | "CONFIG_UMTS_MODEM_XMM6262=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_n5100_defconfig#n1335 | | n5100 |
62 74 Denis 'GNUtoo' Carikli
| Galaxy Note II:
63 79 Denis 'GNUtoo' Carikli
  GT-N7100 | Exynos 4412 | XMM6262 | HSIC | "CONFIG_UMTS_MODEM_XMM6262=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_n7100_defconfig#n1356 | | n7100 |
64 74 Denis 'GNUtoo' Carikli
| Galaxy Tab 2:
65
  GT-P3100 
66 103 Denis 'GNUtoo' Carikli
  GT-P5100 | OMAP 4430 | XMM6262 | MIPI | "CONFIG_UMTS_MODEM_XMM6262=y":https://git.replicant.us/replicant/kernel_samsung_espresso10/tree/arch/arm/configs/espresso_defconfig#n224 | | piranah |
67 55 Denis 'GNUtoo' Carikli
68
h3. GPIOs usage
69
70 65 Denis 'GNUtoo' Carikli
TODO: make sure to mention what applies to what device
71
* Start with I9300. Assume I9300 if device is not mentioned. Mention device when not I9300
72
* Add more devices and mention them
73
74 91 Denis 'GNUtoo' Carikli
Note that we don't limit ourselves to the drivers that are in use on the devices supported by Replicant.
75
As Samsung wrote drivers for the modem interfaces, and that the interface is similar across many different modems, other unused drivers and their comments also gives many hints about what the GPIOs are supposed to be used for.
76
77 204 Denis 'GNUtoo' Carikli
|_. gpio platform data name |_. present |_. absent |_. direction |_. comments |
78 196 Denis 'GNUtoo' Carikli
| "gpio_cp_on":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n237 | | | powers on the modem? in which state (PMIC?, CPU?)
79 89 Denis 'GNUtoo' Carikli
                     * On GT-I9100 it's connected to the ON1 modem pin and ON2 is not connected. |
80 205 Denis 'GNUtoo' Carikli
| "gpio_cp_reset":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n239| | read + write | Resets the modem CPU? PMIC?:
81 89 Denis 'GNUtoo' Carikli
                        * "''check the reset timming with C2C connection''":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/misc/modem_if/modem_modemctl_device_xmm6262.c#n106 : Here C2C probably means chip to chip
82
                        Can also read the modem CPU? and/or PMIC? reset state?
83
                        * "Reads from the GPIO and ''CP not ready, Active State low'' comment":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n287 |
84 196 Denis 'GNUtoo' Carikli
| "gpio_reset_req_n":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n238 | | | It seems to reset the modem. On some device with an MSM SOC (modem? AP?) in the smdk4412 kernel, it resets the modem PMIC. It can also be used to keep the modem (SOC? PMIC? CPU?) in reset mode while powered on. |
85
| "gpio_pda_active":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n240| | | Tell the modem if the SOC CPUs are sleeping/active or not?
86 89 Denis 'GNUtoo' Carikli
                          * "PDA == Application processor":https://android.stackexchange.com/questions/176515/what-do-the-terms-bl-ap-cp-and-csc-mean-in-odin
87
                          * "''PDA_ACTIVE, let cp know AP sleep'' comment in status gc1-gpio.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/gc1-gpio.c#n213
88
                          * "PDA_ACTIVE set to 0 right after cpu_pm_enter()":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/cpuidle-exynos4.c#n701
89
                          * "PDA_ACTIVE set to 1 right before cpu_pm_exit()":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/cpuidle-exynos4.c#n796
90 94 Denis 'GNUtoo' Carikli
                          * GPIO direction is output on AP side and input on BP side, which is also confirmed by the "pinout table in XDA":https://forum.xda-developers.com/galaxy-s2/help/how-to-talk-to-modem-commands-t1471241/page4
91
                          Also indicates when the CPU is ready to process modem stuff:
92
                          * "set to 1 *at the end* of xmm6262_on in modem_modemctl_device_xmm6262.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/misc/modem_if/modem_modemctl_device_xmm6262.c#n68
93 95 Denis 'GNUtoo' Carikli
                          * The CPU can't process stuff if the HSIC link is in low power mode, "as shown in set_hsic_lpa_states in board-m0-modems.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n310 so it sets gpio_pda_active to 0 in these cases. |
94 196 Denis 'GNUtoo' Carikli
| "gpio_phone_active":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n241 | | | Seem the modem counterpart of gpio_pda_active:
95 90 Denis 'GNUtoo' Carikli
                            * See "umts_link_reconnect in board-m0-modems.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n341
96 93 Denis 'GNUtoo' Carikli
                            * See also "mc_work in the unused modemctl.c driver":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/svnet/modemctl.c#n484 where that GPIO is used both to signal when the modem finished booting everything and is ready, and when the modem crashes or is reset 
97
                            * "phone_active_irq_handler in modem_modemctl_device_xmm6262.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/misc/modem_if/modem_modemctl_device_xmm6262.c#n139 seem to be doing exactly the same thing. |
98 197 Denis 'GNUtoo' Carikli
| "gpio_cp_dump_int":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n246 | | | Maybe used for crash dump. Reference: [[AcademicPapersAndPresentations#A-walk-with-Shannon-Walkthrough-of-a-pwn2own-baseband-exploit|Presentation about exploiting XMM modems]]: The nonfree s-boot 4.0 bootloader can probably get the modem crashdump. (cp is the modem) |
99 196 Denis 'GNUtoo' Carikli
| "gpio_flm_uart_sel":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | Only used for the Galaxy Nexus in libsamsung-ipc | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n242 | | Modem download mode ? 
100 112 Denis 'GNUtoo' Carikli
                                                                                                                                                                                         * FLM could be Firmware Load mode ?
101 1 Denis 'GNUtoo' Carikli
                                                                                                                                                                                         * On several devices, that GPIO seem to be used to switch between different UART, and the PMIC seem involved too in some devices. Not sure how it switches |
102 196 Denis 'GNUtoo' Carikli
| "gpio_cp_warm_reset":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n248 | | |
103 199 Denis 'GNUtoo' Carikli
| gpio_revers_bias_clear | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n268 | | | |
104
| gpio_revers_bias_restore | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n268 | | | |
105 198 Denis 'GNUtoo' Carikli
| "gpio_sim_detect":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | TODO: "check GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n255 | | | Detect SIM card presence ? |
106 201 Denis 'GNUtoo' Carikli
| "gpio_link_enable":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n112 | | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n221 | | "power management (modemlink_pm_data)":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n218 |
107
| "gpio_link_active":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n112 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n222 ("define":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/include/mach/gpio-rev00-m0.h#n257) | | | set to 0 when the (HSIC) link is in low power and to 1 when it's back, "like in set_hsic_lpa_states in board-m0-modems.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n304 , "power management (modemlink_pm_data)":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n218 |
108
| "gpio_link_hostwake":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n112 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n223 ("define":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/include/mach/gpio-rev00-m0.h#n264) | | | "power management (modemlink_pm_data)":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n218 |
109 202 Denis 'GNUtoo' Carikli
| "gpio_link_slavewake":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n112 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n224 ("define":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/include/mach/gpio-rev00-m0.h#n263)| | | "power management (modemlink_pm_data)":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n218 |
110 197 Denis 'GNUtoo' Carikli
| gpio_ap_dump_int | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n244 ("define":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/include/mach/gpio-rev00-m0.h#n268)| | | Maybe used for crash dump. Reference: [[AcademicPapersAndPresentations#A-walk-with-Shannon-Walkthrough-of-a-pwn2own-baseband-exploit|Presentation about exploiting XMM modems]]: The nonfree s-boot 4.0 bootloader can probably get the modem crashdump. Here it would indicate that the host somehow can send crashdumps to the modem somehow? |
111 196 Denis 'GNUtoo' Carikli
| gpio_sim_io_sel | | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n250 ("define":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n539) | |/3. Seem to be used for some dual modem feature which is not present in any Replicant kernels (aries, crespo, espresso10, smdk4412, tuna) for Replicant 6 (or 4.2 for aries and crespo) |
112
| gpio_cp_ctrl1 | | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n251 ("define":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n539) | |
113
| gpio_cp_ctrl2 | | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n252 ("define":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n539) | |
114 47 Denis 'GNUtoo' Carikli
115 53 Denis 'GNUtoo' Carikli
h3. Libsamsung-ipc
116 52 Denis 'GNUtoo' Carikli
117 165 Denis 'GNUtoo' Carikli
|/2. ioctl / function |\8. Devices |
118 166 Denis 'GNUtoo' Carikli
| GT-I9250 | GT-I9100 / GT-N7000 | GT-I9300 | GT-N5100 | GT-N7100 | GT-P3100 / GT-P5100 | Galaxy S (GT-I9000) / Galaxy Tab  | Nexus S (GT-I902x) |
119
| libsamsung-ipc driver | maguro | galaxys2 | i9300 | n5100 | n7100 | piranah | aries | crespo |
120 52 Denis 'GNUtoo' Carikli
| open, close, read, write 
121 1 Denis 'GNUtoo' Carikli
fmt/rfs
122
gprs
123 54 Denis 'GNUtoo' Carikli
power |\6. Yes |
124 52 Denis 'GNUtoo' Carikli
| boot_power
125 168 Denis 'GNUtoo' Carikli
status_online_wait | Yes |\5. No |/3\2. No |
126 1 Denis 'GNUtoo' Carikli
| hci_power
127 52 Denis 'GNUtoo' Carikli
link_control_active
128 167 Denis 'GNUtoo' Carikli
link_connected_wait
129 160 Denis 'GNUtoo' Carikli
link_get_hostwake_wait |/2. No |\4. Yes |/2. No |
130 163 Denis 'GNUtoo' Carikli
| link_control_enable | Yes (ignored by Linux[4][5][6]) |\3. Yes (ignored by Linux[1][2][3]) |
131 169 Denis 'GNUtoo' Carikli
| psi_send | xmm626_mipi_psi_send |\4. xmm626_hsic_psi_send | xmm626_mipi_psi_send |\2. xmm616_psi_send | 
132 170 Denis 'GNUtoo' Carikli
| firmware_send | xmm626_mipi_firmware_send |\4. xmm626_hsic_firmware_send | xmm626_mipi_firmware_send |\2. xmm616_firmware_send | 
133
| nv_data_send | xmm626_mipi_nv_data_send |\4. xmm626_hsic_nv_data_send | xmm626_mipi_nv_data_send |\2. xmm616_nv_data_send | 
134 52 Denis 'GNUtoo' Carikli
135 161 Denis 'GNUtoo' Carikli
fn1. https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n221
136
137
fn2. https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n218
138
139 1 Denis 'GNUtoo' Carikli
fn3. https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n136
140 162 Denis 'GNUtoo' Carikli
141
fn4. https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-u1-modems.c#n153
142
143
fn5. https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-u1-modems.c#n151
144
145
fn6. https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-u1-modems.c#n139
146 66 Denis 'GNUtoo' Carikli
147 56 Denis 'GNUtoo' Carikli
h3. libsamsung-ipc <-> kernel functions <-> gpios
148 10 Denis 'GNUtoo' Carikli
149 56 Denis 'GNUtoo' Carikli
|_. libsamsung-ipc |_\3. Kernel |
150 157 Denis 'GNUtoo' Carikli
|_. Function using the ioctl |_. ioctl name |_. pointer signature |_. GPIO used | comment |
151 57 Denis 'GNUtoo' Carikli
| xmm626_kernel_smdk4412_power | IOCTL_MODEM_ON
152 156 Denis 'GNUtoo' Carikli
                                 IOCTL_MODEM_OFF | <pre>int (*modem_on)(struct modem_ctl*);</pre>
153
                                                   <pre>int (*modem_off)(struct modem_ctl*);</pre> | gpio_cp_on
154 153 Denis 'GNUtoo' Carikli
                                                                                      gpio_cp_reset
155
                                                                                      gpio_reset_req_n
156
                                                                                      gpio_pda_active |
157 56 Denis 'GNUtoo' Carikli
| | | | gpio_phone_active |
158 1 Denis 'GNUtoo' Carikli
| | | | gpio_cp_dump_int |
159 56 Denis 'GNUtoo' Carikli
| xmm626_kernel_smdk4412_boot_power | IOCTL_MODEM_BOOT_ON
160 156 Denis 'GNUtoo' Carikli
                                      IOCTL_MODEM_BOOT_OFF | <pre>int (*modem_boot_on)(struct modem_ctl*);</pre>
161
                                                             <pre>int (*modem_boot_off)(struct modem_ctl*);</pre> | gpio_flm_uart_sel |
162 56 Denis 'GNUtoo' Carikli
| | | | gpio_cp_warm_reset |
163
| | | | gpio_revers_bias_clear |
164
| | | | gpio_revers_bias_restore |
165 1 Denis 'GNUtoo' Carikli
| | | | gpio_sim_detect |
166 157 Denis 'GNUtoo' Carikli
| xmm626_kernel_smdk4412_status_online_wait | IOCTL_MODEM_STATUS | int phone_state; | gpio_cp_on
167
                                                                                      gpio_cp_reset
168
                                                                                      gpio_pda_active
169
                                                                                      gpio_reset_req_n
170 158 Denis 'GNUtoo' Carikli
                                                                                      gpio_phone_active | int phone_state get assigned the status computed from the various GPIO states
171
                                                                                                          xmm626_kernel_smdk4412_status_online_wait only waits for the online status    |
172 159 Denis 'GNUtoo' Carikli
| xmm626_kernel_smdk4412_link_control_enable | IOCTL_LINK_CONTROL_ENABLE | <pre>int (*link_ldo_enable)(bool);</pre> | gpio_link_enable | on i9300:
173
                                                                                                                                        * link_ldo_enable only returns 0 and has a comment ("Exynos HSIC V1.2 LDO was controlled by kernel")
174
                                                                                                                                        * gpio_link_enable is set to 0 (so it's ignored) |
175 44 Denis 'GNUtoo' Carikli
176
h3. Glossary
177
178 72 Denis 'GNUtoo' Carikli
Terms for the modem CPU:
179 61 Denis 'GNUtoo' Carikli
* BP: Baseband processor
180
* CP: Cellular? processor
181 60 Denis 'GNUtoo' Carikli
182 72 Denis 'GNUtoo' Carikli
Term for the CPU of the system on a chip running Replicant:
183 60 Denis 'GNUtoo' Carikli
* AP: Application processor
184 1 Denis 'GNUtoo' Carikli
185 62 Denis 'GNUtoo' Carikli
TODO: move in its own page and point to it
186
187 101 Denis 'GNUtoo' Carikli
LPA: Low power mode active (Related to ULPI specs only?)
188
189
ULPI: Probably a USB PHY spec
190
191 16 Denis 'GNUtoo' Carikli
h3. SIM card presence detection
192 7 Denis 'GNUtoo' Carikli
193
Do we really want to check the SIM card presence?
194
195
Would it be possible not to for privacy reasons?
196
197
Example:
198
* Boot a modem with a SIM
199
* Take away the SIM card
200 1 Denis 'GNUtoo' Carikli
* Go to a protest with only the SIM card and a phone with no data on it to be able to call if necessary.
201 7 Denis 'GNUtoo' Carikli
202 16 Denis 'GNUtoo' Carikli
h3. TODO
203 1 Denis 'GNUtoo' Carikli
204
* check gpio_flm_uart_sel in smdk4412 kernel too
205 16 Denis 'GNUtoo' Carikli
206 82 Denis 'GNUtoo' Carikli
h2. Potential privacy and security issues
207
208 83 Denis 'GNUtoo' Carikli
h3. gpio_pda_active
209
210
From "cpuidle-exynos4.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/cpuidle-exynos4.c#n701 we have things like that:
211
<pre>
212
	cpu_pm_enter();
213
214
#if defined(CONFIG_INTERNAL_MODEM_IF) || defined(CONFIG_SAMSUNG_PHONE_TTY)
215
	gpio_set_value(GPIO_PDA_ACTIVE, 0);
216
#endif
217
218
	if (log_en)
219
		pr_debug("+++lpa\n")
220
</pre>
221
222
and:
223
<pre>
224
	if (log_en)
225
		pr_debug("---lpa\n");
226
#if defined(CONFIG_INTERNAL_MODEM_IF) || defined(CONFIG_SAMSUNG_PHONE_TTY)
227
	gpio_set_value(GPIO_PDA_ACTIVE, 1);
228
#endif
229
230
	cpu_pm_exit();
231
</pre>
232 84 Denis 'GNUtoo' Carikli
233 83 Denis 'GNUtoo' Carikli
Does it means that we are telling the modem about each time we go in suspend to RAM?
234 84 Denis 'GNUtoo' Carikli
235 85 Denis 'GNUtoo' Carikli
Devices affected or not affected:
236
237 84 Denis 'GNUtoo' Carikli
|_. Device |_. Config |
238
| GT-I9300 | "# CONFIG_INTERNAL_MODEM_IF is not set":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n1373
239
             "# CONFIG_SAMSUNG_PHONE_TTY is not set":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n3039 |
240 83 Denis 'GNUtoo' Carikli
241 82 Denis 'GNUtoo' Carikli
h3. gpio_phone_active 
242
243
From "ehci-s5p.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/usb/host/ehci-s5p.c#n129 we have things like that:
244
<pre>
245
#if defined(CONFIG_UMTS_MODEM_XMM6262)
246
	if (pdata->get_cp_active_state && !pdata->get_cp_active_state()) {
247
		s5p_ehci_port_control(pdev, CP_PORT, 0);
248
		pr_err("mif: force port%d off by cp reset\n", CP_PORT);
249
	}
250
#endif
251
</pre>
252 86 Denis 'GNUtoo' Carikli
253 82 Denis 'GNUtoo' Carikli
Does it allows the modem to trigger a re-enumeration of the HSIC bus?
254 86 Denis 'GNUtoo' Carikli
255
Devices affected or not affected:
256
257
|_. Device |_. Config |
258 87 Denis 'GNUtoo' Carikli
| GT-I9300 | "CONFIG_UMTS_MODEM_XMM6262=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n1350
259
             ".gpio_phone_active = GPIO_PHONE_ACTIVE":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n241 |
260 82 Denis 'GNUtoo' Carikli
261 1 Denis 'GNUtoo' Carikli
h2. Links
262
263 45 Denis 'GNUtoo' Carikli
* "modem_modemctl_device_xmm6262.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/misc/modem_if/modem_modemctl_device_xmm6262.c
264 1 Denis 'GNUtoo' Carikli
* https://forum.xda-developers.com/galaxy-s2/help/how-to-talk-to-modem-commands-t1471241/page4
265 45 Denis 'GNUtoo' Carikli
* http://www.arteris.com/blog/bid/59433/Interchip-Connectivity-HSIC-UniPro-HSI-C2C-LLI-oh-my
266 64 Denis 'GNUtoo' Carikli
** TODO: move this link somewhere where it's more useful