Project

General

Profile

XMMBoot » History » Version 208

Denis 'GNUtoo' Carikli, 03/14/2021 08:28 PM
fix line

1 1 Denis 'GNUtoo' Carikli
h1. XMMBoot
2
3 59 Denis 'GNUtoo' Carikli
{{toc}}
4
5 1 Denis 'GNUtoo' Carikli
h2.  Introduction
6
7
For both libsamsung-ipc and the Linux driver it's interesting to understand better the boot of the modem in order to come with good names for the abstraction.
8
9 194 Denis 'GNUtoo' Carikli
h2. High level boot process 
10
11
The exact boot sequence is different on different devices:
12
* On most / all the devices we need to start by powering off the modem, and the link between the SOC and the modem. This makes sure that we can reliabily boot the modem at all times. 
13
* Then we need to configure the hardware to put the modem in loading mode and have everything ready for loading its firmware. On some device, the link needed to load the modem needs to be configured as well.
14
* Then we send the modem firmware to the modem
15
* Then on some devices we need extra step (like triggering an HSIC re-enumeration) once it's done. 
16
17 58 Denis 'GNUtoo' Carikli
h2. Abstraction
18
19
* hci_power -> link_power
20
21 63 Denis 'GNUtoo' Carikli
TODO:
22
* Find the difference between power_on and boot_power_on
23
** Look at the GPIOs and understand what they do
24
** Just read the code that use the GPIOs
25
** Diff both procedures
26 67 Denis 'GNUtoo' Carikli
* Look which device has which XMM626X
27
* Add XMM6210 devices too
28 63 Denis 'GNUtoo' Carikli
29 16 Denis 'GNUtoo' Carikli
h2. GPIOs
30
31 55 Denis 'GNUtoo' Carikli
h3. Devices GPIOs assignement and drivers
32 47 Denis 'GNUtoo' Carikli
33 79 Denis 'GNUtoo' Carikli
|_\4. Hardware |_\2. Linux |_\1. libsamsung-ipc |
34
|_. Variant |_. SOC |_. Modem  |_. Link |_. GPIO usage |_. GPIO assignement |_. device driver name |
35
| Galaxy Tab:
36 109 Denis 'GNUtoo' Carikli
  GT-P1000 | Exynos 3310 | | RAM | | | aries | 
37 77 Denis 'GNUtoo' Carikli
| Galaxy S:
38 110 Denis 'GNUtoo' Carikli
  GT-I9000 | Exynos 3110 | "XMM6160":https://www.wikidata.org/wiki/Q88838210#Q88838210$d5389045-4624-171a-18c5-ed1b15e1b3f5 | RAM | | | aries |
39 1 Denis 'GNUtoo' Carikli
| Nexus S:
40
  GT-I9020
41
  GT-I9020A
42 79 Denis 'GNUtoo' Carikli
  GT-I9023 | Exynos 3110 | | RAM | | | crespo |
43 74 Denis 'GNUtoo' Carikli
| Galaxy SII:
44 105 Denis 'GNUtoo' Carikli
  GT-I9100 | Exynos 4210 | XMM6260 | HSIC | "CONFIG_UMTS_MODEM_XMM6260=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9100_defconfig#n1321 | | galaxys2 |
45
| Galaxy Note:
46
  GT-N7000 | Exynos 4210 | XMM6260 | HSIC | "CONFIG_UMTS_MODEM_XMM6260=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_n7000_defconfig#n1330 | | galaxys2 |
47 74 Denis 'GNUtoo' Carikli
| Galaxy Nexus:
48 111 Denis 'GNUtoo' Carikli
  GT-I9250 | OMAP 4460 | XMM6260 | MIPI | "CONFIG_UMTS_MODEM_XMM6260=y":https://git.replicant.us/replicant/kernel_samsung_tuna/tree/arch/arm/configs/tuna_defconfig#n1209
49
                                          "Makefile":https://git.replicant.us/replicant/kernel_samsung_tuna/tree/drivers/misc/modem_if/Makefile#n10
50
                                          "modem_modemctl_device_xmm6260.c":https://git.replicant.us/replicant/kernel_samsung_tuna/tree/drivers/misc/modem_if/modem_modemctl_device_xmm6260.c | | maguro |
51 74 Denis 'GNUtoo' Carikli
| Galaxy SIII:
52 49 Denis 'GNUtoo' Carikli
  GT-I9300 | Exynos 4412 | XMM6262 | HSIC | "CONFIG_UMTS_MODEM_XMM6262=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n1350
53 1 Denis 'GNUtoo' Carikli
"Makefile":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/misc/modem_if/Makefile#n10
54
"modem_modemctl_device_xmm6262.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/misc/modem_if/modem_modemctl_device_xmm6262.c | "CONFIG_SEC_MODEM_M0=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n541
55
"Makefile":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/Makefile#n320
56 50 Denis 'GNUtoo' Carikli
"board-m0-modems.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c 
57 1 Denis 'GNUtoo' Carikli
"CONFIG_MACH_M0=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n455
58
"gpio-midas.h":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/include/mach/gpio-midas.h#n28
59 79 Denis 'GNUtoo' Carikli
"gpio-rev00-m0.h":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/include/mach/gpio-rev00-m0.h | i9300 |
60 74 Denis 'GNUtoo' Carikli
| Galaxy Note 8.0 GSM:
61 104 Denis 'GNUtoo' Carikli
  GT-N5100 | Exynos 4412 | XMM6262 | HSIC | "CONFIG_UMTS_MODEM_XMM6262=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_n5100_defconfig#n1335 | | n5100 |
62 74 Denis 'GNUtoo' Carikli
| Galaxy Note II:
63 79 Denis 'GNUtoo' Carikli
  GT-N7100 | Exynos 4412 | XMM6262 | HSIC | "CONFIG_UMTS_MODEM_XMM6262=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_n7100_defconfig#n1356 | | n7100 |
64 74 Denis 'GNUtoo' Carikli
| Galaxy Tab 2:
65
  GT-P3100 
66 103 Denis 'GNUtoo' Carikli
  GT-P5100 | OMAP 4430 | XMM6262 | MIPI | "CONFIG_UMTS_MODEM_XMM6262=y":https://git.replicant.us/replicant/kernel_samsung_espresso10/tree/arch/arm/configs/espresso_defconfig#n224 | | piranah |
67 55 Denis 'GNUtoo' Carikli
68
h3. GPIOs usage
69
70 65 Denis 'GNUtoo' Carikli
TODO: make sure to mention what applies to what device
71
* Start with I9300. Assume I9300 if device is not mentioned. Mention device when not I9300
72
* Add more devices and mention them
73
74 91 Denis 'GNUtoo' Carikli
Note that we don't limit ourselves to the drivers that are in use on the devices supported by Replicant.
75
As Samsung wrote drivers for the modem interfaces, and that the interface is similar across many different modems, other unused drivers and their comments also gives many hints about what the GPIOs are supposed to be used for.
76
77 204 Denis 'GNUtoo' Carikli
|_. gpio platform data name |_. present |_. absent |_. direction |_. comments |
78 196 Denis 'GNUtoo' Carikli
| "gpio_cp_on":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n237 | | | powers on the modem? in which state (PMIC?, CPU?)
79 89 Denis 'GNUtoo' Carikli
                     * On GT-I9100 it's connected to the ON1 modem pin and ON2 is not connected. |
80 205 Denis 'GNUtoo' Carikli
| "gpio_cp_reset":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n239| | read + write | Resets the modem CPU? PMIC?:
81 89 Denis 'GNUtoo' Carikli
                        * "''check the reset timming with C2C connection''":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/misc/modem_if/modem_modemctl_device_xmm6262.c#n106 : Here C2C probably means chip to chip
82
                        Can also read the modem CPU? and/or PMIC? reset state?
83
                        * "Reads from the GPIO and ''CP not ready, Active State low'' comment":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n287 |
84 208 Denis 'GNUtoo' Carikli
| "gpio_reset_req_n":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n238 ("define":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/include/mach/gpio-rev00-m0.h#n261) | | | It seems to reset the modem. On some device with an MSM SOC (modem? AP?) in the smdk4412 kernel, it resets the modem PMIC. It can also be used to keep the modem (SOC? PMIC? CPU?) in reset mode while powered on.
85 206 Denis 'GNUtoo' Carikli
It could very well be the PMIC with the GT-I9300 as we have the following sequence in "xmm6262_on":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/misc/modem_if/modem_modemctl_device_xmm6262.c#n31 :
86
<pre>
87
	gpio_set_value(mc->gpio_reset_req_n, 0);
88
	gpio_set_value(mc->gpio_cp_on, 0);
89
	gpio_set_value(mc->gpio_cp_reset, 0);
90
	msleep(100);
91
	gpio_set_value(mc->gpio_cp_reset, 1);
92
	/* If XMM6262 was connected with C2C, AP wait 50ms to BB Reset*/
93
	msleep(50);
94
	gpio_set_value(mc->gpio_reset_req_n, 1);
95
96
	gpio_set_value(mc->gpio_cp_on, 1);
97
	udelay(60);
98
	gpio_set_value(mc->gpio_cp_on, 0);
99
	msleep(20);
100
</pre> 
101
SOCs probably need to have a very specific voltage ramp up sequences to boot (voltage ramps and so on are described in the SOC datasheets, TODO: check with a specific example).
102
If that's true it would mean that the CPU has to not be off at boot but still be in some reset mode to accept a firmware?
103
In that case, once everything is off, the CPU power would be turned on first, then the PMIC, then the reset line for the firmware loading (way later) |
104 196 Denis 'GNUtoo' Carikli
| "gpio_pda_active":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n240| | | Tell the modem if the SOC CPUs are sleeping/active or not?
105 89 Denis 'GNUtoo' Carikli
                          * "PDA == Application processor":https://android.stackexchange.com/questions/176515/what-do-the-terms-bl-ap-cp-and-csc-mean-in-odin
106
                          * "''PDA_ACTIVE, let cp know AP sleep'' comment in status gc1-gpio.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/gc1-gpio.c#n213
107
                          * "PDA_ACTIVE set to 0 right after cpu_pm_enter()":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/cpuidle-exynos4.c#n701
108
                          * "PDA_ACTIVE set to 1 right before cpu_pm_exit()":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/cpuidle-exynos4.c#n796
109 94 Denis 'GNUtoo' Carikli
                          * GPIO direction is output on AP side and input on BP side, which is also confirmed by the "pinout table in XDA":https://forum.xda-developers.com/galaxy-s2/help/how-to-talk-to-modem-commands-t1471241/page4
110
                          Also indicates when the CPU is ready to process modem stuff:
111
                          * "set to 1 *at the end* of xmm6262_on in modem_modemctl_device_xmm6262.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/misc/modem_if/modem_modemctl_device_xmm6262.c#n68
112 95 Denis 'GNUtoo' Carikli
                          * The CPU can't process stuff if the HSIC link is in low power mode, "as shown in set_hsic_lpa_states in board-m0-modems.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n310 so it sets gpio_pda_active to 0 in these cases. |
113 196 Denis 'GNUtoo' Carikli
| "gpio_phone_active":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n241 | | | Seem the modem counterpart of gpio_pda_active:
114 90 Denis 'GNUtoo' Carikli
                            * See "umts_link_reconnect in board-m0-modems.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n341
115 93 Denis 'GNUtoo' Carikli
                            * See also "mc_work in the unused modemctl.c driver":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/svnet/modemctl.c#n484 where that GPIO is used both to signal when the modem finished booting everything and is ready, and when the modem crashes or is reset 
116
                            * "phone_active_irq_handler in modem_modemctl_device_xmm6262.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/misc/modem_if/modem_modemctl_device_xmm6262.c#n139 seem to be doing exactly the same thing. |
117 197 Denis 'GNUtoo' Carikli
| "gpio_cp_dump_int":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n246 | | | Maybe used for crash dump. Reference: [[AcademicPapersAndPresentations#A-walk-with-Shannon-Walkthrough-of-a-pwn2own-baseband-exploit|Presentation about exploiting XMM modems]]: The nonfree s-boot 4.0 bootloader can probably get the modem crashdump. (cp is the modem) |
118 196 Denis 'GNUtoo' Carikli
| "gpio_flm_uart_sel":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | Only used for the Galaxy Nexus in libsamsung-ipc | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n242 | | Modem download mode ? 
119 112 Denis 'GNUtoo' Carikli
                                                                                                                                                                                         * FLM could be Firmware Load mode ?
120 1 Denis 'GNUtoo' Carikli
                                                                                                                                                                                         * On several devices, that GPIO seem to be used to switch between different UART, and the PMIC seem involved too in some devices. Not sure how it switches |
121 196 Denis 'GNUtoo' Carikli
| "gpio_cp_warm_reset":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n248 | | |
122 199 Denis 'GNUtoo' Carikli
| gpio_revers_bias_clear | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n268 | | | |
123
| gpio_revers_bias_restore | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n268 | | | |
124 198 Denis 'GNUtoo' Carikli
| "gpio_sim_detect":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n251 | TODO: "check GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n255 | | | Detect SIM card presence ? |
125 201 Denis 'GNUtoo' Carikli
| "gpio_link_enable":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n112 | | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n221 | | "power management (modemlink_pm_data)":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n218 |
126
| "gpio_link_active":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n112 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n222 ("define":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/include/mach/gpio-rev00-m0.h#n257) | | | set to 0 when the (HSIC) link is in low power and to 1 when it's back, "like in set_hsic_lpa_states in board-m0-modems.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n304 , "power management (modemlink_pm_data)":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n218 |
127
| "gpio_link_hostwake":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n112 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n223 ("define":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/include/mach/gpio-rev00-m0.h#n264) | | | "power management (modemlink_pm_data)":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n218 |
128 202 Denis 'GNUtoo' Carikli
| "gpio_link_slavewake":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/include/linux/platform_data/modem.h#n112 | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n224 ("define":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/include/mach/gpio-rev00-m0.h#n263)| | | "power management (modemlink_pm_data)":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n218 |
129 197 Denis 'GNUtoo' Carikli
| gpio_ap_dump_int | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n244 ("define":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/include/mach/gpio-rev00-m0.h#n268)| | | Maybe used for crash dump. Reference: [[AcademicPapersAndPresentations#A-walk-with-Shannon-Walkthrough-of-a-pwn2own-baseband-exploit|Presentation about exploiting XMM modems]]: The nonfree s-boot 4.0 bootloader can probably get the modem crashdump. Here it would indicate that the host somehow can send crashdumps to the modem somehow? |
130 196 Denis 'GNUtoo' Carikli
| gpio_sim_io_sel | | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n250 ("define":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n539) | |/3. Seem to be used for some dual modem feature which is not present in any Replicant kernels (aries, crespo, espresso10, smdk4412, tuna) for Replicant 6 (or 4.2 for aries and crespo) |
131
| gpio_cp_ctrl1 | | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n251 ("define":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n539) | |
132
| gpio_cp_ctrl2 | | "GT-I9300":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n252 ("define":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n539) | |
133 47 Denis 'GNUtoo' Carikli
134 53 Denis 'GNUtoo' Carikli
h3. Libsamsung-ipc
135 52 Denis 'GNUtoo' Carikli
136 165 Denis 'GNUtoo' Carikli
|/2. ioctl / function |\8. Devices |
137 166 Denis 'GNUtoo' Carikli
| GT-I9250 | GT-I9100 / GT-N7000 | GT-I9300 | GT-N5100 | GT-N7100 | GT-P3100 / GT-P5100 | Galaxy S (GT-I9000) / Galaxy Tab  | Nexus S (GT-I902x) |
138
| libsamsung-ipc driver | maguro | galaxys2 | i9300 | n5100 | n7100 | piranah | aries | crespo |
139 52 Denis 'GNUtoo' Carikli
| open, close, read, write 
140 1 Denis 'GNUtoo' Carikli
fmt/rfs
141
gprs
142 54 Denis 'GNUtoo' Carikli
power |\6. Yes |
143 52 Denis 'GNUtoo' Carikli
| boot_power
144 168 Denis 'GNUtoo' Carikli
status_online_wait | Yes |\5. No |/3\2. No |
145 1 Denis 'GNUtoo' Carikli
| hci_power
146 52 Denis 'GNUtoo' Carikli
link_control_active
147 167 Denis 'GNUtoo' Carikli
link_connected_wait
148 160 Denis 'GNUtoo' Carikli
link_get_hostwake_wait |/2. No |\4. Yes |/2. No |
149 163 Denis 'GNUtoo' Carikli
| link_control_enable | Yes (ignored by Linux[4][5][6]) |\3. Yes (ignored by Linux[1][2][3]) |
150 169 Denis 'GNUtoo' Carikli
| psi_send | xmm626_mipi_psi_send |\4. xmm626_hsic_psi_send | xmm626_mipi_psi_send |\2. xmm616_psi_send | 
151 170 Denis 'GNUtoo' Carikli
| firmware_send | xmm626_mipi_firmware_send |\4. xmm626_hsic_firmware_send | xmm626_mipi_firmware_send |\2. xmm616_firmware_send | 
152
| nv_data_send | xmm626_mipi_nv_data_send |\4. xmm626_hsic_nv_data_send | xmm626_mipi_nv_data_send |\2. xmm616_nv_data_send | 
153 52 Denis 'GNUtoo' Carikli
154 161 Denis 'GNUtoo' Carikli
fn1. https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n221
155
156
fn2. https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n218
157
158 1 Denis 'GNUtoo' Carikli
fn3. https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n136
159 162 Denis 'GNUtoo' Carikli
160
fn4. https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-u1-modems.c#n153
161
162
fn5. https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-u1-modems.c#n151
163
164
fn6. https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-u1-modems.c#n139
165 66 Denis 'GNUtoo' Carikli
166 56 Denis 'GNUtoo' Carikli
h3. libsamsung-ipc <-> kernel functions <-> gpios
167 10 Denis 'GNUtoo' Carikli
168 56 Denis 'GNUtoo' Carikli
|_. libsamsung-ipc |_\3. Kernel |
169 157 Denis 'GNUtoo' Carikli
|_. Function using the ioctl |_. ioctl name |_. pointer signature |_. GPIO used | comment |
170 57 Denis 'GNUtoo' Carikli
| xmm626_kernel_smdk4412_power | IOCTL_MODEM_ON
171 156 Denis 'GNUtoo' Carikli
                                 IOCTL_MODEM_OFF | <pre>int (*modem_on)(struct modem_ctl*);</pre>
172
                                                   <pre>int (*modem_off)(struct modem_ctl*);</pre> | gpio_cp_on
173 153 Denis 'GNUtoo' Carikli
                                                                                      gpio_cp_reset
174
                                                                                      gpio_reset_req_n
175
                                                                                      gpio_pda_active |
176 56 Denis 'GNUtoo' Carikli
| | | | gpio_phone_active |
177 1 Denis 'GNUtoo' Carikli
| | | | gpio_cp_dump_int |
178 56 Denis 'GNUtoo' Carikli
| xmm626_kernel_smdk4412_boot_power | IOCTL_MODEM_BOOT_ON
179 156 Denis 'GNUtoo' Carikli
                                      IOCTL_MODEM_BOOT_OFF | <pre>int (*modem_boot_on)(struct modem_ctl*);</pre>
180
                                                             <pre>int (*modem_boot_off)(struct modem_ctl*);</pre> | gpio_flm_uart_sel |
181 56 Denis 'GNUtoo' Carikli
| | | | gpio_cp_warm_reset |
182
| | | | gpio_revers_bias_clear |
183
| | | | gpio_revers_bias_restore |
184 1 Denis 'GNUtoo' Carikli
| | | | gpio_sim_detect |
185 157 Denis 'GNUtoo' Carikli
| xmm626_kernel_smdk4412_status_online_wait | IOCTL_MODEM_STATUS | int phone_state; | gpio_cp_on
186
                                                                                      gpio_cp_reset
187
                                                                                      gpio_pda_active
188
                                                                                      gpio_reset_req_n
189 158 Denis 'GNUtoo' Carikli
                                                                                      gpio_phone_active | int phone_state get assigned the status computed from the various GPIO states
190
                                                                                                          xmm626_kernel_smdk4412_status_online_wait only waits for the online status    |
191 159 Denis 'GNUtoo' Carikli
| xmm626_kernel_smdk4412_link_control_enable | IOCTL_LINK_CONTROL_ENABLE | <pre>int (*link_ldo_enable)(bool);</pre> | gpio_link_enable | on i9300:
192
                                                                                                                                        * link_ldo_enable only returns 0 and has a comment ("Exynos HSIC V1.2 LDO was controlled by kernel")
193
                                                                                                                                        * gpio_link_enable is set to 0 (so it's ignored) |
194 44 Denis 'GNUtoo' Carikli
195
h3. Glossary
196
197 72 Denis 'GNUtoo' Carikli
Terms for the modem CPU:
198 61 Denis 'GNUtoo' Carikli
* BP: Baseband processor
199
* CP: Cellular? processor
200 60 Denis 'GNUtoo' Carikli
201 72 Denis 'GNUtoo' Carikli
Term for the CPU of the system on a chip running Replicant:
202 60 Denis 'GNUtoo' Carikli
* AP: Application processor
203 1 Denis 'GNUtoo' Carikli
204 62 Denis 'GNUtoo' Carikli
TODO: move in its own page and point to it
205
206 101 Denis 'GNUtoo' Carikli
LPA: Low power mode active (Related to ULPI specs only?)
207
208
ULPI: Probably a USB PHY spec
209
210 16 Denis 'GNUtoo' Carikli
h3. SIM card presence detection
211 7 Denis 'GNUtoo' Carikli
212
Do we really want to check the SIM card presence?
213
214
Would it be possible not to for privacy reasons?
215
216
Example:
217
* Boot a modem with a SIM
218
* Take away the SIM card
219 1 Denis 'GNUtoo' Carikli
* Go to a protest with only the SIM card and a phone with no data on it to be able to call if necessary.
220 7 Denis 'GNUtoo' Carikli
221 16 Denis 'GNUtoo' Carikli
h3. TODO
222 1 Denis 'GNUtoo' Carikli
223
* check gpio_flm_uart_sel in smdk4412 kernel too
224 16 Denis 'GNUtoo' Carikli
225 82 Denis 'GNUtoo' Carikli
h2. Potential privacy and security issues
226
227 83 Denis 'GNUtoo' Carikli
h3. gpio_pda_active
228
229
From "cpuidle-exynos4.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/cpuidle-exynos4.c#n701 we have things like that:
230
<pre>
231
	cpu_pm_enter();
232
233
#if defined(CONFIG_INTERNAL_MODEM_IF) || defined(CONFIG_SAMSUNG_PHONE_TTY)
234
	gpio_set_value(GPIO_PDA_ACTIVE, 0);
235
#endif
236
237
	if (log_en)
238
		pr_debug("+++lpa\n")
239
</pre>
240
241
and:
242
<pre>
243
	if (log_en)
244
		pr_debug("---lpa\n");
245
#if defined(CONFIG_INTERNAL_MODEM_IF) || defined(CONFIG_SAMSUNG_PHONE_TTY)
246
	gpio_set_value(GPIO_PDA_ACTIVE, 1);
247
#endif
248
249
	cpu_pm_exit();
250
</pre>
251 84 Denis 'GNUtoo' Carikli
252 83 Denis 'GNUtoo' Carikli
Does it means that we are telling the modem about each time we go in suspend to RAM?
253 84 Denis 'GNUtoo' Carikli
254 85 Denis 'GNUtoo' Carikli
Devices affected or not affected:
255
256 84 Denis 'GNUtoo' Carikli
|_. Device |_. Config |
257
| GT-I9300 | "# CONFIG_INTERNAL_MODEM_IF is not set":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n1373
258
             "# CONFIG_SAMSUNG_PHONE_TTY is not set":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n3039 |
259 83 Denis 'GNUtoo' Carikli
260 82 Denis 'GNUtoo' Carikli
h3. gpio_phone_active 
261
262
From "ehci-s5p.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/usb/host/ehci-s5p.c#n129 we have things like that:
263
<pre>
264
#if defined(CONFIG_UMTS_MODEM_XMM6262)
265
	if (pdata->get_cp_active_state && !pdata->get_cp_active_state()) {
266
		s5p_ehci_port_control(pdev, CP_PORT, 0);
267
		pr_err("mif: force port%d off by cp reset\n", CP_PORT);
268
	}
269
#endif
270
</pre>
271 86 Denis 'GNUtoo' Carikli
272 82 Denis 'GNUtoo' Carikli
Does it allows the modem to trigger a re-enumeration of the HSIC bus?
273 86 Denis 'GNUtoo' Carikli
274
Devices affected or not affected:
275
276
|_. Device |_. Config |
277 87 Denis 'GNUtoo' Carikli
| GT-I9300 | "CONFIG_UMTS_MODEM_XMM6262=y":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/configs/lineageos_i9300_defconfig#n1350
278
             ".gpio_phone_active = GPIO_PHONE_ACTIVE":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/arch/arm/mach-exynos/board-m0-modems.c#n241 |
279 82 Denis 'GNUtoo' Carikli
280 1 Denis 'GNUtoo' Carikli
h2. Links
281
282 45 Denis 'GNUtoo' Carikli
* "modem_modemctl_device_xmm6262.c":https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/misc/modem_if/modem_modemctl_device_xmm6262.c
283 1 Denis 'GNUtoo' Carikli
* https://forum.xda-developers.com/galaxy-s2/help/how-to-talk-to-modem-commands-t1471241/page4
284 45 Denis 'GNUtoo' Carikli
* http://www.arteris.com/blog/bid/59433/Interchip-Connectivity-HSIC-UniPro-HSI-C2C-LLI-oh-my
285 64 Denis 'GNUtoo' Carikli
** TODO: move this link somewhere where it's more useful