in qcom_glink_rpm.c [182:255]
static int glink_rpm_parse_toc(struct device *dev,
void __iomem *msg_ram,
size_t msg_ram_size,
struct glink_rpm_pipe *rx,
struct glink_rpm_pipe *tx)
{
struct rpm_toc *toc;
int num_entries;
unsigned int id;
size_t offset;
size_t size;
void *buf;
int i;
buf = kzalloc(RPM_TOC_SIZE, GFP_KERNEL);
if (!buf)
return -ENOMEM;
__ioread32_copy(buf, msg_ram + msg_ram_size - RPM_TOC_SIZE,
RPM_TOC_SIZE / sizeof(u32));
toc = buf;
if (le32_to_cpu(toc->magic) != RPM_TOC_MAGIC) {
dev_err(dev, "RPM TOC has invalid magic\n");
goto err_inval;
}
num_entries = le32_to_cpu(toc->count);
if (num_entries > RPM_TOC_MAX_ENTRIES) {
dev_err(dev, "Invalid number of toc entries\n");
goto err_inval;
}
for (i = 0; i < num_entries; i++) {
id = le32_to_cpu(toc->entries[i].id);
offset = le32_to_cpu(toc->entries[i].offset);
size = le32_to_cpu(toc->entries[i].size);
if (offset > msg_ram_size || offset + size > msg_ram_size) {
dev_err(dev, "TOC entry with invalid size\n");
continue;
}
switch (id) {
case RPM_RX_FIFO_ID:
rx->native.length = size;
rx->tail = msg_ram + offset;
rx->head = msg_ram + offset + sizeof(u32);
rx->fifo = msg_ram + offset + 2 * sizeof(u32);
break;
case RPM_TX_FIFO_ID:
tx->native.length = size;
tx->tail = msg_ram + offset;
tx->head = msg_ram + offset + sizeof(u32);
tx->fifo = msg_ram + offset + 2 * sizeof(u32);
break;
}
}
if (!rx->fifo || !tx->fifo) {
dev_err(dev, "Unable to find rx and tx descriptors\n");
goto err_inval;
}
kfree(buf);
return 0;
err_inval:
kfree(buf);
return -EINVAL;
}