2 * MTD SPI driver for ST M25Pxx (and similar) serial flash chips
4 * Author: Mike Lavender, mike@steroidmicros.com
6 * Copyright (c) 2005, Intec Automation Inc.
8 * Some parts are based on lart.c by Abraham Van Der Merwe
10 * Cleaned up and generalized based on mtd_dataflash.c
12 * This code is free software; you can redistribute it and/or modify
13 * it under the terms of the GNU General Public License version 2 as
14 * published by the Free Software Foundation.
18 #include <linux/init.h>
19 #include <linux/module.h>
20 #include <linux/device.h>
21 #include <linux/interrupt.h>
22 #include <linux/mutex.h>
23 #include <linux/math64.h>
25 #include <linux/mtd/mtd.h>
26 #include <linux/mtd/partitions.h>
28 #include <linux/spi/spi.h>
29 #include <linux/spi/flash.h>
32 #define FLASH_PAGESIZE 256
35 #define OPCODE_WREN 0x06 /* Write enable */
36 #define OPCODE_RDSR 0x05 /* Read status register */
37 #define OPCODE_WRSR 0x01 /* Write status register 1 byte */
38 #define OPCODE_NORM_READ 0x03 /* Read data bytes (low frequency) */
39 #define OPCODE_FAST_READ 0x0b /* Read data bytes (high frequency) */
40 #define OPCODE_PP 0x02 /* Page program (up to 256 bytes) */
41 #define OPCODE_BE_4K 0x20 /* Erase 4KiB block */
42 #define OPCODE_BE_32K 0x52 /* Erase 32KiB block */
43 #define OPCODE_CHIP_ERASE 0xc7 /* Erase whole flash chip */
44 #define OPCODE_SE 0xd8 /* Sector erase (usually 64KiB) */
45 #define OPCODE_RDID 0x9f /* Read JEDEC ID */
47 /* Status Register bits. */
48 #define SR_WIP 1 /* Write in progress */
49 #define SR_WEL 2 /* Write enable latch */
50 /* meaning of other SR_* bits may differ between vendors */
51 #define SR_BP0 4 /* Block protect 0 */
52 #define SR_BP1 8 /* Block protect 1 */
53 #define SR_BP2 0x10 /* Block protect 2 */
54 #define SR_SRWD 0x80 /* SR write protect */
56 /* Define max times to check status register before we give up. */
57 #define MAX_READY_WAIT_COUNT 100000
60 #ifdef CONFIG_M25PXX_USE_FAST_READ
61 #define OPCODE_READ OPCODE_FAST_READ
62 #define FAST_READ_DUMMY_BYTE 1
64 #define OPCODE_READ OPCODE_NORM_READ
65 #define FAST_READ_DUMMY_BYTE 0
68 /****************************************************************************/
71 struct spi_device *spi;
74 unsigned partitioned:1;
76 u8 command[CMD_SIZE + FAST_READ_DUMMY_BYTE];
79 static inline struct m25p *mtd_to_m25p(struct mtd_info *mtd)
81 return container_of(mtd, struct m25p, mtd);
84 /****************************************************************************/
87 * Internal helper functions
91 * Read the status register, returning its value in the location
92 * Return the status register value.
93 * Returns negative if error occurred.
95 static int read_sr(struct m25p *flash)
98 u8 code = OPCODE_RDSR;
101 retval = spi_write_then_read(flash->spi, &code, 1, &val, 1);
104 dev_err(&flash->spi->dev, "error %d reading SR\n",
113 * Write status register 1 byte
114 * Returns negative if error occurred.
116 static int write_sr(struct m25p *flash, u8 val)
118 flash->command[0] = OPCODE_WRSR;
119 flash->command[1] = val;
121 return spi_write(flash->spi, flash->command, 2);
125 * Set write enable latch with Write Enable command.
126 * Returns negative if error occurred.
128 static inline int write_enable(struct m25p *flash)
130 u8 code = OPCODE_WREN;
132 return spi_write_then_read(flash->spi, &code, 1, NULL, 0);
137 * Service routine to read status register until ready, or timeout occurs.
138 * Returns non-zero if error.
140 static int wait_till_ready(struct m25p *flash)
145 /* one chip guarantees max 5 msec wait here after page writes,
146 * but potentially three seconds (!) after page erase.
148 for (count = 0; count < MAX_READY_WAIT_COUNT; count++) {
149 if ((sr = read_sr(flash)) < 0)
151 else if (!(sr & SR_WIP))
154 /* REVISIT sometimes sleeping would be best */
161 * Erase the whole flash memory
163 * Returns 0 if successful, non-zero otherwise.
165 static int erase_chip(struct m25p *flash)
167 DEBUG(MTD_DEBUG_LEVEL3, "%s: %s %lldKiB\n",
168 dev_name(&flash->spi->dev), __func__,
169 (long long)(flash->mtd.size >> 10));
171 /* Wait until finished previous write command. */
172 if (wait_till_ready(flash))
175 /* Send write enable, then erase commands. */
178 /* Set up command buffer. */
179 flash->command[0] = OPCODE_CHIP_ERASE;
181 spi_write(flash->spi, flash->command, 1);
187 * Erase one sector of flash memory at offset ``offset'' which is any
188 * address within the sector which should be erased.
190 * Returns 0 if successful, non-zero otherwise.
192 static int erase_sector(struct m25p *flash, u32 offset)
194 DEBUG(MTD_DEBUG_LEVEL3, "%s: %s %dKiB at 0x%08x\n",
195 dev_name(&flash->spi->dev), __func__,
196 flash->mtd.erasesize / 1024, offset);
198 /* Wait until finished previous write command. */
199 if (wait_till_ready(flash))
202 /* Send write enable, then erase commands. */
205 /* Set up command buffer. */
206 flash->command[0] = flash->erase_opcode;
207 flash->command[1] = offset >> 16;
208 flash->command[2] = offset >> 8;
209 flash->command[3] = offset;
211 spi_write(flash->spi, flash->command, CMD_SIZE);
216 /****************************************************************************/
223 * Erase an address range on the flash chip. The address range may extend
224 * one or more erase sectors. Return an error is there is a problem erasing.
226 static int m25p80_erase(struct mtd_info *mtd, struct erase_info *instr)
228 struct m25p *flash = mtd_to_m25p(mtd);
232 DEBUG(MTD_DEBUG_LEVEL2, "%s: %s %s 0x%llx, len %lld\n",
233 dev_name(&flash->spi->dev), __func__, "at",
234 (long long)instr->addr, (long long)instr->len);
237 if (instr->addr + instr->len > flash->mtd.size)
239 div_u64_rem(instr->len, mtd->erasesize, &rem);
246 mutex_lock(&flash->lock);
248 /* whole-chip erase? */
249 if (len == flash->mtd.size && erase_chip(flash)) {
250 instr->state = MTD_ERASE_FAILED;
251 mutex_unlock(&flash->lock);
254 /* REVISIT in some cases we could speed up erasing large regions
255 * by using OPCODE_SE instead of OPCODE_BE_4K. We may have set up
256 * to use "small sector erase", but that's not always optimal.
259 /* "sector"-at-a-time erase */
262 if (erase_sector(flash, addr)) {
263 instr->state = MTD_ERASE_FAILED;
264 mutex_unlock(&flash->lock);
268 addr += mtd->erasesize;
269 len -= mtd->erasesize;
273 mutex_unlock(&flash->lock);
275 instr->state = MTD_ERASE_DONE;
276 mtd_erase_callback(instr);
282 * Read an address range from the flash chip. The address range
283 * may be any size provided it is within the physical boundaries.
285 static int m25p80_read(struct mtd_info *mtd, loff_t from, size_t len,
286 size_t *retlen, u_char *buf)
288 struct m25p *flash = mtd_to_m25p(mtd);
289 struct spi_transfer t[2];
290 struct spi_message m;
292 DEBUG(MTD_DEBUG_LEVEL2, "%s: %s %s 0x%08x, len %zd\n",
293 dev_name(&flash->spi->dev), __func__, "from",
300 if (from + len > flash->mtd.size)
303 spi_message_init(&m);
304 memset(t, 0, (sizeof t));
307 * OPCODE_FAST_READ (if available) is faster.
308 * Should add 1 byte DUMMY_BYTE.
310 t[0].tx_buf = flash->command;
311 t[0].len = CMD_SIZE + FAST_READ_DUMMY_BYTE;
312 spi_message_add_tail(&t[0], &m);
316 spi_message_add_tail(&t[1], &m);
318 /* Byte count starts at zero. */
322 mutex_lock(&flash->lock);
324 /* Wait till previous write/erase is done. */
325 if (wait_till_ready(flash)) {
326 /* REVISIT status return?? */
327 mutex_unlock(&flash->lock);
331 /* FIXME switch to OPCODE_FAST_READ. It's required for higher
332 * clocks; and at this writing, every chip this driver handles
333 * supports that opcode.
336 /* Set up the write data buffer. */
337 flash->command[0] = OPCODE_READ;
338 flash->command[1] = from >> 16;
339 flash->command[2] = from >> 8;
340 flash->command[3] = from;
342 spi_sync(flash->spi, &m);
344 *retlen = m.actual_length - CMD_SIZE - FAST_READ_DUMMY_BYTE;
346 mutex_unlock(&flash->lock);
352 * Write an address range to the flash chip. Data must be written in
353 * FLASH_PAGESIZE chunks. The address range may be any size provided
354 * it is within the physical boundaries.
356 static int m25p80_write(struct mtd_info *mtd, loff_t to, size_t len,
357 size_t *retlen, const u_char *buf)
359 struct m25p *flash = mtd_to_m25p(mtd);
360 u32 page_offset, page_size;
361 struct spi_transfer t[2];
362 struct spi_message m;
364 DEBUG(MTD_DEBUG_LEVEL2, "%s: %s %s 0x%08x, len %zd\n",
365 dev_name(&flash->spi->dev), __func__, "to",
375 if (to + len > flash->mtd.size)
378 spi_message_init(&m);
379 memset(t, 0, (sizeof t));
381 t[0].tx_buf = flash->command;
383 spi_message_add_tail(&t[0], &m);
386 spi_message_add_tail(&t[1], &m);
388 mutex_lock(&flash->lock);
390 /* Wait until finished previous write command. */
391 if (wait_till_ready(flash)) {
392 mutex_unlock(&flash->lock);
398 /* Set up the opcode in the write buffer. */
399 flash->command[0] = OPCODE_PP;
400 flash->command[1] = to >> 16;
401 flash->command[2] = to >> 8;
402 flash->command[3] = to;
404 /* what page do we start with? */
405 page_offset = to % FLASH_PAGESIZE;
407 /* do all the bytes fit onto one page? */
408 if (page_offset + len <= FLASH_PAGESIZE) {
411 spi_sync(flash->spi, &m);
413 *retlen = m.actual_length - CMD_SIZE;
417 /* the size of data remaining on the first page */
418 page_size = FLASH_PAGESIZE - page_offset;
420 t[1].len = page_size;
421 spi_sync(flash->spi, &m);
423 *retlen = m.actual_length - CMD_SIZE;
425 /* write everything in PAGESIZE chunks */
426 for (i = page_size; i < len; i += page_size) {
428 if (page_size > FLASH_PAGESIZE)
429 page_size = FLASH_PAGESIZE;
431 /* write the next page to flash */
432 flash->command[1] = (to + i) >> 16;
433 flash->command[2] = (to + i) >> 8;
434 flash->command[3] = (to + i);
436 t[1].tx_buf = buf + i;
437 t[1].len = page_size;
439 wait_till_ready(flash);
443 spi_sync(flash->spi, &m);
446 *retlen += m.actual_length - CMD_SIZE;
450 mutex_unlock(&flash->lock);
456 /****************************************************************************/
459 * SPI device driver setup and teardown
465 /* JEDEC id zero means "no ID" (most older chips); otherwise it has
466 * a high byte of zero plus three data bytes: the manufacturer id,
467 * then a two byte device id.
472 /* The size listed here is what works with OPCODE_SE, which isn't
473 * necessarily called a "sector" by the vendor.
475 unsigned sector_size;
479 #define SECT_4K 0x01 /* OPCODE_BE_4K works uniformly */
483 /* NOTE: double check command sets and memory organization when you add
484 * more flash chips. This current list focusses on newer chips, which
485 * have been converging on command sets which including JEDEC ID.
487 static struct flash_info __devinitdata m25p_data [] = {
489 /* Atmel -- some are (confusingly) marketed as "DataFlash" */
490 { "at25fs010", 0x1f6601, 0, 32 * 1024, 4, SECT_4K, },
491 { "at25fs040", 0x1f6604, 0, 64 * 1024, 8, SECT_4K, },
493 { "at25df041a", 0x1f4401, 0, 64 * 1024, 8, SECT_4K, },
494 { "at25df641", 0x1f4800, 0, 64 * 1024, 128, SECT_4K, },
496 { "at26f004", 0x1f0400, 0, 64 * 1024, 8, SECT_4K, },
497 { "at26df081a", 0x1f4501, 0, 64 * 1024, 16, SECT_4K, },
498 { "at26df161a", 0x1f4601, 0, 64 * 1024, 32, SECT_4K, },
499 { "at26df321", 0x1f4701, 0, 64 * 1024, 64, SECT_4K, },
501 /* Spansion -- single (large) sector size only, at least
502 * for the chips listed here (without boot sectors).
504 { "s25sl004a", 0x010212, 0, 64 * 1024, 8, },
505 { "s25sl008a", 0x010213, 0, 64 * 1024, 16, },
506 { "s25sl016a", 0x010214, 0, 64 * 1024, 32, },
507 { "s25sl032a", 0x010215, 0, 64 * 1024, 64, },
508 { "s25sl064a", 0x010216, 0, 64 * 1024, 128, },
509 { "s25sl12800", 0x012018, 0x0300, 256 * 1024, 64, },
510 { "s25sl12801", 0x012018, 0x0301, 64 * 1024, 256, },
512 /* SST -- large erase sizes are "overlays", "sectors" are 4K */
513 { "sst25vf040b", 0xbf258d, 0, 64 * 1024, 8, SECT_4K, },
514 { "sst25vf080b", 0xbf258e, 0, 64 * 1024, 16, SECT_4K, },
515 { "sst25vf016b", 0xbf2541, 0, 64 * 1024, 32, SECT_4K, },
516 { "sst25vf032b", 0xbf254a, 0, 64 * 1024, 64, SECT_4K, },
518 /* ST Microelectronics -- newer production may have feature updates */
519 { "m25p05", 0x202010, 0, 32 * 1024, 2, },
520 { "m25p10", 0x202011, 0, 32 * 1024, 4, },
521 { "m25p20", 0x202012, 0, 64 * 1024, 4, },
522 { "m25p40", 0x202013, 0, 64 * 1024, 8, },
523 { "m25p80", 0, 0, 64 * 1024, 16, },
524 { "m25p16", 0x202015, 0, 64 * 1024, 32, },
525 { "m25p32", 0x202016, 0, 64 * 1024, 64, },
526 { "m25p64", 0x202017, 0, 64 * 1024, 128, },
527 { "m25p128", 0x202018, 0, 256 * 1024, 64, },
529 { "m45pe80", 0x204014, 0, 64 * 1024, 16, },
530 { "m45pe16", 0x204015, 0, 64 * 1024, 32, },
532 { "m25pe80", 0x208014, 0, 64 * 1024, 16, },
533 { "m25pe16", 0x208015, 0, 64 * 1024, 32, SECT_4K, },
535 /* Winbond -- w25x "blocks" are 64K, "sectors" are 4KiB */
536 { "w25x10", 0xef3011, 0, 64 * 1024, 2, SECT_4K, },
537 { "w25x20", 0xef3012, 0, 64 * 1024, 4, SECT_4K, },
538 { "w25x40", 0xef3013, 0, 64 * 1024, 8, SECT_4K, },
539 { "w25x80", 0xef3014, 0, 64 * 1024, 16, SECT_4K, },
540 { "w25x16", 0xef3015, 0, 64 * 1024, 32, SECT_4K, },
541 { "w25x32", 0xef3016, 0, 64 * 1024, 64, SECT_4K, },
542 { "w25x64", 0xef3017, 0, 64 * 1024, 128, SECT_4K, },
545 static struct flash_info *__devinit jedec_probe(struct spi_device *spi)
548 u8 code = OPCODE_RDID;
552 struct flash_info *info;
554 /* JEDEC also defines an optional "extended device information"
555 * string for after vendor-specific data, after the three bytes
556 * we use here. Supporting some chips might require using it.
558 tmp = spi_write_then_read(spi, &code, 1, id, 5);
560 DEBUG(MTD_DEBUG_LEVEL0, "%s: error %d reading JEDEC ID\n",
561 dev_name(&spi->dev), tmp);
570 ext_jedec = id[3] << 8 | id[4];
572 for (tmp = 0, info = m25p_data;
573 tmp < ARRAY_SIZE(m25p_data);
575 if (info->jedec_id == jedec) {
576 if (info->ext_id != 0 && info->ext_id != ext_jedec)
581 dev_err(&spi->dev, "unrecognized JEDEC id %06x\n", jedec);
587 * board specific setup should have ensured the SPI clock used here
588 * matches what the READ command supports, at least until this driver
589 * understands FAST_READ (for clocks over 25 MHz).
591 static int __devinit m25p_probe(struct spi_device *spi)
593 struct flash_platform_data *data;
595 struct flash_info *info;
598 /* Platform data helps sort out which chip type we have, as
599 * well as how this board partitions it. If we don't have
600 * a chip ID, try the JEDEC id commands; they'll work for most
601 * newer chips, even if we don't recognize the particular chip.
603 data = spi->dev.platform_data;
604 if (data && data->type) {
605 for (i = 0, info = m25p_data;
606 i < ARRAY_SIZE(m25p_data);
608 if (strcmp(data->type, info->name) == 0)
612 /* unrecognized chip? */
613 if (i == ARRAY_SIZE(m25p_data)) {
614 DEBUG(MTD_DEBUG_LEVEL0, "%s: unrecognized id %s\n",
615 dev_name(&spi->dev), data->type);
618 /* recognized; is that chip really what's there? */
619 } else if (info->jedec_id) {
620 struct flash_info *chip = jedec_probe(spi);
622 if (!chip || chip != info) {
623 dev_warn(&spi->dev, "found %s, expected %s\n",
624 chip ? chip->name : "UNKNOWN",
630 info = jedec_probe(spi);
635 flash = kzalloc(sizeof *flash, GFP_KERNEL);
640 mutex_init(&flash->lock);
641 dev_set_drvdata(&spi->dev, flash);
644 * Atmel serial flash tend to power up
645 * with the software protection bits set
648 if (info->jedec_id >> 16 == 0x1f) {
653 if (data && data->name)
654 flash->mtd.name = data->name;
656 flash->mtd.name = dev_name(&spi->dev);
658 flash->mtd.type = MTD_NORFLASH;
659 flash->mtd.writesize = 1;
660 flash->mtd.flags = MTD_CAP_NORFLASH;
661 flash->mtd.size = info->sector_size * info->n_sectors;
662 flash->mtd.erase = m25p80_erase;
663 flash->mtd.read = m25p80_read;
664 flash->mtd.write = m25p80_write;
666 /* prefer "small sector" erase if possible */
667 if (info->flags & SECT_4K) {
668 flash->erase_opcode = OPCODE_BE_4K;
669 flash->mtd.erasesize = 4096;
671 flash->erase_opcode = OPCODE_SE;
672 flash->mtd.erasesize = info->sector_size;
675 flash->mtd.dev.parent = &spi->dev;
677 dev_info(&spi->dev, "%s (%lld Kbytes)\n", info->name,
678 (long long)flash->mtd.size >> 10);
680 DEBUG(MTD_DEBUG_LEVEL2,
681 "mtd .name = %s, .size = 0x%llx (%lldMiB) "
682 ".erasesize = 0x%.8x (%uKiB) .numeraseregions = %d\n",
684 (long long)flash->mtd.size, (long long)(flash->mtd.size >> 20),
685 flash->mtd.erasesize, flash->mtd.erasesize / 1024,
686 flash->mtd.numeraseregions);
688 if (flash->mtd.numeraseregions)
689 for (i = 0; i < flash->mtd.numeraseregions; i++)
690 DEBUG(MTD_DEBUG_LEVEL2,
691 "mtd.eraseregions[%d] = { .offset = 0x%llx, "
692 ".erasesize = 0x%.8x (%uKiB), "
693 ".numblocks = %d }\n",
694 i, (long long)flash->mtd.eraseregions[i].offset,
695 flash->mtd.eraseregions[i].erasesize,
696 flash->mtd.eraseregions[i].erasesize / 1024,
697 flash->mtd.eraseregions[i].numblocks);
700 /* partitions should match sector boundaries; and it may be good to
701 * use readonly partitions for writeprotected sectors (BP2..BP0).
703 if (mtd_has_partitions()) {
704 struct mtd_partition *parts = NULL;
707 if (mtd_has_cmdlinepart()) {
708 static const char *part_probes[]
709 = { "cmdlinepart", NULL, };
711 nr_parts = parse_mtd_partitions(&flash->mtd,
712 part_probes, &parts, 0);
715 if (nr_parts <= 0 && data && data->parts) {
717 nr_parts = data->nr_parts;
721 for (i = 0; i < nr_parts; i++) {
722 DEBUG(MTD_DEBUG_LEVEL2, "partitions[%d] = "
723 "{.name = %s, .offset = 0x%llx, "
724 ".size = 0x%llx (%lldKiB) }\n",
726 (long long)parts[i].offset,
727 (long long)parts[i].size,
728 (long long)(parts[i].size >> 10));
730 flash->partitioned = 1;
731 return add_mtd_partitions(&flash->mtd, parts, nr_parts);
733 } else if (data->nr_parts)
734 dev_warn(&spi->dev, "ignoring %d default partitions on %s\n",
735 data->nr_parts, data->name);
737 return add_mtd_device(&flash->mtd) == 1 ? -ENODEV : 0;
741 static int __devexit m25p_remove(struct spi_device *spi)
743 struct m25p *flash = dev_get_drvdata(&spi->dev);
746 /* Clean up MTD stuff. */
747 if (mtd_has_partitions() && flash->partitioned)
748 status = del_mtd_partitions(&flash->mtd);
750 status = del_mtd_device(&flash->mtd);
757 static struct spi_driver m25p80_driver = {
760 .bus = &spi_bus_type,
761 .owner = THIS_MODULE,
764 .remove = __devexit_p(m25p_remove),
766 /* REVISIT: many of these chips have deep power-down modes, which
767 * should clearly be entered on suspend() to minimize power use.
768 * And also when they're otherwise idle...
773 static int m25p80_init(void)
775 return spi_register_driver(&m25p80_driver);
779 static void m25p80_exit(void)
781 spi_unregister_driver(&m25p80_driver);
785 module_init(m25p80_init);
786 module_exit(m25p80_exit);
788 MODULE_LICENSE("GPL");
789 MODULE_AUTHOR("Mike Lavender");
790 MODULE_DESCRIPTION("MTD SPI driver for ST M25Pxx flash chips");