| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <55FC151F.6040708@list.ru>
Date: Fri, 18 Sep 2015 16:43:59 +0300
From: Stas Sergeev <stsp@...t.ru>
To: Russell King - ARM Linux <linux@....linux.org.uk>
Cc: David Miller <davem@...emloft.net>, andrew@...n.ch,
linux-arm-kernel@...ts.infradead.org, netdev@...r.kernel.org
Subject: Re: mvneta: SGMII fixed-link not so fixed
18.09.2015 16:12, Russell King - ARM Linux пишет:
> On Fri, Sep 18, 2015 at 03:43:54PM +0300, Stas Sergeev wrote:
>> 18.09.2015 15:13, Russell King - ARM Linux пишет:
>>> On Fri, Sep 18, 2015 at 02:29:34PM +0300, Stas Sergeev wrote:
>>>> 18.09.2015 02:14, Russell King - ARM Linux пишет:
>>>>> _But_ using the in-band status
>>>>> property fundamentally requires this for mvneta to behave correctly:
>>>>>
>>>>> phy-mode = "sgmii";
>>>>> managed = "in-band-status";
>>>>> fixed-link {
>>>>> };
>>>>>
>>>>> with _no_ phy node.
>>>> I don't understand this one.
>>>> At least for me it works without empty fixed-link.
>>>> There may be some bug.
>>>
>>> if (cause_rx_tx & MVNETA_MISCINTR_INTR_MASK) {
>>> u32 cause_misc = mvreg_read(pp, MVNETA_INTR_MISC_CAUSE);
>>>
>>> mvreg_write(pp, MVNETA_INTR_MISC_CAUSE, 0);
>>> if (pp->use_inband_status && (cause_misc &
>>> (MVNETA_CAUSE_PHY_STATUS_CHANGE |
>>> MVNETA_CAUSE_LINK_CHANGE |
>>> MVNETA_CAUSE_PSC_SYNC_CHANGE))) {
>>> mvneta_fixed_link_update(pp, pp->phy_dev);
>>> }
>>>
>>> pp->use_inband_status is set when managed = "in-band-status" is set.
>>> We detect changes in the in-band status, and call mvneta_fixed_link_update():
>>>
>>> mvneta_fixed_link_update() reads the status, and communicates that into
>>> the fixed-link phy:
>>>
>>> u32 gmac_stat = mvreg_read(pp, MVNETA_GMAC_STATUS);
>>>
>>> ... code setting status.* values from gmac_stat ...
>>> changed.link = 1;
>>> changed.speed = 1;
>>> changed.duplex = 1;
>>> fixed_phy_update_state(phy, &status, &changed);
>>>
>>> fixed_phy_update_state() then looks up the phy in its list, comparing only
>>> the address:
>>>
>>> if (!phydev || !phydev->bus)
>>> return -EINVAL;
>>>
>>> list_for_each_entry(fp, &fmb->phys, node) {
>>> if (fp->addr == phydev->addr) {
>>>
>>> updating fp->* with the new state, calling fixed_phy_update_regs(). This
>>> updates the fixed-link phy emulated registers, and phylib then notices
>>> the change in link status, and notifies the netdevice attached to the
>>> PHY it found of the change.
>>>
>>> Now, one of two things happens as a result of this:
>>>
>>> 1. If pp->phy_dev is a fixed-link phy, this finds the correct fixed-link
>>> phy to update its "fixed-link" properties, and the "not so fixed" phy
>>> changes its parameters according to the new status.
>>>
>>> 2. If pp->phy_dev is a MDIO phy which matches the address of a fixed-link
>>> phy,
>> Doesn't the above loop iterates only "fixed_mdio_bus platform_fmb"?
>> I don't think MDIO PHYs can appear there. If they can - the bug is
>> very nasty. Have you seen exactly when/why that happens?
>
> I think I explained it fully - please follow the code paths I've detailed
> above.
I try. What I don't understand is why both PHYs get the
same address on the "Fixed MDIO bus".
>
> Specifically, look at this code:
>
> if (!phydev || !phydev->bus)
> return -EINVAL;
>
> list_for_each_entry(fp, &fmb->phys, node) {
> if (fp->addr == phydev->addr) {
>
> Consider what the effect is if you have a MDIO phy at address 0 on eth0
> which has in-band-status enabled.
So as I understand, you have MDIO phy with DT looking like this:
ethernet@...00 {
status = "okay";
phy-mode = "sgmii";
managed = "in-band-status";
}
W/O either "phy" of "fixed-link" nodes. Correct?
mvneta calls of_phy_register_fixed_link(dn) on it after not
finding the "phy" node. And it will do the same with the second
non-MDIO phy. What I don't see is how do they get the same addr
on the same bus, could you please clarify that a bit?
>>> Now, a fixed-link phy is only created in mvneta when there is no MDIO phy
>>> specified, but when there is a fixed-link specification in DT:
>>>
>>> phy_node = of_parse_phandle(dn, "phy", 0);
>>> if (!phy_node) {
>>> if (!of_phy_is_fixed_link(dn)) {
>>> dev_err(&pdev->dev, "no PHY specified\n");
>>> err = -ENODEV;
>>> goto err_free_irq;
>>> }
>>>
>>> err = of_phy_register_fixed_link(dn);
>>> if (err < 0) {
>>> dev_err(&pdev->dev, "cannot register fixed PHY\n");
>>> goto err_free_irq;
>>> }
>>>
>>> If there's neither a MDIO PHY nor a fixed-link, then the network driver
>>> fails to initialise the device.
>> But it does.
>
> Please, look again at the code I quoted above.
>
>> In fact, of_mdio.c has this code:
>>
>> err = of_property_read_string(np, "managed", &managed);
>> if (err == 0) {
>> if (strcmp(managed, "in-band-status") == 0) {
>> /* status is zeroed, namely its .link member */
>> phy = fixed_phy_register(PHY_POLL, &status, np);
>> return IS_ERR(phy) ? PTR_ERR(phy) : 0;
>> }
>> }
>>
>> Which is exactly for the case you describe.
>
> That code is in of_phy_register_fixed_link(). That code will _NOT_ be
> reached if a MDIO phy is specified. Again, please read the code.
I think the DT quote is missing here for me to understand.
This code is for managed = "in-band-status", which is what I thought
you are talking about.
Could you please quote the DT that creates 2 PHYs with the
same addr on fmb? I'll try it here and from that will understand.
>> Maybe if some downlink tells the MAC what autoneg protocol will
>> be used, you can have:
>> phy-mode = "1000base-x" | "sgmii" | "serdes-auto";
>> managed = "in-band-status";
>>
>> and "serdes-auto" will use either "1000base-x" or "sgmii", depending
>> on what the downlink says?
>
> Maybe, but rather than guessing and getting it wrong, let's wait until
> we know what kind of a solution is necessary here. Rushing this will
> only create another design mistake and an even larger can of worms.
That was just an idea of how to get it without changing the current
values of the "managed" property.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists