Re: [PATCH v7 5/7] media: i2c: add DS90UB960 driver

[Tomi Valkeinen]

Hi Andy,

On 20/01/2023 18:47, Andy Shevchenko wrote:

> > > Esp. taking into account that some of them are using actually
> > > post-inc. Why this difference?
> >
> > Possibly a different person has written that particular piece of code, or
> > maybe a copy paste from somewhere.
> >
> > I'm personally fine with seeing both post and pre increments in code.
>
> I'm not :-), if it's not required by the code. Pre-increment always puzzles
> me: Is here anything I have to pay an additional attention to?

That is interesting, as to me pre-increment is the simpler, more obvious 
case. It's just:

v = v + 1
v

Whereas post-increment is:

temp = v
v = v + 1
temp

In any case, we're side-tracking here, I think =).

> > > > +		struct ub960_rxport *rxport = priv->rxports[nport];
> > > > +
> > > > +		if (!rxport || !rxport->vpoc)
> > > > +			continue;
> > > > +
> > > > +		ret = regulator_enable(rxport->vpoc);
> > > > +		if (ret)
> > > > +			goto err_disable_vpocs;
> > > > +	}
>
> ...
>
> > > > +	if (WARN_ON(strobe_pos < UB960_MIN_MANUAL_STROBE_POS ||
> > > > +		    strobe_pos > UB960_MAX_MANUAL_STROBE_POS))
> > > > +		return;
> > >
> > > Always be careful about WARN*() APIs because with a little trick they may
> > > become equivalent to BUG() which is a beast that nobody likes. I.o.w.
> > > you have to have justify why this is needed and can't be replaced with
> > > dev_*() or analogue.
> > >
> > > Same for the other places with WARN*().
> >
> > Valid point. I think most of them here are in cases that really shouldn't
> > happen. But if they do happen, I'd like to see a big loud shout about it.
>
> ...if you have time to catch it. Read about "panic_on_warn".

Reading about WARNs on coding-style.rst, it very much sounds like the 
WARNs in the driver were fine: they were in places that are never 
supposed to happen. However, I have already dropped them, and I'm fine 
keeping it that way.

> > The above is not a best example of this, and I think I can just drop the
> > above warns, but, e.g. handling the default case for "switch
> > (rxport->rx_mode)" (which shouldn't happen), I'd prefer to have a big yell
> > in place rather than return silently or print a "normal" error print.
> >
> > Obviously WARN is not a good one if it can be toggled to become a BUG.
> >
> > So... I think I'll just drop most of them and probably convert the rest
> > (two, actually) to dev_errs.
>
> ...
>
> > > > +	if (strobe_pos < -7)
> > > > +		clk_delay = abs(strobe_pos) - 6;
> > > > +	else if (strobe_pos > 7)
> > > > +		data_delay = strobe_pos - 6;
> > > > +	else if (strobe_pos < 0)
> > > > +		clk_delay = abs(strobe_pos) | UB960_IR_RX_ANA_STROBE_SET_CLK_NO_EXTRA_DELAY;
> > > > +	else if (strobe_pos > 0)
> > > > +		data_delay = strobe_pos | UB960_IR_RX_ANA_STROBE_SET_DATA_NO_EXTRA_DELAY;
> > >
> > > I'm wondering if clamp_t()/clamp_val() can be utilised here... And maybe in other
> > > places in the driver.
> >
> > Hmm, I'm not sure how.
>
> I can't suggest you, because it's magic to me what is going on, e.g. for
> the strobe_pos < -7 case, and why abs(strobe_pos) - 6 wouldn't overflow
> the bit field or whatever that uses it.

Ah, I see, you were thinking of ensuring the input parameters are in 
range. I thought you meant to somehow optimize the "algorithm" above 
with clamps.

I don't think clamps are needed, the input parameters should always be 
in range, as they are validated when reading the DT.

> ...
>
> > > > +	if (eq_level <= 7) {
> > > > +		eq_stage_1_select_value = eq_level;
> > > > +		eq_stage_2_select_value = 0;
> > > > +	} else {
> > > > +		eq_stage_1_select_value = 7;
> > > > +		eq_stage_2_select_value = eq_level - 7;
> > >
> > > A lot of magic 7 in the code. Are they all of the same semantic? Are they can
> > > be converted to use a macro (including respective MIN/MAX macros)?
> >
> > It's related to how the value has to be encoded into the register. We keep
> > the equalization level in a simple variable, but need to write it like this
> > into the register. I'm not sure what I would call the magic 7 here.
> >
> > Then for the strobe position, we use a logical signed value between -7 and
> > 7, so we have to +7 when writing that to a register. Except when using a
> > manual strobe position, where the range is -13 to 13 (7+6, that's the 6 in
> > ub960_rxport_set_strobe_pos()).
> >
> > It's rather confusing, in my opinion, but I think defines may just make this
> > more confusing. The magic numbers used should always be very close to the
> > registers in question, so if you know how the HW works wrt. strobe & eq,
> > they should be "clear". I'll try to come up with defines that make this
> > clearer, but no promises.
>
> Obviously I disagree on the fact that it's more confusing. Consider that 7
> and 7. How do I know that their semantics is the same or different? With
> the name assigned it's differentiated by the name used.

I have added defines for these now.

> ...
>
> > > > +	ub960_rxport_read(priv, nport, UB960_RR_AEQ_BYPASS, &v);
> > > > +
> > > > +	v &= ~(UB960_RR_AEQ_BYPASS_EQ_STAGE1_VALUE_MASK |
> > > > +	       UB960_RR_AEQ_BYPASS_EQ_STAGE2_VALUE_MASK);
> > > > +	v |= eq_stage_1_select_value << UB960_RR_AEQ_BYPASS_EQ_STAGE1_VALUE_SHIFT;
> > > > +	v |= eq_stage_2_select_value << UB960_RR_AEQ_BYPASS_EQ_STAGE2_VALUE_SHIFT;
> > > > +	v |= UB960_RR_AEQ_BYPASS_ENABLE; /* Enable AEQ Bypass */
> > > > +
> > > > +	ub960_rxport_write(priv, nport, UB960_RR_AEQ_BYPASS, v);
> > >
> > > Can't you provide ub960_rxport_update_bits() ?
> >
> > I could, but I think it's worse:
> >
> > ub960_rxport_update_bits(priv, nport, UB960_RR_AEQ_BYPASS,
> > 	UB960_RR_AEQ_BYPASS_EQ_STAGE1_VALUE_MASK |
> > 		UB960_RR_AEQ_BYPASS_EQ_STAGE2_VALUE_MASK |
> > 		UB960_RR_AEQ_BYPASS_ENABLE,
> > 	(eq_stage_1_select_value
> > 	 << UB960_RR_AEQ_BYPASS_EQ_STAGE1_VALUE_SHIFT) |
> > 		(eq_stage_2_select_value
> > 		 << UB960_RR_AEQ_BYPASS_EQ_STAGE2_VALUE_SHIFT) |
> > 		UB960_RR_AEQ_BYPASS_ENABLE /* Enable AEQ Bypass */
> > );
> >
> > Indenting it differently, I think it's still worse:
> >
> > ub960_rxport_update_bits(priv, nport, UB960_RR_AEQ_BYPASS,
> > 	UB960_RR_AEQ_BYPASS_EQ_STAGE1_VALUE_MASK |
> > 	UB960_RR_AEQ_BYPASS_EQ_STAGE2_VALUE_MASK |
> > 	UB960_RR_AEQ_BYPASS_ENABLE,
> > 	(eq_stage_1_select_value << UB960_RR_AEQ_BYPASS_EQ_STAGE1_VALUE_SHIFT) |
> > 	(eq_stage_2_select_value << UB960_RR_AEQ_BYPASS_EQ_STAGE2_VALUE_SHIFT) |
> > 	UB960_RR_AEQ_BYPASS_ENABLE /* Enable AEQ Bypass */
> > );
>
> You can always use temporary variables to make code better to read.
> But it's up to you. Usually the R-M-W <--> vs. U is about locking or
> serialisation and handling it in a separate code is better.
>
> ...
>
> > > > +	ret = ub960_rxport_read(priv, nport, UB960_RR_RX_PAR_ERR_HI, &v1);
> > > > +	if (ret)
> > > > +		return ret;
> > > > +
> > > > +	ret = ub960_rxport_read(priv, nport, UB960_RR_RX_PAR_ERR_LO, &v2);
> > > > +	if (ret)
> > > > +		return ret;
> > >
> > > Can this be read at once as BE16/LE16 value?
> > > Or if the stream of bytes, you can use le/be16_to_cpu().
> >
> > I'm not sure, possibly. But is it worth it? I'd need to add new helper
> > functions to read such a value.
>
> I think it worth it to show exactly what is provided by the hardware
> and how we handle it (endianess wise).
>
> > > > +	parity_errors = (v1 << 8) | v2;
>
> ...
>
> > > > +	*ok = !errors;
> > >
> > > How this is different to the something like returning 1 here (and 0 above)?
> > > You may save some code by dropping redundant parameter.
> >
> > Return value 1 means there was an error when reading the register values. 0
> > means we read the values, and "ok" contains a summary (ok or not) of the
> > link's status.
>
> I was expecting that error is negative, no?

Ah, sorry. I meant the return value is negative if there was an error.

Yes, the "ok" value could be returned as 0 or 1. But I don't usually 
like combining the error code and the return value, it just makes 
messier code.

> > > > +	return 0;
>
> ...
>
> > > > +	while (time_before(jiffies, timeout)) {
> > > > +		missing = 0;
> > > > +
> > > > +		for_each_set_bit(nport, &port_mask,
> > > > +				 priv->hw_data->num_rxports) {
> > > > +			struct ub960_rxport *rxport = priv->rxports[nport];
> > > > +			bool ok;
> > > > +
> > > > +			if (!rxport)
> > > > +				continue;
> > > > +
> > > > +			ret = ub960_rxport_link_ok(priv, nport, &ok);
> > > > +			if (ret)
> > > > +				return ret;
> > > > +
> > > > +			if (!ok || !(link_ok_mask & BIT(nport)))
> > > > +				missing++;
> > > > +
> > > > +			if (ok)
> > > > +				link_ok_mask |= BIT(nport);
> > > > +			else
> > > > +				link_ok_mask &= ~BIT(nport);
> > > > +		}
> > > > +
> > > > +		loops++;
> > > > +
> > > > +		if (missing == 0)
> > > > +			break;
> > > > +
> > > > +		msleep(50);
> > > > +	}
> > >
> > > You can wrap the body into readx_poll_timeout() from iopoll.h.
> >
> > Hmm... How would I do that? With some kind of helper structs to wrap the
> > input and output parameters? Sounds very messy, but maybe I'm missing
> > something.
>
> It's me who added extra 'x', what I meant is read_poll_timeout(). It
> accepts variadic arguments, i.o.w. any function with any arguments can
> be provided.

I see. Yes, I see how it would be used. read_poll_timeout() uses 
sleep_range, though, and we're sleeping more than the recommended limit 
of 20ms. It's also slightly messy, as we need to keep some state 
(link_ok_mask, loops is optional).

> ...
>
> > > > +		ub960_rxport_read(priv, nport, UB960_RR_RX_FREQ_HIGH, &v1);
> > > > +		ub960_rxport_read(priv, nport, UB960_RR_RX_FREQ_LOW, &v2);
> > >
> > > Same Q, can these be unified to some kind of bulk read?
> >
> > Perhaps, but again, I don't see the value for creating a bulk read helper
> > function for these few cases.
>
> OK.
>
> ...
>
> > > > +		dev_dbg(dev, "\trx%u: locked, SP: %d, EQ: %u, freq %u Hz\n",
> > > > +			nport, strobe_pos, eq_level,
> > > > +			v1 * 1000000 + v2 * 1000000 / 256);
> > >
> > > Even this will be simpler with above suggestion.
> >
> > Hmm... How is that?
>
> 		dev_dbg(dev, "\trx%u: locked, SP: %d, EQ: %u, freq %u Hz\n",
> 			nport, strobe_pos, eq_level, v * 1000000 / 256);
>
> See?

Ah, of course, 256 is 1 << 8. The HW documentation just said that the 
high byte is the MHz part and the low byte is the fractional part in 
1/256, and I went with that without thinking about it.

This has the small complication that it overflows 32 bit variables, so I 
need to use 64 bit.

I have added 16 bit register access functions.

> ...
>
> > > > +	for (nport = 0; nport < priv->hw_data->num_rxports; ++nport) {
> > >
> > > Post-inc?
> >
> > I still like pre-inc =).
> >
> > I see there's a mix os post and pre incs in the code. I'll align those when
> > I encounter them, but I don't think it's worth the effort to methodically go
> > through all of them to change them use the same style.
>
> Kernel uses post-inc is an idiom for loops:
>
> $ git grep -n -w '[_a-z0-9]\+++' | wc -l
> 148693
>
> $ git grep -n -w ' ++[a-z0-9_]\+' | wc -l
> 8701
>
> So, non-standard pattern needs to be explained.
>
> > > > +	}
>
> ...
>
> > > > +	for (unsigned int i = 0; i < 6; ++i)
> > > > +		ub960_read(priv, UB960_SR_FPD3_RX_ID(i), &id[i]);
> > > > +	id[6] = 0;
> > >
> > > If it's only for printing, the 0 is not needed...
> > >
> > > > +	dev_info(dev, "ID '%s'\n", id);
> > >
> > > ...as you may put it as
> > >
> > > 	dev_info(dev, "ID: '%.*s'\n", (int)sizeof(id), id);
> > >
> > > (I wrote from the top of my head, maybe not compilable as is).
> >
> > And you think that is clearer? =)
>
> To me, yes. Maybe because I'm familiar with that.
>
> > I have to disagree.
>
> Your right :-)
>
> ...
>
> > I'm not quite fine with dropping all these DT checks. If the user happens to
> > provide a DT with illegal values, the end results can be odd and the reason
> > quite difficult to figure out. Isn't it much better to have a few extra
> > checks in the driver?
>
> As I said above, ask Rob, if he is fine with that I will have no objections.
>
> ...
>
> > > > +		rxport->eq.strobe_pos = strobe_pos;
> > > > +		if (!priv->strobe.manual)
> > > > +			dev_warn(dev,
> > > > +				 "rx%u: 'ti,strobe-pos' ignored as 'ti,manual-strobe' not set\n",
> > > > +				 nport);
> > > > +	}
> > >
> > > This and below looks a bit different to the above in the same function. Perhaps
> > > these can be refactored to be less LoCs.
> >
> > Hmm what did you have in mind?
> >
> > > > +	ret = fwnode_property_read_u32(link_fwnode, "ti,eq-level", &eq_level);
> > > > +	if (ret) {
> > > > +		if (ret != -EINVAL) {
> > > > +			dev_err(dev, "rx%u: failed to read 'ti,eq-level': %d\n",
> > > > +				nport, ret);
> > > > +			return ret;
> > > > +		}
>
> This seems like trying to handle special cases, if you want it to be optional,
> why not ignoring all errors?

I don't follow. Why would we ignore all errors even if the property is 
optional? If there's a failure in reading the property, or checking if 
it exists or not, surely that's an actual error to be handled, not to be 
ignored?

> > > > +	} else if (eq_level > UB960_MAX_EQ_LEVEL) {
> > > > +		dev_err(dev, "rx%u: illegal 'ti,eq-level' value: %d\n", nport,
> > > > +			eq_level);
>
> This part is a validation of DT again, but we discussed above this.
>
> > > > +	} else {
> > > > +		rxport->eq.manual_eq = true;
> > > > +		rxport->eq.manual.eq_level = eq_level;
> > > > +	}
>
> ...
>
> > > > +err_pd_gpio:
> > > > +	if (priv->pd_gpio)
> > >
> > > Dup test.
> >
> > What do you mean dup? You mean gpiod_set_value_cansleep can be called with
> > gpio = NULL? The docs don't say this, but I guess that is the case.
>
> Yes. This is the idea of having _optional() GPIO APIs.
>
> > > > +		gpiod_set_value_cansleep(priv->pd_gpio, 1);
>
> ...
>
> > > > +	if (priv->pd_gpio)
> > > > +		gpiod_set_value_cansleep(priv->pd_gpio, 1);
>
> Ditto.
>
> ...
>
> > > > +	priv->hw_data = of_device_get_match_data(dev);
> > >
> > > Why of_ out of the blue?!
> >
> > Hmm... How do I get the data in a generic way? I'll have to study this a
> > bit.
>
> Just drop of_ :-)
>
> 	priv->hw_data = device_get_match_data(dev);
>
> > > > +	if (!priv->hw_data)
> > > > +		return -ENODEV;
>
> ...
>
> > > > +	priv->current_indirect_target = 0xff;
> > > > +	priv->current_read_rxport = 0xff;
> > > > +	priv->current_write_rxport_mask = 0xff;
> > > > +	priv->current_read_csiport = 0xff;
> > > > +	priv->current_write_csiport_mask = 0xff;
> > >
> > > GENMASK()
> >
> > These are not masks, but invalid values. We set these to an invalid value
> > (0xff) so that when a reg access function next time checks if we are already
> > targeting, e.g. a particular rxport, it will always opt to select the rxport
> > by writing to the approriate registers.
>
> Then define with respective name?

I think the comment just above these should be enough:

 * Initialize these to invalid values so that the first reg writes will
 * configure the target.

We're just initializing the fields to an unused value and the value has 
no other meaning, and is not used anywhere else. We could as well 
initialize to 0, and use +1 in the relevant code to avoid 0 being a 
valid value.

> ...
>
> > > > +struct ds90ub9xx_platform_data {
> > > > +	u32 port;
> > > > +	struct i2c_atr *atr;
> > > > +	unsigned long bc_rate;
> > >
> > > Not sure why we need this to be public except, probably, atr...
> >
> > The port and atr are used by the serializers, for atr. The bc_rate is used
> > by the serializers to figure out the clocking (they may use the FPD-Link's
> > frequency internally).
>
> The plain numbers can be passed as device properties. That's why the question
> about platform data. Platform data in general is discouraged to be used in a
> new code.

Device properties, as in, coming from DT? The port could be in the DT, 
but the others are not hardware properties.

Yes, I don't like using platform data. We need some way to pass 
information between the drivers. Maybe a custom FPD-Link bus could do 
that, but that's then going into totally new directions.

 Tomi