From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.remote-ip=162.62.57.87 ARC-Seal: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; cv=none; t=1792996162; b=LelUGwGer2GkYm+DVjaPdVQO9rP5xHWfwbfRTVSzMG2d4yJI7Hbv5MK5shOJFEwELSIu ws1qKixXkplH8dBfME+eZw9dQUWiCtyJCuBdza0SlzUHCqzYkdm26tvywpA/Z0R5qmOrz lKmkh7lowKRGGjR/cBx9HrJbtHZli2zgn1HiHGDn49WV95aH3BjuziutJO4mIUXzUQv+t 6TghBFBF6G5KBGclJbHjsdVsOg33zzgFfX5IffSfXKWWUxyqR8E4MPcA/Wb3YaiC+0GtU CkiznNl68iapqlp5bJD03p4jGqmF2ItXyOEip2VjNUsWDn6tQDm3Ytwp327n6e+rCIg== ARC-Message-Signature: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; c=relaxed/relaxed; t=1792996162; h=DMARC-Filter:DKIM-Signature:Received:X-QQ-mid:Message-ID: X-QQ-XMAILINFO:X-QQ-XMRINFO:From:To:Cc:Subject:Date:X-OQ-MSGID: X-Mailer:In-Reply-To:References:MIME-Version: Content-Transfer-Encoding; bh=g8D4YyeKuo3gy6whWDFvVUV3WITzxF/qu8h0rvB7WuM=; b=Uml4Uey8sUHLSnYeXePDNpz90LtfmgAyOyZOgRx62UBO9/+Y7IcPpFdxo7+GZdes5bAO ZTZM4lpJ4kUn+fTLL4vgBRBLp619t+ImQwIS3xiO+mMcV0T5TQG1SNzrmh7i8p/UGRoKS gu/diIl2h4Ik6C+e82DQ59F3UjoFet6I0J5r6QQv0FWoJdq22cRxj/z5a9lLMToKFpoPj araZXRllw3L+GtCOyvGDjpzOxC0O1Vuy4kNRhFvkL+a8FgX4DptiJLiNpIQAyWBWZO5sF FJbw7W4klkgSumaNwnkY2tiW9eQ2QAvHYh2Xxg8ZH1eFZCKHRT4ZV4BfRD4JNQeCv6g== ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass header.from=qq.com; spf=pass smtp.mailfrom=qq.com; dkim=pass header.d=qq.com header.i=@qq.com header.a=rsa-sha256 header.s=s201512 header.b=A0t3NGtp; arc=none smtp.remote-ip=162.62.57.87 Received: from out162-62-57-87.mail.qq.com (out162-62-57-87.mail.qq.com [162.62.57.87]) (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 4057E606A31D; Mon, 26 Oct 2026 06:29:19 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.2 smtp.subspace.kernel.org 4057E606A31D Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=qq.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=qq.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key, unprotected) header.d=qq.com header.i=@qq.com header.a=rsa-sha256 header.s=s201512 header.b=A0t3NGtp DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qq.com; s=s201512; t=1792996150; bh=g8D4YyeKuo3gy6whWDFvVUV3WITzxF/qu8h0rvB7WuM=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=A0t3NGtpiD15os4b3ojGhZQYkKNl1gpKoGkS+fWbRzR306wW5O8eOmkn8JBvPZ88T C0kFKN8s1qRulRvtRGmQSNpY4HWlymi4/ld61T5gVvyvCYPG4uEQNqQkYGGIB315Gg PTAsHJpa0gnefNhS9iQ/zWrctnzogK1kAf5SbIMM= Received: from shuai-VMware-Virtual-Platform.. ([117.158.156.199]) by newxmesmtplogicsvrsza53-0.qq.com (NewEsmtp) with SMTP id 74605611; Mon, 26 Oct 2026 14:29:06 +0800 X-QQ-mid: xmsmtpt1792996148tcbbxlcqf Message-ID: X-QQ-XMAILINFO: N0aEwYoCM2wCfG66nzRYGaRbosG+cb+JsxiH0V6Rl6zcc1JZuQ3LaMiJVXdDQE zlJbWCB1xUtJGtz0QI4sUTVgx/gpvgunx6cisj2v4qZh4eLFFYhB3VXoyV2RIpeZrGNT3TUytC8m Gub4tQjo/Z3L+qwQJ/ErUMtvuFBINJZt3nu14nqkYJ5IuyGplOw3eJZQwCixGmAIatTH3JcF1Id8 zAp0EqpIH7dn6jhSODk+LLrSI8Uoqocmy2se2+IOxWA6MwQOFGt2pYkdbMRbyHV1EBV3DSOCShlA KaMEO16yyAwAuOREfzGz6CY1Jma0YOGVYbwbYUn9nA4n55hKq+/VxjwqYMpSLDhgtbZQiqMuWYyk WCkgddvt81U8jnICsw3TmT4+h7doA9h4bHmCTgFszRF0h7EKndfVyIY3Efydd+jzh/0djOyS681o XzeeGV9cBYF8O63q5xRc/0ph1pBmksF6WDVaIXwrtZmJ+Od3WoSdn19Ac9trcBxRM8YBfQxCsT71 PpEEeJTjkZBXTF/WiVBkccyc2yPxYNEKdfChkMzDrnsXnQzbWuR6Kiis/LG1qIHFmbkN4kNcVg4B rL8nyEH+QRqr5yMtdcfVAIqOlVjmgeogEgHsvaqJZydzvU63G5og4jE0JnigKXZ5ByGTaLB3L8+Y /5IwWfM6QFiYnZPKbu7cDttabcWP4ZGAbaqjq43Lou23cIYxF6eTqxiocoARGmh9fjjM6Ipdk78T VtAvcLglTzAhGpzxgfgooAhjbJRwM/QNOb/KJPNi0eOyhE3xegWS3j5NxboTlgiGacjomxGo/Wav bNytBIBk1suBZI947qe7DWzO0s1QSp/0ApfJHiC8+oWVjKxLzG70YdSDQ9fMQrkqJjYDo8qY7jvg 4t2eILvDW6ymXppflTV6TeUkHeu7y9ze+ORoy/SKa414huVtVwcpKOKY3r1MlJsnWQvFdfsEoaND h3kOjMhqHirGVu8TO9PCxq3xrn59NPaZmhzjEmM6ZMruSA9FGGuF8vdKaHhqIDSZFoNPpfPJclB6 M1I9Mge3Aq9ZorEjbV2/rCfR2DERsecqh8CCUxmh+M2OFoC1XwKlZIu25l9oK1MMyyVFrIhGMEFO qt4iT7Kc+iHL4mliSM5GckdpU2b7jAYAG9yaKqnPKgzI3rfvfpcJwSPu7mRWWWAHXqTw/KyUk4Q+ TbAcI= X-QQ-XMRINFO: NI4Ajvh11aEjEMj13RCX7UuhPEoou2bs1g== From: Shuai Liu <847807867@qq.com> To: linux-spi@vger.kernel.org, rust-for-linux@vger.kernel.org Cc: broonie@kernel.org, ojeda@kernel.org, dakr@kernel.org, linux-kernel@vger.kernel.org, Shuai Liu <847807867@qq.com> Subject: [PATCH 2/3] rust: spi: add SPI driver abstractions Date: Mon, 26 Oct 2026 14:29:04 +0800 X-OQ-MSGID: <20261026062905.6570-3-847807867@qq.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261026062905.6570-1-847807867@qq.com> References: <20261026062905.6570-1-847807867@qq.com> X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Add the Rust abstractions for the SPI driver subsystem, allowing SPI drivers to be written in Rust. This adds the following abstractions: - `spi::DeviceId`: a driver-side device id. - `spi::Adapter`: the registration of SPI drivers, implementing `driver::DriverLayout` and `driver::RegistrationOps`. - `spi::Driver`: the trait that SPI drivers implement, with `probe()`, `shutdown()` and `unbind()` callbacks. - `spi::SpiDevice`: a representation of `struct spi_device`, providing device configuration accessors and the `setup()`, `write()`, `read()` and `write_then_read()` operations. - `module_spi_driver!` and `spi_device_table!` macros. Signed-off-by: Shuai Liu <847807867@qq.com> --- rust/kernel/Kconfig.test | 11 + rust/kernel/lib.rs | 1 + rust/kernel/spi.rs | 529 +++++++++++++++++++++++++++++++++++++++ 3 files changed, 541 insertions(+) create mode 100644 rust/kernel/spi.rs diff --git a/rust/kernel/Kconfig.test b/rust/kernel/Kconfig.test index 3bf4194f28c7..bda70dcc7793 100644 --- a/rust/kernel/Kconfig.test +++ b/rust/kernel/Kconfig.test @@ -94,6 +94,17 @@ config RUST_BUG_KUNIT_TEST If unsure, say N. +config RUST_SPI_KUNIT_TEST + bool "KUnit tests for the Rust SPI driver abstractions" if !KUNIT_ALL_TESTS + depends on SPI=y + default KUNIT_ALL_TESTS + help + This option enables KUnit tests for the Rust SPI driver + abstractions. These are only for development and testing, not + for regular kernel use cases. + + If unsure, say N. + config RUST_TIME_KUNIT_TEST bool "KUnit tests for the Rust time API" if !KUNIT_ALL_TESTS default KUNIT_ALL_TESTS diff --git a/rust/kernel/lib.rs b/rust/kernel/lib.rs index a4747f75b163..abef0897af60 100644 --- a/rust/kernel/lib.rs +++ b/rust/kernel/lib.rs @@ -133,6 +133,7 @@ pub mod sizes; #[cfg(CONFIG_SOC_BUS)] pub mod soc; +pub mod spi; #[doc(hidden)] pub mod std_vendor; pub mod str; diff --git a/rust/kernel/spi.rs b/rust/kernel/spi.rs new file mode 100644 index 000000000000..65260f0c4934 --- /dev/null +++ b/rust/kernel/spi.rs @@ -0,0 +1,529 @@ +// SPDX-License-Identifier: GPL-2.0 + +//! SPI Driver subsystem +//! +//! This module adds abstractions for the SPI driver subsystem, allowing drivers to be +//! written in Rust for SPI devices. + +// SPI Driver abstractions. +use crate::{ + acpi, + device, + device_id::{ + RawDeviceId, + RawDeviceIdIndex, // + }, + driver, + error::*, + of, + prelude::*, + sync::aref::AlwaysRefCounted, + types::Opaque, // +}; + +use core::{ + marker::PhantomData, + mem::offset_of, + ptr::NonNull, // +}; + +/// An SPI device id table. +#[repr(transparent)] +#[derive(Clone, Copy)] +pub struct DeviceId(bindings::spi_device_id); + +impl DeviceId { + const SPI_NAME_SIZE: usize = 32; + + /// Create a new device id from an SPI 'id' string. + #[inline(always)] + pub const fn new(id: &'static CStr) -> Self { + let src = id.to_bytes_with_nul(); + build_assert!(src.len() <= Self::SPI_NAME_SIZE, "ID exceeds 32 bytes"); + let mut spi: bindings::spi_device_id = pin_init::zeroed(); + let mut i = 0; + while i < src.len() { + spi.name[i] = src[i]; + i += 1; + } + + Self(spi) + } +} + +// SAFETY: `DeviceId` is a `#[repr(transparent)]` wrapper of `spi_device_id` and does not add +// additional invariants, so it's safe to transmute to `RawType`. +unsafe impl RawDeviceId for DeviceId { + type RawType = bindings::spi_device_id; +} + +// SAFETY: `DRIVER_DATA_OFFSET` is the offset to the `driver_data` field. +unsafe impl RawDeviceIdIndex for DeviceId { + const DRIVER_DATA_OFFSET: usize = core::mem::offset_of!(bindings::spi_device_id, driver_data); +} + +/// IdTable type for SPI +pub type IdTable = &'static dyn kernel::device_id::IdTable; + +/// Create a SPI `IdTable` with its alias for modpost. +#[macro_export] +macro_rules! spi_device_table { + ($($tt:tt)*) => { + $crate::module_device_table!("spi", $crate::spi::DeviceId, $($tt)*); + }; +} + +/// An adapter for the registration of SPI drivers. +pub struct Adapter(T); + +// SAFETY: +// - `bindings::spi_driver` is a C type declared as `repr(C)`. +// - `T::Data` is the type of the driver's device private data. +// - `struct spi_driver` embeds a `struct device_driver`. +// - `DEVICE_DRIVER_OFFSET` is the correct byte offset to the embedded `struct device_driver`. +unsafe impl driver::DriverLayout for Adapter { + type DriverType = bindings::spi_driver; + type DriverData<'bound> = T::Data<'bound>; + const DEVICE_DRIVER_OFFSET: usize = core::mem::offset_of!(Self::DriverType, driver); +} + +// SAFETY: A call to `unregister` for a given instance of `DriverType` is guaranteed to be valid if +// a preceding call to `register` has been successful. +unsafe impl driver::RegistrationOps for Adapter { + unsafe fn register( + sdrv: &Opaque, + name: &'static CStr, + module: &'static ThisModule, + ) -> Result { + build_assert!( + T::ACPI_ID_TABLE.is_some() || T::OF_ID_TABLE.is_some() || T::SPI_ID_TABLE.is_some(), + "At least one of ACPI/OF/Legacy tables must be present when registering an spi driver" + ); + + let spi_table = match T::SPI_ID_TABLE { + Some(table) => table.as_ptr(), + None => core::ptr::null(), + }; + + let of_table = match T::OF_ID_TABLE { + Some(table) => table.as_ptr(), + None => core::ptr::null(), + }; + + let acpi_table = match T::ACPI_ID_TABLE { + Some(table) => table.as_ptr(), + None => core::ptr::null(), + }; + + // SAFETY: It's safe to set the fields of `struct spi_driver` on initialization. + unsafe { + (*sdrv.get()).driver.name = name.as_char_ptr(); + (*sdrv.get()).probe = Some(Self::probe_callback); + (*sdrv.get()).remove = Some(Self::remove_callback); + (*sdrv.get()).shutdown = Some(Self::shutdown_callback); + (*sdrv.get()).id_table = spi_table; + (*sdrv.get()).driver.of_match_table = of_table; + (*sdrv.get()).driver.acpi_match_table = acpi_table; + } + + // SAFETY: `sdrv` is guaranteed to be a valid `DriverType`. + to_result(unsafe { bindings::__spi_register_driver(module.as_ptr(), sdrv.get()) }) + } + + unsafe fn unregister(sdrv: &Opaque) { + // SAFETY: `sdrv` is guaranteed to be a valid `DriverType`. + unsafe { bindings::spi_unregister_driver(sdrv.get()) } + } +} + +impl Adapter { + extern "C" fn probe_callback(sdev: *mut bindings::spi_device) -> kernel::ffi::c_int { + // SAFETY: The SPI bus only ever calls the probe callback with a valid pointer to a + // `struct spi_device`. + // + // INVARIANT: `sdev` is valid for the duration of `probe_callback()`. + let sdev = unsafe { &*sdev.cast::>>() }; + + let info = Self::spi_id_info(sdev).or_else(|| { + // SAFETY: `sdev` matched data is of type `Self::IdInfo`. + unsafe { ::id_info(sdev.as_ref()) } + }); + + from_result(|| { + let data = T::probe(sdev, info); + + sdev.as_ref().set_drvdata(data)?; + Ok(0) + }) + } + + extern "C" fn remove_callback(sdev: *mut bindings::spi_device) { + // SAFETY: `sdev` is a valid pointer to a `struct spi_device`. + let sdev = unsafe { &*sdev.cast::>>() }; + + // SAFETY: `remove_callback` is only ever called after a successful call to + // `probe_callback`, hence it's guaranteed that `SpiDevice::set_drvdata()` has been called + // and stored a `Pin>>`. + let data = unsafe { sdev.as_ref().drvdata_borrow::>() }; + + T::unbind(sdev, data); + } + + extern "C" fn shutdown_callback(sdev: *mut bindings::spi_device) { + // SAFETY: `shutdown_callback` is only ever called for a valid `sdev` + let sdev = unsafe { &*sdev.cast::>>() }; + + // SAFETY: `shutdown_callback` is only ever called after a successful call to + // `probe_callback`, hence it's guaranteed that `SpiDevice::set_drvdata()` has been called + // and stored a `Pin>>`. + let data = unsafe { sdev.as_ref().drvdata_borrow::>() }; + + T::shutdown(sdev, data); + } + + /// Returns the driver's private data from the matching entry in the [`spi::IdTable`], if any. + /// + /// If this returns `None`, it means there is no match with an entry in the [`spi::IdTable`]. + fn spi_id_info(dev: &SpiDevice) -> Option<&'static ::IdInfo> { + // Ensure the driver has an SPI id table: the entries matched by `spi_get_device_id()` + // below come from the table registered in `register()`, i.e. `T::SPI_ID_TABLE`, which + // guarantees that every `driver_data` field is a valid `T::IdInfo`. + T::SPI_ID_TABLE.as_ref()?; + + // SAFETY: + // - `dev` is guaranteed to be valid while it's alive, and so is `dev.as_raw()`. + // + // `spi_get_device_id()` looks up the registered driver id table using the device's + // modalias and returns either a pointer to a matching entry or `NULL`. + let raw_id = unsafe { bindings::spi_get_device_id(dev.as_raw()) }; + + if raw_id.is_null() { + return None; + } + + // SAFETY: `DeviceId` is a `#[repr(transparent)` wrapper of `struct spi_device_id` and + // does not add additional invariants, so it's safe to transmute. + let id = unsafe { &*raw_id.cast::() }; + + // SAFETY: `id` comes from `table` which is of type `IdArray<_, Self::IdInfo>`. + Some(unsafe { id.info_unchecked::() }) + } +} + +impl driver::Adapter for Adapter { + type IdInfo = T::IdInfo; + + fn of_id_table() -> Option> { + T::OF_ID_TABLE + } + + fn acpi_id_table() -> Option> { + T::ACPI_ID_TABLE + } +} + +/// Declares a kernel module that exposes a single spi driver. +/// +/// # Examples +/// +/// ```ignore +/// kernel::module_spi_driver! { +/// type: MyDriver, +/// name: "Module name", +/// authors: ["Author name"], +/// description: "Description", +/// license: "GPL v2", +/// } +/// ``` +#[macro_export] +macro_rules! module_spi_driver { + ($($f:tt)*) => { + $crate::module_driver!(, $crate::spi::Adapter, { $($f)* }); + }; +} + +/// The spi driver trait. +/// +/// Drivers must implement this trait in order to get a spi driver registered. +/// +/// # Example +/// +///``` +/// # use kernel::{device::Core, spi, of}; +/// +/// struct MyDriver; +/// +/// kernel::spi_device_table!( +/// SPI_TABLE, +/// ::IdInfo, +/// [ +/// (spi::DeviceId::new(c"rust_driver_spi"), ()) +/// ] +/// ); +/// +/// kernel::of_device_table!( +/// OF_TABLE, +/// ::IdInfo, +/// [ +/// (of::DeviceId::new(c"test,device"), ()) +/// ] +/// ); +/// +/// impl spi::Driver for MyDriver { +/// type IdInfo = (); +/// type Data<'bound> = Self; +/// const SPI_ID_TABLE: Option> = Some(&SPI_TABLE); +/// const OF_ID_TABLE: Option> = Some(&OF_TABLE); +/// +/// fn probe<'bound>( +/// _sdev: &'bound spi::SpiDevice>, +/// _id_info: Option<&'bound Self::IdInfo>, +/// ) -> impl PinInit, Error> + 'bound { +/// Err(ENODEV) +/// } +/// +/// fn shutdown<'bound>( +/// _sdev: &'bound spi::SpiDevice>, +/// this: Pin<&Self::Data<'bound>>, +/// ) { +/// } +/// } +///``` +pub trait Driver { + /// The type holding information about each device id supported by the driver. + // TODO: Use `associated_type_defaults` once stabilized: + // + // ``` + // type IdInfo: 'static = (); + // ``` + type IdInfo: 'static; + + /// The type of the driver's bus device private data. + type Data<'bound>: Send + 'bound; + + /// The table of device ids supported by the driver. + const SPI_ID_TABLE: Option> = None; + + /// The table of OF device ids supported by the driver. + const OF_ID_TABLE: Option> = None; + + /// The table of ACPI device ids supported by the driver. + const ACPI_ID_TABLE: Option> = None; + + /// SPI driver probe. + /// + /// Called when a new spi device is added or discovered. + /// Implementers should attempt to initialize the device here. + fn probe<'bound>( + dev: &'bound SpiDevice>, + id_info: Option<&'bound Self::IdInfo>, + ) -> impl PinInit, Error> + 'bound; + + /// SPI driver shutdown. + /// + /// Called by the kernel during system reboot or power-off to allow the [`Driver`] to bring the + /// [`SpiDevice`] into a safe state. Implementing this callback is optional. + /// + /// Typical actions include stopping transfers, disabling interrupts, or resetting the hardware + /// to prevent undesired behavior during shutdown. + /// + /// This callback is distinct from final resource cleanup, as the driver instance remains valid + /// after it returns. Any deallocation or teardown of driver-owned resources should instead be + /// handled in `Drop`. + fn shutdown<'bound>(dev: &'bound SpiDevice>, this: Pin<&Self::Data<'bound>>) { + let _ = (dev, this); + } + + /// SPI driver unbind. + /// + /// Called when the [`SpiDevice`] is unbound from its bound [`Driver`]. Implementing this + /// callback is optional. + /// + /// This callback serves as a place for drivers to perform teardown operations that require a + /// `&Device` or `&Device` reference. For instance, drivers may try to perform I/O + /// operations to gracefully tear down the device. + /// + /// Otherwise, release operations for driver resources should be performed in `Drop`. + fn unbind<'bound>(dev: &'bound SpiDevice>, this: Pin<&Self::Data<'bound>>) { + let _ = (dev, this); + } +} + +/// The spi device representation. +/// +/// This structure represents the Rust abstraction for a C `struct spi_device`. The +/// implementation abstracts the usage of an existing C `struct spi_device` that +/// gets passed from the C side. +/// +/// # Invariants +/// +/// A [`SpiDevice`] instance represents a valid `struct spi_device` created by the C portion of +/// the kernel. +#[repr(transparent)] +pub struct SpiDevice( + Opaque, + PhantomData, +); + +impl SpiDevice { + fn as_raw(&self) -> *mut bindings::spi_device { + self.0.get() + } + + /// Returns the maximum speed of the SPI device. + #[inline] + pub fn max_speed_hz(&self) -> u32 { + // SAFETY: By the type invariant of `Self`, `self.as_raw()` is a valid pointer to a + // `struct spi_device`. + unsafe { (*self.as_raw()).max_speed_hz } + } + + /// Returns the number of bits per word of the SPI device. + #[inline] + pub fn bits_per_word(&self) -> u8 { + // SAFETY: By the type invariant of `Self`, `self.as_raw()` is a valid pointer to a + // `struct spi_device`. + unsafe { (*self.as_raw()).bits_per_word } + } + + /// Returns the mode flags of the SPI device. + #[inline] + pub fn mode(&self) -> u32 { + // SAFETY: By the type invariant of `Self`, `self.as_raw()` is a valid pointer to a + // `struct spi_device`. + unsafe { (*self.as_raw()).mode } + } + + /// Configures the SPI device with the settings currently stored in it. + #[inline] + pub fn setup(&self) -> Result { + // SAFETY: By the type invariant of `Self`, `self.as_raw()` is a valid pointer to a + // `struct spi_device`. + to_result(unsafe { bindings::spi_setup(self.as_raw()) }) + } + + /// Writes the data from `buf` to the SPI device. + #[inline] + pub fn write(&self, buf: &[u8]) -> Result { + // SAFETY: By the type invariant of `Self`, `self.as_raw()` is a valid pointer to a + // `struct spi_device`. `buf` is valid for reads of length `buf.len()` for the duration + // of the call, which SPI core guarantees not to outlive. + to_result(unsafe { + bindings::spi_write(self.as_raw(), buf.as_ptr().cast(), buf.len()) + }) + } + + /// Reads data from the SPI device into `buf`. + #[inline] + pub fn read(&self, buf: &mut [u8]) -> Result { + // SAFETY: By the type invariant of `Self`, `self.as_raw()` is a valid pointer to a + // `struct spi_device`. `buf` is valid for writes of length `buf.len()` for the duration + // of the call, which SPI core guarantees not to outlive. + to_result(unsafe { + bindings::spi_read(self.as_raw(), buf.as_mut_ptr().cast(), buf.len()) + }) + } + + /// Writes the data from `write_buf` to the SPI device, then reads data from the SPI device + /// into `read_buf`. + #[inline] + pub fn write_then_read(&self, write_buf: &[u8], read_buf: &mut [u8]) -> Result { + let n_tx = u32::try_from(write_buf.len())?; + let n_rx = u32::try_from(read_buf.len())?; + + // SAFETY: By the type invariant of `Self`, `self.as_raw()` is a valid pointer to a + // `struct spi_device`. `write_buf` is valid for reads of length `write_buf.len()` and + // `read_buf` is valid for writes of length `read_buf.len()` for the duration of the + // call, which SPI core guarantees not to outlive. + to_result(unsafe { + bindings::spi_write_then_read( + self.as_raw(), + write_buf.as_ptr().cast(), + n_tx, + read_buf.as_mut_ptr().cast(), + n_rx, + ) + }) + } +} + +// SAFETY: `SpiDevice` is a transparent wrapper of `struct spi_device`. +// The offset is guaranteed to point to a valid device field inside `SpiDevice`. +unsafe impl device::AsBusDevice for SpiDevice { + const OFFSET: usize = offset_of!(bindings::spi_device, dev); +} + +// SAFETY: `SpiDevice` is a transparent wrapper of a type that doesn't depend on +// `SpiDevice`'s generic argument. +kernel::impl_device_context_deref!(unsafe { SpiDevice }); +kernel::impl_device_context_into_aref!(SpiDevice); + +// SAFETY: Instances of `SpiDevice` are always reference-counted. +unsafe impl AlwaysRefCounted for SpiDevice { + fn inc_ref(&self) { + // SAFETY: The existence of a shared reference guarantees that the refcount is non-zero. + unsafe { bindings::get_device(self.as_ref().as_raw()) }; + } + + unsafe fn dec_ref(obj: NonNull) { + // SAFETY: The safety requirements guarantee that the refcount is non-zero. + unsafe { bindings::put_device(&raw mut (*obj.as_ref().as_raw()).dev) } + } +} + +impl AsRef> for SpiDevice { + fn as_ref(&self) -> &device::Device { + let raw = self.as_raw(); + // SAFETY: By the type invariant of `Self`, `self.as_raw()` is a pointer to a valid + // `struct spi_device`. + let dev = unsafe { &raw mut (*raw).dev }; + + // SAFETY: `dev` points to a valid `struct device`. + unsafe { device::Device::from_raw(dev) } + } +} + +// SAFETY: A `SpiDevice` is always reference-counted and can be released from any thread. +unsafe impl Send for SpiDevice {} + +// SAFETY: `SpiDevice` can be shared among threads because all methods of `SpiDevice` +// (i.e. `SpiDevice) are thread safe. +unsafe impl Sync for SpiDevice {} + +#[cfg(CONFIG_RUST_SPI_KUNIT_TEST)] +#[kunit_tests(rust_kernel_spi)] +mod tests { + use super::*; + + #[test] + fn device_id_name_size() { + assert_eq!(DeviceId::SPI_NAME_SIZE, bindings::SPI_NAME_SIZE as usize); + } + + #[test] + fn device_id_new_short_name() { + let id = DeviceId::new(c"rust_driver_spi"); + + let expected: &[u8] = b"rust_driver_spi\0"; + assert_eq!(&id.0.name[..expected.len()], expected); + + // The remaining bytes must be zeroed. + assert!(id.0.name[expected.len()..].iter().all(|&byte| byte == 0)); + } + + #[test] + fn device_id_new_empty_name() { + let id = DeviceId::new(c""); + + assert!(id.0.name.iter().all(|&byte| byte == 0)); + } + + #[test] + fn device_id_new_max_length_name() { + // 31 bytes plus the NUL terminator is the maximum accepted name length. + let id = DeviceId::new(c"abcdefghijklmnopqrstuvwxyz01234"); + + let expected: &[u8] = b"abcdefghijklmnopqrstuvwxyz01234\0"; + assert_eq!(&id.0.name[..], expected); + } +} -- 2.43.0