97  * fw_csr_string() - reads a string from the configuration ROM
501  * the config ROM.  We do all this with a cached bus generation.  If the bus
504  * are reading the ROM may have changed the ROM during the reset.
511 	u32 *rom, *stack;  in read_config_rom()  local
515 	rom = kmalloc(sizeof(*rom) * MAX_CONFIG_ROM_SIZE +  in read_config_rom()
517 	if (rom == NULL)  in read_config_rom()
520 	stack = &rom[MAX_CONFIG_ROM_SIZE];  in read_config_rom()
521 	memset(rom, 0, sizeof(*rom) * MAX_CONFIG_ROM_SIZE);  in read_config_rom()
527 		ret = read_rom(device, generation, i, &rom[i]);  in read_config_rom()
533 		 * rom to indicate that they are booting (for example,  in read_config_rom()
538 		if (i == 0 && rom[i] == 0) {  in read_config_rom()
555 	if ((rom[2] & 0x7) < device->max_speed ||  in read_config_rom()
573 	 * Now parse the config rom.  The config rom is a recursive  in read_config_rom()
585 		 * lower 24 bits is the offset into the config rom,  in read_config_rom()
597 		ret = read_rom(device, generation, i, &rom[i]);  in read_config_rom()
600 		end = i + (rom[i] >> 16) + 1;  in read_config_rom()
603 			 * This block extends outside the config ROM which is  in read_config_rom()
607 			fw_err(card, "skipped invalid ROM block %x at %llx\n",  in read_config_rom()
608 			       rom[i],  in read_config_rom()
610 			rom[i] = 0;  in read_config_rom()
621 			ret = read_rom(device, generation, i, &rom[i]);  in read_config_rom()
625 			if ((key >> 30) != 3 || (rom[i] >> 30) < 2)  in read_config_rom()
628 			 * Offset points outside the ROM.  May be a firmware  in read_config_rom()
629 			 * bug or an Extended ROM entry (IEEE 1212-2001 clause  in read_config_rom()
632 			 * the ROM don't have to check offsets all the time.  in read_config_rom()
634 			if (i + (rom[i] & 0xffffff) >= MAX_CONFIG_ROM_SIZE) {  in read_config_rom()
636 				       "skipped unsupported ROM entry %x at %llx\n",  in read_config_rom()
637 				       rom[i],  in read_config_rom()
639 				rom[i] = 0;  in read_config_rom()
642 			stack[sp++] = i + rom[i];  in read_config_rom()
649 	new_rom = kmemdup(rom, length * 4, GFP_KERNEL);  in read_config_rom()
662 	device->max_rec	= rom[2] >> 12 & 0xf;  in read_config_rom()
663 	device->cmc	= rom[2] >> 30 & 1;  in read_config_rom()
664 	device->irmc	= rom[2] >> 31 & 1;  in read_config_rom()
666 	kfree(rom);  in read_config_rom()
775  * rom.  It shouldn't be necessary to tweak these; if the device
776  * doesn't respond to a config rom read within 10 seconds, it's not
1006 				fw_notice(card, "giving up on node %x: reading config rom failed: %s\n",  in fw_device_init()
1084 	 * root node config rom.  If this races with a bus reset we  in fw_device_init()
1250 		 * first config rom scan half a second after bus reset.  in fw_node_event()
1298 		 * process of reading its config rom  in fw_node_event()
1302 		 * scheduled to read it's config rom, and we just put  in fw_node_event()