Merge v3.9-rc5 into usb-next
[GitHub/mt8127/android_kernel_alcatel_ttab.git] / drivers / usb / chipidea / udc.c
1 /*
2 * udc.c - ChipIdea UDC driver
3 *
4 * Copyright (C) 2008 Chipidea - MIPS Technologies, Inc. All rights reserved.
5 *
6 * Author: David Lopo
7 *
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License version 2 as
10 * published by the Free Software Foundation.
11 */
12
13 #include <linux/delay.h>
14 #include <linux/device.h>
15 #include <linux/dmapool.h>
16 #include <linux/err.h>
17 #include <linux/irqreturn.h>
18 #include <linux/kernel.h>
19 #include <linux/slab.h>
20 #include <linux/pm_runtime.h>
21 #include <linux/usb/ch9.h>
22 #include <linux/usb/gadget.h>
23 #include <linux/usb/otg.h>
24 #include <linux/usb/chipidea.h>
25
26 #include "ci.h"
27 #include "udc.h"
28 #include "bits.h"
29 #include "debug.h"
30
31 /* control endpoint description */
32 static const struct usb_endpoint_descriptor
33 ctrl_endpt_out_desc = {
34 .bLength = USB_DT_ENDPOINT_SIZE,
35 .bDescriptorType = USB_DT_ENDPOINT,
36
37 .bEndpointAddress = USB_DIR_OUT,
38 .bmAttributes = USB_ENDPOINT_XFER_CONTROL,
39 .wMaxPacketSize = cpu_to_le16(CTRL_PAYLOAD_MAX),
40 };
41
42 static const struct usb_endpoint_descriptor
43 ctrl_endpt_in_desc = {
44 .bLength = USB_DT_ENDPOINT_SIZE,
45 .bDescriptorType = USB_DT_ENDPOINT,
46
47 .bEndpointAddress = USB_DIR_IN,
48 .bmAttributes = USB_ENDPOINT_XFER_CONTROL,
49 .wMaxPacketSize = cpu_to_le16(CTRL_PAYLOAD_MAX),
50 };
51
52 /**
53 * hw_ep_bit: calculates the bit number
54 * @num: endpoint number
55 * @dir: endpoint direction
56 *
57 * This function returns bit number
58 */
59 static inline int hw_ep_bit(int num, int dir)
60 {
61 return num + (dir ? 16 : 0);
62 }
63
64 static inline int ep_to_bit(struct ci13xxx *ci, int n)
65 {
66 int fill = 16 - ci->hw_ep_max / 2;
67
68 if (n >= ci->hw_ep_max / 2)
69 n += fill;
70
71 return n;
72 }
73
74 /**
75 * hw_device_state: enables/disables interrupts (execute without interruption)
76 * @dma: 0 => disable, !0 => enable and set dma engine
77 *
78 * This function returns an error code
79 */
80 static int hw_device_state(struct ci13xxx *ci, u32 dma)
81 {
82 if (dma) {
83 hw_write(ci, OP_ENDPTLISTADDR, ~0, dma);
84 /* interrupt, error, port change, reset, sleep/suspend */
85 hw_write(ci, OP_USBINTR, ~0,
86 USBi_UI|USBi_UEI|USBi_PCI|USBi_URI|USBi_SLI);
87 } else {
88 hw_write(ci, OP_USBINTR, ~0, 0);
89 }
90 return 0;
91 }
92
93 /**
94 * hw_ep_flush: flush endpoint fifo (execute without interruption)
95 * @num: endpoint number
96 * @dir: endpoint direction
97 *
98 * This function returns an error code
99 */
100 static int hw_ep_flush(struct ci13xxx *ci, int num, int dir)
101 {
102 int n = hw_ep_bit(num, dir);
103
104 do {
105 /* flush any pending transfer */
106 hw_write(ci, OP_ENDPTFLUSH, BIT(n), BIT(n));
107 while (hw_read(ci, OP_ENDPTFLUSH, BIT(n)))
108 cpu_relax();
109 } while (hw_read(ci, OP_ENDPTSTAT, BIT(n)));
110
111 return 0;
112 }
113
114 /**
115 * hw_ep_disable: disables endpoint (execute without interruption)
116 * @num: endpoint number
117 * @dir: endpoint direction
118 *
119 * This function returns an error code
120 */
121 static int hw_ep_disable(struct ci13xxx *ci, int num, int dir)
122 {
123 hw_ep_flush(ci, num, dir);
124 hw_write(ci, OP_ENDPTCTRL + num,
125 dir ? ENDPTCTRL_TXE : ENDPTCTRL_RXE, 0);
126 return 0;
127 }
128
129 /**
130 * hw_ep_enable: enables endpoint (execute without interruption)
131 * @num: endpoint number
132 * @dir: endpoint direction
133 * @type: endpoint type
134 *
135 * This function returns an error code
136 */
137 static int hw_ep_enable(struct ci13xxx *ci, int num, int dir, int type)
138 {
139 u32 mask, data;
140
141 if (dir) {
142 mask = ENDPTCTRL_TXT; /* type */
143 data = type << __ffs(mask);
144
145 mask |= ENDPTCTRL_TXS; /* unstall */
146 mask |= ENDPTCTRL_TXR; /* reset data toggle */
147 data |= ENDPTCTRL_TXR;
148 mask |= ENDPTCTRL_TXE; /* enable */
149 data |= ENDPTCTRL_TXE;
150 } else {
151 mask = ENDPTCTRL_RXT; /* type */
152 data = type << __ffs(mask);
153
154 mask |= ENDPTCTRL_RXS; /* unstall */
155 mask |= ENDPTCTRL_RXR; /* reset data toggle */
156 data |= ENDPTCTRL_RXR;
157 mask |= ENDPTCTRL_RXE; /* enable */
158 data |= ENDPTCTRL_RXE;
159 }
160 hw_write(ci, OP_ENDPTCTRL + num, mask, data);
161 return 0;
162 }
163
164 /**
165 * hw_ep_get_halt: return endpoint halt status
166 * @num: endpoint number
167 * @dir: endpoint direction
168 *
169 * This function returns 1 if endpoint halted
170 */
171 static int hw_ep_get_halt(struct ci13xxx *ci, int num, int dir)
172 {
173 u32 mask = dir ? ENDPTCTRL_TXS : ENDPTCTRL_RXS;
174
175 return hw_read(ci, OP_ENDPTCTRL + num, mask) ? 1 : 0;
176 }
177
178 /**
179 * hw_test_and_clear_setup_status: test & clear setup status (execute without
180 * interruption)
181 * @n: endpoint number
182 *
183 * This function returns setup status
184 */
185 static int hw_test_and_clear_setup_status(struct ci13xxx *ci, int n)
186 {
187 n = ep_to_bit(ci, n);
188 return hw_test_and_clear(ci, OP_ENDPTSETUPSTAT, BIT(n));
189 }
190
191 /**
192 * hw_ep_prime: primes endpoint (execute without interruption)
193 * @num: endpoint number
194 * @dir: endpoint direction
195 * @is_ctrl: true if control endpoint
196 *
197 * This function returns an error code
198 */
199 static int hw_ep_prime(struct ci13xxx *ci, int num, int dir, int is_ctrl)
200 {
201 int n = hw_ep_bit(num, dir);
202
203 if (is_ctrl && dir == RX && hw_read(ci, OP_ENDPTSETUPSTAT, BIT(num)))
204 return -EAGAIN;
205
206 hw_write(ci, OP_ENDPTPRIME, BIT(n), BIT(n));
207
208 while (hw_read(ci, OP_ENDPTPRIME, BIT(n)))
209 cpu_relax();
210 if (is_ctrl && dir == RX && hw_read(ci, OP_ENDPTSETUPSTAT, BIT(num)))
211 return -EAGAIN;
212
213 /* status shoult be tested according with manual but it doesn't work */
214 return 0;
215 }
216
217 /**
218 * hw_ep_set_halt: configures ep halt & resets data toggle after clear (execute
219 * without interruption)
220 * @num: endpoint number
221 * @dir: endpoint direction
222 * @value: true => stall, false => unstall
223 *
224 * This function returns an error code
225 */
226 static int hw_ep_set_halt(struct ci13xxx *ci, int num, int dir, int value)
227 {
228 if (value != 0 && value != 1)
229 return -EINVAL;
230
231 do {
232 enum ci13xxx_regs reg = OP_ENDPTCTRL + num;
233 u32 mask_xs = dir ? ENDPTCTRL_TXS : ENDPTCTRL_RXS;
234 u32 mask_xr = dir ? ENDPTCTRL_TXR : ENDPTCTRL_RXR;
235
236 /* data toggle - reserved for EP0 but it's in ESS */
237 hw_write(ci, reg, mask_xs|mask_xr,
238 value ? mask_xs : mask_xr);
239 } while (value != hw_ep_get_halt(ci, num, dir));
240
241 return 0;
242 }
243
244 /**
245 * hw_is_port_high_speed: test if port is high speed
246 *
247 * This function returns true if high speed port
248 */
249 static int hw_port_is_high_speed(struct ci13xxx *ci)
250 {
251 return ci->hw_bank.lpm ? hw_read(ci, OP_DEVLC, DEVLC_PSPD) :
252 hw_read(ci, OP_PORTSC, PORTSC_HSP);
253 }
254
255 /**
256 * hw_read_intr_enable: returns interrupt enable register
257 *
258 * This function returns register data
259 */
260 static u32 hw_read_intr_enable(struct ci13xxx *ci)
261 {
262 return hw_read(ci, OP_USBINTR, ~0);
263 }
264
265 /**
266 * hw_read_intr_status: returns interrupt status register
267 *
268 * This function returns register data
269 */
270 static u32 hw_read_intr_status(struct ci13xxx *ci)
271 {
272 return hw_read(ci, OP_USBSTS, ~0);
273 }
274
275 /**
276 * hw_test_and_clear_complete: test & clear complete status (execute without
277 * interruption)
278 * @n: endpoint number
279 *
280 * This function returns complete status
281 */
282 static int hw_test_and_clear_complete(struct ci13xxx *ci, int n)
283 {
284 n = ep_to_bit(ci, n);
285 return hw_test_and_clear(ci, OP_ENDPTCOMPLETE, BIT(n));
286 }
287
288 /**
289 * hw_test_and_clear_intr_active: test & clear active interrupts (execute
290 * without interruption)
291 *
292 * This function returns active interrutps
293 */
294 static u32 hw_test_and_clear_intr_active(struct ci13xxx *ci)
295 {
296 u32 reg = hw_read_intr_status(ci) & hw_read_intr_enable(ci);
297
298 hw_write(ci, OP_USBSTS, ~0, reg);
299 return reg;
300 }
301
302 /**
303 * hw_test_and_clear_setup_guard: test & clear setup guard (execute without
304 * interruption)
305 *
306 * This function returns guard value
307 */
308 static int hw_test_and_clear_setup_guard(struct ci13xxx *ci)
309 {
310 return hw_test_and_write(ci, OP_USBCMD, USBCMD_SUTW, 0);
311 }
312
313 /**
314 * hw_test_and_set_setup_guard: test & set setup guard (execute without
315 * interruption)
316 *
317 * This function returns guard value
318 */
319 static int hw_test_and_set_setup_guard(struct ci13xxx *ci)
320 {
321 return hw_test_and_write(ci, OP_USBCMD, USBCMD_SUTW, USBCMD_SUTW);
322 }
323
324 /**
325 * hw_usb_set_address: configures USB address (execute without interruption)
326 * @value: new USB address
327 *
328 * This function explicitly sets the address, without the "USBADRA" (advance)
329 * feature, which is not supported by older versions of the controller.
330 */
331 static void hw_usb_set_address(struct ci13xxx *ci, u8 value)
332 {
333 hw_write(ci, OP_DEVICEADDR, DEVICEADDR_USBADR,
334 value << __ffs(DEVICEADDR_USBADR));
335 }
336
337 /**
338 * hw_usb_reset: restart device after a bus reset (execute without
339 * interruption)
340 *
341 * This function returns an error code
342 */
343 static int hw_usb_reset(struct ci13xxx *ci)
344 {
345 hw_usb_set_address(ci, 0);
346
347 /* ESS flushes only at end?!? */
348 hw_write(ci, OP_ENDPTFLUSH, ~0, ~0);
349
350 /* clear setup token semaphores */
351 hw_write(ci, OP_ENDPTSETUPSTAT, 0, 0);
352
353 /* clear complete status */
354 hw_write(ci, OP_ENDPTCOMPLETE, 0, 0);
355
356 /* wait until all bits cleared */
357 while (hw_read(ci, OP_ENDPTPRIME, ~0))
358 udelay(10); /* not RTOS friendly */
359
360 /* reset all endpoints ? */
361
362 /* reset internal status and wait for further instructions
363 no need to verify the port reset status (ESS does it) */
364
365 return 0;
366 }
367
368 /******************************************************************************
369 * UTIL block
370 *****************************************************************************/
371 /**
372 * _usb_addr: calculates endpoint address from direction & number
373 * @ep: endpoint
374 */
375 static inline u8 _usb_addr(struct ci13xxx_ep *ep)
376 {
377 return ((ep->dir == TX) ? USB_ENDPOINT_DIR_MASK : 0) | ep->num;
378 }
379
380 /**
381 * _hardware_queue: configures a request at hardware level
382 * @gadget: gadget
383 * @mEp: endpoint
384 *
385 * This function returns an error code
386 */
387 static int _hardware_enqueue(struct ci13xxx_ep *mEp, struct ci13xxx_req *mReq)
388 {
389 struct ci13xxx *ci = mEp->ci;
390 unsigned i;
391 int ret = 0;
392 unsigned length = mReq->req.length;
393
394 /* don't queue twice */
395 if (mReq->req.status == -EALREADY)
396 return -EALREADY;
397
398 mReq->req.status = -EALREADY;
399
400 if (mReq->req.zero && length && (length % mEp->ep.maxpacket == 0)) {
401 mReq->zptr = dma_pool_alloc(mEp->td_pool, GFP_ATOMIC,
402 &mReq->zdma);
403 if (mReq->zptr == NULL)
404 return -ENOMEM;
405
406 memset(mReq->zptr, 0, sizeof(*mReq->zptr));
407 mReq->zptr->next = cpu_to_le32(TD_TERMINATE);
408 mReq->zptr->token = cpu_to_le32(TD_STATUS_ACTIVE);
409 if (!mReq->req.no_interrupt)
410 mReq->zptr->token |= cpu_to_le32(TD_IOC);
411 }
412 ret = usb_gadget_map_request(&ci->gadget, &mReq->req, mEp->dir);
413 if (ret)
414 return ret;
415
416 /*
417 * TD configuration
418 * TODO - handle requests which spawns into several TDs
419 */
420 memset(mReq->ptr, 0, sizeof(*mReq->ptr));
421 mReq->ptr->token = cpu_to_le32(length << __ffs(TD_TOTAL_BYTES));
422 mReq->ptr->token &= cpu_to_le32(TD_TOTAL_BYTES);
423 mReq->ptr->token |= cpu_to_le32(TD_STATUS_ACTIVE);
424 if (mReq->zptr) {
425 mReq->ptr->next = cpu_to_le32(mReq->zdma);
426 } else {
427 mReq->ptr->next = cpu_to_le32(TD_TERMINATE);
428 if (!mReq->req.no_interrupt)
429 mReq->ptr->token |= cpu_to_le32(TD_IOC);
430 }
431 mReq->ptr->page[0] = cpu_to_le32(mReq->req.dma);
432 for (i = 1; i < TD_PAGE_COUNT; i++) {
433 u32 page = mReq->req.dma + i * CI13XXX_PAGE_SIZE;
434 page &= ~TD_RESERVED_MASK;
435 mReq->ptr->page[i] = cpu_to_le32(page);
436 }
437
438 if (!list_empty(&mEp->qh.queue)) {
439 struct ci13xxx_req *mReqPrev;
440 int n = hw_ep_bit(mEp->num, mEp->dir);
441 int tmp_stat;
442 u32 next = mReq->dma & TD_ADDR_MASK;
443
444 mReqPrev = list_entry(mEp->qh.queue.prev,
445 struct ci13xxx_req, queue);
446 if (mReqPrev->zptr)
447 mReqPrev->zptr->next = cpu_to_le32(next);
448 else
449 mReqPrev->ptr->next = cpu_to_le32(next);
450 wmb();
451 if (hw_read(ci, OP_ENDPTPRIME, BIT(n)))
452 goto done;
453 do {
454 hw_write(ci, OP_USBCMD, USBCMD_ATDTW, USBCMD_ATDTW);
455 tmp_stat = hw_read(ci, OP_ENDPTSTAT, BIT(n));
456 } while (!hw_read(ci, OP_USBCMD, USBCMD_ATDTW));
457 hw_write(ci, OP_USBCMD, USBCMD_ATDTW, 0);
458 if (tmp_stat)
459 goto done;
460 }
461
462 /* QH configuration */
463 mEp->qh.ptr->td.next = cpu_to_le32(mReq->dma); /* TERMINATE = 0 */
464 mEp->qh.ptr->td.token &=
465 cpu_to_le32(~(TD_STATUS_HALTED|TD_STATUS_ACTIVE));
466
467 wmb(); /* synchronize before ep prime */
468
469 ret = hw_ep_prime(ci, mEp->num, mEp->dir,
470 mEp->type == USB_ENDPOINT_XFER_CONTROL);
471 done:
472 return ret;
473 }
474
475 /**
476 * _hardware_dequeue: handles a request at hardware level
477 * @gadget: gadget
478 * @mEp: endpoint
479 *
480 * This function returns an error code
481 */
482 static int _hardware_dequeue(struct ci13xxx_ep *mEp, struct ci13xxx_req *mReq)
483 {
484 u32 tmptoken = le32_to_cpu(mReq->ptr->token);
485
486 if (mReq->req.status != -EALREADY)
487 return -EINVAL;
488
489 if ((TD_STATUS_ACTIVE & tmptoken) != 0)
490 return -EBUSY;
491
492 if (mReq->zptr) {
493 if ((cpu_to_le32(TD_STATUS_ACTIVE) & mReq->zptr->token) != 0)
494 return -EBUSY;
495 dma_pool_free(mEp->td_pool, mReq->zptr, mReq->zdma);
496 mReq->zptr = NULL;
497 }
498
499 mReq->req.status = 0;
500
501 usb_gadget_unmap_request(&mEp->ci->gadget, &mReq->req, mEp->dir);
502
503 mReq->req.status = tmptoken & TD_STATUS;
504 if ((TD_STATUS_HALTED & mReq->req.status) != 0)
505 mReq->req.status = -1;
506 else if ((TD_STATUS_DT_ERR & mReq->req.status) != 0)
507 mReq->req.status = -1;
508 else if ((TD_STATUS_TR_ERR & mReq->req.status) != 0)
509 mReq->req.status = -1;
510
511 mReq->req.actual = tmptoken & TD_TOTAL_BYTES;
512 mReq->req.actual >>= __ffs(TD_TOTAL_BYTES);
513 mReq->req.actual = mReq->req.length - mReq->req.actual;
514 mReq->req.actual = mReq->req.status ? 0 : mReq->req.actual;
515
516 return mReq->req.actual;
517 }
518
519 /**
520 * _ep_nuke: dequeues all endpoint requests
521 * @mEp: endpoint
522 *
523 * This function returns an error code
524 * Caller must hold lock
525 */
526 static int _ep_nuke(struct ci13xxx_ep *mEp)
527 __releases(mEp->lock)
528 __acquires(mEp->lock)
529 {
530 if (mEp == NULL)
531 return -EINVAL;
532
533 hw_ep_flush(mEp->ci, mEp->num, mEp->dir);
534
535 while (!list_empty(&mEp->qh.queue)) {
536
537 /* pop oldest request */
538 struct ci13xxx_req *mReq = \
539 list_entry(mEp->qh.queue.next,
540 struct ci13xxx_req, queue);
541 list_del_init(&mReq->queue);
542 mReq->req.status = -ESHUTDOWN;
543
544 if (mReq->req.complete != NULL) {
545 spin_unlock(mEp->lock);
546 mReq->req.complete(&mEp->ep, &mReq->req);
547 spin_lock(mEp->lock);
548 }
549 }
550 return 0;
551 }
552
553 /**
554 * _gadget_stop_activity: stops all USB activity, flushes & disables all endpts
555 * @gadget: gadget
556 *
557 * This function returns an error code
558 */
559 static int _gadget_stop_activity(struct usb_gadget *gadget)
560 {
561 struct usb_ep *ep;
562 struct ci13xxx *ci = container_of(gadget, struct ci13xxx, gadget);
563 unsigned long flags;
564
565 spin_lock_irqsave(&ci->lock, flags);
566 ci->gadget.speed = USB_SPEED_UNKNOWN;
567 ci->remote_wakeup = 0;
568 ci->suspended = 0;
569 spin_unlock_irqrestore(&ci->lock, flags);
570
571 /* flush all endpoints */
572 gadget_for_each_ep(ep, gadget) {
573 usb_ep_fifo_flush(ep);
574 }
575 usb_ep_fifo_flush(&ci->ep0out->ep);
576 usb_ep_fifo_flush(&ci->ep0in->ep);
577
578 if (ci->driver)
579 ci->driver->disconnect(gadget);
580
581 /* make sure to disable all endpoints */
582 gadget_for_each_ep(ep, gadget) {
583 usb_ep_disable(ep);
584 }
585
586 if (ci->status != NULL) {
587 usb_ep_free_request(&ci->ep0in->ep, ci->status);
588 ci->status = NULL;
589 }
590
591 return 0;
592 }
593
594 /******************************************************************************
595 * ISR block
596 *****************************************************************************/
597 /**
598 * isr_reset_handler: USB reset interrupt handler
599 * @ci: UDC device
600 *
601 * This function resets USB engine after a bus reset occurred
602 */
603 static void isr_reset_handler(struct ci13xxx *ci)
604 __releases(ci->lock)
605 __acquires(ci->lock)
606 {
607 int retval;
608
609 spin_unlock(&ci->lock);
610 retval = _gadget_stop_activity(&ci->gadget);
611 if (retval)
612 goto done;
613
614 retval = hw_usb_reset(ci);
615 if (retval)
616 goto done;
617
618 ci->status = usb_ep_alloc_request(&ci->ep0in->ep, GFP_ATOMIC);
619 if (ci->status == NULL)
620 retval = -ENOMEM;
621
622 done:
623 spin_lock(&ci->lock);
624
625 if (retval)
626 dev_err(ci->dev, "error: %i\n", retval);
627 }
628
629 /**
630 * isr_get_status_complete: get_status request complete function
631 * @ep: endpoint
632 * @req: request handled
633 *
634 * Caller must release lock
635 */
636 static void isr_get_status_complete(struct usb_ep *ep, struct usb_request *req)
637 {
638 if (ep == NULL || req == NULL)
639 return;
640
641 kfree(req->buf);
642 usb_ep_free_request(ep, req);
643 }
644
645 /**
646 * _ep_queue: queues (submits) an I/O request to an endpoint
647 *
648 * Caller must hold lock
649 */
650 static int _ep_queue(struct usb_ep *ep, struct usb_request *req,
651 gfp_t __maybe_unused gfp_flags)
652 {
653 struct ci13xxx_ep *mEp = container_of(ep, struct ci13xxx_ep, ep);
654 struct ci13xxx_req *mReq = container_of(req, struct ci13xxx_req, req);
655 struct ci13xxx *ci = mEp->ci;
656 int retval = 0;
657
658 if (ep == NULL || req == NULL || mEp->ep.desc == NULL)
659 return -EINVAL;
660
661 if (mEp->type == USB_ENDPOINT_XFER_CONTROL) {
662 if (req->length)
663 mEp = (ci->ep0_dir == RX) ?
664 ci->ep0out : ci->ep0in;
665 if (!list_empty(&mEp->qh.queue)) {
666 _ep_nuke(mEp);
667 retval = -EOVERFLOW;
668 dev_warn(mEp->ci->dev, "endpoint ctrl %X nuked\n",
669 _usb_addr(mEp));
670 }
671 }
672
673 /* first nuke then test link, e.g. previous status has not sent */
674 if (!list_empty(&mReq->queue)) {
675 dev_err(mEp->ci->dev, "request already in queue\n");
676 return -EBUSY;
677 }
678
679 if (req->length > (TD_PAGE_COUNT - 1) * CI13XXX_PAGE_SIZE) {
680 dev_err(mEp->ci->dev, "request bigger than one td\n");
681 return -EMSGSIZE;
682 }
683
684 /* push request */
685 mReq->req.status = -EINPROGRESS;
686 mReq->req.actual = 0;
687
688 retval = _hardware_enqueue(mEp, mReq);
689
690 if (retval == -EALREADY)
691 retval = 0;
692 if (!retval)
693 list_add_tail(&mReq->queue, &mEp->qh.queue);
694
695 return retval;
696 }
697
698 /**
699 * isr_get_status_response: get_status request response
700 * @ci: ci struct
701 * @setup: setup request packet
702 *
703 * This function returns an error code
704 */
705 static int isr_get_status_response(struct ci13xxx *ci,
706 struct usb_ctrlrequest *setup)
707 __releases(mEp->lock)
708 __acquires(mEp->lock)
709 {
710 struct ci13xxx_ep *mEp = ci->ep0in;
711 struct usb_request *req = NULL;
712 gfp_t gfp_flags = GFP_ATOMIC;
713 int dir, num, retval;
714
715 if (mEp == NULL || setup == NULL)
716 return -EINVAL;
717
718 spin_unlock(mEp->lock);
719 req = usb_ep_alloc_request(&mEp->ep, gfp_flags);
720 spin_lock(mEp->lock);
721 if (req == NULL)
722 return -ENOMEM;
723
724 req->complete = isr_get_status_complete;
725 req->length = 2;
726 req->buf = kzalloc(req->length, gfp_flags);
727 if (req->buf == NULL) {
728 retval = -ENOMEM;
729 goto err_free_req;
730 }
731
732 if ((setup->bRequestType & USB_RECIP_MASK) == USB_RECIP_DEVICE) {
733 /* Assume that device is bus powered for now. */
734 *(u16 *)req->buf = ci->remote_wakeup << 1;
735 retval = 0;
736 } else if ((setup->bRequestType & USB_RECIP_MASK) \
737 == USB_RECIP_ENDPOINT) {
738 dir = (le16_to_cpu(setup->wIndex) & USB_ENDPOINT_DIR_MASK) ?
739 TX : RX;
740 num = le16_to_cpu(setup->wIndex) & USB_ENDPOINT_NUMBER_MASK;
741 *(u16 *)req->buf = hw_ep_get_halt(ci, num, dir);
742 }
743 /* else do nothing; reserved for future use */
744
745 retval = _ep_queue(&mEp->ep, req, gfp_flags);
746 if (retval)
747 goto err_free_buf;
748
749 return 0;
750
751 err_free_buf:
752 kfree(req->buf);
753 err_free_req:
754 spin_unlock(mEp->lock);
755 usb_ep_free_request(&mEp->ep, req);
756 spin_lock(mEp->lock);
757 return retval;
758 }
759
760 /**
761 * isr_setup_status_complete: setup_status request complete function
762 * @ep: endpoint
763 * @req: request handled
764 *
765 * Caller must release lock. Put the port in test mode if test mode
766 * feature is selected.
767 */
768 static void
769 isr_setup_status_complete(struct usb_ep *ep, struct usb_request *req)
770 {
771 struct ci13xxx *ci = req->context;
772 unsigned long flags;
773
774 if (ci->setaddr) {
775 hw_usb_set_address(ci, ci->address);
776 ci->setaddr = false;
777 }
778
779 spin_lock_irqsave(&ci->lock, flags);
780 if (ci->test_mode)
781 hw_port_test_set(ci, ci->test_mode);
782 spin_unlock_irqrestore(&ci->lock, flags);
783 }
784
785 /**
786 * isr_setup_status_phase: queues the status phase of a setup transation
787 * @ci: ci struct
788 *
789 * This function returns an error code
790 */
791 static int isr_setup_status_phase(struct ci13xxx *ci)
792 {
793 int retval;
794 struct ci13xxx_ep *mEp;
795
796 mEp = (ci->ep0_dir == TX) ? ci->ep0out : ci->ep0in;
797 ci->status->context = ci;
798 ci->status->complete = isr_setup_status_complete;
799
800 retval = _ep_queue(&mEp->ep, ci->status, GFP_ATOMIC);
801
802 return retval;
803 }
804
805 /**
806 * isr_tr_complete_low: transaction complete low level handler
807 * @mEp: endpoint
808 *
809 * This function returns an error code
810 * Caller must hold lock
811 */
812 static int isr_tr_complete_low(struct ci13xxx_ep *mEp)
813 __releases(mEp->lock)
814 __acquires(mEp->lock)
815 {
816 struct ci13xxx_req *mReq, *mReqTemp;
817 struct ci13xxx_ep *mEpTemp = mEp;
818 int retval = 0;
819
820 list_for_each_entry_safe(mReq, mReqTemp, &mEp->qh.queue,
821 queue) {
822 retval = _hardware_dequeue(mEp, mReq);
823 if (retval < 0)
824 break;
825 list_del_init(&mReq->queue);
826 if (mReq->req.complete != NULL) {
827 spin_unlock(mEp->lock);
828 if ((mEp->type == USB_ENDPOINT_XFER_CONTROL) &&
829 mReq->req.length)
830 mEpTemp = mEp->ci->ep0in;
831 mReq->req.complete(&mEpTemp->ep, &mReq->req);
832 spin_lock(mEp->lock);
833 }
834 }
835
836 if (retval == -EBUSY)
837 retval = 0;
838
839 return retval;
840 }
841
842 /**
843 * isr_tr_complete_handler: transaction complete interrupt handler
844 * @ci: UDC descriptor
845 *
846 * This function handles traffic events
847 */
848 static void isr_tr_complete_handler(struct ci13xxx *ci)
849 __releases(ci->lock)
850 __acquires(ci->lock)
851 {
852 unsigned i;
853 u8 tmode = 0;
854
855 for (i = 0; i < ci->hw_ep_max; i++) {
856 struct ci13xxx_ep *mEp = &ci->ci13xxx_ep[i];
857 int type, num, dir, err = -EINVAL;
858 struct usb_ctrlrequest req;
859
860 if (mEp->ep.desc == NULL)
861 continue; /* not configured */
862
863 if (hw_test_and_clear_complete(ci, i)) {
864 err = isr_tr_complete_low(mEp);
865 if (mEp->type == USB_ENDPOINT_XFER_CONTROL) {
866 if (err > 0) /* needs status phase */
867 err = isr_setup_status_phase(ci);
868 if (err < 0) {
869 spin_unlock(&ci->lock);
870 if (usb_ep_set_halt(&mEp->ep))
871 dev_err(ci->dev,
872 "error: ep_set_halt\n");
873 spin_lock(&ci->lock);
874 }
875 }
876 }
877
878 if (mEp->type != USB_ENDPOINT_XFER_CONTROL ||
879 !hw_test_and_clear_setup_status(ci, i))
880 continue;
881
882 if (i != 0) {
883 dev_warn(ci->dev, "ctrl traffic at endpoint %d\n", i);
884 continue;
885 }
886
887 /*
888 * Flush data and handshake transactions of previous
889 * setup packet.
890 */
891 _ep_nuke(ci->ep0out);
892 _ep_nuke(ci->ep0in);
893
894 /* read_setup_packet */
895 do {
896 hw_test_and_set_setup_guard(ci);
897 memcpy(&req, &mEp->qh.ptr->setup, sizeof(req));
898 } while (!hw_test_and_clear_setup_guard(ci));
899
900 type = req.bRequestType;
901
902 ci->ep0_dir = (type & USB_DIR_IN) ? TX : RX;
903
904 switch (req.bRequest) {
905 case USB_REQ_CLEAR_FEATURE:
906 if (type == (USB_DIR_OUT|USB_RECIP_ENDPOINT) &&
907 le16_to_cpu(req.wValue) ==
908 USB_ENDPOINT_HALT) {
909 if (req.wLength != 0)
910 break;
911 num = le16_to_cpu(req.wIndex);
912 dir = num & USB_ENDPOINT_DIR_MASK;
913 num &= USB_ENDPOINT_NUMBER_MASK;
914 if (dir) /* TX */
915 num += ci->hw_ep_max/2;
916 if (!ci->ci13xxx_ep[num].wedge) {
917 spin_unlock(&ci->lock);
918 err = usb_ep_clear_halt(
919 &ci->ci13xxx_ep[num].ep);
920 spin_lock(&ci->lock);
921 if (err)
922 break;
923 }
924 err = isr_setup_status_phase(ci);
925 } else if (type == (USB_DIR_OUT|USB_RECIP_DEVICE) &&
926 le16_to_cpu(req.wValue) ==
927 USB_DEVICE_REMOTE_WAKEUP) {
928 if (req.wLength != 0)
929 break;
930 ci->remote_wakeup = 0;
931 err = isr_setup_status_phase(ci);
932 } else {
933 goto delegate;
934 }
935 break;
936 case USB_REQ_GET_STATUS:
937 if (type != (USB_DIR_IN|USB_RECIP_DEVICE) &&
938 type != (USB_DIR_IN|USB_RECIP_ENDPOINT) &&
939 type != (USB_DIR_IN|USB_RECIP_INTERFACE))
940 goto delegate;
941 if (le16_to_cpu(req.wLength) != 2 ||
942 le16_to_cpu(req.wValue) != 0)
943 break;
944 err = isr_get_status_response(ci, &req);
945 break;
946 case USB_REQ_SET_ADDRESS:
947 if (type != (USB_DIR_OUT|USB_RECIP_DEVICE))
948 goto delegate;
949 if (le16_to_cpu(req.wLength) != 0 ||
950 le16_to_cpu(req.wIndex) != 0)
951 break;
952 ci->address = (u8)le16_to_cpu(req.wValue);
953 ci->setaddr = true;
954 err = isr_setup_status_phase(ci);
955 break;
956 case USB_REQ_SET_FEATURE:
957 if (type == (USB_DIR_OUT|USB_RECIP_ENDPOINT) &&
958 le16_to_cpu(req.wValue) ==
959 USB_ENDPOINT_HALT) {
960 if (req.wLength != 0)
961 break;
962 num = le16_to_cpu(req.wIndex);
963 dir = num & USB_ENDPOINT_DIR_MASK;
964 num &= USB_ENDPOINT_NUMBER_MASK;
965 if (dir) /* TX */
966 num += ci->hw_ep_max/2;
967
968 spin_unlock(&ci->lock);
969 err = usb_ep_set_halt(&ci->ci13xxx_ep[num].ep);
970 spin_lock(&ci->lock);
971 if (!err)
972 isr_setup_status_phase(ci);
973 } else if (type == (USB_DIR_OUT|USB_RECIP_DEVICE)) {
974 if (req.wLength != 0)
975 break;
976 switch (le16_to_cpu(req.wValue)) {
977 case USB_DEVICE_REMOTE_WAKEUP:
978 ci->remote_wakeup = 1;
979 err = isr_setup_status_phase(ci);
980 break;
981 case USB_DEVICE_TEST_MODE:
982 tmode = le16_to_cpu(req.wIndex) >> 8;
983 switch (tmode) {
984 case TEST_J:
985 case TEST_K:
986 case TEST_SE0_NAK:
987 case TEST_PACKET:
988 case TEST_FORCE_EN:
989 ci->test_mode = tmode;
990 err = isr_setup_status_phase(
991 ci);
992 break;
993 default:
994 break;
995 }
996 default:
997 goto delegate;
998 }
999 } else {
1000 goto delegate;
1001 }
1002 break;
1003 default:
1004 delegate:
1005 if (req.wLength == 0) /* no data phase */
1006 ci->ep0_dir = TX;
1007
1008 spin_unlock(&ci->lock);
1009 err = ci->driver->setup(&ci->gadget, &req);
1010 spin_lock(&ci->lock);
1011 break;
1012 }
1013
1014 if (err < 0) {
1015 spin_unlock(&ci->lock);
1016 if (usb_ep_set_halt(&mEp->ep))
1017 dev_err(ci->dev, "error: ep_set_halt\n");
1018 spin_lock(&ci->lock);
1019 }
1020 }
1021 }
1022
1023 /******************************************************************************
1024 * ENDPT block
1025 *****************************************************************************/
1026 /**
1027 * ep_enable: configure endpoint, making it usable
1028 *
1029 * Check usb_ep_enable() at "usb_gadget.h" for details
1030 */
1031 static int ep_enable(struct usb_ep *ep,
1032 const struct usb_endpoint_descriptor *desc)
1033 {
1034 struct ci13xxx_ep *mEp = container_of(ep, struct ci13xxx_ep, ep);
1035 int retval = 0;
1036 unsigned long flags;
1037 u32 cap = 0;
1038
1039 if (ep == NULL || desc == NULL)
1040 return -EINVAL;
1041
1042 spin_lock_irqsave(mEp->lock, flags);
1043
1044 /* only internal SW should enable ctrl endpts */
1045
1046 mEp->ep.desc = desc;
1047
1048 if (!list_empty(&mEp->qh.queue))
1049 dev_warn(mEp->ci->dev, "enabling a non-empty endpoint!\n");
1050
1051 mEp->dir = usb_endpoint_dir_in(desc) ? TX : RX;
1052 mEp->num = usb_endpoint_num(desc);
1053 mEp->type = usb_endpoint_type(desc);
1054
1055 mEp->ep.maxpacket = usb_endpoint_maxp(desc);
1056
1057 if (mEp->type == USB_ENDPOINT_XFER_CONTROL)
1058 cap |= QH_IOS;
1059 if (mEp->num)
1060 cap |= QH_ZLT;
1061 cap |= (mEp->ep.maxpacket << __ffs(QH_MAX_PKT)) & QH_MAX_PKT;
1062
1063 mEp->qh.ptr->cap = cpu_to_le32(cap);
1064
1065 mEp->qh.ptr->td.next |= cpu_to_le32(TD_TERMINATE); /* needed? */
1066
1067 /*
1068 * Enable endpoints in the HW other than ep0 as ep0
1069 * is always enabled
1070 */
1071 if (mEp->num)
1072 retval |= hw_ep_enable(mEp->ci, mEp->num, mEp->dir, mEp->type);
1073
1074 spin_unlock_irqrestore(mEp->lock, flags);
1075 return retval;
1076 }
1077
1078 /**
1079 * ep_disable: endpoint is no longer usable
1080 *
1081 * Check usb_ep_disable() at "usb_gadget.h" for details
1082 */
1083 static int ep_disable(struct usb_ep *ep)
1084 {
1085 struct ci13xxx_ep *mEp = container_of(ep, struct ci13xxx_ep, ep);
1086 int direction, retval = 0;
1087 unsigned long flags;
1088
1089 if (ep == NULL)
1090 return -EINVAL;
1091 else if (mEp->ep.desc == NULL)
1092 return -EBUSY;
1093
1094 spin_lock_irqsave(mEp->lock, flags);
1095
1096 /* only internal SW should disable ctrl endpts */
1097
1098 direction = mEp->dir;
1099 do {
1100 retval |= _ep_nuke(mEp);
1101 retval |= hw_ep_disable(mEp->ci, mEp->num, mEp->dir);
1102
1103 if (mEp->type == USB_ENDPOINT_XFER_CONTROL)
1104 mEp->dir = (mEp->dir == TX) ? RX : TX;
1105
1106 } while (mEp->dir != direction);
1107
1108 mEp->ep.desc = NULL;
1109
1110 spin_unlock_irqrestore(mEp->lock, flags);
1111 return retval;
1112 }
1113
1114 /**
1115 * ep_alloc_request: allocate a request object to use with this endpoint
1116 *
1117 * Check usb_ep_alloc_request() at "usb_gadget.h" for details
1118 */
1119 static struct usb_request *ep_alloc_request(struct usb_ep *ep, gfp_t gfp_flags)
1120 {
1121 struct ci13xxx_ep *mEp = container_of(ep, struct ci13xxx_ep, ep);
1122 struct ci13xxx_req *mReq = NULL;
1123
1124 if (ep == NULL)
1125 return NULL;
1126
1127 mReq = kzalloc(sizeof(struct ci13xxx_req), gfp_flags);
1128 if (mReq != NULL) {
1129 INIT_LIST_HEAD(&mReq->queue);
1130
1131 mReq->ptr = dma_pool_alloc(mEp->td_pool, gfp_flags,
1132 &mReq->dma);
1133 if (mReq->ptr == NULL) {
1134 kfree(mReq);
1135 mReq = NULL;
1136 }
1137 }
1138
1139 return (mReq == NULL) ? NULL : &mReq->req;
1140 }
1141
1142 /**
1143 * ep_free_request: frees a request object
1144 *
1145 * Check usb_ep_free_request() at "usb_gadget.h" for details
1146 */
1147 static void ep_free_request(struct usb_ep *ep, struct usb_request *req)
1148 {
1149 struct ci13xxx_ep *mEp = container_of(ep, struct ci13xxx_ep, ep);
1150 struct ci13xxx_req *mReq = container_of(req, struct ci13xxx_req, req);
1151 unsigned long flags;
1152
1153 if (ep == NULL || req == NULL) {
1154 return;
1155 } else if (!list_empty(&mReq->queue)) {
1156 dev_err(mEp->ci->dev, "freeing queued request\n");
1157 return;
1158 }
1159
1160 spin_lock_irqsave(mEp->lock, flags);
1161
1162 if (mReq->ptr)
1163 dma_pool_free(mEp->td_pool, mReq->ptr, mReq->dma);
1164 kfree(mReq);
1165
1166 spin_unlock_irqrestore(mEp->lock, flags);
1167 }
1168
1169 /**
1170 * ep_queue: queues (submits) an I/O request to an endpoint
1171 *
1172 * Check usb_ep_queue()* at usb_gadget.h" for details
1173 */
1174 static int ep_queue(struct usb_ep *ep, struct usb_request *req,
1175 gfp_t __maybe_unused gfp_flags)
1176 {
1177 struct ci13xxx_ep *mEp = container_of(ep, struct ci13xxx_ep, ep);
1178 int retval = 0;
1179 unsigned long flags;
1180
1181 if (ep == NULL || req == NULL || mEp->ep.desc == NULL)
1182 return -EINVAL;
1183
1184 spin_lock_irqsave(mEp->lock, flags);
1185 retval = _ep_queue(ep, req, gfp_flags);
1186 spin_unlock_irqrestore(mEp->lock, flags);
1187 return retval;
1188 }
1189
1190 /**
1191 * ep_dequeue: dequeues (cancels, unlinks) an I/O request from an endpoint
1192 *
1193 * Check usb_ep_dequeue() at "usb_gadget.h" for details
1194 */
1195 static int ep_dequeue(struct usb_ep *ep, struct usb_request *req)
1196 {
1197 struct ci13xxx_ep *mEp = container_of(ep, struct ci13xxx_ep, ep);
1198 struct ci13xxx_req *mReq = container_of(req, struct ci13xxx_req, req);
1199 unsigned long flags;
1200
1201 if (ep == NULL || req == NULL || mReq->req.status != -EALREADY ||
1202 mEp->ep.desc == NULL || list_empty(&mReq->queue) ||
1203 list_empty(&mEp->qh.queue))
1204 return -EINVAL;
1205
1206 spin_lock_irqsave(mEp->lock, flags);
1207
1208 hw_ep_flush(mEp->ci, mEp->num, mEp->dir);
1209
1210 /* pop request */
1211 list_del_init(&mReq->queue);
1212
1213 usb_gadget_unmap_request(&mEp->ci->gadget, req, mEp->dir);
1214
1215 req->status = -ECONNRESET;
1216
1217 if (mReq->req.complete != NULL) {
1218 spin_unlock(mEp->lock);
1219 mReq->req.complete(&mEp->ep, &mReq->req);
1220 spin_lock(mEp->lock);
1221 }
1222
1223 spin_unlock_irqrestore(mEp->lock, flags);
1224 return 0;
1225 }
1226
1227 /**
1228 * ep_set_halt: sets the endpoint halt feature
1229 *
1230 * Check usb_ep_set_halt() at "usb_gadget.h" for details
1231 */
1232 static int ep_set_halt(struct usb_ep *ep, int value)
1233 {
1234 struct ci13xxx_ep *mEp = container_of(ep, struct ci13xxx_ep, ep);
1235 int direction, retval = 0;
1236 unsigned long flags;
1237
1238 if (ep == NULL || mEp->ep.desc == NULL)
1239 return -EINVAL;
1240
1241 spin_lock_irqsave(mEp->lock, flags);
1242
1243 #ifndef STALL_IN
1244 /* g_file_storage MS compliant but g_zero fails chapter 9 compliance */
1245 if (value && mEp->type == USB_ENDPOINT_XFER_BULK && mEp->dir == TX &&
1246 !list_empty(&mEp->qh.queue)) {
1247 spin_unlock_irqrestore(mEp->lock, flags);
1248 return -EAGAIN;
1249 }
1250 #endif
1251
1252 direction = mEp->dir;
1253 do {
1254 retval |= hw_ep_set_halt(mEp->ci, mEp->num, mEp->dir, value);
1255
1256 if (!value)
1257 mEp->wedge = 0;
1258
1259 if (mEp->type == USB_ENDPOINT_XFER_CONTROL)
1260 mEp->dir = (mEp->dir == TX) ? RX : TX;
1261
1262 } while (mEp->dir != direction);
1263
1264 spin_unlock_irqrestore(mEp->lock, flags);
1265 return retval;
1266 }
1267
1268 /**
1269 * ep_set_wedge: sets the halt feature and ignores clear requests
1270 *
1271 * Check usb_ep_set_wedge() at "usb_gadget.h" for details
1272 */
1273 static int ep_set_wedge(struct usb_ep *ep)
1274 {
1275 struct ci13xxx_ep *mEp = container_of(ep, struct ci13xxx_ep, ep);
1276 unsigned long flags;
1277
1278 if (ep == NULL || mEp->ep.desc == NULL)
1279 return -EINVAL;
1280
1281 spin_lock_irqsave(mEp->lock, flags);
1282 mEp->wedge = 1;
1283 spin_unlock_irqrestore(mEp->lock, flags);
1284
1285 return usb_ep_set_halt(ep);
1286 }
1287
1288 /**
1289 * ep_fifo_flush: flushes contents of a fifo
1290 *
1291 * Check usb_ep_fifo_flush() at "usb_gadget.h" for details
1292 */
1293 static void ep_fifo_flush(struct usb_ep *ep)
1294 {
1295 struct ci13xxx_ep *mEp = container_of(ep, struct ci13xxx_ep, ep);
1296 unsigned long flags;
1297
1298 if (ep == NULL) {
1299 dev_err(mEp->ci->dev, "%02X: -EINVAL\n", _usb_addr(mEp));
1300 return;
1301 }
1302
1303 spin_lock_irqsave(mEp->lock, flags);
1304
1305 hw_ep_flush(mEp->ci, mEp->num, mEp->dir);
1306
1307 spin_unlock_irqrestore(mEp->lock, flags);
1308 }
1309
1310 /**
1311 * Endpoint-specific part of the API to the USB controller hardware
1312 * Check "usb_gadget.h" for details
1313 */
1314 static const struct usb_ep_ops usb_ep_ops = {
1315 .enable = ep_enable,
1316 .disable = ep_disable,
1317 .alloc_request = ep_alloc_request,
1318 .free_request = ep_free_request,
1319 .queue = ep_queue,
1320 .dequeue = ep_dequeue,
1321 .set_halt = ep_set_halt,
1322 .set_wedge = ep_set_wedge,
1323 .fifo_flush = ep_fifo_flush,
1324 };
1325
1326 /******************************************************************************
1327 * GADGET block
1328 *****************************************************************************/
1329 static int ci13xxx_vbus_session(struct usb_gadget *_gadget, int is_active)
1330 {
1331 struct ci13xxx *ci = container_of(_gadget, struct ci13xxx, gadget);
1332 unsigned long flags;
1333 int gadget_ready = 0;
1334
1335 if (!(ci->platdata->flags & CI13XXX_PULLUP_ON_VBUS))
1336 return -EOPNOTSUPP;
1337
1338 spin_lock_irqsave(&ci->lock, flags);
1339 ci->vbus_active = is_active;
1340 if (ci->driver)
1341 gadget_ready = 1;
1342 spin_unlock_irqrestore(&ci->lock, flags);
1343
1344 if (gadget_ready) {
1345 if (is_active) {
1346 pm_runtime_get_sync(&_gadget->dev);
1347 hw_device_reset(ci, USBMODE_CM_DC);
1348 hw_device_state(ci, ci->ep0out->qh.dma);
1349 } else {
1350 hw_device_state(ci, 0);
1351 if (ci->platdata->notify_event)
1352 ci->platdata->notify_event(ci,
1353 CI13XXX_CONTROLLER_STOPPED_EVENT);
1354 _gadget_stop_activity(&ci->gadget);
1355 pm_runtime_put_sync(&_gadget->dev);
1356 }
1357 }
1358
1359 return 0;
1360 }
1361
1362 static int ci13xxx_wakeup(struct usb_gadget *_gadget)
1363 {
1364 struct ci13xxx *ci = container_of(_gadget, struct ci13xxx, gadget);
1365 unsigned long flags;
1366 int ret = 0;
1367
1368 spin_lock_irqsave(&ci->lock, flags);
1369 if (!ci->remote_wakeup) {
1370 ret = -EOPNOTSUPP;
1371 goto out;
1372 }
1373 if (!hw_read(ci, OP_PORTSC, PORTSC_SUSP)) {
1374 ret = -EINVAL;
1375 goto out;
1376 }
1377 hw_write(ci, OP_PORTSC, PORTSC_FPR, PORTSC_FPR);
1378 out:
1379 spin_unlock_irqrestore(&ci->lock, flags);
1380 return ret;
1381 }
1382
1383 static int ci13xxx_vbus_draw(struct usb_gadget *_gadget, unsigned mA)
1384 {
1385 struct ci13xxx *ci = container_of(_gadget, struct ci13xxx, gadget);
1386
1387 if (ci->transceiver)
1388 return usb_phy_set_power(ci->transceiver, mA);
1389 return -ENOTSUPP;
1390 }
1391
1392 /* Change Data+ pullup status
1393 * this func is used by usb_gadget_connect/disconnet
1394 */
1395 static int ci13xxx_pullup(struct usb_gadget *_gadget, int is_on)
1396 {
1397 struct ci13xxx *ci = container_of(_gadget, struct ci13xxx, gadget);
1398
1399 if (is_on)
1400 hw_write(ci, OP_USBCMD, USBCMD_RS, USBCMD_RS);
1401 else
1402 hw_write(ci, OP_USBCMD, USBCMD_RS, 0);
1403
1404 return 0;
1405 }
1406
1407 static int ci13xxx_start(struct usb_gadget *gadget,
1408 struct usb_gadget_driver *driver);
1409 static int ci13xxx_stop(struct usb_gadget *gadget,
1410 struct usb_gadget_driver *driver);
1411 /**
1412 * Device operations part of the API to the USB controller hardware,
1413 * which don't involve endpoints (or i/o)
1414 * Check "usb_gadget.h" for details
1415 */
1416 static const struct usb_gadget_ops usb_gadget_ops = {
1417 .vbus_session = ci13xxx_vbus_session,
1418 .wakeup = ci13xxx_wakeup,
1419 .pullup = ci13xxx_pullup,
1420 .vbus_draw = ci13xxx_vbus_draw,
1421 .udc_start = ci13xxx_start,
1422 .udc_stop = ci13xxx_stop,
1423 };
1424
1425 static int init_eps(struct ci13xxx *ci)
1426 {
1427 int retval = 0, i, j;
1428
1429 for (i = 0; i < ci->hw_ep_max/2; i++)
1430 for (j = RX; j <= TX; j++) {
1431 int k = i + j * ci->hw_ep_max/2;
1432 struct ci13xxx_ep *mEp = &ci->ci13xxx_ep[k];
1433
1434 scnprintf(mEp->name, sizeof(mEp->name), "ep%i%s", i,
1435 (j == TX) ? "in" : "out");
1436
1437 mEp->ci = ci;
1438 mEp->lock = &ci->lock;
1439 mEp->td_pool = ci->td_pool;
1440
1441 mEp->ep.name = mEp->name;
1442 mEp->ep.ops = &usb_ep_ops;
1443 /*
1444 * for ep0: maxP defined in desc, for other
1445 * eps, maxP is set by epautoconfig() called
1446 * by gadget layer
1447 */
1448 mEp->ep.maxpacket = (unsigned short)~0;
1449
1450 INIT_LIST_HEAD(&mEp->qh.queue);
1451 mEp->qh.ptr = dma_pool_alloc(ci->qh_pool, GFP_KERNEL,
1452 &mEp->qh.dma);
1453 if (mEp->qh.ptr == NULL)
1454 retval = -ENOMEM;
1455 else
1456 memset(mEp->qh.ptr, 0, sizeof(*mEp->qh.ptr));
1457
1458 /*
1459 * set up shorthands for ep0 out and in endpoints,
1460 * don't add to gadget's ep_list
1461 */
1462 if (i == 0) {
1463 if (j == RX)
1464 ci->ep0out = mEp;
1465 else
1466 ci->ep0in = mEp;
1467
1468 mEp->ep.maxpacket = CTRL_PAYLOAD_MAX;
1469 continue;
1470 }
1471
1472 list_add_tail(&mEp->ep.ep_list, &ci->gadget.ep_list);
1473 }
1474
1475 return retval;
1476 }
1477
1478 static void destroy_eps(struct ci13xxx *ci)
1479 {
1480 int i;
1481
1482 for (i = 0; i < ci->hw_ep_max; i++) {
1483 struct ci13xxx_ep *mEp = &ci->ci13xxx_ep[i];
1484
1485 dma_pool_free(ci->qh_pool, mEp->qh.ptr, mEp->qh.dma);
1486 }
1487 }
1488
1489 /**
1490 * ci13xxx_start: register a gadget driver
1491 * @gadget: our gadget
1492 * @driver: the driver being registered
1493 *
1494 * Interrupts are enabled here.
1495 */
1496 static int ci13xxx_start(struct usb_gadget *gadget,
1497 struct usb_gadget_driver *driver)
1498 {
1499 struct ci13xxx *ci = container_of(gadget, struct ci13xxx, gadget);
1500 unsigned long flags;
1501 int retval = -ENOMEM;
1502
1503 if (driver->disconnect == NULL)
1504 return -EINVAL;
1505
1506
1507 ci->ep0out->ep.desc = &ctrl_endpt_out_desc;
1508 retval = usb_ep_enable(&ci->ep0out->ep);
1509 if (retval)
1510 return retval;
1511
1512 ci->ep0in->ep.desc = &ctrl_endpt_in_desc;
1513 retval = usb_ep_enable(&ci->ep0in->ep);
1514 if (retval)
1515 return retval;
1516 spin_lock_irqsave(&ci->lock, flags);
1517
1518 ci->driver = driver;
1519 pm_runtime_get_sync(&ci->gadget.dev);
1520 if (ci->platdata->flags & CI13XXX_PULLUP_ON_VBUS) {
1521 if (ci->vbus_active) {
1522 if (ci->platdata->flags & CI13XXX_REGS_SHARED)
1523 hw_device_reset(ci, USBMODE_CM_DC);
1524 } else {
1525 pm_runtime_put_sync(&ci->gadget.dev);
1526 goto done;
1527 }
1528 }
1529
1530 retval = hw_device_state(ci, ci->ep0out->qh.dma);
1531 if (retval)
1532 pm_runtime_put_sync(&ci->gadget.dev);
1533
1534 done:
1535 spin_unlock_irqrestore(&ci->lock, flags);
1536 return retval;
1537 }
1538
1539 /**
1540 * ci13xxx_stop: unregister a gadget driver
1541 */
1542 static int ci13xxx_stop(struct usb_gadget *gadget,
1543 struct usb_gadget_driver *driver)
1544 {
1545 struct ci13xxx *ci = container_of(gadget, struct ci13xxx, gadget);
1546 unsigned long flags;
1547
1548 spin_lock_irqsave(&ci->lock, flags);
1549
1550 if (!(ci->platdata->flags & CI13XXX_PULLUP_ON_VBUS) ||
1551 ci->vbus_active) {
1552 hw_device_state(ci, 0);
1553 if (ci->platdata->notify_event)
1554 ci->platdata->notify_event(ci,
1555 CI13XXX_CONTROLLER_STOPPED_EVENT);
1556 ci->driver = NULL;
1557 spin_unlock_irqrestore(&ci->lock, flags);
1558 _gadget_stop_activity(&ci->gadget);
1559 spin_lock_irqsave(&ci->lock, flags);
1560 pm_runtime_put(&ci->gadget.dev);
1561 }
1562
1563 spin_unlock_irqrestore(&ci->lock, flags);
1564
1565 return 0;
1566 }
1567
1568 /******************************************************************************
1569 * BUS block
1570 *****************************************************************************/
1571 /**
1572 * udc_irq: ci interrupt handler
1573 *
1574 * This function returns IRQ_HANDLED if the IRQ has been handled
1575 * It locks access to registers
1576 */
1577 static irqreturn_t udc_irq(struct ci13xxx *ci)
1578 {
1579 irqreturn_t retval;
1580 u32 intr;
1581
1582 if (ci == NULL)
1583 return IRQ_HANDLED;
1584
1585 spin_lock(&ci->lock);
1586
1587 if (ci->platdata->flags & CI13XXX_REGS_SHARED) {
1588 if (hw_read(ci, OP_USBMODE, USBMODE_CM) !=
1589 USBMODE_CM_DC) {
1590 spin_unlock(&ci->lock);
1591 return IRQ_NONE;
1592 }
1593 }
1594 intr = hw_test_and_clear_intr_active(ci);
1595
1596 if (intr) {
1597 /* order defines priority - do NOT change it */
1598 if (USBi_URI & intr)
1599 isr_reset_handler(ci);
1600
1601 if (USBi_PCI & intr) {
1602 ci->gadget.speed = hw_port_is_high_speed(ci) ?
1603 USB_SPEED_HIGH : USB_SPEED_FULL;
1604 if (ci->suspended && ci->driver->resume) {
1605 spin_unlock(&ci->lock);
1606 ci->driver->resume(&ci->gadget);
1607 spin_lock(&ci->lock);
1608 ci->suspended = 0;
1609 }
1610 }
1611
1612 if (USBi_UI & intr)
1613 isr_tr_complete_handler(ci);
1614
1615 if (USBi_SLI & intr) {
1616 if (ci->gadget.speed != USB_SPEED_UNKNOWN &&
1617 ci->driver->suspend) {
1618 ci->suspended = 1;
1619 spin_unlock(&ci->lock);
1620 ci->driver->suspend(&ci->gadget);
1621 spin_lock(&ci->lock);
1622 }
1623 }
1624 retval = IRQ_HANDLED;
1625 } else {
1626 retval = IRQ_NONE;
1627 }
1628 spin_unlock(&ci->lock);
1629
1630 return retval;
1631 }
1632
1633 /**
1634 * udc_release: driver release function
1635 * @dev: device
1636 *
1637 * Currently does nothing
1638 */
1639 static void udc_release(struct device *dev)
1640 {
1641 }
1642
1643 /**
1644 * udc_start: initialize gadget role
1645 * @ci: chipidea controller
1646 */
1647 static int udc_start(struct ci13xxx *ci)
1648 {
1649 struct device *dev = ci->dev;
1650 int retval = 0;
1651
1652 spin_lock_init(&ci->lock);
1653
1654 ci->gadget.ops = &usb_gadget_ops;
1655 ci->gadget.speed = USB_SPEED_UNKNOWN;
1656 ci->gadget.max_speed = USB_SPEED_HIGH;
1657 ci->gadget.is_otg = 0;
1658 ci->gadget.name = ci->platdata->name;
1659
1660 INIT_LIST_HEAD(&ci->gadget.ep_list);
1661
1662 dev_set_name(&ci->gadget.dev, "gadget");
1663 ci->gadget.dev.dma_mask = dev->dma_mask;
1664 ci->gadget.dev.coherent_dma_mask = dev->coherent_dma_mask;
1665 ci->gadget.dev.parent = dev;
1666 ci->gadget.dev.release = udc_release;
1667
1668 /* alloc resources */
1669 ci->qh_pool = dma_pool_create("ci13xxx_qh", dev,
1670 sizeof(struct ci13xxx_qh),
1671 64, CI13XXX_PAGE_SIZE);
1672 if (ci->qh_pool == NULL)
1673 return -ENOMEM;
1674
1675 ci->td_pool = dma_pool_create("ci13xxx_td", dev,
1676 sizeof(struct ci13xxx_td),
1677 64, CI13XXX_PAGE_SIZE);
1678 if (ci->td_pool == NULL) {
1679 retval = -ENOMEM;
1680 goto free_qh_pool;
1681 }
1682
1683 retval = init_eps(ci);
1684 if (retval)
1685 goto free_pools;
1686
1687 ci->gadget.ep0 = &ci->ep0in->ep;
1688
1689 if (ci->global_phy)
1690 ci->transceiver = usb_get_phy(USB_PHY_TYPE_USB2);
1691
1692 if (ci->platdata->flags & CI13XXX_REQUIRE_TRANSCEIVER) {
1693 if (ci->transceiver == NULL) {
1694 retval = -ENODEV;
1695 goto destroy_eps;
1696 }
1697 }
1698
1699 if (!(ci->platdata->flags & CI13XXX_REGS_SHARED)) {
1700 retval = hw_device_reset(ci, USBMODE_CM_DC);
1701 if (retval)
1702 goto put_transceiver;
1703 }
1704
1705 retval = device_register(&ci->gadget.dev);
1706 if (retval) {
1707 put_device(&ci->gadget.dev);
1708 goto put_transceiver;
1709 }
1710
1711 if (!IS_ERR_OR_NULL(ci->transceiver)) {
1712 retval = otg_set_peripheral(ci->transceiver->otg,
1713 &ci->gadget);
1714 if (retval)
1715 goto unreg_device;
1716 }
1717
1718 retval = usb_add_gadget_udc(dev, &ci->gadget);
1719 if (retval)
1720 goto remove_trans;
1721
1722 pm_runtime_no_callbacks(&ci->gadget.dev);
1723 pm_runtime_enable(&ci->gadget.dev);
1724
1725 return retval;
1726
1727 remove_trans:
1728 if (!IS_ERR_OR_NULL(ci->transceiver)) {
1729 otg_set_peripheral(ci->transceiver->otg, NULL);
1730 if (ci->global_phy)
1731 usb_put_phy(ci->transceiver);
1732 }
1733
1734 dev_err(dev, "error = %i\n", retval);
1735 unreg_device:
1736 device_unregister(&ci->gadget.dev);
1737 put_transceiver:
1738 if (!IS_ERR_OR_NULL(ci->transceiver) && ci->global_phy)
1739 usb_put_phy(ci->transceiver);
1740 destroy_eps:
1741 destroy_eps(ci);
1742 free_pools:
1743 dma_pool_destroy(ci->td_pool);
1744 free_qh_pool:
1745 dma_pool_destroy(ci->qh_pool);
1746 return retval;
1747 }
1748
1749 /**
1750 * udc_remove: parent remove must call this to remove UDC
1751 *
1752 * No interrupts active, the IRQ has been released
1753 */
1754 static void udc_stop(struct ci13xxx *ci)
1755 {
1756 if (ci == NULL)
1757 return;
1758
1759 usb_del_gadget_udc(&ci->gadget);
1760
1761 destroy_eps(ci);
1762
1763 dma_pool_destroy(ci->td_pool);
1764 dma_pool_destroy(ci->qh_pool);
1765
1766 if (!IS_ERR_OR_NULL(ci->transceiver)) {
1767 otg_set_peripheral(ci->transceiver->otg, NULL);
1768 if (ci->global_phy)
1769 usb_put_phy(ci->transceiver);
1770 }
1771 device_unregister(&ci->gadget.dev);
1772 /* my kobject is dynamic, I swear! */
1773 memset(&ci->gadget, 0, sizeof(ci->gadget));
1774 }
1775
1776 /**
1777 * ci_hdrc_gadget_init - initialize device related bits
1778 * ci: the controller
1779 *
1780 * This function enables the gadget role, if the device is "device capable".
1781 */
1782 int ci_hdrc_gadget_init(struct ci13xxx *ci)
1783 {
1784 struct ci_role_driver *rdrv;
1785
1786 if (!hw_read(ci, CAP_DCCPARAMS, DCCPARAMS_DC))
1787 return -ENXIO;
1788
1789 rdrv = devm_kzalloc(ci->dev, sizeof(struct ci_role_driver), GFP_KERNEL);
1790 if (!rdrv)
1791 return -ENOMEM;
1792
1793 rdrv->start = udc_start;
1794 rdrv->stop = udc_stop;
1795 rdrv->irq = udc_irq;
1796 rdrv->name = "gadget";
1797 ci->roles[CI_ROLE_GADGET] = rdrv;
1798
1799 return 0;
1800 }