projects / GitHub / mt8127 / android_kernel_alcatel_ttab.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
usb: chipidea: udc: fix memory access of shared memory on armv5 machines
[GitHub/mt8127/android_kernel_alcatel_ttab.git] / drivers / usb / chipidea / udc.c
1 /*
2 * udc.c - ChipIdea UDC driver
3 *
4 * Copyright (C) 2008 Chipidea - MIPS Technologies, Inc. All rights reserved.
5 *
6 * Author: David Lopo
7 *
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License version 2 as
10 * published by the Free Software Foundation.
11 */
12
13 #include <linux/delay.h>
14 #include <linux/device.h>
15 #include <linux/dmapool.h>
16 #include <linux/err.h>
17 #include <linux/irqreturn.h>
18 #include <linux/kernel.h>
19 #include <linux/slab.h>
20 #include <linux/pm_runtime.h>
21 #include <linux/usb/ch9.h>
22 #include <linux/usb/gadget.h>
23 #include <linux/usb/otg.h>
24 #include <linux/usb/chipidea.h>
25
26 #include "ci.h"
27 #include "udc.h"
28 #include "bits.h"
29 #include "debug.h"
30
31 /* control endpoint description */
32 static const struct usb_endpoint_descriptor
33 ctrl_endpt_out_desc = {
34 .bLength = USB_DT_ENDPOINT_SIZE,
35 .bDescriptorType = USB_DT_ENDPOINT,
36
37 .bEndpointAddress = USB_DIR_OUT,
38 .bmAttributes = USB_ENDPOINT_XFER_CONTROL,
39 .wMaxPacketSize = cpu_to_le16(CTRL_PAYLOAD_MAX),
40 };
41
42 static const struct usb_endpoint_descriptor
43 ctrl_endpt_in_desc = {
44 .bLength = USB_DT_ENDPOINT_SIZE,
45 .bDescriptorType = USB_DT_ENDPOINT,
46
47 .bEndpointAddress = USB_DIR_IN,
48 .bmAttributes = USB_ENDPOINT_XFER_CONTROL,
49 .wMaxPacketSize = cpu_to_le16(CTRL_PAYLOAD_MAX),
50 };
51
52 /**
53 * hw_ep_bit: calculates the bit number
54 * @num: endpoint number
55 * @dir: endpoint direction
56 *
57 * This function returns bit number
58 */
59 static inline int hw_ep_bit(int num, int dir)
60 {
61 return num + (dir ? 16 : 0);
62 }
63
64 static inline int ep_to_bit(struct ci13xxx *ci, int n)
65 {
66 int fill = 16 - ci->hw_ep_max / 2;
67
68 if (n >= ci->hw_ep_max / 2)
69 n += fill;
70
71 return n;
72 }
73
74 /**
75 * hw_device_state: enables/disables interrupts (execute without interruption)
76 * @dma: 0 => disable, !0 => enable and set dma engine
77 *
78 * This function returns an error code
79 */
80 static int hw_device_state(struct ci13xxx *ci, u32 dma)
81 {
82 if (dma) {
83 hw_write(ci, OP_ENDPTLISTADDR, ~0, dma);
84 /* interrupt, error, port change, reset, sleep/suspend */
85 hw_write(ci, OP_USBINTR, ~0,
86 USBi_UI|USBi_UEI|USBi_PCI|USBi_URI|USBi_SLI);
87 } else {
88 hw_write(ci, OP_USBINTR, ~0, 0);
89 }
90 return 0;
91 }
92
93 /**
94 * hw_ep_flush: flush endpoint fifo (execute without interruption)
95 * @num: endpoint number
96 * @dir: endpoint direction
97 *
98 * This function returns an error code
99 */
100 static int hw_ep_flush(struct ci13xxx *ci, int num, int dir)
101 {
102 int n = hw_ep_bit(num, dir);
103
104 do {
105 /* flush any pending transfer */
106 hw_write(ci, OP_ENDPTFLUSH, BIT(n), BIT(n));
107 while (hw_read(ci, OP_ENDPTFLUSH, BIT(n)))
108 cpu_relax();
109 } while (hw_read(ci, OP_ENDPTSTAT, BIT(n)));
110
111 return 0;
112 }
113
114 /**
115 * hw_ep_disable: disables endpoint (execute without interruption)
116 * @num: endpoint number
117 * @dir: endpoint direction
118 *
119 * This function returns an error code
120 */
121 static int hw_ep_disable(struct ci13xxx *ci, int num, int dir)
122 {
123 hw_ep_flush(ci, num, dir);
124 hw_write(ci, OP_ENDPTCTRL + num,
125 dir ? ENDPTCTRL_TXE : ENDPTCTRL_RXE, 0);
126 return 0;
127 }
128
129 /**
130 * hw_ep_enable: enables endpoint (execute without interruption)
131 * @num: endpoint number
132 * @dir: endpoint direction
133 * @type: endpoint type
134 *
135 * This function returns an error code
136 */
137 static int hw_ep_enable(struct ci13xxx *ci, int num, int dir, int type)
138 {
139 u32 mask, data;
140
141 if (dir) {
142 mask = ENDPTCTRL_TXT; /* type */
143 data = type << __ffs(mask);
144
145 mask |= ENDPTCTRL_TXS; /* unstall */
146 mask |= ENDPTCTRL_TXR; /* reset data toggle */
147 data |= ENDPTCTRL_TXR;
148 mask |= ENDPTCTRL_TXE; /* enable */
149 data |= ENDPTCTRL_TXE;
150 } else {
151 mask = ENDPTCTRL_RXT; /* type */
152 data = type << __ffs(mask);
153
154 mask |= ENDPTCTRL_RXS; /* unstall */
155 mask |= ENDPTCTRL_RXR; /* reset data toggle */
156 data |= ENDPTCTRL_RXR;
157 mask |= ENDPTCTRL_RXE; /* enable */
158 data |= ENDPTCTRL_RXE;
159 }
160 hw_write(ci, OP_ENDPTCTRL + num, mask, data);
161 return 0;
162 }
163
164 /**
165 * hw_ep_get_halt: return endpoint halt status
166 * @num: endpoint number
167 * @dir: endpoint direction
168 *
169 * This function returns 1 if endpoint halted
170 */
171 static int hw_ep_get_halt(struct ci13xxx *ci, int num, int dir)
172 {
173 u32 mask = dir ? ENDPTCTRL_TXS : ENDPTCTRL_RXS;
174
175 return hw_read(ci, OP_ENDPTCTRL + num, mask) ? 1 : 0;
176 }
177
178 /**
179 * hw_test_and_clear_setup_status: test & clear setup status (execute without
180 * interruption)
181 * @n: endpoint number
182 *
183 * This function returns setup status
184 */
185 static int hw_test_and_clear_setup_status(struct ci13xxx *ci, int n)
186 {
187 n = ep_to_bit(ci, n);
188 return hw_test_and_clear(ci, OP_ENDPTSETUPSTAT, BIT(n));
189 }
190
191 /**
192 * hw_ep_prime: primes endpoint (execute without interruption)
193 * @num: endpoint number
194 * @dir: endpoint direction
195 * @is_ctrl: true if control endpoint
196 *
197 * This function returns an error code
198 */
199 static int hw_ep_prime(struct ci13xxx *ci, int num, int dir, int is_ctrl)
200 {
201 int n = hw_ep_bit(num, dir);
202
203 if (is_ctrl && dir == RX && hw_read(ci, OP_ENDPTSETUPSTAT, BIT(num)))
204 return -EAGAIN;
205
206 hw_write(ci, OP_ENDPTPRIME, BIT(n), BIT(n));
207
208 while (hw_read(ci, OP_ENDPTPRIME, BIT(n)))
209 cpu_relax();
210 if (is_ctrl && dir == RX && hw_read(ci, OP_ENDPTSETUPSTAT, BIT(num)))
211 return -EAGAIN;
212
213 /* status shoult be tested according with manual but it doesn't work */
214 return 0;
215 }
216
217 /**
218 * hw_ep_set_halt: configures ep halt & resets data toggle after clear (execute
219 * without interruption)
220 * @num: endpoint number
221 * @dir: endpoint direction
222 * @value: true => stall, false => unstall
223 *
224 * This function returns an error code
225 */
226 static int hw_ep_set_halt(struct ci13xxx *ci, int num, int dir, int value)
227 {
228 if (value != 0 && value != 1)
229 return -EINVAL;
230
231 do {
232 enum ci13xxx_regs reg = OP_ENDPTCTRL + num;
233 u32 mask_xs = dir ? ENDPTCTRL_TXS : ENDPTCTRL_RXS;
234 u32 mask_xr = dir ? ENDPTCTRL_TXR : ENDPTCTRL_RXR;
235
236 /* data toggle - reserved for EP0 but it's in ESS */
237 hw_write(ci, reg, mask_xs|mask_xr,
238 value ? mask_xs : mask_xr);
239 } while (value != hw_ep_get_halt(ci, num, dir));
240
241 return 0;
242 }
243
244 /**
245 * hw_is_port_high_speed: test if port is high speed
246 *
247 * This function returns true if high speed port
248 */
249 static int hw_port_is_high_speed(struct ci13xxx *ci)
250 {
251 return ci->hw_bank.lpm ? hw_read(ci, OP_DEVLC, DEVLC_PSPD) :
252 hw_read(ci, OP_PORTSC, PORTSC_HSP);
253 }
254
255 /**
256 * hw_read_intr_enable: returns interrupt enable register
257 *
258 * This function returns register data
259 */
260 static u32 hw_read_intr_enable(struct ci13xxx *ci)
261 {
262 return hw_read(ci, OP_USBINTR, ~0);
263 }
264
265 /**
266 * hw_read_intr_status: returns interrupt status register
267 *
268 * This function returns register data
269 */
270 static u32 hw_read_intr_status(struct ci13xxx *ci)
271 {
272 return hw_read(ci, OP_USBSTS, ~0);
273 }
274
275 /**
276 * hw_test_and_clear_complete: test & clear complete status (execute without
277 * interruption)
278 * @n: endpoint number
279 *
280 * This function returns complete status
281 */
282 static int hw_test_and_clear_complete(struct ci13xxx *ci, int n)
283 {
284 n = ep_to_bit(ci, n);
285 return hw_test_and_clear(ci, OP_ENDPTCOMPLETE, BIT(n));
286 }
287
288 /**
289 * hw_test_and_clear_intr_active: test & clear active interrupts (execute
290 * without interruption)
291 *
292 * This function returns active interrutps
293 */
294 static u32 hw_test_and_clear_intr_active(struct ci13xxx *ci)
295 {
296 u32 reg = hw_read_intr_status(ci) & hw_read_intr_enable(ci);
297
298 hw_write(ci, OP_USBSTS, ~0, reg);
299 return reg;
300 }
301
302 /**
303 * hw_test_and_clear_setup_guard: test & clear setup guard (execute without
304 * interruption)
305 *
306 * This function returns guard value
307 */
308 static int hw_test_and_clear_setup_guard(struct ci13xxx *ci)
309 {
310 return hw_test_and_write(ci, OP_USBCMD, USBCMD_SUTW, 0);
311 }
312
313 /**
314 * hw_test_and_set_setup_guard: test & set setup guard (execute without
315 * interruption)
316 *
317 * This function returns guard value
318 */
319 static int hw_test_and_set_setup_guard(struct ci13xxx *ci)
320 {
321 return hw_test_and_write(ci, OP_USBCMD, USBCMD_SUTW, USBCMD_SUTW);
322 }
323
324 /**
325 * hw_usb_set_address: configures USB address (execute without interruption)
326 * @value: new USB address
327 *
328 * This function explicitly sets the address, without the "USBADRA" (advance)
329 * feature, which is not supported by older versions of the controller.
330 */
331 static void hw_usb_set_address(struct ci13xxx *ci, u8 value)
332 {
333 hw_write(ci, OP_DEVICEADDR, DEVICEADDR_USBADR,
334 value << __ffs(DEVICEADDR_USBADR));
335 }
336
337 /**
338 * hw_usb_reset: restart device after a bus reset (execute without
339 * interruption)
340 *
341 * This function returns an error code
342 */
343 static int hw_usb_reset(struct ci13xxx *ci)
344 {
345 hw_usb_set_address(ci, 0);
346
347 /* ESS flushes only at end?!? */
348 hw_write(ci, OP_ENDPTFLUSH, ~0, ~0);
349
350 /* clear setup token semaphores */
351 hw_write(ci, OP_ENDPTSETUPSTAT, 0, 0);
352
353 /* clear complete status */
354 hw_write(ci, OP_ENDPTCOMPLETE, 0, 0);
355
356 /* wait until all bits cleared */
357 while (hw_read(ci, OP_ENDPTPRIME, ~0))
358 udelay(10); /* not RTOS friendly */
359
360 /* reset all endpoints ? */
361
362 /* reset internal status and wait for further instructions
363 no need to verify the port reset status (ESS does it) */
364
365 return 0;
366 }
367
368 /******************************************************************************
369 * UTIL block
370 *****************************************************************************/
371 /**
372 * _usb_addr: calculates endpoint address from direction & number
373 * @ep: endpoint
374 */
375 static inline u8 _usb_addr(struct ci13xxx_ep *ep)
376 {
377 return ((ep->dir == TX) ? USB_ENDPOINT_DIR_MASK : 0) | ep->num;
378 }
379
380 /**
381 * _hardware_queue: configures a request at hardware level
382 * @gadget: gadget
383 * @mEp: endpoint
384 *
385 * This function returns an error code
386 */
387 static int _hardware_enqueue(struct ci13xxx_ep *mEp, struct ci13xxx_req *mReq)
388 {
389 struct ci13xxx *ci = mEp->ci;
390 unsigned i;
391 int ret = 0;
392 unsigned length = mReq->req.length;
393
394 /* don't queue twice */
395 if (mReq->req.status == -EALREADY)
396 return -EALREADY;
397
398 mReq->req.status = -EALREADY;
399
400 if (mReq->req.zero && length && (length % mEp->ep.maxpacket == 0)) {
401 mReq->zptr = dma_pool_alloc(mEp->td_pool, GFP_ATOMIC,
402 &mReq->zdma);
403 if (mReq->zptr == NULL)
404 return -ENOMEM;
405
406 memset(mReq->zptr, 0, sizeof(*mReq->zptr));
407 mReq->zptr->next = cpu_to_le32(TD_TERMINATE);
408 mReq->zptr->token = cpu_to_le32(TD_STATUS_ACTIVE);
409 if (!mReq->req.no_interrupt)
410 mReq->zptr->token |= cpu_to_le32(TD_IOC);
411 }
412 ret = usb_gadget_map_request(&ci->gadget, &mReq->req, mEp->dir);
413 if (ret)
414 return ret;
415
416 /*
417 * TD configuration
418 * TODO - handle requests which spawns into several TDs
419 */
420 memset(mReq->ptr, 0, sizeof(*mReq->ptr));
421 mReq->ptr->token = cpu_to_le32(length << __ffs(TD_TOTAL_BYTES));
422 mReq->ptr->token &= cpu_to_le32(TD_TOTAL_BYTES);
423 mReq->ptr->token |= cpu_to_le32(TD_STATUS_ACTIVE);
424 if (mReq->zptr) {
425 mReq->ptr->next = cpu_to_le32(mReq->zdma);
426 } else {
427 mReq->ptr->next = cpu_to_le32(TD_TERMINATE);
428 if (!mReq->req.no_interrupt)
429 mReq->ptr->token |= cpu_to_le32(TD_IOC);
430 }
431 mReq->ptr->page[0] = cpu_to_le32(mReq->req.dma);
432 for (i = 1; i < TD_PAGE_COUNT; i++) {
433 u32 page = mReq->req.dma + i * CI13XXX_PAGE_SIZE;
434 page &= ~TD_RESERVED_MASK;
435 mReq->ptr->page[i] = cpu_to_le32(page);
436 }
437
438 wmb();
439
440 if (!list_empty(&mEp->qh.queue)) {
441 struct ci13xxx_req *mReqPrev;
442 int n = hw_ep_bit(mEp->num, mEp->dir);
443 int tmp_stat;
444 u32 next = mReq->dma & TD_ADDR_MASK;
445
446 mReqPrev = list_entry(mEp->qh.queue.prev,
447 struct ci13xxx_req, queue);
448 if (mReqPrev->zptr)
449 mReqPrev->zptr->next = cpu_to_le32(next);
450 else
451 mReqPrev->ptr->next = cpu_to_le32(next);
452 wmb();
453 if (hw_read(ci, OP_ENDPTPRIME, BIT(n)))
454 goto done;
455 do {
456 hw_write(ci, OP_USBCMD, USBCMD_ATDTW, USBCMD_ATDTW);
457 tmp_stat = hw_read(ci, OP_ENDPTSTAT, BIT(n));
458 } while (!hw_read(ci, OP_USBCMD, USBCMD_ATDTW));
459 hw_write(ci, OP_USBCMD, USBCMD_ATDTW, 0);
460 if (tmp_stat)
461 goto done;
462 }
463
464 /* QH configuration */
465 mEp->qh.ptr->td.next = cpu_to_le32(mReq->dma); /* TERMINATE = 0 */
466 mEp->qh.ptr->td.token &=
467 cpu_to_le32(~(TD_STATUS_HALTED|TD_STATUS_ACTIVE));
468
469 wmb(); /* synchronize before ep prime */
470
471 ret = hw_ep_prime(ci, mEp->num, mEp->dir,
472 mEp->type == USB_ENDPOINT_XFER_CONTROL);
473 done:
474 return ret;
475 }
476
477 /**
478 * _hardware_dequeue: handles a request at hardware level
479 * @gadget: gadget
480 * @mEp: endpoint
481 *
482 * This function returns an error code
483 */
484 static int _hardware_dequeue(struct ci13xxx_ep *mEp, struct ci13xxx_req *mReq)
485 {
486 u32 tmptoken = le32_to_cpu(mReq->ptr->token);
487
488 if (mReq->req.status != -EALREADY)
489 return -EINVAL;
490
491 if ((TD_STATUS_ACTIVE & tmptoken) != 0)
492 return -EBUSY;
493
494 if (mReq->zptr) {
495 if ((cpu_to_le32(TD_STATUS_ACTIVE) & mReq->zptr->token) != 0)
496 return -EBUSY;
497 dma_pool_free(mEp->td_pool, mReq->zptr, mReq->zdma);
498 mReq->zptr = NULL;
499 }
500
501 mReq->req.status = 0;
502
503 usb_gadget_unmap_request(&mEp->ci->gadget, &mReq->req, mEp->dir);
504
505 mReq->req.status = tmptoken & TD_STATUS;
506 if ((TD_STATUS_HALTED & mReq->req.status) != 0)
507 mReq->req.status = -1;
508 else if ((TD_STATUS_DT_ERR & mReq->req.status) != 0)
509 mReq->req.status = -1;
510 else if ((TD_STATUS_TR_ERR & mReq->req.status) != 0)
511 mReq->req.status = -1;
512
513 mReq->req.actual = tmptoken & TD_TOTAL_BYTES;
514 mReq->req.actual >>= __ffs(TD_TOTAL_BYTES);
515 mReq->req.actual = mReq->req.length - mReq->req.actual;
516 mReq->req.actual = mReq->req.status ? 0 : mReq->req.actual;
517
518 return mReq->req.actual;
519 }
520
521 /**
522 * _ep_nuke: dequeues all endpoint requests
523 * @mEp: endpoint
524 *
525 * This function returns an error code
526 * Caller must hold lock
527 */
528 static int _ep_nuke(struct ci13xxx_ep *mEp)
529 __releases(mEp->lock)
530 __acquires(mEp->lock)
531 {
532 if (mEp == NULL)
533 return -EINVAL;
534
535 hw_ep_flush(mEp->ci, mEp->num, mEp->dir);
536
537 while (!list_empty(&mEp->qh.queue)) {
538
539 /* pop oldest request */
540 struct ci13xxx_req *mReq = \
541 list_entry(mEp->qh.queue.next,
542 struct ci13xxx_req, queue);
543 list_del_init(&mReq->queue);
544 mReq->req.status = -ESHUTDOWN;
545
546 if (mReq->req.complete != NULL) {
547 spin_unlock(mEp->lock);
548 mReq->req.complete(&mEp->ep, &mReq->req);
549 spin_lock(mEp->lock);
550 }
551 }
552 return 0;
553 }
554
555 /**
556 * _gadget_stop_activity: stops all USB activity, flushes & disables all endpts
557 * @gadget: gadget
558 *
559 * This function returns an error code
560 */
561 static int _gadget_stop_activity(struct usb_gadget *gadget)
562 {
563 struct usb_ep *ep;
564 struct ci13xxx *ci = container_of(gadget, struct ci13xxx, gadget);
565 unsigned long flags;
566
567 spin_lock_irqsave(&ci->lock, flags);
568 ci->gadget.speed = USB_SPEED_UNKNOWN;
569 ci->remote_wakeup = 0;
570 ci->suspended = 0;
571 spin_unlock_irqrestore(&ci->lock, flags);
572
573 /* flush all endpoints */
574 gadget_for_each_ep(ep, gadget) {
575 usb_ep_fifo_flush(ep);
576 }
577 usb_ep_fifo_flush(&ci->ep0out->ep);
578 usb_ep_fifo_flush(&ci->ep0in->ep);
579
580 if (ci->driver)
581 ci->driver->disconnect(gadget);
582
583 /* make sure to disable all endpoints */
584 gadget_for_each_ep(ep, gadget) {
585 usb_ep_disable(ep);
586 }
587
588 if (ci->status != NULL) {
589 usb_ep_free_request(&ci->ep0in->ep, ci->status);
590 ci->status = NULL;
591 }
592
593 return 0;
594 }
595
596 /******************************************************************************
597 * ISR block
598 *****************************************************************************/
599 /**
600 * isr_reset_handler: USB reset interrupt handler
601 * @ci: UDC device
602 *
603 * This function resets USB engine after a bus reset occurred
604 */
605 static void isr_reset_handler(struct ci13xxx *ci)
606 __releases(ci->lock)
607 __acquires(ci->lock)
608 {
609 int retval;
610
611 spin_unlock(&ci->lock);
612 retval = _gadget_stop_activity(&ci->gadget);
613 if (retval)
614 goto done;
615
616 retval = hw_usb_reset(ci);
617 if (retval)
618 goto done;
619
620 ci->status = usb_ep_alloc_request(&ci->ep0in->ep, GFP_ATOMIC);
621 if (ci->status == NULL)
622 retval = -ENOMEM;
623
624 done:
625 spin_lock(&ci->lock);
626
627 if (retval)
628 dev_err(ci->dev, "error: %i\n", retval);
629 }
630
631 /**
632 * isr_get_status_complete: get_status request complete function
633 * @ep: endpoint
634 * @req: request handled
635 *
636 * Caller must release lock
637 */
638 static void isr_get_status_complete(struct usb_ep *ep, struct usb_request *req)
639 {
640 if (ep == NULL || req == NULL)
641 return;
642
643 kfree(req->buf);
644 usb_ep_free_request(ep, req);
645 }
646
647 /**
648 * _ep_queue: queues (submits) an I/O request to an endpoint
649 *
650 * Caller must hold lock
651 */
652 static int _ep_queue(struct usb_ep *ep, struct usb_request *req,
653 gfp_t __maybe_unused gfp_flags)
654 {
655 struct ci13xxx_ep *mEp = container_of(ep, struct ci13xxx_ep, ep);
656 struct ci13xxx_req *mReq = container_of(req, struct ci13xxx_req, req);
657 struct ci13xxx *ci = mEp->ci;
658 int retval = 0;
659
660 if (ep == NULL || req == NULL || mEp->ep.desc == NULL)
661 return -EINVAL;
662
663 if (mEp->type == USB_ENDPOINT_XFER_CONTROL) {
664 if (req->length)
665 mEp = (ci->ep0_dir == RX) ?
666 ci->ep0out : ci->ep0in;
667 if (!list_empty(&mEp->qh.queue)) {
668 _ep_nuke(mEp);
669 retval = -EOVERFLOW;
670 dev_warn(mEp->ci->dev, "endpoint ctrl %X nuked\n",
671 _usb_addr(mEp));
672 }
673 }
674
675 /* first nuke then test link, e.g. previous status has not sent */
676 if (!list_empty(&mReq->queue)) {
677 dev_err(mEp->ci->dev, "request already in queue\n");
678 return -EBUSY;
679 }
680
681 if (req->length > (TD_PAGE_COUNT - 1) * CI13XXX_PAGE_SIZE) {
682 dev_err(mEp->ci->dev, "request bigger than one td\n");
683 return -EMSGSIZE;
684 }
685
686 /* push request */
687 mReq->req.status = -EINPROGRESS;
688 mReq->req.actual = 0;
689
690 retval = _hardware_enqueue(mEp, mReq);
691
692 if (retval == -EALREADY)
693 retval = 0;
694 if (!retval)
695 list_add_tail(&mReq->queue, &mEp->qh.queue);
696
697 return retval;
698 }
699
700 /**
701 * isr_get_status_response: get_status request response
702 * @ci: ci struct
703 * @setup: setup request packet
704 *
705 * This function returns an error code
706 */
707 static int isr_get_status_response(struct ci13xxx *ci,
708 struct usb_ctrlrequest *setup)
709 __releases(mEp->lock)
710 __acquires(mEp->lock)
711 {
712 struct ci13xxx_ep *mEp = ci->ep0in;
713 struct usb_request *req = NULL;
714 gfp_t gfp_flags = GFP_ATOMIC;
715 int dir, num, retval;
716
717 if (mEp == NULL || setup == NULL)
718 return -EINVAL;
719
720 spin_unlock(mEp->lock);
721 req = usb_ep_alloc_request(&mEp->ep, gfp_flags);
722 spin_lock(mEp->lock);
723 if (req == NULL)
724 return -ENOMEM;
725
726 req->complete = isr_get_status_complete;
727 req->length = 2;
728 req->buf = kzalloc(req->length, gfp_flags);
729 if (req->buf == NULL) {
730 retval = -ENOMEM;
731 goto err_free_req;
732 }
733
734 if ((setup->bRequestType & USB_RECIP_MASK) == USB_RECIP_DEVICE) {
735 /* Assume that device is bus powered for now. */
736 *(u16 *)req->buf = ci->remote_wakeup << 1;
737 retval = 0;
738 } else if ((setup->bRequestType & USB_RECIP_MASK) \
739 == USB_RECIP_ENDPOINT) {
740 dir = (le16_to_cpu(setup->wIndex) & USB_ENDPOINT_DIR_MASK) ?
741 TX : RX;
742 num = le16_to_cpu(setup->wIndex) & USB_ENDPOINT_NUMBER_MASK;
743 *(u16 *)req->buf = hw_ep_get_halt(ci, num, dir);
744 }
745 /* else do nothing; reserved for future use */
746
747 retval = _ep_queue(&mEp->ep, req, gfp_flags);
748 if (retval)
749 goto err_free_buf;
750
751 return 0;
752
753 err_free_buf:
754 kfree(req->buf);
755 err_free_req:
756 spin_unlock(mEp->lock);
757 usb_ep_free_request(&mEp->ep, req);
758 spin_lock(mEp->lock);
759 return retval;
760 }
761
762 /**
763 * isr_setup_status_complete: setup_status request complete function
764 * @ep: endpoint
765 * @req: request handled
766 *
767 * Caller must release lock. Put the port in test mode if test mode
768 * feature is selected.
769 */
770 static void
771 isr_setup_status_complete(struct usb_ep *ep, struct usb_request *req)
772 {
773 struct ci13xxx *ci = req->context;
774 unsigned long flags;
775
776 if (ci->setaddr) {
777 hw_usb_set_address(ci, ci->address);
778 ci->setaddr = false;
779 }
780
781 spin_lock_irqsave(&ci->lock, flags);
782 if (ci->test_mode)
783 hw_port_test_set(ci, ci->test_mode);
784 spin_unlock_irqrestore(&ci->lock, flags);
785 }
786
787 /**
788 * isr_setup_status_phase: queues the status phase of a setup transation
789 * @ci: ci struct
790 *
791 * This function returns an error code
792 */
793 static int isr_setup_status_phase(struct ci13xxx *ci)
794 {
795 int retval;
796 struct ci13xxx_ep *mEp;
797
798 mEp = (ci->ep0_dir == TX) ? ci->ep0out : ci->ep0in;
799 ci->status->context = ci;
800 ci->status->complete = isr_setup_status_complete;
801
802 retval = _ep_queue(&mEp->ep, ci->status, GFP_ATOMIC);
803
804 return retval;
805 }
806
807 /**
808 * isr_tr_complete_low: transaction complete low level handler
809 * @mEp: endpoint
810 *
811 * This function returns an error code
812 * Caller must hold lock
813 */
814 static int isr_tr_complete_low(struct ci13xxx_ep *mEp)
815 __releases(mEp->lock)
816 __acquires(mEp->lock)
817 {
818 struct ci13xxx_req *mReq, *mReqTemp;
819 struct ci13xxx_ep *mEpTemp = mEp;
820 int retval = 0;
821
822 list_for_each_entry_safe(mReq, mReqTemp, &mEp->qh.queue,
823 queue) {
824 retval = _hardware_dequeue(mEp, mReq);
825 if (retval < 0)
826 break;
827 list_del_init(&mReq->queue);
828 if (mReq->req.complete != NULL) {
829 spin_unlock(mEp->lock);
830 if ((mEp->type == USB_ENDPOINT_XFER_CONTROL) &&
831 mReq->req.length)
832 mEpTemp = mEp->ci->ep0in;
833 mReq->req.complete(&mEpTemp->ep, &mReq->req);
834 spin_lock(mEp->lock);
835 }
836 }
837
838 if (retval == -EBUSY)
839 retval = 0;
840
841 return retval;
842 }
843
844 /**
845 * isr_tr_complete_handler: transaction complete interrupt handler
846 * @ci: UDC descriptor
847 *
848 * This function handles traffic events
849 */
850 static void isr_tr_complete_handler(struct ci13xxx *ci)
851 __releases(ci->lock)
852 __acquires(ci->lock)
853 {
854 unsigned i;
855 u8 tmode = 0;
856
857 for (i = 0; i < ci->hw_ep_max; i++) {
858 struct ci13xxx_ep *mEp = &ci->ci13xxx_ep[i];
859 int type, num, dir, err = -EINVAL;
860 struct usb_ctrlrequest req;
861
862 if (mEp->ep.desc == NULL)
863 continue; /* not configured */
864
865 if (hw_test_and_clear_complete(ci, i)) {
866 err = isr_tr_complete_low(mEp);
867 if (mEp->type == USB_ENDPOINT_XFER_CONTROL) {
868 if (err > 0) /* needs status phase */
869 err = isr_setup_status_phase(ci);
870 if (err < 0) {
871 spin_unlock(&ci->lock);
872 if (usb_ep_set_halt(&mEp->ep))
873 dev_err(ci->dev,
874 "error: ep_set_halt\n");
875 spin_lock(&ci->lock);
876 }
877 }
878 }
879
880 if (mEp->type != USB_ENDPOINT_XFER_CONTROL ||
881 !hw_test_and_clear_setup_status(ci, i))
882 continue;
883
884 if (i != 0) {
885 dev_warn(ci->dev, "ctrl traffic at endpoint %d\n", i);
886 continue;
887 }
888
889 /*
890 * Flush data and handshake transactions of previous
891 * setup packet.
892 */
893 _ep_nuke(ci->ep0out);
894 _ep_nuke(ci->ep0in);
895
896 /* read_setup_packet */
897 do {
898 hw_test_and_set_setup_guard(ci);
899 memcpy(&req, &mEp->qh.ptr->setup, sizeof(req));
900 } while (!hw_test_and_clear_setup_guard(ci));
901
902 type = req.bRequestType;
903
904 ci->ep0_dir = (type & USB_DIR_IN) ? TX : RX;
905
906 switch (req.bRequest) {
907 case USB_REQ_CLEAR_FEATURE:
908 if (type == (USB_DIR_OUT|USB_RECIP_ENDPOINT) &&
909 le16_to_cpu(req.wValue) ==
910 USB_ENDPOINT_HALT) {
911 if (req.wLength != 0)
912 break;
913 num = le16_to_cpu(req.wIndex);
914 dir = num & USB_ENDPOINT_DIR_MASK;
915 num &= USB_ENDPOINT_NUMBER_MASK;
916 if (dir) /* TX */
917 num += ci->hw_ep_max/2;
918 if (!ci->ci13xxx_ep[num].wedge) {
919 spin_unlock(&ci->lock);
920 err = usb_ep_clear_halt(
921 &ci->ci13xxx_ep[num].ep);
922 spin_lock(&ci->lock);
923 if (err)
924 break;
925 }
926 err = isr_setup_status_phase(ci);
927 } else if (type == (USB_DIR_OUT|USB_RECIP_DEVICE) &&
928 le16_to_cpu(req.wValue) ==
929 USB_DEVICE_REMOTE_WAKEUP) {
930 if (req.wLength != 0)
931 break;
932 ci->remote_wakeup = 0;
933 err = isr_setup_status_phase(ci);
934 } else {
935 goto delegate;
936 }
937 break;
938 case USB_REQ_GET_STATUS:
939 if (type != (USB_DIR_IN|USB_RECIP_DEVICE) &&
940 type != (USB_DIR_IN|USB_RECIP_ENDPOINT) &&
941 type != (USB_DIR_IN|USB_RECIP_INTERFACE))
942 goto delegate;
943 if (le16_to_cpu(req.wLength) != 2 ||
944 le16_to_cpu(req.wValue) != 0)
945 break;
946 err = isr_get_status_response(ci, &req);
947 break;
948 case USB_REQ_SET_ADDRESS:
949 if (type != (USB_DIR_OUT|USB_RECIP_DEVICE))
950 goto delegate;
951 if (le16_to_cpu(req.wLength) != 0 ||
952 le16_to_cpu(req.wIndex) != 0)
953 break;
954 ci->address = (u8)le16_to_cpu(req.wValue);
955 ci->setaddr = true;
956 err = isr_setup_status_phase(ci);
957 break;
958 case USB_REQ_SET_FEATURE:
959 if (type == (USB_DIR_OUT|USB_RECIP_ENDPOINT) &&
960 le16_to_cpu(req.wValue) ==
961 USB_ENDPOINT_HALT) {
962 if (req.wLength != 0)
963 break;
964 num = le16_to_cpu(req.wIndex);
965 dir = num & USB_ENDPOINT_DIR_MASK;
966 num &= USB_ENDPOINT_NUMBER_MASK;
967 if (dir) /* TX */
968 num += ci->hw_ep_max/2;
969
970 spin_unlock(&ci->lock);
971 err = usb_ep_set_halt(&ci->ci13xxx_ep[num].ep);
972 spin_lock(&ci->lock);
973 if (!err)
974 isr_setup_status_phase(ci);
975 } else if (type == (USB_DIR_OUT|USB_RECIP_DEVICE)) {
976 if (req.wLength != 0)
977 break;
978 switch (le16_to_cpu(req.wValue)) {
979 case USB_DEVICE_REMOTE_WAKEUP:
980 ci->remote_wakeup = 1;
981 err = isr_setup_status_phase(ci);
982 break;
983 case USB_DEVICE_TEST_MODE:
984 tmode = le16_to_cpu(req.wIndex) >> 8;
985 switch (tmode) {
986 case TEST_J:
987 case TEST_K:
988 case TEST_SE0_NAK:
989 case TEST_PACKET:
990 case TEST_FORCE_EN:
991 ci->test_mode = tmode;
992 err = isr_setup_status_phase(
993 ci);
994 break;
995 default:
996 break;
997 }
998 default:
999 goto delegate;
1000 }
1001 } else {
1002 goto delegate;
1003 }
1004 break;
1005 default:
1006 delegate:
1007 if (req.wLength == 0) /* no data phase */
1008 ci->ep0_dir = TX;
1009
1010 spin_unlock(&ci->lock);
1011 err = ci->driver->setup(&ci->gadget, &req);
1012 spin_lock(&ci->lock);
1013 break;
1014 }
1015
1016 if (err < 0) {
1017 spin_unlock(&ci->lock);
1018 if (usb_ep_set_halt(&mEp->ep))
1019 dev_err(ci->dev, "error: ep_set_halt\n");
1020 spin_lock(&ci->lock);
1021 }
1022 }
1023 }
1024
1025 /******************************************************************************
1026 * ENDPT block
1027 *****************************************************************************/
1028 /**
1029 * ep_enable: configure endpoint, making it usable
1030 *
1031 * Check usb_ep_enable() at "usb_gadget.h" for details
1032 */
1033 static int ep_enable(struct usb_ep *ep,
1034 const struct usb_endpoint_descriptor *desc)
1035 {
1036 struct ci13xxx_ep *mEp = container_of(ep, struct ci13xxx_ep, ep);
1037 int retval = 0;
1038 unsigned long flags;
1039 u32 cap = 0;
1040
1041 if (ep == NULL || desc == NULL)
1042 return -EINVAL;
1043
1044 spin_lock_irqsave(mEp->lock, flags);
1045
1046 /* only internal SW should enable ctrl endpts */
1047
1048 mEp->ep.desc = desc;
1049
1050 if (!list_empty(&mEp->qh.queue))
1051 dev_warn(mEp->ci->dev, "enabling a non-empty endpoint!\n");
1052
1053 mEp->dir = usb_endpoint_dir_in(desc) ? TX : RX;
1054 mEp->num = usb_endpoint_num(desc);
1055 mEp->type = usb_endpoint_type(desc);
1056
1057 mEp->ep.maxpacket = usb_endpoint_maxp(desc);
1058
1059 if (mEp->type == USB_ENDPOINT_XFER_CONTROL)
1060 cap |= QH_IOS;
1061 if (mEp->num)
1062 cap |= QH_ZLT;
1063 cap |= (mEp->ep.maxpacket << __ffs(QH_MAX_PKT)) & QH_MAX_PKT;
1064
1065 mEp->qh.ptr->cap = cpu_to_le32(cap);
1066
1067 mEp->qh.ptr->td.next |= cpu_to_le32(TD_TERMINATE); /* needed? */
1068
1069 /*
1070 * Enable endpoints in the HW other than ep0 as ep0
1071 * is always enabled
1072 */
1073 if (mEp->num)
1074 retval |= hw_ep_enable(mEp->ci, mEp->num, mEp->dir, mEp->type);
1075
1076 spin_unlock_irqrestore(mEp->lock, flags);
1077 return retval;
1078 }
1079
1080 /**
1081 * ep_disable: endpoint is no longer usable
1082 *
1083 * Check usb_ep_disable() at "usb_gadget.h" for details
1084 */
1085 static int ep_disable(struct usb_ep *ep)
1086 {
1087 struct ci13xxx_ep *mEp = container_of(ep, struct ci13xxx_ep, ep);
1088 int direction, retval = 0;
1089 unsigned long flags;
1090
1091 if (ep == NULL)
1092 return -EINVAL;
1093 else if (mEp->ep.desc == NULL)
1094 return -EBUSY;
1095
1096 spin_lock_irqsave(mEp->lock, flags);
1097
1098 /* only internal SW should disable ctrl endpts */
1099
1100 direction = mEp->dir;
1101 do {
1102 retval |= _ep_nuke(mEp);
1103 retval |= hw_ep_disable(mEp->ci, mEp->num, mEp->dir);
1104
1105 if (mEp->type == USB_ENDPOINT_XFER_CONTROL)
1106 mEp->dir = (mEp->dir == TX) ? RX : TX;
1107
1108 } while (mEp->dir != direction);
1109
1110 mEp->ep.desc = NULL;
1111
1112 spin_unlock_irqrestore(mEp->lock, flags);
1113 return retval;
1114 }
1115
1116 /**
1117 * ep_alloc_request: allocate a request object to use with this endpoint
1118 *
1119 * Check usb_ep_alloc_request() at "usb_gadget.h" for details
1120 */
1121 static struct usb_request *ep_alloc_request(struct usb_ep *ep, gfp_t gfp_flags)
1122 {
1123 struct ci13xxx_ep *mEp = container_of(ep, struct ci13xxx_ep, ep);
1124 struct ci13xxx_req *mReq = NULL;
1125
1126 if (ep == NULL)
1127 return NULL;
1128
1129 mReq = kzalloc(sizeof(struct ci13xxx_req), gfp_flags);
1130 if (mReq != NULL) {
1131 INIT_LIST_HEAD(&mReq->queue);
1132
1133 mReq->ptr = dma_pool_alloc(mEp->td_pool, gfp_flags,
1134 &mReq->dma);
1135 if (mReq->ptr == NULL) {
1136 kfree(mReq);
1137 mReq = NULL;
1138 }
1139 }
1140
1141 return (mReq == NULL) ? NULL : &mReq->req;
1142 }
1143
1144 /**
1145 * ep_free_request: frees a request object
1146 *
1147 * Check usb_ep_free_request() at "usb_gadget.h" for details
1148 */
1149 static void ep_free_request(struct usb_ep *ep, struct usb_request *req)
1150 {
1151 struct ci13xxx_ep *mEp = container_of(ep, struct ci13xxx_ep, ep);
1152 struct ci13xxx_req *mReq = container_of(req, struct ci13xxx_req, req);
1153 unsigned long flags;
1154
1155 if (ep == NULL || req == NULL) {
1156 return;
1157 } else if (!list_empty(&mReq->queue)) {
1158 dev_err(mEp->ci->dev, "freeing queued request\n");
1159 return;
1160 }
1161
1162 spin_lock_irqsave(mEp->lock, flags);
1163
1164 if (mReq->ptr)
1165 dma_pool_free(mEp->td_pool, mReq->ptr, mReq->dma);
1166 kfree(mReq);
1167
1168 spin_unlock_irqrestore(mEp->lock, flags);
1169 }
1170
1171 /**
1172 * ep_queue: queues (submits) an I/O request to an endpoint
1173 *
1174 * Check usb_ep_queue()* at usb_gadget.h" for details
1175 */
1176 static int ep_queue(struct usb_ep *ep, struct usb_request *req,
1177 gfp_t __maybe_unused gfp_flags)
1178 {
1179 struct ci13xxx_ep *mEp = container_of(ep, struct ci13xxx_ep, ep);
1180 int retval = 0;
1181 unsigned long flags;
1182
1183 if (ep == NULL || req == NULL || mEp->ep.desc == NULL)
1184 return -EINVAL;
1185
1186 spin_lock_irqsave(mEp->lock, flags);
1187 retval = _ep_queue(ep, req, gfp_flags);
1188 spin_unlock_irqrestore(mEp->lock, flags);
1189 return retval;
1190 }
1191
1192 /**
1193 * ep_dequeue: dequeues (cancels, unlinks) an I/O request from an endpoint
1194 *
1195 * Check usb_ep_dequeue() at "usb_gadget.h" for details
1196 */
1197 static int ep_dequeue(struct usb_ep *ep, struct usb_request *req)
1198 {
1199 struct ci13xxx_ep *mEp = container_of(ep, struct ci13xxx_ep, ep);
1200 struct ci13xxx_req *mReq = container_of(req, struct ci13xxx_req, req);
1201 unsigned long flags;
1202
1203 if (ep == NULL || req == NULL || mReq->req.status != -EALREADY ||
1204 mEp->ep.desc == NULL || list_empty(&mReq->queue) ||
1205 list_empty(&mEp->qh.queue))
1206 return -EINVAL;
1207
1208 spin_lock_irqsave(mEp->lock, flags);
1209
1210 hw_ep_flush(mEp->ci, mEp->num, mEp->dir);
1211
1212 /* pop request */
1213 list_del_init(&mReq->queue);
1214
1215 usb_gadget_unmap_request(&mEp->ci->gadget, req, mEp->dir);
1216
1217 req->status = -ECONNRESET;
1218
1219 if (mReq->req.complete != NULL) {
1220 spin_unlock(mEp->lock);
1221 mReq->req.complete(&mEp->ep, &mReq->req);
1222 spin_lock(mEp->lock);
1223 }
1224
1225 spin_unlock_irqrestore(mEp->lock, flags);
1226 return 0;
1227 }
1228
1229 /**
1230 * ep_set_halt: sets the endpoint halt feature
1231 *
1232 * Check usb_ep_set_halt() at "usb_gadget.h" for details
1233 */
1234 static int ep_set_halt(struct usb_ep *ep, int value)
1235 {
1236 struct ci13xxx_ep *mEp = container_of(ep, struct ci13xxx_ep, ep);
1237 int direction, retval = 0;
1238 unsigned long flags;
1239
1240 if (ep == NULL || mEp->ep.desc == NULL)
1241 return -EINVAL;
1242
1243 spin_lock_irqsave(mEp->lock, flags);
1244
1245 #ifndef STALL_IN
1246 /* g_file_storage MS compliant but g_zero fails chapter 9 compliance */
1247 if (value && mEp->type == USB_ENDPOINT_XFER_BULK && mEp->dir == TX &&
1248 !list_empty(&mEp->qh.queue)) {
1249 spin_unlock_irqrestore(mEp->lock, flags);
1250 return -EAGAIN;
1251 }
1252 #endif
1253
1254 direction = mEp->dir;
1255 do {
1256 retval |= hw_ep_set_halt(mEp->ci, mEp->num, mEp->dir, value);
1257
1258 if (!value)
1259 mEp->wedge = 0;
1260
1261 if (mEp->type == USB_ENDPOINT_XFER_CONTROL)
1262 mEp->dir = (mEp->dir == TX) ? RX : TX;
1263
1264 } while (mEp->dir != direction);
1265
1266 spin_unlock_irqrestore(mEp->lock, flags);
1267 return retval;
1268 }
1269
1270 /**
1271 * ep_set_wedge: sets the halt feature and ignores clear requests
1272 *
1273 * Check usb_ep_set_wedge() at "usb_gadget.h" for details
1274 */
1275 static int ep_set_wedge(struct usb_ep *ep)
1276 {
1277 struct ci13xxx_ep *mEp = container_of(ep, struct ci13xxx_ep, ep);
1278 unsigned long flags;
1279
1280 if (ep == NULL || mEp->ep.desc == NULL)
1281 return -EINVAL;
1282
1283 spin_lock_irqsave(mEp->lock, flags);
1284 mEp->wedge = 1;
1285 spin_unlock_irqrestore(mEp->lock, flags);
1286
1287 return usb_ep_set_halt(ep);
1288 }
1289
1290 /**
1291 * ep_fifo_flush: flushes contents of a fifo
1292 *
1293 * Check usb_ep_fifo_flush() at "usb_gadget.h" for details
1294 */
1295 static void ep_fifo_flush(struct usb_ep *ep)
1296 {
1297 struct ci13xxx_ep *mEp = container_of(ep, struct ci13xxx_ep, ep);
1298 unsigned long flags;
1299
1300 if (ep == NULL) {
1301 dev_err(mEp->ci->dev, "%02X: -EINVAL\n", _usb_addr(mEp));
1302 return;
1303 }
1304
1305 spin_lock_irqsave(mEp->lock, flags);
1306
1307 hw_ep_flush(mEp->ci, mEp->num, mEp->dir);
1308
1309 spin_unlock_irqrestore(mEp->lock, flags);
1310 }
1311
1312 /**
1313 * Endpoint-specific part of the API to the USB controller hardware
1314 * Check "usb_gadget.h" for details
1315 */
1316 static const struct usb_ep_ops usb_ep_ops = {
1317 .enable = ep_enable,
1318 .disable = ep_disable,
1319 .alloc_request = ep_alloc_request,
1320 .free_request = ep_free_request,
1321 .queue = ep_queue,
1322 .dequeue = ep_dequeue,
1323 .set_halt = ep_set_halt,
1324 .set_wedge = ep_set_wedge,
1325 .fifo_flush = ep_fifo_flush,
1326 };
1327
1328 /******************************************************************************
1329 * GADGET block
1330 *****************************************************************************/
1331 static int ci13xxx_vbus_session(struct usb_gadget *_gadget, int is_active)
1332 {
1333 struct ci13xxx *ci = container_of(_gadget, struct ci13xxx, gadget);
1334 unsigned long flags;
1335 int gadget_ready = 0;
1336
1337 if (!(ci->platdata->flags & CI13XXX_PULLUP_ON_VBUS))
1338 return -EOPNOTSUPP;
1339
1340 spin_lock_irqsave(&ci->lock, flags);
1341 ci->vbus_active = is_active;
1342 if (ci->driver)
1343 gadget_ready = 1;
1344 spin_unlock_irqrestore(&ci->lock, flags);
1345
1346 if (gadget_ready) {
1347 if (is_active) {
1348 pm_runtime_get_sync(&_gadget->dev);
1349 hw_device_reset(ci, USBMODE_CM_DC);
1350 hw_device_state(ci, ci->ep0out->qh.dma);
1351 } else {
1352 hw_device_state(ci, 0);
1353 if (ci->platdata->notify_event)
1354 ci->platdata->notify_event(ci,
1355 CI13XXX_CONTROLLER_STOPPED_EVENT);
1356 _gadget_stop_activity(&ci->gadget);
1357 pm_runtime_put_sync(&_gadget->dev);
1358 }
1359 }
1360
1361 return 0;
1362 }
1363
1364 static int ci13xxx_wakeup(struct usb_gadget *_gadget)
1365 {
1366 struct ci13xxx *ci = container_of(_gadget, struct ci13xxx, gadget);
1367 unsigned long flags;
1368 int ret = 0;
1369
1370 spin_lock_irqsave(&ci->lock, flags);
1371 if (!ci->remote_wakeup) {
1372 ret = -EOPNOTSUPP;
1373 goto out;
1374 }
1375 if (!hw_read(ci, OP_PORTSC, PORTSC_SUSP)) {
1376 ret = -EINVAL;
1377 goto out;
1378 }
1379 hw_write(ci, OP_PORTSC, PORTSC_FPR, PORTSC_FPR);
1380 out:
1381 spin_unlock_irqrestore(&ci->lock, flags);
1382 return ret;
1383 }
1384
1385 static int ci13xxx_vbus_draw(struct usb_gadget *_gadget, unsigned mA)
1386 {
1387 struct ci13xxx *ci = container_of(_gadget, struct ci13xxx, gadget);
1388
1389 if (ci->transceiver)
1390 return usb_phy_set_power(ci->transceiver, mA);
1391 return -ENOTSUPP;
1392 }
1393
1394 /* Change Data+ pullup status
1395 * this func is used by usb_gadget_connect/disconnet
1396 */
1397 static int ci13xxx_pullup(struct usb_gadget *_gadget, int is_on)
1398 {
1399 struct ci13xxx *ci = container_of(_gadget, struct ci13xxx, gadget);
1400
1401 if (is_on)
1402 hw_write(ci, OP_USBCMD, USBCMD_RS, USBCMD_RS);
1403 else
1404 hw_write(ci, OP_USBCMD, USBCMD_RS, 0);
1405
1406 return 0;
1407 }
1408
1409 static int ci13xxx_start(struct usb_gadget *gadget,
1410 struct usb_gadget_driver *driver);
1411 static int ci13xxx_stop(struct usb_gadget *gadget,
1412 struct usb_gadget_driver *driver);
1413 /**
1414 * Device operations part of the API to the USB controller hardware,
1415 * which don't involve endpoints (or i/o)
1416 * Check "usb_gadget.h" for details
1417 */
1418 static const struct usb_gadget_ops usb_gadget_ops = {
1419 .vbus_session = ci13xxx_vbus_session,
1420 .wakeup = ci13xxx_wakeup,
1421 .pullup = ci13xxx_pullup,
1422 .vbus_draw = ci13xxx_vbus_draw,
1423 .udc_start = ci13xxx_start,
1424 .udc_stop = ci13xxx_stop,
1425 };
1426
1427 static int init_eps(struct ci13xxx *ci)
1428 {
1429 int retval = 0, i, j;
1430
1431 for (i = 0; i < ci->hw_ep_max/2; i++)
1432 for (j = RX; j <= TX; j++) {
1433 int k = i + j * ci->hw_ep_max/2;
1434 struct ci13xxx_ep *mEp = &ci->ci13xxx_ep[k];
1435
1436 scnprintf(mEp->name, sizeof(mEp->name), "ep%i%s", i,
1437 (j == TX) ? "in" : "out");
1438
1439 mEp->ci = ci;
1440 mEp->lock = &ci->lock;
1441 mEp->td_pool = ci->td_pool;
1442
1443 mEp->ep.name = mEp->name;
1444 mEp->ep.ops = &usb_ep_ops;
1445 /*
1446 * for ep0: maxP defined in desc, for other
1447 * eps, maxP is set by epautoconfig() called
1448 * by gadget layer
1449 */
1450 mEp->ep.maxpacket = (unsigned short)~0;
1451
1452 INIT_LIST_HEAD(&mEp->qh.queue);
1453 mEp->qh.ptr = dma_pool_alloc(ci->qh_pool, GFP_KERNEL,
1454 &mEp->qh.dma);
1455 if (mEp->qh.ptr == NULL)
1456 retval = -ENOMEM;
1457 else
1458 memset(mEp->qh.ptr, 0, sizeof(*mEp->qh.ptr));
1459
1460 /*
1461 * set up shorthands for ep0 out and in endpoints,
1462 * don't add to gadget's ep_list
1463 */
1464 if (i == 0) {
1465 if (j == RX)
1466 ci->ep0out = mEp;
1467 else
1468 ci->ep0in = mEp;
1469
1470 mEp->ep.maxpacket = CTRL_PAYLOAD_MAX;
1471 continue;
1472 }
1473
1474 list_add_tail(&mEp->ep.ep_list, &ci->gadget.ep_list);
1475 }
1476
1477 return retval;
1478 }
1479
1480 static void destroy_eps(struct ci13xxx *ci)
1481 {
1482 int i;
1483
1484 for (i = 0; i < ci->hw_ep_max; i++) {
1485 struct ci13xxx_ep *mEp = &ci->ci13xxx_ep[i];
1486
1487 dma_pool_free(ci->qh_pool, mEp->qh.ptr, mEp->qh.dma);
1488 }
1489 }
1490
1491 /**
1492 * ci13xxx_start: register a gadget driver
1493 * @gadget: our gadget
1494 * @driver: the driver being registered
1495 *
1496 * Interrupts are enabled here.
1497 */
1498 static int ci13xxx_start(struct usb_gadget *gadget,
1499 struct usb_gadget_driver *driver)
1500 {
1501 struct ci13xxx *ci = container_of(gadget, struct ci13xxx, gadget);
1502 unsigned long flags;
1503 int retval = -ENOMEM;
1504
1505 if (driver->disconnect == NULL)
1506 return -EINVAL;
1507
1508
1509 ci->ep0out->ep.desc = &ctrl_endpt_out_desc;
1510 retval = usb_ep_enable(&ci->ep0out->ep);
1511 if (retval)
1512 return retval;
1513
1514 ci->ep0in->ep.desc = &ctrl_endpt_in_desc;
1515 retval = usb_ep_enable(&ci->ep0in->ep);
1516 if (retval)
1517 return retval;
1518 spin_lock_irqsave(&ci->lock, flags);
1519
1520 ci->driver = driver;
1521 pm_runtime_get_sync(&ci->gadget.dev);
1522 if (ci->platdata->flags & CI13XXX_PULLUP_ON_VBUS) {
1523 if (ci->vbus_active) {
1524 if (ci->platdata->flags & CI13XXX_REGS_SHARED)
1525 hw_device_reset(ci, USBMODE_CM_DC);
1526 } else {
1527 pm_runtime_put_sync(&ci->gadget.dev);
1528 goto done;
1529 }
1530 }
1531
1532 retval = hw_device_state(ci, ci->ep0out->qh.dma);
1533 if (retval)
1534 pm_runtime_put_sync(&ci->gadget.dev);
1535
1536 done:
1537 spin_unlock_irqrestore(&ci->lock, flags);
1538 return retval;
1539 }
1540
1541 /**
1542 * ci13xxx_stop: unregister a gadget driver
1543 */
1544 static int ci13xxx_stop(struct usb_gadget *gadget,
1545 struct usb_gadget_driver *driver)
1546 {
1547 struct ci13xxx *ci = container_of(gadget, struct ci13xxx, gadget);
1548 unsigned long flags;
1549
1550 spin_lock_irqsave(&ci->lock, flags);
1551
1552 if (!(ci->platdata->flags & CI13XXX_PULLUP_ON_VBUS) ||
1553 ci->vbus_active) {
1554 hw_device_state(ci, 0);
1555 if (ci->platdata->notify_event)
1556 ci->platdata->notify_event(ci,
1557 CI13XXX_CONTROLLER_STOPPED_EVENT);
1558 ci->driver = NULL;
1559 spin_unlock_irqrestore(&ci->lock, flags);
1560 _gadget_stop_activity(&ci->gadget);
1561 spin_lock_irqsave(&ci->lock, flags);
1562 pm_runtime_put(&ci->gadget.dev);
1563 }
1564
1565 spin_unlock_irqrestore(&ci->lock, flags);
1566
1567 return 0;
1568 }
1569
1570 /******************************************************************************
1571 * BUS block
1572 *****************************************************************************/
1573 /**
1574 * udc_irq: ci interrupt handler
1575 *
1576 * This function returns IRQ_HANDLED if the IRQ has been handled
1577 * It locks access to registers
1578 */
1579 static irqreturn_t udc_irq(struct ci13xxx *ci)
1580 {
1581 irqreturn_t retval;
1582 u32 intr;
1583
1584 if (ci == NULL)
1585 return IRQ_HANDLED;
1586
1587 spin_lock(&ci->lock);
1588
1589 if (ci->platdata->flags & CI13XXX_REGS_SHARED) {
1590 if (hw_read(ci, OP_USBMODE, USBMODE_CM) !=
1591 USBMODE_CM_DC) {
1592 spin_unlock(&ci->lock);
1593 return IRQ_NONE;
1594 }
1595 }
1596 intr = hw_test_and_clear_intr_active(ci);
1597
1598 if (intr) {
1599 /* order defines priority - do NOT change it */
1600 if (USBi_URI & intr)
1601 isr_reset_handler(ci);
1602
1603 if (USBi_PCI & intr) {
1604 ci->gadget.speed = hw_port_is_high_speed(ci) ?
1605 USB_SPEED_HIGH : USB_SPEED_FULL;
1606 if (ci->suspended && ci->driver->resume) {
1607 spin_unlock(&ci->lock);
1608 ci->driver->resume(&ci->gadget);
1609 spin_lock(&ci->lock);
1610 ci->suspended = 0;
1611 }
1612 }
1613
1614 if (USBi_UI & intr)
1615 isr_tr_complete_handler(ci);
1616
1617 if (USBi_SLI & intr) {
1618 if (ci->gadget.speed != USB_SPEED_UNKNOWN &&
1619 ci->driver->suspend) {
1620 ci->suspended = 1;
1621 spin_unlock(&ci->lock);
1622 ci->driver->suspend(&ci->gadget);
1623 spin_lock(&ci->lock);
1624 }
1625 }
1626 retval = IRQ_HANDLED;
1627 } else {
1628 retval = IRQ_NONE;
1629 }
1630 spin_unlock(&ci->lock);
1631
1632 return retval;
1633 }
1634
1635 /**
1636 * udc_release: driver release function
1637 * @dev: device
1638 *
1639 * Currently does nothing
1640 */
1641 static void udc_release(struct device *dev)
1642 {
1643 }
1644
1645 /**
1646 * udc_start: initialize gadget role
1647 * @ci: chipidea controller
1648 */
1649 static int udc_start(struct ci13xxx *ci)
1650 {
1651 struct device *dev = ci->dev;
1652 int retval = 0;
1653
1654 spin_lock_init(&ci->lock);
1655
1656 ci->gadget.ops = &usb_gadget_ops;
1657 ci->gadget.speed = USB_SPEED_UNKNOWN;
1658 ci->gadget.max_speed = USB_SPEED_HIGH;
1659 ci->gadget.is_otg = 0;
1660 ci->gadget.name = ci->platdata->name;
1661
1662 INIT_LIST_HEAD(&ci->gadget.ep_list);
1663
1664 dev_set_name(&ci->gadget.dev, "gadget");
1665 ci->gadget.dev.dma_mask = dev->dma_mask;
1666 ci->gadget.dev.coherent_dma_mask = dev->coherent_dma_mask;
1667 ci->gadget.dev.parent = dev;
1668 ci->gadget.dev.release = udc_release;
1669
1670 /* alloc resources */
1671 ci->qh_pool = dma_pool_create("ci13xxx_qh", dev,
1672 sizeof(struct ci13xxx_qh),
1673 64, CI13XXX_PAGE_SIZE);
1674 if (ci->qh_pool == NULL)
1675 return -ENOMEM;
1676
1677 ci->td_pool = dma_pool_create("ci13xxx_td", dev,
1678 sizeof(struct ci13xxx_td),
1679 64, CI13XXX_PAGE_SIZE);
1680 if (ci->td_pool == NULL) {
1681 retval = -ENOMEM;
1682 goto free_qh_pool;
1683 }
1684
1685 retval = init_eps(ci);
1686 if (retval)
1687 goto free_pools;
1688
1689 ci->gadget.ep0 = &ci->ep0in->ep;
1690
1691 if (ci->global_phy)
1692 ci->transceiver = usb_get_phy(USB_PHY_TYPE_USB2);
1693
1694 if (ci->platdata->flags & CI13XXX_REQUIRE_TRANSCEIVER) {
1695 if (ci->transceiver == NULL) {
1696 retval = -ENODEV;
1697 goto destroy_eps;
1698 }
1699 }
1700
1701 if (!(ci->platdata->flags & CI13XXX_REGS_SHARED)) {
1702 retval = hw_device_reset(ci, USBMODE_CM_DC);
1703 if (retval)
1704 goto put_transceiver;
1705 }
1706
1707 retval = device_register(&ci->gadget.dev);
1708 if (retval) {
1709 put_device(&ci->gadget.dev);
1710 goto put_transceiver;
1711 }
1712
1713 if (!IS_ERR_OR_NULL(ci->transceiver)) {
1714 retval = otg_set_peripheral(ci->transceiver->otg,
1715 &ci->gadget);
1716 if (retval)
1717 goto unreg_device;
1718 }
1719
1720 retval = usb_add_gadget_udc(dev, &ci->gadget);
1721 if (retval)
1722 goto remove_trans;
1723
1724 pm_runtime_no_callbacks(&ci->gadget.dev);
1725 pm_runtime_enable(&ci->gadget.dev);
1726
1727 return retval;
1728
1729 remove_trans:
1730 if (!IS_ERR_OR_NULL(ci->transceiver)) {
1731 otg_set_peripheral(ci->transceiver->otg, NULL);
1732 if (ci->global_phy)
1733 usb_put_phy(ci->transceiver);
1734 }
1735
1736 dev_err(dev, "error = %i\n", retval);
1737 unreg_device:
1738 device_unregister(&ci->gadget.dev);
1739 put_transceiver:
1740 if (!IS_ERR_OR_NULL(ci->transceiver) && ci->global_phy)
1741 usb_put_phy(ci->transceiver);
1742 destroy_eps:
1743 destroy_eps(ci);
1744 free_pools:
1745 dma_pool_destroy(ci->td_pool);
1746 free_qh_pool:
1747 dma_pool_destroy(ci->qh_pool);
1748 return retval;
1749 }
1750
1751 /**
1752 * udc_remove: parent remove must call this to remove UDC
1753 *
1754 * No interrupts active, the IRQ has been released
1755 */
1756 static void udc_stop(struct ci13xxx *ci)
1757 {
1758 if (ci == NULL)
1759 return;
1760
1761 usb_del_gadget_udc(&ci->gadget);
1762
1763 destroy_eps(ci);
1764
1765 dma_pool_destroy(ci->td_pool);
1766 dma_pool_destroy(ci->qh_pool);
1767
1768 if (!IS_ERR_OR_NULL(ci->transceiver)) {
1769 otg_set_peripheral(ci->transceiver->otg, NULL);
1770 if (ci->global_phy)
1771 usb_put_phy(ci->transceiver);
1772 }
1773 device_unregister(&ci->gadget.dev);
1774 /* my kobject is dynamic, I swear! */
1775 memset(&ci->gadget, 0, sizeof(ci->gadget));
1776 }
1777
1778 /**
1779 * ci_hdrc_gadget_init - initialize device related bits
1780 * ci: the controller
1781 *
1782 * This function enables the gadget role, if the device is "device capable".
1783 */
1784 int ci_hdrc_gadget_init(struct ci13xxx *ci)
1785 {
1786 struct ci_role_driver *rdrv;
1787
1788 if (!hw_read(ci, CAP_DCCPARAMS, DCCPARAMS_DC))
1789 return -ENXIO;
1790
1791 rdrv = devm_kzalloc(ci->dev, sizeof(struct ci_role_driver), GFP_KERNEL);
1792 if (!rdrv)
1793 return -ENOMEM;
1794
1795 rdrv->start = udc_start;
1796 rdrv->stop = udc_stop;
1797 rdrv->irq = udc_irq;
1798 rdrv->name = "gadget";
1799 ci->roles[CI_ROLE_GADGET] = rdrv;
1800
1801 return 0;
1802 }
kernel source for telekom puls (alcatel/mediatek)