projects / linux-2.6-block.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
usb: gadget: convert all users to the new udc infrastructure
[linux-2.6-block.git] / drivers / usb / gadget / net2280.c
CommitLineData
1da177e4
LT		 1/*
2 * Driver for the PLX NET2280 USB device controller.
3 * Specs and errata are available from <http://www.plxtech.com>.
4 *
901b3d75 5 * PLX Technology Inc. (formerly NetChip Technology) supported the
1da177e4
LT		 6 * development of this driver.
7 *
8 *
9 * CODE STATUS HIGHLIGHTS
10 *
11 * This driver should work well with most "gadget" drivers, including
12 * the File Storage, Serial, and Ethernet/RNDIS gadget drivers
13 * as well as Gadget Zero and Gadgetfs.
14 *
15 * DMA is enabled by default. Drivers using transfer queues might use
16 * DMA chaining to remove IRQ latencies between transfers. (Except when
17 * short OUT transfers happen.) Drivers can use the req->no_interrupt
18 * hint to completely eliminate some IRQs, if a later IRQ is guaranteed
19 * and DMA chaining is enabled.
20 *
21 * Note that almost all the errata workarounds here are only needed for
22 * rev1 chips. Rev1a silicon (0110) fixes almost all of them.
23 */
24
25/*
26 * Copyright (C) 2003 David Brownell
27 * Copyright (C) 2003-2005 PLX Technology, Inc.
28 *
901b3d75
DB		 29 * Modified Seth Levy 2005 PLX Technology, Inc. to provide compatibility
30 * with 2282 chip
950ee4c8 31 *
1da177e4
LT		 32 * This program is free software; you can redistribute it and/or modify
33 * it under the terms of the GNU General Public License as published by
34 * the Free Software Foundation; either version 2 of the License, or
35 * (at your option) any later version.
36 *
37 * This program is distributed in the hope that it will be useful,
38 * but WITHOUT ANY WARRANTY; without even the implied warranty of
39 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
40 * GNU General Public License for more details.
41 *
42 * You should have received a copy of the GNU General Public License
43 * along with this program; if not, write to the Free Software
44 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
45 */
46
47#undef DEBUG /* messages on error and most fault paths */
48#undef VERBOSE /* extra debug messages (success too) */
49
1da177e4
LT		 50#include <linux/module.h>
51#include <linux/pci.h>
682d4c80 52#include <linux/dma-mapping.h>
1da177e4
LT		 53#include <linux/kernel.h>
54#include <linux/delay.h>
55#include <linux/ioport.h>
1da177e4 56#include <linux/slab.h>
1da177e4
LT		 57#include <linux/errno.h>
58#include <linux/init.h>
59#include <linux/timer.h>
60#include <linux/list.h>
61#include <linux/interrupt.h>
62#include <linux/moduleparam.h>
63#include <linux/device.h>
5f848137 64#include <linux/usb/ch9.h>
9454a57a 65#include <linux/usb/gadget.h>
b38b03b3 66#include <linux/prefetch.h>
1da177e4
LT		 67
68#include <asm/byteorder.h>
69#include <asm/io.h>
70#include <asm/irq.h>
71#include <asm/system.h>
72#include <asm/unaligned.h>
73
74
950ee4c8
GL		 75#define DRIVER_DESC "PLX NET228x USB Peripheral Controller"
76#define DRIVER_VERSION "2005 Sept 27"
1da177e4
LT		 77
78#define DMA_ADDR_INVALID (~(dma_addr_t)0)
79#define EP_DONTUSE 13 /* nonzero */
80
81#define USE_RDK_LEDS /* GPIO pins control three LEDs */
82
83
84static const char driver_name [] = "net2280";
85static const char driver_desc [] = DRIVER_DESC;
86
87static const char ep0name [] = "ep0";
901b3d75 88static const char *const ep_name [] = {
1da177e4
LT		 89 ep0name,
90 "ep-a", "ep-b", "ep-c", "ep-d",
91 "ep-e", "ep-f",
92};
93
94/* use_dma -- general goodness, fewer interrupts, less cpu load (vs PIO)
95 * use_dma_chaining -- dma descriptor queueing gives even more irq reduction
96 *
97 * The net2280 DMA engines are not tightly integrated with their FIFOs;
98 * not all cases are (yet) handled well in this driver or the silicon.
99 * Some gadget drivers work better with the dma support here than others.
100 * These two parameters let you use PIO or more aggressive DMA.
101 */
102static int use_dma = 1;
103static int use_dma_chaining = 0;
104
105/* "modprobe net2280 use_dma=n" etc */
106module_param (use_dma, bool, S_IRUGO);
107module_param (use_dma_chaining, bool, S_IRUGO);
108
109
110/* mode 0 == ep-{a,b,c,d} 1K fifo each
111 * mode 1 == ep-{a,b} 2K fifo each, ep-{c,d} unavailable
112 * mode 2 == ep-a 2K fifo, ep-{b,c} 1K each, ep-d unavailable
113 */
114static ushort fifo_mode = 0;
115
116/* "modprobe net2280 fifo_mode=1" etc */
117module_param (fifo_mode, ushort, 0644);
118
119/* enable_suspend -- When enabled, the driver will respond to
120 * USB suspend requests by powering down the NET2280. Otherwise,
25985edc 121 * USB suspend requests will be ignored. This is acceptable for
950ee4c8 122 * self-powered devices
1da177e4
LT		 123 */
124static int enable_suspend = 0;
125
126/* "modprobe net2280 enable_suspend=1" etc */
127module_param (enable_suspend, bool, S_IRUGO);
128
129
130#define DIR_STRING(bAddress) (((bAddress) & USB_DIR_IN) ? "in" : "out")
131
132#if defined(CONFIG_USB_GADGET_DEBUG_FILES) || defined (DEBUG)
133static char *type_string (u8 bmAttributes)
134{
135 switch ((bmAttributes) & USB_ENDPOINT_XFERTYPE_MASK) {
136 case USB_ENDPOINT_XFER_BULK: return "bulk";
137 case USB_ENDPOINT_XFER_ISOC: return "iso";
138 case USB_ENDPOINT_XFER_INT: return "intr";
139 };
140 return "control";
141}
142#endif
143
144#include "net2280.h"
145
551509d2
HH		 146#define valid_bit cpu_to_le32 (1 << VALID_BIT)
147#define dma_done_ie cpu_to_le32 (1 << DMA_DONE_INTERRUPT_ENABLE)
1da177e4
LT		 148
149/*-------------------------------------------------------------------------*/
150
151static int
152net2280_enable (struct usb_ep *_ep, const struct usb_endpoint_descriptor *desc)
153{
154 struct net2280 *dev;
155 struct net2280_ep *ep;
156 u32 max, tmp;
157 unsigned long flags;
158
159 ep = container_of (_ep, struct net2280_ep, ep);
160 if (!_ep || !desc || ep->desc || _ep->name == ep0name
161 || desc->bDescriptorType != USB_DT_ENDPOINT)
162 return -EINVAL;
163 dev = ep->dev;
164 if (!dev->driver || dev->gadget.speed == USB_SPEED_UNKNOWN)
165 return -ESHUTDOWN;
166
167 /* erratum 0119 workaround ties up an endpoint number */
168 if ((desc->bEndpointAddress & 0x0f) == EP_DONTUSE)
169 return -EDOM;
170
171 /* sanity check ep-e/ep-f since their fifos are small */
172 max = le16_to_cpu (desc->wMaxPacketSize) & 0x1fff;
173 if (ep->num > 4 && max > 64)
174 return -ERANGE;
175
176 spin_lock_irqsave (&dev->lock, flags);
177 _ep->maxpacket = max & 0x7ff;
178 ep->desc = desc;
179
180 /* ep_reset() has already been called */
181 ep->stopped = 0;
8066134f 182 ep->wedged = 0;
1da177e4
LT		 183 ep->out_overflow = 0;
184
185 /* set speed-dependent max packet; may kick in high bandwidth */
186 set_idx_reg (dev->regs, REG_EP_MAXPKT (dev, ep->num), max);
187
188 /* FIFO lines can't go to different packets. PIO is ok, so
189 * use it instead of troublesome (non-bulk) multi-packet DMA.
190 */
191 if (ep->dma && (max % 4) != 0 && use_dma_chaining) {
192 DEBUG (ep->dev, "%s, no dma for maxpacket %d\n",
193 ep->ep.name, ep->ep.maxpacket);
194 ep->dma = NULL;
195 }
196
197 /* set type, direction, address; reset fifo counters */
198 writel ((1 << FIFO_FLUSH), &ep->regs->ep_stat);
199 tmp = (desc->bmAttributes & USB_ENDPOINT_XFERTYPE_MASK);
200 if (tmp == USB_ENDPOINT_XFER_INT) {
201 /* erratum 0105 workaround prevents hs NYET */
202 if (dev->chiprev == 0100
203 && dev->gadget.speed == USB_SPEED_HIGH
204 && !(desc->bEndpointAddress & USB_DIR_IN))
205 writel ((1 << CLEAR_NAK_OUT_PACKETS_MODE),
206 &ep->regs->ep_rsp);
207 } else if (tmp == USB_ENDPOINT_XFER_BULK) {
208 /* catch some particularly blatant driver bugs */
209 if ((dev->gadget.speed == USB_SPEED_HIGH
210 && max != 512)
211 || (dev->gadget.speed == USB_SPEED_FULL
212 && max > 64)) {
213 spin_unlock_irqrestore (&dev->lock, flags);
214 return -ERANGE;
215 }
216 }
217 ep->is_iso = (tmp == USB_ENDPOINT_XFER_ISOC) ? 1 : 0;
218 tmp <<= ENDPOINT_TYPE;
219 tmp |= desc->bEndpointAddress;
220 tmp |= (4 << ENDPOINT_BYTE_COUNT); /* default full fifo lines */
221 tmp |= 1 << ENDPOINT_ENABLE;
222 wmb ();
223
224 /* for OUT transfers, block the rx fifo until a read is posted */
225 ep->is_in = (tmp & USB_DIR_IN) != 0;
226 if (!ep->is_in)
227 writel ((1 << SET_NAK_OUT_PACKETS), &ep->regs->ep_rsp);
950ee4c8 228 else if (dev->pdev->device != 0x2280) {
901b3d75
DB		 229 /* Added for 2282, Don't use nak packets on an in endpoint,
230 * this was ignored on 2280
231 */
950ee4c8
GL		 232 writel ((1 << CLEAR_NAK_OUT_PACKETS)
233 | (1 << CLEAR_NAK_OUT_PACKETS_MODE), &ep->regs->ep_rsp);
234 }
1da177e4
LT		 235
236 writel (tmp, &ep->regs->ep_cfg);
237
238 /* enable irqs */
239 if (!ep->dma) { /* pio, per-packet */
240 tmp = (1 << ep->num) | readl (&dev->regs->pciirqenb0);
241 writel (tmp, &dev->regs->pciirqenb0);
242
243 tmp = (1 << DATA_PACKET_RECEIVED_INTERRUPT_ENABLE)
950ee4c8
GL		 244 | (1 << DATA_PACKET_TRANSMITTED_INTERRUPT_ENABLE);
245 if (dev->pdev->device == 0x2280)
246 tmp |= readl (&ep->regs->ep_irqenb);
1da177e4
LT		 247 writel (tmp, &ep->regs->ep_irqenb);
248 } else { /* dma, per-request */
249 tmp = (1 << (8 + ep->num)); /* completion */
250 tmp |= readl (&dev->regs->pciirqenb1);
251 writel (tmp, &dev->regs->pciirqenb1);
252
253 /* for short OUT transfers, dma completions can't
254 * advance the queue; do it pio-style, by hand.
255 * NOTE erratum 0112 workaround #2
256 */
257 if ((desc->bEndpointAddress & USB_DIR_IN) == 0) {
258 tmp = (1 << SHORT_PACKET_TRANSFERRED_INTERRUPT_ENABLE);
259 writel (tmp, &ep->regs->ep_irqenb);
260
261 tmp = (1 << ep->num) | readl (&dev->regs->pciirqenb0);
262 writel (tmp, &dev->regs->pciirqenb0);
263 }
264 }
265
266 tmp = desc->bEndpointAddress;
267 DEBUG (dev, "enabled %s (ep%d%s-%s) %s max %04x\n",
268 _ep->name, tmp & 0x0f, DIR_STRING (tmp),
269 type_string (desc->bmAttributes),
270 ep->dma ? "dma" : "pio", max);
271
272 /* pci writes may still be posted */
273 spin_unlock_irqrestore (&dev->lock, flags);
274 return 0;
275}
276
277static int handshake (u32 __iomem *ptr, u32 mask, u32 done, int usec)
278{
279 u32 result;
280
281 do {
282 result = readl (ptr);
283 if (result == ~(u32)0) /* "device unplugged" */
284 return -ENODEV;
285 result &= mask;
286 if (result == done)
287 return 0;
288 udelay (1);
289 usec--;
290 } while (usec > 0);
291 return -ETIMEDOUT;
292}
293
901b3d75 294static const struct usb_ep_ops net2280_ep_ops;
1da177e4
LT		 295
296static void ep_reset (struct net2280_regs __iomem *regs, struct net2280_ep *ep)
297{
298 u32 tmp;
299
300 ep->desc = NULL;
301 INIT_LIST_HEAD (&ep->queue);
302
303 ep->ep.maxpacket = ~0;
304 ep->ep.ops = &net2280_ep_ops;
305
306 /* disable the dma, irqs, endpoint... */
307 if (ep->dma) {
308 writel (0, &ep->dma->dmactl);
309 writel ( (1 << DMA_SCATTER_GATHER_DONE_INTERRUPT)
310 | (1 << DMA_TRANSACTION_DONE_INTERRUPT)
311 | (1 << DMA_ABORT)
312 , &ep->dma->dmastat);
313
314 tmp = readl (&regs->pciirqenb0);
315 tmp &= ~(1 << ep->num);
316 writel (tmp, &regs->pciirqenb0);
317 } else {
318 tmp = readl (&regs->pciirqenb1);
319 tmp &= ~(1 << (8 + ep->num)); /* completion */
320 writel (tmp, &regs->pciirqenb1);
321 }
322 writel (0, &ep->regs->ep_irqenb);
323
324 /* init to our chosen defaults, notably so that we NAK OUT
325 * packets until the driver queues a read (+note erratum 0112)
326 */
950ee4c8
GL		 327 if (!ep->is_in || ep->dev->pdev->device == 0x2280) {
328 tmp = (1 << SET_NAK_OUT_PACKETS_MODE)
1da177e4
LT		 329 | (1 << SET_NAK_OUT_PACKETS)
330 | (1 << CLEAR_EP_HIDE_STATUS_PHASE)
331 | (1 << CLEAR_INTERRUPT_MODE);
950ee4c8
GL		 332 } else {
333 /* added for 2282 */
334 tmp = (1 << CLEAR_NAK_OUT_PACKETS_MODE)
335 | (1 << CLEAR_NAK_OUT_PACKETS)
336 | (1 << CLEAR_EP_HIDE_STATUS_PHASE)
337 | (1 << CLEAR_INTERRUPT_MODE);
338 }
1da177e4
LT		 339
340 if (ep->num != 0) {
341 tmp |= (1 << CLEAR_ENDPOINT_TOGGLE)
342 | (1 << CLEAR_ENDPOINT_HALT);
343 }
344 writel (tmp, &ep->regs->ep_rsp);
345
346 /* scrub most status bits, and flush any fifo state */
950ee4c8
GL		 347 if (ep->dev->pdev->device == 0x2280)
348 tmp = (1 << FIFO_OVERFLOW)
349 | (1 << FIFO_UNDERFLOW);
350 else
351 tmp = 0;
352
353 writel (tmp | (1 << TIMEOUT)
1da177e4
LT		 354 | (1 << USB_STALL_SENT)
355 | (1 << USB_IN_NAK_SENT)
356 | (1 << USB_IN_ACK_RCVD)
357 | (1 << USB_OUT_PING_NAK_SENT)
358 | (1 << USB_OUT_ACK_SENT)
1da177e4
LT		 359 | (1 << FIFO_FLUSH)
360 | (1 << SHORT_PACKET_OUT_DONE_INTERRUPT)
361 | (1 << SHORT_PACKET_TRANSFERRED_INTERRUPT)
362 | (1 << DATA_PACKET_RECEIVED_INTERRUPT)
363 | (1 << DATA_PACKET_TRANSMITTED_INTERRUPT)
364 | (1 << DATA_OUT_PING_TOKEN_INTERRUPT)
365 | (1 << DATA_IN_TOKEN_INTERRUPT)
366 , &ep->regs->ep_stat);
367
368 /* fifo size is handled separately */
369}
370
371static void nuke (struct net2280_ep *);
372
373static int net2280_disable (struct usb_ep *_ep)
374{
375 struct net2280_ep *ep;
376 unsigned long flags;
377
378 ep = container_of (_ep, struct net2280_ep, ep);
379 if (!_ep || !ep->desc || _ep->name == ep0name)
380 return -EINVAL;
381
382 spin_lock_irqsave (&ep->dev->lock, flags);
383 nuke (ep);
384 ep_reset (ep->dev->regs, ep);
385
386 VDEBUG (ep->dev, "disabled %s %s\n",
387 ep->dma ? "dma" : "pio", _ep->name);
388
389 /* synch memory views with the device */
390 (void) readl (&ep->regs->ep_cfg);
391
392 if (use_dma && !ep->dma && ep->num >= 1 && ep->num <= 4)
393 ep->dma = &ep->dev->dma [ep->num - 1];
394
395 spin_unlock_irqrestore (&ep->dev->lock, flags);
396 return 0;
397}
398
399/*-------------------------------------------------------------------------*/
400
401static struct usb_request *
55016f10 402net2280_alloc_request (struct usb_ep *_ep, gfp_t gfp_flags)
1da177e4
LT		 403{
404 struct net2280_ep *ep;
405 struct net2280_request *req;
406
407 if (!_ep)
408 return NULL;
409 ep = container_of (_ep, struct net2280_ep, ep);
410
7039f422 411 req = kzalloc(sizeof(*req), gfp_flags);
1da177e4
LT		 412 if (!req)
413 return NULL;
414
1da177e4
LT		 415 req->req.dma = DMA_ADDR_INVALID;
416 INIT_LIST_HEAD (&req->queue);
417
418 /* this dma descriptor may be swapped with the previous dummy */
419 if (ep->dma) {
420 struct net2280_dma *td;
421
422 td = pci_pool_alloc (ep->dev->requests, gfp_flags,
423 &req->td_dma);
424 if (!td) {
425 kfree (req);
426 return NULL;
427 }
428 td->dmacount = 0; /* not VALID */
551509d2 429 td->dmaaddr = cpu_to_le32 (DMA_ADDR_INVALID);
1da177e4
LT		 430 td->dmadesc = td->dmaaddr;
431 req->td = td;
432 }
433 return &req->req;
434}
435
436static void
437net2280_free_request (struct usb_ep *_ep, struct usb_request *_req)
438{
439 struct net2280_ep *ep;
440 struct net2280_request *req;
441
442 ep = container_of (_ep, struct net2280_ep, ep);
443 if (!_ep || !_req)
444 return;
445
446 req = container_of (_req, struct net2280_request, req);
447 WARN_ON (!list_empty (&req->queue));
448 if (req->td)
449 pci_pool_free (ep->dev->requests, req->td, req->td_dma);
450 kfree (req);
451}
452
453/*-------------------------------------------------------------------------*/
454
1da177e4
LT		 455/* load a packet into the fifo we use for usb IN transfers.
456 * works for all endpoints.
457 *
458 * NOTE: pio with ep-a..ep-d could stuff multiple packets into the fifo
459 * at a time, but this code is simpler because it knows it only writes
460 * one packet. ep-a..ep-d should use dma instead.
461 */
462static void
463write_fifo (struct net2280_ep *ep, struct usb_request *req)
464{
465 struct net2280_ep_regs __iomem *regs = ep->regs;
466 u8 *buf;
467 u32 tmp;
468 unsigned count, total;
469
470 /* INVARIANT: fifo is currently empty. (testable) */
471
472 if (req) {
473 buf = req->buf + req->actual;
474 prefetch (buf);
475 total = req->length - req->actual;
476 } else {
477 total = 0;
478 buf = NULL;
479 }
480
481 /* write just one packet at a time */
482 count = ep->ep.maxpacket;
483 if (count > total) /* min() cannot be used on a bitfield */
484 count = total;
485
486 VDEBUG (ep->dev, "write %s fifo (IN) %d bytes%s req %p\n",
487 ep->ep.name, count,
488 (count != ep->ep.maxpacket) ? " (short)" : "",
489 req);
490 while (count >= 4) {
491 /* NOTE be careful if you try to align these. fifo lines
492 * should normally be full (4 bytes) and successive partial
493 * lines are ok only in certain cases.
494 */
495 tmp = get_unaligned ((u32 *)buf);
496 cpu_to_le32s (&tmp);
497 writel (tmp, &regs->ep_data);
498 buf += 4;
499 count -= 4;
500 }
501
502 /* last fifo entry is "short" unless we wrote a full packet.
503 * also explicitly validate last word in (periodic) transfers
504 * when maxpacket is not a multiple of 4 bytes.
505 */
506 if (count || total < ep->ep.maxpacket) {
507 tmp = count ? get_unaligned ((u32 *)buf) : count;
508 cpu_to_le32s (&tmp);
509 set_fifo_bytecount (ep, count & 0x03);
510 writel (tmp, &regs->ep_data);
511 }
512
513 /* pci writes may still be posted */
514}
515
516/* work around erratum 0106: PCI and USB race over the OUT fifo.
517 * caller guarantees chiprev 0100, out endpoint is NAKing, and
518 * there's no real data in the fifo.
519 *
520 * NOTE: also used in cases where that erratum doesn't apply:
521 * where the host wrote "too much" data to us.
522 */
523static void out_flush (struct net2280_ep *ep)
524{
525 u32 __iomem *statp;
526 u32 tmp;
527
528 ASSERT_OUT_NAKING (ep);
529
530 statp = &ep->regs->ep_stat;
531 writel ( (1 << DATA_OUT_PING_TOKEN_INTERRUPT)
532 | (1 << DATA_PACKET_RECEIVED_INTERRUPT)
533 , statp);
534 writel ((1 << FIFO_FLUSH), statp);
535 mb ();
536 tmp = readl (statp);
537 if (tmp & (1 << DATA_OUT_PING_TOKEN_INTERRUPT)
538 /* high speed did bulk NYET; fifo isn't filling */
539 && ep->dev->gadget.speed == USB_SPEED_FULL) {
540 unsigned usec;
541
542 usec = 50; /* 64 byte bulk/interrupt */
543 handshake (statp, (1 << USB_OUT_PING_NAK_SENT),
544 (1 << USB_OUT_PING_NAK_SENT), usec);
545 /* NAK done; now CLEAR_NAK_OUT_PACKETS is safe */
546 }
547}
548
549/* unload packet(s) from the fifo we use for usb OUT transfers.
550 * returns true iff the request completed, because of short packet
551 * or the request buffer having filled with full packets.
552 *
553 * for ep-a..ep-d this will read multiple packets out when they
554 * have been accepted.
555 */
556static int
557read_fifo (struct net2280_ep *ep, struct net2280_request *req)
558{
559 struct net2280_ep_regs __iomem *regs = ep->regs;
560 u8 *buf = req->req.buf + req->req.actual;
561 unsigned count, tmp, is_short;
562 unsigned cleanup = 0, prevent = 0;
563
564 /* erratum 0106 ... packets coming in during fifo reads might
565 * be incompletely rejected. not all cases have workarounds.
566 */
567 if (ep->dev->chiprev == 0x0100
568 && ep->dev->gadget.speed == USB_SPEED_FULL) {
569 udelay (1);
570 tmp = readl (&ep->regs->ep_stat);
571 if ((tmp & (1 << NAK_OUT_PACKETS)))
572 cleanup = 1;
573 else if ((tmp & (1 << FIFO_FULL))) {
574 start_out_naking (ep);
575 prevent = 1;
576 }
577 /* else: hope we don't see the problem */
578 }
579
580 /* never overflow the rx buffer. the fifo reads packets until
581 * it sees a short one; we might not be ready for them all.
582 */
583 prefetchw (buf);
584 count = readl (&regs->ep_avail);
585 if (unlikely (count == 0)) {
586 udelay (1);
587 tmp = readl (&ep->regs->ep_stat);
588 count = readl (&regs->ep_avail);
589 /* handled that data already? */
590 if (count == 0 && (tmp & (1 << NAK_OUT_PACKETS)) == 0)
591 return 0;
592 }
593
594 tmp = req->req.length - req->req.actual;
595 if (count > tmp) {
596 /* as with DMA, data overflow gets flushed */
597 if ((tmp % ep->ep.maxpacket) != 0) {
598 ERROR (ep->dev,
599 "%s out fifo %d bytes, expected %d\n",
600 ep->ep.name, count, tmp);
601 req->req.status = -EOVERFLOW;
602 cleanup = 1;
603 /* NAK_OUT_PACKETS will be set, so flushing is safe;
604 * the next read will start with the next packet
605 */
606 } /* else it's a ZLP, no worries */
607 count = tmp;
608 }
609 req->req.actual += count;
610
611 is_short = (count == 0) || ((count % ep->ep.maxpacket) != 0);
612
613 VDEBUG (ep->dev, "read %s fifo (OUT) %d bytes%s%s%s req %p %d/%d\n",
614 ep->ep.name, count, is_short ? " (short)" : "",
615 cleanup ? " flush" : "", prevent ? " nak" : "",
616 req, req->req.actual, req->req.length);
617
618 while (count >= 4) {
619 tmp = readl (&regs->ep_data);
620 cpu_to_le32s (&tmp);
621 put_unaligned (tmp, (u32 *)buf);
622 buf += 4;
623 count -= 4;
624 }
625 if (count) {
626 tmp = readl (&regs->ep_data);
627 /* LE conversion is implicit here: */
628 do {
629 *buf++ = (u8) tmp;
630 tmp >>= 8;
631 } while (--count);
632 }
633 if (cleanup)
634 out_flush (ep);
635 if (prevent) {
636 writel ((1 << CLEAR_NAK_OUT_PACKETS), &ep->regs->ep_rsp);
637 (void) readl (&ep->regs->ep_rsp);
638 }
639
640 return is_short || ((req->req.actual == req->req.length)
641 && !req->req.zero);
642}
643
644/* fill out dma descriptor to match a given request */
645static void
646fill_dma_desc (struct net2280_ep *ep, struct net2280_request *req, int valid)
647{
648 struct net2280_dma *td = req->td;
649 u32 dmacount = req->req.length;
650
651 /* don't let DMA continue after a short OUT packet,
652 * so overruns can't affect the next transfer.
653 * in case of overruns on max-size packets, we can't
654 * stop the fifo from filling but we can flush it.
655 */
656 if (ep->is_in)
657 dmacount |= (1 << DMA_DIRECTION);
901b3d75
DB		 658 if ((!ep->is_in && (dmacount % ep->ep.maxpacket) != 0)
659 || ep->dev->pdev->device != 0x2280)
1da177e4
LT		 660 dmacount |= (1 << END_OF_CHAIN);
661
662 req->valid = valid;
663 if (valid)
664 dmacount |= (1 << VALID_BIT);
665 if (likely(!req->req.no_interrupt || !use_dma_chaining))
666 dmacount |= (1 << DMA_DONE_INTERRUPT_ENABLE);
667
668 /* td->dmadesc = previously set by caller */
669 td->dmaaddr = cpu_to_le32 (req->req.dma);
670
671 /* 2280 may be polling VALID_BIT through ep->dma->dmadesc */
672 wmb ();
da2bbdcc 673 td->dmacount = cpu_to_le32(dmacount);
1da177e4
LT		 674}
675
676static const u32 dmactl_default =
677 (1 << DMA_SCATTER_GATHER_DONE_INTERRUPT)
678 | (1 << DMA_CLEAR_COUNT_ENABLE)
679 /* erratum 0116 workaround part 1 (use POLLING) */
680 | (POLL_100_USEC << DESCRIPTOR_POLLING_RATE)
681 | (1 << DMA_VALID_BIT_POLLING_ENABLE)
682 | (1 << DMA_VALID_BIT_ENABLE)
683 | (1 << DMA_SCATTER_GATHER_ENABLE)
684 /* erratum 0116 workaround part 2 (no AUTOSTART) */
685 | (1 << DMA_ENABLE);
686
687static inline void spin_stop_dma (struct net2280_dma_regs __iomem *dma)
688{
689 handshake (&dma->dmactl, (1 << DMA_ENABLE), 0, 50);
690}
691
692static inline void stop_dma (struct net2280_dma_regs __iomem *dma)
693{
694 writel (readl (&dma->dmactl) & ~(1 << DMA_ENABLE), &dma->dmactl);
695 spin_stop_dma (dma);
696}
697
698static void start_queue (struct net2280_ep *ep, u32 dmactl, u32 td_dma)
699{
700 struct net2280_dma_regs __iomem *dma = ep->dma;
950ee4c8 701 unsigned int tmp = (1 << VALID_BIT) | (ep->is_in << DMA_DIRECTION);
1da177e4 702
950ee4c8
GL		 703 if (ep->dev->pdev->device != 0x2280)
704 tmp |= (1 << END_OF_CHAIN);
705
706 writel (tmp, &dma->dmacount);
1da177e4
LT		 707 writel (readl (&dma->dmastat), &dma->dmastat);
708
709 writel (td_dma, &dma->dmadesc);
710 writel (dmactl, &dma->dmactl);
711
712 /* erratum 0116 workaround part 3: pci arbiter away from net2280 */
713 (void) readl (&ep->dev->pci->pcimstctl);
714
715 writel ((1 << DMA_START), &dma->dmastat);
716
717 if (!ep->is_in)
718 stop_out_naking (ep);
719}
720
721static void start_dma (struct net2280_ep *ep, struct net2280_request *req)
722{
723 u32 tmp;
724 struct net2280_dma_regs __iomem *dma = ep->dma;
725
726 /* FIXME can't use DMA for ZLPs */
727
728 /* on this path we "know" there's no dma active (yet) */
729 WARN_ON (readl (&dma->dmactl) & (1 << DMA_ENABLE));
730 writel (0, &ep->dma->dmactl);
731
732 /* previous OUT packet might have been short */
733 if (!ep->is_in && ((tmp = readl (&ep->regs->ep_stat))
901b3d75 734 & (1 << NAK_OUT_PACKETS)) != 0) {
1da177e4
LT		 735 writel ((1 << SHORT_PACKET_TRANSFERRED_INTERRUPT),
736 &ep->regs->ep_stat);
737
738 tmp = readl (&ep->regs->ep_avail);
739 if (tmp) {
740 writel (readl (&dma->dmastat), &dma->dmastat);
741
742 /* transfer all/some fifo data */
743 writel (req->req.dma, &dma->dmaaddr);
744 tmp = min (tmp, req->req.length);
745
746 /* dma irq, faking scatterlist status */
747 req->td->dmacount = cpu_to_le32 (req->req.length - tmp);
748 writel ((1 << DMA_DONE_INTERRUPT_ENABLE)
749 | tmp, &dma->dmacount);
750 req->td->dmadesc = 0;
751 req->valid = 1;
752
753 writel ((1 << DMA_ENABLE), &dma->dmactl);
754 writel ((1 << DMA_START), &dma->dmastat);
755 return;
756 }
757 }
758
759 tmp = dmactl_default;
760
761 /* force packet boundaries between dma requests, but prevent the
762 * controller from automagically writing a last "short" packet
763 * (zero length) unless the driver explicitly said to do that.
764 */
765 if (ep->is_in) {
766 if (likely ((req->req.length % ep->ep.maxpacket) != 0
767 || req->req.zero)) {
768 tmp |= (1 << DMA_FIFO_VALIDATE);
769 ep->in_fifo_validate = 1;
770 } else
771 ep->in_fifo_validate = 0;
772 }
773
774 /* init req->td, pointing to the current dummy */
775 req->td->dmadesc = cpu_to_le32 (ep->td_dma);
776 fill_dma_desc (ep, req, 1);
777
778 if (!use_dma_chaining)
551509d2 779 req->td->dmacount |= cpu_to_le32 (1 << END_OF_CHAIN);
1da177e4
LT		 780
781 start_queue (ep, tmp, req->td_dma);
782}
783
784static inline void
785queue_dma (struct net2280_ep *ep, struct net2280_request *req, int valid)
786{
787 struct net2280_dma *end;
788 dma_addr_t tmp;
789
790 /* swap new dummy for old, link; fill and maybe activate */
791 end = ep->dummy;
792 ep->dummy = req->td;
793 req->td = end;
794
795 tmp = ep->td_dma;
796 ep->td_dma = req->td_dma;
797 req->td_dma = tmp;
798
799 end->dmadesc = cpu_to_le32 (ep->td_dma);
800
801 fill_dma_desc (ep, req, valid);
802}
803
804static void
805done (struct net2280_ep *ep, struct net2280_request *req, int status)
806{
807 struct net2280 *dev;
808 unsigned stopped = ep->stopped;
809
810 list_del_init (&req->queue);
811
812 if (req->req.status == -EINPROGRESS)
813 req->req.status = status;
814 else
815 status = req->req.status;
816
817 dev = ep->dev;
818 if (req->mapped) {
819 pci_unmap_single (dev->pdev, req->req.dma, req->req.length,
820 ep->is_in ? PCI_DMA_TODEVICE : PCI_DMA_FROMDEVICE);
821 req->req.dma = DMA_ADDR_INVALID;
822 req->mapped = 0;
823 }
824
825 if (status && status != -ESHUTDOWN)
826 VDEBUG (dev, "complete %s req %p stat %d len %u/%u\n",
827 ep->ep.name, &req->req, status,
828 req->req.actual, req->req.length);
829
830 /* don't modify queue heads during completion callback */
831 ep->stopped = 1;
832 spin_unlock (&dev->lock);
833 req->req.complete (&ep->ep, &req->req);
834 spin_lock (&dev->lock);
835 ep->stopped = stopped;
836}
837
838/*-------------------------------------------------------------------------*/
839
840static int
55016f10 841net2280_queue (struct usb_ep *_ep, struct usb_request *_req, gfp_t gfp_flags)
1da177e4
LT		 842{
843 struct net2280_request *req;
844 struct net2280_ep *ep;
845 struct net2280 *dev;
846 unsigned long flags;
847
848 /* we always require a cpu-view buffer, so that we can
849 * always use pio (as fallback or whatever).
850 */
851 req = container_of (_req, struct net2280_request, req);
852 if (!_req || !_req->complete || !_req->buf
853 || !list_empty (&req->queue))
854 return -EINVAL;
855 if (_req->length > (~0 & DMA_BYTE_COUNT_MASK))
856 return -EDOM;
857 ep = container_of (_ep, struct net2280_ep, ep);
858 if (!_ep || (!ep->desc && ep->num != 0))
859 return -EINVAL;
860 dev = ep->dev;
861 if (!dev->driver || dev->gadget.speed == USB_SPEED_UNKNOWN)
862 return -ESHUTDOWN;
863
864 /* FIXME implement PIO fallback for ZLPs with DMA */
865 if (ep->dma && _req->length == 0)
866 return -EOPNOTSUPP;
867
868 /* set up dma mapping in case the caller didn't */
869 if (ep->dma && _req->dma == DMA_ADDR_INVALID) {
870 _req->dma = pci_map_single (dev->pdev, _req->buf, _req->length,
871 ep->is_in ? PCI_DMA_TODEVICE : PCI_DMA_FROMDEVICE);
872 req->mapped = 1;
873 }
874
875#if 0
876 VDEBUG (dev, "%s queue req %p, len %d buf %p\n",
877 _ep->name, _req, _req->length, _req->buf);
878#endif
879
880 spin_lock_irqsave (&dev->lock, flags);
881
882 _req->status = -EINPROGRESS;
883 _req->actual = 0;
884
885 /* kickstart this i/o queue? */
886 if (list_empty (&ep->queue) && !ep->stopped) {
887 /* use DMA if the endpoint supports it, else pio */
888 if (ep->dma)
889 start_dma (ep, req);
890 else {
891 /* maybe there's no control data, just status ack */
892 if (ep->num == 0 && _req->length == 0) {
893 allow_status (ep);
894 done (ep, req, 0);
895 VDEBUG (dev, "%s status ack\n", ep->ep.name);
896 goto done;
897 }
898
899 /* PIO ... stuff the fifo, or unblock it. */
900 if (ep->is_in)
901 write_fifo (ep, _req);
902 else if (list_empty (&ep->queue)) {
903 u32 s;
904
905 /* OUT FIFO might have packet(s) buffered */
906 s = readl (&ep->regs->ep_stat);
907 if ((s & (1 << FIFO_EMPTY)) == 0) {
908 /* note: _req->short_not_ok is
909 * ignored here since PIO _always_
910 * stops queue advance here, and
911 * _req->status doesn't change for
912 * short reads (only _req->actual)
913 */
914 if (read_fifo (ep, req)) {
915 done (ep, req, 0);
916 if (ep->num == 0)
917 allow_status (ep);
918 /* don't queue it */
919 req = NULL;
920 } else
921 s = readl (&ep->regs->ep_stat);
922 }
923
924 /* don't NAK, let the fifo fill */
925 if (req && (s & (1 << NAK_OUT_PACKETS)))
926 writel ((1 << CLEAR_NAK_OUT_PACKETS),
927 &ep->regs->ep_rsp);
928 }
929 }
930
931 } else if (ep->dma) {
932 int valid = 1;
933
934 if (ep->is_in) {
935 int expect;
936
937 /* preventing magic zlps is per-engine state, not
938 * per-transfer; irq logic must recover hiccups.
939 */
940 expect = likely (req->req.zero
941 || (req->req.length % ep->ep.maxpacket) != 0);
942 if (expect != ep->in_fifo_validate)
943 valid = 0;
944 }
945 queue_dma (ep, req, valid);
946
947 } /* else the irq handler advances the queue. */
948
1f26e28d 949 ep->responded = 1;
1da177e4
LT		 950 if (req)
951 list_add_tail (&req->queue, &ep->queue);
952done:
953 spin_unlock_irqrestore (&dev->lock, flags);
954
955 /* pci writes may still be posted */
956 return 0;
957}
958
959static inline void
960dma_done (
961 struct net2280_ep *ep,
962 struct net2280_request *req,
963 u32 dmacount,
964 int status
965)
966{
967 req->req.actual = req->req.length - (DMA_BYTE_COUNT_MASK & dmacount);
968 done (ep, req, status);
969}
970
971static void restart_dma (struct net2280_ep *ep);
972
973static void scan_dma_completions (struct net2280_ep *ep)
974{
975 /* only look at descriptors that were "naturally" retired,
976 * so fifo and list head state won't matter
977 */
978 while (!list_empty (&ep->queue)) {
979 struct net2280_request *req;
980 u32 tmp;
981
982 req = list_entry (ep->queue.next,
983 struct net2280_request, queue);
984 if (!req->valid)
985 break;
986 rmb ();
987 tmp = le32_to_cpup (&req->td->dmacount);
988 if ((tmp & (1 << VALID_BIT)) != 0)
989 break;
990
991 /* SHORT_PACKET_TRANSFERRED_INTERRUPT handles "usb-short"
992 * cases where DMA must be aborted; this code handles
993 * all non-abort DMA completions.
994 */
995 if (unlikely (req->td->dmadesc == 0)) {
996 /* paranoia */
997 tmp = readl (&ep->dma->dmacount);
998 if (tmp & DMA_BYTE_COUNT_MASK)
999 break;
1000 /* single transfer mode */
1001 dma_done (ep, req, tmp, 0);
1002 break;
1003 } else if (!ep->is_in
1004 && (req->req.length % ep->ep.maxpacket) != 0) {
1005 tmp = readl (&ep->regs->ep_stat);
1006
1007 /* AVOID TROUBLE HERE by not issuing short reads from
1008 * your gadget driver. That helps avoids errata 0121,
1009 * 0122, and 0124; not all cases trigger the warning.
1010 */
1011 if ((tmp & (1 << NAK_OUT_PACKETS)) == 0) {
b6c63937 1012 WARNING (ep->dev, "%s lost packet sync!\n",
1da177e4
LT		 1013 ep->ep.name);
1014 req->req.status = -EOVERFLOW;
1015 } else if ((tmp = readl (&ep->regs->ep_avail)) != 0) {
1016 /* fifo gets flushed later */
1017 ep->out_overflow = 1;
1018 DEBUG (ep->dev, "%s dma, discard %d len %d\n",
1019 ep->ep.name, tmp,
1020 req->req.length);
1021 req->req.status = -EOVERFLOW;
1022 }
1023 }
1024 dma_done (ep, req, tmp, 0);
1025 }
1026}
1027
1028static void restart_dma (struct net2280_ep *ep)
1029{
1030 struct net2280_request *req;
1031 u32 dmactl = dmactl_default;
1032
1033 if (ep->stopped)
1034 return;
1035 req = list_entry (ep->queue.next, struct net2280_request, queue);
1036
1037 if (!use_dma_chaining) {
1038 start_dma (ep, req);
1039 return;
1040 }
1041
1042 /* the 2280 will be processing the queue unless queue hiccups after
1043 * the previous transfer:
1044 * IN: wanted automagic zlp, head doesn't (or vice versa)
1045 * DMA_FIFO_VALIDATE doesn't init from dma descriptors.
1046 * OUT: was "usb-short", we must restart.
1047 */
1048 if (ep->is_in && !req->valid) {
1049 struct net2280_request *entry, *prev = NULL;
1050 int reqmode, done = 0;
1051
1052 DEBUG (ep->dev, "%s dma hiccup td %p\n", ep->ep.name, req->td);
1053 ep->in_fifo_validate = likely (req->req.zero
1054 || (req->req.length % ep->ep.maxpacket) != 0);
1055 if (ep->in_fifo_validate)
1056 dmactl |= (1 << DMA_FIFO_VALIDATE);
1057 list_for_each_entry (entry, &ep->queue, queue) {
320f3459 1058 __le32 dmacount;
1da177e4
LT		 1059
1060 if (entry == req)
1061 continue;
1062 dmacount = entry->td->dmacount;
1063 if (!done) {
1064 reqmode = likely (entry->req.zero
1065 || (entry->req.length
1066 % ep->ep.maxpacket) != 0);
1067 if (reqmode == ep->in_fifo_validate) {
1068 entry->valid = 1;
1069 dmacount |= valid_bit;
1070 entry->td->dmacount = dmacount;
1071 prev = entry;
1072 continue;
1073 } else {
1074 /* force a hiccup */
1075 prev->td->dmacount |= dma_done_ie;
1076 done = 1;
1077 }
1078 }
1079
1080 /* walk the rest of the queue so unlinks behave */
1081 entry->valid = 0;
1082 dmacount &= ~valid_bit;
1083 entry->td->dmacount = dmacount;
1084 prev = entry;
1085 }
1086 }
1087
1088 writel (0, &ep->dma->dmactl);
1089 start_queue (ep, dmactl, req->td_dma);
1090}
1091
1092static void abort_dma (struct net2280_ep *ep)
1093{
1094 /* abort the current transfer */
1095 if (likely (!list_empty (&ep->queue))) {
1096 /* FIXME work around errata 0121, 0122, 0124 */
1097 writel ((1 << DMA_ABORT), &ep->dma->dmastat);
1098 spin_stop_dma (ep->dma);
1099 } else
1100 stop_dma (ep->dma);
1101 scan_dma_completions (ep);
1102}
1103
1104/* dequeue ALL requests */
1105static void nuke (struct net2280_ep *ep)
1106{
1107 struct net2280_request *req;
1108
1109 /* called with spinlock held */
1110 ep->stopped = 1;
1111 if (ep->dma)
1112 abort_dma (ep);
1113 while (!list_empty (&ep->queue)) {
1114 req = list_entry (ep->queue.next,
1115 struct net2280_request,
1116 queue);
1117 done (ep, req, -ESHUTDOWN);
1118 }
1119}
1120
1121/* dequeue JUST ONE request */
1122static int net2280_dequeue (struct usb_ep *_ep, struct usb_request *_req)
1123{
1124 struct net2280_ep *ep;
1125 struct net2280_request *req;
1126 unsigned long flags;
1127 u32 dmactl;
1128 int stopped;
1129
1130 ep = container_of (_ep, struct net2280_ep, ep);
1131 if (!_ep || (!ep->desc && ep->num != 0) || !_req)
1132 return -EINVAL;
1133
1134 spin_lock_irqsave (&ep->dev->lock, flags);
1135 stopped = ep->stopped;
1136
1137 /* quiesce dma while we patch the queue */
1138 dmactl = 0;
1139 ep->stopped = 1;
1140 if (ep->dma) {
1141 dmactl = readl (&ep->dma->dmactl);
1142 /* WARNING erratum 0127 may kick in ... */
1143 stop_dma (ep->dma);
1144 scan_dma_completions (ep);
1145 }
1146
1147 /* make sure it's still queued on this endpoint */
1148 list_for_each_entry (req, &ep->queue, queue) {
1149 if (&req->req == _req)
1150 break;
1151 }
1152 if (&req->req != _req) {
1153 spin_unlock_irqrestore (&ep->dev->lock, flags);
1154 return -EINVAL;
1155 }
1156
1157 /* queue head may be partially complete. */
1158 if (ep->queue.next == &req->queue) {
1159 if (ep->dma) {
1160 DEBUG (ep->dev, "unlink (%s) dma\n", _ep->name);
1161 _req->status = -ECONNRESET;
1162 abort_dma (ep);
1163 if (likely (ep->queue.next == &req->queue)) {
1164 // NOTE: misreports single-transfer mode
1165 req->td->dmacount = 0; /* invalidate */
1166 dma_done (ep, req,
1167 readl (&ep->dma->dmacount),
1168 -ECONNRESET);
1169 }
1170 } else {
1171 DEBUG (ep->dev, "unlink (%s) pio\n", _ep->name);
1172 done (ep, req, -ECONNRESET);
1173 }
1174 req = NULL;
1175
1176 /* patch up hardware chaining data */
1177 } else if (ep->dma && use_dma_chaining) {
1178 if (req->queue.prev == ep->queue.next) {
1179 writel (le32_to_cpu (req->td->dmadesc),
1180 &ep->dma->dmadesc);
1181 if (req->td->dmacount & dma_done_ie)
1182 writel (readl (&ep->dma->dmacount)
320f3459 1183 | le32_to_cpu(dma_done_ie),
1da177e4
LT		 1184 &ep->dma->dmacount);
1185 } else {
1186 struct net2280_request *prev;
1187
1188 prev = list_entry (req->queue.prev,
1189 struct net2280_request, queue);
1190 prev->td->dmadesc = req->td->dmadesc;
1191 if (req->td->dmacount & dma_done_ie)
1192 prev->td->dmacount |= dma_done_ie;
1193 }
1194 }
1195
1196 if (req)
1197 done (ep, req, -ECONNRESET);
1198 ep->stopped = stopped;
1199
1200 if (ep->dma) {
1201 /* turn off dma on inactive queues */
1202 if (list_empty (&ep->queue))
1203 stop_dma (ep->dma);
1204 else if (!ep->stopped) {
1205 /* resume current request, or start new one */
1206 if (req)
1207 writel (dmactl, &ep->dma->dmactl);
1208 else
1209 start_dma (ep, list_entry (ep->queue.next,
1210 struct net2280_request, queue));
1211 }
1212 }
1213
1214 spin_unlock_irqrestore (&ep->dev->lock, flags);
1215 return 0;
1216}
1217
1218/*-------------------------------------------------------------------------*/
1219
1220static int net2280_fifo_status (struct usb_ep *_ep);
1221
1222static int
8066134f 1223net2280_set_halt_and_wedge(struct usb_ep *_ep, int value, int wedged)
1da177e4
LT		 1224{
1225 struct net2280_ep *ep;
1226 unsigned long flags;
1227 int retval = 0;
1228
1229 ep = container_of (_ep, struct net2280_ep, ep);
1230 if (!_ep || (!ep->desc && ep->num != 0))
1231 return -EINVAL;
1232 if (!ep->dev->driver || ep->dev->gadget.speed == USB_SPEED_UNKNOWN)
1233 return -ESHUTDOWN;
1234 if (ep->desc /* not ep0 */ && (ep->desc->bmAttributes & 0x03)
1235 == USB_ENDPOINT_XFER_ISOC)
1236 return -EINVAL;
1237
1238 spin_lock_irqsave (&ep->dev->lock, flags);
1239 if (!list_empty (&ep->queue))
1240 retval = -EAGAIN;
1241 else if (ep->is_in && value && net2280_fifo_status (_ep) != 0)
1242 retval = -EAGAIN;
1243 else {
8066134f
AS		 1244 VDEBUG (ep->dev, "%s %s %s\n", _ep->name,
1245 value ? "set" : "clear",
1246 wedged ? "wedge" : "halt");
1da177e4
LT		 1247 /* set/clear, then synch memory views with the device */
1248 if (value) {
1249 if (ep->num == 0)
1250 ep->dev->protocol_stall = 1;
1251 else
1252 set_halt (ep);
8066134f
AS		 1253 if (wedged)
1254 ep->wedged = 1;
1255 } else {
1da177e4 1256 clear_halt (ep);
8066134f
AS		 1257 ep->wedged = 0;
1258 }
1da177e4
LT		 1259 (void) readl (&ep->regs->ep_rsp);
1260 }
1261 spin_unlock_irqrestore (&ep->dev->lock, flags);
1262
1263 return retval;
1264}
1265
8066134f
AS		 1266static int
1267net2280_set_halt(struct usb_ep *_ep, int value)
1268{
1269 return net2280_set_halt_and_wedge(_ep, value, 0);
1270}
1271
1272static int
1273net2280_set_wedge(struct usb_ep *_ep)
1274{
1275 if (!_ep || _ep->name == ep0name)
1276 return -EINVAL;
1277 return net2280_set_halt_and_wedge(_ep, 1, 1);
1278}
1279
1da177e4
LT		 1280static int
1281net2280_fifo_status (struct usb_ep *_ep)
1282{
1283 struct net2280_ep *ep;
1284 u32 avail;
1285
1286 ep = container_of (_ep, struct net2280_ep, ep);
1287 if (!_ep || (!ep->desc && ep->num != 0))
1288 return -ENODEV;
1289 if (!ep->dev->driver || ep->dev->gadget.speed == USB_SPEED_UNKNOWN)
1290 return -ESHUTDOWN;
1291
1292 avail = readl (&ep->regs->ep_avail) & ((1 << 12) - 1);
1293 if (avail > ep->fifo_size)
1294 return -EOVERFLOW;
1295 if (ep->is_in)
1296 avail = ep->fifo_size - avail;
1297 return avail;
1298}
1299
1300static void
1301net2280_fifo_flush (struct usb_ep *_ep)
1302{
1303 struct net2280_ep *ep;
1304
1305 ep = container_of (_ep, struct net2280_ep, ep);
1306 if (!_ep || (!ep->desc && ep->num != 0))
1307 return;
1308 if (!ep->dev->driver || ep->dev->gadget.speed == USB_SPEED_UNKNOWN)
1309 return;
1310
1311 writel ((1 << FIFO_FLUSH), &ep->regs->ep_stat);
1312 (void) readl (&ep->regs->ep_rsp);
1313}
1314
901b3d75 1315static const struct usb_ep_ops net2280_ep_ops = {
1da177e4
LT		 1316 .enable = net2280_enable,
1317 .disable = net2280_disable,
1318
1319 .alloc_request = net2280_alloc_request,
1320 .free_request = net2280_free_request,
1321
1da177e4
LT		 1322 .queue = net2280_queue,
1323 .dequeue = net2280_dequeue,
1324
1325 .set_halt = net2280_set_halt,
8066134f 1326 .set_wedge = net2280_set_wedge,
1da177e4
LT		 1327 .fifo_status = net2280_fifo_status,
1328 .fifo_flush = net2280_fifo_flush,
1329};
1330
1331/*-------------------------------------------------------------------------*/
1332
1333static int net2280_get_frame (struct usb_gadget *_gadget)
1334{
1335 struct net2280 *dev;
1336 unsigned long flags;
1337 u16 retval;
1338
1339 if (!_gadget)
1340 return -ENODEV;
1341 dev = container_of (_gadget, struct net2280, gadget);
1342 spin_lock_irqsave (&dev->lock, flags);
1343 retval = get_idx_reg (dev->regs, REG_FRAME) & 0x03ff;
1344 spin_unlock_irqrestore (&dev->lock, flags);
1345 return retval;
1346}
1347
1348static int net2280_wakeup (struct usb_gadget *_gadget)
1349{
1350 struct net2280 *dev;
1351 u32 tmp;
1352 unsigned long flags;
1353
1354 if (!_gadget)
1355 return 0;
1356 dev = container_of (_gadget, struct net2280, gadget);
1357
1358 spin_lock_irqsave (&dev->lock, flags);
1359 tmp = readl (&dev->usb->usbctl);
1360 if (tmp & (1 << DEVICE_REMOTE_WAKEUP_ENABLE))
1361 writel (1 << GENERATE_RESUME, &dev->usb->usbstat);
1362 spin_unlock_irqrestore (&dev->lock, flags);
1363
1364 /* pci writes may still be posted */
1365 return 0;
1366}
1367
1368static int net2280_set_selfpowered (struct usb_gadget *_gadget, int value)
1369{
1370 struct net2280 *dev;
1371 u32 tmp;
1372 unsigned long flags;
1373
1374 if (!_gadget)
1375 return 0;
1376 dev = container_of (_gadget, struct net2280, gadget);
1377
1378 spin_lock_irqsave (&dev->lock, flags);
1379 tmp = readl (&dev->usb->usbctl);
1380 if (value)
1381 tmp |= (1 << SELF_POWERED_STATUS);
1382 else
1383 tmp &= ~(1 << SELF_POWERED_STATUS);
1384 writel (tmp, &dev->usb->usbctl);
1385 spin_unlock_irqrestore (&dev->lock, flags);
1386
1387 return 0;
1388}
1389
1390static int net2280_pullup(struct usb_gadget *_gadget, int is_on)
1391{
1392 struct net2280 *dev;
1393 u32 tmp;
1394 unsigned long flags;
1395
1396 if (!_gadget)
1397 return -ENODEV;
1398 dev = container_of (_gadget, struct net2280, gadget);
1399
1400 spin_lock_irqsave (&dev->lock, flags);
1401 tmp = readl (&dev->usb->usbctl);
1402 dev->softconnect = (is_on != 0);
1403 if (is_on)
1404 tmp |= (1 << USB_DETECT_ENABLE);
1405 else
1406 tmp &= ~(1 << USB_DETECT_ENABLE);
1407 writel (tmp, &dev->usb->usbctl);
1408 spin_unlock_irqrestore (&dev->lock, flags);
1409
1410 return 0;
1411}
1412
0f91349b
SAS		 1413static int net2280_start(struct usb_gadget_driver *driver,
1414 int (*bind)(struct usb_gadget *));
1415static int net2280_stop(struct usb_gadget_driver *driver);
1416
1da177e4
LT		 1417static const struct usb_gadget_ops net2280_ops = {
1418 .get_frame = net2280_get_frame,
1419 .wakeup = net2280_wakeup,
1420 .set_selfpowered = net2280_set_selfpowered,
1421 .pullup = net2280_pullup,
0f91349b
SAS		 1422 .start = net2280_start,
1423 .stop = net2280_stop,
1da177e4
LT		 1424};
1425
1426/*-------------------------------------------------------------------------*/
1427
1428#ifdef CONFIG_USB_GADGET_DEBUG_FILES
1429
1430/* FIXME move these into procfs, and use seq_file.
1431 * Sysfs _still_ doesn't behave for arbitrarily sized files,
1432 * and also doesn't help products using this with 2.4 kernels.
1433 */
1434
1435/* "function" sysfs attribute */
1436static ssize_t
10523b3b 1437show_function (struct device *_dev, struct device_attribute *attr, char *buf)
1da177e4
LT		 1438{
1439 struct net2280 *dev = dev_get_drvdata (_dev);
1440
1441 if (!dev->driver
1442 || !dev->driver->function
1443 || strlen (dev->driver->function) > PAGE_SIZE)
1444 return 0;
1445 return scnprintf (buf, PAGE_SIZE, "%s\n", dev->driver->function);
1446}
1447static DEVICE_ATTR (function, S_IRUGO, show_function, NULL);
1448
62fb44b9
DH		 1449static ssize_t net2280_show_registers(struct device *_dev,
1450 struct device_attribute *attr, char *buf)
1da177e4
LT		 1451{
1452 struct net2280 *dev;
1453 char *next;
1454 unsigned size, t;
1455 unsigned long flags;
1456 int i;
1457 u32 t1, t2;
30e69598 1458 const char *s;
1da177e4
LT		 1459
1460 dev = dev_get_drvdata (_dev);
1461 next = buf;
1462 size = PAGE_SIZE;
1463 spin_lock_irqsave (&dev->lock, flags);
1464
1465 if (dev->driver)
1466 s = dev->driver->driver.name;
1467 else
1468 s = "(none)";
1469
1470 /* Main Control Registers */
1471 t = scnprintf (next, size, "%s version " DRIVER_VERSION
1472 ", chiprev %04x, dma %s\n\n"
1473 "devinit %03x fifoctl %08x gadget '%s'\n"
1474 "pci irqenb0 %02x irqenb1 %08x "
1475 "irqstat0 %04x irqstat1 %08x\n",
1476 driver_name, dev->chiprev,
1477 use_dma
1478 ? (use_dma_chaining ? "chaining" : "enabled")
1479 : "disabled",
1480 readl (&dev->regs->devinit),
1481 readl (&dev->regs->fifoctl),
1482 s,
1483 readl (&dev->regs->pciirqenb0),
1484 readl (&dev->regs->pciirqenb1),
1485 readl (&dev->regs->irqstat0),
1486 readl (&dev->regs->irqstat1));
1487 size -= t;
1488 next += t;
1489
1490 /* USB Control Registers */
1491 t1 = readl (&dev->usb->usbctl);
1492 t2 = readl (&dev->usb->usbstat);
1493 if (t1 & (1 << VBUS_PIN)) {
1494 if (t2 & (1 << HIGH_SPEED))
1495 s = "high speed";
1496 else if (dev->gadget.speed == USB_SPEED_UNKNOWN)
1497 s = "powered";
1498 else
1499 s = "full speed";
1500 /* full speed bit (6) not working?? */
1501 } else
1502 s = "not attached";
1503 t = scnprintf (next, size,
1504 "stdrsp %08x usbctl %08x usbstat %08x "
1505 "addr 0x%02x (%s)\n",
1506 readl (&dev->usb->stdrsp), t1, t2,
1507 readl (&dev->usb->ouraddr), s);
1508 size -= t;
1509 next += t;
1510
1511 /* PCI Master Control Registers */
1512
1513 /* DMA Control Registers */
1514
1515 /* Configurable EP Control Registers */
1516 for (i = 0; i < 7; i++) {
1517 struct net2280_ep *ep;
1518
1519 ep = &dev->ep [i];
1520 if (i && !ep->desc)
1521 continue;
1522
1523 t1 = readl (&ep->regs->ep_cfg);
1524 t2 = readl (&ep->regs->ep_rsp) & 0xff;
1525 t = scnprintf (next, size,
1526 "\n%s\tcfg %05x rsp (%02x) %s%s%s%s%s%s%s%s"
1527 "irqenb %02x\n",
1528 ep->ep.name, t1, t2,
1529 (t2 & (1 << CLEAR_NAK_OUT_PACKETS))
1530 ? "NAK " : "",
1531 (t2 & (1 << CLEAR_EP_HIDE_STATUS_PHASE))
1532 ? "hide " : "",
1533 (t2 & (1 << CLEAR_EP_FORCE_CRC_ERROR))
1534 ? "CRC " : "",
1535 (t2 & (1 << CLEAR_INTERRUPT_MODE))
1536 ? "interrupt " : "",
1537 (t2 & (1<<CLEAR_CONTROL_STATUS_PHASE_HANDSHAKE))
1538 ? "status " : "",
1539 (t2 & (1 << CLEAR_NAK_OUT_PACKETS_MODE))
1540 ? "NAKmode " : "",
1541 (t2 & (1 << CLEAR_ENDPOINT_TOGGLE))
1542 ? "DATA1 " : "DATA0 ",
1543 (t2 & (1 << CLEAR_ENDPOINT_HALT))
1544 ? "HALT " : "",
1545 readl (&ep->regs->ep_irqenb));
1546 size -= t;
1547 next += t;
1548
1549 t = scnprintf (next, size,
1550 "\tstat %08x avail %04x "
1551 "(ep%d%s-%s)%s\n",
1552 readl (&ep->regs->ep_stat),
1553 readl (&ep->regs->ep_avail),
1554 t1 & 0x0f, DIR_STRING (t1),
1555 type_string (t1 >> 8),
1556 ep->stopped ? "*" : "");
1557 size -= t;
1558 next += t;
1559
1560 if (!ep->dma)
1561 continue;
1562
1563 t = scnprintf (next, size,
1564 " dma\tctl %08x stat %08x count %08x\n"
1565 "\taddr %08x desc %08x\n",
1566 readl (&ep->dma->dmactl),
1567 readl (&ep->dma->dmastat),
1568 readl (&ep->dma->dmacount),
1569 readl (&ep->dma->dmaaddr),
1570 readl (&ep->dma->dmadesc));
1571 size -= t;
1572 next += t;
1573
1574 }
1575
1576 /* Indexed Registers */
901b3d75 1577 // none yet
1da177e4
LT		 1578
1579 /* Statistics */
1580 t = scnprintf (next, size, "\nirqs: ");
1581 size -= t;
1582 next += t;
1583 for (i = 0; i < 7; i++) {
1584 struct net2280_ep *ep;
1585
1586 ep = &dev->ep [i];
1587 if (i && !ep->irqs)
1588 continue;
1589 t = scnprintf (next, size, " %s/%lu", ep->ep.name, ep->irqs);
1590 size -= t;
1591 next += t;
1592
1593 }
1594 t = scnprintf (next, size, "\n");
1595 size -= t;
1596 next += t;
1597
1598 spin_unlock_irqrestore (&dev->lock, flags);
1599
1600 return PAGE_SIZE - size;
1601}
62fb44b9 1602static DEVICE_ATTR(registers, S_IRUGO, net2280_show_registers, NULL);
1da177e4
LT		 1603
1604static ssize_t
10523b3b 1605show_queues (struct device *_dev, struct device_attribute *attr, char *buf)
1da177e4
LT		 1606{
1607 struct net2280 *dev;
1608 char *next;
1609 unsigned size;
1610 unsigned long flags;
1611 int i;
1612
1613 dev = dev_get_drvdata (_dev);
1614 next = buf;
1615 size = PAGE_SIZE;
1616 spin_lock_irqsave (&dev->lock, flags);
1617
1618 for (i = 0; i < 7; i++) {
1619 struct net2280_ep *ep = &dev->ep [i];
1620 struct net2280_request *req;
1621 int t;
1622
1623 if (i != 0) {
1624 const struct usb_endpoint_descriptor *d;
1625
1626 d = ep->desc;
1627 if (!d)
1628 continue;
1629 t = d->bEndpointAddress;
1630 t = scnprintf (next, size,
1631 "\n%s (ep%d%s-%s) max %04x %s fifo %d\n",
1632 ep->ep.name, t & USB_ENDPOINT_NUMBER_MASK,
1633 (t & USB_DIR_IN) ? "in" : "out",
1634 ({ char *val;
1635 switch (d->bmAttributes & 0x03) {
1636 case USB_ENDPOINT_XFER_BULK:
901b3d75 1637 val = "bulk"; break;
1da177e4 1638 case USB_ENDPOINT_XFER_INT:
901b3d75 1639 val = "intr"; break;
1da177e4 1640 default:
901b3d75 1641 val = "iso"; break;
1da177e4
LT		 1642 }; val; }),
1643 le16_to_cpu (d->wMaxPacketSize) & 0x1fff,
1644 ep->dma ? "dma" : "pio", ep->fifo_size
1645 );
1646 } else /* ep0 should only have one transfer queued */
1647 t = scnprintf (next, size, "ep0 max 64 pio %s\n",
1648 ep->is_in ? "in" : "out");
1649 if (t <= 0 || t > size)
1650 goto done;
1651 size -= t;
1652 next += t;
1653
1654 if (list_empty (&ep->queue)) {
1655 t = scnprintf (next, size, "\t(nothing queued)\n");
1656 if (t <= 0 || t > size)
1657 goto done;
1658 size -= t;
1659 next += t;
1660 continue;
1661 }
1662 list_for_each_entry (req, &ep->queue, queue) {
1663 if (ep->dma && req->td_dma == readl (&ep->dma->dmadesc))
1664 t = scnprintf (next, size,
1665 "\treq %p len %d/%d "
1666 "buf %p (dmacount %08x)\n",
1667 &req->req, req->req.actual,
1668 req->req.length, req->req.buf,
1669 readl (&ep->dma->dmacount));
1670 else
1671 t = scnprintf (next, size,
1672 "\treq %p len %d/%d buf %p\n",
1673 &req->req, req->req.actual,
1674 req->req.length, req->req.buf);
1675 if (t <= 0 || t > size)
1676 goto done;
1677 size -= t;
1678 next += t;
1679
1680 if (ep->dma) {
1681 struct net2280_dma *td;
1682
1683 td = req->td;
1684 t = scnprintf (next, size, "\t td %08x "
1685 " count %08x buf %08x desc %08x\n",
1686 (u32) req->td_dma,
1687 le32_to_cpu (td->dmacount),
1688 le32_to_cpu (td->dmaaddr),
1689 le32_to_cpu (td->dmadesc));
1690 if (t <= 0 || t > size)
1691 goto done;
1692 size -= t;
1693 next += t;
1694 }
1695 }
1696 }
1697
1698done:
1699 spin_unlock_irqrestore (&dev->lock, flags);
1700 return PAGE_SIZE - size;
1701}
1702static DEVICE_ATTR (queues, S_IRUGO, show_queues, NULL);
1703
1704
1705#else
1706
9950421c
LT		 1707#define device_create_file(a,b) (0)
1708#define device_remove_file(a,b) do { } while (0)
1da177e4
LT		 1709
1710#endif
1711
1712/*-------------------------------------------------------------------------*/
1713
1714/* another driver-specific mode might be a request type doing dma
1715 * to/from another device fifo instead of to/from memory.
1716 */
1717
1718static void set_fifo_mode (struct net2280 *dev, int mode)
1719{
1720 /* keeping high bits preserves BAR2 */
1721 writel ((0xffff << PCI_BASE2_RANGE) | mode, &dev->regs->fifoctl);
1722
1723 /* always ep-{a,b,e,f} ... maybe not ep-c or ep-d */
1724 INIT_LIST_HEAD (&dev->gadget.ep_list);
1725 list_add_tail (&dev->ep [1].ep.ep_list, &dev->gadget.ep_list);
1726 list_add_tail (&dev->ep [2].ep.ep_list, &dev->gadget.ep_list);
1727 switch (mode) {
1728 case 0:
1729 list_add_tail (&dev->ep [3].ep.ep_list, &dev->gadget.ep_list);
1730 list_add_tail (&dev->ep [4].ep.ep_list, &dev->gadget.ep_list);
1731 dev->ep [1].fifo_size = dev->ep [2].fifo_size = 1024;
1732 break;
1733 case 1:
1734 dev->ep [1].fifo_size = dev->ep [2].fifo_size = 2048;
1735 break;
1736 case 2:
1737 list_add_tail (&dev->ep [3].ep.ep_list, &dev->gadget.ep_list);
1738 dev->ep [1].fifo_size = 2048;
1739 dev->ep [2].fifo_size = 1024;
1740 break;
1741 }
1742 /* fifo sizes for ep0, ep-c, ep-d, ep-e, and ep-f never change */
1743 list_add_tail (&dev->ep [5].ep.ep_list, &dev->gadget.ep_list);
1744 list_add_tail (&dev->ep [6].ep.ep_list, &dev->gadget.ep_list);
1745}
1746
320f3459
DB		 1747/* just declare this in any driver that really need it */
1748extern int net2280_set_fifo_mode (struct usb_gadget *gadget, int mode);
1749
1da177e4
LT		 1750/**
1751 * net2280_set_fifo_mode - change allocation of fifo buffers
1752 * @gadget: access to the net2280 device that will be updated
1753 * @mode: 0 for default, four 1kB buffers (ep-a through ep-d);
901b3d75
DB		 1754 * 1 for two 2kB buffers (ep-a and ep-b only);
1755 * 2 for one 2kB buffer (ep-a) and two 1kB ones (ep-b, ep-c).
1da177e4
LT		 1756 *
1757 * returns zero on success, else negative errno. when this succeeds,
1758 * the contents of gadget->ep_list may have changed.
1759 *
1760 * you may only call this function when endpoints a-d are all disabled.
1761 * use it whenever extra hardware buffering can help performance, such
1762 * as before enabling "high bandwidth" interrupt endpoints that use
1763 * maxpacket bigger than 512 (when double buffering would otherwise
1764 * be unavailable).
1765 */
1766int net2280_set_fifo_mode (struct usb_gadget *gadget, int mode)
1767{
1768 int i;
1769 struct net2280 *dev;
1770 int status = 0;
1771 unsigned long flags;
1772
1773 if (!gadget)
1774 return -ENODEV;
1775 dev = container_of (gadget, struct net2280, gadget);
1776
1777 spin_lock_irqsave (&dev->lock, flags);
1778
1779 for (i = 1; i <= 4; i++)
1780 if (dev->ep [i].desc) {
1781 status = -EINVAL;
1782 break;
1783 }
1784 if (mode < 0 || mode > 2)
1785 status = -EINVAL;
1786 if (status == 0)
1787 set_fifo_mode (dev, mode);
1788 spin_unlock_irqrestore (&dev->lock, flags);
1789
1790 if (status == 0) {
1791 if (mode == 1)
1792 DEBUG (dev, "fifo: ep-a 2K, ep-b 2K\n");
1793 else if (mode == 2)
1794 DEBUG (dev, "fifo: ep-a 2K, ep-b 1K, ep-c 1K\n");
1795 /* else all are 1K */
1796 }
1797 return status;
1798}
1799EXPORT_SYMBOL (net2280_set_fifo_mode);
1800
1801/*-------------------------------------------------------------------------*/
1802
1803/* keeping it simple:
1804 * - one bus driver, initted first;
1805 * - one function driver, initted second
1806 *
1807 * most of the work to support multiple net2280 controllers would
1808 * be to associate this gadget driver (yes?) with all of them, or
1809 * perhaps to bind specific drivers to specific devices.
1810 */
1811
1812static struct net2280 *the_controller;
1813
1814static void usb_reset (struct net2280 *dev)
1815{
1816 u32 tmp;
1817
1818 dev->gadget.speed = USB_SPEED_UNKNOWN;
1819 (void) readl (&dev->usb->usbctl);
1820
1821 net2280_led_init (dev);
1822
1823 /* disable automatic responses, and irqs */
1824 writel (0, &dev->usb->stdrsp);
1825 writel (0, &dev->regs->pciirqenb0);
1826 writel (0, &dev->regs->pciirqenb1);
1827
1828 /* clear old dma and irq state */
1829 for (tmp = 0; tmp < 4; tmp++) {
1830 struct net2280_ep *ep = &dev->ep [tmp + 1];
1831
1832 if (ep->dma)
1833 abort_dma (ep);
1834 }
1835 writel (~0, &dev->regs->irqstat0),
1836 writel (~(1 << SUSPEND_REQUEST_INTERRUPT), &dev->regs->irqstat1),
1837
1838 /* reset, and enable pci */
1839 tmp = readl (&dev->regs->devinit)
1840 | (1 << PCI_ENABLE)
1841 | (1 << FIFO_SOFT_RESET)
1842 | (1 << USB_SOFT_RESET)
1843 | (1 << M8051_RESET);
1844 writel (tmp, &dev->regs->devinit);
1845
1846 /* standard fifo and endpoint allocations */
1847 set_fifo_mode (dev, (fifo_mode <= 2) ? fifo_mode : 0);
1848}
1849
1850static void usb_reinit (struct net2280 *dev)
1851{
1852 u32 tmp;
1853 int init_dma;
1854
1855 /* use_dma changes are ignored till next device re-init */
1856 init_dma = use_dma;
1857
1858 /* basic endpoint init */
1859 for (tmp = 0; tmp < 7; tmp++) {
1860 struct net2280_ep *ep = &dev->ep [tmp];
1861
1862 ep->ep.name = ep_name [tmp];
1863 ep->dev = dev;
1864 ep->num = tmp;
1865
1866 if (tmp > 0 && tmp <= 4) {
1867 ep->fifo_size = 1024;
1868 if (init_dma)
1869 ep->dma = &dev->dma [tmp - 1];
1870 } else
1871 ep->fifo_size = 64;
1872 ep->regs = &dev->epregs [tmp];
1873 ep_reset (dev->regs, ep);
1874 }
1875 dev->ep [0].ep.maxpacket = 64;
1876 dev->ep [5].ep.maxpacket = 64;
1877 dev->ep [6].ep.maxpacket = 64;
1878
1879 dev->gadget.ep0 = &dev->ep [0].ep;
1880 dev->ep [0].stopped = 0;
1881 INIT_LIST_HEAD (&dev->gadget.ep0->ep_list);
1882
1883 /* we want to prevent lowlevel/insecure access from the USB host,
1884 * but erratum 0119 means this enable bit is ignored
1885 */
1886 for (tmp = 0; tmp < 5; tmp++)
1887 writel (EP_DONTUSE, &dev->dep [tmp].dep_cfg);
1888}
1889
1890static void ep0_start (struct net2280 *dev)
1891{
1892 writel ( (1 << CLEAR_EP_HIDE_STATUS_PHASE)
1893 | (1 << CLEAR_NAK_OUT_PACKETS)
1894 | (1 << CLEAR_CONTROL_STATUS_PHASE_HANDSHAKE)
1895 , &dev->epregs [0].ep_rsp);
1896
1897 /*
1898 * hardware optionally handles a bunch of standard requests
1899 * that the API hides from drivers anyway. have it do so.
1900 * endpoint status/features are handled in software, to
1901 * help pass tests for some dubious behavior.
1902 */
1903 writel ( (1 << SET_TEST_MODE)
1904 | (1 << SET_ADDRESS)
1905 | (1 << DEVICE_SET_CLEAR_DEVICE_REMOTE_WAKEUP)
1906 | (1 << GET_DEVICE_STATUS)
1907 | (1 << GET_INTERFACE_STATUS)
1908 , &dev->usb->stdrsp);
1909 writel ( (1 << USB_ROOT_PORT_WAKEUP_ENABLE)
1910 | (1 << SELF_POWERED_USB_DEVICE)
1911 | (1 << REMOTE_WAKEUP_SUPPORT)
1912 | (dev->softconnect << USB_DETECT_ENABLE)
1913 | (1 << SELF_POWERED_STATUS)
1914 , &dev->usb->usbctl);
1915
1916 /* enable irqs so we can see ep0 and general operation */
1917 writel ( (1 << SETUP_PACKET_INTERRUPT_ENABLE)
1918 | (1 << ENDPOINT_0_INTERRUPT_ENABLE)
1919 , &dev->regs->pciirqenb0);
1920 writel ( (1 << PCI_INTERRUPT_ENABLE)
1921 | (1 << PCI_MASTER_ABORT_RECEIVED_INTERRUPT_ENABLE)
1922 | (1 << PCI_TARGET_ABORT_RECEIVED_INTERRUPT_ENABLE)
1923 | (1 << PCI_RETRY_ABORT_INTERRUPT_ENABLE)
1924 | (1 << VBUS_INTERRUPT_ENABLE)
1925 | (1 << ROOT_PORT_RESET_INTERRUPT_ENABLE)
1926 | (1 << SUSPEND_REQUEST_CHANGE_INTERRUPT_ENABLE)
1927 , &dev->regs->pciirqenb1);
1928
1929 /* don't leave any writes posted */
1930 (void) readl (&dev->usb->usbctl);
1931}
1932
1933/* when a driver is successfully registered, it will receive
1934 * control requests including set_configuration(), which enables
1935 * non-control requests. then usb traffic follows until a
1936 * disconnect is reported. then a host may connect again, or
1937 * the driver might get unbound.
1938 */
0f91349b 1939static int net2280_start(struct usb_gadget_driver *driver,
b0fca50f 1940 int (*bind)(struct usb_gadget *))
1da177e4
LT		 1941{
1942 struct net2280 *dev = the_controller;
1943 int retval;
1944 unsigned i;
1945
1946 /* insist on high speed support from the driver, since
1947 * (dev->usb->xcvrdiag & FORCE_FULL_SPEED_MODE)
1948 * "must not be used in normal operation"
1949 */
1950 if (!driver
1951 || driver->speed != USB_SPEED_HIGH
b0fca50f 1952 || !bind || !driver->setup)
1da177e4
LT		 1953 return -EINVAL;
1954 if (!dev)
1955 return -ENODEV;
1956 if (dev->driver)
1957 return -EBUSY;
1958
1959 for (i = 0; i < 7; i++)
1960 dev->ep [i].irqs = 0;
1961
1962 /* hook up the driver ... */
1963 dev->softconnect = 1;
1964 driver->driver.bus = NULL;
1965 dev->driver = driver;
1966 dev->gadget.dev.driver = &driver->driver;
b0fca50f 1967 retval = bind(&dev->gadget);
1da177e4
LT		 1968 if (retval) {
1969 DEBUG (dev, "bind to driver %s --> %d\n",
1970 driver->driver.name, retval);
1971 dev->driver = NULL;
1972 dev->gadget.dev.driver = NULL;
1973 return retval;
1974 }
1975
b3899dac
JG		 1976 retval = device_create_file (&dev->pdev->dev, &dev_attr_function);
1977 if (retval) goto err_unbind;
1978 retval = device_create_file (&dev->pdev->dev, &dev_attr_queues);
1979 if (retval) goto err_func;
1da177e4
LT		 1980
1981 /* ... then enable host detection and ep0; and we're ready
1982 * for set_configuration as well as eventual disconnect.
1983 */
1984 net2280_led_active (dev, 1);
1985 ep0_start (dev);
1986
1987 DEBUG (dev, "%s ready, usbctl %08x stdrsp %08x\n",
1988 driver->driver.name,
1989 readl (&dev->usb->usbctl),
1990 readl (&dev->usb->stdrsp));
1991
1992 /* pci writes may still be posted */
1993 return 0;
b3899dac
JG		 1994
1995err_func:
1996 device_remove_file (&dev->pdev->dev, &dev_attr_function);
1997err_unbind:
1998 driver->unbind (&dev->gadget);
1999 dev->gadget.dev.driver = NULL;
2000 dev->driver = NULL;
2001 return retval;
1da177e4 2002}
1da177e4
LT		 2003
2004static void
2005stop_activity (struct net2280 *dev, struct usb_gadget_driver *driver)
2006{
2007 int i;
2008
2009 /* don't disconnect if it's not connected */
2010 if (dev->gadget.speed == USB_SPEED_UNKNOWN)
2011 driver = NULL;
2012
2013 /* stop hardware; prevent new request submissions;
2014 * and kill any outstanding requests.
2015 */
2016 usb_reset (dev);
2017 for (i = 0; i < 7; i++)
2018 nuke (&dev->ep [i]);
2019
2020 /* report disconnect; the driver is already quiesced */
2021 if (driver) {
2022 spin_unlock (&dev->lock);
2023 driver->disconnect (&dev->gadget);
2024 spin_lock (&dev->lock);
2025 }
2026
2027 usb_reinit (dev);
2028}
2029
0f91349b 2030static int net2280_stop(struct usb_gadget_driver *driver)
1da177e4
LT		 2031{
2032 struct net2280 *dev = the_controller;
2033 unsigned long flags;
2034
2035 if (!dev)
2036 return -ENODEV;
6bea476c 2037 if (!driver || driver != dev->driver || !driver->unbind)
1da177e4
LT		 2038 return -EINVAL;
2039
2040 spin_lock_irqsave (&dev->lock, flags);
2041 stop_activity (dev, driver);
2042 spin_unlock_irqrestore (&dev->lock, flags);
2043
2044 net2280_pullup (&dev->gadget, 0);
2045
2046 driver->unbind (&dev->gadget);
2047 dev->gadget.dev.driver = NULL;
2048 dev->driver = NULL;
2049
2050 net2280_led_active (dev, 0);
2051 device_remove_file (&dev->pdev->dev, &dev_attr_function);
2052 device_remove_file (&dev->pdev->dev, &dev_attr_queues);
2053
2054 DEBUG (dev, "unregistered driver '%s'\n", driver->driver.name);
2055 return 0;
2056}
1da177e4
LT		 2057
2058/*-------------------------------------------------------------------------*/
2059
2060/* handle ep0, ep-e, ep-f with 64 byte packets: packet per irq.
2061 * also works for dma-capable endpoints, in pio mode or just
2062 * to manually advance the queue after short OUT transfers.
2063 */
2064static void handle_ep_small (struct net2280_ep *ep)
2065{
2066 struct net2280_request *req;
2067 u32 t;
2068 /* 0 error, 1 mid-data, 2 done */
2069 int mode = 1;
2070
2071 if (!list_empty (&ep->queue))
2072 req = list_entry (ep->queue.next,
2073 struct net2280_request, queue);
2074 else
2075 req = NULL;
2076
2077 /* ack all, and handle what we care about */
2078 t = readl (&ep->regs->ep_stat);
2079 ep->irqs++;
2080#if 0
2081 VDEBUG (ep->dev, "%s ack ep_stat %08x, req %p\n",
2082 ep->ep.name, t, req ? &req->req : 0);
2083#endif
950ee4c8
GL		 2084 if (!ep->is_in || ep->dev->pdev->device == 0x2280)
2085 writel (t & ~(1 << NAK_OUT_PACKETS), &ep->regs->ep_stat);
2086 else
2087 /* Added for 2282 */
2088 writel (t, &ep->regs->ep_stat);
1da177e4
LT		 2089
2090 /* for ep0, monitor token irqs to catch data stage length errors
2091 * and to synchronize on status.
2092 *
2093 * also, to defer reporting of protocol stalls ... here's where
2094 * data or status first appears, handling stalls here should never
2095 * cause trouble on the host side..
2096 *
2097 * control requests could be slightly faster without token synch for
2098 * status, but status can jam up that way.
2099 */
2100 if (unlikely (ep->num == 0)) {
2101 if (ep->is_in) {
2102 /* status; stop NAKing */
2103 if (t & (1 << DATA_OUT_PING_TOKEN_INTERRUPT)) {
2104 if (ep->dev->protocol_stall) {
2105 ep->stopped = 1;
2106 set_halt (ep);
2107 }
2108 if (!req)
2109 allow_status (ep);
2110 mode = 2;
2111 /* reply to extra IN data tokens with a zlp */
2112 } else if (t & (1 << DATA_IN_TOKEN_INTERRUPT)) {
2113 if (ep->dev->protocol_stall) {
2114 ep->stopped = 1;
2115 set_halt (ep);
2116 mode = 2;
1f26e28d
AS		 2117 } else if (ep->responded &&
2118 !req && !ep->stopped)
1da177e4
LT		 2119 write_fifo (ep, NULL);
2120 }
2121 } else {
2122 /* status; stop NAKing */
2123 if (t & (1 << DATA_IN_TOKEN_INTERRUPT)) {
2124 if (ep->dev->protocol_stall) {
2125 ep->stopped = 1;
2126 set_halt (ep);
2127 }
2128 mode = 2;
2129 /* an extra OUT token is an error */
2130 } else if (((t & (1 << DATA_OUT_PING_TOKEN_INTERRUPT))
2131 && req
2132 && req->req.actual == req->req.length)
1f26e28d 2133 || (ep->responded && !req)) {
1da177e4
LT		 2134 ep->dev->protocol_stall = 1;
2135 set_halt (ep);
2136 ep->stopped = 1;
2137 if (req)
2138 done (ep, req, -EOVERFLOW);
2139 req = NULL;
2140 }
2141 }
2142 }
2143
2144 if (unlikely (!req))
2145 return;
2146
2147 /* manual DMA queue advance after short OUT */
2148 if (likely (ep->dma != 0)) {
2149 if (t & (1 << SHORT_PACKET_TRANSFERRED_INTERRUPT)) {
2150 u32 count;
2151 int stopped = ep->stopped;
2152
2153 /* TRANSFERRED works around OUT_DONE erratum 0112.
2154 * we expect (N <= maxpacket) bytes; host wrote M.
2155 * iff (M < N) we won't ever see a DMA interrupt.
2156 */
2157 ep->stopped = 1;
2158 for (count = 0; ; t = readl (&ep->regs->ep_stat)) {
2159
2160 /* any preceding dma transfers must finish.
2161 * dma handles (M >= N), may empty the queue
2162 */
2163 scan_dma_completions (ep);
2164 if (unlikely (list_empty (&ep->queue)
2165 || ep->out_overflow)) {
2166 req = NULL;
2167 break;
2168 }
2169 req = list_entry (ep->queue.next,
2170 struct net2280_request, queue);
2171
2172 /* here either (M < N), a "real" short rx;
2173 * or (M == N) and the queue didn't empty
2174 */
2175 if (likely (t & (1 << FIFO_EMPTY))) {
2176 count = readl (&ep->dma->dmacount);
2177 count &= DMA_BYTE_COUNT_MASK;
2178 if (readl (&ep->dma->dmadesc)
2179 != req->td_dma)
2180 req = NULL;
2181 break;
2182 }
2183 udelay(1);
2184 }
2185
2186 /* stop DMA, leave ep NAKing */
2187 writel ((1 << DMA_ABORT), &ep->dma->dmastat);
2188 spin_stop_dma (ep->dma);
2189
2190 if (likely (req)) {
2191 req->td->dmacount = 0;
2192 t = readl (&ep->regs->ep_avail);
68dcc688 2193 dma_done (ep, req, count,
901b3d75
DB		 2194 (ep->out_overflow || t)
2195 ? -EOVERFLOW : 0);
1da177e4
LT		 2196 }
2197
2198 /* also flush to prevent erratum 0106 trouble */
2199 if (unlikely (ep->out_overflow
2200 || (ep->dev->chiprev == 0x0100
2201 && ep->dev->gadget.speed
2202 == USB_SPEED_FULL))) {
2203 out_flush (ep);
2204 ep->out_overflow = 0;
2205 }
2206
2207 /* (re)start dma if needed, stop NAKing */
2208 ep->stopped = stopped;
2209 if (!list_empty (&ep->queue))
2210 restart_dma (ep);
2211 } else
2212 DEBUG (ep->dev, "%s dma ep_stat %08x ??\n",
2213 ep->ep.name, t);
2214 return;
2215
2216 /* data packet(s) received (in the fifo, OUT) */
2217 } else if (t & (1 << DATA_PACKET_RECEIVED_INTERRUPT)) {
2218 if (read_fifo (ep, req) && ep->num != 0)
2219 mode = 2;
2220
2221 /* data packet(s) transmitted (IN) */
2222 } else if (t & (1 << DATA_PACKET_TRANSMITTED_INTERRUPT)) {
2223 unsigned len;
2224
2225 len = req->req.length - req->req.actual;
2226 if (len > ep->ep.maxpacket)
2227 len = ep->ep.maxpacket;
2228 req->req.actual += len;
2229
2230 /* if we wrote it all, we're usually done */
2231 if (req->req.actual == req->req.length) {
2232 if (ep->num == 0) {
317e83b8 2233 /* send zlps until the status stage */
1da177e4
LT		 2234 } else if (!req->req.zero || len != ep->ep.maxpacket)
2235 mode = 2;
2236 }
2237
2238 /* there was nothing to do ... */
2239 } else if (mode == 1)
2240 return;
2241
2242 /* done */
2243 if (mode == 2) {
2244 /* stream endpoints often resubmit/unlink in completion */
2245 done (ep, req, 0);
2246
2247 /* maybe advance queue to next request */
2248 if (ep->num == 0) {
2249 /* NOTE: net2280 could let gadget driver start the
2250 * status stage later. since not all controllers let
2251 * them control that, the api doesn't (yet) allow it.
2252 */
2253 if (!ep->stopped)
2254 allow_status (ep);
2255 req = NULL;
2256 } else {
2257 if (!list_empty (&ep->queue) && !ep->stopped)
2258 req = list_entry (ep->queue.next,
2259 struct net2280_request, queue);
2260 else
2261 req = NULL;
2262 if (req && !ep->is_in)
2263 stop_out_naking (ep);
2264 }
2265 }
2266
2267 /* is there a buffer for the next packet?
2268 * for best streaming performance, make sure there is one.
2269 */
2270 if (req && !ep->stopped) {
2271
2272 /* load IN fifo with next packet (may be zlp) */
2273 if (t & (1 << DATA_PACKET_TRANSMITTED_INTERRUPT))
2274 write_fifo (ep, &req->req);
2275 }
2276}
2277
2278static struct net2280_ep *
2279get_ep_by_addr (struct net2280 *dev, u16 wIndex)
2280{
2281 struct net2280_ep *ep;
2282
2283 if ((wIndex & USB_ENDPOINT_NUMBER_MASK) == 0)
2284 return &dev->ep [0];
2285 list_for_each_entry (ep, &dev->gadget.ep_list, ep.ep_list) {
2286 u8 bEndpointAddress;
2287
2288 if (!ep->desc)
2289 continue;
2290 bEndpointAddress = ep->desc->bEndpointAddress;
2291 if ((wIndex ^ bEndpointAddress) & USB_DIR_IN)
2292 continue;
2293 if ((wIndex & 0x0f) == (bEndpointAddress & 0x0f))
2294 return ep;
2295 }
2296 return NULL;
2297}
2298
2299static void handle_stat0_irqs (struct net2280 *dev, u32 stat)
2300{
2301 struct net2280_ep *ep;
2302 u32 num, scratch;
2303
2304 /* most of these don't need individual acks */
2305 stat &= ~(1 << INTA_ASSERTED);
2306 if (!stat)
2307 return;
2308 // DEBUG (dev, "irqstat0 %04x\n", stat);
2309
2310 /* starting a control request? */
2311 if (unlikely (stat & (1 << SETUP_PACKET_INTERRUPT))) {
2312 union {
2313 u32 raw [2];
2314 struct usb_ctrlrequest r;
2315 } u;
950ee4c8 2316 int tmp;
1da177e4
LT		 2317 struct net2280_request *req;
2318
2319 if (dev->gadget.speed == USB_SPEED_UNKNOWN) {
2320 if (readl (&dev->usb->usbstat) & (1 << HIGH_SPEED))
2321 dev->gadget.speed = USB_SPEED_HIGH;
2322 else
2323 dev->gadget.speed = USB_SPEED_FULL;
2324 net2280_led_speed (dev, dev->gadget.speed);
2325 DEBUG (dev, "%s speed\n",
2326 (dev->gadget.speed == USB_SPEED_HIGH)
2327 ? "high" : "full");
2328 }
2329
2330 ep = &dev->ep [0];
2331 ep->irqs++;
2332
2333 /* make sure any leftover request state is cleared */
2334 stat &= ~(1 << ENDPOINT_0_INTERRUPT);
2335 while (!list_empty (&ep->queue)) {
2336 req = list_entry (ep->queue.next,
2337 struct net2280_request, queue);
2338 done (ep, req, (req->req.actual == req->req.length)
2339 ? 0 : -EPROTO);
2340 }
2341 ep->stopped = 0;
2342 dev->protocol_stall = 0;
950ee4c8
GL		 2343
2344 if (ep->dev->pdev->device == 0x2280)
2345 tmp = (1 << FIFO_OVERFLOW)
2346 | (1 << FIFO_UNDERFLOW);
2347 else
2348 tmp = 0;
2349
2350 writel (tmp | (1 << TIMEOUT)
1da177e4
LT		 2351 | (1 << USB_STALL_SENT)
2352 | (1 << USB_IN_NAK_SENT)
2353 | (1 << USB_IN_ACK_RCVD)
2354 | (1 << USB_OUT_PING_NAK_SENT)
2355 | (1 << USB_OUT_ACK_SENT)
1da177e4
LT		 2356 | (1 << SHORT_PACKET_OUT_DONE_INTERRUPT)
2357 | (1 << SHORT_PACKET_TRANSFERRED_INTERRUPT)
2358 | (1 << DATA_PACKET_RECEIVED_INTERRUPT)
2359 | (1 << DATA_PACKET_TRANSMITTED_INTERRUPT)
2360 | (1 << DATA_OUT_PING_TOKEN_INTERRUPT)
2361 | (1 << DATA_IN_TOKEN_INTERRUPT)
2362 , &ep->regs->ep_stat);
2363 u.raw [0] = readl (&dev->usb->setup0123);
2364 u.raw [1] = readl (&dev->usb->setup4567);
901b3d75 2365
1da177e4
LT		 2366 cpu_to_le32s (&u.raw [0]);
2367 cpu_to_le32s (&u.raw [1]);
2368
950ee4c8
GL		 2369 tmp = 0;
2370
01ee7d70
DB		 2371#define w_value le16_to_cpu(u.r.wValue)
2372#define w_index le16_to_cpu(u.r.wIndex)
2373#define w_length le16_to_cpu(u.r.wLength)
1da177e4
LT		 2374
2375 /* ack the irq */
2376 writel (1 << SETUP_PACKET_INTERRUPT, &dev->regs->irqstat0);
2377 stat ^= (1 << SETUP_PACKET_INTERRUPT);
2378
2379 /* watch control traffic at the token level, and force
2380 * synchronization before letting the status stage happen.
2381 * FIXME ignore tokens we'll NAK, until driver responds.
2382 * that'll mean a lot less irqs for some drivers.
2383 */
2384 ep->is_in = (u.r.bRequestType & USB_DIR_IN) != 0;
2385 if (ep->is_in) {
2386 scratch = (1 << DATA_PACKET_TRANSMITTED_INTERRUPT)
2387 | (1 << DATA_OUT_PING_TOKEN_INTERRUPT)
2388 | (1 << DATA_IN_TOKEN_INTERRUPT);
2389 stop_out_naking (ep);
2390 } else
2391 scratch = (1 << DATA_PACKET_RECEIVED_INTERRUPT)
2392 | (1 << DATA_OUT_PING_TOKEN_INTERRUPT)
2393 | (1 << DATA_IN_TOKEN_INTERRUPT);
2394 writel (scratch, &dev->epregs [0].ep_irqenb);
2395
2396 /* we made the hardware handle most lowlevel requests;
2397 * everything else goes uplevel to the gadget code.
2398 */
1f26e28d 2399 ep->responded = 1;
1da177e4
LT		 2400 switch (u.r.bRequest) {
2401 case USB_REQ_GET_STATUS: {
2402 struct net2280_ep *e;
320f3459 2403 __le32 status;
1da177e4
LT		 2404
2405 /* hw handles device and interface status */
2406 if (u.r.bRequestType != (USB_DIR_IN|USB_RECIP_ENDPOINT))
2407 goto delegate;
320f3459
DB		 2408 if ((e = get_ep_by_addr (dev, w_index)) == 0
2409 || w_length > 2)
1da177e4
LT		 2410 goto do_stall;
2411
2412 if (readl (&e->regs->ep_rsp)
2413 & (1 << SET_ENDPOINT_HALT))
551509d2 2414 status = cpu_to_le32 (1);
1da177e4 2415 else
551509d2 2416 status = cpu_to_le32 (0);
1da177e4
LT		 2417
2418 /* don't bother with a request object! */
2419 writel (0, &dev->epregs [0].ep_irqenb);
320f3459
DB		 2420 set_fifo_bytecount (ep, w_length);
2421 writel ((__force u32)status, &dev->epregs [0].ep_data);
1da177e4
LT		 2422 allow_status (ep);
2423 VDEBUG (dev, "%s stat %02x\n", ep->ep.name, status);
2424 goto next_endpoints;
2425 }
2426 break;
2427 case USB_REQ_CLEAR_FEATURE: {
2428 struct net2280_ep *e;
2429
2430 /* hw handles device features */
2431 if (u.r.bRequestType != USB_RECIP_ENDPOINT)
2432 goto delegate;
320f3459
DB		 2433 if (w_value != USB_ENDPOINT_HALT
2434 || w_length != 0)
1da177e4 2435 goto do_stall;
320f3459 2436 if ((e = get_ep_by_addr (dev, w_index)) == 0)
1da177e4 2437 goto do_stall;
8066134f
AS		 2438 if (e->wedged) {
2439 VDEBUG(dev, "%s wedged, halt not cleared\n",
2440 ep->ep.name);
2441 } else {
2442 VDEBUG(dev, "%s clear halt\n", ep->ep.name);
2443 clear_halt(e);
2444 }
1da177e4 2445 allow_status (ep);
1da177e4
LT		 2446 goto next_endpoints;
2447 }
2448 break;
2449 case USB_REQ_SET_FEATURE: {
2450 struct net2280_ep *e;
2451
2452 /* hw handles device features */
2453 if (u.r.bRequestType != USB_RECIP_ENDPOINT)
2454 goto delegate;
320f3459
DB		 2455 if (w_value != USB_ENDPOINT_HALT
2456 || w_length != 0)
1da177e4 2457 goto do_stall;
320f3459 2458 if ((e = get_ep_by_addr (dev, w_index)) == 0)
1da177e4 2459 goto do_stall;
8066134f
AS		 2460 if (e->ep.name == ep0name)
2461 goto do_stall;
1da177e4
LT		 2462 set_halt (e);
2463 allow_status (ep);
2464 VDEBUG (dev, "%s set halt\n", ep->ep.name);
2465 goto next_endpoints;
2466 }
2467 break;
2468 default:
2469delegate:
fec8de3a 2470 VDEBUG (dev, "setup %02x.%02x v%04x i%04x l%04x "
1da177e4
LT		 2471 "ep_cfg %08x\n",
2472 u.r.bRequestType, u.r.bRequest,
320f3459 2473 w_value, w_index, w_length,
1da177e4 2474 readl (&ep->regs->ep_cfg));
1f26e28d 2475 ep->responded = 0;
1da177e4
LT		 2476 spin_unlock (&dev->lock);
2477 tmp = dev->driver->setup (&dev->gadget, &u.r);
2478 spin_lock (&dev->lock);
2479 }
2480
2481 /* stall ep0 on error */
2482 if (tmp < 0) {
2483do_stall:
2484 VDEBUG (dev, "req %02x.%02x protocol STALL; stat %d\n",
2485 u.r.bRequestType, u.r.bRequest, tmp);
2486 dev->protocol_stall = 1;
2487 }
2488
2489 /* some in/out token irq should follow; maybe stall then.
2490 * driver must queue a request (even zlp) or halt ep0
2491 * before the host times out.
2492 */
2493 }
2494
320f3459
DB		 2495#undef w_value
2496#undef w_index
2497#undef w_length
2498
1da177e4
LT		 2499next_endpoints:
2500 /* endpoint data irq ? */
2501 scratch = stat & 0x7f;
2502 stat &= ~0x7f;
2503 for (num = 0; scratch; num++) {
2504 u32 t;
2505
2506 /* do this endpoint's FIFO and queue need tending? */
2507 t = 1 << num;
2508 if ((scratch & t) == 0)
2509 continue;
2510 scratch ^= t;
2511
2512 ep = &dev->ep [num];
2513 handle_ep_small (ep);
2514 }
2515
2516 if (stat)
2517 DEBUG (dev, "unhandled irqstat0 %08x\n", stat);
2518}
2519
2520#define DMA_INTERRUPTS ( \
2521 (1 << DMA_D_INTERRUPT) \
2522 | (1 << DMA_C_INTERRUPT) \
2523 | (1 << DMA_B_INTERRUPT) \
2524 | (1 << DMA_A_INTERRUPT))
2525#define PCI_ERROR_INTERRUPTS ( \
2526 (1 << PCI_MASTER_ABORT_RECEIVED_INTERRUPT) \
2527 | (1 << PCI_TARGET_ABORT_RECEIVED_INTERRUPT) \
2528 | (1 << PCI_RETRY_ABORT_INTERRUPT))
2529
2530static void handle_stat1_irqs (struct net2280 *dev, u32 stat)
2531{
2532 struct net2280_ep *ep;
2533 u32 tmp, num, mask, scratch;
2534
2535 /* after disconnect there's nothing else to do! */
2536 tmp = (1 << VBUS_INTERRUPT) | (1 << ROOT_PORT_RESET_INTERRUPT);
2537 mask = (1 << HIGH_SPEED) | (1 << FULL_SPEED);
2538
2539 /* VBUS disconnect is indicated by VBUS_PIN and VBUS_INTERRUPT set.
2540 * Root Port Reset is indicated by ROOT_PORT_RESET_INTERRRUPT set and
901b3d75 2541 * both HIGH_SPEED and FULL_SPEED clear (as ROOT_PORT_RESET_INTERRUPT
1da177e4
LT		 2542 * only indicates a change in the reset state).
2543 */
2544 if (stat & tmp) {
2545 writel (tmp, &dev->regs->irqstat1);
901b3d75
DB		 2546 if ((((stat & (1 << ROOT_PORT_RESET_INTERRUPT))
2547 && ((readl (&dev->usb->usbstat) & mask)
2548 == 0))
2549 || ((readl (&dev->usb->usbctl)
2550 & (1 << VBUS_PIN)) == 0)
1da177e4
LT		 2551 ) && ( dev->gadget.speed != USB_SPEED_UNKNOWN)) {
2552 DEBUG (dev, "disconnect %s\n",
2553 dev->driver->driver.name);
2554 stop_activity (dev, dev->driver);
2555 ep0_start (dev);
2556 return;
2557 }
2558 stat &= ~tmp;
2559
2560 /* vBUS can bounce ... one of many reasons to ignore the
2561 * notion of hotplug events on bus connect/disconnect!
2562 */
2563 if (!stat)
2564 return;
2565 }
2566
2567 /* NOTE: chip stays in PCI D0 state for now, but it could
2568 * enter D1 to save more power
2569 */
2570 tmp = (1 << SUSPEND_REQUEST_CHANGE_INTERRUPT);
2571 if (stat & tmp) {
2572 writel (tmp, &dev->regs->irqstat1);
2573 if (stat & (1 << SUSPEND_REQUEST_INTERRUPT)) {
2574 if (dev->driver->suspend)
2575 dev->driver->suspend (&dev->gadget);
2576 if (!enable_suspend)
2577 stat &= ~(1 << SUSPEND_REQUEST_INTERRUPT);
2578 } else {
2579 if (dev->driver->resume)
2580 dev->driver->resume (&dev->gadget);
2581 /* at high speed, note erratum 0133 */
2582 }
2583 stat &= ~tmp;
2584 }
2585
2586 /* clear any other status/irqs */
2587 if (stat)
2588 writel (stat, &dev->regs->irqstat1);
2589
2590 /* some status we can just ignore */
950ee4c8
GL		 2591 if (dev->pdev->device == 0x2280)
2592 stat &= ~((1 << CONTROL_STATUS_INTERRUPT)
2593 | (1 << SUSPEND_REQUEST_INTERRUPT)
2594 | (1 << RESUME_INTERRUPT)
2595 | (1 << SOF_INTERRUPT));
2596 else
2597 stat &= ~((1 << CONTROL_STATUS_INTERRUPT)
2598 | (1 << RESUME_INTERRUPT)
2599 | (1 << SOF_DOWN_INTERRUPT)
2600 | (1 << SOF_INTERRUPT));
2601
1da177e4
LT		 2602 if (!stat)
2603 return;
2604 // DEBUG (dev, "irqstat1 %08x\n", stat);
2605
2606 /* DMA status, for ep-{a,b,c,d} */
2607 scratch = stat & DMA_INTERRUPTS;
2608 stat &= ~DMA_INTERRUPTS;
2609 scratch >>= 9;
2610 for (num = 0; scratch; num++) {
2611 struct net2280_dma_regs __iomem *dma;
2612
2613 tmp = 1 << num;
2614 if ((tmp & scratch) == 0)
2615 continue;
2616 scratch ^= tmp;
2617
2618 ep = &dev->ep [num + 1];
2619 dma = ep->dma;
2620
2621 if (!dma)
2622 continue;
2623
2624 /* clear ep's dma status */
2625 tmp = readl (&dma->dmastat);
2626 writel (tmp, &dma->dmastat);
2627
2628 /* chaining should stop on abort, short OUT from fifo,
2629 * or (stat0 codepath) short OUT transfer.
2630 */
2631 if (!use_dma_chaining) {
2632 if ((tmp & (1 << DMA_TRANSACTION_DONE_INTERRUPT))
2633 == 0) {
2634 DEBUG (ep->dev, "%s no xact done? %08x\n",
2635 ep->ep.name, tmp);
2636 continue;
2637 }
2638 stop_dma (ep->dma);
2639 }
2640
2641 /* OUT transfers terminate when the data from the
2642 * host is in our memory. Process whatever's done.
2643 * On this path, we know transfer's last packet wasn't
2644 * less than req->length. NAK_OUT_PACKETS may be set,
2645 * or the FIFO may already be holding new packets.
2646 *
2647 * IN transfers can linger in the FIFO for a very
2648 * long time ... we ignore that for now, accounting
2649 * precisely (like PIO does) needs per-packet irqs
2650 */
2651 scan_dma_completions (ep);
2652
2653 /* disable dma on inactive queues; else maybe restart */
2654 if (list_empty (&ep->queue)) {
2655 if (use_dma_chaining)
2656 stop_dma (ep->dma);
2657 } else {
2658 tmp = readl (&dma->dmactl);
2659 if (!use_dma_chaining
2660 || (tmp & (1 << DMA_ENABLE)) == 0)
2661 restart_dma (ep);
2662 else if (ep->is_in && use_dma_chaining) {
2663 struct net2280_request *req;
320f3459 2664 __le32 dmacount;
1da177e4
LT		 2665
2666 /* the descriptor at the head of the chain
2667 * may still have VALID_BIT clear; that's
2668 * used to trigger changing DMA_FIFO_VALIDATE
2669 * (affects automagic zlp writes).
2670 */
2671 req = list_entry (ep->queue.next,
2672 struct net2280_request, queue);
2673 dmacount = req->td->dmacount;
551509d2 2674 dmacount &= cpu_to_le32 (
1da177e4
LT		 2675 (1 << VALID_BIT)
2676 | DMA_BYTE_COUNT_MASK);
2677 if (dmacount && (dmacount & valid_bit) == 0)
2678 restart_dma (ep);
2679 }
2680 }
2681 ep->irqs++;
2682 }
2683
2684 /* NOTE: there are other PCI errors we might usefully notice.
2685 * if they appear very often, here's where to try recovering.
2686 */
2687 if (stat & PCI_ERROR_INTERRUPTS) {
2688 ERROR (dev, "pci dma error; stat %08x\n", stat);
2689 stat &= ~PCI_ERROR_INTERRUPTS;
2690 /* these are fatal errors, but "maybe" they won't
2691 * happen again ...
2692 */
2693 stop_activity (dev, dev->driver);
2694 ep0_start (dev);
2695 stat = 0;
2696 }
2697
2698 if (stat)
2699 DEBUG (dev, "unhandled irqstat1 %08x\n", stat);
2700}
2701
7d12e780 2702static irqreturn_t net2280_irq (int irq, void *_dev)
1da177e4
LT		 2703{
2704 struct net2280 *dev = _dev;
2705
658ad5e0
AS		 2706 /* shared interrupt, not ours */
2707 if (!(readl(&dev->regs->irqstat0) & (1 << INTA_ASSERTED)))
2708 return IRQ_NONE;
2709
1da177e4
LT		 2710 spin_lock (&dev->lock);
2711
2712 /* handle disconnect, dma, and more */
2713 handle_stat1_irqs (dev, readl (&dev->regs->irqstat1));
2714
2715 /* control requests and PIO */
2716 handle_stat0_irqs (dev, readl (&dev->regs->irqstat0));
2717
2718 spin_unlock (&dev->lock);
2719
2720 return IRQ_HANDLED;
2721}
2722
2723/*-------------------------------------------------------------------------*/
2724
2725static void gadget_release (struct device *_dev)
2726{
2727 struct net2280 *dev = dev_get_drvdata (_dev);
2728
2729 kfree (dev);
2730}
2731
2732/* tear down the binding between this driver and the pci device */
2733
2734static void net2280_remove (struct pci_dev *pdev)
2735{
2736 struct net2280 *dev = pci_get_drvdata (pdev);
2737
0f91349b
SAS		 2738 usb_del_gadget_udc(&dev->gadget);
2739
6bea476c 2740 BUG_ON(dev->driver);
1da177e4
LT		 2741
2742 /* then clean up the resources we allocated during probe() */
2743 net2280_led_shutdown (dev);
2744 if (dev->requests) {
2745 int i;
2746 for (i = 1; i < 5; i++) {
2747 if (!dev->ep [i].dummy)
2748 continue;
2749 pci_pool_free (dev->requests, dev->ep [i].dummy,
2750 dev->ep [i].td_dma);
2751 }
2752 pci_pool_destroy (dev->requests);
2753 }
2754 if (dev->got_irq)
2755 free_irq (pdev->irq, dev);
2756 if (dev->regs)
2757 iounmap (dev->regs);
2758 if (dev->region)
2759 release_mem_region (pci_resource_start (pdev, 0),
2760 pci_resource_len (pdev, 0));
2761 if (dev->enabled)
2762 pci_disable_device (pdev);
2763 device_unregister (&dev->gadget.dev);
2764 device_remove_file (&pdev->dev, &dev_attr_registers);
2765 pci_set_drvdata (pdev, NULL);
2766
2767 INFO (dev, "unbind\n");
2768
2769 the_controller = NULL;
2770}
2771
2772/* wrap this driver around the specified device, but
2773 * don't respond over USB until a gadget driver binds to us.
2774 */
2775
2776static int net2280_probe (struct pci_dev *pdev, const struct pci_device_id *id)
2777{
2778 struct net2280 *dev;
2779 unsigned long resource, len;
2780 void __iomem *base = NULL;
2781 int retval, i;
1da177e4
LT		 2782
2783 /* if you want to support more than one controller in a system,
2784 * usb_gadget_driver_{register,unregister}() must change.
2785 */
2786 if (the_controller) {
2787 dev_warn (&pdev->dev, "ignoring\n");
2788 return -EBUSY;
2789 }
2790
2791 /* alloc, and start init */
e94b1766 2792 dev = kzalloc (sizeof *dev, GFP_KERNEL);
1da177e4
LT		 2793 if (dev == NULL){
2794 retval = -ENOMEM;
2795 goto done;
2796 }
2797
9fb81ce6 2798 pci_set_drvdata (pdev, dev);
1da177e4
LT		 2799 spin_lock_init (&dev->lock);
2800 dev->pdev = pdev;
2801 dev->gadget.ops = &net2280_ops;
2802 dev->gadget.is_dualspeed = 1;
2803
2804 /* the "gadget" abstracts/virtualizes the controller */
0031a06e 2805 dev_set_name(&dev->gadget.dev, "gadget");
1da177e4
LT		 2806 dev->gadget.dev.parent = &pdev->dev;
2807 dev->gadget.dev.dma_mask = pdev->dev.dma_mask;
2808 dev->gadget.dev.release = gadget_release;
2809 dev->gadget.name = driver_name;
2810
2811 /* now all the pci goodies ... */
2812 if (pci_enable_device (pdev) < 0) {
901b3d75 2813 retval = -ENODEV;
1da177e4
LT		 2814 goto done;
2815 }
2816 dev->enabled = 1;
2817
2818 /* BAR 0 holds all the registers
2819 * BAR 1 is 8051 memory; unused here (note erratum 0103)
2820 * BAR 2 is fifo memory; unused here
2821 */
2822 resource = pci_resource_start (pdev, 0);
2823 len = pci_resource_len (pdev, 0);
2824 if (!request_mem_region (resource, len, driver_name)) {
2825 DEBUG (dev, "controller already in use\n");
2826 retval = -EBUSY;
2827 goto done;
2828 }
2829 dev->region = 1;
2830
901b3d75
DB		 2831 /* FIXME provide firmware download interface to put
2832 * 8051 code into the chip, e.g. to turn on PCI PM.
2833 */
2834
1da177e4
LT		 2835 base = ioremap_nocache (resource, len);
2836 if (base == NULL) {
2837 DEBUG (dev, "can't map memory\n");
2838 retval = -EFAULT;
2839 goto done;
2840 }
2841 dev->regs = (struct net2280_regs __iomem *) base;
2842 dev->usb = (struct net2280_usb_regs __iomem *) (base + 0x0080);
2843 dev->pci = (struct net2280_pci_regs __iomem *) (base + 0x0100);
2844 dev->dma = (struct net2280_dma_regs __iomem *) (base + 0x0180);
2845 dev->dep = (struct net2280_dep_regs __iomem *) (base + 0x0200);
2846 dev->epregs = (struct net2280_ep_regs __iomem *) (base + 0x0300);
2847
2848 /* put into initial config, link up all endpoints */
2849 writel (0, &dev->usb->usbctl);
2850 usb_reset (dev);
2851 usb_reinit (dev);
2852
2853 /* irq setup after old hardware is cleaned up */
2854 if (!pdev->irq) {
2855 ERROR (dev, "No IRQ. Check PCI setup!\n");
2856 retval = -ENODEV;
2857 goto done;
2858 }
c6387a48 2859
d54b5caa 2860 if (request_irq (pdev->irq, net2280_irq, IRQF_SHARED, driver_name, dev)
1da177e4 2861 != 0) {
c6387a48 2862 ERROR (dev, "request interrupt %d failed\n", pdev->irq);
1da177e4
LT		 2863 retval = -EBUSY;
2864 goto done;
2865 }
2866 dev->got_irq = 1;
2867
2868 /* DMA setup */
2869 /* NOTE: we know only the 32 LSBs of dma addresses may be nonzero */
2870 dev->requests = pci_pool_create ("requests", pdev,
2871 sizeof (struct net2280_dma),
2872 0 /* no alignment requirements */,
2873 0 /* or page-crossing issues */);
2874 if (!dev->requests) {
2875 DEBUG (dev, "can't get request pool\n");
2876 retval = -ENOMEM;
2877 goto done;
2878 }
2879 for (i = 1; i < 5; i++) {
2880 struct net2280_dma *td;
2881
2882 td = pci_pool_alloc (dev->requests, GFP_KERNEL,
2883 &dev->ep [i].td_dma);
2884 if (!td) {
2885 DEBUG (dev, "can't get dummy %d\n", i);
2886 retval = -ENOMEM;
2887 goto done;
2888 }
2889 td->dmacount = 0; /* not VALID */
551509d2 2890 td->dmaaddr = cpu_to_le32 (DMA_ADDR_INVALID);
1da177e4
LT		 2891 td->dmadesc = td->dmaaddr;
2892 dev->ep [i].dummy = td;
2893 }
2894
2895 /* enable lower-overhead pci memory bursts during DMA */
2896 writel ( (1 << DMA_MEMORY_WRITE_AND_INVALIDATE_ENABLE)
2897 // 256 write retries may not be enough...
2898 // | (1 << PCI_RETRY_ABORT_ENABLE)
2899 | (1 << DMA_READ_MULTIPLE_ENABLE)
2900 | (1 << DMA_READ_LINE_ENABLE)
2901 , &dev->pci->pcimstctl);
2902 /* erratum 0115 shouldn't appear: Linux inits PCI_LATENCY_TIMER */
2903 pci_set_master (pdev);
694625c0 2904 pci_try_set_mwi (pdev);
1da177e4
LT		 2905
2906 /* ... also flushes any posted pci writes */
2907 dev->chiprev = get_idx_reg (dev->regs, REG_CHIPREV) & 0xffff;
2908
2909 /* done */
1da177e4 2910 INFO (dev, "%s\n", driver_desc);
c6387a48
DM		 2911 INFO (dev, "irq %d, pci mem %p, chip rev %04x\n",
2912 pdev->irq, base, dev->chiprev);
1da177e4
LT		 2913 INFO (dev, "version: " DRIVER_VERSION "; dma %s\n",
2914 use_dma
2915 ? (use_dma_chaining ? "chaining" : "enabled")
2916 : "disabled");
2917 the_controller = dev;
2918
b3899dac
JG		 2919 retval = device_register (&dev->gadget.dev);
2920 if (retval) goto done;
2921 retval = device_create_file (&pdev->dev, &dev_attr_registers);
2922 if (retval) goto done;
1da177e4 2923
0f91349b
SAS		 2924 retval = usb_add_gadget_udc(&pdev->dev, &dev->gadget);
2925 if (retval)
2926 goto done;
1da177e4
LT		 2927 return 0;
2928
2929done:
2930 if (dev)
2931 net2280_remove (pdev);
2932 return retval;
2933}
2934
2d61bde7
AS		 2935/* make sure the board is quiescent; otherwise it will continue
2936 * generating IRQs across the upcoming reboot.
2937 */
2938
2939static void net2280_shutdown (struct pci_dev *pdev)
2940{
2941 struct net2280 *dev = pci_get_drvdata (pdev);
2942
2943 /* disable IRQs */
2944 writel (0, &dev->regs->pciirqenb0);
2945 writel (0, &dev->regs->pciirqenb1);
2946
2947 /* disable the pullup so the host will think we're gone */
2948 writel (0, &dev->usb->usbctl);
2949}
2950
1da177e4
LT		 2951
2952/*-------------------------------------------------------------------------*/
2953
901b3d75
DB		 2954static const struct pci_device_id pci_ids [] = { {
2955 .class = ((PCI_CLASS_SERIAL_USB << 8) | 0xfe),
2956 .class_mask = ~0,
1da177e4
LT		 2957 .vendor = 0x17cc,
2958 .device = 0x2280,
2959 .subvendor = PCI_ANY_ID,
2960 .subdevice = PCI_ANY_ID,
950ee4c8 2961}, {
901b3d75
DB		 2962 .class = ((PCI_CLASS_SERIAL_USB << 8) | 0xfe),
2963 .class_mask = ~0,
950ee4c8
GL		 2964 .vendor = 0x17cc,
2965 .device = 0x2282,
2966 .subvendor = PCI_ANY_ID,
2967 .subdevice = PCI_ANY_ID,
1da177e4
LT		 2968
2969}, { /* end: all zeroes */ }
2970};
2971MODULE_DEVICE_TABLE (pci, pci_ids);
2972
2973/* pci driver glue; this is a "new style" PCI driver module */
2974static struct pci_driver net2280_pci_driver = {
2975 .name = (char *) driver_name,
2976 .id_table = pci_ids,
2977
2978 .probe = net2280_probe,
2979 .remove = net2280_remove,
2d61bde7 2980 .shutdown = net2280_shutdown,
1da177e4
LT		 2981
2982 /* FIXME add power management support */
2983};
2984
2985MODULE_DESCRIPTION (DRIVER_DESC);
2986MODULE_AUTHOR ("David Brownell");
2987MODULE_LICENSE ("GPL");
2988
2989static int __init init (void)
2990{
2991 if (!use_dma)
2992 use_dma_chaining = 0;
2993 return pci_register_driver (&net2280_pci_driver);
2994}
2995module_init (init);
2996
2997static void __exit cleanup (void)
2998{
2999 pci_unregister_driver (&net2280_pci_driver);
3000}
3001module_exit (cleanup);
Linux 6.x block layer and io_uring tree(s)