1 // SPDX-License-Identifier: GPL-2.0-only 2 /* 3 * Remote VUB300 SDIO/SDmem Host Controller Driver 4 * 5 * Copyright (C) 2010 Elan Digital Systems Limited 6 * 7 * based on USB Skeleton driver - 2.2 8 * 9 * Copyright (C) 2001-2004 Greg Kroah-Hartman (greg@kroah.com) 10 * 11 * VUB300: is a USB 2.0 client device with a single SDIO/SDmem/MMC slot 12 * Any SDIO/SDmem/MMC device plugged into the VUB300 will appear, 13 * by virtue of this driver, to have been plugged into a local 14 * SDIO host controller, similar to, say, a PCI Ricoh controller 15 * This is because this kernel device driver is both a USB 2.0 16 * client device driver AND an MMC host controller driver. Thus 17 * if there is an existing driver for the inserted SDIO/SDmem/MMC 18 * device then that driver will be used by the kernel to manage 19 * the device in exactly the same fashion as if it had been 20 * directly plugged into, say, a local pci bus Ricoh controller 21 * 22 * RANT: this driver was written using a display 128x48 - converting it 23 * to a line width of 80 makes it very difficult to support. In 24 * particular functions have been broken down into sub functions 25 * and the original meaningful names have been shortened into 26 * cryptic ones. 27 * The problem is that executing a fragment of code subject to 28 * two conditions means an indentation of 24, thus leaving only 29 * 56 characters for a C statement. And that is quite ridiculous! 30 * 31 * Data types: data passed to/from the VUB300 is fixed to a number of 32 * bits and driver data fields reflect that limit by using 33 * u8, u16, u32 34 */ 35 #include <linux/kernel.h> 36 #include <linux/errno.h> 37 #include <linux/init.h> 38 #include <linux/slab.h> 39 #include <linux/module.h> 40 #include <linux/kref.h> 41 #include <linux/uaccess.h> 42 #include <linux/usb.h> 43 #include <linux/mutex.h> 44 #include <linux/mmc/host.h> 45 #include <linux/mmc/card.h> 46 #include <linux/mmc/sdio_func.h> 47 #include <linux/mmc/sdio_ids.h> 48 #include <linux/workqueue.h> 49 #include <linux/ctype.h> 50 #include <linux/firmware.h> 51 #include <linux/scatterlist.h> 52 53 struct host_controller_info { 54 u8 info_size; 55 u16 firmware_version; 56 u8 number_of_ports; 57 } __packed; 58 59 #define FIRMWARE_BLOCK_BOUNDARY 1024 60 struct sd_command_header { 61 u8 header_size; 62 u8 header_type; 63 u8 port_number; 64 u8 command_type; /* Bit7 - Rd/Wr */ 65 u8 command_index; 66 u8 transfer_size[4]; /* ReadSize + ReadSize */ 67 u8 response_type; 68 u8 arguments[4]; 69 u8 block_count[2]; 70 u8 block_size[2]; 71 u8 block_boundary[2]; 72 u8 reserved[44]; /* to pad out to 64 bytes */ 73 } __packed; 74 75 struct sd_irqpoll_header { 76 u8 header_size; 77 u8 header_type; 78 u8 port_number; 79 u8 command_type; /* Bit7 - Rd/Wr */ 80 u8 padding[16]; /* don't ask why !! */ 81 u8 poll_timeout_msb; 82 u8 poll_timeout_lsb; 83 u8 reserved[42]; /* to pad out to 64 bytes */ 84 } __packed; 85 86 struct sd_common_header { 87 u8 header_size; 88 u8 header_type; 89 u8 port_number; 90 } __packed; 91 92 struct sd_response_header { 93 u8 header_size; 94 u8 header_type; 95 u8 port_number; 96 u8 command_type; 97 u8 command_index; 98 u8 command_response[]; 99 } __packed; 100 101 struct sd_status_header { 102 u8 header_size; 103 u8 header_type; 104 u8 port_number; 105 u16 port_flags; 106 u32 sdio_clock; 107 u16 host_header_size; 108 u16 func_header_size; 109 u16 ctrl_header_size; 110 } __packed; 111 112 struct sd_error_header { 113 u8 header_size; 114 u8 header_type; 115 u8 port_number; 116 u8 error_code; 117 } __packed; 118 119 struct sd_interrupt_header { 120 u8 header_size; 121 u8 header_type; 122 u8 port_number; 123 } __packed; 124 125 struct offload_registers_access { 126 u8 command_byte[4]; 127 u8 Respond_Byte[4]; 128 } __packed; 129 130 #define INTERRUPT_REGISTER_ACCESSES 15 131 struct sd_offloaded_interrupt { 132 u8 header_size; 133 u8 header_type; 134 u8 port_number; 135 struct offload_registers_access reg[INTERRUPT_REGISTER_ACCESSES]; 136 } __packed; 137 138 struct sd_register_header { 139 u8 header_size; 140 u8 header_type; 141 u8 port_number; 142 u8 command_type; 143 u8 command_index; 144 u8 command_response[6]; 145 } __packed; 146 147 #define PIGGYBACK_REGISTER_ACCESSES 14 148 struct sd_offloaded_piggyback { 149 struct sd_register_header sdio; 150 struct offload_registers_access reg[PIGGYBACK_REGISTER_ACCESSES]; 151 } __packed; 152 153 union sd_response { 154 struct sd_common_header common; 155 struct sd_status_header status; 156 struct sd_error_header error; 157 struct sd_interrupt_header interrupt; 158 struct sd_response_header response; 159 struct sd_offloaded_interrupt irq; 160 struct sd_offloaded_piggyback pig; 161 } __packed; 162 163 union sd_command { 164 struct sd_command_header head; 165 struct sd_irqpoll_header poll; 166 } __packed; 167 168 enum SD_RESPONSE_TYPE { 169 SDRT_UNSPECIFIED = 0, 170 SDRT_NONE, 171 SDRT_1, 172 SDRT_1B, 173 SDRT_2, 174 SDRT_3, 175 SDRT_4, 176 SDRT_5, 177 SDRT_5B, 178 SDRT_6, 179 SDRT_7, 180 }; 181 182 #define RESPONSE_INTERRUPT 0x01 183 #define RESPONSE_ERROR 0x02 184 #define RESPONSE_STATUS 0x03 185 #define RESPONSE_IRQ_DISABLED 0x05 186 #define RESPONSE_IRQ_ENABLED 0x06 187 #define RESPONSE_PIGGYBACKED 0x07 188 #define RESPONSE_NO_INTERRUPT 0x08 189 #define RESPONSE_PIG_DISABLED 0x09 190 #define RESPONSE_PIG_ENABLED 0x0A 191 #define SD_ERROR_1BIT_TIMEOUT 0x01 192 #define SD_ERROR_4BIT_TIMEOUT 0x02 193 #define SD_ERROR_1BIT_CRC_WRONG 0x03 194 #define SD_ERROR_4BIT_CRC_WRONG 0x04 195 #define SD_ERROR_1BIT_CRC_ERROR 0x05 196 #define SD_ERROR_4BIT_CRC_ERROR 0x06 197 #define SD_ERROR_NO_CMD_ENDBIT 0x07 198 #define SD_ERROR_NO_1BIT_DATEND 0x08 199 #define SD_ERROR_NO_4BIT_DATEND 0x09 200 #define SD_ERROR_1BIT_UNEXPECTED_TIMEOUT 0x0A 201 #define SD_ERROR_4BIT_UNEXPECTED_TIMEOUT 0x0B 202 #define SD_ERROR_ILLEGAL_COMMAND 0x0C 203 #define SD_ERROR_NO_DEVICE 0x0D 204 #define SD_ERROR_TRANSFER_LENGTH 0x0E 205 #define SD_ERROR_1BIT_DATA_TIMEOUT 0x0F 206 #define SD_ERROR_4BIT_DATA_TIMEOUT 0x10 207 #define SD_ERROR_ILLEGAL_STATE 0x11 208 #define SD_ERROR_UNKNOWN_ERROR 0x12 209 #define SD_ERROR_RESERVED_ERROR 0x13 210 #define SD_ERROR_INVALID_FUNCTION 0x14 211 #define SD_ERROR_OUT_OF_RANGE 0x15 212 #define SD_ERROR_STAT_CMD 0x16 213 #define SD_ERROR_STAT_DATA 0x17 214 #define SD_ERROR_STAT_CMD_TIMEOUT 0x18 215 #define SD_ERROR_SDCRDY_STUCK 0x19 216 #define SD_ERROR_UNHANDLED 0x1A 217 #define SD_ERROR_OVERRUN 0x1B 218 #define SD_ERROR_PIO_TIMEOUT 0x1C 219 220 #define FUN(c) (0x000007 & (c->arg>>28)) 221 #define REG(c) (0x01FFFF & (c->arg>>9)) 222 223 static bool limit_speed_to_24_MHz; 224 module_param(limit_speed_to_24_MHz, bool, 0644); 225 MODULE_PARM_DESC(limit_speed_to_24_MHz, "Limit Max SDIO Clock Speed to 24 MHz"); 226 227 static bool pad_input_to_usb_pkt; 228 module_param(pad_input_to_usb_pkt, bool, 0644); 229 MODULE_PARM_DESC(pad_input_to_usb_pkt, 230 "Pad USB data input transfers to whole USB Packet"); 231 232 static bool disable_offload_processing; 233 module_param(disable_offload_processing, bool, 0644); 234 MODULE_PARM_DESC(disable_offload_processing, "Disable Offload Processing"); 235 236 static bool force_1_bit_data_xfers; 237 module_param(force_1_bit_data_xfers, bool, 0644); 238 MODULE_PARM_DESC(force_1_bit_data_xfers, 239 "Force SDIO Data Transfers to 1-bit Mode"); 240 241 static bool force_polling_for_irqs; 242 module_param(force_polling_for_irqs, bool, 0644); 243 MODULE_PARM_DESC(force_polling_for_irqs, "Force Polling for SDIO interrupts"); 244 245 static int firmware_irqpoll_timeout = 1024; 246 module_param(firmware_irqpoll_timeout, int, 0644); 247 MODULE_PARM_DESC(firmware_irqpoll_timeout, "VUB300 firmware irqpoll timeout"); 248 249 static int force_max_req_size = 128; 250 module_param(force_max_req_size, int, 0644); 251 MODULE_PARM_DESC(force_max_req_size, "set max request size in kBytes"); 252 253 #ifdef SMSC_DEVELOPMENT_BOARD 254 static int firmware_rom_wait_states = 0x04; 255 #else 256 static int firmware_rom_wait_states = 0x1C; 257 #endif 258 259 module_param(firmware_rom_wait_states, int, 0644); 260 MODULE_PARM_DESC(firmware_rom_wait_states, 261 "ROM wait states byte=RRRIIEEE (Reserved Internal External)"); 262 263 #define ELAN_VENDOR_ID 0x2201 264 #define VUB300_VENDOR_ID 0x0424 265 #define VUB300_PRODUCT_ID 0x012C 266 static const struct usb_device_id vub300_table[] = { 267 {USB_DEVICE(ELAN_VENDOR_ID, VUB300_PRODUCT_ID)}, 268 {USB_DEVICE(VUB300_VENDOR_ID, VUB300_PRODUCT_ID)}, 269 {} /* Terminating entry */ 270 }; 271 MODULE_DEVICE_TABLE(usb, vub300_table); 272 273 static struct workqueue_struct *cmndworkqueue; 274 static struct workqueue_struct *pollworkqueue; 275 static struct workqueue_struct *deadworkqueue; 276 interface_to_InterfaceNumber(struct usb_interface * interface)277 static inline int interface_to_InterfaceNumber(struct usb_interface *interface) 278 { 279 if (!interface) 280 return -1; 281 if (!interface->cur_altsetting) 282 return -1; 283 return interface->cur_altsetting->desc.bInterfaceNumber; 284 } 285 286 struct sdio_register { 287 unsigned func_num:3; 288 unsigned sdio_reg:17; 289 unsigned activate:1; 290 unsigned prepared:1; 291 unsigned regvalue:8; 292 unsigned response:8; 293 unsigned sparebit:26; 294 }; 295 296 struct vub300_mmc_host { 297 struct usb_device *udev; 298 struct usb_interface *interface; 299 struct kref kref; 300 struct mutex cmd_mutex; 301 struct mutex irq_mutex; 302 char vub_name[3 + (9 * 8) + 4 + 1]; /* max of 7 sdio fn's */ 303 u8 cmnd_out_ep; /* EndPoint for commands */ 304 u8 cmnd_res_ep; /* EndPoint for responses */ 305 u8 data_out_ep; /* EndPoint for out data */ 306 u8 data_inp_ep; /* EndPoint for inp data */ 307 bool card_powered; 308 bool card_present; 309 bool read_only; 310 bool large_usb_packets; 311 bool app_spec; /* ApplicationSpecific */ 312 bool irq_enabled; /* by the MMC CORE */ 313 bool irq_disabled; /* in the firmware */ 314 unsigned bus_width:4; 315 u8 total_offload_count; 316 u8 dynamic_register_count; 317 u8 resp_len; 318 u32 datasize; 319 int errors; 320 int usb_transport_fail; 321 int usb_timed_out; 322 int irqs_queued; 323 struct sdio_register sdio_register[16]; 324 struct offload_interrupt_function_register { 325 #define MAXREGBITS 4 326 #define MAXREGS (1<<MAXREGBITS) 327 #define MAXREGMASK (MAXREGS-1) 328 u8 offload_count; 329 u32 offload_point; 330 struct offload_registers_access reg[MAXREGS]; 331 } fn[8]; 332 u16 fbs[8]; /* Function Block Size */ 333 struct mmc_command *cmd; 334 struct mmc_request *req; 335 struct mmc_data *data; 336 struct mmc_host *mmc; 337 struct urb *urb; 338 struct urb *command_out_urb; 339 struct urb *command_res_urb; 340 struct completion command_complete; 341 struct completion irqpoll_complete; 342 union sd_command cmnd; 343 union sd_response resp; 344 struct timer_list sg_transfer_timer; 345 struct usb_sg_request sg_request; 346 struct timer_list inactivity_timer; 347 struct work_struct deadwork; 348 struct work_struct cmndwork; 349 struct delayed_work pollwork; 350 struct host_controller_info hc_info; 351 struct sd_status_header system_port_status; 352 u8 padded_buffer[64]; 353 }; 354 355 #define kref_to_vub300_mmc_host(d) container_of(d, struct vub300_mmc_host, kref) 356 #define SET_TRANSFER_PSEUDOCODE 21 357 #define SET_INTERRUPT_PSEUDOCODE 20 358 #define SET_FAILURE_MODE 18 359 #define SET_ROM_WAIT_STATES 16 360 #define SET_IRQ_ENABLE 13 361 #define SET_CLOCK_SPEED 11 362 #define SET_FUNCTION_BLOCK_SIZE 9 363 #define SET_SD_DATA_MODE 6 364 #define SET_SD_POWER 4 365 #define ENTER_DFU_MODE 3 366 #define GET_HC_INF0 1 367 #define GET_SYSTEM_PORT_STATUS 0 368 vub300_delete(struct kref * kref)369 static void vub300_delete(struct kref *kref) 370 { /* kref callback - softirq */ 371 struct vub300_mmc_host *vub300 = kref_to_vub300_mmc_host(kref); 372 struct mmc_host *mmc = vub300->mmc; 373 usb_free_urb(vub300->command_out_urb); 374 vub300->command_out_urb = NULL; 375 usb_free_urb(vub300->command_res_urb); 376 vub300->command_res_urb = NULL; 377 usb_put_dev(vub300->udev); 378 mmc_free_host(mmc); 379 /* 380 * and hence also frees vub300 381 * which is contained at the end of struct mmc 382 */ 383 } 384 vub300_queue_cmnd_work(struct vub300_mmc_host * vub300)385 static void vub300_queue_cmnd_work(struct vub300_mmc_host *vub300) 386 { 387 kref_get(&vub300->kref); 388 if (queue_work(cmndworkqueue, &vub300->cmndwork)) { 389 /* 390 * then the cmndworkqueue was not previously 391 * running and the above get ref is obvious 392 * required and will be put when the thread 393 * terminates by a specific call 394 */ 395 } else { 396 /* 397 * the cmndworkqueue was already running from 398 * a previous invocation and thus to keep the 399 * kref counts correct we must undo the get 400 */ 401 kref_put(&vub300->kref, vub300_delete); 402 } 403 } 404 vub300_queue_poll_work(struct vub300_mmc_host * vub300,int delay)405 static void vub300_queue_poll_work(struct vub300_mmc_host *vub300, int delay) 406 { 407 kref_get(&vub300->kref); 408 if (queue_delayed_work(pollworkqueue, &vub300->pollwork, delay)) { 409 /* 410 * then the pollworkqueue was not previously 411 * running and the above get ref is obvious 412 * required and will be put when the thread 413 * terminates by a specific call 414 */ 415 } else { 416 /* 417 * the pollworkqueue was already running from 418 * a previous invocation and thus to keep the 419 * kref counts correct we must undo the get 420 */ 421 kref_put(&vub300->kref, vub300_delete); 422 } 423 } 424 vub300_queue_dead_work(struct vub300_mmc_host * vub300)425 static void vub300_queue_dead_work(struct vub300_mmc_host *vub300) 426 { 427 kref_get(&vub300->kref); 428 if (queue_work(deadworkqueue, &vub300->deadwork)) { 429 /* 430 * then the deadworkqueue was not previously 431 * running and the above get ref is obvious 432 * required and will be put when the thread 433 * terminates by a specific call 434 */ 435 } else { 436 /* 437 * the deadworkqueue was already running from 438 * a previous invocation and thus to keep the 439 * kref counts correct we must undo the get 440 */ 441 kref_put(&vub300->kref, vub300_delete); 442 } 443 } 444 irqpoll_res_completed(struct urb * urb)445 static void irqpoll_res_completed(struct urb *urb) 446 { /* urb completion handler - hardirq */ 447 struct vub300_mmc_host *vub300 = (struct vub300_mmc_host *)urb->context; 448 if (urb->status) 449 vub300->usb_transport_fail = urb->status; 450 complete(&vub300->irqpoll_complete); 451 } 452 irqpoll_out_completed(struct urb * urb)453 static void irqpoll_out_completed(struct urb *urb) 454 { /* urb completion handler - hardirq */ 455 struct vub300_mmc_host *vub300 = (struct vub300_mmc_host *)urb->context; 456 if (urb->status) { 457 vub300->usb_transport_fail = urb->status; 458 complete(&vub300->irqpoll_complete); 459 return; 460 } else { 461 int ret; 462 unsigned int pipe = 463 usb_rcvbulkpipe(vub300->udev, vub300->cmnd_res_ep); 464 usb_fill_bulk_urb(vub300->command_res_urb, vub300->udev, pipe, 465 &vub300->resp, sizeof(vub300->resp), 466 irqpoll_res_completed, vub300); 467 vub300->command_res_urb->actual_length = 0; 468 ret = usb_submit_urb(vub300->command_res_urb, GFP_ATOMIC); 469 if (ret) { 470 vub300->usb_transport_fail = ret; 471 complete(&vub300->irqpoll_complete); 472 } 473 return; 474 } 475 } 476 send_irqpoll(struct vub300_mmc_host * vub300)477 static void send_irqpoll(struct vub300_mmc_host *vub300) 478 { 479 /* cmd_mutex is held by vub300_pollwork_thread */ 480 int retval; 481 int timeout = 0xFFFF & (0x0001FFFF - firmware_irqpoll_timeout); 482 vub300->cmnd.poll.header_size = 22; 483 vub300->cmnd.poll.header_type = 1; 484 vub300->cmnd.poll.port_number = 0; 485 vub300->cmnd.poll.command_type = 2; 486 vub300->cmnd.poll.poll_timeout_lsb = 0xFF & (unsigned)timeout; 487 vub300->cmnd.poll.poll_timeout_msb = 0xFF & (unsigned)(timeout >> 8); 488 usb_fill_bulk_urb(vub300->command_out_urb, vub300->udev, 489 usb_sndbulkpipe(vub300->udev, vub300->cmnd_out_ep) 490 , &vub300->cmnd, sizeof(vub300->cmnd) 491 , irqpoll_out_completed, vub300); 492 retval = usb_submit_urb(vub300->command_out_urb, GFP_KERNEL); 493 if (0 > retval) { 494 vub300->usb_transport_fail = retval; 495 vub300_queue_poll_work(vub300, 1); 496 complete(&vub300->irqpoll_complete); 497 return; 498 } else { 499 return; 500 } 501 } 502 new_system_port_status(struct vub300_mmc_host * vub300)503 static void new_system_port_status(struct vub300_mmc_host *vub300) 504 { 505 int old_card_present = vub300->card_present; 506 int new_card_present = 507 (0x0001 & vub300->system_port_status.port_flags) ? 1 : 0; 508 vub300->read_only = 509 (0x0010 & vub300->system_port_status.port_flags) ? 1 : 0; 510 if (new_card_present && !old_card_present) { 511 dev_info(&vub300->udev->dev, "card just inserted\n"); 512 vub300->card_present = 1; 513 vub300->bus_width = 0; 514 if (disable_offload_processing) 515 strncpy(vub300->vub_name, "EMPTY Processing Disabled", 516 sizeof(vub300->vub_name)); 517 else 518 vub300->vub_name[0] = 0; 519 mmc_detect_change(vub300->mmc, 1); 520 } else if (!new_card_present && old_card_present) { 521 dev_info(&vub300->udev->dev, "card just ejected\n"); 522 vub300->card_present = 0; 523 mmc_detect_change(vub300->mmc, 0); 524 } else { 525 /* no change */ 526 } 527 } 528 __add_offloaded_reg_to_fifo(struct vub300_mmc_host * vub300,struct offload_registers_access * register_access,u8 func)529 static void __add_offloaded_reg_to_fifo(struct vub300_mmc_host *vub300, 530 struct offload_registers_access 531 *register_access, u8 func) 532 { 533 u8 r = vub300->fn[func].offload_point + vub300->fn[func].offload_count; 534 memcpy(&vub300->fn[func].reg[MAXREGMASK & r], register_access, 535 sizeof(struct offload_registers_access)); 536 vub300->fn[func].offload_count += 1; 537 vub300->total_offload_count += 1; 538 } 539 add_offloaded_reg(struct vub300_mmc_host * vub300,struct offload_registers_access * register_access)540 static void add_offloaded_reg(struct vub300_mmc_host *vub300, 541 struct offload_registers_access *register_access) 542 { 543 u32 Register = ((0x03 & register_access->command_byte[0]) << 15) 544 | ((0xFF & register_access->command_byte[1]) << 7) 545 | ((0xFE & register_access->command_byte[2]) >> 1); 546 u8 func = ((0x70 & register_access->command_byte[0]) >> 4); 547 u8 regs = vub300->dynamic_register_count; 548 u8 i = 0; 549 while (0 < regs-- && 1 == vub300->sdio_register[i].activate) { 550 if (vub300->sdio_register[i].func_num == func && 551 vub300->sdio_register[i].sdio_reg == Register) { 552 if (vub300->sdio_register[i].prepared == 0) 553 vub300->sdio_register[i].prepared = 1; 554 vub300->sdio_register[i].response = 555 register_access->Respond_Byte[2]; 556 vub300->sdio_register[i].regvalue = 557 register_access->Respond_Byte[3]; 558 return; 559 } else { 560 i += 1; 561 continue; 562 } 563 } 564 __add_offloaded_reg_to_fifo(vub300, register_access, func); 565 } 566 check_vub300_port_status(struct vub300_mmc_host * vub300)567 static void check_vub300_port_status(struct vub300_mmc_host *vub300) 568 { 569 /* 570 * cmd_mutex is held by vub300_pollwork_thread, 571 * vub300_deadwork_thread or vub300_cmndwork_thread 572 */ 573 int retval; 574 retval = 575 usb_control_msg(vub300->udev, usb_rcvctrlpipe(vub300->udev, 0), 576 GET_SYSTEM_PORT_STATUS, 577 USB_DIR_IN | USB_TYPE_VENDOR | USB_RECIP_DEVICE, 578 0x0000, 0x0000, &vub300->system_port_status, 579 sizeof(vub300->system_port_status), 1000); 580 if (sizeof(vub300->system_port_status) == retval) 581 new_system_port_status(vub300); 582 } 583 __vub300_irqpoll_response(struct vub300_mmc_host * vub300)584 static void __vub300_irqpoll_response(struct vub300_mmc_host *vub300) 585 { 586 /* cmd_mutex is held by vub300_pollwork_thread */ 587 if (vub300->command_res_urb->actual_length == 0) 588 return; 589 590 switch (vub300->resp.common.header_type) { 591 case RESPONSE_INTERRUPT: 592 mutex_lock(&vub300->irq_mutex); 593 if (vub300->irq_enabled) 594 mmc_signal_sdio_irq(vub300->mmc); 595 else 596 vub300->irqs_queued += 1; 597 vub300->irq_disabled = 1; 598 mutex_unlock(&vub300->irq_mutex); 599 break; 600 case RESPONSE_ERROR: 601 if (vub300->resp.error.error_code == SD_ERROR_NO_DEVICE) 602 check_vub300_port_status(vub300); 603 break; 604 case RESPONSE_STATUS: 605 vub300->system_port_status = vub300->resp.status; 606 new_system_port_status(vub300); 607 if (!vub300->card_present) 608 vub300_queue_poll_work(vub300, HZ / 5); 609 break; 610 case RESPONSE_IRQ_DISABLED: 611 { 612 int offloaded_data_length = vub300->resp.common.header_size - 3; 613 int register_count = offloaded_data_length >> 3; 614 int ri = 0; 615 while (register_count--) { 616 add_offloaded_reg(vub300, &vub300->resp.irq.reg[ri]); 617 ri += 1; 618 } 619 mutex_lock(&vub300->irq_mutex); 620 if (vub300->irq_enabled) 621 mmc_signal_sdio_irq(vub300->mmc); 622 else 623 vub300->irqs_queued += 1; 624 vub300->irq_disabled = 1; 625 mutex_unlock(&vub300->irq_mutex); 626 break; 627 } 628 case RESPONSE_IRQ_ENABLED: 629 { 630 int offloaded_data_length = vub300->resp.common.header_size - 3; 631 int register_count = offloaded_data_length >> 3; 632 int ri = 0; 633 while (register_count--) { 634 add_offloaded_reg(vub300, &vub300->resp.irq.reg[ri]); 635 ri += 1; 636 } 637 mutex_lock(&vub300->irq_mutex); 638 if (vub300->irq_enabled) 639 mmc_signal_sdio_irq(vub300->mmc); 640 else 641 vub300->irqs_queued += 1; 642 vub300->irq_disabled = 0; 643 mutex_unlock(&vub300->irq_mutex); 644 break; 645 } 646 case RESPONSE_NO_INTERRUPT: 647 vub300_queue_poll_work(vub300, 1); 648 break; 649 default: 650 break; 651 } 652 } 653 __do_poll(struct vub300_mmc_host * vub300)654 static void __do_poll(struct vub300_mmc_host *vub300) 655 { 656 /* cmd_mutex is held by vub300_pollwork_thread */ 657 unsigned long commretval; 658 mod_timer(&vub300->inactivity_timer, jiffies + HZ); 659 init_completion(&vub300->irqpoll_complete); 660 send_irqpoll(vub300); 661 commretval = wait_for_completion_timeout(&vub300->irqpoll_complete, 662 msecs_to_jiffies(500)); 663 if (vub300->usb_transport_fail) { 664 /* no need to do anything */ 665 } else if (commretval == 0) { 666 vub300->usb_timed_out = 1; 667 usb_kill_urb(vub300->command_out_urb); 668 usb_kill_urb(vub300->command_res_urb); 669 } else { /* commretval > 0 */ 670 __vub300_irqpoll_response(vub300); 671 } 672 } 673 674 /* this thread runs only when the driver 675 * is trying to poll the device for an IRQ 676 */ vub300_pollwork_thread(struct work_struct * work)677 static void vub300_pollwork_thread(struct work_struct *work) 678 { /* NOT irq */ 679 struct vub300_mmc_host *vub300 = container_of(work, 680 struct vub300_mmc_host, pollwork.work); 681 if (!vub300->interface) { 682 kref_put(&vub300->kref, vub300_delete); 683 return; 684 } 685 mutex_lock(&vub300->cmd_mutex); 686 if (vub300->cmd) { 687 vub300_queue_poll_work(vub300, 1); 688 } else if (!vub300->card_present) { 689 /* no need to do anything */ 690 } else { /* vub300->card_present */ 691 mutex_lock(&vub300->irq_mutex); 692 if (!vub300->irq_enabled) { 693 mutex_unlock(&vub300->irq_mutex); 694 } else if (vub300->irqs_queued) { 695 vub300->irqs_queued -= 1; 696 mmc_signal_sdio_irq(vub300->mmc); 697 mod_timer(&vub300->inactivity_timer, jiffies + HZ); 698 mutex_unlock(&vub300->irq_mutex); 699 } else { /* NOT vub300->irqs_queued */ 700 mutex_unlock(&vub300->irq_mutex); 701 __do_poll(vub300); 702 } 703 } 704 mutex_unlock(&vub300->cmd_mutex); 705 kref_put(&vub300->kref, vub300_delete); 706 } 707 vub300_deadwork_thread(struct work_struct * work)708 static void vub300_deadwork_thread(struct work_struct *work) 709 { /* NOT irq */ 710 struct vub300_mmc_host *vub300 = 711 container_of(work, struct vub300_mmc_host, deadwork); 712 if (!vub300->interface) { 713 kref_put(&vub300->kref, vub300_delete); 714 return; 715 } 716 mutex_lock(&vub300->cmd_mutex); 717 if (vub300->cmd) { 718 /* 719 * a command got in as the inactivity 720 * timer expired - so we just let the 721 * processing of the command show if 722 * the device is dead 723 */ 724 } else if (vub300->card_present) { 725 check_vub300_port_status(vub300); 726 } else if (vub300->mmc && vub300->mmc->card) { 727 /* 728 * the MMC core must not have responded 729 * to the previous indication - lets 730 * hope that it eventually does so we 731 * will just ignore this for now 732 */ 733 } else { 734 check_vub300_port_status(vub300); 735 } 736 mod_timer(&vub300->inactivity_timer, jiffies + HZ); 737 mutex_unlock(&vub300->cmd_mutex); 738 kref_put(&vub300->kref, vub300_delete); 739 } 740 vub300_inactivity_timer_expired(struct timer_list * t)741 static void vub300_inactivity_timer_expired(struct timer_list *t) 742 { /* softirq */ 743 struct vub300_mmc_host *vub300 = from_timer(vub300, t, 744 inactivity_timer); 745 if (!vub300->interface) { 746 kref_put(&vub300->kref, vub300_delete); 747 } else if (vub300->cmd) { 748 mod_timer(&vub300->inactivity_timer, jiffies + HZ); 749 } else { 750 vub300_queue_dead_work(vub300); 751 mod_timer(&vub300->inactivity_timer, jiffies + HZ); 752 } 753 } 754 vub300_response_error(u8 error_code)755 static int vub300_response_error(u8 error_code) 756 { 757 switch (error_code) { 758 case SD_ERROR_PIO_TIMEOUT: 759 case SD_ERROR_1BIT_TIMEOUT: 760 case SD_ERROR_4BIT_TIMEOUT: 761 return -ETIMEDOUT; 762 case SD_ERROR_STAT_DATA: 763 case SD_ERROR_OVERRUN: 764 case SD_ERROR_STAT_CMD: 765 case SD_ERROR_STAT_CMD_TIMEOUT: 766 case SD_ERROR_SDCRDY_STUCK: 767 case SD_ERROR_UNHANDLED: 768 case SD_ERROR_1BIT_CRC_WRONG: 769 case SD_ERROR_4BIT_CRC_WRONG: 770 case SD_ERROR_1BIT_CRC_ERROR: 771 case SD_ERROR_4BIT_CRC_ERROR: 772 case SD_ERROR_NO_CMD_ENDBIT: 773 case SD_ERROR_NO_1BIT_DATEND: 774 case SD_ERROR_NO_4BIT_DATEND: 775 case SD_ERROR_1BIT_DATA_TIMEOUT: 776 case SD_ERROR_4BIT_DATA_TIMEOUT: 777 case SD_ERROR_1BIT_UNEXPECTED_TIMEOUT: 778 case SD_ERROR_4BIT_UNEXPECTED_TIMEOUT: 779 return -EILSEQ; 780 case 33: 781 return -EILSEQ; 782 case SD_ERROR_ILLEGAL_COMMAND: 783 return -EINVAL; 784 case SD_ERROR_NO_DEVICE: 785 return -ENOMEDIUM; 786 default: 787 return -ENODEV; 788 } 789 } 790 command_res_completed(struct urb * urb)791 static void command_res_completed(struct urb *urb) 792 { /* urb completion handler - hardirq */ 793 struct vub300_mmc_host *vub300 = (struct vub300_mmc_host *)urb->context; 794 if (urb->status) { 795 /* we have to let the initiator handle the error */ 796 } else if (vub300->command_res_urb->actual_length == 0) { 797 /* 798 * we have seen this happen once or twice and 799 * we suspect a buggy USB host controller 800 */ 801 } else if (!vub300->data) { 802 /* this means that the command (typically CMD52) succeeded */ 803 } else if (vub300->resp.common.header_type != 0x02) { 804 /* 805 * this is an error response from the VUB300 chip 806 * and we let the initiator handle it 807 */ 808 } else if (vub300->urb) { 809 vub300->cmd->error = 810 vub300_response_error(vub300->resp.error.error_code); 811 usb_unlink_urb(vub300->urb); 812 } else { 813 vub300->cmd->error = 814 vub300_response_error(vub300->resp.error.error_code); 815 usb_sg_cancel(&vub300->sg_request); 816 } 817 complete(&vub300->command_complete); /* got_response_in */ 818 } 819 command_out_completed(struct urb * urb)820 static void command_out_completed(struct urb *urb) 821 { /* urb completion handler - hardirq */ 822 struct vub300_mmc_host *vub300 = (struct vub300_mmc_host *)urb->context; 823 if (urb->status) { 824 complete(&vub300->command_complete); 825 } else { 826 int ret; 827 unsigned int pipe = 828 usb_rcvbulkpipe(vub300->udev, vub300->cmnd_res_ep); 829 usb_fill_bulk_urb(vub300->command_res_urb, vub300->udev, pipe, 830 &vub300->resp, sizeof(vub300->resp), 831 command_res_completed, vub300); 832 vub300->command_res_urb->actual_length = 0; 833 ret = usb_submit_urb(vub300->command_res_urb, GFP_ATOMIC); 834 if (ret == 0) { 835 /* 836 * the urb completion handler will call 837 * our completion handler 838 */ 839 } else { 840 /* 841 * and thus we only call it directly 842 * when it will not be called 843 */ 844 complete(&vub300->command_complete); 845 } 846 } 847 } 848 849 /* 850 * the STUFF bits are masked out for the comparisons 851 */ snoop_block_size_and_bus_width(struct vub300_mmc_host * vub300,u32 cmd_arg)852 static void snoop_block_size_and_bus_width(struct vub300_mmc_host *vub300, 853 u32 cmd_arg) 854 { 855 if ((0xFBFFFE00 & cmd_arg) == 0x80022200) 856 vub300->fbs[1] = (cmd_arg << 8) | (0x00FF & vub300->fbs[1]); 857 else if ((0xFBFFFE00 & cmd_arg) == 0x80022000) 858 vub300->fbs[1] = (0xFF & cmd_arg) | (0xFF00 & vub300->fbs[1]); 859 else if ((0xFBFFFE00 & cmd_arg) == 0x80042200) 860 vub300->fbs[2] = (cmd_arg << 8) | (0x00FF & vub300->fbs[2]); 861 else if ((0xFBFFFE00 & cmd_arg) == 0x80042000) 862 vub300->fbs[2] = (0xFF & cmd_arg) | (0xFF00 & vub300->fbs[2]); 863 else if ((0xFBFFFE00 & cmd_arg) == 0x80062200) 864 vub300->fbs[3] = (cmd_arg << 8) | (0x00FF & vub300->fbs[3]); 865 else if ((0xFBFFFE00 & cmd_arg) == 0x80062000) 866 vub300->fbs[3] = (0xFF & cmd_arg) | (0xFF00 & vub300->fbs[3]); 867 else if ((0xFBFFFE00 & cmd_arg) == 0x80082200) 868 vub300->fbs[4] = (cmd_arg << 8) | (0x00FF & vub300->fbs[4]); 869 else if ((0xFBFFFE00 & cmd_arg) == 0x80082000) 870 vub300->fbs[4] = (0xFF & cmd_arg) | (0xFF00 & vub300->fbs[4]); 871 else if ((0xFBFFFE00 & cmd_arg) == 0x800A2200) 872 vub300->fbs[5] = (cmd_arg << 8) | (0x00FF & vub300->fbs[5]); 873 else if ((0xFBFFFE00 & cmd_arg) == 0x800A2000) 874 vub300->fbs[5] = (0xFF & cmd_arg) | (0xFF00 & vub300->fbs[5]); 875 else if ((0xFBFFFE00 & cmd_arg) == 0x800C2200) 876 vub300->fbs[6] = (cmd_arg << 8) | (0x00FF & vub300->fbs[6]); 877 else if ((0xFBFFFE00 & cmd_arg) == 0x800C2000) 878 vub300->fbs[6] = (0xFF & cmd_arg) | (0xFF00 & vub300->fbs[6]); 879 else if ((0xFBFFFE00 & cmd_arg) == 0x800E2200) 880 vub300->fbs[7] = (cmd_arg << 8) | (0x00FF & vub300->fbs[7]); 881 else if ((0xFBFFFE00 & cmd_arg) == 0x800E2000) 882 vub300->fbs[7] = (0xFF & cmd_arg) | (0xFF00 & vub300->fbs[7]); 883 else if ((0xFBFFFE03 & cmd_arg) == 0x80000E00) 884 vub300->bus_width = 1; 885 else if ((0xFBFFFE03 & cmd_arg) == 0x80000E02) 886 vub300->bus_width = 4; 887 } 888 send_command(struct vub300_mmc_host * vub300)889 static void send_command(struct vub300_mmc_host *vub300) 890 { 891 /* cmd_mutex is held by vub300_cmndwork_thread */ 892 struct mmc_command *cmd = vub300->cmd; 893 struct mmc_data *data = vub300->data; 894 int retval; 895 int i; 896 u8 response_type; 897 if (vub300->app_spec) { 898 switch (cmd->opcode) { 899 case 6: 900 response_type = SDRT_1; 901 vub300->resp_len = 6; 902 if (0x00000000 == (0x00000003 & cmd->arg)) 903 vub300->bus_width = 1; 904 else if (0x00000002 == (0x00000003 & cmd->arg)) 905 vub300->bus_width = 4; 906 else 907 dev_err(&vub300->udev->dev, 908 "unexpected ACMD6 bus_width=%d\n", 909 0x00000003 & cmd->arg); 910 break; 911 case 13: 912 response_type = SDRT_1; 913 vub300->resp_len = 6; 914 break; 915 case 22: 916 response_type = SDRT_1; 917 vub300->resp_len = 6; 918 break; 919 case 23: 920 response_type = SDRT_1; 921 vub300->resp_len = 6; 922 break; 923 case 41: 924 response_type = SDRT_3; 925 vub300->resp_len = 6; 926 break; 927 case 42: 928 response_type = SDRT_1; 929 vub300->resp_len = 6; 930 break; 931 case 51: 932 response_type = SDRT_1; 933 vub300->resp_len = 6; 934 break; 935 case 55: 936 response_type = SDRT_1; 937 vub300->resp_len = 6; 938 break; 939 default: 940 vub300->resp_len = 0; 941 cmd->error = -EINVAL; 942 complete(&vub300->command_complete); 943 return; 944 } 945 vub300->app_spec = 0; 946 } else { 947 switch (cmd->opcode) { 948 case 0: 949 response_type = SDRT_NONE; 950 vub300->resp_len = 0; 951 break; 952 case 1: 953 response_type = SDRT_3; 954 vub300->resp_len = 6; 955 break; 956 case 2: 957 response_type = SDRT_2; 958 vub300->resp_len = 17; 959 break; 960 case 3: 961 response_type = SDRT_6; 962 vub300->resp_len = 6; 963 break; 964 case 4: 965 response_type = SDRT_NONE; 966 vub300->resp_len = 0; 967 break; 968 case 5: 969 response_type = SDRT_4; 970 vub300->resp_len = 6; 971 break; 972 case 6: 973 response_type = SDRT_1; 974 vub300->resp_len = 6; 975 break; 976 case 7: 977 response_type = SDRT_1B; 978 vub300->resp_len = 6; 979 break; 980 case 8: 981 response_type = SDRT_7; 982 vub300->resp_len = 6; 983 break; 984 case 9: 985 response_type = SDRT_2; 986 vub300->resp_len = 17; 987 break; 988 case 10: 989 response_type = SDRT_2; 990 vub300->resp_len = 17; 991 break; 992 case 12: 993 response_type = SDRT_1B; 994 vub300->resp_len = 6; 995 break; 996 case 13: 997 response_type = SDRT_1; 998 vub300->resp_len = 6; 999 break; 1000 case 15: 1001 response_type = SDRT_NONE; 1002 vub300->resp_len = 0; 1003 break; 1004 case 16: 1005 for (i = 0; i < ARRAY_SIZE(vub300->fbs); i++) 1006 vub300->fbs[i] = 0xFFFF & cmd->arg; 1007 response_type = SDRT_1; 1008 vub300->resp_len = 6; 1009 break; 1010 case 17: 1011 case 18: 1012 case 24: 1013 case 25: 1014 case 27: 1015 response_type = SDRT_1; 1016 vub300->resp_len = 6; 1017 break; 1018 case 28: 1019 case 29: 1020 response_type = SDRT_1B; 1021 vub300->resp_len = 6; 1022 break; 1023 case 30: 1024 case 32: 1025 case 33: 1026 response_type = SDRT_1; 1027 vub300->resp_len = 6; 1028 break; 1029 case 38: 1030 response_type = SDRT_1B; 1031 vub300->resp_len = 6; 1032 break; 1033 case 42: 1034 response_type = SDRT_1; 1035 vub300->resp_len = 6; 1036 break; 1037 case 52: 1038 response_type = SDRT_5; 1039 vub300->resp_len = 6; 1040 snoop_block_size_and_bus_width(vub300, cmd->arg); 1041 break; 1042 case 53: 1043 response_type = SDRT_5; 1044 vub300->resp_len = 6; 1045 break; 1046 case 55: 1047 response_type = SDRT_1; 1048 vub300->resp_len = 6; 1049 vub300->app_spec = 1; 1050 break; 1051 case 56: 1052 response_type = SDRT_1; 1053 vub300->resp_len = 6; 1054 break; 1055 default: 1056 vub300->resp_len = 0; 1057 cmd->error = -EINVAL; 1058 complete(&vub300->command_complete); 1059 return; 1060 } 1061 } 1062 /* 1063 * it is a shame that we can not use "sizeof(struct sd_command_header)" 1064 * this is because the packet _must_ be padded to 64 bytes 1065 */ 1066 vub300->cmnd.head.header_size = 20; 1067 vub300->cmnd.head.header_type = 0x00; 1068 vub300->cmnd.head.port_number = 0; /* "0" means port 1 */ 1069 vub300->cmnd.head.command_type = 0x00; /* standard read command */ 1070 vub300->cmnd.head.response_type = response_type; 1071 vub300->cmnd.head.command_index = cmd->opcode; 1072 vub300->cmnd.head.arguments[0] = cmd->arg >> 24; 1073 vub300->cmnd.head.arguments[1] = cmd->arg >> 16; 1074 vub300->cmnd.head.arguments[2] = cmd->arg >> 8; 1075 vub300->cmnd.head.arguments[3] = cmd->arg >> 0; 1076 if (cmd->opcode == 52) { 1077 int fn = 0x7 & (cmd->arg >> 28); 1078 vub300->cmnd.head.block_count[0] = 0; 1079 vub300->cmnd.head.block_count[1] = 0; 1080 vub300->cmnd.head.block_size[0] = (vub300->fbs[fn] >> 8) & 0xFF; 1081 vub300->cmnd.head.block_size[1] = (vub300->fbs[fn] >> 0) & 0xFF; 1082 vub300->cmnd.head.command_type = 0x00; 1083 vub300->cmnd.head.transfer_size[0] = 0; 1084 vub300->cmnd.head.transfer_size[1] = 0; 1085 vub300->cmnd.head.transfer_size[2] = 0; 1086 vub300->cmnd.head.transfer_size[3] = 0; 1087 } else if (!data) { 1088 vub300->cmnd.head.block_count[0] = 0; 1089 vub300->cmnd.head.block_count[1] = 0; 1090 vub300->cmnd.head.block_size[0] = (vub300->fbs[0] >> 8) & 0xFF; 1091 vub300->cmnd.head.block_size[1] = (vub300->fbs[0] >> 0) & 0xFF; 1092 vub300->cmnd.head.command_type = 0x00; 1093 vub300->cmnd.head.transfer_size[0] = 0; 1094 vub300->cmnd.head.transfer_size[1] = 0; 1095 vub300->cmnd.head.transfer_size[2] = 0; 1096 vub300->cmnd.head.transfer_size[3] = 0; 1097 } else if (cmd->opcode == 53) { 1098 int fn = 0x7 & (cmd->arg >> 28); 1099 if (0x08 & vub300->cmnd.head.arguments[0]) { /* BLOCK MODE */ 1100 vub300->cmnd.head.block_count[0] = 1101 (data->blocks >> 8) & 0xFF; 1102 vub300->cmnd.head.block_count[1] = 1103 (data->blocks >> 0) & 0xFF; 1104 vub300->cmnd.head.block_size[0] = 1105 (data->blksz >> 8) & 0xFF; 1106 vub300->cmnd.head.block_size[1] = 1107 (data->blksz >> 0) & 0xFF; 1108 } else { /* BYTE MODE */ 1109 vub300->cmnd.head.block_count[0] = 0; 1110 vub300->cmnd.head.block_count[1] = 0; 1111 vub300->cmnd.head.block_size[0] = 1112 (vub300->datasize >> 8) & 0xFF; 1113 vub300->cmnd.head.block_size[1] = 1114 (vub300->datasize >> 0) & 0xFF; 1115 } 1116 vub300->cmnd.head.command_type = 1117 (MMC_DATA_READ & data->flags) ? 0x00 : 0x80; 1118 vub300->cmnd.head.transfer_size[0] = 1119 (vub300->datasize >> 24) & 0xFF; 1120 vub300->cmnd.head.transfer_size[1] = 1121 (vub300->datasize >> 16) & 0xFF; 1122 vub300->cmnd.head.transfer_size[2] = 1123 (vub300->datasize >> 8) & 0xFF; 1124 vub300->cmnd.head.transfer_size[3] = 1125 (vub300->datasize >> 0) & 0xFF; 1126 if (vub300->datasize < vub300->fbs[fn]) { 1127 vub300->cmnd.head.block_count[0] = 0; 1128 vub300->cmnd.head.block_count[1] = 0; 1129 } 1130 } else { 1131 vub300->cmnd.head.block_count[0] = (data->blocks >> 8) & 0xFF; 1132 vub300->cmnd.head.block_count[1] = (data->blocks >> 0) & 0xFF; 1133 vub300->cmnd.head.block_size[0] = (data->blksz >> 8) & 0xFF; 1134 vub300->cmnd.head.block_size[1] = (data->blksz >> 0) & 0xFF; 1135 vub300->cmnd.head.command_type = 1136 (MMC_DATA_READ & data->flags) ? 0x00 : 0x80; 1137 vub300->cmnd.head.transfer_size[0] = 1138 (vub300->datasize >> 24) & 0xFF; 1139 vub300->cmnd.head.transfer_size[1] = 1140 (vub300->datasize >> 16) & 0xFF; 1141 vub300->cmnd.head.transfer_size[2] = 1142 (vub300->datasize >> 8) & 0xFF; 1143 vub300->cmnd.head.transfer_size[3] = 1144 (vub300->datasize >> 0) & 0xFF; 1145 if (vub300->datasize < vub300->fbs[0]) { 1146 vub300->cmnd.head.block_count[0] = 0; 1147 vub300->cmnd.head.block_count[1] = 0; 1148 } 1149 } 1150 if (vub300->cmnd.head.block_size[0] || vub300->cmnd.head.block_size[1]) { 1151 u16 block_size = vub300->cmnd.head.block_size[1] | 1152 (vub300->cmnd.head.block_size[0] << 8); 1153 u16 block_boundary = FIRMWARE_BLOCK_BOUNDARY - 1154 (FIRMWARE_BLOCK_BOUNDARY % block_size); 1155 vub300->cmnd.head.block_boundary[0] = 1156 (block_boundary >> 8) & 0xFF; 1157 vub300->cmnd.head.block_boundary[1] = 1158 (block_boundary >> 0) & 0xFF; 1159 } else { 1160 vub300->cmnd.head.block_boundary[0] = 0; 1161 vub300->cmnd.head.block_boundary[1] = 0; 1162 } 1163 usb_fill_bulk_urb(vub300->command_out_urb, vub300->udev, 1164 usb_sndbulkpipe(vub300->udev, vub300->cmnd_out_ep), 1165 &vub300->cmnd, sizeof(vub300->cmnd), 1166 command_out_completed, vub300); 1167 retval = usb_submit_urb(vub300->command_out_urb, GFP_KERNEL); 1168 if (retval < 0) { 1169 cmd->error = retval; 1170 complete(&vub300->command_complete); 1171 return; 1172 } else { 1173 return; 1174 } 1175 } 1176 1177 /* 1178 * timer callback runs in atomic mode 1179 * so it cannot call usb_kill_urb() 1180 */ vub300_sg_timed_out(struct timer_list * t)1181 static void vub300_sg_timed_out(struct timer_list *t) 1182 { 1183 struct vub300_mmc_host *vub300 = from_timer(vub300, t, 1184 sg_transfer_timer); 1185 vub300->usb_timed_out = 1; 1186 usb_sg_cancel(&vub300->sg_request); 1187 usb_unlink_urb(vub300->command_out_urb); 1188 usb_unlink_urb(vub300->command_res_urb); 1189 } 1190 roundup_to_multiple_of_64(u16 number)1191 static u16 roundup_to_multiple_of_64(u16 number) 1192 { 1193 return 0xFFC0 & (0x3F + number); 1194 } 1195 1196 /* 1197 * this is a separate function to solve the 80 column width restriction 1198 */ __download_offload_pseudocode(struct vub300_mmc_host * vub300,const struct firmware * fw)1199 static void __download_offload_pseudocode(struct vub300_mmc_host *vub300, 1200 const struct firmware *fw) 1201 { 1202 u8 register_count = 0; 1203 u16 ts = 0; 1204 u16 interrupt_size = 0; 1205 const u8 *data = fw->data; 1206 int size = fw->size; 1207 u8 c; 1208 dev_info(&vub300->udev->dev, "using %s for SDIO offload processing\n", 1209 vub300->vub_name); 1210 do { 1211 c = *data++; 1212 } while (size-- && c); /* skip comment */ 1213 dev_info(&vub300->udev->dev, "using offload firmware %s %s\n", fw->data, 1214 vub300->vub_name); 1215 if (size < 4) { 1216 dev_err(&vub300->udev->dev, 1217 "corrupt offload pseudocode in firmware %s\n", 1218 vub300->vub_name); 1219 strncpy(vub300->vub_name, "corrupt offload pseudocode", 1220 sizeof(vub300->vub_name)); 1221 return; 1222 } 1223 interrupt_size += *data++; 1224 size -= 1; 1225 interrupt_size <<= 8; 1226 interrupt_size += *data++; 1227 size -= 1; 1228 if (interrupt_size < size) { 1229 u16 xfer_length = roundup_to_multiple_of_64(interrupt_size); 1230 u8 *xfer_buffer = kmalloc(xfer_length, GFP_KERNEL); 1231 if (xfer_buffer) { 1232 int retval; 1233 memcpy(xfer_buffer, data, interrupt_size); 1234 memset(xfer_buffer + interrupt_size, 0, 1235 xfer_length - interrupt_size); 1236 size -= interrupt_size; 1237 data += interrupt_size; 1238 retval = 1239 usb_control_msg(vub300->udev, 1240 usb_sndctrlpipe(vub300->udev, 0), 1241 SET_INTERRUPT_PSEUDOCODE, 1242 USB_DIR_OUT | USB_TYPE_VENDOR | 1243 USB_RECIP_DEVICE, 0x0000, 0x0000, 1244 xfer_buffer, xfer_length, 1000); 1245 kfree(xfer_buffer); 1246 if (retval < 0) 1247 goto copy_error_message; 1248 } else { 1249 dev_err(&vub300->udev->dev, 1250 "not enough memory for xfer buffer to send" 1251 " INTERRUPT_PSEUDOCODE for %s %s\n", fw->data, 1252 vub300->vub_name); 1253 strncpy(vub300->vub_name, 1254 "SDIO interrupt pseudocode download failed", 1255 sizeof(vub300->vub_name)); 1256 return; 1257 } 1258 } else { 1259 dev_err(&vub300->udev->dev, 1260 "corrupt interrupt pseudocode in firmware %s %s\n", 1261 fw->data, vub300->vub_name); 1262 strncpy(vub300->vub_name, "corrupt interrupt pseudocode", 1263 sizeof(vub300->vub_name)); 1264 return; 1265 } 1266 ts += *data++; 1267 size -= 1; 1268 ts <<= 8; 1269 ts += *data++; 1270 size -= 1; 1271 if (ts < size) { 1272 u16 xfer_length = roundup_to_multiple_of_64(ts); 1273 u8 *xfer_buffer = kmalloc(xfer_length, GFP_KERNEL); 1274 if (xfer_buffer) { 1275 int retval; 1276 memcpy(xfer_buffer, data, ts); 1277 memset(xfer_buffer + ts, 0, 1278 xfer_length - ts); 1279 size -= ts; 1280 data += ts; 1281 retval = 1282 usb_control_msg(vub300->udev, 1283 usb_sndctrlpipe(vub300->udev, 0), 1284 SET_TRANSFER_PSEUDOCODE, 1285 USB_DIR_OUT | USB_TYPE_VENDOR | 1286 USB_RECIP_DEVICE, 0x0000, 0x0000, 1287 xfer_buffer, xfer_length, 1000); 1288 kfree(xfer_buffer); 1289 if (retval < 0) 1290 goto copy_error_message; 1291 } else { 1292 dev_err(&vub300->udev->dev, 1293 "not enough memory for xfer buffer to send" 1294 " TRANSFER_PSEUDOCODE for %s %s\n", fw->data, 1295 vub300->vub_name); 1296 strncpy(vub300->vub_name, 1297 "SDIO transfer pseudocode download failed", 1298 sizeof(vub300->vub_name)); 1299 return; 1300 } 1301 } else { 1302 dev_err(&vub300->udev->dev, 1303 "corrupt transfer pseudocode in firmware %s %s\n", 1304 fw->data, vub300->vub_name); 1305 strncpy(vub300->vub_name, "corrupt transfer pseudocode", 1306 sizeof(vub300->vub_name)); 1307 return; 1308 } 1309 register_count += *data++; 1310 size -= 1; 1311 if (register_count * 4 == size) { 1312 int I = vub300->dynamic_register_count = register_count; 1313 int i = 0; 1314 while (I--) { 1315 unsigned int func_num = 0; 1316 vub300->sdio_register[i].func_num = *data++; 1317 size -= 1; 1318 func_num += *data++; 1319 size -= 1; 1320 func_num <<= 8; 1321 func_num += *data++; 1322 size -= 1; 1323 func_num <<= 8; 1324 func_num += *data++; 1325 size -= 1; 1326 vub300->sdio_register[i].sdio_reg = func_num; 1327 vub300->sdio_register[i].activate = 1; 1328 vub300->sdio_register[i].prepared = 0; 1329 i += 1; 1330 } 1331 dev_info(&vub300->udev->dev, 1332 "initialized %d dynamic pseudocode registers\n", 1333 vub300->dynamic_register_count); 1334 return; 1335 } else { 1336 dev_err(&vub300->udev->dev, 1337 "corrupt dynamic registers in firmware %s\n", 1338 vub300->vub_name); 1339 strncpy(vub300->vub_name, "corrupt dynamic registers", 1340 sizeof(vub300->vub_name)); 1341 return; 1342 } 1343 1344 copy_error_message: 1345 strncpy(vub300->vub_name, "SDIO pseudocode download failed", 1346 sizeof(vub300->vub_name)); 1347 } 1348 1349 /* 1350 * if the binary containing the EMPTY PseudoCode can not be found 1351 * vub300->vub_name is set anyway in order to prevent an automatic retry 1352 */ download_offload_pseudocode(struct vub300_mmc_host * vub300)1353 static void download_offload_pseudocode(struct vub300_mmc_host *vub300) 1354 { 1355 struct mmc_card *card = vub300->mmc->card; 1356 int sdio_funcs = card->sdio_funcs; 1357 const struct firmware *fw = NULL; 1358 int l = snprintf(vub300->vub_name, sizeof(vub300->vub_name), 1359 "vub_%04X%04X", card->cis.vendor, card->cis.device); 1360 int n = 0; 1361 int retval; 1362 for (n = 0; n < sdio_funcs; n++) { 1363 struct sdio_func *sf = card->sdio_func[n]; 1364 l += scnprintf(vub300->vub_name + l, 1365 sizeof(vub300->vub_name) - l, "_%04X%04X", 1366 sf->vendor, sf->device); 1367 } 1368 snprintf(vub300->vub_name + l, sizeof(vub300->vub_name) - l, ".bin"); 1369 dev_info(&vub300->udev->dev, "requesting offload firmware %s\n", 1370 vub300->vub_name); 1371 retval = request_firmware(&fw, vub300->vub_name, &card->dev); 1372 if (retval < 0) { 1373 strncpy(vub300->vub_name, "vub_default.bin", 1374 sizeof(vub300->vub_name)); 1375 retval = request_firmware(&fw, vub300->vub_name, &card->dev); 1376 if (retval < 0) { 1377 strncpy(vub300->vub_name, 1378 "no SDIO offload firmware found", 1379 sizeof(vub300->vub_name)); 1380 } else { 1381 __download_offload_pseudocode(vub300, fw); 1382 release_firmware(fw); 1383 } 1384 } else { 1385 __download_offload_pseudocode(vub300, fw); 1386 release_firmware(fw); 1387 } 1388 } 1389 vub300_usb_bulk_msg_completion(struct urb * urb)1390 static void vub300_usb_bulk_msg_completion(struct urb *urb) 1391 { /* urb completion handler - hardirq */ 1392 complete((struct completion *)urb->context); 1393 } 1394 vub300_usb_bulk_msg(struct vub300_mmc_host * vub300,unsigned int pipe,void * data,int len,int * actual_length,int timeout_msecs)1395 static int vub300_usb_bulk_msg(struct vub300_mmc_host *vub300, 1396 unsigned int pipe, void *data, int len, 1397 int *actual_length, int timeout_msecs) 1398 { 1399 /* cmd_mutex is held by vub300_cmndwork_thread */ 1400 struct usb_device *usb_dev = vub300->udev; 1401 struct completion done; 1402 int retval; 1403 vub300->urb = usb_alloc_urb(0, GFP_KERNEL); 1404 if (!vub300->urb) 1405 return -ENOMEM; 1406 usb_fill_bulk_urb(vub300->urb, usb_dev, pipe, data, len, 1407 vub300_usb_bulk_msg_completion, NULL); 1408 init_completion(&done); 1409 vub300->urb->context = &done; 1410 vub300->urb->actual_length = 0; 1411 retval = usb_submit_urb(vub300->urb, GFP_KERNEL); 1412 if (unlikely(retval)) 1413 goto out; 1414 if (!wait_for_completion_timeout 1415 (&done, msecs_to_jiffies(timeout_msecs))) { 1416 retval = -ETIMEDOUT; 1417 usb_kill_urb(vub300->urb); 1418 } else { 1419 retval = vub300->urb->status; 1420 } 1421 out: 1422 *actual_length = vub300->urb->actual_length; 1423 usb_free_urb(vub300->urb); 1424 vub300->urb = NULL; 1425 return retval; 1426 } 1427 __command_read_data(struct vub300_mmc_host * vub300,struct mmc_command * cmd,struct mmc_data * data)1428 static int __command_read_data(struct vub300_mmc_host *vub300, 1429 struct mmc_command *cmd, struct mmc_data *data) 1430 { 1431 /* cmd_mutex is held by vub300_cmndwork_thread */ 1432 int linear_length = vub300->datasize; 1433 int padded_length = vub300->large_usb_packets ? 1434 ((511 + linear_length) >> 9) << 9 : 1435 ((63 + linear_length) >> 6) << 6; 1436 if ((padded_length == linear_length) || !pad_input_to_usb_pkt) { 1437 int result; 1438 unsigned pipe; 1439 pipe = usb_rcvbulkpipe(vub300->udev, vub300->data_inp_ep); 1440 result = usb_sg_init(&vub300->sg_request, vub300->udev, 1441 pipe, 0, data->sg, 1442 data->sg_len, 0, GFP_KERNEL); 1443 if (result < 0) { 1444 usb_unlink_urb(vub300->command_out_urb); 1445 usb_unlink_urb(vub300->command_res_urb); 1446 cmd->error = result; 1447 data->bytes_xfered = 0; 1448 return 0; 1449 } else { 1450 vub300->sg_transfer_timer.expires = 1451 jiffies + msecs_to_jiffies(2000 + 1452 (linear_length / 16384)); 1453 add_timer(&vub300->sg_transfer_timer); 1454 usb_sg_wait(&vub300->sg_request); 1455 del_timer(&vub300->sg_transfer_timer); 1456 if (vub300->sg_request.status < 0) { 1457 cmd->error = vub300->sg_request.status; 1458 data->bytes_xfered = 0; 1459 return 0; 1460 } else { 1461 data->bytes_xfered = vub300->datasize; 1462 return linear_length; 1463 } 1464 } 1465 } else { 1466 u8 *buf = kmalloc(padded_length, GFP_KERNEL); 1467 if (buf) { 1468 int result; 1469 unsigned pipe = usb_rcvbulkpipe(vub300->udev, 1470 vub300->data_inp_ep); 1471 int actual_length = 0; 1472 result = vub300_usb_bulk_msg(vub300, pipe, buf, 1473 padded_length, &actual_length, 1474 2000 + (padded_length / 16384)); 1475 if (result < 0) { 1476 cmd->error = result; 1477 data->bytes_xfered = 0; 1478 kfree(buf); 1479 return 0; 1480 } else if (actual_length < linear_length) { 1481 cmd->error = -EREMOTEIO; 1482 data->bytes_xfered = 0; 1483 kfree(buf); 1484 return 0; 1485 } else { 1486 sg_copy_from_buffer(data->sg, data->sg_len, buf, 1487 linear_length); 1488 kfree(buf); 1489 data->bytes_xfered = vub300->datasize; 1490 return linear_length; 1491 } 1492 } else { 1493 cmd->error = -ENOMEM; 1494 data->bytes_xfered = 0; 1495 return 0; 1496 } 1497 } 1498 } 1499 __command_write_data(struct vub300_mmc_host * vub300,struct mmc_command * cmd,struct mmc_data * data)1500 static int __command_write_data(struct vub300_mmc_host *vub300, 1501 struct mmc_command *cmd, struct mmc_data *data) 1502 { 1503 /* cmd_mutex is held by vub300_cmndwork_thread */ 1504 unsigned pipe = usb_sndbulkpipe(vub300->udev, vub300->data_out_ep); 1505 int linear_length = vub300->datasize; 1506 int modulo_64_length = linear_length & 0x003F; 1507 int modulo_512_length = linear_length & 0x01FF; 1508 if (linear_length < 64) { 1509 int result; 1510 int actual_length; 1511 sg_copy_to_buffer(data->sg, data->sg_len, 1512 vub300->padded_buffer, 1513 sizeof(vub300->padded_buffer)); 1514 memset(vub300->padded_buffer + linear_length, 0, 1515 sizeof(vub300->padded_buffer) - linear_length); 1516 result = vub300_usb_bulk_msg(vub300, pipe, vub300->padded_buffer, 1517 sizeof(vub300->padded_buffer), 1518 &actual_length, 2000 + 1519 (sizeof(vub300->padded_buffer) / 1520 16384)); 1521 if (result < 0) { 1522 cmd->error = result; 1523 data->bytes_xfered = 0; 1524 } else { 1525 data->bytes_xfered = vub300->datasize; 1526 } 1527 } else if ((!vub300->large_usb_packets && (0 < modulo_64_length)) || 1528 (vub300->large_usb_packets && (64 > modulo_512_length)) 1529 ) { /* don't you just love these work-rounds */ 1530 int padded_length = ((63 + linear_length) >> 6) << 6; 1531 u8 *buf = kmalloc(padded_length, GFP_KERNEL); 1532 if (buf) { 1533 int result; 1534 int actual_length; 1535 sg_copy_to_buffer(data->sg, data->sg_len, buf, 1536 padded_length); 1537 memset(buf + linear_length, 0, 1538 padded_length - linear_length); 1539 result = 1540 vub300_usb_bulk_msg(vub300, pipe, buf, 1541 padded_length, &actual_length, 1542 2000 + padded_length / 16384); 1543 kfree(buf); 1544 if (result < 0) { 1545 cmd->error = result; 1546 data->bytes_xfered = 0; 1547 } else { 1548 data->bytes_xfered = vub300->datasize; 1549 } 1550 } else { 1551 cmd->error = -ENOMEM; 1552 data->bytes_xfered = 0; 1553 } 1554 } else { /* no data padding required */ 1555 int result; 1556 unsigned char buf[64 * 4]; 1557 sg_copy_to_buffer(data->sg, data->sg_len, buf, sizeof(buf)); 1558 result = usb_sg_init(&vub300->sg_request, vub300->udev, 1559 pipe, 0, data->sg, 1560 data->sg_len, 0, GFP_KERNEL); 1561 if (result < 0) { 1562 usb_unlink_urb(vub300->command_out_urb); 1563 usb_unlink_urb(vub300->command_res_urb); 1564 cmd->error = result; 1565 data->bytes_xfered = 0; 1566 } else { 1567 vub300->sg_transfer_timer.expires = 1568 jiffies + msecs_to_jiffies(2000 + 1569 linear_length / 16384); 1570 add_timer(&vub300->sg_transfer_timer); 1571 usb_sg_wait(&vub300->sg_request); 1572 if (cmd->error) { 1573 data->bytes_xfered = 0; 1574 } else { 1575 del_timer(&vub300->sg_transfer_timer); 1576 if (vub300->sg_request.status < 0) { 1577 cmd->error = vub300->sg_request.status; 1578 data->bytes_xfered = 0; 1579 } else { 1580 data->bytes_xfered = vub300->datasize; 1581 } 1582 } 1583 } 1584 } 1585 return linear_length; 1586 } 1587 __vub300_command_response(struct vub300_mmc_host * vub300,struct mmc_command * cmd,struct mmc_data * data,int data_length)1588 static void __vub300_command_response(struct vub300_mmc_host *vub300, 1589 struct mmc_command *cmd, 1590 struct mmc_data *data, int data_length) 1591 { 1592 /* cmd_mutex is held by vub300_cmndwork_thread */ 1593 long respretval; 1594 int msec_timeout = 1000 + data_length / 4; 1595 respretval = 1596 wait_for_completion_timeout(&vub300->command_complete, 1597 msecs_to_jiffies(msec_timeout)); 1598 if (respretval == 0) { /* TIMED OUT */ 1599 /* we don't know which of "out" and "res" if any failed */ 1600 int result; 1601 vub300->usb_timed_out = 1; 1602 usb_kill_urb(vub300->command_out_urb); 1603 usb_kill_urb(vub300->command_res_urb); 1604 cmd->error = -ETIMEDOUT; 1605 result = usb_lock_device_for_reset(vub300->udev, 1606 vub300->interface); 1607 if (result == 0) { 1608 result = usb_reset_device(vub300->udev); 1609 usb_unlock_device(vub300->udev); 1610 } 1611 } else if (respretval < 0) { 1612 /* we don't know which of "out" and "res" if any failed */ 1613 usb_kill_urb(vub300->command_out_urb); 1614 usb_kill_urb(vub300->command_res_urb); 1615 cmd->error = respretval; 1616 } else if (cmd->error) { 1617 /* 1618 * the error occurred sending the command 1619 * or receiving the response 1620 */ 1621 } else if (vub300->command_out_urb->status) { 1622 vub300->usb_transport_fail = vub300->command_out_urb->status; 1623 cmd->error = -EPROTO == vub300->command_out_urb->status ? 1624 -ESHUTDOWN : vub300->command_out_urb->status; 1625 } else if (vub300->command_res_urb->status) { 1626 vub300->usb_transport_fail = vub300->command_res_urb->status; 1627 cmd->error = -EPROTO == vub300->command_res_urb->status ? 1628 -ESHUTDOWN : vub300->command_res_urb->status; 1629 } else if (vub300->resp.common.header_type == 0x00) { 1630 /* 1631 * the command completed successfully 1632 * and there was no piggybacked data 1633 */ 1634 } else if (vub300->resp.common.header_type == RESPONSE_ERROR) { 1635 cmd->error = 1636 vub300_response_error(vub300->resp.error.error_code); 1637 if (vub300->data) 1638 usb_sg_cancel(&vub300->sg_request); 1639 } else if (vub300->resp.common.header_type == RESPONSE_PIGGYBACKED) { 1640 int offloaded_data_length = 1641 vub300->resp.common.header_size - 1642 sizeof(struct sd_register_header); 1643 int register_count = offloaded_data_length >> 3; 1644 int ri = 0; 1645 while (register_count--) { 1646 add_offloaded_reg(vub300, &vub300->resp.pig.reg[ri]); 1647 ri += 1; 1648 } 1649 vub300->resp.common.header_size = 1650 sizeof(struct sd_register_header); 1651 vub300->resp.common.header_type = 0x00; 1652 cmd->error = 0; 1653 } else if (vub300->resp.common.header_type == RESPONSE_PIG_DISABLED) { 1654 int offloaded_data_length = 1655 vub300->resp.common.header_size - 1656 sizeof(struct sd_register_header); 1657 int register_count = offloaded_data_length >> 3; 1658 int ri = 0; 1659 while (register_count--) { 1660 add_offloaded_reg(vub300, &vub300->resp.pig.reg[ri]); 1661 ri += 1; 1662 } 1663 mutex_lock(&vub300->irq_mutex); 1664 if (vub300->irqs_queued) { 1665 vub300->irqs_queued += 1; 1666 } else if (vub300->irq_enabled) { 1667 vub300->irqs_queued += 1; 1668 vub300_queue_poll_work(vub300, 0); 1669 } else { 1670 vub300->irqs_queued += 1; 1671 } 1672 vub300->irq_disabled = 1; 1673 mutex_unlock(&vub300->irq_mutex); 1674 vub300->resp.common.header_size = 1675 sizeof(struct sd_register_header); 1676 vub300->resp.common.header_type = 0x00; 1677 cmd->error = 0; 1678 } else if (vub300->resp.common.header_type == RESPONSE_PIG_ENABLED) { 1679 int offloaded_data_length = 1680 vub300->resp.common.header_size - 1681 sizeof(struct sd_register_header); 1682 int register_count = offloaded_data_length >> 3; 1683 int ri = 0; 1684 while (register_count--) { 1685 add_offloaded_reg(vub300, &vub300->resp.pig.reg[ri]); 1686 ri += 1; 1687 } 1688 mutex_lock(&vub300->irq_mutex); 1689 if (vub300->irqs_queued) { 1690 vub300->irqs_queued += 1; 1691 } else if (vub300->irq_enabled) { 1692 vub300->irqs_queued += 1; 1693 vub300_queue_poll_work(vub300, 0); 1694 } else { 1695 vub300->irqs_queued += 1; 1696 } 1697 vub300->irq_disabled = 0; 1698 mutex_unlock(&vub300->irq_mutex); 1699 vub300->resp.common.header_size = 1700 sizeof(struct sd_register_header); 1701 vub300->resp.common.header_type = 0x00; 1702 cmd->error = 0; 1703 } else { 1704 cmd->error = -EINVAL; 1705 } 1706 } 1707 construct_request_response(struct vub300_mmc_host * vub300,struct mmc_command * cmd)1708 static void construct_request_response(struct vub300_mmc_host *vub300, 1709 struct mmc_command *cmd) 1710 { 1711 int resp_len = vub300->resp_len; 1712 int less_cmd = (17 == resp_len) ? resp_len : resp_len - 1; 1713 int bytes = 3 & less_cmd; 1714 int words = less_cmd >> 2; 1715 u8 *r = vub300->resp.response.command_response; 1716 1717 if (!resp_len) 1718 return; 1719 if (bytes == 3) { 1720 cmd->resp[words] = (r[1 + (words << 2)] << 24) 1721 | (r[2 + (words << 2)] << 16) 1722 | (r[3 + (words << 2)] << 8); 1723 } else if (bytes == 2) { 1724 cmd->resp[words] = (r[1 + (words << 2)] << 24) 1725 | (r[2 + (words << 2)] << 16); 1726 } else if (bytes == 1) { 1727 cmd->resp[words] = (r[1 + (words << 2)] << 24); 1728 } 1729 while (words-- > 0) { 1730 cmd->resp[words] = (r[1 + (words << 2)] << 24) 1731 | (r[2 + (words << 2)] << 16) 1732 | (r[3 + (words << 2)] << 8) 1733 | (r[4 + (words << 2)] << 0); 1734 } 1735 if ((cmd->opcode == 53) && (0x000000FF & cmd->resp[0])) 1736 cmd->resp[0] &= 0xFFFFFF00; 1737 } 1738 1739 /* this thread runs only when there is an upper level command req outstanding */ vub300_cmndwork_thread(struct work_struct * work)1740 static void vub300_cmndwork_thread(struct work_struct *work) 1741 { 1742 struct vub300_mmc_host *vub300 = 1743 container_of(work, struct vub300_mmc_host, cmndwork); 1744 if (!vub300->interface) { 1745 kref_put(&vub300->kref, vub300_delete); 1746 return; 1747 } else { 1748 struct mmc_request *req = vub300->req; 1749 struct mmc_command *cmd = vub300->cmd; 1750 struct mmc_data *data = vub300->data; 1751 int data_length; 1752 mutex_lock(&vub300->cmd_mutex); 1753 init_completion(&vub300->command_complete); 1754 if (likely(vub300->vub_name[0]) || !vub300->mmc->card) { 1755 /* 1756 * the name of the EMPTY Pseudo firmware file 1757 * is used as a flag to indicate that the file 1758 * has been already downloaded to the VUB300 chip 1759 */ 1760 } else if (0 == vub300->mmc->card->sdio_funcs) { 1761 strncpy(vub300->vub_name, "SD memory device", 1762 sizeof(vub300->vub_name)); 1763 } else { 1764 download_offload_pseudocode(vub300); 1765 } 1766 send_command(vub300); 1767 if (!data) 1768 data_length = 0; 1769 else if (MMC_DATA_READ & data->flags) 1770 data_length = __command_read_data(vub300, cmd, data); 1771 else 1772 data_length = __command_write_data(vub300, cmd, data); 1773 __vub300_command_response(vub300, cmd, data, data_length); 1774 vub300->req = NULL; 1775 vub300->cmd = NULL; 1776 vub300->data = NULL; 1777 if (cmd->error) { 1778 if (cmd->error == -ENOMEDIUM) 1779 check_vub300_port_status(vub300); 1780 mutex_unlock(&vub300->cmd_mutex); 1781 mmc_request_done(vub300->mmc, req); 1782 kref_put(&vub300->kref, vub300_delete); 1783 return; 1784 } else { 1785 construct_request_response(vub300, cmd); 1786 vub300->resp_len = 0; 1787 mutex_unlock(&vub300->cmd_mutex); 1788 kref_put(&vub300->kref, vub300_delete); 1789 mmc_request_done(vub300->mmc, req); 1790 return; 1791 } 1792 } 1793 } 1794 examine_cyclic_buffer(struct vub300_mmc_host * vub300,struct mmc_command * cmd,u8 Function)1795 static int examine_cyclic_buffer(struct vub300_mmc_host *vub300, 1796 struct mmc_command *cmd, u8 Function) 1797 { 1798 /* cmd_mutex is held by vub300_mmc_request */ 1799 u8 cmd0 = 0xFF & (cmd->arg >> 24); 1800 u8 cmd1 = 0xFF & (cmd->arg >> 16); 1801 u8 cmd2 = 0xFF & (cmd->arg >> 8); 1802 u8 cmd3 = 0xFF & (cmd->arg >> 0); 1803 int first = MAXREGMASK & vub300->fn[Function].offload_point; 1804 struct offload_registers_access *rf = &vub300->fn[Function].reg[first]; 1805 if (cmd0 == rf->command_byte[0] && 1806 cmd1 == rf->command_byte[1] && 1807 cmd2 == rf->command_byte[2] && 1808 cmd3 == rf->command_byte[3]) { 1809 u8 checksum = 0x00; 1810 cmd->resp[1] = checksum << 24; 1811 cmd->resp[0] = (rf->Respond_Byte[0] << 24) 1812 | (rf->Respond_Byte[1] << 16) 1813 | (rf->Respond_Byte[2] << 8) 1814 | (rf->Respond_Byte[3] << 0); 1815 vub300->fn[Function].offload_point += 1; 1816 vub300->fn[Function].offload_count -= 1; 1817 vub300->total_offload_count -= 1; 1818 return 1; 1819 } else { 1820 int delta = 1; /* because it does not match the first one */ 1821 u8 register_count = vub300->fn[Function].offload_count - 1; 1822 u32 register_point = vub300->fn[Function].offload_point + 1; 1823 while (0 < register_count) { 1824 int point = MAXREGMASK & register_point; 1825 struct offload_registers_access *r = 1826 &vub300->fn[Function].reg[point]; 1827 if (cmd0 == r->command_byte[0] && 1828 cmd1 == r->command_byte[1] && 1829 cmd2 == r->command_byte[2] && 1830 cmd3 == r->command_byte[3]) { 1831 u8 checksum = 0x00; 1832 cmd->resp[1] = checksum << 24; 1833 cmd->resp[0] = (r->Respond_Byte[0] << 24) 1834 | (r->Respond_Byte[1] << 16) 1835 | (r->Respond_Byte[2] << 8) 1836 | (r->Respond_Byte[3] << 0); 1837 vub300->fn[Function].offload_point += delta; 1838 vub300->fn[Function].offload_count -= delta; 1839 vub300->total_offload_count -= delta; 1840 return 1; 1841 } else { 1842 register_point += 1; 1843 register_count -= 1; 1844 delta += 1; 1845 continue; 1846 } 1847 } 1848 return 0; 1849 } 1850 } 1851 satisfy_request_from_offloaded_data(struct vub300_mmc_host * vub300,struct mmc_command * cmd)1852 static int satisfy_request_from_offloaded_data(struct vub300_mmc_host *vub300, 1853 struct mmc_command *cmd) 1854 { 1855 /* cmd_mutex is held by vub300_mmc_request */ 1856 u8 regs = vub300->dynamic_register_count; 1857 u8 i = 0; 1858 u8 func = FUN(cmd); 1859 u32 reg = REG(cmd); 1860 while (0 < regs--) { 1861 if ((vub300->sdio_register[i].func_num == func) && 1862 (vub300->sdio_register[i].sdio_reg == reg)) { 1863 if (!vub300->sdio_register[i].prepared) { 1864 return 0; 1865 } else if ((0x80000000 & cmd->arg) == 0x80000000) { 1866 /* 1867 * a write to a dynamic register 1868 * nullifies our offloaded value 1869 */ 1870 vub300->sdio_register[i].prepared = 0; 1871 return 0; 1872 } else { 1873 u8 checksum = 0x00; 1874 u8 rsp0 = 0x00; 1875 u8 rsp1 = 0x00; 1876 u8 rsp2 = vub300->sdio_register[i].response; 1877 u8 rsp3 = vub300->sdio_register[i].regvalue; 1878 vub300->sdio_register[i].prepared = 0; 1879 cmd->resp[1] = checksum << 24; 1880 cmd->resp[0] = (rsp0 << 24) 1881 | (rsp1 << 16) 1882 | (rsp2 << 8) 1883 | (rsp3 << 0); 1884 return 1; 1885 } 1886 } else { 1887 i += 1; 1888 continue; 1889 } 1890 } 1891 if (vub300->total_offload_count == 0) 1892 return 0; 1893 else if (vub300->fn[func].offload_count == 0) 1894 return 0; 1895 else 1896 return examine_cyclic_buffer(vub300, cmd, func); 1897 } 1898 vub300_mmc_request(struct mmc_host * mmc,struct mmc_request * req)1899 static void vub300_mmc_request(struct mmc_host *mmc, struct mmc_request *req) 1900 { /* NOT irq */ 1901 struct mmc_command *cmd = req->cmd; 1902 struct vub300_mmc_host *vub300 = mmc_priv(mmc); 1903 if (!vub300->interface) { 1904 cmd->error = -ESHUTDOWN; 1905 mmc_request_done(mmc, req); 1906 return; 1907 } else { 1908 struct mmc_data *data = req->data; 1909 if (!vub300->card_powered) { 1910 cmd->error = -ENOMEDIUM; 1911 mmc_request_done(mmc, req); 1912 return; 1913 } 1914 if (!vub300->card_present) { 1915 cmd->error = -ENOMEDIUM; 1916 mmc_request_done(mmc, req); 1917 return; 1918 } 1919 if (vub300->usb_transport_fail) { 1920 cmd->error = vub300->usb_transport_fail; 1921 mmc_request_done(mmc, req); 1922 return; 1923 } 1924 if (!vub300->interface) { 1925 cmd->error = -ENODEV; 1926 mmc_request_done(mmc, req); 1927 return; 1928 } 1929 kref_get(&vub300->kref); 1930 mutex_lock(&vub300->cmd_mutex); 1931 mod_timer(&vub300->inactivity_timer, jiffies + HZ); 1932 /* 1933 * for performance we have to return immediately 1934 * if the requested data has been offloaded 1935 */ 1936 if (cmd->opcode == 52 && 1937 satisfy_request_from_offloaded_data(vub300, cmd)) { 1938 cmd->error = 0; 1939 mutex_unlock(&vub300->cmd_mutex); 1940 kref_put(&vub300->kref, vub300_delete); 1941 mmc_request_done(mmc, req); 1942 return; 1943 } else { 1944 vub300->cmd = cmd; 1945 vub300->req = req; 1946 vub300->data = data; 1947 if (data) 1948 vub300->datasize = data->blksz * data->blocks; 1949 else 1950 vub300->datasize = 0; 1951 vub300_queue_cmnd_work(vub300); 1952 mutex_unlock(&vub300->cmd_mutex); 1953 kref_put(&vub300->kref, vub300_delete); 1954 /* 1955 * the kernel lock diagnostics complain 1956 * if the cmd_mutex * is "passed on" 1957 * to the cmndwork thread, 1958 * so we must release it now 1959 * and re-acquire it in the cmndwork thread 1960 */ 1961 } 1962 } 1963 } 1964 __set_clock_speed(struct vub300_mmc_host * vub300,u8 buf[8],struct mmc_ios * ios)1965 static void __set_clock_speed(struct vub300_mmc_host *vub300, u8 buf[8], 1966 struct mmc_ios *ios) 1967 { 1968 int buf_array_size = 8; /* ARRAY_SIZE(buf) does not work !!! */ 1969 int retval; 1970 u32 kHzClock; 1971 if (ios->clock >= 48000000) 1972 kHzClock = 48000; 1973 else if (ios->clock >= 24000000) 1974 kHzClock = 24000; 1975 else if (ios->clock >= 20000000) 1976 kHzClock = 20000; 1977 else if (ios->clock >= 15000000) 1978 kHzClock = 15000; 1979 else if (ios->clock >= 200000) 1980 kHzClock = 200; 1981 else 1982 kHzClock = 0; 1983 { 1984 int i; 1985 u64 c = kHzClock; 1986 for (i = 0; i < buf_array_size; i++) { 1987 buf[i] = c; 1988 c >>= 8; 1989 } 1990 } 1991 retval = 1992 usb_control_msg(vub300->udev, usb_sndctrlpipe(vub300->udev, 0), 1993 SET_CLOCK_SPEED, 1994 USB_DIR_OUT | USB_TYPE_VENDOR | USB_RECIP_DEVICE, 1995 0x00, 0x00, buf, buf_array_size, 1000); 1996 if (retval != 8) { 1997 dev_err(&vub300->udev->dev, "SET_CLOCK_SPEED" 1998 " %dkHz failed with retval=%d\n", kHzClock, retval); 1999 } else { 2000 dev_dbg(&vub300->udev->dev, "SET_CLOCK_SPEED" 2001 " %dkHz\n", kHzClock); 2002 } 2003 } 2004 vub300_mmc_set_ios(struct mmc_host * mmc,struct mmc_ios * ios)2005 static void vub300_mmc_set_ios(struct mmc_host *mmc, struct mmc_ios *ios) 2006 { /* NOT irq */ 2007 struct vub300_mmc_host *vub300 = mmc_priv(mmc); 2008 if (!vub300->interface) 2009 return; 2010 kref_get(&vub300->kref); 2011 mutex_lock(&vub300->cmd_mutex); 2012 if ((ios->power_mode == MMC_POWER_OFF) && vub300->card_powered) { 2013 vub300->card_powered = 0; 2014 usb_control_msg(vub300->udev, usb_sndctrlpipe(vub300->udev, 0), 2015 SET_SD_POWER, 2016 USB_DIR_OUT | USB_TYPE_VENDOR | USB_RECIP_DEVICE, 2017 0x0000, 0x0000, NULL, 0, 1000); 2018 /* must wait for the VUB300 u-proc to boot up */ 2019 msleep(600); 2020 } else if ((ios->power_mode == MMC_POWER_UP) && !vub300->card_powered) { 2021 usb_control_msg(vub300->udev, usb_sndctrlpipe(vub300->udev, 0), 2022 SET_SD_POWER, 2023 USB_DIR_OUT | USB_TYPE_VENDOR | USB_RECIP_DEVICE, 2024 0x0001, 0x0000, NULL, 0, 1000); 2025 msleep(600); 2026 vub300->card_powered = 1; 2027 } else if (ios->power_mode == MMC_POWER_ON) { 2028 u8 *buf = kmalloc(8, GFP_KERNEL); 2029 if (buf) { 2030 __set_clock_speed(vub300, buf, ios); 2031 kfree(buf); 2032 } 2033 } else { 2034 /* this should mean no change of state */ 2035 } 2036 mutex_unlock(&vub300->cmd_mutex); 2037 kref_put(&vub300->kref, vub300_delete); 2038 } 2039 vub300_mmc_get_ro(struct mmc_host * mmc)2040 static int vub300_mmc_get_ro(struct mmc_host *mmc) 2041 { 2042 struct vub300_mmc_host *vub300 = mmc_priv(mmc); 2043 return vub300->read_only; 2044 } 2045 vub300_enable_sdio_irq(struct mmc_host * mmc,int enable)2046 static void vub300_enable_sdio_irq(struct mmc_host *mmc, int enable) 2047 { /* NOT irq */ 2048 struct vub300_mmc_host *vub300 = mmc_priv(mmc); 2049 if (!vub300->interface) 2050 return; 2051 kref_get(&vub300->kref); 2052 if (enable) { 2053 set_current_state(TASK_RUNNING); 2054 mutex_lock(&vub300->irq_mutex); 2055 if (vub300->irqs_queued) { 2056 vub300->irqs_queued -= 1; 2057 mmc_signal_sdio_irq(vub300->mmc); 2058 } else if (vub300->irq_disabled) { 2059 vub300->irq_disabled = 0; 2060 vub300->irq_enabled = 1; 2061 vub300_queue_poll_work(vub300, 0); 2062 } else if (vub300->irq_enabled) { 2063 /* this should not happen, so we will just ignore it */ 2064 } else { 2065 vub300->irq_enabled = 1; 2066 vub300_queue_poll_work(vub300, 0); 2067 } 2068 mutex_unlock(&vub300->irq_mutex); 2069 set_current_state(TASK_INTERRUPTIBLE); 2070 } else { 2071 vub300->irq_enabled = 0; 2072 } 2073 kref_put(&vub300->kref, vub300_delete); 2074 } 2075 2076 static const struct mmc_host_ops vub300_mmc_ops = { 2077 .request = vub300_mmc_request, 2078 .set_ios = vub300_mmc_set_ios, 2079 .get_ro = vub300_mmc_get_ro, 2080 .enable_sdio_irq = vub300_enable_sdio_irq, 2081 }; 2082 vub300_probe(struct usb_interface * interface,const struct usb_device_id * id)2083 static int vub300_probe(struct usb_interface *interface, 2084 const struct usb_device_id *id) 2085 { /* NOT irq */ 2086 struct vub300_mmc_host *vub300; 2087 struct usb_host_interface *iface_desc; 2088 struct usb_device *udev = usb_get_dev(interface_to_usbdev(interface)); 2089 int i; 2090 int retval = -ENOMEM; 2091 struct urb *command_out_urb; 2092 struct urb *command_res_urb; 2093 struct mmc_host *mmc; 2094 char manufacturer[48]; 2095 char product[32]; 2096 char serial_number[32]; 2097 usb_string(udev, udev->descriptor.iManufacturer, manufacturer, 2098 sizeof(manufacturer)); 2099 usb_string(udev, udev->descriptor.iProduct, product, sizeof(product)); 2100 usb_string(udev, udev->descriptor.iSerialNumber, serial_number, 2101 sizeof(serial_number)); 2102 dev_info(&udev->dev, "probing VID:PID(%04X:%04X) %s %s %s\n", 2103 le16_to_cpu(udev->descriptor.idVendor), 2104 le16_to_cpu(udev->descriptor.idProduct), 2105 manufacturer, product, serial_number); 2106 command_out_urb = usb_alloc_urb(0, GFP_KERNEL); 2107 if (!command_out_urb) { 2108 retval = -ENOMEM; 2109 goto error0; 2110 } 2111 command_res_urb = usb_alloc_urb(0, GFP_KERNEL); 2112 if (!command_res_urb) { 2113 retval = -ENOMEM; 2114 goto error1; 2115 } 2116 /* this also allocates memory for our VUB300 mmc host device */ 2117 mmc = mmc_alloc_host(sizeof(struct vub300_mmc_host), &udev->dev); 2118 if (!mmc) { 2119 retval = -ENOMEM; 2120 dev_err(&udev->dev, "not enough memory for the mmc_host\n"); 2121 goto error4; 2122 } 2123 /* MMC core transfer sizes tunable parameters */ 2124 mmc->caps = 0; 2125 if (!force_1_bit_data_xfers) 2126 mmc->caps |= MMC_CAP_4_BIT_DATA; 2127 if (!force_polling_for_irqs) 2128 mmc->caps |= MMC_CAP_SDIO_IRQ; 2129 mmc->caps &= ~MMC_CAP_NEEDS_POLL; 2130 /* 2131 * MMC_CAP_NEEDS_POLL causes core.c:mmc_rescan() to poll 2132 * for devices which results in spurious CMD7's being 2133 * issued which stops some SDIO cards from working 2134 */ 2135 if (limit_speed_to_24_MHz) { 2136 mmc->caps |= MMC_CAP_MMC_HIGHSPEED; 2137 mmc->caps |= MMC_CAP_SD_HIGHSPEED; 2138 mmc->f_max = 24000000; 2139 dev_info(&udev->dev, "limiting SDIO speed to 24_MHz\n"); 2140 } else { 2141 mmc->caps |= MMC_CAP_MMC_HIGHSPEED; 2142 mmc->caps |= MMC_CAP_SD_HIGHSPEED; 2143 mmc->f_max = 48000000; 2144 } 2145 mmc->f_min = 200000; 2146 mmc->max_blk_count = 511; 2147 mmc->max_blk_size = 512; 2148 mmc->max_segs = 128; 2149 if (force_max_req_size) 2150 mmc->max_req_size = force_max_req_size * 1024; 2151 else 2152 mmc->max_req_size = 64 * 1024; 2153 mmc->max_seg_size = mmc->max_req_size; 2154 mmc->ocr_avail = 0; 2155 mmc->ocr_avail |= MMC_VDD_165_195; 2156 mmc->ocr_avail |= MMC_VDD_20_21; 2157 mmc->ocr_avail |= MMC_VDD_21_22; 2158 mmc->ocr_avail |= MMC_VDD_22_23; 2159 mmc->ocr_avail |= MMC_VDD_23_24; 2160 mmc->ocr_avail |= MMC_VDD_24_25; 2161 mmc->ocr_avail |= MMC_VDD_25_26; 2162 mmc->ocr_avail |= MMC_VDD_26_27; 2163 mmc->ocr_avail |= MMC_VDD_27_28; 2164 mmc->ocr_avail |= MMC_VDD_28_29; 2165 mmc->ocr_avail |= MMC_VDD_29_30; 2166 mmc->ocr_avail |= MMC_VDD_30_31; 2167 mmc->ocr_avail |= MMC_VDD_31_32; 2168 mmc->ocr_avail |= MMC_VDD_32_33; 2169 mmc->ocr_avail |= MMC_VDD_33_34; 2170 mmc->ocr_avail |= MMC_VDD_34_35; 2171 mmc->ocr_avail |= MMC_VDD_35_36; 2172 mmc->ops = &vub300_mmc_ops; 2173 vub300 = mmc_priv(mmc); 2174 vub300->mmc = mmc; 2175 vub300->card_powered = 0; 2176 vub300->bus_width = 0; 2177 vub300->cmnd.head.block_size[0] = 0x00; 2178 vub300->cmnd.head.block_size[1] = 0x00; 2179 vub300->app_spec = 0; 2180 mutex_init(&vub300->cmd_mutex); 2181 mutex_init(&vub300->irq_mutex); 2182 vub300->command_out_urb = command_out_urb; 2183 vub300->command_res_urb = command_res_urb; 2184 vub300->usb_timed_out = 0; 2185 vub300->dynamic_register_count = 0; 2186 2187 for (i = 0; i < ARRAY_SIZE(vub300->fn); i++) { 2188 vub300->fn[i].offload_point = 0; 2189 vub300->fn[i].offload_count = 0; 2190 } 2191 2192 vub300->total_offload_count = 0; 2193 vub300->irq_enabled = 0; 2194 vub300->irq_disabled = 0; 2195 vub300->irqs_queued = 0; 2196 2197 for (i = 0; i < ARRAY_SIZE(vub300->sdio_register); i++) 2198 vub300->sdio_register[i++].activate = 0; 2199 2200 vub300->udev = udev; 2201 vub300->interface = interface; 2202 vub300->cmnd_res_ep = 0; 2203 vub300->cmnd_out_ep = 0; 2204 vub300->data_inp_ep = 0; 2205 vub300->data_out_ep = 0; 2206 2207 for (i = 0; i < ARRAY_SIZE(vub300->fbs); i++) 2208 vub300->fbs[i] = 512; 2209 2210 /* 2211 * set up the endpoint information 2212 * 2213 * use the first pair of bulk-in and bulk-out 2214 * endpoints for Command/Response+Interrupt 2215 * 2216 * use the second pair of bulk-in and bulk-out 2217 * endpoints for Data In/Out 2218 */ 2219 vub300->large_usb_packets = 0; 2220 iface_desc = interface->cur_altsetting; 2221 for (i = 0; i < iface_desc->desc.bNumEndpoints; ++i) { 2222 struct usb_endpoint_descriptor *endpoint = 2223 &iface_desc->endpoint[i].desc; 2224 dev_info(&vub300->udev->dev, 2225 "vub300 testing %s EndPoint(%d) %02X\n", 2226 usb_endpoint_is_bulk_in(endpoint) ? "BULK IN" : 2227 usb_endpoint_is_bulk_out(endpoint) ? "BULK OUT" : 2228 "UNKNOWN", i, endpoint->bEndpointAddress); 2229 if (endpoint->wMaxPacketSize > 64) 2230 vub300->large_usb_packets = 1; 2231 if (usb_endpoint_is_bulk_in(endpoint)) { 2232 if (!vub300->cmnd_res_ep) { 2233 vub300->cmnd_res_ep = 2234 endpoint->bEndpointAddress; 2235 } else if (!vub300->data_inp_ep) { 2236 vub300->data_inp_ep = 2237 endpoint->bEndpointAddress; 2238 } else { 2239 dev_warn(&vub300->udev->dev, 2240 "ignoring" 2241 " unexpected bulk_in endpoint"); 2242 } 2243 } else if (usb_endpoint_is_bulk_out(endpoint)) { 2244 if (!vub300->cmnd_out_ep) { 2245 vub300->cmnd_out_ep = 2246 endpoint->bEndpointAddress; 2247 } else if (!vub300->data_out_ep) { 2248 vub300->data_out_ep = 2249 endpoint->bEndpointAddress; 2250 } else { 2251 dev_warn(&vub300->udev->dev, 2252 "ignoring" 2253 " unexpected bulk_out endpoint"); 2254 } 2255 } else { 2256 dev_warn(&vub300->udev->dev, 2257 "vub300 ignoring EndPoint(%d) %02X", i, 2258 endpoint->bEndpointAddress); 2259 } 2260 } 2261 if (vub300->cmnd_res_ep && vub300->cmnd_out_ep && 2262 vub300->data_inp_ep && vub300->data_out_ep) { 2263 dev_info(&vub300->udev->dev, 2264 "vub300 %s packets" 2265 " using EndPoints %02X %02X %02X %02X\n", 2266 vub300->large_usb_packets ? "LARGE" : "SMALL", 2267 vub300->cmnd_out_ep, vub300->cmnd_res_ep, 2268 vub300->data_out_ep, vub300->data_inp_ep); 2269 /* we have the expected EndPoints */ 2270 } else { 2271 dev_err(&vub300->udev->dev, 2272 "Could not find two sets of bulk-in/out endpoint pairs\n"); 2273 retval = -EINVAL; 2274 goto error5; 2275 } 2276 retval = 2277 usb_control_msg(vub300->udev, usb_rcvctrlpipe(vub300->udev, 0), 2278 GET_HC_INF0, 2279 USB_DIR_IN | USB_TYPE_VENDOR | USB_RECIP_DEVICE, 2280 0x0000, 0x0000, &vub300->hc_info, 2281 sizeof(vub300->hc_info), 1000); 2282 if (retval < 0) 2283 goto error5; 2284 retval = 2285 usb_control_msg(vub300->udev, usb_sndctrlpipe(vub300->udev, 0), 2286 SET_ROM_WAIT_STATES, 2287 USB_DIR_OUT | USB_TYPE_VENDOR | USB_RECIP_DEVICE, 2288 firmware_rom_wait_states, 0x0000, NULL, 0, 1000); 2289 if (retval < 0) 2290 goto error5; 2291 dev_info(&vub300->udev->dev, 2292 "operating_mode = %s %s %d MHz %s %d byte USB packets\n", 2293 (mmc->caps & MMC_CAP_SDIO_IRQ) ? "IRQs" : "POLL", 2294 (mmc->caps & MMC_CAP_4_BIT_DATA) ? "4-bit" : "1-bit", 2295 mmc->f_max / 1000000, 2296 pad_input_to_usb_pkt ? "padding input data to" : "with", 2297 vub300->large_usb_packets ? 512 : 64); 2298 retval = 2299 usb_control_msg(vub300->udev, usb_rcvctrlpipe(vub300->udev, 0), 2300 GET_SYSTEM_PORT_STATUS, 2301 USB_DIR_IN | USB_TYPE_VENDOR | USB_RECIP_DEVICE, 2302 0x0000, 0x0000, &vub300->system_port_status, 2303 sizeof(vub300->system_port_status), 1000); 2304 if (retval < 0) { 2305 goto error5; 2306 } else if (sizeof(vub300->system_port_status) == retval) { 2307 vub300->card_present = 2308 (0x0001 & vub300->system_port_status.port_flags) ? 1 : 0; 2309 vub300->read_only = 2310 (0x0010 & vub300->system_port_status.port_flags) ? 1 : 0; 2311 } else { 2312 retval = -EINVAL; 2313 goto error5; 2314 } 2315 usb_set_intfdata(interface, vub300); 2316 INIT_DELAYED_WORK(&vub300->pollwork, vub300_pollwork_thread); 2317 INIT_WORK(&vub300->cmndwork, vub300_cmndwork_thread); 2318 INIT_WORK(&vub300->deadwork, vub300_deadwork_thread); 2319 kref_init(&vub300->kref); 2320 timer_setup(&vub300->sg_transfer_timer, vub300_sg_timed_out, 0); 2321 kref_get(&vub300->kref); 2322 timer_setup(&vub300->inactivity_timer, 2323 vub300_inactivity_timer_expired, 0); 2324 vub300->inactivity_timer.expires = jiffies + HZ; 2325 add_timer(&vub300->inactivity_timer); 2326 if (vub300->card_present) 2327 dev_info(&vub300->udev->dev, 2328 "USB vub300 remote SDIO host controller[%d]" 2329 "connected with SD/SDIO card inserted\n", 2330 interface_to_InterfaceNumber(interface)); 2331 else 2332 dev_info(&vub300->udev->dev, 2333 "USB vub300 remote SDIO host controller[%d]" 2334 "connected with no SD/SDIO card inserted\n", 2335 interface_to_InterfaceNumber(interface)); 2336 retval = mmc_add_host(mmc); 2337 if (retval) 2338 goto error6; 2339 2340 return 0; 2341 error6: 2342 del_timer_sync(&vub300->inactivity_timer); 2343 error5: 2344 mmc_free_host(mmc); 2345 /* 2346 * and hence also frees vub300 2347 * which is contained at the end of struct mmc 2348 */ 2349 error4: 2350 usb_free_urb(command_res_urb); 2351 error1: 2352 usb_free_urb(command_out_urb); 2353 error0: 2354 usb_put_dev(udev); 2355 return retval; 2356 } 2357 vub300_disconnect(struct usb_interface * interface)2358 static void vub300_disconnect(struct usb_interface *interface) 2359 { /* NOT irq */ 2360 struct vub300_mmc_host *vub300 = usb_get_intfdata(interface); 2361 if (!vub300 || !vub300->mmc) { 2362 return; 2363 } else { 2364 struct mmc_host *mmc = vub300->mmc; 2365 if (!vub300->mmc) { 2366 return; 2367 } else { 2368 int ifnum = interface_to_InterfaceNumber(interface); 2369 usb_set_intfdata(interface, NULL); 2370 /* prevent more I/O from starting */ 2371 vub300->interface = NULL; 2372 kref_put(&vub300->kref, vub300_delete); 2373 mmc_remove_host(mmc); 2374 pr_info("USB vub300 remote SDIO host controller[%d]" 2375 " now disconnected", ifnum); 2376 return; 2377 } 2378 } 2379 } 2380 2381 #ifdef CONFIG_PM vub300_suspend(struct usb_interface * intf,pm_message_t message)2382 static int vub300_suspend(struct usb_interface *intf, pm_message_t message) 2383 { 2384 return 0; 2385 } 2386 vub300_resume(struct usb_interface * intf)2387 static int vub300_resume(struct usb_interface *intf) 2388 { 2389 return 0; 2390 } 2391 #else 2392 #define vub300_suspend NULL 2393 #define vub300_resume NULL 2394 #endif vub300_pre_reset(struct usb_interface * intf)2395 static int vub300_pre_reset(struct usb_interface *intf) 2396 { /* NOT irq */ 2397 struct vub300_mmc_host *vub300 = usb_get_intfdata(intf); 2398 mutex_lock(&vub300->cmd_mutex); 2399 return 0; 2400 } 2401 vub300_post_reset(struct usb_interface * intf)2402 static int vub300_post_reset(struct usb_interface *intf) 2403 { /* NOT irq */ 2404 struct vub300_mmc_host *vub300 = usb_get_intfdata(intf); 2405 /* we are sure no URBs are active - no locking needed */ 2406 vub300->errors = -EPIPE; 2407 mutex_unlock(&vub300->cmd_mutex); 2408 return 0; 2409 } 2410 2411 static struct usb_driver vub300_driver = { 2412 .name = "vub300", 2413 .probe = vub300_probe, 2414 .disconnect = vub300_disconnect, 2415 .suspend = vub300_suspend, 2416 .resume = vub300_resume, 2417 .pre_reset = vub300_pre_reset, 2418 .post_reset = vub300_post_reset, 2419 .id_table = vub300_table, 2420 .supports_autosuspend = 1, 2421 }; 2422 vub300_init(void)2423 static int __init vub300_init(void) 2424 { /* NOT irq */ 2425 int result; 2426 2427 pr_info("VUB300 Driver rom wait states = %02X irqpoll timeout = %04X", 2428 firmware_rom_wait_states, 0x0FFFF & firmware_irqpoll_timeout); 2429 cmndworkqueue = create_singlethread_workqueue("kvub300c"); 2430 if (!cmndworkqueue) { 2431 pr_err("not enough memory for the REQUEST workqueue"); 2432 result = -ENOMEM; 2433 goto out1; 2434 } 2435 pollworkqueue = create_singlethread_workqueue("kvub300p"); 2436 if (!pollworkqueue) { 2437 pr_err("not enough memory for the IRQPOLL workqueue"); 2438 result = -ENOMEM; 2439 goto out2; 2440 } 2441 deadworkqueue = create_singlethread_workqueue("kvub300d"); 2442 if (!deadworkqueue) { 2443 pr_err("not enough memory for the EXPIRED workqueue"); 2444 result = -ENOMEM; 2445 goto out3; 2446 } 2447 result = usb_register(&vub300_driver); 2448 if (result) { 2449 pr_err("usb_register failed. Error number %d", result); 2450 goto out4; 2451 } 2452 return 0; 2453 out4: 2454 destroy_workqueue(deadworkqueue); 2455 out3: 2456 destroy_workqueue(pollworkqueue); 2457 out2: 2458 destroy_workqueue(cmndworkqueue); 2459 out1: 2460 return result; 2461 } 2462 vub300_exit(void)2463 static void __exit vub300_exit(void) 2464 { 2465 usb_deregister(&vub300_driver); 2466 flush_workqueue(cmndworkqueue); 2467 flush_workqueue(pollworkqueue); 2468 flush_workqueue(deadworkqueue); 2469 destroy_workqueue(cmndworkqueue); 2470 destroy_workqueue(pollworkqueue); 2471 destroy_workqueue(deadworkqueue); 2472 } 2473 2474 module_init(vub300_init); 2475 module_exit(vub300_exit); 2476 2477 MODULE_AUTHOR("Tony Olech <tony.olech@elandigitalsystems.com>"); 2478 MODULE_DESCRIPTION("VUB300 USB to SD/MMC/SDIO adapter driver"); 2479 MODULE_LICENSE("GPL"); 2480