xref: /openbmc/linux/drivers/macintosh/adb.c (revision 96de0e252cedffad61b3cb5e05662c591898e69a)
1 /*
2  * Device driver for the Apple Desktop Bus
3  * and the /dev/adb device on macintoshes.
4  *
5  * Copyright (C) 1996 Paul Mackerras.
6  *
7  * Modified to declare controllers as structures, added
8  * client notification of bus reset and handles PowerBook
9  * sleep, by Benjamin Herrenschmidt.
10  *
11  * To do:
12  *
13  * - /sys/bus/adb to list the devices and infos
14  * - more /dev/adb to allow userland to receive the
15  *   flow of auto-polling datas from a given device.
16  * - move bus probe to a kernel thread
17  */
18 
19 #include <linux/types.h>
20 #include <linux/errno.h>
21 #include <linux/kernel.h>
22 #include <linux/slab.h>
23 #include <linux/module.h>
24 #include <linux/fs.h>
25 #include <linux/mm.h>
26 #include <linux/sched.h>
27 #include <linux/smp_lock.h>
28 #include <linux/adb.h>
29 #include <linux/cuda.h>
30 #include <linux/pmu.h>
31 #include <linux/notifier.h>
32 #include <linux/wait.h>
33 #include <linux/init.h>
34 #include <linux/delay.h>
35 #include <linux/spinlock.h>
36 #include <linux/completion.h>
37 #include <linux/device.h>
38 
39 #include <asm/uaccess.h>
40 #include <asm/semaphore.h>
41 #ifdef CONFIG_PPC
42 #include <asm/prom.h>
43 #include <asm/machdep.h>
44 #endif
45 
46 
47 EXPORT_SYMBOL(adb_controller);
48 EXPORT_SYMBOL(adb_client_list);
49 
50 extern struct adb_driver via_macii_driver;
51 extern struct adb_driver via_maciisi_driver;
52 extern struct adb_driver via_cuda_driver;
53 extern struct adb_driver adb_iop_driver;
54 extern struct adb_driver via_pmu_driver;
55 extern struct adb_driver macio_adb_driver;
56 
57 static struct adb_driver *adb_driver_list[] = {
58 #ifdef CONFIG_ADB_MACII
59 	&via_macii_driver,
60 #endif
61 #ifdef CONFIG_ADB_MACIISI
62 	&via_maciisi_driver,
63 #endif
64 #ifdef CONFIG_ADB_CUDA
65 	&via_cuda_driver,
66 #endif
67 #ifdef CONFIG_ADB_IOP
68 	&adb_iop_driver,
69 #endif
70 #if defined(CONFIG_ADB_PMU) || defined(CONFIG_ADB_PMU68K)
71 	&via_pmu_driver,
72 #endif
73 #ifdef CONFIG_ADB_MACIO
74 	&macio_adb_driver,
75 #endif
76 	NULL
77 };
78 
79 static struct class *adb_dev_class;
80 
81 struct adb_driver *adb_controller;
82 BLOCKING_NOTIFIER_HEAD(adb_client_list);
83 static int adb_got_sleep;
84 static int adb_inited;
85 static pid_t adb_probe_task_pid;
86 static DECLARE_MUTEX(adb_probe_mutex);
87 static struct completion adb_probe_task_comp;
88 static int sleepy_trackpad;
89 static int autopoll_devs;
90 int __adb_probe_sync;
91 
92 #ifdef CONFIG_PM_SLEEP
93 static void adb_notify_sleep(struct pmu_sleep_notifier *self, int when);
94 static struct pmu_sleep_notifier adb_sleep_notifier = {
95 	adb_notify_sleep,
96 	SLEEP_LEVEL_ADB,
97 };
98 #endif
99 
100 static int adb_scan_bus(void);
101 static int do_adb_reset_bus(void);
102 static void adbdev_init(void);
103 static int try_handler_change(int, int);
104 
105 static struct adb_handler {
106 	void (*handler)(unsigned char *, int, int);
107 	int original_address;
108 	int handler_id;
109 	int busy;
110 } adb_handler[16];
111 
112 /*
113  * The adb_handler_sem mutex protects all accesses to the original_address
114  * and handler_id fields of adb_handler[i] for all i, and changes to the
115  * handler field.
116  * Accesses to the handler field are protected by the adb_handler_lock
117  * rwlock.  It is held across all calls to any handler, so that by the
118  * time adb_unregister returns, we know that the old handler isn't being
119  * called.
120  */
121 static DECLARE_MUTEX(adb_handler_sem);
122 static DEFINE_RWLOCK(adb_handler_lock);
123 
124 #if 0
125 static void printADBreply(struct adb_request *req)
126 {
127         int i;
128 
129         printk("adb reply (%d)", req->reply_len);
130         for(i = 0; i < req->reply_len; i++)
131                 printk(" %x", req->reply[i]);
132         printk("\n");
133 
134 }
135 #endif
136 
137 
138 static __inline__ void adb_wait_ms(unsigned int ms)
139 {
140 	if (current->pid && adb_probe_task_pid &&
141 	  adb_probe_task_pid == current->pid)
142 		msleep(ms);
143 	else
144 		mdelay(ms);
145 }
146 
147 static int adb_scan_bus(void)
148 {
149 	int i, highFree=0, noMovement;
150 	int devmask = 0;
151 	struct adb_request req;
152 
153 	/* assumes adb_handler[] is all zeroes at this point */
154 	for (i = 1; i < 16; i++) {
155 		/* see if there is anything at address i */
156 		adb_request(&req, NULL, ADBREQ_SYNC | ADBREQ_REPLY, 1,
157                             (i << 4) | 0xf);
158 		if (req.reply_len > 1)
159 			/* one or more devices at this address */
160 			adb_handler[i].original_address = i;
161 		else if (i > highFree)
162 			highFree = i;
163 	}
164 
165 	/* Note we reset noMovement to 0 each time we move a device */
166 	for (noMovement = 1; noMovement < 2 && highFree > 0; noMovement++) {
167 		for (i = 1; i < 16; i++) {
168 			if (adb_handler[i].original_address == 0)
169 				continue;
170 			/*
171 			 * Send a "talk register 3" command to address i
172 			 * to provoke a collision if there is more than
173 			 * one device at this address.
174 			 */
175 			adb_request(&req, NULL, ADBREQ_SYNC | ADBREQ_REPLY, 1,
176 				    (i << 4) | 0xf);
177 			/*
178 			 * Move the device(s) which didn't detect a
179 			 * collision to address `highFree'.  Hopefully
180 			 * this only moves one device.
181 			 */
182 			adb_request(&req, NULL, ADBREQ_SYNC, 3,
183 				    (i<< 4) | 0xb, (highFree | 0x60), 0xfe);
184 			/*
185 			 * See if anybody actually moved. This is suggested
186 			 * by HW TechNote 01:
187 			 *
188 			 * http://developer.apple.com/technotes/hw/hw_01.html
189 			 */
190 			adb_request(&req, NULL, ADBREQ_SYNC | ADBREQ_REPLY, 1,
191 				    (highFree << 4) | 0xf);
192 			if (req.reply_len <= 1) continue;
193 			/*
194 			 * Test whether there are any device(s) left
195 			 * at address i.
196 			 */
197 			adb_request(&req, NULL, ADBREQ_SYNC | ADBREQ_REPLY, 1,
198 				    (i << 4) | 0xf);
199 			if (req.reply_len > 1) {
200 				/*
201 				 * There are still one or more devices
202 				 * left at address i.  Register the one(s)
203 				 * we moved to `highFree', and find a new
204 				 * value for highFree.
205 				 */
206 				adb_handler[highFree].original_address =
207 					adb_handler[i].original_address;
208 				while (highFree > 0 &&
209 				       adb_handler[highFree].original_address)
210 					highFree--;
211 				if (highFree <= 0)
212 					break;
213 
214 				noMovement = 0;
215 			}
216 			else {
217 				/*
218 				 * No devices left at address i; move the
219 				 * one(s) we moved to `highFree' back to i.
220 				 */
221 				adb_request(&req, NULL, ADBREQ_SYNC, 3,
222 					    (highFree << 4) | 0xb,
223 					    (i | 0x60), 0xfe);
224 			}
225 		}
226 	}
227 
228 	/* Now fill in the handler_id field of the adb_handler entries. */
229 	printk(KERN_DEBUG "adb devices:");
230 	for (i = 1; i < 16; i++) {
231 		if (adb_handler[i].original_address == 0)
232 			continue;
233 		adb_request(&req, NULL, ADBREQ_SYNC | ADBREQ_REPLY, 1,
234 			    (i << 4) | 0xf);
235 		adb_handler[i].handler_id = req.reply[2];
236 		printk(" [%d]: %d %x", i, adb_handler[i].original_address,
237 		       adb_handler[i].handler_id);
238 		devmask |= 1 << i;
239 	}
240 	printk("\n");
241 	return devmask;
242 }
243 
244 /*
245  * This kernel task handles ADB probing. It dies once probing is
246  * completed.
247  */
248 static int
249 adb_probe_task(void *x)
250 {
251 	strcpy(current->comm, "kadbprobe");
252 
253 	printk(KERN_INFO "adb: starting probe task...\n");
254 	do_adb_reset_bus();
255 	printk(KERN_INFO "adb: finished probe task...\n");
256 
257 	adb_probe_task_pid = 0;
258 	up(&adb_probe_mutex);
259 
260 	return 0;
261 }
262 
263 static void
264 __adb_probe_task(struct work_struct *bullshit)
265 {
266 	adb_probe_task_pid = kernel_thread(adb_probe_task, NULL, SIGCHLD | CLONE_KERNEL);
267 }
268 
269 static DECLARE_WORK(adb_reset_work, __adb_probe_task);
270 
271 int
272 adb_reset_bus(void)
273 {
274 	if (__adb_probe_sync) {
275 		do_adb_reset_bus();
276 		return 0;
277 	}
278 
279 	down(&adb_probe_mutex);
280 	schedule_work(&adb_reset_work);
281 	return 0;
282 }
283 
284 int __init adb_init(void)
285 {
286 	struct adb_driver *driver;
287 	int i;
288 
289 #ifdef CONFIG_PPC32
290 	if (!machine_is(chrp) && !machine_is(powermac))
291 		return 0;
292 #endif
293 #ifdef CONFIG_MAC
294 	if (!MACH_IS_MAC)
295 		return 0;
296 #endif
297 
298 	/* xmon may do early-init */
299 	if (adb_inited)
300 		return 0;
301 	adb_inited = 1;
302 
303 	adb_controller = NULL;
304 
305 	i = 0;
306 	while ((driver = adb_driver_list[i++]) != NULL) {
307 		if (!driver->probe()) {
308 			adb_controller = driver;
309 			break;
310 		}
311 	}
312 	if ((adb_controller == NULL) || adb_controller->init()) {
313 		printk(KERN_WARNING "Warning: no ADB interface detected\n");
314 		adb_controller = NULL;
315 	} else {
316 #ifdef CONFIG_PM_SLEEP
317 		pmu_register_sleep_notifier(&adb_sleep_notifier);
318 #endif /* CONFIG_PM */
319 #ifdef CONFIG_PPC
320 		if (machine_is_compatible("AAPL,PowerBook1998") ||
321 			machine_is_compatible("PowerBook1,1"))
322 			sleepy_trackpad = 1;
323 #endif /* CONFIG_PPC */
324 		init_completion(&adb_probe_task_comp);
325 		adbdev_init();
326 		adb_reset_bus();
327 	}
328 	return 0;
329 }
330 
331 __initcall(adb_init);
332 
333 #ifdef CONFIG_PM
334 /*
335  * notify clients before sleep and reset bus afterwards
336  */
337 void
338 adb_notify_sleep(struct pmu_sleep_notifier *self, int when)
339 {
340 	switch (when) {
341 	case PBOOK_SLEEP_REQUEST:
342 		adb_got_sleep = 1;
343 		/* We need to get a lock on the probe thread */
344 		down(&adb_probe_mutex);
345 		/* Stop autopoll */
346 		if (adb_controller->autopoll)
347 			adb_controller->autopoll(0);
348 		blocking_notifier_call_chain(&adb_client_list,
349 			ADB_MSG_POWERDOWN, NULL);
350 		break;
351 	case PBOOK_WAKE:
352 		adb_got_sleep = 0;
353 		up(&adb_probe_mutex);
354 		adb_reset_bus();
355 		break;
356 	}
357 }
358 #endif /* CONFIG_PM */
359 
360 static int
361 do_adb_reset_bus(void)
362 {
363 	int ret;
364 
365 	if (adb_controller == NULL)
366 		return -ENXIO;
367 
368 	if (adb_controller->autopoll)
369 		adb_controller->autopoll(0);
370 
371 	blocking_notifier_call_chain(&adb_client_list,
372 		ADB_MSG_PRE_RESET, NULL);
373 
374 	if (sleepy_trackpad) {
375 		/* Let the trackpad settle down */
376 		adb_wait_ms(500);
377 	}
378 
379 	down(&adb_handler_sem);
380 	write_lock_irq(&adb_handler_lock);
381 	memset(adb_handler, 0, sizeof(adb_handler));
382 	write_unlock_irq(&adb_handler_lock);
383 
384 	/* That one is still a bit synchronous, oh well... */
385 	if (adb_controller->reset_bus)
386 		ret = adb_controller->reset_bus();
387 	else
388 		ret = 0;
389 
390 	if (sleepy_trackpad) {
391 		/* Let the trackpad settle down */
392 		adb_wait_ms(1500);
393 	}
394 
395 	if (!ret) {
396 		autopoll_devs = adb_scan_bus();
397 		if (adb_controller->autopoll)
398 			adb_controller->autopoll(autopoll_devs);
399 	}
400 	up(&adb_handler_sem);
401 
402 	blocking_notifier_call_chain(&adb_client_list,
403 		ADB_MSG_POST_RESET, NULL);
404 
405 	return ret;
406 }
407 
408 void
409 adb_poll(void)
410 {
411 	if ((adb_controller == NULL)||(adb_controller->poll == NULL))
412 		return;
413 	adb_controller->poll();
414 }
415 
416 static void
417 adb_probe_wakeup(struct adb_request *req)
418 {
419 	complete(&adb_probe_task_comp);
420 }
421 
422 /* Static request used during probe */
423 static struct adb_request adb_sreq;
424 static unsigned long adb_sreq_lock; // Use semaphore ! */
425 
426 int
427 adb_request(struct adb_request *req, void (*done)(struct adb_request *),
428 	    int flags, int nbytes, ...)
429 {
430 	va_list list;
431 	int i, use_sreq;
432 	int rc;
433 
434 	if ((adb_controller == NULL) || (adb_controller->send_request == NULL))
435 		return -ENXIO;
436 	if (nbytes < 1)
437 		return -EINVAL;
438 	if (req == NULL && (flags & ADBREQ_NOSEND))
439 		return -EINVAL;
440 
441 	if (req == NULL) {
442 		if (test_and_set_bit(0,&adb_sreq_lock)) {
443 			printk("adb.c: Warning: contention on static request !\n");
444 			return -EPERM;
445 		}
446 		req = &adb_sreq;
447 		flags |= ADBREQ_SYNC;
448 		use_sreq = 1;
449 	} else
450 		use_sreq = 0;
451 	req->nbytes = nbytes+1;
452 	req->done = done;
453 	req->reply_expected = flags & ADBREQ_REPLY;
454 	req->data[0] = ADB_PACKET;
455 	va_start(list, nbytes);
456 	for (i = 0; i < nbytes; ++i)
457 		req->data[i+1] = va_arg(list, int);
458 	va_end(list);
459 
460 	if (flags & ADBREQ_NOSEND)
461 		return 0;
462 
463 	/* Synchronous requests send from the probe thread cause it to
464 	 * block. Beware that the "done" callback will be overriden !
465 	 */
466 	if ((flags & ADBREQ_SYNC) &&
467 	    (current->pid && adb_probe_task_pid &&
468 	    adb_probe_task_pid == current->pid)) {
469 		req->done = adb_probe_wakeup;
470 		rc = adb_controller->send_request(req, 0);
471 		if (rc || req->complete)
472 			goto bail;
473 		wait_for_completion(&adb_probe_task_comp);
474 		rc = 0;
475 		goto bail;
476 	}
477 
478 	rc = adb_controller->send_request(req, flags & ADBREQ_SYNC);
479 bail:
480 	if (use_sreq)
481 		clear_bit(0, &adb_sreq_lock);
482 
483 	return rc;
484 }
485 
486  /* Ultimately this should return the number of devices with
487     the given default id.
488     And it does it now ! Note: changed behaviour: This function
489     will now register if default_id _and_ handler_id both match
490     but handler_id can be left to 0 to match with default_id only.
491     When handler_id is set, this function will try to adjust
492     the handler_id id it doesn't match. */
493 int
494 adb_register(int default_id, int handler_id, struct adb_ids *ids,
495 	     void (*handler)(unsigned char *, int, int))
496 {
497 	int i;
498 
499 	down(&adb_handler_sem);
500 	ids->nids = 0;
501 	for (i = 1; i < 16; i++) {
502 		if ((adb_handler[i].original_address == default_id) &&
503 		    (!handler_id || (handler_id == adb_handler[i].handler_id) ||
504 		    try_handler_change(i, handler_id))) {
505 			if (adb_handler[i].handler != 0) {
506 				printk(KERN_ERR
507 				       "Two handlers for ADB device %d\n",
508 				       default_id);
509 				continue;
510 			}
511 			write_lock_irq(&adb_handler_lock);
512 			adb_handler[i].handler = handler;
513 			write_unlock_irq(&adb_handler_lock);
514 			ids->id[ids->nids++] = i;
515 		}
516 	}
517 	up(&adb_handler_sem);
518 	return ids->nids;
519 }
520 
521 int
522 adb_unregister(int index)
523 {
524 	int ret = -ENODEV;
525 
526 	down(&adb_handler_sem);
527 	write_lock_irq(&adb_handler_lock);
528 	if (adb_handler[index].handler) {
529 		while(adb_handler[index].busy) {
530 			write_unlock_irq(&adb_handler_lock);
531 			yield();
532 			write_lock_irq(&adb_handler_lock);
533 		}
534 		ret = 0;
535 		adb_handler[index].handler = NULL;
536 	}
537 	write_unlock_irq(&adb_handler_lock);
538 	up(&adb_handler_sem);
539 	return ret;
540 }
541 
542 void
543 adb_input(unsigned char *buf, int nb, int autopoll)
544 {
545 	int i, id;
546 	static int dump_adb_input = 0;
547 	unsigned long flags;
548 
549 	void (*handler)(unsigned char *, int, int);
550 
551 	/* We skip keystrokes and mouse moves when the sleep process
552 	 * has been started. We stop autopoll, but this is another security
553 	 */
554 	if (adb_got_sleep)
555 		return;
556 
557 	id = buf[0] >> 4;
558 	if (dump_adb_input) {
559 		printk(KERN_INFO "adb packet: ");
560 		for (i = 0; i < nb; ++i)
561 			printk(" %x", buf[i]);
562 		printk(", id = %d\n", id);
563 	}
564 	write_lock_irqsave(&adb_handler_lock, flags);
565 	handler = adb_handler[id].handler;
566 	if (handler != NULL)
567 		adb_handler[id].busy = 1;
568 	write_unlock_irqrestore(&adb_handler_lock, flags);
569 	if (handler != NULL) {
570 		(*handler)(buf, nb, autopoll);
571 		wmb();
572 		adb_handler[id].busy = 0;
573 	}
574 
575 }
576 
577 /* Try to change handler to new_id. Will return 1 if successful. */
578 static int try_handler_change(int address, int new_id)
579 {
580 	struct adb_request req;
581 
582 	if (adb_handler[address].handler_id == new_id)
583 	    return 1;
584 	adb_request(&req, NULL, ADBREQ_SYNC, 3,
585 	    ADB_WRITEREG(address, 3), address | 0x20, new_id);
586 	adb_request(&req, NULL, ADBREQ_SYNC | ADBREQ_REPLY, 1,
587 	    ADB_READREG(address, 3));
588 	if (req.reply_len < 2)
589 	    return 0;
590 	if (req.reply[2] != new_id)
591 	    return 0;
592 	adb_handler[address].handler_id = req.reply[2];
593 
594 	return 1;
595 }
596 
597 int
598 adb_try_handler_change(int address, int new_id)
599 {
600 	int ret;
601 
602 	down(&adb_handler_sem);
603 	ret = try_handler_change(address, new_id);
604 	up(&adb_handler_sem);
605 	return ret;
606 }
607 
608 int
609 adb_get_infos(int address, int *original_address, int *handler_id)
610 {
611 	down(&adb_handler_sem);
612 	*original_address = adb_handler[address].original_address;
613 	*handler_id = adb_handler[address].handler_id;
614 	up(&adb_handler_sem);
615 
616 	return (*original_address != 0);
617 }
618 
619 
620 /*
621  * /dev/adb device driver.
622  */
623 
624 #define ADB_MAJOR	56	/* major number for /dev/adb */
625 
626 struct adbdev_state {
627 	spinlock_t	lock;
628 	atomic_t	n_pending;
629 	struct adb_request *completed;
630   	wait_queue_head_t wait_queue;
631 	int		inuse;
632 };
633 
634 static void adb_write_done(struct adb_request *req)
635 {
636 	struct adbdev_state *state = (struct adbdev_state *) req->arg;
637 	unsigned long flags;
638 
639 	if (!req->complete) {
640 		req->reply_len = 0;
641 		req->complete = 1;
642 	}
643 	spin_lock_irqsave(&state->lock, flags);
644 	atomic_dec(&state->n_pending);
645 	if (!state->inuse) {
646 		kfree(req);
647 		if (atomic_read(&state->n_pending) == 0) {
648 			spin_unlock_irqrestore(&state->lock, flags);
649 			kfree(state);
650 			return;
651 		}
652 	} else {
653 		struct adb_request **ap = &state->completed;
654 		while (*ap != NULL)
655 			ap = &(*ap)->next;
656 		req->next = NULL;
657 		*ap = req;
658 		wake_up_interruptible(&state->wait_queue);
659 	}
660 	spin_unlock_irqrestore(&state->lock, flags);
661 }
662 
663 static int
664 do_adb_query(struct adb_request *req)
665 {
666 	int	ret = -EINVAL;
667 
668 	switch(req->data[1])
669 	{
670 	case ADB_QUERY_GETDEVINFO:
671 		if (req->nbytes < 3)
672 			break;
673 		down(&adb_handler_sem);
674 		req->reply[0] = adb_handler[req->data[2]].original_address;
675 		req->reply[1] = adb_handler[req->data[2]].handler_id;
676 		up(&adb_handler_sem);
677 		req->complete = 1;
678 		req->reply_len = 2;
679 		adb_write_done(req);
680 		ret = 0;
681 		break;
682 	}
683 	return ret;
684 }
685 
686 static int adb_open(struct inode *inode, struct file *file)
687 {
688 	struct adbdev_state *state;
689 
690 	if (iminor(inode) > 0 || adb_controller == NULL)
691 		return -ENXIO;
692 	state = kmalloc(sizeof(struct adbdev_state), GFP_KERNEL);
693 	if (state == 0)
694 		return -ENOMEM;
695 	file->private_data = state;
696 	spin_lock_init(&state->lock);
697 	atomic_set(&state->n_pending, 0);
698 	state->completed = NULL;
699 	init_waitqueue_head(&state->wait_queue);
700 	state->inuse = 1;
701 
702 	return 0;
703 }
704 
705 static int adb_release(struct inode *inode, struct file *file)
706 {
707 	struct adbdev_state *state = file->private_data;
708 	unsigned long flags;
709 
710 	lock_kernel();
711 	if (state) {
712 		file->private_data = NULL;
713 		spin_lock_irqsave(&state->lock, flags);
714 		if (atomic_read(&state->n_pending) == 0
715 		    && state->completed == NULL) {
716 			spin_unlock_irqrestore(&state->lock, flags);
717 			kfree(state);
718 		} else {
719 			state->inuse = 0;
720 			spin_unlock_irqrestore(&state->lock, flags);
721 		}
722 	}
723 	unlock_kernel();
724 	return 0;
725 }
726 
727 static ssize_t adb_read(struct file *file, char __user *buf,
728 			size_t count, loff_t *ppos)
729 {
730 	int ret = 0;
731 	struct adbdev_state *state = file->private_data;
732 	struct adb_request *req;
733 	wait_queue_t wait = __WAITQUEUE_INITIALIZER(wait,current);
734 	unsigned long flags;
735 
736 	if (count < 2)
737 		return -EINVAL;
738 	if (count > sizeof(req->reply))
739 		count = sizeof(req->reply);
740 	if (!access_ok(VERIFY_WRITE, buf, count))
741 		return -EFAULT;
742 
743 	req = NULL;
744 	spin_lock_irqsave(&state->lock, flags);
745 	add_wait_queue(&state->wait_queue, &wait);
746 	current->state = TASK_INTERRUPTIBLE;
747 
748 	for (;;) {
749 		req = state->completed;
750 		if (req != NULL)
751 			state->completed = req->next;
752 		else if (atomic_read(&state->n_pending) == 0)
753 			ret = -EIO;
754 		if (req != NULL || ret != 0)
755 			break;
756 
757 		if (file->f_flags & O_NONBLOCK) {
758 			ret = -EAGAIN;
759 			break;
760 		}
761 		if (signal_pending(current)) {
762 			ret = -ERESTARTSYS;
763 			break;
764 		}
765 		spin_unlock_irqrestore(&state->lock, flags);
766 		schedule();
767 		spin_lock_irqsave(&state->lock, flags);
768 	}
769 
770 	current->state = TASK_RUNNING;
771 	remove_wait_queue(&state->wait_queue, &wait);
772 	spin_unlock_irqrestore(&state->lock, flags);
773 
774 	if (ret)
775 		return ret;
776 
777 	ret = req->reply_len;
778 	if (ret > count)
779 		ret = count;
780 	if (ret > 0 && copy_to_user(buf, req->reply, ret))
781 		ret = -EFAULT;
782 
783 	kfree(req);
784 	return ret;
785 }
786 
787 static ssize_t adb_write(struct file *file, const char __user *buf,
788 			 size_t count, loff_t *ppos)
789 {
790 	int ret/*, i*/;
791 	struct adbdev_state *state = file->private_data;
792 	struct adb_request *req;
793 
794 	if (count < 2 || count > sizeof(req->data))
795 		return -EINVAL;
796 	if (adb_controller == NULL)
797 		return -ENXIO;
798 	if (!access_ok(VERIFY_READ, buf, count))
799 		return -EFAULT;
800 
801 	req = kmalloc(sizeof(struct adb_request),
802 					     GFP_KERNEL);
803 	if (req == NULL)
804 		return -ENOMEM;
805 
806 	req->nbytes = count;
807 	req->done = adb_write_done;
808 	req->arg = (void *) state;
809 	req->complete = 0;
810 
811 	ret = -EFAULT;
812 	if (copy_from_user(req->data, buf, count))
813 		goto out;
814 
815 	atomic_inc(&state->n_pending);
816 
817 	/* If a probe is in progress or we are sleeping, wait for it to complete */
818 	down(&adb_probe_mutex);
819 
820 	/* Queries are special requests sent to the ADB driver itself */
821 	if (req->data[0] == ADB_QUERY) {
822 		if (count > 1)
823 			ret = do_adb_query(req);
824 		else
825 			ret = -EINVAL;
826 		up(&adb_probe_mutex);
827 	}
828 	/* Special case for ADB_BUSRESET request, all others are sent to
829 	   the controller */
830 	else if ((req->data[0] == ADB_PACKET)&&(count > 1)
831 		&&(req->data[1] == ADB_BUSRESET)) {
832 		ret = do_adb_reset_bus();
833 		up(&adb_probe_mutex);
834 		atomic_dec(&state->n_pending);
835 		if (ret == 0)
836 			ret = count;
837 		goto out;
838 	} else {
839 		req->reply_expected = ((req->data[1] & 0xc) == 0xc);
840 		if (adb_controller && adb_controller->send_request)
841 			ret = adb_controller->send_request(req, 0);
842 		else
843 			ret = -ENXIO;
844 		up(&adb_probe_mutex);
845 	}
846 
847 	if (ret != 0) {
848 		atomic_dec(&state->n_pending);
849 		goto out;
850 	}
851 	return count;
852 
853 out:
854 	kfree(req);
855 	return ret;
856 }
857 
858 static const struct file_operations adb_fops = {
859 	.owner		= THIS_MODULE,
860 	.llseek		= no_llseek,
861 	.read		= adb_read,
862 	.write		= adb_write,
863 	.open		= adb_open,
864 	.release	= adb_release,
865 };
866 
867 static void
868 adbdev_init(void)
869 {
870 	if (register_chrdev(ADB_MAJOR, "adb", &adb_fops)) {
871 		printk(KERN_ERR "adb: unable to get major %d\n", ADB_MAJOR);
872 		return;
873 	}
874 
875 	adb_dev_class = class_create(THIS_MODULE, "adb");
876 	if (IS_ERR(adb_dev_class))
877 		return;
878 	class_device_create(adb_dev_class, NULL, MKDEV(ADB_MAJOR, 0), NULL, "adb");
879 }
880