1 /* 2 * copyright (C) 1999/2000 by Henning Zabel <henning@uni-paderborn.de> 3 * 4 * This program is free software; you can redistribute it and/or modify it 5 * under the terms of the GNU General Public License as published by the 6 * Free Software Foundation; either version 2 of the License, or (at your 7 * option) any later version. 8 * 9 * This program is distributed in the hope that it will be useful, but 10 * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY 11 * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License 12 * for more details. 13 * 14 * You should have received a copy of the GNU General Public License 15 * along with this program; if not, write to the Free Software Foundation, 16 * Inc., 675 Mass Ave, Cambridge, MA 02139, USA. 17 */ 18 19 20 /* 21 * USB-Kernel Driver for the Mustek MDC800 Digital Camera 22 * (c) 1999/2000 Henning Zabel <henning@uni-paderborn.de> 23 * 24 * 25 * The driver brings the USB functions of the MDC800 to Linux. 26 * To use the Camera you must support the USB Protocol of the camera 27 * to the Kernel Node. 28 * The Driver uses a misc device Node. Create it with : 29 * mknod /dev/mustek c 180 32 30 * 31 * The driver supports only one camera. 32 * 33 * Fix: mdc800 used sleep_on and slept with io_lock held. 34 * Converted sleep_on to waitqueues with schedule_timeout and made io_lock 35 * a semaphore from a spinlock. 36 * by Oliver Neukum <oliver@neukum.name> 37 * (02/12/2001) 38 * 39 * Identify version on module load. 40 * (08/04/2001) gb 41 * 42 * version 0.7.5 43 * Fixed potential SMP races with Spinlocks. 44 * Thanks to Oliver Neukum <oliver@neukum.name> who 45 * noticed the race conditions. 46 * (30/10/2000) 47 * 48 * Fixed: Setting urb->dev before submitting urb. 49 * by Greg KH <greg@kroah.com> 50 * (13/10/2000) 51 * 52 * version 0.7.3 53 * bugfix : The mdc800->state field gets set to READY after the 54 * the disconnect function sets it to NOT_CONNECTED. This makes the 55 * driver running like the camera is connected and causes some 56 * hang ups. 57 * 58 * version 0.7.1 59 * MOD_INC and MOD_DEC are changed in usb_probe to prevent load/unload 60 * problems when compiled as Module. 61 * (04/04/2000) 62 * 63 * The mdc800 driver gets assigned the USB Minor 32-47. The Registration 64 * was updated to use these values. 65 * (26/03/2000) 66 * 67 * The Init und Exit Module Function are updated. 68 * (01/03/2000) 69 * 70 * version 0.7.0 71 * Rewrite of the driver : The driver now uses URB's. The old stuff 72 * has been removed. 73 * 74 * version 0.6.0 75 * Rewrite of this driver: The Emulation of the rs232 protocoll 76 * has been removed from the driver. A special executeCommand function 77 * for this driver is included to gphoto. 78 * The driver supports two kind of communication to bulk endpoints. 79 * Either with the dev->bus->ops->bulk... or with callback function. 80 * (09/11/1999) 81 * 82 * version 0.5.0: 83 * first Version that gets a version number. Most of the needed 84 * functions work. 85 * (20/10/1999) 86 */ 87 88 #include <linux/sched/signal.h> 89 #include <linux/signal.h> 90 #include <linux/spinlock.h> 91 #include <linux/errno.h> 92 #include <linux/random.h> 93 #include <linux/poll.h> 94 #include <linux/init.h> 95 #include <linux/slab.h> 96 #include <linux/module.h> 97 #include <linux/wait.h> 98 #include <linux/mutex.h> 99 100 #include <linux/usb.h> 101 #include <linux/fs.h> 102 103 /* 104 * Version Information 105 */ 106 #define DRIVER_VERSION "v0.7.5 (30/10/2000)" 107 #define DRIVER_AUTHOR "Henning Zabel <henning@uni-paderborn.de>" 108 #define DRIVER_DESC "USB Driver for Mustek MDC800 Digital Camera" 109 110 /* Vendor and Product Information */ 111 #define MDC800_VENDOR_ID 0x055f 112 #define MDC800_PRODUCT_ID 0xa800 113 114 /* Timeouts (msec) */ 115 #define TO_DOWNLOAD_GET_READY 1500 116 #define TO_DOWNLOAD_GET_BUSY 1500 117 #define TO_WRITE_GET_READY 1000 118 #define TO_DEFAULT_COMMAND 5000 119 #define TO_READ_FROM_IRQ TO_DEFAULT_COMMAND 120 #define TO_GET_READY TO_DEFAULT_COMMAND 121 122 /* Minor Number of the device (create with mknod /dev/mustek c 180 32) */ 123 #define MDC800_DEVICE_MINOR_BASE 32 124 125 126 /************************************************************************** 127 Data and structs 128 ***************************************************************************/ 129 130 131 typedef enum { 132 NOT_CONNECTED, READY, WORKING, DOWNLOAD 133 } mdc800_state; 134 135 136 /* Data for the driver */ 137 struct mdc800_data 138 { 139 struct usb_device * dev; // Device Data 140 mdc800_state state; 141 142 unsigned int endpoint [4]; 143 144 struct urb * irq_urb; 145 wait_queue_head_t irq_wait; 146 int irq_woken; 147 char* irq_urb_buffer; 148 149 int camera_busy; // is camera busy ? 150 int camera_request_ready; // Status to synchronize with irq 151 char camera_response [8]; // last Bytes send after busy 152 153 struct urb * write_urb; 154 char* write_urb_buffer; 155 wait_queue_head_t write_wait; 156 int written; 157 158 159 struct urb * download_urb; 160 char* download_urb_buffer; 161 wait_queue_head_t download_wait; 162 int downloaded; 163 int download_left; // Bytes left to download ? 164 165 166 /* Device Data */ 167 char out [64]; // Answer Buffer 168 int out_ptr; // Index to the first not readen byte 169 int out_count; // Bytes in the buffer 170 171 int open; // Camera device open ? 172 struct mutex io_lock; // IO -lock 173 174 char in [8]; // Command Input Buffer 175 int in_count; 176 177 int pic_index; // Cache for the Imagesize (-1 for nothing cached ) 178 int pic_len; 179 int minor; 180 }; 181 182 183 /* Specification of the Endpoints */ 184 static struct usb_endpoint_descriptor mdc800_ed [4] = 185 { 186 { 187 .bLength = 0, 188 .bDescriptorType = 0, 189 .bEndpointAddress = 0x01, 190 .bmAttributes = 0x02, 191 .wMaxPacketSize = cpu_to_le16(8), 192 .bInterval = 0, 193 .bRefresh = 0, 194 .bSynchAddress = 0, 195 }, 196 { 197 .bLength = 0, 198 .bDescriptorType = 0, 199 .bEndpointAddress = 0x82, 200 .bmAttributes = 0x03, 201 .wMaxPacketSize = cpu_to_le16(8), 202 .bInterval = 0, 203 .bRefresh = 0, 204 .bSynchAddress = 0, 205 }, 206 { 207 .bLength = 0, 208 .bDescriptorType = 0, 209 .bEndpointAddress = 0x03, 210 .bmAttributes = 0x02, 211 .wMaxPacketSize = cpu_to_le16(64), 212 .bInterval = 0, 213 .bRefresh = 0, 214 .bSynchAddress = 0, 215 }, 216 { 217 .bLength = 0, 218 .bDescriptorType = 0, 219 .bEndpointAddress = 0x84, 220 .bmAttributes = 0x02, 221 .wMaxPacketSize = cpu_to_le16(64), 222 .bInterval = 0, 223 .bRefresh = 0, 224 .bSynchAddress = 0, 225 }, 226 }; 227 228 /* The Variable used by the driver */ 229 static struct mdc800_data* mdc800; 230 231 232 /*************************************************************************** 233 The USB Part of the driver 234 ****************************************************************************/ 235 236 static int mdc800_endpoint_equals (struct usb_endpoint_descriptor *a,struct usb_endpoint_descriptor *b) 237 { 238 return ( 239 ( a->bEndpointAddress == b->bEndpointAddress ) 240 && ( a->bmAttributes == b->bmAttributes ) 241 && ( a->wMaxPacketSize == b->wMaxPacketSize ) 242 ); 243 } 244 245 246 /* 247 * Checks whether the camera responds busy 248 */ 249 static int mdc800_isBusy (char* ch) 250 { 251 int i=0; 252 while (i<8) 253 { 254 if (ch [i] != (char)0x99) 255 return 0; 256 i++; 257 } 258 return 1; 259 } 260 261 262 /* 263 * Checks whether the Camera is ready 264 */ 265 static int mdc800_isReady (char *ch) 266 { 267 int i=0; 268 while (i<8) 269 { 270 if (ch [i] != (char)0xbb) 271 return 0; 272 i++; 273 } 274 return 1; 275 } 276 277 278 279 /* 280 * USB IRQ Handler for InputLine 281 */ 282 static void mdc800_usb_irq (struct urb *urb) 283 { 284 int data_received=0, wake_up; 285 unsigned char* b=urb->transfer_buffer; 286 struct mdc800_data* mdc800=urb->context; 287 struct device *dev = &mdc800->dev->dev; 288 int status = urb->status; 289 290 if (status >= 0) { 291 if (mdc800_isBusy (b)) 292 { 293 if (!mdc800->camera_busy) 294 { 295 mdc800->camera_busy=1; 296 dev_dbg(dev, "gets busy\n"); 297 } 298 } 299 else 300 { 301 if (mdc800->camera_busy && mdc800_isReady (b)) 302 { 303 mdc800->camera_busy=0; 304 dev_dbg(dev, "gets ready\n"); 305 } 306 } 307 if (!(mdc800_isBusy (b) || mdc800_isReady (b))) 308 { 309 /* Store Data in camera_answer field */ 310 dev_dbg(dev, "%i %i %i %i %i %i %i %i \n",b[0],b[1],b[2],b[3],b[4],b[5],b[6],b[7]); 311 312 memcpy (mdc800->camera_response,b,8); 313 data_received=1; 314 } 315 } 316 wake_up= ( mdc800->camera_request_ready > 0 ) 317 && 318 ( 319 ((mdc800->camera_request_ready == 1) && (!mdc800->camera_busy)) 320 || 321 ((mdc800->camera_request_ready == 2) && data_received) 322 || 323 ((mdc800->camera_request_ready == 3) && (mdc800->camera_busy)) 324 || 325 (status < 0) 326 ); 327 328 if (wake_up) 329 { 330 mdc800->camera_request_ready=0; 331 mdc800->irq_woken=1; 332 wake_up (&mdc800->irq_wait); 333 } 334 } 335 336 337 /* 338 * Waits a while until the irq responds that camera is ready 339 * 340 * mode : 0: Wait for camera gets ready 341 * 1: Wait for receiving data 342 * 2: Wait for camera gets busy 343 * 344 * msec: Time to wait 345 */ 346 static int mdc800_usb_waitForIRQ (int mode, int msec) 347 { 348 mdc800->camera_request_ready=1+mode; 349 350 wait_event_timeout(mdc800->irq_wait, mdc800->irq_woken, 351 msecs_to_jiffies(msec)); 352 mdc800->irq_woken = 0; 353 354 if (mdc800->camera_request_ready>0) 355 { 356 mdc800->camera_request_ready=0; 357 dev_err(&mdc800->dev->dev, "timeout waiting for camera.\n"); 358 return -1; 359 } 360 361 if (mdc800->state == NOT_CONNECTED) 362 { 363 printk(KERN_WARNING "mdc800: Camera gets disconnected " 364 "during waiting for irq.\n"); 365 mdc800->camera_request_ready=0; 366 return -2; 367 } 368 369 return 0; 370 } 371 372 373 /* 374 * The write_urb callback function 375 */ 376 static void mdc800_usb_write_notify (struct urb *urb) 377 { 378 struct mdc800_data* mdc800=urb->context; 379 int status = urb->status; 380 381 if (status != 0) 382 dev_err(&mdc800->dev->dev, 383 "writing command fails (status=%i)\n", status); 384 else 385 mdc800->state=READY; 386 mdc800->written = 1; 387 wake_up (&mdc800->write_wait); 388 } 389 390 391 /* 392 * The download_urb callback function 393 */ 394 static void mdc800_usb_download_notify (struct urb *urb) 395 { 396 struct mdc800_data* mdc800=urb->context; 397 int status = urb->status; 398 399 if (status == 0) { 400 /* Fill output buffer with these data */ 401 memcpy (mdc800->out, urb->transfer_buffer, 64); 402 mdc800->out_count=64; 403 mdc800->out_ptr=0; 404 mdc800->download_left-=64; 405 if (mdc800->download_left == 0) 406 { 407 mdc800->state=READY; 408 } 409 } else { 410 dev_err(&mdc800->dev->dev, 411 "request bytes fails (status:%i)\n", status); 412 } 413 mdc800->downloaded = 1; 414 wake_up (&mdc800->download_wait); 415 } 416 417 418 /*************************************************************************** 419 Probing for the Camera 420 ***************************************************************************/ 421 422 static struct usb_driver mdc800_usb_driver; 423 static const struct file_operations mdc800_device_ops; 424 static struct usb_class_driver mdc800_class = { 425 .name = "mdc800%d", 426 .fops = &mdc800_device_ops, 427 .minor_base = MDC800_DEVICE_MINOR_BASE, 428 }; 429 430 431 /* 432 * Callback to search the Mustek MDC800 on the USB Bus 433 */ 434 static int mdc800_usb_probe (struct usb_interface *intf, 435 const struct usb_device_id *id) 436 { 437 int i,j; 438 struct usb_host_interface *intf_desc; 439 struct usb_device *dev = interface_to_usbdev (intf); 440 int irq_interval=0; 441 int retval; 442 443 dev_dbg(&intf->dev, "(%s) called.\n", __func__); 444 445 446 if (mdc800->dev != NULL) 447 { 448 dev_warn(&intf->dev, "only one Mustek MDC800 is supported.\n"); 449 return -ENODEV; 450 } 451 452 if (dev->descriptor.bNumConfigurations != 1) 453 { 454 dev_err(&intf->dev, 455 "probe fails -> wrong Number of Configuration\n"); 456 return -ENODEV; 457 } 458 intf_desc = intf->cur_altsetting; 459 460 if ( 461 ( intf_desc->desc.bInterfaceClass != 0xff ) 462 || ( intf_desc->desc.bInterfaceSubClass != 0 ) 463 || ( intf_desc->desc.bInterfaceProtocol != 0 ) 464 || ( intf_desc->desc.bNumEndpoints != 4) 465 ) 466 { 467 dev_err(&intf->dev, "probe fails -> wrong Interface\n"); 468 return -ENODEV; 469 } 470 471 /* Check the Endpoints */ 472 for (i=0; i<4; i++) 473 { 474 mdc800->endpoint[i]=-1; 475 for (j=0; j<4; j++) 476 { 477 if (mdc800_endpoint_equals (&intf_desc->endpoint [j].desc,&mdc800_ed [i])) 478 { 479 mdc800->endpoint[i]=intf_desc->endpoint [j].desc.bEndpointAddress ; 480 if (i==1) 481 { 482 irq_interval=intf_desc->endpoint [j].desc.bInterval; 483 } 484 } 485 } 486 if (mdc800->endpoint[i] == -1) 487 { 488 dev_err(&intf->dev, "probe fails -> Wrong Endpoints.\n"); 489 return -ENODEV; 490 } 491 } 492 493 494 dev_info(&intf->dev, "Found Mustek MDC800 on USB.\n"); 495 496 mutex_lock(&mdc800->io_lock); 497 498 retval = usb_register_dev(intf, &mdc800_class); 499 if (retval) { 500 dev_err(&intf->dev, "Not able to get a minor for this device.\n"); 501 mutex_unlock(&mdc800->io_lock); 502 return -ENODEV; 503 } 504 505 mdc800->dev=dev; 506 mdc800->open=0; 507 508 /* Setup URB Structs */ 509 usb_fill_int_urb ( 510 mdc800->irq_urb, 511 mdc800->dev, 512 usb_rcvintpipe (mdc800->dev,mdc800->endpoint [1]), 513 mdc800->irq_urb_buffer, 514 8, 515 mdc800_usb_irq, 516 mdc800, 517 irq_interval 518 ); 519 520 usb_fill_bulk_urb ( 521 mdc800->write_urb, 522 mdc800->dev, 523 usb_sndbulkpipe (mdc800->dev, mdc800->endpoint[0]), 524 mdc800->write_urb_buffer, 525 8, 526 mdc800_usb_write_notify, 527 mdc800 528 ); 529 530 usb_fill_bulk_urb ( 531 mdc800->download_urb, 532 mdc800->dev, 533 usb_rcvbulkpipe (mdc800->dev, mdc800->endpoint [3]), 534 mdc800->download_urb_buffer, 535 64, 536 mdc800_usb_download_notify, 537 mdc800 538 ); 539 540 mdc800->state=READY; 541 542 mutex_unlock(&mdc800->io_lock); 543 544 usb_set_intfdata(intf, mdc800); 545 return 0; 546 } 547 548 549 /* 550 * Disconnect USB device (maybe the MDC800) 551 */ 552 static void mdc800_usb_disconnect (struct usb_interface *intf) 553 { 554 struct mdc800_data* mdc800 = usb_get_intfdata(intf); 555 556 dev_dbg(&intf->dev, "(%s) called\n", __func__); 557 558 if (mdc800) { 559 if (mdc800->state == NOT_CONNECTED) 560 return; 561 562 usb_deregister_dev(intf, &mdc800_class); 563 564 /* must be under lock to make sure no URB 565 is submitted after usb_kill_urb() */ 566 mutex_lock(&mdc800->io_lock); 567 mdc800->state=NOT_CONNECTED; 568 569 usb_kill_urb(mdc800->irq_urb); 570 usb_kill_urb(mdc800->write_urb); 571 usb_kill_urb(mdc800->download_urb); 572 mutex_unlock(&mdc800->io_lock); 573 574 mdc800->dev = NULL; 575 usb_set_intfdata(intf, NULL); 576 } 577 dev_info(&intf->dev, "Mustek MDC800 disconnected from USB.\n"); 578 } 579 580 581 /*************************************************************************** 582 The Misc device Part (file_operations) 583 ****************************************************************************/ 584 585 /* 586 * This Function calc the Answersize for a command. 587 */ 588 static int mdc800_getAnswerSize (char command) 589 { 590 switch ((unsigned char) command) 591 { 592 case 0x2a: 593 case 0x49: 594 case 0x51: 595 case 0x0d: 596 case 0x20: 597 case 0x07: 598 case 0x01: 599 case 0x25: 600 case 0x00: 601 return 8; 602 603 case 0x05: 604 case 0x3e: 605 return mdc800->pic_len; 606 607 case 0x09: 608 return 4096; 609 610 default: 611 return 0; 612 } 613 } 614 615 616 /* 617 * Init the device: (1) alloc mem (2) Increase MOD Count .. 618 */ 619 static int mdc800_device_open (struct inode* inode, struct file *file) 620 { 621 int retval=0; 622 int errn=0; 623 624 mutex_lock(&mdc800->io_lock); 625 626 if (mdc800->state == NOT_CONNECTED) 627 { 628 errn=-EBUSY; 629 goto error_out; 630 } 631 if (mdc800->open) 632 { 633 errn=-EBUSY; 634 goto error_out; 635 } 636 637 mdc800->in_count=0; 638 mdc800->out_count=0; 639 mdc800->out_ptr=0; 640 mdc800->pic_index=0; 641 mdc800->pic_len=-1; 642 mdc800->download_left=0; 643 644 mdc800->camera_busy=0; 645 mdc800->camera_request_ready=0; 646 647 retval=0; 648 mdc800->irq_urb->dev = mdc800->dev; 649 retval = usb_submit_urb (mdc800->irq_urb, GFP_KERNEL); 650 if (retval) { 651 dev_err(&mdc800->dev->dev, 652 "request USB irq fails (submit_retval=%i).\n", retval); 653 errn = -EIO; 654 goto error_out; 655 } 656 657 mdc800->open=1; 658 dev_dbg(&mdc800->dev->dev, "Mustek MDC800 device opened.\n"); 659 660 error_out: 661 mutex_unlock(&mdc800->io_lock); 662 return errn; 663 } 664 665 666 /* 667 * Close the Camera and release Memory 668 */ 669 static int mdc800_device_release (struct inode* inode, struct file *file) 670 { 671 int retval=0; 672 673 mutex_lock(&mdc800->io_lock); 674 if (mdc800->open && (mdc800->state != NOT_CONNECTED)) 675 { 676 usb_kill_urb(mdc800->irq_urb); 677 usb_kill_urb(mdc800->write_urb); 678 usb_kill_urb(mdc800->download_urb); 679 mdc800->open=0; 680 } 681 else 682 { 683 retval=-EIO; 684 } 685 686 mutex_unlock(&mdc800->io_lock); 687 return retval; 688 } 689 690 691 /* 692 * The Device read callback Function 693 */ 694 static ssize_t mdc800_device_read (struct file *file, char __user *buf, size_t len, loff_t *pos) 695 { 696 size_t left=len, sts=len; /* single transfer size */ 697 char __user *ptr = buf; 698 int retval; 699 700 mutex_lock(&mdc800->io_lock); 701 if (mdc800->state == NOT_CONNECTED) 702 { 703 mutex_unlock(&mdc800->io_lock); 704 return -EBUSY; 705 } 706 if (mdc800->state == WORKING) 707 { 708 printk(KERN_WARNING "mdc800: Illegal State \"working\"" 709 "reached during read ?!\n"); 710 mutex_unlock(&mdc800->io_lock); 711 return -EBUSY; 712 } 713 if (!mdc800->open) 714 { 715 mutex_unlock(&mdc800->io_lock); 716 return -EBUSY; 717 } 718 719 while (left) 720 { 721 if (signal_pending (current)) 722 { 723 mutex_unlock(&mdc800->io_lock); 724 return -EINTR; 725 } 726 727 sts=left > (mdc800->out_count-mdc800->out_ptr)?mdc800->out_count-mdc800->out_ptr:left; 728 729 if (sts <= 0) 730 { 731 /* Too less Data in buffer */ 732 if (mdc800->state == DOWNLOAD) 733 { 734 mdc800->out_count=0; 735 mdc800->out_ptr=0; 736 737 /* Download -> Request new bytes */ 738 mdc800->download_urb->dev = mdc800->dev; 739 retval = usb_submit_urb (mdc800->download_urb, GFP_KERNEL); 740 if (retval) { 741 dev_err(&mdc800->dev->dev, 742 "Can't submit download urb " 743 "(retval=%i)\n", retval); 744 mutex_unlock(&mdc800->io_lock); 745 return len-left; 746 } 747 wait_event_timeout(mdc800->download_wait, 748 mdc800->downloaded, 749 msecs_to_jiffies(TO_DOWNLOAD_GET_READY)); 750 mdc800->downloaded = 0; 751 if (mdc800->download_urb->status != 0) 752 { 753 dev_err(&mdc800->dev->dev, 754 "request download-bytes fails " 755 "(status=%i)\n", 756 mdc800->download_urb->status); 757 mutex_unlock(&mdc800->io_lock); 758 return len-left; 759 } 760 } 761 else 762 { 763 /* No more bytes -> that's an error*/ 764 mutex_unlock(&mdc800->io_lock); 765 return -EIO; 766 } 767 } 768 else 769 { 770 /* Copy Bytes */ 771 if (copy_to_user(ptr, &mdc800->out [mdc800->out_ptr], 772 sts)) { 773 mutex_unlock(&mdc800->io_lock); 774 return -EFAULT; 775 } 776 ptr+=sts; 777 left-=sts; 778 mdc800->out_ptr+=sts; 779 } 780 } 781 782 mutex_unlock(&mdc800->io_lock); 783 return len-left; 784 } 785 786 787 /* 788 * The Device write callback Function 789 * If a 8Byte Command is received, it will be send to the camera. 790 * After this the driver initiates the request for the answer or 791 * just waits until the camera becomes ready. 792 */ 793 static ssize_t mdc800_device_write (struct file *file, const char __user *buf, size_t len, loff_t *pos) 794 { 795 size_t i=0; 796 int retval; 797 798 mutex_lock(&mdc800->io_lock); 799 if (mdc800->state != READY) 800 { 801 mutex_unlock(&mdc800->io_lock); 802 return -EBUSY; 803 } 804 if (!mdc800->open ) 805 { 806 mutex_unlock(&mdc800->io_lock); 807 return -EBUSY; 808 } 809 810 while (i<len) 811 { 812 unsigned char c; 813 if (signal_pending (current)) 814 { 815 mutex_unlock(&mdc800->io_lock); 816 return -EINTR; 817 } 818 819 if(get_user(c, buf+i)) 820 { 821 mutex_unlock(&mdc800->io_lock); 822 return -EFAULT; 823 } 824 825 /* check for command start */ 826 if (c == 0x55) 827 { 828 mdc800->in_count=0; 829 mdc800->out_count=0; 830 mdc800->out_ptr=0; 831 mdc800->download_left=0; 832 } 833 834 /* save command byte */ 835 if (mdc800->in_count < 8) 836 { 837 mdc800->in[mdc800->in_count] = c; 838 mdc800->in_count++; 839 } 840 else 841 { 842 mutex_unlock(&mdc800->io_lock); 843 return -EIO; 844 } 845 846 /* Command Buffer full ? -> send it to camera */ 847 if (mdc800->in_count == 8) 848 { 849 int answersize; 850 851 if (mdc800_usb_waitForIRQ (0,TO_GET_READY)) 852 { 853 dev_err(&mdc800->dev->dev, 854 "Camera didn't get ready.\n"); 855 mutex_unlock(&mdc800->io_lock); 856 return -EIO; 857 } 858 859 answersize=mdc800_getAnswerSize (mdc800->in[1]); 860 861 mdc800->state=WORKING; 862 memcpy (mdc800->write_urb->transfer_buffer, mdc800->in,8); 863 mdc800->write_urb->dev = mdc800->dev; 864 retval = usb_submit_urb (mdc800->write_urb, GFP_KERNEL); 865 if (retval) { 866 dev_err(&mdc800->dev->dev, 867 "submitting write urb fails " 868 "(retval=%i)\n", retval); 869 mutex_unlock(&mdc800->io_lock); 870 return -EIO; 871 } 872 wait_event_timeout(mdc800->write_wait, mdc800->written, 873 msecs_to_jiffies(TO_WRITE_GET_READY)); 874 mdc800->written = 0; 875 if (mdc800->state == WORKING) 876 { 877 usb_kill_urb(mdc800->write_urb); 878 mutex_unlock(&mdc800->io_lock); 879 return -EIO; 880 } 881 882 switch ((unsigned char) mdc800->in[1]) 883 { 884 case 0x05: /* Download Image */ 885 case 0x3e: /* Take shot in Fine Mode (WCam Mode) */ 886 if (mdc800->pic_len < 0) 887 { 888 dev_err(&mdc800->dev->dev, 889 "call 0x07 before " 890 "0x05,0x3e\n"); 891 mdc800->state=READY; 892 mutex_unlock(&mdc800->io_lock); 893 return -EIO; 894 } 895 mdc800->pic_len=-1; 896 897 case 0x09: /* Download Thumbnail */ 898 mdc800->download_left=answersize+64; 899 mdc800->state=DOWNLOAD; 900 mdc800_usb_waitForIRQ (0,TO_DOWNLOAD_GET_BUSY); 901 break; 902 903 904 default: 905 if (answersize) 906 { 907 908 if (mdc800_usb_waitForIRQ (1,TO_READ_FROM_IRQ)) 909 { 910 dev_err(&mdc800->dev->dev, "requesting answer from irq fails\n"); 911 mutex_unlock(&mdc800->io_lock); 912 return -EIO; 913 } 914 915 /* Write dummy data, (this is ugly but part of the USB Protocol */ 916 /* if you use endpoint 1 as bulk and not as irq) */ 917 memcpy (mdc800->out, mdc800->camera_response,8); 918 919 /* This is the interpreted answer */ 920 memcpy (&mdc800->out[8], mdc800->camera_response,8); 921 922 mdc800->out_ptr=0; 923 mdc800->out_count=16; 924 925 /* Cache the Imagesize, if command was getImageSize */ 926 if (mdc800->in [1] == (char) 0x07) 927 { 928 mdc800->pic_len=(int) 65536*(unsigned char) mdc800->camera_response[0]+256*(unsigned char) mdc800->camera_response[1]+(unsigned char) mdc800->camera_response[2]; 929 930 dev_dbg(&mdc800->dev->dev, "cached imagesize = %i\n", mdc800->pic_len); 931 } 932 933 } 934 else 935 { 936 if (mdc800_usb_waitForIRQ (0,TO_DEFAULT_COMMAND)) 937 { 938 dev_err(&mdc800->dev->dev, "Command Timeout.\n"); 939 mutex_unlock(&mdc800->io_lock); 940 return -EIO; 941 } 942 } 943 mdc800->state=READY; 944 break; 945 } 946 } 947 i++; 948 } 949 mutex_unlock(&mdc800->io_lock); 950 return i; 951 } 952 953 954 /*************************************************************************** 955 Init and Cleanup this driver (Structs and types) 956 ****************************************************************************/ 957 958 /* File Operations of this drivers */ 959 static const struct file_operations mdc800_device_ops = 960 { 961 .owner = THIS_MODULE, 962 .read = mdc800_device_read, 963 .write = mdc800_device_write, 964 .open = mdc800_device_open, 965 .release = mdc800_device_release, 966 .llseek = noop_llseek, 967 }; 968 969 970 971 static const struct usb_device_id mdc800_table[] = { 972 { USB_DEVICE(MDC800_VENDOR_ID, MDC800_PRODUCT_ID) }, 973 { } /* Terminating entry */ 974 }; 975 976 MODULE_DEVICE_TABLE (usb, mdc800_table); 977 /* 978 * USB Driver Struct for this device 979 */ 980 static struct usb_driver mdc800_usb_driver = 981 { 982 .name = "mdc800", 983 .probe = mdc800_usb_probe, 984 .disconnect = mdc800_usb_disconnect, 985 .id_table = mdc800_table 986 }; 987 988 989 990 /************************************************************************ 991 Init and Cleanup this driver (Main Functions) 992 *************************************************************************/ 993 994 static int __init usb_mdc800_init (void) 995 { 996 int retval = -ENODEV; 997 /* Allocate Memory */ 998 mdc800=kzalloc (sizeof (struct mdc800_data), GFP_KERNEL); 999 if (!mdc800) 1000 goto cleanup_on_fail; 1001 1002 mdc800->dev = NULL; 1003 mdc800->state=NOT_CONNECTED; 1004 mutex_init (&mdc800->io_lock); 1005 1006 init_waitqueue_head (&mdc800->irq_wait); 1007 init_waitqueue_head (&mdc800->write_wait); 1008 init_waitqueue_head (&mdc800->download_wait); 1009 1010 mdc800->irq_woken = 0; 1011 mdc800->downloaded = 0; 1012 mdc800->written = 0; 1013 1014 mdc800->irq_urb_buffer=kmalloc (8, GFP_KERNEL); 1015 if (!mdc800->irq_urb_buffer) 1016 goto cleanup_on_fail; 1017 mdc800->write_urb_buffer=kmalloc (8, GFP_KERNEL); 1018 if (!mdc800->write_urb_buffer) 1019 goto cleanup_on_fail; 1020 mdc800->download_urb_buffer=kmalloc (64, GFP_KERNEL); 1021 if (!mdc800->download_urb_buffer) 1022 goto cleanup_on_fail; 1023 1024 mdc800->irq_urb=usb_alloc_urb (0, GFP_KERNEL); 1025 if (!mdc800->irq_urb) 1026 goto cleanup_on_fail; 1027 mdc800->download_urb=usb_alloc_urb (0, GFP_KERNEL); 1028 if (!mdc800->download_urb) 1029 goto cleanup_on_fail; 1030 mdc800->write_urb=usb_alloc_urb (0, GFP_KERNEL); 1031 if (!mdc800->write_urb) 1032 goto cleanup_on_fail; 1033 1034 /* Register the driver */ 1035 retval = usb_register(&mdc800_usb_driver); 1036 if (retval) 1037 goto cleanup_on_fail; 1038 1039 printk(KERN_INFO KBUILD_MODNAME ": " DRIVER_VERSION ":" 1040 DRIVER_DESC "\n"); 1041 1042 return 0; 1043 1044 /* Clean driver up, when something fails */ 1045 1046 cleanup_on_fail: 1047 1048 if (mdc800 != NULL) 1049 { 1050 printk(KERN_ERR "mdc800: can't alloc memory!\n"); 1051 1052 kfree(mdc800->download_urb_buffer); 1053 kfree(mdc800->write_urb_buffer); 1054 kfree(mdc800->irq_urb_buffer); 1055 1056 usb_free_urb(mdc800->write_urb); 1057 usb_free_urb(mdc800->download_urb); 1058 usb_free_urb(mdc800->irq_urb); 1059 1060 kfree (mdc800); 1061 } 1062 mdc800 = NULL; 1063 return retval; 1064 } 1065 1066 1067 static void __exit usb_mdc800_cleanup (void) 1068 { 1069 usb_deregister (&mdc800_usb_driver); 1070 1071 usb_free_urb (mdc800->irq_urb); 1072 usb_free_urb (mdc800->download_urb); 1073 usb_free_urb (mdc800->write_urb); 1074 1075 kfree (mdc800->irq_urb_buffer); 1076 kfree (mdc800->write_urb_buffer); 1077 kfree (mdc800->download_urb_buffer); 1078 1079 kfree (mdc800); 1080 mdc800 = NULL; 1081 } 1082 1083 module_init (usb_mdc800_init); 1084 module_exit (usb_mdc800_cleanup); 1085 1086 MODULE_AUTHOR( DRIVER_AUTHOR ); 1087 MODULE_DESCRIPTION( DRIVER_DESC ); 1088 MODULE_LICENSE("GPL"); 1089 1090