xref: /openbmc/u-boot/common/usb_storage.c (revision 32151d40)
1 // SPDX-License-Identifier: GPL-2.0+
2 /*
3  * Most of this source has been derived from the Linux USB
4  * project:
5  *   (c) 1999-2002 Matthew Dharm (mdharm-usb@one-eyed-alien.net)
6  *   (c) 2000 David L. Brown, Jr. (usb-storage@davidb.org)
7  *   (c) 1999 Michael Gee (michael@linuxspecific.com)
8  *   (c) 2000 Yggdrasil Computing, Inc.
9  *
10  *
11  * Adapted for U-Boot:
12  *   (C) Copyright 2001 Denis Peter, MPL AG Switzerland
13  * Driver model conversion:
14  *   (C) Copyright 2015 Google, Inc
15  *
16  * For BBB support (C) Copyright 2003
17  * Gary Jennejohn, DENX Software Engineering <garyj@denx.de>
18  *
19  * BBB support based on /sys/dev/usb/umass.c from
20  * FreeBSD.
21  */
22 
23 /* Note:
24  * Currently only the CBI transport protocoll has been implemented, and it
25  * is only tested with a TEAC USB Floppy. Other Massstorages with CBI or CB
26  * transport protocoll may work as well.
27  */
28 /*
29  * New Note:
30  * Support for USB Mass Storage Devices (BBB) has been added. It has
31  * only been tested with USB memory sticks.
32  */
33 
34 
35 #include <common.h>
36 #include <command.h>
37 #include <dm.h>
38 #include <errno.h>
39 #include <inttypes.h>
40 #include <mapmem.h>
41 #include <memalign.h>
42 #include <asm/byteorder.h>
43 #include <asm/processor.h>
44 #include <dm/device-internal.h>
45 #include <dm/lists.h>
46 
47 #include <part.h>
48 #include <usb.h>
49 
50 #undef BBB_COMDAT_TRACE
51 #undef BBB_XPORT_TRACE
52 
53 #include <scsi.h>
54 /* direction table -- this indicates the direction of the data
55  * transfer for each command code -- a 1 indicates input
56  */
57 static const unsigned char us_direction[256/8] = {
58 	0x28, 0x81, 0x14, 0x14, 0x20, 0x01, 0x90, 0x77,
59 	0x0C, 0x20, 0x00, 0x04, 0x00, 0x00, 0x00, 0x00,
60 	0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0x00, 0x01,
61 	0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
62 };
63 #define US_DIRECTION(x) ((us_direction[x>>3] >> (x & 7)) & 1)
64 
65 static struct scsi_cmd usb_ccb __aligned(ARCH_DMA_MINALIGN);
66 static __u32 CBWTag;
67 
68 static int usb_max_devs; /* number of highest available usb device */
69 
70 #ifndef CONFIG_BLK
71 static struct blk_desc usb_dev_desc[USB_MAX_STOR_DEV];
72 #endif
73 
74 struct us_data;
75 typedef int (*trans_cmnd)(struct scsi_cmd *cb, struct us_data *data);
76 typedef int (*trans_reset)(struct us_data *data);
77 
78 struct us_data {
79 	struct usb_device *pusb_dev;	 /* this usb_device */
80 
81 	unsigned int	flags;			/* from filter initially */
82 #	define USB_READY	(1 << 0)
83 	unsigned char	ifnum;			/* interface number */
84 	unsigned char	ep_in;			/* in endpoint */
85 	unsigned char	ep_out;			/* out ....... */
86 	unsigned char	ep_int;			/* interrupt . */
87 	unsigned char	subclass;		/* as in overview */
88 	unsigned char	protocol;		/* .............. */
89 	unsigned char	attention_done;		/* force attn on first cmd */
90 	unsigned short	ip_data;		/* interrupt data */
91 	int		action;			/* what to do */
92 	int		ip_wanted;		/* needed */
93 	int		*irq_handle;		/* for USB int requests */
94 	unsigned int	irqpipe;	 	/* pipe for release_irq */
95 	unsigned char	irqmaxp;		/* max packed for irq Pipe */
96 	unsigned char	irqinterval;		/* Intervall for IRQ Pipe */
97 	struct scsi_cmd	*srb;			/* current srb */
98 	trans_reset	transport_reset;	/* reset routine */
99 	trans_cmnd	transport;		/* transport routine */
100 	unsigned short	max_xfer_blk;		/* maximum transfer blocks */
101 };
102 
103 #ifndef CONFIG_BLK
104 static struct us_data usb_stor[USB_MAX_STOR_DEV];
105 #endif
106 
107 #define USB_STOR_TRANSPORT_GOOD	   0
108 #define USB_STOR_TRANSPORT_FAILED -1
109 #define USB_STOR_TRANSPORT_ERROR  -2
110 
111 int usb_stor_get_info(struct usb_device *dev, struct us_data *us,
112 		      struct blk_desc *dev_desc);
113 int usb_storage_probe(struct usb_device *dev, unsigned int ifnum,
114 		      struct us_data *ss);
115 #ifdef CONFIG_BLK
116 static unsigned long usb_stor_read(struct udevice *dev, lbaint_t blknr,
117 				   lbaint_t blkcnt, void *buffer);
118 static unsigned long usb_stor_write(struct udevice *dev, lbaint_t blknr,
119 				    lbaint_t blkcnt, const void *buffer);
120 #else
121 static unsigned long usb_stor_read(struct blk_desc *block_dev, lbaint_t blknr,
122 				   lbaint_t blkcnt, void *buffer);
123 static unsigned long usb_stor_write(struct blk_desc *block_dev, lbaint_t blknr,
124 				    lbaint_t blkcnt, const void *buffer);
125 #endif
126 void uhci_show_temp_int_td(void);
127 
128 static void usb_show_progress(void)
129 {
130 	debug(".");
131 }
132 
133 /*******************************************************************************
134  * show info on storage devices; 'usb start/init' must be invoked earlier
135  * as we only retrieve structures populated during devices initialization
136  */
137 int usb_stor_info(void)
138 {
139 	int count = 0;
140 #ifdef CONFIG_BLK
141 	struct udevice *dev;
142 
143 	for (blk_first_device(IF_TYPE_USB, &dev);
144 	     dev;
145 	     blk_next_device(&dev)) {
146 		struct blk_desc *desc = dev_get_uclass_platdata(dev);
147 
148 		printf("  Device %d: ", desc->devnum);
149 		dev_print(desc);
150 		count++;
151 	}
152 #else
153 	int i;
154 
155 	if (usb_max_devs > 0) {
156 		for (i = 0; i < usb_max_devs; i++) {
157 			printf("  Device %d: ", i);
158 			dev_print(&usb_dev_desc[i]);
159 		}
160 		return 0;
161 	}
162 #endif
163 	if (!count) {
164 		printf("No storage devices, perhaps not 'usb start'ed..?\n");
165 		return 1;
166 	}
167 
168 	return 0;
169 }
170 
171 static unsigned int usb_get_max_lun(struct us_data *us)
172 {
173 	int len;
174 	ALLOC_CACHE_ALIGN_BUFFER(unsigned char, result, 1);
175 	len = usb_control_msg(us->pusb_dev,
176 			      usb_rcvctrlpipe(us->pusb_dev, 0),
177 			      US_BBB_GET_MAX_LUN,
178 			      USB_TYPE_CLASS | USB_RECIP_INTERFACE | USB_DIR_IN,
179 			      0, us->ifnum,
180 			      result, sizeof(char),
181 			      USB_CNTL_TIMEOUT * 5);
182 	debug("Get Max LUN -> len = %i, result = %i\n", len, (int) *result);
183 	return (len > 0) ? *result : 0;
184 }
185 
186 static int usb_stor_probe_device(struct usb_device *udev)
187 {
188 	int lun, max_lun;
189 
190 #ifdef CONFIG_BLK
191 	struct us_data *data;
192 	int ret;
193 #else
194 	int start;
195 
196 	if (udev == NULL)
197 		return -ENOENT; /* no more devices available */
198 #endif
199 
200 	debug("\n\nProbing for storage\n");
201 #ifdef CONFIG_BLK
202 	/*
203 	 * We store the us_data in the mass storage device's platdata. It
204 	 * is shared by all LUNs (block devices) attached to this mass storage
205 	 * device.
206 	 */
207 	data = dev_get_platdata(udev->dev);
208 	if (!usb_storage_probe(udev, 0, data))
209 		return 0;
210 	max_lun = usb_get_max_lun(data);
211 	for (lun = 0; lun <= max_lun; lun++) {
212 		struct blk_desc *blkdev;
213 		struct udevice *dev;
214 		char str[10];
215 
216 		snprintf(str, sizeof(str), "lun%d", lun);
217 		ret = blk_create_devicef(udev->dev, "usb_storage_blk", str,
218 					 IF_TYPE_USB, usb_max_devs, 512, 0,
219 					 &dev);
220 		if (ret) {
221 			debug("Cannot bind driver\n");
222 			return ret;
223 		}
224 
225 		blkdev = dev_get_uclass_platdata(dev);
226 		blkdev->target = 0xff;
227 		blkdev->lun = lun;
228 
229 		ret = usb_stor_get_info(udev, data, blkdev);
230 		if (ret == 1)
231 			ret = blk_prepare_device(dev);
232 		if (!ret) {
233 			usb_max_devs++;
234 			debug("%s: Found device %p\n", __func__, udev);
235 		} else {
236 			debug("usb_stor_get_info: Invalid device\n");
237 			ret = device_unbind(dev);
238 			if (ret)
239 				return ret;
240 		}
241 	}
242 #else
243 	/* We don't have space to even probe if we hit the maximum */
244 	if (usb_max_devs == USB_MAX_STOR_DEV) {
245 		printf("max USB Storage Device reached: %d stopping\n",
246 		       usb_max_devs);
247 		return -ENOSPC;
248 	}
249 
250 	if (!usb_storage_probe(udev, 0, &usb_stor[usb_max_devs]))
251 		return 0;
252 
253 	/*
254 	 * OK, it's a storage device.  Iterate over its LUNs and populate
255 	 * usb_dev_desc'
256 	 */
257 	start = usb_max_devs;
258 
259 	max_lun = usb_get_max_lun(&usb_stor[usb_max_devs]);
260 	for (lun = 0; lun <= max_lun && usb_max_devs < USB_MAX_STOR_DEV;
261 	     lun++) {
262 		struct blk_desc *blkdev;
263 
264 		blkdev = &usb_dev_desc[usb_max_devs];
265 		memset(blkdev, '\0', sizeof(struct blk_desc));
266 		blkdev->if_type = IF_TYPE_USB;
267 		blkdev->devnum = usb_max_devs;
268 		blkdev->part_type = PART_TYPE_UNKNOWN;
269 		blkdev->target = 0xff;
270 		blkdev->type = DEV_TYPE_UNKNOWN;
271 		blkdev->block_read = usb_stor_read;
272 		blkdev->block_write = usb_stor_write;
273 		blkdev->lun = lun;
274 		blkdev->priv = udev;
275 
276 		if (usb_stor_get_info(udev, &usb_stor[start],
277 				      &usb_dev_desc[usb_max_devs]) == 1) {
278 			debug("partype: %d\n", blkdev->part_type);
279 			part_init(blkdev);
280 			debug("partype: %d\n", blkdev->part_type);
281 			usb_max_devs++;
282 			debug("%s: Found device %p\n", __func__, udev);
283 		}
284 	}
285 #endif
286 
287 	return 0;
288 }
289 
290 void usb_stor_reset(void)
291 {
292 	usb_max_devs = 0;
293 }
294 
295 /*******************************************************************************
296  * scan the usb and reports device info
297  * to the user if mode = 1
298  * returns current device or -1 if no
299  */
300 int usb_stor_scan(int mode)
301 {
302 	if (mode == 1)
303 		printf("       scanning usb for storage devices... ");
304 
305 #ifndef CONFIG_DM_USB
306 	unsigned char i;
307 
308 	usb_disable_asynch(1); /* asynch transfer not allowed */
309 
310 	usb_stor_reset();
311 	for (i = 0; i < USB_MAX_DEVICE; i++) {
312 		struct usb_device *dev;
313 
314 		dev = usb_get_dev_index(i); /* get device */
315 		debug("i=%d\n", i);
316 		if (usb_stor_probe_device(dev))
317 			break;
318 	} /* for */
319 
320 	usb_disable_asynch(0); /* asynch transfer allowed */
321 #endif
322 	printf("%d Storage Device(s) found\n", usb_max_devs);
323 	if (usb_max_devs > 0)
324 		return 0;
325 	return -1;
326 }
327 
328 static int usb_stor_irq(struct usb_device *dev)
329 {
330 	struct us_data *us;
331 	us = (struct us_data *)dev->privptr;
332 
333 	if (us->ip_wanted)
334 		us->ip_wanted = 0;
335 	return 0;
336 }
337 
338 
339 #ifdef	DEBUG
340 
341 static void usb_show_srb(struct scsi_cmd *pccb)
342 {
343 	int i;
344 	printf("SRB: len %d datalen 0x%lX\n ", pccb->cmdlen, pccb->datalen);
345 	for (i = 0; i < 12; i++)
346 		printf("%02X ", pccb->cmd[i]);
347 	printf("\n");
348 }
349 
350 static void display_int_status(unsigned long tmp)
351 {
352 	printf("Status: %s %s %s %s %s %s %s\n",
353 		(tmp & USB_ST_ACTIVE) ? "Active" : "",
354 		(tmp & USB_ST_STALLED) ? "Stalled" : "",
355 		(tmp & USB_ST_BUF_ERR) ? "Buffer Error" : "",
356 		(tmp & USB_ST_BABBLE_DET) ? "Babble Det" : "",
357 		(tmp & USB_ST_NAK_REC) ? "NAKed" : "",
358 		(tmp & USB_ST_CRC_ERR) ? "CRC Error" : "",
359 		(tmp & USB_ST_BIT_ERR) ? "Bitstuff Error" : "");
360 }
361 #endif
362 /***********************************************************************
363  * Data transfer routines
364  ***********************************************************************/
365 
366 static int us_one_transfer(struct us_data *us, int pipe, char *buf, int length)
367 {
368 	int max_size;
369 	int this_xfer;
370 	int result;
371 	int partial;
372 	int maxtry;
373 	int stat;
374 
375 	/* determine the maximum packet size for these transfers */
376 	max_size = usb_maxpacket(us->pusb_dev, pipe) * 16;
377 
378 	/* while we have data left to transfer */
379 	while (length) {
380 
381 		/* calculate how long this will be -- maximum or a remainder */
382 		this_xfer = length > max_size ? max_size : length;
383 		length -= this_xfer;
384 
385 		/* setup the retry counter */
386 		maxtry = 10;
387 
388 		/* set up the transfer loop */
389 		do {
390 			/* transfer the data */
391 			debug("Bulk xfer 0x%lx(%d) try #%d\n",
392 			      (ulong)map_to_sysmem(buf), this_xfer,
393 			      11 - maxtry);
394 			result = usb_bulk_msg(us->pusb_dev, pipe, buf,
395 					      this_xfer, &partial,
396 					      USB_CNTL_TIMEOUT * 5);
397 			debug("bulk_msg returned %d xferred %d/%d\n",
398 			      result, partial, this_xfer);
399 			if (us->pusb_dev->status != 0) {
400 				/* if we stall, we need to clear it before
401 				 * we go on
402 				 */
403 #ifdef DEBUG
404 				display_int_status(us->pusb_dev->status);
405 #endif
406 				if (us->pusb_dev->status & USB_ST_STALLED) {
407 					debug("stalled ->clearing endpoint" \
408 					      "halt for pipe 0x%x\n", pipe);
409 					stat = us->pusb_dev->status;
410 					usb_clear_halt(us->pusb_dev, pipe);
411 					us->pusb_dev->status = stat;
412 					if (this_xfer == partial) {
413 						debug("bulk transferred" \
414 						      "with error %lX," \
415 						      " but data ok\n",
416 						      us->pusb_dev->status);
417 						return 0;
418 					}
419 					else
420 						return result;
421 				}
422 				if (us->pusb_dev->status & USB_ST_NAK_REC) {
423 					debug("Device NAKed bulk_msg\n");
424 					return result;
425 				}
426 				debug("bulk transferred with error");
427 				if (this_xfer == partial) {
428 					debug(" %ld, but data ok\n",
429 					      us->pusb_dev->status);
430 					return 0;
431 				}
432 				/* if our try counter reaches 0, bail out */
433 					debug(" %ld, data %d\n",
434 					      us->pusb_dev->status, partial);
435 				if (!maxtry--)
436 						return result;
437 			}
438 			/* update to show what data was transferred */
439 			this_xfer -= partial;
440 			buf += partial;
441 			/* continue until this transfer is done */
442 		} while (this_xfer);
443 	}
444 
445 	/* if we get here, we're done and successful */
446 	return 0;
447 }
448 
449 static int usb_stor_BBB_reset(struct us_data *us)
450 {
451 	int result;
452 	unsigned int pipe;
453 
454 	/*
455 	 * Reset recovery (5.3.4 in Universal Serial Bus Mass Storage Class)
456 	 *
457 	 * For Reset Recovery the host shall issue in the following order:
458 	 * a) a Bulk-Only Mass Storage Reset
459 	 * b) a Clear Feature HALT to the Bulk-In endpoint
460 	 * c) a Clear Feature HALT to the Bulk-Out endpoint
461 	 *
462 	 * This is done in 3 steps.
463 	 *
464 	 * If the reset doesn't succeed, the device should be port reset.
465 	 *
466 	 * This comment stolen from FreeBSD's /sys/dev/usb/umass.c.
467 	 */
468 	debug("BBB_reset\n");
469 	result = usb_control_msg(us->pusb_dev, usb_sndctrlpipe(us->pusb_dev, 0),
470 				 US_BBB_RESET,
471 				 USB_TYPE_CLASS | USB_RECIP_INTERFACE,
472 				 0, us->ifnum, NULL, 0, USB_CNTL_TIMEOUT * 5);
473 
474 	if ((result < 0) && (us->pusb_dev->status & USB_ST_STALLED)) {
475 		debug("RESET:stall\n");
476 		return -1;
477 	}
478 
479 	/* long wait for reset */
480 	mdelay(150);
481 	debug("BBB_reset result %d: status %lX reset\n",
482 	      result, us->pusb_dev->status);
483 	pipe = usb_rcvbulkpipe(us->pusb_dev, us->ep_in);
484 	result = usb_clear_halt(us->pusb_dev, pipe);
485 	/* long wait for reset */
486 	mdelay(150);
487 	debug("BBB_reset result %d: status %lX clearing IN endpoint\n",
488 	      result, us->pusb_dev->status);
489 	/* long wait for reset */
490 	pipe = usb_sndbulkpipe(us->pusb_dev, us->ep_out);
491 	result = usb_clear_halt(us->pusb_dev, pipe);
492 	mdelay(150);
493 	debug("BBB_reset result %d: status %lX clearing OUT endpoint\n",
494 	      result, us->pusb_dev->status);
495 	debug("BBB_reset done\n");
496 	return 0;
497 }
498 
499 /* FIXME: this reset function doesn't really reset the port, and it
500  * should. Actually it should probably do what it's doing here, and
501  * reset the port physically
502  */
503 static int usb_stor_CB_reset(struct us_data *us)
504 {
505 	unsigned char cmd[12];
506 	int result;
507 
508 	debug("CB_reset\n");
509 	memset(cmd, 0xff, sizeof(cmd));
510 	cmd[0] = SCSI_SEND_DIAG;
511 	cmd[1] = 4;
512 	result = usb_control_msg(us->pusb_dev, usb_sndctrlpipe(us->pusb_dev, 0),
513 				 US_CBI_ADSC,
514 				 USB_TYPE_CLASS | USB_RECIP_INTERFACE,
515 				 0, us->ifnum, cmd, sizeof(cmd),
516 				 USB_CNTL_TIMEOUT * 5);
517 
518 	/* long wait for reset */
519 	mdelay(1500);
520 	debug("CB_reset result %d: status %lX clearing endpoint halt\n",
521 	      result, us->pusb_dev->status);
522 	usb_clear_halt(us->pusb_dev, usb_rcvbulkpipe(us->pusb_dev, us->ep_in));
523 	usb_clear_halt(us->pusb_dev, usb_rcvbulkpipe(us->pusb_dev, us->ep_out));
524 
525 	debug("CB_reset done\n");
526 	return 0;
527 }
528 
529 /*
530  * Set up the command for a BBB device. Note that the actual SCSI
531  * command is copied into cbw.CBWCDB.
532  */
533 static int usb_stor_BBB_comdat(struct scsi_cmd *srb, struct us_data *us)
534 {
535 	int result;
536 	int actlen;
537 	int dir_in;
538 	unsigned int pipe;
539 	ALLOC_CACHE_ALIGN_BUFFER(struct umass_bbb_cbw, cbw, 1);
540 
541 	dir_in = US_DIRECTION(srb->cmd[0]);
542 
543 #ifdef BBB_COMDAT_TRACE
544 	printf("dir %d lun %d cmdlen %d cmd %p datalen %lu pdata %p\n",
545 		dir_in, srb->lun, srb->cmdlen, srb->cmd, srb->datalen,
546 		srb->pdata);
547 	if (srb->cmdlen) {
548 		for (result = 0; result < srb->cmdlen; result++)
549 			printf("cmd[%d] %#x ", result, srb->cmd[result]);
550 		printf("\n");
551 	}
552 #endif
553 	/* sanity checks */
554 	if (!(srb->cmdlen <= CBWCDBLENGTH)) {
555 		debug("usb_stor_BBB_comdat:cmdlen too large\n");
556 		return -1;
557 	}
558 
559 	/* always OUT to the ep */
560 	pipe = usb_sndbulkpipe(us->pusb_dev, us->ep_out);
561 
562 	cbw->dCBWSignature = cpu_to_le32(CBWSIGNATURE);
563 	cbw->dCBWTag = cpu_to_le32(CBWTag++);
564 	cbw->dCBWDataTransferLength = cpu_to_le32(srb->datalen);
565 	cbw->bCBWFlags = (dir_in ? CBWFLAGS_IN : CBWFLAGS_OUT);
566 	cbw->bCBWLUN = srb->lun;
567 	cbw->bCDBLength = srb->cmdlen;
568 	/* copy the command data into the CBW command data buffer */
569 	/* DST SRC LEN!!! */
570 
571 	memcpy(cbw->CBWCDB, srb->cmd, srb->cmdlen);
572 	result = usb_bulk_msg(us->pusb_dev, pipe, cbw, UMASS_BBB_CBW_SIZE,
573 			      &actlen, USB_CNTL_TIMEOUT * 5);
574 	if (result < 0)
575 		debug("usb_stor_BBB_comdat:usb_bulk_msg error\n");
576 	return result;
577 }
578 
579 /* FIXME: we also need a CBI_command which sets up the completion
580  * interrupt, and waits for it
581  */
582 static int usb_stor_CB_comdat(struct scsi_cmd *srb, struct us_data *us)
583 {
584 	int result = 0;
585 	int dir_in, retry;
586 	unsigned int pipe;
587 	unsigned long status;
588 
589 	retry = 5;
590 	dir_in = US_DIRECTION(srb->cmd[0]);
591 
592 	if (dir_in)
593 		pipe = usb_rcvbulkpipe(us->pusb_dev, us->ep_in);
594 	else
595 		pipe = usb_sndbulkpipe(us->pusb_dev, us->ep_out);
596 
597 	while (retry--) {
598 		debug("CBI gets a command: Try %d\n", 5 - retry);
599 #ifdef DEBUG
600 		usb_show_srb(srb);
601 #endif
602 		/* let's send the command via the control pipe */
603 		result = usb_control_msg(us->pusb_dev,
604 					 usb_sndctrlpipe(us->pusb_dev , 0),
605 					 US_CBI_ADSC,
606 					 USB_TYPE_CLASS | USB_RECIP_INTERFACE,
607 					 0, us->ifnum,
608 					 srb->cmd, srb->cmdlen,
609 					 USB_CNTL_TIMEOUT * 5);
610 		debug("CB_transport: control msg returned %d, status %lX\n",
611 		      result, us->pusb_dev->status);
612 		/* check the return code for the command */
613 		if (result < 0) {
614 			if (us->pusb_dev->status & USB_ST_STALLED) {
615 				status = us->pusb_dev->status;
616 				debug(" stall during command found," \
617 				      " clear pipe\n");
618 				usb_clear_halt(us->pusb_dev,
619 					      usb_sndctrlpipe(us->pusb_dev, 0));
620 				us->pusb_dev->status = status;
621 			}
622 			debug(" error during command %02X" \
623 			      " Stat = %lX\n", srb->cmd[0],
624 			      us->pusb_dev->status);
625 			return result;
626 		}
627 		/* transfer the data payload for this command, if one exists*/
628 
629 		debug("CB_transport: control msg returned %d," \
630 		      " direction is %s to go 0x%lx\n", result,
631 		      dir_in ? "IN" : "OUT", srb->datalen);
632 		if (srb->datalen) {
633 			result = us_one_transfer(us, pipe, (char *)srb->pdata,
634 						 srb->datalen);
635 			debug("CBI attempted to transfer data," \
636 			      " result is %d status %lX, len %d\n",
637 			      result, us->pusb_dev->status,
638 				us->pusb_dev->act_len);
639 			if (!(us->pusb_dev->status & USB_ST_NAK_REC))
640 				break;
641 		} /* if (srb->datalen) */
642 		else
643 			break;
644 	}
645 	/* return result */
646 
647 	return result;
648 }
649 
650 
651 static int usb_stor_CBI_get_status(struct scsi_cmd *srb, struct us_data *us)
652 {
653 	int timeout;
654 
655 	us->ip_wanted = 1;
656 	submit_int_msg(us->pusb_dev, us->irqpipe,
657 			(void *) &us->ip_data, us->irqmaxp, us->irqinterval);
658 	timeout = 1000;
659 	while (timeout--) {
660 		if (us->ip_wanted == 0)
661 			break;
662 		mdelay(10);
663 	}
664 	if (us->ip_wanted) {
665 		printf("	Did not get interrupt on CBI\n");
666 		us->ip_wanted = 0;
667 		return USB_STOR_TRANSPORT_ERROR;
668 	}
669 	debug("Got interrupt data 0x%x, transferred %d status 0x%lX\n",
670 	      us->ip_data, us->pusb_dev->irq_act_len,
671 	      us->pusb_dev->irq_status);
672 	/* UFI gives us ASC and ASCQ, like a request sense */
673 	if (us->subclass == US_SC_UFI) {
674 		if (srb->cmd[0] == SCSI_REQ_SENSE ||
675 		    srb->cmd[0] == SCSI_INQUIRY)
676 			return USB_STOR_TRANSPORT_GOOD; /* Good */
677 		else if (us->ip_data)
678 			return USB_STOR_TRANSPORT_FAILED;
679 		else
680 			return USB_STOR_TRANSPORT_GOOD;
681 	}
682 	/* otherwise, we interpret the data normally */
683 	switch (us->ip_data) {
684 	case 0x0001:
685 		return USB_STOR_TRANSPORT_GOOD;
686 	case 0x0002:
687 		return USB_STOR_TRANSPORT_FAILED;
688 	default:
689 		return USB_STOR_TRANSPORT_ERROR;
690 	}			/* switch */
691 	return USB_STOR_TRANSPORT_ERROR;
692 }
693 
694 #define USB_TRANSPORT_UNKNOWN_RETRY 5
695 #define USB_TRANSPORT_NOT_READY_RETRY 10
696 
697 /* clear a stall on an endpoint - special for BBB devices */
698 static int usb_stor_BBB_clear_endpt_stall(struct us_data *us, __u8 endpt)
699 {
700 	/* ENDPOINT_HALT = 0, so set value to 0 */
701 	return usb_control_msg(us->pusb_dev, usb_sndctrlpipe(us->pusb_dev, 0),
702 			       USB_REQ_CLEAR_FEATURE, USB_RECIP_ENDPOINT, 0,
703 			       endpt, NULL, 0, USB_CNTL_TIMEOUT * 5);
704 }
705 
706 static int usb_stor_BBB_transport(struct scsi_cmd *srb, struct us_data *us)
707 {
708 	int result, retry;
709 	int dir_in;
710 	int actlen, data_actlen;
711 	unsigned int pipe, pipein, pipeout;
712 	ALLOC_CACHE_ALIGN_BUFFER(struct umass_bbb_csw, csw, 1);
713 #ifdef BBB_XPORT_TRACE
714 	unsigned char *ptr;
715 	int index;
716 #endif
717 
718 	dir_in = US_DIRECTION(srb->cmd[0]);
719 
720 	/* COMMAND phase */
721 	debug("COMMAND phase\n");
722 	result = usb_stor_BBB_comdat(srb, us);
723 	if (result < 0) {
724 		debug("failed to send CBW status %ld\n",
725 		      us->pusb_dev->status);
726 		usb_stor_BBB_reset(us);
727 		return USB_STOR_TRANSPORT_FAILED;
728 	}
729 	if (!(us->flags & USB_READY))
730 		mdelay(5);
731 	pipein = usb_rcvbulkpipe(us->pusb_dev, us->ep_in);
732 	pipeout = usb_sndbulkpipe(us->pusb_dev, us->ep_out);
733 	/* DATA phase + error handling */
734 	data_actlen = 0;
735 	/* no data, go immediately to the STATUS phase */
736 	if (srb->datalen == 0)
737 		goto st;
738 	debug("DATA phase\n");
739 	if (dir_in)
740 		pipe = pipein;
741 	else
742 		pipe = pipeout;
743 
744 	result = usb_bulk_msg(us->pusb_dev, pipe, srb->pdata, srb->datalen,
745 			      &data_actlen, USB_CNTL_TIMEOUT * 5);
746 	/* special handling of STALL in DATA phase */
747 	if ((result < 0) && (us->pusb_dev->status & USB_ST_STALLED)) {
748 		debug("DATA:stall\n");
749 		/* clear the STALL on the endpoint */
750 		result = usb_stor_BBB_clear_endpt_stall(us,
751 					dir_in ? us->ep_in : us->ep_out);
752 		if (result >= 0)
753 			/* continue on to STATUS phase */
754 			goto st;
755 	}
756 	if (result < 0) {
757 		debug("usb_bulk_msg error status %ld\n",
758 		      us->pusb_dev->status);
759 		usb_stor_BBB_reset(us);
760 		return USB_STOR_TRANSPORT_FAILED;
761 	}
762 #ifdef BBB_XPORT_TRACE
763 	for (index = 0; index < data_actlen; index++)
764 		printf("pdata[%d] %#x ", index, srb->pdata[index]);
765 	printf("\n");
766 #endif
767 	/* STATUS phase + error handling */
768 st:
769 	retry = 0;
770 again:
771 	debug("STATUS phase\n");
772 	result = usb_bulk_msg(us->pusb_dev, pipein, csw, UMASS_BBB_CSW_SIZE,
773 				&actlen, USB_CNTL_TIMEOUT*5);
774 
775 	/* special handling of STALL in STATUS phase */
776 	if ((result < 0) && (retry < 1) &&
777 	    (us->pusb_dev->status & USB_ST_STALLED)) {
778 		debug("STATUS:stall\n");
779 		/* clear the STALL on the endpoint */
780 		result = usb_stor_BBB_clear_endpt_stall(us, us->ep_in);
781 		if (result >= 0 && (retry++ < 1))
782 			/* do a retry */
783 			goto again;
784 	}
785 	if (result < 0) {
786 		debug("usb_bulk_msg error status %ld\n",
787 		      us->pusb_dev->status);
788 		usb_stor_BBB_reset(us);
789 		return USB_STOR_TRANSPORT_FAILED;
790 	}
791 #ifdef BBB_XPORT_TRACE
792 	ptr = (unsigned char *)csw;
793 	for (index = 0; index < UMASS_BBB_CSW_SIZE; index++)
794 		printf("ptr[%d] %#x ", index, ptr[index]);
795 	printf("\n");
796 #endif
797 	/* misuse pipe to get the residue */
798 	pipe = le32_to_cpu(csw->dCSWDataResidue);
799 	if (pipe == 0 && srb->datalen != 0 && srb->datalen - data_actlen != 0)
800 		pipe = srb->datalen - data_actlen;
801 	if (CSWSIGNATURE != le32_to_cpu(csw->dCSWSignature)) {
802 		debug("!CSWSIGNATURE\n");
803 		usb_stor_BBB_reset(us);
804 		return USB_STOR_TRANSPORT_FAILED;
805 	} else if ((CBWTag - 1) != le32_to_cpu(csw->dCSWTag)) {
806 		debug("!Tag\n");
807 		usb_stor_BBB_reset(us);
808 		return USB_STOR_TRANSPORT_FAILED;
809 	} else if (csw->bCSWStatus > CSWSTATUS_PHASE) {
810 		debug(">PHASE\n");
811 		usb_stor_BBB_reset(us);
812 		return USB_STOR_TRANSPORT_FAILED;
813 	} else if (csw->bCSWStatus == CSWSTATUS_PHASE) {
814 		debug("=PHASE\n");
815 		usb_stor_BBB_reset(us);
816 		return USB_STOR_TRANSPORT_FAILED;
817 	} else if (data_actlen > srb->datalen) {
818 		debug("transferred %dB instead of %ldB\n",
819 		      data_actlen, srb->datalen);
820 		return USB_STOR_TRANSPORT_FAILED;
821 	} else if (csw->bCSWStatus == CSWSTATUS_FAILED) {
822 		debug("FAILED\n");
823 		return USB_STOR_TRANSPORT_FAILED;
824 	}
825 
826 	return result;
827 }
828 
829 static int usb_stor_CB_transport(struct scsi_cmd *srb, struct us_data *us)
830 {
831 	int result, status;
832 	struct scsi_cmd *psrb;
833 	struct scsi_cmd reqsrb;
834 	int retry, notready;
835 
836 	psrb = &reqsrb;
837 	status = USB_STOR_TRANSPORT_GOOD;
838 	retry = 0;
839 	notready = 0;
840 	/* issue the command */
841 do_retry:
842 	result = usb_stor_CB_comdat(srb, us);
843 	debug("command / Data returned %d, status %lX\n",
844 	      result, us->pusb_dev->status);
845 	/* if this is an CBI Protocol, get IRQ */
846 	if (us->protocol == US_PR_CBI) {
847 		status = usb_stor_CBI_get_status(srb, us);
848 		/* if the status is error, report it */
849 		if (status == USB_STOR_TRANSPORT_ERROR) {
850 			debug(" USB CBI Command Error\n");
851 			return status;
852 		}
853 		srb->sense_buf[12] = (unsigned char)(us->ip_data >> 8);
854 		srb->sense_buf[13] = (unsigned char)(us->ip_data & 0xff);
855 		if (!us->ip_data) {
856 			/* if the status is good, report it */
857 			if (status == USB_STOR_TRANSPORT_GOOD) {
858 				debug(" USB CBI Command Good\n");
859 				return status;
860 			}
861 		}
862 	}
863 	/* do we have to issue an auto request? */
864 	/* HERE we have to check the result */
865 	if ((result < 0) && !(us->pusb_dev->status & USB_ST_STALLED)) {
866 		debug("ERROR %lX\n", us->pusb_dev->status);
867 		us->transport_reset(us);
868 		return USB_STOR_TRANSPORT_ERROR;
869 	}
870 	if ((us->protocol == US_PR_CBI) &&
871 	    ((srb->cmd[0] == SCSI_REQ_SENSE) ||
872 	    (srb->cmd[0] == SCSI_INQUIRY))) {
873 		/* do not issue an autorequest after request sense */
874 		debug("No auto request and good\n");
875 		return USB_STOR_TRANSPORT_GOOD;
876 	}
877 	/* issue an request_sense */
878 	memset(&psrb->cmd[0], 0, 12);
879 	psrb->cmd[0] = SCSI_REQ_SENSE;
880 	psrb->cmd[1] = srb->lun << 5;
881 	psrb->cmd[4] = 18;
882 	psrb->datalen = 18;
883 	psrb->pdata = &srb->sense_buf[0];
884 	psrb->cmdlen = 12;
885 	/* issue the command */
886 	result = usb_stor_CB_comdat(psrb, us);
887 	debug("auto request returned %d\n", result);
888 	/* if this is an CBI Protocol, get IRQ */
889 	if (us->protocol == US_PR_CBI)
890 		status = usb_stor_CBI_get_status(psrb, us);
891 
892 	if ((result < 0) && !(us->pusb_dev->status & USB_ST_STALLED)) {
893 		debug(" AUTO REQUEST ERROR %ld\n",
894 		      us->pusb_dev->status);
895 		return USB_STOR_TRANSPORT_ERROR;
896 	}
897 	debug("autorequest returned 0x%02X 0x%02X 0x%02X 0x%02X\n",
898 	      srb->sense_buf[0], srb->sense_buf[2],
899 	      srb->sense_buf[12], srb->sense_buf[13]);
900 	/* Check the auto request result */
901 	if ((srb->sense_buf[2] == 0) &&
902 	    (srb->sense_buf[12] == 0) &&
903 	    (srb->sense_buf[13] == 0)) {
904 		/* ok, no sense */
905 		return USB_STOR_TRANSPORT_GOOD;
906 	}
907 
908 	/* Check the auto request result */
909 	switch (srb->sense_buf[2]) {
910 	case 0x01:
911 		/* Recovered Error */
912 		return USB_STOR_TRANSPORT_GOOD;
913 		break;
914 	case 0x02:
915 		/* Not Ready */
916 		if (notready++ > USB_TRANSPORT_NOT_READY_RETRY) {
917 			printf("cmd 0x%02X returned 0x%02X 0x%02X 0x%02X"
918 			       " 0x%02X (NOT READY)\n", srb->cmd[0],
919 				srb->sense_buf[0], srb->sense_buf[2],
920 				srb->sense_buf[12], srb->sense_buf[13]);
921 			return USB_STOR_TRANSPORT_FAILED;
922 		} else {
923 			mdelay(100);
924 			goto do_retry;
925 		}
926 		break;
927 	default:
928 		if (retry++ > USB_TRANSPORT_UNKNOWN_RETRY) {
929 			printf("cmd 0x%02X returned 0x%02X 0x%02X 0x%02X"
930 			       " 0x%02X\n", srb->cmd[0], srb->sense_buf[0],
931 				srb->sense_buf[2], srb->sense_buf[12],
932 				srb->sense_buf[13]);
933 			return USB_STOR_TRANSPORT_FAILED;
934 		} else
935 			goto do_retry;
936 		break;
937 	}
938 	return USB_STOR_TRANSPORT_FAILED;
939 }
940 
941 static void usb_stor_set_max_xfer_blk(struct usb_device *udev,
942 				      struct us_data *us)
943 {
944 	unsigned short blk;
945 	size_t __maybe_unused size;
946 	int __maybe_unused ret;
947 
948 #ifndef CONFIG_DM_USB
949 #ifdef CONFIG_USB_EHCI_HCD
950 	/*
951 	 * The U-Boot EHCI driver can handle any transfer length as long as
952 	 * there is enough free heap space left, but the SCSI READ(10) and
953 	 * WRITE(10) commands are limited to 65535 blocks.
954 	 */
955 	blk = USHRT_MAX;
956 #else
957 	blk = 20;
958 #endif
959 #else
960 	ret = usb_get_max_xfer_size(udev, (size_t *)&size);
961 	if (ret < 0) {
962 		/* unimplemented, let's use default 20 */
963 		blk = 20;
964 	} else {
965 		if (size > USHRT_MAX * 512)
966 			size = USHRT_MAX * 512;
967 		blk = size / 512;
968 	}
969 #endif
970 
971 	us->max_xfer_blk = blk;
972 }
973 
974 static int usb_inquiry(struct scsi_cmd *srb, struct us_data *ss)
975 {
976 	int retry, i;
977 	retry = 5;
978 	do {
979 		memset(&srb->cmd[0], 0, 12);
980 		srb->cmd[0] = SCSI_INQUIRY;
981 		srb->cmd[1] = srb->lun << 5;
982 		srb->cmd[4] = 36;
983 		srb->datalen = 36;
984 		srb->cmdlen = 12;
985 		i = ss->transport(srb, ss);
986 		debug("inquiry returns %d\n", i);
987 		if (i == 0)
988 			break;
989 	} while (--retry);
990 
991 	if (!retry) {
992 		printf("error in inquiry\n");
993 		return -1;
994 	}
995 	return 0;
996 }
997 
998 static int usb_request_sense(struct scsi_cmd *srb, struct us_data *ss)
999 {
1000 	char *ptr;
1001 
1002 	ptr = (char *)srb->pdata;
1003 	memset(&srb->cmd[0], 0, 12);
1004 	srb->cmd[0] = SCSI_REQ_SENSE;
1005 	srb->cmd[1] = srb->lun << 5;
1006 	srb->cmd[4] = 18;
1007 	srb->datalen = 18;
1008 	srb->pdata = &srb->sense_buf[0];
1009 	srb->cmdlen = 12;
1010 	ss->transport(srb, ss);
1011 	debug("Request Sense returned %02X %02X %02X\n",
1012 	      srb->sense_buf[2], srb->sense_buf[12],
1013 	      srb->sense_buf[13]);
1014 	srb->pdata = (uchar *)ptr;
1015 	return 0;
1016 }
1017 
1018 static int usb_test_unit_ready(struct scsi_cmd *srb, struct us_data *ss)
1019 {
1020 	int retries = 10;
1021 
1022 	do {
1023 		memset(&srb->cmd[0], 0, 12);
1024 		srb->cmd[0] = SCSI_TST_U_RDY;
1025 		srb->cmd[1] = srb->lun << 5;
1026 		srb->datalen = 0;
1027 		srb->cmdlen = 12;
1028 		if (ss->transport(srb, ss) == USB_STOR_TRANSPORT_GOOD) {
1029 			ss->flags |= USB_READY;
1030 			return 0;
1031 		}
1032 		usb_request_sense(srb, ss);
1033 		/*
1034 		 * Check the Key Code Qualifier, if it matches
1035 		 * "Not Ready - medium not present"
1036 		 * (the sense Key equals 0x2 and the ASC is 0x3a)
1037 		 * return immediately as the medium being absent won't change
1038 		 * unless there is a user action.
1039 		 */
1040 		if ((srb->sense_buf[2] == 0x02) &&
1041 		    (srb->sense_buf[12] == 0x3a))
1042 			return -1;
1043 		mdelay(100);
1044 	} while (retries--);
1045 
1046 	return -1;
1047 }
1048 
1049 static int usb_read_capacity(struct scsi_cmd *srb, struct us_data *ss)
1050 {
1051 	int retry;
1052 	/* XXX retries */
1053 	retry = 3;
1054 	do {
1055 		memset(&srb->cmd[0], 0, 12);
1056 		srb->cmd[0] = SCSI_RD_CAPAC;
1057 		srb->cmd[1] = srb->lun << 5;
1058 		srb->datalen = 8;
1059 		srb->cmdlen = 12;
1060 		if (ss->transport(srb, ss) == USB_STOR_TRANSPORT_GOOD)
1061 			return 0;
1062 	} while (retry--);
1063 
1064 	return -1;
1065 }
1066 
1067 static int usb_read_10(struct scsi_cmd *srb, struct us_data *ss,
1068 		       unsigned long start, unsigned short blocks)
1069 {
1070 	memset(&srb->cmd[0], 0, 12);
1071 	srb->cmd[0] = SCSI_READ10;
1072 	srb->cmd[1] = srb->lun << 5;
1073 	srb->cmd[2] = ((unsigned char) (start >> 24)) & 0xff;
1074 	srb->cmd[3] = ((unsigned char) (start >> 16)) & 0xff;
1075 	srb->cmd[4] = ((unsigned char) (start >> 8)) & 0xff;
1076 	srb->cmd[5] = ((unsigned char) (start)) & 0xff;
1077 	srb->cmd[7] = ((unsigned char) (blocks >> 8)) & 0xff;
1078 	srb->cmd[8] = (unsigned char) blocks & 0xff;
1079 	srb->cmdlen = 12;
1080 	debug("read10: start %lx blocks %x\n", start, blocks);
1081 	return ss->transport(srb, ss);
1082 }
1083 
1084 static int usb_write_10(struct scsi_cmd *srb, struct us_data *ss,
1085 			unsigned long start, unsigned short blocks)
1086 {
1087 	memset(&srb->cmd[0], 0, 12);
1088 	srb->cmd[0] = SCSI_WRITE10;
1089 	srb->cmd[1] = srb->lun << 5;
1090 	srb->cmd[2] = ((unsigned char) (start >> 24)) & 0xff;
1091 	srb->cmd[3] = ((unsigned char) (start >> 16)) & 0xff;
1092 	srb->cmd[4] = ((unsigned char) (start >> 8)) & 0xff;
1093 	srb->cmd[5] = ((unsigned char) (start)) & 0xff;
1094 	srb->cmd[7] = ((unsigned char) (blocks >> 8)) & 0xff;
1095 	srb->cmd[8] = (unsigned char) blocks & 0xff;
1096 	srb->cmdlen = 12;
1097 	debug("write10: start %lx blocks %x\n", start, blocks);
1098 	return ss->transport(srb, ss);
1099 }
1100 
1101 
1102 #ifdef CONFIG_USB_BIN_FIXUP
1103 /*
1104  * Some USB storage devices queried for SCSI identification data respond with
1105  * binary strings, which if output to the console freeze the terminal. The
1106  * workaround is to modify the vendor and product strings read from such
1107  * device with proper values (as reported by 'usb info').
1108  *
1109  * Vendor and product length limits are taken from the definition of
1110  * struct blk_desc in include/part.h.
1111  */
1112 static void usb_bin_fixup(struct usb_device_descriptor descriptor,
1113 				unsigned char vendor[],
1114 				unsigned char product[]) {
1115 	const unsigned char max_vendor_len = 40;
1116 	const unsigned char max_product_len = 20;
1117 	if (descriptor.idVendor == 0x0424 && descriptor.idProduct == 0x223a) {
1118 		strncpy((char *)vendor, "SMSC", max_vendor_len);
1119 		strncpy((char *)product, "Flash Media Cntrller",
1120 			max_product_len);
1121 	}
1122 }
1123 #endif /* CONFIG_USB_BIN_FIXUP */
1124 
1125 #ifdef CONFIG_BLK
1126 static unsigned long usb_stor_read(struct udevice *dev, lbaint_t blknr,
1127 				   lbaint_t blkcnt, void *buffer)
1128 #else
1129 static unsigned long usb_stor_read(struct blk_desc *block_dev, lbaint_t blknr,
1130 				   lbaint_t blkcnt, void *buffer)
1131 #endif
1132 {
1133 	lbaint_t start, blks;
1134 	uintptr_t buf_addr;
1135 	unsigned short smallblks;
1136 	struct usb_device *udev;
1137 	struct us_data *ss;
1138 	int retry;
1139 	struct scsi_cmd *srb = &usb_ccb;
1140 #ifdef CONFIG_BLK
1141 	struct blk_desc *block_dev;
1142 #endif
1143 
1144 	if (blkcnt == 0)
1145 		return 0;
1146 	/* Setup  device */
1147 #ifdef CONFIG_BLK
1148 	block_dev = dev_get_uclass_platdata(dev);
1149 	udev = dev_get_parent_priv(dev_get_parent(dev));
1150 	debug("\nusb_read: udev %d\n", block_dev->devnum);
1151 #else
1152 	debug("\nusb_read: udev %d\n", block_dev->devnum);
1153 	udev = usb_dev_desc[block_dev->devnum].priv;
1154 	if (!udev) {
1155 		debug("%s: No device\n", __func__);
1156 		return 0;
1157 	}
1158 #endif
1159 	ss = (struct us_data *)udev->privptr;
1160 
1161 	usb_disable_asynch(1); /* asynch transfer not allowed */
1162 	srb->lun = block_dev->lun;
1163 	buf_addr = (uintptr_t)buffer;
1164 	start = blknr;
1165 	blks = blkcnt;
1166 
1167 	debug("\nusb_read: dev %d startblk " LBAF ", blccnt " LBAF " buffer %"
1168 	      PRIxPTR "\n", block_dev->devnum, start, blks, buf_addr);
1169 
1170 	do {
1171 		/* XXX need some comment here */
1172 		retry = 2;
1173 		srb->pdata = (unsigned char *)buf_addr;
1174 		if (blks > ss->max_xfer_blk)
1175 			smallblks = ss->max_xfer_blk;
1176 		else
1177 			smallblks = (unsigned short) blks;
1178 retry_it:
1179 		if (smallblks == ss->max_xfer_blk)
1180 			usb_show_progress();
1181 		srb->datalen = block_dev->blksz * smallblks;
1182 		srb->pdata = (unsigned char *)buf_addr;
1183 		if (usb_read_10(srb, ss, start, smallblks)) {
1184 			debug("Read ERROR\n");
1185 			usb_request_sense(srb, ss);
1186 			if (retry--)
1187 				goto retry_it;
1188 			blkcnt -= blks;
1189 			break;
1190 		}
1191 		start += smallblks;
1192 		blks -= smallblks;
1193 		buf_addr += srb->datalen;
1194 	} while (blks != 0);
1195 	ss->flags &= ~USB_READY;
1196 
1197 	debug("usb_read: end startblk " LBAF
1198 	      ", blccnt %x buffer %" PRIxPTR "\n",
1199 	      start, smallblks, buf_addr);
1200 
1201 	usb_disable_asynch(0); /* asynch transfer allowed */
1202 	if (blkcnt >= ss->max_xfer_blk)
1203 		debug("\n");
1204 	return blkcnt;
1205 }
1206 
1207 #ifdef CONFIG_BLK
1208 static unsigned long usb_stor_write(struct udevice *dev, lbaint_t blknr,
1209 				    lbaint_t blkcnt, const void *buffer)
1210 #else
1211 static unsigned long usb_stor_write(struct blk_desc *block_dev, lbaint_t blknr,
1212 				    lbaint_t blkcnt, const void *buffer)
1213 #endif
1214 {
1215 	lbaint_t start, blks;
1216 	uintptr_t buf_addr;
1217 	unsigned short smallblks;
1218 	struct usb_device *udev;
1219 	struct us_data *ss;
1220 	int retry;
1221 	struct scsi_cmd *srb = &usb_ccb;
1222 #ifdef CONFIG_BLK
1223 	struct blk_desc *block_dev;
1224 #endif
1225 
1226 	if (blkcnt == 0)
1227 		return 0;
1228 
1229 	/* Setup  device */
1230 #ifdef CONFIG_BLK
1231 	block_dev = dev_get_uclass_platdata(dev);
1232 	udev = dev_get_parent_priv(dev_get_parent(dev));
1233 	debug("\nusb_read: udev %d\n", block_dev->devnum);
1234 #else
1235 	debug("\nusb_read: udev %d\n", block_dev->devnum);
1236 	udev = usb_dev_desc[block_dev->devnum].priv;
1237 	if (!udev) {
1238 		debug("%s: No device\n", __func__);
1239 		return 0;
1240 	}
1241 #endif
1242 	ss = (struct us_data *)udev->privptr;
1243 
1244 	usb_disable_asynch(1); /* asynch transfer not allowed */
1245 
1246 	srb->lun = block_dev->lun;
1247 	buf_addr = (uintptr_t)buffer;
1248 	start = blknr;
1249 	blks = blkcnt;
1250 
1251 	debug("\nusb_write: dev %d startblk " LBAF ", blccnt " LBAF " buffer %"
1252 	      PRIxPTR "\n", block_dev->devnum, start, blks, buf_addr);
1253 
1254 	do {
1255 		/* If write fails retry for max retry count else
1256 		 * return with number of blocks written successfully.
1257 		 */
1258 		retry = 2;
1259 		srb->pdata = (unsigned char *)buf_addr;
1260 		if (blks > ss->max_xfer_blk)
1261 			smallblks = ss->max_xfer_blk;
1262 		else
1263 			smallblks = (unsigned short) blks;
1264 retry_it:
1265 		if (smallblks == ss->max_xfer_blk)
1266 			usb_show_progress();
1267 		srb->datalen = block_dev->blksz * smallblks;
1268 		srb->pdata = (unsigned char *)buf_addr;
1269 		if (usb_write_10(srb, ss, start, smallblks)) {
1270 			debug("Write ERROR\n");
1271 			usb_request_sense(srb, ss);
1272 			if (retry--)
1273 				goto retry_it;
1274 			blkcnt -= blks;
1275 			break;
1276 		}
1277 		start += smallblks;
1278 		blks -= smallblks;
1279 		buf_addr += srb->datalen;
1280 	} while (blks != 0);
1281 	ss->flags &= ~USB_READY;
1282 
1283 	debug("usb_write: end startblk " LBAF ", blccnt %x buffer %"
1284 	      PRIxPTR "\n", start, smallblks, buf_addr);
1285 
1286 	usb_disable_asynch(0); /* asynch transfer allowed */
1287 	if (blkcnt >= ss->max_xfer_blk)
1288 		debug("\n");
1289 	return blkcnt;
1290 
1291 }
1292 
1293 /* Probe to see if a new device is actually a Storage device */
1294 int usb_storage_probe(struct usb_device *dev, unsigned int ifnum,
1295 		      struct us_data *ss)
1296 {
1297 	struct usb_interface *iface;
1298 	int i;
1299 	struct usb_endpoint_descriptor *ep_desc;
1300 	unsigned int flags = 0;
1301 
1302 	/* let's examine the device now */
1303 	iface = &dev->config.if_desc[ifnum];
1304 
1305 	if (dev->descriptor.bDeviceClass != 0 ||
1306 			iface->desc.bInterfaceClass != USB_CLASS_MASS_STORAGE ||
1307 			iface->desc.bInterfaceSubClass < US_SC_MIN ||
1308 			iface->desc.bInterfaceSubClass > US_SC_MAX) {
1309 		debug("Not mass storage\n");
1310 		/* if it's not a mass storage, we go no further */
1311 		return 0;
1312 	}
1313 
1314 	memset(ss, 0, sizeof(struct us_data));
1315 
1316 	/* At this point, we know we've got a live one */
1317 	debug("\n\nUSB Mass Storage device detected\n");
1318 
1319 	/* Initialize the us_data structure with some useful info */
1320 	ss->flags = flags;
1321 	ss->ifnum = ifnum;
1322 	ss->pusb_dev = dev;
1323 	ss->attention_done = 0;
1324 	ss->subclass = iface->desc.bInterfaceSubClass;
1325 	ss->protocol = iface->desc.bInterfaceProtocol;
1326 
1327 	/* set the handler pointers based on the protocol */
1328 	debug("Transport: ");
1329 	switch (ss->protocol) {
1330 	case US_PR_CB:
1331 		debug("Control/Bulk\n");
1332 		ss->transport = usb_stor_CB_transport;
1333 		ss->transport_reset = usb_stor_CB_reset;
1334 		break;
1335 
1336 	case US_PR_CBI:
1337 		debug("Control/Bulk/Interrupt\n");
1338 		ss->transport = usb_stor_CB_transport;
1339 		ss->transport_reset = usb_stor_CB_reset;
1340 		break;
1341 	case US_PR_BULK:
1342 		debug("Bulk/Bulk/Bulk\n");
1343 		ss->transport = usb_stor_BBB_transport;
1344 		ss->transport_reset = usb_stor_BBB_reset;
1345 		break;
1346 	default:
1347 		printf("USB Storage Transport unknown / not yet implemented\n");
1348 		return 0;
1349 		break;
1350 	}
1351 
1352 	/*
1353 	 * We are expecting a minimum of 2 endpoints - in and out (bulk).
1354 	 * An optional interrupt is OK (necessary for CBI protocol).
1355 	 * We will ignore any others.
1356 	 */
1357 	for (i = 0; i < iface->desc.bNumEndpoints; i++) {
1358 		ep_desc = &iface->ep_desc[i];
1359 		/* is it an BULK endpoint? */
1360 		if ((ep_desc->bmAttributes &
1361 		     USB_ENDPOINT_XFERTYPE_MASK) == USB_ENDPOINT_XFER_BULK) {
1362 			if (ep_desc->bEndpointAddress & USB_DIR_IN)
1363 				ss->ep_in = ep_desc->bEndpointAddress &
1364 						USB_ENDPOINT_NUMBER_MASK;
1365 			else
1366 				ss->ep_out =
1367 					ep_desc->bEndpointAddress &
1368 					USB_ENDPOINT_NUMBER_MASK;
1369 		}
1370 
1371 		/* is it an interrupt endpoint? */
1372 		if ((ep_desc->bmAttributes &
1373 		     USB_ENDPOINT_XFERTYPE_MASK) == USB_ENDPOINT_XFER_INT) {
1374 			ss->ep_int = ep_desc->bEndpointAddress &
1375 						USB_ENDPOINT_NUMBER_MASK;
1376 			ss->irqinterval = ep_desc->bInterval;
1377 		}
1378 	}
1379 	debug("Endpoints In %d Out %d Int %d\n",
1380 	      ss->ep_in, ss->ep_out, ss->ep_int);
1381 
1382 	/* Do some basic sanity checks, and bail if we find a problem */
1383 	if (usb_set_interface(dev, iface->desc.bInterfaceNumber, 0) ||
1384 	    !ss->ep_in || !ss->ep_out ||
1385 	    (ss->protocol == US_PR_CBI && ss->ep_int == 0)) {
1386 		debug("Problems with device\n");
1387 		return 0;
1388 	}
1389 	/* set class specific stuff */
1390 	/* We only handle certain protocols.  Currently, these are
1391 	 * the only ones.
1392 	 * The SFF8070 accepts the requests used in u-boot
1393 	 */
1394 	if (ss->subclass != US_SC_UFI && ss->subclass != US_SC_SCSI &&
1395 	    ss->subclass != US_SC_8070) {
1396 		printf("Sorry, protocol %d not yet supported.\n", ss->subclass);
1397 		return 0;
1398 	}
1399 	if (ss->ep_int) {
1400 		/* we had found an interrupt endpoint, prepare irq pipe
1401 		 * set up the IRQ pipe and handler
1402 		 */
1403 		ss->irqinterval = (ss->irqinterval > 0) ? ss->irqinterval : 255;
1404 		ss->irqpipe = usb_rcvintpipe(ss->pusb_dev, ss->ep_int);
1405 		ss->irqmaxp = usb_maxpacket(dev, ss->irqpipe);
1406 		dev->irq_handle = usb_stor_irq;
1407 	}
1408 
1409 	/* Set the maximum transfer size per host controller setting */
1410 	usb_stor_set_max_xfer_blk(dev, ss);
1411 
1412 	dev->privptr = (void *)ss;
1413 	return 1;
1414 }
1415 
1416 int usb_stor_get_info(struct usb_device *dev, struct us_data *ss,
1417 		      struct blk_desc *dev_desc)
1418 {
1419 	unsigned char perq, modi;
1420 	ALLOC_CACHE_ALIGN_BUFFER(u32, cap, 2);
1421 	ALLOC_CACHE_ALIGN_BUFFER(u8, usb_stor_buf, 36);
1422 	u32 capacity, blksz;
1423 	struct scsi_cmd *pccb = &usb_ccb;
1424 
1425 	pccb->pdata = usb_stor_buf;
1426 
1427 	dev_desc->target = dev->devnum;
1428 	pccb->lun = dev_desc->lun;
1429 	debug(" address %d\n", dev_desc->target);
1430 
1431 	if (usb_inquiry(pccb, ss)) {
1432 		debug("%s: usb_inquiry() failed\n", __func__);
1433 		return -1;
1434 	}
1435 
1436 	perq = usb_stor_buf[0];
1437 	modi = usb_stor_buf[1];
1438 
1439 	/*
1440 	 * Skip unknown devices (0x1f) and enclosure service devices (0x0d),
1441 	 * they would not respond to test_unit_ready .
1442 	 */
1443 	if (((perq & 0x1f) == 0x1f) || ((perq & 0x1f) == 0x0d)) {
1444 		debug("%s: unknown/unsupported device\n", __func__);
1445 		return 0;
1446 	}
1447 	if ((modi&0x80) == 0x80) {
1448 		/* drive is removable */
1449 		dev_desc->removable = 1;
1450 	}
1451 	memcpy(dev_desc->vendor, (const void *)&usb_stor_buf[8], 8);
1452 	memcpy(dev_desc->product, (const void *)&usb_stor_buf[16], 16);
1453 	memcpy(dev_desc->revision, (const void *)&usb_stor_buf[32], 4);
1454 	dev_desc->vendor[8] = 0;
1455 	dev_desc->product[16] = 0;
1456 	dev_desc->revision[4] = 0;
1457 #ifdef CONFIG_USB_BIN_FIXUP
1458 	usb_bin_fixup(dev->descriptor, (uchar *)dev_desc->vendor,
1459 		      (uchar *)dev_desc->product);
1460 #endif /* CONFIG_USB_BIN_FIXUP */
1461 	debug("ISO Vers %X, Response Data %X\n", usb_stor_buf[2],
1462 	      usb_stor_buf[3]);
1463 	if (usb_test_unit_ready(pccb, ss)) {
1464 		printf("Device NOT ready\n"
1465 		       "   Request Sense returned %02X %02X %02X\n",
1466 		       pccb->sense_buf[2], pccb->sense_buf[12],
1467 		       pccb->sense_buf[13]);
1468 		if (dev_desc->removable == 1)
1469 			dev_desc->type = perq;
1470 		return 0;
1471 	}
1472 	pccb->pdata = (unsigned char *)cap;
1473 	memset(pccb->pdata, 0, 8);
1474 	if (usb_read_capacity(pccb, ss) != 0) {
1475 		printf("READ_CAP ERROR\n");
1476 		cap[0] = 2880;
1477 		cap[1] = 0x200;
1478 	}
1479 	ss->flags &= ~USB_READY;
1480 	debug("Read Capacity returns: 0x%08x, 0x%08x\n", cap[0], cap[1]);
1481 #if 0
1482 	if (cap[0] > (0x200000 * 10)) /* greater than 10 GByte */
1483 		cap[0] >>= 16;
1484 
1485 	cap[0] = cpu_to_be32(cap[0]);
1486 	cap[1] = cpu_to_be32(cap[1]);
1487 #endif
1488 
1489 	capacity = be32_to_cpu(cap[0]) + 1;
1490 	blksz = be32_to_cpu(cap[1]);
1491 
1492 	debug("Capacity = 0x%08x, blocksz = 0x%08x\n", capacity, blksz);
1493 	dev_desc->lba = capacity;
1494 	dev_desc->blksz = blksz;
1495 	dev_desc->log2blksz = LOG2(dev_desc->blksz);
1496 	dev_desc->type = perq;
1497 	debug(" address %d\n", dev_desc->target);
1498 
1499 	return 1;
1500 }
1501 
1502 #ifdef CONFIG_DM_USB
1503 
1504 static int usb_mass_storage_probe(struct udevice *dev)
1505 {
1506 	struct usb_device *udev = dev_get_parent_priv(dev);
1507 	int ret;
1508 
1509 	usb_disable_asynch(1); /* asynch transfer not allowed */
1510 	ret = usb_stor_probe_device(udev);
1511 	usb_disable_asynch(0); /* asynch transfer allowed */
1512 
1513 	return ret;
1514 }
1515 
1516 static const struct udevice_id usb_mass_storage_ids[] = {
1517 	{ .compatible = "usb-mass-storage" },
1518 	{ }
1519 };
1520 
1521 U_BOOT_DRIVER(usb_mass_storage) = {
1522 	.name	= "usb_mass_storage",
1523 	.id	= UCLASS_MASS_STORAGE,
1524 	.of_match = usb_mass_storage_ids,
1525 	.probe = usb_mass_storage_probe,
1526 #ifdef CONFIG_BLK
1527 	.platdata_auto_alloc_size	= sizeof(struct us_data),
1528 #endif
1529 };
1530 
1531 UCLASS_DRIVER(usb_mass_storage) = {
1532 	.id		= UCLASS_MASS_STORAGE,
1533 	.name		= "usb_mass_storage",
1534 };
1535 
1536 static const struct usb_device_id mass_storage_id_table[] = {
1537 	{
1538 		.match_flags = USB_DEVICE_ID_MATCH_INT_CLASS,
1539 		.bInterfaceClass = USB_CLASS_MASS_STORAGE
1540 	},
1541 	{ }		/* Terminating entry */
1542 };
1543 
1544 U_BOOT_USB_DEVICE(usb_mass_storage, mass_storage_id_table);
1545 #endif
1546 
1547 #ifdef CONFIG_BLK
1548 static const struct blk_ops usb_storage_ops = {
1549 	.read	= usb_stor_read,
1550 	.write	= usb_stor_write,
1551 };
1552 
1553 U_BOOT_DRIVER(usb_storage_blk) = {
1554 	.name		= "usb_storage_blk",
1555 	.id		= UCLASS_BLK,
1556 	.ops		= &usb_storage_ops,
1557 };
1558 #else
1559 U_BOOT_LEGACY_BLK(usb) = {
1560 	.if_typename	= "usb",
1561 	.if_type	= IF_TYPE_USB,
1562 	.max_devs	= USB_MAX_STOR_DEV,
1563 	.desc		= usb_dev_desc,
1564 };
1565 #endif
1566