xref: /openbmc/u-boot/drivers/usb/gadget/f_thor.c (revision 3f41ffe4)
1 /*
2  * f_thor.c -- USB TIZEN THOR Downloader gadget function
3  *
4  * Copyright (C) 2013 Samsung Electronics
5  * Lukasz Majewski <l.majewski@samsung.com>
6  *
7  * Based on code from:
8  * git://review.tizen.org/kernel/u-boot
9  *
10  * Developed by:
11  * Copyright (C) 2009 Samsung Electronics
12  * Minkyu Kang <mk7.kang@samsung.com>
13  * Sanghee Kim <sh0130.kim@samsung.com>
14  *
15  * SPDX-License-Identifier:	GPL-2.0+
16  */
17 
18 #include <errno.h>
19 #include <common.h>
20 #include <malloc.h>
21 #include <version.h>
22 #include <linux/usb/ch9.h>
23 #include <linux/usb/gadget.h>
24 #include <linux/usb/composite.h>
25 #include <linux/usb/cdc.h>
26 #include <g_dnl.h>
27 #include <dfu.h>
28 
29 #include "f_thor.h"
30 
31 static void thor_tx_data(unsigned char *data, int len);
32 static void thor_set_dma(void *addr, int len);
33 static int thor_rx_data(void);
34 
35 static struct f_thor *thor_func;
36 static inline struct f_thor *func_to_thor(struct usb_function *f)
37 {
38 	return container_of(f, struct f_thor, usb_function);
39 }
40 
41 DEFINE_CACHE_ALIGN_BUFFER(unsigned char, thor_tx_data_buf,
42 			  sizeof(struct rsp_box));
43 DEFINE_CACHE_ALIGN_BUFFER(unsigned char, thor_rx_data_buf,
44 			  sizeof(struct rqt_box));
45 
46 /* ********************************************************** */
47 /*         THOR protocol - transmission handling	      */
48 /* ********************************************************** */
49 DEFINE_CACHE_ALIGN_BUFFER(char, f_name, F_NAME_BUF_SIZE);
50 static unsigned long long int thor_file_size;
51 static int alt_setting_num;
52 
53 static void send_rsp(const struct rsp_box *rsp)
54 {
55 	memcpy(thor_tx_data_buf, rsp, sizeof(struct rsp_box));
56 	thor_tx_data(thor_tx_data_buf, sizeof(struct rsp_box));
57 
58 	debug("-RSP: %d, %d\n", rsp->rsp, rsp->rsp_data);
59 }
60 
61 static void send_data_rsp(s32 ack, s32 count)
62 {
63 	ALLOC_CACHE_ALIGN_BUFFER(struct data_rsp_box, rsp,
64 				 sizeof(struct data_rsp_box));
65 
66 	rsp->ack = ack;
67 	rsp->count = count;
68 
69 	memcpy(thor_tx_data_buf, rsp, sizeof(struct data_rsp_box));
70 	thor_tx_data(thor_tx_data_buf, sizeof(struct data_rsp_box));
71 
72 	debug("-DATA RSP: %d, %d\n", ack, count);
73 }
74 
75 static int process_rqt_info(const struct rqt_box *rqt)
76 {
77 	ALLOC_CACHE_ALIGN_BUFFER(struct rsp_box, rsp, sizeof(struct rsp_box));
78 	memset(rsp, 0, sizeof(struct rsp_box));
79 
80 	rsp->rsp = rqt->rqt;
81 	rsp->rsp_data = rqt->rqt_data;
82 
83 	switch (rqt->rqt_data) {
84 	case RQT_INFO_VER_PROTOCOL:
85 		rsp->int_data[0] = VER_PROTOCOL_MAJOR;
86 		rsp->int_data[1] = VER_PROTOCOL_MINOR;
87 		break;
88 	case RQT_INIT_VER_HW:
89 		snprintf(rsp->str_data[0], sizeof(rsp->str_data[0]),
90 			 "%x", checkboard());
91 		break;
92 	case RQT_INIT_VER_BOOT:
93 		sprintf(rsp->str_data[0], "%s", U_BOOT_VERSION);
94 		break;
95 	case RQT_INIT_VER_KERNEL:
96 		sprintf(rsp->str_data[0], "%s", "k unknown");
97 		break;
98 	case RQT_INIT_VER_PLATFORM:
99 		sprintf(rsp->str_data[0], "%s", "p unknown");
100 		break;
101 	case RQT_INIT_VER_CSC:
102 		sprintf(rsp->str_data[0], "%s", "c unknown");
103 		break;
104 	default:
105 		return -EINVAL;
106 	}
107 
108 	send_rsp(rsp);
109 	return true;
110 }
111 
112 static int process_rqt_cmd(const struct rqt_box *rqt)
113 {
114 	ALLOC_CACHE_ALIGN_BUFFER(struct rsp_box, rsp, sizeof(struct rsp_box));
115 	memset(rsp, 0, sizeof(struct rsp_box));
116 
117 	rsp->rsp = rqt->rqt;
118 	rsp->rsp_data = rqt->rqt_data;
119 
120 	switch (rqt->rqt_data) {
121 	case RQT_CMD_REBOOT:
122 		debug("TARGET RESET\n");
123 		send_rsp(rsp);
124 		g_dnl_unregister();
125 		dfu_free_entities();
126 		run_command("reset", 0);
127 		break;
128 	case RQT_CMD_POWEROFF:
129 	case RQT_CMD_EFSCLEAR:
130 		send_rsp(rsp);
131 	default:
132 		printf("Command not supported -> cmd: %d\n", rqt->rqt_data);
133 		return -EINVAL;
134 	}
135 
136 	return true;
137 }
138 
139 static long long int download_head(unsigned long long total,
140 				   unsigned int packet_size,
141 				   long long int *left,
142 				   int *cnt)
143 {
144 	long long int rcv_cnt = 0, left_to_rcv, ret_rcv;
145 	void *transfer_buffer = dfu_get_buf();
146 	void *buf = transfer_buffer;
147 	int usb_pkt_cnt = 0, ret;
148 
149 	/*
150 	 * Files smaller than THOR_STORE_UNIT_SIZE (now 32 MiB) are stored on
151 	 * the medium.
152 	 * The packet response is sent on the purpose after successful data
153 	 * chunk write. There is a room for improvement when asynchronous write
154 	 * is performed.
155 	 */
156 	while (total - rcv_cnt >= packet_size) {
157 		thor_set_dma(buf, packet_size);
158 		buf += packet_size;
159 		ret_rcv = thor_rx_data();
160 		if (ret_rcv < 0)
161 			return ret_rcv;
162 		rcv_cnt += ret_rcv;
163 		debug("%d: RCV data count: %llu cnt: %d\n", usb_pkt_cnt,
164 		      rcv_cnt, *cnt);
165 
166 		if ((rcv_cnt % THOR_STORE_UNIT_SIZE) == 0) {
167 			ret = dfu_write(dfu_get_entity(alt_setting_num),
168 					transfer_buffer, THOR_STORE_UNIT_SIZE,
169 					(*cnt)++);
170 			if (ret) {
171 				error("DFU write failed [%d] cnt: %d",
172 				      ret, *cnt);
173 				return ret;
174 			}
175 			buf = transfer_buffer;
176 		}
177 		send_data_rsp(0, ++usb_pkt_cnt);
178 	}
179 
180 	/* Calculate the amount of data to arrive from PC (in bytes) */
181 	left_to_rcv = total - rcv_cnt;
182 
183 	/*
184 	 * Calculate number of data already received. but not yet stored
185 	 * on the medium (they are smaller than THOR_STORE_UNIT_SIZE)
186 	 */
187 	*left = left_to_rcv + buf - transfer_buffer;
188 	debug("%s: left: %llu left_to_rcv: %llu buf: 0x%p\n", __func__,
189 	      *left, left_to_rcv, buf);
190 
191 	if (left_to_rcv) {
192 		thor_set_dma(buf, packet_size);
193 		ret_rcv = thor_rx_data();
194 		if (ret_rcv < 0)
195 			return ret_rcv;
196 		rcv_cnt += ret_rcv;
197 		send_data_rsp(0, ++usb_pkt_cnt);
198 	}
199 
200 	debug("%s: %llu total: %llu cnt: %d\n", __func__, rcv_cnt, total, *cnt);
201 
202 	return rcv_cnt;
203 }
204 
205 static int download_tail(long long int left, int cnt)
206 {
207 	void *transfer_buffer = dfu_get_buf();
208 	int ret;
209 
210 	debug("%s: left: %llu cnt: %d\n", __func__, left, cnt);
211 
212 	if (left) {
213 		ret = dfu_write(dfu_get_entity(alt_setting_num),
214 				transfer_buffer, left, cnt++);
215 		if (ret) {
216 			error("DFU write failed [%d]: left: %llu", ret, left);
217 			return ret;
218 		}
219 	}
220 
221 	/*
222 	 * To store last "packet" DFU storage backend requires dfu_write with
223 	 * size parameter equal to 0
224 	 *
225 	 * This also frees memory malloc'ed by dfu_get_buf(), so no explicit
226 	 * need fo call dfu_free_buf() is needed.
227 	 */
228 	ret = dfu_write(dfu_get_entity(alt_setting_num),
229 			transfer_buffer, 0, cnt);
230 	if (ret)
231 		error("DFU write failed [%d] cnt: %d", ret, cnt);
232 
233 	return ret;
234 }
235 
236 static long long int process_rqt_download(const struct rqt_box *rqt)
237 {
238 	ALLOC_CACHE_ALIGN_BUFFER(struct rsp_box, rsp, sizeof(struct rsp_box));
239 	static long long int left, ret_head;
240 	int file_type, ret = 0;
241 	static int cnt;
242 
243 	memset(rsp, 0, sizeof(struct rsp_box));
244 	rsp->rsp = rqt->rqt;
245 	rsp->rsp_data = rqt->rqt_data;
246 
247 	switch (rqt->rqt_data) {
248 	case RQT_DL_INIT:
249 		thor_file_size = rqt->int_data[0];
250 		debug("INIT: total %d bytes\n", rqt->int_data[0]);
251 		break;
252 	case RQT_DL_FILE_INFO:
253 		file_type = rqt->int_data[0];
254 		if (file_type == FILE_TYPE_PIT) {
255 			puts("PIT table file - not supported\n");
256 			rsp->ack = -ENOTSUPP;
257 			ret = rsp->ack;
258 			break;
259 		}
260 
261 		thor_file_size = rqt->int_data[1];
262 		memcpy(f_name, rqt->str_data[0], F_NAME_BUF_SIZE);
263 
264 		debug("INFO: name(%s, %d), size(%llu), type(%d)\n",
265 		      f_name, 0, thor_file_size, file_type);
266 
267 		rsp->int_data[0] = THOR_PACKET_SIZE;
268 
269 		alt_setting_num = dfu_get_alt(f_name);
270 		if (alt_setting_num < 0) {
271 			error("Alt setting [%d] to write not found!",
272 			      alt_setting_num);
273 			rsp->ack = -ENODEV;
274 			ret = rsp->ack;
275 		}
276 		break;
277 	case RQT_DL_FILE_START:
278 		send_rsp(rsp);
279 		ret_head = download_head(thor_file_size, THOR_PACKET_SIZE,
280 					 &left, &cnt);
281 		if (ret_head < 0) {
282 			left = 0;
283 			cnt = 0;
284 		}
285 		return ret_head;
286 	case RQT_DL_FILE_END:
287 		debug("DL FILE_END\n");
288 		rsp->ack = download_tail(left, cnt);
289 		ret = rsp->ack;
290 		left = 0;
291 		cnt = 0;
292 		break;
293 	case RQT_DL_EXIT:
294 		debug("DL EXIT\n");
295 		break;
296 	default:
297 		error("Operation not supported: %d", rqt->rqt_data);
298 		ret = -ENOTSUPP;
299 	}
300 
301 	send_rsp(rsp);
302 	return ret;
303 }
304 
305 static int process_data(void)
306 {
307 	ALLOC_CACHE_ALIGN_BUFFER(struct rqt_box, rqt, sizeof(struct rqt_box));
308 	int ret = -EINVAL;
309 
310 	memset(rqt, 0, sizeof(rqt));
311 	memcpy(rqt, thor_rx_data_buf, sizeof(struct rqt_box));
312 
313 	debug("+RQT: %d, %d\n", rqt->rqt, rqt->rqt_data);
314 
315 	switch (rqt->rqt) {
316 	case RQT_INFO:
317 		ret = process_rqt_info(rqt);
318 		break;
319 	case RQT_CMD:
320 		ret = process_rqt_cmd(rqt);
321 		break;
322 	case RQT_DL:
323 		ret = (int) process_rqt_download(rqt);
324 		break;
325 	case RQT_UL:
326 		puts("RQT: UPLOAD not supported!\n");
327 		break;
328 	default:
329 		error("unknown request (%d)", rqt->rqt);
330 	}
331 
332 	return ret;
333 }
334 
335 /* ********************************************************** */
336 /*         THOR USB Function				      */
337 /* ********************************************************** */
338 
339 static inline struct usb_endpoint_descriptor *
340 ep_desc(struct usb_gadget *g, struct usb_endpoint_descriptor *hs,
341 	struct usb_endpoint_descriptor *fs)
342 {
343 	if (gadget_is_dualspeed(g) && g->speed == USB_SPEED_HIGH)
344 		return hs;
345 	return fs;
346 }
347 
348 static struct usb_interface_descriptor thor_downloader_intf_data = {
349 	.bLength =		sizeof(thor_downloader_intf_data),
350 	.bDescriptorType =	USB_DT_INTERFACE,
351 
352 	.bNumEndpoints =	2,
353 	.bInterfaceClass =	USB_CLASS_CDC_DATA,
354 };
355 
356 static struct usb_endpoint_descriptor fs_in_desc = {
357 	.bLength =		USB_DT_ENDPOINT_SIZE,
358 	.bDescriptorType =	USB_DT_ENDPOINT,
359 
360 	.bEndpointAddress =	USB_DIR_IN,
361 	.bmAttributes =	USB_ENDPOINT_XFER_BULK,
362 };
363 
364 static struct usb_endpoint_descriptor fs_out_desc = {
365 	.bLength =		USB_DT_ENDPOINT_SIZE,
366 	.bDescriptorType =	USB_DT_ENDPOINT,
367 
368 	.bEndpointAddress =	USB_DIR_OUT,
369 	.bmAttributes =	USB_ENDPOINT_XFER_BULK,
370 };
371 
372 /* CDC configuration */
373 static struct usb_interface_descriptor thor_downloader_intf_int = {
374 	.bLength =		sizeof(thor_downloader_intf_int),
375 	.bDescriptorType =	USB_DT_INTERFACE,
376 
377 	.bNumEndpoints =	1,
378 	.bInterfaceClass =	USB_CLASS_COMM,
379 	 /* 0x02 Abstract Line Control Model */
380 	.bInterfaceSubClass =   USB_CDC_SUBCLASS_ACM,
381 	/* 0x01 Common AT commands */
382 	.bInterfaceProtocol =   USB_CDC_ACM_PROTO_AT_V25TER,
383 };
384 
385 static struct usb_cdc_header_desc thor_downloader_cdc_header = {
386 	.bLength         =    sizeof(thor_downloader_cdc_header),
387 	.bDescriptorType =    0x24, /* CS_INTERFACE */
388 	.bDescriptorSubType = 0x00,
389 	.bcdCDC =             0x0110,
390 };
391 
392 static struct usb_cdc_call_mgmt_descriptor thor_downloader_cdc_call = {
393 	.bLength         =    sizeof(thor_downloader_cdc_call),
394 	.bDescriptorType =    0x24, /* CS_INTERFACE */
395 	.bDescriptorSubType = 0x01,
396 	.bmCapabilities =     0x00,
397 	.bDataInterface =     0x01,
398 };
399 
400 static struct usb_cdc_acm_descriptor thor_downloader_cdc_abstract = {
401 	.bLength         =    sizeof(thor_downloader_cdc_abstract),
402 	.bDescriptorType =    0x24, /* CS_INTERFACE */
403 	.bDescriptorSubType = 0x02,
404 	.bmCapabilities =     0x00,
405 };
406 
407 static struct usb_cdc_union_desc thor_downloader_cdc_union = {
408 	.bLength         =     sizeof(thor_downloader_cdc_union),
409 	.bDescriptorType =     0x24, /* CS_INTERFACE */
410 	.bDescriptorSubType =  USB_CDC_UNION_TYPE,
411 };
412 
413 static struct usb_endpoint_descriptor fs_int_desc = {
414 	.bLength = USB_DT_ENDPOINT_SIZE,
415 	.bDescriptorType = USB_DT_ENDPOINT,
416 
417 	.bEndpointAddress = 3 | USB_DIR_IN,
418 	.bmAttributes = USB_ENDPOINT_XFER_INT,
419 	.wMaxPacketSize = __constant_cpu_to_le16(16),
420 
421 	.bInterval = 0x9,
422 };
423 
424 static struct usb_interface_assoc_descriptor
425 thor_iad_descriptor = {
426 	.bLength =		sizeof(thor_iad_descriptor),
427 	.bDescriptorType =	USB_DT_INTERFACE_ASSOCIATION,
428 
429 	.bFirstInterface =	0,
430 	.bInterfaceCount =	2,	/* control + data */
431 	.bFunctionClass =	USB_CLASS_COMM,
432 	.bFunctionSubClass =	USB_CDC_SUBCLASS_ACM,
433 	.bFunctionProtocol =	USB_CDC_PROTO_NONE,
434 };
435 
436 static struct usb_endpoint_descriptor hs_in_desc = {
437 	.bLength =		USB_DT_ENDPOINT_SIZE,
438 	.bDescriptorType =	USB_DT_ENDPOINT,
439 
440 	.bmAttributes =	USB_ENDPOINT_XFER_BULK,
441 	.wMaxPacketSize =	__constant_cpu_to_le16(512),
442 };
443 
444 static struct usb_endpoint_descriptor hs_out_desc = {
445 	.bLength =		USB_DT_ENDPOINT_SIZE,
446 	.bDescriptorType =	USB_DT_ENDPOINT,
447 
448 	.bmAttributes =	USB_ENDPOINT_XFER_BULK,
449 	.wMaxPacketSize =	__constant_cpu_to_le16(512),
450 };
451 
452 static struct usb_endpoint_descriptor hs_int_desc = {
453 	.bLength = USB_DT_ENDPOINT_SIZE,
454 	.bDescriptorType = USB_DT_ENDPOINT,
455 
456 	.bmAttributes = USB_ENDPOINT_XFER_INT,
457 	.wMaxPacketSize = __constant_cpu_to_le16(16),
458 
459 	.bInterval = 0x9,
460 };
461 
462 static struct usb_qualifier_descriptor dev_qualifier = {
463 	.bLength =		sizeof(dev_qualifier),
464 	.bDescriptorType =	USB_DT_DEVICE_QUALIFIER,
465 
466 	.bcdUSB =		__constant_cpu_to_le16(0x0200),
467 	.bDeviceClass =	USB_CLASS_VENDOR_SPEC,
468 
469 	.bNumConfigurations =	2,
470 };
471 
472 /*
473  * This attribute vendor descriptor is necessary for correct operation with
474  * Windows version of THOR download program
475  *
476  * It prevents windows driver from sending zero lenght packet (ZLP) after
477  * each THOR_PACKET_SIZE. This assures consistent behaviour with libusb
478  */
479 static struct usb_cdc_attribute_vendor_descriptor thor_downloader_cdc_av = {
480 	.bLength =              sizeof(thor_downloader_cdc_av),
481 	.bDescriptorType =      0x24,
482 	.bDescriptorSubType =   0x80,
483 	.DAUType =              0x0002,
484 	.DAULength =            0x0001,
485 	.DAUValue =             0x00,
486 };
487 
488 static const struct usb_descriptor_header *hs_thor_downloader_function[] = {
489 	(struct usb_descriptor_header *)&thor_iad_descriptor,
490 
491 	(struct usb_descriptor_header *)&thor_downloader_intf_int,
492 	(struct usb_descriptor_header *)&thor_downloader_cdc_header,
493 	(struct usb_descriptor_header *)&thor_downloader_cdc_call,
494 	(struct usb_descriptor_header *)&thor_downloader_cdc_abstract,
495 	(struct usb_descriptor_header *)&thor_downloader_cdc_union,
496 	(struct usb_descriptor_header *)&hs_int_desc,
497 
498 	(struct usb_descriptor_header *)&thor_downloader_intf_data,
499 	(struct usb_descriptor_header *)&thor_downloader_cdc_av,
500 	(struct usb_descriptor_header *)&hs_in_desc,
501 	(struct usb_descriptor_header *)&hs_out_desc,
502 	NULL,
503 };
504 
505 /*-------------------------------------------------------------------------*/
506 static struct usb_request *alloc_ep_req(struct usb_ep *ep, unsigned length)
507 {
508 	struct usb_request *req;
509 
510 	req = usb_ep_alloc_request(ep, 0);
511 	if (!req)
512 		return req;
513 
514 	req->length = length;
515 	req->buf = memalign(CONFIG_SYS_CACHELINE_SIZE, length);
516 	if (!req->buf) {
517 		usb_ep_free_request(ep, req);
518 		req = NULL;
519 	}
520 
521 	return req;
522 }
523 
524 static int thor_rx_data(void)
525 {
526 	struct thor_dev *dev = thor_func->dev;
527 	int data_to_rx, tmp, status;
528 
529 	data_to_rx = dev->out_req->length;
530 	tmp = data_to_rx;
531 	do {
532 		dev->out_req->length = data_to_rx;
533 		debug("dev->out_req->length:%d dev->rxdata:%d\n",
534 		      dev->out_req->length, dev->rxdata);
535 
536 		status = usb_ep_queue(dev->out_ep, dev->out_req, 0);
537 		if (status) {
538 			error("kill %s:  resubmit %d bytes --> %d",
539 			      dev->out_ep->name, dev->out_req->length, status);
540 			usb_ep_set_halt(dev->out_ep);
541 			return -EAGAIN;
542 		}
543 
544 		while (!dev->rxdata) {
545 			usb_gadget_handle_interrupts();
546 			if (ctrlc())
547 				return -1;
548 		}
549 		dev->rxdata = 0;
550 		data_to_rx -= dev->out_req->actual;
551 	} while (data_to_rx);
552 
553 	return tmp;
554 }
555 
556 static void thor_tx_data(unsigned char *data, int len)
557 {
558 	struct thor_dev *dev = thor_func->dev;
559 	unsigned char *ptr = dev->in_req->buf;
560 	int status;
561 
562 	memset(ptr, 0, len);
563 	memcpy(ptr, data, len);
564 
565 	dev->in_req->length = len;
566 
567 	debug("%s: dev->in_req->length:%d to_cpy:%d\n", __func__,
568 	      dev->in_req->length, sizeof(data));
569 
570 	status = usb_ep_queue(dev->in_ep, dev->in_req, 0);
571 	if (status) {
572 		error("kill %s:  resubmit %d bytes --> %d",
573 		      dev->in_ep->name, dev->in_req->length, status);
574 		usb_ep_set_halt(dev->in_ep);
575 	}
576 
577 	/* Wait until tx interrupt received */
578 	while (!dev->txdata)
579 		usb_gadget_handle_interrupts();
580 
581 	dev->txdata = 0;
582 }
583 
584 static void thor_rx_tx_complete(struct usb_ep *ep, struct usb_request *req)
585 {
586 	struct thor_dev *dev = thor_func->dev;
587 	int status = req->status;
588 
589 	debug("%s: ep_ptr:%p, req_ptr:%p\n", __func__, ep, req);
590 	switch (status) {
591 	case 0:
592 		if (ep == dev->out_ep)
593 			dev->rxdata = 1;
594 		else
595 			dev->txdata = 1;
596 
597 		break;
598 
599 	/* this endpoint is normally active while we're configured */
600 	case -ECONNABORTED:		/* hardware forced ep reset */
601 	case -ECONNRESET:		/* request dequeued */
602 	case -ESHUTDOWN:		/* disconnect from host */
603 	case -EREMOTEIO:                /* short read */
604 	case -EOVERFLOW:
605 		error("ERROR:%d", status);
606 		break;
607 	}
608 
609 	debug("%s complete --> %d, %d/%d\n", ep->name,
610 	      status, req->actual, req->length);
611 }
612 
613 static struct usb_request *thor_start_ep(struct usb_ep *ep)
614 {
615 	struct usb_request *req;
616 
617 	req = alloc_ep_req(ep, THOR_PACKET_SIZE);
618 	debug("%s: ep:%p req:%p\n", __func__, ep, req);
619 
620 	if (!req)
621 		return NULL;
622 
623 	memset(req->buf, 0, req->length);
624 	req->complete = thor_rx_tx_complete;
625 
626 	return req;
627 }
628 
629 static void thor_setup_complete(struct usb_ep *ep, struct usb_request *req)
630 {
631 	if (req->status || req->actual != req->length)
632 		debug("setup complete --> %d, %d/%d\n",
633 		      req->status, req->actual, req->length);
634 }
635 
636 static int
637 thor_func_setup(struct usb_function *f, const struct usb_ctrlrequest *ctrl)
638 {
639 	struct thor_dev *dev = thor_func->dev;
640 	struct usb_request *req = dev->req;
641 	struct usb_gadget *gadget = dev->gadget;
642 	int value = 0;
643 
644 	u16 len = le16_to_cpu(ctrl->wLength);
645 
646 	debug("Req_Type: 0x%x Req: 0x%x wValue: 0x%x wIndex: 0x%x wLen: 0x%x\n",
647 	      ctrl->bRequestType, ctrl->bRequest, ctrl->wValue, ctrl->wIndex,
648 	      ctrl->wLength);
649 
650 	switch (ctrl->bRequest) {
651 	case USB_CDC_REQ_SET_CONTROL_LINE_STATE:
652 		value = 0;
653 		break;
654 	case USB_CDC_REQ_SET_LINE_CODING:
655 		value = len;
656 		/* Line Coding set done = configuration done */
657 		thor_func->dev->configuration_done = 1;
658 		break;
659 
660 	default:
661 		error("thor_setup: unknown request: %d", ctrl->bRequest);
662 	}
663 
664 	if (value >= 0) {
665 		req->length = value;
666 		req->zero = value < len;
667 		value = usb_ep_queue(gadget->ep0, req, 0);
668 		if (value < 0) {
669 			debug("%s: ep_queue: %d\n", __func__, value);
670 			req->status = 0;
671 		}
672 	}
673 
674 	return value;
675 }
676 
677 /* Specific to the THOR protocol */
678 static void thor_set_dma(void *addr, int len)
679 {
680 	struct thor_dev *dev = thor_func->dev;
681 
682 	debug("in_req:%p, out_req:%p\n", dev->in_req, dev->out_req);
683 	debug("addr:%p, len:%d\n", addr, len);
684 
685 	dev->out_req->buf = addr;
686 	dev->out_req->length = len;
687 }
688 
689 int thor_init(void)
690 {
691 	struct thor_dev *dev = thor_func->dev;
692 
693 	/* Wait for a device enumeration and configuration settings */
694 	debug("THOR enumeration/configuration setting....\n");
695 	while (!dev->configuration_done)
696 		usb_gadget_handle_interrupts();
697 
698 	thor_set_dma(thor_rx_data_buf, strlen("THOR"));
699 	/* detect the download request from Host PC */
700 	if (thor_rx_data() < 0) {
701 		printf("%s: Data not received!\n", __func__);
702 		return -1;
703 	}
704 
705 	if (!strncmp((char *)thor_rx_data_buf, "THOR", strlen("THOR"))) {
706 		puts("Download request from the Host PC\n");
707 		udelay(30 * 1000); /* 30 ms */
708 
709 		strcpy((char *)thor_tx_data_buf, "ROHT");
710 		thor_tx_data(thor_tx_data_buf, strlen("ROHT"));
711 	} else {
712 		puts("Wrong reply information\n");
713 		return -1;
714 	}
715 
716 	return 0;
717 }
718 
719 int thor_handle(void)
720 {
721 	int ret;
722 
723 	/* receive the data from Host PC */
724 	while (1) {
725 		thor_set_dma(thor_rx_data_buf, sizeof(struct rqt_box));
726 		ret = thor_rx_data();
727 
728 		if (ret > 0) {
729 			ret = process_data();
730 			if (ret < 0)
731 				return ret;
732 		} else {
733 			printf("%s: No data received!\n", __func__);
734 			break;
735 		}
736 	}
737 
738 	return 0;
739 }
740 
741 static int thor_func_bind(struct usb_configuration *c, struct usb_function *f)
742 {
743 	struct usb_gadget *gadget = c->cdev->gadget;
744 	struct f_thor *f_thor = func_to_thor(f);
745 	struct thor_dev *dev;
746 	struct usb_ep *ep;
747 	int status;
748 
749 	thor_func = f_thor;
750 	dev = memalign(CONFIG_SYS_CACHELINE_SIZE, sizeof(*dev));
751 	if (!dev)
752 		return -ENOMEM;
753 
754 	memset(dev, 0, sizeof(*dev));
755 	dev->gadget = gadget;
756 	f_thor->dev = dev;
757 
758 	debug("%s: usb_configuration: 0x%p usb_function: 0x%p\n",
759 	      __func__, c, f);
760 	debug("f_thor: 0x%p thor: 0x%p\n", f_thor, dev);
761 
762 	/* EP0  */
763 	/* preallocate control response and buffer */
764 	dev->req = usb_ep_alloc_request(gadget->ep0, 0);
765 	if (!dev->req) {
766 		status = -ENOMEM;
767 		goto fail;
768 	}
769 	dev->req->buf = memalign(CONFIG_SYS_CACHELINE_SIZE,
770 				 gadget->ep0->maxpacket);
771 	if (!dev->req->buf) {
772 		status = -ENOMEM;
773 		goto fail;
774 	}
775 
776 	dev->req->complete = thor_setup_complete;
777 
778 	/* DYNAMIC interface numbers assignments */
779 	status = usb_interface_id(c, f);
780 
781 	if (status < 0)
782 		goto fail;
783 
784 	thor_downloader_intf_int.bInterfaceNumber = status;
785 	thor_downloader_cdc_union.bMasterInterface0 = status;
786 
787 	status = usb_interface_id(c, f);
788 
789 	if (status < 0)
790 		goto fail;
791 
792 	thor_downloader_intf_data.bInterfaceNumber = status;
793 	thor_downloader_cdc_union.bSlaveInterface0 = status;
794 
795 	/* allocate instance-specific endpoints */
796 	ep = usb_ep_autoconfig(gadget, &fs_in_desc);
797 	if (!ep) {
798 		status = -ENODEV;
799 		goto fail;
800 	}
801 
802 	if (gadget_is_dualspeed(gadget)) {
803 		hs_in_desc.bEndpointAddress =
804 				fs_in_desc.bEndpointAddress;
805 	}
806 
807 	dev->in_ep = ep; /* Store IN EP for enabling @ setup */
808 
809 	ep = usb_ep_autoconfig(gadget, &fs_out_desc);
810 	if (!ep) {
811 		status = -ENODEV;
812 		goto fail;
813 	}
814 
815 	if (gadget_is_dualspeed(gadget))
816 		hs_out_desc.bEndpointAddress =
817 				fs_out_desc.bEndpointAddress;
818 
819 	dev->out_ep = ep; /* Store OUT EP for enabling @ setup */
820 
821 	ep = usb_ep_autoconfig(gadget, &fs_int_desc);
822 	if (!ep) {
823 		status = -ENODEV;
824 		goto fail;
825 	}
826 
827 	dev->int_ep = ep;
828 
829 	if (gadget_is_dualspeed(gadget)) {
830 		hs_int_desc.bEndpointAddress =
831 				fs_int_desc.bEndpointAddress;
832 
833 		f->hs_descriptors = (struct usb_descriptor_header **)
834 			&hs_thor_downloader_function;
835 
836 		if (!f->hs_descriptors)
837 			goto fail;
838 	}
839 
840 	debug("%s: out_ep:%p out_req:%p\n", __func__,
841 	      dev->out_ep, dev->out_req);
842 
843 	return 0;
844 
845  fail:
846 	free(dev);
847 	return status;
848 }
849 
850 static void free_ep_req(struct usb_ep *ep, struct usb_request *req)
851 {
852 	free(req->buf);
853 	usb_ep_free_request(ep, req);
854 }
855 
856 static void thor_unbind(struct usb_configuration *c, struct usb_function *f)
857 {
858 	struct f_thor *f_thor = func_to_thor(f);
859 	struct thor_dev *dev = f_thor->dev;
860 
861 	free(dev);
862 	memset(thor_func, 0, sizeof(*thor_func));
863 	thor_func = NULL;
864 }
865 
866 static void thor_func_disable(struct usb_function *f)
867 {
868 	struct f_thor *f_thor = func_to_thor(f);
869 	struct thor_dev *dev = f_thor->dev;
870 
871 	debug("%s:\n", __func__);
872 
873 	/* Avoid freeing memory when ep is still claimed */
874 	if (dev->in_ep->driver_data) {
875 		free_ep_req(dev->in_ep, dev->in_req);
876 		usb_ep_disable(dev->in_ep);
877 		dev->in_ep->driver_data = NULL;
878 	}
879 
880 	if (dev->out_ep->driver_data) {
881 		dev->out_req->buf = NULL;
882 		usb_ep_free_request(dev->out_ep, dev->out_req);
883 		usb_ep_disable(dev->out_ep);
884 		dev->out_ep->driver_data = NULL;
885 	}
886 
887 	if (dev->int_ep->driver_data) {
888 		usb_ep_disable(dev->int_ep);
889 		dev->int_ep->driver_data = NULL;
890 	}
891 }
892 
893 static int thor_eps_setup(struct usb_function *f)
894 {
895 	struct usb_composite_dev *cdev = f->config->cdev;
896 	struct usb_gadget *gadget = cdev->gadget;
897 	struct thor_dev *dev = thor_func->dev;
898 	struct usb_endpoint_descriptor *d;
899 	struct usb_request *req;
900 	struct usb_ep *ep;
901 	int result;
902 
903 	ep = dev->in_ep;
904 	d = ep_desc(gadget, &hs_in_desc, &fs_in_desc);
905 	debug("(d)bEndpointAddress: 0x%x\n", d->bEndpointAddress);
906 
907 	result = usb_ep_enable(ep, d);
908 	if (result)
909 		goto exit;
910 
911 	ep->driver_data = cdev; /* claim */
912 	req = thor_start_ep(ep);
913 	if (!req) {
914 		usb_ep_disable(ep);
915 		result = -EIO;
916 		goto exit;
917 	}
918 
919 	dev->in_req = req;
920 	ep = dev->out_ep;
921 	d = ep_desc(gadget, &hs_out_desc, &fs_out_desc);
922 	debug("(d)bEndpointAddress: 0x%x\n", d->bEndpointAddress);
923 
924 	result = usb_ep_enable(ep, d);
925 	if (result)
926 		goto exit;
927 
928 	ep->driver_data = cdev; /* claim */
929 	req = thor_start_ep(ep);
930 	if (!req) {
931 		usb_ep_disable(ep);
932 		result = -EIO;
933 		goto exit;
934 	}
935 
936 	dev->out_req = req;
937 	/* ACM control EP */
938 	ep = dev->int_ep;
939 	ep->driver_data = cdev;	/* claim */
940 
941  exit:
942 	return result;
943 }
944 
945 static int thor_func_set_alt(struct usb_function *f,
946 			     unsigned intf, unsigned alt)
947 {
948 	struct thor_dev *dev = thor_func->dev;
949 	int result;
950 
951 	debug("%s: func: %s intf: %d alt: %d\n",
952 	      __func__, f->name, intf, alt);
953 
954 	switch (intf) {
955 	case 0:
956 		debug("ACM INTR interface\n");
957 		break;
958 	case 1:
959 		debug("Communication Data interface\n");
960 		result = thor_eps_setup(f);
961 		if (result)
962 			error("%s: EPs setup failed!", __func__);
963 		dev->configuration_done = 1;
964 		break;
965 	}
966 
967 	return 0;
968 }
969 
970 static int thor_func_init(struct usb_configuration *c)
971 {
972 	struct f_thor *f_thor;
973 	int status;
974 
975 	debug("%s: cdev: 0x%p\n", __func__, c->cdev);
976 
977 	f_thor = memalign(CONFIG_SYS_CACHELINE_SIZE, sizeof(*f_thor));
978 	if (!f_thor)
979 		return -ENOMEM;
980 
981 	memset(f_thor, 0, sizeof(*f_thor));
982 
983 	f_thor->usb_function.name = "f_thor";
984 	f_thor->usb_function.bind = thor_func_bind;
985 	f_thor->usb_function.unbind = thor_unbind;
986 	f_thor->usb_function.setup = thor_func_setup;
987 	f_thor->usb_function.set_alt = thor_func_set_alt;
988 	f_thor->usb_function.disable = thor_func_disable;
989 
990 	status = usb_add_function(c, &f_thor->usb_function);
991 	if (status)
992 		free(f_thor);
993 
994 	return status;
995 }
996 
997 int thor_add(struct usb_configuration *c)
998 {
999 	debug("%s:\n", __func__);
1000 	return thor_func_init(c);
1001 }
1002