xref: /openbmc/u-boot/drivers/usb/gadget/f_thor.c (revision 87a62bce)
1 // SPDX-License-Identifier: GPL-2.0+
2 /*
3  * f_thor.c -- USB TIZEN THOR Downloader gadget function
4  *
5  * Copyright (C) 2013 Samsung Electronics
6  * Lukasz Majewski <l.majewski@samsung.com>
7  *
8  * Based on code from:
9  * git://review.tizen.org/kernel/u-boot
10  *
11  * Developed by:
12  * Copyright (C) 2009 Samsung Electronics
13  * Minkyu Kang <mk7.kang@samsung.com>
14  * Sanghee Kim <sh0130.kim@samsung.com>
15  */
16 
17 #include <errno.h>
18 #include <common.h>
19 #include <console.h>
20 #include <malloc.h>
21 #include <memalign.h>
22 #include <version.h>
23 #include <linux/usb/ch9.h>
24 #include <linux/usb/gadget.h>
25 #include <linux/usb/composite.h>
26 #include <linux/usb/cdc.h>
27 #include <g_dnl.h>
28 #include <dfu.h>
29 
30 #include "f_thor.h"
31 
32 static void thor_tx_data(unsigned char *data, int len);
33 static void thor_set_dma(void *addr, int len);
34 static int thor_rx_data(void);
35 
36 static struct f_thor *thor_func;
37 static inline struct f_thor *func_to_thor(struct usb_function *f)
38 {
39 	return container_of(f, struct f_thor, usb_function);
40 }
41 
42 DEFINE_CACHE_ALIGN_BUFFER(unsigned char, thor_tx_data_buf,
43 			  sizeof(struct rsp_box));
44 DEFINE_CACHE_ALIGN_BUFFER(unsigned char, thor_rx_data_buf,
45 			  sizeof(struct rqt_box));
46 
47 /* ********************************************************** */
48 /*         THOR protocol - transmission handling	      */
49 /* ********************************************************** */
50 DEFINE_CACHE_ALIGN_BUFFER(char, f_name, F_NAME_BUF_SIZE + 1);
51 static unsigned long long int thor_file_size;
52 static int alt_setting_num;
53 
54 static void send_rsp(const struct rsp_box *rsp)
55 {
56 	memcpy(thor_tx_data_buf, rsp, sizeof(struct rsp_box));
57 	thor_tx_data(thor_tx_data_buf, sizeof(struct rsp_box));
58 
59 	debug("-RSP: %d, %d\n", rsp->rsp, rsp->rsp_data);
60 }
61 
62 static void send_data_rsp(s32 ack, s32 count)
63 {
64 	ALLOC_CACHE_ALIGN_BUFFER(struct data_rsp_box, rsp,
65 				 sizeof(struct data_rsp_box));
66 
67 	rsp->ack = ack;
68 	rsp->count = count;
69 
70 	memcpy(thor_tx_data_buf, rsp, sizeof(struct data_rsp_box));
71 	thor_tx_data(thor_tx_data_buf, sizeof(struct data_rsp_box));
72 
73 	debug("-DATA RSP: %d, %d\n", ack, count);
74 }
75 
76 static int process_rqt_info(const struct rqt_box *rqt)
77 {
78 	ALLOC_CACHE_ALIGN_BUFFER(struct rsp_box, rsp, sizeof(struct rsp_box));
79 	memset(rsp, 0, sizeof(struct rsp_box));
80 
81 	rsp->rsp = rqt->rqt;
82 	rsp->rsp_data = rqt->rqt_data;
83 
84 	switch (rqt->rqt_data) {
85 	case RQT_INFO_VER_PROTOCOL:
86 		rsp->int_data[0] = VER_PROTOCOL_MAJOR;
87 		rsp->int_data[1] = VER_PROTOCOL_MINOR;
88 		break;
89 	case RQT_INIT_VER_HW:
90 		snprintf(rsp->str_data[0], sizeof(rsp->str_data[0]),
91 			 "%x", checkboard());
92 		break;
93 	case RQT_INIT_VER_BOOT:
94 		sprintf(rsp->str_data[0], "%s", U_BOOT_VERSION);
95 		break;
96 	case RQT_INIT_VER_KERNEL:
97 		sprintf(rsp->str_data[0], "%s", "k unknown");
98 		break;
99 	case RQT_INIT_VER_PLATFORM:
100 		sprintf(rsp->str_data[0], "%s", "p unknown");
101 		break;
102 	case RQT_INIT_VER_CSC:
103 		sprintf(rsp->str_data[0], "%s", "c unknown");
104 		break;
105 	default:
106 		return -EINVAL;
107 	}
108 
109 	send_rsp(rsp);
110 	return true;
111 }
112 
113 static int process_rqt_cmd(const struct rqt_box *rqt)
114 {
115 	ALLOC_CACHE_ALIGN_BUFFER(struct rsp_box, rsp, sizeof(struct rsp_box));
116 	memset(rsp, 0, sizeof(struct rsp_box));
117 
118 	rsp->rsp = rqt->rqt;
119 	rsp->rsp_data = rqt->rqt_data;
120 
121 	switch (rqt->rqt_data) {
122 	case RQT_CMD_REBOOT:
123 		debug("TARGET RESET\n");
124 		send_rsp(rsp);
125 		g_dnl_unregister();
126 		dfu_free_entities();
127 #ifdef CONFIG_THOR_RESET_OFF
128 		return RESET_DONE;
129 #endif
130 		run_command("reset", 0);
131 		break;
132 	case RQT_CMD_POWEROFF:
133 	case RQT_CMD_EFSCLEAR:
134 		send_rsp(rsp);
135 	default:
136 		printf("Command not supported -> cmd: %d\n", rqt->rqt_data);
137 		return -EINVAL;
138 	}
139 
140 	return true;
141 }
142 
143 static long long int download_head(unsigned long long total,
144 				   unsigned int packet_size,
145 				   long long int *left,
146 				   int *cnt)
147 {
148 	long long int rcv_cnt = 0, left_to_rcv, ret_rcv;
149 	struct dfu_entity *dfu_entity = dfu_get_entity(alt_setting_num);
150 	void *transfer_buffer = dfu_get_buf(dfu_entity);
151 	void *buf = transfer_buffer;
152 	int usb_pkt_cnt = 0, ret;
153 
154 	/*
155 	 * Files smaller than THOR_STORE_UNIT_SIZE (now 32 MiB) are stored on
156 	 * the medium.
157 	 * The packet response is sent on the purpose after successful data
158 	 * chunk write. There is a room for improvement when asynchronous write
159 	 * is performed.
160 	 */
161 	while (total - rcv_cnt >= packet_size) {
162 		thor_set_dma(buf, packet_size);
163 		buf += packet_size;
164 		ret_rcv = thor_rx_data();
165 		if (ret_rcv < 0)
166 			return ret_rcv;
167 		rcv_cnt += ret_rcv;
168 		debug("%d: RCV data count: %llu cnt: %d\n", usb_pkt_cnt,
169 		      rcv_cnt, *cnt);
170 
171 		if ((rcv_cnt % THOR_STORE_UNIT_SIZE) == 0) {
172 			ret = dfu_write(dfu_get_entity(alt_setting_num),
173 					transfer_buffer, THOR_STORE_UNIT_SIZE,
174 					(*cnt)++);
175 			if (ret) {
176 				pr_err("DFU write failed [%d] cnt: %d",
177 				      ret, *cnt);
178 				return ret;
179 			}
180 			buf = transfer_buffer;
181 		}
182 		send_data_rsp(0, ++usb_pkt_cnt);
183 	}
184 
185 	/* Calculate the amount of data to arrive from PC (in bytes) */
186 	left_to_rcv = total - rcv_cnt;
187 
188 	/*
189 	 * Calculate number of data already received. but not yet stored
190 	 * on the medium (they are smaller than THOR_STORE_UNIT_SIZE)
191 	 */
192 	*left = left_to_rcv + buf - transfer_buffer;
193 	debug("%s: left: %llu left_to_rcv: %llu buf: 0x%p\n", __func__,
194 	      *left, left_to_rcv, buf);
195 
196 	if (left_to_rcv) {
197 		thor_set_dma(buf, packet_size);
198 		ret_rcv = thor_rx_data();
199 		if (ret_rcv < 0)
200 			return ret_rcv;
201 		rcv_cnt += ret_rcv;
202 		send_data_rsp(0, ++usb_pkt_cnt);
203 	}
204 
205 	debug("%s: %llu total: %llu cnt: %d\n", __func__, rcv_cnt, total, *cnt);
206 
207 	return rcv_cnt;
208 }
209 
210 static int download_tail(long long int left, int cnt)
211 {
212 	struct dfu_entity *dfu_entity;
213 	void *transfer_buffer;
214 	int ret;
215 
216 	debug("%s: left: %llu cnt: %d\n", __func__, left, cnt);
217 
218 	dfu_entity = dfu_get_entity(alt_setting_num);
219 	if (!dfu_entity) {
220 		pr_err("Alt setting: %d entity not found!\n", alt_setting_num);
221 		return -ENOENT;
222 	}
223 
224 	transfer_buffer = dfu_get_buf(dfu_entity);
225 	if (!transfer_buffer) {
226 		pr_err("Transfer buffer not allocated!");
227 		return -ENXIO;
228 	}
229 
230 	if (left) {
231 		ret = dfu_write(dfu_entity, transfer_buffer, left, cnt++);
232 		if (ret) {
233 			pr_err("DFU write failed [%d]: left: %llu", ret, left);
234 			return ret;
235 		}
236 	}
237 
238 	/*
239 	 * To store last "packet" or write file from buffer to filesystem
240 	 * DFU storage backend requires dfu_flush
241 	 *
242 	 * This also frees memory malloc'ed by dfu_get_buf(), so no explicit
243 	 * need fo call dfu_free_buf() is needed.
244 	 */
245 	ret = dfu_flush(dfu_entity, transfer_buffer, 0, cnt);
246 	if (ret)
247 		pr_err("DFU flush failed!");
248 
249 	return ret;
250 }
251 
252 static long long int process_rqt_download(const struct rqt_box *rqt)
253 {
254 	ALLOC_CACHE_ALIGN_BUFFER(struct rsp_box, rsp, sizeof(struct rsp_box));
255 	static long long int left, ret_head;
256 	int file_type, ret = 0;
257 	static int cnt;
258 
259 	memset(rsp, 0, sizeof(struct rsp_box));
260 	rsp->rsp = rqt->rqt;
261 	rsp->rsp_data = rqt->rqt_data;
262 
263 	switch (rqt->rqt_data) {
264 	case RQT_DL_INIT:
265 		thor_file_size = (unsigned long long int)rqt->int_data[0] +
266 				 (((unsigned long long int)rqt->int_data[1])
267 				  << 32);
268 		debug("INIT: total %llu bytes\n", thor_file_size);
269 		break;
270 	case RQT_DL_FILE_INFO:
271 		file_type = rqt->int_data[0];
272 		if (file_type == FILE_TYPE_PIT) {
273 			puts("PIT table file - not supported\n");
274 			rsp->ack = -ENOTSUPP;
275 			ret = rsp->ack;
276 			break;
277 		}
278 
279 		thor_file_size = (unsigned long long int)rqt->int_data[1] +
280 				 (((unsigned long long int)rqt->int_data[2])
281 				  << 32);
282 		memcpy(f_name, rqt->str_data[0], F_NAME_BUF_SIZE);
283 		f_name[F_NAME_BUF_SIZE] = '\0';
284 
285 		debug("INFO: name(%s, %d), size(%llu), type(%d)\n",
286 		      f_name, 0, thor_file_size, file_type);
287 
288 		rsp->int_data[0] = THOR_PACKET_SIZE;
289 
290 		alt_setting_num = dfu_get_alt(f_name);
291 		if (alt_setting_num < 0) {
292 			pr_err("Alt setting [%d] to write not found!",
293 			      alt_setting_num);
294 			rsp->ack = -ENODEV;
295 			ret = rsp->ack;
296 		}
297 		break;
298 	case RQT_DL_FILE_START:
299 		send_rsp(rsp);
300 		ret_head = download_head(thor_file_size, THOR_PACKET_SIZE,
301 					 &left, &cnt);
302 		if (ret_head < 0) {
303 			left = 0;
304 			cnt = 0;
305 		}
306 		return ret_head;
307 	case RQT_DL_FILE_END:
308 		debug("DL FILE_END\n");
309 		rsp->ack = download_tail(left, cnt);
310 		ret = rsp->ack;
311 		left = 0;
312 		cnt = 0;
313 		break;
314 	case RQT_DL_EXIT:
315 		debug("DL EXIT\n");
316 		break;
317 	default:
318 		pr_err("Operation not supported: %d", rqt->rqt_data);
319 		ret = -ENOTSUPP;
320 	}
321 
322 	send_rsp(rsp);
323 	return ret;
324 }
325 
326 static int process_data(void)
327 {
328 	ALLOC_CACHE_ALIGN_BUFFER(struct rqt_box, rqt, sizeof(struct rqt_box));
329 	int ret = -EINVAL;
330 
331 	memcpy(rqt, thor_rx_data_buf, sizeof(struct rqt_box));
332 
333 	debug("+RQT: %d, %d\n", rqt->rqt, rqt->rqt_data);
334 
335 	switch (rqt->rqt) {
336 	case RQT_INFO:
337 		ret = process_rqt_info(rqt);
338 		break;
339 	case RQT_CMD:
340 		ret = process_rqt_cmd(rqt);
341 		break;
342 	case RQT_DL:
343 		ret = (int) process_rqt_download(rqt);
344 		break;
345 	case RQT_UL:
346 		puts("RQT: UPLOAD not supported!\n");
347 		break;
348 	default:
349 		pr_err("unknown request (%d)", rqt->rqt);
350 	}
351 
352 	return ret;
353 }
354 
355 /* ********************************************************** */
356 /*         THOR USB Function				      */
357 /* ********************************************************** */
358 
359 static inline struct usb_endpoint_descriptor *
360 ep_desc(struct usb_gadget *g, struct usb_endpoint_descriptor *hs,
361 	struct usb_endpoint_descriptor *fs)
362 {
363 	if (gadget_is_dualspeed(g) && g->speed == USB_SPEED_HIGH)
364 		return hs;
365 	return fs;
366 }
367 
368 static struct usb_interface_descriptor thor_downloader_intf_data = {
369 	.bLength =		sizeof(thor_downloader_intf_data),
370 	.bDescriptorType =	USB_DT_INTERFACE,
371 
372 	.bNumEndpoints =	2,
373 	.bInterfaceClass =	USB_CLASS_CDC_DATA,
374 };
375 
376 static struct usb_endpoint_descriptor fs_in_desc = {
377 	.bLength =		USB_DT_ENDPOINT_SIZE,
378 	.bDescriptorType =	USB_DT_ENDPOINT,
379 
380 	.bEndpointAddress =	USB_DIR_IN,
381 	.bmAttributes =	USB_ENDPOINT_XFER_BULK,
382 };
383 
384 static struct usb_endpoint_descriptor fs_out_desc = {
385 	.bLength =		USB_DT_ENDPOINT_SIZE,
386 	.bDescriptorType =	USB_DT_ENDPOINT,
387 
388 	.bEndpointAddress =	USB_DIR_OUT,
389 	.bmAttributes =	USB_ENDPOINT_XFER_BULK,
390 };
391 
392 /* CDC configuration */
393 static struct usb_interface_descriptor thor_downloader_intf_int = {
394 	.bLength =		sizeof(thor_downloader_intf_int),
395 	.bDescriptorType =	USB_DT_INTERFACE,
396 
397 	.bNumEndpoints =	1,
398 	.bInterfaceClass =	USB_CLASS_COMM,
399 	 /* 0x02 Abstract Line Control Model */
400 	.bInterfaceSubClass =   USB_CDC_SUBCLASS_ACM,
401 	/* 0x01 Common AT commands */
402 	.bInterfaceProtocol =   USB_CDC_ACM_PROTO_AT_V25TER,
403 };
404 
405 static struct usb_cdc_header_desc thor_downloader_cdc_header = {
406 	.bLength         =    sizeof(thor_downloader_cdc_header),
407 	.bDescriptorType =    0x24, /* CS_INTERFACE */
408 	.bDescriptorSubType = 0x00,
409 	.bcdCDC =             0x0110,
410 };
411 
412 static struct usb_cdc_call_mgmt_descriptor thor_downloader_cdc_call = {
413 	.bLength         =    sizeof(thor_downloader_cdc_call),
414 	.bDescriptorType =    0x24, /* CS_INTERFACE */
415 	.bDescriptorSubType = 0x01,
416 	.bmCapabilities =     0x00,
417 	.bDataInterface =     0x01,
418 };
419 
420 static struct usb_cdc_acm_descriptor thor_downloader_cdc_abstract = {
421 	.bLength         =    sizeof(thor_downloader_cdc_abstract),
422 	.bDescriptorType =    0x24, /* CS_INTERFACE */
423 	.bDescriptorSubType = 0x02,
424 	.bmCapabilities =     0x00,
425 };
426 
427 static struct usb_cdc_union_desc thor_downloader_cdc_union = {
428 	.bLength         =     sizeof(thor_downloader_cdc_union),
429 	.bDescriptorType =     0x24, /* CS_INTERFACE */
430 	.bDescriptorSubType =  USB_CDC_UNION_TYPE,
431 };
432 
433 static struct usb_endpoint_descriptor fs_int_desc = {
434 	.bLength = USB_DT_ENDPOINT_SIZE,
435 	.bDescriptorType = USB_DT_ENDPOINT,
436 
437 	.bEndpointAddress = 3 | USB_DIR_IN,
438 	.bmAttributes = USB_ENDPOINT_XFER_INT,
439 	.wMaxPacketSize = __constant_cpu_to_le16(16),
440 
441 	.bInterval = 0x9,
442 };
443 
444 static struct usb_interface_assoc_descriptor
445 thor_iad_descriptor = {
446 	.bLength =		sizeof(thor_iad_descriptor),
447 	.bDescriptorType =	USB_DT_INTERFACE_ASSOCIATION,
448 
449 	.bFirstInterface =	0,
450 	.bInterfaceCount =	2,	/* control + data */
451 	.bFunctionClass =	USB_CLASS_COMM,
452 	.bFunctionSubClass =	USB_CDC_SUBCLASS_ACM,
453 	.bFunctionProtocol =	USB_CDC_PROTO_NONE,
454 };
455 
456 static struct usb_endpoint_descriptor hs_in_desc = {
457 	.bLength =		USB_DT_ENDPOINT_SIZE,
458 	.bDescriptorType =	USB_DT_ENDPOINT,
459 
460 	.bmAttributes =	USB_ENDPOINT_XFER_BULK,
461 	.wMaxPacketSize =	__constant_cpu_to_le16(512),
462 };
463 
464 static struct usb_endpoint_descriptor hs_out_desc = {
465 	.bLength =		USB_DT_ENDPOINT_SIZE,
466 	.bDescriptorType =	USB_DT_ENDPOINT,
467 
468 	.bmAttributes =	USB_ENDPOINT_XFER_BULK,
469 	.wMaxPacketSize =	__constant_cpu_to_le16(512),
470 };
471 
472 static struct usb_endpoint_descriptor hs_int_desc = {
473 	.bLength = USB_DT_ENDPOINT_SIZE,
474 	.bDescriptorType = USB_DT_ENDPOINT,
475 
476 	.bmAttributes = USB_ENDPOINT_XFER_INT,
477 	.wMaxPacketSize = __constant_cpu_to_le16(16),
478 
479 	.bInterval = 0x9,
480 };
481 
482 /*
483  * This attribute vendor descriptor is necessary for correct operation with
484  * Windows version of THOR download program
485  *
486  * It prevents windows driver from sending zero lenght packet (ZLP) after
487  * each THOR_PACKET_SIZE. This assures consistent behaviour with libusb
488  */
489 static struct usb_cdc_attribute_vendor_descriptor thor_downloader_cdc_av = {
490 	.bLength =              sizeof(thor_downloader_cdc_av),
491 	.bDescriptorType =      0x24,
492 	.bDescriptorSubType =   0x80,
493 	.DAUType =              0x0002,
494 	.DAULength =            0x0001,
495 	.DAUValue =             0x00,
496 };
497 
498 static const struct usb_descriptor_header *hs_thor_downloader_function[] = {
499 	(struct usb_descriptor_header *)&thor_iad_descriptor,
500 
501 	(struct usb_descriptor_header *)&thor_downloader_intf_int,
502 	(struct usb_descriptor_header *)&thor_downloader_cdc_header,
503 	(struct usb_descriptor_header *)&thor_downloader_cdc_call,
504 	(struct usb_descriptor_header *)&thor_downloader_cdc_abstract,
505 	(struct usb_descriptor_header *)&thor_downloader_cdc_union,
506 	(struct usb_descriptor_header *)&hs_int_desc,
507 
508 	(struct usb_descriptor_header *)&thor_downloader_intf_data,
509 	(struct usb_descriptor_header *)&thor_downloader_cdc_av,
510 	(struct usb_descriptor_header *)&hs_in_desc,
511 	(struct usb_descriptor_header *)&hs_out_desc,
512 	NULL,
513 };
514 
515 /*-------------------------------------------------------------------------*/
516 static struct usb_request *alloc_ep_req(struct usb_ep *ep, unsigned length)
517 {
518 	struct usb_request *req;
519 
520 	req = usb_ep_alloc_request(ep, 0);
521 	if (!req)
522 		return req;
523 
524 	req->length = length;
525 	req->buf = memalign(CONFIG_SYS_CACHELINE_SIZE, length);
526 	if (!req->buf) {
527 		usb_ep_free_request(ep, req);
528 		req = NULL;
529 	}
530 
531 	return req;
532 }
533 
534 static int thor_rx_data(void)
535 {
536 	struct thor_dev *dev = thor_func->dev;
537 	int data_to_rx, tmp, status;
538 
539 	data_to_rx = dev->out_req->length;
540 	tmp = data_to_rx;
541 	do {
542 		dev->out_req->length = data_to_rx;
543 		debug("dev->out_req->length:%d dev->rxdata:%d\n",
544 		      dev->out_req->length, dev->rxdata);
545 
546 		status = usb_ep_queue(dev->out_ep, dev->out_req, 0);
547 		if (status) {
548 			pr_err("kill %s:  resubmit %d bytes --> %d",
549 			      dev->out_ep->name, dev->out_req->length, status);
550 			usb_ep_set_halt(dev->out_ep);
551 			return -EAGAIN;
552 		}
553 
554 		while (!dev->rxdata) {
555 			usb_gadget_handle_interrupts(0);
556 			if (ctrlc())
557 				return -1;
558 		}
559 		dev->rxdata = 0;
560 		data_to_rx -= dev->out_req->actual;
561 	} while (data_to_rx);
562 
563 	return tmp;
564 }
565 
566 static void thor_tx_data(unsigned char *data, int len)
567 {
568 	struct thor_dev *dev = thor_func->dev;
569 	unsigned char *ptr = dev->in_req->buf;
570 	int status;
571 
572 	memset(ptr, 0, len);
573 	memcpy(ptr, data, len);
574 
575 	dev->in_req->length = len;
576 
577 	debug("%s: dev->in_req->length:%d to_cpy:%zd\n", __func__,
578 	      dev->in_req->length, sizeof(data));
579 
580 	status = usb_ep_queue(dev->in_ep, dev->in_req, 0);
581 	if (status) {
582 		pr_err("kill %s:  resubmit %d bytes --> %d",
583 		      dev->in_ep->name, dev->in_req->length, status);
584 		usb_ep_set_halt(dev->in_ep);
585 	}
586 
587 	/* Wait until tx interrupt received */
588 	while (!dev->txdata)
589 		usb_gadget_handle_interrupts(0);
590 
591 	dev->txdata = 0;
592 }
593 
594 static void thor_rx_tx_complete(struct usb_ep *ep, struct usb_request *req)
595 {
596 	struct thor_dev *dev = thor_func->dev;
597 	int status = req->status;
598 
599 	debug("%s: ep_ptr:%p, req_ptr:%p\n", __func__, ep, req);
600 	switch (status) {
601 	case 0:
602 		if (ep == dev->out_ep)
603 			dev->rxdata = 1;
604 		else
605 			dev->txdata = 1;
606 
607 		break;
608 
609 	/* this endpoint is normally active while we're configured */
610 	case -ECONNABORTED:		/* hardware forced ep reset */
611 	case -ECONNRESET:		/* request dequeued */
612 	case -ESHUTDOWN:		/* disconnect from host */
613 	case -EREMOTEIO:                /* short read */
614 	case -EOVERFLOW:
615 		pr_err("ERROR:%d", status);
616 		break;
617 	}
618 
619 	debug("%s complete --> %d, %d/%d\n", ep->name,
620 	      status, req->actual, req->length);
621 }
622 
623 static void thor_setup_complete(struct usb_ep *ep, struct usb_request *req)
624 {
625 	if (req->status || req->actual != req->length)
626 		debug("setup complete --> %d, %d/%d\n",
627 		      req->status, req->actual, req->length);
628 }
629 
630 static int
631 thor_func_setup(struct usb_function *f, const struct usb_ctrlrequest *ctrl)
632 {
633 	struct thor_dev *dev = thor_func->dev;
634 	struct usb_request *req = dev->req;
635 	struct usb_gadget *gadget = dev->gadget;
636 	int value = 0;
637 
638 	u16 len = le16_to_cpu(ctrl->wLength);
639 
640 	debug("Req_Type: 0x%x Req: 0x%x wValue: 0x%x wIndex: 0x%x wLen: 0x%x\n",
641 	      ctrl->bRequestType, ctrl->bRequest, ctrl->wValue, ctrl->wIndex,
642 	      ctrl->wLength);
643 
644 	switch (ctrl->bRequest) {
645 	case USB_CDC_REQ_SET_CONTROL_LINE_STATE:
646 		value = 0;
647 		break;
648 	case USB_CDC_REQ_SET_LINE_CODING:
649 		value = len;
650 		/* Line Coding set done = configuration done */
651 		thor_func->dev->configuration_done = 1;
652 		break;
653 
654 	default:
655 		pr_err("thor_setup: unknown request: %d", ctrl->bRequest);
656 	}
657 
658 	if (value >= 0) {
659 		req->length = value;
660 		req->zero = value < len;
661 		value = usb_ep_queue(gadget->ep0, req, 0);
662 		if (value < 0) {
663 			debug("%s: ep_queue: %d\n", __func__, value);
664 			req->status = 0;
665 		}
666 	}
667 
668 	return value;
669 }
670 
671 /* Specific to the THOR protocol */
672 static void thor_set_dma(void *addr, int len)
673 {
674 	struct thor_dev *dev = thor_func->dev;
675 
676 	debug("in_req:%p, out_req:%p\n", dev->in_req, dev->out_req);
677 	debug("addr:%p, len:%d\n", addr, len);
678 
679 	dev->out_req->buf = addr;
680 	dev->out_req->length = len;
681 }
682 
683 int thor_init(void)
684 {
685 	struct thor_dev *dev = thor_func->dev;
686 
687 	/* Wait for a device enumeration and configuration settings */
688 	debug("THOR enumeration/configuration setting....\n");
689 	while (!dev->configuration_done)
690 		usb_gadget_handle_interrupts(0);
691 
692 	thor_set_dma(thor_rx_data_buf, strlen("THOR"));
693 	/* detect the download request from Host PC */
694 	if (thor_rx_data() < 0) {
695 		printf("%s: Data not received!\n", __func__);
696 		return -1;
697 	}
698 
699 	if (!strncmp((char *)thor_rx_data_buf, "THOR", strlen("THOR"))) {
700 		puts("Download request from the Host PC\n");
701 		udelay(30 * 1000); /* 30 ms */
702 
703 		strcpy((char *)thor_tx_data_buf, "ROHT");
704 		thor_tx_data(thor_tx_data_buf, strlen("ROHT"));
705 	} else {
706 		puts("Wrong reply information\n");
707 		return -1;
708 	}
709 
710 	return 0;
711 }
712 
713 int thor_handle(void)
714 {
715 	int ret;
716 
717 	/* receive the data from Host PC */
718 	while (1) {
719 		thor_set_dma(thor_rx_data_buf, sizeof(struct rqt_box));
720 		ret = thor_rx_data();
721 
722 		if (ret > 0) {
723 			ret = process_data();
724 #ifdef CONFIG_THOR_RESET_OFF
725 			if (ret == RESET_DONE)
726 				break;
727 #endif
728 			if (ret < 0)
729 				return ret;
730 		} else {
731 			printf("%s: No data received!\n", __func__);
732 			break;
733 		}
734 	}
735 
736 	return 0;
737 }
738 
739 static void free_ep_req(struct usb_ep *ep, struct usb_request *req)
740 {
741 	if (req->buf)
742 		free(req->buf);
743 	usb_ep_free_request(ep, req);
744 }
745 
746 static int thor_func_bind(struct usb_configuration *c, struct usb_function *f)
747 {
748 	struct usb_gadget *gadget = c->cdev->gadget;
749 	struct f_thor *f_thor = func_to_thor(f);
750 	struct thor_dev *dev;
751 	struct usb_ep *ep;
752 	int status;
753 
754 	thor_func = f_thor;
755 	dev = memalign(CONFIG_SYS_CACHELINE_SIZE, sizeof(*dev));
756 	if (!dev)
757 		return -ENOMEM;
758 
759 	memset(dev, 0, sizeof(*dev));
760 	dev->gadget = gadget;
761 	f_thor->dev = dev;
762 
763 	debug("%s: usb_configuration: 0x%p usb_function: 0x%p\n",
764 	      __func__, c, f);
765 	debug("f_thor: 0x%p thor: 0x%p\n", f_thor, dev);
766 
767 	/* EP0  */
768 	/* preallocate control response and buffer */
769 	dev->req = usb_ep_alloc_request(gadget->ep0, 0);
770 	if (!dev->req) {
771 		status = -ENOMEM;
772 		goto fail;
773 	}
774 	dev->req->buf = memalign(CONFIG_SYS_CACHELINE_SIZE,
775 				 THOR_PACKET_SIZE);
776 	if (!dev->req->buf) {
777 		status = -ENOMEM;
778 		goto fail;
779 	}
780 
781 	dev->req->complete = thor_setup_complete;
782 
783 	/* DYNAMIC interface numbers assignments */
784 	status = usb_interface_id(c, f);
785 
786 	if (status < 0)
787 		goto fail;
788 
789 	thor_downloader_intf_int.bInterfaceNumber = status;
790 	thor_downloader_cdc_union.bMasterInterface0 = status;
791 
792 	status = usb_interface_id(c, f);
793 
794 	if (status < 0)
795 		goto fail;
796 
797 	thor_downloader_intf_data.bInterfaceNumber = status;
798 	thor_downloader_cdc_union.bSlaveInterface0 = status;
799 
800 	/* allocate instance-specific endpoints */
801 	ep = usb_ep_autoconfig(gadget, &fs_in_desc);
802 	if (!ep) {
803 		status = -ENODEV;
804 		goto fail;
805 	}
806 
807 	if (gadget_is_dualspeed(gadget)) {
808 		hs_in_desc.bEndpointAddress =
809 				fs_in_desc.bEndpointAddress;
810 	}
811 
812 	dev->in_ep = ep; /* Store IN EP for enabling @ setup */
813 	ep->driver_data = dev;
814 
815 	ep = usb_ep_autoconfig(gadget, &fs_out_desc);
816 	if (!ep) {
817 		status = -ENODEV;
818 		goto fail;
819 	}
820 
821 	if (gadget_is_dualspeed(gadget))
822 		hs_out_desc.bEndpointAddress =
823 				fs_out_desc.bEndpointAddress;
824 
825 	dev->out_ep = ep; /* Store OUT EP for enabling @ setup */
826 	ep->driver_data = dev;
827 
828 	ep = usb_ep_autoconfig(gadget, &fs_int_desc);
829 	if (!ep) {
830 		status = -ENODEV;
831 		goto fail;
832 	}
833 
834 	dev->int_ep = ep;
835 	ep->driver_data = dev;
836 
837 	if (gadget_is_dualspeed(gadget)) {
838 		hs_int_desc.bEndpointAddress =
839 				fs_int_desc.bEndpointAddress;
840 
841 		f->hs_descriptors = (struct usb_descriptor_header **)
842 			&hs_thor_downloader_function;
843 
844 		if (!f->hs_descriptors)
845 			goto fail;
846 	}
847 
848 	debug("%s: out_ep:%p out_req:%p\n", __func__,
849 	      dev->out_ep, dev->out_req);
850 
851 	return 0;
852 
853  fail:
854 	if (dev->req)
855 		free_ep_req(gadget->ep0, dev->req);
856 	free(dev);
857 	return status;
858 }
859 
860 static void thor_unbind(struct usb_configuration *c, struct usb_function *f)
861 {
862 	struct f_thor *f_thor = func_to_thor(f);
863 	struct thor_dev *dev = f_thor->dev;
864 
865 	free_ep_req(dev->gadget->ep0, dev->req);
866 	free(dev);
867 	memset(thor_func, 0, sizeof(*thor_func));
868 	thor_func = NULL;
869 }
870 
871 static void thor_func_disable(struct usb_function *f)
872 {
873 	struct f_thor *f_thor = func_to_thor(f);
874 	struct thor_dev *dev = f_thor->dev;
875 
876 	debug("%s:\n", __func__);
877 
878 	/* Avoid freeing memory when ep is still claimed */
879 	if (dev->in_ep->driver_data) {
880 		free_ep_req(dev->in_ep, dev->in_req);
881 		usb_ep_disable(dev->in_ep);
882 		dev->in_ep->driver_data = NULL;
883 	}
884 
885 	if (dev->out_ep->driver_data) {
886 		usb_ep_free_request(dev->out_ep, dev->out_req);
887 		usb_ep_disable(dev->out_ep);
888 		dev->out_ep->driver_data = NULL;
889 	}
890 
891 	if (dev->int_ep->driver_data) {
892 		usb_ep_disable(dev->int_ep);
893 		dev->int_ep->driver_data = NULL;
894 	}
895 }
896 
897 static int thor_eps_setup(struct usb_function *f)
898 {
899 	struct usb_composite_dev *cdev = f->config->cdev;
900 	struct usb_gadget *gadget = cdev->gadget;
901 	struct thor_dev *dev = thor_func->dev;
902 	struct usb_endpoint_descriptor *d;
903 	struct usb_request *req;
904 	struct usb_ep *ep;
905 	int result;
906 
907 	ep = dev->in_ep;
908 	d = ep_desc(gadget, &hs_in_desc, &fs_in_desc);
909 	debug("(d)bEndpointAddress: 0x%x\n", d->bEndpointAddress);
910 
911 	result = usb_ep_enable(ep, d);
912 	if (result)
913 		goto err;
914 
915 	ep->driver_data = cdev; /* claim */
916 	req = alloc_ep_req(ep, THOR_PACKET_SIZE);
917 	if (!req) {
918 		result = -EIO;
919 		goto err_disable_in_ep;
920 	}
921 
922 	memset(req->buf, 0, req->length);
923 	req->complete = thor_rx_tx_complete;
924 	dev->in_req = req;
925 	ep = dev->out_ep;
926 	d = ep_desc(gadget, &hs_out_desc, &fs_out_desc);
927 	debug("(d)bEndpointAddress: 0x%x\n", d->bEndpointAddress);
928 
929 	result = usb_ep_enable(ep, d);
930 	if (result)
931 		goto err_free_in_req;
932 
933 	ep->driver_data = cdev; /* claim */
934 	req = usb_ep_alloc_request(ep, 0);
935 	if (!req) {
936 		result = -EIO;
937 		goto err_disable_out_ep;
938 	}
939 
940 	req->complete = thor_rx_tx_complete;
941 	dev->out_req = req;
942 	/* ACM control EP */
943 	ep = dev->int_ep;
944 	ep->driver_data = cdev;	/* claim */
945 
946 	return 0;
947 
948  err_disable_out_ep:
949 	usb_ep_disable(dev->out_ep);
950 
951  err_free_in_req:
952 	free_ep_req(dev->in_ep, dev->in_req);
953 	dev->in_req = NULL;
954 
955  err_disable_in_ep:
956 	usb_ep_disable(dev->in_ep);
957 
958  err:
959 	return result;
960 }
961 
962 static int thor_func_set_alt(struct usb_function *f,
963 			     unsigned intf, unsigned alt)
964 {
965 	struct thor_dev *dev = thor_func->dev;
966 	int result;
967 
968 	debug("%s: func: %s intf: %d alt: %d\n",
969 	      __func__, f->name, intf, alt);
970 
971 	switch (intf) {
972 	case 0:
973 		debug("ACM INTR interface\n");
974 		break;
975 	case 1:
976 		debug("Communication Data interface\n");
977 		result = thor_eps_setup(f);
978 		if (result)
979 			pr_err("%s: EPs setup failed!", __func__);
980 		dev->configuration_done = 1;
981 		break;
982 	}
983 
984 	return 0;
985 }
986 
987 static int thor_func_init(struct usb_configuration *c)
988 {
989 	struct f_thor *f_thor;
990 	int status;
991 
992 	debug("%s: cdev: 0x%p\n", __func__, c->cdev);
993 
994 	f_thor = memalign(CONFIG_SYS_CACHELINE_SIZE, sizeof(*f_thor));
995 	if (!f_thor)
996 		return -ENOMEM;
997 
998 	memset(f_thor, 0, sizeof(*f_thor));
999 
1000 	f_thor->usb_function.name = "f_thor";
1001 	f_thor->usb_function.bind = thor_func_bind;
1002 	f_thor->usb_function.unbind = thor_unbind;
1003 	f_thor->usb_function.setup = thor_func_setup;
1004 	f_thor->usb_function.set_alt = thor_func_set_alt;
1005 	f_thor->usb_function.disable = thor_func_disable;
1006 
1007 	status = usb_add_function(c, &f_thor->usb_function);
1008 	if (status)
1009 		free(f_thor);
1010 
1011 	return status;
1012 }
1013 
1014 int thor_add(struct usb_configuration *c)
1015 {
1016 	debug("%s:\n", __func__);
1017 	return thor_func_init(c);
1018 }
1019 
1020 DECLARE_GADGET_BIND_CALLBACK(usb_dnl_thor, thor_add);
1021