]>
Commit | Line | Data |
---|---|---|
df365423 IPG |
1 | /* |
2 | * WUSB Wire Adapter | |
3 | * Data transfer and URB enqueing | |
4 | * | |
5 | * Copyright (C) 2005-2006 Intel Corporation | |
6 | * Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com> | |
7 | * | |
8 | * This program is free software; you can redistribute it and/or | |
9 | * modify it under the terms of the GNU General Public License version | |
10 | * 2 as published by the Free Software Foundation. | |
11 | * | |
12 | * This program is distributed in the hope that it will be useful, | |
13 | * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
14 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
15 | * GNU General Public License for more details. | |
16 | * | |
17 | * You should have received a copy of the GNU General Public License | |
18 | * along with this program; if not, write to the Free Software | |
19 | * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA | |
20 | * 02110-1301, USA. | |
21 | * | |
22 | * | |
23 | * How transfers work: get a buffer, break it up in segments (segment | |
24 | * size is a multiple of the maxpacket size). For each segment issue a | |
25 | * segment request (struct wa_xfer_*), then send the data buffer if | |
26 | * out or nothing if in (all over the DTO endpoint). | |
27 | * | |
28 | * For each submitted segment request, a notification will come over | |
29 | * the NEP endpoint and a transfer result (struct xfer_result) will | |
30 | * arrive in the DTI URB. Read it, get the xfer ID, see if there is | |
31 | * data coming (inbound transfer), schedule a read and handle it. | |
32 | * | |
33 | * Sounds simple, it is a pain to implement. | |
34 | * | |
35 | * | |
36 | * ENTRY POINTS | |
37 | * | |
38 | * FIXME | |
39 | * | |
40 | * LIFE CYCLE / STATE DIAGRAM | |
41 | * | |
42 | * FIXME | |
43 | * | |
44 | * THIS CODE IS DISGUSTING | |
45 | * | |
46 | * Warned you are; it's my second try and still not happy with it. | |
47 | * | |
48 | * NOTES: | |
49 | * | |
50 | * - No iso | |
51 | * | |
52 | * - Supports DMA xfers, control, bulk and maybe interrupt | |
53 | * | |
54 | * - Does not recycle unused rpipes | |
55 | * | |
56 | * An rpipe is assigned to an endpoint the first time it is used, | |
57 | * and then it's there, assigned, until the endpoint is disabled | |
58 | * (destroyed [{h,d}wahc_op_ep_disable()]. The assignment of the | |
59 | * rpipe to the endpoint is done under the wa->rpipe_sem semaphore | |
60 | * (should be a mutex). | |
61 | * | |
62 | * Two methods it could be done: | |
63 | * | |
25985edc | 64 | * (a) set up a timer every time an rpipe's use count drops to 1 |
df365423 IPG |
65 | * (which means unused) or when a transfer ends. Reset the |
66 | * timer when a xfer is queued. If the timer expires, release | |
67 | * the rpipe [see rpipe_ep_disable()]. | |
68 | * | |
69 | * (b) when looking for free rpipes to attach [rpipe_get_by_ep()], | |
70 | * when none are found go over the list, check their endpoint | |
71 | * and their activity record (if no last-xfer-done-ts in the | |
72 | * last x seconds) take it | |
73 | * | |
74 | * However, due to the fact that we have a set of limited | |
75 | * resources (max-segments-at-the-same-time per xfer, | |
76 | * xfers-per-ripe, blocks-per-rpipe, rpipes-per-host), at the end | |
77 | * we are going to have to rebuild all this based on an scheduler, | |
78 | * to where we have a list of transactions to do and based on the | |
f77f13e2 | 79 | * availability of the different required components (blocks, |
df365423 IPG |
80 | * rpipes, segment slots, etc), we go scheduling them. Painful. |
81 | */ | |
82 | #include <linux/init.h> | |
83 | #include <linux/spinlock.h> | |
5a0e3ad6 | 84 | #include <linux/slab.h> |
df365423 | 85 | #include <linux/hash.h> |
9708cd2f | 86 | #include <linux/ratelimit.h> |
f940fcd8 | 87 | #include <linux/export.h> |
2b81c083 | 88 | #include <linux/scatterlist.h> |
bce83697 | 89 | |
df365423 IPG |
90 | #include "wa-hc.h" |
91 | #include "wusbhc.h" | |
92 | ||
df365423 IPG |
93 | enum { |
94 | WA_SEGS_MAX = 255, | |
95 | }; | |
96 | ||
97 | enum wa_seg_status { | |
98 | WA_SEG_NOTREADY, | |
99 | WA_SEG_READY, | |
100 | WA_SEG_DELAYED, | |
101 | WA_SEG_SUBMITTED, | |
102 | WA_SEG_PENDING, | |
103 | WA_SEG_DTI_PENDING, | |
104 | WA_SEG_DONE, | |
105 | WA_SEG_ERROR, | |
106 | WA_SEG_ABORTED, | |
107 | }; | |
108 | ||
109 | static void wa_xfer_delayed_run(struct wa_rpipe *); | |
110 | ||
111 | /* | |
112 | * Life cycle governed by 'struct urb' (the refcount of the struct is | |
113 | * that of the 'struct urb' and usb_free_urb() would free the whole | |
114 | * struct). | |
115 | */ | |
116 | struct wa_seg { | |
117 | struct urb urb; | |
118 | struct urb *dto_urb; /* for data output? */ | |
119 | struct list_head list_node; /* for rpipe->req_list */ | |
120 | struct wa_xfer *xfer; /* out xfer */ | |
121 | u8 index; /* which segment we are */ | |
122 | enum wa_seg_status status; | |
123 | ssize_t result; /* bytes xfered or error */ | |
124 | struct wa_xfer_hdr xfer_hdr; | |
125 | u8 xfer_extra[]; /* xtra space for xfer_hdr_ctl */ | |
126 | }; | |
127 | ||
128 | static void wa_seg_init(struct wa_seg *seg) | |
129 | { | |
130 | /* usb_init_urb() repeats a lot of work, so we do it here */ | |
131 | kref_init(&seg->urb.kref); | |
132 | } | |
133 | ||
134 | /* | |
135 | * Protected by xfer->lock | |
136 | * | |
137 | */ | |
138 | struct wa_xfer { | |
139 | struct kref refcnt; | |
140 | struct list_head list_node; | |
141 | spinlock_t lock; | |
142 | u32 id; | |
143 | ||
144 | struct wahc *wa; /* Wire adapter we are plugged to */ | |
145 | struct usb_host_endpoint *ep; | |
25985edc | 146 | struct urb *urb; /* URB we are transferring for */ |
df365423 IPG |
147 | struct wa_seg **seg; /* transfer segments */ |
148 | u8 segs, segs_submitted, segs_done; | |
149 | unsigned is_inbound:1; | |
150 | unsigned is_dma:1; | |
151 | size_t seg_size; | |
152 | int result; | |
153 | ||
154 | gfp_t gfp; /* allocation mask */ | |
155 | ||
156 | struct wusb_dev *wusb_dev; /* for activity timestamps */ | |
157 | }; | |
158 | ||
159 | static inline void wa_xfer_init(struct wa_xfer *xfer) | |
160 | { | |
161 | kref_init(&xfer->refcnt); | |
162 | INIT_LIST_HEAD(&xfer->list_node); | |
163 | spin_lock_init(&xfer->lock); | |
164 | } | |
165 | ||
166 | /* | |
25985edc | 167 | * Destroy a transfer structure |
df365423 IPG |
168 | * |
169 | * Note that the xfer->seg[index] thingies follow the URB life cycle, | |
170 | * so we need to put them, not free them. | |
171 | */ | |
172 | static void wa_xfer_destroy(struct kref *_xfer) | |
173 | { | |
174 | struct wa_xfer *xfer = container_of(_xfer, struct wa_xfer, refcnt); | |
175 | if (xfer->seg) { | |
176 | unsigned cnt; | |
177 | for (cnt = 0; cnt < xfer->segs; cnt++) { | |
178 | if (xfer->is_inbound) | |
179 | usb_put_urb(xfer->seg[cnt]->dto_urb); | |
180 | usb_put_urb(&xfer->seg[cnt]->urb); | |
181 | } | |
182 | } | |
183 | kfree(xfer); | |
df365423 IPG |
184 | } |
185 | ||
186 | static void wa_xfer_get(struct wa_xfer *xfer) | |
187 | { | |
188 | kref_get(&xfer->refcnt); | |
189 | } | |
190 | ||
191 | static void wa_xfer_put(struct wa_xfer *xfer) | |
192 | { | |
df365423 | 193 | kref_put(&xfer->refcnt, wa_xfer_destroy); |
df365423 IPG |
194 | } |
195 | ||
196 | /* | |
197 | * xfer is referenced | |
198 | * | |
199 | * xfer->lock has to be unlocked | |
200 | * | |
201 | * We take xfer->lock for setting the result; this is a barrier | |
202 | * against drivers/usb/core/hcd.c:unlink1() being called after we call | |
203 | * usb_hcd_giveback_urb() and wa_urb_dequeue() trying to get a | |
204 | * reference to the transfer. | |
205 | */ | |
206 | static void wa_xfer_giveback(struct wa_xfer *xfer) | |
207 | { | |
208 | unsigned long flags; | |
bce83697 | 209 | |
df365423 IPG |
210 | spin_lock_irqsave(&xfer->wa->xfer_list_lock, flags); |
211 | list_del_init(&xfer->list_node); | |
212 | spin_unlock_irqrestore(&xfer->wa->xfer_list_lock, flags); | |
213 | /* FIXME: segmentation broken -- kills DWA */ | |
214 | wusbhc_giveback_urb(xfer->wa->wusb, xfer->urb, xfer->result); | |
215 | wa_put(xfer->wa); | |
216 | wa_xfer_put(xfer); | |
df365423 IPG |
217 | } |
218 | ||
219 | /* | |
220 | * xfer is referenced | |
221 | * | |
222 | * xfer->lock has to be unlocked | |
223 | */ | |
224 | static void wa_xfer_completion(struct wa_xfer *xfer) | |
225 | { | |
df365423 IPG |
226 | if (xfer->wusb_dev) |
227 | wusb_dev_put(xfer->wusb_dev); | |
228 | rpipe_put(xfer->ep->hcpriv); | |
229 | wa_xfer_giveback(xfer); | |
df365423 IPG |
230 | } |
231 | ||
232 | /* | |
233 | * If transfer is done, wrap it up and return true | |
234 | * | |
235 | * xfer->lock has to be locked | |
236 | */ | |
237 | static unsigned __wa_xfer_is_done(struct wa_xfer *xfer) | |
238 | { | |
bce83697 | 239 | struct device *dev = &xfer->wa->usb_iface->dev; |
df365423 IPG |
240 | unsigned result, cnt; |
241 | struct wa_seg *seg; | |
242 | struct urb *urb = xfer->urb; | |
243 | unsigned found_short = 0; | |
244 | ||
df365423 IPG |
245 | result = xfer->segs_done == xfer->segs_submitted; |
246 | if (result == 0) | |
247 | goto out; | |
248 | urb->actual_length = 0; | |
249 | for (cnt = 0; cnt < xfer->segs; cnt++) { | |
250 | seg = xfer->seg[cnt]; | |
251 | switch (seg->status) { | |
252 | case WA_SEG_DONE: | |
253 | if (found_short && seg->result > 0) { | |
bce83697 DV |
254 | dev_dbg(dev, "xfer %p#%u: bad short segments (%zu)\n", |
255 | xfer, cnt, seg->result); | |
df365423 IPG |
256 | urb->status = -EINVAL; |
257 | goto out; | |
258 | } | |
259 | urb->actual_length += seg->result; | |
260 | if (seg->result < xfer->seg_size | |
261 | && cnt != xfer->segs-1) | |
262 | found_short = 1; | |
bce83697 DV |
263 | dev_dbg(dev, "xfer %p#%u: DONE short %d " |
264 | "result %zu urb->actual_length %d\n", | |
265 | xfer, seg->index, found_short, seg->result, | |
266 | urb->actual_length); | |
df365423 IPG |
267 | break; |
268 | case WA_SEG_ERROR: | |
269 | xfer->result = seg->result; | |
bce83697 DV |
270 | dev_dbg(dev, "xfer %p#%u: ERROR result %zu\n", |
271 | xfer, seg->index, seg->result); | |
df365423 IPG |
272 | goto out; |
273 | case WA_SEG_ABORTED: | |
bce83697 DV |
274 | dev_dbg(dev, "xfer %p#%u ABORTED: result %d\n", |
275 | xfer, seg->index, urb->status); | |
df365423 IPG |
276 | xfer->result = urb->status; |
277 | goto out; | |
278 | default: | |
bce83697 DV |
279 | dev_warn(dev, "xfer %p#%u: is_done bad state %d\n", |
280 | xfer, cnt, seg->status); | |
df365423 | 281 | xfer->result = -EINVAL; |
df365423 IPG |
282 | goto out; |
283 | } | |
284 | } | |
285 | xfer->result = 0; | |
286 | out: | |
df365423 IPG |
287 | return result; |
288 | } | |
289 | ||
290 | /* | |
291 | * Initialize a transfer's ID | |
292 | * | |
293 | * We need to use a sequential number; if we use the pointer or the | |
294 | * hash of the pointer, it can repeat over sequential transfers and | |
295 | * then it will confuse the HWA....wonder why in hell they put a 32 | |
296 | * bit handle in there then. | |
297 | */ | |
298 | static void wa_xfer_id_init(struct wa_xfer *xfer) | |
299 | { | |
300 | xfer->id = atomic_add_return(1, &xfer->wa->xfer_id_count); | |
301 | } | |
302 | ||
303 | /* | |
304 | * Return the xfer's ID associated with xfer | |
305 | * | |
306 | * Need to generate a | |
307 | */ | |
308 | static u32 wa_xfer_id(struct wa_xfer *xfer) | |
309 | { | |
310 | return xfer->id; | |
311 | } | |
312 | ||
313 | /* | |
314 | * Search for a transfer list ID on the HCD's URB list | |
315 | * | |
316 | * For 32 bit architectures, we use the pointer itself; for 64 bits, a | |
317 | * 32-bit hash of the pointer. | |
318 | * | |
319 | * @returns NULL if not found. | |
320 | */ | |
321 | static struct wa_xfer *wa_xfer_get_by_id(struct wahc *wa, u32 id) | |
322 | { | |
323 | unsigned long flags; | |
324 | struct wa_xfer *xfer_itr; | |
325 | spin_lock_irqsave(&wa->xfer_list_lock, flags); | |
326 | list_for_each_entry(xfer_itr, &wa->xfer_list, list_node) { | |
327 | if (id == xfer_itr->id) { | |
328 | wa_xfer_get(xfer_itr); | |
329 | goto out; | |
330 | } | |
331 | } | |
332 | xfer_itr = NULL; | |
333 | out: | |
334 | spin_unlock_irqrestore(&wa->xfer_list_lock, flags); | |
335 | return xfer_itr; | |
336 | } | |
337 | ||
338 | struct wa_xfer_abort_buffer { | |
339 | struct urb urb; | |
340 | struct wa_xfer_abort cmd; | |
341 | }; | |
342 | ||
343 | static void __wa_xfer_abort_cb(struct urb *urb) | |
344 | { | |
345 | struct wa_xfer_abort_buffer *b = urb->context; | |
346 | usb_put_urb(&b->urb); | |
347 | } | |
348 | ||
349 | /* | |
350 | * Aborts an ongoing transaction | |
351 | * | |
352 | * Assumes the transfer is referenced and locked and in a submitted | |
353 | * state (mainly that there is an endpoint/rpipe assigned). | |
354 | * | |
355 | * The callback (see above) does nothing but freeing up the data by | |
356 | * putting the URB. Because the URB is allocated at the head of the | |
357 | * struct, the whole space we allocated is kfreed. | |
358 | * | |
359 | * We'll get an 'aborted transaction' xfer result on DTI, that'll | |
360 | * politely ignore because at this point the transaction has been | |
361 | * marked as aborted already. | |
362 | */ | |
363 | static void __wa_xfer_abort(struct wa_xfer *xfer) | |
364 | { | |
365 | int result; | |
366 | struct device *dev = &xfer->wa->usb_iface->dev; | |
367 | struct wa_xfer_abort_buffer *b; | |
368 | struct wa_rpipe *rpipe = xfer->ep->hcpriv; | |
369 | ||
370 | b = kmalloc(sizeof(*b), GFP_ATOMIC); | |
371 | if (b == NULL) | |
372 | goto error_kmalloc; | |
373 | b->cmd.bLength = sizeof(b->cmd); | |
374 | b->cmd.bRequestType = WA_XFER_ABORT; | |
375 | b->cmd.wRPipe = rpipe->descr.wRPipeIndex; | |
376 | b->cmd.dwTransferID = wa_xfer_id(xfer); | |
377 | ||
378 | usb_init_urb(&b->urb); | |
379 | usb_fill_bulk_urb(&b->urb, xfer->wa->usb_dev, | |
380 | usb_sndbulkpipe(xfer->wa->usb_dev, | |
381 | xfer->wa->dto_epd->bEndpointAddress), | |
382 | &b->cmd, sizeof(b->cmd), __wa_xfer_abort_cb, b); | |
383 | result = usb_submit_urb(&b->urb, GFP_ATOMIC); | |
384 | if (result < 0) | |
385 | goto error_submit; | |
386 | return; /* callback frees! */ | |
387 | ||
388 | ||
389 | error_submit: | |
390 | if (printk_ratelimit()) | |
391 | dev_err(dev, "xfer %p: Can't submit abort request: %d\n", | |
392 | xfer, result); | |
393 | kfree(b); | |
394 | error_kmalloc: | |
395 | return; | |
396 | ||
397 | } | |
398 | ||
399 | /* | |
400 | * | |
401 | * @returns < 0 on error, transfer segment request size if ok | |
402 | */ | |
403 | static ssize_t __wa_xfer_setup_sizes(struct wa_xfer *xfer, | |
404 | enum wa_xfer_type *pxfer_type) | |
405 | { | |
406 | ssize_t result; | |
407 | struct device *dev = &xfer->wa->usb_iface->dev; | |
408 | size_t maxpktsize; | |
409 | struct urb *urb = xfer->urb; | |
410 | struct wa_rpipe *rpipe = xfer->ep->hcpriv; | |
411 | ||
df365423 IPG |
412 | switch (rpipe->descr.bmAttribute & 0x3) { |
413 | case USB_ENDPOINT_XFER_CONTROL: | |
414 | *pxfer_type = WA_XFER_TYPE_CTL; | |
415 | result = sizeof(struct wa_xfer_ctl); | |
416 | break; | |
417 | case USB_ENDPOINT_XFER_INT: | |
418 | case USB_ENDPOINT_XFER_BULK: | |
419 | *pxfer_type = WA_XFER_TYPE_BI; | |
420 | result = sizeof(struct wa_xfer_bi); | |
421 | break; | |
422 | case USB_ENDPOINT_XFER_ISOC: | |
423 | dev_err(dev, "FIXME: ISOC not implemented\n"); | |
424 | result = -ENOSYS; | |
425 | goto error; | |
426 | default: | |
427 | /* never happens */ | |
428 | BUG(); | |
429 | result = -EINVAL; /* shut gcc up */ | |
430 | }; | |
431 | xfer->is_inbound = urb->pipe & USB_DIR_IN ? 1 : 0; | |
432 | xfer->is_dma = urb->transfer_flags & URB_NO_TRANSFER_DMA_MAP ? 1 : 0; | |
433 | xfer->seg_size = le16_to_cpu(rpipe->descr.wBlocks) | |
434 | * 1 << (xfer->wa->wa_descr->bRPipeBlockSize - 1); | |
435 | /* Compute the segment size and make sure it is a multiple of | |
436 | * the maxpktsize (WUSB1.0[8.3.3.1])...not really too much of | |
437 | * a check (FIXME) */ | |
438 | maxpktsize = le16_to_cpu(rpipe->descr.wMaxPacketSize); | |
439 | if (xfer->seg_size < maxpktsize) { | |
440 | dev_err(dev, "HW BUG? seg_size %zu smaller than maxpktsize " | |
441 | "%zu\n", xfer->seg_size, maxpktsize); | |
442 | result = -EINVAL; | |
443 | goto error; | |
444 | } | |
445 | xfer->seg_size = (xfer->seg_size / maxpktsize) * maxpktsize; | |
2b81c083 | 446 | xfer->segs = DIV_ROUND_UP(urb->transfer_buffer_length, xfer->seg_size); |
df365423 IPG |
447 | if (xfer->segs >= WA_SEGS_MAX) { |
448 | dev_err(dev, "BUG? ops, number of segments %d bigger than %d\n", | |
449 | (int)(urb->transfer_buffer_length / xfer->seg_size), | |
450 | WA_SEGS_MAX); | |
451 | result = -EINVAL; | |
452 | goto error; | |
453 | } | |
454 | if (xfer->segs == 0 && *pxfer_type == WA_XFER_TYPE_CTL) | |
455 | xfer->segs = 1; | |
456 | error: | |
df365423 IPG |
457 | return result; |
458 | } | |
459 | ||
bce83697 | 460 | /* Fill in the common request header and xfer-type specific data. */ |
df365423 IPG |
461 | static void __wa_xfer_setup_hdr0(struct wa_xfer *xfer, |
462 | struct wa_xfer_hdr *xfer_hdr0, | |
463 | enum wa_xfer_type xfer_type, | |
464 | size_t xfer_hdr_size) | |
465 | { | |
466 | struct wa_rpipe *rpipe = xfer->ep->hcpriv; | |
467 | ||
468 | xfer_hdr0 = &xfer->seg[0]->xfer_hdr; | |
469 | xfer_hdr0->bLength = xfer_hdr_size; | |
470 | xfer_hdr0->bRequestType = xfer_type; | |
471 | xfer_hdr0->wRPipe = rpipe->descr.wRPipeIndex; | |
472 | xfer_hdr0->dwTransferID = wa_xfer_id(xfer); | |
473 | xfer_hdr0->bTransferSegment = 0; | |
474 | switch (xfer_type) { | |
475 | case WA_XFER_TYPE_CTL: { | |
476 | struct wa_xfer_ctl *xfer_ctl = | |
477 | container_of(xfer_hdr0, struct wa_xfer_ctl, hdr); | |
478 | xfer_ctl->bmAttribute = xfer->is_inbound ? 1 : 0; | |
df365423 IPG |
479 | memcpy(&xfer_ctl->baSetupData, xfer->urb->setup_packet, |
480 | sizeof(xfer_ctl->baSetupData)); | |
481 | break; | |
482 | } | |
483 | case WA_XFER_TYPE_BI: | |
484 | break; | |
485 | case WA_XFER_TYPE_ISO: | |
486 | printk(KERN_ERR "FIXME: ISOC not implemented\n"); | |
487 | default: | |
488 | BUG(); | |
489 | }; | |
490 | } | |
491 | ||
492 | /* | |
493 | * Callback for the OUT data phase of the segment request | |
494 | * | |
495 | * Check wa_seg_cb(); most comments also apply here because this | |
496 | * function does almost the same thing and they work closely | |
497 | * together. | |
498 | * | |
25985edc | 499 | * If the seg request has failed but this DTO phase has succeeded, |
df365423 IPG |
500 | * wa_seg_cb() has already failed the segment and moved the |
501 | * status to WA_SEG_ERROR, so this will go through 'case 0' and | |
502 | * effectively do nothing. | |
503 | */ | |
504 | static void wa_seg_dto_cb(struct urb *urb) | |
505 | { | |
506 | struct wa_seg *seg = urb->context; | |
507 | struct wa_xfer *xfer = seg->xfer; | |
508 | struct wahc *wa; | |
509 | struct device *dev; | |
510 | struct wa_rpipe *rpipe; | |
511 | unsigned long flags; | |
512 | unsigned rpipe_ready = 0; | |
513 | u8 done = 0; | |
514 | ||
df365423 IPG |
515 | switch (urb->status) { |
516 | case 0: | |
517 | spin_lock_irqsave(&xfer->lock, flags); | |
518 | wa = xfer->wa; | |
519 | dev = &wa->usb_iface->dev; | |
bce83697 DV |
520 | dev_dbg(dev, "xfer %p#%u: data out done (%d bytes)\n", |
521 | xfer, seg->index, urb->actual_length); | |
df365423 IPG |
522 | if (seg->status < WA_SEG_PENDING) |
523 | seg->status = WA_SEG_PENDING; | |
524 | seg->result = urb->actual_length; | |
525 | spin_unlock_irqrestore(&xfer->lock, flags); | |
526 | break; | |
527 | case -ECONNRESET: /* URB unlinked; no need to do anything */ | |
528 | case -ENOENT: /* as it was done by the who unlinked us */ | |
529 | break; | |
530 | default: /* Other errors ... */ | |
531 | spin_lock_irqsave(&xfer->lock, flags); | |
532 | wa = xfer->wa; | |
533 | dev = &wa->usb_iface->dev; | |
534 | rpipe = xfer->ep->hcpriv; | |
bce83697 DV |
535 | dev_dbg(dev, "xfer %p#%u: data out error %d\n", |
536 | xfer, seg->index, urb->status); | |
df365423 IPG |
537 | if (edc_inc(&wa->nep_edc, EDC_MAX_ERRORS, |
538 | EDC_ERROR_TIMEFRAME)){ | |
539 | dev_err(dev, "DTO: URB max acceptable errors " | |
540 | "exceeded, resetting device\n"); | |
541 | wa_reset_all(wa); | |
542 | } | |
543 | if (seg->status != WA_SEG_ERROR) { | |
544 | seg->status = WA_SEG_ERROR; | |
545 | seg->result = urb->status; | |
546 | xfer->segs_done++; | |
547 | __wa_xfer_abort(xfer); | |
548 | rpipe_ready = rpipe_avail_inc(rpipe); | |
549 | done = __wa_xfer_is_done(xfer); | |
550 | } | |
551 | spin_unlock_irqrestore(&xfer->lock, flags); | |
552 | if (done) | |
553 | wa_xfer_completion(xfer); | |
554 | if (rpipe_ready) | |
555 | wa_xfer_delayed_run(rpipe); | |
556 | } | |
df365423 IPG |
557 | } |
558 | ||
559 | /* | |
560 | * Callback for the segment request | |
561 | * | |
af901ca1 | 562 | * If successful transition state (unless already transitioned or |
df365423 IPG |
563 | * outbound transfer); otherwise, take a note of the error, mark this |
564 | * segment done and try completion. | |
565 | * | |
566 | * Note we don't access until we are sure that the transfer hasn't | |
567 | * been cancelled (ECONNRESET, ENOENT), which could mean that | |
568 | * seg->xfer could be already gone. | |
569 | * | |
570 | * We have to check before setting the status to WA_SEG_PENDING | |
571 | * because sometimes the xfer result callback arrives before this | |
572 | * callback (geeeeeeze), so it might happen that we are already in | |
573 | * another state. As well, we don't set it if the transfer is inbound, | |
574 | * as in that case, wa_seg_dto_cb will do it when the OUT data phase | |
575 | * finishes. | |
576 | */ | |
577 | static void wa_seg_cb(struct urb *urb) | |
578 | { | |
579 | struct wa_seg *seg = urb->context; | |
580 | struct wa_xfer *xfer = seg->xfer; | |
581 | struct wahc *wa; | |
582 | struct device *dev; | |
583 | struct wa_rpipe *rpipe; | |
584 | unsigned long flags; | |
585 | unsigned rpipe_ready; | |
586 | u8 done = 0; | |
587 | ||
df365423 IPG |
588 | switch (urb->status) { |
589 | case 0: | |
590 | spin_lock_irqsave(&xfer->lock, flags); | |
591 | wa = xfer->wa; | |
592 | dev = &wa->usb_iface->dev; | |
bce83697 | 593 | dev_dbg(dev, "xfer %p#%u: request done\n", xfer, seg->index); |
df365423 IPG |
594 | if (xfer->is_inbound && seg->status < WA_SEG_PENDING) |
595 | seg->status = WA_SEG_PENDING; | |
596 | spin_unlock_irqrestore(&xfer->lock, flags); | |
597 | break; | |
598 | case -ECONNRESET: /* URB unlinked; no need to do anything */ | |
599 | case -ENOENT: /* as it was done by the who unlinked us */ | |
600 | break; | |
601 | default: /* Other errors ... */ | |
602 | spin_lock_irqsave(&xfer->lock, flags); | |
603 | wa = xfer->wa; | |
604 | dev = &wa->usb_iface->dev; | |
605 | rpipe = xfer->ep->hcpriv; | |
606 | if (printk_ratelimit()) | |
607 | dev_err(dev, "xfer %p#%u: request error %d\n", | |
608 | xfer, seg->index, urb->status); | |
609 | if (edc_inc(&wa->nep_edc, EDC_MAX_ERRORS, | |
610 | EDC_ERROR_TIMEFRAME)){ | |
611 | dev_err(dev, "DTO: URB max acceptable errors " | |
612 | "exceeded, resetting device\n"); | |
613 | wa_reset_all(wa); | |
614 | } | |
615 | usb_unlink_urb(seg->dto_urb); | |
616 | seg->status = WA_SEG_ERROR; | |
617 | seg->result = urb->status; | |
618 | xfer->segs_done++; | |
619 | __wa_xfer_abort(xfer); | |
620 | rpipe_ready = rpipe_avail_inc(rpipe); | |
621 | done = __wa_xfer_is_done(xfer); | |
622 | spin_unlock_irqrestore(&xfer->lock, flags); | |
623 | if (done) | |
624 | wa_xfer_completion(xfer); | |
625 | if (rpipe_ready) | |
626 | wa_xfer_delayed_run(rpipe); | |
627 | } | |
df365423 IPG |
628 | } |
629 | ||
2b81c083 TP |
630 | /* allocate an SG list to store bytes_to_transfer bytes and copy the |
631 | * subset of the in_sg that matches the buffer subset | |
632 | * we are about to transfer. */ | |
633 | static struct scatterlist *wa_xfer_create_subset_sg(struct scatterlist *in_sg, | |
634 | const unsigned int bytes_transferred, | |
635 | const unsigned int bytes_to_transfer, unsigned int *out_num_sgs) | |
636 | { | |
637 | struct scatterlist *out_sg; | |
638 | unsigned int bytes_processed = 0, offset_into_current_page_data = 0, | |
639 | nents; | |
640 | struct scatterlist *current_xfer_sg = in_sg; | |
641 | struct scatterlist *current_seg_sg, *last_seg_sg; | |
642 | ||
643 | /* skip previously transferred pages. */ | |
644 | while ((current_xfer_sg) && | |
645 | (bytes_processed < bytes_transferred)) { | |
646 | bytes_processed += current_xfer_sg->length; | |
647 | ||
648 | /* advance the sg if current segment starts on or past the | |
649 | next page. */ | |
650 | if (bytes_processed <= bytes_transferred) | |
651 | current_xfer_sg = sg_next(current_xfer_sg); | |
652 | } | |
653 | ||
654 | /* the data for the current segment starts in current_xfer_sg. | |
655 | calculate the offset. */ | |
656 | if (bytes_processed > bytes_transferred) { | |
657 | offset_into_current_page_data = current_xfer_sg->length - | |
658 | (bytes_processed - bytes_transferred); | |
659 | } | |
660 | ||
661 | /* calculate the number of pages needed by this segment. */ | |
662 | nents = DIV_ROUND_UP((bytes_to_transfer + | |
663 | offset_into_current_page_data + | |
664 | current_xfer_sg->offset), | |
665 | PAGE_SIZE); | |
666 | ||
667 | out_sg = kmalloc((sizeof(struct scatterlist) * nents), GFP_ATOMIC); | |
668 | if (out_sg) { | |
669 | sg_init_table(out_sg, nents); | |
670 | ||
671 | /* copy the portion of the incoming SG that correlates to the | |
672 | * data to be transferred by this segment to the segment SG. */ | |
673 | last_seg_sg = current_seg_sg = out_sg; | |
674 | bytes_processed = 0; | |
675 | ||
676 | /* reset nents and calculate the actual number of sg entries | |
677 | needed. */ | |
678 | nents = 0; | |
679 | while ((bytes_processed < bytes_to_transfer) && | |
680 | current_seg_sg && current_xfer_sg) { | |
681 | unsigned int page_len = min((current_xfer_sg->length - | |
682 | offset_into_current_page_data), | |
683 | (bytes_to_transfer - bytes_processed)); | |
684 | ||
685 | sg_set_page(current_seg_sg, sg_page(current_xfer_sg), | |
686 | page_len, | |
687 | current_xfer_sg->offset + | |
688 | offset_into_current_page_data); | |
689 | ||
690 | bytes_processed += page_len; | |
691 | ||
692 | last_seg_sg = current_seg_sg; | |
693 | current_seg_sg = sg_next(current_seg_sg); | |
694 | current_xfer_sg = sg_next(current_xfer_sg); | |
695 | ||
696 | /* only the first page may require additional offset. */ | |
697 | offset_into_current_page_data = 0; | |
698 | nents++; | |
699 | } | |
700 | ||
701 | /* update num_sgs and terminate the list since we may have | |
702 | * concatenated pages. */ | |
703 | sg_mark_end(last_seg_sg); | |
704 | *out_num_sgs = nents; | |
705 | } | |
706 | ||
707 | return out_sg; | |
708 | } | |
709 | ||
df365423 IPG |
710 | /* |
711 | * Allocate the segs array and initialize each of them | |
712 | * | |
713 | * The segments are freed by wa_xfer_destroy() when the xfer use count | |
714 | * drops to zero; however, because each segment is given the same life | |
715 | * cycle as the USB URB it contains, it is actually freed by | |
716 | * usb_put_urb() on the contained USB URB (twisted, eh?). | |
717 | */ | |
718 | static int __wa_xfer_setup_segs(struct wa_xfer *xfer, size_t xfer_hdr_size) | |
719 | { | |
720 | int result, cnt; | |
721 | size_t alloc_size = sizeof(*xfer->seg[0]) | |
722 | - sizeof(xfer->seg[0]->xfer_hdr) + xfer_hdr_size; | |
723 | struct usb_device *usb_dev = xfer->wa->usb_dev; | |
724 | const struct usb_endpoint_descriptor *dto_epd = xfer->wa->dto_epd; | |
725 | struct wa_seg *seg; | |
726 | size_t buf_itr, buf_size, buf_itr_size; | |
727 | ||
728 | result = -ENOMEM; | |
92c4d9bd | 729 | xfer->seg = kcalloc(xfer->segs, sizeof(xfer->seg[0]), GFP_ATOMIC); |
df365423 IPG |
730 | if (xfer->seg == NULL) |
731 | goto error_segs_kzalloc; | |
732 | buf_itr = 0; | |
733 | buf_size = xfer->urb->transfer_buffer_length; | |
734 | for (cnt = 0; cnt < xfer->segs; cnt++) { | |
735 | seg = xfer->seg[cnt] = kzalloc(alloc_size, GFP_ATOMIC); | |
736 | if (seg == NULL) | |
737 | goto error_seg_kzalloc; | |
738 | wa_seg_init(seg); | |
739 | seg->xfer = xfer; | |
740 | seg->index = cnt; | |
741 | usb_fill_bulk_urb(&seg->urb, usb_dev, | |
742 | usb_sndbulkpipe(usb_dev, | |
743 | dto_epd->bEndpointAddress), | |
744 | &seg->xfer_hdr, xfer_hdr_size, | |
745 | wa_seg_cb, seg); | |
2b81c083 | 746 | buf_itr_size = min(buf_size, xfer->seg_size); |
df365423 | 747 | if (xfer->is_inbound == 0 && buf_size > 0) { |
2b81c083 | 748 | /* outbound data. */ |
df365423 IPG |
749 | seg->dto_urb = usb_alloc_urb(0, GFP_ATOMIC); |
750 | if (seg->dto_urb == NULL) | |
751 | goto error_dto_alloc; | |
752 | usb_fill_bulk_urb( | |
753 | seg->dto_urb, usb_dev, | |
754 | usb_sndbulkpipe(usb_dev, | |
755 | dto_epd->bEndpointAddress), | |
756 | NULL, 0, wa_seg_dto_cb, seg); | |
757 | if (xfer->is_dma) { | |
758 | seg->dto_urb->transfer_dma = | |
759 | xfer->urb->transfer_dma + buf_itr; | |
760 | seg->dto_urb->transfer_flags |= | |
761 | URB_NO_TRANSFER_DMA_MAP; | |
2b81c083 TP |
762 | seg->dto_urb->transfer_buffer = NULL; |
763 | seg->dto_urb->sg = NULL; | |
764 | seg->dto_urb->num_sgs = 0; | |
765 | } else { | |
766 | /* do buffer or SG processing. */ | |
767 | seg->dto_urb->transfer_flags &= | |
768 | ~URB_NO_TRANSFER_DMA_MAP; | |
769 | /* this should always be 0 before a resubmit. */ | |
770 | seg->dto_urb->num_mapped_sgs = 0; | |
771 | ||
772 | if (xfer->urb->transfer_buffer) { | |
773 | seg->dto_urb->transfer_buffer = | |
774 | xfer->urb->transfer_buffer + | |
775 | buf_itr; | |
776 | seg->dto_urb->sg = NULL; | |
777 | seg->dto_urb->num_sgs = 0; | |
778 | } else { | |
779 | /* allocate an SG list to store seg_size | |
780 | bytes and copy the subset of the | |
781 | xfer->urb->sg that matches the | |
782 | buffer subset we are about to read. | |
783 | */ | |
784 | seg->dto_urb->sg = | |
785 | wa_xfer_create_subset_sg( | |
786 | xfer->urb->sg, | |
787 | buf_itr, buf_itr_size, | |
788 | &(seg->dto_urb->num_sgs)); | |
789 | ||
790 | if (!(seg->dto_urb->sg)) { | |
791 | seg->dto_urb->num_sgs = 0; | |
792 | goto error_sg_alloc; | |
793 | } | |
794 | ||
795 | seg->dto_urb->transfer_buffer = NULL; | |
796 | } | |
797 | } | |
df365423 IPG |
798 | seg->dto_urb->transfer_buffer_length = buf_itr_size; |
799 | } | |
800 | seg->status = WA_SEG_READY; | |
801 | buf_itr += buf_itr_size; | |
802 | buf_size -= buf_itr_size; | |
803 | } | |
804 | return 0; | |
805 | ||
2b81c083 TP |
806 | error_sg_alloc: |
807 | kfree(seg->dto_urb); | |
df365423 IPG |
808 | error_dto_alloc: |
809 | kfree(xfer->seg[cnt]); | |
810 | cnt--; | |
811 | error_seg_kzalloc: | |
812 | /* use the fact that cnt is left at were it failed */ | |
f07af4b6 DC |
813 | for (; cnt >= 0; cnt--) { |
814 | if (xfer->seg[cnt] && xfer->is_inbound == 0) | |
815 | usb_free_urb(xfer->seg[cnt]->dto_urb); | |
df365423 IPG |
816 | kfree(xfer->seg[cnt]); |
817 | } | |
818 | error_segs_kzalloc: | |
819 | return result; | |
820 | } | |
821 | ||
822 | /* | |
823 | * Allocates all the stuff needed to submit a transfer | |
824 | * | |
825 | * Breaks the whole data buffer in a list of segments, each one has a | |
826 | * structure allocated to it and linked in xfer->seg[index] | |
827 | * | |
828 | * FIXME: merge setup_segs() and the last part of this function, no | |
829 | * need to do two for loops when we could run everything in a | |
830 | * single one | |
831 | */ | |
832 | static int __wa_xfer_setup(struct wa_xfer *xfer, struct urb *urb) | |
833 | { | |
834 | int result; | |
835 | struct device *dev = &xfer->wa->usb_iface->dev; | |
836 | enum wa_xfer_type xfer_type = 0; /* shut up GCC */ | |
837 | size_t xfer_hdr_size, cnt, transfer_size; | |
838 | struct wa_xfer_hdr *xfer_hdr0, *xfer_hdr; | |
839 | ||
df365423 IPG |
840 | result = __wa_xfer_setup_sizes(xfer, &xfer_type); |
841 | if (result < 0) | |
842 | goto error_setup_sizes; | |
843 | xfer_hdr_size = result; | |
844 | result = __wa_xfer_setup_segs(xfer, xfer_hdr_size); | |
845 | if (result < 0) { | |
846 | dev_err(dev, "xfer %p: Failed to allocate %d segments: %d\n", | |
847 | xfer, xfer->segs, result); | |
848 | goto error_setup_segs; | |
849 | } | |
850 | /* Fill the first header */ | |
851 | xfer_hdr0 = &xfer->seg[0]->xfer_hdr; | |
852 | wa_xfer_id_init(xfer); | |
853 | __wa_xfer_setup_hdr0(xfer, xfer_hdr0, xfer_type, xfer_hdr_size); | |
854 | ||
855 | /* Fill remainig headers */ | |
856 | xfer_hdr = xfer_hdr0; | |
857 | transfer_size = urb->transfer_buffer_length; | |
858 | xfer_hdr0->dwTransferLength = transfer_size > xfer->seg_size ? | |
859 | xfer->seg_size : transfer_size; | |
860 | transfer_size -= xfer->seg_size; | |
861 | for (cnt = 1; cnt < xfer->segs; cnt++) { | |
862 | xfer_hdr = &xfer->seg[cnt]->xfer_hdr; | |
863 | memcpy(xfer_hdr, xfer_hdr0, xfer_hdr_size); | |
864 | xfer_hdr->bTransferSegment = cnt; | |
865 | xfer_hdr->dwTransferLength = transfer_size > xfer->seg_size ? | |
866 | cpu_to_le32(xfer->seg_size) | |
867 | : cpu_to_le32(transfer_size); | |
868 | xfer->seg[cnt]->status = WA_SEG_READY; | |
869 | transfer_size -= xfer->seg_size; | |
870 | } | |
871 | xfer_hdr->bTransferSegment |= 0x80; /* this is the last segment */ | |
872 | result = 0; | |
873 | error_setup_segs: | |
874 | error_setup_sizes: | |
df365423 IPG |
875 | return result; |
876 | } | |
877 | ||
878 | /* | |
879 | * | |
880 | * | |
881 | * rpipe->seg_lock is held! | |
882 | */ | |
883 | static int __wa_seg_submit(struct wa_rpipe *rpipe, struct wa_xfer *xfer, | |
884 | struct wa_seg *seg) | |
885 | { | |
886 | int result; | |
887 | result = usb_submit_urb(&seg->urb, GFP_ATOMIC); | |
888 | if (result < 0) { | |
889 | printk(KERN_ERR "xfer %p#%u: REQ submit failed: %d\n", | |
890 | xfer, seg->index, result); | |
891 | goto error_seg_submit; | |
892 | } | |
893 | if (seg->dto_urb) { | |
894 | result = usb_submit_urb(seg->dto_urb, GFP_ATOMIC); | |
895 | if (result < 0) { | |
896 | printk(KERN_ERR "xfer %p#%u: DTO submit failed: %d\n", | |
897 | xfer, seg->index, result); | |
898 | goto error_dto_submit; | |
899 | } | |
900 | } | |
901 | seg->status = WA_SEG_SUBMITTED; | |
902 | rpipe_avail_dec(rpipe); | |
903 | return 0; | |
904 | ||
905 | error_dto_submit: | |
906 | usb_unlink_urb(&seg->urb); | |
907 | error_seg_submit: | |
908 | seg->status = WA_SEG_ERROR; | |
909 | seg->result = result; | |
910 | return result; | |
911 | } | |
912 | ||
913 | /* | |
914 | * Execute more queued request segments until the maximum concurrent allowed | |
915 | * | |
916 | * The ugly unlock/lock sequence on the error path is needed as the | |
917 | * xfer->lock normally nests the seg_lock and not viceversa. | |
918 | * | |
919 | */ | |
920 | static void wa_xfer_delayed_run(struct wa_rpipe *rpipe) | |
921 | { | |
922 | int result; | |
923 | struct device *dev = &rpipe->wa->usb_iface->dev; | |
924 | struct wa_seg *seg; | |
925 | struct wa_xfer *xfer; | |
926 | unsigned long flags; | |
927 | ||
df365423 IPG |
928 | spin_lock_irqsave(&rpipe->seg_lock, flags); |
929 | while (atomic_read(&rpipe->segs_available) > 0 | |
930 | && !list_empty(&rpipe->seg_list)) { | |
931 | seg = list_entry(rpipe->seg_list.next, struct wa_seg, | |
932 | list_node); | |
933 | list_del(&seg->list_node); | |
934 | xfer = seg->xfer; | |
935 | result = __wa_seg_submit(rpipe, xfer, seg); | |
bce83697 DV |
936 | dev_dbg(dev, "xfer %p#%u submitted from delayed [%d segments available] %d\n", |
937 | xfer, seg->index, atomic_read(&rpipe->segs_available), result); | |
df365423 IPG |
938 | if (unlikely(result < 0)) { |
939 | spin_unlock_irqrestore(&rpipe->seg_lock, flags); | |
940 | spin_lock_irqsave(&xfer->lock, flags); | |
941 | __wa_xfer_abort(xfer); | |
942 | xfer->segs_done++; | |
943 | spin_unlock_irqrestore(&xfer->lock, flags); | |
944 | spin_lock_irqsave(&rpipe->seg_lock, flags); | |
945 | } | |
946 | } | |
947 | spin_unlock_irqrestore(&rpipe->seg_lock, flags); | |
df365423 IPG |
948 | } |
949 | ||
950 | /* | |
951 | * | |
952 | * xfer->lock is taken | |
953 | * | |
954 | * On failure submitting we just stop submitting and return error; | |
955 | * wa_urb_enqueue_b() will execute the completion path | |
956 | */ | |
957 | static int __wa_xfer_submit(struct wa_xfer *xfer) | |
958 | { | |
959 | int result; | |
960 | struct wahc *wa = xfer->wa; | |
961 | struct device *dev = &wa->usb_iface->dev; | |
962 | unsigned cnt; | |
963 | struct wa_seg *seg; | |
964 | unsigned long flags; | |
965 | struct wa_rpipe *rpipe = xfer->ep->hcpriv; | |
966 | size_t maxrequests = le16_to_cpu(rpipe->descr.wRequests); | |
967 | u8 available; | |
968 | u8 empty; | |
969 | ||
df365423 IPG |
970 | spin_lock_irqsave(&wa->xfer_list_lock, flags); |
971 | list_add_tail(&xfer->list_node, &wa->xfer_list); | |
972 | spin_unlock_irqrestore(&wa->xfer_list_lock, flags); | |
973 | ||
974 | BUG_ON(atomic_read(&rpipe->segs_available) > maxrequests); | |
975 | result = 0; | |
976 | spin_lock_irqsave(&rpipe->seg_lock, flags); | |
977 | for (cnt = 0; cnt < xfer->segs; cnt++) { | |
978 | available = atomic_read(&rpipe->segs_available); | |
979 | empty = list_empty(&rpipe->seg_list); | |
980 | seg = xfer->seg[cnt]; | |
bce83697 DV |
981 | dev_dbg(dev, "xfer %p#%u: available %u empty %u (%s)\n", |
982 | xfer, cnt, available, empty, | |
983 | available == 0 || !empty ? "delayed" : "submitted"); | |
df365423 | 984 | if (available == 0 || !empty) { |
bce83697 | 985 | dev_dbg(dev, "xfer %p#%u: delayed\n", xfer, cnt); |
df365423 IPG |
986 | seg->status = WA_SEG_DELAYED; |
987 | list_add_tail(&seg->list_node, &rpipe->seg_list); | |
988 | } else { | |
989 | result = __wa_seg_submit(rpipe, xfer, seg); | |
bce83697 DV |
990 | if (result < 0) { |
991 | __wa_xfer_abort(xfer); | |
df365423 | 992 | goto error_seg_submit; |
bce83697 | 993 | } |
df365423 IPG |
994 | } |
995 | xfer->segs_submitted++; | |
996 | } | |
df365423 | 997 | error_seg_submit: |
df365423 | 998 | spin_unlock_irqrestore(&rpipe->seg_lock, flags); |
df365423 IPG |
999 | return result; |
1000 | } | |
1001 | ||
1002 | /* | |
1003 | * Second part of a URB/transfer enqueuement | |
1004 | * | |
1005 | * Assumes this comes from wa_urb_enqueue() [maybe through | |
1006 | * wa_urb_enqueue_run()]. At this point: | |
1007 | * | |
1008 | * xfer->wa filled and refcounted | |
1009 | * xfer->ep filled with rpipe refcounted if | |
1010 | * delayed == 0 | |
1011 | * xfer->urb filled and refcounted (this is the case when called | |
1012 | * from wa_urb_enqueue() as we come from usb_submit_urb() | |
1013 | * and when called by wa_urb_enqueue_run(), as we took an | |
1014 | * extra ref dropped by _run() after we return). | |
1015 | * xfer->gfp filled | |
1016 | * | |
1017 | * If we fail at __wa_xfer_submit(), then we just check if we are done | |
1018 | * and if so, we run the completion procedure. However, if we are not | |
1019 | * yet done, we do nothing and wait for the completion handlers from | |
1020 | * the submitted URBs or from the xfer-result path to kick in. If xfer | |
1021 | * result never kicks in, the xfer will timeout from the USB code and | |
1022 | * dequeue() will be called. | |
1023 | */ | |
1024 | static void wa_urb_enqueue_b(struct wa_xfer *xfer) | |
1025 | { | |
1026 | int result; | |
1027 | unsigned long flags; | |
1028 | struct urb *urb = xfer->urb; | |
1029 | struct wahc *wa = xfer->wa; | |
1030 | struct wusbhc *wusbhc = wa->wusb; | |
df365423 IPG |
1031 | struct wusb_dev *wusb_dev; |
1032 | unsigned done; | |
1033 | ||
df365423 IPG |
1034 | result = rpipe_get_by_ep(wa, xfer->ep, urb, xfer->gfp); |
1035 | if (result < 0) | |
1036 | goto error_rpipe_get; | |
1037 | result = -ENODEV; | |
1038 | /* FIXME: segmentation broken -- kills DWA */ | |
1039 | mutex_lock(&wusbhc->mutex); /* get a WUSB dev */ | |
49fa0921 JS |
1040 | if (urb->dev == NULL) { |
1041 | mutex_unlock(&wusbhc->mutex); | |
df365423 | 1042 | goto error_dev_gone; |
49fa0921 | 1043 | } |
df365423 IPG |
1044 | wusb_dev = __wusb_dev_get_by_usb_dev(wusbhc, urb->dev); |
1045 | if (wusb_dev == NULL) { | |
1046 | mutex_unlock(&wusbhc->mutex); | |
1047 | goto error_dev_gone; | |
1048 | } | |
1049 | mutex_unlock(&wusbhc->mutex); | |
1050 | ||
1051 | spin_lock_irqsave(&xfer->lock, flags); | |
1052 | xfer->wusb_dev = wusb_dev; | |
1053 | result = urb->status; | |
1054 | if (urb->status != -EINPROGRESS) | |
1055 | goto error_dequeued; | |
1056 | ||
1057 | result = __wa_xfer_setup(xfer, urb); | |
1058 | if (result < 0) | |
1059 | goto error_xfer_setup; | |
1060 | result = __wa_xfer_submit(xfer); | |
1061 | if (result < 0) | |
1062 | goto error_xfer_submit; | |
1063 | spin_unlock_irqrestore(&xfer->lock, flags); | |
df365423 IPG |
1064 | return; |
1065 | ||
1066 | /* this is basically wa_xfer_completion() broken up wa_xfer_giveback() | |
1067 | * does a wa_xfer_put() that will call wa_xfer_destroy() and clean | |
1068 | * upundo setup(). | |
1069 | */ | |
1070 | error_xfer_setup: | |
1071 | error_dequeued: | |
1072 | spin_unlock_irqrestore(&xfer->lock, flags); | |
1073 | /* FIXME: segmentation broken, kills DWA */ | |
1074 | if (wusb_dev) | |
1075 | wusb_dev_put(wusb_dev); | |
1076 | error_dev_gone: | |
1077 | rpipe_put(xfer->ep->hcpriv); | |
1078 | error_rpipe_get: | |
1079 | xfer->result = result; | |
1080 | wa_xfer_giveback(xfer); | |
df365423 IPG |
1081 | return; |
1082 | ||
1083 | error_xfer_submit: | |
1084 | done = __wa_xfer_is_done(xfer); | |
1085 | xfer->result = result; | |
1086 | spin_unlock_irqrestore(&xfer->lock, flags); | |
1087 | if (done) | |
1088 | wa_xfer_completion(xfer); | |
df365423 IPG |
1089 | } |
1090 | ||
1091 | /* | |
1092 | * Execute the delayed transfers in the Wire Adapter @wa | |
1093 | * | |
1094 | * We need to be careful here, as dequeue() could be called in the | |
1095 | * middle. That's why we do the whole thing under the | |
1096 | * wa->xfer_list_lock. If dequeue() jumps in, it first locks urb->lock | |
1097 | * and then checks the list -- so as we would be acquiring in inverse | |
1098 | * order, we just drop the lock once we have the xfer and reacquire it | |
1099 | * later. | |
1100 | */ | |
1101 | void wa_urb_enqueue_run(struct work_struct *ws) | |
1102 | { | |
1103 | struct wahc *wa = container_of(ws, struct wahc, xfer_work); | |
df365423 IPG |
1104 | struct wa_xfer *xfer, *next; |
1105 | struct urb *urb; | |
1106 | ||
df365423 IPG |
1107 | spin_lock_irq(&wa->xfer_list_lock); |
1108 | list_for_each_entry_safe(xfer, next, &wa->xfer_delayed_list, | |
1109 | list_node) { | |
1110 | list_del_init(&xfer->list_node); | |
1111 | spin_unlock_irq(&wa->xfer_list_lock); | |
1112 | ||
1113 | urb = xfer->urb; | |
1114 | wa_urb_enqueue_b(xfer); | |
1115 | usb_put_urb(urb); /* taken when queuing */ | |
1116 | ||
1117 | spin_lock_irq(&wa->xfer_list_lock); | |
1118 | } | |
1119 | spin_unlock_irq(&wa->xfer_list_lock); | |
df365423 IPG |
1120 | } |
1121 | EXPORT_SYMBOL_GPL(wa_urb_enqueue_run); | |
1122 | ||
1123 | /* | |
1124 | * Submit a transfer to the Wire Adapter in a delayed way | |
1125 | * | |
1126 | * The process of enqueuing involves possible sleeps() [see | |
1127 | * enqueue_b(), for the rpipe_get() and the mutex_lock()]. If we are | |
1128 | * in an atomic section, we defer the enqueue_b() call--else we call direct. | |
1129 | * | |
1130 | * @urb: We own a reference to it done by the HCI Linux USB stack that | |
1131 | * will be given up by calling usb_hcd_giveback_urb() or by | |
1132 | * returning error from this function -> ergo we don't have to | |
1133 | * refcount it. | |
1134 | */ | |
1135 | int wa_urb_enqueue(struct wahc *wa, struct usb_host_endpoint *ep, | |
1136 | struct urb *urb, gfp_t gfp) | |
1137 | { | |
1138 | int result; | |
1139 | struct device *dev = &wa->usb_iface->dev; | |
1140 | struct wa_xfer *xfer; | |
1141 | unsigned long my_flags; | |
1142 | unsigned cant_sleep = irqs_disabled() | in_atomic(); | |
1143 | ||
2b81c083 TP |
1144 | if ((urb->transfer_buffer == NULL) |
1145 | && (urb->sg == NULL) | |
df365423 IPG |
1146 | && !(urb->transfer_flags & URB_NO_TRANSFER_DMA_MAP) |
1147 | && urb->transfer_buffer_length != 0) { | |
1148 | dev_err(dev, "BUG? urb %p: NULL xfer buffer & NODMA\n", urb); | |
1149 | dump_stack(); | |
1150 | } | |
1151 | ||
1152 | result = -ENOMEM; | |
1153 | xfer = kzalloc(sizeof(*xfer), gfp); | |
1154 | if (xfer == NULL) | |
1155 | goto error_kmalloc; | |
1156 | ||
1157 | result = -ENOENT; | |
1158 | if (urb->status != -EINPROGRESS) /* cancelled */ | |
1159 | goto error_dequeued; /* before starting? */ | |
1160 | wa_xfer_init(xfer); | |
1161 | xfer->wa = wa_get(wa); | |
1162 | xfer->urb = urb; | |
1163 | xfer->gfp = gfp; | |
1164 | xfer->ep = ep; | |
1165 | urb->hcpriv = xfer; | |
bce83697 DV |
1166 | |
1167 | dev_dbg(dev, "xfer %p urb %p pipe 0x%02x [%d bytes] %s %s %s\n", | |
1168 | xfer, urb, urb->pipe, urb->transfer_buffer_length, | |
1169 | urb->transfer_flags & URB_NO_TRANSFER_DMA_MAP ? "dma" : "nodma", | |
1170 | urb->pipe & USB_DIR_IN ? "inbound" : "outbound", | |
1171 | cant_sleep ? "deferred" : "inline"); | |
1172 | ||
df365423 IPG |
1173 | if (cant_sleep) { |
1174 | usb_get_urb(urb); | |
1175 | spin_lock_irqsave(&wa->xfer_list_lock, my_flags); | |
1176 | list_add_tail(&xfer->list_node, &wa->xfer_delayed_list); | |
1177 | spin_unlock_irqrestore(&wa->xfer_list_lock, my_flags); | |
1178 | queue_work(wusbd, &wa->xfer_work); | |
1179 | } else { | |
1180 | wa_urb_enqueue_b(xfer); | |
1181 | } | |
df365423 IPG |
1182 | return 0; |
1183 | ||
1184 | error_dequeued: | |
1185 | kfree(xfer); | |
1186 | error_kmalloc: | |
df365423 IPG |
1187 | return result; |
1188 | } | |
1189 | EXPORT_SYMBOL_GPL(wa_urb_enqueue); | |
1190 | ||
1191 | /* | |
1192 | * Dequeue a URB and make sure uwb_hcd_giveback_urb() [completion | |
1193 | * handler] is called. | |
1194 | * | |
1195 | * Until a transfer goes successfully through wa_urb_enqueue() it | |
1196 | * needs to be dequeued with completion calling; when stuck in delayed | |
1197 | * or before wa_xfer_setup() is called, we need to do completion. | |
1198 | * | |
1199 | * not setup If there is no hcpriv yet, that means that that enqueue | |
1200 | * still had no time to set the xfer up. Because | |
1201 | * urb->status should be other than -EINPROGRESS, | |
1202 | * enqueue() will catch that and bail out. | |
1203 | * | |
1204 | * If the transfer has gone through setup, we just need to clean it | |
1205 | * up. If it has gone through submit(), we have to abort it [with an | |
1206 | * asynch request] and then make sure we cancel each segment. | |
1207 | * | |
1208 | */ | |
1209 | int wa_urb_dequeue(struct wahc *wa, struct urb *urb) | |
1210 | { | |
df365423 IPG |
1211 | unsigned long flags, flags2; |
1212 | struct wa_xfer *xfer; | |
1213 | struct wa_seg *seg; | |
1214 | struct wa_rpipe *rpipe; | |
1215 | unsigned cnt; | |
1216 | unsigned rpipe_ready = 0; | |
1217 | ||
df365423 IPG |
1218 | xfer = urb->hcpriv; |
1219 | if (xfer == NULL) { | |
1220 | /* NOthing setup yet enqueue will see urb->status != | |
1221 | * -EINPROGRESS (by hcd layer) and bail out with | |
1222 | * error, no need to do completion | |
1223 | */ | |
1224 | BUG_ON(urb->status == -EINPROGRESS); | |
1225 | goto out; | |
1226 | } | |
1227 | spin_lock_irqsave(&xfer->lock, flags); | |
1228 | rpipe = xfer->ep->hcpriv; | |
1229 | /* Check the delayed list -> if there, release and complete */ | |
1230 | spin_lock_irqsave(&wa->xfer_list_lock, flags2); | |
1231 | if (!list_empty(&xfer->list_node) && xfer->seg == NULL) | |
1232 | goto dequeue_delayed; | |
1233 | spin_unlock_irqrestore(&wa->xfer_list_lock, flags2); | |
1234 | if (xfer->seg == NULL) /* still hasn't reached */ | |
1235 | goto out_unlock; /* setup(), enqueue_b() completes */ | |
1236 | /* Ok, the xfer is in flight already, it's been setup and submitted.*/ | |
1237 | __wa_xfer_abort(xfer); | |
1238 | for (cnt = 0; cnt < xfer->segs; cnt++) { | |
1239 | seg = xfer->seg[cnt]; | |
1240 | switch (seg->status) { | |
1241 | case WA_SEG_NOTREADY: | |
1242 | case WA_SEG_READY: | |
1243 | printk(KERN_ERR "xfer %p#%u: dequeue bad state %u\n", | |
1244 | xfer, cnt, seg->status); | |
1245 | WARN_ON(1); | |
1246 | break; | |
1247 | case WA_SEG_DELAYED: | |
1248 | seg->status = WA_SEG_ABORTED; | |
1249 | spin_lock_irqsave(&rpipe->seg_lock, flags2); | |
1250 | list_del(&seg->list_node); | |
1251 | xfer->segs_done++; | |
1252 | rpipe_ready = rpipe_avail_inc(rpipe); | |
1253 | spin_unlock_irqrestore(&rpipe->seg_lock, flags2); | |
1254 | break; | |
1255 | case WA_SEG_SUBMITTED: | |
1256 | seg->status = WA_SEG_ABORTED; | |
1257 | usb_unlink_urb(&seg->urb); | |
1258 | if (xfer->is_inbound == 0) | |
1259 | usb_unlink_urb(seg->dto_urb); | |
1260 | xfer->segs_done++; | |
1261 | rpipe_ready = rpipe_avail_inc(rpipe); | |
1262 | break; | |
1263 | case WA_SEG_PENDING: | |
1264 | seg->status = WA_SEG_ABORTED; | |
1265 | xfer->segs_done++; | |
1266 | rpipe_ready = rpipe_avail_inc(rpipe); | |
1267 | break; | |
1268 | case WA_SEG_DTI_PENDING: | |
1269 | usb_unlink_urb(wa->dti_urb); | |
1270 | seg->status = WA_SEG_ABORTED; | |
1271 | xfer->segs_done++; | |
1272 | rpipe_ready = rpipe_avail_inc(rpipe); | |
1273 | break; | |
1274 | case WA_SEG_DONE: | |
1275 | case WA_SEG_ERROR: | |
1276 | case WA_SEG_ABORTED: | |
1277 | break; | |
1278 | } | |
1279 | } | |
1280 | xfer->result = urb->status; /* -ENOENT or -ECONNRESET */ | |
1281 | __wa_xfer_is_done(xfer); | |
1282 | spin_unlock_irqrestore(&xfer->lock, flags); | |
1283 | wa_xfer_completion(xfer); | |
1284 | if (rpipe_ready) | |
1285 | wa_xfer_delayed_run(rpipe); | |
df365423 IPG |
1286 | return 0; |
1287 | ||
1288 | out_unlock: | |
1289 | spin_unlock_irqrestore(&xfer->lock, flags); | |
1290 | out: | |
df365423 IPG |
1291 | return 0; |
1292 | ||
1293 | dequeue_delayed: | |
1294 | list_del_init(&xfer->list_node); | |
1295 | spin_unlock_irqrestore(&wa->xfer_list_lock, flags2); | |
1296 | xfer->result = urb->status; | |
1297 | spin_unlock_irqrestore(&xfer->lock, flags); | |
1298 | wa_xfer_giveback(xfer); | |
1299 | usb_put_urb(urb); /* we got a ref in enqueue() */ | |
df365423 IPG |
1300 | return 0; |
1301 | } | |
1302 | EXPORT_SYMBOL_GPL(wa_urb_dequeue); | |
1303 | ||
1304 | /* | |
1305 | * Translation from WA status codes (WUSB1.0 Table 8.15) to errno | |
1306 | * codes | |
1307 | * | |
1308 | * Positive errno values are internal inconsistencies and should be | |
1309 | * flagged louder. Negative are to be passed up to the user in the | |
1310 | * normal way. | |
1311 | * | |
1312 | * @status: USB WA status code -- high two bits are stripped. | |
1313 | */ | |
1314 | static int wa_xfer_status_to_errno(u8 status) | |
1315 | { | |
1316 | int errno; | |
1317 | u8 real_status = status; | |
1318 | static int xlat[] = { | |
1319 | [WA_XFER_STATUS_SUCCESS] = 0, | |
1320 | [WA_XFER_STATUS_HALTED] = -EPIPE, | |
1321 | [WA_XFER_STATUS_DATA_BUFFER_ERROR] = -ENOBUFS, | |
1322 | [WA_XFER_STATUS_BABBLE] = -EOVERFLOW, | |
1323 | [WA_XFER_RESERVED] = EINVAL, | |
1324 | [WA_XFER_STATUS_NOT_FOUND] = 0, | |
1325 | [WA_XFER_STATUS_INSUFFICIENT_RESOURCE] = -ENOMEM, | |
1326 | [WA_XFER_STATUS_TRANSACTION_ERROR] = -EILSEQ, | |
1327 | [WA_XFER_STATUS_ABORTED] = -EINTR, | |
1328 | [WA_XFER_STATUS_RPIPE_NOT_READY] = EINVAL, | |
1329 | [WA_XFER_INVALID_FORMAT] = EINVAL, | |
1330 | [WA_XFER_UNEXPECTED_SEGMENT_NUMBER] = EINVAL, | |
1331 | [WA_XFER_STATUS_RPIPE_TYPE_MISMATCH] = EINVAL, | |
1332 | }; | |
1333 | status &= 0x3f; | |
1334 | ||
1335 | if (status == 0) | |
1336 | return 0; | |
1337 | if (status >= ARRAY_SIZE(xlat)) { | |
9708cd2f | 1338 | printk_ratelimited(KERN_ERR "%s(): BUG? " |
df365423 IPG |
1339 | "Unknown WA transfer status 0x%02x\n", |
1340 | __func__, real_status); | |
1341 | return -EINVAL; | |
1342 | } | |
1343 | errno = xlat[status]; | |
1344 | if (unlikely(errno > 0)) { | |
9708cd2f | 1345 | printk_ratelimited(KERN_ERR "%s(): BUG? " |
df365423 IPG |
1346 | "Inconsistent WA status: 0x%02x\n", |
1347 | __func__, real_status); | |
1348 | errno = -errno; | |
1349 | } | |
1350 | return errno; | |
1351 | } | |
1352 | ||
1353 | /* | |
1354 | * Process a xfer result completion message | |
1355 | * | |
1356 | * inbound transfers: need to schedule a DTI read | |
1357 | * | |
1358 | * FIXME: this functio needs to be broken up in parts | |
1359 | */ | |
1360 | static void wa_xfer_result_chew(struct wahc *wa, struct wa_xfer *xfer) | |
1361 | { | |
1362 | int result; | |
1363 | struct device *dev = &wa->usb_iface->dev; | |
1364 | unsigned long flags; | |
1365 | u8 seg_idx; | |
1366 | struct wa_seg *seg; | |
1367 | struct wa_rpipe *rpipe; | |
1368 | struct wa_xfer_result *xfer_result = wa->xfer_result; | |
1369 | u8 done = 0; | |
1370 | u8 usb_status; | |
1371 | unsigned rpipe_ready = 0; | |
1372 | ||
df365423 IPG |
1373 | spin_lock_irqsave(&xfer->lock, flags); |
1374 | seg_idx = xfer_result->bTransferSegment & 0x7f; | |
1375 | if (unlikely(seg_idx >= xfer->segs)) | |
1376 | goto error_bad_seg; | |
1377 | seg = xfer->seg[seg_idx]; | |
1378 | rpipe = xfer->ep->hcpriv; | |
1379 | usb_status = xfer_result->bTransferStatus; | |
2b81c083 | 1380 | dev_dbg(dev, "xfer %p#%u: bTransferStatus 0x%02x (seg status %u)\n", |
bce83697 | 1381 | xfer, seg_idx, usb_status, seg->status); |
df365423 IPG |
1382 | if (seg->status == WA_SEG_ABORTED |
1383 | || seg->status == WA_SEG_ERROR) /* already handled */ | |
1384 | goto segment_aborted; | |
1385 | if (seg->status == WA_SEG_SUBMITTED) /* ops, got here */ | |
1386 | seg->status = WA_SEG_PENDING; /* before wa_seg{_dto}_cb() */ | |
1387 | if (seg->status != WA_SEG_PENDING) { | |
1388 | if (printk_ratelimit()) | |
1389 | dev_err(dev, "xfer %p#%u: Bad segment state %u\n", | |
1390 | xfer, seg_idx, seg->status); | |
1391 | seg->status = WA_SEG_PENDING; /* workaround/"fix" it */ | |
1392 | } | |
1393 | if (usb_status & 0x80) { | |
1394 | seg->result = wa_xfer_status_to_errno(usb_status); | |
2b81c083 TP |
1395 | dev_err(dev, "DTI: xfer %p#:%08X:%u failed (0x%02x)\n", |
1396 | xfer, xfer->id, seg->index, usb_status); | |
df365423 IPG |
1397 | goto error_complete; |
1398 | } | |
1399 | /* FIXME: we ignore warnings, tally them for stats */ | |
1400 | if (usb_status & 0x40) /* Warning?... */ | |
1401 | usb_status = 0; /* ... pass */ | |
1402 | if (xfer->is_inbound) { /* IN data phase: read to buffer */ | |
1403 | seg->status = WA_SEG_DTI_PENDING; | |
1404 | BUG_ON(wa->buf_in_urb->status == -EINPROGRESS); | |
2b81c083 TP |
1405 | /* this should always be 0 before a resubmit. */ |
1406 | wa->buf_in_urb->num_mapped_sgs = 0; | |
1407 | ||
df365423 IPG |
1408 | if (xfer->is_dma) { |
1409 | wa->buf_in_urb->transfer_dma = | |
1410 | xfer->urb->transfer_dma | |
2b81c083 | 1411 | + (seg_idx * xfer->seg_size); |
df365423 IPG |
1412 | wa->buf_in_urb->transfer_flags |
1413 | |= URB_NO_TRANSFER_DMA_MAP; | |
2b81c083 TP |
1414 | wa->buf_in_urb->transfer_buffer = NULL; |
1415 | wa->buf_in_urb->sg = NULL; | |
1416 | wa->buf_in_urb->num_sgs = 0; | |
df365423 | 1417 | } else { |
2b81c083 | 1418 | /* do buffer or SG processing. */ |
df365423 IPG |
1419 | wa->buf_in_urb->transfer_flags |
1420 | &= ~URB_NO_TRANSFER_DMA_MAP; | |
2b81c083 TP |
1421 | |
1422 | if (xfer->urb->transfer_buffer) { | |
1423 | wa->buf_in_urb->transfer_buffer = | |
1424 | xfer->urb->transfer_buffer | |
1425 | + (seg_idx * xfer->seg_size); | |
1426 | wa->buf_in_urb->sg = NULL; | |
1427 | wa->buf_in_urb->num_sgs = 0; | |
1428 | } else { | |
1429 | /* allocate an SG list to store seg_size bytes | |
1430 | and copy the subset of the xfer->urb->sg | |
1431 | that matches the buffer subset we are | |
1432 | about to read. */ | |
1433 | wa->buf_in_urb->sg = wa_xfer_create_subset_sg( | |
1434 | xfer->urb->sg, | |
1435 | seg_idx * xfer->seg_size, | |
1436 | le32_to_cpu( | |
1437 | xfer_result->dwTransferLength), | |
1438 | &(wa->buf_in_urb->num_sgs)); | |
1439 | ||
1440 | if (!(wa->buf_in_urb->sg)) { | |
1441 | wa->buf_in_urb->num_sgs = 0; | |
1442 | goto error_sg_alloc; | |
1443 | } | |
1444 | wa->buf_in_urb->transfer_buffer = NULL; | |
1445 | } | |
df365423 IPG |
1446 | } |
1447 | wa->buf_in_urb->transfer_buffer_length = | |
1448 | le32_to_cpu(xfer_result->dwTransferLength); | |
1449 | wa->buf_in_urb->context = seg; | |
1450 | result = usb_submit_urb(wa->buf_in_urb, GFP_ATOMIC); | |
1451 | if (result < 0) | |
1452 | goto error_submit_buf_in; | |
1453 | } else { | |
1454 | /* OUT data phase, complete it -- */ | |
1455 | seg->status = WA_SEG_DONE; | |
1456 | seg->result = le32_to_cpu(xfer_result->dwTransferLength); | |
1457 | xfer->segs_done++; | |
1458 | rpipe_ready = rpipe_avail_inc(rpipe); | |
1459 | done = __wa_xfer_is_done(xfer); | |
1460 | } | |
1461 | spin_unlock_irqrestore(&xfer->lock, flags); | |
1462 | if (done) | |
1463 | wa_xfer_completion(xfer); | |
1464 | if (rpipe_ready) | |
1465 | wa_xfer_delayed_run(rpipe); | |
df365423 IPG |
1466 | return; |
1467 | ||
df365423 IPG |
1468 | error_submit_buf_in: |
1469 | if (edc_inc(&wa->dti_edc, EDC_MAX_ERRORS, EDC_ERROR_TIMEFRAME)) { | |
1470 | dev_err(dev, "DTI: URB max acceptable errors " | |
1471 | "exceeded, resetting device\n"); | |
1472 | wa_reset_all(wa); | |
1473 | } | |
1474 | if (printk_ratelimit()) | |
1475 | dev_err(dev, "xfer %p#%u: can't submit DTI data phase: %d\n", | |
1476 | xfer, seg_idx, result); | |
1477 | seg->result = result; | |
2b81c083 TP |
1478 | kfree(wa->buf_in_urb->sg); |
1479 | error_sg_alloc: | |
df365423 IPG |
1480 | error_complete: |
1481 | seg->status = WA_SEG_ERROR; | |
1482 | xfer->segs_done++; | |
1483 | rpipe_ready = rpipe_avail_inc(rpipe); | |
1484 | __wa_xfer_abort(xfer); | |
1485 | done = __wa_xfer_is_done(xfer); | |
1486 | spin_unlock_irqrestore(&xfer->lock, flags); | |
1487 | if (done) | |
1488 | wa_xfer_completion(xfer); | |
1489 | if (rpipe_ready) | |
1490 | wa_xfer_delayed_run(rpipe); | |
df365423 IPG |
1491 | return; |
1492 | ||
df365423 IPG |
1493 | error_bad_seg: |
1494 | spin_unlock_irqrestore(&xfer->lock, flags); | |
1495 | wa_urb_dequeue(wa, xfer->urb); | |
1496 | if (printk_ratelimit()) | |
1497 | dev_err(dev, "xfer %p#%u: bad segment\n", xfer, seg_idx); | |
1498 | if (edc_inc(&wa->dti_edc, EDC_MAX_ERRORS, EDC_ERROR_TIMEFRAME)) { | |
1499 | dev_err(dev, "DTI: URB max acceptable errors " | |
1500 | "exceeded, resetting device\n"); | |
1501 | wa_reset_all(wa); | |
1502 | } | |
df365423 IPG |
1503 | return; |
1504 | ||
df365423 IPG |
1505 | segment_aborted: |
1506 | /* nothing to do, as the aborter did the completion */ | |
1507 | spin_unlock_irqrestore(&xfer->lock, flags); | |
df365423 IPG |
1508 | } |
1509 | ||
1510 | /* | |
1511 | * Callback for the IN data phase | |
1512 | * | |
af901ca1 | 1513 | * If successful transition state; otherwise, take a note of the |
df365423 IPG |
1514 | * error, mark this segment done and try completion. |
1515 | * | |
1516 | * Note we don't access until we are sure that the transfer hasn't | |
1517 | * been cancelled (ECONNRESET, ENOENT), which could mean that | |
1518 | * seg->xfer could be already gone. | |
1519 | */ | |
1520 | static void wa_buf_in_cb(struct urb *urb) | |
1521 | { | |
1522 | struct wa_seg *seg = urb->context; | |
1523 | struct wa_xfer *xfer = seg->xfer; | |
1524 | struct wahc *wa; | |
1525 | struct device *dev; | |
1526 | struct wa_rpipe *rpipe; | |
1527 | unsigned rpipe_ready; | |
1528 | unsigned long flags; | |
1529 | u8 done = 0; | |
1530 | ||
2b81c083 TP |
1531 | /* free the sg if it was used. */ |
1532 | kfree(urb->sg); | |
1533 | urb->sg = NULL; | |
1534 | ||
df365423 IPG |
1535 | switch (urb->status) { |
1536 | case 0: | |
1537 | spin_lock_irqsave(&xfer->lock, flags); | |
1538 | wa = xfer->wa; | |
1539 | dev = &wa->usb_iface->dev; | |
1540 | rpipe = xfer->ep->hcpriv; | |
bce83697 DV |
1541 | dev_dbg(dev, "xfer %p#%u: data in done (%zu bytes)\n", |
1542 | xfer, seg->index, (size_t)urb->actual_length); | |
df365423 IPG |
1543 | seg->status = WA_SEG_DONE; |
1544 | seg->result = urb->actual_length; | |
1545 | xfer->segs_done++; | |
1546 | rpipe_ready = rpipe_avail_inc(rpipe); | |
1547 | done = __wa_xfer_is_done(xfer); | |
1548 | spin_unlock_irqrestore(&xfer->lock, flags); | |
1549 | if (done) | |
1550 | wa_xfer_completion(xfer); | |
1551 | if (rpipe_ready) | |
1552 | wa_xfer_delayed_run(rpipe); | |
1553 | break; | |
1554 | case -ECONNRESET: /* URB unlinked; no need to do anything */ | |
1555 | case -ENOENT: /* as it was done by the who unlinked us */ | |
1556 | break; | |
1557 | default: /* Other errors ... */ | |
1558 | spin_lock_irqsave(&xfer->lock, flags); | |
1559 | wa = xfer->wa; | |
1560 | dev = &wa->usb_iface->dev; | |
1561 | rpipe = xfer->ep->hcpriv; | |
1562 | if (printk_ratelimit()) | |
1563 | dev_err(dev, "xfer %p#%u: data in error %d\n", | |
1564 | xfer, seg->index, urb->status); | |
1565 | if (edc_inc(&wa->nep_edc, EDC_MAX_ERRORS, | |
1566 | EDC_ERROR_TIMEFRAME)){ | |
1567 | dev_err(dev, "DTO: URB max acceptable errors " | |
1568 | "exceeded, resetting device\n"); | |
1569 | wa_reset_all(wa); | |
1570 | } | |
1571 | seg->status = WA_SEG_ERROR; | |
1572 | seg->result = urb->status; | |
1573 | xfer->segs_done++; | |
1574 | rpipe_ready = rpipe_avail_inc(rpipe); | |
1575 | __wa_xfer_abort(xfer); | |
1576 | done = __wa_xfer_is_done(xfer); | |
1577 | spin_unlock_irqrestore(&xfer->lock, flags); | |
1578 | if (done) | |
1579 | wa_xfer_completion(xfer); | |
1580 | if (rpipe_ready) | |
1581 | wa_xfer_delayed_run(rpipe); | |
1582 | } | |
df365423 IPG |
1583 | } |
1584 | ||
1585 | /* | |
1586 | * Handle an incoming transfer result buffer | |
1587 | * | |
1588 | * Given a transfer result buffer, it completes the transfer (possibly | |
1589 | * scheduling and buffer in read) and then resubmits the DTI URB for a | |
1590 | * new transfer result read. | |
1591 | * | |
1592 | * | |
1593 | * The xfer_result DTI URB state machine | |
1594 | * | |
1595 | * States: OFF | RXR (Read-Xfer-Result) | RBI (Read-Buffer-In) | |
1596 | * | |
1597 | * We start in OFF mode, the first xfer_result notification [through | |
1598 | * wa_handle_notif_xfer()] moves us to RXR by posting the DTI-URB to | |
1599 | * read. | |
1600 | * | |
1601 | * We receive a buffer -- if it is not a xfer_result, we complain and | |
1602 | * repost the DTI-URB. If it is a xfer_result then do the xfer seg | |
1603 | * request accounting. If it is an IN segment, we move to RBI and post | |
1604 | * a BUF-IN-URB to the right buffer. The BUF-IN-URB callback will | |
1605 | * repost the DTI-URB and move to RXR state. if there was no IN | |
1606 | * segment, it will repost the DTI-URB. | |
1607 | * | |
1608 | * We go back to OFF when we detect a ENOENT or ESHUTDOWN (or too many | |
1609 | * errors) in the URBs. | |
1610 | */ | |
1611 | static void wa_xfer_result_cb(struct urb *urb) | |
1612 | { | |
1613 | int result; | |
1614 | struct wahc *wa = urb->context; | |
1615 | struct device *dev = &wa->usb_iface->dev; | |
1616 | struct wa_xfer_result *xfer_result; | |
1617 | u32 xfer_id; | |
1618 | struct wa_xfer *xfer; | |
1619 | u8 usb_status; | |
1620 | ||
df365423 IPG |
1621 | BUG_ON(wa->dti_urb != urb); |
1622 | switch (wa->dti_urb->status) { | |
1623 | case 0: | |
1624 | /* We have a xfer result buffer; check it */ | |
bce83697 DV |
1625 | dev_dbg(dev, "DTI: xfer result %d bytes at %p\n", |
1626 | urb->actual_length, urb->transfer_buffer); | |
df365423 IPG |
1627 | if (wa->dti_urb->actual_length != sizeof(*xfer_result)) { |
1628 | dev_err(dev, "DTI Error: xfer result--bad size " | |
1629 | "xfer result (%d bytes vs %zu needed)\n", | |
1630 | urb->actual_length, sizeof(*xfer_result)); | |
1631 | break; | |
1632 | } | |
1633 | xfer_result = wa->xfer_result; | |
1634 | if (xfer_result->hdr.bLength != sizeof(*xfer_result)) { | |
1635 | dev_err(dev, "DTI Error: xfer result--" | |
1636 | "bad header length %u\n", | |
1637 | xfer_result->hdr.bLength); | |
1638 | break; | |
1639 | } | |
1640 | if (xfer_result->hdr.bNotifyType != WA_XFER_RESULT) { | |
1641 | dev_err(dev, "DTI Error: xfer result--" | |
1642 | "bad header type 0x%02x\n", | |
1643 | xfer_result->hdr.bNotifyType); | |
1644 | break; | |
1645 | } | |
1646 | usb_status = xfer_result->bTransferStatus & 0x3f; | |
1647 | if (usb_status == WA_XFER_STATUS_ABORTED | |
1648 | || usb_status == WA_XFER_STATUS_NOT_FOUND) | |
1649 | /* taken care of already */ | |
1650 | break; | |
1651 | xfer_id = xfer_result->dwTransferID; | |
1652 | xfer = wa_xfer_get_by_id(wa, xfer_id); | |
1653 | if (xfer == NULL) { | |
1654 | /* FIXME: transaction might have been cancelled */ | |
1655 | dev_err(dev, "DTI Error: xfer result--" | |
1656 | "unknown xfer 0x%08x (status 0x%02x)\n", | |
1657 | xfer_id, usb_status); | |
1658 | break; | |
1659 | } | |
1660 | wa_xfer_result_chew(wa, xfer); | |
1661 | wa_xfer_put(xfer); | |
1662 | break; | |
1663 | case -ENOENT: /* (we killed the URB)...so, no broadcast */ | |
1664 | case -ESHUTDOWN: /* going away! */ | |
1665 | dev_dbg(dev, "DTI: going down! %d\n", urb->status); | |
1666 | goto out; | |
1667 | default: | |
1668 | /* Unknown error */ | |
1669 | if (edc_inc(&wa->dti_edc, EDC_MAX_ERRORS, | |
1670 | EDC_ERROR_TIMEFRAME)) { | |
1671 | dev_err(dev, "DTI: URB max acceptable errors " | |
1672 | "exceeded, resetting device\n"); | |
1673 | wa_reset_all(wa); | |
1674 | goto out; | |
1675 | } | |
1676 | if (printk_ratelimit()) | |
1677 | dev_err(dev, "DTI: URB error %d\n", urb->status); | |
1678 | break; | |
1679 | } | |
1680 | /* Resubmit the DTI URB */ | |
1681 | result = usb_submit_urb(wa->dti_urb, GFP_ATOMIC); | |
1682 | if (result < 0) { | |
1683 | dev_err(dev, "DTI Error: Could not submit DTI URB (%d), " | |
1684 | "resetting\n", result); | |
1685 | wa_reset_all(wa); | |
1686 | } | |
1687 | out: | |
df365423 IPG |
1688 | return; |
1689 | } | |
1690 | ||
1691 | /* | |
1692 | * Transfer complete notification | |
1693 | * | |
1694 | * Called from the notif.c code. We get a notification on EP2 saying | |
1695 | * that some endpoint has some transfer result data available. We are | |
1696 | * about to read it. | |
1697 | * | |
1698 | * To speed up things, we always have a URB reading the DTI URB; we | |
1699 | * don't really set it up and start it until the first xfer complete | |
1700 | * notification arrives, which is what we do here. | |
1701 | * | |
1702 | * Follow up in wa_xfer_result_cb(), as that's where the whole state | |
1703 | * machine starts. | |
1704 | * | |
1705 | * So here we just initialize the DTI URB for reading transfer result | |
1706 | * notifications and also the buffer-in URB, for reading buffers. Then | |
1707 | * we just submit the DTI URB. | |
1708 | * | |
1709 | * @wa shall be referenced | |
1710 | */ | |
1711 | void wa_handle_notif_xfer(struct wahc *wa, struct wa_notif_hdr *notif_hdr) | |
1712 | { | |
1713 | int result; | |
1714 | struct device *dev = &wa->usb_iface->dev; | |
1715 | struct wa_notif_xfer *notif_xfer; | |
1716 | const struct usb_endpoint_descriptor *dti_epd = wa->dti_epd; | |
1717 | ||
df365423 IPG |
1718 | notif_xfer = container_of(notif_hdr, struct wa_notif_xfer, hdr); |
1719 | BUG_ON(notif_hdr->bNotifyType != WA_NOTIF_TRANSFER); | |
1720 | ||
1721 | if ((0x80 | notif_xfer->bEndpoint) != dti_epd->bEndpointAddress) { | |
1722 | /* FIXME: hardcoded limitation, adapt */ | |
1723 | dev_err(dev, "BUG: DTI ep is %u, not %u (hack me)\n", | |
1724 | notif_xfer->bEndpoint, dti_epd->bEndpointAddress); | |
1725 | goto error; | |
1726 | } | |
1727 | if (wa->dti_urb != NULL) /* DTI URB already started */ | |
1728 | goto out; | |
1729 | ||
1730 | wa->dti_urb = usb_alloc_urb(0, GFP_KERNEL); | |
1731 | if (wa->dti_urb == NULL) { | |
1732 | dev_err(dev, "Can't allocate DTI URB\n"); | |
1733 | goto error_dti_urb_alloc; | |
1734 | } | |
1735 | usb_fill_bulk_urb( | |
1736 | wa->dti_urb, wa->usb_dev, | |
1737 | usb_rcvbulkpipe(wa->usb_dev, 0x80 | notif_xfer->bEndpoint), | |
1738 | wa->xfer_result, wa->xfer_result_size, | |
1739 | wa_xfer_result_cb, wa); | |
1740 | ||
1741 | wa->buf_in_urb = usb_alloc_urb(0, GFP_KERNEL); | |
1742 | if (wa->buf_in_urb == NULL) { | |
1743 | dev_err(dev, "Can't allocate BUF-IN URB\n"); | |
1744 | goto error_buf_in_urb_alloc; | |
1745 | } | |
1746 | usb_fill_bulk_urb( | |
1747 | wa->buf_in_urb, wa->usb_dev, | |
1748 | usb_rcvbulkpipe(wa->usb_dev, 0x80 | notif_xfer->bEndpoint), | |
1749 | NULL, 0, wa_buf_in_cb, wa); | |
1750 | result = usb_submit_urb(wa->dti_urb, GFP_KERNEL); | |
1751 | if (result < 0) { | |
1752 | dev_err(dev, "DTI Error: Could not submit DTI URB (%d), " | |
1753 | "resetting\n", result); | |
1754 | goto error_dti_urb_submit; | |
1755 | } | |
1756 | out: | |
df365423 IPG |
1757 | return; |
1758 | ||
1759 | error_dti_urb_submit: | |
1760 | usb_put_urb(wa->buf_in_urb); | |
1761 | error_buf_in_urb_alloc: | |
1762 | usb_put_urb(wa->dti_urb); | |
1763 | wa->dti_urb = NULL; | |
1764 | error_dti_urb_alloc: | |
1765 | error: | |
1766 | wa_reset_all(wa); | |
df365423 | 1767 | } |