Linux Audio

Check our new training course

Real-Time Linux with PREEMPT_RT training

Feb 18-20, 2025
Register
Loading...
   1/*
   2 * at91_udc -- driver for at91-series USB peripheral controller
   3 *
   4 * Copyright (C) 2004 by Thomas Rathbone
   5 * Copyright (C) 2005 by HP Labs
   6 * Copyright (C) 2005 by David Brownell
   7 *
   8 * This program is free software; you can redistribute it and/or modify
   9 * it under the terms of the GNU General Public License as published by
  10 * the Free Software Foundation; either version 2 of the License, or
  11 * (at your option) any later version.
 
 
 
 
 
 
 
 
 
 
  12 */
  13
  14#undef	VERBOSE_DEBUG
  15#undef	PACKET_TRACE
  16
  17#include <linux/kernel.h>
  18#include <linux/module.h>
  19#include <linux/platform_device.h>
  20#include <linux/delay.h>
  21#include <linux/ioport.h>
  22#include <linux/slab.h>
  23#include <linux/errno.h>
 
  24#include <linux/list.h>
  25#include <linux/interrupt.h>
  26#include <linux/proc_fs.h>
  27#include <linux/prefetch.h>
  28#include <linux/clk.h>
  29#include <linux/usb/ch9.h>
  30#include <linux/usb/gadget.h>
  31#include <linux/of.h>
  32#include <linux/of_gpio.h>
  33#include <linux/platform_data/atmel.h>
  34
  35#include <asm/byteorder.h>
  36#include <mach/hardware.h>
  37#include <asm/io.h>
  38#include <asm/irq.h>
 
  39#include <asm/gpio.h>
  40
 
  41#include <mach/cpu.h>
  42#include <mach/at91sam9261_matrix.h>
  43#include <mach/at91_matrix.h>
  44
  45#include "at91_udc.h"
  46
  47
  48/*
  49 * This controller is simple and PIO-only.  It's used in many AT91-series
  50 * full speed USB controllers, including the at91rm9200 (arm920T, with MMU),
  51 * at91sam926x (arm926ejs, with MMU), and several no-mmu versions.
  52 *
  53 * This driver expects the board has been wired with two GPIOs supporting
  54 * a VBUS sensing IRQ, and a D+ pullup.  (They may be omitted, but the
  55 * testing hasn't covered such cases.)
  56 *
  57 * The pullup is most important (so it's integrated on sam926x parts).  It
  58 * provides software control over whether the host enumerates the device.
  59 *
  60 * The VBUS sensing helps during enumeration, and allows both USB clocks
  61 * (and the transceiver) to stay gated off until they're necessary, saving
  62 * power.  During USB suspend, the 48 MHz clock is gated off in hardware;
  63 * it may also be gated off by software during some Linux sleep states.
  64 */
  65
  66#define	DRIVER_VERSION	"3 May 2006"
  67
  68static const char driver_name [] = "at91_udc";
  69static const char ep0name[] = "ep0";
  70
  71#define VBUS_POLL_TIMEOUT	msecs_to_jiffies(1000)
  72
  73#define at91_udp_read(udc, reg) \
  74	__raw_readl((udc)->udp_baseaddr + (reg))
  75#define at91_udp_write(udc, reg, val) \
  76	__raw_writel((val), (udc)->udp_baseaddr + (reg))
  77
  78/*-------------------------------------------------------------------------*/
  79
  80#ifdef CONFIG_USB_GADGET_DEBUG_FILES
  81
  82#include <linux/seq_file.h>
  83
  84static const char debug_filename[] = "driver/udc";
  85
  86#define FOURBITS "%s%s%s%s"
  87#define EIGHTBITS FOURBITS FOURBITS
  88
  89static void proc_ep_show(struct seq_file *s, struct at91_ep *ep)
  90{
  91	static char		*types[] = {
  92		"control", "out-iso", "out-bulk", "out-int",
  93		"BOGUS",   "in-iso",  "in-bulk",  "in-int"};
  94
  95	u32			csr;
  96	struct at91_request	*req;
  97	unsigned long	flags;
  98	struct at91_udc	*udc = ep->udc;
  99
 100	spin_lock_irqsave(&udc->lock, flags);
 101
 102	csr = __raw_readl(ep->creg);
 103
 104	/* NOTE:  not collecting per-endpoint irq statistics... */
 105
 106	seq_printf(s, "\n");
 107	seq_printf(s, "%s, maxpacket %d %s%s %s%s\n",
 108			ep->ep.name, ep->ep.maxpacket,
 109			ep->is_in ? "in" : "out",
 110			ep->is_iso ? " iso" : "",
 111			ep->is_pingpong
 112				? (ep->fifo_bank ? "pong" : "ping")
 113				: "",
 114			ep->stopped ? " stopped" : "");
 115	seq_printf(s, "csr %08x rxbytes=%d %s %s %s" EIGHTBITS "\n",
 116		csr,
 117		(csr & 0x07ff0000) >> 16,
 118		(csr & (1 << 15)) ? "enabled" : "disabled",
 119		(csr & (1 << 11)) ? "DATA1" : "DATA0",
 120		types[(csr & 0x700) >> 8],
 121
 122		/* iff type is control then print current direction */
 123		(!(csr & 0x700))
 124			? ((csr & (1 << 7)) ? " IN" : " OUT")
 125			: "",
 126		(csr & (1 << 6)) ? " rxdatabk1" : "",
 127		(csr & (1 << 5)) ? " forcestall" : "",
 128		(csr & (1 << 4)) ? " txpktrdy" : "",
 129
 130		(csr & (1 << 3)) ? " stallsent" : "",
 131		(csr & (1 << 2)) ? " rxsetup" : "",
 132		(csr & (1 << 1)) ? " rxdatabk0" : "",
 133		(csr & (1 << 0)) ? " txcomp" : "");
 134	if (list_empty (&ep->queue))
 135		seq_printf(s, "\t(queue empty)\n");
 136
 137	else list_for_each_entry (req, &ep->queue, queue) {
 138		unsigned	length = req->req.actual;
 139
 140		seq_printf(s, "\treq %p len %d/%d buf %p\n",
 141				&req->req, length,
 142				req->req.length, req->req.buf);
 143	}
 144	spin_unlock_irqrestore(&udc->lock, flags);
 145}
 146
 147static void proc_irq_show(struct seq_file *s, const char *label, u32 mask)
 148{
 149	int i;
 150
 151	seq_printf(s, "%s %04x:%s%s" FOURBITS, label, mask,
 152		(mask & (1 << 13)) ? " wakeup" : "",
 153		(mask & (1 << 12)) ? " endbusres" : "",
 154
 155		(mask & (1 << 11)) ? " sofint" : "",
 156		(mask & (1 << 10)) ? " extrsm" : "",
 157		(mask & (1 << 9)) ? " rxrsm" : "",
 158		(mask & (1 << 8)) ? " rxsusp" : "");
 159	for (i = 0; i < 8; i++) {
 160		if (mask & (1 << i))
 161			seq_printf(s, " ep%d", i);
 162	}
 163	seq_printf(s, "\n");
 164}
 165
 166static int proc_udc_show(struct seq_file *s, void *unused)
 167{
 168	struct at91_udc	*udc = s->private;
 169	struct at91_ep	*ep;
 170	u32		tmp;
 171
 172	seq_printf(s, "%s: version %s\n", driver_name, DRIVER_VERSION);
 173
 174	seq_printf(s, "vbus %s, pullup %s, %s powered%s, gadget %s\n\n",
 175		udc->vbus ? "present" : "off",
 176		udc->enabled
 177			? (udc->vbus ? "active" : "enabled")
 178			: "disabled",
 179		udc->selfpowered ? "self" : "VBUS",
 180		udc->suspended ? ", suspended" : "",
 181		udc->driver ? udc->driver->driver.name : "(none)");
 182
 183	/* don't access registers when interface isn't clocked */
 184	if (!udc->clocked) {
 185		seq_printf(s, "(not clocked)\n");
 186		return 0;
 187	}
 188
 189	tmp = at91_udp_read(udc, AT91_UDP_FRM_NUM);
 190	seq_printf(s, "frame %05x:%s%s frame=%d\n", tmp,
 191		(tmp & AT91_UDP_FRM_OK) ? " ok" : "",
 192		(tmp & AT91_UDP_FRM_ERR) ? " err" : "",
 193		(tmp & AT91_UDP_NUM));
 194
 195	tmp = at91_udp_read(udc, AT91_UDP_GLB_STAT);
 196	seq_printf(s, "glbstate %02x:%s" FOURBITS "\n", tmp,
 197		(tmp & AT91_UDP_RMWUPE) ? " rmwupe" : "",
 198		(tmp & AT91_UDP_RSMINPR) ? " rsminpr" : "",
 199		(tmp & AT91_UDP_ESR) ? " esr" : "",
 200		(tmp & AT91_UDP_CONFG) ? " confg" : "",
 201		(tmp & AT91_UDP_FADDEN) ? " fadden" : "");
 202
 203	tmp = at91_udp_read(udc, AT91_UDP_FADDR);
 204	seq_printf(s, "faddr   %03x:%s fadd=%d\n", tmp,
 205		(tmp & AT91_UDP_FEN) ? " fen" : "",
 206		(tmp & AT91_UDP_FADD));
 207
 208	proc_irq_show(s, "imr   ", at91_udp_read(udc, AT91_UDP_IMR));
 209	proc_irq_show(s, "isr   ", at91_udp_read(udc, AT91_UDP_ISR));
 210
 211	if (udc->enabled && udc->vbus) {
 212		proc_ep_show(s, &udc->ep[0]);
 213		list_for_each_entry (ep, &udc->gadget.ep_list, ep.ep_list) {
 214			if (ep->ep.desc)
 215				proc_ep_show(s, ep);
 216		}
 217	}
 218	return 0;
 219}
 220
 221static int proc_udc_open(struct inode *inode, struct file *file)
 222{
 223	return single_open(file, proc_udc_show, PDE_DATA(inode));
 224}
 225
 226static const struct file_operations proc_ops = {
 227	.owner		= THIS_MODULE,
 228	.open		= proc_udc_open,
 229	.read		= seq_read,
 230	.llseek		= seq_lseek,
 231	.release	= single_release,
 232};
 233
 234static void create_debug_file(struct at91_udc *udc)
 235{
 236	udc->pde = proc_create_data(debug_filename, 0, NULL, &proc_ops, udc);
 237}
 238
 239static void remove_debug_file(struct at91_udc *udc)
 240{
 241	if (udc->pde)
 242		remove_proc_entry(debug_filename, NULL);
 243}
 244
 245#else
 246
 247static inline void create_debug_file(struct at91_udc *udc) {}
 248static inline void remove_debug_file(struct at91_udc *udc) {}
 249
 250#endif
 251
 252
 253/*-------------------------------------------------------------------------*/
 254
 255static void done(struct at91_ep *ep, struct at91_request *req, int status)
 256{
 257	unsigned	stopped = ep->stopped;
 258	struct at91_udc	*udc = ep->udc;
 259
 260	list_del_init(&req->queue);
 261	if (req->req.status == -EINPROGRESS)
 262		req->req.status = status;
 263	else
 264		status = req->req.status;
 265	if (status && status != -ESHUTDOWN)
 266		VDBG("%s done %p, status %d\n", ep->ep.name, req, status);
 267
 268	ep->stopped = 1;
 269	spin_unlock(&udc->lock);
 270	req->req.complete(&ep->ep, &req->req);
 271	spin_lock(&udc->lock);
 272	ep->stopped = stopped;
 273
 274	/* ep0 is always ready; other endpoints need a non-empty queue */
 275	if (list_empty(&ep->queue) && ep->int_mask != (1 << 0))
 276		at91_udp_write(udc, AT91_UDP_IDR, ep->int_mask);
 277}
 278
 279/*-------------------------------------------------------------------------*/
 280
 281/* bits indicating OUT fifo has data ready */
 282#define	RX_DATA_READY	(AT91_UDP_RX_DATA_BK0 | AT91_UDP_RX_DATA_BK1)
 283
 284/*
 285 * Endpoint FIFO CSR bits have a mix of bits, making it unsafe to just write
 286 * back most of the value you just read (because of side effects, including
 287 * bits that may change after reading and before writing).
 288 *
 289 * Except when changing a specific bit, always write values which:
 290 *  - clear SET_FX bits (setting them could change something)
 291 *  - set CLR_FX bits (clearing them could change something)
 292 *
 293 * There are also state bits like FORCESTALL, EPEDS, DIR, and EPTYPE
 294 * that shouldn't normally be changed.
 295 *
 296 * NOTE at91sam9260 docs mention synch between UDPCK and MCK clock domains,
 297 * implying a need to wait for one write to complete (test relevant bits)
 298 * before starting the next write.  This shouldn't be an issue given how
 299 * infrequently we write, except maybe for write-then-read idioms.
 300 */
 301#define	SET_FX	(AT91_UDP_TXPKTRDY)
 302#define	CLR_FX	(RX_DATA_READY | AT91_UDP_RXSETUP \
 303		| AT91_UDP_STALLSENT | AT91_UDP_TXCOMP)
 304
 305/* pull OUT packet data from the endpoint's fifo */
 306static int read_fifo (struct at91_ep *ep, struct at91_request *req)
 307{
 308	u32 __iomem	*creg = ep->creg;
 309	u8 __iomem	*dreg = ep->creg + (AT91_UDP_FDR(0) - AT91_UDP_CSR(0));
 310	u32		csr;
 311	u8		*buf;
 312	unsigned int	count, bufferspace, is_done;
 313
 314	buf = req->req.buf + req->req.actual;
 315	bufferspace = req->req.length - req->req.actual;
 316
 317	/*
 318	 * there might be nothing to read if ep_queue() calls us,
 319	 * or if we already emptied both pingpong buffers
 320	 */
 321rescan:
 322	csr = __raw_readl(creg);
 323	if ((csr & RX_DATA_READY) == 0)
 324		return 0;
 325
 326	count = (csr & AT91_UDP_RXBYTECNT) >> 16;
 327	if (count > ep->ep.maxpacket)
 328		count = ep->ep.maxpacket;
 329	if (count > bufferspace) {
 330		DBG("%s buffer overflow\n", ep->ep.name);
 331		req->req.status = -EOVERFLOW;
 332		count = bufferspace;
 333	}
 334	__raw_readsb(dreg, buf, count);
 335
 336	/* release and swap pingpong mem bank */
 337	csr |= CLR_FX;
 338	if (ep->is_pingpong) {
 339		if (ep->fifo_bank == 0) {
 340			csr &= ~(SET_FX | AT91_UDP_RX_DATA_BK0);
 341			ep->fifo_bank = 1;
 342		} else {
 343			csr &= ~(SET_FX | AT91_UDP_RX_DATA_BK1);
 344			ep->fifo_bank = 0;
 345		}
 346	} else
 347		csr &= ~(SET_FX | AT91_UDP_RX_DATA_BK0);
 348	__raw_writel(csr, creg);
 349
 350	req->req.actual += count;
 351	is_done = (count < ep->ep.maxpacket);
 352	if (count == bufferspace)
 353		is_done = 1;
 354
 355	PACKET("%s %p out/%d%s\n", ep->ep.name, &req->req, count,
 356			is_done ? " (done)" : "");
 357
 358	/*
 359	 * avoid extra trips through IRQ logic for packets already in
 360	 * the fifo ... maybe preventing an extra (expensive) OUT-NAK
 361	 */
 362	if (is_done)
 363		done(ep, req, 0);
 364	else if (ep->is_pingpong) {
 365		/*
 366		 * One dummy read to delay the code because of a HW glitch:
 367		 * CSR returns bad RXCOUNT when read too soon after updating
 368		 * RX_DATA_BK flags.
 369		 */
 370		csr = __raw_readl(creg);
 371
 372		bufferspace -= count;
 373		buf += count;
 374		goto rescan;
 375	}
 376
 377	return is_done;
 378}
 379
 380/* load fifo for an IN packet */
 381static int write_fifo(struct at91_ep *ep, struct at91_request *req)
 382{
 383	u32 __iomem	*creg = ep->creg;
 384	u32		csr = __raw_readl(creg);
 385	u8 __iomem	*dreg = ep->creg + (AT91_UDP_FDR(0) - AT91_UDP_CSR(0));
 386	unsigned	total, count, is_last;
 387	u8		*buf;
 388
 389	/*
 390	 * TODO: allow for writing two packets to the fifo ... that'll
 391	 * reduce the amount of IN-NAKing, but probably won't affect
 392	 * throughput much.  (Unlike preventing OUT-NAKing!)
 393	 */
 394
 395	/*
 396	 * If ep_queue() calls us, the queue is empty and possibly in
 397	 * odd states like TXCOMP not yet cleared (we do it, saving at
 398	 * least one IRQ) or the fifo not yet being free.  Those aren't
 399	 * issues normally (IRQ handler fast path).
 400	 */
 401	if (unlikely(csr & (AT91_UDP_TXCOMP | AT91_UDP_TXPKTRDY))) {
 402		if (csr & AT91_UDP_TXCOMP) {
 403			csr |= CLR_FX;
 404			csr &= ~(SET_FX | AT91_UDP_TXCOMP);
 405			__raw_writel(csr, creg);
 406			csr = __raw_readl(creg);
 407		}
 408		if (csr & AT91_UDP_TXPKTRDY)
 409			return 0;
 410	}
 411
 412	buf = req->req.buf + req->req.actual;
 413	prefetch(buf);
 414	total = req->req.length - req->req.actual;
 415	if (ep->ep.maxpacket < total) {
 416		count = ep->ep.maxpacket;
 417		is_last = 0;
 418	} else {
 419		count = total;
 420		is_last = (count < ep->ep.maxpacket) || !req->req.zero;
 421	}
 422
 423	/*
 424	 * Write the packet, maybe it's a ZLP.
 425	 *
 426	 * NOTE:  incrementing req->actual before we receive the ACK means
 427	 * gadget driver IN bytecounts can be wrong in fault cases.  That's
 428	 * fixable with PIO drivers like this one (save "count" here, and
 429	 * do the increment later on TX irq), but not for most DMA hardware.
 430	 *
 431	 * So all gadget drivers must accept that potential error.  Some
 432	 * hardware supports precise fifo status reporting, letting them
 433	 * recover when the actual bytecount matters (e.g. for USB Test
 434	 * and Measurement Class devices).
 435	 */
 436	__raw_writesb(dreg, buf, count);
 437	csr &= ~SET_FX;
 438	csr |= CLR_FX | AT91_UDP_TXPKTRDY;
 439	__raw_writel(csr, creg);
 440	req->req.actual += count;
 441
 442	PACKET("%s %p in/%d%s\n", ep->ep.name, &req->req, count,
 443			is_last ? " (done)" : "");
 444	if (is_last)
 445		done(ep, req, 0);
 446	return is_last;
 447}
 448
 449static void nuke(struct at91_ep *ep, int status)
 450{
 451	struct at91_request *req;
 452
 453	/* terminate any request in the queue */
 454	ep->stopped = 1;
 455	if (list_empty(&ep->queue))
 456		return;
 457
 458	VDBG("%s %s\n", __func__, ep->ep.name);
 459	while (!list_empty(&ep->queue)) {
 460		req = list_entry(ep->queue.next, struct at91_request, queue);
 461		done(ep, req, status);
 462	}
 463}
 464
 465/*-------------------------------------------------------------------------*/
 466
 467static int at91_ep_enable(struct usb_ep *_ep,
 468				const struct usb_endpoint_descriptor *desc)
 469{
 470	struct at91_ep	*ep = container_of(_ep, struct at91_ep, ep);
 471	struct at91_udc *udc;
 472	u16		maxpacket;
 473	u32		tmp;
 474	unsigned long	flags;
 475
 476	if (!_ep || !ep
 477			|| !desc || _ep->name == ep0name
 
 478			|| desc->bDescriptorType != USB_DT_ENDPOINT
 479			|| (maxpacket = usb_endpoint_maxp(desc)) == 0
 480			|| maxpacket > ep->maxpacket) {
 481		DBG("bad ep or descriptor\n");
 482		return -EINVAL;
 483	}
 484
 485	udc = ep->udc;
 486	if (!udc->driver || udc->gadget.speed == USB_SPEED_UNKNOWN) {
 487		DBG("bogus device state\n");
 488		return -ESHUTDOWN;
 489	}
 490
 491	tmp = usb_endpoint_type(desc);
 492	switch (tmp) {
 493	case USB_ENDPOINT_XFER_CONTROL:
 494		DBG("only one control endpoint\n");
 495		return -EINVAL;
 496	case USB_ENDPOINT_XFER_INT:
 497		if (maxpacket > 64)
 498			goto bogus_max;
 499		break;
 500	case USB_ENDPOINT_XFER_BULK:
 501		switch (maxpacket) {
 502		case 8:
 503		case 16:
 504		case 32:
 505		case 64:
 506			goto ok;
 507		}
 508bogus_max:
 509		DBG("bogus maxpacket %d\n", maxpacket);
 510		return -EINVAL;
 511	case USB_ENDPOINT_XFER_ISOC:
 512		if (!ep->is_pingpong) {
 513			DBG("iso requires double buffering\n");
 514			return -EINVAL;
 515		}
 516		break;
 517	}
 518
 519ok:
 520	spin_lock_irqsave(&udc->lock, flags);
 521
 522	/* initialize endpoint to match this descriptor */
 523	ep->is_in = usb_endpoint_dir_in(desc);
 524	ep->is_iso = (tmp == USB_ENDPOINT_XFER_ISOC);
 525	ep->stopped = 0;
 526	if (ep->is_in)
 527		tmp |= 0x04;
 528	tmp <<= 8;
 529	tmp |= AT91_UDP_EPEDS;
 530	__raw_writel(tmp, ep->creg);
 531
 
 532	ep->ep.maxpacket = maxpacket;
 533
 534	/*
 535	 * reset/init endpoint fifo.  NOTE:  leaves fifo_bank alone,
 536	 * since endpoint resets don't reset hw pingpong state.
 537	 */
 538	at91_udp_write(udc, AT91_UDP_RST_EP, ep->int_mask);
 539	at91_udp_write(udc, AT91_UDP_RST_EP, 0);
 540
 541	spin_unlock_irqrestore(&udc->lock, flags);
 542	return 0;
 543}
 544
 545static int at91_ep_disable (struct usb_ep * _ep)
 546{
 547	struct at91_ep	*ep = container_of(_ep, struct at91_ep, ep);
 548	struct at91_udc	*udc = ep->udc;
 549	unsigned long	flags;
 550
 551	if (ep == &ep->udc->ep[0])
 552		return -EINVAL;
 553
 554	spin_lock_irqsave(&udc->lock, flags);
 555
 556	nuke(ep, -ESHUTDOWN);
 557
 558	/* restore the endpoint's pristine config */
 559	ep->ep.desc = NULL;
 560	ep->ep.maxpacket = ep->maxpacket;
 561
 562	/* reset fifos and endpoint */
 563	if (ep->udc->clocked) {
 564		at91_udp_write(udc, AT91_UDP_RST_EP, ep->int_mask);
 565		at91_udp_write(udc, AT91_UDP_RST_EP, 0);
 566		__raw_writel(0, ep->creg);
 567	}
 568
 569	spin_unlock_irqrestore(&udc->lock, flags);
 570	return 0;
 571}
 572
 573/*
 574 * this is a PIO-only driver, so there's nothing
 575 * interesting for request or buffer allocation.
 576 */
 577
 578static struct usb_request *
 579at91_ep_alloc_request(struct usb_ep *_ep, gfp_t gfp_flags)
 580{
 581	struct at91_request *req;
 582
 583	req = kzalloc(sizeof (struct at91_request), gfp_flags);
 584	if (!req)
 585		return NULL;
 586
 587	INIT_LIST_HEAD(&req->queue);
 588	return &req->req;
 589}
 590
 591static void at91_ep_free_request(struct usb_ep *_ep, struct usb_request *_req)
 592{
 593	struct at91_request *req;
 594
 595	req = container_of(_req, struct at91_request, req);
 596	BUG_ON(!list_empty(&req->queue));
 597	kfree(req);
 598}
 599
 600static int at91_ep_queue(struct usb_ep *_ep,
 601			struct usb_request *_req, gfp_t gfp_flags)
 602{
 603	struct at91_request	*req;
 604	struct at91_ep		*ep;
 605	struct at91_udc		*udc;
 606	int			status;
 607	unsigned long		flags;
 608
 609	req = container_of(_req, struct at91_request, req);
 610	ep = container_of(_ep, struct at91_ep, ep);
 611
 612	if (!_req || !_req->complete
 613			|| !_req->buf || !list_empty(&req->queue)) {
 614		DBG("invalid request\n");
 615		return -EINVAL;
 616	}
 617
 618	if (!_ep || (!ep->ep.desc && ep->ep.name != ep0name)) {
 619		DBG("invalid ep\n");
 620		return -EINVAL;
 621	}
 622
 623	udc = ep->udc;
 624
 625	if (!udc || !udc->driver || udc->gadget.speed == USB_SPEED_UNKNOWN) {
 626		DBG("invalid device\n");
 627		return -EINVAL;
 628	}
 629
 630	_req->status = -EINPROGRESS;
 631	_req->actual = 0;
 632
 633	spin_lock_irqsave(&udc->lock, flags);
 634
 635	/* try to kickstart any empty and idle queue */
 636	if (list_empty(&ep->queue) && !ep->stopped) {
 637		int	is_ep0;
 638
 639		/*
 640		 * If this control request has a non-empty DATA stage, this
 641		 * will start that stage.  It works just like a non-control
 642		 * request (until the status stage starts, maybe early).
 643		 *
 644		 * If the data stage is empty, then this starts a successful
 645		 * IN/STATUS stage.  (Unsuccessful ones use set_halt.)
 646		 */
 647		is_ep0 = (ep->ep.name == ep0name);
 648		if (is_ep0) {
 649			u32	tmp;
 650
 651			if (!udc->req_pending) {
 652				status = -EINVAL;
 653				goto done;
 654			}
 655
 656			/*
 657			 * defer changing CONFG until after the gadget driver
 658			 * reconfigures the endpoints.
 659			 */
 660			if (udc->wait_for_config_ack) {
 661				tmp = at91_udp_read(udc, AT91_UDP_GLB_STAT);
 662				tmp ^= AT91_UDP_CONFG;
 663				VDBG("toggle config\n");
 664				at91_udp_write(udc, AT91_UDP_GLB_STAT, tmp);
 665			}
 666			if (req->req.length == 0) {
 667ep0_in_status:
 668				PACKET("ep0 in/status\n");
 669				status = 0;
 670				tmp = __raw_readl(ep->creg);
 671				tmp &= ~SET_FX;
 672				tmp |= CLR_FX | AT91_UDP_TXPKTRDY;
 673				__raw_writel(tmp, ep->creg);
 674				udc->req_pending = 0;
 675				goto done;
 676			}
 677		}
 678
 679		if (ep->is_in)
 680			status = write_fifo(ep, req);
 681		else {
 682			status = read_fifo(ep, req);
 683
 684			/* IN/STATUS stage is otherwise triggered by irq */
 685			if (status && is_ep0)
 686				goto ep0_in_status;
 687		}
 688	} else
 689		status = 0;
 690
 691	if (req && !status) {
 692		list_add_tail (&req->queue, &ep->queue);
 693		at91_udp_write(udc, AT91_UDP_IER, ep->int_mask);
 694	}
 695done:
 696	spin_unlock_irqrestore(&udc->lock, flags);
 697	return (status < 0) ? status : 0;
 698}
 699
 700static int at91_ep_dequeue(struct usb_ep *_ep, struct usb_request *_req)
 701{
 702	struct at91_ep		*ep;
 703	struct at91_request	*req;
 704	unsigned long		flags;
 705	struct at91_udc		*udc;
 706
 707	ep = container_of(_ep, struct at91_ep, ep);
 708	if (!_ep || ep->ep.name == ep0name)
 709		return -EINVAL;
 710
 711	udc = ep->udc;
 712
 713	spin_lock_irqsave(&udc->lock, flags);
 714
 715	/* make sure it's actually queued on this endpoint */
 716	list_for_each_entry (req, &ep->queue, queue) {
 717		if (&req->req == _req)
 718			break;
 719	}
 720	if (&req->req != _req) {
 721		spin_unlock_irqrestore(&udc->lock, flags);
 722		return -EINVAL;
 723	}
 724
 725	done(ep, req, -ECONNRESET);
 726	spin_unlock_irqrestore(&udc->lock, flags);
 727	return 0;
 728}
 729
 730static int at91_ep_set_halt(struct usb_ep *_ep, int value)
 731{
 732	struct at91_ep	*ep = container_of(_ep, struct at91_ep, ep);
 733	struct at91_udc	*udc = ep->udc;
 734	u32 __iomem	*creg;
 735	u32		csr;
 736	unsigned long	flags;
 737	int		status = 0;
 738
 739	if (!_ep || ep->is_iso || !ep->udc->clocked)
 740		return -EINVAL;
 741
 742	creg = ep->creg;
 743	spin_lock_irqsave(&udc->lock, flags);
 744
 745	csr = __raw_readl(creg);
 746
 747	/*
 748	 * fail with still-busy IN endpoints, ensuring correct sequencing
 749	 * of data tx then stall.  note that the fifo rx bytecount isn't
 750	 * completely accurate as a tx bytecount.
 751	 */
 752	if (ep->is_in && (!list_empty(&ep->queue) || (csr >> 16) != 0))
 753		status = -EAGAIN;
 754	else {
 755		csr |= CLR_FX;
 756		csr &= ~SET_FX;
 757		if (value) {
 758			csr |= AT91_UDP_FORCESTALL;
 759			VDBG("halt %s\n", ep->ep.name);
 760		} else {
 761			at91_udp_write(udc, AT91_UDP_RST_EP, ep->int_mask);
 762			at91_udp_write(udc, AT91_UDP_RST_EP, 0);
 763			csr &= ~AT91_UDP_FORCESTALL;
 764		}
 765		__raw_writel(csr, creg);
 766	}
 767
 768	spin_unlock_irqrestore(&udc->lock, flags);
 769	return status;
 770}
 771
 772static const struct usb_ep_ops at91_ep_ops = {
 773	.enable		= at91_ep_enable,
 774	.disable	= at91_ep_disable,
 775	.alloc_request	= at91_ep_alloc_request,
 776	.free_request	= at91_ep_free_request,
 777	.queue		= at91_ep_queue,
 778	.dequeue	= at91_ep_dequeue,
 779	.set_halt	= at91_ep_set_halt,
 780	/* there's only imprecise fifo status reporting */
 781};
 782
 783/*-------------------------------------------------------------------------*/
 784
 785static int at91_get_frame(struct usb_gadget *gadget)
 786{
 787	struct at91_udc *udc = to_udc(gadget);
 788
 789	if (!to_udc(gadget)->clocked)
 790		return -EINVAL;
 791	return at91_udp_read(udc, AT91_UDP_FRM_NUM) & AT91_UDP_NUM;
 792}
 793
 794static int at91_wakeup(struct usb_gadget *gadget)
 795{
 796	struct at91_udc	*udc = to_udc(gadget);
 797	u32		glbstate;
 798	int		status = -EINVAL;
 799	unsigned long	flags;
 800
 801	DBG("%s\n", __func__ );
 802	spin_lock_irqsave(&udc->lock, flags);
 803
 804	if (!udc->clocked || !udc->suspended)
 805		goto done;
 806
 807	/* NOTE:  some "early versions" handle ESR differently ... */
 808
 809	glbstate = at91_udp_read(udc, AT91_UDP_GLB_STAT);
 810	if (!(glbstate & AT91_UDP_ESR))
 811		goto done;
 812	glbstate |= AT91_UDP_ESR;
 813	at91_udp_write(udc, AT91_UDP_GLB_STAT, glbstate);
 814
 815done:
 816	spin_unlock_irqrestore(&udc->lock, flags);
 817	return status;
 818}
 819
 820/* reinit == restore initial software state */
 821static void udc_reinit(struct at91_udc *udc)
 822{
 823	u32 i;
 824
 825	INIT_LIST_HEAD(&udc->gadget.ep_list);
 826	INIT_LIST_HEAD(&udc->gadget.ep0->ep_list);
 827
 828	for (i = 0; i < NUM_ENDPOINTS; i++) {
 829		struct at91_ep *ep = &udc->ep[i];
 830
 831		if (i != 0)
 832			list_add_tail(&ep->ep.ep_list, &udc->gadget.ep_list);
 833		ep->ep.desc = NULL;
 834		ep->stopped = 0;
 835		ep->fifo_bank = 0;
 836		usb_ep_set_maxpacket_limit(&ep->ep, ep->maxpacket);
 837		ep->creg = (void __iomem *) udc->udp_baseaddr + AT91_UDP_CSR(i);
 838		/* initialize one queue per endpoint */
 839		INIT_LIST_HEAD(&ep->queue);
 840	}
 841}
 842
 843static void stop_activity(struct at91_udc *udc)
 844{
 845	struct usb_gadget_driver *driver = udc->driver;
 846	int i;
 847
 848	if (udc->gadget.speed == USB_SPEED_UNKNOWN)
 849		driver = NULL;
 850	udc->gadget.speed = USB_SPEED_UNKNOWN;
 851	udc->suspended = 0;
 852
 853	for (i = 0; i < NUM_ENDPOINTS; i++) {
 854		struct at91_ep *ep = &udc->ep[i];
 855		ep->stopped = 1;
 856		nuke(ep, -ESHUTDOWN);
 857	}
 858	if (driver) {
 859		spin_unlock(&udc->lock);
 860		driver->disconnect(&udc->gadget);
 861		spin_lock(&udc->lock);
 862	}
 863
 864	udc_reinit(udc);
 865}
 866
 867static void clk_on(struct at91_udc *udc)
 868{
 869	if (udc->clocked)
 870		return;
 871	udc->clocked = 1;
 872
 873	if (IS_ENABLED(CONFIG_COMMON_CLK)) {
 874		clk_set_rate(udc->uclk, 48000000);
 875		clk_prepare_enable(udc->uclk);
 876	}
 877	clk_prepare_enable(udc->iclk);
 878	clk_prepare_enable(udc->fclk);
 879}
 880
 881static void clk_off(struct at91_udc *udc)
 882{
 883	if (!udc->clocked)
 884		return;
 885	udc->clocked = 0;
 886	udc->gadget.speed = USB_SPEED_UNKNOWN;
 887	clk_disable_unprepare(udc->fclk);
 888	clk_disable_unprepare(udc->iclk);
 889	if (IS_ENABLED(CONFIG_COMMON_CLK))
 890		clk_disable_unprepare(udc->uclk);
 891}
 892
 893/*
 894 * activate/deactivate link with host; minimize power usage for
 895 * inactive links by cutting clocks and transceiver power.
 896 */
 897static void pullup(struct at91_udc *udc, int is_on)
 898{
 899	int	active = !udc->board.pullup_active_low;
 900
 901	if (!udc->enabled || !udc->vbus)
 902		is_on = 0;
 903	DBG("%sactive\n", is_on ? "" : "in");
 904
 905	if (is_on) {
 906		clk_on(udc);
 907		at91_udp_write(udc, AT91_UDP_ICR, AT91_UDP_RXRSM);
 908		at91_udp_write(udc, AT91_UDP_TXVC, 0);
 909		if (cpu_is_at91rm9200())
 910			gpio_set_value(udc->board.pullup_pin, active);
 911		else if (cpu_is_at91sam9260() || cpu_is_at91sam9263() || cpu_is_at91sam9g20()) {
 912			u32	txvc = at91_udp_read(udc, AT91_UDP_TXVC);
 913
 914			txvc |= AT91_UDP_TXVC_PUON;
 915			at91_udp_write(udc, AT91_UDP_TXVC, txvc);
 916		} else if (cpu_is_at91sam9261() || cpu_is_at91sam9g10()) {
 917			u32	usbpucr;
 918
 919			usbpucr = at91_matrix_read(AT91_MATRIX_USBPUCR);
 920			usbpucr |= AT91_MATRIX_USBPUCR_PUON;
 921			at91_matrix_write(AT91_MATRIX_USBPUCR, usbpucr);
 922		}
 923	} else {
 924		stop_activity(udc);
 925		at91_udp_write(udc, AT91_UDP_IDR, AT91_UDP_RXRSM);
 926		at91_udp_write(udc, AT91_UDP_TXVC, AT91_UDP_TXVC_TXVDIS);
 927		if (cpu_is_at91rm9200())
 928			gpio_set_value(udc->board.pullup_pin, !active);
 929		else if (cpu_is_at91sam9260() || cpu_is_at91sam9263() || cpu_is_at91sam9g20()) {
 930			u32	txvc = at91_udp_read(udc, AT91_UDP_TXVC);
 931
 932			txvc &= ~AT91_UDP_TXVC_PUON;
 933			at91_udp_write(udc, AT91_UDP_TXVC, txvc);
 934		} else if (cpu_is_at91sam9261() || cpu_is_at91sam9g10()) {
 935			u32	usbpucr;
 936
 937			usbpucr = at91_matrix_read(AT91_MATRIX_USBPUCR);
 938			usbpucr &= ~AT91_MATRIX_USBPUCR_PUON;
 939			at91_matrix_write(AT91_MATRIX_USBPUCR, usbpucr);
 940		}
 941		clk_off(udc);
 942	}
 943}
 944
 945/* vbus is here!  turn everything on that's ready */
 946static int at91_vbus_session(struct usb_gadget *gadget, int is_active)
 947{
 948	struct at91_udc	*udc = to_udc(gadget);
 949	unsigned long	flags;
 950
 951	/* VDBG("vbus %s\n", is_active ? "on" : "off"); */
 952	spin_lock_irqsave(&udc->lock, flags);
 953	udc->vbus = (is_active != 0);
 954	if (udc->driver)
 955		pullup(udc, is_active);
 956	else
 957		pullup(udc, 0);
 958	spin_unlock_irqrestore(&udc->lock, flags);
 959	return 0;
 960}
 961
 962static int at91_pullup(struct usb_gadget *gadget, int is_on)
 963{
 964	struct at91_udc	*udc = to_udc(gadget);
 965	unsigned long	flags;
 966
 967	spin_lock_irqsave(&udc->lock, flags);
 968	udc->enabled = is_on = !!is_on;
 969	pullup(udc, is_on);
 970	spin_unlock_irqrestore(&udc->lock, flags);
 971	return 0;
 972}
 973
 974static int at91_set_selfpowered(struct usb_gadget *gadget, int is_on)
 975{
 976	struct at91_udc	*udc = to_udc(gadget);
 977	unsigned long	flags;
 978
 979	spin_lock_irqsave(&udc->lock, flags);
 980	udc->selfpowered = (is_on != 0);
 981	spin_unlock_irqrestore(&udc->lock, flags);
 982	return 0;
 983}
 984
 985static int at91_start(struct usb_gadget *gadget,
 986		struct usb_gadget_driver *driver);
 987static int at91_stop(struct usb_gadget *gadget,
 988		struct usb_gadget_driver *driver);
 989static const struct usb_gadget_ops at91_udc_ops = {
 990	.get_frame		= at91_get_frame,
 991	.wakeup			= at91_wakeup,
 992	.set_selfpowered	= at91_set_selfpowered,
 993	.vbus_session		= at91_vbus_session,
 994	.pullup			= at91_pullup,
 995	.udc_start		= at91_start,
 996	.udc_stop		= at91_stop,
 997
 998	/*
 999	 * VBUS-powered devices may also also want to support bigger
1000	 * power budgets after an appropriate SET_CONFIGURATION.
1001	 */
1002	/* .vbus_power		= at91_vbus_power, */
1003};
1004
1005/*-------------------------------------------------------------------------*/
1006
1007static int handle_ep(struct at91_ep *ep)
1008{
1009	struct at91_request	*req;
1010	u32 __iomem		*creg = ep->creg;
1011	u32			csr = __raw_readl(creg);
1012
1013	if (!list_empty(&ep->queue))
1014		req = list_entry(ep->queue.next,
1015			struct at91_request, queue);
1016	else
1017		req = NULL;
1018
1019	if (ep->is_in) {
1020		if (csr & (AT91_UDP_STALLSENT | AT91_UDP_TXCOMP)) {
1021			csr |= CLR_FX;
1022			csr &= ~(SET_FX | AT91_UDP_STALLSENT | AT91_UDP_TXCOMP);
1023			__raw_writel(csr, creg);
1024		}
1025		if (req)
1026			return write_fifo(ep, req);
1027
1028	} else {
1029		if (csr & AT91_UDP_STALLSENT) {
1030			/* STALLSENT bit == ISOERR */
1031			if (ep->is_iso && req)
1032				req->req.status = -EILSEQ;
1033			csr |= CLR_FX;
1034			csr &= ~(SET_FX | AT91_UDP_STALLSENT);
1035			__raw_writel(csr, creg);
1036			csr = __raw_readl(creg);
1037		}
1038		if (req && (csr & RX_DATA_READY))
1039			return read_fifo(ep, req);
1040	}
1041	return 0;
1042}
1043
1044union setup {
1045	u8			raw[8];
1046	struct usb_ctrlrequest	r;
1047};
1048
1049static void handle_setup(struct at91_udc *udc, struct at91_ep *ep, u32 csr)
1050{
1051	u32 __iomem	*creg = ep->creg;
1052	u8 __iomem	*dreg = ep->creg + (AT91_UDP_FDR(0) - AT91_UDP_CSR(0));
1053	unsigned	rxcount, i = 0;
1054	u32		tmp;
1055	union setup	pkt;
1056	int		status = 0;
1057
1058	/* read and ack SETUP; hard-fail for bogus packets */
1059	rxcount = (csr & AT91_UDP_RXBYTECNT) >> 16;
1060	if (likely(rxcount == 8)) {
1061		while (rxcount--)
1062			pkt.raw[i++] = __raw_readb(dreg);
1063		if (pkt.r.bRequestType & USB_DIR_IN) {
1064			csr |= AT91_UDP_DIR;
1065			ep->is_in = 1;
1066		} else {
1067			csr &= ~AT91_UDP_DIR;
1068			ep->is_in = 0;
1069		}
1070	} else {
1071		/* REVISIT this happens sometimes under load; why?? */
1072		ERR("SETUP len %d, csr %08x\n", rxcount, csr);
1073		status = -EINVAL;
1074	}
1075	csr |= CLR_FX;
1076	csr &= ~(SET_FX | AT91_UDP_RXSETUP);
1077	__raw_writel(csr, creg);
1078	udc->wait_for_addr_ack = 0;
1079	udc->wait_for_config_ack = 0;
1080	ep->stopped = 0;
1081	if (unlikely(status != 0))
1082		goto stall;
1083
1084#define w_index		le16_to_cpu(pkt.r.wIndex)
1085#define w_value		le16_to_cpu(pkt.r.wValue)
1086#define w_length	le16_to_cpu(pkt.r.wLength)
1087
1088	VDBG("SETUP %02x.%02x v%04x i%04x l%04x\n",
1089			pkt.r.bRequestType, pkt.r.bRequest,
1090			w_value, w_index, w_length);
1091
1092	/*
1093	 * A few standard requests get handled here, ones that touch
1094	 * hardware ... notably for device and endpoint features.
1095	 */
1096	udc->req_pending = 1;
1097	csr = __raw_readl(creg);
1098	csr |= CLR_FX;
1099	csr &= ~SET_FX;
1100	switch ((pkt.r.bRequestType << 8) | pkt.r.bRequest) {
1101
1102	case ((USB_TYPE_STANDARD|USB_RECIP_DEVICE) << 8)
1103			| USB_REQ_SET_ADDRESS:
1104		__raw_writel(csr | AT91_UDP_TXPKTRDY, creg);
1105		udc->addr = w_value;
1106		udc->wait_for_addr_ack = 1;
1107		udc->req_pending = 0;
1108		/* FADDR is set later, when we ack host STATUS */
1109		return;
1110
1111	case ((USB_TYPE_STANDARD|USB_RECIP_DEVICE) << 8)
1112			| USB_REQ_SET_CONFIGURATION:
1113		tmp = at91_udp_read(udc, AT91_UDP_GLB_STAT) & AT91_UDP_CONFG;
1114		if (pkt.r.wValue)
1115			udc->wait_for_config_ack = (tmp == 0);
1116		else
1117			udc->wait_for_config_ack = (tmp != 0);
1118		if (udc->wait_for_config_ack)
1119			VDBG("wait for config\n");
1120		/* CONFG is toggled later, if gadget driver succeeds */
1121		break;
1122
1123	/*
1124	 * Hosts may set or clear remote wakeup status, and
1125	 * devices may report they're VBUS powered.
1126	 */
1127	case ((USB_DIR_IN|USB_TYPE_STANDARD|USB_RECIP_DEVICE) << 8)
1128			| USB_REQ_GET_STATUS:
1129		tmp = (udc->selfpowered << USB_DEVICE_SELF_POWERED);
1130		if (at91_udp_read(udc, AT91_UDP_GLB_STAT) & AT91_UDP_ESR)
1131			tmp |= (1 << USB_DEVICE_REMOTE_WAKEUP);
1132		PACKET("get device status\n");
1133		__raw_writeb(tmp, dreg);
1134		__raw_writeb(0, dreg);
1135		goto write_in;
1136		/* then STATUS starts later, automatically */
1137	case ((USB_TYPE_STANDARD|USB_RECIP_DEVICE) << 8)
1138			| USB_REQ_SET_FEATURE:
1139		if (w_value != USB_DEVICE_REMOTE_WAKEUP)
1140			goto stall;
1141		tmp = at91_udp_read(udc, AT91_UDP_GLB_STAT);
1142		tmp |= AT91_UDP_ESR;
1143		at91_udp_write(udc, AT91_UDP_GLB_STAT, tmp);
1144		goto succeed;
1145	case ((USB_TYPE_STANDARD|USB_RECIP_DEVICE) << 8)
1146			| USB_REQ_CLEAR_FEATURE:
1147		if (w_value != USB_DEVICE_REMOTE_WAKEUP)
1148			goto stall;
1149		tmp = at91_udp_read(udc, AT91_UDP_GLB_STAT);
1150		tmp &= ~AT91_UDP_ESR;
1151		at91_udp_write(udc, AT91_UDP_GLB_STAT, tmp);
1152		goto succeed;
1153
1154	/*
1155	 * Interfaces have no feature settings; this is pretty useless.
1156	 * we won't even insist the interface exists...
1157	 */
1158	case ((USB_DIR_IN|USB_TYPE_STANDARD|USB_RECIP_INTERFACE) << 8)
1159			| USB_REQ_GET_STATUS:
1160		PACKET("get interface status\n");
1161		__raw_writeb(0, dreg);
1162		__raw_writeb(0, dreg);
1163		goto write_in;
1164		/* then STATUS starts later, automatically */
1165	case ((USB_TYPE_STANDARD|USB_RECIP_INTERFACE) << 8)
1166			| USB_REQ_SET_FEATURE:
1167	case ((USB_TYPE_STANDARD|USB_RECIP_INTERFACE) << 8)
1168			| USB_REQ_CLEAR_FEATURE:
1169		goto stall;
1170
1171	/*
1172	 * Hosts may clear bulk/intr endpoint halt after the gadget
1173	 * driver sets it (not widely used); or set it (for testing)
1174	 */
1175	case ((USB_DIR_IN|USB_TYPE_STANDARD|USB_RECIP_ENDPOINT) << 8)
1176			| USB_REQ_GET_STATUS:
1177		tmp = w_index & USB_ENDPOINT_NUMBER_MASK;
1178		ep = &udc->ep[tmp];
1179		if (tmp >= NUM_ENDPOINTS || (tmp && !ep->ep.desc))
1180			goto stall;
1181
1182		if (tmp) {
1183			if ((w_index & USB_DIR_IN)) {
1184				if (!ep->is_in)
1185					goto stall;
1186			} else if (ep->is_in)
1187				goto stall;
1188		}
1189		PACKET("get %s status\n", ep->ep.name);
1190		if (__raw_readl(ep->creg) & AT91_UDP_FORCESTALL)
1191			tmp = (1 << USB_ENDPOINT_HALT);
1192		else
1193			tmp = 0;
1194		__raw_writeb(tmp, dreg);
1195		__raw_writeb(0, dreg);
1196		goto write_in;
1197		/* then STATUS starts later, automatically */
1198	case ((USB_TYPE_STANDARD|USB_RECIP_ENDPOINT) << 8)
1199			| USB_REQ_SET_FEATURE:
1200		tmp = w_index & USB_ENDPOINT_NUMBER_MASK;
1201		ep = &udc->ep[tmp];
1202		if (w_value != USB_ENDPOINT_HALT || tmp >= NUM_ENDPOINTS)
1203			goto stall;
1204		if (!ep->ep.desc || ep->is_iso)
1205			goto stall;
1206		if ((w_index & USB_DIR_IN)) {
1207			if (!ep->is_in)
1208				goto stall;
1209		} else if (ep->is_in)
1210			goto stall;
1211
1212		tmp = __raw_readl(ep->creg);
1213		tmp &= ~SET_FX;
1214		tmp |= CLR_FX | AT91_UDP_FORCESTALL;
1215		__raw_writel(tmp, ep->creg);
1216		goto succeed;
1217	case ((USB_TYPE_STANDARD|USB_RECIP_ENDPOINT) << 8)
1218			| USB_REQ_CLEAR_FEATURE:
1219		tmp = w_index & USB_ENDPOINT_NUMBER_MASK;
1220		ep = &udc->ep[tmp];
1221		if (w_value != USB_ENDPOINT_HALT || tmp >= NUM_ENDPOINTS)
1222			goto stall;
1223		if (tmp == 0)
1224			goto succeed;
1225		if (!ep->ep.desc || ep->is_iso)
1226			goto stall;
1227		if ((w_index & USB_DIR_IN)) {
1228			if (!ep->is_in)
1229				goto stall;
1230		} else if (ep->is_in)
1231			goto stall;
1232
1233		at91_udp_write(udc, AT91_UDP_RST_EP, ep->int_mask);
1234		at91_udp_write(udc, AT91_UDP_RST_EP, 0);
1235		tmp = __raw_readl(ep->creg);
1236		tmp |= CLR_FX;
1237		tmp &= ~(SET_FX | AT91_UDP_FORCESTALL);
1238		__raw_writel(tmp, ep->creg);
1239		if (!list_empty(&ep->queue))
1240			handle_ep(ep);
1241		goto succeed;
1242	}
1243
1244#undef w_value
1245#undef w_index
1246#undef w_length
1247
1248	/* pass request up to the gadget driver */
1249	if (udc->driver) {
1250		spin_unlock(&udc->lock);
1251		status = udc->driver->setup(&udc->gadget, &pkt.r);
1252		spin_lock(&udc->lock);
1253	}
1254	else
1255		status = -ENODEV;
1256	if (status < 0) {
1257stall:
1258		VDBG("req %02x.%02x protocol STALL; stat %d\n",
1259				pkt.r.bRequestType, pkt.r.bRequest, status);
1260		csr |= AT91_UDP_FORCESTALL;
1261		__raw_writel(csr, creg);
1262		udc->req_pending = 0;
1263	}
1264	return;
1265
1266succeed:
1267	/* immediate successful (IN) STATUS after zero length DATA */
1268	PACKET("ep0 in/status\n");
1269write_in:
1270	csr |= AT91_UDP_TXPKTRDY;
1271	__raw_writel(csr, creg);
1272	udc->req_pending = 0;
1273}
1274
1275static void handle_ep0(struct at91_udc *udc)
1276{
1277	struct at91_ep		*ep0 = &udc->ep[0];
1278	u32 __iomem		*creg = ep0->creg;
1279	u32			csr = __raw_readl(creg);
1280	struct at91_request	*req;
1281
1282	if (unlikely(csr & AT91_UDP_STALLSENT)) {
1283		nuke(ep0, -EPROTO);
1284		udc->req_pending = 0;
1285		csr |= CLR_FX;
1286		csr &= ~(SET_FX | AT91_UDP_STALLSENT | AT91_UDP_FORCESTALL);
1287		__raw_writel(csr, creg);
1288		VDBG("ep0 stalled\n");
1289		csr = __raw_readl(creg);
1290	}
1291	if (csr & AT91_UDP_RXSETUP) {
1292		nuke(ep0, 0);
1293		udc->req_pending = 0;
1294		handle_setup(udc, ep0, csr);
1295		return;
1296	}
1297
1298	if (list_empty(&ep0->queue))
1299		req = NULL;
1300	else
1301		req = list_entry(ep0->queue.next, struct at91_request, queue);
1302
1303	/* host ACKed an IN packet that we sent */
1304	if (csr & AT91_UDP_TXCOMP) {
1305		csr |= CLR_FX;
1306		csr &= ~(SET_FX | AT91_UDP_TXCOMP);
1307
1308		/* write more IN DATA? */
1309		if (req && ep0->is_in) {
1310			if (handle_ep(ep0))
1311				udc->req_pending = 0;
1312
1313		/*
1314		 * Ack after:
1315		 *  - last IN DATA packet (including GET_STATUS)
1316		 *  - IN/STATUS for OUT DATA
1317		 *  - IN/STATUS for any zero-length DATA stage
1318		 * except for the IN DATA case, the host should send
1319		 * an OUT status later, which we'll ack.
1320		 */
1321		} else {
1322			udc->req_pending = 0;
1323			__raw_writel(csr, creg);
1324
1325			/*
1326			 * SET_ADDRESS takes effect only after the STATUS
1327			 * (to the original address) gets acked.
1328			 */
1329			if (udc->wait_for_addr_ack) {
1330				u32	tmp;
1331
1332				at91_udp_write(udc, AT91_UDP_FADDR,
1333						AT91_UDP_FEN | udc->addr);
1334				tmp = at91_udp_read(udc, AT91_UDP_GLB_STAT);
1335				tmp &= ~AT91_UDP_FADDEN;
1336				if (udc->addr)
1337					tmp |= AT91_UDP_FADDEN;
1338				at91_udp_write(udc, AT91_UDP_GLB_STAT, tmp);
1339
1340				udc->wait_for_addr_ack = 0;
1341				VDBG("address %d\n", udc->addr);
1342			}
1343		}
1344	}
1345
1346	/* OUT packet arrived ... */
1347	else if (csr & AT91_UDP_RX_DATA_BK0) {
1348		csr |= CLR_FX;
1349		csr &= ~(SET_FX | AT91_UDP_RX_DATA_BK0);
1350
1351		/* OUT DATA stage */
1352		if (!ep0->is_in) {
1353			if (req) {
1354				if (handle_ep(ep0)) {
1355					/* send IN/STATUS */
1356					PACKET("ep0 in/status\n");
1357					csr = __raw_readl(creg);
1358					csr &= ~SET_FX;
1359					csr |= CLR_FX | AT91_UDP_TXPKTRDY;
1360					__raw_writel(csr, creg);
1361					udc->req_pending = 0;
1362				}
1363			} else if (udc->req_pending) {
1364				/*
1365				 * AT91 hardware has a hard time with this
1366				 * "deferred response" mode for control-OUT
1367				 * transfers.  (For control-IN it's fine.)
1368				 *
1369				 * The normal solution leaves OUT data in the
1370				 * fifo until the gadget driver is ready.
1371				 * We couldn't do that here without disabling
1372				 * the IRQ that tells about SETUP packets,
1373				 * e.g. when the host gets impatient...
1374				 *
1375				 * Working around it by copying into a buffer
1376				 * would almost be a non-deferred response,
1377				 * except that it wouldn't permit reliable
1378				 * stalling of the request.  Instead, demand
1379				 * that gadget drivers not use this mode.
1380				 */
1381				DBG("no control-OUT deferred responses!\n");
1382				__raw_writel(csr | AT91_UDP_FORCESTALL, creg);
1383				udc->req_pending = 0;
1384			}
1385
1386		/* STATUS stage for control-IN; ack.  */
1387		} else {
1388			PACKET("ep0 out/status ACK\n");
1389			__raw_writel(csr, creg);
1390
1391			/* "early" status stage */
1392			if (req)
1393				done(ep0, req, 0);
1394		}
1395	}
1396}
1397
1398static irqreturn_t at91_udc_irq (int irq, void *_udc)
1399{
1400	struct at91_udc		*udc = _udc;
1401	u32			rescans = 5;
1402	int			disable_clock = 0;
1403	unsigned long		flags;
1404
1405	spin_lock_irqsave(&udc->lock, flags);
1406
1407	if (!udc->clocked) {
1408		clk_on(udc);
1409		disable_clock = 1;
1410	}
1411
1412	while (rescans--) {
1413		u32 status;
1414
1415		status = at91_udp_read(udc, AT91_UDP_ISR)
1416			& at91_udp_read(udc, AT91_UDP_IMR);
1417		if (!status)
1418			break;
1419
1420		/* USB reset irq:  not maskable */
1421		if (status & AT91_UDP_ENDBUSRES) {
1422			at91_udp_write(udc, AT91_UDP_IDR, ~MINIMUS_INTERRUPTUS);
1423			at91_udp_write(udc, AT91_UDP_IER, MINIMUS_INTERRUPTUS);
1424			/* Atmel code clears this irq twice */
1425			at91_udp_write(udc, AT91_UDP_ICR, AT91_UDP_ENDBUSRES);
1426			at91_udp_write(udc, AT91_UDP_ICR, AT91_UDP_ENDBUSRES);
1427			VDBG("end bus reset\n");
1428			udc->addr = 0;
1429			stop_activity(udc);
1430
1431			/* enable ep0 */
1432			at91_udp_write(udc, AT91_UDP_CSR(0),
1433					AT91_UDP_EPEDS | AT91_UDP_EPTYPE_CTRL);
1434			udc->gadget.speed = USB_SPEED_FULL;
1435			udc->suspended = 0;
1436			at91_udp_write(udc, AT91_UDP_IER, AT91_UDP_EP(0));
1437
1438			/*
1439			 * NOTE:  this driver keeps clocks off unless the
1440			 * USB host is present.  That saves power, but for
1441			 * boards that don't support VBUS detection, both
1442			 * clocks need to be active most of the time.
1443			 */
1444
1445		/* host initiated suspend (3+ms bus idle) */
1446		} else if (status & AT91_UDP_RXSUSP) {
1447			at91_udp_write(udc, AT91_UDP_IDR, AT91_UDP_RXSUSP);
1448			at91_udp_write(udc, AT91_UDP_IER, AT91_UDP_RXRSM);
1449			at91_udp_write(udc, AT91_UDP_ICR, AT91_UDP_RXSUSP);
1450			/* VDBG("bus suspend\n"); */
1451			if (udc->suspended)
1452				continue;
1453			udc->suspended = 1;
1454
1455			/*
1456			 * NOTE:  when suspending a VBUS-powered device, the
1457			 * gadget driver should switch into slow clock mode
1458			 * and then into standby to avoid drawing more than
1459			 * 500uA power (2500uA for some high-power configs).
1460			 */
1461			if (udc->driver && udc->driver->suspend) {
1462				spin_unlock(&udc->lock);
1463				udc->driver->suspend(&udc->gadget);
1464				spin_lock(&udc->lock);
1465			}
1466
1467		/* host initiated resume */
1468		} else if (status & AT91_UDP_RXRSM) {
1469			at91_udp_write(udc, AT91_UDP_IDR, AT91_UDP_RXRSM);
1470			at91_udp_write(udc, AT91_UDP_IER, AT91_UDP_RXSUSP);
1471			at91_udp_write(udc, AT91_UDP_ICR, AT91_UDP_RXRSM);
1472			/* VDBG("bus resume\n"); */
1473			if (!udc->suspended)
1474				continue;
1475			udc->suspended = 0;
1476
1477			/*
1478			 * NOTE:  for a VBUS-powered device, the gadget driver
1479			 * would normally want to switch out of slow clock
1480			 * mode into normal mode.
1481			 */
1482			if (udc->driver && udc->driver->resume) {
1483				spin_unlock(&udc->lock);
1484				udc->driver->resume(&udc->gadget);
1485				spin_lock(&udc->lock);
1486			}
1487
1488		/* endpoint IRQs are cleared by handling them */
1489		} else {
1490			int		i;
1491			unsigned	mask = 1;
1492			struct at91_ep	*ep = &udc->ep[1];
1493
1494			if (status & mask)
1495				handle_ep0(udc);
1496			for (i = 1; i < NUM_ENDPOINTS; i++) {
1497				mask <<= 1;
1498				if (status & mask)
1499					handle_ep(ep);
1500				ep++;
1501			}
1502		}
1503	}
1504
1505	if (disable_clock)
1506		clk_off(udc);
1507
1508	spin_unlock_irqrestore(&udc->lock, flags);
1509
1510	return IRQ_HANDLED;
1511}
1512
1513/*-------------------------------------------------------------------------*/
1514
1515static void nop_release(struct device *dev)
1516{
1517	/* nothing to free */
1518}
1519
1520static struct at91_udc controller = {
1521	.gadget = {
1522		.ops	= &at91_udc_ops,
1523		.ep0	= &controller.ep[0].ep,
1524		.name	= driver_name,
1525		.dev	= {
1526			.init_name = "gadget",
1527			.release = nop_release,
1528		}
1529	},
1530	.ep[0] = {
1531		.ep = {
1532			.name	= ep0name,
1533			.ops	= &at91_ep_ops,
1534		},
1535		.udc		= &controller,
1536		.maxpacket	= 8,
1537		.int_mask	= 1 << 0,
1538	},
1539	.ep[1] = {
1540		.ep = {
1541			.name	= "ep1",
1542			.ops	= &at91_ep_ops,
1543		},
1544		.udc		= &controller,
1545		.is_pingpong	= 1,
1546		.maxpacket	= 64,
1547		.int_mask	= 1 << 1,
1548	},
1549	.ep[2] = {
1550		.ep = {
1551			.name	= "ep2",
1552			.ops	= &at91_ep_ops,
1553		},
1554		.udc		= &controller,
1555		.is_pingpong	= 1,
1556		.maxpacket	= 64,
1557		.int_mask	= 1 << 2,
1558	},
1559	.ep[3] = {
1560		.ep = {
1561			/* could actually do bulk too */
1562			.name	= "ep3-int",
1563			.ops	= &at91_ep_ops,
1564		},
1565		.udc		= &controller,
1566		.maxpacket	= 8,
1567		.int_mask	= 1 << 3,
1568	},
1569	.ep[4] = {
1570		.ep = {
1571			.name	= "ep4",
1572			.ops	= &at91_ep_ops,
1573		},
1574		.udc		= &controller,
1575		.is_pingpong	= 1,
1576		.maxpacket	= 256,
1577		.int_mask	= 1 << 4,
1578	},
1579	.ep[5] = {
1580		.ep = {
1581			.name	= "ep5",
1582			.ops	= &at91_ep_ops,
1583		},
1584		.udc		= &controller,
1585		.is_pingpong	= 1,
1586		.maxpacket	= 256,
1587		.int_mask	= 1 << 5,
1588	},
1589	/* ep6 and ep7 are also reserved (custom silicon might use them) */
1590};
1591
1592static void at91_vbus_update(struct at91_udc *udc, unsigned value)
1593{
1594	value ^= udc->board.vbus_active_low;
1595	if (value != udc->vbus)
1596		at91_vbus_session(&udc->gadget, value);
1597}
1598
1599static irqreturn_t at91_vbus_irq(int irq, void *_udc)
1600{
1601	struct at91_udc	*udc = _udc;
1602
1603	/* vbus needs at least brief debouncing */
1604	udelay(10);
1605	at91_vbus_update(udc, gpio_get_value(udc->board.vbus_pin));
1606
1607	return IRQ_HANDLED;
1608}
1609
1610static void at91_vbus_timer_work(struct work_struct *work)
1611{
1612	struct at91_udc *udc = container_of(work, struct at91_udc,
1613					    vbus_timer_work);
1614
1615	at91_vbus_update(udc, gpio_get_value_cansleep(udc->board.vbus_pin));
1616
1617	if (!timer_pending(&udc->vbus_timer))
1618		mod_timer(&udc->vbus_timer, jiffies + VBUS_POLL_TIMEOUT);
1619}
1620
1621static void at91_vbus_timer(unsigned long data)
1622{
1623	struct at91_udc *udc = (struct at91_udc *)data;
1624
1625	/*
1626	 * If we are polling vbus it is likely that the gpio is on an
1627	 * bus such as i2c or spi which may sleep, so schedule some work
1628	 * to read the vbus gpio
1629	 */
1630	schedule_work(&udc->vbus_timer_work);
 
1631}
1632
1633static int at91_start(struct usb_gadget *gadget,
1634		struct usb_gadget_driver *driver)
1635{
1636	struct at91_udc	*udc;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1637
1638	udc = container_of(gadget, struct at91_udc, gadget);
1639	udc->driver = driver;
1640	udc->gadget.dev.of_node = udc->pdev->dev.of_node;
 
1641	udc->enabled = 1;
1642	udc->selfpowered = 1;
1643
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1644	DBG("bound to %s\n", driver->driver.name);
1645	return 0;
1646}
1647
1648static int at91_stop(struct usb_gadget *gadget,
1649		struct usb_gadget_driver *driver)
1650{
1651	struct at91_udc *udc;
1652	unsigned long	flags;
1653
1654	udc = container_of(gadget, struct at91_udc, gadget);
 
 
1655	spin_lock_irqsave(&udc->lock, flags);
1656	udc->enabled = 0;
1657	at91_udp_write(udc, AT91_UDP_IDR, ~0);
 
1658	spin_unlock_irqrestore(&udc->lock, flags);
1659
 
 
 
1660	udc->driver = NULL;
1661
1662	DBG("unbound from %s\n", driver->driver.name);
1663	return 0;
1664}
1665
1666/*-------------------------------------------------------------------------*/
1667
1668static void at91udc_shutdown(struct platform_device *dev)
1669{
1670	struct at91_udc *udc = platform_get_drvdata(dev);
1671	unsigned long	flags;
1672
1673	/* force disconnect on reboot */
1674	spin_lock_irqsave(&udc->lock, flags);
1675	pullup(platform_get_drvdata(dev), 0);
1676	spin_unlock_irqrestore(&udc->lock, flags);
1677}
1678
1679static void at91udc_of_init(struct at91_udc *udc,
1680				     struct device_node *np)
1681{
1682	struct at91_udc_data *board = &udc->board;
1683	u32 val;
1684	enum of_gpio_flags flags;
1685
1686	if (of_property_read_u32(np, "atmel,vbus-polled", &val) == 0)
1687		board->vbus_polled = 1;
1688
1689	board->vbus_pin = of_get_named_gpio_flags(np, "atmel,vbus-gpio", 0,
1690						  &flags);
1691	board->vbus_active_low = (flags & OF_GPIO_ACTIVE_LOW) ? 1 : 0;
1692
1693	board->pullup_pin = of_get_named_gpio_flags(np, "atmel,pullup-gpio", 0,
1694						  &flags);
1695
1696	board->pullup_active_low = (flags & OF_GPIO_ACTIVE_LOW) ? 1 : 0;
1697}
1698
1699static int at91udc_probe(struct platform_device *pdev)
1700{
1701	struct device	*dev = &pdev->dev;
1702	struct at91_udc	*udc;
1703	int		retval;
1704	struct resource	*res;
1705
1706	if (!dev_get_platdata(dev) && !pdev->dev.of_node) {
1707		/* small (so we copy it) but critical! */
1708		DBG("missing platform_data\n");
1709		return -ENODEV;
1710	}
1711
 
 
 
 
 
 
 
 
 
 
1712	res = platform_get_resource(pdev, IORESOURCE_MEM, 0);
1713	if (!res)
1714		return -ENXIO;
1715
1716	if (!request_mem_region(res->start, resource_size(res), driver_name)) {
1717		DBG("someone's using UDC memory\n");
1718		return -EBUSY;
1719	}
1720
1721	/* init software state */
1722	udc = &controller;
1723	udc->gadget.dev.parent = dev;
1724	if (IS_ENABLED(CONFIG_OF) && pdev->dev.of_node)
1725		at91udc_of_init(udc, pdev->dev.of_node);
1726	else
1727		memcpy(&udc->board, dev_get_platdata(dev),
1728		       sizeof(struct at91_udc_data));
1729	udc->pdev = pdev;
1730	udc->enabled = 0;
1731	spin_lock_init(&udc->lock);
1732
1733	/* rm9200 needs manual D+ pullup; off by default */
1734	if (cpu_is_at91rm9200()) {
1735		if (!gpio_is_valid(udc->board.pullup_pin)) {
1736			DBG("no D+ pullup?\n");
1737			retval = -ENODEV;
1738			goto fail0;
1739		}
1740		retval = gpio_request(udc->board.pullup_pin, "udc_pullup");
1741		if (retval) {
1742			DBG("D+ pullup is busy\n");
1743			goto fail0;
1744		}
1745		gpio_direction_output(udc->board.pullup_pin,
1746				udc->board.pullup_active_low);
1747	}
1748
1749	/* newer chips have more FIFO memory than rm9200 */
1750	if (cpu_is_at91sam9260() || cpu_is_at91sam9g20()) {
1751		udc->ep[0].maxpacket = 64;
1752		udc->ep[3].maxpacket = 64;
1753		udc->ep[4].maxpacket = 512;
1754		udc->ep[5].maxpacket = 512;
1755	} else if (cpu_is_at91sam9261() || cpu_is_at91sam9g10()) {
1756		udc->ep[3].maxpacket = 64;
1757	} else if (cpu_is_at91sam9263()) {
1758		udc->ep[0].maxpacket = 64;
1759		udc->ep[3].maxpacket = 64;
1760	}
1761
1762	udc->udp_baseaddr = ioremap(res->start, resource_size(res));
1763	if (!udc->udp_baseaddr) {
1764		retval = -ENOMEM;
1765		goto fail0a;
1766	}
1767
1768	udc_reinit(udc);
1769
1770	/* get interface and function clocks */
1771	udc->iclk = clk_get(dev, "udc_clk");
1772	udc->fclk = clk_get(dev, "udpck");
1773	if (IS_ENABLED(CONFIG_COMMON_CLK))
1774		udc->uclk = clk_get(dev, "usb_clk");
1775	if (IS_ERR(udc->iclk) || IS_ERR(udc->fclk) ||
1776	    (IS_ENABLED(CONFIG_COMMON_CLK) && IS_ERR(udc->uclk))) {
1777		DBG("clocks missing\n");
1778		retval = -ENODEV;
1779		goto fail1;
 
 
 
 
 
 
 
1780	}
1781
1782	/* don't do anything until we have both gadget driver and VBUS */
1783	retval = clk_prepare_enable(udc->iclk);
1784	if (retval)
1785		goto fail1;
1786	at91_udp_write(udc, AT91_UDP_TXVC, AT91_UDP_TXVC_TXVDIS);
1787	at91_udp_write(udc, AT91_UDP_IDR, 0xffffffff);
1788	/* Clear all pending interrupts - UDP may be used by bootloader. */
1789	at91_udp_write(udc, AT91_UDP_ICR, 0xffffffff);
1790	clk_disable_unprepare(udc->iclk);
1791
1792	/* request UDC and maybe VBUS irqs */
1793	udc->udp_irq = platform_get_irq(pdev, 0);
1794	retval = request_irq(udc->udp_irq, at91_udc_irq,
1795			0, driver_name, udc);
1796	if (retval < 0) {
1797		DBG("request irq %d failed\n", udc->udp_irq);
1798		goto fail1;
1799	}
1800	if (gpio_is_valid(udc->board.vbus_pin)) {
1801		retval = gpio_request(udc->board.vbus_pin, "udc_vbus");
1802		if (retval < 0) {
1803			DBG("request vbus pin failed\n");
1804			goto fail2;
1805		}
1806		gpio_direction_input(udc->board.vbus_pin);
1807
1808		/*
1809		 * Get the initial state of VBUS - we cannot expect
1810		 * a pending interrupt.
1811		 */
1812		udc->vbus = gpio_get_value_cansleep(udc->board.vbus_pin) ^
1813			udc->board.vbus_active_low;
1814
1815		if (udc->board.vbus_polled) {
1816			INIT_WORK(&udc->vbus_timer_work, at91_vbus_timer_work);
1817			setup_timer(&udc->vbus_timer, at91_vbus_timer,
1818				    (unsigned long)udc);
1819			mod_timer(&udc->vbus_timer,
1820				  jiffies + VBUS_POLL_TIMEOUT);
1821		} else {
1822			if (request_irq(gpio_to_irq(udc->board.vbus_pin),
1823					at91_vbus_irq, 0, driver_name, udc)) {
1824				DBG("request vbus irq %d failed\n",
1825				    udc->board.vbus_pin);
1826				retval = -EBUSY;
1827				goto fail3;
1828			}
1829		}
1830	} else {
1831		DBG("no VBUS detection, assuming always-on\n");
1832		udc->vbus = 1;
1833	}
1834	retval = usb_add_gadget_udc(dev, &udc->gadget);
1835	if (retval)
1836		goto fail4;
1837	dev_set_drvdata(dev, udc);
1838	device_init_wakeup(dev, 1);
1839	create_debug_file(udc);
1840
1841	INFO("%s version %s\n", driver_name, DRIVER_VERSION);
1842	return 0;
1843fail4:
1844	if (gpio_is_valid(udc->board.vbus_pin) && !udc->board.vbus_polled)
1845		free_irq(gpio_to_irq(udc->board.vbus_pin), udc);
1846fail3:
1847	if (gpio_is_valid(udc->board.vbus_pin))
1848		gpio_free(udc->board.vbus_pin);
1849fail2:
1850	free_irq(udc->udp_irq, udc);
1851fail1:
1852	if (IS_ENABLED(CONFIG_COMMON_CLK) && !IS_ERR(udc->uclk))
1853		clk_put(udc->uclk);
1854	if (!IS_ERR(udc->fclk))
1855		clk_put(udc->fclk);
1856	if (!IS_ERR(udc->iclk))
1857		clk_put(udc->iclk);
1858	iounmap(udc->udp_baseaddr);
1859fail0a:
1860	if (cpu_is_at91rm9200())
1861		gpio_free(udc->board.pullup_pin);
1862fail0:
1863	release_mem_region(res->start, resource_size(res));
1864	DBG("%s probe failed, %d\n", driver_name, retval);
1865	return retval;
1866}
1867
1868static int __exit at91udc_remove(struct platform_device *pdev)
1869{
1870	struct at91_udc *udc = platform_get_drvdata(pdev);
1871	struct resource *res;
1872	unsigned long	flags;
1873
1874	DBG("remove\n");
1875
1876	usb_del_gadget_udc(&udc->gadget);
1877	if (udc->driver)
1878		return -EBUSY;
1879
1880	spin_lock_irqsave(&udc->lock, flags);
1881	pullup(udc, 0);
1882	spin_unlock_irqrestore(&udc->lock, flags);
1883
1884	device_init_wakeup(&pdev->dev, 0);
1885	remove_debug_file(udc);
1886	if (gpio_is_valid(udc->board.vbus_pin)) {
1887		free_irq(gpio_to_irq(udc->board.vbus_pin), udc);
1888		gpio_free(udc->board.vbus_pin);
1889	}
1890	free_irq(udc->udp_irq, udc);
 
 
1891	iounmap(udc->udp_baseaddr);
1892
1893	if (cpu_is_at91rm9200())
1894		gpio_free(udc->board.pullup_pin);
1895
1896	res = platform_get_resource(pdev, IORESOURCE_MEM, 0);
1897	release_mem_region(res->start, resource_size(res));
1898
1899	clk_put(udc->iclk);
1900	clk_put(udc->fclk);
1901	if (IS_ENABLED(CONFIG_COMMON_CLK))
1902		clk_put(udc->uclk);
1903
1904	return 0;
1905}
1906
1907#ifdef CONFIG_PM
1908static int at91udc_suspend(struct platform_device *pdev, pm_message_t mesg)
1909{
1910	struct at91_udc *udc = platform_get_drvdata(pdev);
1911	int		wake = udc->driver && device_may_wakeup(&pdev->dev);
1912	unsigned long	flags;
1913
1914	/* Unless we can act normally to the host (letting it wake us up
1915	 * whenever it has work for us) force disconnect.  Wakeup requires
1916	 * PLLB for USB events (signaling for reset, wakeup, or incoming
1917	 * tokens) and VBUS irqs (on systems which support them).
1918	 */
1919	if ((!udc->suspended && udc->addr)
1920			|| !wake
1921			|| at91_suspend_entering_slow_clock()) {
1922		spin_lock_irqsave(&udc->lock, flags);
1923		pullup(udc, 0);
1924		wake = 0;
1925		spin_unlock_irqrestore(&udc->lock, flags);
1926	} else
1927		enable_irq_wake(udc->udp_irq);
1928
1929	udc->active_suspend = wake;
1930	if (gpio_is_valid(udc->board.vbus_pin) && !udc->board.vbus_polled && wake)
1931		enable_irq_wake(udc->board.vbus_pin);
1932	return 0;
1933}
1934
1935static int at91udc_resume(struct platform_device *pdev)
1936{
1937	struct at91_udc *udc = platform_get_drvdata(pdev);
1938	unsigned long	flags;
1939
1940	if (gpio_is_valid(udc->board.vbus_pin) && !udc->board.vbus_polled &&
1941	    udc->active_suspend)
1942		disable_irq_wake(udc->board.vbus_pin);
1943
1944	/* maybe reconnect to host; if so, clocks on */
1945	if (udc->active_suspend)
1946		disable_irq_wake(udc->udp_irq);
1947	else {
1948		spin_lock_irqsave(&udc->lock, flags);
1949		pullup(udc, 1);
1950		spin_unlock_irqrestore(&udc->lock, flags);
1951	}
1952	return 0;
1953}
1954#else
1955#define	at91udc_suspend	NULL
1956#define	at91udc_resume	NULL
1957#endif
1958
1959#if defined(CONFIG_OF)
1960static const struct of_device_id at91_udc_dt_ids[] = {
1961	{ .compatible = "atmel,at91rm9200-udc" },
1962	{ /* sentinel */ }
1963};
1964
1965MODULE_DEVICE_TABLE(of, at91_udc_dt_ids);
1966#endif
1967
1968static struct platform_driver at91_udc_driver = {
1969	.remove		= __exit_p(at91udc_remove),
1970	.shutdown	= at91udc_shutdown,
1971	.suspend	= at91udc_suspend,
1972	.resume		= at91udc_resume,
1973	.driver		= {
1974		.name	= (char *) driver_name,
1975		.owner	= THIS_MODULE,
1976		.of_match_table	= of_match_ptr(at91_udc_dt_ids),
1977	},
1978};
1979
1980module_platform_driver_probe(at91_udc_driver, at91udc_probe);
 
 
 
 
 
 
 
 
 
 
1981
1982MODULE_DESCRIPTION("AT91 udc driver");
1983MODULE_AUTHOR("Thomas Rathbone, David Brownell");
1984MODULE_LICENSE("GPL");
1985MODULE_ALIAS("platform:at91_udc");
   1/*
   2 * at91_udc -- driver for at91-series USB peripheral controller
   3 *
   4 * Copyright (C) 2004 by Thomas Rathbone
   5 * Copyright (C) 2005 by HP Labs
   6 * Copyright (C) 2005 by David Brownell
   7 *
   8 * This program is free software; you can redistribute it and/or modify
   9 * it under the terms of the GNU General Public License as published by
  10 * the Free Software Foundation; either version 2 of the License, or
  11 * (at your option) any later version.
  12 *
  13 * This program is distributed in the hope that it will be useful,
  14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
  15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  16 * GNU General Public License for more details.
  17 *
  18 * You should have received a copy of the GNU General Public License
  19 * along with this program; if not, write to the
  20 * Free Software Foundation, Inc., 59 Temple Place - Suite 330,
  21 * Boston, MA  02111-1307, USA.
  22 */
  23
  24#undef	VERBOSE_DEBUG
  25#undef	PACKET_TRACE
  26
  27#include <linux/kernel.h>
  28#include <linux/module.h>
  29#include <linux/platform_device.h>
  30#include <linux/delay.h>
  31#include <linux/ioport.h>
  32#include <linux/slab.h>
  33#include <linux/errno.h>
  34#include <linux/init.h>
  35#include <linux/list.h>
  36#include <linux/interrupt.h>
  37#include <linux/proc_fs.h>
  38#include <linux/prefetch.h>
  39#include <linux/clk.h>
  40#include <linux/usb/ch9.h>
  41#include <linux/usb/gadget.h>
  42#include <linux/prefetch.h>
 
 
  43
  44#include <asm/byteorder.h>
  45#include <mach/hardware.h>
  46#include <asm/io.h>
  47#include <asm/irq.h>
  48#include <asm/system.h>
  49#include <asm/gpio.h>
  50
  51#include <mach/board.h>
  52#include <mach/cpu.h>
  53#include <mach/at91sam9261_matrix.h>
 
  54
  55#include "at91_udc.h"
  56
  57
  58/*
  59 * This controller is simple and PIO-only.  It's used in many AT91-series
  60 * full speed USB controllers, including the at91rm9200 (arm920T, with MMU),
  61 * at91sam926x (arm926ejs, with MMU), and several no-mmu versions.
  62 *
  63 * This driver expects the board has been wired with two GPIOs suppporting
  64 * a VBUS sensing IRQ, and a D+ pullup.  (They may be omitted, but the
  65 * testing hasn't covered such cases.)
  66 *
  67 * The pullup is most important (so it's integrated on sam926x parts).  It
  68 * provides software control over whether the host enumerates the device.
  69 *
  70 * The VBUS sensing helps during enumeration, and allows both USB clocks
  71 * (and the transceiver) to stay gated off until they're necessary, saving
  72 * power.  During USB suspend, the 48 MHz clock is gated off in hardware;
  73 * it may also be gated off by software during some Linux sleep states.
  74 */
  75
  76#define	DRIVER_VERSION	"3 May 2006"
  77
  78static const char driver_name [] = "at91_udc";
  79static const char ep0name[] = "ep0";
  80
  81#define VBUS_POLL_TIMEOUT	msecs_to_jiffies(1000)
  82
  83#define at91_udp_read(udc, reg) \
  84	__raw_readl((udc)->udp_baseaddr + (reg))
  85#define at91_udp_write(udc, reg, val) \
  86	__raw_writel((val), (udc)->udp_baseaddr + (reg))
  87
  88/*-------------------------------------------------------------------------*/
  89
  90#ifdef CONFIG_USB_GADGET_DEBUG_FILES
  91
  92#include <linux/seq_file.h>
  93
  94static const char debug_filename[] = "driver/udc";
  95
  96#define FOURBITS "%s%s%s%s"
  97#define EIGHTBITS FOURBITS FOURBITS
  98
  99static void proc_ep_show(struct seq_file *s, struct at91_ep *ep)
 100{
 101	static char		*types[] = {
 102		"control", "out-iso", "out-bulk", "out-int",
 103		"BOGUS",   "in-iso",  "in-bulk",  "in-int"};
 104
 105	u32			csr;
 106	struct at91_request	*req;
 107	unsigned long	flags;
 108	struct at91_udc	*udc = ep->udc;
 109
 110	spin_lock_irqsave(&udc->lock, flags);
 111
 112	csr = __raw_readl(ep->creg);
 113
 114	/* NOTE:  not collecting per-endpoint irq statistics... */
 115
 116	seq_printf(s, "\n");
 117	seq_printf(s, "%s, maxpacket %d %s%s %s%s\n",
 118			ep->ep.name, ep->ep.maxpacket,
 119			ep->is_in ? "in" : "out",
 120			ep->is_iso ? " iso" : "",
 121			ep->is_pingpong
 122				? (ep->fifo_bank ? "pong" : "ping")
 123				: "",
 124			ep->stopped ? " stopped" : "");
 125	seq_printf(s, "csr %08x rxbytes=%d %s %s %s" EIGHTBITS "\n",
 126		csr,
 127		(csr & 0x07ff0000) >> 16,
 128		(csr & (1 << 15)) ? "enabled" : "disabled",
 129		(csr & (1 << 11)) ? "DATA1" : "DATA0",
 130		types[(csr & 0x700) >> 8],
 131
 132		/* iff type is control then print current direction */
 133		(!(csr & 0x700))
 134			? ((csr & (1 << 7)) ? " IN" : " OUT")
 135			: "",
 136		(csr & (1 << 6)) ? " rxdatabk1" : "",
 137		(csr & (1 << 5)) ? " forcestall" : "",
 138		(csr & (1 << 4)) ? " txpktrdy" : "",
 139
 140		(csr & (1 << 3)) ? " stallsent" : "",
 141		(csr & (1 << 2)) ? " rxsetup" : "",
 142		(csr & (1 << 1)) ? " rxdatabk0" : "",
 143		(csr & (1 << 0)) ? " txcomp" : "");
 144	if (list_empty (&ep->queue))
 145		seq_printf(s, "\t(queue empty)\n");
 146
 147	else list_for_each_entry (req, &ep->queue, queue) {
 148		unsigned	length = req->req.actual;
 149
 150		seq_printf(s, "\treq %p len %d/%d buf %p\n",
 151				&req->req, length,
 152				req->req.length, req->req.buf);
 153	}
 154	spin_unlock_irqrestore(&udc->lock, flags);
 155}
 156
 157static void proc_irq_show(struct seq_file *s, const char *label, u32 mask)
 158{
 159	int i;
 160
 161	seq_printf(s, "%s %04x:%s%s" FOURBITS, label, mask,
 162		(mask & (1 << 13)) ? " wakeup" : "",
 163		(mask & (1 << 12)) ? " endbusres" : "",
 164
 165		(mask & (1 << 11)) ? " sofint" : "",
 166		(mask & (1 << 10)) ? " extrsm" : "",
 167		(mask & (1 << 9)) ? " rxrsm" : "",
 168		(mask & (1 << 8)) ? " rxsusp" : "");
 169	for (i = 0; i < 8; i++) {
 170		if (mask & (1 << i))
 171			seq_printf(s, " ep%d", i);
 172	}
 173	seq_printf(s, "\n");
 174}
 175
 176static int proc_udc_show(struct seq_file *s, void *unused)
 177{
 178	struct at91_udc	*udc = s->private;
 179	struct at91_ep	*ep;
 180	u32		tmp;
 181
 182	seq_printf(s, "%s: version %s\n", driver_name, DRIVER_VERSION);
 183
 184	seq_printf(s, "vbus %s, pullup %s, %s powered%s, gadget %s\n\n",
 185		udc->vbus ? "present" : "off",
 186		udc->enabled
 187			? (udc->vbus ? "active" : "enabled")
 188			: "disabled",
 189		udc->selfpowered ? "self" : "VBUS",
 190		udc->suspended ? ", suspended" : "",
 191		udc->driver ? udc->driver->driver.name : "(none)");
 192
 193	/* don't access registers when interface isn't clocked */
 194	if (!udc->clocked) {
 195		seq_printf(s, "(not clocked)\n");
 196		return 0;
 197	}
 198
 199	tmp = at91_udp_read(udc, AT91_UDP_FRM_NUM);
 200	seq_printf(s, "frame %05x:%s%s frame=%d\n", tmp,
 201		(tmp & AT91_UDP_FRM_OK) ? " ok" : "",
 202		(tmp & AT91_UDP_FRM_ERR) ? " err" : "",
 203		(tmp & AT91_UDP_NUM));
 204
 205	tmp = at91_udp_read(udc, AT91_UDP_GLB_STAT);
 206	seq_printf(s, "glbstate %02x:%s" FOURBITS "\n", tmp,
 207		(tmp & AT91_UDP_RMWUPE) ? " rmwupe" : "",
 208		(tmp & AT91_UDP_RSMINPR) ? " rsminpr" : "",
 209		(tmp & AT91_UDP_ESR) ? " esr" : "",
 210		(tmp & AT91_UDP_CONFG) ? " confg" : "",
 211		(tmp & AT91_UDP_FADDEN) ? " fadden" : "");
 212
 213	tmp = at91_udp_read(udc, AT91_UDP_FADDR);
 214	seq_printf(s, "faddr   %03x:%s fadd=%d\n", tmp,
 215		(tmp & AT91_UDP_FEN) ? " fen" : "",
 216		(tmp & AT91_UDP_FADD));
 217
 218	proc_irq_show(s, "imr   ", at91_udp_read(udc, AT91_UDP_IMR));
 219	proc_irq_show(s, "isr   ", at91_udp_read(udc, AT91_UDP_ISR));
 220
 221	if (udc->enabled && udc->vbus) {
 222		proc_ep_show(s, &udc->ep[0]);
 223		list_for_each_entry (ep, &udc->gadget.ep_list, ep.ep_list) {
 224			if (ep->desc)
 225				proc_ep_show(s, ep);
 226		}
 227	}
 228	return 0;
 229}
 230
 231static int proc_udc_open(struct inode *inode, struct file *file)
 232{
 233	return single_open(file, proc_udc_show, PDE(inode)->data);
 234}
 235
 236static const struct file_operations proc_ops = {
 237	.owner		= THIS_MODULE,
 238	.open		= proc_udc_open,
 239	.read		= seq_read,
 240	.llseek		= seq_lseek,
 241	.release	= single_release,
 242};
 243
 244static void create_debug_file(struct at91_udc *udc)
 245{
 246	udc->pde = proc_create_data(debug_filename, 0, NULL, &proc_ops, udc);
 247}
 248
 249static void remove_debug_file(struct at91_udc *udc)
 250{
 251	if (udc->pde)
 252		remove_proc_entry(debug_filename, NULL);
 253}
 254
 255#else
 256
 257static inline void create_debug_file(struct at91_udc *udc) {}
 258static inline void remove_debug_file(struct at91_udc *udc) {}
 259
 260#endif
 261
 262
 263/*-------------------------------------------------------------------------*/
 264
 265static void done(struct at91_ep *ep, struct at91_request *req, int status)
 266{
 267	unsigned	stopped = ep->stopped;
 268	struct at91_udc	*udc = ep->udc;
 269
 270	list_del_init(&req->queue);
 271	if (req->req.status == -EINPROGRESS)
 272		req->req.status = status;
 273	else
 274		status = req->req.status;
 275	if (status && status != -ESHUTDOWN)
 276		VDBG("%s done %p, status %d\n", ep->ep.name, req, status);
 277
 278	ep->stopped = 1;
 279	spin_unlock(&udc->lock);
 280	req->req.complete(&ep->ep, &req->req);
 281	spin_lock(&udc->lock);
 282	ep->stopped = stopped;
 283
 284	/* ep0 is always ready; other endpoints need a non-empty queue */
 285	if (list_empty(&ep->queue) && ep->int_mask != (1 << 0))
 286		at91_udp_write(udc, AT91_UDP_IDR, ep->int_mask);
 287}
 288
 289/*-------------------------------------------------------------------------*/
 290
 291/* bits indicating OUT fifo has data ready */
 292#define	RX_DATA_READY	(AT91_UDP_RX_DATA_BK0 | AT91_UDP_RX_DATA_BK1)
 293
 294/*
 295 * Endpoint FIFO CSR bits have a mix of bits, making it unsafe to just write
 296 * back most of the value you just read (because of side effects, including
 297 * bits that may change after reading and before writing).
 298 *
 299 * Except when changing a specific bit, always write values which:
 300 *  - clear SET_FX bits (setting them could change something)
 301 *  - set CLR_FX bits (clearing them could change something)
 302 *
 303 * There are also state bits like FORCESTALL, EPEDS, DIR, and EPTYPE
 304 * that shouldn't normally be changed.
 305 *
 306 * NOTE at91sam9260 docs mention synch between UDPCK and MCK clock domains,
 307 * implying a need to wait for one write to complete (test relevant bits)
 308 * before starting the next write.  This shouldn't be an issue given how
 309 * infrequently we write, except maybe for write-then-read idioms.
 310 */
 311#define	SET_FX	(AT91_UDP_TXPKTRDY)
 312#define	CLR_FX	(RX_DATA_READY | AT91_UDP_RXSETUP \
 313		| AT91_UDP_STALLSENT | AT91_UDP_TXCOMP)
 314
 315/* pull OUT packet data from the endpoint's fifo */
 316static int read_fifo (struct at91_ep *ep, struct at91_request *req)
 317{
 318	u32 __iomem	*creg = ep->creg;
 319	u8 __iomem	*dreg = ep->creg + (AT91_UDP_FDR(0) - AT91_UDP_CSR(0));
 320	u32		csr;
 321	u8		*buf;
 322	unsigned int	count, bufferspace, is_done;
 323
 324	buf = req->req.buf + req->req.actual;
 325	bufferspace = req->req.length - req->req.actual;
 326
 327	/*
 328	 * there might be nothing to read if ep_queue() calls us,
 329	 * or if we already emptied both pingpong buffers
 330	 */
 331rescan:
 332	csr = __raw_readl(creg);
 333	if ((csr & RX_DATA_READY) == 0)
 334		return 0;
 335
 336	count = (csr & AT91_UDP_RXBYTECNT) >> 16;
 337	if (count > ep->ep.maxpacket)
 338		count = ep->ep.maxpacket;
 339	if (count > bufferspace) {
 340		DBG("%s buffer overflow\n", ep->ep.name);
 341		req->req.status = -EOVERFLOW;
 342		count = bufferspace;
 343	}
 344	__raw_readsb(dreg, buf, count);
 345
 346	/* release and swap pingpong mem bank */
 347	csr |= CLR_FX;
 348	if (ep->is_pingpong) {
 349		if (ep->fifo_bank == 0) {
 350			csr &= ~(SET_FX | AT91_UDP_RX_DATA_BK0);
 351			ep->fifo_bank = 1;
 352		} else {
 353			csr &= ~(SET_FX | AT91_UDP_RX_DATA_BK1);
 354			ep->fifo_bank = 0;
 355		}
 356	} else
 357		csr &= ~(SET_FX | AT91_UDP_RX_DATA_BK0);
 358	__raw_writel(csr, creg);
 359
 360	req->req.actual += count;
 361	is_done = (count < ep->ep.maxpacket);
 362	if (count == bufferspace)
 363		is_done = 1;
 364
 365	PACKET("%s %p out/%d%s\n", ep->ep.name, &req->req, count,
 366			is_done ? " (done)" : "");
 367
 368	/*
 369	 * avoid extra trips through IRQ logic for packets already in
 370	 * the fifo ... maybe preventing an extra (expensive) OUT-NAK
 371	 */
 372	if (is_done)
 373		done(ep, req, 0);
 374	else if (ep->is_pingpong) {
 375		/*
 376		 * One dummy read to delay the code because of a HW glitch:
 377		 * CSR returns bad RXCOUNT when read too soon after updating
 378		 * RX_DATA_BK flags.
 379		 */
 380		csr = __raw_readl(creg);
 381
 382		bufferspace -= count;
 383		buf += count;
 384		goto rescan;
 385	}
 386
 387	return is_done;
 388}
 389
 390/* load fifo for an IN packet */
 391static int write_fifo(struct at91_ep *ep, struct at91_request *req)
 392{
 393	u32 __iomem	*creg = ep->creg;
 394	u32		csr = __raw_readl(creg);
 395	u8 __iomem	*dreg = ep->creg + (AT91_UDP_FDR(0) - AT91_UDP_CSR(0));
 396	unsigned	total, count, is_last;
 397	u8		*buf;
 398
 399	/*
 400	 * TODO: allow for writing two packets to the fifo ... that'll
 401	 * reduce the amount of IN-NAKing, but probably won't affect
 402	 * throughput much.  (Unlike preventing OUT-NAKing!)
 403	 */
 404
 405	/*
 406	 * If ep_queue() calls us, the queue is empty and possibly in
 407	 * odd states like TXCOMP not yet cleared (we do it, saving at
 408	 * least one IRQ) or the fifo not yet being free.  Those aren't
 409	 * issues normally (IRQ handler fast path).
 410	 */
 411	if (unlikely(csr & (AT91_UDP_TXCOMP | AT91_UDP_TXPKTRDY))) {
 412		if (csr & AT91_UDP_TXCOMP) {
 413			csr |= CLR_FX;
 414			csr &= ~(SET_FX | AT91_UDP_TXCOMP);
 415			__raw_writel(csr, creg);
 416			csr = __raw_readl(creg);
 417		}
 418		if (csr & AT91_UDP_TXPKTRDY)
 419			return 0;
 420	}
 421
 422	buf = req->req.buf + req->req.actual;
 423	prefetch(buf);
 424	total = req->req.length - req->req.actual;
 425	if (ep->ep.maxpacket < total) {
 426		count = ep->ep.maxpacket;
 427		is_last = 0;
 428	} else {
 429		count = total;
 430		is_last = (count < ep->ep.maxpacket) || !req->req.zero;
 431	}
 432
 433	/*
 434	 * Write the packet, maybe it's a ZLP.
 435	 *
 436	 * NOTE:  incrementing req->actual before we receive the ACK means
 437	 * gadget driver IN bytecounts can be wrong in fault cases.  That's
 438	 * fixable with PIO drivers like this one (save "count" here, and
 439	 * do the increment later on TX irq), but not for most DMA hardware.
 440	 *
 441	 * So all gadget drivers must accept that potential error.  Some
 442	 * hardware supports precise fifo status reporting, letting them
 443	 * recover when the actual bytecount matters (e.g. for USB Test
 444	 * and Measurement Class devices).
 445	 */
 446	__raw_writesb(dreg, buf, count);
 447	csr &= ~SET_FX;
 448	csr |= CLR_FX | AT91_UDP_TXPKTRDY;
 449	__raw_writel(csr, creg);
 450	req->req.actual += count;
 451
 452	PACKET("%s %p in/%d%s\n", ep->ep.name, &req->req, count,
 453			is_last ? " (done)" : "");
 454	if (is_last)
 455		done(ep, req, 0);
 456	return is_last;
 457}
 458
 459static void nuke(struct at91_ep *ep, int status)
 460{
 461	struct at91_request *req;
 462
 463	// terminer chaque requete dans la queue
 464	ep->stopped = 1;
 465	if (list_empty(&ep->queue))
 466		return;
 467
 468	VDBG("%s %s\n", __func__, ep->ep.name);
 469	while (!list_empty(&ep->queue)) {
 470		req = list_entry(ep->queue.next, struct at91_request, queue);
 471		done(ep, req, status);
 472	}
 473}
 474
 475/*-------------------------------------------------------------------------*/
 476
 477static int at91_ep_enable(struct usb_ep *_ep,
 478				const struct usb_endpoint_descriptor *desc)
 479{
 480	struct at91_ep	*ep = container_of(_ep, struct at91_ep, ep);
 481	struct at91_udc	*udc = ep->udc;
 482	u16		maxpacket;
 483	u32		tmp;
 484	unsigned long	flags;
 485
 486	if (!_ep || !ep
 487			|| !desc || ep->desc
 488			|| _ep->name == ep0name
 489			|| desc->bDescriptorType != USB_DT_ENDPOINT
 490			|| (maxpacket = le16_to_cpu(desc->wMaxPacketSize)) == 0
 491			|| maxpacket > ep->maxpacket) {
 492		DBG("bad ep or descriptor\n");
 493		return -EINVAL;
 494	}
 495
 
 496	if (!udc->driver || udc->gadget.speed == USB_SPEED_UNKNOWN) {
 497		DBG("bogus device state\n");
 498		return -ESHUTDOWN;
 499	}
 500
 501	tmp = usb_endpoint_type(desc);
 502	switch (tmp) {
 503	case USB_ENDPOINT_XFER_CONTROL:
 504		DBG("only one control endpoint\n");
 505		return -EINVAL;
 506	case USB_ENDPOINT_XFER_INT:
 507		if (maxpacket > 64)
 508			goto bogus_max;
 509		break;
 510	case USB_ENDPOINT_XFER_BULK:
 511		switch (maxpacket) {
 512		case 8:
 513		case 16:
 514		case 32:
 515		case 64:
 516			goto ok;
 517		}
 518bogus_max:
 519		DBG("bogus maxpacket %d\n", maxpacket);
 520		return -EINVAL;
 521	case USB_ENDPOINT_XFER_ISOC:
 522		if (!ep->is_pingpong) {
 523			DBG("iso requires double buffering\n");
 524			return -EINVAL;
 525		}
 526		break;
 527	}
 528
 529ok:
 530	spin_lock_irqsave(&udc->lock, flags);
 531
 532	/* initialize endpoint to match this descriptor */
 533	ep->is_in = usb_endpoint_dir_in(desc);
 534	ep->is_iso = (tmp == USB_ENDPOINT_XFER_ISOC);
 535	ep->stopped = 0;
 536	if (ep->is_in)
 537		tmp |= 0x04;
 538	tmp <<= 8;
 539	tmp |= AT91_UDP_EPEDS;
 540	__raw_writel(tmp, ep->creg);
 541
 542	ep->desc = desc;
 543	ep->ep.maxpacket = maxpacket;
 544
 545	/*
 546	 * reset/init endpoint fifo.  NOTE:  leaves fifo_bank alone,
 547	 * since endpoint resets don't reset hw pingpong state.
 548	 */
 549	at91_udp_write(udc, AT91_UDP_RST_EP, ep->int_mask);
 550	at91_udp_write(udc, AT91_UDP_RST_EP, 0);
 551
 552	spin_unlock_irqrestore(&udc->lock, flags);
 553	return 0;
 554}
 555
 556static int at91_ep_disable (struct usb_ep * _ep)
 557{
 558	struct at91_ep	*ep = container_of(_ep, struct at91_ep, ep);
 559	struct at91_udc	*udc = ep->udc;
 560	unsigned long	flags;
 561
 562	if (ep == &ep->udc->ep[0])
 563		return -EINVAL;
 564
 565	spin_lock_irqsave(&udc->lock, flags);
 566
 567	nuke(ep, -ESHUTDOWN);
 568
 569	/* restore the endpoint's pristine config */
 570	ep->desc = NULL;
 571	ep->ep.maxpacket = ep->maxpacket;
 572
 573	/* reset fifos and endpoint */
 574	if (ep->udc->clocked) {
 575		at91_udp_write(udc, AT91_UDP_RST_EP, ep->int_mask);
 576		at91_udp_write(udc, AT91_UDP_RST_EP, 0);
 577		__raw_writel(0, ep->creg);
 578	}
 579
 580	spin_unlock_irqrestore(&udc->lock, flags);
 581	return 0;
 582}
 583
 584/*
 585 * this is a PIO-only driver, so there's nothing
 586 * interesting for request or buffer allocation.
 587 */
 588
 589static struct usb_request *
 590at91_ep_alloc_request(struct usb_ep *_ep, gfp_t gfp_flags)
 591{
 592	struct at91_request *req;
 593
 594	req = kzalloc(sizeof (struct at91_request), gfp_flags);
 595	if (!req)
 596		return NULL;
 597
 598	INIT_LIST_HEAD(&req->queue);
 599	return &req->req;
 600}
 601
 602static void at91_ep_free_request(struct usb_ep *_ep, struct usb_request *_req)
 603{
 604	struct at91_request *req;
 605
 606	req = container_of(_req, struct at91_request, req);
 607	BUG_ON(!list_empty(&req->queue));
 608	kfree(req);
 609}
 610
 611static int at91_ep_queue(struct usb_ep *_ep,
 612			struct usb_request *_req, gfp_t gfp_flags)
 613{
 614	struct at91_request	*req;
 615	struct at91_ep		*ep;
 616	struct at91_udc		*udc;
 617	int			status;
 618	unsigned long		flags;
 619
 620	req = container_of(_req, struct at91_request, req);
 621	ep = container_of(_ep, struct at91_ep, ep);
 622
 623	if (!_req || !_req->complete
 624			|| !_req->buf || !list_empty(&req->queue)) {
 625		DBG("invalid request\n");
 626		return -EINVAL;
 627	}
 628
 629	if (!_ep || (!ep->desc && ep->ep.name != ep0name)) {
 630		DBG("invalid ep\n");
 631		return -EINVAL;
 632	}
 633
 634	udc = ep->udc;
 635
 636	if (!udc || !udc->driver || udc->gadget.speed == USB_SPEED_UNKNOWN) {
 637		DBG("invalid device\n");
 638		return -EINVAL;
 639	}
 640
 641	_req->status = -EINPROGRESS;
 642	_req->actual = 0;
 643
 644	spin_lock_irqsave(&udc->lock, flags);
 645
 646	/* try to kickstart any empty and idle queue */
 647	if (list_empty(&ep->queue) && !ep->stopped) {
 648		int	is_ep0;
 649
 650		/*
 651		 * If this control request has a non-empty DATA stage, this
 652		 * will start that stage.  It works just like a non-control
 653		 * request (until the status stage starts, maybe early).
 654		 *
 655		 * If the data stage is empty, then this starts a successful
 656		 * IN/STATUS stage.  (Unsuccessful ones use set_halt.)
 657		 */
 658		is_ep0 = (ep->ep.name == ep0name);
 659		if (is_ep0) {
 660			u32	tmp;
 661
 662			if (!udc->req_pending) {
 663				status = -EINVAL;
 664				goto done;
 665			}
 666
 667			/*
 668			 * defer changing CONFG until after the gadget driver
 669			 * reconfigures the endpoints.
 670			 */
 671			if (udc->wait_for_config_ack) {
 672				tmp = at91_udp_read(udc, AT91_UDP_GLB_STAT);
 673				tmp ^= AT91_UDP_CONFG;
 674				VDBG("toggle config\n");
 675				at91_udp_write(udc, AT91_UDP_GLB_STAT, tmp);
 676			}
 677			if (req->req.length == 0) {
 678ep0_in_status:
 679				PACKET("ep0 in/status\n");
 680				status = 0;
 681				tmp = __raw_readl(ep->creg);
 682				tmp &= ~SET_FX;
 683				tmp |= CLR_FX | AT91_UDP_TXPKTRDY;
 684				__raw_writel(tmp, ep->creg);
 685				udc->req_pending = 0;
 686				goto done;
 687			}
 688		}
 689
 690		if (ep->is_in)
 691			status = write_fifo(ep, req);
 692		else {
 693			status = read_fifo(ep, req);
 694
 695			/* IN/STATUS stage is otherwise triggered by irq */
 696			if (status && is_ep0)
 697				goto ep0_in_status;
 698		}
 699	} else
 700		status = 0;
 701
 702	if (req && !status) {
 703		list_add_tail (&req->queue, &ep->queue);
 704		at91_udp_write(udc, AT91_UDP_IER, ep->int_mask);
 705	}
 706done:
 707	spin_unlock_irqrestore(&udc->lock, flags);
 708	return (status < 0) ? status : 0;
 709}
 710
 711static int at91_ep_dequeue(struct usb_ep *_ep, struct usb_request *_req)
 712{
 713	struct at91_ep		*ep;
 714	struct at91_request	*req;
 715	unsigned long		flags;
 716	struct at91_udc		*udc;
 717
 718	ep = container_of(_ep, struct at91_ep, ep);
 719	if (!_ep || ep->ep.name == ep0name)
 720		return -EINVAL;
 721
 722	udc = ep->udc;
 723
 724	spin_lock_irqsave(&udc->lock, flags);
 725
 726	/* make sure it's actually queued on this endpoint */
 727	list_for_each_entry (req, &ep->queue, queue) {
 728		if (&req->req == _req)
 729			break;
 730	}
 731	if (&req->req != _req) {
 732		spin_unlock_irqrestore(&udc->lock, flags);
 733		return -EINVAL;
 734	}
 735
 736	done(ep, req, -ECONNRESET);
 737	spin_unlock_irqrestore(&udc->lock, flags);
 738	return 0;
 739}
 740
 741static int at91_ep_set_halt(struct usb_ep *_ep, int value)
 742{
 743	struct at91_ep	*ep = container_of(_ep, struct at91_ep, ep);
 744	struct at91_udc	*udc = ep->udc;
 745	u32 __iomem	*creg;
 746	u32		csr;
 747	unsigned long	flags;
 748	int		status = 0;
 749
 750	if (!_ep || ep->is_iso || !ep->udc->clocked)
 751		return -EINVAL;
 752
 753	creg = ep->creg;
 754	spin_lock_irqsave(&udc->lock, flags);
 755
 756	csr = __raw_readl(creg);
 757
 758	/*
 759	 * fail with still-busy IN endpoints, ensuring correct sequencing
 760	 * of data tx then stall.  note that the fifo rx bytecount isn't
 761	 * completely accurate as a tx bytecount.
 762	 */
 763	if (ep->is_in && (!list_empty(&ep->queue) || (csr >> 16) != 0))
 764		status = -EAGAIN;
 765	else {
 766		csr |= CLR_FX;
 767		csr &= ~SET_FX;
 768		if (value) {
 769			csr |= AT91_UDP_FORCESTALL;
 770			VDBG("halt %s\n", ep->ep.name);
 771		} else {
 772			at91_udp_write(udc, AT91_UDP_RST_EP, ep->int_mask);
 773			at91_udp_write(udc, AT91_UDP_RST_EP, 0);
 774			csr &= ~AT91_UDP_FORCESTALL;
 775		}
 776		__raw_writel(csr, creg);
 777	}
 778
 779	spin_unlock_irqrestore(&udc->lock, flags);
 780	return status;
 781}
 782
 783static const struct usb_ep_ops at91_ep_ops = {
 784	.enable		= at91_ep_enable,
 785	.disable	= at91_ep_disable,
 786	.alloc_request	= at91_ep_alloc_request,
 787	.free_request	= at91_ep_free_request,
 788	.queue		= at91_ep_queue,
 789	.dequeue	= at91_ep_dequeue,
 790	.set_halt	= at91_ep_set_halt,
 791	// there's only imprecise fifo status reporting
 792};
 793
 794/*-------------------------------------------------------------------------*/
 795
 796static int at91_get_frame(struct usb_gadget *gadget)
 797{
 798	struct at91_udc *udc = to_udc(gadget);
 799
 800	if (!to_udc(gadget)->clocked)
 801		return -EINVAL;
 802	return at91_udp_read(udc, AT91_UDP_FRM_NUM) & AT91_UDP_NUM;
 803}
 804
 805static int at91_wakeup(struct usb_gadget *gadget)
 806{
 807	struct at91_udc	*udc = to_udc(gadget);
 808	u32		glbstate;
 809	int		status = -EINVAL;
 810	unsigned long	flags;
 811
 812	DBG("%s\n", __func__ );
 813	spin_lock_irqsave(&udc->lock, flags);
 814
 815	if (!udc->clocked || !udc->suspended)
 816		goto done;
 817
 818	/* NOTE:  some "early versions" handle ESR differently ... */
 819
 820	glbstate = at91_udp_read(udc, AT91_UDP_GLB_STAT);
 821	if (!(glbstate & AT91_UDP_ESR))
 822		goto done;
 823	glbstate |= AT91_UDP_ESR;
 824	at91_udp_write(udc, AT91_UDP_GLB_STAT, glbstate);
 825
 826done:
 827	spin_unlock_irqrestore(&udc->lock, flags);
 828	return status;
 829}
 830
 831/* reinit == restore initial software state */
 832static void udc_reinit(struct at91_udc *udc)
 833{
 834	u32 i;
 835
 836	INIT_LIST_HEAD(&udc->gadget.ep_list);
 837	INIT_LIST_HEAD(&udc->gadget.ep0->ep_list);
 838
 839	for (i = 0; i < NUM_ENDPOINTS; i++) {
 840		struct at91_ep *ep = &udc->ep[i];
 841
 842		if (i != 0)
 843			list_add_tail(&ep->ep.ep_list, &udc->gadget.ep_list);
 844		ep->desc = NULL;
 845		ep->stopped = 0;
 846		ep->fifo_bank = 0;
 847		ep->ep.maxpacket = ep->maxpacket;
 848		ep->creg = (void __iomem *) udc->udp_baseaddr + AT91_UDP_CSR(i);
 849		// initialiser une queue par endpoint
 850		INIT_LIST_HEAD(&ep->queue);
 851	}
 852}
 853
 854static void stop_activity(struct at91_udc *udc)
 855{
 856	struct usb_gadget_driver *driver = udc->driver;
 857	int i;
 858
 859	if (udc->gadget.speed == USB_SPEED_UNKNOWN)
 860		driver = NULL;
 861	udc->gadget.speed = USB_SPEED_UNKNOWN;
 862	udc->suspended = 0;
 863
 864	for (i = 0; i < NUM_ENDPOINTS; i++) {
 865		struct at91_ep *ep = &udc->ep[i];
 866		ep->stopped = 1;
 867		nuke(ep, -ESHUTDOWN);
 868	}
 869	if (driver) {
 870		spin_unlock(&udc->lock);
 871		driver->disconnect(&udc->gadget);
 872		spin_lock(&udc->lock);
 873	}
 874
 875	udc_reinit(udc);
 876}
 877
 878static void clk_on(struct at91_udc *udc)
 879{
 880	if (udc->clocked)
 881		return;
 882	udc->clocked = 1;
 883	clk_enable(udc->iclk);
 884	clk_enable(udc->fclk);
 
 
 
 
 
 885}
 886
 887static void clk_off(struct at91_udc *udc)
 888{
 889	if (!udc->clocked)
 890		return;
 891	udc->clocked = 0;
 892	udc->gadget.speed = USB_SPEED_UNKNOWN;
 893	clk_disable(udc->fclk);
 894	clk_disable(udc->iclk);
 
 
 895}
 896
 897/*
 898 * activate/deactivate link with host; minimize power usage for
 899 * inactive links by cutting clocks and transceiver power.
 900 */
 901static void pullup(struct at91_udc *udc, int is_on)
 902{
 903	int	active = !udc->board.pullup_active_low;
 904
 905	if (!udc->enabled || !udc->vbus)
 906		is_on = 0;
 907	DBG("%sactive\n", is_on ? "" : "in");
 908
 909	if (is_on) {
 910		clk_on(udc);
 911		at91_udp_write(udc, AT91_UDP_ICR, AT91_UDP_RXRSM);
 912		at91_udp_write(udc, AT91_UDP_TXVC, 0);
 913		if (cpu_is_at91rm9200())
 914			gpio_set_value(udc->board.pullup_pin, active);
 915		else if (cpu_is_at91sam9260() || cpu_is_at91sam9263() || cpu_is_at91sam9g20()) {
 916			u32	txvc = at91_udp_read(udc, AT91_UDP_TXVC);
 917
 918			txvc |= AT91_UDP_TXVC_PUON;
 919			at91_udp_write(udc, AT91_UDP_TXVC, txvc);
 920		} else if (cpu_is_at91sam9261() || cpu_is_at91sam9g10()) {
 921			u32	usbpucr;
 922
 923			usbpucr = at91_sys_read(AT91_MATRIX_USBPUCR);
 924			usbpucr |= AT91_MATRIX_USBPUCR_PUON;
 925			at91_sys_write(AT91_MATRIX_USBPUCR, usbpucr);
 926		}
 927	} else {
 928		stop_activity(udc);
 929		at91_udp_write(udc, AT91_UDP_IDR, AT91_UDP_RXRSM);
 930		at91_udp_write(udc, AT91_UDP_TXVC, AT91_UDP_TXVC_TXVDIS);
 931		if (cpu_is_at91rm9200())
 932			gpio_set_value(udc->board.pullup_pin, !active);
 933		else if (cpu_is_at91sam9260() || cpu_is_at91sam9263() || cpu_is_at91sam9g20()) {
 934			u32	txvc = at91_udp_read(udc, AT91_UDP_TXVC);
 935
 936			txvc &= ~AT91_UDP_TXVC_PUON;
 937			at91_udp_write(udc, AT91_UDP_TXVC, txvc);
 938		} else if (cpu_is_at91sam9261() || cpu_is_at91sam9g10()) {
 939			u32	usbpucr;
 940
 941			usbpucr = at91_sys_read(AT91_MATRIX_USBPUCR);
 942			usbpucr &= ~AT91_MATRIX_USBPUCR_PUON;
 943			at91_sys_write(AT91_MATRIX_USBPUCR, usbpucr);
 944		}
 945		clk_off(udc);
 946	}
 947}
 948
 949/* vbus is here!  turn everything on that's ready */
 950static int at91_vbus_session(struct usb_gadget *gadget, int is_active)
 951{
 952	struct at91_udc	*udc = to_udc(gadget);
 953	unsigned long	flags;
 954
 955	// VDBG("vbus %s\n", is_active ? "on" : "off");
 956	spin_lock_irqsave(&udc->lock, flags);
 957	udc->vbus = (is_active != 0);
 958	if (udc->driver)
 959		pullup(udc, is_active);
 960	else
 961		pullup(udc, 0);
 962	spin_unlock_irqrestore(&udc->lock, flags);
 963	return 0;
 964}
 965
 966static int at91_pullup(struct usb_gadget *gadget, int is_on)
 967{
 968	struct at91_udc	*udc = to_udc(gadget);
 969	unsigned long	flags;
 970
 971	spin_lock_irqsave(&udc->lock, flags);
 972	udc->enabled = is_on = !!is_on;
 973	pullup(udc, is_on);
 974	spin_unlock_irqrestore(&udc->lock, flags);
 975	return 0;
 976}
 977
 978static int at91_set_selfpowered(struct usb_gadget *gadget, int is_on)
 979{
 980	struct at91_udc	*udc = to_udc(gadget);
 981	unsigned long	flags;
 982
 983	spin_lock_irqsave(&udc->lock, flags);
 984	udc->selfpowered = (is_on != 0);
 985	spin_unlock_irqrestore(&udc->lock, flags);
 986	return 0;
 987}
 988
 989static int at91_start(struct usb_gadget_driver *driver,
 990		int (*bind)(struct usb_gadget *));
 991static int at91_stop(struct usb_gadget_driver *driver);
 992
 993static const struct usb_gadget_ops at91_udc_ops = {
 994	.get_frame		= at91_get_frame,
 995	.wakeup			= at91_wakeup,
 996	.set_selfpowered	= at91_set_selfpowered,
 997	.vbus_session		= at91_vbus_session,
 998	.pullup			= at91_pullup,
 999	.start			= at91_start,
1000	.stop			= at91_stop,
1001
1002	/*
1003	 * VBUS-powered devices may also also want to support bigger
1004	 * power budgets after an appropriate SET_CONFIGURATION.
1005	 */
1006	// .vbus_power		= at91_vbus_power,
1007};
1008
1009/*-------------------------------------------------------------------------*/
1010
1011static int handle_ep(struct at91_ep *ep)
1012{
1013	struct at91_request	*req;
1014	u32 __iomem		*creg = ep->creg;
1015	u32			csr = __raw_readl(creg);
1016
1017	if (!list_empty(&ep->queue))
1018		req = list_entry(ep->queue.next,
1019			struct at91_request, queue);
1020	else
1021		req = NULL;
1022
1023	if (ep->is_in) {
1024		if (csr & (AT91_UDP_STALLSENT | AT91_UDP_TXCOMP)) {
1025			csr |= CLR_FX;
1026			csr &= ~(SET_FX | AT91_UDP_STALLSENT | AT91_UDP_TXCOMP);
1027			__raw_writel(csr, creg);
1028		}
1029		if (req)
1030			return write_fifo(ep, req);
1031
1032	} else {
1033		if (csr & AT91_UDP_STALLSENT) {
1034			/* STALLSENT bit == ISOERR */
1035			if (ep->is_iso && req)
1036				req->req.status = -EILSEQ;
1037			csr |= CLR_FX;
1038			csr &= ~(SET_FX | AT91_UDP_STALLSENT);
1039			__raw_writel(csr, creg);
1040			csr = __raw_readl(creg);
1041		}
1042		if (req && (csr & RX_DATA_READY))
1043			return read_fifo(ep, req);
1044	}
1045	return 0;
1046}
1047
1048union setup {
1049	u8			raw[8];
1050	struct usb_ctrlrequest	r;
1051};
1052
1053static void handle_setup(struct at91_udc *udc, struct at91_ep *ep, u32 csr)
1054{
1055	u32 __iomem	*creg = ep->creg;
1056	u8 __iomem	*dreg = ep->creg + (AT91_UDP_FDR(0) - AT91_UDP_CSR(0));
1057	unsigned	rxcount, i = 0;
1058	u32		tmp;
1059	union setup	pkt;
1060	int		status = 0;
1061
1062	/* read and ack SETUP; hard-fail for bogus packets */
1063	rxcount = (csr & AT91_UDP_RXBYTECNT) >> 16;
1064	if (likely(rxcount == 8)) {
1065		while (rxcount--)
1066			pkt.raw[i++] = __raw_readb(dreg);
1067		if (pkt.r.bRequestType & USB_DIR_IN) {
1068			csr |= AT91_UDP_DIR;
1069			ep->is_in = 1;
1070		} else {
1071			csr &= ~AT91_UDP_DIR;
1072			ep->is_in = 0;
1073		}
1074	} else {
1075		// REVISIT this happens sometimes under load; why??
1076		ERR("SETUP len %d, csr %08x\n", rxcount, csr);
1077		status = -EINVAL;
1078	}
1079	csr |= CLR_FX;
1080	csr &= ~(SET_FX | AT91_UDP_RXSETUP);
1081	__raw_writel(csr, creg);
1082	udc->wait_for_addr_ack = 0;
1083	udc->wait_for_config_ack = 0;
1084	ep->stopped = 0;
1085	if (unlikely(status != 0))
1086		goto stall;
1087
1088#define w_index		le16_to_cpu(pkt.r.wIndex)
1089#define w_value		le16_to_cpu(pkt.r.wValue)
1090#define w_length	le16_to_cpu(pkt.r.wLength)
1091
1092	VDBG("SETUP %02x.%02x v%04x i%04x l%04x\n",
1093			pkt.r.bRequestType, pkt.r.bRequest,
1094			w_value, w_index, w_length);
1095
1096	/*
1097	 * A few standard requests get handled here, ones that touch
1098	 * hardware ... notably for device and endpoint features.
1099	 */
1100	udc->req_pending = 1;
1101	csr = __raw_readl(creg);
1102	csr |= CLR_FX;
1103	csr &= ~SET_FX;
1104	switch ((pkt.r.bRequestType << 8) | pkt.r.bRequest) {
1105
1106	case ((USB_TYPE_STANDARD|USB_RECIP_DEVICE) << 8)
1107			| USB_REQ_SET_ADDRESS:
1108		__raw_writel(csr | AT91_UDP_TXPKTRDY, creg);
1109		udc->addr = w_value;
1110		udc->wait_for_addr_ack = 1;
1111		udc->req_pending = 0;
1112		/* FADDR is set later, when we ack host STATUS */
1113		return;
1114
1115	case ((USB_TYPE_STANDARD|USB_RECIP_DEVICE) << 8)
1116			| USB_REQ_SET_CONFIGURATION:
1117		tmp = at91_udp_read(udc, AT91_UDP_GLB_STAT) & AT91_UDP_CONFG;
1118		if (pkt.r.wValue)
1119			udc->wait_for_config_ack = (tmp == 0);
1120		else
1121			udc->wait_for_config_ack = (tmp != 0);
1122		if (udc->wait_for_config_ack)
1123			VDBG("wait for config\n");
1124		/* CONFG is toggled later, if gadget driver succeeds */
1125		break;
1126
1127	/*
1128	 * Hosts may set or clear remote wakeup status, and
1129	 * devices may report they're VBUS powered.
1130	 */
1131	case ((USB_DIR_IN|USB_TYPE_STANDARD|USB_RECIP_DEVICE) << 8)
1132			| USB_REQ_GET_STATUS:
1133		tmp = (udc->selfpowered << USB_DEVICE_SELF_POWERED);
1134		if (at91_udp_read(udc, AT91_UDP_GLB_STAT) & AT91_UDP_ESR)
1135			tmp |= (1 << USB_DEVICE_REMOTE_WAKEUP);
1136		PACKET("get device status\n");
1137		__raw_writeb(tmp, dreg);
1138		__raw_writeb(0, dreg);
1139		goto write_in;
1140		/* then STATUS starts later, automatically */
1141	case ((USB_TYPE_STANDARD|USB_RECIP_DEVICE) << 8)
1142			| USB_REQ_SET_FEATURE:
1143		if (w_value != USB_DEVICE_REMOTE_WAKEUP)
1144			goto stall;
1145		tmp = at91_udp_read(udc, AT91_UDP_GLB_STAT);
1146		tmp |= AT91_UDP_ESR;
1147		at91_udp_write(udc, AT91_UDP_GLB_STAT, tmp);
1148		goto succeed;
1149	case ((USB_TYPE_STANDARD|USB_RECIP_DEVICE) << 8)
1150			| USB_REQ_CLEAR_FEATURE:
1151		if (w_value != USB_DEVICE_REMOTE_WAKEUP)
1152			goto stall;
1153		tmp = at91_udp_read(udc, AT91_UDP_GLB_STAT);
1154		tmp &= ~AT91_UDP_ESR;
1155		at91_udp_write(udc, AT91_UDP_GLB_STAT, tmp);
1156		goto succeed;
1157
1158	/*
1159	 * Interfaces have no feature settings; this is pretty useless.
1160	 * we won't even insist the interface exists...
1161	 */
1162	case ((USB_DIR_IN|USB_TYPE_STANDARD|USB_RECIP_INTERFACE) << 8)
1163			| USB_REQ_GET_STATUS:
1164		PACKET("get interface status\n");
1165		__raw_writeb(0, dreg);
1166		__raw_writeb(0, dreg);
1167		goto write_in;
1168		/* then STATUS starts later, automatically */
1169	case ((USB_TYPE_STANDARD|USB_RECIP_INTERFACE) << 8)
1170			| USB_REQ_SET_FEATURE:
1171	case ((USB_TYPE_STANDARD|USB_RECIP_INTERFACE) << 8)
1172			| USB_REQ_CLEAR_FEATURE:
1173		goto stall;
1174
1175	/*
1176	 * Hosts may clear bulk/intr endpoint halt after the gadget
1177	 * driver sets it (not widely used); or set it (for testing)
1178	 */
1179	case ((USB_DIR_IN|USB_TYPE_STANDARD|USB_RECIP_ENDPOINT) << 8)
1180			| USB_REQ_GET_STATUS:
1181		tmp = w_index & USB_ENDPOINT_NUMBER_MASK;
1182		ep = &udc->ep[tmp];
1183		if (tmp >= NUM_ENDPOINTS || (tmp && !ep->desc))
1184			goto stall;
1185
1186		if (tmp) {
1187			if ((w_index & USB_DIR_IN)) {
1188				if (!ep->is_in)
1189					goto stall;
1190			} else if (ep->is_in)
1191				goto stall;
1192		}
1193		PACKET("get %s status\n", ep->ep.name);
1194		if (__raw_readl(ep->creg) & AT91_UDP_FORCESTALL)
1195			tmp = (1 << USB_ENDPOINT_HALT);
1196		else
1197			tmp = 0;
1198		__raw_writeb(tmp, dreg);
1199		__raw_writeb(0, dreg);
1200		goto write_in;
1201		/* then STATUS starts later, automatically */
1202	case ((USB_TYPE_STANDARD|USB_RECIP_ENDPOINT) << 8)
1203			| USB_REQ_SET_FEATURE:
1204		tmp = w_index & USB_ENDPOINT_NUMBER_MASK;
1205		ep = &udc->ep[tmp];
1206		if (w_value != USB_ENDPOINT_HALT || tmp >= NUM_ENDPOINTS)
1207			goto stall;
1208		if (!ep->desc || ep->is_iso)
1209			goto stall;
1210		if ((w_index & USB_DIR_IN)) {
1211			if (!ep->is_in)
1212				goto stall;
1213		} else if (ep->is_in)
1214			goto stall;
1215
1216		tmp = __raw_readl(ep->creg);
1217		tmp &= ~SET_FX;
1218		tmp |= CLR_FX | AT91_UDP_FORCESTALL;
1219		__raw_writel(tmp, ep->creg);
1220		goto succeed;
1221	case ((USB_TYPE_STANDARD|USB_RECIP_ENDPOINT) << 8)
1222			| USB_REQ_CLEAR_FEATURE:
1223		tmp = w_index & USB_ENDPOINT_NUMBER_MASK;
1224		ep = &udc->ep[tmp];
1225		if (w_value != USB_ENDPOINT_HALT || tmp >= NUM_ENDPOINTS)
1226			goto stall;
1227		if (tmp == 0)
1228			goto succeed;
1229		if (!ep->desc || ep->is_iso)
1230			goto stall;
1231		if ((w_index & USB_DIR_IN)) {
1232			if (!ep->is_in)
1233				goto stall;
1234		} else if (ep->is_in)
1235			goto stall;
1236
1237		at91_udp_write(udc, AT91_UDP_RST_EP, ep->int_mask);
1238		at91_udp_write(udc, AT91_UDP_RST_EP, 0);
1239		tmp = __raw_readl(ep->creg);
1240		tmp |= CLR_FX;
1241		tmp &= ~(SET_FX | AT91_UDP_FORCESTALL);
1242		__raw_writel(tmp, ep->creg);
1243		if (!list_empty(&ep->queue))
1244			handle_ep(ep);
1245		goto succeed;
1246	}
1247
1248#undef w_value
1249#undef w_index
1250#undef w_length
1251
1252	/* pass request up to the gadget driver */
1253	if (udc->driver) {
1254		spin_unlock(&udc->lock);
1255		status = udc->driver->setup(&udc->gadget, &pkt.r);
1256		spin_lock(&udc->lock);
1257	}
1258	else
1259		status = -ENODEV;
1260	if (status < 0) {
1261stall:
1262		VDBG("req %02x.%02x protocol STALL; stat %d\n",
1263				pkt.r.bRequestType, pkt.r.bRequest, status);
1264		csr |= AT91_UDP_FORCESTALL;
1265		__raw_writel(csr, creg);
1266		udc->req_pending = 0;
1267	}
1268	return;
1269
1270succeed:
1271	/* immediate successful (IN) STATUS after zero length DATA */
1272	PACKET("ep0 in/status\n");
1273write_in:
1274	csr |= AT91_UDP_TXPKTRDY;
1275	__raw_writel(csr, creg);
1276	udc->req_pending = 0;
1277}
1278
1279static void handle_ep0(struct at91_udc *udc)
1280{
1281	struct at91_ep		*ep0 = &udc->ep[0];
1282	u32 __iomem		*creg = ep0->creg;
1283	u32			csr = __raw_readl(creg);
1284	struct at91_request	*req;
1285
1286	if (unlikely(csr & AT91_UDP_STALLSENT)) {
1287		nuke(ep0, -EPROTO);
1288		udc->req_pending = 0;
1289		csr |= CLR_FX;
1290		csr &= ~(SET_FX | AT91_UDP_STALLSENT | AT91_UDP_FORCESTALL);
1291		__raw_writel(csr, creg);
1292		VDBG("ep0 stalled\n");
1293		csr = __raw_readl(creg);
1294	}
1295	if (csr & AT91_UDP_RXSETUP) {
1296		nuke(ep0, 0);
1297		udc->req_pending = 0;
1298		handle_setup(udc, ep0, csr);
1299		return;
1300	}
1301
1302	if (list_empty(&ep0->queue))
1303		req = NULL;
1304	else
1305		req = list_entry(ep0->queue.next, struct at91_request, queue);
1306
1307	/* host ACKed an IN packet that we sent */
1308	if (csr & AT91_UDP_TXCOMP) {
1309		csr |= CLR_FX;
1310		csr &= ~(SET_FX | AT91_UDP_TXCOMP);
1311
1312		/* write more IN DATA? */
1313		if (req && ep0->is_in) {
1314			if (handle_ep(ep0))
1315				udc->req_pending = 0;
1316
1317		/*
1318		 * Ack after:
1319		 *  - last IN DATA packet (including GET_STATUS)
1320		 *  - IN/STATUS for OUT DATA
1321		 *  - IN/STATUS for any zero-length DATA stage
1322		 * except for the IN DATA case, the host should send
1323		 * an OUT status later, which we'll ack.
1324		 */
1325		} else {
1326			udc->req_pending = 0;
1327			__raw_writel(csr, creg);
1328
1329			/*
1330			 * SET_ADDRESS takes effect only after the STATUS
1331			 * (to the original address) gets acked.
1332			 */
1333			if (udc->wait_for_addr_ack) {
1334				u32	tmp;
1335
1336				at91_udp_write(udc, AT91_UDP_FADDR,
1337						AT91_UDP_FEN | udc->addr);
1338				tmp = at91_udp_read(udc, AT91_UDP_GLB_STAT);
1339				tmp &= ~AT91_UDP_FADDEN;
1340				if (udc->addr)
1341					tmp |= AT91_UDP_FADDEN;
1342				at91_udp_write(udc, AT91_UDP_GLB_STAT, tmp);
1343
1344				udc->wait_for_addr_ack = 0;
1345				VDBG("address %d\n", udc->addr);
1346			}
1347		}
1348	}
1349
1350	/* OUT packet arrived ... */
1351	else if (csr & AT91_UDP_RX_DATA_BK0) {
1352		csr |= CLR_FX;
1353		csr &= ~(SET_FX | AT91_UDP_RX_DATA_BK0);
1354
1355		/* OUT DATA stage */
1356		if (!ep0->is_in) {
1357			if (req) {
1358				if (handle_ep(ep0)) {
1359					/* send IN/STATUS */
1360					PACKET("ep0 in/status\n");
1361					csr = __raw_readl(creg);
1362					csr &= ~SET_FX;
1363					csr |= CLR_FX | AT91_UDP_TXPKTRDY;
1364					__raw_writel(csr, creg);
1365					udc->req_pending = 0;
1366				}
1367			} else if (udc->req_pending) {
1368				/*
1369				 * AT91 hardware has a hard time with this
1370				 * "deferred response" mode for control-OUT
1371				 * transfers.  (For control-IN it's fine.)
1372				 *
1373				 * The normal solution leaves OUT data in the
1374				 * fifo until the gadget driver is ready.
1375				 * We couldn't do that here without disabling
1376				 * the IRQ that tells about SETUP packets,
1377				 * e.g. when the host gets impatient...
1378				 *
1379				 * Working around it by copying into a buffer
1380				 * would almost be a non-deferred response,
1381				 * except that it wouldn't permit reliable
1382				 * stalling of the request.  Instead, demand
1383				 * that gadget drivers not use this mode.
1384				 */
1385				DBG("no control-OUT deferred responses!\n");
1386				__raw_writel(csr | AT91_UDP_FORCESTALL, creg);
1387				udc->req_pending = 0;
1388			}
1389
1390		/* STATUS stage for control-IN; ack.  */
1391		} else {
1392			PACKET("ep0 out/status ACK\n");
1393			__raw_writel(csr, creg);
1394
1395			/* "early" status stage */
1396			if (req)
1397				done(ep0, req, 0);
1398		}
1399	}
1400}
1401
1402static irqreturn_t at91_udc_irq (int irq, void *_udc)
1403{
1404	struct at91_udc		*udc = _udc;
1405	u32			rescans = 5;
1406	int			disable_clock = 0;
1407	unsigned long		flags;
1408
1409	spin_lock_irqsave(&udc->lock, flags);
1410
1411	if (!udc->clocked) {
1412		clk_on(udc);
1413		disable_clock = 1;
1414	}
1415
1416	while (rescans--) {
1417		u32 status;
1418
1419		status = at91_udp_read(udc, AT91_UDP_ISR)
1420			& at91_udp_read(udc, AT91_UDP_IMR);
1421		if (!status)
1422			break;
1423
1424		/* USB reset irq:  not maskable */
1425		if (status & AT91_UDP_ENDBUSRES) {
1426			at91_udp_write(udc, AT91_UDP_IDR, ~MINIMUS_INTERRUPTUS);
1427			at91_udp_write(udc, AT91_UDP_IER, MINIMUS_INTERRUPTUS);
1428			/* Atmel code clears this irq twice */
1429			at91_udp_write(udc, AT91_UDP_ICR, AT91_UDP_ENDBUSRES);
1430			at91_udp_write(udc, AT91_UDP_ICR, AT91_UDP_ENDBUSRES);
1431			VDBG("end bus reset\n");
1432			udc->addr = 0;
1433			stop_activity(udc);
1434
1435			/* enable ep0 */
1436			at91_udp_write(udc, AT91_UDP_CSR(0),
1437					AT91_UDP_EPEDS | AT91_UDP_EPTYPE_CTRL);
1438			udc->gadget.speed = USB_SPEED_FULL;
1439			udc->suspended = 0;
1440			at91_udp_write(udc, AT91_UDP_IER, AT91_UDP_EP(0));
1441
1442			/*
1443			 * NOTE:  this driver keeps clocks off unless the
1444			 * USB host is present.  That saves power, but for
1445			 * boards that don't support VBUS detection, both
1446			 * clocks need to be active most of the time.
1447			 */
1448
1449		/* host initiated suspend (3+ms bus idle) */
1450		} else if (status & AT91_UDP_RXSUSP) {
1451			at91_udp_write(udc, AT91_UDP_IDR, AT91_UDP_RXSUSP);
1452			at91_udp_write(udc, AT91_UDP_IER, AT91_UDP_RXRSM);
1453			at91_udp_write(udc, AT91_UDP_ICR, AT91_UDP_RXSUSP);
1454			// VDBG("bus suspend\n");
1455			if (udc->suspended)
1456				continue;
1457			udc->suspended = 1;
1458
1459			/*
1460			 * NOTE:  when suspending a VBUS-powered device, the
1461			 * gadget driver should switch into slow clock mode
1462			 * and then into standby to avoid drawing more than
1463			 * 500uA power (2500uA for some high-power configs).
1464			 */
1465			if (udc->driver && udc->driver->suspend) {
1466				spin_unlock(&udc->lock);
1467				udc->driver->suspend(&udc->gadget);
1468				spin_lock(&udc->lock);
1469			}
1470
1471		/* host initiated resume */
1472		} else if (status & AT91_UDP_RXRSM) {
1473			at91_udp_write(udc, AT91_UDP_IDR, AT91_UDP_RXRSM);
1474			at91_udp_write(udc, AT91_UDP_IER, AT91_UDP_RXSUSP);
1475			at91_udp_write(udc, AT91_UDP_ICR, AT91_UDP_RXRSM);
1476			// VDBG("bus resume\n");
1477			if (!udc->suspended)
1478				continue;
1479			udc->suspended = 0;
1480
1481			/*
1482			 * NOTE:  for a VBUS-powered device, the gadget driver
1483			 * would normally want to switch out of slow clock
1484			 * mode into normal mode.
1485			 */
1486			if (udc->driver && udc->driver->resume) {
1487				spin_unlock(&udc->lock);
1488				udc->driver->resume(&udc->gadget);
1489				spin_lock(&udc->lock);
1490			}
1491
1492		/* endpoint IRQs are cleared by handling them */
1493		} else {
1494			int		i;
1495			unsigned	mask = 1;
1496			struct at91_ep	*ep = &udc->ep[1];
1497
1498			if (status & mask)
1499				handle_ep0(udc);
1500			for (i = 1; i < NUM_ENDPOINTS; i++) {
1501				mask <<= 1;
1502				if (status & mask)
1503					handle_ep(ep);
1504				ep++;
1505			}
1506		}
1507	}
1508
1509	if (disable_clock)
1510		clk_off(udc);
1511
1512	spin_unlock_irqrestore(&udc->lock, flags);
1513
1514	return IRQ_HANDLED;
1515}
1516
1517/*-------------------------------------------------------------------------*/
1518
1519static void nop_release(struct device *dev)
1520{
1521	/* nothing to free */
1522}
1523
1524static struct at91_udc controller = {
1525	.gadget = {
1526		.ops	= &at91_udc_ops,
1527		.ep0	= &controller.ep[0].ep,
1528		.name	= driver_name,
1529		.dev	= {
1530			.init_name = "gadget",
1531			.release = nop_release,
1532		}
1533	},
1534	.ep[0] = {
1535		.ep = {
1536			.name	= ep0name,
1537			.ops	= &at91_ep_ops,
1538		},
1539		.udc		= &controller,
1540		.maxpacket	= 8,
1541		.int_mask	= 1 << 0,
1542	},
1543	.ep[1] = {
1544		.ep = {
1545			.name	= "ep1",
1546			.ops	= &at91_ep_ops,
1547		},
1548		.udc		= &controller,
1549		.is_pingpong	= 1,
1550		.maxpacket	= 64,
1551		.int_mask	= 1 << 1,
1552	},
1553	.ep[2] = {
1554		.ep = {
1555			.name	= "ep2",
1556			.ops	= &at91_ep_ops,
1557		},
1558		.udc		= &controller,
1559		.is_pingpong	= 1,
1560		.maxpacket	= 64,
1561		.int_mask	= 1 << 2,
1562	},
1563	.ep[3] = {
1564		.ep = {
1565			/* could actually do bulk too */
1566			.name	= "ep3-int",
1567			.ops	= &at91_ep_ops,
1568		},
1569		.udc		= &controller,
1570		.maxpacket	= 8,
1571		.int_mask	= 1 << 3,
1572	},
1573	.ep[4] = {
1574		.ep = {
1575			.name	= "ep4",
1576			.ops	= &at91_ep_ops,
1577		},
1578		.udc		= &controller,
1579		.is_pingpong	= 1,
1580		.maxpacket	= 256,
1581		.int_mask	= 1 << 4,
1582	},
1583	.ep[5] = {
1584		.ep = {
1585			.name	= "ep5",
1586			.ops	= &at91_ep_ops,
1587		},
1588		.udc		= &controller,
1589		.is_pingpong	= 1,
1590		.maxpacket	= 256,
1591		.int_mask	= 1 << 5,
1592	},
1593	/* ep6 and ep7 are also reserved (custom silicon might use them) */
1594};
1595
1596static void at91_vbus_update(struct at91_udc *udc, unsigned value)
1597{
1598	value ^= udc->board.vbus_active_low;
1599	if (value != udc->vbus)
1600		at91_vbus_session(&udc->gadget, value);
1601}
1602
1603static irqreturn_t at91_vbus_irq(int irq, void *_udc)
1604{
1605	struct at91_udc	*udc = _udc;
1606
1607	/* vbus needs at least brief debouncing */
1608	udelay(10);
1609	at91_vbus_update(udc, gpio_get_value(udc->board.vbus_pin));
1610
1611	return IRQ_HANDLED;
1612}
1613
1614static void at91_vbus_timer_work(struct work_struct *work)
1615{
1616	struct at91_udc *udc = container_of(work, struct at91_udc,
1617					    vbus_timer_work);
1618
1619	at91_vbus_update(udc, gpio_get_value_cansleep(udc->board.vbus_pin));
1620
1621	if (!timer_pending(&udc->vbus_timer))
1622		mod_timer(&udc->vbus_timer, jiffies + VBUS_POLL_TIMEOUT);
1623}
1624
1625static void at91_vbus_timer(unsigned long data)
1626{
1627	struct at91_udc *udc = (struct at91_udc *)data;
1628
1629	/*
1630	 * If we are polling vbus it is likely that the gpio is on an
1631	 * bus such as i2c or spi which may sleep, so schedule some work
1632	 * to read the vbus gpio
1633	 */
1634	if (!work_pending(&udc->vbus_timer_work))
1635		schedule_work(&udc->vbus_timer_work);
1636}
1637
1638static int at91_start(struct usb_gadget_driver *driver,
1639		int (*bind)(struct usb_gadget *))
1640{
1641	struct at91_udc	*udc = &controller;
1642	int		retval;
1643	unsigned long	flags;
1644
1645	if (!driver
1646			|| driver->speed < USB_SPEED_FULL
1647			|| !bind
1648			|| !driver->setup) {
1649		DBG("bad parameter.\n");
1650		return -EINVAL;
1651	}
1652
1653	if (udc->driver) {
1654		DBG("UDC already has a gadget driver\n");
1655		return -EBUSY;
1656	}
1657
 
1658	udc->driver = driver;
1659	udc->gadget.dev.driver = &driver->driver;
1660	dev_set_drvdata(&udc->gadget.dev, &driver->driver);
1661	udc->enabled = 1;
1662	udc->selfpowered = 1;
1663
1664	retval = bind(&udc->gadget);
1665	if (retval) {
1666		DBG("bind() returned %d\n", retval);
1667		udc->driver = NULL;
1668		udc->gadget.dev.driver = NULL;
1669		dev_set_drvdata(&udc->gadget.dev, NULL);
1670		udc->enabled = 0;
1671		udc->selfpowered = 0;
1672		return retval;
1673	}
1674
1675	spin_lock_irqsave(&udc->lock, flags);
1676	pullup(udc, 1);
1677	spin_unlock_irqrestore(&udc->lock, flags);
1678
1679	DBG("bound to %s\n", driver->driver.name);
1680	return 0;
1681}
1682
1683static int at91_stop(struct usb_gadget_driver *driver)
 
1684{
1685	struct at91_udc *udc = &controller;
1686	unsigned long	flags;
1687
1688	if (!driver || driver != udc->driver || !driver->unbind)
1689		return -EINVAL;
1690
1691	spin_lock_irqsave(&udc->lock, flags);
1692	udc->enabled = 0;
1693	at91_udp_write(udc, AT91_UDP_IDR, ~0);
1694	pullup(udc, 0);
1695	spin_unlock_irqrestore(&udc->lock, flags);
1696
1697	driver->unbind(&udc->gadget);
1698	udc->gadget.dev.driver = NULL;
1699	dev_set_drvdata(&udc->gadget.dev, NULL);
1700	udc->driver = NULL;
1701
1702	DBG("unbound from %s\n", driver->driver.name);
1703	return 0;
1704}
1705
1706/*-------------------------------------------------------------------------*/
1707
1708static void at91udc_shutdown(struct platform_device *dev)
1709{
1710	struct at91_udc *udc = platform_get_drvdata(dev);
1711	unsigned long	flags;
1712
1713	/* force disconnect on reboot */
1714	spin_lock_irqsave(&udc->lock, flags);
1715	pullup(platform_get_drvdata(dev), 0);
1716	spin_unlock_irqrestore(&udc->lock, flags);
1717}
1718
1719static int __init at91udc_probe(struct platform_device *pdev)
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1720{
1721	struct device	*dev = &pdev->dev;
1722	struct at91_udc	*udc;
1723	int		retval;
1724	struct resource	*res;
1725
1726	if (!dev->platform_data) {
1727		/* small (so we copy it) but critical! */
1728		DBG("missing platform_data\n");
1729		return -ENODEV;
1730	}
1731
1732	if (pdev->num_resources != 2) {
1733		DBG("invalid num_resources\n");
1734		return -ENODEV;
1735	}
1736	if ((pdev->resource[0].flags != IORESOURCE_MEM)
1737			|| (pdev->resource[1].flags != IORESOURCE_IRQ)) {
1738		DBG("invalid resource type\n");
1739		return -ENODEV;
1740	}
1741
1742	res = platform_get_resource(pdev, IORESOURCE_MEM, 0);
1743	if (!res)
1744		return -ENXIO;
1745
1746	if (!request_mem_region(res->start, resource_size(res), driver_name)) {
1747		DBG("someone's using UDC memory\n");
1748		return -EBUSY;
1749	}
1750
1751	/* init software state */
1752	udc = &controller;
1753	udc->gadget.dev.parent = dev;
1754	udc->board = *(struct at91_udc_data *) dev->platform_data;
 
 
 
 
1755	udc->pdev = pdev;
1756	udc->enabled = 0;
1757	spin_lock_init(&udc->lock);
1758
1759	/* rm9200 needs manual D+ pullup; off by default */
1760	if (cpu_is_at91rm9200()) {
1761		if (udc->board.pullup_pin <= 0) {
1762			DBG("no D+ pullup?\n");
1763			retval = -ENODEV;
1764			goto fail0;
1765		}
1766		retval = gpio_request(udc->board.pullup_pin, "udc_pullup");
1767		if (retval) {
1768			DBG("D+ pullup is busy\n");
1769			goto fail0;
1770		}
1771		gpio_direction_output(udc->board.pullup_pin,
1772				udc->board.pullup_active_low);
1773	}
1774
1775	/* newer chips have more FIFO memory than rm9200 */
1776	if (cpu_is_at91sam9260() || cpu_is_at91sam9g20()) {
1777		udc->ep[0].maxpacket = 64;
1778		udc->ep[3].maxpacket = 64;
1779		udc->ep[4].maxpacket = 512;
1780		udc->ep[5].maxpacket = 512;
1781	} else if (cpu_is_at91sam9261() || cpu_is_at91sam9g10()) {
1782		udc->ep[3].maxpacket = 64;
1783	} else if (cpu_is_at91sam9263()) {
1784		udc->ep[0].maxpacket = 64;
1785		udc->ep[3].maxpacket = 64;
1786	}
1787
1788	udc->udp_baseaddr = ioremap(res->start, resource_size(res));
1789	if (!udc->udp_baseaddr) {
1790		retval = -ENOMEM;
1791		goto fail0a;
1792	}
1793
1794	udc_reinit(udc);
1795
1796	/* get interface and function clocks */
1797	udc->iclk = clk_get(dev, "udc_clk");
1798	udc->fclk = clk_get(dev, "udpck");
1799	if (IS_ERR(udc->iclk) || IS_ERR(udc->fclk)) {
 
 
 
1800		DBG("clocks missing\n");
1801		retval = -ENODEV;
1802		/* NOTE: we "know" here that refcounts on these are NOPs */
1803		goto fail0b;
1804	}
1805
1806	retval = device_register(&udc->gadget.dev);
1807	if (retval < 0) {
1808		put_device(&udc->gadget.dev);
1809		goto fail0b;
1810	}
1811
1812	/* don't do anything until we have both gadget driver and VBUS */
1813	clk_enable(udc->iclk);
 
 
1814	at91_udp_write(udc, AT91_UDP_TXVC, AT91_UDP_TXVC_TXVDIS);
1815	at91_udp_write(udc, AT91_UDP_IDR, 0xffffffff);
1816	/* Clear all pending interrupts - UDP may be used by bootloader. */
1817	at91_udp_write(udc, AT91_UDP_ICR, 0xffffffff);
1818	clk_disable(udc->iclk);
1819
1820	/* request UDC and maybe VBUS irqs */
1821	udc->udp_irq = platform_get_irq(pdev, 0);
1822	retval = request_irq(udc->udp_irq, at91_udc_irq,
1823			IRQF_DISABLED, driver_name, udc);
1824	if (retval < 0) {
1825		DBG("request irq %d failed\n", udc->udp_irq);
1826		goto fail1;
1827	}
1828	if (udc->board.vbus_pin > 0) {
1829		retval = gpio_request(udc->board.vbus_pin, "udc_vbus");
1830		if (retval < 0) {
1831			DBG("request vbus pin failed\n");
1832			goto fail2;
1833		}
1834		gpio_direction_input(udc->board.vbus_pin);
1835
1836		/*
1837		 * Get the initial state of VBUS - we cannot expect
1838		 * a pending interrupt.
1839		 */
1840		udc->vbus = gpio_get_value_cansleep(udc->board.vbus_pin) ^
1841			udc->board.vbus_active_low;
1842
1843		if (udc->board.vbus_polled) {
1844			INIT_WORK(&udc->vbus_timer_work, at91_vbus_timer_work);
1845			setup_timer(&udc->vbus_timer, at91_vbus_timer,
1846				    (unsigned long)udc);
1847			mod_timer(&udc->vbus_timer,
1848				  jiffies + VBUS_POLL_TIMEOUT);
1849		} else {
1850			if (request_irq(udc->board.vbus_pin, at91_vbus_irq,
1851					IRQF_DISABLED, driver_name, udc)) {
1852				DBG("request vbus irq %d failed\n",
1853				    udc->board.vbus_pin);
1854				retval = -EBUSY;
1855				goto fail3;
1856			}
1857		}
1858	} else {
1859		DBG("no VBUS detection, assuming always-on\n");
1860		udc->vbus = 1;
1861	}
1862	retval = usb_add_gadget_udc(dev, &udc->gadget);
1863	if (retval)
1864		goto fail4;
1865	dev_set_drvdata(dev, udc);
1866	device_init_wakeup(dev, 1);
1867	create_debug_file(udc);
1868
1869	INFO("%s version %s\n", driver_name, DRIVER_VERSION);
1870	return 0;
1871fail4:
1872	if (udc->board.vbus_pin > 0 && !udc->board.vbus_polled)
1873		free_irq(udc->board.vbus_pin, udc);
1874fail3:
1875	if (udc->board.vbus_pin > 0)
1876		gpio_free(udc->board.vbus_pin);
1877fail2:
1878	free_irq(udc->udp_irq, udc);
1879fail1:
1880	device_unregister(&udc->gadget.dev);
1881fail0b:
 
 
 
 
1882	iounmap(udc->udp_baseaddr);
1883fail0a:
1884	if (cpu_is_at91rm9200())
1885		gpio_free(udc->board.pullup_pin);
1886fail0:
1887	release_mem_region(res->start, resource_size(res));
1888	DBG("%s probe failed, %d\n", driver_name, retval);
1889	return retval;
1890}
1891
1892static int __exit at91udc_remove(struct platform_device *pdev)
1893{
1894	struct at91_udc *udc = platform_get_drvdata(pdev);
1895	struct resource *res;
1896	unsigned long	flags;
1897
1898	DBG("remove\n");
1899
1900	usb_del_gadget_udc(&udc->gadget);
1901	if (udc->driver)
1902		return -EBUSY;
1903
1904	spin_lock_irqsave(&udc->lock, flags);
1905	pullup(udc, 0);
1906	spin_unlock_irqrestore(&udc->lock, flags);
1907
1908	device_init_wakeup(&pdev->dev, 0);
1909	remove_debug_file(udc);
1910	if (udc->board.vbus_pin > 0) {
1911		free_irq(udc->board.vbus_pin, udc);
1912		gpio_free(udc->board.vbus_pin);
1913	}
1914	free_irq(udc->udp_irq, udc);
1915	device_unregister(&udc->gadget.dev);
1916
1917	iounmap(udc->udp_baseaddr);
1918
1919	if (cpu_is_at91rm9200())
1920		gpio_free(udc->board.pullup_pin);
1921
1922	res = platform_get_resource(pdev, IORESOURCE_MEM, 0);
1923	release_mem_region(res->start, resource_size(res));
1924
1925	clk_put(udc->iclk);
1926	clk_put(udc->fclk);
 
 
1927
1928	return 0;
1929}
1930
1931#ifdef CONFIG_PM
1932static int at91udc_suspend(struct platform_device *pdev, pm_message_t mesg)
1933{
1934	struct at91_udc *udc = platform_get_drvdata(pdev);
1935	int		wake = udc->driver && device_may_wakeup(&pdev->dev);
1936	unsigned long	flags;
1937
1938	/* Unless we can act normally to the host (letting it wake us up
1939	 * whenever it has work for us) force disconnect.  Wakeup requires
1940	 * PLLB for USB events (signaling for reset, wakeup, or incoming
1941	 * tokens) and VBUS irqs (on systems which support them).
1942	 */
1943	if ((!udc->suspended && udc->addr)
1944			|| !wake
1945			|| at91_suspend_entering_slow_clock()) {
1946		spin_lock_irqsave(&udc->lock, flags);
1947		pullup(udc, 0);
1948		wake = 0;
1949		spin_unlock_irqrestore(&udc->lock, flags);
1950	} else
1951		enable_irq_wake(udc->udp_irq);
1952
1953	udc->active_suspend = wake;
1954	if (udc->board.vbus_pin > 0 && !udc->board.vbus_polled && wake)
1955		enable_irq_wake(udc->board.vbus_pin);
1956	return 0;
1957}
1958
1959static int at91udc_resume(struct platform_device *pdev)
1960{
1961	struct at91_udc *udc = platform_get_drvdata(pdev);
1962	unsigned long	flags;
1963
1964	if (udc->board.vbus_pin > 0 && !udc->board.vbus_polled &&
1965	    udc->active_suspend)
1966		disable_irq_wake(udc->board.vbus_pin);
1967
1968	/* maybe reconnect to host; if so, clocks on */
1969	if (udc->active_suspend)
1970		disable_irq_wake(udc->udp_irq);
1971	else {
1972		spin_lock_irqsave(&udc->lock, flags);
1973		pullup(udc, 1);
1974		spin_unlock_irqrestore(&udc->lock, flags);
1975	}
1976	return 0;
1977}
1978#else
1979#define	at91udc_suspend	NULL
1980#define	at91udc_resume	NULL
1981#endif
1982
 
 
 
 
 
 
 
 
 
1983static struct platform_driver at91_udc_driver = {
1984	.remove		= __exit_p(at91udc_remove),
1985	.shutdown	= at91udc_shutdown,
1986	.suspend	= at91udc_suspend,
1987	.resume		= at91udc_resume,
1988	.driver		= {
1989		.name	= (char *) driver_name,
1990		.owner	= THIS_MODULE,
 
1991	},
1992};
1993
1994static int __init udc_init_module(void)
1995{
1996	return platform_driver_probe(&at91_udc_driver, at91udc_probe);
1997}
1998module_init(udc_init_module);
1999
2000static void __exit udc_exit_module(void)
2001{
2002	platform_driver_unregister(&at91_udc_driver);
2003}
2004module_exit(udc_exit_module);
2005
2006MODULE_DESCRIPTION("AT91 udc driver");
2007MODULE_AUTHOR("Thomas Rathbone, David Brownell");
2008MODULE_LICENSE("GPL");
2009MODULE_ALIAS("platform:at91_udc");