Loading...
Note: File does not exist in v3.1.
1// SPDX-License-Identifier: GPL-2.0
2/*
3 * Driver for the NXP ISP1761 device controller
4 *
5 * Copyright 2014 Ideas on Board Oy
6 *
7 * Contacts:
8 * Laurent Pinchart <laurent.pinchart@ideasonboard.com>
9 */
10
11#include <linux/interrupt.h>
12#include <linux/io.h>
13#include <linux/kernel.h>
14#include <linux/list.h>
15#include <linux/module.h>
16#include <linux/slab.h>
17#include <linux/timer.h>
18#include <linux/usb.h>
19
20#include "isp1760-core.h"
21#include "isp1760-regs.h"
22#include "isp1760-udc.h"
23
24#define ISP1760_VBUS_POLL_INTERVAL msecs_to_jiffies(500)
25
26struct isp1760_request {
27 struct usb_request req;
28 struct list_head queue;
29 struct isp1760_ep *ep;
30 unsigned int packet_size;
31};
32
33static inline struct isp1760_udc *gadget_to_udc(struct usb_gadget *gadget)
34{
35 return container_of(gadget, struct isp1760_udc, gadget);
36}
37
38static inline struct isp1760_ep *ep_to_udc_ep(struct usb_ep *ep)
39{
40 return container_of(ep, struct isp1760_ep, ep);
41}
42
43static inline struct isp1760_request *req_to_udc_req(struct usb_request *req)
44{
45 return container_of(req, struct isp1760_request, req);
46}
47
48static inline u32 isp1760_udc_read(struct isp1760_udc *udc, u16 reg)
49{
50 return isp1760_read32(udc->regs, reg);
51}
52
53static inline void isp1760_udc_write(struct isp1760_udc *udc, u16 reg, u32 val)
54{
55 isp1760_write32(udc->regs, reg, val);
56}
57
58/* -----------------------------------------------------------------------------
59 * Endpoint Management
60 */
61
62static struct isp1760_ep *isp1760_udc_find_ep(struct isp1760_udc *udc,
63 u16 index)
64{
65 unsigned int i;
66
67 if (index == 0)
68 return &udc->ep[0];
69
70 for (i = 1; i < ARRAY_SIZE(udc->ep); ++i) {
71 if (udc->ep[i].addr == index)
72 return udc->ep[i].desc ? &udc->ep[i] : NULL;
73 }
74
75 return NULL;
76}
77
78static void __isp1760_udc_select_ep(struct isp1760_ep *ep, int dir)
79{
80 isp1760_udc_write(ep->udc, DC_EPINDEX,
81 DC_ENDPIDX(ep->addr & USB_ENDPOINT_NUMBER_MASK) |
82 (dir == USB_DIR_IN ? DC_EPDIR : 0));
83}
84
85/**
86 * isp1760_udc_select_ep - Select an endpoint for register access
87 * @ep: The endpoint
88 *
89 * The ISP1761 endpoint registers are banked. This function selects the target
90 * endpoint for banked register access. The selection remains valid until the
91 * next call to this function, the next direct access to the EPINDEX register
92 * or the next reset, whichever comes first.
93 *
94 * Called with the UDC spinlock held.
95 */
96static void isp1760_udc_select_ep(struct isp1760_ep *ep)
97{
98 __isp1760_udc_select_ep(ep, ep->addr & USB_ENDPOINT_DIR_MASK);
99}
100
101/* Called with the UDC spinlock held. */
102static void isp1760_udc_ctrl_send_status(struct isp1760_ep *ep, int dir)
103{
104 struct isp1760_udc *udc = ep->udc;
105
106 /*
107 * Proceed to the status stage. The status stage data packet flows in
108 * the direction opposite to the data stage data packets, we thus need
109 * to select the OUT/IN endpoint for IN/OUT transfers.
110 */
111 isp1760_udc_write(udc, DC_EPINDEX, DC_ENDPIDX(0) |
112 (dir == USB_DIR_IN ? 0 : DC_EPDIR));
113 isp1760_udc_write(udc, DC_CTRLFUNC, DC_STATUS);
114
115 /*
116 * The hardware will terminate the request automatically and go back to
117 * the setup stage without notifying us.
118 */
119 udc->ep0_state = ISP1760_CTRL_SETUP;
120}
121
122/* Called without the UDC spinlock held. */
123static void isp1760_udc_request_complete(struct isp1760_ep *ep,
124 struct isp1760_request *req,
125 int status)
126{
127 struct isp1760_udc *udc = ep->udc;
128 unsigned long flags;
129
130 dev_dbg(ep->udc->isp->dev, "completing request %p with status %d\n",
131 req, status);
132
133 req->ep = NULL;
134 req->req.status = status;
135 req->req.complete(&ep->ep, &req->req);
136
137 spin_lock_irqsave(&udc->lock, flags);
138
139 /*
140 * When completing control OUT requests, move to the status stage after
141 * calling the request complete callback. This gives the gadget an
142 * opportunity to stall the control transfer if needed.
143 */
144 if (status == 0 && ep->addr == 0 && udc->ep0_dir == USB_DIR_OUT)
145 isp1760_udc_ctrl_send_status(ep, USB_DIR_OUT);
146
147 spin_unlock_irqrestore(&udc->lock, flags);
148}
149
150static void isp1760_udc_ctrl_send_stall(struct isp1760_ep *ep)
151{
152 struct isp1760_udc *udc = ep->udc;
153 unsigned long flags;
154
155 dev_dbg(ep->udc->isp->dev, "%s(ep%02x)\n", __func__, ep->addr);
156
157 spin_lock_irqsave(&udc->lock, flags);
158
159 /* Stall both the IN and OUT endpoints. */
160 __isp1760_udc_select_ep(ep, USB_DIR_OUT);
161 isp1760_udc_write(udc, DC_CTRLFUNC, DC_STALL);
162 __isp1760_udc_select_ep(ep, USB_DIR_IN);
163 isp1760_udc_write(udc, DC_CTRLFUNC, DC_STALL);
164
165 /* A protocol stall completes the control transaction. */
166 udc->ep0_state = ISP1760_CTRL_SETUP;
167
168 spin_unlock_irqrestore(&udc->lock, flags);
169}
170
171/* -----------------------------------------------------------------------------
172 * Data Endpoints
173 */
174
175/* Called with the UDC spinlock held. */
176static bool isp1760_udc_receive(struct isp1760_ep *ep,
177 struct isp1760_request *req)
178{
179 struct isp1760_udc *udc = ep->udc;
180 unsigned int len;
181 u32 *buf;
182 int i;
183
184 isp1760_udc_select_ep(ep);
185 len = isp1760_udc_read(udc, DC_BUFLEN) & DC_DATACOUNT_MASK;
186
187 dev_dbg(udc->isp->dev, "%s: received %u bytes (%u/%u done)\n",
188 __func__, len, req->req.actual, req->req.length);
189
190 len = min(len, req->req.length - req->req.actual);
191
192 if (!len) {
193 /*
194 * There's no data to be read from the FIFO, acknowledge the RX
195 * interrupt by clearing the buffer.
196 *
197 * TODO: What if another packet arrives in the meantime ? The
198 * datasheet doesn't clearly document how this should be
199 * handled.
200 */
201 isp1760_udc_write(udc, DC_CTRLFUNC, DC_CLBUF);
202 return false;
203 }
204
205 buf = req->req.buf + req->req.actual;
206
207 /*
208 * Make sure not to read more than one extra byte, otherwise data from
209 * the next packet might be removed from the FIFO.
210 */
211 for (i = len; i > 2; i -= 4, ++buf)
212 *buf = le32_to_cpu(isp1760_udc_read(udc, DC_DATAPORT));
213 if (i > 0)
214 *(u16 *)buf = le16_to_cpu(readw(udc->regs + DC_DATAPORT));
215
216 req->req.actual += len;
217
218 /*
219 * TODO: The short_not_ok flag isn't supported yet, but isn't used by
220 * any gadget driver either.
221 */
222
223 dev_dbg(udc->isp->dev,
224 "%s: req %p actual/length %u/%u maxpacket %u packet size %u\n",
225 __func__, req, req->req.actual, req->req.length, ep->maxpacket,
226 len);
227
228 ep->rx_pending = false;
229
230 /*
231 * Complete the request if all data has been received or if a short
232 * packet has been received.
233 */
234 if (req->req.actual == req->req.length || len < ep->maxpacket) {
235 list_del(&req->queue);
236 return true;
237 }
238
239 return false;
240}
241
242static void isp1760_udc_transmit(struct isp1760_ep *ep,
243 struct isp1760_request *req)
244{
245 struct isp1760_udc *udc = ep->udc;
246 u32 *buf = req->req.buf + req->req.actual;
247 int i;
248
249 req->packet_size = min(req->req.length - req->req.actual,
250 ep->maxpacket);
251
252 dev_dbg(udc->isp->dev, "%s: transferring %u bytes (%u/%u done)\n",
253 __func__, req->packet_size, req->req.actual,
254 req->req.length);
255
256 __isp1760_udc_select_ep(ep, USB_DIR_IN);
257
258 if (req->packet_size)
259 isp1760_udc_write(udc, DC_BUFLEN, req->packet_size);
260
261 /*
262 * Make sure not to write more than one extra byte, otherwise extra data
263 * will stay in the FIFO and will be transmitted during the next control
264 * request. The endpoint control CLBUF bit is supposed to allow flushing
265 * the FIFO for this kind of conditions, but doesn't seem to work.
266 */
267 for (i = req->packet_size; i > 2; i -= 4, ++buf)
268 isp1760_udc_write(udc, DC_DATAPORT, cpu_to_le32(*buf));
269 if (i > 0)
270 writew(cpu_to_le16(*(u16 *)buf), udc->regs + DC_DATAPORT);
271
272 if (ep->addr == 0)
273 isp1760_udc_write(udc, DC_CTRLFUNC, DC_DSEN);
274 if (!req->packet_size)
275 isp1760_udc_write(udc, DC_CTRLFUNC, DC_VENDP);
276}
277
278static void isp1760_ep_rx_ready(struct isp1760_ep *ep)
279{
280 struct isp1760_udc *udc = ep->udc;
281 struct isp1760_request *req;
282 bool complete;
283
284 spin_lock(&udc->lock);
285
286 if (ep->addr == 0 && udc->ep0_state != ISP1760_CTRL_DATA_OUT) {
287 spin_unlock(&udc->lock);
288 dev_dbg(udc->isp->dev, "%s: invalid ep0 state %u\n", __func__,
289 udc->ep0_state);
290 return;
291 }
292
293 if (ep->addr != 0 && !ep->desc) {
294 spin_unlock(&udc->lock);
295 dev_dbg(udc->isp->dev, "%s: ep%02x is disabled\n", __func__,
296 ep->addr);
297 return;
298 }
299
300 if (list_empty(&ep->queue)) {
301 ep->rx_pending = true;
302 spin_unlock(&udc->lock);
303 dev_dbg(udc->isp->dev, "%s: ep%02x (%p) has no request queued\n",
304 __func__, ep->addr, ep);
305 return;
306 }
307
308 req = list_first_entry(&ep->queue, struct isp1760_request,
309 queue);
310 complete = isp1760_udc_receive(ep, req);
311
312 spin_unlock(&udc->lock);
313
314 if (complete)
315 isp1760_udc_request_complete(ep, req, 0);
316}
317
318static void isp1760_ep_tx_complete(struct isp1760_ep *ep)
319{
320 struct isp1760_udc *udc = ep->udc;
321 struct isp1760_request *complete = NULL;
322 struct isp1760_request *req;
323 bool need_zlp;
324
325 spin_lock(&udc->lock);
326
327 if (ep->addr == 0 && udc->ep0_state != ISP1760_CTRL_DATA_IN) {
328 spin_unlock(&udc->lock);
329 dev_dbg(udc->isp->dev, "TX IRQ: invalid endpoint state %u\n",
330 udc->ep0_state);
331 return;
332 }
333
334 if (list_empty(&ep->queue)) {
335 /*
336 * This can happen for the control endpoint when the reply to
337 * the GET_STATUS IN control request is sent directly by the
338 * setup IRQ handler. Just proceed to the status stage.
339 */
340 if (ep->addr == 0) {
341 isp1760_udc_ctrl_send_status(ep, USB_DIR_IN);
342 spin_unlock(&udc->lock);
343 return;
344 }
345
346 spin_unlock(&udc->lock);
347 dev_dbg(udc->isp->dev, "%s: ep%02x has no request queued\n",
348 __func__, ep->addr);
349 return;
350 }
351
352 req = list_first_entry(&ep->queue, struct isp1760_request,
353 queue);
354 req->req.actual += req->packet_size;
355
356 need_zlp = req->req.actual == req->req.length &&
357 !(req->req.length % ep->maxpacket) &&
358 req->packet_size && req->req.zero;
359
360 dev_dbg(udc->isp->dev,
361 "TX IRQ: req %p actual/length %u/%u maxpacket %u packet size %u zero %u need zlp %u\n",
362 req, req->req.actual, req->req.length, ep->maxpacket,
363 req->packet_size, req->req.zero, need_zlp);
364
365 /*
366 * Complete the request if all data has been sent and we don't need to
367 * transmit a zero length packet.
368 */
369 if (req->req.actual == req->req.length && !need_zlp) {
370 complete = req;
371 list_del(&req->queue);
372
373 if (ep->addr == 0)
374 isp1760_udc_ctrl_send_status(ep, USB_DIR_IN);
375
376 if (!list_empty(&ep->queue))
377 req = list_first_entry(&ep->queue,
378 struct isp1760_request, queue);
379 else
380 req = NULL;
381 }
382
383 /*
384 * Transmit the next packet or start the next request, if any.
385 *
386 * TODO: If the endpoint is stalled the next request shouldn't be
387 * started, but what about the next packet ?
388 */
389 if (req)
390 isp1760_udc_transmit(ep, req);
391
392 spin_unlock(&udc->lock);
393
394 if (complete)
395 isp1760_udc_request_complete(ep, complete, 0);
396}
397
398static int __isp1760_udc_set_halt(struct isp1760_ep *ep, bool halt)
399{
400 struct isp1760_udc *udc = ep->udc;
401
402 dev_dbg(udc->isp->dev, "%s: %s halt on ep%02x\n", __func__,
403 halt ? "set" : "clear", ep->addr);
404
405 if (ep->desc && usb_endpoint_xfer_isoc(ep->desc)) {
406 dev_dbg(udc->isp->dev, "%s: ep%02x is isochronous\n", __func__,
407 ep->addr);
408 return -EINVAL;
409 }
410
411 isp1760_udc_select_ep(ep);
412 isp1760_udc_write(udc, DC_CTRLFUNC, halt ? DC_STALL : 0);
413
414 if (ep->addr == 0) {
415 /* When halting the control endpoint, stall both IN and OUT. */
416 __isp1760_udc_select_ep(ep, USB_DIR_IN);
417 isp1760_udc_write(udc, DC_CTRLFUNC, halt ? DC_STALL : 0);
418 } else if (!halt) {
419 /* Reset the data PID by cycling the endpoint enable bit. */
420 u16 eptype = isp1760_udc_read(udc, DC_EPTYPE);
421
422 isp1760_udc_write(udc, DC_EPTYPE, eptype & ~DC_EPENABLE);
423 isp1760_udc_write(udc, DC_EPTYPE, eptype);
424
425 /*
426 * Disabling the endpoint emptied the transmit FIFO, fill it
427 * again if a request is pending.
428 *
429 * TODO: Does the gadget framework require synchronizatino with
430 * the TX IRQ handler ?
431 */
432 if ((ep->addr & USB_DIR_IN) && !list_empty(&ep->queue)) {
433 struct isp1760_request *req;
434
435 req = list_first_entry(&ep->queue,
436 struct isp1760_request, queue);
437 isp1760_udc_transmit(ep, req);
438 }
439 }
440
441 ep->halted = halt;
442
443 return 0;
444}
445
446/* -----------------------------------------------------------------------------
447 * Control Endpoint
448 */
449
450static int isp1760_udc_get_status(struct isp1760_udc *udc,
451 const struct usb_ctrlrequest *req)
452{
453 struct isp1760_ep *ep;
454 u16 status;
455
456 if (req->wLength != cpu_to_le16(2) || req->wValue != cpu_to_le16(0))
457 return -EINVAL;
458
459 switch (req->bRequestType) {
460 case USB_DIR_IN | USB_RECIP_DEVICE:
461 status = udc->devstatus;
462 break;
463
464 case USB_DIR_IN | USB_RECIP_INTERFACE:
465 status = 0;
466 break;
467
468 case USB_DIR_IN | USB_RECIP_ENDPOINT:
469 ep = isp1760_udc_find_ep(udc, le16_to_cpu(req->wIndex));
470 if (!ep)
471 return -EINVAL;
472
473 status = 0;
474 if (ep->halted)
475 status |= 1 << USB_ENDPOINT_HALT;
476 break;
477
478 default:
479 return -EINVAL;
480 }
481
482 isp1760_udc_write(udc, DC_EPINDEX, DC_ENDPIDX(0) | DC_EPDIR);
483 isp1760_udc_write(udc, DC_BUFLEN, 2);
484
485 writew(cpu_to_le16(status), udc->regs + DC_DATAPORT);
486
487 isp1760_udc_write(udc, DC_CTRLFUNC, DC_DSEN);
488
489 dev_dbg(udc->isp->dev, "%s: status 0x%04x\n", __func__, status);
490
491 return 0;
492}
493
494static int isp1760_udc_set_address(struct isp1760_udc *udc, u16 addr)
495{
496 if (addr > 127) {
497 dev_dbg(udc->isp->dev, "invalid device address %u\n", addr);
498 return -EINVAL;
499 }
500
501 if (udc->gadget.state != USB_STATE_DEFAULT &&
502 udc->gadget.state != USB_STATE_ADDRESS) {
503 dev_dbg(udc->isp->dev, "can't set address in state %u\n",
504 udc->gadget.state);
505 return -EINVAL;
506 }
507
508 usb_gadget_set_state(&udc->gadget, addr ? USB_STATE_ADDRESS :
509 USB_STATE_DEFAULT);
510
511 isp1760_udc_write(udc, DC_ADDRESS, DC_DEVEN | addr);
512
513 spin_lock(&udc->lock);
514 isp1760_udc_ctrl_send_status(&udc->ep[0], USB_DIR_OUT);
515 spin_unlock(&udc->lock);
516
517 return 0;
518}
519
520static bool isp1760_ep0_setup_standard(struct isp1760_udc *udc,
521 struct usb_ctrlrequest *req)
522{
523 bool stall;
524
525 switch (req->bRequest) {
526 case USB_REQ_GET_STATUS:
527 return isp1760_udc_get_status(udc, req);
528
529 case USB_REQ_CLEAR_FEATURE:
530 switch (req->bRequestType) {
531 case USB_DIR_OUT | USB_RECIP_DEVICE: {
532 /* TODO: Handle remote wakeup feature. */
533 return true;
534 }
535
536 case USB_DIR_OUT | USB_RECIP_ENDPOINT: {
537 u16 index = le16_to_cpu(req->wIndex);
538 struct isp1760_ep *ep;
539
540 if (req->wLength != cpu_to_le16(0) ||
541 req->wValue != cpu_to_le16(USB_ENDPOINT_HALT))
542 return true;
543
544 ep = isp1760_udc_find_ep(udc, index);
545 if (!ep)
546 return true;
547
548 spin_lock(&udc->lock);
549
550 /*
551 * If the endpoint is wedged only the gadget can clear
552 * the halt feature. Pretend success in that case, but
553 * keep the endpoint halted.
554 */
555 if (!ep->wedged)
556 stall = __isp1760_udc_set_halt(ep, false);
557 else
558 stall = false;
559
560 if (!stall)
561 isp1760_udc_ctrl_send_status(&udc->ep[0],
562 USB_DIR_OUT);
563
564 spin_unlock(&udc->lock);
565 return stall;
566 }
567
568 default:
569 return true;
570 }
571 break;
572
573 case USB_REQ_SET_FEATURE:
574 switch (req->bRequestType) {
575 case USB_DIR_OUT | USB_RECIP_DEVICE: {
576 /* TODO: Handle remote wakeup and test mode features */
577 return true;
578 }
579
580 case USB_DIR_OUT | USB_RECIP_ENDPOINT: {
581 u16 index = le16_to_cpu(req->wIndex);
582 struct isp1760_ep *ep;
583
584 if (req->wLength != cpu_to_le16(0) ||
585 req->wValue != cpu_to_le16(USB_ENDPOINT_HALT))
586 return true;
587
588 ep = isp1760_udc_find_ep(udc, index);
589 if (!ep)
590 return true;
591
592 spin_lock(&udc->lock);
593
594 stall = __isp1760_udc_set_halt(ep, true);
595 if (!stall)
596 isp1760_udc_ctrl_send_status(&udc->ep[0],
597 USB_DIR_OUT);
598
599 spin_unlock(&udc->lock);
600 return stall;
601 }
602
603 default:
604 return true;
605 }
606 break;
607
608 case USB_REQ_SET_ADDRESS:
609 if (req->bRequestType != (USB_DIR_OUT | USB_RECIP_DEVICE))
610 return true;
611
612 return isp1760_udc_set_address(udc, le16_to_cpu(req->wValue));
613
614 case USB_REQ_SET_CONFIGURATION:
615 if (req->bRequestType != (USB_DIR_OUT | USB_RECIP_DEVICE))
616 return true;
617
618 if (udc->gadget.state != USB_STATE_ADDRESS &&
619 udc->gadget.state != USB_STATE_CONFIGURED)
620 return true;
621
622 stall = udc->driver->setup(&udc->gadget, req) < 0;
623 if (stall)
624 return true;
625
626 usb_gadget_set_state(&udc->gadget, req->wValue ?
627 USB_STATE_CONFIGURED : USB_STATE_ADDRESS);
628
629 /*
630 * SET_CONFIGURATION (and SET_INTERFACE) must reset the halt
631 * feature on all endpoints. There is however no need to do so
632 * explicitly here as the gadget driver will disable and
633 * reenable endpoints, clearing the halt feature.
634 */
635 return false;
636
637 default:
638 return udc->driver->setup(&udc->gadget, req) < 0;
639 }
640}
641
642static void isp1760_ep0_setup(struct isp1760_udc *udc)
643{
644 union {
645 struct usb_ctrlrequest r;
646 u32 data[2];
647 } req;
648 unsigned int count;
649 bool stall = false;
650
651 spin_lock(&udc->lock);
652
653 isp1760_udc_write(udc, DC_EPINDEX, DC_EP0SETUP);
654
655 count = isp1760_udc_read(udc, DC_BUFLEN) & DC_DATACOUNT_MASK;
656 if (count != sizeof(req)) {
657 spin_unlock(&udc->lock);
658
659 dev_err(udc->isp->dev, "invalid length %u for setup packet\n",
660 count);
661
662 isp1760_udc_ctrl_send_stall(&udc->ep[0]);
663 return;
664 }
665
666 req.data[0] = isp1760_udc_read(udc, DC_DATAPORT);
667 req.data[1] = isp1760_udc_read(udc, DC_DATAPORT);
668
669 if (udc->ep0_state != ISP1760_CTRL_SETUP) {
670 spin_unlock(&udc->lock);
671 dev_dbg(udc->isp->dev, "unexpected SETUP packet\n");
672 return;
673 }
674
675 /* Move to the data stage. */
676 if (!req.r.wLength)
677 udc->ep0_state = ISP1760_CTRL_STATUS;
678 else if (req.r.bRequestType & USB_DIR_IN)
679 udc->ep0_state = ISP1760_CTRL_DATA_IN;
680 else
681 udc->ep0_state = ISP1760_CTRL_DATA_OUT;
682
683 udc->ep0_dir = req.r.bRequestType & USB_DIR_IN;
684 udc->ep0_length = le16_to_cpu(req.r.wLength);
685
686 spin_unlock(&udc->lock);
687
688 dev_dbg(udc->isp->dev,
689 "%s: bRequestType 0x%02x bRequest 0x%02x wValue 0x%04x wIndex 0x%04x wLength 0x%04x\n",
690 __func__, req.r.bRequestType, req.r.bRequest,
691 le16_to_cpu(req.r.wValue), le16_to_cpu(req.r.wIndex),
692 le16_to_cpu(req.r.wLength));
693
694 if ((req.r.bRequestType & USB_TYPE_MASK) == USB_TYPE_STANDARD)
695 stall = isp1760_ep0_setup_standard(udc, &req.r);
696 else
697 stall = udc->driver->setup(&udc->gadget, &req.r) < 0;
698
699 if (stall)
700 isp1760_udc_ctrl_send_stall(&udc->ep[0]);
701}
702
703/* -----------------------------------------------------------------------------
704 * Gadget Endpoint Operations
705 */
706
707static int isp1760_ep_enable(struct usb_ep *ep,
708 const struct usb_endpoint_descriptor *desc)
709{
710 struct isp1760_ep *uep = ep_to_udc_ep(ep);
711 struct isp1760_udc *udc = uep->udc;
712 unsigned long flags;
713 unsigned int type;
714
715 dev_dbg(uep->udc->isp->dev, "%s\n", __func__);
716
717 /*
718 * Validate the descriptor. The control endpoint can't be enabled
719 * manually.
720 */
721 if (desc->bDescriptorType != USB_DT_ENDPOINT ||
722 desc->bEndpointAddress == 0 ||
723 desc->bEndpointAddress != uep->addr ||
724 le16_to_cpu(desc->wMaxPacketSize) > ep->maxpacket) {
725 dev_dbg(udc->isp->dev,
726 "%s: invalid descriptor type %u addr %02x ep addr %02x max packet size %u/%u\n",
727 __func__, desc->bDescriptorType,
728 desc->bEndpointAddress, uep->addr,
729 le16_to_cpu(desc->wMaxPacketSize), ep->maxpacket);
730 return -EINVAL;
731 }
732
733 switch (usb_endpoint_type(desc)) {
734 case USB_ENDPOINT_XFER_ISOC:
735 type = DC_ENDPTYP_ISOC;
736 break;
737 case USB_ENDPOINT_XFER_BULK:
738 type = DC_ENDPTYP_BULK;
739 break;
740 case USB_ENDPOINT_XFER_INT:
741 type = DC_ENDPTYP_INTERRUPT;
742 break;
743 case USB_ENDPOINT_XFER_CONTROL:
744 default:
745 dev_dbg(udc->isp->dev, "%s: control endpoints unsupported\n",
746 __func__);
747 return -EINVAL;
748 }
749
750 spin_lock_irqsave(&udc->lock, flags);
751
752 uep->desc = desc;
753 uep->maxpacket = le16_to_cpu(desc->wMaxPacketSize);
754 uep->rx_pending = false;
755 uep->halted = false;
756 uep->wedged = false;
757
758 isp1760_udc_select_ep(uep);
759 isp1760_udc_write(udc, DC_EPMAXPKTSZ, uep->maxpacket);
760 isp1760_udc_write(udc, DC_BUFLEN, uep->maxpacket);
761 isp1760_udc_write(udc, DC_EPTYPE, DC_EPENABLE | type);
762
763 spin_unlock_irqrestore(&udc->lock, flags);
764
765 return 0;
766}
767
768static int isp1760_ep_disable(struct usb_ep *ep)
769{
770 struct isp1760_ep *uep = ep_to_udc_ep(ep);
771 struct isp1760_udc *udc = uep->udc;
772 struct isp1760_request *req, *nreq;
773 LIST_HEAD(req_list);
774 unsigned long flags;
775
776 dev_dbg(udc->isp->dev, "%s\n", __func__);
777
778 spin_lock_irqsave(&udc->lock, flags);
779
780 if (!uep->desc) {
781 dev_dbg(udc->isp->dev, "%s: endpoint not enabled\n", __func__);
782 spin_unlock_irqrestore(&udc->lock, flags);
783 return -EINVAL;
784 }
785
786 uep->desc = NULL;
787 uep->maxpacket = 0;
788
789 isp1760_udc_select_ep(uep);
790 isp1760_udc_write(udc, DC_EPTYPE, 0);
791
792 /* TODO Synchronize with the IRQ handler */
793
794 list_splice_init(&uep->queue, &req_list);
795
796 spin_unlock_irqrestore(&udc->lock, flags);
797
798 list_for_each_entry_safe(req, nreq, &req_list, queue) {
799 list_del(&req->queue);
800 isp1760_udc_request_complete(uep, req, -ESHUTDOWN);
801 }
802
803 return 0;
804}
805
806static struct usb_request *isp1760_ep_alloc_request(struct usb_ep *ep,
807 gfp_t gfp_flags)
808{
809 struct isp1760_request *req;
810
811 req = kzalloc(sizeof(*req), gfp_flags);
812 if (!req)
813 return NULL;
814
815 return &req->req;
816}
817
818static void isp1760_ep_free_request(struct usb_ep *ep, struct usb_request *_req)
819{
820 struct isp1760_request *req = req_to_udc_req(_req);
821
822 kfree(req);
823}
824
825static int isp1760_ep_queue(struct usb_ep *ep, struct usb_request *_req,
826 gfp_t gfp_flags)
827{
828 struct isp1760_request *req = req_to_udc_req(_req);
829 struct isp1760_ep *uep = ep_to_udc_ep(ep);
830 struct isp1760_udc *udc = uep->udc;
831 bool complete = false;
832 unsigned long flags;
833 int ret = 0;
834
835 _req->status = -EINPROGRESS;
836 _req->actual = 0;
837
838 spin_lock_irqsave(&udc->lock, flags);
839
840 dev_dbg(udc->isp->dev,
841 "%s: req %p (%u bytes%s) ep %p(0x%02x)\n", __func__, _req,
842 _req->length, _req->zero ? " (zlp)" : "", uep, uep->addr);
843
844 req->ep = uep;
845
846 if (uep->addr == 0) {
847 if (_req->length != udc->ep0_length &&
848 udc->ep0_state != ISP1760_CTRL_DATA_IN) {
849 dev_dbg(udc->isp->dev,
850 "%s: invalid length %u for req %p\n",
851 __func__, _req->length, req);
852 ret = -EINVAL;
853 goto done;
854 }
855
856 switch (udc->ep0_state) {
857 case ISP1760_CTRL_DATA_IN:
858 dev_dbg(udc->isp->dev, "%s: transmitting req %p\n",
859 __func__, req);
860
861 list_add_tail(&req->queue, &uep->queue);
862 isp1760_udc_transmit(uep, req);
863 break;
864
865 case ISP1760_CTRL_DATA_OUT:
866 list_add_tail(&req->queue, &uep->queue);
867 __isp1760_udc_select_ep(uep, USB_DIR_OUT);
868 isp1760_udc_write(udc, DC_CTRLFUNC, DC_DSEN);
869 break;
870
871 case ISP1760_CTRL_STATUS:
872 complete = true;
873 break;
874
875 default:
876 dev_dbg(udc->isp->dev, "%s: invalid ep0 state\n",
877 __func__);
878 ret = -EINVAL;
879 break;
880 }
881 } else if (uep->desc) {
882 bool empty = list_empty(&uep->queue);
883
884 list_add_tail(&req->queue, &uep->queue);
885 if ((uep->addr & USB_DIR_IN) && !uep->halted && empty)
886 isp1760_udc_transmit(uep, req);
887 else if (!(uep->addr & USB_DIR_IN) && uep->rx_pending)
888 complete = isp1760_udc_receive(uep, req);
889 } else {
890 dev_dbg(udc->isp->dev,
891 "%s: can't queue request to disabled ep%02x\n",
892 __func__, uep->addr);
893 ret = -ESHUTDOWN;
894 }
895
896done:
897 if (ret < 0)
898 req->ep = NULL;
899
900 spin_unlock_irqrestore(&udc->lock, flags);
901
902 if (complete)
903 isp1760_udc_request_complete(uep, req, 0);
904
905 return ret;
906}
907
908static int isp1760_ep_dequeue(struct usb_ep *ep, struct usb_request *_req)
909{
910 struct isp1760_request *req = req_to_udc_req(_req);
911 struct isp1760_ep *uep = ep_to_udc_ep(ep);
912 struct isp1760_udc *udc = uep->udc;
913 unsigned long flags;
914
915 dev_dbg(uep->udc->isp->dev, "%s(ep%02x)\n", __func__, uep->addr);
916
917 spin_lock_irqsave(&udc->lock, flags);
918
919 if (req->ep != uep)
920 req = NULL;
921 else
922 list_del(&req->queue);
923
924 spin_unlock_irqrestore(&udc->lock, flags);
925
926 if (!req)
927 return -EINVAL;
928
929 isp1760_udc_request_complete(uep, req, -ECONNRESET);
930 return 0;
931}
932
933static int __isp1760_ep_set_halt(struct isp1760_ep *uep, bool stall, bool wedge)
934{
935 struct isp1760_udc *udc = uep->udc;
936 int ret;
937
938 if (!uep->addr) {
939 /*
940 * Halting the control endpoint is only valid as a delayed error
941 * response to a SETUP packet. Make sure EP0 is in the right
942 * stage and that the gadget isn't trying to clear the halt
943 * condition.
944 */
945 if (WARN_ON(udc->ep0_state == ISP1760_CTRL_SETUP || !stall ||
946 wedge)) {
947 return -EINVAL;
948 }
949 }
950
951 if (uep->addr && !uep->desc) {
952 dev_dbg(udc->isp->dev, "%s: ep%02x is disabled\n", __func__,
953 uep->addr);
954 return -EINVAL;
955 }
956
957 if (uep->addr & USB_DIR_IN) {
958 /* Refuse to halt IN endpoints with active transfers. */
959 if (!list_empty(&uep->queue)) {
960 dev_dbg(udc->isp->dev,
961 "%s: ep%02x has request pending\n", __func__,
962 uep->addr);
963 return -EAGAIN;
964 }
965 }
966
967 ret = __isp1760_udc_set_halt(uep, stall);
968 if (ret < 0)
969 return ret;
970
971 if (!uep->addr) {
972 /*
973 * Stalling EP0 completes the control transaction, move back to
974 * the SETUP state.
975 */
976 udc->ep0_state = ISP1760_CTRL_SETUP;
977 return 0;
978 }
979
980 if (wedge)
981 uep->wedged = true;
982 else if (!stall)
983 uep->wedged = false;
984
985 return 0;
986}
987
988static int isp1760_ep_set_halt(struct usb_ep *ep, int value)
989{
990 struct isp1760_ep *uep = ep_to_udc_ep(ep);
991 unsigned long flags;
992 int ret;
993
994 dev_dbg(uep->udc->isp->dev, "%s: %s halt on ep%02x\n", __func__,
995 value ? "set" : "clear", uep->addr);
996
997 spin_lock_irqsave(&uep->udc->lock, flags);
998 ret = __isp1760_ep_set_halt(uep, value, false);
999 spin_unlock_irqrestore(&uep->udc->lock, flags);
1000
1001 return ret;
1002}
1003
1004static int isp1760_ep_set_wedge(struct usb_ep *ep)
1005{
1006 struct isp1760_ep *uep = ep_to_udc_ep(ep);
1007 unsigned long flags;
1008 int ret;
1009
1010 dev_dbg(uep->udc->isp->dev, "%s: set wedge on ep%02x)\n", __func__,
1011 uep->addr);
1012
1013 spin_lock_irqsave(&uep->udc->lock, flags);
1014 ret = __isp1760_ep_set_halt(uep, true, true);
1015 spin_unlock_irqrestore(&uep->udc->lock, flags);
1016
1017 return ret;
1018}
1019
1020static void isp1760_ep_fifo_flush(struct usb_ep *ep)
1021{
1022 struct isp1760_ep *uep = ep_to_udc_ep(ep);
1023 struct isp1760_udc *udc = uep->udc;
1024 unsigned long flags;
1025
1026 spin_lock_irqsave(&udc->lock, flags);
1027
1028 isp1760_udc_select_ep(uep);
1029
1030 /*
1031 * Set the CLBUF bit twice to flush both buffers in case double
1032 * buffering is enabled.
1033 */
1034 isp1760_udc_write(udc, DC_CTRLFUNC, DC_CLBUF);
1035 isp1760_udc_write(udc, DC_CTRLFUNC, DC_CLBUF);
1036
1037 spin_unlock_irqrestore(&udc->lock, flags);
1038}
1039
1040static const struct usb_ep_ops isp1760_ep_ops = {
1041 .enable = isp1760_ep_enable,
1042 .disable = isp1760_ep_disable,
1043 .alloc_request = isp1760_ep_alloc_request,
1044 .free_request = isp1760_ep_free_request,
1045 .queue = isp1760_ep_queue,
1046 .dequeue = isp1760_ep_dequeue,
1047 .set_halt = isp1760_ep_set_halt,
1048 .set_wedge = isp1760_ep_set_wedge,
1049 .fifo_flush = isp1760_ep_fifo_flush,
1050};
1051
1052/* -----------------------------------------------------------------------------
1053 * Device States
1054 */
1055
1056/* Called with the UDC spinlock held. */
1057static void isp1760_udc_connect(struct isp1760_udc *udc)
1058{
1059 usb_gadget_set_state(&udc->gadget, USB_STATE_POWERED);
1060 mod_timer(&udc->vbus_timer, jiffies + ISP1760_VBUS_POLL_INTERVAL);
1061}
1062
1063/* Called with the UDC spinlock held. */
1064static void isp1760_udc_disconnect(struct isp1760_udc *udc)
1065{
1066 if (udc->gadget.state < USB_STATE_POWERED)
1067 return;
1068
1069 dev_dbg(udc->isp->dev, "Device disconnected in state %u\n",
1070 udc->gadget.state);
1071
1072 udc->gadget.speed = USB_SPEED_UNKNOWN;
1073 usb_gadget_set_state(&udc->gadget, USB_STATE_ATTACHED);
1074
1075 if (udc->driver->disconnect)
1076 udc->driver->disconnect(&udc->gadget);
1077
1078 del_timer(&udc->vbus_timer);
1079
1080 /* TODO Reset all endpoints ? */
1081}
1082
1083static void isp1760_udc_init_hw(struct isp1760_udc *udc)
1084{
1085 /*
1086 * The device controller currently shares its interrupt with the host
1087 * controller, the DC_IRQ polarity and signaling mode are ignored. Set
1088 * the to active-low level-triggered.
1089 *
1090 * Configure the control, in and out pipes to generate interrupts on
1091 * ACK tokens only (and NYET for the out pipe). The default
1092 * configuration also generates an interrupt on the first NACK token.
1093 */
1094 isp1760_udc_write(udc, DC_INTCONF, DC_CDBGMOD_ACK | DC_DDBGMODIN_ACK |
1095 DC_DDBGMODOUT_ACK_NYET);
1096
1097 isp1760_udc_write(udc, DC_INTENABLE, DC_IEPRXTX(7) | DC_IEPRXTX(6) |
1098 DC_IEPRXTX(5) | DC_IEPRXTX(4) | DC_IEPRXTX(3) |
1099 DC_IEPRXTX(2) | DC_IEPRXTX(1) | DC_IEPRXTX(0) |
1100 DC_IEP0SETUP | DC_IEVBUS | DC_IERESM | DC_IESUSP |
1101 DC_IEHS_STA | DC_IEBRST);
1102
1103 if (udc->connected)
1104 isp1760_set_pullup(udc->isp, true);
1105
1106 isp1760_udc_write(udc, DC_ADDRESS, DC_DEVEN);
1107}
1108
1109static void isp1760_udc_reset(struct isp1760_udc *udc)
1110{
1111 unsigned long flags;
1112
1113 spin_lock_irqsave(&udc->lock, flags);
1114
1115 /*
1116 * The bus reset has reset most registers to their default value,
1117 * reinitialize the UDC hardware.
1118 */
1119 isp1760_udc_init_hw(udc);
1120
1121 udc->ep0_state = ISP1760_CTRL_SETUP;
1122 udc->gadget.speed = USB_SPEED_FULL;
1123
1124 usb_gadget_udc_reset(&udc->gadget, udc->driver);
1125
1126 spin_unlock_irqrestore(&udc->lock, flags);
1127}
1128
1129static void isp1760_udc_suspend(struct isp1760_udc *udc)
1130{
1131 if (udc->gadget.state < USB_STATE_DEFAULT)
1132 return;
1133
1134 if (udc->driver->suspend)
1135 udc->driver->suspend(&udc->gadget);
1136}
1137
1138static void isp1760_udc_resume(struct isp1760_udc *udc)
1139{
1140 if (udc->gadget.state < USB_STATE_DEFAULT)
1141 return;
1142
1143 if (udc->driver->resume)
1144 udc->driver->resume(&udc->gadget);
1145}
1146
1147/* -----------------------------------------------------------------------------
1148 * Gadget Operations
1149 */
1150
1151static int isp1760_udc_get_frame(struct usb_gadget *gadget)
1152{
1153 struct isp1760_udc *udc = gadget_to_udc(gadget);
1154
1155 return isp1760_udc_read(udc, DC_FRAMENUM) & ((1 << 11) - 1);
1156}
1157
1158static int isp1760_udc_wakeup(struct usb_gadget *gadget)
1159{
1160 struct isp1760_udc *udc = gadget_to_udc(gadget);
1161
1162 dev_dbg(udc->isp->dev, "%s\n", __func__);
1163 return -ENOTSUPP;
1164}
1165
1166static int isp1760_udc_set_selfpowered(struct usb_gadget *gadget,
1167 int is_selfpowered)
1168{
1169 struct isp1760_udc *udc = gadget_to_udc(gadget);
1170
1171 if (is_selfpowered)
1172 udc->devstatus |= 1 << USB_DEVICE_SELF_POWERED;
1173 else
1174 udc->devstatus &= ~(1 << USB_DEVICE_SELF_POWERED);
1175
1176 return 0;
1177}
1178
1179static int isp1760_udc_pullup(struct usb_gadget *gadget, int is_on)
1180{
1181 struct isp1760_udc *udc = gadget_to_udc(gadget);
1182
1183 isp1760_set_pullup(udc->isp, is_on);
1184 udc->connected = is_on;
1185
1186 return 0;
1187}
1188
1189static int isp1760_udc_start(struct usb_gadget *gadget,
1190 struct usb_gadget_driver *driver)
1191{
1192 struct isp1760_udc *udc = gadget_to_udc(gadget);
1193 unsigned long flags;
1194
1195 /* The hardware doesn't support low speed. */
1196 if (driver->max_speed < USB_SPEED_FULL) {
1197 dev_err(udc->isp->dev, "Invalid gadget driver\n");
1198 return -EINVAL;
1199 }
1200
1201 spin_lock_irqsave(&udc->lock, flags);
1202
1203 if (udc->driver) {
1204 dev_err(udc->isp->dev, "UDC already has a gadget driver\n");
1205 spin_unlock_irqrestore(&udc->lock, flags);
1206 return -EBUSY;
1207 }
1208
1209 udc->driver = driver;
1210
1211 spin_unlock_irqrestore(&udc->lock, flags);
1212
1213 dev_dbg(udc->isp->dev, "starting UDC with driver %s\n",
1214 driver->function);
1215
1216 udc->devstatus = 0;
1217 udc->connected = true;
1218
1219 usb_gadget_set_state(&udc->gadget, USB_STATE_ATTACHED);
1220
1221 /* DMA isn't supported yet, don't enable the DMA clock. */
1222 isp1760_udc_write(udc, DC_MODE, DC_GLINTENA);
1223
1224 isp1760_udc_init_hw(udc);
1225
1226 dev_dbg(udc->isp->dev, "UDC started with driver %s\n",
1227 driver->function);
1228
1229 return 0;
1230}
1231
1232static int isp1760_udc_stop(struct usb_gadget *gadget)
1233{
1234 struct isp1760_udc *udc = gadget_to_udc(gadget);
1235 unsigned long flags;
1236
1237 dev_dbg(udc->isp->dev, "%s\n", __func__);
1238
1239 del_timer_sync(&udc->vbus_timer);
1240
1241 isp1760_udc_write(udc, DC_MODE, 0);
1242
1243 spin_lock_irqsave(&udc->lock, flags);
1244 udc->driver = NULL;
1245 spin_unlock_irqrestore(&udc->lock, flags);
1246
1247 return 0;
1248}
1249
1250static const struct usb_gadget_ops isp1760_udc_ops = {
1251 .get_frame = isp1760_udc_get_frame,
1252 .wakeup = isp1760_udc_wakeup,
1253 .set_selfpowered = isp1760_udc_set_selfpowered,
1254 .pullup = isp1760_udc_pullup,
1255 .udc_start = isp1760_udc_start,
1256 .udc_stop = isp1760_udc_stop,
1257};
1258
1259/* -----------------------------------------------------------------------------
1260 * Interrupt Handling
1261 */
1262
1263static irqreturn_t isp1760_udc_irq(int irq, void *dev)
1264{
1265 struct isp1760_udc *udc = dev;
1266 unsigned int i;
1267 u32 status;
1268
1269 status = isp1760_udc_read(udc, DC_INTERRUPT)
1270 & isp1760_udc_read(udc, DC_INTENABLE);
1271 isp1760_udc_write(udc, DC_INTERRUPT, status);
1272
1273 if (status & DC_IEVBUS) {
1274 dev_dbg(udc->isp->dev, "%s(VBUS)\n", __func__);
1275 /* The VBUS interrupt is only triggered when VBUS appears. */
1276 spin_lock(&udc->lock);
1277 isp1760_udc_connect(udc);
1278 spin_unlock(&udc->lock);
1279 }
1280
1281 if (status & DC_IEBRST) {
1282 dev_dbg(udc->isp->dev, "%s(BRST)\n", __func__);
1283
1284 isp1760_udc_reset(udc);
1285 }
1286
1287 for (i = 0; i <= 7; ++i) {
1288 struct isp1760_ep *ep = &udc->ep[i*2];
1289
1290 if (status & DC_IEPTX(i)) {
1291 dev_dbg(udc->isp->dev, "%s(EPTX%u)\n", __func__, i);
1292 isp1760_ep_tx_complete(ep);
1293 }
1294
1295 if (status & DC_IEPRX(i)) {
1296 dev_dbg(udc->isp->dev, "%s(EPRX%u)\n", __func__, i);
1297 isp1760_ep_rx_ready(i ? ep - 1 : ep);
1298 }
1299 }
1300
1301 if (status & DC_IEP0SETUP) {
1302 dev_dbg(udc->isp->dev, "%s(EP0SETUP)\n", __func__);
1303
1304 isp1760_ep0_setup(udc);
1305 }
1306
1307 if (status & DC_IERESM) {
1308 dev_dbg(udc->isp->dev, "%s(RESM)\n", __func__);
1309 isp1760_udc_resume(udc);
1310 }
1311
1312 if (status & DC_IESUSP) {
1313 dev_dbg(udc->isp->dev, "%s(SUSP)\n", __func__);
1314
1315 spin_lock(&udc->lock);
1316 if (!(isp1760_udc_read(udc, DC_MODE) & DC_VBUSSTAT))
1317 isp1760_udc_disconnect(udc);
1318 else
1319 isp1760_udc_suspend(udc);
1320 spin_unlock(&udc->lock);
1321 }
1322
1323 if (status & DC_IEHS_STA) {
1324 dev_dbg(udc->isp->dev, "%s(HS_STA)\n", __func__);
1325 udc->gadget.speed = USB_SPEED_HIGH;
1326 }
1327
1328 return status ? IRQ_HANDLED : IRQ_NONE;
1329}
1330
1331static void isp1760_udc_vbus_poll(struct timer_list *t)
1332{
1333 struct isp1760_udc *udc = from_timer(udc, t, vbus_timer);
1334 unsigned long flags;
1335
1336 spin_lock_irqsave(&udc->lock, flags);
1337
1338 if (!(isp1760_udc_read(udc, DC_MODE) & DC_VBUSSTAT))
1339 isp1760_udc_disconnect(udc);
1340 else if (udc->gadget.state >= USB_STATE_POWERED)
1341 mod_timer(&udc->vbus_timer,
1342 jiffies + ISP1760_VBUS_POLL_INTERVAL);
1343
1344 spin_unlock_irqrestore(&udc->lock, flags);
1345}
1346
1347/* -----------------------------------------------------------------------------
1348 * Registration
1349 */
1350
1351static void isp1760_udc_init_eps(struct isp1760_udc *udc)
1352{
1353 unsigned int i;
1354
1355 INIT_LIST_HEAD(&udc->gadget.ep_list);
1356
1357 for (i = 0; i < ARRAY_SIZE(udc->ep); ++i) {
1358 struct isp1760_ep *ep = &udc->ep[i];
1359 unsigned int ep_num = (i + 1) / 2;
1360 bool is_in = !(i & 1);
1361
1362 ep->udc = udc;
1363
1364 INIT_LIST_HEAD(&ep->queue);
1365
1366 ep->addr = (ep_num && is_in ? USB_DIR_IN : USB_DIR_OUT)
1367 | ep_num;
1368 ep->desc = NULL;
1369
1370 sprintf(ep->name, "ep%u%s", ep_num,
1371 ep_num ? (is_in ? "in" : "out") : "");
1372
1373 ep->ep.ops = &isp1760_ep_ops;
1374 ep->ep.name = ep->name;
1375
1376 /*
1377 * Hardcode the maximum packet sizes for now, to 64 bytes for
1378 * the control endpoint and 512 bytes for all other endpoints.
1379 * This fits in the 8kB FIFO without double-buffering.
1380 */
1381 if (ep_num == 0) {
1382 usb_ep_set_maxpacket_limit(&ep->ep, 64);
1383 ep->ep.caps.type_control = true;
1384 ep->ep.caps.dir_in = true;
1385 ep->ep.caps.dir_out = true;
1386 ep->maxpacket = 64;
1387 udc->gadget.ep0 = &ep->ep;
1388 } else {
1389 usb_ep_set_maxpacket_limit(&ep->ep, 512);
1390 ep->ep.caps.type_iso = true;
1391 ep->ep.caps.type_bulk = true;
1392 ep->ep.caps.type_int = true;
1393 ep->maxpacket = 0;
1394 list_add_tail(&ep->ep.ep_list, &udc->gadget.ep_list);
1395 }
1396
1397 if (is_in)
1398 ep->ep.caps.dir_in = true;
1399 else
1400 ep->ep.caps.dir_out = true;
1401 }
1402}
1403
1404static int isp1760_udc_init(struct isp1760_udc *udc)
1405{
1406 u16 scratch;
1407 u32 chipid;
1408
1409 /*
1410 * Check that the controller is present by writing to the scratch
1411 * register, modifying the bus pattern by reading from the chip ID
1412 * register, and reading the scratch register value back. The chip ID
1413 * and scratch register contents must match the expected values.
1414 */
1415 isp1760_udc_write(udc, DC_SCRATCH, 0xbabe);
1416 chipid = isp1760_udc_read(udc, DC_CHIPID);
1417 scratch = isp1760_udc_read(udc, DC_SCRATCH);
1418
1419 if (scratch != 0xbabe) {
1420 dev_err(udc->isp->dev,
1421 "udc: scratch test failed (0x%04x/0x%08x)\n",
1422 scratch, chipid);
1423 return -ENODEV;
1424 }
1425
1426 if (chipid != 0x00011582 && chipid != 0x00158210) {
1427 dev_err(udc->isp->dev, "udc: invalid chip ID 0x%08x\n", chipid);
1428 return -ENODEV;
1429 }
1430
1431 /* Reset the device controller. */
1432 isp1760_udc_write(udc, DC_MODE, DC_SFRESET);
1433 usleep_range(10000, 11000);
1434 isp1760_udc_write(udc, DC_MODE, 0);
1435 usleep_range(10000, 11000);
1436
1437 return 0;
1438}
1439
1440int isp1760_udc_register(struct isp1760_device *isp, int irq,
1441 unsigned long irqflags)
1442{
1443 struct isp1760_udc *udc = &isp->udc;
1444 int ret;
1445
1446 udc->irq = -1;
1447 udc->isp = isp;
1448 udc->regs = isp->regs;
1449
1450 spin_lock_init(&udc->lock);
1451 timer_setup(&udc->vbus_timer, isp1760_udc_vbus_poll, 0);
1452
1453 ret = isp1760_udc_init(udc);
1454 if (ret < 0)
1455 return ret;
1456
1457 udc->irqname = kasprintf(GFP_KERNEL, "%s (udc)", dev_name(isp->dev));
1458 if (!udc->irqname)
1459 return -ENOMEM;
1460
1461 ret = request_irq(irq, isp1760_udc_irq, IRQF_SHARED | irqflags,
1462 udc->irqname, udc);
1463 if (ret < 0)
1464 goto error;
1465
1466 udc->irq = irq;
1467
1468 /*
1469 * Initialize the gadget static fields and register its device. Gadget
1470 * fields that vary during the life time of the gadget are initialized
1471 * by the UDC core.
1472 */
1473 udc->gadget.ops = &isp1760_udc_ops;
1474 udc->gadget.speed = USB_SPEED_UNKNOWN;
1475 udc->gadget.max_speed = USB_SPEED_HIGH;
1476 udc->gadget.name = "isp1761_udc";
1477
1478 isp1760_udc_init_eps(udc);
1479
1480 ret = usb_add_gadget_udc(isp->dev, &udc->gadget);
1481 if (ret < 0)
1482 goto error;
1483
1484 return 0;
1485
1486error:
1487 if (udc->irq >= 0)
1488 free_irq(udc->irq, udc);
1489 kfree(udc->irqname);
1490
1491 return ret;
1492}
1493
1494void isp1760_udc_unregister(struct isp1760_device *isp)
1495{
1496 struct isp1760_udc *udc = &isp->udc;
1497
1498 if (!udc->isp)
1499 return;
1500
1501 usb_del_gadget_udc(&udc->gadget);
1502
1503 free_irq(udc->irq, udc);
1504 kfree(udc->irqname);
1505}