| Inaky Perez-Gonzalez | 7950381 | 2008-12-20 16:57:52 -0800 | [diff] [blame] | 1 | /* | 
 | 2 |  * Intel Wireless WiMAX Connection 2400m | 
 | 3 |  * Firmware uploader's USB specifics | 
 | 4 |  * | 
 | 5 |  * | 
 | 6 |  * Copyright (C) 2007-2008 Intel Corporation. All rights reserved. | 
 | 7 |  * | 
 | 8 |  * Redistribution and use in source and binary forms, with or without | 
 | 9 |  * modification, are permitted provided that the following conditions | 
 | 10 |  * are met: | 
 | 11 |  * | 
 | 12 |  *   * Redistributions of source code must retain the above copyright | 
 | 13 |  *     notice, this list of conditions and the following disclaimer. | 
 | 14 |  *   * Redistributions in binary form must reproduce the above copyright | 
 | 15 |  *     notice, this list of conditions and the following disclaimer in | 
 | 16 |  *     the documentation and/or other materials provided with the | 
 | 17 |  *     distribution. | 
 | 18 |  *   * Neither the name of Intel Corporation nor the names of its | 
 | 19 |  *     contributors may be used to endorse or promote products derived | 
 | 20 |  *     from this software without specific prior written permission. | 
 | 21 |  * | 
 | 22 |  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS | 
 | 23 |  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT | 
 | 24 |  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR | 
 | 25 |  * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT | 
 | 26 |  * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | 
 | 27 |  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT | 
 | 28 |  * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, | 
 | 29 |  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY | 
 | 30 |  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT | 
 | 31 |  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE | 
 | 32 |  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | 
 | 33 |  * | 
 | 34 |  * | 
 | 35 |  * Intel Corporation <linux-wimax@intel.com> | 
 | 36 |  * Yanir Lubetkin <yanirx.lubetkin@intel.com> | 
 | 37 |  * Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com> | 
 | 38 |  *  - Initial implementation | 
 | 39 |  * | 
 | 40 |  * Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com> | 
 | 41 |  *  - bus generic/specific split | 
 | 42 |  * | 
 | 43 |  * THE PROCEDURE | 
 | 44 |  * | 
 | 45 |  * See fw.c for the generic description of this procedure. | 
 | 46 |  * | 
 | 47 |  * This file implements only the USB specifics. It boils down to how | 
 | 48 |  * to send a command and waiting for an acknowledgement from the | 
 | 49 |  * device. | 
 | 50 |  * | 
 | 51 |  * This code (and process) is single threaded. It assumes it is the | 
 | 52 |  * only thread poking around (guaranteed by fw.c). | 
 | 53 |  * | 
 | 54 |  * COMMAND EXECUTION | 
 | 55 |  * | 
 | 56 |  * A write URB is posted with the buffer to the bulk output endpoint. | 
 | 57 |  * | 
 | 58 |  * ACK RECEPTION | 
 | 59 |  * | 
 | 60 |  * We just post a URB to the notification endpoint and wait for | 
 | 61 |  * data. We repeat until we get all the data we expect (as indicated | 
 | 62 |  * by the call from the bus generic code). | 
 | 63 |  * | 
 | 64 |  * The data is not read from the bulk in endpoint for boot mode. | 
 | 65 |  * | 
 | 66 |  * ROADMAP | 
 | 67 |  * | 
 | 68 |  * i2400mu_bus_bm_cmd_send | 
 | 69 |  *   i2400m_bm_cmd_prepare... | 
 | 70 |  *   i2400mu_tx_bulk_out | 
 | 71 |  * | 
 | 72 |  * i2400mu_bus_bm_wait_for_ack | 
 | 73 |  *   i2400m_notif_submit | 
 | 74 |  */ | 
 | 75 | #include <linux/usb.h> | 
| Tejun Heo | 5a0e3ad | 2010-03-24 17:04:11 +0900 | [diff] [blame] | 76 | #include <linux/gfp.h> | 
| Inaky Perez-Gonzalez | 7950381 | 2008-12-20 16:57:52 -0800 | [diff] [blame] | 77 | #include "i2400m-usb.h" | 
 | 78 |  | 
 | 79 |  | 
 | 80 | #define D_SUBMODULE fw | 
 | 81 | #include "usb-debug-levels.h" | 
 | 82 |  | 
 | 83 |  | 
 | 84 | /* | 
 | 85 |  * Synchronous write to the device | 
 | 86 |  * | 
 | 87 |  * Takes care of updating EDC counts and thus, handle device errors. | 
 | 88 |  */ | 
 | 89 | static | 
 | 90 | ssize_t i2400mu_tx_bulk_out(struct i2400mu *i2400mu, void *buf, size_t buf_size) | 
 | 91 | { | 
 | 92 | 	int result; | 
 | 93 | 	struct device *dev = &i2400mu->usb_iface->dev; | 
 | 94 | 	int len; | 
 | 95 | 	struct usb_endpoint_descriptor *epd; | 
 | 96 | 	int pipe, do_autopm = 1; | 
 | 97 |  | 
 | 98 | 	result = usb_autopm_get_interface(i2400mu->usb_iface); | 
 | 99 | 	if (result < 0) { | 
 | 100 | 		dev_err(dev, "BM-CMD: can't get autopm: %d\n", result); | 
 | 101 | 		do_autopm = 0; | 
 | 102 | 	} | 
| Dirk Brandewie | 2093586 | 2009-08-12 11:29:46 -0700 | [diff] [blame] | 103 | 	epd = usb_get_epd(i2400mu->usb_iface, i2400mu->endpoint_cfg.bulk_out); | 
| Inaky Perez-Gonzalez | 7950381 | 2008-12-20 16:57:52 -0800 | [diff] [blame] | 104 | 	pipe = usb_sndbulkpipe(i2400mu->usb_dev, epd->bEndpointAddress); | 
 | 105 | retry: | 
| Inaky Perez-Gonzalez | 296bd4b | 2009-10-20 11:09:25 +0900 | [diff] [blame] | 106 | 	result = usb_bulk_msg(i2400mu->usb_dev, pipe, buf, buf_size, &len, 200); | 
| Inaky Perez-Gonzalez | 7950381 | 2008-12-20 16:57:52 -0800 | [diff] [blame] | 107 | 	switch (result) { | 
 | 108 | 	case 0: | 
 | 109 | 		if (len != buf_size) { | 
 | 110 | 			dev_err(dev, "BM-CMD: short write (%u B vs %zu " | 
 | 111 | 				"expected)\n", len, buf_size); | 
 | 112 | 			result = -EIO; | 
 | 113 | 			break; | 
 | 114 | 		} | 
 | 115 | 		result = len; | 
 | 116 | 		break; | 
| Inaky Perez-Gonzalez | faf5716 | 2009-10-20 11:10:59 +0900 | [diff] [blame] | 117 | 	case -EPIPE: | 
 | 118 | 		/* | 
 | 119 | 		 * Stall -- maybe the device is choking with our | 
 | 120 | 		 * requests. Clear it and give it some time. If they | 
 | 121 | 		 * happen to often, it might be another symptom, so we | 
 | 122 | 		 * reset. | 
 | 123 | 		 * | 
 | 124 | 		 * No error handling for usb_clear_halt(0; if it | 
 | 125 | 		 * works, the retry works; if it fails, this switch | 
 | 126 | 		 * does the error handling for us. | 
 | 127 | 		 */ | 
 | 128 | 		if (edc_inc(&i2400mu->urb_edc, | 
 | 129 | 			    10 * EDC_MAX_ERRORS, EDC_ERROR_TIMEFRAME)) { | 
 | 130 | 			dev_err(dev, "BM-CMD: too many stalls in " | 
 | 131 | 				"URB; resetting device\n"); | 
 | 132 | 			usb_queue_reset_device(i2400mu->usb_iface); | 
 | 133 | 			/* fallthrough */ | 
 | 134 | 		} else { | 
 | 135 | 			usb_clear_halt(i2400mu->usb_dev, pipe); | 
 | 136 | 			msleep(10);	/* give the device some time */ | 
 | 137 | 			goto retry; | 
 | 138 | 		} | 
| Inaky Perez-Gonzalez | 7950381 | 2008-12-20 16:57:52 -0800 | [diff] [blame] | 139 | 	case -EINVAL:			/* while removing driver */ | 
 | 140 | 	case -ENODEV:			/* dev disconnect ... */ | 
 | 141 | 	case -ENOENT:			/* just ignore it */ | 
 | 142 | 	case -ESHUTDOWN:		/* and exit */ | 
 | 143 | 	case -ECONNRESET: | 
 | 144 | 		result = -ESHUTDOWN; | 
 | 145 | 		break; | 
 | 146 | 	case -ETIMEDOUT:			/* bah... */ | 
 | 147 | 		break; | 
 | 148 | 	default:				/* any other? */ | 
 | 149 | 		if (edc_inc(&i2400mu->urb_edc, | 
 | 150 | 			    EDC_MAX_ERRORS, EDC_ERROR_TIMEFRAME)) { | 
 | 151 | 				dev_err(dev, "BM-CMD: maximum errors in " | 
 | 152 | 					"URB exceeded; resetting device\n"); | 
 | 153 | 				usb_queue_reset_device(i2400mu->usb_iface); | 
 | 154 | 				result = -ENODEV; | 
 | 155 | 				break; | 
 | 156 | 		} | 
 | 157 | 		dev_err(dev, "BM-CMD: URB error %d, retrying\n", | 
 | 158 | 			result); | 
 | 159 | 		goto retry; | 
 | 160 | 	} | 
| Inaky Perez-Gonzalez | 7950381 | 2008-12-20 16:57:52 -0800 | [diff] [blame] | 161 | 	if (do_autopm) | 
 | 162 | 		usb_autopm_put_interface(i2400mu->usb_iface); | 
 | 163 | 	return result; | 
 | 164 | } | 
 | 165 |  | 
 | 166 |  | 
 | 167 | /* | 
 | 168 |  * Send a boot-mode command over the bulk-out pipe | 
 | 169 |  * | 
 | 170 |  * Command can be a raw command, which requires no preparation (and | 
 | 171 |  * which might not even be following the command format). Checks that | 
| Lucas De Marchi | 25985ed | 2011-03-30 22:57:33 -0300 | [diff] [blame] | 172 |  * the right amount of data was transferred. | 
| Inaky Perez-Gonzalez | 7950381 | 2008-12-20 16:57:52 -0800 | [diff] [blame] | 173 |  * | 
 | 174 |  * To satisfy USB requirements (no onstack, vmalloc or in data segment | 
 | 175 |  * buffers), we copy the command to i2400m->bm_cmd_buf and send it from | 
 | 176 |  * there. | 
 | 177 |  * | 
 | 178 |  * @flags: pass thru from i2400m_bm_cmd() | 
 | 179 |  * @return: cmd_size if ok, < 0 errno code on error. | 
 | 180 |  */ | 
 | 181 | ssize_t i2400mu_bus_bm_cmd_send(struct i2400m *i2400m, | 
 | 182 | 				const struct i2400m_bootrom_header *_cmd, | 
 | 183 | 				size_t cmd_size, int flags) | 
 | 184 | { | 
 | 185 | 	ssize_t result; | 
 | 186 | 	struct device *dev = i2400m_dev(i2400m); | 
 | 187 | 	struct i2400mu *i2400mu = container_of(i2400m, struct i2400mu, i2400m); | 
 | 188 | 	int opcode = _cmd == NULL ? -1 : i2400m_brh_get_opcode(_cmd); | 
 | 189 | 	struct i2400m_bootrom_header *cmd; | 
 | 190 | 	size_t cmd_size_a = ALIGN(cmd_size, 16);	/* USB restriction */ | 
 | 191 |  | 
 | 192 | 	d_fnstart(8, dev, "(i2400m %p cmd %p size %zu)\n", | 
 | 193 | 		  i2400m, _cmd, cmd_size); | 
 | 194 | 	result = -E2BIG; | 
 | 195 | 	if (cmd_size > I2400M_BM_CMD_BUF_SIZE) | 
 | 196 | 		goto error_too_big; | 
| Inaky Perez-Gonzalez | 77e1251 | 2009-08-31 17:15:49 -0700 | [diff] [blame] | 197 | 	if (_cmd != i2400m->bm_cmd_buf) | 
 | 198 | 		memmove(i2400m->bm_cmd_buf, _cmd, cmd_size); | 
| Inaky Perez-Gonzalez | 7950381 | 2008-12-20 16:57:52 -0800 | [diff] [blame] | 199 | 	cmd = i2400m->bm_cmd_buf; | 
 | 200 | 	if (cmd_size_a > cmd_size)			/* Zero pad space */ | 
 | 201 | 		memset(i2400m->bm_cmd_buf + cmd_size, 0, cmd_size_a - cmd_size); | 
 | 202 | 	if ((flags & I2400M_BM_CMD_RAW) == 0) { | 
 | 203 | 		if (WARN_ON(i2400m_brh_get_response_required(cmd) == 0)) | 
 | 204 | 			dev_warn(dev, "SW BUG: response_required == 0\n"); | 
 | 205 | 		i2400m_bm_cmd_prepare(cmd); | 
 | 206 | 	} | 
 | 207 | 	result = i2400mu_tx_bulk_out(i2400mu, i2400m->bm_cmd_buf, cmd_size); | 
 | 208 | 	if (result < 0) { | 
 | 209 | 		dev_err(dev, "boot-mode cmd %d: cannot send: %zd\n", | 
 | 210 | 			opcode, result); | 
 | 211 | 		goto error_cmd_send; | 
 | 212 | 	} | 
 | 213 | 	if (result != cmd_size) {		/* all was transferred? */ | 
 | 214 | 		dev_err(dev, "boot-mode cmd %d: incomplete transfer " | 
 | 215 | 			"(%zu vs %zu submitted)\n",  opcode, result, cmd_size); | 
 | 216 | 		result = -EIO; | 
 | 217 | 		goto error_cmd_size; | 
 | 218 | 	} | 
 | 219 | error_cmd_size: | 
 | 220 | error_cmd_send: | 
 | 221 | error_too_big: | 
 | 222 | 	d_fnend(8, dev, "(i2400m %p cmd %p size %zu) = %zd\n", | 
 | 223 | 		i2400m, _cmd, cmd_size, result); | 
 | 224 | 	return result; | 
 | 225 | } | 
 | 226 |  | 
 | 227 |  | 
 | 228 | static | 
 | 229 | void __i2400mu_bm_notif_cb(struct urb *urb) | 
 | 230 | { | 
 | 231 | 	complete(urb->context); | 
 | 232 | } | 
 | 233 |  | 
 | 234 |  | 
 | 235 | /* | 
 | 236 |  * submit a read to the notification endpoint | 
 | 237 |  * | 
 | 238 |  * @i2400m: device descriptor | 
 | 239 |  * @urb: urb to use | 
 | 240 |  * @completion: completion varible to complete when done | 
 | 241 |  * | 
 | 242 |  * Data is always read to i2400m->bm_ack_buf | 
 | 243 |  */ | 
 | 244 | static | 
 | 245 | int i2400mu_notif_submit(struct i2400mu *i2400mu, struct urb *urb, | 
 | 246 | 			 struct completion *completion) | 
 | 247 | { | 
 | 248 | 	struct i2400m *i2400m = &i2400mu->i2400m; | 
 | 249 | 	struct usb_endpoint_descriptor *epd; | 
 | 250 | 	int pipe; | 
 | 251 |  | 
| Dirk Brandewie | 2093586 | 2009-08-12 11:29:46 -0700 | [diff] [blame] | 252 | 	epd = usb_get_epd(i2400mu->usb_iface, | 
 | 253 | 			  i2400mu->endpoint_cfg.notification); | 
| Inaky Perez-Gonzalez | 7950381 | 2008-12-20 16:57:52 -0800 | [diff] [blame] | 254 | 	pipe = usb_rcvintpipe(i2400mu->usb_dev, epd->bEndpointAddress); | 
 | 255 | 	usb_fill_int_urb(urb, i2400mu->usb_dev, pipe, | 
 | 256 | 			 i2400m->bm_ack_buf, I2400M_BM_ACK_BUF_SIZE, | 
 | 257 | 			 __i2400mu_bm_notif_cb, completion, | 
 | 258 | 			 epd->bInterval); | 
 | 259 | 	return usb_submit_urb(urb, GFP_KERNEL); | 
 | 260 | } | 
 | 261 |  | 
 | 262 |  | 
 | 263 | /* | 
 | 264 |  * Read an ack from  the notification endpoint | 
 | 265 |  * | 
 | 266 |  * @i2400m: | 
 | 267 |  * @_ack: pointer to where to store the read data | 
 | 268 |  * @ack_size: how many bytes we should read | 
 | 269 |  * | 
 | 270 |  * Returns: < 0 errno code on error; otherwise, amount of received bytes. | 
 | 271 |  * | 
 | 272 |  * Submits a notification read, appends the read data to the given ack | 
 | 273 |  * buffer and then repeats (until @ack_size bytes have been | 
 | 274 |  * received). | 
 | 275 |  */ | 
 | 276 | ssize_t i2400mu_bus_bm_wait_for_ack(struct i2400m *i2400m, | 
 | 277 | 				    struct i2400m_bootrom_header *_ack, | 
 | 278 | 				    size_t ack_size) | 
 | 279 | { | 
 | 280 | 	ssize_t result = -ENOMEM; | 
 | 281 | 	struct device *dev = i2400m_dev(i2400m); | 
 | 282 | 	struct i2400mu *i2400mu = container_of(i2400m, struct i2400mu, i2400m); | 
 | 283 | 	struct urb notif_urb; | 
 | 284 | 	void *ack = _ack; | 
 | 285 | 	size_t offset, len; | 
 | 286 | 	long val; | 
 | 287 | 	int do_autopm = 1; | 
 | 288 | 	DECLARE_COMPLETION_ONSTACK(notif_completion); | 
 | 289 |  | 
 | 290 | 	d_fnstart(8, dev, "(i2400m %p ack %p size %zu)\n", | 
 | 291 | 		  i2400m, ack, ack_size); | 
 | 292 | 	BUG_ON(_ack == i2400m->bm_ack_buf); | 
 | 293 | 	result = usb_autopm_get_interface(i2400mu->usb_iface); | 
 | 294 | 	if (result < 0) { | 
 | 295 | 		dev_err(dev, "BM-ACK: can't get autopm: %d\n", (int) result); | 
 | 296 | 		do_autopm = 0; | 
 | 297 | 	} | 
 | 298 | 	usb_init_urb(¬if_urb);	/* ready notifications */ | 
 | 299 | 	usb_get_urb(¬if_urb); | 
 | 300 | 	offset = 0; | 
 | 301 | 	while (offset < ack_size) { | 
 | 302 | 		init_completion(¬if_completion); | 
 | 303 | 		result = i2400mu_notif_submit(i2400mu, ¬if_urb, | 
 | 304 | 					      ¬if_completion); | 
 | 305 | 		if (result < 0) | 
 | 306 | 			goto error_notif_urb_submit; | 
 | 307 | 		val = wait_for_completion_interruptible_timeout( | 
 | 308 | 			¬if_completion, HZ); | 
 | 309 | 		if (val == 0) { | 
 | 310 | 			result = -ETIMEDOUT; | 
 | 311 | 			usb_kill_urb(¬if_urb);	/* Timedout */ | 
 | 312 | 			goto error_notif_wait; | 
 | 313 | 		} | 
 | 314 | 		if (val == -ERESTARTSYS) { | 
 | 315 | 			result = -EINTR;		/* Interrupted */ | 
 | 316 | 			usb_kill_urb(¬if_urb); | 
 | 317 | 			goto error_notif_wait; | 
 | 318 | 		} | 
 | 319 | 		result = notif_urb.status;		/* How was the ack? */ | 
 | 320 | 		switch (result) { | 
 | 321 | 		case 0: | 
 | 322 | 			break; | 
 | 323 | 		case -EINVAL:			/* while removing driver */ | 
 | 324 | 		case -ENODEV:			/* dev disconnect ... */ | 
 | 325 | 		case -ENOENT:			/* just ignore it */ | 
 | 326 | 		case -ESHUTDOWN:		/* and exit */ | 
 | 327 | 		case -ECONNRESET: | 
 | 328 | 			result = -ESHUTDOWN; | 
 | 329 | 			goto error_dev_gone; | 
 | 330 | 		default:				/* any other? */ | 
 | 331 | 			usb_kill_urb(¬if_urb);	/* Timedout */ | 
 | 332 | 			if (edc_inc(&i2400mu->urb_edc, | 
 | 333 | 				    EDC_MAX_ERRORS, EDC_ERROR_TIMEFRAME)) | 
 | 334 | 				goto error_exceeded; | 
 | 335 | 			dev_err(dev, "BM-ACK: URB error %d, " | 
 | 336 | 				"retrying\n", notif_urb.status); | 
 | 337 | 			continue;	/* retry */ | 
 | 338 | 		} | 
 | 339 | 		if (notif_urb.actual_length == 0) { | 
 | 340 | 			d_printf(6, dev, "ZLP received, retrying\n"); | 
 | 341 | 			continue; | 
 | 342 | 		} | 
 | 343 | 		/* Got data, append it to the buffer */ | 
 | 344 | 		len = min(ack_size - offset, (size_t) notif_urb.actual_length); | 
 | 345 | 		memcpy(ack + offset, i2400m->bm_ack_buf, len); | 
 | 346 | 		offset += len; | 
 | 347 | 	} | 
 | 348 | 	result = offset; | 
 | 349 | error_notif_urb_submit: | 
 | 350 | error_notif_wait: | 
 | 351 | error_dev_gone: | 
 | 352 | out: | 
 | 353 | 	if (do_autopm) | 
 | 354 | 		usb_autopm_put_interface(i2400mu->usb_iface); | 
| Inaky Perez-Gonzalez | 59bdc4b | 2009-09-02 15:41:23 -0700 | [diff] [blame] | 355 | 	d_fnend(8, dev, "(i2400m %p ack %p size %zu) = %ld\n", | 
 | 356 | 		i2400m, ack, ack_size, (long) result); | 
| Inaky Perez-Gonzalez | 7950381 | 2008-12-20 16:57:52 -0800 | [diff] [blame] | 357 | 	return result; | 
 | 358 |  | 
 | 359 | error_exceeded: | 
 | 360 | 	dev_err(dev, "bm: maximum errors in notification URB exceeded; " | 
 | 361 | 		"resetting device\n"); | 
 | 362 | 	usb_queue_reset_device(i2400mu->usb_iface); | 
 | 363 | 	goto out; | 
 | 364 | } |