Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit b86b64e9 authored by Greg Kroah-Hartman's avatar Greg Kroah-Hartman
Browse files

greybus: Merge branch 'master' into svc 



Get the USB driver fixes in this branch to prevent oopses from happening
when the USB host driver protocol is found in a manifest.

Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@google.com>
parents 32574ff3 a9649356

drivers/staging/greybus/usb.c

+82 −212
Original line number Diff line number Diff line
@@ -22,34 +22,9 @@ 
/* Greybus USB request types */

#define GB_USB_TYPE_INVALID		0x00

#define GB_USB_TYPE_PROTOCOL_VERSION	0x01

#define GB_USB_TYPE_HCD_STOP		0x02

#define GB_USB_TYPE_HCD_START		0x03

#define GB_USB_TYPE_URB_ENQUEUE		0x04

#define GB_USB_TYPE_URB_DEQUEUE		0x05

#define GB_USB_TYPE_ENDPOINT_DISABLE	0x06

#define GB_USB_TYPE_HUB_CONTROL		0x07

#define GB_USB_TYPE_GET_FRAME_NUMBER	0x08

#define GB_USB_TYPE_HUB_STATUS_DATA	0x09



struct gb_usb_urb_enqueue_request {

	__le32 pipe;

	__le32 transfer_flags;

	__le32 transfer_buffer_length;

	__le32 maxpacket;

	__le32 interval;

	__le64 hcpriv_ep;

	__le32 number_of_packets;

	u8 setup_packet[8];

	u8 payload[0];

};



struct gb_usb_urb_dequeue_request {

	__le64 hcpriv_ep;

};



struct gb_usb_endpoint_disable_request {

	__le64	hcpriv;

};

#define GB_USB_TYPE_HCD_START		0x02

#define GB_USB_TYPE_HCD_STOP		0x03

#define GB_USB_TYPE_HUB_CONTROL		0x04



struct gb_usb_hub_control_request {

	__le16 typeReq;
@@ -62,31 +37,22 @@ struct gb_usb_hub_control_response { 
	u8 buf[0];

};



struct gb_usb_header {

	__le16	size;

	__le16	id;

	__u8	type;

};



struct gb_usb_hub_status {

	__le32 status;

	__le16 buf_size;

	u8 buf[0];

};



static struct gb_usb_hub_status *hub_status;	// FIXME!!!

static DEFINE_SPINLOCK(hub_status_lock);

static atomic_t frame_number;			// FIXME!!!



struct gb_usb_device {

	struct gb_connection *connection;



	struct usb_hcd *hcd;

	u8 version_major;

	u8 version_minor;

};



#define to_gb_usb_device(d) ((struct gb_usb_device*) d->hcd_priv)

static inline struct gb_usb_device *to_gb_usb_device(struct usb_hcd *hcd)

{

	return (struct gb_usb_device *)hcd->hcd_priv;

}



static inline struct usb_hcd *gb_usb_device_to_hcd(struct gb_usb_device *dev)

{

	return container_of((void *)dev, struct usb_hcd, hcd_priv);

}



/* Define get_version() routine */

define_get_version(gb_usb_device, USB);
@@ -123,234 +89,138 @@ static int hcd_start(struct usb_hcd *hcd) 


static int urb_enqueue(struct usb_hcd *hcd, struct urb *urb, gfp_t mem_flags)

{

	struct gb_usb_device *dev = to_gb_usb_device(hcd);

	struct gb_usb_urb_enqueue_request *request;

	struct gb_operation *operation;

	int ret;



	operation = gb_operation_create(dev->connection,

					GB_USB_TYPE_URB_ENQUEUE,

					sizeof(*request) +

					urb->transfer_buffer_length, 0,

					GFP_KERNEL);

	if (!operation)

		return -ENODEV;



	request = operation->request->payload;

	request->pipe = cpu_to_le32(urb->pipe);

	request->transfer_flags = cpu_to_le32(urb->transfer_flags);

	request->transfer_buffer_length = cpu_to_le32(urb->transfer_buffer_length);

	request->interval = cpu_to_le32(urb->interval);

	request->hcpriv_ep = cpu_to_le64((unsigned long)urb->ep->hcpriv);

	request->number_of_packets = cpu_to_le32(urb->number_of_packets);



	memcpy(request->setup_packet, urb->setup_packet, 8);

	memcpy(&request->payload, urb->transfer_buffer,

	       urb->transfer_buffer_length);



	ret = gb_operation_request_send_sync(operation);

	gb_operation_destroy(operation);



	return ret;

	return -ENXIO;

}



static int urb_dequeue(struct usb_hcd *hcd, struct urb *urb, int status)

{

	struct gb_usb_device *dev = to_gb_usb_device(hcd);

	struct gb_usb_urb_dequeue_request request;

	int ret;



	urb->ep->hcpriv = NULL;

	request.hcpriv_ep = cpu_to_le64((unsigned long)urb->hcpriv);

	ret = gb_operation_sync(dev->connection, GB_USB_TYPE_URB_DEQUEUE,

				&request, sizeof(request), NULL, 0);

	urb->hcpriv = NULL;

	return ret;

}



static void endpoint_disable(struct usb_hcd *hcd, struct usb_host_endpoint *ep)

{

	struct gb_usb_device *dev = to_gb_usb_device(hcd);

	struct gb_usb_endpoint_disable_request request;

	int ret;



	request.hcpriv = cpu_to_le64((unsigned long)ep->hcpriv);

	ret = gb_operation_sync(dev->connection, GB_USB_TYPE_ENDPOINT_DISABLE,

				&request, sizeof(request), NULL, 0);

	ep->hcpriv = NULL;

}



static void endpoint_reset(struct usb_hcd *hcd, struct usb_host_endpoint *ep)

{

	return -ENXIO;

}



static int get_frame_number(struct usb_hcd *hcd)

{

	return atomic_read(&frame_number);

	return 0;

}



static int hub_status_data(struct usb_hcd *hcd, char *buf)

{

	int retval;

	unsigned long flags;



	spin_lock_irqsave(&hub_status_lock, flags);

	memcpy(buf, hub_status->buf, le16_to_cpu(hub_status->buf_size));

	retval = le32_to_cpu(hub_status->status);

	spin_unlock_irqrestore(&hub_status_lock, flags);



	return retval;

	return 0;

}



static int hub_control(struct usb_hcd *hcd, u16 typeReq, u16 wValue, u16 wIndex,

		       char *buf, u16 wLength)

{

	struct gb_usb_hub_control_request request;

	struct gb_usb_device *dev = to_gb_usb_device(hcd);

	struct gb_operation *operation;

	struct gb_usb_hub_control_request *request;

	struct gb_usb_hub_control_response *response;

	size_t response_size;

	int ret;



	request.typeReq = cpu_to_le16(typeReq);

	request.wValue = cpu_to_le16(wValue);

	request.wIndex = cpu_to_le16(wIndex);

	request.wLength = cpu_to_le16(wLength);

	/* FIXME: handle unspecified lengths */

	response_size = sizeof(*response) + wLength;



	operation = gb_operation_create(dev->connection,

					GB_USB_TYPE_HUB_CONTROL,

					sizeof(*request),

					response_size,

					GFP_KERNEL);

	if (!operation)

		return -ENOMEM;



	request = operation->request->payload;

	request->typeReq = cpu_to_le16(typeReq);

	request->wValue = cpu_to_le16(wValue);

	request->wIndex = cpu_to_le16(wIndex);

	request->wLength = cpu_to_le16(wLength);



	ret = gb_operation_request_send_sync(operation);

	if (ret)

		goto out;



	// FIXME - buf needs to come back in struct gb_usb_hub_control_response

	// for some types of requests, depending on typeReq.  Do we do this in a

	// "generic" way, or only ask for a response for the ones we "know" need

	// a response (a small subset of all valid typeReq, thankfully.)

	ret = gb_operation_sync(dev->connection, GB_USB_TYPE_HUB_CONTROL,

				&request, sizeof(request), NULL, 0);

	if (wLength) {

		/* Greybus core has verified response size */

		response = operation->response->payload;

		memcpy(buf, response->buf, wLength);

	}

out:

	gb_operation_put(operation);



	return ret;

}



static struct hc_driver usb_gb_hc_driver = {

	.description = "greybus_usb",

	.product_desc = "GB-Bridge USB Controller", /* TODO: Get this from GPB ?*/

	.flags = HCD_MEMORY | HCD_USB2, /* FIXME: Get this from GPB */

	.description = "greybus-hcd",

	.product_desc = "Greybus USB Host Controller",

	.hcd_priv_size = sizeof(struct gb_usb_device),



	.flags = HCD_USB2,



	.start = hcd_start,

	.stop = hcd_stop,



	.urb_enqueue = urb_enqueue,

	.urb_dequeue = urb_dequeue,

	.endpoint_disable = endpoint_disable,

	.endpoint_reset = endpoint_reset,



	.get_frame_number = get_frame_number,

	.hub_status_data = hub_status_data,

	.hub_control = hub_control,

};



#if 0

static inline void gb_usb_handle_get_frame_number(struct gbuf *gbuf)

{

	__le32 frame_num;

	const size_t packet_size = sizeof(struct gb_usb_header) +

				   sizeof(frame_num);

	struct gb_usb_header* hdr = gbuf->transfer_buffer;



	if (le16_to_cpu(hdr->size) != packet_size) {

		pr_err("%s(): dropping packet too small\n", __func__);

		return;

	}



	frame_num = (__le32) ((char*) gbuf->transfer_buffer +

			      sizeof(struct gb_usb_header));

	atomic_set(&frame_number, le32_to_cpu(frame_num));

}



static inline void gb_usb_handle_hubs_status_data(struct gbuf *gbuf)

{

	struct gb_usb_hub_status *new_hubstatus, *hubstatus;

	struct gb_usb_header* hdr = gbuf->transfer_buffer;

	const size_t min_packet_size = sizeof(struct gb_usb_header) +

				       sizeof(struct gb_usb_hub_status);

	unsigned long flags;



	if (le16_to_cpu(hdr->size) < min_packet_size) {

		pr_err("%s(): dropping packet too small\n", __func__);

		return;

	}



	hubstatus = (struct gb_usb_hub_status*) ((char*) gbuf->transfer_buffer

						+ sizeof(struct gb_usb_header));



	if (le16_to_cpu(hdr->size) != min_packet_size + hubstatus->buf_size) {

		pr_err("%s(): invalid packet size, dropping packet\n",

		       __func__);

		return;

	}



	new_hubstatus = kmalloc(hubstatus->buf_size, GFP_KERNEL);

	memcpy(&new_hubstatus, hubstatus, hubstatus->buf_size);



	spin_lock_irqsave(&hub_status_lock, flags);

	hubstatus = hub_status;

	hub_status = new_hubstatus;

	spin_unlock_irqrestore(&hub_status_lock, flags);



	kfree(hubstatus);

}



static void gb_usb_in_handler(struct gbuf *gbuf)

{

	struct gb_usb_header* hdr = gbuf->transfer_buffer;



	switch (hdr->type) {

		case GB_USB_TYPE_GET_FRAME_NUMBER:

			gb_usb_handle_get_frame_number(gbuf);

			break;



		case GB_USB_TYPE_HUB_STATUS_DATA:

			gb_usb_handle_hubs_status_data(gbuf);

			break;

	}

}

#endif



static int gb_usb_connection_init(struct gb_connection *connection)

{

	struct device *dev = &connection->dev;

	struct gb_usb_device *gb_usb_dev;

	struct usb_hcd *hcd;



	int retval;



	gb_usb_dev = kzalloc(sizeof(*gb_usb_dev), GFP_KERNEL);

	if (!gb_usb_dev)

	hcd = usb_create_hcd(&usb_gb_hc_driver, dev, dev_name(dev));

	if (!hcd)

		return -ENOMEM;



	gb_usb_dev = to_gb_usb_device(hcd);

	gb_usb_dev->connection = connection;

	connection->private = gb_usb_dev;



	/* Check for compatible protocol version */

	retval = get_version(gb_usb_dev);

	if (retval)

		goto error_create_hcd;

		goto err_put_hcd;



	gb_usb_dev->hcd = usb_create_hcd(&usb_gb_hc_driver, dev, dev_name(dev));

	if (!gb_usb_dev->hcd) {

		retval = -ENODEV;

		goto error_create_hcd;

	}

	hcd->has_tt = 1;



	gb_usb_dev->hcd->has_tt = 1;

	gb_usb_dev->hcd->hcd_priv[0] = (unsigned long) gb_usb_dev;

	/*

	 * FIXME: The USB bridged-PHY protocol driver depends on changes to

	 *        USB core which are not yet upstream.

	 *

	 *        Disable for now.

	 */

	if (1) {

		dev_warn(&connection->dev, "USB protocol disabled\n");

		retval = -EPROTONOSUPPORT;

		goto err_put_hcd;

	}



	retval = usb_add_hcd(gb_usb_dev->hcd, 0, 0);

	retval = usb_add_hcd(hcd, 0, 0);

	if (retval)

		goto error_add_hcd;

		goto err_put_hcd;



	return 0;

error_add_hcd:

	usb_put_hcd(gb_usb_dev->hcd);

error_create_hcd:

	kfree(gb_usb_dev);



err_put_hcd:

	usb_put_hcd(hcd);



	return retval;

}



static void gb_usb_connection_exit(struct gb_connection *connection)

{

	// FIXME - tear everything down!

	struct gb_usb_device *gb_usb_dev = connection->private;

	struct usb_hcd *hcd = gb_usb_device_to_hcd(gb_usb_dev);



	usb_remove_hcd(hcd);

	usb_put_hcd(hcd);

}



static struct gb_protocol usb_protocol = {