ep0.c 21 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870
  1. /**
  2. * ep0.c - DesignWare USB3 DRD Controller Endpoint 0 Handling
  3. *
  4. * Copyright (C) 2010-2011 Texas Instruments Incorporated - http://www.ti.com
  5. *
  6. * Authors: Felipe Balbi <balbi@ti.com>,
  7. * Sebastian Andrzej Siewior <bigeasy@linutronix.de>
  8. *
  9. * Redistribution and use in source and binary forms, with or without
  10. * modification, are permitted provided that the following conditions
  11. * are met:
  12. * 1. Redistributions of source code must retain the above copyright
  13. * notice, this list of conditions, and the following disclaimer,
  14. * without modification.
  15. * 2. Redistributions in binary form must reproduce the above copyright
  16. * notice, this list of conditions and the following disclaimer in the
  17. * documentation and/or other materials provided with the distribution.
  18. * 3. The names of the above-listed copyright holders may not be used
  19. * to endorse or promote products derived from this software without
  20. * specific prior written permission.
  21. *
  22. * ALTERNATIVELY, this software may be distributed under the terms of the
  23. * GNU General Public License ("GPL") version 2, as published by the Free
  24. * Software Foundation.
  25. *
  26. * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
  27. * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
  28. * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  29. * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
  30. * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
  31. * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
  32. * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
  33. * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
  34. * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
  35. * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
  36. * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  37. */
  38. #include <linux/kernel.h>
  39. #include <linux/slab.h>
  40. #include <linux/spinlock.h>
  41. #include <linux/platform_device.h>
  42. #include <linux/pm_runtime.h>
  43. #include <linux/interrupt.h>
  44. #include <linux/io.h>
  45. #include <linux/list.h>
  46. #include <linux/dma-mapping.h>
  47. #include <linux/usb/ch9.h>
  48. #include <linux/usb/gadget.h>
  49. #include <linux/usb/composite.h>
  50. #include "core.h"
  51. #include "gadget.h"
  52. #include "io.h"
  53. static void dwc3_ep0_do_control_status(struct dwc3 *dwc, u32 epnum);
  54. static const char *dwc3_ep0_state_string(enum dwc3_ep0_state state)
  55. {
  56. switch (state) {
  57. case EP0_UNCONNECTED:
  58. return "Unconnected";
  59. case EP0_SETUP_PHASE:
  60. return "Setup Phase";
  61. case EP0_DATA_PHASE:
  62. return "Data Phase";
  63. case EP0_STATUS_PHASE:
  64. return "Status Phase";
  65. default:
  66. return "UNKNOWN";
  67. }
  68. }
  69. static int dwc3_ep0_start_trans(struct dwc3 *dwc, u8 epnum, dma_addr_t buf_dma,
  70. u32 len, u32 type)
  71. {
  72. struct dwc3_gadget_ep_cmd_params params;
  73. struct dwc3_trb *trb;
  74. struct dwc3_ep *dep;
  75. int ret;
  76. dep = dwc->eps[epnum];
  77. if (dep->flags & DWC3_EP_BUSY) {
  78. dev_vdbg(dwc->dev, "%s: still busy\n", dep->name);
  79. return 0;
  80. }
  81. trb = dwc->ep0_trb;
  82. trb->bpl = lower_32_bits(buf_dma);
  83. trb->bph = upper_32_bits(buf_dma);
  84. trb->size = len;
  85. trb->ctrl = type;
  86. trb->ctrl |= (DWC3_TRB_CTRL_HWO
  87. | DWC3_TRB_CTRL_LST
  88. | DWC3_TRB_CTRL_IOC
  89. | DWC3_TRB_CTRL_ISP_IMI);
  90. memset(&params, 0, sizeof(params));
  91. params.param0 = upper_32_bits(dwc->ep0_trb_addr);
  92. params.param1 = lower_32_bits(dwc->ep0_trb_addr);
  93. ret = dwc3_send_gadget_ep_cmd(dwc, dep->number,
  94. DWC3_DEPCMD_STARTTRANSFER, &params);
  95. if (ret < 0) {
  96. dev_dbg(dwc->dev, "failed to send STARTTRANSFER command\n");
  97. return ret;
  98. }
  99. dep->flags |= DWC3_EP_BUSY;
  100. dep->res_trans_idx = dwc3_gadget_ep_get_transfer_index(dwc,
  101. dep->number);
  102. dwc->ep0_next_event = DWC3_EP0_COMPLETE;
  103. return 0;
  104. }
  105. static int __dwc3_gadget_ep0_queue(struct dwc3_ep *dep,
  106. struct dwc3_request *req)
  107. {
  108. struct dwc3 *dwc = dep->dwc;
  109. int ret = 0;
  110. req->request.actual = 0;
  111. req->request.status = -EINPROGRESS;
  112. req->epnum = dep->number;
  113. list_add_tail(&req->list, &dep->request_list);
  114. /*
  115. * Gadget driver might not be quick enough to queue a request
  116. * before we get a Transfer Not Ready event on this endpoint.
  117. *
  118. * In that case, we will set DWC3_EP_PENDING_REQUEST. When that
  119. * flag is set, it's telling us that as soon as Gadget queues the
  120. * required request, we should kick the transfer here because the
  121. * IRQ we were waiting for is long gone.
  122. */
  123. if (dep->flags & DWC3_EP_PENDING_REQUEST) {
  124. unsigned direction;
  125. direction = !!(dep->flags & DWC3_EP0_DIR_IN);
  126. if (dwc->ep0state != EP0_DATA_PHASE) {
  127. dev_WARN(dwc->dev, "Unexpected pending request\n");
  128. return 0;
  129. }
  130. ret = dwc3_ep0_start_trans(dwc, direction,
  131. req->request.dma, req->request.length,
  132. DWC3_TRBCTL_CONTROL_DATA);
  133. dep->flags &= ~(DWC3_EP_PENDING_REQUEST |
  134. DWC3_EP0_DIR_IN);
  135. } else if (dwc->delayed_status) {
  136. dwc->delayed_status = false;
  137. if (dwc->ep0state == EP0_STATUS_PHASE)
  138. dwc3_ep0_do_control_status(dwc, 1);
  139. else
  140. dev_dbg(dwc->dev, "too early for delayed status\n");
  141. }
  142. return ret;
  143. }
  144. int dwc3_gadget_ep0_queue(struct usb_ep *ep, struct usb_request *request,
  145. gfp_t gfp_flags)
  146. {
  147. struct dwc3_request *req = to_dwc3_request(request);
  148. struct dwc3_ep *dep = to_dwc3_ep(ep);
  149. struct dwc3 *dwc = dep->dwc;
  150. unsigned long flags;
  151. int ret;
  152. spin_lock_irqsave(&dwc->lock, flags);
  153. if (!dep->desc) {
  154. dev_dbg(dwc->dev, "trying to queue request %p to disabled %s\n",
  155. request, dep->name);
  156. ret = -ESHUTDOWN;
  157. goto out;
  158. }
  159. /* we share one TRB for ep0/1 */
  160. if (!list_empty(&dep->request_list)) {
  161. ret = -EBUSY;
  162. goto out;
  163. }
  164. dev_vdbg(dwc->dev, "queueing request %p to %s length %d, state '%s'\n",
  165. request, dep->name, request->length,
  166. dwc3_ep0_state_string(dwc->ep0state));
  167. ret = __dwc3_gadget_ep0_queue(dep, req);
  168. out:
  169. spin_unlock_irqrestore(&dwc->lock, flags);
  170. return ret;
  171. }
  172. static void dwc3_ep0_stall_and_restart(struct dwc3 *dwc)
  173. {
  174. struct dwc3_ep *dep = dwc->eps[0];
  175. /* stall is always issued on EP0 */
  176. __dwc3_gadget_ep_set_halt(dep, 1);
  177. dep->flags = DWC3_EP_ENABLED;
  178. dwc->delayed_status = false;
  179. if (!list_empty(&dep->request_list)) {
  180. struct dwc3_request *req;
  181. req = next_request(&dep->request_list);
  182. dwc3_gadget_giveback(dep, req, -ECONNRESET);
  183. }
  184. dwc->ep0state = EP0_SETUP_PHASE;
  185. dwc3_ep0_out_start(dwc);
  186. }
  187. void dwc3_ep0_out_start(struct dwc3 *dwc)
  188. {
  189. int ret;
  190. ret = dwc3_ep0_start_trans(dwc, 0, dwc->ctrl_req_addr, 8,
  191. DWC3_TRBCTL_CONTROL_SETUP);
  192. WARN_ON(ret < 0);
  193. }
  194. static struct dwc3_ep *dwc3_wIndex_to_dep(struct dwc3 *dwc, __le16 wIndex_le)
  195. {
  196. struct dwc3_ep *dep;
  197. u32 windex = le16_to_cpu(wIndex_le);
  198. u32 epnum;
  199. epnum = (windex & USB_ENDPOINT_NUMBER_MASK) << 1;
  200. if ((windex & USB_ENDPOINT_DIR_MASK) == USB_DIR_IN)
  201. epnum |= 1;
  202. dep = dwc->eps[epnum];
  203. if (dep->flags & DWC3_EP_ENABLED)
  204. return dep;
  205. return NULL;
  206. }
  207. static void dwc3_ep0_status_cmpl(struct usb_ep *ep, struct usb_request *req)
  208. {
  209. }
  210. /*
  211. * ch 9.4.5
  212. */
  213. static int dwc3_ep0_handle_status(struct dwc3 *dwc,
  214. struct usb_ctrlrequest *ctrl)
  215. {
  216. struct dwc3_ep *dep;
  217. u32 recip;
  218. u16 usb_status = 0;
  219. __le16 *response_pkt;
  220. recip = ctrl->bRequestType & USB_RECIP_MASK;
  221. switch (recip) {
  222. case USB_RECIP_DEVICE:
  223. /*
  224. * We are self-powered. U1/U2/LTM will be set later
  225. * once we handle this states. RemoteWakeup is 0 on SS
  226. */
  227. usb_status |= dwc->is_selfpowered << USB_DEVICE_SELF_POWERED;
  228. break;
  229. case USB_RECIP_INTERFACE:
  230. /*
  231. * Function Remote Wake Capable D0
  232. * Function Remote Wakeup D1
  233. */
  234. break;
  235. case USB_RECIP_ENDPOINT:
  236. dep = dwc3_wIndex_to_dep(dwc, ctrl->wIndex);
  237. if (!dep)
  238. return -EINVAL;
  239. if (dep->flags & DWC3_EP_STALL)
  240. usb_status = 1 << USB_ENDPOINT_HALT;
  241. break;
  242. default:
  243. return -EINVAL;
  244. };
  245. response_pkt = (__le16 *) dwc->setup_buf;
  246. *response_pkt = cpu_to_le16(usb_status);
  247. dep = dwc->eps[0];
  248. dwc->ep0_usb_req.dep = dep;
  249. dwc->ep0_usb_req.request.length = sizeof(*response_pkt);
  250. dwc->ep0_usb_req.request.buf = dwc->setup_buf;
  251. dwc->ep0_usb_req.request.complete = dwc3_ep0_status_cmpl;
  252. return __dwc3_gadget_ep0_queue(dep, &dwc->ep0_usb_req);
  253. }
  254. static int dwc3_ep0_handle_feature(struct dwc3 *dwc,
  255. struct usb_ctrlrequest *ctrl, int set)
  256. {
  257. struct dwc3_ep *dep;
  258. u32 recip;
  259. u32 wValue;
  260. u32 wIndex;
  261. int ret;
  262. wValue = le16_to_cpu(ctrl->wValue);
  263. wIndex = le16_to_cpu(ctrl->wIndex);
  264. recip = ctrl->bRequestType & USB_RECIP_MASK;
  265. switch (recip) {
  266. case USB_RECIP_DEVICE:
  267. /*
  268. * 9.4.1 says only only for SS, in AddressState only for
  269. * default control pipe
  270. */
  271. switch (wValue) {
  272. case USB_DEVICE_U1_ENABLE:
  273. case USB_DEVICE_U2_ENABLE:
  274. case USB_DEVICE_LTM_ENABLE:
  275. if (dwc->dev_state != DWC3_CONFIGURED_STATE)
  276. return -EINVAL;
  277. if (dwc->speed != DWC3_DSTS_SUPERSPEED)
  278. return -EINVAL;
  279. }
  280. /* XXX add U[12] & LTM */
  281. switch (wValue) {
  282. case USB_DEVICE_REMOTE_WAKEUP:
  283. break;
  284. case USB_DEVICE_U1_ENABLE:
  285. break;
  286. case USB_DEVICE_U2_ENABLE:
  287. break;
  288. case USB_DEVICE_LTM_ENABLE:
  289. break;
  290. case USB_DEVICE_TEST_MODE:
  291. if ((wIndex & 0xff) != 0)
  292. return -EINVAL;
  293. if (!set)
  294. return -EINVAL;
  295. dwc->test_mode_nr = wIndex >> 8;
  296. dwc->test_mode = true;
  297. }
  298. break;
  299. case USB_RECIP_INTERFACE:
  300. switch (wValue) {
  301. case USB_INTRF_FUNC_SUSPEND:
  302. if (wIndex & USB_INTRF_FUNC_SUSPEND_LP)
  303. /* XXX enable Low power suspend */
  304. ;
  305. if (wIndex & USB_INTRF_FUNC_SUSPEND_RW)
  306. /* XXX enable remote wakeup */
  307. ;
  308. break;
  309. default:
  310. return -EINVAL;
  311. }
  312. break;
  313. case USB_RECIP_ENDPOINT:
  314. switch (wValue) {
  315. case USB_ENDPOINT_HALT:
  316. dep = dwc3_wIndex_to_dep(dwc, wIndex);
  317. if (!dep)
  318. return -EINVAL;
  319. ret = __dwc3_gadget_ep_set_halt(dep, set);
  320. if (ret)
  321. return -EINVAL;
  322. break;
  323. default:
  324. return -EINVAL;
  325. }
  326. break;
  327. default:
  328. return -EINVAL;
  329. };
  330. return 0;
  331. }
  332. static int dwc3_ep0_set_address(struct dwc3 *dwc, struct usb_ctrlrequest *ctrl)
  333. {
  334. u32 addr;
  335. u32 reg;
  336. addr = le16_to_cpu(ctrl->wValue);
  337. if (addr > 127) {
  338. dev_dbg(dwc->dev, "invalid device address %d\n", addr);
  339. return -EINVAL;
  340. }
  341. if (dwc->dev_state == DWC3_CONFIGURED_STATE) {
  342. dev_dbg(dwc->dev, "trying to set address when configured\n");
  343. return -EINVAL;
  344. }
  345. reg = dwc3_readl(dwc->regs, DWC3_DCFG);
  346. reg &= ~(DWC3_DCFG_DEVADDR_MASK);
  347. reg |= DWC3_DCFG_DEVADDR(addr);
  348. dwc3_writel(dwc->regs, DWC3_DCFG, reg);
  349. if (addr)
  350. dwc->dev_state = DWC3_ADDRESS_STATE;
  351. else
  352. dwc->dev_state = DWC3_DEFAULT_STATE;
  353. return 0;
  354. }
  355. static int dwc3_ep0_delegate_req(struct dwc3 *dwc, struct usb_ctrlrequest *ctrl)
  356. {
  357. int ret;
  358. spin_unlock(&dwc->lock);
  359. ret = dwc->gadget_driver->setup(&dwc->gadget, ctrl);
  360. spin_lock(&dwc->lock);
  361. return ret;
  362. }
  363. static int dwc3_ep0_set_config(struct dwc3 *dwc, struct usb_ctrlrequest *ctrl)
  364. {
  365. u32 cfg;
  366. int ret;
  367. dwc->start_config_issued = false;
  368. cfg = le16_to_cpu(ctrl->wValue);
  369. switch (dwc->dev_state) {
  370. case DWC3_DEFAULT_STATE:
  371. return -EINVAL;
  372. break;
  373. case DWC3_ADDRESS_STATE:
  374. ret = dwc3_ep0_delegate_req(dwc, ctrl);
  375. /* if the cfg matches and the cfg is non zero */
  376. if (cfg && (!ret || (ret == USB_GADGET_DELAYED_STATUS))) {
  377. dwc->dev_state = DWC3_CONFIGURED_STATE;
  378. dwc->resize_fifos = true;
  379. dev_dbg(dwc->dev, "resize fifos flag SET\n");
  380. }
  381. break;
  382. case DWC3_CONFIGURED_STATE:
  383. ret = dwc3_ep0_delegate_req(dwc, ctrl);
  384. if (!cfg)
  385. dwc->dev_state = DWC3_ADDRESS_STATE;
  386. break;
  387. default:
  388. ret = -EINVAL;
  389. }
  390. return ret;
  391. }
  392. static int dwc3_ep0_std_request(struct dwc3 *dwc, struct usb_ctrlrequest *ctrl)
  393. {
  394. int ret;
  395. switch (ctrl->bRequest) {
  396. case USB_REQ_GET_STATUS:
  397. dev_vdbg(dwc->dev, "USB_REQ_GET_STATUS\n");
  398. ret = dwc3_ep0_handle_status(dwc, ctrl);
  399. break;
  400. case USB_REQ_CLEAR_FEATURE:
  401. dev_vdbg(dwc->dev, "USB_REQ_CLEAR_FEATURE\n");
  402. ret = dwc3_ep0_handle_feature(dwc, ctrl, 0);
  403. break;
  404. case USB_REQ_SET_FEATURE:
  405. dev_vdbg(dwc->dev, "USB_REQ_SET_FEATURE\n");
  406. ret = dwc3_ep0_handle_feature(dwc, ctrl, 1);
  407. break;
  408. case USB_REQ_SET_ADDRESS:
  409. dev_vdbg(dwc->dev, "USB_REQ_SET_ADDRESS\n");
  410. ret = dwc3_ep0_set_address(dwc, ctrl);
  411. break;
  412. case USB_REQ_SET_CONFIGURATION:
  413. dev_vdbg(dwc->dev, "USB_REQ_SET_CONFIGURATION\n");
  414. ret = dwc3_ep0_set_config(dwc, ctrl);
  415. break;
  416. default:
  417. dev_vdbg(dwc->dev, "Forwarding to gadget driver\n");
  418. ret = dwc3_ep0_delegate_req(dwc, ctrl);
  419. break;
  420. };
  421. return ret;
  422. }
  423. static void dwc3_ep0_inspect_setup(struct dwc3 *dwc,
  424. const struct dwc3_event_depevt *event)
  425. {
  426. struct usb_ctrlrequest *ctrl = dwc->ctrl_req;
  427. int ret;
  428. u32 len;
  429. if (!dwc->gadget_driver)
  430. goto err;
  431. len = le16_to_cpu(ctrl->wLength);
  432. if (!len) {
  433. dwc->three_stage_setup = false;
  434. dwc->ep0_expect_in = false;
  435. dwc->ep0_next_event = DWC3_EP0_NRDY_STATUS;
  436. } else {
  437. dwc->three_stage_setup = true;
  438. dwc->ep0_expect_in = !!(ctrl->bRequestType & USB_DIR_IN);
  439. dwc->ep0_next_event = DWC3_EP0_NRDY_DATA;
  440. }
  441. if ((ctrl->bRequestType & USB_TYPE_MASK) == USB_TYPE_STANDARD)
  442. ret = dwc3_ep0_std_request(dwc, ctrl);
  443. else
  444. ret = dwc3_ep0_delegate_req(dwc, ctrl);
  445. if (ret == USB_GADGET_DELAYED_STATUS)
  446. dwc->delayed_status = true;
  447. if (ret >= 0)
  448. return;
  449. err:
  450. dwc3_ep0_stall_and_restart(dwc);
  451. }
  452. static void dwc3_ep0_complete_data(struct dwc3 *dwc,
  453. const struct dwc3_event_depevt *event)
  454. {
  455. struct dwc3_request *r = NULL;
  456. struct usb_request *ur;
  457. struct dwc3_trb *trb;
  458. struct dwc3_ep *ep0;
  459. u32 transferred;
  460. u32 length;
  461. u8 epnum;
  462. epnum = event->endpoint_number;
  463. ep0 = dwc->eps[0];
  464. dwc->ep0_next_event = DWC3_EP0_NRDY_STATUS;
  465. r = next_request(&ep0->request_list);
  466. ur = &r->request;
  467. trb = dwc->ep0_trb;
  468. length = trb->size & DWC3_TRB_SIZE_MASK;
  469. if (dwc->ep0_bounced) {
  470. unsigned transfer_size = ur->length;
  471. unsigned maxp = ep0->endpoint.maxpacket;
  472. transfer_size += (maxp - (transfer_size % maxp));
  473. transferred = min_t(u32, ur->length,
  474. transfer_size - length);
  475. memcpy(ur->buf, dwc->ep0_bounce, transferred);
  476. dwc->ep0_bounced = false;
  477. } else {
  478. transferred = ur->length - length;
  479. }
  480. ur->actual += transferred;
  481. if ((epnum & 1) && ur->actual < ur->length) {
  482. /* for some reason we did not get everything out */
  483. dwc3_ep0_stall_and_restart(dwc);
  484. } else {
  485. /*
  486. * handle the case where we have to send a zero packet. This
  487. * seems to be case when req.length > maxpacket. Could it be?
  488. */
  489. if (r)
  490. dwc3_gadget_giveback(ep0, r, 0);
  491. }
  492. }
  493. static void dwc3_ep0_complete_req(struct dwc3 *dwc,
  494. const struct dwc3_event_depevt *event)
  495. {
  496. struct dwc3_request *r;
  497. struct dwc3_ep *dep;
  498. dep = dwc->eps[0];
  499. if (!list_empty(&dep->request_list)) {
  500. r = next_request(&dep->request_list);
  501. dwc3_gadget_giveback(dep, r, 0);
  502. }
  503. if (dwc->test_mode) {
  504. int ret;
  505. ret = dwc3_gadget_set_test_mode(dwc, dwc->test_mode_nr);
  506. if (ret < 0) {
  507. dev_dbg(dwc->dev, "Invalid Test #%d\n",
  508. dwc->test_mode_nr);
  509. dwc3_ep0_stall_and_restart(dwc);
  510. }
  511. }
  512. dwc->ep0state = EP0_SETUP_PHASE;
  513. dwc3_ep0_out_start(dwc);
  514. }
  515. static void dwc3_ep0_xfer_complete(struct dwc3 *dwc,
  516. const struct dwc3_event_depevt *event)
  517. {
  518. struct dwc3_ep *dep = dwc->eps[event->endpoint_number];
  519. dep->flags &= ~DWC3_EP_BUSY;
  520. dep->res_trans_idx = 0;
  521. dwc->setup_packet_pending = false;
  522. switch (dwc->ep0state) {
  523. case EP0_SETUP_PHASE:
  524. dev_vdbg(dwc->dev, "Inspecting Setup Bytes\n");
  525. dwc3_ep0_inspect_setup(dwc, event);
  526. break;
  527. case EP0_DATA_PHASE:
  528. dev_vdbg(dwc->dev, "Data Phase\n");
  529. dwc3_ep0_complete_data(dwc, event);
  530. break;
  531. case EP0_STATUS_PHASE:
  532. dev_vdbg(dwc->dev, "Status Phase\n");
  533. dwc3_ep0_complete_req(dwc, event);
  534. break;
  535. default:
  536. WARN(true, "UNKNOWN ep0state %d\n", dwc->ep0state);
  537. }
  538. }
  539. static void dwc3_ep0_do_control_setup(struct dwc3 *dwc,
  540. const struct dwc3_event_depevt *event)
  541. {
  542. dwc3_ep0_out_start(dwc);
  543. }
  544. static void dwc3_ep0_do_control_data(struct dwc3 *dwc,
  545. const struct dwc3_event_depevt *event)
  546. {
  547. struct dwc3_ep *dep;
  548. struct dwc3_request *req;
  549. int ret;
  550. dep = dwc->eps[0];
  551. if (list_empty(&dep->request_list)) {
  552. dev_vdbg(dwc->dev, "pending request for EP0 Data phase\n");
  553. dep->flags |= DWC3_EP_PENDING_REQUEST;
  554. if (event->endpoint_number)
  555. dep->flags |= DWC3_EP0_DIR_IN;
  556. return;
  557. }
  558. req = next_request(&dep->request_list);
  559. req->direction = !!event->endpoint_number;
  560. if (req->request.length == 0) {
  561. ret = dwc3_ep0_start_trans(dwc, event->endpoint_number,
  562. dwc->ctrl_req_addr, 0,
  563. DWC3_TRBCTL_CONTROL_DATA);
  564. } else if ((req->request.length % dep->endpoint.maxpacket)
  565. && (event->endpoint_number == 0)) {
  566. ret = usb_gadget_map_request(&dwc->gadget, &req->request,
  567. event->endpoint_number);
  568. if (ret) {
  569. dev_dbg(dwc->dev, "failed to map request\n");
  570. return;
  571. }
  572. WARN_ON(req->request.length > dep->endpoint.maxpacket);
  573. dwc->ep0_bounced = true;
  574. /*
  575. * REVISIT in case request length is bigger than EP0
  576. * wMaxPacketSize, we will need two chained TRBs to handle
  577. * the transfer.
  578. */
  579. ret = dwc3_ep0_start_trans(dwc, event->endpoint_number,
  580. dwc->ep0_bounce_addr, dep->endpoint.maxpacket,
  581. DWC3_TRBCTL_CONTROL_DATA);
  582. } else {
  583. ret = usb_gadget_map_request(&dwc->gadget, &req->request,
  584. event->endpoint_number);
  585. if (ret) {
  586. dev_dbg(dwc->dev, "failed to map request\n");
  587. return;
  588. }
  589. ret = dwc3_ep0_start_trans(dwc, event->endpoint_number,
  590. req->request.dma, req->request.length,
  591. DWC3_TRBCTL_CONTROL_DATA);
  592. }
  593. WARN_ON(ret < 0);
  594. }
  595. static int dwc3_ep0_start_control_status(struct dwc3_ep *dep)
  596. {
  597. struct dwc3 *dwc = dep->dwc;
  598. u32 type;
  599. type = dwc->three_stage_setup ? DWC3_TRBCTL_CONTROL_STATUS3
  600. : DWC3_TRBCTL_CONTROL_STATUS2;
  601. return dwc3_ep0_start_trans(dwc, dep->number,
  602. dwc->ctrl_req_addr, 0, type);
  603. }
  604. static void dwc3_ep0_do_control_status(struct dwc3 *dwc, u32 epnum)
  605. {
  606. struct dwc3_ep *dep = dwc->eps[epnum];
  607. if (dwc->resize_fifos) {
  608. dev_dbg(dwc->dev, "starting to resize fifos\n");
  609. dwc3_gadget_resize_tx_fifos(dwc);
  610. dwc->resize_fifos = 0;
  611. }
  612. WARN_ON(dwc3_ep0_start_control_status(dep));
  613. }
  614. static void dwc3_ep0_xfernotready(struct dwc3 *dwc,
  615. const struct dwc3_event_depevt *event)
  616. {
  617. dwc->setup_packet_pending = true;
  618. /*
  619. * This part is very tricky: If we has just handled
  620. * XferNotReady(Setup) and we're now expecting a
  621. * XferComplete but, instead, we receive another
  622. * XferNotReady(Setup), we should STALL and restart
  623. * the state machine.
  624. *
  625. * In all other cases, we just continue waiting
  626. * for the XferComplete event.
  627. *
  628. * We are a little bit unsafe here because we're
  629. * not trying to ensure that last event was, indeed,
  630. * XferNotReady(Setup).
  631. *
  632. * Still, we don't expect any condition where that
  633. * should happen and, even if it does, it would be
  634. * another error condition.
  635. */
  636. if (dwc->ep0_next_event == DWC3_EP0_COMPLETE) {
  637. switch (event->status) {
  638. case DEPEVT_STATUS_CONTROL_SETUP:
  639. dev_vdbg(dwc->dev, "Unexpected XferNotReady(Setup)\n");
  640. dwc3_ep0_stall_and_restart(dwc);
  641. break;
  642. case DEPEVT_STATUS_CONTROL_DATA:
  643. /* FALLTHROUGH */
  644. case DEPEVT_STATUS_CONTROL_STATUS:
  645. /* FALLTHROUGH */
  646. default:
  647. dev_vdbg(dwc->dev, "waiting for XferComplete\n");
  648. }
  649. return;
  650. }
  651. switch (event->status) {
  652. case DEPEVT_STATUS_CONTROL_SETUP:
  653. dev_vdbg(dwc->dev, "Control Setup\n");
  654. dwc->ep0state = EP0_SETUP_PHASE;
  655. dwc3_ep0_do_control_setup(dwc, event);
  656. break;
  657. case DEPEVT_STATUS_CONTROL_DATA:
  658. dev_vdbg(dwc->dev, "Control Data\n");
  659. dwc->ep0state = EP0_DATA_PHASE;
  660. if (dwc->ep0_next_event != DWC3_EP0_NRDY_DATA) {
  661. dev_vdbg(dwc->dev, "Expected %d got %d\n",
  662. dwc->ep0_next_event,
  663. DWC3_EP0_NRDY_DATA);
  664. dwc3_ep0_stall_and_restart(dwc);
  665. return;
  666. }
  667. /*
  668. * One of the possible error cases is when Host _does_
  669. * request for Data Phase, but it does so on the wrong
  670. * direction.
  671. *
  672. * Here, we already know ep0_next_event is DATA (see above),
  673. * so we only need to check for direction.
  674. */
  675. if (dwc->ep0_expect_in != event->endpoint_number) {
  676. dev_vdbg(dwc->dev, "Wrong direction for Data phase\n");
  677. dwc3_ep0_stall_and_restart(dwc);
  678. return;
  679. }
  680. dwc3_ep0_do_control_data(dwc, event);
  681. break;
  682. case DEPEVT_STATUS_CONTROL_STATUS:
  683. dev_vdbg(dwc->dev, "Control Status\n");
  684. dwc->ep0state = EP0_STATUS_PHASE;
  685. if (dwc->ep0_next_event != DWC3_EP0_NRDY_STATUS) {
  686. dev_vdbg(dwc->dev, "Expected %d got %d\n",
  687. dwc->ep0_next_event,
  688. DWC3_EP0_NRDY_STATUS);
  689. dwc3_ep0_stall_and_restart(dwc);
  690. return;
  691. }
  692. if (dwc->delayed_status) {
  693. WARN_ON_ONCE(event->endpoint_number != 1);
  694. dev_vdbg(dwc->dev, "Mass Storage delayed status\n");
  695. return;
  696. }
  697. dwc3_ep0_do_control_status(dwc, event->endpoint_number);
  698. }
  699. }
  700. void dwc3_ep0_interrupt(struct dwc3 *dwc,
  701. const struct dwc3_event_depevt *event)
  702. {
  703. u8 epnum = event->endpoint_number;
  704. dev_dbg(dwc->dev, "%s while ep%d%s in state '%s'\n",
  705. dwc3_ep_event_string(event->endpoint_event),
  706. epnum >> 1, (epnum & 1) ? "in" : "out",
  707. dwc3_ep0_state_string(dwc->ep0state));
  708. switch (event->endpoint_event) {
  709. case DWC3_DEPEVT_XFERCOMPLETE:
  710. dwc3_ep0_xfer_complete(dwc, event);
  711. break;
  712. case DWC3_DEPEVT_XFERNOTREADY:
  713. dwc3_ep0_xfernotready(dwc, event);
  714. break;
  715. case DWC3_DEPEVT_XFERINPROGRESS:
  716. case DWC3_DEPEVT_RXTXFIFOEVT:
  717. case DWC3_DEPEVT_STREAMEVT:
  718. case DWC3_DEPEVT_EPCMDCMPLT:
  719. break;
  720. }
  721. }