ep0.c 21 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873
  1. /**
  2. * ep0.c - DesignWare USB3 DRD Controller Endpoint 0 Handling
  3. *
  4. * Copyright (C) 2010-2011 Texas Instruments Incorporated - http://www.ti.com
  5. *
  6. * Authors: Felipe Balbi <balbi@ti.com>,
  7. * Sebastian Andrzej Siewior <bigeasy@linutronix.de>
  8. *
  9. * Redistribution and use in source and binary forms, with or without
  10. * modification, are permitted provided that the following conditions
  11. * are met:
  12. * 1. Redistributions of source code must retain the above copyright
  13. * notice, this list of conditions, and the following disclaimer,
  14. * without modification.
  15. * 2. Redistributions in binary form must reproduce the above copyright
  16. * notice, this list of conditions and the following disclaimer in the
  17. * documentation and/or other materials provided with the distribution.
  18. * 3. The names of the above-listed copyright holders may not be used
  19. * to endorse or promote products derived from this software without
  20. * specific prior written permission.
  21. *
  22. * ALTERNATIVELY, this software may be distributed under the terms of the
  23. * GNU General Public License ("GPL") version 2, as published by the Free
  24. * Software Foundation.
  25. *
  26. * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
  27. * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
  28. * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  29. * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
  30. * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
  31. * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
  32. * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
  33. * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
  34. * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
  35. * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
  36. * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  37. */
  38. #include <linux/kernel.h>
  39. #include <linux/slab.h>
  40. #include <linux/spinlock.h>
  41. #include <linux/platform_device.h>
  42. #include <linux/pm_runtime.h>
  43. #include <linux/interrupt.h>
  44. #include <linux/io.h>
  45. #include <linux/list.h>
  46. #include <linux/dma-mapping.h>
  47. #include <linux/usb/ch9.h>
  48. #include <linux/usb/gadget.h>
  49. #include <linux/usb/composite.h>
  50. #include "core.h"
  51. #include "gadget.h"
  52. #include "io.h"
  53. static void dwc3_ep0_do_control_status(struct dwc3 *dwc, u32 epnum);
  54. static const char *dwc3_ep0_state_string(enum dwc3_ep0_state state)
  55. {
  56. switch (state) {
  57. case EP0_UNCONNECTED:
  58. return "Unconnected";
  59. case EP0_SETUP_PHASE:
  60. return "Setup Phase";
  61. case EP0_DATA_PHASE:
  62. return "Data Phase";
  63. case EP0_STATUS_PHASE:
  64. return "Status Phase";
  65. default:
  66. return "UNKNOWN";
  67. }
  68. }
  69. static int dwc3_ep0_start_trans(struct dwc3 *dwc, u8 epnum, dma_addr_t buf_dma,
  70. u32 len, u32 type)
  71. {
  72. struct dwc3_gadget_ep_cmd_params params;
  73. struct dwc3_trb *trb;
  74. struct dwc3_ep *dep;
  75. int ret;
  76. dep = dwc->eps[epnum];
  77. if (dep->flags & DWC3_EP_BUSY) {
  78. dev_vdbg(dwc->dev, "%s: still busy\n", dep->name);
  79. return 0;
  80. }
  81. trb = dwc->ep0_trb;
  82. trb->bpl = lower_32_bits(buf_dma);
  83. trb->bph = upper_32_bits(buf_dma);
  84. trb->size = len;
  85. trb->ctrl = type;
  86. trb->ctrl |= (DWC3_TRB_CTRL_HWO
  87. | DWC3_TRB_CTRL_LST
  88. | DWC3_TRB_CTRL_IOC
  89. | DWC3_TRB_CTRL_ISP_IMI);
  90. memset(&params, 0, sizeof(params));
  91. params.param0 = upper_32_bits(dwc->ep0_trb_addr);
  92. params.param1 = lower_32_bits(dwc->ep0_trb_addr);
  93. ret = dwc3_send_gadget_ep_cmd(dwc, dep->number,
  94. DWC3_DEPCMD_STARTTRANSFER, &params);
  95. if (ret < 0) {
  96. dev_dbg(dwc->dev, "failed to send STARTTRANSFER command\n");
  97. return ret;
  98. }
  99. dep->flags |= DWC3_EP_BUSY;
  100. dep->res_trans_idx = dwc3_gadget_ep_get_transfer_index(dwc,
  101. dep->number);
  102. dwc->ep0_next_event = DWC3_EP0_COMPLETE;
  103. return 0;
  104. }
  105. static int __dwc3_gadget_ep0_queue(struct dwc3_ep *dep,
  106. struct dwc3_request *req)
  107. {
  108. struct dwc3 *dwc = dep->dwc;
  109. int ret = 0;
  110. req->request.actual = 0;
  111. req->request.status = -EINPROGRESS;
  112. req->epnum = dep->number;
  113. list_add_tail(&req->list, &dep->request_list);
  114. /*
  115. * Gadget driver might not be quick enough to queue a request
  116. * before we get a Transfer Not Ready event on this endpoint.
  117. *
  118. * In that case, we will set DWC3_EP_PENDING_REQUEST. When that
  119. * flag is set, it's telling us that as soon as Gadget queues the
  120. * required request, we should kick the transfer here because the
  121. * IRQ we were waiting for is long gone.
  122. */
  123. if (dep->flags & DWC3_EP_PENDING_REQUEST) {
  124. unsigned direction;
  125. direction = !!(dep->flags & DWC3_EP0_DIR_IN);
  126. if (dwc->ep0state != EP0_DATA_PHASE) {
  127. dev_WARN(dwc->dev, "Unexpected pending request\n");
  128. return 0;
  129. }
  130. ret = dwc3_ep0_start_trans(dwc, direction,
  131. req->request.dma, req->request.length,
  132. DWC3_TRBCTL_CONTROL_DATA);
  133. dep->flags &= ~(DWC3_EP_PENDING_REQUEST |
  134. DWC3_EP0_DIR_IN);
  135. } else if (dwc->delayed_status) {
  136. dwc->delayed_status = false;
  137. if (dwc->ep0state == EP0_STATUS_PHASE)
  138. dwc3_ep0_do_control_status(dwc, 1);
  139. else
  140. dev_dbg(dwc->dev, "too early for delayed status\n");
  141. }
  142. return ret;
  143. }
  144. int dwc3_gadget_ep0_queue(struct usb_ep *ep, struct usb_request *request,
  145. gfp_t gfp_flags)
  146. {
  147. struct dwc3_request *req = to_dwc3_request(request);
  148. struct dwc3_ep *dep = to_dwc3_ep(ep);
  149. struct dwc3 *dwc = dep->dwc;
  150. unsigned long flags;
  151. int ret;
  152. spin_lock_irqsave(&dwc->lock, flags);
  153. if (!dep->desc) {
  154. dev_dbg(dwc->dev, "trying to queue request %p to disabled %s\n",
  155. request, dep->name);
  156. ret = -ESHUTDOWN;
  157. goto out;
  158. }
  159. /* we share one TRB for ep0/1 */
  160. if (!list_empty(&dep->request_list)) {
  161. ret = -EBUSY;
  162. goto out;
  163. }
  164. dev_vdbg(dwc->dev, "queueing request %p to %s length %d, state '%s'\n",
  165. request, dep->name, request->length,
  166. dwc3_ep0_state_string(dwc->ep0state));
  167. ret = __dwc3_gadget_ep0_queue(dep, req);
  168. out:
  169. spin_unlock_irqrestore(&dwc->lock, flags);
  170. return ret;
  171. }
  172. static void dwc3_ep0_stall_and_restart(struct dwc3 *dwc)
  173. {
  174. struct dwc3_ep *dep = dwc->eps[0];
  175. /* stall is always issued on EP0 */
  176. __dwc3_gadget_ep_set_halt(dep, 1);
  177. dep->flags = DWC3_EP_ENABLED;
  178. dwc->delayed_status = false;
  179. if (!list_empty(&dep->request_list)) {
  180. struct dwc3_request *req;
  181. req = next_request(&dep->request_list);
  182. dwc3_gadget_giveback(dep, req, -ECONNRESET);
  183. }
  184. dwc->ep0state = EP0_SETUP_PHASE;
  185. dwc3_ep0_out_start(dwc);
  186. }
  187. void dwc3_ep0_out_start(struct dwc3 *dwc)
  188. {
  189. int ret;
  190. ret = dwc3_ep0_start_trans(dwc, 0, dwc->ctrl_req_addr, 8,
  191. DWC3_TRBCTL_CONTROL_SETUP);
  192. WARN_ON(ret < 0);
  193. }
  194. static struct dwc3_ep *dwc3_wIndex_to_dep(struct dwc3 *dwc, __le16 wIndex_le)
  195. {
  196. struct dwc3_ep *dep;
  197. u32 windex = le16_to_cpu(wIndex_le);
  198. u32 epnum;
  199. epnum = (windex & USB_ENDPOINT_NUMBER_MASK) << 1;
  200. if ((windex & USB_ENDPOINT_DIR_MASK) == USB_DIR_IN)
  201. epnum |= 1;
  202. dep = dwc->eps[epnum];
  203. if (dep->flags & DWC3_EP_ENABLED)
  204. return dep;
  205. return NULL;
  206. }
  207. static void dwc3_ep0_status_cmpl(struct usb_ep *ep, struct usb_request *req)
  208. {
  209. }
  210. /*
  211. * ch 9.4.5
  212. */
  213. static int dwc3_ep0_handle_status(struct dwc3 *dwc,
  214. struct usb_ctrlrequest *ctrl)
  215. {
  216. struct dwc3_ep *dep;
  217. u32 recip;
  218. u16 usb_status = 0;
  219. __le16 *response_pkt;
  220. recip = ctrl->bRequestType & USB_RECIP_MASK;
  221. switch (recip) {
  222. case USB_RECIP_DEVICE:
  223. /*
  224. * We are self-powered. U1/U2/LTM will be set later
  225. * once we handle this states. RemoteWakeup is 0 on SS
  226. */
  227. usb_status |= dwc->is_selfpowered << USB_DEVICE_SELF_POWERED;
  228. break;
  229. case USB_RECIP_INTERFACE:
  230. /*
  231. * Function Remote Wake Capable D0
  232. * Function Remote Wakeup D1
  233. */
  234. break;
  235. case USB_RECIP_ENDPOINT:
  236. dep = dwc3_wIndex_to_dep(dwc, ctrl->wIndex);
  237. if (!dep)
  238. return -EINVAL;
  239. if (dep->flags & DWC3_EP_STALL)
  240. usb_status = 1 << USB_ENDPOINT_HALT;
  241. break;
  242. default:
  243. return -EINVAL;
  244. };
  245. response_pkt = (__le16 *) dwc->setup_buf;
  246. *response_pkt = cpu_to_le16(usb_status);
  247. dep = dwc->eps[0];
  248. dwc->ep0_usb_req.dep = dep;
  249. dwc->ep0_usb_req.request.length = sizeof(*response_pkt);
  250. dwc->ep0_usb_req.request.buf = dwc->setup_buf;
  251. dwc->ep0_usb_req.request.complete = dwc3_ep0_status_cmpl;
  252. return __dwc3_gadget_ep0_queue(dep, &dwc->ep0_usb_req);
  253. }
  254. static int dwc3_ep0_handle_feature(struct dwc3 *dwc,
  255. struct usb_ctrlrequest *ctrl, int set)
  256. {
  257. struct dwc3_ep *dep;
  258. u32 recip;
  259. u32 wValue;
  260. u32 wIndex;
  261. int ret;
  262. wValue = le16_to_cpu(ctrl->wValue);
  263. wIndex = le16_to_cpu(ctrl->wIndex);
  264. recip = ctrl->bRequestType & USB_RECIP_MASK;
  265. switch (recip) {
  266. case USB_RECIP_DEVICE:
  267. /*
  268. * 9.4.1 says only only for SS, in AddressState only for
  269. * default control pipe
  270. */
  271. switch (wValue) {
  272. case USB_DEVICE_U1_ENABLE:
  273. case USB_DEVICE_U2_ENABLE:
  274. case USB_DEVICE_LTM_ENABLE:
  275. if (dwc->dev_state != DWC3_CONFIGURED_STATE)
  276. return -EINVAL;
  277. if (dwc->speed != DWC3_DSTS_SUPERSPEED)
  278. return -EINVAL;
  279. }
  280. /* XXX add U[12] & LTM */
  281. switch (wValue) {
  282. case USB_DEVICE_REMOTE_WAKEUP:
  283. break;
  284. case USB_DEVICE_U1_ENABLE:
  285. break;
  286. case USB_DEVICE_U2_ENABLE:
  287. break;
  288. case USB_DEVICE_LTM_ENABLE:
  289. break;
  290. case USB_DEVICE_TEST_MODE:
  291. if ((wIndex & 0xff) != 0)
  292. return -EINVAL;
  293. if (!set)
  294. return -EINVAL;
  295. dwc->test_mode_nr = wIndex >> 8;
  296. dwc->test_mode = true;
  297. break;
  298. default:
  299. return -EINVAL;
  300. }
  301. break;
  302. case USB_RECIP_INTERFACE:
  303. switch (wValue) {
  304. case USB_INTRF_FUNC_SUSPEND:
  305. if (wIndex & USB_INTRF_FUNC_SUSPEND_LP)
  306. /* XXX enable Low power suspend */
  307. ;
  308. if (wIndex & USB_INTRF_FUNC_SUSPEND_RW)
  309. /* XXX enable remote wakeup */
  310. ;
  311. break;
  312. default:
  313. return -EINVAL;
  314. }
  315. break;
  316. case USB_RECIP_ENDPOINT:
  317. switch (wValue) {
  318. case USB_ENDPOINT_HALT:
  319. dep = dwc3_wIndex_to_dep(dwc, wIndex);
  320. if (!dep)
  321. return -EINVAL;
  322. ret = __dwc3_gadget_ep_set_halt(dep, set);
  323. if (ret)
  324. return -EINVAL;
  325. break;
  326. default:
  327. return -EINVAL;
  328. }
  329. break;
  330. default:
  331. return -EINVAL;
  332. };
  333. return 0;
  334. }
  335. static int dwc3_ep0_set_address(struct dwc3 *dwc, struct usb_ctrlrequest *ctrl)
  336. {
  337. u32 addr;
  338. u32 reg;
  339. addr = le16_to_cpu(ctrl->wValue);
  340. if (addr > 127) {
  341. dev_dbg(dwc->dev, "invalid device address %d\n", addr);
  342. return -EINVAL;
  343. }
  344. if (dwc->dev_state == DWC3_CONFIGURED_STATE) {
  345. dev_dbg(dwc->dev, "trying to set address when configured\n");
  346. return -EINVAL;
  347. }
  348. reg = dwc3_readl(dwc->regs, DWC3_DCFG);
  349. reg &= ~(DWC3_DCFG_DEVADDR_MASK);
  350. reg |= DWC3_DCFG_DEVADDR(addr);
  351. dwc3_writel(dwc->regs, DWC3_DCFG, reg);
  352. if (addr)
  353. dwc->dev_state = DWC3_ADDRESS_STATE;
  354. else
  355. dwc->dev_state = DWC3_DEFAULT_STATE;
  356. return 0;
  357. }
  358. static int dwc3_ep0_delegate_req(struct dwc3 *dwc, struct usb_ctrlrequest *ctrl)
  359. {
  360. int ret;
  361. spin_unlock(&dwc->lock);
  362. ret = dwc->gadget_driver->setup(&dwc->gadget, ctrl);
  363. spin_lock(&dwc->lock);
  364. return ret;
  365. }
  366. static int dwc3_ep0_set_config(struct dwc3 *dwc, struct usb_ctrlrequest *ctrl)
  367. {
  368. u32 cfg;
  369. int ret;
  370. dwc->start_config_issued = false;
  371. cfg = le16_to_cpu(ctrl->wValue);
  372. switch (dwc->dev_state) {
  373. case DWC3_DEFAULT_STATE:
  374. return -EINVAL;
  375. break;
  376. case DWC3_ADDRESS_STATE:
  377. ret = dwc3_ep0_delegate_req(dwc, ctrl);
  378. /* if the cfg matches and the cfg is non zero */
  379. if (cfg && (!ret || (ret == USB_GADGET_DELAYED_STATUS))) {
  380. dwc->dev_state = DWC3_CONFIGURED_STATE;
  381. dwc->resize_fifos = true;
  382. dev_dbg(dwc->dev, "resize fifos flag SET\n");
  383. }
  384. break;
  385. case DWC3_CONFIGURED_STATE:
  386. ret = dwc3_ep0_delegate_req(dwc, ctrl);
  387. if (!cfg)
  388. dwc->dev_state = DWC3_ADDRESS_STATE;
  389. break;
  390. default:
  391. ret = -EINVAL;
  392. }
  393. return ret;
  394. }
  395. static int dwc3_ep0_std_request(struct dwc3 *dwc, struct usb_ctrlrequest *ctrl)
  396. {
  397. int ret;
  398. switch (ctrl->bRequest) {
  399. case USB_REQ_GET_STATUS:
  400. dev_vdbg(dwc->dev, "USB_REQ_GET_STATUS\n");
  401. ret = dwc3_ep0_handle_status(dwc, ctrl);
  402. break;
  403. case USB_REQ_CLEAR_FEATURE:
  404. dev_vdbg(dwc->dev, "USB_REQ_CLEAR_FEATURE\n");
  405. ret = dwc3_ep0_handle_feature(dwc, ctrl, 0);
  406. break;
  407. case USB_REQ_SET_FEATURE:
  408. dev_vdbg(dwc->dev, "USB_REQ_SET_FEATURE\n");
  409. ret = dwc3_ep0_handle_feature(dwc, ctrl, 1);
  410. break;
  411. case USB_REQ_SET_ADDRESS:
  412. dev_vdbg(dwc->dev, "USB_REQ_SET_ADDRESS\n");
  413. ret = dwc3_ep0_set_address(dwc, ctrl);
  414. break;
  415. case USB_REQ_SET_CONFIGURATION:
  416. dev_vdbg(dwc->dev, "USB_REQ_SET_CONFIGURATION\n");
  417. ret = dwc3_ep0_set_config(dwc, ctrl);
  418. break;
  419. default:
  420. dev_vdbg(dwc->dev, "Forwarding to gadget driver\n");
  421. ret = dwc3_ep0_delegate_req(dwc, ctrl);
  422. break;
  423. };
  424. return ret;
  425. }
  426. static void dwc3_ep0_inspect_setup(struct dwc3 *dwc,
  427. const struct dwc3_event_depevt *event)
  428. {
  429. struct usb_ctrlrequest *ctrl = dwc->ctrl_req;
  430. int ret;
  431. u32 len;
  432. if (!dwc->gadget_driver)
  433. goto err;
  434. len = le16_to_cpu(ctrl->wLength);
  435. if (!len) {
  436. dwc->three_stage_setup = false;
  437. dwc->ep0_expect_in = false;
  438. dwc->ep0_next_event = DWC3_EP0_NRDY_STATUS;
  439. } else {
  440. dwc->three_stage_setup = true;
  441. dwc->ep0_expect_in = !!(ctrl->bRequestType & USB_DIR_IN);
  442. dwc->ep0_next_event = DWC3_EP0_NRDY_DATA;
  443. }
  444. if ((ctrl->bRequestType & USB_TYPE_MASK) == USB_TYPE_STANDARD)
  445. ret = dwc3_ep0_std_request(dwc, ctrl);
  446. else
  447. ret = dwc3_ep0_delegate_req(dwc, ctrl);
  448. if (ret == USB_GADGET_DELAYED_STATUS)
  449. dwc->delayed_status = true;
  450. if (ret >= 0)
  451. return;
  452. err:
  453. dwc3_ep0_stall_and_restart(dwc);
  454. }
  455. static void dwc3_ep0_complete_data(struct dwc3 *dwc,
  456. const struct dwc3_event_depevt *event)
  457. {
  458. struct dwc3_request *r = NULL;
  459. struct usb_request *ur;
  460. struct dwc3_trb *trb;
  461. struct dwc3_ep *ep0;
  462. u32 transferred;
  463. u32 length;
  464. u8 epnum;
  465. epnum = event->endpoint_number;
  466. ep0 = dwc->eps[0];
  467. dwc->ep0_next_event = DWC3_EP0_NRDY_STATUS;
  468. r = next_request(&ep0->request_list);
  469. ur = &r->request;
  470. trb = dwc->ep0_trb;
  471. length = trb->size & DWC3_TRB_SIZE_MASK;
  472. if (dwc->ep0_bounced) {
  473. unsigned transfer_size = ur->length;
  474. unsigned maxp = ep0->endpoint.maxpacket;
  475. transfer_size += (maxp - (transfer_size % maxp));
  476. transferred = min_t(u32, ur->length,
  477. transfer_size - length);
  478. memcpy(ur->buf, dwc->ep0_bounce, transferred);
  479. dwc->ep0_bounced = false;
  480. } else {
  481. transferred = ur->length - length;
  482. }
  483. ur->actual += transferred;
  484. if ((epnum & 1) && ur->actual < ur->length) {
  485. /* for some reason we did not get everything out */
  486. dwc3_ep0_stall_and_restart(dwc);
  487. } else {
  488. /*
  489. * handle the case where we have to send a zero packet. This
  490. * seems to be case when req.length > maxpacket. Could it be?
  491. */
  492. if (r)
  493. dwc3_gadget_giveback(ep0, r, 0);
  494. }
  495. }
  496. static void dwc3_ep0_complete_req(struct dwc3 *dwc,
  497. const struct dwc3_event_depevt *event)
  498. {
  499. struct dwc3_request *r;
  500. struct dwc3_ep *dep;
  501. dep = dwc->eps[0];
  502. if (!list_empty(&dep->request_list)) {
  503. r = next_request(&dep->request_list);
  504. dwc3_gadget_giveback(dep, r, 0);
  505. }
  506. if (dwc->test_mode) {
  507. int ret;
  508. ret = dwc3_gadget_set_test_mode(dwc, dwc->test_mode_nr);
  509. if (ret < 0) {
  510. dev_dbg(dwc->dev, "Invalid Test #%d\n",
  511. dwc->test_mode_nr);
  512. dwc3_ep0_stall_and_restart(dwc);
  513. }
  514. }
  515. dwc->ep0state = EP0_SETUP_PHASE;
  516. dwc3_ep0_out_start(dwc);
  517. }
  518. static void dwc3_ep0_xfer_complete(struct dwc3 *dwc,
  519. const struct dwc3_event_depevt *event)
  520. {
  521. struct dwc3_ep *dep = dwc->eps[event->endpoint_number];
  522. dep->flags &= ~DWC3_EP_BUSY;
  523. dep->res_trans_idx = 0;
  524. dwc->setup_packet_pending = false;
  525. switch (dwc->ep0state) {
  526. case EP0_SETUP_PHASE:
  527. dev_vdbg(dwc->dev, "Inspecting Setup Bytes\n");
  528. dwc3_ep0_inspect_setup(dwc, event);
  529. break;
  530. case EP0_DATA_PHASE:
  531. dev_vdbg(dwc->dev, "Data Phase\n");
  532. dwc3_ep0_complete_data(dwc, event);
  533. break;
  534. case EP0_STATUS_PHASE:
  535. dev_vdbg(dwc->dev, "Status Phase\n");
  536. dwc3_ep0_complete_req(dwc, event);
  537. break;
  538. default:
  539. WARN(true, "UNKNOWN ep0state %d\n", dwc->ep0state);
  540. }
  541. }
  542. static void dwc3_ep0_do_control_setup(struct dwc3 *dwc,
  543. const struct dwc3_event_depevt *event)
  544. {
  545. dwc3_ep0_out_start(dwc);
  546. }
  547. static void dwc3_ep0_do_control_data(struct dwc3 *dwc,
  548. const struct dwc3_event_depevt *event)
  549. {
  550. struct dwc3_ep *dep;
  551. struct dwc3_request *req;
  552. int ret;
  553. dep = dwc->eps[0];
  554. if (list_empty(&dep->request_list)) {
  555. dev_vdbg(dwc->dev, "pending request for EP0 Data phase\n");
  556. dep->flags |= DWC3_EP_PENDING_REQUEST;
  557. if (event->endpoint_number)
  558. dep->flags |= DWC3_EP0_DIR_IN;
  559. return;
  560. }
  561. req = next_request(&dep->request_list);
  562. req->direction = !!event->endpoint_number;
  563. if (req->request.length == 0) {
  564. ret = dwc3_ep0_start_trans(dwc, event->endpoint_number,
  565. dwc->ctrl_req_addr, 0,
  566. DWC3_TRBCTL_CONTROL_DATA);
  567. } else if ((req->request.length % dep->endpoint.maxpacket)
  568. && (event->endpoint_number == 0)) {
  569. ret = usb_gadget_map_request(&dwc->gadget, &req->request,
  570. event->endpoint_number);
  571. if (ret) {
  572. dev_dbg(dwc->dev, "failed to map request\n");
  573. return;
  574. }
  575. WARN_ON(req->request.length > dep->endpoint.maxpacket);
  576. dwc->ep0_bounced = true;
  577. /*
  578. * REVISIT in case request length is bigger than EP0
  579. * wMaxPacketSize, we will need two chained TRBs to handle
  580. * the transfer.
  581. */
  582. ret = dwc3_ep0_start_trans(dwc, event->endpoint_number,
  583. dwc->ep0_bounce_addr, dep->endpoint.maxpacket,
  584. DWC3_TRBCTL_CONTROL_DATA);
  585. } else {
  586. ret = usb_gadget_map_request(&dwc->gadget, &req->request,
  587. event->endpoint_number);
  588. if (ret) {
  589. dev_dbg(dwc->dev, "failed to map request\n");
  590. return;
  591. }
  592. ret = dwc3_ep0_start_trans(dwc, event->endpoint_number,
  593. req->request.dma, req->request.length,
  594. DWC3_TRBCTL_CONTROL_DATA);
  595. }
  596. WARN_ON(ret < 0);
  597. }
  598. static int dwc3_ep0_start_control_status(struct dwc3_ep *dep)
  599. {
  600. struct dwc3 *dwc = dep->dwc;
  601. u32 type;
  602. type = dwc->three_stage_setup ? DWC3_TRBCTL_CONTROL_STATUS3
  603. : DWC3_TRBCTL_CONTROL_STATUS2;
  604. return dwc3_ep0_start_trans(dwc, dep->number,
  605. dwc->ctrl_req_addr, 0, type);
  606. }
  607. static void dwc3_ep0_do_control_status(struct dwc3 *dwc, u32 epnum)
  608. {
  609. struct dwc3_ep *dep = dwc->eps[epnum];
  610. if (dwc->resize_fifos) {
  611. dev_dbg(dwc->dev, "starting to resize fifos\n");
  612. dwc3_gadget_resize_tx_fifos(dwc);
  613. dwc->resize_fifos = 0;
  614. }
  615. WARN_ON(dwc3_ep0_start_control_status(dep));
  616. }
  617. static void dwc3_ep0_xfernotready(struct dwc3 *dwc,
  618. const struct dwc3_event_depevt *event)
  619. {
  620. dwc->setup_packet_pending = true;
  621. /*
  622. * This part is very tricky: If we has just handled
  623. * XferNotReady(Setup) and we're now expecting a
  624. * XferComplete but, instead, we receive another
  625. * XferNotReady(Setup), we should STALL and restart
  626. * the state machine.
  627. *
  628. * In all other cases, we just continue waiting
  629. * for the XferComplete event.
  630. *
  631. * We are a little bit unsafe here because we're
  632. * not trying to ensure that last event was, indeed,
  633. * XferNotReady(Setup).
  634. *
  635. * Still, we don't expect any condition where that
  636. * should happen and, even if it does, it would be
  637. * another error condition.
  638. */
  639. if (dwc->ep0_next_event == DWC3_EP0_COMPLETE) {
  640. switch (event->status) {
  641. case DEPEVT_STATUS_CONTROL_SETUP:
  642. dev_vdbg(dwc->dev, "Unexpected XferNotReady(Setup)\n");
  643. dwc3_ep0_stall_and_restart(dwc);
  644. break;
  645. case DEPEVT_STATUS_CONTROL_DATA:
  646. /* FALLTHROUGH */
  647. case DEPEVT_STATUS_CONTROL_STATUS:
  648. /* FALLTHROUGH */
  649. default:
  650. dev_vdbg(dwc->dev, "waiting for XferComplete\n");
  651. }
  652. return;
  653. }
  654. switch (event->status) {
  655. case DEPEVT_STATUS_CONTROL_SETUP:
  656. dev_vdbg(dwc->dev, "Control Setup\n");
  657. dwc->ep0state = EP0_SETUP_PHASE;
  658. dwc3_ep0_do_control_setup(dwc, event);
  659. break;
  660. case DEPEVT_STATUS_CONTROL_DATA:
  661. dev_vdbg(dwc->dev, "Control Data\n");
  662. dwc->ep0state = EP0_DATA_PHASE;
  663. if (dwc->ep0_next_event != DWC3_EP0_NRDY_DATA) {
  664. dev_vdbg(dwc->dev, "Expected %d got %d\n",
  665. dwc->ep0_next_event,
  666. DWC3_EP0_NRDY_DATA);
  667. dwc3_ep0_stall_and_restart(dwc);
  668. return;
  669. }
  670. /*
  671. * One of the possible error cases is when Host _does_
  672. * request for Data Phase, but it does so on the wrong
  673. * direction.
  674. *
  675. * Here, we already know ep0_next_event is DATA (see above),
  676. * so we only need to check for direction.
  677. */
  678. if (dwc->ep0_expect_in != event->endpoint_number) {
  679. dev_vdbg(dwc->dev, "Wrong direction for Data phase\n");
  680. dwc3_ep0_stall_and_restart(dwc);
  681. return;
  682. }
  683. dwc3_ep0_do_control_data(dwc, event);
  684. break;
  685. case DEPEVT_STATUS_CONTROL_STATUS:
  686. dev_vdbg(dwc->dev, "Control Status\n");
  687. dwc->ep0state = EP0_STATUS_PHASE;
  688. if (dwc->ep0_next_event != DWC3_EP0_NRDY_STATUS) {
  689. dev_vdbg(dwc->dev, "Expected %d got %d\n",
  690. dwc->ep0_next_event,
  691. DWC3_EP0_NRDY_STATUS);
  692. dwc3_ep0_stall_and_restart(dwc);
  693. return;
  694. }
  695. if (dwc->delayed_status) {
  696. WARN_ON_ONCE(event->endpoint_number != 1);
  697. dev_vdbg(dwc->dev, "Mass Storage delayed status\n");
  698. return;
  699. }
  700. dwc3_ep0_do_control_status(dwc, event->endpoint_number);
  701. }
  702. }
  703. void dwc3_ep0_interrupt(struct dwc3 *dwc,
  704. const struct dwc3_event_depevt *event)
  705. {
  706. u8 epnum = event->endpoint_number;
  707. dev_dbg(dwc->dev, "%s while ep%d%s in state '%s'\n",
  708. dwc3_ep_event_string(event->endpoint_event),
  709. epnum >> 1, (epnum & 1) ? "in" : "out",
  710. dwc3_ep0_state_string(dwc->ep0state));
  711. switch (event->endpoint_event) {
  712. case DWC3_DEPEVT_XFERCOMPLETE:
  713. dwc3_ep0_xfer_complete(dwc, event);
  714. break;
  715. case DWC3_DEPEVT_XFERNOTREADY:
  716. dwc3_ep0_xfernotready(dwc, event);
  717. break;
  718. case DWC3_DEPEVT_XFERINPROGRESS:
  719. case DWC3_DEPEVT_RXTXFIFOEVT:
  720. case DWC3_DEPEVT_STREAMEVT:
  721. case DWC3_DEPEVT_EPCMDCMPLT:
  722. break;
  723. }
  724. }