drivers/usb/gadget/amd5536udc.c

   1 /*
   2  * amd5536.c -- AMD 5536 UDC high/full speed USB device controller
   3  *
   4  * Copyright (C) 2005-2007 AMD (http://www.amd.com)
   5  * Author: Thomas Dahlmann
   6  *
   7  * This program is free software; you can redistribute it and/or modify
   8  * it under the terms of the GNU General Public License as published by
   9  * the Free Software Foundation; either version 2 of the License, or
  10  * (at your option) any later version.
  11  */
  12
  13 /*
  14  * The AMD5536 UDC is part of the x86 southbridge AMD Geode CS5536.
  15  * It is a USB Highspeed DMA capable USB device controller. Beside ep0 it
  16  * provides 4 IN and 4 OUT endpoints (bulk or interrupt type).
  17  *
  18  * Make sure that UDC is assigned to port 4 by BIOS settings (port can also
  19  * be used as host port) and UOC bits PAD_EN and APU are set (should be done
  20  * by BIOS init).
  21  *
  22  * UDC DMA requires 32-bit aligned buffers so DMA with gadget ether does not
  23  * work without updating NET_IP_ALIGN. Or PIO mode (module param "use_dma=0")
  24  * can be used with gadget ether.
  25  */
  26
  27 /* debug control */
  28 /* #define UDC_VERBOSE */
  29
  30 /* Driver strings */
  31 #define UDC_MOD_DESCRIPTION             "AMD 5536 UDC - USB Device Controller"
  32 #define UDC_DRIVER_VERSION_STRING       "01.00.0206"
  33
  34 /* system */
  35 #include <linux/module.h>
  36 #include <linux/pci.h>
  37 #include <linux/kernel.h>
  38 #include <linux/delay.h>
  39 #include <linux/ioport.h>
  40 #include <linux/sched.h>
  41 #include <linux/slab.h>
  42 #include <linux/errno.h>
  43 #include <linux/init.h>
  44 #include <linux/timer.h>
  45 #include <linux/list.h>
  46 #include <linux/interrupt.h>
  47 #include <linux/ioctl.h>
  48 #include <linux/fs.h>
  49 #include <linux/dmapool.h>
  50 #include <linux/moduleparam.h>
  51 #include <linux/device.h>
  52 #include <linux/io.h>
  53 #include <linux/irq.h>
  54 #include <linux/prefetch.h>
  55
  56 #include <asm/byteorder.h>
  57 #include <asm/unaligned.h>
  58
  59 /* gadget stack */
  60 #include <linux/usb/ch9.h>
  61 #include <linux/usb/gadget.h>
  62
  63 /* udc specific */
  64 #include "amd5536udc.h"
  65
  66
  67 static void udc_tasklet_disconnect(unsigned long);
  68 static void empty_req_queue(struct udc_ep *);
  69 static int udc_probe(struct udc *dev);
  70 static void udc_basic_init(struct udc *dev);
  71 static void udc_setup_endpoints(struct udc *dev);
  72 static void udc_soft_reset(struct udc *dev);
  73 static struct udc_request *udc_alloc_bna_dummy(struct udc_ep *ep);
  74 static void udc_free_request(struct usb_ep *usbep, struct usb_request *usbreq);
  75 static int udc_free_dma_chain(struct udc *dev, struct udc_request *req);
  76 static int udc_create_dma_chain(struct udc_ep *ep, struct udc_request *req,
  77                                 unsigned long buf_len, gfp_t gfp_flags);
  78 static int udc_remote_wakeup(struct udc *dev);
  79 static int udc_pci_probe(struct pci_dev *pdev, const struct pci_device_id *id);
  80 static void udc_pci_remove(struct pci_dev *pdev);
  81
  82 /* description */
  83 static const char mod_desc[] = UDC_MOD_DESCRIPTION;
  84 static const char name[] = "amd5536udc";
  85
  86 /* structure to hold endpoint function pointers */
  87 static const struct usb_ep_ops udc_ep_ops;
  88
  89 /* received setup data */
  90 static union udc_setup_data setup_data;
  91
  92 /* pointer to device object */
  93 static struct udc *udc;
  94
  95 /* irq spin lock for soft reset */
  96 static DEFINE_SPINLOCK(udc_irq_spinlock);
  97 /* stall spin lock */
  98 static DEFINE_SPINLOCK(udc_stall_spinlock);
  99
 100 /*
 101 * slave mode: pending bytes in rx fifo after nyet,
 102 * used if EPIN irq came but no req was available
 103 */
 104 static unsigned int udc_rxfifo_pending;
 105
 106 /* count soft resets after suspend to avoid loop */
 107 static int soft_reset_occured;
 108 static int soft_reset_after_usbreset_occured;
 109
 110 /* timer */
 111 static struct timer_list udc_timer;
 112 static int stop_timer;
 113
 114 /* set_rde -- Is used to control enabling of RX DMA. Problem is
 115  * that UDC has only one bit (RDE) to enable/disable RX DMA for
 116  * all OUT endpoints. So we have to handle race conditions like
 117  * when OUT data reaches the fifo but no request was queued yet.
 118  * This cannot be solved by letting the RX DMA disabled until a
 119  * request gets queued because there may be other OUT packets
 120  * in the FIFO (important for not blocking control traffic).
 121  * The value of set_rde controls the correspondig timer.
 122  *
 123  * set_rde -1 == not used, means it is alloed to be set to 0 or 1
 124  * set_rde  0 == do not touch RDE, do no start the RDE timer
 125  * set_rde  1 == timer function will look whether FIFO has data
 126  * set_rde  2 == set by timer function to enable RX DMA on next call
 127  */
 128 static int set_rde = -1;
 129
 130 static DECLARE_COMPLETION(on_exit);
 131 static struct timer_list udc_pollstall_timer;
 132 static int stop_pollstall_timer;
 133 static DECLARE_COMPLETION(on_pollstall_exit);
 134
 135 /* tasklet for usb disconnect */
 136 static DECLARE_TASKLET(disconnect_tasklet, udc_tasklet_disconnect,
 137                 (unsigned long) &udc);
 138
 139
 140 /* endpoint names used for print */
 141 static const char ep0_string[] = "ep0in";
 142 static const char *const ep_string[] = {
 143         ep0_string,
 144         "ep1in-int", "ep2in-bulk", "ep3in-bulk", "ep4in-bulk", "ep5in-bulk",
 145         "ep6in-bulk", "ep7in-bulk", "ep8in-bulk", "ep9in-bulk", "ep10in-bulk",
 146         "ep11in-bulk", "ep12in-bulk", "ep13in-bulk", "ep14in-bulk",
 147         "ep15in-bulk", "ep0out", "ep1out-bulk", "ep2out-bulk", "ep3out-bulk",
 148         "ep4out-bulk", "ep5out-bulk", "ep6out-bulk", "ep7out-bulk",
 149         "ep8out-bulk", "ep9out-bulk", "ep10out-bulk", "ep11out-bulk",
 150         "ep12out-bulk", "ep13out-bulk", "ep14out-bulk", "ep15out-bulk"
 151 };
 152
 153 /* DMA usage flag */
 154 static bool use_dma = 1;
 155 /* packet per buffer dma */
 156 static bool use_dma_ppb = 1;
 157 /* with per descr. update */
 158 static bool use_dma_ppb_du;
 159 /* buffer fill mode */
 160 static int use_dma_bufferfill_mode;
 161 /* full speed only mode */
 162 static bool use_fullspeed;
 163 /* tx buffer size for high speed */
 164 static unsigned long hs_tx_buf = UDC_EPIN_BUFF_SIZE;
 165
 166 /* module parameters */
 167 module_param(use_dma, bool, S_IRUGO);
 168 MODULE_PARM_DESC(use_dma, "true for DMA");
 169 module_param(use_dma_ppb, bool, S_IRUGO);
 170 MODULE_PARM_DESC(use_dma_ppb, "true for DMA in packet per buffer mode");
 171 module_param(use_dma_ppb_du, bool, S_IRUGO);
 172 MODULE_PARM_DESC(use_dma_ppb_du,
 173         "true for DMA in packet per buffer mode with descriptor update");
 174 module_param(use_fullspeed, bool, S_IRUGO);
 175 MODULE_PARM_DESC(use_fullspeed, "true for fullspeed only");
 176
 177 /*---------------------------------------------------------------------------*/
 178 /* Prints UDC device registers and endpoint irq registers */
 179 static void print_regs(struct udc *dev)
 180 {
 181         DBG(dev, "------- Device registers -------\n");
 182         DBG(dev, "dev config     = %08x\n", readl(&dev->regs->cfg));
 183         DBG(dev, "dev control    = %08x\n", readl(&dev->regs->ctl));
 184         DBG(dev, "dev status     = %08x\n", readl(&dev->regs->sts));
 185         DBG(dev, "\n");
 186         DBG(dev, "dev int's      = %08x\n", readl(&dev->regs->irqsts));
 187         DBG(dev, "dev intmask    = %08x\n", readl(&dev->regs->irqmsk));
 188         DBG(dev, "\n");
 189         DBG(dev, "dev ep int's   = %08x\n", readl(&dev->regs->ep_irqsts));
 190         DBG(dev, "dev ep intmask = %08x\n", readl(&dev->regs->ep_irqmsk));
 191         DBG(dev, "\n");
 192         DBG(dev, "USE DMA        = %d\n", use_dma);
 193         if (use_dma && use_dma_ppb && !use_dma_ppb_du) {
 194                 DBG(dev, "DMA mode       = PPBNDU (packet per buffer "
 195                         "WITHOUT desc. update)\n");
 196                 dev_info(&dev->pdev->dev, "DMA mode (%s)\n", "PPBNDU");
 197         } else if (use_dma && use_dma_ppb && use_dma_ppb_du) {
 198                 DBG(dev, "DMA mode       = PPBDU (packet per buffer "
 199                         "WITH desc. update)\n");
 200                 dev_info(&dev->pdev->dev, "DMA mode (%s)\n", "PPBDU");
 201         }
 202         if (use_dma && use_dma_bufferfill_mode) {
 203                 DBG(dev, "DMA mode       = BF (buffer fill mode)\n");
 204                 dev_info(&dev->pdev->dev, "DMA mode (%s)\n", "BF");
 205         }
 206         if (!use_dma)
 207                 dev_info(&dev->pdev->dev, "FIFO mode\n");
 208         DBG(dev, "-------------------------------------------------------\n");
 209 }
 210
 211 /* Masks unused interrupts */
 212 static int udc_mask_unused_interrupts(struct udc *dev)
 213 {
 214         u32 tmp;
 215
 216         /* mask all dev interrupts */
 217         tmp =   AMD_BIT(UDC_DEVINT_SVC) |
 218                 AMD_BIT(UDC_DEVINT_ENUM) |
 219                 AMD_BIT(UDC_DEVINT_US) |
 220                 AMD_BIT(UDC_DEVINT_UR) |
 221                 AMD_BIT(UDC_DEVINT_ES) |
 222                 AMD_BIT(UDC_DEVINT_SI) |
 223                 AMD_BIT(UDC_DEVINT_SOF)|
 224                 AMD_BIT(UDC_DEVINT_SC);
 225         writel(tmp, &dev->regs->irqmsk);
 226
 227         /* mask all ep interrupts */
 228         writel(UDC_EPINT_MSK_DISABLE_ALL, &dev->regs->ep_irqmsk);
 229
 230         return 0;
 231 }
 232
 233 /* Enables endpoint 0 interrupts */
 234 static int udc_enable_ep0_interrupts(struct udc *dev)
 235 {
 236         u32 tmp;
 237
 238         DBG(dev, "udc_enable_ep0_interrupts()\n");
 239
 240         /* read irq mask */
 241         tmp = readl(&dev->regs->ep_irqmsk);
 242         /* enable ep0 irq's */
 243         tmp &= AMD_UNMASK_BIT(UDC_EPINT_IN_EP0)
 244                 & AMD_UNMASK_BIT(UDC_EPINT_OUT_EP0);
 245         writel(tmp, &dev->regs->ep_irqmsk);
 246
 247         return 0;
 248 }
 249
 250 /* Enables device interrupts for SET_INTF and SET_CONFIG */
 251 static int udc_enable_dev_setup_interrupts(struct udc *dev)
 252 {
 253         u32 tmp;
 254
 255         DBG(dev, "enable device interrupts for setup data\n");
 256
 257         /* read irq mask */
 258         tmp = readl(&dev->regs->irqmsk);
 259
 260         /* enable SET_INTERFACE, SET_CONFIG and other needed irq's */
 261         tmp &= AMD_UNMASK_BIT(UDC_DEVINT_SI)
 262                 & AMD_UNMASK_BIT(UDC_DEVINT_SC)
 263                 & AMD_UNMASK_BIT(UDC_DEVINT_UR)
 264                 & AMD_UNMASK_BIT(UDC_DEVINT_SVC)
 265                 & AMD_UNMASK_BIT(UDC_DEVINT_ENUM);
 266         writel(tmp, &dev->regs->irqmsk);
 267
 268         return 0;
 269 }
 270
 271 /* Calculates fifo start of endpoint based on preceding endpoints */
 272 static int udc_set_txfifo_addr(struct udc_ep *ep)
 273 {
 274         struct udc      *dev;
 275         u32 tmp;
 276         int i;
 277
 278         if (!ep || !(ep->in))
 279                 return -EINVAL;
 280
 281         dev = ep->dev;
 282         ep->txfifo = dev->txfifo;
 283
 284         /* traverse ep's */
 285         for (i = 0; i < ep->num; i++) {
 286                 if (dev->ep[i].regs) {
 287                         /* read fifo size */
 288                         tmp = readl(&dev->ep[i].regs->bufin_framenum);
 289                         tmp = AMD_GETBITS(tmp, UDC_EPIN_BUFF_SIZE);
 290                         ep->txfifo += tmp;
 291                 }
 292         }
 293         return 0;
 294 }
 295
 296 /* CNAK pending field: bit0 = ep0in, bit16 = ep0out */
 297 static u32 cnak_pending;
 298
 299 static void UDC_QUEUE_CNAK(struct udc_ep *ep, unsigned num)
 300 {
 301         if (readl(&ep->regs->ctl) & AMD_BIT(UDC_EPCTL_NAK)) {
 302                 DBG(ep->dev, "NAK could not be cleared for ep%d\n", num);
 303                 cnak_pending |= 1 << (num);
 304                 ep->naking = 1;
 305         } else
 306                 cnak_pending = cnak_pending & (~(1 << (num)));
 307 }
 308
 309
 310 /* Enables endpoint, is called by gadget driver */
 311 static int
 312 udc_ep_enable(struct usb_ep *usbep, const struct usb_endpoint_descriptor *desc)
 313 {
 314         struct udc_ep           *ep;
 315         struct udc              *dev;
 316         u32                     tmp;
 317         unsigned long           iflags;
 318         u8 udc_csr_epix;
 319         unsigned                maxpacket;
 320
 321         if (!usbep
 322                         || usbep->name == ep0_string
 323                         || !desc
 324                         || desc->bDescriptorType != USB_DT_ENDPOINT)
 325                 return -EINVAL;
 326
 327         ep = container_of(usbep, struct udc_ep, ep);
 328         dev = ep->dev;
 329
 330         DBG(dev, "udc_ep_enable() ep %d\n", ep->num);
 331
 332         if (!dev->driver || dev->gadget.speed == USB_SPEED_UNKNOWN)
 333                 return -ESHUTDOWN;
 334
 335         spin_lock_irqsave(&dev->lock, iflags);
 336         ep->ep.desc = desc;
 337
 338         ep->halted = 0;
 339
 340         /* set traffic type */
 341         tmp = readl(&dev->ep[ep->num].regs->ctl);
 342         tmp = AMD_ADDBITS(tmp, desc->bmAttributes, UDC_EPCTL_ET);
 343         writel(tmp, &dev->ep[ep->num].regs->ctl);
 344
 345         /* set max packet size */
 346         maxpacket = usb_endpoint_maxp(desc);
 347         tmp = readl(&dev->ep[ep->num].regs->bufout_maxpkt);
 348         tmp = AMD_ADDBITS(tmp, maxpacket, UDC_EP_MAX_PKT_SIZE);
 349         ep->ep.maxpacket = maxpacket;
 350         writel(tmp, &dev->ep[ep->num].regs->bufout_maxpkt);
 351
 352         /* IN ep */
 353         if (ep->in) {
 354
 355                 /* ep ix in UDC CSR register space */
 356                 udc_csr_epix = ep->num;
 357
 358                 /* set buffer size (tx fifo entries) */
 359                 tmp = readl(&dev->ep[ep->num].regs->bufin_framenum);
 360                 /* double buffering: fifo size = 2 x max packet size */
 361                 tmp = AMD_ADDBITS(
 362                                 tmp,
 363                                 maxpacket * UDC_EPIN_BUFF_SIZE_MULT
 364                                           / UDC_DWORD_BYTES,
 365                                 UDC_EPIN_BUFF_SIZE);
 366                 writel(tmp, &dev->ep[ep->num].regs->bufin_framenum);
 367
 368                 /* calc. tx fifo base addr */
 369                 udc_set_txfifo_addr(ep);
 370
 371                 /* flush fifo */
 372                 tmp = readl(&ep->regs->ctl);
 373                 tmp |= AMD_BIT(UDC_EPCTL_F);
 374                 writel(tmp, &ep->regs->ctl);
 375
 376         /* OUT ep */
 377         } else {
 378                 /* ep ix in UDC CSR register space */
 379                 udc_csr_epix = ep->num - UDC_CSR_EP_OUT_IX_OFS;
 380
 381                 /* set max packet size UDC CSR  */
 382                 tmp = readl(&dev->csr->ne[ep->num - UDC_CSR_EP_OUT_IX_OFS]);
 383                 tmp = AMD_ADDBITS(tmp, maxpacket,
 384                                         UDC_CSR_NE_MAX_PKT);
 385                 writel(tmp, &dev->csr->ne[ep->num - UDC_CSR_EP_OUT_IX_OFS]);
 386
 387                 if (use_dma && !ep->in) {
 388                         /* alloc and init BNA dummy request */
 389                         ep->bna_dummy_req = udc_alloc_bna_dummy(ep);
 390                         ep->bna_occurred = 0;
 391                 }
 392
 393                 if (ep->num != UDC_EP0OUT_IX)
 394                         dev->data_ep_enabled = 1;
 395         }
 396
 397         /* set ep values */
 398         tmp = readl(&dev->csr->ne[udc_csr_epix]);
 399         /* max packet */
 400         tmp = AMD_ADDBITS(tmp, maxpacket, UDC_CSR_NE_MAX_PKT);
 401         /* ep number */
 402         tmp = AMD_ADDBITS(tmp, desc->bEndpointAddress, UDC_CSR_NE_NUM);
 403         /* ep direction */
 404         tmp = AMD_ADDBITS(tmp, ep->in, UDC_CSR_NE_DIR);
 405         /* ep type */
 406         tmp = AMD_ADDBITS(tmp, desc->bmAttributes, UDC_CSR_NE_TYPE);
 407         /* ep config */
 408         tmp = AMD_ADDBITS(tmp, ep->dev->cur_config, UDC_CSR_NE_CFG);
 409         /* ep interface */
 410         tmp = AMD_ADDBITS(tmp, ep->dev->cur_intf, UDC_CSR_NE_INTF);
 411         /* ep alt */
 412         tmp = AMD_ADDBITS(tmp, ep->dev->cur_alt, UDC_CSR_NE_ALT);
 413         /* write reg */
 414         writel(tmp, &dev->csr->ne[udc_csr_epix]);
 415
 416         /* enable ep irq */
 417         tmp = readl(&dev->regs->ep_irqmsk);
 418         tmp &= AMD_UNMASK_BIT(ep->num);
 419         writel(tmp, &dev->regs->ep_irqmsk);
 420
 421         /*
 422          * clear NAK by writing CNAK
 423          * avoid BNA for OUT DMA, don't clear NAK until DMA desc. written
 424          */
 425         if (!use_dma || ep->in) {
 426                 tmp = readl(&ep->regs->ctl);
 427                 tmp |= AMD_BIT(UDC_EPCTL_CNAK);
 428                 writel(tmp, &ep->regs->ctl);
 429                 ep->naking = 0;
 430                 UDC_QUEUE_CNAK(ep, ep->num);
 431         }
 432         tmp = desc->bEndpointAddress;
 433         DBG(dev, "%s enabled\n", usbep->name);
 434
 435         spin_unlock_irqrestore(&dev->lock, iflags);
 436         return 0;
 437 }
 438
 439 /* Resets endpoint */
 440 static void ep_init(struct udc_regs __iomem *regs, struct udc_ep *ep)
 441 {
 442         u32             tmp;
 443
 444         VDBG(ep->dev, "ep-%d reset\n", ep->num);
 445         ep->ep.desc = NULL;
 446         ep->ep.ops = &udc_ep_ops;
 447         INIT_LIST_HEAD(&ep->queue);
 448
 449         usb_ep_set_maxpacket_limit(&ep->ep,(u16) ~0);
 450         /* set NAK */
 451         tmp = readl(&ep->regs->ctl);
 452         tmp |= AMD_BIT(UDC_EPCTL_SNAK);
 453         writel(tmp, &ep->regs->ctl);
 454         ep->naking = 1;
 455
 456         /* disable interrupt */
 457         tmp = readl(&regs->ep_irqmsk);
 458         tmp |= AMD_BIT(ep->num);
 459         writel(tmp, &regs->ep_irqmsk);
 460
 461         if (ep->in) {
 462                 /* unset P and IN bit of potential former DMA */
 463                 tmp = readl(&ep->regs->ctl);
 464                 tmp &= AMD_UNMASK_BIT(UDC_EPCTL_P);
 465                 writel(tmp, &ep->regs->ctl);
 466
 467                 tmp = readl(&ep->regs->sts);
 468                 tmp |= AMD_BIT(UDC_EPSTS_IN);
 469                 writel(tmp, &ep->regs->sts);
 470
 471                 /* flush the fifo */
 472                 tmp = readl(&ep->regs->ctl);
 473                 tmp |= AMD_BIT(UDC_EPCTL_F);
 474                 writel(tmp, &ep->regs->ctl);
 475
 476         }
 477         /* reset desc pointer */
 478         writel(0, &ep->regs->desptr);
 479 }
 480
 481 /* Disables endpoint, is called by gadget driver */
 482 static int udc_ep_disable(struct usb_ep *usbep)
 483 {
 484         struct udc_ep   *ep = NULL;
 485         unsigned long   iflags;
 486
 487         if (!usbep)
 488                 return -EINVAL;
 489
 490         ep = container_of(usbep, struct udc_ep, ep);
 491         if (usbep->name == ep0_string || !ep->ep.desc)
 492                 return -EINVAL;
 493
 494         DBG(ep->dev, "Disable ep-%d\n", ep->num);
 495
 496         spin_lock_irqsave(&ep->dev->lock, iflags);
 497         udc_free_request(&ep->ep, &ep->bna_dummy_req->req);
 498         empty_req_queue(ep);
 499         ep_init(ep->dev->regs, ep);
 500         spin_unlock_irqrestore(&ep->dev->lock, iflags);
 501
 502         return 0;
 503 }
 504
 505 /* Allocates request packet, called by gadget driver */
 506 static struct usb_request *
 507 udc_alloc_request(struct usb_ep *usbep, gfp_t gfp)
 508 {
 509         struct udc_request      *req;
 510         struct udc_data_dma     *dma_desc;
 511         struct udc_ep   *ep;
 512
 513         if (!usbep)
 514                 return NULL;
 515
 516         ep = container_of(usbep, struct udc_ep, ep);
 517
 518         VDBG(ep->dev, "udc_alloc_req(): ep%d\n", ep->num);
 519         req = kzalloc(sizeof(struct udc_request), gfp);
 520         if (!req)
 521                 return NULL;
 522
 523         req->req.dma = DMA_DONT_USE;
 524         INIT_LIST_HEAD(&req->queue);
 525
 526         if (ep->dma) {
 527                 /* ep0 in requests are allocated from data pool here */
 528                 dma_desc = pci_pool_alloc(ep->dev->data_requests, gfp,
 529                                                 &req->td_phys);
 530                 if (!dma_desc) {
 531                         kfree(req);
 532                         return NULL;
 533                 }
 534
 535                 VDBG(ep->dev, "udc_alloc_req: req = %p dma_desc = %p, "
 536                                 "td_phys = %lx\n",
 537                                 req, dma_desc,
 538                                 (unsigned long)req->td_phys);
 539                 /* prevent from using desc. - set HOST BUSY */
 540                 dma_desc->status = AMD_ADDBITS(dma_desc->status,
 541                                                 UDC_DMA_STP_STS_BS_HOST_BUSY,
 542                                                 UDC_DMA_STP_STS_BS);
 543                 dma_desc->bufptr = cpu_to_le32(DMA_DONT_USE);
 544                 req->td_data = dma_desc;
 545                 req->td_data_last = NULL;
 546                 req->chain_len = 1;
 547         }
 548
 549         return &req->req;
 550 }
 551
 552 /* Frees request packet, called by gadget driver */
 553 static void
 554 udc_free_request(struct usb_ep *usbep, struct usb_request *usbreq)
 555 {
 556         struct udc_ep   *ep;
 557         struct udc_request      *req;
 558
 559         if (!usbep || !usbreq)
 560                 return;
 561
 562         ep = container_of(usbep, struct udc_ep, ep);
 563         req = container_of(usbreq, struct udc_request, req);
 564         VDBG(ep->dev, "free_req req=%p\n", req);
 565         BUG_ON(!list_empty(&req->queue));
 566         if (req->td_data) {
 567                 VDBG(ep->dev, "req->td_data=%p\n", req->td_data);
 568
 569                 /* free dma chain if created */
 570                 if (req->chain_len > 1)
 571                         udc_free_dma_chain(ep->dev, req);
 572
 573                 pci_pool_free(ep->dev->data_requests, req->td_data,
 574                                                         req->td_phys);
 575         }
 576         kfree(req);
 577 }
 578
 579 /* Init BNA dummy descriptor for HOST BUSY and pointing to itself */
 580 static void udc_init_bna_dummy(struct udc_request *req)
 581 {
 582         if (req) {
 583                 /* set last bit */
 584                 req->td_data->status |= AMD_BIT(UDC_DMA_IN_STS_L);
 585                 /* set next pointer to itself */
 586                 req->td_data->next = req->td_phys;
 587                 /* set HOST BUSY */
 588                 req->td_data->status
 589                         = AMD_ADDBITS(req->td_data->status,
 590                                         UDC_DMA_STP_STS_BS_DMA_DONE,
 591                                         UDC_DMA_STP_STS_BS);
 592 #ifdef UDC_VERBOSE
 593                 pr_debug("bna desc = %p, sts = %08x\n",
 594                         req->td_data, req->td_data->status);
 595 #endif
 596         }
 597 }
 598
 599 /* Allocate BNA dummy descriptor */
 600 static struct udc_request *udc_alloc_bna_dummy(struct udc_ep *ep)
 601 {
 602         struct udc_request *req = NULL;
 603         struct usb_request *_req = NULL;
 604
 605         /* alloc the dummy request */
 606         _req = udc_alloc_request(&ep->ep, GFP_ATOMIC);
 607         if (_req) {
 608                 req = container_of(_req, struct udc_request, req);
 609                 ep->bna_dummy_req = req;
 610                 udc_init_bna_dummy(req);
 611         }
 612         return req;
 613 }
 614
 615 /* Write data to TX fifo for IN packets */
 616 static void
 617 udc_txfifo_write(struct udc_ep *ep, struct usb_request *req)
 618 {
 619         u8                      *req_buf;
 620         u32                     *buf;
 621         int                     i, j;
 622         unsigned                bytes = 0;
 623         unsigned                remaining = 0;
 624
 625         if (!req || !ep)
 626                 return;
 627
 628         req_buf = req->buf + req->actual;
 629         prefetch(req_buf);
 630         remaining = req->length - req->actual;
 631
 632         buf = (u32 *) req_buf;
 633
 634         bytes = ep->ep.maxpacket;
 635         if (bytes > remaining)
 636                 bytes = remaining;
 637
 638         /* dwords first */
 639         for (i = 0; i < bytes / UDC_DWORD_BYTES; i++)
 640                 writel(*(buf + i), ep->txfifo);
 641
 642         /* remaining bytes must be written by byte access */
 643         for (j = 0; j < bytes % UDC_DWORD_BYTES; j++) {
 644                 writeb((u8)(*(buf + i) >> (j << UDC_BITS_PER_BYTE_SHIFT)),
 645                                                         ep->txfifo);
 646         }
 647
 648         /* dummy write confirm */
 649         writel(0, &ep->regs->confirm);
 650 }
 651
 652 /* Read dwords from RX fifo for OUT transfers */
 653 static int udc_rxfifo_read_dwords(struct udc *dev, u32 *buf, int dwords)
 654 {
 655         int i;
 656
 657         VDBG(dev, "udc_read_dwords(): %d dwords\n", dwords);
 658
 659         for (i = 0; i < dwords; i++)
 660                 *(buf + i) = readl(dev->rxfifo);
 661         return 0;
 662 }
 663
 664 /* Read bytes from RX fifo for OUT transfers */
 665 static int udc_rxfifo_read_bytes(struct udc *dev, u8 *buf, int bytes)
 666 {
 667         int i, j;
 668         u32 tmp;
 669
 670         VDBG(dev, "udc_read_bytes(): %d bytes\n", bytes);
 671
 672         /* dwords first */
 673         for (i = 0; i < bytes / UDC_DWORD_BYTES; i++)
 674                 *((u32 *)(buf + (i<<2))) = readl(dev->rxfifo);
 675
 676         /* remaining bytes must be read by byte access */
 677         if (bytes % UDC_DWORD_BYTES) {
 678                 tmp = readl(dev->rxfifo);
 679                 for (j = 0; j < bytes % UDC_DWORD_BYTES; j++) {
 680                         *(buf + (i<<2) + j) = (u8)(tmp & UDC_BYTE_MASK);
 681                         tmp = tmp >> UDC_BITS_PER_BYTE;
 682                 }
 683         }
 684
 685         return 0;
 686 }
 687
 688 /* Read data from RX fifo for OUT transfers */
 689 static int
 690 udc_rxfifo_read(struct udc_ep *ep, struct udc_request *req)
 691 {
 692         u8 *buf;
 693         unsigned buf_space;
 694         unsigned bytes = 0;
 695         unsigned finished = 0;
 696
 697         /* received number bytes */
 698         bytes = readl(&ep->regs->sts);
 699         bytes = AMD_GETBITS(bytes, UDC_EPSTS_RX_PKT_SIZE);
 700
 701         buf_space = req->req.length - req->req.actual;
 702         buf = req->req.buf + req->req.actual;
 703         if (bytes > buf_space) {
 704                 if ((buf_space % ep->ep.maxpacket) != 0) {
 705                         DBG(ep->dev,
 706                                 "%s: rx %d bytes, rx-buf space = %d bytesn\n",
 707                                 ep->ep.name, bytes, buf_space);
 708                         req->req.status = -EOVERFLOW;
 709                 }
 710                 bytes = buf_space;
 711         }
 712         req->req.actual += bytes;
 713
 714         /* last packet ? */
 715         if (((bytes % ep->ep.maxpacket) != 0) || (!bytes)
 716                 || ((req->req.actual == req->req.length) && !req->req.zero))
 717                 finished = 1;
 718
 719         /* read rx fifo bytes */
 720         VDBG(ep->dev, "ep %s: rxfifo read %d bytes\n", ep->ep.name, bytes);
 721         udc_rxfifo_read_bytes(ep->dev, buf, bytes);
 722
 723         return finished;
 724 }
 725
 726 /* create/re-init a DMA descriptor or a DMA descriptor chain */
 727 static int prep_dma(struct udc_ep *ep, struct udc_request *req, gfp_t gfp)
 728 {
 729         int     retval = 0;
 730         u32     tmp;
 731
 732         VDBG(ep->dev, "prep_dma\n");
 733         VDBG(ep->dev, "prep_dma ep%d req->td_data=%p\n",
 734                         ep->num, req->td_data);
 735
 736         /* set buffer pointer */
 737         req->td_data->bufptr = req->req.dma;
 738
 739         /* set last bit */
 740         req->td_data->status |= AMD_BIT(UDC_DMA_IN_STS_L);
 741
 742         /* build/re-init dma chain if maxpkt scatter mode, not for EP0 */
 743         if (use_dma_ppb) {
 744
 745                 retval = udc_create_dma_chain(ep, req, ep->ep.maxpacket, gfp);
 746                 if (retval != 0) {
 747                         if (retval == -ENOMEM)
 748                                 DBG(ep->dev, "Out of DMA memory\n");
 749                         return retval;
 750                 }
 751                 if (ep->in) {
 752                         if (req->req.length == ep->ep.maxpacket) {
 753                                 /* write tx bytes */
 754                                 req->td_data->status =
 755                                         AMD_ADDBITS(req->td_data->status,
 756                                                 ep->ep.maxpacket,
 757                                                 UDC_DMA_IN_STS_TXBYTES);
 758
 759                         }
 760                 }
 761
 762         }
 763
 764         if (ep->in) {
 765                 VDBG(ep->dev, "IN: use_dma_ppb=%d req->req.len=%d "
 766                                 "maxpacket=%d ep%d\n",
 767                                 use_dma_ppb, req->req.length,
 768                                 ep->ep.maxpacket, ep->num);
 769                 /*
 770                  * if bytes < max packet then tx bytes must
 771                  * be written in packet per buffer mode
 772                  */
 773                 if (!use_dma_ppb || req->req.length < ep->ep.maxpacket
 774                                 || ep->num == UDC_EP0OUT_IX
 775                                 || ep->num == UDC_EP0IN_IX) {
 776                         /* write tx bytes */
 777                         req->td_data->status =
 778                                 AMD_ADDBITS(req->td_data->status,
 779                                                 req->req.length,
 780                                                 UDC_DMA_IN_STS_TXBYTES);
 781                         /* reset frame num */
 782                         req->td_data->status =
 783                                 AMD_ADDBITS(req->td_data->status,
 784                                                 0,
 785                                                 UDC_DMA_IN_STS_FRAMENUM);
 786                 }
 787                 /* set HOST BUSY */
 788                 req->td_data->status =
 789                         AMD_ADDBITS(req->td_data->status,
 790                                 UDC_DMA_STP_STS_BS_HOST_BUSY,
 791                                 UDC_DMA_STP_STS_BS);
 792         } else {
 793                 VDBG(ep->dev, "OUT set host ready\n");
 794                 /* set HOST READY */
 795                 req->td_data->status =
 796                         AMD_ADDBITS(req->td_data->status,
 797                                 UDC_DMA_STP_STS_BS_HOST_READY,
 798                                 UDC_DMA_STP_STS_BS);
 799
 800
 801                         /* clear NAK by writing CNAK */
 802                         if (ep->naking) {
 803                                 tmp = readl(&ep->regs->ctl);
 804                                 tmp |= AMD_BIT(UDC_EPCTL_CNAK);
 805                                 writel(tmp, &ep->regs->ctl);
 806                                 ep->naking = 0;
 807                                 UDC_QUEUE_CNAK(ep, ep->num);
 808                         }
 809
 810         }
 811
 812         return retval;
 813 }
 814
 815 /* Completes request packet ... caller MUST hold lock */
 816 static void
 817 complete_req(struct udc_ep *ep, struct udc_request *req, int sts)
 818 __releases(ep->dev->lock)
 819 __acquires(ep->dev->lock)
 820 {
 821         struct udc              *dev;
 822         unsigned                halted;
 823
 824         VDBG(ep->dev, "complete_req(): ep%d\n", ep->num);
 825
 826         dev = ep->dev;
 827         /* unmap DMA */
 828         if (ep->dma)
 829                 usb_gadget_unmap_request(&dev->gadget, &req->req, ep->in);
 830
 831         halted = ep->halted;
 832         ep->halted = 1;
 833
 834         /* set new status if pending */
 835         if (req->req.status == -EINPROGRESS)
 836                 req->req.status = sts;
 837
 838         /* remove from ep queue */
 839         list_del_init(&req->queue);
 840
 841         VDBG(ep->dev, "req %p => complete %d bytes at %s with sts %d\n",
 842                 &req->req, req->req.length, ep->ep.name, sts);
 843
 844         spin_unlock(&dev->lock);
 845         req->req.complete(&ep->ep, &req->req);
 846         spin_lock(&dev->lock);
 847         ep->halted = halted;
 848 }
 849
 850 /* frees pci pool descriptors of a DMA chain */
 851 static int udc_free_dma_chain(struct udc *dev, struct udc_request *req)
 852 {
 853
 854         int ret_val = 0;
 855         struct udc_data_dma     *td;
 856         struct udc_data_dma     *td_last = NULL;
 857         unsigned int i;
 858
 859         DBG(dev, "free chain req = %p\n", req);
 860
 861         /* do not free first desc., will be done by free for request */
 862         td_last = req->td_data;
 863         td = phys_to_virt(td_last->next);
 864
 865         for (i = 1; i < req->chain_len; i++) {
 866
 867                 pci_pool_free(dev->data_requests, td,
 868                                 (dma_addr_t) td_last->next);
 869                 td_last = td;
 870                 td = phys_to_virt(td_last->next);
 871         }
 872
 873         return ret_val;
 874 }
 875
 876 /* Iterates to the end of a DMA chain and returns last descriptor */
 877 static struct udc_data_dma *udc_get_last_dma_desc(struct udc_request *req)
 878 {
 879         struct udc_data_dma     *td;
 880
 881         td = req->td_data;
 882         while (td && !(td->status & AMD_BIT(UDC_DMA_IN_STS_L)))
 883                 td = phys_to_virt(td->next);
 884
 885         return td;
 886
 887 }
 888
 889 /* Iterates to the end of a DMA chain and counts bytes received */
 890 static u32 udc_get_ppbdu_rxbytes(struct udc_request *req)
 891 {
 892         struct udc_data_dma     *td;
 893         u32 count;
 894
 895         td = req->td_data;
 896         /* received number bytes */
 897         count = AMD_GETBITS(td->status, UDC_DMA_OUT_STS_RXBYTES);
 898
 899         while (td && !(td->status & AMD_BIT(UDC_DMA_IN_STS_L))) {
 900                 td = phys_to_virt(td->next);
 901                 /* received number bytes */
 902                 if (td) {
 903                         count += AMD_GETBITS(td->status,
 904                                 UDC_DMA_OUT_STS_RXBYTES);
 905                 }
 906         }
 907
 908         return count;
 909
 910 }
 911
 912 /* Creates or re-inits a DMA chain */
 913 static int udc_create_dma_chain(
 914         struct udc_ep *ep,
 915         struct udc_request *req,
 916         unsigned long buf_len, gfp_t gfp_flags
 917 )
 918 {
 919         unsigned long bytes = req->req.length;
 920         unsigned int i;
 921         dma_addr_t dma_addr;
 922         struct udc_data_dma     *td = NULL;
 923         struct udc_data_dma     *last = NULL;
 924         unsigned long txbytes;
 925         unsigned create_new_chain = 0;
 926         unsigned len;
 927
 928         VDBG(ep->dev, "udc_create_dma_chain: bytes=%ld buf_len=%ld\n",
 929                         bytes, buf_len);
 930         dma_addr = DMA_DONT_USE;
 931
 932         /* unset L bit in first desc for OUT */
 933         if (!ep->in)
 934                 req->td_data->status &= AMD_CLEAR_BIT(UDC_DMA_IN_STS_L);
 935
 936         /* alloc only new desc's if not already available */
 937         len = req->req.length / ep->ep.maxpacket;
 938         if (req->req.length % ep->ep.maxpacket)
 939                 len++;
 940
 941         if (len > req->chain_len) {
 942                 /* shorter chain already allocated before */
 943                 if (req->chain_len > 1)
 944                         udc_free_dma_chain(ep->dev, req);
 945                 req->chain_len = len;
 946                 create_new_chain = 1;
 947         }
 948
 949         td = req->td_data;
 950         /* gen. required number of descriptors and buffers */
 951         for (i = buf_len; i < bytes; i += buf_len) {
 952                 /* create or determine next desc. */
 953                 if (create_new_chain) {
 954
 955                         td = pci_pool_alloc(ep->dev->data_requests,
 956                                         gfp_flags, &dma_addr);
 957                         if (!td)
 958                                 return -ENOMEM;
 959
 960                         td->status = 0;
 961                 } else if (i == buf_len) {
 962                         /* first td */
 963                         td = (struct udc_data_dma *) phys_to_virt(
 964                                                 req->td_data->next);
 965                         td->status = 0;
 966                 } else {
 967                         td = (struct udc_data_dma *) phys_to_virt(last->next);
 968                         td->status = 0;
 969                 }
 970
 971
 972                 if (td)
 973                         td->bufptr = req->req.dma + i; /* assign buffer */
 974                 else
 975                         break;
 976
 977                 /* short packet ? */
 978                 if ((bytes - i) >= buf_len) {
 979                         txbytes = buf_len;
 980                 } else {
 981                         /* short packet */
 982                         txbytes = bytes - i;
 983                 }
 984
 985                 /* link td and assign tx bytes */
 986                 if (i == buf_len) {
 987                         if (create_new_chain)
 988                                 req->td_data->next = dma_addr;
 989                         /*
 990                         else
 991                                 req->td_data->next = virt_to_phys(td);
 992                         */
 993                         /* write tx bytes */
 994                         if (ep->in) {
 995                                 /* first desc */
 996                                 req->td_data->status =
 997                                         AMD_ADDBITS(req->td_data->status,
 998                                                         ep->ep.maxpacket,
 999                                                         UDC_DMA_IN_STS_TXBYTES);
1000                                 /* second desc */
1001                                 td->status = AMD_ADDBITS(td->status,
1002                                                         txbytes,
1003                                                         UDC_DMA_IN_STS_TXBYTES);
1004                         }
1005                 } else {
1006                         if (create_new_chain)
1007                                 last->next = dma_addr;
1008                         /*
1009                         else
1010                                 last->next = virt_to_phys(td);
1011                         */
1012                         if (ep->in) {
1013                                 /* write tx bytes */
1014                                 td->status = AMD_ADDBITS(td->status,
1015                                                         txbytes,
1016                                                         UDC_DMA_IN_STS_TXBYTES);
1017                         }
1018                 }
1019                 last = td;
1020         }
1021         /* set last bit */
1022         if (td) {
1023                 td->status |= AMD_BIT(UDC_DMA_IN_STS_L);
1024                 /* last desc. points to itself */
1025                 req->td_data_last = td;
1026         }
1027
1028         return 0;
1029 }
1030
1031 /* Enabling RX DMA */
1032 static void udc_set_rde(struct udc *dev)
1033 {
1034         u32 tmp;
1035
1036         VDBG(dev, "udc_set_rde()\n");
1037         /* stop RDE timer */
1038         if (timer_pending(&udc_timer)) {
1039                 set_rde = 0;
1040                 mod_timer(&udc_timer, jiffies - 1);
1041         }
1042         /* set RDE */
1043         tmp = readl(&dev->regs->ctl);
1044         tmp |= AMD_BIT(UDC_DEVCTL_RDE);
1045         writel(tmp, &dev->regs->ctl);
1046 }
1047
1048 /* Queues a request packet, called by gadget driver */
1049 static int
1050 udc_queue(struct usb_ep *usbep, struct usb_request *usbreq, gfp_t gfp)
1051 {
1052         int                     retval = 0;
1053         u8                      open_rxfifo = 0;
1054         unsigned long           iflags;
1055         struct udc_ep           *ep;
1056         struct udc_request      *req;
1057         struct udc              *dev;
1058         u32                     tmp;
1059
1060         /* check the inputs */
1061         req = container_of(usbreq, struct udc_request, req);
1062
1063         if (!usbep || !usbreq || !usbreq->complete || !usbreq->buf
1064                         || !list_empty(&req->queue))
1065                 return -EINVAL;
1066
1067         ep = container_of(usbep, struct udc_ep, ep);
1068         if (!ep->ep.desc && (ep->num != 0 && ep->num != UDC_EP0OUT_IX))
1069                 return -EINVAL;
1070
1071         VDBG(ep->dev, "udc_queue(): ep%d-in=%d\n", ep->num, ep->in);
1072         dev = ep->dev;
1073
1074         if (!dev->driver || dev->gadget.speed == USB_SPEED_UNKNOWN)
1075                 return -ESHUTDOWN;
1076
1077         /* map dma (usually done before) */
1078         if (ep->dma) {
1079                 VDBG(dev, "DMA map req %p\n", req);
1080                 retval = usb_gadget_map_request(&udc->gadget, usbreq, ep->in);
1081                 if (retval)
1082                         return retval;
1083         }
1084
1085         VDBG(dev, "%s queue req %p, len %d req->td_data=%p buf %p\n",
1086                         usbep->name, usbreq, usbreq->length,
1087                         req->td_data, usbreq->buf);
1088
1089         spin_lock_irqsave(&dev->lock, iflags);
1090         usbreq->actual = 0;
1091         usbreq->status = -EINPROGRESS;
1092         req->dma_done = 0;
1093
1094         /* on empty queue just do first transfer */
1095         if (list_empty(&ep->queue)) {
1096                 /* zlp */
1097                 if (usbreq->length == 0) {
1098                         /* IN zlp's are handled by hardware */
1099                         complete_req(ep, req, 0);
1100                         VDBG(dev, "%s: zlp\n", ep->ep.name);
1101                         /*
1102                          * if set_config or set_intf is waiting for ack by zlp
1103                          * then set CSR_DONE
1104                          */
1105                         if (dev->set_cfg_not_acked) {
1106                                 tmp = readl(&dev->regs->ctl);
1107                                 tmp |= AMD_BIT(UDC_DEVCTL_CSR_DONE);
1108                                 writel(tmp, &dev->regs->ctl);
1109                                 dev->set_cfg_not_acked = 0;
1110                         }
1111                         /* setup command is ACK'ed now by zlp */
1112                         if (dev->waiting_zlp_ack_ep0in) {
1113                                 /* clear NAK by writing CNAK in EP0_IN */
1114                                 tmp = readl(&dev->ep[UDC_EP0IN_IX].regs->ctl);
1115                                 tmp |= AMD_BIT(UDC_EPCTL_CNAK);
1116                                 writel(tmp, &dev->ep[UDC_EP0IN_IX].regs->ctl);
1117                                 dev->ep[UDC_EP0IN_IX].naking = 0;
1118                                 UDC_QUEUE_CNAK(&dev->ep[UDC_EP0IN_IX],
1119                                                         UDC_EP0IN_IX);
1120                                 dev->waiting_zlp_ack_ep0in = 0;
1121                         }
1122                         goto finished;
1123                 }
1124                 if (ep->dma) {
1125                         retval = prep_dma(ep, req, GFP_ATOMIC);
1126                         if (retval != 0)
1127                                 goto finished;
1128                         /* write desc pointer to enable DMA */
1129                         if (ep->in) {
1130                                 /* set HOST READY */
1131                                 req->td_data->status =
1132                                         AMD_ADDBITS(req->td_data->status,
1133                                                 UDC_DMA_IN_STS_BS_HOST_READY,
1134                                                 UDC_DMA_IN_STS_BS);
1135                         }
1136
1137                         /* disabled rx dma while descriptor update */
1138                         if (!ep->in) {
1139                                 /* stop RDE timer */
1140                                 if (timer_pending(&udc_timer)) {
1141                                         set_rde = 0;
1142                                         mod_timer(&udc_timer, jiffies - 1);
1143                                 }
1144                                 /* clear RDE */
1145                                 tmp = readl(&dev->regs->ctl);
1146                                 tmp &= AMD_UNMASK_BIT(UDC_DEVCTL_RDE);
1147                                 writel(tmp, &dev->regs->ctl);
1148                                 open_rxfifo = 1;
1149
1150                                 /*
1151                                  * if BNA occurred then let BNA dummy desc.
1152                                  * point to current desc.
1153                                  */
1154                                 if (ep->bna_occurred) {
1155                                         VDBG(dev, "copy to BNA dummy desc.\n");
1156                                         memcpy(ep->bna_dummy_req->td_data,
1157                                                 req->td_data,
1158                                                 sizeof(struct udc_data_dma));
1159                                 }
1160                         }
1161                         /* write desc pointer */
1162                         writel(req->td_phys, &ep->regs->desptr);
1163
1164                         /* clear NAK by writing CNAK */
1165                         if (ep->naking) {
1166                                 tmp = readl(&ep->regs->ctl);
1167                                 tmp |= AMD_BIT(UDC_EPCTL_CNAK);
1168                                 writel(tmp, &ep->regs->ctl);
1169                                 ep->naking = 0;
1170                                 UDC_QUEUE_CNAK(ep, ep->num);
1171                         }
1172
1173                         if (ep->in) {
1174                                 /* enable ep irq */
1175                                 tmp = readl(&dev->regs->ep_irqmsk);
1176                                 tmp &= AMD_UNMASK_BIT(ep->num);
1177                                 writel(tmp, &dev->regs->ep_irqmsk);
1178                         }
1179                 } else if (ep->in) {
1180                                 /* enable ep irq */
1181                                 tmp = readl(&dev->regs->ep_irqmsk);
1182                                 tmp &= AMD_UNMASK_BIT(ep->num);
1183                                 writel(tmp, &dev->regs->ep_irqmsk);
1184                         }
1185
1186         } else if (ep->dma) {
1187
1188                 /*
1189                  * prep_dma not used for OUT ep's, this is not possible
1190                  * for PPB modes, because of chain creation reasons
1191                  */
1192                 if (ep->in) {
1193                         retval = prep_dma(ep, req, GFP_ATOMIC);
1194                         if (retval != 0)
1195                                 goto finished;
1196                 }
1197         }
1198         VDBG(dev, "list_add\n");
1199         /* add request to ep queue */
1200         if (req) {
1201
1202                 list_add_tail(&req->queue, &ep->queue);
1203
1204                 /* open rxfifo if out data queued */
1205                 if (open_rxfifo) {
1206                         /* enable DMA */
1207                         req->dma_going = 1;
1208                         udc_set_rde(dev);
1209                         if (ep->num != UDC_EP0OUT_IX)
1210                                 dev->data_ep_queued = 1;
1211                 }
1212                 /* stop OUT naking */
1213                 if (!ep->in) {
1214                         if (!use_dma && udc_rxfifo_pending) {
1215                                 DBG(dev, "udc_queue(): pending bytes in "
1216                                         "rxfifo after nyet\n");
1217                                 /*
1218                                  * read pending bytes afer nyet:
1219                                  * referring to isr
1220                                  */
1221                                 if (udc_rxfifo_read(ep, req)) {
1222                                         /* finish */
1223                                         complete_req(ep, req, 0);
1224                                 }
1225                                 udc_rxfifo_pending = 0;
1226
1227                         }
1228                 }
1229         }
1230
1231 finished:
1232         spin_unlock_irqrestore(&dev->lock, iflags);
1233         return retval;
1234 }
1235
1236 /* Empty request queue of an endpoint; caller holds spinlock */
1237 static void empty_req_queue(struct udc_ep *ep)
1238 {
1239         struct udc_request      *req;
1240
1241         ep->halted = 1;
1242         while (!list_empty(&ep->queue)) {
1243                 req = list_entry(ep->queue.next,
1244                         struct udc_request,
1245                         queue);
1246                 complete_req(ep, req, -ESHUTDOWN);
1247         }
1248 }
1249
1250 /* Dequeues a request packet, called by gadget driver */
1251 static int udc_dequeue(struct usb_ep *usbep, struct usb_request *usbreq)
1252 {
1253         struct udc_ep           *ep;
1254         struct udc_request      *req;
1255         unsigned                halted;
1256         unsigned long           iflags;
1257
1258         ep = container_of(usbep, struct udc_ep, ep);
1259         if (!usbep || !usbreq || (!ep->ep.desc && (ep->num != 0
1260                                 && ep->num != UDC_EP0OUT_IX)))
1261                 return -EINVAL;
1262
1263         req = container_of(usbreq, struct udc_request, req);
1264
1265         spin_lock_irqsave(&ep->dev->lock, iflags);
1266         halted = ep->halted;
1267         ep->halted = 1;
1268         /* request in processing or next one */
1269         if (ep->queue.next == &req->queue) {
1270                 if (ep->dma && req->dma_going) {
1271                         if (ep->in)
1272                                 ep->cancel_transfer = 1;
1273                         else {
1274                                 u32 tmp;
1275                                 u32 dma_sts;
1276                                 /* stop potential receive DMA */
1277                                 tmp = readl(&udc->regs->ctl);
1278                                 writel(tmp & AMD_UNMASK_BIT(UDC_DEVCTL_RDE),
1279                                                         &udc->regs->ctl);
1280                                 /*
1281                                  * Cancel transfer later in ISR
1282                                  * if descriptor was touched.
1283                                  */
1284                                 dma_sts = AMD_GETBITS(req->td_data->status,
1285                                                         UDC_DMA_OUT_STS_BS);
1286                                 if (dma_sts != UDC_DMA_OUT_STS_BS_HOST_READY)
1287                                         ep->cancel_transfer = 1;
1288                                 else {
1289                                         udc_init_bna_dummy(ep->req);
1290                                         writel(ep->bna_dummy_req->td_phys,
1291                                                 &ep->regs->desptr);
1292                                 }
1293                                 writel(tmp, &udc->regs->ctl);
1294                         }
1295                 }
1296         }
1297         complete_req(ep, req, -ECONNRESET);
1298         ep->halted = halted;
1299
1300         spin_unlock_irqrestore(&ep->dev->lock, iflags);
1301         return 0;
1302 }
1303
1304 /* Halt or clear halt of endpoint */
1305 static int
1306 udc_set_halt(struct usb_ep *usbep, int halt)
1307 {
1308         struct udc_ep   *ep;
1309         u32 tmp;
1310         unsigned long iflags;
1311         int retval = 0;
1312
1313         if (!usbep)
1314                 return -EINVAL;
1315
1316         pr_debug("set_halt %s: halt=%d\n", usbep->name, halt);
1317
1318         ep = container_of(usbep, struct udc_ep, ep);
1319         if (!ep->ep.desc && (ep->num != 0 && ep->num != UDC_EP0OUT_IX))
1320                 return -EINVAL;
1321         if (!ep->dev->driver || ep->dev->gadget.speed == USB_SPEED_UNKNOWN)
1322                 return -ESHUTDOWN;
1323
1324         spin_lock_irqsave(&udc_stall_spinlock, iflags);
1325         /* halt or clear halt */
1326         if (halt) {
1327                 if (ep->num == 0)
1328                         ep->dev->stall_ep0in = 1;
1329                 else {
1330                         /*
1331                          * set STALL
1332                          * rxfifo empty not taken into acount
1333                          */
1334                         tmp = readl(&ep->regs->ctl);
1335                         tmp |= AMD_BIT(UDC_EPCTL_S);
1336                         writel(tmp, &ep->regs->ctl);
1337                         ep->halted = 1;
1338
1339                         /* setup poll timer */
1340                         if (!timer_pending(&udc_pollstall_timer)) {
1341                                 udc_pollstall_timer.expires = jiffies +
1342                                         HZ * UDC_POLLSTALL_TIMER_USECONDS
1343                                         / (1000 * 1000);
1344                                 if (!stop_pollstall_timer) {
1345                                         DBG(ep->dev, "start polltimer\n");
1346                                         add_timer(&udc_pollstall_timer);
1347                                 }
1348                         }
1349                 }
1350         } else {
1351                 /* ep is halted by set_halt() before */
1352                 if (ep->halted) {
1353                         tmp = readl(&ep->regs->ctl);
1354                         /* clear stall bit */
1355                         tmp = tmp & AMD_CLEAR_BIT(UDC_EPCTL_S);
1356                         /* clear NAK by writing CNAK */
1357                         tmp |= AMD_BIT(UDC_EPCTL_CNAK);
1358                         writel(tmp, &ep->regs->ctl);
1359                         ep->halted = 0;
1360                         UDC_QUEUE_CNAK(ep, ep->num);
1361                 }
1362         }
1363         spin_unlock_irqrestore(&udc_stall_spinlock, iflags);
1364         return retval;
1365 }
1366
1367 /* gadget interface */
1368 static const struct usb_ep_ops udc_ep_ops = {
1369         .enable         = udc_ep_enable,
1370         .disable        = udc_ep_disable,
1371
1372         .alloc_request  = udc_alloc_request,
1373         .free_request   = udc_free_request,
1374
1375         .queue          = udc_queue,
1376         .dequeue        = udc_dequeue,
1377
1378         .set_halt       = udc_set_halt,
1379         /* fifo ops not implemented */
1380 };
1381
1382 /*-------------------------------------------------------------------------*/
1383
1384 /* Get frame counter (not implemented) */
1385 static int udc_get_frame(struct usb_gadget *gadget)
1386 {
1387         return -EOPNOTSUPP;
1388 }
1389
1390 /* Remote wakeup gadget interface */
1391 static int udc_wakeup(struct usb_gadget *gadget)
1392 {
1393         struct udc              *dev;
1394
1395         if (!gadget)
1396                 return -EINVAL;
1397         dev = container_of(gadget, struct udc, gadget);
1398         udc_remote_wakeup(dev);
1399
1400         return 0;
1401 }
1402
1403 static int amd5536_udc_start(struct usb_gadget *g,
1404                 struct usb_gadget_driver *driver);
1405 static int amd5536_udc_stop(struct usb_gadget *g,
1406                 struct usb_gadget_driver *driver);
1407 /* gadget operations */
1408 static const struct usb_gadget_ops udc_ops = {
1409         .wakeup         = udc_wakeup,
1410         .get_frame      = udc_get_frame,
1411         .udc_start      = amd5536_udc_start,
1412         .udc_stop       = amd5536_udc_stop,
1413 };
1414
1415 /* Setups endpoint parameters, adds endpoints to linked list */
1416 static void make_ep_lists(struct udc *dev)
1417 {
1418         /* make gadget ep lists */
1419         INIT_LIST_HEAD(&dev->gadget.ep_list);
1420         list_add_tail(&dev->ep[UDC_EPIN_STATUS_IX].ep.ep_list,
1421                                                 &dev->gadget.ep_list);
1422         list_add_tail(&dev->ep[UDC_EPIN_IX].ep.ep_list,
1423                                                 &dev->gadget.ep_list);
1424         list_add_tail(&dev->ep[UDC_EPOUT_IX].ep.ep_list,
1425                                                 &dev->gadget.ep_list);
1426
1427         /* fifo config */
1428         dev->ep[UDC_EPIN_STATUS_IX].fifo_depth = UDC_EPIN_SMALLINT_BUFF_SIZE;
1429         if (dev->gadget.speed == USB_SPEED_FULL)
1430                 dev->ep[UDC_EPIN_IX].fifo_depth = UDC_FS_EPIN_BUFF_SIZE;
1431         else if (dev->gadget.speed == USB_SPEED_HIGH)
1432                 dev->ep[UDC_EPIN_IX].fifo_depth = hs_tx_buf;
1433         dev->ep[UDC_EPOUT_IX].fifo_depth = UDC_RXFIFO_SIZE;
1434 }
1435
1436 /* init registers at driver load time */
1437 static int startup_registers(struct udc *dev)
1438 {
1439         u32 tmp;
1440
1441         /* init controller by soft reset */
1442         udc_soft_reset(dev);
1443
1444         /* mask not needed interrupts */
1445         udc_mask_unused_interrupts(dev);
1446
1447         /* put into initial config */
1448         udc_basic_init(dev);
1449         /* link up all endpoints */
1450         udc_setup_endpoints(dev);
1451
1452         /* program speed */
1453         tmp = readl(&dev->regs->cfg);
1454         if (use_fullspeed)
1455                 tmp = AMD_ADDBITS(tmp, UDC_DEVCFG_SPD_FS, UDC_DEVCFG_SPD);
1456         else
1457                 tmp = AMD_ADDBITS(tmp, UDC_DEVCFG_SPD_HS, UDC_DEVCFG_SPD);
1458         writel(tmp, &dev->regs->cfg);
1459
1460         return 0;
1461 }
1462
1463 /* Inits UDC context */
1464 static void udc_basic_init(struct udc *dev)
1465 {
1466         u32     tmp;
1467
1468         DBG(dev, "udc_basic_init()\n");
1469
1470         dev->gadget.speed = USB_SPEED_UNKNOWN;
1471
1472         /* stop RDE timer */
1473         if (timer_pending(&udc_timer)) {
1474                 set_rde = 0;
1475                 mod_timer(&udc_timer, jiffies - 1);
1476         }
1477         /* stop poll stall timer */
1478         if (timer_pending(&udc_pollstall_timer))
1479                 mod_timer(&udc_pollstall_timer, jiffies - 1);
1480         /* disable DMA */
1481         tmp = readl(&dev->regs->ctl);
1482         tmp &= AMD_UNMASK_BIT(UDC_DEVCTL_RDE);
1483         tmp &= AMD_UNMASK_BIT(UDC_DEVCTL_TDE);
1484         writel(tmp, &dev->regs->ctl);
1485
1486         /* enable dynamic CSR programming */
1487         tmp = readl(&dev->regs->cfg);
1488         tmp |= AMD_BIT(UDC_DEVCFG_CSR_PRG);
1489         /* set self powered */
1490         tmp |= AMD_BIT(UDC_DEVCFG_SP);
1491         /* set remote wakeupable */
1492         tmp |= AMD_BIT(UDC_DEVCFG_RWKP);
1493         writel(tmp, &dev->regs->cfg);
1494
1495         make_ep_lists(dev);
1496
1497         dev->data_ep_enabled = 0;
1498         dev->data_ep_queued = 0;
1499 }
1500
1501 /* Sets initial endpoint parameters */
1502 static void udc_setup_endpoints(struct udc *dev)
1503 {
1504         struct udc_ep   *ep;
1505         u32     tmp;
1506         u32     reg;
1507
1508         DBG(dev, "udc_setup_endpoints()\n");
1509
1510         /* read enum speed */
1511         tmp = readl(&dev->regs->sts);
1512         tmp = AMD_GETBITS(tmp, UDC_DEVSTS_ENUM_SPEED);
1513         if (tmp == UDC_DEVSTS_ENUM_SPEED_HIGH)
1514                 dev->gadget.speed = USB_SPEED_HIGH;
1515         else if (tmp == UDC_DEVSTS_ENUM_SPEED_FULL)
1516                 dev->gadget.speed = USB_SPEED_FULL;
1517
1518         /* set basic ep parameters */
1519         for (tmp = 0; tmp < UDC_EP_NUM; tmp++) {
1520                 ep = &dev->ep[tmp];
1521                 ep->dev = dev;
1522                 ep->ep.name = ep_string[tmp];
1523                 ep->num = tmp;
1524                 /* txfifo size is calculated at enable time */
1525                 ep->txfifo = dev->txfifo;
1526
1527                 /* fifo size */
1528                 if (tmp < UDC_EPIN_NUM) {
1529                         ep->fifo_depth = UDC_TXFIFO_SIZE;
1530                         ep->in = 1;
1531                 } else {
1532                         ep->fifo_depth = UDC_RXFIFO_SIZE;
1533                         ep->in = 0;
1534
1535                 }
1536                 ep->regs = &dev->ep_regs[tmp];
1537                 /*
1538                  * ep will be reset only if ep was not enabled before to avoid
1539                  * disabling ep interrupts when ENUM interrupt occurs but ep is
1540                  * not enabled by gadget driver
1541                  */
1542                 if (!ep->ep.desc)
1543                         ep_init(dev->regs, ep);
1544
1545                 if (use_dma) {
1546                         /*
1547                          * ep->dma is not really used, just to indicate that
1548                          * DMA is active: remove this
1549                          * dma regs = dev control regs
1550                          */
1551                         ep->dma = &dev->regs->ctl;
1552
1553                         /* nak OUT endpoints until enable - not for ep0 */
1554                         if (tmp != UDC_EP0IN_IX && tmp != UDC_EP0OUT_IX
1555                                                 && tmp > UDC_EPIN_NUM) {
1556                                 /* set NAK */
1557                                 reg = readl(&dev->ep[tmp].regs->ctl);
1558                                 reg |= AMD_BIT(UDC_EPCTL_SNAK);
1559                                 writel(reg, &dev->ep[tmp].regs->ctl);
1560                                 dev->ep[tmp].naking = 1;
1561
1562                         }
1563                 }
1564         }
1565         /* EP0 max packet */
1566         if (dev->gadget.speed == USB_SPEED_FULL) {
1567                 usb_ep_set_maxpacket_limit(&dev->ep[UDC_EP0IN_IX].ep,
1568                                            UDC_FS_EP0IN_MAX_PKT_SIZE);
1569                 usb_ep_set_maxpacket_limit(&dev->ep[UDC_EP0OUT_IX].ep,
1570                                            UDC_FS_EP0OUT_MAX_PKT_SIZE);
1571         } else if (dev->gadget.speed == USB_SPEED_HIGH) {
1572                 usb_ep_set_maxpacket_limit(&dev->ep[UDC_EP0IN_IX].ep,
1573                                            UDC_EP0IN_MAX_PKT_SIZE);
1574                 usb_ep_set_maxpacket_limit(&dev->ep[UDC_EP0OUT_IX].ep,
1575                                            UDC_EP0OUT_MAX_PKT_SIZE);
1576         }
1577
1578         /*
1579          * with suspend bug workaround, ep0 params for gadget driver
1580          * are set at gadget driver bind() call
1581          */
1582         dev->gadget.ep0 = &dev->ep[UDC_EP0IN_IX].ep;
1583         dev->ep[UDC_EP0IN_IX].halted = 0;
1584         INIT_LIST_HEAD(&dev->gadget.ep0->ep_list);
1585
1586         /* init cfg/alt/int */
1587         dev->cur_config = 0;
1588         dev->cur_intf = 0;
1589         dev->cur_alt = 0;
1590 }
1591
1592 /* Bringup after Connect event, initial bringup to be ready for ep0 events */
1593 static void usb_connect(struct udc *dev)
1594 {
1595
1596         dev_info(&dev->pdev->dev, "USB Connect\n");
1597
1598         dev->connected = 1;
1599
1600         /* put into initial config */
1601         udc_basic_init(dev);
1602
1603         /* enable device setup interrupts */
1604         udc_enable_dev_setup_interrupts(dev);
1605 }
1606
1607 /*
1608  * Calls gadget with disconnect event and resets the UDC and makes
1609  * initial bringup to be ready for ep0 events
1610  */
1611 static void usb_disconnect(struct udc *dev)
1612 {
1613
1614         dev_info(&dev->pdev->dev, "USB Disconnect\n");
1615
1616         dev->connected = 0;
1617
1618         /* mask interrupts */
1619         udc_mask_unused_interrupts(dev);
1620
1621         /* REVISIT there doesn't seem to be a point to having this
1622          * talk to a tasklet ... do it directly, we already hold
1623          * the spinlock needed to process the disconnect.
1624          */
1625
1626         tasklet_schedule(&disconnect_tasklet);
1627 }
1628
1629 /* Tasklet for disconnect to be outside of interrupt context */
1630 static void udc_tasklet_disconnect(unsigned long par)
1631 {
1632         struct udc *dev = (struct udc *)(*((struct udc **) par));
1633         u32 tmp;
1634
1635         DBG(dev, "Tasklet disconnect\n");
1636         spin_lock_irq(&dev->lock);
1637
1638         if (dev->driver) {
1639                 spin_unlock(&dev->lock);
1640                 dev->driver->disconnect(&dev->gadget);
1641                 spin_lock(&dev->lock);
1642
1643                 /* empty queues */
1644                 for (tmp = 0; tmp < UDC_EP_NUM; tmp++)
1645                         empty_req_queue(&dev->ep[tmp]);
1646
1647         }
1648
1649         /* disable ep0 */
1650         ep_init(dev->regs,
1651                         &dev->ep[UDC_EP0IN_IX]);
1652
1653
1654         if (!soft_reset_occured) {
1655                 /* init controller by soft reset */
1656                 udc_soft_reset(dev);
1657                 soft_reset_occured++;
1658         }
1659
1660         /* re-enable dev interrupts */
1661         udc_enable_dev_setup_interrupts(dev);
1662         /* back to full speed ? */
1663         if (use_fullspeed) {
1664                 tmp = readl(&dev->regs->cfg);
1665                 tmp = AMD_ADDBITS(tmp, UDC_DEVCFG_SPD_FS, UDC_DEVCFG_SPD);
1666                 writel(tmp, &dev->regs->cfg);
1667         }
1668
1669         spin_unlock_irq(&dev->lock);
1670 }
1671
1672 /* Reset the UDC core */
1673 static void udc_soft_reset(struct udc *dev)
1674 {
1675         unsigned long   flags;
1676
1677         DBG(dev, "Soft reset\n");
1678         /*
1679          * reset possible waiting interrupts, because int.
1680          * status is lost after soft reset,
1681          * ep int. status reset
1682          */
1683         writel(UDC_EPINT_MSK_DISABLE_ALL, &dev->regs->ep_irqsts);
1684         /* device int. status reset */
1685         writel(UDC_DEV_MSK_DISABLE, &dev->regs->irqsts);
1686
1687         spin_lock_irqsave(&udc_irq_spinlock, flags);
1688         writel(AMD_BIT(UDC_DEVCFG_SOFTRESET), &dev->regs->cfg);
1689         readl(&dev->regs->cfg);
1690         spin_unlock_irqrestore(&udc_irq_spinlock, flags);
1691
1692 }
1693
1694 /* RDE timer callback to set RDE bit */
1695 static void udc_timer_function(unsigned long v)
1696 {
1697         u32 tmp;
1698
1699         spin_lock_irq(&udc_irq_spinlock);
1700
1701         if (set_rde > 0) {
1702                 /*
1703                  * open the fifo if fifo was filled on last timer call
1704                  * conditionally
1705                  */
1706                 if (set_rde > 1) {
1707                         /* set RDE to receive setup data */
1708                         tmp = readl(&udc->regs->ctl);
1709                         tmp |= AMD_BIT(UDC_DEVCTL_RDE);
1710                         writel(tmp, &udc->regs->ctl);
1711                         set_rde = -1;
1712                 } else if (readl(&udc->regs->sts)
1713                                 & AMD_BIT(UDC_DEVSTS_RXFIFO_EMPTY)) {
1714                         /*
1715                          * if fifo empty setup polling, do not just
1716                          * open the fifo
1717                          */
1718                         udc_timer.expires = jiffies + HZ/UDC_RDE_TIMER_DIV;
1719                         if (!stop_timer)
1720                                 add_timer(&udc_timer);
1721                 } else {
1722                         /*
1723                          * fifo contains data now, setup timer for opening
1724                          * the fifo when timer expires to be able to receive
1725                          * setup packets, when data packets gets queued by
1726                          * gadget layer then timer will forced to expire with
1727                          * set_rde=0 (RDE is set in udc_queue())
1728                          */
1729                         set_rde++;
1730                         /* debug: lhadmot_timer_start = 221070 */
1731                         udc_timer.expires = jiffies + HZ*UDC_RDE_TIMER_SECONDS;
1732                         if (!stop_timer)
1733                                 add_timer(&udc_timer);
1734                 }
1735
1736         } else
1737                 set_rde = -1; /* RDE was set by udc_queue() */
1738         spin_unlock_irq(&udc_irq_spinlock);
1739         if (stop_timer)
1740                 complete(&on_exit);
1741
1742 }
1743
1744 /* Handle halt state, used in stall poll timer */
1745 static void udc_handle_halt_state(struct udc_ep *ep)
1746 {
1747         u32 tmp;
1748         /* set stall as long not halted */
1749         if (ep->halted == 1) {
1750                 tmp = readl(&ep->regs->ctl);
1751                 /* STALL cleared ? */
1752                 if (!(tmp & AMD_BIT(UDC_EPCTL_S))) {
1753                         /*
1754                          * FIXME: MSC spec requires that stall remains
1755                          * even on receivng of CLEAR_FEATURE HALT. So
1756                          * we would set STALL again here to be compliant.
1757                          * But with current mass storage drivers this does
1758                          * not work (would produce endless host retries).
1759                          * So we clear halt on CLEAR_FEATURE.
1760                          *
1761                         DBG(ep->dev, "ep %d: set STALL again\n", ep->num);
1762                         tmp |= AMD_BIT(UDC_EPCTL_S);
1763                         writel(tmp, &ep->regs->ctl);*/
1764
1765                         /* clear NAK by writing CNAK */
1766                         tmp |= AMD_BIT(UDC_EPCTL_CNAK);
1767                         writel(tmp, &ep->regs->ctl);
1768                         ep->halted = 0;
1769                         UDC_QUEUE_CNAK(ep, ep->num);
1770                 }
1771         }
1772 }
1773
1774 /* Stall timer callback to poll S bit and set it again after */
1775 static void udc_pollstall_timer_function(unsigned long v)
1776 {
1777         struct udc_ep *ep;
1778         int halted = 0;
1779
1780         spin_lock_irq(&udc_stall_spinlock);
1781         /*
1782          * only one IN and OUT endpoints are handled
1783          * IN poll stall
1784          */
1785         ep = &udc->ep[UDC_EPIN_IX];
1786         udc_handle_halt_state(ep);
1787         if (ep->halted)
1788                 halted = 1;
1789         /* OUT poll stall */
1790         ep = &udc->ep[UDC_EPOUT_IX];
1791         udc_handle_halt_state(ep);
1792         if (ep->halted)
1793                 halted = 1;
1794
1795         /* setup timer again when still halted */
1796         if (!stop_pollstall_timer && halted) {
1797                 udc_pollstall_timer.expires = jiffies +
1798                                         HZ * UDC_POLLSTALL_TIMER_USECONDS
1799                                         / (1000 * 1000);
1800                 add_timer(&udc_pollstall_timer);
1801         }
1802         spin_unlock_irq(&udc_stall_spinlock);
1803
1804         if (stop_pollstall_timer)
1805                 complete(&on_pollstall_exit);
1806 }
1807
1808 /* Inits endpoint 0 so that SETUP packets are processed */
1809 static void activate_control_endpoints(struct udc *dev)
1810 {
1811         u32 tmp;
1812
1813         DBG(dev, "activate_control_endpoints\n");
1814
1815         /* flush fifo */
1816         tmp = readl(&dev->ep[UDC_EP0IN_IX].regs->ctl);
1817         tmp |= AMD_BIT(UDC_EPCTL_F);
1818         writel(tmp, &dev->ep[UDC_EP0IN_IX].regs->ctl);
1819
1820         /* set ep0 directions */
1821         dev->ep[UDC_EP0IN_IX].in = 1;
1822         dev->ep[UDC_EP0OUT_IX].in = 0;
1823
1824         /* set buffer size (tx fifo entries) of EP0_IN */
1825         tmp = readl(&dev->ep[UDC_EP0IN_IX].regs->bufin_framenum);
1826         if (dev->gadget.speed == USB_SPEED_FULL)
1827                 tmp = AMD_ADDBITS(tmp, UDC_FS_EPIN0_BUFF_SIZE,
1828                                         UDC_EPIN_BUFF_SIZE);
1829         else if (dev->gadget.speed == USB_SPEED_HIGH)
1830                 tmp = AMD_ADDBITS(tmp, UDC_EPIN0_BUFF_SIZE,
1831                                         UDC_EPIN_BUFF_SIZE);
1832         writel(tmp, &dev->ep[UDC_EP0IN_IX].regs->bufin_framenum);
1833
1834         /* set max packet size of EP0_IN */
1835         tmp = readl(&dev->ep[UDC_EP0IN_IX].regs->bufout_maxpkt);
1836         if (dev->gadget.speed == USB_SPEED_FULL)
1837                 tmp = AMD_ADDBITS(tmp, UDC_FS_EP0IN_MAX_PKT_SIZE,
1838                                         UDC_EP_MAX_PKT_SIZE);
1839         else if (dev->gadget.speed == USB_SPEED_HIGH)
1840                 tmp = AMD_ADDBITS(tmp, UDC_EP0IN_MAX_PKT_SIZE,
1841                                 UDC_EP_MAX_PKT_SIZE);
1842         writel(tmp, &dev->ep[UDC_EP0IN_IX].regs->bufout_maxpkt);
1843
1844         /* set max packet size of EP0_OUT */
1845         tmp = readl(&dev->ep[UDC_EP0OUT_IX].regs->bufout_maxpkt);
1846         if (dev->gadget.speed == USB_SPEED_FULL)
1847                 tmp = AMD_ADDBITS(tmp, UDC_FS_EP0OUT_MAX_PKT_SIZE,
1848                                         UDC_EP_MAX_PKT_SIZE);
1849         else if (dev->gadget.speed == USB_SPEED_HIGH)
1850                 tmp = AMD_ADDBITS(tmp, UDC_EP0OUT_MAX_PKT_SIZE,
1851                                         UDC_EP_MAX_PKT_SIZE);
1852         writel(tmp, &dev->ep[UDC_EP0OUT_IX].regs->bufout_maxpkt);
1853
1854         /* set max packet size of EP0 in UDC CSR */
1855         tmp = readl(&dev->csr->ne[0]);
1856         if (dev->gadget.speed == USB_SPEED_FULL)
1857                 tmp = AMD_ADDBITS(tmp, UDC_FS_EP0OUT_MAX_PKT_SIZE,
1858                                         UDC_CSR_NE_MAX_PKT);
1859         else if (dev->gadget.speed == USB_SPEED_HIGH)
1860                 tmp = AMD_ADDBITS(tmp, UDC_EP0OUT_MAX_PKT_SIZE,
1861                                         UDC_CSR_NE_MAX_PKT);
1862         writel(tmp, &dev->csr->ne[0]);
1863
1864         if (use_dma) {
1865                 dev->ep[UDC_EP0OUT_IX].td->status |=
1866                         AMD_BIT(UDC_DMA_OUT_STS_L);
1867                 /* write dma desc address */
1868                 writel(dev->ep[UDC_EP0OUT_IX].td_stp_dma,
1869                         &dev->ep[UDC_EP0OUT_IX].regs->subptr);
1870                 writel(dev->ep[UDC_EP0OUT_IX].td_phys,
1871                         &dev->ep[UDC_EP0OUT_IX].regs->desptr);
1872                 /* stop RDE timer */
1873                 if (timer_pending(&udc_timer)) {
1874                         set_rde = 0;
1875                         mod_timer(&udc_timer, jiffies - 1);
1876                 }
1877                 /* stop pollstall timer */
1878                 if (timer_pending(&udc_pollstall_timer))
1879                         mod_timer(&udc_pollstall_timer, jiffies - 1);
1880                 /* enable DMA */
1881                 tmp = readl(&dev->regs->ctl);
1882                 tmp |= AMD_BIT(UDC_DEVCTL_MODE)
1883                                 | AMD_BIT(UDC_DEVCTL_RDE)
1884                                 | AMD_BIT(UDC_DEVCTL_TDE);
1885                 if (use_dma_bufferfill_mode)
1886                         tmp |= AMD_BIT(UDC_DEVCTL_BF);
1887                 else if (use_dma_ppb_du)
1888                         tmp |= AMD_BIT(UDC_DEVCTL_DU);
1889                 writel(tmp, &dev->regs->ctl);
1890         }
1891
1892         /* clear NAK by writing CNAK for EP0IN */
1893         tmp = readl(&dev->ep[UDC_EP0IN_IX].regs->ctl);
1894         tmp |= AMD_BIT(UDC_EPCTL_CNAK);
1895         writel(tmp, &dev->ep[UDC_EP0IN_IX].regs->ctl);
1896         dev->ep[UDC_EP0IN_IX].naking = 0;
1897         UDC_QUEUE_CNAK(&dev->ep[UDC_EP0IN_IX], UDC_EP0IN_IX);
1898
1899         /* clear NAK by writing CNAK for EP0OUT */
1900         tmp = readl(&dev->ep[UDC_EP0OUT_IX].regs->ctl);
1901         tmp |= AMD_BIT(UDC_EPCTL_CNAK);
1902         writel(tmp, &dev->ep[UDC_EP0OUT_IX].regs->ctl);
1903         dev->ep[UDC_EP0OUT_IX].naking = 0;
1904         UDC_QUEUE_CNAK(&dev->ep[UDC_EP0OUT_IX], UDC_EP0OUT_IX);
1905 }
1906
1907 /* Make endpoint 0 ready for control traffic */
1908 static int setup_ep0(struct udc *dev)
1909 {
1910         activate_control_endpoints(dev);
1911         /* enable ep0 interrupts */
1912         udc_enable_ep0_interrupts(dev);
1913         /* enable device setup interrupts */
1914         udc_enable_dev_setup_interrupts(dev);
1915
1916         return 0;
1917 }
1918
1919 /* Called by gadget driver to register itself */
1920 static int amd5536_udc_start(struct usb_gadget *g,
1921                 struct usb_gadget_driver *driver)
1922 {
1923         struct udc *dev = to_amd5536_udc(g);
1924         u32 tmp;
1925
1926         driver->driver.bus = NULL;
1927         dev->driver = driver;
1928
1929         /* Some gadget drivers use both ep0 directions.
1930          * NOTE: to gadget driver, ep0 is just one endpoint...
1931          */
1932         dev->ep[UDC_EP0OUT_IX].ep.driver_data =
1933                 dev->ep[UDC_EP0IN_IX].ep.driver_data;
1934
1935         /* get ready for ep0 traffic */
1936         setup_ep0(dev);
1937
1938         /* clear SD */
1939         tmp = readl(&dev->regs->ctl);
1940         tmp = tmp & AMD_CLEAR_BIT(UDC_DEVCTL_SD);
1941         writel(tmp, &dev->regs->ctl);
1942
1943         usb_connect(dev);
1944
1945         return 0;
1946 }
1947
1948 /* shutdown requests and disconnect from gadget */
1949 static void
1950 shutdown(struct udc *dev, struct usb_gadget_driver *driver)
1951 __releases(dev->lock)
1952 __acquires(dev->lock)
1953 {
1954         int tmp;
1955
1956         /* empty queues and init hardware */
1957         udc_basic_init(dev);
1958
1959         for (tmp = 0; tmp < UDC_EP_NUM; tmp++)
1960                 empty_req_queue(&dev->ep[tmp]);
1961
1962         udc_setup_endpoints(dev);
1963 }
1964
1965 /* Called by gadget driver to unregister itself */
1966 static int amd5536_udc_stop(struct usb_gadget *g,
1967                 struct usb_gadget_driver *driver)
1968 {
1969         struct udc *dev = to_amd5536_udc(g);
1970         unsigned long flags;
1971         u32 tmp;
1972
1973         spin_lock_irqsave(&dev->lock, flags);
1974         udc_mask_unused_interrupts(dev);
1975         shutdown(dev, driver);
1976         spin_unlock_irqrestore(&dev->lock, flags);
1977
1978         dev->driver = NULL;
1979
1980         /* set SD */
1981         tmp = readl(&dev->regs->ctl);
1982         tmp |= AMD_BIT(UDC_DEVCTL_SD);
1983         writel(tmp, &dev->regs->ctl);
1984
1985         return 0;
1986 }
1987
1988 /* Clear pending NAK bits */
1989 static void udc_process_cnak_queue(struct udc *dev)
1990 {
1991         u32 tmp;
1992         u32 reg;
1993
1994         /* check epin's */
1995         DBG(dev, "CNAK pending queue processing\n");
1996         for (tmp = 0; tmp < UDC_EPIN_NUM_USED; tmp++) {
1997                 if (cnak_pending & (1 << tmp)) {
1998                         DBG(dev, "CNAK pending for ep%d\n", tmp);
1999                         /* clear NAK by writing CNAK */
2000                         reg = readl(&dev->ep[tmp].regs->ctl);
2001                         reg |= AMD_BIT(UDC_EPCTL_CNAK);
2002                         writel(reg, &dev->ep[tmp].regs->ctl);
2003                         dev->ep[tmp].naking = 0;
2004                         UDC_QUEUE_CNAK(&dev->ep[tmp], dev->ep[tmp].num);
2005                 }
2006         }
2007         /* ...  and ep0out */
2008         if (cnak_pending & (1 << UDC_EP0OUT_IX)) {
2009                 DBG(dev, "CNAK pending for ep%d\n", UDC_EP0OUT_IX);
2010                 /* clear NAK by writing CNAK */
2011                 reg = readl(&dev->ep[UDC_EP0OUT_IX].regs->ctl);
2012                 reg |= AMD_BIT(UDC_EPCTL_CNAK);
2013                 writel(reg, &dev->ep[UDC_EP0OUT_IX].regs->ctl);
2014                 dev->ep[UDC_EP0OUT_IX].naking = 0;
2015                 UDC_QUEUE_CNAK(&dev->ep[UDC_EP0OUT_IX],
2016                                 dev->ep[UDC_EP0OUT_IX].num);
2017         }
2018 }
2019
2020 /* Enabling RX DMA after setup packet */
2021 static void udc_ep0_set_rde(struct udc *dev)
2022 {
2023         if (use_dma) {
2024                 /*
2025                  * only enable RXDMA when no data endpoint enabled
2026                  * or data is queued
2027                  */
2028                 if (!dev->data_ep_enabled || dev->data_ep_queued) {
2029                         udc_set_rde(dev);
2030                 } else {
2031                         /*
2032                          * setup timer for enabling RDE (to not enable
2033                          * RXFIFO DMA for data endpoints to early)
2034                          */
2035                         if (set_rde != 0 && !timer_pending(&udc_timer)) {
2036                                 udc_timer.expires =
2037                                         jiffies + HZ/UDC_RDE_TIMER_DIV;
2038                                 set_rde = 1;
2039                                 if (!stop_timer)
2040                                         add_timer(&udc_timer);
2041                         }
2042                 }
2043         }
2044 }
2045
2046
2047 /* Interrupt handler for data OUT traffic */
2048 static irqreturn_t udc_data_out_isr(struct udc *dev, int ep_ix)
2049 {
2050         irqreturn_t             ret_val = IRQ_NONE;
2051         u32                     tmp;
2052         struct udc_ep           *ep;
2053         struct udc_request      *req;
2054         unsigned int            count;
2055         struct udc_data_dma     *td = NULL;
2056         unsigned                dma_done;
2057
2058         VDBG(dev, "ep%d irq\n", ep_ix);
2059         ep = &dev->ep[ep_ix];
2060
2061         tmp = readl(&ep->regs->sts);
2062         if (use_dma) {
2063                 /* BNA event ? */
2064                 if (tmp & AMD_BIT(UDC_EPSTS_BNA)) {
2065                         DBG(dev, "BNA ep%dout occurred - DESPTR = %x\n",
2066                                         ep->num, readl(&ep->regs->desptr));
2067                         /* clear BNA */
2068                         writel(tmp | AMD_BIT(UDC_EPSTS_BNA), &ep->regs->sts);
2069                         if (!ep->cancel_transfer)
2070                                 ep->bna_occurred = 1;
2071                         else
2072                                 ep->cancel_transfer = 0;
2073                         ret_val = IRQ_HANDLED;
2074                         goto finished;
2075                 }
2076         }
2077         /* HE event ? */
2078         if (tmp & AMD_BIT(UDC_EPSTS_HE)) {
2079                 dev_err(&dev->pdev->dev, "HE ep%dout occurred\n", ep->num);
2080
2081                 /* clear HE */
2082                 writel(tmp | AMD_BIT(UDC_EPSTS_HE), &ep->regs->sts);
2083                 ret_val = IRQ_HANDLED;
2084                 goto finished;
2085         }
2086
2087         if (!list_empty(&ep->queue)) {
2088
2089                 /* next request */
2090                 req = list_entry(ep->queue.next,
2091                         struct udc_request, queue);
2092         } else {
2093                 req = NULL;
2094                 udc_rxfifo_pending = 1;
2095         }
2096         VDBG(dev, "req = %p\n", req);
2097         /* fifo mode */
2098         if (!use_dma) {
2099
2100                 /* read fifo */
2101                 if (req && udc_rxfifo_read(ep, req)) {
2102                         ret_val = IRQ_HANDLED;
2103
2104                         /* finish */
2105                         complete_req(ep, req, 0);
2106                         /* next request */
2107                         if (!list_empty(&ep->queue) && !ep->halted) {
2108                                 req = list_entry(ep->queue.next,
2109                                         struct udc_request, queue);
2110                         } else
2111                                 req = NULL;
2112                 }
2113
2114         /* DMA */
2115         } else if (!ep->cancel_transfer && req != NULL) {
2116                 ret_val = IRQ_HANDLED;
2117
2118                 /* check for DMA done */
2119                 if (!use_dma_ppb) {
2120                         dma_done = AMD_GETBITS(req->td_data->status,
2121                                                 UDC_DMA_OUT_STS_BS);
2122                 /* packet per buffer mode - rx bytes */
2123                 } else {
2124                         /*
2125                          * if BNA occurred then recover desc. from
2126                          * BNA dummy desc.
2127                          */
2128                         if (ep->bna_occurred) {
2129                                 VDBG(dev, "Recover desc. from BNA dummy\n");
2130                                 memcpy(req->td_data, ep->bna_dummy_req->td_data,
2131                                                 sizeof(struct udc_data_dma));
2132                                 ep->bna_occurred = 0;
2133                                 udc_init_bna_dummy(ep->req);
2134                         }
2135                         td = udc_get_last_dma_desc(req);
2136                         dma_done = AMD_GETBITS(td->status, UDC_DMA_OUT_STS_BS);
2137                 }
2138                 if (dma_done == UDC_DMA_OUT_STS_BS_DMA_DONE) {
2139                         /* buffer fill mode - rx bytes */
2140                         if (!use_dma_ppb) {
2141                                 /* received number bytes */
2142                                 count = AMD_GETBITS(req->td_data->status,
2143                                                 UDC_DMA_OUT_STS_RXBYTES);
2144                                 VDBG(dev, "rx bytes=%u\n", count);
2145                         /* packet per buffer mode - rx bytes */
2146                         } else {
2147                                 VDBG(dev, "req->td_data=%p\n", req->td_data);
2148                                 VDBG(dev, "last desc = %p\n", td);
2149                                 /* received number bytes */
2150                                 if (use_dma_ppb_du) {
2151                                         /* every desc. counts bytes */
2152                                         count = udc_get_ppbdu_rxbytes(req);
2153                                 } else {
2154                                         /* last desc. counts bytes */
2155                                         count = AMD_GETBITS(td->status,
2156                                                 UDC_DMA_OUT_STS_RXBYTES);
2157                                         if (!count && req->req.length
2158                                                 == UDC_DMA_MAXPACKET) {
2159                                                 /*
2160                                                  * on 64k packets the RXBYTES
2161                                                  * field is zero
2162                                                  */
2163                                                 count = UDC_DMA_MAXPACKET;
2164                                         }
2165                                 }
2166                                 VDBG(dev, "last desc rx bytes=%u\n", count);
2167                         }
2168
2169                         tmp = req->req.length - req->req.actual;
2170                         if (count > tmp) {
2171                                 if ((tmp % ep->ep.maxpacket) != 0) {
2172                                         DBG(dev, "%s: rx %db, space=%db\n",
2173                                                 ep->ep.name, count, tmp);
2174                                         req->req.status = -EOVERFLOW;
2175                                 }
2176                                 count = tmp;
2177                         }
2178                         req->req.actual += count;
2179                         req->dma_going = 0;
2180                         /* complete request */
2181                         complete_req(ep, req, 0);
2182
2183                         /* next request */
2184                         if (!list_empty(&ep->queue) && !ep->halted) {
2185                                 req = list_entry(ep->queue.next,
2186                                         struct udc_request,
2187                                         queue);
2188                                 /*
2189                                  * DMA may be already started by udc_queue()
2190                                  * called by gadget drivers completion
2191                                  * routine. This happens when queue
2192                                  * holds one request only.
2193                                  */
2194                                 if (req->dma_going == 0) {
2195                                         /* next dma */
2196                                         if (prep_dma(ep, req, GFP_ATOMIC) != 0)
2197                                                 goto finished;
2198                                         /* write desc pointer */
2199                                         writel(req->td_phys,
2200                                                 &ep->regs->desptr);
2201                                         req->dma_going = 1;
2202                                         /* enable DMA */
2203                                         udc_set_rde(dev);
2204                                 }
2205                         } else {
2206                                 /*
2207                                  * implant BNA dummy descriptor to allow
2208                                  * RXFIFO opening by RDE
2209                                  */
2210                                 if (ep->bna_dummy_req) {
2211                                         /* write desc pointer */
2212                                         writel(ep->bna_dummy_req->td_phys,
2213                                                 &ep->regs->desptr);
2214                                         ep->bna_occurred = 0;
2215                                 }
2216
2217                                 /*
2218                                  * schedule timer for setting RDE if queue
2219                                  * remains empty to allow ep0 packets pass
2220                                  * through
2221                                  */
2222                                 if (set_rde != 0
2223                                                 && !timer_pending(&udc_timer)) {
2224                                         udc_timer.expires =
2225                                                 jiffies
2226                                                 + HZ*UDC_RDE_TIMER_SECONDS;
2227                                         set_rde = 1;
2228                                         if (!stop_timer)
2229                                                 add_timer(&udc_timer);
2230                                 }
2231                                 if (ep->num != UDC_EP0OUT_IX)
2232                                         dev->data_ep_queued = 0;
2233                         }
2234
2235                 } else {
2236                         /*
2237                         * RX DMA must be reenabled for each desc in PPBDU mode
2238                         * and must be enabled for PPBNDU mode in case of BNA
2239                         */
2240                         udc_set_rde(dev);
2241                 }
2242
2243         } else if (ep->cancel_transfer) {
2244                 ret_val = IRQ_HANDLED;
2245                 ep->cancel_transfer = 0;
2246         }
2247
2248         /* check pending CNAKS */
2249         if (cnak_pending) {
2250                 /* CNAk processing when rxfifo empty only */
2251                 if (readl(&dev->regs->sts) & AMD_BIT(UDC_DEVSTS_RXFIFO_EMPTY))
2252                         udc_process_cnak_queue(dev);
2253         }
2254
2255         /* clear OUT bits in ep status */
2256         writel(UDC_EPSTS_OUT_CLEAR, &ep->regs->sts);
2257 finished:
2258         return ret_val;
2259 }
2260
2261 /* Interrupt handler for data IN traffic */
2262 static irqreturn_t udc_data_in_isr(struct udc *dev, int ep_ix)
2263 {
2264         irqreturn_t ret_val = IRQ_NONE;
2265         u32 tmp;
2266         u32 epsts;
2267         struct udc_ep *ep;
2268         struct udc_request *req;
2269         struct udc_data_dma *td;
2270         unsigned dma_done;
2271         unsigned len;
2272
2273         ep = &dev->ep[ep_ix];
2274
2275         epsts = readl(&ep->regs->sts);
2276         if (use_dma) {
2277                 /* BNA ? */
2278                 if (epsts & AMD_BIT(UDC_EPSTS_BNA)) {
2279                         dev_err(&dev->pdev->dev,
2280                                 "BNA ep%din occurred - DESPTR = %08lx\n",
2281                                 ep->num,
2282                                 (unsigned long) readl(&ep->regs->desptr));
2283
2284                         /* clear BNA */
2285                         writel(epsts, &ep->regs->sts);
2286                         ret_val = IRQ_HANDLED;
2287                         goto finished;
2288                 }
2289         }
2290         /* HE event ? */
2291         if (epsts & AMD_BIT(UDC_EPSTS_HE)) {
2292                 dev_err(&dev->pdev->dev,
2293                         "HE ep%dn occurred - DESPTR = %08lx\n",
2294                         ep->num, (unsigned long) readl(&ep->regs->desptr));
2295
2296                 /* clear HE */
2297                 writel(epsts | AMD_BIT(UDC_EPSTS_HE), &ep->regs->sts);
2298                 ret_val = IRQ_HANDLED;
2299                 goto finished;
2300         }
2301
2302         /* DMA completion */
2303         if (epsts & AMD_BIT(UDC_EPSTS_TDC)) {
2304                 VDBG(dev, "TDC set- completion\n");
2305                 ret_val = IRQ_HANDLED;
2306                 if (!ep->cancel_transfer && !list_empty(&ep->queue)) {
2307                         req = list_entry(ep->queue.next,
2308                                         struct udc_request, queue);
2309                         /*
2310                          * length bytes transferred
2311                          * check dma done of last desc. in PPBDU mode
2312                          */
2313                         if (use_dma_ppb_du) {
2314                                 td = udc_get_last_dma_desc(req);
2315                                 if (td) {
2316                                         dma_done =
2317                                                 AMD_GETBITS(td->status,
2318                                                 UDC_DMA_IN_STS_BS);
2319                                         /* don't care DMA done */
2320                                         req->req.actual = req->req.length;
2321                                 }
2322                         } else {
2323                                 /* assume all bytes transferred */
2324                                 req->req.actual = req->req.length;
2325                         }
2326
2327                         if (req->req.actual == req->req.length) {
2328                                 /* complete req */
2329                                 complete_req(ep, req, 0);
2330                                 req->dma_going = 0;
2331                                 /* further request available ? */
2332                                 if (list_empty(&ep->queue)) {
2333                                         /* disable interrupt */
2334                                         tmp = readl(&dev->regs->ep_irqmsk);
2335                                         tmp |= AMD_BIT(ep->num);
2336                                         writel(tmp, &dev->regs->ep_irqmsk);
2337                                 }
2338                         }
2339                 }
2340                 ep->cancel_transfer = 0;
2341
2342         }
2343         /*
2344          * status reg has IN bit set and TDC not set (if TDC was handled,
2345          * IN must not be handled (UDC defect) ?
2346          */
2347         if ((epsts & AMD_BIT(UDC_EPSTS_IN))
2348                         && !(epsts & AMD_BIT(UDC_EPSTS_TDC))) {
2349                 ret_val = IRQ_HANDLED;
2350                 if (!list_empty(&ep->queue)) {
2351                         /* next request */
2352                         req = list_entry(ep->queue.next,
2353                                         struct udc_request, queue);
2354                         /* FIFO mode */
2355                         if (!use_dma) {
2356                                 /* write fifo */
2357                                 udc_txfifo_write(ep, &req->req);
2358                                 len = req->req.length - req->req.actual;
2359                                 if (len > ep->ep.maxpacket)
2360                                         len = ep->ep.maxpacket;
2361                                 req->req.actual += len;
2362                                 if (req->req.actual == req->req.length
2363                                         || (len != ep->ep.maxpacket)) {
2364                                         /* complete req */
2365                                         complete_req(ep, req, 0);
2366                                 }
2367                         /* DMA */
2368                         } else if (req && !req->dma_going) {
2369                                 VDBG(dev, "IN DMA : req=%p req->td_data=%p\n",
2370                                         req, req->td_data);
2371                                 if (req->td_data) {
2372
2373                                         req->dma_going = 1;
2374
2375                                         /*
2376                                          * unset L bit of first desc.
2377                                          * for chain
2378                                          */
2379                                         if (use_dma_ppb && req->req.length >
2380                                                         ep->ep.maxpacket) {
2381                                                 req->td_data->status &=
2382                                                         AMD_CLEAR_BIT(
2383                                                         UDC_DMA_IN_STS_L);
2384                                         }
2385
2386                                         /* write desc pointer */
2387                                         writel(req->td_phys, &ep->regs->desptr);
2388
2389                                         /* set HOST READY */
2390                                         req->td_data->status =
2391                                                 AMD_ADDBITS(
2392                                                 req->td_data->status,
2393                                                 UDC_DMA_IN_STS_BS_HOST_READY,
2394                                                 UDC_DMA_IN_STS_BS);
2395
2396                                         /* set poll demand bit */
2397                                         tmp = readl(&ep->regs->ctl);
2398                                         tmp |= AMD_BIT(UDC_EPCTL_P);
2399                                         writel(tmp, &ep->regs->ctl);
2400                                 }
2401                         }
2402
2403                 } else if (!use_dma && ep->in) {
2404                         /* disable interrupt */
2405                         tmp = readl(
2406                                 &dev->regs->ep_irqmsk);
2407                         tmp |= AMD_BIT(ep->num);
2408                         writel(tmp,
2409                                 &dev->regs->ep_irqmsk);
2410                 }
2411         }
2412         /* clear status bits */
2413         writel(epsts, &ep->regs->sts);
2414
2415 finished:
2416         return ret_val;
2417
2418 }
2419
2420 /* Interrupt handler for Control OUT traffic */
2421 static irqreturn_t udc_control_out_isr(struct udc *dev)
2422 __releases(dev->lock)
2423 __acquires(dev->lock)
2424 {
2425         irqreturn_t ret_val = IRQ_NONE;
2426         u32 tmp;
2427         int setup_supported;
2428         u32 count;
2429         int set = 0;
2430         struct udc_ep   *ep;
2431         struct udc_ep   *ep_tmp;
2432
2433         ep = &dev->ep[UDC_EP0OUT_IX];
2434
2435         /* clear irq */
2436         writel(AMD_BIT(UDC_EPINT_OUT_EP0), &dev->regs->ep_irqsts);
2437
2438         tmp = readl(&dev->ep[UDC_EP0OUT_IX].regs->sts);
2439         /* check BNA and clear if set */
2440         if (tmp & AMD_BIT(UDC_EPSTS_BNA)) {
2441                 VDBG(dev, "ep0: BNA set\n");
2442                 writel(AMD_BIT(UDC_EPSTS_BNA),
2443                         &dev->ep[UDC_EP0OUT_IX].regs->sts);
2444                 ep->bna_occurred = 1;
2445                 ret_val = IRQ_HANDLED;
2446                 goto finished;
2447         }
2448
2449         /* type of data: SETUP or DATA 0 bytes */
2450         tmp = AMD_GETBITS(tmp, UDC_EPSTS_OUT);
2451         VDBG(dev, "data_typ = %x\n", tmp);
2452
2453         /* setup data */
2454         if (tmp == UDC_EPSTS_OUT_SETUP) {
2455                 ret_val = IRQ_HANDLED;
2456
2457                 ep->dev->stall_ep0in = 0;
2458                 dev->waiting_zlp_ack_ep0in = 0;
2459
2460                 /* set NAK for EP0_IN */
2461                 tmp = readl(&dev->ep[UDC_EP0IN_IX].regs->ctl);
2462                 tmp |= AMD_BIT(UDC_EPCTL_SNAK);
2463                 writel(tmp, &dev->ep[UDC_EP0IN_IX].regs->ctl);
2464                 dev->ep[UDC_EP0IN_IX].naking = 1;
2465                 /* get setup data */
2466                 if (use_dma) {
2467
2468                         /* clear OUT bits in ep status */
2469                         writel(UDC_EPSTS_OUT_CLEAR,
2470                                 &dev->ep[UDC_EP0OUT_IX].regs->sts);
2471
2472                         setup_data.data[0] =
2473                                 dev->ep[UDC_EP0OUT_IX].td_stp->data12;
2474                         setup_data.data[1] =
2475                                 dev->ep[UDC_EP0OUT_IX].td_stp->data34;
2476                         /* set HOST READY */
2477                         dev->ep[UDC_EP0OUT_IX].td_stp->status =
2478                                         UDC_DMA_STP_STS_BS_HOST_READY;
2479                 } else {
2480                         /* read fifo */
2481                         udc_rxfifo_read_dwords(dev, setup_data.data, 2);
2482                 }
2483
2484                 /* determine direction of control data */
2485                 if ((setup_data.request.bRequestType & USB_DIR_IN) != 0) {
2486                         dev->gadget.ep0 = &dev->ep[UDC_EP0IN_IX].ep;
2487                         /* enable RDE */
2488                         udc_ep0_set_rde(dev);
2489                         set = 0;
2490                 } else {
2491                         dev->gadget.ep0 = &dev->ep[UDC_EP0OUT_IX].ep;
2492                         /*
2493                          * implant BNA dummy descriptor to allow RXFIFO opening
2494                          * by RDE
2495                          */
2496                         if (ep->bna_dummy_req) {
2497                                 /* write desc pointer */
2498                                 writel(ep->bna_dummy_req->td_phys,
2499                                         &dev->ep[UDC_EP0OUT_IX].regs->desptr);
2500                                 ep->bna_occurred = 0;
2501                         }
2502
2503                         set = 1;
2504                         dev->ep[UDC_EP0OUT_IX].naking = 1;
2505                         /*
2506                          * setup timer for enabling RDE (to not enable
2507                          * RXFIFO DMA for data to early)
2508                          */
2509                         set_rde = 1;
2510                         if (!timer_pending(&udc_timer)) {
2511                                 udc_timer.expires = jiffies +
2512                                                         HZ/UDC_RDE_TIMER_DIV;
2513                                 if (!stop_timer)
2514                                         add_timer(&udc_timer);
2515                         }
2516                 }
2517
2518                 /*
2519                  * mass storage reset must be processed here because
2520                  * next packet may be a CLEAR_FEATURE HALT which would not
2521                  * clear the stall bit when no STALL handshake was received
2522                  * before (autostall can cause this)
2523                  */
2524                 if (setup_data.data[0] == UDC_MSCRES_DWORD0
2525                                 && setup_data.data[1] == UDC_MSCRES_DWORD1) {
2526                         DBG(dev, "MSC Reset\n");
2527                         /*
2528                          * clear stall bits
2529                          * only one IN and OUT endpoints are handled
2530                          */
2531                         ep_tmp = &udc->ep[UDC_EPIN_IX];
2532                         udc_set_halt(&ep_tmp->ep, 0);
2533                         ep_tmp = &udc->ep[UDC_EPOUT_IX];
2534                         udc_set_halt(&ep_tmp->ep, 0);
2535                 }
2536
2537                 /* call gadget with setup data received */
2538                 spin_unlock(&dev->lock);
2539                 setup_supported = dev->driver->setup(&dev->gadget,
2540                                                 &setup_data.request);
2541                 spin_lock(&dev->lock);
2542
2543                 tmp = readl(&dev->ep[UDC_EP0IN_IX].regs->ctl);
2544                 /* ep0 in returns data (not zlp) on IN phase */
2545                 if (setup_supported >= 0 && setup_supported <
2546                                 UDC_EP0IN_MAXPACKET) {
2547                         /* clear NAK by writing CNAK in EP0_IN */
2548                         tmp |= AMD_BIT(UDC_EPCTL_CNAK);
2549                         writel(tmp, &dev->ep[UDC_EP0IN_IX].regs->ctl);
2550                         dev->ep[UDC_EP0IN_IX].naking = 0;
2551                         UDC_QUEUE_CNAK(&dev->ep[UDC_EP0IN_IX], UDC_EP0IN_IX);
2552
2553                 /* if unsupported request then stall */
2554                 } else if (setup_supported < 0) {
2555                         tmp |= AMD_BIT(UDC_EPCTL_S);
2556                         writel(tmp, &dev->ep[UDC_EP0IN_IX].regs->ctl);
2557                 } else
2558                         dev->waiting_zlp_ack_ep0in = 1;
2559
2560
2561                 /* clear NAK by writing CNAK in EP0_OUT */
2562                 if (!set) {
2563                         tmp = readl(&dev->ep[UDC_EP0OUT_IX].regs->ctl);
2564                         tmp |= AMD_BIT(UDC_EPCTL_CNAK);
2565                         writel(tmp, &dev->ep[UDC_EP0OUT_IX].regs->ctl);
2566                         dev->ep[UDC_EP0OUT_IX].naking = 0;
2567                         UDC_QUEUE_CNAK(&dev->ep[UDC_EP0OUT_IX], UDC_EP0OUT_IX);
2568                 }
2569
2570                 if (!use_dma) {
2571                         /* clear OUT bits in ep status */
2572                         writel(UDC_EPSTS_OUT_CLEAR,
2573                                 &dev->ep[UDC_EP0OUT_IX].regs->sts);
2574                 }
2575
2576         /* data packet 0 bytes */
2577         } else if (tmp == UDC_EPSTS_OUT_DATA) {
2578                 /* clear OUT bits in ep status */
2579                 writel(UDC_EPSTS_OUT_CLEAR, &dev->ep[UDC_EP0OUT_IX].regs->sts);
2580
2581                 /* get setup data: only 0 packet */
2582                 if (use_dma) {
2583                         /* no req if 0 packet, just reactivate */
2584                         if (list_empty(&dev->ep[UDC_EP0OUT_IX].queue)) {
2585                                 VDBG(dev, "ZLP\n");
2586
2587                                 /* set HOST READY */
2588                                 dev->ep[UDC_EP0OUT_IX].td->status =
2589                                         AMD_ADDBITS(
2590                                         dev->ep[UDC_EP0OUT_IX].td->status,
2591                                         UDC_DMA_OUT_STS_BS_HOST_READY,
2592                                         UDC_DMA_OUT_STS_BS);
2593                                 /* enable RDE */
2594                                 udc_ep0_set_rde(dev);
2595                                 ret_val = IRQ_HANDLED;
2596
2597                         } else {
2598                                 /* control write */
2599                                 ret_val |= udc_data_out_isr(dev, UDC_EP0OUT_IX);
2600                                 /* re-program desc. pointer for possible ZLPs */
2601                                 writel(dev->ep[UDC_EP0OUT_IX].td_phys,
2602                                         &dev->ep[UDC_EP0OUT_IX].regs->desptr);
2603                                 /* enable RDE */
2604                                 udc_ep0_set_rde(dev);
2605                         }
2606                 } else {
2607
2608                         /* received number bytes */
2609                         count = readl(&dev->ep[UDC_EP0OUT_IX].regs->sts);
2610                         count = AMD_GETBITS(count, UDC_EPSTS_RX_PKT_SIZE);
2611                         /* out data for fifo mode not working */
2612                         count = 0;
2613
2614                         /* 0 packet or real data ? */
2615                         if (count != 0) {
2616                                 ret_val |= udc_data_out_isr(dev, UDC_EP0OUT_IX);
2617                         } else {
2618                                 /* dummy read confirm */
2619                                 readl(&dev->ep[UDC_EP0OUT_IX].regs->confirm);
2620                                 ret_val = IRQ_HANDLED;
2621                         }
2622                 }
2623         }
2624
2625         /* check pending CNAKS */
2626         if (cnak_pending) {
2627                 /* CNAk processing when rxfifo empty only */
2628                 if (readl(&dev->regs->sts) & AMD_BIT(UDC_DEVSTS_RXFIFO_EMPTY))
2629                         udc_process_cnak_queue(dev);
2630         }
2631
2632 finished:
2633         return ret_val;
2634 }
2635
2636 /* Interrupt handler for Control IN traffic */
2637 static irqreturn_t udc_control_in_isr(struct udc *dev)
2638 {
2639         irqreturn_t ret_val = IRQ_NONE;
2640         u32 tmp;
2641         struct udc_ep *ep;
2642         struct udc_request *req;
2643         unsigned len;
2644
2645         ep = &dev->ep[UDC_EP0IN_IX];
2646
2647         /* clear irq */
2648         writel(AMD_BIT(UDC_EPINT_IN_EP0), &dev->regs->ep_irqsts);
2649
2650         tmp = readl(&dev->ep[UDC_EP0IN_IX].regs->sts);
2651         /* DMA completion */
2652         if (tmp & AMD_BIT(UDC_EPSTS_TDC)) {
2653                 VDBG(dev, "isr: TDC clear\n");
2654                 ret_val = IRQ_HANDLED;
2655
2656                 /* clear TDC bit */
2657                 writel(AMD_BIT(UDC_EPSTS_TDC),
2658                                 &dev->ep[UDC_EP0IN_IX].regs->sts);
2659
2660         /* status reg has IN bit set ? */
2661         } else if (tmp & AMD_BIT(UDC_EPSTS_IN)) {
2662                 ret_val = IRQ_HANDLED;
2663
2664                 if (ep->dma) {
2665                         /* clear IN bit */
2666                         writel(AMD_BIT(UDC_EPSTS_IN),
2667                                 &dev->ep[UDC_EP0IN_IX].regs->sts);
2668                 }
2669                 if (dev->stall_ep0in) {
2670                         DBG(dev, "stall ep0in\n");
2671                         /* halt ep0in */
2672                         tmp = readl(&ep->regs->ctl);
2673                         tmp |= AMD_BIT(UDC_EPCTL_S);
2674                         writel(tmp, &ep->regs->ctl);
2675                 } else {
2676                         if (!list_empty(&ep->queue)) {
2677                                 /* next request */
2678                                 req = list_entry(ep->queue.next,
2679                                                 struct udc_request, queue);
2680
2681                                 if (ep->dma) {
2682                                         /* write desc pointer */
2683                                         writel(req->td_phys, &ep->regs->desptr);
2684                                         /* set HOST READY */
2685                                         req->td_data->status =
2686                                                 AMD_ADDBITS(
2687                                                 req->td_data->status,
2688                                                 UDC_DMA_STP_STS_BS_HOST_READY,
2689                                                 UDC_DMA_STP_STS_BS);
2690
2691                                         /* set poll demand bit */
2692                                         tmp =
2693                                         readl(&dev->ep[UDC_EP0IN_IX].regs->ctl);
2694                                         tmp |= AMD_BIT(UDC_EPCTL_P);
2695                                         writel(tmp,
2696                                         &dev->ep[UDC_EP0IN_IX].regs->ctl);
2697
2698                                         /* all bytes will be transferred */
2699                                         req->req.actual = req->req.length;
2700
2701                                         /* complete req */
2702                                         complete_req(ep, req, 0);
2703
2704                                 } else {
2705                                         /* write fifo */
2706                                         udc_txfifo_write(ep, &req->req);
2707
2708                                         /* lengh bytes transferred */
2709                                         len = req->req.length - req->req.actual;
2710                                         if (len > ep->ep.maxpacket)
2711                                                 len = ep->ep.maxpacket;
2712
2713                                         req->req.actual += len;
2714                                         if (req->req.actual == req->req.length
2715                                                 || (len != ep->ep.maxpacket)) {
2716                                                 /* complete req */
2717                                                 complete_req(ep, req, 0);
2718                                         }
2719                                 }
2720
2721                         }
2722                 }
2723                 ep->halted = 0;
2724                 dev->stall_ep0in = 0;
2725                 if (!ep->dma) {
2726                         /* clear IN bit */
2727                         writel(AMD_BIT(UDC_EPSTS_IN),
2728                                 &dev->ep[UDC_EP0IN_IX].regs->sts);
2729                 }
2730         }
2731
2732         return ret_val;
2733 }
2734
2735
2736 /* Interrupt handler for global device events */
2737 static irqreturn_t udc_dev_isr(struct udc *dev, u32 dev_irq)
2738 __releases(dev->lock)
2739 __acquires(dev->lock)
2740 {
2741         irqreturn_t ret_val = IRQ_NONE;
2742         u32 tmp;
2743         u32 cfg;
2744         struct udc_ep *ep;
2745         u16 i;
2746         u8 udc_csr_epix;
2747
2748         /* SET_CONFIG irq ? */
2749         if (dev_irq & AMD_BIT(UDC_DEVINT_SC)) {
2750                 ret_val = IRQ_HANDLED;
2751
2752                 /* read config value */
2753                 tmp = readl(&dev->regs->sts);
2754                 cfg = AMD_GETBITS(tmp, UDC_DEVSTS_CFG);
2755                 DBG(dev, "SET_CONFIG interrupt: config=%d\n", cfg);
2756                 dev->cur_config = cfg;
2757                 dev->set_cfg_not_acked = 1;
2758
2759                 /* make usb request for gadget driver */
2760                 memset(&setup_data, 0 , sizeof(union udc_setup_data));
2761                 setup_data.request.bRequest = USB_REQ_SET_CONFIGURATION;
2762                 setup_data.request.wValue = cpu_to_le16(dev->cur_config);
2763
2764                 /* programm the NE registers */
2765                 for (i = 0; i < UDC_EP_NUM; i++) {
2766                         ep = &dev->ep[i];
2767                         if (ep->in) {
2768
2769                                 /* ep ix in UDC CSR register space */
2770                                 udc_csr_epix = ep->num;
2771
2772
2773                         /* OUT ep */
2774                         } else {
2775                                 /* ep ix in UDC CSR register space */
2776                                 udc_csr_epix = ep->num - UDC_CSR_EP_OUT_IX_OFS;
2777                         }
2778
2779                         tmp = readl(&dev->csr->ne[udc_csr_epix]);
2780                         /* ep cfg */
2781                         tmp = AMD_ADDBITS(tmp, ep->dev->cur_config,
2782                                                 UDC_CSR_NE_CFG);
2783                         /* write reg */
2784                         writel(tmp, &dev->csr->ne[udc_csr_epix]);
2785
2786                         /* clear stall bits */
2787                         ep->halted = 0;
2788                         tmp = readl(&ep->regs->ctl);
2789                         tmp = tmp & AMD_CLEAR_BIT(UDC_EPCTL_S);
2790                         writel(tmp, &ep->regs->ctl);
2791                 }
2792                 /* call gadget zero with setup data received */
2793                 spin_unlock(&dev->lock);
2794                 tmp = dev->driver->setup(&dev->gadget, &setup_data.request);
2795                 spin_lock(&dev->lock);
2796
2797         } /* SET_INTERFACE ? */
2798         if (dev_irq & AMD_BIT(UDC_DEVINT_SI)) {
2799                 ret_val = IRQ_HANDLED;
2800
2801                 dev->set_cfg_not_acked = 1;
2802                 /* read interface and alt setting values */
2803                 tmp = readl(&dev->regs->sts);
2804                 dev->cur_alt = AMD_GETBITS(tmp, UDC_DEVSTS_ALT);
2805                 dev->cur_intf = AMD_GETBITS(tmp, UDC_DEVSTS_INTF);
2806
2807                 /* make usb request for gadget driver */
2808                 memset(&setup_data, 0 , sizeof(union udc_setup_data));
2809                 setup_data.request.bRequest = USB_REQ_SET_INTERFACE;
2810                 setup_data.request.bRequestType = USB_RECIP_INTERFACE;
2811                 setup_data.request.wValue = cpu_to_le16(dev->cur_alt);
2812                 setup_data.request.wIndex = cpu_to_le16(dev->cur_intf);
2813
2814                 DBG(dev, "SET_INTERFACE interrupt: alt=%d intf=%d\n",
2815                                 dev->cur_alt, dev->cur_intf);
2816
2817                 /* programm the NE registers */
2818                 for (i = 0; i < UDC_EP_NUM; i++) {
2819                         ep = &dev->ep[i];
2820                         if (ep->in) {
2821
2822                                 /* ep ix in UDC CSR register space */
2823                                 udc_csr_epix = ep->num;
2824
2825
2826                         /* OUT ep */
2827                         } else {
2828                                 /* ep ix in UDC CSR register space */
2829                                 udc_csr_epix = ep->num - UDC_CSR_EP_OUT_IX_OFS;
2830                         }
2831
2832                         /* UDC CSR reg */
2833                         /* set ep values */
2834                         tmp = readl(&dev->csr->ne[udc_csr_epix]);
2835                         /* ep interface */
2836                         tmp = AMD_ADDBITS(tmp, ep->dev->cur_intf,
2837                                                 UDC_CSR_NE_INTF);
2838                         /* tmp = AMD_ADDBITS(tmp, 2, UDC_CSR_NE_INTF); */
2839                         /* ep alt */
2840                         tmp = AMD_ADDBITS(tmp, ep->dev->cur_alt,
2841                                                 UDC_CSR_NE_ALT);
2842                         /* write reg */
2843                         writel(tmp, &dev->csr->ne[udc_csr_epix]);
2844
2845                         /* clear stall bits */
2846                         ep->halted = 0;
2847                         tmp = readl(&ep->regs->ctl);
2848                         tmp = tmp & AMD_CLEAR_BIT(UDC_EPCTL_S);
2849                         writel(tmp, &ep->regs->ctl);
2850                 }
2851
2852                 /* call gadget zero with setup data received */
2853                 spin_unlock(&dev->lock);
2854                 tmp = dev->driver->setup(&dev->gadget, &setup_data.request);
2855                 spin_lock(&dev->lock);
2856
2857         } /* USB reset */
2858         if (dev_irq & AMD_BIT(UDC_DEVINT_UR)) {
2859                 DBG(dev, "USB Reset interrupt\n");
2860                 ret_val = IRQ_HANDLED;
2861
2862                 /* allow soft reset when suspend occurs */
2863                 soft_reset_occured = 0;
2864
2865                 dev->waiting_zlp_ack_ep0in = 0;
2866                 dev->set_cfg_not_acked = 0;
2867
2868                 /* mask not needed interrupts */
2869                 udc_mask_unused_interrupts(dev);
2870
2871                 /* call gadget to resume and reset configs etc. */
2872                 spin_unlock(&dev->lock);
2873                 if (dev->sys_suspended && dev->driver->resume) {
2874                         dev->driver->resume(&dev->gadget);
2875                         dev->sys_suspended = 0;
2876                 }
2877                 dev->driver->disconnect(&dev->gadget);
2878                 spin_lock(&dev->lock);
2879
2880                 /* disable ep0 to empty req queue */
2881                 empty_req_queue(&dev->ep[UDC_EP0IN_IX]);
2882                 ep_init(dev->regs, &dev->ep[UDC_EP0IN_IX]);
2883
2884                 /* soft reset when rxfifo not empty */
2885                 tmp = readl(&dev->regs->sts);
2886                 if (!(tmp & AMD_BIT(UDC_DEVSTS_RXFIFO_EMPTY))
2887                                 && !soft_reset_after_usbreset_occured) {
2888                         udc_soft_reset(dev);
2889                         soft_reset_after_usbreset_occured++;
2890                 }
2891
2892                 /*
2893                  * DMA reset to kill potential old DMA hw hang,
2894                  * POLL bit is already reset by ep_init() through
2895                  * disconnect()
2896                  */
2897                 DBG(dev, "DMA machine reset\n");
2898                 tmp = readl(&dev->regs->cfg);
2899                 writel(tmp | AMD_BIT(UDC_DEVCFG_DMARST), &dev->regs->cfg);
2900                 writel(tmp, &dev->regs->cfg);
2901
2902                 /* put into initial config */
2903                 udc_basic_init(dev);
2904
2905                 /* enable device setup interrupts */
2906                 udc_enable_dev_setup_interrupts(dev);
2907
2908                 /* enable suspend interrupt */
2909                 tmp = readl(&dev->regs->irqmsk);
2910                 tmp &= AMD_UNMASK_BIT(UDC_DEVINT_US);
2911                 writel(tmp, &dev->regs->irqmsk);
2912
2913         } /* USB suspend */
2914         if (dev_irq & AMD_BIT(UDC_DEVINT_US)) {
2915                 DBG(dev, "USB Suspend interrupt\n");
2916                 ret_val = IRQ_HANDLED;
2917                 if (dev->driver->suspend) {
2918                         spin_unlock(&dev->lock);
2919                         dev->sys_suspended = 1;
2920                         dev->driver->suspend(&dev->gadget);
2921                         spin_lock(&dev->lock);
2922                 }
2923         } /* new speed ? */
2924         if (dev_irq & AMD_BIT(UDC_DEVINT_ENUM)) {
2925                 DBG(dev, "ENUM interrupt\n");
2926                 ret_val = IRQ_HANDLED;
2927                 soft_reset_after_usbreset_occured = 0;
2928
2929                 /* disable ep0 to empty req queue */
2930                 empty_req_queue(&dev->ep[UDC_EP0IN_IX]);
2931                 ep_init(dev->regs, &dev->ep[UDC_EP0IN_IX]);
2932
2933                 /* link up all endpoints */
2934                 udc_setup_endpoints(dev);
2935                 dev_info(&dev->pdev->dev, "Connect: %s\n",
2936                          usb_speed_string(dev->gadget.speed));
2937
2938                 /* init ep 0 */
2939                 activate_control_endpoints(dev);
2940
2941                 /* enable ep0 interrupts */
2942                 udc_enable_ep0_interrupts(dev);
2943         }
2944         /* session valid change interrupt */
2945         if (dev_irq & AMD_BIT(UDC_DEVINT_SVC)) {
2946                 DBG(dev, "USB SVC interrupt\n");
2947                 ret_val = IRQ_HANDLED;
2948
2949                 /* check that session is not valid to detect disconnect */
2950                 tmp = readl(&dev->regs->sts);
2951                 if (!(tmp & AMD_BIT(UDC_DEVSTS_SESSVLD))) {
2952                         /* disable suspend interrupt */
2953                         tmp = readl(&dev->regs->irqmsk);
2954                         tmp |= AMD_BIT(UDC_DEVINT_US);
2955                         writel(tmp, &dev->regs->irqmsk);
2956                         DBG(dev, "USB Disconnect (session valid low)\n");
2957                         /* cleanup on disconnect */
2958                         usb_disconnect(udc);
2959                 }
2960
2961         }
2962
2963         return ret_val;
2964 }
2965
2966 /* Interrupt Service Routine, see Linux Kernel Doc for parameters */
2967 static irqreturn_t udc_irq(int irq, void *pdev)
2968 {
2969         struct udc *dev = pdev;
2970         u32 reg;
2971         u16 i;
2972         u32 ep_irq;
2973         irqreturn_t ret_val = IRQ_NONE;
2974
2975         spin_lock(&dev->lock);
2976
2977         /* check for ep irq */
2978         reg = readl(&dev->regs->ep_irqsts);
2979         if (reg) {
2980                 if (reg & AMD_BIT(UDC_EPINT_OUT_EP0))
2981                         ret_val |= udc_control_out_isr(dev);
2982                 if (reg & AMD_BIT(UDC_EPINT_IN_EP0))
2983                         ret_val |= udc_control_in_isr(dev);
2984
2985                 /*
2986                  * data endpoint
2987                  * iterate ep's
2988                  */
2989                 for (i = 1; i < UDC_EP_NUM; i++) {
2990                         ep_irq = 1 << i;
2991                         if (!(reg & ep_irq) || i == UDC_EPINT_OUT_EP0)
2992                                 continue;
2993
2994                         /* clear irq status */
2995                         writel(ep_irq, &dev->regs->ep_irqsts);
2996
2997                         /* irq for out ep ? */
2998                         if (i > UDC_EPIN_NUM)
2999                                 ret_val |= udc_data_out_isr(dev, i);
3000                         else
3001                                 ret_val |= udc_data_in_isr(dev, i);
3002                 }
3003
3004         }
3005
3006
3007         /* check for dev irq */
3008         reg = readl(&dev->regs->irqsts);
3009         if (reg) {
3010                 /* clear irq */
3011                 writel(reg, &dev->regs->irqsts);
3012                 ret_val |= udc_dev_isr(dev, reg);
3013         }
3014
3015
3016         spin_unlock(&dev->lock);
3017         return ret_val;
3018 }
3019
3020 /* Tears down device */
3021 static void gadget_release(struct device *pdev)
3022 {
3023         struct amd5536udc *dev = dev_get_drvdata(pdev);
3024         kfree(dev);
3025 }
3026
3027 /* Cleanup on device remove */
3028 static void udc_remove(struct udc *dev)
3029 {
3030         /* remove timer */
3031         stop_timer++;
3032         if (timer_pending(&udc_timer))
3033                 wait_for_completion(&on_exit);
3034         if (udc_timer.data)
3035                 del_timer_sync(&udc_timer);
3036         /* remove pollstall timer */
3037         stop_pollstall_timer++;
3038         if (timer_pending(&udc_pollstall_timer))
3039                 wait_for_completion(&on_pollstall_exit);
3040         if (udc_pollstall_timer.data)
3041                 del_timer_sync(&udc_pollstall_timer);
3042         udc = NULL;
3043 }
3044
3045 /* Reset all pci context */
3046 static void udc_pci_remove(struct pci_dev *pdev)
3047 {
3048         struct udc              *dev;
3049
3050         dev = pci_get_drvdata(pdev);
3051
3052         usb_del_gadget_udc(&udc->gadget);
3053         /* gadget driver must not be registered */
3054         BUG_ON(dev->driver != NULL);
3055
3056         /* dma pool cleanup */
3057         if (dev->data_requests)
3058                 pci_pool_destroy(dev->data_requests);
3059
3060         if (dev->stp_requests) {
3061                 /* cleanup DMA desc's for ep0in */
3062                 pci_pool_free(dev->stp_requests,
3063                         dev->ep[UDC_EP0OUT_IX].td_stp,
3064                         dev->ep[UDC_EP0OUT_IX].td_stp_dma);
3065                 pci_pool_free(dev->stp_requests,
3066                         dev->ep[UDC_EP0OUT_IX].td,
3067                         dev->ep[UDC_EP0OUT_IX].td_phys);
3068
3069                 pci_pool_destroy(dev->stp_requests);
3070         }
3071
3072         /* reset controller */
3073         writel(AMD_BIT(UDC_DEVCFG_SOFTRESET), &dev->regs->cfg);
3074         if (dev->irq_registered)
3075                 free_irq(pdev->irq, dev);
3076         if (dev->regs)
3077                 iounmap(dev->regs);
3078         if (dev->mem_region)
3079                 release_mem_region(pci_resource_start(pdev, 0),
3080                                 pci_resource_len(pdev, 0));
3081         if (dev->active)
3082                 pci_disable_device(pdev);
3083
3084         udc_remove(dev);
3085 }
3086
3087 /* create dma pools on init */
3088 static int init_dma_pools(struct udc *dev)
3089 {
3090         struct udc_stp_dma      *td_stp;
3091         struct udc_data_dma     *td_data;
3092         int retval;
3093
3094         /* consistent DMA mode setting ? */
3095         if (use_dma_ppb) {
3096                 use_dma_bufferfill_mode = 0;
3097         } else {
3098                 use_dma_ppb_du = 0;
3099                 use_dma_bufferfill_mode = 1;
3100         }
3101
3102         /* DMA setup */
3103         dev->data_requests = dma_pool_create("data_requests", NULL,
3104                 sizeof(struct udc_data_dma), 0, 0);
3105         if (!dev->data_requests) {
3106                 DBG(dev, "can't get request data pool\n");
3107                 retval = -ENOMEM;
3108                 goto finished;
3109         }
3110
3111         /* EP0 in dma regs = dev control regs */
3112         dev->ep[UDC_EP0IN_IX].dma = &dev->regs->ctl;
3113
3114         /* dma desc for setup data */
3115         dev->stp_requests = dma_pool_create("setup requests", NULL,
3116                 sizeof(struct udc_stp_dma), 0, 0);
3117         if (!dev->stp_requests) {
3118                 DBG(dev, "can't get stp request pool\n");
3119                 retval = -ENOMEM;
3120                 goto finished;
3121         }
3122         /* setup */
3123         td_stp = dma_pool_alloc(dev->stp_requests, GFP_KERNEL,
3124                                 &dev->ep[UDC_EP0OUT_IX].td_stp_dma);
3125         if (td_stp == NULL) {
3126                 retval = -ENOMEM;
3127                 goto finished;
3128         }
3129         dev->ep[UDC_EP0OUT_IX].td_stp = td_stp;
3130
3131         /* data: 0 packets !? */
3132         td_data = dma_pool_alloc(dev->stp_requests, GFP_KERNEL,
3133                                 &dev->ep[UDC_EP0OUT_IX].td_phys);
3134         if (td_data == NULL) {
3135                 retval = -ENOMEM;
3136                 goto finished;
3137         }
3138         dev->ep[UDC_EP0OUT_IX].td = td_data;
3139         return 0;
3140
3141 finished:
3142         return retval;
3143 }
3144
3145 /* Called by pci bus driver to init pci context */
3146 static int udc_pci_probe(
3147         struct pci_dev *pdev,
3148         const struct pci_device_id *id
3149 )
3150 {
3151         struct udc              *dev;
3152         unsigned long           resource;
3153         unsigned long           len;
3154         int                     retval = 0;
3155
3156         /* one udc only */
3157         if (udc) {
3158                 dev_dbg(&pdev->dev, "already probed\n");
3159                 return -EBUSY;
3160         }
3161
3162         /* init */
3163         dev = kzalloc(sizeof(struct udc), GFP_KERNEL);
3164         if (!dev) {
3165                 retval = -ENOMEM;
3166                 goto finished;
3167         }
3168
3169         /* pci setup */
3170         if (pci_enable_device(pdev) < 0) {
3171                 kfree(dev);
3172                 dev = NULL;
3173                 retval = -ENODEV;
3174                 goto finished;
3175         }
3176         dev->active = 1;
3177
3178         /* PCI resource allocation */
3179         resource = pci_resource_start(pdev, 0);
3180         len = pci_resource_len(pdev, 0);
3181
3182         if (!request_mem_region(resource, len, name)) {
3183                 dev_dbg(&pdev->dev, "pci device used already\n");
3184                 kfree(dev);
3185                 dev = NULL;
3186                 retval = -EBUSY;
3187                 goto finished;
3188         }
3189         dev->mem_region = 1;
3190
3191         dev->virt_addr = ioremap_nocache(resource, len);
3192         if (dev->virt_addr == NULL) {
3193                 dev_dbg(&pdev->dev, "start address cannot be mapped\n");
3194                 kfree(dev);
3195                 dev = NULL;
3196                 retval = -EFAULT;
3197                 goto finished;
3198         }
3199
3200         if (!pdev->irq) {
3201                 dev_err(&pdev->dev, "irq not set\n");
3202                 kfree(dev);
3203                 dev = NULL;
3204                 retval = -ENODEV;
3205                 goto finished;
3206         }
3207
3208         spin_lock_init(&dev->lock);
3209         /* udc csr registers base */
3210         dev->csr = dev->virt_addr + UDC_CSR_ADDR;
3211         /* dev registers base */
3212         dev->regs = dev->virt_addr + UDC_DEVCFG_ADDR;
3213         /* ep registers base */
3214         dev->ep_regs = dev->virt_addr + UDC_EPREGS_ADDR;
3215         /* fifo's base */
3216         dev->rxfifo = (u32 __iomem *)(dev->virt_addr + UDC_RXFIFO_ADDR);
3217         dev->txfifo = (u32 __iomem *)(dev->virt_addr + UDC_TXFIFO_ADDR);
3218
3219         if (request_irq(pdev->irq, udc_irq, IRQF_SHARED, name, dev) != 0) {
3220                 dev_dbg(&pdev->dev, "request_irq(%d) fail\n", pdev->irq);
3221                 kfree(dev);
3222                 dev = NULL;
3223                 retval = -EBUSY;
3224                 goto finished;
3225         }
3226         dev->irq_registered = 1;
3227
3228         pci_set_drvdata(pdev, dev);
3229
3230         /* chip revision for Hs AMD5536 */
3231         dev->chiprev = pdev->revision;
3232
3233         pci_set_master(pdev);
3234         pci_try_set_mwi(pdev);
3235
3236         /* init dma pools */
3237         if (use_dma) {
3238                 retval = init_dma_pools(dev);
3239                 if (retval != 0)
3240                         goto finished;
3241         }
3242
3243         dev->phys_addr = resource;
3244         dev->irq = pdev->irq;
3245         dev->pdev = pdev;
3246
3247         /* general probing */
3248         if (udc_probe(dev) == 0)
3249                 return 0;
3250
3251 finished:
3252         if (dev)
3253                 udc_pci_remove(pdev);
3254         return retval;
3255 }
3256
3257 /* general probe */
3258 static int udc_probe(struct udc *dev)
3259 {
3260         char            tmp[128];
3261         u32             reg;
3262         int             retval;
3263
3264         /* mark timer as not initialized */
3265         udc_timer.data = 0;
3266         udc_pollstall_timer.data = 0;
3267
3268         /* device struct setup */
3269         dev->gadget.ops = &udc_ops;
3270
3271         dev_set_name(&dev->gadget.dev, "gadget");
3272         dev->gadget.name = name;
3273         dev->gadget.max_speed = USB_SPEED_HIGH;
3274
3275         /* init registers, interrupts, ... */
3276         startup_registers(dev);
3277
3278         dev_info(&dev->pdev->dev, "%s\n", mod_desc);
3279
3280         snprintf(tmp, sizeof tmp, "%d", dev->irq);
3281         dev_info(&dev->pdev->dev,
3282                 "irq %s, pci mem %08lx, chip rev %02x(Geode5536 %s)\n",
3283                 tmp, dev->phys_addr, dev->chiprev,
3284                 (dev->chiprev == UDC_HSA0_REV) ? "A0" : "B1");
3285         strcpy(tmp, UDC_DRIVER_VERSION_STRING);
3286         if (dev->chiprev == UDC_HSA0_REV) {
3287                 dev_err(&dev->pdev->dev, "chip revision is A0; too old\n");
3288                 retval = -ENODEV;
3289                 goto finished;
3290         }
3291         dev_info(&dev->pdev->dev,
3292                 "driver version: %s(for Geode5536 B1)\n", tmp);
3293         udc = dev;
3294
3295         retval = usb_add_gadget_udc_release(&udc->pdev->dev, &dev->gadget,
3296                         gadget_release);
3297         if (retval)
3298                 goto finished;
3299
3300         /* timer init */
3301         init_timer(&udc_timer);
3302         udc_timer.function = udc_timer_function;
3303         udc_timer.data = 1;
3304         /* timer pollstall init */
3305         init_timer(&udc_pollstall_timer);
3306         udc_pollstall_timer.function = udc_pollstall_timer_function;
3307         udc_pollstall_timer.data = 1;
3308
3309         /* set SD */
3310         reg = readl(&dev->regs->ctl);
3311         reg |= AMD_BIT(UDC_DEVCTL_SD);
3312         writel(reg, &dev->regs->ctl);
3313
3314         /* print dev register info */
3315         print_regs(dev);
3316
3317         return 0;
3318
3319 finished:
3320         return retval;
3321 }
3322
3323 /* Initiates a remote wakeup */
3324 static int udc_remote_wakeup(struct udc *dev)
3325 {
3326         unsigned long flags;
3327         u32 tmp;
3328
3329         DBG(dev, "UDC initiates remote wakeup\n");
3330
3331         spin_lock_irqsave(&dev->lock, flags);
3332
3333         tmp = readl(&dev->regs->ctl);
3334         tmp |= AMD_BIT(UDC_DEVCTL_RES);
3335         writel(tmp, &dev->regs->ctl);
3336         tmp &= AMD_CLEAR_BIT(UDC_DEVCTL_RES);
3337         writel(tmp, &dev->regs->ctl);
3338
3339         spin_unlock_irqrestore(&dev->lock, flags);
3340         return 0;
3341 }
3342
3343 /* PCI device parameters */
3344 static const struct pci_device_id pci_id[] = {
3345         {
3346                 PCI_DEVICE(PCI_VENDOR_ID_AMD, 0x2096),
3347                 .class =        (PCI_CLASS_SERIAL_USB << 8) | 0xfe,
3348                 .class_mask =   0xffffffff,
3349         },
3350         {},
3351 };
3352 MODULE_DEVICE_TABLE(pci, pci_id);
3353
3354 /* PCI functions */
3355 static struct pci_driver udc_pci_driver = {
3356         .name =         (char *) name,
3357         .id_table =     pci_id,
3358         .probe =        udc_pci_probe,
3359         .remove =       udc_pci_remove,
3360 };
3361
3362 module_pci_driver(udc_pci_driver);
3363
3364 MODULE_DESCRIPTION(UDC_MOD_DESCRIPTION);
3365 MODULE_AUTHOR("Thomas Dahlmann");
3366 MODULE_LICENSE("GPL");
3367