2 * ep0.c - DesignWare USB3 DRD Controller Endpoint 0 Handling
4 * Copyright (C) 2010-2011 Texas Instruments Incorporated - http://www.ti.com
6 * Authors: Felipe Balbi <balbi@ti.com>,
7 * Sebastian Andrzej Siewior <bigeasy@linutronix.de>
9 * Redistribution and use in source and binary forms, with or without
10 * modification, are permitted provided that the following conditions
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions, and the following disclaimer,
14 * without modification.
15 * 2. Redistributions in binary form must reproduce the above copyright
16 * notice, this list of conditions and the following disclaimer in the
17 * documentation and/or other materials provided with the distribution.
18 * 3. The names of the above-listed copyright holders may not be used
19 * to endorse or promote products derived from this software without
20 * specific prior written permission.
22 * ALTERNATIVELY, this software may be distributed under the terms of the
23 * GNU General Public License ("GPL") version 2, as published by the Free
24 * Software Foundation.
26 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
27 * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
28 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
29 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
30 * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
31 * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
32 * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
33 * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
34 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
35 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
36 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
39 #include <linux/kernel.h>
40 #include <linux/slab.h>
41 #include <linux/spinlock.h>
42 #include <linux/platform_device.h>
43 #include <linux/pm_runtime.h>
44 #include <linux/interrupt.h>
46 #include <linux/list.h>
47 #include <linux/dma-mapping.h>
49 #include <linux/usb/ch9.h>
50 #include <linux/usb/gadget.h>
51 #include <linux/usb/composite.h>
57 static void __dwc3_ep0_do_control_status(struct dwc3
*dwc
, struct dwc3_ep
*dep
);
58 static void __dwc3_ep0_do_control_data(struct dwc3
*dwc
,
59 struct dwc3_ep
*dep
, struct dwc3_request
*req
);
61 static const char *dwc3_ep0_state_string(enum dwc3_ep0_state state
)
70 case EP0_STATUS_PHASE
:
71 return "Status Phase";
77 static int dwc3_ep0_start_trans(struct dwc3
*dwc
, u8 epnum
, dma_addr_t buf_dma
,
80 struct dwc3_gadget_ep_cmd_params params
;
86 dep
= dwc
->eps
[epnum
];
87 if (dep
->flags
& DWC3_EP_BUSY
) {
88 dev_vdbg(dwc
->dev
, "%s: still busy\n", dep
->name
);
94 trb
->bpl
= lower_32_bits(buf_dma
);
95 trb
->bph
= upper_32_bits(buf_dma
);
99 trb
->ctrl
|= (DWC3_TRB_CTRL_HWO
102 | DWC3_TRB_CTRL_ISP_IMI
);
104 memset(¶ms
, 0, sizeof(params
));
105 params
.param0
= upper_32_bits(dwc
->ep0_trb_addr
);
106 params
.param1
= lower_32_bits(dwc
->ep0_trb_addr
);
108 ret
= dwc3_send_gadget_ep_cmd(dwc
, dep
->number
,
109 DWC3_DEPCMD_STARTTRANSFER
, ¶ms
);
111 dev_dbg(dwc
->dev
, "failed to send STARTTRANSFER command\n");
115 dep
->flags
|= DWC3_EP_BUSY
;
116 dep
->resource_index
= dwc3_gadget_ep_get_transfer_index(dwc
,
119 dwc
->ep0_next_event
= DWC3_EP0_COMPLETE
;
124 static int __dwc3_gadget_ep0_queue(struct dwc3_ep
*dep
,
125 struct dwc3_request
*req
)
127 struct dwc3
*dwc
= dep
->dwc
;
129 req
->request
.actual
= 0;
130 req
->request
.status
= -EINPROGRESS
;
131 req
->epnum
= dep
->number
;
133 list_add_tail(&req
->list
, &dep
->request_list
);
136 * Gadget driver might not be quick enough to queue a request
137 * before we get a Transfer Not Ready event on this endpoint.
139 * In that case, we will set DWC3_EP_PENDING_REQUEST. When that
140 * flag is set, it's telling us that as soon as Gadget queues the
141 * required request, we should kick the transfer here because the
142 * IRQ we were waiting for is long gone.
144 if (dep
->flags
& DWC3_EP_PENDING_REQUEST
) {
147 direction
= !!(dep
->flags
& DWC3_EP0_DIR_IN
);
149 if (dwc
->ep0state
!= EP0_DATA_PHASE
) {
150 dev_WARN(dwc
->dev
, "Unexpected pending request\n");
154 __dwc3_ep0_do_control_data(dwc
, dwc
->eps
[direction
], req
);
156 dep
->flags
&= ~(DWC3_EP_PENDING_REQUEST
|
163 * In case gadget driver asked us to delay the STATUS phase,
166 if (dwc
->delayed_status
) {
169 direction
= !dwc
->ep0_expect_in
;
170 dwc
->delayed_status
= false;
172 if (dwc
->ep0state
== EP0_STATUS_PHASE
)
173 __dwc3_ep0_do_control_status(dwc
, dwc
->eps
[direction
]);
175 dev_dbg(dwc
->dev
, "too early for delayed status\n");
181 * Unfortunately we have uncovered a limitation wrt the Data Phase.
183 * Section 9.4 says we can wait for the XferNotReady(DATA) event to
184 * come before issueing Start Transfer command, but if we do, we will
185 * miss situations where the host starts another SETUP phase instead of
186 * the DATA phase. Such cases happen at least on TD.7.6 of the Link
187 * Layer Compliance Suite.
189 * The problem surfaces due to the fact that in case of back-to-back
190 * SETUP packets there will be no XferNotReady(DATA) generated and we
191 * will be stuck waiting for XferNotReady(DATA) forever.
193 * By looking at tables 9-13 and 9-14 of the Databook, we can see that
194 * it tells us to start Data Phase right away. It also mentions that if
195 * we receive a SETUP phase instead of the DATA phase, core will issue
196 * XferComplete for the DATA phase, before actually initiating it in
197 * the wire, with the TRB's status set to "SETUP_PENDING". Such status
198 * can only be used to print some debugging logs, as the core expects
199 * us to go through to the STATUS phase and start a CONTROL_STATUS TRB,
200 * just so it completes right away, without transferring anything and,
201 * only then, we can go back to the SETUP phase.
203 * Because of this scenario, SNPS decided to change the programming
204 * model of control transfers and support on-demand transfers only for
205 * the STATUS phase. To fix the issue we have now, we will always wait
206 * for gadget driver to queue the DATA phase's struct usb_request, then
207 * start it right away.
209 * If we're actually in a 2-stage transfer, we will wait for
210 * XferNotReady(STATUS).
212 if (dwc
->three_stage_setup
) {
215 direction
= dwc
->ep0_expect_in
;
216 dwc
->ep0state
= EP0_DATA_PHASE
;
218 __dwc3_ep0_do_control_data(dwc
, dwc
->eps
[direction
], req
);
220 dep
->flags
&= ~DWC3_EP0_DIR_IN
;
226 int dwc3_gadget_ep0_queue(struct usb_ep
*ep
, struct usb_request
*request
,
229 struct dwc3_request
*req
= to_dwc3_request(request
);
230 struct dwc3_ep
*dep
= to_dwc3_ep(ep
);
231 struct dwc3
*dwc
= dep
->dwc
;
237 spin_lock_irqsave(&dwc
->lock
, flags
);
238 if (!dep
->endpoint
.desc
) {
239 dev_dbg(dwc
->dev
, "trying to queue request %p to disabled %s\n",
245 /* we share one TRB for ep0/1 */
246 if (!list_empty(&dep
->request_list
)) {
251 dev_vdbg(dwc
->dev
, "queueing request %p to %s length %d, state '%s'\n",
252 request
, dep
->name
, request
->length
,
253 dwc3_ep0_state_string(dwc
->ep0state
));
255 ret
= __dwc3_gadget_ep0_queue(dep
, req
);
258 spin_unlock_irqrestore(&dwc
->lock
, flags
);
263 static void dwc3_ep0_stall_and_restart(struct dwc3
*dwc
)
267 /* reinitialize physical ep1 */
269 dep
->flags
= DWC3_EP_ENABLED
;
271 /* stall is always issued on EP0 */
273 __dwc3_gadget_ep_set_halt(dep
, 1);
274 dep
->flags
= DWC3_EP_ENABLED
;
275 dwc
->delayed_status
= false;
277 if (!list_empty(&dep
->request_list
)) {
278 struct dwc3_request
*req
;
280 req
= next_request(&dep
->request_list
);
281 dwc3_gadget_giveback(dep
, req
, -ECONNRESET
);
284 dwc
->ep0state
= EP0_SETUP_PHASE
;
285 dwc3_ep0_out_start(dwc
);
288 int dwc3_gadget_ep0_set_halt(struct usb_ep
*ep
, int value
)
290 struct dwc3_ep
*dep
= to_dwc3_ep(ep
);
291 struct dwc3
*dwc
= dep
->dwc
;
293 dwc3_ep0_stall_and_restart(dwc
);
298 void dwc3_ep0_out_start(struct dwc3
*dwc
)
302 ret
= dwc3_ep0_start_trans(dwc
, 0, dwc
->ctrl_req_addr
, 8,
303 DWC3_TRBCTL_CONTROL_SETUP
);
307 static struct dwc3_ep
*dwc3_wIndex_to_dep(struct dwc3
*dwc
, __le16 wIndex_le
)
310 u32 windex
= le16_to_cpu(wIndex_le
);
313 epnum
= (windex
& USB_ENDPOINT_NUMBER_MASK
) << 1;
314 if ((windex
& USB_ENDPOINT_DIR_MASK
) == USB_DIR_IN
)
317 dep
= dwc
->eps
[epnum
];
318 if (dep
->flags
& DWC3_EP_ENABLED
)
324 static void dwc3_ep0_status_cmpl(struct usb_ep
*ep
, struct usb_request
*req
)
330 static int dwc3_ep0_handle_status(struct dwc3
*dwc
,
331 struct usb_ctrlrequest
*ctrl
)
337 __le16
*response_pkt
;
339 recip
= ctrl
->bRequestType
& USB_RECIP_MASK
;
341 case USB_RECIP_DEVICE
:
343 * LTM will be set once we know how to set this in HW.
345 usb_status
|= dwc
->is_selfpowered
<< USB_DEVICE_SELF_POWERED
;
347 if (dwc
->speed
== DWC3_DSTS_SUPERSPEED
) {
348 reg
= dwc3_readl(dwc
->regs
, DWC3_DCTL
);
349 if (reg
& DWC3_DCTL_INITU1ENA
)
350 usb_status
|= 1 << USB_DEV_STAT_U1_ENABLED
;
351 if (reg
& DWC3_DCTL_INITU2ENA
)
352 usb_status
|= 1 << USB_DEV_STAT_U2_ENABLED
;
357 case USB_RECIP_INTERFACE
:
359 * Function Remote Wake Capable D0
360 * Function Remote Wakeup D1
364 case USB_RECIP_ENDPOINT
:
365 dep
= dwc3_wIndex_to_dep(dwc
, ctrl
->wIndex
);
369 if (dep
->flags
& DWC3_EP_STALL
)
370 usb_status
= 1 << USB_ENDPOINT_HALT
;
376 response_pkt
= (__le16
*) dwc
->setup_buf
;
377 *response_pkt
= cpu_to_le16(usb_status
);
380 dwc
->ep0_usb_req
.dep
= dep
;
381 dwc
->ep0_usb_req
.request
.length
= sizeof(*response_pkt
);
382 dwc
->ep0_usb_req
.request
.buf
= dwc
->setup_buf
;
383 dwc
->ep0_usb_req
.request
.complete
= dwc3_ep0_status_cmpl
;
385 return __dwc3_gadget_ep0_queue(dep
, &dwc
->ep0_usb_req
);
388 static int dwc3_ep0_handle_feature(struct dwc3
*dwc
,
389 struct usb_ctrlrequest
*ctrl
, int set
)
398 wValue
= le16_to_cpu(ctrl
->wValue
);
399 wIndex
= le16_to_cpu(ctrl
->wIndex
);
400 recip
= ctrl
->bRequestType
& USB_RECIP_MASK
;
402 case USB_RECIP_DEVICE
:
405 case USB_DEVICE_REMOTE_WAKEUP
:
408 * 9.4.1 says only only for SS, in AddressState only for
409 * default control pipe
411 case USB_DEVICE_U1_ENABLE
:
412 if (dwc
->dev_state
!= DWC3_CONFIGURED_STATE
)
414 if (dwc
->speed
!= DWC3_DSTS_SUPERSPEED
)
417 reg
= dwc3_readl(dwc
->regs
, DWC3_DCTL
);
419 reg
|= DWC3_DCTL_INITU1ENA
;
421 reg
&= ~DWC3_DCTL_INITU1ENA
;
422 dwc3_writel(dwc
->regs
, DWC3_DCTL
, reg
);
425 case USB_DEVICE_U2_ENABLE
:
426 if (dwc
->dev_state
!= DWC3_CONFIGURED_STATE
)
428 if (dwc
->speed
!= DWC3_DSTS_SUPERSPEED
)
431 reg
= dwc3_readl(dwc
->regs
, DWC3_DCTL
);
433 reg
|= DWC3_DCTL_INITU2ENA
;
435 reg
&= ~DWC3_DCTL_INITU2ENA
;
436 dwc3_writel(dwc
->regs
, DWC3_DCTL
, reg
);
439 case USB_DEVICE_LTM_ENABLE
:
443 case USB_DEVICE_TEST_MODE
:
444 if ((wIndex
& 0xff) != 0)
449 dwc
->test_mode_nr
= wIndex
>> 8;
450 dwc
->test_mode
= true;
457 case USB_RECIP_INTERFACE
:
459 case USB_INTRF_FUNC_SUSPEND
:
460 if (wIndex
& USB_INTRF_FUNC_SUSPEND_LP
)
461 /* XXX enable Low power suspend */
463 if (wIndex
& USB_INTRF_FUNC_SUSPEND_RW
)
464 /* XXX enable remote wakeup */
472 case USB_RECIP_ENDPOINT
:
474 case USB_ENDPOINT_HALT
:
475 dep
= dwc3_wIndex_to_dep(dwc
, wIndex
);
478 ret
= __dwc3_gadget_ep_set_halt(dep
, set
);
494 static int dwc3_ep0_set_address(struct dwc3
*dwc
, struct usb_ctrlrequest
*ctrl
)
499 addr
= le16_to_cpu(ctrl
->wValue
);
501 dev_dbg(dwc
->dev
, "invalid device address %d\n", addr
);
505 if (dwc
->dev_state
== DWC3_CONFIGURED_STATE
) {
506 dev_dbg(dwc
->dev
, "trying to set address when configured\n");
510 reg
= dwc3_readl(dwc
->regs
, DWC3_DCFG
);
511 reg
&= ~(DWC3_DCFG_DEVADDR_MASK
);
512 reg
|= DWC3_DCFG_DEVADDR(addr
);
513 dwc3_writel(dwc
->regs
, DWC3_DCFG
, reg
);
516 dwc
->dev_state
= DWC3_ADDRESS_STATE
;
518 dwc
->dev_state
= DWC3_DEFAULT_STATE
;
523 static int dwc3_ep0_delegate_req(struct dwc3
*dwc
, struct usb_ctrlrequest
*ctrl
)
527 spin_unlock(&dwc
->lock
);
528 ret
= dwc
->gadget_driver
->setup(&dwc
->gadget
, ctrl
);
529 spin_lock(&dwc
->lock
);
533 static int dwc3_ep0_set_config(struct dwc3
*dwc
, struct usb_ctrlrequest
*ctrl
)
539 dwc
->start_config_issued
= false;
540 cfg
= le16_to_cpu(ctrl
->wValue
);
542 switch (dwc
->dev_state
) {
543 case DWC3_DEFAULT_STATE
:
547 case DWC3_ADDRESS_STATE
:
548 ret
= dwc3_ep0_delegate_req(dwc
, ctrl
);
549 /* if the cfg matches and the cfg is non zero */
550 if (cfg
&& (!ret
|| (ret
== USB_GADGET_DELAYED_STATUS
))) {
551 dwc
->dev_state
= DWC3_CONFIGURED_STATE
;
553 * Enable transition to U1/U2 state when
554 * nothing is pending from application.
556 reg
= dwc3_readl(dwc
->regs
, DWC3_DCTL
);
557 reg
|= (DWC3_DCTL_ACCEPTU1ENA
| DWC3_DCTL_ACCEPTU2ENA
);
558 dwc3_writel(dwc
->regs
, DWC3_DCTL
, reg
);
560 dwc
->resize_fifos
= true;
561 dev_dbg(dwc
->dev
, "resize fifos flag SET\n");
565 case DWC3_CONFIGURED_STATE
:
566 ret
= dwc3_ep0_delegate_req(dwc
, ctrl
);
568 dwc
->dev_state
= DWC3_ADDRESS_STATE
;
576 static void dwc3_ep0_set_sel_cmpl(struct usb_ep
*ep
, struct usb_request
*req
)
578 struct dwc3_ep
*dep
= to_dwc3_ep(ep
);
579 struct dwc3
*dwc
= dep
->dwc
;
593 memcpy(&timing
, req
->buf
, sizeof(timing
));
595 dwc
->u1sel
= timing
.u1sel
;
596 dwc
->u1pel
= timing
.u1pel
;
597 dwc
->u2sel
= le16_to_cpu(timing
.u2sel
);
598 dwc
->u2pel
= le16_to_cpu(timing
.u2pel
);
600 reg
= dwc3_readl(dwc
->regs
, DWC3_DCTL
);
601 if (reg
& DWC3_DCTL_INITU2ENA
)
603 if (reg
& DWC3_DCTL_INITU1ENA
)
607 * According to Synopsys Databook, if parameter is
608 * greater than 125, a value of zero should be
609 * programmed in the register.
614 /* now that we have the time, issue DGCMD Set Sel */
615 ret
= dwc3_send_gadget_generic_command(dwc
,
616 DWC3_DGCMD_SET_PERIODIC_PAR
, param
);
620 static int dwc3_ep0_set_sel(struct dwc3
*dwc
, struct usb_ctrlrequest
*ctrl
)
626 if (dwc
->dev_state
== DWC3_DEFAULT_STATE
)
629 wValue
= le16_to_cpu(ctrl
->wValue
);
630 wLength
= le16_to_cpu(ctrl
->wLength
);
633 dev_err(dwc
->dev
, "Set SEL should be 6 bytes, got %d\n",
639 * To handle Set SEL we need to receive 6 bytes from Host. So let's
640 * queue a usb_request for 6 bytes.
642 * Remember, though, this controller can't handle non-wMaxPacketSize
643 * aligned transfers on the OUT direction, so we queue a request for
644 * wMaxPacketSize instead.
647 dwc
->ep0_usb_req
.dep
= dep
;
648 dwc
->ep0_usb_req
.request
.length
= dep
->endpoint
.maxpacket
;
649 dwc
->ep0_usb_req
.request
.buf
= dwc
->setup_buf
;
650 dwc
->ep0_usb_req
.request
.complete
= dwc3_ep0_set_sel_cmpl
;
652 return __dwc3_gadget_ep0_queue(dep
, &dwc
->ep0_usb_req
);
655 static int dwc3_ep0_set_isoch_delay(struct dwc3
*dwc
, struct usb_ctrlrequest
*ctrl
)
661 wValue
= le16_to_cpu(ctrl
->wValue
);
662 wLength
= le16_to_cpu(ctrl
->wLength
);
663 wIndex
= le16_to_cpu(ctrl
->wIndex
);
665 if (wIndex
|| wLength
)
669 * REVISIT It's unclear from Databook what to do with this
670 * value. For now, just cache it.
672 dwc
->isoch_delay
= wValue
;
677 static int dwc3_ep0_std_request(struct dwc3
*dwc
, struct usb_ctrlrequest
*ctrl
)
681 switch (ctrl
->bRequest
) {
682 case USB_REQ_GET_STATUS
:
683 dev_vdbg(dwc
->dev
, "USB_REQ_GET_STATUS\n");
684 ret
= dwc3_ep0_handle_status(dwc
, ctrl
);
686 case USB_REQ_CLEAR_FEATURE
:
687 dev_vdbg(dwc
->dev
, "USB_REQ_CLEAR_FEATURE\n");
688 ret
= dwc3_ep0_handle_feature(dwc
, ctrl
, 0);
690 case USB_REQ_SET_FEATURE
:
691 dev_vdbg(dwc
->dev
, "USB_REQ_SET_FEATURE\n");
692 ret
= dwc3_ep0_handle_feature(dwc
, ctrl
, 1);
694 case USB_REQ_SET_ADDRESS
:
695 dev_vdbg(dwc
->dev
, "USB_REQ_SET_ADDRESS\n");
696 ret
= dwc3_ep0_set_address(dwc
, ctrl
);
698 case USB_REQ_SET_CONFIGURATION
:
699 dev_vdbg(dwc
->dev
, "USB_REQ_SET_CONFIGURATION\n");
700 ret
= dwc3_ep0_set_config(dwc
, ctrl
);
702 case USB_REQ_SET_SEL
:
703 dev_vdbg(dwc
->dev
, "USB_REQ_SET_SEL\n");
704 ret
= dwc3_ep0_set_sel(dwc
, ctrl
);
706 case USB_REQ_SET_ISOCH_DELAY
:
707 dev_vdbg(dwc
->dev
, "USB_REQ_SET_ISOCH_DELAY\n");
708 ret
= dwc3_ep0_set_isoch_delay(dwc
, ctrl
);
711 dev_vdbg(dwc
->dev
, "Forwarding to gadget driver\n");
712 ret
= dwc3_ep0_delegate_req(dwc
, ctrl
);
719 static void dwc3_ep0_inspect_setup(struct dwc3
*dwc
,
720 const struct dwc3_event_depevt
*event
)
722 struct usb_ctrlrequest
*ctrl
= dwc
->ctrl_req
;
726 if (!dwc
->gadget_driver
)
729 len
= le16_to_cpu(ctrl
->wLength
);
731 dwc
->three_stage_setup
= false;
732 dwc
->ep0_expect_in
= false;
733 dwc
->ep0_next_event
= DWC3_EP0_NRDY_STATUS
;
735 dwc
->three_stage_setup
= true;
736 dwc
->ep0_expect_in
= !!(ctrl
->bRequestType
& USB_DIR_IN
);
737 dwc
->ep0_next_event
= DWC3_EP0_NRDY_DATA
;
740 if ((ctrl
->bRequestType
& USB_TYPE_MASK
) == USB_TYPE_STANDARD
)
741 ret
= dwc3_ep0_std_request(dwc
, ctrl
);
743 ret
= dwc3_ep0_delegate_req(dwc
, ctrl
);
745 if (ret
== USB_GADGET_DELAYED_STATUS
)
746 dwc
->delayed_status
= true;
750 dwc3_ep0_stall_and_restart(dwc
);
753 static void dwc3_ep0_complete_data(struct dwc3
*dwc
,
754 const struct dwc3_event_depevt
*event
)
756 struct dwc3_request
*r
= NULL
;
757 struct usb_request
*ur
;
758 struct dwc3_trb
*trb
;
765 epnum
= event
->endpoint_number
;
768 dwc
->ep0_next_event
= DWC3_EP0_NRDY_STATUS
;
770 r
= next_request(&ep0
->request_list
);
775 status
= DWC3_TRB_SIZE_TRBSTS(trb
->size
);
776 if (status
== DWC3_TRBSTS_SETUP_PENDING
) {
777 dev_dbg(dwc
->dev
, "Setup Pending received\n");
780 dwc3_gadget_giveback(ep0
, r
, -ECONNRESET
);
785 length
= trb
->size
& DWC3_TRB_SIZE_MASK
;
787 if (dwc
->ep0_bounced
) {
788 unsigned transfer_size
= ur
->length
;
789 unsigned maxp
= ep0
->endpoint
.maxpacket
;
791 transfer_size
+= (maxp
- (transfer_size
% maxp
));
792 transferred
= min_t(u32
, ur
->length
,
793 transfer_size
- length
);
794 memcpy(ur
->buf
, dwc
->ep0_bounce
, transferred
);
796 transferred
= ur
->length
- length
;
799 ur
->actual
+= transferred
;
801 if ((epnum
& 1) && ur
->actual
< ur
->length
) {
802 /* for some reason we did not get everything out */
804 dwc3_ep0_stall_and_restart(dwc
);
807 * handle the case where we have to send a zero packet. This
808 * seems to be case when req.length > maxpacket. Could it be?
811 dwc3_gadget_giveback(ep0
, r
, 0);
815 static void dwc3_ep0_complete_status(struct dwc3
*dwc
,
816 const struct dwc3_event_depevt
*event
)
818 struct dwc3_request
*r
;
820 struct dwc3_trb
*trb
;
826 if (!list_empty(&dep
->request_list
)) {
827 r
= next_request(&dep
->request_list
);
829 dwc3_gadget_giveback(dep
, r
, 0);
832 if (dwc
->test_mode
) {
835 ret
= dwc3_gadget_set_test_mode(dwc
, dwc
->test_mode_nr
);
837 dev_dbg(dwc
->dev
, "Invalid Test #%d\n",
839 dwc3_ep0_stall_and_restart(dwc
);
844 status
= DWC3_TRB_SIZE_TRBSTS(trb
->size
);
845 if (status
== DWC3_TRBSTS_SETUP_PENDING
)
846 dev_dbg(dwc
->dev
, "Setup Pending received\n");
848 dwc
->ep0state
= EP0_SETUP_PHASE
;
849 dwc3_ep0_out_start(dwc
);
852 static void dwc3_ep0_xfer_complete(struct dwc3
*dwc
,
853 const struct dwc3_event_depevt
*event
)
855 struct dwc3_ep
*dep
= dwc
->eps
[event
->endpoint_number
];
857 dep
->flags
&= ~DWC3_EP_BUSY
;
858 dep
->resource_index
= 0;
859 dwc
->setup_packet_pending
= false;
861 switch (dwc
->ep0state
) {
862 case EP0_SETUP_PHASE
:
863 dev_vdbg(dwc
->dev
, "Inspecting Setup Bytes\n");
864 dwc3_ep0_inspect_setup(dwc
, event
);
868 dev_vdbg(dwc
->dev
, "Data Phase\n");
869 dwc3_ep0_complete_data(dwc
, event
);
872 case EP0_STATUS_PHASE
:
873 dev_vdbg(dwc
->dev
, "Status Phase\n");
874 dwc3_ep0_complete_status(dwc
, event
);
877 WARN(true, "UNKNOWN ep0state %d\n", dwc
->ep0state
);
881 static void __dwc3_ep0_do_control_data(struct dwc3
*dwc
,
882 struct dwc3_ep
*dep
, struct dwc3_request
*req
)
886 req
->direction
= !!dep
->number
;
888 if (req
->request
.length
== 0) {
889 ret
= dwc3_ep0_start_trans(dwc
, dep
->number
,
890 dwc
->ctrl_req_addr
, 0,
891 DWC3_TRBCTL_CONTROL_DATA
);
892 } else if (!IS_ALIGNED(req
->request
.length
, dep
->endpoint
.maxpacket
)
893 && (dep
->number
== 0)) {
897 ret
= usb_gadget_map_request(&dwc
->gadget
, &req
->request
,
900 dev_dbg(dwc
->dev
, "failed to map request\n");
904 WARN_ON(req
->request
.length
> DWC3_EP0_BOUNCE_SIZE
);
906 maxpacket
= dep
->endpoint
.maxpacket
;
907 transfer_size
= roundup(req
->request
.length
, maxpacket
);
909 dwc
->ep0_bounced
= true;
912 * REVISIT in case request length is bigger than
913 * DWC3_EP0_BOUNCE_SIZE we will need two chained
914 * TRBs to handle the transfer.
916 ret
= dwc3_ep0_start_trans(dwc
, dep
->number
,
917 dwc
->ep0_bounce_addr
, transfer_size
,
918 DWC3_TRBCTL_CONTROL_DATA
);
920 ret
= usb_gadget_map_request(&dwc
->gadget
, &req
->request
,
923 dev_dbg(dwc
->dev
, "failed to map request\n");
927 ret
= dwc3_ep0_start_trans(dwc
, dep
->number
, req
->request
.dma
,
928 req
->request
.length
, DWC3_TRBCTL_CONTROL_DATA
);
934 static int dwc3_ep0_start_control_status(struct dwc3_ep
*dep
)
936 struct dwc3
*dwc
= dep
->dwc
;
939 type
= dwc
->three_stage_setup
? DWC3_TRBCTL_CONTROL_STATUS3
940 : DWC3_TRBCTL_CONTROL_STATUS2
;
942 return dwc3_ep0_start_trans(dwc
, dep
->number
,
943 dwc
->ctrl_req_addr
, 0, type
);
946 static void __dwc3_ep0_do_control_status(struct dwc3
*dwc
, struct dwc3_ep
*dep
)
948 if (dwc
->resize_fifos
) {
949 dev_dbg(dwc
->dev
, "starting to resize fifos\n");
950 dwc3_gadget_resize_tx_fifos(dwc
);
951 dwc
->resize_fifos
= 0;
954 WARN_ON(dwc3_ep0_start_control_status(dep
));
957 static void dwc3_ep0_do_control_status(struct dwc3
*dwc
,
958 const struct dwc3_event_depevt
*event
)
960 struct dwc3_ep
*dep
= dwc
->eps
[event
->endpoint_number
];
962 __dwc3_ep0_do_control_status(dwc
, dep
);
965 static void dwc3_ep0_end_control_data(struct dwc3
*dwc
, struct dwc3_ep
*dep
)
967 struct dwc3_gadget_ep_cmd_params params
;
971 if (!dep
->resource_index
)
974 cmd
= DWC3_DEPCMD_ENDTRANSFER
;
975 cmd
|= DWC3_DEPCMD_CMDIOC
;
976 cmd
|= DWC3_DEPCMD_PARAM(dep
->resource_index
);
977 memset(¶ms
, 0, sizeof(params
));
978 ret
= dwc3_send_gadget_ep_cmd(dwc
, dep
->number
, cmd
, ¶ms
);
980 dep
->resource_index
= 0;
983 static void dwc3_ep0_xfernotready(struct dwc3
*dwc
,
984 const struct dwc3_event_depevt
*event
)
986 dwc
->setup_packet_pending
= true;
988 switch (event
->status
) {
989 case DEPEVT_STATUS_CONTROL_DATA
:
990 dev_vdbg(dwc
->dev
, "Control Data\n");
993 * We already have a DATA transfer in the controller's cache,
994 * if we receive a XferNotReady(DATA) we will ignore it, unless
995 * it's for the wrong direction.
997 * In that case, we must issue END_TRANSFER command to the Data
998 * Phase we already have started and issue SetStall on the
1001 if (dwc
->ep0_expect_in
!= event
->endpoint_number
) {
1002 struct dwc3_ep
*dep
= dwc
->eps
[dwc
->ep0_expect_in
];
1004 dev_vdbg(dwc
->dev
, "Wrong direction for Data phase\n");
1005 dwc3_ep0_end_control_data(dwc
, dep
);
1006 dwc3_ep0_stall_and_restart(dwc
);
1012 case DEPEVT_STATUS_CONTROL_STATUS
:
1013 if (dwc
->ep0_next_event
!= DWC3_EP0_NRDY_STATUS
)
1016 dev_vdbg(dwc
->dev
, "Control Status\n");
1018 dwc
->ep0state
= EP0_STATUS_PHASE
;
1020 if (dwc
->delayed_status
) {
1021 WARN_ON_ONCE(event
->endpoint_number
!= 1);
1022 dev_vdbg(dwc
->dev
, "Mass Storage delayed status\n");
1026 dwc3_ep0_do_control_status(dwc
, event
);
1030 void dwc3_ep0_interrupt(struct dwc3
*dwc
,
1031 const struct dwc3_event_depevt
*event
)
1033 u8 epnum
= event
->endpoint_number
;
1035 dev_dbg(dwc
->dev
, "%s while ep%d%s in state '%s'\n",
1036 dwc3_ep_event_string(event
->endpoint_event
),
1037 epnum
>> 1, (epnum
& 1) ? "in" : "out",
1038 dwc3_ep0_state_string(dwc
->ep0state
));
1040 switch (event
->endpoint_event
) {
1041 case DWC3_DEPEVT_XFERCOMPLETE
:
1042 dwc3_ep0_xfer_complete(dwc
, event
);
1045 case DWC3_DEPEVT_XFERNOTREADY
:
1046 dwc3_ep0_xfernotready(dwc
, event
);
1049 case DWC3_DEPEVT_XFERINPROGRESS
:
1050 case DWC3_DEPEVT_RXTXFIFOEVT
:
1051 case DWC3_DEPEVT_STREAMEVT
:
1052 case DWC3_DEPEVT_EPCMDCMPLT
: