2 * Intel Wireless UWB Link 1480
3 * USB SKU firmware upload implementation
5 * Copyright (C) 2005-2006 Intel Corporation
6 * Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com>
8 * This program is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU General Public License version
10 * 2 as published by the Free Software Foundation.
12 * This program is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 * GNU General Public License for more details.
17 * You should have received a copy of the GNU General Public License
18 * along with this program; if not, write to the Free Software
19 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
23 * This driver will prepare the i1480 device to behave as a real
24 * Wireless USB HWA adaptor by uploading the firmware.
26 * When the device is connected or driver is loaded, i1480_usb_probe()
27 * is called--this will allocate and initialize the device structure,
28 * fill in the pointers to the common functions (read, write,
29 * wait_init_done and cmd for HWA command execution) and once that is
30 * done, call the common firmware uploading routine. Then clean up and
31 * return -ENODEV, as we don't attach to the device.
33 * The rest are the basic ops we implement that the fw upload code
34 * uses to do its job. All the ops in the common code are i1480->NAME,
35 * the functions are i1480_usb_NAME().
37 #include <linux/module.h>
38 #include <linux/usb.h>
39 #include <linux/interrupt.h>
40 #include <linux/delay.h>
41 #include <linux/uwb.h>
42 #include <linux/usb/wusb.h>
43 #include <linux/usb/wusb-wa.h>
44 #include "i1480-dfu.h"
48 struct usb_device
*usb_dev
;
49 struct usb_interface
*usb_iface
;
50 struct urb
*neep_urb
; /* URB for reading from EP1 */
55 void i1480_usb_init(struct i1480_usb
*i1480_usb
)
57 i1480_init(&i1480_usb
->i1480
);
62 int i1480_usb_create(struct i1480_usb
*i1480_usb
, struct usb_interface
*iface
)
64 struct usb_device
*usb_dev
= interface_to_usbdev(iface
);
67 i1480_usb
->usb_dev
= usb_get_dev(usb_dev
); /* bind the USB device */
68 i1480_usb
->usb_iface
= usb_get_intf(iface
);
69 usb_set_intfdata(iface
, i1480_usb
); /* Bind the driver to iface0 */
70 i1480_usb
->neep_urb
= usb_alloc_urb(0, GFP_KERNEL
);
71 if (i1480_usb
->neep_urb
== NULL
)
76 usb_set_intfdata(iface
, NULL
);
84 void i1480_usb_destroy(struct i1480_usb
*i1480_usb
)
86 usb_kill_urb(i1480_usb
->neep_urb
);
87 usb_free_urb(i1480_usb
->neep_urb
);
88 usb_set_intfdata(i1480_usb
->usb_iface
, NULL
);
89 usb_put_intf(i1480_usb
->usb_iface
);
90 usb_put_dev(i1480_usb
->usb_dev
);
95 * Write a buffer to a memory address in the i1480 device
97 * @i1480: i1480 instance
99 * Address where to write the data buffer to.
100 * @buffer: Buffer to the data
101 * @size: Size of the buffer [has to be < 512].
102 * @returns: 0 if ok, < 0 errno code on error.
104 * Data buffers to USB cannot be on the stack or in vmalloc'ed areas,
105 * so we copy it to the local i1480 buffer before proceeding. In any
106 * case, we have a max size we can send, soooo.
109 int i1480_usb_write(struct i1480
*i1480
, u32 memory_address
,
110 const void *buffer
, size_t size
)
113 struct i1480_usb
*i1480_usb
= container_of(i1480
, struct i1480_usb
, i1480
);
114 size_t buffer_size
, itr
= 0;
116 BUG_ON(size
& 0x3); /* Needs to be a multiple of 4 */
118 buffer_size
= size
< i1480
->buf_size
? size
: i1480
->buf_size
;
119 memcpy(i1480
->cmd_buf
, buffer
+ itr
, buffer_size
);
120 result
= usb_control_msg(
121 i1480_usb
->usb_dev
, usb_sndctrlpipe(i1480_usb
->usb_dev
, 0),
122 0xf0, USB_DIR_OUT
| USB_TYPE_VENDOR
| USB_RECIP_DEVICE
,
123 cpu_to_le16(memory_address
& 0xffff),
124 cpu_to_le16((memory_address
>> 16) & 0xffff),
125 i1480
->cmd_buf
, buffer_size
, 100 /* FIXME: arbitrary */);
129 memory_address
+= result
;
137 * Read a block [max size 512] of the device's memory to @i1480's buffer.
139 * @i1480: i1480 instance
141 * Address where to read from.
142 * @size: Size to read. Smaller than or equal to 512.
143 * @returns: >= 0 number of bytes written if ok, < 0 errno code on error.
145 * NOTE: if the memory address or block is incorrect, you might get a
146 * stall or a different memory read. Caller has to verify the
147 * memory address and size passed back in the @neh structure.
150 int i1480_usb_read(struct i1480
*i1480
, u32 addr
, size_t size
)
152 ssize_t result
= 0, bytes
= 0;
153 size_t itr
, read_size
= i1480
->buf_size
;
154 struct i1480_usb
*i1480_usb
= container_of(i1480
, struct i1480_usb
, i1480
);
156 BUG_ON(size
> i1480
->buf_size
);
157 BUG_ON(size
& 0x3); /* Needs to be a multiple of 4 */
158 BUG_ON(read_size
> 512);
160 if (addr
>= 0x8000d200 && addr
< 0x8000d400) /* Yeah, HW quirk */
163 for (itr
= 0; itr
< size
; itr
+= read_size
) {
164 size_t itr_addr
= addr
+ itr
;
165 size_t itr_size
= min(read_size
, size
- itr
);
166 result
= usb_control_msg(
167 i1480_usb
->usb_dev
, usb_rcvctrlpipe(i1480_usb
->usb_dev
, 0),
168 0xf0, USB_DIR_IN
| USB_TYPE_VENDOR
| USB_RECIP_DEVICE
,
169 cpu_to_le16(itr_addr
& 0xffff),
170 cpu_to_le16((itr_addr
>> 16) & 0xffff),
171 i1480
->cmd_buf
+ itr
, itr_size
,
172 100 /* FIXME: arbitrary */);
174 dev_err(i1480
->dev
, "%s: USB read error: %zd\n",
178 if (result
!= itr_size
) {
181 "%s: partial read got only %zu bytes vs %zu expected\n",
182 __func__
, result
, itr_size
);
194 * Callback for reads on the notification/event endpoint
196 * Just enables the completion read handler.
199 void i1480_usb_neep_cb(struct urb
*urb
)
201 struct i1480
*i1480
= urb
->context
;
202 struct device
*dev
= i1480
->dev
;
204 switch (urb
->status
) {
207 case -ECONNRESET
: /* Not an error, but a controlled situation; */
208 case -ENOENT
: /* (we killed the URB)...so, no broadcast */
209 dev_dbg(dev
, "NEEP: reset/noent %d\n", urb
->status
);
211 case -ESHUTDOWN
: /* going away! */
212 dev_dbg(dev
, "NEEP: down %d\n", urb
->status
);
215 dev_err(dev
, "NEEP: unknown status %d\n", urb
->status
);
218 i1480
->evt_result
= urb
->actual_length
;
219 complete(&i1480
->evt_complete
);
225 * Wait for the MAC FW to initialize
227 * MAC FW sends a 0xfd/0101/00 notification to EP1 when done
228 * initializing. Get that notification into i1480->evt_buf; upper layer
231 * Set i1480->evt_result with the result of getting the event or its
232 * size (if successful).
234 * Delivers the data directly to i1480->evt_buf
237 int i1480_usb_wait_init_done(struct i1480
*i1480
)
240 struct device
*dev
= i1480
->dev
;
241 struct i1480_usb
*i1480_usb
= container_of(i1480
, struct i1480_usb
, i1480
);
242 struct usb_endpoint_descriptor
*epd
;
244 init_completion(&i1480
->evt_complete
);
245 i1480
->evt_result
= -EINPROGRESS
;
246 epd
= &i1480_usb
->usb_iface
->cur_altsetting
->endpoint
[0].desc
;
247 usb_fill_int_urb(i1480_usb
->neep_urb
, i1480_usb
->usb_dev
,
248 usb_rcvintpipe(i1480_usb
->usb_dev
, epd
->bEndpointAddress
),
249 i1480
->evt_buf
, i1480
->buf_size
,
250 i1480_usb_neep_cb
, i1480
, epd
->bInterval
);
251 result
= usb_submit_urb(i1480_usb
->neep_urb
, GFP_KERNEL
);
253 dev_err(dev
, "init done: cannot submit NEEP read: %d\n",
257 /* Wait for the USB callback to get the data */
258 result
= wait_for_completion_interruptible_timeout(
259 &i1480
->evt_complete
, HZ
);
261 result
= result
== 0 ? -ETIMEDOUT
: result
;
264 usb_kill_urb(i1480_usb
->neep_urb
);
268 usb_kill_urb(i1480_usb
->neep_urb
);
270 i1480
->evt_result
= result
;
276 * Generic function for issuing commands to the i1480
278 * @i1480: i1480 instance
279 * @cmd_name: Name of the command (for error messages)
280 * @cmd: Pointer to command buffer
281 * @cmd_size: Size of the command buffer
282 * @reply: Buffer for the reply event
283 * @reply_size: Expected size back (including RCEB); the reply buffer
284 * is assumed to be as big as this.
285 * @returns: >= 0 size of the returned event data if ok,
286 * < 0 errno code on error.
288 * Arms the NE handle, issues the command to the device and checks the
289 * basics of the reply event.
292 int i1480_usb_cmd(struct i1480
*i1480
, const char *cmd_name
, size_t cmd_size
)
295 struct device
*dev
= i1480
->dev
;
296 struct i1480_usb
*i1480_usb
= container_of(i1480
, struct i1480_usb
, i1480
);
297 struct usb_endpoint_descriptor
*epd
;
298 struct uwb_rccb
*cmd
= i1480
->cmd_buf
;
301 /* Post a read on the notification & event endpoint */
302 iface_no
= i1480_usb
->usb_iface
->cur_altsetting
->desc
.bInterfaceNumber
;
303 epd
= &i1480_usb
->usb_iface
->cur_altsetting
->endpoint
[0].desc
;
305 i1480_usb
->neep_urb
, i1480_usb
->usb_dev
,
306 usb_rcvintpipe(i1480_usb
->usb_dev
, epd
->bEndpointAddress
),
307 i1480
->evt_buf
, i1480
->buf_size
,
308 i1480_usb_neep_cb
, i1480
, epd
->bInterval
);
309 result
= usb_submit_urb(i1480_usb
->neep_urb
, GFP_KERNEL
);
311 dev_err(dev
, "%s: cannot submit NEEP read: %d\n",
313 goto error_submit_ep1
;
315 /* Now post the command on EP0 */
316 result
= usb_control_msg(
317 i1480_usb
->usb_dev
, usb_sndctrlpipe(i1480_usb
->usb_dev
, 0),
319 USB_DIR_OUT
| USB_RECIP_INTERFACE
| USB_TYPE_CLASS
,
322 100 /* FIXME: this is totally arbitrary */);
324 dev_err(dev
, "%s: control request failed: %d\n",
326 goto error_submit_ep0
;
331 usb_kill_urb(i1480_usb
->neep_urb
);
338 * Probe a i1480 device for uploading firmware.
340 * We attach only to interface #0, which is the radio control interface.
343 int i1480_usb_probe(struct usb_interface
*iface
, const struct usb_device_id
*id
)
345 struct i1480_usb
*i1480_usb
;
347 struct device
*dev
= &iface
->dev
;
351 if (iface
->cur_altsetting
->desc
.bInterfaceNumber
!= 0) {
352 dev_dbg(dev
, "not attaching to iface %d\n",
353 iface
->cur_altsetting
->desc
.bInterfaceNumber
);
356 if (iface
->num_altsetting
> 1
357 && interface_to_usbdev(iface
)->descriptor
.idProduct
== 0xbabe) {
358 /* Need altsetting #1 [HW QUIRK] or EP1 won't work */
359 result
= usb_set_interface(interface_to_usbdev(iface
), 0, 1);
362 "can't set altsetting 1 on iface 0: %d\n",
367 i1480_usb
= kzalloc(sizeof(*i1480_usb
), GFP_KERNEL
);
368 if (i1480_usb
== NULL
) {
369 dev_err(dev
, "Unable to allocate instance\n");
372 i1480_usb_init(i1480_usb
);
374 i1480
= &i1480_usb
->i1480
;
375 i1480
->buf_size
= 512;
376 i1480
->cmd_buf
= kmalloc(2 * i1480
->buf_size
, GFP_KERNEL
);
377 if (i1480
->cmd_buf
== NULL
) {
378 dev_err(dev
, "Cannot allocate transfer buffers\n");
380 goto error_buf_alloc
;
382 i1480
->evt_buf
= i1480
->cmd_buf
+ i1480
->buf_size
;
384 result
= i1480_usb_create(i1480_usb
, iface
);
386 dev_err(dev
, "Cannot create instance: %d\n", result
);
390 /* setup the fops and upload the firmware */
391 i1480
->pre_fw_name
= "i1480-pre-phy-0.0.bin";
392 i1480
->mac_fw_name
= "i1480-usb-0.0.bin";
393 i1480
->mac_fw_name_deprecate
= "ptc-0.0.bin";
394 i1480
->phy_fw_name
= "i1480-phy-0.0.bin";
395 i1480
->dev
= &iface
->dev
;
396 i1480
->write
= i1480_usb_write
;
397 i1480
->read
= i1480_usb_read
;
398 i1480
->rc_setup
= NULL
;
399 i1480
->wait_init_done
= i1480_usb_wait_init_done
;
400 i1480
->cmd
= i1480_usb_cmd
;
402 result
= i1480_fw_upload(&i1480_usb
->i1480
); /* the real thing */
404 usb_reset_device(i1480_usb
->usb_dev
);
405 result
= -ENODEV
; /* we don't want to bind to the iface */
407 i1480_usb_destroy(i1480_usb
);
409 kfree(i1480
->cmd_buf
);
416 #define i1480_USB_DEV(v, p) \
418 .match_flags = USB_DEVICE_ID_MATCH_DEVICE \
419 | USB_DEVICE_ID_MATCH_DEV_INFO \
420 | USB_DEVICE_ID_MATCH_INT_INFO, \
423 .bDeviceClass = 0xff, \
424 .bDeviceSubClass = 0xff, \
425 .bDeviceProtocol = 0xff, \
426 .bInterfaceClass = 0xff, \
427 .bInterfaceSubClass = 0xff, \
428 .bInterfaceProtocol = 0xff, \
432 /** USB device ID's that we handle */
433 static const struct usb_device_id i1480_usb_id_table
[] = {
434 i1480_USB_DEV(0x8086, 0xdf3b),
435 i1480_USB_DEV(0x15a9, 0x0005),
436 i1480_USB_DEV(0x07d1, 0x3802),
437 i1480_USB_DEV(0x050d, 0x305a),
438 i1480_USB_DEV(0x3495, 0x3007),
441 MODULE_DEVICE_TABLE(usb
, i1480_usb_id_table
);
444 static struct usb_driver i1480_dfu_driver
= {
445 .name
= "i1480-dfu-usb",
446 .id_table
= i1480_usb_id_table
,
447 .probe
= i1480_usb_probe
,
453 * Initialize the i1480 DFU driver.
455 * We also need to register our function for guessing event sizes.
457 static int __init
i1480_dfu_driver_init(void)
459 return usb_register(&i1480_dfu_driver
);
461 module_init(i1480_dfu_driver_init
);
464 static void __exit
i1480_dfu_driver_exit(void)
466 usb_deregister(&i1480_dfu_driver
);
468 module_exit(i1480_dfu_driver_exit
);
471 MODULE_AUTHOR("Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com>");
472 MODULE_DESCRIPTION("Intel Wireless UWB Link 1480 firmware uploader for USB");
473 MODULE_LICENSE("GPL");