]> www.pilppa.org Git - linux-2.6-omap-h63xx.git/blob - drivers/usb/host/r8a66597-hcd.c
USB: r8a66597-hcd: fix interrupt transfer interval
[linux-2.6-omap-h63xx.git] / drivers / usb / host / r8a66597-hcd.c
1 /*
2  * R8A66597 HCD (Host Controller Driver)
3  *
4  * Copyright (C) 2006-2007 Renesas Solutions Corp.
5  * Portions Copyright (C) 2004 Psion Teklogix (for NetBook PRO)
6  * Portions Copyright (C) 2004-2005 David Brownell
7  * Portions Copyright (C) 1999 Roman Weissgaerber
8  *
9  * Author : Yoshihiro Shimoda <shimoda.yoshihiro@renesas.com>
10  *
11  * This program is free software; you can redistribute it and/or modify
12  * it under the terms of the GNU General Public License as published by
13  * the Free Software Foundation; version 2 of the License.
14  *
15  * This program is distributed in the hope that it will be useful,
16  * but WITHOUT ANY WARRANTY; without even the implied warranty of
17  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
18  * GNU General Public License for more details.
19  *
20  * You should have received a copy of the GNU General Public License
21  * along with this program; if not, write to the Free Software
22  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
23  *
24  */
25
26 #include <linux/module.h>
27 #include <linux/kernel.h>
28 #include <linux/sched.h>
29 #include <linux/smp_lock.h>
30 #include <linux/errno.h>
31 #include <linux/init.h>
32 #include <linux/timer.h>
33 #include <linux/delay.h>
34 #include <linux/list.h>
35 #include <linux/interrupt.h>
36 #include <linux/usb.h>
37 #include <linux/platform_device.h>
38 #include <linux/io.h>
39 #include <linux/irq.h>
40
41 #include "../core/hcd.h"
42 #include "r8a66597.h"
43
44 MODULE_DESCRIPTION("R8A66597 USB Host Controller Driver");
45 MODULE_LICENSE("GPL");
46 MODULE_AUTHOR("Yoshihiro Shimoda");
47 MODULE_ALIAS("platform:r8a66597_hcd");
48
49 #define DRIVER_VERSION  "10 Apr 2008"
50
51 static const char hcd_name[] = "r8a66597_hcd";
52
53 /* module parameters */
54 static unsigned short clock = XTAL12;
55 module_param(clock, ushort, 0644);
56 MODULE_PARM_DESC(clock, "input clock: 48MHz=32768, 24MHz=16384, 12MHz=0 "
57                 "(default=0)");
58
59 static unsigned short vif = LDRV;
60 module_param(vif, ushort, 0644);
61 MODULE_PARM_DESC(vif, "input VIF: 3.3V=32768, 1.5V=0(default=32768)");
62
63 static unsigned short endian;
64 module_param(endian, ushort, 0644);
65 MODULE_PARM_DESC(endian, "data endian: big=256, little=0 (default=0)");
66
67 static unsigned short irq_sense = INTL;
68 module_param(irq_sense, ushort, 0644);
69 MODULE_PARM_DESC(irq_sense, "IRQ sense: low level=32, falling edge=0 "
70                 "(default=32)");
71
72 static void packet_write(struct r8a66597 *r8a66597, u16 pipenum);
73 static int r8a66597_get_frame(struct usb_hcd *hcd);
74
75 /* this function must be called with interrupt disabled */
76 static void enable_pipe_irq(struct r8a66597 *r8a66597, u16 pipenum,
77                             unsigned long reg)
78 {
79         u16 tmp;
80
81         tmp = r8a66597_read(r8a66597, INTENB0);
82         r8a66597_bclr(r8a66597, BEMPE | NRDYE | BRDYE, INTENB0);
83         r8a66597_bset(r8a66597, 1 << pipenum, reg);
84         r8a66597_write(r8a66597, tmp, INTENB0);
85 }
86
87 /* this function must be called with interrupt disabled */
88 static void disable_pipe_irq(struct r8a66597 *r8a66597, u16 pipenum,
89                              unsigned long reg)
90 {
91         u16 tmp;
92
93         tmp = r8a66597_read(r8a66597, INTENB0);
94         r8a66597_bclr(r8a66597, BEMPE | NRDYE | BRDYE, INTENB0);
95         r8a66597_bclr(r8a66597, 1 << pipenum, reg);
96         r8a66597_write(r8a66597, tmp, INTENB0);
97 }
98
99 static void set_devadd_reg(struct r8a66597 *r8a66597, u8 r8a66597_address,
100                            u16 usbspd, u8 upphub, u8 hubport, int port)
101 {
102         u16 val;
103         unsigned long devadd_reg = get_devadd_addr(r8a66597_address);
104
105         val = (upphub << 11) | (hubport << 8) | (usbspd << 6) | (port & 0x0001);
106         r8a66597_write(r8a66597, val, devadd_reg);
107 }
108
109 static int enable_controller(struct r8a66597 *r8a66597)
110 {
111         u16 tmp;
112         int i = 0;
113
114         do {
115                 r8a66597_write(r8a66597, USBE, SYSCFG0);
116                 tmp = r8a66597_read(r8a66597, SYSCFG0);
117                 if (i++ > 1000) {
118                         err("register access fail.");
119                         return -ENXIO;
120                 }
121         } while ((tmp & USBE) != USBE);
122         r8a66597_bclr(r8a66597, USBE, SYSCFG0);
123         r8a66597_mdfy(r8a66597, clock, XTAL, SYSCFG0);
124
125         i = 0;
126         r8a66597_bset(r8a66597, XCKE, SYSCFG0);
127         do {
128                 msleep(1);
129                 tmp = r8a66597_read(r8a66597, SYSCFG0);
130                 if (i++ > 500) {
131                         err("register access fail.");
132                         return -ENXIO;
133                 }
134         } while ((tmp & SCKE) != SCKE);
135
136         r8a66597_bset(r8a66597, DCFM | DRPD, SYSCFG0);
137         r8a66597_bset(r8a66597, DRPD, SYSCFG1);
138
139         r8a66597_bset(r8a66597, vif & LDRV, PINCFG);
140         r8a66597_bset(r8a66597, HSE, SYSCFG0);
141         r8a66597_bset(r8a66597, HSE, SYSCFG1);
142         r8a66597_bset(r8a66597, USBE, SYSCFG0);
143
144         r8a66597_bset(r8a66597, BEMPE | NRDYE | BRDYE, INTENB0);
145         r8a66597_bset(r8a66597, irq_sense & INTL, SOFCFG);
146         r8a66597_bset(r8a66597, BRDY0, BRDYENB);
147         r8a66597_bset(r8a66597, BEMP0, BEMPENB);
148
149         r8a66597_write(r8a66597, BURST | CPU_ADR_RD_WR, DMA0CFG);
150         r8a66597_write(r8a66597, BURST | CPU_ADR_RD_WR, DMA1CFG);
151
152         r8a66597_bset(r8a66597, endian & BIGEND, CFIFOSEL);
153         r8a66597_bset(r8a66597, endian & BIGEND, D0FIFOSEL);
154         r8a66597_bset(r8a66597, endian & BIGEND, D1FIFOSEL);
155
156         r8a66597_bset(r8a66597, TRNENSEL, SOFCFG);
157
158         r8a66597_bset(r8a66597, SIGNE | SACKE, INTENB1);
159         r8a66597_bclr(r8a66597, DTCHE, INTENB1);
160         r8a66597_bset(r8a66597, ATTCHE, INTENB1);
161         r8a66597_bclr(r8a66597, DTCHE, INTENB2);
162         r8a66597_bset(r8a66597, ATTCHE, INTENB2);
163
164         return 0;
165 }
166
167 static void disable_controller(struct r8a66597 *r8a66597)
168 {
169         u16 tmp;
170
171         r8a66597_write(r8a66597, 0, INTENB0);
172         r8a66597_write(r8a66597, 0, INTENB1);
173         r8a66597_write(r8a66597, 0, INTENB2);
174         r8a66597_write(r8a66597, 0, INTSTS0);
175         r8a66597_write(r8a66597, 0, INTSTS1);
176         r8a66597_write(r8a66597, 0, INTSTS2);
177
178         r8a66597_port_power(r8a66597, 0, 0);
179         r8a66597_port_power(r8a66597, 1, 0);
180
181         do {
182                 tmp = r8a66597_read(r8a66597, SOFCFG) & EDGESTS;
183                 udelay(640);
184         } while (tmp == EDGESTS);
185
186         r8a66597_bclr(r8a66597, DCFM | DRPD, SYSCFG0);
187         r8a66597_bclr(r8a66597, DRPD, SYSCFG1);
188         r8a66597_bclr(r8a66597, HSE, SYSCFG0);
189         r8a66597_bclr(r8a66597, HSE, SYSCFG1);
190
191         r8a66597_bclr(r8a66597, SCKE, SYSCFG0);
192         udelay(1);
193         r8a66597_bclr(r8a66597, PLLC, SYSCFG0);
194         r8a66597_bclr(r8a66597, XCKE, SYSCFG0);
195         r8a66597_bclr(r8a66597, USBE, SYSCFG0);
196 }
197
198 static int get_parent_r8a66597_address(struct r8a66597 *r8a66597,
199                                        struct usb_device *udev)
200 {
201         struct r8a66597_device *dev;
202
203         if (udev->parent && udev->parent->devnum != 1)
204                 udev = udev->parent;
205
206         dev = dev_get_drvdata(&udev->dev);
207         if (dev)
208                 return dev->address;
209         else
210                 return 0;
211 }
212
213 static int is_child_device(char *devpath)
214 {
215         return (devpath[2] ? 1 : 0);
216 }
217
218 static int is_hub_limit(char *devpath)
219 {
220         return ((strlen(devpath) >= 4) ? 1 : 0);
221 }
222
223 static void get_port_number(char *devpath, u16 *root_port, u16 *hub_port)
224 {
225         if (root_port) {
226                 *root_port = (devpath[0] & 0x0F) - 1;
227                 if (*root_port >= R8A66597_MAX_ROOT_HUB)
228                         err("illegal root port number");
229         }
230         if (hub_port)
231                 *hub_port = devpath[2] & 0x0F;
232 }
233
234 static u16 get_r8a66597_usb_speed(enum usb_device_speed speed)
235 {
236         u16 usbspd = 0;
237
238         switch (speed) {
239         case USB_SPEED_LOW:
240                 usbspd = LSMODE;
241                 break;
242         case USB_SPEED_FULL:
243                 usbspd = FSMODE;
244                 break;
245         case USB_SPEED_HIGH:
246                 usbspd = HSMODE;
247                 break;
248         default:
249                 err("unknown speed");
250                 break;
251         }
252
253         return usbspd;
254 }
255
256 static void set_child_connect_map(struct r8a66597 *r8a66597, int address)
257 {
258         int idx;
259
260         idx = address / 32;
261         r8a66597->child_connect_map[idx] |= 1 << (address % 32);
262 }
263
264 static void put_child_connect_map(struct r8a66597 *r8a66597, int address)
265 {
266         int idx;
267
268         idx = address / 32;
269         r8a66597->child_connect_map[idx] &= ~(1 << (address % 32));
270 }
271
272 static void set_pipe_reg_addr(struct r8a66597_pipe *pipe, u8 dma_ch)
273 {
274         u16 pipenum = pipe->info.pipenum;
275         unsigned long fifoaddr[] = {D0FIFO, D1FIFO, CFIFO};
276         unsigned long fifosel[] = {D0FIFOSEL, D1FIFOSEL, CFIFOSEL};
277         unsigned long fifoctr[] = {D0FIFOCTR, D1FIFOCTR, CFIFOCTR};
278
279         if (dma_ch > R8A66597_PIPE_NO_DMA)      /* dma fifo not use? */
280                 dma_ch = R8A66597_PIPE_NO_DMA;
281
282         pipe->fifoaddr = fifoaddr[dma_ch];
283         pipe->fifosel = fifosel[dma_ch];
284         pipe->fifoctr = fifoctr[dma_ch];
285
286         if (pipenum == 0)
287                 pipe->pipectr = DCPCTR;
288         else
289                 pipe->pipectr = get_pipectr_addr(pipenum);
290
291         if (check_bulk_or_isoc(pipenum)) {
292                 pipe->pipetre = get_pipetre_addr(pipenum);
293                 pipe->pipetrn = get_pipetrn_addr(pipenum);
294         } else {
295                 pipe->pipetre = 0;
296                 pipe->pipetrn = 0;
297         }
298 }
299
300 static struct r8a66597_device *
301 get_urb_to_r8a66597_dev(struct r8a66597 *r8a66597, struct urb *urb)
302 {
303         if (usb_pipedevice(urb->pipe) == 0)
304                 return &r8a66597->device0;
305
306         return dev_get_drvdata(&urb->dev->dev);
307 }
308
309 static int make_r8a66597_device(struct r8a66597 *r8a66597,
310                                 struct urb *urb, u8 addr)
311 {
312         struct r8a66597_device *dev;
313         int usb_address = urb->setup_packet[2]; /* urb->pipe is address 0 */
314
315         dev = kzalloc(sizeof(struct r8a66597_device), GFP_ATOMIC);
316         if (dev == NULL)
317                 return -ENOMEM;
318
319         dev_set_drvdata(&urb->dev->dev, dev);
320         dev->udev = urb->dev;
321         dev->address = addr;
322         dev->usb_address = usb_address;
323         dev->state = USB_STATE_ADDRESS;
324         dev->ep_in_toggle = 0;
325         dev->ep_out_toggle = 0;
326         INIT_LIST_HEAD(&dev->device_list);
327         list_add_tail(&dev->device_list, &r8a66597->child_device);
328
329         get_port_number(urb->dev->devpath, &dev->root_port, &dev->hub_port);
330         if (!is_child_device(urb->dev->devpath))
331                 r8a66597->root_hub[dev->root_port].dev = dev;
332
333         set_devadd_reg(r8a66597, dev->address,
334                        get_r8a66597_usb_speed(urb->dev->speed),
335                        get_parent_r8a66597_address(r8a66597, urb->dev),
336                        dev->hub_port, dev->root_port);
337
338         return 0;
339 }
340
341 /* this function must be called with interrupt disabled */
342 static u8 alloc_usb_address(struct r8a66597 *r8a66597, struct urb *urb)
343 {
344         u8 addr;        /* R8A66597's address */
345         struct r8a66597_device *dev;
346
347         if (is_hub_limit(urb->dev->devpath)) {
348                 err("Externel hub limit reached.");
349                 return 0;
350         }
351
352         dev = get_urb_to_r8a66597_dev(r8a66597, urb);
353         if (dev && dev->state >= USB_STATE_ADDRESS)
354                 return dev->address;
355
356         for (addr = 1; addr <= R8A66597_MAX_DEVICE; addr++) {
357                 if (r8a66597->address_map & (1 << addr))
358                         continue;
359
360                 dbg("alloc_address: r8a66597_addr=%d", addr);
361                 r8a66597->address_map |= 1 << addr;
362
363                 if (make_r8a66597_device(r8a66597, urb, addr) < 0)
364                         return 0;
365
366                 return addr;
367         }
368
369         err("cannot communicate with a USB device more than 10.(%x)",
370             r8a66597->address_map);
371
372         return 0;
373 }
374
375 /* this function must be called with interrupt disabled */
376 static void free_usb_address(struct r8a66597 *r8a66597,
377                              struct r8a66597_device *dev)
378 {
379         int port;
380
381         if (!dev)
382                 return;
383
384         dbg("free_addr: addr=%d", dev->address);
385
386         dev->state = USB_STATE_DEFAULT;
387         r8a66597->address_map &= ~(1 << dev->address);
388         dev->address = 0;
389         dev_set_drvdata(&dev->udev->dev, NULL);
390         list_del(&dev->device_list);
391         kfree(dev);
392
393         for (port = 0; port < R8A66597_MAX_ROOT_HUB; port++) {
394                 if (r8a66597->root_hub[port].dev == dev) {
395                         r8a66597->root_hub[port].dev = NULL;
396                         break;
397                 }
398         }
399 }
400
401 static void r8a66597_reg_wait(struct r8a66597 *r8a66597, unsigned long reg,
402                               u16 mask, u16 loop)
403 {
404         u16 tmp;
405         int i = 0;
406
407         do {
408                 tmp = r8a66597_read(r8a66597, reg);
409                 if (i++ > 1000000) {
410                         err("register%lx, loop %x is timeout", reg, loop);
411                         break;
412                 }
413                 ndelay(1);
414         } while ((tmp & mask) != loop);
415 }
416
417 /* this function must be called with interrupt disabled */
418 static void pipe_start(struct r8a66597 *r8a66597, struct r8a66597_pipe *pipe)
419 {
420         u16 tmp;
421
422         tmp = r8a66597_read(r8a66597, pipe->pipectr) & PID;
423         if ((pipe->info.pipenum != 0) & ((tmp & PID_STALL) != 0)) /* stall? */
424                 r8a66597_mdfy(r8a66597, PID_NAK, PID, pipe->pipectr);
425         r8a66597_mdfy(r8a66597, PID_BUF, PID, pipe->pipectr);
426 }
427
428 /* this function must be called with interrupt disabled */
429 static void pipe_stop(struct r8a66597 *r8a66597, struct r8a66597_pipe *pipe)
430 {
431         u16 tmp;
432
433         tmp = r8a66597_read(r8a66597, pipe->pipectr) & PID;
434         if ((tmp & PID_STALL11) != PID_STALL11) /* force stall? */
435                 r8a66597_mdfy(r8a66597, PID_STALL, PID, pipe->pipectr);
436         r8a66597_mdfy(r8a66597, PID_NAK, PID, pipe->pipectr);
437         r8a66597_reg_wait(r8a66597, pipe->pipectr, PBUSY, 0);
438 }
439
440 /* this function must be called with interrupt disabled */
441 static void clear_all_buffer(struct r8a66597 *r8a66597,
442                              struct r8a66597_pipe *pipe)
443 {
444         u16 tmp;
445
446         if (!pipe || pipe->info.pipenum == 0)
447                 return;
448
449         pipe_stop(r8a66597, pipe);
450         r8a66597_bset(r8a66597, ACLRM, pipe->pipectr);
451         tmp = r8a66597_read(r8a66597, pipe->pipectr);
452         tmp = r8a66597_read(r8a66597, pipe->pipectr);
453         tmp = r8a66597_read(r8a66597, pipe->pipectr);
454         r8a66597_bclr(r8a66597, ACLRM, pipe->pipectr);
455 }
456
457 /* this function must be called with interrupt disabled */
458 static void r8a66597_pipe_toggle(struct r8a66597 *r8a66597,
459                                  struct r8a66597_pipe *pipe, int toggle)
460 {
461         if (toggle)
462                 r8a66597_bset(r8a66597, SQSET, pipe->pipectr);
463         else
464                 r8a66597_bset(r8a66597, SQCLR, pipe->pipectr);
465 }
466
467 /* this function must be called with interrupt disabled */
468 static inline void cfifo_change(struct r8a66597 *r8a66597, u16 pipenum)
469 {
470         r8a66597_mdfy(r8a66597, MBW | pipenum, MBW | CURPIPE, CFIFOSEL);
471         r8a66597_reg_wait(r8a66597, CFIFOSEL, CURPIPE, pipenum);
472 }
473
474 /* this function must be called with interrupt disabled */
475 static inline void fifo_change_from_pipe(struct r8a66597 *r8a66597,
476                                          struct r8a66597_pipe *pipe)
477 {
478         cfifo_change(r8a66597, 0);
479         r8a66597_mdfy(r8a66597, MBW | 0, MBW | CURPIPE, D0FIFOSEL);
480         r8a66597_mdfy(r8a66597, MBW | 0, MBW | CURPIPE, D1FIFOSEL);
481
482         r8a66597_mdfy(r8a66597, MBW | pipe->info.pipenum, MBW | CURPIPE,
483                       pipe->fifosel);
484         r8a66597_reg_wait(r8a66597, pipe->fifosel, CURPIPE, pipe->info.pipenum);
485 }
486
487 static u16 r8a66597_get_pipenum(struct urb *urb, struct usb_host_endpoint *hep)
488 {
489         struct r8a66597_pipe *pipe = hep->hcpriv;
490
491         if (usb_pipeendpoint(urb->pipe) == 0)
492                 return 0;
493         else
494                 return pipe->info.pipenum;
495 }
496
497 static u16 get_urb_to_r8a66597_addr(struct r8a66597 *r8a66597, struct urb *urb)
498 {
499         struct r8a66597_device *dev = get_urb_to_r8a66597_dev(r8a66597, urb);
500
501         return (usb_pipedevice(urb->pipe) == 0) ? 0 : dev->address;
502 }
503
504 static unsigned short *get_toggle_pointer(struct r8a66597_device *dev,
505                                           int urb_pipe)
506 {
507         if (!dev)
508                 return NULL;
509
510         return usb_pipein(urb_pipe) ? &dev->ep_in_toggle : &dev->ep_out_toggle;
511 }
512
513 /* this function must be called with interrupt disabled */
514 static void pipe_toggle_set(struct r8a66597 *r8a66597,
515                             struct r8a66597_pipe *pipe,
516                             struct urb *urb, int set)
517 {
518         struct r8a66597_device *dev = get_urb_to_r8a66597_dev(r8a66597, urb);
519         unsigned char endpoint = usb_pipeendpoint(urb->pipe);
520         unsigned short *toggle = get_toggle_pointer(dev, urb->pipe);
521
522         if (!toggle)
523                 return;
524
525         if (set)
526                 *toggle |= 1 << endpoint;
527         else
528                 *toggle &= ~(1 << endpoint);
529 }
530
531 /* this function must be called with interrupt disabled */
532 static void pipe_toggle_save(struct r8a66597 *r8a66597,
533                              struct r8a66597_pipe *pipe,
534                              struct urb *urb)
535 {
536         if (r8a66597_read(r8a66597, pipe->pipectr) & SQMON)
537                 pipe_toggle_set(r8a66597, pipe, urb, 1);
538         else
539                 pipe_toggle_set(r8a66597, pipe, urb, 0);
540 }
541
542 /* this function must be called with interrupt disabled */
543 static void pipe_toggle_restore(struct r8a66597 *r8a66597,
544                                 struct r8a66597_pipe *pipe,
545                                 struct urb *urb)
546 {
547         struct r8a66597_device *dev = get_urb_to_r8a66597_dev(r8a66597, urb);
548         unsigned char endpoint = usb_pipeendpoint(urb->pipe);
549         unsigned short *toggle = get_toggle_pointer(dev, urb->pipe);
550
551         if (!toggle)
552                 return;
553
554         r8a66597_pipe_toggle(r8a66597, pipe, *toggle & (1 << endpoint));
555 }
556
557 /* this function must be called with interrupt disabled */
558 static void pipe_buffer_setting(struct r8a66597 *r8a66597,
559                                 struct r8a66597_pipe_info *info)
560 {
561         u16 val = 0;
562
563         if (info->pipenum == 0)
564                 return;
565
566         r8a66597_bset(r8a66597, ACLRM, get_pipectr_addr(info->pipenum));
567         r8a66597_bclr(r8a66597, ACLRM, get_pipectr_addr(info->pipenum));
568         r8a66597_write(r8a66597, info->pipenum, PIPESEL);
569         if (!info->dir_in)
570                 val |= R8A66597_DIR;
571         if (info->type == R8A66597_BULK && info->dir_in)
572                 val |= R8A66597_DBLB | R8A66597_SHTNAK;
573         val |= info->type | info->epnum;
574         r8a66597_write(r8a66597, val, PIPECFG);
575
576         r8a66597_write(r8a66597, (info->buf_bsize << 10) | (info->bufnum),
577                        PIPEBUF);
578         r8a66597_write(r8a66597, make_devsel(info->address) | info->maxpacket,
579                        PIPEMAXP);
580         r8a66597_write(r8a66597, info->interval, PIPEPERI);
581 }
582
583 /* this function must be called with interrupt disabled */
584 static void pipe_setting(struct r8a66597 *r8a66597, struct r8a66597_td *td)
585 {
586         struct r8a66597_pipe_info *info;
587         struct urb *urb = td->urb;
588
589         if (td->pipenum > 0) {
590                 info = &td->pipe->info;
591                 cfifo_change(r8a66597, 0);
592                 pipe_buffer_setting(r8a66597, info);
593
594                 if (!usb_gettoggle(urb->dev, usb_pipeendpoint(urb->pipe),
595                                    usb_pipeout(urb->pipe)) &&
596                     !usb_pipecontrol(urb->pipe)) {
597                         r8a66597_pipe_toggle(r8a66597, td->pipe, 0);
598                         pipe_toggle_set(r8a66597, td->pipe, urb, 0);
599                         clear_all_buffer(r8a66597, td->pipe);
600                         usb_settoggle(urb->dev, usb_pipeendpoint(urb->pipe),
601                                       usb_pipeout(urb->pipe), 1);
602                 }
603                 pipe_toggle_restore(r8a66597, td->pipe, urb);
604         }
605 }
606
607 /* this function must be called with interrupt disabled */
608 static u16 get_empty_pipenum(struct r8a66597 *r8a66597,
609                              struct usb_endpoint_descriptor *ep)
610 {
611         u16 array[R8A66597_MAX_NUM_PIPE], i = 0, min;
612
613         memset(array, 0, sizeof(array));
614         switch (ep->bmAttributes & USB_ENDPOINT_XFERTYPE_MASK) {
615         case USB_ENDPOINT_XFER_BULK:
616                 if (ep->bEndpointAddress & USB_ENDPOINT_DIR_MASK)
617                         array[i++] = 4;
618                 else {
619                         array[i++] = 3;
620                         array[i++] = 5;
621                 }
622                 break;
623         case USB_ENDPOINT_XFER_INT:
624                 if (ep->bEndpointAddress & USB_ENDPOINT_DIR_MASK) {
625                         array[i++] = 6;
626                         array[i++] = 7;
627                         array[i++] = 8;
628                 } else
629                         array[i++] = 9;
630                 break;
631         case USB_ENDPOINT_XFER_ISOC:
632                 if (ep->bEndpointAddress & USB_ENDPOINT_DIR_MASK)
633                         array[i++] = 2;
634                 else
635                         array[i++] = 1;
636                 break;
637         default:
638                 err("Illegal type");
639                 return 0;
640         }
641
642         i = 1;
643         min = array[0];
644         while (array[i] != 0) {
645                 if (r8a66597->pipe_cnt[min] > r8a66597->pipe_cnt[array[i]])
646                         min = array[i];
647                 i++;
648         }
649
650         return min;
651 }
652
653 static u16 get_r8a66597_type(__u8 type)
654 {
655         u16 r8a66597_type;
656
657         switch (type) {
658         case USB_ENDPOINT_XFER_BULK:
659                 r8a66597_type = R8A66597_BULK;
660                 break;
661         case USB_ENDPOINT_XFER_INT:
662                 r8a66597_type = R8A66597_INT;
663                 break;
664         case USB_ENDPOINT_XFER_ISOC:
665                 r8a66597_type = R8A66597_ISO;
666                 break;
667         default:
668                 err("Illegal type");
669                 r8a66597_type = 0x0000;
670                 break;
671         }
672
673         return r8a66597_type;
674 }
675
676 static u16 get_bufnum(u16 pipenum)
677 {
678         u16 bufnum = 0;
679
680         if (pipenum == 0)
681                 bufnum = 0;
682         else if (check_bulk_or_isoc(pipenum))
683                 bufnum = 8 + (pipenum - 1) * R8A66597_BUF_BSIZE*2;
684         else if (check_interrupt(pipenum))
685                 bufnum = 4 + (pipenum - 6);
686         else
687                 err("Illegal pipenum (%d)", pipenum);
688
689         return bufnum;
690 }
691
692 static u16 get_buf_bsize(u16 pipenum)
693 {
694         u16 buf_bsize = 0;
695
696         if (pipenum == 0)
697                 buf_bsize = 3;
698         else if (check_bulk_or_isoc(pipenum))
699                 buf_bsize = R8A66597_BUF_BSIZE - 1;
700         else if (check_interrupt(pipenum))
701                 buf_bsize = 0;
702         else
703                 err("Illegal pipenum (%d)", pipenum);
704
705         return buf_bsize;
706 }
707
708 /* this function must be called with interrupt disabled */
709 static void enable_r8a66597_pipe_dma(struct r8a66597 *r8a66597,
710                                      struct r8a66597_device *dev,
711                                      struct r8a66597_pipe *pipe,
712                                      struct urb *urb)
713 {
714         int i;
715         struct r8a66597_pipe_info *info = &pipe->info;
716
717         if ((pipe->info.pipenum != 0) && (info->type != R8A66597_INT)) {
718                 for (i = 0; i < R8A66597_MAX_DMA_CHANNEL; i++) {
719                         if ((r8a66597->dma_map & (1 << i)) != 0)
720                                 continue;
721
722                         info("address %d, EndpointAddress 0x%02x use DMA FIFO",
723                              usb_pipedevice(urb->pipe),
724                              info->dir_in ? USB_ENDPOINT_DIR_MASK + info->epnum
725                                             : info->epnum);
726
727                         r8a66597->dma_map |= 1 << i;
728                         dev->dma_map |= 1 << i;
729                         set_pipe_reg_addr(pipe, i);
730
731                         cfifo_change(r8a66597, 0);
732                         r8a66597_mdfy(r8a66597, MBW | pipe->info.pipenum,
733                                       MBW | CURPIPE, pipe->fifosel);
734
735                         r8a66597_reg_wait(r8a66597, pipe->fifosel, CURPIPE,
736                                           pipe->info.pipenum);
737                         r8a66597_bset(r8a66597, BCLR, pipe->fifoctr);
738                         break;
739                 }
740         }
741 }
742
743 /* this function must be called with interrupt disabled */
744 static void enable_r8a66597_pipe(struct r8a66597 *r8a66597, struct urb *urb,
745                                  struct usb_host_endpoint *hep,
746                                  struct r8a66597_pipe_info *info)
747 {
748         struct r8a66597_device *dev = get_urb_to_r8a66597_dev(r8a66597, urb);
749         struct r8a66597_pipe *pipe = hep->hcpriv;
750
751         dbg("enable_pipe:");
752
753         pipe->info = *info;
754         set_pipe_reg_addr(pipe, R8A66597_PIPE_NO_DMA);
755         r8a66597->pipe_cnt[pipe->info.pipenum]++;
756         dev->pipe_cnt[pipe->info.pipenum]++;
757
758         enable_r8a66597_pipe_dma(r8a66597, dev, pipe, urb);
759 }
760
761 /* this function must be called with interrupt disabled */
762 static void force_dequeue(struct r8a66597 *r8a66597, u16 pipenum, u16 address)
763 {
764         struct r8a66597_td *td, *next;
765         struct urb *urb;
766         struct list_head *list = &r8a66597->pipe_queue[pipenum];
767
768         if (list_empty(list))
769                 return;
770
771         list_for_each_entry_safe(td, next, list, queue) {
772                 if (!td)
773                         continue;
774                 if (td->address != address)
775                         continue;
776
777                 urb = td->urb;
778                 list_del(&td->queue);
779                 kfree(td);
780
781                 if (urb) {
782                         usb_hcd_unlink_urb_from_ep(r8a66597_to_hcd(r8a66597),
783                                         urb);
784
785                         spin_unlock(&r8a66597->lock);
786                         usb_hcd_giveback_urb(r8a66597_to_hcd(r8a66597), urb,
787                                         -ENODEV);
788                         spin_lock(&r8a66597->lock);
789                 }
790                 break;
791         }
792 }
793
794 /* this function must be called with interrupt disabled */
795 static void disable_r8a66597_pipe_all(struct r8a66597 *r8a66597,
796                                       struct r8a66597_device *dev)
797 {
798         int check_ep0 = 0;
799         u16 pipenum;
800
801         if (!dev)
802                 return;
803
804         for (pipenum = 1; pipenum < R8A66597_MAX_NUM_PIPE; pipenum++) {
805                 if (!dev->pipe_cnt[pipenum])
806                         continue;
807
808                 if (!check_ep0) {
809                         check_ep0 = 1;
810                         force_dequeue(r8a66597, 0, dev->address);
811                 }
812
813                 r8a66597->pipe_cnt[pipenum] -= dev->pipe_cnt[pipenum];
814                 dev->pipe_cnt[pipenum] = 0;
815                 force_dequeue(r8a66597, pipenum, dev->address);
816         }
817
818         dbg("disable_pipe");
819
820         r8a66597->dma_map &= ~(dev->dma_map);
821         dev->dma_map = 0;
822 }
823
824 static unsigned long get_timer_interval(struct urb *urb, __u8 interval)
825 {
826         __u8 i;
827         unsigned long time = 1;
828
829         if (usb_pipeisoc(urb->pipe))
830                 return 0;
831
832         if (get_r8a66597_usb_speed(urb->dev->speed) == HSMODE) {
833                 for (i = 0; i < (interval - 1); i++)
834                         time *= 2;
835                 time = time * 125 / 1000;       /* uSOF -> msec */
836         } else {
837                 time = interval;
838         }
839
840         return time;
841 }
842
843 /* this function must be called with interrupt disabled */
844 static void init_pipe_info(struct r8a66597 *r8a66597, struct urb *urb,
845                            struct usb_host_endpoint *hep,
846                            struct usb_endpoint_descriptor *ep)
847 {
848         struct r8a66597_pipe_info info;
849
850         info.pipenum = get_empty_pipenum(r8a66597, ep);
851         info.address = get_urb_to_r8a66597_addr(r8a66597, urb);
852         info.epnum = ep->bEndpointAddress & USB_ENDPOINT_NUMBER_MASK;
853         info.maxpacket = le16_to_cpu(ep->wMaxPacketSize);
854         info.type = get_r8a66597_type(ep->bmAttributes
855                                       & USB_ENDPOINT_XFERTYPE_MASK);
856         info.bufnum = get_bufnum(info.pipenum);
857         info.buf_bsize = get_buf_bsize(info.pipenum);
858         if (info.type == R8A66597_BULK) {
859                 info.interval = 0;
860                 info.timer_interval = 0;
861         } else {
862                 if (ep->bInterval > IITV)
863                         info.interval = IITV;
864                 else
865                         info.interval = ep->bInterval ? ep->bInterval - 1 : 0;
866                 info.timer_interval = get_timer_interval(urb, ep->bInterval);
867         }
868         if (ep->bEndpointAddress & USB_ENDPOINT_DIR_MASK)
869                 info.dir_in = 1;
870         else
871                 info.dir_in = 0;
872
873         enable_r8a66597_pipe(r8a66597, urb, hep, &info);
874 }
875
876 static void init_pipe_config(struct r8a66597 *r8a66597, struct urb *urb)
877 {
878         struct r8a66597_device *dev;
879
880         dev = get_urb_to_r8a66597_dev(r8a66597, urb);
881         dev->state = USB_STATE_CONFIGURED;
882 }
883
884 static void pipe_irq_enable(struct r8a66597 *r8a66597, struct urb *urb,
885                             u16 pipenum)
886 {
887         if (pipenum == 0 && usb_pipeout(urb->pipe))
888                 enable_irq_empty(r8a66597, pipenum);
889         else
890                 enable_irq_ready(r8a66597, pipenum);
891
892         if (!usb_pipeisoc(urb->pipe))
893                 enable_irq_nrdy(r8a66597, pipenum);
894 }
895
896 static void pipe_irq_disable(struct r8a66597 *r8a66597, u16 pipenum)
897 {
898         disable_irq_ready(r8a66597, pipenum);
899         disable_irq_nrdy(r8a66597, pipenum);
900 }
901
902 /* this function must be called with interrupt disabled */
903 static void r8a66597_usb_preconnect(struct r8a66597 *r8a66597, int port)
904 {
905         r8a66597->root_hub[port].port |= (1 << USB_PORT_FEAT_CONNECTION)
906                                          | (1 << USB_PORT_FEAT_C_CONNECTION);
907         r8a66597_write(r8a66597, ~DTCH, get_intsts_reg(port));
908         r8a66597_bset(r8a66597, DTCHE, get_intenb_reg(port));
909 }
910
911 /* this function must be called with interrupt disabled */
912 static void r8a66597_usb_connect(struct r8a66597 *r8a66597, int port)
913 {
914         u16 speed = get_rh_usb_speed(r8a66597, port);
915         struct r8a66597_root_hub *rh = &r8a66597->root_hub[port];
916
917         if (speed == HSMODE)
918                 rh->port |= (1 << USB_PORT_FEAT_HIGHSPEED);
919         else if (speed == LSMODE)
920                 rh->port |= (1 << USB_PORT_FEAT_LOWSPEED);
921
922         rh->port &= ~(1 << USB_PORT_FEAT_RESET);
923         rh->port |= 1 << USB_PORT_FEAT_ENABLE;
924 }
925
926 /* this function must be called with interrupt disabled */
927 static void r8a66597_usb_disconnect(struct r8a66597 *r8a66597, int port)
928 {
929         struct r8a66597_device *dev = r8a66597->root_hub[port].dev;
930
931         r8a66597->root_hub[port].port &= ~(1 << USB_PORT_FEAT_CONNECTION);
932         r8a66597->root_hub[port].port |= (1 << USB_PORT_FEAT_C_CONNECTION);
933
934         disable_r8a66597_pipe_all(r8a66597, dev);
935         free_usb_address(r8a66597, dev);
936
937         r8a66597_bset(r8a66597, ATTCHE, get_intenb_reg(port));
938 }
939
940 /* this function must be called with interrupt disabled */
941 static void prepare_setup_packet(struct r8a66597 *r8a66597,
942                                  struct r8a66597_td *td)
943 {
944         int i;
945         u16 *p = (u16 *)td->urb->setup_packet;
946         unsigned long setup_addr = USBREQ;
947
948         r8a66597_write(r8a66597, make_devsel(td->address) | td->maxpacket,
949                        DCPMAXP);
950         r8a66597_write(r8a66597, ~(SIGN | SACK), INTSTS1);
951
952         for (i = 0; i < 4; i++) {
953                 r8a66597_write(r8a66597, cpu_to_le16(p[i]), setup_addr);
954                 setup_addr += 2;
955         }
956         r8a66597_write(r8a66597, SUREQ, DCPCTR);
957 }
958
959 /* this function must be called with interrupt disabled */
960 static void prepare_packet_read(struct r8a66597 *r8a66597,
961                                 struct r8a66597_td *td)
962 {
963         struct urb *urb = td->urb;
964
965         if (usb_pipecontrol(urb->pipe)) {
966                 r8a66597_bclr(r8a66597, R8A66597_DIR, DCPCFG);
967                 r8a66597_mdfy(r8a66597, 0, ISEL | CURPIPE, CFIFOSEL);
968                 r8a66597_reg_wait(r8a66597, CFIFOSEL, CURPIPE, 0);
969                 if (urb->actual_length == 0) {
970                         r8a66597_pipe_toggle(r8a66597, td->pipe, 1);
971                         r8a66597_write(r8a66597, BCLR, CFIFOCTR);
972                 }
973                 pipe_irq_disable(r8a66597, td->pipenum);
974                 pipe_start(r8a66597, td->pipe);
975                 pipe_irq_enable(r8a66597, urb, td->pipenum);
976         } else {
977                 if (urb->actual_length == 0) {
978                         pipe_irq_disable(r8a66597, td->pipenum);
979                         pipe_setting(r8a66597, td);
980                         pipe_stop(r8a66597, td->pipe);
981                         r8a66597_write(r8a66597, ~(1 << td->pipenum), BRDYSTS);
982
983                         if (td->pipe->pipetre) {
984                                 r8a66597_write(r8a66597, TRCLR,
985                                                 td->pipe->pipetre);
986                                 r8a66597_write(r8a66597,
987                                                 DIV_ROUND_UP
988                                                   (urb->transfer_buffer_length,
989                                                    td->maxpacket),
990                                                 td->pipe->pipetrn);
991                                 r8a66597_bset(r8a66597, TRENB,
992                                                 td->pipe->pipetre);
993                         }
994
995                         pipe_start(r8a66597, td->pipe);
996                         pipe_irq_enable(r8a66597, urb, td->pipenum);
997                 }
998         }
999 }
1000
1001 /* this function must be called with interrupt disabled */
1002 static void prepare_packet_write(struct r8a66597 *r8a66597,
1003                                  struct r8a66597_td *td)
1004 {
1005         u16 tmp;
1006         struct urb *urb = td->urb;
1007
1008         if (usb_pipecontrol(urb->pipe)) {
1009                 pipe_stop(r8a66597, td->pipe);
1010                 r8a66597_bset(r8a66597, R8A66597_DIR, DCPCFG);
1011                 r8a66597_mdfy(r8a66597, ISEL, ISEL | CURPIPE, CFIFOSEL);
1012                 r8a66597_reg_wait(r8a66597, CFIFOSEL, CURPIPE, 0);
1013                 if (urb->actual_length == 0) {
1014                         r8a66597_pipe_toggle(r8a66597, td->pipe, 1);
1015                         r8a66597_write(r8a66597, BCLR, CFIFOCTR);
1016                 }
1017         } else {
1018                 if (urb->actual_length == 0)
1019                         pipe_setting(r8a66597, td);
1020                 if (td->pipe->pipetre)
1021                         r8a66597_bclr(r8a66597, TRENB, td->pipe->pipetre);
1022         }
1023         r8a66597_write(r8a66597, ~(1 << td->pipenum), BRDYSTS);
1024
1025         fifo_change_from_pipe(r8a66597, td->pipe);
1026         tmp = r8a66597_read(r8a66597, td->pipe->fifoctr);
1027         if (unlikely((tmp & FRDY) == 0))
1028                 pipe_irq_enable(r8a66597, urb, td->pipenum);
1029         else
1030                 packet_write(r8a66597, td->pipenum);
1031         pipe_start(r8a66597, td->pipe);
1032 }
1033
1034 /* this function must be called with interrupt disabled */
1035 static void prepare_status_packet(struct r8a66597 *r8a66597,
1036                                   struct r8a66597_td *td)
1037 {
1038         struct urb *urb = td->urb;
1039
1040         r8a66597_pipe_toggle(r8a66597, td->pipe, 1);
1041         pipe_stop(r8a66597, td->pipe);
1042
1043         if (urb->setup_packet[0] & USB_ENDPOINT_DIR_MASK) {
1044                 r8a66597_bset(r8a66597, R8A66597_DIR, DCPCFG);
1045                 r8a66597_mdfy(r8a66597, ISEL, ISEL | CURPIPE, CFIFOSEL);
1046                 r8a66597_reg_wait(r8a66597, CFIFOSEL, CURPIPE, 0);
1047                 r8a66597_write(r8a66597, ~BEMP0, BEMPSTS);
1048                 r8a66597_write(r8a66597, BCLR, CFIFOCTR);
1049                 r8a66597_write(r8a66597, BVAL, CFIFOCTR);
1050                 enable_irq_empty(r8a66597, 0);
1051         } else {
1052                 r8a66597_bclr(r8a66597, R8A66597_DIR, DCPCFG);
1053                 r8a66597_mdfy(r8a66597, 0, ISEL | CURPIPE, CFIFOSEL);
1054                 r8a66597_reg_wait(r8a66597, CFIFOSEL, CURPIPE, 0);
1055                 r8a66597_write(r8a66597, BCLR, CFIFOCTR);
1056                 enable_irq_ready(r8a66597, 0);
1057         }
1058         enable_irq_nrdy(r8a66597, 0);
1059         pipe_start(r8a66597, td->pipe);
1060 }
1061
1062 static int is_set_address(unsigned char *setup_packet)
1063 {
1064         if (((setup_packet[0] & USB_TYPE_MASK) == USB_TYPE_STANDARD) &&
1065                         setup_packet[1] == USB_REQ_SET_ADDRESS)
1066                 return 1;
1067         else
1068                 return 0;
1069 }
1070
1071 /* this function must be called with interrupt disabled */
1072 static int start_transfer(struct r8a66597 *r8a66597, struct r8a66597_td *td)
1073 {
1074         BUG_ON(!td);
1075
1076         switch (td->type) {
1077         case USB_PID_SETUP:
1078                 if (is_set_address(td->urb->setup_packet)) {
1079                         td->set_address = 1;
1080                         td->urb->setup_packet[2] = alloc_usb_address(r8a66597,
1081                                                                      td->urb);
1082                         if (td->urb->setup_packet[2] == 0)
1083                                 return -EPIPE;
1084                 }
1085                 prepare_setup_packet(r8a66597, td);
1086                 break;
1087         case USB_PID_IN:
1088                 prepare_packet_read(r8a66597, td);
1089                 break;
1090         case USB_PID_OUT:
1091                 prepare_packet_write(r8a66597, td);
1092                 break;
1093         case USB_PID_ACK:
1094                 prepare_status_packet(r8a66597, td);
1095                 break;
1096         default:
1097                 err("invalid type.");
1098                 break;
1099         }
1100
1101         return 0;
1102 }
1103
1104 static int check_transfer_finish(struct r8a66597_td *td, struct urb *urb)
1105 {
1106         if (usb_pipeisoc(urb->pipe)) {
1107                 if (urb->number_of_packets == td->iso_cnt)
1108                         return 1;
1109         }
1110
1111         /* control or bulk or interrupt */
1112         if ((urb->transfer_buffer_length <= urb->actual_length) ||
1113             (td->short_packet) || (td->zero_packet))
1114                 return 1;
1115
1116         return 0;
1117 }
1118
1119 /* this function must be called with interrupt disabled */
1120 static void set_td_timer(struct r8a66597 *r8a66597, struct r8a66597_td *td)
1121 {
1122         unsigned long time;
1123
1124         BUG_ON(!td);
1125
1126         if (!list_empty(&r8a66597->pipe_queue[td->pipenum]) &&
1127             !usb_pipecontrol(td->urb->pipe) && usb_pipein(td->urb->pipe)) {
1128                 r8a66597->timeout_map |= 1 << td->pipenum;
1129                 switch (usb_pipetype(td->urb->pipe)) {
1130                 case PIPE_INTERRUPT:
1131                 case PIPE_ISOCHRONOUS:
1132                         time = 30;
1133                         break;
1134                 default:
1135                         time = 300;
1136                         break;
1137                 }
1138
1139                 mod_timer(&r8a66597->td_timer[td->pipenum],
1140                           jiffies + msecs_to_jiffies(time));
1141         }
1142 }
1143
1144 /* this function must be called with interrupt disabled */
1145 static void finish_request(struct r8a66597 *r8a66597, struct r8a66597_td *td,
1146                 u16 pipenum, struct urb *urb, int status)
1147 __releases(r8a66597->lock) __acquires(r8a66597->lock)
1148 {
1149         int restart = 0;
1150         struct usb_hcd *hcd = r8a66597_to_hcd(r8a66597);
1151
1152         r8a66597->timeout_map &= ~(1 << pipenum);
1153
1154         if (likely(td)) {
1155                 if (td->set_address && (status != 0 || urb->unlinked))
1156                         r8a66597->address_map &= ~(1 << urb->setup_packet[2]);
1157
1158                 pipe_toggle_save(r8a66597, td->pipe, urb);
1159                 list_del(&td->queue);
1160                 kfree(td);
1161         }
1162
1163         if (!list_empty(&r8a66597->pipe_queue[pipenum]))
1164                 restart = 1;
1165
1166         if (likely(urb)) {
1167                 if (usb_pipeisoc(urb->pipe))
1168                         urb->start_frame = r8a66597_get_frame(hcd);
1169
1170                 usb_hcd_unlink_urb_from_ep(r8a66597_to_hcd(r8a66597), urb);
1171                 spin_unlock(&r8a66597->lock);
1172                 usb_hcd_giveback_urb(hcd, urb, status);
1173                 spin_lock(&r8a66597->lock);
1174         }
1175
1176         if (restart) {
1177                 td = r8a66597_get_td(r8a66597, pipenum);
1178                 if (unlikely(!td))
1179                         return;
1180
1181                 start_transfer(r8a66597, td);
1182                 set_td_timer(r8a66597, td);
1183         }
1184 }
1185
1186 static void packet_read(struct r8a66597 *r8a66597, u16 pipenum)
1187 {
1188         u16 tmp;
1189         int rcv_len, bufsize, urb_len, size;
1190         u16 *buf;
1191         struct r8a66597_td *td = r8a66597_get_td(r8a66597, pipenum);
1192         struct urb *urb;
1193         int finish = 0;
1194         int status = 0;
1195
1196         if (unlikely(!td))
1197                 return;
1198         urb = td->urb;
1199
1200         fifo_change_from_pipe(r8a66597, td->pipe);
1201         tmp = r8a66597_read(r8a66597, td->pipe->fifoctr);
1202         if (unlikely((tmp & FRDY) == 0)) {
1203                 pipe_stop(r8a66597, td->pipe);
1204                 pipe_irq_disable(r8a66597, pipenum);
1205                 err("in fifo not ready (%d)", pipenum);
1206                 finish_request(r8a66597, td, pipenum, td->urb, -EPIPE);
1207                 return;
1208         }
1209
1210         /* prepare parameters */
1211         rcv_len = tmp & DTLN;
1212         if (usb_pipeisoc(urb->pipe)) {
1213                 buf = (u16 *)(urb->transfer_buffer +
1214                                 urb->iso_frame_desc[td->iso_cnt].offset);
1215                 urb_len = urb->iso_frame_desc[td->iso_cnt].length;
1216         } else {
1217                 buf = (void *)urb->transfer_buffer + urb->actual_length;
1218                 urb_len = urb->transfer_buffer_length - urb->actual_length;
1219         }
1220         bufsize = min(urb_len, (int) td->maxpacket);
1221         if (rcv_len <= bufsize) {
1222                 size = rcv_len;
1223         } else {
1224                 size = bufsize;
1225                 status = -EOVERFLOW;
1226                 finish = 1;
1227         }
1228
1229         /* update parameters */
1230         urb->actual_length += size;
1231         if (rcv_len == 0)
1232                 td->zero_packet = 1;
1233         if (rcv_len < bufsize) {
1234                 td->short_packet = 1;
1235         }
1236         if (usb_pipeisoc(urb->pipe)) {
1237                 urb->iso_frame_desc[td->iso_cnt].actual_length = size;
1238                 urb->iso_frame_desc[td->iso_cnt].status = status;
1239                 td->iso_cnt++;
1240                 finish = 0;
1241         }
1242
1243         /* check transfer finish */
1244         if (finish || check_transfer_finish(td, urb)) {
1245                 pipe_stop(r8a66597, td->pipe);
1246                 pipe_irq_disable(r8a66597, pipenum);
1247                 finish = 1;
1248         }
1249
1250         /* read fifo */
1251         if (urb->transfer_buffer) {
1252                 if (size == 0)
1253                         r8a66597_write(r8a66597, BCLR, td->pipe->fifoctr);
1254                 else
1255                         r8a66597_read_fifo(r8a66597, td->pipe->fifoaddr,
1256                                            buf, size);
1257         }
1258
1259         if (finish && pipenum != 0)
1260                 finish_request(r8a66597, td, pipenum, urb, status);
1261 }
1262
1263 static void packet_write(struct r8a66597 *r8a66597, u16 pipenum)
1264 {
1265         u16 tmp;
1266         int bufsize, size;
1267         u16 *buf;
1268         struct r8a66597_td *td = r8a66597_get_td(r8a66597, pipenum);
1269         struct urb *urb;
1270
1271         if (unlikely(!td))
1272                 return;
1273         urb = td->urb;
1274
1275         fifo_change_from_pipe(r8a66597, td->pipe);
1276         tmp = r8a66597_read(r8a66597, td->pipe->fifoctr);
1277         if (unlikely((tmp & FRDY) == 0)) {
1278                 pipe_stop(r8a66597, td->pipe);
1279                 pipe_irq_disable(r8a66597, pipenum);
1280                 err("out write fifo not ready. (%d)", pipenum);
1281                 finish_request(r8a66597, td, pipenum, urb, -EPIPE);
1282                 return;
1283         }
1284
1285         /* prepare parameters */
1286         bufsize = td->maxpacket;
1287         if (usb_pipeisoc(urb->pipe)) {
1288                 buf = (u16 *)(urb->transfer_buffer +
1289                                 urb->iso_frame_desc[td->iso_cnt].offset);
1290                 size = min(bufsize,
1291                            (int)urb->iso_frame_desc[td->iso_cnt].length);
1292         } else {
1293                 buf = (u16 *)(urb->transfer_buffer + urb->actual_length);
1294                 size = min((int)bufsize,
1295                            urb->transfer_buffer_length - urb->actual_length);
1296         }
1297
1298         /* write fifo */
1299         if (pipenum > 0)
1300                 r8a66597_write(r8a66597, ~(1 << pipenum), BEMPSTS);
1301         if (urb->transfer_buffer) {
1302                 r8a66597_write_fifo(r8a66597, td->pipe->fifoaddr, buf, size);
1303                 if (!usb_pipebulk(urb->pipe) || td->maxpacket != size)
1304                         r8a66597_write(r8a66597, BVAL, td->pipe->fifoctr);
1305         }
1306
1307         /* update parameters */
1308         urb->actual_length += size;
1309         if (usb_pipeisoc(urb->pipe)) {
1310                 urb->iso_frame_desc[td->iso_cnt].actual_length = size;
1311                 urb->iso_frame_desc[td->iso_cnt].status = 0;
1312                 td->iso_cnt++;
1313         }
1314
1315         /* check transfer finish */
1316         if (check_transfer_finish(td, urb)) {
1317                 disable_irq_ready(r8a66597, pipenum);
1318                 enable_irq_empty(r8a66597, pipenum);
1319                 if (!usb_pipeisoc(urb->pipe))
1320                         enable_irq_nrdy(r8a66597, pipenum);
1321         } else
1322                 pipe_irq_enable(r8a66597, urb, pipenum);
1323 }
1324
1325
1326 static void check_next_phase(struct r8a66597 *r8a66597, int status)
1327 {
1328         struct r8a66597_td *td = r8a66597_get_td(r8a66597, 0);
1329         struct urb *urb;
1330         u8 finish = 0;
1331
1332         if (unlikely(!td))
1333                 return;
1334         urb = td->urb;
1335
1336         switch (td->type) {
1337         case USB_PID_IN:
1338         case USB_PID_OUT:
1339                 if (check_transfer_finish(td, urb))
1340                         td->type = USB_PID_ACK;
1341                 break;
1342         case USB_PID_SETUP:
1343                 if (urb->transfer_buffer_length == urb->actual_length)
1344                         td->type = USB_PID_ACK;
1345                 else if (usb_pipeout(urb->pipe))
1346                         td->type = USB_PID_OUT;
1347                 else
1348                         td->type = USB_PID_IN;
1349                 break;
1350         case USB_PID_ACK:
1351                 finish = 1;
1352                 break;
1353         }
1354
1355         if (finish || status != 0 || urb->unlinked)
1356                 finish_request(r8a66597, td, 0, urb, status);
1357         else
1358                 start_transfer(r8a66597, td);
1359 }
1360
1361 static int get_urb_error(struct r8a66597 *r8a66597, u16 pipenum)
1362 {
1363         struct r8a66597_td *td = r8a66597_get_td(r8a66597, pipenum);
1364
1365         if (td) {
1366                 u16 pid = r8a66597_read(r8a66597, td->pipe->pipectr) & PID;
1367
1368                 if (pid == PID_NAK)
1369                         return -ECONNRESET;
1370                 else
1371                         return -EPIPE;
1372         }
1373         return 0;
1374 }
1375
1376 static void irq_pipe_ready(struct r8a66597 *r8a66597)
1377 {
1378         u16 check;
1379         u16 pipenum;
1380         u16 mask;
1381         struct r8a66597_td *td;
1382
1383         mask = r8a66597_read(r8a66597, BRDYSTS)
1384                & r8a66597_read(r8a66597, BRDYENB);
1385         r8a66597_write(r8a66597, ~mask, BRDYSTS);
1386         if (mask & BRDY0) {
1387                 td = r8a66597_get_td(r8a66597, 0);
1388                 if (td && td->type == USB_PID_IN)
1389                         packet_read(r8a66597, 0);
1390                 else
1391                         pipe_irq_disable(r8a66597, 0);
1392                 check_next_phase(r8a66597, 0);
1393         }
1394
1395         for (pipenum = 1; pipenum < R8A66597_MAX_NUM_PIPE; pipenum++) {
1396                 check = 1 << pipenum;
1397                 if (mask & check) {
1398                         td = r8a66597_get_td(r8a66597, pipenum);
1399                         if (unlikely(!td))
1400                                 continue;
1401
1402                         if (td->type == USB_PID_IN)
1403                                 packet_read(r8a66597, pipenum);
1404                         else if (td->type == USB_PID_OUT)
1405                                 packet_write(r8a66597, pipenum);
1406                 }
1407         }
1408 }
1409
1410 static void irq_pipe_empty(struct r8a66597 *r8a66597)
1411 {
1412         u16 tmp;
1413         u16 check;
1414         u16 pipenum;
1415         u16 mask;
1416         struct r8a66597_td *td;
1417
1418         mask = r8a66597_read(r8a66597, BEMPSTS)
1419                & r8a66597_read(r8a66597, BEMPENB);
1420         r8a66597_write(r8a66597, ~mask, BEMPSTS);
1421         if (mask & BEMP0) {
1422                 cfifo_change(r8a66597, 0);
1423                 td = r8a66597_get_td(r8a66597, 0);
1424                 if (td && td->type != USB_PID_OUT)
1425                         disable_irq_empty(r8a66597, 0);
1426                 check_next_phase(r8a66597, 0);
1427         }
1428
1429         for (pipenum = 1; pipenum < R8A66597_MAX_NUM_PIPE; pipenum++) {
1430                 check = 1 << pipenum;
1431                 if (mask &  check) {
1432                         struct r8a66597_td *td;
1433                         td = r8a66597_get_td(r8a66597, pipenum);
1434                         if (unlikely(!td))
1435                                 continue;
1436
1437                         tmp = r8a66597_read(r8a66597, td->pipe->pipectr);
1438                         if ((tmp & INBUFM) == 0) {
1439                                 disable_irq_empty(r8a66597, pipenum);
1440                                 pipe_irq_disable(r8a66597, pipenum);
1441                                 finish_request(r8a66597, td, pipenum, td->urb,
1442                                                 0);
1443                         }
1444                 }
1445         }
1446 }
1447
1448 static void irq_pipe_nrdy(struct r8a66597 *r8a66597)
1449 {
1450         u16 check;
1451         u16 pipenum;
1452         u16 mask;
1453         int status;
1454
1455         mask = r8a66597_read(r8a66597, NRDYSTS)
1456                & r8a66597_read(r8a66597, NRDYENB);
1457         r8a66597_write(r8a66597, ~mask, NRDYSTS);
1458         if (mask & NRDY0) {
1459                 cfifo_change(r8a66597, 0);
1460                 status = get_urb_error(r8a66597, 0);
1461                 pipe_irq_disable(r8a66597, 0);
1462                 check_next_phase(r8a66597, status);
1463         }
1464
1465         for (pipenum = 1; pipenum < R8A66597_MAX_NUM_PIPE; pipenum++) {
1466                 check = 1 << pipenum;
1467                 if (mask & check) {
1468                         struct r8a66597_td *td;
1469                         td = r8a66597_get_td(r8a66597, pipenum);
1470                         if (unlikely(!td))
1471                                 continue;
1472
1473                         status = get_urb_error(r8a66597, pipenum);
1474                         pipe_irq_disable(r8a66597, pipenum);
1475                         pipe_stop(r8a66597, td->pipe);
1476                         finish_request(r8a66597, td, pipenum, td->urb, status);
1477                 }
1478         }
1479 }
1480
1481 static void start_root_hub_sampling(struct r8a66597 *r8a66597, int port)
1482 {
1483         struct r8a66597_root_hub *rh = &r8a66597->root_hub[port];
1484
1485         rh->old_syssts = r8a66597_read(r8a66597, get_syssts_reg(port)) & LNST;
1486         rh->scount = R8A66597_MAX_SAMPLING;
1487         mod_timer(&r8a66597->rh_timer, jiffies + msecs_to_jiffies(50));
1488 }
1489
1490 static irqreturn_t r8a66597_irq(struct usb_hcd *hcd)
1491 {
1492         struct r8a66597 *r8a66597 = hcd_to_r8a66597(hcd);
1493         u16 intsts0, intsts1, intsts2;
1494         u16 intenb0, intenb1, intenb2;
1495         u16 mask0, mask1, mask2;
1496         int status;
1497
1498         spin_lock(&r8a66597->lock);
1499
1500         intsts0 = r8a66597_read(r8a66597, INTSTS0);
1501         intsts1 = r8a66597_read(r8a66597, INTSTS1);
1502         intsts2 = r8a66597_read(r8a66597, INTSTS2);
1503         intenb0 = r8a66597_read(r8a66597, INTENB0);
1504         intenb1 = r8a66597_read(r8a66597, INTENB1);
1505         intenb2 = r8a66597_read(r8a66597, INTENB2);
1506
1507         mask2 = intsts2 & intenb2;
1508         mask1 = intsts1 & intenb1;
1509         mask0 = intsts0 & intenb0 & (BEMP | NRDY | BRDY);
1510         if (mask2) {
1511                 if (mask2 & ATTCH) {
1512                         r8a66597_write(r8a66597, ~ATTCH, INTSTS2);
1513                         r8a66597_bclr(r8a66597, ATTCHE, INTENB2);
1514
1515                         /* start usb bus sampling */
1516                         start_root_hub_sampling(r8a66597, 1);
1517                 }
1518                 if (mask2 & DTCH) {
1519                         r8a66597_write(r8a66597, ~DTCH, INTSTS2);
1520                         r8a66597_bclr(r8a66597, DTCHE, INTENB2);
1521                         r8a66597_usb_disconnect(r8a66597, 1);
1522                 }
1523         }
1524
1525         if (mask1) {
1526                 if (mask1 & ATTCH) {
1527                         r8a66597_write(r8a66597, ~ATTCH, INTSTS1);
1528                         r8a66597_bclr(r8a66597, ATTCHE, INTENB1);
1529
1530                         /* start usb bus sampling */
1531                         start_root_hub_sampling(r8a66597, 0);
1532                 }
1533                 if (mask1 & DTCH) {
1534                         r8a66597_write(r8a66597, ~DTCH, INTSTS1);
1535                         r8a66597_bclr(r8a66597, DTCHE, INTENB1);
1536                         r8a66597_usb_disconnect(r8a66597, 0);
1537                 }
1538                 if (mask1 & SIGN) {
1539                         r8a66597_write(r8a66597, ~SIGN, INTSTS1);
1540                         status = get_urb_error(r8a66597, 0);
1541                         check_next_phase(r8a66597, status);
1542                 }
1543                 if (mask1 & SACK) {
1544                         r8a66597_write(r8a66597, ~SACK, INTSTS1);
1545                         check_next_phase(r8a66597, 0);
1546                 }
1547         }
1548         if (mask0) {
1549                 if (mask0 & BRDY)
1550                         irq_pipe_ready(r8a66597);
1551                 if (mask0 & BEMP)
1552                         irq_pipe_empty(r8a66597);
1553                 if (mask0 & NRDY)
1554                         irq_pipe_nrdy(r8a66597);
1555         }
1556
1557         spin_unlock(&r8a66597->lock);
1558         return IRQ_HANDLED;
1559 }
1560
1561 /* this function must be called with interrupt disabled */
1562 static void r8a66597_root_hub_control(struct r8a66597 *r8a66597, int port)
1563 {
1564         u16 tmp;
1565         struct r8a66597_root_hub *rh = &r8a66597->root_hub[port];
1566
1567         if (rh->port & (1 << USB_PORT_FEAT_RESET)) {
1568                 unsigned long dvstctr_reg = get_dvstctr_reg(port);
1569
1570                 tmp = r8a66597_read(r8a66597, dvstctr_reg);
1571                 if ((tmp & USBRST) == USBRST) {
1572                         r8a66597_mdfy(r8a66597, UACT, USBRST | UACT,
1573                                       dvstctr_reg);
1574                         mod_timer(&r8a66597->rh_timer,
1575                                   jiffies + msecs_to_jiffies(50));
1576                 } else
1577                         r8a66597_usb_connect(r8a66597, port);
1578         }
1579
1580         if (rh->scount > 0) {
1581                 tmp = r8a66597_read(r8a66597, get_syssts_reg(port)) & LNST;
1582                 if (tmp == rh->old_syssts) {
1583                         rh->scount--;
1584                         if (rh->scount == 0) {
1585                                 if (tmp == FS_JSTS) {
1586                                         r8a66597_bset(r8a66597, HSE,
1587                                                       get_syscfg_reg(port));
1588                                         r8a66597_usb_preconnect(r8a66597, port);
1589                                 } else if (tmp == LS_JSTS) {
1590                                         r8a66597_bclr(r8a66597, HSE,
1591                                                       get_syscfg_reg(port));
1592                                         r8a66597_usb_preconnect(r8a66597, port);
1593                                 } else if (tmp == SE0)
1594                                         r8a66597_bset(r8a66597, ATTCHE,
1595                                                       get_intenb_reg(port));
1596                         } else {
1597                                 mod_timer(&r8a66597->rh_timer,
1598                                           jiffies + msecs_to_jiffies(50));
1599                         }
1600                 } else {
1601                         rh->scount = R8A66597_MAX_SAMPLING;
1602                         rh->old_syssts = tmp;
1603                         mod_timer(&r8a66597->rh_timer,
1604                                   jiffies + msecs_to_jiffies(50));
1605                 }
1606         }
1607 }
1608
1609 static void r8a66597_interval_timer(unsigned long _r8a66597)
1610 {
1611         struct r8a66597 *r8a66597 = (struct r8a66597 *)_r8a66597;
1612         unsigned long flags;
1613         u16 pipenum;
1614         struct r8a66597_td *td;
1615
1616         spin_lock_irqsave(&r8a66597->lock, flags);
1617
1618         for (pipenum = 0; pipenum < R8A66597_MAX_NUM_PIPE; pipenum++) {
1619                 if (!(r8a66597->interval_map & (1 << pipenum)))
1620                         continue;
1621                 if (timer_pending(&r8a66597->interval_timer[pipenum]))
1622                         continue;
1623
1624                 td = r8a66597_get_td(r8a66597, pipenum);
1625                 if (td)
1626                         start_transfer(r8a66597, td);
1627         }
1628
1629         spin_unlock_irqrestore(&r8a66597->lock, flags);
1630 }
1631
1632 static void r8a66597_td_timer(unsigned long _r8a66597)
1633 {
1634         struct r8a66597 *r8a66597 = (struct r8a66597 *)_r8a66597;
1635         unsigned long flags;
1636         u16 pipenum;
1637         struct r8a66597_td *td, *new_td = NULL;
1638         struct r8a66597_pipe *pipe;
1639
1640         spin_lock_irqsave(&r8a66597->lock, flags);
1641         for (pipenum = 0; pipenum < R8A66597_MAX_NUM_PIPE; pipenum++) {
1642                 if (!(r8a66597->timeout_map & (1 << pipenum)))
1643                         continue;
1644                 if (timer_pending(&r8a66597->td_timer[pipenum]))
1645                         continue;
1646
1647                 td = r8a66597_get_td(r8a66597, pipenum);
1648                 if (!td) {
1649                         r8a66597->timeout_map &= ~(1 << pipenum);
1650                         continue;
1651                 }
1652
1653                 if (td->urb->actual_length) {
1654                         set_td_timer(r8a66597, td);
1655                         break;
1656                 }
1657
1658                 pipe = td->pipe;
1659                 pipe_stop(r8a66597, pipe);
1660
1661                 new_td = td;
1662                 do {
1663                         list_move_tail(&new_td->queue,
1664                                        &r8a66597->pipe_queue[pipenum]);
1665                         new_td = r8a66597_get_td(r8a66597, pipenum);
1666                         if (!new_td) {
1667                                 new_td = td;
1668                                 break;
1669                         }
1670                 } while (td != new_td && td->address == new_td->address);
1671
1672                 start_transfer(r8a66597, new_td);
1673
1674                 if (td == new_td)
1675                         r8a66597->timeout_map &= ~(1 << pipenum);
1676                 else
1677                         set_td_timer(r8a66597, new_td);
1678                 break;
1679         }
1680         spin_unlock_irqrestore(&r8a66597->lock, flags);
1681 }
1682
1683 static void r8a66597_timer(unsigned long _r8a66597)
1684 {
1685         struct r8a66597 *r8a66597 = (struct r8a66597 *)_r8a66597;
1686         unsigned long flags;
1687
1688         spin_lock_irqsave(&r8a66597->lock, flags);
1689
1690         r8a66597_root_hub_control(r8a66597, 0);
1691         r8a66597_root_hub_control(r8a66597, 1);
1692
1693         spin_unlock_irqrestore(&r8a66597->lock, flags);
1694 }
1695
1696 static int check_pipe_config(struct r8a66597 *r8a66597, struct urb *urb)
1697 {
1698         struct r8a66597_device *dev = get_urb_to_r8a66597_dev(r8a66597, urb);
1699
1700         if (dev && dev->address && dev->state != USB_STATE_CONFIGURED &&
1701             (urb->dev->state == USB_STATE_CONFIGURED))
1702                 return 1;
1703         else
1704                 return 0;
1705 }
1706
1707 static int r8a66597_start(struct usb_hcd *hcd)
1708 {
1709         struct r8a66597 *r8a66597 = hcd_to_r8a66597(hcd);
1710
1711         hcd->state = HC_STATE_RUNNING;
1712         return enable_controller(r8a66597);
1713 }
1714
1715 static void r8a66597_stop(struct usb_hcd *hcd)
1716 {
1717         struct r8a66597 *r8a66597 = hcd_to_r8a66597(hcd);
1718
1719         disable_controller(r8a66597);
1720 }
1721
1722 static void set_address_zero(struct r8a66597 *r8a66597, struct urb *urb)
1723 {
1724         unsigned int usb_address = usb_pipedevice(urb->pipe);
1725         u16 root_port, hub_port;
1726
1727         if (usb_address == 0) {
1728                 get_port_number(urb->dev->devpath,
1729                                 &root_port, &hub_port);
1730                 set_devadd_reg(r8a66597, 0,
1731                                get_r8a66597_usb_speed(urb->dev->speed),
1732                                get_parent_r8a66597_address(r8a66597, urb->dev),
1733                                hub_port, root_port);
1734         }
1735 }
1736
1737 static struct r8a66597_td *r8a66597_make_td(struct r8a66597 *r8a66597,
1738                                             struct urb *urb,
1739                                             struct usb_host_endpoint *hep)
1740 {
1741         struct r8a66597_td *td;
1742         u16 pipenum;
1743
1744         td = kzalloc(sizeof(struct r8a66597_td), GFP_ATOMIC);
1745         if (td == NULL)
1746                 return NULL;
1747
1748         pipenum = r8a66597_get_pipenum(urb, hep);
1749         td->pipenum = pipenum;
1750         td->pipe = hep->hcpriv;
1751         td->urb = urb;
1752         td->address = get_urb_to_r8a66597_addr(r8a66597, urb);
1753         td->maxpacket = usb_maxpacket(urb->dev, urb->pipe,
1754                                       !usb_pipein(urb->pipe));
1755         if (usb_pipecontrol(urb->pipe))
1756                 td->type = USB_PID_SETUP;
1757         else if (usb_pipein(urb->pipe))
1758                 td->type = USB_PID_IN;
1759         else
1760                 td->type = USB_PID_OUT;
1761         INIT_LIST_HEAD(&td->queue);
1762
1763         return td;
1764 }
1765
1766 static int r8a66597_urb_enqueue(struct usb_hcd *hcd,
1767                                 struct urb *urb,
1768                                 gfp_t mem_flags)
1769 {
1770         struct usb_host_endpoint *hep = urb->ep;
1771         struct r8a66597 *r8a66597 = hcd_to_r8a66597(hcd);
1772         struct r8a66597_td *td = NULL;
1773         int ret, request = 0;
1774         unsigned long flags;
1775
1776         spin_lock_irqsave(&r8a66597->lock, flags);
1777         if (!get_urb_to_r8a66597_dev(r8a66597, urb)) {
1778                 ret = -ENODEV;
1779                 goto error_not_linked;
1780         }
1781
1782         ret = usb_hcd_link_urb_to_ep(hcd, urb);
1783         if (ret)
1784                 goto error_not_linked;
1785
1786         if (!hep->hcpriv) {
1787                 hep->hcpriv = kzalloc(sizeof(struct r8a66597_pipe),
1788                                 GFP_ATOMIC);
1789                 if (!hep->hcpriv) {
1790                         ret = -ENOMEM;
1791                         goto error;
1792                 }
1793                 set_pipe_reg_addr(hep->hcpriv, R8A66597_PIPE_NO_DMA);
1794                 if (usb_pipeendpoint(urb->pipe))
1795                         init_pipe_info(r8a66597, urb, hep, &hep->desc);
1796         }
1797
1798         if (unlikely(check_pipe_config(r8a66597, urb)))
1799                 init_pipe_config(r8a66597, urb);
1800
1801         set_address_zero(r8a66597, urb);
1802         td = r8a66597_make_td(r8a66597, urb, hep);
1803         if (td == NULL) {
1804                 ret = -ENOMEM;
1805                 goto error;
1806         }
1807         if (list_empty(&r8a66597->pipe_queue[td->pipenum]))
1808                 request = 1;
1809         list_add_tail(&td->queue, &r8a66597->pipe_queue[td->pipenum]);
1810         urb->hcpriv = td;
1811
1812         if (request) {
1813                 if (td->pipe->info.timer_interval) {
1814                         r8a66597->interval_map |= 1 << td->pipenum;
1815                         mod_timer(&r8a66597->interval_timer[td->pipenum],
1816                                   jiffies + msecs_to_jiffies(
1817                                         td->pipe->info.timer_interval));
1818                 } else {
1819                         ret = start_transfer(r8a66597, td);
1820                         if (ret < 0) {
1821                                 list_del(&td->queue);
1822                                 kfree(td);
1823                         }
1824                 }
1825         } else
1826                 set_td_timer(r8a66597, td);
1827
1828 error:
1829         if (ret)
1830                 usb_hcd_unlink_urb_from_ep(hcd, urb);
1831 error_not_linked:
1832         spin_unlock_irqrestore(&r8a66597->lock, flags);
1833         return ret;
1834 }
1835
1836 static int r8a66597_urb_dequeue(struct usb_hcd *hcd, struct urb *urb,
1837                 int status)
1838 {
1839         struct r8a66597 *r8a66597 = hcd_to_r8a66597(hcd);
1840         struct r8a66597_td *td;
1841         unsigned long flags;
1842         int rc;
1843
1844         spin_lock_irqsave(&r8a66597->lock, flags);
1845         rc = usb_hcd_check_unlink_urb(hcd, urb, status);
1846         if (rc)
1847                 goto done;
1848
1849         if (urb->hcpriv) {
1850                 td = urb->hcpriv;
1851                 pipe_stop(r8a66597, td->pipe);
1852                 pipe_irq_disable(r8a66597, td->pipenum);
1853                 disable_irq_empty(r8a66597, td->pipenum);
1854                 finish_request(r8a66597, td, td->pipenum, urb, status);
1855         }
1856  done:
1857         spin_unlock_irqrestore(&r8a66597->lock, flags);
1858         return rc;
1859 }
1860
1861 static void r8a66597_endpoint_disable(struct usb_hcd *hcd,
1862                                       struct usb_host_endpoint *hep)
1863 {
1864         struct r8a66597 *r8a66597 = hcd_to_r8a66597(hcd);
1865         struct r8a66597_pipe *pipe = (struct r8a66597_pipe *)hep->hcpriv;
1866         struct r8a66597_td *td;
1867         struct urb *urb = NULL;
1868         u16 pipenum;
1869         unsigned long flags;
1870
1871         if (pipe == NULL)
1872                 return;
1873         pipenum = pipe->info.pipenum;
1874
1875         if (pipenum == 0) {
1876                 kfree(hep->hcpriv);
1877                 hep->hcpriv = NULL;
1878                 return;
1879         }
1880
1881         spin_lock_irqsave(&r8a66597->lock, flags);
1882         pipe_stop(r8a66597, pipe);
1883         pipe_irq_disable(r8a66597, pipenum);
1884         disable_irq_empty(r8a66597, pipenum);
1885         td = r8a66597_get_td(r8a66597, pipenum);
1886         if (td)
1887                 urb = td->urb;
1888         finish_request(r8a66597, td, pipenum, urb, -ESHUTDOWN);
1889         kfree(hep->hcpriv);
1890         hep->hcpriv = NULL;
1891         spin_unlock_irqrestore(&r8a66597->lock, flags);
1892 }
1893
1894 static int r8a66597_get_frame(struct usb_hcd *hcd)
1895 {
1896         struct r8a66597 *r8a66597 = hcd_to_r8a66597(hcd);
1897         return r8a66597_read(r8a66597, FRMNUM) & 0x03FF;
1898 }
1899
1900 static void collect_usb_address_map(struct usb_device *udev, unsigned long *map)
1901 {
1902         int chix;
1903
1904         if (udev->state == USB_STATE_CONFIGURED &&
1905             udev->parent && udev->parent->devnum > 1 &&
1906             udev->parent->descriptor.bDeviceClass == USB_CLASS_HUB)
1907                 map[udev->devnum/32] |= (1 << (udev->devnum % 32));
1908
1909         for (chix = 0; chix < udev->maxchild; chix++) {
1910                 struct usb_device *childdev = udev->children[chix];
1911
1912                 if (childdev)
1913                         collect_usb_address_map(childdev, map);
1914         }
1915 }
1916
1917 /* this function must be called with interrupt disabled */
1918 static struct r8a66597_device *get_r8a66597_device(struct r8a66597 *r8a66597,
1919                                                    int addr)
1920 {
1921         struct r8a66597_device *dev;
1922         struct list_head *list = &r8a66597->child_device;
1923
1924         list_for_each_entry(dev, list, device_list) {
1925                 if (!dev)
1926                         continue;
1927                 if (dev->usb_address != addr)
1928                         continue;
1929
1930                 return dev;
1931         }
1932
1933         err("get_r8a66597_device fail.(%d)\n", addr);
1934         return NULL;
1935 }
1936
1937 static void update_usb_address_map(struct r8a66597 *r8a66597,
1938                                    struct usb_device *root_hub,
1939                                    unsigned long *map)
1940 {
1941         int i, j, addr;
1942         unsigned long diff;
1943         unsigned long flags;
1944
1945         for (i = 0; i < 4; i++) {
1946                 diff = r8a66597->child_connect_map[i] ^ map[i];
1947                 if (!diff)
1948                         continue;
1949
1950                 for (j = 0; j < 32; j++) {
1951                         if (!(diff & (1 << j)))
1952                                 continue;
1953
1954                         addr = i * 32 + j;
1955                         if (map[i] & (1 << j))
1956                                 set_child_connect_map(r8a66597, addr);
1957                         else {
1958                                 struct r8a66597_device *dev;
1959
1960                                 spin_lock_irqsave(&r8a66597->lock, flags);
1961                                 dev = get_r8a66597_device(r8a66597, addr);
1962                                 disable_r8a66597_pipe_all(r8a66597, dev);
1963                                 free_usb_address(r8a66597, dev);
1964                                 put_child_connect_map(r8a66597, addr);
1965                                 spin_unlock_irqrestore(&r8a66597->lock, flags);
1966                         }
1967                 }
1968         }
1969 }
1970
1971 static void r8a66597_check_detect_child(struct r8a66597 *r8a66597,
1972                                         struct usb_hcd *hcd)
1973 {
1974         struct usb_bus *bus;
1975         unsigned long now_map[4];
1976
1977         memset(now_map, 0, sizeof(now_map));
1978
1979         list_for_each_entry(bus, &usb_bus_list, bus_list) {
1980                 if (!bus->root_hub)
1981                         continue;
1982
1983                 if (bus->busnum != hcd->self.busnum)
1984                         continue;
1985
1986                 collect_usb_address_map(bus->root_hub, now_map);
1987                 update_usb_address_map(r8a66597, bus->root_hub, now_map);
1988         }
1989 }
1990
1991 static int r8a66597_hub_status_data(struct usb_hcd *hcd, char *buf)
1992 {
1993         struct r8a66597 *r8a66597 = hcd_to_r8a66597(hcd);
1994         unsigned long flags;
1995         int i;
1996
1997         r8a66597_check_detect_child(r8a66597, hcd);
1998
1999         spin_lock_irqsave(&r8a66597->lock, flags);
2000
2001         *buf = 0;       /* initialize (no change) */
2002
2003         for (i = 0; i < R8A66597_MAX_ROOT_HUB; i++) {
2004                 if (r8a66597->root_hub[i].port & 0xffff0000)
2005                         *buf |= 1 << (i + 1);
2006         }
2007
2008         spin_unlock_irqrestore(&r8a66597->lock, flags);
2009
2010         return (*buf != 0);
2011 }
2012
2013 static void r8a66597_hub_descriptor(struct r8a66597 *r8a66597,
2014                                     struct usb_hub_descriptor *desc)
2015 {
2016         desc->bDescriptorType = 0x29;
2017         desc->bHubContrCurrent = 0;
2018         desc->bNbrPorts = R8A66597_MAX_ROOT_HUB;
2019         desc->bDescLength = 9;
2020         desc->bPwrOn2PwrGood = 0;
2021         desc->wHubCharacteristics = cpu_to_le16(0x0011);
2022         desc->bitmap[0] = ((1 << R8A66597_MAX_ROOT_HUB) - 1) << 1;
2023         desc->bitmap[1] = ~0;
2024 }
2025
2026 static int r8a66597_hub_control(struct usb_hcd *hcd, u16 typeReq, u16 wValue,
2027                                 u16 wIndex, char *buf, u16 wLength)
2028 {
2029         struct r8a66597 *r8a66597 = hcd_to_r8a66597(hcd);
2030         int ret;
2031         int port = (wIndex & 0x00FF) - 1;
2032         struct r8a66597_root_hub *rh = &r8a66597->root_hub[port];
2033         unsigned long flags;
2034
2035         ret = 0;
2036
2037         spin_lock_irqsave(&r8a66597->lock, flags);
2038         switch (typeReq) {
2039         case ClearHubFeature:
2040         case SetHubFeature:
2041                 switch (wValue) {
2042                 case C_HUB_OVER_CURRENT:
2043                 case C_HUB_LOCAL_POWER:
2044                         break;
2045                 default:
2046                         goto error;
2047                 }
2048                 break;
2049         case ClearPortFeature:
2050                 if (wIndex > R8A66597_MAX_ROOT_HUB)
2051                         goto error;
2052                 if (wLength != 0)
2053                         goto error;
2054
2055                 switch (wValue) {
2056                 case USB_PORT_FEAT_ENABLE:
2057                         rh->port &= (1 << USB_PORT_FEAT_POWER);
2058                         break;
2059                 case USB_PORT_FEAT_SUSPEND:
2060                         break;
2061                 case USB_PORT_FEAT_POWER:
2062                         r8a66597_port_power(r8a66597, port, 0);
2063                         break;
2064                 case USB_PORT_FEAT_C_ENABLE:
2065                 case USB_PORT_FEAT_C_SUSPEND:
2066                 case USB_PORT_FEAT_C_CONNECTION:
2067                 case USB_PORT_FEAT_C_OVER_CURRENT:
2068                 case USB_PORT_FEAT_C_RESET:
2069                         break;
2070                 default:
2071                         goto error;
2072                 }
2073                 rh->port &= ~(1 << wValue);
2074                 break;
2075         case GetHubDescriptor:
2076                 r8a66597_hub_descriptor(r8a66597,
2077                                         (struct usb_hub_descriptor *)buf);
2078                 break;
2079         case GetHubStatus:
2080                 *buf = 0x00;
2081                 break;
2082         case GetPortStatus:
2083                 if (wIndex > R8A66597_MAX_ROOT_HUB)
2084                         goto error;
2085                 *(u32 *)buf = cpu_to_le32(rh->port);
2086                 break;
2087         case SetPortFeature:
2088                 if (wIndex > R8A66597_MAX_ROOT_HUB)
2089                         goto error;
2090                 if (wLength != 0)
2091                         goto error;
2092
2093                 switch (wValue) {
2094                 case USB_PORT_FEAT_SUSPEND:
2095                         break;
2096                 case USB_PORT_FEAT_POWER:
2097                         r8a66597_port_power(r8a66597, port, 1);
2098                         rh->port |= (1 << USB_PORT_FEAT_POWER);
2099                         break;
2100                 case USB_PORT_FEAT_RESET: {
2101                         struct r8a66597_device *dev = rh->dev;
2102
2103                         rh->port |= (1 << USB_PORT_FEAT_RESET);
2104
2105                         disable_r8a66597_pipe_all(r8a66597, dev);
2106                         free_usb_address(r8a66597, dev);
2107
2108                         r8a66597_mdfy(r8a66597, USBRST, USBRST | UACT,
2109                                       get_dvstctr_reg(port));
2110                         mod_timer(&r8a66597->rh_timer,
2111                                   jiffies + msecs_to_jiffies(50));
2112                         }
2113                         break;
2114                 default:
2115                         goto error;
2116                 }
2117                 rh->port |= 1 << wValue;
2118                 break;
2119         default:
2120 error:
2121                 ret = -EPIPE;
2122                 break;
2123         }
2124
2125         spin_unlock_irqrestore(&r8a66597->lock, flags);
2126         return ret;
2127 }
2128
2129 static struct hc_driver r8a66597_hc_driver = {
2130         .description =          hcd_name,
2131         .hcd_priv_size =        sizeof(struct r8a66597),
2132         .irq =                  r8a66597_irq,
2133
2134         /*
2135          * generic hardware linkage
2136          */
2137         .flags =                HCD_USB2,
2138
2139         .start =                r8a66597_start,
2140         .stop =                 r8a66597_stop,
2141
2142         /*
2143          * managing i/o requests and associated device resources
2144          */
2145         .urb_enqueue =          r8a66597_urb_enqueue,
2146         .urb_dequeue =          r8a66597_urb_dequeue,
2147         .endpoint_disable =     r8a66597_endpoint_disable,
2148
2149         /*
2150          * periodic schedule support
2151          */
2152         .get_frame_number =     r8a66597_get_frame,
2153
2154         /*
2155          * root hub support
2156          */
2157         .hub_status_data =      r8a66597_hub_status_data,
2158         .hub_control =          r8a66597_hub_control,
2159 };
2160
2161 #if defined(CONFIG_PM)
2162 static int r8a66597_suspend(struct platform_device *pdev, pm_message_t state)
2163 {
2164         return 0;
2165 }
2166
2167 static int r8a66597_resume(struct platform_device *pdev)
2168 {
2169         return 0;
2170 }
2171 #else   /* if defined(CONFIG_PM) */
2172 #define r8a66597_suspend        NULL
2173 #define r8a66597_resume         NULL
2174 #endif
2175
2176 static int __init_or_module r8a66597_remove(struct platform_device *pdev)
2177 {
2178         struct r8a66597         *r8a66597 = dev_get_drvdata(&pdev->dev);
2179         struct usb_hcd          *hcd = r8a66597_to_hcd(r8a66597);
2180
2181         del_timer_sync(&r8a66597->rh_timer);
2182         usb_remove_hcd(hcd);
2183         iounmap((void *)r8a66597->reg);
2184         usb_put_hcd(hcd);
2185         return 0;
2186 }
2187
2188 #define resource_len(r) (((r)->end - (r)->start) + 1)
2189 static int __init r8a66597_probe(struct platform_device *pdev)
2190 {
2191         struct resource *res = NULL;
2192         int irq = -1;
2193         void __iomem *reg = NULL;
2194         struct usb_hcd *hcd = NULL;
2195         struct r8a66597 *r8a66597;
2196         int ret = 0;
2197         int i;
2198
2199         if (pdev->dev.dma_mask) {
2200                 ret = -EINVAL;
2201                 err("dma not support");
2202                 goto clean_up;
2203         }
2204
2205         res = platform_get_resource_byname(pdev, IORESOURCE_MEM,
2206                                            (char *)hcd_name);
2207         if (!res) {
2208                 ret = -ENODEV;
2209                 err("platform_get_resource_byname error.");
2210                 goto clean_up;
2211         }
2212
2213         irq = platform_get_irq(pdev, 0);
2214         if (irq < 0) {
2215                 ret = -ENODEV;
2216                 err("platform_get_irq error.");
2217                 goto clean_up;
2218         }
2219
2220         reg = ioremap(res->start, resource_len(res));
2221         if (reg == NULL) {
2222                 ret = -ENOMEM;
2223                 err("ioremap error.");
2224                 goto clean_up;
2225         }
2226
2227         /* initialize hcd */
2228         hcd = usb_create_hcd(&r8a66597_hc_driver, &pdev->dev, (char *)hcd_name);
2229         if (!hcd) {
2230                 ret = -ENOMEM;
2231                 err("Failed to create hcd");
2232                 goto clean_up;
2233         }
2234         r8a66597 = hcd_to_r8a66597(hcd);
2235         memset(r8a66597, 0, sizeof(struct r8a66597));
2236         dev_set_drvdata(&pdev->dev, r8a66597);
2237
2238         spin_lock_init(&r8a66597->lock);
2239         init_timer(&r8a66597->rh_timer);
2240         r8a66597->rh_timer.function = r8a66597_timer;
2241         r8a66597->rh_timer.data = (unsigned long)r8a66597;
2242         r8a66597->reg = (unsigned long)reg;
2243
2244         for (i = 0; i < R8A66597_MAX_NUM_PIPE; i++) {
2245                 INIT_LIST_HEAD(&r8a66597->pipe_queue[i]);
2246                 init_timer(&r8a66597->td_timer[i]);
2247                 r8a66597->td_timer[i].function = r8a66597_td_timer;
2248                 r8a66597->td_timer[i].data = (unsigned long)r8a66597;
2249                 setup_timer(&r8a66597->interval_timer[i],
2250                                 r8a66597_interval_timer,
2251                                 (unsigned long)r8a66597);
2252         }
2253         INIT_LIST_HEAD(&r8a66597->child_device);
2254
2255         hcd->rsrc_start = res->start;
2256         ret = usb_add_hcd(hcd, irq, IRQF_DISABLED);
2257         if (ret != 0) {
2258                 err("Failed to add hcd");
2259                 goto clean_up;
2260         }
2261
2262         return 0;
2263
2264 clean_up:
2265         if (reg)
2266                 iounmap(reg);
2267
2268         return ret;
2269 }
2270
2271 static struct platform_driver r8a66597_driver = {
2272         .probe =        r8a66597_probe,
2273         .remove =       r8a66597_remove,
2274         .suspend =      r8a66597_suspend,
2275         .resume =       r8a66597_resume,
2276         .driver         = {
2277                 .name = (char *) hcd_name,
2278                 .owner  = THIS_MODULE,
2279         },
2280 };
2281
2282 static int __init r8a66597_init(void)
2283 {
2284         if (usb_disabled())
2285                 return -ENODEV;
2286
2287         info("driver %s, %s", hcd_name, DRIVER_VERSION);
2288         return platform_driver_register(&r8a66597_driver);
2289 }
2290 module_init(r8a66597_init);
2291
2292 static void __exit r8a66597_cleanup(void)
2293 {
2294         platform_driver_unregister(&r8a66597_driver);
2295 }
2296 module_exit(r8a66597_cleanup);
2297