drivers/media/usb/dvb-usb-v2/af9035.c

   1 /*
   2  * Afatech AF9035 DVB USB driver
   3  *
   4  * Copyright (C) 2009 Antti Palosaari <crope@iki.fi>
   5  * Copyright (C) 2012 Antti Palosaari <crope@iki.fi>
   6  *
   7  *    This program is free software; you can redistribute it and/or modify
   8  *    it under the terms of the GNU General Public License as published by
   9  *    the Free Software Foundation; either version 2 of the License, or
  10  *    (at your option) any later version.
  11  *
  12  *    This program is distributed in the hope that it will be useful,
  13  *    but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  *    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15  *    GNU General Public License for more details.
  16  *
  17  *    You should have received a copy of the GNU General Public License along
  18  *    with this program; if not, write to the Free Software Foundation, Inc.,
  19  *    51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
  20  */
  21
  22 #include "af9035.h"
  23
  24 /* Max transfer size done by I2C transfer functions */
  25 #define MAX_XFER_SIZE  64
  26
  27 DVB_DEFINE_MOD_OPT_ADAPTER_NR(adapter_nr);
  28
  29 static u16 af9035_checksum(const u8 *buf, size_t len)
  30 {
  31         size_t i;
  32         u16 checksum = 0;
  33
  34         for (i = 1; i < len; i++) {
  35                 if (i % 2)
  36                         checksum += buf[i] << 8;
  37                 else
  38                         checksum += buf[i];
  39         }
  40         checksum = ~checksum;
  41
  42         return checksum;
  43 }
  44
  45 static int af9035_ctrl_msg(struct dvb_usb_device *d, struct usb_req *req)
  46 {
  47 #define REQ_HDR_LEN 4 /* send header size */
  48 #define ACK_HDR_LEN 3 /* rece header size */
  49 #define CHECKSUM_LEN 2
  50 #define USB_TIMEOUT 2000
  51         struct state *state = d_to_priv(d);
  52         int ret, wlen, rlen;
  53         u16 checksum, tmp_checksum;
  54
  55         mutex_lock(&d->usb_mutex);
  56
  57         /* buffer overflow check */
  58         if (req->wlen > (BUF_LEN - REQ_HDR_LEN - CHECKSUM_LEN) ||
  59                         req->rlen > (BUF_LEN - ACK_HDR_LEN - CHECKSUM_LEN)) {
  60                 dev_err(&d->udev->dev, "%s: too much data wlen=%d rlen=%d\n",
  61                                 KBUILD_MODNAME, req->wlen, req->rlen);
  62                 ret = -EINVAL;
  63                 goto exit;
  64         }
  65
  66         state->buf[0] = REQ_HDR_LEN + req->wlen + CHECKSUM_LEN - 1;
  67         state->buf[1] = req->mbox;
  68         state->buf[2] = req->cmd;
  69         state->buf[3] = state->seq++;
  70         memcpy(&state->buf[REQ_HDR_LEN], req->wbuf, req->wlen);
  71
  72         wlen = REQ_HDR_LEN + req->wlen + CHECKSUM_LEN;
  73         rlen = ACK_HDR_LEN + req->rlen + CHECKSUM_LEN;
  74
  75         /* calc and add checksum */
  76         checksum = af9035_checksum(state->buf, state->buf[0] - 1);
  77         state->buf[state->buf[0] - 1] = (checksum >> 8);
  78         state->buf[state->buf[0] - 0] = (checksum & 0xff);
  79
  80         /* no ack for these packets */
  81         if (req->cmd == CMD_FW_DL)
  82                 rlen = 0;
  83
  84         ret = dvb_usbv2_generic_rw_locked(d,
  85                         state->buf, wlen, state->buf, rlen);
  86         if (ret)
  87                 goto exit;
  88
  89         /* no ack for those packets */
  90         if (req->cmd == CMD_FW_DL)
  91                 goto exit;
  92
  93         /* verify checksum */
  94         checksum = af9035_checksum(state->buf, rlen - 2);
  95         tmp_checksum = (state->buf[rlen - 2] << 8) | state->buf[rlen - 1];
  96         if (tmp_checksum != checksum) {
  97                 dev_err(&d->udev->dev,
  98                                 "%s: command=%02x checksum mismatch (%04x != %04x)\n",
  99                                 KBUILD_MODNAME, req->cmd, tmp_checksum,
 100                                 checksum);
 101                 ret = -EIO;
 102                 goto exit;
 103         }
 104
 105         /* check status */
 106         if (state->buf[2]) {
 107                 /* fw returns status 1 when IR code was not received */
 108                 if (req->cmd == CMD_IR_GET || state->buf[2] == 1) {
 109                         ret = 1;
 110                         goto exit;
 111                 }
 112
 113                 dev_dbg(&d->udev->dev, "%s: command=%02x failed fw error=%d\n",
 114                                 __func__, req->cmd, state->buf[2]);
 115                 ret = -EIO;
 116                 goto exit;
 117         }
 118
 119         /* read request, copy returned data to return buf */
 120         if (req->rlen)
 121                 memcpy(req->rbuf, &state->buf[ACK_HDR_LEN], req->rlen);
 122 exit:
 123         mutex_unlock(&d->usb_mutex);
 124         if (ret < 0)
 125                 dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 126         return ret;
 127 }
 128
 129 /* write multiple registers */
 130 static int af9035_wr_regs(struct dvb_usb_device *d, u32 reg, u8 *val, int len)
 131 {
 132         u8 wbuf[MAX_XFER_SIZE];
 133         u8 mbox = (reg >> 16) & 0xff;
 134         struct usb_req req = { CMD_MEM_WR, mbox, 6 + len, wbuf, 0, NULL };
 135
 136         if (6 + len > sizeof(wbuf)) {
 137                 dev_warn(&d->udev->dev, "%s: i2c wr: len=%d is too big!\n",
 138                          KBUILD_MODNAME, len);
 139                 return -EOPNOTSUPP;
 140         }
 141
 142         wbuf[0] = len;
 143         wbuf[1] = 2;
 144         wbuf[2] = 0;
 145         wbuf[3] = 0;
 146         wbuf[4] = (reg >> 8) & 0xff;
 147         wbuf[5] = (reg >> 0) & 0xff;
 148         memcpy(&wbuf[6], val, len);
 149
 150         return af9035_ctrl_msg(d, &req);
 151 }
 152
 153 /* read multiple registers */
 154 static int af9035_rd_regs(struct dvb_usb_device *d, u32 reg, u8 *val, int len)
 155 {
 156         u8 wbuf[] = { len, 2, 0, 0, (reg >> 8) & 0xff, reg & 0xff };
 157         u8 mbox = (reg >> 16) & 0xff;
 158         struct usb_req req = { CMD_MEM_RD, mbox, sizeof(wbuf), wbuf, len, val };
 159
 160         return af9035_ctrl_msg(d, &req);
 161 }
 162
 163 /* write single register */
 164 static int af9035_wr_reg(struct dvb_usb_device *d, u32 reg, u8 val)
 165 {
 166         return af9035_wr_regs(d, reg, &val, 1);
 167 }
 168
 169 /* read single register */
 170 static int af9035_rd_reg(struct dvb_usb_device *d, u32 reg, u8 *val)
 171 {
 172         return af9035_rd_regs(d, reg, val, 1);
 173 }
 174
 175 /* write single register with mask */
 176 static int af9035_wr_reg_mask(struct dvb_usb_device *d, u32 reg, u8 val,
 177                 u8 mask)
 178 {
 179         int ret;
 180         u8 tmp;
 181
 182         /* no need for read if whole reg is written */
 183         if (mask != 0xff) {
 184                 ret = af9035_rd_regs(d, reg, &tmp, 1);
 185                 if (ret)
 186                         return ret;
 187
 188                 val &= mask;
 189                 tmp &= ~mask;
 190                 val |= tmp;
 191         }
 192
 193         return af9035_wr_regs(d, reg, &val, 1);
 194 }
 195
 196 static int af9035_add_i2c_dev(struct dvb_usb_device *d, char *type, u8 addr,
 197                 void *platform_data)
 198 {
 199         int ret, num;
 200         struct state *state = d_to_priv(d);
 201         struct i2c_client *client;
 202         struct i2c_adapter *adapter = &d->i2c_adap;
 203         struct i2c_board_info board_info = {
 204                 .addr = addr,
 205                 .platform_data = platform_data,
 206         };
 207
 208         strlcpy(board_info.type, type, I2C_NAME_SIZE);
 209
 210         /* find first free client */
 211         for (num = 0; num < AF9035_I2C_CLIENT_MAX; num++) {
 212                 if (state->i2c_client[num] == NULL)
 213                         break;
 214         }
 215
 216         dev_dbg(&d->udev->dev, "%s: num=%d\n", __func__, num);
 217
 218         if (num == AF9035_I2C_CLIENT_MAX) {
 219                 dev_err(&d->udev->dev, "%s: I2C client out of index\n",
 220                                 KBUILD_MODNAME);
 221                 ret = -ENODEV;
 222                 goto err;
 223         }
 224
 225         request_module(board_info.type);
 226
 227         /* register I2C device */
 228         client = i2c_new_device(adapter, &board_info);
 229         if (client == NULL || client->dev.driver == NULL) {
 230                 ret = -ENODEV;
 231                 goto err;
 232         }
 233
 234         /* increase I2C driver usage count */
 235         if (!try_module_get(client->dev.driver->owner)) {
 236                 i2c_unregister_device(client);
 237                 ret = -ENODEV;
 238                 goto err;
 239         }
 240
 241         state->i2c_client[num] = client;
 242         return 0;
 243 err:
 244         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 245         return ret;
 246 }
 247
 248 static void af9035_del_i2c_dev(struct dvb_usb_device *d)
 249 {
 250         int num;
 251         struct state *state = d_to_priv(d);
 252         struct i2c_client *client;
 253
 254         /* find last used client */
 255         num = AF9035_I2C_CLIENT_MAX;
 256         while (num--) {
 257                 if (state->i2c_client[num] != NULL)
 258                         break;
 259         }
 260
 261         dev_dbg(&d->udev->dev, "%s: num=%d\n", __func__, num);
 262
 263         if (num == -1) {
 264                 dev_err(&d->udev->dev, "%s: I2C client out of index\n",
 265                                 KBUILD_MODNAME);
 266                 goto err;
 267         }
 268
 269         client = state->i2c_client[num];
 270
 271         /* decrease I2C driver usage count */
 272         module_put(client->dev.driver->owner);
 273
 274         /* unregister I2C device */
 275         i2c_unregister_device(client);
 276
 277         state->i2c_client[num] = NULL;
 278         return;
 279 err:
 280         dev_dbg(&d->udev->dev, "%s: failed\n", __func__);
 281 }
 282
 283 static int af9035_i2c_master_xfer(struct i2c_adapter *adap,
 284                 struct i2c_msg msg[], int num)
 285 {
 286         struct dvb_usb_device *d = i2c_get_adapdata(adap);
 287         struct state *state = d_to_priv(d);
 288         int ret;
 289
 290         if (mutex_lock_interruptible(&d->i2c_mutex) < 0)
 291                 return -EAGAIN;
 292
 293         /*
 294          * I2C sub header is 5 bytes long. Meaning of those bytes are:
 295          * 0: data len
 296          * 1: I2C addr << 1
 297          * 2: reg addr len
 298          *    byte 3 and 4 can be used as reg addr
 299          * 3: reg addr MSB
 300          *    used when reg addr len is set to 2
 301          * 4: reg addr LSB
 302          *    used when reg addr len is set to 1 or 2
 303          *
 304          * For the simplify we do not use register addr at all.
 305          * NOTE: As a firmware knows tuner type there is very small possibility
 306          * there could be some tuner I2C hacks done by firmware and this may
 307          * lead problems if firmware expects those bytes are used.
 308          *
 309          * TODO: Here is few hacks. AF9035 chip integrates AF9033 demodulator.
 310          * IT9135 chip integrates AF9033 demodulator and RF tuner. For dual
 311          * tuner devices, there is also external AF9033 demodulator connected
 312          * via external I2C bus. All AF9033 demod I2C traffic, both single and
 313          * dual tuner configuration, is covered by firmware - actual USB IO
 314          * looks just like a memory access.
 315          * In case of IT913x chip, there is own tuner driver. It is implemented
 316          * currently as a I2C driver, even tuner IP block is likely build
 317          * directly into the demodulator memory space and there is no own I2C
 318          * bus. I2C subsystem does not allow register multiple devices to same
 319          * bus, having same slave address. Due to that we reuse demod address,
 320          * shifted by one bit, on that case.
 321          */
 322 #define AF9035_IS_I2C_XFER_WRITE_READ(_msg, _num) \
 323         (_num == 2 && !(_msg[0].flags & I2C_M_RD) && (_msg[1].flags & I2C_M_RD))
 324 #define AF9035_IS_I2C_XFER_WRITE(_msg, _num) \
 325         (_num == 1 && !(_msg[0].flags & I2C_M_RD))
 326 #define AF9035_IS_I2C_XFER_READ(_msg, _num) \
 327         (_num == 1 && (_msg[0].flags & I2C_M_RD))
 328
 329         if (AF9035_IS_I2C_XFER_WRITE_READ(msg, num)) {
 330                 if (msg[0].len > 40 || msg[1].len > 40) {
 331                         /* TODO: correct limits > 40 */
 332                         ret = -EOPNOTSUPP;
 333                 } else if ((msg[0].addr == state->af9033_i2c_addr[0]) ||
 334                            (msg[0].addr == state->af9033_i2c_addr[1]) ||
 335                            (state->chip_type == 0x9135)) {
 336                         /* demod access via firmware interface */
 337                         u32 reg = msg[0].buf[0] << 16 | msg[0].buf[1] << 8 |
 338                                         msg[0].buf[2];
 339
 340                         if (msg[0].addr == state->af9033_i2c_addr[1] ||
 341                             msg[0].addr == (state->af9033_i2c_addr[1] >> 1))
 342                                 reg |= 0x100000;
 343
 344                         ret = af9035_rd_regs(d, reg, &msg[1].buf[0],
 345                                         msg[1].len);
 346                 } else {
 347                         /* I2C write + read */
 348                         u8 buf[MAX_XFER_SIZE];
 349                         struct usb_req req = { CMD_I2C_RD, 0, 5 + msg[0].len,
 350                                         buf, msg[1].len, msg[1].buf };
 351
 352                         req.mbox |= ((msg[0].addr & 0x80)  >>  3);
 353                         buf[0] = msg[1].len;
 354                         buf[1] = msg[0].addr << 1;
 355                         buf[2] = 0x00; /* reg addr len */
 356                         buf[3] = 0x00; /* reg addr MSB */
 357                         buf[4] = 0x00; /* reg addr LSB */
 358                         memcpy(&buf[5], msg[0].buf, msg[0].len);
 359                         ret = af9035_ctrl_msg(d, &req);
 360                 }
 361         } else if (AF9035_IS_I2C_XFER_WRITE(msg, num)) {
 362                 if (msg[0].len > 40) {
 363                         /* TODO: correct limits > 40 */
 364                         ret = -EOPNOTSUPP;
 365                 } else if ((msg[0].addr == state->af9033_i2c_addr[0]) ||
 366                            (msg[0].addr == state->af9033_i2c_addr[1]) ||
 367                            (state->chip_type == 0x9135)) {
 368                         /* demod access via firmware interface */
 369                         u32 reg = msg[0].buf[0] << 16 | msg[0].buf[1] << 8 |
 370                                         msg[0].buf[2];
 371
 372                         if (msg[0].addr == state->af9033_i2c_addr[1] ||
 373                             msg[0].addr == (state->af9033_i2c_addr[1] >> 1))
 374                                 reg |= 0x100000;
 375
 376                         ret = af9035_wr_regs(d, reg, &msg[0].buf[3],
 377                                         msg[0].len - 3);
 378                 } else {
 379                         /* I2C write */
 380                         u8 buf[MAX_XFER_SIZE];
 381                         struct usb_req req = { CMD_I2C_WR, 0, 5 + msg[0].len,
 382                                         buf, 0, NULL };
 383
 384                         req.mbox |= ((msg[0].addr & 0x80)  >>  3);
 385                         buf[0] = msg[0].len;
 386                         buf[1] = msg[0].addr << 1;
 387                         buf[2] = 0x00; /* reg addr len */
 388                         buf[3] = 0x00; /* reg addr MSB */
 389                         buf[4] = 0x00; /* reg addr LSB */
 390                         memcpy(&buf[5], msg[0].buf, msg[0].len);
 391                         ret = af9035_ctrl_msg(d, &req);
 392                 }
 393         } else if (AF9035_IS_I2C_XFER_READ(msg, num)) {
 394                 if (msg[0].len > 40) {
 395                         /* TODO: correct limits > 40 */
 396                         ret = -EOPNOTSUPP;
 397                 } else {
 398                         /* I2C read */
 399                         u8 buf[5];
 400                         struct usb_req req = { CMD_I2C_RD, 0, sizeof(buf),
 401                                         buf, msg[0].len, msg[0].buf };
 402                         req.mbox |= ((msg[0].addr & 0x80)  >>  3);
 403                         buf[0] = msg[0].len;
 404                         buf[1] = msg[0].addr << 1;
 405                         buf[2] = 0x00; /* reg addr len */
 406                         buf[3] = 0x00; /* reg addr MSB */
 407                         buf[4] = 0x00; /* reg addr LSB */
 408                         ret = af9035_ctrl_msg(d, &req);
 409                 }
 410         } else {
 411                 /*
 412                  * We support only three kind of I2C transactions:
 413                  * 1) 1 x write + 1 x read (repeated start)
 414                  * 2) 1 x write
 415                  * 3) 1 x read
 416                  */
 417                 ret = -EOPNOTSUPP;
 418         }
 419
 420         mutex_unlock(&d->i2c_mutex);
 421
 422         if (ret < 0)
 423                 return ret;
 424         else
 425                 return num;
 426 }
 427
 428 static u32 af9035_i2c_functionality(struct i2c_adapter *adapter)
 429 {
 430         return I2C_FUNC_I2C;
 431 }
 432
 433 static struct i2c_algorithm af9035_i2c_algo = {
 434         .master_xfer = af9035_i2c_master_xfer,
 435         .functionality = af9035_i2c_functionality,
 436 };
 437
 438 static int af9035_identify_state(struct dvb_usb_device *d, const char **name)
 439 {
 440         struct state *state = d_to_priv(d);
 441         int ret;
 442         u8 wbuf[1] = { 1 };
 443         u8 rbuf[4];
 444         struct usb_req req = { CMD_FW_QUERYINFO, 0, sizeof(wbuf), wbuf,
 445                         sizeof(rbuf), rbuf };
 446
 447         ret = af9035_rd_regs(d, 0x1222, rbuf, 3);
 448         if (ret < 0)
 449                 goto err;
 450
 451         state->chip_version = rbuf[0];
 452         state->chip_type = rbuf[2] << 8 | rbuf[1] << 0;
 453
 454         ret = af9035_rd_reg(d, 0x384f, &state->prechip_version);
 455         if (ret < 0)
 456                 goto err;
 457
 458         dev_info(&d->udev->dev,
 459                         "%s: prechip_version=%02x chip_version=%02x chip_type=%04x\n",
 460                         KBUILD_MODNAME, state->prechip_version,
 461                         state->chip_version, state->chip_type);
 462
 463         if (state->chip_type == 0x9135) {
 464                 if (state->chip_version == 0x02)
 465                         *name = AF9035_FIRMWARE_IT9135_V2;
 466                 else
 467                         *name = AF9035_FIRMWARE_IT9135_V1;
 468                 state->eeprom_addr = EEPROM_BASE_IT9135;
 469         } else {
 470                 *name = AF9035_FIRMWARE_AF9035;
 471                 state->eeprom_addr = EEPROM_BASE_AF9035;
 472         }
 473
 474         ret = af9035_ctrl_msg(d, &req);
 475         if (ret < 0)
 476                 goto err;
 477
 478         dev_dbg(&d->udev->dev, "%s: reply=%*ph\n", __func__, 4, rbuf);
 479         if (rbuf[0] || rbuf[1] || rbuf[2] || rbuf[3])
 480                 ret = WARM;
 481         else
 482                 ret = COLD;
 483
 484         return ret;
 485
 486 err:
 487         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 488
 489         return ret;
 490 }
 491
 492 static int af9035_download_firmware_old(struct dvb_usb_device *d,
 493                 const struct firmware *fw)
 494 {
 495         int ret, i, j, len;
 496         u8 wbuf[1];
 497         struct usb_req req = { 0, 0, 0, NULL, 0, NULL };
 498         struct usb_req req_fw_dl = { CMD_FW_DL, 0, 0, wbuf, 0, NULL };
 499         u8 hdr_core;
 500         u16 hdr_addr, hdr_data_len, hdr_checksum;
 501         #define MAX_DATA 58
 502         #define HDR_SIZE 7
 503
 504         /*
 505          * Thanks to Daniel Glöckner <daniel-gl@gmx.net> about that info!
 506          *
 507          * byte 0: MCS 51 core
 508          *  There are two inside the AF9035 (1=Link and 2=OFDM) with separate
 509          *  address spaces
 510          * byte 1-2: Big endian destination address
 511          * byte 3-4: Big endian number of data bytes following the header
 512          * byte 5-6: Big endian header checksum, apparently ignored by the chip
 513          *  Calculated as ~(h[0]*256+h[1]+h[2]*256+h[3]+h[4]*256)
 514          */
 515
 516         for (i = fw->size; i > HDR_SIZE;) {
 517                 hdr_core = fw->data[fw->size - i + 0];
 518                 hdr_addr = fw->data[fw->size - i + 1] << 8;
 519                 hdr_addr |= fw->data[fw->size - i + 2] << 0;
 520                 hdr_data_len = fw->data[fw->size - i + 3] << 8;
 521                 hdr_data_len |= fw->data[fw->size - i + 4] << 0;
 522                 hdr_checksum = fw->data[fw->size - i + 5] << 8;
 523                 hdr_checksum |= fw->data[fw->size - i + 6] << 0;
 524
 525                 dev_dbg(&d->udev->dev,
 526                                 "%s: core=%d addr=%04x data_len=%d checksum=%04x\n",
 527                                 __func__, hdr_core, hdr_addr, hdr_data_len,
 528                                 hdr_checksum);
 529
 530                 if (((hdr_core != 1) && (hdr_core != 2)) ||
 531                                 (hdr_data_len > i)) {
 532                         dev_dbg(&d->udev->dev, "%s: bad firmware\n", __func__);
 533                         break;
 534                 }
 535
 536                 /* download begin packet */
 537                 req.cmd = CMD_FW_DL_BEGIN;
 538                 ret = af9035_ctrl_msg(d, &req);
 539                 if (ret < 0)
 540                         goto err;
 541
 542                 /* download firmware packet(s) */
 543                 for (j = HDR_SIZE + hdr_data_len; j > 0; j -= MAX_DATA) {
 544                         len = j;
 545                         if (len > MAX_DATA)
 546                                 len = MAX_DATA;
 547                         req_fw_dl.wlen = len;
 548                         req_fw_dl.wbuf = (u8 *) &fw->data[fw->size - i +
 549                                         HDR_SIZE + hdr_data_len - j];
 550                         ret = af9035_ctrl_msg(d, &req_fw_dl);
 551                         if (ret < 0)
 552                                 goto err;
 553                 }
 554
 555                 /* download end packet */
 556                 req.cmd = CMD_FW_DL_END;
 557                 ret = af9035_ctrl_msg(d, &req);
 558                 if (ret < 0)
 559                         goto err;
 560
 561                 i -= hdr_data_len + HDR_SIZE;
 562
 563                 dev_dbg(&d->udev->dev, "%s: data uploaded=%zu\n",
 564                                 __func__, fw->size - i);
 565         }
 566
 567         /* print warn if firmware is bad, continue and see what happens */
 568         if (i)
 569                 dev_warn(&d->udev->dev, "%s: bad firmware\n", KBUILD_MODNAME);
 570
 571         return 0;
 572
 573 err:
 574         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 575
 576         return ret;
 577 }
 578
 579 static int af9035_download_firmware_new(struct dvb_usb_device *d,
 580                 const struct firmware *fw)
 581 {
 582         int ret, i, i_prev;
 583         struct usb_req req_fw_dl = { CMD_FW_SCATTER_WR, 0, 0, NULL, 0, NULL };
 584         #define HDR_SIZE 7
 585
 586         /*
 587          * There seems to be following firmware header. Meaning of bytes 0-3
 588          * is unknown.
 589          *
 590          * 0: 3
 591          * 1: 0, 1
 592          * 2: 0
 593          * 3: 1, 2, 3
 594          * 4: addr MSB
 595          * 5: addr LSB
 596          * 6: count of data bytes ?
 597          */
 598         for (i = HDR_SIZE, i_prev = 0; i <= fw->size; i++) {
 599                 if (i == fw->size ||
 600                                 (fw->data[i + 0] == 0x03 &&
 601                                 (fw->data[i + 1] == 0x00 ||
 602                                 fw->data[i + 1] == 0x01) &&
 603                                 fw->data[i + 2] == 0x00)) {
 604                         req_fw_dl.wlen = i - i_prev;
 605                         req_fw_dl.wbuf = (u8 *) &fw->data[i_prev];
 606                         i_prev = i;
 607                         ret = af9035_ctrl_msg(d, &req_fw_dl);
 608                         if (ret < 0)
 609                                 goto err;
 610
 611                         dev_dbg(&d->udev->dev, "%s: data uploaded=%d\n",
 612                                         __func__, i);
 613                 }
 614         }
 615
 616         return 0;
 617
 618 err:
 619         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 620
 621         return ret;
 622 }
 623
 624 static int af9035_download_firmware(struct dvb_usb_device *d,
 625                 const struct firmware *fw)
 626 {
 627         struct state *state = d_to_priv(d);
 628         int ret;
 629         u8 wbuf[1];
 630         u8 rbuf[4];
 631         u8 tmp;
 632         struct usb_req req = { 0, 0, 0, NULL, 0, NULL };
 633         struct usb_req req_fw_ver = { CMD_FW_QUERYINFO, 0, 1, wbuf, 4, rbuf };
 634
 635         dev_dbg(&d->udev->dev, "%s:\n", __func__);
 636
 637         /*
 638          * In case of dual tuner configuration we need to do some extra
 639          * initialization in order to download firmware to slave demod too,
 640          * which is done by master demod.
 641          * Master feeds also clock and controls power via GPIO.
 642          */
 643         ret = af9035_rd_reg(d, state->eeprom_addr + EEPROM_TS_MODE, &tmp);
 644         if (ret < 0)
 645                 goto err;
 646
 647         if (tmp == 1 || tmp == 3) {
 648                 /* configure gpioh1, reset & power slave demod */
 649                 ret = af9035_wr_reg_mask(d, 0x00d8b0, 0x01, 0x01);
 650                 if (ret < 0)
 651                         goto err;
 652
 653                 ret = af9035_wr_reg_mask(d, 0x00d8b1, 0x01, 0x01);
 654                 if (ret < 0)
 655                         goto err;
 656
 657                 ret = af9035_wr_reg_mask(d, 0x00d8af, 0x00, 0x01);
 658                 if (ret < 0)
 659                         goto err;
 660
 661                 usleep_range(10000, 50000);
 662
 663                 ret = af9035_wr_reg_mask(d, 0x00d8af, 0x01, 0x01);
 664                 if (ret < 0)
 665                         goto err;
 666
 667                 /* tell the slave I2C address */
 668                 ret = af9035_rd_reg(d,
 669                                 state->eeprom_addr + EEPROM_2ND_DEMOD_ADDR,
 670                                 &tmp);
 671                 if (ret < 0)
 672                         goto err;
 673
 674                 /* use default I2C address if eeprom has no address set */
 675                 if (!tmp)
 676                         tmp = 0x3a;
 677
 678                 if (state->chip_type == 0x9135) {
 679                         ret = af9035_wr_reg(d, 0x004bfb, tmp);
 680                         if (ret < 0)
 681                                 goto err;
 682                 } else {
 683                         ret = af9035_wr_reg(d, 0x00417f, tmp);
 684                         if (ret < 0)
 685                                 goto err;
 686
 687                         /* enable clock out */
 688                         ret = af9035_wr_reg_mask(d, 0x00d81a, 0x01, 0x01);
 689                         if (ret < 0)
 690                                 goto err;
 691                 }
 692         }
 693
 694         if (fw->data[0] == 0x01)
 695                 ret = af9035_download_firmware_old(d, fw);
 696         else
 697                 ret = af9035_download_firmware_new(d, fw);
 698         if (ret < 0)
 699                 goto err;
 700
 701         /* firmware loaded, request boot */
 702         req.cmd = CMD_FW_BOOT;
 703         ret = af9035_ctrl_msg(d, &req);
 704         if (ret < 0)
 705                 goto err;
 706
 707         /* ensure firmware starts */
 708         wbuf[0] = 1;
 709         ret = af9035_ctrl_msg(d, &req_fw_ver);
 710         if (ret < 0)
 711                 goto err;
 712
 713         if (!(rbuf[0] || rbuf[1] || rbuf[2] || rbuf[3])) {
 714                 dev_err(&d->udev->dev, "%s: firmware did not run\n",
 715                                 KBUILD_MODNAME);
 716                 ret = -ENODEV;
 717                 goto err;
 718         }
 719
 720         dev_info(&d->udev->dev, "%s: firmware version=%d.%d.%d.%d",
 721                         KBUILD_MODNAME, rbuf[0], rbuf[1], rbuf[2], rbuf[3]);
 722
 723         return 0;
 724
 725 err:
 726         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 727
 728         return ret;
 729 }
 730
 731 static int af9035_read_config(struct dvb_usb_device *d)
 732 {
 733         struct state *state = d_to_priv(d);
 734         int ret, i;
 735         u8 tmp;
 736         u16 tmp16, addr;
 737
 738         /* demod I2C "address" */
 739         state->af9033_i2c_addr[0] = 0x38;
 740         state->af9033_i2c_addr[1] = 0x3a;
 741         state->af9033_config[0].adc_multiplier = AF9033_ADC_MULTIPLIER_2X;
 742         state->af9033_config[1].adc_multiplier = AF9033_ADC_MULTIPLIER_2X;
 743         state->af9033_config[0].ts_mode = AF9033_TS_MODE_USB;
 744         state->af9033_config[1].ts_mode = AF9033_TS_MODE_SERIAL;
 745
 746         if (state->chip_type == 0x9135) {
 747                 /* feed clock for integrated RF tuner */
 748                 state->af9033_config[0].dyn0_clk = true;
 749                 state->af9033_config[1].dyn0_clk = true;
 750
 751                 if (state->chip_version == 0x02) {
 752                         state->af9033_config[0].tuner = AF9033_TUNER_IT9135_60;
 753                         state->af9033_config[1].tuner = AF9033_TUNER_IT9135_60;
 754                         tmp16 = 0x00461d; /* eeprom memory mapped location */
 755                 } else {
 756                         state->af9033_config[0].tuner = AF9033_TUNER_IT9135_38;
 757                         state->af9033_config[1].tuner = AF9033_TUNER_IT9135_38;
 758                         tmp16 = 0x00461b; /* eeprom memory mapped location */
 759                 }
 760
 761                 /* check if eeprom exists */
 762                 ret = af9035_rd_reg(d, tmp16, &tmp);
 763                 if (ret < 0)
 764                         goto err;
 765
 766                 if (tmp == 0x00) {
 767                         dev_dbg(&d->udev->dev, "%s: no eeprom\n", __func__);
 768                         goto skip_eeprom;
 769                 }
 770         }
 771
 772         /* check if there is dual tuners */
 773         ret = af9035_rd_reg(d, state->eeprom_addr + EEPROM_TS_MODE, &tmp);
 774         if (ret < 0)
 775                 goto err;
 776
 777         if (tmp == 1 || tmp == 3)
 778                 state->dual_mode = true;
 779
 780         dev_dbg(&d->udev->dev, "%s: ts mode=%d dual mode=%d\n", __func__,
 781                         tmp, state->dual_mode);
 782
 783         if (state->dual_mode) {
 784                 /* read 2nd demodulator I2C address */
 785                 ret = af9035_rd_reg(d,
 786                                 state->eeprom_addr + EEPROM_2ND_DEMOD_ADDR,
 787                                 &tmp);
 788                 if (ret < 0)
 789                         goto err;
 790
 791                 if (tmp)
 792                         state->af9033_i2c_addr[1] = tmp;
 793
 794                 dev_dbg(&d->udev->dev, "%s: 2nd demod I2C addr=%02x\n",
 795                                 __func__, tmp);
 796         }
 797
 798         addr = state->eeprom_addr;
 799
 800         for (i = 0; i < state->dual_mode + 1; i++) {
 801                 /* tuner */
 802                 ret = af9035_rd_reg(d, addr + EEPROM_1_TUNER_ID, &tmp);
 803                 if (ret < 0)
 804                         goto err;
 805
 806                 dev_dbg(&d->udev->dev, "%s: [%d]tuner=%02x\n",
 807                                 __func__, i, tmp);
 808
 809                 /* tuner sanity check */
 810                 if (state->chip_type == 0x9135) {
 811                         if (state->chip_version == 0x02) {
 812                                 /* IT9135 BX (v2) */
 813                                 switch (tmp) {
 814                                 case AF9033_TUNER_IT9135_60:
 815                                 case AF9033_TUNER_IT9135_61:
 816                                 case AF9033_TUNER_IT9135_62:
 817                                         state->af9033_config[i].tuner = tmp;
 818                                         break;
 819                                 }
 820                         } else {
 821                                 /* IT9135 AX (v1) */
 822                                 switch (tmp) {
 823                                 case AF9033_TUNER_IT9135_38:
 824                                 case AF9033_TUNER_IT9135_51:
 825                                 case AF9033_TUNER_IT9135_52:
 826                                         state->af9033_config[i].tuner = tmp;
 827                                         break;
 828                                 }
 829                         }
 830                 } else {
 831                         /* AF9035 */
 832                         state->af9033_config[i].tuner = tmp;
 833                 }
 834
 835                 if (state->af9033_config[i].tuner != tmp) {
 836                         dev_info(&d->udev->dev,
 837                                         "%s: [%d] overriding tuner from %02x to %02x\n",
 838                                         KBUILD_MODNAME, i, tmp,
 839                                         state->af9033_config[i].tuner);
 840                 }
 841
 842                 switch (state->af9033_config[i].tuner) {
 843                 case AF9033_TUNER_TUA9001:
 844                 case AF9033_TUNER_FC0011:
 845                 case AF9033_TUNER_MXL5007T:
 846                 case AF9033_TUNER_TDA18218:
 847                 case AF9033_TUNER_FC2580:
 848                 case AF9033_TUNER_FC0012:
 849                         state->af9033_config[i].spec_inv = 1;
 850                         break;
 851                 case AF9033_TUNER_IT9135_38:
 852                 case AF9033_TUNER_IT9135_51:
 853                 case AF9033_TUNER_IT9135_52:
 854                 case AF9033_TUNER_IT9135_60:
 855                 case AF9033_TUNER_IT9135_61:
 856                 case AF9033_TUNER_IT9135_62:
 857                         break;
 858                 default:
 859                         dev_warn(&d->udev->dev,
 860                                         "%s: tuner id=%02x not supported, please report!",
 861                                         KBUILD_MODNAME, tmp);
 862                 }
 863
 864                 /* disable dual mode if driver does not support it */
 865                 if (i == 1)
 866                         switch (state->af9033_config[i].tuner) {
 867                         case AF9033_TUNER_FC0012:
 868                         case AF9033_TUNER_IT9135_38:
 869                         case AF9033_TUNER_IT9135_51:
 870                         case AF9033_TUNER_IT9135_52:
 871                         case AF9033_TUNER_IT9135_60:
 872                         case AF9033_TUNER_IT9135_61:
 873                         case AF9033_TUNER_IT9135_62:
 874                         case AF9033_TUNER_MXL5007T:
 875                                 break;
 876                         default:
 877                                 state->dual_mode = false;
 878                                 dev_info(&d->udev->dev,
 879                                                 "%s: driver does not support 2nd tuner and will disable it",
 880                                                 KBUILD_MODNAME);
 881                 }
 882
 883                 /* tuner IF frequency */
 884                 ret = af9035_rd_reg(d, addr + EEPROM_1_IF_L, &tmp);
 885                 if (ret < 0)
 886                         goto err;
 887
 888                 tmp16 = tmp;
 889
 890                 ret = af9035_rd_reg(d, addr + EEPROM_1_IF_H, &tmp);
 891                 if (ret < 0)
 892                         goto err;
 893
 894                 tmp16 |= tmp << 8;
 895
 896                 dev_dbg(&d->udev->dev, "%s: [%d]IF=%d\n", __func__, i, tmp16);
 897
 898                 addr += 0x10; /* shift for the 2nd tuner params */
 899         }
 900
 901 skip_eeprom:
 902         /* get demod clock */
 903         ret = af9035_rd_reg(d, 0x00d800, &tmp);
 904         if (ret < 0)
 905                 goto err;
 906
 907         tmp = (tmp >> 0) & 0x0f;
 908
 909         for (i = 0; i < ARRAY_SIZE(state->af9033_config); i++) {
 910                 if (state->chip_type == 0x9135)
 911                         state->af9033_config[i].clock = clock_lut_it9135[tmp];
 912                 else
 913                         state->af9033_config[i].clock = clock_lut_af9035[tmp];
 914         }
 915
 916         return 0;
 917
 918 err:
 919         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 920
 921         return ret;
 922 }
 923
 924 static int af9035_tua9001_tuner_callback(struct dvb_usb_device *d,
 925                 int cmd, int arg)
 926 {
 927         int ret;
 928         u8 val;
 929
 930         dev_dbg(&d->udev->dev, "%s: cmd=%d arg=%d\n", __func__, cmd, arg);
 931
 932         /*
 933          * CEN     always enabled by hardware wiring
 934          * RESETN  GPIOT3
 935          * RXEN    GPIOT2
 936          */
 937
 938         switch (cmd) {
 939         case TUA9001_CMD_RESETN:
 940                 if (arg)
 941                         val = 0x00;
 942                 else
 943                         val = 0x01;
 944
 945                 ret = af9035_wr_reg_mask(d, 0x00d8e7, val, 0x01);
 946                 if (ret < 0)
 947                         goto err;
 948                 break;
 949         case TUA9001_CMD_RXEN:
 950                 if (arg)
 951                         val = 0x01;
 952                 else
 953                         val = 0x00;
 954
 955                 ret = af9035_wr_reg_mask(d, 0x00d8eb, val, 0x01);
 956                 if (ret < 0)
 957                         goto err;
 958                 break;
 959         }
 960
 961         return 0;
 962
 963 err:
 964         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 965
 966         return ret;
 967 }
 968
 969
 970 static int af9035_fc0011_tuner_callback(struct dvb_usb_device *d,
 971                 int cmd, int arg)
 972 {
 973         int ret;
 974
 975         switch (cmd) {
 976         case FC0011_FE_CALLBACK_POWER:
 977                 /* Tuner enable */
 978                 ret = af9035_wr_reg_mask(d, 0xd8eb, 1, 1);
 979                 if (ret < 0)
 980                         goto err;
 981
 982                 ret = af9035_wr_reg_mask(d, 0xd8ec, 1, 1);
 983                 if (ret < 0)
 984                         goto err;
 985
 986                 ret = af9035_wr_reg_mask(d, 0xd8ed, 1, 1);
 987                 if (ret < 0)
 988                         goto err;
 989
 990                 /* LED */
 991                 ret = af9035_wr_reg_mask(d, 0xd8d0, 1, 1);
 992                 if (ret < 0)
 993                         goto err;
 994
 995                 ret = af9035_wr_reg_mask(d, 0xd8d1, 1, 1);
 996                 if (ret < 0)
 997                         goto err;
 998
 999                 usleep_range(10000, 50000);
1000                 break;
1001         case FC0011_FE_CALLBACK_RESET:
1002                 ret = af9035_wr_reg(d, 0xd8e9, 1);
1003                 if (ret < 0)
1004                         goto err;
1005
1006                 ret = af9035_wr_reg(d, 0xd8e8, 1);
1007                 if (ret < 0)
1008                         goto err;
1009
1010                 ret = af9035_wr_reg(d, 0xd8e7, 1);
1011                 if (ret < 0)
1012                         goto err;
1013
1014                 usleep_range(10000, 20000);
1015
1016                 ret = af9035_wr_reg(d, 0xd8e7, 0);
1017                 if (ret < 0)
1018                         goto err;
1019
1020                 usleep_range(10000, 20000);
1021                 break;
1022         default:
1023                 ret = -EINVAL;
1024                 goto err;
1025         }
1026
1027         return 0;
1028
1029 err:
1030         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
1031
1032         return ret;
1033 }
1034
1035 static int af9035_tuner_callback(struct dvb_usb_device *d, int cmd, int arg)
1036 {
1037         struct state *state = d_to_priv(d);
1038
1039         switch (state->af9033_config[0].tuner) {
1040         case AF9033_TUNER_FC0011:
1041                 return af9035_fc0011_tuner_callback(d, cmd, arg);
1042         case AF9033_TUNER_TUA9001:
1043                 return af9035_tua9001_tuner_callback(d, cmd, arg);
1044         default:
1045                 break;
1046         }
1047
1048         return 0;
1049 }
1050
1051 static int af9035_frontend_callback(void *adapter_priv, int component,
1052                                     int cmd, int arg)
1053 {
1054         struct i2c_adapter *adap = adapter_priv;
1055         struct dvb_usb_device *d = i2c_get_adapdata(adap);
1056
1057         dev_dbg(&d->udev->dev, "%s: component=%d cmd=%d arg=%d\n",
1058                         __func__, component, cmd, arg);
1059
1060         switch (component) {
1061         case DVB_FRONTEND_COMPONENT_TUNER:
1062                 return af9035_tuner_callback(d, cmd, arg);
1063         default:
1064                 break;
1065         }
1066
1067         return 0;
1068 }
1069
1070 static int af9035_get_adapter_count(struct dvb_usb_device *d)
1071 {
1072         struct state *state = d_to_priv(d);
1073
1074         return state->dual_mode + 1;
1075 }
1076
1077 static void af9035_exit(struct dvb_usb_device *d);
1078
1079 static int af9035_frontend_attach(struct dvb_usb_adapter *adap)
1080 {
1081         struct state *state = adap_to_priv(adap);
1082         struct dvb_usb_device *d = adap_to_d(adap);
1083         int ret;
1084
1085         dev_dbg(&d->udev->dev, "%s:\n", __func__);
1086
1087         if (!state->af9033_config[adap->id].tuner) {
1088                 /* unsupported tuner */
1089                 ret = -ENODEV;
1090                 goto err;
1091         }
1092
1093         state->af9033_config[adap->id].fe = &adap->fe[0];
1094         state->af9033_config[adap->id].ops = &state->ops;
1095         ret = af9035_add_i2c_dev(d, "af9033", state->af9033_i2c_addr[adap->id],
1096                         &state->af9033_config[adap->id]);
1097         if (ret)
1098                 goto err;
1099
1100         if (adap->fe[0] == NULL) {
1101                 ret = -ENODEV;
1102                 goto err;
1103         }
1104
1105         /* disable I2C-gate */
1106         adap->fe[0]->ops.i2c_gate_ctrl = NULL;
1107         adap->fe[0]->callback = af9035_frontend_callback;
1108
1109         return 0;
1110
1111 err:
1112         af9035_exit(d); /* remove I2C clients */
1113         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
1114
1115         return ret;
1116 }
1117
1118 static struct tua9001_config af9035_tua9001_config = {
1119         .i2c_addr = 0x60,
1120 };
1121
1122 static const struct fc0011_config af9035_fc0011_config = {
1123         .i2c_address = 0x60,
1124 };
1125
1126 static struct mxl5007t_config af9035_mxl5007t_config[] = {
1127         {
1128                 .xtal_freq_hz = MxL_XTAL_24_MHZ,
1129                 .if_freq_hz = MxL_IF_4_57_MHZ,
1130                 .invert_if = 0,
1131                 .loop_thru_enable = 0,
1132                 .clk_out_enable = 0,
1133                 .clk_out_amp = MxL_CLKOUT_AMP_0_94V,
1134         }, {
1135                 .xtal_freq_hz = MxL_XTAL_24_MHZ,
1136                 .if_freq_hz = MxL_IF_4_57_MHZ,
1137                 .invert_if = 0,
1138                 .loop_thru_enable = 1,
1139                 .clk_out_enable = 1,
1140                 .clk_out_amp = MxL_CLKOUT_AMP_0_94V,
1141         }
1142 };
1143
1144 static struct tda18218_config af9035_tda18218_config = {
1145         .i2c_address = 0x60,
1146         .i2c_wr_max = 21,
1147 };
1148
1149 static const struct fc2580_config af9035_fc2580_config = {
1150         .i2c_addr = 0x56,
1151         .clock = 16384000,
1152 };
1153
1154 static const struct fc0012_config af9035_fc0012_config[] = {
1155         {
1156                 .i2c_address = 0x63,
1157                 .xtal_freq = FC_XTAL_36_MHZ,
1158                 .dual_master = true,
1159                 .loop_through = true,
1160                 .clock_out = true,
1161         }, {
1162                 .i2c_address = 0x63 | 0x80, /* I2C bus select hack */
1163                 .xtal_freq = FC_XTAL_36_MHZ,
1164                 .dual_master = true,
1165         }
1166 };
1167
1168 static int af9035_tuner_attach(struct dvb_usb_adapter *adap)
1169 {
1170         struct state *state = adap_to_priv(adap);
1171         struct dvb_usb_device *d = adap_to_d(adap);
1172         int ret;
1173         struct dvb_frontend *fe;
1174         struct i2c_msg msg[1];
1175         u8 tuner_addr;
1176
1177         dev_dbg(&d->udev->dev, "%s:\n", __func__);
1178
1179         /*
1180          * XXX: Hack used in that function: we abuse unused I2C address bit [7]
1181          * to carry info about used I2C bus for dual tuner configuration.
1182          */
1183
1184         switch (state->af9033_config[adap->id].tuner) {
1185         case AF9033_TUNER_TUA9001:
1186                 /* AF9035 gpiot3 = TUA9001 RESETN
1187                    AF9035 gpiot2 = TUA9001 RXEN */
1188
1189                 /* configure gpiot2 and gpiot2 as output */
1190                 ret = af9035_wr_reg_mask(d, 0x00d8ec, 0x01, 0x01);
1191                 if (ret < 0)
1192                         goto err;
1193
1194                 ret = af9035_wr_reg_mask(d, 0x00d8ed, 0x01, 0x01);
1195                 if (ret < 0)
1196                         goto err;
1197
1198                 ret = af9035_wr_reg_mask(d, 0x00d8e8, 0x01, 0x01);
1199                 if (ret < 0)
1200                         goto err;
1201
1202                 ret = af9035_wr_reg_mask(d, 0x00d8e9, 0x01, 0x01);
1203                 if (ret < 0)
1204                         goto err;
1205
1206                 /* attach tuner */
1207                 fe = dvb_attach(tua9001_attach, adap->fe[0],
1208                                 &d->i2c_adap, &af9035_tua9001_config);
1209                 break;
1210         case AF9033_TUNER_FC0011:
1211                 fe = dvb_attach(fc0011_attach, adap->fe[0],
1212                                 &d->i2c_adap, &af9035_fc0011_config);
1213                 break;
1214         case AF9033_TUNER_MXL5007T:
1215                 if (adap->id == 0) {
1216                         ret = af9035_wr_reg(d, 0x00d8e0, 1);
1217                         if (ret < 0)
1218                                 goto err;
1219
1220                         ret = af9035_wr_reg(d, 0x00d8e1, 1);
1221                         if (ret < 0)
1222                                 goto err;
1223
1224                         ret = af9035_wr_reg(d, 0x00d8df, 0);
1225                         if (ret < 0)
1226                                 goto err;
1227
1228                         msleep(30);
1229
1230                         ret = af9035_wr_reg(d, 0x00d8df, 1);
1231                         if (ret < 0)
1232                                 goto err;
1233
1234                         msleep(300);
1235
1236                         ret = af9035_wr_reg(d, 0x00d8c0, 1);
1237                         if (ret < 0)
1238                                 goto err;
1239
1240                         ret = af9035_wr_reg(d, 0x00d8c1, 1);
1241                         if (ret < 0)
1242                                 goto err;
1243
1244                         ret = af9035_wr_reg(d, 0x00d8bf, 0);
1245                         if (ret < 0)
1246                                 goto err;
1247
1248                         ret = af9035_wr_reg(d, 0x00d8b4, 1);
1249                         if (ret < 0)
1250                                 goto err;
1251
1252                         ret = af9035_wr_reg(d, 0x00d8b5, 1);
1253                         if (ret < 0)
1254                                 goto err;
1255
1256                         ret = af9035_wr_reg(d, 0x00d8b3, 1);
1257                         if (ret < 0)
1258                                 goto err;
1259
1260                         tuner_addr = 0x60;
1261                 } else {
1262                         tuner_addr = 0x60 | 0x80; /* I2C bus hack */
1263                 }
1264
1265                 /* attach tuner */
1266                 fe = dvb_attach(mxl5007t_attach, adap->fe[0], &d->i2c_adap,
1267                                 tuner_addr, &af9035_mxl5007t_config[adap->id]);
1268                 break;
1269         case AF9033_TUNER_TDA18218:
1270                 /* attach tuner */
1271                 fe = dvb_attach(tda18218_attach, adap->fe[0],
1272                                 &d->i2c_adap, &af9035_tda18218_config);
1273                 break;
1274         case AF9033_TUNER_FC2580:
1275                 /* Tuner enable using gpiot2_o, gpiot2_en and gpiot2_on  */
1276                 ret = af9035_wr_reg_mask(d, 0xd8eb, 0x01, 0x01);
1277                 if (ret < 0)
1278                         goto err;
1279
1280                 ret = af9035_wr_reg_mask(d, 0xd8ec, 0x01, 0x01);
1281                 if (ret < 0)
1282                         goto err;
1283
1284                 ret = af9035_wr_reg_mask(d, 0xd8ed, 0x01, 0x01);
1285                 if (ret < 0)
1286                         goto err;
1287
1288                 usleep_range(10000, 50000);
1289                 /* attach tuner */
1290                 fe = dvb_attach(fc2580_attach, adap->fe[0],
1291                                 &d->i2c_adap, &af9035_fc2580_config);
1292                 break;
1293         case AF9033_TUNER_FC0012:
1294                 /*
1295                  * AF9035 gpiot2 = FC0012 enable
1296                  * XXX: there seems to be something on gpioh8 too, but on my
1297                  * my test I didn't find any difference.
1298                  */
1299
1300                 if (adap->id == 0) {
1301                         /* configure gpiot2 as output and high */
1302                         ret = af9035_wr_reg_mask(d, 0xd8eb, 0x01, 0x01);
1303                         if (ret < 0)
1304                                 goto err;
1305
1306                         ret = af9035_wr_reg_mask(d, 0xd8ec, 0x01, 0x01);
1307                         if (ret < 0)
1308                                 goto err;
1309
1310                         ret = af9035_wr_reg_mask(d, 0xd8ed, 0x01, 0x01);
1311                         if (ret < 0)
1312                                 goto err;
1313                 } else {
1314                         /*
1315                          * FIXME: That belongs for the FC0012 driver.
1316                          * Write 02 to FC0012 master tuner register 0d directly
1317                          * in order to make slave tuner working.
1318                          */
1319                         msg[0].addr = 0x63;
1320                         msg[0].flags = 0;
1321                         msg[0].len = 2;
1322                         msg[0].buf = "\x0d\x02";
1323                         ret = i2c_transfer(&d->i2c_adap, msg, 1);
1324                         if (ret < 0)
1325                                 goto err;
1326                 }
1327
1328                 usleep_range(10000, 50000);
1329
1330                 fe = dvb_attach(fc0012_attach, adap->fe[0], &d->i2c_adap,
1331                                 &af9035_fc0012_config[adap->id]);
1332                 break;
1333         case AF9033_TUNER_IT9135_38:
1334         case AF9033_TUNER_IT9135_51:
1335         case AF9033_TUNER_IT9135_52:
1336         {
1337                 struct it913x_config it913x_config = {
1338                         .fe = adap->fe[0],
1339                         .chip_ver = 1,
1340                 };
1341
1342                 if (state->dual_mode) {
1343                         if (adap->id == 0)
1344                                 it913x_config.role = IT913X_ROLE_DUAL_MASTER;
1345                         else
1346                                 it913x_config.role = IT913X_ROLE_DUAL_SLAVE;
1347                 }
1348
1349                 ret = af9035_add_i2c_dev(d, "it913x",
1350                                 state->af9033_i2c_addr[adap->id] >> 1,
1351                                 &it913x_config);
1352                 if (ret)
1353                         goto err;
1354
1355                 fe = adap->fe[0];
1356                 break;
1357         }
1358         case AF9033_TUNER_IT9135_60:
1359         case AF9033_TUNER_IT9135_61:
1360         case AF9033_TUNER_IT9135_62:
1361         {
1362                 struct it913x_config it913x_config = {
1363                         .fe = adap->fe[0],
1364                         .chip_ver = 2,
1365                 };
1366
1367                 if (state->dual_mode) {
1368                         if (adap->id == 0)
1369                                 it913x_config.role = IT913X_ROLE_DUAL_MASTER;
1370                         else
1371                                 it913x_config.role = IT913X_ROLE_DUAL_SLAVE;
1372                 }
1373
1374                 ret = af9035_add_i2c_dev(d, "it913x",
1375                                 state->af9033_i2c_addr[adap->id] >> 1,
1376                                 &it913x_config);
1377                 if (ret)
1378                         goto err;
1379
1380                 fe = adap->fe[0];
1381                 break;
1382         }
1383         default:
1384                 fe = NULL;
1385         }
1386
1387         if (fe == NULL) {
1388                 ret = -ENODEV;
1389                 goto err;
1390         }
1391
1392         return 0;
1393
1394 err:
1395         af9035_exit(d); /* remove I2C clients */
1396         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
1397
1398         return ret;
1399 }
1400
1401 static int af9035_init(struct dvb_usb_device *d)
1402 {
1403         struct state *state = d_to_priv(d);
1404         int ret, i;
1405         u16 frame_size = (d->udev->speed == USB_SPEED_FULL ? 5 : 87) * 188 / 4;
1406         u8 packet_size = (d->udev->speed == USB_SPEED_FULL ? 64 : 512) / 4;
1407         struct reg_val_mask tab[] = {
1408                 { 0x80f99d, 0x01, 0x01 },
1409                 { 0x80f9a4, 0x01, 0x01 },
1410                 { 0x00dd11, 0x00, 0x20 },
1411                 { 0x00dd11, 0x00, 0x40 },
1412                 { 0x00dd13, 0x00, 0x20 },
1413                 { 0x00dd13, 0x00, 0x40 },
1414                 { 0x00dd11, 0x20, 0x20 },
1415                 { 0x00dd88, (frame_size >> 0) & 0xff, 0xff},
1416                 { 0x00dd89, (frame_size >> 8) & 0xff, 0xff},
1417                 { 0x00dd0c, packet_size, 0xff},
1418                 { 0x00dd11, state->dual_mode << 6, 0x40 },
1419                 { 0x00dd8a, (frame_size >> 0) & 0xff, 0xff},
1420                 { 0x00dd8b, (frame_size >> 8) & 0xff, 0xff},
1421                 { 0x00dd0d, packet_size, 0xff },
1422                 { 0x80f9a3, state->dual_mode, 0x01 },
1423                 { 0x80f9cd, state->dual_mode, 0x01 },
1424                 { 0x80f99d, 0x00, 0x01 },
1425                 { 0x80f9a4, 0x00, 0x01 },
1426         };
1427
1428         dev_dbg(&d->udev->dev,
1429                         "%s: USB speed=%d frame_size=%04x packet_size=%02x\n",
1430                         __func__, d->udev->speed, frame_size, packet_size);
1431
1432         /* init endpoints */
1433         for (i = 0; i < ARRAY_SIZE(tab); i++) {
1434                 ret = af9035_wr_reg_mask(d, tab[i].reg, tab[i].val,
1435                                 tab[i].mask);
1436                 if (ret < 0)
1437                         goto err;
1438         }
1439
1440         return 0;
1441
1442 err:
1443         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
1444
1445         return ret;
1446 }
1447
1448 static void af9035_exit(struct dvb_usb_device *d)
1449 {
1450         struct state *state = d_to_priv(d);
1451
1452         dev_dbg(&d->udev->dev, "%s:\n", __func__);
1453
1454         if (state->i2c_client[3])
1455                 af9035_del_i2c_dev(d);
1456
1457         if (state->i2c_client[2])
1458                 af9035_del_i2c_dev(d);
1459
1460         if (state->i2c_client[1])
1461                 af9035_del_i2c_dev(d);
1462
1463         if (state->i2c_client[0])
1464                 af9035_del_i2c_dev(d);
1465 }
1466
1467 #if IS_ENABLED(CONFIG_RC_CORE)
1468 static int af9035_rc_query(struct dvb_usb_device *d)
1469 {
1470         int ret;
1471         u32 key;
1472         u8 buf[4];
1473         struct usb_req req = { CMD_IR_GET, 0, 0, NULL, 4, buf };
1474
1475         ret = af9035_ctrl_msg(d, &req);
1476         if (ret == 1)
1477                 return 0;
1478         else if (ret < 0)
1479                 goto err;
1480
1481         if ((buf[2] + buf[3]) == 0xff) {
1482                 if ((buf[0] + buf[1]) == 0xff) {
1483                         /* NEC standard 16bit */
1484                         key = RC_SCANCODE_NEC(buf[0], buf[2]);
1485                 } else {
1486                         /* NEC extended 24bit */
1487                         key = RC_SCANCODE_NECX(buf[0] << 8 | buf[1], buf[2]);
1488                 }
1489         } else {
1490                 /* NEC full code 32bit */
1491                 key = RC_SCANCODE_NEC32(buf[0] << 24 | buf[1] << 16 |
1492                                         buf[2] << 8  | buf[3]);
1493         }
1494
1495         dev_dbg(&d->udev->dev, "%s: %*ph\n", __func__, 4, buf);
1496
1497         rc_keydown(d->rc_dev, RC_TYPE_NEC, key, 0);
1498
1499         return 0;
1500
1501 err:
1502         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
1503
1504         return ret;
1505 }
1506
1507 static int af9035_get_rc_config(struct dvb_usb_device *d, struct dvb_usb_rc *rc)
1508 {
1509         struct state *state = d_to_priv(d);
1510         int ret;
1511         u8 tmp;
1512
1513         ret = af9035_rd_reg(d, state->eeprom_addr + EEPROM_IR_MODE, &tmp);
1514         if (ret < 0)
1515                 goto err;
1516
1517         dev_dbg(&d->udev->dev, "%s: ir_mode=%02x\n", __func__, tmp);
1518
1519         /* don't activate rc if in HID mode or if not available */
1520         if (tmp == 5) {
1521                 ret = af9035_rd_reg(d, state->eeprom_addr + EEPROM_IR_TYPE,
1522                                 &tmp);
1523                 if (ret < 0)
1524                         goto err;
1525
1526                 dev_dbg(&d->udev->dev, "%s: ir_type=%02x\n", __func__, tmp);
1527
1528                 switch (tmp) {
1529                 case 0: /* NEC */
1530                 default:
1531                         rc->allowed_protos = RC_BIT_NEC;
1532                         break;
1533                 case 1: /* RC6 */
1534                         rc->allowed_protos = RC_BIT_RC6_MCE;
1535                         break;
1536                 }
1537
1538                 rc->query = af9035_rc_query;
1539                 rc->interval = 500;
1540
1541                 /* load empty to enable rc */
1542                 if (!rc->map_name)
1543                         rc->map_name = RC_MAP_EMPTY;
1544         }
1545
1546         return 0;
1547
1548 err:
1549         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
1550
1551         return ret;
1552 }
1553 #else
1554         #define af9035_get_rc_config NULL
1555 #endif
1556
1557 static int af9035_get_stream_config(struct dvb_frontend *fe, u8 *ts_type,
1558                 struct usb_data_stream_properties *stream)
1559 {
1560         struct dvb_usb_device *d = fe_to_d(fe);
1561
1562         dev_dbg(&d->udev->dev, "%s: adap=%d\n", __func__, fe_to_adap(fe)->id);
1563
1564         if (d->udev->speed == USB_SPEED_FULL)
1565                 stream->u.bulk.buffersize = 5 * 188;
1566
1567         return 0;
1568 }
1569
1570 static int af9035_pid_filter_ctrl(struct dvb_usb_adapter *adap, int onoff)
1571 {
1572         struct state *state = adap_to_priv(adap);
1573
1574         return state->ops.pid_filter_ctrl(adap->fe[0], onoff);
1575 }
1576
1577 static int af9035_pid_filter(struct dvb_usb_adapter *adap, int index, u16 pid,
1578                 int onoff)
1579 {
1580         struct state *state = adap_to_priv(adap);
1581
1582         return state->ops.pid_filter(adap->fe[0], index, pid, onoff);
1583 }
1584
1585 static int af9035_probe(struct usb_interface *intf,
1586                 const struct usb_device_id *id)
1587 {
1588         struct usb_device *udev = interface_to_usbdev(intf);
1589         char manufacturer[sizeof("Afatech")];
1590
1591         memset(manufacturer, 0, sizeof(manufacturer));
1592         usb_string(udev, udev->descriptor.iManufacturer,
1593                         manufacturer, sizeof(manufacturer));
1594         /*
1595          * There is two devices having same ID but different chipset. One uses
1596          * AF9015 and the other IT9135 chipset. Only difference seen on lsusb
1597          * is iManufacturer string.
1598          *
1599          * idVendor           0x0ccd TerraTec Electronic GmbH
1600          * idProduct          0x0099
1601          * bcdDevice            2.00
1602          * iManufacturer           1 Afatech
1603          * iProduct                2 DVB-T 2
1604          *
1605          * idVendor           0x0ccd TerraTec Electronic GmbH
1606          * idProduct          0x0099
1607          * bcdDevice            2.00
1608          * iManufacturer           1 ITE Technologies, Inc.
1609          * iProduct                2 DVB-T TV Stick
1610          */
1611         if ((le16_to_cpu(udev->descriptor.idVendor) == USB_VID_TERRATEC) &&
1612                         (le16_to_cpu(udev->descriptor.idProduct) == 0x0099)) {
1613                 if (!strcmp("Afatech", manufacturer)) {
1614                         dev_dbg(&udev->dev, "%s: rejecting device\n", __func__);
1615                         return -ENODEV;
1616                 }
1617         }
1618
1619         return dvb_usbv2_probe(intf, id);
1620 }
1621
1622 /* interface 0 is used by DVB-T receiver and
1623    interface 1 is for remote controller (HID) */
1624 static const struct dvb_usb_device_properties af9035_props = {
1625         .driver_name = KBUILD_MODNAME,
1626         .owner = THIS_MODULE,
1627         .adapter_nr = adapter_nr,
1628         .size_of_priv = sizeof(struct state),
1629
1630         .generic_bulk_ctrl_endpoint = 0x02,
1631         .generic_bulk_ctrl_endpoint_response = 0x81,
1632
1633         .identify_state = af9035_identify_state,
1634         .download_firmware = af9035_download_firmware,
1635
1636         .i2c_algo = &af9035_i2c_algo,
1637         .read_config = af9035_read_config,
1638         .frontend_attach = af9035_frontend_attach,
1639         .tuner_attach = af9035_tuner_attach,
1640         .init = af9035_init,
1641         .get_rc_config = af9035_get_rc_config,
1642         .get_stream_config = af9035_get_stream_config,
1643         .exit = af9035_exit,
1644
1645         .get_adapter_count = af9035_get_adapter_count,
1646         .adapter = {
1647                 {
1648                         .caps = DVB_USB_ADAP_HAS_PID_FILTER |
1649                                 DVB_USB_ADAP_PID_FILTER_CAN_BE_TURNED_OFF,
1650
1651                         .pid_filter_count = 32,
1652                         .pid_filter_ctrl = af9035_pid_filter_ctrl,
1653                         .pid_filter = af9035_pid_filter,
1654
1655                         .stream = DVB_USB_STREAM_BULK(0x84, 6, 87 * 188),
1656                 }, {
1657                         .caps = DVB_USB_ADAP_HAS_PID_FILTER |
1658                                 DVB_USB_ADAP_PID_FILTER_CAN_BE_TURNED_OFF,
1659
1660                         .pid_filter_count = 32,
1661                         .pid_filter_ctrl = af9035_pid_filter_ctrl,
1662                         .pid_filter = af9035_pid_filter,
1663
1664                         .stream = DVB_USB_STREAM_BULK(0x85, 6, 87 * 188),
1665                 },
1666         },
1667 };
1668
1669 static const struct usb_device_id af9035_id_table[] = {
1670         /* AF9035 devices */
1671         { DVB_USB_DEVICE(USB_VID_AFATECH, USB_PID_AFATECH_AF9035_9035,
1672                 &af9035_props, "Afatech AF9035 reference design", NULL) },
1673         { DVB_USB_DEVICE(USB_VID_AFATECH, USB_PID_AFATECH_AF9035_1000,
1674                 &af9035_props, "Afatech AF9035 reference design", NULL) },
1675         { DVB_USB_DEVICE(USB_VID_AFATECH, USB_PID_AFATECH_AF9035_1001,
1676                 &af9035_props, "Afatech AF9035 reference design", NULL) },
1677         { DVB_USB_DEVICE(USB_VID_AFATECH, USB_PID_AFATECH_AF9035_1002,
1678                 &af9035_props, "Afatech AF9035 reference design", NULL) },
1679         { DVB_USB_DEVICE(USB_VID_AFATECH, USB_PID_AFATECH_AF9035_1003,
1680                 &af9035_props, "Afatech AF9035 reference design", NULL) },
1681         { DVB_USB_DEVICE(USB_VID_TERRATEC, USB_PID_TERRATEC_CINERGY_T_STICK,
1682                 &af9035_props, "TerraTec Cinergy T Stick", NULL) },
1683         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_A835,
1684                 &af9035_props, "AVerMedia AVerTV Volar HD/PRO (A835)", NULL) },
1685         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_B835,
1686                 &af9035_props, "AVerMedia AVerTV Volar HD/PRO (A835)", NULL) },
1687         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_1867,
1688                 &af9035_props, "AVerMedia HD Volar (A867)", NULL) },
1689         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_A867,
1690                 &af9035_props, "AVerMedia HD Volar (A867)", NULL) },
1691         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_TWINSTAR,
1692                 &af9035_props, "AVerMedia Twinstar (A825)", NULL) },
1693         { DVB_USB_DEVICE(USB_VID_ASUS, USB_PID_ASUS_U3100MINI_PLUS,
1694                 &af9035_props, "Asus U3100Mini Plus", NULL) },
1695         { DVB_USB_DEVICE(USB_VID_TERRATEC, 0x00aa,
1696                 &af9035_props, "TerraTec Cinergy T Stick (rev. 2)", NULL) },
1697         /* IT9135 devices */
1698         { DVB_USB_DEVICE(USB_VID_ITETECH, USB_PID_ITETECH_IT9135,
1699                 &af9035_props, "ITE 9135 Generic", RC_MAP_IT913X_V1) },
1700         { DVB_USB_DEVICE(USB_VID_ITETECH, USB_PID_ITETECH_IT9135_9005,
1701                 &af9035_props, "ITE 9135(9005) Generic", RC_MAP_IT913X_V2) },
1702         { DVB_USB_DEVICE(USB_VID_ITETECH, USB_PID_ITETECH_IT9135_9006,
1703                 &af9035_props, "ITE 9135(9006) Generic", RC_MAP_IT913X_V1) },
1704         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_A835B_1835,
1705                 &af9035_props, "Avermedia A835B(1835)", RC_MAP_IT913X_V2) },
1706         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_A835B_2835,
1707                 &af9035_props, "Avermedia A835B(2835)", RC_MAP_IT913X_V2) },
1708         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_A835B_3835,
1709                 &af9035_props, "Avermedia A835B(3835)", RC_MAP_IT913X_V2) },
1710         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_A835B_4835,
1711                 &af9035_props, "Avermedia A835B(4835)", RC_MAP_IT913X_V2) },
1712         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_H335,
1713                 &af9035_props, "Avermedia H335", RC_MAP_IT913X_V2) },
1714         { DVB_USB_DEVICE(USB_VID_KWORLD_2, USB_PID_KWORLD_UB499_2T_T09,
1715                 &af9035_props, "Kworld UB499-2T T09", RC_MAP_IT913X_V1) },
1716         { DVB_USB_DEVICE(USB_VID_KWORLD_2, USB_PID_SVEON_STV22_IT9137,
1717                 &af9035_props, "Sveon STV22 Dual DVB-T HDTV",
1718                                                         RC_MAP_IT913X_V1) },
1719         { DVB_USB_DEVICE(USB_VID_KWORLD_2, USB_PID_CTVDIGDUAL_V2,
1720                 &af9035_props, "Digital Dual TV Receiver CTVDIGDUAL_V2",
1721                                                         RC_MAP_IT913X_V1) },
1722         /* XXX: that same ID [0ccd:0099] is used by af9015 driver too */
1723         { DVB_USB_DEVICE(USB_VID_TERRATEC, 0x0099,
1724                 &af9035_props, "TerraTec Cinergy T Stick Dual RC (rev. 2)",
1725                 NULL) },
1726         { DVB_USB_DEVICE(USB_VID_LEADTEK, 0x6a05,
1727                 &af9035_props, "Leadtek WinFast DTV Dongle Dual", NULL) },
1728         { DVB_USB_DEVICE(USB_VID_HAUPPAUGE, 0xf900,
1729                 &af9035_props, "Hauppauge WinTV-MiniStick 2", NULL) },
1730         { DVB_USB_DEVICE(USB_VID_PCTV, USB_PID_PCTV_78E,
1731                 &af9035_props, "PCTV AndroiDTV (78e)", RC_MAP_IT913X_V1) },
1732         { DVB_USB_DEVICE(USB_VID_PCTV, USB_PID_PCTV_79E,
1733                 &af9035_props, "PCTV microStick (79e)", RC_MAP_IT913X_V2) },
1734         { }
1735 };
1736 MODULE_DEVICE_TABLE(usb, af9035_id_table);
1737
1738 static struct usb_driver af9035_usb_driver = {
1739         .name = KBUILD_MODNAME,
1740         .id_table = af9035_id_table,
1741         .probe = af9035_probe,
1742         .disconnect = dvb_usbv2_disconnect,
1743         .suspend = dvb_usbv2_suspend,
1744         .resume = dvb_usbv2_resume,
1745         .reset_resume = dvb_usbv2_reset_resume,
1746         .no_dynamic_id = 1,
1747         .soft_unbind = 1,
1748 };
1749
1750 module_usb_driver(af9035_usb_driver);
1751
1752 MODULE_AUTHOR("Antti Palosaari <crope@iki.fi>");
1753 MODULE_DESCRIPTION("Afatech AF9035 driver");
1754 MODULE_LICENSE("GPL");
1755 MODULE_FIRMWARE(AF9035_FIRMWARE_AF9035);
1756 MODULE_FIRMWARE(AF9035_FIRMWARE_IT9135_V1);
1757 MODULE_FIRMWARE(AF9035_FIRMWARE_IT9135_V2);