drivers/media/usb/dvb-usb-v2/af9035.c

   1 /*
   2  * Afatech AF9035 DVB USB driver
   3  *
   4  * Copyright (C) 2009 Antti Palosaari <crope@iki.fi>
   5  * Copyright (C) 2012 Antti Palosaari <crope@iki.fi>
   6  *
   7  *    This program is free software; you can redistribute it and/or modify
   8  *    it under the terms of the GNU General Public License as published by
   9  *    the Free Software Foundation; either version 2 of the License, or
  10  *    (at your option) any later version.
  11  *
  12  *    This program is distributed in the hope that it will be useful,
  13  *    but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  *    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15  *    GNU General Public License for more details.
  16  *
  17  *    You should have received a copy of the GNU General Public License along
  18  *    with this program; if not, write to the Free Software Foundation, Inc.,
  19  *    51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
  20  */
  21
  22 #include "af9035.h"
  23
  24 /* Max transfer size done by I2C transfer functions */
  25 #define MAX_XFER_SIZE  64
  26
  27 DVB_DEFINE_MOD_OPT_ADAPTER_NR(adapter_nr);
  28
  29 static u16 af9035_checksum(const u8 *buf, size_t len)
  30 {
  31         size_t i;
  32         u16 checksum = 0;
  33
  34         for (i = 1; i < len; i++) {
  35                 if (i % 2)
  36                         checksum += buf[i] << 8;
  37                 else
  38                         checksum += buf[i];
  39         }
  40         checksum = ~checksum;
  41
  42         return checksum;
  43 }
  44
  45 static int af9035_ctrl_msg(struct dvb_usb_device *d, struct usb_req *req)
  46 {
  47 #define REQ_HDR_LEN 4 /* send header size */
  48 #define ACK_HDR_LEN 3 /* rece header size */
  49 #define CHECKSUM_LEN 2
  50 #define USB_TIMEOUT 2000
  51         struct state *state = d_to_priv(d);
  52         int ret, wlen, rlen;
  53         u16 checksum, tmp_checksum;
  54
  55         mutex_lock(&d->usb_mutex);
  56
  57         /* buffer overflow check */
  58         if (req->wlen > (BUF_LEN - REQ_HDR_LEN - CHECKSUM_LEN) ||
  59                         req->rlen > (BUF_LEN - ACK_HDR_LEN - CHECKSUM_LEN)) {
  60                 dev_err(&d->udev->dev, "%s: too much data wlen=%d rlen=%d\n",
  61                                 KBUILD_MODNAME, req->wlen, req->rlen);
  62                 ret = -EINVAL;
  63                 goto exit;
  64         }
  65
  66         state->buf[0] = REQ_HDR_LEN + req->wlen + CHECKSUM_LEN - 1;
  67         state->buf[1] = req->mbox;
  68         state->buf[2] = req->cmd;
  69         state->buf[3] = state->seq++;
  70         memcpy(&state->buf[REQ_HDR_LEN], req->wbuf, req->wlen);
  71
  72         wlen = REQ_HDR_LEN + req->wlen + CHECKSUM_LEN;
  73         rlen = ACK_HDR_LEN + req->rlen + CHECKSUM_LEN;
  74
  75         /* calc and add checksum */
  76         checksum = af9035_checksum(state->buf, state->buf[0] - 1);
  77         state->buf[state->buf[0] - 1] = (checksum >> 8);
  78         state->buf[state->buf[0] - 0] = (checksum & 0xff);
  79
  80         /* no ack for these packets */
  81         if (req->cmd == CMD_FW_DL)
  82                 rlen = 0;
  83
  84         ret = dvb_usbv2_generic_rw_locked(d,
  85                         state->buf, wlen, state->buf, rlen);
  86         if (ret)
  87                 goto exit;
  88
  89         /* no ack for those packets */
  90         if (req->cmd == CMD_FW_DL)
  91                 goto exit;
  92
  93         /* verify checksum */
  94         checksum = af9035_checksum(state->buf, rlen - 2);
  95         tmp_checksum = (state->buf[rlen - 2] << 8) | state->buf[rlen - 1];
  96         if (tmp_checksum != checksum) {
  97                 dev_err(&d->udev->dev,
  98                                 "%s: command=%02x checksum mismatch (%04x != %04x)\n",
  99                                 KBUILD_MODNAME, req->cmd, tmp_checksum,
 100                                 checksum);
 101                 ret = -EIO;
 102                 goto exit;
 103         }
 104
 105         /* check status */
 106         if (state->buf[2]) {
 107                 /* fw returns status 1 when IR code was not received */
 108                 if (req->cmd == CMD_IR_GET || state->buf[2] == 1) {
 109                         ret = 1;
 110                         goto exit;
 111                 }
 112
 113                 dev_dbg(&d->udev->dev, "%s: command=%02x failed fw error=%d\n",
 114                                 __func__, req->cmd, state->buf[2]);
 115                 ret = -EIO;
 116                 goto exit;
 117         }
 118
 119         /* read request, copy returned data to return buf */
 120         if (req->rlen)
 121                 memcpy(req->rbuf, &state->buf[ACK_HDR_LEN], req->rlen);
 122 exit:
 123         mutex_unlock(&d->usb_mutex);
 124         if (ret < 0)
 125                 dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 126         return ret;
 127 }
 128
 129 /* write multiple registers */
 130 static int af9035_wr_regs(struct dvb_usb_device *d, u32 reg, u8 *val, int len)
 131 {
 132         u8 wbuf[MAX_XFER_SIZE];
 133         u8 mbox = (reg >> 16) & 0xff;
 134         struct usb_req req = { CMD_MEM_WR, mbox, 6 + len, wbuf, 0, NULL };
 135
 136         if (6 + len > sizeof(wbuf)) {
 137                 dev_warn(&d->udev->dev, "%s: i2c wr: len=%d is too big!\n",
 138                          KBUILD_MODNAME, len);
 139                 return -EOPNOTSUPP;
 140         }
 141
 142         wbuf[0] = len;
 143         wbuf[1] = 2;
 144         wbuf[2] = 0;
 145         wbuf[3] = 0;
 146         wbuf[4] = (reg >> 8) & 0xff;
 147         wbuf[5] = (reg >> 0) & 0xff;
 148         memcpy(&wbuf[6], val, len);
 149
 150         return af9035_ctrl_msg(d, &req);
 151 }
 152
 153 /* read multiple registers */
 154 static int af9035_rd_regs(struct dvb_usb_device *d, u32 reg, u8 *val, int len)
 155 {
 156         u8 wbuf[] = { len, 2, 0, 0, (reg >> 8) & 0xff, reg & 0xff };
 157         u8 mbox = (reg >> 16) & 0xff;
 158         struct usb_req req = { CMD_MEM_RD, mbox, sizeof(wbuf), wbuf, len, val };
 159
 160         return af9035_ctrl_msg(d, &req);
 161 }
 162
 163 /* write single register */
 164 static int af9035_wr_reg(struct dvb_usb_device *d, u32 reg, u8 val)
 165 {
 166         return af9035_wr_regs(d, reg, &val, 1);
 167 }
 168
 169 /* read single register */
 170 static int af9035_rd_reg(struct dvb_usb_device *d, u32 reg, u8 *val)
 171 {
 172         return af9035_rd_regs(d, reg, val, 1);
 173 }
 174
 175 /* write single register with mask */
 176 static int af9035_wr_reg_mask(struct dvb_usb_device *d, u32 reg, u8 val,
 177                 u8 mask)
 178 {
 179         int ret;
 180         u8 tmp;
 181
 182         /* no need for read if whole reg is written */
 183         if (mask != 0xff) {
 184                 ret = af9035_rd_regs(d, reg, &tmp, 1);
 185                 if (ret)
 186                         return ret;
 187
 188                 val &= mask;
 189                 tmp &= ~mask;
 190                 val |= tmp;
 191         }
 192
 193         return af9035_wr_regs(d, reg, &val, 1);
 194 }
 195
 196 static int af9035_add_i2c_dev(struct dvb_usb_device *d, char *type, u8 addr,
 197                 void *platform_data)
 198 {
 199         int ret, num;
 200         struct state *state = d_to_priv(d);
 201         struct i2c_client *client;
 202         struct i2c_adapter *adapter = &d->i2c_adap;
 203         struct i2c_board_info board_info = {
 204                 .addr = addr,
 205                 .platform_data = platform_data,
 206         };
 207
 208         strlcpy(board_info.type, type, I2C_NAME_SIZE);
 209
 210         /* find first free client */
 211         for (num = 0; num < AF9035_I2C_CLIENT_MAX; num++) {
 212                 if (state->i2c_client[num] == NULL)
 213                         break;
 214         }
 215
 216         dev_dbg(&d->udev->dev, "%s: num=%d\n", __func__, num);
 217
 218         if (num == AF9035_I2C_CLIENT_MAX) {
 219                 dev_err(&d->udev->dev, "%s: I2C client out of index\n",
 220                                 KBUILD_MODNAME);
 221                 ret = -ENODEV;
 222                 goto err;
 223         }
 224
 225         request_module(board_info.type);
 226
 227         /* register I2C device */
 228         client = i2c_new_device(adapter, &board_info);
 229         if (client == NULL || client->dev.driver == NULL) {
 230                 ret = -ENODEV;
 231                 goto err;
 232         }
 233
 234         /* increase I2C driver usage count */
 235         if (!try_module_get(client->dev.driver->owner)) {
 236                 i2c_unregister_device(client);
 237                 ret = -ENODEV;
 238                 goto err;
 239         }
 240
 241         state->i2c_client[num] = client;
 242         return 0;
 243 err:
 244         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 245         return ret;
 246 }
 247
 248 static void af9035_del_i2c_dev(struct dvb_usb_device *d)
 249 {
 250         int num;
 251         struct state *state = d_to_priv(d);
 252         struct i2c_client *client;
 253
 254         /* find last used client */
 255         num = AF9035_I2C_CLIENT_MAX;
 256         while (num--) {
 257                 if (state->i2c_client[num] != NULL)
 258                         break;
 259         }
 260
 261         dev_dbg(&d->udev->dev, "%s: num=%d\n", __func__, num);
 262
 263         if (num == -1) {
 264                 dev_err(&d->udev->dev, "%s: I2C client out of index\n",
 265                                 KBUILD_MODNAME);
 266                 goto err;
 267         }
 268
 269         client = state->i2c_client[num];
 270
 271         /* decrease I2C driver usage count */
 272         module_put(client->dev.driver->owner);
 273
 274         /* unregister I2C device */
 275         i2c_unregister_device(client);
 276
 277         state->i2c_client[num] = NULL;
 278         return;
 279 err:
 280         dev_dbg(&d->udev->dev, "%s: failed\n", __func__);
 281 }
 282
 283 static int af9035_i2c_master_xfer(struct i2c_adapter *adap,
 284                 struct i2c_msg msg[], int num)
 285 {
 286         struct dvb_usb_device *d = i2c_get_adapdata(adap);
 287         struct state *state = d_to_priv(d);
 288         int ret;
 289
 290         if (mutex_lock_interruptible(&d->i2c_mutex) < 0)
 291                 return -EAGAIN;
 292
 293         /*
 294          * I2C sub header is 5 bytes long. Meaning of those bytes are:
 295          * 0: data len
 296          * 1: I2C addr << 1
 297          * 2: reg addr len
 298          *    byte 3 and 4 can be used as reg addr
 299          * 3: reg addr MSB
 300          *    used when reg addr len is set to 2
 301          * 4: reg addr LSB
 302          *    used when reg addr len is set to 1 or 2
 303          *
 304          * For the simplify we do not use register addr at all.
 305          * NOTE: As a firmware knows tuner type there is very small possibility
 306          * there could be some tuner I2C hacks done by firmware and this may
 307          * lead problems if firmware expects those bytes are used.
 308          *
 309          * TODO: Here is few hacks. AF9035 chip integrates AF9033 demodulator.
 310          * IT9135 chip integrates AF9033 demodulator and RF tuner. For dual
 311          * tuner devices, there is also external AF9033 demodulator connected
 312          * via external I2C bus. All AF9033 demod I2C traffic, both single and
 313          * dual tuner configuration, is covered by firmware - actual USB IO
 314          * looks just like a memory access.
 315          * In case of IT913x chip, there is own tuner driver. It is implemented
 316          * currently as a I2C driver, even tuner IP block is likely build
 317          * directly into the demodulator memory space and there is no own I2C
 318          * bus. I2C subsystem does not allow register multiple devices to same
 319          * bus, having same slave address. Due to that we reuse demod address,
 320          * shifted by one bit, on that case.
 321          */
 322 #define AF9035_IS_I2C_XFER_WRITE_READ(_msg, _num) \
 323         (_num == 2 && !(_msg[0].flags & I2C_M_RD) && (_msg[1].flags & I2C_M_RD))
 324 #define AF9035_IS_I2C_XFER_WRITE(_msg, _num) \
 325         (_num == 1 && !(_msg[0].flags & I2C_M_RD))
 326 #define AF9035_IS_I2C_XFER_READ(_msg, _num) \
 327         (_num == 1 && (_msg[0].flags & I2C_M_RD))
 328
 329         if (AF9035_IS_I2C_XFER_WRITE_READ(msg, num)) {
 330                 if (msg[0].len > 40 || msg[1].len > 40) {
 331                         /* TODO: correct limits > 40 */
 332                         ret = -EOPNOTSUPP;
 333                 } else if ((msg[0].addr == state->af9033_config[0].i2c_addr) ||
 334                            (msg[0].addr == state->af9033_config[1].i2c_addr) ||
 335                            (state->chip_type == 0x9135)) {
 336                         /* demod access via firmware interface */
 337                         u32 reg = msg[0].buf[0] << 16 | msg[0].buf[1] << 8 |
 338                                         msg[0].buf[2];
 339
 340                         if (msg[0].addr == state->af9033_config[1].i2c_addr ||
 341                             msg[0].addr == (state->af9033_config[1].i2c_addr >> 1))
 342                                 reg |= 0x100000;
 343
 344                         ret = af9035_rd_regs(d, reg, &msg[1].buf[0],
 345                                         msg[1].len);
 346                 } else {
 347                         /* I2C write + read */
 348                         u8 buf[MAX_XFER_SIZE];
 349                         struct usb_req req = { CMD_I2C_RD, 0, 5 + msg[0].len,
 350                                         buf, msg[1].len, msg[1].buf };
 351
 352                         req.mbox |= ((msg[0].addr & 0x80)  >>  3);
 353                         buf[0] = msg[1].len;
 354                         buf[1] = msg[0].addr << 1;
 355                         buf[2] = 0x00; /* reg addr len */
 356                         buf[3] = 0x00; /* reg addr MSB */
 357                         buf[4] = 0x00; /* reg addr LSB */
 358                         memcpy(&buf[5], msg[0].buf, msg[0].len);
 359                         ret = af9035_ctrl_msg(d, &req);
 360                 }
 361         } else if (AF9035_IS_I2C_XFER_WRITE(msg, num)) {
 362                 if (msg[0].len > 40) {
 363                         /* TODO: correct limits > 40 */
 364                         ret = -EOPNOTSUPP;
 365                 } else if ((msg[0].addr == state->af9033_config[0].i2c_addr) ||
 366                            (msg[0].addr == state->af9033_config[1].i2c_addr) ||
 367                            (state->chip_type == 0x9135)) {
 368                         /* demod access via firmware interface */
 369                         u32 reg = msg[0].buf[0] << 16 | msg[0].buf[1] << 8 |
 370                                         msg[0].buf[2];
 371
 372                         if (msg[0].addr == state->af9033_config[1].i2c_addr ||
 373                             msg[0].addr == (state->af9033_config[1].i2c_addr >> 1))
 374                                 reg |= 0x100000;
 375
 376                         ret = af9035_wr_regs(d, reg, &msg[0].buf[3],
 377                                         msg[0].len - 3);
 378                 } else {
 379                         /* I2C write */
 380                         u8 buf[MAX_XFER_SIZE];
 381                         struct usb_req req = { CMD_I2C_WR, 0, 5 + msg[0].len,
 382                                         buf, 0, NULL };
 383
 384                         req.mbox |= ((msg[0].addr & 0x80)  >>  3);
 385                         buf[0] = msg[0].len;
 386                         buf[1] = msg[0].addr << 1;
 387                         buf[2] = 0x00; /* reg addr len */
 388                         buf[3] = 0x00; /* reg addr MSB */
 389                         buf[4] = 0x00; /* reg addr LSB */
 390                         memcpy(&buf[5], msg[0].buf, msg[0].len);
 391                         ret = af9035_ctrl_msg(d, &req);
 392                 }
 393         } else if (AF9035_IS_I2C_XFER_READ(msg, num)) {
 394                 if (msg[0].len > 40) {
 395                         /* TODO: correct limits > 40 */
 396                         ret = -EOPNOTSUPP;
 397                 } else {
 398                         /* I2C read */
 399                         u8 buf[5];
 400                         struct usb_req req = { CMD_I2C_RD, 0, sizeof(buf),
 401                                         buf, msg[0].len, msg[0].buf };
 402                         req.mbox |= ((msg[0].addr & 0x80)  >>  3);
 403                         buf[0] = msg[0].len;
 404                         buf[1] = msg[0].addr << 1;
 405                         buf[2] = 0x00; /* reg addr len */
 406                         buf[3] = 0x00; /* reg addr MSB */
 407                         buf[4] = 0x00; /* reg addr LSB */
 408                         ret = af9035_ctrl_msg(d, &req);
 409                 }
 410         } else {
 411                 /*
 412                  * We support only three kind of I2C transactions:
 413                  * 1) 1 x write + 1 x read (repeated start)
 414                  * 2) 1 x write
 415                  * 3) 1 x read
 416                  */
 417                 ret = -EOPNOTSUPP;
 418         }
 419
 420         mutex_unlock(&d->i2c_mutex);
 421
 422         if (ret < 0)
 423                 return ret;
 424         else
 425                 return num;
 426 }
 427
 428 static u32 af9035_i2c_functionality(struct i2c_adapter *adapter)
 429 {
 430         return I2C_FUNC_I2C;
 431 }
 432
 433 static struct i2c_algorithm af9035_i2c_algo = {
 434         .master_xfer = af9035_i2c_master_xfer,
 435         .functionality = af9035_i2c_functionality,
 436 };
 437
 438 static int af9035_identify_state(struct dvb_usb_device *d, const char **name)
 439 {
 440         struct state *state = d_to_priv(d);
 441         int ret;
 442         u8 wbuf[1] = { 1 };
 443         u8 rbuf[4];
 444         struct usb_req req = { CMD_FW_QUERYINFO, 0, sizeof(wbuf), wbuf,
 445                         sizeof(rbuf), rbuf };
 446
 447         ret = af9035_rd_regs(d, 0x1222, rbuf, 3);
 448         if (ret < 0)
 449                 goto err;
 450
 451         state->chip_version = rbuf[0];
 452         state->chip_type = rbuf[2] << 8 | rbuf[1] << 0;
 453
 454         ret = af9035_rd_reg(d, 0x384f, &state->prechip_version);
 455         if (ret < 0)
 456                 goto err;
 457
 458         dev_info(&d->udev->dev,
 459                         "%s: prechip_version=%02x chip_version=%02x chip_type=%04x\n",
 460                         KBUILD_MODNAME, state->prechip_version,
 461                         state->chip_version, state->chip_type);
 462
 463         if (state->chip_type == 0x9135) {
 464                 if (state->chip_version == 0x02)
 465                         *name = AF9035_FIRMWARE_IT9135_V2;
 466                 else
 467                         *name = AF9035_FIRMWARE_IT9135_V1;
 468                 state->eeprom_addr = EEPROM_BASE_IT9135;
 469         } else {
 470                 *name = AF9035_FIRMWARE_AF9035;
 471                 state->eeprom_addr = EEPROM_BASE_AF9035;
 472         }
 473
 474         ret = af9035_ctrl_msg(d, &req);
 475         if (ret < 0)
 476                 goto err;
 477
 478         dev_dbg(&d->udev->dev, "%s: reply=%*ph\n", __func__, 4, rbuf);
 479         if (rbuf[0] || rbuf[1] || rbuf[2] || rbuf[3])
 480                 ret = WARM;
 481         else
 482                 ret = COLD;
 483
 484         return ret;
 485
 486 err:
 487         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 488
 489         return ret;
 490 }
 491
 492 static int af9035_download_firmware_old(struct dvb_usb_device *d,
 493                 const struct firmware *fw)
 494 {
 495         int ret, i, j, len;
 496         u8 wbuf[1];
 497         struct usb_req req = { 0, 0, 0, NULL, 0, NULL };
 498         struct usb_req req_fw_dl = { CMD_FW_DL, 0, 0, wbuf, 0, NULL };
 499         u8 hdr_core;
 500         u16 hdr_addr, hdr_data_len, hdr_checksum;
 501         #define MAX_DATA 58
 502         #define HDR_SIZE 7
 503
 504         /*
 505          * Thanks to Daniel Glöckner <daniel-gl@gmx.net> about that info!
 506          *
 507          * byte 0: MCS 51 core
 508          *  There are two inside the AF9035 (1=Link and 2=OFDM) with separate
 509          *  address spaces
 510          * byte 1-2: Big endian destination address
 511          * byte 3-4: Big endian number of data bytes following the header
 512          * byte 5-6: Big endian header checksum, apparently ignored by the chip
 513          *  Calculated as ~(h[0]*256+h[1]+h[2]*256+h[3]+h[4]*256)
 514          */
 515
 516         for (i = fw->size; i > HDR_SIZE;) {
 517                 hdr_core = fw->data[fw->size - i + 0];
 518                 hdr_addr = fw->data[fw->size - i + 1] << 8;
 519                 hdr_addr |= fw->data[fw->size - i + 2] << 0;
 520                 hdr_data_len = fw->data[fw->size - i + 3] << 8;
 521                 hdr_data_len |= fw->data[fw->size - i + 4] << 0;
 522                 hdr_checksum = fw->data[fw->size - i + 5] << 8;
 523                 hdr_checksum |= fw->data[fw->size - i + 6] << 0;
 524
 525                 dev_dbg(&d->udev->dev,
 526                                 "%s: core=%d addr=%04x data_len=%d checksum=%04x\n",
 527                                 __func__, hdr_core, hdr_addr, hdr_data_len,
 528                                 hdr_checksum);
 529
 530                 if (((hdr_core != 1) && (hdr_core != 2)) ||
 531                                 (hdr_data_len > i)) {
 532                         dev_dbg(&d->udev->dev, "%s: bad firmware\n", __func__);
 533                         break;
 534                 }
 535
 536                 /* download begin packet */
 537                 req.cmd = CMD_FW_DL_BEGIN;
 538                 ret = af9035_ctrl_msg(d, &req);
 539                 if (ret < 0)
 540                         goto err;
 541
 542                 /* download firmware packet(s) */
 543                 for (j = HDR_SIZE + hdr_data_len; j > 0; j -= MAX_DATA) {
 544                         len = j;
 545                         if (len > MAX_DATA)
 546                                 len = MAX_DATA;
 547                         req_fw_dl.wlen = len;
 548                         req_fw_dl.wbuf = (u8 *) &fw->data[fw->size - i +
 549                                         HDR_SIZE + hdr_data_len - j];
 550                         ret = af9035_ctrl_msg(d, &req_fw_dl);
 551                         if (ret < 0)
 552                                 goto err;
 553                 }
 554
 555                 /* download end packet */
 556                 req.cmd = CMD_FW_DL_END;
 557                 ret = af9035_ctrl_msg(d, &req);
 558                 if (ret < 0)
 559                         goto err;
 560
 561                 i -= hdr_data_len + HDR_SIZE;
 562
 563                 dev_dbg(&d->udev->dev, "%s: data uploaded=%zu\n",
 564                                 __func__, fw->size - i);
 565         }
 566
 567         /* print warn if firmware is bad, continue and see what happens */
 568         if (i)
 569                 dev_warn(&d->udev->dev, "%s: bad firmware\n", KBUILD_MODNAME);
 570
 571         return 0;
 572
 573 err:
 574         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 575
 576         return ret;
 577 }
 578
 579 static int af9035_download_firmware_new(struct dvb_usb_device *d,
 580                 const struct firmware *fw)
 581 {
 582         int ret, i, i_prev;
 583         struct usb_req req_fw_dl = { CMD_FW_SCATTER_WR, 0, 0, NULL, 0, NULL };
 584         #define HDR_SIZE 7
 585
 586         /*
 587          * There seems to be following firmware header. Meaning of bytes 0-3
 588          * is unknown.
 589          *
 590          * 0: 3
 591          * 1: 0, 1
 592          * 2: 0
 593          * 3: 1, 2, 3
 594          * 4: addr MSB
 595          * 5: addr LSB
 596          * 6: count of data bytes ?
 597          */
 598         for (i = HDR_SIZE, i_prev = 0; i <= fw->size; i++) {
 599                 if (i == fw->size ||
 600                                 (fw->data[i + 0] == 0x03 &&
 601                                 (fw->data[i + 1] == 0x00 ||
 602                                 fw->data[i + 1] == 0x01) &&
 603                                 fw->data[i + 2] == 0x00)) {
 604                         req_fw_dl.wlen = i - i_prev;
 605                         req_fw_dl.wbuf = (u8 *) &fw->data[i_prev];
 606                         i_prev = i;
 607                         ret = af9035_ctrl_msg(d, &req_fw_dl);
 608                         if (ret < 0)
 609                                 goto err;
 610
 611                         dev_dbg(&d->udev->dev, "%s: data uploaded=%d\n",
 612                                         __func__, i);
 613                 }
 614         }
 615
 616         return 0;
 617
 618 err:
 619         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 620
 621         return ret;
 622 }
 623
 624 static int af9035_download_firmware(struct dvb_usb_device *d,
 625                 const struct firmware *fw)
 626 {
 627         struct state *state = d_to_priv(d);
 628         int ret;
 629         u8 wbuf[1];
 630         u8 rbuf[4];
 631         u8 tmp;
 632         struct usb_req req = { 0, 0, 0, NULL, 0, NULL };
 633         struct usb_req req_fw_ver = { CMD_FW_QUERYINFO, 0, 1, wbuf, 4, rbuf };
 634
 635         dev_dbg(&d->udev->dev, "%s:\n", __func__);
 636
 637         /*
 638          * In case of dual tuner configuration we need to do some extra
 639          * initialization in order to download firmware to slave demod too,
 640          * which is done by master demod.
 641          * Master feeds also clock and controls power via GPIO.
 642          */
 643         ret = af9035_rd_reg(d, state->eeprom_addr + EEPROM_TS_MODE, &tmp);
 644         if (ret < 0)
 645                 goto err;
 646
 647         if (tmp == 1 || tmp == 3) {
 648                 /* configure gpioh1, reset & power slave demod */
 649                 ret = af9035_wr_reg_mask(d, 0x00d8b0, 0x01, 0x01);
 650                 if (ret < 0)
 651                         goto err;
 652
 653                 ret = af9035_wr_reg_mask(d, 0x00d8b1, 0x01, 0x01);
 654                 if (ret < 0)
 655                         goto err;
 656
 657                 ret = af9035_wr_reg_mask(d, 0x00d8af, 0x00, 0x01);
 658                 if (ret < 0)
 659                         goto err;
 660
 661                 usleep_range(10000, 50000);
 662
 663                 ret = af9035_wr_reg_mask(d, 0x00d8af, 0x01, 0x01);
 664                 if (ret < 0)
 665                         goto err;
 666
 667                 /* tell the slave I2C address */
 668                 ret = af9035_rd_reg(d,
 669                                 state->eeprom_addr + EEPROM_2ND_DEMOD_ADDR,
 670                                 &tmp);
 671                 if (ret < 0)
 672                         goto err;
 673
 674                 /* use default I2C address if eeprom has no address set */
 675                 if (!tmp)
 676                         tmp = 0x3a;
 677
 678                 if (state->chip_type == 0x9135) {
 679                         ret = af9035_wr_reg(d, 0x004bfb, tmp);
 680                         if (ret < 0)
 681                                 goto err;
 682                 } else {
 683                         ret = af9035_wr_reg(d, 0x00417f, tmp);
 684                         if (ret < 0)
 685                                 goto err;
 686
 687                         /* enable clock out */
 688                         ret = af9035_wr_reg_mask(d, 0x00d81a, 0x01, 0x01);
 689                         if (ret < 0)
 690                                 goto err;
 691                 }
 692         }
 693
 694         if (fw->data[0] == 0x01)
 695                 ret = af9035_download_firmware_old(d, fw);
 696         else
 697                 ret = af9035_download_firmware_new(d, fw);
 698         if (ret < 0)
 699                 goto err;
 700
 701         /* firmware loaded, request boot */
 702         req.cmd = CMD_FW_BOOT;
 703         ret = af9035_ctrl_msg(d, &req);
 704         if (ret < 0)
 705                 goto err;
 706
 707         /* ensure firmware starts */
 708         wbuf[0] = 1;
 709         ret = af9035_ctrl_msg(d, &req_fw_ver);
 710         if (ret < 0)
 711                 goto err;
 712
 713         if (!(rbuf[0] || rbuf[1] || rbuf[2] || rbuf[3])) {
 714                 dev_err(&d->udev->dev, "%s: firmware did not run\n",
 715                                 KBUILD_MODNAME);
 716                 ret = -ENODEV;
 717                 goto err;
 718         }
 719
 720         dev_info(&d->udev->dev, "%s: firmware version=%d.%d.%d.%d",
 721                         KBUILD_MODNAME, rbuf[0], rbuf[1], rbuf[2], rbuf[3]);
 722
 723         return 0;
 724
 725 err:
 726         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 727
 728         return ret;
 729 }
 730
 731 static int af9035_read_config(struct dvb_usb_device *d)
 732 {
 733         struct state *state = d_to_priv(d);
 734         int ret, i;
 735         u8 tmp;
 736         u16 tmp16, addr;
 737
 738         /* demod I2C "address" */
 739         state->af9033_config[0].i2c_addr = 0x38;
 740         state->af9033_config[1].i2c_addr = 0x3a;
 741         state->af9033_config[0].adc_multiplier = AF9033_ADC_MULTIPLIER_2X;
 742         state->af9033_config[1].adc_multiplier = AF9033_ADC_MULTIPLIER_2X;
 743         state->af9033_config[0].ts_mode = AF9033_TS_MODE_USB;
 744         state->af9033_config[1].ts_mode = AF9033_TS_MODE_SERIAL;
 745
 746         if (state->chip_type == 0x9135) {
 747                 /* feed clock for integrated RF tuner */
 748                 state->af9033_config[0].dyn0_clk = true;
 749                 state->af9033_config[1].dyn0_clk = true;
 750
 751                 if (state->chip_version == 0x02) {
 752                         state->af9033_config[0].tuner = AF9033_TUNER_IT9135_60;
 753                         state->af9033_config[1].tuner = AF9033_TUNER_IT9135_60;
 754                         tmp16 = 0x00461d; /* eeprom memory mapped location */
 755                 } else {
 756                         state->af9033_config[0].tuner = AF9033_TUNER_IT9135_38;
 757                         state->af9033_config[1].tuner = AF9033_TUNER_IT9135_38;
 758                         tmp16 = 0x00461b; /* eeprom memory mapped location */
 759                 }
 760
 761                 /* check if eeprom exists */
 762                 ret = af9035_rd_reg(d, tmp16, &tmp);
 763                 if (ret < 0)
 764                         goto err;
 765
 766                 if (tmp == 0x00) {
 767                         dev_dbg(&d->udev->dev, "%s: no eeprom\n", __func__);
 768                         goto skip_eeprom;
 769                 }
 770         }
 771
 772         /* check if there is dual tuners */
 773         ret = af9035_rd_reg(d, state->eeprom_addr + EEPROM_TS_MODE, &tmp);
 774         if (ret < 0)
 775                 goto err;
 776
 777         if (tmp == 1 || tmp == 3)
 778                 state->dual_mode = true;
 779
 780         dev_dbg(&d->udev->dev, "%s: ts mode=%d dual mode=%d\n", __func__,
 781                         tmp, state->dual_mode);
 782
 783         if (state->dual_mode) {
 784                 /* read 2nd demodulator I2C address */
 785                 ret = af9035_rd_reg(d,
 786                                 state->eeprom_addr + EEPROM_2ND_DEMOD_ADDR,
 787                                 &tmp);
 788                 if (ret < 0)
 789                         goto err;
 790
 791                 if (tmp)
 792                         state->af9033_config[1].i2c_addr = tmp;
 793
 794                 dev_dbg(&d->udev->dev, "%s: 2nd demod I2C addr=%02x\n",
 795                                 __func__, tmp);
 796         }
 797
 798         addr = state->eeprom_addr;
 799
 800         for (i = 0; i < state->dual_mode + 1; i++) {
 801                 /* tuner */
 802                 ret = af9035_rd_reg(d, addr + EEPROM_1_TUNER_ID, &tmp);
 803                 if (ret < 0)
 804                         goto err;
 805
 806                 dev_dbg(&d->udev->dev, "%s: [%d]tuner=%02x\n",
 807                                 __func__, i, tmp);
 808
 809                 /* tuner sanity check */
 810                 if (state->chip_type == 0x9135) {
 811                         if (state->chip_version == 0x02) {
 812                                 /* IT9135 BX (v2) */
 813                                 switch (tmp) {
 814                                 case AF9033_TUNER_IT9135_60:
 815                                 case AF9033_TUNER_IT9135_61:
 816                                 case AF9033_TUNER_IT9135_62:
 817                                         state->af9033_config[i].tuner = tmp;
 818                                         break;
 819                                 }
 820                         } else {
 821                                 /* IT9135 AX (v1) */
 822                                 switch (tmp) {
 823                                 case AF9033_TUNER_IT9135_38:
 824                                 case AF9033_TUNER_IT9135_51:
 825                                 case AF9033_TUNER_IT9135_52:
 826                                         state->af9033_config[i].tuner = tmp;
 827                                         break;
 828                                 }
 829                         }
 830                 } else {
 831                         /* AF9035 */
 832                         state->af9033_config[i].tuner = tmp;
 833                 }
 834
 835                 if (state->af9033_config[i].tuner != tmp) {
 836                         dev_info(&d->udev->dev,
 837                                         "%s: [%d] overriding tuner from %02x to %02x\n",
 838                                         KBUILD_MODNAME, i, tmp,
 839                                         state->af9033_config[i].tuner);
 840                 }
 841
 842                 switch (state->af9033_config[i].tuner) {
 843                 case AF9033_TUNER_TUA9001:
 844                 case AF9033_TUNER_FC0011:
 845                 case AF9033_TUNER_MXL5007T:
 846                 case AF9033_TUNER_TDA18218:
 847                 case AF9033_TUNER_FC2580:
 848                 case AF9033_TUNER_FC0012:
 849                         state->af9033_config[i].spec_inv = 1;
 850                         break;
 851                 case AF9033_TUNER_IT9135_38:
 852                 case AF9033_TUNER_IT9135_51:
 853                 case AF9033_TUNER_IT9135_52:
 854                 case AF9033_TUNER_IT9135_60:
 855                 case AF9033_TUNER_IT9135_61:
 856                 case AF9033_TUNER_IT9135_62:
 857                         break;
 858                 default:
 859                         dev_warn(&d->udev->dev,
 860                                         "%s: tuner id=%02x not supported, please report!",
 861                                         KBUILD_MODNAME, tmp);
 862                 }
 863
 864                 /* disable dual mode if driver does not support it */
 865                 if (i == 1)
 866                         switch (state->af9033_config[i].tuner) {
 867                         case AF9033_TUNER_FC0012:
 868                         case AF9033_TUNER_IT9135_38:
 869                         case AF9033_TUNER_IT9135_51:
 870                         case AF9033_TUNER_IT9135_52:
 871                         case AF9033_TUNER_IT9135_60:
 872                         case AF9033_TUNER_IT9135_61:
 873                         case AF9033_TUNER_IT9135_62:
 874                         case AF9033_TUNER_MXL5007T:
 875                                 break;
 876                         default:
 877                                 state->dual_mode = false;
 878                                 dev_info(&d->udev->dev,
 879                                                 "%s: driver does not support 2nd tuner and will disable it",
 880                                                 KBUILD_MODNAME);
 881                 }
 882
 883                 /* tuner IF frequency */
 884                 ret = af9035_rd_reg(d, addr + EEPROM_1_IF_L, &tmp);
 885                 if (ret < 0)
 886                         goto err;
 887
 888                 tmp16 = tmp;
 889
 890                 ret = af9035_rd_reg(d, addr + EEPROM_1_IF_H, &tmp);
 891                 if (ret < 0)
 892                         goto err;
 893
 894                 tmp16 |= tmp << 8;
 895
 896                 dev_dbg(&d->udev->dev, "%s: [%d]IF=%d\n", __func__, i, tmp16);
 897
 898                 addr += 0x10; /* shift for the 2nd tuner params */
 899         }
 900
 901 skip_eeprom:
 902         /* get demod clock */
 903         ret = af9035_rd_reg(d, 0x00d800, &tmp);
 904         if (ret < 0)
 905                 goto err;
 906
 907         tmp = (tmp >> 0) & 0x0f;
 908
 909         for (i = 0; i < ARRAY_SIZE(state->af9033_config); i++) {
 910                 if (state->chip_type == 0x9135)
 911                         state->af9033_config[i].clock = clock_lut_it9135[tmp];
 912                 else
 913                         state->af9033_config[i].clock = clock_lut_af9035[tmp];
 914         }
 915
 916         return 0;
 917
 918 err:
 919         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 920
 921         return ret;
 922 }
 923
 924 static int af9035_tua9001_tuner_callback(struct dvb_usb_device *d,
 925                 int cmd, int arg)
 926 {
 927         int ret;
 928         u8 val;
 929
 930         dev_dbg(&d->udev->dev, "%s: cmd=%d arg=%d\n", __func__, cmd, arg);
 931
 932         /*
 933          * CEN     always enabled by hardware wiring
 934          * RESETN  GPIOT3
 935          * RXEN    GPIOT2
 936          */
 937
 938         switch (cmd) {
 939         case TUA9001_CMD_RESETN:
 940                 if (arg)
 941                         val = 0x00;
 942                 else
 943                         val = 0x01;
 944
 945                 ret = af9035_wr_reg_mask(d, 0x00d8e7, val, 0x01);
 946                 if (ret < 0)
 947                         goto err;
 948                 break;
 949         case TUA9001_CMD_RXEN:
 950                 if (arg)
 951                         val = 0x01;
 952                 else
 953                         val = 0x00;
 954
 955                 ret = af9035_wr_reg_mask(d, 0x00d8eb, val, 0x01);
 956                 if (ret < 0)
 957                         goto err;
 958                 break;
 959         }
 960
 961         return 0;
 962
 963 err:
 964         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 965
 966         return ret;
 967 }
 968
 969
 970 static int af9035_fc0011_tuner_callback(struct dvb_usb_device *d,
 971                 int cmd, int arg)
 972 {
 973         int ret;
 974
 975         switch (cmd) {
 976         case FC0011_FE_CALLBACK_POWER:
 977                 /* Tuner enable */
 978                 ret = af9035_wr_reg_mask(d, 0xd8eb, 1, 1);
 979                 if (ret < 0)
 980                         goto err;
 981
 982                 ret = af9035_wr_reg_mask(d, 0xd8ec, 1, 1);
 983                 if (ret < 0)
 984                         goto err;
 985
 986                 ret = af9035_wr_reg_mask(d, 0xd8ed, 1, 1);
 987                 if (ret < 0)
 988                         goto err;
 989
 990                 /* LED */
 991                 ret = af9035_wr_reg_mask(d, 0xd8d0, 1, 1);
 992                 if (ret < 0)
 993                         goto err;
 994
 995                 ret = af9035_wr_reg_mask(d, 0xd8d1, 1, 1);
 996                 if (ret < 0)
 997                         goto err;
 998
 999                 usleep_range(10000, 50000);
1000                 break;
1001         case FC0011_FE_CALLBACK_RESET:
1002                 ret = af9035_wr_reg(d, 0xd8e9, 1);
1003                 if (ret < 0)
1004                         goto err;
1005
1006                 ret = af9035_wr_reg(d, 0xd8e8, 1);
1007                 if (ret < 0)
1008                         goto err;
1009
1010                 ret = af9035_wr_reg(d, 0xd8e7, 1);
1011                 if (ret < 0)
1012                         goto err;
1013
1014                 usleep_range(10000, 20000);
1015
1016                 ret = af9035_wr_reg(d, 0xd8e7, 0);
1017                 if (ret < 0)
1018                         goto err;
1019
1020                 usleep_range(10000, 20000);
1021                 break;
1022         default:
1023                 ret = -EINVAL;
1024                 goto err;
1025         }
1026
1027         return 0;
1028
1029 err:
1030         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
1031
1032         return ret;
1033 }
1034
1035 static int af9035_tuner_callback(struct dvb_usb_device *d, int cmd, int arg)
1036 {
1037         struct state *state = d_to_priv(d);
1038
1039         switch (state->af9033_config[0].tuner) {
1040         case AF9033_TUNER_FC0011:
1041                 return af9035_fc0011_tuner_callback(d, cmd, arg);
1042         case AF9033_TUNER_TUA9001:
1043                 return af9035_tua9001_tuner_callback(d, cmd, arg);
1044         default:
1045                 break;
1046         }
1047
1048         return 0;
1049 }
1050
1051 static int af9035_frontend_callback(void *adapter_priv, int component,
1052                                     int cmd, int arg)
1053 {
1054         struct i2c_adapter *adap = adapter_priv;
1055         struct dvb_usb_device *d = i2c_get_adapdata(adap);
1056
1057         dev_dbg(&d->udev->dev, "%s: component=%d cmd=%d arg=%d\n",
1058                         __func__, component, cmd, arg);
1059
1060         switch (component) {
1061         case DVB_FRONTEND_COMPONENT_TUNER:
1062                 return af9035_tuner_callback(d, cmd, arg);
1063         default:
1064                 break;
1065         }
1066
1067         return 0;
1068 }
1069
1070 static int af9035_get_adapter_count(struct dvb_usb_device *d)
1071 {
1072         struct state *state = d_to_priv(d);
1073
1074         return state->dual_mode + 1;
1075 }
1076
1077 static void af9035_exit(struct dvb_usb_device *d);
1078
1079 static int af9035_frontend_attach(struct dvb_usb_adapter *adap)
1080 {
1081         struct state *state = adap_to_priv(adap);
1082         struct dvb_usb_device *d = adap_to_d(adap);
1083         int ret;
1084
1085         dev_dbg(&d->udev->dev, "%s:\n", __func__);
1086
1087         if (!state->af9033_config[adap->id].tuner) {
1088                 /* unsupported tuner */
1089                 ret = -ENODEV;
1090                 goto err;
1091         }
1092
1093         state->af9033_config[adap->id].fe = &adap->fe[0];
1094         state->af9033_config[adap->id].ops = &state->ops;
1095         ret = af9035_add_i2c_dev(d, "af9033",
1096                         state->af9033_config[adap->id].i2c_addr,
1097                         &state->af9033_config[adap->id]);
1098         if (ret)
1099                 goto err;
1100
1101         if (adap->fe[0] == NULL) {
1102                 ret = -ENODEV;
1103                 goto err;
1104         }
1105
1106         /* disable I2C-gate */
1107         adap->fe[0]->ops.i2c_gate_ctrl = NULL;
1108         adap->fe[0]->callback = af9035_frontend_callback;
1109
1110         return 0;
1111
1112 err:
1113         af9035_exit(d); /* remove I2C clients */
1114         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
1115
1116         return ret;
1117 }
1118
1119 static struct tua9001_config af9035_tua9001_config = {
1120         .i2c_addr = 0x60,
1121 };
1122
1123 static const struct fc0011_config af9035_fc0011_config = {
1124         .i2c_address = 0x60,
1125 };
1126
1127 static struct mxl5007t_config af9035_mxl5007t_config[] = {
1128         {
1129                 .xtal_freq_hz = MxL_XTAL_24_MHZ,
1130                 .if_freq_hz = MxL_IF_4_57_MHZ,
1131                 .invert_if = 0,
1132                 .loop_thru_enable = 0,
1133                 .clk_out_enable = 0,
1134                 .clk_out_amp = MxL_CLKOUT_AMP_0_94V,
1135         }, {
1136                 .xtal_freq_hz = MxL_XTAL_24_MHZ,
1137                 .if_freq_hz = MxL_IF_4_57_MHZ,
1138                 .invert_if = 0,
1139                 .loop_thru_enable = 1,
1140                 .clk_out_enable = 1,
1141                 .clk_out_amp = MxL_CLKOUT_AMP_0_94V,
1142         }
1143 };
1144
1145 static struct tda18218_config af9035_tda18218_config = {
1146         .i2c_address = 0x60,
1147         .i2c_wr_max = 21,
1148 };
1149
1150 static const struct fc2580_config af9035_fc2580_config = {
1151         .i2c_addr = 0x56,
1152         .clock = 16384000,
1153 };
1154
1155 static const struct fc0012_config af9035_fc0012_config[] = {
1156         {
1157                 .i2c_address = 0x63,
1158                 .xtal_freq = FC_XTAL_36_MHZ,
1159                 .dual_master = true,
1160                 .loop_through = true,
1161                 .clock_out = true,
1162         }, {
1163                 .i2c_address = 0x63 | 0x80, /* I2C bus select hack */
1164                 .xtal_freq = FC_XTAL_36_MHZ,
1165                 .dual_master = true,
1166         }
1167 };
1168
1169 static int af9035_tuner_attach(struct dvb_usb_adapter *adap)
1170 {
1171         struct state *state = adap_to_priv(adap);
1172         struct dvb_usb_device *d = adap_to_d(adap);
1173         int ret;
1174         struct dvb_frontend *fe;
1175         struct i2c_msg msg[1];
1176         u8 tuner_addr;
1177
1178         dev_dbg(&d->udev->dev, "%s:\n", __func__);
1179
1180         /*
1181          * XXX: Hack used in that function: we abuse unused I2C address bit [7]
1182          * to carry info about used I2C bus for dual tuner configuration.
1183          */
1184
1185         switch (state->af9033_config[adap->id].tuner) {
1186         case AF9033_TUNER_TUA9001:
1187                 /* AF9035 gpiot3 = TUA9001 RESETN
1188                    AF9035 gpiot2 = TUA9001 RXEN */
1189
1190                 /* configure gpiot2 and gpiot2 as output */
1191                 ret = af9035_wr_reg_mask(d, 0x00d8ec, 0x01, 0x01);
1192                 if (ret < 0)
1193                         goto err;
1194
1195                 ret = af9035_wr_reg_mask(d, 0x00d8ed, 0x01, 0x01);
1196                 if (ret < 0)
1197                         goto err;
1198
1199                 ret = af9035_wr_reg_mask(d, 0x00d8e8, 0x01, 0x01);
1200                 if (ret < 0)
1201                         goto err;
1202
1203                 ret = af9035_wr_reg_mask(d, 0x00d8e9, 0x01, 0x01);
1204                 if (ret < 0)
1205                         goto err;
1206
1207                 /* attach tuner */
1208                 fe = dvb_attach(tua9001_attach, adap->fe[0],
1209                                 &d->i2c_adap, &af9035_tua9001_config);
1210                 break;
1211         case AF9033_TUNER_FC0011:
1212                 fe = dvb_attach(fc0011_attach, adap->fe[0],
1213                                 &d->i2c_adap, &af9035_fc0011_config);
1214                 break;
1215         case AF9033_TUNER_MXL5007T:
1216                 if (adap->id == 0) {
1217                         ret = af9035_wr_reg(d, 0x00d8e0, 1);
1218                         if (ret < 0)
1219                                 goto err;
1220
1221                         ret = af9035_wr_reg(d, 0x00d8e1, 1);
1222                         if (ret < 0)
1223                                 goto err;
1224
1225                         ret = af9035_wr_reg(d, 0x00d8df, 0);
1226                         if (ret < 0)
1227                                 goto err;
1228
1229                         msleep(30);
1230
1231                         ret = af9035_wr_reg(d, 0x00d8df, 1);
1232                         if (ret < 0)
1233                                 goto err;
1234
1235                         msleep(300);
1236
1237                         ret = af9035_wr_reg(d, 0x00d8c0, 1);
1238                         if (ret < 0)
1239                                 goto err;
1240
1241                         ret = af9035_wr_reg(d, 0x00d8c1, 1);
1242                         if (ret < 0)
1243                                 goto err;
1244
1245                         ret = af9035_wr_reg(d, 0x00d8bf, 0);
1246                         if (ret < 0)
1247                                 goto err;
1248
1249                         ret = af9035_wr_reg(d, 0x00d8b4, 1);
1250                         if (ret < 0)
1251                                 goto err;
1252
1253                         ret = af9035_wr_reg(d, 0x00d8b5, 1);
1254                         if (ret < 0)
1255                                 goto err;
1256
1257                         ret = af9035_wr_reg(d, 0x00d8b3, 1);
1258                         if (ret < 0)
1259                                 goto err;
1260
1261                         tuner_addr = 0x60;
1262                 } else {
1263                         tuner_addr = 0x60 | 0x80; /* I2C bus hack */
1264                 }
1265
1266                 /* attach tuner */
1267                 fe = dvb_attach(mxl5007t_attach, adap->fe[0], &d->i2c_adap,
1268                                 tuner_addr, &af9035_mxl5007t_config[adap->id]);
1269                 break;
1270         case AF9033_TUNER_TDA18218:
1271                 /* attach tuner */
1272                 fe = dvb_attach(tda18218_attach, adap->fe[0],
1273                                 &d->i2c_adap, &af9035_tda18218_config);
1274                 break;
1275         case AF9033_TUNER_FC2580:
1276                 /* Tuner enable using gpiot2_o, gpiot2_en and gpiot2_on  */
1277                 ret = af9035_wr_reg_mask(d, 0xd8eb, 0x01, 0x01);
1278                 if (ret < 0)
1279                         goto err;
1280
1281                 ret = af9035_wr_reg_mask(d, 0xd8ec, 0x01, 0x01);
1282                 if (ret < 0)
1283                         goto err;
1284
1285                 ret = af9035_wr_reg_mask(d, 0xd8ed, 0x01, 0x01);
1286                 if (ret < 0)
1287                         goto err;
1288
1289                 usleep_range(10000, 50000);
1290                 /* attach tuner */
1291                 fe = dvb_attach(fc2580_attach, adap->fe[0],
1292                                 &d->i2c_adap, &af9035_fc2580_config);
1293                 break;
1294         case AF9033_TUNER_FC0012:
1295                 /*
1296                  * AF9035 gpiot2 = FC0012 enable
1297                  * XXX: there seems to be something on gpioh8 too, but on my
1298                  * my test I didn't find any difference.
1299                  */
1300
1301                 if (adap->id == 0) {
1302                         /* configure gpiot2 as output and high */
1303                         ret = af9035_wr_reg_mask(d, 0xd8eb, 0x01, 0x01);
1304                         if (ret < 0)
1305                                 goto err;
1306
1307                         ret = af9035_wr_reg_mask(d, 0xd8ec, 0x01, 0x01);
1308                         if (ret < 0)
1309                                 goto err;
1310
1311                         ret = af9035_wr_reg_mask(d, 0xd8ed, 0x01, 0x01);
1312                         if (ret < 0)
1313                                 goto err;
1314                 } else {
1315                         /*
1316                          * FIXME: That belongs for the FC0012 driver.
1317                          * Write 02 to FC0012 master tuner register 0d directly
1318                          * in order to make slave tuner working.
1319                          */
1320                         msg[0].addr = 0x63;
1321                         msg[0].flags = 0;
1322                         msg[0].len = 2;
1323                         msg[0].buf = "\x0d\x02";
1324                         ret = i2c_transfer(&d->i2c_adap, msg, 1);
1325                         if (ret < 0)
1326                                 goto err;
1327                 }
1328
1329                 usleep_range(10000, 50000);
1330
1331                 fe = dvb_attach(fc0012_attach, adap->fe[0], &d->i2c_adap,
1332                                 &af9035_fc0012_config[adap->id]);
1333                 break;
1334         case AF9033_TUNER_IT9135_38:
1335         case AF9033_TUNER_IT9135_51:
1336         case AF9033_TUNER_IT9135_52:
1337         {
1338                 struct it913x_config it913x_config = {
1339                         .fe = adap->fe[0],
1340                         .chip_ver = 1,
1341                 };
1342
1343                 if (state->dual_mode) {
1344                         if (adap->id == 0)
1345                                 it913x_config.role = IT913X_ROLE_DUAL_MASTER;
1346                         else
1347                                 it913x_config.role = IT913X_ROLE_DUAL_SLAVE;
1348                 }
1349
1350                 ret = af9035_add_i2c_dev(d, "it913x",
1351                                 state->af9033_config[adap->id].i2c_addr >> 1,
1352                                 &it913x_config);
1353                 if (ret)
1354                         goto err;
1355
1356                 fe = adap->fe[0];
1357                 break;
1358         }
1359         case AF9033_TUNER_IT9135_60:
1360         case AF9033_TUNER_IT9135_61:
1361         case AF9033_TUNER_IT9135_62:
1362         {
1363                 struct it913x_config it913x_config = {
1364                         .fe = adap->fe[0],
1365                         .chip_ver = 2,
1366                 };
1367
1368                 if (state->dual_mode) {
1369                         if (adap->id == 0)
1370                                 it913x_config.role = IT913X_ROLE_DUAL_MASTER;
1371                         else
1372                                 it913x_config.role = IT913X_ROLE_DUAL_SLAVE;
1373                 }
1374
1375                 ret = af9035_add_i2c_dev(d, "it913x",
1376                                 state->af9033_config[adap->id].i2c_addr >> 1,
1377                                 &it913x_config);
1378                 if (ret)
1379                         goto err;
1380
1381                 fe = adap->fe[0];
1382                 break;
1383         }
1384         default:
1385                 fe = NULL;
1386         }
1387
1388         if (fe == NULL) {
1389                 ret = -ENODEV;
1390                 goto err;
1391         }
1392
1393         return 0;
1394
1395 err:
1396         af9035_exit(d); /* remove I2C clients */
1397         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
1398
1399         return ret;
1400 }
1401
1402 static int af9035_init(struct dvb_usb_device *d)
1403 {
1404         struct state *state = d_to_priv(d);
1405         int ret, i;
1406         u16 frame_size = (d->udev->speed == USB_SPEED_FULL ? 5 : 87) * 188 / 4;
1407         u8 packet_size = (d->udev->speed == USB_SPEED_FULL ? 64 : 512) / 4;
1408         struct reg_val_mask tab[] = {
1409                 { 0x80f99d, 0x01, 0x01 },
1410                 { 0x80f9a4, 0x01, 0x01 },
1411                 { 0x00dd11, 0x00, 0x20 },
1412                 { 0x00dd11, 0x00, 0x40 },
1413                 { 0x00dd13, 0x00, 0x20 },
1414                 { 0x00dd13, 0x00, 0x40 },
1415                 { 0x00dd11, 0x20, 0x20 },
1416                 { 0x00dd88, (frame_size >> 0) & 0xff, 0xff},
1417                 { 0x00dd89, (frame_size >> 8) & 0xff, 0xff},
1418                 { 0x00dd0c, packet_size, 0xff},
1419                 { 0x00dd11, state->dual_mode << 6, 0x40 },
1420                 { 0x00dd8a, (frame_size >> 0) & 0xff, 0xff},
1421                 { 0x00dd8b, (frame_size >> 8) & 0xff, 0xff},
1422                 { 0x00dd0d, packet_size, 0xff },
1423                 { 0x80f9a3, state->dual_mode, 0x01 },
1424                 { 0x80f9cd, state->dual_mode, 0x01 },
1425                 { 0x80f99d, 0x00, 0x01 },
1426                 { 0x80f9a4, 0x00, 0x01 },
1427         };
1428
1429         dev_dbg(&d->udev->dev,
1430                         "%s: USB speed=%d frame_size=%04x packet_size=%02x\n",
1431                         __func__, d->udev->speed, frame_size, packet_size);
1432
1433         /* init endpoints */
1434         for (i = 0; i < ARRAY_SIZE(tab); i++) {
1435                 ret = af9035_wr_reg_mask(d, tab[i].reg, tab[i].val,
1436                                 tab[i].mask);
1437                 if (ret < 0)
1438                         goto err;
1439         }
1440
1441         return 0;
1442
1443 err:
1444         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
1445
1446         return ret;
1447 }
1448
1449 static void af9035_exit(struct dvb_usb_device *d)
1450 {
1451         struct state *state = d_to_priv(d);
1452
1453         dev_dbg(&d->udev->dev, "%s:\n", __func__);
1454
1455         if (state->i2c_client[3])
1456                 af9035_del_i2c_dev(d);
1457
1458         if (state->i2c_client[2])
1459                 af9035_del_i2c_dev(d);
1460
1461         if (state->i2c_client[1])
1462                 af9035_del_i2c_dev(d);
1463
1464         if (state->i2c_client[0])
1465                 af9035_del_i2c_dev(d);
1466 }
1467
1468 #if IS_ENABLED(CONFIG_RC_CORE)
1469 static int af9035_rc_query(struct dvb_usb_device *d)
1470 {
1471         int ret;
1472         u32 key;
1473         u8 buf[4];
1474         struct usb_req req = { CMD_IR_GET, 0, 0, NULL, 4, buf };
1475
1476         ret = af9035_ctrl_msg(d, &req);
1477         if (ret == 1)
1478                 return 0;
1479         else if (ret < 0)
1480                 goto err;
1481
1482         if ((buf[2] + buf[3]) == 0xff) {
1483                 if ((buf[0] + buf[1]) == 0xff) {
1484                         /* NEC standard 16bit */
1485                         key = RC_SCANCODE_NEC(buf[0], buf[2]);
1486                 } else {
1487                         /* NEC extended 24bit */
1488                         key = RC_SCANCODE_NECX(buf[0] << 8 | buf[1], buf[2]);
1489                 }
1490         } else {
1491                 /* NEC full code 32bit */
1492                 key = RC_SCANCODE_NEC32(buf[0] << 24 | buf[1] << 16 |
1493                                         buf[2] << 8  | buf[3]);
1494         }
1495
1496         dev_dbg(&d->udev->dev, "%s: %*ph\n", __func__, 4, buf);
1497
1498         rc_keydown(d->rc_dev, RC_TYPE_NEC, key, 0);
1499
1500         return 0;
1501
1502 err:
1503         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
1504
1505         return ret;
1506 }
1507
1508 static int af9035_get_rc_config(struct dvb_usb_device *d, struct dvb_usb_rc *rc)
1509 {
1510         struct state *state = d_to_priv(d);
1511         int ret;
1512         u8 tmp;
1513
1514         ret = af9035_rd_reg(d, state->eeprom_addr + EEPROM_IR_MODE, &tmp);
1515         if (ret < 0)
1516                 goto err;
1517
1518         dev_dbg(&d->udev->dev, "%s: ir_mode=%02x\n", __func__, tmp);
1519
1520         /* don't activate rc if in HID mode or if not available */
1521         if (tmp == 5) {
1522                 ret = af9035_rd_reg(d, state->eeprom_addr + EEPROM_IR_TYPE,
1523                                 &tmp);
1524                 if (ret < 0)
1525                         goto err;
1526
1527                 dev_dbg(&d->udev->dev, "%s: ir_type=%02x\n", __func__, tmp);
1528
1529                 switch (tmp) {
1530                 case 0: /* NEC */
1531                 default:
1532                         rc->allowed_protos = RC_BIT_NEC;
1533                         break;
1534                 case 1: /* RC6 */
1535                         rc->allowed_protos = RC_BIT_RC6_MCE;
1536                         break;
1537                 }
1538
1539                 rc->query = af9035_rc_query;
1540                 rc->interval = 500;
1541
1542                 /* load empty to enable rc */
1543                 if (!rc->map_name)
1544                         rc->map_name = RC_MAP_EMPTY;
1545         }
1546
1547         return 0;
1548
1549 err:
1550         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
1551
1552         return ret;
1553 }
1554 #else
1555         #define af9035_get_rc_config NULL
1556 #endif
1557
1558 static int af9035_get_stream_config(struct dvb_frontend *fe, u8 *ts_type,
1559                 struct usb_data_stream_properties *stream)
1560 {
1561         struct dvb_usb_device *d = fe_to_d(fe);
1562
1563         dev_dbg(&d->udev->dev, "%s: adap=%d\n", __func__, fe_to_adap(fe)->id);
1564
1565         if (d->udev->speed == USB_SPEED_FULL)
1566                 stream->u.bulk.buffersize = 5 * 188;
1567
1568         return 0;
1569 }
1570
1571 static int af9035_pid_filter_ctrl(struct dvb_usb_adapter *adap, int onoff)
1572 {
1573         struct state *state = adap_to_priv(adap);
1574
1575         return state->ops.pid_filter_ctrl(adap->fe[0], onoff);
1576 }
1577
1578 static int af9035_pid_filter(struct dvb_usb_adapter *adap, int index, u16 pid,
1579                 int onoff)
1580 {
1581         struct state *state = adap_to_priv(adap);
1582
1583         return state->ops.pid_filter(adap->fe[0], index, pid, onoff);
1584 }
1585
1586 static int af9035_probe(struct usb_interface *intf,
1587                 const struct usb_device_id *id)
1588 {
1589         struct usb_device *udev = interface_to_usbdev(intf);
1590         char manufacturer[sizeof("Afatech")];
1591
1592         memset(manufacturer, 0, sizeof(manufacturer));
1593         usb_string(udev, udev->descriptor.iManufacturer,
1594                         manufacturer, sizeof(manufacturer));
1595         /*
1596          * There is two devices having same ID but different chipset. One uses
1597          * AF9015 and the other IT9135 chipset. Only difference seen on lsusb
1598          * is iManufacturer string.
1599          *
1600          * idVendor           0x0ccd TerraTec Electronic GmbH
1601          * idProduct          0x0099
1602          * bcdDevice            2.00
1603          * iManufacturer           1 Afatech
1604          * iProduct                2 DVB-T 2
1605          *
1606          * idVendor           0x0ccd TerraTec Electronic GmbH
1607          * idProduct          0x0099
1608          * bcdDevice            2.00
1609          * iManufacturer           1 ITE Technologies, Inc.
1610          * iProduct                2 DVB-T TV Stick
1611          */
1612         if ((le16_to_cpu(udev->descriptor.idVendor) == USB_VID_TERRATEC) &&
1613                         (le16_to_cpu(udev->descriptor.idProduct) == 0x0099)) {
1614                 if (!strcmp("Afatech", manufacturer)) {
1615                         dev_dbg(&udev->dev, "%s: rejecting device\n", __func__);
1616                         return -ENODEV;
1617                 }
1618         }
1619
1620         return dvb_usbv2_probe(intf, id);
1621 }
1622
1623 /* interface 0 is used by DVB-T receiver and
1624    interface 1 is for remote controller (HID) */
1625 static const struct dvb_usb_device_properties af9035_props = {
1626         .driver_name = KBUILD_MODNAME,
1627         .owner = THIS_MODULE,
1628         .adapter_nr = adapter_nr,
1629         .size_of_priv = sizeof(struct state),
1630
1631         .generic_bulk_ctrl_endpoint = 0x02,
1632         .generic_bulk_ctrl_endpoint_response = 0x81,
1633
1634         .identify_state = af9035_identify_state,
1635         .download_firmware = af9035_download_firmware,
1636
1637         .i2c_algo = &af9035_i2c_algo,
1638         .read_config = af9035_read_config,
1639         .frontend_attach = af9035_frontend_attach,
1640         .tuner_attach = af9035_tuner_attach,
1641         .init = af9035_init,
1642         .get_rc_config = af9035_get_rc_config,
1643         .get_stream_config = af9035_get_stream_config,
1644         .exit = af9035_exit,
1645
1646         .get_adapter_count = af9035_get_adapter_count,
1647         .adapter = {
1648                 {
1649                         .caps = DVB_USB_ADAP_HAS_PID_FILTER |
1650                                 DVB_USB_ADAP_PID_FILTER_CAN_BE_TURNED_OFF,
1651
1652                         .pid_filter_count = 32,
1653                         .pid_filter_ctrl = af9035_pid_filter_ctrl,
1654                         .pid_filter = af9035_pid_filter,
1655
1656                         .stream = DVB_USB_STREAM_BULK(0x84, 6, 87 * 188),
1657                 }, {
1658                         .caps = DVB_USB_ADAP_HAS_PID_FILTER |
1659                                 DVB_USB_ADAP_PID_FILTER_CAN_BE_TURNED_OFF,
1660
1661                         .pid_filter_count = 32,
1662                         .pid_filter_ctrl = af9035_pid_filter_ctrl,
1663                         .pid_filter = af9035_pid_filter,
1664
1665                         .stream = DVB_USB_STREAM_BULK(0x85, 6, 87 * 188),
1666                 },
1667         },
1668 };
1669
1670 static const struct usb_device_id af9035_id_table[] = {
1671         /* AF9035 devices */
1672         { DVB_USB_DEVICE(USB_VID_AFATECH, USB_PID_AFATECH_AF9035_9035,
1673                 &af9035_props, "Afatech AF9035 reference design", NULL) },
1674         { DVB_USB_DEVICE(USB_VID_AFATECH, USB_PID_AFATECH_AF9035_1000,
1675                 &af9035_props, "Afatech AF9035 reference design", NULL) },
1676         { DVB_USB_DEVICE(USB_VID_AFATECH, USB_PID_AFATECH_AF9035_1001,
1677                 &af9035_props, "Afatech AF9035 reference design", NULL) },
1678         { DVB_USB_DEVICE(USB_VID_AFATECH, USB_PID_AFATECH_AF9035_1002,
1679                 &af9035_props, "Afatech AF9035 reference design", NULL) },
1680         { DVB_USB_DEVICE(USB_VID_AFATECH, USB_PID_AFATECH_AF9035_1003,
1681                 &af9035_props, "Afatech AF9035 reference design", NULL) },
1682         { DVB_USB_DEVICE(USB_VID_TERRATEC, USB_PID_TERRATEC_CINERGY_T_STICK,
1683                 &af9035_props, "TerraTec Cinergy T Stick", NULL) },
1684         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_A835,
1685                 &af9035_props, "AVerMedia AVerTV Volar HD/PRO (A835)", NULL) },
1686         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_B835,
1687                 &af9035_props, "AVerMedia AVerTV Volar HD/PRO (A835)", NULL) },
1688         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_1867,
1689                 &af9035_props, "AVerMedia HD Volar (A867)", NULL) },
1690         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_A867,
1691                 &af9035_props, "AVerMedia HD Volar (A867)", NULL) },
1692         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_TWINSTAR,
1693                 &af9035_props, "AVerMedia Twinstar (A825)", NULL) },
1694         { DVB_USB_DEVICE(USB_VID_ASUS, USB_PID_ASUS_U3100MINI_PLUS,
1695                 &af9035_props, "Asus U3100Mini Plus", NULL) },
1696         { DVB_USB_DEVICE(USB_VID_TERRATEC, 0x00aa,
1697                 &af9035_props, "TerraTec Cinergy T Stick (rev. 2)", NULL) },
1698         /* IT9135 devices */
1699         { DVB_USB_DEVICE(USB_VID_ITETECH, USB_PID_ITETECH_IT9135,
1700                 &af9035_props, "ITE 9135 Generic", RC_MAP_IT913X_V1) },
1701         { DVB_USB_DEVICE(USB_VID_ITETECH, USB_PID_ITETECH_IT9135_9005,
1702                 &af9035_props, "ITE 9135(9005) Generic", RC_MAP_IT913X_V2) },
1703         { DVB_USB_DEVICE(USB_VID_ITETECH, USB_PID_ITETECH_IT9135_9006,
1704                 &af9035_props, "ITE 9135(9006) Generic", RC_MAP_IT913X_V1) },
1705         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_A835B_1835,
1706                 &af9035_props, "Avermedia A835B(1835)", RC_MAP_IT913X_V2) },
1707         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_A835B_2835,
1708                 &af9035_props, "Avermedia A835B(2835)", RC_MAP_IT913X_V2) },
1709         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_A835B_3835,
1710                 &af9035_props, "Avermedia A835B(3835)", RC_MAP_IT913X_V2) },
1711         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_A835B_4835,
1712                 &af9035_props, "Avermedia A835B(4835)", RC_MAP_IT913X_V2) },
1713         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_H335,
1714                 &af9035_props, "Avermedia H335", RC_MAP_IT913X_V2) },
1715         { DVB_USB_DEVICE(USB_VID_KWORLD_2, USB_PID_KWORLD_UB499_2T_T09,
1716                 &af9035_props, "Kworld UB499-2T T09", RC_MAP_IT913X_V1) },
1717         { DVB_USB_DEVICE(USB_VID_KWORLD_2, USB_PID_SVEON_STV22_IT9137,
1718                 &af9035_props, "Sveon STV22 Dual DVB-T HDTV",
1719                                                         RC_MAP_IT913X_V1) },
1720         { DVB_USB_DEVICE(USB_VID_KWORLD_2, USB_PID_CTVDIGDUAL_V2,
1721                 &af9035_props, "Digital Dual TV Receiver CTVDIGDUAL_V2",
1722                                                         RC_MAP_IT913X_V1) },
1723         /* XXX: that same ID [0ccd:0099] is used by af9015 driver too */
1724         { DVB_USB_DEVICE(USB_VID_TERRATEC, 0x0099,
1725                 &af9035_props, "TerraTec Cinergy T Stick Dual RC (rev. 2)",
1726                 NULL) },
1727         { DVB_USB_DEVICE(USB_VID_LEADTEK, 0x6a05,
1728                 &af9035_props, "Leadtek WinFast DTV Dongle Dual", NULL) },
1729         { DVB_USB_DEVICE(USB_VID_HAUPPAUGE, 0xf900,
1730                 &af9035_props, "Hauppauge WinTV-MiniStick 2", NULL) },
1731         { DVB_USB_DEVICE(USB_VID_PCTV, USB_PID_PCTV_78E,
1732                 &af9035_props, "PCTV 78e", RC_MAP_IT913X_V1) },
1733         { DVB_USB_DEVICE(USB_VID_PCTV, USB_PID_PCTV_79E,
1734                 &af9035_props, "PCTV 79e", RC_MAP_IT913X_V2) },
1735         { }
1736 };
1737 MODULE_DEVICE_TABLE(usb, af9035_id_table);
1738
1739 static struct usb_driver af9035_usb_driver = {
1740         .name = KBUILD_MODNAME,
1741         .id_table = af9035_id_table,
1742         .probe = af9035_probe,
1743         .disconnect = dvb_usbv2_disconnect,
1744         .suspend = dvb_usbv2_suspend,
1745         .resume = dvb_usbv2_resume,
1746         .reset_resume = dvb_usbv2_reset_resume,
1747         .no_dynamic_id = 1,
1748         .soft_unbind = 1,
1749 };
1750
1751 module_usb_driver(af9035_usb_driver);
1752
1753 MODULE_AUTHOR("Antti Palosaari <crope@iki.fi>");
1754 MODULE_DESCRIPTION("Afatech AF9035 driver");
1755 MODULE_LICENSE("GPL");
1756 MODULE_FIRMWARE(AF9035_FIRMWARE_AF9035);
1757 MODULE_FIRMWARE(AF9035_FIRMWARE_IT9135_V1);
1758 MODULE_FIRMWARE(AF9035_FIRMWARE_IT9135_V2);