]> git.karo-electronics.de Git - karo-tx-linux.git/blob - drivers/usb/serial/io_ti.c
USB: io_ti: fix use-after-free in TIOCMIWAIT
[karo-tx-linux.git] / drivers / usb / serial / io_ti.c
1 /*
2  * Edgeport USB Serial Converter driver
3  *
4  * Copyright (C) 2000-2002 Inside Out Networks, All rights reserved.
5  * Copyright (C) 2001-2002 Greg Kroah-Hartman <greg@kroah.com>
6  *
7  *      This program is free software; you can redistribute it and/or modify
8  *      it under the terms of the GNU General Public License as published by
9  *      the Free Software Foundation; either version 2 of the License, or
10  *      (at your option) any later version.
11  *
12  * Supports the following devices:
13  *      EP/1 EP/2 EP/4 EP/21 EP/22 EP/221 EP/42 EP/421 WATCHPORT
14  *
15  * For questions or problems with this driver, contact Inside Out
16  * Networks technical support, or Peter Berger <pberger@brimson.com>,
17  * or Al Borchers <alborchers@steinerpoint.com>.
18  */
19
20 #include <linux/kernel.h>
21 #include <linux/jiffies.h>
22 #include <linux/errno.h>
23 #include <linux/init.h>
24 #include <linux/slab.h>
25 #include <linux/tty.h>
26 #include <linux/tty_driver.h>
27 #include <linux/tty_flip.h>
28 #include <linux/module.h>
29 #include <linux/spinlock.h>
30 #include <linux/mutex.h>
31 #include <linux/serial.h>
32 #include <linux/kfifo.h>
33 #include <linux/ioctl.h>
34 #include <linux/firmware.h>
35 #include <linux/uaccess.h>
36 #include <linux/usb.h>
37 #include <linux/usb/serial.h>
38
39 #include "io_16654.h"
40 #include "io_usbvend.h"
41 #include "io_ti.h"
42
43 #define DRIVER_AUTHOR "Greg Kroah-Hartman <greg@kroah.com> and David Iacovelli"
44 #define DRIVER_DESC "Edgeport USB Serial Driver"
45
46 #define EPROM_PAGE_SIZE         64
47
48
49 /* different hardware types */
50 #define HARDWARE_TYPE_930       0
51 #define HARDWARE_TYPE_TIUMP     1
52
53 /* IOCTL_PRIVATE_TI_GET_MODE Definitions */
54 #define TI_MODE_CONFIGURING     0   /* Device has not entered start device */
55 #define TI_MODE_BOOT            1   /* Staying in boot mode                */
56 #define TI_MODE_DOWNLOAD        2   /* Made it to download mode            */
57 #define TI_MODE_TRANSITIONING   3   /* Currently in boot mode but
58                                        transitioning to download mode      */
59
60 /* read urb state */
61 #define EDGE_READ_URB_RUNNING   0
62 #define EDGE_READ_URB_STOPPING  1
63 #define EDGE_READ_URB_STOPPED   2
64
65 #define EDGE_CLOSING_WAIT       4000    /* in .01 sec */
66
67 #define EDGE_OUT_BUF_SIZE       1024
68
69
70 /* Product information read from the Edgeport */
71 struct product_info {
72         int     TiMode;                 /* Current TI Mode  */
73         __u8    hardware_type;          /* Type of hardware */
74 } __attribute__((packed));
75
76 struct edgeport_port {
77         __u16 uart_base;
78         __u16 dma_address;
79         __u8 shadow_msr;
80         __u8 shadow_mcr;
81         __u8 shadow_lsr;
82         __u8 lsr_mask;
83         __u32 ump_read_timeout;         /* Number of milliseconds the UMP will
84                                            wait without data before completing
85                                            a read short */
86         int baud_rate;
87         int close_pending;
88         int lsr_event;
89         struct async_icount     icount;
90         struct edgeport_serial  *edge_serial;
91         struct usb_serial_port  *port;
92         __u8 bUartMode;         /* Port type, 0: RS232, etc. */
93         spinlock_t ep_lock;
94         int ep_read_urb_state;
95         int ep_write_urb_in_use;
96         struct kfifo write_fifo;
97 };
98
99 struct edgeport_serial {
100         struct product_info product_info;
101         u8 TI_I2C_Type;                 /* Type of I2C in UMP */
102         u8 TiReadI2C;                   /* Set to TRUE if we have read the
103                                            I2c in Boot Mode */
104         struct mutex es_lock;
105         int num_ports_open;
106         struct usb_serial *serial;
107 };
108
109
110 /* Devices that this driver supports */
111 static const struct usb_device_id edgeport_1port_id_table[] = {
112         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_1) },
113         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_TI3410_EDGEPORT_1) },
114         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_TI3410_EDGEPORT_1I) },
115         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_PROXIMITY) },
116         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_MOTION) },
117         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_MOISTURE) },
118         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_TEMPERATURE) },
119         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_HUMIDITY) },
120         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_POWER) },
121         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_LIGHT) },
122         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_RADIATION) },
123         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_DISTANCE) },
124         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_ACCELERATION) },
125         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_PROX_DIST) },
126         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_PLUS_PWR_HP4CD) },
127         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_PLUS_PWR_PCI) },
128         { }
129 };
130
131 static const struct usb_device_id edgeport_2port_id_table[] = {
132         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_2) },
133         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_2C) },
134         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_2I) },
135         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_421) },
136         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_21) },
137         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_42) },
138         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_4) },
139         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_4I) },
140         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_22I) },
141         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_221C) },
142         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_22C) },
143         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_21C) },
144         /* The 4, 8 and 16 port devices show up as multiple 2 port devices */
145         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_4S) },
146         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_8) },
147         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_8S) },
148         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_416) },
149         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_416B) },
150         { }
151 };
152
153 /* Devices that this driver supports */
154 static const struct usb_device_id id_table_combined[] = {
155         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_1) },
156         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_TI3410_EDGEPORT_1) },
157         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_TI3410_EDGEPORT_1I) },
158         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_PROXIMITY) },
159         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_MOTION) },
160         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_MOISTURE) },
161         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_TEMPERATURE) },
162         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_HUMIDITY) },
163         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_POWER) },
164         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_LIGHT) },
165         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_RADIATION) },
166         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_DISTANCE) },
167         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_ACCELERATION) },
168         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_PROX_DIST) },
169         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_PLUS_PWR_HP4CD) },
170         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_PLUS_PWR_PCI) },
171         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_2) },
172         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_2C) },
173         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_2I) },
174         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_421) },
175         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_21) },
176         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_42) },
177         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_4) },
178         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_4I) },
179         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_22I) },
180         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_221C) },
181         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_22C) },
182         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_21C) },
183         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_4S) },
184         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_8) },
185         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_8S) },
186         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_416) },
187         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_416B) },
188         { }
189 };
190
191 MODULE_DEVICE_TABLE(usb, id_table_combined);
192
193 static unsigned char OperationalMajorVersion;
194 static unsigned char OperationalMinorVersion;
195 static unsigned short OperationalBuildNumber;
196
197 static int closing_wait = EDGE_CLOSING_WAIT;
198 static bool ignore_cpu_rev;
199 static int default_uart_mode;           /* RS232 */
200
201 static void edge_tty_recv(struct usb_serial_port *port, unsigned char *data,
202                 int length);
203
204 static void stop_read(struct edgeport_port *edge_port);
205 static int restart_read(struct edgeport_port *edge_port);
206
207 static void edge_set_termios(struct tty_struct *tty,
208                 struct usb_serial_port *port, struct ktermios *old_termios);
209 static void edge_send(struct tty_struct *tty);
210
211 /* sysfs attributes */
212 static int edge_create_sysfs_attrs(struct usb_serial_port *port);
213 static int edge_remove_sysfs_attrs(struct usb_serial_port *port);
214
215
216 static int ti_vread_sync(struct usb_device *dev, __u8 request,
217                                 __u16 value, __u16 index, u8 *data, int size)
218 {
219         int status;
220
221         status = usb_control_msg(dev, usb_rcvctrlpipe(dev, 0), request,
222                         (USB_TYPE_VENDOR | USB_RECIP_DEVICE | USB_DIR_IN),
223                         value, index, data, size, 1000);
224         if (status < 0)
225                 return status;
226         if (status != size) {
227                 dev_dbg(&dev->dev, "%s - wanted to write %d, but only wrote %d\n",
228                         __func__, size, status);
229                 return -ECOMM;
230         }
231         return 0;
232 }
233
234 static int ti_vsend_sync(struct usb_device *dev, __u8 request,
235                                 __u16 value, __u16 index, u8 *data, int size)
236 {
237         int status;
238
239         status = usb_control_msg(dev, usb_sndctrlpipe(dev, 0), request,
240                         (USB_TYPE_VENDOR | USB_RECIP_DEVICE | USB_DIR_OUT),
241                         value, index, data, size, 1000);
242         if (status < 0)
243                 return status;
244         if (status != size) {
245                 dev_dbg(&dev->dev, "%s - wanted to write %d, but only wrote %d\n",
246                         __func__, size, status);
247                 return -ECOMM;
248         }
249         return 0;
250 }
251
252 static int send_cmd(struct usb_device *dev, __u8 command,
253                                 __u8 moduleid, __u16 value, u8 *data,
254                                 int size)
255 {
256         return ti_vsend_sync(dev, command, value, moduleid, data, size);
257 }
258
259 /* clear tx/rx buffers and fifo in TI UMP */
260 static int purge_port(struct usb_serial_port *port, __u16 mask)
261 {
262         int port_number = port->number - port->serial->minor;
263
264         dev_dbg(&port->dev, "%s - port %d, mask %x\n", __func__, port_number, mask);
265
266         return send_cmd(port->serial->dev,
267                                         UMPC_PURGE_PORT,
268                                         (__u8)(UMPM_UART1_PORT + port_number),
269                                         mask,
270                                         NULL,
271                                         0);
272 }
273
274 /**
275  * read_download_mem - Read edgeport memory from TI chip
276  * @dev: usb device pointer
277  * @start_address: Device CPU address at which to read
278  * @length: Length of above data
279  * @address_type: Can read both XDATA and I2C
280  * @buffer: pointer to input data buffer
281  */
282 static int read_download_mem(struct usb_device *dev, int start_address,
283                                 int length, __u8 address_type, __u8 *buffer)
284 {
285         int status = 0;
286         __u8 read_length;
287         __be16 be_start_address;
288
289         dev_dbg(&dev->dev, "%s - @ %x for %d\n", __func__, start_address, length);
290
291         /* Read in blocks of 64 bytes
292          * (TI firmware can't handle more than 64 byte reads)
293          */
294         while (length) {
295                 if (length > 64)
296                         read_length = 64;
297                 else
298                         read_length = (__u8)length;
299
300                 if (read_length > 1) {
301                         dev_dbg(&dev->dev, "%s - @ %x for %d\n", __func__, start_address, read_length);
302                 }
303                 be_start_address = cpu_to_be16(start_address);
304                 status = ti_vread_sync(dev, UMPC_MEMORY_READ,
305                                         (__u16)address_type,
306                                         (__force __u16)be_start_address,
307                                         buffer, read_length);
308
309                 if (status) {
310                         dev_dbg(&dev->dev, "%s - ERROR %x\n", __func__, status);
311                         return status;
312                 }
313
314                 if (read_length > 1)
315                         usb_serial_debug_data(&dev->dev, __func__, read_length, buffer);
316
317                 /* Update pointers/length */
318                 start_address += read_length;
319                 buffer += read_length;
320                 length -= read_length;
321         }
322
323         return status;
324 }
325
326 static int read_ram(struct usb_device *dev, int start_address,
327                                                 int length, __u8 *buffer)
328 {
329         return read_download_mem(dev, start_address, length,
330                                         DTK_ADDR_SPACE_XDATA, buffer);
331 }
332
333 /* Read edgeport memory to a given block */
334 static int read_boot_mem(struct edgeport_serial *serial,
335                                 int start_address, int length, __u8 *buffer)
336 {
337         int status = 0;
338         int i;
339
340         for (i = 0; i < length; i++) {
341                 status = ti_vread_sync(serial->serial->dev,
342                                 UMPC_MEMORY_READ, serial->TI_I2C_Type,
343                                 (__u16)(start_address+i), &buffer[i], 0x01);
344                 if (status) {
345                         dev_dbg(&serial->serial->dev->dev, "%s - ERROR %x\n", __func__, status);
346                         return status;
347                 }
348         }
349
350         dev_dbg(&serial->serial->dev->dev, "%s - start_address = %x, length = %d\n",
351                 __func__, start_address, length);
352         usb_serial_debug_data(&serial->serial->dev->dev, __func__, length, buffer);
353
354         serial->TiReadI2C = 1;
355
356         return status;
357 }
358
359 /* Write given block to TI EPROM memory */
360 static int write_boot_mem(struct edgeport_serial *serial,
361                                 int start_address, int length, __u8 *buffer)
362 {
363         int status = 0;
364         int i;
365         u8 *temp;
366
367         /* Must do a read before write */
368         if (!serial->TiReadI2C) {
369                 temp = kmalloc(1, GFP_KERNEL);
370                 if (!temp) {
371                         dev_err(&serial->serial->dev->dev,
372                                         "%s - out of memory\n", __func__);
373                         return -ENOMEM;
374                 }
375                 status = read_boot_mem(serial, 0, 1, temp);
376                 kfree(temp);
377                 if (status)
378                         return status;
379         }
380
381         for (i = 0; i < length; ++i) {
382                 status = ti_vsend_sync(serial->serial->dev,
383                                 UMPC_MEMORY_WRITE, buffer[i],
384                                 (__u16)(i + start_address), NULL, 0);
385                 if (status)
386                         return status;
387         }
388
389         dev_dbg(&serial->serial->dev->dev, "%s - start_sddr = %x, length = %d\n", __func__, start_address, length);
390         usb_serial_debug_data(&serial->serial->dev->dev, __func__, length, buffer);
391
392         return status;
393 }
394
395
396 /* Write edgeport I2C memory to TI chip */
397 static int write_i2c_mem(struct edgeport_serial *serial,
398                 int start_address, int length, __u8 address_type, __u8 *buffer)
399 {
400         struct device *dev = &serial->serial->dev->dev;
401         int status = 0;
402         int write_length;
403         __be16 be_start_address;
404
405         /* We can only send a maximum of 1 aligned byte page at a time */
406
407         /* calculate the number of bytes left in the first page */
408         write_length = EPROM_PAGE_SIZE -
409                                 (start_address & (EPROM_PAGE_SIZE - 1));
410
411         if (write_length > length)
412                 write_length = length;
413
414         dev_dbg(dev, "%s - BytesInFirstPage Addr = %x, length = %d\n",
415                 __func__, start_address, write_length);
416         usb_serial_debug_data(dev, __func__, write_length, buffer);
417
418         /* Write first page */
419         be_start_address = cpu_to_be16(start_address);
420         status = ti_vsend_sync(serial->serial->dev,
421                                 UMPC_MEMORY_WRITE, (__u16)address_type,
422                                 (__force __u16)be_start_address,
423                                 buffer, write_length);
424         if (status) {
425                 dev_dbg(dev, "%s - ERROR %d\n", __func__, status);
426                 return status;
427         }
428
429         length          -= write_length;
430         start_address   += write_length;
431         buffer          += write_length;
432
433         /* We should be aligned now -- can write
434            max page size bytes at a time */
435         while (length) {
436                 if (length > EPROM_PAGE_SIZE)
437                         write_length = EPROM_PAGE_SIZE;
438                 else
439                         write_length = length;
440
441                 dev_dbg(dev, "%s - Page Write Addr = %x, length = %d\n",
442                         __func__, start_address, write_length);
443                 usb_serial_debug_data(dev, __func__, write_length, buffer);
444
445                 /* Write next page */
446                 be_start_address = cpu_to_be16(start_address);
447                 status = ti_vsend_sync(serial->serial->dev, UMPC_MEMORY_WRITE,
448                                 (__u16)address_type,
449                                 (__force __u16)be_start_address,
450                                 buffer, write_length);
451                 if (status) {
452                         dev_err(dev, "%s - ERROR %d\n", __func__, status);
453                         return status;
454                 }
455
456                 length          -= write_length;
457                 start_address   += write_length;
458                 buffer          += write_length;
459         }
460         return status;
461 }
462
463 /* Examine the UMP DMA registers and LSR
464  *
465  * Check the MSBit of the X and Y DMA byte count registers.
466  * A zero in this bit indicates that the TX DMA buffers are empty
467  * then check the TX Empty bit in the UART.
468  */
469 static int tx_active(struct edgeport_port *port)
470 {
471         int status;
472         struct out_endpoint_desc_block *oedb;
473         __u8 *lsr;
474         int bytes_left = 0;
475
476         oedb = kmalloc(sizeof(*oedb), GFP_KERNEL);
477         if (!oedb) {
478                 dev_err(&port->port->dev, "%s - out of memory\n", __func__);
479                 return -ENOMEM;
480         }
481
482         lsr = kmalloc(1, GFP_KERNEL);   /* Sigh, that's right, just one byte,
483                                            as not all platforms can do DMA
484                                            from stack */
485         if (!lsr) {
486                 kfree(oedb);
487                 return -ENOMEM;
488         }
489         /* Read the DMA Count Registers */
490         status = read_ram(port->port->serial->dev, port->dma_address,
491                                                 sizeof(*oedb), (void *)oedb);
492         if (status)
493                 goto exit_is_tx_active;
494
495         dev_dbg(&port->port->dev, "%s - XByteCount    0x%X\n", __func__, oedb->XByteCount);
496
497         /* and the LSR */
498         status = read_ram(port->port->serial->dev,
499                         port->uart_base + UMPMEM_OFFS_UART_LSR, 1, lsr);
500
501         if (status)
502                 goto exit_is_tx_active;
503         dev_dbg(&port->port->dev, "%s - LSR = 0x%X\n", __func__, *lsr);
504
505         /* If either buffer has data or we are transmitting then return TRUE */
506         if ((oedb->XByteCount & 0x80) != 0)
507                 bytes_left += 64;
508
509         if ((*lsr & UMP_UART_LSR_TX_MASK) == 0)
510                 bytes_left += 1;
511
512         /* We return Not Active if we get any kind of error */
513 exit_is_tx_active:
514         dev_dbg(&port->port->dev, "%s - return %d\n", __func__, bytes_left);
515
516         kfree(lsr);
517         kfree(oedb);
518         return bytes_left;
519 }
520
521 static int choose_config(struct usb_device *dev)
522 {
523         /*
524          * There may be multiple configurations on this device, in which case
525          * we would need to read and parse all of them to find out which one
526          * we want. However, we just support one config at this point,
527          * configuration # 1, which is Config Descriptor 0.
528          */
529
530         dev_dbg(&dev->dev, "%s - Number of Interfaces = %d\n",
531                 __func__, dev->config->desc.bNumInterfaces);
532         dev_dbg(&dev->dev, "%s - MAX Power            = %d\n",
533                 __func__, dev->config->desc.bMaxPower * 2);
534
535         if (dev->config->desc.bNumInterfaces != 1) {
536                 dev_err(&dev->dev, "%s - bNumInterfaces is not 1, ERROR!\n", __func__);
537                 return -ENODEV;
538         }
539
540         return 0;
541 }
542
543 static int read_rom(struct edgeport_serial *serial,
544                                 int start_address, int length, __u8 *buffer)
545 {
546         int status;
547
548         if (serial->product_info.TiMode == TI_MODE_DOWNLOAD) {
549                 status = read_download_mem(serial->serial->dev,
550                                                start_address,
551                                                length,
552                                                serial->TI_I2C_Type,
553                                                buffer);
554         } else {
555                 status = read_boot_mem(serial, start_address, length,
556                                                                 buffer);
557         }
558         return status;
559 }
560
561 static int write_rom(struct edgeport_serial *serial, int start_address,
562                                                 int length, __u8 *buffer)
563 {
564         if (serial->product_info.TiMode == TI_MODE_BOOT)
565                 return write_boot_mem(serial, start_address, length,
566                                                                 buffer);
567
568         if (serial->product_info.TiMode == TI_MODE_DOWNLOAD)
569                 return write_i2c_mem(serial, start_address, length,
570                                                 serial->TI_I2C_Type, buffer);
571         return -EINVAL;
572 }
573
574
575
576 /* Read a descriptor header from I2C based on type */
577 static int get_descriptor_addr(struct edgeport_serial *serial,
578                                 int desc_type, struct ti_i2c_desc *rom_desc)
579 {
580         int start_address;
581         int status;
582
583         /* Search for requested descriptor in I2C */
584         start_address = 2;
585         do {
586                 status = read_rom(serial,
587                                    start_address,
588                                    sizeof(struct ti_i2c_desc),
589                                    (__u8 *)rom_desc);
590                 if (status)
591                         return 0;
592
593                 if (rom_desc->Type == desc_type)
594                         return start_address;
595
596                 start_address = start_address + sizeof(struct ti_i2c_desc)
597                                                         + rom_desc->Size;
598
599         } while ((start_address < TI_MAX_I2C_SIZE) && rom_desc->Type);
600
601         return 0;
602 }
603
604 /* Validate descriptor checksum */
605 static int valid_csum(struct ti_i2c_desc *rom_desc, __u8 *buffer)
606 {
607         __u16 i;
608         __u8 cs = 0;
609
610         for (i = 0; i < rom_desc->Size; i++)
611                 cs = (__u8)(cs + buffer[i]);
612
613         if (cs != rom_desc->CheckSum) {
614                 pr_debug("%s - Mismatch %x - %x", __func__, rom_desc->CheckSum, cs);
615                 return -EINVAL;
616         }
617         return 0;
618 }
619
620 /* Make sure that the I2C image is good */
621 static int check_i2c_image(struct edgeport_serial *serial)
622 {
623         struct device *dev = &serial->serial->dev->dev;
624         int status = 0;
625         struct ti_i2c_desc *rom_desc;
626         int start_address = 2;
627         __u8 *buffer;
628         __u16 ttype;
629
630         rom_desc = kmalloc(sizeof(*rom_desc), GFP_KERNEL);
631         if (!rom_desc) {
632                 dev_err(dev, "%s - out of memory\n", __func__);
633                 return -ENOMEM;
634         }
635         buffer = kmalloc(TI_MAX_I2C_SIZE, GFP_KERNEL);
636         if (!buffer) {
637                 dev_err(dev, "%s - out of memory when allocating buffer\n",
638                                                                 __func__);
639                 kfree(rom_desc);
640                 return -ENOMEM;
641         }
642
643         /* Read the first byte (Signature0) must be 0x52 or 0x10 */
644         status = read_rom(serial, 0, 1, buffer);
645         if (status)
646                 goto out;
647
648         if (*buffer != UMP5152 && *buffer != UMP3410) {
649                 dev_err(dev, "%s - invalid buffer signature\n", __func__);
650                 status = -ENODEV;
651                 goto out;
652         }
653
654         do {
655                 /* Validate the I2C */
656                 status = read_rom(serial,
657                                 start_address,
658                                 sizeof(struct ti_i2c_desc),
659                                 (__u8 *)rom_desc);
660                 if (status)
661                         break;
662
663                 if ((start_address + sizeof(struct ti_i2c_desc) +
664                                         rom_desc->Size) > TI_MAX_I2C_SIZE) {
665                         status = -ENODEV;
666                         dev_dbg(dev, "%s - structure too big, erroring out.\n", __func__);
667                         break;
668                 }
669
670                 dev_dbg(dev, "%s Type = 0x%x\n", __func__, rom_desc->Type);
671
672                 /* Skip type 2 record */
673                 ttype = rom_desc->Type & 0x0f;
674                 if (ttype != I2C_DESC_TYPE_FIRMWARE_BASIC
675                         && ttype != I2C_DESC_TYPE_FIRMWARE_AUTO) {
676                         /* Read the descriptor data */
677                         status = read_rom(serial, start_address +
678                                                 sizeof(struct ti_i2c_desc),
679                                                 rom_desc->Size, buffer);
680                         if (status)
681                                 break;
682
683                         status = valid_csum(rom_desc, buffer);
684                         if (status)
685                                 break;
686                 }
687                 start_address = start_address + sizeof(struct ti_i2c_desc) +
688                                                                 rom_desc->Size;
689
690         } while ((rom_desc->Type != I2C_DESC_TYPE_ION) &&
691                                 (start_address < TI_MAX_I2C_SIZE));
692
693         if ((rom_desc->Type != I2C_DESC_TYPE_ION) ||
694                                 (start_address > TI_MAX_I2C_SIZE))
695                 status = -ENODEV;
696
697 out:
698         kfree(buffer);
699         kfree(rom_desc);
700         return status;
701 }
702
703 static int get_manuf_info(struct edgeport_serial *serial, __u8 *buffer)
704 {
705         int status;
706         int start_address;
707         struct ti_i2c_desc *rom_desc;
708         struct edge_ti_manuf_descriptor *desc;
709         struct device *dev = &serial->serial->dev->dev;
710
711         rom_desc = kmalloc(sizeof(*rom_desc), GFP_KERNEL);
712         if (!rom_desc) {
713                 dev_err(dev, "%s - out of memory\n", __func__);
714                 return -ENOMEM;
715         }
716         start_address = get_descriptor_addr(serial, I2C_DESC_TYPE_ION,
717                                                                 rom_desc);
718
719         if (!start_address) {
720                 dev_dbg(dev, "%s - Edge Descriptor not found in I2C\n", __func__);
721                 status = -ENODEV;
722                 goto exit;
723         }
724
725         /* Read the descriptor data */
726         status = read_rom(serial, start_address+sizeof(struct ti_i2c_desc),
727                                                 rom_desc->Size, buffer);
728         if (status)
729                 goto exit;
730
731         status = valid_csum(rom_desc, buffer);
732
733         desc = (struct edge_ti_manuf_descriptor *)buffer;
734         dev_dbg(dev, "%s - IonConfig      0x%x\n", __func__, desc->IonConfig);
735         dev_dbg(dev, "%s - Version          %d\n", __func__, desc->Version);
736         dev_dbg(dev, "%s - Cpu/Board      0x%x\n", __func__, desc->CpuRev_BoardRev);
737         dev_dbg(dev, "%s - NumPorts         %d\n", __func__, desc->NumPorts);
738         dev_dbg(dev, "%s - NumVirtualPorts  %d\n", __func__, desc->NumVirtualPorts);
739         dev_dbg(dev, "%s - TotalPorts       %d\n", __func__, desc->TotalPorts);
740
741 exit:
742         kfree(rom_desc);
743         return status;
744 }
745
746 /* Build firmware header used for firmware update */
747 static int build_i2c_fw_hdr(__u8 *header, struct device *dev)
748 {
749         __u8 *buffer;
750         int buffer_size;
751         int i;
752         int err;
753         __u8 cs = 0;
754         struct ti_i2c_desc *i2c_header;
755         struct ti_i2c_image_header *img_header;
756         struct ti_i2c_firmware_rec *firmware_rec;
757         const struct firmware *fw;
758         const char *fw_name = "edgeport/down3.bin";
759
760         /* In order to update the I2C firmware we must change the type 2 record
761          * to type 0xF2.  This will force the UMP to come up in Boot Mode.
762          * Then while in boot mode, the driver will download the latest
763          * firmware (padded to 15.5k) into the UMP ram.  And finally when the
764          * device comes back up in download mode the driver will cause the new
765          * firmware to be copied from the UMP Ram to I2C and the firmware will
766          * update the record type from 0xf2 to 0x02.
767          */
768
769         /* Allocate a 15.5k buffer + 2 bytes for version number
770          * (Firmware Record) */
771         buffer_size = (((1024 * 16) - 512 ) +
772                         sizeof(struct ti_i2c_firmware_rec));
773
774         buffer = kmalloc(buffer_size, GFP_KERNEL);
775         if (!buffer) {
776                 dev_err(dev, "%s - out of memory\n", __func__);
777                 return -ENOMEM;
778         }
779
780         // Set entire image of 0xffs
781         memset(buffer, 0xff, buffer_size);
782
783         err = request_firmware(&fw, fw_name, dev);
784         if (err) {
785                 dev_err(dev, "Failed to load image \"%s\" err %d\n",
786                         fw_name, err);
787                 kfree(buffer);
788                 return err;
789         }
790
791         /* Save Download Version Number */
792         OperationalMajorVersion = fw->data[0];
793         OperationalMinorVersion = fw->data[1];
794         OperationalBuildNumber = fw->data[2] | (fw->data[3] << 8);
795
796         /* Copy version number into firmware record */
797         firmware_rec = (struct ti_i2c_firmware_rec *)buffer;
798
799         firmware_rec->Ver_Major = OperationalMajorVersion;
800         firmware_rec->Ver_Minor = OperationalMinorVersion;
801
802         /* Pointer to fw_down memory image */
803         img_header = (struct ti_i2c_image_header *)&fw->data[4];
804
805         memcpy(buffer + sizeof(struct ti_i2c_firmware_rec),
806                 &fw->data[4 + sizeof(struct ti_i2c_image_header)],
807                 le16_to_cpu(img_header->Length));
808
809         release_firmware(fw);
810
811         for (i=0; i < buffer_size; i++) {
812                 cs = (__u8)(cs + buffer[i]);
813         }
814
815         kfree(buffer);
816
817         /* Build new header */
818         i2c_header =  (struct ti_i2c_desc *)header;
819         firmware_rec =  (struct ti_i2c_firmware_rec*)i2c_header->Data;
820
821         i2c_header->Type        = I2C_DESC_TYPE_FIRMWARE_BLANK;
822         i2c_header->Size        = (__u16)buffer_size;
823         i2c_header->CheckSum    = cs;
824         firmware_rec->Ver_Major = OperationalMajorVersion;
825         firmware_rec->Ver_Minor = OperationalMinorVersion;
826
827         return 0;
828 }
829
830 /* Try to figure out what type of I2c we have */
831 static int i2c_type_bootmode(struct edgeport_serial *serial)
832 {
833         struct device *dev = &serial->serial->dev->dev;
834         int status;
835         u8 *data;
836
837         data = kmalloc(1, GFP_KERNEL);
838         if (!data) {
839                 dev_err(dev, "%s - out of memory\n", __func__);
840                 return -ENOMEM;
841         }
842
843         /* Try to read type 2 */
844         status = ti_vread_sync(serial->serial->dev, UMPC_MEMORY_READ,
845                                 DTK_ADDR_SPACE_I2C_TYPE_II, 0, data, 0x01);
846         if (status)
847                 dev_dbg(dev, "%s - read 2 status error = %d\n", __func__, status);
848         else
849                 dev_dbg(dev, "%s - read 2 data = 0x%x\n", __func__, *data);
850         if ((!status) && (*data == UMP5152 || *data == UMP3410)) {
851                 dev_dbg(dev, "%s - ROM_TYPE_II\n", __func__);
852                 serial->TI_I2C_Type = DTK_ADDR_SPACE_I2C_TYPE_II;
853                 goto out;
854         }
855
856         /* Try to read type 3 */
857         status = ti_vread_sync(serial->serial->dev, UMPC_MEMORY_READ,
858                                 DTK_ADDR_SPACE_I2C_TYPE_III, 0, data, 0x01);
859         if (status)
860                 dev_dbg(dev, "%s - read 3 status error = %d\n", __func__, status);
861         else
862                 dev_dbg(dev, "%s - read 2 data = 0x%x\n", __func__, *data);
863         if ((!status) && (*data == UMP5152 || *data == UMP3410)) {
864                 dev_dbg(dev, "%s - ROM_TYPE_III\n", __func__);
865                 serial->TI_I2C_Type = DTK_ADDR_SPACE_I2C_TYPE_III;
866                 goto out;
867         }
868
869         dev_dbg(dev, "%s - Unknown\n", __func__);
870         serial->TI_I2C_Type = DTK_ADDR_SPACE_I2C_TYPE_II;
871         status = -ENODEV;
872 out:
873         kfree(data);
874         return status;
875 }
876
877 static int bulk_xfer(struct usb_serial *serial, void *buffer,
878                                                 int length, int *num_sent)
879 {
880         int status;
881
882         status = usb_bulk_msg(serial->dev,
883                         usb_sndbulkpipe(serial->dev,
884                                 serial->port[0]->bulk_out_endpointAddress),
885                         buffer, length, num_sent, 1000);
886         return status;
887 }
888
889 /* Download given firmware image to the device (IN BOOT MODE) */
890 static int download_code(struct edgeport_serial *serial, __u8 *image,
891                                                         int image_length)
892 {
893         int status = 0;
894         int pos;
895         int transfer;
896         int done;
897
898         /* Transfer firmware image */
899         for (pos = 0; pos < image_length; ) {
900                 /* Read the next buffer from file */
901                 transfer = image_length - pos;
902                 if (transfer > EDGE_FW_BULK_MAX_PACKET_SIZE)
903                         transfer = EDGE_FW_BULK_MAX_PACKET_SIZE;
904
905                 /* Transfer data */
906                 status = bulk_xfer(serial->serial, &image[pos],
907                                                         transfer, &done);
908                 if (status)
909                         break;
910                 /* Advance buffer pointer */
911                 pos += done;
912         }
913
914         return status;
915 }
916
917 /* FIXME!!! */
918 static int config_boot_dev(struct usb_device *dev)
919 {
920         return 0;
921 }
922
923 static int ti_cpu_rev(struct edge_ti_manuf_descriptor *desc)
924 {
925         return TI_GET_CPU_REVISION(desc->CpuRev_BoardRev);
926 }
927
928 /**
929  * DownloadTIFirmware - Download run-time operating firmware to the TI5052
930  *
931  * This routine downloads the main operating code into the TI5052, using the
932  * boot code already burned into E2PROM or ROM.
933  */
934 static int download_fw(struct edgeport_serial *serial)
935 {
936         struct device *dev = &serial->serial->dev->dev;
937         int status = 0;
938         int start_address;
939         struct edge_ti_manuf_descriptor *ti_manuf_desc;
940         struct usb_interface_descriptor *interface;
941         int download_cur_ver;
942         int download_new_ver;
943
944         /* This routine is entered by both the BOOT mode and the Download mode
945          * We can determine which code is running by the reading the config
946          * descriptor and if we have only one bulk pipe it is in boot mode
947          */
948         serial->product_info.hardware_type = HARDWARE_TYPE_TIUMP;
949
950         /* Default to type 2 i2c */
951         serial->TI_I2C_Type = DTK_ADDR_SPACE_I2C_TYPE_II;
952
953         status = choose_config(serial->serial->dev);
954         if (status)
955                 return status;
956
957         interface = &serial->serial->interface->cur_altsetting->desc;
958         if (!interface) {
959                 dev_err(dev, "%s - no interface set, error!\n", __func__);
960                 return -ENODEV;
961         }
962
963         /*
964          * Setup initial mode -- the default mode 0 is TI_MODE_CONFIGURING
965          * if we have more than one endpoint we are definitely in download
966          * mode
967          */
968         if (interface->bNumEndpoints > 1)
969                 serial->product_info.TiMode = TI_MODE_DOWNLOAD;
970         else
971                 /* Otherwise we will remain in configuring mode */
972                 serial->product_info.TiMode = TI_MODE_CONFIGURING;
973
974         /********************************************************************/
975         /* Download Mode */
976         /********************************************************************/
977         if (serial->product_info.TiMode == TI_MODE_DOWNLOAD) {
978                 struct ti_i2c_desc *rom_desc;
979
980                 dev_dbg(dev, "%s - RUNNING IN DOWNLOAD MODE\n", __func__);
981
982                 status = check_i2c_image(serial);
983                 if (status) {
984                         dev_dbg(dev, "%s - DOWNLOAD MODE -- BAD I2C\n", __func__);
985                         return status;
986                 }
987
988                 /* Validate Hardware version number
989                  * Read Manufacturing Descriptor from TI Based Edgeport
990                  */
991                 ti_manuf_desc = kmalloc(sizeof(*ti_manuf_desc), GFP_KERNEL);
992                 if (!ti_manuf_desc) {
993                         dev_err(dev, "%s - out of memory.\n", __func__);
994                         return -ENOMEM;
995                 }
996                 status = get_manuf_info(serial, (__u8 *)ti_manuf_desc);
997                 if (status) {
998                         kfree(ti_manuf_desc);
999                         return status;
1000                 }
1001
1002                 /* Check version number of ION descriptor */
1003                 if (!ignore_cpu_rev && ti_cpu_rev(ti_manuf_desc) < 2) {
1004                         dev_dbg(dev, "%s - Wrong CPU Rev %d (Must be 2)\n",
1005                                 __func__, ti_cpu_rev(ti_manuf_desc));
1006                         kfree(ti_manuf_desc);
1007                         return -EINVAL;
1008                 }
1009
1010                 rom_desc = kmalloc(sizeof(*rom_desc), GFP_KERNEL);
1011                 if (!rom_desc) {
1012                         dev_err(dev, "%s - out of memory.\n", __func__);
1013                         kfree(ti_manuf_desc);
1014                         return -ENOMEM;
1015                 }
1016
1017                 /* Search for type 2 record (firmware record) */
1018                 start_address = get_descriptor_addr(serial,
1019                                 I2C_DESC_TYPE_FIRMWARE_BASIC, rom_desc);
1020                 if (start_address != 0) {
1021                         struct ti_i2c_firmware_rec *firmware_version;
1022                         u8 *record;
1023
1024                         dev_dbg(dev, "%s - Found Type FIRMWARE (Type 2) record\n", __func__);
1025
1026                         firmware_version = kmalloc(sizeof(*firmware_version),
1027                                                                 GFP_KERNEL);
1028                         if (!firmware_version) {
1029                                 dev_err(dev, "%s - out of memory.\n", __func__);
1030                                 kfree(rom_desc);
1031                                 kfree(ti_manuf_desc);
1032                                 return -ENOMEM;
1033                         }
1034
1035                         /* Validate version number
1036                          * Read the descriptor data
1037                          */
1038                         status = read_rom(serial, start_address +
1039                                         sizeof(struct ti_i2c_desc),
1040                                         sizeof(struct ti_i2c_firmware_rec),
1041                                         (__u8 *)firmware_version);
1042                         if (status) {
1043                                 kfree(firmware_version);
1044                                 kfree(rom_desc);
1045                                 kfree(ti_manuf_desc);
1046                                 return status;
1047                         }
1048
1049                         /* Check version number of download with current
1050                            version in I2c */
1051                         download_cur_ver = (firmware_version->Ver_Major << 8) +
1052                                            (firmware_version->Ver_Minor);
1053                         download_new_ver = (OperationalMajorVersion << 8) +
1054                                            (OperationalMinorVersion);
1055
1056                         dev_dbg(dev, "%s - >> FW Versions Device %d.%d  Driver %d.%d\n",
1057                                 __func__, firmware_version->Ver_Major,
1058                                 firmware_version->Ver_Minor,
1059                                 OperationalMajorVersion,
1060                                 OperationalMinorVersion);
1061
1062                         /* Check if we have an old version in the I2C and
1063                            update if necessary */
1064                         if (download_cur_ver < download_new_ver) {
1065                                 dev_dbg(dev, "%s - Update I2C dld from %d.%d to %d.%d\n",
1066                                         __func__,
1067                                         firmware_version->Ver_Major,
1068                                         firmware_version->Ver_Minor,
1069                                         OperationalMajorVersion,
1070                                         OperationalMinorVersion);
1071
1072                                 record = kmalloc(1, GFP_KERNEL);
1073                                 if (!record) {
1074                                         dev_err(dev, "%s - out of memory.\n",
1075                                                         __func__);
1076                                         kfree(firmware_version);
1077                                         kfree(rom_desc);
1078                                         kfree(ti_manuf_desc);
1079                                         return -ENOMEM;
1080                                 }
1081                                 /* In order to update the I2C firmware we must
1082                                  * change the type 2 record to type 0xF2. This
1083                                  * will force the UMP to come up in Boot Mode.
1084                                  * Then while in boot mode, the driver will
1085                                  * download the latest firmware (padded to
1086                                  * 15.5k) into the UMP ram. Finally when the
1087                                  * device comes back up in download mode the
1088                                  * driver will cause the new firmware to be
1089                                  * copied from the UMP Ram to I2C and the
1090                                  * firmware will update the record type from
1091                                  * 0xf2 to 0x02.
1092                                  */
1093                                 *record = I2C_DESC_TYPE_FIRMWARE_BLANK;
1094
1095                                 /* Change the I2C Firmware record type to
1096                                    0xf2 to trigger an update */
1097                                 status = write_rom(serial, start_address,
1098                                                 sizeof(*record), record);
1099                                 if (status) {
1100                                         kfree(record);
1101                                         kfree(firmware_version);
1102                                         kfree(rom_desc);
1103                                         kfree(ti_manuf_desc);
1104                                         return status;
1105                                 }
1106
1107                                 /* verify the write -- must do this in order
1108                                  * for write to complete before we do the
1109                                  * hardware reset
1110                                  */
1111                                 status = read_rom(serial,
1112                                                         start_address,
1113                                                         sizeof(*record),
1114                                                         record);
1115                                 if (status) {
1116                                         kfree(record);
1117                                         kfree(firmware_version);
1118                                         kfree(rom_desc);
1119                                         kfree(ti_manuf_desc);
1120                                         return status;
1121                                 }
1122
1123                                 if (*record != I2C_DESC_TYPE_FIRMWARE_BLANK) {
1124                                         dev_err(dev, "%s - error resetting device\n", __func__);
1125                                         kfree(record);
1126                                         kfree(firmware_version);
1127                                         kfree(rom_desc);
1128                                         kfree(ti_manuf_desc);
1129                                         return -ENODEV;
1130                                 }
1131
1132                                 dev_dbg(dev, "%s - HARDWARE RESET\n", __func__);
1133
1134                                 /* Reset UMP -- Back to BOOT MODE */
1135                                 status = ti_vsend_sync(serial->serial->dev,
1136                                                 UMPC_HARDWARE_RESET,
1137                                                 0, 0, NULL, 0);
1138
1139                                 dev_dbg(dev, "%s - HARDWARE RESET return %d\n", __func__, status);
1140
1141                                 /* return an error on purpose. */
1142                                 kfree(record);
1143                                 kfree(firmware_version);
1144                                 kfree(rom_desc);
1145                                 kfree(ti_manuf_desc);
1146                                 return -ENODEV;
1147                         }
1148                         kfree(firmware_version);
1149                 }
1150                 /* Search for type 0xF2 record (firmware blank record) */
1151                 else if ((start_address = get_descriptor_addr(serial, I2C_DESC_TYPE_FIRMWARE_BLANK, rom_desc)) != 0) {
1152 #define HEADER_SIZE     (sizeof(struct ti_i2c_desc) + \
1153                                         sizeof(struct ti_i2c_firmware_rec))
1154                         __u8 *header;
1155                         __u8 *vheader;
1156
1157                         header = kmalloc(HEADER_SIZE, GFP_KERNEL);
1158                         if (!header) {
1159                                 dev_err(dev, "%s - out of memory.\n", __func__);
1160                                 kfree(rom_desc);
1161                                 kfree(ti_manuf_desc);
1162                                 return -ENOMEM;
1163                         }
1164
1165                         vheader = kmalloc(HEADER_SIZE, GFP_KERNEL);
1166                         if (!vheader) {
1167                                 dev_err(dev, "%s - out of memory.\n", __func__);
1168                                 kfree(header);
1169                                 kfree(rom_desc);
1170                                 kfree(ti_manuf_desc);
1171                                 return -ENOMEM;
1172                         }
1173
1174                         dev_dbg(dev, "%s - Found Type BLANK FIRMWARE (Type F2) record\n", __func__);
1175
1176                         /*
1177                          * In order to update the I2C firmware we must change
1178                          * the type 2 record to type 0xF2. This will force the
1179                          * UMP to come up in Boot Mode.  Then while in boot
1180                          * mode, the driver will download the latest firmware
1181                          * (padded to 15.5k) into the UMP ram. Finally when the
1182                          * device comes back up in download mode the driver
1183                          * will cause the new firmware to be copied from the
1184                          * UMP Ram to I2C and the firmware will update the
1185                          * record type from 0xf2 to 0x02.
1186                          */
1187                         status = build_i2c_fw_hdr(header, dev);
1188                         if (status) {
1189                                 kfree(vheader);
1190                                 kfree(header);
1191                                 kfree(rom_desc);
1192                                 kfree(ti_manuf_desc);
1193                                 return -EINVAL;
1194                         }
1195
1196                         /* Update I2C with type 0xf2 record with correct
1197                            size and checksum */
1198                         status = write_rom(serial,
1199                                                 start_address,
1200                                                 HEADER_SIZE,
1201                                                 header);
1202                         if (status) {
1203                                 kfree(vheader);
1204                                 kfree(header);
1205                                 kfree(rom_desc);
1206                                 kfree(ti_manuf_desc);
1207                                 return -EINVAL;
1208                         }
1209
1210                         /* verify the write -- must do this in order for
1211                            write to complete before we do the hardware reset */
1212                         status = read_rom(serial, start_address,
1213                                                         HEADER_SIZE, vheader);
1214
1215                         if (status) {
1216                                 dev_dbg(dev, "%s - can't read header back\n", __func__);
1217                                 kfree(vheader);
1218                                 kfree(header);
1219                                 kfree(rom_desc);
1220                                 kfree(ti_manuf_desc);
1221                                 return status;
1222                         }
1223                         if (memcmp(vheader, header, HEADER_SIZE)) {
1224                                 dev_dbg(dev, "%s - write download record failed\n", __func__);
1225                                 kfree(vheader);
1226                                 kfree(header);
1227                                 kfree(rom_desc);
1228                                 kfree(ti_manuf_desc);
1229                                 return -EINVAL;
1230                         }
1231
1232                         kfree(vheader);
1233                         kfree(header);
1234
1235                         dev_dbg(dev, "%s - Start firmware update\n", __func__);
1236
1237                         /* Tell firmware to copy download image into I2C */
1238                         status = ti_vsend_sync(serial->serial->dev,
1239                                         UMPC_COPY_DNLD_TO_I2C, 0, 0, NULL, 0);
1240
1241                         dev_dbg(dev, "%s - Update complete 0x%x\n", __func__, status);
1242                         if (status) {
1243                                 dev_err(dev,
1244                                         "%s - UMPC_COPY_DNLD_TO_I2C failed\n",
1245                                                                 __func__);
1246                                 kfree(rom_desc);
1247                                 kfree(ti_manuf_desc);
1248                                 return status;
1249                         }
1250                 }
1251
1252                 // The device is running the download code
1253                 kfree(rom_desc);
1254                 kfree(ti_manuf_desc);
1255                 return 0;
1256         }
1257
1258         /********************************************************************/
1259         /* Boot Mode */
1260         /********************************************************************/
1261         dev_dbg(dev, "%s - RUNNING IN BOOT MODE\n", __func__);
1262
1263         /* Configure the TI device so we can use the BULK pipes for download */
1264         status = config_boot_dev(serial->serial->dev);
1265         if (status)
1266                 return status;
1267
1268         if (le16_to_cpu(serial->serial->dev->descriptor.idVendor)
1269                                                         != USB_VENDOR_ID_ION) {
1270                 dev_dbg(dev, "%s - VID = 0x%x\n", __func__,
1271                         le16_to_cpu(serial->serial->dev->descriptor.idVendor));
1272                 serial->TI_I2C_Type = DTK_ADDR_SPACE_I2C_TYPE_II;
1273                 goto stayinbootmode;
1274         }
1275
1276         /* We have an ION device (I2c Must be programmed)
1277            Determine I2C image type */
1278         if (i2c_type_bootmode(serial))
1279                 goto stayinbootmode;
1280
1281         /* Check for ION Vendor ID and that the I2C is valid */
1282         if (!check_i2c_image(serial)) {
1283                 struct ti_i2c_image_header *header;
1284                 int i;
1285                 __u8 cs = 0;
1286                 __u8 *buffer;
1287                 int buffer_size;
1288                 int err;
1289                 const struct firmware *fw;
1290                 const char *fw_name = "edgeport/down3.bin";
1291
1292                 /* Validate Hardware version number
1293                  * Read Manufacturing Descriptor from TI Based Edgeport
1294                  */
1295                 ti_manuf_desc = kmalloc(sizeof(*ti_manuf_desc), GFP_KERNEL);
1296                 if (!ti_manuf_desc) {
1297                         dev_err(dev, "%s - out of memory.\n", __func__);
1298                         return -ENOMEM;
1299                 }
1300                 status = get_manuf_info(serial, (__u8 *)ti_manuf_desc);
1301                 if (status) {
1302                         kfree(ti_manuf_desc);
1303                         goto stayinbootmode;
1304                 }
1305
1306                 /* Check for version 2 */
1307                 if (!ignore_cpu_rev && ti_cpu_rev(ti_manuf_desc) < 2) {
1308                         dev_dbg(dev, "%s - Wrong CPU Rev %d (Must be 2)\n",
1309                                 __func__, ti_cpu_rev(ti_manuf_desc));
1310                         kfree(ti_manuf_desc);
1311                         goto stayinbootmode;
1312                 }
1313
1314                 kfree(ti_manuf_desc);
1315
1316                 /*
1317                  * In order to update the I2C firmware we must change the type
1318                  * 2 record to type 0xF2. This will force the UMP to come up
1319                  * in Boot Mode.  Then while in boot mode, the driver will
1320                  * download the latest firmware (padded to 15.5k) into the
1321                  * UMP ram. Finally when the device comes back up in download
1322                  * mode the driver will cause the new firmware to be copied
1323                  * from the UMP Ram to I2C and the firmware will update the
1324                  * record type from 0xf2 to 0x02.
1325                  *
1326                  * Do we really have to copy the whole firmware image,
1327                  * or could we do this in place!
1328                  */
1329
1330                 /* Allocate a 15.5k buffer + 3 byte header */
1331                 buffer_size = (((1024 * 16) - 512) +
1332                                         sizeof(struct ti_i2c_image_header));
1333                 buffer = kmalloc(buffer_size, GFP_KERNEL);
1334                 if (!buffer) {
1335                         dev_err(dev, "%s - out of memory\n", __func__);
1336                         return -ENOMEM;
1337                 }
1338
1339                 /* Initialize the buffer to 0xff (pad the buffer) */
1340                 memset(buffer, 0xff, buffer_size);
1341
1342                 err = request_firmware(&fw, fw_name, dev);
1343                 if (err) {
1344                         dev_err(dev, "Failed to load image \"%s\" err %d\n",
1345                                 fw_name, err);
1346                         kfree(buffer);
1347                         return err;
1348                 }
1349                 memcpy(buffer, &fw->data[4], fw->size - 4);
1350                 release_firmware(fw);
1351
1352                 for (i = sizeof(struct ti_i2c_image_header);
1353                                 i < buffer_size; i++) {
1354                         cs = (__u8)(cs + buffer[i]);
1355                 }
1356
1357                 header = (struct ti_i2c_image_header *)buffer;
1358
1359                 /* update length and checksum after padding */
1360                 header->Length   = cpu_to_le16((__u16)(buffer_size -
1361                                         sizeof(struct ti_i2c_image_header)));
1362                 header->CheckSum = cs;
1363
1364                 /* Download the operational code  */
1365                 dev_dbg(dev, "%s - Downloading operational code image (TI UMP)\n", __func__);
1366                 status = download_code(serial, buffer, buffer_size);
1367
1368                 kfree(buffer);
1369
1370                 if (status) {
1371                         dev_dbg(dev, "%s - Error downloading operational code image\n", __func__);
1372                         return status;
1373                 }
1374
1375                 /* Device will reboot */
1376                 serial->product_info.TiMode = TI_MODE_TRANSITIONING;
1377
1378                 dev_dbg(dev, "%s - Download successful -- Device rebooting...\n", __func__);
1379
1380                 /* return an error on purpose */
1381                 return -ENODEV;
1382         }
1383
1384 stayinbootmode:
1385         /* Eprom is invalid or blank stay in boot mode */
1386         dev_dbg(dev, "%s - STAYING IN BOOT MODE\n", __func__);
1387         serial->product_info.TiMode = TI_MODE_BOOT;
1388
1389         return 0;
1390 }
1391
1392
1393 static int ti_do_config(struct edgeport_port *port, int feature, int on)
1394 {
1395         int port_number = port->port->number - port->port->serial->minor;
1396         on = !!on;      /* 1 or 0 not bitmask */
1397         return send_cmd(port->port->serial->dev,
1398                         feature, (__u8)(UMPM_UART1_PORT + port_number),
1399                         on, NULL, 0);
1400 }
1401
1402
1403 static int restore_mcr(struct edgeport_port *port, __u8 mcr)
1404 {
1405         int status = 0;
1406
1407         dev_dbg(&port->port->dev, "%s - %x\n", __func__, mcr);
1408
1409         status = ti_do_config(port, UMPC_SET_CLR_DTR, mcr & MCR_DTR);
1410         if (status)
1411                 return status;
1412         status = ti_do_config(port, UMPC_SET_CLR_RTS, mcr & MCR_RTS);
1413         if (status)
1414                 return status;
1415         return ti_do_config(port, UMPC_SET_CLR_LOOPBACK, mcr & MCR_LOOPBACK);
1416 }
1417
1418 /* Convert TI LSR to standard UART flags */
1419 static __u8 map_line_status(__u8 ti_lsr)
1420 {
1421         __u8 lsr = 0;
1422
1423 #define MAP_FLAG(flagUmp, flagUart)    \
1424         if (ti_lsr & flagUmp) \
1425                 lsr |= flagUart;
1426
1427         MAP_FLAG(UMP_UART_LSR_OV_MASK, LSR_OVER_ERR)    /* overrun */
1428         MAP_FLAG(UMP_UART_LSR_PE_MASK, LSR_PAR_ERR)     /* parity error */
1429         MAP_FLAG(UMP_UART_LSR_FE_MASK, LSR_FRM_ERR)     /* framing error */
1430         MAP_FLAG(UMP_UART_LSR_BR_MASK, LSR_BREAK)       /* break detected */
1431         MAP_FLAG(UMP_UART_LSR_RX_MASK, LSR_RX_AVAIL)    /* rx data available */
1432         MAP_FLAG(UMP_UART_LSR_TX_MASK, LSR_TX_EMPTY)    /* tx hold reg empty */
1433
1434 #undef MAP_FLAG
1435
1436         return lsr;
1437 }
1438
1439 static void handle_new_msr(struct edgeport_port *edge_port, __u8 msr)
1440 {
1441         struct async_icount *icount;
1442         struct tty_struct *tty;
1443
1444         dev_dbg(&edge_port->port->dev, "%s - %02x\n", __func__, msr);
1445
1446         if (msr & (EDGEPORT_MSR_DELTA_CTS | EDGEPORT_MSR_DELTA_DSR |
1447                         EDGEPORT_MSR_DELTA_RI | EDGEPORT_MSR_DELTA_CD)) {
1448                 icount = &edge_port->icount;
1449
1450                 /* update input line counters */
1451                 if (msr & EDGEPORT_MSR_DELTA_CTS)
1452                         icount->cts++;
1453                 if (msr & EDGEPORT_MSR_DELTA_DSR)
1454                         icount->dsr++;
1455                 if (msr & EDGEPORT_MSR_DELTA_CD)
1456                         icount->dcd++;
1457                 if (msr & EDGEPORT_MSR_DELTA_RI)
1458                         icount->rng++;
1459                 wake_up_interruptible(&edge_port->port->delta_msr_wait);
1460         }
1461
1462         /* Save the new modem status */
1463         edge_port->shadow_msr = msr & 0xf0;
1464
1465         tty = tty_port_tty_get(&edge_port->port->port);
1466         /* handle CTS flow control */
1467         if (tty && C_CRTSCTS(tty)) {
1468                 if (msr & EDGEPORT_MSR_CTS) {
1469                         tty->hw_stopped = 0;
1470                         tty_wakeup(tty);
1471                 } else {
1472                         tty->hw_stopped = 1;
1473                 }
1474         }
1475         tty_kref_put(tty);
1476 }
1477
1478 static void handle_new_lsr(struct edgeport_port *edge_port, int lsr_data,
1479                                                         __u8 lsr, __u8 data)
1480 {
1481         struct async_icount *icount;
1482         __u8 new_lsr = (__u8)(lsr & (__u8)(LSR_OVER_ERR | LSR_PAR_ERR |
1483                                                 LSR_FRM_ERR | LSR_BREAK));
1484
1485         dev_dbg(&edge_port->port->dev, "%s - %02x\n", __func__, new_lsr);
1486
1487         edge_port->shadow_lsr = lsr;
1488
1489         if (new_lsr & LSR_BREAK)
1490                 /*
1491                  * Parity and Framing errors only count if they
1492                  * occur exclusive of a break being received.
1493                  */
1494                 new_lsr &= (__u8)(LSR_OVER_ERR | LSR_BREAK);
1495
1496         /* Place LSR data byte into Rx buffer */
1497         if (lsr_data)
1498                 edge_tty_recv(edge_port->port, &data, 1);
1499
1500         /* update input line counters */
1501         icount = &edge_port->icount;
1502         if (new_lsr & LSR_BREAK)
1503                 icount->brk++;
1504         if (new_lsr & LSR_OVER_ERR)
1505                 icount->overrun++;
1506         if (new_lsr & LSR_PAR_ERR)
1507                 icount->parity++;
1508         if (new_lsr & LSR_FRM_ERR)
1509                 icount->frame++;
1510 }
1511
1512
1513 static void edge_interrupt_callback(struct urb *urb)
1514 {
1515         struct edgeport_serial *edge_serial = urb->context;
1516         struct usb_serial_port *port;
1517         struct edgeport_port *edge_port;
1518         struct device *dev;
1519         unsigned char *data = urb->transfer_buffer;
1520         int length = urb->actual_length;
1521         int port_number;
1522         int function;
1523         int retval;
1524         __u8 lsr;
1525         __u8 msr;
1526         int status = urb->status;
1527
1528         switch (status) {
1529         case 0:
1530                 /* success */
1531                 break;
1532         case -ECONNRESET:
1533         case -ENOENT:
1534         case -ESHUTDOWN:
1535                 /* this urb is terminated, clean up */
1536                 dev_dbg(&urb->dev->dev, "%s - urb shutting down with status: %d\n",
1537                     __func__, status);
1538                 return;
1539         default:
1540                 dev_err(&urb->dev->dev, "%s - nonzero urb status received: "
1541                         "%d\n", __func__, status);
1542                 goto exit;
1543         }
1544
1545         if (!length) {
1546                 dev_dbg(&urb->dev->dev, "%s - no data in urb\n", __func__);
1547                 goto exit;
1548         }
1549
1550         dev = &edge_serial->serial->dev->dev;
1551         usb_serial_debug_data(dev, __func__, length, data);
1552
1553         if (length != 2) {
1554                 dev_dbg(dev, "%s - expecting packet of size 2, got %d\n", __func__, length);
1555                 goto exit;
1556         }
1557
1558         port_number = TIUMP_GET_PORT_FROM_CODE(data[0]);
1559         function    = TIUMP_GET_FUNC_FROM_CODE(data[0]);
1560         dev_dbg(dev, "%s - port_number %d, function %d, info 0x%x\n", __func__,
1561                 port_number, function, data[1]);
1562         port = edge_serial->serial->port[port_number];
1563         edge_port = usb_get_serial_port_data(port);
1564         if (!edge_port) {
1565                 dev_dbg(dev, "%s - edge_port not found\n", __func__);
1566                 return;
1567         }
1568         switch (function) {
1569         case TIUMP_INTERRUPT_CODE_LSR:
1570                 lsr = map_line_status(data[1]);
1571                 if (lsr & UMP_UART_LSR_DATA_MASK) {
1572                         /* Save the LSR event for bulk read
1573                            completion routine */
1574                         dev_dbg(dev, "%s - LSR Event Port %u LSR Status = %02x\n",
1575                                 __func__, port_number, lsr);
1576                         edge_port->lsr_event = 1;
1577                         edge_port->lsr_mask = lsr;
1578                 } else {
1579                         dev_dbg(dev, "%s - ===== Port %d LSR Status = %02x ======\n",
1580                                 __func__, port_number, lsr);
1581                         handle_new_lsr(edge_port, 0, lsr, 0);
1582                 }
1583                 break;
1584
1585         case TIUMP_INTERRUPT_CODE_MSR:  /* MSR */
1586                 /* Copy MSR from UMP */
1587                 msr = data[1];
1588                 dev_dbg(dev, "%s - ===== Port %u MSR Status = %02x ======\n",
1589                         __func__, port_number, msr);
1590                 handle_new_msr(edge_port, msr);
1591                 break;
1592
1593         default:
1594                 dev_err(&urb->dev->dev,
1595                         "%s - Unknown Interrupt code from UMP %x\n",
1596                         __func__, data[1]);
1597                 break;
1598
1599         }
1600
1601 exit:
1602         retval = usb_submit_urb(urb, GFP_ATOMIC);
1603         if (retval)
1604                 dev_err(&urb->dev->dev,
1605                         "%s - usb_submit_urb failed with result %d\n",
1606                          __func__, retval);
1607 }
1608
1609 static void edge_bulk_in_callback(struct urb *urb)
1610 {
1611         struct edgeport_port *edge_port = urb->context;
1612         struct device *dev = &edge_port->port->dev;
1613         unsigned char *data = urb->transfer_buffer;
1614         int retval = 0;
1615         int port_number;
1616         int status = urb->status;
1617
1618         switch (status) {
1619         case 0:
1620                 /* success */
1621                 break;
1622         case -ECONNRESET:
1623         case -ENOENT:
1624         case -ESHUTDOWN:
1625                 /* this urb is terminated, clean up */
1626                 dev_dbg(&urb->dev->dev, "%s - urb shutting down with status: %d\n", __func__, status);
1627                 return;
1628         default:
1629                 dev_err(&urb->dev->dev, "%s - nonzero read bulk status received: %d\n", __func__, status);
1630         }
1631
1632         if (status == -EPIPE)
1633                 goto exit;
1634
1635         if (status) {
1636                 dev_err(&urb->dev->dev, "%s - stopping read!\n", __func__);
1637                 return;
1638         }
1639
1640         port_number = edge_port->port->number - edge_port->port->serial->minor;
1641
1642         if (edge_port->lsr_event) {
1643                 edge_port->lsr_event = 0;
1644                 dev_dbg(dev, "%s ===== Port %u LSR Status = %02x, Data = %02x ======\n",
1645                         __func__, port_number, edge_port->lsr_mask, *data);
1646                 handle_new_lsr(edge_port, 1, edge_port->lsr_mask, *data);
1647                 /* Adjust buffer length/pointer */
1648                 --urb->actual_length;
1649                 ++data;
1650         }
1651
1652         if (urb->actual_length) {
1653                 usb_serial_debug_data(dev, __func__, urb->actual_length, data);
1654                 if (edge_port->close_pending)
1655                         dev_dbg(dev, "%s - close pending, dropping data on the floor\n",
1656                                                                 __func__);
1657                 else
1658                         edge_tty_recv(edge_port->port, data,
1659                                         urb->actual_length);
1660                 edge_port->icount.rx += urb->actual_length;
1661         }
1662
1663 exit:
1664         /* continue read unless stopped */
1665         spin_lock(&edge_port->ep_lock);
1666         if (edge_port->ep_read_urb_state == EDGE_READ_URB_RUNNING)
1667                 retval = usb_submit_urb(urb, GFP_ATOMIC);
1668         else if (edge_port->ep_read_urb_state == EDGE_READ_URB_STOPPING)
1669                 edge_port->ep_read_urb_state = EDGE_READ_URB_STOPPED;
1670
1671         spin_unlock(&edge_port->ep_lock);
1672         if (retval)
1673                 dev_err(dev, "%s - usb_submit_urb failed with result %d\n", __func__, retval);
1674 }
1675
1676 static void edge_tty_recv(struct usb_serial_port *port, unsigned char *data,
1677                 int length)
1678 {
1679         int queued;
1680
1681         queued = tty_insert_flip_string(&port->port, data, length);
1682         if (queued < length)
1683                 dev_err(&port->dev, "%s - dropping data, %d bytes lost\n",
1684                         __func__, length - queued);
1685         tty_flip_buffer_push(&port->port);
1686 }
1687
1688 static void edge_bulk_out_callback(struct urb *urb)
1689 {
1690         struct usb_serial_port *port = urb->context;
1691         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
1692         int status = urb->status;
1693         struct tty_struct *tty;
1694
1695         edge_port->ep_write_urb_in_use = 0;
1696
1697         switch (status) {
1698         case 0:
1699                 /* success */
1700                 break;
1701         case -ECONNRESET:
1702         case -ENOENT:
1703         case -ESHUTDOWN:
1704                 /* this urb is terminated, clean up */
1705                 dev_dbg(&urb->dev->dev, "%s - urb shutting down with status: %d\n",
1706                     __func__, status);
1707                 return;
1708         default:
1709                 dev_err_console(port, "%s - nonzero write bulk status "
1710                         "received: %d\n", __func__, status);
1711         }
1712
1713         /* send any buffered data */
1714         tty = tty_port_tty_get(&port->port);
1715         edge_send(tty);
1716         tty_kref_put(tty);
1717 }
1718
1719 static int edge_open(struct tty_struct *tty, struct usb_serial_port *port)
1720 {
1721         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
1722         struct edgeport_serial *edge_serial;
1723         struct usb_device *dev;
1724         struct urb *urb;
1725         int port_number;
1726         int status;
1727         u16 open_settings;
1728         u8 transaction_timeout;
1729
1730         if (edge_port == NULL)
1731                 return -ENODEV;
1732
1733         port_number = port->number - port->serial->minor;
1734         switch (port_number) {
1735         case 0:
1736                 edge_port->uart_base = UMPMEM_BASE_UART1;
1737                 edge_port->dma_address = UMPD_OEDB1_ADDRESS;
1738                 break;
1739         case 1:
1740                 edge_port->uart_base = UMPMEM_BASE_UART2;
1741                 edge_port->dma_address = UMPD_OEDB2_ADDRESS;
1742                 break;
1743         default:
1744                 dev_err(&port->dev, "Unknown port number!!!\n");
1745                 return -ENODEV;
1746         }
1747
1748         dev_dbg(&port->dev, "%s - port_number = %d, uart_base = %04x, dma_address = %04x\n",
1749                 __func__, port_number, edge_port->uart_base, edge_port->dma_address);
1750
1751         dev = port->serial->dev;
1752
1753         memset(&(edge_port->icount), 0x00, sizeof(edge_port->icount));
1754
1755         /* turn off loopback */
1756         status = ti_do_config(edge_port, UMPC_SET_CLR_LOOPBACK, 0);
1757         if (status) {
1758                 dev_err(&port->dev,
1759                                 "%s - cannot send clear loopback command, %d\n",
1760                         __func__, status);
1761                 return status;
1762         }
1763
1764         /* set up the port settings */
1765         if (tty)
1766                 edge_set_termios(tty, port, &tty->termios);
1767
1768         /* open up the port */
1769
1770         /* milliseconds to timeout for DMA transfer */
1771         transaction_timeout = 2;
1772
1773         edge_port->ump_read_timeout =
1774                                 max(20, ((transaction_timeout * 3) / 2));
1775
1776         /* milliseconds to timeout for DMA transfer */
1777         open_settings = (u8)(UMP_DMA_MODE_CONTINOUS |
1778                              UMP_PIPE_TRANS_TIMEOUT_ENA |
1779                              (transaction_timeout << 2));
1780
1781         dev_dbg(&port->dev, "%s - Sending UMPC_OPEN_PORT\n", __func__);
1782
1783         /* Tell TI to open and start the port */
1784         status = send_cmd(dev, UMPC_OPEN_PORT,
1785                 (u8)(UMPM_UART1_PORT + port_number), open_settings, NULL, 0);
1786         if (status) {
1787                 dev_err(&port->dev, "%s - cannot send open command, %d\n",
1788                                                         __func__, status);
1789                 return status;
1790         }
1791
1792         /* Start the DMA? */
1793         status = send_cmd(dev, UMPC_START_PORT,
1794                 (u8)(UMPM_UART1_PORT + port_number), 0, NULL, 0);
1795         if (status) {
1796                 dev_err(&port->dev, "%s - cannot send start DMA command, %d\n",
1797                                                         __func__, status);
1798                 return status;
1799         }
1800
1801         /* Clear TX and RX buffers in UMP */
1802         status = purge_port(port, UMP_PORT_DIR_OUT | UMP_PORT_DIR_IN);
1803         if (status) {
1804                 dev_err(&port->dev,
1805                         "%s - cannot send clear buffers command, %d\n",
1806                         __func__, status);
1807                 return status;
1808         }
1809
1810         /* Read Initial MSR */
1811         status = ti_vread_sync(dev, UMPC_READ_MSR, 0,
1812                                 (__u16)(UMPM_UART1_PORT + port_number),
1813                                 &edge_port->shadow_msr, 1);
1814         if (status) {
1815                 dev_err(&port->dev, "%s - cannot send read MSR command, %d\n",
1816                                                         __func__, status);
1817                 return status;
1818         }
1819
1820         dev_dbg(&port->dev, "ShadowMSR 0x%X\n", edge_port->shadow_msr);
1821
1822         /* Set Initial MCR */
1823         edge_port->shadow_mcr = MCR_RTS | MCR_DTR;
1824         dev_dbg(&port->dev, "ShadowMCR 0x%X\n", edge_port->shadow_mcr);
1825
1826         edge_serial = edge_port->edge_serial;
1827         if (mutex_lock_interruptible(&edge_serial->es_lock))
1828                 return -ERESTARTSYS;
1829         if (edge_serial->num_ports_open == 0) {
1830                 /* we are the first port to open, post the interrupt urb */
1831                 urb = edge_serial->serial->port[0]->interrupt_in_urb;
1832                 if (!urb) {
1833                         dev_err(&port->dev,
1834                                 "%s - no interrupt urb present, exiting\n",
1835                                 __func__);
1836                         status = -EINVAL;
1837                         goto release_es_lock;
1838                 }
1839                 urb->context = edge_serial;
1840                 status = usb_submit_urb(urb, GFP_KERNEL);
1841                 if (status) {
1842                         dev_err(&port->dev,
1843                                 "%s - usb_submit_urb failed with value %d\n",
1844                                         __func__, status);
1845                         goto release_es_lock;
1846                 }
1847         }
1848
1849         /*
1850          * reset the data toggle on the bulk endpoints to work around bug in
1851          * host controllers where things get out of sync some times
1852          */
1853         usb_clear_halt(dev, port->write_urb->pipe);
1854         usb_clear_halt(dev, port->read_urb->pipe);
1855
1856         /* start up our bulk read urb */
1857         urb = port->read_urb;
1858         if (!urb) {
1859                 dev_err(&port->dev, "%s - no read urb present, exiting\n",
1860                                                                 __func__);
1861                 status = -EINVAL;
1862                 goto unlink_int_urb;
1863         }
1864         edge_port->ep_read_urb_state = EDGE_READ_URB_RUNNING;
1865         urb->context = edge_port;
1866         status = usb_submit_urb(urb, GFP_KERNEL);
1867         if (status) {
1868                 dev_err(&port->dev,
1869                         "%s - read bulk usb_submit_urb failed with value %d\n",
1870                                 __func__, status);
1871                 goto unlink_int_urb;
1872         }
1873
1874         ++edge_serial->num_ports_open;
1875
1876         port->port.drain_delay = 1;
1877
1878         goto release_es_lock;
1879
1880 unlink_int_urb:
1881         if (edge_port->edge_serial->num_ports_open == 0)
1882                 usb_kill_urb(port->serial->port[0]->interrupt_in_urb);
1883 release_es_lock:
1884         mutex_unlock(&edge_serial->es_lock);
1885         return status;
1886 }
1887
1888 static void edge_close(struct usb_serial_port *port)
1889 {
1890         struct edgeport_serial *edge_serial;
1891         struct edgeport_port *edge_port;
1892         struct usb_serial *serial = port->serial;
1893         unsigned long flags;
1894         int port_number;
1895
1896         edge_serial = usb_get_serial_data(port->serial);
1897         edge_port = usb_get_serial_port_data(port);
1898         if (edge_serial == NULL || edge_port == NULL)
1899                 return;
1900
1901         /* The bulkreadcompletion routine will check
1902          * this flag and dump add read data */
1903         edge_port->close_pending = 1;
1904
1905         usb_kill_urb(port->read_urb);
1906         usb_kill_urb(port->write_urb);
1907         edge_port->ep_write_urb_in_use = 0;
1908         spin_lock_irqsave(&edge_port->ep_lock, flags);
1909         kfifo_reset_out(&edge_port->write_fifo);
1910         spin_unlock_irqrestore(&edge_port->ep_lock, flags);
1911
1912         /* assuming we can still talk to the device,
1913          * send a close port command to it */
1914         dev_dbg(&port->dev, "%s - send umpc_close_port\n", __func__);
1915         port_number = port->number - port->serial->minor;
1916
1917         mutex_lock(&serial->disc_mutex);
1918         if (!serial->disconnected) {
1919                 send_cmd(serial->dev,
1920                                      UMPC_CLOSE_PORT,
1921                                      (__u8)(UMPM_UART1_PORT + port_number),
1922                                      0,
1923                                      NULL,
1924                                      0);
1925         }
1926         mutex_unlock(&serial->disc_mutex);
1927
1928         mutex_lock(&edge_serial->es_lock);
1929         --edge_port->edge_serial->num_ports_open;
1930         if (edge_port->edge_serial->num_ports_open <= 0) {
1931                 /* last port is now closed, let's shut down our interrupt urb */
1932                 usb_kill_urb(port->serial->port[0]->interrupt_in_urb);
1933                 edge_port->edge_serial->num_ports_open = 0;
1934         }
1935         mutex_unlock(&edge_serial->es_lock);
1936         edge_port->close_pending = 0;
1937 }
1938
1939 static int edge_write(struct tty_struct *tty, struct usb_serial_port *port,
1940                                 const unsigned char *data, int count)
1941 {
1942         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
1943
1944         if (count == 0) {
1945                 dev_dbg(&port->dev, "%s - write request of 0 bytes\n", __func__);
1946                 return 0;
1947         }
1948
1949         if (edge_port == NULL)
1950                 return -ENODEV;
1951         if (edge_port->close_pending == 1)
1952                 return -ENODEV;
1953
1954         count = kfifo_in_locked(&edge_port->write_fifo, data, count,
1955                                                         &edge_port->ep_lock);
1956         edge_send(tty);
1957
1958         return count;
1959 }
1960
1961 static void edge_send(struct tty_struct *tty)
1962 {
1963         struct usb_serial_port *port = tty->driver_data;
1964         int count, result;
1965         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
1966         unsigned long flags;
1967
1968         spin_lock_irqsave(&edge_port->ep_lock, flags);
1969
1970         if (edge_port->ep_write_urb_in_use) {
1971                 spin_unlock_irqrestore(&edge_port->ep_lock, flags);
1972                 return;
1973         }
1974
1975         count = kfifo_out(&edge_port->write_fifo,
1976                                 port->write_urb->transfer_buffer,
1977                                 port->bulk_out_size);
1978
1979         if (count == 0) {
1980                 spin_unlock_irqrestore(&edge_port->ep_lock, flags);
1981                 return;
1982         }
1983
1984         edge_port->ep_write_urb_in_use = 1;
1985
1986         spin_unlock_irqrestore(&edge_port->ep_lock, flags);
1987
1988         usb_serial_debug_data(&port->dev, __func__, count, port->write_urb->transfer_buffer);
1989
1990         /* set up our urb */
1991         port->write_urb->transfer_buffer_length = count;
1992
1993         /* send the data out the bulk port */
1994         result = usb_submit_urb(port->write_urb, GFP_ATOMIC);
1995         if (result) {
1996                 dev_err_console(port,
1997                         "%s - failed submitting write urb, error %d\n",
1998                                 __func__, result);
1999                 edge_port->ep_write_urb_in_use = 0;
2000                 /* TODO: reschedule edge_send */
2001         } else
2002                 edge_port->icount.tx += count;
2003
2004         /* wakeup any process waiting for writes to complete */
2005         /* there is now more room in the buffer for new writes */
2006         if (tty)
2007                 tty_wakeup(tty);
2008 }
2009
2010 static int edge_write_room(struct tty_struct *tty)
2011 {
2012         struct usb_serial_port *port = tty->driver_data;
2013         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2014         int room = 0;
2015         unsigned long flags;
2016
2017         if (edge_port == NULL)
2018                 return 0;
2019         if (edge_port->close_pending == 1)
2020                 return 0;
2021
2022         spin_lock_irqsave(&edge_port->ep_lock, flags);
2023         room = kfifo_avail(&edge_port->write_fifo);
2024         spin_unlock_irqrestore(&edge_port->ep_lock, flags);
2025
2026         dev_dbg(&port->dev, "%s - returns %d\n", __func__, room);
2027         return room;
2028 }
2029
2030 static int edge_chars_in_buffer(struct tty_struct *tty)
2031 {
2032         struct usb_serial_port *port = tty->driver_data;
2033         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2034         int chars = 0;
2035         unsigned long flags;
2036         int ret;
2037
2038         if (edge_port == NULL)
2039                 return 0;
2040
2041         spin_lock_irqsave(&edge_port->ep_lock, flags);
2042         chars = kfifo_len(&edge_port->write_fifo);
2043         spin_unlock_irqrestore(&edge_port->ep_lock, flags);
2044
2045         if (!chars) {
2046                 ret = tx_active(edge_port);
2047                 if (ret > 0)
2048                         chars = ret;
2049         }
2050
2051         dev_dbg(&port->dev, "%s - returns %d\n", __func__, chars);
2052         return chars;
2053 }
2054
2055 static void edge_throttle(struct tty_struct *tty)
2056 {
2057         struct usb_serial_port *port = tty->driver_data;
2058         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2059         int status;
2060
2061         if (edge_port == NULL)
2062                 return;
2063
2064         /* if we are implementing XON/XOFF, send the stop character */
2065         if (I_IXOFF(tty)) {
2066                 unsigned char stop_char = STOP_CHAR(tty);
2067                 status = edge_write(tty, port, &stop_char, 1);
2068                 if (status <= 0) {
2069                         dev_err(&port->dev, "%s - failed to write stop character, %d\n", __func__, status);
2070                 }
2071         }
2072
2073         /* if we are implementing RTS/CTS, stop reads */
2074         /* and the Edgeport will clear the RTS line */
2075         if (C_CRTSCTS(tty))
2076                 stop_read(edge_port);
2077
2078 }
2079
2080 static void edge_unthrottle(struct tty_struct *tty)
2081 {
2082         struct usb_serial_port *port = tty->driver_data;
2083         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2084         int status;
2085
2086         if (edge_port == NULL)
2087                 return;
2088
2089         /* if we are implementing XON/XOFF, send the start character */
2090         if (I_IXOFF(tty)) {
2091                 unsigned char start_char = START_CHAR(tty);
2092                 status = edge_write(tty, port, &start_char, 1);
2093                 if (status <= 0) {
2094                         dev_err(&port->dev, "%s - failed to write start character, %d\n", __func__, status);
2095                 }
2096         }
2097         /* if we are implementing RTS/CTS, restart reads */
2098         /* are the Edgeport will assert the RTS line */
2099         if (C_CRTSCTS(tty)) {
2100                 status = restart_read(edge_port);
2101                 if (status)
2102                         dev_err(&port->dev,
2103                                 "%s - read bulk usb_submit_urb failed: %d\n",
2104                                                         __func__, status);
2105         }
2106
2107 }
2108
2109 static void stop_read(struct edgeport_port *edge_port)
2110 {
2111         unsigned long flags;
2112
2113         spin_lock_irqsave(&edge_port->ep_lock, flags);
2114
2115         if (edge_port->ep_read_urb_state == EDGE_READ_URB_RUNNING)
2116                 edge_port->ep_read_urb_state = EDGE_READ_URB_STOPPING;
2117         edge_port->shadow_mcr &= ~MCR_RTS;
2118
2119         spin_unlock_irqrestore(&edge_port->ep_lock, flags);
2120 }
2121
2122 static int restart_read(struct edgeport_port *edge_port)
2123 {
2124         struct urb *urb;
2125         int status = 0;
2126         unsigned long flags;
2127
2128         spin_lock_irqsave(&edge_port->ep_lock, flags);
2129
2130         if (edge_port->ep_read_urb_state == EDGE_READ_URB_STOPPED) {
2131                 urb = edge_port->port->read_urb;
2132                 status = usb_submit_urb(urb, GFP_ATOMIC);
2133         }
2134         edge_port->ep_read_urb_state = EDGE_READ_URB_RUNNING;
2135         edge_port->shadow_mcr |= MCR_RTS;
2136
2137         spin_unlock_irqrestore(&edge_port->ep_lock, flags);
2138
2139         return status;
2140 }
2141
2142 static void change_port_settings(struct tty_struct *tty,
2143                 struct edgeport_port *edge_port, struct ktermios *old_termios)
2144 {
2145         struct device *dev = &edge_port->port->dev;
2146         struct ump_uart_config *config;
2147         int baud;
2148         unsigned cflag;
2149         int status;
2150         int port_number = edge_port->port->number -
2151                                         edge_port->port->serial->minor;
2152
2153         dev_dbg(dev, "%s - port %d\n", __func__, edge_port->port->number);
2154
2155         config = kmalloc (sizeof (*config), GFP_KERNEL);
2156         if (!config) {
2157                 tty->termios = *old_termios;
2158                 dev_err(dev, "%s - out of memory\n", __func__);
2159                 return;
2160         }
2161
2162         cflag = tty->termios.c_cflag;
2163
2164         config->wFlags = 0;
2165
2166         /* These flags must be set */
2167         config->wFlags |= UMP_MASK_UART_FLAGS_RECEIVE_MS_INT;
2168         config->wFlags |= UMP_MASK_UART_FLAGS_AUTO_START_ON_ERR;
2169         config->bUartMode = (__u8)(edge_port->bUartMode);
2170
2171         switch (cflag & CSIZE) {
2172         case CS5:
2173                     config->bDataBits = UMP_UART_CHAR5BITS;
2174                     dev_dbg(dev, "%s - data bits = 5\n", __func__);
2175                     break;
2176         case CS6:
2177                     config->bDataBits = UMP_UART_CHAR6BITS;
2178                     dev_dbg(dev, "%s - data bits = 6\n", __func__);
2179                     break;
2180         case CS7:
2181                     config->bDataBits = UMP_UART_CHAR7BITS;
2182                     dev_dbg(dev, "%s - data bits = 7\n", __func__);
2183                     break;
2184         default:
2185         case CS8:
2186                     config->bDataBits = UMP_UART_CHAR8BITS;
2187                     dev_dbg(dev, "%s - data bits = 8\n", __func__);
2188                             break;
2189         }
2190
2191         if (cflag & PARENB) {
2192                 if (cflag & PARODD) {
2193                         config->wFlags |= UMP_MASK_UART_FLAGS_PARITY;
2194                         config->bParity = UMP_UART_ODDPARITY;
2195                         dev_dbg(dev, "%s - parity = odd\n", __func__);
2196                 } else {
2197                         config->wFlags |= UMP_MASK_UART_FLAGS_PARITY;
2198                         config->bParity = UMP_UART_EVENPARITY;
2199                         dev_dbg(dev, "%s - parity = even\n", __func__);
2200                 }
2201         } else {
2202                 config->bParity = UMP_UART_NOPARITY;
2203                 dev_dbg(dev, "%s - parity = none\n", __func__);
2204         }
2205
2206         if (cflag & CSTOPB) {
2207                 config->bStopBits = UMP_UART_STOPBIT2;
2208                 dev_dbg(dev, "%s - stop bits = 2\n", __func__);
2209         } else {
2210                 config->bStopBits = UMP_UART_STOPBIT1;
2211                 dev_dbg(dev, "%s - stop bits = 1\n", __func__);
2212         }
2213
2214         /* figure out the flow control settings */
2215         if (cflag & CRTSCTS) {
2216                 config->wFlags |= UMP_MASK_UART_FLAGS_OUT_X_CTS_FLOW;
2217                 config->wFlags |= UMP_MASK_UART_FLAGS_RTS_FLOW;
2218                 dev_dbg(dev, "%s - RTS/CTS is enabled\n", __func__);
2219         } else {
2220                 dev_dbg(dev, "%s - RTS/CTS is disabled\n", __func__);
2221                 tty->hw_stopped = 0;
2222                 restart_read(edge_port);
2223         }
2224
2225         /* if we are implementing XON/XOFF, set the start and stop
2226            character in the device */
2227         config->cXon  = START_CHAR(tty);
2228         config->cXoff = STOP_CHAR(tty);
2229
2230         /* if we are implementing INBOUND XON/XOFF */
2231         if (I_IXOFF(tty)) {
2232                 config->wFlags |= UMP_MASK_UART_FLAGS_IN_X;
2233                 dev_dbg(dev, "%s - INBOUND XON/XOFF is enabled, XON = %2x, XOFF = %2x\n",
2234                         __func__, config->cXon, config->cXoff);
2235         } else
2236                 dev_dbg(dev, "%s - INBOUND XON/XOFF is disabled\n", __func__);
2237
2238         /* if we are implementing OUTBOUND XON/XOFF */
2239         if (I_IXON(tty)) {
2240                 config->wFlags |= UMP_MASK_UART_FLAGS_OUT_X;
2241                 dev_dbg(dev, "%s - OUTBOUND XON/XOFF is enabled, XON = %2x, XOFF = %2x\n",
2242                         __func__, config->cXon, config->cXoff);
2243         } else
2244                 dev_dbg(dev, "%s - OUTBOUND XON/XOFF is disabled\n", __func__);
2245
2246         tty->termios.c_cflag &= ~CMSPAR;
2247
2248         /* Round the baud rate */
2249         baud = tty_get_baud_rate(tty);
2250         if (!baud) {
2251                 /* pick a default, any default... */
2252                 baud = 9600;
2253         } else
2254                 tty_encode_baud_rate(tty, baud, baud);
2255
2256         edge_port->baud_rate = baud;
2257         config->wBaudRate = (__u16)((461550L + baud/2) / baud);
2258
2259         /* FIXME: Recompute actual baud from divisor here */
2260
2261         dev_dbg(dev, "%s - baud rate = %d, wBaudRate = %d\n", __func__, baud, config->wBaudRate);
2262
2263         dev_dbg(dev, "wBaudRate:   %d\n", (int)(461550L / config->wBaudRate));
2264         dev_dbg(dev, "wFlags:    0x%x\n", config->wFlags);
2265         dev_dbg(dev, "bDataBits:   %d\n", config->bDataBits);
2266         dev_dbg(dev, "bParity:     %d\n", config->bParity);
2267         dev_dbg(dev, "bStopBits:   %d\n", config->bStopBits);
2268         dev_dbg(dev, "cXon:        %d\n", config->cXon);
2269         dev_dbg(dev, "cXoff:       %d\n", config->cXoff);
2270         dev_dbg(dev, "bUartMode:   %d\n", config->bUartMode);
2271
2272         /* move the word values into big endian mode */
2273         cpu_to_be16s(&config->wFlags);
2274         cpu_to_be16s(&config->wBaudRate);
2275
2276         status = send_cmd(edge_port->port->serial->dev, UMPC_SET_CONFIG,
2277                                 (__u8)(UMPM_UART1_PORT + port_number),
2278                                 0, (__u8 *)config, sizeof(*config));
2279         if (status)
2280                 dev_dbg(dev, "%s - error %d when trying to write config to device\n",
2281                         __func__, status);
2282         kfree(config);
2283 }
2284
2285 static void edge_set_termios(struct tty_struct *tty,
2286                 struct usb_serial_port *port, struct ktermios *old_termios)
2287 {
2288         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2289         unsigned int cflag;
2290
2291         cflag = tty->termios.c_cflag;
2292
2293         dev_dbg(&port->dev, "%s - clfag %08x iflag %08x\n", __func__,
2294                 tty->termios.c_cflag, tty->termios.c_iflag);
2295         dev_dbg(&port->dev, "%s - old clfag %08x old iflag %08x\n", __func__,
2296                 old_termios->c_cflag, old_termios->c_iflag);
2297         dev_dbg(&port->dev, "%s - port %d\n", __func__, port->number);
2298
2299         if (edge_port == NULL)
2300                 return;
2301         /* change the port settings to the new ones specified */
2302         change_port_settings(tty, edge_port, old_termios);
2303 }
2304
2305 static int edge_tiocmset(struct tty_struct *tty,
2306                                         unsigned int set, unsigned int clear)
2307 {
2308         struct usb_serial_port *port = tty->driver_data;
2309         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2310         unsigned int mcr;
2311         unsigned long flags;
2312
2313         spin_lock_irqsave(&edge_port->ep_lock, flags);
2314         mcr = edge_port->shadow_mcr;
2315         if (set & TIOCM_RTS)
2316                 mcr |= MCR_RTS;
2317         if (set & TIOCM_DTR)
2318                 mcr |= MCR_DTR;
2319         if (set & TIOCM_LOOP)
2320                 mcr |= MCR_LOOPBACK;
2321
2322         if (clear & TIOCM_RTS)
2323                 mcr &= ~MCR_RTS;
2324         if (clear & TIOCM_DTR)
2325                 mcr &= ~MCR_DTR;
2326         if (clear & TIOCM_LOOP)
2327                 mcr &= ~MCR_LOOPBACK;
2328
2329         edge_port->shadow_mcr = mcr;
2330         spin_unlock_irqrestore(&edge_port->ep_lock, flags);
2331
2332         restore_mcr(edge_port, mcr);
2333         return 0;
2334 }
2335
2336 static int edge_tiocmget(struct tty_struct *tty)
2337 {
2338         struct usb_serial_port *port = tty->driver_data;
2339         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2340         unsigned int result = 0;
2341         unsigned int msr;
2342         unsigned int mcr;
2343         unsigned long flags;
2344
2345         spin_lock_irqsave(&edge_port->ep_lock, flags);
2346
2347         msr = edge_port->shadow_msr;
2348         mcr = edge_port->shadow_mcr;
2349         result = ((mcr & MCR_DTR)       ? TIOCM_DTR: 0)   /* 0x002 */
2350                   | ((mcr & MCR_RTS)    ? TIOCM_RTS: 0)   /* 0x004 */
2351                   | ((msr & EDGEPORT_MSR_CTS)   ? TIOCM_CTS: 0)   /* 0x020 */
2352                   | ((msr & EDGEPORT_MSR_CD)    ? TIOCM_CAR: 0)   /* 0x040 */
2353                   | ((msr & EDGEPORT_MSR_RI)    ? TIOCM_RI:  0)   /* 0x080 */
2354                   | ((msr & EDGEPORT_MSR_DSR)   ? TIOCM_DSR: 0);  /* 0x100 */
2355
2356
2357         dev_dbg(&port->dev, "%s -- %x\n", __func__, result);
2358         spin_unlock_irqrestore(&edge_port->ep_lock, flags);
2359
2360         return result;
2361 }
2362
2363 static int edge_get_icount(struct tty_struct *tty,
2364                                 struct serial_icounter_struct *icount)
2365 {
2366         struct usb_serial_port *port = tty->driver_data;
2367         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2368         struct async_icount *ic = &edge_port->icount;
2369
2370         icount->cts = ic->cts;
2371         icount->dsr = ic->dsr;
2372         icount->rng = ic->rng;
2373         icount->dcd = ic->dcd;
2374         icount->tx = ic->tx;
2375         icount->rx = ic->rx;
2376         icount->frame = ic->frame;
2377         icount->parity = ic->parity;
2378         icount->overrun = ic->overrun;
2379         icount->brk = ic->brk;
2380         icount->buf_overrun = ic->buf_overrun;
2381         return 0;
2382 }
2383
2384 static int get_serial_info(struct edgeport_port *edge_port,
2385                                 struct serial_struct __user *retinfo)
2386 {
2387         struct serial_struct tmp;
2388         unsigned cwait;
2389
2390         if (!retinfo)
2391                 return -EFAULT;
2392
2393         cwait = edge_port->port->port.closing_wait;
2394         if (cwait != ASYNC_CLOSING_WAIT_NONE)
2395                 cwait = jiffies_to_msecs(closing_wait) / 10;
2396
2397         memset(&tmp, 0, sizeof(tmp));
2398
2399         tmp.type                = PORT_16550A;
2400         tmp.line                = edge_port->port->serial->minor;
2401         tmp.port                = edge_port->port->number;
2402         tmp.irq                 = 0;
2403         tmp.flags               = ASYNC_SKIP_TEST | ASYNC_AUTO_IRQ;
2404         tmp.xmit_fifo_size      = edge_port->port->bulk_out_size;
2405         tmp.baud_base           = 9600;
2406         tmp.close_delay         = 5*HZ;
2407         tmp.closing_wait        = cwait;
2408
2409         if (copy_to_user(retinfo, &tmp, sizeof(*retinfo)))
2410                 return -EFAULT;
2411         return 0;
2412 }
2413
2414 static int edge_ioctl(struct tty_struct *tty,
2415                                         unsigned int cmd, unsigned long arg)
2416 {
2417         struct usb_serial_port *port = tty->driver_data;
2418         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2419         struct async_icount cnow;
2420         struct async_icount cprev;
2421
2422         dev_dbg(&port->dev, "%s - port %d, cmd = 0x%x\n", __func__, port->number, cmd);
2423
2424         switch (cmd) {
2425         case TIOCGSERIAL:
2426                 dev_dbg(&port->dev, "%s - TIOCGSERIAL\n", __func__);
2427                 return get_serial_info(edge_port,
2428                                 (struct serial_struct __user *) arg);
2429         case TIOCMIWAIT:
2430                 dev_dbg(&port->dev, "%s - TIOCMIWAIT\n", __func__);
2431                 cprev = edge_port->icount;
2432                 while (1) {
2433                         interruptible_sleep_on(&port->delta_msr_wait);
2434                         /* see if a signal did it */
2435                         if (signal_pending(current))
2436                                 return -ERESTARTSYS;
2437
2438                         if (port->serial->disconnected)
2439                                 return -EIO;
2440
2441                         cnow = edge_port->icount;
2442                         if (cnow.rng == cprev.rng && cnow.dsr == cprev.dsr &&
2443                             cnow.dcd == cprev.dcd && cnow.cts == cprev.cts)
2444                                 return -EIO; /* no change => error */
2445                         if (((arg & TIOCM_RNG) && (cnow.rng != cprev.rng)) ||
2446                             ((arg & TIOCM_DSR) && (cnow.dsr != cprev.dsr)) ||
2447                             ((arg & TIOCM_CD)  && (cnow.dcd != cprev.dcd)) ||
2448                             ((arg & TIOCM_CTS) && (cnow.cts != cprev.cts))) {
2449                                 return 0;
2450                         }
2451                         cprev = cnow;
2452                 }
2453                 /* not reached */
2454                 break;
2455         }
2456         return -ENOIOCTLCMD;
2457 }
2458
2459 static void edge_break(struct tty_struct *tty, int break_state)
2460 {
2461         struct usb_serial_port *port = tty->driver_data;
2462         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2463         int status;
2464         int bv = 0;     /* Off */
2465
2466         tty_wait_until_sent(tty, 0);
2467
2468         if (break_state == -1)
2469                 bv = 1; /* On */
2470         status = ti_do_config(edge_port, UMPC_SET_CLR_BREAK, bv);
2471         if (status)
2472                 dev_dbg(&port->dev, "%s - error %d sending break set/clear command.\n",
2473                         __func__, status);
2474 }
2475
2476 static int edge_startup(struct usb_serial *serial)
2477 {
2478         struct edgeport_serial *edge_serial;
2479         int status;
2480
2481         /* create our private serial structure */
2482         edge_serial = kzalloc(sizeof(struct edgeport_serial), GFP_KERNEL);
2483         if (edge_serial == NULL) {
2484                 dev_err(&serial->dev->dev, "%s - Out of memory\n", __func__);
2485                 return -ENOMEM;
2486         }
2487         mutex_init(&edge_serial->es_lock);
2488         edge_serial->serial = serial;
2489         usb_set_serial_data(serial, edge_serial);
2490
2491         status = download_fw(edge_serial);
2492         if (status) {
2493                 kfree(edge_serial);
2494                 return status;
2495         }
2496
2497         return 0;
2498 }
2499
2500 static void edge_disconnect(struct usb_serial *serial)
2501 {
2502 }
2503
2504 static void edge_release(struct usb_serial *serial)
2505 {
2506         kfree(usb_get_serial_data(serial));
2507 }
2508
2509 static int edge_port_probe(struct usb_serial_port *port)
2510 {
2511         struct edgeport_port *edge_port;
2512         int ret;
2513
2514         edge_port = kzalloc(sizeof(*edge_port), GFP_KERNEL);
2515         if (!edge_port)
2516                 return -ENOMEM;
2517
2518         ret = kfifo_alloc(&edge_port->write_fifo, EDGE_OUT_BUF_SIZE,
2519                                                                 GFP_KERNEL);
2520         if (ret) {
2521                 kfree(edge_port);
2522                 return -ENOMEM;
2523         }
2524
2525         spin_lock_init(&edge_port->ep_lock);
2526         edge_port->port = port;
2527         edge_port->edge_serial = usb_get_serial_data(port->serial);
2528         edge_port->bUartMode = default_uart_mode;
2529
2530         usb_set_serial_port_data(port, edge_port);
2531
2532         ret = edge_create_sysfs_attrs(port);
2533         if (ret) {
2534                 kfifo_free(&edge_port->write_fifo);
2535                 kfree(edge_port);
2536                 return ret;
2537         }
2538
2539         port->port.closing_wait = msecs_to_jiffies(closing_wait * 10);
2540
2541         return 0;
2542 }
2543
2544 static int edge_port_remove(struct usb_serial_port *port)
2545 {
2546         struct edgeport_port *edge_port;
2547
2548         edge_port = usb_get_serial_port_data(port);
2549
2550         edge_remove_sysfs_attrs(port);
2551         kfifo_free(&edge_port->write_fifo);
2552         kfree(edge_port);
2553
2554         return 0;
2555 }
2556
2557 /* Sysfs Attributes */
2558
2559 static ssize_t show_uart_mode(struct device *dev,
2560         struct device_attribute *attr, char *buf)
2561 {
2562         struct usb_serial_port *port = to_usb_serial_port(dev);
2563         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2564
2565         return sprintf(buf, "%d\n", edge_port->bUartMode);
2566 }
2567
2568 static ssize_t store_uart_mode(struct device *dev,
2569         struct device_attribute *attr, const char *valbuf, size_t count)
2570 {
2571         struct usb_serial_port *port = to_usb_serial_port(dev);
2572         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2573         unsigned int v = simple_strtoul(valbuf, NULL, 0);
2574
2575         dev_dbg(dev, "%s: setting uart_mode = %d\n", __func__, v);
2576
2577         if (v < 256)
2578                 edge_port->bUartMode = v;
2579         else
2580                 dev_err(dev, "%s - uart_mode %d is invalid\n", __func__, v);
2581
2582         return count;
2583 }
2584
2585 static DEVICE_ATTR(uart_mode, S_IWUSR | S_IRUGO, show_uart_mode,
2586                                                         store_uart_mode);
2587
2588 static int edge_create_sysfs_attrs(struct usb_serial_port *port)
2589 {
2590         return device_create_file(&port->dev, &dev_attr_uart_mode);
2591 }
2592
2593 static int edge_remove_sysfs_attrs(struct usb_serial_port *port)
2594 {
2595         device_remove_file(&port->dev, &dev_attr_uart_mode);
2596         return 0;
2597 }
2598
2599
2600 static struct usb_serial_driver edgeport_1port_device = {
2601         .driver = {
2602                 .owner          = THIS_MODULE,
2603                 .name           = "edgeport_ti_1",
2604         },
2605         .description            = "Edgeport TI 1 port adapter",
2606         .id_table               = edgeport_1port_id_table,
2607         .num_ports              = 1,
2608         .open                   = edge_open,
2609         .close                  = edge_close,
2610         .throttle               = edge_throttle,
2611         .unthrottle             = edge_unthrottle,
2612         .attach                 = edge_startup,
2613         .disconnect             = edge_disconnect,
2614         .release                = edge_release,
2615         .port_probe             = edge_port_probe,
2616         .port_remove            = edge_port_remove,
2617         .ioctl                  = edge_ioctl,
2618         .set_termios            = edge_set_termios,
2619         .tiocmget               = edge_tiocmget,
2620         .tiocmset               = edge_tiocmset,
2621         .get_icount             = edge_get_icount,
2622         .write                  = edge_write,
2623         .write_room             = edge_write_room,
2624         .chars_in_buffer        = edge_chars_in_buffer,
2625         .break_ctl              = edge_break,
2626         .read_int_callback      = edge_interrupt_callback,
2627         .read_bulk_callback     = edge_bulk_in_callback,
2628         .write_bulk_callback    = edge_bulk_out_callback,
2629 };
2630
2631 static struct usb_serial_driver edgeport_2port_device = {
2632         .driver = {
2633                 .owner          = THIS_MODULE,
2634                 .name           = "edgeport_ti_2",
2635         },
2636         .description            = "Edgeport TI 2 port adapter",
2637         .id_table               = edgeport_2port_id_table,
2638         .num_ports              = 2,
2639         .open                   = edge_open,
2640         .close                  = edge_close,
2641         .throttle               = edge_throttle,
2642         .unthrottle             = edge_unthrottle,
2643         .attach                 = edge_startup,
2644         .disconnect             = edge_disconnect,
2645         .release                = edge_release,
2646         .port_probe             = edge_port_probe,
2647         .port_remove            = edge_port_remove,
2648         .ioctl                  = edge_ioctl,
2649         .set_termios            = edge_set_termios,
2650         .tiocmget               = edge_tiocmget,
2651         .tiocmset               = edge_tiocmset,
2652         .get_icount             = edge_get_icount,
2653         .write                  = edge_write,
2654         .write_room             = edge_write_room,
2655         .chars_in_buffer        = edge_chars_in_buffer,
2656         .break_ctl              = edge_break,
2657         .read_int_callback      = edge_interrupt_callback,
2658         .read_bulk_callback     = edge_bulk_in_callback,
2659         .write_bulk_callback    = edge_bulk_out_callback,
2660 };
2661
2662 static struct usb_serial_driver * const serial_drivers[] = {
2663         &edgeport_1port_device, &edgeport_2port_device, NULL
2664 };
2665
2666 module_usb_serial_driver(serial_drivers, id_table_combined);
2667
2668 MODULE_AUTHOR(DRIVER_AUTHOR);
2669 MODULE_DESCRIPTION(DRIVER_DESC);
2670 MODULE_LICENSE("GPL");
2671 MODULE_FIRMWARE("edgeport/down3.bin");
2672
2673 module_param(closing_wait, int, S_IRUGO | S_IWUSR);
2674 MODULE_PARM_DESC(closing_wait, "Maximum wait for data to drain, in .01 secs");
2675
2676 module_param(ignore_cpu_rev, bool, S_IRUGO | S_IWUSR);
2677 MODULE_PARM_DESC(ignore_cpu_rev,
2678                         "Ignore the cpu revision when connecting to a device");
2679
2680 module_param(default_uart_mode, int, S_IRUGO | S_IWUSR);
2681 MODULE_PARM_DESC(default_uart_mode, "Default uart_mode, 0=RS232, ...");