USB: io_ti: Fix NULL dereference in chase_port()
[pandora-kernel.git] / drivers / usb / serial / io_ti.c
1 /*
2  * Edgeport USB Serial Converter driver
3  *
4  * Copyright (C) 2000-2002 Inside Out Networks, All rights reserved.
5  * Copyright (C) 2001-2002 Greg Kroah-Hartman <greg@kroah.com>
6  *
7  *      This program is free software; you can redistribute it and/or modify
8  *      it under the terms of the GNU General Public License as published by
9  *      the Free Software Foundation; either version 2 of the License, or
10  *      (at your option) any later version.
11  *
12  * Supports the following devices:
13  *      EP/1 EP/2 EP/4 EP/21 EP/22 EP/221 EP/42 EP/421 WATCHPORT
14  *
15  * For questions or problems with this driver, contact Inside Out
16  * Networks technical support, or Peter Berger <pberger@brimson.com>,
17  * or Al Borchers <alborchers@steinerpoint.com>.
18  *
19  * Version history:
20  *
21  *      July 11, 2002   Removed 4 port device structure since all TI UMP
22  *                      chips have only 2 ports
23  *                      David Iacovelli (davidi@ionetworks.com)
24  *
25  */
26
27 #include <linux/kernel.h>
28 #include <linux/jiffies.h>
29 #include <linux/errno.h>
30 #include <linux/init.h>
31 #include <linux/slab.h>
32 #include <linux/tty.h>
33 #include <linux/tty_driver.h>
34 #include <linux/tty_flip.h>
35 #include <linux/module.h>
36 #include <linux/spinlock.h>
37 #include <linux/mutex.h>
38 #include <linux/serial.h>
39 #include <linux/kfifo.h>
40 #include <linux/ioctl.h>
41 #include <linux/firmware.h>
42 #include <linux/uaccess.h>
43 #include <linux/usb.h>
44 #include <linux/usb/serial.h>
45
46 #include "io_16654.h"
47 #include "io_usbvend.h"
48 #include "io_ti.h"
49
50 /*
51  * Version Information
52  */
53 #define DRIVER_VERSION "v0.7mode043006"
54 #define DRIVER_AUTHOR "Greg Kroah-Hartman <greg@kroah.com> and David Iacovelli"
55 #define DRIVER_DESC "Edgeport USB Serial Driver"
56
57 #define EPROM_PAGE_SIZE         64
58
59
60 /* different hardware types */
61 #define HARDWARE_TYPE_930       0
62 #define HARDWARE_TYPE_TIUMP     1
63
64 /* IOCTL_PRIVATE_TI_GET_MODE Definitions */
65 #define TI_MODE_CONFIGURING     0   /* Device has not entered start device */
66 #define TI_MODE_BOOT            1   /* Staying in boot mode                */
67 #define TI_MODE_DOWNLOAD        2   /* Made it to download mode            */
68 #define TI_MODE_TRANSITIONING   3   /* Currently in boot mode but
69                                        transitioning to download mode      */
70
71 /* read urb state */
72 #define EDGE_READ_URB_RUNNING   0
73 #define EDGE_READ_URB_STOPPING  1
74 #define EDGE_READ_URB_STOPPED   2
75
76 #define EDGE_CLOSING_WAIT       4000    /* in .01 sec */
77
78 #define EDGE_OUT_BUF_SIZE       1024
79
80
81 /* Product information read from the Edgeport */
82 struct product_info {
83         int     TiMode;                 /* Current TI Mode  */
84         __u8    hardware_type;          /* Type of hardware */
85 } __attribute__((packed));
86
87 struct edgeport_port {
88         __u16 uart_base;
89         __u16 dma_address;
90         __u8 shadow_msr;
91         __u8 shadow_mcr;
92         __u8 shadow_lsr;
93         __u8 lsr_mask;
94         __u32 ump_read_timeout;         /* Number of milliseconds the UMP will
95                                            wait without data before completing
96                                            a read short */
97         int baud_rate;
98         int close_pending;
99         int lsr_event;
100         struct async_icount     icount;
101         wait_queue_head_t       delta_msr_wait; /* for handling sleeping while
102                                                    waiting for msr change to
103                                                    happen */
104         struct edgeport_serial  *edge_serial;
105         struct usb_serial_port  *port;
106         __u8 bUartMode;         /* Port type, 0: RS232, etc. */
107         spinlock_t ep_lock;
108         int ep_read_urb_state;
109         int ep_write_urb_in_use;
110         struct kfifo write_fifo;
111 };
112
113 struct edgeport_serial {
114         struct product_info product_info;
115         u8 TI_I2C_Type;                 /* Type of I2C in UMP */
116         u8 TiReadI2C;                   /* Set to TRUE if we have read the
117                                            I2c in Boot Mode */
118         struct mutex es_lock;
119         int num_ports_open;
120         struct usb_serial *serial;
121 };
122
123
124 /* Devices that this driver supports */
125 static const struct usb_device_id edgeport_1port_id_table[] = {
126         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_1) },
127         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_TI3410_EDGEPORT_1) },
128         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_TI3410_EDGEPORT_1I) },
129         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_PROXIMITY) },
130         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_MOTION) },
131         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_MOISTURE) },
132         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_TEMPERATURE) },
133         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_HUMIDITY) },
134         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_POWER) },
135         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_LIGHT) },
136         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_RADIATION) },
137         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_DISTANCE) },
138         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_ACCELERATION) },
139         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_PROX_DIST) },
140         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_PLUS_PWR_HP4CD) },
141         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_PLUS_PWR_PCI) },
142         { }
143 };
144
145 static const struct usb_device_id edgeport_2port_id_table[] = {
146         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_2) },
147         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_2C) },
148         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_2I) },
149         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_421) },
150         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_21) },
151         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_42) },
152         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_4) },
153         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_4I) },
154         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_22I) },
155         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_221C) },
156         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_22C) },
157         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_21C) },
158         /* The 4, 8 and 16 port devices show up as multiple 2 port devices */
159         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_4S) },
160         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_8) },
161         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_8S) },
162         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_416) },
163         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_416B) },
164         { }
165 };
166
167 /* Devices that this driver supports */
168 static const struct usb_device_id id_table_combined[] = {
169         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_1) },
170         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_TI3410_EDGEPORT_1) },
171         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_TI3410_EDGEPORT_1I) },
172         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_PROXIMITY) },
173         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_MOTION) },
174         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_MOISTURE) },
175         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_TEMPERATURE) },
176         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_HUMIDITY) },
177         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_POWER) },
178         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_LIGHT) },
179         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_RADIATION) },
180         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_DISTANCE) },
181         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_ACCELERATION) },
182         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_WP_PROX_DIST) },
183         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_PLUS_PWR_HP4CD) },
184         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_PLUS_PWR_PCI) },
185         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_2) },
186         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_2C) },
187         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_2I) },
188         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_421) },
189         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_21) },
190         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_42) },
191         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_4) },
192         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_4I) },
193         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_22I) },
194         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_221C) },
195         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_22C) },
196         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_21C) },
197         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_4S) },
198         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_8) },
199         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_8S) },
200         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_416) },
201         { USB_DEVICE(USB_VENDOR_ID_ION, ION_DEVICE_ID_TI_EDGEPORT_416B) },
202         { }
203 };
204
205 MODULE_DEVICE_TABLE(usb, id_table_combined);
206
207 static struct usb_driver io_driver = {
208         .name =         "io_ti",
209         .probe =        usb_serial_probe,
210         .disconnect =   usb_serial_disconnect,
211         .id_table =     id_table_combined,
212         .no_dynamic_id =        1,
213 };
214
215
216 static unsigned char OperationalMajorVersion;
217 static unsigned char OperationalMinorVersion;
218 static unsigned short OperationalBuildNumber;
219
220 static int debug;
221
222 static int closing_wait = EDGE_CLOSING_WAIT;
223 static int ignore_cpu_rev;
224 static int default_uart_mode;           /* RS232 */
225
226 static void edge_tty_recv(struct device *dev, struct tty_struct *tty,
227                           unsigned char *data, int length);
228
229 static void stop_read(struct edgeport_port *edge_port);
230 static int restart_read(struct edgeport_port *edge_port);
231
232 static void edge_set_termios(struct tty_struct *tty,
233                 struct usb_serial_port *port, struct ktermios *old_termios);
234 static void edge_send(struct tty_struct *tty);
235
236 /* sysfs attributes */
237 static int edge_create_sysfs_attrs(struct usb_serial_port *port);
238 static int edge_remove_sysfs_attrs(struct usb_serial_port *port);
239
240
241 static int ti_vread_sync(struct usb_device *dev, __u8 request,
242                                 __u16 value, __u16 index, u8 *data, int size)
243 {
244         int status;
245
246         status = usb_control_msg(dev, usb_rcvctrlpipe(dev, 0), request,
247                         (USB_TYPE_VENDOR | USB_RECIP_DEVICE | USB_DIR_IN),
248                         value, index, data, size, 1000);
249         if (status < 0)
250                 return status;
251         if (status != size) {
252                 dbg("%s - wanted to write %d, but only wrote %d",
253                                              __func__, size, status);
254                 return -ECOMM;
255         }
256         return 0;
257 }
258
259 static int ti_vsend_sync(struct usb_device *dev, __u8 request,
260                                 __u16 value, __u16 index, u8 *data, int size)
261 {
262         int status;
263
264         status = usb_control_msg(dev, usb_sndctrlpipe(dev, 0), request,
265                         (USB_TYPE_VENDOR | USB_RECIP_DEVICE | USB_DIR_OUT),
266                         value, index, data, size, 1000);
267         if (status < 0)
268                 return status;
269         if (status != size) {
270                 dbg("%s - wanted to write %d, but only wrote %d",
271                      __func__, size, status);
272                 return -ECOMM;
273         }
274         return 0;
275 }
276
277 static int send_cmd(struct usb_device *dev, __u8 command,
278                                 __u8 moduleid, __u16 value, u8 *data,
279                                 int size)
280 {
281         return ti_vsend_sync(dev, command, value, moduleid, data, size);
282 }
283
284 /* clear tx/rx buffers and fifo in TI UMP */
285 static int purge_port(struct usb_serial_port *port, __u16 mask)
286 {
287         int port_number = port->number - port->serial->minor;
288
289         dbg("%s - port %d, mask %x", __func__, port_number, mask);
290
291         return send_cmd(port->serial->dev,
292                                         UMPC_PURGE_PORT,
293                                         (__u8)(UMPM_UART1_PORT + port_number),
294                                         mask,
295                                         NULL,
296                                         0);
297 }
298
299 /**
300  * read_download_mem - Read edgeport memory from TI chip
301  * @dev: usb device pointer
302  * @start_address: Device CPU address at which to read
303  * @length: Length of above data
304  * @address_type: Can read both XDATA and I2C
305  * @buffer: pointer to input data buffer
306  */
307 static int read_download_mem(struct usb_device *dev, int start_address,
308                                 int length, __u8 address_type, __u8 *buffer)
309 {
310         int status = 0;
311         __u8 read_length;
312         __be16 be_start_address;
313
314         dbg("%s - @ %x for %d", __func__, start_address, length);
315
316         /* Read in blocks of 64 bytes
317          * (TI firmware can't handle more than 64 byte reads)
318          */
319         while (length) {
320                 if (length > 64)
321                         read_length = 64;
322                 else
323                         read_length = (__u8)length;
324
325                 if (read_length > 1) {
326                         dbg("%s - @ %x for %d", __func__,
327                              start_address, read_length);
328                 }
329                 be_start_address = cpu_to_be16(start_address);
330                 status = ti_vread_sync(dev, UMPC_MEMORY_READ,
331                                         (__u16)address_type,
332                                         (__force __u16)be_start_address,
333                                         buffer, read_length);
334
335                 if (status) {
336                         dbg("%s - ERROR %x", __func__, status);
337                         return status;
338                 }
339
340                 if (read_length > 1)
341                         usb_serial_debug_data(debug, &dev->dev, __func__,
342                                               read_length, buffer);
343
344                 /* Update pointers/length */
345                 start_address += read_length;
346                 buffer += read_length;
347                 length -= read_length;
348         }
349
350         return status;
351 }
352
353 static int read_ram(struct usb_device *dev, int start_address,
354                                                 int length, __u8 *buffer)
355 {
356         return read_download_mem(dev, start_address, length,
357                                         DTK_ADDR_SPACE_XDATA, buffer);
358 }
359
360 /* Read edgeport memory to a given block */
361 static int read_boot_mem(struct edgeport_serial *serial,
362                                 int start_address, int length, __u8 *buffer)
363 {
364         int status = 0;
365         int i;
366
367         for (i = 0; i < length; i++) {
368                 status = ti_vread_sync(serial->serial->dev,
369                                 UMPC_MEMORY_READ, serial->TI_I2C_Type,
370                                 (__u16)(start_address+i), &buffer[i], 0x01);
371                 if (status) {
372                         dbg("%s - ERROR %x", __func__, status);
373                         return status;
374                 }
375         }
376
377         dbg("%s - start_address = %x, length = %d",
378                                         __func__, start_address, length);
379         usb_serial_debug_data(debug, &serial->serial->dev->dev,
380                                         __func__, length, buffer);
381
382         serial->TiReadI2C = 1;
383
384         return status;
385 }
386
387 /* Write given block to TI EPROM memory */
388 static int write_boot_mem(struct edgeport_serial *serial,
389                                 int start_address, int length, __u8 *buffer)
390 {
391         int status = 0;
392         int i;
393         u8 *temp;
394
395         /* Must do a read before write */
396         if (!serial->TiReadI2C) {
397                 temp = kmalloc(1, GFP_KERNEL);
398                 if (!temp) {
399                         dev_err(&serial->serial->dev->dev,
400                                         "%s - out of memory\n", __func__);
401                         return -ENOMEM;
402                 }
403                 status = read_boot_mem(serial, 0, 1, temp);
404                 kfree(temp);
405                 if (status)
406                         return status;
407         }
408
409         for (i = 0; i < length; ++i) {
410                 status = ti_vsend_sync(serial->serial->dev,
411                                 UMPC_MEMORY_WRITE, buffer[i],
412                                 (__u16)(i + start_address), NULL, 0);
413                 if (status)
414                         return status;
415         }
416
417         dbg("%s - start_sddr = %x, length = %d",
418                                         __func__, start_address, length);
419         usb_serial_debug_data(debug, &serial->serial->dev->dev,
420                                         __func__, length, buffer);
421
422         return status;
423 }
424
425
426 /* Write edgeport I2C memory to TI chip */
427 static int write_i2c_mem(struct edgeport_serial *serial,
428                 int start_address, int length, __u8 address_type, __u8 *buffer)
429 {
430         int status = 0;
431         int write_length;
432         __be16 be_start_address;
433
434         /* We can only send a maximum of 1 aligned byte page at a time */
435
436         /* calculate the number of bytes left in the first page */
437         write_length = EPROM_PAGE_SIZE -
438                                 (start_address & (EPROM_PAGE_SIZE - 1));
439
440         if (write_length > length)
441                 write_length = length;
442
443         dbg("%s - BytesInFirstPage Addr = %x, length = %d",
444                                         __func__, start_address, write_length);
445         usb_serial_debug_data(debug, &serial->serial->dev->dev,
446                                                 __func__, write_length, buffer);
447
448         /* Write first page */
449         be_start_address = cpu_to_be16(start_address);
450         status = ti_vsend_sync(serial->serial->dev,
451                                 UMPC_MEMORY_WRITE, (__u16)address_type,
452                                 (__force __u16)be_start_address,
453                                 buffer, write_length);
454         if (status) {
455                 dbg("%s - ERROR %d", __func__, status);
456                 return status;
457         }
458
459         length          -= write_length;
460         start_address   += write_length;
461         buffer          += write_length;
462
463         /* We should be aligned now -- can write
464            max page size bytes at a time */
465         while (length) {
466                 if (length > EPROM_PAGE_SIZE)
467                         write_length = EPROM_PAGE_SIZE;
468                 else
469                         write_length = length;
470
471                 dbg("%s - Page Write Addr = %x, length = %d",
472                                         __func__, start_address, write_length);
473                 usb_serial_debug_data(debug, &serial->serial->dev->dev,
474                                         __func__, write_length, buffer);
475
476                 /* Write next page */
477                 be_start_address = cpu_to_be16(start_address);
478                 status = ti_vsend_sync(serial->serial->dev, UMPC_MEMORY_WRITE,
479                                 (__u16)address_type,
480                                 (__force __u16)be_start_address,
481                                 buffer, write_length);
482                 if (status) {
483                         dev_err(&serial->serial->dev->dev, "%s - ERROR %d\n",
484                                         __func__, status);
485                         return status;
486                 }
487
488                 length          -= write_length;
489                 start_address   += write_length;
490                 buffer          += write_length;
491         }
492         return status;
493 }
494
495 /* Examine the UMP DMA registers and LSR
496  *
497  * Check the MSBit of the X and Y DMA byte count registers.
498  * A zero in this bit indicates that the TX DMA buffers are empty
499  * then check the TX Empty bit in the UART.
500  */
501 static int tx_active(struct edgeport_port *port)
502 {
503         int status;
504         struct out_endpoint_desc_block *oedb;
505         __u8 *lsr;
506         int bytes_left = 0;
507
508         oedb = kmalloc(sizeof(*oedb), GFP_KERNEL);
509         if (!oedb) {
510                 dev_err(&port->port->dev, "%s - out of memory\n", __func__);
511                 return -ENOMEM;
512         }
513
514         lsr = kmalloc(1, GFP_KERNEL);   /* Sigh, that's right, just one byte,
515                                            as not all platforms can do DMA
516                                            from stack */
517         if (!lsr) {
518                 kfree(oedb);
519                 return -ENOMEM;
520         }
521         /* Read the DMA Count Registers */
522         status = read_ram(port->port->serial->dev, port->dma_address,
523                                                 sizeof(*oedb), (void *)oedb);
524         if (status)
525                 goto exit_is_tx_active;
526
527         dbg("%s - XByteCount    0x%X", __func__, oedb->XByteCount);
528
529         /* and the LSR */
530         status = read_ram(port->port->serial->dev,
531                         port->uart_base + UMPMEM_OFFS_UART_LSR, 1, lsr);
532
533         if (status)
534                 goto exit_is_tx_active;
535         dbg("%s - LSR = 0x%X", __func__, *lsr);
536
537         /* If either buffer has data or we are transmitting then return TRUE */
538         if ((oedb->XByteCount & 0x80) != 0)
539                 bytes_left += 64;
540
541         if ((*lsr & UMP_UART_LSR_TX_MASK) == 0)
542                 bytes_left += 1;
543
544         /* We return Not Active if we get any kind of error */
545 exit_is_tx_active:
546         dbg("%s - return %d", __func__, bytes_left);
547
548         kfree(lsr);
549         kfree(oedb);
550         return bytes_left;
551 }
552
553 static void chase_port(struct edgeport_port *port, unsigned long timeout,
554                                                                 int flush)
555 {
556         int baud_rate;
557         struct tty_struct *tty = tty_port_tty_get(&port->port->port);
558         wait_queue_t wait;
559         unsigned long flags;
560
561         if (!tty)
562                 return;
563
564         if (!timeout)
565                 timeout = (HZ * EDGE_CLOSING_WAIT)/100;
566
567         /* wait for data to drain from the buffer */
568         spin_lock_irqsave(&port->ep_lock, flags);
569         init_waitqueue_entry(&wait, current);
570         add_wait_queue(&tty->write_wait, &wait);
571         for (;;) {
572                 set_current_state(TASK_INTERRUPTIBLE);
573                 if (kfifo_len(&port->write_fifo) == 0
574                 || timeout == 0 || signal_pending(current)
575                 || !usb_get_intfdata(port->port->serial->interface))
576                         /* disconnect */
577                         break;
578                 spin_unlock_irqrestore(&port->ep_lock, flags);
579                 timeout = schedule_timeout(timeout);
580                 spin_lock_irqsave(&port->ep_lock, flags);
581         }
582         set_current_state(TASK_RUNNING);
583         remove_wait_queue(&tty->write_wait, &wait);
584         if (flush)
585                 kfifo_reset_out(&port->write_fifo);
586         spin_unlock_irqrestore(&port->ep_lock, flags);
587         tty_kref_put(tty);
588
589         /* wait for data to drain from the device */
590         timeout += jiffies;
591         while ((long)(jiffies - timeout) < 0 && !signal_pending(current)
592         && usb_get_intfdata(port->port->serial->interface)) {
593                 /* not disconnected */
594                 if (!tx_active(port))
595                         break;
596                 msleep(10);
597         }
598
599         /* disconnected */
600         if (!usb_get_intfdata(port->port->serial->interface))
601                 return;
602
603         /* wait one more character time, based on baud rate */
604         /* (tx_active doesn't seem to wait for the last byte) */
605         baud_rate = port->baud_rate;
606         if (baud_rate == 0)
607                 baud_rate = 50;
608         msleep(max(1, DIV_ROUND_UP(10000, baud_rate)));
609 }
610
611 static int choose_config(struct usb_device *dev)
612 {
613         /*
614          * There may be multiple configurations on this device, in which case
615          * we would need to read and parse all of them to find out which one
616          * we want. However, we just support one config at this point,
617          * configuration # 1, which is Config Descriptor 0.
618          */
619
620         dbg("%s - Number of Interfaces = %d",
621                                 __func__, dev->config->desc.bNumInterfaces);
622         dbg("%s - MAX Power            = %d",
623                                 __func__, dev->config->desc.bMaxPower * 2);
624
625         if (dev->config->desc.bNumInterfaces != 1) {
626                 dev_err(&dev->dev, "%s - bNumInterfaces is not 1, ERROR!\n",
627                                                                 __func__);
628                 return -ENODEV;
629         }
630
631         return 0;
632 }
633
634 static int read_rom(struct edgeport_serial *serial,
635                                 int start_address, int length, __u8 *buffer)
636 {
637         int status;
638
639         if (serial->product_info.TiMode == TI_MODE_DOWNLOAD) {
640                 status = read_download_mem(serial->serial->dev,
641                                                start_address,
642                                                length,
643                                                serial->TI_I2C_Type,
644                                                buffer);
645         } else {
646                 status = read_boot_mem(serial, start_address, length,
647                                                                 buffer);
648         }
649         return status;
650 }
651
652 static int write_rom(struct edgeport_serial *serial, int start_address,
653                                                 int length, __u8 *buffer)
654 {
655         if (serial->product_info.TiMode == TI_MODE_BOOT)
656                 return write_boot_mem(serial, start_address, length,
657                                                                 buffer);
658
659         if (serial->product_info.TiMode == TI_MODE_DOWNLOAD)
660                 return write_i2c_mem(serial, start_address, length,
661                                                 serial->TI_I2C_Type, buffer);
662         return -EINVAL;
663 }
664
665
666
667 /* Read a descriptor header from I2C based on type */
668 static int get_descriptor_addr(struct edgeport_serial *serial,
669                                 int desc_type, struct ti_i2c_desc *rom_desc)
670 {
671         int start_address;
672         int status;
673
674         /* Search for requested descriptor in I2C */
675         start_address = 2;
676         do {
677                 status = read_rom(serial,
678                                    start_address,
679                                    sizeof(struct ti_i2c_desc),
680                                    (__u8 *)rom_desc);
681                 if (status)
682                         return 0;
683
684                 if (rom_desc->Type == desc_type)
685                         return start_address;
686
687                 start_address = start_address + sizeof(struct ti_i2c_desc)
688                                                         + rom_desc->Size;
689
690         } while ((start_address < TI_MAX_I2C_SIZE) && rom_desc->Type);
691
692         return 0;
693 }
694
695 /* Validate descriptor checksum */
696 static int valid_csum(struct ti_i2c_desc *rom_desc, __u8 *buffer)
697 {
698         __u16 i;
699         __u8 cs = 0;
700
701         for (i = 0; i < rom_desc->Size; i++)
702                 cs = (__u8)(cs + buffer[i]);
703
704         if (cs != rom_desc->CheckSum) {
705                 dbg("%s - Mismatch %x - %x", __func__, rom_desc->CheckSum, cs);
706                 return -EINVAL;
707         }
708         return 0;
709 }
710
711 /* Make sure that the I2C image is good */
712 static int check_i2c_image(struct edgeport_serial *serial)
713 {
714         struct device *dev = &serial->serial->dev->dev;
715         int status = 0;
716         struct ti_i2c_desc *rom_desc;
717         int start_address = 2;
718         __u8 *buffer;
719         __u16 ttype;
720
721         rom_desc = kmalloc(sizeof(*rom_desc), GFP_KERNEL);
722         if (!rom_desc) {
723                 dev_err(dev, "%s - out of memory\n", __func__);
724                 return -ENOMEM;
725         }
726         buffer = kmalloc(TI_MAX_I2C_SIZE, GFP_KERNEL);
727         if (!buffer) {
728                 dev_err(dev, "%s - out of memory when allocating buffer\n",
729                                                                 __func__);
730                 kfree(rom_desc);
731                 return -ENOMEM;
732         }
733
734         /* Read the first byte (Signature0) must be 0x52 or 0x10 */
735         status = read_rom(serial, 0, 1, buffer);
736         if (status)
737                 goto out;
738
739         if (*buffer != UMP5152 && *buffer != UMP3410) {
740                 dev_err(dev, "%s - invalid buffer signature\n", __func__);
741                 status = -ENODEV;
742                 goto out;
743         }
744
745         do {
746                 /* Validate the I2C */
747                 status = read_rom(serial,
748                                 start_address,
749                                 sizeof(struct ti_i2c_desc),
750                                 (__u8 *)rom_desc);
751                 if (status)
752                         break;
753
754                 if ((start_address + sizeof(struct ti_i2c_desc) +
755                                         rom_desc->Size) > TI_MAX_I2C_SIZE) {
756                         status = -ENODEV;
757                         dbg("%s - structure too big, erroring out.", __func__);
758                         break;
759                 }
760
761                 dbg("%s Type = 0x%x", __func__, rom_desc->Type);
762
763                 /* Skip type 2 record */
764                 ttype = rom_desc->Type & 0x0f;
765                 if (ttype != I2C_DESC_TYPE_FIRMWARE_BASIC
766                         && ttype != I2C_DESC_TYPE_FIRMWARE_AUTO) {
767                         /* Read the descriptor data */
768                         status = read_rom(serial, start_address +
769                                                 sizeof(struct ti_i2c_desc),
770                                                 rom_desc->Size, buffer);
771                         if (status)
772                                 break;
773
774                         status = valid_csum(rom_desc, buffer);
775                         if (status)
776                                 break;
777                 }
778                 start_address = start_address + sizeof(struct ti_i2c_desc) +
779                                                                 rom_desc->Size;
780
781         } while ((rom_desc->Type != I2C_DESC_TYPE_ION) &&
782                                 (start_address < TI_MAX_I2C_SIZE));
783
784         if ((rom_desc->Type != I2C_DESC_TYPE_ION) ||
785                                 (start_address > TI_MAX_I2C_SIZE))
786                 status = -ENODEV;
787
788 out:
789         kfree(buffer);
790         kfree(rom_desc);
791         return status;
792 }
793
794 static int get_manuf_info(struct edgeport_serial *serial, __u8 *buffer)
795 {
796         int status;
797         int start_address;
798         struct ti_i2c_desc *rom_desc;
799         struct edge_ti_manuf_descriptor *desc;
800
801         rom_desc = kmalloc(sizeof(*rom_desc), GFP_KERNEL);
802         if (!rom_desc) {
803                 dev_err(&serial->serial->dev->dev, "%s - out of memory\n",
804                                                                 __func__);
805                 return -ENOMEM;
806         }
807         start_address = get_descriptor_addr(serial, I2C_DESC_TYPE_ION,
808                                                                 rom_desc);
809
810         if (!start_address) {
811                 dbg("%s - Edge Descriptor not found in I2C", __func__);
812                 status = -ENODEV;
813                 goto exit;
814         }
815
816         /* Read the descriptor data */
817         status = read_rom(serial, start_address+sizeof(struct ti_i2c_desc),
818                                                 rom_desc->Size, buffer);
819         if (status)
820                 goto exit;
821
822         status = valid_csum(rom_desc, buffer);
823
824         desc = (struct edge_ti_manuf_descriptor *)buffer;
825         dbg("%s - IonConfig      0x%x", __func__, desc->IonConfig);
826         dbg("%s - Version          %d", __func__, desc->Version);
827         dbg("%s - Cpu/Board      0x%x", __func__, desc->CpuRev_BoardRev);
828         dbg("%s - NumPorts         %d", __func__, desc->NumPorts);
829         dbg("%s - NumVirtualPorts  %d", __func__, desc->NumVirtualPorts);
830         dbg("%s - TotalPorts       %d", __func__, desc->TotalPorts);
831
832 exit:
833         kfree(rom_desc);
834         return status;
835 }
836
837 /* Build firmware header used for firmware update */
838 static int build_i2c_fw_hdr(__u8 *header, struct device *dev)
839 {
840         __u8 *buffer;
841         int buffer_size;
842         int i;
843         int err;
844         __u8 cs = 0;
845         struct ti_i2c_desc *i2c_header;
846         struct ti_i2c_image_header *img_header;
847         struct ti_i2c_firmware_rec *firmware_rec;
848         const struct firmware *fw;
849         const char *fw_name = "edgeport/down3.bin";
850
851         /* In order to update the I2C firmware we must change the type 2 record
852          * to type 0xF2.  This will force the UMP to come up in Boot Mode.
853          * Then while in boot mode, the driver will download the latest
854          * firmware (padded to 15.5k) into the UMP ram.  And finally when the
855          * device comes back up in download mode the driver will cause the new
856          * firmware to be copied from the UMP Ram to I2C and the firmware will
857          * update the record type from 0xf2 to 0x02.
858          */
859
860         /* Allocate a 15.5k buffer + 2 bytes for version number
861          * (Firmware Record) */
862         buffer_size = (((1024 * 16) - 512 ) +
863                         sizeof(struct ti_i2c_firmware_rec));
864
865         buffer = kmalloc(buffer_size, GFP_KERNEL);
866         if (!buffer) {
867                 dev_err(dev, "%s - out of memory\n", __func__);
868                 return -ENOMEM;
869         }
870
871         // Set entire image of 0xffs
872         memset(buffer, 0xff, buffer_size);
873
874         err = request_firmware(&fw, fw_name, dev);
875         if (err) {
876                 printk(KERN_ERR "Failed to load image \"%s\" err %d\n",
877                        fw_name, err);
878                 kfree(buffer);
879                 return err;
880         }
881
882         /* Save Download Version Number */
883         OperationalMajorVersion = fw->data[0];
884         OperationalMinorVersion = fw->data[1];
885         OperationalBuildNumber = fw->data[2] | (fw->data[3] << 8);
886
887         /* Copy version number into firmware record */
888         firmware_rec = (struct ti_i2c_firmware_rec *)buffer;
889
890         firmware_rec->Ver_Major = OperationalMajorVersion;
891         firmware_rec->Ver_Minor = OperationalMinorVersion;
892
893         /* Pointer to fw_down memory image */
894         img_header = (struct ti_i2c_image_header *)&fw->data[4];
895
896         memcpy(buffer + sizeof(struct ti_i2c_firmware_rec),
897                 &fw->data[4 + sizeof(struct ti_i2c_image_header)],
898                 le16_to_cpu(img_header->Length));
899
900         release_firmware(fw);
901
902         for (i=0; i < buffer_size; i++) {
903                 cs = (__u8)(cs + buffer[i]);
904         }
905
906         kfree(buffer);
907
908         /* Build new header */
909         i2c_header =  (struct ti_i2c_desc *)header;
910         firmware_rec =  (struct ti_i2c_firmware_rec*)i2c_header->Data;
911
912         i2c_header->Type        = I2C_DESC_TYPE_FIRMWARE_BLANK;
913         i2c_header->Size        = (__u16)buffer_size;
914         i2c_header->CheckSum    = cs;
915         firmware_rec->Ver_Major = OperationalMajorVersion;
916         firmware_rec->Ver_Minor = OperationalMinorVersion;
917
918         return 0;
919 }
920
921 /* Try to figure out what type of I2c we have */
922 static int i2c_type_bootmode(struct edgeport_serial *serial)
923 {
924         int status;
925         u8 *data;
926
927         data = kmalloc(1, GFP_KERNEL);
928         if (!data) {
929                 dev_err(&serial->serial->dev->dev,
930                                 "%s - out of memory\n", __func__);
931                 return -ENOMEM;
932         }
933
934         /* Try to read type 2 */
935         status = ti_vread_sync(serial->serial->dev, UMPC_MEMORY_READ,
936                                 DTK_ADDR_SPACE_I2C_TYPE_II, 0, data, 0x01);
937         if (status)
938                 dbg("%s - read 2 status error = %d", __func__, status);
939         else
940                 dbg("%s - read 2 data = 0x%x", __func__, *data);
941         if ((!status) && (*data == UMP5152 || *data == UMP3410)) {
942                 dbg("%s - ROM_TYPE_II", __func__);
943                 serial->TI_I2C_Type = DTK_ADDR_SPACE_I2C_TYPE_II;
944                 goto out;
945         }
946
947         /* Try to read type 3 */
948         status = ti_vread_sync(serial->serial->dev, UMPC_MEMORY_READ,
949                                 DTK_ADDR_SPACE_I2C_TYPE_III, 0, data, 0x01);
950         if (status)
951                 dbg("%s - read 3 status error = %d", __func__, status);
952         else
953                 dbg("%s - read 2 data = 0x%x", __func__, *data);
954         if ((!status) && (*data == UMP5152 || *data == UMP3410)) {
955                 dbg("%s - ROM_TYPE_III", __func__);
956                 serial->TI_I2C_Type = DTK_ADDR_SPACE_I2C_TYPE_III;
957                 goto out;
958         }
959
960         dbg("%s - Unknown", __func__);
961         serial->TI_I2C_Type = DTK_ADDR_SPACE_I2C_TYPE_II;
962         status = -ENODEV;
963 out:
964         kfree(data);
965         return status;
966 }
967
968 static int bulk_xfer(struct usb_serial *serial, void *buffer,
969                                                 int length, int *num_sent)
970 {
971         int status;
972
973         status = usb_bulk_msg(serial->dev,
974                         usb_sndbulkpipe(serial->dev,
975                                 serial->port[0]->bulk_out_endpointAddress),
976                         buffer, length, num_sent, 1000);
977         return status;
978 }
979
980 /* Download given firmware image to the device (IN BOOT MODE) */
981 static int download_code(struct edgeport_serial *serial, __u8 *image,
982                                                         int image_length)
983 {
984         int status = 0;
985         int pos;
986         int transfer;
987         int done;
988
989         /* Transfer firmware image */
990         for (pos = 0; pos < image_length; ) {
991                 /* Read the next buffer from file */
992                 transfer = image_length - pos;
993                 if (transfer > EDGE_FW_BULK_MAX_PACKET_SIZE)
994                         transfer = EDGE_FW_BULK_MAX_PACKET_SIZE;
995
996                 /* Transfer data */
997                 status = bulk_xfer(serial->serial, &image[pos],
998                                                         transfer, &done);
999                 if (status)
1000                         break;
1001                 /* Advance buffer pointer */
1002                 pos += done;
1003         }
1004
1005         return status;
1006 }
1007
1008 /* FIXME!!! */
1009 static int config_boot_dev(struct usb_device *dev)
1010 {
1011         return 0;
1012 }
1013
1014 static int ti_cpu_rev(struct edge_ti_manuf_descriptor *desc)
1015 {
1016         return TI_GET_CPU_REVISION(desc->CpuRev_BoardRev);
1017 }
1018
1019 /**
1020  * DownloadTIFirmware - Download run-time operating firmware to the TI5052
1021  *
1022  * This routine downloads the main operating code into the TI5052, using the
1023  * boot code already burned into E2PROM or ROM.
1024  */
1025 static int download_fw(struct edgeport_serial *serial)
1026 {
1027         struct device *dev = &serial->serial->dev->dev;
1028         int status = 0;
1029         int start_address;
1030         struct edge_ti_manuf_descriptor *ti_manuf_desc;
1031         struct usb_interface_descriptor *interface;
1032         int download_cur_ver;
1033         int download_new_ver;
1034
1035         /* This routine is entered by both the BOOT mode and the Download mode
1036          * We can determine which code is running by the reading the config
1037          * descriptor and if we have only one bulk pipe it is in boot mode
1038          */
1039         serial->product_info.hardware_type = HARDWARE_TYPE_TIUMP;
1040
1041         /* Default to type 2 i2c */
1042         serial->TI_I2C_Type = DTK_ADDR_SPACE_I2C_TYPE_II;
1043
1044         status = choose_config(serial->serial->dev);
1045         if (status)
1046                 return status;
1047
1048         interface = &serial->serial->interface->cur_altsetting->desc;
1049         if (!interface) {
1050                 dev_err(dev, "%s - no interface set, error!\n", __func__);
1051                 return -ENODEV;
1052         }
1053
1054         /*
1055          * Setup initial mode -- the default mode 0 is TI_MODE_CONFIGURING
1056          * if we have more than one endpoint we are definitely in download
1057          * mode
1058          */
1059         if (interface->bNumEndpoints > 1)
1060                 serial->product_info.TiMode = TI_MODE_DOWNLOAD;
1061         else
1062                 /* Otherwise we will remain in configuring mode */
1063                 serial->product_info.TiMode = TI_MODE_CONFIGURING;
1064
1065         /********************************************************************/
1066         /* Download Mode */
1067         /********************************************************************/
1068         if (serial->product_info.TiMode == TI_MODE_DOWNLOAD) {
1069                 struct ti_i2c_desc *rom_desc;
1070
1071                 dbg("%s - RUNNING IN DOWNLOAD MODE", __func__);
1072
1073                 status = check_i2c_image(serial);
1074                 if (status) {
1075                         dbg("%s - DOWNLOAD MODE -- BAD I2C", __func__);
1076                         return status;
1077                 }
1078
1079                 /* Validate Hardware version number
1080                  * Read Manufacturing Descriptor from TI Based Edgeport
1081                  */
1082                 ti_manuf_desc = kmalloc(sizeof(*ti_manuf_desc), GFP_KERNEL);
1083                 if (!ti_manuf_desc) {
1084                         dev_err(dev, "%s - out of memory.\n", __func__);
1085                         return -ENOMEM;
1086                 }
1087                 status = get_manuf_info(serial, (__u8 *)ti_manuf_desc);
1088                 if (status) {
1089                         kfree(ti_manuf_desc);
1090                         return status;
1091                 }
1092
1093                 /* Check version number of ION descriptor */
1094                 if (!ignore_cpu_rev && ti_cpu_rev(ti_manuf_desc) < 2) {
1095                         dbg("%s - Wrong CPU Rev %d (Must be 2)",
1096                                 __func__, ti_cpu_rev(ti_manuf_desc));
1097                         kfree(ti_manuf_desc);
1098                         return -EINVAL;
1099                 }
1100
1101                 rom_desc = kmalloc(sizeof(*rom_desc), GFP_KERNEL);
1102                 if (!rom_desc) {
1103                         dev_err(dev, "%s - out of memory.\n", __func__);
1104                         kfree(ti_manuf_desc);
1105                         return -ENOMEM;
1106                 }
1107
1108                 /* Search for type 2 record (firmware record) */
1109                 start_address = get_descriptor_addr(serial,
1110                                 I2C_DESC_TYPE_FIRMWARE_BASIC, rom_desc);
1111                 if (start_address != 0) {
1112                         struct ti_i2c_firmware_rec *firmware_version;
1113                         u8 *record;
1114
1115                         dbg("%s - Found Type FIRMWARE (Type 2) record",
1116                                                                 __func__);
1117
1118                         firmware_version = kmalloc(sizeof(*firmware_version),
1119                                                                 GFP_KERNEL);
1120                         if (!firmware_version) {
1121                                 dev_err(dev, "%s - out of memory.\n", __func__);
1122                                 kfree(rom_desc);
1123                                 kfree(ti_manuf_desc);
1124                                 return -ENOMEM;
1125                         }
1126
1127                         /* Validate version number
1128                          * Read the descriptor data
1129                          */
1130                         status = read_rom(serial, start_address +
1131                                         sizeof(struct ti_i2c_desc),
1132                                         sizeof(struct ti_i2c_firmware_rec),
1133                                         (__u8 *)firmware_version);
1134                         if (status) {
1135                                 kfree(firmware_version);
1136                                 kfree(rom_desc);
1137                                 kfree(ti_manuf_desc);
1138                                 return status;
1139                         }
1140
1141                         /* Check version number of download with current
1142                            version in I2c */
1143                         download_cur_ver = (firmware_version->Ver_Major << 8) +
1144                                            (firmware_version->Ver_Minor);
1145                         download_new_ver = (OperationalMajorVersion << 8) +
1146                                            (OperationalMinorVersion);
1147
1148                         dbg("%s - >> FW Versions Device %d.%d  Driver %d.%d",
1149                             __func__,
1150                             firmware_version->Ver_Major,
1151                             firmware_version->Ver_Minor,
1152                             OperationalMajorVersion,
1153                             OperationalMinorVersion);
1154
1155                         /* Check if we have an old version in the I2C and
1156                            update if necessary */
1157                         if (download_cur_ver < download_new_ver) {
1158                                 dbg("%s - Update I2C dld from %d.%d to %d.%d",
1159                                     __func__,
1160                                     firmware_version->Ver_Major,
1161                                     firmware_version->Ver_Minor,
1162                                     OperationalMajorVersion,
1163                                     OperationalMinorVersion);
1164
1165                                 record = kmalloc(1, GFP_KERNEL);
1166                                 if (!record) {
1167                                         dev_err(dev, "%s - out of memory.\n",
1168                                                         __func__);
1169                                         kfree(firmware_version);
1170                                         kfree(rom_desc);
1171                                         kfree(ti_manuf_desc);
1172                                         return -ENOMEM;
1173                                 }
1174                                 /* In order to update the I2C firmware we must
1175                                  * change the type 2 record to type 0xF2. This
1176                                  * will force the UMP to come up in Boot Mode.
1177                                  * Then while in boot mode, the driver will
1178                                  * download the latest firmware (padded to
1179                                  * 15.5k) into the UMP ram. Finally when the
1180                                  * device comes back up in download mode the
1181                                  * driver will cause the new firmware to be
1182                                  * copied from the UMP Ram to I2C and the
1183                                  * firmware will update the record type from
1184                                  * 0xf2 to 0x02.
1185                                  */
1186                                 *record = I2C_DESC_TYPE_FIRMWARE_BLANK;
1187
1188                                 /* Change the I2C Firmware record type to
1189                                    0xf2 to trigger an update */
1190                                 status = write_rom(serial, start_address,
1191                                                 sizeof(*record), record);
1192                                 if (status) {
1193                                         kfree(record);
1194                                         kfree(firmware_version);
1195                                         kfree(rom_desc);
1196                                         kfree(ti_manuf_desc);
1197                                         return status;
1198                                 }
1199
1200                                 /* verify the write -- must do this in order
1201                                  * for write to complete before we do the
1202                                  * hardware reset
1203                                  */
1204                                 status = read_rom(serial,
1205                                                         start_address,
1206                                                         sizeof(*record),
1207                                                         record);
1208                                 if (status) {
1209                                         kfree(record);
1210                                         kfree(firmware_version);
1211                                         kfree(rom_desc);
1212                                         kfree(ti_manuf_desc);
1213                                         return status;
1214                                 }
1215
1216                                 if (*record != I2C_DESC_TYPE_FIRMWARE_BLANK) {
1217                                         dev_err(dev,
1218                                                 "%s - error resetting device\n",
1219                                                 __func__);
1220                                         kfree(record);
1221                                         kfree(firmware_version);
1222                                         kfree(rom_desc);
1223                                         kfree(ti_manuf_desc);
1224                                         return -ENODEV;
1225                                 }
1226
1227                                 dbg("%s - HARDWARE RESET", __func__);
1228
1229                                 /* Reset UMP -- Back to BOOT MODE */
1230                                 status = ti_vsend_sync(serial->serial->dev,
1231                                                 UMPC_HARDWARE_RESET,
1232                                                 0, 0, NULL, 0);
1233
1234                                 dbg("%s - HARDWARE RESET return %d",
1235                                                 __func__, status);
1236
1237                                 /* return an error on purpose. */
1238                                 kfree(record);
1239                                 kfree(firmware_version);
1240                                 kfree(rom_desc);
1241                                 kfree(ti_manuf_desc);
1242                                 return -ENODEV;
1243                         }
1244                         kfree(firmware_version);
1245                 }
1246                 /* Search for type 0xF2 record (firmware blank record) */
1247                 else if ((start_address = get_descriptor_addr(serial, I2C_DESC_TYPE_FIRMWARE_BLANK, rom_desc)) != 0) {
1248 #define HEADER_SIZE     (sizeof(struct ti_i2c_desc) + \
1249                                         sizeof(struct ti_i2c_firmware_rec))
1250                         __u8 *header;
1251                         __u8 *vheader;
1252
1253                         header = kmalloc(HEADER_SIZE, GFP_KERNEL);
1254                         if (!header) {
1255                                 dev_err(dev, "%s - out of memory.\n", __func__);
1256                                 kfree(rom_desc);
1257                                 kfree(ti_manuf_desc);
1258                                 return -ENOMEM;
1259                         }
1260
1261                         vheader = kmalloc(HEADER_SIZE, GFP_KERNEL);
1262                         if (!vheader) {
1263                                 dev_err(dev, "%s - out of memory.\n", __func__);
1264                                 kfree(header);
1265                                 kfree(rom_desc);
1266                                 kfree(ti_manuf_desc);
1267                                 return -ENOMEM;
1268                         }
1269
1270                         dbg("%s - Found Type BLANK FIRMWARE (Type F2) record",
1271                                                                 __func__);
1272
1273                         /*
1274                          * In order to update the I2C firmware we must change
1275                          * the type 2 record to type 0xF2. This will force the
1276                          * UMP to come up in Boot Mode.  Then while in boot
1277                          * mode, the driver will download the latest firmware
1278                          * (padded to 15.5k) into the UMP ram. Finally when the
1279                          * device comes back up in download mode the driver
1280                          * will cause the new firmware to be copied from the
1281                          * UMP Ram to I2C and the firmware will update the
1282                          * record type from 0xf2 to 0x02.
1283                          */
1284                         status = build_i2c_fw_hdr(header, dev);
1285                         if (status) {
1286                                 kfree(vheader);
1287                                 kfree(header);
1288                                 kfree(rom_desc);
1289                                 kfree(ti_manuf_desc);
1290                                 return -EINVAL;
1291                         }
1292
1293                         /* Update I2C with type 0xf2 record with correct
1294                            size and checksum */
1295                         status = write_rom(serial,
1296                                                 start_address,
1297                                                 HEADER_SIZE,
1298                                                 header);
1299                         if (status) {
1300                                 kfree(vheader);
1301                                 kfree(header);
1302                                 kfree(rom_desc);
1303                                 kfree(ti_manuf_desc);
1304                                 return -EINVAL;
1305                         }
1306
1307                         /* verify the write -- must do this in order for
1308                            write to complete before we do the hardware reset */
1309                         status = read_rom(serial, start_address,
1310                                                         HEADER_SIZE, vheader);
1311
1312                         if (status) {
1313                                 dbg("%s - can't read header back", __func__);
1314                                 kfree(vheader);
1315                                 kfree(header);
1316                                 kfree(rom_desc);
1317                                 kfree(ti_manuf_desc);
1318                                 return status;
1319                         }
1320                         if (memcmp(vheader, header, HEADER_SIZE)) {
1321                                 dbg("%s - write download record failed",
1322                                         __func__);
1323                                 kfree(vheader);
1324                                 kfree(header);
1325                                 kfree(rom_desc);
1326                                 kfree(ti_manuf_desc);
1327                                 return -EINVAL;
1328                         }
1329
1330                         kfree(vheader);
1331                         kfree(header);
1332
1333                         dbg("%s - Start firmware update", __func__);
1334
1335                         /* Tell firmware to copy download image into I2C */
1336                         status = ti_vsend_sync(serial->serial->dev,
1337                                         UMPC_COPY_DNLD_TO_I2C, 0, 0, NULL, 0);
1338
1339                         dbg("%s - Update complete 0x%x", __func__, status);
1340                         if (status) {
1341                                 dev_err(dev,
1342                                         "%s - UMPC_COPY_DNLD_TO_I2C failed\n",
1343                                                                 __func__);
1344                                 kfree(rom_desc);
1345                                 kfree(ti_manuf_desc);
1346                                 return status;
1347                         }
1348                 }
1349
1350                 // The device is running the download code
1351                 kfree(rom_desc);
1352                 kfree(ti_manuf_desc);
1353                 return 0;
1354         }
1355
1356         /********************************************************************/
1357         /* Boot Mode */
1358         /********************************************************************/
1359         dbg("%s - RUNNING IN BOOT MODE", __func__);
1360
1361         /* Configure the TI device so we can use the BULK pipes for download */
1362         status = config_boot_dev(serial->serial->dev);
1363         if (status)
1364                 return status;
1365
1366         if (le16_to_cpu(serial->serial->dev->descriptor.idVendor)
1367                                                         != USB_VENDOR_ID_ION) {
1368                 dbg("%s - VID = 0x%x", __func__,
1369                      le16_to_cpu(serial->serial->dev->descriptor.idVendor));
1370                 serial->TI_I2C_Type = DTK_ADDR_SPACE_I2C_TYPE_II;
1371                 goto stayinbootmode;
1372         }
1373
1374         /* We have an ION device (I2c Must be programmed)
1375            Determine I2C image type */
1376         if (i2c_type_bootmode(serial))
1377                 goto stayinbootmode;
1378
1379         /* Check for ION Vendor ID and that the I2C is valid */
1380         if (!check_i2c_image(serial)) {
1381                 struct ti_i2c_image_header *header;
1382                 int i;
1383                 __u8 cs = 0;
1384                 __u8 *buffer;
1385                 int buffer_size;
1386                 int err;
1387                 const struct firmware *fw;
1388                 const char *fw_name = "edgeport/down3.bin";
1389
1390                 /* Validate Hardware version number
1391                  * Read Manufacturing Descriptor from TI Based Edgeport
1392                  */
1393                 ti_manuf_desc = kmalloc(sizeof(*ti_manuf_desc), GFP_KERNEL);
1394                 if (!ti_manuf_desc) {
1395                         dev_err(dev, "%s - out of memory.\n", __func__);
1396                         return -ENOMEM;
1397                 }
1398                 status = get_manuf_info(serial, (__u8 *)ti_manuf_desc);
1399                 if (status) {
1400                         kfree(ti_manuf_desc);
1401                         goto stayinbootmode;
1402                 }
1403
1404                 /* Check for version 2 */
1405                 if (!ignore_cpu_rev && ti_cpu_rev(ti_manuf_desc) < 2) {
1406                         dbg("%s - Wrong CPU Rev %d (Must be 2)",
1407                                         __func__, ti_cpu_rev(ti_manuf_desc));
1408                         kfree(ti_manuf_desc);
1409                         goto stayinbootmode;
1410                 }
1411
1412                 kfree(ti_manuf_desc);
1413
1414                 /*
1415                  * In order to update the I2C firmware we must change the type
1416                  * 2 record to type 0xF2. This will force the UMP to come up
1417                  * in Boot Mode.  Then while in boot mode, the driver will
1418                  * download the latest firmware (padded to 15.5k) into the
1419                  * UMP ram. Finally when the device comes back up in download
1420                  * mode the driver will cause the new firmware to be copied
1421                  * from the UMP Ram to I2C and the firmware will update the
1422                  * record type from 0xf2 to 0x02.
1423                  *
1424                  * Do we really have to copy the whole firmware image,
1425                  * or could we do this in place!
1426                  */
1427
1428                 /* Allocate a 15.5k buffer + 3 byte header */
1429                 buffer_size = (((1024 * 16) - 512) +
1430                                         sizeof(struct ti_i2c_image_header));
1431                 buffer = kmalloc(buffer_size, GFP_KERNEL);
1432                 if (!buffer) {
1433                         dev_err(dev, "%s - out of memory\n", __func__);
1434                         return -ENOMEM;
1435                 }
1436
1437                 /* Initialize the buffer to 0xff (pad the buffer) */
1438                 memset(buffer, 0xff, buffer_size);
1439
1440                 err = request_firmware(&fw, fw_name, dev);
1441                 if (err) {
1442                         printk(KERN_ERR "Failed to load image \"%s\" err %d\n",
1443                                fw_name, err);
1444                         kfree(buffer);
1445                         return err;
1446                 }
1447                 memcpy(buffer, &fw->data[4], fw->size - 4);
1448                 release_firmware(fw);
1449
1450                 for (i = sizeof(struct ti_i2c_image_header);
1451                                 i < buffer_size; i++) {
1452                         cs = (__u8)(cs + buffer[i]);
1453                 }
1454
1455                 header = (struct ti_i2c_image_header *)buffer;
1456
1457                 /* update length and checksum after padding */
1458                 header->Length   = cpu_to_le16((__u16)(buffer_size -
1459                                         sizeof(struct ti_i2c_image_header)));
1460                 header->CheckSum = cs;
1461
1462                 /* Download the operational code  */
1463                 dbg("%s - Downloading operational code image (TI UMP)",
1464                                                                 __func__);
1465                 status = download_code(serial, buffer, buffer_size);
1466
1467                 kfree(buffer);
1468
1469                 if (status) {
1470                         dbg("%s - Error downloading operational code image",
1471                                                                 __func__);
1472                         return status;
1473                 }
1474
1475                 /* Device will reboot */
1476                 serial->product_info.TiMode = TI_MODE_TRANSITIONING;
1477
1478                 dbg("%s - Download successful -- Device rebooting...",
1479                                                                 __func__);
1480
1481                 /* return an error on purpose */
1482                 return -ENODEV;
1483         }
1484
1485 stayinbootmode:
1486         /* Eprom is invalid or blank stay in boot mode */
1487         dbg("%s - STAYING IN BOOT MODE", __func__);
1488         serial->product_info.TiMode = TI_MODE_BOOT;
1489
1490         return 0;
1491 }
1492
1493
1494 static int ti_do_config(struct edgeport_port *port, int feature, int on)
1495 {
1496         int port_number = port->port->number - port->port->serial->minor;
1497         on = !!on;      /* 1 or 0 not bitmask */
1498         return send_cmd(port->port->serial->dev,
1499                         feature, (__u8)(UMPM_UART1_PORT + port_number),
1500                         on, NULL, 0);
1501 }
1502
1503
1504 static int restore_mcr(struct edgeport_port *port, __u8 mcr)
1505 {
1506         int status = 0;
1507
1508         dbg("%s - %x", __func__, mcr);
1509
1510         status = ti_do_config(port, UMPC_SET_CLR_DTR, mcr & MCR_DTR);
1511         if (status)
1512                 return status;
1513         status = ti_do_config(port, UMPC_SET_CLR_RTS, mcr & MCR_RTS);
1514         if (status)
1515                 return status;
1516         return ti_do_config(port, UMPC_SET_CLR_LOOPBACK, mcr & MCR_LOOPBACK);
1517 }
1518
1519 /* Convert TI LSR to standard UART flags */
1520 static __u8 map_line_status(__u8 ti_lsr)
1521 {
1522         __u8 lsr = 0;
1523
1524 #define MAP_FLAG(flagUmp, flagUart)    \
1525         if (ti_lsr & flagUmp) \
1526                 lsr |= flagUart;
1527
1528         MAP_FLAG(UMP_UART_LSR_OV_MASK, LSR_OVER_ERR)    /* overrun */
1529         MAP_FLAG(UMP_UART_LSR_PE_MASK, LSR_PAR_ERR)     /* parity error */
1530         MAP_FLAG(UMP_UART_LSR_FE_MASK, LSR_FRM_ERR)     /* framing error */
1531         MAP_FLAG(UMP_UART_LSR_BR_MASK, LSR_BREAK)       /* break detected */
1532         MAP_FLAG(UMP_UART_LSR_RX_MASK, LSR_RX_AVAIL)    /* rx data available */
1533         MAP_FLAG(UMP_UART_LSR_TX_MASK, LSR_TX_EMPTY)    /* tx hold reg empty */
1534
1535 #undef MAP_FLAG
1536
1537         return lsr;
1538 }
1539
1540 static void handle_new_msr(struct edgeport_port *edge_port, __u8 msr)
1541 {
1542         struct async_icount *icount;
1543         struct tty_struct *tty;
1544
1545         dbg("%s - %02x", __func__, msr);
1546
1547         if (msr & (EDGEPORT_MSR_DELTA_CTS | EDGEPORT_MSR_DELTA_DSR |
1548                         EDGEPORT_MSR_DELTA_RI | EDGEPORT_MSR_DELTA_CD)) {
1549                 icount = &edge_port->icount;
1550
1551                 /* update input line counters */
1552                 if (msr & EDGEPORT_MSR_DELTA_CTS)
1553                         icount->cts++;
1554                 if (msr & EDGEPORT_MSR_DELTA_DSR)
1555                         icount->dsr++;
1556                 if (msr & EDGEPORT_MSR_DELTA_CD)
1557                         icount->dcd++;
1558                 if (msr & EDGEPORT_MSR_DELTA_RI)
1559                         icount->rng++;
1560                 wake_up_interruptible(&edge_port->delta_msr_wait);
1561         }
1562
1563         /* Save the new modem status */
1564         edge_port->shadow_msr = msr & 0xf0;
1565
1566         tty = tty_port_tty_get(&edge_port->port->port);
1567         /* handle CTS flow control */
1568         if (tty && C_CRTSCTS(tty)) {
1569                 if (msr & EDGEPORT_MSR_CTS) {
1570                         tty->hw_stopped = 0;
1571                         tty_wakeup(tty);
1572                 } else {
1573                         tty->hw_stopped = 1;
1574                 }
1575         }
1576         tty_kref_put(tty);
1577 }
1578
1579 static void handle_new_lsr(struct edgeport_port *edge_port, int lsr_data,
1580                                                         __u8 lsr, __u8 data)
1581 {
1582         struct async_icount *icount;
1583         __u8 new_lsr = (__u8)(lsr & (__u8)(LSR_OVER_ERR | LSR_PAR_ERR |
1584                                                 LSR_FRM_ERR | LSR_BREAK));
1585         struct tty_struct *tty;
1586
1587         dbg("%s - %02x", __func__, new_lsr);
1588
1589         edge_port->shadow_lsr = lsr;
1590
1591         if (new_lsr & LSR_BREAK)
1592                 /*
1593                  * Parity and Framing errors only count if they
1594                  * occur exclusive of a break being received.
1595                  */
1596                 new_lsr &= (__u8)(LSR_OVER_ERR | LSR_BREAK);
1597
1598         /* Place LSR data byte into Rx buffer */
1599         if (lsr_data) {
1600                 tty = tty_port_tty_get(&edge_port->port->port);
1601                 if (tty) {
1602                         edge_tty_recv(&edge_port->port->dev, tty, &data, 1);
1603                         tty_kref_put(tty);
1604                 }
1605         }
1606
1607         /* update input line counters */
1608         icount = &edge_port->icount;
1609         if (new_lsr & LSR_BREAK)
1610                 icount->brk++;
1611         if (new_lsr & LSR_OVER_ERR)
1612                 icount->overrun++;
1613         if (new_lsr & LSR_PAR_ERR)
1614                 icount->parity++;
1615         if (new_lsr & LSR_FRM_ERR)
1616                 icount->frame++;
1617 }
1618
1619
1620 static void edge_interrupt_callback(struct urb *urb)
1621 {
1622         struct edgeport_serial *edge_serial = urb->context;
1623         struct usb_serial_port *port;
1624         struct edgeport_port *edge_port;
1625         unsigned char *data = urb->transfer_buffer;
1626         int length = urb->actual_length;
1627         int port_number;
1628         int function;
1629         int retval;
1630         __u8 lsr;
1631         __u8 msr;
1632         int status = urb->status;
1633
1634         dbg("%s", __func__);
1635
1636         switch (status) {
1637         case 0:
1638                 /* success */
1639                 break;
1640         case -ECONNRESET:
1641         case -ENOENT:
1642         case -ESHUTDOWN:
1643                 /* this urb is terminated, clean up */
1644                 dbg("%s - urb shutting down with status: %d",
1645                     __func__, status);
1646                 return;
1647         default:
1648                 dev_err(&urb->dev->dev, "%s - nonzero urb status received: "
1649                         "%d\n", __func__, status);
1650                 goto exit;
1651         }
1652
1653         if (!length) {
1654                 dbg("%s - no data in urb", __func__);
1655                 goto exit;
1656         }
1657
1658         usb_serial_debug_data(debug, &edge_serial->serial->dev->dev,
1659                                                 __func__, length, data);
1660
1661         if (length != 2) {
1662                 dbg("%s - expecting packet of size 2, got %d",
1663                                                         __func__, length);
1664                 goto exit;
1665         }
1666
1667         port_number = TIUMP_GET_PORT_FROM_CODE(data[0]);
1668         function    = TIUMP_GET_FUNC_FROM_CODE(data[0]);
1669         dbg("%s - port_number %d, function %d, info 0x%x",
1670              __func__, port_number, function, data[1]);
1671         port = edge_serial->serial->port[port_number];
1672         edge_port = usb_get_serial_port_data(port);
1673         if (!edge_port) {
1674                 dbg("%s - edge_port not found", __func__);
1675                 return;
1676         }
1677         switch (function) {
1678         case TIUMP_INTERRUPT_CODE_LSR:
1679                 lsr = map_line_status(data[1]);
1680                 if (lsr & UMP_UART_LSR_DATA_MASK) {
1681                         /* Save the LSR event for bulk read
1682                            completion routine */
1683                         dbg("%s - LSR Event Port %u LSR Status = %02x",
1684                              __func__, port_number, lsr);
1685                         edge_port->lsr_event = 1;
1686                         edge_port->lsr_mask = lsr;
1687                 } else {
1688                         dbg("%s - ===== Port %d LSR Status = %02x ======",
1689                              __func__, port_number, lsr);
1690                         handle_new_lsr(edge_port, 0, lsr, 0);
1691                 }
1692                 break;
1693
1694         case TIUMP_INTERRUPT_CODE_MSR:  /* MSR */
1695                 /* Copy MSR from UMP */
1696                 msr = data[1];
1697                 dbg("%s - ===== Port %u MSR Status = %02x ======",
1698                      __func__, port_number, msr);
1699                 handle_new_msr(edge_port, msr);
1700                 break;
1701
1702         default:
1703                 dev_err(&urb->dev->dev,
1704                         "%s - Unknown Interrupt code from UMP %x\n",
1705                         __func__, data[1]);
1706                 break;
1707
1708         }
1709
1710 exit:
1711         retval = usb_submit_urb(urb, GFP_ATOMIC);
1712         if (retval)
1713                 dev_err(&urb->dev->dev,
1714                         "%s - usb_submit_urb failed with result %d\n",
1715                          __func__, retval);
1716 }
1717
1718 static void edge_bulk_in_callback(struct urb *urb)
1719 {
1720         struct edgeport_port *edge_port = urb->context;
1721         unsigned char *data = urb->transfer_buffer;
1722         struct tty_struct *tty;
1723         int retval = 0;
1724         int port_number;
1725         int status = urb->status;
1726
1727         dbg("%s", __func__);
1728
1729         switch (status) {
1730         case 0:
1731                 /* success */
1732                 break;
1733         case -ECONNRESET:
1734         case -ENOENT:
1735         case -ESHUTDOWN:
1736                 /* this urb is terminated, clean up */
1737                 dbg("%s - urb shutting down with status: %d",
1738                     __func__, status);
1739                 return;
1740         default:
1741                 dev_err(&urb->dev->dev,
1742                         "%s - nonzero read bulk status received: %d\n",
1743                              __func__, status);
1744         }
1745
1746         if (status == -EPIPE)
1747                 goto exit;
1748
1749         if (status) {
1750                 dev_err(&urb->dev->dev, "%s - stopping read!\n", __func__);
1751                 return;
1752         }
1753
1754         port_number = edge_port->port->number - edge_port->port->serial->minor;
1755
1756         if (edge_port->lsr_event) {
1757                 edge_port->lsr_event = 0;
1758                 dbg("%s ===== Port %u LSR Status = %02x, Data = %02x ======",
1759                      __func__, port_number, edge_port->lsr_mask, *data);
1760                 handle_new_lsr(edge_port, 1, edge_port->lsr_mask, *data);
1761                 /* Adjust buffer length/pointer */
1762                 --urb->actual_length;
1763                 ++data;
1764         }
1765
1766         tty = tty_port_tty_get(&edge_port->port->port);
1767         if (tty && urb->actual_length) {
1768                 usb_serial_debug_data(debug, &edge_port->port->dev,
1769                                         __func__, urb->actual_length, data);
1770                 if (edge_port->close_pending)
1771                         dbg("%s - close pending, dropping data on the floor",
1772                                                                 __func__);
1773                 else
1774                         edge_tty_recv(&edge_port->port->dev, tty, data,
1775                                                         urb->actual_length);
1776                 edge_port->icount.rx += urb->actual_length;
1777         }
1778         tty_kref_put(tty);
1779
1780 exit:
1781         /* continue read unless stopped */
1782         spin_lock(&edge_port->ep_lock);
1783         if (edge_port->ep_read_urb_state == EDGE_READ_URB_RUNNING) {
1784                 urb->dev = edge_port->port->serial->dev;
1785                 retval = usb_submit_urb(urb, GFP_ATOMIC);
1786         } else if (edge_port->ep_read_urb_state == EDGE_READ_URB_STOPPING) {
1787                 edge_port->ep_read_urb_state = EDGE_READ_URB_STOPPED;
1788         }
1789         spin_unlock(&edge_port->ep_lock);
1790         if (retval)
1791                 dev_err(&urb->dev->dev,
1792                         "%s - usb_submit_urb failed with result %d\n",
1793                          __func__, retval);
1794 }
1795
1796 static void edge_tty_recv(struct device *dev, struct tty_struct *tty,
1797                                         unsigned char *data, int length)
1798 {
1799         int queued;
1800
1801         queued = tty_insert_flip_string(tty, data, length);
1802         if (queued < length)
1803                 dev_err(dev, "%s - dropping data, %d bytes lost\n",
1804                         __func__, length - queued);
1805         tty_flip_buffer_push(tty);
1806 }
1807
1808 static void edge_bulk_out_callback(struct urb *urb)
1809 {
1810         struct usb_serial_port *port = urb->context;
1811         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
1812         int status = urb->status;
1813         struct tty_struct *tty;
1814
1815         dbg("%s - port %d", __func__, port->number);
1816
1817         edge_port->ep_write_urb_in_use = 0;
1818
1819         switch (status) {
1820         case 0:
1821                 /* success */
1822                 break;
1823         case -ECONNRESET:
1824         case -ENOENT:
1825         case -ESHUTDOWN:
1826                 /* this urb is terminated, clean up */
1827                 dbg("%s - urb shutting down with status: %d",
1828                     __func__, status);
1829                 return;
1830         default:
1831                 dev_err(&urb->dev->dev, "%s - nonzero write bulk status "
1832                         "received: %d\n", __func__, status);
1833         }
1834
1835         /* send any buffered data */
1836         tty = tty_port_tty_get(&port->port);
1837         edge_send(tty);
1838         tty_kref_put(tty);
1839 }
1840
1841 static int edge_open(struct tty_struct *tty, struct usb_serial_port *port)
1842 {
1843         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
1844         struct edgeport_serial *edge_serial;
1845         struct usb_device *dev;
1846         struct urb *urb;
1847         int port_number;
1848         int status;
1849         u16 open_settings;
1850         u8 transaction_timeout;
1851
1852         dbg("%s - port %d", __func__, port->number);
1853
1854         if (edge_port == NULL)
1855                 return -ENODEV;
1856
1857         port_number = port->number - port->serial->minor;
1858         switch (port_number) {
1859         case 0:
1860                 edge_port->uart_base = UMPMEM_BASE_UART1;
1861                 edge_port->dma_address = UMPD_OEDB1_ADDRESS;
1862                 break;
1863         case 1:
1864                 edge_port->uart_base = UMPMEM_BASE_UART2;
1865                 edge_port->dma_address = UMPD_OEDB2_ADDRESS;
1866                 break;
1867         default:
1868                 dev_err(&port->dev, "Unknown port number!!!\n");
1869                 return -ENODEV;
1870         }
1871
1872         dbg("%s - port_number = %d, uart_base = %04x, dma_address = %04x",
1873                                 __func__, port_number, edge_port->uart_base,
1874                                 edge_port->dma_address);
1875
1876         dev = port->serial->dev;
1877
1878         memset(&(edge_port->icount), 0x00, sizeof(edge_port->icount));
1879         init_waitqueue_head(&edge_port->delta_msr_wait);
1880
1881         /* turn off loopback */
1882         status = ti_do_config(edge_port, UMPC_SET_CLR_LOOPBACK, 0);
1883         if (status) {
1884                 dev_err(&port->dev,
1885                                 "%s - cannot send clear loopback command, %d\n",
1886                         __func__, status);
1887                 return status;
1888         }
1889
1890         /* set up the port settings */
1891         if (tty)
1892                 edge_set_termios(tty, port, tty->termios);
1893
1894         /* open up the port */
1895
1896         /* milliseconds to timeout for DMA transfer */
1897         transaction_timeout = 2;
1898
1899         edge_port->ump_read_timeout =
1900                                 max(20, ((transaction_timeout * 3) / 2));
1901
1902         /* milliseconds to timeout for DMA transfer */
1903         open_settings = (u8)(UMP_DMA_MODE_CONTINOUS |
1904                              UMP_PIPE_TRANS_TIMEOUT_ENA |
1905                              (transaction_timeout << 2));
1906
1907         dbg("%s - Sending UMPC_OPEN_PORT", __func__);
1908
1909         /* Tell TI to open and start the port */
1910         status = send_cmd(dev, UMPC_OPEN_PORT,
1911                 (u8)(UMPM_UART1_PORT + port_number), open_settings, NULL, 0);
1912         if (status) {
1913                 dev_err(&port->dev, "%s - cannot send open command, %d\n",
1914                                                         __func__, status);
1915                 return status;
1916         }
1917
1918         /* Start the DMA? */
1919         status = send_cmd(dev, UMPC_START_PORT,
1920                 (u8)(UMPM_UART1_PORT + port_number), 0, NULL, 0);
1921         if (status) {
1922                 dev_err(&port->dev, "%s - cannot send start DMA command, %d\n",
1923                                                         __func__, status);
1924                 return status;
1925         }
1926
1927         /* Clear TX and RX buffers in UMP */
1928         status = purge_port(port, UMP_PORT_DIR_OUT | UMP_PORT_DIR_IN);
1929         if (status) {
1930                 dev_err(&port->dev,
1931                         "%s - cannot send clear buffers command, %d\n",
1932                         __func__, status);
1933                 return status;
1934         }
1935
1936         /* Read Initial MSR */
1937         status = ti_vread_sync(dev, UMPC_READ_MSR, 0,
1938                                 (__u16)(UMPM_UART1_PORT + port_number),
1939                                 &edge_port->shadow_msr, 1);
1940         if (status) {
1941                 dev_err(&port->dev, "%s - cannot send read MSR command, %d\n",
1942                                                         __func__, status);
1943                 return status;
1944         }
1945
1946         dbg("ShadowMSR 0x%X", edge_port->shadow_msr);
1947
1948         /* Set Initial MCR */
1949         edge_port->shadow_mcr = MCR_RTS | MCR_DTR;
1950         dbg("ShadowMCR 0x%X", edge_port->shadow_mcr);
1951
1952         edge_serial = edge_port->edge_serial;
1953         if (mutex_lock_interruptible(&edge_serial->es_lock))
1954                 return -ERESTARTSYS;
1955         if (edge_serial->num_ports_open == 0) {
1956                 /* we are the first port to open, post the interrupt urb */
1957                 urb = edge_serial->serial->port[0]->interrupt_in_urb;
1958                 if (!urb) {
1959                         dev_err(&port->dev,
1960                                 "%s - no interrupt urb present, exiting\n",
1961                                 __func__);
1962                         status = -EINVAL;
1963                         goto release_es_lock;
1964                 }
1965                 urb->complete = edge_interrupt_callback;
1966                 urb->context = edge_serial;
1967                 urb->dev = dev;
1968                 status = usb_submit_urb(urb, GFP_KERNEL);
1969                 if (status) {
1970                         dev_err(&port->dev,
1971                                 "%s - usb_submit_urb failed with value %d\n",
1972                                         __func__, status);
1973                         goto release_es_lock;
1974                 }
1975         }
1976
1977         /*
1978          * reset the data toggle on the bulk endpoints to work around bug in
1979          * host controllers where things get out of sync some times
1980          */
1981         usb_clear_halt(dev, port->write_urb->pipe);
1982         usb_clear_halt(dev, port->read_urb->pipe);
1983
1984         /* start up our bulk read urb */
1985         urb = port->read_urb;
1986         if (!urb) {
1987                 dev_err(&port->dev, "%s - no read urb present, exiting\n",
1988                                                                 __func__);
1989                 status = -EINVAL;
1990                 goto unlink_int_urb;
1991         }
1992         edge_port->ep_read_urb_state = EDGE_READ_URB_RUNNING;
1993         urb->complete = edge_bulk_in_callback;
1994         urb->context = edge_port;
1995         urb->dev = dev;
1996         status = usb_submit_urb(urb, GFP_KERNEL);
1997         if (status) {
1998                 dev_err(&port->dev,
1999                         "%s - read bulk usb_submit_urb failed with value %d\n",
2000                                 __func__, status);
2001                 goto unlink_int_urb;
2002         }
2003
2004         ++edge_serial->num_ports_open;
2005
2006         dbg("%s - exited", __func__);
2007
2008         goto release_es_lock;
2009
2010 unlink_int_urb:
2011         if (edge_port->edge_serial->num_ports_open == 0)
2012                 usb_kill_urb(port->serial->port[0]->interrupt_in_urb);
2013 release_es_lock:
2014         mutex_unlock(&edge_serial->es_lock);
2015         return status;
2016 }
2017
2018 static void edge_close(struct usb_serial_port *port)
2019 {
2020         struct edgeport_serial *edge_serial;
2021         struct edgeport_port *edge_port;
2022         int port_number;
2023         int status;
2024
2025         dbg("%s - port %d", __func__, port->number);
2026
2027         edge_serial = usb_get_serial_data(port->serial);
2028         edge_port = usb_get_serial_port_data(port);
2029         if (edge_serial == NULL || edge_port == NULL)
2030                 return;
2031
2032         /* The bulkreadcompletion routine will check
2033          * this flag and dump add read data */
2034         edge_port->close_pending = 1;
2035
2036         /* chase the port close and flush */
2037         chase_port(edge_port, (HZ * closing_wait) / 100, 1);
2038
2039         usb_kill_urb(port->read_urb);
2040         usb_kill_urb(port->write_urb);
2041         edge_port->ep_write_urb_in_use = 0;
2042
2043         /* assuming we can still talk to the device,
2044          * send a close port command to it */
2045         dbg("%s - send umpc_close_port", __func__);
2046         port_number = port->number - port->serial->minor;
2047         status = send_cmd(port->serial->dev,
2048                                      UMPC_CLOSE_PORT,
2049                                      (__u8)(UMPM_UART1_PORT + port_number),
2050                                      0,
2051                                      NULL,
2052                                      0);
2053         mutex_lock(&edge_serial->es_lock);
2054         --edge_port->edge_serial->num_ports_open;
2055         if (edge_port->edge_serial->num_ports_open <= 0) {
2056                 /* last port is now closed, let's shut down our interrupt urb */
2057                 usb_kill_urb(port->serial->port[0]->interrupt_in_urb);
2058                 edge_port->edge_serial->num_ports_open = 0;
2059         }
2060         mutex_unlock(&edge_serial->es_lock);
2061         edge_port->close_pending = 0;
2062
2063         dbg("%s - exited", __func__);
2064 }
2065
2066 static int edge_write(struct tty_struct *tty, struct usb_serial_port *port,
2067                                 const unsigned char *data, int count)
2068 {
2069         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2070
2071         dbg("%s - port %d", __func__, port->number);
2072
2073         if (count == 0) {
2074                 dbg("%s - write request of 0 bytes", __func__);
2075                 return 0;
2076         }
2077
2078         if (edge_port == NULL)
2079                 return -ENODEV;
2080         if (edge_port->close_pending == 1)
2081                 return -ENODEV;
2082
2083         count = kfifo_in_locked(&edge_port->write_fifo, data, count,
2084                                                         &edge_port->ep_lock);
2085         edge_send(tty);
2086
2087         return count;
2088 }
2089
2090 static void edge_send(struct tty_struct *tty)
2091 {
2092         struct usb_serial_port *port = tty->driver_data;
2093         int count, result;
2094         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2095         unsigned long flags;
2096
2097
2098         dbg("%s - port %d", __func__, port->number);
2099
2100         spin_lock_irqsave(&edge_port->ep_lock, flags);
2101
2102         if (edge_port->ep_write_urb_in_use) {
2103                 spin_unlock_irqrestore(&edge_port->ep_lock, flags);
2104                 return;
2105         }
2106
2107         count = kfifo_out(&edge_port->write_fifo,
2108                                 port->write_urb->transfer_buffer,
2109                                 port->bulk_out_size);
2110
2111         if (count == 0) {
2112                 spin_unlock_irqrestore(&edge_port->ep_lock, flags);
2113                 return;
2114         }
2115
2116         edge_port->ep_write_urb_in_use = 1;
2117
2118         spin_unlock_irqrestore(&edge_port->ep_lock, flags);
2119
2120         usb_serial_debug_data(debug, &port->dev, __func__, count,
2121                                 port->write_urb->transfer_buffer);
2122
2123         /* set up our urb */
2124         usb_fill_bulk_urb(port->write_urb, port->serial->dev,
2125                            usb_sndbulkpipe(port->serial->dev,
2126                                             port->bulk_out_endpointAddress),
2127                            port->write_urb->transfer_buffer, count,
2128                            edge_bulk_out_callback,
2129                            port);
2130
2131         /* send the data out the bulk port */
2132         result = usb_submit_urb(port->write_urb, GFP_ATOMIC);
2133         if (result) {
2134                 dev_err(&port->dev,
2135                         "%s - failed submitting write urb, error %d\n",
2136                                 __func__, result);
2137                 edge_port->ep_write_urb_in_use = 0;
2138                 /* TODO: reschedule edge_send */
2139         } else
2140                 edge_port->icount.tx += count;
2141
2142         /* wakeup any process waiting for writes to complete */
2143         /* there is now more room in the buffer for new writes */
2144         if (tty)
2145                 tty_wakeup(tty);
2146 }
2147
2148 static int edge_write_room(struct tty_struct *tty)
2149 {
2150         struct usb_serial_port *port = tty->driver_data;
2151         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2152         int room = 0;
2153         unsigned long flags;
2154
2155         dbg("%s - port %d", __func__, port->number);
2156
2157         if (edge_port == NULL)
2158                 return 0;
2159         if (edge_port->close_pending == 1)
2160                 return 0;
2161
2162         spin_lock_irqsave(&edge_port->ep_lock, flags);
2163         room = kfifo_avail(&edge_port->write_fifo);
2164         spin_unlock_irqrestore(&edge_port->ep_lock, flags);
2165
2166         dbg("%s - returns %d", __func__, room);
2167         return room;
2168 }
2169
2170 static int edge_chars_in_buffer(struct tty_struct *tty)
2171 {
2172         struct usb_serial_port *port = tty->driver_data;
2173         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2174         int chars = 0;
2175         unsigned long flags;
2176
2177         dbg("%s - port %d", __func__, port->number);
2178
2179         if (edge_port == NULL)
2180                 return 0;
2181         if (edge_port->close_pending == 1)
2182                 return 0;
2183
2184         spin_lock_irqsave(&edge_port->ep_lock, flags);
2185         chars = kfifo_len(&edge_port->write_fifo);
2186         spin_unlock_irqrestore(&edge_port->ep_lock, flags);
2187
2188         dbg("%s - returns %d", __func__, chars);
2189         return chars;
2190 }
2191
2192 static void edge_throttle(struct tty_struct *tty)
2193 {
2194         struct usb_serial_port *port = tty->driver_data;
2195         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2196         int status;
2197
2198         dbg("%s - port %d", __func__, port->number);
2199
2200         if (edge_port == NULL)
2201                 return;
2202
2203         /* if we are implementing XON/XOFF, send the stop character */
2204         if (I_IXOFF(tty)) {
2205                 unsigned char stop_char = STOP_CHAR(tty);
2206                 status = edge_write(tty, port, &stop_char, 1);
2207                 if (status <= 0) {
2208                         dev_err(&port->dev, "%s - failed to write stop character, %d\n", __func__, status);
2209                 }
2210         }
2211
2212         /* if we are implementing RTS/CTS, stop reads */
2213         /* and the Edgeport will clear the RTS line */
2214         if (C_CRTSCTS(tty))
2215                 stop_read(edge_port);
2216
2217 }
2218
2219 static void edge_unthrottle(struct tty_struct *tty)
2220 {
2221         struct usb_serial_port *port = tty->driver_data;
2222         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2223         int status;
2224
2225         dbg("%s - port %d", __func__, port->number);
2226
2227         if (edge_port == NULL)
2228                 return;
2229
2230         /* if we are implementing XON/XOFF, send the start character */
2231         if (I_IXOFF(tty)) {
2232                 unsigned char start_char = START_CHAR(tty);
2233                 status = edge_write(tty, port, &start_char, 1);
2234                 if (status <= 0) {
2235                         dev_err(&port->dev, "%s - failed to write start character, %d\n", __func__, status);
2236                 }
2237         }
2238         /* if we are implementing RTS/CTS, restart reads */
2239         /* are the Edgeport will assert the RTS line */
2240         if (C_CRTSCTS(tty)) {
2241                 status = restart_read(edge_port);
2242                 if (status)
2243                         dev_err(&port->dev,
2244                                 "%s - read bulk usb_submit_urb failed: %d\n",
2245                                                         __func__, status);
2246         }
2247
2248 }
2249
2250 static void stop_read(struct edgeport_port *edge_port)
2251 {
2252         unsigned long flags;
2253
2254         spin_lock_irqsave(&edge_port->ep_lock, flags);
2255
2256         if (edge_port->ep_read_urb_state == EDGE_READ_URB_RUNNING)
2257                 edge_port->ep_read_urb_state = EDGE_READ_URB_STOPPING;
2258         edge_port->shadow_mcr &= ~MCR_RTS;
2259
2260         spin_unlock_irqrestore(&edge_port->ep_lock, flags);
2261 }
2262
2263 static int restart_read(struct edgeport_port *edge_port)
2264 {
2265         struct urb *urb;
2266         int status = 0;
2267         unsigned long flags;
2268
2269         spin_lock_irqsave(&edge_port->ep_lock, flags);
2270
2271         if (edge_port->ep_read_urb_state == EDGE_READ_URB_STOPPED) {
2272                 urb = edge_port->port->read_urb;
2273                 urb->complete = edge_bulk_in_callback;
2274                 urb->context = edge_port;
2275                 urb->dev = edge_port->port->serial->dev;
2276                 status = usb_submit_urb(urb, GFP_ATOMIC);
2277         }
2278         edge_port->ep_read_urb_state = EDGE_READ_URB_RUNNING;
2279         edge_port->shadow_mcr |= MCR_RTS;
2280
2281         spin_unlock_irqrestore(&edge_port->ep_lock, flags);
2282
2283         return status;
2284 }
2285
2286 static void change_port_settings(struct tty_struct *tty,
2287                 struct edgeport_port *edge_port, struct ktermios *old_termios)
2288 {
2289         struct ump_uart_config *config;
2290         int baud;
2291         unsigned cflag;
2292         int status;
2293         int port_number = edge_port->port->number -
2294                                         edge_port->port->serial->minor;
2295
2296         dbg("%s - port %d", __func__, edge_port->port->number);
2297
2298         config = kmalloc (sizeof (*config), GFP_KERNEL);
2299         if (!config) {
2300                 *tty->termios = *old_termios;
2301                 dev_err(&edge_port->port->dev, "%s - out of memory\n",
2302                                                                 __func__);
2303                 return;
2304         }
2305
2306         cflag = tty->termios->c_cflag;
2307
2308         config->wFlags = 0;
2309
2310         /* These flags must be set */
2311         config->wFlags |= UMP_MASK_UART_FLAGS_RECEIVE_MS_INT;
2312         config->wFlags |= UMP_MASK_UART_FLAGS_AUTO_START_ON_ERR;
2313         config->bUartMode = (__u8)(edge_port->bUartMode);
2314
2315         switch (cflag & CSIZE) {
2316         case CS5:
2317                     config->bDataBits = UMP_UART_CHAR5BITS;
2318                     dbg("%s - data bits = 5", __func__);
2319                     break;
2320         case CS6:
2321                     config->bDataBits = UMP_UART_CHAR6BITS;
2322                     dbg("%s - data bits = 6", __func__);
2323                     break;
2324         case CS7:
2325                     config->bDataBits = UMP_UART_CHAR7BITS;
2326                     dbg("%s - data bits = 7", __func__);
2327                     break;
2328         default:
2329         case CS8:
2330                     config->bDataBits = UMP_UART_CHAR8BITS;
2331                     dbg("%s - data bits = 8", __func__);
2332                             break;
2333         }
2334
2335         if (cflag & PARENB) {
2336                 if (cflag & PARODD) {
2337                         config->wFlags |= UMP_MASK_UART_FLAGS_PARITY;
2338                         config->bParity = UMP_UART_ODDPARITY;
2339                         dbg("%s - parity = odd", __func__);
2340                 } else {
2341                         config->wFlags |= UMP_MASK_UART_FLAGS_PARITY;
2342                         config->bParity = UMP_UART_EVENPARITY;
2343                         dbg("%s - parity = even", __func__);
2344                 }
2345         } else {
2346                 config->bParity = UMP_UART_NOPARITY;
2347                 dbg("%s - parity = none", __func__);
2348         }
2349
2350         if (cflag & CSTOPB) {
2351                 config->bStopBits = UMP_UART_STOPBIT2;
2352                 dbg("%s - stop bits = 2", __func__);
2353         } else {
2354                 config->bStopBits = UMP_UART_STOPBIT1;
2355                 dbg("%s - stop bits = 1", __func__);
2356         }
2357
2358         /* figure out the flow control settings */
2359         if (cflag & CRTSCTS) {
2360                 config->wFlags |= UMP_MASK_UART_FLAGS_OUT_X_CTS_FLOW;
2361                 config->wFlags |= UMP_MASK_UART_FLAGS_RTS_FLOW;
2362                 dbg("%s - RTS/CTS is enabled", __func__);
2363         } else {
2364                 dbg("%s - RTS/CTS is disabled", __func__);
2365                 tty->hw_stopped = 0;
2366                 restart_read(edge_port);
2367         }
2368
2369         /* if we are implementing XON/XOFF, set the start and stop
2370            character in the device */
2371         config->cXon  = START_CHAR(tty);
2372         config->cXoff = STOP_CHAR(tty);
2373
2374         /* if we are implementing INBOUND XON/XOFF */
2375         if (I_IXOFF(tty)) {
2376                 config->wFlags |= UMP_MASK_UART_FLAGS_IN_X;
2377                 dbg("%s - INBOUND XON/XOFF is enabled, XON = %2x, XOFF = %2x",
2378                      __func__, config->cXon, config->cXoff);
2379         } else
2380                 dbg("%s - INBOUND XON/XOFF is disabled", __func__);
2381
2382         /* if we are implementing OUTBOUND XON/XOFF */
2383         if (I_IXON(tty)) {
2384                 config->wFlags |= UMP_MASK_UART_FLAGS_OUT_X;
2385                 dbg("%s - OUTBOUND XON/XOFF is enabled, XON = %2x, XOFF = %2x",
2386                      __func__, config->cXon, config->cXoff);
2387         } else
2388                 dbg("%s - OUTBOUND XON/XOFF is disabled", __func__);
2389
2390         tty->termios->c_cflag &= ~CMSPAR;
2391
2392         /* Round the baud rate */
2393         baud = tty_get_baud_rate(tty);
2394         if (!baud) {
2395                 /* pick a default, any default... */
2396                 baud = 9600;
2397         } else
2398                 tty_encode_baud_rate(tty, baud, baud);
2399
2400         edge_port->baud_rate = baud;
2401         config->wBaudRate = (__u16)((461550L + baud/2) / baud);
2402
2403         /* FIXME: Recompute actual baud from divisor here */
2404
2405         dbg("%s - baud rate = %d, wBaudRate = %d", __func__, baud,
2406                                                         config->wBaudRate);
2407
2408         dbg("wBaudRate:   %d", (int)(461550L / config->wBaudRate));
2409         dbg("wFlags:    0x%x", config->wFlags);
2410         dbg("bDataBits:   %d", config->bDataBits);
2411         dbg("bParity:     %d", config->bParity);
2412         dbg("bStopBits:   %d", config->bStopBits);
2413         dbg("cXon:        %d", config->cXon);
2414         dbg("cXoff:       %d", config->cXoff);
2415         dbg("bUartMode:   %d", config->bUartMode);
2416
2417         /* move the word values into big endian mode */
2418         cpu_to_be16s(&config->wFlags);
2419         cpu_to_be16s(&config->wBaudRate);
2420
2421         status = send_cmd(edge_port->port->serial->dev, UMPC_SET_CONFIG,
2422                                 (__u8)(UMPM_UART1_PORT + port_number),
2423                                 0, (__u8 *)config, sizeof(*config));
2424         if (status)
2425                 dbg("%s - error %d when trying to write config to device",
2426                      __func__, status);
2427         kfree(config);
2428 }
2429
2430 static void edge_set_termios(struct tty_struct *tty,
2431                 struct usb_serial_port *port, struct ktermios *old_termios)
2432 {
2433         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2434         unsigned int cflag;
2435
2436         cflag = tty->termios->c_cflag;
2437
2438         dbg("%s - clfag %08x iflag %08x", __func__,
2439             tty->termios->c_cflag, tty->termios->c_iflag);
2440         dbg("%s - old clfag %08x old iflag %08x", __func__,
2441             old_termios->c_cflag, old_termios->c_iflag);
2442         dbg("%s - port %d", __func__, port->number);
2443
2444         if (edge_port == NULL)
2445                 return;
2446         /* change the port settings to the new ones specified */
2447         change_port_settings(tty, edge_port, old_termios);
2448 }
2449
2450 static int edge_tiocmset(struct tty_struct *tty,
2451                                         unsigned int set, unsigned int clear)
2452 {
2453         struct usb_serial_port *port = tty->driver_data;
2454         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2455         unsigned int mcr;
2456         unsigned long flags;
2457
2458         dbg("%s - port %d", __func__, port->number);
2459
2460         spin_lock_irqsave(&edge_port->ep_lock, flags);
2461         mcr = edge_port->shadow_mcr;
2462         if (set & TIOCM_RTS)
2463                 mcr |= MCR_RTS;
2464         if (set & TIOCM_DTR)
2465                 mcr |= MCR_DTR;
2466         if (set & TIOCM_LOOP)
2467                 mcr |= MCR_LOOPBACK;
2468
2469         if (clear & TIOCM_RTS)
2470                 mcr &= ~MCR_RTS;
2471         if (clear & TIOCM_DTR)
2472                 mcr &= ~MCR_DTR;
2473         if (clear & TIOCM_LOOP)
2474                 mcr &= ~MCR_LOOPBACK;
2475
2476         edge_port->shadow_mcr = mcr;
2477         spin_unlock_irqrestore(&edge_port->ep_lock, flags);
2478
2479         restore_mcr(edge_port, mcr);
2480         return 0;
2481 }
2482
2483 static int edge_tiocmget(struct tty_struct *tty)
2484 {
2485         struct usb_serial_port *port = tty->driver_data;
2486         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2487         unsigned int result = 0;
2488         unsigned int msr;
2489         unsigned int mcr;
2490         unsigned long flags;
2491
2492         dbg("%s - port %d", __func__, port->number);
2493
2494         spin_lock_irqsave(&edge_port->ep_lock, flags);
2495
2496         msr = edge_port->shadow_msr;
2497         mcr = edge_port->shadow_mcr;
2498         result = ((mcr & MCR_DTR)       ? TIOCM_DTR: 0)   /* 0x002 */
2499                   | ((mcr & MCR_RTS)    ? TIOCM_RTS: 0)   /* 0x004 */
2500                   | ((msr & EDGEPORT_MSR_CTS)   ? TIOCM_CTS: 0)   /* 0x020 */
2501                   | ((msr & EDGEPORT_MSR_CD)    ? TIOCM_CAR: 0)   /* 0x040 */
2502                   | ((msr & EDGEPORT_MSR_RI)    ? TIOCM_RI:  0)   /* 0x080 */
2503                   | ((msr & EDGEPORT_MSR_DSR)   ? TIOCM_DSR: 0);  /* 0x100 */
2504
2505
2506         dbg("%s -- %x", __func__, result);
2507         spin_unlock_irqrestore(&edge_port->ep_lock, flags);
2508
2509         return result;
2510 }
2511
2512 static int edge_get_icount(struct tty_struct *tty,
2513                                 struct serial_icounter_struct *icount)
2514 {
2515         struct usb_serial_port *port = tty->driver_data;
2516         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2517         struct async_icount *ic = &edge_port->icount;
2518
2519         icount->cts = ic->cts;
2520         icount->dsr = ic->dsr;
2521         icount->rng = ic->rng;
2522         icount->dcd = ic->dcd;
2523         icount->tx = ic->tx;
2524         icount->rx = ic->rx;
2525         icount->frame = ic->frame;
2526         icount->parity = ic->parity;
2527         icount->overrun = ic->overrun;
2528         icount->brk = ic->brk;
2529         icount->buf_overrun = ic->buf_overrun;
2530         return 0;
2531 }
2532
2533 static int get_serial_info(struct edgeport_port *edge_port,
2534                                 struct serial_struct __user *retinfo)
2535 {
2536         struct serial_struct tmp;
2537
2538         if (!retinfo)
2539                 return -EFAULT;
2540
2541         memset(&tmp, 0, sizeof(tmp));
2542
2543         tmp.type                = PORT_16550A;
2544         tmp.line                = edge_port->port->serial->minor;
2545         tmp.port                = edge_port->port->number;
2546         tmp.irq                 = 0;
2547         tmp.flags               = ASYNC_SKIP_TEST | ASYNC_AUTO_IRQ;
2548         tmp.xmit_fifo_size      = edge_port->port->bulk_out_size;
2549         tmp.baud_base           = 9600;
2550         tmp.close_delay         = 5*HZ;
2551         tmp.closing_wait        = closing_wait;
2552
2553         if (copy_to_user(retinfo, &tmp, sizeof(*retinfo)))
2554                 return -EFAULT;
2555         return 0;
2556 }
2557
2558 static int edge_ioctl(struct tty_struct *tty,
2559                                         unsigned int cmd, unsigned long arg)
2560 {
2561         struct usb_serial_port *port = tty->driver_data;
2562         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2563         struct async_icount cnow;
2564         struct async_icount cprev;
2565
2566         dbg("%s - port %d, cmd = 0x%x", __func__, port->number, cmd);
2567
2568         switch (cmd) {
2569         case TIOCGSERIAL:
2570                 dbg("%s - (%d) TIOCGSERIAL", __func__, port->number);
2571                 return get_serial_info(edge_port,
2572                                 (struct serial_struct __user *) arg);
2573         case TIOCMIWAIT:
2574                 dbg("%s - (%d) TIOCMIWAIT", __func__, port->number);
2575                 cprev = edge_port->icount;
2576                 while (1) {
2577                         interruptible_sleep_on(&edge_port->delta_msr_wait);
2578                         /* see if a signal did it */
2579                         if (signal_pending(current))
2580                                 return -ERESTARTSYS;
2581                         cnow = edge_port->icount;
2582                         if (cnow.rng == cprev.rng && cnow.dsr == cprev.dsr &&
2583                             cnow.dcd == cprev.dcd && cnow.cts == cprev.cts)
2584                                 return -EIO; /* no change => error */
2585                         if (((arg & TIOCM_RNG) && (cnow.rng != cprev.rng)) ||
2586                             ((arg & TIOCM_DSR) && (cnow.dsr != cprev.dsr)) ||
2587                             ((arg & TIOCM_CD)  && (cnow.dcd != cprev.dcd)) ||
2588                             ((arg & TIOCM_CTS) && (cnow.cts != cprev.cts))) {
2589                                 return 0;
2590                         }
2591                         cprev = cnow;
2592                 }
2593                 /* not reached */
2594                 break;
2595         }
2596         return -ENOIOCTLCMD;
2597 }
2598
2599 static void edge_break(struct tty_struct *tty, int break_state)
2600 {
2601         struct usb_serial_port *port = tty->driver_data;
2602         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2603         int status;
2604         int bv = 0;     /* Off */
2605
2606         dbg("%s - state = %d", __func__, break_state);
2607
2608         /* chase the port close */
2609         chase_port(edge_port, 0, 0);
2610
2611         if (break_state == -1)
2612                 bv = 1; /* On */
2613         status = ti_do_config(edge_port, UMPC_SET_CLR_BREAK, bv);
2614         if (status)
2615                 dbg("%s - error %d sending break set/clear command.",
2616                      __func__, status);
2617 }
2618
2619 static int edge_startup(struct usb_serial *serial)
2620 {
2621         struct edgeport_serial *edge_serial;
2622         struct edgeport_port *edge_port;
2623         struct usb_device *dev;
2624         int status;
2625         int i;
2626
2627         dev = serial->dev;
2628
2629         /* create our private serial structure */
2630         edge_serial = kzalloc(sizeof(struct edgeport_serial), GFP_KERNEL);
2631         if (edge_serial == NULL) {
2632                 dev_err(&serial->dev->dev, "%s - Out of memory\n", __func__);
2633                 return -ENOMEM;
2634         }
2635         mutex_init(&edge_serial->es_lock);
2636         edge_serial->serial = serial;
2637         usb_set_serial_data(serial, edge_serial);
2638
2639         status = download_fw(edge_serial);
2640         if (status) {
2641                 kfree(edge_serial);
2642                 return status;
2643         }
2644
2645         /* set up our port private structures */
2646         for (i = 0; i < serial->num_ports; ++i) {
2647                 edge_port = kzalloc(sizeof(struct edgeport_port), GFP_KERNEL);
2648                 if (edge_port == NULL) {
2649                         dev_err(&serial->dev->dev, "%s - Out of memory\n",
2650                                                                 __func__);
2651                         goto cleanup;
2652                 }
2653                 spin_lock_init(&edge_port->ep_lock);
2654                 if (kfifo_alloc(&edge_port->write_fifo, EDGE_OUT_BUF_SIZE,
2655                                                                 GFP_KERNEL)) {
2656                         dev_err(&serial->dev->dev, "%s - Out of memory\n",
2657                                                                 __func__);
2658                         kfree(edge_port);
2659                         goto cleanup;
2660                 }
2661                 edge_port->port = serial->port[i];
2662                 edge_port->edge_serial = edge_serial;
2663                 usb_set_serial_port_data(serial->port[i], edge_port);
2664                 edge_port->bUartMode = default_uart_mode;
2665         }
2666
2667         return 0;
2668
2669 cleanup:
2670         for (--i; i >= 0; --i) {
2671                 edge_port = usb_get_serial_port_data(serial->port[i]);
2672                 kfifo_free(&edge_port->write_fifo);
2673                 kfree(edge_port);
2674                 usb_set_serial_port_data(serial->port[i], NULL);
2675         }
2676         kfree(edge_serial);
2677         usb_set_serial_data(serial, NULL);
2678         return -ENOMEM;
2679 }
2680
2681 static void edge_disconnect(struct usb_serial *serial)
2682 {
2683         dbg("%s", __func__);
2684 }
2685
2686 static void edge_release(struct usb_serial *serial)
2687 {
2688         int i;
2689         struct edgeport_port *edge_port;
2690
2691         dbg("%s", __func__);
2692
2693         for (i = 0; i < serial->num_ports; ++i) {
2694                 edge_port = usb_get_serial_port_data(serial->port[i]);
2695                 kfifo_free(&edge_port->write_fifo);
2696                 kfree(edge_port);
2697         }
2698         kfree(usb_get_serial_data(serial));
2699 }
2700
2701
2702 /* Sysfs Attributes */
2703
2704 static ssize_t show_uart_mode(struct device *dev,
2705         struct device_attribute *attr, char *buf)
2706 {
2707         struct usb_serial_port *port = to_usb_serial_port(dev);
2708         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2709
2710         return sprintf(buf, "%d\n", edge_port->bUartMode);
2711 }
2712
2713 static ssize_t store_uart_mode(struct device *dev,
2714         struct device_attribute *attr, const char *valbuf, size_t count)
2715 {
2716         struct usb_serial_port *port = to_usb_serial_port(dev);
2717         struct edgeport_port *edge_port = usb_get_serial_port_data(port);
2718         unsigned int v = simple_strtoul(valbuf, NULL, 0);
2719
2720         dbg("%s: setting uart_mode = %d", __func__, v);
2721
2722         if (v < 256)
2723                 edge_port->bUartMode = v;
2724         else
2725                 dev_err(dev, "%s - uart_mode %d is invalid\n", __func__, v);
2726
2727         return count;
2728 }
2729
2730 static DEVICE_ATTR(uart_mode, S_IWUSR | S_IRUGO, show_uart_mode,
2731                                                         store_uart_mode);
2732
2733 static int edge_create_sysfs_attrs(struct usb_serial_port *port)
2734 {
2735         return device_create_file(&port->dev, &dev_attr_uart_mode);
2736 }
2737
2738 static int edge_remove_sysfs_attrs(struct usb_serial_port *port)
2739 {
2740         device_remove_file(&port->dev, &dev_attr_uart_mode);
2741         return 0;
2742 }
2743
2744
2745 static struct usb_serial_driver edgeport_1port_device = {
2746         .driver = {
2747                 .owner          = THIS_MODULE,
2748                 .name           = "edgeport_ti_1",
2749         },
2750         .description            = "Edgeport TI 1 port adapter",
2751         .usb_driver             = &io_driver,
2752         .id_table               = edgeport_1port_id_table,
2753         .num_ports              = 1,
2754         .open                   = edge_open,
2755         .close                  = edge_close,
2756         .throttle               = edge_throttle,
2757         .unthrottle             = edge_unthrottle,
2758         .attach                 = edge_startup,
2759         .disconnect             = edge_disconnect,
2760         .release                = edge_release,
2761         .port_probe             = edge_create_sysfs_attrs,
2762         .port_remove            = edge_remove_sysfs_attrs,
2763         .ioctl                  = edge_ioctl,
2764         .set_termios            = edge_set_termios,
2765         .tiocmget               = edge_tiocmget,
2766         .tiocmset               = edge_tiocmset,
2767         .get_icount             = edge_get_icount,
2768         .write                  = edge_write,
2769         .write_room             = edge_write_room,
2770         .chars_in_buffer        = edge_chars_in_buffer,
2771         .break_ctl              = edge_break,
2772         .read_int_callback      = edge_interrupt_callback,
2773         .read_bulk_callback     = edge_bulk_in_callback,
2774         .write_bulk_callback    = edge_bulk_out_callback,
2775 };
2776
2777 static struct usb_serial_driver edgeport_2port_device = {
2778         .driver = {
2779                 .owner          = THIS_MODULE,
2780                 .name           = "edgeport_ti_2",
2781         },
2782         .description            = "Edgeport TI 2 port adapter",
2783         .usb_driver             = &io_driver,
2784         .id_table               = edgeport_2port_id_table,
2785         .num_ports              = 2,
2786         .open                   = edge_open,
2787         .close                  = edge_close,
2788         .throttle               = edge_throttle,
2789         .unthrottle             = edge_unthrottle,
2790         .attach                 = edge_startup,
2791         .disconnect             = edge_disconnect,
2792         .release                = edge_release,
2793         .port_probe             = edge_create_sysfs_attrs,
2794         .port_remove            = edge_remove_sysfs_attrs,
2795         .ioctl                  = edge_ioctl,
2796         .set_termios            = edge_set_termios,
2797         .tiocmget               = edge_tiocmget,
2798         .tiocmset               = edge_tiocmset,
2799         .write                  = edge_write,
2800         .write_room             = edge_write_room,
2801         .chars_in_buffer        = edge_chars_in_buffer,
2802         .break_ctl              = edge_break,
2803         .read_int_callback      = edge_interrupt_callback,
2804         .read_bulk_callback     = edge_bulk_in_callback,
2805         .write_bulk_callback    = edge_bulk_out_callback,
2806 };
2807
2808
2809 static int __init edgeport_init(void)
2810 {
2811         int retval;
2812         retval = usb_serial_register(&edgeport_1port_device);
2813         if (retval)
2814                 goto failed_1port_device_register;
2815         retval = usb_serial_register(&edgeport_2port_device);
2816         if (retval)
2817                 goto failed_2port_device_register;
2818         retval = usb_register(&io_driver);
2819         if (retval)
2820                 goto failed_usb_register;
2821         printk(KERN_INFO KBUILD_MODNAME ": " DRIVER_VERSION ":"
2822                DRIVER_DESC "\n");
2823         return 0;
2824 failed_usb_register:
2825         usb_serial_deregister(&edgeport_2port_device);
2826 failed_2port_device_register:
2827         usb_serial_deregister(&edgeport_1port_device);
2828 failed_1port_device_register:
2829         return retval;
2830 }
2831
2832 static void __exit edgeport_exit(void)
2833 {
2834         usb_deregister(&io_driver);
2835         usb_serial_deregister(&edgeport_1port_device);
2836         usb_serial_deregister(&edgeport_2port_device);
2837 }
2838
2839 module_init(edgeport_init);
2840 module_exit(edgeport_exit);
2841
2842 /* Module information */
2843 MODULE_AUTHOR(DRIVER_AUTHOR);
2844 MODULE_DESCRIPTION(DRIVER_DESC);
2845 MODULE_LICENSE("GPL");
2846 MODULE_FIRMWARE("edgeport/down3.bin");
2847
2848 module_param(debug, bool, S_IRUGO | S_IWUSR);
2849 MODULE_PARM_DESC(debug, "Debug enabled or not");
2850
2851 module_param(closing_wait, int, S_IRUGO | S_IWUSR);
2852 MODULE_PARM_DESC(closing_wait, "Maximum wait for data to drain, in .01 secs");
2853
2854 module_param(ignore_cpu_rev, bool, S_IRUGO | S_IWUSR);
2855 MODULE_PARM_DESC(ignore_cpu_rev,
2856                         "Ignore the cpu revision when connecting to a device");
2857
2858 module_param(default_uart_mode, int, S_IRUGO | S_IWUSR);
2859 MODULE_PARM_DESC(default_uart_mode, "Default uart_mode, 0=RS232, ...");