Merge tag 'signed-efi-next' of git://github.com/agraf/u-boot
[platform/kernel/u-boot.git] / common / usb_storage.c
1 /*
2  * Most of this source has been derived from the Linux USB
3  * project:
4  *   (c) 1999-2002 Matthew Dharm (mdharm-usb@one-eyed-alien.net)
5  *   (c) 2000 David L. Brown, Jr. (usb-storage@davidb.org)
6  *   (c) 1999 Michael Gee (michael@linuxspecific.com)
7  *   (c) 2000 Yggdrasil Computing, Inc.
8  *
9  *
10  * Adapted for U-Boot:
11  *   (C) Copyright 2001 Denis Peter, MPL AG Switzerland
12  * Driver model conversion:
13  *   (C) Copyright 2015 Google, Inc
14  *
15  * For BBB support (C) Copyright 2003
16  * Gary Jennejohn, DENX Software Engineering <garyj@denx.de>
17  *
18  * BBB support based on /sys/dev/usb/umass.c from
19  * FreeBSD.
20  *
21  * SPDX-License-Identifier:     GPL-2.0+
22  */
23
24 /* Note:
25  * Currently only the CBI transport protocoll has been implemented, and it
26  * is only tested with a TEAC USB Floppy. Other Massstorages with CBI or CB
27  * transport protocoll may work as well.
28  */
29 /*
30  * New Note:
31  * Support for USB Mass Storage Devices (BBB) has been added. It has
32  * only been tested with USB memory sticks.
33  */
34
35
36 #include <common.h>
37 #include <command.h>
38 #include <dm.h>
39 #include <errno.h>
40 #include <inttypes.h>
41 #include <mapmem.h>
42 #include <memalign.h>
43 #include <asm/byteorder.h>
44 #include <asm/processor.h>
45 #include <dm/device-internal.h>
46 #include <dm/lists.h>
47
48 #include <part.h>
49 #include <usb.h>
50
51 #undef BBB_COMDAT_TRACE
52 #undef BBB_XPORT_TRACE
53
54 #include <scsi.h>
55 /* direction table -- this indicates the direction of the data
56  * transfer for each command code -- a 1 indicates input
57  */
58 static const unsigned char us_direction[256/8] = {
59         0x28, 0x81, 0x14, 0x14, 0x20, 0x01, 0x90, 0x77,
60         0x0C, 0x20, 0x00, 0x04, 0x00, 0x00, 0x00, 0x00,
61         0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0x00, 0x01,
62         0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
63 };
64 #define US_DIRECTION(x) ((us_direction[x>>3] >> (x & 7)) & 1)
65
66 static struct scsi_cmd usb_ccb __aligned(ARCH_DMA_MINALIGN);
67 static __u32 CBWTag;
68
69 static int usb_max_devs; /* number of highest available usb device */
70
71 #ifndef CONFIG_BLK
72 static struct blk_desc usb_dev_desc[USB_MAX_STOR_DEV];
73 #endif
74
75 struct us_data;
76 typedef int (*trans_cmnd)(struct scsi_cmd *cb, struct us_data *data);
77 typedef int (*trans_reset)(struct us_data *data);
78
79 struct us_data {
80         struct usb_device *pusb_dev;     /* this usb_device */
81
82         unsigned int    flags;                  /* from filter initially */
83 #       define USB_READY        (1 << 0)
84         unsigned char   ifnum;                  /* interface number */
85         unsigned char   ep_in;                  /* in endpoint */
86         unsigned char   ep_out;                 /* out ....... */
87         unsigned char   ep_int;                 /* interrupt . */
88         unsigned char   subclass;               /* as in overview */
89         unsigned char   protocol;               /* .............. */
90         unsigned char   attention_done;         /* force attn on first cmd */
91         unsigned short  ip_data;                /* interrupt data */
92         int             action;                 /* what to do */
93         int             ip_wanted;              /* needed */
94         int             *irq_handle;            /* for USB int requests */
95         unsigned int    irqpipe;                /* pipe for release_irq */
96         unsigned char   irqmaxp;                /* max packed for irq Pipe */
97         unsigned char   irqinterval;            /* Intervall for IRQ Pipe */
98         struct scsi_cmd *srb;                   /* current srb */
99         trans_reset     transport_reset;        /* reset routine */
100         trans_cmnd      transport;              /* transport routine */
101         unsigned short  max_xfer_blk;           /* maximum transfer blocks */
102 };
103
104 #ifndef CONFIG_BLK
105 static struct us_data usb_stor[USB_MAX_STOR_DEV];
106 #endif
107
108 #define USB_STOR_TRANSPORT_GOOD    0
109 #define USB_STOR_TRANSPORT_FAILED -1
110 #define USB_STOR_TRANSPORT_ERROR  -2
111
112 int usb_stor_get_info(struct usb_device *dev, struct us_data *us,
113                       struct blk_desc *dev_desc);
114 int usb_storage_probe(struct usb_device *dev, unsigned int ifnum,
115                       struct us_data *ss);
116 #ifdef CONFIG_BLK
117 static unsigned long usb_stor_read(struct udevice *dev, lbaint_t blknr,
118                                    lbaint_t blkcnt, void *buffer);
119 static unsigned long usb_stor_write(struct udevice *dev, lbaint_t blknr,
120                                     lbaint_t blkcnt, const void *buffer);
121 #else
122 static unsigned long usb_stor_read(struct blk_desc *block_dev, lbaint_t blknr,
123                                    lbaint_t blkcnt, void *buffer);
124 static unsigned long usb_stor_write(struct blk_desc *block_dev, lbaint_t blknr,
125                                     lbaint_t blkcnt, const void *buffer);
126 #endif
127 void uhci_show_temp_int_td(void);
128
129 static void usb_show_progress(void)
130 {
131         debug(".");
132 }
133
134 /*******************************************************************************
135  * show info on storage devices; 'usb start/init' must be invoked earlier
136  * as we only retrieve structures populated during devices initialization
137  */
138 int usb_stor_info(void)
139 {
140         int count = 0;
141 #ifdef CONFIG_BLK
142         struct udevice *dev;
143
144         for (blk_first_device(IF_TYPE_USB, &dev);
145              dev;
146              blk_next_device(&dev)) {
147                 struct blk_desc *desc = dev_get_uclass_platdata(dev);
148
149                 printf("  Device %d: ", desc->devnum);
150                 dev_print(desc);
151                 count++;
152         }
153 #else
154         int i;
155
156         if (usb_max_devs > 0) {
157                 for (i = 0; i < usb_max_devs; i++) {
158                         printf("  Device %d: ", i);
159                         dev_print(&usb_dev_desc[i]);
160                 }
161                 return 0;
162         }
163 #endif
164         if (!count) {
165                 printf("No storage devices, perhaps not 'usb start'ed..?\n");
166                 return 1;
167         }
168
169         return 0;
170 }
171
172 static unsigned int usb_get_max_lun(struct us_data *us)
173 {
174         int len;
175         ALLOC_CACHE_ALIGN_BUFFER(unsigned char, result, 1);
176         len = usb_control_msg(us->pusb_dev,
177                               usb_rcvctrlpipe(us->pusb_dev, 0),
178                               US_BBB_GET_MAX_LUN,
179                               USB_TYPE_CLASS | USB_RECIP_INTERFACE | USB_DIR_IN,
180                               0, us->ifnum,
181                               result, sizeof(char),
182                               USB_CNTL_TIMEOUT * 5);
183         debug("Get Max LUN -> len = %i, result = %i\n", len, (int) *result);
184         return (len > 0) ? *result : 0;
185 }
186
187 static int usb_stor_probe_device(struct usb_device *udev)
188 {
189         int lun, max_lun;
190
191 #ifdef CONFIG_BLK
192         struct us_data *data;
193         int ret;
194 #else
195         int start;
196
197         if (udev == NULL)
198                 return -ENOENT; /* no more devices available */
199 #endif
200
201         debug("\n\nProbing for storage\n");
202 #ifdef CONFIG_BLK
203         /*
204          * We store the us_data in the mass storage device's platdata. It
205          * is shared by all LUNs (block devices) attached to this mass storage
206          * device.
207          */
208         data = dev_get_platdata(udev->dev);
209         if (!usb_storage_probe(udev, 0, data))
210                 return 0;
211         max_lun = usb_get_max_lun(data);
212         for (lun = 0; lun <= max_lun; lun++) {
213                 struct blk_desc *blkdev;
214                 struct udevice *dev;
215                 char str[10];
216
217                 snprintf(str, sizeof(str), "lun%d", lun);
218                 ret = blk_create_devicef(udev->dev, "usb_storage_blk", str,
219                                          IF_TYPE_USB, usb_max_devs, 512, 0,
220                                          &dev);
221                 if (ret) {
222                         debug("Cannot bind driver\n");
223                         return ret;
224                 }
225
226                 blkdev = dev_get_uclass_platdata(dev);
227                 blkdev->target = 0xff;
228                 blkdev->lun = lun;
229
230                 ret = usb_stor_get_info(udev, data, blkdev);
231                 if (ret == 1)
232                         ret = blk_prepare_device(dev);
233                 if (!ret) {
234                         usb_max_devs++;
235                         debug("%s: Found device %p\n", __func__, udev);
236                 } else {
237                         debug("usb_stor_get_info: Invalid device\n");
238                         ret = device_unbind(dev);
239                         if (ret)
240                                 return ret;
241                 }
242         }
243 #else
244         /* We don't have space to even probe if we hit the maximum */
245         if (usb_max_devs == USB_MAX_STOR_DEV) {
246                 printf("max USB Storage Device reached: %d stopping\n",
247                        usb_max_devs);
248                 return -ENOSPC;
249         }
250
251         if (!usb_storage_probe(udev, 0, &usb_stor[usb_max_devs]))
252                 return 0;
253
254         /*
255          * OK, it's a storage device.  Iterate over its LUNs and populate
256          * usb_dev_desc'
257          */
258         start = usb_max_devs;
259
260         max_lun = usb_get_max_lun(&usb_stor[usb_max_devs]);
261         for (lun = 0; lun <= max_lun && usb_max_devs < USB_MAX_STOR_DEV;
262              lun++) {
263                 struct blk_desc *blkdev;
264
265                 blkdev = &usb_dev_desc[usb_max_devs];
266                 memset(blkdev, '\0', sizeof(struct blk_desc));
267                 blkdev->if_type = IF_TYPE_USB;
268                 blkdev->devnum = usb_max_devs;
269                 blkdev->part_type = PART_TYPE_UNKNOWN;
270                 blkdev->target = 0xff;
271                 blkdev->type = DEV_TYPE_UNKNOWN;
272                 blkdev->block_read = usb_stor_read;
273                 blkdev->block_write = usb_stor_write;
274                 blkdev->lun = lun;
275                 blkdev->priv = udev;
276
277                 if (usb_stor_get_info(udev, &usb_stor[start],
278                                       &usb_dev_desc[usb_max_devs]) == 1) {
279                         debug("partype: %d\n", blkdev->part_type);
280                         part_init(blkdev);
281                         debug("partype: %d\n", blkdev->part_type);
282                         usb_max_devs++;
283                         debug("%s: Found device %p\n", __func__, udev);
284                 }
285         }
286 #endif
287
288         return 0;
289 }
290
291 void usb_stor_reset(void)
292 {
293         usb_max_devs = 0;
294 }
295
296 /*******************************************************************************
297  * scan the usb and reports device info
298  * to the user if mode = 1
299  * returns current device or -1 if no
300  */
301 int usb_stor_scan(int mode)
302 {
303         if (mode == 1)
304                 printf("       scanning usb for storage devices... ");
305
306 #ifndef CONFIG_DM_USB
307         unsigned char i;
308
309         usb_disable_asynch(1); /* asynch transfer not allowed */
310
311         usb_stor_reset();
312         for (i = 0; i < USB_MAX_DEVICE; i++) {
313                 struct usb_device *dev;
314
315                 dev = usb_get_dev_index(i); /* get device */
316                 debug("i=%d\n", i);
317                 if (usb_stor_probe_device(dev))
318                         break;
319         } /* for */
320
321         usb_disable_asynch(0); /* asynch transfer allowed */
322 #endif
323         printf("%d Storage Device(s) found\n", usb_max_devs);
324         if (usb_max_devs > 0)
325                 return 0;
326         return -1;
327 }
328
329 static int usb_stor_irq(struct usb_device *dev)
330 {
331         struct us_data *us;
332         us = (struct us_data *)dev->privptr;
333
334         if (us->ip_wanted)
335                 us->ip_wanted = 0;
336         return 0;
337 }
338
339
340 #ifdef  DEBUG
341
342 static void usb_show_srb(struct scsi_cmd *pccb)
343 {
344         int i;
345         printf("SRB: len %d datalen 0x%lX\n ", pccb->cmdlen, pccb->datalen);
346         for (i = 0; i < 12; i++)
347                 printf("%02X ", pccb->cmd[i]);
348         printf("\n");
349 }
350
351 static void display_int_status(unsigned long tmp)
352 {
353         printf("Status: %s %s %s %s %s %s %s\n",
354                 (tmp & USB_ST_ACTIVE) ? "Active" : "",
355                 (tmp & USB_ST_STALLED) ? "Stalled" : "",
356                 (tmp & USB_ST_BUF_ERR) ? "Buffer Error" : "",
357                 (tmp & USB_ST_BABBLE_DET) ? "Babble Det" : "",
358                 (tmp & USB_ST_NAK_REC) ? "NAKed" : "",
359                 (tmp & USB_ST_CRC_ERR) ? "CRC Error" : "",
360                 (tmp & USB_ST_BIT_ERR) ? "Bitstuff Error" : "");
361 }
362 #endif
363 /***********************************************************************
364  * Data transfer routines
365  ***********************************************************************/
366
367 static int us_one_transfer(struct us_data *us, int pipe, char *buf, int length)
368 {
369         int max_size;
370         int this_xfer;
371         int result;
372         int partial;
373         int maxtry;
374         int stat;
375
376         /* determine the maximum packet size for these transfers */
377         max_size = usb_maxpacket(us->pusb_dev, pipe) * 16;
378
379         /* while we have data left to transfer */
380         while (length) {
381
382                 /* calculate how long this will be -- maximum or a remainder */
383                 this_xfer = length > max_size ? max_size : length;
384                 length -= this_xfer;
385
386                 /* setup the retry counter */
387                 maxtry = 10;
388
389                 /* set up the transfer loop */
390                 do {
391                         /* transfer the data */
392                         debug("Bulk xfer 0x%lx(%d) try #%d\n",
393                               (ulong)map_to_sysmem(buf), this_xfer,
394                               11 - maxtry);
395                         result = usb_bulk_msg(us->pusb_dev, pipe, buf,
396                                               this_xfer, &partial,
397                                               USB_CNTL_TIMEOUT * 5);
398                         debug("bulk_msg returned %d xferred %d/%d\n",
399                               result, partial, this_xfer);
400                         if (us->pusb_dev->status != 0) {
401                                 /* if we stall, we need to clear it before
402                                  * we go on
403                                  */
404 #ifdef DEBUG
405                                 display_int_status(us->pusb_dev->status);
406 #endif
407                                 if (us->pusb_dev->status & USB_ST_STALLED) {
408                                         debug("stalled ->clearing endpoint" \
409                                               "halt for pipe 0x%x\n", pipe);
410                                         stat = us->pusb_dev->status;
411                                         usb_clear_halt(us->pusb_dev, pipe);
412                                         us->pusb_dev->status = stat;
413                                         if (this_xfer == partial) {
414                                                 debug("bulk transferred" \
415                                                       "with error %lX," \
416                                                       " but data ok\n",
417                                                       us->pusb_dev->status);
418                                                 return 0;
419                                         }
420                                         else
421                                                 return result;
422                                 }
423                                 if (us->pusb_dev->status & USB_ST_NAK_REC) {
424                                         debug("Device NAKed bulk_msg\n");
425                                         return result;
426                                 }
427                                 debug("bulk transferred with error");
428                                 if (this_xfer == partial) {
429                                         debug(" %ld, but data ok\n",
430                                               us->pusb_dev->status);
431                                         return 0;
432                                 }
433                                 /* if our try counter reaches 0, bail out */
434                                         debug(" %ld, data %d\n",
435                                               us->pusb_dev->status, partial);
436                                 if (!maxtry--)
437                                                 return result;
438                         }
439                         /* update to show what data was transferred */
440                         this_xfer -= partial;
441                         buf += partial;
442                         /* continue until this transfer is done */
443                 } while (this_xfer);
444         }
445
446         /* if we get here, we're done and successful */
447         return 0;
448 }
449
450 static int usb_stor_BBB_reset(struct us_data *us)
451 {
452         int result;
453         unsigned int pipe;
454
455         /*
456          * Reset recovery (5.3.4 in Universal Serial Bus Mass Storage Class)
457          *
458          * For Reset Recovery the host shall issue in the following order:
459          * a) a Bulk-Only Mass Storage Reset
460          * b) a Clear Feature HALT to the Bulk-In endpoint
461          * c) a Clear Feature HALT to the Bulk-Out endpoint
462          *
463          * This is done in 3 steps.
464          *
465          * If the reset doesn't succeed, the device should be port reset.
466          *
467          * This comment stolen from FreeBSD's /sys/dev/usb/umass.c.
468          */
469         debug("BBB_reset\n");
470         result = usb_control_msg(us->pusb_dev, usb_sndctrlpipe(us->pusb_dev, 0),
471                                  US_BBB_RESET,
472                                  USB_TYPE_CLASS | USB_RECIP_INTERFACE,
473                                  0, us->ifnum, NULL, 0, USB_CNTL_TIMEOUT * 5);
474
475         if ((result < 0) && (us->pusb_dev->status & USB_ST_STALLED)) {
476                 debug("RESET:stall\n");
477                 return -1;
478         }
479
480         /* long wait for reset */
481         mdelay(150);
482         debug("BBB_reset result %d: status %lX reset\n",
483               result, us->pusb_dev->status);
484         pipe = usb_rcvbulkpipe(us->pusb_dev, us->ep_in);
485         result = usb_clear_halt(us->pusb_dev, pipe);
486         /* long wait for reset */
487         mdelay(150);
488         debug("BBB_reset result %d: status %lX clearing IN endpoint\n",
489               result, us->pusb_dev->status);
490         /* long wait for reset */
491         pipe = usb_sndbulkpipe(us->pusb_dev, us->ep_out);
492         result = usb_clear_halt(us->pusb_dev, pipe);
493         mdelay(150);
494         debug("BBB_reset result %d: status %lX clearing OUT endpoint\n",
495               result, us->pusb_dev->status);
496         debug("BBB_reset done\n");
497         return 0;
498 }
499
500 /* FIXME: this reset function doesn't really reset the port, and it
501  * should. Actually it should probably do what it's doing here, and
502  * reset the port physically
503  */
504 static int usb_stor_CB_reset(struct us_data *us)
505 {
506         unsigned char cmd[12];
507         int result;
508
509         debug("CB_reset\n");
510         memset(cmd, 0xff, sizeof(cmd));
511         cmd[0] = SCSI_SEND_DIAG;
512         cmd[1] = 4;
513         result = usb_control_msg(us->pusb_dev, usb_sndctrlpipe(us->pusb_dev, 0),
514                                  US_CBI_ADSC,
515                                  USB_TYPE_CLASS | USB_RECIP_INTERFACE,
516                                  0, us->ifnum, cmd, sizeof(cmd),
517                                  USB_CNTL_TIMEOUT * 5);
518
519         /* long wait for reset */
520         mdelay(1500);
521         debug("CB_reset result %d: status %lX clearing endpoint halt\n",
522               result, us->pusb_dev->status);
523         usb_clear_halt(us->pusb_dev, usb_rcvbulkpipe(us->pusb_dev, us->ep_in));
524         usb_clear_halt(us->pusb_dev, usb_rcvbulkpipe(us->pusb_dev, us->ep_out));
525
526         debug("CB_reset done\n");
527         return 0;
528 }
529
530 /*
531  * Set up the command for a BBB device. Note that the actual SCSI
532  * command is copied into cbw.CBWCDB.
533  */
534 static int usb_stor_BBB_comdat(struct scsi_cmd *srb, struct us_data *us)
535 {
536         int result;
537         int actlen;
538         int dir_in;
539         unsigned int pipe;
540         ALLOC_CACHE_ALIGN_BUFFER(struct umass_bbb_cbw, cbw, 1);
541
542         dir_in = US_DIRECTION(srb->cmd[0]);
543
544 #ifdef BBB_COMDAT_TRACE
545         printf("dir %d lun %d cmdlen %d cmd %p datalen %lu pdata %p\n",
546                 dir_in, srb->lun, srb->cmdlen, srb->cmd, srb->datalen,
547                 srb->pdata);
548         if (srb->cmdlen) {
549                 for (result = 0; result < srb->cmdlen; result++)
550                         printf("cmd[%d] %#x ", result, srb->cmd[result]);
551                 printf("\n");
552         }
553 #endif
554         /* sanity checks */
555         if (!(srb->cmdlen <= CBWCDBLENGTH)) {
556                 debug("usb_stor_BBB_comdat:cmdlen too large\n");
557                 return -1;
558         }
559
560         /* always OUT to the ep */
561         pipe = usb_sndbulkpipe(us->pusb_dev, us->ep_out);
562
563         cbw->dCBWSignature = cpu_to_le32(CBWSIGNATURE);
564         cbw->dCBWTag = cpu_to_le32(CBWTag++);
565         cbw->dCBWDataTransferLength = cpu_to_le32(srb->datalen);
566         cbw->bCBWFlags = (dir_in ? CBWFLAGS_IN : CBWFLAGS_OUT);
567         cbw->bCBWLUN = srb->lun;
568         cbw->bCDBLength = srb->cmdlen;
569         /* copy the command data into the CBW command data buffer */
570         /* DST SRC LEN!!! */
571
572         memcpy(cbw->CBWCDB, srb->cmd, srb->cmdlen);
573         result = usb_bulk_msg(us->pusb_dev, pipe, cbw, UMASS_BBB_CBW_SIZE,
574                               &actlen, USB_CNTL_TIMEOUT * 5);
575         if (result < 0)
576                 debug("usb_stor_BBB_comdat:usb_bulk_msg error\n");
577         return result;
578 }
579
580 /* FIXME: we also need a CBI_command which sets up the completion
581  * interrupt, and waits for it
582  */
583 static int usb_stor_CB_comdat(struct scsi_cmd *srb, struct us_data *us)
584 {
585         int result = 0;
586         int dir_in, retry;
587         unsigned int pipe;
588         unsigned long status;
589
590         retry = 5;
591         dir_in = US_DIRECTION(srb->cmd[0]);
592
593         if (dir_in)
594                 pipe = usb_rcvbulkpipe(us->pusb_dev, us->ep_in);
595         else
596                 pipe = usb_sndbulkpipe(us->pusb_dev, us->ep_out);
597
598         while (retry--) {
599                 debug("CBI gets a command: Try %d\n", 5 - retry);
600 #ifdef DEBUG
601                 usb_show_srb(srb);
602 #endif
603                 /* let's send the command via the control pipe */
604                 result = usb_control_msg(us->pusb_dev,
605                                          usb_sndctrlpipe(us->pusb_dev , 0),
606                                          US_CBI_ADSC,
607                                          USB_TYPE_CLASS | USB_RECIP_INTERFACE,
608                                          0, us->ifnum,
609                                          srb->cmd, srb->cmdlen,
610                                          USB_CNTL_TIMEOUT * 5);
611                 debug("CB_transport: control msg returned %d, status %lX\n",
612                       result, us->pusb_dev->status);
613                 /* check the return code for the command */
614                 if (result < 0) {
615                         if (us->pusb_dev->status & USB_ST_STALLED) {
616                                 status = us->pusb_dev->status;
617                                 debug(" stall during command found," \
618                                       " clear pipe\n");
619                                 usb_clear_halt(us->pusb_dev,
620                                               usb_sndctrlpipe(us->pusb_dev, 0));
621                                 us->pusb_dev->status = status;
622                         }
623                         debug(" error during command %02X" \
624                               " Stat = %lX\n", srb->cmd[0],
625                               us->pusb_dev->status);
626                         return result;
627                 }
628                 /* transfer the data payload for this command, if one exists*/
629
630                 debug("CB_transport: control msg returned %d," \
631                       " direction is %s to go 0x%lx\n", result,
632                       dir_in ? "IN" : "OUT", srb->datalen);
633                 if (srb->datalen) {
634                         result = us_one_transfer(us, pipe, (char *)srb->pdata,
635                                                  srb->datalen);
636                         debug("CBI attempted to transfer data," \
637                               " result is %d status %lX, len %d\n",
638                               result, us->pusb_dev->status,
639                                 us->pusb_dev->act_len);
640                         if (!(us->pusb_dev->status & USB_ST_NAK_REC))
641                                 break;
642                 } /* if (srb->datalen) */
643                 else
644                         break;
645         }
646         /* return result */
647
648         return result;
649 }
650
651
652 static int usb_stor_CBI_get_status(struct scsi_cmd *srb, struct us_data *us)
653 {
654         int timeout;
655
656         us->ip_wanted = 1;
657         submit_int_msg(us->pusb_dev, us->irqpipe,
658                         (void *) &us->ip_data, us->irqmaxp, us->irqinterval);
659         timeout = 1000;
660         while (timeout--) {
661                 if (us->ip_wanted == 0)
662                         break;
663                 mdelay(10);
664         }
665         if (us->ip_wanted) {
666                 printf("        Did not get interrupt on CBI\n");
667                 us->ip_wanted = 0;
668                 return USB_STOR_TRANSPORT_ERROR;
669         }
670         debug("Got interrupt data 0x%x, transferred %d status 0x%lX\n",
671               us->ip_data, us->pusb_dev->irq_act_len,
672               us->pusb_dev->irq_status);
673         /* UFI gives us ASC and ASCQ, like a request sense */
674         if (us->subclass == US_SC_UFI) {
675                 if (srb->cmd[0] == SCSI_REQ_SENSE ||
676                     srb->cmd[0] == SCSI_INQUIRY)
677                         return USB_STOR_TRANSPORT_GOOD; /* Good */
678                 else if (us->ip_data)
679                         return USB_STOR_TRANSPORT_FAILED;
680                 else
681                         return USB_STOR_TRANSPORT_GOOD;
682         }
683         /* otherwise, we interpret the data normally */
684         switch (us->ip_data) {
685         case 0x0001:
686                 return USB_STOR_TRANSPORT_GOOD;
687         case 0x0002:
688                 return USB_STOR_TRANSPORT_FAILED;
689         default:
690                 return USB_STOR_TRANSPORT_ERROR;
691         }                       /* switch */
692         return USB_STOR_TRANSPORT_ERROR;
693 }
694
695 #define USB_TRANSPORT_UNKNOWN_RETRY 5
696 #define USB_TRANSPORT_NOT_READY_RETRY 10
697
698 /* clear a stall on an endpoint - special for BBB devices */
699 static int usb_stor_BBB_clear_endpt_stall(struct us_data *us, __u8 endpt)
700 {
701         /* ENDPOINT_HALT = 0, so set value to 0 */
702         return usb_control_msg(us->pusb_dev, usb_sndctrlpipe(us->pusb_dev, 0),
703                                USB_REQ_CLEAR_FEATURE, USB_RECIP_ENDPOINT, 0,
704                                endpt, NULL, 0, USB_CNTL_TIMEOUT * 5);
705 }
706
707 static int usb_stor_BBB_transport(struct scsi_cmd *srb, struct us_data *us)
708 {
709         int result, retry;
710         int dir_in;
711         int actlen, data_actlen;
712         unsigned int pipe, pipein, pipeout;
713         ALLOC_CACHE_ALIGN_BUFFER(struct umass_bbb_csw, csw, 1);
714 #ifdef BBB_XPORT_TRACE
715         unsigned char *ptr;
716         int index;
717 #endif
718
719         dir_in = US_DIRECTION(srb->cmd[0]);
720
721         /* COMMAND phase */
722         debug("COMMAND phase\n");
723         result = usb_stor_BBB_comdat(srb, us);
724         if (result < 0) {
725                 debug("failed to send CBW status %ld\n",
726                       us->pusb_dev->status);
727                 usb_stor_BBB_reset(us);
728                 return USB_STOR_TRANSPORT_FAILED;
729         }
730         if (!(us->flags & USB_READY))
731                 mdelay(5);
732         pipein = usb_rcvbulkpipe(us->pusb_dev, us->ep_in);
733         pipeout = usb_sndbulkpipe(us->pusb_dev, us->ep_out);
734         /* DATA phase + error handling */
735         data_actlen = 0;
736         /* no data, go immediately to the STATUS phase */
737         if (srb->datalen == 0)
738                 goto st;
739         debug("DATA phase\n");
740         if (dir_in)
741                 pipe = pipein;
742         else
743                 pipe = pipeout;
744
745         result = usb_bulk_msg(us->pusb_dev, pipe, srb->pdata, srb->datalen,
746                               &data_actlen, USB_CNTL_TIMEOUT * 5);
747         /* special handling of STALL in DATA phase */
748         if ((result < 0) && (us->pusb_dev->status & USB_ST_STALLED)) {
749                 debug("DATA:stall\n");
750                 /* clear the STALL on the endpoint */
751                 result = usb_stor_BBB_clear_endpt_stall(us,
752                                         dir_in ? us->ep_in : us->ep_out);
753                 if (result >= 0)
754                         /* continue on to STATUS phase */
755                         goto st;
756         }
757         if (result < 0) {
758                 debug("usb_bulk_msg error status %ld\n",
759                       us->pusb_dev->status);
760                 usb_stor_BBB_reset(us);
761                 return USB_STOR_TRANSPORT_FAILED;
762         }
763 #ifdef BBB_XPORT_TRACE
764         for (index = 0; index < data_actlen; index++)
765                 printf("pdata[%d] %#x ", index, srb->pdata[index]);
766         printf("\n");
767 #endif
768         /* STATUS phase + error handling */
769 st:
770         retry = 0;
771 again:
772         debug("STATUS phase\n");
773         result = usb_bulk_msg(us->pusb_dev, pipein, csw, UMASS_BBB_CSW_SIZE,
774                                 &actlen, USB_CNTL_TIMEOUT*5);
775
776         /* special handling of STALL in STATUS phase */
777         if ((result < 0) && (retry < 1) &&
778             (us->pusb_dev->status & USB_ST_STALLED)) {
779                 debug("STATUS:stall\n");
780                 /* clear the STALL on the endpoint */
781                 result = usb_stor_BBB_clear_endpt_stall(us, us->ep_in);
782                 if (result >= 0 && (retry++ < 1))
783                         /* do a retry */
784                         goto again;
785         }
786         if (result < 0) {
787                 debug("usb_bulk_msg error status %ld\n",
788                       us->pusb_dev->status);
789                 usb_stor_BBB_reset(us);
790                 return USB_STOR_TRANSPORT_FAILED;
791         }
792 #ifdef BBB_XPORT_TRACE
793         ptr = (unsigned char *)csw;
794         for (index = 0; index < UMASS_BBB_CSW_SIZE; index++)
795                 printf("ptr[%d] %#x ", index, ptr[index]);
796         printf("\n");
797 #endif
798         /* misuse pipe to get the residue */
799         pipe = le32_to_cpu(csw->dCSWDataResidue);
800         if (pipe == 0 && srb->datalen != 0 && srb->datalen - data_actlen != 0)
801                 pipe = srb->datalen - data_actlen;
802         if (CSWSIGNATURE != le32_to_cpu(csw->dCSWSignature)) {
803                 debug("!CSWSIGNATURE\n");
804                 usb_stor_BBB_reset(us);
805                 return USB_STOR_TRANSPORT_FAILED;
806         } else if ((CBWTag - 1) != le32_to_cpu(csw->dCSWTag)) {
807                 debug("!Tag\n");
808                 usb_stor_BBB_reset(us);
809                 return USB_STOR_TRANSPORT_FAILED;
810         } else if (csw->bCSWStatus > CSWSTATUS_PHASE) {
811                 debug(">PHASE\n");
812                 usb_stor_BBB_reset(us);
813                 return USB_STOR_TRANSPORT_FAILED;
814         } else if (csw->bCSWStatus == CSWSTATUS_PHASE) {
815                 debug("=PHASE\n");
816                 usb_stor_BBB_reset(us);
817                 return USB_STOR_TRANSPORT_FAILED;
818         } else if (data_actlen > srb->datalen) {
819                 debug("transferred %dB instead of %ldB\n",
820                       data_actlen, srb->datalen);
821                 return USB_STOR_TRANSPORT_FAILED;
822         } else if (csw->bCSWStatus == CSWSTATUS_FAILED) {
823                 debug("FAILED\n");
824                 return USB_STOR_TRANSPORT_FAILED;
825         }
826
827         return result;
828 }
829
830 static int usb_stor_CB_transport(struct scsi_cmd *srb, struct us_data *us)
831 {
832         int result, status;
833         struct scsi_cmd *psrb;
834         struct scsi_cmd reqsrb;
835         int retry, notready;
836
837         psrb = &reqsrb;
838         status = USB_STOR_TRANSPORT_GOOD;
839         retry = 0;
840         notready = 0;
841         /* issue the command */
842 do_retry:
843         result = usb_stor_CB_comdat(srb, us);
844         debug("command / Data returned %d, status %lX\n",
845               result, us->pusb_dev->status);
846         /* if this is an CBI Protocol, get IRQ */
847         if (us->protocol == US_PR_CBI) {
848                 status = usb_stor_CBI_get_status(srb, us);
849                 /* if the status is error, report it */
850                 if (status == USB_STOR_TRANSPORT_ERROR) {
851                         debug(" USB CBI Command Error\n");
852                         return status;
853                 }
854                 srb->sense_buf[12] = (unsigned char)(us->ip_data >> 8);
855                 srb->sense_buf[13] = (unsigned char)(us->ip_data & 0xff);
856                 if (!us->ip_data) {
857                         /* if the status is good, report it */
858                         if (status == USB_STOR_TRANSPORT_GOOD) {
859                                 debug(" USB CBI Command Good\n");
860                                 return status;
861                         }
862                 }
863         }
864         /* do we have to issue an auto request? */
865         /* HERE we have to check the result */
866         if ((result < 0) && !(us->pusb_dev->status & USB_ST_STALLED)) {
867                 debug("ERROR %lX\n", us->pusb_dev->status);
868                 us->transport_reset(us);
869                 return USB_STOR_TRANSPORT_ERROR;
870         }
871         if ((us->protocol == US_PR_CBI) &&
872             ((srb->cmd[0] == SCSI_REQ_SENSE) ||
873             (srb->cmd[0] == SCSI_INQUIRY))) {
874                 /* do not issue an autorequest after request sense */
875                 debug("No auto request and good\n");
876                 return USB_STOR_TRANSPORT_GOOD;
877         }
878         /* issue an request_sense */
879         memset(&psrb->cmd[0], 0, 12);
880         psrb->cmd[0] = SCSI_REQ_SENSE;
881         psrb->cmd[1] = srb->lun << 5;
882         psrb->cmd[4] = 18;
883         psrb->datalen = 18;
884         psrb->pdata = &srb->sense_buf[0];
885         psrb->cmdlen = 12;
886         /* issue the command */
887         result = usb_stor_CB_comdat(psrb, us);
888         debug("auto request returned %d\n", result);
889         /* if this is an CBI Protocol, get IRQ */
890         if (us->protocol == US_PR_CBI)
891                 status = usb_stor_CBI_get_status(psrb, us);
892
893         if ((result < 0) && !(us->pusb_dev->status & USB_ST_STALLED)) {
894                 debug(" AUTO REQUEST ERROR %ld\n",
895                       us->pusb_dev->status);
896                 return USB_STOR_TRANSPORT_ERROR;
897         }
898         debug("autorequest returned 0x%02X 0x%02X 0x%02X 0x%02X\n",
899               srb->sense_buf[0], srb->sense_buf[2],
900               srb->sense_buf[12], srb->sense_buf[13]);
901         /* Check the auto request result */
902         if ((srb->sense_buf[2] == 0) &&
903             (srb->sense_buf[12] == 0) &&
904             (srb->sense_buf[13] == 0)) {
905                 /* ok, no sense */
906                 return USB_STOR_TRANSPORT_GOOD;
907         }
908
909         /* Check the auto request result */
910         switch (srb->sense_buf[2]) {
911         case 0x01:
912                 /* Recovered Error */
913                 return USB_STOR_TRANSPORT_GOOD;
914                 break;
915         case 0x02:
916                 /* Not Ready */
917                 if (notready++ > USB_TRANSPORT_NOT_READY_RETRY) {
918                         printf("cmd 0x%02X returned 0x%02X 0x%02X 0x%02X"
919                                " 0x%02X (NOT READY)\n", srb->cmd[0],
920                                 srb->sense_buf[0], srb->sense_buf[2],
921                                 srb->sense_buf[12], srb->sense_buf[13]);
922                         return USB_STOR_TRANSPORT_FAILED;
923                 } else {
924                         mdelay(100);
925                         goto do_retry;
926                 }
927                 break;
928         default:
929                 if (retry++ > USB_TRANSPORT_UNKNOWN_RETRY) {
930                         printf("cmd 0x%02X returned 0x%02X 0x%02X 0x%02X"
931                                " 0x%02X\n", srb->cmd[0], srb->sense_buf[0],
932                                 srb->sense_buf[2], srb->sense_buf[12],
933                                 srb->sense_buf[13]);
934                         return USB_STOR_TRANSPORT_FAILED;
935                 } else
936                         goto do_retry;
937                 break;
938         }
939         return USB_STOR_TRANSPORT_FAILED;
940 }
941
942 static void usb_stor_set_max_xfer_blk(struct usb_device *udev,
943                                       struct us_data *us)
944 {
945         unsigned short blk;
946         size_t __maybe_unused size;
947         int __maybe_unused ret;
948
949 #ifndef CONFIG_DM_USB
950 #ifdef CONFIG_USB_EHCI_HCD
951         /*
952          * The U-Boot EHCI driver can handle any transfer length as long as
953          * there is enough free heap space left, but the SCSI READ(10) and
954          * WRITE(10) commands are limited to 65535 blocks.
955          */
956         blk = USHRT_MAX;
957 #else
958         blk = 20;
959 #endif
960 #else
961         ret = usb_get_max_xfer_size(udev, (size_t *)&size);
962         if (ret < 0) {
963                 /* unimplemented, let's use default 20 */
964                 blk = 20;
965         } else {
966                 if (size > USHRT_MAX * 512)
967                         blk = USHRT_MAX;
968                 blk = size / 512;
969         }
970 #endif
971
972         us->max_xfer_blk = blk;
973 }
974
975 static int usb_inquiry(struct scsi_cmd *srb, struct us_data *ss)
976 {
977         int retry, i;
978         retry = 5;
979         do {
980                 memset(&srb->cmd[0], 0, 12);
981                 srb->cmd[0] = SCSI_INQUIRY;
982                 srb->cmd[1] = srb->lun << 5;
983                 srb->cmd[4] = 36;
984                 srb->datalen = 36;
985                 srb->cmdlen = 12;
986                 i = ss->transport(srb, ss);
987                 debug("inquiry returns %d\n", i);
988                 if (i == 0)
989                         break;
990         } while (--retry);
991
992         if (!retry) {
993                 printf("error in inquiry\n");
994                 return -1;
995         }
996         return 0;
997 }
998
999 static int usb_request_sense(struct scsi_cmd *srb, struct us_data *ss)
1000 {
1001         char *ptr;
1002
1003         ptr = (char *)srb->pdata;
1004         memset(&srb->cmd[0], 0, 12);
1005         srb->cmd[0] = SCSI_REQ_SENSE;
1006         srb->cmd[1] = srb->lun << 5;
1007         srb->cmd[4] = 18;
1008         srb->datalen = 18;
1009         srb->pdata = &srb->sense_buf[0];
1010         srb->cmdlen = 12;
1011         ss->transport(srb, ss);
1012         debug("Request Sense returned %02X %02X %02X\n",
1013               srb->sense_buf[2], srb->sense_buf[12],
1014               srb->sense_buf[13]);
1015         srb->pdata = (uchar *)ptr;
1016         return 0;
1017 }
1018
1019 static int usb_test_unit_ready(struct scsi_cmd *srb, struct us_data *ss)
1020 {
1021         int retries = 10;
1022
1023         do {
1024                 memset(&srb->cmd[0], 0, 12);
1025                 srb->cmd[0] = SCSI_TST_U_RDY;
1026                 srb->cmd[1] = srb->lun << 5;
1027                 srb->datalen = 0;
1028                 srb->cmdlen = 12;
1029                 if (ss->transport(srb, ss) == USB_STOR_TRANSPORT_GOOD) {
1030                         ss->flags |= USB_READY;
1031                         return 0;
1032                 }
1033                 usb_request_sense(srb, ss);
1034                 /*
1035                  * Check the Key Code Qualifier, if it matches
1036                  * "Not Ready - medium not present"
1037                  * (the sense Key equals 0x2 and the ASC is 0x3a)
1038                  * return immediately as the medium being absent won't change
1039                  * unless there is a user action.
1040                  */
1041                 if ((srb->sense_buf[2] == 0x02) &&
1042                     (srb->sense_buf[12] == 0x3a))
1043                         return -1;
1044                 mdelay(100);
1045         } while (retries--);
1046
1047         return -1;
1048 }
1049
1050 static int usb_read_capacity(struct scsi_cmd *srb, struct us_data *ss)
1051 {
1052         int retry;
1053         /* XXX retries */
1054         retry = 3;
1055         do {
1056                 memset(&srb->cmd[0], 0, 12);
1057                 srb->cmd[0] = SCSI_RD_CAPAC;
1058                 srb->cmd[1] = srb->lun << 5;
1059                 srb->datalen = 8;
1060                 srb->cmdlen = 12;
1061                 if (ss->transport(srb, ss) == USB_STOR_TRANSPORT_GOOD)
1062                         return 0;
1063         } while (retry--);
1064
1065         return -1;
1066 }
1067
1068 static int usb_read_10(struct scsi_cmd *srb, struct us_data *ss,
1069                        unsigned long start, unsigned short blocks)
1070 {
1071         memset(&srb->cmd[0], 0, 12);
1072         srb->cmd[0] = SCSI_READ10;
1073         srb->cmd[1] = srb->lun << 5;
1074         srb->cmd[2] = ((unsigned char) (start >> 24)) & 0xff;
1075         srb->cmd[3] = ((unsigned char) (start >> 16)) & 0xff;
1076         srb->cmd[4] = ((unsigned char) (start >> 8)) & 0xff;
1077         srb->cmd[5] = ((unsigned char) (start)) & 0xff;
1078         srb->cmd[7] = ((unsigned char) (blocks >> 8)) & 0xff;
1079         srb->cmd[8] = (unsigned char) blocks & 0xff;
1080         srb->cmdlen = 12;
1081         debug("read10: start %lx blocks %x\n", start, blocks);
1082         return ss->transport(srb, ss);
1083 }
1084
1085 static int usb_write_10(struct scsi_cmd *srb, struct us_data *ss,
1086                         unsigned long start, unsigned short blocks)
1087 {
1088         memset(&srb->cmd[0], 0, 12);
1089         srb->cmd[0] = SCSI_WRITE10;
1090         srb->cmd[1] = srb->lun << 5;
1091         srb->cmd[2] = ((unsigned char) (start >> 24)) & 0xff;
1092         srb->cmd[3] = ((unsigned char) (start >> 16)) & 0xff;
1093         srb->cmd[4] = ((unsigned char) (start >> 8)) & 0xff;
1094         srb->cmd[5] = ((unsigned char) (start)) & 0xff;
1095         srb->cmd[7] = ((unsigned char) (blocks >> 8)) & 0xff;
1096         srb->cmd[8] = (unsigned char) blocks & 0xff;
1097         srb->cmdlen = 12;
1098         debug("write10: start %lx blocks %x\n", start, blocks);
1099         return ss->transport(srb, ss);
1100 }
1101
1102
1103 #ifdef CONFIG_USB_BIN_FIXUP
1104 /*
1105  * Some USB storage devices queried for SCSI identification data respond with
1106  * binary strings, which if output to the console freeze the terminal. The
1107  * workaround is to modify the vendor and product strings read from such
1108  * device with proper values (as reported by 'usb info').
1109  *
1110  * Vendor and product length limits are taken from the definition of
1111  * struct blk_desc in include/part.h.
1112  */
1113 static void usb_bin_fixup(struct usb_device_descriptor descriptor,
1114                                 unsigned char vendor[],
1115                                 unsigned char product[]) {
1116         const unsigned char max_vendor_len = 40;
1117         const unsigned char max_product_len = 20;
1118         if (descriptor.idVendor == 0x0424 && descriptor.idProduct == 0x223a) {
1119                 strncpy((char *)vendor, "SMSC", max_vendor_len);
1120                 strncpy((char *)product, "Flash Media Cntrller",
1121                         max_product_len);
1122         }
1123 }
1124 #endif /* CONFIG_USB_BIN_FIXUP */
1125
1126 #ifdef CONFIG_BLK
1127 static unsigned long usb_stor_read(struct udevice *dev, lbaint_t blknr,
1128                                    lbaint_t blkcnt, void *buffer)
1129 #else
1130 static unsigned long usb_stor_read(struct blk_desc *block_dev, lbaint_t blknr,
1131                                    lbaint_t blkcnt, void *buffer)
1132 #endif
1133 {
1134         lbaint_t start, blks;
1135         uintptr_t buf_addr;
1136         unsigned short smallblks;
1137         struct usb_device *udev;
1138         struct us_data *ss;
1139         int retry;
1140         struct scsi_cmd *srb = &usb_ccb;
1141 #ifdef CONFIG_BLK
1142         struct blk_desc *block_dev;
1143 #endif
1144
1145         if (blkcnt == 0)
1146                 return 0;
1147         /* Setup  device */
1148 #ifdef CONFIG_BLK
1149         block_dev = dev_get_uclass_platdata(dev);
1150         udev = dev_get_parent_priv(dev_get_parent(dev));
1151         debug("\nusb_read: udev %d\n", block_dev->devnum);
1152 #else
1153         debug("\nusb_read: udev %d\n", block_dev->devnum);
1154         udev = usb_dev_desc[block_dev->devnum].priv;
1155         if (!udev) {
1156                 debug("%s: No device\n", __func__);
1157                 return 0;
1158         }
1159 #endif
1160         ss = (struct us_data *)udev->privptr;
1161
1162         usb_disable_asynch(1); /* asynch transfer not allowed */
1163         srb->lun = block_dev->lun;
1164         buf_addr = (uintptr_t)buffer;
1165         start = blknr;
1166         blks = blkcnt;
1167
1168         debug("\nusb_read: dev %d startblk " LBAF ", blccnt " LBAF " buffer %"
1169               PRIxPTR "\n", block_dev->devnum, start, blks, buf_addr);
1170
1171         do {
1172                 /* XXX need some comment here */
1173                 retry = 2;
1174                 srb->pdata = (unsigned char *)buf_addr;
1175                 if (blks > ss->max_xfer_blk)
1176                         smallblks = ss->max_xfer_blk;
1177                 else
1178                         smallblks = (unsigned short) blks;
1179 retry_it:
1180                 if (smallblks == ss->max_xfer_blk)
1181                         usb_show_progress();
1182                 srb->datalen = block_dev->blksz * smallblks;
1183                 srb->pdata = (unsigned char *)buf_addr;
1184                 if (usb_read_10(srb, ss, start, smallblks)) {
1185                         debug("Read ERROR\n");
1186                         usb_request_sense(srb, ss);
1187                         if (retry--)
1188                                 goto retry_it;
1189                         blkcnt -= blks;
1190                         break;
1191                 }
1192                 start += smallblks;
1193                 blks -= smallblks;
1194                 buf_addr += srb->datalen;
1195         } while (blks != 0);
1196         ss->flags &= ~USB_READY;
1197
1198         debug("usb_read: end startblk " LBAF
1199               ", blccnt %x buffer %" PRIxPTR "\n",
1200               start, smallblks, buf_addr);
1201
1202         usb_disable_asynch(0); /* asynch transfer allowed */
1203         if (blkcnt >= ss->max_xfer_blk)
1204                 debug("\n");
1205         return blkcnt;
1206 }
1207
1208 #ifdef CONFIG_BLK
1209 static unsigned long usb_stor_write(struct udevice *dev, lbaint_t blknr,
1210                                     lbaint_t blkcnt, const void *buffer)
1211 #else
1212 static unsigned long usb_stor_write(struct blk_desc *block_dev, lbaint_t blknr,
1213                                     lbaint_t blkcnt, const void *buffer)
1214 #endif
1215 {
1216         lbaint_t start, blks;
1217         uintptr_t buf_addr;
1218         unsigned short smallblks;
1219         struct usb_device *udev;
1220         struct us_data *ss;
1221         int retry;
1222         struct scsi_cmd *srb = &usb_ccb;
1223 #ifdef CONFIG_BLK
1224         struct blk_desc *block_dev;
1225 #endif
1226
1227         if (blkcnt == 0)
1228                 return 0;
1229
1230         /* Setup  device */
1231 #ifdef CONFIG_BLK
1232         block_dev = dev_get_uclass_platdata(dev);
1233         udev = dev_get_parent_priv(dev_get_parent(dev));
1234         debug("\nusb_read: udev %d\n", block_dev->devnum);
1235 #else
1236         debug("\nusb_read: udev %d\n", block_dev->devnum);
1237         udev = usb_dev_desc[block_dev->devnum].priv;
1238         if (!udev) {
1239                 debug("%s: No device\n", __func__);
1240                 return 0;
1241         }
1242 #endif
1243         ss = (struct us_data *)udev->privptr;
1244
1245         usb_disable_asynch(1); /* asynch transfer not allowed */
1246
1247         srb->lun = block_dev->lun;
1248         buf_addr = (uintptr_t)buffer;
1249         start = blknr;
1250         blks = blkcnt;
1251
1252         debug("\nusb_write: dev %d startblk " LBAF ", blccnt " LBAF " buffer %"
1253               PRIxPTR "\n", block_dev->devnum, start, blks, buf_addr);
1254
1255         do {
1256                 /* If write fails retry for max retry count else
1257                  * return with number of blocks written successfully.
1258                  */
1259                 retry = 2;
1260                 srb->pdata = (unsigned char *)buf_addr;
1261                 if (blks > ss->max_xfer_blk)
1262                         smallblks = ss->max_xfer_blk;
1263                 else
1264                         smallblks = (unsigned short) blks;
1265 retry_it:
1266                 if (smallblks == ss->max_xfer_blk)
1267                         usb_show_progress();
1268                 srb->datalen = block_dev->blksz * smallblks;
1269                 srb->pdata = (unsigned char *)buf_addr;
1270                 if (usb_write_10(srb, ss, start, smallblks)) {
1271                         debug("Write ERROR\n");
1272                         usb_request_sense(srb, ss);
1273                         if (retry--)
1274                                 goto retry_it;
1275                         blkcnt -= blks;
1276                         break;
1277                 }
1278                 start += smallblks;
1279                 blks -= smallblks;
1280                 buf_addr += srb->datalen;
1281         } while (blks != 0);
1282         ss->flags &= ~USB_READY;
1283
1284         debug("usb_write: end startblk " LBAF ", blccnt %x buffer %"
1285               PRIxPTR "\n", start, smallblks, buf_addr);
1286
1287         usb_disable_asynch(0); /* asynch transfer allowed */
1288         if (blkcnt >= ss->max_xfer_blk)
1289                 debug("\n");
1290         return blkcnt;
1291
1292 }
1293
1294 /* Probe to see if a new device is actually a Storage device */
1295 int usb_storage_probe(struct usb_device *dev, unsigned int ifnum,
1296                       struct us_data *ss)
1297 {
1298         struct usb_interface *iface;
1299         int i;
1300         struct usb_endpoint_descriptor *ep_desc;
1301         unsigned int flags = 0;
1302
1303         /* let's examine the device now */
1304         iface = &dev->config.if_desc[ifnum];
1305
1306         if (dev->descriptor.bDeviceClass != 0 ||
1307                         iface->desc.bInterfaceClass != USB_CLASS_MASS_STORAGE ||
1308                         iface->desc.bInterfaceSubClass < US_SC_MIN ||
1309                         iface->desc.bInterfaceSubClass > US_SC_MAX) {
1310                 debug("Not mass storage\n");
1311                 /* if it's not a mass storage, we go no further */
1312                 return 0;
1313         }
1314
1315         memset(ss, 0, sizeof(struct us_data));
1316
1317         /* At this point, we know we've got a live one */
1318         debug("\n\nUSB Mass Storage device detected\n");
1319
1320         /* Initialize the us_data structure with some useful info */
1321         ss->flags = flags;
1322         ss->ifnum = ifnum;
1323         ss->pusb_dev = dev;
1324         ss->attention_done = 0;
1325         ss->subclass = iface->desc.bInterfaceSubClass;
1326         ss->protocol = iface->desc.bInterfaceProtocol;
1327
1328         /* set the handler pointers based on the protocol */
1329         debug("Transport: ");
1330         switch (ss->protocol) {
1331         case US_PR_CB:
1332                 debug("Control/Bulk\n");
1333                 ss->transport = usb_stor_CB_transport;
1334                 ss->transport_reset = usb_stor_CB_reset;
1335                 break;
1336
1337         case US_PR_CBI:
1338                 debug("Control/Bulk/Interrupt\n");
1339                 ss->transport = usb_stor_CB_transport;
1340                 ss->transport_reset = usb_stor_CB_reset;
1341                 break;
1342         case US_PR_BULK:
1343                 debug("Bulk/Bulk/Bulk\n");
1344                 ss->transport = usb_stor_BBB_transport;
1345                 ss->transport_reset = usb_stor_BBB_reset;
1346                 break;
1347         default:
1348                 printf("USB Storage Transport unknown / not yet implemented\n");
1349                 return 0;
1350                 break;
1351         }
1352
1353         /*
1354          * We are expecting a minimum of 2 endpoints - in and out (bulk).
1355          * An optional interrupt is OK (necessary for CBI protocol).
1356          * We will ignore any others.
1357          */
1358         for (i = 0; i < iface->desc.bNumEndpoints; i++) {
1359                 ep_desc = &iface->ep_desc[i];
1360                 /* is it an BULK endpoint? */
1361                 if ((ep_desc->bmAttributes &
1362                      USB_ENDPOINT_XFERTYPE_MASK) == USB_ENDPOINT_XFER_BULK) {
1363                         if (ep_desc->bEndpointAddress & USB_DIR_IN)
1364                                 ss->ep_in = ep_desc->bEndpointAddress &
1365                                                 USB_ENDPOINT_NUMBER_MASK;
1366                         else
1367                                 ss->ep_out =
1368                                         ep_desc->bEndpointAddress &
1369                                         USB_ENDPOINT_NUMBER_MASK;
1370                 }
1371
1372                 /* is it an interrupt endpoint? */
1373                 if ((ep_desc->bmAttributes &
1374                      USB_ENDPOINT_XFERTYPE_MASK) == USB_ENDPOINT_XFER_INT) {
1375                         ss->ep_int = ep_desc->bEndpointAddress &
1376                                                 USB_ENDPOINT_NUMBER_MASK;
1377                         ss->irqinterval = ep_desc->bInterval;
1378                 }
1379         }
1380         debug("Endpoints In %d Out %d Int %d\n",
1381               ss->ep_in, ss->ep_out, ss->ep_int);
1382
1383         /* Do some basic sanity checks, and bail if we find a problem */
1384         if (usb_set_interface(dev, iface->desc.bInterfaceNumber, 0) ||
1385             !ss->ep_in || !ss->ep_out ||
1386             (ss->protocol == US_PR_CBI && ss->ep_int == 0)) {
1387                 debug("Problems with device\n");
1388                 return 0;
1389         }
1390         /* set class specific stuff */
1391         /* We only handle certain protocols.  Currently, these are
1392          * the only ones.
1393          * The SFF8070 accepts the requests used in u-boot
1394          */
1395         if (ss->subclass != US_SC_UFI && ss->subclass != US_SC_SCSI &&
1396             ss->subclass != US_SC_8070) {
1397                 printf("Sorry, protocol %d not yet supported.\n", ss->subclass);
1398                 return 0;
1399         }
1400         if (ss->ep_int) {
1401                 /* we had found an interrupt endpoint, prepare irq pipe
1402                  * set up the IRQ pipe and handler
1403                  */
1404                 ss->irqinterval = (ss->irqinterval > 0) ? ss->irqinterval : 255;
1405                 ss->irqpipe = usb_rcvintpipe(ss->pusb_dev, ss->ep_int);
1406                 ss->irqmaxp = usb_maxpacket(dev, ss->irqpipe);
1407                 dev->irq_handle = usb_stor_irq;
1408         }
1409
1410         /* Set the maximum transfer size per host controller setting */
1411         usb_stor_set_max_xfer_blk(dev, ss);
1412
1413         dev->privptr = (void *)ss;
1414         return 1;
1415 }
1416
1417 int usb_stor_get_info(struct usb_device *dev, struct us_data *ss,
1418                       struct blk_desc *dev_desc)
1419 {
1420         unsigned char perq, modi;
1421         ALLOC_CACHE_ALIGN_BUFFER(u32, cap, 2);
1422         ALLOC_CACHE_ALIGN_BUFFER(u8, usb_stor_buf, 36);
1423         u32 capacity, blksz;
1424         struct scsi_cmd *pccb = &usb_ccb;
1425
1426         pccb->pdata = usb_stor_buf;
1427
1428         dev_desc->target = dev->devnum;
1429         pccb->lun = dev_desc->lun;
1430         debug(" address %d\n", dev_desc->target);
1431
1432         if (usb_inquiry(pccb, ss)) {
1433                 debug("%s: usb_inquiry() failed\n", __func__);
1434                 return -1;
1435         }
1436
1437         perq = usb_stor_buf[0];
1438         modi = usb_stor_buf[1];
1439
1440         /*
1441          * Skip unknown devices (0x1f) and enclosure service devices (0x0d),
1442          * they would not respond to test_unit_ready .
1443          */
1444         if (((perq & 0x1f) == 0x1f) || ((perq & 0x1f) == 0x0d)) {
1445                 debug("%s: unknown/unsupported device\n", __func__);
1446                 return 0;
1447         }
1448         if ((modi&0x80) == 0x80) {
1449                 /* drive is removable */
1450                 dev_desc->removable = 1;
1451         }
1452         memcpy(dev_desc->vendor, (const void *)&usb_stor_buf[8], 8);
1453         memcpy(dev_desc->product, (const void *)&usb_stor_buf[16], 16);
1454         memcpy(dev_desc->revision, (const void *)&usb_stor_buf[32], 4);
1455         dev_desc->vendor[8] = 0;
1456         dev_desc->product[16] = 0;
1457         dev_desc->revision[4] = 0;
1458 #ifdef CONFIG_USB_BIN_FIXUP
1459         usb_bin_fixup(dev->descriptor, (uchar *)dev_desc->vendor,
1460                       (uchar *)dev_desc->product);
1461 #endif /* CONFIG_USB_BIN_FIXUP */
1462         debug("ISO Vers %X, Response Data %X\n", usb_stor_buf[2],
1463               usb_stor_buf[3]);
1464         if (usb_test_unit_ready(pccb, ss)) {
1465                 printf("Device NOT ready\n"
1466                        "   Request Sense returned %02X %02X %02X\n",
1467                        pccb->sense_buf[2], pccb->sense_buf[12],
1468                        pccb->sense_buf[13]);
1469                 if (dev_desc->removable == 1)
1470                         dev_desc->type = perq;
1471                 return 0;
1472         }
1473         pccb->pdata = (unsigned char *)cap;
1474         memset(pccb->pdata, 0, 8);
1475         if (usb_read_capacity(pccb, ss) != 0) {
1476                 printf("READ_CAP ERROR\n");
1477                 cap[0] = 2880;
1478                 cap[1] = 0x200;
1479         }
1480         ss->flags &= ~USB_READY;
1481         debug("Read Capacity returns: 0x%08x, 0x%08x\n", cap[0], cap[1]);
1482 #if 0
1483         if (cap[0] > (0x200000 * 10)) /* greater than 10 GByte */
1484                 cap[0] >>= 16;
1485
1486         cap[0] = cpu_to_be32(cap[0]);
1487         cap[1] = cpu_to_be32(cap[1]);
1488 #endif
1489
1490         capacity = be32_to_cpu(cap[0]) + 1;
1491         blksz = be32_to_cpu(cap[1]);
1492
1493         debug("Capacity = 0x%08x, blocksz = 0x%08x\n", capacity, blksz);
1494         dev_desc->lba = capacity;
1495         dev_desc->blksz = blksz;
1496         dev_desc->log2blksz = LOG2(dev_desc->blksz);
1497         dev_desc->type = perq;
1498         debug(" address %d\n", dev_desc->target);
1499
1500         return 1;
1501 }
1502
1503 #ifdef CONFIG_DM_USB
1504
1505 static int usb_mass_storage_probe(struct udevice *dev)
1506 {
1507         struct usb_device *udev = dev_get_parent_priv(dev);
1508         int ret;
1509
1510         usb_disable_asynch(1); /* asynch transfer not allowed */
1511         ret = usb_stor_probe_device(udev);
1512         usb_disable_asynch(0); /* asynch transfer allowed */
1513
1514         return ret;
1515 }
1516
1517 static const struct udevice_id usb_mass_storage_ids[] = {
1518         { .compatible = "usb-mass-storage" },
1519         { }
1520 };
1521
1522 U_BOOT_DRIVER(usb_mass_storage) = {
1523         .name   = "usb_mass_storage",
1524         .id     = UCLASS_MASS_STORAGE,
1525         .of_match = usb_mass_storage_ids,
1526         .probe = usb_mass_storage_probe,
1527 #ifdef CONFIG_BLK
1528         .platdata_auto_alloc_size       = sizeof(struct us_data),
1529 #endif
1530 };
1531
1532 UCLASS_DRIVER(usb_mass_storage) = {
1533         .id             = UCLASS_MASS_STORAGE,
1534         .name           = "usb_mass_storage",
1535 };
1536
1537 static const struct usb_device_id mass_storage_id_table[] = {
1538         {
1539                 .match_flags = USB_DEVICE_ID_MATCH_INT_CLASS,
1540                 .bInterfaceClass = USB_CLASS_MASS_STORAGE
1541         },
1542         { }             /* Terminating entry */
1543 };
1544
1545 U_BOOT_USB_DEVICE(usb_mass_storage, mass_storage_id_table);
1546 #endif
1547
1548 #ifdef CONFIG_BLK
1549 static const struct blk_ops usb_storage_ops = {
1550         .read   = usb_stor_read,
1551         .write  = usb_stor_write,
1552 };
1553
1554 U_BOOT_DRIVER(usb_storage_blk) = {
1555         .name           = "usb_storage_blk",
1556         .id             = UCLASS_BLK,
1557         .ops            = &usb_storage_ops,
1558 };
1559 #else
1560 U_BOOT_LEGACY_BLK(usb) = {
1561         .if_typename    = "usb",
1562         .if_type        = IF_TYPE_USB,
1563         .max_devs       = USB_MAX_STOR_DEV,
1564         .desc           = usb_dev_desc,
1565 };
1566 #endif