80cc87c9ef739fbf81c7c4cef5823f1e65f130c0
[platform/kernel/u-boot.git] / drivers / usb / host / ehci-hcd.c
1 /*-
2  * Copyright (c) 2007-2008, Juniper Networks, Inc.
3  * Copyright (c) 2008, Excito Elektronik i Skåne AB
4  * Copyright (c) 2008, Michael Trimarchi <trimarchimichael@yahoo.it>
5  *
6  * All rights reserved.
7  *
8  * SPDX-License-Identifier:     GPL-2.0
9  */
10 #include <common.h>
11 #include <dm.h>
12 #include <errno.h>
13 #include <asm/byteorder.h>
14 #include <asm/unaligned.h>
15 #include <usb.h>
16 #include <asm/io.h>
17 #include <malloc.h>
18 #include <memalign.h>
19 #include <watchdog.h>
20 #include <linux/compiler.h>
21
22 #include "ehci.h"
23
24 #ifndef CONFIG_USB_MAX_CONTROLLER_COUNT
25 #define CONFIG_USB_MAX_CONTROLLER_COUNT 1
26 #endif
27
28 /*
29  * EHCI spec page 20 says that the HC may take up to 16 uFrames (= 4ms) to halt.
30  * Let's time out after 8 to have a little safety margin on top of that.
31  */
32 #define HCHALT_TIMEOUT (8 * 1000)
33
34 #ifndef CONFIG_DM_USB
35 static struct ehci_ctrl ehcic[CONFIG_USB_MAX_CONTROLLER_COUNT];
36 #endif
37
38 #define ALIGN_END_ADDR(type, ptr, size)                 \
39         ((unsigned long)(ptr) + roundup((size) * sizeof(type), USB_DMA_MINALIGN))
40
41 static struct descriptor {
42         struct usb_hub_descriptor hub;
43         struct usb_device_descriptor device;
44         struct usb_linux_config_descriptor config;
45         struct usb_linux_interface_descriptor interface;
46         struct usb_endpoint_descriptor endpoint;
47 }  __attribute__ ((packed)) descriptor = {
48         {
49                 0x8,            /* bDescLength */
50                 0x29,           /* bDescriptorType: hub descriptor */
51                 2,              /* bNrPorts -- runtime modified */
52                 0,              /* wHubCharacteristics */
53                 10,             /* bPwrOn2PwrGood */
54                 0,              /* bHubCntrCurrent */
55                 {               /* Device removable */
56                 }               /* at most 7 ports! XXX */
57         },
58         {
59                 0x12,           /* bLength */
60                 1,              /* bDescriptorType: UDESC_DEVICE */
61                 cpu_to_le16(0x0200), /* bcdUSB: v2.0 */
62                 9,              /* bDeviceClass: UDCLASS_HUB */
63                 0,              /* bDeviceSubClass: UDSUBCLASS_HUB */
64                 1,              /* bDeviceProtocol: UDPROTO_HSHUBSTT */
65                 64,             /* bMaxPacketSize: 64 bytes */
66                 0x0000,         /* idVendor */
67                 0x0000,         /* idProduct */
68                 cpu_to_le16(0x0100), /* bcdDevice */
69                 1,              /* iManufacturer */
70                 2,              /* iProduct */
71                 0,              /* iSerialNumber */
72                 1               /* bNumConfigurations: 1 */
73         },
74         {
75                 0x9,
76                 2,              /* bDescriptorType: UDESC_CONFIG */
77                 cpu_to_le16(0x19),
78                 1,              /* bNumInterface */
79                 1,              /* bConfigurationValue */
80                 0,              /* iConfiguration */
81                 0x40,           /* bmAttributes: UC_SELF_POWER */
82                 0               /* bMaxPower */
83         },
84         {
85                 0x9,            /* bLength */
86                 4,              /* bDescriptorType: UDESC_INTERFACE */
87                 0,              /* bInterfaceNumber */
88                 0,              /* bAlternateSetting */
89                 1,              /* bNumEndpoints */
90                 9,              /* bInterfaceClass: UICLASS_HUB */
91                 0,              /* bInterfaceSubClass: UISUBCLASS_HUB */
92                 0,              /* bInterfaceProtocol: UIPROTO_HSHUBSTT */
93                 0               /* iInterface */
94         },
95         {
96                 0x7,            /* bLength */
97                 5,              /* bDescriptorType: UDESC_ENDPOINT */
98                 0x81,           /* bEndpointAddress:
99                                  * UE_DIR_IN | EHCI_INTR_ENDPT
100                                  */
101                 3,              /* bmAttributes: UE_INTERRUPT */
102                 8,              /* wMaxPacketSize */
103                 255             /* bInterval */
104         },
105 };
106
107 #if defined(CONFIG_EHCI_IS_TDI)
108 #define ehci_is_TDI()   (1)
109 #else
110 #define ehci_is_TDI()   (0)
111 #endif
112
113 static struct ehci_ctrl *ehci_get_ctrl(struct usb_device *udev)
114 {
115 #ifdef CONFIG_DM_USB
116         return dev_get_priv(usb_get_bus(udev->dev));
117 #else
118         return udev->controller;
119 #endif
120 }
121
122 static int ehci_get_port_speed(struct ehci_ctrl *ctrl, uint32_t reg)
123 {
124         return PORTSC_PSPD(reg);
125 }
126
127 static void ehci_set_usbmode(struct ehci_ctrl *ctrl)
128 {
129         uint32_t tmp;
130         uint32_t *reg_ptr;
131
132         reg_ptr = (uint32_t *)((u8 *)&ctrl->hcor->or_usbcmd + USBMODE);
133         tmp = ehci_readl(reg_ptr);
134         tmp |= USBMODE_CM_HC;
135 #if defined(CONFIG_EHCI_MMIO_BIG_ENDIAN)
136         tmp |= USBMODE_BE;
137 #else
138         tmp &= ~USBMODE_BE;
139 #endif
140         ehci_writel(reg_ptr, tmp);
141 }
142
143 static void ehci_powerup_fixup(struct ehci_ctrl *ctrl, uint32_t *status_reg,
144                                uint32_t *reg)
145 {
146         mdelay(50);
147 }
148
149 static uint32_t *ehci_get_portsc_register(struct ehci_ctrl *ctrl, int port)
150 {
151         int max_ports = HCS_N_PORTS(ehci_readl(&ctrl->hccr->cr_hcsparams));
152
153         if (port < 0 || port >= max_ports) {
154                 /* Printing the message would cause a scan failure! */
155                 debug("The request port(%u) exceeds maximum port number\n",
156                       port);
157                 return NULL;
158         }
159
160         return (uint32_t *)&ctrl->hcor->or_portsc[port];
161 }
162
163 static int handshake(uint32_t *ptr, uint32_t mask, uint32_t done, int usec)
164 {
165         uint32_t result;
166         do {
167                 result = ehci_readl(ptr);
168                 udelay(5);
169                 if (result == ~(uint32_t)0)
170                         return -1;
171                 result &= mask;
172                 if (result == done)
173                         return 0;
174                 usec--;
175         } while (usec > 0);
176         return -1;
177 }
178
179 static int ehci_reset(struct ehci_ctrl *ctrl)
180 {
181         uint32_t cmd;
182         int ret = 0;
183
184         cmd = ehci_readl(&ctrl->hcor->or_usbcmd);
185         cmd = (cmd & ~CMD_RUN) | CMD_RESET;
186         ehci_writel(&ctrl->hcor->or_usbcmd, cmd);
187         ret = handshake((uint32_t *)&ctrl->hcor->or_usbcmd,
188                         CMD_RESET, 0, 250 * 1000);
189         if (ret < 0) {
190                 printf("EHCI fail to reset\n");
191                 goto out;
192         }
193
194         if (ehci_is_TDI())
195                 ctrl->ops.set_usb_mode(ctrl);
196
197 #ifdef CONFIG_USB_EHCI_TXFIFO_THRESH
198         cmd = ehci_readl(&ctrl->hcor->or_txfilltuning);
199         cmd &= ~TXFIFO_THRESH_MASK;
200         cmd |= TXFIFO_THRESH(CONFIG_USB_EHCI_TXFIFO_THRESH);
201         ehci_writel(&ctrl->hcor->or_txfilltuning, cmd);
202 #endif
203 out:
204         return ret;
205 }
206
207 static int ehci_shutdown(struct ehci_ctrl *ctrl)
208 {
209         int i, ret = 0;
210         uint32_t cmd, reg;
211         int max_ports = HCS_N_PORTS(ehci_readl(&ctrl->hccr->cr_hcsparams));
212
213         cmd = ehci_readl(&ctrl->hcor->or_usbcmd);
214         /* If not run, directly return */
215         if (!(cmd & CMD_RUN))
216                 return 0;
217         cmd &= ~(CMD_PSE | CMD_ASE);
218         ehci_writel(&ctrl->hcor->or_usbcmd, cmd);
219         ret = handshake(&ctrl->hcor->or_usbsts, STS_ASS | STS_PSS, 0,
220                 100 * 1000);
221
222         if (!ret) {
223                 for (i = 0; i < max_ports; i++) {
224                         reg = ehci_readl(&ctrl->hcor->or_portsc[i]);
225                         reg |= EHCI_PS_SUSP;
226                         ehci_writel(&ctrl->hcor->or_portsc[i], reg);
227                 }
228
229                 cmd &= ~CMD_RUN;
230                 ehci_writel(&ctrl->hcor->or_usbcmd, cmd);
231                 ret = handshake(&ctrl->hcor->or_usbsts, STS_HALT, STS_HALT,
232                         HCHALT_TIMEOUT);
233         }
234
235         if (ret)
236                 puts("EHCI failed to shut down host controller.\n");
237
238         return ret;
239 }
240
241 static int ehci_td_buffer(struct qTD *td, void *buf, size_t sz)
242 {
243         uint32_t delta, next;
244         unsigned long addr = (unsigned long)buf;
245         int idx;
246
247         if (addr != ALIGN(addr, ARCH_DMA_MINALIGN))
248                 debug("EHCI-HCD: Misaligned buffer address (%p)\n", buf);
249
250         flush_dcache_range(addr, ALIGN(addr + sz, ARCH_DMA_MINALIGN));
251
252         idx = 0;
253         while (idx < QT_BUFFER_CNT) {
254                 td->qt_buffer[idx] = cpu_to_hc32(virt_to_phys((void *)addr));
255                 td->qt_buffer_hi[idx] = 0;
256                 next = (addr + EHCI_PAGE_SIZE) & ~(EHCI_PAGE_SIZE - 1);
257                 delta = next - addr;
258                 if (delta >= sz)
259                         break;
260                 sz -= delta;
261                 addr = next;
262                 idx++;
263         }
264
265         if (idx == QT_BUFFER_CNT) {
266                 printf("out of buffer pointers (%zu bytes left)\n", sz);
267                 return -1;
268         }
269
270         return 0;
271 }
272
273 static inline u8 ehci_encode_speed(enum usb_device_speed speed)
274 {
275         #define QH_HIGH_SPEED   2
276         #define QH_FULL_SPEED   0
277         #define QH_LOW_SPEED    1
278         if (speed == USB_SPEED_HIGH)
279                 return QH_HIGH_SPEED;
280         if (speed == USB_SPEED_LOW)
281                 return QH_LOW_SPEED;
282         return QH_FULL_SPEED;
283 }
284
285 static void ehci_update_endpt2_dev_n_port(struct usb_device *udev,
286                                           struct QH *qh)
287 {
288         uint8_t portnr = 0;
289         uint8_t hubaddr = 0;
290
291         if (udev->speed != USB_SPEED_LOW && udev->speed != USB_SPEED_FULL)
292                 return;
293
294         usb_find_usb2_hub_address_port(udev, &hubaddr, &portnr);
295
296         qh->qh_endpt2 |= cpu_to_hc32(QH_ENDPT2_PORTNUM(portnr) |
297                                      QH_ENDPT2_HUBADDR(hubaddr));
298 }
299
300 static int
301 ehci_submit_async(struct usb_device *dev, unsigned long pipe, void *buffer,
302                    int length, struct devrequest *req)
303 {
304         ALLOC_ALIGN_BUFFER(struct QH, qh, 1, USB_DMA_MINALIGN);
305         struct qTD *qtd;
306         int qtd_count = 0;
307         int qtd_counter = 0;
308         volatile struct qTD *vtd;
309         unsigned long ts;
310         uint32_t *tdp;
311         uint32_t endpt, maxpacket, token, usbsts;
312         uint32_t c, toggle;
313         uint32_t cmd;
314         int timeout;
315         int ret = 0;
316         struct ehci_ctrl *ctrl = ehci_get_ctrl(dev);
317
318         debug("dev=%p, pipe=%lx, buffer=%p, length=%d, req=%p\n", dev, pipe,
319               buffer, length, req);
320         if (req != NULL)
321                 debug("req=%u (%#x), type=%u (%#x), value=%u (%#x), index=%u\n",
322                       req->request, req->request,
323                       req->requesttype, req->requesttype,
324                       le16_to_cpu(req->value), le16_to_cpu(req->value),
325                       le16_to_cpu(req->index));
326
327 #define PKT_ALIGN       512
328         /*
329          * The USB transfer is split into qTD transfers. Eeach qTD transfer is
330          * described by a transfer descriptor (the qTD). The qTDs form a linked
331          * list with a queue head (QH).
332          *
333          * Each qTD transfer starts with a new USB packet, i.e. a packet cannot
334          * have its beginning in a qTD transfer and its end in the following
335          * one, so the qTD transfer lengths have to be chosen accordingly.
336          *
337          * Each qTD transfer uses up to QT_BUFFER_CNT data buffers, mapped to
338          * single pages. The first data buffer can start at any offset within a
339          * page (not considering the cache-line alignment issues), while the
340          * following buffers must be page-aligned. There is no alignment
341          * constraint on the size of a qTD transfer.
342          */
343         if (req != NULL)
344                 /* 1 qTD will be needed for SETUP, and 1 for ACK. */
345                 qtd_count += 1 + 1;
346         if (length > 0 || req == NULL) {
347                 /*
348                  * Determine the qTD transfer size that will be used for the
349                  * data payload (not considering the first qTD transfer, which
350                  * may be longer or shorter, and the final one, which may be
351                  * shorter).
352                  *
353                  * In order to keep each packet within a qTD transfer, the qTD
354                  * transfer size is aligned to PKT_ALIGN, which is a multiple of
355                  * wMaxPacketSize (except in some cases for interrupt transfers,
356                  * see comment in submit_int_msg()).
357                  *
358                  * By default, i.e. if the input buffer is aligned to PKT_ALIGN,
359                  * QT_BUFFER_CNT full pages will be used.
360                  */
361                 int xfr_sz = QT_BUFFER_CNT;
362                 /*
363                  * However, if the input buffer is not aligned to PKT_ALIGN, the
364                  * qTD transfer size will be one page shorter, and the first qTD
365                  * data buffer of each transfer will be page-unaligned.
366                  */
367                 if ((unsigned long)buffer & (PKT_ALIGN - 1))
368                         xfr_sz--;
369                 /* Convert the qTD transfer size to bytes. */
370                 xfr_sz *= EHCI_PAGE_SIZE;
371                 /*
372                  * Approximate by excess the number of qTDs that will be
373                  * required for the data payload. The exact formula is way more
374                  * complicated and saves at most 2 qTDs, i.e. a total of 128
375                  * bytes.
376                  */
377                 qtd_count += 2 + length / xfr_sz;
378         }
379 /*
380  * Threshold value based on the worst-case total size of the allocated qTDs for
381  * a mass-storage transfer of 65535 blocks of 512 bytes.
382  */
383 #if CONFIG_SYS_MALLOC_LEN <= 64 + 128 * 1024
384 #warning CONFIG_SYS_MALLOC_LEN may be too small for EHCI
385 #endif
386         qtd = memalign(USB_DMA_MINALIGN, qtd_count * sizeof(struct qTD));
387         if (qtd == NULL) {
388                 printf("unable to allocate TDs\n");
389                 return -1;
390         }
391
392         memset(qh, 0, sizeof(struct QH));
393         memset(qtd, 0, qtd_count * sizeof(*qtd));
394
395         toggle = usb_gettoggle(dev, usb_pipeendpoint(pipe), usb_pipeout(pipe));
396
397         /*
398          * Setup QH (3.6 in ehci-r10.pdf)
399          *
400          *   qh_link ................. 03-00 H
401          *   qh_endpt1 ............... 07-04 H
402          *   qh_endpt2 ............... 0B-08 H
403          * - qh_curtd
404          *   qh_overlay.qt_next ...... 13-10 H
405          * - qh_overlay.qt_altnext
406          */
407         qh->qh_link = cpu_to_hc32(virt_to_phys(&ctrl->qh_list) | QH_LINK_TYPE_QH);
408         c = (dev->speed != USB_SPEED_HIGH) && !usb_pipeendpoint(pipe);
409         maxpacket = usb_maxpacket(dev, pipe);
410         endpt = QH_ENDPT1_RL(8) | QH_ENDPT1_C(c) |
411                 QH_ENDPT1_MAXPKTLEN(maxpacket) | QH_ENDPT1_H(0) |
412                 QH_ENDPT1_DTC(QH_ENDPT1_DTC_DT_FROM_QTD) |
413                 QH_ENDPT1_EPS(ehci_encode_speed(dev->speed)) |
414                 QH_ENDPT1_ENDPT(usb_pipeendpoint(pipe)) | QH_ENDPT1_I(0) |
415                 QH_ENDPT1_DEVADDR(usb_pipedevice(pipe));
416         qh->qh_endpt1 = cpu_to_hc32(endpt);
417         endpt = QH_ENDPT2_MULT(1) | QH_ENDPT2_UFCMASK(0) | QH_ENDPT2_UFSMASK(0);
418         qh->qh_endpt2 = cpu_to_hc32(endpt);
419         ehci_update_endpt2_dev_n_port(dev, qh);
420         qh->qh_overlay.qt_next = cpu_to_hc32(QT_NEXT_TERMINATE);
421         qh->qh_overlay.qt_altnext = cpu_to_hc32(QT_NEXT_TERMINATE);
422
423         tdp = &qh->qh_overlay.qt_next;
424         if (req != NULL) {
425                 /*
426                  * Setup request qTD (3.5 in ehci-r10.pdf)
427                  *
428                  *   qt_next ................ 03-00 H
429                  *   qt_altnext ............. 07-04 H
430                  *   qt_token ............... 0B-08 H
431                  *
432                  *   [ buffer, buffer_hi ] loaded with "req".
433                  */
434                 qtd[qtd_counter].qt_next = cpu_to_hc32(QT_NEXT_TERMINATE);
435                 qtd[qtd_counter].qt_altnext = cpu_to_hc32(QT_NEXT_TERMINATE);
436                 token = QT_TOKEN_DT(0) | QT_TOKEN_TOTALBYTES(sizeof(*req)) |
437                         QT_TOKEN_IOC(0) | QT_TOKEN_CPAGE(0) | QT_TOKEN_CERR(3) |
438                         QT_TOKEN_PID(QT_TOKEN_PID_SETUP) |
439                         QT_TOKEN_STATUS(QT_TOKEN_STATUS_ACTIVE);
440                 qtd[qtd_counter].qt_token = cpu_to_hc32(token);
441                 if (ehci_td_buffer(&qtd[qtd_counter], req, sizeof(*req))) {
442                         printf("unable to construct SETUP TD\n");
443                         goto fail;
444                 }
445                 /* Update previous qTD! */
446                 *tdp = cpu_to_hc32(virt_to_phys(&qtd[qtd_counter]));
447                 tdp = &qtd[qtd_counter++].qt_next;
448                 toggle = 1;
449         }
450
451         if (length > 0 || req == NULL) {
452                 uint8_t *buf_ptr = buffer;
453                 int left_length = length;
454
455                 do {
456                         /*
457                          * Determine the size of this qTD transfer. By default,
458                          * QT_BUFFER_CNT full pages can be used.
459                          */
460                         int xfr_bytes = QT_BUFFER_CNT * EHCI_PAGE_SIZE;
461                         /*
462                          * However, if the input buffer is not page-aligned, the
463                          * portion of the first page before the buffer start
464                          * offset within that page is unusable.
465                          */
466                         xfr_bytes -= (unsigned long)buf_ptr & (EHCI_PAGE_SIZE - 1);
467                         /*
468                          * In order to keep each packet within a qTD transfer,
469                          * align the qTD transfer size to PKT_ALIGN.
470                          */
471                         xfr_bytes &= ~(PKT_ALIGN - 1);
472                         /*
473                          * This transfer may be shorter than the available qTD
474                          * transfer size that has just been computed.
475                          */
476                         xfr_bytes = min(xfr_bytes, left_length);
477
478                         /*
479                          * Setup request qTD (3.5 in ehci-r10.pdf)
480                          *
481                          *   qt_next ................ 03-00 H
482                          *   qt_altnext ............. 07-04 H
483                          *   qt_token ............... 0B-08 H
484                          *
485                          *   [ buffer, buffer_hi ] loaded with "buffer".
486                          */
487                         qtd[qtd_counter].qt_next =
488                                         cpu_to_hc32(QT_NEXT_TERMINATE);
489                         qtd[qtd_counter].qt_altnext =
490                                         cpu_to_hc32(QT_NEXT_TERMINATE);
491                         token = QT_TOKEN_DT(toggle) |
492                                 QT_TOKEN_TOTALBYTES(xfr_bytes) |
493                                 QT_TOKEN_IOC(req == NULL) | QT_TOKEN_CPAGE(0) |
494                                 QT_TOKEN_CERR(3) |
495                                 QT_TOKEN_PID(usb_pipein(pipe) ?
496                                         QT_TOKEN_PID_IN : QT_TOKEN_PID_OUT) |
497                                 QT_TOKEN_STATUS(QT_TOKEN_STATUS_ACTIVE);
498                         qtd[qtd_counter].qt_token = cpu_to_hc32(token);
499                         if (ehci_td_buffer(&qtd[qtd_counter], buf_ptr,
500                                                 xfr_bytes)) {
501                                 printf("unable to construct DATA TD\n");
502                                 goto fail;
503                         }
504                         /* Update previous qTD! */
505                         *tdp = cpu_to_hc32(virt_to_phys(&qtd[qtd_counter]));
506                         tdp = &qtd[qtd_counter++].qt_next;
507                         /*
508                          * Data toggle has to be adjusted since the qTD transfer
509                          * size is not always an even multiple of
510                          * wMaxPacketSize.
511                          */
512                         if ((xfr_bytes / maxpacket) & 1)
513                                 toggle ^= 1;
514                         buf_ptr += xfr_bytes;
515                         left_length -= xfr_bytes;
516                 } while (left_length > 0);
517         }
518
519         if (req != NULL) {
520                 /*
521                  * Setup request qTD (3.5 in ehci-r10.pdf)
522                  *
523                  *   qt_next ................ 03-00 H
524                  *   qt_altnext ............. 07-04 H
525                  *   qt_token ............... 0B-08 H
526                  */
527                 qtd[qtd_counter].qt_next = cpu_to_hc32(QT_NEXT_TERMINATE);
528                 qtd[qtd_counter].qt_altnext = cpu_to_hc32(QT_NEXT_TERMINATE);
529                 token = QT_TOKEN_DT(1) | QT_TOKEN_TOTALBYTES(0) |
530                         QT_TOKEN_IOC(1) | QT_TOKEN_CPAGE(0) | QT_TOKEN_CERR(3) |
531                         QT_TOKEN_PID(usb_pipein(pipe) ?
532                                 QT_TOKEN_PID_OUT : QT_TOKEN_PID_IN) |
533                         QT_TOKEN_STATUS(QT_TOKEN_STATUS_ACTIVE);
534                 qtd[qtd_counter].qt_token = cpu_to_hc32(token);
535                 /* Update previous qTD! */
536                 *tdp = cpu_to_hc32(virt_to_phys(&qtd[qtd_counter]));
537                 tdp = &qtd[qtd_counter++].qt_next;
538         }
539
540         ctrl->qh_list.qh_link = cpu_to_hc32(virt_to_phys(qh) | QH_LINK_TYPE_QH);
541
542         /* Flush dcache */
543         flush_dcache_range((unsigned long)&ctrl->qh_list,
544                 ALIGN_END_ADDR(struct QH, &ctrl->qh_list, 1));
545         flush_dcache_range((unsigned long)qh, ALIGN_END_ADDR(struct QH, qh, 1));
546         flush_dcache_range((unsigned long)qtd,
547                            ALIGN_END_ADDR(struct qTD, qtd, qtd_count));
548
549         /* Set async. queue head pointer. */
550         ehci_writel(&ctrl->hcor->or_asynclistaddr, virt_to_phys(&ctrl->qh_list));
551
552         usbsts = ehci_readl(&ctrl->hcor->or_usbsts);
553         ehci_writel(&ctrl->hcor->or_usbsts, (usbsts & 0x3f));
554
555         /* Enable async. schedule. */
556         cmd = ehci_readl(&ctrl->hcor->or_usbcmd);
557         cmd |= CMD_ASE;
558         ehci_writel(&ctrl->hcor->or_usbcmd, cmd);
559
560         ret = handshake((uint32_t *)&ctrl->hcor->or_usbsts, STS_ASS, STS_ASS,
561                         100 * 1000);
562         if (ret < 0) {
563                 printf("EHCI fail timeout STS_ASS set\n");
564                 goto fail;
565         }
566
567         /* Wait for TDs to be processed. */
568         ts = get_timer(0);
569         vtd = &qtd[qtd_counter - 1];
570         timeout = USB_TIMEOUT_MS(pipe);
571         do {
572                 /* Invalidate dcache */
573                 invalidate_dcache_range((unsigned long)&ctrl->qh_list,
574                         ALIGN_END_ADDR(struct QH, &ctrl->qh_list, 1));
575                 invalidate_dcache_range((unsigned long)qh,
576                         ALIGN_END_ADDR(struct QH, qh, 1));
577                 invalidate_dcache_range((unsigned long)qtd,
578                         ALIGN_END_ADDR(struct qTD, qtd, qtd_count));
579
580                 token = hc32_to_cpu(vtd->qt_token);
581                 if (!(QT_TOKEN_GET_STATUS(token) & QT_TOKEN_STATUS_ACTIVE))
582                         break;
583                 WATCHDOG_RESET();
584         } while (get_timer(ts) < timeout);
585
586         /*
587          * Invalidate the memory area occupied by buffer
588          * Don't try to fix the buffer alignment, if it isn't properly
589          * aligned it's upper layer's fault so let invalidate_dcache_range()
590          * vow about it. But we have to fix the length as it's actual
591          * transfer length and can be unaligned. This is potentially
592          * dangerous operation, it's responsibility of the calling
593          * code to make sure enough space is reserved.
594          */
595         invalidate_dcache_range((unsigned long)buffer,
596                 ALIGN((unsigned long)buffer + length, ARCH_DMA_MINALIGN));
597
598         /* Check that the TD processing happened */
599         if (QT_TOKEN_GET_STATUS(token) & QT_TOKEN_STATUS_ACTIVE)
600                 printf("EHCI timed out on TD - token=%#x\n", token);
601
602         /* Disable async schedule. */
603         cmd = ehci_readl(&ctrl->hcor->or_usbcmd);
604         cmd &= ~CMD_ASE;
605         ehci_writel(&ctrl->hcor->or_usbcmd, cmd);
606
607         ret = handshake((uint32_t *)&ctrl->hcor->or_usbsts, STS_ASS, 0,
608                         100 * 1000);
609         if (ret < 0) {
610                 printf("EHCI fail timeout STS_ASS reset\n");
611                 goto fail;
612         }
613
614         token = hc32_to_cpu(qh->qh_overlay.qt_token);
615         if (!(QT_TOKEN_GET_STATUS(token) & QT_TOKEN_STATUS_ACTIVE)) {
616                 debug("TOKEN=%#x\n", token);
617                 switch (QT_TOKEN_GET_STATUS(token) &
618                         ~(QT_TOKEN_STATUS_SPLITXSTATE | QT_TOKEN_STATUS_PERR)) {
619                 case 0:
620                         toggle = QT_TOKEN_GET_DT(token);
621                         usb_settoggle(dev, usb_pipeendpoint(pipe),
622                                        usb_pipeout(pipe), toggle);
623                         dev->status = 0;
624                         break;
625                 case QT_TOKEN_STATUS_HALTED:
626                         dev->status = USB_ST_STALLED;
627                         break;
628                 case QT_TOKEN_STATUS_ACTIVE | QT_TOKEN_STATUS_DATBUFERR:
629                 case QT_TOKEN_STATUS_DATBUFERR:
630                         dev->status = USB_ST_BUF_ERR;
631                         break;
632                 case QT_TOKEN_STATUS_HALTED | QT_TOKEN_STATUS_BABBLEDET:
633                 case QT_TOKEN_STATUS_BABBLEDET:
634                         dev->status = USB_ST_BABBLE_DET;
635                         break;
636                 default:
637                         dev->status = USB_ST_CRC_ERR;
638                         if (QT_TOKEN_GET_STATUS(token) & QT_TOKEN_STATUS_HALTED)
639                                 dev->status |= USB_ST_STALLED;
640                         break;
641                 }
642                 dev->act_len = length - QT_TOKEN_GET_TOTALBYTES(token);
643         } else {
644                 dev->act_len = 0;
645 #ifndef CONFIG_USB_EHCI_FARADAY
646                 debug("dev=%u, usbsts=%#x, p[1]=%#x, p[2]=%#x\n",
647                       dev->devnum, ehci_readl(&ctrl->hcor->or_usbsts),
648                       ehci_readl(&ctrl->hcor->or_portsc[0]),
649                       ehci_readl(&ctrl->hcor->or_portsc[1]));
650 #endif
651         }
652
653         free(qtd);
654         return (dev->status != USB_ST_NOT_PROC) ? 0 : -1;
655
656 fail:
657         free(qtd);
658         return -1;
659 }
660
661 static int ehci_submit_root(struct usb_device *dev, unsigned long pipe,
662                             void *buffer, int length, struct devrequest *req)
663 {
664         uint8_t tmpbuf[4];
665         u16 typeReq;
666         void *srcptr = NULL;
667         int len, srclen;
668         uint32_t reg;
669         uint32_t *status_reg;
670         int port = le16_to_cpu(req->index) & 0xff;
671         struct ehci_ctrl *ctrl = ehci_get_ctrl(dev);
672
673         srclen = 0;
674
675         debug("req=%u (%#x), type=%u (%#x), value=%u, index=%u\n",
676               req->request, req->request,
677               req->requesttype, req->requesttype,
678               le16_to_cpu(req->value), le16_to_cpu(req->index));
679
680         typeReq = req->request | req->requesttype << 8;
681
682         switch (typeReq) {
683         case USB_REQ_GET_STATUS | ((USB_RT_PORT | USB_DIR_IN) << 8):
684         case USB_REQ_SET_FEATURE | ((USB_DIR_OUT | USB_RT_PORT) << 8):
685         case USB_REQ_CLEAR_FEATURE | ((USB_DIR_OUT | USB_RT_PORT) << 8):
686                 status_reg = ctrl->ops.get_portsc_register(ctrl, port - 1);
687                 if (!status_reg)
688                         return -1;
689                 break;
690         default:
691                 status_reg = NULL;
692                 break;
693         }
694
695         switch (typeReq) {
696         case DeviceRequest | USB_REQ_GET_DESCRIPTOR:
697                 switch (le16_to_cpu(req->value) >> 8) {
698                 case USB_DT_DEVICE:
699                         debug("USB_DT_DEVICE request\n");
700                         srcptr = &descriptor.device;
701                         srclen = descriptor.device.bLength;
702                         break;
703                 case USB_DT_CONFIG:
704                         debug("USB_DT_CONFIG config\n");
705                         srcptr = &descriptor.config;
706                         srclen = descriptor.config.bLength +
707                                         descriptor.interface.bLength +
708                                         descriptor.endpoint.bLength;
709                         break;
710                 case USB_DT_STRING:
711                         debug("USB_DT_STRING config\n");
712                         switch (le16_to_cpu(req->value) & 0xff) {
713                         case 0: /* Language */
714                                 srcptr = "\4\3\1\0";
715                                 srclen = 4;
716                                 break;
717                         case 1: /* Vendor */
718                                 srcptr = "\16\3u\0-\0b\0o\0o\0t\0";
719                                 srclen = 14;
720                                 break;
721                         case 2: /* Product */
722                                 srcptr = "\52\3E\0H\0C\0I\0 "
723                                          "\0H\0o\0s\0t\0 "
724                                          "\0C\0o\0n\0t\0r\0o\0l\0l\0e\0r\0";
725                                 srclen = 42;
726                                 break;
727                         default:
728                                 debug("unknown value DT_STRING %x\n",
729                                         le16_to_cpu(req->value));
730                                 goto unknown;
731                         }
732                         break;
733                 default:
734                         debug("unknown value %x\n", le16_to_cpu(req->value));
735                         goto unknown;
736                 }
737                 break;
738         case USB_REQ_GET_DESCRIPTOR | ((USB_DIR_IN | USB_RT_HUB) << 8):
739                 switch (le16_to_cpu(req->value) >> 8) {
740                 case USB_DT_HUB:
741                         debug("USB_DT_HUB config\n");
742                         srcptr = &descriptor.hub;
743                         srclen = descriptor.hub.bLength;
744                         break;
745                 default:
746                         debug("unknown value %x\n", le16_to_cpu(req->value));
747                         goto unknown;
748                 }
749                 break;
750         case USB_REQ_SET_ADDRESS | (USB_RECIP_DEVICE << 8):
751                 debug("USB_REQ_SET_ADDRESS\n");
752                 ctrl->rootdev = le16_to_cpu(req->value);
753                 break;
754         case DeviceOutRequest | USB_REQ_SET_CONFIGURATION:
755                 debug("USB_REQ_SET_CONFIGURATION\n");
756                 /* Nothing to do */
757                 break;
758         case USB_REQ_GET_STATUS | ((USB_DIR_IN | USB_RT_HUB) << 8):
759                 tmpbuf[0] = 1;  /* USB_STATUS_SELFPOWERED */
760                 tmpbuf[1] = 0;
761                 srcptr = tmpbuf;
762                 srclen = 2;
763                 break;
764         case USB_REQ_GET_STATUS | ((USB_RT_PORT | USB_DIR_IN) << 8):
765                 memset(tmpbuf, 0, 4);
766                 reg = ehci_readl(status_reg);
767                 if (reg & EHCI_PS_CS)
768                         tmpbuf[0] |= USB_PORT_STAT_CONNECTION;
769                 if (reg & EHCI_PS_PE)
770                         tmpbuf[0] |= USB_PORT_STAT_ENABLE;
771                 if (reg & EHCI_PS_SUSP)
772                         tmpbuf[0] |= USB_PORT_STAT_SUSPEND;
773                 if (reg & EHCI_PS_OCA)
774                         tmpbuf[0] |= USB_PORT_STAT_OVERCURRENT;
775                 if (reg & EHCI_PS_PR)
776                         tmpbuf[0] |= USB_PORT_STAT_RESET;
777                 if (reg & EHCI_PS_PP)
778                         tmpbuf[1] |= USB_PORT_STAT_POWER >> 8;
779
780                 if (ehci_is_TDI()) {
781                         switch (ctrl->ops.get_port_speed(ctrl, reg)) {
782                         case PORTSC_PSPD_FS:
783                                 break;
784                         case PORTSC_PSPD_LS:
785                                 tmpbuf[1] |= USB_PORT_STAT_LOW_SPEED >> 8;
786                                 break;
787                         case PORTSC_PSPD_HS:
788                         default:
789                                 tmpbuf[1] |= USB_PORT_STAT_HIGH_SPEED >> 8;
790                                 break;
791                         }
792                 } else {
793                         tmpbuf[1] |= USB_PORT_STAT_HIGH_SPEED >> 8;
794                 }
795
796                 if (reg & EHCI_PS_CSC)
797                         tmpbuf[2] |= USB_PORT_STAT_C_CONNECTION;
798                 if (reg & EHCI_PS_PEC)
799                         tmpbuf[2] |= USB_PORT_STAT_C_ENABLE;
800                 if (reg & EHCI_PS_OCC)
801                         tmpbuf[2] |= USB_PORT_STAT_C_OVERCURRENT;
802                 if (ctrl->portreset & (1 << port))
803                         tmpbuf[2] |= USB_PORT_STAT_C_RESET;
804
805                 srcptr = tmpbuf;
806                 srclen = 4;
807                 break;
808         case USB_REQ_SET_FEATURE | ((USB_DIR_OUT | USB_RT_PORT) << 8):
809                 reg = ehci_readl(status_reg);
810                 reg &= ~EHCI_PS_CLEAR;
811                 switch (le16_to_cpu(req->value)) {
812                 case USB_PORT_FEAT_ENABLE:
813                         reg |= EHCI_PS_PE;
814                         ehci_writel(status_reg, reg);
815                         break;
816                 case USB_PORT_FEAT_POWER:
817                         if (HCS_PPC(ehci_readl(&ctrl->hccr->cr_hcsparams))) {
818                                 reg |= EHCI_PS_PP;
819                                 ehci_writel(status_reg, reg);
820                         }
821                         break;
822                 case USB_PORT_FEAT_RESET:
823                         if ((reg & (EHCI_PS_PE | EHCI_PS_CS)) == EHCI_PS_CS &&
824                             !ehci_is_TDI() &&
825                             EHCI_PS_IS_LOWSPEED(reg)) {
826                                 /* Low speed device, give up ownership. */
827                                 debug("port %d low speed --> companion\n",
828                                       port - 1);
829                                 reg |= EHCI_PS_PO;
830                                 ehci_writel(status_reg, reg);
831                                 return -ENXIO;
832                         } else {
833                                 int ret;
834
835                                 reg |= EHCI_PS_PR;
836                                 reg &= ~EHCI_PS_PE;
837                                 ehci_writel(status_reg, reg);
838                                 /*
839                                  * caller must wait, then call GetPortStatus
840                                  * usb 2.0 specification say 50 ms resets on
841                                  * root
842                                  */
843                                 ctrl->ops.powerup_fixup(ctrl, status_reg, &reg);
844
845                                 ehci_writel(status_reg, reg & ~EHCI_PS_PR);
846                                 /*
847                                  * A host controller must terminate the reset
848                                  * and stabilize the state of the port within
849                                  * 2 milliseconds
850                                  */
851                                 ret = handshake(status_reg, EHCI_PS_PR, 0,
852                                                 2 * 1000);
853                                 if (!ret) {
854                                         reg = ehci_readl(status_reg);
855                                         if ((reg & (EHCI_PS_PE | EHCI_PS_CS))
856                                             == EHCI_PS_CS && !ehci_is_TDI()) {
857                                                 debug("port %d full speed --> companion\n", port - 1);
858                                                 reg &= ~EHCI_PS_CLEAR;
859                                                 reg |= EHCI_PS_PO;
860                                                 ehci_writel(status_reg, reg);
861                                                 return -ENXIO;
862                                         } else {
863                                                 ctrl->portreset |= 1 << port;
864                                         }
865                                 } else {
866                                         printf("port(%d) reset error\n",
867                                                port - 1);
868                                 }
869                         }
870                         break;
871                 case USB_PORT_FEAT_TEST:
872                         ehci_shutdown(ctrl);
873                         reg &= ~(0xf << 16);
874                         reg |= ((le16_to_cpu(req->index) >> 8) & 0xf) << 16;
875                         ehci_writel(status_reg, reg);
876                         break;
877                 default:
878                         debug("unknown feature %x\n", le16_to_cpu(req->value));
879                         goto unknown;
880                 }
881                 /* unblock posted writes */
882                 (void) ehci_readl(&ctrl->hcor->or_usbcmd);
883                 break;
884         case USB_REQ_CLEAR_FEATURE | ((USB_DIR_OUT | USB_RT_PORT) << 8):
885                 reg = ehci_readl(status_reg);
886                 reg &= ~EHCI_PS_CLEAR;
887                 switch (le16_to_cpu(req->value)) {
888                 case USB_PORT_FEAT_ENABLE:
889                         reg &= ~EHCI_PS_PE;
890                         break;
891                 case USB_PORT_FEAT_C_ENABLE:
892                         reg |= EHCI_PS_PE;
893                         break;
894                 case USB_PORT_FEAT_POWER:
895                         if (HCS_PPC(ehci_readl(&ctrl->hccr->cr_hcsparams)))
896                                 reg &= ~EHCI_PS_PP;
897                         break;
898                 case USB_PORT_FEAT_C_CONNECTION:
899                         reg |= EHCI_PS_CSC;
900                         break;
901                 case USB_PORT_FEAT_OVER_CURRENT:
902                         reg |= EHCI_PS_OCC;
903                         break;
904                 case USB_PORT_FEAT_C_RESET:
905                         ctrl->portreset &= ~(1 << port);
906                         break;
907                 default:
908                         debug("unknown feature %x\n", le16_to_cpu(req->value));
909                         goto unknown;
910                 }
911                 ehci_writel(status_reg, reg);
912                 /* unblock posted write */
913                 (void) ehci_readl(&ctrl->hcor->or_usbcmd);
914                 break;
915         default:
916                 debug("Unknown request\n");
917                 goto unknown;
918         }
919
920         mdelay(1);
921         len = min3(srclen, (int)le16_to_cpu(req->length), length);
922         if (srcptr != NULL && len > 0)
923                 memcpy(buffer, srcptr, len);
924         else
925                 debug("Len is 0\n");
926
927         dev->act_len = len;
928         dev->status = 0;
929         return 0;
930
931 unknown:
932         debug("requesttype=%x, request=%x, value=%x, index=%x, length=%x\n",
933               req->requesttype, req->request, le16_to_cpu(req->value),
934               le16_to_cpu(req->index), le16_to_cpu(req->length));
935
936         dev->act_len = 0;
937         dev->status = USB_ST_STALLED;
938         return -1;
939 }
940
941 static const struct ehci_ops default_ehci_ops = {
942         .set_usb_mode           = ehci_set_usbmode,
943         .get_port_speed         = ehci_get_port_speed,
944         .powerup_fixup          = ehci_powerup_fixup,
945         .get_portsc_register    = ehci_get_portsc_register,
946 };
947
948 static void ehci_setup_ops(struct ehci_ctrl *ctrl, const struct ehci_ops *ops)
949 {
950         if (!ops) {
951                 ctrl->ops = default_ehci_ops;
952         } else {
953                 ctrl->ops = *ops;
954                 if (!ctrl->ops.set_usb_mode)
955                         ctrl->ops.set_usb_mode = ehci_set_usbmode;
956                 if (!ctrl->ops.get_port_speed)
957                         ctrl->ops.get_port_speed = ehci_get_port_speed;
958                 if (!ctrl->ops.powerup_fixup)
959                         ctrl->ops.powerup_fixup = ehci_powerup_fixup;
960                 if (!ctrl->ops.get_portsc_register)
961                         ctrl->ops.get_portsc_register =
962                                         ehci_get_portsc_register;
963         }
964 }
965
966 #ifndef CONFIG_DM_USB
967 void ehci_set_controller_priv(int index, void *priv, const struct ehci_ops *ops)
968 {
969         struct ehci_ctrl *ctrl = &ehcic[index];
970
971         ctrl->priv = priv;
972         ehci_setup_ops(ctrl, ops);
973 }
974
975 void *ehci_get_controller_priv(int index)
976 {
977         return ehcic[index].priv;
978 }
979 #endif
980
981 static int ehci_common_init(struct ehci_ctrl *ctrl, uint tweaks)
982 {
983         struct QH *qh_list;
984         struct QH *periodic;
985         uint32_t reg;
986         uint32_t cmd;
987         int i;
988
989         /* Set the high address word (aka segment) for 64-bit controller */
990         if (ehci_readl(&ctrl->hccr->cr_hccparams) & 1)
991                 ehci_writel(&ctrl->hcor->or_ctrldssegment, 0);
992
993         qh_list = &ctrl->qh_list;
994
995         /* Set head of reclaim list */
996         memset(qh_list, 0, sizeof(*qh_list));
997         qh_list->qh_link = cpu_to_hc32(virt_to_phys(qh_list) | QH_LINK_TYPE_QH);
998         qh_list->qh_endpt1 = cpu_to_hc32(QH_ENDPT1_H(1) |
999                                                 QH_ENDPT1_EPS(USB_SPEED_HIGH));
1000         qh_list->qh_overlay.qt_next = cpu_to_hc32(QT_NEXT_TERMINATE);
1001         qh_list->qh_overlay.qt_altnext = cpu_to_hc32(QT_NEXT_TERMINATE);
1002         qh_list->qh_overlay.qt_token =
1003                         cpu_to_hc32(QT_TOKEN_STATUS(QT_TOKEN_STATUS_HALTED));
1004
1005         flush_dcache_range((unsigned long)qh_list,
1006                            ALIGN_END_ADDR(struct QH, qh_list, 1));
1007
1008         /* Set async. queue head pointer. */
1009         ehci_writel(&ctrl->hcor->or_asynclistaddr, virt_to_phys(qh_list));
1010
1011         /*
1012          * Set up periodic list
1013          * Step 1: Parent QH for all periodic transfers.
1014          */
1015         ctrl->periodic_schedules = 0;
1016         periodic = &ctrl->periodic_queue;
1017         memset(periodic, 0, sizeof(*periodic));
1018         periodic->qh_link = cpu_to_hc32(QH_LINK_TERMINATE);
1019         periodic->qh_overlay.qt_next = cpu_to_hc32(QT_NEXT_TERMINATE);
1020         periodic->qh_overlay.qt_altnext = cpu_to_hc32(QT_NEXT_TERMINATE);
1021
1022         flush_dcache_range((unsigned long)periodic,
1023                            ALIGN_END_ADDR(struct QH, periodic, 1));
1024
1025         /*
1026          * Step 2: Setup frame-list: Every microframe, USB tries the same list.
1027          *         In particular, device specifications on polling frequency
1028          *         are disregarded. Keyboards seem to send NAK/NYet reliably
1029          *         when polled with an empty buffer.
1030          *
1031          *         Split Transactions will be spread across microframes using
1032          *         S-mask and C-mask.
1033          */
1034         if (ctrl->periodic_list == NULL)
1035                 ctrl->periodic_list = memalign(4096, 1024 * 4);
1036
1037         if (!ctrl->periodic_list)
1038                 return -ENOMEM;
1039         for (i = 0; i < 1024; i++) {
1040                 ctrl->periodic_list[i] = cpu_to_hc32((unsigned long)periodic
1041                                                 | QH_LINK_TYPE_QH);
1042         }
1043
1044         flush_dcache_range((unsigned long)ctrl->periodic_list,
1045                            ALIGN_END_ADDR(uint32_t, ctrl->periodic_list,
1046                                           1024));
1047
1048         /* Set periodic list base address */
1049         ehci_writel(&ctrl->hcor->or_periodiclistbase,
1050                 (unsigned long)ctrl->periodic_list);
1051
1052         reg = ehci_readl(&ctrl->hccr->cr_hcsparams);
1053         descriptor.hub.bNbrPorts = HCS_N_PORTS(reg);
1054         debug("Register %x NbrPorts %d\n", reg, descriptor.hub.bNbrPorts);
1055         /* Port Indicators */
1056         if (HCS_INDICATOR(reg))
1057                 put_unaligned(get_unaligned(&descriptor.hub.wHubCharacteristics)
1058                                 | 0x80, &descriptor.hub.wHubCharacteristics);
1059         /* Port Power Control */
1060         if (HCS_PPC(reg))
1061                 put_unaligned(get_unaligned(&descriptor.hub.wHubCharacteristics)
1062                                 | 0x01, &descriptor.hub.wHubCharacteristics);
1063
1064         /* Start the host controller. */
1065         cmd = ehci_readl(&ctrl->hcor->or_usbcmd);
1066         /*
1067          * Philips, Intel, and maybe others need CMD_RUN before the
1068          * root hub will detect new devices (why?); NEC doesn't
1069          */
1070         cmd &= ~(CMD_LRESET|CMD_IAAD|CMD_PSE|CMD_ASE|CMD_RESET);
1071         cmd |= CMD_RUN;
1072         ehci_writel(&ctrl->hcor->or_usbcmd, cmd);
1073
1074         if (!(tweaks & EHCI_TWEAK_NO_INIT_CF)) {
1075                 /* take control over the ports */
1076                 cmd = ehci_readl(&ctrl->hcor->or_configflag);
1077                 cmd |= FLAG_CF;
1078                 ehci_writel(&ctrl->hcor->or_configflag, cmd);
1079         }
1080
1081         /* unblock posted write */
1082         cmd = ehci_readl(&ctrl->hcor->or_usbcmd);
1083         mdelay(5);
1084         reg = HC_VERSION(ehci_readl(&ctrl->hccr->cr_capbase));
1085         printf("USB EHCI %x.%02x\n", reg >> 8, reg & 0xff);
1086
1087         return 0;
1088 }
1089
1090 #ifndef CONFIG_DM_USB
1091 int usb_lowlevel_stop(int index)
1092 {
1093         ehci_shutdown(&ehcic[index]);
1094         return ehci_hcd_stop(index);
1095 }
1096
1097 int usb_lowlevel_init(int index, enum usb_init_type init, void **controller)
1098 {
1099         struct ehci_ctrl *ctrl = &ehcic[index];
1100         uint tweaks = 0;
1101         int rc;
1102
1103         /**
1104          * Set ops to default_ehci_ops, ehci_hcd_init should call
1105          * ehci_set_controller_priv to change any of these function pointers.
1106          */
1107         ctrl->ops = default_ehci_ops;
1108
1109         rc = ehci_hcd_init(index, init, &ctrl->hccr, &ctrl->hcor);
1110         if (rc)
1111                 return rc;
1112         if (!ctrl->hccr || !ctrl->hcor)
1113                 return -1;
1114         if (init == USB_INIT_DEVICE)
1115                 goto done;
1116
1117         /* EHCI spec section 4.1 */
1118         if (ehci_reset(ctrl))
1119                 return -1;
1120
1121 #if defined(CONFIG_EHCI_HCD_INIT_AFTER_RESET)
1122         rc = ehci_hcd_init(index, init, &ctrl->hccr, &ctrl->hcor);
1123         if (rc)
1124                 return rc;
1125 #endif
1126 #ifdef CONFIG_USB_EHCI_FARADAY
1127         tweaks |= EHCI_TWEAK_NO_INIT_CF;
1128 #endif
1129         rc = ehci_common_init(ctrl, tweaks);
1130         if (rc)
1131                 return rc;
1132
1133         ctrl->rootdev = 0;
1134 done:
1135         *controller = &ehcic[index];
1136         return 0;
1137 }
1138 #endif
1139
1140 static int _ehci_submit_bulk_msg(struct usb_device *dev, unsigned long pipe,
1141                                  void *buffer, int length)
1142 {
1143
1144         if (usb_pipetype(pipe) != PIPE_BULK) {
1145                 debug("non-bulk pipe (type=%lu)", usb_pipetype(pipe));
1146                 return -1;
1147         }
1148         return ehci_submit_async(dev, pipe, buffer, length, NULL);
1149 }
1150
1151 static int _ehci_submit_control_msg(struct usb_device *dev, unsigned long pipe,
1152                                     void *buffer, int length,
1153                                     struct devrequest *setup)
1154 {
1155         struct ehci_ctrl *ctrl = ehci_get_ctrl(dev);
1156
1157         if (usb_pipetype(pipe) != PIPE_CONTROL) {
1158                 debug("non-control pipe (type=%lu)", usb_pipetype(pipe));
1159                 return -1;
1160         }
1161
1162         if (usb_pipedevice(pipe) == ctrl->rootdev) {
1163                 if (!ctrl->rootdev)
1164                         dev->speed = USB_SPEED_HIGH;
1165                 return ehci_submit_root(dev, pipe, buffer, length, setup);
1166         }
1167         return ehci_submit_async(dev, pipe, buffer, length, setup);
1168 }
1169
1170 struct int_queue {
1171         int elementsize;
1172         unsigned long pipe;
1173         struct QH *first;
1174         struct QH *current;
1175         struct QH *last;
1176         struct qTD *tds;
1177 };
1178
1179 #define NEXT_QH(qh) (struct QH *)((unsigned long)hc32_to_cpu((qh)->qh_link) & ~0x1f)
1180
1181 static int
1182 enable_periodic(struct ehci_ctrl *ctrl)
1183 {
1184         uint32_t cmd;
1185         struct ehci_hcor *hcor = ctrl->hcor;
1186         int ret;
1187
1188         cmd = ehci_readl(&hcor->or_usbcmd);
1189         cmd |= CMD_PSE;
1190         ehci_writel(&hcor->or_usbcmd, cmd);
1191
1192         ret = handshake((uint32_t *)&hcor->or_usbsts,
1193                         STS_PSS, STS_PSS, 100 * 1000);
1194         if (ret < 0) {
1195                 printf("EHCI failed: timeout when enabling periodic list\n");
1196                 return -ETIMEDOUT;
1197         }
1198         udelay(1000);
1199         return 0;
1200 }
1201
1202 static int
1203 disable_periodic(struct ehci_ctrl *ctrl)
1204 {
1205         uint32_t cmd;
1206         struct ehci_hcor *hcor = ctrl->hcor;
1207         int ret;
1208
1209         cmd = ehci_readl(&hcor->or_usbcmd);
1210         cmd &= ~CMD_PSE;
1211         ehci_writel(&hcor->or_usbcmd, cmd);
1212
1213         ret = handshake((uint32_t *)&hcor->or_usbsts,
1214                         STS_PSS, 0, 100 * 1000);
1215         if (ret < 0) {
1216                 printf("EHCI failed: timeout when disabling periodic list\n");
1217                 return -ETIMEDOUT;
1218         }
1219         return 0;
1220 }
1221
1222 static struct int_queue *_ehci_create_int_queue(struct usb_device *dev,
1223                         unsigned long pipe, int queuesize, int elementsize,
1224                         void *buffer, int interval)
1225 {
1226         struct ehci_ctrl *ctrl = ehci_get_ctrl(dev);
1227         struct int_queue *result = NULL;
1228         uint32_t i, toggle;
1229
1230         /*
1231          * Interrupt transfers requiring several transactions are not supported
1232          * because bInterval is ignored.
1233          *
1234          * Also, ehci_submit_async() relies on wMaxPacketSize being a power of 2
1235          * <= PKT_ALIGN if several qTDs are required, while the USB
1236          * specification does not constrain this for interrupt transfers. That
1237          * means that ehci_submit_async() would support interrupt transfers
1238          * requiring several transactions only as long as the transfer size does
1239          * not require more than a single qTD.
1240          */
1241         if (elementsize > usb_maxpacket(dev, pipe)) {
1242                 printf("%s: xfers requiring several transactions are not supported.\n",
1243                        __func__);
1244                 return NULL;
1245         }
1246
1247         debug("Enter create_int_queue\n");
1248         if (usb_pipetype(pipe) != PIPE_INTERRUPT) {
1249                 debug("non-interrupt pipe (type=%lu)", usb_pipetype(pipe));
1250                 return NULL;
1251         }
1252
1253         /* limit to 4 full pages worth of data -
1254          * we can safely fit them in a single TD,
1255          * no matter the alignment
1256          */
1257         if (elementsize >= 16384) {
1258                 debug("too large elements for interrupt transfers\n");
1259                 return NULL;
1260         }
1261
1262         result = malloc(sizeof(*result));
1263         if (!result) {
1264                 debug("ehci intr queue: out of memory\n");
1265                 goto fail1;
1266         }
1267         result->elementsize = elementsize;
1268         result->pipe = pipe;
1269         result->first = memalign(USB_DMA_MINALIGN,
1270                                  sizeof(struct QH) * queuesize);
1271         if (!result->first) {
1272                 debug("ehci intr queue: out of memory\n");
1273                 goto fail2;
1274         }
1275         result->current = result->first;
1276         result->last = result->first + queuesize - 1;
1277         result->tds = memalign(USB_DMA_MINALIGN,
1278                                sizeof(struct qTD) * queuesize);
1279         if (!result->tds) {
1280                 debug("ehci intr queue: out of memory\n");
1281                 goto fail3;
1282         }
1283         memset(result->first, 0, sizeof(struct QH) * queuesize);
1284         memset(result->tds, 0, sizeof(struct qTD) * queuesize);
1285
1286         toggle = usb_gettoggle(dev, usb_pipeendpoint(pipe), usb_pipeout(pipe));
1287
1288         for (i = 0; i < queuesize; i++) {
1289                 struct QH *qh = result->first + i;
1290                 struct qTD *td = result->tds + i;
1291                 void **buf = &qh->buffer;
1292
1293                 qh->qh_link = cpu_to_hc32((unsigned long)(qh+1) | QH_LINK_TYPE_QH);
1294                 if (i == queuesize - 1)
1295                         qh->qh_link = cpu_to_hc32(QH_LINK_TERMINATE);
1296
1297                 qh->qh_overlay.qt_next = cpu_to_hc32((unsigned long)td);
1298                 qh->qh_overlay.qt_altnext = cpu_to_hc32(QT_NEXT_TERMINATE);
1299                 qh->qh_endpt1 =
1300                         cpu_to_hc32((0 << 28) | /* No NAK reload (ehci 4.9) */
1301                         (usb_maxpacket(dev, pipe) << 16) | /* MPS */
1302                         (1 << 14) |
1303                         QH_ENDPT1_EPS(ehci_encode_speed(dev->speed)) |
1304                         (usb_pipeendpoint(pipe) << 8) | /* Endpoint Number */
1305                         (usb_pipedevice(pipe) << 0));
1306                 qh->qh_endpt2 = cpu_to_hc32((1 << 30) | /* 1 Tx per mframe */
1307                         (1 << 0)); /* S-mask: microframe 0 */
1308                 if (dev->speed == USB_SPEED_LOW ||
1309                                 dev->speed == USB_SPEED_FULL) {
1310                         /* C-mask: microframes 2-4 */
1311                         qh->qh_endpt2 |= cpu_to_hc32((0x1c << 8));
1312                 }
1313                 ehci_update_endpt2_dev_n_port(dev, qh);
1314
1315                 td->qt_next = cpu_to_hc32(QT_NEXT_TERMINATE);
1316                 td->qt_altnext = cpu_to_hc32(QT_NEXT_TERMINATE);
1317                 debug("communication direction is '%s'\n",
1318                       usb_pipein(pipe) ? "in" : "out");
1319                 td->qt_token = cpu_to_hc32(
1320                         QT_TOKEN_DT(toggle) |
1321                         (elementsize << 16) |
1322                         ((usb_pipein(pipe) ? 1 : 0) << 8) | /* IN/OUT token */
1323                         0x80); /* active */
1324                 td->qt_buffer[0] =
1325                     cpu_to_hc32((unsigned long)buffer + i * elementsize);
1326                 td->qt_buffer[1] =
1327                     cpu_to_hc32((td->qt_buffer[0] + 0x1000) & ~0xfff);
1328                 td->qt_buffer[2] =
1329                     cpu_to_hc32((td->qt_buffer[0] + 0x2000) & ~0xfff);
1330                 td->qt_buffer[3] =
1331                     cpu_to_hc32((td->qt_buffer[0] + 0x3000) & ~0xfff);
1332                 td->qt_buffer[4] =
1333                     cpu_to_hc32((td->qt_buffer[0] + 0x4000) & ~0xfff);
1334
1335                 *buf = buffer + i * elementsize;
1336                 toggle ^= 1;
1337         }
1338
1339         flush_dcache_range((unsigned long)buffer,
1340                            ALIGN_END_ADDR(char, buffer,
1341                                           queuesize * elementsize));
1342         flush_dcache_range((unsigned long)result->first,
1343                            ALIGN_END_ADDR(struct QH, result->first,
1344                                           queuesize));
1345         flush_dcache_range((unsigned long)result->tds,
1346                            ALIGN_END_ADDR(struct qTD, result->tds,
1347                                           queuesize));
1348
1349         if (ctrl->periodic_schedules > 0) {
1350                 if (disable_periodic(ctrl) < 0) {
1351                         debug("FATAL: periodic should never fail, but did");
1352                         goto fail3;
1353                 }
1354         }
1355
1356         /* hook up to periodic list */
1357         struct QH *list = &ctrl->periodic_queue;
1358         result->last->qh_link = list->qh_link;
1359         list->qh_link = cpu_to_hc32((unsigned long)result->first | QH_LINK_TYPE_QH);
1360
1361         flush_dcache_range((unsigned long)result->last,
1362                            ALIGN_END_ADDR(struct QH, result->last, 1));
1363         flush_dcache_range((unsigned long)list,
1364                            ALIGN_END_ADDR(struct QH, list, 1));
1365
1366         if (enable_periodic(ctrl) < 0) {
1367                 debug("FATAL: periodic should never fail, but did");
1368                 goto fail3;
1369         }
1370         ctrl->periodic_schedules++;
1371
1372         debug("Exit create_int_queue\n");
1373         return result;
1374 fail3:
1375         if (result->tds)
1376                 free(result->tds);
1377 fail2:
1378         if (result->first)
1379                 free(result->first);
1380         if (result)
1381                 free(result);
1382 fail1:
1383         return NULL;
1384 }
1385
1386 static void *_ehci_poll_int_queue(struct usb_device *dev,
1387                                   struct int_queue *queue)
1388 {
1389         struct QH *cur = queue->current;
1390         struct qTD *cur_td;
1391         uint32_t token, toggle;
1392         unsigned long pipe = queue->pipe;
1393
1394         /* depleted queue */
1395         if (cur == NULL) {
1396                 debug("Exit poll_int_queue with completed queue\n");
1397                 return NULL;
1398         }
1399         /* still active */
1400         cur_td = &queue->tds[queue->current - queue->first];
1401         invalidate_dcache_range((unsigned long)cur_td,
1402                                 ALIGN_END_ADDR(struct qTD, cur_td, 1));
1403         token = hc32_to_cpu(cur_td->qt_token);
1404         if (QT_TOKEN_GET_STATUS(token) & QT_TOKEN_STATUS_ACTIVE) {
1405                 debug("Exit poll_int_queue with no completed intr transfer. token is %x\n", token);
1406                 return NULL;
1407         }
1408
1409         toggle = QT_TOKEN_GET_DT(token);
1410         usb_settoggle(dev, usb_pipeendpoint(pipe), usb_pipeout(pipe), toggle);
1411
1412         if (!(cur->qh_link & QH_LINK_TERMINATE))
1413                 queue->current++;
1414         else
1415                 queue->current = NULL;
1416
1417         invalidate_dcache_range((unsigned long)cur->buffer,
1418                                 ALIGN_END_ADDR(char, cur->buffer,
1419                                                queue->elementsize));
1420
1421         debug("Exit poll_int_queue with completed intr transfer. token is %x at %p (first at %p)\n",
1422               token, cur, queue->first);
1423         return cur->buffer;
1424 }
1425
1426 /* Do not free buffers associated with QHs, they're owned by someone else */
1427 static int _ehci_destroy_int_queue(struct usb_device *dev,
1428                                    struct int_queue *queue)
1429 {
1430         struct ehci_ctrl *ctrl = ehci_get_ctrl(dev);
1431         int result = -1;
1432         unsigned long timeout;
1433
1434         if (disable_periodic(ctrl) < 0) {
1435                 debug("FATAL: periodic should never fail, but did");
1436                 goto out;
1437         }
1438         ctrl->periodic_schedules--;
1439
1440         struct QH *cur = &ctrl->periodic_queue;
1441         timeout = get_timer(0) + 500; /* abort after 500ms */
1442         while (!(cur->qh_link & cpu_to_hc32(QH_LINK_TERMINATE))) {
1443                 debug("considering %p, with qh_link %x\n", cur, cur->qh_link);
1444                 if (NEXT_QH(cur) == queue->first) {
1445                         debug("found candidate. removing from chain\n");
1446                         cur->qh_link = queue->last->qh_link;
1447                         flush_dcache_range((unsigned long)cur,
1448                                            ALIGN_END_ADDR(struct QH, cur, 1));
1449                         result = 0;
1450                         break;
1451                 }
1452                 cur = NEXT_QH(cur);
1453                 if (get_timer(0) > timeout) {
1454                         printf("Timeout destroying interrupt endpoint queue\n");
1455                         result = -1;
1456                         goto out;
1457                 }
1458         }
1459
1460         if (ctrl->periodic_schedules > 0) {
1461                 result = enable_periodic(ctrl);
1462                 if (result < 0)
1463                         debug("FATAL: periodic should never fail, but did");
1464         }
1465
1466 out:
1467         free(queue->tds);
1468         free(queue->first);
1469         free(queue);
1470
1471         return result;
1472 }
1473
1474 static int _ehci_submit_int_msg(struct usb_device *dev, unsigned long pipe,
1475                                 void *buffer, int length, int interval)
1476 {
1477         void *backbuffer;
1478         struct int_queue *queue;
1479         unsigned long timeout;
1480         int result = 0, ret;
1481
1482         debug("dev=%p, pipe=%lu, buffer=%p, length=%d, interval=%d",
1483               dev, pipe, buffer, length, interval);
1484
1485         queue = _ehci_create_int_queue(dev, pipe, 1, length, buffer, interval);
1486         if (!queue)
1487                 return -1;
1488
1489         timeout = get_timer(0) + USB_TIMEOUT_MS(pipe);
1490         while ((backbuffer = _ehci_poll_int_queue(dev, queue)) == NULL)
1491                 if (get_timer(0) > timeout) {
1492                         printf("Timeout poll on interrupt endpoint\n");
1493                         result = -ETIMEDOUT;
1494                         break;
1495                 }
1496
1497         if (backbuffer != buffer) {
1498                 debug("got wrong buffer back (%p instead of %p)\n",
1499                       backbuffer, buffer);
1500                 return -EINVAL;
1501         }
1502
1503         ret = _ehci_destroy_int_queue(dev, queue);
1504         if (ret < 0)
1505                 return ret;
1506
1507         /* everything worked out fine */
1508         return result;
1509 }
1510
1511 #ifndef CONFIG_DM_USB
1512 int submit_bulk_msg(struct usb_device *dev, unsigned long pipe,
1513                             void *buffer, int length)
1514 {
1515         return _ehci_submit_bulk_msg(dev, pipe, buffer, length);
1516 }
1517
1518 int submit_control_msg(struct usb_device *dev, unsigned long pipe, void *buffer,
1519                    int length, struct devrequest *setup)
1520 {
1521         return _ehci_submit_control_msg(dev, pipe, buffer, length, setup);
1522 }
1523
1524 int submit_int_msg(struct usb_device *dev, unsigned long pipe,
1525                    void *buffer, int length, int interval)
1526 {
1527         return _ehci_submit_int_msg(dev, pipe, buffer, length, interval);
1528 }
1529
1530 struct int_queue *create_int_queue(struct usb_device *dev,
1531                 unsigned long pipe, int queuesize, int elementsize,
1532                 void *buffer, int interval)
1533 {
1534         return _ehci_create_int_queue(dev, pipe, queuesize, elementsize,
1535                                       buffer, interval);
1536 }
1537
1538 void *poll_int_queue(struct usb_device *dev, struct int_queue *queue)
1539 {
1540         return _ehci_poll_int_queue(dev, queue);
1541 }
1542
1543 int destroy_int_queue(struct usb_device *dev, struct int_queue *queue)
1544 {
1545         return _ehci_destroy_int_queue(dev, queue);
1546 }
1547 #endif
1548
1549 #ifdef CONFIG_DM_USB
1550 static int ehci_submit_control_msg(struct udevice *dev, struct usb_device *udev,
1551                                    unsigned long pipe, void *buffer, int length,
1552                                    struct devrequest *setup)
1553 {
1554         debug("%s: dev='%s', udev=%p, udev->dev='%s', portnr=%d\n", __func__,
1555               dev->name, udev, udev->dev->name, udev->portnr);
1556
1557         return _ehci_submit_control_msg(udev, pipe, buffer, length, setup);
1558 }
1559
1560 static int ehci_submit_bulk_msg(struct udevice *dev, struct usb_device *udev,
1561                                 unsigned long pipe, void *buffer, int length)
1562 {
1563         debug("%s: dev='%s', udev=%p\n", __func__, dev->name, udev);
1564         return _ehci_submit_bulk_msg(udev, pipe, buffer, length);
1565 }
1566
1567 static int ehci_submit_int_msg(struct udevice *dev, struct usb_device *udev,
1568                                unsigned long pipe, void *buffer, int length,
1569                                int interval)
1570 {
1571         debug("%s: dev='%s', udev=%p\n", __func__, dev->name, udev);
1572         return _ehci_submit_int_msg(udev, pipe, buffer, length, interval);
1573 }
1574
1575 static struct int_queue *ehci_create_int_queue(struct udevice *dev,
1576                 struct usb_device *udev, unsigned long pipe, int queuesize,
1577                 int elementsize, void *buffer, int interval)
1578 {
1579         debug("%s: dev='%s', udev=%p\n", __func__, dev->name, udev);
1580         return _ehci_create_int_queue(udev, pipe, queuesize, elementsize,
1581                                       buffer, interval);
1582 }
1583
1584 static void *ehci_poll_int_queue(struct udevice *dev, struct usb_device *udev,
1585                                  struct int_queue *queue)
1586 {
1587         debug("%s: dev='%s', udev=%p\n", __func__, dev->name, udev);
1588         return _ehci_poll_int_queue(udev, queue);
1589 }
1590
1591 static int ehci_destroy_int_queue(struct udevice *dev, struct usb_device *udev,
1592                                   struct int_queue *queue)
1593 {
1594         debug("%s: dev='%s', udev=%p\n", __func__, dev->name, udev);
1595         return _ehci_destroy_int_queue(udev, queue);
1596 }
1597
1598 static int ehci_get_max_xfer_size(struct udevice *dev, size_t *size)
1599 {
1600         /*
1601          * EHCD can handle any transfer length as long as there is enough
1602          * free heap space left, hence set the theoretical max number here.
1603          */
1604         *size = SIZE_MAX;
1605
1606         return 0;
1607 }
1608
1609 int ehci_register(struct udevice *dev, struct ehci_hccr *hccr,
1610                   struct ehci_hcor *hcor, const struct ehci_ops *ops,
1611                   uint tweaks, enum usb_init_type init)
1612 {
1613         struct usb_bus_priv *priv = dev_get_uclass_priv(dev);
1614         struct ehci_ctrl *ctrl = dev_get_priv(dev);
1615         int ret = -1;
1616
1617         debug("%s: dev='%s', ctrl=%p, hccr=%p, hcor=%p, init=%d\n", __func__,
1618               dev->name, ctrl, hccr, hcor, init);
1619
1620         if (!ctrl || !hccr || !hcor)
1621                 goto err;
1622
1623         priv->desc_before_addr = true;
1624
1625         ehci_setup_ops(ctrl, ops);
1626         ctrl->hccr = hccr;
1627         ctrl->hcor = hcor;
1628         ctrl->priv = ctrl;
1629
1630         ctrl->init = init;
1631         if (ctrl->init == USB_INIT_DEVICE)
1632                 goto done;
1633
1634         ret = ehci_reset(ctrl);
1635         if (ret)
1636                 goto err;
1637
1638         if (ctrl->ops.init_after_reset) {
1639                 ret = ctrl->ops.init_after_reset(ctrl);
1640                 if (ret)
1641                         goto err;
1642         }
1643
1644         ret = ehci_common_init(ctrl, tweaks);
1645         if (ret)
1646                 goto err;
1647 done:
1648         return 0;
1649 err:
1650         free(ctrl);
1651         debug("%s: failed, ret=%d\n", __func__, ret);
1652         return ret;
1653 }
1654
1655 int ehci_deregister(struct udevice *dev)
1656 {
1657         struct ehci_ctrl *ctrl = dev_get_priv(dev);
1658
1659         if (ctrl->init == USB_INIT_DEVICE)
1660                 return 0;
1661
1662         ehci_shutdown(ctrl);
1663
1664         return 0;
1665 }
1666
1667 struct dm_usb_ops ehci_usb_ops = {
1668         .control = ehci_submit_control_msg,
1669         .bulk = ehci_submit_bulk_msg,
1670         .interrupt = ehci_submit_int_msg,
1671         .create_int_queue = ehci_create_int_queue,
1672         .poll_int_queue = ehci_poll_int_queue,
1673         .destroy_int_queue = ehci_destroy_int_queue,
1674         .get_max_xfer_size  = ehci_get_max_xfer_size,
1675 };
1676
1677 #endif