umass.c revision 1.169
1 /* $NetBSD: umass.c,v 1.169 2019/02/07 13:20:41 skrll Exp $ */ 2 3 /* 4 * Copyright (c) 2003 The NetBSD Foundation, Inc. 5 * All rights reserved. 6 * 7 * This code is derived from software contributed to The NetBSD Foundation 8 * by Charles M. Hannum. 9 * 10 * Redistribution and use in source and binary forms, with or without 11 * modification, are permitted provided that the following conditions 12 * are met: 13 * 1. Redistributions of source code must retain the above copyright 14 * notice, this list of conditions and the following disclaimer. 15 * 2. Redistributions in binary form must reproduce the above copyright 16 * notice, this list of conditions and the following disclaimer in the 17 * documentation and/or other materials provided with the distribution. 18 * 19 * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS 20 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED 21 * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 22 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS 23 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 24 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 25 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 26 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 27 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 28 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 29 * POSSIBILITY OF SUCH DAMAGE. 30 */ 31 32 /*- 33 * Copyright (c) 1999 MAEKAWA Masahide <bishop (at) rr.iij4u.or.jp>, 34 * Nick Hibma <n_hibma (at) freebsd.org> 35 * All rights reserved. 36 * 37 * Redistribution and use in source and binary forms, with or without 38 * modification, are permitted provided that the following conditions 39 * are met: 40 * 1. Redistributions of source code must retain the above copyright 41 * notice, this list of conditions and the following disclaimer. 42 * 2. Redistributions in binary form must reproduce the above copyright 43 * notice, this list of conditions and the following disclaimer in the 44 * documentation and/or other materials provided with the distribution. 45 * 46 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 47 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 48 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 49 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 50 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 51 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 52 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 53 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 54 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 55 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 56 * SUCH DAMAGE. 57 * 58 * $FreeBSD: src/sys/dev/usb/umass.c,v 1.13 2000/03/26 01:39:12 n_hibma Exp $ 59 */ 60 61 /* 62 * Universal Serial Bus Mass Storage Class specs: 63 * http://www.usb.org/developers/docs/devclass_docs/Mass_Storage_Specification_Overview_v1.4_2-19-2010.pdf 64 * http://www.usb.org/developers/docs/devclass_docs/usbmassbulk_10.pdf 65 * http://www.usb.org/developers/docs/devclass_docs/usb_msc_cbi_1.1.pdf 66 * http://www.usb.org/developers/docs/devclass_docs/usbmass-ufi10.pdf 67 */ 68 69 /* 70 * Ported to NetBSD by Lennart Augustsson <augustss (at) NetBSD.org>. 71 * Parts of the code written by Jason R. Thorpe <thorpej (at) shagadelic.org>. 72 */ 73 74 /* 75 * The driver handles 3 Wire Protocols 76 * - Command/Bulk/Interrupt (CBI) 77 * - Command/Bulk/Interrupt with Command Completion Interrupt (CBI with CCI) 78 * - Mass Storage Bulk-Only (BBB) 79 * (BBB refers Bulk/Bulk/Bulk for Command/Data/Status phases) 80 * 81 * Over these wire protocols it handles the following command protocols 82 * - SCSI 83 * - 8070 (ATA/ATAPI for rewritable removable media) 84 * - UFI (USB Floppy Interface) 85 * 86 * 8070i is a transformed version of the SCSI command set. UFI is a transformed 87 * version of the 8070i command set. The sc->transform method is used to 88 * convert the commands into the appropriate format (if at all necessary). 89 * For example, ATAPI requires all commands to be 12 bytes in length amongst 90 * other things. 91 * 92 * The source code below is marked and can be split into a number of pieces 93 * (in this order): 94 * 95 * - probe/attach/detach 96 * - generic transfer routines 97 * - BBB 98 * - CBI 99 * - CBI_I (in addition to functions from CBI) 100 * - CAM (Common Access Method) 101 * - SCSI 102 * - UFI 103 * - 8070i 104 * 105 * The protocols are implemented using a state machine, for the transfers as 106 * well as for the resets. The state machine is contained in umass_*_state. 107 * The state machine is started through either umass_*_transfer or 108 * umass_*_reset. 109 * 110 * The reason for doing this is a) CAM performs a lot better this way and b) it 111 * avoids sleeping in interrupt context which is prohibited (for example after a 112 * failed transfer). 113 */ 114 115 /* 116 * The SCSI related part of this driver has been derived from the 117 * dev/ppbus/vpo.c driver, by Nicolas Souchu (nsouch (at) freebsd.org). 118 * 119 * The CAM layer uses so called actions which are messages sent to the host 120 * adapter for completion. The actions come in through umass_cam_action. The 121 * appropriate block of routines is called depending on the transport protocol 122 * in use. When the transfer has finished, these routines call 123 * umass_cam_cb again to complete the CAM command. 124 */ 125 126 #include <sys/cdefs.h> 127 __KERNEL_RCSID(0, "$NetBSD: umass.c,v 1.169 2019/02/07 13:20:41 skrll Exp $"); 128 129 #ifdef _KERNEL_OPT 130 #include "opt_usb.h" 131 #endif 132 133 #include "atapibus.h" 134 #include "scsibus.h" 135 #include "wd.h" 136 137 #include <sys/param.h> 138 #include <sys/systm.h> 139 #include <sys/kernel.h> 140 #include <sys/conf.h> 141 #include <sys/buf.h> 142 #include <sys/device.h> 143 #include <sys/malloc.h> 144 #include <sys/sysctl.h> 145 146 #include <dev/usb/usb.h> 147 #include <dev/usb/usbdi.h> 148 #include <dev/usb/usbdi_util.h> 149 #include <dev/usb/usbdevs.h> 150 #include <dev/usb/usbhist.h> 151 152 #include <dev/usb/umassvar.h> 153 #include <dev/usb/umass_quirks.h> 154 #include <dev/usb/umass_scsipi.h> 155 #include <dev/usb/umass_isdata.h> 156 157 #include <dev/scsipi/scsipi_all.h> 158 #include <dev/scsipi/scsipiconf.h> 159 160 #ifdef USB_DEBUG 161 #ifdef UMASS_DEBUG 162 int umassdebug = 0; 163 164 SYSCTL_SETUP(sysctl_hw_umass_setup, "sysctl hw.umass setup") 165 { 166 int err; 167 const struct sysctlnode *rnode; 168 const struct sysctlnode *cnode; 169 170 err = sysctl_createv(clog, 0, NULL, &rnode, 171 CTLFLAG_PERMANENT, CTLTYPE_NODE, "umass", 172 SYSCTL_DESCR("umass global controls"), 173 NULL, 0, NULL, 0, CTL_HW, CTL_CREATE, CTL_EOL); 174 175 if (err) 176 goto fail; 177 178 /* control debugging printfs */ 179 err = sysctl_createv(clog, 0, &rnode, &cnode, 180 CTLFLAG_PERMANENT|CTLFLAG_READWRITE, CTLTYPE_INT, 181 "debug", SYSCTL_DESCR("Enable debugging output"), 182 NULL, 0, &umassdebug, sizeof(umassdebug), CTL_CREATE, CTL_EOL); 183 if (err) 184 goto fail; 185 186 return; 187 fail: 188 aprint_error("%s: sysctl_createv failed (err = %d)\n", __func__, err); 189 } 190 191 const char *states[TSTATE_STATES+1] = { 192 /* should be kept in sync with the list at transfer_state */ 193 "Idle", 194 "BBB CBW", 195 "BBB Data", 196 "BBB Data bulk-in/-out clear stall", 197 "BBB CSW, 1st attempt", 198 "BBB CSW bulk-in clear stall", 199 "BBB CSW, 2nd attempt", 200 "BBB Reset", 201 "BBB bulk-in clear stall", 202 "BBB bulk-out clear stall", 203 "CBI Command", 204 "CBI Data", 205 "CBI Status", 206 "CBI Data bulk-in/-out clear stall", 207 "CBI Status intr-in clear stall", 208 "CBI Reset", 209 "CBI bulk-in clear stall", 210 "CBI bulk-out clear stall", 211 NULL 212 }; 213 #endif 214 #endif 215 216 /* USB device probe/attach/detach functions */ 217 int umass_match(device_t, cfdata_t, void *); 218 void umass_attach(device_t, device_t, void *); 219 int umass_detach(device_t, int); 220 static void umass_childdet(device_t, device_t); 221 int umass_activate(device_t, enum devact); 222 extern struct cfdriver umass_cd; 223 CFATTACH_DECL2_NEW(umass, sizeof(struct umass_softc), umass_match, 224 umass_attach, umass_detach, umass_activate, NULL, umass_childdet); 225 226 Static void umass_disco(struct umass_softc *sc); 227 228 /* generic transfer functions */ 229 Static usbd_status umass_setup_transfer(struct umass_softc *, 230 struct usbd_pipe *, 231 void *, int, int, 232 struct usbd_xfer *); 233 Static usbd_status umass_setup_ctrl_transfer(struct umass_softc *, 234 usb_device_request_t *, 235 void *, int, int, 236 struct usbd_xfer *); 237 Static void umass_clear_endpoint_stall(struct umass_softc *, int, 238 struct usbd_xfer *); 239 #if 0 240 Static void umass_reset(struct umass_softc *, transfer_cb_f, void *); 241 #endif 242 243 /* Bulk-Only related functions */ 244 Static void umass_bbb_transfer(struct umass_softc *, int, void *, int, void *, 245 int, int, u_int, int, umass_callback, void *); 246 Static void umass_bbb_reset(struct umass_softc *, int); 247 Static void umass_bbb_state(struct usbd_xfer *, void *, usbd_status); 248 249 usbd_status umass_bbb_get_max_lun(struct umass_softc *, uint8_t *); 250 251 /* CBI related functions */ 252 Static void umass_cbi_transfer(struct umass_softc *, int, void *, int, void *, 253 int, int, u_int, int, umass_callback, void *); 254 Static void umass_cbi_reset(struct umass_softc *, int); 255 Static void umass_cbi_state(struct usbd_xfer *, void *, usbd_status); 256 257 Static int umass_cbi_adsc(struct umass_softc *, char *, int, int, 258 struct usbd_xfer *); 259 260 const struct umass_wire_methods umass_bbb_methods = { 261 .wire_xfer = umass_bbb_transfer, 262 .wire_reset = umass_bbb_reset, 263 .wire_state = umass_bbb_state 264 }; 265 266 const struct umass_wire_methods umass_cbi_methods = { 267 .wire_xfer = umass_cbi_transfer, 268 .wire_reset = umass_cbi_reset, 269 .wire_state = umass_cbi_state 270 }; 271 272 #ifdef UMASS_DEBUG 273 /* General debugging functions */ 274 Static void umass_bbb_dump_cbw(struct umass_softc *sc, 275 umass_bbb_cbw_t *cbw); 276 Static void umass_bbb_dump_csw(struct umass_softc *sc, 277 umass_bbb_csw_t *csw); 278 Static void umass_dump_buffer(struct umass_softc *sc, uint8_t *buffer, 279 int buflen, int printlen); 280 #endif 281 282 283 /* 284 * USB device probe/attach/detach 285 */ 286 287 int 288 umass_match(device_t parent, cfdata_t match, void *aux) 289 { 290 struct usbif_attach_arg *uiaa = aux; 291 const struct umass_quirk *quirk; 292 293 quirk = umass_lookup(uiaa->uiaa_vendor, uiaa->uiaa_product); 294 if (quirk != NULL && quirk->uq_match != UMASS_QUIRK_USE_DEFAULTMATCH) 295 return quirk->uq_match; 296 297 if (uiaa->uiaa_class != UICLASS_MASS) 298 return UMATCH_NONE; 299 300 switch (uiaa->uiaa_subclass) { 301 case UISUBCLASS_RBC: 302 case UISUBCLASS_SFF8020I: 303 case UISUBCLASS_QIC157: 304 case UISUBCLASS_UFI: 305 case UISUBCLASS_SFF8070I: 306 case UISUBCLASS_SCSI: 307 break; 308 default: 309 return UMATCH_IFACECLASS; 310 } 311 312 switch (uiaa->uiaa_proto) { 313 case UIPROTO_MASS_CBI_I: 314 case UIPROTO_MASS_CBI: 315 case UIPROTO_MASS_BBB_OLD: 316 case UIPROTO_MASS_BBB: 317 break; 318 default: 319 return UMATCH_IFACECLASS_IFACESUBCLASS; 320 } 321 322 return UMATCH_IFACECLASS_IFACESUBCLASS_IFACEPROTO; 323 } 324 325 void 326 umass_attach(device_t parent, device_t self, void *aux) 327 { 328 UMASSHIST_FUNC(); UMASSHIST_CALLED(); 329 struct umass_softc *sc = device_private(self); 330 struct usbif_attach_arg *uiaa = aux; 331 const struct umass_quirk *quirk; 332 usb_interface_descriptor_t *id; 333 usb_endpoint_descriptor_t *ed; 334 const char *sWire, *sCommand; 335 char *devinfop; 336 usbd_status err; 337 int i, error; 338 339 sc->sc_dev = self; 340 341 aprint_naive("\n"); 342 aprint_normal("\n"); 343 344 mutex_init(&sc->sc_lock, MUTEX_DEFAULT, IPL_SOFTUSB); 345 cv_init(&sc->sc_detach_cv, "umassdet"); 346 347 devinfop = usbd_devinfo_alloc(uiaa->uiaa_device, 0); 348 aprint_normal_dev(self, "%s\n", devinfop); 349 usbd_devinfo_free(devinfop); 350 351 sc->sc_udev = uiaa->uiaa_device; 352 sc->sc_iface = uiaa->uiaa_iface; 353 sc->sc_ifaceno = uiaa->uiaa_ifaceno; 354 355 quirk = umass_lookup(uiaa->uiaa_vendor, uiaa->uiaa_product); 356 if (quirk != NULL) { 357 sc->sc_wire = quirk->uq_wire; 358 sc->sc_cmd = quirk->uq_cmd; 359 sc->sc_quirks = quirk->uq_flags; 360 sc->sc_busquirks = quirk->uq_busquirks; 361 362 if (quirk->uq_fixup != NULL) 363 (*quirk->uq_fixup)(sc); 364 } else { 365 sc->sc_wire = UMASS_WPROTO_UNSPEC; 366 sc->sc_cmd = UMASS_CPROTO_UNSPEC; 367 sc->sc_quirks = 0; 368 sc->sc_busquirks = 0; 369 } 370 371 if (sc->sc_wire == UMASS_WPROTO_UNSPEC) { 372 switch (uiaa->uiaa_proto) { 373 case UIPROTO_MASS_CBI: 374 sc->sc_wire = UMASS_WPROTO_CBI; 375 break; 376 case UIPROTO_MASS_CBI_I: 377 sc->sc_wire = UMASS_WPROTO_CBI_I; 378 break; 379 case UIPROTO_MASS_BBB: 380 case UIPROTO_MASS_BBB_OLD: 381 sc->sc_wire = UMASS_WPROTO_BBB; 382 break; 383 default: 384 DPRINTFM(UDMASS_GEN, "Unsupported wire protocol %ju", 385 uiaa->uiaa_proto, 0, 0, 0); 386 return; 387 } 388 } 389 390 if (sc->sc_cmd == UMASS_CPROTO_UNSPEC) { 391 switch (uiaa->uiaa_subclass) { 392 case UISUBCLASS_SCSI: 393 sc->sc_cmd = UMASS_CPROTO_SCSI; 394 break; 395 case UISUBCLASS_UFI: 396 sc->sc_cmd = UMASS_CPROTO_UFI; 397 break; 398 case UISUBCLASS_SFF8020I: 399 case UISUBCLASS_SFF8070I: 400 case UISUBCLASS_QIC157: 401 sc->sc_cmd = UMASS_CPROTO_ATAPI; 402 break; 403 case UISUBCLASS_RBC: 404 sc->sc_cmd = UMASS_CPROTO_RBC; 405 break; 406 default: 407 DPRINTFM(UDMASS_GEN, "Unsupported command protocol %ju", 408 uiaa->uiaa_subclass, 0, 0, 0); 409 return; 410 } 411 } 412 413 switch (sc->sc_wire) { 414 case UMASS_WPROTO_CBI: 415 sWire = "CBI"; 416 break; 417 case UMASS_WPROTO_CBI_I: 418 sWire = "CBI with CCI"; 419 break; 420 case UMASS_WPROTO_BBB: 421 sWire = "Bulk-Only"; 422 break; 423 default: 424 sWire = "unknown"; 425 break; 426 } 427 428 switch (sc->sc_cmd) { 429 case UMASS_CPROTO_RBC: 430 sCommand = "RBC"; 431 break; 432 case UMASS_CPROTO_SCSI: 433 sCommand = "SCSI"; 434 break; 435 case UMASS_CPROTO_UFI: 436 sCommand = "UFI"; 437 break; 438 case UMASS_CPROTO_ATAPI: 439 sCommand = "ATAPI"; 440 break; 441 case UMASS_CPROTO_ISD_ATA: 442 sCommand = "ISD-ATA"; 443 break; 444 default: 445 sCommand = "unknown"; 446 break; 447 } 448 449 aprint_verbose_dev(self, "using %s over %s\n", sCommand, sWire); 450 451 if (quirk != NULL && quirk->uq_init != NULL) { 452 err = (*quirk->uq_init)(sc); 453 if (err) { 454 aprint_error_dev(self, "quirk init failed\n"); 455 umass_disco(sc); 456 return; 457 } 458 } 459 460 /* 461 * In addition to the Control endpoint the following endpoints 462 * are required: 463 * a) bulk-in endpoint. 464 * b) bulk-out endpoint. 465 * and for Control/Bulk/Interrupt with CCI (CBI_I) 466 * c) intr-in 467 * 468 * The endpoint addresses are not fixed, so we have to read them 469 * from the device descriptors of the current interface. 470 */ 471 id = usbd_get_interface_descriptor(sc->sc_iface); 472 for (i = 0 ; i < id->bNumEndpoints ; i++) { 473 ed = usbd_interface2endpoint_descriptor(sc->sc_iface, i); 474 if (ed == NULL) { 475 aprint_error_dev(self, 476 "could not read endpoint descriptor\n"); 477 return; 478 } 479 if (UE_GET_DIR(ed->bEndpointAddress) == UE_DIR_IN 480 && (ed->bmAttributes & UE_XFERTYPE) == UE_BULK) { 481 sc->sc_epaddr[UMASS_BULKIN] = ed->bEndpointAddress; 482 } else if (UE_GET_DIR(ed->bEndpointAddress) == UE_DIR_OUT 483 && (ed->bmAttributes & UE_XFERTYPE) == UE_BULK) { 484 sc->sc_epaddr[UMASS_BULKOUT] = ed->bEndpointAddress; 485 } else if (sc->sc_wire == UMASS_WPROTO_CBI_I 486 && UE_GET_DIR(ed->bEndpointAddress) == UE_DIR_IN 487 && (ed->bmAttributes & UE_XFERTYPE) == UE_INTERRUPT) { 488 sc->sc_epaddr[UMASS_INTRIN] = ed->bEndpointAddress; 489 #ifdef UMASS_DEBUG 490 if (UGETW(ed->wMaxPacketSize) > 2) { 491 DPRINTFM(UDMASS_CBI, "sc %#jx intr size is %jd", 492 (uintptr_t)sc, UGETW(ed->wMaxPacketSize), 493 0, 0); 494 } 495 #endif 496 } 497 } 498 499 /* check whether we found all the endpoints we need */ 500 if (!sc->sc_epaddr[UMASS_BULKIN] || !sc->sc_epaddr[UMASS_BULKOUT] || 501 (sc->sc_wire == UMASS_WPROTO_CBI_I && 502 !sc->sc_epaddr[UMASS_INTRIN])) { 503 aprint_error_dev(self, "endpoint not found %u/%u/%u\n", 504 sc->sc_epaddr[UMASS_BULKIN], 505 sc->sc_epaddr[UMASS_BULKOUT], 506 sc->sc_epaddr[UMASS_INTRIN]); 507 return; 508 } 509 510 /* 511 * Get the maximum LUN supported by the device. 512 */ 513 if (sc->sc_wire == UMASS_WPROTO_BBB && 514 (sc->sc_quirks & UMASS_QUIRK_NOGETMAXLUN) == 0) { 515 err = umass_bbb_get_max_lun(sc, &sc->maxlun); 516 if (err) { 517 aprint_error_dev(self, "unable to get Max Lun: %s\n", 518 usbd_errstr(err)); 519 return; 520 } 521 if (sc->maxlun > 0) 522 sc->sc_busquirks |= PQUIRK_FORCELUNS; 523 } else { 524 sc->maxlun = 0; 525 } 526 527 /* Open the bulk-in and -out pipe */ 528 DPRINTFM(UDMASS_USB, "sc %#jx: opening iface %#jx epaddr %jd for " 529 "BULKOUT", (uintptr_t)sc, (uintptr_t)sc->sc_iface, 530 sc->sc_epaddr[UMASS_BULKOUT], 0); 531 err = usbd_open_pipe(sc->sc_iface, sc->sc_epaddr[UMASS_BULKOUT], 532 USBD_EXCLUSIVE_USE | USBD_MPSAFE, &sc->sc_pipe[UMASS_BULKOUT]); 533 if (err) { 534 aprint_error_dev(self, "cannot open %u-out pipe (bulk)\n", 535 sc->sc_epaddr[UMASS_BULKOUT]); 536 umass_disco(sc); 537 return; 538 } 539 DPRINTFM(UDMASS_USB, "sc %#jx: opening iface %#jx epaddr %jd for " 540 "BULKIN", (uintptr_t)sc, (uintptr_t)sc->sc_iface, 541 sc->sc_epaddr[UMASS_BULKIN], 0); 542 err = usbd_open_pipe(sc->sc_iface, sc->sc_epaddr[UMASS_BULKIN], 543 USBD_EXCLUSIVE_USE | USBD_MPSAFE, &sc->sc_pipe[UMASS_BULKIN]); 544 if (err) { 545 aprint_error_dev(self, "could not open %u-in pipe (bulk)\n", 546 sc->sc_epaddr[UMASS_BULKIN]); 547 umass_disco(sc); 548 return; 549 } 550 /* 551 * Open the intr-in pipe if the protocol is CBI with CCI. 552 * Note: early versions of the Zip drive do have an interrupt pipe, but 553 * this pipe is unused 554 * 555 * We do not open the interrupt pipe as an interrupt pipe, but as a 556 * normal bulk endpoint. We send an IN transfer down the wire at the 557 * appropriate time, because we know exactly when to expect data on 558 * that endpoint. This saves bandwidth, but more important, makes the 559 * code for handling the data on that endpoint simpler. No data 560 * arriving concurrently. 561 */ 562 if (sc->sc_wire == UMASS_WPROTO_CBI_I) { 563 DPRINTFM(UDMASS_USB, 564 "sc %#jx: opening iface %#jx epaddr %jd for INTRIN", 565 (uintptr_t)sc, (uintptr_t)sc->sc_iface, 566 sc->sc_epaddr[UMASS_INTRIN], 0); 567 err = usbd_open_pipe(sc->sc_iface, sc->sc_epaddr[UMASS_INTRIN], 568 USBD_EXCLUSIVE_USE | USBD_MPSAFE, &sc->sc_pipe[UMASS_INTRIN]); 569 if (err) { 570 aprint_error_dev(self, "couldn't open %u-in (intr)\n", 571 sc->sc_epaddr[UMASS_INTRIN]); 572 umass_disco(sc); 573 return; 574 } 575 } 576 577 /* initialisation of generic part */ 578 sc->transfer_state = TSTATE_IDLE; 579 580 for (i = 0; i < XFER_NR; i++) { 581 sc->transfer_xfer[i] = NULL; 582 } 583 584 /* 585 * Create the transfers 586 */ 587 struct usbd_pipe *pipe0 = usbd_get_pipe0(sc->sc_udev); 588 switch (sc->sc_wire) { 589 case UMASS_WPROTO_BBB: 590 err = usbd_create_xfer(sc->sc_pipe[UMASS_BULKIN], 591 UMASS_MAX_TRANSFER_SIZE, 0, 0, 592 &sc->transfer_xfer[XFER_BBB_DATAIN]); 593 if (err) 594 goto fail_create; 595 err = usbd_create_xfer(sc->sc_pipe[UMASS_BULKOUT], 596 UMASS_MAX_TRANSFER_SIZE, 0, 0, 597 &sc->transfer_xfer[XFER_BBB_DATAOUT]); 598 if (err) 599 goto fail_create; 600 err = usbd_create_xfer(sc->sc_pipe[UMASS_BULKOUT], 601 UMASS_BBB_CBW_SIZE, 0, 0, 602 &sc->transfer_xfer[XFER_BBB_CBW]); 603 if (err) 604 goto fail_create; 605 err = usbd_create_xfer(sc->sc_pipe[UMASS_BULKIN], 606 UMASS_BBB_CSW_SIZE, 0, 0, 607 &sc->transfer_xfer[XFER_BBB_CSW1]); 608 if (err) 609 goto fail_create; 610 err = usbd_create_xfer(sc->sc_pipe[UMASS_BULKIN], 611 UMASS_BBB_CSW_SIZE, 0, 0, 612 &sc->transfer_xfer[XFER_BBB_CSW2]); 613 if (err) 614 goto fail_create; 615 err = usbd_create_xfer(pipe0, 0, 0, 0, 616 &sc->transfer_xfer[XFER_BBB_SCLEAR]); 617 if (err) 618 goto fail_create; 619 err = usbd_create_xfer(pipe0, 0, 0, 0, 620 &sc->transfer_xfer[XFER_BBB_DCLEAR]); 621 if (err) 622 goto fail_create; 623 err = usbd_create_xfer(pipe0, 0, 0, 0, 624 &sc->transfer_xfer[XFER_BBB_RESET1]); 625 if (err) 626 goto fail_create; 627 err = usbd_create_xfer(pipe0, 0, 0, 0, 628 &sc->transfer_xfer[XFER_BBB_RESET2]); 629 if (err) 630 goto fail_create; 631 err = usbd_create_xfer(pipe0, 0, 0, 0, 632 &sc->transfer_xfer[XFER_BBB_RESET3]); 633 if (err) 634 goto fail_create; 635 break; 636 case UMASS_WPROTO_CBI: 637 case UMASS_WPROTO_CBI_I: 638 err = usbd_create_xfer(pipe0, sizeof(sc->cbl), 0, 0, 639 &sc->transfer_xfer[XFER_CBI_CB]); 640 if (err) 641 goto fail_create; 642 err = usbd_create_xfer(sc->sc_pipe[UMASS_BULKIN], 643 UMASS_MAX_TRANSFER_SIZE, 0, 0, 644 &sc->transfer_xfer[XFER_CBI_DATAIN]); 645 if (err) 646 goto fail_create; 647 err = usbd_create_xfer(sc->sc_pipe[UMASS_BULKOUT], 648 UMASS_MAX_TRANSFER_SIZE, 0, 0, 649 &sc->transfer_xfer[XFER_CBI_DATAOUT]); 650 if (err) 651 goto fail_create; 652 err = usbd_create_xfer(sc->sc_pipe[UMASS_INTRIN], 653 sizeof(sc->sbl), 0, 0, 654 &sc->transfer_xfer[XFER_CBI_STATUS]); 655 if (err) 656 goto fail_create; 657 err = usbd_create_xfer(pipe0, 0, 0, 0, 658 &sc->transfer_xfer[XFER_CBI_DCLEAR]); 659 if (err) 660 goto fail_create; 661 err = usbd_create_xfer(pipe0, 0, 0, 0, 662 &sc->transfer_xfer[XFER_CBI_SCLEAR]); 663 if (err) 664 goto fail_create; 665 err = usbd_create_xfer(pipe0, sizeof(sc->cbl), 0, 0, 666 &sc->transfer_xfer[XFER_CBI_RESET1]); 667 if (err) 668 goto fail_create; 669 err = usbd_create_xfer(pipe0, sizeof(sc->cbl), 0, 0, 670 &sc->transfer_xfer[XFER_CBI_RESET2]); 671 if (err) 672 goto fail_create; 673 err = usbd_create_xfer(pipe0, sizeof(sc->cbl), 0, 0, 674 &sc->transfer_xfer[XFER_CBI_RESET3]); 675 if (err) 676 goto fail_create; 677 break; 678 default: 679 fail_create: 680 aprint_error_dev(self, "failed to create xfers\n"); 681 umass_disco(sc); 682 return; 683 } 684 685 /* 686 * Record buffer pinters for data transfer (it's huge), command and 687 * status data here 688 */ 689 switch (sc->sc_wire) { 690 case UMASS_WPROTO_BBB: 691 sc->datain_buffer = 692 usbd_get_buffer(sc->transfer_xfer[XFER_BBB_DATAIN]); 693 sc->dataout_buffer = 694 usbd_get_buffer(sc->transfer_xfer[XFER_BBB_DATAOUT]); 695 sc->cmd_buffer = 696 usbd_get_buffer(sc->transfer_xfer[XFER_BBB_CBW]); 697 sc->s1_buffer = 698 usbd_get_buffer(sc->transfer_xfer[XFER_BBB_CSW1]); 699 sc->s2_buffer = 700 usbd_get_buffer(sc->transfer_xfer[XFER_BBB_CSW2]); 701 break; 702 case UMASS_WPROTO_CBI: 703 case UMASS_WPROTO_CBI_I: 704 sc->datain_buffer = 705 usbd_get_buffer(sc->transfer_xfer[XFER_CBI_DATAIN]); 706 sc->dataout_buffer = 707 usbd_get_buffer(sc->transfer_xfer[XFER_CBI_DATAOUT]); 708 sc->cmd_buffer = 709 usbd_get_buffer(sc->transfer_xfer[XFER_CBI_CB]); 710 sc->s1_buffer = 711 usbd_get_buffer(sc->transfer_xfer[XFER_CBI_STATUS]); 712 sc->s2_buffer = 713 usbd_get_buffer(sc->transfer_xfer[XFER_CBI_RESET1]); 714 break; 715 default: 716 break; 717 } 718 719 /* Initialise the wire protocol specific methods */ 720 switch (sc->sc_wire) { 721 case UMASS_WPROTO_BBB: 722 sc->sc_methods = &umass_bbb_methods; 723 break; 724 case UMASS_WPROTO_CBI: 725 case UMASS_WPROTO_CBI_I: 726 sc->sc_methods = &umass_cbi_methods; 727 break; 728 default: 729 umass_disco(sc); 730 return; 731 } 732 733 error = 0; 734 switch (sc->sc_cmd) { 735 case UMASS_CPROTO_RBC: 736 case UMASS_CPROTO_SCSI: 737 #if NSCSIBUS > 0 738 error = umass_scsi_attach(sc); 739 #else 740 aprint_error_dev(self, "scsibus not configured\n"); 741 #endif 742 break; 743 744 case UMASS_CPROTO_UFI: 745 case UMASS_CPROTO_ATAPI: 746 #if NATAPIBUS > 0 747 error = umass_atapi_attach(sc); 748 #else 749 aprint_error_dev(self, "atapibus not configured\n"); 750 #endif 751 break; 752 753 case UMASS_CPROTO_ISD_ATA: 754 #if NWD > 0 && NATABUS > 0 755 error = umass_isdata_attach(sc); 756 #else 757 aprint_error_dev(self, "isdata not configured\n"); 758 #endif 759 break; 760 761 default: 762 aprint_error_dev(self, "command protocol=0x%x not supported\n", 763 sc->sc_cmd); 764 umass_disco(sc); 765 return; 766 } 767 if (error) { 768 aprint_error_dev(self, "bus attach failed\n"); 769 umass_disco(sc); 770 return; 771 } 772 773 usbd_add_drv_event(USB_EVENT_DRIVER_ATTACH, sc->sc_udev, sc->sc_dev); 774 775 if (!pmf_device_register(self, NULL, NULL)) 776 aprint_error_dev(self, "couldn't establish power handler\n"); 777 778 DPRINTFM(UDMASS_GEN, "sc %#jx: Attach finished", (uintptr_t)sc, 779 0, 0, 0); 780 781 return; 782 } 783 784 static void 785 umass_childdet(device_t self, device_t child) 786 { 787 struct umass_softc *sc = device_private(self); 788 789 KASSERTMSG(child == sc->bus->sc_child, 790 "assertion child == sc->bus->sc_child failed\n"); 791 sc->bus->sc_child = NULL; 792 } 793 794 int 795 umass_detach(device_t self, int flags) 796 { 797 UMASSHIST_FUNC(); UMASSHIST_CALLED(); 798 struct umass_softc *sc = device_private(self); 799 struct umassbus_softc *scbus; 800 int rv = 0, i; 801 802 DPRINTFM(UDMASS_USB, "sc %#jx detached", (uintptr_t)sc, 0, 0, 0); 803 804 mutex_enter(&sc->sc_lock); 805 sc->sc_dying = true; 806 mutex_exit(&sc->sc_lock); 807 808 pmf_device_deregister(self); 809 810 /* Abort the pipes to wake up any waiting processes. */ 811 for (i = 0 ; i < UMASS_NEP ; i++) { 812 if (sc->sc_pipe[i] != NULL) 813 usbd_abort_pipe(sc->sc_pipe[i]); 814 } 815 816 /* Do we really need reference counting? Perhaps in ioctl() */ 817 mutex_enter(&sc->sc_lock); 818 if (--sc->sc_refcnt >= 0) { 819 #ifdef DIAGNOSTIC 820 aprint_normal_dev(self, "waiting for refcnt\n"); 821 #endif 822 /* Wait for processes to go away. */ 823 if (cv_timedwait(&sc->sc_detach_cv, &sc->sc_lock, hz * 60)) 824 aprint_error_dev(self, ": didn't detach\n"); 825 } 826 mutex_exit(&sc->sc_lock); 827 828 scbus = sc->bus; 829 if (scbus != NULL) { 830 if (scbus->sc_child != NULL) 831 rv = config_detach(scbus->sc_child, flags); 832 833 switch (sc->sc_cmd) { 834 case UMASS_CPROTO_ISD_ATA: 835 #if NWD > 0 836 umass_isdata_detach(sc); 837 #else 838 aprint_error_dev(self, "isdata not configured\n"); 839 #endif 840 break; 841 842 default: 843 /* nothing to do */ 844 break; 845 } 846 847 free(scbus, M_DEVBUF); 848 sc->bus = NULL; 849 } 850 851 if (rv != 0) 852 return rv; 853 854 umass_disco(sc); 855 856 usbd_add_drv_event(USB_EVENT_DRIVER_DETACH, sc->sc_udev, sc->sc_dev); 857 858 mutex_destroy(&sc->sc_lock); 859 cv_destroy(&sc->sc_detach_cv); 860 861 return rv; 862 } 863 864 int 865 umass_activate(device_t dev, enum devact act) 866 { 867 UMASSHIST_FUNC(); UMASSHIST_CALLED(); 868 struct umass_softc *sc = device_private(dev); 869 870 DPRINTFM(UDMASS_USB, "sc %#jx act %jd", (uintptr_t)sc, act, 0, 0); 871 872 switch (act) { 873 case DVACT_DEACTIVATE: 874 sc->sc_dying = 1; 875 return 0; 876 default: 877 return EOPNOTSUPP; 878 } 879 } 880 881 Static void 882 umass_disco(struct umass_softc *sc) 883 { 884 UMASSHIST_FUNC(); UMASSHIST_CALLED(); 885 int i; 886 887 /* Remove all the pipes. */ 888 for (i = 0 ; i < UMASS_NEP ; i++) { 889 if (sc->sc_pipe[i] != NULL) { 890 usbd_abort_pipe(sc->sc_pipe[i]); 891 } 892 } 893 894 /* Some xfers may be queued in the default pipe */ 895 usbd_abort_default_pipe(sc->sc_udev); 896 897 /* Free the xfers. */ 898 for (i = 0; i < XFER_NR; i++) { 899 if (sc->transfer_xfer[i] != NULL) { 900 usbd_destroy_xfer(sc->transfer_xfer[i]); 901 sc->transfer_xfer[i] = NULL; 902 } 903 } 904 905 for (i = 0 ; i < UMASS_NEP ; i++) { 906 if (sc->sc_pipe[i] != NULL) { 907 usbd_close_pipe(sc->sc_pipe[i]); 908 sc->sc_pipe[i] = NULL; 909 } 910 } 911 912 } 913 914 /* 915 * Generic functions to handle transfers 916 */ 917 918 Static usbd_status 919 umass_setup_transfer(struct umass_softc *sc, struct usbd_pipe *pipe, 920 void *buffer, int buflen, int flags, 921 struct usbd_xfer *xfer) 922 { 923 UMASSHIST_FUNC(); UMASSHIST_CALLED(); 924 usbd_status err; 925 926 if (sc->sc_dying) 927 return USBD_IOERROR; 928 929 /* Initialiase a USB transfer and then schedule it */ 930 931 usbd_setup_xfer(xfer, sc, buffer, buflen, flags, sc->timeout, 932 sc->sc_methods->wire_state); 933 934 err = usbd_transfer(xfer); 935 DPRINTFM(UDMASS_XFER, "start xfer buffer=%#jx buflen=%jd flags=0x%jx " 936 "timeout=%d", (uintptr_t)buffer, buflen, flags, sc->timeout); 937 if (err && err != USBD_IN_PROGRESS) { 938 DPRINTFM(UDMASS_BBB, "failed to setup transfer... err=%jd", 939 err, 0, 0, 0); 940 return err; 941 } 942 943 return USBD_NORMAL_COMPLETION; 944 } 945 946 947 Static usbd_status 948 umass_setup_ctrl_transfer(struct umass_softc *sc, usb_device_request_t *req, 949 void *buffer, int buflen, int flags, struct usbd_xfer *xfer) 950 { 951 UMASSHIST_FUNC(); UMASSHIST_CALLED(); 952 usbd_status err; 953 954 if (sc->sc_dying) 955 return USBD_IOERROR; 956 957 /* Initialiase a USB control transfer and then schedule it */ 958 959 usbd_setup_default_xfer(xfer, sc->sc_udev, (void *) sc, sc->timeout, 960 req, buffer, buflen, flags, sc->sc_methods->wire_state); 961 962 err = usbd_transfer(xfer); 963 if (err && err != USBD_IN_PROGRESS) { 964 DPRINTFM(UDMASS_BBB, "failed to setup ctrl transfer... err=%jd", 965 err, 0, 0, 0); 966 967 /* do not reset, as this would make us loop */ 968 return err; 969 } 970 971 return USBD_NORMAL_COMPLETION; 972 } 973 974 Static void 975 umass_clear_endpoint_stall(struct umass_softc *sc, int endpt, 976 struct usbd_xfer *xfer) 977 { 978 UMASSHIST_FUNC(); UMASSHIST_CALLED(); 979 980 if (sc->sc_dying) 981 return; 982 983 DPRINTFM(UDMASS_BBB, "Clear endpoint 0x%02jx stall", 984 sc->sc_epaddr[endpt], 0, 0, 0); 985 986 usbd_clear_endpoint_toggle(sc->sc_pipe[endpt]); 987 988 sc->sc_req.bmRequestType = UT_WRITE_ENDPOINT; 989 sc->sc_req.bRequest = UR_CLEAR_FEATURE; 990 USETW(sc->sc_req.wValue, UF_ENDPOINT_HALT); 991 USETW(sc->sc_req.wIndex, sc->sc_epaddr[endpt]); 992 USETW(sc->sc_req.wLength, 0); 993 umass_setup_ctrl_transfer(sc, &sc->sc_req, NULL, 0, 0, xfer); 994 } 995 996 #if 0 997 Static void 998 umass_reset(struct umass_softc *sc, transfer_cb_f cb, void *priv) 999 { 1000 sc->transfer_cb = cb; 1001 sc->transfer_priv = priv; 1002 1003 /* The reset is a forced reset, so no error (yet) */ 1004 sc->reset(sc, STATUS_CMD_OK); 1005 } 1006 #endif 1007 1008 /* 1009 * Bulk protocol specific functions 1010 */ 1011 1012 Static void 1013 umass_bbb_reset(struct umass_softc *sc, int status) 1014 { 1015 UMASSHIST_FUNC(); UMASSHIST_CALLED(); 1016 KASSERTMSG(sc->sc_wire & UMASS_WPROTO_BBB, 1017 "sc->sc_wire == 0x%02x wrong for umass_bbb_reset\n", 1018 sc->sc_wire); 1019 1020 if (sc->sc_dying) 1021 return; 1022 1023 /* 1024 * Reset recovery (5.3.4 in Universal Serial Bus Mass Storage Class) 1025 * 1026 * For Reset Recovery the host shall issue in the following order: 1027 * a) a Bulk-Only Mass Storage Reset 1028 * b) a Clear Feature HALT to the Bulk-In endpoint 1029 * c) a Clear Feature HALT to the Bulk-Out endpoint 1030 * 1031 * This is done in 3 steps, states: 1032 * TSTATE_BBB_RESET1 1033 * TSTATE_BBB_RESET2 1034 * TSTATE_BBB_RESET3 1035 * 1036 * If the reset doesn't succeed, the device should be port reset. 1037 */ 1038 1039 DPRINTFM(UDMASS_BBB, "Bulk Reset", 0, 0, 0, 0); 1040 1041 sc->transfer_state = TSTATE_BBB_RESET1; 1042 sc->transfer_status = status; 1043 1044 /* reset is a class specific interface write */ 1045 sc->sc_req.bmRequestType = UT_WRITE_CLASS_INTERFACE; 1046 sc->sc_req.bRequest = UR_BBB_RESET; 1047 USETW(sc->sc_req.wValue, 0); 1048 USETW(sc->sc_req.wIndex, sc->sc_ifaceno); 1049 USETW(sc->sc_req.wLength, 0); 1050 umass_setup_ctrl_transfer(sc, &sc->sc_req, NULL, 0, 0, 1051 sc->transfer_xfer[XFER_BBB_RESET1]); 1052 } 1053 1054 Static void 1055 umass_bbb_transfer(struct umass_softc *sc, int lun, void *cmd, int cmdlen, 1056 void *data, int datalen, int dir, u_int timeout, 1057 int flags, umass_callback cb, void *priv) 1058 { 1059 UMASSHIST_FUNC(); UMASSHIST_CALLED(); 1060 static int dCBWtag = 42; /* unique for CBW of transfer */ 1061 1062 DPRINTFM(UDMASS_BBB, "sc %#jx cmd=0x%02jx", (uintptr_t)sc, 1063 *(u_char *)cmd, 0, 0); 1064 1065 KASSERTMSG(sc->sc_wire & UMASS_WPROTO_BBB, 1066 "sc->sc_wire == 0x%02x wrong for umass_bbb_transfer\n", 1067 sc->sc_wire); 1068 1069 if (sc->sc_dying) 1070 return; 1071 1072 /* Be a little generous. */ 1073 sc->timeout = timeout + USBD_DEFAULT_TIMEOUT; 1074 1075 /* 1076 * Do a Bulk-Only transfer with cmdlen bytes from cmd, possibly 1077 * a data phase of datalen bytes from/to the device and finally a 1078 * csw read phase. 1079 * If the data direction was inbound a maximum of datalen bytes 1080 * is stored in the buffer pointed to by data. 1081 * 1082 * umass_bbb_transfer initialises the transfer and lets the state 1083 * machine in umass_bbb_state handle the completion. It uses the 1084 * following states: 1085 * TSTATE_BBB_COMMAND 1086 * -> TSTATE_BBB_DATA 1087 * -> TSTATE_BBB_STATUS 1088 * -> TSTATE_BBB_STATUS2 1089 * -> TSTATE_BBB_IDLE 1090 * 1091 * An error in any of those states will invoke 1092 * umass_bbb_reset. 1093 */ 1094 1095 /* check the given arguments */ 1096 KASSERTMSG(datalen == 0 || data != NULL, 1097 "%s: datalen > 0, but no buffer",device_xname(sc->sc_dev)); 1098 KASSERTMSG(cmdlen <= CBWCDBLENGTH, 1099 "%s: cmdlen exceeds CDB length in CBW (%d > %d)", 1100 device_xname(sc->sc_dev), cmdlen, CBWCDBLENGTH); 1101 KASSERTMSG(dir == DIR_NONE || datalen > 0, 1102 "%s: datalen == 0 while direction is not NONE\n", 1103 device_xname(sc->sc_dev)); 1104 KASSERTMSG(datalen == 0 || dir != DIR_NONE, 1105 "%s: direction is NONE while datalen is not zero\n", 1106 device_xname(sc->sc_dev)); 1107 /* CTASSERT */ 1108 KASSERTMSG(sizeof(umass_bbb_cbw_t) == UMASS_BBB_CBW_SIZE, 1109 "%s: CBW struct does not have the right size (%zu vs. %u)\n", 1110 device_xname(sc->sc_dev), 1111 sizeof(umass_bbb_cbw_t), UMASS_BBB_CBW_SIZE); 1112 /* CTASSERT */ 1113 KASSERTMSG(sizeof(umass_bbb_csw_t) == UMASS_BBB_CSW_SIZE, 1114 "%s: CSW struct does not have the right size (%zu vs. %u)\n", 1115 device_xname(sc->sc_dev), 1116 sizeof(umass_bbb_csw_t), UMASS_BBB_CSW_SIZE); 1117 1118 /* 1119 * Determine the direction of the data transfer and the length. 1120 * 1121 * dCBWDataTransferLength (datalen) : 1122 * This field indicates the number of bytes of data that the host 1123 * intends to transfer on the IN or OUT Bulk endpoint(as indicated by 1124 * the Direction bit) during the execution of this command. If this 1125 * field is set to 0, the device will expect that no data will be 1126 * transferred IN or OUT during this command, regardless of the value 1127 * of the Direction bit defined in dCBWFlags. 1128 * 1129 * dCBWFlags (dir) : 1130 * The bits of the Flags field are defined as follows: 1131 * Bits 0-6 reserved 1132 * Bit 7 Direction - this bit shall be ignored if the 1133 * dCBWDataTransferLength field is zero. 1134 * 0 = data Out from host to device 1135 * 1 = data In from device to host 1136 */ 1137 1138 /* Fill in the Command Block Wrapper */ 1139 USETDW(sc->cbw.dCBWSignature, CBWSIGNATURE); 1140 USETDW(sc->cbw.dCBWTag, dCBWtag); 1141 dCBWtag++; /* cannot be done in macro (it will be done 4 times) */ 1142 USETDW(sc->cbw.dCBWDataTransferLength, datalen); 1143 /* DIR_NONE is treated as DIR_OUT (0x00) */ 1144 sc->cbw.bCBWFlags = (dir == DIR_IN? CBWFLAGS_IN:CBWFLAGS_OUT); 1145 sc->cbw.bCBWLUN = lun; 1146 sc->cbw.bCDBLength = cmdlen; 1147 memcpy(sc->cbw.CBWCDB, cmd, cmdlen); 1148 1149 DIF(UDMASS_BBB, umass_bbb_dump_cbw(sc, &sc->cbw)); 1150 1151 /* store the details for the data transfer phase */ 1152 sc->transfer_dir = dir; 1153 sc->transfer_data = data; 1154 sc->transfer_datalen = datalen; 1155 sc->transfer_actlen = 0; 1156 sc->transfer_cb = cb; 1157 sc->transfer_priv = priv; 1158 sc->transfer_status = STATUS_CMD_OK; 1159 1160 /* move from idle to the command state */ 1161 sc->transfer_state = TSTATE_BBB_COMMAND; 1162 1163 /* Send the CBW from host to device via bulk-out endpoint. */ 1164 if (umass_setup_transfer(sc, sc->sc_pipe[UMASS_BULKOUT], 1165 &sc->cbw, UMASS_BBB_CBW_SIZE, flags, 1166 sc->transfer_xfer[XFER_BBB_CBW])) { 1167 umass_bbb_reset(sc, STATUS_WIRE_FAILED); 1168 } 1169 } 1170 1171 1172 Static void 1173 umass_bbb_state(struct usbd_xfer *xfer, void *priv, 1174 usbd_status err) 1175 { 1176 UMASSHIST_FUNC(); UMASSHIST_CALLED(); 1177 struct umass_softc *sc = (struct umass_softc *) priv; 1178 struct usbd_xfer *next_xfer; 1179 int residue; 1180 1181 KASSERTMSG(sc->sc_wire & UMASS_WPROTO_BBB, 1182 "sc->sc_wire == 0x%02x wrong for umass_bbb_state\n", 1183 sc->sc_wire); 1184 1185 /* 1186 * State handling for BBB transfers. 1187 * 1188 * The subroutine is rather long. It steps through the states given in 1189 * Annex A of the Bulk-Only specification. 1190 * Each state first does the error handling of the previous transfer 1191 * and then prepares the next transfer. 1192 * Each transfer is done asynchroneously so after the request/transfer 1193 * has been submitted you will find a 'return;'. 1194 */ 1195 1196 DPRINTFM(UDMASS_BBB, "sc %#jx xfer %#jx, transfer_state %jd dir %jd", 1197 (uintptr_t)sc, (uintptr_t)xfer, sc->transfer_state, 1198 sc->transfer_dir); 1199 1200 if (err == USBD_CANCELLED) { 1201 DPRINTFM(UDMASS_BBB, "sc %#jx xfer %#jx cancelled", 1202 (uintptr_t)sc, (uintptr_t)xfer, 0, 0); 1203 1204 sc->transfer_state = TSTATE_IDLE; 1205 sc->transfer_cb(sc, sc->transfer_priv, 0, STATUS_TIMEOUT); 1206 return; 1207 } 1208 1209 if (sc->sc_dying) 1210 return; 1211 1212 switch (sc->transfer_state) { 1213 1214 /***** Bulk Transfer *****/ 1215 case TSTATE_BBB_COMMAND: 1216 /* Command transport phase, error handling */ 1217 if (err) { 1218 DPRINTFM(UDMASS_BBB, "sc %#jx failed to send CBW", 1219 (uintptr_t)sc, 0, 0, 0); 1220 /* If the device detects that the CBW is invalid, then 1221 * the device may STALL both bulk endpoints and require 1222 * a Bulk-Reset 1223 */ 1224 umass_bbb_reset(sc, STATUS_WIRE_FAILED); 1225 return; 1226 } 1227 1228 /* Data transport phase, setup transfer */ 1229 sc->transfer_state = TSTATE_BBB_DATA; 1230 if (sc->transfer_dir == DIR_IN) { 1231 if (umass_setup_transfer(sc, sc->sc_pipe[UMASS_BULKIN], 1232 sc->datain_buffer, sc->transfer_datalen, 1233 USBD_SHORT_XFER_OK, 1234 sc->transfer_xfer[XFER_BBB_DATAIN])) 1235 umass_bbb_reset(sc, STATUS_WIRE_FAILED); 1236 1237 return; 1238 } else if (sc->transfer_dir == DIR_OUT) { 1239 memcpy(sc->dataout_buffer, sc->transfer_data, 1240 sc->transfer_datalen); 1241 if (umass_setup_transfer(sc, 1242 sc->sc_pipe[UMASS_BULKOUT], sc->dataout_buffer, 1243 sc->transfer_datalen, 0,/* fixed length transfer */ 1244 sc->transfer_xfer[XFER_BBB_DATAOUT])) 1245 umass_bbb_reset(sc, STATUS_WIRE_FAILED); 1246 1247 return; 1248 } else { 1249 DPRINTFM(UDMASS_BBB, "sc %#jx: no data phase", 1250 (uintptr_t)sc, 0, 0, 0); 1251 } 1252 1253 /* if no data phase, err == 0 */ 1254 /* FALLTHROUGH */ 1255 case TSTATE_BBB_DATA: 1256 /* Command transport phase error handling (ignored if no data 1257 * phase (fallthrough from previous state)) */ 1258 if (sc->transfer_dir != DIR_NONE) { 1259 /* retrieve the length of the transfer that was done */ 1260 usbd_get_xfer_status(xfer, NULL, NULL, 1261 &sc->transfer_actlen, NULL); 1262 DPRINTFM(UDMASS_BBB, "sc %#jx: BBB_DATA actlen=%jd", 1263 (uintptr_t)sc, sc->transfer_actlen, 0, 0); 1264 1265 if (err) { 1266 DPRINTFM(UDMASS_BBB, "sc %#jx Data dir %jd " 1267 "err %jd failed, err %jd", 1268 (uintptr_t)sc, sc->transfer_dir, 1269 sc->transfer_datalen, err); 1270 1271 if (err == USBD_STALLED) { 1272 sc->transfer_state = TSTATE_BBB_DCLEAR; 1273 umass_clear_endpoint_stall(sc, 1274 (sc->transfer_dir == DIR_IN? 1275 UMASS_BULKIN:UMASS_BULKOUT), 1276 sc->transfer_xfer[XFER_BBB_DCLEAR]); 1277 } else { 1278 /* Unless the error is a pipe stall the 1279 * error is fatal. 1280 */ 1281 umass_bbb_reset(sc,STATUS_WIRE_FAILED); 1282 } 1283 return; 1284 } 1285 } 1286 1287 /* err == 0 (no data phase or successful) */ 1288 /* FALLTHROUGH */ 1289 case TSTATE_BBB_DCLEAR: /* stall clear after data phase */ 1290 if (sc->transfer_dir == DIR_IN) 1291 memcpy(sc->transfer_data, sc->datain_buffer, 1292 sc->transfer_actlen); 1293 1294 DIF(UDMASS_BBB, if (sc->transfer_dir == DIR_IN) 1295 umass_dump_buffer(sc, sc->transfer_data, 1296 sc->transfer_datalen, 48)); 1297 1298 /* err == 0 (no data phase or successful) */ 1299 /* FALLTHROUGH */ 1300 case TSTATE_BBB_SCLEAR: /* stall clear after status phase */ 1301 /* Reading of CSW after bulk stall condition in data phase 1302 * (TSTATE_BBB_DATA2) or bulk-in stall condition after 1303 * reading CSW (TSTATE_BBB_SCLEAR). 1304 * In the case of no data phase or successful data phase, 1305 * err == 0 and the following if block is passed. 1306 */ 1307 if (err) { /* should not occur */ 1308 printf("%s: BBB bulk-%s stall clear failed, %s\n", 1309 device_xname(sc->sc_dev), 1310 (sc->transfer_dir == DIR_IN? "in":"out"), 1311 usbd_errstr(err)); 1312 umass_bbb_reset(sc, STATUS_WIRE_FAILED); 1313 return; 1314 } 1315 1316 /* Status transport phase, setup transfer */ 1317 if (sc->transfer_state == TSTATE_BBB_COMMAND || 1318 sc->transfer_state == TSTATE_BBB_DATA || 1319 sc->transfer_state == TSTATE_BBB_DCLEAR) { 1320 /* After no data phase, successful data phase and 1321 * after clearing bulk-in/-out stall condition 1322 */ 1323 sc->transfer_state = TSTATE_BBB_STATUS1; 1324 next_xfer = sc->transfer_xfer[XFER_BBB_CSW1]; 1325 } else { 1326 /* After first attempt of fetching CSW */ 1327 sc->transfer_state = TSTATE_BBB_STATUS2; 1328 next_xfer = sc->transfer_xfer[XFER_BBB_CSW2]; 1329 } 1330 1331 /* Read the Command Status Wrapper via bulk-in endpoint. */ 1332 if (umass_setup_transfer(sc, sc->sc_pipe[UMASS_BULKIN], 1333 &sc->csw, UMASS_BBB_CSW_SIZE, 0, next_xfer)) { 1334 umass_bbb_reset(sc, STATUS_WIRE_FAILED); 1335 return; 1336 } 1337 1338 return; 1339 case TSTATE_BBB_STATUS1: /* first attempt */ 1340 case TSTATE_BBB_STATUS2: /* second attempt */ 1341 /* Status transfer, error handling */ 1342 if (err) { 1343 DPRINTFM(UDMASS_BBB, "sc %#jx Failed to read CSW " 1344 "err %jd (state %jd)", (uintptr_t)sc, err, 1345 sc->transfer_state, 0); 1346 1347 /* If this was the first attempt at fetching the CSW 1348 * retry it, otherwise fail. 1349 */ 1350 if (sc->transfer_state == TSTATE_BBB_STATUS1) { 1351 sc->transfer_state = TSTATE_BBB_SCLEAR; 1352 umass_clear_endpoint_stall(sc, UMASS_BULKIN, 1353 sc->transfer_xfer[XFER_BBB_SCLEAR]); 1354 return; 1355 } else { 1356 umass_bbb_reset(sc, STATUS_WIRE_FAILED); 1357 return; 1358 } 1359 } 1360 1361 DIF(UDMASS_BBB, umass_bbb_dump_csw(sc, &sc->csw)); 1362 1363 #ifdef UMASS_DEBUG 1364 residue = UGETDW(sc->csw.dCSWDataResidue); 1365 if (residue != sc->transfer_datalen - sc->transfer_actlen) 1366 printf("%s: dCSWDataResidue=%d req=%d act=%d\n", 1367 device_xname(sc->sc_dev), residue, 1368 sc->transfer_datalen, sc->transfer_actlen); 1369 #endif 1370 residue = sc->transfer_datalen - sc->transfer_actlen; 1371 1372 /* Translate weird command-status signatures. */ 1373 if ((sc->sc_quirks & UMASS_QUIRK_WRONG_CSWSIG) && 1374 UGETDW(sc->csw.dCSWSignature) == CSWSIGNATURE_OLYMPUS_C1) 1375 USETDW(sc->csw.dCSWSignature, CSWSIGNATURE); 1376 1377 /* Translate invalid command-status tags */ 1378 if (sc->sc_quirks & UMASS_QUIRK_WRONG_CSWTAG) 1379 USETDW(sc->csw.dCSWTag, UGETDW(sc->cbw.dCBWTag)); 1380 1381 /* Check CSW and handle any error */ 1382 if (UGETDW(sc->csw.dCSWSignature) != CSWSIGNATURE) { 1383 /* Invalid CSW: Wrong signature or wrong tag might 1384 * indicate that the device is confused -> reset it. 1385 */ 1386 printf("%s: Invalid CSW: sig 0x%08x should be 0x%08x\n", 1387 device_xname(sc->sc_dev), 1388 UGETDW(sc->csw.dCSWSignature), 1389 CSWSIGNATURE); 1390 1391 umass_bbb_reset(sc, STATUS_WIRE_FAILED); 1392 return; 1393 } else if (UGETDW(sc->csw.dCSWTag) 1394 != UGETDW(sc->cbw.dCBWTag)) { 1395 printf("%s: Invalid CSW: tag %d should be %d\n", 1396 device_xname(sc->sc_dev), 1397 UGETDW(sc->csw.dCSWTag), 1398 UGETDW(sc->cbw.dCBWTag)); 1399 1400 umass_bbb_reset(sc, STATUS_WIRE_FAILED); 1401 return; 1402 1403 /* CSW is valid here */ 1404 } else if (sc->csw.bCSWStatus > CSWSTATUS_PHASE) { 1405 printf("%s: Invalid CSW: status %d > %d\n", 1406 device_xname(sc->sc_dev), 1407 sc->csw.bCSWStatus, 1408 CSWSTATUS_PHASE); 1409 1410 umass_bbb_reset(sc, STATUS_WIRE_FAILED); 1411 return; 1412 } else if (sc->csw.bCSWStatus == CSWSTATUS_PHASE) { 1413 printf("%s: Phase Error, residue = %d\n", 1414 device_xname(sc->sc_dev), residue); 1415 1416 umass_bbb_reset(sc, STATUS_WIRE_FAILED); 1417 return; 1418 1419 } else if (sc->transfer_actlen > sc->transfer_datalen) { 1420 /* Buffer overrun! Don't let this go by unnoticed */ 1421 panic("%s: transferred %s %d bytes instead of %d bytes", 1422 device_xname(sc->sc_dev), 1423 sc->transfer_dir == DIR_IN ? "IN" : "OUT", 1424 sc->transfer_actlen, sc->transfer_datalen); 1425 #if 0 1426 } else if (sc->transfer_datalen - sc->transfer_actlen 1427 != residue) { 1428 DPRINTFM(UDMASS_BBB, "sc %#jx: actlen=%jd != " 1429 "residue=%jd\n", (uintptr_t)sc, 1430 sc->transfer_datalen - sc->transfer_actlen, 1431 residue, 0); 1432 1433 umass_bbb_reset(sc, STATUS_WIRE_FAILED); 1434 return; 1435 #endif 1436 } else if (sc->csw.bCSWStatus == CSWSTATUS_FAILED) { 1437 DPRINTFM(UDMASS_BBB, "sc %#jx: Command Failed, " 1438 "res = %jd", (uintptr_t)sc, residue, 0, 0); 1439 1440 /* SCSI command failed but transfer was succesful */ 1441 sc->transfer_state = TSTATE_IDLE; 1442 sc->transfer_cb(sc, sc->transfer_priv, residue, 1443 STATUS_CMD_FAILED); 1444 1445 return; 1446 1447 } else { /* success */ 1448 sc->transfer_state = TSTATE_IDLE; 1449 sc->transfer_cb(sc, sc->transfer_priv, residue, 1450 STATUS_CMD_OK); 1451 1452 return; 1453 } 1454 1455 /***** Bulk Reset *****/ 1456 case TSTATE_BBB_RESET1: 1457 if (err) 1458 printf("%s: BBB reset failed, %s\n", 1459 device_xname(sc->sc_dev), usbd_errstr(err)); 1460 1461 sc->transfer_state = TSTATE_BBB_RESET2; 1462 umass_clear_endpoint_stall(sc, UMASS_BULKIN, 1463 sc->transfer_xfer[XFER_BBB_RESET2]); 1464 1465 return; 1466 case TSTATE_BBB_RESET2: 1467 if (err) /* should not occur */ 1468 printf("%s: BBB bulk-in clear stall failed, %s\n", 1469 device_xname(sc->sc_dev), usbd_errstr(err)); 1470 /* no error recovery, otherwise we end up in a loop */ 1471 1472 sc->transfer_state = TSTATE_BBB_RESET3; 1473 umass_clear_endpoint_stall(sc, UMASS_BULKOUT, 1474 sc->transfer_xfer[XFER_BBB_RESET3]); 1475 1476 return; 1477 case TSTATE_BBB_RESET3: 1478 if (err) /* should not occur */ 1479 printf("%s: BBB bulk-out clear stall failed, %s\n", 1480 device_xname(sc->sc_dev), usbd_errstr(err)); 1481 /* no error recovery, otherwise we end up in a loop */ 1482 1483 sc->transfer_state = TSTATE_IDLE; 1484 if (sc->transfer_priv) { 1485 sc->transfer_cb(sc, sc->transfer_priv, 1486 sc->transfer_datalen, 1487 sc->transfer_status); 1488 } 1489 1490 return; 1491 1492 /***** Default *****/ 1493 default: 1494 panic("%s: Unknown state %d", 1495 device_xname(sc->sc_dev), sc->transfer_state); 1496 } 1497 } 1498 1499 /* 1500 * Command/Bulk/Interrupt (CBI) specific functions 1501 */ 1502 1503 Static int 1504 umass_cbi_adsc(struct umass_softc *sc, char *buffer, int buflen, int flags, 1505 struct usbd_xfer *xfer) 1506 { 1507 KASSERTMSG(sc->sc_wire & (UMASS_WPROTO_CBI|UMASS_WPROTO_CBI_I), 1508 "sc->sc_wire == 0x%02x wrong for umass_cbi_adsc\n", 1509 sc->sc_wire); 1510 1511 if ((sc->sc_cmd == UMASS_CPROTO_RBC) && 1512 (sc->sc_quirks & UMASS_QUIRK_RBC_PAD_TO_12) != 0 && buflen < 12) { 1513 (void)memset(buffer + buflen, 0, 12 - buflen); 1514 buflen = 12; 1515 } 1516 1517 sc->sc_req.bmRequestType = UT_WRITE_CLASS_INTERFACE; 1518 sc->sc_req.bRequest = UR_CBI_ADSC; 1519 USETW(sc->sc_req.wValue, 0); 1520 USETW(sc->sc_req.wIndex, sc->sc_ifaceno); 1521 USETW(sc->sc_req.wLength, buflen); 1522 return umass_setup_ctrl_transfer(sc, &sc->sc_req, buffer, 1523 buflen, flags, xfer); 1524 } 1525 1526 1527 Static void 1528 umass_cbi_reset(struct umass_softc *sc, int status) 1529 { 1530 UMASSHIST_FUNC(); UMASSHIST_CALLED(); 1531 int i; 1532 # define SEND_DIAGNOSTIC_CMDLEN 12 1533 1534 KASSERTMSG(sc->sc_wire & (UMASS_WPROTO_CBI|UMASS_WPROTO_CBI_I), 1535 "sc->sc_wire == 0x%02x wrong for umass_cbi_reset\n", 1536 sc->sc_wire); 1537 1538 if (sc->sc_dying) 1539 return; 1540 1541 /* 1542 * Command Block Reset Protocol 1543 * 1544 * First send a reset request to the device. Then clear 1545 * any possibly stalled bulk endpoints. 1546 1547 * This is done in 3 steps, states: 1548 * TSTATE_CBI_RESET1 1549 * TSTATE_CBI_RESET2 1550 * TSTATE_CBI_RESET3 1551 * 1552 * If the reset doesn't succeed, the device should be port reset. 1553 */ 1554 1555 DPRINTFM(UDMASS_CBI, "sc %#jx: CBI Reset", (uintptr_t)sc, 0, 0, 0); 1556 1557 /* CTASSERT */ 1558 KASSERTMSG(sizeof(sc->cbl) >= SEND_DIAGNOSTIC_CMDLEN, 1559 "%s: CBL struct is too small (%zu < %u)\n", 1560 device_xname(sc->sc_dev), 1561 sizeof(sc->cbl), SEND_DIAGNOSTIC_CMDLEN); 1562 1563 sc->transfer_state = TSTATE_CBI_RESET1; 1564 sc->transfer_status = status; 1565 1566 /* The 0x1d code is the SEND DIAGNOSTIC command. To distingiush between 1567 * the two the last 10 bytes of the cbl is filled with 0xff (section 1568 * 2.2 of the CBI spec). 1569 */ 1570 sc->cbl[0] = 0x1d; /* Command Block Reset */ 1571 sc->cbl[1] = 0x04; 1572 for (i = 2; i < SEND_DIAGNOSTIC_CMDLEN; i++) 1573 sc->cbl[i] = 0xff; 1574 1575 umass_cbi_adsc(sc, sc->cbl, SEND_DIAGNOSTIC_CMDLEN, 0, 1576 sc->transfer_xfer[XFER_CBI_RESET1]); 1577 /* XXX if the command fails we should reset the port on the bub */ 1578 } 1579 1580 Static void 1581 umass_cbi_transfer(struct umass_softc *sc, int lun, 1582 void *cmd, int cmdlen, void *data, int datalen, int dir, 1583 u_int timeout, int flags, umass_callback cb, void *priv) 1584 { 1585 UMASSHIST_FUNC(); UMASSHIST_CALLED(); 1586 1587 DPRINTFM(UDMASS_CBI, "sc %#jx: cmd=0x%02jx, len=%jd", 1588 (uintptr_t)sc, *(u_char *)cmd, datalen, 0); 1589 1590 KASSERTMSG(sc->sc_wire & (UMASS_WPROTO_CBI|UMASS_WPROTO_CBI_I), 1591 "sc->sc_wire == 0x%02x wrong for umass_cbi_transfer\n", 1592 sc->sc_wire); 1593 1594 if (sc->sc_dying) 1595 return; 1596 1597 /* Be a little generous. */ 1598 sc->timeout = timeout + USBD_DEFAULT_TIMEOUT; 1599 1600 /* 1601 * Do a CBI transfer with cmdlen bytes from cmd, possibly 1602 * a data phase of datalen bytes from/to the device and finally a 1603 * csw read phase. 1604 * If the data direction was inbound a maximum of datalen bytes 1605 * is stored in the buffer pointed to by data. 1606 * 1607 * umass_cbi_transfer initialises the transfer and lets the state 1608 * machine in umass_cbi_state handle the completion. It uses the 1609 * following states: 1610 * TSTATE_CBI_COMMAND 1611 * -> XXX fill in 1612 * 1613 * An error in any of those states will invoke 1614 * umass_cbi_reset. 1615 */ 1616 1617 /* check the given arguments */ 1618 KASSERTMSG(datalen == 0 || data != NULL, 1619 "%s: datalen > 0, but no buffer",device_xname(sc->sc_dev)); 1620 KASSERTMSG(datalen == 0 || dir != DIR_NONE, 1621 "%s: direction is NONE while datalen is not zero\n", 1622 device_xname(sc->sc_dev)); 1623 1624 /* store the details for the data transfer phase */ 1625 sc->transfer_dir = dir; 1626 sc->transfer_data = data; 1627 sc->transfer_datalen = datalen; 1628 sc->transfer_actlen = 0; 1629 sc->transfer_cb = cb; 1630 sc->transfer_priv = priv; 1631 sc->transfer_status = STATUS_CMD_OK; 1632 1633 /* move from idle to the command state */ 1634 sc->transfer_state = TSTATE_CBI_COMMAND; 1635 1636 /* Send the Command Block from host to device via control endpoint. */ 1637 if (umass_cbi_adsc(sc, cmd, cmdlen, flags, 1638 sc->transfer_xfer[XFER_CBI_CB])) 1639 umass_cbi_reset(sc, STATUS_WIRE_FAILED); 1640 } 1641 1642 Static void 1643 umass_cbi_state(struct usbd_xfer *xfer, void *priv, 1644 usbd_status err) 1645 { 1646 UMASSHIST_FUNC(); UMASSHIST_CALLED(); 1647 struct umass_softc *sc = (struct umass_softc *) priv; 1648 1649 KASSERTMSG(sc->sc_wire & (UMASS_WPROTO_CBI|UMASS_WPROTO_CBI_I), 1650 "sc->sc_wire == 0x%02x wrong for umass_cbi_state\n", 1651 sc->sc_wire); 1652 1653 if (err == USBD_CANCELLED) { 1654 DPRINTFM(UDMASS_BBB, "sc %#jx xfer %#jx cancelled", 1655 (uintptr_t)sc, (uintptr_t)xfer, 0, 0); 1656 sc->transfer_state = TSTATE_IDLE; 1657 sc->transfer_cb(sc, sc->transfer_priv, 0, STATUS_TIMEOUT); 1658 return; 1659 } 1660 1661 if (sc->sc_dying) 1662 return; 1663 1664 /* 1665 * State handling for CBI transfers. 1666 */ 1667 1668 DPRINTFM(UDMASS_CBI, "sc %#jx: Handling CBI state %jd, xfer=%#jx, ...", 1669 (uintptr_t)sc, sc->transfer_state, (uintptr_t)xfer, 0); 1670 DPRINTFM(UDMASS_CBI, "... err %jd", err, 0, 0, 0); 1671 1672 switch (sc->transfer_state) { 1673 1674 /***** CBI Transfer *****/ 1675 case TSTATE_CBI_COMMAND: 1676 if (err == USBD_STALLED) { 1677 DPRINTFM(UDMASS_CBI, "sc %#jx: Command Transport " 1678 "failed", (uintptr_t)sc, 0, 0, 0); 1679 /* Status transport by control pipe (section 2.3.2.1). 1680 * The command contained in the command block failed. 1681 * 1682 * The control pipe has already been unstalled by the 1683 * USB stack. 1684 * Section 2.4.3.1.1 states that the bulk in endpoints 1685 * should not stalled at this point. 1686 */ 1687 1688 sc->transfer_state = TSTATE_IDLE; 1689 sc->transfer_cb(sc, sc->transfer_priv, 1690 sc->transfer_datalen, 1691 STATUS_CMD_FAILED); 1692 1693 return; 1694 } else if (err) { 1695 DPRINTFM(UDMASS_CBI, "sc %#jx: failed to send ADSC", 1696 (uintptr_t)sc, 0, 0, 0); 1697 umass_cbi_reset(sc, STATUS_WIRE_FAILED); 1698 return; 1699 } 1700 1701 /* Data transport phase, setup transfer */ 1702 sc->transfer_state = TSTATE_CBI_DATA; 1703 if (sc->transfer_dir == DIR_IN) { 1704 if (umass_setup_transfer(sc, sc->sc_pipe[UMASS_BULKIN], 1705 sc->datain_buffer, sc->transfer_datalen, 1706 USBD_SHORT_XFER_OK, 1707 sc->transfer_xfer[XFER_CBI_DATAIN])) 1708 umass_cbi_reset(sc, STATUS_WIRE_FAILED); 1709 1710 return; 1711 } else if (sc->transfer_dir == DIR_OUT) { 1712 memcpy(sc->dataout_buffer, sc->transfer_data, 1713 sc->transfer_datalen); 1714 if (umass_setup_transfer(sc, sc->sc_pipe[UMASS_BULKOUT], 1715 sc->dataout_buffer, sc->transfer_datalen, 1716 0, /* fixed length transfer */ 1717 sc->transfer_xfer[XFER_CBI_DATAOUT])) 1718 umass_cbi_reset(sc, STATUS_WIRE_FAILED); 1719 1720 return; 1721 } else { 1722 DPRINTFM(UDMASS_CBI, "sc %#jx: no data phase", 1723 (uintptr_t)sc, 0, 0, 0); 1724 } 1725 1726 /* if no data phase, err == 0 */ 1727 /* FALLTHROUGH */ 1728 case TSTATE_CBI_DATA: 1729 /* Command transport phase error handling (ignored if no data 1730 * phase (fallthrough from previous state)) */ 1731 if (sc->transfer_dir != DIR_NONE) { 1732 /* retrieve the length of the transfer that was done */ 1733 usbd_get_xfer_status(xfer, NULL, NULL, 1734 &sc->transfer_actlen, NULL); 1735 DPRINTFM(UDMASS_CBI, "sc %#jx: CBI_DATA actlen=%jd", 1736 (uintptr_t)sc, sc->transfer_actlen, 0, 0); 1737 1738 if (err) { 1739 DPRINTFM(UDMASS_CBI, "sc %#jx: Data dir %jd " 1740 "err %d failed", 1741 (uintptr_t)sc, sc->transfer_dir, 1742 sc->transfer_datalen, err); 1743 1744 if (err == USBD_STALLED) { 1745 sc->transfer_state = TSTATE_CBI_DCLEAR; 1746 umass_clear_endpoint_stall(sc, 1747 (sc->transfer_dir == DIR_IN? 1748 UMASS_BULKIN:UMASS_BULKOUT), 1749 sc->transfer_xfer[XFER_CBI_DCLEAR]); 1750 } else { 1751 /* Unless the error is a pipe stall the 1752 * error is fatal. 1753 */ 1754 umass_cbi_reset(sc, STATUS_WIRE_FAILED); 1755 } 1756 return; 1757 } 1758 } 1759 1760 if (sc->transfer_dir == DIR_IN) 1761 memcpy(sc->transfer_data, sc->datain_buffer, 1762 sc->transfer_actlen); 1763 1764 DIF(UDMASS_CBI, if (sc->transfer_dir == DIR_IN) 1765 umass_dump_buffer(sc, sc->transfer_data, 1766 sc->transfer_actlen, 48)); 1767 1768 /* Status phase */ 1769 if (sc->sc_wire == UMASS_WPROTO_CBI_I) { 1770 sc->transfer_state = TSTATE_CBI_STATUS; 1771 memset(&sc->sbl, 0, sizeof(sc->sbl)); 1772 if (umass_setup_transfer(sc, sc->sc_pipe[UMASS_INTRIN], 1773 &sc->sbl, sizeof(sc->sbl), 1774 0, /* fixed length transfer */ 1775 sc->transfer_xfer[XFER_CBI_STATUS])) 1776 umass_cbi_reset(sc, STATUS_WIRE_FAILED); 1777 } else { 1778 /* No command completion interrupt. Request 1779 * sense to get status of command. 1780 */ 1781 sc->transfer_state = TSTATE_IDLE; 1782 sc->transfer_cb(sc, sc->transfer_priv, 1783 sc->transfer_datalen - sc->transfer_actlen, 1784 STATUS_CMD_UNKNOWN); 1785 } 1786 return; 1787 1788 case TSTATE_CBI_STATUS: 1789 if (err) { 1790 DPRINTFM(UDMASS_CBI, "sc %#jx: Status Transport failed", 1791 (uintptr_t)sc, 0, 0, 0); 1792 /* Status transport by interrupt pipe (section 2.3.2.2). 1793 */ 1794 1795 if (err == USBD_STALLED) { 1796 sc->transfer_state = TSTATE_CBI_SCLEAR; 1797 umass_clear_endpoint_stall(sc, UMASS_INTRIN, 1798 sc->transfer_xfer[XFER_CBI_SCLEAR]); 1799 } else { 1800 umass_cbi_reset(sc, STATUS_WIRE_FAILED); 1801 } 1802 return; 1803 } 1804 1805 /* Dissect the information in the buffer */ 1806 1807 { 1808 uint32_t actlen; 1809 usbd_get_xfer_status(xfer,NULL,NULL,&actlen,NULL); 1810 DPRINTFM(UDMASS_CBI, "sc %#jx: CBI_STATUS actlen=%jd", 1811 (uintptr_t)sc, actlen, 0, 0); 1812 if (actlen != 2) 1813 break; 1814 } 1815 1816 if (sc->sc_cmd == UMASS_CPROTO_UFI) { 1817 int status; 1818 1819 /* Section 3.4.3.1.3 specifies that the UFI command 1820 * protocol returns an ASC and ASCQ in the interrupt 1821 * data block. 1822 */ 1823 1824 DPRINTFM(UDMASS_CBI, "sc %#jx: UFI CCI, ASC = 0x%02jx, " 1825 "ASCQ = 0x%02jx", (uintptr_t)sc, sc->sbl.ufi.asc, 1826 sc->sbl.ufi.ascq, 0); 1827 1828 if ((sc->sbl.ufi.asc == 0 && sc->sbl.ufi.ascq == 0) || 1829 sc->sc_sense) 1830 status = STATUS_CMD_OK; 1831 else 1832 status = STATUS_CMD_FAILED; 1833 1834 /* No autosense, command successful */ 1835 sc->transfer_state = TSTATE_IDLE; 1836 sc->transfer_cb(sc, sc->transfer_priv, 1837 sc->transfer_datalen - sc->transfer_actlen, status); 1838 } else { 1839 int status; 1840 1841 /* Command Interrupt Data Block */ 1842 1843 DPRINTFM(UDMASS_CBI, "sc %#jx: type=0x%02jx, " 1844 "value=0x%02jx", (uintptr_t)sc, 1845 sc->sbl.common.type, sc->sbl.common.value, 0); 1846 1847 if (sc->sbl.common.type == IDB_TYPE_CCI) { 1848 switch (sc->sbl.common.value & IDB_VALUE_STATUS_MASK) { 1849 case IDB_VALUE_PASS: 1850 status = STATUS_CMD_OK; 1851 break; 1852 case IDB_VALUE_FAIL: 1853 case IDB_VALUE_PERSISTENT: 1854 status = STATUS_CMD_FAILED; 1855 break; 1856 case IDB_VALUE_PHASE: 1857 default: /* XXX: gcc */ 1858 status = STATUS_WIRE_FAILED; 1859 break; 1860 } 1861 1862 sc->transfer_state = TSTATE_IDLE; 1863 sc->transfer_cb(sc, sc->transfer_priv, 1864 sc->transfer_datalen - sc->transfer_actlen, 1865 status); 1866 } 1867 } 1868 return; 1869 1870 case TSTATE_CBI_DCLEAR: 1871 if (err) { /* should not occur */ 1872 printf("%s: CBI bulk-%s stall clear failed, %s\n", 1873 device_xname(sc->sc_dev), 1874 (sc->transfer_dir == DIR_IN? "in":"out"), 1875 usbd_errstr(err)); 1876 umass_cbi_reset(sc, STATUS_WIRE_FAILED); 1877 } else { 1878 sc->transfer_state = TSTATE_IDLE; 1879 sc->transfer_cb(sc, sc->transfer_priv, 1880 sc->transfer_datalen, STATUS_CMD_FAILED); 1881 } 1882 return; 1883 1884 case TSTATE_CBI_SCLEAR: 1885 if (err) { /* should not occur */ 1886 printf("%s: CBI intr-in stall clear failed, %s\n", 1887 device_xname(sc->sc_dev), usbd_errstr(err)); 1888 umass_cbi_reset(sc, STATUS_WIRE_FAILED); 1889 } else { 1890 sc->transfer_state = TSTATE_IDLE; 1891 sc->transfer_cb(sc, sc->transfer_priv, 1892 sc->transfer_datalen, STATUS_CMD_FAILED); 1893 } 1894 return; 1895 1896 /***** CBI Reset *****/ 1897 case TSTATE_CBI_RESET1: 1898 if (err) 1899 printf("%s: CBI reset failed, %s\n", 1900 device_xname(sc->sc_dev), usbd_errstr(err)); 1901 1902 sc->transfer_state = TSTATE_CBI_RESET2; 1903 umass_clear_endpoint_stall(sc, UMASS_BULKIN, 1904 sc->transfer_xfer[XFER_CBI_RESET2]); 1905 1906 return; 1907 case TSTATE_CBI_RESET2: 1908 if (err) /* should not occur */ 1909 printf("%s: CBI bulk-in stall clear failed, %s\n", 1910 device_xname(sc->sc_dev), usbd_errstr(err)); 1911 /* no error recovery, otherwise we end up in a loop */ 1912 1913 sc->transfer_state = TSTATE_CBI_RESET3; 1914 umass_clear_endpoint_stall(sc, UMASS_BULKOUT, 1915 sc->transfer_xfer[XFER_CBI_RESET3]); 1916 1917 return; 1918 case TSTATE_CBI_RESET3: 1919 if (err) /* should not occur */ 1920 printf("%s: CBI bulk-out stall clear failed, %s\n", 1921 device_xname(sc->sc_dev), usbd_errstr(err)); 1922 /* no error recovery, otherwise we end up in a loop */ 1923 1924 sc->transfer_state = TSTATE_IDLE; 1925 if (sc->transfer_priv) { 1926 sc->transfer_cb(sc, sc->transfer_priv, 1927 sc->transfer_datalen, 1928 sc->transfer_status); 1929 } 1930 1931 return; 1932 1933 1934 /***** Default *****/ 1935 default: 1936 panic("%s: Unknown state %d", 1937 device_xname(sc->sc_dev), sc->transfer_state); 1938 } 1939 } 1940 1941 usbd_status 1942 umass_bbb_get_max_lun(struct umass_softc *sc, uint8_t *maxlun) 1943 { 1944 UMASSHIST_FUNC(); UMASSHIST_CALLED(); 1945 usb_device_request_t req; 1946 usbd_status err; 1947 1948 *maxlun = 0; /* Default to 0. */ 1949 1950 DPRINTFM(UDMASS_BBB, "sc %#jx: Get Max Lun", (uintptr_t)sc, 0, 0, 0); 1951 1952 /* The Get Max Lun command is a class-specific request. */ 1953 req.bmRequestType = UT_READ_CLASS_INTERFACE; 1954 req.bRequest = UR_BBB_GET_MAX_LUN; 1955 USETW(req.wValue, 0); 1956 USETW(req.wIndex, sc->sc_ifaceno); 1957 USETW(req.wLength, 1); 1958 1959 err = usbd_do_request_flags(sc->sc_udev, &req, maxlun, 1960 USBD_SHORT_XFER_OK, 0, USBD_DEFAULT_TIMEOUT); 1961 switch (err) { 1962 case USBD_NORMAL_COMPLETION: 1963 DPRINTFM(UDMASS_BBB, "sc %#jx: Max Lun %jd", 1964 (uintptr_t)sc, *maxlun , 0, 0); 1965 break; 1966 1967 case USBD_STALLED: 1968 /* 1969 * Device doesn't support Get Max Lun request. 1970 */ 1971 err = USBD_NORMAL_COMPLETION; 1972 DPRINTFM(UDMASS_BBB, "sc %#jx: Get Max Lun not supported", 1973 (uintptr_t)sc, 0, 0, 0); 1974 break; 1975 1976 case USBD_SHORT_XFER: 1977 /* 1978 * XXX This must mean Get Max Lun is not supported, too! 1979 */ 1980 err = USBD_NORMAL_COMPLETION; 1981 DPRINTFM(UDMASS_BBB, "sc %#jx: Get Max Lun SHORT_XFER", 1982 (uintptr_t)sc, 0, 0, 0); 1983 break; 1984 1985 default: 1986 printf("%s: Get Max Lun failed: %s\n", 1987 device_xname(sc->sc_dev), usbd_errstr(err)); 1988 /* XXX Should we port_reset the device? */ 1989 break; 1990 } 1991 1992 return err; 1993 } 1994 1995 1996 1997 1998 #ifdef UMASS_DEBUG 1999 Static void 2000 umass_bbb_dump_cbw(struct umass_softc *sc, umass_bbb_cbw_t *cbw) 2001 { 2002 UMASSHIST_FUNC(); UMASSHIST_CALLED(); 2003 int clen = cbw->bCDBLength; 2004 int dlen = UGETDW(cbw->dCBWDataTransferLength); 2005 uint8_t *c = cbw->CBWCDB; 2006 int tag = UGETDW(cbw->dCBWTag); 2007 int flags = cbw->bCBWFlags; 2008 2009 DPRINTFM(UDMASS_BBB, "sc %#jx: CBW %jd: cmdlen=%jd", 2010 (uintptr_t)sc, tag, clen, 0); 2011 DPRINTFM(UDMASS_BBB, " 0x%02jx%02jx%02jx%02jx...", 2012 c[0], c[1], c[2], c[3]); 2013 DPRINTFM(UDMASS_BBB, " 0x%02jx%02jx%02jx%02jx...", 2014 c[4], c[5], c[6], c[7]); 2015 DPRINTFM(UDMASS_BBB, " 0x%02jx%02jx...", c[8], c[9], 0, 0); 2016 DPRINTFM(UDMASS_BBB, " data = %jd bytes, flags = %jx", dlen, flags, 0, 2017 0); 2018 } 2019 2020 Static void 2021 umass_bbb_dump_csw(struct umass_softc *sc, umass_bbb_csw_t *csw) 2022 { 2023 UMASSHIST_FUNC(); UMASSHIST_CALLED(); 2024 int sig = UGETDW(csw->dCSWSignature); 2025 int tag = UGETDW(csw->dCSWTag); 2026 int res = UGETDW(csw->dCSWDataResidue); 2027 int status = csw->bCSWStatus; 2028 2029 DPRINTFM(UDMASS_BBB, "sc %#jx: CSW %jd: sig = 0x%08jx, tag = %jd", 2030 (uintptr_t)sc, (uintptr_t)csw, sig, tag); 2031 DPRINTFM(UDMASS_BBB, " res = %jd, status = 0x%02jx", 2032 res, status, 0, 0); 2033 } 2034 2035 Static void 2036 umass_dump_buffer(struct umass_softc *sc, uint8_t *buffer, int buflen, 2037 int printlen) 2038 { 2039 UMASSHIST_FUNC(); UMASSHIST_CALLED(); 2040 int i; 2041 2042 DPRINTFM(UDMASS_GEN, "sc %#jx: buffer %#jx", (uintptr_t)sc, 2043 (uintptr_t)buffer, 0, 0); 2044 for (i = 0; i < buflen && i < printlen;) { 2045 if (i + 3 < buflen && i + 3 < printlen) { 2046 DPRINTFM(UDMASS_GEN, " 0x%02jx%02jx%02jx%02jx", 2047 buffer[i], buffer[i + 1], 2048 buffer[i + 2], buffer[i + 3]); 2049 i += 4; 2050 } else if (i + 2 < buflen && i + 2 < printlen) { 2051 DPRINTFM(UDMASS_GEN, " 0x%02jx%02jx%02jx", 2052 buffer[i], buffer[i + 1], buffer[i + 2], 0); 2053 i += 3; 2054 } else if (i + 1 < buflen && i + 2 < printlen) { 2055 DPRINTFM(UDMASS_GEN, " 0x%02jx%02jx", 2056 buffer[i], buffer[i + 1], 0, 0); 2057 i += 2; 2058 } else { 2059 DPRINTFM(UDMASS_GEN, " 0x%02jx", buffer[i], 0, 0, 0); 2060 i += 1; 2061 } 2062 } 2063 } 2064 #endif 2065
Indexes created Tue Sep 30 11:09:46 GMT 2025