1 /*
2  * USB hub driver.
3  *
4  * (C) Copyright 1999 Linus Torvalds
5  * (C) Copyright 1999 Johannes Erdfelt
6  * (C) Copyright 1999 Gregory P. Smith
7  * (C) Copyright 2001 Brad Hards (bhards@bigpond.net.au)
8  *
9  */
10 
11 #include <linux/kernel.h>
12 #include <linux/errno.h>
13 #include <linux/module.h>
14 #include <linux/moduleparam.h>
15 #include <linux/completion.h>
16 #include <linux/sched.h>
17 #include <linux/list.h>
18 #include <linux/slab.h>
19 #include <linux/ioctl.h>
20 #include <linux/usb.h>
21 #include <linux/usbdevice_fs.h>
22 #include <linux/usb/hcd.h>
23 #include <linux/usb/quirks.h>
24 #include <linux/kthread.h>
25 #include <linux/mutex.h>
26 #include <linux/freezer.h>
27 
28 #include <asm/uaccess.h>
29 #include <asm/byteorder.h>
30 
31 #include "usb.h"
32 
33 /* if we are in debug mode, always announce new devices */
34 #ifdef DEBUG
35 #ifndef CONFIG_USB_ANNOUNCE_NEW_DEVICES
36 #define CONFIG_USB_ANNOUNCE_NEW_DEVICES
37 #endif
38 #endif
39 
40 struct usb_hub {
41 	struct device		*intfdev;	/* the "interface" device */
42 	struct usb_device	*hdev;
43 	struct kref		kref;
44 	struct urb		*urb;		/* for interrupt polling pipe */
45 
46 	/* buffer for urb ... with extra space in case of babble */
47 	char			(*buffer)[8];
48 	union {
49 		struct usb_hub_status	hub;
50 		struct usb_port_status	port;
51 	}			*status;	/* buffer for status reports */
52 	struct mutex		status_mutex;	/* for the status buffer */
53 
54 	int			error;		/* last reported error */
55 	int			nerrors;	/* track consecutive errors */
56 
57 	struct list_head	event_list;	/* hubs w/data or errs ready */
58 	unsigned long		event_bits[1];	/* status change bitmask */
59 	unsigned long		change_bits[1];	/* ports with logical connect
60 							status change */
61 	unsigned long		busy_bits[1];	/* ports being reset or
62 							resumed */
63 	unsigned long		removed_bits[1]; /* ports with a "removed"
64 							device present */
65 #if USB_MAXCHILDREN > 31 /* 8*sizeof(unsigned long) - 1 */
66 #error event_bits[] is too short!
67 #endif
68 
69 	struct usb_hub_descriptor *descriptor;	/* class descriptor */
70 	struct usb_tt		tt;		/* Transaction Translator */
71 
72 	unsigned		mA_per_port;	/* current for each child */
73 
74 	unsigned		limited_power:1;
75 	unsigned		quiescing:1;
76 	unsigned		disconnected:1;
77 
78 	unsigned		has_indicators:1;
79 	u8			indicator[USB_MAXCHILDREN];
80 	struct delayed_work	leds;
81 	struct delayed_work	init_work;
82 	void			**port_owners;
83 };
84 
hub_is_superspeed(struct usb_device * hdev)85 static inline int hub_is_superspeed(struct usb_device *hdev)
86 {
87 	return (hdev->descriptor.bDeviceProtocol == USB_HUB_PR_SS);
88 }
89 
90 /* Protect struct usb_device->state and ->children members
91  * Note: Both are also protected by ->dev.sem, except that ->state can
92  * change to USB_STATE_NOTATTACHED even when the semaphore isn't held. */
93 static DEFINE_SPINLOCK(device_state_lock);
94 
95 /* khubd's worklist and its lock */
96 static DEFINE_SPINLOCK(hub_event_lock);
97 static LIST_HEAD(hub_event_list);	/* List of hubs needing servicing */
98 
99 /* Wakes up khubd */
100 static DECLARE_WAIT_QUEUE_HEAD(khubd_wait);
101 
102 static struct task_struct *khubd_task;
103 
104 /* cycle leds on hubs that aren't blinking for attention */
105 static bool blinkenlights = 0;
106 module_param (blinkenlights, bool, S_IRUGO);
107 MODULE_PARM_DESC (blinkenlights, "true to cycle leds on hubs");
108 
109 /*
110  * Device SATA8000 FW1.0 from DATAST0R Technology Corp requires about
111  * 10 seconds to send reply for the initial 64-byte descriptor request.
112  */
113 /* define initial 64-byte descriptor request timeout in milliseconds */
114 static int initial_descriptor_timeout = USB_CTRL_GET_TIMEOUT;
115 module_param(initial_descriptor_timeout, int, S_IRUGO|S_IWUSR);
116 MODULE_PARM_DESC(initial_descriptor_timeout,
117 		"initial 64-byte descriptor request timeout in milliseconds "
118 		"(default 5000 - 5.0 seconds)");
119 
120 /*
121  * As of 2.6.10 we introduce a new USB device initialization scheme which
122  * closely resembles the way Windows works.  Hopefully it will be compatible
123  * with a wider range of devices than the old scheme.  However some previously
124  * working devices may start giving rise to "device not accepting address"
125  * errors; if that happens the user can try the old scheme by adjusting the
126  * following module parameters.
127  *
128  * For maximum flexibility there are two boolean parameters to control the
129  * hub driver's behavior.  On the first initialization attempt, if the
130  * "old_scheme_first" parameter is set then the old scheme will be used,
131  * otherwise the new scheme is used.  If that fails and "use_both_schemes"
132  * is set, then the driver will make another attempt, using the other scheme.
133  */
134 static bool old_scheme_first = 0;
135 module_param(old_scheme_first, bool, S_IRUGO | S_IWUSR);
136 MODULE_PARM_DESC(old_scheme_first,
137 		 "start with the old device initialization scheme");
138 
139 static bool use_both_schemes = 1;
140 module_param(use_both_schemes, bool, S_IRUGO | S_IWUSR);
141 MODULE_PARM_DESC(use_both_schemes,
142 		"try the other device initialization scheme if the "
143 		"first one fails");
144 
145 /* Mutual exclusion for EHCI CF initialization.  This interferes with
146  * port reset on some companion controllers.
147  */
148 DECLARE_RWSEM(ehci_cf_port_reset_rwsem);
149 EXPORT_SYMBOL_GPL(ehci_cf_port_reset_rwsem);
150 
151 #define HUB_DEBOUNCE_TIMEOUT	1500
152 #define HUB_DEBOUNCE_STEP	  25
153 #define HUB_DEBOUNCE_STABLE	 100
154 
155 
156 static int usb_reset_and_verify_device(struct usb_device *udev);
157 
portspeed(struct usb_hub * hub,int portstatus)158 static inline char *portspeed(struct usb_hub *hub, int portstatus)
159 {
160 	if (hub_is_superspeed(hub->hdev))
161 		return "5.0 Gb/s";
162 	if (portstatus & USB_PORT_STAT_HIGH_SPEED)
163     		return "480 Mb/s";
164 	else if (portstatus & USB_PORT_STAT_LOW_SPEED)
165 		return "1.5 Mb/s";
166 	else
167 		return "12 Mb/s";
168 }
169 
170 /* Note that hdev or one of its children must be locked! */
hdev_to_hub(struct usb_device * hdev)171 static struct usb_hub *hdev_to_hub(struct usb_device *hdev)
172 {
173 	if (!hdev || !hdev->actconfig)
174 		return NULL;
175 	return usb_get_intfdata(hdev->actconfig->interface[0]);
176 }
177 
178 /* USB 2.0 spec Section 11.24.4.5 */
get_hub_descriptor(struct usb_device * hdev,void * data)179 static int get_hub_descriptor(struct usb_device *hdev, void *data)
180 {
181 	int i, ret, size;
182 	unsigned dtype;
183 
184 	if (hub_is_superspeed(hdev)) {
185 		dtype = USB_DT_SS_HUB;
186 		size = USB_DT_SS_HUB_SIZE;
187 	} else {
188 		dtype = USB_DT_HUB;
189 		size = sizeof(struct usb_hub_descriptor);
190 	}
191 
192 	for (i = 0; i < 3; i++) {
193 		ret = usb_control_msg(hdev, usb_rcvctrlpipe(hdev, 0),
194 			USB_REQ_GET_DESCRIPTOR, USB_DIR_IN | USB_RT_HUB,
195 			dtype << 8, 0, data, size,
196 			USB_CTRL_GET_TIMEOUT);
197 		if (ret >= (USB_DT_HUB_NONVAR_SIZE + 2))
198 			return ret;
199 	}
200 	return -EINVAL;
201 }
202 
203 /*
204  * USB 2.0 spec Section 11.24.2.1
205  */
clear_hub_feature(struct usb_device * hdev,int feature)206 static int clear_hub_feature(struct usb_device *hdev, int feature)
207 {
208 	return usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
209 		USB_REQ_CLEAR_FEATURE, USB_RT_HUB, feature, 0, NULL, 0, 1000);
210 }
211 
212 /*
213  * USB 2.0 spec Section 11.24.2.2
214  */
clear_port_feature(struct usb_device * hdev,int port1,int feature)215 static int clear_port_feature(struct usb_device *hdev, int port1, int feature)
216 {
217 	return usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
218 		USB_REQ_CLEAR_FEATURE, USB_RT_PORT, feature, port1,
219 		NULL, 0, 1000);
220 }
221 
222 /*
223  * USB 2.0 spec Section 11.24.2.13
224  */
set_port_feature(struct usb_device * hdev,int port1,int feature)225 static int set_port_feature(struct usb_device *hdev, int port1, int feature)
226 {
227 	return usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
228 		USB_REQ_SET_FEATURE, USB_RT_PORT, feature, port1,
229 		NULL, 0, 1000);
230 }
231 
232 /*
233  * USB 2.0 spec Section 11.24.2.7.1.10 and table 11-7
234  * for info about using port indicators
235  */
set_port_led(struct usb_hub * hub,int port1,int selector)236 static void set_port_led(
237 	struct usb_hub *hub,
238 	int port1,
239 	int selector
240 )
241 {
242 	int status = set_port_feature(hub->hdev, (selector << 8) | port1,
243 			USB_PORT_FEAT_INDICATOR);
244 	if (status < 0)
245 		dev_dbg (hub->intfdev,
246 			"port %d indicator %s status %d\n",
247 			port1,
248 			({ char *s; switch (selector) {
249 			case HUB_LED_AMBER: s = "amber"; break;
250 			case HUB_LED_GREEN: s = "green"; break;
251 			case HUB_LED_OFF: s = "off"; break;
252 			case HUB_LED_AUTO: s = "auto"; break;
253 			default: s = "??"; break;
254 			}; s; }),
255 			status);
256 }
257 
258 #define	LED_CYCLE_PERIOD	((2*HZ)/3)
259 
led_work(struct work_struct * work)260 static void led_work (struct work_struct *work)
261 {
262 	struct usb_hub		*hub =
263 		container_of(work, struct usb_hub, leds.work);
264 	struct usb_device	*hdev = hub->hdev;
265 	unsigned		i;
266 	unsigned		changed = 0;
267 	int			cursor = -1;
268 
269 	if (hdev->state != USB_STATE_CONFIGURED || hub->quiescing)
270 		return;
271 
272 	for (i = 0; i < hub->descriptor->bNbrPorts; i++) {
273 		unsigned	selector, mode;
274 
275 		/* 30%-50% duty cycle */
276 
277 		switch (hub->indicator[i]) {
278 		/* cycle marker */
279 		case INDICATOR_CYCLE:
280 			cursor = i;
281 			selector = HUB_LED_AUTO;
282 			mode = INDICATOR_AUTO;
283 			break;
284 		/* blinking green = sw attention */
285 		case INDICATOR_GREEN_BLINK:
286 			selector = HUB_LED_GREEN;
287 			mode = INDICATOR_GREEN_BLINK_OFF;
288 			break;
289 		case INDICATOR_GREEN_BLINK_OFF:
290 			selector = HUB_LED_OFF;
291 			mode = INDICATOR_GREEN_BLINK;
292 			break;
293 		/* blinking amber = hw attention */
294 		case INDICATOR_AMBER_BLINK:
295 			selector = HUB_LED_AMBER;
296 			mode = INDICATOR_AMBER_BLINK_OFF;
297 			break;
298 		case INDICATOR_AMBER_BLINK_OFF:
299 			selector = HUB_LED_OFF;
300 			mode = INDICATOR_AMBER_BLINK;
301 			break;
302 		/* blink green/amber = reserved */
303 		case INDICATOR_ALT_BLINK:
304 			selector = HUB_LED_GREEN;
305 			mode = INDICATOR_ALT_BLINK_OFF;
306 			break;
307 		case INDICATOR_ALT_BLINK_OFF:
308 			selector = HUB_LED_AMBER;
309 			mode = INDICATOR_ALT_BLINK;
310 			break;
311 		default:
312 			continue;
313 		}
314 		if (selector != HUB_LED_AUTO)
315 			changed = 1;
316 		set_port_led(hub, i + 1, selector);
317 		hub->indicator[i] = mode;
318 	}
319 	if (!changed && blinkenlights) {
320 		cursor++;
321 		cursor %= hub->descriptor->bNbrPorts;
322 		set_port_led(hub, cursor + 1, HUB_LED_GREEN);
323 		hub->indicator[cursor] = INDICATOR_CYCLE;
324 		changed++;
325 	}
326 	if (changed)
327 		schedule_delayed_work(&hub->leds, LED_CYCLE_PERIOD);
328 }
329 
330 /* use a short timeout for hub/port status fetches */
331 #define	USB_STS_TIMEOUT		1000
332 #define	USB_STS_RETRIES		5
333 
334 /*
335  * USB 2.0 spec Section 11.24.2.6
336  */
get_hub_status(struct usb_device * hdev,struct usb_hub_status * data)337 static int get_hub_status(struct usb_device *hdev,
338 		struct usb_hub_status *data)
339 {
340 	int i, status = -ETIMEDOUT;
341 
342 	for (i = 0; i < USB_STS_RETRIES &&
343 			(status == -ETIMEDOUT || status == -EPIPE); i++) {
344 		status = usb_control_msg(hdev, usb_rcvctrlpipe(hdev, 0),
345 			USB_REQ_GET_STATUS, USB_DIR_IN | USB_RT_HUB, 0, 0,
346 			data, sizeof(*data), USB_STS_TIMEOUT);
347 	}
348 	return status;
349 }
350 
351 /*
352  * USB 2.0 spec Section 11.24.2.7
353  */
get_port_status(struct usb_device * hdev,int port1,struct usb_port_status * data)354 static int get_port_status(struct usb_device *hdev, int port1,
355 		struct usb_port_status *data)
356 {
357 	int i, status = -ETIMEDOUT;
358 
359 	for (i = 0; i < USB_STS_RETRIES &&
360 			(status == -ETIMEDOUT || status == -EPIPE); i++) {
361 		status = usb_control_msg(hdev, usb_rcvctrlpipe(hdev, 0),
362 			USB_REQ_GET_STATUS, USB_DIR_IN | USB_RT_PORT, 0, port1,
363 			data, sizeof(*data), USB_STS_TIMEOUT);
364 	}
365 	return status;
366 }
367 
hub_port_status(struct usb_hub * hub,int port1,u16 * status,u16 * change)368 static int hub_port_status(struct usb_hub *hub, int port1,
369 		u16 *status, u16 *change)
370 {
371 	int ret;
372 
373 	mutex_lock(&hub->status_mutex);
374 	ret = get_port_status(hub->hdev, port1, &hub->status->port);
375 	if (ret < 4) {
376 		dev_err(hub->intfdev,
377 			"%s failed (err = %d)\n", __func__, ret);
378 		if (ret >= 0)
379 			ret = -EIO;
380 	} else {
381 		*status = le16_to_cpu(hub->status->port.wPortStatus);
382 		*change = le16_to_cpu(hub->status->port.wPortChange);
383 
384 		ret = 0;
385 	}
386 	mutex_unlock(&hub->status_mutex);
387 	return ret;
388 }
389 
kick_khubd(struct usb_hub * hub)390 static void kick_khubd(struct usb_hub *hub)
391 {
392 	unsigned long	flags;
393 
394 	spin_lock_irqsave(&hub_event_lock, flags);
395 	if (!hub->disconnected && list_empty(&hub->event_list)) {
396 		list_add_tail(&hub->event_list, &hub_event_list);
397 
398 		/* Suppress autosuspend until khubd runs */
399 		usb_autopm_get_interface_no_resume(
400 				to_usb_interface(hub->intfdev));
401 		wake_up(&khubd_wait);
402 	}
403 	spin_unlock_irqrestore(&hub_event_lock, flags);
404 }
405 
usb_kick_khubd(struct usb_device * hdev)406 void usb_kick_khubd(struct usb_device *hdev)
407 {
408 	struct usb_hub *hub = hdev_to_hub(hdev);
409 
410 	if (hub)
411 		kick_khubd(hub);
412 }
413 
414 
415 /* completion function, fires on port status changes and various faults */
hub_irq(struct urb * urb)416 static void hub_irq(struct urb *urb)
417 {
418 	struct usb_hub *hub = urb->context;
419 	int status = urb->status;
420 	unsigned i;
421 	unsigned long bits;
422 
423 	switch (status) {
424 	case -ENOENT:		/* synchronous unlink */
425 	case -ECONNRESET:	/* async unlink */
426 	case -ESHUTDOWN:	/* hardware going away */
427 		return;
428 
429 	default:		/* presumably an error */
430 		/* Cause a hub reset after 10 consecutive errors */
431 		dev_dbg (hub->intfdev, "transfer --> %d\n", status);
432 		if ((++hub->nerrors < 10) || hub->error)
433 			goto resubmit;
434 		hub->error = status;
435 		/* FALL THROUGH */
436 
437 	/* let khubd handle things */
438 	case 0:			/* we got data:  port status changed */
439 		bits = 0;
440 		for (i = 0; i < urb->actual_length; ++i)
441 			bits |= ((unsigned long) ((*hub->buffer)[i]))
442 					<< (i*8);
443 		hub->event_bits[0] = bits;
444 		break;
445 	}
446 
447 	hub->nerrors = 0;
448 
449 	/* Something happened, let khubd figure it out */
450 	kick_khubd(hub);
451 
452 resubmit:
453 	if (hub->quiescing)
454 		return;
455 
456 	if ((status = usb_submit_urb (hub->urb, GFP_ATOMIC)) != 0
457 			&& status != -ENODEV && status != -EPERM)
458 		dev_err (hub->intfdev, "resubmit --> %d\n", status);
459 }
460 
461 /* USB 2.0 spec Section 11.24.2.3 */
462 static inline int
hub_clear_tt_buffer(struct usb_device * hdev,u16 devinfo,u16 tt)463 hub_clear_tt_buffer (struct usb_device *hdev, u16 devinfo, u16 tt)
464 {
465 	return usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
466 			       HUB_CLEAR_TT_BUFFER, USB_RT_PORT, devinfo,
467 			       tt, NULL, 0, 1000);
468 }
469 
470 /*
471  * enumeration blocks khubd for a long time. we use keventd instead, since
472  * long blocking there is the exception, not the rule.  accordingly, HCDs
473  * talking to TTs must queue control transfers (not just bulk and iso), so
474  * both can talk to the same hub concurrently.
475  */
hub_tt_work(struct work_struct * work)476 static void hub_tt_work(struct work_struct *work)
477 {
478 	struct usb_hub		*hub =
479 		container_of(work, struct usb_hub, tt.clear_work);
480 	unsigned long		flags;
481 	int			limit = 100;
482 
483 	spin_lock_irqsave (&hub->tt.lock, flags);
484 	while (--limit && !list_empty (&hub->tt.clear_list)) {
485 		struct list_head	*next;
486 		struct usb_tt_clear	*clear;
487 		struct usb_device	*hdev = hub->hdev;
488 		const struct hc_driver	*drv;
489 		int			status;
490 
491 		next = hub->tt.clear_list.next;
492 		clear = list_entry (next, struct usb_tt_clear, clear_list);
493 		list_del (&clear->clear_list);
494 
495 		/* drop lock so HCD can concurrently report other TT errors */
496 		spin_unlock_irqrestore (&hub->tt.lock, flags);
497 		status = hub_clear_tt_buffer (hdev, clear->devinfo, clear->tt);
498 		if (status)
499 			dev_err (&hdev->dev,
500 				"clear tt %d (%04x) error %d\n",
501 				clear->tt, clear->devinfo, status);
502 
503 		/* Tell the HCD, even if the operation failed */
504 		drv = clear->hcd->driver;
505 		if (drv->clear_tt_buffer_complete)
506 			(drv->clear_tt_buffer_complete)(clear->hcd, clear->ep);
507 
508 		kfree(clear);
509 		spin_lock_irqsave(&hub->tt.lock, flags);
510 	}
511 	spin_unlock_irqrestore (&hub->tt.lock, flags);
512 }
513 
514 /**
515  * usb_hub_clear_tt_buffer - clear control/bulk TT state in high speed hub
516  * @urb: an URB associated with the failed or incomplete split transaction
517  *
518  * High speed HCDs use this to tell the hub driver that some split control or
519  * bulk transaction failed in a way that requires clearing internal state of
520  * a transaction translator.  This is normally detected (and reported) from
521  * interrupt context.
522  *
523  * It may not be possible for that hub to handle additional full (or low)
524  * speed transactions until that state is fully cleared out.
525  */
usb_hub_clear_tt_buffer(struct urb * urb)526 int usb_hub_clear_tt_buffer(struct urb *urb)
527 {
528 	struct usb_device	*udev = urb->dev;
529 	int			pipe = urb->pipe;
530 	struct usb_tt		*tt = udev->tt;
531 	unsigned long		flags;
532 	struct usb_tt_clear	*clear;
533 
534 	/* we've got to cope with an arbitrary number of pending TT clears,
535 	 * since each TT has "at least two" buffers that can need it (and
536 	 * there can be many TTs per hub).  even if they're uncommon.
537 	 */
538 	if ((clear = kmalloc (sizeof *clear, GFP_ATOMIC)) == NULL) {
539 		dev_err (&udev->dev, "can't save CLEAR_TT_BUFFER state\n");
540 		/* FIXME recover somehow ... RESET_TT? */
541 		return -ENOMEM;
542 	}
543 
544 	/* info that CLEAR_TT_BUFFER needs */
545 	clear->tt = tt->multi ? udev->ttport : 1;
546 	clear->devinfo = usb_pipeendpoint (pipe);
547 	clear->devinfo |= udev->devnum << 4;
548 	clear->devinfo |= usb_pipecontrol (pipe)
549 			? (USB_ENDPOINT_XFER_CONTROL << 11)
550 			: (USB_ENDPOINT_XFER_BULK << 11);
551 	if (usb_pipein (pipe))
552 		clear->devinfo |= 1 << 15;
553 
554 	/* info for completion callback */
555 	clear->hcd = bus_to_hcd(udev->bus);
556 	clear->ep = urb->ep;
557 
558 	/* tell keventd to clear state for this TT */
559 	spin_lock_irqsave (&tt->lock, flags);
560 	list_add_tail (&clear->clear_list, &tt->clear_list);
561 	schedule_work(&tt->clear_work);
562 	spin_unlock_irqrestore (&tt->lock, flags);
563 	return 0;
564 }
565 EXPORT_SYMBOL_GPL(usb_hub_clear_tt_buffer);
566 
567 /* If do_delay is false, return the number of milliseconds the caller
568  * needs to delay.
569  */
hub_power_on(struct usb_hub * hub,bool do_delay)570 static unsigned hub_power_on(struct usb_hub *hub, bool do_delay)
571 {
572 	int port1;
573 	unsigned pgood_delay = hub->descriptor->bPwrOn2PwrGood * 2;
574 	unsigned delay;
575 	u16 wHubCharacteristics =
576 			le16_to_cpu(hub->descriptor->wHubCharacteristics);
577 
578 	/* Enable power on each port.  Some hubs have reserved values
579 	 * of LPSM (> 2) in their descriptors, even though they are
580 	 * USB 2.0 hubs.  Some hubs do not implement port-power switching
581 	 * but only emulate it.  In all cases, the ports won't work
582 	 * unless we send these messages to the hub.
583 	 */
584 	if ((wHubCharacteristics & HUB_CHAR_LPSM) < 2)
585 		dev_dbg(hub->intfdev, "enabling power on all ports\n");
586 	else
587 		dev_dbg(hub->intfdev, "trying to enable port power on "
588 				"non-switchable hub\n");
589 	for (port1 = 1; port1 <= hub->descriptor->bNbrPorts; port1++)
590 		set_port_feature(hub->hdev, port1, USB_PORT_FEAT_POWER);
591 
592 	/* Wait at least 100 msec for power to become stable */
593 	delay = max(pgood_delay, (unsigned) 100);
594 	if (do_delay)
595 		msleep(delay);
596 	return delay;
597 }
598 
hub_hub_status(struct usb_hub * hub,u16 * status,u16 * change)599 static int hub_hub_status(struct usb_hub *hub,
600 		u16 *status, u16 *change)
601 {
602 	int ret;
603 
604 	mutex_lock(&hub->status_mutex);
605 	ret = get_hub_status(hub->hdev, &hub->status->hub);
606 	if (ret < 0)
607 		dev_err (hub->intfdev,
608 			"%s failed (err = %d)\n", __func__, ret);
609 	else {
610 		*status = le16_to_cpu(hub->status->hub.wHubStatus);
611 		*change = le16_to_cpu(hub->status->hub.wHubChange);
612 		ret = 0;
613 	}
614 	mutex_unlock(&hub->status_mutex);
615 	return ret;
616 }
617 
hub_port_disable(struct usb_hub * hub,int port1,int set_state)618 static int hub_port_disable(struct usb_hub *hub, int port1, int set_state)
619 {
620 	struct usb_device *hdev = hub->hdev;
621 	int ret = 0;
622 
623 	if (hdev->children[port1-1] && set_state)
624 		usb_set_device_state(hdev->children[port1-1],
625 				USB_STATE_NOTATTACHED);
626 	if (!hub->error && !hub_is_superspeed(hub->hdev))
627 		ret = clear_port_feature(hdev, port1, USB_PORT_FEAT_ENABLE);
628 	if (ret)
629 		dev_err(hub->intfdev, "cannot disable port %d (err = %d)\n",
630 				port1, ret);
631 	return ret;
632 }
633 
634 /*
635  * Disable a port and mark a logical connect-change event, so that some
636  * time later khubd will disconnect() any existing usb_device on the port
637  * and will re-enumerate if there actually is a device attached.
638  */
hub_port_logical_disconnect(struct usb_hub * hub,int port1)639 static void hub_port_logical_disconnect(struct usb_hub *hub, int port1)
640 {
641 	dev_dbg(hub->intfdev, "logical disconnect on port %d\n", port1);
642 	hub_port_disable(hub, port1, 1);
643 
644 	/* FIXME let caller ask to power down the port:
645 	 *  - some devices won't enumerate without a VBUS power cycle
646 	 *  - SRP saves power that way
647 	 *  - ... new call, TBD ...
648 	 * That's easy if this hub can switch power per-port, and
649 	 * khubd reactivates the port later (timer, SRP, etc).
650 	 * Powerdown must be optional, because of reset/DFU.
651 	 */
652 
653 	set_bit(port1, hub->change_bits);
654  	kick_khubd(hub);
655 }
656 
657 /**
658  * usb_remove_device - disable a device's port on its parent hub
659  * @udev: device to be disabled and removed
660  * Context: @udev locked, must be able to sleep.
661  *
662  * After @udev's port has been disabled, khubd is notified and it will
663  * see that the device has been disconnected.  When the device is
664  * physically unplugged and something is plugged in, the events will
665  * be received and processed normally.
666  */
usb_remove_device(struct usb_device * udev)667 int usb_remove_device(struct usb_device *udev)
668 {
669 	struct usb_hub *hub;
670 	struct usb_interface *intf;
671 
672 	if (!udev->parent)	/* Can't remove a root hub */
673 		return -EINVAL;
674 	hub = hdev_to_hub(udev->parent);
675 	intf = to_usb_interface(hub->intfdev);
676 
677 	usb_autopm_get_interface(intf);
678 	set_bit(udev->portnum, hub->removed_bits);
679 	hub_port_logical_disconnect(hub, udev->portnum);
680 	usb_autopm_put_interface(intf);
681 	return 0;
682 }
683 
684 enum hub_activation_type {
685 	HUB_INIT, HUB_INIT2, HUB_INIT3,		/* INITs must come first */
686 	HUB_POST_RESET, HUB_RESUME, HUB_RESET_RESUME,
687 };
688 
689 static void hub_init_func2(struct work_struct *ws);
690 static void hub_init_func3(struct work_struct *ws);
691 
hub_activate(struct usb_hub * hub,enum hub_activation_type type)692 static void hub_activate(struct usb_hub *hub, enum hub_activation_type type)
693 {
694 	struct usb_device *hdev = hub->hdev;
695 	struct usb_hcd *hcd;
696 	int ret;
697 	int port1;
698 	int status;
699 	bool need_debounce_delay = false;
700 	unsigned delay;
701 
702 	/* Continue a partial initialization */
703 	if (type == HUB_INIT2)
704 		goto init2;
705 	if (type == HUB_INIT3)
706 		goto init3;
707 
708 	/* The superspeed hub except for root hub has to use Hub Depth
709 	 * value as an offset into the route string to locate the bits
710 	 * it uses to determine the downstream port number. So hub driver
711 	 * should send a set hub depth request to superspeed hub after
712 	 * the superspeed hub is set configuration in initialization or
713 	 * reset procedure.
714 	 *
715 	 * After a resume, port power should still be on.
716 	 * For any other type of activation, turn it on.
717 	 */
718 	if (type != HUB_RESUME) {
719 		if (hdev->parent && hub_is_superspeed(hdev)) {
720 			ret = usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
721 					HUB_SET_DEPTH, USB_RT_HUB,
722 					hdev->level - 1, 0, NULL, 0,
723 					USB_CTRL_SET_TIMEOUT);
724 			if (ret < 0)
725 				dev_err(hub->intfdev,
726 						"set hub depth failed\n");
727 		}
728 
729 		/* Speed up system boot by using a delayed_work for the
730 		 * hub's initial power-up delays.  This is pretty awkward
731 		 * and the implementation looks like a home-brewed sort of
732 		 * setjmp/longjmp, but it saves at least 100 ms for each
733 		 * root hub (assuming usbcore is compiled into the kernel
734 		 * rather than as a module).  It adds up.
735 		 *
736 		 * This can't be done for HUB_RESUME or HUB_RESET_RESUME
737 		 * because for those activation types the ports have to be
738 		 * operational when we return.  In theory this could be done
739 		 * for HUB_POST_RESET, but it's easier not to.
740 		 */
741 		if (type == HUB_INIT) {
742 			delay = hub_power_on(hub, false);
743 			PREPARE_DELAYED_WORK(&hub->init_work, hub_init_func2);
744 			schedule_delayed_work(&hub->init_work,
745 					msecs_to_jiffies(delay));
746 
747 			/* Suppress autosuspend until init is done */
748 			usb_autopm_get_interface_no_resume(
749 					to_usb_interface(hub->intfdev));
750 			return;		/* Continues at init2: below */
751 		} else if (type == HUB_RESET_RESUME) {
752 			/* The internal host controller state for the hub device
753 			 * may be gone after a host power loss on system resume.
754 			 * Update the device's info so the HW knows it's a hub.
755 			 */
756 			hcd = bus_to_hcd(hdev->bus);
757 			if (hcd->driver->update_hub_device) {
758 				ret = hcd->driver->update_hub_device(hcd, hdev,
759 						&hub->tt, GFP_NOIO);
760 				if (ret < 0) {
761 					dev_err(hub->intfdev, "Host not "
762 							"accepting hub info "
763 							"update.\n");
764 					dev_err(hub->intfdev, "LS/FS devices "
765 							"and hubs may not work "
766 							"under this hub\n.");
767 				}
768 			}
769 			hub_power_on(hub, true);
770 		} else {
771 			hub_power_on(hub, true);
772 		}
773 	}
774  init2:
775 
776 	/* Check each port and set hub->change_bits to let khubd know
777 	 * which ports need attention.
778 	 */
779 	for (port1 = 1; port1 <= hdev->maxchild; ++port1) {
780 		struct usb_device *udev = hdev->children[port1-1];
781 		u16 portstatus, portchange;
782 
783 		portstatus = portchange = 0;
784 		status = hub_port_status(hub, port1, &portstatus, &portchange);
785 		if (udev || (portstatus & USB_PORT_STAT_CONNECTION))
786 			dev_dbg(hub->intfdev,
787 					"port %d: status %04x change %04x\n",
788 					port1, portstatus, portchange);
789 
790 		/* After anything other than HUB_RESUME (i.e., initialization
791 		 * or any sort of reset), every port should be disabled.
792 		 * Unconnected ports should likewise be disabled (paranoia),
793 		 * and so should ports for which we have no usb_device.
794 		 */
795 		if ((portstatus & USB_PORT_STAT_ENABLE) && (
796 				type != HUB_RESUME ||
797 				!(portstatus & USB_PORT_STAT_CONNECTION) ||
798 				!udev ||
799 				udev->state == USB_STATE_NOTATTACHED)) {
800 			/*
801 			 * USB3 protocol ports will automatically transition
802 			 * to Enabled state when detect an USB3.0 device attach.
803 			 * Do not disable USB3 protocol ports.
804 			 */
805 			if (!hub_is_superspeed(hdev)) {
806 				clear_port_feature(hdev, port1,
807 						   USB_PORT_FEAT_ENABLE);
808 				portstatus &= ~USB_PORT_STAT_ENABLE;
809 			} else {
810 				/* Pretend that power was lost for USB3 devs */
811 				portstatus &= ~USB_PORT_STAT_ENABLE;
812 			}
813 		}
814 
815 		/* Clear status-change flags; we'll debounce later */
816 		if (portchange & USB_PORT_STAT_C_CONNECTION) {
817 			need_debounce_delay = true;
818 			clear_port_feature(hub->hdev, port1,
819 					USB_PORT_FEAT_C_CONNECTION);
820 		}
821 		if (portchange & USB_PORT_STAT_C_ENABLE) {
822 			need_debounce_delay = true;
823 			clear_port_feature(hub->hdev, port1,
824 					USB_PORT_FEAT_C_ENABLE);
825 		}
826 		if (portchange & USB_PORT_STAT_C_LINK_STATE) {
827 			need_debounce_delay = true;
828 			clear_port_feature(hub->hdev, port1,
829 					USB_PORT_FEAT_C_PORT_LINK_STATE);
830 		}
831 
832 		if ((portchange & USB_PORT_STAT_C_BH_RESET) &&
833 				hub_is_superspeed(hub->hdev)) {
834 			need_debounce_delay = true;
835 			clear_port_feature(hub->hdev, port1,
836 					USB_PORT_FEAT_C_BH_PORT_RESET);
837 		}
838 		/* We can forget about a "removed" device when there's a
839 		 * physical disconnect or the connect status changes.
840 		 */
841 		if (!(portstatus & USB_PORT_STAT_CONNECTION) ||
842 				(portchange & USB_PORT_STAT_C_CONNECTION))
843 			clear_bit(port1, hub->removed_bits);
844 
845 		if (!udev || udev->state == USB_STATE_NOTATTACHED) {
846 			/* Tell khubd to disconnect the device or
847 			 * check for a new connection
848 			 */
849 			if (udev || (portstatus & USB_PORT_STAT_CONNECTION))
850 				set_bit(port1, hub->change_bits);
851 
852 		} else if (portstatus & USB_PORT_STAT_ENABLE) {
853 			/* The power session apparently survived the resume.
854 			 * If there was an overcurrent or suspend change
855 			 * (i.e., remote wakeup request), have khubd
856 			 * take care of it.
857 			 */
858 			if (portchange)
859 				set_bit(port1, hub->change_bits);
860 
861 		} else if (udev->persist_enabled) {
862 #ifdef CONFIG_PM
863 			udev->reset_resume = 1;
864 #endif
865 			set_bit(port1, hub->change_bits);
866 
867 		} else {
868 			/* The power session is gone; tell khubd */
869 			usb_set_device_state(udev, USB_STATE_NOTATTACHED);
870 			set_bit(port1, hub->change_bits);
871 		}
872 	}
873 
874 	/* If no port-status-change flags were set, we don't need any
875 	 * debouncing.  If flags were set we can try to debounce the
876 	 * ports all at once right now, instead of letting khubd do them
877 	 * one at a time later on.
878 	 *
879 	 * If any port-status changes do occur during this delay, khubd
880 	 * will see them later and handle them normally.
881 	 */
882 	if (need_debounce_delay) {
883 		delay = HUB_DEBOUNCE_STABLE;
884 
885 		/* Don't do a long sleep inside a workqueue routine */
886 		if (type == HUB_INIT2) {
887 			PREPARE_DELAYED_WORK(&hub->init_work, hub_init_func3);
888 			schedule_delayed_work(&hub->init_work,
889 					msecs_to_jiffies(delay));
890 			return;		/* Continues at init3: below */
891 		} else {
892 			msleep(delay);
893 		}
894 	}
895  init3:
896 	hub->quiescing = 0;
897 
898 	status = usb_submit_urb(hub->urb, GFP_NOIO);
899 	if (status < 0)
900 		dev_err(hub->intfdev, "activate --> %d\n", status);
901 	if (hub->has_indicators && blinkenlights)
902 		schedule_delayed_work(&hub->leds, LED_CYCLE_PERIOD);
903 
904 	/* Scan all ports that need attention */
905 	kick_khubd(hub);
906 
907 	/* Allow autosuspend if it was suppressed */
908 	if (type <= HUB_INIT3)
909 		usb_autopm_put_interface_async(to_usb_interface(hub->intfdev));
910 }
911 
912 /* Implement the continuations for the delays above */
hub_init_func2(struct work_struct * ws)913 static void hub_init_func2(struct work_struct *ws)
914 {
915 	struct usb_hub *hub = container_of(ws, struct usb_hub, init_work.work);
916 
917 	hub_activate(hub, HUB_INIT2);
918 }
919 
hub_init_func3(struct work_struct * ws)920 static void hub_init_func3(struct work_struct *ws)
921 {
922 	struct usb_hub *hub = container_of(ws, struct usb_hub, init_work.work);
923 
924 	hub_activate(hub, HUB_INIT3);
925 }
926 
927 enum hub_quiescing_type {
928 	HUB_DISCONNECT, HUB_PRE_RESET, HUB_SUSPEND
929 };
930 
hub_quiesce(struct usb_hub * hub,enum hub_quiescing_type type)931 static void hub_quiesce(struct usb_hub *hub, enum hub_quiescing_type type)
932 {
933 	struct usb_device *hdev = hub->hdev;
934 	int i;
935 
936 	cancel_delayed_work_sync(&hub->init_work);
937 
938 	/* khubd and related activity won't re-trigger */
939 	hub->quiescing = 1;
940 
941 	if (type != HUB_SUSPEND) {
942 		/* Disconnect all the children */
943 		for (i = 0; i < hdev->maxchild; ++i) {
944 			if (hdev->children[i])
945 				usb_disconnect(&hdev->children[i]);
946 		}
947 	}
948 
949 	/* Stop khubd and related activity */
950 	usb_kill_urb(hub->urb);
951 	if (hub->has_indicators)
952 		cancel_delayed_work_sync(&hub->leds);
953 	if (hub->tt.hub)
954 		cancel_work_sync(&hub->tt.clear_work);
955 }
956 
957 /* caller has locked the hub device */
hub_pre_reset(struct usb_interface * intf)958 static int hub_pre_reset(struct usb_interface *intf)
959 {
960 	struct usb_hub *hub = usb_get_intfdata(intf);
961 
962 	hub_quiesce(hub, HUB_PRE_RESET);
963 	return 0;
964 }
965 
966 /* caller has locked the hub device */
hub_post_reset(struct usb_interface * intf)967 static int hub_post_reset(struct usb_interface *intf)
968 {
969 	struct usb_hub *hub = usb_get_intfdata(intf);
970 
971 	hub_activate(hub, HUB_POST_RESET);
972 	return 0;
973 }
974 
hub_configure(struct usb_hub * hub,struct usb_endpoint_descriptor * endpoint)975 static int hub_configure(struct usb_hub *hub,
976 	struct usb_endpoint_descriptor *endpoint)
977 {
978 	struct usb_hcd *hcd;
979 	struct usb_device *hdev = hub->hdev;
980 	struct device *hub_dev = hub->intfdev;
981 	u16 hubstatus, hubchange;
982 	u16 wHubCharacteristics;
983 	unsigned int pipe;
984 	int maxp, ret;
985 	char *message = "out of memory";
986 
987 	hub->buffer = kmalloc(sizeof(*hub->buffer), GFP_KERNEL);
988 	if (!hub->buffer) {
989 		ret = -ENOMEM;
990 		goto fail;
991 	}
992 
993 	hub->status = kmalloc(sizeof(*hub->status), GFP_KERNEL);
994 	if (!hub->status) {
995 		ret = -ENOMEM;
996 		goto fail;
997 	}
998 	mutex_init(&hub->status_mutex);
999 
1000 	hub->descriptor = kmalloc(sizeof(*hub->descriptor), GFP_KERNEL);
1001 	if (!hub->descriptor) {
1002 		ret = -ENOMEM;
1003 		goto fail;
1004 	}
1005 
1006 	/* Request the entire hub descriptor.
1007 	 * hub->descriptor can handle USB_MAXCHILDREN ports,
1008 	 * but the hub can/will return fewer bytes here.
1009 	 */
1010 	ret = get_hub_descriptor(hdev, hub->descriptor);
1011 	if (ret < 0) {
1012 		message = "can't read hub descriptor";
1013 		goto fail;
1014 	} else if (hub->descriptor->bNbrPorts > USB_MAXCHILDREN) {
1015 		message = "hub has too many ports!";
1016 		ret = -ENODEV;
1017 		goto fail;
1018 	}
1019 
1020 	hdev->maxchild = hub->descriptor->bNbrPorts;
1021 	dev_info (hub_dev, "%d port%s detected\n", hdev->maxchild,
1022 		(hdev->maxchild == 1) ? "" : "s");
1023 
1024 	hub->port_owners = kzalloc(hdev->maxchild * sizeof(void *), GFP_KERNEL);
1025 	if (!hub->port_owners) {
1026 		ret = -ENOMEM;
1027 		goto fail;
1028 	}
1029 
1030 	wHubCharacteristics = le16_to_cpu(hub->descriptor->wHubCharacteristics);
1031 
1032 	/* FIXME for USB 3.0, skip for now */
1033 	if ((wHubCharacteristics & HUB_CHAR_COMPOUND) &&
1034 			!(hub_is_superspeed(hdev))) {
1035 		int	i;
1036 		char	portstr [USB_MAXCHILDREN + 1];
1037 
1038 		for (i = 0; i < hdev->maxchild; i++)
1039 			portstr[i] = hub->descriptor->u.hs.DeviceRemovable
1040 				    [((i + 1) / 8)] & (1 << ((i + 1) % 8))
1041 				? 'F' : 'R';
1042 		portstr[hdev->maxchild] = 0;
1043 		dev_dbg(hub_dev, "compound device; port removable status: %s\n", portstr);
1044 	} else
1045 		dev_dbg(hub_dev, "standalone hub\n");
1046 
1047 	switch (wHubCharacteristics & HUB_CHAR_LPSM) {
1048 	case HUB_CHAR_COMMON_LPSM:
1049 		dev_dbg(hub_dev, "ganged power switching\n");
1050 		break;
1051 	case HUB_CHAR_INDV_PORT_LPSM:
1052 		dev_dbg(hub_dev, "individual port power switching\n");
1053 		break;
1054 	case HUB_CHAR_NO_LPSM:
1055 	case HUB_CHAR_LPSM:
1056 		dev_dbg(hub_dev, "no power switching (usb 1.0)\n");
1057 		break;
1058 	}
1059 
1060 	switch (wHubCharacteristics & HUB_CHAR_OCPM) {
1061 	case HUB_CHAR_COMMON_OCPM:
1062 		dev_dbg(hub_dev, "global over-current protection\n");
1063 		break;
1064 	case HUB_CHAR_INDV_PORT_OCPM:
1065 		dev_dbg(hub_dev, "individual port over-current protection\n");
1066 		break;
1067 	case HUB_CHAR_NO_OCPM:
1068 	case HUB_CHAR_OCPM:
1069 		dev_dbg(hub_dev, "no over-current protection\n");
1070 		break;
1071 	}
1072 
1073 	spin_lock_init (&hub->tt.lock);
1074 	INIT_LIST_HEAD (&hub->tt.clear_list);
1075 	INIT_WORK(&hub->tt.clear_work, hub_tt_work);
1076 	switch (hdev->descriptor.bDeviceProtocol) {
1077 	case USB_HUB_PR_FS:
1078 		break;
1079 	case USB_HUB_PR_HS_SINGLE_TT:
1080 		dev_dbg(hub_dev, "Single TT\n");
1081 		hub->tt.hub = hdev;
1082 		break;
1083 	case USB_HUB_PR_HS_MULTI_TT:
1084 		ret = usb_set_interface(hdev, 0, 1);
1085 		if (ret == 0) {
1086 			dev_dbg(hub_dev, "TT per port\n");
1087 			hub->tt.multi = 1;
1088 		} else
1089 			dev_err(hub_dev, "Using single TT (err %d)\n",
1090 				ret);
1091 		hub->tt.hub = hdev;
1092 		break;
1093 	case USB_HUB_PR_SS:
1094 		/* USB 3.0 hubs don't have a TT */
1095 		break;
1096 	default:
1097 		dev_dbg(hub_dev, "Unrecognized hub protocol %d\n",
1098 			hdev->descriptor.bDeviceProtocol);
1099 		break;
1100 	}
1101 
1102 	/* Note 8 FS bit times == (8 bits / 12000000 bps) ~= 666ns */
1103 	switch (wHubCharacteristics & HUB_CHAR_TTTT) {
1104 		case HUB_TTTT_8_BITS:
1105 			if (hdev->descriptor.bDeviceProtocol != 0) {
1106 				hub->tt.think_time = 666;
1107 				dev_dbg(hub_dev, "TT requires at most %d "
1108 						"FS bit times (%d ns)\n",
1109 					8, hub->tt.think_time);
1110 			}
1111 			break;
1112 		case HUB_TTTT_16_BITS:
1113 			hub->tt.think_time = 666 * 2;
1114 			dev_dbg(hub_dev, "TT requires at most %d "
1115 					"FS bit times (%d ns)\n",
1116 				16, hub->tt.think_time);
1117 			break;
1118 		case HUB_TTTT_24_BITS:
1119 			hub->tt.think_time = 666 * 3;
1120 			dev_dbg(hub_dev, "TT requires at most %d "
1121 					"FS bit times (%d ns)\n",
1122 				24, hub->tt.think_time);
1123 			break;
1124 		case HUB_TTTT_32_BITS:
1125 			hub->tt.think_time = 666 * 4;
1126 			dev_dbg(hub_dev, "TT requires at most %d "
1127 					"FS bit times (%d ns)\n",
1128 				32, hub->tt.think_time);
1129 			break;
1130 	}
1131 
1132 	/* probe() zeroes hub->indicator[] */
1133 	if (wHubCharacteristics & HUB_CHAR_PORTIND) {
1134 		hub->has_indicators = 1;
1135 		dev_dbg(hub_dev, "Port indicators are supported\n");
1136 	}
1137 
1138 	dev_dbg(hub_dev, "power on to power good time: %dms\n",
1139 		hub->descriptor->bPwrOn2PwrGood * 2);
1140 
1141 	/* power budgeting mostly matters with bus-powered hubs,
1142 	 * and battery-powered root hubs (may provide just 8 mA).
1143 	 */
1144 	ret = usb_get_status(hdev, USB_RECIP_DEVICE, 0, &hubstatus);
1145 	if (ret < 2) {
1146 		message = "can't get hub status";
1147 		goto fail;
1148 	}
1149 	le16_to_cpus(&hubstatus);
1150 	if (hdev == hdev->bus->root_hub) {
1151 		if (hdev->bus_mA == 0 || hdev->bus_mA >= 500)
1152 			hub->mA_per_port = 500;
1153 		else {
1154 			hub->mA_per_port = hdev->bus_mA;
1155 			hub->limited_power = 1;
1156 		}
1157 	} else if ((hubstatus & (1 << USB_DEVICE_SELF_POWERED)) == 0) {
1158 		dev_dbg(hub_dev, "hub controller current requirement: %dmA\n",
1159 			hub->descriptor->bHubContrCurrent);
1160 		hub->limited_power = 1;
1161 		if (hdev->maxchild > 0) {
1162 			int remaining = hdev->bus_mA -
1163 					hub->descriptor->bHubContrCurrent;
1164 
1165 			if (remaining < hdev->maxchild * 100)
1166 				dev_warn(hub_dev,
1167 					"insufficient power available "
1168 					"to use all downstream ports\n");
1169 			hub->mA_per_port = 100;		/* 7.2.1.1 */
1170 		}
1171 	} else {	/* Self-powered external hub */
1172 		/* FIXME: What about battery-powered external hubs that
1173 		 * provide less current per port? */
1174 		hub->mA_per_port = 500;
1175 	}
1176 	if (hub->mA_per_port < 500)
1177 		dev_dbg(hub_dev, "%umA bus power budget for each child\n",
1178 				hub->mA_per_port);
1179 
1180 	/* Update the HCD's internal representation of this hub before khubd
1181 	 * starts getting port status changes for devices under the hub.
1182 	 */
1183 	hcd = bus_to_hcd(hdev->bus);
1184 	if (hcd->driver->update_hub_device) {
1185 		ret = hcd->driver->update_hub_device(hcd, hdev,
1186 				&hub->tt, GFP_KERNEL);
1187 		if (ret < 0) {
1188 			message = "can't update HCD hub info";
1189 			goto fail;
1190 		}
1191 	}
1192 
1193 	ret = hub_hub_status(hub, &hubstatus, &hubchange);
1194 	if (ret < 0) {
1195 		message = "can't get hub status";
1196 		goto fail;
1197 	}
1198 
1199 	/* local power status reports aren't always correct */
1200 	if (hdev->actconfig->desc.bmAttributes & USB_CONFIG_ATT_SELFPOWER)
1201 		dev_dbg(hub_dev, "local power source is %s\n",
1202 			(hubstatus & HUB_STATUS_LOCAL_POWER)
1203 			? "lost (inactive)" : "good");
1204 
1205 	if ((wHubCharacteristics & HUB_CHAR_OCPM) == 0)
1206 		dev_dbg(hub_dev, "%sover-current condition exists\n",
1207 			(hubstatus & HUB_STATUS_OVERCURRENT) ? "" : "no ");
1208 
1209 	/* set up the interrupt endpoint
1210 	 * We use the EP's maxpacket size instead of (PORTS+1+7)/8
1211 	 * bytes as USB2.0[11.12.3] says because some hubs are known
1212 	 * to send more data (and thus cause overflow). For root hubs,
1213 	 * maxpktsize is defined in hcd.c's fake endpoint descriptors
1214 	 * to be big enough for at least USB_MAXCHILDREN ports. */
1215 	pipe = usb_rcvintpipe(hdev, endpoint->bEndpointAddress);
1216 	maxp = usb_maxpacket(hdev, pipe, usb_pipeout(pipe));
1217 
1218 	if (maxp > sizeof(*hub->buffer))
1219 		maxp = sizeof(*hub->buffer);
1220 
1221 	hub->urb = usb_alloc_urb(0, GFP_KERNEL);
1222 	if (!hub->urb) {
1223 		ret = -ENOMEM;
1224 		goto fail;
1225 	}
1226 
1227 	usb_fill_int_urb(hub->urb, hdev, pipe, *hub->buffer, maxp, hub_irq,
1228 		hub, endpoint->bInterval);
1229 
1230 	/* maybe cycle the hub leds */
1231 	if (hub->has_indicators && blinkenlights)
1232 		hub->indicator [0] = INDICATOR_CYCLE;
1233 
1234 	hub_activate(hub, HUB_INIT);
1235 	return 0;
1236 
1237 fail:
1238 	dev_err (hub_dev, "config failed, %s (err %d)\n",
1239 			message, ret);
1240 	/* hub_disconnect() frees urb and descriptor */
1241 	return ret;
1242 }
1243 
hub_release(struct kref * kref)1244 static void hub_release(struct kref *kref)
1245 {
1246 	struct usb_hub *hub = container_of(kref, struct usb_hub, kref);
1247 
1248 	usb_put_intf(to_usb_interface(hub->intfdev));
1249 	kfree(hub);
1250 }
1251 
1252 static unsigned highspeed_hubs;
1253 
hub_disconnect(struct usb_interface * intf)1254 static void hub_disconnect(struct usb_interface *intf)
1255 {
1256 	struct usb_hub *hub = usb_get_intfdata (intf);
1257 
1258 	/* Take the hub off the event list and don't let it be added again */
1259 	spin_lock_irq(&hub_event_lock);
1260 	if (!list_empty(&hub->event_list)) {
1261 		list_del_init(&hub->event_list);
1262 		usb_autopm_put_interface_no_suspend(intf);
1263 	}
1264 	hub->disconnected = 1;
1265 	spin_unlock_irq(&hub_event_lock);
1266 
1267 	/* Disconnect all children and quiesce the hub */
1268 	hub->error = 0;
1269 	hub_quiesce(hub, HUB_DISCONNECT);
1270 
1271 	usb_set_intfdata (intf, NULL);
1272 	hub->hdev->maxchild = 0;
1273 
1274 	if (hub->hdev->speed == USB_SPEED_HIGH)
1275 		highspeed_hubs--;
1276 
1277 	usb_free_urb(hub->urb);
1278 	kfree(hub->port_owners);
1279 	kfree(hub->descriptor);
1280 	kfree(hub->status);
1281 	kfree(hub->buffer);
1282 
1283 	kref_put(&hub->kref, hub_release);
1284 }
1285 
hub_probe(struct usb_interface * intf,const struct usb_device_id * id)1286 static int hub_probe(struct usb_interface *intf, const struct usb_device_id *id)
1287 {
1288 	struct usb_host_interface *desc;
1289 	struct usb_endpoint_descriptor *endpoint;
1290 	struct usb_device *hdev;
1291 	struct usb_hub *hub;
1292 
1293 	desc = intf->cur_altsetting;
1294 	hdev = interface_to_usbdev(intf);
1295 
1296 	/* Hubs have proper suspend/resume support.  USB 3.0 device suspend is
1297 	 * different from USB 2.0/1.1 device suspend, and unfortunately we
1298 	 * don't support it yet.  So leave autosuspend disabled for USB 3.0
1299 	 * external hubs for now.  Enable autosuspend for USB 3.0 roothubs,
1300 	 * since that isn't a "real" hub.
1301 	 */
1302 	if (!hub_is_superspeed(hdev) || !hdev->parent)
1303 		usb_enable_autosuspend(hdev);
1304 
1305 	if (hdev->level == MAX_TOPO_LEVEL) {
1306 		dev_err(&intf->dev,
1307 			"Unsupported bus topology: hub nested too deep\n");
1308 		return -E2BIG;
1309 	}
1310 
1311 #ifdef	CONFIG_USB_OTG_BLACKLIST_HUB
1312 	if (hdev->parent) {
1313 		dev_warn(&intf->dev, "ignoring external hub\n");
1314 		return -ENODEV;
1315 	}
1316 #endif
1317 
1318 	/* Some hubs have a subclass of 1, which AFAICT according to the */
1319 	/*  specs is not defined, but it works */
1320 	if ((desc->desc.bInterfaceSubClass != 0) &&
1321 	    (desc->desc.bInterfaceSubClass != 1)) {
1322 descriptor_error:
1323 		dev_err (&intf->dev, "bad descriptor, ignoring hub\n");
1324 		return -EIO;
1325 	}
1326 
1327 	/* Multiple endpoints? What kind of mutant ninja-hub is this? */
1328 	if (desc->desc.bNumEndpoints != 1)
1329 		goto descriptor_error;
1330 
1331 	endpoint = &desc->endpoint[0].desc;
1332 
1333 	/* If it's not an interrupt in endpoint, we'd better punt! */
1334 	if (!usb_endpoint_is_int_in(endpoint))
1335 		goto descriptor_error;
1336 
1337 	/* We found a hub */
1338 	dev_info (&intf->dev, "USB hub found\n");
1339 
1340 	hub = kzalloc(sizeof(*hub), GFP_KERNEL);
1341 	if (!hub) {
1342 		dev_dbg (&intf->dev, "couldn't kmalloc hub struct\n");
1343 		return -ENOMEM;
1344 	}
1345 
1346 	kref_init(&hub->kref);
1347 	INIT_LIST_HEAD(&hub->event_list);
1348 	hub->intfdev = &intf->dev;
1349 	hub->hdev = hdev;
1350 	INIT_DELAYED_WORK(&hub->leds, led_work);
1351 	INIT_DELAYED_WORK(&hub->init_work, NULL);
1352 	usb_get_intf(intf);
1353 
1354 	usb_set_intfdata (intf, hub);
1355 	intf->needs_remote_wakeup = 1;
1356 
1357 	if (hdev->speed == USB_SPEED_HIGH)
1358 		highspeed_hubs++;
1359 
1360 	if (hub_configure(hub, endpoint) >= 0)
1361 		return 0;
1362 
1363 	hub_disconnect (intf);
1364 	return -ENODEV;
1365 }
1366 
1367 static int
hub_ioctl(struct usb_interface * intf,unsigned int code,void * user_data)1368 hub_ioctl(struct usb_interface *intf, unsigned int code, void *user_data)
1369 {
1370 	struct usb_device *hdev = interface_to_usbdev (intf);
1371 
1372 	/* assert ifno == 0 (part of hub spec) */
1373 	switch (code) {
1374 	case USBDEVFS_HUB_PORTINFO: {
1375 		struct usbdevfs_hub_portinfo *info = user_data;
1376 		int i;
1377 
1378 		spin_lock_irq(&device_state_lock);
1379 		if (hdev->devnum <= 0)
1380 			info->nports = 0;
1381 		else {
1382 			info->nports = hdev->maxchild;
1383 			for (i = 0; i < info->nports; i++) {
1384 				if (hdev->children[i] == NULL)
1385 					info->port[i] = 0;
1386 				else
1387 					info->port[i] =
1388 						hdev->children[i]->devnum;
1389 			}
1390 		}
1391 		spin_unlock_irq(&device_state_lock);
1392 
1393 		return info->nports + 1;
1394 		}
1395 
1396 	default:
1397 		return -ENOSYS;
1398 	}
1399 }
1400 
1401 /*
1402  * Allow user programs to claim ports on a hub.  When a device is attached
1403  * to one of these "claimed" ports, the program will "own" the device.
1404  */
find_port_owner(struct usb_device * hdev,unsigned port1,void *** ppowner)1405 static int find_port_owner(struct usb_device *hdev, unsigned port1,
1406 		void ***ppowner)
1407 {
1408 	if (hdev->state == USB_STATE_NOTATTACHED)
1409 		return -ENODEV;
1410 	if (port1 == 0 || port1 > hdev->maxchild)
1411 		return -EINVAL;
1412 
1413 	/* This assumes that devices not managed by the hub driver
1414 	 * will always have maxchild equal to 0.
1415 	 */
1416 	*ppowner = &(hdev_to_hub(hdev)->port_owners[port1 - 1]);
1417 	return 0;
1418 }
1419 
1420 /* In the following three functions, the caller must hold hdev's lock */
usb_hub_claim_port(struct usb_device * hdev,unsigned port1,void * owner)1421 int usb_hub_claim_port(struct usb_device *hdev, unsigned port1, void *owner)
1422 {
1423 	int rc;
1424 	void **powner;
1425 
1426 	rc = find_port_owner(hdev, port1, &powner);
1427 	if (rc)
1428 		return rc;
1429 	if (*powner)
1430 		return -EBUSY;
1431 	*powner = owner;
1432 	return rc;
1433 }
1434 
usb_hub_release_port(struct usb_device * hdev,unsigned port1,void * owner)1435 int usb_hub_release_port(struct usb_device *hdev, unsigned port1, void *owner)
1436 {
1437 	int rc;
1438 	void **powner;
1439 
1440 	rc = find_port_owner(hdev, port1, &powner);
1441 	if (rc)
1442 		return rc;
1443 	if (*powner != owner)
1444 		return -ENOENT;
1445 	*powner = NULL;
1446 	return rc;
1447 }
1448 
usb_hub_release_all_ports(struct usb_device * hdev,void * owner)1449 void usb_hub_release_all_ports(struct usb_device *hdev, void *owner)
1450 {
1451 	int n;
1452 	void **powner;
1453 
1454 	n = find_port_owner(hdev, 1, &powner);
1455 	if (n == 0) {
1456 		for (; n < hdev->maxchild; (++n, ++powner)) {
1457 			if (*powner == owner)
1458 				*powner = NULL;
1459 		}
1460 	}
1461 }
1462 
1463 /* The caller must hold udev's lock */
usb_device_is_owned(struct usb_device * udev)1464 bool usb_device_is_owned(struct usb_device *udev)
1465 {
1466 	struct usb_hub *hub;
1467 
1468 	if (udev->state == USB_STATE_NOTATTACHED || !udev->parent)
1469 		return false;
1470 	hub = hdev_to_hub(udev->parent);
1471 	return !!hub->port_owners[udev->portnum - 1];
1472 }
1473 
1474 
recursively_mark_NOTATTACHED(struct usb_device * udev)1475 static void recursively_mark_NOTATTACHED(struct usb_device *udev)
1476 {
1477 	int i;
1478 
1479 	for (i = 0; i < udev->maxchild; ++i) {
1480 		if (udev->children[i])
1481 			recursively_mark_NOTATTACHED(udev->children[i]);
1482 	}
1483 	if (udev->state == USB_STATE_SUSPENDED)
1484 		udev->active_duration -= jiffies;
1485 	udev->state = USB_STATE_NOTATTACHED;
1486 }
1487 
1488 /**
1489  * usb_set_device_state - change a device's current state (usbcore, hcds)
1490  * @udev: pointer to device whose state should be changed
1491  * @new_state: new state value to be stored
1492  *
1493  * udev->state is _not_ fully protected by the device lock.  Although
1494  * most transitions are made only while holding the lock, the state can
1495  * can change to USB_STATE_NOTATTACHED at almost any time.  This
1496  * is so that devices can be marked as disconnected as soon as possible,
1497  * without having to wait for any semaphores to be released.  As a result,
1498  * all changes to any device's state must be protected by the
1499  * device_state_lock spinlock.
1500  *
1501  * Once a device has been added to the device tree, all changes to its state
1502  * should be made using this routine.  The state should _not_ be set directly.
1503  *
1504  * If udev->state is already USB_STATE_NOTATTACHED then no change is made.
1505  * Otherwise udev->state is set to new_state, and if new_state is
1506  * USB_STATE_NOTATTACHED then all of udev's descendants' states are also set
1507  * to USB_STATE_NOTATTACHED.
1508  */
usb_set_device_state(struct usb_device * udev,enum usb_device_state new_state)1509 void usb_set_device_state(struct usb_device *udev,
1510 		enum usb_device_state new_state)
1511 {
1512 	unsigned long flags;
1513 	int wakeup = -1;
1514 
1515 	spin_lock_irqsave(&device_state_lock, flags);
1516 	if (udev->state == USB_STATE_NOTATTACHED)
1517 		;	/* do nothing */
1518 	else if (new_state != USB_STATE_NOTATTACHED) {
1519 
1520 		/* root hub wakeup capabilities are managed out-of-band
1521 		 * and may involve silicon errata ... ignore them here.
1522 		 */
1523 		if (udev->parent) {
1524 			if (udev->state == USB_STATE_SUSPENDED
1525 					|| new_state == USB_STATE_SUSPENDED)
1526 				;	/* No change to wakeup settings */
1527 			else if (new_state == USB_STATE_CONFIGURED)
1528 				wakeup = udev->actconfig->desc.bmAttributes
1529 					 & USB_CONFIG_ATT_WAKEUP;
1530 			else
1531 				wakeup = 0;
1532 		}
1533 		if (udev->state == USB_STATE_SUSPENDED &&
1534 			new_state != USB_STATE_SUSPENDED)
1535 			udev->active_duration -= jiffies;
1536 		else if (new_state == USB_STATE_SUSPENDED &&
1537 				udev->state != USB_STATE_SUSPENDED)
1538 			udev->active_duration += jiffies;
1539 		udev->state = new_state;
1540 	} else
1541 		recursively_mark_NOTATTACHED(udev);
1542 	spin_unlock_irqrestore(&device_state_lock, flags);
1543 	if (wakeup >= 0)
1544 		device_set_wakeup_capable(&udev->dev, wakeup);
1545 }
1546 EXPORT_SYMBOL_GPL(usb_set_device_state);
1547 
1548 /*
1549  * Choose a device number.
1550  *
1551  * Device numbers are used as filenames in usbfs.  On USB-1.1 and
1552  * USB-2.0 buses they are also used as device addresses, however on
1553  * USB-3.0 buses the address is assigned by the controller hardware
1554  * and it usually is not the same as the device number.
1555  *
1556  * WUSB devices are simple: they have no hubs behind, so the mapping
1557  * device <-> virtual port number becomes 1:1. Why? to simplify the
1558  * life of the device connection logic in
1559  * drivers/usb/wusbcore/devconnect.c. When we do the initial secret
1560  * handshake we need to assign a temporary address in the unauthorized
1561  * space. For simplicity we use the first virtual port number found to
1562  * be free [drivers/usb/wusbcore/devconnect.c:wusbhc_devconnect_ack()]
1563  * and that becomes it's address [X < 128] or its unauthorized address
1564  * [X | 0x80].
1565  *
1566  * We add 1 as an offset to the one-based USB-stack port number
1567  * (zero-based wusb virtual port index) for two reasons: (a) dev addr
1568  * 0 is reserved by USB for default address; (b) Linux's USB stack
1569  * uses always #1 for the root hub of the controller. So USB stack's
1570  * port #1, which is wusb virtual-port #0 has address #2.
1571  *
1572  * Devices connected under xHCI are not as simple.  The host controller
1573  * supports virtualization, so the hardware assigns device addresses and
1574  * the HCD must setup data structures before issuing a set address
1575  * command to the hardware.
1576  */
choose_devnum(struct usb_device * udev)1577 static void choose_devnum(struct usb_device *udev)
1578 {
1579 	int		devnum;
1580 	struct usb_bus	*bus = udev->bus;
1581 
1582 	/* If khubd ever becomes multithreaded, this will need a lock */
1583 	if (udev->wusb) {
1584 		devnum = udev->portnum + 1;
1585 		BUG_ON(test_bit(devnum, bus->devmap.devicemap));
1586 	} else {
1587 		/* Try to allocate the next devnum beginning at
1588 		 * bus->devnum_next. */
1589 		devnum = find_next_zero_bit(bus->devmap.devicemap, 128,
1590 					    bus->devnum_next);
1591 		if (devnum >= 128)
1592 			devnum = find_next_zero_bit(bus->devmap.devicemap,
1593 						    128, 1);
1594 		bus->devnum_next = ( devnum >= 127 ? 1 : devnum + 1);
1595 	}
1596 	if (devnum < 128) {
1597 		set_bit(devnum, bus->devmap.devicemap);
1598 		udev->devnum = devnum;
1599 	}
1600 }
1601 
release_devnum(struct usb_device * udev)1602 static void release_devnum(struct usb_device *udev)
1603 {
1604 	if (udev->devnum > 0) {
1605 		clear_bit(udev->devnum, udev->bus->devmap.devicemap);
1606 		udev->devnum = -1;
1607 	}
1608 }
1609 
update_devnum(struct usb_device * udev,int devnum)1610 static void update_devnum(struct usb_device *udev, int devnum)
1611 {
1612 	/* The address for a WUSB device is managed by wusbcore. */
1613 	if (!udev->wusb)
1614 		udev->devnum = devnum;
1615 }
1616 
hub_free_dev(struct usb_device * udev)1617 static void hub_free_dev(struct usb_device *udev)
1618 {
1619 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
1620 
1621 	/* Root hubs aren't real devices, so don't free HCD resources */
1622 	if (hcd->driver->free_dev && udev->parent)
1623 		hcd->driver->free_dev(hcd, udev);
1624 }
1625 
1626 /**
1627  * usb_disconnect - disconnect a device (usbcore-internal)
1628  * @pdev: pointer to device being disconnected
1629  * Context: !in_interrupt ()
1630  *
1631  * Something got disconnected. Get rid of it and all of its children.
1632  *
1633  * If *pdev is a normal device then the parent hub must already be locked.
1634  * If *pdev is a root hub then this routine will acquire the
1635  * usb_bus_list_lock on behalf of the caller.
1636  *
1637  * Only hub drivers (including virtual root hub drivers for host
1638  * controllers) should ever call this.
1639  *
1640  * This call is synchronous, and may not be used in an interrupt context.
1641  */
usb_disconnect(struct usb_device ** pdev)1642 void usb_disconnect(struct usb_device **pdev)
1643 {
1644 	struct usb_device	*udev = *pdev;
1645 	int			i;
1646 	struct usb_hcd		*hcd = bus_to_hcd(udev->bus);
1647 
1648 	/* mark the device as inactive, so any further urb submissions for
1649 	 * this device (and any of its children) will fail immediately.
1650 	 * this quiesces everything except pending urbs.
1651 	 */
1652 	usb_set_device_state(udev, USB_STATE_NOTATTACHED);
1653 	dev_info(&udev->dev, "USB disconnect, device number %d\n",
1654 			udev->devnum);
1655 
1656 	usb_lock_device(udev);
1657 
1658 	/* Free up all the children before we remove this device */
1659 	for (i = 0; i < USB_MAXCHILDREN; i++) {
1660 		if (udev->children[i])
1661 			usb_disconnect(&udev->children[i]);
1662 	}
1663 
1664 	/* deallocate hcd/hardware state ... nuking all pending urbs and
1665 	 * cleaning up all state associated with the current configuration
1666 	 * so that the hardware is now fully quiesced.
1667 	 */
1668 	dev_dbg (&udev->dev, "unregistering device\n");
1669 	mutex_lock(hcd->bandwidth_mutex);
1670 	usb_disable_device(udev, 0);
1671 	mutex_unlock(hcd->bandwidth_mutex);
1672 	usb_hcd_synchronize_unlinks(udev);
1673 
1674 	usb_remove_ep_devs(&udev->ep0);
1675 	usb_unlock_device(udev);
1676 
1677 	/* Unregister the device.  The device driver is responsible
1678 	 * for de-configuring the device and invoking the remove-device
1679 	 * notifier chain (used by usbfs and possibly others).
1680 	 */
1681 	device_del(&udev->dev);
1682 
1683 	/* Free the device number and delete the parent's children[]
1684 	 * (or root_hub) pointer.
1685 	 */
1686 	release_devnum(udev);
1687 
1688 	/* Avoid races with recursively_mark_NOTATTACHED() */
1689 	spin_lock_irq(&device_state_lock);
1690 	*pdev = NULL;
1691 	spin_unlock_irq(&device_state_lock);
1692 
1693 	hub_free_dev(udev);
1694 
1695 	put_device(&udev->dev);
1696 }
1697 
1698 #ifdef CONFIG_USB_ANNOUNCE_NEW_DEVICES
show_string(struct usb_device * udev,char * id,char * string)1699 static void show_string(struct usb_device *udev, char *id, char *string)
1700 {
1701 	if (!string)
1702 		return;
1703 	dev_printk(KERN_INFO, &udev->dev, "%s: %s\n", id, string);
1704 }
1705 
announce_device(struct usb_device * udev)1706 static void announce_device(struct usb_device *udev)
1707 {
1708 	dev_info(&udev->dev, "New USB device found, idVendor=%04x, idProduct=%04x\n",
1709 		le16_to_cpu(udev->descriptor.idVendor),
1710 		le16_to_cpu(udev->descriptor.idProduct));
1711 	dev_info(&udev->dev,
1712 		"New USB device strings: Mfr=%d, Product=%d, SerialNumber=%d\n",
1713 		udev->descriptor.iManufacturer,
1714 		udev->descriptor.iProduct,
1715 		udev->descriptor.iSerialNumber);
1716 	show_string(udev, "Product", udev->product);
1717 	show_string(udev, "Manufacturer", udev->manufacturer);
1718 	show_string(udev, "SerialNumber", udev->serial);
1719 }
1720 #else
announce_device(struct usb_device * udev)1721 static inline void announce_device(struct usb_device *udev) { }
1722 #endif
1723 
1724 #ifdef	CONFIG_USB_OTG
1725 #include "otg_whitelist.h"
1726 #endif
1727 
1728 /**
1729  * usb_enumerate_device_otg - FIXME (usbcore-internal)
1730  * @udev: newly addressed device (in ADDRESS state)
1731  *
1732  * Finish enumeration for On-The-Go devices
1733  */
usb_enumerate_device_otg(struct usb_device * udev)1734 static int usb_enumerate_device_otg(struct usb_device *udev)
1735 {
1736 	int err = 0;
1737 
1738 #ifdef	CONFIG_USB_OTG
1739 	/*
1740 	 * OTG-aware devices on OTG-capable root hubs may be able to use SRP,
1741 	 * to wake us after we've powered off VBUS; and HNP, switching roles
1742 	 * "host" to "peripheral".  The OTG descriptor helps figure this out.
1743 	 */
1744 	if (!udev->bus->is_b_host
1745 			&& udev->config
1746 			&& udev->parent == udev->bus->root_hub) {
1747 		struct usb_otg_descriptor	*desc = NULL;
1748 		struct usb_bus			*bus = udev->bus;
1749 
1750 		/* descriptor may appear anywhere in config */
1751 		if (__usb_get_extra_descriptor (udev->rawdescriptors[0],
1752 					le16_to_cpu(udev->config[0].desc.wTotalLength),
1753 					USB_DT_OTG, (void **) &desc) == 0) {
1754 			if (desc->bmAttributes & USB_OTG_HNP) {
1755 				unsigned		port1 = udev->portnum;
1756 
1757 				dev_info(&udev->dev,
1758 					"Dual-Role OTG device on %sHNP port\n",
1759 					(port1 == bus->otg_port)
1760 						? "" : "non-");
1761 
1762 				/* enable HNP before suspend, it's simpler */
1763 				if (port1 == bus->otg_port)
1764 					bus->b_hnp_enable = 1;
1765 				err = usb_control_msg(udev,
1766 					usb_sndctrlpipe(udev, 0),
1767 					USB_REQ_SET_FEATURE, 0,
1768 					bus->b_hnp_enable
1769 						? USB_DEVICE_B_HNP_ENABLE
1770 						: USB_DEVICE_A_ALT_HNP_SUPPORT,
1771 					0, NULL, 0, USB_CTRL_SET_TIMEOUT);
1772 				if (err < 0) {
1773 					/* OTG MESSAGE: report errors here,
1774 					 * customize to match your product.
1775 					 */
1776 					dev_info(&udev->dev,
1777 						"can't set HNP mode: %d\n",
1778 						err);
1779 					bus->b_hnp_enable = 0;
1780 				}
1781 			}
1782 		}
1783 	}
1784 
1785 	if (!is_targeted(udev)) {
1786 
1787 		/* Maybe it can talk to us, though we can't talk to it.
1788 		 * (Includes HNP test device.)
1789 		 */
1790 		if (udev->bus->b_hnp_enable || udev->bus->is_b_host) {
1791 			err = usb_port_suspend(udev, PMSG_SUSPEND);
1792 			if (err < 0)
1793 				dev_dbg(&udev->dev, "HNP fail, %d\n", err);
1794 		}
1795 		err = -ENOTSUPP;
1796 		goto fail;
1797 	}
1798 fail:
1799 #endif
1800 	return err;
1801 }
1802 
1803 
1804 /**
1805  * usb_enumerate_device - Read device configs/intfs/otg (usbcore-internal)
1806  * @udev: newly addressed device (in ADDRESS state)
1807  *
1808  * This is only called by usb_new_device() and usb_authorize_device()
1809  * and FIXME -- all comments that apply to them apply here wrt to
1810  * environment.
1811  *
1812  * If the device is WUSB and not authorized, we don't attempt to read
1813  * the string descriptors, as they will be errored out by the device
1814  * until it has been authorized.
1815  */
usb_enumerate_device(struct usb_device * udev)1816 static int usb_enumerate_device(struct usb_device *udev)
1817 {
1818 	int err;
1819 
1820 	if (udev->config == NULL) {
1821 		err = usb_get_configuration(udev);
1822 		if (err < 0) {
1823 			dev_err(&udev->dev, "can't read configurations, error %d\n",
1824 				err);
1825 			goto fail;
1826 		}
1827 	}
1828 	if (udev->wusb == 1 && udev->authorized == 0) {
1829 		udev->product = kstrdup("n/a (unauthorized)", GFP_KERNEL);
1830 		udev->manufacturer = kstrdup("n/a (unauthorized)", GFP_KERNEL);
1831 		udev->serial = kstrdup("n/a (unauthorized)", GFP_KERNEL);
1832 	}
1833 	else {
1834 		/* read the standard strings and cache them if present */
1835 		udev->product = usb_cache_string(udev, udev->descriptor.iProduct);
1836 		udev->manufacturer = usb_cache_string(udev,
1837 						      udev->descriptor.iManufacturer);
1838 		udev->serial = usb_cache_string(udev, udev->descriptor.iSerialNumber);
1839 	}
1840 	err = usb_enumerate_device_otg(udev);
1841 fail:
1842 	return err;
1843 }
1844 
1845 
1846 /**
1847  * usb_new_device - perform initial device setup (usbcore-internal)
1848  * @udev: newly addressed device (in ADDRESS state)
1849  *
1850  * This is called with devices which have been detected but not fully
1851  * enumerated.  The device descriptor is available, but not descriptors
1852  * for any device configuration.  The caller must have locked either
1853  * the parent hub (if udev is a normal device) or else the
1854  * usb_bus_list_lock (if udev is a root hub).  The parent's pointer to
1855  * udev has already been installed, but udev is not yet visible through
1856  * sysfs or other filesystem code.
1857  *
1858  * It will return if the device is configured properly or not.  Zero if
1859  * the interface was registered with the driver core; else a negative
1860  * errno value.
1861  *
1862  * This call is synchronous, and may not be used in an interrupt context.
1863  *
1864  * Only the hub driver or root-hub registrar should ever call this.
1865  */
usb_new_device(struct usb_device * udev)1866 int usb_new_device(struct usb_device *udev)
1867 {
1868 	int err;
1869 
1870 	if (udev->parent) {
1871 		/* Initialize non-root-hub device wakeup to disabled;
1872 		 * device (un)configuration controls wakeup capable
1873 		 * sysfs power/wakeup controls wakeup enabled/disabled
1874 		 */
1875 		device_init_wakeup(&udev->dev, 0);
1876 	}
1877 
1878 	/* Tell the runtime-PM framework the device is active */
1879 	pm_runtime_set_active(&udev->dev);
1880 	pm_runtime_get_noresume(&udev->dev);
1881 	pm_runtime_use_autosuspend(&udev->dev);
1882 	pm_runtime_enable(&udev->dev);
1883 
1884 	/* By default, forbid autosuspend for all devices.  It will be
1885 	 * allowed for hubs during binding.
1886 	 */
1887 	usb_disable_autosuspend(udev);
1888 
1889 	err = usb_enumerate_device(udev);	/* Read descriptors */
1890 	if (err < 0)
1891 		goto fail;
1892 	dev_dbg(&udev->dev, "udev %d, busnum %d, minor = %d\n",
1893 			udev->devnum, udev->bus->busnum,
1894 			(((udev->bus->busnum-1) * 128) + (udev->devnum-1)));
1895 	/* export the usbdev device-node for libusb */
1896 	udev->dev.devt = MKDEV(USB_DEVICE_MAJOR,
1897 			(((udev->bus->busnum-1) * 128) + (udev->devnum-1)));
1898 
1899 	/* Tell the world! */
1900 	announce_device(udev);
1901 
1902 	device_enable_async_suspend(&udev->dev);
1903 	/* Register the device.  The device driver is responsible
1904 	 * for configuring the device and invoking the add-device
1905 	 * notifier chain (used by usbfs and possibly others).
1906 	 */
1907 	err = device_add(&udev->dev);
1908 	if (err) {
1909 		dev_err(&udev->dev, "can't device_add, error %d\n", err);
1910 		goto fail;
1911 	}
1912 
1913 	(void) usb_create_ep_devs(&udev->dev, &udev->ep0, udev);
1914 	usb_mark_last_busy(udev);
1915 	pm_runtime_put_sync_autosuspend(&udev->dev);
1916 	return err;
1917 
1918 fail:
1919 	usb_set_device_state(udev, USB_STATE_NOTATTACHED);
1920 	pm_runtime_disable(&udev->dev);
1921 	pm_runtime_set_suspended(&udev->dev);
1922 	return err;
1923 }
1924 
1925 
1926 /**
1927  * usb_deauthorize_device - deauthorize a device (usbcore-internal)
1928  * @usb_dev: USB device
1929  *
1930  * Move the USB device to a very basic state where interfaces are disabled
1931  * and the device is in fact unconfigured and unusable.
1932  *
1933  * We share a lock (that we have) with device_del(), so we need to
1934  * defer its call.
1935  */
usb_deauthorize_device(struct usb_device * usb_dev)1936 int usb_deauthorize_device(struct usb_device *usb_dev)
1937 {
1938 	usb_lock_device(usb_dev);
1939 	if (usb_dev->authorized == 0)
1940 		goto out_unauthorized;
1941 
1942 	usb_dev->authorized = 0;
1943 	usb_set_configuration(usb_dev, -1);
1944 
1945 	kfree(usb_dev->product);
1946 	usb_dev->product = kstrdup("n/a (unauthorized)", GFP_KERNEL);
1947 	kfree(usb_dev->manufacturer);
1948 	usb_dev->manufacturer = kstrdup("n/a (unauthorized)", GFP_KERNEL);
1949 	kfree(usb_dev->serial);
1950 	usb_dev->serial = kstrdup("n/a (unauthorized)", GFP_KERNEL);
1951 
1952 	usb_destroy_configuration(usb_dev);
1953 	usb_dev->descriptor.bNumConfigurations = 0;
1954 
1955 out_unauthorized:
1956 	usb_unlock_device(usb_dev);
1957 	return 0;
1958 }
1959 
1960 
usb_authorize_device(struct usb_device * usb_dev)1961 int usb_authorize_device(struct usb_device *usb_dev)
1962 {
1963 	int result = 0, c;
1964 
1965 	usb_lock_device(usb_dev);
1966 	if (usb_dev->authorized == 1)
1967 		goto out_authorized;
1968 
1969 	result = usb_autoresume_device(usb_dev);
1970 	if (result < 0) {
1971 		dev_err(&usb_dev->dev,
1972 			"can't autoresume for authorization: %d\n", result);
1973 		goto error_autoresume;
1974 	}
1975 	result = usb_get_device_descriptor(usb_dev, sizeof(usb_dev->descriptor));
1976 	if (result < 0) {
1977 		dev_err(&usb_dev->dev, "can't re-read device descriptor for "
1978 			"authorization: %d\n", result);
1979 		goto error_device_descriptor;
1980 	}
1981 
1982 	kfree(usb_dev->product);
1983 	usb_dev->product = NULL;
1984 	kfree(usb_dev->manufacturer);
1985 	usb_dev->manufacturer = NULL;
1986 	kfree(usb_dev->serial);
1987 	usb_dev->serial = NULL;
1988 
1989 	usb_dev->authorized = 1;
1990 	result = usb_enumerate_device(usb_dev);
1991 	if (result < 0)
1992 		goto error_enumerate;
1993 	/* Choose and set the configuration.  This registers the interfaces
1994 	 * with the driver core and lets interface drivers bind to them.
1995 	 */
1996 	c = usb_choose_configuration(usb_dev);
1997 	if (c >= 0) {
1998 		result = usb_set_configuration(usb_dev, c);
1999 		if (result) {
2000 			dev_err(&usb_dev->dev,
2001 				"can't set config #%d, error %d\n", c, result);
2002 			/* This need not be fatal.  The user can try to
2003 			 * set other configurations. */
2004 		}
2005 	}
2006 	dev_info(&usb_dev->dev, "authorized to connect\n");
2007 
2008 error_enumerate:
2009 error_device_descriptor:
2010 	usb_autosuspend_device(usb_dev);
2011 error_autoresume:
2012 out_authorized:
2013 	usb_unlock_device(usb_dev);	// complements locktree
2014 	return result;
2015 }
2016 
2017 
2018 /* Returns 1 if @hub is a WUSB root hub, 0 otherwise */
hub_is_wusb(struct usb_hub * hub)2019 static unsigned hub_is_wusb(struct usb_hub *hub)
2020 {
2021 	struct usb_hcd *hcd;
2022 	if (hub->hdev->parent != NULL)  /* not a root hub? */
2023 		return 0;
2024 	hcd = container_of(hub->hdev->bus, struct usb_hcd, self);
2025 	return hcd->wireless;
2026 }
2027 
2028 
2029 #define PORT_RESET_TRIES	5
2030 #define SET_ADDRESS_TRIES	2
2031 #define GET_DESCRIPTOR_TRIES	2
2032 #define SET_CONFIG_TRIES	(2 * (use_both_schemes + 1))
2033 #define USE_NEW_SCHEME(i)	((i) / 2 == (int)old_scheme_first)
2034 
2035 #define HUB_ROOT_RESET_TIME	50	/* times are in msec */
2036 #define HUB_SHORT_RESET_TIME	10
2037 #define HUB_BH_RESET_TIME	50
2038 #define HUB_LONG_RESET_TIME	200
2039 #define HUB_RESET_TIMEOUT	500
2040 
2041 static int hub_port_reset(struct usb_hub *hub, int port1,
2042 			struct usb_device *udev, unsigned int delay, bool warm);
2043 
2044 /* Is a USB 3.0 port in the Inactive state? */
hub_port_inactive(struct usb_hub * hub,u16 portstatus)2045 static bool hub_port_inactive(struct usb_hub *hub, u16 portstatus)
2046 {
2047 	return hub_is_superspeed(hub->hdev) &&
2048 		(portstatus & USB_PORT_STAT_LINK_STATE) ==
2049 		USB_SS_PORT_LS_SS_INACTIVE;
2050 }
2051 
hub_port_wait_reset(struct usb_hub * hub,int port1,struct usb_device * udev,unsigned int delay,bool warm)2052 static int hub_port_wait_reset(struct usb_hub *hub, int port1,
2053 			struct usb_device *udev, unsigned int delay, bool warm)
2054 {
2055 	int delay_time, ret;
2056 	u16 portstatus;
2057 	u16 portchange;
2058 
2059 	for (delay_time = 0;
2060 			delay_time < HUB_RESET_TIMEOUT;
2061 			delay_time += delay) {
2062 		/* wait to give the device a chance to reset */
2063 		msleep(delay);
2064 
2065 		/* read and decode port status */
2066 		ret = hub_port_status(hub, port1, &portstatus, &portchange);
2067 		if (ret < 0)
2068 			return ret;
2069 
2070 		/*
2071 		 * Some buggy devices require a warm reset to be issued even
2072 		 * when the port appears not to be connected.
2073 		 */
2074 		if (!warm) {
2075 			/*
2076 			 * Some buggy devices can cause an NEC host controller
2077 			 * to transition to the "Error" state after a hot port
2078 			 * reset.  This will show up as the port state in
2079 			 * "Inactive", and the port may also report a
2080 			 * disconnect.  Forcing a warm port reset seems to make
2081 			 * the device work.
2082 			 *
2083 			 * See https://bugzilla.kernel.org/show_bug.cgi?id=41752
2084 			 */
2085 			if (hub_port_inactive(hub, portstatus)) {
2086 				int ret;
2087 
2088 				if ((portchange & USB_PORT_STAT_C_CONNECTION))
2089 					clear_port_feature(hub->hdev, port1,
2090 							USB_PORT_FEAT_C_CONNECTION);
2091 				if (portchange & USB_PORT_STAT_C_LINK_STATE)
2092 					clear_port_feature(hub->hdev, port1,
2093 							USB_PORT_FEAT_C_PORT_LINK_STATE);
2094 				if (portchange & USB_PORT_STAT_C_RESET)
2095 					clear_port_feature(hub->hdev, port1,
2096 							USB_PORT_FEAT_C_RESET);
2097 				dev_dbg(hub->intfdev, "hot reset failed, warm reset port %d\n",
2098 						port1);
2099 				ret = hub_port_reset(hub, port1,
2100 						udev, HUB_BH_RESET_TIME,
2101 						true);
2102 				if ((portchange & USB_PORT_STAT_C_CONNECTION))
2103 					clear_port_feature(hub->hdev, port1,
2104 							USB_PORT_FEAT_C_CONNECTION);
2105 				return ret;
2106 			}
2107 			/* Device went away? */
2108 			if (!(portstatus & USB_PORT_STAT_CONNECTION))
2109 				return -ENOTCONN;
2110 
2111 			/* bomb out completely if the connection bounced */
2112 			if ((portchange & USB_PORT_STAT_C_CONNECTION))
2113 				return -ENOTCONN;
2114 
2115 			/* if we`ve finished resetting, then break out of
2116 			 * the loop
2117 			 */
2118 			if (!(portstatus & USB_PORT_STAT_RESET) &&
2119 			    (portstatus & USB_PORT_STAT_ENABLE)) {
2120 				if (hub_is_wusb(hub))
2121 					udev->speed = USB_SPEED_WIRELESS;
2122 				else if (hub_is_superspeed(hub->hdev))
2123 					udev->speed = USB_SPEED_SUPER;
2124 				else if (portstatus & USB_PORT_STAT_HIGH_SPEED)
2125 					udev->speed = USB_SPEED_HIGH;
2126 				else if (portstatus & USB_PORT_STAT_LOW_SPEED)
2127 					udev->speed = USB_SPEED_LOW;
2128 				else
2129 					udev->speed = USB_SPEED_FULL;
2130 				return 0;
2131 			}
2132 		} else {
2133 			if (portchange & USB_PORT_STAT_C_BH_RESET)
2134 				return 0;
2135 		}
2136 
2137 		/* switch to the long delay after two short delay failures */
2138 		if (delay_time >= 2 * HUB_SHORT_RESET_TIME)
2139 			delay = HUB_LONG_RESET_TIME;
2140 
2141 		dev_dbg (hub->intfdev,
2142 			"port %d not %sreset yet, waiting %dms\n",
2143 			port1, warm ? "warm " : "", delay);
2144 	}
2145 
2146 	return -EBUSY;
2147 }
2148 
hub_port_finish_reset(struct usb_hub * hub,int port1,struct usb_device * udev,int * status,bool warm)2149 static void hub_port_finish_reset(struct usb_hub *hub, int port1,
2150 			struct usb_device *udev, int *status, bool warm)
2151 {
2152 	switch (*status) {
2153 	case 0:
2154 		if (!warm) {
2155 			struct usb_hcd *hcd;
2156 			/* TRSTRCY = 10 ms; plus some extra */
2157 			msleep(10 + 40);
2158 			update_devnum(udev, 0);
2159 			hcd = bus_to_hcd(udev->bus);
2160 			if (hcd->driver->reset_device) {
2161 				*status = hcd->driver->reset_device(hcd, udev);
2162 				if (*status < 0) {
2163 					dev_err(&udev->dev, "Cannot reset "
2164 							"HCD device state\n");
2165 					break;
2166 				}
2167 			}
2168 		}
2169 		/* FALL THROUGH */
2170 	case -ENOTCONN:
2171 	case -ENODEV:
2172 		clear_port_feature(hub->hdev,
2173 				port1, USB_PORT_FEAT_C_RESET);
2174 		/* FIXME need disconnect() for NOTATTACHED device */
2175 		if (warm) {
2176 			clear_port_feature(hub->hdev, port1,
2177 					USB_PORT_FEAT_C_BH_PORT_RESET);
2178 			clear_port_feature(hub->hdev, port1,
2179 					USB_PORT_FEAT_C_PORT_LINK_STATE);
2180 		} else {
2181 			usb_set_device_state(udev, *status
2182 					? USB_STATE_NOTATTACHED
2183 					: USB_STATE_DEFAULT);
2184 		}
2185 		break;
2186 	}
2187 }
2188 
2189 /* Handle port reset and port warm(BH) reset (for USB3 protocol ports) */
hub_port_reset(struct usb_hub * hub,int port1,struct usb_device * udev,unsigned int delay,bool warm)2190 static int hub_port_reset(struct usb_hub *hub, int port1,
2191 			struct usb_device *udev, unsigned int delay, bool warm)
2192 {
2193 	int i, status;
2194 
2195 	if (!warm) {
2196 		/* Block EHCI CF initialization during the port reset.
2197 		 * Some companion controllers don't like it when they mix.
2198 		 */
2199 		down_read(&ehci_cf_port_reset_rwsem);
2200 	} else {
2201 		if (!hub_is_superspeed(hub->hdev)) {
2202 			dev_err(hub->intfdev, "only USB3 hub support "
2203 						"warm reset\n");
2204 			return -EINVAL;
2205 		}
2206 	}
2207 
2208 	/* Reset the port */
2209 	for (i = 0; i < PORT_RESET_TRIES; i++) {
2210 		status = set_port_feature(hub->hdev, port1, (warm ?
2211 					USB_PORT_FEAT_BH_PORT_RESET :
2212 					USB_PORT_FEAT_RESET));
2213 		if (status) {
2214 			dev_err(hub->intfdev,
2215 					"cannot %sreset port %d (err = %d)\n",
2216 					warm ? "warm " : "", port1, status);
2217 		} else {
2218 			status = hub_port_wait_reset(hub, port1, udev, delay,
2219 								warm);
2220 			if (status && status != -ENOTCONN)
2221 				dev_dbg(hub->intfdev,
2222 						"port_wait_reset: err = %d\n",
2223 						status);
2224 		}
2225 
2226 		/* return on disconnect or reset */
2227 		if (status == 0 || status == -ENOTCONN || status == -ENODEV) {
2228 			hub_port_finish_reset(hub, port1, udev, &status, warm);
2229 			goto done;
2230 		}
2231 
2232 		dev_dbg (hub->intfdev,
2233 			"port %d not enabled, trying %sreset again...\n",
2234 			port1, warm ? "warm " : "");
2235 		delay = HUB_LONG_RESET_TIME;
2236 	}
2237 
2238 	dev_err (hub->intfdev,
2239 		"Cannot enable port %i.  Maybe the USB cable is bad?\n",
2240 		port1);
2241 
2242 done:
2243 	if (!warm)
2244 		up_read(&ehci_cf_port_reset_rwsem);
2245 
2246 	return status;
2247 }
2248 
2249 /* Check if a port is power on */
port_is_power_on(struct usb_hub * hub,unsigned portstatus)2250 static int port_is_power_on(struct usb_hub *hub, unsigned portstatus)
2251 {
2252 	int ret = 0;
2253 
2254 	if (hub_is_superspeed(hub->hdev)) {
2255 		if (portstatus & USB_SS_PORT_STAT_POWER)
2256 			ret = 1;
2257 	} else {
2258 		if (portstatus & USB_PORT_STAT_POWER)
2259 			ret = 1;
2260 	}
2261 
2262 	return ret;
2263 }
2264 
2265 #ifdef	CONFIG_PM
2266 
2267 /* Check if a port is suspended(USB2.0 port) or in U3 state(USB3.0 port) */
port_is_suspended(struct usb_hub * hub,unsigned portstatus)2268 static int port_is_suspended(struct usb_hub *hub, unsigned portstatus)
2269 {
2270 	int ret = 0;
2271 
2272 	if (hub_is_superspeed(hub->hdev)) {
2273 		if ((portstatus & USB_PORT_STAT_LINK_STATE)
2274 				== USB_SS_PORT_LS_U3)
2275 			ret = 1;
2276 	} else {
2277 		if (portstatus & USB_PORT_STAT_SUSPEND)
2278 			ret = 1;
2279 	}
2280 
2281 	return ret;
2282 }
2283 
2284 /* Determine whether the device on a port is ready for a normal resume,
2285  * is ready for a reset-resume, or should be disconnected.
2286  */
check_port_resume_type(struct usb_device * udev,struct usb_hub * hub,int port1,int status,unsigned portchange,unsigned portstatus)2287 static int check_port_resume_type(struct usb_device *udev,
2288 		struct usb_hub *hub, int port1,
2289 		int status, unsigned portchange, unsigned portstatus)
2290 {
2291 	/* Is the device still present? */
2292 	if (status || port_is_suspended(hub, portstatus) ||
2293 			!port_is_power_on(hub, portstatus) ||
2294 			!(portstatus & USB_PORT_STAT_CONNECTION)) {
2295 		if (status >= 0)
2296 			status = -ENODEV;
2297 	}
2298 
2299 	/* Can't do a normal resume if the port isn't enabled,
2300 	 * so try a reset-resume instead.
2301 	 */
2302 	else if (!(portstatus & USB_PORT_STAT_ENABLE) && !udev->reset_resume) {
2303 		if (udev->persist_enabled)
2304 			udev->reset_resume = 1;
2305 		else
2306 			status = -ENODEV;
2307 	}
2308 
2309 	if (status) {
2310 		dev_dbg(hub->intfdev,
2311 				"port %d status %04x.%04x after resume, %d\n",
2312 				port1, portchange, portstatus, status);
2313 	} else if (udev->reset_resume) {
2314 
2315 		/* Late port handoff can set status-change bits */
2316 		if (portchange & USB_PORT_STAT_C_CONNECTION)
2317 			clear_port_feature(hub->hdev, port1,
2318 					USB_PORT_FEAT_C_CONNECTION);
2319 		if (portchange & USB_PORT_STAT_C_ENABLE)
2320 			clear_port_feature(hub->hdev, port1,
2321 					USB_PORT_FEAT_C_ENABLE);
2322 	}
2323 
2324 	return status;
2325 }
2326 
2327 #ifdef	CONFIG_USB_SUSPEND
2328 
2329 /*
2330  * usb_port_suspend - suspend a usb device's upstream port
2331  * @udev: device that's no longer in active use, not a root hub
2332  * Context: must be able to sleep; device not locked; pm locks held
2333  *
2334  * Suspends a USB device that isn't in active use, conserving power.
2335  * Devices may wake out of a suspend, if anything important happens,
2336  * using the remote wakeup mechanism.  They may also be taken out of
2337  * suspend by the host, using usb_port_resume().  It's also routine
2338  * to disconnect devices while they are suspended.
2339  *
2340  * This only affects the USB hardware for a device; its interfaces
2341  * (and, for hubs, child devices) must already have been suspended.
2342  *
2343  * Selective port suspend reduces power; most suspended devices draw
2344  * less than 500 uA.  It's also used in OTG, along with remote wakeup.
2345  * All devices below the suspended port are also suspended.
2346  *
2347  * Devices leave suspend state when the host wakes them up.  Some devices
2348  * also support "remote wakeup", where the device can activate the USB
2349  * tree above them to deliver data, such as a keypress or packet.  In
2350  * some cases, this wakes the USB host.
2351  *
2352  * Suspending OTG devices may trigger HNP, if that's been enabled
2353  * between a pair of dual-role devices.  That will change roles, such
2354  * as from A-Host to A-Peripheral or from B-Host back to B-Peripheral.
2355  *
2356  * Devices on USB hub ports have only one "suspend" state, corresponding
2357  * to ACPI D2, "may cause the device to lose some context".
2358  * State transitions include:
2359  *
2360  *   - suspend, resume ... when the VBUS power link stays live
2361  *   - suspend, disconnect ... VBUS lost
2362  *
2363  * Once VBUS drop breaks the circuit, the port it's using has to go through
2364  * normal re-enumeration procedures, starting with enabling VBUS power.
2365  * Other than re-initializing the hub (plug/unplug, except for root hubs),
2366  * Linux (2.6) currently has NO mechanisms to initiate that:  no khubd
2367  * timer, no SRP, no requests through sysfs.
2368  *
2369  * If CONFIG_USB_SUSPEND isn't enabled, devices only really suspend when
2370  * the root hub for their bus goes into global suspend ... so we don't
2371  * (falsely) update the device power state to say it suspended.
2372  *
2373  * Returns 0 on success, else negative errno.
2374  */
usb_port_suspend(struct usb_device * udev,pm_message_t msg)2375 int usb_port_suspend(struct usb_device *udev, pm_message_t msg)
2376 {
2377 	struct usb_hub	*hub = hdev_to_hub(udev->parent);
2378 	int		port1 = udev->portnum;
2379 	int		status;
2380 
2381 	/* enable remote wakeup when appropriate; this lets the device
2382 	 * wake up the upstream hub (including maybe the root hub).
2383 	 *
2384 	 * NOTE:  OTG devices may issue remote wakeup (or SRP) even when
2385 	 * we don't explicitly enable it here.
2386 	 */
2387 	if (udev->do_remote_wakeup) {
2388 		status = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
2389 				USB_REQ_SET_FEATURE, USB_RECIP_DEVICE,
2390 				USB_DEVICE_REMOTE_WAKEUP, 0,
2391 				NULL, 0,
2392 				USB_CTRL_SET_TIMEOUT);
2393 		if (status) {
2394 			dev_dbg(&udev->dev, "won't remote wakeup, status %d\n",
2395 					status);
2396 			/* bail if autosuspend is requested */
2397 			if (PMSG_IS_AUTO(msg))
2398 				return status;
2399 		}
2400 	}
2401 
2402 	/* disable USB2 hardware LPM */
2403 	if (udev->usb2_hw_lpm_enabled == 1)
2404 		usb_set_usb2_hardware_lpm(udev, 0);
2405 
2406 	/* see 7.1.7.6 */
2407 	if (hub_is_superspeed(hub->hdev))
2408 		status = set_port_feature(hub->hdev,
2409 				port1 | (USB_SS_PORT_LS_U3 << 3),
2410 				USB_PORT_FEAT_LINK_STATE);
2411 	else
2412 		status = set_port_feature(hub->hdev, port1,
2413 						USB_PORT_FEAT_SUSPEND);
2414 	if (status) {
2415 		dev_dbg(hub->intfdev, "can't suspend port %d, status %d\n",
2416 				port1, status);
2417 		/* paranoia:  "should not happen" */
2418 		if (udev->do_remote_wakeup)
2419 			(void) usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
2420 				USB_REQ_CLEAR_FEATURE, USB_RECIP_DEVICE,
2421 				USB_DEVICE_REMOTE_WAKEUP, 0,
2422 				NULL, 0,
2423 				USB_CTRL_SET_TIMEOUT);
2424 
2425 		/* System sleep transitions should never fail */
2426 		if (!PMSG_IS_AUTO(msg))
2427 			status = 0;
2428 	} else {
2429 		/* device has up to 10 msec to fully suspend */
2430 		dev_dbg(&udev->dev, "usb %ssuspend, wakeup %d\n",
2431 				(PMSG_IS_AUTO(msg) ? "auto-" : ""),
2432 				udev->do_remote_wakeup);
2433 		usb_set_device_state(udev, USB_STATE_SUSPENDED);
2434 		msleep(10);
2435 	}
2436 	usb_mark_last_busy(hub->hdev);
2437 	return status;
2438 }
2439 
2440 /*
2441  * If the USB "suspend" state is in use (rather than "global suspend"),
2442  * many devices will be individually taken out of suspend state using
2443  * special "resume" signaling.  This routine kicks in shortly after
2444  * hardware resume signaling is finished, either because of selective
2445  * resume (by host) or remote wakeup (by device) ... now see what changed
2446  * in the tree that's rooted at this device.
2447  *
2448  * If @udev->reset_resume is set then the device is reset before the
2449  * status check is done.
2450  */
finish_port_resume(struct usb_device * udev)2451 static int finish_port_resume(struct usb_device *udev)
2452 {
2453 	int	status = 0;
2454 	u16	devstatus;
2455 
2456 	/* caller owns the udev device lock */
2457 	dev_dbg(&udev->dev, "%s\n",
2458 		udev->reset_resume ? "finish reset-resume" : "finish resume");
2459 
2460 	/* usb ch9 identifies four variants of SUSPENDED, based on what
2461 	 * state the device resumes to.  Linux currently won't see the
2462 	 * first two on the host side; they'd be inside hub_port_init()
2463 	 * during many timeouts, but khubd can't suspend until later.
2464 	 */
2465 	usb_set_device_state(udev, udev->actconfig
2466 			? USB_STATE_CONFIGURED
2467 			: USB_STATE_ADDRESS);
2468 
2469 	/* 10.5.4.5 says not to reset a suspended port if the attached
2470 	 * device is enabled for remote wakeup.  Hence the reset
2471 	 * operation is carried out here, after the port has been
2472 	 * resumed.
2473 	 */
2474 	if (udev->reset_resume)
2475  retry_reset_resume:
2476 		status = usb_reset_and_verify_device(udev);
2477 
2478  	/* 10.5.4.5 says be sure devices in the tree are still there.
2479  	 * For now let's assume the device didn't go crazy on resume,
2480 	 * and device drivers will know about any resume quirks.
2481 	 */
2482 	if (status == 0) {
2483 		devstatus = 0;
2484 		status = usb_get_status(udev, USB_RECIP_DEVICE, 0, &devstatus);
2485 		if (status >= 0)
2486 			status = (status > 0 ? 0 : -ENODEV);
2487 
2488 		/* If a normal resume failed, try doing a reset-resume */
2489 		if (status && !udev->reset_resume && udev->persist_enabled) {
2490 			dev_dbg(&udev->dev, "retry with reset-resume\n");
2491 			udev->reset_resume = 1;
2492 			goto retry_reset_resume;
2493 		}
2494 	}
2495 
2496 	if (status) {
2497 		dev_dbg(&udev->dev, "gone after usb resume? status %d\n",
2498 				status);
2499 	} else if (udev->actconfig) {
2500 		le16_to_cpus(&devstatus);
2501 		if (devstatus & (1 << USB_DEVICE_REMOTE_WAKEUP)) {
2502 			status = usb_control_msg(udev,
2503 					usb_sndctrlpipe(udev, 0),
2504 					USB_REQ_CLEAR_FEATURE,
2505 						USB_RECIP_DEVICE,
2506 					USB_DEVICE_REMOTE_WAKEUP, 0,
2507 					NULL, 0,
2508 					USB_CTRL_SET_TIMEOUT);
2509 			if (status)
2510 				dev_dbg(&udev->dev,
2511 					"disable remote wakeup, status %d\n",
2512 					status);
2513 		}
2514 		status = 0;
2515 	}
2516 	return status;
2517 }
2518 
2519 /*
2520  * usb_port_resume - re-activate a suspended usb device's upstream port
2521  * @udev: device to re-activate, not a root hub
2522  * Context: must be able to sleep; device not locked; pm locks held
2523  *
2524  * This will re-activate the suspended device, increasing power usage
2525  * while letting drivers communicate again with its endpoints.
2526  * USB resume explicitly guarantees that the power session between
2527  * the host and the device is the same as it was when the device
2528  * suspended.
2529  *
2530  * If @udev->reset_resume is set then this routine won't check that the
2531  * port is still enabled.  Furthermore, finish_port_resume() above will
2532  * reset @udev.  The end result is that a broken power session can be
2533  * recovered and @udev will appear to persist across a loss of VBUS power.
2534  *
2535  * For example, if a host controller doesn't maintain VBUS suspend current
2536  * during a system sleep or is reset when the system wakes up, all the USB
2537  * power sessions below it will be broken.  This is especially troublesome
2538  * for mass-storage devices containing mounted filesystems, since the
2539  * device will appear to have disconnected and all the memory mappings
2540  * to it will be lost.  Using the USB_PERSIST facility, the device can be
2541  * made to appear as if it had not disconnected.
2542  *
2543  * This facility can be dangerous.  Although usb_reset_and_verify_device() makes
2544  * every effort to insure that the same device is present after the
2545  * reset as before, it cannot provide a 100% guarantee.  Furthermore it's
2546  * quite possible for a device to remain unaltered but its media to be
2547  * changed.  If the user replaces a flash memory card while the system is
2548  * asleep, he will have only himself to blame when the filesystem on the
2549  * new card is corrupted and the system crashes.
2550  *
2551  * Returns 0 on success, else negative errno.
2552  */
usb_port_resume(struct usb_device * udev,pm_message_t msg)2553 int usb_port_resume(struct usb_device *udev, pm_message_t msg)
2554 {
2555 	struct usb_hub	*hub = hdev_to_hub(udev->parent);
2556 	int		port1 = udev->portnum;
2557 	int		status;
2558 	u16		portchange, portstatus;
2559 
2560 	/* Skip the initial Clear-Suspend step for a remote wakeup */
2561 	status = hub_port_status(hub, port1, &portstatus, &portchange);
2562 	if (status == 0 && !port_is_suspended(hub, portstatus))
2563 		goto SuspendCleared;
2564 
2565 	// dev_dbg(hub->intfdev, "resume port %d\n", port1);
2566 
2567 	set_bit(port1, hub->busy_bits);
2568 
2569 	/* see 7.1.7.7; affects power usage, but not budgeting */
2570 	if (hub_is_superspeed(hub->hdev))
2571 		status = set_port_feature(hub->hdev,
2572 				port1 | (USB_SS_PORT_LS_U0 << 3),
2573 				USB_PORT_FEAT_LINK_STATE);
2574 	else
2575 		status = clear_port_feature(hub->hdev,
2576 				port1, USB_PORT_FEAT_SUSPEND);
2577 	if (status) {
2578 		dev_dbg(hub->intfdev, "can't resume port %d, status %d\n",
2579 				port1, status);
2580 	} else {
2581 		/* drive resume for at least 20 msec */
2582 		dev_dbg(&udev->dev, "usb %sresume\n",
2583 				(PMSG_IS_AUTO(msg) ? "auto-" : ""));
2584 		msleep(25);
2585 
2586 		/* Virtual root hubs can trigger on GET_PORT_STATUS to
2587 		 * stop resume signaling.  Then finish the resume
2588 		 * sequence.
2589 		 */
2590 		status = hub_port_status(hub, port1, &portstatus, &portchange);
2591 
2592 		/* TRSMRCY = 10 msec */
2593 		msleep(10);
2594 	}
2595 
2596  SuspendCleared:
2597 	if (status == 0) {
2598 		if (hub_is_superspeed(hub->hdev)) {
2599 			if (portchange & USB_PORT_STAT_C_LINK_STATE)
2600 				clear_port_feature(hub->hdev, port1,
2601 					USB_PORT_FEAT_C_PORT_LINK_STATE);
2602 		} else {
2603 			if (portchange & USB_PORT_STAT_C_SUSPEND)
2604 				clear_port_feature(hub->hdev, port1,
2605 						USB_PORT_FEAT_C_SUSPEND);
2606 		}
2607 	}
2608 
2609 	clear_bit(port1, hub->busy_bits);
2610 
2611 	status = check_port_resume_type(udev,
2612 			hub, port1, status, portchange, portstatus);
2613 	if (status == 0)
2614 		status = finish_port_resume(udev);
2615 	if (status < 0) {
2616 		dev_dbg(&udev->dev, "can't resume, status %d\n", status);
2617 		hub_port_logical_disconnect(hub, port1);
2618 	} else  {
2619 		/* Try to enable USB2 hardware LPM */
2620 		if (udev->usb2_hw_lpm_capable == 1)
2621 			usb_set_usb2_hardware_lpm(udev, 1);
2622 	}
2623 
2624 	return status;
2625 }
2626 
2627 /* caller has locked udev */
usb_remote_wakeup(struct usb_device * udev)2628 int usb_remote_wakeup(struct usb_device *udev)
2629 {
2630 	int	status = 0;
2631 
2632 	if (udev->state == USB_STATE_SUSPENDED) {
2633 		dev_dbg(&udev->dev, "usb %sresume\n", "wakeup-");
2634 		status = usb_autoresume_device(udev);
2635 		if (status == 0) {
2636 			/* Let the drivers do their thing, then... */
2637 			usb_autosuspend_device(udev);
2638 		}
2639 	}
2640 	return status;
2641 }
2642 
2643 #else	/* CONFIG_USB_SUSPEND */
2644 
2645 /* When CONFIG_USB_SUSPEND isn't set, we never suspend or resume any ports. */
2646 
usb_port_suspend(struct usb_device * udev,pm_message_t msg)2647 int usb_port_suspend(struct usb_device *udev, pm_message_t msg)
2648 {
2649 	return 0;
2650 }
2651 
2652 /* However we may need to do a reset-resume */
2653 
usb_port_resume(struct usb_device * udev,pm_message_t msg)2654 int usb_port_resume(struct usb_device *udev, pm_message_t msg)
2655 {
2656 	struct usb_hub	*hub = hdev_to_hub(udev->parent);
2657 	int		port1 = udev->portnum;
2658 	int		status;
2659 	u16		portchange, portstatus;
2660 
2661 	status = hub_port_status(hub, port1, &portstatus, &portchange);
2662 	status = check_port_resume_type(udev,
2663 			hub, port1, status, portchange, portstatus);
2664 
2665 	if (status) {
2666 		dev_dbg(&udev->dev, "can't resume, status %d\n", status);
2667 		hub_port_logical_disconnect(hub, port1);
2668 	} else if (udev->reset_resume) {
2669 		dev_dbg(&udev->dev, "reset-resume\n");
2670 		status = usb_reset_and_verify_device(udev);
2671 	}
2672 	return status;
2673 }
2674 
2675 #endif
2676 
hub_suspend(struct usb_interface * intf,pm_message_t msg)2677 static int hub_suspend(struct usb_interface *intf, pm_message_t msg)
2678 {
2679 	struct usb_hub		*hub = usb_get_intfdata (intf);
2680 	struct usb_device	*hdev = hub->hdev;
2681 	unsigned		port1;
2682 
2683 	/* Warn if children aren't already suspended */
2684 	for (port1 = 1; port1 <= hdev->maxchild; port1++) {
2685 		struct usb_device	*udev;
2686 
2687 		udev = hdev->children [port1-1];
2688 		if (udev && udev->can_submit) {
2689 			dev_warn(&intf->dev, "port %d nyet suspended\n", port1);
2690 			if (PMSG_IS_AUTO(msg))
2691 				return -EBUSY;
2692 		}
2693 	}
2694 
2695 	dev_dbg(&intf->dev, "%s\n", __func__);
2696 
2697 	/* stop khubd and related activity */
2698 	hub_quiesce(hub, HUB_SUSPEND);
2699 	return 0;
2700 }
2701 
hub_resume(struct usb_interface * intf)2702 static int hub_resume(struct usb_interface *intf)
2703 {
2704 	struct usb_hub *hub = usb_get_intfdata(intf);
2705 
2706 	dev_dbg(&intf->dev, "%s\n", __func__);
2707 	hub_activate(hub, HUB_RESUME);
2708 	return 0;
2709 }
2710 
hub_reset_resume(struct usb_interface * intf)2711 static int hub_reset_resume(struct usb_interface *intf)
2712 {
2713 	struct usb_hub *hub = usb_get_intfdata(intf);
2714 
2715 	dev_dbg(&intf->dev, "%s\n", __func__);
2716 	hub_activate(hub, HUB_RESET_RESUME);
2717 	return 0;
2718 }
2719 
2720 /**
2721  * usb_root_hub_lost_power - called by HCD if the root hub lost Vbus power
2722  * @rhdev: struct usb_device for the root hub
2723  *
2724  * The USB host controller driver calls this function when its root hub
2725  * is resumed and Vbus power has been interrupted or the controller
2726  * has been reset.  The routine marks @rhdev as having lost power.
2727  * When the hub driver is resumed it will take notice and carry out
2728  * power-session recovery for all the "USB-PERSIST"-enabled child devices;
2729  * the others will be disconnected.
2730  */
usb_root_hub_lost_power(struct usb_device * rhdev)2731 void usb_root_hub_lost_power(struct usb_device *rhdev)
2732 {
2733 	dev_warn(&rhdev->dev, "root hub lost power or was reset\n");
2734 	rhdev->reset_resume = 1;
2735 }
2736 EXPORT_SYMBOL_GPL(usb_root_hub_lost_power);
2737 
2738 #else	/* CONFIG_PM */
2739 
2740 #define hub_suspend		NULL
2741 #define hub_resume		NULL
2742 #define hub_reset_resume	NULL
2743 #endif
2744 
2745 
2746 /* USB 2.0 spec, 7.1.7.3 / fig 7-29:
2747  *
2748  * Between connect detection and reset signaling there must be a delay
2749  * of 100ms at least for debounce and power-settling.  The corresponding
2750  * timer shall restart whenever the downstream port detects a disconnect.
2751  *
2752  * Apparently there are some bluetooth and irda-dongles and a number of
2753  * low-speed devices for which this debounce period may last over a second.
2754  * Not covered by the spec - but easy to deal with.
2755  *
2756  * This implementation uses a 1500ms total debounce timeout; if the
2757  * connection isn't stable by then it returns -ETIMEDOUT.  It checks
2758  * every 25ms for transient disconnects.  When the port status has been
2759  * unchanged for 100ms it returns the port status.
2760  */
hub_port_debounce(struct usb_hub * hub,int port1)2761 static int hub_port_debounce(struct usb_hub *hub, int port1)
2762 {
2763 	int ret;
2764 	int total_time, stable_time = 0;
2765 	u16 portchange, portstatus;
2766 	unsigned connection = 0xffff;
2767 
2768 	for (total_time = 0; ; total_time += HUB_DEBOUNCE_STEP) {
2769 		ret = hub_port_status(hub, port1, &portstatus, &portchange);
2770 		if (ret < 0)
2771 			return ret;
2772 
2773 		if (!(portchange & USB_PORT_STAT_C_CONNECTION) &&
2774 		     (portstatus & USB_PORT_STAT_CONNECTION) == connection) {
2775 			stable_time += HUB_DEBOUNCE_STEP;
2776 			if (stable_time >= HUB_DEBOUNCE_STABLE)
2777 				break;
2778 		} else {
2779 			stable_time = 0;
2780 			connection = portstatus & USB_PORT_STAT_CONNECTION;
2781 		}
2782 
2783 		if (portchange & USB_PORT_STAT_C_CONNECTION) {
2784 			clear_port_feature(hub->hdev, port1,
2785 					USB_PORT_FEAT_C_CONNECTION);
2786 		}
2787 
2788 		if (total_time >= HUB_DEBOUNCE_TIMEOUT)
2789 			break;
2790 		msleep(HUB_DEBOUNCE_STEP);
2791 	}
2792 
2793 	dev_dbg (hub->intfdev,
2794 		"debounce: port %d: total %dms stable %dms status 0x%x\n",
2795 		port1, total_time, stable_time, portstatus);
2796 
2797 	if (stable_time < HUB_DEBOUNCE_STABLE)
2798 		return -ETIMEDOUT;
2799 	return portstatus;
2800 }
2801 
usb_ep0_reinit(struct usb_device * udev)2802 void usb_ep0_reinit(struct usb_device *udev)
2803 {
2804 	usb_disable_endpoint(udev, 0 + USB_DIR_IN, true);
2805 	usb_disable_endpoint(udev, 0 + USB_DIR_OUT, true);
2806 	usb_enable_endpoint(udev, &udev->ep0, true);
2807 }
2808 EXPORT_SYMBOL_GPL(usb_ep0_reinit);
2809 
2810 #define usb_sndaddr0pipe()	(PIPE_CONTROL << 30)
2811 #define usb_rcvaddr0pipe()	((PIPE_CONTROL << 30) | USB_DIR_IN)
2812 
hub_set_address(struct usb_device * udev,int devnum)2813 static int hub_set_address(struct usb_device *udev, int devnum)
2814 {
2815 	int retval;
2816 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
2817 
2818 	/*
2819 	 * The host controller will choose the device address,
2820 	 * instead of the core having chosen it earlier
2821 	 */
2822 	if (!hcd->driver->address_device && devnum <= 1)
2823 		return -EINVAL;
2824 	if (udev->state == USB_STATE_ADDRESS)
2825 		return 0;
2826 	if (udev->state != USB_STATE_DEFAULT)
2827 		return -EINVAL;
2828 	if (hcd->driver->address_device)
2829 		retval = hcd->driver->address_device(hcd, udev);
2830 	else
2831 		retval = usb_control_msg(udev, usb_sndaddr0pipe(),
2832 				USB_REQ_SET_ADDRESS, 0, devnum, 0,
2833 				NULL, 0, USB_CTRL_SET_TIMEOUT);
2834 	if (retval == 0) {
2835 		update_devnum(udev, devnum);
2836 		/* Device now using proper address. */
2837 		usb_set_device_state(udev, USB_STATE_ADDRESS);
2838 		usb_ep0_reinit(udev);
2839 	}
2840 	return retval;
2841 }
2842 
2843 /* Reset device, (re)assign address, get device descriptor.
2844  * Device connection must be stable, no more debouncing needed.
2845  * Returns device in USB_STATE_ADDRESS, except on error.
2846  *
2847  * If this is called for an already-existing device (as part of
2848  * usb_reset_and_verify_device), the caller must own the device lock.  For a
2849  * newly detected device that is not accessible through any global
2850  * pointers, it's not necessary to lock the device.
2851  */
2852 static int
hub_port_init(struct usb_hub * hub,struct usb_device * udev,int port1,int retry_counter)2853 hub_port_init (struct usb_hub *hub, struct usb_device *udev, int port1,
2854 		int retry_counter)
2855 {
2856 	static DEFINE_MUTEX(usb_address0_mutex);
2857 
2858 	struct usb_device	*hdev = hub->hdev;
2859 	struct usb_hcd		*hcd = bus_to_hcd(hdev->bus);
2860 	int			i, j, retval;
2861 	unsigned		delay = HUB_SHORT_RESET_TIME;
2862 	enum usb_device_speed	oldspeed = udev->speed;
2863 	const char		*speed;
2864 	int			devnum = udev->devnum;
2865 
2866 	/* root hub ports have a slightly longer reset period
2867 	 * (from USB 2.0 spec, section 7.1.7.5)
2868 	 */
2869 	if (!hdev->parent) {
2870 		delay = HUB_ROOT_RESET_TIME;
2871 		if (port1 == hdev->bus->otg_port)
2872 			hdev->bus->b_hnp_enable = 0;
2873 	}
2874 
2875 	/* Some low speed devices have problems with the quick delay, so */
2876 	/*  be a bit pessimistic with those devices. RHbug #23670 */
2877 	if (oldspeed == USB_SPEED_LOW)
2878 		delay = HUB_LONG_RESET_TIME;
2879 
2880 	mutex_lock(&usb_address0_mutex);
2881 
2882 	/* Reset the device; full speed may morph to high speed */
2883 	/* FIXME a USB 2.0 device may morph into SuperSpeed on reset. */
2884 	retval = hub_port_reset(hub, port1, udev, delay, false);
2885 	if (retval < 0)		/* error or disconnect */
2886 		goto fail;
2887 	/* success, speed is known */
2888 
2889 	retval = -ENODEV;
2890 
2891 	if (oldspeed != USB_SPEED_UNKNOWN && oldspeed != udev->speed) {
2892 		dev_dbg(&udev->dev, "device reset changed speed!\n");
2893 		goto fail;
2894 	}
2895 	oldspeed = udev->speed;
2896 
2897 	/* USB 2.0 section 5.5.3 talks about ep0 maxpacket ...
2898 	 * it's fixed size except for full speed devices.
2899 	 * For Wireless USB devices, ep0 max packet is always 512 (tho
2900 	 * reported as 0xff in the device descriptor). WUSB1.0[4.8.1].
2901 	 */
2902 	switch (udev->speed) {
2903 	case USB_SPEED_SUPER:
2904 	case USB_SPEED_WIRELESS:	/* fixed at 512 */
2905 		udev->ep0.desc.wMaxPacketSize = cpu_to_le16(512);
2906 		break;
2907 	case USB_SPEED_HIGH:		/* fixed at 64 */
2908 		udev->ep0.desc.wMaxPacketSize = cpu_to_le16(64);
2909 		break;
2910 	case USB_SPEED_FULL:		/* 8, 16, 32, or 64 */
2911 		/* to determine the ep0 maxpacket size, try to read
2912 		 * the device descriptor to get bMaxPacketSize0 and
2913 		 * then correct our initial guess.
2914 		 */
2915 		udev->ep0.desc.wMaxPacketSize = cpu_to_le16(64);
2916 		break;
2917 	case USB_SPEED_LOW:		/* fixed at 8 */
2918 		udev->ep0.desc.wMaxPacketSize = cpu_to_le16(8);
2919 		break;
2920 	default:
2921 		goto fail;
2922 	}
2923 
2924 	if (udev->speed == USB_SPEED_WIRELESS)
2925 		speed = "variable speed Wireless";
2926 	else
2927 		speed = usb_speed_string(udev->speed);
2928 
2929 	if (udev->speed != USB_SPEED_SUPER)
2930 		dev_info(&udev->dev,
2931 				"%s %s USB device number %d using %s\n",
2932 				(udev->config) ? "reset" : "new", speed,
2933 				devnum, udev->bus->controller->driver->name);
2934 
2935 	/* Set up TT records, if needed  */
2936 	if (hdev->tt) {
2937 		udev->tt = hdev->tt;
2938 		udev->ttport = hdev->ttport;
2939 	} else if (udev->speed != USB_SPEED_HIGH
2940 			&& hdev->speed == USB_SPEED_HIGH) {
2941 		if (!hub->tt.hub) {
2942 			dev_err(&udev->dev, "parent hub has no TT\n");
2943 			retval = -EINVAL;
2944 			goto fail;
2945 		}
2946 		udev->tt = &hub->tt;
2947 		udev->ttport = port1;
2948 	}
2949 
2950 	/* Why interleave GET_DESCRIPTOR and SET_ADDRESS this way?
2951 	 * Because device hardware and firmware is sometimes buggy in
2952 	 * this area, and this is how Linux has done it for ages.
2953 	 * Change it cautiously.
2954 	 *
2955 	 * NOTE:  If USE_NEW_SCHEME() is true we will start by issuing
2956 	 * a 64-byte GET_DESCRIPTOR request.  This is what Windows does,
2957 	 * so it may help with some non-standards-compliant devices.
2958 	 * Otherwise we start with SET_ADDRESS and then try to read the
2959 	 * first 8 bytes of the device descriptor to get the ep0 maxpacket
2960 	 * value.
2961 	 */
2962 	for (i = 0; i < GET_DESCRIPTOR_TRIES; (++i, msleep(100))) {
2963 		if (USE_NEW_SCHEME(retry_counter) && !(hcd->driver->flags & HCD_USB3)) {
2964 			struct usb_device_descriptor *buf;
2965 			int r = 0;
2966 
2967 #define GET_DESCRIPTOR_BUFSIZE	64
2968 			buf = kmalloc(GET_DESCRIPTOR_BUFSIZE, GFP_NOIO);
2969 			if (!buf) {
2970 				retval = -ENOMEM;
2971 				continue;
2972 			}
2973 
2974 			/* Retry on all errors; some devices are flakey.
2975 			 * 255 is for WUSB devices, we actually need to use
2976 			 * 512 (WUSB1.0[4.8.1]).
2977 			 */
2978 			for (j = 0; j < 3; ++j) {
2979 				buf->bMaxPacketSize0 = 0;
2980 				r = usb_control_msg(udev, usb_rcvaddr0pipe(),
2981 					USB_REQ_GET_DESCRIPTOR, USB_DIR_IN,
2982 					USB_DT_DEVICE << 8, 0,
2983 					buf, GET_DESCRIPTOR_BUFSIZE,
2984 					initial_descriptor_timeout);
2985 				switch (buf->bMaxPacketSize0) {
2986 				case 8: case 16: case 32: case 64: case 255:
2987 					if (buf->bDescriptorType ==
2988 							USB_DT_DEVICE) {
2989 						r = 0;
2990 						break;
2991 					}
2992 					/* FALL THROUGH */
2993 				default:
2994 					if (r == 0)
2995 						r = -EPROTO;
2996 					break;
2997 				}
2998 				if (r == 0)
2999 					break;
3000 			}
3001 			udev->descriptor.bMaxPacketSize0 =
3002 					buf->bMaxPacketSize0;
3003 			kfree(buf);
3004 
3005 			retval = hub_port_reset(hub, port1, udev, delay, false);
3006 			if (retval < 0)		/* error or disconnect */
3007 				goto fail;
3008 			if (oldspeed != udev->speed) {
3009 				dev_dbg(&udev->dev,
3010 					"device reset changed speed!\n");
3011 				retval = -ENODEV;
3012 				goto fail;
3013 			}
3014 			if (r) {
3015 				dev_err(&udev->dev,
3016 					"device descriptor read/64, error %d\n",
3017 					r);
3018 				retval = -EMSGSIZE;
3019 				continue;
3020 			}
3021 #undef GET_DESCRIPTOR_BUFSIZE
3022 		}
3023 
3024  		/*
3025  		 * If device is WUSB, we already assigned an
3026  		 * unauthorized address in the Connect Ack sequence;
3027  		 * authorization will assign the final address.
3028  		 */
3029 		if (udev->wusb == 0) {
3030 			for (j = 0; j < SET_ADDRESS_TRIES; ++j) {
3031 				retval = hub_set_address(udev, devnum);
3032 				if (retval >= 0)
3033 					break;
3034 				msleep(200);
3035 			}
3036 			if (retval < 0) {
3037 				dev_err(&udev->dev,
3038 					"device not accepting address %d, error %d\n",
3039 					devnum, retval);
3040 				goto fail;
3041 			}
3042 			if (udev->speed == USB_SPEED_SUPER) {
3043 				devnum = udev->devnum;
3044 				dev_info(&udev->dev,
3045 						"%s SuperSpeed USB device number %d using %s\n",
3046 						(udev->config) ? "reset" : "new",
3047 						devnum, udev->bus->controller->driver->name);
3048 			}
3049 
3050 			/* cope with hardware quirkiness:
3051 			 *  - let SET_ADDRESS settle, some device hardware wants it
3052 			 *  - read ep0 maxpacket even for high and low speed,
3053 			 */
3054 			msleep(10);
3055 			if (USE_NEW_SCHEME(retry_counter) && !(hcd->driver->flags & HCD_USB3))
3056 				break;
3057   		}
3058 
3059 		retval = usb_get_device_descriptor(udev, 8);
3060 		if (retval < 8) {
3061 			dev_err(&udev->dev,
3062 					"device descriptor read/8, error %d\n",
3063 					retval);
3064 			if (retval >= 0)
3065 				retval = -EMSGSIZE;
3066 		} else {
3067 			retval = 0;
3068 			break;
3069 		}
3070 	}
3071 	if (retval)
3072 		goto fail;
3073 
3074 	if (udev->descriptor.bMaxPacketSize0 == 0xff ||
3075 			udev->speed == USB_SPEED_SUPER)
3076 		i = 512;
3077 	else
3078 		i = udev->descriptor.bMaxPacketSize0;
3079 	if (usb_endpoint_maxp(&udev->ep0.desc) != i) {
3080 		if (udev->speed == USB_SPEED_LOW ||
3081 				!(i == 8 || i == 16 || i == 32 || i == 64)) {
3082 			dev_err(&udev->dev, "Invalid ep0 maxpacket: %d\n", i);
3083 			retval = -EMSGSIZE;
3084 			goto fail;
3085 		}
3086 		if (udev->speed == USB_SPEED_FULL)
3087 			dev_dbg(&udev->dev, "ep0 maxpacket = %d\n", i);
3088 		else
3089 			dev_warn(&udev->dev, "Using ep0 maxpacket: %d\n", i);
3090 		udev->ep0.desc.wMaxPacketSize = cpu_to_le16(i);
3091 		usb_ep0_reinit(udev);
3092 	}
3093 
3094 	retval = usb_get_device_descriptor(udev, USB_DT_DEVICE_SIZE);
3095 	if (retval < (signed)sizeof(udev->descriptor)) {
3096 		dev_err(&udev->dev, "device descriptor read/all, error %d\n",
3097 			retval);
3098 		if (retval >= 0)
3099 			retval = -ENOMSG;
3100 		goto fail;
3101 	}
3102 
3103 	if (udev->wusb == 0 && le16_to_cpu(udev->descriptor.bcdUSB) >= 0x0201) {
3104 		retval = usb_get_bos_descriptor(udev);
3105 		if (!retval) {
3106 			if (udev->bos->ext_cap && (USB_LPM_SUPPORT &
3107 				le32_to_cpu(udev->bos->ext_cap->bmAttributes)))
3108 					udev->lpm_capable = 1;
3109 		}
3110 	}
3111 
3112 	retval = 0;
3113 	/* notify HCD that we have a device connected and addressed */
3114 	if (hcd->driver->update_device)
3115 		hcd->driver->update_device(hcd, udev);
3116 fail:
3117 	if (retval) {
3118 		hub_port_disable(hub, port1, 0);
3119 		update_devnum(udev, devnum);	/* for disconnect processing */
3120 	}
3121 	mutex_unlock(&usb_address0_mutex);
3122 	return retval;
3123 }
3124 
3125 static void
check_highspeed(struct usb_hub * hub,struct usb_device * udev,int port1)3126 check_highspeed (struct usb_hub *hub, struct usb_device *udev, int port1)
3127 {
3128 	struct usb_qualifier_descriptor	*qual;
3129 	int				status;
3130 
3131 	qual = kmalloc (sizeof *qual, GFP_KERNEL);
3132 	if (qual == NULL)
3133 		return;
3134 
3135 	status = usb_get_descriptor (udev, USB_DT_DEVICE_QUALIFIER, 0,
3136 			qual, sizeof *qual);
3137 	if (status == sizeof *qual) {
3138 		dev_info(&udev->dev, "not running at top speed; "
3139 			"connect to a high speed hub\n");
3140 		/* hub LEDs are probably harder to miss than syslog */
3141 		if (hub->has_indicators) {
3142 			hub->indicator[port1-1] = INDICATOR_GREEN_BLINK;
3143 			schedule_delayed_work (&hub->leds, 0);
3144 		}
3145 	}
3146 	kfree(qual);
3147 }
3148 
3149 static unsigned
hub_power_remaining(struct usb_hub * hub)3150 hub_power_remaining (struct usb_hub *hub)
3151 {
3152 	struct usb_device *hdev = hub->hdev;
3153 	int remaining;
3154 	int port1;
3155 
3156 	if (!hub->limited_power)
3157 		return 0;
3158 
3159 	remaining = hdev->bus_mA - hub->descriptor->bHubContrCurrent;
3160 	for (port1 = 1; port1 <= hdev->maxchild; ++port1) {
3161 		struct usb_device	*udev = hdev->children[port1 - 1];
3162 		int			delta;
3163 
3164 		if (!udev)
3165 			continue;
3166 
3167 		/* Unconfigured devices may not use more than 100mA,
3168 		 * or 8mA for OTG ports */
3169 		if (udev->actconfig)
3170 			delta = udev->actconfig->desc.bMaxPower * 2;
3171 		else if (port1 != udev->bus->otg_port || hdev->parent)
3172 			delta = 100;
3173 		else
3174 			delta = 8;
3175 		if (delta > hub->mA_per_port)
3176 			dev_warn(&udev->dev,
3177 				 "%dmA is over %umA budget for port %d!\n",
3178 				 delta, hub->mA_per_port, port1);
3179 		remaining -= delta;
3180 	}
3181 	if (remaining < 0) {
3182 		dev_warn(hub->intfdev, "%dmA over power budget!\n",
3183 			- remaining);
3184 		remaining = 0;
3185 	}
3186 	return remaining;
3187 }
3188 
3189 /* Handle physical or logical connection change events.
3190  * This routine is called when:
3191  * 	a port connection-change occurs;
3192  *	a port enable-change occurs (often caused by EMI);
3193  *	usb_reset_and_verify_device() encounters changed descriptors (as from
3194  *		a firmware download)
3195  * caller already locked the hub
3196  */
hub_port_connect_change(struct usb_hub * hub,int port1,u16 portstatus,u16 portchange)3197 static void hub_port_connect_change(struct usb_hub *hub, int port1,
3198 					u16 portstatus, u16 portchange)
3199 {
3200 	struct usb_device *hdev = hub->hdev;
3201 	struct device *hub_dev = hub->intfdev;
3202 	struct usb_hcd *hcd = bus_to_hcd(hdev->bus);
3203 	unsigned wHubCharacteristics =
3204 			le16_to_cpu(hub->descriptor->wHubCharacteristics);
3205 	struct usb_device *udev;
3206 	int status, i;
3207 
3208 	dev_dbg (hub_dev,
3209 		"port %d, status %04x, change %04x, %s\n",
3210 		port1, portstatus, portchange, portspeed(hub, portstatus));
3211 
3212 	if (hub->has_indicators) {
3213 		set_port_led(hub, port1, HUB_LED_AUTO);
3214 		hub->indicator[port1-1] = INDICATOR_AUTO;
3215 	}
3216 
3217 #ifdef	CONFIG_USB_OTG
3218 	/* during HNP, don't repeat the debounce */
3219 	if (hdev->bus->is_b_host)
3220 		portchange &= ~(USB_PORT_STAT_C_CONNECTION |
3221 				USB_PORT_STAT_C_ENABLE);
3222 #endif
3223 
3224 	/* Try to resuscitate an existing device */
3225 	udev = hdev->children[port1-1];
3226 	if ((portstatus & USB_PORT_STAT_CONNECTION) && udev &&
3227 			udev->state != USB_STATE_NOTATTACHED) {
3228 		usb_lock_device(udev);
3229 		if (portstatus & USB_PORT_STAT_ENABLE) {
3230 			status = 0;		/* Nothing to do */
3231 
3232 #ifdef CONFIG_USB_SUSPEND
3233 		} else if (udev->state == USB_STATE_SUSPENDED &&
3234 				udev->persist_enabled) {
3235 			/* For a suspended device, treat this as a
3236 			 * remote wakeup event.
3237 			 */
3238 			status = usb_remote_wakeup(udev);
3239 #endif
3240 
3241 		} else {
3242 			status = -ENODEV;	/* Don't resuscitate */
3243 		}
3244 		usb_unlock_device(udev);
3245 
3246 		if (status == 0) {
3247 			clear_bit(port1, hub->change_bits);
3248 			return;
3249 		}
3250 	}
3251 
3252 	/* Disconnect any existing devices under this port */
3253 	if (udev)
3254 		usb_disconnect(&hdev->children[port1-1]);
3255 	clear_bit(port1, hub->change_bits);
3256 
3257 	/* We can forget about a "removed" device when there's a physical
3258 	 * disconnect or the connect status changes.
3259 	 */
3260 	if (!(portstatus & USB_PORT_STAT_CONNECTION) ||
3261 			(portchange & USB_PORT_STAT_C_CONNECTION))
3262 		clear_bit(port1, hub->removed_bits);
3263 
3264 	if (portchange & (USB_PORT_STAT_C_CONNECTION |
3265 				USB_PORT_STAT_C_ENABLE)) {
3266 		status = hub_port_debounce(hub, port1);
3267 		if (status < 0) {
3268 			if (printk_ratelimit())
3269 				dev_err(hub_dev, "connect-debounce failed, "
3270 						"port %d disabled\n", port1);
3271 			portstatus &= ~USB_PORT_STAT_CONNECTION;
3272 		} else {
3273 			portstatus = status;
3274 		}
3275 	}
3276 
3277 	/* Return now if debouncing failed or nothing is connected or
3278 	 * the device was "removed".
3279 	 */
3280 	if (!(portstatus & USB_PORT_STAT_CONNECTION) ||
3281 			test_bit(port1, hub->removed_bits)) {
3282 
3283 		/* maybe switch power back on (e.g. root hub was reset) */
3284 		if ((wHubCharacteristics & HUB_CHAR_LPSM) < 2
3285 				&& !port_is_power_on(hub, portstatus))
3286 			set_port_feature(hdev, port1, USB_PORT_FEAT_POWER);
3287 
3288 		if (portstatus & USB_PORT_STAT_ENABLE)
3289   			goto done;
3290 		return;
3291 	}
3292 
3293 	for (i = 0; i < SET_CONFIG_TRIES; i++) {
3294 
3295 		/* reallocate for each attempt, since references
3296 		 * to the previous one can escape in various ways
3297 		 */
3298 		udev = usb_alloc_dev(hdev, hdev->bus, port1);
3299 		if (!udev) {
3300 			dev_err (hub_dev,
3301 				"couldn't allocate port %d usb_device\n",
3302 				port1);
3303 			goto done;
3304 		}
3305 
3306 		usb_set_device_state(udev, USB_STATE_POWERED);
3307  		udev->bus_mA = hub->mA_per_port;
3308 		udev->level = hdev->level + 1;
3309 		udev->wusb = hub_is_wusb(hub);
3310 
3311 		/* Only USB 3.0 devices are connected to SuperSpeed hubs. */
3312 		if (hub_is_superspeed(hub->hdev))
3313 			udev->speed = USB_SPEED_SUPER;
3314 		else
3315 			udev->speed = USB_SPEED_UNKNOWN;
3316 
3317 		choose_devnum(udev);
3318 		if (udev->devnum <= 0) {
3319 			status = -ENOTCONN;	/* Don't retry */
3320 			goto loop;
3321 		}
3322 
3323 		/* reset (non-USB 3.0 devices) and get descriptor */
3324 		status = hub_port_init(hub, udev, port1, i);
3325 		if (status < 0)
3326 			goto loop;
3327 
3328 		usb_detect_quirks(udev);
3329 		if (udev->quirks & USB_QUIRK_DELAY_INIT)
3330 			msleep(1000);
3331 
3332 		/* consecutive bus-powered hubs aren't reliable; they can
3333 		 * violate the voltage drop budget.  if the new child has
3334 		 * a "powered" LED, users should notice we didn't enable it
3335 		 * (without reading syslog), even without per-port LEDs
3336 		 * on the parent.
3337 		 */
3338 		if (udev->descriptor.bDeviceClass == USB_CLASS_HUB
3339 				&& udev->bus_mA <= 100) {
3340 			u16	devstat;
3341 
3342 			status = usb_get_status(udev, USB_RECIP_DEVICE, 0,
3343 					&devstat);
3344 			if (status < 2) {
3345 				dev_dbg(&udev->dev, "get status %d ?\n", status);
3346 				goto loop_disable;
3347 			}
3348 			le16_to_cpus(&devstat);
3349 			if ((devstat & (1 << USB_DEVICE_SELF_POWERED)) == 0) {
3350 				dev_err(&udev->dev,
3351 					"can't connect bus-powered hub "
3352 					"to this port\n");
3353 				if (hub->has_indicators) {
3354 					hub->indicator[port1-1] =
3355 						INDICATOR_AMBER_BLINK;
3356 					schedule_delayed_work (&hub->leds, 0);
3357 				}
3358 				status = -ENOTCONN;	/* Don't retry */
3359 				goto loop_disable;
3360 			}
3361 		}
3362 
3363 		/* check for devices running slower than they could */
3364 		if (le16_to_cpu(udev->descriptor.bcdUSB) >= 0x0200
3365 				&& udev->speed == USB_SPEED_FULL
3366 				&& highspeed_hubs != 0)
3367 			check_highspeed (hub, udev, port1);
3368 
3369 		/* Store the parent's children[] pointer.  At this point
3370 		 * udev becomes globally accessible, although presumably
3371 		 * no one will look at it until hdev is unlocked.
3372 		 */
3373 		status = 0;
3374 
3375 		/* We mustn't add new devices if the parent hub has
3376 		 * been disconnected; we would race with the
3377 		 * recursively_mark_NOTATTACHED() routine.
3378 		 */
3379 		spin_lock_irq(&device_state_lock);
3380 		if (hdev->state == USB_STATE_NOTATTACHED)
3381 			status = -ENOTCONN;
3382 		else
3383 			hdev->children[port1-1] = udev;
3384 		spin_unlock_irq(&device_state_lock);
3385 
3386 		/* Run it through the hoops (find a driver, etc) */
3387 		if (!status) {
3388 			status = usb_new_device(udev);
3389 			if (status) {
3390 				spin_lock_irq(&device_state_lock);
3391 				hdev->children[port1-1] = NULL;
3392 				spin_unlock_irq(&device_state_lock);
3393 			}
3394 		}
3395 
3396 		if (status)
3397 			goto loop_disable;
3398 
3399 		status = hub_power_remaining(hub);
3400 		if (status)
3401 			dev_dbg(hub_dev, "%dmA power budget left\n", status);
3402 
3403 		return;
3404 
3405 loop_disable:
3406 		hub_port_disable(hub, port1, 1);
3407 loop:
3408 		usb_ep0_reinit(udev);
3409 		release_devnum(udev);
3410 		hub_free_dev(udev);
3411 		usb_put_dev(udev);
3412 		if ((status == -ENOTCONN) || (status == -ENOTSUPP))
3413 			break;
3414 	}
3415 	if (hub->hdev->parent ||
3416 			!hcd->driver->port_handed_over ||
3417 			!(hcd->driver->port_handed_over)(hcd, port1))
3418 		dev_err(hub_dev, "unable to enumerate USB device on port %d\n",
3419 				port1);
3420 
3421 done:
3422 	hub_port_disable(hub, port1, 1);
3423 	if (hcd->driver->relinquish_port && !hub->hdev->parent)
3424 		hcd->driver->relinquish_port(hcd, port1);
3425 }
3426 
hub_events(void)3427 static void hub_events(void)
3428 {
3429 	struct list_head *tmp;
3430 	struct usb_device *hdev;
3431 	struct usb_interface *intf;
3432 	struct usb_hub *hub;
3433 	struct device *hub_dev;
3434 	u16 hubstatus;
3435 	u16 hubchange;
3436 	u16 portstatus;
3437 	u16 portchange;
3438 	int i, ret;
3439 	int connect_change;
3440 
3441 	/*
3442 	 *  We restart the list every time to avoid a deadlock with
3443 	 * deleting hubs downstream from this one. This should be
3444 	 * safe since we delete the hub from the event list.
3445 	 * Not the most efficient, but avoids deadlocks.
3446 	 */
3447 	while (1) {
3448 
3449 		/* Grab the first entry at the beginning of the list */
3450 		spin_lock_irq(&hub_event_lock);
3451 		if (list_empty(&hub_event_list)) {
3452 			spin_unlock_irq(&hub_event_lock);
3453 			break;
3454 		}
3455 
3456 		tmp = hub_event_list.next;
3457 		list_del_init(tmp);
3458 
3459 		hub = list_entry(tmp, struct usb_hub, event_list);
3460 		kref_get(&hub->kref);
3461 		spin_unlock_irq(&hub_event_lock);
3462 
3463 		hdev = hub->hdev;
3464 		hub_dev = hub->intfdev;
3465 		intf = to_usb_interface(hub_dev);
3466 		dev_dbg(hub_dev, "state %d ports %d chg %04x evt %04x\n",
3467 				hdev->state, hub->descriptor
3468 					? hub->descriptor->bNbrPorts
3469 					: 0,
3470 				/* NOTE: expects max 15 ports... */
3471 				(u16) hub->change_bits[0],
3472 				(u16) hub->event_bits[0]);
3473 
3474 		/* Lock the device, then check to see if we were
3475 		 * disconnected while waiting for the lock to succeed. */
3476 		usb_lock_device(hdev);
3477 		if (unlikely(hub->disconnected))
3478 			goto loop_disconnected;
3479 
3480 		/* If the hub has died, clean up after it */
3481 		if (hdev->state == USB_STATE_NOTATTACHED) {
3482 			hub->error = -ENODEV;
3483 			hub_quiesce(hub, HUB_DISCONNECT);
3484 			goto loop;
3485 		}
3486 
3487 		/* Autoresume */
3488 		ret = usb_autopm_get_interface(intf);
3489 		if (ret) {
3490 			dev_dbg(hub_dev, "Can't autoresume: %d\n", ret);
3491 			goto loop;
3492 		}
3493 
3494 		/* If this is an inactive hub, do nothing */
3495 		if (hub->quiescing)
3496 			goto loop_autopm;
3497 
3498 		if (hub->error) {
3499 			dev_dbg (hub_dev, "resetting for error %d\n",
3500 				hub->error);
3501 
3502 			ret = usb_reset_device(hdev);
3503 			if (ret) {
3504 				dev_dbg (hub_dev,
3505 					"error resetting hub: %d\n", ret);
3506 				goto loop_autopm;
3507 			}
3508 
3509 			hub->nerrors = 0;
3510 			hub->error = 0;
3511 		}
3512 
3513 		/* deal with port status changes */
3514 		for (i = 1; i <= hub->descriptor->bNbrPorts; i++) {
3515 			if (test_bit(i, hub->busy_bits))
3516 				continue;
3517 			connect_change = test_bit(i, hub->change_bits);
3518 			if (!test_and_clear_bit(i, hub->event_bits) &&
3519 					!connect_change)
3520 				continue;
3521 
3522 			ret = hub_port_status(hub, i,
3523 					&portstatus, &portchange);
3524 			if (ret < 0)
3525 				continue;
3526 
3527 			if (portchange & USB_PORT_STAT_C_CONNECTION) {
3528 				clear_port_feature(hdev, i,
3529 					USB_PORT_FEAT_C_CONNECTION);
3530 				connect_change = 1;
3531 			}
3532 
3533 			if (portchange & USB_PORT_STAT_C_ENABLE) {
3534 				if (!connect_change)
3535 					dev_dbg (hub_dev,
3536 						"port %d enable change, "
3537 						"status %08x\n",
3538 						i, portstatus);
3539 				clear_port_feature(hdev, i,
3540 					USB_PORT_FEAT_C_ENABLE);
3541 
3542 				/*
3543 				 * EM interference sometimes causes badly
3544 				 * shielded USB devices to be shutdown by
3545 				 * the hub, this hack enables them again.
3546 				 * Works at least with mouse driver.
3547 				 */
3548 				if (!(portstatus & USB_PORT_STAT_ENABLE)
3549 				    && !connect_change
3550 				    && hdev->children[i-1]) {
3551 					dev_err (hub_dev,
3552 					    "port %i "
3553 					    "disabled by hub (EMI?), "
3554 					    "re-enabling...\n",
3555 						i);
3556 					connect_change = 1;
3557 				}
3558 			}
3559 
3560 			if (portchange & USB_PORT_STAT_C_SUSPEND) {
3561 				struct usb_device *udev;
3562 
3563 				clear_port_feature(hdev, i,
3564 					USB_PORT_FEAT_C_SUSPEND);
3565 				udev = hdev->children[i-1];
3566 				if (udev) {
3567 					/* TRSMRCY = 10 msec */
3568 					msleep(10);
3569 
3570 					usb_lock_device(udev);
3571 					ret = usb_remote_wakeup(hdev->
3572 							children[i-1]);
3573 					usb_unlock_device(udev);
3574 					if (ret < 0)
3575 						connect_change = 1;
3576 				} else {
3577 					ret = -ENODEV;
3578 					hub_port_disable(hub, i, 1);
3579 				}
3580 				dev_dbg (hub_dev,
3581 					"resume on port %d, status %d\n",
3582 					i, ret);
3583 			}
3584 
3585 			if (portchange & USB_PORT_STAT_C_OVERCURRENT) {
3586 				u16 status = 0;
3587 				u16 unused;
3588 
3589 				dev_dbg(hub_dev, "over-current change on port "
3590 					"%d\n", i);
3591 				clear_port_feature(hdev, i,
3592 					USB_PORT_FEAT_C_OVER_CURRENT);
3593 				msleep(100);	/* Cool down */
3594 				hub_power_on(hub, true);
3595 				hub_port_status(hub, i, &status, &unused);
3596 				if (status & USB_PORT_STAT_OVERCURRENT)
3597 					dev_err(hub_dev, "over-current "
3598 						"condition on port %d\n", i);
3599 			}
3600 
3601 			if (portchange & USB_PORT_STAT_C_RESET) {
3602 				dev_dbg (hub_dev,
3603 					"reset change on port %d\n",
3604 					i);
3605 				clear_port_feature(hdev, i,
3606 					USB_PORT_FEAT_C_RESET);
3607 			}
3608 			if ((portchange & USB_PORT_STAT_C_BH_RESET) &&
3609 					hub_is_superspeed(hub->hdev)) {
3610 				dev_dbg(hub_dev,
3611 					"warm reset change on port %d\n",
3612 					i);
3613 				clear_port_feature(hdev, i,
3614 					USB_PORT_FEAT_C_BH_PORT_RESET);
3615 			}
3616 			if (portchange & USB_PORT_STAT_C_LINK_STATE) {
3617 				clear_port_feature(hub->hdev, i,
3618 						USB_PORT_FEAT_C_PORT_LINK_STATE);
3619 			}
3620 			if (portchange & USB_PORT_STAT_C_CONFIG_ERROR) {
3621 				dev_warn(hub_dev,
3622 					"config error on port %d\n",
3623 					i);
3624 				clear_port_feature(hub->hdev, i,
3625 						USB_PORT_FEAT_C_PORT_CONFIG_ERROR);
3626 			}
3627 
3628 			/* Warm reset a USB3 protocol port if it's in
3629 			 * SS.Inactive state.
3630 			 */
3631 			if (hub_is_superspeed(hub->hdev) &&
3632 				(portstatus & USB_PORT_STAT_LINK_STATE)
3633 					== USB_SS_PORT_LS_SS_INACTIVE) {
3634 				dev_dbg(hub_dev, "warm reset port %d\n", i);
3635 				hub_port_reset(hub, i, NULL,
3636 						HUB_BH_RESET_TIME, true);
3637 			}
3638 
3639 			if (connect_change)
3640 				hub_port_connect_change(hub, i,
3641 						portstatus, portchange);
3642 		} /* end for i */
3643 
3644 		/* deal with hub status changes */
3645 		if (test_and_clear_bit(0, hub->event_bits) == 0)
3646 			;	/* do nothing */
3647 		else if (hub_hub_status(hub, &hubstatus, &hubchange) < 0)
3648 			dev_err (hub_dev, "get_hub_status failed\n");
3649 		else {
3650 			if (hubchange & HUB_CHANGE_LOCAL_POWER) {
3651 				dev_dbg (hub_dev, "power change\n");
3652 				clear_hub_feature(hdev, C_HUB_LOCAL_POWER);
3653 				if (hubstatus & HUB_STATUS_LOCAL_POWER)
3654 					/* FIXME: Is this always true? */
3655 					hub->limited_power = 1;
3656 				else
3657 					hub->limited_power = 0;
3658 			}
3659 			if (hubchange & HUB_CHANGE_OVERCURRENT) {
3660 				u16 status = 0;
3661 				u16 unused;
3662 
3663 				dev_dbg(hub_dev, "over-current change\n");
3664 				clear_hub_feature(hdev, C_HUB_OVER_CURRENT);
3665 				msleep(500);	/* Cool down */
3666                         	hub_power_on(hub, true);
3667 				hub_hub_status(hub, &status, &unused);
3668 				if (status & HUB_STATUS_OVERCURRENT)
3669 					dev_err(hub_dev, "over-current "
3670 						"condition\n");
3671 			}
3672 		}
3673 
3674  loop_autopm:
3675 		/* Balance the usb_autopm_get_interface() above */
3676 		usb_autopm_put_interface_no_suspend(intf);
3677  loop:
3678 		/* Balance the usb_autopm_get_interface_no_resume() in
3679 		 * kick_khubd() and allow autosuspend.
3680 		 */
3681 		usb_autopm_put_interface(intf);
3682  loop_disconnected:
3683 		usb_unlock_device(hdev);
3684 		kref_put(&hub->kref, hub_release);
3685 
3686         } /* end while (1) */
3687 }
3688 
hub_thread(void * __unused)3689 static int hub_thread(void *__unused)
3690 {
3691 	/* khubd needs to be freezable to avoid intefering with USB-PERSIST
3692 	 * port handover.  Otherwise it might see that a full-speed device
3693 	 * was gone before the EHCI controller had handed its port over to
3694 	 * the companion full-speed controller.
3695 	 */
3696 	set_freezable();
3697 
3698 	do {
3699 		hub_events();
3700 		wait_event_freezable(khubd_wait,
3701 				!list_empty(&hub_event_list) ||
3702 				kthread_should_stop());
3703 	} while (!kthread_should_stop() || !list_empty(&hub_event_list));
3704 
3705 	pr_debug("%s: khubd exiting\n", usbcore_name);
3706 	return 0;
3707 }
3708 
3709 static const struct usb_device_id hub_id_table[] = {
3710     { .match_flags = USB_DEVICE_ID_MATCH_DEV_CLASS,
3711       .bDeviceClass = USB_CLASS_HUB},
3712     { .match_flags = USB_DEVICE_ID_MATCH_INT_CLASS,
3713       .bInterfaceClass = USB_CLASS_HUB},
3714     { }						/* Terminating entry */
3715 };
3716 
3717 MODULE_DEVICE_TABLE (usb, hub_id_table);
3718 
3719 static struct usb_driver hub_driver = {
3720 	.name =		"hub",
3721 	.probe =	hub_probe,
3722 	.disconnect =	hub_disconnect,
3723 	.suspend =	hub_suspend,
3724 	.resume =	hub_resume,
3725 	.reset_resume =	hub_reset_resume,
3726 	.pre_reset =	hub_pre_reset,
3727 	.post_reset =	hub_post_reset,
3728 	.unlocked_ioctl = hub_ioctl,
3729 	.id_table =	hub_id_table,
3730 	.supports_autosuspend =	1,
3731 };
3732 
usb_hub_init(void)3733 int usb_hub_init(void)
3734 {
3735 	if (usb_register(&hub_driver) < 0) {
3736 		printk(KERN_ERR "%s: can't register hub driver\n",
3737 			usbcore_name);
3738 		return -1;
3739 	}
3740 
3741 	khubd_task = kthread_run(hub_thread, NULL, "khubd");
3742 	if (!IS_ERR(khubd_task))
3743 		return 0;
3744 
3745 	/* Fall through if kernel_thread failed */
3746 	usb_deregister(&hub_driver);
3747 	printk(KERN_ERR "%s: can't start khubd\n", usbcore_name);
3748 
3749 	return -1;
3750 }
3751 
usb_hub_cleanup(void)3752 void usb_hub_cleanup(void)
3753 {
3754 	kthread_stop(khubd_task);
3755 
3756 	/*
3757 	 * Hub resources are freed for us by usb_deregister. It calls
3758 	 * usb_driver_purge on every device which in turn calls that
3759 	 * devices disconnect function if it is using this driver.
3760 	 * The hub_disconnect function takes care of releasing the
3761 	 * individual hub resources. -greg
3762 	 */
3763 	usb_deregister(&hub_driver);
3764 } /* usb_hub_cleanup() */
3765 
descriptors_changed(struct usb_device * udev,struct usb_device_descriptor * old_device_descriptor)3766 static int descriptors_changed(struct usb_device *udev,
3767 		struct usb_device_descriptor *old_device_descriptor)
3768 {
3769 	int		changed = 0;
3770 	unsigned	index;
3771 	unsigned	serial_len = 0;
3772 	unsigned	len;
3773 	unsigned	old_length;
3774 	int		length;
3775 	char		*buf;
3776 
3777 	if (memcmp(&udev->descriptor, old_device_descriptor,
3778 			sizeof(*old_device_descriptor)) != 0)
3779 		return 1;
3780 
3781 	/* Since the idVendor, idProduct, and bcdDevice values in the
3782 	 * device descriptor haven't changed, we will assume the
3783 	 * Manufacturer and Product strings haven't changed either.
3784 	 * But the SerialNumber string could be different (e.g., a
3785 	 * different flash card of the same brand).
3786 	 */
3787 	if (udev->serial)
3788 		serial_len = strlen(udev->serial) + 1;
3789 
3790 	len = serial_len;
3791 	for (index = 0; index < udev->descriptor.bNumConfigurations; index++) {
3792 		old_length = le16_to_cpu(udev->config[index].desc.wTotalLength);
3793 		len = max(len, old_length);
3794 	}
3795 
3796 	buf = kmalloc(len, GFP_NOIO);
3797 	if (buf == NULL) {
3798 		dev_err(&udev->dev, "no mem to re-read configs after reset\n");
3799 		/* assume the worst */
3800 		return 1;
3801 	}
3802 	for (index = 0; index < udev->descriptor.bNumConfigurations; index++) {
3803 		old_length = le16_to_cpu(udev->config[index].desc.wTotalLength);
3804 		length = usb_get_descriptor(udev, USB_DT_CONFIG, index, buf,
3805 				old_length);
3806 		if (length != old_length) {
3807 			dev_dbg(&udev->dev, "config index %d, error %d\n",
3808 					index, length);
3809 			changed = 1;
3810 			break;
3811 		}
3812 		if (memcmp (buf, udev->rawdescriptors[index], old_length)
3813 				!= 0) {
3814 			dev_dbg(&udev->dev, "config index %d changed (#%d)\n",
3815 				index,
3816 				((struct usb_config_descriptor *) buf)->
3817 					bConfigurationValue);
3818 			changed = 1;
3819 			break;
3820 		}
3821 	}
3822 
3823 	if (!changed && serial_len) {
3824 		length = usb_string(udev, udev->descriptor.iSerialNumber,
3825 				buf, serial_len);
3826 		if (length + 1 != serial_len) {
3827 			dev_dbg(&udev->dev, "serial string error %d\n",
3828 					length);
3829 			changed = 1;
3830 		} else if (memcmp(buf, udev->serial, length) != 0) {
3831 			dev_dbg(&udev->dev, "serial string changed\n");
3832 			changed = 1;
3833 		}
3834 	}
3835 
3836 	kfree(buf);
3837 	return changed;
3838 }
3839 
3840 /**
3841  * usb_reset_and_verify_device - perform a USB port reset to reinitialize a device
3842  * @udev: device to reset (not in SUSPENDED or NOTATTACHED state)
3843  *
3844  * WARNING - don't use this routine to reset a composite device
3845  * (one with multiple interfaces owned by separate drivers)!
3846  * Use usb_reset_device() instead.
3847  *
3848  * Do a port reset, reassign the device's address, and establish its
3849  * former operating configuration.  If the reset fails, or the device's
3850  * descriptors change from their values before the reset, or the original
3851  * configuration and altsettings cannot be restored, a flag will be set
3852  * telling khubd to pretend the device has been disconnected and then
3853  * re-connected.  All drivers will be unbound, and the device will be
3854  * re-enumerated and probed all over again.
3855  *
3856  * Returns 0 if the reset succeeded, -ENODEV if the device has been
3857  * flagged for logical disconnection, or some other negative error code
3858  * if the reset wasn't even attempted.
3859  *
3860  * The caller must own the device lock.  For example, it's safe to use
3861  * this from a driver probe() routine after downloading new firmware.
3862  * For calls that might not occur during probe(), drivers should lock
3863  * the device using usb_lock_device_for_reset().
3864  *
3865  * Locking exception: This routine may also be called from within an
3866  * autoresume handler.  Such usage won't conflict with other tasks
3867  * holding the device lock because these tasks should always call
3868  * usb_autopm_resume_device(), thereby preventing any unwanted autoresume.
3869  */
usb_reset_and_verify_device(struct usb_device * udev)3870 static int usb_reset_and_verify_device(struct usb_device *udev)
3871 {
3872 	struct usb_device		*parent_hdev = udev->parent;
3873 	struct usb_hub			*parent_hub;
3874 	struct usb_hcd			*hcd = bus_to_hcd(udev->bus);
3875 	struct usb_device_descriptor	descriptor = udev->descriptor;
3876 	int 				i, ret = 0;
3877 	int				port1 = udev->portnum;
3878 
3879 	if (udev->state == USB_STATE_NOTATTACHED ||
3880 			udev->state == USB_STATE_SUSPENDED) {
3881 		dev_dbg(&udev->dev, "device reset not allowed in state %d\n",
3882 				udev->state);
3883 		return -EINVAL;
3884 	}
3885 
3886 	if (!parent_hdev) {
3887 		/* this requires hcd-specific logic; see ohci_restart() */
3888 		dev_dbg(&udev->dev, "%s for root hub!\n", __func__);
3889 		return -EISDIR;
3890 	}
3891 	parent_hub = hdev_to_hub(parent_hdev);
3892 
3893 	set_bit(port1, parent_hub->busy_bits);
3894 	for (i = 0; i < SET_CONFIG_TRIES; ++i) {
3895 
3896 		/* ep0 maxpacket size may change; let the HCD know about it.
3897 		 * Other endpoints will be handled by re-enumeration. */
3898 		usb_ep0_reinit(udev);
3899 		ret = hub_port_init(parent_hub, udev, port1, i);
3900 		if (ret >= 0 || ret == -ENOTCONN || ret == -ENODEV)
3901 			break;
3902 	}
3903 	clear_bit(port1, parent_hub->busy_bits);
3904 
3905 	if (ret < 0)
3906 		goto re_enumerate;
3907 
3908 	/* Device might have changed firmware (DFU or similar) */
3909 	if (descriptors_changed(udev, &descriptor)) {
3910 		dev_info(&udev->dev, "device firmware changed\n");
3911 		udev->descriptor = descriptor;	/* for disconnect() calls */
3912 		goto re_enumerate;
3913   	}
3914 
3915 	/* Restore the device's previous configuration */
3916 	if (!udev->actconfig)
3917 		goto done;
3918 
3919 	mutex_lock(hcd->bandwidth_mutex);
3920 	ret = usb_hcd_alloc_bandwidth(udev, udev->actconfig, NULL, NULL);
3921 	if (ret < 0) {
3922 		dev_warn(&udev->dev,
3923 				"Busted HC?  Not enough HCD resources for "
3924 				"old configuration.\n");
3925 		mutex_unlock(hcd->bandwidth_mutex);
3926 		goto re_enumerate;
3927 	}
3928 	ret = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3929 			USB_REQ_SET_CONFIGURATION, 0,
3930 			udev->actconfig->desc.bConfigurationValue, 0,
3931 			NULL, 0, USB_CTRL_SET_TIMEOUT);
3932 	if (ret < 0) {
3933 		dev_err(&udev->dev,
3934 			"can't restore configuration #%d (error=%d)\n",
3935 			udev->actconfig->desc.bConfigurationValue, ret);
3936 		mutex_unlock(hcd->bandwidth_mutex);
3937 		goto re_enumerate;
3938   	}
3939 	mutex_unlock(hcd->bandwidth_mutex);
3940 	usb_set_device_state(udev, USB_STATE_CONFIGURED);
3941 
3942 	/* Put interfaces back into the same altsettings as before.
3943 	 * Don't bother to send the Set-Interface request for interfaces
3944 	 * that were already in altsetting 0; besides being unnecessary,
3945 	 * many devices can't handle it.  Instead just reset the host-side
3946 	 * endpoint state.
3947 	 */
3948 	for (i = 0; i < udev->actconfig->desc.bNumInterfaces; i++) {
3949 		struct usb_host_config *config = udev->actconfig;
3950 		struct usb_interface *intf = config->interface[i];
3951 		struct usb_interface_descriptor *desc;
3952 
3953 		desc = &intf->cur_altsetting->desc;
3954 		if (desc->bAlternateSetting == 0) {
3955 			usb_disable_interface(udev, intf, true);
3956 			usb_enable_interface(udev, intf, true);
3957 			ret = 0;
3958 		} else {
3959 			/* Let the bandwidth allocation function know that this
3960 			 * device has been reset, and it will have to use
3961 			 * alternate setting 0 as the current alternate setting.
3962 			 */
3963 			intf->resetting_device = 1;
3964 			ret = usb_set_interface(udev, desc->bInterfaceNumber,
3965 					desc->bAlternateSetting);
3966 			intf->resetting_device = 0;
3967 		}
3968 		if (ret < 0) {
3969 			dev_err(&udev->dev, "failed to restore interface %d "
3970 				"altsetting %d (error=%d)\n",
3971 				desc->bInterfaceNumber,
3972 				desc->bAlternateSetting,
3973 				ret);
3974 			goto re_enumerate;
3975 		}
3976 	}
3977 
3978 done:
3979 	return 0;
3980 
3981 re_enumerate:
3982 	hub_port_logical_disconnect(parent_hub, port1);
3983 	return -ENODEV;
3984 }
3985 
3986 /**
3987  * usb_reset_device - warn interface drivers and perform a USB port reset
3988  * @udev: device to reset (not in SUSPENDED or NOTATTACHED state)
3989  *
3990  * Warns all drivers bound to registered interfaces (using their pre_reset
3991  * method), performs the port reset, and then lets the drivers know that
3992  * the reset is over (using their post_reset method).
3993  *
3994  * Return value is the same as for usb_reset_and_verify_device().
3995  *
3996  * The caller must own the device lock.  For example, it's safe to use
3997  * this from a driver probe() routine after downloading new firmware.
3998  * For calls that might not occur during probe(), drivers should lock
3999  * the device using usb_lock_device_for_reset().
4000  *
4001  * If an interface is currently being probed or disconnected, we assume
4002  * its driver knows how to handle resets.  For all other interfaces,
4003  * if the driver doesn't have pre_reset and post_reset methods then
4004  * we attempt to unbind it and rebind afterward.
4005  */
usb_reset_device(struct usb_device * udev)4006 int usb_reset_device(struct usb_device *udev)
4007 {
4008 	int ret;
4009 	int i;
4010 	struct usb_host_config *config = udev->actconfig;
4011 
4012 	if (udev->state == USB_STATE_NOTATTACHED ||
4013 			udev->state == USB_STATE_SUSPENDED) {
4014 		dev_dbg(&udev->dev, "device reset not allowed in state %d\n",
4015 				udev->state);
4016 		return -EINVAL;
4017 	}
4018 
4019 	/* Prevent autosuspend during the reset */
4020 	usb_autoresume_device(udev);
4021 
4022 	if (config) {
4023 		for (i = 0; i < config->desc.bNumInterfaces; ++i) {
4024 			struct usb_interface *cintf = config->interface[i];
4025 			struct usb_driver *drv;
4026 			int unbind = 0;
4027 
4028 			if (cintf->dev.driver) {
4029 				drv = to_usb_driver(cintf->dev.driver);
4030 				if (drv->pre_reset && drv->post_reset)
4031 					unbind = (drv->pre_reset)(cintf);
4032 				else if (cintf->condition ==
4033 						USB_INTERFACE_BOUND)
4034 					unbind = 1;
4035 				if (unbind)
4036 					usb_forced_unbind_intf(cintf);
4037 			}
4038 		}
4039 	}
4040 
4041 	ret = usb_reset_and_verify_device(udev);
4042 
4043 	if (config) {
4044 		for (i = config->desc.bNumInterfaces - 1; i >= 0; --i) {
4045 			struct usb_interface *cintf = config->interface[i];
4046 			struct usb_driver *drv;
4047 			int rebind = cintf->needs_binding;
4048 
4049 			if (!rebind && cintf->dev.driver) {
4050 				drv = to_usb_driver(cintf->dev.driver);
4051 				if (drv->post_reset)
4052 					rebind = (drv->post_reset)(cintf);
4053 				else if (cintf->condition ==
4054 						USB_INTERFACE_BOUND)
4055 					rebind = 1;
4056 			}
4057 			if (ret == 0 && rebind)
4058 				usb_rebind_intf(cintf);
4059 		}
4060 	}
4061 
4062 	usb_autosuspend_device(udev);
4063 	return ret;
4064 }
4065 EXPORT_SYMBOL_GPL(usb_reset_device);
4066 
4067 
4068 /**
4069  * usb_queue_reset_device - Reset a USB device from an atomic context
4070  * @iface: USB interface belonging to the device to reset
4071  *
4072  * This function can be used to reset a USB device from an atomic
4073  * context, where usb_reset_device() won't work (as it blocks).
4074  *
4075  * Doing a reset via this method is functionally equivalent to calling
4076  * usb_reset_device(), except for the fact that it is delayed to a
4077  * workqueue. This means that any drivers bound to other interfaces
4078  * might be unbound, as well as users from usbfs in user space.
4079  *
4080  * Corner cases:
4081  *
4082  * - Scheduling two resets at the same time from two different drivers
4083  *   attached to two different interfaces of the same device is
4084  *   possible; depending on how the driver attached to each interface
4085  *   handles ->pre_reset(), the second reset might happen or not.
4086  *
4087  * - If a driver is unbound and it had a pending reset, the reset will
4088  *   be cancelled.
4089  *
4090  * - This function can be called during .probe() or .disconnect()
4091  *   times. On return from .disconnect(), any pending resets will be
4092  *   cancelled.
4093  *
4094  * There is no no need to lock/unlock the @reset_ws as schedule_work()
4095  * does its own.
4096  *
4097  * NOTE: We don't do any reference count tracking because it is not
4098  *     needed. The lifecycle of the work_struct is tied to the
4099  *     usb_interface. Before destroying the interface we cancel the
4100  *     work_struct, so the fact that work_struct is queued and or
4101  *     running means the interface (and thus, the device) exist and
4102  *     are referenced.
4103  */
usb_queue_reset_device(struct usb_interface * iface)4104 void usb_queue_reset_device(struct usb_interface *iface)
4105 {
4106 	schedule_work(&iface->reset_ws);
4107 }
4108 EXPORT_SYMBOL_GPL(usb_queue_reset_device);
4109