xref: /OK3568_Linux_fs/kernel/drivers/usb/core/hub.c (revision 4882a59341e53eb6f0b4789bf948001014eff981)
1 // SPDX-License-Identifier: GPL-2.0
2 /*
3  * USB hub driver.
4  *
5  * (C) Copyright 1999 Linus Torvalds
6  * (C) Copyright 1999 Johannes Erdfelt
7  * (C) Copyright 1999 Gregory P. Smith
8  * (C) Copyright 2001 Brad Hards (bhards@bigpond.net.au)
9  *
10  * Released under the GPLv2 only.
11  */
12 
13 #include <linux/kernel.h>
14 #include <linux/errno.h>
15 #include <linux/module.h>
16 #include <linux/moduleparam.h>
17 #include <linux/completion.h>
18 #include <linux/sched/mm.h>
19 #include <linux/list.h>
20 #include <linux/slab.h>
21 #include <linux/kcov.h>
22 #include <linux/ioctl.h>
23 #include <linux/usb.h>
24 #include <linux/usbdevice_fs.h>
25 #include <linux/usb/hcd.h>
26 #include <linux/usb/otg.h>
27 #include <linux/usb/quirks.h>
28 #include <linux/workqueue.h>
29 #include <linux/mutex.h>
30 #include <linux/random.h>
31 #include <linux/pm_qos.h>
32 #include <linux/kobject.h>
33 
34 #include <linux/uaccess.h>
35 #include <asm/byteorder.h>
36 
37 #include "hub.h"
38 #include "otg_productlist.h"
39 
40 #define USB_VENDOR_GENESYS_LOGIC		0x05e3
41 #define USB_VENDOR_SMSC				0x0424
42 #define USB_PRODUCT_USB5534B			0x5534
43 #define USB_VENDOR_CYPRESS			0x04b4
44 #define USB_PRODUCT_CY7C65632			0x6570
45 #define HUB_QUIRK_CHECK_PORT_AUTOSUSPEND	0x01
46 #define HUB_QUIRK_DISABLE_AUTOSUSPEND		0x02
47 
48 #define USB_TP_TRANSMISSION_DELAY	40	/* ns */
49 #define USB_TP_TRANSMISSION_DELAY_MAX	65535	/* ns */
50 #define USB_PING_RESPONSE_TIME		400	/* ns */
51 
52 /* Protect struct usb_device->state and ->children members
53  * Note: Both are also protected by ->dev.sem, except that ->state can
54  * change to USB_STATE_NOTATTACHED even when the semaphore isn't held. */
55 static DEFINE_SPINLOCK(device_state_lock);
56 
57 /* workqueue to process hub events */
58 static struct workqueue_struct *hub_wq;
59 static void hub_event(struct work_struct *work);
60 
61 /* synchronize hub-port add/remove and peering operations */
62 DEFINE_MUTEX(usb_port_peer_mutex);
63 
64 /* cycle leds on hubs that aren't blinking for attention */
65 static bool blinkenlights;
66 module_param(blinkenlights, bool, S_IRUGO);
67 MODULE_PARM_DESC(blinkenlights, "true to cycle leds on hubs");
68 
69 /*
70  * Device SATA8000 FW1.0 from DATAST0R Technology Corp requires about
71  * 10 seconds to send reply for the initial 64-byte descriptor request.
72  */
73 /* define initial 64-byte descriptor request timeout in milliseconds */
74 static int initial_descriptor_timeout = USB_CTRL_GET_TIMEOUT;
75 module_param(initial_descriptor_timeout, int, S_IRUGO|S_IWUSR);
76 MODULE_PARM_DESC(initial_descriptor_timeout,
77 		"initial 64-byte descriptor request timeout in milliseconds "
78 		"(default 5000 - 5.0 seconds)");
79 
80 /*
81  * As of 2.6.10 we introduce a new USB device initialization scheme which
82  * closely resembles the way Windows works.  Hopefully it will be compatible
83  * with a wider range of devices than the old scheme.  However some previously
84  * working devices may start giving rise to "device not accepting address"
85  * errors; if that happens the user can try the old scheme by adjusting the
86  * following module parameters.
87  *
88  * For maximum flexibility there are two boolean parameters to control the
89  * hub driver's behavior.  On the first initialization attempt, if the
90  * "old_scheme_first" parameter is set then the old scheme will be used,
91  * otherwise the new scheme is used.  If that fails and "use_both_schemes"
92  * is set, then the driver will make another attempt, using the other scheme.
93  */
94 static bool old_scheme_first;
95 module_param(old_scheme_first, bool, S_IRUGO | S_IWUSR);
96 MODULE_PARM_DESC(old_scheme_first,
97 		 "start with the old device initialization scheme");
98 
99 static bool use_both_schemes = true;
100 module_param(use_both_schemes, bool, S_IRUGO | S_IWUSR);
101 MODULE_PARM_DESC(use_both_schemes,
102 		"try the other device initialization scheme if the "
103 		"first one fails");
104 
105 /* Mutual exclusion for EHCI CF initialization.  This interferes with
106  * port reset on some companion controllers.
107  */
108 DECLARE_RWSEM(ehci_cf_port_reset_rwsem);
109 EXPORT_SYMBOL_GPL(ehci_cf_port_reset_rwsem);
110 
111 #define HUB_DEBOUNCE_TIMEOUT	2000
112 #define HUB_DEBOUNCE_STEP	  25
113 #define HUB_DEBOUNCE_STABLE	 100
114 
115 static void hub_release(struct kref *kref);
116 static int usb_reset_and_verify_device(struct usb_device *udev);
117 static int hub_port_disable(struct usb_hub *hub, int port1, int set_state);
118 static bool hub_port_warm_reset_required(struct usb_hub *hub, int port1,
119 		u16 portstatus);
120 
portspeed(struct usb_hub * hub,int portstatus)121 static inline char *portspeed(struct usb_hub *hub, int portstatus)
122 {
123 	if (hub_is_superspeedplus(hub->hdev))
124 		return "10.0 Gb/s";
125 	if (hub_is_superspeed(hub->hdev))
126 		return "5.0 Gb/s";
127 	if (portstatus & USB_PORT_STAT_HIGH_SPEED)
128 		return "480 Mb/s";
129 	else if (portstatus & USB_PORT_STAT_LOW_SPEED)
130 		return "1.5 Mb/s";
131 	else
132 		return "12 Mb/s";
133 }
134 
135 /* Note that hdev or one of its children must be locked! */
usb_hub_to_struct_hub(struct usb_device * hdev)136 struct usb_hub *usb_hub_to_struct_hub(struct usb_device *hdev)
137 {
138 	if (!hdev || !hdev->actconfig || !hdev->maxchild)
139 		return NULL;
140 	return usb_get_intfdata(hdev->actconfig->interface[0]);
141 }
142 
usb_device_supports_lpm(struct usb_device * udev)143 int usb_device_supports_lpm(struct usb_device *udev)
144 {
145 	/* Some devices have trouble with LPM */
146 	if (udev->quirks & USB_QUIRK_NO_LPM)
147 		return 0;
148 
149 	/* USB 2.1 (and greater) devices indicate LPM support through
150 	 * their USB 2.0 Extended Capabilities BOS descriptor.
151 	 */
152 	if (udev->speed == USB_SPEED_HIGH || udev->speed == USB_SPEED_FULL) {
153 		if (udev->bos->ext_cap &&
154 			(USB_LPM_SUPPORT &
155 			 le32_to_cpu(udev->bos->ext_cap->bmAttributes)))
156 			return 1;
157 		return 0;
158 	}
159 
160 	/*
161 	 * According to the USB 3.0 spec, all USB 3.0 devices must support LPM.
162 	 * However, there are some that don't, and they set the U1/U2 exit
163 	 * latencies to zero.
164 	 */
165 	if (!udev->bos->ss_cap) {
166 		dev_info(&udev->dev, "No LPM exit latency info found, disabling LPM.\n");
167 		return 0;
168 	}
169 
170 	if (udev->bos->ss_cap->bU1devExitLat == 0 &&
171 			udev->bos->ss_cap->bU2DevExitLat == 0) {
172 		if (udev->parent)
173 			dev_info(&udev->dev, "LPM exit latency is zeroed, disabling LPM.\n");
174 		else
175 			dev_info(&udev->dev, "We don't know the algorithms for LPM for this host, disabling LPM.\n");
176 		return 0;
177 	}
178 
179 	if (!udev->parent || udev->parent->lpm_capable)
180 		return 1;
181 	return 0;
182 }
183 
184 /*
185  * Set the Maximum Exit Latency (MEL) for the host to wakup up the path from
186  * U1/U2, send a PING to the device and receive a PING_RESPONSE.
187  * See USB 3.1 section C.1.5.2
188  */
usb_set_lpm_mel(struct usb_device * udev,struct usb3_lpm_parameters * udev_lpm_params,unsigned int udev_exit_latency,struct usb_hub * hub,struct usb3_lpm_parameters * hub_lpm_params,unsigned int hub_exit_latency)189 static void usb_set_lpm_mel(struct usb_device *udev,
190 		struct usb3_lpm_parameters *udev_lpm_params,
191 		unsigned int udev_exit_latency,
192 		struct usb_hub *hub,
193 		struct usb3_lpm_parameters *hub_lpm_params,
194 		unsigned int hub_exit_latency)
195 {
196 	unsigned int total_mel;
197 
198 	/*
199 	 * tMEL1. time to transition path from host to device into U0.
200 	 * MEL for parent already contains the delay up to parent, so only add
201 	 * the exit latency for the last link (pick the slower exit latency),
202 	 * and the hub header decode latency. See USB 3.1 section C 2.2.1
203 	 * Store MEL in nanoseconds
204 	 */
205 	total_mel = hub_lpm_params->mel +
206 		max(udev_exit_latency, hub_exit_latency) * 1000 +
207 		hub->descriptor->u.ss.bHubHdrDecLat * 100;
208 
209 	/*
210 	 * tMEL2. Time to submit PING packet. Sum of tTPTransmissionDelay for
211 	 * each link + wHubDelay for each hub. Add only for last link.
212 	 * tMEL4, the time for PING_RESPONSE to traverse upstream is similar.
213 	 * Multiply by 2 to include it as well.
214 	 */
215 	total_mel += (__le16_to_cpu(hub->descriptor->u.ss.wHubDelay) +
216 		      USB_TP_TRANSMISSION_DELAY) * 2;
217 
218 	/*
219 	 * tMEL3, tPingResponse. Time taken by device to generate PING_RESPONSE
220 	 * after receiving PING. Also add 2100ns as stated in USB 3.1 C 1.5.2.4
221 	 * to cover the delay if the PING_RESPONSE is queued behind a Max Packet
222 	 * Size DP.
223 	 * Note these delays should be added only once for the entire path, so
224 	 * add them to the MEL of the device connected to the roothub.
225 	 */
226 	if (!hub->hdev->parent)
227 		total_mel += USB_PING_RESPONSE_TIME + 2100;
228 
229 	udev_lpm_params->mel = total_mel;
230 }
231 
232 /*
233  * Set the maximum Device to Host Exit Latency (PEL) for the device to initiate
234  * a transition from either U1 or U2.
235  */
usb_set_lpm_pel(struct usb_device * udev,struct usb3_lpm_parameters * udev_lpm_params,unsigned int udev_exit_latency,struct usb_hub * hub,struct usb3_lpm_parameters * hub_lpm_params,unsigned int hub_exit_latency,unsigned int port_to_port_exit_latency)236 static void usb_set_lpm_pel(struct usb_device *udev,
237 		struct usb3_lpm_parameters *udev_lpm_params,
238 		unsigned int udev_exit_latency,
239 		struct usb_hub *hub,
240 		struct usb3_lpm_parameters *hub_lpm_params,
241 		unsigned int hub_exit_latency,
242 		unsigned int port_to_port_exit_latency)
243 {
244 	unsigned int first_link_pel;
245 	unsigned int hub_pel;
246 
247 	/*
248 	 * First, the device sends an LFPS to transition the link between the
249 	 * device and the parent hub into U0.  The exit latency is the bigger of
250 	 * the device exit latency or the hub exit latency.
251 	 */
252 	if (udev_exit_latency > hub_exit_latency)
253 		first_link_pel = udev_exit_latency * 1000;
254 	else
255 		first_link_pel = hub_exit_latency * 1000;
256 
257 	/*
258 	 * When the hub starts to receive the LFPS, there is a slight delay for
259 	 * it to figure out that one of the ports is sending an LFPS.  Then it
260 	 * will forward the LFPS to its upstream link.  The exit latency is the
261 	 * delay, plus the PEL that we calculated for this hub.
262 	 */
263 	hub_pel = port_to_port_exit_latency * 1000 + hub_lpm_params->pel;
264 
265 	/*
266 	 * According to figure C-7 in the USB 3.0 spec, the PEL for this device
267 	 * is the greater of the two exit latencies.
268 	 */
269 	if (first_link_pel > hub_pel)
270 		udev_lpm_params->pel = first_link_pel;
271 	else
272 		udev_lpm_params->pel = hub_pel;
273 }
274 
275 /*
276  * Set the System Exit Latency (SEL) to indicate the total worst-case time from
277  * when a device initiates a transition to U0, until when it will receive the
278  * first packet from the host controller.
279  *
280  * Section C.1.5.1 describes the four components to this:
281  *  - t1: device PEL
282  *  - t2: time for the ERDY to make it from the device to the host.
283  *  - t3: a host-specific delay to process the ERDY.
284  *  - t4: time for the packet to make it from the host to the device.
285  *
286  * t3 is specific to both the xHCI host and the platform the host is integrated
287  * into.  The Intel HW folks have said it's negligible, FIXME if a different
288  * vendor says otherwise.
289  */
usb_set_lpm_sel(struct usb_device * udev,struct usb3_lpm_parameters * udev_lpm_params)290 static void usb_set_lpm_sel(struct usb_device *udev,
291 		struct usb3_lpm_parameters *udev_lpm_params)
292 {
293 	struct usb_device *parent;
294 	unsigned int num_hubs;
295 	unsigned int total_sel;
296 
297 	/* t1 = device PEL */
298 	total_sel = udev_lpm_params->pel;
299 	/* How many external hubs are in between the device & the root port. */
300 	for (parent = udev->parent, num_hubs = 0; parent->parent;
301 			parent = parent->parent)
302 		num_hubs++;
303 	/* t2 = 2.1us + 250ns * (num_hubs - 1) */
304 	if (num_hubs > 0)
305 		total_sel += 2100 + 250 * (num_hubs - 1);
306 
307 	/* t4 = 250ns * num_hubs */
308 	total_sel += 250 * num_hubs;
309 
310 	udev_lpm_params->sel = total_sel;
311 }
312 
usb_set_lpm_parameters(struct usb_device * udev)313 static void usb_set_lpm_parameters(struct usb_device *udev)
314 {
315 	struct usb_hub *hub;
316 	unsigned int port_to_port_delay;
317 	unsigned int udev_u1_del;
318 	unsigned int udev_u2_del;
319 	unsigned int hub_u1_del;
320 	unsigned int hub_u2_del;
321 
322 	if (!udev->lpm_capable || udev->speed < USB_SPEED_SUPER)
323 		return;
324 
325 	hub = usb_hub_to_struct_hub(udev->parent);
326 	/* It doesn't take time to transition the roothub into U0, since it
327 	 * doesn't have an upstream link.
328 	 */
329 	if (!hub)
330 		return;
331 
332 	udev_u1_del = udev->bos->ss_cap->bU1devExitLat;
333 	udev_u2_del = le16_to_cpu(udev->bos->ss_cap->bU2DevExitLat);
334 	hub_u1_del = udev->parent->bos->ss_cap->bU1devExitLat;
335 	hub_u2_del = le16_to_cpu(udev->parent->bos->ss_cap->bU2DevExitLat);
336 
337 	usb_set_lpm_mel(udev, &udev->u1_params, udev_u1_del,
338 			hub, &udev->parent->u1_params, hub_u1_del);
339 
340 	usb_set_lpm_mel(udev, &udev->u2_params, udev_u2_del,
341 			hub, &udev->parent->u2_params, hub_u2_del);
342 
343 	/*
344 	 * Appendix C, section C.2.2.2, says that there is a slight delay from
345 	 * when the parent hub notices the downstream port is trying to
346 	 * transition to U0 to when the hub initiates a U0 transition on its
347 	 * upstream port.  The section says the delays are tPort2PortU1EL and
348 	 * tPort2PortU2EL, but it doesn't define what they are.
349 	 *
350 	 * The hub chapter, sections 10.4.2.4 and 10.4.2.5 seem to be talking
351 	 * about the same delays.  Use the maximum delay calculations from those
352 	 * sections.  For U1, it's tHubPort2PortExitLat, which is 1us max.  For
353 	 * U2, it's tHubPort2PortExitLat + U2DevExitLat - U1DevExitLat.  I
354 	 * assume the device exit latencies they are talking about are the hub
355 	 * exit latencies.
356 	 *
357 	 * What do we do if the U2 exit latency is less than the U1 exit
358 	 * latency?  It's possible, although not likely...
359 	 */
360 	port_to_port_delay = 1;
361 
362 	usb_set_lpm_pel(udev, &udev->u1_params, udev_u1_del,
363 			hub, &udev->parent->u1_params, hub_u1_del,
364 			port_to_port_delay);
365 
366 	if (hub_u2_del > hub_u1_del)
367 		port_to_port_delay = 1 + hub_u2_del - hub_u1_del;
368 	else
369 		port_to_port_delay = 1 + hub_u1_del;
370 
371 	usb_set_lpm_pel(udev, &udev->u2_params, udev_u2_del,
372 			hub, &udev->parent->u2_params, hub_u2_del,
373 			port_to_port_delay);
374 
375 	/* Now that we've got PEL, calculate SEL. */
376 	usb_set_lpm_sel(udev, &udev->u1_params);
377 	usb_set_lpm_sel(udev, &udev->u2_params);
378 }
379 
380 /* USB 2.0 spec Section 11.24.4.5 */
get_hub_descriptor(struct usb_device * hdev,struct usb_hub_descriptor * desc)381 static int get_hub_descriptor(struct usb_device *hdev,
382 		struct usb_hub_descriptor *desc)
383 {
384 	int i, ret, size;
385 	unsigned dtype;
386 
387 	if (hub_is_superspeed(hdev)) {
388 		dtype = USB_DT_SS_HUB;
389 		size = USB_DT_SS_HUB_SIZE;
390 	} else {
391 		dtype = USB_DT_HUB;
392 		size = sizeof(struct usb_hub_descriptor);
393 	}
394 
395 	for (i = 0; i < 3; i++) {
396 		ret = usb_control_msg(hdev, usb_rcvctrlpipe(hdev, 0),
397 			USB_REQ_GET_DESCRIPTOR, USB_DIR_IN | USB_RT_HUB,
398 			dtype << 8, 0, desc, size,
399 			USB_CTRL_GET_TIMEOUT);
400 		if (hub_is_superspeed(hdev)) {
401 			if (ret == size)
402 				return ret;
403 		} else if (ret >= USB_DT_HUB_NONVAR_SIZE + 2) {
404 			/* Make sure we have the DeviceRemovable field. */
405 			size = USB_DT_HUB_NONVAR_SIZE + desc->bNbrPorts / 8 + 1;
406 			if (ret < size)
407 				return -EMSGSIZE;
408 			return ret;
409 		}
410 	}
411 	return -EINVAL;
412 }
413 
414 /*
415  * USB 2.0 spec Section 11.24.2.1
416  */
clear_hub_feature(struct usb_device * hdev,int feature)417 static int clear_hub_feature(struct usb_device *hdev, int feature)
418 {
419 	return usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
420 		USB_REQ_CLEAR_FEATURE, USB_RT_HUB, feature, 0, NULL, 0, 1000);
421 }
422 
423 /*
424  * USB 2.0 spec Section 11.24.2.2
425  */
usb_clear_port_feature(struct usb_device * hdev,int port1,int feature)426 int usb_clear_port_feature(struct usb_device *hdev, int port1, int feature)
427 {
428 	return usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
429 		USB_REQ_CLEAR_FEATURE, USB_RT_PORT, feature, port1,
430 		NULL, 0, 1000);
431 }
432 
433 /*
434  * USB 2.0 spec Section 11.24.2.13
435  */
set_port_feature(struct usb_device * hdev,int port1,int feature)436 static int set_port_feature(struct usb_device *hdev, int port1, int feature)
437 {
438 	return usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
439 		USB_REQ_SET_FEATURE, USB_RT_PORT, feature, port1,
440 		NULL, 0, 1000);
441 }
442 
to_led_name(int selector)443 static char *to_led_name(int selector)
444 {
445 	switch (selector) {
446 	case HUB_LED_AMBER:
447 		return "amber";
448 	case HUB_LED_GREEN:
449 		return "green";
450 	case HUB_LED_OFF:
451 		return "off";
452 	case HUB_LED_AUTO:
453 		return "auto";
454 	default:
455 		return "??";
456 	}
457 }
458 
459 /*
460  * USB 2.0 spec Section 11.24.2.7.1.10 and table 11-7
461  * for info about using port indicators
462  */
set_port_led(struct usb_hub * hub,int port1,int selector)463 static void set_port_led(struct usb_hub *hub, int port1, int selector)
464 {
465 	struct usb_port *port_dev = hub->ports[port1 - 1];
466 	int status;
467 
468 	status = set_port_feature(hub->hdev, (selector << 8) | port1,
469 			USB_PORT_FEAT_INDICATOR);
470 	dev_dbg(&port_dev->dev, "indicator %s status %d\n",
471 		to_led_name(selector), status);
472 }
473 
474 #define	LED_CYCLE_PERIOD	((2*HZ)/3)
475 
led_work(struct work_struct * work)476 static void led_work(struct work_struct *work)
477 {
478 	struct usb_hub		*hub =
479 		container_of(work, struct usb_hub, leds.work);
480 	struct usb_device	*hdev = hub->hdev;
481 	unsigned		i;
482 	unsigned		changed = 0;
483 	int			cursor = -1;
484 
485 	if (hdev->state != USB_STATE_CONFIGURED || hub->quiescing)
486 		return;
487 
488 	for (i = 0; i < hdev->maxchild; i++) {
489 		unsigned	selector, mode;
490 
491 		/* 30%-50% duty cycle */
492 
493 		switch (hub->indicator[i]) {
494 		/* cycle marker */
495 		case INDICATOR_CYCLE:
496 			cursor = i;
497 			selector = HUB_LED_AUTO;
498 			mode = INDICATOR_AUTO;
499 			break;
500 		/* blinking green = sw attention */
501 		case INDICATOR_GREEN_BLINK:
502 			selector = HUB_LED_GREEN;
503 			mode = INDICATOR_GREEN_BLINK_OFF;
504 			break;
505 		case INDICATOR_GREEN_BLINK_OFF:
506 			selector = HUB_LED_OFF;
507 			mode = INDICATOR_GREEN_BLINK;
508 			break;
509 		/* blinking amber = hw attention */
510 		case INDICATOR_AMBER_BLINK:
511 			selector = HUB_LED_AMBER;
512 			mode = INDICATOR_AMBER_BLINK_OFF;
513 			break;
514 		case INDICATOR_AMBER_BLINK_OFF:
515 			selector = HUB_LED_OFF;
516 			mode = INDICATOR_AMBER_BLINK;
517 			break;
518 		/* blink green/amber = reserved */
519 		case INDICATOR_ALT_BLINK:
520 			selector = HUB_LED_GREEN;
521 			mode = INDICATOR_ALT_BLINK_OFF;
522 			break;
523 		case INDICATOR_ALT_BLINK_OFF:
524 			selector = HUB_LED_AMBER;
525 			mode = INDICATOR_ALT_BLINK;
526 			break;
527 		default:
528 			continue;
529 		}
530 		if (selector != HUB_LED_AUTO)
531 			changed = 1;
532 		set_port_led(hub, i + 1, selector);
533 		hub->indicator[i] = mode;
534 	}
535 	if (!changed && blinkenlights) {
536 		cursor++;
537 		cursor %= hdev->maxchild;
538 		set_port_led(hub, cursor + 1, HUB_LED_GREEN);
539 		hub->indicator[cursor] = INDICATOR_CYCLE;
540 		changed++;
541 	}
542 	if (changed)
543 		queue_delayed_work(system_power_efficient_wq,
544 				&hub->leds, LED_CYCLE_PERIOD);
545 }
546 
547 /* use a short timeout for hub/port status fetches */
548 #define	USB_STS_TIMEOUT		1000
549 #define	USB_STS_RETRIES		5
550 
551 /*
552  * USB 2.0 spec Section 11.24.2.6
553  */
get_hub_status(struct usb_device * hdev,struct usb_hub_status * data)554 static int get_hub_status(struct usb_device *hdev,
555 		struct usb_hub_status *data)
556 {
557 	int i, status = -ETIMEDOUT;
558 
559 	for (i = 0; i < USB_STS_RETRIES &&
560 			(status == -ETIMEDOUT || status == -EPIPE); i++) {
561 		status = usb_control_msg(hdev, usb_rcvctrlpipe(hdev, 0),
562 			USB_REQ_GET_STATUS, USB_DIR_IN | USB_RT_HUB, 0, 0,
563 			data, sizeof(*data), USB_STS_TIMEOUT);
564 	}
565 	return status;
566 }
567 
568 /*
569  * USB 2.0 spec Section 11.24.2.7
570  * USB 3.1 takes into use the wValue and wLength fields, spec Section 10.16.2.6
571  */
get_port_status(struct usb_device * hdev,int port1,void * data,u16 value,u16 length)572 static int get_port_status(struct usb_device *hdev, int port1,
573 			   void *data, u16 value, u16 length)
574 {
575 	int i, status = -ETIMEDOUT;
576 
577 	for (i = 0; i < USB_STS_RETRIES &&
578 			(status == -ETIMEDOUT || status == -EPIPE); i++) {
579 		status = usb_control_msg(hdev, usb_rcvctrlpipe(hdev, 0),
580 			USB_REQ_GET_STATUS, USB_DIR_IN | USB_RT_PORT, value,
581 			port1, data, length, USB_STS_TIMEOUT);
582 	}
583 	return status;
584 }
585 
hub_ext_port_status(struct usb_hub * hub,int port1,int type,u16 * status,u16 * change,u32 * ext_status)586 static int hub_ext_port_status(struct usb_hub *hub, int port1, int type,
587 			       u16 *status, u16 *change, u32 *ext_status)
588 {
589 	int ret;
590 	int len = 4;
591 
592 	if (type != HUB_PORT_STATUS)
593 		len = 8;
594 
595 	mutex_lock(&hub->status_mutex);
596 	ret = get_port_status(hub->hdev, port1, &hub->status->port, type, len);
597 	if (ret < len) {
598 		if (ret != -ENODEV)
599 			dev_err(hub->intfdev,
600 				"%s failed (err = %d)\n", __func__, ret);
601 		if (ret >= 0)
602 			ret = -EIO;
603 	} else {
604 		*status = le16_to_cpu(hub->status->port.wPortStatus);
605 		*change = le16_to_cpu(hub->status->port.wPortChange);
606 		if (type != HUB_PORT_STATUS && ext_status)
607 			*ext_status = le32_to_cpu(
608 				hub->status->port.dwExtPortStatus);
609 		ret = 0;
610 	}
611 	mutex_unlock(&hub->status_mutex);
612 	return ret;
613 }
614 
hub_port_status(struct usb_hub * hub,int port1,u16 * status,u16 * change)615 static int hub_port_status(struct usb_hub *hub, int port1,
616 		u16 *status, u16 *change)
617 {
618 	return hub_ext_port_status(hub, port1, HUB_PORT_STATUS,
619 				   status, change, NULL);
620 }
621 
hub_resubmit_irq_urb(struct usb_hub * hub)622 static void hub_resubmit_irq_urb(struct usb_hub *hub)
623 {
624 	unsigned long flags;
625 	int status;
626 
627 	spin_lock_irqsave(&hub->irq_urb_lock, flags);
628 
629 	if (hub->quiescing) {
630 		spin_unlock_irqrestore(&hub->irq_urb_lock, flags);
631 		return;
632 	}
633 
634 	status = usb_submit_urb(hub->urb, GFP_ATOMIC);
635 	if (status && status != -ENODEV && status != -EPERM &&
636 	    status != -ESHUTDOWN) {
637 		dev_err(hub->intfdev, "resubmit --> %d\n", status);
638 		mod_timer(&hub->irq_urb_retry, jiffies + HZ);
639 	}
640 
641 	spin_unlock_irqrestore(&hub->irq_urb_lock, flags);
642 }
643 
hub_retry_irq_urb(struct timer_list * t)644 static void hub_retry_irq_urb(struct timer_list *t)
645 {
646 	struct usb_hub *hub = from_timer(hub, t, irq_urb_retry);
647 
648 	hub_resubmit_irq_urb(hub);
649 }
650 
651 
kick_hub_wq(struct usb_hub * hub)652 static void kick_hub_wq(struct usb_hub *hub)
653 {
654 	struct usb_interface *intf;
655 
656 	if (hub->disconnected || work_pending(&hub->events))
657 		return;
658 
659 	/*
660 	 * Suppress autosuspend until the event is proceed.
661 	 *
662 	 * Be careful and make sure that the symmetric operation is
663 	 * always called. We are here only when there is no pending
664 	 * work for this hub. Therefore put the interface either when
665 	 * the new work is called or when it is canceled.
666 	 */
667 	intf = to_usb_interface(hub->intfdev);
668 	usb_autopm_get_interface_no_resume(intf);
669 	kref_get(&hub->kref);
670 
671 	if (queue_work(hub_wq, &hub->events))
672 		return;
673 
674 	/* the work has already been scheduled */
675 	usb_autopm_put_interface_async(intf);
676 	kref_put(&hub->kref, hub_release);
677 }
678 
usb_kick_hub_wq(struct usb_device * hdev)679 void usb_kick_hub_wq(struct usb_device *hdev)
680 {
681 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
682 
683 	if (hub)
684 		kick_hub_wq(hub);
685 }
686 
687 /*
688  * Let the USB core know that a USB 3.0 device has sent a Function Wake Device
689  * Notification, which indicates it had initiated remote wakeup.
690  *
691  * USB 3.0 hubs do not report the port link state change from U3 to U0 when the
692  * device initiates resume, so the USB core will not receive notice of the
693  * resume through the normal hub interrupt URB.
694  */
usb_wakeup_notification(struct usb_device * hdev,unsigned int portnum)695 void usb_wakeup_notification(struct usb_device *hdev,
696 		unsigned int portnum)
697 {
698 	struct usb_hub *hub;
699 	struct usb_port *port_dev;
700 
701 	if (!hdev)
702 		return;
703 
704 	hub = usb_hub_to_struct_hub(hdev);
705 	if (hub) {
706 		port_dev = hub->ports[portnum - 1];
707 		if (port_dev && port_dev->child)
708 			pm_wakeup_event(&port_dev->child->dev, 0);
709 
710 		set_bit(portnum, hub->wakeup_bits);
711 		kick_hub_wq(hub);
712 	}
713 }
714 EXPORT_SYMBOL_GPL(usb_wakeup_notification);
715 
716 /* completion function, fires on port status changes and various faults */
hub_irq(struct urb * urb)717 static void hub_irq(struct urb *urb)
718 {
719 	struct usb_hub *hub = urb->context;
720 	int status = urb->status;
721 	unsigned i;
722 	unsigned long bits;
723 
724 	switch (status) {
725 	case -ENOENT:		/* synchronous unlink */
726 	case -ECONNRESET:	/* async unlink */
727 	case -ESHUTDOWN:	/* hardware going away */
728 		return;
729 
730 	default:		/* presumably an error */
731 		/* Cause a hub reset after 10 consecutive errors */
732 		dev_dbg(hub->intfdev, "transfer --> %d\n", status);
733 		if ((++hub->nerrors < 10) || hub->error)
734 			goto resubmit;
735 		hub->error = status;
736 		fallthrough;
737 
738 	/* let hub_wq handle things */
739 	case 0:			/* we got data:  port status changed */
740 		bits = 0;
741 		for (i = 0; i < urb->actual_length; ++i)
742 			bits |= ((unsigned long) ((*hub->buffer)[i]))
743 					<< (i*8);
744 		hub->event_bits[0] = bits;
745 		break;
746 	}
747 
748 	hub->nerrors = 0;
749 
750 	/* Something happened, let hub_wq figure it out */
751 	kick_hub_wq(hub);
752 
753 resubmit:
754 	hub_resubmit_irq_urb(hub);
755 }
756 
757 /* USB 2.0 spec Section 11.24.2.3 */
758 static inline int
hub_clear_tt_buffer(struct usb_device * hdev,u16 devinfo,u16 tt)759 hub_clear_tt_buffer(struct usb_device *hdev, u16 devinfo, u16 tt)
760 {
761 	/* Need to clear both directions for control ep */
762 	if (((devinfo >> 11) & USB_ENDPOINT_XFERTYPE_MASK) ==
763 			USB_ENDPOINT_XFER_CONTROL) {
764 		int status = usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
765 				HUB_CLEAR_TT_BUFFER, USB_RT_PORT,
766 				devinfo ^ 0x8000, tt, NULL, 0, 1000);
767 		if (status)
768 			return status;
769 	}
770 	return usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
771 			       HUB_CLEAR_TT_BUFFER, USB_RT_PORT, devinfo,
772 			       tt, NULL, 0, 1000);
773 }
774 
775 /*
776  * enumeration blocks hub_wq for a long time. we use keventd instead, since
777  * long blocking there is the exception, not the rule.  accordingly, HCDs
778  * talking to TTs must queue control transfers (not just bulk and iso), so
779  * both can talk to the same hub concurrently.
780  */
hub_tt_work(struct work_struct * work)781 static void hub_tt_work(struct work_struct *work)
782 {
783 	struct usb_hub		*hub =
784 		container_of(work, struct usb_hub, tt.clear_work);
785 	unsigned long		flags;
786 
787 	spin_lock_irqsave(&hub->tt.lock, flags);
788 	while (!list_empty(&hub->tt.clear_list)) {
789 		struct list_head	*next;
790 		struct usb_tt_clear	*clear;
791 		struct usb_device	*hdev = hub->hdev;
792 		const struct hc_driver	*drv;
793 		int			status;
794 
795 		next = hub->tt.clear_list.next;
796 		clear = list_entry(next, struct usb_tt_clear, clear_list);
797 		list_del(&clear->clear_list);
798 
799 		/* drop lock so HCD can concurrently report other TT errors */
800 		spin_unlock_irqrestore(&hub->tt.lock, flags);
801 		status = hub_clear_tt_buffer(hdev, clear->devinfo, clear->tt);
802 		if (status && status != -ENODEV)
803 			dev_err(&hdev->dev,
804 				"clear tt %d (%04x) error %d\n",
805 				clear->tt, clear->devinfo, status);
806 
807 		/* Tell the HCD, even if the operation failed */
808 		drv = clear->hcd->driver;
809 		if (drv->clear_tt_buffer_complete)
810 			(drv->clear_tt_buffer_complete)(clear->hcd, clear->ep);
811 
812 		kfree(clear);
813 		spin_lock_irqsave(&hub->tt.lock, flags);
814 	}
815 	spin_unlock_irqrestore(&hub->tt.lock, flags);
816 }
817 
818 /**
819  * usb_hub_set_port_power - control hub port's power state
820  * @hdev: USB device belonging to the usb hub
821  * @hub: target hub
822  * @port1: port index
823  * @set: expected status
824  *
825  * call this function to control port's power via setting or
826  * clearing the port's PORT_POWER feature.
827  *
828  * Return: 0 if successful. A negative error code otherwise.
829  */
usb_hub_set_port_power(struct usb_device * hdev,struct usb_hub * hub,int port1,bool set)830 int usb_hub_set_port_power(struct usb_device *hdev, struct usb_hub *hub,
831 			   int port1, bool set)
832 {
833 	int ret;
834 
835 	if (set)
836 		ret = set_port_feature(hdev, port1, USB_PORT_FEAT_POWER);
837 	else
838 		ret = usb_clear_port_feature(hdev, port1, USB_PORT_FEAT_POWER);
839 
840 	if (ret)
841 		return ret;
842 
843 	if (set)
844 		set_bit(port1, hub->power_bits);
845 	else
846 		clear_bit(port1, hub->power_bits);
847 	return 0;
848 }
849 
850 /**
851  * usb_hub_clear_tt_buffer - clear control/bulk TT state in high speed hub
852  * @urb: an URB associated with the failed or incomplete split transaction
853  *
854  * High speed HCDs use this to tell the hub driver that some split control or
855  * bulk transaction failed in a way that requires clearing internal state of
856  * a transaction translator.  This is normally detected (and reported) from
857  * interrupt context.
858  *
859  * It may not be possible for that hub to handle additional full (or low)
860  * speed transactions until that state is fully cleared out.
861  *
862  * Return: 0 if successful. A negative error code otherwise.
863  */
usb_hub_clear_tt_buffer(struct urb * urb)864 int usb_hub_clear_tt_buffer(struct urb *urb)
865 {
866 	struct usb_device	*udev = urb->dev;
867 	int			pipe = urb->pipe;
868 	struct usb_tt		*tt = udev->tt;
869 	unsigned long		flags;
870 	struct usb_tt_clear	*clear;
871 
872 	/* we've got to cope with an arbitrary number of pending TT clears,
873 	 * since each TT has "at least two" buffers that can need it (and
874 	 * there can be many TTs per hub).  even if they're uncommon.
875 	 */
876 	clear = kmalloc(sizeof *clear, GFP_ATOMIC);
877 	if (clear == NULL) {
878 		dev_err(&udev->dev, "can't save CLEAR_TT_BUFFER state\n");
879 		/* FIXME recover somehow ... RESET_TT? */
880 		return -ENOMEM;
881 	}
882 
883 	/* info that CLEAR_TT_BUFFER needs */
884 	clear->tt = tt->multi ? udev->ttport : 1;
885 	clear->devinfo = usb_pipeendpoint (pipe);
886 	clear->devinfo |= ((u16)udev->devaddr) << 4;
887 	clear->devinfo |= usb_pipecontrol(pipe)
888 			? (USB_ENDPOINT_XFER_CONTROL << 11)
889 			: (USB_ENDPOINT_XFER_BULK << 11);
890 	if (usb_pipein(pipe))
891 		clear->devinfo |= 1 << 15;
892 
893 	/* info for completion callback */
894 	clear->hcd = bus_to_hcd(udev->bus);
895 	clear->ep = urb->ep;
896 
897 	/* tell keventd to clear state for this TT */
898 	spin_lock_irqsave(&tt->lock, flags);
899 	list_add_tail(&clear->clear_list, &tt->clear_list);
900 	schedule_work(&tt->clear_work);
901 	spin_unlock_irqrestore(&tt->lock, flags);
902 	return 0;
903 }
904 EXPORT_SYMBOL_GPL(usb_hub_clear_tt_buffer);
905 
hub_power_on(struct usb_hub * hub,bool do_delay)906 static void hub_power_on(struct usb_hub *hub, bool do_delay)
907 {
908 	int port1;
909 
910 	/* Enable power on each port.  Some hubs have reserved values
911 	 * of LPSM (> 2) in their descriptors, even though they are
912 	 * USB 2.0 hubs.  Some hubs do not implement port-power switching
913 	 * but only emulate it.  In all cases, the ports won't work
914 	 * unless we send these messages to the hub.
915 	 */
916 	if (hub_is_port_power_switchable(hub))
917 		dev_dbg(hub->intfdev, "enabling power on all ports\n");
918 	else
919 		dev_dbg(hub->intfdev, "trying to enable port power on "
920 				"non-switchable hub\n");
921 	for (port1 = 1; port1 <= hub->hdev->maxchild; port1++)
922 		if (test_bit(port1, hub->power_bits))
923 			set_port_feature(hub->hdev, port1, USB_PORT_FEAT_POWER);
924 		else
925 			usb_clear_port_feature(hub->hdev, port1,
926 						USB_PORT_FEAT_POWER);
927 	if (do_delay)
928 		msleep(hub_power_on_good_delay(hub));
929 }
930 
hub_hub_status(struct usb_hub * hub,u16 * status,u16 * change)931 static int hub_hub_status(struct usb_hub *hub,
932 		u16 *status, u16 *change)
933 {
934 	int ret;
935 
936 	mutex_lock(&hub->status_mutex);
937 	ret = get_hub_status(hub->hdev, &hub->status->hub);
938 	if (ret < 0) {
939 		if (ret != -ENODEV)
940 			dev_err(hub->intfdev,
941 				"%s failed (err = %d)\n", __func__, ret);
942 	} else {
943 		*status = le16_to_cpu(hub->status->hub.wHubStatus);
944 		*change = le16_to_cpu(hub->status->hub.wHubChange);
945 		ret = 0;
946 	}
947 	mutex_unlock(&hub->status_mutex);
948 	return ret;
949 }
950 
hub_set_port_link_state(struct usb_hub * hub,int port1,unsigned int link_status)951 static int hub_set_port_link_state(struct usb_hub *hub, int port1,
952 			unsigned int link_status)
953 {
954 	return set_port_feature(hub->hdev,
955 			port1 | (link_status << 3),
956 			USB_PORT_FEAT_LINK_STATE);
957 }
958 
959 /*
960  * Disable a port and mark a logical connect-change event, so that some
961  * time later hub_wq will disconnect() any existing usb_device on the port
962  * and will re-enumerate if there actually is a device attached.
963  */
hub_port_logical_disconnect(struct usb_hub * hub,int port1)964 static void hub_port_logical_disconnect(struct usb_hub *hub, int port1)
965 {
966 	dev_dbg(&hub->ports[port1 - 1]->dev, "logical disconnect\n");
967 	hub_port_disable(hub, port1, 1);
968 
969 	/* FIXME let caller ask to power down the port:
970 	 *  - some devices won't enumerate without a VBUS power cycle
971 	 *  - SRP saves power that way
972 	 *  - ... new call, TBD ...
973 	 * That's easy if this hub can switch power per-port, and
974 	 * hub_wq reactivates the port later (timer, SRP, etc).
975 	 * Powerdown must be optional, because of reset/DFU.
976 	 */
977 
978 	set_bit(port1, hub->change_bits);
979 	kick_hub_wq(hub);
980 }
981 
982 /**
983  * usb_remove_device - disable a device's port on its parent hub
984  * @udev: device to be disabled and removed
985  * Context: @udev locked, must be able to sleep.
986  *
987  * After @udev's port has been disabled, hub_wq is notified and it will
988  * see that the device has been disconnected.  When the device is
989  * physically unplugged and something is plugged in, the events will
990  * be received and processed normally.
991  *
992  * Return: 0 if successful. A negative error code otherwise.
993  */
usb_remove_device(struct usb_device * udev)994 int usb_remove_device(struct usb_device *udev)
995 {
996 	struct usb_hub *hub;
997 	struct usb_interface *intf;
998 	int ret;
999 
1000 	if (!udev->parent)	/* Can't remove a root hub */
1001 		return -EINVAL;
1002 	hub = usb_hub_to_struct_hub(udev->parent);
1003 	intf = to_usb_interface(hub->intfdev);
1004 
1005 	ret = usb_autopm_get_interface(intf);
1006 	if (ret < 0)
1007 		return ret;
1008 
1009 	set_bit(udev->portnum, hub->removed_bits);
1010 	hub_port_logical_disconnect(hub, udev->portnum);
1011 	usb_autopm_put_interface(intf);
1012 	return 0;
1013 }
1014 
1015 enum hub_activation_type {
1016 	HUB_INIT, HUB_INIT2, HUB_INIT3,		/* INITs must come first */
1017 	HUB_POST_RESET, HUB_RESUME, HUB_RESET_RESUME,
1018 };
1019 
1020 static void hub_init_func2(struct work_struct *ws);
1021 static void hub_init_func3(struct work_struct *ws);
1022 
hub_activate(struct usb_hub * hub,enum hub_activation_type type)1023 static void hub_activate(struct usb_hub *hub, enum hub_activation_type type)
1024 {
1025 	struct usb_device *hdev = hub->hdev;
1026 	struct usb_hcd *hcd;
1027 	int ret;
1028 	int port1;
1029 	int status;
1030 	bool need_debounce_delay = false;
1031 	unsigned delay;
1032 
1033 	/* Continue a partial initialization */
1034 	if (type == HUB_INIT2 || type == HUB_INIT3) {
1035 		device_lock(&hdev->dev);
1036 
1037 		/* Was the hub disconnected while we were waiting? */
1038 		if (hub->disconnected)
1039 			goto disconnected;
1040 		if (type == HUB_INIT2)
1041 			goto init2;
1042 		goto init3;
1043 	}
1044 	kref_get(&hub->kref);
1045 
1046 	/* The superspeed hub except for root hub has to use Hub Depth
1047 	 * value as an offset into the route string to locate the bits
1048 	 * it uses to determine the downstream port number. So hub driver
1049 	 * should send a set hub depth request to superspeed hub after
1050 	 * the superspeed hub is set configuration in initialization or
1051 	 * reset procedure.
1052 	 *
1053 	 * After a resume, port power should still be on.
1054 	 * For any other type of activation, turn it on.
1055 	 */
1056 	if (type != HUB_RESUME) {
1057 		if (hdev->parent && hub_is_superspeed(hdev)) {
1058 			ret = usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
1059 					HUB_SET_DEPTH, USB_RT_HUB,
1060 					hdev->level - 1, 0, NULL, 0,
1061 					USB_CTRL_SET_TIMEOUT);
1062 			if (ret < 0)
1063 				dev_err(hub->intfdev,
1064 						"set hub depth failed\n");
1065 		}
1066 
1067 		/* Speed up system boot by using a delayed_work for the
1068 		 * hub's initial power-up delays.  This is pretty awkward
1069 		 * and the implementation looks like a home-brewed sort of
1070 		 * setjmp/longjmp, but it saves at least 100 ms for each
1071 		 * root hub (assuming usbcore is compiled into the kernel
1072 		 * rather than as a module).  It adds up.
1073 		 *
1074 		 * This can't be done for HUB_RESUME or HUB_RESET_RESUME
1075 		 * because for those activation types the ports have to be
1076 		 * operational when we return.  In theory this could be done
1077 		 * for HUB_POST_RESET, but it's easier not to.
1078 		 */
1079 		if (type == HUB_INIT) {
1080 			delay = hub_power_on_good_delay(hub);
1081 
1082 			hub_power_on(hub, false);
1083 			INIT_DELAYED_WORK(&hub->init_work, hub_init_func2);
1084 			queue_delayed_work(system_power_efficient_wq,
1085 					&hub->init_work,
1086 					msecs_to_jiffies(delay));
1087 
1088 			/* Suppress autosuspend until init is done */
1089 			usb_autopm_get_interface_no_resume(
1090 					to_usb_interface(hub->intfdev));
1091 			return;		/* Continues at init2: below */
1092 		} else if (type == HUB_RESET_RESUME) {
1093 			/* The internal host controller state for the hub device
1094 			 * may be gone after a host power loss on system resume.
1095 			 * Update the device's info so the HW knows it's a hub.
1096 			 */
1097 			hcd = bus_to_hcd(hdev->bus);
1098 			if (hcd->driver->update_hub_device) {
1099 				ret = hcd->driver->update_hub_device(hcd, hdev,
1100 						&hub->tt, GFP_NOIO);
1101 				if (ret < 0) {
1102 					dev_err(hub->intfdev,
1103 						"Host not accepting hub info update\n");
1104 					dev_err(hub->intfdev,
1105 						"LS/FS devices and hubs may not work under this hub\n");
1106 				}
1107 			}
1108 			hub_power_on(hub, true);
1109 		} else {
1110 			hub_power_on(hub, true);
1111 		}
1112 	/* Give some time on remote wakeup to let links to transit to U0 */
1113 	} else if (hub_is_superspeed(hub->hdev))
1114 		msleep(20);
1115 
1116  init2:
1117 
1118 	/*
1119 	 * Check each port and set hub->change_bits to let hub_wq know
1120 	 * which ports need attention.
1121 	 */
1122 	for (port1 = 1; port1 <= hdev->maxchild; ++port1) {
1123 		struct usb_port *port_dev = hub->ports[port1 - 1];
1124 		struct usb_device *udev = port_dev->child;
1125 		u16 portstatus, portchange;
1126 
1127 		portstatus = portchange = 0;
1128 		status = hub_port_status(hub, port1, &portstatus, &portchange);
1129 		if (status)
1130 			goto abort;
1131 
1132 		if (udev || (portstatus & USB_PORT_STAT_CONNECTION))
1133 			dev_dbg(&port_dev->dev, "status %04x change %04x\n",
1134 					portstatus, portchange);
1135 
1136 		/*
1137 		 * After anything other than HUB_RESUME (i.e., initialization
1138 		 * or any sort of reset), every port should be disabled.
1139 		 * Unconnected ports should likewise be disabled (paranoia),
1140 		 * and so should ports for which we have no usb_device.
1141 		 */
1142 		if ((portstatus & USB_PORT_STAT_ENABLE) && (
1143 				type != HUB_RESUME ||
1144 				!(portstatus & USB_PORT_STAT_CONNECTION) ||
1145 				!udev ||
1146 				udev->state == USB_STATE_NOTATTACHED)) {
1147 			/*
1148 			 * USB3 protocol ports will automatically transition
1149 			 * to Enabled state when detect an USB3.0 device attach.
1150 			 * Do not disable USB3 protocol ports, just pretend
1151 			 * power was lost
1152 			 */
1153 			portstatus &= ~USB_PORT_STAT_ENABLE;
1154 			if (!hub_is_superspeed(hdev))
1155 				usb_clear_port_feature(hdev, port1,
1156 						   USB_PORT_FEAT_ENABLE);
1157 		}
1158 
1159 		/* Make sure a warm-reset request is handled by port_event */
1160 		if (type == HUB_RESUME &&
1161 		    hub_port_warm_reset_required(hub, port1, portstatus))
1162 			set_bit(port1, hub->event_bits);
1163 
1164 		/*
1165 		 * Add debounce if USB3 link is in polling/link training state.
1166 		 * Link will automatically transition to Enabled state after
1167 		 * link training completes.
1168 		 */
1169 		if (hub_is_superspeed(hdev) &&
1170 		    ((portstatus & USB_PORT_STAT_LINK_STATE) ==
1171 						USB_SS_PORT_LS_POLLING))
1172 			need_debounce_delay = true;
1173 
1174 		/* Clear status-change flags; we'll debounce later */
1175 		if (portchange & USB_PORT_STAT_C_CONNECTION) {
1176 			need_debounce_delay = true;
1177 			usb_clear_port_feature(hub->hdev, port1,
1178 					USB_PORT_FEAT_C_CONNECTION);
1179 		}
1180 		if (portchange & USB_PORT_STAT_C_ENABLE) {
1181 			need_debounce_delay = true;
1182 			usb_clear_port_feature(hub->hdev, port1,
1183 					USB_PORT_FEAT_C_ENABLE);
1184 		}
1185 		if (portchange & USB_PORT_STAT_C_RESET) {
1186 			need_debounce_delay = true;
1187 			usb_clear_port_feature(hub->hdev, port1,
1188 					USB_PORT_FEAT_C_RESET);
1189 		}
1190 		if ((portchange & USB_PORT_STAT_C_BH_RESET) &&
1191 				hub_is_superspeed(hub->hdev)) {
1192 			need_debounce_delay = true;
1193 			usb_clear_port_feature(hub->hdev, port1,
1194 					USB_PORT_FEAT_C_BH_PORT_RESET);
1195 		}
1196 		/* We can forget about a "removed" device when there's a
1197 		 * physical disconnect or the connect status changes.
1198 		 */
1199 		if (!(portstatus & USB_PORT_STAT_CONNECTION) ||
1200 				(portchange & USB_PORT_STAT_C_CONNECTION))
1201 			clear_bit(port1, hub->removed_bits);
1202 
1203 		if (!udev || udev->state == USB_STATE_NOTATTACHED) {
1204 			/* Tell hub_wq to disconnect the device or
1205 			 * check for a new connection or over current condition.
1206 			 * Based on USB2.0 Spec Section 11.12.5,
1207 			 * C_PORT_OVER_CURRENT could be set while
1208 			 * PORT_OVER_CURRENT is not. So check for any of them.
1209 			 */
1210 			if (udev || (portstatus & USB_PORT_STAT_CONNECTION) ||
1211 			    (portchange & USB_PORT_STAT_C_CONNECTION) ||
1212 			    (portstatus & USB_PORT_STAT_OVERCURRENT) ||
1213 			    (portchange & USB_PORT_STAT_C_OVERCURRENT))
1214 				set_bit(port1, hub->change_bits);
1215 
1216 		} else if (portstatus & USB_PORT_STAT_ENABLE) {
1217 			bool port_resumed = (portstatus &
1218 					USB_PORT_STAT_LINK_STATE) ==
1219 				USB_SS_PORT_LS_U0;
1220 			/* The power session apparently survived the resume.
1221 			 * If there was an overcurrent or suspend change
1222 			 * (i.e., remote wakeup request), have hub_wq
1223 			 * take care of it.  Look at the port link state
1224 			 * for USB 3.0 hubs, since they don't have a suspend
1225 			 * change bit, and they don't set the port link change
1226 			 * bit on device-initiated resume.
1227 			 */
1228 			if (portchange || (hub_is_superspeed(hub->hdev) &&
1229 						port_resumed))
1230 				set_bit(port1, hub->event_bits);
1231 
1232 		} else if (udev->persist_enabled) {
1233 #ifdef CONFIG_PM
1234 			udev->reset_resume = 1;
1235 #endif
1236 			/* Don't set the change_bits when the device
1237 			 * was powered off.
1238 			 */
1239 			if (test_bit(port1, hub->power_bits))
1240 				set_bit(port1, hub->change_bits);
1241 
1242 		} else {
1243 			/* The power session is gone; tell hub_wq */
1244 			usb_set_device_state(udev, USB_STATE_NOTATTACHED);
1245 			set_bit(port1, hub->change_bits);
1246 		}
1247 	}
1248 
1249 	/* If no port-status-change flags were set, we don't need any
1250 	 * debouncing.  If flags were set we can try to debounce the
1251 	 * ports all at once right now, instead of letting hub_wq do them
1252 	 * one at a time later on.
1253 	 *
1254 	 * If any port-status changes do occur during this delay, hub_wq
1255 	 * will see them later and handle them normally.
1256 	 */
1257 	if (need_debounce_delay) {
1258 		delay = HUB_DEBOUNCE_STABLE;
1259 
1260 		/* Don't do a long sleep inside a workqueue routine */
1261 		if (type == HUB_INIT2) {
1262 			INIT_DELAYED_WORK(&hub->init_work, hub_init_func3);
1263 			queue_delayed_work(system_power_efficient_wq,
1264 					&hub->init_work,
1265 					msecs_to_jiffies(delay));
1266 			device_unlock(&hdev->dev);
1267 			return;		/* Continues at init3: below */
1268 		} else {
1269 			msleep(delay);
1270 		}
1271 	}
1272  init3:
1273 	hub->quiescing = 0;
1274 
1275 	status = usb_submit_urb(hub->urb, GFP_NOIO);
1276 	if (status < 0)
1277 		dev_err(hub->intfdev, "activate --> %d\n", status);
1278 	if (hub->has_indicators && blinkenlights)
1279 		queue_delayed_work(system_power_efficient_wq,
1280 				&hub->leds, LED_CYCLE_PERIOD);
1281 
1282 	/* Scan all ports that need attention */
1283 	kick_hub_wq(hub);
1284  abort:
1285 	if (type == HUB_INIT2 || type == HUB_INIT3) {
1286 		/* Allow autosuspend if it was suppressed */
1287  disconnected:
1288 		usb_autopm_put_interface_async(to_usb_interface(hub->intfdev));
1289 		device_unlock(&hdev->dev);
1290 	}
1291 
1292 	kref_put(&hub->kref, hub_release);
1293 }
1294 
1295 /* Implement the continuations for the delays above */
hub_init_func2(struct work_struct * ws)1296 static void hub_init_func2(struct work_struct *ws)
1297 {
1298 	struct usb_hub *hub = container_of(ws, struct usb_hub, init_work.work);
1299 
1300 	hub_activate(hub, HUB_INIT2);
1301 }
1302 
hub_init_func3(struct work_struct * ws)1303 static void hub_init_func3(struct work_struct *ws)
1304 {
1305 	struct usb_hub *hub = container_of(ws, struct usb_hub, init_work.work);
1306 
1307 	hub_activate(hub, HUB_INIT3);
1308 }
1309 
1310 enum hub_quiescing_type {
1311 	HUB_DISCONNECT, HUB_PRE_RESET, HUB_SUSPEND
1312 };
1313 
hub_quiesce(struct usb_hub * hub,enum hub_quiescing_type type)1314 static void hub_quiesce(struct usb_hub *hub, enum hub_quiescing_type type)
1315 {
1316 	struct usb_device *hdev = hub->hdev;
1317 	unsigned long flags;
1318 	int i;
1319 
1320 	/* hub_wq and related activity won't re-trigger */
1321 	spin_lock_irqsave(&hub->irq_urb_lock, flags);
1322 	hub->quiescing = 1;
1323 	spin_unlock_irqrestore(&hub->irq_urb_lock, flags);
1324 
1325 	if (type != HUB_SUSPEND) {
1326 		/* Disconnect all the children */
1327 		for (i = 0; i < hdev->maxchild; ++i) {
1328 			if (hub->ports[i]->child)
1329 				usb_disconnect(&hub->ports[i]->child);
1330 		}
1331 	}
1332 
1333 	/* Stop hub_wq and related activity */
1334 	del_timer_sync(&hub->irq_urb_retry);
1335 	usb_kill_urb(hub->urb);
1336 	if (hub->has_indicators)
1337 		cancel_delayed_work_sync(&hub->leds);
1338 	if (hub->tt.hub)
1339 		flush_work(&hub->tt.clear_work);
1340 }
1341 
hub_pm_barrier_for_all_ports(struct usb_hub * hub)1342 static void hub_pm_barrier_for_all_ports(struct usb_hub *hub)
1343 {
1344 	int i;
1345 
1346 	for (i = 0; i < hub->hdev->maxchild; ++i)
1347 		pm_runtime_barrier(&hub->ports[i]->dev);
1348 }
1349 
1350 /* caller has locked the hub device */
hub_pre_reset(struct usb_interface * intf)1351 static int hub_pre_reset(struct usb_interface *intf)
1352 {
1353 	struct usb_hub *hub = usb_get_intfdata(intf);
1354 
1355 	hub_quiesce(hub, HUB_PRE_RESET);
1356 	hub->in_reset = 1;
1357 	hub_pm_barrier_for_all_ports(hub);
1358 	return 0;
1359 }
1360 
1361 /* caller has locked the hub device */
hub_post_reset(struct usb_interface * intf)1362 static int hub_post_reset(struct usb_interface *intf)
1363 {
1364 	struct usb_hub *hub = usb_get_intfdata(intf);
1365 
1366 	hub->in_reset = 0;
1367 	hub_pm_barrier_for_all_ports(hub);
1368 	hub_activate(hub, HUB_POST_RESET);
1369 	return 0;
1370 }
1371 
hub_configure(struct usb_hub * hub,struct usb_endpoint_descriptor * endpoint)1372 static int hub_configure(struct usb_hub *hub,
1373 	struct usb_endpoint_descriptor *endpoint)
1374 {
1375 	struct usb_hcd *hcd;
1376 	struct usb_device *hdev = hub->hdev;
1377 	struct device *hub_dev = hub->intfdev;
1378 	u16 hubstatus, hubchange;
1379 	u16 wHubCharacteristics;
1380 	unsigned int pipe;
1381 	int maxp, ret, i;
1382 	char *message = "out of memory";
1383 	unsigned unit_load;
1384 	unsigned full_load;
1385 	unsigned maxchild;
1386 
1387 	hub->buffer = kmalloc(sizeof(*hub->buffer), GFP_KERNEL);
1388 	if (!hub->buffer) {
1389 		ret = -ENOMEM;
1390 		goto fail;
1391 	}
1392 
1393 	hub->status = kmalloc(sizeof(*hub->status), GFP_KERNEL);
1394 	if (!hub->status) {
1395 		ret = -ENOMEM;
1396 		goto fail;
1397 	}
1398 	mutex_init(&hub->status_mutex);
1399 
1400 	hub->descriptor = kzalloc(sizeof(*hub->descriptor), GFP_KERNEL);
1401 	if (!hub->descriptor) {
1402 		ret = -ENOMEM;
1403 		goto fail;
1404 	}
1405 
1406 	/* Request the entire hub descriptor.
1407 	 * hub->descriptor can handle USB_MAXCHILDREN ports,
1408 	 * but a (non-SS) hub can/will return fewer bytes here.
1409 	 */
1410 	ret = get_hub_descriptor(hdev, hub->descriptor);
1411 	if (ret < 0) {
1412 		message = "can't read hub descriptor";
1413 		goto fail;
1414 	}
1415 
1416 	maxchild = USB_MAXCHILDREN;
1417 	if (hub_is_superspeed(hdev))
1418 		maxchild = min_t(unsigned, maxchild, USB_SS_MAXPORTS);
1419 
1420 	if (hub->descriptor->bNbrPorts > maxchild) {
1421 		message = "hub has too many ports!";
1422 		ret = -ENODEV;
1423 		goto fail;
1424 	} else if (hub->descriptor->bNbrPorts == 0) {
1425 		message = "hub doesn't have any ports!";
1426 		ret = -ENODEV;
1427 		goto fail;
1428 	}
1429 
1430 	/*
1431 	 * Accumulate wHubDelay + 40ns for every hub in the tree of devices.
1432 	 * The resulting value will be used for SetIsochDelay() request.
1433 	 */
1434 	if (hub_is_superspeed(hdev) || hub_is_superspeedplus(hdev)) {
1435 		u32 delay = __le16_to_cpu(hub->descriptor->u.ss.wHubDelay);
1436 
1437 		if (hdev->parent)
1438 			delay += hdev->parent->hub_delay;
1439 
1440 		delay += USB_TP_TRANSMISSION_DELAY;
1441 		hdev->hub_delay = min_t(u32, delay, USB_TP_TRANSMISSION_DELAY_MAX);
1442 	}
1443 
1444 	maxchild = hub->descriptor->bNbrPorts;
1445 	dev_info(hub_dev, "%d port%s detected\n", maxchild,
1446 			(maxchild == 1) ? "" : "s");
1447 
1448 	hub->ports = kcalloc(maxchild, sizeof(struct usb_port *), GFP_KERNEL);
1449 	if (!hub->ports) {
1450 		ret = -ENOMEM;
1451 		goto fail;
1452 	}
1453 
1454 	wHubCharacteristics = le16_to_cpu(hub->descriptor->wHubCharacteristics);
1455 	if (hub_is_superspeed(hdev)) {
1456 		unit_load = 150;
1457 		full_load = 900;
1458 	} else {
1459 		unit_load = 100;
1460 		full_load = 500;
1461 	}
1462 
1463 	/* FIXME for USB 3.0, skip for now */
1464 	if ((wHubCharacteristics & HUB_CHAR_COMPOUND) &&
1465 			!(hub_is_superspeed(hdev))) {
1466 		char	portstr[USB_MAXCHILDREN + 1];
1467 
1468 		for (i = 0; i < maxchild; i++)
1469 			portstr[i] = hub->descriptor->u.hs.DeviceRemovable
1470 				    [((i + 1) / 8)] & (1 << ((i + 1) % 8))
1471 				? 'F' : 'R';
1472 		portstr[maxchild] = 0;
1473 		dev_dbg(hub_dev, "compound device; port removable status: %s\n", portstr);
1474 	} else
1475 		dev_dbg(hub_dev, "standalone hub\n");
1476 
1477 	switch (wHubCharacteristics & HUB_CHAR_LPSM) {
1478 	case HUB_CHAR_COMMON_LPSM:
1479 		dev_dbg(hub_dev, "ganged power switching\n");
1480 		break;
1481 	case HUB_CHAR_INDV_PORT_LPSM:
1482 		dev_dbg(hub_dev, "individual port power switching\n");
1483 		break;
1484 	case HUB_CHAR_NO_LPSM:
1485 	case HUB_CHAR_LPSM:
1486 		dev_dbg(hub_dev, "no power switching (usb 1.0)\n");
1487 		break;
1488 	}
1489 
1490 	switch (wHubCharacteristics & HUB_CHAR_OCPM) {
1491 	case HUB_CHAR_COMMON_OCPM:
1492 		dev_dbg(hub_dev, "global over-current protection\n");
1493 		break;
1494 	case HUB_CHAR_INDV_PORT_OCPM:
1495 		dev_dbg(hub_dev, "individual port over-current protection\n");
1496 		break;
1497 	case HUB_CHAR_NO_OCPM:
1498 	case HUB_CHAR_OCPM:
1499 		dev_dbg(hub_dev, "no over-current protection\n");
1500 		break;
1501 	}
1502 
1503 	spin_lock_init(&hub->tt.lock);
1504 	INIT_LIST_HEAD(&hub->tt.clear_list);
1505 	INIT_WORK(&hub->tt.clear_work, hub_tt_work);
1506 	switch (hdev->descriptor.bDeviceProtocol) {
1507 	case USB_HUB_PR_FS:
1508 		break;
1509 	case USB_HUB_PR_HS_SINGLE_TT:
1510 		dev_dbg(hub_dev, "Single TT\n");
1511 		hub->tt.hub = hdev;
1512 		break;
1513 	case USB_HUB_PR_HS_MULTI_TT:
1514 		ret = usb_set_interface(hdev, 0, 1);
1515 		if (ret == 0) {
1516 			dev_dbg(hub_dev, "TT per port\n");
1517 			hub->tt.multi = 1;
1518 		} else
1519 			dev_err(hub_dev, "Using single TT (err %d)\n",
1520 				ret);
1521 		hub->tt.hub = hdev;
1522 		break;
1523 	case USB_HUB_PR_SS:
1524 		/* USB 3.0 hubs don't have a TT */
1525 		break;
1526 	default:
1527 		dev_dbg(hub_dev, "Unrecognized hub protocol %d\n",
1528 			hdev->descriptor.bDeviceProtocol);
1529 		break;
1530 	}
1531 
1532 	/* Note 8 FS bit times == (8 bits / 12000000 bps) ~= 666ns */
1533 	switch (wHubCharacteristics & HUB_CHAR_TTTT) {
1534 	case HUB_TTTT_8_BITS:
1535 		if (hdev->descriptor.bDeviceProtocol != 0) {
1536 			hub->tt.think_time = 666;
1537 			dev_dbg(hub_dev, "TT requires at most %d "
1538 					"FS bit times (%d ns)\n",
1539 				8, hub->tt.think_time);
1540 		}
1541 		break;
1542 	case HUB_TTTT_16_BITS:
1543 		hub->tt.think_time = 666 * 2;
1544 		dev_dbg(hub_dev, "TT requires at most %d "
1545 				"FS bit times (%d ns)\n",
1546 			16, hub->tt.think_time);
1547 		break;
1548 	case HUB_TTTT_24_BITS:
1549 		hub->tt.think_time = 666 * 3;
1550 		dev_dbg(hub_dev, "TT requires at most %d "
1551 				"FS bit times (%d ns)\n",
1552 			24, hub->tt.think_time);
1553 		break;
1554 	case HUB_TTTT_32_BITS:
1555 		hub->tt.think_time = 666 * 4;
1556 		dev_dbg(hub_dev, "TT requires at most %d "
1557 				"FS bit times (%d ns)\n",
1558 			32, hub->tt.think_time);
1559 		break;
1560 	}
1561 
1562 	/* probe() zeroes hub->indicator[] */
1563 	if (wHubCharacteristics & HUB_CHAR_PORTIND) {
1564 		hub->has_indicators = 1;
1565 		dev_dbg(hub_dev, "Port indicators are supported\n");
1566 	}
1567 
1568 	dev_dbg(hub_dev, "power on to power good time: %dms\n",
1569 		hub->descriptor->bPwrOn2PwrGood * 2);
1570 
1571 	/* power budgeting mostly matters with bus-powered hubs,
1572 	 * and battery-powered root hubs (may provide just 8 mA).
1573 	 */
1574 	ret = usb_get_std_status(hdev, USB_RECIP_DEVICE, 0, &hubstatus);
1575 	if (ret) {
1576 		message = "can't get hub status";
1577 		goto fail;
1578 	}
1579 	hcd = bus_to_hcd(hdev->bus);
1580 	if (hdev == hdev->bus->root_hub) {
1581 		if (hcd->power_budget > 0)
1582 			hdev->bus_mA = hcd->power_budget;
1583 		else
1584 			hdev->bus_mA = full_load * maxchild;
1585 		if (hdev->bus_mA >= full_load)
1586 			hub->mA_per_port = full_load;
1587 		else {
1588 			hub->mA_per_port = hdev->bus_mA;
1589 			hub->limited_power = 1;
1590 		}
1591 	} else if ((hubstatus & (1 << USB_DEVICE_SELF_POWERED)) == 0) {
1592 		int remaining = hdev->bus_mA -
1593 			hub->descriptor->bHubContrCurrent;
1594 
1595 		dev_dbg(hub_dev, "hub controller current requirement: %dmA\n",
1596 			hub->descriptor->bHubContrCurrent);
1597 		hub->limited_power = 1;
1598 
1599 		if (remaining < maxchild * unit_load)
1600 			dev_warn(hub_dev,
1601 					"insufficient power available "
1602 					"to use all downstream ports\n");
1603 		hub->mA_per_port = unit_load;	/* 7.2.1 */
1604 
1605 	} else {	/* Self-powered external hub */
1606 		/* FIXME: What about battery-powered external hubs that
1607 		 * provide less current per port? */
1608 		hub->mA_per_port = full_load;
1609 	}
1610 	if (hub->mA_per_port < full_load)
1611 		dev_dbg(hub_dev, "%umA bus power budget for each child\n",
1612 				hub->mA_per_port);
1613 
1614 	ret = hub_hub_status(hub, &hubstatus, &hubchange);
1615 	if (ret < 0) {
1616 		message = "can't get hub status";
1617 		goto fail;
1618 	}
1619 
1620 	/* local power status reports aren't always correct */
1621 	if (hdev->actconfig->desc.bmAttributes & USB_CONFIG_ATT_SELFPOWER)
1622 		dev_dbg(hub_dev, "local power source is %s\n",
1623 			(hubstatus & HUB_STATUS_LOCAL_POWER)
1624 			? "lost (inactive)" : "good");
1625 
1626 	if ((wHubCharacteristics & HUB_CHAR_OCPM) == 0)
1627 		dev_dbg(hub_dev, "%sover-current condition exists\n",
1628 			(hubstatus & HUB_STATUS_OVERCURRENT) ? "" : "no ");
1629 
1630 	/* set up the interrupt endpoint
1631 	 * We use the EP's maxpacket size instead of (PORTS+1+7)/8
1632 	 * bytes as USB2.0[11.12.3] says because some hubs are known
1633 	 * to send more data (and thus cause overflow). For root hubs,
1634 	 * maxpktsize is defined in hcd.c's fake endpoint descriptors
1635 	 * to be big enough for at least USB_MAXCHILDREN ports. */
1636 	pipe = usb_rcvintpipe(hdev, endpoint->bEndpointAddress);
1637 	maxp = usb_maxpacket(hdev, pipe, usb_pipeout(pipe));
1638 
1639 	if (maxp > sizeof(*hub->buffer))
1640 		maxp = sizeof(*hub->buffer);
1641 
1642 	hub->urb = usb_alloc_urb(0, GFP_KERNEL);
1643 	if (!hub->urb) {
1644 		ret = -ENOMEM;
1645 		goto fail;
1646 	}
1647 
1648 	usb_fill_int_urb(hub->urb, hdev, pipe, *hub->buffer, maxp, hub_irq,
1649 		hub, endpoint->bInterval);
1650 
1651 	/* maybe cycle the hub leds */
1652 	if (hub->has_indicators && blinkenlights)
1653 		hub->indicator[0] = INDICATOR_CYCLE;
1654 
1655 	mutex_lock(&usb_port_peer_mutex);
1656 	for (i = 0; i < maxchild; i++) {
1657 		ret = usb_hub_create_port_device(hub, i + 1);
1658 		if (ret < 0) {
1659 			dev_err(hub->intfdev,
1660 				"couldn't create port%d device.\n", i + 1);
1661 			break;
1662 		}
1663 	}
1664 	hdev->maxchild = i;
1665 	for (i = 0; i < hdev->maxchild; i++) {
1666 		struct usb_port *port_dev = hub->ports[i];
1667 
1668 		pm_runtime_put(&port_dev->dev);
1669 	}
1670 
1671 	mutex_unlock(&usb_port_peer_mutex);
1672 	if (ret < 0)
1673 		goto fail;
1674 
1675 	/* Update the HCD's internal representation of this hub before hub_wq
1676 	 * starts getting port status changes for devices under the hub.
1677 	 */
1678 	if (hcd->driver->update_hub_device) {
1679 		ret = hcd->driver->update_hub_device(hcd, hdev,
1680 				&hub->tt, GFP_KERNEL);
1681 		if (ret < 0) {
1682 			message = "can't update HCD hub info";
1683 			goto fail;
1684 		}
1685 	}
1686 
1687 	usb_hub_adjust_deviceremovable(hdev, hub->descriptor);
1688 
1689 	hub_activate(hub, HUB_INIT);
1690 	return 0;
1691 
1692 fail:
1693 	dev_err(hub_dev, "config failed, %s (err %d)\n",
1694 			message, ret);
1695 	/* hub_disconnect() frees urb and descriptor */
1696 	return ret;
1697 }
1698 
hub_release(struct kref * kref)1699 static void hub_release(struct kref *kref)
1700 {
1701 	struct usb_hub *hub = container_of(kref, struct usb_hub, kref);
1702 
1703 	usb_put_dev(hub->hdev);
1704 	usb_put_intf(to_usb_interface(hub->intfdev));
1705 	kfree(hub);
1706 }
1707 
1708 static unsigned highspeed_hubs;
1709 
hub_disconnect(struct usb_interface * intf)1710 static void hub_disconnect(struct usb_interface *intf)
1711 {
1712 	struct usb_hub *hub = usb_get_intfdata(intf);
1713 	struct usb_device *hdev = interface_to_usbdev(intf);
1714 	int port1;
1715 
1716 	/*
1717 	 * Stop adding new hub events. We do not want to block here and thus
1718 	 * will not try to remove any pending work item.
1719 	 */
1720 	hub->disconnected = 1;
1721 
1722 	/* Disconnect all children and quiesce the hub */
1723 	hub->error = 0;
1724 	hub_quiesce(hub, HUB_DISCONNECT);
1725 
1726 	mutex_lock(&usb_port_peer_mutex);
1727 
1728 	/* Avoid races with recursively_mark_NOTATTACHED() */
1729 	spin_lock_irq(&device_state_lock);
1730 	port1 = hdev->maxchild;
1731 	hdev->maxchild = 0;
1732 	usb_set_intfdata(intf, NULL);
1733 	spin_unlock_irq(&device_state_lock);
1734 
1735 	for (; port1 > 0; --port1)
1736 		usb_hub_remove_port_device(hub, port1);
1737 
1738 	mutex_unlock(&usb_port_peer_mutex);
1739 
1740 	if (hub->hdev->speed == USB_SPEED_HIGH)
1741 		highspeed_hubs--;
1742 
1743 	usb_free_urb(hub->urb);
1744 	kfree(hub->ports);
1745 	kfree(hub->descriptor);
1746 	kfree(hub->status);
1747 	kfree(hub->buffer);
1748 
1749 	pm_suspend_ignore_children(&intf->dev, false);
1750 
1751 	if (hub->quirk_disable_autosuspend)
1752 		usb_autopm_put_interface(intf);
1753 
1754 	kref_put(&hub->kref, hub_release);
1755 }
1756 
hub_descriptor_is_sane(struct usb_host_interface * desc)1757 static bool hub_descriptor_is_sane(struct usb_host_interface *desc)
1758 {
1759 	/* Some hubs have a subclass of 1, which AFAICT according to the */
1760 	/*  specs is not defined, but it works */
1761 	if (desc->desc.bInterfaceSubClass != 0 &&
1762 	    desc->desc.bInterfaceSubClass != 1)
1763 		return false;
1764 
1765 	/* Multiple endpoints? What kind of mutant ninja-hub is this? */
1766 	if (desc->desc.bNumEndpoints != 1)
1767 		return false;
1768 
1769 	/* If the first endpoint is not interrupt IN, we'd better punt! */
1770 	if (!usb_endpoint_is_int_in(&desc->endpoint[0].desc))
1771 		return false;
1772 
1773         return true;
1774 }
1775 
hub_probe(struct usb_interface * intf,const struct usb_device_id * id)1776 static int hub_probe(struct usb_interface *intf, const struct usb_device_id *id)
1777 {
1778 	struct usb_host_interface *desc;
1779 	struct usb_device *hdev;
1780 	struct usb_hub *hub;
1781 
1782 	desc = intf->cur_altsetting;
1783 	hdev = interface_to_usbdev(intf);
1784 
1785 	/*
1786 	 * Set default autosuspend delay as 0 to speedup bus suspend,
1787 	 * based on the below considerations:
1788 	 *
1789 	 * - Unlike other drivers, the hub driver does not rely on the
1790 	 *   autosuspend delay to provide enough time to handle a wakeup
1791 	 *   event, and the submitted status URB is just to check future
1792 	 *   change on hub downstream ports, so it is safe to do it.
1793 	 *
1794 	 * - The patch might cause one or more auto supend/resume for
1795 	 *   below very rare devices when they are plugged into hub
1796 	 *   first time:
1797 	 *
1798 	 *   	devices having trouble initializing, and disconnect
1799 	 *   	themselves from the bus and then reconnect a second
1800 	 *   	or so later
1801 	 *
1802 	 *   	devices just for downloading firmware, and disconnects
1803 	 *   	themselves after completing it
1804 	 *
1805 	 *   For these quite rare devices, their drivers may change the
1806 	 *   autosuspend delay of their parent hub in the probe() to one
1807 	 *   appropriate value to avoid the subtle problem if someone
1808 	 *   does care it.
1809 	 *
1810 	 * - The patch may cause one or more auto suspend/resume on
1811 	 *   hub during running 'lsusb', but it is probably too
1812 	 *   infrequent to worry about.
1813 	 *
1814 	 * - Change autosuspend delay of hub can avoid unnecessary auto
1815 	 *   suspend timer for hub, also may decrease power consumption
1816 	 *   of USB bus.
1817 	 *
1818 	 * - If user has indicated to prevent autosuspend by passing
1819 	 *   usbcore.autosuspend = -1 then keep autosuspend disabled.
1820 	 */
1821 #ifdef CONFIG_PM
1822 	if (hdev->dev.power.autosuspend_delay >= 0)
1823 		pm_runtime_set_autosuspend_delay(&hdev->dev, 0);
1824 #endif
1825 
1826 	/*
1827 	 * Hubs have proper suspend/resume support, except for root hubs
1828 	 * where the controller driver doesn't have bus_suspend and
1829 	 * bus_resume methods.
1830 	 */
1831 	if (hdev->parent) {		/* normal device */
1832 		if (!(hdev->parent->quirks & USB_QUIRK_AUTO_SUSPEND))
1833 			usb_enable_autosuspend(hdev);
1834 	} else {			/* root hub */
1835 		const struct hc_driver *drv = bus_to_hcd(hdev->bus)->driver;
1836 
1837 		if (drv->bus_suspend && drv->bus_resume)
1838 			usb_enable_autosuspend(hdev);
1839 	}
1840 
1841 	if (hdev->level == MAX_TOPO_LEVEL) {
1842 		dev_err(&intf->dev,
1843 			"Unsupported bus topology: hub nested too deep\n");
1844 		return -E2BIG;
1845 	}
1846 
1847 #ifdef	CONFIG_USB_OTG_DISABLE_EXTERNAL_HUB
1848 	if (hdev->parent) {
1849 		dev_warn(&intf->dev, "ignoring external hub\n");
1850 		return -ENODEV;
1851 	}
1852 #endif
1853 
1854 	if (!hub_descriptor_is_sane(desc)) {
1855 		dev_err(&intf->dev, "bad descriptor, ignoring hub\n");
1856 		return -EIO;
1857 	}
1858 
1859 	/* We found a hub */
1860 	dev_info(&intf->dev, "USB hub found\n");
1861 
1862 	hub = kzalloc(sizeof(*hub), GFP_KERNEL);
1863 	if (!hub)
1864 		return -ENOMEM;
1865 
1866 	kref_init(&hub->kref);
1867 	hub->intfdev = &intf->dev;
1868 	hub->hdev = hdev;
1869 	INIT_DELAYED_WORK(&hub->leds, led_work);
1870 	INIT_DELAYED_WORK(&hub->init_work, NULL);
1871 	INIT_WORK(&hub->events, hub_event);
1872 	spin_lock_init(&hub->irq_urb_lock);
1873 	timer_setup(&hub->irq_urb_retry, hub_retry_irq_urb, 0);
1874 	usb_get_intf(intf);
1875 	usb_get_dev(hdev);
1876 
1877 	usb_set_intfdata(intf, hub);
1878 	intf->needs_remote_wakeup = 1;
1879 	pm_suspend_ignore_children(&intf->dev, true);
1880 
1881 	if (hdev->speed == USB_SPEED_HIGH)
1882 		highspeed_hubs++;
1883 
1884 	if (id->driver_info & HUB_QUIRK_CHECK_PORT_AUTOSUSPEND)
1885 		hub->quirk_check_port_auto_suspend = 1;
1886 
1887 	if (id->driver_info & HUB_QUIRK_DISABLE_AUTOSUSPEND) {
1888 		hub->quirk_disable_autosuspend = 1;
1889 		usb_autopm_get_interface_no_resume(intf);
1890 	}
1891 
1892 	if (hub_configure(hub, &desc->endpoint[0].desc) >= 0)
1893 		return 0;
1894 
1895 	hub_disconnect(intf);
1896 	return -ENODEV;
1897 }
1898 
1899 static int
hub_ioctl(struct usb_interface * intf,unsigned int code,void * user_data)1900 hub_ioctl(struct usb_interface *intf, unsigned int code, void *user_data)
1901 {
1902 	struct usb_device *hdev = interface_to_usbdev(intf);
1903 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
1904 
1905 	/* assert ifno == 0 (part of hub spec) */
1906 	switch (code) {
1907 	case USBDEVFS_HUB_PORTINFO: {
1908 		struct usbdevfs_hub_portinfo *info = user_data;
1909 		int i;
1910 
1911 		spin_lock_irq(&device_state_lock);
1912 		if (hdev->devnum <= 0)
1913 			info->nports = 0;
1914 		else {
1915 			info->nports = hdev->maxchild;
1916 			for (i = 0; i < info->nports; i++) {
1917 				if (hub->ports[i]->child == NULL)
1918 					info->port[i] = 0;
1919 				else
1920 					info->port[i] =
1921 						hub->ports[i]->child->devnum;
1922 			}
1923 		}
1924 		spin_unlock_irq(&device_state_lock);
1925 
1926 		return info->nports + 1;
1927 		}
1928 
1929 	default:
1930 		return -ENOSYS;
1931 	}
1932 }
1933 
1934 /*
1935  * Allow user programs to claim ports on a hub.  When a device is attached
1936  * to one of these "claimed" ports, the program will "own" the device.
1937  */
find_port_owner(struct usb_device * hdev,unsigned port1,struct usb_dev_state *** ppowner)1938 static int find_port_owner(struct usb_device *hdev, unsigned port1,
1939 		struct usb_dev_state ***ppowner)
1940 {
1941 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
1942 
1943 	if (hdev->state == USB_STATE_NOTATTACHED)
1944 		return -ENODEV;
1945 	if (port1 == 0 || port1 > hdev->maxchild)
1946 		return -EINVAL;
1947 
1948 	/* Devices not managed by the hub driver
1949 	 * will always have maxchild equal to 0.
1950 	 */
1951 	*ppowner = &(hub->ports[port1 - 1]->port_owner);
1952 	return 0;
1953 }
1954 
1955 /* In the following three functions, the caller must hold hdev's lock */
usb_hub_claim_port(struct usb_device * hdev,unsigned port1,struct usb_dev_state * owner)1956 int usb_hub_claim_port(struct usb_device *hdev, unsigned port1,
1957 		       struct usb_dev_state *owner)
1958 {
1959 	int rc;
1960 	struct usb_dev_state **powner;
1961 
1962 	rc = find_port_owner(hdev, port1, &powner);
1963 	if (rc)
1964 		return rc;
1965 	if (*powner)
1966 		return -EBUSY;
1967 	*powner = owner;
1968 	return rc;
1969 }
1970 EXPORT_SYMBOL_GPL(usb_hub_claim_port);
1971 
usb_hub_release_port(struct usb_device * hdev,unsigned port1,struct usb_dev_state * owner)1972 int usb_hub_release_port(struct usb_device *hdev, unsigned port1,
1973 			 struct usb_dev_state *owner)
1974 {
1975 	int rc;
1976 	struct usb_dev_state **powner;
1977 
1978 	rc = find_port_owner(hdev, port1, &powner);
1979 	if (rc)
1980 		return rc;
1981 	if (*powner != owner)
1982 		return -ENOENT;
1983 	*powner = NULL;
1984 	return rc;
1985 }
1986 EXPORT_SYMBOL_GPL(usb_hub_release_port);
1987 
usb_hub_release_all_ports(struct usb_device * hdev,struct usb_dev_state * owner)1988 void usb_hub_release_all_ports(struct usb_device *hdev, struct usb_dev_state *owner)
1989 {
1990 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
1991 	int n;
1992 
1993 	for (n = 0; n < hdev->maxchild; n++) {
1994 		if (hub->ports[n]->port_owner == owner)
1995 			hub->ports[n]->port_owner = NULL;
1996 	}
1997 
1998 }
1999 
2000 /* The caller must hold udev's lock */
usb_device_is_owned(struct usb_device * udev)2001 bool usb_device_is_owned(struct usb_device *udev)
2002 {
2003 	struct usb_hub *hub;
2004 
2005 	if (udev->state == USB_STATE_NOTATTACHED || !udev->parent)
2006 		return false;
2007 	hub = usb_hub_to_struct_hub(udev->parent);
2008 	return !!hub->ports[udev->portnum - 1]->port_owner;
2009 }
2010 
recursively_mark_NOTATTACHED(struct usb_device * udev)2011 static void recursively_mark_NOTATTACHED(struct usb_device *udev)
2012 {
2013 	struct usb_hub *hub = usb_hub_to_struct_hub(udev);
2014 	int i;
2015 
2016 	for (i = 0; i < udev->maxchild; ++i) {
2017 		if (hub->ports[i]->child)
2018 			recursively_mark_NOTATTACHED(hub->ports[i]->child);
2019 	}
2020 	if (udev->state == USB_STATE_SUSPENDED)
2021 		udev->active_duration -= jiffies;
2022 	udev->state = USB_STATE_NOTATTACHED;
2023 }
2024 
2025 /**
2026  * usb_set_device_state - change a device's current state (usbcore, hcds)
2027  * @udev: pointer to device whose state should be changed
2028  * @new_state: new state value to be stored
2029  *
2030  * udev->state is _not_ fully protected by the device lock.  Although
2031  * most transitions are made only while holding the lock, the state can
2032  * can change to USB_STATE_NOTATTACHED at almost any time.  This
2033  * is so that devices can be marked as disconnected as soon as possible,
2034  * without having to wait for any semaphores to be released.  As a result,
2035  * all changes to any device's state must be protected by the
2036  * device_state_lock spinlock.
2037  *
2038  * Once a device has been added to the device tree, all changes to its state
2039  * should be made using this routine.  The state should _not_ be set directly.
2040  *
2041  * If udev->state is already USB_STATE_NOTATTACHED then no change is made.
2042  * Otherwise udev->state is set to new_state, and if new_state is
2043  * USB_STATE_NOTATTACHED then all of udev's descendants' states are also set
2044  * to USB_STATE_NOTATTACHED.
2045  */
usb_set_device_state(struct usb_device * udev,enum usb_device_state new_state)2046 void usb_set_device_state(struct usb_device *udev,
2047 		enum usb_device_state new_state)
2048 {
2049 	unsigned long flags;
2050 	int wakeup = -1;
2051 
2052 	spin_lock_irqsave(&device_state_lock, flags);
2053 	if (udev->state == USB_STATE_NOTATTACHED)
2054 		;	/* do nothing */
2055 	else if (new_state != USB_STATE_NOTATTACHED) {
2056 
2057 		/* root hub wakeup capabilities are managed out-of-band
2058 		 * and may involve silicon errata ... ignore them here.
2059 		 */
2060 		if (udev->parent) {
2061 			if (udev->state == USB_STATE_SUSPENDED
2062 					|| new_state == USB_STATE_SUSPENDED)
2063 				;	/* No change to wakeup settings */
2064 			else if (new_state == USB_STATE_CONFIGURED)
2065 				wakeup = (udev->quirks &
2066 					USB_QUIRK_IGNORE_REMOTE_WAKEUP) ? 0 :
2067 					udev->actconfig->desc.bmAttributes &
2068 					USB_CONFIG_ATT_WAKEUP;
2069 			else
2070 				wakeup = 0;
2071 		}
2072 		if (udev->state == USB_STATE_SUSPENDED &&
2073 			new_state != USB_STATE_SUSPENDED)
2074 			udev->active_duration -= jiffies;
2075 		else if (new_state == USB_STATE_SUSPENDED &&
2076 				udev->state != USB_STATE_SUSPENDED)
2077 			udev->active_duration += jiffies;
2078 		udev->state = new_state;
2079 	} else
2080 		recursively_mark_NOTATTACHED(udev);
2081 	spin_unlock_irqrestore(&device_state_lock, flags);
2082 	if (wakeup >= 0)
2083 		device_set_wakeup_capable(&udev->dev, wakeup);
2084 }
2085 EXPORT_SYMBOL_GPL(usb_set_device_state);
2086 
2087 /*
2088  * Choose a device number.
2089  *
2090  * Device numbers are used as filenames in usbfs.  On USB-1.1 and
2091  * USB-2.0 buses they are also used as device addresses, however on
2092  * USB-3.0 buses the address is assigned by the controller hardware
2093  * and it usually is not the same as the device number.
2094  *
2095  * WUSB devices are simple: they have no hubs behind, so the mapping
2096  * device <-> virtual port number becomes 1:1. Why? to simplify the
2097  * life of the device connection logic in
2098  * drivers/usb/wusbcore/devconnect.c. When we do the initial secret
2099  * handshake we need to assign a temporary address in the unauthorized
2100  * space. For simplicity we use the first virtual port number found to
2101  * be free [drivers/usb/wusbcore/devconnect.c:wusbhc_devconnect_ack()]
2102  * and that becomes it's address [X < 128] or its unauthorized address
2103  * [X | 0x80].
2104  *
2105  * We add 1 as an offset to the one-based USB-stack port number
2106  * (zero-based wusb virtual port index) for two reasons: (a) dev addr
2107  * 0 is reserved by USB for default address; (b) Linux's USB stack
2108  * uses always #1 for the root hub of the controller. So USB stack's
2109  * port #1, which is wusb virtual-port #0 has address #2.
2110  *
2111  * Devices connected under xHCI are not as simple.  The host controller
2112  * supports virtualization, so the hardware assigns device addresses and
2113  * the HCD must setup data structures before issuing a set address
2114  * command to the hardware.
2115  */
choose_devnum(struct usb_device * udev)2116 static void choose_devnum(struct usb_device *udev)
2117 {
2118 	int		devnum;
2119 	struct usb_bus	*bus = udev->bus;
2120 
2121 	/* be safe when more hub events are proceed in parallel */
2122 	mutex_lock(&bus->devnum_next_mutex);
2123 	if (udev->wusb) {
2124 		devnum = udev->portnum + 1;
2125 		BUG_ON(test_bit(devnum, bus->devmap.devicemap));
2126 	} else {
2127 		/* Try to allocate the next devnum beginning at
2128 		 * bus->devnum_next. */
2129 		devnum = find_next_zero_bit(bus->devmap.devicemap, 128,
2130 					    bus->devnum_next);
2131 		if (devnum >= 128)
2132 			devnum = find_next_zero_bit(bus->devmap.devicemap,
2133 						    128, 1);
2134 		bus->devnum_next = (devnum >= 127 ? 1 : devnum + 1);
2135 	}
2136 	if (devnum < 128) {
2137 		set_bit(devnum, bus->devmap.devicemap);
2138 		udev->devnum = devnum;
2139 	}
2140 	mutex_unlock(&bus->devnum_next_mutex);
2141 }
2142 
release_devnum(struct usb_device * udev)2143 static void release_devnum(struct usb_device *udev)
2144 {
2145 	if (udev->devnum > 0) {
2146 		clear_bit(udev->devnum, udev->bus->devmap.devicemap);
2147 		udev->devnum = -1;
2148 	}
2149 }
2150 
update_devnum(struct usb_device * udev,int devnum)2151 static void update_devnum(struct usb_device *udev, int devnum)
2152 {
2153 	/* The address for a WUSB device is managed by wusbcore. */
2154 	if (!udev->wusb)
2155 		udev->devnum = devnum;
2156 	if (!udev->devaddr)
2157 		udev->devaddr = (u8)devnum;
2158 }
2159 
hub_free_dev(struct usb_device * udev)2160 static void hub_free_dev(struct usb_device *udev)
2161 {
2162 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
2163 
2164 	/* Root hubs aren't real devices, so don't free HCD resources */
2165 	if (hcd->driver->free_dev && udev->parent)
2166 		hcd->driver->free_dev(hcd, udev);
2167 }
2168 
hub_disconnect_children(struct usb_device * udev)2169 static void hub_disconnect_children(struct usb_device *udev)
2170 {
2171 	struct usb_hub *hub = usb_hub_to_struct_hub(udev);
2172 	int i;
2173 
2174 	/* Free up all the children before we remove this device */
2175 	for (i = 0; i < udev->maxchild; i++) {
2176 		if (hub->ports[i]->child)
2177 			usb_disconnect(&hub->ports[i]->child);
2178 	}
2179 }
2180 
2181 /**
2182  * usb_disconnect - disconnect a device (usbcore-internal)
2183  * @pdev: pointer to device being disconnected
2184  * Context: !in_interrupt ()
2185  *
2186  * Something got disconnected. Get rid of it and all of its children.
2187  *
2188  * If *pdev is a normal device then the parent hub must already be locked.
2189  * If *pdev is a root hub then the caller must hold the usb_bus_idr_lock,
2190  * which protects the set of root hubs as well as the list of buses.
2191  *
2192  * Only hub drivers (including virtual root hub drivers for host
2193  * controllers) should ever call this.
2194  *
2195  * This call is synchronous, and may not be used in an interrupt context.
2196  */
usb_disconnect(struct usb_device ** pdev)2197 void usb_disconnect(struct usb_device **pdev)
2198 {
2199 	struct usb_port *port_dev = NULL;
2200 	struct usb_device *udev = *pdev;
2201 	struct usb_hub *hub = NULL;
2202 	int port1 = 1;
2203 
2204 	/* mark the device as inactive, so any further urb submissions for
2205 	 * this device (and any of its children) will fail immediately.
2206 	 * this quiesces everything except pending urbs.
2207 	 */
2208 	usb_set_device_state(udev, USB_STATE_NOTATTACHED);
2209 	dev_info(&udev->dev, "USB disconnect, device number %d\n",
2210 			udev->devnum);
2211 
2212 	/*
2213 	 * Ensure that the pm runtime code knows that the USB device
2214 	 * is in the process of being disconnected.
2215 	 */
2216 	pm_runtime_barrier(&udev->dev);
2217 
2218 	usb_lock_device(udev);
2219 
2220 	hub_disconnect_children(udev);
2221 
2222 	/* deallocate hcd/hardware state ... nuking all pending urbs and
2223 	 * cleaning up all state associated with the current configuration
2224 	 * so that the hardware is now fully quiesced.
2225 	 */
2226 	dev_dbg(&udev->dev, "unregistering device\n");
2227 	usb_disable_device(udev, 0);
2228 	usb_hcd_synchronize_unlinks(udev);
2229 
2230 	if (udev->parent) {
2231 		port1 = udev->portnum;
2232 		hub = usb_hub_to_struct_hub(udev->parent);
2233 		port_dev = hub->ports[port1 - 1];
2234 
2235 		sysfs_remove_link(&udev->dev.kobj, "port");
2236 		sysfs_remove_link(&port_dev->dev.kobj, "device");
2237 
2238 		/*
2239 		 * As usb_port_runtime_resume() de-references udev, make
2240 		 * sure no resumes occur during removal
2241 		 */
2242 		if (!test_and_set_bit(port1, hub->child_usage_bits))
2243 			pm_runtime_get_sync(&port_dev->dev);
2244 	}
2245 
2246 	usb_remove_ep_devs(&udev->ep0);
2247 	usb_unlock_device(udev);
2248 
2249 	/* Unregister the device.  The device driver is responsible
2250 	 * for de-configuring the device and invoking the remove-device
2251 	 * notifier chain (used by usbfs and possibly others).
2252 	 */
2253 	device_del(&udev->dev);
2254 
2255 	/* Free the device number and delete the parent's children[]
2256 	 * (or root_hub) pointer.
2257 	 */
2258 	release_devnum(udev);
2259 
2260 	/* Avoid races with recursively_mark_NOTATTACHED() */
2261 	spin_lock_irq(&device_state_lock);
2262 	*pdev = NULL;
2263 	spin_unlock_irq(&device_state_lock);
2264 
2265 	if (port_dev && test_and_clear_bit(port1, hub->child_usage_bits))
2266 		pm_runtime_put(&port_dev->dev);
2267 
2268 	hub_free_dev(udev);
2269 
2270 	put_device(&udev->dev);
2271 }
2272 
2273 #ifdef CONFIG_USB_ANNOUNCE_NEW_DEVICES
show_string(struct usb_device * udev,char * id,char * string)2274 static void show_string(struct usb_device *udev, char *id, char *string)
2275 {
2276 	if (!string)
2277 		return;
2278 	dev_info(&udev->dev, "%s: %s\n", id, string);
2279 }
2280 
announce_device(struct usb_device * udev)2281 static void announce_device(struct usb_device *udev)
2282 {
2283 	u16 bcdDevice = le16_to_cpu(udev->descriptor.bcdDevice);
2284 
2285 	dev_info(&udev->dev,
2286 		"New USB device found, idVendor=%04x, idProduct=%04x, bcdDevice=%2x.%02x\n",
2287 		le16_to_cpu(udev->descriptor.idVendor),
2288 		le16_to_cpu(udev->descriptor.idProduct),
2289 		bcdDevice >> 8, bcdDevice & 0xff);
2290 	dev_info(&udev->dev,
2291 		"New USB device strings: Mfr=%d, Product=%d, SerialNumber=%d\n",
2292 		udev->descriptor.iManufacturer,
2293 		udev->descriptor.iProduct,
2294 		udev->descriptor.iSerialNumber);
2295 	show_string(udev, "Product", udev->product);
2296 	show_string(udev, "Manufacturer", udev->manufacturer);
2297 	show_string(udev, "SerialNumber", udev->serial);
2298 }
2299 #else
announce_device(struct usb_device * udev)2300 static inline void announce_device(struct usb_device *udev) { }
2301 #endif
2302 
2303 
2304 /**
2305  * usb_enumerate_device_otg - FIXME (usbcore-internal)
2306  * @udev: newly addressed device (in ADDRESS state)
2307  *
2308  * Finish enumeration for On-The-Go devices
2309  *
2310  * Return: 0 if successful. A negative error code otherwise.
2311  */
usb_enumerate_device_otg(struct usb_device * udev)2312 static int usb_enumerate_device_otg(struct usb_device *udev)
2313 {
2314 	int err = 0;
2315 
2316 #ifdef	CONFIG_USB_OTG
2317 	/*
2318 	 * OTG-aware devices on OTG-capable root hubs may be able to use SRP,
2319 	 * to wake us after we've powered off VBUS; and HNP, switching roles
2320 	 * "host" to "peripheral".  The OTG descriptor helps figure this out.
2321 	 */
2322 	if (!udev->bus->is_b_host
2323 			&& udev->config
2324 			&& udev->parent == udev->bus->root_hub) {
2325 		struct usb_otg_descriptor	*desc = NULL;
2326 		struct usb_bus			*bus = udev->bus;
2327 		unsigned			port1 = udev->portnum;
2328 
2329 		/* descriptor may appear anywhere in config */
2330 		err = __usb_get_extra_descriptor(udev->rawdescriptors[0],
2331 				le16_to_cpu(udev->config[0].desc.wTotalLength),
2332 				USB_DT_OTG, (void **) &desc, sizeof(*desc));
2333 		if (err || !(desc->bmAttributes & USB_OTG_HNP))
2334 			return 0;
2335 
2336 		dev_info(&udev->dev, "Dual-Role OTG device on %sHNP port\n",
2337 					(port1 == bus->otg_port) ? "" : "non-");
2338 
2339 		/* enable HNP before suspend, it's simpler */
2340 		if (port1 == bus->otg_port) {
2341 			bus->b_hnp_enable = 1;
2342 			err = usb_control_msg(udev,
2343 				usb_sndctrlpipe(udev, 0),
2344 				USB_REQ_SET_FEATURE, 0,
2345 				USB_DEVICE_B_HNP_ENABLE,
2346 				0, NULL, 0,
2347 				USB_CTRL_SET_TIMEOUT);
2348 			if (err < 0) {
2349 				/*
2350 				 * OTG MESSAGE: report errors here,
2351 				 * customize to match your product.
2352 				 */
2353 				dev_err(&udev->dev, "can't set HNP mode: %d\n",
2354 									err);
2355 				bus->b_hnp_enable = 0;
2356 			}
2357 		} else if (desc->bLength == sizeof
2358 				(struct usb_otg_descriptor)) {
2359 			/* Set a_alt_hnp_support for legacy otg device */
2360 			err = usb_control_msg(udev,
2361 				usb_sndctrlpipe(udev, 0),
2362 				USB_REQ_SET_FEATURE, 0,
2363 				USB_DEVICE_A_ALT_HNP_SUPPORT,
2364 				0, NULL, 0,
2365 				USB_CTRL_SET_TIMEOUT);
2366 			if (err < 0)
2367 				dev_err(&udev->dev,
2368 					"set a_alt_hnp_support failed: %d\n",
2369 					err);
2370 		}
2371 	}
2372 #endif
2373 	return err;
2374 }
2375 
2376 
2377 /**
2378  * usb_enumerate_device - Read device configs/intfs/otg (usbcore-internal)
2379  * @udev: newly addressed device (in ADDRESS state)
2380  *
2381  * This is only called by usb_new_device() and usb_authorize_device()
2382  * and FIXME -- all comments that apply to them apply here wrt to
2383  * environment.
2384  *
2385  * If the device is WUSB and not authorized, we don't attempt to read
2386  * the string descriptors, as they will be errored out by the device
2387  * until it has been authorized.
2388  *
2389  * Return: 0 if successful. A negative error code otherwise.
2390  */
usb_enumerate_device(struct usb_device * udev)2391 static int usb_enumerate_device(struct usb_device *udev)
2392 {
2393 	int err;
2394 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
2395 
2396 	if (udev->config == NULL) {
2397 		err = usb_get_configuration(udev);
2398 		if (err < 0) {
2399 			if (err != -ENODEV)
2400 				dev_err(&udev->dev, "can't read configurations, error %d\n",
2401 						err);
2402 			return err;
2403 		}
2404 	}
2405 
2406 	/* read the standard strings and cache them if present */
2407 	udev->product = usb_cache_string(udev, udev->descriptor.iProduct);
2408 	udev->manufacturer = usb_cache_string(udev,
2409 					      udev->descriptor.iManufacturer);
2410 	udev->serial = usb_cache_string(udev, udev->descriptor.iSerialNumber);
2411 
2412 	err = usb_enumerate_device_otg(udev);
2413 	if (err < 0)
2414 		return err;
2415 
2416 	if (IS_ENABLED(CONFIG_USB_OTG_PRODUCTLIST) && hcd->tpl_support &&
2417 		!is_targeted(udev)) {
2418 		/* Maybe it can talk to us, though we can't talk to it.
2419 		 * (Includes HNP test device.)
2420 		 */
2421 		if (IS_ENABLED(CONFIG_USB_OTG) && (udev->bus->b_hnp_enable
2422 			|| udev->bus->is_b_host)) {
2423 			err = usb_port_suspend(udev, PMSG_AUTO_SUSPEND);
2424 			if (err < 0)
2425 				dev_dbg(&udev->dev, "HNP fail, %d\n", err);
2426 		}
2427 		return -ENOTSUPP;
2428 	}
2429 
2430 	usb_detect_interface_quirks(udev);
2431 
2432 	return 0;
2433 }
2434 
set_usb_port_removable(struct usb_device * udev)2435 static void set_usb_port_removable(struct usb_device *udev)
2436 {
2437 	struct usb_device *hdev = udev->parent;
2438 	struct usb_hub *hub;
2439 	u8 port = udev->portnum;
2440 	u16 wHubCharacteristics;
2441 	bool removable = true;
2442 
2443 	if (!hdev)
2444 		return;
2445 
2446 	hub = usb_hub_to_struct_hub(udev->parent);
2447 
2448 	/*
2449 	 * If the platform firmware has provided information about a port,
2450 	 * use that to determine whether it's removable.
2451 	 */
2452 	switch (hub->ports[udev->portnum - 1]->connect_type) {
2453 	case USB_PORT_CONNECT_TYPE_HOT_PLUG:
2454 		udev->removable = USB_DEVICE_REMOVABLE;
2455 		return;
2456 	case USB_PORT_CONNECT_TYPE_HARD_WIRED:
2457 	case USB_PORT_NOT_USED:
2458 		udev->removable = USB_DEVICE_FIXED;
2459 		return;
2460 	default:
2461 		break;
2462 	}
2463 
2464 	/*
2465 	 * Otherwise, check whether the hub knows whether a port is removable
2466 	 * or not
2467 	 */
2468 	wHubCharacteristics = le16_to_cpu(hub->descriptor->wHubCharacteristics);
2469 
2470 	if (!(wHubCharacteristics & HUB_CHAR_COMPOUND))
2471 		return;
2472 
2473 	if (hub_is_superspeed(hdev)) {
2474 		if (le16_to_cpu(hub->descriptor->u.ss.DeviceRemovable)
2475 				& (1 << port))
2476 			removable = false;
2477 	} else {
2478 		if (hub->descriptor->u.hs.DeviceRemovable[port / 8] & (1 << (port % 8)))
2479 			removable = false;
2480 	}
2481 
2482 	if (removable)
2483 		udev->removable = USB_DEVICE_REMOVABLE;
2484 	else
2485 		udev->removable = USB_DEVICE_FIXED;
2486 
2487 }
2488 
2489 /**
2490  * usb_new_device - perform initial device setup (usbcore-internal)
2491  * @udev: newly addressed device (in ADDRESS state)
2492  *
2493  * This is called with devices which have been detected but not fully
2494  * enumerated.  The device descriptor is available, but not descriptors
2495  * for any device configuration.  The caller must have locked either
2496  * the parent hub (if udev is a normal device) or else the
2497  * usb_bus_idr_lock (if udev is a root hub).  The parent's pointer to
2498  * udev has already been installed, but udev is not yet visible through
2499  * sysfs or other filesystem code.
2500  *
2501  * This call is synchronous, and may not be used in an interrupt context.
2502  *
2503  * Only the hub driver or root-hub registrar should ever call this.
2504  *
2505  * Return: Whether the device is configured properly or not. Zero if the
2506  * interface was registered with the driver core; else a negative errno
2507  * value.
2508  *
2509  */
usb_new_device(struct usb_device * udev)2510 int usb_new_device(struct usb_device *udev)
2511 {
2512 	int err;
2513 
2514 	if (udev->parent) {
2515 		/* Initialize non-root-hub device wakeup to disabled;
2516 		 * device (un)configuration controls wakeup capable
2517 		 * sysfs power/wakeup controls wakeup enabled/disabled
2518 		 */
2519 		device_init_wakeup(&udev->dev, 0);
2520 	}
2521 
2522 	/* Tell the runtime-PM framework the device is active */
2523 	pm_runtime_set_active(&udev->dev);
2524 	pm_runtime_get_noresume(&udev->dev);
2525 	pm_runtime_use_autosuspend(&udev->dev);
2526 	pm_runtime_enable(&udev->dev);
2527 
2528 	/* By default, forbid autosuspend for all devices.  It will be
2529 	 * allowed for hubs during binding.
2530 	 */
2531 	usb_disable_autosuspend(udev);
2532 
2533 	err = usb_enumerate_device(udev);	/* Read descriptors */
2534 	if (err < 0)
2535 		goto fail;
2536 	dev_dbg(&udev->dev, "udev %d, busnum %d, minor = %d\n",
2537 			udev->devnum, udev->bus->busnum,
2538 			(((udev->bus->busnum-1) * 128) + (udev->devnum-1)));
2539 	/* export the usbdev device-node for libusb */
2540 	udev->dev.devt = MKDEV(USB_DEVICE_MAJOR,
2541 			(((udev->bus->busnum-1) * 128) + (udev->devnum-1)));
2542 
2543 	/* Tell the world! */
2544 	announce_device(udev);
2545 
2546 	if (udev->serial)
2547 		add_device_randomness(udev->serial, strlen(udev->serial));
2548 	if (udev->product)
2549 		add_device_randomness(udev->product, strlen(udev->product));
2550 	if (udev->manufacturer)
2551 		add_device_randomness(udev->manufacturer,
2552 				      strlen(udev->manufacturer));
2553 
2554 	device_enable_async_suspend(&udev->dev);
2555 
2556 	/* check whether the hub or firmware marks this port as non-removable */
2557 	if (udev->parent)
2558 		set_usb_port_removable(udev);
2559 
2560 	/* Register the device.  The device driver is responsible
2561 	 * for configuring the device and invoking the add-device
2562 	 * notifier chain (used by usbfs and possibly others).
2563 	 */
2564 	err = device_add(&udev->dev);
2565 	if (err) {
2566 		dev_err(&udev->dev, "can't device_add, error %d\n", err);
2567 		goto fail;
2568 	}
2569 
2570 	/* Create link files between child device and usb port device. */
2571 	if (udev->parent) {
2572 		struct usb_hub *hub = usb_hub_to_struct_hub(udev->parent);
2573 		int port1 = udev->portnum;
2574 		struct usb_port	*port_dev = hub->ports[port1 - 1];
2575 
2576 		err = sysfs_create_link(&udev->dev.kobj,
2577 				&port_dev->dev.kobj, "port");
2578 		if (err)
2579 			goto fail;
2580 
2581 		err = sysfs_create_link(&port_dev->dev.kobj,
2582 				&udev->dev.kobj, "device");
2583 		if (err) {
2584 			sysfs_remove_link(&udev->dev.kobj, "port");
2585 			goto fail;
2586 		}
2587 
2588 		if (!test_and_set_bit(port1, hub->child_usage_bits))
2589 			pm_runtime_get_sync(&port_dev->dev);
2590 	}
2591 
2592 	(void) usb_create_ep_devs(&udev->dev, &udev->ep0, udev);
2593 	usb_mark_last_busy(udev);
2594 	pm_runtime_put_sync_autosuspend(&udev->dev);
2595 	return err;
2596 
2597 fail:
2598 	usb_set_device_state(udev, USB_STATE_NOTATTACHED);
2599 	pm_runtime_disable(&udev->dev);
2600 	pm_runtime_set_suspended(&udev->dev);
2601 	return err;
2602 }
2603 
2604 
2605 /**
2606  * usb_deauthorize_device - deauthorize a device (usbcore-internal)
2607  * @usb_dev: USB device
2608  *
2609  * Move the USB device to a very basic state where interfaces are disabled
2610  * and the device is in fact unconfigured and unusable.
2611  *
2612  * We share a lock (that we have) with device_del(), so we need to
2613  * defer its call.
2614  *
2615  * Return: 0.
2616  */
usb_deauthorize_device(struct usb_device * usb_dev)2617 int usb_deauthorize_device(struct usb_device *usb_dev)
2618 {
2619 	usb_lock_device(usb_dev);
2620 	if (usb_dev->authorized == 0)
2621 		goto out_unauthorized;
2622 
2623 	usb_dev->authorized = 0;
2624 	usb_set_configuration(usb_dev, -1);
2625 
2626 out_unauthorized:
2627 	usb_unlock_device(usb_dev);
2628 	return 0;
2629 }
2630 
2631 
usb_authorize_device(struct usb_device * usb_dev)2632 int usb_authorize_device(struct usb_device *usb_dev)
2633 {
2634 	int result = 0, c;
2635 
2636 	usb_lock_device(usb_dev);
2637 	if (usb_dev->authorized == 1)
2638 		goto out_authorized;
2639 
2640 	result = usb_autoresume_device(usb_dev);
2641 	if (result < 0) {
2642 		dev_err(&usb_dev->dev,
2643 			"can't autoresume for authorization: %d\n", result);
2644 		goto error_autoresume;
2645 	}
2646 
2647 	if (usb_dev->wusb) {
2648 		result = usb_get_device_descriptor(usb_dev, sizeof(usb_dev->descriptor));
2649 		if (result < 0) {
2650 			dev_err(&usb_dev->dev, "can't re-read device descriptor for "
2651 				"authorization: %d\n", result);
2652 			goto error_device_descriptor;
2653 		}
2654 	}
2655 
2656 	usb_dev->authorized = 1;
2657 	/* Choose and set the configuration.  This registers the interfaces
2658 	 * with the driver core and lets interface drivers bind to them.
2659 	 */
2660 	c = usb_choose_configuration(usb_dev);
2661 	if (c >= 0) {
2662 		result = usb_set_configuration(usb_dev, c);
2663 		if (result) {
2664 			dev_err(&usb_dev->dev,
2665 				"can't set config #%d, error %d\n", c, result);
2666 			/* This need not be fatal.  The user can try to
2667 			 * set other configurations. */
2668 		}
2669 	}
2670 	dev_info(&usb_dev->dev, "authorized to connect\n");
2671 
2672 error_device_descriptor:
2673 	usb_autosuspend_device(usb_dev);
2674 error_autoresume:
2675 out_authorized:
2676 	usb_unlock_device(usb_dev);	/* complements locktree */
2677 	return result;
2678 }
2679 
2680 /*
2681  * Return 1 if port speed is SuperSpeedPlus, 0 otherwise
2682  * check it from the link protocol field of the current speed ID attribute.
2683  * current speed ID is got from ext port status request. Sublink speed attribute
2684  * table is returned with the hub BOS SSP device capability descriptor
2685  */
port_speed_is_ssp(struct usb_device * hdev,int speed_id)2686 static int port_speed_is_ssp(struct usb_device *hdev, int speed_id)
2687 {
2688 	int ssa_count;
2689 	u32 ss_attr;
2690 	int i;
2691 	struct usb_ssp_cap_descriptor *ssp_cap = hdev->bos->ssp_cap;
2692 
2693 	if (!ssp_cap)
2694 		return 0;
2695 
2696 	ssa_count = le32_to_cpu(ssp_cap->bmAttributes) &
2697 		USB_SSP_SUBLINK_SPEED_ATTRIBS;
2698 
2699 	for (i = 0; i <= ssa_count; i++) {
2700 		ss_attr = le32_to_cpu(ssp_cap->bmSublinkSpeedAttr[i]);
2701 		if (speed_id == (ss_attr & USB_SSP_SUBLINK_SPEED_SSID))
2702 			return !!(ss_attr & USB_SSP_SUBLINK_SPEED_LP);
2703 	}
2704 	return 0;
2705 }
2706 
2707 /* Returns 1 if @hub is a WUSB root hub, 0 otherwise */
hub_is_wusb(struct usb_hub * hub)2708 static unsigned hub_is_wusb(struct usb_hub *hub)
2709 {
2710 	struct usb_hcd *hcd;
2711 	if (hub->hdev->parent != NULL)  /* not a root hub? */
2712 		return 0;
2713 	hcd = bus_to_hcd(hub->hdev->bus);
2714 	return hcd->wireless;
2715 }
2716 
2717 
2718 #ifdef CONFIG_USB_FEW_INIT_RETRIES
2719 #define PORT_RESET_TRIES	2
2720 #define SET_ADDRESS_TRIES	1
2721 #define GET_DESCRIPTOR_TRIES	1
2722 #define GET_MAXPACKET0_TRIES	1
2723 #define PORT_INIT_TRIES		4
2724 
2725 #else
2726 #define PORT_RESET_TRIES	5
2727 #define SET_ADDRESS_TRIES	2
2728 #define GET_DESCRIPTOR_TRIES	2
2729 #define GET_MAXPACKET0_TRIES	3
2730 #define PORT_INIT_TRIES		4
2731 #endif	/* CONFIG_USB_FEW_INIT_RETRIES */
2732 
2733 #define HUB_ROOT_RESET_TIME	60	/* times are in msec */
2734 #define HUB_SHORT_RESET_TIME	10
2735 #define HUB_BH_RESET_TIME	50
2736 #define HUB_LONG_RESET_TIME	200
2737 #define HUB_RESET_TIMEOUT	800
2738 
use_new_scheme(struct usb_device * udev,int retry,struct usb_port * port_dev)2739 static bool use_new_scheme(struct usb_device *udev, int retry,
2740 			   struct usb_port *port_dev)
2741 {
2742 	int old_scheme_first_port =
2743 		(port_dev->quirks & USB_PORT_QUIRK_OLD_SCHEME) ||
2744 		old_scheme_first;
2745 
2746 	/*
2747 	 * "New scheme" enumeration causes an extra state transition to be
2748 	 * exposed to an xhci host and causes USB3 devices to receive control
2749 	 * commands in the default state.  This has been seen to cause
2750 	 * enumeration failures, so disable this enumeration scheme for USB3
2751 	 * devices.
2752 	 */
2753 	if (udev->speed >= USB_SPEED_SUPER)
2754 		return false;
2755 
2756 	/*
2757 	 * If use_both_schemes is set, use the first scheme (whichever
2758 	 * it is) for the larger half of the retries, then use the other
2759 	 * scheme.  Otherwise, use the first scheme for all the retries.
2760 	 */
2761 	if (use_both_schemes && retry >= (PORT_INIT_TRIES + 1) / 2)
2762 		return old_scheme_first_port;	/* Second half */
2763 	return !old_scheme_first_port;		/* First half or all */
2764 }
2765 
2766 /* Is a USB 3.0 port in the Inactive or Compliance Mode state?
2767  * Port warm reset is required to recover
2768  */
hub_port_warm_reset_required(struct usb_hub * hub,int port1,u16 portstatus)2769 static bool hub_port_warm_reset_required(struct usb_hub *hub, int port1,
2770 		u16 portstatus)
2771 {
2772 	u16 link_state;
2773 
2774 	if (!hub_is_superspeed(hub->hdev))
2775 		return false;
2776 
2777 	if (test_bit(port1, hub->warm_reset_bits))
2778 		return true;
2779 
2780 	link_state = portstatus & USB_PORT_STAT_LINK_STATE;
2781 	return link_state == USB_SS_PORT_LS_SS_INACTIVE
2782 		|| link_state == USB_SS_PORT_LS_COMP_MOD;
2783 }
2784 
hub_port_wait_reset(struct usb_hub * hub,int port1,struct usb_device * udev,unsigned int delay,bool warm)2785 static int hub_port_wait_reset(struct usb_hub *hub, int port1,
2786 			struct usb_device *udev, unsigned int delay, bool warm)
2787 {
2788 	int delay_time, ret;
2789 	u16 portstatus;
2790 	u16 portchange;
2791 	u32 ext_portstatus = 0;
2792 
2793 	for (delay_time = 0;
2794 			delay_time < HUB_RESET_TIMEOUT;
2795 			delay_time += delay) {
2796 		/* wait to give the device a chance to reset */
2797 		msleep(delay);
2798 
2799 		/* read and decode port status */
2800 		if (hub_is_superspeedplus(hub->hdev))
2801 			ret = hub_ext_port_status(hub, port1,
2802 						  HUB_EXT_PORT_STATUS,
2803 						  &portstatus, &portchange,
2804 						  &ext_portstatus);
2805 		else
2806 			ret = hub_port_status(hub, port1, &portstatus,
2807 					      &portchange);
2808 		if (ret < 0)
2809 			return ret;
2810 
2811 		/*
2812 		 * The port state is unknown until the reset completes.
2813 		 *
2814 		 * On top of that, some chips may require additional time
2815 		 * to re-establish a connection after the reset is complete,
2816 		 * so also wait for the connection to be re-established.
2817 		 */
2818 		if (!(portstatus & USB_PORT_STAT_RESET) &&
2819 		    (portstatus & USB_PORT_STAT_CONNECTION))
2820 			break;
2821 
2822 		/* switch to the long delay after two short delay failures */
2823 		if (delay_time >= 2 * HUB_SHORT_RESET_TIME)
2824 			delay = HUB_LONG_RESET_TIME;
2825 
2826 		dev_dbg(&hub->ports[port1 - 1]->dev,
2827 				"not %sreset yet, waiting %dms\n",
2828 				warm ? "warm " : "", delay);
2829 	}
2830 
2831 	if ((portstatus & USB_PORT_STAT_RESET))
2832 		return -EBUSY;
2833 
2834 	if (hub_port_warm_reset_required(hub, port1, portstatus))
2835 		return -ENOTCONN;
2836 
2837 	/* Device went away? */
2838 	if (!(portstatus & USB_PORT_STAT_CONNECTION))
2839 		return -ENOTCONN;
2840 
2841 	/* Retry if connect change is set but status is still connected.
2842 	 * A USB 3.0 connection may bounce if multiple warm resets were issued,
2843 	 * but the device may have successfully re-connected. Ignore it.
2844 	 */
2845 	if (!hub_is_superspeed(hub->hdev) &&
2846 	    (portchange & USB_PORT_STAT_C_CONNECTION)) {
2847 		usb_clear_port_feature(hub->hdev, port1,
2848 				       USB_PORT_FEAT_C_CONNECTION);
2849 		return -EAGAIN;
2850 	}
2851 
2852 	if (!(portstatus & USB_PORT_STAT_ENABLE))
2853 		return -EBUSY;
2854 
2855 	if (!udev)
2856 		return 0;
2857 
2858 	if (hub_is_superspeedplus(hub->hdev)) {
2859 		/* extended portstatus Rx and Tx lane count are zero based */
2860 		udev->rx_lanes = USB_EXT_PORT_RX_LANES(ext_portstatus) + 1;
2861 		udev->tx_lanes = USB_EXT_PORT_TX_LANES(ext_portstatus) + 1;
2862 	} else {
2863 		udev->rx_lanes = 1;
2864 		udev->tx_lanes = 1;
2865 	}
2866 	if (hub_is_wusb(hub))
2867 		udev->speed = USB_SPEED_WIRELESS;
2868 	else if (hub_is_superspeedplus(hub->hdev) &&
2869 		 port_speed_is_ssp(hub->hdev, ext_portstatus &
2870 				   USB_EXT_PORT_STAT_RX_SPEED_ID))
2871 		udev->speed = USB_SPEED_SUPER_PLUS;
2872 	else if (hub_is_superspeed(hub->hdev))
2873 		udev->speed = USB_SPEED_SUPER;
2874 	else if (portstatus & USB_PORT_STAT_HIGH_SPEED)
2875 		udev->speed = USB_SPEED_HIGH;
2876 	else if (portstatus & USB_PORT_STAT_LOW_SPEED)
2877 		udev->speed = USB_SPEED_LOW;
2878 	else
2879 		udev->speed = USB_SPEED_FULL;
2880 	return 0;
2881 }
2882 
2883 /* Handle port reset and port warm(BH) reset (for USB3 protocol ports) */
hub_port_reset(struct usb_hub * hub,int port1,struct usb_device * udev,unsigned int delay,bool warm)2884 static int hub_port_reset(struct usb_hub *hub, int port1,
2885 			struct usb_device *udev, unsigned int delay, bool warm)
2886 {
2887 	int i, status;
2888 	u16 portchange, portstatus;
2889 	struct usb_port *port_dev = hub->ports[port1 - 1];
2890 	int reset_recovery_time;
2891 
2892 	if (!hub_is_superspeed(hub->hdev)) {
2893 		if (warm) {
2894 			dev_err(hub->intfdev, "only USB3 hub support "
2895 						"warm reset\n");
2896 			return -EINVAL;
2897 		}
2898 		/* Block EHCI CF initialization during the port reset.
2899 		 * Some companion controllers don't like it when they mix.
2900 		 */
2901 		down_read(&ehci_cf_port_reset_rwsem);
2902 	} else if (!warm) {
2903 		/*
2904 		 * If the caller hasn't explicitly requested a warm reset,
2905 		 * double check and see if one is needed.
2906 		 */
2907 		if (hub_port_status(hub, port1, &portstatus, &portchange) == 0)
2908 			if (hub_port_warm_reset_required(hub, port1,
2909 							portstatus))
2910 				warm = true;
2911 	}
2912 	clear_bit(port1, hub->warm_reset_bits);
2913 
2914 	/* Reset the port */
2915 	for (i = 0; i < PORT_RESET_TRIES; i++) {
2916 		status = set_port_feature(hub->hdev, port1, (warm ?
2917 					USB_PORT_FEAT_BH_PORT_RESET :
2918 					USB_PORT_FEAT_RESET));
2919 		if (status == -ENODEV) {
2920 			;	/* The hub is gone */
2921 		} else if (status) {
2922 			dev_err(&port_dev->dev,
2923 					"cannot %sreset (err = %d)\n",
2924 					warm ? "warm " : "", status);
2925 		} else {
2926 			status = hub_port_wait_reset(hub, port1, udev, delay,
2927 								warm);
2928 			if (status && status != -ENOTCONN && status != -ENODEV)
2929 				dev_dbg(hub->intfdev,
2930 						"port_wait_reset: err = %d\n",
2931 						status);
2932 		}
2933 
2934 		/* Check for disconnect or reset */
2935 		if (status == 0 || status == -ENOTCONN || status == -ENODEV) {
2936 			usb_clear_port_feature(hub->hdev, port1,
2937 					USB_PORT_FEAT_C_RESET);
2938 
2939 			if (!hub_is_superspeed(hub->hdev))
2940 				goto done;
2941 
2942 			usb_clear_port_feature(hub->hdev, port1,
2943 					USB_PORT_FEAT_C_BH_PORT_RESET);
2944 			usb_clear_port_feature(hub->hdev, port1,
2945 					USB_PORT_FEAT_C_PORT_LINK_STATE);
2946 
2947 			if (udev)
2948 				usb_clear_port_feature(hub->hdev, port1,
2949 					USB_PORT_FEAT_C_CONNECTION);
2950 
2951 			/*
2952 			 * If a USB 3.0 device migrates from reset to an error
2953 			 * state, re-issue the warm reset.
2954 			 */
2955 			if (hub_port_status(hub, port1,
2956 					&portstatus, &portchange) < 0)
2957 				goto done;
2958 
2959 			if (!hub_port_warm_reset_required(hub, port1,
2960 					portstatus))
2961 				goto done;
2962 
2963 			/*
2964 			 * If the port is in SS.Inactive or Compliance Mode, the
2965 			 * hot or warm reset failed.  Try another warm reset.
2966 			 */
2967 			if (!warm) {
2968 				dev_dbg(&port_dev->dev,
2969 						"hot reset failed, warm reset\n");
2970 				warm = true;
2971 			}
2972 		}
2973 
2974 		dev_dbg(&port_dev->dev,
2975 				"not enabled, trying %sreset again...\n",
2976 				warm ? "warm " : "");
2977 		delay = HUB_LONG_RESET_TIME;
2978 	}
2979 
2980 	dev_err(&port_dev->dev, "Cannot enable. Maybe the USB cable is bad?\n");
2981 
2982 done:
2983 	if (status == 0) {
2984 		if (port_dev->quirks & USB_PORT_QUIRK_FAST_ENUM)
2985 			usleep_range(10000, 12000);
2986 		else {
2987 			/* TRSTRCY = 10 ms; plus some extra */
2988 			reset_recovery_time = 10 + 40;
2989 
2990 			/* Hub needs extra delay after resetting its port. */
2991 			if (hub->hdev->quirks & USB_QUIRK_HUB_SLOW_RESET)
2992 				reset_recovery_time += 100;
2993 
2994 			msleep(reset_recovery_time);
2995 		}
2996 
2997 		if (udev) {
2998 			struct usb_hcd *hcd = bus_to_hcd(udev->bus);
2999 
3000 			update_devnum(udev, 0);
3001 			/* The xHC may think the device is already reset,
3002 			 * so ignore the status.
3003 			 */
3004 			if (hcd->driver->reset_device)
3005 				hcd->driver->reset_device(hcd, udev);
3006 
3007 			usb_set_device_state(udev, USB_STATE_DEFAULT);
3008 		}
3009 	} else {
3010 		if (udev)
3011 			usb_set_device_state(udev, USB_STATE_NOTATTACHED);
3012 	}
3013 
3014 	if (!hub_is_superspeed(hub->hdev))
3015 		up_read(&ehci_cf_port_reset_rwsem);
3016 
3017 	return status;
3018 }
3019 
3020 /* Check if a port is power on */
port_is_power_on(struct usb_hub * hub,unsigned portstatus)3021 static int port_is_power_on(struct usb_hub *hub, unsigned portstatus)
3022 {
3023 	int ret = 0;
3024 
3025 	if (hub_is_superspeed(hub->hdev)) {
3026 		if (portstatus & USB_SS_PORT_STAT_POWER)
3027 			ret = 1;
3028 	} else {
3029 		if (portstatus & USB_PORT_STAT_POWER)
3030 			ret = 1;
3031 	}
3032 
3033 	return ret;
3034 }
3035 
usb_lock_port(struct usb_port * port_dev)3036 static void usb_lock_port(struct usb_port *port_dev)
3037 		__acquires(&port_dev->status_lock)
3038 {
3039 	mutex_lock(&port_dev->status_lock);
3040 	__acquire(&port_dev->status_lock);
3041 }
3042 
usb_unlock_port(struct usb_port * port_dev)3043 static void usb_unlock_port(struct usb_port *port_dev)
3044 		__releases(&port_dev->status_lock)
3045 {
3046 	mutex_unlock(&port_dev->status_lock);
3047 	__release(&port_dev->status_lock);
3048 }
3049 
3050 #ifdef	CONFIG_PM
3051 
3052 /* Check if a port is suspended(USB2.0 port) or in U3 state(USB3.0 port) */
port_is_suspended(struct usb_hub * hub,unsigned portstatus)3053 static int port_is_suspended(struct usb_hub *hub, unsigned portstatus)
3054 {
3055 	int ret = 0;
3056 
3057 	if (hub_is_superspeed(hub->hdev)) {
3058 		if ((portstatus & USB_PORT_STAT_LINK_STATE)
3059 				== USB_SS_PORT_LS_U3)
3060 			ret = 1;
3061 	} else {
3062 		if (portstatus & USB_PORT_STAT_SUSPEND)
3063 			ret = 1;
3064 	}
3065 
3066 	return ret;
3067 }
3068 
3069 /* Determine whether the device on a port is ready for a normal resume,
3070  * is ready for a reset-resume, or should be disconnected.
3071  */
check_port_resume_type(struct usb_device * udev,struct usb_hub * hub,int port1,int status,u16 portchange,u16 portstatus)3072 static int check_port_resume_type(struct usb_device *udev,
3073 		struct usb_hub *hub, int port1,
3074 		int status, u16 portchange, u16 portstatus)
3075 {
3076 	struct usb_port *port_dev = hub->ports[port1 - 1];
3077 	int retries = 3;
3078 
3079  retry:
3080 	/* Is a warm reset needed to recover the connection? */
3081 	if (status == 0 && udev->reset_resume
3082 		&& hub_port_warm_reset_required(hub, port1, portstatus)) {
3083 		/* pass */;
3084 	}
3085 	/* Is the device still present? */
3086 	else if (status || port_is_suspended(hub, portstatus) ||
3087 			!port_is_power_on(hub, portstatus)) {
3088 		if (status >= 0)
3089 			status = -ENODEV;
3090 	} else if (!(portstatus & USB_PORT_STAT_CONNECTION)) {
3091 		if (retries--) {
3092 			usleep_range(200, 300);
3093 			status = hub_port_status(hub, port1, &portstatus,
3094 							     &portchange);
3095 			goto retry;
3096 		}
3097 		status = -ENODEV;
3098 	}
3099 
3100 	/* Can't do a normal resume if the port isn't enabled,
3101 	 * so try a reset-resume instead.
3102 	 */
3103 	else if (!(portstatus & USB_PORT_STAT_ENABLE) && !udev->reset_resume) {
3104 		if (udev->persist_enabled)
3105 			udev->reset_resume = 1;
3106 		else
3107 			status = -ENODEV;
3108 	}
3109 
3110 	if (status) {
3111 		dev_dbg(&port_dev->dev, "status %04x.%04x after resume, %d\n",
3112 				portchange, portstatus, status);
3113 	} else if (udev->reset_resume) {
3114 
3115 		/* Late port handoff can set status-change bits */
3116 		if (portchange & USB_PORT_STAT_C_CONNECTION)
3117 			usb_clear_port_feature(hub->hdev, port1,
3118 					USB_PORT_FEAT_C_CONNECTION);
3119 		if (portchange & USB_PORT_STAT_C_ENABLE)
3120 			usb_clear_port_feature(hub->hdev, port1,
3121 					USB_PORT_FEAT_C_ENABLE);
3122 
3123 		/*
3124 		 * Whatever made this reset-resume necessary may have
3125 		 * turned on the port1 bit in hub->change_bits.  But after
3126 		 * a successful reset-resume we want the bit to be clear;
3127 		 * if it was on it would indicate that something happened
3128 		 * following the reset-resume.
3129 		 */
3130 		clear_bit(port1, hub->change_bits);
3131 	}
3132 
3133 	return status;
3134 }
3135 
usb_disable_ltm(struct usb_device * udev)3136 int usb_disable_ltm(struct usb_device *udev)
3137 {
3138 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
3139 
3140 	/* Check if the roothub and device supports LTM. */
3141 	if (!usb_device_supports_ltm(hcd->self.root_hub) ||
3142 			!usb_device_supports_ltm(udev))
3143 		return 0;
3144 
3145 	/* Clear Feature LTM Enable can only be sent if the device is
3146 	 * configured.
3147 	 */
3148 	if (!udev->actconfig)
3149 		return 0;
3150 
3151 	return usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3152 			USB_REQ_CLEAR_FEATURE, USB_RECIP_DEVICE,
3153 			USB_DEVICE_LTM_ENABLE, 0, NULL, 0,
3154 			USB_CTRL_SET_TIMEOUT);
3155 }
3156 EXPORT_SYMBOL_GPL(usb_disable_ltm);
3157 
usb_enable_ltm(struct usb_device * udev)3158 void usb_enable_ltm(struct usb_device *udev)
3159 {
3160 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
3161 
3162 	/* Check if the roothub and device supports LTM. */
3163 	if (!usb_device_supports_ltm(hcd->self.root_hub) ||
3164 			!usb_device_supports_ltm(udev))
3165 		return;
3166 
3167 	/* Set Feature LTM Enable can only be sent if the device is
3168 	 * configured.
3169 	 */
3170 	if (!udev->actconfig)
3171 		return;
3172 
3173 	usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3174 			USB_REQ_SET_FEATURE, USB_RECIP_DEVICE,
3175 			USB_DEVICE_LTM_ENABLE, 0, NULL, 0,
3176 			USB_CTRL_SET_TIMEOUT);
3177 }
3178 EXPORT_SYMBOL_GPL(usb_enable_ltm);
3179 
3180 /*
3181  * usb_enable_remote_wakeup - enable remote wakeup for a device
3182  * @udev: target device
3183  *
3184  * For USB-2 devices: Set the device's remote wakeup feature.
3185  *
3186  * For USB-3 devices: Assume there's only one function on the device and
3187  * enable remote wake for the first interface.  FIXME if the interface
3188  * association descriptor shows there's more than one function.
3189  */
usb_enable_remote_wakeup(struct usb_device * udev)3190 static int usb_enable_remote_wakeup(struct usb_device *udev)
3191 {
3192 	if (udev->speed < USB_SPEED_SUPER)
3193 		return usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3194 				USB_REQ_SET_FEATURE, USB_RECIP_DEVICE,
3195 				USB_DEVICE_REMOTE_WAKEUP, 0, NULL, 0,
3196 				USB_CTRL_SET_TIMEOUT);
3197 	else
3198 		return usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3199 				USB_REQ_SET_FEATURE, USB_RECIP_INTERFACE,
3200 				USB_INTRF_FUNC_SUSPEND,
3201 				USB_INTRF_FUNC_SUSPEND_RW |
3202 					USB_INTRF_FUNC_SUSPEND_LP,
3203 				NULL, 0, USB_CTRL_SET_TIMEOUT);
3204 }
3205 
3206 /*
3207  * usb_disable_remote_wakeup - disable remote wakeup for a device
3208  * @udev: target device
3209  *
3210  * For USB-2 devices: Clear the device's remote wakeup feature.
3211  *
3212  * For USB-3 devices: Assume there's only one function on the device and
3213  * disable remote wake for the first interface.  FIXME if the interface
3214  * association descriptor shows there's more than one function.
3215  */
usb_disable_remote_wakeup(struct usb_device * udev)3216 static int usb_disable_remote_wakeup(struct usb_device *udev)
3217 {
3218 	if (udev->speed < USB_SPEED_SUPER)
3219 		return usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3220 				USB_REQ_CLEAR_FEATURE, USB_RECIP_DEVICE,
3221 				USB_DEVICE_REMOTE_WAKEUP, 0, NULL, 0,
3222 				USB_CTRL_SET_TIMEOUT);
3223 	else
3224 		return usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3225 				USB_REQ_SET_FEATURE, USB_RECIP_INTERFACE,
3226 				USB_INTRF_FUNC_SUSPEND,	0, NULL, 0,
3227 				USB_CTRL_SET_TIMEOUT);
3228 }
3229 
3230 /* Count of wakeup-enabled devices at or below udev */
usb_wakeup_enabled_descendants(struct usb_device * udev)3231 unsigned usb_wakeup_enabled_descendants(struct usb_device *udev)
3232 {
3233 	struct usb_hub *hub = usb_hub_to_struct_hub(udev);
3234 
3235 	return udev->do_remote_wakeup +
3236 			(hub ? hub->wakeup_enabled_descendants : 0);
3237 }
3238 EXPORT_SYMBOL_GPL(usb_wakeup_enabled_descendants);
3239 
3240 /*
3241  * usb_port_suspend - suspend a usb device's upstream port
3242  * @udev: device that's no longer in active use, not a root hub
3243  * Context: must be able to sleep; device not locked; pm locks held
3244  *
3245  * Suspends a USB device that isn't in active use, conserving power.
3246  * Devices may wake out of a suspend, if anything important happens,
3247  * using the remote wakeup mechanism.  They may also be taken out of
3248  * suspend by the host, using usb_port_resume().  It's also routine
3249  * to disconnect devices while they are suspended.
3250  *
3251  * This only affects the USB hardware for a device; its interfaces
3252  * (and, for hubs, child devices) must already have been suspended.
3253  *
3254  * Selective port suspend reduces power; most suspended devices draw
3255  * less than 500 uA.  It's also used in OTG, along with remote wakeup.
3256  * All devices below the suspended port are also suspended.
3257  *
3258  * Devices leave suspend state when the host wakes them up.  Some devices
3259  * also support "remote wakeup", where the device can activate the USB
3260  * tree above them to deliver data, such as a keypress or packet.  In
3261  * some cases, this wakes the USB host.
3262  *
3263  * Suspending OTG devices may trigger HNP, if that's been enabled
3264  * between a pair of dual-role devices.  That will change roles, such
3265  * as from A-Host to A-Peripheral or from B-Host back to B-Peripheral.
3266  *
3267  * Devices on USB hub ports have only one "suspend" state, corresponding
3268  * to ACPI D2, "may cause the device to lose some context".
3269  * State transitions include:
3270  *
3271  *   - suspend, resume ... when the VBUS power link stays live
3272  *   - suspend, disconnect ... VBUS lost
3273  *
3274  * Once VBUS drop breaks the circuit, the port it's using has to go through
3275  * normal re-enumeration procedures, starting with enabling VBUS power.
3276  * Other than re-initializing the hub (plug/unplug, except for root hubs),
3277  * Linux (2.6) currently has NO mechanisms to initiate that:  no hub_wq
3278  * timer, no SRP, no requests through sysfs.
3279  *
3280  * If Runtime PM isn't enabled or used, non-SuperSpeed devices may not get
3281  * suspended until their bus goes into global suspend (i.e., the root
3282  * hub is suspended).  Nevertheless, we change @udev->state to
3283  * USB_STATE_SUSPENDED as this is the device's "logical" state.  The actual
3284  * upstream port setting is stored in @udev->port_is_suspended.
3285  *
3286  * Returns 0 on success, else negative errno.
3287  */
usb_port_suspend(struct usb_device * udev,pm_message_t msg)3288 int usb_port_suspend(struct usb_device *udev, pm_message_t msg)
3289 {
3290 	struct usb_hub	*hub = usb_hub_to_struct_hub(udev->parent);
3291 	struct usb_port *port_dev = hub->ports[udev->portnum - 1];
3292 	int		port1 = udev->portnum;
3293 	int		status;
3294 	bool		really_suspend = true;
3295 
3296 	usb_lock_port(port_dev);
3297 
3298 	/* enable remote wakeup when appropriate; this lets the device
3299 	 * wake up the upstream hub (including maybe the root hub).
3300 	 *
3301 	 * NOTE:  OTG devices may issue remote wakeup (or SRP) even when
3302 	 * we don't explicitly enable it here.
3303 	 */
3304 	if (udev->do_remote_wakeup) {
3305 		status = usb_enable_remote_wakeup(udev);
3306 		if (status) {
3307 			dev_dbg(&udev->dev, "won't remote wakeup, status %d\n",
3308 					status);
3309 			/* bail if autosuspend is requested */
3310 			if (PMSG_IS_AUTO(msg))
3311 				goto err_wakeup;
3312 		}
3313 	}
3314 
3315 	/* disable USB2 hardware LPM */
3316 	usb_disable_usb2_hardware_lpm(udev);
3317 
3318 	if (usb_disable_ltm(udev)) {
3319 		dev_err(&udev->dev, "Failed to disable LTM before suspend\n");
3320 		status = -ENOMEM;
3321 		if (PMSG_IS_AUTO(msg))
3322 			goto err_ltm;
3323 	}
3324 
3325 	/* see 7.1.7.6 */
3326 	if (hub_is_superspeed(hub->hdev))
3327 		status = hub_set_port_link_state(hub, port1, USB_SS_PORT_LS_U3);
3328 
3329 	/*
3330 	 * For system suspend, we do not need to enable the suspend feature
3331 	 * on individual USB-2 ports.  The devices will automatically go
3332 	 * into suspend a few ms after the root hub stops sending packets.
3333 	 * The USB 2.0 spec calls this "global suspend".
3334 	 *
3335 	 * However, many USB hubs have a bug: They don't relay wakeup requests
3336 	 * from a downstream port if the port's suspend feature isn't on.
3337 	 * Therefore we will turn on the suspend feature if udev or any of its
3338 	 * descendants is enabled for remote wakeup.
3339 	 */
3340 	else if (PMSG_IS_AUTO(msg) || usb_wakeup_enabled_descendants(udev) > 0)
3341 		status = set_port_feature(hub->hdev, port1,
3342 				USB_PORT_FEAT_SUSPEND);
3343 	else {
3344 		really_suspend = false;
3345 		status = 0;
3346 	}
3347 	if (status) {
3348 		dev_dbg(&port_dev->dev, "can't suspend, status %d\n", status);
3349 
3350 		/* Try to enable USB3 LTM again */
3351 		usb_enable_ltm(udev);
3352  err_ltm:
3353 		/* Try to enable USB2 hardware LPM again */
3354 		usb_enable_usb2_hardware_lpm(udev);
3355 
3356 		if (udev->do_remote_wakeup)
3357 			(void) usb_disable_remote_wakeup(udev);
3358  err_wakeup:
3359 
3360 		/* System sleep transitions should never fail */
3361 		if (!PMSG_IS_AUTO(msg))
3362 			status = 0;
3363 	} else {
3364 		dev_dbg(&udev->dev, "usb %ssuspend, wakeup %d\n",
3365 				(PMSG_IS_AUTO(msg) ? "auto-" : ""),
3366 				udev->do_remote_wakeup);
3367 		if (really_suspend) {
3368 			udev->port_is_suspended = 1;
3369 
3370 			/* device has up to 10 msec to fully suspend */
3371 			msleep(10);
3372 		}
3373 		usb_set_device_state(udev, USB_STATE_SUSPENDED);
3374 	}
3375 
3376 	if (status == 0 && !udev->do_remote_wakeup && udev->persist_enabled
3377 			&& test_and_clear_bit(port1, hub->child_usage_bits))
3378 		pm_runtime_put_sync(&port_dev->dev);
3379 
3380 	usb_mark_last_busy(hub->hdev);
3381 
3382 	usb_unlock_port(port_dev);
3383 	return status;
3384 }
3385 
3386 /*
3387  * If the USB "suspend" state is in use (rather than "global suspend"),
3388  * many devices will be individually taken out of suspend state using
3389  * special "resume" signaling.  This routine kicks in shortly after
3390  * hardware resume signaling is finished, either because of selective
3391  * resume (by host) or remote wakeup (by device) ... now see what changed
3392  * in the tree that's rooted at this device.
3393  *
3394  * If @udev->reset_resume is set then the device is reset before the
3395  * status check is done.
3396  */
finish_port_resume(struct usb_device * udev)3397 static int finish_port_resume(struct usb_device *udev)
3398 {
3399 	int	status = 0;
3400 	u16	devstatus = 0;
3401 
3402 	/* caller owns the udev device lock */
3403 	dev_dbg(&udev->dev, "%s\n",
3404 		udev->reset_resume ? "finish reset-resume" : "finish resume");
3405 
3406 	/* usb ch9 identifies four variants of SUSPENDED, based on what
3407 	 * state the device resumes to.  Linux currently won't see the
3408 	 * first two on the host side; they'd be inside hub_port_init()
3409 	 * during many timeouts, but hub_wq can't suspend until later.
3410 	 */
3411 	usb_set_device_state(udev, udev->actconfig
3412 			? USB_STATE_CONFIGURED
3413 			: USB_STATE_ADDRESS);
3414 
3415 	/* 10.5.4.5 says not to reset a suspended port if the attached
3416 	 * device is enabled for remote wakeup.  Hence the reset
3417 	 * operation is carried out here, after the port has been
3418 	 * resumed.
3419 	 */
3420 	if (udev->reset_resume) {
3421 		/*
3422 		 * If the device morphs or switches modes when it is reset,
3423 		 * we don't want to perform a reset-resume.  We'll fail the
3424 		 * resume, which will cause a logical disconnect, and then
3425 		 * the device will be rediscovered.
3426 		 */
3427  retry_reset_resume:
3428 		if (udev->quirks & USB_QUIRK_RESET)
3429 			status = -ENODEV;
3430 		else
3431 			status = usb_reset_and_verify_device(udev);
3432 	}
3433 
3434 	/* 10.5.4.5 says be sure devices in the tree are still there.
3435 	 * For now let's assume the device didn't go crazy on resume,
3436 	 * and device drivers will know about any resume quirks.
3437 	 */
3438 	if (status == 0) {
3439 		devstatus = 0;
3440 		status = usb_get_std_status(udev, USB_RECIP_DEVICE, 0, &devstatus);
3441 
3442 		/* If a normal resume failed, try doing a reset-resume */
3443 		if (status && !udev->reset_resume && udev->persist_enabled) {
3444 			dev_dbg(&udev->dev, "retry with reset-resume\n");
3445 			udev->reset_resume = 1;
3446 			goto retry_reset_resume;
3447 		}
3448 	}
3449 
3450 	if (status) {
3451 		dev_dbg(&udev->dev, "gone after usb resume? status %d\n",
3452 				status);
3453 	/*
3454 	 * There are a few quirky devices which violate the standard
3455 	 * by claiming to have remote wakeup enabled after a reset,
3456 	 * which crash if the feature is cleared, hence check for
3457 	 * udev->reset_resume
3458 	 */
3459 	} else if (udev->actconfig && !udev->reset_resume) {
3460 		if (udev->speed < USB_SPEED_SUPER) {
3461 			if (devstatus & (1 << USB_DEVICE_REMOTE_WAKEUP))
3462 				status = usb_disable_remote_wakeup(udev);
3463 		} else {
3464 			status = usb_get_std_status(udev, USB_RECIP_INTERFACE, 0,
3465 					&devstatus);
3466 			if (!status && devstatus & (USB_INTRF_STAT_FUNC_RW_CAP
3467 					| USB_INTRF_STAT_FUNC_RW))
3468 				status = usb_disable_remote_wakeup(udev);
3469 		}
3470 
3471 		if (status)
3472 			dev_dbg(&udev->dev,
3473 				"disable remote wakeup, status %d\n",
3474 				status);
3475 		status = 0;
3476 	}
3477 	return status;
3478 }
3479 
3480 /*
3481  * There are some SS USB devices which take longer time for link training.
3482  * XHCI specs 4.19.4 says that when Link training is successful, port
3483  * sets CCS bit to 1. So if SW reads port status before successful link
3484  * training, then it will not find device to be present.
3485  * USB Analyzer log with such buggy devices show that in some cases
3486  * device switch on the RX termination after long delay of host enabling
3487  * the VBUS. In few other cases it has been seen that device fails to
3488  * negotiate link training in first attempt. It has been
3489  * reported till now that few devices take as long as 2000 ms to train
3490  * the link after host enabling its VBUS and termination. Following
3491  * routine implements a 2000 ms timeout for link training. If in a case
3492  * link trains before timeout, loop will exit earlier.
3493  *
3494  * There are also some 2.0 hard drive based devices and 3.0 thumb
3495  * drives that, when plugged into a 2.0 only port, take a long
3496  * time to set CCS after VBUS enable.
3497  *
3498  * FIXME: If a device was connected before suspend, but was removed
3499  * while system was asleep, then the loop in the following routine will
3500  * only exit at timeout.
3501  *
3502  * This routine should only be called when persist is enabled.
3503  */
wait_for_connected(struct usb_device * udev,struct usb_hub * hub,int * port1,u16 * portchange,u16 * portstatus)3504 static int wait_for_connected(struct usb_device *udev,
3505 		struct usb_hub *hub, int *port1,
3506 		u16 *portchange, u16 *portstatus)
3507 {
3508 	int status = 0, delay_ms = 0;
3509 
3510 	while (delay_ms < 2000) {
3511 		if (status || *portstatus & USB_PORT_STAT_CONNECTION)
3512 			break;
3513 		if (!port_is_power_on(hub, *portstatus)) {
3514 			status = -ENODEV;
3515 			break;
3516 		}
3517 		msleep(20);
3518 		delay_ms += 20;
3519 		status = hub_port_status(hub, *port1, portstatus, portchange);
3520 	}
3521 	dev_dbg(&udev->dev, "Waited %dms for CONNECT\n", delay_ms);
3522 	return status;
3523 }
3524 
3525 /*
3526  * usb_port_resume - re-activate a suspended usb device's upstream port
3527  * @udev: device to re-activate, not a root hub
3528  * Context: must be able to sleep; device not locked; pm locks held
3529  *
3530  * This will re-activate the suspended device, increasing power usage
3531  * while letting drivers communicate again with its endpoints.
3532  * USB resume explicitly guarantees that the power session between
3533  * the host and the device is the same as it was when the device
3534  * suspended.
3535  *
3536  * If @udev->reset_resume is set then this routine won't check that the
3537  * port is still enabled.  Furthermore, finish_port_resume() above will
3538  * reset @udev.  The end result is that a broken power session can be
3539  * recovered and @udev will appear to persist across a loss of VBUS power.
3540  *
3541  * For example, if a host controller doesn't maintain VBUS suspend current
3542  * during a system sleep or is reset when the system wakes up, all the USB
3543  * power sessions below it will be broken.  This is especially troublesome
3544  * for mass-storage devices containing mounted filesystems, since the
3545  * device will appear to have disconnected and all the memory mappings
3546  * to it will be lost.  Using the USB_PERSIST facility, the device can be
3547  * made to appear as if it had not disconnected.
3548  *
3549  * This facility can be dangerous.  Although usb_reset_and_verify_device() makes
3550  * every effort to insure that the same device is present after the
3551  * reset as before, it cannot provide a 100% guarantee.  Furthermore it's
3552  * quite possible for a device to remain unaltered but its media to be
3553  * changed.  If the user replaces a flash memory card while the system is
3554  * asleep, he will have only himself to blame when the filesystem on the
3555  * new card is corrupted and the system crashes.
3556  *
3557  * Returns 0 on success, else negative errno.
3558  */
usb_port_resume(struct usb_device * udev,pm_message_t msg)3559 int usb_port_resume(struct usb_device *udev, pm_message_t msg)
3560 {
3561 	struct usb_hub	*hub = usb_hub_to_struct_hub(udev->parent);
3562 	struct usb_port *port_dev = hub->ports[udev->portnum  - 1];
3563 	int		port1 = udev->portnum;
3564 	int		status;
3565 	u16		portchange, portstatus;
3566 
3567 	if (!test_and_set_bit(port1, hub->child_usage_bits)) {
3568 		status = pm_runtime_resume_and_get(&port_dev->dev);
3569 		if (status < 0) {
3570 			dev_dbg(&udev->dev, "can't resume usb port, status %d\n",
3571 					status);
3572 			return status;
3573 		}
3574 	}
3575 
3576 	usb_lock_port(port_dev);
3577 
3578 	/* Skip the initial Clear-Suspend step for a remote wakeup */
3579 	status = hub_port_status(hub, port1, &portstatus, &portchange);
3580 	if (status == 0 && !port_is_suspended(hub, portstatus)) {
3581 		if (portchange & USB_PORT_STAT_C_SUSPEND)
3582 			pm_wakeup_event(&udev->dev, 0);
3583 		goto SuspendCleared;
3584 	}
3585 
3586 	/* see 7.1.7.7; affects power usage, but not budgeting */
3587 	if (hub_is_superspeed(hub->hdev))
3588 		status = hub_set_port_link_state(hub, port1, USB_SS_PORT_LS_U0);
3589 	else
3590 		status = usb_clear_port_feature(hub->hdev,
3591 				port1, USB_PORT_FEAT_SUSPEND);
3592 	if (status) {
3593 		dev_dbg(&port_dev->dev, "can't resume, status %d\n", status);
3594 	} else {
3595 		/* drive resume for USB_RESUME_TIMEOUT msec */
3596 		dev_dbg(&udev->dev, "usb %sresume\n",
3597 				(PMSG_IS_AUTO(msg) ? "auto-" : ""));
3598 		msleep(USB_RESUME_TIMEOUT);
3599 
3600 		/* Virtual root hubs can trigger on GET_PORT_STATUS to
3601 		 * stop resume signaling.  Then finish the resume
3602 		 * sequence.
3603 		 */
3604 		status = hub_port_status(hub, port1, &portstatus, &portchange);
3605 	}
3606 
3607  SuspendCleared:
3608 	if (status == 0) {
3609 		udev->port_is_suspended = 0;
3610 		if (hub_is_superspeed(hub->hdev)) {
3611 			if (portchange & USB_PORT_STAT_C_LINK_STATE)
3612 				usb_clear_port_feature(hub->hdev, port1,
3613 					USB_PORT_FEAT_C_PORT_LINK_STATE);
3614 		} else {
3615 			if (portchange & USB_PORT_STAT_C_SUSPEND)
3616 				usb_clear_port_feature(hub->hdev, port1,
3617 						USB_PORT_FEAT_C_SUSPEND);
3618 		}
3619 
3620 		/* TRSMRCY = 10 msec */
3621 		msleep(10);
3622 	}
3623 
3624 	if (udev->persist_enabled)
3625 		status = wait_for_connected(udev, hub, &port1, &portchange,
3626 				&portstatus);
3627 
3628 	status = check_port_resume_type(udev,
3629 			hub, port1, status, portchange, portstatus);
3630 	if (status == 0)
3631 		status = finish_port_resume(udev);
3632 	if (status < 0) {
3633 		dev_dbg(&udev->dev, "can't resume, status %d\n", status);
3634 		hub_port_logical_disconnect(hub, port1);
3635 	} else  {
3636 		/* Try to enable USB2 hardware LPM */
3637 		usb_enable_usb2_hardware_lpm(udev);
3638 
3639 		/* Try to enable USB3 LTM */
3640 		usb_enable_ltm(udev);
3641 	}
3642 
3643 	usb_unlock_port(port_dev);
3644 
3645 	return status;
3646 }
3647 
usb_remote_wakeup(struct usb_device * udev)3648 int usb_remote_wakeup(struct usb_device *udev)
3649 {
3650 	int	status = 0;
3651 
3652 	usb_lock_device(udev);
3653 	if (udev->state == USB_STATE_SUSPENDED) {
3654 		dev_dbg(&udev->dev, "usb %sresume\n", "wakeup-");
3655 		status = usb_autoresume_device(udev);
3656 		if (status == 0) {
3657 			/* Let the drivers do their thing, then... */
3658 			usb_autosuspend_device(udev);
3659 		}
3660 	}
3661 	usb_unlock_device(udev);
3662 	return status;
3663 }
3664 
3665 /* Returns 1 if there was a remote wakeup and a connect status change. */
hub_handle_remote_wakeup(struct usb_hub * hub,unsigned int port,u16 portstatus,u16 portchange)3666 static int hub_handle_remote_wakeup(struct usb_hub *hub, unsigned int port,
3667 		u16 portstatus, u16 portchange)
3668 		__must_hold(&port_dev->status_lock)
3669 {
3670 	struct usb_port *port_dev = hub->ports[port - 1];
3671 	struct usb_device *hdev;
3672 	struct usb_device *udev;
3673 	int connect_change = 0;
3674 	u16 link_state;
3675 	int ret;
3676 
3677 	hdev = hub->hdev;
3678 	udev = port_dev->child;
3679 	if (!hub_is_superspeed(hdev)) {
3680 		if (!(portchange & USB_PORT_STAT_C_SUSPEND))
3681 			return 0;
3682 		usb_clear_port_feature(hdev, port, USB_PORT_FEAT_C_SUSPEND);
3683 	} else {
3684 		link_state = portstatus & USB_PORT_STAT_LINK_STATE;
3685 		if (!udev || udev->state != USB_STATE_SUSPENDED ||
3686 				(link_state != USB_SS_PORT_LS_U0 &&
3687 				 link_state != USB_SS_PORT_LS_U1 &&
3688 				 link_state != USB_SS_PORT_LS_U2))
3689 			return 0;
3690 	}
3691 
3692 	if (udev) {
3693 		/* TRSMRCY = 10 msec */
3694 		msleep(10);
3695 
3696 		usb_unlock_port(port_dev);
3697 		ret = usb_remote_wakeup(udev);
3698 		usb_lock_port(port_dev);
3699 		if (ret < 0)
3700 			connect_change = 1;
3701 	} else {
3702 		ret = -ENODEV;
3703 		hub_port_disable(hub, port, 1);
3704 	}
3705 	dev_dbg(&port_dev->dev, "resume, status %d\n", ret);
3706 	return connect_change;
3707 }
3708 
check_ports_changed(struct usb_hub * hub)3709 static int check_ports_changed(struct usb_hub *hub)
3710 {
3711 	int port1;
3712 
3713 	for (port1 = 1; port1 <= hub->hdev->maxchild; ++port1) {
3714 		u16 portstatus, portchange;
3715 		int status;
3716 
3717 		status = hub_port_status(hub, port1, &portstatus, &portchange);
3718 		if (!status && portchange)
3719 			return 1;
3720 	}
3721 	return 0;
3722 }
3723 
hub_suspend(struct usb_interface * intf,pm_message_t msg)3724 static int hub_suspend(struct usb_interface *intf, pm_message_t msg)
3725 {
3726 	struct usb_hub		*hub = usb_get_intfdata(intf);
3727 	struct usb_device	*hdev = hub->hdev;
3728 	unsigned		port1;
3729 
3730 	/*
3731 	 * Warn if children aren't already suspended.
3732 	 * Also, add up the number of wakeup-enabled descendants.
3733 	 */
3734 	hub->wakeup_enabled_descendants = 0;
3735 	for (port1 = 1; port1 <= hdev->maxchild; port1++) {
3736 		struct usb_port *port_dev = hub->ports[port1 - 1];
3737 		struct usb_device *udev = port_dev->child;
3738 
3739 		if (udev && udev->can_submit) {
3740 			dev_warn(&port_dev->dev, "device %s not suspended yet\n",
3741 					dev_name(&udev->dev));
3742 			if (PMSG_IS_AUTO(msg))
3743 				return -EBUSY;
3744 		}
3745 		if (udev)
3746 			hub->wakeup_enabled_descendants +=
3747 					usb_wakeup_enabled_descendants(udev);
3748 	}
3749 
3750 	if (hdev->do_remote_wakeup && hub->quirk_check_port_auto_suspend) {
3751 		/* check if there are changes pending on hub ports */
3752 		if (check_ports_changed(hub)) {
3753 			if (PMSG_IS_AUTO(msg))
3754 				return -EBUSY;
3755 			pm_wakeup_event(&hdev->dev, 2000);
3756 		}
3757 	}
3758 
3759 	if (hub_is_superspeed(hdev) && hdev->do_remote_wakeup) {
3760 		/* Enable hub to send remote wakeup for all ports. */
3761 		for (port1 = 1; port1 <= hdev->maxchild; port1++) {
3762 			set_port_feature(hdev,
3763 					 port1 |
3764 					 USB_PORT_FEAT_REMOTE_WAKE_CONNECT |
3765 					 USB_PORT_FEAT_REMOTE_WAKE_DISCONNECT |
3766 					 USB_PORT_FEAT_REMOTE_WAKE_OVER_CURRENT,
3767 					 USB_PORT_FEAT_REMOTE_WAKE_MASK);
3768 		}
3769 	}
3770 
3771 	dev_dbg(&intf->dev, "%s\n", __func__);
3772 
3773 	/* stop hub_wq and related activity */
3774 	hub_quiesce(hub, HUB_SUSPEND);
3775 	return 0;
3776 }
3777 
3778 /* Report wakeup requests from the ports of a resuming root hub */
report_wakeup_requests(struct usb_hub * hub)3779 static void report_wakeup_requests(struct usb_hub *hub)
3780 {
3781 	struct usb_device	*hdev = hub->hdev;
3782 	struct usb_device	*udev;
3783 	struct usb_hcd		*hcd;
3784 	unsigned long		resuming_ports;
3785 	int			i;
3786 
3787 	if (hdev->parent)
3788 		return;		/* Not a root hub */
3789 
3790 	hcd = bus_to_hcd(hdev->bus);
3791 	if (hcd->driver->get_resuming_ports) {
3792 
3793 		/*
3794 		 * The get_resuming_ports() method returns a bitmap (origin 0)
3795 		 * of ports which have started wakeup signaling but have not
3796 		 * yet finished resuming.  During system resume we will
3797 		 * resume all the enabled ports, regardless of any wakeup
3798 		 * signals, which means the wakeup requests would be lost.
3799 		 * To prevent this, report them to the PM core here.
3800 		 */
3801 		resuming_ports = hcd->driver->get_resuming_ports(hcd);
3802 		for (i = 0; i < hdev->maxchild; ++i) {
3803 			if (test_bit(i, &resuming_ports)) {
3804 				udev = hub->ports[i]->child;
3805 				if (udev)
3806 					pm_wakeup_event(&udev->dev, 0);
3807 			}
3808 		}
3809 	}
3810 }
3811 
hub_resume(struct usb_interface * intf)3812 static int hub_resume(struct usb_interface *intf)
3813 {
3814 	struct usb_hub *hub = usb_get_intfdata(intf);
3815 
3816 	dev_dbg(&intf->dev, "%s\n", __func__);
3817 	hub_activate(hub, HUB_RESUME);
3818 
3819 	/*
3820 	 * This should be called only for system resume, not runtime resume.
3821 	 * We can't tell the difference here, so some wakeup requests will be
3822 	 * reported at the wrong time or more than once.  This shouldn't
3823 	 * matter much, so long as they do get reported.
3824 	 */
3825 	report_wakeup_requests(hub);
3826 	return 0;
3827 }
3828 
hub_reset_resume(struct usb_interface * intf)3829 static int hub_reset_resume(struct usb_interface *intf)
3830 {
3831 	struct usb_hub *hub = usb_get_intfdata(intf);
3832 
3833 	dev_dbg(&intf->dev, "%s\n", __func__);
3834 	hub_activate(hub, HUB_RESET_RESUME);
3835 	return 0;
3836 }
3837 
3838 /**
3839  * usb_root_hub_lost_power - called by HCD if the root hub lost Vbus power
3840  * @rhdev: struct usb_device for the root hub
3841  *
3842  * The USB host controller driver calls this function when its root hub
3843  * is resumed and Vbus power has been interrupted or the controller
3844  * has been reset.  The routine marks @rhdev as having lost power.
3845  * When the hub driver is resumed it will take notice and carry out
3846  * power-session recovery for all the "USB-PERSIST"-enabled child devices;
3847  * the others will be disconnected.
3848  */
usb_root_hub_lost_power(struct usb_device * rhdev)3849 void usb_root_hub_lost_power(struct usb_device *rhdev)
3850 {
3851 	dev_notice(&rhdev->dev, "root hub lost power or was reset\n");
3852 	rhdev->reset_resume = 1;
3853 }
3854 EXPORT_SYMBOL_GPL(usb_root_hub_lost_power);
3855 
3856 static const char * const usb3_lpm_names[]  = {
3857 	"U0",
3858 	"U1",
3859 	"U2",
3860 	"U3",
3861 };
3862 
3863 /*
3864  * Send a Set SEL control transfer to the device, prior to enabling
3865  * device-initiated U1 or U2.  This lets the device know the exit latencies from
3866  * the time the device initiates a U1 or U2 exit, to the time it will receive a
3867  * packet from the host.
3868  *
3869  * This function will fail if the SEL or PEL values for udev are greater than
3870  * the maximum allowed values for the link state to be enabled.
3871  */
usb_req_set_sel(struct usb_device * udev,enum usb3_link_state state)3872 static int usb_req_set_sel(struct usb_device *udev, enum usb3_link_state state)
3873 {
3874 	struct usb_set_sel_req *sel_values;
3875 	unsigned long long u1_sel;
3876 	unsigned long long u1_pel;
3877 	unsigned long long u2_sel;
3878 	unsigned long long u2_pel;
3879 	int ret;
3880 
3881 	if (udev->state != USB_STATE_CONFIGURED)
3882 		return 0;
3883 
3884 	/* Convert SEL and PEL stored in ns to us */
3885 	u1_sel = DIV_ROUND_UP(udev->u1_params.sel, 1000);
3886 	u1_pel = DIV_ROUND_UP(udev->u1_params.pel, 1000);
3887 	u2_sel = DIV_ROUND_UP(udev->u2_params.sel, 1000);
3888 	u2_pel = DIV_ROUND_UP(udev->u2_params.pel, 1000);
3889 
3890 	/*
3891 	 * Make sure that the calculated SEL and PEL values for the link
3892 	 * state we're enabling aren't bigger than the max SEL/PEL
3893 	 * value that will fit in the SET SEL control transfer.
3894 	 * Otherwise the device would get an incorrect idea of the exit
3895 	 * latency for the link state, and could start a device-initiated
3896 	 * U1/U2 when the exit latencies are too high.
3897 	 */
3898 	if ((state == USB3_LPM_U1 &&
3899 				(u1_sel > USB3_LPM_MAX_U1_SEL_PEL ||
3900 				 u1_pel > USB3_LPM_MAX_U1_SEL_PEL)) ||
3901 			(state == USB3_LPM_U2 &&
3902 			 (u2_sel > USB3_LPM_MAX_U2_SEL_PEL ||
3903 			  u2_pel > USB3_LPM_MAX_U2_SEL_PEL))) {
3904 		dev_dbg(&udev->dev, "Device-initiated %s disabled due to long SEL %llu us or PEL %llu us\n",
3905 				usb3_lpm_names[state], u1_sel, u1_pel);
3906 		return -EINVAL;
3907 	}
3908 
3909 	/*
3910 	 * If we're enabling device-initiated LPM for one link state,
3911 	 * but the other link state has a too high SEL or PEL value,
3912 	 * just set those values to the max in the Set SEL request.
3913 	 */
3914 	if (u1_sel > USB3_LPM_MAX_U1_SEL_PEL)
3915 		u1_sel = USB3_LPM_MAX_U1_SEL_PEL;
3916 
3917 	if (u1_pel > USB3_LPM_MAX_U1_SEL_PEL)
3918 		u1_pel = USB3_LPM_MAX_U1_SEL_PEL;
3919 
3920 	if (u2_sel > USB3_LPM_MAX_U2_SEL_PEL)
3921 		u2_sel = USB3_LPM_MAX_U2_SEL_PEL;
3922 
3923 	if (u2_pel > USB3_LPM_MAX_U2_SEL_PEL)
3924 		u2_pel = USB3_LPM_MAX_U2_SEL_PEL;
3925 
3926 	/*
3927 	 * usb_enable_lpm() can be called as part of a failed device reset,
3928 	 * which may be initiated by an error path of a mass storage driver.
3929 	 * Therefore, use GFP_NOIO.
3930 	 */
3931 	sel_values = kmalloc(sizeof *(sel_values), GFP_NOIO);
3932 	if (!sel_values)
3933 		return -ENOMEM;
3934 
3935 	sel_values->u1_sel = u1_sel;
3936 	sel_values->u1_pel = u1_pel;
3937 	sel_values->u2_sel = cpu_to_le16(u2_sel);
3938 	sel_values->u2_pel = cpu_to_le16(u2_pel);
3939 
3940 	ret = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3941 			USB_REQ_SET_SEL,
3942 			USB_RECIP_DEVICE,
3943 			0, 0,
3944 			sel_values, sizeof *(sel_values),
3945 			USB_CTRL_SET_TIMEOUT);
3946 	kfree(sel_values);
3947 	return ret;
3948 }
3949 
3950 /*
3951  * Enable or disable device-initiated U1 or U2 transitions.
3952  */
usb_set_device_initiated_lpm(struct usb_device * udev,enum usb3_link_state state,bool enable)3953 static int usb_set_device_initiated_lpm(struct usb_device *udev,
3954 		enum usb3_link_state state, bool enable)
3955 {
3956 	int ret;
3957 	int feature;
3958 
3959 	switch (state) {
3960 	case USB3_LPM_U1:
3961 		feature = USB_DEVICE_U1_ENABLE;
3962 		break;
3963 	case USB3_LPM_U2:
3964 		feature = USB_DEVICE_U2_ENABLE;
3965 		break;
3966 	default:
3967 		dev_warn(&udev->dev, "%s: Can't %s non-U1 or U2 state.\n",
3968 				__func__, enable ? "enable" : "disable");
3969 		return -EINVAL;
3970 	}
3971 
3972 	if (udev->state != USB_STATE_CONFIGURED) {
3973 		dev_dbg(&udev->dev, "%s: Can't %s %s state "
3974 				"for unconfigured device.\n",
3975 				__func__, enable ? "enable" : "disable",
3976 				usb3_lpm_names[state]);
3977 		return 0;
3978 	}
3979 
3980 	if (enable) {
3981 		/*
3982 		 * Now send the control transfer to enable device-initiated LPM
3983 		 * for either U1 or U2.
3984 		 */
3985 		ret = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3986 				USB_REQ_SET_FEATURE,
3987 				USB_RECIP_DEVICE,
3988 				feature,
3989 				0, NULL, 0,
3990 				USB_CTRL_SET_TIMEOUT);
3991 	} else {
3992 		ret = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3993 				USB_REQ_CLEAR_FEATURE,
3994 				USB_RECIP_DEVICE,
3995 				feature,
3996 				0, NULL, 0,
3997 				USB_CTRL_SET_TIMEOUT);
3998 	}
3999 	if (ret < 0) {
4000 		dev_warn(&udev->dev, "%s of device-initiated %s failed.\n",
4001 				enable ? "Enable" : "Disable",
4002 				usb3_lpm_names[state]);
4003 		return -EBUSY;
4004 	}
4005 	return 0;
4006 }
4007 
usb_set_lpm_timeout(struct usb_device * udev,enum usb3_link_state state,int timeout)4008 static int usb_set_lpm_timeout(struct usb_device *udev,
4009 		enum usb3_link_state state, int timeout)
4010 {
4011 	int ret;
4012 	int feature;
4013 
4014 	switch (state) {
4015 	case USB3_LPM_U1:
4016 		feature = USB_PORT_FEAT_U1_TIMEOUT;
4017 		break;
4018 	case USB3_LPM_U2:
4019 		feature = USB_PORT_FEAT_U2_TIMEOUT;
4020 		break;
4021 	default:
4022 		dev_warn(&udev->dev, "%s: Can't set timeout for non-U1 or U2 state.\n",
4023 				__func__);
4024 		return -EINVAL;
4025 	}
4026 
4027 	if (state == USB3_LPM_U1 && timeout > USB3_LPM_U1_MAX_TIMEOUT &&
4028 			timeout != USB3_LPM_DEVICE_INITIATED) {
4029 		dev_warn(&udev->dev, "Failed to set %s timeout to 0x%x, "
4030 				"which is a reserved value.\n",
4031 				usb3_lpm_names[state], timeout);
4032 		return -EINVAL;
4033 	}
4034 
4035 	ret = set_port_feature(udev->parent,
4036 			USB_PORT_LPM_TIMEOUT(timeout) | udev->portnum,
4037 			feature);
4038 	if (ret < 0) {
4039 		dev_warn(&udev->dev, "Failed to set %s timeout to 0x%x,"
4040 				"error code %i\n", usb3_lpm_names[state],
4041 				timeout, ret);
4042 		return -EBUSY;
4043 	}
4044 	if (state == USB3_LPM_U1)
4045 		udev->u1_params.timeout = timeout;
4046 	else
4047 		udev->u2_params.timeout = timeout;
4048 	return 0;
4049 }
4050 
4051 /*
4052  * Don't allow device intiated U1/U2 if the system exit latency + one bus
4053  * interval is greater than the minimum service interval of any active
4054  * periodic endpoint. See USB 3.2 section 9.4.9
4055  */
usb_device_may_initiate_lpm(struct usb_device * udev,enum usb3_link_state state)4056 static bool usb_device_may_initiate_lpm(struct usb_device *udev,
4057 					enum usb3_link_state state)
4058 {
4059 	unsigned int sel;		/* us */
4060 	int i, j;
4061 
4062 	if (state == USB3_LPM_U1)
4063 		sel = DIV_ROUND_UP(udev->u1_params.sel, 1000);
4064 	else if (state == USB3_LPM_U2)
4065 		sel = DIV_ROUND_UP(udev->u2_params.sel, 1000);
4066 	else
4067 		return false;
4068 
4069 	for (i = 0; i < udev->actconfig->desc.bNumInterfaces; i++) {
4070 		struct usb_interface *intf;
4071 		struct usb_endpoint_descriptor *desc;
4072 		unsigned int interval;
4073 
4074 		intf = udev->actconfig->interface[i];
4075 		if (!intf)
4076 			continue;
4077 
4078 		for (j = 0; j < intf->cur_altsetting->desc.bNumEndpoints; j++) {
4079 			desc = &intf->cur_altsetting->endpoint[j].desc;
4080 
4081 			if (usb_endpoint_xfer_int(desc) ||
4082 			    usb_endpoint_xfer_isoc(desc)) {
4083 				interval = (1 << (desc->bInterval - 1)) * 125;
4084 				if (sel + 125 > interval)
4085 					return false;
4086 			}
4087 		}
4088 	}
4089 	return true;
4090 }
4091 
4092 /*
4093  * Enable the hub-initiated U1/U2 idle timeouts, and enable device-initiated
4094  * U1/U2 entry.
4095  *
4096  * We will attempt to enable U1 or U2, but there are no guarantees that the
4097  * control transfers to set the hub timeout or enable device-initiated U1/U2
4098  * will be successful.
4099  *
4100  * If the control transfer to enable device-initiated U1/U2 entry fails, then
4101  * hub-initiated U1/U2 will be disabled.
4102  *
4103  * If we cannot set the parent hub U1/U2 timeout, we attempt to let the xHCI
4104  * driver know about it.  If that call fails, it should be harmless, and just
4105  * take up more slightly more bus bandwidth for unnecessary U1/U2 exit latency.
4106  */
usb_enable_link_state(struct usb_hcd * hcd,struct usb_device * udev,enum usb3_link_state state)4107 static void usb_enable_link_state(struct usb_hcd *hcd, struct usb_device *udev,
4108 		enum usb3_link_state state)
4109 {
4110 	int timeout, ret;
4111 	__u8 u1_mel = udev->bos->ss_cap->bU1devExitLat;
4112 	__le16 u2_mel = udev->bos->ss_cap->bU2DevExitLat;
4113 
4114 	/* If the device says it doesn't have *any* exit latency to come out of
4115 	 * U1 or U2, it's probably lying.  Assume it doesn't implement that link
4116 	 * state.
4117 	 */
4118 	if ((state == USB3_LPM_U1 && u1_mel == 0) ||
4119 			(state == USB3_LPM_U2 && u2_mel == 0))
4120 		return;
4121 
4122 	/*
4123 	 * First, let the device know about the exit latencies
4124 	 * associated with the link state we're about to enable.
4125 	 */
4126 	ret = usb_req_set_sel(udev, state);
4127 	if (ret < 0) {
4128 		dev_warn(&udev->dev, "Set SEL for device-initiated %s failed.\n",
4129 				usb3_lpm_names[state]);
4130 		return;
4131 	}
4132 
4133 	/* We allow the host controller to set the U1/U2 timeout internally
4134 	 * first, so that it can change its schedule to account for the
4135 	 * additional latency to send data to a device in a lower power
4136 	 * link state.
4137 	 */
4138 	timeout = hcd->driver->enable_usb3_lpm_timeout(hcd, udev, state);
4139 
4140 	/* xHCI host controller doesn't want to enable this LPM state. */
4141 	if (timeout == 0)
4142 		return;
4143 
4144 	if (timeout < 0) {
4145 		dev_warn(&udev->dev, "Could not enable %s link state, "
4146 				"xHCI error %i.\n", usb3_lpm_names[state],
4147 				timeout);
4148 		return;
4149 	}
4150 
4151 	if (usb_set_lpm_timeout(udev, state, timeout)) {
4152 		/* If we can't set the parent hub U1/U2 timeout,
4153 		 * device-initiated LPM won't be allowed either, so let the xHCI
4154 		 * host know that this link state won't be enabled.
4155 		 */
4156 		hcd->driver->disable_usb3_lpm_timeout(hcd, udev, state);
4157 		return;
4158 	}
4159 
4160 	/* Only a configured device will accept the Set Feature
4161 	 * U1/U2_ENABLE
4162 	 */
4163 	if (udev->actconfig &&
4164 	    usb_device_may_initiate_lpm(udev, state)) {
4165 		if (usb_set_device_initiated_lpm(udev, state, true)) {
4166 			/*
4167 			 * Request to enable device initiated U1/U2 failed,
4168 			 * better to turn off lpm in this case.
4169 			 */
4170 			usb_set_lpm_timeout(udev, state, 0);
4171 			hcd->driver->disable_usb3_lpm_timeout(hcd, udev, state);
4172 			return;
4173 		}
4174 	}
4175 
4176 	if (state == USB3_LPM_U1)
4177 		udev->usb3_lpm_u1_enabled = 1;
4178 	else if (state == USB3_LPM_U2)
4179 		udev->usb3_lpm_u2_enabled = 1;
4180 }
4181 /*
4182  * Disable the hub-initiated U1/U2 idle timeouts, and disable device-initiated
4183  * U1/U2 entry.
4184  *
4185  * If this function returns -EBUSY, the parent hub will still allow U1/U2 entry.
4186  * If zero is returned, the parent will not allow the link to go into U1/U2.
4187  *
4188  * If zero is returned, device-initiated U1/U2 entry may still be enabled, but
4189  * it won't have an effect on the bus link state because the parent hub will
4190  * still disallow device-initiated U1/U2 entry.
4191  *
4192  * If zero is returned, the xHCI host controller may still think U1/U2 entry is
4193  * possible.  The result will be slightly more bus bandwidth will be taken up
4194  * (to account for U1/U2 exit latency), but it should be harmless.
4195  */
usb_disable_link_state(struct usb_hcd * hcd,struct usb_device * udev,enum usb3_link_state state)4196 static int usb_disable_link_state(struct usb_hcd *hcd, struct usb_device *udev,
4197 		enum usb3_link_state state)
4198 {
4199 	switch (state) {
4200 	case USB3_LPM_U1:
4201 	case USB3_LPM_U2:
4202 		break;
4203 	default:
4204 		dev_warn(&udev->dev, "%s: Can't disable non-U1 or U2 state.\n",
4205 				__func__);
4206 		return -EINVAL;
4207 	}
4208 
4209 	if (usb_set_lpm_timeout(udev, state, 0))
4210 		return -EBUSY;
4211 
4212 	usb_set_device_initiated_lpm(udev, state, false);
4213 
4214 	if (hcd->driver->disable_usb3_lpm_timeout(hcd, udev, state))
4215 		dev_warn(&udev->dev, "Could not disable xHCI %s timeout, "
4216 				"bus schedule bandwidth may be impacted.\n",
4217 				usb3_lpm_names[state]);
4218 
4219 	/* As soon as usb_set_lpm_timeout(0) return 0, hub initiated LPM
4220 	 * is disabled. Hub will disallows link to enter U1/U2 as well,
4221 	 * even device is initiating LPM. Hence LPM is disabled if hub LPM
4222 	 * timeout set to 0, no matter device-initiated LPM is disabled or
4223 	 * not.
4224 	 */
4225 	if (state == USB3_LPM_U1)
4226 		udev->usb3_lpm_u1_enabled = 0;
4227 	else if (state == USB3_LPM_U2)
4228 		udev->usb3_lpm_u2_enabled = 0;
4229 
4230 	return 0;
4231 }
4232 
4233 /*
4234  * Disable hub-initiated and device-initiated U1 and U2 entry.
4235  * Caller must own the bandwidth_mutex.
4236  *
4237  * This will call usb_enable_lpm() on failure, which will decrement
4238  * lpm_disable_count, and will re-enable LPM if lpm_disable_count reaches zero.
4239  */
usb_disable_lpm(struct usb_device * udev)4240 int usb_disable_lpm(struct usb_device *udev)
4241 {
4242 	struct usb_hcd *hcd;
4243 
4244 	if (!udev || !udev->parent ||
4245 			udev->speed < USB_SPEED_SUPER ||
4246 			!udev->lpm_capable ||
4247 			udev->state < USB_STATE_CONFIGURED)
4248 		return 0;
4249 
4250 	hcd = bus_to_hcd(udev->bus);
4251 	if (!hcd || !hcd->driver->disable_usb3_lpm_timeout)
4252 		return 0;
4253 
4254 	udev->lpm_disable_count++;
4255 	if ((udev->u1_params.timeout == 0 && udev->u2_params.timeout == 0))
4256 		return 0;
4257 
4258 	/* If LPM is enabled, attempt to disable it. */
4259 	if (usb_disable_link_state(hcd, udev, USB3_LPM_U1))
4260 		goto enable_lpm;
4261 	if (usb_disable_link_state(hcd, udev, USB3_LPM_U2))
4262 		goto enable_lpm;
4263 
4264 	return 0;
4265 
4266 enable_lpm:
4267 	usb_enable_lpm(udev);
4268 	return -EBUSY;
4269 }
4270 EXPORT_SYMBOL_GPL(usb_disable_lpm);
4271 
4272 /* Grab the bandwidth_mutex before calling usb_disable_lpm() */
usb_unlocked_disable_lpm(struct usb_device * udev)4273 int usb_unlocked_disable_lpm(struct usb_device *udev)
4274 {
4275 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
4276 	int ret;
4277 
4278 	if (!hcd)
4279 		return -EINVAL;
4280 
4281 	mutex_lock(hcd->bandwidth_mutex);
4282 	ret = usb_disable_lpm(udev);
4283 	mutex_unlock(hcd->bandwidth_mutex);
4284 
4285 	return ret;
4286 }
4287 EXPORT_SYMBOL_GPL(usb_unlocked_disable_lpm);
4288 
4289 /*
4290  * Attempt to enable device-initiated and hub-initiated U1 and U2 entry.  The
4291  * xHCI host policy may prevent U1 or U2 from being enabled.
4292  *
4293  * Other callers may have disabled link PM, so U1 and U2 entry will be disabled
4294  * until the lpm_disable_count drops to zero.  Caller must own the
4295  * bandwidth_mutex.
4296  */
usb_enable_lpm(struct usb_device * udev)4297 void usb_enable_lpm(struct usb_device *udev)
4298 {
4299 	struct usb_hcd *hcd;
4300 	struct usb_hub *hub;
4301 	struct usb_port *port_dev;
4302 
4303 	if (!udev || !udev->parent ||
4304 			udev->speed < USB_SPEED_SUPER ||
4305 			!udev->lpm_capable ||
4306 			udev->state < USB_STATE_CONFIGURED)
4307 		return;
4308 
4309 	udev->lpm_disable_count--;
4310 	hcd = bus_to_hcd(udev->bus);
4311 	/* Double check that we can both enable and disable LPM.
4312 	 * Device must be configured to accept set feature U1/U2 timeout.
4313 	 */
4314 	if (!hcd || !hcd->driver->enable_usb3_lpm_timeout ||
4315 			!hcd->driver->disable_usb3_lpm_timeout)
4316 		return;
4317 
4318 	if (udev->lpm_disable_count > 0)
4319 		return;
4320 
4321 	hub = usb_hub_to_struct_hub(udev->parent);
4322 	if (!hub)
4323 		return;
4324 
4325 	port_dev = hub->ports[udev->portnum - 1];
4326 
4327 	if (port_dev->usb3_lpm_u1_permit)
4328 		usb_enable_link_state(hcd, udev, USB3_LPM_U1);
4329 
4330 	if (port_dev->usb3_lpm_u2_permit)
4331 		usb_enable_link_state(hcd, udev, USB3_LPM_U2);
4332 }
4333 EXPORT_SYMBOL_GPL(usb_enable_lpm);
4334 
4335 /* Grab the bandwidth_mutex before calling usb_enable_lpm() */
usb_unlocked_enable_lpm(struct usb_device * udev)4336 void usb_unlocked_enable_lpm(struct usb_device *udev)
4337 {
4338 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
4339 
4340 	if (!hcd)
4341 		return;
4342 
4343 	mutex_lock(hcd->bandwidth_mutex);
4344 	usb_enable_lpm(udev);
4345 	mutex_unlock(hcd->bandwidth_mutex);
4346 }
4347 EXPORT_SYMBOL_GPL(usb_unlocked_enable_lpm);
4348 
4349 /* usb3 devices use U3 for disabled, make sure remote wakeup is disabled */
hub_usb3_port_prepare_disable(struct usb_hub * hub,struct usb_port * port_dev)4350 static void hub_usb3_port_prepare_disable(struct usb_hub *hub,
4351 					  struct usb_port *port_dev)
4352 {
4353 	struct usb_device *udev = port_dev->child;
4354 	int ret;
4355 
4356 	if (udev && udev->port_is_suspended && udev->do_remote_wakeup) {
4357 		ret = hub_set_port_link_state(hub, port_dev->portnum,
4358 					      USB_SS_PORT_LS_U0);
4359 		if (!ret) {
4360 			msleep(USB_RESUME_TIMEOUT);
4361 			ret = usb_disable_remote_wakeup(udev);
4362 		}
4363 		if (ret)
4364 			dev_warn(&udev->dev,
4365 				 "Port disable: can't disable remote wake\n");
4366 		udev->do_remote_wakeup = 0;
4367 	}
4368 }
4369 
4370 #else	/* CONFIG_PM */
4371 
4372 #define hub_suspend		NULL
4373 #define hub_resume		NULL
4374 #define hub_reset_resume	NULL
4375 
hub_usb3_port_prepare_disable(struct usb_hub * hub,struct usb_port * port_dev)4376 static inline void hub_usb3_port_prepare_disable(struct usb_hub *hub,
4377 						 struct usb_port *port_dev) { }
4378 
usb_disable_lpm(struct usb_device * udev)4379 int usb_disable_lpm(struct usb_device *udev)
4380 {
4381 	return 0;
4382 }
4383 EXPORT_SYMBOL_GPL(usb_disable_lpm);
4384 
usb_enable_lpm(struct usb_device * udev)4385 void usb_enable_lpm(struct usb_device *udev) { }
4386 EXPORT_SYMBOL_GPL(usb_enable_lpm);
4387 
usb_unlocked_disable_lpm(struct usb_device * udev)4388 int usb_unlocked_disable_lpm(struct usb_device *udev)
4389 {
4390 	return 0;
4391 }
4392 EXPORT_SYMBOL_GPL(usb_unlocked_disable_lpm);
4393 
usb_unlocked_enable_lpm(struct usb_device * udev)4394 void usb_unlocked_enable_lpm(struct usb_device *udev) { }
4395 EXPORT_SYMBOL_GPL(usb_unlocked_enable_lpm);
4396 
usb_disable_ltm(struct usb_device * udev)4397 int usb_disable_ltm(struct usb_device *udev)
4398 {
4399 	return 0;
4400 }
4401 EXPORT_SYMBOL_GPL(usb_disable_ltm);
4402 
usb_enable_ltm(struct usb_device * udev)4403 void usb_enable_ltm(struct usb_device *udev) { }
4404 EXPORT_SYMBOL_GPL(usb_enable_ltm);
4405 
hub_handle_remote_wakeup(struct usb_hub * hub,unsigned int port,u16 portstatus,u16 portchange)4406 static int hub_handle_remote_wakeup(struct usb_hub *hub, unsigned int port,
4407 		u16 portstatus, u16 portchange)
4408 {
4409 	return 0;
4410 }
4411 
4412 #endif	/* CONFIG_PM */
4413 
4414 /*
4415  * USB-3 does not have a similar link state as USB-2 that will avoid negotiating
4416  * a connection with a plugged-in cable but will signal the host when the cable
4417  * is unplugged. Disable remote wake and set link state to U3 for USB-3 devices
4418  */
hub_port_disable(struct usb_hub * hub,int port1,int set_state)4419 static int hub_port_disable(struct usb_hub *hub, int port1, int set_state)
4420 {
4421 	struct usb_port *port_dev = hub->ports[port1 - 1];
4422 	struct usb_device *hdev = hub->hdev;
4423 	int ret = 0;
4424 
4425 	if (!hub->error) {
4426 		if (hub_is_superspeed(hub->hdev)) {
4427 			hub_usb3_port_prepare_disable(hub, port_dev);
4428 			ret = hub_set_port_link_state(hub, port_dev->portnum,
4429 						      USB_SS_PORT_LS_U3);
4430 		} else {
4431 			ret = usb_clear_port_feature(hdev, port1,
4432 					USB_PORT_FEAT_ENABLE);
4433 		}
4434 	}
4435 	if (port_dev->child && set_state)
4436 		usb_set_device_state(port_dev->child, USB_STATE_NOTATTACHED);
4437 	if (ret && ret != -ENODEV)
4438 		dev_err(&port_dev->dev, "cannot disable (err = %d)\n", ret);
4439 	return ret;
4440 }
4441 
4442 /*
4443  * usb_port_disable - disable a usb device's upstream port
4444  * @udev: device to disable
4445  * Context: @udev locked, must be able to sleep.
4446  *
4447  * Disables a USB device that isn't in active use.
4448  */
usb_port_disable(struct usb_device * udev)4449 int usb_port_disable(struct usb_device *udev)
4450 {
4451 	struct usb_hub *hub = usb_hub_to_struct_hub(udev->parent);
4452 
4453 	return hub_port_disable(hub, udev->portnum, 0);
4454 }
4455 
4456 /* USB 2.0 spec, 7.1.7.3 / fig 7-29:
4457  *
4458  * Between connect detection and reset signaling there must be a delay
4459  * of 100ms at least for debounce and power-settling.  The corresponding
4460  * timer shall restart whenever the downstream port detects a disconnect.
4461  *
4462  * Apparently there are some bluetooth and irda-dongles and a number of
4463  * low-speed devices for which this debounce period may last over a second.
4464  * Not covered by the spec - but easy to deal with.
4465  *
4466  * This implementation uses a 1500ms total debounce timeout; if the
4467  * connection isn't stable by then it returns -ETIMEDOUT.  It checks
4468  * every 25ms for transient disconnects.  When the port status has been
4469  * unchanged for 100ms it returns the port status.
4470  */
hub_port_debounce(struct usb_hub * hub,int port1,bool must_be_connected)4471 int hub_port_debounce(struct usb_hub *hub, int port1, bool must_be_connected)
4472 {
4473 	int ret;
4474 	u16 portchange, portstatus;
4475 	unsigned connection = 0xffff;
4476 	int total_time, stable_time = 0;
4477 	struct usb_port *port_dev = hub->ports[port1 - 1];
4478 
4479 	for (total_time = 0; ; total_time += HUB_DEBOUNCE_STEP) {
4480 		ret = hub_port_status(hub, port1, &portstatus, &portchange);
4481 		if (ret < 0)
4482 			return ret;
4483 
4484 		if (!(portchange & USB_PORT_STAT_C_CONNECTION) &&
4485 		     (portstatus & USB_PORT_STAT_CONNECTION) == connection) {
4486 			if (!must_be_connected ||
4487 			     (connection == USB_PORT_STAT_CONNECTION))
4488 				stable_time += HUB_DEBOUNCE_STEP;
4489 			if (stable_time >= HUB_DEBOUNCE_STABLE)
4490 				break;
4491 		} else {
4492 			stable_time = 0;
4493 			connection = portstatus & USB_PORT_STAT_CONNECTION;
4494 		}
4495 
4496 		if (portchange & USB_PORT_STAT_C_CONNECTION) {
4497 			usb_clear_port_feature(hub->hdev, port1,
4498 					USB_PORT_FEAT_C_CONNECTION);
4499 		}
4500 
4501 		if (total_time >= HUB_DEBOUNCE_TIMEOUT)
4502 			break;
4503 		msleep(HUB_DEBOUNCE_STEP);
4504 	}
4505 
4506 	dev_dbg(&port_dev->dev, "debounce total %dms stable %dms status 0x%x\n",
4507 			total_time, stable_time, portstatus);
4508 
4509 	if (stable_time < HUB_DEBOUNCE_STABLE)
4510 		return -ETIMEDOUT;
4511 	return portstatus;
4512 }
4513 
usb_ep0_reinit(struct usb_device * udev)4514 void usb_ep0_reinit(struct usb_device *udev)
4515 {
4516 	usb_disable_endpoint(udev, 0 + USB_DIR_IN, true);
4517 	usb_disable_endpoint(udev, 0 + USB_DIR_OUT, true);
4518 	usb_enable_endpoint(udev, &udev->ep0, true);
4519 }
4520 EXPORT_SYMBOL_GPL(usb_ep0_reinit);
4521 
4522 #define usb_sndaddr0pipe()	(PIPE_CONTROL << 30)
4523 #define usb_rcvaddr0pipe()	((PIPE_CONTROL << 30) | USB_DIR_IN)
4524 
hub_set_address(struct usb_device * udev,int devnum)4525 static int hub_set_address(struct usb_device *udev, int devnum)
4526 {
4527 	int retval;
4528 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
4529 
4530 	/*
4531 	 * The host controller will choose the device address,
4532 	 * instead of the core having chosen it earlier
4533 	 */
4534 	if (!hcd->driver->address_device && devnum <= 1)
4535 		return -EINVAL;
4536 	if (udev->state == USB_STATE_ADDRESS)
4537 		return 0;
4538 	if (udev->state != USB_STATE_DEFAULT)
4539 		return -EINVAL;
4540 	if (hcd->driver->address_device)
4541 		retval = hcd->driver->address_device(hcd, udev);
4542 	else
4543 		retval = usb_control_msg(udev, usb_sndaddr0pipe(),
4544 				USB_REQ_SET_ADDRESS, 0, devnum, 0,
4545 				NULL, 0, USB_CTRL_SET_TIMEOUT);
4546 	if (retval == 0) {
4547 		update_devnum(udev, devnum);
4548 		/* Device now using proper address. */
4549 		usb_set_device_state(udev, USB_STATE_ADDRESS);
4550 		usb_ep0_reinit(udev);
4551 	}
4552 	return retval;
4553 }
4554 
4555 /*
4556  * There are reports of USB 3.0 devices that say they support USB 2.0 Link PM
4557  * when they're plugged into a USB 2.0 port, but they don't work when LPM is
4558  * enabled.
4559  *
4560  * Only enable USB 2.0 Link PM if the port is internal (hardwired), or the
4561  * device says it supports the new USB 2.0 Link PM errata by setting the BESL
4562  * support bit in the BOS descriptor.
4563  */
hub_set_initial_usb2_lpm_policy(struct usb_device * udev)4564 static void hub_set_initial_usb2_lpm_policy(struct usb_device *udev)
4565 {
4566 	struct usb_hub *hub = usb_hub_to_struct_hub(udev->parent);
4567 	int connect_type = USB_PORT_CONNECT_TYPE_UNKNOWN;
4568 
4569 	if (!udev->usb2_hw_lpm_capable || !udev->bos)
4570 		return;
4571 
4572 	if (hub)
4573 		connect_type = hub->ports[udev->portnum - 1]->connect_type;
4574 
4575 	if ((udev->bos->ext_cap->bmAttributes & cpu_to_le32(USB_BESL_SUPPORT)) ||
4576 			connect_type == USB_PORT_CONNECT_TYPE_HARD_WIRED) {
4577 		udev->usb2_hw_lpm_allowed = 1;
4578 		usb_enable_usb2_hardware_lpm(udev);
4579 	}
4580 }
4581 
hub_enable_device(struct usb_device * udev)4582 static int hub_enable_device(struct usb_device *udev)
4583 {
4584 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
4585 
4586 	if (!hcd->driver->enable_device)
4587 		return 0;
4588 	if (udev->state == USB_STATE_ADDRESS)
4589 		return 0;
4590 	if (udev->state != USB_STATE_DEFAULT)
4591 		return -EINVAL;
4592 
4593 	return hcd->driver->enable_device(hcd, udev);
4594 }
4595 
4596 /* Reset device, (re)assign address, get device descriptor.
4597  * Device connection must be stable, no more debouncing needed.
4598  * Returns device in USB_STATE_ADDRESS, except on error.
4599  *
4600  * If this is called for an already-existing device (as part of
4601  * usb_reset_and_verify_device), the caller must own the device lock and
4602  * the port lock.  For a newly detected device that is not accessible
4603  * through any global pointers, it's not necessary to lock the device,
4604  * but it is still necessary to lock the port.
4605  */
4606 static int
hub_port_init(struct usb_hub * hub,struct usb_device * udev,int port1,int retry_counter)4607 hub_port_init(struct usb_hub *hub, struct usb_device *udev, int port1,
4608 		int retry_counter)
4609 {
4610 	struct usb_device	*hdev = hub->hdev;
4611 	struct usb_hcd		*hcd = bus_to_hcd(hdev->bus);
4612 	struct usb_port		*port_dev = hub->ports[port1 - 1];
4613 	int			retries, operations, retval, i;
4614 	unsigned		delay = HUB_SHORT_RESET_TIME;
4615 	enum usb_device_speed	oldspeed = udev->speed;
4616 	const char		*speed;
4617 	int			devnum = udev->devnum;
4618 	const char		*driver_name;
4619 	bool			do_new_scheme;
4620 
4621 	/* root hub ports have a slightly longer reset period
4622 	 * (from USB 2.0 spec, section 7.1.7.5)
4623 	 */
4624 	if (!hdev->parent) {
4625 		delay = HUB_ROOT_RESET_TIME;
4626 		if (port1 == hdev->bus->otg_port)
4627 			hdev->bus->b_hnp_enable = 0;
4628 	}
4629 
4630 	/* Some low speed devices have problems with the quick delay, so */
4631 	/*  be a bit pessimistic with those devices. RHbug #23670 */
4632 	if (oldspeed == USB_SPEED_LOW)
4633 		delay = HUB_LONG_RESET_TIME;
4634 
4635 	/* Reset the device; full speed may morph to high speed */
4636 	/* FIXME a USB 2.0 device may morph into SuperSpeed on reset. */
4637 	retval = hub_port_reset(hub, port1, udev, delay, false);
4638 	if (retval < 0)		/* error or disconnect */
4639 		goto fail;
4640 	/* success, speed is known */
4641 
4642 	retval = -ENODEV;
4643 
4644 	/* Don't allow speed changes at reset, except usb 3.0 to faster */
4645 	if (oldspeed != USB_SPEED_UNKNOWN && oldspeed != udev->speed &&
4646 	    !(oldspeed == USB_SPEED_SUPER && udev->speed > oldspeed)) {
4647 		dev_dbg(&udev->dev, "device reset changed speed!\n");
4648 		goto fail;
4649 	}
4650 	oldspeed = udev->speed;
4651 
4652 	/* USB 2.0 section 5.5.3 talks about ep0 maxpacket ...
4653 	 * it's fixed size except for full speed devices.
4654 	 * For Wireless USB devices, ep0 max packet is always 512 (tho
4655 	 * reported as 0xff in the device descriptor). WUSB1.0[4.8.1].
4656 	 */
4657 	switch (udev->speed) {
4658 	case USB_SPEED_SUPER_PLUS:
4659 	case USB_SPEED_SUPER:
4660 	case USB_SPEED_WIRELESS:	/* fixed at 512 */
4661 		udev->ep0.desc.wMaxPacketSize = cpu_to_le16(512);
4662 		break;
4663 	case USB_SPEED_HIGH:		/* fixed at 64 */
4664 		udev->ep0.desc.wMaxPacketSize = cpu_to_le16(64);
4665 		break;
4666 	case USB_SPEED_FULL:		/* 8, 16, 32, or 64 */
4667 		/* to determine the ep0 maxpacket size, try to read
4668 		 * the device descriptor to get bMaxPacketSize0 and
4669 		 * then correct our initial guess.
4670 		 */
4671 		udev->ep0.desc.wMaxPacketSize = cpu_to_le16(64);
4672 		break;
4673 	case USB_SPEED_LOW:		/* fixed at 8 */
4674 		udev->ep0.desc.wMaxPacketSize = cpu_to_le16(8);
4675 		break;
4676 	default:
4677 		goto fail;
4678 	}
4679 
4680 	if (udev->speed == USB_SPEED_WIRELESS)
4681 		speed = "variable speed Wireless";
4682 	else
4683 		speed = usb_speed_string(udev->speed);
4684 
4685 	/*
4686 	 * The controller driver may be NULL if the controller device
4687 	 * is the middle device between platform device and roothub.
4688 	 * This middle device may not need a device driver due to
4689 	 * all hardware control can be at platform device driver, this
4690 	 * platform device is usually a dual-role USB controller device.
4691 	 */
4692 	if (udev->bus->controller->driver)
4693 		driver_name = udev->bus->controller->driver->name;
4694 	else
4695 		driver_name = udev->bus->sysdev->driver->name;
4696 
4697 	if (udev->speed < USB_SPEED_SUPER)
4698 		dev_info(&udev->dev,
4699 				"%s %s USB device number %d using %s\n",
4700 				(udev->config) ? "reset" : "new", speed,
4701 				devnum, driver_name);
4702 
4703 	/* Set up TT records, if needed  */
4704 	if (hdev->tt) {
4705 		udev->tt = hdev->tt;
4706 		udev->ttport = hdev->ttport;
4707 	} else if (udev->speed != USB_SPEED_HIGH
4708 			&& hdev->speed == USB_SPEED_HIGH) {
4709 		if (!hub->tt.hub) {
4710 			dev_err(&udev->dev, "parent hub has no TT\n");
4711 			retval = -EINVAL;
4712 			goto fail;
4713 		}
4714 		udev->tt = &hub->tt;
4715 		udev->ttport = port1;
4716 	}
4717 
4718 	/* Why interleave GET_DESCRIPTOR and SET_ADDRESS this way?
4719 	 * Because device hardware and firmware is sometimes buggy in
4720 	 * this area, and this is how Linux has done it for ages.
4721 	 * Change it cautiously.
4722 	 *
4723 	 * NOTE:  If use_new_scheme() is true we will start by issuing
4724 	 * a 64-byte GET_DESCRIPTOR request.  This is what Windows does,
4725 	 * so it may help with some non-standards-compliant devices.
4726 	 * Otherwise we start with SET_ADDRESS and then try to read the
4727 	 * first 8 bytes of the device descriptor to get the ep0 maxpacket
4728 	 * value.
4729 	 */
4730 	do_new_scheme = use_new_scheme(udev, retry_counter, port_dev);
4731 
4732 	for (retries = 0; retries < GET_DESCRIPTOR_TRIES; (++retries, msleep(100))) {
4733 		if (do_new_scheme) {
4734 			struct usb_device_descriptor *buf;
4735 			int r = 0;
4736 
4737 			retval = hub_enable_device(udev);
4738 			if (retval < 0) {
4739 				dev_err(&udev->dev,
4740 					"hub failed to enable device, error %d\n",
4741 					retval);
4742 				goto fail;
4743 			}
4744 
4745 #define GET_DESCRIPTOR_BUFSIZE	64
4746 			buf = kmalloc(GET_DESCRIPTOR_BUFSIZE, GFP_NOIO);
4747 			if (!buf) {
4748 				retval = -ENOMEM;
4749 				continue;
4750 			}
4751 
4752 			/* Retry on all errors; some devices are flakey.
4753 			 * 255 is for WUSB devices, we actually need to use
4754 			 * 512 (WUSB1.0[4.8.1]).
4755 			 */
4756 			for (operations = 0; operations < GET_MAXPACKET0_TRIES;
4757 					++operations) {
4758 				buf->bMaxPacketSize0 = 0;
4759 				r = usb_control_msg(udev, usb_rcvaddr0pipe(),
4760 					USB_REQ_GET_DESCRIPTOR, USB_DIR_IN,
4761 					USB_DT_DEVICE << 8, 0,
4762 					buf, GET_DESCRIPTOR_BUFSIZE,
4763 					initial_descriptor_timeout);
4764 				switch (buf->bMaxPacketSize0) {
4765 				case 8: case 16: case 32: case 64: case 255:
4766 					if (buf->bDescriptorType ==
4767 							USB_DT_DEVICE) {
4768 						r = 0;
4769 						break;
4770 					}
4771 					fallthrough;
4772 				default:
4773 					if (r == 0)
4774 						r = -EPROTO;
4775 					break;
4776 				}
4777 				/*
4778 				 * Some devices time out if they are powered on
4779 				 * when already connected. They need a second
4780 				 * reset. But only on the first attempt,
4781 				 * lest we get into a time out/reset loop
4782 				 */
4783 				if (r == 0 || (r == -ETIMEDOUT &&
4784 						retries == 0 &&
4785 						udev->speed > USB_SPEED_FULL))
4786 					break;
4787 			}
4788 			udev->descriptor.bMaxPacketSize0 =
4789 					buf->bMaxPacketSize0;
4790 			kfree(buf);
4791 
4792 			retval = hub_port_reset(hub, port1, udev, delay, false);
4793 			if (retval < 0)		/* error or disconnect */
4794 				goto fail;
4795 			if (oldspeed != udev->speed) {
4796 				dev_dbg(&udev->dev,
4797 					"device reset changed speed!\n");
4798 				retval = -ENODEV;
4799 				goto fail;
4800 			}
4801 			if (r) {
4802 				if (r != -ENODEV)
4803 					dev_err(&udev->dev, "device descriptor read/64, error %d\n",
4804 							r);
4805 				retval = -EMSGSIZE;
4806 				continue;
4807 			}
4808 #undef GET_DESCRIPTOR_BUFSIZE
4809 		}
4810 
4811 		/*
4812 		 * If device is WUSB, we already assigned an
4813 		 * unauthorized address in the Connect Ack sequence;
4814 		 * authorization will assign the final address.
4815 		 */
4816 		if (udev->wusb == 0) {
4817 			for (operations = 0; operations < SET_ADDRESS_TRIES; ++operations) {
4818 				retval = hub_set_address(udev, devnum);
4819 				if (retval >= 0)
4820 					break;
4821 				msleep(200);
4822 			}
4823 			if (retval < 0) {
4824 				if (retval != -ENODEV)
4825 					dev_err(&udev->dev, "device not accepting address %d, error %d\n",
4826 							devnum, retval);
4827 				goto fail;
4828 			}
4829 			if (udev->speed >= USB_SPEED_SUPER) {
4830 				devnum = udev->devnum;
4831 				dev_info(&udev->dev,
4832 						"%s SuperSpeed%s%s USB device number %d using %s\n",
4833 						(udev->config) ? "reset" : "new",
4834 					 (udev->speed == USB_SPEED_SUPER_PLUS) ?
4835 							"Plus Gen 2" : " Gen 1",
4836 					 (udev->rx_lanes == 2 && udev->tx_lanes == 2) ?
4837 							"x2" : "",
4838 					 devnum, driver_name);
4839 			}
4840 
4841 			/* cope with hardware quirkiness:
4842 			 *  - let SET_ADDRESS settle, some device hardware wants it
4843 			 *  - read ep0 maxpacket even for high and low speed,
4844 			 */
4845 			msleep(10);
4846 			if (do_new_scheme)
4847 				break;
4848 		}
4849 
4850 		retval = usb_get_device_descriptor(udev, 8);
4851 		if (retval < 8) {
4852 			if (retval != -ENODEV)
4853 				dev_err(&udev->dev,
4854 					"device descriptor read/8, error %d\n",
4855 					retval);
4856 			if (retval >= 0)
4857 				retval = -EMSGSIZE;
4858 		} else {
4859 			u32 delay;
4860 
4861 			retval = 0;
4862 
4863 			delay = udev->parent->hub_delay;
4864 			udev->hub_delay = min_t(u32, delay,
4865 						USB_TP_TRANSMISSION_DELAY_MAX);
4866 			retval = usb_set_isoch_delay(udev);
4867 			if (retval) {
4868 				dev_dbg(&udev->dev,
4869 					"Failed set isoch delay, error %d\n",
4870 					retval);
4871 				retval = 0;
4872 			}
4873 			break;
4874 		}
4875 	}
4876 	if (retval)
4877 		goto fail;
4878 
4879 	/*
4880 	 * Some superspeed devices have finished the link training process
4881 	 * and attached to a superspeed hub port, but the device descriptor
4882 	 * got from those devices show they aren't superspeed devices. Warm
4883 	 * reset the port attached by the devices can fix them.
4884 	 */
4885 	if ((udev->speed >= USB_SPEED_SUPER) &&
4886 			(le16_to_cpu(udev->descriptor.bcdUSB) < 0x0300)) {
4887 		dev_err(&udev->dev, "got a wrong device descriptor, "
4888 				"warm reset device\n");
4889 		hub_port_reset(hub, port1, udev,
4890 				HUB_BH_RESET_TIME, true);
4891 		retval = -EINVAL;
4892 		goto fail;
4893 	}
4894 
4895 	if (udev->descriptor.bMaxPacketSize0 == 0xff ||
4896 			udev->speed >= USB_SPEED_SUPER)
4897 		i = 512;
4898 	else
4899 		i = udev->descriptor.bMaxPacketSize0;
4900 	if (usb_endpoint_maxp(&udev->ep0.desc) != i) {
4901 		if (udev->speed == USB_SPEED_LOW ||
4902 				!(i == 8 || i == 16 || i == 32 || i == 64)) {
4903 			dev_err(&udev->dev, "Invalid ep0 maxpacket: %d\n", i);
4904 			retval = -EMSGSIZE;
4905 			goto fail;
4906 		}
4907 		if (udev->speed == USB_SPEED_FULL)
4908 			dev_dbg(&udev->dev, "ep0 maxpacket = %d\n", i);
4909 		else
4910 			dev_warn(&udev->dev, "Using ep0 maxpacket: %d\n", i);
4911 		udev->ep0.desc.wMaxPacketSize = cpu_to_le16(i);
4912 		usb_ep0_reinit(udev);
4913 	}
4914 
4915 	retval = usb_get_device_descriptor(udev, USB_DT_DEVICE_SIZE);
4916 	if (retval < (signed)sizeof(udev->descriptor)) {
4917 		if (retval != -ENODEV)
4918 			dev_err(&udev->dev, "device descriptor read/all, error %d\n",
4919 					retval);
4920 		if (retval >= 0)
4921 			retval = -ENOMSG;
4922 		goto fail;
4923 	}
4924 
4925 	usb_detect_quirks(udev);
4926 
4927 	if (udev->wusb == 0 && le16_to_cpu(udev->descriptor.bcdUSB) >= 0x0201) {
4928 		retval = usb_get_bos_descriptor(udev);
4929 		if (!retval) {
4930 			udev->lpm_capable = usb_device_supports_lpm(udev);
4931 			usb_set_lpm_parameters(udev);
4932 		}
4933 	}
4934 
4935 	retval = 0;
4936 	/* notify HCD that we have a device connected and addressed */
4937 	if (hcd->driver->update_device)
4938 		hcd->driver->update_device(hcd, udev);
4939 	hub_set_initial_usb2_lpm_policy(udev);
4940 fail:
4941 	if (retval) {
4942 		hub_port_disable(hub, port1, 0);
4943 		update_devnum(udev, devnum);	/* for disconnect processing */
4944 	}
4945 	return retval;
4946 }
4947 
4948 static void
check_highspeed(struct usb_hub * hub,struct usb_device * udev,int port1)4949 check_highspeed(struct usb_hub *hub, struct usb_device *udev, int port1)
4950 {
4951 	struct usb_qualifier_descriptor	*qual;
4952 	int				status;
4953 
4954 	if (udev->quirks & USB_QUIRK_DEVICE_QUALIFIER)
4955 		return;
4956 
4957 	qual = kmalloc(sizeof *qual, GFP_KERNEL);
4958 	if (qual == NULL)
4959 		return;
4960 
4961 	status = usb_get_descriptor(udev, USB_DT_DEVICE_QUALIFIER, 0,
4962 			qual, sizeof *qual);
4963 	if (status == sizeof *qual) {
4964 		dev_info(&udev->dev, "not running at top speed; "
4965 			"connect to a high speed hub\n");
4966 		/* hub LEDs are probably harder to miss than syslog */
4967 		if (hub->has_indicators) {
4968 			hub->indicator[port1-1] = INDICATOR_GREEN_BLINK;
4969 			queue_delayed_work(system_power_efficient_wq,
4970 					&hub->leds, 0);
4971 		}
4972 	}
4973 	kfree(qual);
4974 }
4975 
4976 static unsigned
hub_power_remaining(struct usb_hub * hub)4977 hub_power_remaining(struct usb_hub *hub)
4978 {
4979 	struct usb_device *hdev = hub->hdev;
4980 	int remaining;
4981 	int port1;
4982 
4983 	if (!hub->limited_power)
4984 		return 0;
4985 
4986 	remaining = hdev->bus_mA - hub->descriptor->bHubContrCurrent;
4987 	for (port1 = 1; port1 <= hdev->maxchild; ++port1) {
4988 		struct usb_port *port_dev = hub->ports[port1 - 1];
4989 		struct usb_device *udev = port_dev->child;
4990 		unsigned unit_load;
4991 		int delta;
4992 
4993 		if (!udev)
4994 			continue;
4995 		if (hub_is_superspeed(udev))
4996 			unit_load = 150;
4997 		else
4998 			unit_load = 100;
4999 
5000 		/*
5001 		 * Unconfigured devices may not use more than one unit load,
5002 		 * or 8mA for OTG ports
5003 		 */
5004 		if (udev->actconfig)
5005 			delta = usb_get_max_power(udev, udev->actconfig);
5006 		else if (port1 != udev->bus->otg_port || hdev->parent)
5007 			delta = unit_load;
5008 		else
5009 			delta = 8;
5010 		if (delta > hub->mA_per_port)
5011 			dev_warn(&port_dev->dev, "%dmA is over %umA budget!\n",
5012 					delta, hub->mA_per_port);
5013 		remaining -= delta;
5014 	}
5015 	if (remaining < 0) {
5016 		dev_warn(hub->intfdev, "%dmA over power budget!\n",
5017 			-remaining);
5018 		remaining = 0;
5019 	}
5020 	return remaining;
5021 }
5022 
5023 
descriptors_changed(struct usb_device * udev,struct usb_device_descriptor * old_device_descriptor,struct usb_host_bos * old_bos)5024 static int descriptors_changed(struct usb_device *udev,
5025 		struct usb_device_descriptor *old_device_descriptor,
5026 		struct usb_host_bos *old_bos)
5027 {
5028 	int		changed = 0;
5029 	unsigned	index;
5030 	unsigned	serial_len = 0;
5031 	unsigned	len;
5032 	unsigned	old_length;
5033 	int		length;
5034 	char		*buf;
5035 
5036 	if (memcmp(&udev->descriptor, old_device_descriptor,
5037 			sizeof(*old_device_descriptor)) != 0)
5038 		return 1;
5039 
5040 	if ((old_bos && !udev->bos) || (!old_bos && udev->bos))
5041 		return 1;
5042 	if (udev->bos) {
5043 		len = le16_to_cpu(udev->bos->desc->wTotalLength);
5044 		if (len != le16_to_cpu(old_bos->desc->wTotalLength))
5045 			return 1;
5046 		if (memcmp(udev->bos->desc, old_bos->desc, len))
5047 			return 1;
5048 	}
5049 
5050 	/* Since the idVendor, idProduct, and bcdDevice values in the
5051 	 * device descriptor haven't changed, we will assume the
5052 	 * Manufacturer and Product strings haven't changed either.
5053 	 * But the SerialNumber string could be different (e.g., a
5054 	 * different flash card of the same brand).
5055 	 */
5056 	if (udev->serial)
5057 		serial_len = strlen(udev->serial) + 1;
5058 
5059 	len = serial_len;
5060 	for (index = 0; index < udev->descriptor.bNumConfigurations; index++) {
5061 		old_length = le16_to_cpu(udev->config[index].desc.wTotalLength);
5062 		len = max(len, old_length);
5063 	}
5064 
5065 	buf = kmalloc(len, GFP_NOIO);
5066 	if (!buf)
5067 		/* assume the worst */
5068 		return 1;
5069 
5070 	for (index = 0; index < udev->descriptor.bNumConfigurations; index++) {
5071 		old_length = le16_to_cpu(udev->config[index].desc.wTotalLength);
5072 		length = usb_get_descriptor(udev, USB_DT_CONFIG, index, buf,
5073 				old_length);
5074 		if (length != old_length) {
5075 			dev_dbg(&udev->dev, "config index %d, error %d\n",
5076 					index, length);
5077 			changed = 1;
5078 			break;
5079 		}
5080 		if (memcmp(buf, udev->rawdescriptors[index], old_length)
5081 				!= 0) {
5082 			dev_dbg(&udev->dev, "config index %d changed (#%d)\n",
5083 				index,
5084 				((struct usb_config_descriptor *) buf)->
5085 					bConfigurationValue);
5086 			changed = 1;
5087 			break;
5088 		}
5089 	}
5090 
5091 	if (!changed && serial_len) {
5092 		length = usb_string(udev, udev->descriptor.iSerialNumber,
5093 				buf, serial_len);
5094 		if (length + 1 != serial_len) {
5095 			dev_dbg(&udev->dev, "serial string error %d\n",
5096 					length);
5097 			changed = 1;
5098 		} else if (memcmp(buf, udev->serial, length) != 0) {
5099 			dev_dbg(&udev->dev, "serial string changed\n");
5100 			changed = 1;
5101 		}
5102 	}
5103 
5104 	kfree(buf);
5105 	return changed;
5106 }
5107 
hub_port_connect(struct usb_hub * hub,int port1,u16 portstatus,u16 portchange)5108 static void hub_port_connect(struct usb_hub *hub, int port1, u16 portstatus,
5109 		u16 portchange)
5110 {
5111 	int status = -ENODEV;
5112 	int i;
5113 	unsigned unit_load;
5114 	struct usb_device *hdev = hub->hdev;
5115 	struct usb_hcd *hcd = bus_to_hcd(hdev->bus);
5116 	struct usb_port *port_dev = hub->ports[port1 - 1];
5117 	struct usb_device *udev = port_dev->child;
5118 	static int unreliable_port = -1;
5119 	bool retry_locked;
5120 
5121 	/* Disconnect any existing devices under this port */
5122 	if (udev) {
5123 		if (hcd->usb_phy && !hdev->parent)
5124 			usb_phy_notify_disconnect(hcd->usb_phy, udev->speed);
5125 		usb_disconnect(&port_dev->child);
5126 	}
5127 
5128 	/* We can forget about a "removed" device when there's a physical
5129 	 * disconnect or the connect status changes.
5130 	 */
5131 	if (!(portstatus & USB_PORT_STAT_CONNECTION) ||
5132 			(portchange & USB_PORT_STAT_C_CONNECTION))
5133 		clear_bit(port1, hub->removed_bits);
5134 
5135 	if (portchange & (USB_PORT_STAT_C_CONNECTION |
5136 				USB_PORT_STAT_C_ENABLE)) {
5137 		status = hub_port_debounce_be_stable(hub, port1);
5138 		if (status < 0) {
5139 			if (status != -ENODEV &&
5140 				port1 != unreliable_port &&
5141 				printk_ratelimit())
5142 				dev_err(&port_dev->dev, "connect-debounce failed\n");
5143 			portstatus &= ~USB_PORT_STAT_CONNECTION;
5144 			unreliable_port = port1;
5145 		} else {
5146 			portstatus = status;
5147 		}
5148 	}
5149 
5150 	/* Return now if debouncing failed or nothing is connected or
5151 	 * the device was "removed".
5152 	 */
5153 	if (!(portstatus & USB_PORT_STAT_CONNECTION) ||
5154 			test_bit(port1, hub->removed_bits)) {
5155 
5156 		/*
5157 		 * maybe switch power back on (e.g. root hub was reset)
5158 		 * but only if the port isn't owned by someone else.
5159 		 */
5160 		if (hub_is_port_power_switchable(hub)
5161 				&& !port_is_power_on(hub, portstatus)
5162 				&& !port_dev->port_owner)
5163 			set_port_feature(hdev, port1, USB_PORT_FEAT_POWER);
5164 
5165 		if (portstatus & USB_PORT_STAT_ENABLE)
5166 			goto done;
5167 		return;
5168 	}
5169 	if (hub_is_superspeed(hub->hdev))
5170 		unit_load = 150;
5171 	else
5172 		unit_load = 100;
5173 
5174 	status = 0;
5175 
5176 	for (i = 0; i < PORT_INIT_TRIES; i++) {
5177 		usb_lock_port(port_dev);
5178 		mutex_lock(hcd->address0_mutex);
5179 		retry_locked = true;
5180 		/* reallocate for each attempt, since references
5181 		 * to the previous one can escape in various ways
5182 		 */
5183 		udev = usb_alloc_dev(hdev, hdev->bus, port1);
5184 		if (!udev) {
5185 			dev_err(&port_dev->dev,
5186 					"couldn't allocate usb_device\n");
5187 			mutex_unlock(hcd->address0_mutex);
5188 			usb_unlock_port(port_dev);
5189 			goto done;
5190 		}
5191 
5192 		usb_set_device_state(udev, USB_STATE_POWERED);
5193 		udev->bus_mA = hub->mA_per_port;
5194 		udev->level = hdev->level + 1;
5195 		udev->wusb = hub_is_wusb(hub);
5196 
5197 		/* Devices connected to SuperSpeed hubs are USB 3.0 or later */
5198 		if (hub_is_superspeed(hub->hdev))
5199 			udev->speed = USB_SPEED_SUPER;
5200 		else
5201 			udev->speed = USB_SPEED_UNKNOWN;
5202 
5203 		choose_devnum(udev);
5204 		if (udev->devnum <= 0) {
5205 			status = -ENOTCONN;	/* Don't retry */
5206 			goto loop;
5207 		}
5208 
5209 		/* reset (non-USB 3.0 devices) and get descriptor */
5210 		status = hub_port_init(hub, udev, port1, i);
5211 		if (status < 0)
5212 			goto loop;
5213 
5214 		mutex_unlock(hcd->address0_mutex);
5215 		usb_unlock_port(port_dev);
5216 		retry_locked = false;
5217 
5218 		if (udev->quirks & USB_QUIRK_DELAY_INIT)
5219 			msleep(2000);
5220 
5221 		/* consecutive bus-powered hubs aren't reliable; they can
5222 		 * violate the voltage drop budget.  if the new child has
5223 		 * a "powered" LED, users should notice we didn't enable it
5224 		 * (without reading syslog), even without per-port LEDs
5225 		 * on the parent.
5226 		 */
5227 		if (udev->descriptor.bDeviceClass == USB_CLASS_HUB
5228 				&& udev->bus_mA <= unit_load) {
5229 			u16	devstat;
5230 
5231 			status = usb_get_std_status(udev, USB_RECIP_DEVICE, 0,
5232 					&devstat);
5233 			if (status) {
5234 				dev_dbg(&udev->dev, "get status %d ?\n", status);
5235 				goto loop_disable;
5236 			}
5237 			if ((devstat & (1 << USB_DEVICE_SELF_POWERED)) == 0) {
5238 				dev_err(&udev->dev,
5239 					"can't connect bus-powered hub "
5240 					"to this port\n");
5241 				if (hub->has_indicators) {
5242 					hub->indicator[port1-1] =
5243 						INDICATOR_AMBER_BLINK;
5244 					queue_delayed_work(
5245 						system_power_efficient_wq,
5246 						&hub->leds, 0);
5247 				}
5248 				status = -ENOTCONN;	/* Don't retry */
5249 				goto loop_disable;
5250 			}
5251 		}
5252 
5253 		/* check for devices running slower than they could */
5254 		if (le16_to_cpu(udev->descriptor.bcdUSB) >= 0x0200
5255 				&& udev->speed == USB_SPEED_FULL
5256 				&& highspeed_hubs != 0)
5257 			check_highspeed(hub, udev, port1);
5258 
5259 		/* Store the parent's children[] pointer.  At this point
5260 		 * udev becomes globally accessible, although presumably
5261 		 * no one will look at it until hdev is unlocked.
5262 		 */
5263 		status = 0;
5264 
5265 		mutex_lock(&usb_port_peer_mutex);
5266 
5267 		/* We mustn't add new devices if the parent hub has
5268 		 * been disconnected; we would race with the
5269 		 * recursively_mark_NOTATTACHED() routine.
5270 		 */
5271 		spin_lock_irq(&device_state_lock);
5272 		if (hdev->state == USB_STATE_NOTATTACHED)
5273 			status = -ENOTCONN;
5274 		else
5275 			port_dev->child = udev;
5276 		spin_unlock_irq(&device_state_lock);
5277 		mutex_unlock(&usb_port_peer_mutex);
5278 
5279 		/* Run it through the hoops (find a driver, etc) */
5280 		if (!status) {
5281 			status = usb_new_device(udev);
5282 			if (status) {
5283 				mutex_lock(&usb_port_peer_mutex);
5284 				spin_lock_irq(&device_state_lock);
5285 				port_dev->child = NULL;
5286 				spin_unlock_irq(&device_state_lock);
5287 				mutex_unlock(&usb_port_peer_mutex);
5288 			} else {
5289 				if (hcd->usb_phy && !hdev->parent)
5290 					usb_phy_notify_connect(hcd->usb_phy,
5291 							udev->speed);
5292 			}
5293 		}
5294 
5295 		if (status)
5296 			goto loop_disable;
5297 
5298 		status = hub_power_remaining(hub);
5299 		if (status)
5300 			dev_dbg(hub->intfdev, "%dmA power budget left\n", status);
5301 
5302 		return;
5303 
5304 loop_disable:
5305 		hub_port_disable(hub, port1, 1);
5306 loop:
5307 		usb_ep0_reinit(udev);
5308 		release_devnum(udev);
5309 		hub_free_dev(udev);
5310 		if (retry_locked) {
5311 			mutex_unlock(hcd->address0_mutex);
5312 			usb_unlock_port(port_dev);
5313 		}
5314 		usb_put_dev(udev);
5315 		if ((status == -ENOTCONN) || (status == -ENOTSUPP))
5316 			break;
5317 
5318 		/* When halfway through our retry count, power-cycle the port */
5319 		if (i == (PORT_INIT_TRIES - 1) / 2) {
5320 			dev_info(&port_dev->dev, "attempt power cycle\n");
5321 			usb_hub_set_port_power(hdev, hub, port1, false);
5322 			msleep(2 * hub_power_on_good_delay(hub));
5323 			usb_hub_set_port_power(hdev, hub, port1, true);
5324 			msleep(hub_power_on_good_delay(hub));
5325 		}
5326 	}
5327 	if (hub->hdev->parent ||
5328 			!hcd->driver->port_handed_over ||
5329 			!(hcd->driver->port_handed_over)(hcd, port1)) {
5330 		if (status != -ENOTCONN && status != -ENODEV)
5331 			dev_err(&port_dev->dev,
5332 					"unable to enumerate USB device\n");
5333 	}
5334 
5335 done:
5336 	hub_port_disable(hub, port1, 1);
5337 	if (hcd->driver->relinquish_port && !hub->hdev->parent) {
5338 		if ((status != -ENOTCONN && status != -ENODEV) ||
5339 		    (status == -ENOTCONN && of_machine_is_compatible("rockchip,rk3288")))
5340 			hcd->driver->relinquish_port(hcd, port1);
5341 	}
5342 }
5343 
5344 /* Handle physical or logical connection change events.
5345  * This routine is called when:
5346  *	a port connection-change occurs;
5347  *	a port enable-change occurs (often caused by EMI);
5348  *	usb_reset_and_verify_device() encounters changed descriptors (as from
5349  *		a firmware download)
5350  * caller already locked the hub
5351  */
hub_port_connect_change(struct usb_hub * hub,int port1,u16 portstatus,u16 portchange)5352 static void hub_port_connect_change(struct usb_hub *hub, int port1,
5353 					u16 portstatus, u16 portchange)
5354 		__must_hold(&port_dev->status_lock)
5355 {
5356 	struct usb_port *port_dev = hub->ports[port1 - 1];
5357 	struct usb_device *udev = port_dev->child;
5358 	struct usb_device_descriptor descriptor;
5359 	int status = -ENODEV;
5360 	int retval;
5361 
5362 	dev_dbg(&port_dev->dev, "status %04x, change %04x, %s\n", portstatus,
5363 			portchange, portspeed(hub, portstatus));
5364 
5365 	if (hub->has_indicators) {
5366 		set_port_led(hub, port1, HUB_LED_AUTO);
5367 		hub->indicator[port1-1] = INDICATOR_AUTO;
5368 	}
5369 
5370 #ifdef	CONFIG_USB_OTG
5371 	/* during HNP, don't repeat the debounce */
5372 	if (hub->hdev->bus->is_b_host)
5373 		portchange &= ~(USB_PORT_STAT_C_CONNECTION |
5374 				USB_PORT_STAT_C_ENABLE);
5375 #endif
5376 
5377 	/* Try to resuscitate an existing device */
5378 	if ((portstatus & USB_PORT_STAT_CONNECTION) && udev &&
5379 			udev->state != USB_STATE_NOTATTACHED) {
5380 		if (portstatus & USB_PORT_STAT_ENABLE) {
5381 			/*
5382 			 * USB-3 connections are initialized automatically by
5383 			 * the hostcontroller hardware. Therefore check for
5384 			 * changed device descriptors before resuscitating the
5385 			 * device.
5386 			 */
5387 			descriptor = udev->descriptor;
5388 			retval = usb_get_device_descriptor(udev,
5389 					sizeof(udev->descriptor));
5390 			if (retval < 0) {
5391 				dev_dbg(&udev->dev,
5392 						"can't read device descriptor %d\n",
5393 						retval);
5394 			} else {
5395 				if (descriptors_changed(udev, &descriptor,
5396 						udev->bos)) {
5397 					dev_dbg(&udev->dev,
5398 							"device descriptor has changed\n");
5399 					/* for disconnect() calls */
5400 					udev->descriptor = descriptor;
5401 				} else {
5402 					status = 0; /* Nothing to do */
5403 				}
5404 			}
5405 #ifdef CONFIG_PM
5406 		} else if (udev->state == USB_STATE_SUSPENDED &&
5407 				udev->persist_enabled) {
5408 			/* For a suspended device, treat this as a
5409 			 * remote wakeup event.
5410 			 */
5411 			usb_unlock_port(port_dev);
5412 			status = usb_remote_wakeup(udev);
5413 			usb_lock_port(port_dev);
5414 #endif
5415 		} else {
5416 			/* Don't resuscitate */;
5417 		}
5418 	}
5419 	clear_bit(port1, hub->change_bits);
5420 
5421 	/* successfully revalidated the connection */
5422 	if (status == 0)
5423 		return;
5424 
5425 	usb_unlock_port(port_dev);
5426 	hub_port_connect(hub, port1, portstatus, portchange);
5427 	usb_lock_port(port_dev);
5428 }
5429 
5430 /* Handle notifying userspace about hub over-current events */
port_over_current_notify(struct usb_port * port_dev)5431 static void port_over_current_notify(struct usb_port *port_dev)
5432 {
5433 	char *envp[3];
5434 	struct device *hub_dev;
5435 	char *port_dev_path;
5436 
5437 	sysfs_notify(&port_dev->dev.kobj, NULL, "over_current_count");
5438 
5439 	hub_dev = port_dev->dev.parent;
5440 
5441 	if (!hub_dev)
5442 		return;
5443 
5444 	port_dev_path = kobject_get_path(&port_dev->dev.kobj, GFP_KERNEL);
5445 	if (!port_dev_path)
5446 		return;
5447 
5448 	envp[0] = kasprintf(GFP_KERNEL, "OVER_CURRENT_PORT=%s", port_dev_path);
5449 	if (!envp[0])
5450 		goto exit_path;
5451 
5452 	envp[1] = kasprintf(GFP_KERNEL, "OVER_CURRENT_COUNT=%u",
5453 			port_dev->over_current_count);
5454 	if (!envp[1])
5455 		goto exit;
5456 
5457 	envp[2] = NULL;
5458 	kobject_uevent_env(&hub_dev->kobj, KOBJ_CHANGE, envp);
5459 
5460 	kfree(envp[1]);
5461 exit:
5462 	kfree(envp[0]);
5463 exit_path:
5464 	kfree(port_dev_path);
5465 }
5466 
port_event(struct usb_hub * hub,int port1)5467 static void port_event(struct usb_hub *hub, int port1)
5468 		__must_hold(&port_dev->status_lock)
5469 {
5470 	int connect_change;
5471 	struct usb_port *port_dev = hub->ports[port1 - 1];
5472 	struct usb_device *udev = port_dev->child;
5473 	struct usb_device *hdev = hub->hdev;
5474 	u16 portstatus, portchange;
5475 
5476 	connect_change = test_bit(port1, hub->change_bits);
5477 	clear_bit(port1, hub->event_bits);
5478 	clear_bit(port1, hub->wakeup_bits);
5479 
5480 	if (hub_port_status(hub, port1, &portstatus, &portchange) < 0)
5481 		return;
5482 
5483 	if (portchange & USB_PORT_STAT_C_CONNECTION) {
5484 		usb_clear_port_feature(hdev, port1, USB_PORT_FEAT_C_CONNECTION);
5485 		connect_change = 1;
5486 	}
5487 
5488 	if (portchange & USB_PORT_STAT_C_ENABLE) {
5489 		if (!connect_change)
5490 			dev_dbg(&port_dev->dev, "enable change, status %08x\n",
5491 					portstatus);
5492 		usb_clear_port_feature(hdev, port1, USB_PORT_FEAT_C_ENABLE);
5493 
5494 		/*
5495 		 * EM interference sometimes causes badly shielded USB devices
5496 		 * to be shutdown by the hub, this hack enables them again.
5497 		 * Works at least with mouse driver.
5498 		 */
5499 		if (!(portstatus & USB_PORT_STAT_ENABLE)
5500 		    && !connect_change && udev) {
5501 			dev_err(&port_dev->dev, "disabled by hub (EMI?), re-enabling...\n");
5502 			connect_change = 1;
5503 		}
5504 	}
5505 
5506 	if (portchange & USB_PORT_STAT_C_OVERCURRENT) {
5507 		u16 status = 0, unused;
5508 		port_dev->over_current_count++;
5509 		port_over_current_notify(port_dev);
5510 
5511 		dev_dbg(&port_dev->dev, "over-current change #%u\n",
5512 			port_dev->over_current_count);
5513 		usb_clear_port_feature(hdev, port1,
5514 				USB_PORT_FEAT_C_OVER_CURRENT);
5515 		msleep(100);	/* Cool down */
5516 		hub_power_on(hub, true);
5517 		hub_port_status(hub, port1, &status, &unused);
5518 		if (status & USB_PORT_STAT_OVERCURRENT)
5519 			dev_err(&port_dev->dev, "over-current condition\n");
5520 	}
5521 
5522 	if (portchange & USB_PORT_STAT_C_RESET) {
5523 		dev_dbg(&port_dev->dev, "reset change\n");
5524 		usb_clear_port_feature(hdev, port1, USB_PORT_FEAT_C_RESET);
5525 	}
5526 	if ((portchange & USB_PORT_STAT_C_BH_RESET)
5527 	    && hub_is_superspeed(hdev)) {
5528 		dev_dbg(&port_dev->dev, "warm reset change\n");
5529 		usb_clear_port_feature(hdev, port1,
5530 				USB_PORT_FEAT_C_BH_PORT_RESET);
5531 	}
5532 	if (portchange & USB_PORT_STAT_C_LINK_STATE) {
5533 		dev_dbg(&port_dev->dev, "link state change\n");
5534 		usb_clear_port_feature(hdev, port1,
5535 				USB_PORT_FEAT_C_PORT_LINK_STATE);
5536 	}
5537 	if (portchange & USB_PORT_STAT_C_CONFIG_ERROR) {
5538 		dev_warn(&port_dev->dev, "config error\n");
5539 		usb_clear_port_feature(hdev, port1,
5540 				USB_PORT_FEAT_C_PORT_CONFIG_ERROR);
5541 	}
5542 
5543 	/* skip port actions that require the port to be powered on */
5544 	if (!pm_runtime_active(&port_dev->dev))
5545 		return;
5546 
5547 	if (hub_handle_remote_wakeup(hub, port1, portstatus, portchange))
5548 		connect_change = 1;
5549 
5550 	/*
5551 	 * Warm reset a USB3 protocol port if it's in
5552 	 * SS.Inactive state.
5553 	 */
5554 	if (hub_port_warm_reset_required(hub, port1, portstatus)) {
5555 		dev_dbg(&port_dev->dev, "do warm reset\n");
5556 		if (!udev || !(portstatus & USB_PORT_STAT_CONNECTION)
5557 				|| udev->state == USB_STATE_NOTATTACHED) {
5558 			if (hub_port_reset(hub, port1, NULL,
5559 					HUB_BH_RESET_TIME, true) < 0)
5560 				hub_port_disable(hub, port1, 1);
5561 		} else {
5562 			usb_unlock_port(port_dev);
5563 			usb_lock_device(udev);
5564 			usb_reset_device(udev);
5565 			usb_unlock_device(udev);
5566 			usb_lock_port(port_dev);
5567 			connect_change = 0;
5568 		}
5569 	}
5570 
5571 	if (connect_change)
5572 		hub_port_connect_change(hub, port1, portstatus, portchange);
5573 }
5574 
hub_event(struct work_struct * work)5575 static void hub_event(struct work_struct *work)
5576 {
5577 	struct usb_device *hdev;
5578 	struct usb_interface *intf;
5579 	struct usb_hub *hub;
5580 	struct device *hub_dev;
5581 	u16 hubstatus;
5582 	u16 hubchange;
5583 	int i, ret;
5584 
5585 	hub = container_of(work, struct usb_hub, events);
5586 	hdev = hub->hdev;
5587 	hub_dev = hub->intfdev;
5588 	intf = to_usb_interface(hub_dev);
5589 
5590 	kcov_remote_start_usb((u64)hdev->bus->busnum);
5591 
5592 	dev_dbg(hub_dev, "state %d ports %d chg %04x evt %04x\n",
5593 			hdev->state, hdev->maxchild,
5594 			/* NOTE: expects max 15 ports... */
5595 			(u16) hub->change_bits[0],
5596 			(u16) hub->event_bits[0]);
5597 
5598 	/* Lock the device, then check to see if we were
5599 	 * disconnected while waiting for the lock to succeed. */
5600 	usb_lock_device(hdev);
5601 	if (unlikely(hub->disconnected))
5602 		goto out_hdev_lock;
5603 
5604 	/* If the hub has died, clean up after it */
5605 	if (hdev->state == USB_STATE_NOTATTACHED) {
5606 		hub->error = -ENODEV;
5607 		hub_quiesce(hub, HUB_DISCONNECT);
5608 		goto out_hdev_lock;
5609 	}
5610 
5611 	/* Autoresume */
5612 	ret = usb_autopm_get_interface(intf);
5613 	if (ret) {
5614 		dev_dbg(hub_dev, "Can't autoresume: %d\n", ret);
5615 		goto out_hdev_lock;
5616 	}
5617 
5618 	/* If this is an inactive hub, do nothing */
5619 	if (hub->quiescing)
5620 		goto out_autopm;
5621 
5622 	if (hub->error) {
5623 		dev_dbg(hub_dev, "resetting for error %d\n", hub->error);
5624 
5625 		ret = usb_reset_device(hdev);
5626 		if (ret) {
5627 			dev_dbg(hub_dev, "error resetting hub: %d\n", ret);
5628 			goto out_autopm;
5629 		}
5630 
5631 		hub->nerrors = 0;
5632 		hub->error = 0;
5633 	}
5634 
5635 	/* deal with port status changes */
5636 	for (i = 1; i <= hdev->maxchild; i++) {
5637 		struct usb_port *port_dev = hub->ports[i - 1];
5638 
5639 		if (test_bit(i, hub->event_bits)
5640 				|| test_bit(i, hub->change_bits)
5641 				|| test_bit(i, hub->wakeup_bits)) {
5642 			/*
5643 			 * The get_noresume and barrier ensure that if
5644 			 * the port was in the process of resuming, we
5645 			 * flush that work and keep the port active for
5646 			 * the duration of the port_event().  However,
5647 			 * if the port is runtime pm suspended
5648 			 * (powered-off), we leave it in that state, run
5649 			 * an abbreviated port_event(), and move on.
5650 			 */
5651 			pm_runtime_get_noresume(&port_dev->dev);
5652 			pm_runtime_barrier(&port_dev->dev);
5653 			usb_lock_port(port_dev);
5654 			port_event(hub, i);
5655 			usb_unlock_port(port_dev);
5656 			pm_runtime_put_sync(&port_dev->dev);
5657 		}
5658 	}
5659 
5660 	/* deal with hub status changes */
5661 	if (test_and_clear_bit(0, hub->event_bits) == 0)
5662 		;	/* do nothing */
5663 	else if (hub_hub_status(hub, &hubstatus, &hubchange) < 0)
5664 		dev_err(hub_dev, "get_hub_status failed\n");
5665 	else {
5666 		if (hubchange & HUB_CHANGE_LOCAL_POWER) {
5667 			dev_dbg(hub_dev, "power change\n");
5668 			clear_hub_feature(hdev, C_HUB_LOCAL_POWER);
5669 			if (hubstatus & HUB_STATUS_LOCAL_POWER)
5670 				/* FIXME: Is this always true? */
5671 				hub->limited_power = 1;
5672 			else
5673 				hub->limited_power = 0;
5674 		}
5675 		if (hubchange & HUB_CHANGE_OVERCURRENT) {
5676 			u16 status = 0;
5677 			u16 unused;
5678 
5679 			dev_dbg(hub_dev, "over-current change\n");
5680 			clear_hub_feature(hdev, C_HUB_OVER_CURRENT);
5681 			msleep(500);	/* Cool down */
5682 			hub_power_on(hub, true);
5683 			hub_hub_status(hub, &status, &unused);
5684 			if (status & HUB_STATUS_OVERCURRENT)
5685 				dev_err(hub_dev, "over-current condition\n");
5686 		}
5687 	}
5688 
5689 out_autopm:
5690 	/* Balance the usb_autopm_get_interface() above */
5691 	usb_autopm_put_interface_no_suspend(intf);
5692 out_hdev_lock:
5693 	usb_unlock_device(hdev);
5694 
5695 	/* Balance the stuff in kick_hub_wq() and allow autosuspend */
5696 	usb_autopm_put_interface(intf);
5697 	kref_put(&hub->kref, hub_release);
5698 
5699 	kcov_remote_stop();
5700 }
5701 
5702 static const struct usb_device_id hub_id_table[] = {
5703     { .match_flags = USB_DEVICE_ID_MATCH_VENDOR
5704                    | USB_DEVICE_ID_MATCH_PRODUCT
5705                    | USB_DEVICE_ID_MATCH_INT_CLASS,
5706       .idVendor = USB_VENDOR_SMSC,
5707       .idProduct = USB_PRODUCT_USB5534B,
5708       .bInterfaceClass = USB_CLASS_HUB,
5709       .driver_info = HUB_QUIRK_DISABLE_AUTOSUSPEND},
5710     { .match_flags = USB_DEVICE_ID_MATCH_VENDOR
5711                    | USB_DEVICE_ID_MATCH_PRODUCT,
5712       .idVendor = USB_VENDOR_CYPRESS,
5713       .idProduct = USB_PRODUCT_CY7C65632,
5714       .driver_info = HUB_QUIRK_DISABLE_AUTOSUSPEND},
5715     { .match_flags = USB_DEVICE_ID_MATCH_VENDOR
5716 			| USB_DEVICE_ID_MATCH_INT_CLASS,
5717       .idVendor = USB_VENDOR_GENESYS_LOGIC,
5718       .bInterfaceClass = USB_CLASS_HUB,
5719       .driver_info = HUB_QUIRK_CHECK_PORT_AUTOSUSPEND},
5720     { .match_flags = USB_DEVICE_ID_MATCH_DEV_CLASS,
5721       .bDeviceClass = USB_CLASS_HUB},
5722     { .match_flags = USB_DEVICE_ID_MATCH_INT_CLASS,
5723       .bInterfaceClass = USB_CLASS_HUB},
5724     { }						/* Terminating entry */
5725 };
5726 
5727 MODULE_DEVICE_TABLE(usb, hub_id_table);
5728 
5729 static struct usb_driver hub_driver = {
5730 	.name =		"hub",
5731 	.probe =	hub_probe,
5732 	.disconnect =	hub_disconnect,
5733 	.suspend =	hub_suspend,
5734 	.resume =	hub_resume,
5735 	.reset_resume =	hub_reset_resume,
5736 	.pre_reset =	hub_pre_reset,
5737 	.post_reset =	hub_post_reset,
5738 	.unlocked_ioctl = hub_ioctl,
5739 	.id_table =	hub_id_table,
5740 	.supports_autosuspend =	1,
5741 };
5742 
usb_hub_init(void)5743 int usb_hub_init(void)
5744 {
5745 	if (usb_register(&hub_driver) < 0) {
5746 		printk(KERN_ERR "%s: can't register hub driver\n",
5747 			usbcore_name);
5748 		return -1;
5749 	}
5750 
5751 	/*
5752 	 * The workqueue needs to be freezable to avoid interfering with
5753 	 * USB-PERSIST port handover. Otherwise it might see that a full-speed
5754 	 * device was gone before the EHCI controller had handed its port
5755 	 * over to the companion full-speed controller.
5756 	 */
5757 	hub_wq = alloc_workqueue("usb_hub_wq", WQ_FREEZABLE, 0);
5758 	if (hub_wq)
5759 		return 0;
5760 
5761 	/* Fall through if kernel_thread failed */
5762 	usb_deregister(&hub_driver);
5763 	pr_err("%s: can't allocate workqueue for usb hub\n", usbcore_name);
5764 
5765 	return -1;
5766 }
5767 
usb_hub_cleanup(void)5768 void usb_hub_cleanup(void)
5769 {
5770 	destroy_workqueue(hub_wq);
5771 
5772 	/*
5773 	 * Hub resources are freed for us by usb_deregister. It calls
5774 	 * usb_driver_purge on every device which in turn calls that
5775 	 * devices disconnect function if it is using this driver.
5776 	 * The hub_disconnect function takes care of releasing the
5777 	 * individual hub resources. -greg
5778 	 */
5779 	usb_deregister(&hub_driver);
5780 } /* usb_hub_cleanup() */
5781 
5782 /**
5783  * usb_reset_and_verify_device - perform a USB port reset to reinitialize a device
5784  * @udev: device to reset (not in SUSPENDED or NOTATTACHED state)
5785  *
5786  * WARNING - don't use this routine to reset a composite device
5787  * (one with multiple interfaces owned by separate drivers)!
5788  * Use usb_reset_device() instead.
5789  *
5790  * Do a port reset, reassign the device's address, and establish its
5791  * former operating configuration.  If the reset fails, or the device's
5792  * descriptors change from their values before the reset, or the original
5793  * configuration and altsettings cannot be restored, a flag will be set
5794  * telling hub_wq to pretend the device has been disconnected and then
5795  * re-connected.  All drivers will be unbound, and the device will be
5796  * re-enumerated and probed all over again.
5797  *
5798  * Return: 0 if the reset succeeded, -ENODEV if the device has been
5799  * flagged for logical disconnection, or some other negative error code
5800  * if the reset wasn't even attempted.
5801  *
5802  * Note:
5803  * The caller must own the device lock and the port lock, the latter is
5804  * taken by usb_reset_device().  For example, it's safe to use
5805  * usb_reset_device() from a driver probe() routine after downloading
5806  * new firmware.  For calls that might not occur during probe(), drivers
5807  * should lock the device using usb_lock_device_for_reset().
5808  *
5809  * Locking exception: This routine may also be called from within an
5810  * autoresume handler.  Such usage won't conflict with other tasks
5811  * holding the device lock because these tasks should always call
5812  * usb_autopm_resume_device(), thereby preventing any unwanted
5813  * autoresume.  The autoresume handler is expected to have already
5814  * acquired the port lock before calling this routine.
5815  */
usb_reset_and_verify_device(struct usb_device * udev)5816 static int usb_reset_and_verify_device(struct usb_device *udev)
5817 {
5818 	struct usb_device		*parent_hdev = udev->parent;
5819 	struct usb_hub			*parent_hub;
5820 	struct usb_hcd			*hcd = bus_to_hcd(udev->bus);
5821 	struct usb_device_descriptor	descriptor = udev->descriptor;
5822 	struct usb_host_bos		*bos;
5823 	int				i, j, ret = 0;
5824 	int				port1 = udev->portnum;
5825 
5826 	if (udev->state == USB_STATE_NOTATTACHED ||
5827 			udev->state == USB_STATE_SUSPENDED) {
5828 		dev_dbg(&udev->dev, "device reset not allowed in state %d\n",
5829 				udev->state);
5830 		return -EINVAL;
5831 	}
5832 
5833 	if (!parent_hdev)
5834 		return -EISDIR;
5835 
5836 	parent_hub = usb_hub_to_struct_hub(parent_hdev);
5837 
5838 	/* Disable USB2 hardware LPM.
5839 	 * It will be re-enabled by the enumeration process.
5840 	 */
5841 	usb_disable_usb2_hardware_lpm(udev);
5842 
5843 	/* Disable LPM while we reset the device and reinstall the alt settings.
5844 	 * Device-initiated LPM, and system exit latency settings are cleared
5845 	 * when the device is reset, so we have to set them up again.
5846 	 */
5847 	ret = usb_unlocked_disable_lpm(udev);
5848 	if (ret) {
5849 		dev_err(&udev->dev, "%s Failed to disable LPM\n", __func__);
5850 		goto re_enumerate_no_bos;
5851 	}
5852 
5853 	bos = udev->bos;
5854 	udev->bos = NULL;
5855 
5856 	mutex_lock(hcd->address0_mutex);
5857 
5858 	for (i = 0; i < PORT_INIT_TRIES; ++i) {
5859 
5860 		/* ep0 maxpacket size may change; let the HCD know about it.
5861 		 * Other endpoints will be handled by re-enumeration. */
5862 		usb_ep0_reinit(udev);
5863 		ret = hub_port_init(parent_hub, udev, port1, i);
5864 		if (ret >= 0 || ret == -ENOTCONN || ret == -ENODEV)
5865 			break;
5866 	}
5867 	mutex_unlock(hcd->address0_mutex);
5868 
5869 	if (ret < 0)
5870 		goto re_enumerate;
5871 
5872 	/* Device might have changed firmware (DFU or similar) */
5873 	if (descriptors_changed(udev, &descriptor, bos)) {
5874 		dev_info(&udev->dev, "device firmware changed\n");
5875 		udev->descriptor = descriptor;	/* for disconnect() calls */
5876 		goto re_enumerate;
5877 	}
5878 
5879 	/* Restore the device's previous configuration */
5880 	if (!udev->actconfig)
5881 		goto done;
5882 
5883 	mutex_lock(hcd->bandwidth_mutex);
5884 	ret = usb_hcd_alloc_bandwidth(udev, udev->actconfig, NULL, NULL);
5885 	if (ret < 0) {
5886 		dev_warn(&udev->dev,
5887 				"Busted HC?  Not enough HCD resources for "
5888 				"old configuration.\n");
5889 		mutex_unlock(hcd->bandwidth_mutex);
5890 		goto re_enumerate;
5891 	}
5892 	ret = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
5893 			USB_REQ_SET_CONFIGURATION, 0,
5894 			udev->actconfig->desc.bConfigurationValue, 0,
5895 			NULL, 0, USB_CTRL_SET_TIMEOUT);
5896 	if (ret < 0) {
5897 		dev_err(&udev->dev,
5898 			"can't restore configuration #%d (error=%d)\n",
5899 			udev->actconfig->desc.bConfigurationValue, ret);
5900 		mutex_unlock(hcd->bandwidth_mutex);
5901 		goto re_enumerate;
5902 	}
5903 	mutex_unlock(hcd->bandwidth_mutex);
5904 	usb_set_device_state(udev, USB_STATE_CONFIGURED);
5905 
5906 	/* Put interfaces back into the same altsettings as before.
5907 	 * Don't bother to send the Set-Interface request for interfaces
5908 	 * that were already in altsetting 0; besides being unnecessary,
5909 	 * many devices can't handle it.  Instead just reset the host-side
5910 	 * endpoint state.
5911 	 */
5912 	for (i = 0; i < udev->actconfig->desc.bNumInterfaces; i++) {
5913 		struct usb_host_config *config = udev->actconfig;
5914 		struct usb_interface *intf = config->interface[i];
5915 		struct usb_interface_descriptor *desc;
5916 
5917 		desc = &intf->cur_altsetting->desc;
5918 		if (desc->bAlternateSetting == 0) {
5919 			usb_disable_interface(udev, intf, true);
5920 			usb_enable_interface(udev, intf, true);
5921 			ret = 0;
5922 		} else {
5923 			/* Let the bandwidth allocation function know that this
5924 			 * device has been reset, and it will have to use
5925 			 * alternate setting 0 as the current alternate setting.
5926 			 */
5927 			intf->resetting_device = 1;
5928 			ret = usb_set_interface(udev, desc->bInterfaceNumber,
5929 					desc->bAlternateSetting);
5930 			intf->resetting_device = 0;
5931 		}
5932 		if (ret < 0) {
5933 			dev_err(&udev->dev, "failed to restore interface %d "
5934 				"altsetting %d (error=%d)\n",
5935 				desc->bInterfaceNumber,
5936 				desc->bAlternateSetting,
5937 				ret);
5938 			goto re_enumerate;
5939 		}
5940 		/* Resetting also frees any allocated streams */
5941 		for (j = 0; j < intf->cur_altsetting->desc.bNumEndpoints; j++)
5942 			intf->cur_altsetting->endpoint[j].streams = 0;
5943 	}
5944 
5945 done:
5946 	/* Now that the alt settings are re-installed, enable LTM and LPM. */
5947 	usb_enable_usb2_hardware_lpm(udev);
5948 	usb_unlocked_enable_lpm(udev);
5949 	usb_enable_ltm(udev);
5950 	usb_release_bos_descriptor(udev);
5951 	udev->bos = bos;
5952 	return 0;
5953 
5954 re_enumerate:
5955 	usb_release_bos_descriptor(udev);
5956 	udev->bos = bos;
5957 re_enumerate_no_bos:
5958 	/* LPM state doesn't matter when we're about to destroy the device. */
5959 	hub_port_logical_disconnect(parent_hub, port1);
5960 	return -ENODEV;
5961 }
5962 
5963 /**
5964  * usb_reset_device - warn interface drivers and perform a USB port reset
5965  * @udev: device to reset (not in NOTATTACHED state)
5966  *
5967  * Warns all drivers bound to registered interfaces (using their pre_reset
5968  * method), performs the port reset, and then lets the drivers know that
5969  * the reset is over (using their post_reset method).
5970  *
5971  * Return: The same as for usb_reset_and_verify_device().
5972  *
5973  * Note:
5974  * The caller must own the device lock.  For example, it's safe to use
5975  * this from a driver probe() routine after downloading new firmware.
5976  * For calls that might not occur during probe(), drivers should lock
5977  * the device using usb_lock_device_for_reset().
5978  *
5979  * If an interface is currently being probed or disconnected, we assume
5980  * its driver knows how to handle resets.  For all other interfaces,
5981  * if the driver doesn't have pre_reset and post_reset methods then
5982  * we attempt to unbind it and rebind afterward.
5983  */
usb_reset_device(struct usb_device * udev)5984 int usb_reset_device(struct usb_device *udev)
5985 {
5986 	int ret;
5987 	int i;
5988 	unsigned int noio_flag;
5989 	struct usb_port *port_dev;
5990 	struct usb_host_config *config = udev->actconfig;
5991 	struct usb_hub *hub = usb_hub_to_struct_hub(udev->parent);
5992 
5993 	if (udev->state == USB_STATE_NOTATTACHED) {
5994 		dev_dbg(&udev->dev, "device reset not allowed in state %d\n",
5995 				udev->state);
5996 		return -EINVAL;
5997 	}
5998 
5999 	if (!udev->parent) {
6000 		/* this requires hcd-specific logic; see ohci_restart() */
6001 		dev_dbg(&udev->dev, "%s for root hub!\n", __func__);
6002 		return -EISDIR;
6003 	}
6004 
6005 	port_dev = hub->ports[udev->portnum - 1];
6006 
6007 	/*
6008 	 * Don't allocate memory with GFP_KERNEL in current
6009 	 * context to avoid possible deadlock if usb mass
6010 	 * storage interface or usbnet interface(iSCSI case)
6011 	 * is included in current configuration. The easist
6012 	 * approach is to do it for every device reset,
6013 	 * because the device 'memalloc_noio' flag may have
6014 	 * not been set before reseting the usb device.
6015 	 */
6016 	noio_flag = memalloc_noio_save();
6017 
6018 	/* Prevent autosuspend during the reset */
6019 	usb_autoresume_device(udev);
6020 
6021 	if (config) {
6022 		for (i = 0; i < config->desc.bNumInterfaces; ++i) {
6023 			struct usb_interface *cintf = config->interface[i];
6024 			struct usb_driver *drv;
6025 			int unbind = 0;
6026 
6027 			if (cintf->dev.driver) {
6028 				drv = to_usb_driver(cintf->dev.driver);
6029 				if (drv->pre_reset && drv->post_reset)
6030 					unbind = (drv->pre_reset)(cintf);
6031 				else if (cintf->condition ==
6032 						USB_INTERFACE_BOUND)
6033 					unbind = 1;
6034 				if (unbind)
6035 					usb_forced_unbind_intf(cintf);
6036 			}
6037 		}
6038 	}
6039 
6040 	usb_lock_port(port_dev);
6041 	ret = usb_reset_and_verify_device(udev);
6042 	usb_unlock_port(port_dev);
6043 
6044 	if (config) {
6045 		for (i = config->desc.bNumInterfaces - 1; i >= 0; --i) {
6046 			struct usb_interface *cintf = config->interface[i];
6047 			struct usb_driver *drv;
6048 			int rebind = cintf->needs_binding;
6049 
6050 			if (!rebind && cintf->dev.driver) {
6051 				drv = to_usb_driver(cintf->dev.driver);
6052 				if (drv->post_reset)
6053 					rebind = (drv->post_reset)(cintf);
6054 				else if (cintf->condition ==
6055 						USB_INTERFACE_BOUND)
6056 					rebind = 1;
6057 				if (rebind)
6058 					cintf->needs_binding = 1;
6059 			}
6060 		}
6061 
6062 		/* If the reset failed, hub_wq will unbind drivers later */
6063 		if (ret == 0)
6064 			usb_unbind_and_rebind_marked_interfaces(udev);
6065 	}
6066 
6067 	usb_autosuspend_device(udev);
6068 	memalloc_noio_restore(noio_flag);
6069 	return ret;
6070 }
6071 EXPORT_SYMBOL_GPL(usb_reset_device);
6072 
6073 
6074 /**
6075  * usb_queue_reset_device - Reset a USB device from an atomic context
6076  * @iface: USB interface belonging to the device to reset
6077  *
6078  * This function can be used to reset a USB device from an atomic
6079  * context, where usb_reset_device() won't work (as it blocks).
6080  *
6081  * Doing a reset via this method is functionally equivalent to calling
6082  * usb_reset_device(), except for the fact that it is delayed to a
6083  * workqueue. This means that any drivers bound to other interfaces
6084  * might be unbound, as well as users from usbfs in user space.
6085  *
6086  * Corner cases:
6087  *
6088  * - Scheduling two resets at the same time from two different drivers
6089  *   attached to two different interfaces of the same device is
6090  *   possible; depending on how the driver attached to each interface
6091  *   handles ->pre_reset(), the second reset might happen or not.
6092  *
6093  * - If the reset is delayed so long that the interface is unbound from
6094  *   its driver, the reset will be skipped.
6095  *
6096  * - This function can be called during .probe().  It can also be called
6097  *   during .disconnect(), but doing so is pointless because the reset
6098  *   will not occur.  If you really want to reset the device during
6099  *   .disconnect(), call usb_reset_device() directly -- but watch out
6100  *   for nested unbinding issues!
6101  */
usb_queue_reset_device(struct usb_interface * iface)6102 void usb_queue_reset_device(struct usb_interface *iface)
6103 {
6104 	if (schedule_work(&iface->reset_ws))
6105 		usb_get_intf(iface);
6106 }
6107 EXPORT_SYMBOL_GPL(usb_queue_reset_device);
6108 
6109 /**
6110  * usb_hub_find_child - Get the pointer of child device
6111  * attached to the port which is specified by @port1.
6112  * @hdev: USB device belonging to the usb hub
6113  * @port1: port num to indicate which port the child device
6114  *	is attached to.
6115  *
6116  * USB drivers call this function to get hub's child device
6117  * pointer.
6118  *
6119  * Return: %NULL if input param is invalid and
6120  * child's usb_device pointer if non-NULL.
6121  */
usb_hub_find_child(struct usb_device * hdev,int port1)6122 struct usb_device *usb_hub_find_child(struct usb_device *hdev,
6123 		int port1)
6124 {
6125 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
6126 
6127 	if (port1 < 1 || port1 > hdev->maxchild)
6128 		return NULL;
6129 	return hub->ports[port1 - 1]->child;
6130 }
6131 EXPORT_SYMBOL_GPL(usb_hub_find_child);
6132 
usb_hub_adjust_deviceremovable(struct usb_device * hdev,struct usb_hub_descriptor * desc)6133 void usb_hub_adjust_deviceremovable(struct usb_device *hdev,
6134 		struct usb_hub_descriptor *desc)
6135 {
6136 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
6137 	enum usb_port_connect_type connect_type;
6138 	int i;
6139 
6140 	if (!hub)
6141 		return;
6142 
6143 	if (!hub_is_superspeed(hdev)) {
6144 		for (i = 1; i <= hdev->maxchild; i++) {
6145 			struct usb_port *port_dev = hub->ports[i - 1];
6146 
6147 			connect_type = port_dev->connect_type;
6148 			if (connect_type == USB_PORT_CONNECT_TYPE_HARD_WIRED) {
6149 				u8 mask = 1 << (i%8);
6150 
6151 				if (!(desc->u.hs.DeviceRemovable[i/8] & mask)) {
6152 					dev_dbg(&port_dev->dev, "DeviceRemovable is changed to 1 according to platform information.\n");
6153 					desc->u.hs.DeviceRemovable[i/8]	|= mask;
6154 				}
6155 			}
6156 		}
6157 	} else {
6158 		u16 port_removable = le16_to_cpu(desc->u.ss.DeviceRemovable);
6159 
6160 		for (i = 1; i <= hdev->maxchild; i++) {
6161 			struct usb_port *port_dev = hub->ports[i - 1];
6162 
6163 			connect_type = port_dev->connect_type;
6164 			if (connect_type == USB_PORT_CONNECT_TYPE_HARD_WIRED) {
6165 				u16 mask = 1 << i;
6166 
6167 				if (!(port_removable & mask)) {
6168 					dev_dbg(&port_dev->dev, "DeviceRemovable is changed to 1 according to platform information.\n");
6169 					port_removable |= mask;
6170 				}
6171 			}
6172 		}
6173 
6174 		desc->u.ss.DeviceRemovable = cpu_to_le16(port_removable);
6175 	}
6176 }
6177 
6178 #ifdef CONFIG_ACPI
6179 /**
6180  * usb_get_hub_port_acpi_handle - Get the usb port's acpi handle
6181  * @hdev: USB device belonging to the usb hub
6182  * @port1: port num of the port
6183  *
6184  * Return: Port's acpi handle if successful, %NULL if params are
6185  * invalid.
6186  */
usb_get_hub_port_acpi_handle(struct usb_device * hdev,int port1)6187 acpi_handle usb_get_hub_port_acpi_handle(struct usb_device *hdev,
6188 	int port1)
6189 {
6190 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
6191 
6192 	if (!hub)
6193 		return NULL;
6194 
6195 	return ACPI_HANDLE(&hub->ports[port1 - 1]->dev);
6196 }
6197 #endif
6198