1 // SPDX-License-Identifier: GPL-2.0
2 /*
3  * USB hub driver.
4  *
5  * (C) Copyright 1999 Linus Torvalds
6  * (C) Copyright 1999 Johannes Erdfelt
7  * (C) Copyright 1999 Gregory P. Smith
8  * (C) Copyright 2001 Brad Hards (bhards@bigpond.net.au)
9  *
10  * Released under the GPLv2 only.
11  */
12 
13 #include <linux/kernel.h>
14 #include <linux/errno.h>
15 #include <linux/module.h>
16 #include <linux/moduleparam.h>
17 #include <linux/completion.h>
18 #include <linux/sched/mm.h>
19 #include <linux/list.h>
20 #include <linux/slab.h>
21 #include <linux/kcov.h>
22 #include <linux/ioctl.h>
23 #include <linux/usb.h>
24 #include <linux/usbdevice_fs.h>
25 #include <linux/usb/hcd.h>
26 #include <linux/usb/onboard_dev.h>
27 #include <linux/usb/otg.h>
28 #include <linux/usb/quirks.h>
29 #include <linux/workqueue.h>
30 #include <linux/mutex.h>
31 #include <linux/random.h>
32 #include <linux/pm_qos.h>
33 #include <linux/kobject.h>
34 
35 #include <linux/bitfield.h>
36 #include <linux/uaccess.h>
37 #include <asm/byteorder.h>
38 
39 #include "hub.h"
40 #include "phy.h"
41 #include "otg_productlist.h"
42 
43 #define USB_VENDOR_GENESYS_LOGIC		0x05e3
44 #define USB_VENDOR_SMSC				0x0424
45 #define USB_PRODUCT_USB5534B			0x5534
46 #define USB_VENDOR_CYPRESS			0x04b4
47 #define USB_PRODUCT_CY7C65632			0x6570
48 #define USB_VENDOR_TEXAS_INSTRUMENTS		0x0451
49 #define USB_PRODUCT_TUSB8041_USB3		0x8140
50 #define USB_PRODUCT_TUSB8041_USB2		0x8142
51 #define USB_VENDOR_MICROCHIP			0x0424
52 #define USB_PRODUCT_USB4913			0x4913
53 #define USB_PRODUCT_USB4914			0x4914
54 #define USB_PRODUCT_USB4915			0x4915
55 #define HUB_QUIRK_CHECK_PORT_AUTOSUSPEND	BIT(0)
56 #define HUB_QUIRK_DISABLE_AUTOSUSPEND		BIT(1)
57 #define HUB_QUIRK_REDUCE_FRAME_INTR_BINTERVAL	BIT(2)
58 
59 #define USB_TP_TRANSMISSION_DELAY	40	/* ns */
60 #define USB_TP_TRANSMISSION_DELAY_MAX	65535	/* ns */
61 #define USB_PING_RESPONSE_TIME		400	/* ns */
62 #define USB_REDUCE_FRAME_INTR_BINTERVAL	9
63 
64 /*
65  * The SET_ADDRESS request timeout will be 500 ms when
66  * USB_QUIRK_SHORT_SET_ADDRESS_REQ_TIMEOUT quirk flag is set.
67  */
68 #define USB_SHORT_SET_ADDRESS_REQ_TIMEOUT	500  /* ms */
69 
70 /* Protect struct usb_device->state and ->children members
71  * Note: Both are also protected by ->dev.sem, except that ->state can
72  * change to USB_STATE_NOTATTACHED even when the semaphore isn't held. */
73 static DEFINE_SPINLOCK(device_state_lock);
74 
75 /* workqueue to process hub events */
76 static struct workqueue_struct *hub_wq;
77 static void hub_event(struct work_struct *work);
78 
79 /* synchronize hub-port add/remove and peering operations */
80 DEFINE_MUTEX(usb_port_peer_mutex);
81 
82 /* cycle leds on hubs that aren't blinking for attention */
83 static bool blinkenlights;
84 module_param(blinkenlights, bool, S_IRUGO);
85 MODULE_PARM_DESC(blinkenlights, "true to cycle leds on hubs");
86 
87 /*
88  * Device SATA8000 FW1.0 from DATAST0R Technology Corp requires about
89  * 10 seconds to send reply for the initial 64-byte descriptor request.
90  */
91 /* define initial 64-byte descriptor request timeout in milliseconds */
92 static int initial_descriptor_timeout = USB_CTRL_GET_TIMEOUT;
93 module_param(initial_descriptor_timeout, int, S_IRUGO|S_IWUSR);
94 MODULE_PARM_DESC(initial_descriptor_timeout,
95 		"initial 64-byte descriptor request timeout in milliseconds "
96 		"(default 5000 - 5.0 seconds)");
97 
98 /*
99  * As of 2.6.10 we introduce a new USB device initialization scheme which
100  * closely resembles the way Windows works.  Hopefully it will be compatible
101  * with a wider range of devices than the old scheme.  However some previously
102  * working devices may start giving rise to "device not accepting address"
103  * errors; if that happens the user can try the old scheme by adjusting the
104  * following module parameters.
105  *
106  * For maximum flexibility there are two boolean parameters to control the
107  * hub driver's behavior.  On the first initialization attempt, if the
108  * "old_scheme_first" parameter is set then the old scheme will be used,
109  * otherwise the new scheme is used.  If that fails and "use_both_schemes"
110  * is set, then the driver will make another attempt, using the other scheme.
111  */
112 static bool old_scheme_first;
113 module_param(old_scheme_first, bool, S_IRUGO | S_IWUSR);
114 MODULE_PARM_DESC(old_scheme_first,
115 		 "start with the old device initialization scheme");
116 
117 static bool use_both_schemes = true;
118 module_param(use_both_schemes, bool, S_IRUGO | S_IWUSR);
119 MODULE_PARM_DESC(use_both_schemes,
120 		"try the other device initialization scheme if the "
121 		"first one fails");
122 
123 /* Mutual exclusion for EHCI CF initialization.  This interferes with
124  * port reset on some companion controllers.
125  */
126 DECLARE_RWSEM(ehci_cf_port_reset_rwsem);
127 EXPORT_SYMBOL_GPL(ehci_cf_port_reset_rwsem);
128 
129 #define HUB_DEBOUNCE_TIMEOUT	2000
130 #define HUB_DEBOUNCE_STEP	  25
131 #define HUB_DEBOUNCE_STABLE	 100
132 
133 static int usb_reset_and_verify_device(struct usb_device *udev);
134 static int hub_port_disable(struct usb_hub *hub, int port1, int set_state);
135 static bool hub_port_warm_reset_required(struct usb_hub *hub, int port1,
136 		u16 portstatus);
137 
portspeed(struct usb_hub * hub,int portstatus)138 static inline char *portspeed(struct usb_hub *hub, int portstatus)
139 {
140 	if (hub_is_superspeedplus(hub->hdev))
141 		return "10.0 Gb/s";
142 	if (hub_is_superspeed(hub->hdev))
143 		return "5.0 Gb/s";
144 	if (portstatus & USB_PORT_STAT_HIGH_SPEED)
145 		return "480 Mb/s";
146 	else if (portstatus & USB_PORT_STAT_LOW_SPEED)
147 		return "1.5 Mb/s";
148 	else
149 		return "12 Mb/s";
150 }
151 
152 /* Note that hdev or one of its children must be locked! */
usb_hub_to_struct_hub(struct usb_device * hdev)153 struct usb_hub *usb_hub_to_struct_hub(struct usb_device *hdev)
154 {
155 	if (!hdev || !hdev->actconfig || !hdev->maxchild)
156 		return NULL;
157 	return usb_get_intfdata(hdev->actconfig->interface[0]);
158 }
159 
usb_device_supports_lpm(struct usb_device * udev)160 int usb_device_supports_lpm(struct usb_device *udev)
161 {
162 	/* Some devices have trouble with LPM */
163 	if (udev->quirks & USB_QUIRK_NO_LPM)
164 		return 0;
165 
166 	/* Skip if the device BOS descriptor couldn't be read */
167 	if (!udev->bos)
168 		return 0;
169 
170 	/* USB 2.1 (and greater) devices indicate LPM support through
171 	 * their USB 2.0 Extended Capabilities BOS descriptor.
172 	 */
173 	if (udev->speed == USB_SPEED_HIGH || udev->speed == USB_SPEED_FULL) {
174 		if (udev->bos->ext_cap &&
175 			(USB_LPM_SUPPORT &
176 			 le32_to_cpu(udev->bos->ext_cap->bmAttributes)))
177 			return 1;
178 		return 0;
179 	}
180 
181 	/*
182 	 * According to the USB 3.0 spec, all USB 3.0 devices must support LPM.
183 	 * However, there are some that don't, and they set the U1/U2 exit
184 	 * latencies to zero.
185 	 */
186 	if (!udev->bos->ss_cap) {
187 		dev_info(&udev->dev, "No LPM exit latency info found, disabling LPM.\n");
188 		return 0;
189 	}
190 
191 	if (udev->bos->ss_cap->bU1devExitLat == 0 &&
192 			udev->bos->ss_cap->bU2DevExitLat == 0) {
193 		if (udev->parent)
194 			dev_info(&udev->dev, "LPM exit latency is zeroed, disabling LPM.\n");
195 		else
196 			dev_info(&udev->dev, "We don't know the algorithms for LPM for this host, disabling LPM.\n");
197 		return 0;
198 	}
199 
200 	if (!udev->parent || udev->parent->lpm_capable)
201 		return 1;
202 	return 0;
203 }
204 
205 /*
206  * Set the Maximum Exit Latency (MEL) for the host to wakup up the path from
207  * U1/U2, send a PING to the device and receive a PING_RESPONSE.
208  * See USB 3.1 section C.1.5.2
209  */
usb_set_lpm_mel(struct usb_device * udev,struct usb3_lpm_parameters * udev_lpm_params,unsigned int udev_exit_latency,struct usb_hub * hub,struct usb3_lpm_parameters * hub_lpm_params,unsigned int hub_exit_latency)210 static void usb_set_lpm_mel(struct usb_device *udev,
211 		struct usb3_lpm_parameters *udev_lpm_params,
212 		unsigned int udev_exit_latency,
213 		struct usb_hub *hub,
214 		struct usb3_lpm_parameters *hub_lpm_params,
215 		unsigned int hub_exit_latency)
216 {
217 	unsigned int total_mel;
218 
219 	/*
220 	 * tMEL1. time to transition path from host to device into U0.
221 	 * MEL for parent already contains the delay up to parent, so only add
222 	 * the exit latency for the last link (pick the slower exit latency),
223 	 * and the hub header decode latency. See USB 3.1 section C 2.2.1
224 	 * Store MEL in nanoseconds
225 	 */
226 	total_mel = hub_lpm_params->mel +
227 		max(udev_exit_latency, hub_exit_latency) * 1000 +
228 		hub->descriptor->u.ss.bHubHdrDecLat * 100;
229 
230 	/*
231 	 * tMEL2. Time to submit PING packet. Sum of tTPTransmissionDelay for
232 	 * each link + wHubDelay for each hub. Add only for last link.
233 	 * tMEL4, the time for PING_RESPONSE to traverse upstream is similar.
234 	 * Multiply by 2 to include it as well.
235 	 */
236 	total_mel += (__le16_to_cpu(hub->descriptor->u.ss.wHubDelay) +
237 		      USB_TP_TRANSMISSION_DELAY) * 2;
238 
239 	/*
240 	 * tMEL3, tPingResponse. Time taken by device to generate PING_RESPONSE
241 	 * after receiving PING. Also add 2100ns as stated in USB 3.1 C 1.5.2.4
242 	 * to cover the delay if the PING_RESPONSE is queued behind a Max Packet
243 	 * Size DP.
244 	 * Note these delays should be added only once for the entire path, so
245 	 * add them to the MEL of the device connected to the roothub.
246 	 */
247 	if (!hub->hdev->parent)
248 		total_mel += USB_PING_RESPONSE_TIME + 2100;
249 
250 	udev_lpm_params->mel = total_mel;
251 }
252 
253 /*
254  * Set the maximum Device to Host Exit Latency (PEL) for the device to initiate
255  * a transition from either U1 or U2.
256  */
usb_set_lpm_pel(struct usb_device * udev,struct usb3_lpm_parameters * udev_lpm_params,unsigned int udev_exit_latency,struct usb_hub * hub,struct usb3_lpm_parameters * hub_lpm_params,unsigned int hub_exit_latency,unsigned int port_to_port_exit_latency)257 static void usb_set_lpm_pel(struct usb_device *udev,
258 		struct usb3_lpm_parameters *udev_lpm_params,
259 		unsigned int udev_exit_latency,
260 		struct usb_hub *hub,
261 		struct usb3_lpm_parameters *hub_lpm_params,
262 		unsigned int hub_exit_latency,
263 		unsigned int port_to_port_exit_latency)
264 {
265 	unsigned int first_link_pel;
266 	unsigned int hub_pel;
267 
268 	/*
269 	 * First, the device sends an LFPS to transition the link between the
270 	 * device and the parent hub into U0.  The exit latency is the bigger of
271 	 * the device exit latency or the hub exit latency.
272 	 */
273 	if (udev_exit_latency > hub_exit_latency)
274 		first_link_pel = udev_exit_latency * 1000;
275 	else
276 		first_link_pel = hub_exit_latency * 1000;
277 
278 	/*
279 	 * When the hub starts to receive the LFPS, there is a slight delay for
280 	 * it to figure out that one of the ports is sending an LFPS.  Then it
281 	 * will forward the LFPS to its upstream link.  The exit latency is the
282 	 * delay, plus the PEL that we calculated for this hub.
283 	 */
284 	hub_pel = port_to_port_exit_latency * 1000 + hub_lpm_params->pel;
285 
286 	/*
287 	 * According to figure C-7 in the USB 3.0 spec, the PEL for this device
288 	 * is the greater of the two exit latencies.
289 	 */
290 	if (first_link_pel > hub_pel)
291 		udev_lpm_params->pel = first_link_pel;
292 	else
293 		udev_lpm_params->pel = hub_pel;
294 }
295 
296 /*
297  * Set the System Exit Latency (SEL) to indicate the total worst-case time from
298  * when a device initiates a transition to U0, until when it will receive the
299  * first packet from the host controller.
300  *
301  * Section C.1.5.1 describes the four components to this:
302  *  - t1: device PEL
303  *  - t2: time for the ERDY to make it from the device to the host.
304  *  - t3: a host-specific delay to process the ERDY.
305  *  - t4: time for the packet to make it from the host to the device.
306  *
307  * t3 is specific to both the xHCI host and the platform the host is integrated
308  * into.  The Intel HW folks have said it's negligible, FIXME if a different
309  * vendor says otherwise.
310  */
usb_set_lpm_sel(struct usb_device * udev,struct usb3_lpm_parameters * udev_lpm_params)311 static void usb_set_lpm_sel(struct usb_device *udev,
312 		struct usb3_lpm_parameters *udev_lpm_params)
313 {
314 	struct usb_device *parent;
315 	unsigned int num_hubs;
316 	unsigned int total_sel;
317 
318 	/* t1 = device PEL */
319 	total_sel = udev_lpm_params->pel;
320 	/* How many external hubs are in between the device & the root port. */
321 	for (parent = udev->parent, num_hubs = 0; parent->parent;
322 			parent = parent->parent)
323 		num_hubs++;
324 	/* t2 = 2.1us + 250ns * (num_hubs - 1) */
325 	if (num_hubs > 0)
326 		total_sel += 2100 + 250 * (num_hubs - 1);
327 
328 	/* t4 = 250ns * num_hubs */
329 	total_sel += 250 * num_hubs;
330 
331 	udev_lpm_params->sel = total_sel;
332 }
333 
usb_set_lpm_parameters(struct usb_device * udev)334 static void usb_set_lpm_parameters(struct usb_device *udev)
335 {
336 	struct usb_hub *hub;
337 	unsigned int port_to_port_delay;
338 	unsigned int udev_u1_del;
339 	unsigned int udev_u2_del;
340 	unsigned int hub_u1_del;
341 	unsigned int hub_u2_del;
342 
343 	if (!udev->lpm_capable || udev->speed < USB_SPEED_SUPER)
344 		return;
345 
346 	/* Skip if the device BOS descriptor couldn't be read */
347 	if (!udev->bos)
348 		return;
349 
350 	hub = usb_hub_to_struct_hub(udev->parent);
351 	/* It doesn't take time to transition the roothub into U0, since it
352 	 * doesn't have an upstream link.
353 	 */
354 	if (!hub)
355 		return;
356 
357 	udev_u1_del = udev->bos->ss_cap->bU1devExitLat;
358 	udev_u2_del = le16_to_cpu(udev->bos->ss_cap->bU2DevExitLat);
359 	hub_u1_del = udev->parent->bos->ss_cap->bU1devExitLat;
360 	hub_u2_del = le16_to_cpu(udev->parent->bos->ss_cap->bU2DevExitLat);
361 
362 	usb_set_lpm_mel(udev, &udev->u1_params, udev_u1_del,
363 			hub, &udev->parent->u1_params, hub_u1_del);
364 
365 	usb_set_lpm_mel(udev, &udev->u2_params, udev_u2_del,
366 			hub, &udev->parent->u2_params, hub_u2_del);
367 
368 	/*
369 	 * Appendix C, section C.2.2.2, says that there is a slight delay from
370 	 * when the parent hub notices the downstream port is trying to
371 	 * transition to U0 to when the hub initiates a U0 transition on its
372 	 * upstream port.  The section says the delays are tPort2PortU1EL and
373 	 * tPort2PortU2EL, but it doesn't define what they are.
374 	 *
375 	 * The hub chapter, sections 10.4.2.4 and 10.4.2.5 seem to be talking
376 	 * about the same delays.  Use the maximum delay calculations from those
377 	 * sections.  For U1, it's tHubPort2PortExitLat, which is 1us max.  For
378 	 * U2, it's tHubPort2PortExitLat + U2DevExitLat - U1DevExitLat.  I
379 	 * assume the device exit latencies they are talking about are the hub
380 	 * exit latencies.
381 	 *
382 	 * What do we do if the U2 exit latency is less than the U1 exit
383 	 * latency?  It's possible, although not likely...
384 	 */
385 	port_to_port_delay = 1;
386 
387 	usb_set_lpm_pel(udev, &udev->u1_params, udev_u1_del,
388 			hub, &udev->parent->u1_params, hub_u1_del,
389 			port_to_port_delay);
390 
391 	if (hub_u2_del > hub_u1_del)
392 		port_to_port_delay = 1 + hub_u2_del - hub_u1_del;
393 	else
394 		port_to_port_delay = 1 + hub_u1_del;
395 
396 	usb_set_lpm_pel(udev, &udev->u2_params, udev_u2_del,
397 			hub, &udev->parent->u2_params, hub_u2_del,
398 			port_to_port_delay);
399 
400 	/* Now that we've got PEL, calculate SEL. */
401 	usb_set_lpm_sel(udev, &udev->u1_params);
402 	usb_set_lpm_sel(udev, &udev->u2_params);
403 }
404 
405 /* USB 2.0 spec Section 11.24.4.5 */
get_hub_descriptor(struct usb_device * hdev,struct usb_hub_descriptor * desc)406 static int get_hub_descriptor(struct usb_device *hdev,
407 		struct usb_hub_descriptor *desc)
408 {
409 	int i, ret, size;
410 	unsigned dtype;
411 
412 	if (hub_is_superspeed(hdev)) {
413 		dtype = USB_DT_SS_HUB;
414 		size = USB_DT_SS_HUB_SIZE;
415 	} else {
416 		dtype = USB_DT_HUB;
417 		size = sizeof(struct usb_hub_descriptor);
418 	}
419 
420 	for (i = 0; i < 3; i++) {
421 		ret = usb_control_msg(hdev, usb_rcvctrlpipe(hdev, 0),
422 			USB_REQ_GET_DESCRIPTOR, USB_DIR_IN | USB_RT_HUB,
423 			dtype << 8, 0, desc, size,
424 			USB_CTRL_GET_TIMEOUT);
425 		if (hub_is_superspeed(hdev)) {
426 			if (ret == size)
427 				return ret;
428 		} else if (ret >= USB_DT_HUB_NONVAR_SIZE + 2) {
429 			/* Make sure we have the DeviceRemovable field. */
430 			size = USB_DT_HUB_NONVAR_SIZE + desc->bNbrPorts / 8 + 1;
431 			if (ret < size)
432 				return -EMSGSIZE;
433 			return ret;
434 		}
435 	}
436 	return -EINVAL;
437 }
438 
439 /*
440  * USB 2.0 spec Section 11.24.2.1
441  */
clear_hub_feature(struct usb_device * hdev,int feature)442 static int clear_hub_feature(struct usb_device *hdev, int feature)
443 {
444 	return usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
445 		USB_REQ_CLEAR_FEATURE, USB_RT_HUB, feature, 0, NULL, 0, 1000);
446 }
447 
448 /*
449  * USB 2.0 spec Section 11.24.2.2
450  */
usb_clear_port_feature(struct usb_device * hdev,int port1,int feature)451 int usb_clear_port_feature(struct usb_device *hdev, int port1, int feature)
452 {
453 	return usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
454 		USB_REQ_CLEAR_FEATURE, USB_RT_PORT, feature, port1,
455 		NULL, 0, 1000);
456 }
457 
458 /*
459  * USB 2.0 spec Section 11.24.2.13
460  */
set_port_feature(struct usb_device * hdev,int port1,int feature)461 static int set_port_feature(struct usb_device *hdev, int port1, int feature)
462 {
463 	return usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
464 		USB_REQ_SET_FEATURE, USB_RT_PORT, feature, port1,
465 		NULL, 0, 1000);
466 }
467 
to_led_name(int selector)468 static char *to_led_name(int selector)
469 {
470 	switch (selector) {
471 	case HUB_LED_AMBER:
472 		return "amber";
473 	case HUB_LED_GREEN:
474 		return "green";
475 	case HUB_LED_OFF:
476 		return "off";
477 	case HUB_LED_AUTO:
478 		return "auto";
479 	default:
480 		return "??";
481 	}
482 }
483 
484 /*
485  * USB 2.0 spec Section 11.24.2.7.1.10 and table 11-7
486  * for info about using port indicators
487  */
set_port_led(struct usb_hub * hub,int port1,int selector)488 static void set_port_led(struct usb_hub *hub, int port1, int selector)
489 {
490 	struct usb_port *port_dev = hub->ports[port1 - 1];
491 	int status;
492 
493 	status = set_port_feature(hub->hdev, (selector << 8) | port1,
494 			USB_PORT_FEAT_INDICATOR);
495 	dev_dbg(&port_dev->dev, "indicator %s status %d\n",
496 		to_led_name(selector), status);
497 }
498 
499 #define	LED_CYCLE_PERIOD	((2*HZ)/3)
500 
led_work(struct work_struct * work)501 static void led_work(struct work_struct *work)
502 {
503 	struct usb_hub		*hub =
504 		container_of(work, struct usb_hub, leds.work);
505 	struct usb_device	*hdev = hub->hdev;
506 	unsigned		i;
507 	unsigned		changed = 0;
508 	int			cursor = -1;
509 
510 	if (hdev->state != USB_STATE_CONFIGURED || hub->quiescing)
511 		return;
512 
513 	for (i = 0; i < hdev->maxchild; i++) {
514 		unsigned	selector, mode;
515 
516 		/* 30%-50% duty cycle */
517 
518 		switch (hub->indicator[i]) {
519 		/* cycle marker */
520 		case INDICATOR_CYCLE:
521 			cursor = i;
522 			selector = HUB_LED_AUTO;
523 			mode = INDICATOR_AUTO;
524 			break;
525 		/* blinking green = sw attention */
526 		case INDICATOR_GREEN_BLINK:
527 			selector = HUB_LED_GREEN;
528 			mode = INDICATOR_GREEN_BLINK_OFF;
529 			break;
530 		case INDICATOR_GREEN_BLINK_OFF:
531 			selector = HUB_LED_OFF;
532 			mode = INDICATOR_GREEN_BLINK;
533 			break;
534 		/* blinking amber = hw attention */
535 		case INDICATOR_AMBER_BLINK:
536 			selector = HUB_LED_AMBER;
537 			mode = INDICATOR_AMBER_BLINK_OFF;
538 			break;
539 		case INDICATOR_AMBER_BLINK_OFF:
540 			selector = HUB_LED_OFF;
541 			mode = INDICATOR_AMBER_BLINK;
542 			break;
543 		/* blink green/amber = reserved */
544 		case INDICATOR_ALT_BLINK:
545 			selector = HUB_LED_GREEN;
546 			mode = INDICATOR_ALT_BLINK_OFF;
547 			break;
548 		case INDICATOR_ALT_BLINK_OFF:
549 			selector = HUB_LED_AMBER;
550 			mode = INDICATOR_ALT_BLINK;
551 			break;
552 		default:
553 			continue;
554 		}
555 		if (selector != HUB_LED_AUTO)
556 			changed = 1;
557 		set_port_led(hub, i + 1, selector);
558 		hub->indicator[i] = mode;
559 	}
560 	if (!changed && blinkenlights) {
561 		cursor++;
562 		cursor %= hdev->maxchild;
563 		set_port_led(hub, cursor + 1, HUB_LED_GREEN);
564 		hub->indicator[cursor] = INDICATOR_CYCLE;
565 		changed++;
566 	}
567 	if (changed)
568 		queue_delayed_work(system_power_efficient_wq,
569 				&hub->leds, LED_CYCLE_PERIOD);
570 }
571 
572 /* use a short timeout for hub/port status fetches */
573 #define	USB_STS_TIMEOUT		1000
574 #define	USB_STS_RETRIES		5
575 
576 /*
577  * USB 2.0 spec Section 11.24.2.6
578  */
get_hub_status(struct usb_device * hdev,struct usb_hub_status * data)579 static int get_hub_status(struct usb_device *hdev,
580 		struct usb_hub_status *data)
581 {
582 	int i, status = -ETIMEDOUT;
583 
584 	for (i = 0; i < USB_STS_RETRIES &&
585 			(status == -ETIMEDOUT || status == -EPIPE); i++) {
586 		status = usb_control_msg(hdev, usb_rcvctrlpipe(hdev, 0),
587 			USB_REQ_GET_STATUS, USB_DIR_IN | USB_RT_HUB, 0, 0,
588 			data, sizeof(*data), USB_STS_TIMEOUT);
589 	}
590 	return status;
591 }
592 
593 /*
594  * USB 2.0 spec Section 11.24.2.7
595  * USB 3.1 takes into use the wValue and wLength fields, spec Section 10.16.2.6
596  */
get_port_status(struct usb_device * hdev,int port1,void * data,u16 value,u16 length)597 static int get_port_status(struct usb_device *hdev, int port1,
598 			   void *data, u16 value, u16 length)
599 {
600 	int i, status = -ETIMEDOUT;
601 
602 	for (i = 0; i < USB_STS_RETRIES &&
603 			(status == -ETIMEDOUT || status == -EPIPE); i++) {
604 		status = usb_control_msg(hdev, usb_rcvctrlpipe(hdev, 0),
605 			USB_REQ_GET_STATUS, USB_DIR_IN | USB_RT_PORT, value,
606 			port1, data, length, USB_STS_TIMEOUT);
607 	}
608 	return status;
609 }
610 
hub_ext_port_status(struct usb_hub * hub,int port1,int type,u16 * status,u16 * change,u32 * ext_status)611 static int hub_ext_port_status(struct usb_hub *hub, int port1, int type,
612 			       u16 *status, u16 *change, u32 *ext_status)
613 {
614 	int ret;
615 	int len = 4;
616 
617 	if (type != HUB_PORT_STATUS)
618 		len = 8;
619 
620 	mutex_lock(&hub->status_mutex);
621 	ret = get_port_status(hub->hdev, port1, &hub->status->port, type, len);
622 	if (ret < len) {
623 		if (ret != -ENODEV)
624 			dev_err(hub->intfdev,
625 				"%s failed (err = %d)\n", __func__, ret);
626 		if (ret >= 0)
627 			ret = -EIO;
628 	} else {
629 		*status = le16_to_cpu(hub->status->port.wPortStatus);
630 		*change = le16_to_cpu(hub->status->port.wPortChange);
631 		if (type != HUB_PORT_STATUS && ext_status)
632 			*ext_status = le32_to_cpu(
633 				hub->status->port.dwExtPortStatus);
634 		ret = 0;
635 	}
636 	mutex_unlock(&hub->status_mutex);
637 
638 	/*
639 	 * There is no need to lock status_mutex here, because status_mutex
640 	 * protects hub->status, and the phy driver only checks the port
641 	 * status without changing the status.
642 	 */
643 	if (!ret) {
644 		struct usb_device *hdev = hub->hdev;
645 
646 		/*
647 		 * Only roothub will be notified of connection changes,
648 		 * since the USB PHY only cares about changes at the next
649 		 * level.
650 		 */
651 		if (is_root_hub(hdev)) {
652 			struct usb_hcd *hcd = bus_to_hcd(hdev->bus);
653 			bool connect;
654 			bool connect_change;
655 
656 			connect_change = *change & USB_PORT_STAT_C_CONNECTION;
657 			connect = *status & USB_PORT_STAT_CONNECTION;
658 			if (connect_change && connect)
659 				usb_phy_roothub_notify_connect(hcd->phy_roothub, port1 - 1);
660 			else if (connect_change)
661 				usb_phy_roothub_notify_disconnect(hcd->phy_roothub, port1 - 1);
662 		}
663 	}
664 
665 	return ret;
666 }
667 
usb_hub_port_status(struct usb_hub * hub,int port1,u16 * status,u16 * change)668 int usb_hub_port_status(struct usb_hub *hub, int port1,
669 		u16 *status, u16 *change)
670 {
671 	return hub_ext_port_status(hub, port1, HUB_PORT_STATUS,
672 				   status, change, NULL);
673 }
674 
hub_resubmit_irq_urb(struct usb_hub * hub)675 static void hub_resubmit_irq_urb(struct usb_hub *hub)
676 {
677 	unsigned long flags;
678 	int status;
679 
680 	spin_lock_irqsave(&hub->irq_urb_lock, flags);
681 
682 	if (hub->quiescing) {
683 		spin_unlock_irqrestore(&hub->irq_urb_lock, flags);
684 		return;
685 	}
686 
687 	status = usb_submit_urb(hub->urb, GFP_ATOMIC);
688 	if (status && status != -ENODEV && status != -EPERM &&
689 	    status != -ESHUTDOWN) {
690 		dev_err(hub->intfdev, "resubmit --> %d\n", status);
691 		mod_timer(&hub->irq_urb_retry, jiffies + HZ);
692 	}
693 
694 	spin_unlock_irqrestore(&hub->irq_urb_lock, flags);
695 }
696 
hub_retry_irq_urb(struct timer_list * t)697 static void hub_retry_irq_urb(struct timer_list *t)
698 {
699 	struct usb_hub *hub = from_timer(hub, t, irq_urb_retry);
700 
701 	hub_resubmit_irq_urb(hub);
702 }
703 
704 
kick_hub_wq(struct usb_hub * hub)705 static void kick_hub_wq(struct usb_hub *hub)
706 {
707 	struct usb_interface *intf;
708 
709 	if (hub->disconnected || work_pending(&hub->events))
710 		return;
711 
712 	/*
713 	 * Suppress autosuspend until the event is proceed.
714 	 *
715 	 * Be careful and make sure that the symmetric operation is
716 	 * always called. We are here only when there is no pending
717 	 * work for this hub. Therefore put the interface either when
718 	 * the new work is called or when it is canceled.
719 	 */
720 	intf = to_usb_interface(hub->intfdev);
721 	usb_autopm_get_interface_no_resume(intf);
722 	hub_get(hub);
723 
724 	if (queue_work(hub_wq, &hub->events))
725 		return;
726 
727 	/* the work has already been scheduled */
728 	usb_autopm_put_interface_async(intf);
729 	hub_put(hub);
730 }
731 
usb_kick_hub_wq(struct usb_device * hdev)732 void usb_kick_hub_wq(struct usb_device *hdev)
733 {
734 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
735 
736 	if (hub)
737 		kick_hub_wq(hub);
738 }
739 
740 /*
741  * Let the USB core know that a USB 3.0 device has sent a Function Wake Device
742  * Notification, which indicates it had initiated remote wakeup.
743  *
744  * USB 3.0 hubs do not report the port link state change from U3 to U0 when the
745  * device initiates resume, so the USB core will not receive notice of the
746  * resume through the normal hub interrupt URB.
747  */
usb_wakeup_notification(struct usb_device * hdev,unsigned int portnum)748 void usb_wakeup_notification(struct usb_device *hdev,
749 		unsigned int portnum)
750 {
751 	struct usb_hub *hub;
752 	struct usb_port *port_dev;
753 
754 	if (!hdev)
755 		return;
756 
757 	hub = usb_hub_to_struct_hub(hdev);
758 	if (hub) {
759 		port_dev = hub->ports[portnum - 1];
760 		if (port_dev && port_dev->child)
761 			pm_wakeup_event(&port_dev->child->dev, 0);
762 
763 		set_bit(portnum, hub->wakeup_bits);
764 		kick_hub_wq(hub);
765 	}
766 }
767 EXPORT_SYMBOL_GPL(usb_wakeup_notification);
768 
769 /* completion function, fires on port status changes and various faults */
hub_irq(struct urb * urb)770 static void hub_irq(struct urb *urb)
771 {
772 	struct usb_hub *hub = urb->context;
773 	int status = urb->status;
774 	unsigned i;
775 	unsigned long bits;
776 
777 	switch (status) {
778 	case -ENOENT:		/* synchronous unlink */
779 	case -ECONNRESET:	/* async unlink */
780 	case -ESHUTDOWN:	/* hardware going away */
781 		return;
782 
783 	default:		/* presumably an error */
784 		/* Cause a hub reset after 10 consecutive errors */
785 		dev_dbg(hub->intfdev, "transfer --> %d\n", status);
786 		if ((++hub->nerrors < 10) || hub->error)
787 			goto resubmit;
788 		hub->error = status;
789 		fallthrough;
790 
791 	/* let hub_wq handle things */
792 	case 0:			/* we got data:  port status changed */
793 		bits = 0;
794 		for (i = 0; i < urb->actual_length; ++i)
795 			bits |= ((unsigned long) ((*hub->buffer)[i]))
796 					<< (i*8);
797 		hub->event_bits[0] = bits;
798 		break;
799 	}
800 
801 	hub->nerrors = 0;
802 
803 	/* Something happened, let hub_wq figure it out */
804 	kick_hub_wq(hub);
805 
806 resubmit:
807 	hub_resubmit_irq_urb(hub);
808 }
809 
810 /* USB 2.0 spec Section 11.24.2.3 */
811 static inline int
hub_clear_tt_buffer(struct usb_device * hdev,u16 devinfo,u16 tt)812 hub_clear_tt_buffer(struct usb_device *hdev, u16 devinfo, u16 tt)
813 {
814 	/* Need to clear both directions for control ep */
815 	if (((devinfo >> 11) & USB_ENDPOINT_XFERTYPE_MASK) ==
816 			USB_ENDPOINT_XFER_CONTROL) {
817 		int status = usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
818 				HUB_CLEAR_TT_BUFFER, USB_RT_PORT,
819 				devinfo ^ 0x8000, tt, NULL, 0, 1000);
820 		if (status)
821 			return status;
822 	}
823 	return usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
824 			       HUB_CLEAR_TT_BUFFER, USB_RT_PORT, devinfo,
825 			       tt, NULL, 0, 1000);
826 }
827 
828 /*
829  * enumeration blocks hub_wq for a long time. we use keventd instead, since
830  * long blocking there is the exception, not the rule.  accordingly, HCDs
831  * talking to TTs must queue control transfers (not just bulk and iso), so
832  * both can talk to the same hub concurrently.
833  */
hub_tt_work(struct work_struct * work)834 static void hub_tt_work(struct work_struct *work)
835 {
836 	struct usb_hub		*hub =
837 		container_of(work, struct usb_hub, tt.clear_work);
838 	unsigned long		flags;
839 
840 	spin_lock_irqsave(&hub->tt.lock, flags);
841 	while (!list_empty(&hub->tt.clear_list)) {
842 		struct list_head	*next;
843 		struct usb_tt_clear	*clear;
844 		struct usb_device	*hdev = hub->hdev;
845 		const struct hc_driver	*drv;
846 		int			status;
847 
848 		next = hub->tt.clear_list.next;
849 		clear = list_entry(next, struct usb_tt_clear, clear_list);
850 		list_del(&clear->clear_list);
851 
852 		/* drop lock so HCD can concurrently report other TT errors */
853 		spin_unlock_irqrestore(&hub->tt.lock, flags);
854 		status = hub_clear_tt_buffer(hdev, clear->devinfo, clear->tt);
855 		if (status && status != -ENODEV)
856 			dev_err(&hdev->dev,
857 				"clear tt %d (%04x) error %d\n",
858 				clear->tt, clear->devinfo, status);
859 
860 		/* Tell the HCD, even if the operation failed */
861 		drv = clear->hcd->driver;
862 		if (drv->clear_tt_buffer_complete)
863 			(drv->clear_tt_buffer_complete)(clear->hcd, clear->ep);
864 
865 		kfree(clear);
866 		spin_lock_irqsave(&hub->tt.lock, flags);
867 	}
868 	spin_unlock_irqrestore(&hub->tt.lock, flags);
869 }
870 
871 /**
872  * usb_hub_set_port_power - control hub port's power state
873  * @hdev: USB device belonging to the usb hub
874  * @hub: target hub
875  * @port1: port index
876  * @set: expected status
877  *
878  * call this function to control port's power via setting or
879  * clearing the port's PORT_POWER feature.
880  *
881  * Return: 0 if successful. A negative error code otherwise.
882  */
usb_hub_set_port_power(struct usb_device * hdev,struct usb_hub * hub,int port1,bool set)883 int usb_hub_set_port_power(struct usb_device *hdev, struct usb_hub *hub,
884 			   int port1, bool set)
885 {
886 	int ret;
887 
888 	if (set)
889 		ret = set_port_feature(hdev, port1, USB_PORT_FEAT_POWER);
890 	else
891 		ret = usb_clear_port_feature(hdev, port1, USB_PORT_FEAT_POWER);
892 
893 	if (ret)
894 		return ret;
895 
896 	if (set)
897 		set_bit(port1, hub->power_bits);
898 	else
899 		clear_bit(port1, hub->power_bits);
900 	return 0;
901 }
902 
903 /**
904  * usb_hub_clear_tt_buffer - clear control/bulk TT state in high speed hub
905  * @urb: an URB associated with the failed or incomplete split transaction
906  *
907  * High speed HCDs use this to tell the hub driver that some split control or
908  * bulk transaction failed in a way that requires clearing internal state of
909  * a transaction translator.  This is normally detected (and reported) from
910  * interrupt context.
911  *
912  * It may not be possible for that hub to handle additional full (or low)
913  * speed transactions until that state is fully cleared out.
914  *
915  * Return: 0 if successful. A negative error code otherwise.
916  */
usb_hub_clear_tt_buffer(struct urb * urb)917 int usb_hub_clear_tt_buffer(struct urb *urb)
918 {
919 	struct usb_device	*udev = urb->dev;
920 	int			pipe = urb->pipe;
921 	struct usb_tt		*tt = udev->tt;
922 	unsigned long		flags;
923 	struct usb_tt_clear	*clear;
924 
925 	/* we've got to cope with an arbitrary number of pending TT clears,
926 	 * since each TT has "at least two" buffers that can need it (and
927 	 * there can be many TTs per hub).  even if they're uncommon.
928 	 */
929 	clear = kmalloc(sizeof *clear, GFP_ATOMIC);
930 	if (clear == NULL) {
931 		dev_err(&udev->dev, "can't save CLEAR_TT_BUFFER state\n");
932 		/* FIXME recover somehow ... RESET_TT? */
933 		return -ENOMEM;
934 	}
935 
936 	/* info that CLEAR_TT_BUFFER needs */
937 	clear->tt = tt->multi ? udev->ttport : 1;
938 	clear->devinfo = usb_pipeendpoint (pipe);
939 	clear->devinfo |= ((u16)udev->devaddr) << 4;
940 	clear->devinfo |= usb_pipecontrol(pipe)
941 			? (USB_ENDPOINT_XFER_CONTROL << 11)
942 			: (USB_ENDPOINT_XFER_BULK << 11);
943 	if (usb_pipein(pipe))
944 		clear->devinfo |= 1 << 15;
945 
946 	/* info for completion callback */
947 	clear->hcd = bus_to_hcd(udev->bus);
948 	clear->ep = urb->ep;
949 
950 	/* tell keventd to clear state for this TT */
951 	spin_lock_irqsave(&tt->lock, flags);
952 	list_add_tail(&clear->clear_list, &tt->clear_list);
953 	schedule_work(&tt->clear_work);
954 	spin_unlock_irqrestore(&tt->lock, flags);
955 	return 0;
956 }
957 EXPORT_SYMBOL_GPL(usb_hub_clear_tt_buffer);
958 
hub_power_on(struct usb_hub * hub,bool do_delay)959 static void hub_power_on(struct usb_hub *hub, bool do_delay)
960 {
961 	int port1;
962 
963 	/* Enable power on each port.  Some hubs have reserved values
964 	 * of LPSM (> 2) in their descriptors, even though they are
965 	 * USB 2.0 hubs.  Some hubs do not implement port-power switching
966 	 * but only emulate it.  In all cases, the ports won't work
967 	 * unless we send these messages to the hub.
968 	 */
969 	if (hub_is_port_power_switchable(hub))
970 		dev_dbg(hub->intfdev, "enabling power on all ports\n");
971 	else
972 		dev_dbg(hub->intfdev, "trying to enable port power on "
973 				"non-switchable hub\n");
974 	for (port1 = 1; port1 <= hub->hdev->maxchild; port1++)
975 		if (test_bit(port1, hub->power_bits))
976 			set_port_feature(hub->hdev, port1, USB_PORT_FEAT_POWER);
977 		else
978 			usb_clear_port_feature(hub->hdev, port1,
979 						USB_PORT_FEAT_POWER);
980 	if (do_delay)
981 		msleep(hub_power_on_good_delay(hub));
982 }
983 
hub_hub_status(struct usb_hub * hub,u16 * status,u16 * change)984 static int hub_hub_status(struct usb_hub *hub,
985 		u16 *status, u16 *change)
986 {
987 	int ret;
988 
989 	mutex_lock(&hub->status_mutex);
990 	ret = get_hub_status(hub->hdev, &hub->status->hub);
991 	if (ret < 0) {
992 		if (ret != -ENODEV)
993 			dev_err(hub->intfdev,
994 				"%s failed (err = %d)\n", __func__, ret);
995 	} else {
996 		*status = le16_to_cpu(hub->status->hub.wHubStatus);
997 		*change = le16_to_cpu(hub->status->hub.wHubChange);
998 		ret = 0;
999 	}
1000 	mutex_unlock(&hub->status_mutex);
1001 	return ret;
1002 }
1003 
hub_set_port_link_state(struct usb_hub * hub,int port1,unsigned int link_status)1004 static int hub_set_port_link_state(struct usb_hub *hub, int port1,
1005 			unsigned int link_status)
1006 {
1007 	return set_port_feature(hub->hdev,
1008 			port1 | (link_status << 3),
1009 			USB_PORT_FEAT_LINK_STATE);
1010 }
1011 
1012 /*
1013  * Disable a port and mark a logical connect-change event, so that some
1014  * time later hub_wq will disconnect() any existing usb_device on the port
1015  * and will re-enumerate if there actually is a device attached.
1016  */
hub_port_logical_disconnect(struct usb_hub * hub,int port1)1017 static void hub_port_logical_disconnect(struct usb_hub *hub, int port1)
1018 {
1019 	dev_dbg(&hub->ports[port1 - 1]->dev, "logical disconnect\n");
1020 	hub_port_disable(hub, port1, 1);
1021 
1022 	/* FIXME let caller ask to power down the port:
1023 	 *  - some devices won't enumerate without a VBUS power cycle
1024 	 *  - SRP saves power that way
1025 	 *  - ... new call, TBD ...
1026 	 * That's easy if this hub can switch power per-port, and
1027 	 * hub_wq reactivates the port later (timer, SRP, etc).
1028 	 * Powerdown must be optional, because of reset/DFU.
1029 	 */
1030 
1031 	set_bit(port1, hub->change_bits);
1032 	kick_hub_wq(hub);
1033 }
1034 
1035 /**
1036  * usb_remove_device - disable a device's port on its parent hub
1037  * @udev: device to be disabled and removed
1038  * Context: @udev locked, must be able to sleep.
1039  *
1040  * After @udev's port has been disabled, hub_wq is notified and it will
1041  * see that the device has been disconnected.  When the device is
1042  * physically unplugged and something is plugged in, the events will
1043  * be received and processed normally.
1044  *
1045  * Return: 0 if successful. A negative error code otherwise.
1046  */
usb_remove_device(struct usb_device * udev)1047 int usb_remove_device(struct usb_device *udev)
1048 {
1049 	struct usb_hub *hub;
1050 	struct usb_interface *intf;
1051 	int ret;
1052 
1053 	if (!udev->parent)	/* Can't remove a root hub */
1054 		return -EINVAL;
1055 	hub = usb_hub_to_struct_hub(udev->parent);
1056 	intf = to_usb_interface(hub->intfdev);
1057 
1058 	ret = usb_autopm_get_interface(intf);
1059 	if (ret < 0)
1060 		return ret;
1061 
1062 	set_bit(udev->portnum, hub->removed_bits);
1063 	hub_port_logical_disconnect(hub, udev->portnum);
1064 	usb_autopm_put_interface(intf);
1065 	return 0;
1066 }
1067 
1068 enum hub_activation_type {
1069 	HUB_INIT, HUB_INIT2, HUB_INIT3,		/* INITs must come first */
1070 	HUB_POST_RESET, HUB_RESUME, HUB_RESET_RESUME,
1071 };
1072 
1073 static void hub_init_func2(struct work_struct *ws);
1074 static void hub_init_func3(struct work_struct *ws);
1075 
hub_activate(struct usb_hub * hub,enum hub_activation_type type)1076 static void hub_activate(struct usb_hub *hub, enum hub_activation_type type)
1077 {
1078 	struct usb_device *hdev = hub->hdev;
1079 	struct usb_hcd *hcd;
1080 	int ret;
1081 	int port1;
1082 	int status;
1083 	bool need_debounce_delay = false;
1084 	unsigned delay;
1085 
1086 	/* Continue a partial initialization */
1087 	if (type == HUB_INIT2 || type == HUB_INIT3) {
1088 		device_lock(&hdev->dev);
1089 
1090 		/* Was the hub disconnected while we were waiting? */
1091 		if (hub->disconnected)
1092 			goto disconnected;
1093 		if (type == HUB_INIT2)
1094 			goto init2;
1095 		goto init3;
1096 	}
1097 	hub_get(hub);
1098 
1099 	/* The superspeed hub except for root hub has to use Hub Depth
1100 	 * value as an offset into the route string to locate the bits
1101 	 * it uses to determine the downstream port number. So hub driver
1102 	 * should send a set hub depth request to superspeed hub after
1103 	 * the superspeed hub is set configuration in initialization or
1104 	 * reset procedure.
1105 	 *
1106 	 * After a resume, port power should still be on.
1107 	 * For any other type of activation, turn it on.
1108 	 */
1109 	if (type != HUB_RESUME) {
1110 		if (hdev->parent && hub_is_superspeed(hdev)) {
1111 			ret = usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
1112 					HUB_SET_DEPTH, USB_RT_HUB,
1113 					hdev->level - 1, 0, NULL, 0,
1114 					USB_CTRL_SET_TIMEOUT);
1115 			if (ret < 0)
1116 				dev_err(hub->intfdev,
1117 						"set hub depth failed\n");
1118 		}
1119 
1120 		/* Speed up system boot by using a delayed_work for the
1121 		 * hub's initial power-up delays.  This is pretty awkward
1122 		 * and the implementation looks like a home-brewed sort of
1123 		 * setjmp/longjmp, but it saves at least 100 ms for each
1124 		 * root hub (assuming usbcore is compiled into the kernel
1125 		 * rather than as a module).  It adds up.
1126 		 *
1127 		 * This can't be done for HUB_RESUME or HUB_RESET_RESUME
1128 		 * because for those activation types the ports have to be
1129 		 * operational when we return.  In theory this could be done
1130 		 * for HUB_POST_RESET, but it's easier not to.
1131 		 */
1132 		if (type == HUB_INIT) {
1133 			delay = hub_power_on_good_delay(hub);
1134 
1135 			hub_power_on(hub, false);
1136 			INIT_DELAYED_WORK(&hub->init_work, hub_init_func2);
1137 			queue_delayed_work(system_power_efficient_wq,
1138 					&hub->init_work,
1139 					msecs_to_jiffies(delay));
1140 
1141 			/* Suppress autosuspend until init is done */
1142 			usb_autopm_get_interface_no_resume(
1143 					to_usb_interface(hub->intfdev));
1144 			return;		/* Continues at init2: below */
1145 		} else if (type == HUB_RESET_RESUME) {
1146 			/* The internal host controller state for the hub device
1147 			 * may be gone after a host power loss on system resume.
1148 			 * Update the device's info so the HW knows it's a hub.
1149 			 */
1150 			hcd = bus_to_hcd(hdev->bus);
1151 			if (hcd->driver->update_hub_device) {
1152 				ret = hcd->driver->update_hub_device(hcd, hdev,
1153 						&hub->tt, GFP_NOIO);
1154 				if (ret < 0) {
1155 					dev_err(hub->intfdev,
1156 						"Host not accepting hub info update\n");
1157 					dev_err(hub->intfdev,
1158 						"LS/FS devices and hubs may not work under this hub\n");
1159 				}
1160 			}
1161 			hub_power_on(hub, true);
1162 		} else {
1163 			hub_power_on(hub, true);
1164 		}
1165 	/* Give some time on remote wakeup to let links to transit to U0 */
1166 	} else if (hub_is_superspeed(hub->hdev))
1167 		msleep(20);
1168 
1169  init2:
1170 
1171 	/*
1172 	 * Check each port and set hub->change_bits to let hub_wq know
1173 	 * which ports need attention.
1174 	 */
1175 	for (port1 = 1; port1 <= hdev->maxchild; ++port1) {
1176 		struct usb_port *port_dev = hub->ports[port1 - 1];
1177 		struct usb_device *udev = port_dev->child;
1178 		u16 portstatus, portchange;
1179 
1180 		portstatus = portchange = 0;
1181 		status = usb_hub_port_status(hub, port1, &portstatus, &portchange);
1182 		if (status)
1183 			goto abort;
1184 
1185 		if (udev || (portstatus & USB_PORT_STAT_CONNECTION))
1186 			dev_dbg(&port_dev->dev, "status %04x change %04x\n",
1187 					portstatus, portchange);
1188 
1189 		/*
1190 		 * After anything other than HUB_RESUME (i.e., initialization
1191 		 * or any sort of reset), every port should be disabled.
1192 		 * Unconnected ports should likewise be disabled (paranoia),
1193 		 * and so should ports for which we have no usb_device.
1194 		 */
1195 		if ((portstatus & USB_PORT_STAT_ENABLE) && (
1196 				type != HUB_RESUME ||
1197 				!(portstatus & USB_PORT_STAT_CONNECTION) ||
1198 				!udev ||
1199 				udev->state == USB_STATE_NOTATTACHED)) {
1200 			/*
1201 			 * USB3 protocol ports will automatically transition
1202 			 * to Enabled state when detect an USB3.0 device attach.
1203 			 * Do not disable USB3 protocol ports, just pretend
1204 			 * power was lost
1205 			 */
1206 			portstatus &= ~USB_PORT_STAT_ENABLE;
1207 			if (!hub_is_superspeed(hdev))
1208 				usb_clear_port_feature(hdev, port1,
1209 						   USB_PORT_FEAT_ENABLE);
1210 		}
1211 
1212 		/* Make sure a warm-reset request is handled by port_event */
1213 		if (type == HUB_RESUME &&
1214 		    hub_port_warm_reset_required(hub, port1, portstatus))
1215 			set_bit(port1, hub->event_bits);
1216 
1217 		/*
1218 		 * Add debounce if USB3 link is in polling/link training state.
1219 		 * Link will automatically transition to Enabled state after
1220 		 * link training completes.
1221 		 */
1222 		if (hub_is_superspeed(hdev) &&
1223 		    ((portstatus & USB_PORT_STAT_LINK_STATE) ==
1224 						USB_SS_PORT_LS_POLLING))
1225 			need_debounce_delay = true;
1226 
1227 		/* Clear status-change flags; we'll debounce later */
1228 		if (portchange & USB_PORT_STAT_C_CONNECTION) {
1229 			need_debounce_delay = true;
1230 			usb_clear_port_feature(hub->hdev, port1,
1231 					USB_PORT_FEAT_C_CONNECTION);
1232 		}
1233 		if (portchange & USB_PORT_STAT_C_ENABLE) {
1234 			need_debounce_delay = true;
1235 			usb_clear_port_feature(hub->hdev, port1,
1236 					USB_PORT_FEAT_C_ENABLE);
1237 		}
1238 		if (portchange & USB_PORT_STAT_C_RESET) {
1239 			need_debounce_delay = true;
1240 			usb_clear_port_feature(hub->hdev, port1,
1241 					USB_PORT_FEAT_C_RESET);
1242 		}
1243 		if ((portchange & USB_PORT_STAT_C_BH_RESET) &&
1244 				hub_is_superspeed(hub->hdev)) {
1245 			need_debounce_delay = true;
1246 			usb_clear_port_feature(hub->hdev, port1,
1247 					USB_PORT_FEAT_C_BH_PORT_RESET);
1248 		}
1249 		/* We can forget about a "removed" device when there's a
1250 		 * physical disconnect or the connect status changes.
1251 		 */
1252 		if (!(portstatus & USB_PORT_STAT_CONNECTION) ||
1253 				(portchange & USB_PORT_STAT_C_CONNECTION))
1254 			clear_bit(port1, hub->removed_bits);
1255 
1256 		if (!udev || udev->state == USB_STATE_NOTATTACHED) {
1257 			/* Tell hub_wq to disconnect the device or
1258 			 * check for a new connection or over current condition.
1259 			 * Based on USB2.0 Spec Section 11.12.5,
1260 			 * C_PORT_OVER_CURRENT could be set while
1261 			 * PORT_OVER_CURRENT is not. So check for any of them.
1262 			 */
1263 			if (udev || (portstatus & USB_PORT_STAT_CONNECTION) ||
1264 			    (portchange & USB_PORT_STAT_C_CONNECTION) ||
1265 			    (portstatus & USB_PORT_STAT_OVERCURRENT) ||
1266 			    (portchange & USB_PORT_STAT_C_OVERCURRENT))
1267 				set_bit(port1, hub->change_bits);
1268 
1269 		} else if (portstatus & USB_PORT_STAT_ENABLE) {
1270 			bool port_resumed = (portstatus &
1271 					USB_PORT_STAT_LINK_STATE) ==
1272 				USB_SS_PORT_LS_U0;
1273 			/* The power session apparently survived the resume.
1274 			 * If there was an overcurrent or suspend change
1275 			 * (i.e., remote wakeup request), have hub_wq
1276 			 * take care of it.  Look at the port link state
1277 			 * for USB 3.0 hubs, since they don't have a suspend
1278 			 * change bit, and they don't set the port link change
1279 			 * bit on device-initiated resume.
1280 			 */
1281 			if (portchange || (hub_is_superspeed(hub->hdev) &&
1282 						port_resumed))
1283 				set_bit(port1, hub->event_bits);
1284 
1285 		} else if (udev->persist_enabled) {
1286 #ifdef CONFIG_PM
1287 			udev->reset_resume = 1;
1288 #endif
1289 			/* Don't set the change_bits when the device
1290 			 * was powered off.
1291 			 */
1292 			if (test_bit(port1, hub->power_bits))
1293 				set_bit(port1, hub->change_bits);
1294 
1295 		} else {
1296 			/* The power session is gone; tell hub_wq */
1297 			usb_set_device_state(udev, USB_STATE_NOTATTACHED);
1298 			set_bit(port1, hub->change_bits);
1299 		}
1300 	}
1301 
1302 	/* If no port-status-change flags were set, we don't need any
1303 	 * debouncing.  If flags were set we can try to debounce the
1304 	 * ports all at once right now, instead of letting hub_wq do them
1305 	 * one at a time later on.
1306 	 *
1307 	 * If any port-status changes do occur during this delay, hub_wq
1308 	 * will see them later and handle them normally.
1309 	 */
1310 	if (need_debounce_delay) {
1311 		delay = HUB_DEBOUNCE_STABLE;
1312 
1313 		/* Don't do a long sleep inside a workqueue routine */
1314 		if (type == HUB_INIT2) {
1315 			INIT_DELAYED_WORK(&hub->init_work, hub_init_func3);
1316 			queue_delayed_work(system_power_efficient_wq,
1317 					&hub->init_work,
1318 					msecs_to_jiffies(delay));
1319 			device_unlock(&hdev->dev);
1320 			return;		/* Continues at init3: below */
1321 		} else {
1322 			msleep(delay);
1323 		}
1324 	}
1325  init3:
1326 	hub->quiescing = 0;
1327 
1328 	status = usb_submit_urb(hub->urb, GFP_NOIO);
1329 	if (status < 0)
1330 		dev_err(hub->intfdev, "activate --> %d\n", status);
1331 	if (hub->has_indicators && blinkenlights)
1332 		queue_delayed_work(system_power_efficient_wq,
1333 				&hub->leds, LED_CYCLE_PERIOD);
1334 
1335 	/* Scan all ports that need attention */
1336 	kick_hub_wq(hub);
1337  abort:
1338 	if (type == HUB_INIT2 || type == HUB_INIT3) {
1339 		/* Allow autosuspend if it was suppressed */
1340  disconnected:
1341 		usb_autopm_put_interface_async(to_usb_interface(hub->intfdev));
1342 		device_unlock(&hdev->dev);
1343 	}
1344 
1345 	hub_put(hub);
1346 }
1347 
1348 /* Implement the continuations for the delays above */
hub_init_func2(struct work_struct * ws)1349 static void hub_init_func2(struct work_struct *ws)
1350 {
1351 	struct usb_hub *hub = container_of(ws, struct usb_hub, init_work.work);
1352 
1353 	hub_activate(hub, HUB_INIT2);
1354 }
1355 
hub_init_func3(struct work_struct * ws)1356 static void hub_init_func3(struct work_struct *ws)
1357 {
1358 	struct usb_hub *hub = container_of(ws, struct usb_hub, init_work.work);
1359 
1360 	hub_activate(hub, HUB_INIT3);
1361 }
1362 
1363 enum hub_quiescing_type {
1364 	HUB_DISCONNECT, HUB_PRE_RESET, HUB_SUSPEND
1365 };
1366 
hub_quiesce(struct usb_hub * hub,enum hub_quiescing_type type)1367 static void hub_quiesce(struct usb_hub *hub, enum hub_quiescing_type type)
1368 {
1369 	struct usb_device *hdev = hub->hdev;
1370 	unsigned long flags;
1371 	int i;
1372 
1373 	/* hub_wq and related activity won't re-trigger */
1374 	spin_lock_irqsave(&hub->irq_urb_lock, flags);
1375 	hub->quiescing = 1;
1376 	spin_unlock_irqrestore(&hub->irq_urb_lock, flags);
1377 
1378 	if (type != HUB_SUSPEND) {
1379 		/* Disconnect all the children */
1380 		for (i = 0; i < hdev->maxchild; ++i) {
1381 			if (hub->ports[i]->child)
1382 				usb_disconnect(&hub->ports[i]->child);
1383 		}
1384 	}
1385 
1386 	/* Stop hub_wq and related activity */
1387 	del_timer_sync(&hub->irq_urb_retry);
1388 	usb_kill_urb(hub->urb);
1389 	if (hub->has_indicators)
1390 		cancel_delayed_work_sync(&hub->leds);
1391 	if (hub->tt.hub)
1392 		flush_work(&hub->tt.clear_work);
1393 }
1394 
hub_pm_barrier_for_all_ports(struct usb_hub * hub)1395 static void hub_pm_barrier_for_all_ports(struct usb_hub *hub)
1396 {
1397 	int i;
1398 
1399 	for (i = 0; i < hub->hdev->maxchild; ++i)
1400 		pm_runtime_barrier(&hub->ports[i]->dev);
1401 }
1402 
1403 /* caller has locked the hub device */
hub_pre_reset(struct usb_interface * intf)1404 static int hub_pre_reset(struct usb_interface *intf)
1405 {
1406 	struct usb_hub *hub = usb_get_intfdata(intf);
1407 
1408 	hub_quiesce(hub, HUB_PRE_RESET);
1409 	hub->in_reset = 1;
1410 	hub_pm_barrier_for_all_ports(hub);
1411 	return 0;
1412 }
1413 
1414 /* caller has locked the hub device */
hub_post_reset(struct usb_interface * intf)1415 static int hub_post_reset(struct usb_interface *intf)
1416 {
1417 	struct usb_hub *hub = usb_get_intfdata(intf);
1418 
1419 	hub->in_reset = 0;
1420 	hub_pm_barrier_for_all_ports(hub);
1421 	hub_activate(hub, HUB_POST_RESET);
1422 	return 0;
1423 }
1424 
hub_configure(struct usb_hub * hub,struct usb_endpoint_descriptor * endpoint)1425 static int hub_configure(struct usb_hub *hub,
1426 	struct usb_endpoint_descriptor *endpoint)
1427 {
1428 	struct usb_hcd *hcd;
1429 	struct usb_device *hdev = hub->hdev;
1430 	struct device *hub_dev = hub->intfdev;
1431 	u16 hubstatus, hubchange;
1432 	u16 wHubCharacteristics;
1433 	unsigned int pipe;
1434 	int maxp, ret, i;
1435 	char *message = "out of memory";
1436 	unsigned unit_load;
1437 	unsigned full_load;
1438 	unsigned maxchild;
1439 
1440 	hub->buffer = kmalloc(sizeof(*hub->buffer), GFP_KERNEL);
1441 	if (!hub->buffer) {
1442 		ret = -ENOMEM;
1443 		goto fail;
1444 	}
1445 
1446 	hub->status = kmalloc(sizeof(*hub->status), GFP_KERNEL);
1447 	if (!hub->status) {
1448 		ret = -ENOMEM;
1449 		goto fail;
1450 	}
1451 	mutex_init(&hub->status_mutex);
1452 
1453 	hub->descriptor = kzalloc(sizeof(*hub->descriptor), GFP_KERNEL);
1454 	if (!hub->descriptor) {
1455 		ret = -ENOMEM;
1456 		goto fail;
1457 	}
1458 
1459 	/* Request the entire hub descriptor.
1460 	 * hub->descriptor can handle USB_MAXCHILDREN ports,
1461 	 * but a (non-SS) hub can/will return fewer bytes here.
1462 	 */
1463 	ret = get_hub_descriptor(hdev, hub->descriptor);
1464 	if (ret < 0) {
1465 		message = "can't read hub descriptor";
1466 		goto fail;
1467 	}
1468 
1469 	maxchild = USB_MAXCHILDREN;
1470 	if (hub_is_superspeed(hdev))
1471 		maxchild = min_t(unsigned, maxchild, USB_SS_MAXPORTS);
1472 
1473 	if (hub->descriptor->bNbrPorts > maxchild) {
1474 		message = "hub has too many ports!";
1475 		ret = -ENODEV;
1476 		goto fail;
1477 	} else if (hub->descriptor->bNbrPorts == 0) {
1478 		message = "hub doesn't have any ports!";
1479 		ret = -ENODEV;
1480 		goto fail;
1481 	}
1482 
1483 	/*
1484 	 * Accumulate wHubDelay + 40ns for every hub in the tree of devices.
1485 	 * The resulting value will be used for SetIsochDelay() request.
1486 	 */
1487 	if (hub_is_superspeed(hdev) || hub_is_superspeedplus(hdev)) {
1488 		u32 delay = __le16_to_cpu(hub->descriptor->u.ss.wHubDelay);
1489 
1490 		if (hdev->parent)
1491 			delay += hdev->parent->hub_delay;
1492 
1493 		delay += USB_TP_TRANSMISSION_DELAY;
1494 		hdev->hub_delay = min_t(u32, delay, USB_TP_TRANSMISSION_DELAY_MAX);
1495 	}
1496 
1497 	maxchild = hub->descriptor->bNbrPorts;
1498 	dev_info(hub_dev, "%d port%s detected\n", maxchild,
1499 			(maxchild == 1) ? "" : "s");
1500 
1501 	hub->ports = kcalloc(maxchild, sizeof(struct usb_port *), GFP_KERNEL);
1502 	if (!hub->ports) {
1503 		ret = -ENOMEM;
1504 		goto fail;
1505 	}
1506 
1507 	wHubCharacteristics = le16_to_cpu(hub->descriptor->wHubCharacteristics);
1508 	if (hub_is_superspeed(hdev)) {
1509 		unit_load = 150;
1510 		full_load = 900;
1511 	} else {
1512 		unit_load = 100;
1513 		full_load = 500;
1514 	}
1515 
1516 	/* FIXME for USB 3.0, skip for now */
1517 	if ((wHubCharacteristics & HUB_CHAR_COMPOUND) &&
1518 			!(hub_is_superspeed(hdev))) {
1519 		char	portstr[USB_MAXCHILDREN + 1];
1520 
1521 		for (i = 0; i < maxchild; i++)
1522 			portstr[i] = hub->descriptor->u.hs.DeviceRemovable
1523 				    [((i + 1) / 8)] & (1 << ((i + 1) % 8))
1524 				? 'F' : 'R';
1525 		portstr[maxchild] = 0;
1526 		dev_dbg(hub_dev, "compound device; port removable status: %s\n", portstr);
1527 	} else
1528 		dev_dbg(hub_dev, "standalone hub\n");
1529 
1530 	switch (wHubCharacteristics & HUB_CHAR_LPSM) {
1531 	case HUB_CHAR_COMMON_LPSM:
1532 		dev_dbg(hub_dev, "ganged power switching\n");
1533 		break;
1534 	case HUB_CHAR_INDV_PORT_LPSM:
1535 		dev_dbg(hub_dev, "individual port power switching\n");
1536 		break;
1537 	case HUB_CHAR_NO_LPSM:
1538 	case HUB_CHAR_LPSM:
1539 		dev_dbg(hub_dev, "no power switching (usb 1.0)\n");
1540 		break;
1541 	}
1542 
1543 	switch (wHubCharacteristics & HUB_CHAR_OCPM) {
1544 	case HUB_CHAR_COMMON_OCPM:
1545 		dev_dbg(hub_dev, "global over-current protection\n");
1546 		break;
1547 	case HUB_CHAR_INDV_PORT_OCPM:
1548 		dev_dbg(hub_dev, "individual port over-current protection\n");
1549 		break;
1550 	case HUB_CHAR_NO_OCPM:
1551 	case HUB_CHAR_OCPM:
1552 		dev_dbg(hub_dev, "no over-current protection\n");
1553 		break;
1554 	}
1555 
1556 	spin_lock_init(&hub->tt.lock);
1557 	INIT_LIST_HEAD(&hub->tt.clear_list);
1558 	INIT_WORK(&hub->tt.clear_work, hub_tt_work);
1559 	switch (hdev->descriptor.bDeviceProtocol) {
1560 	case USB_HUB_PR_FS:
1561 		break;
1562 	case USB_HUB_PR_HS_SINGLE_TT:
1563 		dev_dbg(hub_dev, "Single TT\n");
1564 		hub->tt.hub = hdev;
1565 		break;
1566 	case USB_HUB_PR_HS_MULTI_TT:
1567 		ret = usb_set_interface(hdev, 0, 1);
1568 		if (ret == 0) {
1569 			dev_dbg(hub_dev, "TT per port\n");
1570 			hub->tt.multi = 1;
1571 		} else
1572 			dev_err(hub_dev, "Using single TT (err %d)\n",
1573 				ret);
1574 		hub->tt.hub = hdev;
1575 		break;
1576 	case USB_HUB_PR_SS:
1577 		/* USB 3.0 hubs don't have a TT */
1578 		break;
1579 	default:
1580 		dev_dbg(hub_dev, "Unrecognized hub protocol %d\n",
1581 			hdev->descriptor.bDeviceProtocol);
1582 		break;
1583 	}
1584 
1585 	/* Note 8 FS bit times == (8 bits / 12000000 bps) ~= 666ns */
1586 	switch (wHubCharacteristics & HUB_CHAR_TTTT) {
1587 	case HUB_TTTT_8_BITS:
1588 		if (hdev->descriptor.bDeviceProtocol != 0) {
1589 			hub->tt.think_time = 666;
1590 			dev_dbg(hub_dev, "TT requires at most %d "
1591 					"FS bit times (%d ns)\n",
1592 				8, hub->tt.think_time);
1593 		}
1594 		break;
1595 	case HUB_TTTT_16_BITS:
1596 		hub->tt.think_time = 666 * 2;
1597 		dev_dbg(hub_dev, "TT requires at most %d "
1598 				"FS bit times (%d ns)\n",
1599 			16, hub->tt.think_time);
1600 		break;
1601 	case HUB_TTTT_24_BITS:
1602 		hub->tt.think_time = 666 * 3;
1603 		dev_dbg(hub_dev, "TT requires at most %d "
1604 				"FS bit times (%d ns)\n",
1605 			24, hub->tt.think_time);
1606 		break;
1607 	case HUB_TTTT_32_BITS:
1608 		hub->tt.think_time = 666 * 4;
1609 		dev_dbg(hub_dev, "TT requires at most %d "
1610 				"FS bit times (%d ns)\n",
1611 			32, hub->tt.think_time);
1612 		break;
1613 	}
1614 
1615 	/* probe() zeroes hub->indicator[] */
1616 	if (wHubCharacteristics & HUB_CHAR_PORTIND) {
1617 		hub->has_indicators = 1;
1618 		dev_dbg(hub_dev, "Port indicators are supported\n");
1619 	}
1620 
1621 	dev_dbg(hub_dev, "power on to power good time: %dms\n",
1622 		hub->descriptor->bPwrOn2PwrGood * 2);
1623 
1624 	/* power budgeting mostly matters with bus-powered hubs,
1625 	 * and battery-powered root hubs (may provide just 8 mA).
1626 	 */
1627 	ret = usb_get_std_status(hdev, USB_RECIP_DEVICE, 0, &hubstatus);
1628 	if (ret) {
1629 		message = "can't get hub status";
1630 		goto fail;
1631 	}
1632 	hcd = bus_to_hcd(hdev->bus);
1633 	if (hdev == hdev->bus->root_hub) {
1634 		if (hcd->power_budget > 0)
1635 			hdev->bus_mA = hcd->power_budget;
1636 		else
1637 			hdev->bus_mA = full_load * maxchild;
1638 		if (hdev->bus_mA >= full_load)
1639 			hub->mA_per_port = full_load;
1640 		else {
1641 			hub->mA_per_port = hdev->bus_mA;
1642 			hub->limited_power = 1;
1643 		}
1644 	} else if ((hubstatus & (1 << USB_DEVICE_SELF_POWERED)) == 0) {
1645 		int remaining = hdev->bus_mA -
1646 			hub->descriptor->bHubContrCurrent;
1647 
1648 		dev_dbg(hub_dev, "hub controller current requirement: %dmA\n",
1649 			hub->descriptor->bHubContrCurrent);
1650 		hub->limited_power = 1;
1651 
1652 		if (remaining < maxchild * unit_load)
1653 			dev_warn(hub_dev,
1654 					"insufficient power available "
1655 					"to use all downstream ports\n");
1656 		hub->mA_per_port = unit_load;	/* 7.2.1 */
1657 
1658 	} else {	/* Self-powered external hub */
1659 		/* FIXME: What about battery-powered external hubs that
1660 		 * provide less current per port? */
1661 		hub->mA_per_port = full_load;
1662 	}
1663 	if (hub->mA_per_port < full_load)
1664 		dev_dbg(hub_dev, "%umA bus power budget for each child\n",
1665 				hub->mA_per_port);
1666 
1667 	ret = hub_hub_status(hub, &hubstatus, &hubchange);
1668 	if (ret < 0) {
1669 		message = "can't get hub status";
1670 		goto fail;
1671 	}
1672 
1673 	/* local power status reports aren't always correct */
1674 	if (hdev->actconfig->desc.bmAttributes & USB_CONFIG_ATT_SELFPOWER)
1675 		dev_dbg(hub_dev, "local power source is %s\n",
1676 			(hubstatus & HUB_STATUS_LOCAL_POWER)
1677 			? "lost (inactive)" : "good");
1678 
1679 	if ((wHubCharacteristics & HUB_CHAR_OCPM) == 0)
1680 		dev_dbg(hub_dev, "%sover-current condition exists\n",
1681 			(hubstatus & HUB_STATUS_OVERCURRENT) ? "" : "no ");
1682 
1683 	/* set up the interrupt endpoint
1684 	 * We use the EP's maxpacket size instead of (PORTS+1+7)/8
1685 	 * bytes as USB2.0[11.12.3] says because some hubs are known
1686 	 * to send more data (and thus cause overflow). For root hubs,
1687 	 * maxpktsize is defined in hcd.c's fake endpoint descriptors
1688 	 * to be big enough for at least USB_MAXCHILDREN ports. */
1689 	pipe = usb_rcvintpipe(hdev, endpoint->bEndpointAddress);
1690 	maxp = usb_maxpacket(hdev, pipe);
1691 
1692 	if (maxp > sizeof(*hub->buffer))
1693 		maxp = sizeof(*hub->buffer);
1694 
1695 	hub->urb = usb_alloc_urb(0, GFP_KERNEL);
1696 	if (!hub->urb) {
1697 		ret = -ENOMEM;
1698 		goto fail;
1699 	}
1700 
1701 	usb_fill_int_urb(hub->urb, hdev, pipe, *hub->buffer, maxp, hub_irq,
1702 		hub, endpoint->bInterval);
1703 
1704 	/* maybe cycle the hub leds */
1705 	if (hub->has_indicators && blinkenlights)
1706 		hub->indicator[0] = INDICATOR_CYCLE;
1707 
1708 	mutex_lock(&usb_port_peer_mutex);
1709 	for (i = 0; i < maxchild; i++) {
1710 		ret = usb_hub_create_port_device(hub, i + 1);
1711 		if (ret < 0) {
1712 			dev_err(hub->intfdev,
1713 				"couldn't create port%d device.\n", i + 1);
1714 			break;
1715 		}
1716 	}
1717 	hdev->maxchild = i;
1718 	for (i = 0; i < hdev->maxchild; i++) {
1719 		struct usb_port *port_dev = hub->ports[i];
1720 
1721 		pm_runtime_put(&port_dev->dev);
1722 	}
1723 
1724 	mutex_unlock(&usb_port_peer_mutex);
1725 	if (ret < 0)
1726 		goto fail;
1727 
1728 	/* Update the HCD's internal representation of this hub before hub_wq
1729 	 * starts getting port status changes for devices under the hub.
1730 	 */
1731 	if (hcd->driver->update_hub_device) {
1732 		ret = hcd->driver->update_hub_device(hcd, hdev,
1733 				&hub->tt, GFP_KERNEL);
1734 		if (ret < 0) {
1735 			message = "can't update HCD hub info";
1736 			goto fail;
1737 		}
1738 	}
1739 
1740 	usb_hub_adjust_deviceremovable(hdev, hub->descriptor);
1741 
1742 	hub_activate(hub, HUB_INIT);
1743 	return 0;
1744 
1745 fail:
1746 	dev_err(hub_dev, "config failed, %s (err %d)\n",
1747 			message, ret);
1748 	/* hub_disconnect() frees urb and descriptor */
1749 	return ret;
1750 }
1751 
hub_release(struct kref * kref)1752 static void hub_release(struct kref *kref)
1753 {
1754 	struct usb_hub *hub = container_of(kref, struct usb_hub, kref);
1755 
1756 	usb_put_dev(hub->hdev);
1757 	usb_put_intf(to_usb_interface(hub->intfdev));
1758 	kfree(hub);
1759 }
1760 
hub_get(struct usb_hub * hub)1761 void hub_get(struct usb_hub *hub)
1762 {
1763 	kref_get(&hub->kref);
1764 }
1765 
hub_put(struct usb_hub * hub)1766 void hub_put(struct usb_hub *hub)
1767 {
1768 	kref_put(&hub->kref, hub_release);
1769 }
1770 
1771 static unsigned highspeed_hubs;
1772 
hub_disconnect(struct usb_interface * intf)1773 static void hub_disconnect(struct usb_interface *intf)
1774 {
1775 	struct usb_hub *hub = usb_get_intfdata(intf);
1776 	struct usb_device *hdev = interface_to_usbdev(intf);
1777 	int port1;
1778 
1779 	/*
1780 	 * Stop adding new hub events. We do not want to block here and thus
1781 	 * will not try to remove any pending work item.
1782 	 */
1783 	hub->disconnected = 1;
1784 
1785 	/* Disconnect all children and quiesce the hub */
1786 	hub->error = 0;
1787 	hub_quiesce(hub, HUB_DISCONNECT);
1788 
1789 	mutex_lock(&usb_port_peer_mutex);
1790 
1791 	/* Avoid races with recursively_mark_NOTATTACHED() */
1792 	spin_lock_irq(&device_state_lock);
1793 	port1 = hdev->maxchild;
1794 	hdev->maxchild = 0;
1795 	usb_set_intfdata(intf, NULL);
1796 	spin_unlock_irq(&device_state_lock);
1797 
1798 	for (; port1 > 0; --port1)
1799 		usb_hub_remove_port_device(hub, port1);
1800 
1801 	mutex_unlock(&usb_port_peer_mutex);
1802 
1803 	if (hub->hdev->speed == USB_SPEED_HIGH)
1804 		highspeed_hubs--;
1805 
1806 	usb_free_urb(hub->urb);
1807 	kfree(hub->ports);
1808 	kfree(hub->descriptor);
1809 	kfree(hub->status);
1810 	kfree(hub->buffer);
1811 
1812 	pm_suspend_ignore_children(&intf->dev, false);
1813 
1814 	if (hub->quirk_disable_autosuspend)
1815 		usb_autopm_put_interface(intf);
1816 
1817 	onboard_dev_destroy_pdevs(&hub->onboard_devs);
1818 
1819 	hub_put(hub);
1820 }
1821 
hub_descriptor_is_sane(struct usb_host_interface * desc)1822 static bool hub_descriptor_is_sane(struct usb_host_interface *desc)
1823 {
1824 	/* Some hubs have a subclass of 1, which AFAICT according to the */
1825 	/*  specs is not defined, but it works */
1826 	if (desc->desc.bInterfaceSubClass != 0 &&
1827 	    desc->desc.bInterfaceSubClass != 1)
1828 		return false;
1829 
1830 	/* Multiple endpoints? What kind of mutant ninja-hub is this? */
1831 	if (desc->desc.bNumEndpoints != 1)
1832 		return false;
1833 
1834 	/* If the first endpoint is not interrupt IN, we'd better punt! */
1835 	if (!usb_endpoint_is_int_in(&desc->endpoint[0].desc))
1836 		return false;
1837 
1838         return true;
1839 }
1840 
hub_probe(struct usb_interface * intf,const struct usb_device_id * id)1841 static int hub_probe(struct usb_interface *intf, const struct usb_device_id *id)
1842 {
1843 	struct usb_host_interface *desc;
1844 	struct usb_device *hdev;
1845 	struct usb_hub *hub;
1846 
1847 	desc = intf->cur_altsetting;
1848 	hdev = interface_to_usbdev(intf);
1849 
1850 	/*
1851 	 * Set default autosuspend delay as 0 to speedup bus suspend,
1852 	 * based on the below considerations:
1853 	 *
1854 	 * - Unlike other drivers, the hub driver does not rely on the
1855 	 *   autosuspend delay to provide enough time to handle a wakeup
1856 	 *   event, and the submitted status URB is just to check future
1857 	 *   change on hub downstream ports, so it is safe to do it.
1858 	 *
1859 	 * - The patch might cause one or more auto supend/resume for
1860 	 *   below very rare devices when they are plugged into hub
1861 	 *   first time:
1862 	 *
1863 	 *   	devices having trouble initializing, and disconnect
1864 	 *   	themselves from the bus and then reconnect a second
1865 	 *   	or so later
1866 	 *
1867 	 *   	devices just for downloading firmware, and disconnects
1868 	 *   	themselves after completing it
1869 	 *
1870 	 *   For these quite rare devices, their drivers may change the
1871 	 *   autosuspend delay of their parent hub in the probe() to one
1872 	 *   appropriate value to avoid the subtle problem if someone
1873 	 *   does care it.
1874 	 *
1875 	 * - The patch may cause one or more auto suspend/resume on
1876 	 *   hub during running 'lsusb', but it is probably too
1877 	 *   infrequent to worry about.
1878 	 *
1879 	 * - Change autosuspend delay of hub can avoid unnecessary auto
1880 	 *   suspend timer for hub, also may decrease power consumption
1881 	 *   of USB bus.
1882 	 *
1883 	 * - If user has indicated to prevent autosuspend by passing
1884 	 *   usbcore.autosuspend = -1 then keep autosuspend disabled.
1885 	 */
1886 #ifdef CONFIG_PM
1887 	if (hdev->dev.power.autosuspend_delay >= 0)
1888 		pm_runtime_set_autosuspend_delay(&hdev->dev, 0);
1889 #endif
1890 
1891 	/*
1892 	 * Hubs have proper suspend/resume support, except for root hubs
1893 	 * where the controller driver doesn't have bus_suspend and
1894 	 * bus_resume methods.
1895 	 */
1896 	if (hdev->parent) {		/* normal device */
1897 		usb_enable_autosuspend(hdev);
1898 	} else {			/* root hub */
1899 		const struct hc_driver *drv = bus_to_hcd(hdev->bus)->driver;
1900 
1901 		if (drv->bus_suspend && drv->bus_resume)
1902 			usb_enable_autosuspend(hdev);
1903 	}
1904 
1905 	if (hdev->level == MAX_TOPO_LEVEL) {
1906 		dev_err(&intf->dev,
1907 			"Unsupported bus topology: hub nested too deep\n");
1908 		return -E2BIG;
1909 	}
1910 
1911 #ifdef	CONFIG_USB_OTG_DISABLE_EXTERNAL_HUB
1912 	if (hdev->parent) {
1913 		dev_warn(&intf->dev, "ignoring external hub\n");
1914 		return -ENODEV;
1915 	}
1916 #endif
1917 
1918 	if (!hub_descriptor_is_sane(desc)) {
1919 		dev_err(&intf->dev, "bad descriptor, ignoring hub\n");
1920 		return -EIO;
1921 	}
1922 
1923 	/* We found a hub */
1924 	dev_info(&intf->dev, "USB hub found\n");
1925 
1926 	hub = kzalloc(sizeof(*hub), GFP_KERNEL);
1927 	if (!hub)
1928 		return -ENOMEM;
1929 
1930 	kref_init(&hub->kref);
1931 	hub->intfdev = &intf->dev;
1932 	hub->hdev = hdev;
1933 	INIT_DELAYED_WORK(&hub->leds, led_work);
1934 	INIT_DELAYED_WORK(&hub->init_work, NULL);
1935 	INIT_WORK(&hub->events, hub_event);
1936 	INIT_LIST_HEAD(&hub->onboard_devs);
1937 	spin_lock_init(&hub->irq_urb_lock);
1938 	timer_setup(&hub->irq_urb_retry, hub_retry_irq_urb, 0);
1939 	usb_get_intf(intf);
1940 	usb_get_dev(hdev);
1941 
1942 	usb_set_intfdata(intf, hub);
1943 	intf->needs_remote_wakeup = 1;
1944 	pm_suspend_ignore_children(&intf->dev, true);
1945 
1946 	if (hdev->speed == USB_SPEED_HIGH)
1947 		highspeed_hubs++;
1948 
1949 	if (id->driver_info & HUB_QUIRK_CHECK_PORT_AUTOSUSPEND)
1950 		hub->quirk_check_port_auto_suspend = 1;
1951 
1952 	if (id->driver_info & HUB_QUIRK_DISABLE_AUTOSUSPEND) {
1953 		hub->quirk_disable_autosuspend = 1;
1954 		usb_autopm_get_interface_no_resume(intf);
1955 	}
1956 
1957 	if ((id->driver_info & HUB_QUIRK_REDUCE_FRAME_INTR_BINTERVAL) &&
1958 	    desc->endpoint[0].desc.bInterval > USB_REDUCE_FRAME_INTR_BINTERVAL) {
1959 		desc->endpoint[0].desc.bInterval =
1960 			USB_REDUCE_FRAME_INTR_BINTERVAL;
1961 		/* Tell the HCD about the interrupt ep's new bInterval */
1962 		usb_set_interface(hdev, 0, 0);
1963 	}
1964 
1965 	if (hub_configure(hub, &desc->endpoint[0].desc) >= 0) {
1966 		onboard_dev_create_pdevs(hdev, &hub->onboard_devs);
1967 
1968 		return 0;
1969 	}
1970 
1971 	hub_disconnect(intf);
1972 	return -ENODEV;
1973 }
1974 
1975 static int
hub_ioctl(struct usb_interface * intf,unsigned int code,void * user_data)1976 hub_ioctl(struct usb_interface *intf, unsigned int code, void *user_data)
1977 {
1978 	struct usb_device *hdev = interface_to_usbdev(intf);
1979 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
1980 
1981 	/* assert ifno == 0 (part of hub spec) */
1982 	switch (code) {
1983 	case USBDEVFS_HUB_PORTINFO: {
1984 		struct usbdevfs_hub_portinfo *info = user_data;
1985 		int i;
1986 
1987 		spin_lock_irq(&device_state_lock);
1988 		if (hdev->devnum <= 0)
1989 			info->nports = 0;
1990 		else {
1991 			info->nports = hdev->maxchild;
1992 			for (i = 0; i < info->nports; i++) {
1993 				if (hub->ports[i]->child == NULL)
1994 					info->port[i] = 0;
1995 				else
1996 					info->port[i] =
1997 						hub->ports[i]->child->devnum;
1998 			}
1999 		}
2000 		spin_unlock_irq(&device_state_lock);
2001 
2002 		return info->nports + 1;
2003 		}
2004 
2005 	default:
2006 		return -ENOSYS;
2007 	}
2008 }
2009 
2010 /*
2011  * Allow user programs to claim ports on a hub.  When a device is attached
2012  * to one of these "claimed" ports, the program will "own" the device.
2013  */
find_port_owner(struct usb_device * hdev,unsigned port1,struct usb_dev_state *** ppowner)2014 static int find_port_owner(struct usb_device *hdev, unsigned port1,
2015 		struct usb_dev_state ***ppowner)
2016 {
2017 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
2018 
2019 	if (hdev->state == USB_STATE_NOTATTACHED)
2020 		return -ENODEV;
2021 	if (port1 == 0 || port1 > hdev->maxchild)
2022 		return -EINVAL;
2023 
2024 	/* Devices not managed by the hub driver
2025 	 * will always have maxchild equal to 0.
2026 	 */
2027 	*ppowner = &(hub->ports[port1 - 1]->port_owner);
2028 	return 0;
2029 }
2030 
2031 /* In the following three functions, the caller must hold hdev's lock */
usb_hub_claim_port(struct usb_device * hdev,unsigned port1,struct usb_dev_state * owner)2032 int usb_hub_claim_port(struct usb_device *hdev, unsigned port1,
2033 		       struct usb_dev_state *owner)
2034 {
2035 	int rc;
2036 	struct usb_dev_state **powner;
2037 
2038 	rc = find_port_owner(hdev, port1, &powner);
2039 	if (rc)
2040 		return rc;
2041 	if (*powner)
2042 		return -EBUSY;
2043 	*powner = owner;
2044 	return rc;
2045 }
2046 EXPORT_SYMBOL_GPL(usb_hub_claim_port);
2047 
usb_hub_release_port(struct usb_device * hdev,unsigned port1,struct usb_dev_state * owner)2048 int usb_hub_release_port(struct usb_device *hdev, unsigned port1,
2049 			 struct usb_dev_state *owner)
2050 {
2051 	int rc;
2052 	struct usb_dev_state **powner;
2053 
2054 	rc = find_port_owner(hdev, port1, &powner);
2055 	if (rc)
2056 		return rc;
2057 	if (*powner != owner)
2058 		return -ENOENT;
2059 	*powner = NULL;
2060 	return rc;
2061 }
2062 EXPORT_SYMBOL_GPL(usb_hub_release_port);
2063 
usb_hub_release_all_ports(struct usb_device * hdev,struct usb_dev_state * owner)2064 void usb_hub_release_all_ports(struct usb_device *hdev, struct usb_dev_state *owner)
2065 {
2066 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
2067 	int n;
2068 
2069 	for (n = 0; n < hdev->maxchild; n++) {
2070 		if (hub->ports[n]->port_owner == owner)
2071 			hub->ports[n]->port_owner = NULL;
2072 	}
2073 
2074 }
2075 
2076 /* The caller must hold udev's lock */
usb_device_is_owned(struct usb_device * udev)2077 bool usb_device_is_owned(struct usb_device *udev)
2078 {
2079 	struct usb_hub *hub;
2080 
2081 	if (udev->state == USB_STATE_NOTATTACHED || !udev->parent)
2082 		return false;
2083 	hub = usb_hub_to_struct_hub(udev->parent);
2084 	return !!hub->ports[udev->portnum - 1]->port_owner;
2085 }
2086 
update_port_device_state(struct usb_device * udev)2087 static void update_port_device_state(struct usb_device *udev)
2088 {
2089 	struct usb_hub *hub;
2090 	struct usb_port *port_dev;
2091 
2092 	if (udev->parent) {
2093 		hub = usb_hub_to_struct_hub(udev->parent);
2094 
2095 		/*
2096 		 * The Link Layer Validation System Driver (lvstest)
2097 		 * has a test step to unbind the hub before running the
2098 		 * rest of the procedure. This triggers hub_disconnect
2099 		 * which will set the hub's maxchild to 0, further
2100 		 * resulting in usb_hub_to_struct_hub returning NULL.
2101 		 */
2102 		if (hub) {
2103 			port_dev = hub->ports[udev->portnum - 1];
2104 			WRITE_ONCE(port_dev->state, udev->state);
2105 			sysfs_notify_dirent(port_dev->state_kn);
2106 		}
2107 	}
2108 }
2109 
recursively_mark_NOTATTACHED(struct usb_device * udev)2110 static void recursively_mark_NOTATTACHED(struct usb_device *udev)
2111 {
2112 	struct usb_hub *hub = usb_hub_to_struct_hub(udev);
2113 	int i;
2114 
2115 	for (i = 0; i < udev->maxchild; ++i) {
2116 		if (hub->ports[i]->child)
2117 			recursively_mark_NOTATTACHED(hub->ports[i]->child);
2118 	}
2119 	if (udev->state == USB_STATE_SUSPENDED)
2120 		udev->active_duration -= jiffies;
2121 	udev->state = USB_STATE_NOTATTACHED;
2122 	update_port_device_state(udev);
2123 }
2124 
2125 /**
2126  * usb_set_device_state - change a device's current state (usbcore, hcds)
2127  * @udev: pointer to device whose state should be changed
2128  * @new_state: new state value to be stored
2129  *
2130  * udev->state is _not_ fully protected by the device lock.  Although
2131  * most transitions are made only while holding the lock, the state can
2132  * can change to USB_STATE_NOTATTACHED at almost any time.  This
2133  * is so that devices can be marked as disconnected as soon as possible,
2134  * without having to wait for any semaphores to be released.  As a result,
2135  * all changes to any device's state must be protected by the
2136  * device_state_lock spinlock.
2137  *
2138  * Once a device has been added to the device tree, all changes to its state
2139  * should be made using this routine.  The state should _not_ be set directly.
2140  *
2141  * If udev->state is already USB_STATE_NOTATTACHED then no change is made.
2142  * Otherwise udev->state is set to new_state, and if new_state is
2143  * USB_STATE_NOTATTACHED then all of udev's descendants' states are also set
2144  * to USB_STATE_NOTATTACHED.
2145  */
usb_set_device_state(struct usb_device * udev,enum usb_device_state new_state)2146 void usb_set_device_state(struct usb_device *udev,
2147 		enum usb_device_state new_state)
2148 {
2149 	unsigned long flags;
2150 	int wakeup = -1;
2151 
2152 	spin_lock_irqsave(&device_state_lock, flags);
2153 	if (udev->state == USB_STATE_NOTATTACHED)
2154 		;	/* do nothing */
2155 	else if (new_state != USB_STATE_NOTATTACHED) {
2156 
2157 		/* root hub wakeup capabilities are managed out-of-band
2158 		 * and may involve silicon errata ... ignore them here.
2159 		 */
2160 		if (udev->parent) {
2161 			if (udev->state == USB_STATE_SUSPENDED
2162 					|| new_state == USB_STATE_SUSPENDED)
2163 				;	/* No change to wakeup settings */
2164 			else if (new_state == USB_STATE_CONFIGURED)
2165 				wakeup = (udev->quirks &
2166 					USB_QUIRK_IGNORE_REMOTE_WAKEUP) ? 0 :
2167 					udev->actconfig->desc.bmAttributes &
2168 					USB_CONFIG_ATT_WAKEUP;
2169 			else
2170 				wakeup = 0;
2171 		}
2172 		if (udev->state == USB_STATE_SUSPENDED &&
2173 			new_state != USB_STATE_SUSPENDED)
2174 			udev->active_duration -= jiffies;
2175 		else if (new_state == USB_STATE_SUSPENDED &&
2176 				udev->state != USB_STATE_SUSPENDED)
2177 			udev->active_duration += jiffies;
2178 		udev->state = new_state;
2179 		update_port_device_state(udev);
2180 	} else
2181 		recursively_mark_NOTATTACHED(udev);
2182 	spin_unlock_irqrestore(&device_state_lock, flags);
2183 	if (wakeup >= 0)
2184 		device_set_wakeup_capable(&udev->dev, wakeup);
2185 }
2186 EXPORT_SYMBOL_GPL(usb_set_device_state);
2187 
2188 /*
2189  * Choose a device number.
2190  *
2191  * Device numbers are used as filenames in usbfs.  On USB-1.1 and
2192  * USB-2.0 buses they are also used as device addresses, however on
2193  * USB-3.0 buses the address is assigned by the controller hardware
2194  * and it usually is not the same as the device number.
2195  *
2196  * Devices connected under xHCI are not as simple.  The host controller
2197  * supports virtualization, so the hardware assigns device addresses and
2198  * the HCD must setup data structures before issuing a set address
2199  * command to the hardware.
2200  */
choose_devnum(struct usb_device * udev)2201 static void choose_devnum(struct usb_device *udev)
2202 {
2203 	int		devnum;
2204 	struct usb_bus	*bus = udev->bus;
2205 
2206 	/* be safe when more hub events are proceed in parallel */
2207 	mutex_lock(&bus->devnum_next_mutex);
2208 
2209 	/* Try to allocate the next devnum beginning at bus->devnum_next. */
2210 	devnum = find_next_zero_bit(bus->devmap, 128, bus->devnum_next);
2211 	if (devnum >= 128)
2212 		devnum = find_next_zero_bit(bus->devmap, 128, 1);
2213 	bus->devnum_next = (devnum >= 127 ? 1 : devnum + 1);
2214 	if (devnum < 128) {
2215 		set_bit(devnum, bus->devmap);
2216 		udev->devnum = devnum;
2217 	}
2218 	mutex_unlock(&bus->devnum_next_mutex);
2219 }
2220 
release_devnum(struct usb_device * udev)2221 static void release_devnum(struct usb_device *udev)
2222 {
2223 	if (udev->devnum > 0) {
2224 		clear_bit(udev->devnum, udev->bus->devmap);
2225 		udev->devnum = -1;
2226 	}
2227 }
2228 
update_devnum(struct usb_device * udev,int devnum)2229 static void update_devnum(struct usb_device *udev, int devnum)
2230 {
2231 	udev->devnum = devnum;
2232 	if (!udev->devaddr)
2233 		udev->devaddr = (u8)devnum;
2234 }
2235 
hub_free_dev(struct usb_device * udev)2236 static void hub_free_dev(struct usb_device *udev)
2237 {
2238 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
2239 
2240 	/* Root hubs aren't real devices, so don't free HCD resources */
2241 	if (hcd->driver->free_dev && udev->parent)
2242 		hcd->driver->free_dev(hcd, udev);
2243 }
2244 
hub_disconnect_children(struct usb_device * udev)2245 static void hub_disconnect_children(struct usb_device *udev)
2246 {
2247 	struct usb_hub *hub = usb_hub_to_struct_hub(udev);
2248 	int i;
2249 
2250 	/* Free up all the children before we remove this device */
2251 	for (i = 0; i < udev->maxchild; i++) {
2252 		if (hub->ports[i]->child)
2253 			usb_disconnect(&hub->ports[i]->child);
2254 	}
2255 }
2256 
2257 /**
2258  * usb_disconnect - disconnect a device (usbcore-internal)
2259  * @pdev: pointer to device being disconnected
2260  *
2261  * Context: task context, might sleep
2262  *
2263  * Something got disconnected. Get rid of it and all of its children.
2264  *
2265  * If *pdev is a normal device then the parent hub must already be locked.
2266  * If *pdev is a root hub then the caller must hold the usb_bus_idr_lock,
2267  * which protects the set of root hubs as well as the list of buses.
2268  *
2269  * Only hub drivers (including virtual root hub drivers for host
2270  * controllers) should ever call this.
2271  *
2272  * This call is synchronous, and may not be used in an interrupt context.
2273  */
usb_disconnect(struct usb_device ** pdev)2274 void usb_disconnect(struct usb_device **pdev)
2275 {
2276 	struct usb_port *port_dev = NULL;
2277 	struct usb_device *udev = *pdev;
2278 	struct usb_hub *hub = NULL;
2279 	int port1 = 1;
2280 
2281 	/* mark the device as inactive, so any further urb submissions for
2282 	 * this device (and any of its children) will fail immediately.
2283 	 * this quiesces everything except pending urbs.
2284 	 */
2285 	usb_set_device_state(udev, USB_STATE_NOTATTACHED);
2286 	dev_info(&udev->dev, "USB disconnect, device number %d\n",
2287 			udev->devnum);
2288 
2289 	/*
2290 	 * Ensure that the pm runtime code knows that the USB device
2291 	 * is in the process of being disconnected.
2292 	 */
2293 	pm_runtime_barrier(&udev->dev);
2294 
2295 	usb_lock_device(udev);
2296 
2297 	hub_disconnect_children(udev);
2298 
2299 	/* deallocate hcd/hardware state ... nuking all pending urbs and
2300 	 * cleaning up all state associated with the current configuration
2301 	 * so that the hardware is now fully quiesced.
2302 	 */
2303 	dev_dbg(&udev->dev, "unregistering device\n");
2304 	usb_disable_device(udev, 0);
2305 	usb_hcd_synchronize_unlinks(udev);
2306 
2307 	if (udev->parent) {
2308 		port1 = udev->portnum;
2309 		hub = usb_hub_to_struct_hub(udev->parent);
2310 		port_dev = hub->ports[port1 - 1];
2311 
2312 		sysfs_remove_link(&udev->dev.kobj, "port");
2313 		sysfs_remove_link(&port_dev->dev.kobj, "device");
2314 
2315 		/*
2316 		 * As usb_port_runtime_resume() de-references udev, make
2317 		 * sure no resumes occur during removal
2318 		 */
2319 		if (!test_and_set_bit(port1, hub->child_usage_bits))
2320 			pm_runtime_get_sync(&port_dev->dev);
2321 
2322 		typec_deattach(port_dev->connector, &udev->dev);
2323 	}
2324 
2325 	usb_remove_ep_devs(&udev->ep0);
2326 	usb_unlock_device(udev);
2327 
2328 	/* Unregister the device.  The device driver is responsible
2329 	 * for de-configuring the device and invoking the remove-device
2330 	 * notifier chain (used by usbfs and possibly others).
2331 	 */
2332 	device_del(&udev->dev);
2333 
2334 	/* Free the device number and delete the parent's children[]
2335 	 * (or root_hub) pointer.
2336 	 */
2337 	release_devnum(udev);
2338 
2339 	/* Avoid races with recursively_mark_NOTATTACHED() */
2340 	spin_lock_irq(&device_state_lock);
2341 	*pdev = NULL;
2342 	spin_unlock_irq(&device_state_lock);
2343 
2344 	if (port_dev && test_and_clear_bit(port1, hub->child_usage_bits))
2345 		pm_runtime_put(&port_dev->dev);
2346 
2347 	hub_free_dev(udev);
2348 
2349 	put_device(&udev->dev);
2350 }
2351 
2352 #ifdef CONFIG_USB_ANNOUNCE_NEW_DEVICES
show_string(struct usb_device * udev,char * id,char * string)2353 static void show_string(struct usb_device *udev, char *id, char *string)
2354 {
2355 	if (!string)
2356 		return;
2357 	dev_info(&udev->dev, "%s: %s\n", id, string);
2358 }
2359 
announce_device(struct usb_device * udev)2360 static void announce_device(struct usb_device *udev)
2361 {
2362 	u16 bcdDevice = le16_to_cpu(udev->descriptor.bcdDevice);
2363 
2364 	dev_info(&udev->dev,
2365 		"New USB device found, idVendor=%04x, idProduct=%04x, bcdDevice=%2x.%02x\n",
2366 		le16_to_cpu(udev->descriptor.idVendor),
2367 		le16_to_cpu(udev->descriptor.idProduct),
2368 		bcdDevice >> 8, bcdDevice & 0xff);
2369 	dev_info(&udev->dev,
2370 		"New USB device strings: Mfr=%d, Product=%d, SerialNumber=%d\n",
2371 		udev->descriptor.iManufacturer,
2372 		udev->descriptor.iProduct,
2373 		udev->descriptor.iSerialNumber);
2374 	show_string(udev, "Product", udev->product);
2375 	show_string(udev, "Manufacturer", udev->manufacturer);
2376 	show_string(udev, "SerialNumber", udev->serial);
2377 }
2378 #else
announce_device(struct usb_device * udev)2379 static inline void announce_device(struct usb_device *udev) { }
2380 #endif
2381 
2382 
2383 /**
2384  * usb_enumerate_device_otg - FIXME (usbcore-internal)
2385  * @udev: newly addressed device (in ADDRESS state)
2386  *
2387  * Finish enumeration for On-The-Go devices
2388  *
2389  * Return: 0 if successful. A negative error code otherwise.
2390  */
usb_enumerate_device_otg(struct usb_device * udev)2391 static int usb_enumerate_device_otg(struct usb_device *udev)
2392 {
2393 	int err = 0;
2394 
2395 #ifdef	CONFIG_USB_OTG
2396 	/*
2397 	 * OTG-aware devices on OTG-capable root hubs may be able to use SRP,
2398 	 * to wake us after we've powered off VBUS; and HNP, switching roles
2399 	 * "host" to "peripheral".  The OTG descriptor helps figure this out.
2400 	 */
2401 	if (!udev->bus->is_b_host
2402 			&& udev->config
2403 			&& udev->parent == udev->bus->root_hub) {
2404 		struct usb_otg_descriptor	*desc = NULL;
2405 		struct usb_bus			*bus = udev->bus;
2406 		unsigned			port1 = udev->portnum;
2407 
2408 		/* descriptor may appear anywhere in config */
2409 		err = __usb_get_extra_descriptor(udev->rawdescriptors[0],
2410 				le16_to_cpu(udev->config[0].desc.wTotalLength),
2411 				USB_DT_OTG, (void **) &desc, sizeof(*desc));
2412 		if (err || !(desc->bmAttributes & USB_OTG_HNP))
2413 			return 0;
2414 
2415 		dev_info(&udev->dev, "Dual-Role OTG device on %sHNP port\n",
2416 					(port1 == bus->otg_port) ? "" : "non-");
2417 
2418 		/* enable HNP before suspend, it's simpler */
2419 		if (port1 == bus->otg_port) {
2420 			bus->b_hnp_enable = 1;
2421 			err = usb_control_msg(udev,
2422 				usb_sndctrlpipe(udev, 0),
2423 				USB_REQ_SET_FEATURE, 0,
2424 				USB_DEVICE_B_HNP_ENABLE,
2425 				0, NULL, 0,
2426 				USB_CTRL_SET_TIMEOUT);
2427 			if (err < 0) {
2428 				/*
2429 				 * OTG MESSAGE: report errors here,
2430 				 * customize to match your product.
2431 				 */
2432 				dev_err(&udev->dev, "can't set HNP mode: %d\n",
2433 									err);
2434 				bus->b_hnp_enable = 0;
2435 			}
2436 		} else if (desc->bLength == sizeof
2437 				(struct usb_otg_descriptor)) {
2438 			/*
2439 			 * We are operating on a legacy OTP device
2440 			 * These should be told that they are operating
2441 			 * on the wrong port if we have another port that does
2442 			 * support HNP
2443 			 */
2444 			if (bus->otg_port != 0) {
2445 				/* Set a_alt_hnp_support for legacy otg device */
2446 				err = usb_control_msg(udev,
2447 					usb_sndctrlpipe(udev, 0),
2448 					USB_REQ_SET_FEATURE, 0,
2449 					USB_DEVICE_A_ALT_HNP_SUPPORT,
2450 					0, NULL, 0,
2451 					USB_CTRL_SET_TIMEOUT);
2452 				if (err < 0)
2453 					dev_err(&udev->dev,
2454 						"set a_alt_hnp_support failed: %d\n",
2455 						err);
2456 			}
2457 		}
2458 	}
2459 #endif
2460 	return err;
2461 }
2462 
2463 
2464 /**
2465  * usb_enumerate_device - Read device configs/intfs/otg (usbcore-internal)
2466  * @udev: newly addressed device (in ADDRESS state)
2467  *
2468  * This is only called by usb_new_device() -- all comments that apply there
2469  * apply here wrt to environment.
2470  *
2471  * If the device is WUSB and not authorized, we don't attempt to read
2472  * the string descriptors, as they will be errored out by the device
2473  * until it has been authorized.
2474  *
2475  * Return: 0 if successful. A negative error code otherwise.
2476  */
usb_enumerate_device(struct usb_device * udev)2477 static int usb_enumerate_device(struct usb_device *udev)
2478 {
2479 	int err;
2480 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
2481 
2482 	if (udev->config == NULL) {
2483 		err = usb_get_configuration(udev);
2484 		if (err < 0) {
2485 			if (err != -ENODEV)
2486 				dev_err(&udev->dev, "can't read configurations, error %d\n",
2487 						err);
2488 			return err;
2489 		}
2490 	}
2491 
2492 	/* read the standard strings and cache them if present */
2493 	udev->product = usb_cache_string(udev, udev->descriptor.iProduct);
2494 	udev->manufacturer = usb_cache_string(udev,
2495 					      udev->descriptor.iManufacturer);
2496 	udev->serial = usb_cache_string(udev, udev->descriptor.iSerialNumber);
2497 
2498 	err = usb_enumerate_device_otg(udev);
2499 	if (err < 0)
2500 		return err;
2501 
2502 	if (IS_ENABLED(CONFIG_USB_OTG_PRODUCTLIST) && hcd->tpl_support &&
2503 		!is_targeted(udev)) {
2504 		/* Maybe it can talk to us, though we can't talk to it.
2505 		 * (Includes HNP test device.)
2506 		 */
2507 		if (IS_ENABLED(CONFIG_USB_OTG) && (udev->bus->b_hnp_enable
2508 			|| udev->bus->is_b_host)) {
2509 			err = usb_port_suspend(udev, PMSG_AUTO_SUSPEND);
2510 			if (err < 0)
2511 				dev_dbg(&udev->dev, "HNP fail, %d\n", err);
2512 		}
2513 		return -ENOTSUPP;
2514 	}
2515 
2516 	usb_detect_interface_quirks(udev);
2517 
2518 	return 0;
2519 }
2520 
set_usb_port_removable(struct usb_device * udev)2521 static void set_usb_port_removable(struct usb_device *udev)
2522 {
2523 	struct usb_device *hdev = udev->parent;
2524 	struct usb_hub *hub;
2525 	u8 port = udev->portnum;
2526 	u16 wHubCharacteristics;
2527 	bool removable = true;
2528 
2529 	dev_set_removable(&udev->dev, DEVICE_REMOVABLE_UNKNOWN);
2530 
2531 	if (!hdev)
2532 		return;
2533 
2534 	hub = usb_hub_to_struct_hub(udev->parent);
2535 
2536 	/*
2537 	 * If the platform firmware has provided information about a port,
2538 	 * use that to determine whether it's removable.
2539 	 */
2540 	switch (hub->ports[udev->portnum - 1]->connect_type) {
2541 	case USB_PORT_CONNECT_TYPE_HOT_PLUG:
2542 		dev_set_removable(&udev->dev, DEVICE_REMOVABLE);
2543 		return;
2544 	case USB_PORT_CONNECT_TYPE_HARD_WIRED:
2545 	case USB_PORT_NOT_USED:
2546 		dev_set_removable(&udev->dev, DEVICE_FIXED);
2547 		return;
2548 	default:
2549 		break;
2550 	}
2551 
2552 	/*
2553 	 * Otherwise, check whether the hub knows whether a port is removable
2554 	 * or not
2555 	 */
2556 	wHubCharacteristics = le16_to_cpu(hub->descriptor->wHubCharacteristics);
2557 
2558 	if (!(wHubCharacteristics & HUB_CHAR_COMPOUND))
2559 		return;
2560 
2561 	if (hub_is_superspeed(hdev)) {
2562 		if (le16_to_cpu(hub->descriptor->u.ss.DeviceRemovable)
2563 				& (1 << port))
2564 			removable = false;
2565 	} else {
2566 		if (hub->descriptor->u.hs.DeviceRemovable[port / 8] & (1 << (port % 8)))
2567 			removable = false;
2568 	}
2569 
2570 	if (removable)
2571 		dev_set_removable(&udev->dev, DEVICE_REMOVABLE);
2572 	else
2573 		dev_set_removable(&udev->dev, DEVICE_FIXED);
2574 
2575 }
2576 
2577 /**
2578  * usb_new_device - perform initial device setup (usbcore-internal)
2579  * @udev: newly addressed device (in ADDRESS state)
2580  *
2581  * This is called with devices which have been detected but not fully
2582  * enumerated.  The device descriptor is available, but not descriptors
2583  * for any device configuration.  The caller must have locked either
2584  * the parent hub (if udev is a normal device) or else the
2585  * usb_bus_idr_lock (if udev is a root hub).  The parent's pointer to
2586  * udev has already been installed, but udev is not yet visible through
2587  * sysfs or other filesystem code.
2588  *
2589  * This call is synchronous, and may not be used in an interrupt context.
2590  *
2591  * Only the hub driver or root-hub registrar should ever call this.
2592  *
2593  * Return: Whether the device is configured properly or not. Zero if the
2594  * interface was registered with the driver core; else a negative errno
2595  * value.
2596  *
2597  */
usb_new_device(struct usb_device * udev)2598 int usb_new_device(struct usb_device *udev)
2599 {
2600 	int err;
2601 
2602 	if (udev->parent) {
2603 		/* Initialize non-root-hub device wakeup to disabled;
2604 		 * device (un)configuration controls wakeup capable
2605 		 * sysfs power/wakeup controls wakeup enabled/disabled
2606 		 */
2607 		device_init_wakeup(&udev->dev, 0);
2608 	}
2609 
2610 	/* Tell the runtime-PM framework the device is active */
2611 	pm_runtime_set_active(&udev->dev);
2612 	pm_runtime_get_noresume(&udev->dev);
2613 	pm_runtime_use_autosuspend(&udev->dev);
2614 	pm_runtime_enable(&udev->dev);
2615 
2616 	/* By default, forbid autosuspend for all devices.  It will be
2617 	 * allowed for hubs during binding.
2618 	 */
2619 	usb_disable_autosuspend(udev);
2620 
2621 	err = usb_enumerate_device(udev);	/* Read descriptors */
2622 	if (err < 0)
2623 		goto fail;
2624 	dev_dbg(&udev->dev, "udev %d, busnum %d, minor = %d\n",
2625 			udev->devnum, udev->bus->busnum,
2626 			(((udev->bus->busnum-1) * 128) + (udev->devnum-1)));
2627 	/* export the usbdev device-node for libusb */
2628 	udev->dev.devt = MKDEV(USB_DEVICE_MAJOR,
2629 			(((udev->bus->busnum-1) * 128) + (udev->devnum-1)));
2630 
2631 	/* Tell the world! */
2632 	announce_device(udev);
2633 
2634 	if (udev->serial)
2635 		add_device_randomness(udev->serial, strlen(udev->serial));
2636 	if (udev->product)
2637 		add_device_randomness(udev->product, strlen(udev->product));
2638 	if (udev->manufacturer)
2639 		add_device_randomness(udev->manufacturer,
2640 				      strlen(udev->manufacturer));
2641 
2642 	device_enable_async_suspend(&udev->dev);
2643 
2644 	/* check whether the hub or firmware marks this port as non-removable */
2645 	set_usb_port_removable(udev);
2646 
2647 	/* Register the device.  The device driver is responsible
2648 	 * for configuring the device and invoking the add-device
2649 	 * notifier chain (used by usbfs and possibly others).
2650 	 */
2651 	err = device_add(&udev->dev);
2652 	if (err) {
2653 		dev_err(&udev->dev, "can't device_add, error %d\n", err);
2654 		goto fail;
2655 	}
2656 
2657 	/* Create link files between child device and usb port device. */
2658 	if (udev->parent) {
2659 		struct usb_hub *hub = usb_hub_to_struct_hub(udev->parent);
2660 		int port1 = udev->portnum;
2661 		struct usb_port	*port_dev = hub->ports[port1 - 1];
2662 
2663 		err = sysfs_create_link(&udev->dev.kobj,
2664 				&port_dev->dev.kobj, "port");
2665 		if (err)
2666 			goto fail;
2667 
2668 		err = sysfs_create_link(&port_dev->dev.kobj,
2669 				&udev->dev.kobj, "device");
2670 		if (err) {
2671 			sysfs_remove_link(&udev->dev.kobj, "port");
2672 			goto fail;
2673 		}
2674 
2675 		if (!test_and_set_bit(port1, hub->child_usage_bits))
2676 			pm_runtime_get_sync(&port_dev->dev);
2677 
2678 		typec_attach(port_dev->connector, &udev->dev);
2679 	}
2680 
2681 	(void) usb_create_ep_devs(&udev->dev, &udev->ep0, udev);
2682 	usb_mark_last_busy(udev);
2683 	pm_runtime_put_sync_autosuspend(&udev->dev);
2684 	return err;
2685 
2686 fail:
2687 	usb_set_device_state(udev, USB_STATE_NOTATTACHED);
2688 	pm_runtime_disable(&udev->dev);
2689 	pm_runtime_set_suspended(&udev->dev);
2690 	return err;
2691 }
2692 
2693 
2694 /**
2695  * usb_deauthorize_device - deauthorize a device (usbcore-internal)
2696  * @usb_dev: USB device
2697  *
2698  * Move the USB device to a very basic state where interfaces are disabled
2699  * and the device is in fact unconfigured and unusable.
2700  *
2701  * We share a lock (that we have) with device_del(), so we need to
2702  * defer its call.
2703  *
2704  * Return: 0.
2705  */
usb_deauthorize_device(struct usb_device * usb_dev)2706 int usb_deauthorize_device(struct usb_device *usb_dev)
2707 {
2708 	usb_lock_device(usb_dev);
2709 	if (usb_dev->authorized == 0)
2710 		goto out_unauthorized;
2711 
2712 	usb_dev->authorized = 0;
2713 	usb_set_configuration(usb_dev, -1);
2714 
2715 out_unauthorized:
2716 	usb_unlock_device(usb_dev);
2717 	return 0;
2718 }
2719 
2720 
usb_authorize_device(struct usb_device * usb_dev)2721 int usb_authorize_device(struct usb_device *usb_dev)
2722 {
2723 	int result = 0, c;
2724 
2725 	usb_lock_device(usb_dev);
2726 	if (usb_dev->authorized == 1)
2727 		goto out_authorized;
2728 
2729 	result = usb_autoresume_device(usb_dev);
2730 	if (result < 0) {
2731 		dev_err(&usb_dev->dev,
2732 			"can't autoresume for authorization: %d\n", result);
2733 		goto error_autoresume;
2734 	}
2735 
2736 	usb_dev->authorized = 1;
2737 	/* Choose and set the configuration.  This registers the interfaces
2738 	 * with the driver core and lets interface drivers bind to them.
2739 	 */
2740 	c = usb_choose_configuration(usb_dev);
2741 	if (c >= 0) {
2742 		result = usb_set_configuration(usb_dev, c);
2743 		if (result) {
2744 			dev_err(&usb_dev->dev,
2745 				"can't set config #%d, error %d\n", c, result);
2746 			/* This need not be fatal.  The user can try to
2747 			 * set other configurations. */
2748 		}
2749 	}
2750 	dev_info(&usb_dev->dev, "authorized to connect\n");
2751 
2752 	usb_autosuspend_device(usb_dev);
2753 error_autoresume:
2754 out_authorized:
2755 	usb_unlock_device(usb_dev);	/* complements locktree */
2756 	return result;
2757 }
2758 
2759 /**
2760  * get_port_ssp_rate - Match the extended port status to SSP rate
2761  * @hdev: The hub device
2762  * @ext_portstatus: extended port status
2763  *
2764  * Match the extended port status speed id to the SuperSpeed Plus sublink speed
2765  * capability attributes. Base on the number of connected lanes and speed,
2766  * return the corresponding enum usb_ssp_rate.
2767  */
get_port_ssp_rate(struct usb_device * hdev,u32 ext_portstatus)2768 static enum usb_ssp_rate get_port_ssp_rate(struct usb_device *hdev,
2769 					   u32 ext_portstatus)
2770 {
2771 	struct usb_ssp_cap_descriptor *ssp_cap;
2772 	u32 attr;
2773 	u8 speed_id;
2774 	u8 ssac;
2775 	u8 lanes;
2776 	int i;
2777 
2778 	if (!hdev->bos)
2779 		goto out;
2780 
2781 	ssp_cap = hdev->bos->ssp_cap;
2782 	if (!ssp_cap)
2783 		goto out;
2784 
2785 	speed_id = ext_portstatus & USB_EXT_PORT_STAT_RX_SPEED_ID;
2786 	lanes = USB_EXT_PORT_RX_LANES(ext_portstatus) + 1;
2787 
2788 	ssac = le32_to_cpu(ssp_cap->bmAttributes) &
2789 		USB_SSP_SUBLINK_SPEED_ATTRIBS;
2790 
2791 	for (i = 0; i <= ssac; i++) {
2792 		u8 ssid;
2793 
2794 		attr = le32_to_cpu(ssp_cap->bmSublinkSpeedAttr[i]);
2795 		ssid = FIELD_GET(USB_SSP_SUBLINK_SPEED_SSID, attr);
2796 		if (speed_id == ssid) {
2797 			u16 mantissa;
2798 			u8 lse;
2799 			u8 type;
2800 
2801 			/*
2802 			 * Note: currently asymmetric lane types are only
2803 			 * applicable for SSIC operate in SuperSpeed protocol
2804 			 */
2805 			type = FIELD_GET(USB_SSP_SUBLINK_SPEED_ST, attr);
2806 			if (type == USB_SSP_SUBLINK_SPEED_ST_ASYM_RX ||
2807 			    type == USB_SSP_SUBLINK_SPEED_ST_ASYM_TX)
2808 				goto out;
2809 
2810 			if (FIELD_GET(USB_SSP_SUBLINK_SPEED_LP, attr) !=
2811 			    USB_SSP_SUBLINK_SPEED_LP_SSP)
2812 				goto out;
2813 
2814 			lse = FIELD_GET(USB_SSP_SUBLINK_SPEED_LSE, attr);
2815 			mantissa = FIELD_GET(USB_SSP_SUBLINK_SPEED_LSM, attr);
2816 
2817 			/* Convert to Gbps */
2818 			for (; lse < USB_SSP_SUBLINK_SPEED_LSE_GBPS; lse++)
2819 				mantissa /= 1000;
2820 
2821 			if (mantissa >= 10 && lanes == 1)
2822 				return USB_SSP_GEN_2x1;
2823 
2824 			if (mantissa >= 10 && lanes == 2)
2825 				return USB_SSP_GEN_2x2;
2826 
2827 			if (mantissa >= 5 && lanes == 2)
2828 				return USB_SSP_GEN_1x2;
2829 
2830 			goto out;
2831 		}
2832 	}
2833 
2834 out:
2835 	return USB_SSP_GEN_UNKNOWN;
2836 }
2837 
2838 #ifdef CONFIG_USB_FEW_INIT_RETRIES
2839 #define PORT_RESET_TRIES	2
2840 #define SET_ADDRESS_TRIES	1
2841 #define GET_DESCRIPTOR_TRIES	1
2842 #define GET_MAXPACKET0_TRIES	1
2843 #define PORT_INIT_TRIES		4
2844 
2845 #else
2846 #define PORT_RESET_TRIES	5
2847 #define SET_ADDRESS_TRIES	2
2848 #define GET_DESCRIPTOR_TRIES	2
2849 #define GET_MAXPACKET0_TRIES	3
2850 #define PORT_INIT_TRIES		4
2851 #endif	/* CONFIG_USB_FEW_INIT_RETRIES */
2852 
2853 #define DETECT_DISCONNECT_TRIES 5
2854 
2855 #define HUB_ROOT_RESET_TIME	60	/* times are in msec */
2856 #define HUB_SHORT_RESET_TIME	10
2857 #define HUB_BH_RESET_TIME	50
2858 #define HUB_LONG_RESET_TIME	200
2859 #define HUB_RESET_TIMEOUT	800
2860 
use_new_scheme(struct usb_device * udev,int retry,struct usb_port * port_dev)2861 static bool use_new_scheme(struct usb_device *udev, int retry,
2862 			   struct usb_port *port_dev)
2863 {
2864 	int old_scheme_first_port =
2865 		(port_dev->quirks & USB_PORT_QUIRK_OLD_SCHEME) ||
2866 		old_scheme_first;
2867 
2868 	/*
2869 	 * "New scheme" enumeration causes an extra state transition to be
2870 	 * exposed to an xhci host and causes USB3 devices to receive control
2871 	 * commands in the default state.  This has been seen to cause
2872 	 * enumeration failures, so disable this enumeration scheme for USB3
2873 	 * devices.
2874 	 */
2875 	if (udev->speed >= USB_SPEED_SUPER)
2876 		return false;
2877 
2878 	/*
2879 	 * If use_both_schemes is set, use the first scheme (whichever
2880 	 * it is) for the larger half of the retries, then use the other
2881 	 * scheme.  Otherwise, use the first scheme for all the retries.
2882 	 */
2883 	if (use_both_schemes && retry >= (PORT_INIT_TRIES + 1) / 2)
2884 		return old_scheme_first_port;	/* Second half */
2885 	return !old_scheme_first_port;		/* First half or all */
2886 }
2887 
2888 /* Is a USB 3.0 port in the Inactive or Compliance Mode state?
2889  * Port warm reset is required to recover
2890  */
hub_port_warm_reset_required(struct usb_hub * hub,int port1,u16 portstatus)2891 static bool hub_port_warm_reset_required(struct usb_hub *hub, int port1,
2892 		u16 portstatus)
2893 {
2894 	u16 link_state;
2895 
2896 	if (!hub_is_superspeed(hub->hdev))
2897 		return false;
2898 
2899 	if (test_bit(port1, hub->warm_reset_bits))
2900 		return true;
2901 
2902 	link_state = portstatus & USB_PORT_STAT_LINK_STATE;
2903 	return link_state == USB_SS_PORT_LS_SS_INACTIVE
2904 		|| link_state == USB_SS_PORT_LS_COMP_MOD;
2905 }
2906 
hub_port_wait_reset(struct usb_hub * hub,int port1,struct usb_device * udev,unsigned int delay,bool warm)2907 static int hub_port_wait_reset(struct usb_hub *hub, int port1,
2908 			struct usb_device *udev, unsigned int delay, bool warm)
2909 {
2910 	int delay_time, ret;
2911 	u16 portstatus;
2912 	u16 portchange;
2913 	u32 ext_portstatus = 0;
2914 
2915 	for (delay_time = 0;
2916 			delay_time < HUB_RESET_TIMEOUT;
2917 			delay_time += delay) {
2918 		/* wait to give the device a chance to reset */
2919 		msleep(delay);
2920 
2921 		/* read and decode port status */
2922 		if (hub_is_superspeedplus(hub->hdev))
2923 			ret = hub_ext_port_status(hub, port1,
2924 						  HUB_EXT_PORT_STATUS,
2925 						  &portstatus, &portchange,
2926 						  &ext_portstatus);
2927 		else
2928 			ret = usb_hub_port_status(hub, port1, &portstatus,
2929 					      &portchange);
2930 		if (ret < 0)
2931 			return ret;
2932 
2933 		/*
2934 		 * The port state is unknown until the reset completes.
2935 		 *
2936 		 * On top of that, some chips may require additional time
2937 		 * to re-establish a connection after the reset is complete,
2938 		 * so also wait for the connection to be re-established.
2939 		 */
2940 		if (!(portstatus & USB_PORT_STAT_RESET) &&
2941 		    (portstatus & USB_PORT_STAT_CONNECTION))
2942 			break;
2943 
2944 		/* switch to the long delay after two short delay failures */
2945 		if (delay_time >= 2 * HUB_SHORT_RESET_TIME)
2946 			delay = HUB_LONG_RESET_TIME;
2947 
2948 		dev_dbg(&hub->ports[port1 - 1]->dev,
2949 				"not %sreset yet, waiting %dms\n",
2950 				warm ? "warm " : "", delay);
2951 	}
2952 
2953 	if ((portstatus & USB_PORT_STAT_RESET))
2954 		return -EBUSY;
2955 
2956 	if (hub_port_warm_reset_required(hub, port1, portstatus))
2957 		return -ENOTCONN;
2958 
2959 	/* Device went away? */
2960 	if (!(portstatus & USB_PORT_STAT_CONNECTION))
2961 		return -ENOTCONN;
2962 
2963 	/* Retry if connect change is set but status is still connected.
2964 	 * A USB 3.0 connection may bounce if multiple warm resets were issued,
2965 	 * but the device may have successfully re-connected. Ignore it.
2966 	 */
2967 	if (!hub_is_superspeed(hub->hdev) &&
2968 	    (portchange & USB_PORT_STAT_C_CONNECTION)) {
2969 		usb_clear_port_feature(hub->hdev, port1,
2970 				       USB_PORT_FEAT_C_CONNECTION);
2971 		return -EAGAIN;
2972 	}
2973 
2974 	if (!(portstatus & USB_PORT_STAT_ENABLE))
2975 		return -EBUSY;
2976 
2977 	if (!udev)
2978 		return 0;
2979 
2980 	if (hub_is_superspeedplus(hub->hdev)) {
2981 		/* extended portstatus Rx and Tx lane count are zero based */
2982 		udev->rx_lanes = USB_EXT_PORT_RX_LANES(ext_portstatus) + 1;
2983 		udev->tx_lanes = USB_EXT_PORT_TX_LANES(ext_portstatus) + 1;
2984 		udev->ssp_rate = get_port_ssp_rate(hub->hdev, ext_portstatus);
2985 	} else {
2986 		udev->rx_lanes = 1;
2987 		udev->tx_lanes = 1;
2988 		udev->ssp_rate = USB_SSP_GEN_UNKNOWN;
2989 	}
2990 	if (udev->ssp_rate != USB_SSP_GEN_UNKNOWN)
2991 		udev->speed = USB_SPEED_SUPER_PLUS;
2992 	else if (hub_is_superspeed(hub->hdev))
2993 		udev->speed = USB_SPEED_SUPER;
2994 	else if (portstatus & USB_PORT_STAT_HIGH_SPEED)
2995 		udev->speed = USB_SPEED_HIGH;
2996 	else if (portstatus & USB_PORT_STAT_LOW_SPEED)
2997 		udev->speed = USB_SPEED_LOW;
2998 	else
2999 		udev->speed = USB_SPEED_FULL;
3000 	return 0;
3001 }
3002 
3003 /* Handle port reset and port warm(BH) reset (for USB3 protocol ports) */
hub_port_reset(struct usb_hub * hub,int port1,struct usb_device * udev,unsigned int delay,bool warm)3004 static int hub_port_reset(struct usb_hub *hub, int port1,
3005 			struct usb_device *udev, unsigned int delay, bool warm)
3006 {
3007 	int i, status;
3008 	u16 portchange, portstatus;
3009 	struct usb_port *port_dev = hub->ports[port1 - 1];
3010 	int reset_recovery_time;
3011 
3012 	if (!hub_is_superspeed(hub->hdev)) {
3013 		if (warm) {
3014 			dev_err(hub->intfdev, "only USB3 hub support "
3015 						"warm reset\n");
3016 			return -EINVAL;
3017 		}
3018 		/* Block EHCI CF initialization during the port reset.
3019 		 * Some companion controllers don't like it when they mix.
3020 		 */
3021 		down_read(&ehci_cf_port_reset_rwsem);
3022 	} else if (!warm) {
3023 		/*
3024 		 * If the caller hasn't explicitly requested a warm reset,
3025 		 * double check and see if one is needed.
3026 		 */
3027 		if (usb_hub_port_status(hub, port1, &portstatus,
3028 					&portchange) == 0)
3029 			if (hub_port_warm_reset_required(hub, port1,
3030 							portstatus))
3031 				warm = true;
3032 	}
3033 	clear_bit(port1, hub->warm_reset_bits);
3034 
3035 	/* Reset the port */
3036 	for (i = 0; i < PORT_RESET_TRIES; i++) {
3037 		status = set_port_feature(hub->hdev, port1, (warm ?
3038 					USB_PORT_FEAT_BH_PORT_RESET :
3039 					USB_PORT_FEAT_RESET));
3040 		if (status == -ENODEV) {
3041 			;	/* The hub is gone */
3042 		} else if (status) {
3043 			dev_err(&port_dev->dev,
3044 					"cannot %sreset (err = %d)\n",
3045 					warm ? "warm " : "", status);
3046 		} else {
3047 			status = hub_port_wait_reset(hub, port1, udev, delay,
3048 								warm);
3049 			if (status && status != -ENOTCONN && status != -ENODEV)
3050 				dev_dbg(hub->intfdev,
3051 						"port_wait_reset: err = %d\n",
3052 						status);
3053 		}
3054 
3055 		/*
3056 		 * Check for disconnect or reset, and bail out after several
3057 		 * reset attempts to avoid warm reset loop.
3058 		 */
3059 		if (status == 0 || status == -ENOTCONN || status == -ENODEV ||
3060 		    (status == -EBUSY && i == PORT_RESET_TRIES - 1)) {
3061 			usb_clear_port_feature(hub->hdev, port1,
3062 					USB_PORT_FEAT_C_RESET);
3063 
3064 			if (!hub_is_superspeed(hub->hdev))
3065 				goto done;
3066 
3067 			usb_clear_port_feature(hub->hdev, port1,
3068 					USB_PORT_FEAT_C_BH_PORT_RESET);
3069 			usb_clear_port_feature(hub->hdev, port1,
3070 					USB_PORT_FEAT_C_PORT_LINK_STATE);
3071 
3072 			if (udev)
3073 				usb_clear_port_feature(hub->hdev, port1,
3074 					USB_PORT_FEAT_C_CONNECTION);
3075 
3076 			/*
3077 			 * If a USB 3.0 device migrates from reset to an error
3078 			 * state, re-issue the warm reset.
3079 			 */
3080 			if (usb_hub_port_status(hub, port1,
3081 					&portstatus, &portchange) < 0)
3082 				goto done;
3083 
3084 			if (!hub_port_warm_reset_required(hub, port1,
3085 					portstatus))
3086 				goto done;
3087 
3088 			/*
3089 			 * If the port is in SS.Inactive or Compliance Mode, the
3090 			 * hot or warm reset failed.  Try another warm reset.
3091 			 */
3092 			if (!warm) {
3093 				dev_dbg(&port_dev->dev,
3094 						"hot reset failed, warm reset\n");
3095 				warm = true;
3096 			}
3097 		}
3098 
3099 		dev_dbg(&port_dev->dev,
3100 				"not enabled, trying %sreset again...\n",
3101 				warm ? "warm " : "");
3102 		delay = HUB_LONG_RESET_TIME;
3103 	}
3104 
3105 	dev_err(&port_dev->dev, "Cannot enable. Maybe the USB cable is bad?\n");
3106 
3107 done:
3108 	if (status == 0) {
3109 		if (port_dev->quirks & USB_PORT_QUIRK_FAST_ENUM)
3110 			usleep_range(10000, 12000);
3111 		else {
3112 			/* TRSTRCY = 10 ms; plus some extra */
3113 			reset_recovery_time = 10 + 40;
3114 
3115 			/* Hub needs extra delay after resetting its port. */
3116 			if (hub->hdev->quirks & USB_QUIRK_HUB_SLOW_RESET)
3117 				reset_recovery_time += 100;
3118 
3119 			msleep(reset_recovery_time);
3120 		}
3121 
3122 		if (udev) {
3123 			struct usb_hcd *hcd = bus_to_hcd(udev->bus);
3124 
3125 			update_devnum(udev, 0);
3126 			/* The xHC may think the device is already reset,
3127 			 * so ignore the status.
3128 			 */
3129 			if (hcd->driver->reset_device)
3130 				hcd->driver->reset_device(hcd, udev);
3131 
3132 			usb_set_device_state(udev, USB_STATE_DEFAULT);
3133 		}
3134 	} else {
3135 		if (udev)
3136 			usb_set_device_state(udev, USB_STATE_NOTATTACHED);
3137 	}
3138 
3139 	if (!hub_is_superspeed(hub->hdev))
3140 		up_read(&ehci_cf_port_reset_rwsem);
3141 
3142 	return status;
3143 }
3144 
3145 /*
3146  * hub_port_stop_enumerate - stop USB enumeration or ignore port events
3147  * @hub: target hub
3148  * @port1: port num of the port
3149  * @retries: port retries number of hub_port_init()
3150  *
3151  * Return:
3152  *    true: ignore port actions/events or give up connection attempts.
3153  *    false: keep original behavior.
3154  *
3155  * This function will be based on retries to check whether the port which is
3156  * marked with early_stop attribute would stop enumeration or ignore events.
3157  *
3158  * Note:
3159  * This function didn't change anything if early_stop is not set, and it will
3160  * prevent all connection attempts when early_stop is set and the attempts of
3161  * the port are more than 1.
3162  */
hub_port_stop_enumerate(struct usb_hub * hub,int port1,int retries)3163 static bool hub_port_stop_enumerate(struct usb_hub *hub, int port1, int retries)
3164 {
3165 	struct usb_port *port_dev = hub->ports[port1 - 1];
3166 
3167 	if (port_dev->early_stop) {
3168 		if (port_dev->ignore_event)
3169 			return true;
3170 
3171 		/*
3172 		 * We want unsuccessful attempts to fail quickly.
3173 		 * Since some devices may need one failure during
3174 		 * port initialization, we allow two tries but no
3175 		 * more.
3176 		 */
3177 		if (retries < 2)
3178 			return false;
3179 
3180 		port_dev->ignore_event = 1;
3181 	} else
3182 		port_dev->ignore_event = 0;
3183 
3184 	return port_dev->ignore_event;
3185 }
3186 
3187 /* Check if a port is power on */
usb_port_is_power_on(struct usb_hub * hub,unsigned int portstatus)3188 int usb_port_is_power_on(struct usb_hub *hub, unsigned int portstatus)
3189 {
3190 	int ret = 0;
3191 
3192 	if (hub_is_superspeed(hub->hdev)) {
3193 		if (portstatus & USB_SS_PORT_STAT_POWER)
3194 			ret = 1;
3195 	} else {
3196 		if (portstatus & USB_PORT_STAT_POWER)
3197 			ret = 1;
3198 	}
3199 
3200 	return ret;
3201 }
3202 
usb_lock_port(struct usb_port * port_dev)3203 static void usb_lock_port(struct usb_port *port_dev)
3204 		__acquires(&port_dev->status_lock)
3205 {
3206 	mutex_lock(&port_dev->status_lock);
3207 	__acquire(&port_dev->status_lock);
3208 }
3209 
usb_unlock_port(struct usb_port * port_dev)3210 static void usb_unlock_port(struct usb_port *port_dev)
3211 		__releases(&port_dev->status_lock)
3212 {
3213 	mutex_unlock(&port_dev->status_lock);
3214 	__release(&port_dev->status_lock);
3215 }
3216 
3217 #ifdef	CONFIG_PM
3218 
3219 /* Check if a port is suspended(USB2.0 port) or in U3 state(USB3.0 port) */
port_is_suspended(struct usb_hub * hub,unsigned portstatus)3220 static int port_is_suspended(struct usb_hub *hub, unsigned portstatus)
3221 {
3222 	int ret = 0;
3223 
3224 	if (hub_is_superspeed(hub->hdev)) {
3225 		if ((portstatus & USB_PORT_STAT_LINK_STATE)
3226 				== USB_SS_PORT_LS_U3)
3227 			ret = 1;
3228 	} else {
3229 		if (portstatus & USB_PORT_STAT_SUSPEND)
3230 			ret = 1;
3231 	}
3232 
3233 	return ret;
3234 }
3235 
3236 /* Determine whether the device on a port is ready for a normal resume,
3237  * is ready for a reset-resume, or should be disconnected.
3238  */
check_port_resume_type(struct usb_device * udev,struct usb_hub * hub,int port1,int status,u16 portchange,u16 portstatus)3239 static int check_port_resume_type(struct usb_device *udev,
3240 		struct usb_hub *hub, int port1,
3241 		int status, u16 portchange, u16 portstatus)
3242 {
3243 	struct usb_port *port_dev = hub->ports[port1 - 1];
3244 	int retries = 3;
3245 
3246  retry:
3247 	/* Is a warm reset needed to recover the connection? */
3248 	if (status == 0 && udev->reset_resume
3249 		&& hub_port_warm_reset_required(hub, port1, portstatus)) {
3250 		/* pass */;
3251 	}
3252 	/* Is the device still present? */
3253 	else if (status || port_is_suspended(hub, portstatus) ||
3254 			!usb_port_is_power_on(hub, portstatus)) {
3255 		if (status >= 0)
3256 			status = -ENODEV;
3257 	} else if (!(portstatus & USB_PORT_STAT_CONNECTION)) {
3258 		if (retries--) {
3259 			usleep_range(200, 300);
3260 			status = usb_hub_port_status(hub, port1, &portstatus,
3261 							     &portchange);
3262 			goto retry;
3263 		}
3264 		status = -ENODEV;
3265 	}
3266 
3267 	/* Can't do a normal resume if the port isn't enabled,
3268 	 * so try a reset-resume instead.
3269 	 */
3270 	else if (!(portstatus & USB_PORT_STAT_ENABLE) && !udev->reset_resume) {
3271 		if (udev->persist_enabled)
3272 			udev->reset_resume = 1;
3273 		else
3274 			status = -ENODEV;
3275 	}
3276 
3277 	if (status) {
3278 		dev_dbg(&port_dev->dev, "status %04x.%04x after resume, %d\n",
3279 				portchange, portstatus, status);
3280 	} else if (udev->reset_resume) {
3281 
3282 		/* Late port handoff can set status-change bits */
3283 		if (portchange & USB_PORT_STAT_C_CONNECTION)
3284 			usb_clear_port_feature(hub->hdev, port1,
3285 					USB_PORT_FEAT_C_CONNECTION);
3286 		if (portchange & USB_PORT_STAT_C_ENABLE)
3287 			usb_clear_port_feature(hub->hdev, port1,
3288 					USB_PORT_FEAT_C_ENABLE);
3289 
3290 		/*
3291 		 * Whatever made this reset-resume necessary may have
3292 		 * turned on the port1 bit in hub->change_bits.  But after
3293 		 * a successful reset-resume we want the bit to be clear;
3294 		 * if it was on it would indicate that something happened
3295 		 * following the reset-resume.
3296 		 */
3297 		clear_bit(port1, hub->change_bits);
3298 	}
3299 
3300 	return status;
3301 }
3302 
usb_disable_ltm(struct usb_device * udev)3303 int usb_disable_ltm(struct usb_device *udev)
3304 {
3305 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
3306 
3307 	/* Check if the roothub and device supports LTM. */
3308 	if (!usb_device_supports_ltm(hcd->self.root_hub) ||
3309 			!usb_device_supports_ltm(udev))
3310 		return 0;
3311 
3312 	/* Clear Feature LTM Enable can only be sent if the device is
3313 	 * configured.
3314 	 */
3315 	if (!udev->actconfig)
3316 		return 0;
3317 
3318 	return usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3319 			USB_REQ_CLEAR_FEATURE, USB_RECIP_DEVICE,
3320 			USB_DEVICE_LTM_ENABLE, 0, NULL, 0,
3321 			USB_CTRL_SET_TIMEOUT);
3322 }
3323 EXPORT_SYMBOL_GPL(usb_disable_ltm);
3324 
usb_enable_ltm(struct usb_device * udev)3325 void usb_enable_ltm(struct usb_device *udev)
3326 {
3327 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
3328 
3329 	/* Check if the roothub and device supports LTM. */
3330 	if (!usb_device_supports_ltm(hcd->self.root_hub) ||
3331 			!usb_device_supports_ltm(udev))
3332 		return;
3333 
3334 	/* Set Feature LTM Enable can only be sent if the device is
3335 	 * configured.
3336 	 */
3337 	if (!udev->actconfig)
3338 		return;
3339 
3340 	usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3341 			USB_REQ_SET_FEATURE, USB_RECIP_DEVICE,
3342 			USB_DEVICE_LTM_ENABLE, 0, NULL, 0,
3343 			USB_CTRL_SET_TIMEOUT);
3344 }
3345 EXPORT_SYMBOL_GPL(usb_enable_ltm);
3346 
3347 /*
3348  * usb_enable_remote_wakeup - enable remote wakeup for a device
3349  * @udev: target device
3350  *
3351  * For USB-2 devices: Set the device's remote wakeup feature.
3352  *
3353  * For USB-3 devices: Assume there's only one function on the device and
3354  * enable remote wake for the first interface.  FIXME if the interface
3355  * association descriptor shows there's more than one function.
3356  */
usb_enable_remote_wakeup(struct usb_device * udev)3357 static int usb_enable_remote_wakeup(struct usb_device *udev)
3358 {
3359 	if (udev->speed < USB_SPEED_SUPER)
3360 		return usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3361 				USB_REQ_SET_FEATURE, USB_RECIP_DEVICE,
3362 				USB_DEVICE_REMOTE_WAKEUP, 0, NULL, 0,
3363 				USB_CTRL_SET_TIMEOUT);
3364 	else
3365 		return usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3366 				USB_REQ_SET_FEATURE, USB_RECIP_INTERFACE,
3367 				USB_INTRF_FUNC_SUSPEND,
3368 				USB_INTRF_FUNC_SUSPEND_RW |
3369 					USB_INTRF_FUNC_SUSPEND_LP,
3370 				NULL, 0, USB_CTRL_SET_TIMEOUT);
3371 }
3372 
3373 /*
3374  * usb_disable_remote_wakeup - disable remote wakeup for a device
3375  * @udev: target device
3376  *
3377  * For USB-2 devices: Clear the device's remote wakeup feature.
3378  *
3379  * For USB-3 devices: Assume there's only one function on the device and
3380  * disable remote wake for the first interface.  FIXME if the interface
3381  * association descriptor shows there's more than one function.
3382  */
usb_disable_remote_wakeup(struct usb_device * udev)3383 static int usb_disable_remote_wakeup(struct usb_device *udev)
3384 {
3385 	if (udev->speed < USB_SPEED_SUPER)
3386 		return usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3387 				USB_REQ_CLEAR_FEATURE, USB_RECIP_DEVICE,
3388 				USB_DEVICE_REMOTE_WAKEUP, 0, NULL, 0,
3389 				USB_CTRL_SET_TIMEOUT);
3390 	else
3391 		return usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3392 				USB_REQ_SET_FEATURE, USB_RECIP_INTERFACE,
3393 				USB_INTRF_FUNC_SUSPEND,	0, NULL, 0,
3394 				USB_CTRL_SET_TIMEOUT);
3395 }
3396 
3397 /* Count of wakeup-enabled devices at or below udev */
usb_wakeup_enabled_descendants(struct usb_device * udev)3398 unsigned usb_wakeup_enabled_descendants(struct usb_device *udev)
3399 {
3400 	struct usb_hub *hub = usb_hub_to_struct_hub(udev);
3401 
3402 	return udev->do_remote_wakeup +
3403 			(hub ? hub->wakeup_enabled_descendants : 0);
3404 }
3405 EXPORT_SYMBOL_GPL(usb_wakeup_enabled_descendants);
3406 
3407 /*
3408  * usb_port_suspend - suspend a usb device's upstream port
3409  * @udev: device that's no longer in active use, not a root hub
3410  * Context: must be able to sleep; device not locked; pm locks held
3411  *
3412  * Suspends a USB device that isn't in active use, conserving power.
3413  * Devices may wake out of a suspend, if anything important happens,
3414  * using the remote wakeup mechanism.  They may also be taken out of
3415  * suspend by the host, using usb_port_resume().  It's also routine
3416  * to disconnect devices while they are suspended.
3417  *
3418  * This only affects the USB hardware for a device; its interfaces
3419  * (and, for hubs, child devices) must already have been suspended.
3420  *
3421  * Selective port suspend reduces power; most suspended devices draw
3422  * less than 500 uA.  It's also used in OTG, along with remote wakeup.
3423  * All devices below the suspended port are also suspended.
3424  *
3425  * Devices leave suspend state when the host wakes them up.  Some devices
3426  * also support "remote wakeup", where the device can activate the USB
3427  * tree above them to deliver data, such as a keypress or packet.  In
3428  * some cases, this wakes the USB host.
3429  *
3430  * Suspending OTG devices may trigger HNP, if that's been enabled
3431  * between a pair of dual-role devices.  That will change roles, such
3432  * as from A-Host to A-Peripheral or from B-Host back to B-Peripheral.
3433  *
3434  * Devices on USB hub ports have only one "suspend" state, corresponding
3435  * to ACPI D2, "may cause the device to lose some context".
3436  * State transitions include:
3437  *
3438  *   - suspend, resume ... when the VBUS power link stays live
3439  *   - suspend, disconnect ... VBUS lost
3440  *
3441  * Once VBUS drop breaks the circuit, the port it's using has to go through
3442  * normal re-enumeration procedures, starting with enabling VBUS power.
3443  * Other than re-initializing the hub (plug/unplug, except for root hubs),
3444  * Linux (2.6) currently has NO mechanisms to initiate that:  no hub_wq
3445  * timer, no SRP, no requests through sysfs.
3446  *
3447  * If Runtime PM isn't enabled or used, non-SuperSpeed devices may not get
3448  * suspended until their bus goes into global suspend (i.e., the root
3449  * hub is suspended).  Nevertheless, we change @udev->state to
3450  * USB_STATE_SUSPENDED as this is the device's "logical" state.  The actual
3451  * upstream port setting is stored in @udev->port_is_suspended.
3452  *
3453  * Returns 0 on success, else negative errno.
3454  */
usb_port_suspend(struct usb_device * udev,pm_message_t msg)3455 int usb_port_suspend(struct usb_device *udev, pm_message_t msg)
3456 {
3457 	struct usb_hub	*hub = usb_hub_to_struct_hub(udev->parent);
3458 	struct usb_port *port_dev = hub->ports[udev->portnum - 1];
3459 	int		port1 = udev->portnum;
3460 	int		status;
3461 	bool		really_suspend = true;
3462 
3463 	usb_lock_port(port_dev);
3464 
3465 	/* enable remote wakeup when appropriate; this lets the device
3466 	 * wake up the upstream hub (including maybe the root hub).
3467 	 *
3468 	 * NOTE:  OTG devices may issue remote wakeup (or SRP) even when
3469 	 * we don't explicitly enable it here.
3470 	 */
3471 	if (udev->do_remote_wakeup) {
3472 		status = usb_enable_remote_wakeup(udev);
3473 		if (status) {
3474 			dev_dbg(&udev->dev, "won't remote wakeup, status %d\n",
3475 					status);
3476 			/* bail if autosuspend is requested */
3477 			if (PMSG_IS_AUTO(msg))
3478 				goto err_wakeup;
3479 		}
3480 	}
3481 
3482 	/* disable USB2 hardware LPM */
3483 	usb_disable_usb2_hardware_lpm(udev);
3484 
3485 	if (usb_disable_ltm(udev)) {
3486 		dev_err(&udev->dev, "Failed to disable LTM before suspend\n");
3487 		status = -ENOMEM;
3488 		if (PMSG_IS_AUTO(msg))
3489 			goto err_ltm;
3490 	}
3491 
3492 	/* see 7.1.7.6 */
3493 	if (hub_is_superspeed(hub->hdev))
3494 		status = hub_set_port_link_state(hub, port1, USB_SS_PORT_LS_U3);
3495 
3496 	/*
3497 	 * For system suspend, we do not need to enable the suspend feature
3498 	 * on individual USB-2 ports.  The devices will automatically go
3499 	 * into suspend a few ms after the root hub stops sending packets.
3500 	 * The USB 2.0 spec calls this "global suspend".
3501 	 *
3502 	 * However, many USB hubs have a bug: They don't relay wakeup requests
3503 	 * from a downstream port if the port's suspend feature isn't on.
3504 	 * Therefore we will turn on the suspend feature if udev or any of its
3505 	 * descendants is enabled for remote wakeup.
3506 	 */
3507 	else if (PMSG_IS_AUTO(msg) || usb_wakeup_enabled_descendants(udev) > 0)
3508 		status = set_port_feature(hub->hdev, port1,
3509 				USB_PORT_FEAT_SUSPEND);
3510 	else {
3511 		really_suspend = false;
3512 		status = 0;
3513 	}
3514 	if (status) {
3515 		/* Check if the port has been suspended for the timeout case
3516 		 * to prevent the suspended port from incorrect handling.
3517 		 */
3518 		if (status == -ETIMEDOUT) {
3519 			int ret;
3520 			u16 portstatus, portchange;
3521 
3522 			portstatus = portchange = 0;
3523 			ret = usb_hub_port_status(hub, port1, &portstatus,
3524 					&portchange);
3525 
3526 			dev_dbg(&port_dev->dev,
3527 				"suspend timeout, status %04x\n", portstatus);
3528 
3529 			if (ret == 0 && port_is_suspended(hub, portstatus)) {
3530 				status = 0;
3531 				goto suspend_done;
3532 			}
3533 		}
3534 
3535 		dev_dbg(&port_dev->dev, "can't suspend, status %d\n", status);
3536 
3537 		/* Try to enable USB3 LTM again */
3538 		usb_enable_ltm(udev);
3539  err_ltm:
3540 		/* Try to enable USB2 hardware LPM again */
3541 		usb_enable_usb2_hardware_lpm(udev);
3542 
3543 		if (udev->do_remote_wakeup)
3544 			(void) usb_disable_remote_wakeup(udev);
3545  err_wakeup:
3546 
3547 		/* System sleep transitions should never fail */
3548 		if (!PMSG_IS_AUTO(msg))
3549 			status = 0;
3550 	} else {
3551  suspend_done:
3552 		dev_dbg(&udev->dev, "usb %ssuspend, wakeup %d\n",
3553 				(PMSG_IS_AUTO(msg) ? "auto-" : ""),
3554 				udev->do_remote_wakeup);
3555 		if (really_suspend) {
3556 			udev->port_is_suspended = 1;
3557 
3558 			/* device has up to 10 msec to fully suspend */
3559 			msleep(10);
3560 		}
3561 		usb_set_device_state(udev, USB_STATE_SUSPENDED);
3562 	}
3563 
3564 	if (status == 0 && !udev->do_remote_wakeup && udev->persist_enabled
3565 			&& test_and_clear_bit(port1, hub->child_usage_bits))
3566 		pm_runtime_put_sync(&port_dev->dev);
3567 
3568 	usb_mark_last_busy(hub->hdev);
3569 
3570 	usb_unlock_port(port_dev);
3571 	return status;
3572 }
3573 
3574 /*
3575  * If the USB "suspend" state is in use (rather than "global suspend"),
3576  * many devices will be individually taken out of suspend state using
3577  * special "resume" signaling.  This routine kicks in shortly after
3578  * hardware resume signaling is finished, either because of selective
3579  * resume (by host) or remote wakeup (by device) ... now see what changed
3580  * in the tree that's rooted at this device.
3581  *
3582  * If @udev->reset_resume is set then the device is reset before the
3583  * status check is done.
3584  */
finish_port_resume(struct usb_device * udev)3585 static int finish_port_resume(struct usb_device *udev)
3586 {
3587 	int	status = 0;
3588 	u16	devstatus = 0;
3589 
3590 	/* caller owns the udev device lock */
3591 	dev_dbg(&udev->dev, "%s\n",
3592 		udev->reset_resume ? "finish reset-resume" : "finish resume");
3593 
3594 	/* usb ch9 identifies four variants of SUSPENDED, based on what
3595 	 * state the device resumes to.  Linux currently won't see the
3596 	 * first two on the host side; they'd be inside hub_port_init()
3597 	 * during many timeouts, but hub_wq can't suspend until later.
3598 	 */
3599 	usb_set_device_state(udev, udev->actconfig
3600 			? USB_STATE_CONFIGURED
3601 			: USB_STATE_ADDRESS);
3602 
3603 	/* 10.5.4.5 says not to reset a suspended port if the attached
3604 	 * device is enabled for remote wakeup.  Hence the reset
3605 	 * operation is carried out here, after the port has been
3606 	 * resumed.
3607 	 */
3608 	if (udev->reset_resume) {
3609 		/*
3610 		 * If the device morphs or switches modes when it is reset,
3611 		 * we don't want to perform a reset-resume.  We'll fail the
3612 		 * resume, which will cause a logical disconnect, and then
3613 		 * the device will be rediscovered.
3614 		 */
3615  retry_reset_resume:
3616 		if (udev->quirks & USB_QUIRK_RESET)
3617 			status = -ENODEV;
3618 		else
3619 			status = usb_reset_and_verify_device(udev);
3620 	}
3621 
3622 	/* 10.5.4.5 says be sure devices in the tree are still there.
3623 	 * For now let's assume the device didn't go crazy on resume,
3624 	 * and device drivers will know about any resume quirks.
3625 	 */
3626 	if (status == 0) {
3627 		devstatus = 0;
3628 		status = usb_get_std_status(udev, USB_RECIP_DEVICE, 0, &devstatus);
3629 
3630 		/* If a normal resume failed, try doing a reset-resume */
3631 		if (status && !udev->reset_resume && udev->persist_enabled) {
3632 			dev_dbg(&udev->dev, "retry with reset-resume\n");
3633 			udev->reset_resume = 1;
3634 			goto retry_reset_resume;
3635 		}
3636 	}
3637 
3638 	if (status) {
3639 		dev_dbg(&udev->dev, "gone after usb resume? status %d\n",
3640 				status);
3641 	/*
3642 	 * There are a few quirky devices which violate the standard
3643 	 * by claiming to have remote wakeup enabled after a reset,
3644 	 * which crash if the feature is cleared, hence check for
3645 	 * udev->reset_resume
3646 	 */
3647 	} else if (udev->actconfig && !udev->reset_resume) {
3648 		if (udev->speed < USB_SPEED_SUPER) {
3649 			if (devstatus & (1 << USB_DEVICE_REMOTE_WAKEUP))
3650 				status = usb_disable_remote_wakeup(udev);
3651 		} else {
3652 			status = usb_get_std_status(udev, USB_RECIP_INTERFACE, 0,
3653 					&devstatus);
3654 			if (!status && devstatus & (USB_INTRF_STAT_FUNC_RW_CAP
3655 					| USB_INTRF_STAT_FUNC_RW))
3656 				status = usb_disable_remote_wakeup(udev);
3657 		}
3658 
3659 		if (status)
3660 			dev_dbg(&udev->dev,
3661 				"disable remote wakeup, status %d\n",
3662 				status);
3663 		status = 0;
3664 	}
3665 	return status;
3666 }
3667 
3668 /*
3669  * There are some SS USB devices which take longer time for link training.
3670  * XHCI specs 4.19.4 says that when Link training is successful, port
3671  * sets CCS bit to 1. So if SW reads port status before successful link
3672  * training, then it will not find device to be present.
3673  * USB Analyzer log with such buggy devices show that in some cases
3674  * device switch on the RX termination after long delay of host enabling
3675  * the VBUS. In few other cases it has been seen that device fails to
3676  * negotiate link training in first attempt. It has been
3677  * reported till now that few devices take as long as 2000 ms to train
3678  * the link after host enabling its VBUS and termination. Following
3679  * routine implements a 2000 ms timeout for link training. If in a case
3680  * link trains before timeout, loop will exit earlier.
3681  *
3682  * There are also some 2.0 hard drive based devices and 3.0 thumb
3683  * drives that, when plugged into a 2.0 only port, take a long
3684  * time to set CCS after VBUS enable.
3685  *
3686  * FIXME: If a device was connected before suspend, but was removed
3687  * while system was asleep, then the loop in the following routine will
3688  * only exit at timeout.
3689  *
3690  * This routine should only be called when persist is enabled.
3691  */
wait_for_connected(struct usb_device * udev,struct usb_hub * hub,int port1,u16 * portchange,u16 * portstatus)3692 static int wait_for_connected(struct usb_device *udev,
3693 		struct usb_hub *hub, int port1,
3694 		u16 *portchange, u16 *portstatus)
3695 {
3696 	int status = 0, delay_ms = 0;
3697 
3698 	while (delay_ms < 2000) {
3699 		if (status || *portstatus & USB_PORT_STAT_CONNECTION)
3700 			break;
3701 		if (!usb_port_is_power_on(hub, *portstatus)) {
3702 			status = -ENODEV;
3703 			break;
3704 		}
3705 		msleep(20);
3706 		delay_ms += 20;
3707 		status = usb_hub_port_status(hub, port1, portstatus, portchange);
3708 	}
3709 	dev_dbg(&udev->dev, "Waited %dms for CONNECT\n", delay_ms);
3710 	return status;
3711 }
3712 
3713 /*
3714  * usb_port_resume - re-activate a suspended usb device's upstream port
3715  * @udev: device to re-activate, not a root hub
3716  * Context: must be able to sleep; device not locked; pm locks held
3717  *
3718  * This will re-activate the suspended device, increasing power usage
3719  * while letting drivers communicate again with its endpoints.
3720  * USB resume explicitly guarantees that the power session between
3721  * the host and the device is the same as it was when the device
3722  * suspended.
3723  *
3724  * If @udev->reset_resume is set then this routine won't check that the
3725  * port is still enabled.  Furthermore, finish_port_resume() above will
3726  * reset @udev.  The end result is that a broken power session can be
3727  * recovered and @udev will appear to persist across a loss of VBUS power.
3728  *
3729  * For example, if a host controller doesn't maintain VBUS suspend current
3730  * during a system sleep or is reset when the system wakes up, all the USB
3731  * power sessions below it will be broken.  This is especially troublesome
3732  * for mass-storage devices containing mounted filesystems, since the
3733  * device will appear to have disconnected and all the memory mappings
3734  * to it will be lost.  Using the USB_PERSIST facility, the device can be
3735  * made to appear as if it had not disconnected.
3736  *
3737  * This facility can be dangerous.  Although usb_reset_and_verify_device() makes
3738  * every effort to insure that the same device is present after the
3739  * reset as before, it cannot provide a 100% guarantee.  Furthermore it's
3740  * quite possible for a device to remain unaltered but its media to be
3741  * changed.  If the user replaces a flash memory card while the system is
3742  * asleep, he will have only himself to blame when the filesystem on the
3743  * new card is corrupted and the system crashes.
3744  *
3745  * Returns 0 on success, else negative errno.
3746  */
usb_port_resume(struct usb_device * udev,pm_message_t msg)3747 int usb_port_resume(struct usb_device *udev, pm_message_t msg)
3748 {
3749 	struct usb_hub	*hub = usb_hub_to_struct_hub(udev->parent);
3750 	struct usb_port *port_dev = hub->ports[udev->portnum  - 1];
3751 	int		port1 = udev->portnum;
3752 	int		status;
3753 	u16		portchange, portstatus;
3754 
3755 	if (!test_and_set_bit(port1, hub->child_usage_bits)) {
3756 		status = pm_runtime_resume_and_get(&port_dev->dev);
3757 		if (status < 0) {
3758 			dev_dbg(&udev->dev, "can't resume usb port, status %d\n",
3759 					status);
3760 			return status;
3761 		}
3762 	}
3763 
3764 	usb_lock_port(port_dev);
3765 
3766 	/* Skip the initial Clear-Suspend step for a remote wakeup */
3767 	status = usb_hub_port_status(hub, port1, &portstatus, &portchange);
3768 	if (status == 0 && !port_is_suspended(hub, portstatus)) {
3769 		if (portchange & USB_PORT_STAT_C_SUSPEND)
3770 			pm_wakeup_event(&udev->dev, 0);
3771 		goto SuspendCleared;
3772 	}
3773 
3774 	/* see 7.1.7.7; affects power usage, but not budgeting */
3775 	if (hub_is_superspeed(hub->hdev))
3776 		status = hub_set_port_link_state(hub, port1, USB_SS_PORT_LS_U0);
3777 	else
3778 		status = usb_clear_port_feature(hub->hdev,
3779 				port1, USB_PORT_FEAT_SUSPEND);
3780 	if (status) {
3781 		dev_dbg(&port_dev->dev, "can't resume, status %d\n", status);
3782 	} else {
3783 		/* drive resume for USB_RESUME_TIMEOUT msec */
3784 		dev_dbg(&udev->dev, "usb %sresume\n",
3785 				(PMSG_IS_AUTO(msg) ? "auto-" : ""));
3786 		msleep(USB_RESUME_TIMEOUT);
3787 
3788 		/* Virtual root hubs can trigger on GET_PORT_STATUS to
3789 		 * stop resume signaling.  Then finish the resume
3790 		 * sequence.
3791 		 */
3792 		status = usb_hub_port_status(hub, port1, &portstatus, &portchange);
3793 	}
3794 
3795  SuspendCleared:
3796 	if (status == 0) {
3797 		udev->port_is_suspended = 0;
3798 		if (hub_is_superspeed(hub->hdev)) {
3799 			if (portchange & USB_PORT_STAT_C_LINK_STATE)
3800 				usb_clear_port_feature(hub->hdev, port1,
3801 					USB_PORT_FEAT_C_PORT_LINK_STATE);
3802 		} else {
3803 			if (portchange & USB_PORT_STAT_C_SUSPEND)
3804 				usb_clear_port_feature(hub->hdev, port1,
3805 						USB_PORT_FEAT_C_SUSPEND);
3806 		}
3807 
3808 		/* TRSMRCY = 10 msec */
3809 		msleep(10);
3810 	}
3811 
3812 	if (udev->persist_enabled)
3813 		status = wait_for_connected(udev, hub, port1, &portchange,
3814 				&portstatus);
3815 
3816 	status = check_port_resume_type(udev,
3817 			hub, port1, status, portchange, portstatus);
3818 	if (status == 0)
3819 		status = finish_port_resume(udev);
3820 	if (status < 0) {
3821 		dev_dbg(&udev->dev, "can't resume, status %d\n", status);
3822 		hub_port_logical_disconnect(hub, port1);
3823 	} else  {
3824 		/* Try to enable USB2 hardware LPM */
3825 		usb_enable_usb2_hardware_lpm(udev);
3826 
3827 		/* Try to enable USB3 LTM */
3828 		usb_enable_ltm(udev);
3829 	}
3830 
3831 	usb_unlock_port(port_dev);
3832 
3833 	return status;
3834 }
3835 
usb_remote_wakeup(struct usb_device * udev)3836 int usb_remote_wakeup(struct usb_device *udev)
3837 {
3838 	int	status = 0;
3839 
3840 	usb_lock_device(udev);
3841 	if (udev->state == USB_STATE_SUSPENDED) {
3842 		dev_dbg(&udev->dev, "usb %sresume\n", "wakeup-");
3843 		status = usb_autoresume_device(udev);
3844 		if (status == 0) {
3845 			/* Let the drivers do their thing, then... */
3846 			usb_autosuspend_device(udev);
3847 		}
3848 	}
3849 	usb_unlock_device(udev);
3850 	return status;
3851 }
3852 
3853 /* Returns 1 if there was a remote wakeup and a connect status change. */
hub_handle_remote_wakeup(struct usb_hub * hub,unsigned int port,u16 portstatus,u16 portchange)3854 static int hub_handle_remote_wakeup(struct usb_hub *hub, unsigned int port,
3855 		u16 portstatus, u16 portchange)
3856 		__must_hold(&port_dev->status_lock)
3857 {
3858 	struct usb_port *port_dev = hub->ports[port - 1];
3859 	struct usb_device *hdev;
3860 	struct usb_device *udev;
3861 	int connect_change = 0;
3862 	u16 link_state;
3863 	int ret;
3864 
3865 	hdev = hub->hdev;
3866 	udev = port_dev->child;
3867 	if (!hub_is_superspeed(hdev)) {
3868 		if (!(portchange & USB_PORT_STAT_C_SUSPEND))
3869 			return 0;
3870 		usb_clear_port_feature(hdev, port, USB_PORT_FEAT_C_SUSPEND);
3871 	} else {
3872 		link_state = portstatus & USB_PORT_STAT_LINK_STATE;
3873 		if (!udev || udev->state != USB_STATE_SUSPENDED ||
3874 				(link_state != USB_SS_PORT_LS_U0 &&
3875 				 link_state != USB_SS_PORT_LS_U1 &&
3876 				 link_state != USB_SS_PORT_LS_U2))
3877 			return 0;
3878 	}
3879 
3880 	if (udev) {
3881 		/* TRSMRCY = 10 msec */
3882 		msleep(10);
3883 
3884 		usb_unlock_port(port_dev);
3885 		ret = usb_remote_wakeup(udev);
3886 		usb_lock_port(port_dev);
3887 		if (ret < 0)
3888 			connect_change = 1;
3889 	} else {
3890 		ret = -ENODEV;
3891 		hub_port_disable(hub, port, 1);
3892 	}
3893 	dev_dbg(&port_dev->dev, "resume, status %d\n", ret);
3894 	return connect_change;
3895 }
3896 
check_ports_changed(struct usb_hub * hub)3897 static int check_ports_changed(struct usb_hub *hub)
3898 {
3899 	int port1;
3900 
3901 	for (port1 = 1; port1 <= hub->hdev->maxchild; ++port1) {
3902 		u16 portstatus, portchange;
3903 		int status;
3904 
3905 		status = usb_hub_port_status(hub, port1, &portstatus, &portchange);
3906 		if (!status && portchange)
3907 			return 1;
3908 	}
3909 	return 0;
3910 }
3911 
hub_suspend(struct usb_interface * intf,pm_message_t msg)3912 static int hub_suspend(struct usb_interface *intf, pm_message_t msg)
3913 {
3914 	struct usb_hub		*hub = usb_get_intfdata(intf);
3915 	struct usb_device	*hdev = hub->hdev;
3916 	unsigned		port1;
3917 
3918 	/*
3919 	 * Warn if children aren't already suspended.
3920 	 * Also, add up the number of wakeup-enabled descendants.
3921 	 */
3922 	hub->wakeup_enabled_descendants = 0;
3923 	for (port1 = 1; port1 <= hdev->maxchild; port1++) {
3924 		struct usb_port *port_dev = hub->ports[port1 - 1];
3925 		struct usb_device *udev = port_dev->child;
3926 
3927 		if (udev && udev->can_submit) {
3928 			dev_warn(&port_dev->dev, "device %s not suspended yet\n",
3929 					dev_name(&udev->dev));
3930 			if (PMSG_IS_AUTO(msg))
3931 				return -EBUSY;
3932 		}
3933 		if (udev)
3934 			hub->wakeup_enabled_descendants +=
3935 					usb_wakeup_enabled_descendants(udev);
3936 	}
3937 
3938 	if (hdev->do_remote_wakeup && hub->quirk_check_port_auto_suspend) {
3939 		/* check if there are changes pending on hub ports */
3940 		if (check_ports_changed(hub)) {
3941 			if (PMSG_IS_AUTO(msg))
3942 				return -EBUSY;
3943 			pm_wakeup_event(&hdev->dev, 2000);
3944 		}
3945 	}
3946 
3947 	if (hub_is_superspeed(hdev) && hdev->do_remote_wakeup) {
3948 		/* Enable hub to send remote wakeup for all ports. */
3949 		for (port1 = 1; port1 <= hdev->maxchild; port1++) {
3950 			set_port_feature(hdev,
3951 					 port1 |
3952 					 USB_PORT_FEAT_REMOTE_WAKE_CONNECT |
3953 					 USB_PORT_FEAT_REMOTE_WAKE_DISCONNECT |
3954 					 USB_PORT_FEAT_REMOTE_WAKE_OVER_CURRENT,
3955 					 USB_PORT_FEAT_REMOTE_WAKE_MASK);
3956 		}
3957 	}
3958 
3959 	dev_dbg(&intf->dev, "%s\n", __func__);
3960 
3961 	/* stop hub_wq and related activity */
3962 	hub_quiesce(hub, HUB_SUSPEND);
3963 	return 0;
3964 }
3965 
3966 /* Report wakeup requests from the ports of a resuming root hub */
report_wakeup_requests(struct usb_hub * hub)3967 static void report_wakeup_requests(struct usb_hub *hub)
3968 {
3969 	struct usb_device	*hdev = hub->hdev;
3970 	struct usb_device	*udev;
3971 	struct usb_hcd		*hcd;
3972 	unsigned long		resuming_ports;
3973 	int			i;
3974 
3975 	if (hdev->parent)
3976 		return;		/* Not a root hub */
3977 
3978 	hcd = bus_to_hcd(hdev->bus);
3979 	if (hcd->driver->get_resuming_ports) {
3980 
3981 		/*
3982 		 * The get_resuming_ports() method returns a bitmap (origin 0)
3983 		 * of ports which have started wakeup signaling but have not
3984 		 * yet finished resuming.  During system resume we will
3985 		 * resume all the enabled ports, regardless of any wakeup
3986 		 * signals, which means the wakeup requests would be lost.
3987 		 * To prevent this, report them to the PM core here.
3988 		 */
3989 		resuming_ports = hcd->driver->get_resuming_ports(hcd);
3990 		for (i = 0; i < hdev->maxchild; ++i) {
3991 			if (test_bit(i, &resuming_ports)) {
3992 				udev = hub->ports[i]->child;
3993 				if (udev)
3994 					pm_wakeup_event(&udev->dev, 0);
3995 			}
3996 		}
3997 	}
3998 }
3999 
hub_resume(struct usb_interface * intf)4000 static int hub_resume(struct usb_interface *intf)
4001 {
4002 	struct usb_hub *hub = usb_get_intfdata(intf);
4003 
4004 	dev_dbg(&intf->dev, "%s\n", __func__);
4005 	hub_activate(hub, HUB_RESUME);
4006 
4007 	/*
4008 	 * This should be called only for system resume, not runtime resume.
4009 	 * We can't tell the difference here, so some wakeup requests will be
4010 	 * reported at the wrong time or more than once.  This shouldn't
4011 	 * matter much, so long as they do get reported.
4012 	 */
4013 	report_wakeup_requests(hub);
4014 	return 0;
4015 }
4016 
hub_reset_resume(struct usb_interface * intf)4017 static int hub_reset_resume(struct usb_interface *intf)
4018 {
4019 	struct usb_hub *hub = usb_get_intfdata(intf);
4020 
4021 	dev_dbg(&intf->dev, "%s\n", __func__);
4022 	hub_activate(hub, HUB_RESET_RESUME);
4023 	return 0;
4024 }
4025 
4026 /**
4027  * usb_root_hub_lost_power - called by HCD if the root hub lost Vbus power
4028  * @rhdev: struct usb_device for the root hub
4029  *
4030  * The USB host controller driver calls this function when its root hub
4031  * is resumed and Vbus power has been interrupted or the controller
4032  * has been reset.  The routine marks @rhdev as having lost power.
4033  * When the hub driver is resumed it will take notice and carry out
4034  * power-session recovery for all the "USB-PERSIST"-enabled child devices;
4035  * the others will be disconnected.
4036  */
usb_root_hub_lost_power(struct usb_device * rhdev)4037 void usb_root_hub_lost_power(struct usb_device *rhdev)
4038 {
4039 	dev_notice(&rhdev->dev, "root hub lost power or was reset\n");
4040 	rhdev->reset_resume = 1;
4041 }
4042 EXPORT_SYMBOL_GPL(usb_root_hub_lost_power);
4043 
4044 static const char * const usb3_lpm_names[]  = {
4045 	"U0",
4046 	"U1",
4047 	"U2",
4048 	"U3",
4049 };
4050 
4051 /*
4052  * Send a Set SEL control transfer to the device, prior to enabling
4053  * device-initiated U1 or U2.  This lets the device know the exit latencies from
4054  * the time the device initiates a U1 or U2 exit, to the time it will receive a
4055  * packet from the host.
4056  *
4057  * This function will fail if the SEL or PEL values for udev are greater than
4058  * the maximum allowed values for the link state to be enabled.
4059  */
usb_req_set_sel(struct usb_device * udev)4060 static int usb_req_set_sel(struct usb_device *udev)
4061 {
4062 	struct usb_set_sel_req *sel_values;
4063 	unsigned long long u1_sel;
4064 	unsigned long long u1_pel;
4065 	unsigned long long u2_sel;
4066 	unsigned long long u2_pel;
4067 	int ret;
4068 
4069 	if (!udev->parent || udev->speed < USB_SPEED_SUPER || !udev->lpm_capable)
4070 		return 0;
4071 
4072 	/* Convert SEL and PEL stored in ns to us */
4073 	u1_sel = DIV_ROUND_UP(udev->u1_params.sel, 1000);
4074 	u1_pel = DIV_ROUND_UP(udev->u1_params.pel, 1000);
4075 	u2_sel = DIV_ROUND_UP(udev->u2_params.sel, 1000);
4076 	u2_pel = DIV_ROUND_UP(udev->u2_params.pel, 1000);
4077 
4078 	/*
4079 	 * Make sure that the calculated SEL and PEL values for the link
4080 	 * state we're enabling aren't bigger than the max SEL/PEL
4081 	 * value that will fit in the SET SEL control transfer.
4082 	 * Otherwise the device would get an incorrect idea of the exit
4083 	 * latency for the link state, and could start a device-initiated
4084 	 * U1/U2 when the exit latencies are too high.
4085 	 */
4086 	if (u1_sel > USB3_LPM_MAX_U1_SEL_PEL ||
4087 	    u1_pel > USB3_LPM_MAX_U1_SEL_PEL ||
4088 	    u2_sel > USB3_LPM_MAX_U2_SEL_PEL ||
4089 	    u2_pel > USB3_LPM_MAX_U2_SEL_PEL) {
4090 		dev_dbg(&udev->dev, "Device-initiated U1/U2 disabled due to long SEL or PEL\n");
4091 		return -EINVAL;
4092 	}
4093 
4094 	/*
4095 	 * usb_enable_lpm() can be called as part of a failed device reset,
4096 	 * which may be initiated by an error path of a mass storage driver.
4097 	 * Therefore, use GFP_NOIO.
4098 	 */
4099 	sel_values = kmalloc(sizeof *(sel_values), GFP_NOIO);
4100 	if (!sel_values)
4101 		return -ENOMEM;
4102 
4103 	sel_values->u1_sel = u1_sel;
4104 	sel_values->u1_pel = u1_pel;
4105 	sel_values->u2_sel = cpu_to_le16(u2_sel);
4106 	sel_values->u2_pel = cpu_to_le16(u2_pel);
4107 
4108 	ret = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
4109 			USB_REQ_SET_SEL,
4110 			USB_RECIP_DEVICE,
4111 			0, 0,
4112 			sel_values, sizeof *(sel_values),
4113 			USB_CTRL_SET_TIMEOUT);
4114 	kfree(sel_values);
4115 
4116 	if (ret > 0)
4117 		udev->lpm_devinit_allow = 1;
4118 
4119 	return ret;
4120 }
4121 
4122 /*
4123  * Enable or disable device-initiated U1 or U2 transitions.
4124  */
usb_set_device_initiated_lpm(struct usb_device * udev,enum usb3_link_state state,bool enable)4125 static int usb_set_device_initiated_lpm(struct usb_device *udev,
4126 		enum usb3_link_state state, bool enable)
4127 {
4128 	int ret;
4129 	int feature;
4130 
4131 	switch (state) {
4132 	case USB3_LPM_U1:
4133 		feature = USB_DEVICE_U1_ENABLE;
4134 		break;
4135 	case USB3_LPM_U2:
4136 		feature = USB_DEVICE_U2_ENABLE;
4137 		break;
4138 	default:
4139 		dev_warn(&udev->dev, "%s: Can't %s non-U1 or U2 state.\n",
4140 				__func__, enable ? "enable" : "disable");
4141 		return -EINVAL;
4142 	}
4143 
4144 	if (udev->state != USB_STATE_CONFIGURED) {
4145 		dev_dbg(&udev->dev, "%s: Can't %s %s state "
4146 				"for unconfigured device.\n",
4147 				__func__, enable ? "enable" : "disable",
4148 				usb3_lpm_names[state]);
4149 		return 0;
4150 	}
4151 
4152 	if (enable) {
4153 		/*
4154 		 * Now send the control transfer to enable device-initiated LPM
4155 		 * for either U1 or U2.
4156 		 */
4157 		ret = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
4158 				USB_REQ_SET_FEATURE,
4159 				USB_RECIP_DEVICE,
4160 				feature,
4161 				0, NULL, 0,
4162 				USB_CTRL_SET_TIMEOUT);
4163 	} else {
4164 		ret = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
4165 				USB_REQ_CLEAR_FEATURE,
4166 				USB_RECIP_DEVICE,
4167 				feature,
4168 				0, NULL, 0,
4169 				USB_CTRL_SET_TIMEOUT);
4170 	}
4171 	if (ret < 0) {
4172 		dev_warn(&udev->dev, "%s of device-initiated %s failed.\n",
4173 				enable ? "Enable" : "Disable",
4174 				usb3_lpm_names[state]);
4175 		return -EBUSY;
4176 	}
4177 	return 0;
4178 }
4179 
usb_set_lpm_timeout(struct usb_device * udev,enum usb3_link_state state,int timeout)4180 static int usb_set_lpm_timeout(struct usb_device *udev,
4181 		enum usb3_link_state state, int timeout)
4182 {
4183 	int ret;
4184 	int feature;
4185 
4186 	switch (state) {
4187 	case USB3_LPM_U1:
4188 		feature = USB_PORT_FEAT_U1_TIMEOUT;
4189 		break;
4190 	case USB3_LPM_U2:
4191 		feature = USB_PORT_FEAT_U2_TIMEOUT;
4192 		break;
4193 	default:
4194 		dev_warn(&udev->dev, "%s: Can't set timeout for non-U1 or U2 state.\n",
4195 				__func__);
4196 		return -EINVAL;
4197 	}
4198 
4199 	if (state == USB3_LPM_U1 && timeout > USB3_LPM_U1_MAX_TIMEOUT &&
4200 			timeout != USB3_LPM_DEVICE_INITIATED) {
4201 		dev_warn(&udev->dev, "Failed to set %s timeout to 0x%x, "
4202 				"which is a reserved value.\n",
4203 				usb3_lpm_names[state], timeout);
4204 		return -EINVAL;
4205 	}
4206 
4207 	ret = set_port_feature(udev->parent,
4208 			USB_PORT_LPM_TIMEOUT(timeout) | udev->portnum,
4209 			feature);
4210 	if (ret < 0) {
4211 		dev_warn(&udev->dev, "Failed to set %s timeout to 0x%x,"
4212 				"error code %i\n", usb3_lpm_names[state],
4213 				timeout, ret);
4214 		return -EBUSY;
4215 	}
4216 	if (state == USB3_LPM_U1)
4217 		udev->u1_params.timeout = timeout;
4218 	else
4219 		udev->u2_params.timeout = timeout;
4220 	return 0;
4221 }
4222 
4223 /*
4224  * Don't allow device intiated U1/U2 if the system exit latency + one bus
4225  * interval is greater than the minimum service interval of any active
4226  * periodic endpoint. See USB 3.2 section 9.4.9
4227  */
usb_device_may_initiate_lpm(struct usb_device * udev,enum usb3_link_state state)4228 static bool usb_device_may_initiate_lpm(struct usb_device *udev,
4229 					enum usb3_link_state state)
4230 {
4231 	unsigned int sel;		/* us */
4232 	int i, j;
4233 
4234 	if (!udev->lpm_devinit_allow)
4235 		return false;
4236 
4237 	if (state == USB3_LPM_U1)
4238 		sel = DIV_ROUND_UP(udev->u1_params.sel, 1000);
4239 	else if (state == USB3_LPM_U2)
4240 		sel = DIV_ROUND_UP(udev->u2_params.sel, 1000);
4241 	else
4242 		return false;
4243 
4244 	for (i = 0; i < udev->actconfig->desc.bNumInterfaces; i++) {
4245 		struct usb_interface *intf;
4246 		struct usb_endpoint_descriptor *desc;
4247 		unsigned int interval;
4248 
4249 		intf = udev->actconfig->interface[i];
4250 		if (!intf)
4251 			continue;
4252 
4253 		for (j = 0; j < intf->cur_altsetting->desc.bNumEndpoints; j++) {
4254 			desc = &intf->cur_altsetting->endpoint[j].desc;
4255 
4256 			if (usb_endpoint_xfer_int(desc) ||
4257 			    usb_endpoint_xfer_isoc(desc)) {
4258 				interval = (1 << (desc->bInterval - 1)) * 125;
4259 				if (sel + 125 > interval)
4260 					return false;
4261 			}
4262 		}
4263 	}
4264 	return true;
4265 }
4266 
4267 /*
4268  * Enable the hub-initiated U1/U2 idle timeouts, and enable device-initiated
4269  * U1/U2 entry.
4270  *
4271  * We will attempt to enable U1 or U2, but there are no guarantees that the
4272  * control transfers to set the hub timeout or enable device-initiated U1/U2
4273  * will be successful.
4274  *
4275  * If the control transfer to enable device-initiated U1/U2 entry fails, then
4276  * hub-initiated U1/U2 will be disabled.
4277  *
4278  * If we cannot set the parent hub U1/U2 timeout, we attempt to let the xHCI
4279  * driver know about it.  If that call fails, it should be harmless, and just
4280  * take up more slightly more bus bandwidth for unnecessary U1/U2 exit latency.
4281  */
usb_enable_link_state(struct usb_hcd * hcd,struct usb_device * udev,enum usb3_link_state state)4282 static void usb_enable_link_state(struct usb_hcd *hcd, struct usb_device *udev,
4283 		enum usb3_link_state state)
4284 {
4285 	int timeout;
4286 	__u8 u1_mel;
4287 	__le16 u2_mel;
4288 
4289 	/* Skip if the device BOS descriptor couldn't be read */
4290 	if (!udev->bos)
4291 		return;
4292 
4293 	u1_mel = udev->bos->ss_cap->bU1devExitLat;
4294 	u2_mel = udev->bos->ss_cap->bU2DevExitLat;
4295 
4296 	/* If the device says it doesn't have *any* exit latency to come out of
4297 	 * U1 or U2, it's probably lying.  Assume it doesn't implement that link
4298 	 * state.
4299 	 */
4300 	if ((state == USB3_LPM_U1 && u1_mel == 0) ||
4301 			(state == USB3_LPM_U2 && u2_mel == 0))
4302 		return;
4303 
4304 	/* We allow the host controller to set the U1/U2 timeout internally
4305 	 * first, so that it can change its schedule to account for the
4306 	 * additional latency to send data to a device in a lower power
4307 	 * link state.
4308 	 */
4309 	timeout = hcd->driver->enable_usb3_lpm_timeout(hcd, udev, state);
4310 
4311 	/* xHCI host controller doesn't want to enable this LPM state. */
4312 	if (timeout == 0)
4313 		return;
4314 
4315 	if (timeout < 0) {
4316 		dev_warn(&udev->dev, "Could not enable %s link state, "
4317 				"xHCI error %i.\n", usb3_lpm_names[state],
4318 				timeout);
4319 		return;
4320 	}
4321 
4322 	if (usb_set_lpm_timeout(udev, state, timeout)) {
4323 		/* If we can't set the parent hub U1/U2 timeout,
4324 		 * device-initiated LPM won't be allowed either, so let the xHCI
4325 		 * host know that this link state won't be enabled.
4326 		 */
4327 		hcd->driver->disable_usb3_lpm_timeout(hcd, udev, state);
4328 		return;
4329 	}
4330 
4331 	/* Only a configured device will accept the Set Feature
4332 	 * U1/U2_ENABLE
4333 	 */
4334 	if (udev->actconfig &&
4335 	    usb_device_may_initiate_lpm(udev, state)) {
4336 		if (usb_set_device_initiated_lpm(udev, state, true)) {
4337 			/*
4338 			 * Request to enable device initiated U1/U2 failed,
4339 			 * better to turn off lpm in this case.
4340 			 */
4341 			usb_set_lpm_timeout(udev, state, 0);
4342 			hcd->driver->disable_usb3_lpm_timeout(hcd, udev, state);
4343 			return;
4344 		}
4345 	}
4346 
4347 	if (state == USB3_LPM_U1)
4348 		udev->usb3_lpm_u1_enabled = 1;
4349 	else if (state == USB3_LPM_U2)
4350 		udev->usb3_lpm_u2_enabled = 1;
4351 }
4352 /*
4353  * Disable the hub-initiated U1/U2 idle timeouts, and disable device-initiated
4354  * U1/U2 entry.
4355  *
4356  * If this function returns -EBUSY, the parent hub will still allow U1/U2 entry.
4357  * If zero is returned, the parent will not allow the link to go into U1/U2.
4358  *
4359  * If zero is returned, device-initiated U1/U2 entry may still be enabled, but
4360  * it won't have an effect on the bus link state because the parent hub will
4361  * still disallow device-initiated U1/U2 entry.
4362  *
4363  * If zero is returned, the xHCI host controller may still think U1/U2 entry is
4364  * possible.  The result will be slightly more bus bandwidth will be taken up
4365  * (to account for U1/U2 exit latency), but it should be harmless.
4366  */
usb_disable_link_state(struct usb_hcd * hcd,struct usb_device * udev,enum usb3_link_state state)4367 static int usb_disable_link_state(struct usb_hcd *hcd, struct usb_device *udev,
4368 		enum usb3_link_state state)
4369 {
4370 	switch (state) {
4371 	case USB3_LPM_U1:
4372 	case USB3_LPM_U2:
4373 		break;
4374 	default:
4375 		dev_warn(&udev->dev, "%s: Can't disable non-U1 or U2 state.\n",
4376 				__func__);
4377 		return -EINVAL;
4378 	}
4379 
4380 	if (usb_set_lpm_timeout(udev, state, 0))
4381 		return -EBUSY;
4382 
4383 	usb_set_device_initiated_lpm(udev, state, false);
4384 
4385 	if (hcd->driver->disable_usb3_lpm_timeout(hcd, udev, state))
4386 		dev_warn(&udev->dev, "Could not disable xHCI %s timeout, "
4387 				"bus schedule bandwidth may be impacted.\n",
4388 				usb3_lpm_names[state]);
4389 
4390 	/* As soon as usb_set_lpm_timeout(0) return 0, hub initiated LPM
4391 	 * is disabled. Hub will disallows link to enter U1/U2 as well,
4392 	 * even device is initiating LPM. Hence LPM is disabled if hub LPM
4393 	 * timeout set to 0, no matter device-initiated LPM is disabled or
4394 	 * not.
4395 	 */
4396 	if (state == USB3_LPM_U1)
4397 		udev->usb3_lpm_u1_enabled = 0;
4398 	else if (state == USB3_LPM_U2)
4399 		udev->usb3_lpm_u2_enabled = 0;
4400 
4401 	return 0;
4402 }
4403 
4404 /*
4405  * Disable hub-initiated and device-initiated U1 and U2 entry.
4406  * Caller must own the bandwidth_mutex.
4407  *
4408  * This will call usb_enable_lpm() on failure, which will decrement
4409  * lpm_disable_count, and will re-enable LPM if lpm_disable_count reaches zero.
4410  */
usb_disable_lpm(struct usb_device * udev)4411 int usb_disable_lpm(struct usb_device *udev)
4412 {
4413 	struct usb_hcd *hcd;
4414 
4415 	if (!udev || !udev->parent ||
4416 			udev->speed < USB_SPEED_SUPER ||
4417 			!udev->lpm_capable ||
4418 			udev->state < USB_STATE_CONFIGURED)
4419 		return 0;
4420 
4421 	hcd = bus_to_hcd(udev->bus);
4422 	if (!hcd || !hcd->driver->disable_usb3_lpm_timeout)
4423 		return 0;
4424 
4425 	udev->lpm_disable_count++;
4426 	if ((udev->u1_params.timeout == 0 && udev->u2_params.timeout == 0))
4427 		return 0;
4428 
4429 	/* If LPM is enabled, attempt to disable it. */
4430 	if (usb_disable_link_state(hcd, udev, USB3_LPM_U1))
4431 		goto enable_lpm;
4432 	if (usb_disable_link_state(hcd, udev, USB3_LPM_U2))
4433 		goto enable_lpm;
4434 
4435 	return 0;
4436 
4437 enable_lpm:
4438 	usb_enable_lpm(udev);
4439 	return -EBUSY;
4440 }
4441 EXPORT_SYMBOL_GPL(usb_disable_lpm);
4442 
4443 /* Grab the bandwidth_mutex before calling usb_disable_lpm() */
usb_unlocked_disable_lpm(struct usb_device * udev)4444 int usb_unlocked_disable_lpm(struct usb_device *udev)
4445 {
4446 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
4447 	int ret;
4448 
4449 	if (!hcd)
4450 		return -EINVAL;
4451 
4452 	mutex_lock(hcd->bandwidth_mutex);
4453 	ret = usb_disable_lpm(udev);
4454 	mutex_unlock(hcd->bandwidth_mutex);
4455 
4456 	return ret;
4457 }
4458 EXPORT_SYMBOL_GPL(usb_unlocked_disable_lpm);
4459 
4460 /*
4461  * Attempt to enable device-initiated and hub-initiated U1 and U2 entry.  The
4462  * xHCI host policy may prevent U1 or U2 from being enabled.
4463  *
4464  * Other callers may have disabled link PM, so U1 and U2 entry will be disabled
4465  * until the lpm_disable_count drops to zero.  Caller must own the
4466  * bandwidth_mutex.
4467  */
usb_enable_lpm(struct usb_device * udev)4468 void usb_enable_lpm(struct usb_device *udev)
4469 {
4470 	struct usb_hcd *hcd;
4471 	struct usb_hub *hub;
4472 	struct usb_port *port_dev;
4473 
4474 	if (!udev || !udev->parent ||
4475 			udev->speed < USB_SPEED_SUPER ||
4476 			!udev->lpm_capable ||
4477 			udev->state < USB_STATE_CONFIGURED)
4478 		return;
4479 
4480 	udev->lpm_disable_count--;
4481 	hcd = bus_to_hcd(udev->bus);
4482 	/* Double check that we can both enable and disable LPM.
4483 	 * Device must be configured to accept set feature U1/U2 timeout.
4484 	 */
4485 	if (!hcd || !hcd->driver->enable_usb3_lpm_timeout ||
4486 			!hcd->driver->disable_usb3_lpm_timeout)
4487 		return;
4488 
4489 	if (udev->lpm_disable_count > 0)
4490 		return;
4491 
4492 	hub = usb_hub_to_struct_hub(udev->parent);
4493 	if (!hub)
4494 		return;
4495 
4496 	port_dev = hub->ports[udev->portnum - 1];
4497 
4498 	if (port_dev->usb3_lpm_u1_permit)
4499 		usb_enable_link_state(hcd, udev, USB3_LPM_U1);
4500 
4501 	if (port_dev->usb3_lpm_u2_permit)
4502 		usb_enable_link_state(hcd, udev, USB3_LPM_U2);
4503 }
4504 EXPORT_SYMBOL_GPL(usb_enable_lpm);
4505 
4506 /* Grab the bandwidth_mutex before calling usb_enable_lpm() */
usb_unlocked_enable_lpm(struct usb_device * udev)4507 void usb_unlocked_enable_lpm(struct usb_device *udev)
4508 {
4509 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
4510 
4511 	if (!hcd)
4512 		return;
4513 
4514 	mutex_lock(hcd->bandwidth_mutex);
4515 	usb_enable_lpm(udev);
4516 	mutex_unlock(hcd->bandwidth_mutex);
4517 }
4518 EXPORT_SYMBOL_GPL(usb_unlocked_enable_lpm);
4519 
4520 /* usb3 devices use U3 for disabled, make sure remote wakeup is disabled */
hub_usb3_port_prepare_disable(struct usb_hub * hub,struct usb_port * port_dev)4521 static void hub_usb3_port_prepare_disable(struct usb_hub *hub,
4522 					  struct usb_port *port_dev)
4523 {
4524 	struct usb_device *udev = port_dev->child;
4525 	int ret;
4526 
4527 	if (udev && udev->port_is_suspended && udev->do_remote_wakeup) {
4528 		ret = hub_set_port_link_state(hub, port_dev->portnum,
4529 					      USB_SS_PORT_LS_U0);
4530 		if (!ret) {
4531 			msleep(USB_RESUME_TIMEOUT);
4532 			ret = usb_disable_remote_wakeup(udev);
4533 		}
4534 		if (ret)
4535 			dev_warn(&udev->dev,
4536 				 "Port disable: can't disable remote wake\n");
4537 		udev->do_remote_wakeup = 0;
4538 	}
4539 }
4540 
4541 #else	/* CONFIG_PM */
4542 
4543 #define hub_suspend		NULL
4544 #define hub_resume		NULL
4545 #define hub_reset_resume	NULL
4546 
hub_usb3_port_prepare_disable(struct usb_hub * hub,struct usb_port * port_dev)4547 static inline void hub_usb3_port_prepare_disable(struct usb_hub *hub,
4548 						 struct usb_port *port_dev) { }
4549 
usb_disable_lpm(struct usb_device * udev)4550 int usb_disable_lpm(struct usb_device *udev)
4551 {
4552 	return 0;
4553 }
4554 EXPORT_SYMBOL_GPL(usb_disable_lpm);
4555 
usb_enable_lpm(struct usb_device * udev)4556 void usb_enable_lpm(struct usb_device *udev) { }
4557 EXPORT_SYMBOL_GPL(usb_enable_lpm);
4558 
usb_unlocked_disable_lpm(struct usb_device * udev)4559 int usb_unlocked_disable_lpm(struct usb_device *udev)
4560 {
4561 	return 0;
4562 }
4563 EXPORT_SYMBOL_GPL(usb_unlocked_disable_lpm);
4564 
usb_unlocked_enable_lpm(struct usb_device * udev)4565 void usb_unlocked_enable_lpm(struct usb_device *udev) { }
4566 EXPORT_SYMBOL_GPL(usb_unlocked_enable_lpm);
4567 
usb_disable_ltm(struct usb_device * udev)4568 int usb_disable_ltm(struct usb_device *udev)
4569 {
4570 	return 0;
4571 }
4572 EXPORT_SYMBOL_GPL(usb_disable_ltm);
4573 
usb_enable_ltm(struct usb_device * udev)4574 void usb_enable_ltm(struct usb_device *udev) { }
4575 EXPORT_SYMBOL_GPL(usb_enable_ltm);
4576 
hub_handle_remote_wakeup(struct usb_hub * hub,unsigned int port,u16 portstatus,u16 portchange)4577 static int hub_handle_remote_wakeup(struct usb_hub *hub, unsigned int port,
4578 		u16 portstatus, u16 portchange)
4579 {
4580 	return 0;
4581 }
4582 
usb_req_set_sel(struct usb_device * udev)4583 static int usb_req_set_sel(struct usb_device *udev)
4584 {
4585 	return 0;
4586 }
4587 
4588 #endif	/* CONFIG_PM */
4589 
4590 /*
4591  * USB-3 does not have a similar link state as USB-2 that will avoid negotiating
4592  * a connection with a plugged-in cable but will signal the host when the cable
4593  * is unplugged. Disable remote wake and set link state to U3 for USB-3 devices
4594  */
hub_port_disable(struct usb_hub * hub,int port1,int set_state)4595 static int hub_port_disable(struct usb_hub *hub, int port1, int set_state)
4596 {
4597 	struct usb_port *port_dev = hub->ports[port1 - 1];
4598 	struct usb_device *hdev = hub->hdev;
4599 	int ret = 0;
4600 
4601 	if (!hub->error) {
4602 		if (hub_is_superspeed(hub->hdev)) {
4603 			hub_usb3_port_prepare_disable(hub, port_dev);
4604 			ret = hub_set_port_link_state(hub, port_dev->portnum,
4605 						      USB_SS_PORT_LS_U3);
4606 		} else {
4607 			ret = usb_clear_port_feature(hdev, port1,
4608 					USB_PORT_FEAT_ENABLE);
4609 		}
4610 	}
4611 	if (port_dev->child && set_state)
4612 		usb_set_device_state(port_dev->child, USB_STATE_NOTATTACHED);
4613 	if (ret && ret != -ENODEV)
4614 		dev_err(&port_dev->dev, "cannot disable (err = %d)\n", ret);
4615 	return ret;
4616 }
4617 
4618 /*
4619  * usb_port_disable - disable a usb device's upstream port
4620  * @udev: device to disable
4621  * Context: @udev locked, must be able to sleep.
4622  *
4623  * Disables a USB device that isn't in active use.
4624  */
usb_port_disable(struct usb_device * udev)4625 int usb_port_disable(struct usb_device *udev)
4626 {
4627 	struct usb_hub *hub = usb_hub_to_struct_hub(udev->parent);
4628 
4629 	return hub_port_disable(hub, udev->portnum, 0);
4630 }
4631 
4632 /* USB 2.0 spec, 7.1.7.3 / fig 7-29:
4633  *
4634  * Between connect detection and reset signaling there must be a delay
4635  * of 100ms at least for debounce and power-settling.  The corresponding
4636  * timer shall restart whenever the downstream port detects a disconnect.
4637  *
4638  * Apparently there are some bluetooth and irda-dongles and a number of
4639  * low-speed devices for which this debounce period may last over a second.
4640  * Not covered by the spec - but easy to deal with.
4641  *
4642  * This implementation uses a 1500ms total debounce timeout; if the
4643  * connection isn't stable by then it returns -ETIMEDOUT.  It checks
4644  * every 25ms for transient disconnects.  When the port status has been
4645  * unchanged for 100ms it returns the port status.
4646  */
hub_port_debounce(struct usb_hub * hub,int port1,bool must_be_connected)4647 int hub_port_debounce(struct usb_hub *hub, int port1, bool must_be_connected)
4648 {
4649 	int ret;
4650 	u16 portchange, portstatus;
4651 	unsigned connection = 0xffff;
4652 	int total_time, stable_time = 0;
4653 	struct usb_port *port_dev = hub->ports[port1 - 1];
4654 
4655 	for (total_time = 0; ; total_time += HUB_DEBOUNCE_STEP) {
4656 		ret = usb_hub_port_status(hub, port1, &portstatus, &portchange);
4657 		if (ret < 0)
4658 			return ret;
4659 
4660 		if (!(portchange & USB_PORT_STAT_C_CONNECTION) &&
4661 		     (portstatus & USB_PORT_STAT_CONNECTION) == connection) {
4662 			if (!must_be_connected ||
4663 			     (connection == USB_PORT_STAT_CONNECTION))
4664 				stable_time += HUB_DEBOUNCE_STEP;
4665 			if (stable_time >= HUB_DEBOUNCE_STABLE)
4666 				break;
4667 		} else {
4668 			stable_time = 0;
4669 			connection = portstatus & USB_PORT_STAT_CONNECTION;
4670 		}
4671 
4672 		if (portchange & USB_PORT_STAT_C_CONNECTION) {
4673 			usb_clear_port_feature(hub->hdev, port1,
4674 					USB_PORT_FEAT_C_CONNECTION);
4675 		}
4676 
4677 		if (total_time >= HUB_DEBOUNCE_TIMEOUT)
4678 			break;
4679 		msleep(HUB_DEBOUNCE_STEP);
4680 	}
4681 
4682 	dev_dbg(&port_dev->dev, "debounce total %dms stable %dms status 0x%x\n",
4683 			total_time, stable_time, portstatus);
4684 
4685 	if (stable_time < HUB_DEBOUNCE_STABLE)
4686 		return -ETIMEDOUT;
4687 	return portstatus;
4688 }
4689 
usb_ep0_reinit(struct usb_device * udev)4690 void usb_ep0_reinit(struct usb_device *udev)
4691 {
4692 	usb_disable_endpoint(udev, 0 + USB_DIR_IN, true);
4693 	usb_disable_endpoint(udev, 0 + USB_DIR_OUT, true);
4694 	usb_enable_endpoint(udev, &udev->ep0, true);
4695 }
4696 EXPORT_SYMBOL_GPL(usb_ep0_reinit);
4697 
4698 #define usb_sndaddr0pipe()	(PIPE_CONTROL << 30)
4699 #define usb_rcvaddr0pipe()	((PIPE_CONTROL << 30) | USB_DIR_IN)
4700 
hub_set_address(struct usb_device * udev,int devnum)4701 static int hub_set_address(struct usb_device *udev, int devnum)
4702 {
4703 	int retval;
4704 	unsigned int timeout_ms = USB_CTRL_SET_TIMEOUT;
4705 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
4706 	struct usb_hub *hub = usb_hub_to_struct_hub(udev->parent);
4707 
4708 	if (hub->hdev->quirks & USB_QUIRK_SHORT_SET_ADDRESS_REQ_TIMEOUT)
4709 		timeout_ms = USB_SHORT_SET_ADDRESS_REQ_TIMEOUT;
4710 
4711 	/*
4712 	 * The host controller will choose the device address,
4713 	 * instead of the core having chosen it earlier
4714 	 */
4715 	if (!hcd->driver->address_device && devnum <= 1)
4716 		return -EINVAL;
4717 	if (udev->state == USB_STATE_ADDRESS)
4718 		return 0;
4719 	if (udev->state != USB_STATE_DEFAULT)
4720 		return -EINVAL;
4721 	if (hcd->driver->address_device)
4722 		retval = hcd->driver->address_device(hcd, udev, timeout_ms);
4723 	else
4724 		retval = usb_control_msg(udev, usb_sndaddr0pipe(),
4725 				USB_REQ_SET_ADDRESS, 0, devnum, 0,
4726 				NULL, 0, timeout_ms);
4727 	if (retval == 0) {
4728 		update_devnum(udev, devnum);
4729 		/* Device now using proper address. */
4730 		usb_set_device_state(udev, USB_STATE_ADDRESS);
4731 		usb_ep0_reinit(udev);
4732 	}
4733 	return retval;
4734 }
4735 
4736 /*
4737  * There are reports of USB 3.0 devices that say they support USB 2.0 Link PM
4738  * when they're plugged into a USB 2.0 port, but they don't work when LPM is
4739  * enabled.
4740  *
4741  * Only enable USB 2.0 Link PM if the port is internal (hardwired), or the
4742  * device says it supports the new USB 2.0 Link PM errata by setting the BESL
4743  * support bit in the BOS descriptor.
4744  */
hub_set_initial_usb2_lpm_policy(struct usb_device * udev)4745 static void hub_set_initial_usb2_lpm_policy(struct usb_device *udev)
4746 {
4747 	struct usb_hub *hub = usb_hub_to_struct_hub(udev->parent);
4748 	int connect_type = USB_PORT_CONNECT_TYPE_UNKNOWN;
4749 
4750 	if (!udev->usb2_hw_lpm_capable || !udev->bos)
4751 		return;
4752 
4753 	if (hub)
4754 		connect_type = hub->ports[udev->portnum - 1]->connect_type;
4755 
4756 	if ((udev->bos->ext_cap->bmAttributes & cpu_to_le32(USB_BESL_SUPPORT)) ||
4757 			connect_type == USB_PORT_CONNECT_TYPE_HARD_WIRED) {
4758 		udev->usb2_hw_lpm_allowed = 1;
4759 		usb_enable_usb2_hardware_lpm(udev);
4760 	}
4761 }
4762 
hub_enable_device(struct usb_device * udev)4763 static int hub_enable_device(struct usb_device *udev)
4764 {
4765 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
4766 
4767 	if (!hcd->driver->enable_device)
4768 		return 0;
4769 	if (udev->state == USB_STATE_ADDRESS)
4770 		return 0;
4771 	if (udev->state != USB_STATE_DEFAULT)
4772 		return -EINVAL;
4773 
4774 	return hcd->driver->enable_device(hcd, udev);
4775 }
4776 
4777 /*
4778  * Get the bMaxPacketSize0 value during initialization by reading the
4779  * device's device descriptor.  Since we don't already know this value,
4780  * the transfer is unsafe and it ignores I/O errors, only testing for
4781  * reasonable received values.
4782  *
4783  * For "old scheme" initialization, size will be 8 so we read just the
4784  * start of the device descriptor, which should work okay regardless of
4785  * the actual bMaxPacketSize0 value.  For "new scheme" initialization,
4786  * size will be 64 (and buf will point to a sufficiently large buffer),
4787  * which might not be kosher according to the USB spec but it's what
4788  * Windows does and what many devices expect.
4789  *
4790  * Returns: bMaxPacketSize0 or a negative error code.
4791  */
get_bMaxPacketSize0(struct usb_device * udev,struct usb_device_descriptor * buf,int size,bool first_time)4792 static int get_bMaxPacketSize0(struct usb_device *udev,
4793 		struct usb_device_descriptor *buf, int size, bool first_time)
4794 {
4795 	int i, rc;
4796 
4797 	/*
4798 	 * Retry on all errors; some devices are flakey.
4799 	 * 255 is for WUSB devices, we actually need to use
4800 	 * 512 (WUSB1.0[4.8.1]).
4801 	 */
4802 	for (i = 0; i < GET_MAXPACKET0_TRIES; ++i) {
4803 		/* Start with invalid values in case the transfer fails */
4804 		buf->bDescriptorType = buf->bMaxPacketSize0 = 0;
4805 		rc = usb_control_msg(udev, usb_rcvaddr0pipe(),
4806 				USB_REQ_GET_DESCRIPTOR, USB_DIR_IN,
4807 				USB_DT_DEVICE << 8, 0,
4808 				buf, size,
4809 				initial_descriptor_timeout);
4810 		switch (buf->bMaxPacketSize0) {
4811 		case 8: case 16: case 32: case 64: case 9:
4812 			if (buf->bDescriptorType == USB_DT_DEVICE) {
4813 				rc = buf->bMaxPacketSize0;
4814 				break;
4815 			}
4816 			fallthrough;
4817 		default:
4818 			if (rc >= 0)
4819 				rc = -EPROTO;
4820 			break;
4821 		}
4822 
4823 		/*
4824 		 * Some devices time out if they are powered on
4825 		 * when already connected. They need a second
4826 		 * reset, so return early. But only on the first
4827 		 * attempt, lest we get into a time-out/reset loop.
4828 		 */
4829 		if (rc > 0 || (rc == -ETIMEDOUT && first_time &&
4830 				udev->speed > USB_SPEED_FULL))
4831 			break;
4832 	}
4833 	return rc;
4834 }
4835 
4836 #define GET_DESCRIPTOR_BUFSIZE	64
4837 
4838 /* Reset device, (re)assign address, get device descriptor.
4839  * Device connection must be stable, no more debouncing needed.
4840  * Returns device in USB_STATE_ADDRESS, except on error.
4841  *
4842  * If this is called for an already-existing device (as part of
4843  * usb_reset_and_verify_device), the caller must own the device lock and
4844  * the port lock.  For a newly detected device that is not accessible
4845  * through any global pointers, it's not necessary to lock the device,
4846  * but it is still necessary to lock the port.
4847  *
4848  * For a newly detected device, @dev_descr must be NULL.  The device
4849  * descriptor retrieved from the device will then be stored in
4850  * @udev->descriptor.  For an already existing device, @dev_descr
4851  * must be non-NULL.  The device descriptor will be stored there,
4852  * not in @udev->descriptor, because descriptors for registered
4853  * devices are meant to be immutable.
4854  */
4855 static int
hub_port_init(struct usb_hub * hub,struct usb_device * udev,int port1,int retry_counter,struct usb_device_descriptor * dev_descr)4856 hub_port_init(struct usb_hub *hub, struct usb_device *udev, int port1,
4857 		int retry_counter, struct usb_device_descriptor *dev_descr)
4858 {
4859 	struct usb_device	*hdev = hub->hdev;
4860 	struct usb_hcd		*hcd = bus_to_hcd(hdev->bus);
4861 	struct usb_port		*port_dev = hub->ports[port1 - 1];
4862 	int			retries, operations, retval, i;
4863 	unsigned		delay = HUB_SHORT_RESET_TIME;
4864 	enum usb_device_speed	oldspeed = udev->speed;
4865 	const char		*speed;
4866 	int			devnum = udev->devnum;
4867 	const char		*driver_name;
4868 	bool			do_new_scheme;
4869 	const bool		initial = !dev_descr;
4870 	int			maxp0;
4871 	struct usb_device_descriptor	*buf, *descr;
4872 
4873 	buf = kmalloc(GET_DESCRIPTOR_BUFSIZE, GFP_NOIO);
4874 	if (!buf)
4875 		return -ENOMEM;
4876 
4877 	/* root hub ports have a slightly longer reset period
4878 	 * (from USB 2.0 spec, section 7.1.7.5)
4879 	 */
4880 	if (!hdev->parent) {
4881 		delay = HUB_ROOT_RESET_TIME;
4882 		if (port1 == hdev->bus->otg_port)
4883 			hdev->bus->b_hnp_enable = 0;
4884 	}
4885 
4886 	/* Some low speed devices have problems with the quick delay, so */
4887 	/*  be a bit pessimistic with those devices. RHbug #23670 */
4888 	if (oldspeed == USB_SPEED_LOW)
4889 		delay = HUB_LONG_RESET_TIME;
4890 
4891 	/* Reset the device; full speed may morph to high speed */
4892 	/* FIXME a USB 2.0 device may morph into SuperSpeed on reset. */
4893 	retval = hub_port_reset(hub, port1, udev, delay, false);
4894 	if (retval < 0)		/* error or disconnect */
4895 		goto fail;
4896 	/* success, speed is known */
4897 
4898 	retval = -ENODEV;
4899 
4900 	/* Don't allow speed changes at reset, except usb 3.0 to faster */
4901 	if (oldspeed != USB_SPEED_UNKNOWN && oldspeed != udev->speed &&
4902 	    !(oldspeed == USB_SPEED_SUPER && udev->speed > oldspeed)) {
4903 		dev_dbg(&udev->dev, "device reset changed speed!\n");
4904 		goto fail;
4905 	}
4906 	oldspeed = udev->speed;
4907 
4908 	if (initial) {
4909 		/* USB 2.0 section 5.5.3 talks about ep0 maxpacket ...
4910 		 * it's fixed size except for full speed devices.
4911 		 */
4912 		switch (udev->speed) {
4913 		case USB_SPEED_SUPER_PLUS:
4914 		case USB_SPEED_SUPER:
4915 			udev->ep0.desc.wMaxPacketSize = cpu_to_le16(512);
4916 			break;
4917 		case USB_SPEED_HIGH:		/* fixed at 64 */
4918 			udev->ep0.desc.wMaxPacketSize = cpu_to_le16(64);
4919 			break;
4920 		case USB_SPEED_FULL:		/* 8, 16, 32, or 64 */
4921 			/* to determine the ep0 maxpacket size, try to read
4922 			 * the device descriptor to get bMaxPacketSize0 and
4923 			 * then correct our initial guess.
4924 			 */
4925 			udev->ep0.desc.wMaxPacketSize = cpu_to_le16(64);
4926 			break;
4927 		case USB_SPEED_LOW:		/* fixed at 8 */
4928 			udev->ep0.desc.wMaxPacketSize = cpu_to_le16(8);
4929 			break;
4930 		default:
4931 			goto fail;
4932 		}
4933 	}
4934 
4935 	speed = usb_speed_string(udev->speed);
4936 
4937 	/*
4938 	 * The controller driver may be NULL if the controller device
4939 	 * is the middle device between platform device and roothub.
4940 	 * This middle device may not need a device driver due to
4941 	 * all hardware control can be at platform device driver, this
4942 	 * platform device is usually a dual-role USB controller device.
4943 	 */
4944 	if (udev->bus->controller->driver)
4945 		driver_name = udev->bus->controller->driver->name;
4946 	else
4947 		driver_name = udev->bus->sysdev->driver->name;
4948 
4949 	if (udev->speed < USB_SPEED_SUPER)
4950 		dev_info(&udev->dev,
4951 				"%s %s USB device number %d using %s\n",
4952 				(initial ? "new" : "reset"), speed,
4953 				devnum, driver_name);
4954 
4955 	if (initial) {
4956 		/* Set up TT records, if needed  */
4957 		if (hdev->tt) {
4958 			udev->tt = hdev->tt;
4959 			udev->ttport = hdev->ttport;
4960 		} else if (udev->speed != USB_SPEED_HIGH
4961 				&& hdev->speed == USB_SPEED_HIGH) {
4962 			if (!hub->tt.hub) {
4963 				dev_err(&udev->dev, "parent hub has no TT\n");
4964 				retval = -EINVAL;
4965 				goto fail;
4966 			}
4967 			udev->tt = &hub->tt;
4968 			udev->ttport = port1;
4969 		}
4970 	}
4971 
4972 	/* Why interleave GET_DESCRIPTOR and SET_ADDRESS this way?
4973 	 * Because device hardware and firmware is sometimes buggy in
4974 	 * this area, and this is how Linux has done it for ages.
4975 	 * Change it cautiously.
4976 	 *
4977 	 * NOTE:  If use_new_scheme() is true we will start by issuing
4978 	 * a 64-byte GET_DESCRIPTOR request.  This is what Windows does,
4979 	 * so it may help with some non-standards-compliant devices.
4980 	 * Otherwise we start with SET_ADDRESS and then try to read the
4981 	 * first 8 bytes of the device descriptor to get the ep0 maxpacket
4982 	 * value.
4983 	 */
4984 	do_new_scheme = use_new_scheme(udev, retry_counter, port_dev);
4985 
4986 	for (retries = 0; retries < GET_DESCRIPTOR_TRIES; (++retries, msleep(100))) {
4987 		if (hub_port_stop_enumerate(hub, port1, retries)) {
4988 			retval = -ENODEV;
4989 			break;
4990 		}
4991 
4992 		if (do_new_scheme) {
4993 			retval = hub_enable_device(udev);
4994 			if (retval < 0) {
4995 				dev_err(&udev->dev,
4996 					"hub failed to enable device, error %d\n",
4997 					retval);
4998 				goto fail;
4999 			}
5000 
5001 			maxp0 = get_bMaxPacketSize0(udev, buf,
5002 					GET_DESCRIPTOR_BUFSIZE, retries == 0);
5003 			if (maxp0 > 0 && !initial &&
5004 					maxp0 != udev->descriptor.bMaxPacketSize0) {
5005 				dev_err(&udev->dev, "device reset changed ep0 maxpacket size!\n");
5006 				retval = -ENODEV;
5007 				goto fail;
5008 			}
5009 
5010 			retval = hub_port_reset(hub, port1, udev, delay, false);
5011 			if (retval < 0)		/* error or disconnect */
5012 				goto fail;
5013 			if (oldspeed != udev->speed) {
5014 				dev_dbg(&udev->dev,
5015 					"device reset changed speed!\n");
5016 				retval = -ENODEV;
5017 				goto fail;
5018 			}
5019 			if (maxp0 < 0) {
5020 				if (maxp0 != -ENODEV)
5021 					dev_err(&udev->dev, "device descriptor read/64, error %d\n",
5022 							maxp0);
5023 				retval = maxp0;
5024 				continue;
5025 			}
5026 		}
5027 
5028 		for (operations = 0; operations < SET_ADDRESS_TRIES; ++operations) {
5029 			retval = hub_set_address(udev, devnum);
5030 			if (retval >= 0)
5031 				break;
5032 			msleep(200);
5033 		}
5034 		if (retval < 0) {
5035 			if (retval != -ENODEV)
5036 				dev_err(&udev->dev, "device not accepting address %d, error %d\n",
5037 						devnum, retval);
5038 			goto fail;
5039 		}
5040 		if (udev->speed >= USB_SPEED_SUPER) {
5041 			devnum = udev->devnum;
5042 			dev_info(&udev->dev,
5043 					"%s SuperSpeed%s%s USB device number %d using %s\n",
5044 					(udev->config) ? "reset" : "new",
5045 				 (udev->speed == USB_SPEED_SUPER_PLUS) ?
5046 						" Plus" : "",
5047 				 (udev->ssp_rate == USB_SSP_GEN_2x2) ?
5048 						" Gen 2x2" :
5049 				 (udev->ssp_rate == USB_SSP_GEN_2x1) ?
5050 						" Gen 2x1" :
5051 				 (udev->ssp_rate == USB_SSP_GEN_1x2) ?
5052 						" Gen 1x2" : "",
5053 				 devnum, driver_name);
5054 		}
5055 
5056 		/*
5057 		 * cope with hardware quirkiness:
5058 		 *  - let SET_ADDRESS settle, some device hardware wants it
5059 		 *  - read ep0 maxpacket even for high and low speed,
5060 		 */
5061 		msleep(10);
5062 
5063 		if (do_new_scheme)
5064 			break;
5065 
5066 		maxp0 = get_bMaxPacketSize0(udev, buf, 8, retries == 0);
5067 		if (maxp0 < 0) {
5068 			retval = maxp0;
5069 			if (retval != -ENODEV)
5070 				dev_err(&udev->dev,
5071 					"device descriptor read/8, error %d\n",
5072 					retval);
5073 		} else {
5074 			u32 delay;
5075 
5076 			if (!initial && maxp0 != udev->descriptor.bMaxPacketSize0) {
5077 				dev_err(&udev->dev, "device reset changed ep0 maxpacket size!\n");
5078 				retval = -ENODEV;
5079 				goto fail;
5080 			}
5081 
5082 			delay = udev->parent->hub_delay;
5083 			udev->hub_delay = min_t(u32, delay,
5084 						USB_TP_TRANSMISSION_DELAY_MAX);
5085 			retval = usb_set_isoch_delay(udev);
5086 			if (retval) {
5087 				dev_dbg(&udev->dev,
5088 					"Failed set isoch delay, error %d\n",
5089 					retval);
5090 				retval = 0;
5091 			}
5092 			break;
5093 		}
5094 	}
5095 	if (retval)
5096 		goto fail;
5097 
5098 	/*
5099 	 * Check the ep0 maxpacket guess and correct it if necessary.
5100 	 * maxp0 is the value stored in the device descriptor;
5101 	 * i is the value it encodes (logarithmic for SuperSpeed or greater).
5102 	 */
5103 	i = maxp0;
5104 	if (udev->speed >= USB_SPEED_SUPER) {
5105 		if (maxp0 <= 16)
5106 			i = 1 << maxp0;
5107 		else
5108 			i = 0;		/* Invalid */
5109 	}
5110 	if (usb_endpoint_maxp(&udev->ep0.desc) == i) {
5111 		;	/* Initial ep0 maxpacket guess is right */
5112 	} else if (((udev->speed == USB_SPEED_FULL ||
5113 				udev->speed == USB_SPEED_HIGH) &&
5114 			(i == 8 || i == 16 || i == 32 || i == 64)) ||
5115 			(udev->speed >= USB_SPEED_SUPER && i > 0)) {
5116 		/* Initial guess is wrong; use the descriptor's value */
5117 		if (udev->speed == USB_SPEED_FULL)
5118 			dev_dbg(&udev->dev, "ep0 maxpacket = %d\n", i);
5119 		else
5120 			dev_warn(&udev->dev, "Using ep0 maxpacket: %d\n", i);
5121 		udev->ep0.desc.wMaxPacketSize = cpu_to_le16(i);
5122 		usb_ep0_reinit(udev);
5123 	} else {
5124 		/* Initial guess is wrong and descriptor's value is invalid */
5125 		dev_err(&udev->dev, "Invalid ep0 maxpacket: %d\n", maxp0);
5126 		retval = -EMSGSIZE;
5127 		goto fail;
5128 	}
5129 
5130 	descr = usb_get_device_descriptor(udev);
5131 	if (IS_ERR(descr)) {
5132 		retval = PTR_ERR(descr);
5133 		if (retval != -ENODEV)
5134 			dev_err(&udev->dev, "device descriptor read/all, error %d\n",
5135 					retval);
5136 		goto fail;
5137 	}
5138 	if (initial)
5139 		udev->descriptor = *descr;
5140 	else
5141 		*dev_descr = *descr;
5142 	kfree(descr);
5143 
5144 	/*
5145 	 * Some superspeed devices have finished the link training process
5146 	 * and attached to a superspeed hub port, but the device descriptor
5147 	 * got from those devices show they aren't superspeed devices. Warm
5148 	 * reset the port attached by the devices can fix them.
5149 	 */
5150 	if ((udev->speed >= USB_SPEED_SUPER) &&
5151 			(le16_to_cpu(udev->descriptor.bcdUSB) < 0x0300)) {
5152 		dev_err(&udev->dev, "got a wrong device descriptor, warm reset device\n");
5153 		hub_port_reset(hub, port1, udev, HUB_BH_RESET_TIME, true);
5154 		retval = -EINVAL;
5155 		goto fail;
5156 	}
5157 
5158 	usb_detect_quirks(udev);
5159 
5160 	if (le16_to_cpu(udev->descriptor.bcdUSB) >= 0x0201) {
5161 		retval = usb_get_bos_descriptor(udev);
5162 		if (!retval) {
5163 			udev->lpm_capable = usb_device_supports_lpm(udev);
5164 			udev->lpm_disable_count = 1;
5165 			usb_set_lpm_parameters(udev);
5166 			usb_req_set_sel(udev);
5167 		}
5168 	}
5169 
5170 	retval = 0;
5171 	/* notify HCD that we have a device connected and addressed */
5172 	if (hcd->driver->update_device)
5173 		hcd->driver->update_device(hcd, udev);
5174 	hub_set_initial_usb2_lpm_policy(udev);
5175 fail:
5176 	if (retval) {
5177 		hub_port_disable(hub, port1, 0);
5178 		update_devnum(udev, devnum);	/* for disconnect processing */
5179 	}
5180 	kfree(buf);
5181 	return retval;
5182 }
5183 
5184 static void
check_highspeed(struct usb_hub * hub,struct usb_device * udev,int port1)5185 check_highspeed(struct usb_hub *hub, struct usb_device *udev, int port1)
5186 {
5187 	struct usb_qualifier_descriptor	*qual;
5188 	int				status;
5189 
5190 	if (udev->quirks & USB_QUIRK_DEVICE_QUALIFIER)
5191 		return;
5192 
5193 	qual = kmalloc(sizeof *qual, GFP_KERNEL);
5194 	if (qual == NULL)
5195 		return;
5196 
5197 	status = usb_get_descriptor(udev, USB_DT_DEVICE_QUALIFIER, 0,
5198 			qual, sizeof *qual);
5199 	if (status == sizeof *qual) {
5200 		dev_info(&udev->dev, "not running at top speed; "
5201 			"connect to a high speed hub\n");
5202 		/* hub LEDs are probably harder to miss than syslog */
5203 		if (hub->has_indicators) {
5204 			hub->indicator[port1-1] = INDICATOR_GREEN_BLINK;
5205 			queue_delayed_work(system_power_efficient_wq,
5206 					&hub->leds, 0);
5207 		}
5208 	}
5209 	kfree(qual);
5210 }
5211 
5212 static unsigned
hub_power_remaining(struct usb_hub * hub)5213 hub_power_remaining(struct usb_hub *hub)
5214 {
5215 	struct usb_device *hdev = hub->hdev;
5216 	int remaining;
5217 	int port1;
5218 
5219 	if (!hub->limited_power)
5220 		return 0;
5221 
5222 	remaining = hdev->bus_mA - hub->descriptor->bHubContrCurrent;
5223 	for (port1 = 1; port1 <= hdev->maxchild; ++port1) {
5224 		struct usb_port *port_dev = hub->ports[port1 - 1];
5225 		struct usb_device *udev = port_dev->child;
5226 		unsigned unit_load;
5227 		int delta;
5228 
5229 		if (!udev)
5230 			continue;
5231 		if (hub_is_superspeed(udev))
5232 			unit_load = 150;
5233 		else
5234 			unit_load = 100;
5235 
5236 		/*
5237 		 * Unconfigured devices may not use more than one unit load,
5238 		 * or 8mA for OTG ports
5239 		 */
5240 		if (udev->actconfig)
5241 			delta = usb_get_max_power(udev, udev->actconfig);
5242 		else if (port1 != udev->bus->otg_port || hdev->parent)
5243 			delta = unit_load;
5244 		else
5245 			delta = 8;
5246 		if (delta > hub->mA_per_port)
5247 			dev_warn(&port_dev->dev, "%dmA is over %umA budget!\n",
5248 					delta, hub->mA_per_port);
5249 		remaining -= delta;
5250 	}
5251 	if (remaining < 0) {
5252 		dev_warn(hub->intfdev, "%dmA over power budget!\n",
5253 			-remaining);
5254 		remaining = 0;
5255 	}
5256 	return remaining;
5257 }
5258 
5259 
descriptors_changed(struct usb_device * udev,struct usb_device_descriptor * new_device_descriptor,struct usb_host_bos * old_bos)5260 static int descriptors_changed(struct usb_device *udev,
5261 		struct usb_device_descriptor *new_device_descriptor,
5262 		struct usb_host_bos *old_bos)
5263 {
5264 	int		changed = 0;
5265 	unsigned	index;
5266 	unsigned	serial_len = 0;
5267 	unsigned	len;
5268 	unsigned	old_length;
5269 	int		length;
5270 	char		*buf;
5271 
5272 	if (memcmp(&udev->descriptor, new_device_descriptor,
5273 			sizeof(*new_device_descriptor)) != 0)
5274 		return 1;
5275 
5276 	if ((old_bos && !udev->bos) || (!old_bos && udev->bos))
5277 		return 1;
5278 	if (udev->bos) {
5279 		len = le16_to_cpu(udev->bos->desc->wTotalLength);
5280 		if (len != le16_to_cpu(old_bos->desc->wTotalLength))
5281 			return 1;
5282 		if (memcmp(udev->bos->desc, old_bos->desc, len))
5283 			return 1;
5284 	}
5285 
5286 	/* Since the idVendor, idProduct, and bcdDevice values in the
5287 	 * device descriptor haven't changed, we will assume the
5288 	 * Manufacturer and Product strings haven't changed either.
5289 	 * But the SerialNumber string could be different (e.g., a
5290 	 * different flash card of the same brand).
5291 	 */
5292 	if (udev->serial)
5293 		serial_len = strlen(udev->serial) + 1;
5294 
5295 	len = serial_len;
5296 	for (index = 0; index < udev->descriptor.bNumConfigurations; index++) {
5297 		old_length = le16_to_cpu(udev->config[index].desc.wTotalLength);
5298 		len = max(len, old_length);
5299 	}
5300 
5301 	buf = kmalloc(len, GFP_NOIO);
5302 	if (!buf)
5303 		/* assume the worst */
5304 		return 1;
5305 
5306 	for (index = 0; index < udev->descriptor.bNumConfigurations; index++) {
5307 		old_length = le16_to_cpu(udev->config[index].desc.wTotalLength);
5308 		length = usb_get_descriptor(udev, USB_DT_CONFIG, index, buf,
5309 				old_length);
5310 		if (length != old_length) {
5311 			dev_dbg(&udev->dev, "config index %d, error %d\n",
5312 					index, length);
5313 			changed = 1;
5314 			break;
5315 		}
5316 		if (memcmp(buf, udev->rawdescriptors[index], old_length)
5317 				!= 0) {
5318 			dev_dbg(&udev->dev, "config index %d changed (#%d)\n",
5319 				index,
5320 				((struct usb_config_descriptor *) buf)->
5321 					bConfigurationValue);
5322 			changed = 1;
5323 			break;
5324 		}
5325 	}
5326 
5327 	if (!changed && serial_len) {
5328 		length = usb_string(udev, udev->descriptor.iSerialNumber,
5329 				buf, serial_len);
5330 		if (length + 1 != serial_len) {
5331 			dev_dbg(&udev->dev, "serial string error %d\n",
5332 					length);
5333 			changed = 1;
5334 		} else if (memcmp(buf, udev->serial, length) != 0) {
5335 			dev_dbg(&udev->dev, "serial string changed\n");
5336 			changed = 1;
5337 		}
5338 	}
5339 
5340 	kfree(buf);
5341 	return changed;
5342 }
5343 
hub_port_connect(struct usb_hub * hub,int port1,u16 portstatus,u16 portchange)5344 static void hub_port_connect(struct usb_hub *hub, int port1, u16 portstatus,
5345 		u16 portchange)
5346 {
5347 	int status = -ENODEV;
5348 	int i;
5349 	unsigned unit_load;
5350 	struct usb_device *hdev = hub->hdev;
5351 	struct usb_hcd *hcd = bus_to_hcd(hdev->bus);
5352 	struct usb_port *port_dev = hub->ports[port1 - 1];
5353 	struct usb_device *udev = port_dev->child;
5354 	static int unreliable_port = -1;
5355 	bool retry_locked;
5356 
5357 	/* Disconnect any existing devices under this port */
5358 	if (udev) {
5359 		if (hcd->usb_phy && !hdev->parent)
5360 			usb_phy_notify_disconnect(hcd->usb_phy, udev->speed);
5361 		usb_disconnect(&port_dev->child);
5362 	}
5363 
5364 	/* We can forget about a "removed" device when there's a physical
5365 	 * disconnect or the connect status changes.
5366 	 */
5367 	if (!(portstatus & USB_PORT_STAT_CONNECTION) ||
5368 			(portchange & USB_PORT_STAT_C_CONNECTION))
5369 		clear_bit(port1, hub->removed_bits);
5370 
5371 	if (portchange & (USB_PORT_STAT_C_CONNECTION |
5372 				USB_PORT_STAT_C_ENABLE)) {
5373 		status = hub_port_debounce_be_stable(hub, port1);
5374 		if (status < 0) {
5375 			if (status != -ENODEV &&
5376 				port1 != unreliable_port &&
5377 				printk_ratelimit())
5378 				dev_err(&port_dev->dev, "connect-debounce failed\n");
5379 			portstatus &= ~USB_PORT_STAT_CONNECTION;
5380 			unreliable_port = port1;
5381 		} else {
5382 			portstatus = status;
5383 		}
5384 	}
5385 
5386 	/* Return now if debouncing failed or nothing is connected or
5387 	 * the device was "removed".
5388 	 */
5389 	if (!(portstatus & USB_PORT_STAT_CONNECTION) ||
5390 			test_bit(port1, hub->removed_bits)) {
5391 
5392 		/*
5393 		 * maybe switch power back on (e.g. root hub was reset)
5394 		 * but only if the port isn't owned by someone else.
5395 		 */
5396 		if (hub_is_port_power_switchable(hub)
5397 				&& !usb_port_is_power_on(hub, portstatus)
5398 				&& !port_dev->port_owner)
5399 			set_port_feature(hdev, port1, USB_PORT_FEAT_POWER);
5400 
5401 		if (portstatus & USB_PORT_STAT_ENABLE)
5402 			goto done;
5403 		return;
5404 	}
5405 	if (hub_is_superspeed(hub->hdev))
5406 		unit_load = 150;
5407 	else
5408 		unit_load = 100;
5409 
5410 	status = 0;
5411 
5412 	for (i = 0; i < PORT_INIT_TRIES; i++) {
5413 		if (hub_port_stop_enumerate(hub, port1, i)) {
5414 			status = -ENODEV;
5415 			break;
5416 		}
5417 
5418 		usb_lock_port(port_dev);
5419 		mutex_lock(hcd->address0_mutex);
5420 		retry_locked = true;
5421 		/* reallocate for each attempt, since references
5422 		 * to the previous one can escape in various ways
5423 		 */
5424 		udev = usb_alloc_dev(hdev, hdev->bus, port1);
5425 		if (!udev) {
5426 			dev_err(&port_dev->dev,
5427 					"couldn't allocate usb_device\n");
5428 			mutex_unlock(hcd->address0_mutex);
5429 			usb_unlock_port(port_dev);
5430 			goto done;
5431 		}
5432 
5433 		usb_set_device_state(udev, USB_STATE_POWERED);
5434 		udev->bus_mA = hub->mA_per_port;
5435 		udev->level = hdev->level + 1;
5436 
5437 		/* Devices connected to SuperSpeed hubs are USB 3.0 or later */
5438 		if (hub_is_superspeed(hub->hdev))
5439 			udev->speed = USB_SPEED_SUPER;
5440 		else
5441 			udev->speed = USB_SPEED_UNKNOWN;
5442 
5443 		choose_devnum(udev);
5444 		if (udev->devnum <= 0) {
5445 			status = -ENOTCONN;	/* Don't retry */
5446 			goto loop;
5447 		}
5448 
5449 		/* reset (non-USB 3.0 devices) and get descriptor */
5450 		status = hub_port_init(hub, udev, port1, i, NULL);
5451 		if (status < 0)
5452 			goto loop;
5453 
5454 		mutex_unlock(hcd->address0_mutex);
5455 		usb_unlock_port(port_dev);
5456 		retry_locked = false;
5457 
5458 		if (udev->quirks & USB_QUIRK_DELAY_INIT)
5459 			msleep(2000);
5460 
5461 		/* consecutive bus-powered hubs aren't reliable; they can
5462 		 * violate the voltage drop budget.  if the new child has
5463 		 * a "powered" LED, users should notice we didn't enable it
5464 		 * (without reading syslog), even without per-port LEDs
5465 		 * on the parent.
5466 		 */
5467 		if (udev->descriptor.bDeviceClass == USB_CLASS_HUB
5468 				&& udev->bus_mA <= unit_load) {
5469 			u16	devstat;
5470 
5471 			status = usb_get_std_status(udev, USB_RECIP_DEVICE, 0,
5472 					&devstat);
5473 			if (status) {
5474 				dev_dbg(&udev->dev, "get status %d ?\n", status);
5475 				goto loop_disable;
5476 			}
5477 			if ((devstat & (1 << USB_DEVICE_SELF_POWERED)) == 0) {
5478 				dev_err(&udev->dev,
5479 					"can't connect bus-powered hub "
5480 					"to this port\n");
5481 				if (hub->has_indicators) {
5482 					hub->indicator[port1-1] =
5483 						INDICATOR_AMBER_BLINK;
5484 					queue_delayed_work(
5485 						system_power_efficient_wq,
5486 						&hub->leds, 0);
5487 				}
5488 				status = -ENOTCONN;	/* Don't retry */
5489 				goto loop_disable;
5490 			}
5491 		}
5492 
5493 		/* check for devices running slower than they could */
5494 		if (le16_to_cpu(udev->descriptor.bcdUSB) >= 0x0200
5495 				&& udev->speed == USB_SPEED_FULL
5496 				&& highspeed_hubs != 0)
5497 			check_highspeed(hub, udev, port1);
5498 
5499 		/* Store the parent's children[] pointer.  At this point
5500 		 * udev becomes globally accessible, although presumably
5501 		 * no one will look at it until hdev is unlocked.
5502 		 */
5503 		status = 0;
5504 
5505 		mutex_lock(&usb_port_peer_mutex);
5506 
5507 		/* We mustn't add new devices if the parent hub has
5508 		 * been disconnected; we would race with the
5509 		 * recursively_mark_NOTATTACHED() routine.
5510 		 */
5511 		spin_lock_irq(&device_state_lock);
5512 		if (hdev->state == USB_STATE_NOTATTACHED)
5513 			status = -ENOTCONN;
5514 		else
5515 			port_dev->child = udev;
5516 		spin_unlock_irq(&device_state_lock);
5517 		mutex_unlock(&usb_port_peer_mutex);
5518 
5519 		/* Run it through the hoops (find a driver, etc) */
5520 		if (!status) {
5521 			status = usb_new_device(udev);
5522 			if (status) {
5523 				mutex_lock(&usb_port_peer_mutex);
5524 				spin_lock_irq(&device_state_lock);
5525 				port_dev->child = NULL;
5526 				spin_unlock_irq(&device_state_lock);
5527 				mutex_unlock(&usb_port_peer_mutex);
5528 			} else {
5529 				if (hcd->usb_phy && !hdev->parent)
5530 					usb_phy_notify_connect(hcd->usb_phy,
5531 							udev->speed);
5532 			}
5533 		}
5534 
5535 		if (status)
5536 			goto loop_disable;
5537 
5538 		status = hub_power_remaining(hub);
5539 		if (status)
5540 			dev_dbg(hub->intfdev, "%dmA power budget left\n", status);
5541 
5542 		return;
5543 
5544 loop_disable:
5545 		hub_port_disable(hub, port1, 1);
5546 loop:
5547 		usb_ep0_reinit(udev);
5548 		release_devnum(udev);
5549 		hub_free_dev(udev);
5550 		if (retry_locked) {
5551 			mutex_unlock(hcd->address0_mutex);
5552 			usb_unlock_port(port_dev);
5553 		}
5554 		usb_put_dev(udev);
5555 		if ((status == -ENOTCONN) || (status == -ENOTSUPP))
5556 			break;
5557 
5558 		/* When halfway through our retry count, power-cycle the port */
5559 		if (i == (PORT_INIT_TRIES - 1) / 2) {
5560 			dev_info(&port_dev->dev, "attempt power cycle\n");
5561 			usb_hub_set_port_power(hdev, hub, port1, false);
5562 			msleep(2 * hub_power_on_good_delay(hub));
5563 			usb_hub_set_port_power(hdev, hub, port1, true);
5564 			msleep(hub_power_on_good_delay(hub));
5565 		}
5566 	}
5567 	if (hub->hdev->parent ||
5568 			!hcd->driver->port_handed_over ||
5569 			!(hcd->driver->port_handed_over)(hcd, port1)) {
5570 		if (status != -ENOTCONN && status != -ENODEV)
5571 			dev_err(&port_dev->dev,
5572 					"unable to enumerate USB device\n");
5573 	}
5574 
5575 done:
5576 	hub_port_disable(hub, port1, 1);
5577 	if (hcd->driver->relinquish_port && !hub->hdev->parent) {
5578 		if (status != -ENOTCONN && status != -ENODEV)
5579 			hcd->driver->relinquish_port(hcd, port1);
5580 	}
5581 }
5582 
5583 /* Handle physical or logical connection change events.
5584  * This routine is called when:
5585  *	a port connection-change occurs;
5586  *	a port enable-change occurs (often caused by EMI);
5587  *	usb_reset_and_verify_device() encounters changed descriptors (as from
5588  *		a firmware download)
5589  * caller already locked the hub
5590  */
hub_port_connect_change(struct usb_hub * hub,int port1,u16 portstatus,u16 portchange)5591 static void hub_port_connect_change(struct usb_hub *hub, int port1,
5592 					u16 portstatus, u16 portchange)
5593 		__must_hold(&port_dev->status_lock)
5594 {
5595 	struct usb_port *port_dev = hub->ports[port1 - 1];
5596 	struct usb_device *udev = port_dev->child;
5597 	struct usb_device_descriptor *descr;
5598 	int status = -ENODEV;
5599 
5600 	dev_dbg(&port_dev->dev, "status %04x, change %04x, %s\n", portstatus,
5601 			portchange, portspeed(hub, portstatus));
5602 
5603 	if (hub->has_indicators) {
5604 		set_port_led(hub, port1, HUB_LED_AUTO);
5605 		hub->indicator[port1-1] = INDICATOR_AUTO;
5606 	}
5607 
5608 #ifdef	CONFIG_USB_OTG
5609 	/* during HNP, don't repeat the debounce */
5610 	if (hub->hdev->bus->is_b_host)
5611 		portchange &= ~(USB_PORT_STAT_C_CONNECTION |
5612 				USB_PORT_STAT_C_ENABLE);
5613 #endif
5614 
5615 	/* Try to resuscitate an existing device */
5616 	if ((portstatus & USB_PORT_STAT_CONNECTION) && udev &&
5617 			udev->state != USB_STATE_NOTATTACHED) {
5618 		if (portstatus & USB_PORT_STAT_ENABLE) {
5619 			/*
5620 			 * USB-3 connections are initialized automatically by
5621 			 * the hostcontroller hardware. Therefore check for
5622 			 * changed device descriptors before resuscitating the
5623 			 * device.
5624 			 */
5625 			descr = usb_get_device_descriptor(udev);
5626 			if (IS_ERR(descr)) {
5627 				dev_dbg(&udev->dev,
5628 						"can't read device descriptor %ld\n",
5629 						PTR_ERR(descr));
5630 			} else {
5631 				if (descriptors_changed(udev, descr,
5632 						udev->bos)) {
5633 					dev_dbg(&udev->dev,
5634 							"device descriptor has changed\n");
5635 				} else {
5636 					status = 0; /* Nothing to do */
5637 				}
5638 				kfree(descr);
5639 			}
5640 #ifdef CONFIG_PM
5641 		} else if (udev->state == USB_STATE_SUSPENDED &&
5642 				udev->persist_enabled) {
5643 			/* For a suspended device, treat this as a
5644 			 * remote wakeup event.
5645 			 */
5646 			usb_unlock_port(port_dev);
5647 			status = usb_remote_wakeup(udev);
5648 			usb_lock_port(port_dev);
5649 #endif
5650 		} else {
5651 			/* Don't resuscitate */;
5652 		}
5653 	}
5654 	clear_bit(port1, hub->change_bits);
5655 
5656 	/* successfully revalidated the connection */
5657 	if (status == 0)
5658 		return;
5659 
5660 	usb_unlock_port(port_dev);
5661 	hub_port_connect(hub, port1, portstatus, portchange);
5662 	usb_lock_port(port_dev);
5663 }
5664 
5665 /* Handle notifying userspace about hub over-current events */
port_over_current_notify(struct usb_port * port_dev)5666 static void port_over_current_notify(struct usb_port *port_dev)
5667 {
5668 	char *envp[3] = { NULL, NULL, NULL };
5669 	struct device *hub_dev;
5670 	char *port_dev_path;
5671 
5672 	sysfs_notify(&port_dev->dev.kobj, NULL, "over_current_count");
5673 
5674 	hub_dev = port_dev->dev.parent;
5675 
5676 	if (!hub_dev)
5677 		return;
5678 
5679 	port_dev_path = kobject_get_path(&port_dev->dev.kobj, GFP_KERNEL);
5680 	if (!port_dev_path)
5681 		return;
5682 
5683 	envp[0] = kasprintf(GFP_KERNEL, "OVER_CURRENT_PORT=%s", port_dev_path);
5684 	if (!envp[0])
5685 		goto exit;
5686 
5687 	envp[1] = kasprintf(GFP_KERNEL, "OVER_CURRENT_COUNT=%u",
5688 			port_dev->over_current_count);
5689 	if (!envp[1])
5690 		goto exit;
5691 
5692 	kobject_uevent_env(&hub_dev->kobj, KOBJ_CHANGE, envp);
5693 
5694 exit:
5695 	kfree(envp[1]);
5696 	kfree(envp[0]);
5697 	kfree(port_dev_path);
5698 }
5699 
port_event(struct usb_hub * hub,int port1)5700 static void port_event(struct usb_hub *hub, int port1)
5701 		__must_hold(&port_dev->status_lock)
5702 {
5703 	int connect_change;
5704 	struct usb_port *port_dev = hub->ports[port1 - 1];
5705 	struct usb_device *udev = port_dev->child;
5706 	struct usb_device *hdev = hub->hdev;
5707 	u16 portstatus, portchange;
5708 	int i = 0;
5709 
5710 	connect_change = test_bit(port1, hub->change_bits);
5711 	clear_bit(port1, hub->event_bits);
5712 	clear_bit(port1, hub->wakeup_bits);
5713 
5714 	if (usb_hub_port_status(hub, port1, &portstatus, &portchange) < 0)
5715 		return;
5716 
5717 	if (portchange & USB_PORT_STAT_C_CONNECTION) {
5718 		usb_clear_port_feature(hdev, port1, USB_PORT_FEAT_C_CONNECTION);
5719 		connect_change = 1;
5720 	}
5721 
5722 	if (portchange & USB_PORT_STAT_C_ENABLE) {
5723 		if (!connect_change)
5724 			dev_dbg(&port_dev->dev, "enable change, status %08x\n",
5725 					portstatus);
5726 		usb_clear_port_feature(hdev, port1, USB_PORT_FEAT_C_ENABLE);
5727 
5728 		/*
5729 		 * EM interference sometimes causes badly shielded USB devices
5730 		 * to be shutdown by the hub, this hack enables them again.
5731 		 * Works at least with mouse driver.
5732 		 */
5733 		if (!(portstatus & USB_PORT_STAT_ENABLE)
5734 		    && !connect_change && udev) {
5735 			dev_err(&port_dev->dev, "disabled by hub (EMI?), re-enabling...\n");
5736 			connect_change = 1;
5737 		}
5738 	}
5739 
5740 	if (portchange & USB_PORT_STAT_C_OVERCURRENT) {
5741 		u16 status = 0, unused;
5742 		port_dev->over_current_count++;
5743 		port_over_current_notify(port_dev);
5744 
5745 		dev_dbg(&port_dev->dev, "over-current change #%u\n",
5746 			port_dev->over_current_count);
5747 		usb_clear_port_feature(hdev, port1,
5748 				USB_PORT_FEAT_C_OVER_CURRENT);
5749 		msleep(100);	/* Cool down */
5750 		hub_power_on(hub, true);
5751 		usb_hub_port_status(hub, port1, &status, &unused);
5752 		if (status & USB_PORT_STAT_OVERCURRENT)
5753 			dev_err(&port_dev->dev, "over-current condition\n");
5754 	}
5755 
5756 	if (portchange & USB_PORT_STAT_C_RESET) {
5757 		dev_dbg(&port_dev->dev, "reset change\n");
5758 		usb_clear_port_feature(hdev, port1, USB_PORT_FEAT_C_RESET);
5759 	}
5760 	if ((portchange & USB_PORT_STAT_C_BH_RESET)
5761 	    && hub_is_superspeed(hdev)) {
5762 		dev_dbg(&port_dev->dev, "warm reset change\n");
5763 		usb_clear_port_feature(hdev, port1,
5764 				USB_PORT_FEAT_C_BH_PORT_RESET);
5765 	}
5766 	if (portchange & USB_PORT_STAT_C_LINK_STATE) {
5767 		dev_dbg(&port_dev->dev, "link state change\n");
5768 		usb_clear_port_feature(hdev, port1,
5769 				USB_PORT_FEAT_C_PORT_LINK_STATE);
5770 	}
5771 	if (portchange & USB_PORT_STAT_C_CONFIG_ERROR) {
5772 		dev_warn(&port_dev->dev, "config error\n");
5773 		usb_clear_port_feature(hdev, port1,
5774 				USB_PORT_FEAT_C_PORT_CONFIG_ERROR);
5775 	}
5776 
5777 	/* skip port actions that require the port to be powered on */
5778 	if (!pm_runtime_active(&port_dev->dev))
5779 		return;
5780 
5781 	/* skip port actions if ignore_event and early_stop are true */
5782 	if (port_dev->ignore_event && port_dev->early_stop)
5783 		return;
5784 
5785 	if (hub_handle_remote_wakeup(hub, port1, portstatus, portchange))
5786 		connect_change = 1;
5787 
5788 	/*
5789 	 * Avoid trying to recover a USB3 SS.Inactive port with a warm reset if
5790 	 * the device was disconnected. A 12ms disconnect detect timer in
5791 	 * SS.Inactive state transitions the port to RxDetect automatically.
5792 	 * SS.Inactive link error state is common during device disconnect.
5793 	 */
5794 	while (hub_port_warm_reset_required(hub, port1, portstatus)) {
5795 		if ((i++ < DETECT_DISCONNECT_TRIES) && udev) {
5796 			u16 unused;
5797 
5798 			msleep(20);
5799 			usb_hub_port_status(hub, port1, &portstatus, &unused);
5800 			dev_dbg(&port_dev->dev, "Wait for inactive link disconnect detect\n");
5801 			continue;
5802 		} else if (!udev || !(portstatus & USB_PORT_STAT_CONNECTION)
5803 				|| udev->state == USB_STATE_NOTATTACHED) {
5804 			dev_dbg(&port_dev->dev, "do warm reset, port only\n");
5805 			if (hub_port_reset(hub, port1, NULL,
5806 					HUB_BH_RESET_TIME, true) < 0)
5807 				hub_port_disable(hub, port1, 1);
5808 		} else {
5809 			dev_dbg(&port_dev->dev, "do warm reset, full device\n");
5810 			usb_unlock_port(port_dev);
5811 			usb_lock_device(udev);
5812 			usb_reset_device(udev);
5813 			usb_unlock_device(udev);
5814 			usb_lock_port(port_dev);
5815 			connect_change = 0;
5816 		}
5817 		break;
5818 	}
5819 
5820 	if (connect_change)
5821 		hub_port_connect_change(hub, port1, portstatus, portchange);
5822 }
5823 
hub_event(struct work_struct * work)5824 static void hub_event(struct work_struct *work)
5825 {
5826 	struct usb_device *hdev;
5827 	struct usb_interface *intf;
5828 	struct usb_hub *hub;
5829 	struct device *hub_dev;
5830 	u16 hubstatus;
5831 	u16 hubchange;
5832 	int i, ret;
5833 
5834 	hub = container_of(work, struct usb_hub, events);
5835 	hdev = hub->hdev;
5836 	hub_dev = hub->intfdev;
5837 	intf = to_usb_interface(hub_dev);
5838 
5839 	kcov_remote_start_usb((u64)hdev->bus->busnum);
5840 
5841 	dev_dbg(hub_dev, "state %d ports %d chg %04x evt %04x\n",
5842 			hdev->state, hdev->maxchild,
5843 			/* NOTE: expects max 15 ports... */
5844 			(u16) hub->change_bits[0],
5845 			(u16) hub->event_bits[0]);
5846 
5847 	/* Lock the device, then check to see if we were
5848 	 * disconnected while waiting for the lock to succeed. */
5849 	usb_lock_device(hdev);
5850 	if (unlikely(hub->disconnected))
5851 		goto out_hdev_lock;
5852 
5853 	/* If the hub has died, clean up after it */
5854 	if (hdev->state == USB_STATE_NOTATTACHED) {
5855 		hub->error = -ENODEV;
5856 		hub_quiesce(hub, HUB_DISCONNECT);
5857 		goto out_hdev_lock;
5858 	}
5859 
5860 	/* Autoresume */
5861 	ret = usb_autopm_get_interface(intf);
5862 	if (ret) {
5863 		dev_dbg(hub_dev, "Can't autoresume: %d\n", ret);
5864 		goto out_hdev_lock;
5865 	}
5866 
5867 	/* If this is an inactive hub, do nothing */
5868 	if (hub->quiescing)
5869 		goto out_autopm;
5870 
5871 	if (hub->error) {
5872 		dev_dbg(hub_dev, "resetting for error %d\n", hub->error);
5873 
5874 		ret = usb_reset_device(hdev);
5875 		if (ret) {
5876 			dev_dbg(hub_dev, "error resetting hub: %d\n", ret);
5877 			goto out_autopm;
5878 		}
5879 
5880 		hub->nerrors = 0;
5881 		hub->error = 0;
5882 	}
5883 
5884 	/* deal with port status changes */
5885 	for (i = 1; i <= hdev->maxchild; i++) {
5886 		struct usb_port *port_dev = hub->ports[i - 1];
5887 
5888 		if (test_bit(i, hub->event_bits)
5889 				|| test_bit(i, hub->change_bits)
5890 				|| test_bit(i, hub->wakeup_bits)) {
5891 			/*
5892 			 * The get_noresume and barrier ensure that if
5893 			 * the port was in the process of resuming, we
5894 			 * flush that work and keep the port active for
5895 			 * the duration of the port_event().  However,
5896 			 * if the port is runtime pm suspended
5897 			 * (powered-off), we leave it in that state, run
5898 			 * an abbreviated port_event(), and move on.
5899 			 */
5900 			pm_runtime_get_noresume(&port_dev->dev);
5901 			pm_runtime_barrier(&port_dev->dev);
5902 			usb_lock_port(port_dev);
5903 			port_event(hub, i);
5904 			usb_unlock_port(port_dev);
5905 			pm_runtime_put_sync(&port_dev->dev);
5906 		}
5907 	}
5908 
5909 	/* deal with hub status changes */
5910 	if (test_and_clear_bit(0, hub->event_bits) == 0)
5911 		;	/* do nothing */
5912 	else if (hub_hub_status(hub, &hubstatus, &hubchange) < 0)
5913 		dev_err(hub_dev, "get_hub_status failed\n");
5914 	else {
5915 		if (hubchange & HUB_CHANGE_LOCAL_POWER) {
5916 			dev_dbg(hub_dev, "power change\n");
5917 			clear_hub_feature(hdev, C_HUB_LOCAL_POWER);
5918 			if (hubstatus & HUB_STATUS_LOCAL_POWER)
5919 				/* FIXME: Is this always true? */
5920 				hub->limited_power = 1;
5921 			else
5922 				hub->limited_power = 0;
5923 		}
5924 		if (hubchange & HUB_CHANGE_OVERCURRENT) {
5925 			u16 status = 0;
5926 			u16 unused;
5927 
5928 			dev_dbg(hub_dev, "over-current change\n");
5929 			clear_hub_feature(hdev, C_HUB_OVER_CURRENT);
5930 			msleep(500);	/* Cool down */
5931 			hub_power_on(hub, true);
5932 			hub_hub_status(hub, &status, &unused);
5933 			if (status & HUB_STATUS_OVERCURRENT)
5934 				dev_err(hub_dev, "over-current condition\n");
5935 		}
5936 	}
5937 
5938 out_autopm:
5939 	/* Balance the usb_autopm_get_interface() above */
5940 	usb_autopm_put_interface_no_suspend(intf);
5941 out_hdev_lock:
5942 	usb_unlock_device(hdev);
5943 
5944 	/* Balance the stuff in kick_hub_wq() and allow autosuspend */
5945 	usb_autopm_put_interface(intf);
5946 	hub_put(hub);
5947 
5948 	kcov_remote_stop();
5949 }
5950 
5951 static const struct usb_device_id hub_id_table[] = {
5952     { .match_flags = USB_DEVICE_ID_MATCH_VENDOR
5953                    | USB_DEVICE_ID_MATCH_PRODUCT
5954                    | USB_DEVICE_ID_MATCH_INT_CLASS,
5955       .idVendor = USB_VENDOR_SMSC,
5956       .idProduct = USB_PRODUCT_USB5534B,
5957       .bInterfaceClass = USB_CLASS_HUB,
5958       .driver_info = HUB_QUIRK_DISABLE_AUTOSUSPEND},
5959     { .match_flags = USB_DEVICE_ID_MATCH_VENDOR
5960                    | USB_DEVICE_ID_MATCH_PRODUCT,
5961       .idVendor = USB_VENDOR_CYPRESS,
5962       .idProduct = USB_PRODUCT_CY7C65632,
5963       .driver_info = HUB_QUIRK_DISABLE_AUTOSUSPEND},
5964     { .match_flags = USB_DEVICE_ID_MATCH_VENDOR
5965 			| USB_DEVICE_ID_MATCH_INT_CLASS,
5966       .idVendor = USB_VENDOR_GENESYS_LOGIC,
5967       .bInterfaceClass = USB_CLASS_HUB,
5968       .driver_info = HUB_QUIRK_CHECK_PORT_AUTOSUSPEND},
5969     { .match_flags = USB_DEVICE_ID_MATCH_VENDOR
5970 			| USB_DEVICE_ID_MATCH_PRODUCT,
5971       .idVendor = USB_VENDOR_TEXAS_INSTRUMENTS,
5972       .idProduct = USB_PRODUCT_TUSB8041_USB2,
5973       .driver_info = HUB_QUIRK_DISABLE_AUTOSUSPEND},
5974     { .match_flags = USB_DEVICE_ID_MATCH_VENDOR
5975 			| USB_DEVICE_ID_MATCH_PRODUCT,
5976       .idVendor = USB_VENDOR_TEXAS_INSTRUMENTS,
5977       .idProduct = USB_PRODUCT_TUSB8041_USB3,
5978       .driver_info = HUB_QUIRK_DISABLE_AUTOSUSPEND},
5979 	{ .match_flags = USB_DEVICE_ID_MATCH_VENDOR
5980 			| USB_DEVICE_ID_MATCH_PRODUCT,
5981 	  .idVendor = USB_VENDOR_MICROCHIP,
5982 	  .idProduct = USB_PRODUCT_USB4913,
5983 	  .driver_info = HUB_QUIRK_REDUCE_FRAME_INTR_BINTERVAL},
5984 	{ .match_flags = USB_DEVICE_ID_MATCH_VENDOR
5985 			| USB_DEVICE_ID_MATCH_PRODUCT,
5986 	  .idVendor = USB_VENDOR_MICROCHIP,
5987 	  .idProduct = USB_PRODUCT_USB4914,
5988 	  .driver_info = HUB_QUIRK_REDUCE_FRAME_INTR_BINTERVAL},
5989 	{ .match_flags = USB_DEVICE_ID_MATCH_VENDOR
5990 			| USB_DEVICE_ID_MATCH_PRODUCT,
5991 	  .idVendor = USB_VENDOR_MICROCHIP,
5992 	  .idProduct = USB_PRODUCT_USB4915,
5993 	  .driver_info = HUB_QUIRK_REDUCE_FRAME_INTR_BINTERVAL},
5994     { .match_flags = USB_DEVICE_ID_MATCH_DEV_CLASS,
5995       .bDeviceClass = USB_CLASS_HUB},
5996     { .match_flags = USB_DEVICE_ID_MATCH_INT_CLASS,
5997       .bInterfaceClass = USB_CLASS_HUB},
5998     { }						/* Terminating entry */
5999 };
6000 
6001 MODULE_DEVICE_TABLE(usb, hub_id_table);
6002 
6003 static struct usb_driver hub_driver = {
6004 	.name =		"hub",
6005 	.probe =	hub_probe,
6006 	.disconnect =	hub_disconnect,
6007 	.suspend =	hub_suspend,
6008 	.resume =	hub_resume,
6009 	.reset_resume =	hub_reset_resume,
6010 	.pre_reset =	hub_pre_reset,
6011 	.post_reset =	hub_post_reset,
6012 	.unlocked_ioctl = hub_ioctl,
6013 	.id_table =	hub_id_table,
6014 	.supports_autosuspend =	1,
6015 };
6016 
usb_hub_init(void)6017 int usb_hub_init(void)
6018 {
6019 	if (usb_register(&hub_driver) < 0) {
6020 		printk(KERN_ERR "%s: can't register hub driver\n",
6021 			usbcore_name);
6022 		return -1;
6023 	}
6024 
6025 	/*
6026 	 * The workqueue needs to be freezable to avoid interfering with
6027 	 * USB-PERSIST port handover. Otherwise it might see that a full-speed
6028 	 * device was gone before the EHCI controller had handed its port
6029 	 * over to the companion full-speed controller.
6030 	 */
6031 	hub_wq = alloc_workqueue("usb_hub_wq", WQ_FREEZABLE, 0);
6032 	if (hub_wq)
6033 		return 0;
6034 
6035 	/* Fall through if kernel_thread failed */
6036 	usb_deregister(&hub_driver);
6037 	pr_err("%s: can't allocate workqueue for usb hub\n", usbcore_name);
6038 
6039 	return -1;
6040 }
6041 
usb_hub_cleanup(void)6042 void usb_hub_cleanup(void)
6043 {
6044 	destroy_workqueue(hub_wq);
6045 
6046 	/*
6047 	 * Hub resources are freed for us by usb_deregister. It calls
6048 	 * usb_driver_purge on every device which in turn calls that
6049 	 * devices disconnect function if it is using this driver.
6050 	 * The hub_disconnect function takes care of releasing the
6051 	 * individual hub resources. -greg
6052 	 */
6053 	usb_deregister(&hub_driver);
6054 } /* usb_hub_cleanup() */
6055 
6056 /**
6057  * usb_reset_and_verify_device - perform a USB port reset to reinitialize a device
6058  * @udev: device to reset (not in SUSPENDED or NOTATTACHED state)
6059  *
6060  * WARNING - don't use this routine to reset a composite device
6061  * (one with multiple interfaces owned by separate drivers)!
6062  * Use usb_reset_device() instead.
6063  *
6064  * Do a port reset, reassign the device's address, and establish its
6065  * former operating configuration.  If the reset fails, or the device's
6066  * descriptors change from their values before the reset, or the original
6067  * configuration and altsettings cannot be restored, a flag will be set
6068  * telling hub_wq to pretend the device has been disconnected and then
6069  * re-connected.  All drivers will be unbound, and the device will be
6070  * re-enumerated and probed all over again.
6071  *
6072  * Return: 0 if the reset succeeded, -ENODEV if the device has been
6073  * flagged for logical disconnection, or some other negative error code
6074  * if the reset wasn't even attempted.
6075  *
6076  * Note:
6077  * The caller must own the device lock and the port lock, the latter is
6078  * taken by usb_reset_device().  For example, it's safe to use
6079  * usb_reset_device() from a driver probe() routine after downloading
6080  * new firmware.  For calls that might not occur during probe(), drivers
6081  * should lock the device using usb_lock_device_for_reset().
6082  *
6083  * Locking exception: This routine may also be called from within an
6084  * autoresume handler.  Such usage won't conflict with other tasks
6085  * holding the device lock because these tasks should always call
6086  * usb_autopm_resume_device(), thereby preventing any unwanted
6087  * autoresume.  The autoresume handler is expected to have already
6088  * acquired the port lock before calling this routine.
6089  */
usb_reset_and_verify_device(struct usb_device * udev)6090 static int usb_reset_and_verify_device(struct usb_device *udev)
6091 {
6092 	struct usb_device		*parent_hdev = udev->parent;
6093 	struct usb_hub			*parent_hub;
6094 	struct usb_hcd			*hcd = bus_to_hcd(udev->bus);
6095 	struct usb_device_descriptor	descriptor;
6096 	struct usb_host_bos		*bos;
6097 	int				i, j, ret = 0;
6098 	int				port1 = udev->portnum;
6099 
6100 	if (udev->state == USB_STATE_NOTATTACHED ||
6101 			udev->state == USB_STATE_SUSPENDED) {
6102 		dev_dbg(&udev->dev, "device reset not allowed in state %d\n",
6103 				udev->state);
6104 		return -EINVAL;
6105 	}
6106 
6107 	if (!parent_hdev)
6108 		return -EISDIR;
6109 
6110 	parent_hub = usb_hub_to_struct_hub(parent_hdev);
6111 
6112 	/* Disable USB2 hardware LPM.
6113 	 * It will be re-enabled by the enumeration process.
6114 	 */
6115 	usb_disable_usb2_hardware_lpm(udev);
6116 
6117 	bos = udev->bos;
6118 	udev->bos = NULL;
6119 
6120 	mutex_lock(hcd->address0_mutex);
6121 
6122 	for (i = 0; i < PORT_INIT_TRIES; ++i) {
6123 		if (hub_port_stop_enumerate(parent_hub, port1, i)) {
6124 			ret = -ENODEV;
6125 			break;
6126 		}
6127 
6128 		/* ep0 maxpacket size may change; let the HCD know about it.
6129 		 * Other endpoints will be handled by re-enumeration. */
6130 		usb_ep0_reinit(udev);
6131 		ret = hub_port_init(parent_hub, udev, port1, i, &descriptor);
6132 		if (ret >= 0 || ret == -ENOTCONN || ret == -ENODEV)
6133 			break;
6134 	}
6135 	mutex_unlock(hcd->address0_mutex);
6136 
6137 	if (ret < 0)
6138 		goto re_enumerate;
6139 
6140 	/* Device might have changed firmware (DFU or similar) */
6141 	if (descriptors_changed(udev, &descriptor, bos)) {
6142 		dev_info(&udev->dev, "device firmware changed\n");
6143 		goto re_enumerate;
6144 	}
6145 
6146 	/* Restore the device's previous configuration */
6147 	if (!udev->actconfig)
6148 		goto done;
6149 
6150 	mutex_lock(hcd->bandwidth_mutex);
6151 	ret = usb_hcd_alloc_bandwidth(udev, udev->actconfig, NULL, NULL);
6152 	if (ret < 0) {
6153 		dev_warn(&udev->dev,
6154 				"Busted HC?  Not enough HCD resources for "
6155 				"old configuration.\n");
6156 		mutex_unlock(hcd->bandwidth_mutex);
6157 		goto re_enumerate;
6158 	}
6159 	ret = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
6160 			USB_REQ_SET_CONFIGURATION, 0,
6161 			udev->actconfig->desc.bConfigurationValue, 0,
6162 			NULL, 0, USB_CTRL_SET_TIMEOUT);
6163 	if (ret < 0) {
6164 		dev_err(&udev->dev,
6165 			"can't restore configuration #%d (error=%d)\n",
6166 			udev->actconfig->desc.bConfigurationValue, ret);
6167 		mutex_unlock(hcd->bandwidth_mutex);
6168 		goto re_enumerate;
6169 	}
6170 	mutex_unlock(hcd->bandwidth_mutex);
6171 	usb_set_device_state(udev, USB_STATE_CONFIGURED);
6172 
6173 	/* Put interfaces back into the same altsettings as before.
6174 	 * Don't bother to send the Set-Interface request for interfaces
6175 	 * that were already in altsetting 0; besides being unnecessary,
6176 	 * many devices can't handle it.  Instead just reset the host-side
6177 	 * endpoint state.
6178 	 */
6179 	for (i = 0; i < udev->actconfig->desc.bNumInterfaces; i++) {
6180 		struct usb_host_config *config = udev->actconfig;
6181 		struct usb_interface *intf = config->interface[i];
6182 		struct usb_interface_descriptor *desc;
6183 
6184 		desc = &intf->cur_altsetting->desc;
6185 		if (desc->bAlternateSetting == 0) {
6186 			usb_disable_interface(udev, intf, true);
6187 			usb_enable_interface(udev, intf, true);
6188 			ret = 0;
6189 		} else {
6190 			/* Let the bandwidth allocation function know that this
6191 			 * device has been reset, and it will have to use
6192 			 * alternate setting 0 as the current alternate setting.
6193 			 */
6194 			intf->resetting_device = 1;
6195 			ret = usb_set_interface(udev, desc->bInterfaceNumber,
6196 					desc->bAlternateSetting);
6197 			intf->resetting_device = 0;
6198 		}
6199 		if (ret < 0) {
6200 			dev_err(&udev->dev, "failed to restore interface %d "
6201 				"altsetting %d (error=%d)\n",
6202 				desc->bInterfaceNumber,
6203 				desc->bAlternateSetting,
6204 				ret);
6205 			goto re_enumerate;
6206 		}
6207 		/* Resetting also frees any allocated streams */
6208 		for (j = 0; j < intf->cur_altsetting->desc.bNumEndpoints; j++)
6209 			intf->cur_altsetting->endpoint[j].streams = 0;
6210 	}
6211 
6212 done:
6213 	/* Now that the alt settings are re-installed, enable LTM and LPM. */
6214 	usb_enable_usb2_hardware_lpm(udev);
6215 	usb_unlocked_enable_lpm(udev);
6216 	usb_enable_ltm(udev);
6217 	usb_release_bos_descriptor(udev);
6218 	udev->bos = bos;
6219 	return 0;
6220 
6221 re_enumerate:
6222 	usb_release_bos_descriptor(udev);
6223 	udev->bos = bos;
6224 	hub_port_logical_disconnect(parent_hub, port1);
6225 	return -ENODEV;
6226 }
6227 
6228 /**
6229  * usb_reset_device - warn interface drivers and perform a USB port reset
6230  * @udev: device to reset (not in NOTATTACHED state)
6231  *
6232  * Warns all drivers bound to registered interfaces (using their pre_reset
6233  * method), performs the port reset, and then lets the drivers know that
6234  * the reset is over (using their post_reset method).
6235  *
6236  * Return: The same as for usb_reset_and_verify_device().
6237  * However, if a reset is already in progress (for instance, if a
6238  * driver doesn't have pre_reset() or post_reset() callbacks, and while
6239  * being unbound or re-bound during the ongoing reset its disconnect()
6240  * or probe() routine tries to perform a second, nested reset), the
6241  * routine returns -EINPROGRESS.
6242  *
6243  * Note:
6244  * The caller must own the device lock.  For example, it's safe to use
6245  * this from a driver probe() routine after downloading new firmware.
6246  * For calls that might not occur during probe(), drivers should lock
6247  * the device using usb_lock_device_for_reset().
6248  *
6249  * If an interface is currently being probed or disconnected, we assume
6250  * its driver knows how to handle resets.  For all other interfaces,
6251  * if the driver doesn't have pre_reset and post_reset methods then
6252  * we attempt to unbind it and rebind afterward.
6253  */
usb_reset_device(struct usb_device * udev)6254 int usb_reset_device(struct usb_device *udev)
6255 {
6256 	int ret;
6257 	int i;
6258 	unsigned int noio_flag;
6259 	struct usb_port *port_dev;
6260 	struct usb_host_config *config = udev->actconfig;
6261 	struct usb_hub *hub = usb_hub_to_struct_hub(udev->parent);
6262 
6263 	if (udev->state == USB_STATE_NOTATTACHED) {
6264 		dev_dbg(&udev->dev, "device reset not allowed in state %d\n",
6265 				udev->state);
6266 		return -EINVAL;
6267 	}
6268 
6269 	if (!udev->parent) {
6270 		/* this requires hcd-specific logic; see ohci_restart() */
6271 		dev_dbg(&udev->dev, "%s for root hub!\n", __func__);
6272 		return -EISDIR;
6273 	}
6274 
6275 	if (udev->reset_in_progress)
6276 		return -EINPROGRESS;
6277 	udev->reset_in_progress = 1;
6278 
6279 	port_dev = hub->ports[udev->portnum - 1];
6280 
6281 	/*
6282 	 * Don't allocate memory with GFP_KERNEL in current
6283 	 * context to avoid possible deadlock if usb mass
6284 	 * storage interface or usbnet interface(iSCSI case)
6285 	 * is included in current configuration. The easist
6286 	 * approach is to do it for every device reset,
6287 	 * because the device 'memalloc_noio' flag may have
6288 	 * not been set before reseting the usb device.
6289 	 */
6290 	noio_flag = memalloc_noio_save();
6291 
6292 	/* Prevent autosuspend during the reset */
6293 	usb_autoresume_device(udev);
6294 
6295 	if (config) {
6296 		for (i = 0; i < config->desc.bNumInterfaces; ++i) {
6297 			struct usb_interface *cintf = config->interface[i];
6298 			struct usb_driver *drv;
6299 			int unbind = 0;
6300 
6301 			if (cintf->dev.driver) {
6302 				drv = to_usb_driver(cintf->dev.driver);
6303 				if (drv->pre_reset && drv->post_reset)
6304 					unbind = (drv->pre_reset)(cintf);
6305 				else if (cintf->condition ==
6306 						USB_INTERFACE_BOUND)
6307 					unbind = 1;
6308 				if (unbind)
6309 					usb_forced_unbind_intf(cintf);
6310 			}
6311 		}
6312 	}
6313 
6314 	usb_lock_port(port_dev);
6315 	ret = usb_reset_and_verify_device(udev);
6316 	usb_unlock_port(port_dev);
6317 
6318 	if (config) {
6319 		for (i = config->desc.bNumInterfaces - 1; i >= 0; --i) {
6320 			struct usb_interface *cintf = config->interface[i];
6321 			struct usb_driver *drv;
6322 			int rebind = cintf->needs_binding;
6323 
6324 			if (!rebind && cintf->dev.driver) {
6325 				drv = to_usb_driver(cintf->dev.driver);
6326 				if (drv->post_reset)
6327 					rebind = (drv->post_reset)(cintf);
6328 				else if (cintf->condition ==
6329 						USB_INTERFACE_BOUND)
6330 					rebind = 1;
6331 				if (rebind)
6332 					cintf->needs_binding = 1;
6333 			}
6334 		}
6335 
6336 		/* If the reset failed, hub_wq will unbind drivers later */
6337 		if (ret == 0)
6338 			usb_unbind_and_rebind_marked_interfaces(udev);
6339 	}
6340 
6341 	usb_autosuspend_device(udev);
6342 	memalloc_noio_restore(noio_flag);
6343 	udev->reset_in_progress = 0;
6344 	return ret;
6345 }
6346 EXPORT_SYMBOL_GPL(usb_reset_device);
6347 
6348 
6349 /**
6350  * usb_queue_reset_device - Reset a USB device from an atomic context
6351  * @iface: USB interface belonging to the device to reset
6352  *
6353  * This function can be used to reset a USB device from an atomic
6354  * context, where usb_reset_device() won't work (as it blocks).
6355  *
6356  * Doing a reset via this method is functionally equivalent to calling
6357  * usb_reset_device(), except for the fact that it is delayed to a
6358  * workqueue. This means that any drivers bound to other interfaces
6359  * might be unbound, as well as users from usbfs in user space.
6360  *
6361  * Corner cases:
6362  *
6363  * - Scheduling two resets at the same time from two different drivers
6364  *   attached to two different interfaces of the same device is
6365  *   possible; depending on how the driver attached to each interface
6366  *   handles ->pre_reset(), the second reset might happen or not.
6367  *
6368  * - If the reset is delayed so long that the interface is unbound from
6369  *   its driver, the reset will be skipped.
6370  *
6371  * - This function can be called during .probe().  It can also be called
6372  *   during .disconnect(), but doing so is pointless because the reset
6373  *   will not occur.  If you really want to reset the device during
6374  *   .disconnect(), call usb_reset_device() directly -- but watch out
6375  *   for nested unbinding issues!
6376  */
usb_queue_reset_device(struct usb_interface * iface)6377 void usb_queue_reset_device(struct usb_interface *iface)
6378 {
6379 	if (schedule_work(&iface->reset_ws))
6380 		usb_get_intf(iface);
6381 }
6382 EXPORT_SYMBOL_GPL(usb_queue_reset_device);
6383 
6384 /**
6385  * usb_hub_find_child - Get the pointer of child device
6386  * attached to the port which is specified by @port1.
6387  * @hdev: USB device belonging to the usb hub
6388  * @port1: port num to indicate which port the child device
6389  *	is attached to.
6390  *
6391  * USB drivers call this function to get hub's child device
6392  * pointer.
6393  *
6394  * Return: %NULL if input param is invalid and
6395  * child's usb_device pointer if non-NULL.
6396  */
usb_hub_find_child(struct usb_device * hdev,int port1)6397 struct usb_device *usb_hub_find_child(struct usb_device *hdev,
6398 		int port1)
6399 {
6400 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
6401 
6402 	if (port1 < 1 || port1 > hdev->maxchild)
6403 		return NULL;
6404 	return hub->ports[port1 - 1]->child;
6405 }
6406 EXPORT_SYMBOL_GPL(usb_hub_find_child);
6407 
usb_hub_adjust_deviceremovable(struct usb_device * hdev,struct usb_hub_descriptor * desc)6408 void usb_hub_adjust_deviceremovable(struct usb_device *hdev,
6409 		struct usb_hub_descriptor *desc)
6410 {
6411 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
6412 	enum usb_port_connect_type connect_type;
6413 	int i;
6414 
6415 	if (!hub)
6416 		return;
6417 
6418 	if (!hub_is_superspeed(hdev)) {
6419 		for (i = 1; i <= hdev->maxchild; i++) {
6420 			struct usb_port *port_dev = hub->ports[i - 1];
6421 
6422 			connect_type = port_dev->connect_type;
6423 			if (connect_type == USB_PORT_CONNECT_TYPE_HARD_WIRED) {
6424 				u8 mask = 1 << (i%8);
6425 
6426 				if (!(desc->u.hs.DeviceRemovable[i/8] & mask)) {
6427 					dev_dbg(&port_dev->dev, "DeviceRemovable is changed to 1 according to platform information.\n");
6428 					desc->u.hs.DeviceRemovable[i/8]	|= mask;
6429 				}
6430 			}
6431 		}
6432 	} else {
6433 		u16 port_removable = le16_to_cpu(desc->u.ss.DeviceRemovable);
6434 
6435 		for (i = 1; i <= hdev->maxchild; i++) {
6436 			struct usb_port *port_dev = hub->ports[i - 1];
6437 
6438 			connect_type = port_dev->connect_type;
6439 			if (connect_type == USB_PORT_CONNECT_TYPE_HARD_WIRED) {
6440 				u16 mask = 1 << i;
6441 
6442 				if (!(port_removable & mask)) {
6443 					dev_dbg(&port_dev->dev, "DeviceRemovable is changed to 1 according to platform information.\n");
6444 					port_removable |= mask;
6445 				}
6446 			}
6447 		}
6448 
6449 		desc->u.ss.DeviceRemovable = cpu_to_le16(port_removable);
6450 	}
6451 }
6452 
6453 #ifdef CONFIG_ACPI
6454 /**
6455  * usb_get_hub_port_acpi_handle - Get the usb port's acpi handle
6456  * @hdev: USB device belonging to the usb hub
6457  * @port1: port num of the port
6458  *
6459  * Return: Port's acpi handle if successful, %NULL if params are
6460  * invalid.
6461  */
usb_get_hub_port_acpi_handle(struct usb_device * hdev,int port1)6462 acpi_handle usb_get_hub_port_acpi_handle(struct usb_device *hdev,
6463 	int port1)
6464 {
6465 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
6466 
6467 	if (!hub)
6468 		return NULL;
6469 
6470 	return ACPI_HANDLE(&hub->ports[port1 - 1]->dev);
6471 }
6472 #endif
6473