xref: /linux/drivers/usb/atm/ueagle-atm.c (revision bf4afc53b77aeaa48b5409da5c8da6bb4eff7f43)
1 // SPDX-License-Identifier: (GPL-2.0+ OR BSD-2-Clause)
2 /*
3  * Copyright (c) 2003, 2004
4  *	Damien Bergamini <damien.bergamini@free.fr>. All rights reserved.
5  *
6  * Copyright (c) 2005-2007 Matthieu Castet <castet.matthieu@free.fr>
7  * Copyright (c) 2005-2007 Stanislaw Gruszka <stf_xl@wp.pl>
8  *
9  * HISTORY : some part of the code was base on ueagle 1.3 BSD driver,
10  * Damien Bergamini agree to put his code under a DUAL GPL/BSD license.
11  *
12  * The rest of the code was rewritten from scratch.
13  */
14 
15 #include <linux/module.h>
16 #include <linux/moduleparam.h>
17 #include <linux/crc32.h>
18 #include <linux/hex.h>
19 #include <linux/usb.h>
20 #include <linux/firmware.h>
21 #include <linux/ctype.h>
22 #include <linux/sched.h>
23 #include <linux/kthread.h>
24 #include <linux/mutex.h>
25 #include <linux/freezer.h>
26 #include <linux/slab.h>
27 #include <linux/kernel.h>
28 
29 #include <linux/unaligned.h>
30 
31 #include "usbatm.h"
32 
33 #define EAGLEUSBVERSION "ueagle 1.4"
34 
35 
36 /*
37  * Debug macros
38  */
39 #define uea_dbg(usb_dev, format, args...)	\
40 	do { \
41 		if (debug >= 1) \
42 			dev_dbg(&(usb_dev)->dev, \
43 				"[ueagle-atm dbg] %s: " format, \
44 					__func__, ##args); \
45 	} while (0)
46 
47 #define uea_vdbg(usb_dev, format, args...)	\
48 	do { \
49 		if (debug >= 2) \
50 			dev_dbg(&(usb_dev)->dev, \
51 				"[ueagle-atm vdbg]  " format, ##args); \
52 	} while (0)
53 
54 #define uea_enters(usb_dev) \
55 	uea_vdbg(usb_dev, "entering %s\n" , __func__)
56 
57 #define uea_leaves(usb_dev) \
58 	uea_vdbg(usb_dev, "leaving  %s\n" , __func__)
59 
60 #define uea_err(usb_dev, format, args...) \
61 	dev_err(&(usb_dev)->dev , "[UEAGLE-ATM] " format , ##args)
62 
63 #define uea_warn(usb_dev, format, args...) \
64 	dev_warn(&(usb_dev)->dev , "[Ueagle-atm] " format, ##args)
65 
66 #define uea_info(usb_dev, format, args...) \
67 	dev_info(&(usb_dev)->dev , "[ueagle-atm] " format, ##args)
68 
69 struct intr_pkt;
70 
71 /* cmv's from firmware */
72 struct uea_cmvs_v1 {
73 	u32 address;
74 	u16 offset;
75 	u32 data;
76 } __packed;
77 
78 struct uea_cmvs_v2 {
79 	u32 group;
80 	u32 address;
81 	u32 offset;
82 	u32 data;
83 } __packed;
84 
85 /* information about currently processed cmv */
86 struct cmv_dsc_e1 {
87 	u8 function;
88 	u16 idx;
89 	u32 address;
90 	u16 offset;
91 };
92 
93 struct cmv_dsc_e4 {
94 	u16 function;
95 	u16 offset;
96 	u16 address;
97 	u16 group;
98 };
99 
100 union cmv_dsc {
101 	struct cmv_dsc_e1 e1;
102 	struct cmv_dsc_e4 e4;
103 };
104 
105 struct uea_softc {
106 	struct usb_device *usb_dev;
107 	struct usbatm_data *usbatm;
108 
109 	int modem_index;
110 	unsigned int driver_info;
111 	int annex;
112 #define ANNEXA 0
113 #define ANNEXB 1
114 
115 	int booting;
116 	int reset;
117 
118 	wait_queue_head_t sync_q;
119 
120 	struct task_struct *kthread;
121 	u32 data;
122 	u32 data1;
123 
124 	int cmv_ack;
125 	union cmv_dsc cmv_dsc;
126 
127 	struct work_struct task;
128 	u16 pageno;
129 	u16 ovl;
130 
131 	const struct firmware *dsp_firm;
132 	struct urb *urb_int;
133 
134 	void (*dispatch_cmv)(struct uea_softc *, struct intr_pkt *);
135 	void (*schedule_load_page)(struct uea_softc *, struct intr_pkt *);
136 	int (*stat)(struct uea_softc *);
137 	int (*send_cmvs)(struct uea_softc *);
138 
139 	/* keep in sync with eaglectl */
140 	struct uea_stats {
141 		struct {
142 			u32 state;
143 			u32 flags;
144 			u32 mflags;
145 			u32 vidcpe;
146 			u32 vidco;
147 			u32 dsrate;
148 			u32 usrate;
149 			u32 dsunc;
150 			u32 usunc;
151 			u32 dscorr;
152 			u32 uscorr;
153 			u32 txflow;
154 			u32 rxflow;
155 			u32 usattenuation;
156 			u32 dsattenuation;
157 			u32 dsmargin;
158 			u32 usmargin;
159 			u32 firmid;
160 		} phy;
161 	} stats;
162 };
163 
164 /*
165  * Elsa IDs
166  */
167 #define ELSA_VID		0x05CC
168 #define ELSA_PID_PSTFIRM	0x3350
169 #define ELSA_PID_PREFIRM	0x3351
170 
171 #define ELSA_PID_A_PREFIRM	0x3352
172 #define ELSA_PID_A_PSTFIRM	0x3353
173 #define ELSA_PID_B_PREFIRM	0x3362
174 #define ELSA_PID_B_PSTFIRM	0x3363
175 
176 /*
177  * Devolo IDs : pots if (pid & 0x10)
178  */
179 #define DEVOLO_VID			0x1039
180 #define DEVOLO_EAGLE_I_A_PID_PSTFIRM	0x2110
181 #define DEVOLO_EAGLE_I_A_PID_PREFIRM	0x2111
182 
183 #define DEVOLO_EAGLE_I_B_PID_PSTFIRM	0x2100
184 #define DEVOLO_EAGLE_I_B_PID_PREFIRM	0x2101
185 
186 #define DEVOLO_EAGLE_II_A_PID_PSTFIRM	0x2130
187 #define DEVOLO_EAGLE_II_A_PID_PREFIRM	0x2131
188 
189 #define DEVOLO_EAGLE_II_B_PID_PSTFIRM	0x2120
190 #define DEVOLO_EAGLE_II_B_PID_PREFIRM	0x2121
191 
192 /*
193  * Reference design USB IDs
194  */
195 #define ANALOG_VID		0x1110
196 #define ADI930_PID_PREFIRM	0x9001
197 #define ADI930_PID_PSTFIRM	0x9000
198 
199 #define EAGLE_I_PID_PREFIRM	0x9010	/* Eagle I */
200 #define EAGLE_I_PID_PSTFIRM	0x900F	/* Eagle I */
201 
202 #define EAGLE_IIC_PID_PREFIRM	0x9024	/* Eagle IIC */
203 #define EAGLE_IIC_PID_PSTFIRM	0x9023	/* Eagle IIC */
204 
205 #define EAGLE_II_PID_PREFIRM	0x9022	/* Eagle II */
206 #define EAGLE_II_PID_PSTFIRM	0x9021	/* Eagle II */
207 
208 #define EAGLE_III_PID_PREFIRM	0x9032	/* Eagle III */
209 #define EAGLE_III_PID_PSTFIRM	0x9031	/* Eagle III */
210 
211 #define EAGLE_IV_PID_PREFIRM	0x9042  /* Eagle IV */
212 #define EAGLE_IV_PID_PSTFIRM	0x9041  /* Eagle IV */
213 
214 /*
215  * USR USB IDs
216  */
217 #define USR_VID			0x0BAF
218 #define MILLER_A_PID_PREFIRM	0x00F2
219 #define MILLER_A_PID_PSTFIRM	0x00F1
220 #define MILLER_B_PID_PREFIRM	0x00FA
221 #define MILLER_B_PID_PSTFIRM	0x00F9
222 #define HEINEKEN_A_PID_PREFIRM	0x00F6
223 #define HEINEKEN_A_PID_PSTFIRM	0x00F5
224 #define HEINEKEN_B_PID_PREFIRM	0x00F8
225 #define HEINEKEN_B_PID_PSTFIRM	0x00F7
226 
227 #define PREFIRM 0
228 #define PSTFIRM (1<<7)
229 #define AUTO_ANNEX_A (1<<8)
230 #define AUTO_ANNEX_B (1<<9)
231 
232 enum {
233 	ADI930 = 0,
234 	EAGLE_I,
235 	EAGLE_II,
236 	EAGLE_III,
237 	EAGLE_IV
238 };
239 
240 /* macros for both struct usb_device_id and struct uea_softc */
241 #define UEA_IS_PREFIRM(x) \
242 	(!((x)->driver_info & PSTFIRM))
243 #define UEA_CHIP_VERSION(x) \
244 	((x)->driver_info & 0xf)
245 
246 #define IS_ISDN(x) \
247 	((x)->annex & ANNEXB)
248 
249 #define INS_TO_USBDEV(ins) (ins->usb_dev)
250 
251 #define GET_STATUS(data) \
252 	((data >> 8) & 0xf)
253 
254 #define IS_OPERATIONAL(sc) \
255 	((UEA_CHIP_VERSION(sc) != EAGLE_IV) ? \
256 	(GET_STATUS(sc->stats.phy.state) == 2) : \
257 	(sc->stats.phy.state == 7))
258 
259 /*
260  * Set of macros to handle unaligned data in the firmware blob.
261  * The FW_GET_BYTE() macro is provided only for consistency.
262  */
263 
264 #define FW_GET_BYTE(p) (*((__u8 *) (p)))
265 
266 #define FW_DIR "ueagle-atm/"
267 #define EAGLE_FIRMWARE FW_DIR "eagle.fw"
268 #define ADI930_FIRMWARE FW_DIR "adi930.fw"
269 #define EAGLE_I_FIRMWARE FW_DIR "eagleI.fw"
270 #define EAGLE_II_FIRMWARE FW_DIR "eagleII.fw"
271 #define EAGLE_III_FIRMWARE FW_DIR "eagleIII.fw"
272 #define EAGLE_IV_FIRMWARE FW_DIR "eagleIV.fw"
273 
274 #define DSP4I_FIRMWARE FW_DIR "DSP4i.bin"
275 #define DSP4P_FIRMWARE FW_DIR "DSP4p.bin"
276 #define DSP9I_FIRMWARE FW_DIR "DSP9i.bin"
277 #define DSP9P_FIRMWARE FW_DIR "DSP9p.bin"
278 #define DSPEI_FIRMWARE FW_DIR "DSPei.bin"
279 #define DSPEP_FIRMWARE FW_DIR "DSPep.bin"
280 #define FPGA930_FIRMWARE FW_DIR "930-fpga.bin"
281 
282 #define CMV4P_FIRMWARE FW_DIR "CMV4p.bin"
283 #define CMV4PV2_FIRMWARE FW_DIR "CMV4p.bin.v2"
284 #define CMV4I_FIRMWARE FW_DIR "CMV4i.bin"
285 #define CMV4IV2_FIRMWARE FW_DIR "CMV4i.bin.v2"
286 #define CMV9P_FIRMWARE FW_DIR "CMV9p.bin"
287 #define CMV9PV2_FIRMWARE FW_DIR "CMV9p.bin.v2"
288 #define CMV9I_FIRMWARE FW_DIR "CMV9i.bin"
289 #define CMV9IV2_FIRMWARE FW_DIR "CMV9i.bin.v2"
290 #define CMVEP_FIRMWARE FW_DIR "CMVep.bin"
291 #define CMVEPV2_FIRMWARE FW_DIR "CMVep.bin.v2"
292 #define CMVEI_FIRMWARE FW_DIR "CMVei.bin"
293 #define CMVEIV2_FIRMWARE FW_DIR "CMVei.bin.v2"
294 
295 #define UEA_FW_NAME_MAX 30
296 #define NB_MODEM 4
297 
298 #define BULK_TIMEOUT 300
299 #define CTRL_TIMEOUT 1000
300 
301 #define ACK_TIMEOUT msecs_to_jiffies(3000)
302 
303 #define UEA_INTR_IFACE_NO	0
304 #define UEA_US_IFACE_NO		1
305 #define UEA_DS_IFACE_NO		2
306 
307 #define FASTEST_ISO_INTF	8
308 
309 #define UEA_BULK_DATA_PIPE	0x02
310 #define UEA_IDMA_PIPE		0x04
311 #define UEA_INTR_PIPE		0x04
312 #define UEA_ISO_DATA_PIPE	0x08
313 
314 #define UEA_E1_SET_BLOCK	0x0001
315 #define UEA_E4_SET_BLOCK	0x002c
316 #define UEA_SET_MODE		0x0003
317 #define UEA_SET_2183_DATA	0x0004
318 #define UEA_SET_TIMEOUT		0x0011
319 
320 #define UEA_LOOPBACK_OFF	0x0002
321 #define UEA_LOOPBACK_ON		0x0003
322 #define UEA_BOOT_IDMA		0x0006
323 #define UEA_START_RESET		0x0007
324 #define UEA_END_RESET		0x0008
325 
326 #define UEA_SWAP_MAILBOX	(0x3fcd | 0x4000)
327 #define UEA_MPTX_START		(0x3fce | 0x4000)
328 #define UEA_MPTX_MAILBOX	(0x3fd6 | 0x4000)
329 #define UEA_MPRX_MAILBOX	(0x3fdf | 0x4000)
330 
331 /* block information in eagle4 dsp firmware  */
332 struct block_index {
333 	__le32 PageOffset;
334 	__le32 NotLastBlock;
335 	__le32 dummy;
336 	__le32 PageSize;
337 	__le32 PageAddress;
338 	__le16 dummy1;
339 	__le16 PageNumber;
340 } __packed;
341 
342 #define E4_IS_BOOT_PAGE(PageSize) ((le32_to_cpu(PageSize)) & 0x80000000)
343 #define E4_PAGE_BYTES(PageSize) ((le32_to_cpu(PageSize) & 0x7fffffff) * 4)
344 
345 #define E4_L1_STRING_HEADER 0x10
346 #define E4_MAX_PAGE_NUMBER 0x58
347 #define E4_NO_SWAPPAGE_HEADERS 0x31
348 
349 /* l1_code is eagle4 dsp firmware format */
350 struct l1_code {
351 	u8 string_header[E4_L1_STRING_HEADER];
352 	u8 page_number_to_block_index[E4_MAX_PAGE_NUMBER];
353 	struct block_index page_header[E4_NO_SWAPPAGE_HEADERS];
354 	u8 code[];
355 } __packed;
356 
357 /* structures describing a block within a DSP page */
358 struct block_info_e1 {
359 	__le16 wHdr;
360 	__le16 wAddress;
361 	__le16 wSize;
362 	__le16 wOvlOffset;
363 	__le16 wOvl;		/* overlay */
364 	__le16 wLast;
365 } __packed;
366 #define E1_BLOCK_INFO_SIZE 12
367 
368 struct block_info_e4 {
369 	__be16 wHdr;
370 	__u8 bBootPage;
371 	__u8 bPageNumber;
372 	__be32 dwSize;
373 	__be32 dwAddress;
374 	__be16 wReserved;
375 } __packed;
376 #define E4_BLOCK_INFO_SIZE 14
377 
378 #define UEA_BIHDR 0xabcd
379 #define UEA_RESERVED 0xffff
380 
381 /* constants describing cmv type */
382 #define E1_PREAMBLE 0x535c
383 #define E1_MODEMTOHOST 0x01
384 #define E1_HOSTTOMODEM 0x10
385 
386 #define E1_MEMACCESS 0x1
387 #define E1_ADSLDIRECTIVE 0x7
388 #define E1_FUNCTION_TYPE(f) ((f) >> 4)
389 #define E1_FUNCTION_SUBTYPE(f) ((f) & 0x0f)
390 
391 #define E4_MEMACCESS 0
392 #define E4_ADSLDIRECTIVE 0xf
393 #define E4_FUNCTION_TYPE(f) ((f) >> 8)
394 #define E4_FUNCTION_SIZE(f) ((f) & 0x0f)
395 #define E4_FUNCTION_SUBTYPE(f) (((f) >> 4) & 0x0f)
396 
397 /* for MEMACCESS */
398 #define E1_REQUESTREAD	0x0
399 #define E1_REQUESTWRITE	0x1
400 #define E1_REPLYREAD	0x2
401 #define E1_REPLYWRITE	0x3
402 
403 #define E4_REQUESTREAD	0x0
404 #define E4_REQUESTWRITE	0x4
405 #define E4_REPLYREAD	(E4_REQUESTREAD | 1)
406 #define E4_REPLYWRITE	(E4_REQUESTWRITE | 1)
407 
408 /* for ADSLDIRECTIVE */
409 #define E1_KERNELREADY 0x0
410 #define E1_MODEMREADY  0x1
411 
412 #define E4_KERNELREADY 0x0
413 #define E4_MODEMREADY  0x1
414 
415 #define E1_MAKEFUNCTION(t, s) (((t) & 0xf) << 4 | ((s) & 0xf))
416 #define E4_MAKEFUNCTION(t, st, s) (((t) & 0xf) << 8 | \
417 	((st) & 0xf) << 4 | ((s) & 0xf))
418 
419 #define E1_MAKESA(a, b, c, d)						\
420 	(((c) & 0xff) << 24 |						\
421 	 ((d) & 0xff) << 16 |						\
422 	 ((a) & 0xff) << 8  |						\
423 	 ((b) & 0xff))
424 
425 #define E1_GETSA1(a) ((a >> 8) & 0xff)
426 #define E1_GETSA2(a) (a & 0xff)
427 #define E1_GETSA3(a) ((a >> 24) & 0xff)
428 #define E1_GETSA4(a) ((a >> 16) & 0xff)
429 
430 #define E1_SA_CNTL E1_MAKESA('C', 'N', 'T', 'L')
431 #define E1_SA_DIAG E1_MAKESA('D', 'I', 'A', 'G')
432 #define E1_SA_INFO E1_MAKESA('I', 'N', 'F', 'O')
433 #define E1_SA_OPTN E1_MAKESA('O', 'P', 'T', 'N')
434 #define E1_SA_RATE E1_MAKESA('R', 'A', 'T', 'E')
435 #define E1_SA_STAT E1_MAKESA('S', 'T', 'A', 'T')
436 
437 #define E4_SA_CNTL 1
438 #define E4_SA_STAT 2
439 #define E4_SA_INFO 3
440 #define E4_SA_TEST 4
441 #define E4_SA_OPTN 5
442 #define E4_SA_RATE 6
443 #define E4_SA_DIAG 7
444 #define E4_SA_CNFG 8
445 
446 /* structures representing a CMV (Configuration and Management Variable) */
447 struct cmv_e1 {
448 	__le16 wPreamble;
449 	__u8 bDirection;
450 	__u8 bFunction;
451 	__le16 wIndex;
452 	__le32 dwSymbolicAddress;
453 	__le16 wOffsetAddress;
454 	__le32 dwData;
455 } __packed;
456 
457 struct cmv_e4 {
458 	__be16 wGroup;
459 	__be16 wFunction;
460 	__be16 wOffset;
461 	__be16 wAddress;
462 	__be32 dwData[6];
463 } __packed;
464 
465 /* structures representing swap information */
466 struct swap_info_e1 {
467 	__u8 bSwapPageNo;
468 	__u8 bOvl;		/* overlay */
469 } __packed;
470 
471 struct swap_info_e4 {
472 	__u8 bSwapPageNo;
473 } __packed;
474 
475 /* structures representing interrupt data */
476 #define e1_bSwapPageNo	u.e1.s1.swapinfo.bSwapPageNo
477 #define e1_bOvl		u.e1.s1.swapinfo.bOvl
478 #define e4_bSwapPageNo  u.e4.s1.swapinfo.bSwapPageNo
479 
480 #define INT_LOADSWAPPAGE 0x0001
481 #define INT_INCOMINGCMV  0x0002
482 
483 union intr_data_e1 {
484 	struct {
485 		struct swap_info_e1 swapinfo;
486 		__le16 wDataSize;
487 	} __packed s1;
488 	struct {
489 		struct cmv_e1 cmv;
490 		__le16 wDataSize;
491 	} __packed s2;
492 } __packed;
493 
494 union intr_data_e4 {
495 	struct {
496 		struct swap_info_e4 swapinfo;
497 		__le16 wDataSize;
498 	} __packed s1;
499 	struct {
500 		struct cmv_e4 cmv;
501 		__le16 wDataSize;
502 	} __packed s2;
503 } __packed;
504 
505 struct intr_pkt {
506 	__u8 bType;
507 	__u8 bNotification;
508 	__le16 wValue;
509 	__le16 wIndex;
510 	__le16 wLength;
511 	__le16 wInterrupt;
512 	union {
513 		union intr_data_e1 e1;
514 		union intr_data_e4 e4;
515 	} u;
516 } __packed;
517 
518 #define E1_INTR_PKT_SIZE 28
519 #define E4_INTR_PKT_SIZE 64
520 
521 static struct usb_driver uea_driver;
522 static DEFINE_MUTEX(uea_mutex);
523 static const char * const chip_name[] = {
524 	"ADI930", "Eagle I", "Eagle II", "Eagle III", "Eagle IV"};
525 
526 static int modem_index;
527 static unsigned int debug;
528 static unsigned int altsetting[NB_MODEM] = {
529 				[0 ... (NB_MODEM - 1)] = FASTEST_ISO_INTF};
530 static bool sync_wait[NB_MODEM];
531 static char *cmv_file[NB_MODEM];
532 static int annex[NB_MODEM];
533 
534 module_param(debug, uint, 0644);
535 MODULE_PARM_DESC(debug, "module debug level (0=off,1=on,2=verbose)");
536 module_param_array(altsetting, uint, NULL, 0644);
537 MODULE_PARM_DESC(altsetting, "alternate setting for incoming traffic: 0=bulk, "
538 			     "1=isoc slowest, ... , 8=isoc fastest (default)");
539 module_param_array(sync_wait, bool, NULL, 0644);
540 MODULE_PARM_DESC(sync_wait, "wait the synchronisation before starting ATM");
541 module_param_array(cmv_file, charp, NULL, 0644);
542 MODULE_PARM_DESC(cmv_file,
543 		"file name with configuration and management variables");
544 module_param_array(annex, uint, NULL, 0644);
545 MODULE_PARM_DESC(annex,
546 		"manually set annex a/b (0=auto, 1=annex a, 2=annex b)");
547 
548 #define uea_wait(sc, cond, timeo) \
549 ({ \
550 	int _r = wait_event_freezable_timeout(sc->sync_q, \
551 			(cond) || kthread_should_stop(), timeo); \
552 	if (kthread_should_stop()) \
553 		_r = -ENODEV; \
554 	_r; \
555 })
556 
557 #define UPDATE_ATM_STAT(type, val) \
558 	do { \
559 		if (sc->usbatm->atm_dev) \
560 			sc->usbatm->atm_dev->type = val; \
561 	} while (0)
562 
563 #define UPDATE_ATM_SIGNAL(val) \
564 	do { \
565 		if (sc->usbatm->atm_dev) \
566 			atm_dev_signal_change(sc->usbatm->atm_dev, val); \
567 	} while (0)
568 
569 
570 /* Firmware loading */
571 #define LOAD_INTERNAL     0xA0
572 #define F8051_USBCS       0x7f92
573 
574 /*
575  * uea_send_modem_cmd - Send a command for pre-firmware devices.
576  */
577 static int uea_send_modem_cmd(struct usb_device *usb,
578 			      u16 addr, u16 size, const u8 *buff)
579 {
580 	int ret = -ENOMEM;
581 	u8 *xfer_buff;
582 
583 	xfer_buff = kmemdup(buff, size, GFP_KERNEL);
584 	if (xfer_buff) {
585 		ret = usb_control_msg(usb,
586 				      usb_sndctrlpipe(usb, 0),
587 				      LOAD_INTERNAL,
588 				      USB_DIR_OUT | USB_TYPE_VENDOR |
589 				      USB_RECIP_DEVICE, addr, 0, xfer_buff,
590 				      size, CTRL_TIMEOUT);
591 		kfree(xfer_buff);
592 	}
593 
594 	if (ret < 0)
595 		return ret;
596 
597 	return (ret == size) ? 0 : -EIO;
598 }
599 
600 static void uea_upload_pre_firmware(const struct firmware *fw_entry,
601 								void *context)
602 {
603 	struct usb_device *usb = context;
604 	const u8 *pfw;
605 	u8 value;
606 	u32 crc = 0;
607 	int ret, size;
608 
609 	uea_enters(usb);
610 	if (!fw_entry) {
611 		uea_err(usb, "firmware is not available\n");
612 		goto err;
613 	}
614 
615 	pfw = fw_entry->data;
616 	size = fw_entry->size;
617 	if (size < 4)
618 		goto err_fw_corrupted;
619 
620 	crc = get_unaligned_le32(pfw);
621 	pfw += 4;
622 	size -= 4;
623 	if (crc32_be(0, pfw, size) != crc)
624 		goto err_fw_corrupted;
625 
626 	/*
627 	 * Start to upload firmware : send reset
628 	 */
629 	value = 1;
630 	ret = uea_send_modem_cmd(usb, F8051_USBCS, sizeof(value), &value);
631 
632 	if (ret < 0) {
633 		uea_err(usb, "modem reset failed with error %d\n", ret);
634 		goto err;
635 	}
636 
637 	while (size > 3) {
638 		u8 len = FW_GET_BYTE(pfw);
639 		u16 add = get_unaligned_le16(pfw + 1);
640 
641 		size -= len + 3;
642 		if (size < 0)
643 			goto err_fw_corrupted;
644 
645 		ret = uea_send_modem_cmd(usb, add, len, pfw + 3);
646 		if (ret < 0) {
647 			uea_err(usb, "uploading firmware data failed "
648 					"with error %d\n", ret);
649 			goto err;
650 		}
651 		pfw += len + 3;
652 	}
653 
654 	if (size != 0)
655 		goto err_fw_corrupted;
656 
657 	/*
658 	 * Tell the modem we finish : de-assert reset
659 	 */
660 	value = 0;
661 	ret = uea_send_modem_cmd(usb, F8051_USBCS, 1, &value);
662 	if (ret < 0)
663 		uea_err(usb, "modem de-assert failed with error %d\n", ret);
664 	else
665 		uea_info(usb, "firmware uploaded\n");
666 
667 	goto err;
668 
669 err_fw_corrupted:
670 	uea_err(usb, "firmware is corrupted\n");
671 err:
672 	release_firmware(fw_entry);
673 	uea_leaves(usb);
674 }
675 
676 /*
677  * uea_load_firmware - Load usb firmware for pre-firmware devices.
678  */
679 static int uea_load_firmware(struct usb_device *usb, unsigned int ver)
680 {
681 	int ret;
682 	char *fw_name = EAGLE_FIRMWARE;
683 
684 	uea_enters(usb);
685 	uea_info(usb, "pre-firmware device, uploading firmware\n");
686 
687 	switch (ver) {
688 	case ADI930:
689 		fw_name = ADI930_FIRMWARE;
690 		break;
691 	case EAGLE_I:
692 		fw_name = EAGLE_I_FIRMWARE;
693 		break;
694 	case EAGLE_II:
695 		fw_name = EAGLE_II_FIRMWARE;
696 		break;
697 	case EAGLE_III:
698 		fw_name = EAGLE_III_FIRMWARE;
699 		break;
700 	case EAGLE_IV:
701 		fw_name = EAGLE_IV_FIRMWARE;
702 		break;
703 	}
704 
705 	ret = request_firmware_nowait(THIS_MODULE, 1, fw_name, &usb->dev,
706 					GFP_KERNEL, usb,
707 					uea_upload_pre_firmware);
708 	if (ret)
709 		uea_err(usb, "firmware %s is not available\n", fw_name);
710 	else
711 		uea_info(usb, "loading firmware %s\n", fw_name);
712 
713 	uea_leaves(usb);
714 	return ret;
715 }
716 
717 /* modem management : dsp firmware, send/read CMV, monitoring statistic
718  */
719 
720 /*
721  * Make sure that the DSP code provided is safe to use.
722  */
723 static int check_dsp_e1(const u8 *dsp, unsigned int len)
724 {
725 	u8 pagecount, blockcount;
726 	u16 blocksize;
727 	u32 pageoffset;
728 	unsigned int i, j, p, pp;
729 
730 	pagecount = FW_GET_BYTE(dsp);
731 	p = 1;
732 
733 	/* enough space for page offsets? */
734 	if (p + 4 * pagecount > len)
735 		return 1;
736 
737 	for (i = 0; i < pagecount; i++) {
738 
739 		pageoffset = get_unaligned_le32(dsp + p);
740 		p += 4;
741 
742 		if (pageoffset == 0)
743 			continue;
744 
745 		/* enough space for blockcount? */
746 		if (pageoffset >= len)
747 			return 1;
748 
749 		pp = pageoffset;
750 		blockcount = FW_GET_BYTE(dsp + pp);
751 		pp += 1;
752 
753 		for (j = 0; j < blockcount; j++) {
754 
755 			/* enough space for block header? */
756 			if (pp + 4 > len)
757 				return 1;
758 
759 			pp += 2;	/* skip blockaddr */
760 			blocksize = get_unaligned_le16(dsp + pp);
761 			pp += 2;
762 
763 			/* enough space for block data? */
764 			if (pp + blocksize > len)
765 				return 1;
766 
767 			pp += blocksize;
768 		}
769 	}
770 
771 	return 0;
772 }
773 
774 static int check_dsp_e4(const u8 *dsp, int len)
775 {
776 	int i;
777 	struct l1_code *p = (struct l1_code *) dsp;
778 	unsigned int sum = p->code - dsp;
779 
780 	if (len < sum)
781 		return 1;
782 
783 	if (strcmp("STRATIPHY ANEXA", p->string_header) != 0 &&
784 	    strcmp("STRATIPHY ANEXB", p->string_header) != 0)
785 		return 1;
786 
787 	for (i = 0; i < E4_MAX_PAGE_NUMBER; i++) {
788 		struct block_index *blockidx;
789 		u8 blockno = p->page_number_to_block_index[i];
790 		if (blockno >= E4_NO_SWAPPAGE_HEADERS)
791 			continue;
792 
793 		do {
794 			u64 l;
795 
796 			if (blockno >= E4_NO_SWAPPAGE_HEADERS)
797 				return 1;
798 
799 			blockidx = &p->page_header[blockno++];
800 			if ((u8 *)(blockidx + 1) - dsp  >= len)
801 				return 1;
802 
803 			if (le16_to_cpu(blockidx->PageNumber) != i)
804 				return 1;
805 
806 			l = E4_PAGE_BYTES(blockidx->PageSize);
807 			sum += l;
808 			l += le32_to_cpu(blockidx->PageOffset);
809 			if (l > len)
810 				return 1;
811 
812 		/* zero is zero regardless endianness */
813 		} while (blockidx->NotLastBlock);
814 	}
815 
816 	return (sum == len) ? 0 : 1;
817 }
818 
819 /*
820  * send data to the idma pipe
821  * */
822 static int uea_idma_write(struct uea_softc *sc, const void *data, u32 size)
823 {
824 	int ret = -ENOMEM;
825 	u8 *xfer_buff;
826 	int bytes_read;
827 
828 	xfer_buff = kmemdup(data, size, GFP_KERNEL);
829 	if (!xfer_buff) {
830 		uea_err(INS_TO_USBDEV(sc), "can't allocate xfer_buff\n");
831 		return ret;
832 	}
833 
834 	ret = usb_bulk_msg(sc->usb_dev,
835 			 usb_sndbulkpipe(sc->usb_dev, UEA_IDMA_PIPE),
836 			 xfer_buff, size, &bytes_read, BULK_TIMEOUT);
837 
838 	kfree(xfer_buff);
839 	if (ret < 0)
840 		return ret;
841 	if (size != bytes_read) {
842 		uea_err(INS_TO_USBDEV(sc), "size != bytes_read %d %d\n", size,
843 		       bytes_read);
844 		return -EIO;
845 	}
846 
847 	return 0;
848 }
849 
850 static int request_dsp(struct uea_softc *sc)
851 {
852 	int ret;
853 	char *dsp_name;
854 
855 	if (UEA_CHIP_VERSION(sc) == EAGLE_IV) {
856 		if (IS_ISDN(sc))
857 			dsp_name = DSP4I_FIRMWARE;
858 		else
859 			dsp_name = DSP4P_FIRMWARE;
860 	} else if (UEA_CHIP_VERSION(sc) == ADI930) {
861 		if (IS_ISDN(sc))
862 			dsp_name = DSP9I_FIRMWARE;
863 		else
864 			dsp_name = DSP9P_FIRMWARE;
865 	} else {
866 		if (IS_ISDN(sc))
867 			dsp_name = DSPEI_FIRMWARE;
868 		else
869 			dsp_name = DSPEP_FIRMWARE;
870 	}
871 
872 	ret = request_firmware(&sc->dsp_firm, dsp_name, &sc->usb_dev->dev);
873 	if (ret < 0) {
874 		uea_err(INS_TO_USBDEV(sc),
875 		       "requesting firmware %s failed with error %d\n",
876 			dsp_name, ret);
877 		return ret;
878 	}
879 
880 	if (UEA_CHIP_VERSION(sc) == EAGLE_IV)
881 		ret = check_dsp_e4(sc->dsp_firm->data, sc->dsp_firm->size);
882 	else
883 		ret = check_dsp_e1(sc->dsp_firm->data, sc->dsp_firm->size);
884 
885 	if (ret) {
886 		uea_err(INS_TO_USBDEV(sc), "firmware %s is corrupted\n",
887 		       dsp_name);
888 		release_firmware(sc->dsp_firm);
889 		sc->dsp_firm = NULL;
890 		return -EILSEQ;
891 	}
892 
893 	return 0;
894 }
895 
896 /*
897  * The uea_load_page() function must be called within a process context
898  */
899 static void uea_load_page_e1(struct work_struct *work)
900 {
901 	struct uea_softc *sc = container_of(work, struct uea_softc, task);
902 	u16 pageno = sc->pageno;
903 	u16 ovl = sc->ovl;
904 	struct block_info_e1 bi;
905 
906 	const u8 *p;
907 	u8 pagecount, blockcount;
908 	u16 blockaddr, blocksize;
909 	u32 pageoffset;
910 	int i;
911 
912 	/* reload firmware when reboot start and it's loaded already */
913 	if (ovl == 0 && pageno == 0) {
914 		release_firmware(sc->dsp_firm);
915 		sc->dsp_firm = NULL;
916 	}
917 
918 	if (sc->dsp_firm == NULL && request_dsp(sc) < 0)
919 		return;
920 
921 	p = sc->dsp_firm->data;
922 	pagecount = FW_GET_BYTE(p);
923 	p += 1;
924 
925 	if (pageno >= pagecount)
926 		goto bad1;
927 
928 	p += 4 * pageno;
929 	pageoffset = get_unaligned_le32(p);
930 
931 	if (pageoffset == 0)
932 		goto bad1;
933 
934 	p = sc->dsp_firm->data + pageoffset;
935 	blockcount = FW_GET_BYTE(p);
936 	p += 1;
937 
938 	uea_dbg(INS_TO_USBDEV(sc),
939 	       "sending %u blocks for DSP page %u\n", blockcount, pageno);
940 
941 	bi.wHdr = cpu_to_le16(UEA_BIHDR);
942 	bi.wOvl = cpu_to_le16(ovl);
943 	bi.wOvlOffset = cpu_to_le16(ovl | 0x8000);
944 
945 	for (i = 0; i < blockcount; i++) {
946 		blockaddr = get_unaligned_le16(p);
947 		p += 2;
948 
949 		blocksize = get_unaligned_le16(p);
950 		p += 2;
951 
952 		bi.wSize = cpu_to_le16(blocksize);
953 		bi.wAddress = cpu_to_le16(blockaddr);
954 		bi.wLast = cpu_to_le16((i == blockcount - 1) ? 1 : 0);
955 
956 		/* send block info through the IDMA pipe */
957 		if (uea_idma_write(sc, &bi, E1_BLOCK_INFO_SIZE))
958 			goto bad2;
959 
960 		/* send block data through the IDMA pipe */
961 		if (uea_idma_write(sc, p, blocksize))
962 			goto bad2;
963 
964 		p += blocksize;
965 	}
966 
967 	return;
968 
969 bad2:
970 	uea_err(INS_TO_USBDEV(sc), "sending DSP block %u failed\n", i);
971 	return;
972 bad1:
973 	uea_err(INS_TO_USBDEV(sc), "invalid DSP page %u requested\n", pageno);
974 }
975 
976 static void __uea_load_page_e4(struct uea_softc *sc, u8 pageno, int boot)
977 {
978 	struct block_info_e4 bi;
979 	struct block_index *blockidx;
980 	struct l1_code *p = (struct l1_code *) sc->dsp_firm->data;
981 	u8 blockno = p->page_number_to_block_index[pageno];
982 
983 	bi.wHdr = cpu_to_be16(UEA_BIHDR);
984 	bi.bBootPage = boot;
985 	bi.bPageNumber = pageno;
986 	bi.wReserved = cpu_to_be16(UEA_RESERVED);
987 
988 	do {
989 		const u8 *blockoffset;
990 		unsigned int blocksize;
991 
992 		blockidx = &p->page_header[blockno];
993 		blocksize = E4_PAGE_BYTES(blockidx->PageSize);
994 		blockoffset = sc->dsp_firm->data + le32_to_cpu(
995 							blockidx->PageOffset);
996 
997 		bi.dwSize = cpu_to_be32(blocksize);
998 		bi.dwAddress = cpu_to_be32(le32_to_cpu(blockidx->PageAddress));
999 
1000 		uea_dbg(INS_TO_USBDEV(sc),
1001 			"sending block %u for DSP page "
1002 			"%u size %u address %x\n",
1003 			blockno, pageno, blocksize,
1004 			le32_to_cpu(blockidx->PageAddress));
1005 
1006 		/* send block info through the IDMA pipe */
1007 		if (uea_idma_write(sc, &bi, E4_BLOCK_INFO_SIZE))
1008 			goto bad;
1009 
1010 		/* send block data through the IDMA pipe */
1011 		if (uea_idma_write(sc, blockoffset, blocksize))
1012 			goto bad;
1013 
1014 		blockno++;
1015 	} while (blockidx->NotLastBlock);
1016 
1017 	return;
1018 
1019 bad:
1020 	uea_err(INS_TO_USBDEV(sc), "sending DSP block %u failed\n", blockno);
1021 	return;
1022 }
1023 
1024 static void uea_load_page_e4(struct work_struct *work)
1025 {
1026 	struct uea_softc *sc = container_of(work, struct uea_softc, task);
1027 	u8 pageno = sc->pageno;
1028 	int i;
1029 	struct block_info_e4 bi;
1030 	struct l1_code *p;
1031 
1032 	uea_dbg(INS_TO_USBDEV(sc), "sending DSP page %u\n", pageno);
1033 
1034 	/* reload firmware when reboot start and it's loaded already */
1035 	if (pageno == 0) {
1036 		release_firmware(sc->dsp_firm);
1037 		sc->dsp_firm = NULL;
1038 	}
1039 
1040 	if (sc->dsp_firm == NULL && request_dsp(sc) < 0)
1041 		return;
1042 
1043 	p = (struct l1_code *) sc->dsp_firm->data;
1044 	if (pageno >= le16_to_cpu(p->page_header[0].PageNumber)) {
1045 		uea_err(INS_TO_USBDEV(sc), "invalid DSP "
1046 						"page %u requested\n", pageno);
1047 		return;
1048 	}
1049 
1050 	if (pageno != 0) {
1051 		__uea_load_page_e4(sc, pageno, 0);
1052 		return;
1053 	}
1054 
1055 	uea_dbg(INS_TO_USBDEV(sc),
1056 	       "sending Main DSP page %u\n", p->page_header[0].PageNumber);
1057 
1058 	for (i = 0; i < le16_to_cpu(p->page_header[0].PageNumber); i++) {
1059 		if (E4_IS_BOOT_PAGE(p->page_header[i].PageSize))
1060 			__uea_load_page_e4(sc, i, 1);
1061 	}
1062 
1063 	uea_dbg(INS_TO_USBDEV(sc) , "sending start bi\n");
1064 
1065 	bi.wHdr = cpu_to_be16(UEA_BIHDR);
1066 	bi.bBootPage = 0;
1067 	bi.bPageNumber = 0xff;
1068 	bi.wReserved = cpu_to_be16(UEA_RESERVED);
1069 	bi.dwSize = cpu_to_be32(E4_PAGE_BYTES(p->page_header[0].PageSize));
1070 	bi.dwAddress = cpu_to_be32(le32_to_cpu(p->page_header[0].PageAddress));
1071 
1072 	/* send block info through the IDMA pipe */
1073 	if (uea_idma_write(sc, &bi, E4_BLOCK_INFO_SIZE))
1074 		uea_err(INS_TO_USBDEV(sc), "sending DSP start bi failed\n");
1075 }
1076 
1077 static inline void wake_up_cmv_ack(struct uea_softc *sc)
1078 {
1079 	BUG_ON(sc->cmv_ack);
1080 	sc->cmv_ack = 1;
1081 	wake_up(&sc->sync_q);
1082 }
1083 
1084 static inline int wait_cmv_ack(struct uea_softc *sc)
1085 {
1086 	int ret = uea_wait(sc, sc->cmv_ack , ACK_TIMEOUT);
1087 
1088 	sc->cmv_ack = 0;
1089 
1090 	uea_dbg(INS_TO_USBDEV(sc), "wait_event_timeout : %d ms\n",
1091 			jiffies_to_msecs(ret));
1092 
1093 	if (ret < 0)
1094 		return ret;
1095 
1096 	return (ret == 0) ? -ETIMEDOUT : 0;
1097 }
1098 
1099 #define UCDC_SEND_ENCAPSULATED_COMMAND 0x00
1100 
1101 static int uea_request(struct uea_softc *sc,
1102 		u16 value, u16 index, u16 size, const void *data)
1103 {
1104 	u8 *xfer_buff;
1105 	int ret = -ENOMEM;
1106 
1107 	xfer_buff = kmemdup(data, size, GFP_KERNEL);
1108 	if (!xfer_buff) {
1109 		uea_err(INS_TO_USBDEV(sc), "can't allocate xfer_buff\n");
1110 		return ret;
1111 	}
1112 
1113 	ret = usb_control_msg(sc->usb_dev, usb_sndctrlpipe(sc->usb_dev, 0),
1114 			      UCDC_SEND_ENCAPSULATED_COMMAND,
1115 			      USB_DIR_OUT | USB_TYPE_VENDOR | USB_RECIP_DEVICE,
1116 			      value, index, xfer_buff, size, CTRL_TIMEOUT);
1117 
1118 	kfree(xfer_buff);
1119 	if (ret < 0) {
1120 		uea_err(INS_TO_USBDEV(sc), "usb_control_msg error %d\n", ret);
1121 		return ret;
1122 	}
1123 
1124 	if (ret != size) {
1125 		uea_err(INS_TO_USBDEV(sc),
1126 		       "usb_control_msg send only %d bytes (instead of %d)\n",
1127 		       ret, size);
1128 		return -EIO;
1129 	}
1130 
1131 	return 0;
1132 }
1133 
1134 static int uea_cmv_e1(struct uea_softc *sc,
1135 		u8 function, u32 address, u16 offset, u32 data)
1136 {
1137 	struct cmv_e1 cmv;
1138 	int ret;
1139 
1140 	uea_enters(INS_TO_USBDEV(sc));
1141 	uea_vdbg(INS_TO_USBDEV(sc), "Function : %d-%d, Address : %c%c%c%c, "
1142 			"offset : 0x%04x, data : 0x%08x\n",
1143 			E1_FUNCTION_TYPE(function),
1144 			E1_FUNCTION_SUBTYPE(function),
1145 			E1_GETSA1(address), E1_GETSA2(address),
1146 			E1_GETSA3(address),
1147 			E1_GETSA4(address), offset, data);
1148 
1149 	/* we send a request, but we expect a reply */
1150 	sc->cmv_dsc.e1.function = function | 0x2;
1151 	sc->cmv_dsc.e1.idx++;
1152 	sc->cmv_dsc.e1.address = address;
1153 	sc->cmv_dsc.e1.offset = offset;
1154 
1155 	cmv.wPreamble = cpu_to_le16(E1_PREAMBLE);
1156 	cmv.bDirection = E1_HOSTTOMODEM;
1157 	cmv.bFunction = function;
1158 	cmv.wIndex = cpu_to_le16(sc->cmv_dsc.e1.idx);
1159 	put_unaligned_le32(address, &cmv.dwSymbolicAddress);
1160 	cmv.wOffsetAddress = cpu_to_le16(offset);
1161 	put_unaligned_le32(data >> 16 | data << 16, &cmv.dwData);
1162 
1163 	ret = uea_request(sc, UEA_E1_SET_BLOCK, UEA_MPTX_START,
1164 							sizeof(cmv), &cmv);
1165 	if (ret < 0)
1166 		return ret;
1167 	ret = wait_cmv_ack(sc);
1168 	uea_leaves(INS_TO_USBDEV(sc));
1169 	return ret;
1170 }
1171 
1172 static int uea_cmv_e4(struct uea_softc *sc,
1173 		u16 function, u16 group, u16 address, u16 offset, u32 data)
1174 {
1175 	struct cmv_e4 cmv;
1176 	int ret;
1177 
1178 	uea_enters(INS_TO_USBDEV(sc));
1179 	memset(&cmv, 0, sizeof(cmv));
1180 
1181 	uea_vdbg(INS_TO_USBDEV(sc), "Function : %d-%d, Group : 0x%04x, "
1182 		 "Address : 0x%04x, offset : 0x%04x, data : 0x%08x\n",
1183 		 E4_FUNCTION_TYPE(function), E4_FUNCTION_SUBTYPE(function),
1184 		 group, address, offset, data);
1185 
1186 	/* we send a request, but we expect a reply */
1187 	sc->cmv_dsc.e4.function = function | (0x1 << 4);
1188 	sc->cmv_dsc.e4.offset = offset;
1189 	sc->cmv_dsc.e4.address = address;
1190 	sc->cmv_dsc.e4.group = group;
1191 
1192 	cmv.wFunction = cpu_to_be16(function);
1193 	cmv.wGroup = cpu_to_be16(group);
1194 	cmv.wAddress = cpu_to_be16(address);
1195 	cmv.wOffset = cpu_to_be16(offset);
1196 	cmv.dwData[0] = cpu_to_be32(data);
1197 
1198 	ret = uea_request(sc, UEA_E4_SET_BLOCK, UEA_MPTX_START,
1199 							sizeof(cmv), &cmv);
1200 	if (ret < 0)
1201 		return ret;
1202 	ret = wait_cmv_ack(sc);
1203 	uea_leaves(INS_TO_USBDEV(sc));
1204 	return ret;
1205 }
1206 
1207 static inline int uea_read_cmv_e1(struct uea_softc *sc,
1208 		u32 address, u16 offset, u32 *data)
1209 {
1210 	int ret = uea_cmv_e1(sc, E1_MAKEFUNCTION(E1_MEMACCESS, E1_REQUESTREAD),
1211 			  address, offset, 0);
1212 	if (ret < 0)
1213 		uea_err(INS_TO_USBDEV(sc),
1214 			"reading cmv failed with error %d\n", ret);
1215 	else
1216 		*data = sc->data;
1217 
1218 	return ret;
1219 }
1220 
1221 static inline int uea_read_cmv_e4(struct uea_softc *sc,
1222 		u8 size, u16 group, u16 address, u16 offset, u32 *data)
1223 {
1224 	int ret = uea_cmv_e4(sc, E4_MAKEFUNCTION(E4_MEMACCESS,
1225 							E4_REQUESTREAD, size),
1226 			  group, address, offset, 0);
1227 	if (ret < 0)
1228 		uea_err(INS_TO_USBDEV(sc),
1229 			"reading cmv failed with error %d\n", ret);
1230 	else {
1231 		*data = sc->data;
1232 		/* size is in 16-bit word quantities */
1233 		if (size > 2)
1234 			*(data + 1) = sc->data1;
1235 	}
1236 	return ret;
1237 }
1238 
1239 static inline int uea_write_cmv_e1(struct uea_softc *sc,
1240 		u32 address, u16 offset, u32 data)
1241 {
1242 	int ret = uea_cmv_e1(sc, E1_MAKEFUNCTION(E1_MEMACCESS, E1_REQUESTWRITE),
1243 			  address, offset, data);
1244 	if (ret < 0)
1245 		uea_err(INS_TO_USBDEV(sc),
1246 			"writing cmv failed with error %d\n", ret);
1247 
1248 	return ret;
1249 }
1250 
1251 static inline int uea_write_cmv_e4(struct uea_softc *sc,
1252 		u8 size, u16 group, u16 address, u16 offset, u32 data)
1253 {
1254 	int ret = uea_cmv_e4(sc, E4_MAKEFUNCTION(E4_MEMACCESS,
1255 							E4_REQUESTWRITE, size),
1256 			  group, address, offset, data);
1257 	if (ret < 0)
1258 		uea_err(INS_TO_USBDEV(sc),
1259 			"writing cmv failed with error %d\n", ret);
1260 
1261 	return ret;
1262 }
1263 
1264 static void uea_set_bulk_timeout(struct uea_softc *sc, u32 dsrate)
1265 {
1266 	int ret;
1267 	u16 timeout;
1268 
1269 	/* in bulk mode the modem have problem with high rate
1270 	 * changing internal timing could improve things, but the
1271 	 * value is mysterious.
1272 	 * ADI930 don't support it (-EPIPE error).
1273 	 */
1274 
1275 	if (UEA_CHIP_VERSION(sc) == ADI930 ||
1276 	    altsetting[sc->modem_index] > 0 ||
1277 	    sc->stats.phy.dsrate == dsrate)
1278 		return;
1279 
1280 	/* Original timing (1Mbit/s) from ADI (used in windows driver) */
1281 	timeout = (dsrate <= 1024*1024) ? 0 : 1;
1282 	ret = uea_request(sc, UEA_SET_TIMEOUT, timeout, 0, NULL);
1283 	uea_info(INS_TO_USBDEV(sc), "setting new timeout %d%s\n",
1284 		 timeout,  ret < 0 ? " failed" : "");
1285 
1286 }
1287 
1288 /*
1289  * Monitor the modem and update the stat
1290  * return 0 if everything is ok
1291  * return < 0 if an error occurs (-EAGAIN reboot needed)
1292  */
1293 static int uea_stat_e1(struct uea_softc *sc)
1294 {
1295 	u32 data;
1296 	int ret;
1297 
1298 	uea_enters(INS_TO_USBDEV(sc));
1299 	data = sc->stats.phy.state;
1300 
1301 	ret = uea_read_cmv_e1(sc, E1_SA_STAT, 0, &sc->stats.phy.state);
1302 	if (ret < 0)
1303 		return ret;
1304 
1305 	switch (GET_STATUS(sc->stats.phy.state)) {
1306 	case 0:		/* not yet synchronized */
1307 		uea_dbg(INS_TO_USBDEV(sc),
1308 		       "modem not yet synchronized\n");
1309 		return 0;
1310 
1311 	case 1:		/* initialization */
1312 		uea_dbg(INS_TO_USBDEV(sc), "modem initializing\n");
1313 		return 0;
1314 
1315 	case 2:		/* operational */
1316 		uea_vdbg(INS_TO_USBDEV(sc), "modem operational\n");
1317 		break;
1318 
1319 	case 3:		/* fail ... */
1320 		uea_info(INS_TO_USBDEV(sc), "modem synchronization failed"
1321 					" (may be try other cmv/dsp)\n");
1322 		return -EAGAIN;
1323 
1324 	case 4 ... 6:	/* test state */
1325 		uea_warn(INS_TO_USBDEV(sc),
1326 				"modem in test mode - not supported\n");
1327 		return -EAGAIN;
1328 
1329 	case 7:		/* fast-retain ... */
1330 		uea_info(INS_TO_USBDEV(sc), "modem in fast-retain mode\n");
1331 		return 0;
1332 	default:
1333 		uea_err(INS_TO_USBDEV(sc), "modem invalid SW mode %d\n",
1334 			GET_STATUS(sc->stats.phy.state));
1335 		return -EAGAIN;
1336 	}
1337 
1338 	if (GET_STATUS(data) != 2) {
1339 		uea_request(sc, UEA_SET_MODE, UEA_LOOPBACK_OFF, 0, NULL);
1340 		uea_info(INS_TO_USBDEV(sc), "modem operational\n");
1341 
1342 		/* release the dsp firmware as it is not needed until
1343 		 * the next failure
1344 		 */
1345 		release_firmware(sc->dsp_firm);
1346 		sc->dsp_firm = NULL;
1347 	}
1348 
1349 	/* always update it as atm layer could not be init when we switch to
1350 	 * operational state
1351 	 */
1352 	UPDATE_ATM_SIGNAL(ATM_PHY_SIG_FOUND);
1353 
1354 	/* wake up processes waiting for synchronization */
1355 	wake_up(&sc->sync_q);
1356 
1357 	ret = uea_read_cmv_e1(sc, E1_SA_DIAG, 2, &sc->stats.phy.flags);
1358 	if (ret < 0)
1359 		return ret;
1360 	sc->stats.phy.mflags |= sc->stats.phy.flags;
1361 
1362 	/* in case of a flags ( for example delineation LOSS (& 0x10)),
1363 	 * we check the status again in order to detect the failure earlier
1364 	 */
1365 	if (sc->stats.phy.flags) {
1366 		uea_dbg(INS_TO_USBDEV(sc), "Stat flag = 0x%x\n",
1367 		       sc->stats.phy.flags);
1368 		return 0;
1369 	}
1370 
1371 	ret = uea_read_cmv_e1(sc, E1_SA_RATE, 0, &data);
1372 	if (ret < 0)
1373 		return ret;
1374 
1375 	uea_set_bulk_timeout(sc, (data >> 16) * 32);
1376 	sc->stats.phy.dsrate = (data >> 16) * 32;
1377 	sc->stats.phy.usrate = (data & 0xffff) * 32;
1378 	UPDATE_ATM_STAT(link_rate, sc->stats.phy.dsrate * 1000 / 424);
1379 
1380 	ret = uea_read_cmv_e1(sc, E1_SA_DIAG, 23, &data);
1381 	if (ret < 0)
1382 		return ret;
1383 	sc->stats.phy.dsattenuation = (data & 0xff) / 2;
1384 
1385 	ret = uea_read_cmv_e1(sc, E1_SA_DIAG, 47, &data);
1386 	if (ret < 0)
1387 		return ret;
1388 	sc->stats.phy.usattenuation = (data & 0xff) / 2;
1389 
1390 	ret = uea_read_cmv_e1(sc, E1_SA_DIAG, 25, &sc->stats.phy.dsmargin);
1391 	if (ret < 0)
1392 		return ret;
1393 
1394 	ret = uea_read_cmv_e1(sc, E1_SA_DIAG, 49, &sc->stats.phy.usmargin);
1395 	if (ret < 0)
1396 		return ret;
1397 
1398 	ret = uea_read_cmv_e1(sc, E1_SA_DIAG, 51, &sc->stats.phy.rxflow);
1399 	if (ret < 0)
1400 		return ret;
1401 
1402 	ret = uea_read_cmv_e1(sc, E1_SA_DIAG, 52, &sc->stats.phy.txflow);
1403 	if (ret < 0)
1404 		return ret;
1405 
1406 	ret = uea_read_cmv_e1(sc, E1_SA_DIAG, 54, &sc->stats.phy.dsunc);
1407 	if (ret < 0)
1408 		return ret;
1409 
1410 	/* only for atu-c */
1411 	ret = uea_read_cmv_e1(sc, E1_SA_DIAG, 58, &sc->stats.phy.usunc);
1412 	if (ret < 0)
1413 		return ret;
1414 
1415 	ret = uea_read_cmv_e1(sc, E1_SA_DIAG, 53, &sc->stats.phy.dscorr);
1416 	if (ret < 0)
1417 		return ret;
1418 
1419 	/* only for atu-c */
1420 	ret = uea_read_cmv_e1(sc, E1_SA_DIAG, 57, &sc->stats.phy.uscorr);
1421 	if (ret < 0)
1422 		return ret;
1423 
1424 	ret = uea_read_cmv_e1(sc, E1_SA_INFO, 8, &sc->stats.phy.vidco);
1425 	if (ret < 0)
1426 		return ret;
1427 
1428 	ret = uea_read_cmv_e1(sc, E1_SA_INFO, 13, &sc->stats.phy.vidcpe);
1429 	if (ret < 0)
1430 		return ret;
1431 
1432 	return 0;
1433 }
1434 
1435 static int uea_stat_e4(struct uea_softc *sc)
1436 {
1437 	u32 data;
1438 	u32 tmp_arr[2];
1439 	int ret;
1440 
1441 	uea_enters(INS_TO_USBDEV(sc));
1442 	data = sc->stats.phy.state;
1443 
1444 	/* XXX only need to be done before operationnal... */
1445 	ret = uea_read_cmv_e4(sc, 1, E4_SA_STAT, 0, 0, &sc->stats.phy.state);
1446 	if (ret < 0)
1447 		return ret;
1448 
1449 	switch (sc->stats.phy.state) {
1450 	case 0x0:	/* not yet synchronized */
1451 	case 0x1:
1452 	case 0x3:
1453 	case 0x4:
1454 		uea_dbg(INS_TO_USBDEV(sc), "modem not yet "
1455 						"synchronized\n");
1456 		return 0;
1457 	case 0x5:	/* initialization */
1458 	case 0x6:
1459 	case 0x9:
1460 	case 0xa:
1461 		uea_dbg(INS_TO_USBDEV(sc), "modem initializing\n");
1462 		return 0;
1463 	case 0x2:	/* fail ... */
1464 		uea_info(INS_TO_USBDEV(sc), "modem synchronization "
1465 				"failed (may be try other cmv/dsp)\n");
1466 		return -EAGAIN;
1467 	case 0x7:	/* operational */
1468 		break;
1469 	default:
1470 		uea_warn(INS_TO_USBDEV(sc), "unknown state: %x\n",
1471 						sc->stats.phy.state);
1472 		return 0;
1473 	}
1474 
1475 	if (data != 7) {
1476 		uea_request(sc, UEA_SET_MODE, UEA_LOOPBACK_OFF, 0, NULL);
1477 		uea_info(INS_TO_USBDEV(sc), "modem operational\n");
1478 
1479 		/* release the dsp firmware as it is not needed until
1480 		 * the next failure
1481 		 */
1482 		release_firmware(sc->dsp_firm);
1483 		sc->dsp_firm = NULL;
1484 	}
1485 
1486 	/* always update it as atm layer could not be init when we switch to
1487 	 * operational state
1488 	 */
1489 	UPDATE_ATM_SIGNAL(ATM_PHY_SIG_FOUND);
1490 
1491 	/* wake up processes waiting for synchronization */
1492 	wake_up(&sc->sync_q);
1493 
1494 	/* TODO improve this state machine :
1495 	 * we need some CMV info : what they do and their unit
1496 	 * we should find the equivalent of eagle3- CMV
1497 	 */
1498 	/* check flags */
1499 	ret = uea_read_cmv_e4(sc, 1, E4_SA_DIAG, 0, 0, &sc->stats.phy.flags);
1500 	if (ret < 0)
1501 		return ret;
1502 	sc->stats.phy.mflags |= sc->stats.phy.flags;
1503 
1504 	/* in case of a flags ( for example delineation LOSS (& 0x10)),
1505 	 * we check the status again in order to detect the failure earlier
1506 	 */
1507 	if (sc->stats.phy.flags) {
1508 		uea_dbg(INS_TO_USBDEV(sc), "Stat flag = 0x%x\n",
1509 		       sc->stats.phy.flags);
1510 		if (sc->stats.phy.flags & 1) /* delineation LOSS */
1511 			return -EAGAIN;
1512 		if (sc->stats.phy.flags & 0x4000) /* Reset Flag */
1513 			return -EAGAIN;
1514 		return 0;
1515 	}
1516 
1517 	/* rate data may be in upper or lower half of 64 bit word, strange */
1518 	ret = uea_read_cmv_e4(sc, 4, E4_SA_RATE, 0, 0, tmp_arr);
1519 	if (ret < 0)
1520 		return ret;
1521 	data = (tmp_arr[0]) ? tmp_arr[0] : tmp_arr[1];
1522 	sc->stats.phy.usrate = data / 1000;
1523 
1524 	ret = uea_read_cmv_e4(sc, 4, E4_SA_RATE, 1, 0, tmp_arr);
1525 	if (ret < 0)
1526 		return ret;
1527 	data = (tmp_arr[0]) ? tmp_arr[0] : tmp_arr[1];
1528 	uea_set_bulk_timeout(sc, data / 1000);
1529 	sc->stats.phy.dsrate = data / 1000;
1530 	UPDATE_ATM_STAT(link_rate, sc->stats.phy.dsrate * 1000 / 424);
1531 
1532 	ret = uea_read_cmv_e4(sc, 1, E4_SA_INFO, 68, 1, &data);
1533 	if (ret < 0)
1534 		return ret;
1535 	sc->stats.phy.dsattenuation = data / 10;
1536 
1537 	ret = uea_read_cmv_e4(sc, 1, E4_SA_INFO, 69, 1, &data);
1538 	if (ret < 0)
1539 		return ret;
1540 	sc->stats.phy.usattenuation = data / 10;
1541 
1542 	ret = uea_read_cmv_e4(sc, 1, E4_SA_INFO, 68, 3, &data);
1543 	if (ret < 0)
1544 		return ret;
1545 	sc->stats.phy.dsmargin = data / 2;
1546 
1547 	ret = uea_read_cmv_e4(sc, 1, E4_SA_INFO, 69, 3, &data);
1548 	if (ret < 0)
1549 		return ret;
1550 	sc->stats.phy.usmargin = data / 10;
1551 
1552 	return 0;
1553 }
1554 
1555 static void cmvs_file_name(struct uea_softc *sc, char *const cmv_name, int ver)
1556 {
1557 	char file_arr[] = "CMVxy.bin";
1558 	char *file;
1559 
1560 	kernel_param_lock(THIS_MODULE);
1561 	/* set proper name corresponding modem version and line type */
1562 	if (cmv_file[sc->modem_index] == NULL) {
1563 		if (UEA_CHIP_VERSION(sc) == ADI930)
1564 			file_arr[3] = '9';
1565 		else if (UEA_CHIP_VERSION(sc) == EAGLE_IV)
1566 			file_arr[3] = '4';
1567 		else
1568 			file_arr[3] = 'e';
1569 
1570 		file_arr[4] = IS_ISDN(sc) ? 'i' : 'p';
1571 		file = file_arr;
1572 	} else
1573 		file = cmv_file[sc->modem_index];
1574 
1575 	strcpy(cmv_name, FW_DIR);
1576 	strlcat(cmv_name, file, UEA_FW_NAME_MAX);
1577 	if (ver == 2)
1578 		strlcat(cmv_name, ".v2", UEA_FW_NAME_MAX);
1579 	kernel_param_unlock(THIS_MODULE);
1580 }
1581 
1582 static int request_cmvs_old(struct uea_softc *sc,
1583 		 void **cmvs, const struct firmware **fw)
1584 {
1585 	int ret, size;
1586 	u8 *data;
1587 	char cmv_name[UEA_FW_NAME_MAX]; /* 30 bytes stack variable */
1588 
1589 	cmvs_file_name(sc, cmv_name, 1);
1590 	ret = request_firmware(fw, cmv_name, &sc->usb_dev->dev);
1591 	if (ret < 0) {
1592 		uea_err(INS_TO_USBDEV(sc),
1593 		       "requesting firmware %s failed with error %d\n",
1594 		       cmv_name, ret);
1595 		return ret;
1596 	}
1597 
1598 	data = (u8 *) (*fw)->data;
1599 	size = (*fw)->size;
1600 	if (size < 1)
1601 		goto err_fw_corrupted;
1602 
1603 	if (size != *data * sizeof(struct uea_cmvs_v1) + 1)
1604 		goto err_fw_corrupted;
1605 
1606 	*cmvs = (void *)(data + 1);
1607 	return *data;
1608 
1609 err_fw_corrupted:
1610 	uea_err(INS_TO_USBDEV(sc), "firmware %s is corrupted\n", cmv_name);
1611 	release_firmware(*fw);
1612 	return -EILSEQ;
1613 }
1614 
1615 static int request_cmvs(struct uea_softc *sc,
1616 		 void **cmvs, const struct firmware **fw, int *ver)
1617 {
1618 	int ret, size;
1619 	u32 crc;
1620 	u8 *data;
1621 	char cmv_name[UEA_FW_NAME_MAX]; /* 30 bytes stack variable */
1622 
1623 	cmvs_file_name(sc, cmv_name, 2);
1624 	ret = request_firmware(fw, cmv_name, &sc->usb_dev->dev);
1625 	if (ret < 0) {
1626 		/* if caller can handle old version, try to provide it */
1627 		if (*ver == 1) {
1628 			uea_warn(INS_TO_USBDEV(sc), "requesting "
1629 							"firmware %s failed, "
1630 				"try to get older cmvs\n", cmv_name);
1631 			return request_cmvs_old(sc, cmvs, fw);
1632 		}
1633 		uea_err(INS_TO_USBDEV(sc),
1634 		       "requesting firmware %s failed with error %d\n",
1635 		       cmv_name, ret);
1636 		return ret;
1637 	}
1638 
1639 	size = (*fw)->size;
1640 	data = (u8 *) (*fw)->data;
1641 	if (size < 4 || strncmp(data, "cmv2", 4) != 0) {
1642 		if (*ver == 1) {
1643 			uea_warn(INS_TO_USBDEV(sc), "firmware %s is corrupted,"
1644 				" try to get older cmvs\n", cmv_name);
1645 			release_firmware(*fw);
1646 			return request_cmvs_old(sc, cmvs, fw);
1647 		}
1648 		goto err_fw_corrupted;
1649 	}
1650 
1651 	*ver = 2;
1652 
1653 	data += 4;
1654 	size -= 4;
1655 	if (size < 5)
1656 		goto err_fw_corrupted;
1657 
1658 	crc = get_unaligned_le32(data);
1659 	data += 4;
1660 	size -= 4;
1661 	if (crc32_be(0, data, size) != crc)
1662 		goto err_fw_corrupted;
1663 
1664 	if (size != *data * sizeof(struct uea_cmvs_v2) + 1)
1665 		goto err_fw_corrupted;
1666 
1667 	*cmvs = (void *) (data + 1);
1668 	return *data;
1669 
1670 err_fw_corrupted:
1671 	uea_err(INS_TO_USBDEV(sc), "firmware %s is corrupted\n", cmv_name);
1672 	release_firmware(*fw);
1673 	return -EILSEQ;
1674 }
1675 
1676 static int uea_send_cmvs_e1(struct uea_softc *sc)
1677 {
1678 	int i, ret, len;
1679 	void *cmvs_ptr;
1680 	const struct firmware *cmvs_fw;
1681 	int ver = 1; /* we can handle v1 cmv firmware version; */
1682 
1683 	/* Enter in R-IDLE (cmv) until instructed otherwise */
1684 	ret = uea_write_cmv_e1(sc, E1_SA_CNTL, 0, 1);
1685 	if (ret < 0)
1686 		return ret;
1687 
1688 	/* Dump firmware version */
1689 	ret = uea_read_cmv_e1(sc, E1_SA_INFO, 10, &sc->stats.phy.firmid);
1690 	if (ret < 0)
1691 		return ret;
1692 	uea_info(INS_TO_USBDEV(sc), "ATU-R firmware version : %x\n",
1693 			sc->stats.phy.firmid);
1694 
1695 	/* get options */
1696 	ret = len = request_cmvs(sc, &cmvs_ptr, &cmvs_fw, &ver);
1697 	if (ret < 0)
1698 		return ret;
1699 
1700 	/* send options */
1701 	if (ver == 1) {
1702 		struct uea_cmvs_v1 *cmvs_v1 = cmvs_ptr;
1703 
1704 		uea_warn(INS_TO_USBDEV(sc), "use deprecated cmvs version, "
1705 			"please update your firmware\n");
1706 
1707 		for (i = 0; i < len; i++) {
1708 			ret = uea_write_cmv_e1(sc,
1709 				get_unaligned_le32(&cmvs_v1[i].address),
1710 				get_unaligned_le16(&cmvs_v1[i].offset),
1711 				get_unaligned_le32(&cmvs_v1[i].data));
1712 			if (ret < 0)
1713 				goto out;
1714 		}
1715 	} else if (ver == 2) {
1716 		struct uea_cmvs_v2 *cmvs_v2 = cmvs_ptr;
1717 
1718 		for (i = 0; i < len; i++) {
1719 			ret = uea_write_cmv_e1(sc,
1720 				get_unaligned_le32(&cmvs_v2[i].address),
1721 				(u16) get_unaligned_le32(&cmvs_v2[i].offset),
1722 				get_unaligned_le32(&cmvs_v2[i].data));
1723 			if (ret < 0)
1724 				goto out;
1725 		}
1726 	} else {
1727 		/* This really should not happen */
1728 		uea_err(INS_TO_USBDEV(sc), "bad cmvs version %d\n", ver);
1729 		goto out;
1730 	}
1731 
1732 	/* Enter in R-ACT-REQ */
1733 	ret = uea_write_cmv_e1(sc, E1_SA_CNTL, 0, 2);
1734 	uea_vdbg(INS_TO_USBDEV(sc), "Entering in R-ACT-REQ state\n");
1735 	uea_info(INS_TO_USBDEV(sc), "modem started, waiting "
1736 						"synchronization...\n");
1737 out:
1738 	release_firmware(cmvs_fw);
1739 	return ret;
1740 }
1741 
1742 static int uea_send_cmvs_e4(struct uea_softc *sc)
1743 {
1744 	int i, ret, len;
1745 	void *cmvs_ptr;
1746 	const struct firmware *cmvs_fw;
1747 	int ver = 2; /* we can only handle v2 cmv firmware version; */
1748 
1749 	/* Enter in R-IDLE (cmv) until instructed otherwise */
1750 	ret = uea_write_cmv_e4(sc, 1, E4_SA_CNTL, 0, 0, 1);
1751 	if (ret < 0)
1752 		return ret;
1753 
1754 	/* Dump firmware version */
1755 	/* XXX don't read the 3th byte as it is always 6 */
1756 	ret = uea_read_cmv_e4(sc, 2, E4_SA_INFO, 55, 0, &sc->stats.phy.firmid);
1757 	if (ret < 0)
1758 		return ret;
1759 	uea_info(INS_TO_USBDEV(sc), "ATU-R firmware version : %x\n",
1760 			sc->stats.phy.firmid);
1761 
1762 
1763 	/* get options */
1764 	ret = len = request_cmvs(sc, &cmvs_ptr, &cmvs_fw, &ver);
1765 	if (ret < 0)
1766 		return ret;
1767 
1768 	/* send options */
1769 	if (ver == 2) {
1770 		struct uea_cmvs_v2 *cmvs_v2 = cmvs_ptr;
1771 
1772 		for (i = 0; i < len; i++) {
1773 			ret = uea_write_cmv_e4(sc, 1,
1774 				get_unaligned_le32(&cmvs_v2[i].group),
1775 				get_unaligned_le32(&cmvs_v2[i].address),
1776 				get_unaligned_le32(&cmvs_v2[i].offset),
1777 				get_unaligned_le32(&cmvs_v2[i].data));
1778 			if (ret < 0)
1779 				goto out;
1780 		}
1781 	} else {
1782 		/* This really should not happen */
1783 		uea_err(INS_TO_USBDEV(sc), "bad cmvs version %d\n", ver);
1784 		goto out;
1785 	}
1786 
1787 	/* Enter in R-ACT-REQ */
1788 	ret = uea_write_cmv_e4(sc, 1, E4_SA_CNTL, 0, 0, 2);
1789 	uea_vdbg(INS_TO_USBDEV(sc), "Entering in R-ACT-REQ state\n");
1790 	uea_info(INS_TO_USBDEV(sc), "modem started, waiting "
1791 						"synchronization...\n");
1792 out:
1793 	release_firmware(cmvs_fw);
1794 	return ret;
1795 }
1796 
1797 /* Start boot post firmware modem:
1798  * - send reset commands through usb control pipe
1799  * - start workqueue for DSP loading
1800  * - send CMV options to modem
1801  */
1802 
1803 static int uea_start_reset(struct uea_softc *sc)
1804 {
1805 	u16 zero = 0;	/* ;-) */
1806 	int ret;
1807 
1808 	uea_enters(INS_TO_USBDEV(sc));
1809 	uea_info(INS_TO_USBDEV(sc), "(re)booting started\n");
1810 
1811 	/* mask interrupt */
1812 	sc->booting = 1;
1813 	/* We need to set this here because, a ack timeout could have occurred,
1814 	 * but before we start the reboot, the ack occurs and set this to 1.
1815 	 * So we will failed to wait Ready CMV.
1816 	 */
1817 	sc->cmv_ack = 0;
1818 	UPDATE_ATM_SIGNAL(ATM_PHY_SIG_LOST);
1819 
1820 	/* reset statistics */
1821 	memset(&sc->stats, 0, sizeof(struct uea_stats));
1822 
1823 	/* tell the modem that we want to boot in IDMA mode */
1824 	uea_request(sc, UEA_SET_MODE, UEA_LOOPBACK_ON, 0, NULL);
1825 	uea_request(sc, UEA_SET_MODE, UEA_BOOT_IDMA, 0, NULL);
1826 
1827 	/* enter reset mode */
1828 	uea_request(sc, UEA_SET_MODE, UEA_START_RESET, 0, NULL);
1829 
1830 	/* original driver use 200ms, but windows driver use 100ms */
1831 	ret = uea_wait(sc, 0, msecs_to_jiffies(100));
1832 	if (ret < 0)
1833 		return ret;
1834 
1835 	/* leave reset mode */
1836 	uea_request(sc, UEA_SET_MODE, UEA_END_RESET, 0, NULL);
1837 
1838 	if (UEA_CHIP_VERSION(sc) != EAGLE_IV) {
1839 		/* clear tx and rx mailboxes */
1840 		uea_request(sc, UEA_SET_2183_DATA, UEA_MPTX_MAILBOX, 2, &zero);
1841 		uea_request(sc, UEA_SET_2183_DATA, UEA_MPRX_MAILBOX, 2, &zero);
1842 		uea_request(sc, UEA_SET_2183_DATA, UEA_SWAP_MAILBOX, 2, &zero);
1843 	}
1844 
1845 	ret = uea_wait(sc, 0, msecs_to_jiffies(1000));
1846 	if (ret < 0)
1847 		return ret;
1848 
1849 	if (UEA_CHIP_VERSION(sc) == EAGLE_IV)
1850 		sc->cmv_dsc.e4.function = E4_MAKEFUNCTION(E4_ADSLDIRECTIVE,
1851 							E4_MODEMREADY, 1);
1852 	else
1853 		sc->cmv_dsc.e1.function = E1_MAKEFUNCTION(E1_ADSLDIRECTIVE,
1854 							E1_MODEMREADY);
1855 
1856 	/* demask interrupt */
1857 	sc->booting = 0;
1858 
1859 	/* start loading DSP */
1860 	sc->pageno = 0;
1861 	sc->ovl = 0;
1862 	schedule_work(&sc->task);
1863 
1864 	/* wait for modem ready CMV */
1865 	ret = wait_cmv_ack(sc);
1866 	if (ret < 0)
1867 		return ret;
1868 
1869 	uea_vdbg(INS_TO_USBDEV(sc), "Ready CMV received\n");
1870 
1871 	ret = sc->send_cmvs(sc);
1872 	if (ret < 0)
1873 		return ret;
1874 
1875 	sc->reset = 0;
1876 	uea_leaves(INS_TO_USBDEV(sc));
1877 	return ret;
1878 }
1879 
1880 /*
1881  * In case of an error wait 1s before rebooting the modem
1882  * if the modem don't request reboot (-EAGAIN).
1883  * Monitor the modem every 1s.
1884  */
1885 
1886 static int uea_kthread(void *data)
1887 {
1888 	struct uea_softc *sc = data;
1889 	int ret = -EAGAIN;
1890 
1891 	set_freezable();
1892 	uea_enters(INS_TO_USBDEV(sc));
1893 	while (!kthread_should_stop()) {
1894 		if (ret < 0 || sc->reset)
1895 			ret = uea_start_reset(sc);
1896 		if (!ret)
1897 			ret = sc->stat(sc);
1898 		if (ret != -EAGAIN)
1899 			uea_wait(sc, 0, msecs_to_jiffies(1000));
1900 	}
1901 	uea_leaves(INS_TO_USBDEV(sc));
1902 	return ret;
1903 }
1904 
1905 /* Load second usb firmware for ADI930 chip */
1906 static int load_XILINX_firmware(struct uea_softc *sc)
1907 {
1908 	const struct firmware *fw_entry;
1909 	int ret, size, u, ln;
1910 	const u8 *pfw;
1911 	u8 value;
1912 	char *fw_name = FPGA930_FIRMWARE;
1913 
1914 	uea_enters(INS_TO_USBDEV(sc));
1915 
1916 	ret = request_firmware(&fw_entry, fw_name, &sc->usb_dev->dev);
1917 	if (ret) {
1918 		uea_err(INS_TO_USBDEV(sc), "firmware %s is not available\n",
1919 		       fw_name);
1920 		goto err0;
1921 	}
1922 
1923 	pfw = fw_entry->data;
1924 	size = fw_entry->size;
1925 	if (size != 0x577B) {
1926 		uea_err(INS_TO_USBDEV(sc), "firmware %s is corrupted\n",
1927 		       fw_name);
1928 		ret = -EILSEQ;
1929 		goto err1;
1930 	}
1931 	for (u = 0; u < size; u += ln) {
1932 		ln = min(size - u, 64);
1933 		ret = uea_request(sc, 0xe, 0, ln, pfw + u);
1934 		if (ret < 0) {
1935 			uea_err(INS_TO_USBDEV(sc),
1936 			       "elsa download data failed (%d)\n", ret);
1937 			goto err1;
1938 		}
1939 	}
1940 
1941 	/* finish to send the fpga */
1942 	ret = uea_request(sc, 0xe, 1, 0, NULL);
1943 	if (ret < 0) {
1944 		uea_err(INS_TO_USBDEV(sc),
1945 				"elsa download data failed (%d)\n", ret);
1946 		goto err1;
1947 	}
1948 
1949 	/* Tell the modem we finish : de-assert reset */
1950 	value = 0;
1951 	ret = uea_send_modem_cmd(sc->usb_dev, 0xe, 1, &value);
1952 	if (ret < 0)
1953 		uea_err(sc->usb_dev, "elsa de-assert failed with error"
1954 								" %d\n", ret);
1955 
1956 err1:
1957 	release_firmware(fw_entry);
1958 err0:
1959 	uea_leaves(INS_TO_USBDEV(sc));
1960 	return ret;
1961 }
1962 
1963 /* The modem send us an ack. First with check if it right */
1964 static void uea_dispatch_cmv_e1(struct uea_softc *sc, struct intr_pkt *intr)
1965 {
1966 	struct cmv_dsc_e1 *dsc = &sc->cmv_dsc.e1;
1967 	struct cmv_e1 *cmv = &intr->u.e1.s2.cmv;
1968 
1969 	uea_enters(INS_TO_USBDEV(sc));
1970 	if (le16_to_cpu(cmv->wPreamble) != E1_PREAMBLE)
1971 		goto bad1;
1972 
1973 	if (cmv->bDirection != E1_MODEMTOHOST)
1974 		goto bad1;
1975 
1976 	/* FIXME : ADI930 reply wrong preamble (func = 2, sub = 2) to
1977 	 * the first MEMACCESS cmv. Ignore it...
1978 	 */
1979 	if (cmv->bFunction != dsc->function) {
1980 		if (UEA_CHIP_VERSION(sc) == ADI930
1981 				&& cmv->bFunction ==  E1_MAKEFUNCTION(2, 2)) {
1982 			cmv->wIndex = cpu_to_le16(dsc->idx);
1983 			put_unaligned_le32(dsc->address,
1984 						&cmv->dwSymbolicAddress);
1985 			cmv->wOffsetAddress = cpu_to_le16(dsc->offset);
1986 		} else
1987 			goto bad2;
1988 	}
1989 
1990 	if (cmv->bFunction == E1_MAKEFUNCTION(E1_ADSLDIRECTIVE,
1991 							E1_MODEMREADY)) {
1992 		wake_up_cmv_ack(sc);
1993 		uea_leaves(INS_TO_USBDEV(sc));
1994 		return;
1995 	}
1996 
1997 	/* in case of MEMACCESS */
1998 	if (le16_to_cpu(cmv->wIndex) != dsc->idx ||
1999 	    get_unaligned_le32(&cmv->dwSymbolicAddress) != dsc->address ||
2000 	    le16_to_cpu(cmv->wOffsetAddress) != dsc->offset)
2001 		goto bad2;
2002 
2003 	sc->data = get_unaligned_le32(&cmv->dwData);
2004 	sc->data = sc->data << 16 | sc->data >> 16;
2005 
2006 	wake_up_cmv_ack(sc);
2007 	uea_leaves(INS_TO_USBDEV(sc));
2008 	return;
2009 
2010 bad2:
2011 	uea_err(INS_TO_USBDEV(sc), "unexpected cmv received, "
2012 			"Function : %d, Subfunction : %d\n",
2013 			E1_FUNCTION_TYPE(cmv->bFunction),
2014 			E1_FUNCTION_SUBTYPE(cmv->bFunction));
2015 	uea_leaves(INS_TO_USBDEV(sc));
2016 	return;
2017 
2018 bad1:
2019 	uea_err(INS_TO_USBDEV(sc), "invalid cmv received, "
2020 			"wPreamble %d, bDirection %d\n",
2021 			le16_to_cpu(cmv->wPreamble), cmv->bDirection);
2022 	uea_leaves(INS_TO_USBDEV(sc));
2023 }
2024 
2025 /* The modem send us an ack. First with check if it right */
2026 static void uea_dispatch_cmv_e4(struct uea_softc *sc, struct intr_pkt *intr)
2027 {
2028 	struct cmv_dsc_e4 *dsc = &sc->cmv_dsc.e4;
2029 	struct cmv_e4 *cmv = &intr->u.e4.s2.cmv;
2030 
2031 	uea_enters(INS_TO_USBDEV(sc));
2032 	uea_dbg(INS_TO_USBDEV(sc), "cmv %x %x %x %x %x %x\n",
2033 		be16_to_cpu(cmv->wGroup), be16_to_cpu(cmv->wFunction),
2034 		be16_to_cpu(cmv->wOffset), be16_to_cpu(cmv->wAddress),
2035 		be32_to_cpu(cmv->dwData[0]), be32_to_cpu(cmv->dwData[1]));
2036 
2037 	if (be16_to_cpu(cmv->wFunction) != dsc->function)
2038 		goto bad2;
2039 
2040 	if (be16_to_cpu(cmv->wFunction) == E4_MAKEFUNCTION(E4_ADSLDIRECTIVE,
2041 						E4_MODEMREADY, 1)) {
2042 		wake_up_cmv_ack(sc);
2043 		uea_leaves(INS_TO_USBDEV(sc));
2044 		return;
2045 	}
2046 
2047 	/* in case of MEMACCESS */
2048 	if (be16_to_cpu(cmv->wOffset) != dsc->offset ||
2049 	    be16_to_cpu(cmv->wGroup) != dsc->group ||
2050 	    be16_to_cpu(cmv->wAddress) != dsc->address)
2051 		goto bad2;
2052 
2053 	sc->data = be32_to_cpu(cmv->dwData[0]);
2054 	sc->data1 = be32_to_cpu(cmv->dwData[1]);
2055 	wake_up_cmv_ack(sc);
2056 	uea_leaves(INS_TO_USBDEV(sc));
2057 	return;
2058 
2059 bad2:
2060 	uea_err(INS_TO_USBDEV(sc), "unexpected cmv received, "
2061 			"Function : %d, Subfunction : %d\n",
2062 			E4_FUNCTION_TYPE(cmv->wFunction),
2063 			E4_FUNCTION_SUBTYPE(cmv->wFunction));
2064 	uea_leaves(INS_TO_USBDEV(sc));
2065 	return;
2066 }
2067 
2068 static void uea_schedule_load_page_e1(struct uea_softc *sc,
2069 						struct intr_pkt *intr)
2070 {
2071 	sc->pageno = intr->e1_bSwapPageNo;
2072 	sc->ovl = intr->e1_bOvl >> 4 | intr->e1_bOvl << 4;
2073 	schedule_work(&sc->task);
2074 }
2075 
2076 static void uea_schedule_load_page_e4(struct uea_softc *sc,
2077 						struct intr_pkt *intr)
2078 {
2079 	sc->pageno = intr->e4_bSwapPageNo;
2080 	schedule_work(&sc->task);
2081 }
2082 
2083 /*
2084  * interrupt handler
2085  */
2086 static void uea_intr(struct urb *urb)
2087 {
2088 	struct uea_softc *sc = urb->context;
2089 	struct intr_pkt *intr = urb->transfer_buffer;
2090 	int status = urb->status;
2091 
2092 	uea_enters(INS_TO_USBDEV(sc));
2093 
2094 	if (unlikely(status < 0)) {
2095 		uea_err(INS_TO_USBDEV(sc), "uea_intr() failed with %d\n",
2096 		       status);
2097 		return;
2098 	}
2099 
2100 	/* device-to-host interrupt */
2101 	if (intr->bType != 0x08 || sc->booting) {
2102 		uea_err(INS_TO_USBDEV(sc), "wrong interrupt\n");
2103 		goto resubmit;
2104 	}
2105 
2106 	switch (le16_to_cpu(intr->wInterrupt)) {
2107 	case INT_LOADSWAPPAGE:
2108 		sc->schedule_load_page(sc, intr);
2109 		break;
2110 
2111 	case INT_INCOMINGCMV:
2112 		sc->dispatch_cmv(sc, intr);
2113 		break;
2114 
2115 	default:
2116 		uea_err(INS_TO_USBDEV(sc), "unknown interrupt %u\n",
2117 		       le16_to_cpu(intr->wInterrupt));
2118 	}
2119 
2120 resubmit:
2121 	usb_submit_urb(sc->urb_int, GFP_ATOMIC);
2122 }
2123 
2124 /*
2125  * Start the modem : init the data and start kernel thread
2126  */
2127 static int uea_boot(struct uea_softc *sc, struct usb_interface *intf)
2128 {
2129 	struct intr_pkt *intr;
2130 	int ret = -ENOMEM;
2131 	int size;
2132 
2133 	uea_enters(INS_TO_USBDEV(sc));
2134 
2135 	if (UEA_CHIP_VERSION(sc) == EAGLE_IV) {
2136 		size = E4_INTR_PKT_SIZE;
2137 		sc->dispatch_cmv = uea_dispatch_cmv_e4;
2138 		sc->schedule_load_page = uea_schedule_load_page_e4;
2139 		sc->stat = uea_stat_e4;
2140 		sc->send_cmvs = uea_send_cmvs_e4;
2141 		INIT_WORK(&sc->task, uea_load_page_e4);
2142 	} else {
2143 		size = E1_INTR_PKT_SIZE;
2144 		sc->dispatch_cmv = uea_dispatch_cmv_e1;
2145 		sc->schedule_load_page = uea_schedule_load_page_e1;
2146 		sc->stat = uea_stat_e1;
2147 		sc->send_cmvs = uea_send_cmvs_e1;
2148 		INIT_WORK(&sc->task, uea_load_page_e1);
2149 	}
2150 
2151 	init_waitqueue_head(&sc->sync_q);
2152 
2153 	if (UEA_CHIP_VERSION(sc) == ADI930)
2154 		load_XILINX_firmware(sc);
2155 
2156 	if (intf->cur_altsetting->desc.bNumEndpoints < 1) {
2157 		ret = -ENODEV;
2158 		goto err0;
2159 	}
2160 
2161 	intr = kmalloc(size, GFP_KERNEL);
2162 	if (!intr)
2163 		goto err0;
2164 
2165 	sc->urb_int = usb_alloc_urb(0, GFP_KERNEL);
2166 	if (!sc->urb_int)
2167 		goto err1;
2168 
2169 	usb_fill_int_urb(sc->urb_int, sc->usb_dev,
2170 			 usb_rcvintpipe(sc->usb_dev, UEA_INTR_PIPE),
2171 			 intr, size, uea_intr, sc,
2172 			 intf->cur_altsetting->endpoint[0].desc.bInterval);
2173 
2174 	ret = usb_submit_urb(sc->urb_int, GFP_KERNEL);
2175 	if (ret < 0) {
2176 		uea_err(INS_TO_USBDEV(sc),
2177 		       "urb submission failed with error %d\n", ret);
2178 		goto err1;
2179 	}
2180 
2181 	/* Create worker thread, but don't start it here.  Start it after
2182 	 * all usbatm generic initialization is done.
2183 	 */
2184 	sc->kthread = kthread_create(uea_kthread, sc, "ueagle-atm");
2185 	if (IS_ERR(sc->kthread)) {
2186 		uea_err(INS_TO_USBDEV(sc), "failed to create thread\n");
2187 		ret = PTR_ERR(sc->kthread);
2188 		goto err2;
2189 	}
2190 
2191 	uea_leaves(INS_TO_USBDEV(sc));
2192 	return 0;
2193 
2194 err2:
2195 	usb_kill_urb(sc->urb_int);
2196 err1:
2197 	usb_free_urb(sc->urb_int);
2198 	sc->urb_int = NULL;
2199 	kfree(intr);
2200 err0:
2201 	uea_leaves(INS_TO_USBDEV(sc));
2202 	return ret;
2203 }
2204 
2205 /*
2206  * Stop the modem : kill kernel thread and free data
2207  */
2208 static void uea_stop(struct uea_softc *sc)
2209 {
2210 	int ret;
2211 	uea_enters(INS_TO_USBDEV(sc));
2212 	ret = kthread_stop(sc->kthread);
2213 	uea_dbg(INS_TO_USBDEV(sc), "kthread finish with status %d\n", ret);
2214 
2215 	uea_request(sc, UEA_SET_MODE, UEA_LOOPBACK_ON, 0, NULL);
2216 
2217 	usb_kill_urb(sc->urb_int);
2218 	kfree(sc->urb_int->transfer_buffer);
2219 	usb_free_urb(sc->urb_int);
2220 
2221 	/* flush the work item, when no one can schedule it */
2222 	flush_work(&sc->task);
2223 
2224 	release_firmware(sc->dsp_firm);
2225 	uea_leaves(INS_TO_USBDEV(sc));
2226 }
2227 
2228 /* syfs interface */
2229 static struct uea_softc *dev_to_uea(struct device *dev)
2230 {
2231 	struct usb_interface *intf;
2232 	struct usbatm_data *usbatm;
2233 
2234 	intf = to_usb_interface(dev);
2235 	if (!intf)
2236 		return NULL;
2237 
2238 	usbatm = usb_get_intfdata(intf);
2239 	if (!usbatm)
2240 		return NULL;
2241 
2242 	return usbatm->driver_data;
2243 }
2244 
2245 static ssize_t stat_status_show(struct device *dev, struct device_attribute *attr,
2246 		char *buf)
2247 {
2248 	int ret = -ENODEV;
2249 	struct uea_softc *sc;
2250 
2251 	mutex_lock(&uea_mutex);
2252 	sc = dev_to_uea(dev);
2253 	if (!sc)
2254 		goto out;
2255 	ret = sysfs_emit(buf, "%08x\n", sc->stats.phy.state);
2256 out:
2257 	mutex_unlock(&uea_mutex);
2258 	return ret;
2259 }
2260 
2261 static ssize_t stat_status_store(struct device *dev, struct device_attribute *attr,
2262 		const char *buf, size_t count)
2263 {
2264 	int ret = -ENODEV;
2265 	struct uea_softc *sc;
2266 
2267 	mutex_lock(&uea_mutex);
2268 	sc = dev_to_uea(dev);
2269 	if (!sc)
2270 		goto out;
2271 	sc->reset = 1;
2272 	ret = count;
2273 out:
2274 	mutex_unlock(&uea_mutex);
2275 	return ret;
2276 }
2277 
2278 static DEVICE_ATTR_RW(stat_status);
2279 
2280 static ssize_t stat_human_status_show(struct device *dev,
2281 			struct device_attribute *attr, char *buf)
2282 {
2283 	int ret = -ENODEV;
2284 	int modem_state;
2285 	struct uea_softc *sc;
2286 
2287 	mutex_lock(&uea_mutex);
2288 	sc = dev_to_uea(dev);
2289 	if (!sc)
2290 		goto out;
2291 
2292 	if (UEA_CHIP_VERSION(sc) == EAGLE_IV) {
2293 		switch (sc->stats.phy.state) {
2294 		case 0x0:	/* not yet synchronized */
2295 		case 0x1:
2296 		case 0x3:
2297 		case 0x4:
2298 			modem_state = 0;
2299 			break;
2300 		case 0x5:	/* initialization */
2301 		case 0x6:
2302 		case 0x9:
2303 		case 0xa:
2304 			modem_state = 1;
2305 			break;
2306 		case 0x7:	/* operational */
2307 			modem_state = 2;
2308 			break;
2309 		case 0x2:	/* fail ... */
2310 			modem_state = 3;
2311 			break;
2312 		default:	/* unknown */
2313 			modem_state = 4;
2314 			break;
2315 		}
2316 	} else
2317 		modem_state = GET_STATUS(sc->stats.phy.state);
2318 
2319 	switch (modem_state) {
2320 	case 0:
2321 		ret = sysfs_emit(buf, "Modem is booting\n");
2322 		break;
2323 	case 1:
2324 		ret = sysfs_emit(buf, "Modem is initializing\n");
2325 		break;
2326 	case 2:
2327 		ret = sysfs_emit(buf, "Modem is operational\n");
2328 		break;
2329 	case 3:
2330 		ret = sysfs_emit(buf, "Modem synchronization failed\n");
2331 		break;
2332 	default:
2333 		ret = sysfs_emit(buf, "Modem state is unknown\n");
2334 		break;
2335 	}
2336 out:
2337 	mutex_unlock(&uea_mutex);
2338 	return ret;
2339 }
2340 
2341 static DEVICE_ATTR_RO(stat_human_status);
2342 
2343 static ssize_t stat_delin_show(struct device *dev, struct device_attribute *attr,
2344 		char *buf)
2345 {
2346 	int ret = -ENODEV;
2347 	struct uea_softc *sc;
2348 	char *delin = "GOOD";
2349 
2350 	mutex_lock(&uea_mutex);
2351 	sc = dev_to_uea(dev);
2352 	if (!sc)
2353 		goto out;
2354 
2355 	if (UEA_CHIP_VERSION(sc) == EAGLE_IV) {
2356 		if (sc->stats.phy.flags & 0x4000)
2357 			delin = "RESET";
2358 		else if (sc->stats.phy.flags & 0x0001)
2359 			delin = "LOSS";
2360 	} else {
2361 		if (sc->stats.phy.flags & 0x0C00)
2362 			delin = "ERROR";
2363 		else if (sc->stats.phy.flags & 0x0030)
2364 			delin = "LOSS";
2365 	}
2366 
2367 	ret = sysfs_emit(buf, "%s\n", delin);
2368 out:
2369 	mutex_unlock(&uea_mutex);
2370 	return ret;
2371 }
2372 
2373 static DEVICE_ATTR_RO(stat_delin);
2374 
2375 #define UEA_ATTR(name, reset)					\
2376 								\
2377 static ssize_t stat_##name##_show(struct device *dev,		\
2378 		struct device_attribute *attr, char *buf)	\
2379 {								\
2380 	int ret = -ENODEV;					\
2381 	struct uea_softc *sc;					\
2382 								\
2383 	mutex_lock(&uea_mutex);					\
2384 	sc = dev_to_uea(dev);					\
2385 	if (!sc)						\
2386 		goto out;					\
2387 	ret = sysfs_emit(buf, "%08x\n", sc->stats.phy.name);	\
2388 	if (reset)						\
2389 		sc->stats.phy.name = 0;				\
2390 out:								\
2391 	mutex_unlock(&uea_mutex);				\
2392 	return ret;						\
2393 }								\
2394 								\
2395 static DEVICE_ATTR_RO(stat_##name)
2396 
2397 UEA_ATTR(mflags, 1);
2398 UEA_ATTR(vidcpe, 0);
2399 UEA_ATTR(usrate, 0);
2400 UEA_ATTR(dsrate, 0);
2401 UEA_ATTR(usattenuation, 0);
2402 UEA_ATTR(dsattenuation, 0);
2403 UEA_ATTR(usmargin, 0);
2404 UEA_ATTR(dsmargin, 0);
2405 UEA_ATTR(txflow, 0);
2406 UEA_ATTR(rxflow, 0);
2407 UEA_ATTR(uscorr, 0);
2408 UEA_ATTR(dscorr, 0);
2409 UEA_ATTR(usunc, 0);
2410 UEA_ATTR(dsunc, 0);
2411 UEA_ATTR(firmid, 0);
2412 
2413 /* Retrieve the device End System Identifier (MAC) */
2414 
2415 static int uea_getesi(struct uea_softc *sc, u_char *esi)
2416 {
2417 	unsigned char mac_str[2 * ETH_ALEN + 1];
2418 	int i;
2419 	if (usb_string
2420 	    (sc->usb_dev, sc->usb_dev->descriptor.iSerialNumber, mac_str,
2421 	     sizeof(mac_str)) != 2 * ETH_ALEN)
2422 		return 1;
2423 
2424 	for (i = 0; i < ETH_ALEN; i++)
2425 		esi[i] = hex_to_bin(mac_str[2 * i]) * 16 +
2426 			 hex_to_bin(mac_str[2 * i + 1]);
2427 
2428 	return 0;
2429 }
2430 
2431 /* ATM stuff */
2432 static int uea_atm_open(struct usbatm_data *usbatm, struct atm_dev *atm_dev)
2433 {
2434 	struct uea_softc *sc = usbatm->driver_data;
2435 
2436 	return uea_getesi(sc, atm_dev->esi);
2437 }
2438 
2439 static int uea_heavy(struct usbatm_data *usbatm, struct usb_interface *intf)
2440 {
2441 	struct uea_softc *sc = usbatm->driver_data;
2442 
2443 	wait_event_interruptible(sc->sync_q, IS_OPERATIONAL(sc));
2444 
2445 	return 0;
2446 
2447 }
2448 
2449 static int claim_interface(struct usb_device *usb_dev,
2450 			   struct usbatm_data *usbatm, int ifnum)
2451 {
2452 	int ret;
2453 	struct usb_interface *intf = usb_ifnum_to_if(usb_dev, ifnum);
2454 
2455 	if (!intf) {
2456 		uea_err(usb_dev, "interface %d not found\n", ifnum);
2457 		return -ENODEV;
2458 	}
2459 
2460 	ret = usb_driver_claim_interface(&uea_driver, intf, usbatm);
2461 	if (ret != 0)
2462 		uea_err(usb_dev, "can't claim interface %d, error %d\n", ifnum,
2463 		       ret);
2464 	return ret;
2465 }
2466 
2467 static struct attribute *uea_attrs[] = {
2468 	&dev_attr_stat_status.attr,
2469 	&dev_attr_stat_mflags.attr,
2470 	&dev_attr_stat_human_status.attr,
2471 	&dev_attr_stat_delin.attr,
2472 	&dev_attr_stat_vidcpe.attr,
2473 	&dev_attr_stat_usrate.attr,
2474 	&dev_attr_stat_dsrate.attr,
2475 	&dev_attr_stat_usattenuation.attr,
2476 	&dev_attr_stat_dsattenuation.attr,
2477 	&dev_attr_stat_usmargin.attr,
2478 	&dev_attr_stat_dsmargin.attr,
2479 	&dev_attr_stat_txflow.attr,
2480 	&dev_attr_stat_rxflow.attr,
2481 	&dev_attr_stat_uscorr.attr,
2482 	&dev_attr_stat_dscorr.attr,
2483 	&dev_attr_stat_usunc.attr,
2484 	&dev_attr_stat_dsunc.attr,
2485 	&dev_attr_stat_firmid.attr,
2486 	NULL,
2487 };
2488 ATTRIBUTE_GROUPS(uea);
2489 
2490 static int uea_bind(struct usbatm_data *usbatm, struct usb_interface *intf,
2491 		   const struct usb_device_id *id)
2492 {
2493 	struct usb_device *usb = interface_to_usbdev(intf);
2494 	struct uea_softc *sc;
2495 	int ret, ifnum = intf->altsetting->desc.bInterfaceNumber;
2496 	unsigned int alt;
2497 
2498 	uea_enters(usb);
2499 
2500 	/* interface 0 is for firmware/monitoring */
2501 	if (ifnum != UEA_INTR_IFACE_NO)
2502 		return -ENODEV;
2503 
2504 	usbatm->flags = (sync_wait[modem_index] ? 0 : UDSL_SKIP_HEAVY_INIT);
2505 
2506 	/* interface 1 is for outbound traffic */
2507 	ret = claim_interface(usb, usbatm, UEA_US_IFACE_NO);
2508 	if (ret < 0)
2509 		return ret;
2510 
2511 	/* ADI930 has only 2 interfaces and inbound traffic is on interface 1 */
2512 	if (UEA_CHIP_VERSION(id) != ADI930) {
2513 		/* interface 2 is for inbound traffic */
2514 		ret = claim_interface(usb, usbatm, UEA_DS_IFACE_NO);
2515 		if (ret < 0)
2516 			return ret;
2517 	}
2518 
2519 	sc = kzalloc_obj(struct uea_softc);
2520 	if (!sc)
2521 		return -ENOMEM;
2522 
2523 	sc->usb_dev = usb;
2524 	usbatm->driver_data = sc;
2525 	sc->usbatm = usbatm;
2526 	sc->modem_index = (modem_index < NB_MODEM) ? modem_index++ : 0;
2527 	sc->driver_info = id->driver_info;
2528 
2529 	/* first try to use module parameter */
2530 	if (annex[sc->modem_index] == 1)
2531 		sc->annex = ANNEXA;
2532 	else if (annex[sc->modem_index] == 2)
2533 		sc->annex = ANNEXB;
2534 	/* try to autodetect annex */
2535 	else if (sc->driver_info & AUTO_ANNEX_A)
2536 		sc->annex = ANNEXA;
2537 	else if (sc->driver_info & AUTO_ANNEX_B)
2538 		sc->annex = ANNEXB;
2539 	else
2540 		sc->annex = (le16_to_cpu
2541 		(sc->usb_dev->descriptor.bcdDevice) & 0x80) ? ANNEXB : ANNEXA;
2542 
2543 	alt = altsetting[sc->modem_index];
2544 	/* ADI930 don't support iso */
2545 	if (UEA_CHIP_VERSION(id) != ADI930 && alt > 0) {
2546 		if (alt <= 8 &&
2547 			usb_set_interface(usb, UEA_DS_IFACE_NO, alt) == 0) {
2548 			uea_dbg(usb, "set alternate %u for 2 interface\n", alt);
2549 			uea_info(usb, "using iso mode\n");
2550 			usbatm->flags |= UDSL_USE_ISOC | UDSL_IGNORE_EILSEQ;
2551 		} else {
2552 			uea_err(usb, "setting alternate %u failed for "
2553 					"2 interface, using bulk mode\n", alt);
2554 		}
2555 	}
2556 
2557 	ret = uea_boot(sc, intf);
2558 	if (ret < 0)
2559 		goto error;
2560 
2561 	return 0;
2562 
2563 error:
2564 	kfree(sc);
2565 	return ret;
2566 }
2567 
2568 static void uea_unbind(struct usbatm_data *usbatm, struct usb_interface *intf)
2569 {
2570 	struct uea_softc *sc = usbatm->driver_data;
2571 
2572 	uea_stop(sc);
2573 	kfree(sc);
2574 }
2575 
2576 static struct usbatm_driver uea_usbatm_driver = {
2577 	.driver_name = "ueagle-atm",
2578 	.bind = uea_bind,
2579 	.atm_start = uea_atm_open,
2580 	.unbind = uea_unbind,
2581 	.heavy_init = uea_heavy,
2582 	.bulk_in = UEA_BULK_DATA_PIPE,
2583 	.bulk_out = UEA_BULK_DATA_PIPE,
2584 	.isoc_in = UEA_ISO_DATA_PIPE,
2585 };
2586 
2587 static int uea_probe(struct usb_interface *intf, const struct usb_device_id *id)
2588 {
2589 	struct usb_device *usb = interface_to_usbdev(intf);
2590 	int ret;
2591 
2592 	uea_enters(usb);
2593 	uea_info(usb, "ADSL device founded vid (%#X) pid (%#X) Rev (%#X): %s\n",
2594 		le16_to_cpu(usb->descriptor.idVendor),
2595 		le16_to_cpu(usb->descriptor.idProduct),
2596 		le16_to_cpu(usb->descriptor.bcdDevice),
2597 		chip_name[UEA_CHIP_VERSION(id)]);
2598 
2599 	usb_reset_device(usb);
2600 
2601 	if (UEA_IS_PREFIRM(id))
2602 		return uea_load_firmware(usb, UEA_CHIP_VERSION(id));
2603 
2604 	ret = usbatm_usb_probe(intf, id, &uea_usbatm_driver);
2605 	if (ret == 0) {
2606 		struct usbatm_data *usbatm = usb_get_intfdata(intf);
2607 		struct uea_softc *sc = usbatm->driver_data;
2608 
2609 		/* Ensure carrier is initialized to off as early as possible */
2610 		UPDATE_ATM_SIGNAL(ATM_PHY_SIG_LOST);
2611 
2612 		/* Only start the worker thread when all init is done */
2613 		wake_up_process(sc->kthread);
2614 	}
2615 
2616 	return ret;
2617 }
2618 
2619 static void uea_disconnect(struct usb_interface *intf)
2620 {
2621 	struct usb_device *usb = interface_to_usbdev(intf);
2622 	int ifnum = intf->altsetting->desc.bInterfaceNumber;
2623 	uea_enters(usb);
2624 
2625 	/* ADI930 has 2 interfaces and eagle 3 interfaces.
2626 	 * Pre-firmware device has one interface
2627 	 */
2628 	if (usb->config->desc.bNumInterfaces != 1 && ifnum == 0) {
2629 		mutex_lock(&uea_mutex);
2630 		usbatm_usb_disconnect(intf);
2631 		mutex_unlock(&uea_mutex);
2632 		uea_info(usb, "ADSL device removed\n");
2633 	}
2634 
2635 	uea_leaves(usb);
2636 }
2637 
2638 /*
2639  * List of supported VID/PID
2640  */
2641 static const struct usb_device_id uea_ids[] = {
2642 	{USB_DEVICE(ANALOG_VID,	ADI930_PID_PREFIRM),
2643 		.driver_info = ADI930 | PREFIRM},
2644 	{USB_DEVICE(ANALOG_VID,	ADI930_PID_PSTFIRM),
2645 		.driver_info = ADI930 | PSTFIRM},
2646 	{USB_DEVICE(ANALOG_VID,	EAGLE_I_PID_PREFIRM),
2647 		.driver_info = EAGLE_I | PREFIRM},
2648 	{USB_DEVICE(ANALOG_VID,	EAGLE_I_PID_PSTFIRM),
2649 		.driver_info = EAGLE_I | PSTFIRM},
2650 	{USB_DEVICE(ANALOG_VID,	EAGLE_II_PID_PREFIRM),
2651 		.driver_info = EAGLE_II | PREFIRM},
2652 	{USB_DEVICE(ANALOG_VID,	EAGLE_II_PID_PSTFIRM),
2653 		.driver_info = EAGLE_II | PSTFIRM},
2654 	{USB_DEVICE(ANALOG_VID,	EAGLE_IIC_PID_PREFIRM),
2655 		.driver_info = EAGLE_II | PREFIRM},
2656 	{USB_DEVICE(ANALOG_VID,	EAGLE_IIC_PID_PSTFIRM),
2657 		.driver_info = EAGLE_II | PSTFIRM},
2658 	{USB_DEVICE(ANALOG_VID,	EAGLE_III_PID_PREFIRM),
2659 		.driver_info = EAGLE_III | PREFIRM},
2660 	{USB_DEVICE(ANALOG_VID,	EAGLE_III_PID_PSTFIRM),
2661 		.driver_info = EAGLE_III | PSTFIRM},
2662 	{USB_DEVICE(ANALOG_VID,	EAGLE_IV_PID_PREFIRM),
2663 		.driver_info = EAGLE_IV | PREFIRM},
2664 	{USB_DEVICE(ANALOG_VID,	EAGLE_IV_PID_PSTFIRM),
2665 		.driver_info = EAGLE_IV | PSTFIRM},
2666 	{USB_DEVICE(DEVOLO_VID,	DEVOLO_EAGLE_I_A_PID_PREFIRM),
2667 		.driver_info = EAGLE_I | PREFIRM},
2668 	{USB_DEVICE(DEVOLO_VID,	DEVOLO_EAGLE_I_A_PID_PSTFIRM),
2669 		.driver_info = EAGLE_I | PSTFIRM | AUTO_ANNEX_A},
2670 	{USB_DEVICE(DEVOLO_VID,	DEVOLO_EAGLE_I_B_PID_PREFIRM),
2671 		.driver_info = EAGLE_I | PREFIRM},
2672 	{USB_DEVICE(DEVOLO_VID,	DEVOLO_EAGLE_I_B_PID_PSTFIRM),
2673 		.driver_info = EAGLE_I | PSTFIRM | AUTO_ANNEX_B},
2674 	{USB_DEVICE(DEVOLO_VID,	DEVOLO_EAGLE_II_A_PID_PREFIRM),
2675 		.driver_info = EAGLE_II | PREFIRM},
2676 	{USB_DEVICE(DEVOLO_VID,	DEVOLO_EAGLE_II_A_PID_PSTFIRM),
2677 		.driver_info = EAGLE_II | PSTFIRM | AUTO_ANNEX_A},
2678 	{USB_DEVICE(DEVOLO_VID,	DEVOLO_EAGLE_II_B_PID_PREFIRM),
2679 		.driver_info = EAGLE_II | PREFIRM},
2680 	{USB_DEVICE(DEVOLO_VID,	DEVOLO_EAGLE_II_B_PID_PSTFIRM),
2681 		.driver_info = EAGLE_II | PSTFIRM | AUTO_ANNEX_B},
2682 	{USB_DEVICE(ELSA_VID,	ELSA_PID_PREFIRM),
2683 		.driver_info = ADI930 | PREFIRM},
2684 	{USB_DEVICE(ELSA_VID,	ELSA_PID_PSTFIRM),
2685 		.driver_info = ADI930 | PSTFIRM},
2686 	{USB_DEVICE(ELSA_VID,	ELSA_PID_A_PREFIRM),
2687 		.driver_info = ADI930 | PREFIRM},
2688 	{USB_DEVICE(ELSA_VID,	ELSA_PID_A_PSTFIRM),
2689 		.driver_info = ADI930 | PSTFIRM | AUTO_ANNEX_A},
2690 	{USB_DEVICE(ELSA_VID,	ELSA_PID_B_PREFIRM),
2691 		.driver_info = ADI930 | PREFIRM},
2692 	{USB_DEVICE(ELSA_VID,	ELSA_PID_B_PSTFIRM),
2693 		.driver_info = ADI930 | PSTFIRM | AUTO_ANNEX_B},
2694 	{USB_DEVICE(USR_VID,	MILLER_A_PID_PREFIRM),
2695 		.driver_info = EAGLE_I | PREFIRM},
2696 	{USB_DEVICE(USR_VID,	MILLER_A_PID_PSTFIRM),
2697 		.driver_info = EAGLE_I | PSTFIRM  | AUTO_ANNEX_A},
2698 	{USB_DEVICE(USR_VID,	MILLER_B_PID_PREFIRM),
2699 		.driver_info = EAGLE_I | PREFIRM},
2700 	{USB_DEVICE(USR_VID,	MILLER_B_PID_PSTFIRM),
2701 		.driver_info = EAGLE_I | PSTFIRM  | AUTO_ANNEX_B},
2702 	{USB_DEVICE(USR_VID,	HEINEKEN_A_PID_PREFIRM),
2703 		.driver_info = EAGLE_I | PREFIRM},
2704 	{USB_DEVICE(USR_VID,	HEINEKEN_A_PID_PSTFIRM),
2705 		.driver_info = EAGLE_I | PSTFIRM | AUTO_ANNEX_A},
2706 	{USB_DEVICE(USR_VID,	HEINEKEN_B_PID_PREFIRM),
2707 		.driver_info = EAGLE_I | PREFIRM},
2708 	{USB_DEVICE(USR_VID,	HEINEKEN_B_PID_PSTFIRM),
2709 		.driver_info = EAGLE_I | PSTFIRM | AUTO_ANNEX_B},
2710 	{}
2711 };
2712 
2713 /*
2714  * USB driver descriptor
2715  */
2716 static struct usb_driver uea_driver = {
2717 	.name = "ueagle-atm",
2718 	.id_table = uea_ids,
2719 	.probe = uea_probe,
2720 	.disconnect = uea_disconnect,
2721 	.dev_groups = uea_groups,
2722 };
2723 
2724 MODULE_DEVICE_TABLE(usb, uea_ids);
2725 
2726 module_usb_driver(uea_driver);
2727 
2728 MODULE_AUTHOR("Damien Bergamini/Matthieu Castet/Stanislaw W. Gruszka");
2729 MODULE_DESCRIPTION("ADI 930/Eagle USB ADSL Modem driver");
2730 MODULE_LICENSE("Dual BSD/GPL");
2731 MODULE_FIRMWARE(EAGLE_FIRMWARE);
2732 MODULE_FIRMWARE(ADI930_FIRMWARE);
2733 MODULE_FIRMWARE(EAGLE_I_FIRMWARE);
2734 MODULE_FIRMWARE(EAGLE_II_FIRMWARE);
2735 MODULE_FIRMWARE(EAGLE_III_FIRMWARE);
2736 MODULE_FIRMWARE(EAGLE_IV_FIRMWARE);
2737 MODULE_FIRMWARE(DSP4I_FIRMWARE);
2738 MODULE_FIRMWARE(DSP4P_FIRMWARE);
2739 MODULE_FIRMWARE(DSP9I_FIRMWARE);
2740 MODULE_FIRMWARE(DSP9P_FIRMWARE);
2741 MODULE_FIRMWARE(DSPEI_FIRMWARE);
2742 MODULE_FIRMWARE(DSPEP_FIRMWARE);
2743 MODULE_FIRMWARE(FPGA930_FIRMWARE);
2744 MODULE_FIRMWARE(CMV4P_FIRMWARE);
2745 MODULE_FIRMWARE(CMV4PV2_FIRMWARE);
2746 MODULE_FIRMWARE(CMV4I_FIRMWARE);
2747 MODULE_FIRMWARE(CMV4IV2_FIRMWARE);
2748 MODULE_FIRMWARE(CMV9P_FIRMWARE);
2749 MODULE_FIRMWARE(CMV9PV2_FIRMWARE);
2750 MODULE_FIRMWARE(CMV9I_FIRMWARE);
2751 MODULE_FIRMWARE(CMV9IV2_FIRMWARE);
2752 MODULE_FIRMWARE(CMVEP_FIRMWARE);
2753 MODULE_FIRMWARE(CMVEPV2_FIRMWARE);
2754 MODULE_FIRMWARE(CMVEI_FIRMWARE);
2755 MODULE_FIRMWARE(CMVEIV2_FIRMWARE);
2756