xref: /linux/drivers/media/usb/uvc/uvc_ctrl.c (revision afeea2758b4f1210361ce2a91d8fa3e7df606ad2)
1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3  *      uvc_ctrl.c  --  USB Video Class driver - Controls
4  *
5  *      Copyright (C) 2005-2010
6  *          Laurent Pinchart (laurent.pinchart@ideasonboard.com)
7  */
8 
9 #include <asm/barrier.h>
10 #include <linux/bitops.h>
11 #include <linux/kernel.h>
12 #include <linux/list.h>
13 #include <linux/module.h>
14 #include <linux/slab.h>
15 #include <linux/uaccess.h>
16 #include <linux/usb.h>
17 #include <linux/usb/uvc.h>
18 #include <linux/videodev2.h>
19 #include <linux/vmalloc.h>
20 #include <linux/wait.h>
21 #include <linux/workqueue.h>
22 #include <linux/atomic.h>
23 #include <media/v4l2-ctrls.h>
24 
25 #include "uvcvideo.h"
26 
27 #define UVC_CTRL_DATA_CURRENT	0
28 #define UVC_CTRL_DATA_BACKUP	1
29 #define UVC_CTRL_DATA_MIN	2
30 #define UVC_CTRL_DATA_MAX	3
31 #define UVC_CTRL_DATA_RES	4
32 #define UVC_CTRL_DATA_DEF	5
33 #define UVC_CTRL_DATA_LAST	6
34 
35 /* ------------------------------------------------------------------------
36  * Controls
37  */
38 
39 static const struct uvc_control_info uvc_ctrls[] = {
40 	{
41 		.entity		= UVC_GUID_UVC_PROCESSING,
42 		.selector	= UVC_PU_BRIGHTNESS_CONTROL,
43 		.index		= 0,
44 		.size		= 2,
45 		.flags		= UVC_CTRL_FLAG_SET_CUR
46 				| UVC_CTRL_FLAG_GET_RANGE
47 				| UVC_CTRL_FLAG_RESTORE,
48 	},
49 	{
50 		.entity		= UVC_GUID_UVC_PROCESSING,
51 		.selector	= UVC_PU_CONTRAST_CONTROL,
52 		.index		= 1,
53 		.size		= 2,
54 		.flags		= UVC_CTRL_FLAG_SET_CUR
55 				| UVC_CTRL_FLAG_GET_RANGE
56 				| UVC_CTRL_FLAG_RESTORE,
57 	},
58 	{
59 		.entity		= UVC_GUID_UVC_PROCESSING,
60 		.selector	= UVC_PU_HUE_CONTROL,
61 		.index		= 2,
62 		.size		= 2,
63 		.flags		= UVC_CTRL_FLAG_SET_CUR
64 				| UVC_CTRL_FLAG_GET_RANGE
65 				| UVC_CTRL_FLAG_RESTORE
66 				| UVC_CTRL_FLAG_AUTO_UPDATE,
67 	},
68 	{
69 		.entity		= UVC_GUID_UVC_PROCESSING,
70 		.selector	= UVC_PU_SATURATION_CONTROL,
71 		.index		= 3,
72 		.size		= 2,
73 		.flags		= UVC_CTRL_FLAG_SET_CUR
74 				| UVC_CTRL_FLAG_GET_RANGE
75 				| UVC_CTRL_FLAG_RESTORE,
76 	},
77 	{
78 		.entity		= UVC_GUID_UVC_PROCESSING,
79 		.selector	= UVC_PU_SHARPNESS_CONTROL,
80 		.index		= 4,
81 		.size		= 2,
82 		.flags		= UVC_CTRL_FLAG_SET_CUR
83 				| UVC_CTRL_FLAG_GET_RANGE
84 				| UVC_CTRL_FLAG_RESTORE,
85 	},
86 	{
87 		.entity		= UVC_GUID_UVC_PROCESSING,
88 		.selector	= UVC_PU_GAMMA_CONTROL,
89 		.index		= 5,
90 		.size		= 2,
91 		.flags		= UVC_CTRL_FLAG_SET_CUR
92 				| UVC_CTRL_FLAG_GET_RANGE
93 				| UVC_CTRL_FLAG_RESTORE,
94 	},
95 	{
96 		.entity		= UVC_GUID_UVC_PROCESSING,
97 		.selector	= UVC_PU_WHITE_BALANCE_TEMPERATURE_CONTROL,
98 		.index		= 6,
99 		.size		= 2,
100 		.flags		= UVC_CTRL_FLAG_SET_CUR
101 				| UVC_CTRL_FLAG_GET_RANGE
102 				| UVC_CTRL_FLAG_RESTORE
103 				| UVC_CTRL_FLAG_AUTO_UPDATE,
104 	},
105 	{
106 		.entity		= UVC_GUID_UVC_PROCESSING,
107 		.selector	= UVC_PU_WHITE_BALANCE_COMPONENT_CONTROL,
108 		.index		= 7,
109 		.size		= 4,
110 		.flags		= UVC_CTRL_FLAG_SET_CUR
111 				| UVC_CTRL_FLAG_GET_RANGE
112 				| UVC_CTRL_FLAG_RESTORE
113 				| UVC_CTRL_FLAG_AUTO_UPDATE,
114 	},
115 	{
116 		.entity		= UVC_GUID_UVC_PROCESSING,
117 		.selector	= UVC_PU_BACKLIGHT_COMPENSATION_CONTROL,
118 		.index		= 8,
119 		.size		= 2,
120 		.flags		= UVC_CTRL_FLAG_SET_CUR
121 				| UVC_CTRL_FLAG_GET_RANGE
122 				| UVC_CTRL_FLAG_RESTORE,
123 	},
124 	{
125 		.entity		= UVC_GUID_UVC_PROCESSING,
126 		.selector	= UVC_PU_GAIN_CONTROL,
127 		.index		= 9,
128 		.size		= 2,
129 		.flags		= UVC_CTRL_FLAG_SET_CUR
130 				| UVC_CTRL_FLAG_GET_RANGE
131 				| UVC_CTRL_FLAG_RESTORE,
132 	},
133 	{
134 		.entity		= UVC_GUID_UVC_PROCESSING,
135 		.selector	= UVC_PU_POWER_LINE_FREQUENCY_CONTROL,
136 		.index		= 10,
137 		.size		= 1,
138 		.flags		= UVC_CTRL_FLAG_SET_CUR | UVC_CTRL_FLAG_GET_CUR
139 				| UVC_CTRL_FLAG_GET_DEF | UVC_CTRL_FLAG_RESTORE,
140 	},
141 	{
142 		.entity		= UVC_GUID_UVC_PROCESSING,
143 		.selector	= UVC_PU_HUE_AUTO_CONTROL,
144 		.index		= 11,
145 		.size		= 1,
146 		.flags		= UVC_CTRL_FLAG_SET_CUR | UVC_CTRL_FLAG_GET_CUR
147 				| UVC_CTRL_FLAG_GET_DEF | UVC_CTRL_FLAG_RESTORE,
148 	},
149 	{
150 		.entity		= UVC_GUID_UVC_PROCESSING,
151 		.selector	= UVC_PU_WHITE_BALANCE_TEMPERATURE_AUTO_CONTROL,
152 		.index		= 12,
153 		.size		= 1,
154 		.flags		= UVC_CTRL_FLAG_SET_CUR | UVC_CTRL_FLAG_GET_CUR
155 				| UVC_CTRL_FLAG_GET_DEF | UVC_CTRL_FLAG_RESTORE,
156 	},
157 	{
158 		.entity		= UVC_GUID_UVC_PROCESSING,
159 		.selector	= UVC_PU_WHITE_BALANCE_COMPONENT_AUTO_CONTROL,
160 		.index		= 13,
161 		.size		= 1,
162 		.flags		= UVC_CTRL_FLAG_SET_CUR | UVC_CTRL_FLAG_GET_CUR
163 				| UVC_CTRL_FLAG_GET_DEF | UVC_CTRL_FLAG_RESTORE,
164 	},
165 	{
166 		.entity		= UVC_GUID_UVC_PROCESSING,
167 		.selector	= UVC_PU_DIGITAL_MULTIPLIER_CONTROL,
168 		.index		= 14,
169 		.size		= 2,
170 		.flags		= UVC_CTRL_FLAG_SET_CUR
171 				| UVC_CTRL_FLAG_GET_RANGE
172 				| UVC_CTRL_FLAG_RESTORE,
173 	},
174 	{
175 		.entity		= UVC_GUID_UVC_PROCESSING,
176 		.selector	= UVC_PU_DIGITAL_MULTIPLIER_LIMIT_CONTROL,
177 		.index		= 15,
178 		.size		= 2,
179 		.flags		= UVC_CTRL_FLAG_SET_CUR
180 				| UVC_CTRL_FLAG_GET_RANGE
181 				| UVC_CTRL_FLAG_RESTORE,
182 	},
183 	{
184 		.entity		= UVC_GUID_UVC_PROCESSING,
185 		.selector	= UVC_PU_ANALOG_VIDEO_STANDARD_CONTROL,
186 		.index		= 16,
187 		.size		= 1,
188 		.flags		= UVC_CTRL_FLAG_GET_CUR,
189 	},
190 	{
191 		.entity		= UVC_GUID_UVC_PROCESSING,
192 		.selector	= UVC_PU_ANALOG_LOCK_STATUS_CONTROL,
193 		.index		= 17,
194 		.size		= 1,
195 		.flags		= UVC_CTRL_FLAG_GET_CUR,
196 	},
197 	{
198 		.entity		= UVC_GUID_UVC_CAMERA,
199 		.selector	= UVC_CT_SCANNING_MODE_CONTROL,
200 		.index		= 0,
201 		.size		= 1,
202 		.flags		= UVC_CTRL_FLAG_SET_CUR | UVC_CTRL_FLAG_GET_CUR
203 				| UVC_CTRL_FLAG_RESTORE,
204 	},
205 	{
206 		.entity		= UVC_GUID_UVC_CAMERA,
207 		.selector	= UVC_CT_AE_MODE_CONTROL,
208 		.index		= 1,
209 		.size		= 1,
210 		.flags		= UVC_CTRL_FLAG_SET_CUR | UVC_CTRL_FLAG_GET_CUR
211 				| UVC_CTRL_FLAG_GET_DEF | UVC_CTRL_FLAG_GET_RES
212 				| UVC_CTRL_FLAG_RESTORE,
213 	},
214 	{
215 		.entity		= UVC_GUID_UVC_CAMERA,
216 		.selector	= UVC_CT_AE_PRIORITY_CONTROL,
217 		.index		= 2,
218 		.size		= 1,
219 		.flags		= UVC_CTRL_FLAG_SET_CUR | UVC_CTRL_FLAG_GET_CUR
220 				| UVC_CTRL_FLAG_RESTORE,
221 	},
222 	{
223 		.entity		= UVC_GUID_UVC_CAMERA,
224 		.selector	= UVC_CT_EXPOSURE_TIME_ABSOLUTE_CONTROL,
225 		.index		= 3,
226 		.size		= 4,
227 		.flags		= UVC_CTRL_FLAG_SET_CUR
228 				| UVC_CTRL_FLAG_GET_RANGE
229 				| UVC_CTRL_FLAG_RESTORE
230 				| UVC_CTRL_FLAG_AUTO_UPDATE,
231 	},
232 	{
233 		.entity		= UVC_GUID_UVC_CAMERA,
234 		.selector	= UVC_CT_EXPOSURE_TIME_RELATIVE_CONTROL,
235 		.index		= 4,
236 		.size		= 1,
237 		.flags		= UVC_CTRL_FLAG_SET_CUR | UVC_CTRL_FLAG_RESTORE,
238 	},
239 	{
240 		.entity		= UVC_GUID_UVC_CAMERA,
241 		.selector	= UVC_CT_FOCUS_ABSOLUTE_CONTROL,
242 		.index		= 5,
243 		.size		= 2,
244 		.flags		= UVC_CTRL_FLAG_SET_CUR
245 				| UVC_CTRL_FLAG_GET_RANGE
246 				| UVC_CTRL_FLAG_RESTORE
247 				| UVC_CTRL_FLAG_AUTO_UPDATE,
248 	},
249 	{
250 		.entity		= UVC_GUID_UVC_CAMERA,
251 		.selector	= UVC_CT_FOCUS_RELATIVE_CONTROL,
252 		.index		= 6,
253 		.size		= 2,
254 		.flags		= UVC_CTRL_FLAG_SET_CUR | UVC_CTRL_FLAG_GET_MIN
255 				| UVC_CTRL_FLAG_GET_MAX | UVC_CTRL_FLAG_GET_RES
256 				| UVC_CTRL_FLAG_GET_DEF
257 				| UVC_CTRL_FLAG_AUTO_UPDATE,
258 	},
259 	{
260 		.entity		= UVC_GUID_UVC_CAMERA,
261 		.selector	= UVC_CT_IRIS_ABSOLUTE_CONTROL,
262 		.index		= 7,
263 		.size		= 2,
264 		.flags		= UVC_CTRL_FLAG_SET_CUR
265 				| UVC_CTRL_FLAG_GET_RANGE
266 				| UVC_CTRL_FLAG_RESTORE
267 				| UVC_CTRL_FLAG_AUTO_UPDATE,
268 	},
269 	{
270 		.entity		= UVC_GUID_UVC_CAMERA,
271 		.selector	= UVC_CT_IRIS_RELATIVE_CONTROL,
272 		.index		= 8,
273 		.size		= 1,
274 		.flags		= UVC_CTRL_FLAG_SET_CUR
275 				| UVC_CTRL_FLAG_AUTO_UPDATE,
276 	},
277 	{
278 		.entity		= UVC_GUID_UVC_CAMERA,
279 		.selector	= UVC_CT_ZOOM_ABSOLUTE_CONTROL,
280 		.index		= 9,
281 		.size		= 2,
282 		.flags		= UVC_CTRL_FLAG_SET_CUR
283 				| UVC_CTRL_FLAG_GET_RANGE
284 				| UVC_CTRL_FLAG_RESTORE
285 				| UVC_CTRL_FLAG_AUTO_UPDATE,
286 	},
287 	{
288 		.entity		= UVC_GUID_UVC_CAMERA,
289 		.selector	= UVC_CT_ZOOM_RELATIVE_CONTROL,
290 		.index		= 10,
291 		.size		= 3,
292 		.flags		= UVC_CTRL_FLAG_SET_CUR | UVC_CTRL_FLAG_GET_MIN
293 				| UVC_CTRL_FLAG_GET_MAX | UVC_CTRL_FLAG_GET_RES
294 				| UVC_CTRL_FLAG_GET_DEF
295 				| UVC_CTRL_FLAG_AUTO_UPDATE,
296 	},
297 	{
298 		.entity		= UVC_GUID_UVC_CAMERA,
299 		.selector	= UVC_CT_PANTILT_ABSOLUTE_CONTROL,
300 		.index		= 11,
301 		.size		= 8,
302 		.flags		= UVC_CTRL_FLAG_SET_CUR
303 				| UVC_CTRL_FLAG_GET_RANGE
304 				| UVC_CTRL_FLAG_RESTORE
305 				| UVC_CTRL_FLAG_AUTO_UPDATE,
306 	},
307 	{
308 		.entity		= UVC_GUID_UVC_CAMERA,
309 		.selector	= UVC_CT_PANTILT_RELATIVE_CONTROL,
310 		.index		= 12,
311 		.size		= 4,
312 		.flags		= UVC_CTRL_FLAG_SET_CUR
313 				| UVC_CTRL_FLAG_GET_RANGE
314 				| UVC_CTRL_FLAG_AUTO_UPDATE,
315 	},
316 	{
317 		.entity		= UVC_GUID_UVC_CAMERA,
318 		.selector	= UVC_CT_ROLL_ABSOLUTE_CONTROL,
319 		.index		= 13,
320 		.size		= 2,
321 		.flags		= UVC_CTRL_FLAG_SET_CUR
322 				| UVC_CTRL_FLAG_GET_RANGE
323 				| UVC_CTRL_FLAG_RESTORE
324 				| UVC_CTRL_FLAG_AUTO_UPDATE,
325 	},
326 	{
327 		.entity		= UVC_GUID_UVC_CAMERA,
328 		.selector	= UVC_CT_ROLL_RELATIVE_CONTROL,
329 		.index		= 14,
330 		.size		= 2,
331 		.flags		= UVC_CTRL_FLAG_SET_CUR | UVC_CTRL_FLAG_GET_MIN
332 				| UVC_CTRL_FLAG_GET_MAX | UVC_CTRL_FLAG_GET_RES
333 				| UVC_CTRL_FLAG_GET_DEF
334 				| UVC_CTRL_FLAG_AUTO_UPDATE,
335 	},
336 	{
337 		.entity		= UVC_GUID_UVC_CAMERA,
338 		.selector	= UVC_CT_FOCUS_AUTO_CONTROL,
339 		.index		= 17,
340 		.size		= 1,
341 		.flags		= UVC_CTRL_FLAG_SET_CUR | UVC_CTRL_FLAG_GET_CUR
342 				| UVC_CTRL_FLAG_GET_DEF | UVC_CTRL_FLAG_RESTORE,
343 	},
344 	{
345 		.entity		= UVC_GUID_UVC_CAMERA,
346 		.selector	= UVC_CT_PRIVACY_CONTROL,
347 		.index		= 18,
348 		.size		= 1,
349 		.flags		= UVC_CTRL_FLAG_SET_CUR | UVC_CTRL_FLAG_GET_CUR
350 				| UVC_CTRL_FLAG_RESTORE
351 				| UVC_CTRL_FLAG_AUTO_UPDATE,
352 	},
353 	{
354 		.entity		= UVC_GUID_EXT_GPIO_CONTROLLER,
355 		.selector	= UVC_CT_PRIVACY_CONTROL,
356 		.index		= 0,
357 		.size		= 1,
358 		.flags		= UVC_CTRL_FLAG_GET_CUR
359 				| UVC_CTRL_FLAG_AUTO_UPDATE,
360 	},
361 };
362 
363 static const u32 uvc_control_classes[] = {
364 	V4L2_CID_CAMERA_CLASS,
365 	V4L2_CID_USER_CLASS,
366 };
367 
368 static const int exposure_auto_mapping[] = { 2, 1, 4, 8 };
369 
370 /*
371  * This function translates the V4L2 menu index @idx, as exposed to userspace as
372  * the V4L2 control value, to the corresponding UVC control value used by the
373  * device. The custom menu_mapping in the control @mapping is used when
374  * available, otherwise the function assumes that the V4L2 and UVC values are
375  * identical.
376  *
377  * For controls of type UVC_CTRL_DATA_TYPE_BITMASK, the UVC control value is
378  * expressed as a bitmask and is thus guaranteed to have a single bit set.
379  *
380  * The function returns -EINVAL if the V4L2 menu index @idx isn't valid for the
381  * control, which includes all controls whose type isn't UVC_CTRL_DATA_TYPE_ENUM
382  * or UVC_CTRL_DATA_TYPE_BITMASK.
383  */
384 static int uvc_mapping_get_menu_value(const struct uvc_control_mapping *mapping,
385 				      u32 idx)
386 {
387 	if (!test_bit(idx, &mapping->menu_mask))
388 		return -EINVAL;
389 
390 	if (mapping->menu_mapping)
391 		return mapping->menu_mapping[idx];
392 
393 	return idx;
394 }
395 
396 static const char *
397 uvc_mapping_get_menu_name(const struct uvc_control_mapping *mapping, u32 idx)
398 {
399 	if (!test_bit(idx, &mapping->menu_mask))
400 		return NULL;
401 
402 	if (mapping->menu_names)
403 		return mapping->menu_names[idx];
404 
405 	return v4l2_ctrl_get_menu(mapping->id)[idx];
406 }
407 
408 static s32 uvc_ctrl_get_zoom(struct uvc_control_mapping *mapping,
409 	u8 query, const u8 *data)
410 {
411 	s8 zoom = (s8)data[0];
412 
413 	switch (query) {
414 	case UVC_GET_CUR:
415 		return (zoom == 0) ? 0 : (zoom > 0 ? data[2] : -data[2]);
416 
417 	case UVC_GET_MIN:
418 	case UVC_GET_MAX:
419 	case UVC_GET_RES:
420 	case UVC_GET_DEF:
421 	default:
422 		return data[2];
423 	}
424 }
425 
426 static void uvc_ctrl_set_zoom(struct uvc_control_mapping *mapping,
427 	s32 value, u8 *data)
428 {
429 	data[0] = value == 0 ? 0 : (value > 0) ? 1 : 0xff;
430 	data[2] = min((int)abs(value), 0xff);
431 }
432 
433 static s32 uvc_ctrl_get_rel_speed(struct uvc_control_mapping *mapping,
434 	u8 query, const u8 *data)
435 {
436 	unsigned int first = mapping->offset / 8;
437 	s8 rel = (s8)data[first];
438 
439 	switch (query) {
440 	case UVC_GET_CUR:
441 		return (rel == 0) ? 0 : (rel > 0 ? data[first+1]
442 						 : -data[first+1]);
443 	case UVC_GET_MIN:
444 		return -data[first+1];
445 	case UVC_GET_MAX:
446 	case UVC_GET_RES:
447 	case UVC_GET_DEF:
448 	default:
449 		return data[first+1];
450 	}
451 }
452 
453 static void uvc_ctrl_set_rel_speed(struct uvc_control_mapping *mapping,
454 	s32 value, u8 *data)
455 {
456 	unsigned int first = mapping->offset / 8;
457 
458 	data[first] = value == 0 ? 0 : (value > 0) ? 1 : 0xff;
459 	data[first+1] = min_t(int, abs(value), 0xff);
460 }
461 
462 static const struct uvc_control_mapping uvc_ctrl_mappings[] = {
463 	{
464 		.id		= V4L2_CID_BRIGHTNESS,
465 		.entity		= UVC_GUID_UVC_PROCESSING,
466 		.selector	= UVC_PU_BRIGHTNESS_CONTROL,
467 		.size		= 16,
468 		.offset		= 0,
469 		.v4l2_type	= V4L2_CTRL_TYPE_INTEGER,
470 		.data_type	= UVC_CTRL_DATA_TYPE_SIGNED,
471 	},
472 	{
473 		.id		= V4L2_CID_CONTRAST,
474 		.entity		= UVC_GUID_UVC_PROCESSING,
475 		.selector	= UVC_PU_CONTRAST_CONTROL,
476 		.size		= 16,
477 		.offset		= 0,
478 		.v4l2_type	= V4L2_CTRL_TYPE_INTEGER,
479 		.data_type	= UVC_CTRL_DATA_TYPE_UNSIGNED,
480 	},
481 	{
482 		.id		= V4L2_CID_HUE,
483 		.entity		= UVC_GUID_UVC_PROCESSING,
484 		.selector	= UVC_PU_HUE_CONTROL,
485 		.size		= 16,
486 		.offset		= 0,
487 		.v4l2_type	= V4L2_CTRL_TYPE_INTEGER,
488 		.data_type	= UVC_CTRL_DATA_TYPE_SIGNED,
489 		.master_id	= V4L2_CID_HUE_AUTO,
490 		.master_manual	= 0,
491 	},
492 	{
493 		.id		= V4L2_CID_SATURATION,
494 		.entity		= UVC_GUID_UVC_PROCESSING,
495 		.selector	= UVC_PU_SATURATION_CONTROL,
496 		.size		= 16,
497 		.offset		= 0,
498 		.v4l2_type	= V4L2_CTRL_TYPE_INTEGER,
499 		.data_type	= UVC_CTRL_DATA_TYPE_UNSIGNED,
500 	},
501 	{
502 		.id		= V4L2_CID_SHARPNESS,
503 		.entity		= UVC_GUID_UVC_PROCESSING,
504 		.selector	= UVC_PU_SHARPNESS_CONTROL,
505 		.size		= 16,
506 		.offset		= 0,
507 		.v4l2_type	= V4L2_CTRL_TYPE_INTEGER,
508 		.data_type	= UVC_CTRL_DATA_TYPE_UNSIGNED,
509 	},
510 	{
511 		.id		= V4L2_CID_GAMMA,
512 		.entity		= UVC_GUID_UVC_PROCESSING,
513 		.selector	= UVC_PU_GAMMA_CONTROL,
514 		.size		= 16,
515 		.offset		= 0,
516 		.v4l2_type	= V4L2_CTRL_TYPE_INTEGER,
517 		.data_type	= UVC_CTRL_DATA_TYPE_UNSIGNED,
518 	},
519 	{
520 		.id		= V4L2_CID_BACKLIGHT_COMPENSATION,
521 		.entity		= UVC_GUID_UVC_PROCESSING,
522 		.selector	= UVC_PU_BACKLIGHT_COMPENSATION_CONTROL,
523 		.size		= 16,
524 		.offset		= 0,
525 		.v4l2_type	= V4L2_CTRL_TYPE_INTEGER,
526 		.data_type	= UVC_CTRL_DATA_TYPE_UNSIGNED,
527 	},
528 	{
529 		.id		= V4L2_CID_GAIN,
530 		.entity		= UVC_GUID_UVC_PROCESSING,
531 		.selector	= UVC_PU_GAIN_CONTROL,
532 		.size		= 16,
533 		.offset		= 0,
534 		.v4l2_type	= V4L2_CTRL_TYPE_INTEGER,
535 		.data_type	= UVC_CTRL_DATA_TYPE_UNSIGNED,
536 	},
537 	{
538 		.id		= V4L2_CID_HUE_AUTO,
539 		.entity		= UVC_GUID_UVC_PROCESSING,
540 		.selector	= UVC_PU_HUE_AUTO_CONTROL,
541 		.size		= 1,
542 		.offset		= 0,
543 		.v4l2_type	= V4L2_CTRL_TYPE_BOOLEAN,
544 		.data_type	= UVC_CTRL_DATA_TYPE_BOOLEAN,
545 		.slave_ids	= { V4L2_CID_HUE, },
546 	},
547 	{
548 		.id		= V4L2_CID_EXPOSURE_AUTO,
549 		.entity		= UVC_GUID_UVC_CAMERA,
550 		.selector	= UVC_CT_AE_MODE_CONTROL,
551 		.size		= 4,
552 		.offset		= 0,
553 		.v4l2_type	= V4L2_CTRL_TYPE_MENU,
554 		.data_type	= UVC_CTRL_DATA_TYPE_BITMASK,
555 		.menu_mapping	= exposure_auto_mapping,
556 		.menu_mask	= GENMASK(V4L2_EXPOSURE_APERTURE_PRIORITY,
557 					  V4L2_EXPOSURE_AUTO),
558 		.slave_ids	= { V4L2_CID_EXPOSURE_ABSOLUTE, },
559 	},
560 	{
561 		.id		= V4L2_CID_EXPOSURE_AUTO_PRIORITY,
562 		.entity		= UVC_GUID_UVC_CAMERA,
563 		.selector	= UVC_CT_AE_PRIORITY_CONTROL,
564 		.size		= 1,
565 		.offset		= 0,
566 		.v4l2_type	= V4L2_CTRL_TYPE_BOOLEAN,
567 		.data_type	= UVC_CTRL_DATA_TYPE_BOOLEAN,
568 	},
569 	{
570 		.id		= V4L2_CID_EXPOSURE_ABSOLUTE,
571 		.entity		= UVC_GUID_UVC_CAMERA,
572 		.selector	= UVC_CT_EXPOSURE_TIME_ABSOLUTE_CONTROL,
573 		.size		= 32,
574 		.offset		= 0,
575 		.v4l2_type	= V4L2_CTRL_TYPE_INTEGER,
576 		.data_type	= UVC_CTRL_DATA_TYPE_UNSIGNED,
577 		.master_id	= V4L2_CID_EXPOSURE_AUTO,
578 		.master_manual	= V4L2_EXPOSURE_MANUAL,
579 	},
580 	{
581 		.id		= V4L2_CID_AUTO_WHITE_BALANCE,
582 		.entity		= UVC_GUID_UVC_PROCESSING,
583 		.selector	= UVC_PU_WHITE_BALANCE_TEMPERATURE_AUTO_CONTROL,
584 		.size		= 1,
585 		.offset		= 0,
586 		.v4l2_type	= V4L2_CTRL_TYPE_BOOLEAN,
587 		.data_type	= UVC_CTRL_DATA_TYPE_BOOLEAN,
588 		.slave_ids	= { V4L2_CID_WHITE_BALANCE_TEMPERATURE, },
589 	},
590 	{
591 		.id		= V4L2_CID_WHITE_BALANCE_TEMPERATURE,
592 		.entity		= UVC_GUID_UVC_PROCESSING,
593 		.selector	= UVC_PU_WHITE_BALANCE_TEMPERATURE_CONTROL,
594 		.size		= 16,
595 		.offset		= 0,
596 		.v4l2_type	= V4L2_CTRL_TYPE_INTEGER,
597 		.data_type	= UVC_CTRL_DATA_TYPE_UNSIGNED,
598 		.master_id	= V4L2_CID_AUTO_WHITE_BALANCE,
599 		.master_manual	= 0,
600 	},
601 	{
602 		.id		= V4L2_CID_AUTO_WHITE_BALANCE,
603 		.entity		= UVC_GUID_UVC_PROCESSING,
604 		.selector	= UVC_PU_WHITE_BALANCE_COMPONENT_AUTO_CONTROL,
605 		.size		= 1,
606 		.offset		= 0,
607 		.v4l2_type	= V4L2_CTRL_TYPE_BOOLEAN,
608 		.data_type	= UVC_CTRL_DATA_TYPE_BOOLEAN,
609 		.slave_ids	= { V4L2_CID_BLUE_BALANCE,
610 				    V4L2_CID_RED_BALANCE },
611 	},
612 	{
613 		.id		= V4L2_CID_BLUE_BALANCE,
614 		.entity		= UVC_GUID_UVC_PROCESSING,
615 		.selector	= UVC_PU_WHITE_BALANCE_COMPONENT_CONTROL,
616 		.size		= 16,
617 		.offset		= 0,
618 		.v4l2_type	= V4L2_CTRL_TYPE_INTEGER,
619 		.data_type	= UVC_CTRL_DATA_TYPE_SIGNED,
620 		.master_id	= V4L2_CID_AUTO_WHITE_BALANCE,
621 		.master_manual	= 0,
622 	},
623 	{
624 		.id		= V4L2_CID_RED_BALANCE,
625 		.entity		= UVC_GUID_UVC_PROCESSING,
626 		.selector	= UVC_PU_WHITE_BALANCE_COMPONENT_CONTROL,
627 		.size		= 16,
628 		.offset		= 16,
629 		.v4l2_type	= V4L2_CTRL_TYPE_INTEGER,
630 		.data_type	= UVC_CTRL_DATA_TYPE_SIGNED,
631 		.master_id	= V4L2_CID_AUTO_WHITE_BALANCE,
632 		.master_manual	= 0,
633 	},
634 	{
635 		.id		= V4L2_CID_FOCUS_ABSOLUTE,
636 		.entity		= UVC_GUID_UVC_CAMERA,
637 		.selector	= UVC_CT_FOCUS_ABSOLUTE_CONTROL,
638 		.size		= 16,
639 		.offset		= 0,
640 		.v4l2_type	= V4L2_CTRL_TYPE_INTEGER,
641 		.data_type	= UVC_CTRL_DATA_TYPE_UNSIGNED,
642 		.master_id	= V4L2_CID_FOCUS_AUTO,
643 		.master_manual	= 0,
644 	},
645 	{
646 		.id		= V4L2_CID_FOCUS_AUTO,
647 		.entity		= UVC_GUID_UVC_CAMERA,
648 		.selector	= UVC_CT_FOCUS_AUTO_CONTROL,
649 		.size		= 1,
650 		.offset		= 0,
651 		.v4l2_type	= V4L2_CTRL_TYPE_BOOLEAN,
652 		.data_type	= UVC_CTRL_DATA_TYPE_BOOLEAN,
653 		.slave_ids	= { V4L2_CID_FOCUS_ABSOLUTE, },
654 	},
655 	{
656 		.id		= V4L2_CID_IRIS_ABSOLUTE,
657 		.entity		= UVC_GUID_UVC_CAMERA,
658 		.selector	= UVC_CT_IRIS_ABSOLUTE_CONTROL,
659 		.size		= 16,
660 		.offset		= 0,
661 		.v4l2_type	= V4L2_CTRL_TYPE_INTEGER,
662 		.data_type	= UVC_CTRL_DATA_TYPE_UNSIGNED,
663 	},
664 	{
665 		.id		= V4L2_CID_IRIS_RELATIVE,
666 		.entity		= UVC_GUID_UVC_CAMERA,
667 		.selector	= UVC_CT_IRIS_RELATIVE_CONTROL,
668 		.size		= 8,
669 		.offset		= 0,
670 		.v4l2_type	= V4L2_CTRL_TYPE_INTEGER,
671 		.data_type	= UVC_CTRL_DATA_TYPE_SIGNED,
672 	},
673 	{
674 		.id		= V4L2_CID_ZOOM_ABSOLUTE,
675 		.entity		= UVC_GUID_UVC_CAMERA,
676 		.selector	= UVC_CT_ZOOM_ABSOLUTE_CONTROL,
677 		.size		= 16,
678 		.offset		= 0,
679 		.v4l2_type	= V4L2_CTRL_TYPE_INTEGER,
680 		.data_type	= UVC_CTRL_DATA_TYPE_UNSIGNED,
681 	},
682 	{
683 		.id		= V4L2_CID_ZOOM_CONTINUOUS,
684 		.entity		= UVC_GUID_UVC_CAMERA,
685 		.selector	= UVC_CT_ZOOM_RELATIVE_CONTROL,
686 		.size		= 0,
687 		.offset		= 0,
688 		.v4l2_type	= V4L2_CTRL_TYPE_INTEGER,
689 		.data_type	= UVC_CTRL_DATA_TYPE_SIGNED,
690 		.get		= uvc_ctrl_get_zoom,
691 		.set		= uvc_ctrl_set_zoom,
692 	},
693 	{
694 		.id		= V4L2_CID_PAN_ABSOLUTE,
695 		.entity		= UVC_GUID_UVC_CAMERA,
696 		.selector	= UVC_CT_PANTILT_ABSOLUTE_CONTROL,
697 		.size		= 32,
698 		.offset		= 0,
699 		.v4l2_type	= V4L2_CTRL_TYPE_INTEGER,
700 		.data_type	= UVC_CTRL_DATA_TYPE_SIGNED,
701 	},
702 	{
703 		.id		= V4L2_CID_TILT_ABSOLUTE,
704 		.entity		= UVC_GUID_UVC_CAMERA,
705 		.selector	= UVC_CT_PANTILT_ABSOLUTE_CONTROL,
706 		.size		= 32,
707 		.offset		= 32,
708 		.v4l2_type	= V4L2_CTRL_TYPE_INTEGER,
709 		.data_type	= UVC_CTRL_DATA_TYPE_SIGNED,
710 	},
711 	{
712 		.id		= V4L2_CID_PAN_SPEED,
713 		.entity		= UVC_GUID_UVC_CAMERA,
714 		.selector	= UVC_CT_PANTILT_RELATIVE_CONTROL,
715 		.size		= 16,
716 		.offset		= 0,
717 		.v4l2_type	= V4L2_CTRL_TYPE_INTEGER,
718 		.data_type	= UVC_CTRL_DATA_TYPE_SIGNED,
719 		.get		= uvc_ctrl_get_rel_speed,
720 		.set		= uvc_ctrl_set_rel_speed,
721 	},
722 	{
723 		.id		= V4L2_CID_TILT_SPEED,
724 		.entity		= UVC_GUID_UVC_CAMERA,
725 		.selector	= UVC_CT_PANTILT_RELATIVE_CONTROL,
726 		.size		= 16,
727 		.offset		= 16,
728 		.v4l2_type	= V4L2_CTRL_TYPE_INTEGER,
729 		.data_type	= UVC_CTRL_DATA_TYPE_SIGNED,
730 		.get		= uvc_ctrl_get_rel_speed,
731 		.set		= uvc_ctrl_set_rel_speed,
732 	},
733 	{
734 		.id		= V4L2_CID_PRIVACY,
735 		.entity		= UVC_GUID_UVC_CAMERA,
736 		.selector	= UVC_CT_PRIVACY_CONTROL,
737 		.size		= 1,
738 		.offset		= 0,
739 		.v4l2_type	= V4L2_CTRL_TYPE_BOOLEAN,
740 		.data_type	= UVC_CTRL_DATA_TYPE_BOOLEAN,
741 	},
742 	{
743 		.id		= V4L2_CID_PRIVACY,
744 		.entity		= UVC_GUID_EXT_GPIO_CONTROLLER,
745 		.selector	= UVC_CT_PRIVACY_CONTROL,
746 		.size		= 1,
747 		.offset		= 0,
748 		.v4l2_type	= V4L2_CTRL_TYPE_BOOLEAN,
749 		.data_type	= UVC_CTRL_DATA_TYPE_BOOLEAN,
750 	},
751 };
752 
753 const struct uvc_control_mapping uvc_ctrl_power_line_mapping_limited = {
754 	.id		= V4L2_CID_POWER_LINE_FREQUENCY,
755 	.entity		= UVC_GUID_UVC_PROCESSING,
756 	.selector	= UVC_PU_POWER_LINE_FREQUENCY_CONTROL,
757 	.size		= 2,
758 	.offset		= 0,
759 	.v4l2_type	= V4L2_CTRL_TYPE_MENU,
760 	.data_type	= UVC_CTRL_DATA_TYPE_ENUM,
761 	.menu_mask	= GENMASK(V4L2_CID_POWER_LINE_FREQUENCY_60HZ,
762 				  V4L2_CID_POWER_LINE_FREQUENCY_50HZ),
763 };
764 
765 const struct uvc_control_mapping uvc_ctrl_power_line_mapping_uvc11 = {
766 	.id		= V4L2_CID_POWER_LINE_FREQUENCY,
767 	.entity		= UVC_GUID_UVC_PROCESSING,
768 	.selector	= UVC_PU_POWER_LINE_FREQUENCY_CONTROL,
769 	.size		= 2,
770 	.offset		= 0,
771 	.v4l2_type	= V4L2_CTRL_TYPE_MENU,
772 	.data_type	= UVC_CTRL_DATA_TYPE_ENUM,
773 	.menu_mask	= GENMASK(V4L2_CID_POWER_LINE_FREQUENCY_60HZ,
774 				  V4L2_CID_POWER_LINE_FREQUENCY_DISABLED),
775 };
776 
777 static const struct uvc_control_mapping *uvc_ctrl_mappings_uvc11[] = {
778 	&uvc_ctrl_power_line_mapping_uvc11,
779 	NULL, /* Sentinel */
780 };
781 
782 static const struct uvc_control_mapping uvc_ctrl_power_line_mapping_uvc15 = {
783 	.id		= V4L2_CID_POWER_LINE_FREQUENCY,
784 	.entity		= UVC_GUID_UVC_PROCESSING,
785 	.selector	= UVC_PU_POWER_LINE_FREQUENCY_CONTROL,
786 	.size		= 2,
787 	.offset		= 0,
788 	.v4l2_type	= V4L2_CTRL_TYPE_MENU,
789 	.data_type	= UVC_CTRL_DATA_TYPE_ENUM,
790 	.menu_mask	= GENMASK(V4L2_CID_POWER_LINE_FREQUENCY_AUTO,
791 				  V4L2_CID_POWER_LINE_FREQUENCY_DISABLED),
792 };
793 
794 static const struct uvc_control_mapping *uvc_ctrl_mappings_uvc15[] = {
795 	&uvc_ctrl_power_line_mapping_uvc15,
796 	NULL, /* Sentinel */
797 };
798 
799 /* ------------------------------------------------------------------------
800  * Utility functions
801  */
802 
803 static inline u8 *uvc_ctrl_data(struct uvc_control *ctrl, int id)
804 {
805 	return ctrl->uvc_data + id * ctrl->info.size;
806 }
807 
808 static inline int uvc_test_bit(const u8 *data, int bit)
809 {
810 	return (data[bit >> 3] >> (bit & 7)) & 1;
811 }
812 
813 static inline void uvc_clear_bit(u8 *data, int bit)
814 {
815 	data[bit >> 3] &= ~(1 << (bit & 7));
816 }
817 
818 /*
819  * Extract the bit string specified by mapping->offset and mapping->size
820  * from the little-endian data stored at 'data' and return the result as
821  * a signed 32bit integer. Sign extension will be performed if the mapping
822  * references a signed data type.
823  */
824 static s32 uvc_get_le_value(struct uvc_control_mapping *mapping,
825 	u8 query, const u8 *data)
826 {
827 	int bits = mapping->size;
828 	int offset = mapping->offset;
829 	s32 value = 0;
830 	u8 mask;
831 
832 	data += offset / 8;
833 	offset &= 7;
834 	mask = ((1LL << bits) - 1) << offset;
835 
836 	while (1) {
837 		u8 byte = *data & mask;
838 		value |= offset > 0 ? (byte >> offset) : (byte << (-offset));
839 		bits -= 8 - max(offset, 0);
840 		if (bits <= 0)
841 			break;
842 
843 		offset -= 8;
844 		mask = (1 << bits) - 1;
845 		data++;
846 	}
847 
848 	/* Sign-extend the value if needed. */
849 	if (mapping->data_type == UVC_CTRL_DATA_TYPE_SIGNED)
850 		value |= -(value & (1 << (mapping->size - 1)));
851 
852 	return value;
853 }
854 
855 /*
856  * Set the bit string specified by mapping->offset and mapping->size
857  * in the little-endian data stored at 'data' to the value 'value'.
858  */
859 static void uvc_set_le_value(struct uvc_control_mapping *mapping,
860 	s32 value, u8 *data)
861 {
862 	int bits = mapping->size;
863 	int offset = mapping->offset;
864 	u8 mask;
865 
866 	/*
867 	 * According to the v4l2 spec, writing any value to a button control
868 	 * should result in the action belonging to the button control being
869 	 * triggered. UVC devices however want to see a 1 written -> override
870 	 * value.
871 	 */
872 	if (mapping->v4l2_type == V4L2_CTRL_TYPE_BUTTON)
873 		value = -1;
874 
875 	data += offset / 8;
876 	offset &= 7;
877 
878 	for (; bits > 0; data++) {
879 		mask = ((1LL << bits) - 1) << offset;
880 		*data = (*data & ~mask) | ((value << offset) & mask);
881 		value >>= offset ? offset : 8;
882 		bits -= 8 - offset;
883 		offset = 0;
884 	}
885 }
886 
887 /* ------------------------------------------------------------------------
888  * Terminal and unit management
889  */
890 
891 static int uvc_entity_match_guid(const struct uvc_entity *entity,
892 				 const u8 guid[16])
893 {
894 	return memcmp(entity->guid, guid, sizeof(entity->guid)) == 0;
895 }
896 
897 /* ------------------------------------------------------------------------
898  * UVC Controls
899  */
900 
901 static void __uvc_find_control(struct uvc_entity *entity, u32 v4l2_id,
902 	struct uvc_control_mapping **mapping, struct uvc_control **control,
903 	int next)
904 {
905 	struct uvc_control *ctrl;
906 	struct uvc_control_mapping *map;
907 	unsigned int i;
908 
909 	if (entity == NULL)
910 		return;
911 
912 	for (i = 0; i < entity->ncontrols; ++i) {
913 		ctrl = &entity->controls[i];
914 		if (!ctrl->initialized)
915 			continue;
916 
917 		list_for_each_entry(map, &ctrl->info.mappings, list) {
918 			if ((map->id == v4l2_id) && !next) {
919 				*control = ctrl;
920 				*mapping = map;
921 				return;
922 			}
923 
924 			if ((*mapping == NULL || (*mapping)->id > map->id) &&
925 			    (map->id > v4l2_id) && next) {
926 				*control = ctrl;
927 				*mapping = map;
928 			}
929 		}
930 	}
931 }
932 
933 static struct uvc_control *uvc_find_control(struct uvc_video_chain *chain,
934 	u32 v4l2_id, struct uvc_control_mapping **mapping)
935 {
936 	struct uvc_control *ctrl = NULL;
937 	struct uvc_entity *entity;
938 	int next = v4l2_id & V4L2_CTRL_FLAG_NEXT_CTRL;
939 
940 	*mapping = NULL;
941 
942 	/* Mask the query flags. */
943 	v4l2_id &= V4L2_CTRL_ID_MASK;
944 
945 	/* Find the control. */
946 	list_for_each_entry(entity, &chain->entities, chain) {
947 		__uvc_find_control(entity, v4l2_id, mapping, &ctrl, next);
948 		if (ctrl && !next)
949 			return ctrl;
950 	}
951 
952 	if (ctrl == NULL && !next)
953 		uvc_dbg(chain->dev, CONTROL, "Control 0x%08x not found\n",
954 			v4l2_id);
955 
956 	return ctrl;
957 }
958 
959 static int uvc_ctrl_populate_cache(struct uvc_video_chain *chain,
960 	struct uvc_control *ctrl)
961 {
962 	int ret;
963 
964 	if (ctrl->info.flags & UVC_CTRL_FLAG_GET_DEF) {
965 		ret = uvc_query_ctrl(chain->dev, UVC_GET_DEF, ctrl->entity->id,
966 				     chain->dev->intfnum, ctrl->info.selector,
967 				     uvc_ctrl_data(ctrl, UVC_CTRL_DATA_DEF),
968 				     ctrl->info.size);
969 		if (ret < 0)
970 			return ret;
971 	}
972 
973 	if (ctrl->info.flags & UVC_CTRL_FLAG_GET_MIN) {
974 		ret = uvc_query_ctrl(chain->dev, UVC_GET_MIN, ctrl->entity->id,
975 				     chain->dev->intfnum, ctrl->info.selector,
976 				     uvc_ctrl_data(ctrl, UVC_CTRL_DATA_MIN),
977 				     ctrl->info.size);
978 		if (ret < 0)
979 			return ret;
980 	}
981 	if (ctrl->info.flags & UVC_CTRL_FLAG_GET_MAX) {
982 		ret = uvc_query_ctrl(chain->dev, UVC_GET_MAX, ctrl->entity->id,
983 				     chain->dev->intfnum, ctrl->info.selector,
984 				     uvc_ctrl_data(ctrl, UVC_CTRL_DATA_MAX),
985 				     ctrl->info.size);
986 		if (ret < 0)
987 			return ret;
988 	}
989 	if (ctrl->info.flags & UVC_CTRL_FLAG_GET_RES) {
990 		ret = uvc_query_ctrl(chain->dev, UVC_GET_RES, ctrl->entity->id,
991 				     chain->dev->intfnum, ctrl->info.selector,
992 				     uvc_ctrl_data(ctrl, UVC_CTRL_DATA_RES),
993 				     ctrl->info.size);
994 		if (ret < 0) {
995 			if (UVC_ENTITY_TYPE(ctrl->entity) !=
996 			    UVC_VC_EXTENSION_UNIT)
997 				return ret;
998 
999 			/*
1000 			 * GET_RES is mandatory for XU controls, but some
1001 			 * cameras still choke on it. Ignore errors and set the
1002 			 * resolution value to zero.
1003 			 */
1004 			uvc_warn_once(chain->dev, UVC_WARN_XU_GET_RES,
1005 				      "UVC non compliance - GET_RES failed on "
1006 				      "an XU control. Enabling workaround.\n");
1007 			memset(uvc_ctrl_data(ctrl, UVC_CTRL_DATA_RES), 0,
1008 			       ctrl->info.size);
1009 		}
1010 	}
1011 
1012 	ctrl->cached = 1;
1013 	return 0;
1014 }
1015 
1016 static s32 __uvc_ctrl_get_value(struct uvc_control_mapping *mapping,
1017 				const u8 *data)
1018 {
1019 	s32 value = mapping->get(mapping, UVC_GET_CUR, data);
1020 
1021 	if (mapping->v4l2_type == V4L2_CTRL_TYPE_MENU) {
1022 		unsigned int i;
1023 
1024 		for (i = 0; BIT(i) <= mapping->menu_mask; ++i) {
1025 			u32 menu_value;
1026 
1027 			if (!test_bit(i, &mapping->menu_mask))
1028 				continue;
1029 
1030 			menu_value = uvc_mapping_get_menu_value(mapping, i);
1031 
1032 			if (menu_value == value) {
1033 				value = i;
1034 				break;
1035 			}
1036 		}
1037 	}
1038 
1039 	return value;
1040 }
1041 
1042 static int __uvc_ctrl_load_cur(struct uvc_video_chain *chain,
1043 			       struct uvc_control *ctrl)
1044 {
1045 	u8 *data;
1046 	int ret;
1047 
1048 	if (ctrl->loaded)
1049 		return 0;
1050 
1051 	data = uvc_ctrl_data(ctrl, UVC_CTRL_DATA_CURRENT);
1052 
1053 	if ((ctrl->info.flags & UVC_CTRL_FLAG_GET_CUR) == 0) {
1054 		memset(data, 0, ctrl->info.size);
1055 		ctrl->loaded = 1;
1056 
1057 		return 0;
1058 	}
1059 
1060 	if (ctrl->entity->get_cur)
1061 		ret = ctrl->entity->get_cur(chain->dev, ctrl->entity,
1062 					    ctrl->info.selector, data,
1063 					    ctrl->info.size);
1064 	else
1065 		ret = uvc_query_ctrl(chain->dev, UVC_GET_CUR,
1066 				     ctrl->entity->id, chain->dev->intfnum,
1067 				     ctrl->info.selector, data,
1068 				     ctrl->info.size);
1069 
1070 	if (ret < 0)
1071 		return ret;
1072 
1073 	ctrl->loaded = 1;
1074 
1075 	return ret;
1076 }
1077 
1078 static int __uvc_ctrl_get(struct uvc_video_chain *chain,
1079 			  struct uvc_control *ctrl,
1080 			  struct uvc_control_mapping *mapping,
1081 			  s32 *value)
1082 {
1083 	int ret;
1084 
1085 	if ((ctrl->info.flags & UVC_CTRL_FLAG_GET_CUR) == 0)
1086 		return -EACCES;
1087 
1088 	ret = __uvc_ctrl_load_cur(chain, ctrl);
1089 	if (ret < 0)
1090 		return ret;
1091 
1092 	*value = __uvc_ctrl_get_value(mapping,
1093 				uvc_ctrl_data(ctrl, UVC_CTRL_DATA_CURRENT));
1094 
1095 	return 0;
1096 }
1097 
1098 static int __uvc_query_v4l2_class(struct uvc_video_chain *chain, u32 req_id,
1099 				  u32 found_id)
1100 {
1101 	bool find_next = req_id & V4L2_CTRL_FLAG_NEXT_CTRL;
1102 	unsigned int i;
1103 
1104 	req_id &= V4L2_CTRL_ID_MASK;
1105 
1106 	for (i = 0; i < ARRAY_SIZE(uvc_control_classes); i++) {
1107 		if (!(chain->ctrl_class_bitmap & BIT(i)))
1108 			continue;
1109 		if (!find_next) {
1110 			if (uvc_control_classes[i] == req_id)
1111 				return i;
1112 			continue;
1113 		}
1114 		if (uvc_control_classes[i] > req_id &&
1115 		    uvc_control_classes[i] < found_id)
1116 			return i;
1117 	}
1118 
1119 	return -ENODEV;
1120 }
1121 
1122 static int uvc_query_v4l2_class(struct uvc_video_chain *chain, u32 req_id,
1123 				u32 found_id, struct v4l2_queryctrl *v4l2_ctrl)
1124 {
1125 	int idx;
1126 
1127 	idx = __uvc_query_v4l2_class(chain, req_id, found_id);
1128 	if (idx < 0)
1129 		return -ENODEV;
1130 
1131 	memset(v4l2_ctrl, 0, sizeof(*v4l2_ctrl));
1132 	v4l2_ctrl->id = uvc_control_classes[idx];
1133 	strscpy(v4l2_ctrl->name, v4l2_ctrl_get_name(v4l2_ctrl->id),
1134 		sizeof(v4l2_ctrl->name));
1135 	v4l2_ctrl->type = V4L2_CTRL_TYPE_CTRL_CLASS;
1136 	v4l2_ctrl->flags = V4L2_CTRL_FLAG_WRITE_ONLY
1137 			 | V4L2_CTRL_FLAG_READ_ONLY;
1138 	return 0;
1139 }
1140 
1141 /*
1142  * Check if control @v4l2_id can be accessed by the given control @ioctl
1143  * (VIDIOC_G_EXT_CTRLS, VIDIOC_TRY_EXT_CTRLS or VIDIOC_S_EXT_CTRLS).
1144  *
1145  * For set operations on slave controls, check if the master's value is set to
1146  * manual, either in the others controls set in the same ioctl call, or from
1147  * the master's current value. This catches VIDIOC_S_EXT_CTRLS calls that set
1148  * both the master and slave control, such as for instance setting
1149  * auto_exposure=1, exposure_time_absolute=251.
1150  */
1151 int uvc_ctrl_is_accessible(struct uvc_video_chain *chain, u32 v4l2_id,
1152 			   const struct v4l2_ext_controls *ctrls,
1153 			   unsigned long ioctl)
1154 {
1155 	struct uvc_control_mapping *master_map = NULL;
1156 	struct uvc_control *master_ctrl = NULL;
1157 	struct uvc_control_mapping *mapping;
1158 	struct uvc_control *ctrl;
1159 	bool read = ioctl == VIDIOC_G_EXT_CTRLS;
1160 	s32 val;
1161 	int ret;
1162 	int i;
1163 
1164 	if (__uvc_query_v4l2_class(chain, v4l2_id, 0) >= 0)
1165 		return -EACCES;
1166 
1167 	ctrl = uvc_find_control(chain, v4l2_id, &mapping);
1168 	if (!ctrl)
1169 		return -EINVAL;
1170 
1171 	if (!(ctrl->info.flags & UVC_CTRL_FLAG_GET_CUR) && read)
1172 		return -EACCES;
1173 
1174 	if (!(ctrl->info.flags & UVC_CTRL_FLAG_SET_CUR) && !read)
1175 		return -EACCES;
1176 
1177 	if (ioctl != VIDIOC_S_EXT_CTRLS || !mapping->master_id)
1178 		return 0;
1179 
1180 	/*
1181 	 * Iterate backwards in cases where the master control is accessed
1182 	 * multiple times in the same ioctl. We want the last value.
1183 	 */
1184 	for (i = ctrls->count - 1; i >= 0; i--) {
1185 		if (ctrls->controls[i].id == mapping->master_id)
1186 			return ctrls->controls[i].value ==
1187 					mapping->master_manual ? 0 : -EACCES;
1188 	}
1189 
1190 	__uvc_find_control(ctrl->entity, mapping->master_id, &master_map,
1191 			   &master_ctrl, 0);
1192 
1193 	if (!master_ctrl || !(master_ctrl->info.flags & UVC_CTRL_FLAG_GET_CUR))
1194 		return 0;
1195 
1196 	ret = __uvc_ctrl_get(chain, master_ctrl, master_map, &val);
1197 	if (ret >= 0 && val != mapping->master_manual)
1198 		return -EACCES;
1199 
1200 	return 0;
1201 }
1202 
1203 static const char *uvc_map_get_name(const struct uvc_control_mapping *map)
1204 {
1205 	const char *name;
1206 
1207 	if (map->name)
1208 		return map->name;
1209 
1210 	name = v4l2_ctrl_get_name(map->id);
1211 	if (name)
1212 		return name;
1213 
1214 	return "Unknown Control";
1215 }
1216 
1217 static u32 uvc_get_ctrl_bitmap(struct uvc_control *ctrl,
1218 			       struct uvc_control_mapping *mapping)
1219 {
1220 	/*
1221 	 * Some controls, like CT_AE_MODE_CONTROL, use GET_RES to represent
1222 	 * the number of bits supported. Those controls do not list GET_MAX
1223 	 * as supported.
1224 	 */
1225 	if (ctrl->info.flags & UVC_CTRL_FLAG_GET_RES)
1226 		return mapping->get(mapping, UVC_GET_RES,
1227 				    uvc_ctrl_data(ctrl, UVC_CTRL_DATA_RES));
1228 
1229 	if (ctrl->info.flags & UVC_CTRL_FLAG_GET_MAX)
1230 		return mapping->get(mapping, UVC_GET_MAX,
1231 				    uvc_ctrl_data(ctrl, UVC_CTRL_DATA_MAX));
1232 
1233 	return ~0;
1234 }
1235 
1236 static int __uvc_query_v4l2_ctrl(struct uvc_video_chain *chain,
1237 	struct uvc_control *ctrl,
1238 	struct uvc_control_mapping *mapping,
1239 	struct v4l2_queryctrl *v4l2_ctrl)
1240 {
1241 	struct uvc_control_mapping *master_map = NULL;
1242 	struct uvc_control *master_ctrl = NULL;
1243 	unsigned int i;
1244 
1245 	memset(v4l2_ctrl, 0, sizeof(*v4l2_ctrl));
1246 	v4l2_ctrl->id = mapping->id;
1247 	v4l2_ctrl->type = mapping->v4l2_type;
1248 	strscpy(v4l2_ctrl->name, uvc_map_get_name(mapping),
1249 		sizeof(v4l2_ctrl->name));
1250 	v4l2_ctrl->flags = 0;
1251 
1252 	if (!(ctrl->info.flags & UVC_CTRL_FLAG_GET_CUR))
1253 		v4l2_ctrl->flags |= V4L2_CTRL_FLAG_WRITE_ONLY;
1254 	if (!(ctrl->info.flags & UVC_CTRL_FLAG_SET_CUR))
1255 		v4l2_ctrl->flags |= V4L2_CTRL_FLAG_READ_ONLY;
1256 
1257 	if (mapping->master_id)
1258 		__uvc_find_control(ctrl->entity, mapping->master_id,
1259 				   &master_map, &master_ctrl, 0);
1260 	if (master_ctrl && (master_ctrl->info.flags & UVC_CTRL_FLAG_GET_CUR)) {
1261 		s32 val;
1262 		int ret = __uvc_ctrl_get(chain, master_ctrl, master_map, &val);
1263 		if (ret < 0)
1264 			return ret;
1265 
1266 		if (val != mapping->master_manual)
1267 				v4l2_ctrl->flags |= V4L2_CTRL_FLAG_INACTIVE;
1268 	}
1269 
1270 	if (!ctrl->cached) {
1271 		int ret = uvc_ctrl_populate_cache(chain, ctrl);
1272 		if (ret < 0)
1273 			return ret;
1274 	}
1275 
1276 	if (ctrl->info.flags & UVC_CTRL_FLAG_GET_DEF) {
1277 		v4l2_ctrl->default_value = mapping->get(mapping, UVC_GET_DEF,
1278 				uvc_ctrl_data(ctrl, UVC_CTRL_DATA_DEF));
1279 	}
1280 
1281 	switch (mapping->v4l2_type) {
1282 	case V4L2_CTRL_TYPE_MENU:
1283 		v4l2_ctrl->minimum = ffs(mapping->menu_mask) - 1;
1284 		v4l2_ctrl->maximum = fls(mapping->menu_mask) - 1;
1285 		v4l2_ctrl->step = 1;
1286 
1287 		for (i = 0; BIT(i) <= mapping->menu_mask; ++i) {
1288 			u32 menu_value;
1289 
1290 			if (!test_bit(i, &mapping->menu_mask))
1291 				continue;
1292 
1293 			menu_value = uvc_mapping_get_menu_value(mapping, i);
1294 
1295 			if (menu_value == v4l2_ctrl->default_value) {
1296 				v4l2_ctrl->default_value = i;
1297 				break;
1298 			}
1299 		}
1300 
1301 		return 0;
1302 
1303 	case V4L2_CTRL_TYPE_BOOLEAN:
1304 		v4l2_ctrl->minimum = 0;
1305 		v4l2_ctrl->maximum = 1;
1306 		v4l2_ctrl->step = 1;
1307 		return 0;
1308 
1309 	case V4L2_CTRL_TYPE_BUTTON:
1310 		v4l2_ctrl->minimum = 0;
1311 		v4l2_ctrl->maximum = 0;
1312 		v4l2_ctrl->step = 0;
1313 		return 0;
1314 
1315 	case V4L2_CTRL_TYPE_BITMASK:
1316 		v4l2_ctrl->minimum = 0;
1317 		v4l2_ctrl->maximum = uvc_get_ctrl_bitmap(ctrl, mapping);
1318 		v4l2_ctrl->step = 0;
1319 		return 0;
1320 
1321 	default:
1322 		break;
1323 	}
1324 
1325 	if (ctrl->info.flags & UVC_CTRL_FLAG_GET_MIN)
1326 		v4l2_ctrl->minimum = mapping->get(mapping, UVC_GET_MIN,
1327 				     uvc_ctrl_data(ctrl, UVC_CTRL_DATA_MIN));
1328 
1329 	if (ctrl->info.flags & UVC_CTRL_FLAG_GET_MAX)
1330 		v4l2_ctrl->maximum = mapping->get(mapping, UVC_GET_MAX,
1331 				     uvc_ctrl_data(ctrl, UVC_CTRL_DATA_MAX));
1332 
1333 	if (ctrl->info.flags & UVC_CTRL_FLAG_GET_RES)
1334 		v4l2_ctrl->step = mapping->get(mapping, UVC_GET_RES,
1335 				  uvc_ctrl_data(ctrl, UVC_CTRL_DATA_RES));
1336 
1337 	return 0;
1338 }
1339 
1340 int uvc_query_v4l2_ctrl(struct uvc_video_chain *chain,
1341 	struct v4l2_queryctrl *v4l2_ctrl)
1342 {
1343 	struct uvc_control *ctrl;
1344 	struct uvc_control_mapping *mapping;
1345 	int ret;
1346 
1347 	ret = mutex_lock_interruptible(&chain->ctrl_mutex);
1348 	if (ret < 0)
1349 		return -ERESTARTSYS;
1350 
1351 	/* Check if the ctrl is a know class */
1352 	if (!(v4l2_ctrl->id & V4L2_CTRL_FLAG_NEXT_CTRL)) {
1353 		ret = uvc_query_v4l2_class(chain, v4l2_ctrl->id, 0, v4l2_ctrl);
1354 		if (!ret)
1355 			goto done;
1356 	}
1357 
1358 	ctrl = uvc_find_control(chain, v4l2_ctrl->id, &mapping);
1359 	if (ctrl == NULL) {
1360 		ret = -EINVAL;
1361 		goto done;
1362 	}
1363 
1364 	/*
1365 	 * If we're enumerating control with V4L2_CTRL_FLAG_NEXT_CTRL, check if
1366 	 * a class should be inserted between the previous control and the one
1367 	 * we have just found.
1368 	 */
1369 	if (v4l2_ctrl->id & V4L2_CTRL_FLAG_NEXT_CTRL) {
1370 		ret = uvc_query_v4l2_class(chain, v4l2_ctrl->id, mapping->id,
1371 					   v4l2_ctrl);
1372 		if (!ret)
1373 			goto done;
1374 	}
1375 
1376 	ret = __uvc_query_v4l2_ctrl(chain, ctrl, mapping, v4l2_ctrl);
1377 done:
1378 	mutex_unlock(&chain->ctrl_mutex);
1379 	return ret;
1380 }
1381 
1382 /*
1383  * Mapping V4L2 controls to UVC controls can be straightforward if done well.
1384  * Most of the UVC controls exist in V4L2, and can be mapped directly. Some
1385  * must be grouped (for instance the Red Balance, Blue Balance and Do White
1386  * Balance V4L2 controls use the White Balance Component UVC control) or
1387  * otherwise translated. The approach we take here is to use a translation
1388  * table for the controls that can be mapped directly, and handle the others
1389  * manually.
1390  */
1391 int uvc_query_v4l2_menu(struct uvc_video_chain *chain,
1392 	struct v4l2_querymenu *query_menu)
1393 {
1394 	struct uvc_control_mapping *mapping;
1395 	struct uvc_control *ctrl;
1396 	u32 index = query_menu->index;
1397 	u32 id = query_menu->id;
1398 	const char *name;
1399 	int ret;
1400 
1401 	memset(query_menu, 0, sizeof(*query_menu));
1402 	query_menu->id = id;
1403 	query_menu->index = index;
1404 
1405 	if (index >= BITS_PER_TYPE(mapping->menu_mask))
1406 		return -EINVAL;
1407 
1408 	ret = mutex_lock_interruptible(&chain->ctrl_mutex);
1409 	if (ret < 0)
1410 		return -ERESTARTSYS;
1411 
1412 	ctrl = uvc_find_control(chain, query_menu->id, &mapping);
1413 	if (ctrl == NULL || mapping->v4l2_type != V4L2_CTRL_TYPE_MENU) {
1414 		ret = -EINVAL;
1415 		goto done;
1416 	}
1417 
1418 	if (!test_bit(query_menu->index, &mapping->menu_mask)) {
1419 		ret = -EINVAL;
1420 		goto done;
1421 	}
1422 
1423 	if (mapping->data_type == UVC_CTRL_DATA_TYPE_BITMASK) {
1424 		int mask;
1425 
1426 		if (!ctrl->cached) {
1427 			ret = uvc_ctrl_populate_cache(chain, ctrl);
1428 			if (ret < 0)
1429 				goto done;
1430 		}
1431 
1432 		mask = uvc_mapping_get_menu_value(mapping, query_menu->index);
1433 		if (mask < 0) {
1434 			ret = mask;
1435 			goto done;
1436 		}
1437 
1438 		if (!(uvc_get_ctrl_bitmap(ctrl, mapping) & mask)) {
1439 			ret = -EINVAL;
1440 			goto done;
1441 		}
1442 	}
1443 
1444 	name = uvc_mapping_get_menu_name(mapping, query_menu->index);
1445 	if (!name) {
1446 		ret = -EINVAL;
1447 		goto done;
1448 	}
1449 
1450 	strscpy(query_menu->name, name, sizeof(query_menu->name));
1451 
1452 done:
1453 	mutex_unlock(&chain->ctrl_mutex);
1454 	return ret;
1455 }
1456 
1457 /* --------------------------------------------------------------------------
1458  * Ctrl event handling
1459  */
1460 
1461 static void uvc_ctrl_fill_event(struct uvc_video_chain *chain,
1462 	struct v4l2_event *ev,
1463 	struct uvc_control *ctrl,
1464 	struct uvc_control_mapping *mapping,
1465 	s32 value, u32 changes)
1466 {
1467 	struct v4l2_queryctrl v4l2_ctrl;
1468 
1469 	__uvc_query_v4l2_ctrl(chain, ctrl, mapping, &v4l2_ctrl);
1470 
1471 	memset(ev, 0, sizeof(*ev));
1472 	ev->type = V4L2_EVENT_CTRL;
1473 	ev->id = v4l2_ctrl.id;
1474 	ev->u.ctrl.value = value;
1475 	ev->u.ctrl.changes = changes;
1476 	ev->u.ctrl.type = v4l2_ctrl.type;
1477 	ev->u.ctrl.flags = v4l2_ctrl.flags;
1478 	ev->u.ctrl.minimum = v4l2_ctrl.minimum;
1479 	ev->u.ctrl.maximum = v4l2_ctrl.maximum;
1480 	ev->u.ctrl.step = v4l2_ctrl.step;
1481 	ev->u.ctrl.default_value = v4l2_ctrl.default_value;
1482 }
1483 
1484 /*
1485  * Send control change events to all subscribers for the @ctrl control. By
1486  * default the subscriber that generated the event, as identified by @handle,
1487  * is not notified unless it has set the V4L2_EVENT_SUB_FL_ALLOW_FEEDBACK flag.
1488  * @handle can be NULL for asynchronous events related to auto-update controls,
1489  * in which case all subscribers are notified.
1490  */
1491 static void uvc_ctrl_send_event(struct uvc_video_chain *chain,
1492 	struct uvc_fh *handle, struct uvc_control *ctrl,
1493 	struct uvc_control_mapping *mapping, s32 value, u32 changes)
1494 {
1495 	struct v4l2_fh *originator = handle ? &handle->vfh : NULL;
1496 	struct v4l2_subscribed_event *sev;
1497 	struct v4l2_event ev;
1498 
1499 	if (list_empty(&mapping->ev_subs))
1500 		return;
1501 
1502 	uvc_ctrl_fill_event(chain, &ev, ctrl, mapping, value, changes);
1503 
1504 	list_for_each_entry(sev, &mapping->ev_subs, node) {
1505 		if (sev->fh != originator ||
1506 		    (sev->flags & V4L2_EVENT_SUB_FL_ALLOW_FEEDBACK) ||
1507 		    (changes & V4L2_EVENT_CTRL_CH_FLAGS))
1508 			v4l2_event_queue_fh(sev->fh, &ev);
1509 	}
1510 }
1511 
1512 /*
1513  * Send control change events for the slave of the @master control identified
1514  * by the V4L2 ID @slave_id. The @handle identifies the event subscriber that
1515  * generated the event and may be NULL for auto-update events.
1516  */
1517 static void uvc_ctrl_send_slave_event(struct uvc_video_chain *chain,
1518 	struct uvc_fh *handle, struct uvc_control *master, u32 slave_id)
1519 {
1520 	struct uvc_control_mapping *mapping = NULL;
1521 	struct uvc_control *ctrl = NULL;
1522 	u32 changes = V4L2_EVENT_CTRL_CH_FLAGS;
1523 	s32 val = 0;
1524 
1525 	__uvc_find_control(master->entity, slave_id, &mapping, &ctrl, 0);
1526 	if (ctrl == NULL)
1527 		return;
1528 
1529 	if (__uvc_ctrl_get(chain, ctrl, mapping, &val) == 0)
1530 		changes |= V4L2_EVENT_CTRL_CH_VALUE;
1531 
1532 	uvc_ctrl_send_event(chain, handle, ctrl, mapping, val, changes);
1533 }
1534 
1535 void uvc_ctrl_status_event(struct uvc_video_chain *chain,
1536 			   struct uvc_control *ctrl, const u8 *data)
1537 {
1538 	struct uvc_control_mapping *mapping;
1539 	struct uvc_fh *handle;
1540 	unsigned int i;
1541 
1542 	mutex_lock(&chain->ctrl_mutex);
1543 
1544 	handle = ctrl->handle;
1545 	ctrl->handle = NULL;
1546 
1547 	list_for_each_entry(mapping, &ctrl->info.mappings, list) {
1548 		s32 value = __uvc_ctrl_get_value(mapping, data);
1549 
1550 		/*
1551 		 * handle may be NULL here if the device sends auto-update
1552 		 * events without a prior related control set from userspace.
1553 		 */
1554 		for (i = 0; i < ARRAY_SIZE(mapping->slave_ids); ++i) {
1555 			if (!mapping->slave_ids[i])
1556 				break;
1557 
1558 			uvc_ctrl_send_slave_event(chain, handle, ctrl,
1559 						  mapping->slave_ids[i]);
1560 		}
1561 
1562 		uvc_ctrl_send_event(chain, handle, ctrl, mapping, value,
1563 				    V4L2_EVENT_CTRL_CH_VALUE);
1564 	}
1565 
1566 	mutex_unlock(&chain->ctrl_mutex);
1567 }
1568 
1569 static void uvc_ctrl_status_event_work(struct work_struct *work)
1570 {
1571 	struct uvc_device *dev = container_of(work, struct uvc_device,
1572 					      async_ctrl.work);
1573 	struct uvc_ctrl_work *w = &dev->async_ctrl;
1574 	int ret;
1575 
1576 	uvc_ctrl_status_event(w->chain, w->ctrl, w->data);
1577 
1578 	/* The barrier is needed to synchronize with uvc_status_stop(). */
1579 	if (smp_load_acquire(&dev->flush_status))
1580 		return;
1581 
1582 	/* Resubmit the URB. */
1583 	w->urb->interval = dev->int_ep->desc.bInterval;
1584 	ret = usb_submit_urb(w->urb, GFP_KERNEL);
1585 	if (ret < 0)
1586 		dev_err(&dev->udev->dev,
1587 			"Failed to resubmit status URB (%d).\n", ret);
1588 }
1589 
1590 bool uvc_ctrl_status_event_async(struct urb *urb, struct uvc_video_chain *chain,
1591 				 struct uvc_control *ctrl, const u8 *data)
1592 {
1593 	struct uvc_device *dev = chain->dev;
1594 	struct uvc_ctrl_work *w = &dev->async_ctrl;
1595 
1596 	if (list_empty(&ctrl->info.mappings)) {
1597 		ctrl->handle = NULL;
1598 		return false;
1599 	}
1600 
1601 	w->data = data;
1602 	w->urb = urb;
1603 	w->chain = chain;
1604 	w->ctrl = ctrl;
1605 
1606 	schedule_work(&w->work);
1607 
1608 	return true;
1609 }
1610 
1611 static bool uvc_ctrl_xctrls_has_control(const struct v4l2_ext_control *xctrls,
1612 					unsigned int xctrls_count, u32 id)
1613 {
1614 	unsigned int i;
1615 
1616 	for (i = 0; i < xctrls_count; ++i) {
1617 		if (xctrls[i].id == id)
1618 			return true;
1619 	}
1620 
1621 	return false;
1622 }
1623 
1624 static void uvc_ctrl_send_events(struct uvc_fh *handle,
1625 	const struct v4l2_ext_control *xctrls, unsigned int xctrls_count)
1626 {
1627 	struct uvc_control_mapping *mapping;
1628 	struct uvc_control *ctrl;
1629 	u32 changes = V4L2_EVENT_CTRL_CH_VALUE;
1630 	unsigned int i;
1631 	unsigned int j;
1632 
1633 	for (i = 0; i < xctrls_count; ++i) {
1634 		ctrl = uvc_find_control(handle->chain, xctrls[i].id, &mapping);
1635 
1636 		if (ctrl->info.flags & UVC_CTRL_FLAG_ASYNCHRONOUS)
1637 			/* Notification will be sent from an Interrupt event. */
1638 			continue;
1639 
1640 		for (j = 0; j < ARRAY_SIZE(mapping->slave_ids); ++j) {
1641 			u32 slave_id = mapping->slave_ids[j];
1642 
1643 			if (!slave_id)
1644 				break;
1645 
1646 			/*
1647 			 * We can skip sending an event for the slave if the
1648 			 * slave is being modified in the same transaction.
1649 			 */
1650 			if (uvc_ctrl_xctrls_has_control(xctrls, xctrls_count,
1651 							slave_id))
1652 				continue;
1653 
1654 			uvc_ctrl_send_slave_event(handle->chain, handle, ctrl,
1655 						  slave_id);
1656 		}
1657 
1658 		/*
1659 		 * If the master is being modified in the same transaction
1660 		 * flags may change too.
1661 		 */
1662 		if (mapping->master_id &&
1663 		    uvc_ctrl_xctrls_has_control(xctrls, xctrls_count,
1664 						mapping->master_id))
1665 			changes |= V4L2_EVENT_CTRL_CH_FLAGS;
1666 
1667 		uvc_ctrl_send_event(handle->chain, handle, ctrl, mapping,
1668 				    xctrls[i].value, changes);
1669 	}
1670 }
1671 
1672 static int uvc_ctrl_add_event(struct v4l2_subscribed_event *sev, unsigned elems)
1673 {
1674 	struct uvc_fh *handle = container_of(sev->fh, struct uvc_fh, vfh);
1675 	struct uvc_control_mapping *mapping;
1676 	struct uvc_control *ctrl;
1677 	int ret;
1678 
1679 	ret = mutex_lock_interruptible(&handle->chain->ctrl_mutex);
1680 	if (ret < 0)
1681 		return -ERESTARTSYS;
1682 
1683 	if (__uvc_query_v4l2_class(handle->chain, sev->id, 0) >= 0) {
1684 		ret = 0;
1685 		goto done;
1686 	}
1687 
1688 	ctrl = uvc_find_control(handle->chain, sev->id, &mapping);
1689 	if (ctrl == NULL) {
1690 		ret = -EINVAL;
1691 		goto done;
1692 	}
1693 
1694 	list_add_tail(&sev->node, &mapping->ev_subs);
1695 	if (sev->flags & V4L2_EVENT_SUB_FL_SEND_INITIAL) {
1696 		struct v4l2_event ev;
1697 		u32 changes = V4L2_EVENT_CTRL_CH_FLAGS;
1698 		s32 val = 0;
1699 
1700 		if (__uvc_ctrl_get(handle->chain, ctrl, mapping, &val) == 0)
1701 			changes |= V4L2_EVENT_CTRL_CH_VALUE;
1702 
1703 		uvc_ctrl_fill_event(handle->chain, &ev, ctrl, mapping, val,
1704 				    changes);
1705 		/*
1706 		 * Mark the queue as active, allowing this initial event to be
1707 		 * accepted.
1708 		 */
1709 		sev->elems = elems;
1710 		v4l2_event_queue_fh(sev->fh, &ev);
1711 	}
1712 
1713 done:
1714 	mutex_unlock(&handle->chain->ctrl_mutex);
1715 	return ret;
1716 }
1717 
1718 static void uvc_ctrl_del_event(struct v4l2_subscribed_event *sev)
1719 {
1720 	struct uvc_fh *handle = container_of(sev->fh, struct uvc_fh, vfh);
1721 
1722 	mutex_lock(&handle->chain->ctrl_mutex);
1723 	if (__uvc_query_v4l2_class(handle->chain, sev->id, 0) >= 0)
1724 		goto done;
1725 	list_del(&sev->node);
1726 done:
1727 	mutex_unlock(&handle->chain->ctrl_mutex);
1728 }
1729 
1730 const struct v4l2_subscribed_event_ops uvc_ctrl_sub_ev_ops = {
1731 	.add = uvc_ctrl_add_event,
1732 	.del = uvc_ctrl_del_event,
1733 	.replace = v4l2_ctrl_replace,
1734 	.merge = v4l2_ctrl_merge,
1735 };
1736 
1737 /* --------------------------------------------------------------------------
1738  * Control transactions
1739  *
1740  * To make extended set operations as atomic as the hardware allows, controls
1741  * are handled using begin/commit/rollback operations.
1742  *
1743  * At the beginning of a set request, uvc_ctrl_begin should be called to
1744  * initialize the request. This function acquires the control lock.
1745  *
1746  * When setting a control, the new value is stored in the control data field
1747  * at position UVC_CTRL_DATA_CURRENT. The control is then marked as dirty for
1748  * later processing. If the UVC and V4L2 control sizes differ, the current
1749  * value is loaded from the hardware before storing the new value in the data
1750  * field.
1751  *
1752  * After processing all controls in the transaction, uvc_ctrl_commit or
1753  * uvc_ctrl_rollback must be called to apply the pending changes to the
1754  * hardware or revert them. When applying changes, all controls marked as
1755  * dirty will be modified in the UVC device, and the dirty flag will be
1756  * cleared. When reverting controls, the control data field
1757  * UVC_CTRL_DATA_CURRENT is reverted to its previous value
1758  * (UVC_CTRL_DATA_BACKUP) for all dirty controls. Both functions release the
1759  * control lock.
1760  */
1761 int uvc_ctrl_begin(struct uvc_video_chain *chain)
1762 {
1763 	return mutex_lock_interruptible(&chain->ctrl_mutex) ? -ERESTARTSYS : 0;
1764 }
1765 
1766 static int uvc_ctrl_commit_entity(struct uvc_device *dev,
1767 	struct uvc_entity *entity, int rollback, struct uvc_control **err_ctrl)
1768 {
1769 	struct uvc_control *ctrl;
1770 	unsigned int i;
1771 	int ret;
1772 
1773 	if (entity == NULL)
1774 		return 0;
1775 
1776 	for (i = 0; i < entity->ncontrols; ++i) {
1777 		ctrl = &entity->controls[i];
1778 		if (!ctrl->initialized)
1779 			continue;
1780 
1781 		/*
1782 		 * Reset the loaded flag for auto-update controls that were
1783 		 * marked as loaded in uvc_ctrl_get/uvc_ctrl_set to prevent
1784 		 * uvc_ctrl_get from using the cached value, and for write-only
1785 		 * controls to prevent uvc_ctrl_set from setting bits not
1786 		 * explicitly set by the user.
1787 		 */
1788 		if (ctrl->info.flags & UVC_CTRL_FLAG_AUTO_UPDATE ||
1789 		    !(ctrl->info.flags & UVC_CTRL_FLAG_GET_CUR))
1790 			ctrl->loaded = 0;
1791 
1792 		if (!ctrl->dirty)
1793 			continue;
1794 
1795 		if (!rollback)
1796 			ret = uvc_query_ctrl(dev, UVC_SET_CUR, ctrl->entity->id,
1797 				dev->intfnum, ctrl->info.selector,
1798 				uvc_ctrl_data(ctrl, UVC_CTRL_DATA_CURRENT),
1799 				ctrl->info.size);
1800 		else
1801 			ret = 0;
1802 
1803 		if (rollback || ret < 0)
1804 			memcpy(uvc_ctrl_data(ctrl, UVC_CTRL_DATA_CURRENT),
1805 			       uvc_ctrl_data(ctrl, UVC_CTRL_DATA_BACKUP),
1806 			       ctrl->info.size);
1807 
1808 		ctrl->dirty = 0;
1809 
1810 		if (ret < 0) {
1811 			if (err_ctrl)
1812 				*err_ctrl = ctrl;
1813 			return ret;
1814 		}
1815 	}
1816 
1817 	return 0;
1818 }
1819 
1820 static int uvc_ctrl_find_ctrl_idx(struct uvc_entity *entity,
1821 				  struct v4l2_ext_controls *ctrls,
1822 				  struct uvc_control *uvc_control)
1823 {
1824 	struct uvc_control_mapping *mapping = NULL;
1825 	struct uvc_control *ctrl_found = NULL;
1826 	unsigned int i;
1827 
1828 	if (!entity)
1829 		return ctrls->count;
1830 
1831 	for (i = 0; i < ctrls->count; i++) {
1832 		__uvc_find_control(entity, ctrls->controls[i].id, &mapping,
1833 				   &ctrl_found, 0);
1834 		if (uvc_control == ctrl_found)
1835 			return i;
1836 	}
1837 
1838 	return ctrls->count;
1839 }
1840 
1841 int __uvc_ctrl_commit(struct uvc_fh *handle, int rollback,
1842 		      struct v4l2_ext_controls *ctrls)
1843 {
1844 	struct uvc_video_chain *chain = handle->chain;
1845 	struct uvc_control *err_ctrl;
1846 	struct uvc_entity *entity;
1847 	int ret = 0;
1848 
1849 	/* Find the control. */
1850 	list_for_each_entry(entity, &chain->entities, chain) {
1851 		ret = uvc_ctrl_commit_entity(chain->dev, entity, rollback,
1852 					     &err_ctrl);
1853 		if (ret < 0) {
1854 			if (ctrls)
1855 				ctrls->error_idx =
1856 					uvc_ctrl_find_ctrl_idx(entity, ctrls,
1857 							       err_ctrl);
1858 			goto done;
1859 		}
1860 	}
1861 
1862 	if (!rollback)
1863 		uvc_ctrl_send_events(handle, ctrls->controls, ctrls->count);
1864 done:
1865 	mutex_unlock(&chain->ctrl_mutex);
1866 	return ret;
1867 }
1868 
1869 int uvc_ctrl_get(struct uvc_video_chain *chain,
1870 	struct v4l2_ext_control *xctrl)
1871 {
1872 	struct uvc_control *ctrl;
1873 	struct uvc_control_mapping *mapping;
1874 
1875 	if (__uvc_query_v4l2_class(chain, xctrl->id, 0) >= 0)
1876 		return -EACCES;
1877 
1878 	ctrl = uvc_find_control(chain, xctrl->id, &mapping);
1879 	if (ctrl == NULL)
1880 		return -EINVAL;
1881 
1882 	return __uvc_ctrl_get(chain, ctrl, mapping, &xctrl->value);
1883 }
1884 
1885 int uvc_ctrl_set(struct uvc_fh *handle,
1886 	struct v4l2_ext_control *xctrl)
1887 {
1888 	struct uvc_video_chain *chain = handle->chain;
1889 	struct uvc_control *ctrl;
1890 	struct uvc_control_mapping *mapping;
1891 	s32 value;
1892 	u32 step;
1893 	s32 min;
1894 	s32 max;
1895 	int ret;
1896 
1897 	if (__uvc_query_v4l2_class(chain, xctrl->id, 0) >= 0)
1898 		return -EACCES;
1899 
1900 	ctrl = uvc_find_control(chain, xctrl->id, &mapping);
1901 	if (ctrl == NULL)
1902 		return -EINVAL;
1903 	if (!(ctrl->info.flags & UVC_CTRL_FLAG_SET_CUR))
1904 		return -EACCES;
1905 
1906 	/* Clamp out of range values. */
1907 	switch (mapping->v4l2_type) {
1908 	case V4L2_CTRL_TYPE_INTEGER:
1909 		if (!ctrl->cached) {
1910 			ret = uvc_ctrl_populate_cache(chain, ctrl);
1911 			if (ret < 0)
1912 				return ret;
1913 		}
1914 
1915 		min = mapping->get(mapping, UVC_GET_MIN,
1916 				   uvc_ctrl_data(ctrl, UVC_CTRL_DATA_MIN));
1917 		max = mapping->get(mapping, UVC_GET_MAX,
1918 				   uvc_ctrl_data(ctrl, UVC_CTRL_DATA_MAX));
1919 		step = mapping->get(mapping, UVC_GET_RES,
1920 				    uvc_ctrl_data(ctrl, UVC_CTRL_DATA_RES));
1921 		if (step == 0)
1922 			step = 1;
1923 
1924 		xctrl->value = min + DIV_ROUND_CLOSEST((u32)(xctrl->value - min),
1925 							step) * step;
1926 		if (mapping->data_type == UVC_CTRL_DATA_TYPE_SIGNED)
1927 			xctrl->value = clamp(xctrl->value, min, max);
1928 		else
1929 			xctrl->value = clamp_t(u32, xctrl->value, min, max);
1930 		value = xctrl->value;
1931 		break;
1932 
1933 	case V4L2_CTRL_TYPE_BITMASK:
1934 		if (!ctrl->cached) {
1935 			ret = uvc_ctrl_populate_cache(chain, ctrl);
1936 			if (ret < 0)
1937 				return ret;
1938 		}
1939 
1940 		xctrl->value &= uvc_get_ctrl_bitmap(ctrl, mapping);
1941 		value = xctrl->value;
1942 		break;
1943 
1944 	case V4L2_CTRL_TYPE_BOOLEAN:
1945 		xctrl->value = clamp(xctrl->value, 0, 1);
1946 		value = xctrl->value;
1947 		break;
1948 
1949 	case V4L2_CTRL_TYPE_MENU:
1950 		if (xctrl->value < (ffs(mapping->menu_mask) - 1) ||
1951 		    xctrl->value > (fls(mapping->menu_mask) - 1))
1952 			return -ERANGE;
1953 
1954 		if (!test_bit(xctrl->value, &mapping->menu_mask))
1955 			return -EINVAL;
1956 
1957 		value = uvc_mapping_get_menu_value(mapping, xctrl->value);
1958 
1959 		/*
1960 		 * Valid menu indices are reported by the GET_RES request for
1961 		 * UVC controls that support it.
1962 		 */
1963 		if (mapping->data_type == UVC_CTRL_DATA_TYPE_BITMASK) {
1964 			if (!ctrl->cached) {
1965 				ret = uvc_ctrl_populate_cache(chain, ctrl);
1966 				if (ret < 0)
1967 					return ret;
1968 			}
1969 
1970 			if (!(uvc_get_ctrl_bitmap(ctrl, mapping) & value))
1971 				return -EINVAL;
1972 		}
1973 
1974 		break;
1975 
1976 	default:
1977 		value = xctrl->value;
1978 		break;
1979 	}
1980 
1981 	/*
1982 	 * If the mapping doesn't span the whole UVC control, the current value
1983 	 * needs to be loaded from the device to perform the read-modify-write
1984 	 * operation.
1985 	 */
1986 	if ((ctrl->info.size * 8) != mapping->size) {
1987 		ret = __uvc_ctrl_load_cur(chain, ctrl);
1988 		if (ret < 0)
1989 			return ret;
1990 	}
1991 
1992 	/* Backup the current value in case we need to rollback later. */
1993 	if (!ctrl->dirty) {
1994 		memcpy(uvc_ctrl_data(ctrl, UVC_CTRL_DATA_BACKUP),
1995 		       uvc_ctrl_data(ctrl, UVC_CTRL_DATA_CURRENT),
1996 		       ctrl->info.size);
1997 	}
1998 
1999 	mapping->set(mapping, value,
2000 		uvc_ctrl_data(ctrl, UVC_CTRL_DATA_CURRENT));
2001 
2002 	if (ctrl->info.flags & UVC_CTRL_FLAG_ASYNCHRONOUS)
2003 		ctrl->handle = handle;
2004 
2005 	ctrl->dirty = 1;
2006 	ctrl->modified = 1;
2007 	return 0;
2008 }
2009 
2010 /* --------------------------------------------------------------------------
2011  * Dynamic controls
2012  */
2013 
2014 /*
2015  * Retrieve flags for a given control
2016  */
2017 static int uvc_ctrl_get_flags(struct uvc_device *dev,
2018 			      const struct uvc_control *ctrl,
2019 			      struct uvc_control_info *info)
2020 {
2021 	u8 *data;
2022 	int ret;
2023 
2024 	data = kmalloc(1, GFP_KERNEL);
2025 	if (data == NULL)
2026 		return -ENOMEM;
2027 
2028 	if (ctrl->entity->get_info)
2029 		ret = ctrl->entity->get_info(dev, ctrl->entity,
2030 					     ctrl->info.selector, data);
2031 	else
2032 		ret = uvc_query_ctrl(dev, UVC_GET_INFO, ctrl->entity->id,
2033 				     dev->intfnum, info->selector, data, 1);
2034 	if (!ret)
2035 		info->flags |= (data[0] & UVC_CONTROL_CAP_GET ?
2036 				UVC_CTRL_FLAG_GET_CUR : 0)
2037 			    |  (data[0] & UVC_CONTROL_CAP_SET ?
2038 				UVC_CTRL_FLAG_SET_CUR : 0)
2039 			    |  (data[0] & UVC_CONTROL_CAP_AUTOUPDATE ?
2040 				UVC_CTRL_FLAG_AUTO_UPDATE : 0)
2041 			    |  (data[0] & UVC_CONTROL_CAP_ASYNCHRONOUS ?
2042 				UVC_CTRL_FLAG_ASYNCHRONOUS : 0);
2043 
2044 	kfree(data);
2045 	return ret;
2046 }
2047 
2048 static void uvc_ctrl_fixup_xu_info(struct uvc_device *dev,
2049 	const struct uvc_control *ctrl, struct uvc_control_info *info)
2050 {
2051 	struct uvc_ctrl_fixup {
2052 		struct usb_device_id id;
2053 		u8 entity;
2054 		u8 selector;
2055 		u8 flags;
2056 	};
2057 
2058 	static const struct uvc_ctrl_fixup fixups[] = {
2059 		{ { USB_DEVICE(0x046d, 0x08c2) }, 9, 1,
2060 			UVC_CTRL_FLAG_GET_MIN | UVC_CTRL_FLAG_GET_MAX |
2061 			UVC_CTRL_FLAG_GET_DEF | UVC_CTRL_FLAG_SET_CUR |
2062 			UVC_CTRL_FLAG_AUTO_UPDATE },
2063 		{ { USB_DEVICE(0x046d, 0x08cc) }, 9, 1,
2064 			UVC_CTRL_FLAG_GET_MIN | UVC_CTRL_FLAG_GET_MAX |
2065 			UVC_CTRL_FLAG_GET_DEF | UVC_CTRL_FLAG_SET_CUR |
2066 			UVC_CTRL_FLAG_AUTO_UPDATE },
2067 		{ { USB_DEVICE(0x046d, 0x0994) }, 9, 1,
2068 			UVC_CTRL_FLAG_GET_MIN | UVC_CTRL_FLAG_GET_MAX |
2069 			UVC_CTRL_FLAG_GET_DEF | UVC_CTRL_FLAG_SET_CUR |
2070 			UVC_CTRL_FLAG_AUTO_UPDATE },
2071 	};
2072 
2073 	unsigned int i;
2074 
2075 	for (i = 0; i < ARRAY_SIZE(fixups); ++i) {
2076 		if (!usb_match_one_id(dev->intf, &fixups[i].id))
2077 			continue;
2078 
2079 		if (fixups[i].entity == ctrl->entity->id &&
2080 		    fixups[i].selector == info->selector) {
2081 			info->flags = fixups[i].flags;
2082 			return;
2083 		}
2084 	}
2085 }
2086 
2087 /*
2088  * Query control information (size and flags) for XU controls.
2089  */
2090 static int uvc_ctrl_fill_xu_info(struct uvc_device *dev,
2091 	const struct uvc_control *ctrl, struct uvc_control_info *info)
2092 {
2093 	u8 *data;
2094 	int ret;
2095 
2096 	data = kmalloc(2, GFP_KERNEL);
2097 	if (data == NULL)
2098 		return -ENOMEM;
2099 
2100 	memcpy(info->entity, ctrl->entity->guid, sizeof(info->entity));
2101 	info->index = ctrl->index;
2102 	info->selector = ctrl->index + 1;
2103 
2104 	/* Query and verify the control length (GET_LEN) */
2105 	ret = uvc_query_ctrl(dev, UVC_GET_LEN, ctrl->entity->id, dev->intfnum,
2106 			     info->selector, data, 2);
2107 	if (ret < 0) {
2108 		uvc_dbg(dev, CONTROL,
2109 			"GET_LEN failed on control %pUl/%u (%d)\n",
2110 			info->entity, info->selector, ret);
2111 		goto done;
2112 	}
2113 
2114 	info->size = le16_to_cpup((__le16 *)data);
2115 
2116 	info->flags = UVC_CTRL_FLAG_GET_MIN | UVC_CTRL_FLAG_GET_MAX
2117 		    | UVC_CTRL_FLAG_GET_RES | UVC_CTRL_FLAG_GET_DEF;
2118 
2119 	ret = uvc_ctrl_get_flags(dev, ctrl, info);
2120 	if (ret < 0) {
2121 		uvc_dbg(dev, CONTROL,
2122 			"Failed to get flags for control %pUl/%u (%d)\n",
2123 			info->entity, info->selector, ret);
2124 		goto done;
2125 	}
2126 
2127 	uvc_ctrl_fixup_xu_info(dev, ctrl, info);
2128 
2129 	uvc_dbg(dev, CONTROL,
2130 		"XU control %pUl/%u queried: len %u, flags { get %u set %u auto %u }\n",
2131 		info->entity, info->selector, info->size,
2132 		(info->flags & UVC_CTRL_FLAG_GET_CUR) ? 1 : 0,
2133 		(info->flags & UVC_CTRL_FLAG_SET_CUR) ? 1 : 0,
2134 		(info->flags & UVC_CTRL_FLAG_AUTO_UPDATE) ? 1 : 0);
2135 
2136 done:
2137 	kfree(data);
2138 	return ret;
2139 }
2140 
2141 static int uvc_ctrl_add_info(struct uvc_device *dev, struct uvc_control *ctrl,
2142 	const struct uvc_control_info *info);
2143 
2144 static int uvc_ctrl_init_xu_ctrl(struct uvc_device *dev,
2145 	struct uvc_control *ctrl)
2146 {
2147 	struct uvc_control_info info;
2148 	int ret;
2149 
2150 	if (ctrl->initialized)
2151 		return 0;
2152 
2153 	ret = uvc_ctrl_fill_xu_info(dev, ctrl, &info);
2154 	if (ret < 0)
2155 		return ret;
2156 
2157 	ret = uvc_ctrl_add_info(dev, ctrl, &info);
2158 	if (ret < 0)
2159 		uvc_dbg(dev, CONTROL,
2160 			"Failed to initialize control %pUl/%u on device %s entity %u\n",
2161 			info.entity, info.selector, dev->udev->devpath,
2162 			ctrl->entity->id);
2163 
2164 	return ret;
2165 }
2166 
2167 int uvc_xu_ctrl_query(struct uvc_video_chain *chain,
2168 	struct uvc_xu_control_query *xqry)
2169 {
2170 	struct uvc_entity *entity, *iter;
2171 	struct uvc_control *ctrl;
2172 	unsigned int i;
2173 	bool found;
2174 	u32 reqflags;
2175 	u16 size;
2176 	u8 *data = NULL;
2177 	int ret;
2178 
2179 	/* Find the extension unit. */
2180 	entity = NULL;
2181 	list_for_each_entry(iter, &chain->entities, chain) {
2182 		if (UVC_ENTITY_TYPE(iter) == UVC_VC_EXTENSION_UNIT &&
2183 		    iter->id == xqry->unit) {
2184 			entity = iter;
2185 			break;
2186 		}
2187 	}
2188 
2189 	if (!entity) {
2190 		uvc_dbg(chain->dev, CONTROL, "Extension unit %u not found\n",
2191 			xqry->unit);
2192 		return -ENOENT;
2193 	}
2194 
2195 	/* Find the control and perform delayed initialization if needed. */
2196 	found = false;
2197 	for (i = 0; i < entity->ncontrols; ++i) {
2198 		ctrl = &entity->controls[i];
2199 		if (ctrl->index == xqry->selector - 1) {
2200 			found = true;
2201 			break;
2202 		}
2203 	}
2204 
2205 	if (!found) {
2206 		uvc_dbg(chain->dev, CONTROL, "Control %pUl/%u not found\n",
2207 			entity->guid, xqry->selector);
2208 		return -ENOENT;
2209 	}
2210 
2211 	if (mutex_lock_interruptible(&chain->ctrl_mutex))
2212 		return -ERESTARTSYS;
2213 
2214 	ret = uvc_ctrl_init_xu_ctrl(chain->dev, ctrl);
2215 	if (ret < 0) {
2216 		ret = -ENOENT;
2217 		goto done;
2218 	}
2219 
2220 	/* Validate the required buffer size and flags for the request */
2221 	reqflags = 0;
2222 	size = ctrl->info.size;
2223 
2224 	switch (xqry->query) {
2225 	case UVC_GET_CUR:
2226 		reqflags = UVC_CTRL_FLAG_GET_CUR;
2227 		break;
2228 	case UVC_GET_MIN:
2229 		reqflags = UVC_CTRL_FLAG_GET_MIN;
2230 		break;
2231 	case UVC_GET_MAX:
2232 		reqflags = UVC_CTRL_FLAG_GET_MAX;
2233 		break;
2234 	case UVC_GET_DEF:
2235 		reqflags = UVC_CTRL_FLAG_GET_DEF;
2236 		break;
2237 	case UVC_GET_RES:
2238 		reqflags = UVC_CTRL_FLAG_GET_RES;
2239 		break;
2240 	case UVC_SET_CUR:
2241 		reqflags = UVC_CTRL_FLAG_SET_CUR;
2242 		break;
2243 	case UVC_GET_LEN:
2244 		size = 2;
2245 		break;
2246 	case UVC_GET_INFO:
2247 		size = 1;
2248 		break;
2249 	default:
2250 		ret = -EINVAL;
2251 		goto done;
2252 	}
2253 
2254 	if (size != xqry->size) {
2255 		ret = -ENOBUFS;
2256 		goto done;
2257 	}
2258 
2259 	if (reqflags && !(ctrl->info.flags & reqflags)) {
2260 		ret = -EBADRQC;
2261 		goto done;
2262 	}
2263 
2264 	data = kmalloc(size, GFP_KERNEL);
2265 	if (data == NULL) {
2266 		ret = -ENOMEM;
2267 		goto done;
2268 	}
2269 
2270 	if (xqry->query == UVC_SET_CUR &&
2271 	    copy_from_user(data, xqry->data, size)) {
2272 		ret = -EFAULT;
2273 		goto done;
2274 	}
2275 
2276 	ret = uvc_query_ctrl(chain->dev, xqry->query, xqry->unit,
2277 			     chain->dev->intfnum, xqry->selector, data, size);
2278 	if (ret < 0)
2279 		goto done;
2280 
2281 	if (xqry->query != UVC_SET_CUR &&
2282 	    copy_to_user(xqry->data, data, size))
2283 		ret = -EFAULT;
2284 done:
2285 	kfree(data);
2286 	mutex_unlock(&chain->ctrl_mutex);
2287 	return ret;
2288 }
2289 
2290 /* --------------------------------------------------------------------------
2291  * Suspend/resume
2292  */
2293 
2294 /*
2295  * Restore control values after resume, skipping controls that haven't been
2296  * changed.
2297  *
2298  * TODO
2299  * - Don't restore modified controls that are back to their default value.
2300  * - Handle restore order (Auto-Exposure Mode should be restored before
2301  *   Exposure Time).
2302  */
2303 int uvc_ctrl_restore_values(struct uvc_device *dev)
2304 {
2305 	struct uvc_control *ctrl;
2306 	struct uvc_entity *entity;
2307 	unsigned int i;
2308 	int ret;
2309 
2310 	/* Walk the entities list and restore controls when possible. */
2311 	list_for_each_entry(entity, &dev->entities, list) {
2312 
2313 		for (i = 0; i < entity->ncontrols; ++i) {
2314 			ctrl = &entity->controls[i];
2315 
2316 			if (!ctrl->initialized || !ctrl->modified ||
2317 			    (ctrl->info.flags & UVC_CTRL_FLAG_RESTORE) == 0)
2318 				continue;
2319 			dev_dbg(&dev->udev->dev,
2320 				"restoring control %pUl/%u/%u\n",
2321 				ctrl->info.entity, ctrl->info.index,
2322 				ctrl->info.selector);
2323 			ctrl->dirty = 1;
2324 		}
2325 
2326 		ret = uvc_ctrl_commit_entity(dev, entity, 0, NULL);
2327 		if (ret < 0)
2328 			return ret;
2329 	}
2330 
2331 	return 0;
2332 }
2333 
2334 /* --------------------------------------------------------------------------
2335  * Control and mapping handling
2336  */
2337 
2338 /*
2339  * Add control information to a given control.
2340  */
2341 static int uvc_ctrl_add_info(struct uvc_device *dev, struct uvc_control *ctrl,
2342 	const struct uvc_control_info *info)
2343 {
2344 	ctrl->info = *info;
2345 	INIT_LIST_HEAD(&ctrl->info.mappings);
2346 
2347 	/* Allocate an array to save control values (cur, def, max, etc.) */
2348 	ctrl->uvc_data = kzalloc(ctrl->info.size * UVC_CTRL_DATA_LAST + 1,
2349 				 GFP_KERNEL);
2350 	if (!ctrl->uvc_data)
2351 		return -ENOMEM;
2352 
2353 	ctrl->initialized = 1;
2354 
2355 	uvc_dbg(dev, CONTROL, "Added control %pUl/%u to device %s entity %u\n",
2356 		ctrl->info.entity, ctrl->info.selector, dev->udev->devpath,
2357 		ctrl->entity->id);
2358 
2359 	return 0;
2360 }
2361 
2362 /*
2363  * Add a control mapping to a given control.
2364  */
2365 static int __uvc_ctrl_add_mapping(struct uvc_video_chain *chain,
2366 	struct uvc_control *ctrl, const struct uvc_control_mapping *mapping)
2367 {
2368 	struct uvc_control_mapping *map;
2369 	unsigned int size;
2370 	unsigned int i;
2371 
2372 	/*
2373 	 * Most mappings come from static kernel data, and need to be duplicated.
2374 	 * Mappings that come from userspace will be unnecessarily duplicated,
2375 	 * this could be optimized.
2376 	 */
2377 	map = kmemdup(mapping, sizeof(*mapping), GFP_KERNEL);
2378 	if (!map)
2379 		return -ENOMEM;
2380 
2381 	map->name = NULL;
2382 	map->menu_names = NULL;
2383 	map->menu_mapping = NULL;
2384 
2385 	/* For UVCIOC_CTRL_MAP custom control */
2386 	if (mapping->name) {
2387 		map->name = kstrdup(mapping->name, GFP_KERNEL);
2388 		if (!map->name)
2389 			goto err_nomem;
2390 	}
2391 
2392 	INIT_LIST_HEAD(&map->ev_subs);
2393 
2394 	if (mapping->menu_mapping && mapping->menu_mask) {
2395 		size = sizeof(mapping->menu_mapping[0])
2396 		       * fls(mapping->menu_mask);
2397 		map->menu_mapping = kmemdup(mapping->menu_mapping, size,
2398 					    GFP_KERNEL);
2399 		if (!map->menu_mapping)
2400 			goto err_nomem;
2401 	}
2402 	if (mapping->menu_names && mapping->menu_mask) {
2403 		size = sizeof(mapping->menu_names[0])
2404 		       * fls(mapping->menu_mask);
2405 		map->menu_names = kmemdup(mapping->menu_names, size,
2406 					  GFP_KERNEL);
2407 		if (!map->menu_names)
2408 			goto err_nomem;
2409 	}
2410 
2411 	if (map->get == NULL)
2412 		map->get = uvc_get_le_value;
2413 	if (map->set == NULL)
2414 		map->set = uvc_set_le_value;
2415 
2416 	for (i = 0; i < ARRAY_SIZE(uvc_control_classes); i++) {
2417 		if (V4L2_CTRL_ID2WHICH(uvc_control_classes[i]) ==
2418 						V4L2_CTRL_ID2WHICH(map->id)) {
2419 			chain->ctrl_class_bitmap |= BIT(i);
2420 			break;
2421 		}
2422 	}
2423 
2424 	list_add_tail(&map->list, &ctrl->info.mappings);
2425 	uvc_dbg(chain->dev, CONTROL, "Adding mapping '%s' to control %pUl/%u\n",
2426 		uvc_map_get_name(map), ctrl->info.entity,
2427 		ctrl->info.selector);
2428 
2429 	return 0;
2430 
2431 err_nomem:
2432 	kfree(map->menu_names);
2433 	kfree(map->menu_mapping);
2434 	kfree(map->name);
2435 	kfree(map);
2436 	return -ENOMEM;
2437 }
2438 
2439 int uvc_ctrl_add_mapping(struct uvc_video_chain *chain,
2440 	const struct uvc_control_mapping *mapping)
2441 {
2442 	struct uvc_device *dev = chain->dev;
2443 	struct uvc_control_mapping *map;
2444 	struct uvc_entity *entity;
2445 	struct uvc_control *ctrl;
2446 	int found = 0;
2447 	int ret;
2448 
2449 	if (mapping->id & ~V4L2_CTRL_ID_MASK) {
2450 		uvc_dbg(dev, CONTROL,
2451 			"Can't add mapping '%s', control id 0x%08x is invalid\n",
2452 			uvc_map_get_name(mapping), mapping->id);
2453 		return -EINVAL;
2454 	}
2455 
2456 	/* Search for the matching (GUID/CS) control on the current chain */
2457 	list_for_each_entry(entity, &chain->entities, chain) {
2458 		unsigned int i;
2459 
2460 		if (UVC_ENTITY_TYPE(entity) != UVC_VC_EXTENSION_UNIT ||
2461 		    !uvc_entity_match_guid(entity, mapping->entity))
2462 			continue;
2463 
2464 		for (i = 0; i < entity->ncontrols; ++i) {
2465 			ctrl = &entity->controls[i];
2466 			if (ctrl->index == mapping->selector - 1) {
2467 				found = 1;
2468 				break;
2469 			}
2470 		}
2471 
2472 		if (found)
2473 			break;
2474 	}
2475 	if (!found)
2476 		return -ENOENT;
2477 
2478 	if (mutex_lock_interruptible(&chain->ctrl_mutex))
2479 		return -ERESTARTSYS;
2480 
2481 	/* Perform delayed initialization of XU controls */
2482 	ret = uvc_ctrl_init_xu_ctrl(dev, ctrl);
2483 	if (ret < 0) {
2484 		ret = -ENOENT;
2485 		goto done;
2486 	}
2487 
2488 	/* Validate the user-provided bit-size and offset */
2489 	if (mapping->size > 32 ||
2490 	    mapping->offset + mapping->size > ctrl->info.size * 8) {
2491 		ret = -EINVAL;
2492 		goto done;
2493 	}
2494 
2495 	list_for_each_entry(map, &ctrl->info.mappings, list) {
2496 		if (mapping->id == map->id) {
2497 			uvc_dbg(dev, CONTROL,
2498 				"Can't add mapping '%s', control id 0x%08x already exists\n",
2499 				uvc_map_get_name(mapping), mapping->id);
2500 			ret = -EEXIST;
2501 			goto done;
2502 		}
2503 	}
2504 
2505 	/* Prevent excess memory consumption */
2506 	if (atomic_inc_return(&dev->nmappings) > UVC_MAX_CONTROL_MAPPINGS) {
2507 		atomic_dec(&dev->nmappings);
2508 		uvc_dbg(dev, CONTROL,
2509 			"Can't add mapping '%s', maximum mappings count (%u) exceeded\n",
2510 			uvc_map_get_name(mapping), UVC_MAX_CONTROL_MAPPINGS);
2511 		ret = -ENOMEM;
2512 		goto done;
2513 	}
2514 
2515 	ret = __uvc_ctrl_add_mapping(chain, ctrl, mapping);
2516 	if (ret < 0)
2517 		atomic_dec(&dev->nmappings);
2518 
2519 done:
2520 	mutex_unlock(&chain->ctrl_mutex);
2521 	return ret;
2522 }
2523 
2524 /*
2525  * Prune an entity of its bogus controls using a blacklist. Bogus controls
2526  * are currently the ones that crash the camera or unconditionally return an
2527  * error when queried.
2528  */
2529 static void uvc_ctrl_prune_entity(struct uvc_device *dev,
2530 	struct uvc_entity *entity)
2531 {
2532 	struct uvc_ctrl_blacklist {
2533 		struct usb_device_id id;
2534 		u8 index;
2535 	};
2536 
2537 	static const struct uvc_ctrl_blacklist processing_blacklist[] = {
2538 		{ { USB_DEVICE(0x13d3, 0x509b) }, 9 }, /* Gain */
2539 		{ { USB_DEVICE(0x1c4f, 0x3000) }, 6 }, /* WB Temperature */
2540 		{ { USB_DEVICE(0x5986, 0x0241) }, 2 }, /* Hue */
2541 	};
2542 	static const struct uvc_ctrl_blacklist camera_blacklist[] = {
2543 		{ { USB_DEVICE(0x06f8, 0x3005) }, 9 }, /* Zoom, Absolute */
2544 	};
2545 
2546 	const struct uvc_ctrl_blacklist *blacklist;
2547 	unsigned int size;
2548 	unsigned int count;
2549 	unsigned int i;
2550 	u8 *controls;
2551 
2552 	switch (UVC_ENTITY_TYPE(entity)) {
2553 	case UVC_VC_PROCESSING_UNIT:
2554 		blacklist = processing_blacklist;
2555 		count = ARRAY_SIZE(processing_blacklist);
2556 		controls = entity->processing.bmControls;
2557 		size = entity->processing.bControlSize;
2558 		break;
2559 
2560 	case UVC_ITT_CAMERA:
2561 		blacklist = camera_blacklist;
2562 		count = ARRAY_SIZE(camera_blacklist);
2563 		controls = entity->camera.bmControls;
2564 		size = entity->camera.bControlSize;
2565 		break;
2566 
2567 	default:
2568 		return;
2569 	}
2570 
2571 	for (i = 0; i < count; ++i) {
2572 		if (!usb_match_one_id(dev->intf, &blacklist[i].id))
2573 			continue;
2574 
2575 		if (blacklist[i].index >= 8 * size ||
2576 		    !uvc_test_bit(controls, blacklist[i].index))
2577 			continue;
2578 
2579 		uvc_dbg(dev, CONTROL,
2580 			"%u/%u control is black listed, removing it\n",
2581 			entity->id, blacklist[i].index);
2582 
2583 		uvc_clear_bit(controls, blacklist[i].index);
2584 	}
2585 }
2586 
2587 /*
2588  * Add control information and hardcoded stock control mappings to the given
2589  * device.
2590  */
2591 static void uvc_ctrl_init_ctrl(struct uvc_video_chain *chain,
2592 			       struct uvc_control *ctrl)
2593 {
2594 	const struct uvc_control_mapping **mappings;
2595 	unsigned int i;
2596 
2597 	/*
2598 	 * XU controls initialization requires querying the device for control
2599 	 * information. As some buggy UVC devices will crash when queried
2600 	 * repeatedly in a tight loop, delay XU controls initialization until
2601 	 * first use.
2602 	 */
2603 	if (UVC_ENTITY_TYPE(ctrl->entity) == UVC_VC_EXTENSION_UNIT)
2604 		return;
2605 
2606 	for (i = 0; i < ARRAY_SIZE(uvc_ctrls); ++i) {
2607 		const struct uvc_control_info *info = &uvc_ctrls[i];
2608 
2609 		if (uvc_entity_match_guid(ctrl->entity, info->entity) &&
2610 		    ctrl->index == info->index) {
2611 			uvc_ctrl_add_info(chain->dev, ctrl, info);
2612 			/*
2613 			 * Retrieve control flags from the device. Ignore errors
2614 			 * and work with default flag values from the uvc_ctrl
2615 			 * array when the device doesn't properly implement
2616 			 * GET_INFO on standard controls.
2617 			 */
2618 			uvc_ctrl_get_flags(chain->dev, ctrl, &ctrl->info);
2619 			break;
2620 		 }
2621 	}
2622 
2623 	if (!ctrl->initialized)
2624 		return;
2625 
2626 	/*
2627 	 * First check if the device provides a custom mapping for this control,
2628 	 * used to override standard mappings for non-conformant devices. Don't
2629 	 * process standard mappings if a custom mapping is found. This
2630 	 * mechanism doesn't support combining standard and custom mappings for
2631 	 * a single control.
2632 	 */
2633 	if (chain->dev->info->mappings) {
2634 		bool custom = false;
2635 
2636 		for (i = 0; chain->dev->info->mappings[i]; ++i) {
2637 			const struct uvc_control_mapping *mapping =
2638 				chain->dev->info->mappings[i];
2639 
2640 			if (uvc_entity_match_guid(ctrl->entity, mapping->entity) &&
2641 			    ctrl->info.selector == mapping->selector) {
2642 				__uvc_ctrl_add_mapping(chain, ctrl, mapping);
2643 				custom = true;
2644 			}
2645 		}
2646 
2647 		if (custom)
2648 			return;
2649 	}
2650 
2651 	/* Process common mappings next. */
2652 	for (i = 0; i < ARRAY_SIZE(uvc_ctrl_mappings); ++i) {
2653 		const struct uvc_control_mapping *mapping = &uvc_ctrl_mappings[i];
2654 
2655 		if (uvc_entity_match_guid(ctrl->entity, mapping->entity) &&
2656 		    ctrl->info.selector == mapping->selector)
2657 			__uvc_ctrl_add_mapping(chain, ctrl, mapping);
2658 	}
2659 
2660 	/* Finally process version-specific mappings. */
2661 	mappings = chain->dev->uvc_version < 0x0150
2662 		 ? uvc_ctrl_mappings_uvc11 : uvc_ctrl_mappings_uvc15;
2663 
2664 	for (i = 0; mappings[i]; ++i) {
2665 		const struct uvc_control_mapping *mapping = mappings[i];
2666 
2667 		if (uvc_entity_match_guid(ctrl->entity, mapping->entity) &&
2668 		    ctrl->info.selector == mapping->selector)
2669 			__uvc_ctrl_add_mapping(chain, ctrl, mapping);
2670 	}
2671 }
2672 
2673 /*
2674  * Initialize device controls.
2675  */
2676 static int uvc_ctrl_init_chain(struct uvc_video_chain *chain)
2677 {
2678 	struct uvc_entity *entity;
2679 	unsigned int i;
2680 
2681 	/* Walk the entities list and instantiate controls */
2682 	list_for_each_entry(entity, &chain->entities, chain) {
2683 		struct uvc_control *ctrl;
2684 		unsigned int bControlSize = 0, ncontrols;
2685 		u8 *bmControls = NULL;
2686 
2687 		if (UVC_ENTITY_TYPE(entity) == UVC_VC_EXTENSION_UNIT) {
2688 			bmControls = entity->extension.bmControls;
2689 			bControlSize = entity->extension.bControlSize;
2690 		} else if (UVC_ENTITY_TYPE(entity) == UVC_VC_PROCESSING_UNIT) {
2691 			bmControls = entity->processing.bmControls;
2692 			bControlSize = entity->processing.bControlSize;
2693 		} else if (UVC_ENTITY_TYPE(entity) == UVC_ITT_CAMERA) {
2694 			bmControls = entity->camera.bmControls;
2695 			bControlSize = entity->camera.bControlSize;
2696 		} else if (UVC_ENTITY_TYPE(entity) == UVC_EXT_GPIO_UNIT) {
2697 			bmControls = entity->gpio.bmControls;
2698 			bControlSize = entity->gpio.bControlSize;
2699 		}
2700 
2701 		/* Remove bogus/blacklisted controls */
2702 		uvc_ctrl_prune_entity(chain->dev, entity);
2703 
2704 		/* Count supported controls and allocate the controls array */
2705 		ncontrols = memweight(bmControls, bControlSize);
2706 		if (ncontrols == 0)
2707 			continue;
2708 
2709 		entity->controls = kcalloc(ncontrols, sizeof(*ctrl),
2710 					   GFP_KERNEL);
2711 		if (entity->controls == NULL)
2712 			return -ENOMEM;
2713 		entity->ncontrols = ncontrols;
2714 
2715 		/* Initialize all supported controls */
2716 		ctrl = entity->controls;
2717 		for (i = 0; i < bControlSize * 8; ++i) {
2718 			if (uvc_test_bit(bmControls, i) == 0)
2719 				continue;
2720 
2721 			ctrl->entity = entity;
2722 			ctrl->index = i;
2723 
2724 			uvc_ctrl_init_ctrl(chain, ctrl);
2725 			ctrl++;
2726 		}
2727 	}
2728 
2729 	return 0;
2730 }
2731 
2732 int uvc_ctrl_init_device(struct uvc_device *dev)
2733 {
2734 	struct uvc_video_chain *chain;
2735 	int ret;
2736 
2737 	INIT_WORK(&dev->async_ctrl.work, uvc_ctrl_status_event_work);
2738 
2739 	list_for_each_entry(chain, &dev->chains, list) {
2740 		ret = uvc_ctrl_init_chain(chain);
2741 		if (ret)
2742 			return ret;
2743 	}
2744 
2745 	return 0;
2746 }
2747 
2748 /*
2749  * Cleanup device controls.
2750  */
2751 static void uvc_ctrl_cleanup_mappings(struct uvc_device *dev,
2752 	struct uvc_control *ctrl)
2753 {
2754 	struct uvc_control_mapping *mapping, *nm;
2755 
2756 	list_for_each_entry_safe(mapping, nm, &ctrl->info.mappings, list) {
2757 		list_del(&mapping->list);
2758 		kfree(mapping->menu_names);
2759 		kfree(mapping->menu_mapping);
2760 		kfree(mapping->name);
2761 		kfree(mapping);
2762 	}
2763 }
2764 
2765 void uvc_ctrl_cleanup_device(struct uvc_device *dev)
2766 {
2767 	struct uvc_entity *entity;
2768 	unsigned int i;
2769 
2770 	/* Can be uninitialized if we are aborting on probe error. */
2771 	if (dev->async_ctrl.work.func)
2772 		cancel_work_sync(&dev->async_ctrl.work);
2773 
2774 	/* Free controls and control mappings for all entities. */
2775 	list_for_each_entry(entity, &dev->entities, list) {
2776 		for (i = 0; i < entity->ncontrols; ++i) {
2777 			struct uvc_control *ctrl = &entity->controls[i];
2778 
2779 			if (!ctrl->initialized)
2780 				continue;
2781 
2782 			uvc_ctrl_cleanup_mappings(dev, ctrl);
2783 			kfree(ctrl->uvc_data);
2784 		}
2785 
2786 		kfree(entity->controls);
2787 	}
2788 }
2789