Avoid beyond bounds copy while caching ACL
[zen-stable.git] / drivers / media / dvb / dvb-usb / vp702x.c
blob07c673a6e7643068cb49c8ab3f01e9b299b2b060
1 /* DVB USB compliant Linux driver for the TwinhanDTV StarBox USB2.0 DVB-S
2 * receiver.
4 * Copyright (C) 2005 Ralph Metzler <rjkm@metzlerbros.de>
5 * Metzler Brothers Systementwicklung GbR
7 * Copyright (C) 2005 Patrick Boettcher <patrick.boettcher@desy.de>
9 * Thanks to Twinhan who kindly provided hardware and information.
11 * This program is free software; you can redistribute it and/or modify it
12 * under the terms of the GNU General Public License as published by the Free
13 * Software Foundation, version 2.
15 * see Documentation/dvb/README.dvb-usb for more information
17 #include "vp702x.h"
18 #include <linux/mutex.h>
20 /* debug */
21 int dvb_usb_vp702x_debug;
22 module_param_named(debug,dvb_usb_vp702x_debug, int, 0644);
23 MODULE_PARM_DESC(debug, "set debugging level (1=info,xfer=2,rc=4 (or-able))." DVB_USB_DEBUG_STATUS);
25 DVB_DEFINE_MOD_OPT_ADAPTER_NR(adapter_nr);
27 struct vp702x_adapter_state {
28 int pid_filter_count;
29 int pid_filter_can_bypass;
30 u8 pid_filter_state;
33 static int vp702x_usb_in_op_unlocked(struct dvb_usb_device *d, u8 req,
34 u16 value, u16 index, u8 *b, int blen)
36 int ret;
38 ret = usb_control_msg(d->udev,
39 usb_rcvctrlpipe(d->udev, 0),
40 req,
41 USB_TYPE_VENDOR | USB_DIR_IN,
42 value, index, b, blen,
43 2000);
45 if (ret < 0) {
46 warn("usb in operation failed. (%d)", ret);
47 ret = -EIO;
48 } else
49 ret = 0;
52 deb_xfer("in: req. %02x, val: %04x, ind: %04x, buffer: ",req,value,index);
53 debug_dump(b,blen,deb_xfer);
55 return ret;
58 int vp702x_usb_in_op(struct dvb_usb_device *d, u8 req, u16 value,
59 u16 index, u8 *b, int blen)
61 int ret;
63 mutex_lock(&d->usb_mutex);
64 ret = vp702x_usb_in_op_unlocked(d, req, value, index, b, blen);
65 mutex_unlock(&d->usb_mutex);
67 return ret;
70 int vp702x_usb_out_op_unlocked(struct dvb_usb_device *d, u8 req, u16 value,
71 u16 index, u8 *b, int blen)
73 int ret;
74 deb_xfer("out: req. %02x, val: %04x, ind: %04x, buffer: ",req,value,index);
75 debug_dump(b,blen,deb_xfer);
77 if ((ret = usb_control_msg(d->udev,
78 usb_sndctrlpipe(d->udev,0),
79 req,
80 USB_TYPE_VENDOR | USB_DIR_OUT,
81 value,index,b,blen,
82 2000)) != blen) {
83 warn("usb out operation failed. (%d)",ret);
84 return -EIO;
85 } else
86 return 0;
89 int vp702x_usb_out_op(struct dvb_usb_device *d, u8 req, u16 value,
90 u16 index, u8 *b, int blen)
92 int ret;
94 mutex_lock(&d->usb_mutex);
95 ret = vp702x_usb_out_op_unlocked(d, req, value, index, b, blen);
96 mutex_unlock(&d->usb_mutex);
98 return ret;
101 int vp702x_usb_inout_op(struct dvb_usb_device *d, u8 *o, int olen, u8 *i, int ilen, int msec)
103 int ret;
105 if ((ret = mutex_lock_interruptible(&d->usb_mutex)))
106 return ret;
108 ret = vp702x_usb_out_op_unlocked(d, REQUEST_OUT, 0, 0, o, olen);
109 msleep(msec);
110 ret = vp702x_usb_in_op_unlocked(d, REQUEST_IN, 0, 0, i, ilen);
112 mutex_unlock(&d->usb_mutex);
113 return ret;
116 static int vp702x_usb_inout_cmd(struct dvb_usb_device *d, u8 cmd, u8 *o,
117 int olen, u8 *i, int ilen, int msec)
119 struct vp702x_device_state *st = d->priv;
120 int ret = 0;
121 u8 *buf;
122 int buflen = max(olen + 2, ilen + 1);
124 ret = mutex_lock_interruptible(&st->buf_mutex);
125 if (ret < 0)
126 return ret;
128 if (buflen > st->buf_len) {
129 buf = kmalloc(buflen, GFP_KERNEL);
130 if (!buf) {
131 mutex_unlock(&st->buf_mutex);
132 return -ENOMEM;
134 info("successfully reallocated a bigger buffer");
135 kfree(st->buf);
136 st->buf = buf;
137 st->buf_len = buflen;
138 } else {
139 buf = st->buf;
142 buf[0] = 0x00;
143 buf[1] = cmd;
144 memcpy(&buf[2], o, olen);
146 ret = vp702x_usb_inout_op(d, buf, olen+2, buf, ilen+1, msec);
148 if (ret == 0)
149 memcpy(i, &buf[1], ilen);
150 mutex_unlock(&st->buf_mutex);
152 return ret;
155 static int vp702x_set_pld_mode(struct dvb_usb_adapter *adap, u8 bypass)
157 int ret;
158 struct vp702x_device_state *st = adap->dev->priv;
159 u8 *buf;
161 mutex_lock(&st->buf_mutex);
163 buf = st->buf;
164 memset(buf, 0, 16);
166 ret = vp702x_usb_in_op(adap->dev, 0xe0, (bypass << 8) | 0x0e,
167 0, buf, 16);
168 mutex_unlock(&st->buf_mutex);
169 return ret;
172 static int vp702x_set_pld_state(struct dvb_usb_adapter *adap, u8 state)
174 int ret;
175 struct vp702x_device_state *st = adap->dev->priv;
176 u8 *buf;
178 mutex_lock(&st->buf_mutex);
180 buf = st->buf;
181 memset(buf, 0, 16);
182 ret = vp702x_usb_in_op(adap->dev, 0xe0, (state << 8) | 0x0f,
183 0, buf, 16);
185 mutex_unlock(&st->buf_mutex);
187 return ret;
190 static int vp702x_set_pid(struct dvb_usb_adapter *adap, u16 pid, u8 id, int onoff)
192 struct vp702x_adapter_state *st = adap->priv;
193 struct vp702x_device_state *dst = adap->dev->priv;
194 u8 *buf;
196 if (onoff)
197 st->pid_filter_state |= (1 << id);
198 else {
199 st->pid_filter_state &= ~(1 << id);
200 pid = 0xffff;
203 id = 0x10 + id*2;
205 vp702x_set_pld_state(adap, st->pid_filter_state);
207 mutex_lock(&dst->buf_mutex);
209 buf = dst->buf;
210 memset(buf, 0, 16);
211 vp702x_usb_in_op(adap->dev, 0xe0, (((pid >> 8) & 0xff) << 8) | (id), 0, buf, 16);
212 vp702x_usb_in_op(adap->dev, 0xe0, (((pid ) & 0xff) << 8) | (id+1), 0, buf, 16);
214 mutex_unlock(&dst->buf_mutex);
216 return 0;
220 static int vp702x_init_pid_filter(struct dvb_usb_adapter *adap)
222 struct vp702x_adapter_state *st = adap->priv;
223 struct vp702x_device_state *dst = adap->dev->priv;
224 int i;
225 u8 *b;
227 st->pid_filter_count = 8;
228 st->pid_filter_can_bypass = 1;
229 st->pid_filter_state = 0x00;
231 vp702x_set_pld_mode(adap, 1); /* bypass */
233 for (i = 0; i < st->pid_filter_count; i++)
234 vp702x_set_pid(adap, 0xffff, i, 1);
236 mutex_lock(&dst->buf_mutex);
237 b = dst->buf;
238 memset(b, 0, 10);
239 vp702x_usb_in_op(adap->dev, 0xb5, 3, 0, b, 10);
240 vp702x_usb_in_op(adap->dev, 0xb5, 0, 0, b, 10);
241 vp702x_usb_in_op(adap->dev, 0xb5, 1, 0, b, 10);
242 mutex_unlock(&dst->buf_mutex);
243 /*vp702x_set_pld_mode(d, 0); // filter */
245 return 0;
248 static int vp702x_streaming_ctrl(struct dvb_usb_adapter *adap, int onoff)
250 return 0;
253 /* keys for the enclosed remote control */
254 static struct rc_map_table rc_map_vp702x_table[] = {
255 { 0x0001, KEY_1 },
256 { 0x0002, KEY_2 },
259 /* remote control stuff (does not work with my box) */
260 static int vp702x_rc_query(struct dvb_usb_device *d, u32 *event, int *state)
262 u8 *key;
263 int i;
265 /* remove the following return to enabled remote querying */
266 return 0;
268 key = kmalloc(10, GFP_KERNEL);
269 if (!key)
270 return -ENOMEM;
272 vp702x_usb_in_op(d,READ_REMOTE_REQ,0,0,key,10);
274 deb_rc("remote query key: %x %d\n",key[1],key[1]);
276 if (key[1] == 0x44) {
277 *state = REMOTE_NO_KEY_PRESSED;
278 kfree(key);
279 return 0;
282 for (i = 0; i < ARRAY_SIZE(rc_map_vp702x_table); i++)
283 if (rc5_custom(&rc_map_vp702x_table[i]) == key[1]) {
284 *state = REMOTE_KEY_PRESSED;
285 *event = rc_map_vp702x_table[i].keycode;
286 break;
288 kfree(key);
289 return 0;
293 static int vp702x_read_mac_addr(struct dvb_usb_device *d,u8 mac[6])
295 u8 i, *buf;
296 struct vp702x_device_state *st = d->priv;
298 mutex_lock(&st->buf_mutex);
299 buf = st->buf;
300 for (i = 6; i < 12; i++)
301 vp702x_usb_in_op(d, READ_EEPROM_REQ, i, 1, &buf[i - 6], 1);
303 memcpy(mac, buf, 6);
304 mutex_unlock(&st->buf_mutex);
305 return 0;
308 static int vp702x_frontend_attach(struct dvb_usb_adapter *adap)
310 u8 buf[10] = { 0 };
312 vp702x_usb_out_op(adap->dev, SET_TUNER_POWER_REQ, 0, 7, NULL, 0);
314 if (vp702x_usb_inout_cmd(adap->dev, GET_SYSTEM_STRING, NULL, 0,
315 buf, 10, 10))
316 return -EIO;
318 buf[9] = '\0';
319 info("system string: %s",&buf[1]);
321 vp702x_init_pid_filter(adap);
323 adap->fe_adap[0].fe = vp702x_fe_attach(adap->dev);
324 vp702x_usb_out_op(adap->dev, SET_TUNER_POWER_REQ, 1, 7, NULL, 0);
326 return 0;
329 static struct dvb_usb_device_properties vp702x_properties;
331 static int vp702x_usb_probe(struct usb_interface *intf,
332 const struct usb_device_id *id)
334 struct dvb_usb_device *d;
335 struct vp702x_device_state *st;
336 int ret;
338 ret = dvb_usb_device_init(intf, &vp702x_properties,
339 THIS_MODULE, &d, adapter_nr);
340 if (ret)
341 goto out;
343 st = d->priv;
344 st->buf_len = 16;
345 st->buf = kmalloc(st->buf_len, GFP_KERNEL);
346 if (!st->buf) {
347 ret = -ENOMEM;
348 dvb_usb_device_exit(intf);
349 goto out;
351 mutex_init(&st->buf_mutex);
353 out:
354 return ret;
358 static void vp702x_usb_disconnect(struct usb_interface *intf)
360 struct dvb_usb_device *d = usb_get_intfdata(intf);
361 struct vp702x_device_state *st = d->priv;
362 mutex_lock(&st->buf_mutex);
363 kfree(st->buf);
364 mutex_unlock(&st->buf_mutex);
365 dvb_usb_device_exit(intf);
368 static struct usb_device_id vp702x_usb_table [] = {
369 { USB_DEVICE(USB_VID_VISIONPLUS, USB_PID_TWINHAN_VP7021_COLD) },
370 // { USB_DEVICE(USB_VID_VISIONPLUS, USB_PID_TWINHAN_VP7020_COLD) },
371 // { USB_DEVICE(USB_VID_VISIONPLUS, USB_PID_TWINHAN_VP7020_WARM) },
372 { 0 },
374 MODULE_DEVICE_TABLE(usb, vp702x_usb_table);
376 static struct dvb_usb_device_properties vp702x_properties = {
377 .usb_ctrl = CYPRESS_FX2,
378 .firmware = "dvb-usb-vp702x-02.fw",
379 .no_reconnect = 1,
381 .size_of_priv = sizeof(struct vp702x_device_state),
383 .num_adapters = 1,
384 .adapter = {
386 .num_frontends = 1,
387 .fe = {{
388 .caps = DVB_USB_ADAP_RECEIVES_204_BYTE_TS,
390 .streaming_ctrl = vp702x_streaming_ctrl,
391 .frontend_attach = vp702x_frontend_attach,
393 /* parameter for the MPEG2-data transfer */
394 .stream = {
395 .type = USB_BULK,
396 .count = 10,
397 .endpoint = 0x02,
398 .u = {
399 .bulk = {
400 .buffersize = 4096,
405 .size_of_priv = sizeof(struct vp702x_adapter_state),
408 .read_mac_address = vp702x_read_mac_addr,
410 .rc.legacy = {
411 .rc_map_table = rc_map_vp702x_table,
412 .rc_map_size = ARRAY_SIZE(rc_map_vp702x_table),
413 .rc_interval = 400,
414 .rc_query = vp702x_rc_query,
417 .num_device_descs = 1,
418 .devices = {
419 { .name = "TwinhanDTV StarBox DVB-S USB2.0 (VP7021)",
420 .cold_ids = { &vp702x_usb_table[0], NULL },
421 .warm_ids = { NULL },
423 /* { .name = "TwinhanDTV StarBox DVB-S USB2.0 (VP7020)",
424 .cold_ids = { &vp702x_usb_table[2], NULL },
425 .warm_ids = { &vp702x_usb_table[3], NULL },
427 */ { NULL },
431 /* usb specific object needed to register this driver with the usb subsystem */
432 static struct usb_driver vp702x_usb_driver = {
433 .name = "dvb_usb_vp702x",
434 .probe = vp702x_usb_probe,
435 .disconnect = vp702x_usb_disconnect,
436 .id_table = vp702x_usb_table,
439 module_usb_driver(vp702x_usb_driver);
441 MODULE_AUTHOR("Patrick Boettcher <patrick.boettcher@desy.de>");
442 MODULE_DESCRIPTION("Driver for Twinhan StarBox DVB-S USB2.0 and clones");
443 MODULE_VERSION("1.0");
444 MODULE_LICENSE("GPL");