drivers/usb/image/mdc800.c

   1 /*
   2  * copyright (C) 1999/2000 by Henning Zabel <henning@uni-paderborn.de>
   3  *
   4  * This program is free software; you can redistribute it and/or modify it
   5  * under the terms of the GNU General Public License as published by the
   6  * Free Software Foundation; either version 2 of the License, or (at your
   7  * option) any later version.
   8  *
   9  * This program is distributed in the hope that it will be useful, but
  10  * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
  11  * or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
  12  * for more details.
  13  *
  14  * You should have received a copy of the GNU General Public License
  15  * along with this program; if not, write to the Free Software Foundation,
  16  * Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
  17  */
  18
  19
  20 /*
  21  *      USB-Kernel Driver for the Mustek MDC800 Digital Camera
  22  *      (c) 1999/2000 Henning Zabel <henning@uni-paderborn.de>
  23  *
  24  *
  25  * The driver brings the USB functions of the MDC800 to Linux.
  26  * To use the Camera you must support the USB Protocoll of the camera
  27  * to the Kernel Node.
  28  * The Driver uses a misc device Node. Create it with :
  29  * mknod /dev/mustek c 180 32
  30  *
  31  * The driver supports only one camera.
  32  *
  33  * Fix: mdc800 used sleep_on and slept with io_lock held.
  34  * Converted sleep_on to waitqueues with schedule_timeout and made io_lock
  35  * a semaphore from a spinlock.
  36  * by Oliver Neukum <oliver@neukum.name>
  37  * (02/12/2001)
  38  *
  39  * Identify version on module load.
  40  * (08/04/2001) gb
  41  *
  42  * version 0.7.5
  43  * Fixed potential SMP races with Spinlocks.
  44  * Thanks to Oliver Neukum <oliver@neukum.name> who
  45  * noticed the race conditions.
  46  * (30/10/2000)
  47  *
  48  * Fixed: Setting urb->dev before submitting urb.
  49  * by Greg KH <greg@kroah.com>
  50  * (13/10/2000)
  51  *
  52  * version 0.7.3
  53  * bugfix : The mdc800->state field gets set to READY after the
  54  * the diconnect function sets it to NOT_CONNECTED. This makes the
  55  * driver running like the camera is connected and causes some
  56  * hang ups.
  57  *
  58  * version 0.7.1
  59  * MOD_INC and MOD_DEC are changed in usb_probe to prevent load/unload
  60  * problems when compiled as Module.
  61  * (04/04/2000)
  62  *
  63  * The mdc800 driver gets assigned the USB Minor 32-47. The Registration
  64  * was updated to use these values.
  65  * (26/03/2000)
  66  *
  67  * The Init und Exit Module Function are updated.
  68  * (01/03/2000)
  69  *
  70  * version 0.7.0
  71  * Rewrite of the driver : The driver now uses URB's. The old stuff
  72  * has been removed.
  73  *
  74  * version 0.6.0
  75  * Rewrite of this driver: The Emulation of the rs232 protocoll
  76  * has been removed from the driver. A special executeCommand function
  77  * for this driver is included to gphoto.
  78  * The driver supports two kind of communication to bulk endpoints.
  79  * Either with the dev->bus->ops->bulk... or with callback function.
  80  * (09/11/1999)
  81  *
  82  * version 0.5.0:
  83  * first Version that gets a version number. Most of the needed
  84  * functions work.
  85  * (20/10/1999)
  86  */
  87
  88 #include <linux/sched.h>
  89 #include <linux/signal.h>
  90 #include <linux/spinlock.h>
  91 #include <linux/errno.h>
  92 #include <linux/random.h>
  93 #include <linux/poll.h>
  94 #include <linux/init.h>
  95 #include <linux/slab.h>
  96 #include <linux/module.h>
  97 #include <linux/smp_lock.h>
  98
  99 #include <linux/usb.h>
 100 #include <linux/fs.h>
 101
 102 /*
 103  * Version Information
 104  */
 105 #define DRIVER_VERSION "v0.7.5 (30/10/2000)"
 106 #define DRIVER_AUTHOR "Henning Zabel <henning@uni-paderborn.de>"
 107 #define DRIVER_DESC "USB Driver for Mustek MDC800 Digital Camera"
 108
 109 /* Vendor and Product Information */
 110 #define MDC800_VENDOR_ID        0x055f
 111 #define MDC800_PRODUCT_ID       0xa800
 112
 113 /* Timeouts (msec) */
 114 #define TO_DOWNLOAD_GET_READY           1500
 115 #define TO_DOWNLOAD_GET_BUSY            1500
 116 #define TO_WRITE_GET_READY              1000
 117 #define TO_DEFAULT_COMMAND              5000
 118 #define TO_READ_FROM_IRQ                TO_DEFAULT_COMMAND
 119 #define TO_GET_READY                    TO_DEFAULT_COMMAND
 120
 121 /* Minor Number of the device (create with mknod /dev/mustek c 180 32) */
 122 #define MDC800_DEVICE_MINOR_BASE 32
 123
 124
 125 /**************************************************************************
 126         Data and structs
 127 ***************************************************************************/
 128
 129
 130 typedef enum {
 131         NOT_CONNECTED, READY, WORKING, DOWNLOAD
 132 } mdc800_state;
 133
 134
 135 /* Data for the driver */
 136 struct mdc800_data
 137 {
 138         struct usb_device *     dev;                    // Device Data
 139         mdc800_state            state;
 140
 141         unsigned int            endpoint [4];
 142
 143         struct urb *            irq_urb;
 144         wait_queue_head_t       irq_wait;
 145         int                     irq_woken;
 146         char*                   irq_urb_buffer;
 147
 148         int                     camera_busy;          // is camera busy ?
 149         int                     camera_request_ready; // Status to synchronize with irq
 150         char                    camera_response [8];  // last Bytes send after busy
 151
 152         struct urb *            write_urb;
 153         char*                   write_urb_buffer;
 154         wait_queue_head_t       write_wait;
 155         int                     written;
 156
 157
 158         struct urb *            download_urb;
 159         char*                   download_urb_buffer;
 160         wait_queue_head_t       download_wait;
 161         int                     downloaded;
 162         int                     download_left;          // Bytes left to download ?
 163
 164
 165         /* Device Data */
 166         char                    out [64];       // Answer Buffer
 167         int                     out_ptr;        // Index to the first not readen byte
 168         int                     out_count;      // Bytes in the buffer
 169
 170         int                     open;           // Camera device open ?
 171         struct semaphore        io_lock;        // IO -lock
 172
 173         char                    in [8];         // Command Input Buffer
 174         int                     in_count;
 175
 176         int                     pic_index;      // Cache for the Imagesize (-1 for nothing cached )
 177         int                     pic_len;
 178         int                     minor;
 179 };
 180
 181
 182 /* Specification of the Endpoints */
 183 static struct usb_endpoint_descriptor mdc800_ed [4] =
 184 {
 185         { 0,0, 0x01, 0x02,  8, 0,0,0 },
 186         { 0,0, 0x82, 0x03,  8, 0,0,0 },
 187         { 0,0, 0x03, 0x02, 64, 0,0,0 },
 188         { 0,0, 0x84, 0x02, 64, 0,0,0 }
 189 };
 190
 191
 192 /* The Variable used by the driver */
 193 static struct mdc800_data* mdc800;
 194
 195
 196 /***************************************************************************
 197         The USB Part of the driver
 198 ****************************************************************************/
 199
 200 static int mdc800_endpoint_equals (struct usb_endpoint_descriptor *a,struct usb_endpoint_descriptor *b)
 201 {
 202         return (
 203                    ( a->bEndpointAddress == b->bEndpointAddress )
 204                 && ( a->bmAttributes     == b->bmAttributes     )
 205                 && ( a->wMaxPacketSize   == b->wMaxPacketSize   )
 206         );
 207 }
 208
 209
 210 /*
 211  * Checks whether the camera responds busy
 212  */
 213 static int mdc800_isBusy (char* ch)
 214 {
 215         int i=0;
 216         while (i<8)
 217         {
 218                 if (ch [i] != (char)0x99)
 219                         return 0;
 220                 i++;
 221         }
 222         return 1;
 223 }
 224
 225
 226 /*
 227  * Checks whether the Camera is ready
 228  */
 229 static int mdc800_isReady (char *ch)
 230 {
 231         int i=0;
 232         while (i<8)
 233         {
 234                 if (ch [i] != (char)0xbb)
 235                         return 0;
 236                 i++;
 237         }
 238         return 1;
 239 }
 240
 241
 242
 243 /*
 244  * USB IRQ Handler for InputLine
 245  */
 246 static void mdc800_usb_irq (struct urb *urb, struct pt_regs *res)
 247 {
 248         int data_received=0, wake_up;
 249         unsigned char* b=urb->transfer_buffer;
 250         struct mdc800_data* mdc800=urb->context;
 251
 252         if (urb->status >= 0)
 253         {
 254
 255                 //dbg ("%i %i %i %i %i %i %i %i \n",b[0],b[1],b[2],b[3],b[4],b[5],b[6],b[7]);
 256
 257                 if (mdc800_isBusy (b))
 258                 {
 259                         if (!mdc800->camera_busy)
 260                         {
 261                                 mdc800->camera_busy=1;
 262                                 dbg ("gets busy");
 263                         }
 264                 }
 265                 else
 266                 {
 267                         if (mdc800->camera_busy && mdc800_isReady (b))
 268                         {
 269                                 mdc800->camera_busy=0;
 270                                 dbg ("gets ready");
 271                         }
 272                 }
 273                 if (!(mdc800_isBusy (b) || mdc800_isReady (b)))
 274                 {
 275                         /* Store Data in camera_answer field */
 276                         dbg ("%i %i %i %i %i %i %i %i ",b[0],b[1],b[2],b[3],b[4],b[5],b[6],b[7]);
 277
 278                         memcpy (mdc800->camera_response,b,8);
 279                         data_received=1;
 280                 }
 281         }
 282         wake_up= ( mdc800->camera_request_ready > 0 )
 283                 &&
 284                 (
 285                         ((mdc800->camera_request_ready == 1) && (!mdc800->camera_busy))
 286                 ||
 287                         ((mdc800->camera_request_ready == 2) && data_received)
 288                 ||
 289                         ((mdc800->camera_request_ready == 3) && (mdc800->camera_busy))
 290                 ||
 291                         (urb->status < 0)
 292                 );
 293
 294         if (wake_up)
 295         {
 296                 mdc800->camera_request_ready=0;
 297                 mdc800->irq_woken=1;
 298                 wake_up_interruptible (&mdc800->irq_wait);
 299         }
 300 }
 301
 302
 303 /*
 304  * Waits a while until the irq responds that camera is ready
 305  *
 306  *  mode : 0: Wait for camera gets ready
 307  *         1: Wait for receiving data
 308  *         2: Wait for camera gets busy
 309  *
 310  * msec: Time to wait
 311  */
 312 static int mdc800_usb_waitForIRQ (int mode, int msec)
 313 {
 314         DECLARE_WAITQUEUE(wait, current);
 315         long timeout;
 316
 317         mdc800->camera_request_ready=1+mode;
 318
 319         add_wait_queue(&mdc800->irq_wait, &wait);
 320         timeout = msec*HZ/1000;
 321         while (!mdc800->irq_woken && timeout)
 322         {
 323                 set_current_state(TASK_UNINTERRUPTIBLE);
 324                 timeout = schedule_timeout (timeout);
 325         }
 326         remove_wait_queue(&mdc800->irq_wait, &wait);
 327         mdc800->irq_woken = 0;
 328
 329         if (mdc800->camera_request_ready>0)
 330         {
 331                 mdc800->camera_request_ready=0;
 332                 err ("timeout waiting for camera.");
 333                 return -1;
 334         }
 335
 336         if (mdc800->state == NOT_CONNECTED)
 337         {
 338                 warn ("Camera gets disconnected during waiting for irq.");
 339                 mdc800->camera_request_ready=0;
 340                 return -2;
 341         }
 342
 343         return 0;
 344 }
 345
 346
 347 /*
 348  * The write_urb callback function
 349  */
 350 static void mdc800_usb_write_notify (struct urb *urb, struct pt_regs *res)
 351 {
 352         struct mdc800_data* mdc800=urb->context;
 353
 354         if (urb->status != 0)
 355         {
 356                 err ("writing command fails (status=%i)", urb->status);
 357         }
 358         else
 359         {
 360                 mdc800->state=READY;
 361         }
 362         mdc800->written = 1;
 363         wake_up_interruptible (&mdc800->write_wait);
 364 }
 365
 366
 367 /*
 368  * The download_urb callback function
 369  */
 370 static void mdc800_usb_download_notify (struct urb *urb, struct pt_regs *res)
 371 {
 372         struct mdc800_data* mdc800=urb->context;
 373
 374         if (urb->status == 0)
 375         {
 376                 /* Fill output buffer with these data */
 377                 memcpy (mdc800->out,  urb->transfer_buffer, 64);
 378                 mdc800->out_count=64;
 379                 mdc800->out_ptr=0;
 380                 mdc800->download_left-=64;
 381                 if (mdc800->download_left == 0)
 382                 {
 383                         mdc800->state=READY;
 384                 }
 385         }
 386         else
 387         {
 388                 err ("request bytes fails (status:%i)", urb->status);
 389         }
 390         mdc800->downloaded = 1;
 391         wake_up_interruptible (&mdc800->download_wait);
 392 }
 393
 394
 395 /***************************************************************************
 396         Probing for the Camera
 397  ***************************************************************************/
 398
 399 static struct usb_driver mdc800_usb_driver;
 400 static struct file_operations mdc800_device_ops;
 401 static struct usb_class_driver mdc800_class = {
 402         .name =         "usb/mdc800%d",
 403         .fops =         &mdc800_device_ops,
 404         .mode =         S_IFCHR | S_IRUSR | S_IWUSR | S_IRGRP | S_IWGRP,
 405         .minor_base =   MDC800_DEVICE_MINOR_BASE,
 406 };
 407
 408
 409 /*
 410  * Callback to search the Mustek MDC800 on the USB Bus
 411  */
 412 static int mdc800_usb_probe (struct usb_interface *intf,
 413                                const struct usb_device_id *id)
 414 {
 415         int i,j;
 416         struct usb_host_interface *intf_desc;
 417         struct usb_device *dev = interface_to_usbdev (intf);
 418         int irq_interval=0;
 419         int retval;
 420
 421         dbg ("(mdc800_usb_probe) called.");
 422
 423
 424         if (mdc800->dev != 0)
 425         {
 426                 warn ("only one Mustek MDC800 is supported.");
 427                 return -ENODEV;
 428         }
 429
 430         if (dev->descriptor.bNumConfigurations != 1)
 431         {
 432                 err ("probe fails -> wrong Number of Configuration");
 433                 return -ENODEV;
 434         }
 435         intf_desc = intf->cur_altsetting;
 436
 437         if (
 438                         ( intf_desc->desc.bInterfaceClass != 0xff )
 439                 ||      ( intf_desc->desc.bInterfaceSubClass != 0 )
 440                 || ( intf_desc->desc.bInterfaceProtocol != 0 )
 441                 || ( intf_desc->desc.bNumEndpoints != 4)
 442         )
 443         {
 444                 err ("probe fails -> wrong Interface");
 445                 return -ENODEV;
 446         }
 447
 448         /* Check the Endpoints */
 449         for (i=0; i<4; i++)
 450         {
 451                 mdc800->endpoint[i]=-1;
 452                 for (j=0; j<4; j++)
 453                 {
 454                         if (mdc800_endpoint_equals (&intf_desc->endpoint [j].desc,&mdc800_ed [i]))
 455                         {
 456                                 mdc800->endpoint[i]=intf_desc->endpoint [j].desc.bEndpointAddress ;
 457                                 if (i==1)
 458                                 {
 459                                         irq_interval=intf_desc->endpoint [j].desc.bInterval;
 460                                 }
 461
 462                                 continue;
 463                         }
 464                 }
 465                 if (mdc800->endpoint[i] == -1)
 466                 {
 467                         err ("probe fails -> Wrong Endpoints.");
 468                         return -ENODEV;
 469                 }
 470         }
 471
 472
 473         info ("Found Mustek MDC800 on USB.");
 474
 475         down (&mdc800->io_lock);
 476
 477         retval = usb_register_dev(intf, &mdc800_class);
 478         if (retval) {
 479                 err ("Not able to get a minor for this device.");
 480                 return -ENODEV;
 481         }
 482
 483         mdc800->dev=dev;
 484         mdc800->open=0;
 485
 486         /* Setup URB Structs */
 487         usb_fill_int_urb (
 488                 mdc800->irq_urb,
 489                 mdc800->dev,
 490                 usb_rcvintpipe (mdc800->dev,mdc800->endpoint [1]),
 491                 mdc800->irq_urb_buffer,
 492                 8,
 493                 mdc800_usb_irq,
 494                 mdc800,
 495                 irq_interval
 496         );
 497
 498         usb_fill_bulk_urb (
 499                 mdc800->write_urb,
 500                 mdc800->dev,
 501                 usb_sndbulkpipe (mdc800->dev, mdc800->endpoint[0]),
 502                 mdc800->write_urb_buffer,
 503                 8,
 504                 mdc800_usb_write_notify,
 505                 mdc800
 506         );
 507
 508         usb_fill_bulk_urb (
 509                 mdc800->download_urb,
 510                 mdc800->dev,
 511                 usb_rcvbulkpipe (mdc800->dev, mdc800->endpoint [3]),
 512                 mdc800->download_urb_buffer,
 513                 64,
 514                 mdc800_usb_download_notify,
 515                 mdc800
 516         );
 517
 518         mdc800->state=READY;
 519
 520         up (&mdc800->io_lock);
 521
 522         usb_set_intfdata(intf, mdc800);
 523         return 0;
 524 }
 525
 526
 527 /*
 528  * Disconnect USB device (maybe the MDC800)
 529  */
 530 static void mdc800_usb_disconnect (struct usb_interface *intf)
 531 {
 532         struct mdc800_data* mdc800 = usb_get_intfdata(intf);
 533
 534         dbg ("(mdc800_usb_disconnect) called");
 535
 536         if (mdc800) {
 537                 if (mdc800->state == NOT_CONNECTED)
 538                         return;
 539
 540                 usb_deregister_dev(intf, &mdc800_class);
 541
 542                 mdc800->state=NOT_CONNECTED;
 543
 544                 usb_kill_urb(mdc800->irq_urb);
 545                 usb_kill_urb(mdc800->write_urb);
 546                 usb_kill_urb(mdc800->download_urb);
 547
 548                 mdc800->dev = NULL;
 549                 usb_set_intfdata(intf, NULL);
 550         }
 551         info ("Mustek MDC800 disconnected from USB.");
 552 }
 553
 554
 555 /***************************************************************************
 556         The Misc device Part (file_operations)
 557 ****************************************************************************/
 558
 559 /*
 560  * This Function calc the Answersize for a command.
 561  */
 562 static int mdc800_getAnswerSize (char command)
 563 {
 564         switch ((unsigned char) command)
 565         {
 566                 case 0x2a:
 567                 case 0x49:
 568                 case 0x51:
 569                 case 0x0d:
 570                 case 0x20:
 571                 case 0x07:
 572                 case 0x01:
 573                 case 0x25:
 574                 case 0x00:
 575                         return 8;
 576
 577                 case 0x05:
 578                 case 0x3e:
 579                         return mdc800->pic_len;
 580
 581                 case 0x09:
 582                         return 4096;
 583
 584                 default:
 585                         return 0;
 586         }
 587 }
 588
 589
 590 /*
 591  * Init the device: (1) alloc mem (2) Increase MOD Count ..
 592  */
 593 static int mdc800_device_open (struct inode* inode, struct file *file)
 594 {
 595         int retval=0;
 596         int errn=0;
 597
 598         down (&mdc800->io_lock);
 599
 600         if (mdc800->state == NOT_CONNECTED)
 601         {
 602                 errn=-EBUSY;
 603                 goto error_out;
 604         }
 605         if (mdc800->open)
 606         {
 607                 errn=-EBUSY;
 608                 goto error_out;
 609         }
 610
 611         mdc800->in_count=0;
 612         mdc800->out_count=0;
 613         mdc800->out_ptr=0;
 614         mdc800->pic_index=0;
 615         mdc800->pic_len=-1;
 616         mdc800->download_left=0;
 617
 618         mdc800->camera_busy=0;
 619         mdc800->camera_request_ready=0;
 620
 621         retval=0;
 622         mdc800->irq_urb->dev = mdc800->dev;
 623         if (usb_submit_urb (mdc800->irq_urb, GFP_KERNEL))
 624         {
 625                 err ("request USB irq fails (submit_retval=%i urb_status=%i).",retval, mdc800->irq_urb->status);
 626                 errn = -EIO;
 627                 goto error_out;
 628         }
 629
 630         mdc800->open=1;
 631         dbg ("Mustek MDC800 device opened.");
 632
 633 error_out:
 634         up (&mdc800->io_lock);
 635         return errn;
 636 }
 637
 638
 639 /*
 640  * Close the Camera and release Memory
 641  */
 642 static int mdc800_device_release (struct inode* inode, struct file *file)
 643 {
 644         int retval=0;
 645         dbg ("Mustek MDC800 device closed.");
 646
 647         down (&mdc800->io_lock);
 648         if (mdc800->open && (mdc800->state != NOT_CONNECTED))
 649         {
 650                 usb_kill_urb(mdc800->irq_urb);
 651                 usb_kill_urb(mdc800->write_urb);
 652                 usb_kill_urb(mdc800->download_urb);
 653                 mdc800->open=0;
 654         }
 655         else
 656         {
 657                 retval=-EIO;
 658         }
 659
 660         up(&mdc800->io_lock);
 661         return retval;
 662 }
 663
 664
 665 /*
 666  * The Device read callback Function
 667  */
 668 static ssize_t mdc800_device_read (struct file *file, char __user *buf, size_t len, loff_t *pos)
 669 {
 670         size_t left=len, sts=len; /* single transfer size */
 671         char __user *ptr = buf;
 672         long timeout;
 673         DECLARE_WAITQUEUE(wait, current);
 674
 675         down (&mdc800->io_lock);
 676         if (mdc800->state == NOT_CONNECTED)
 677         {
 678                 up (&mdc800->io_lock);
 679                 return -EBUSY;
 680         }
 681         if (mdc800->state == WORKING)
 682         {
 683                 warn ("Illegal State \"working\" reached during read ?!");
 684                 up (&mdc800->io_lock);
 685                 return -EBUSY;
 686         }
 687         if (!mdc800->open)
 688         {
 689                 up (&mdc800->io_lock);
 690                 return -EBUSY;
 691         }
 692
 693         while (left)
 694         {
 695                 if (signal_pending (current))
 696                 {
 697                         up (&mdc800->io_lock);
 698                         return -EINTR;
 699                 }
 700
 701                 sts=left > (mdc800->out_count-mdc800->out_ptr)?mdc800->out_count-mdc800->out_ptr:left;
 702
 703                 if (sts <= 0)
 704                 {
 705                         /* Too less Data in buffer */
 706                         if (mdc800->state == DOWNLOAD)
 707                         {
 708                                 mdc800->out_count=0;
 709                                 mdc800->out_ptr=0;
 710
 711                                 /* Download -> Request new bytes */
 712                                 mdc800->download_urb->dev = mdc800->dev;
 713                                 if (usb_submit_urb (mdc800->download_urb, GFP_KERNEL))
 714                                 {
 715                                         err ("Can't submit download urb (status=%i)",mdc800->download_urb->status);
 716                                         up (&mdc800->io_lock);
 717                                         return len-left;
 718                                 }
 719                                 add_wait_queue(&mdc800->download_wait, &wait);
 720                                 timeout = TO_DOWNLOAD_GET_READY*HZ/1000;
 721                                 while (!mdc800->downloaded && timeout)
 722                                 {
 723                                         set_current_state(TASK_UNINTERRUPTIBLE);
 724                                         timeout = schedule_timeout (timeout);
 725                                 }
 726                                 remove_wait_queue(&mdc800->download_wait, &wait);
 727                                 mdc800->downloaded = 0;
 728                                 if (mdc800->download_urb->status != 0)
 729                                 {
 730                                         err ("request download-bytes fails (status=%i)",mdc800->download_urb->status);
 731                                         up (&mdc800->io_lock);
 732                                         return len-left;
 733                                 }
 734                         }
 735                         else
 736                         {
 737                                 /* No more bytes -> that's an error*/
 738                                 up (&mdc800->io_lock);
 739                                 return -EIO;
 740                         }
 741                 }
 742                 else
 743                 {
 744                         /* Copy Bytes */
 745                         if (copy_to_user(ptr, &mdc800->out [mdc800->out_ptr],
 746                                                 sts)) {
 747                                 up(&mdc800->io_lock);
 748                                 return -EFAULT;
 749                         }
 750                         ptr+=sts;
 751                         left-=sts;
 752                         mdc800->out_ptr+=sts;
 753                 }
 754         }
 755
 756         up (&mdc800->io_lock);
 757         return len-left;
 758 }
 759
 760
 761 /*
 762  * The Device write callback Function
 763  * If a 8Byte Command is received, it will be send to the camera.
 764  * After this the driver initiates the request for the answer or
 765  * just waits until the camera becomes ready.
 766  */
 767 static ssize_t mdc800_device_write (struct file *file, const char __user *buf, size_t len, loff_t *pos)
 768 {
 769         size_t i=0;
 770         DECLARE_WAITQUEUE(wait, current);
 771
 772         down (&mdc800->io_lock);
 773         if (mdc800->state != READY)
 774         {
 775                 up (&mdc800->io_lock);
 776                 return -EBUSY;
 777         }
 778         if (!mdc800->open )
 779         {
 780                 up (&mdc800->io_lock);
 781                 return -EBUSY;
 782         }
 783
 784         while (i<len)
 785         {
 786                 unsigned char c;
 787                 if (signal_pending (current))
 788                 {
 789                         up (&mdc800->io_lock);
 790                         return -EINTR;
 791                 }
 792
 793                 if(get_user(c, buf+i))
 794                 {
 795                         up(&mdc800->io_lock);
 796                         return -EFAULT;
 797                 }
 798
 799                 /* check for command start */
 800                 if (c == 0x55)
 801                 {
 802                         mdc800->in_count=0;
 803                         mdc800->out_count=0;
 804                         mdc800->out_ptr=0;
 805                         mdc800->download_left=0;
 806                 }
 807
 808                 /* save command byte */
 809                 if (mdc800->in_count < 8)
 810                 {
 811                         mdc800->in[mdc800->in_count] = c;
 812                         mdc800->in_count++;
 813                 }
 814                 else
 815                 {
 816                         up (&mdc800->io_lock);
 817                         return -EIO;
 818                 }
 819
 820                 /* Command Buffer full ? -> send it to camera */
 821                 if (mdc800->in_count == 8)
 822                 {
 823                         int answersize;
 824                         long timeout;
 825
 826                         if (mdc800_usb_waitForIRQ (0,TO_GET_READY))
 827                         {
 828                                 err ("Camera didn't get ready.\n");
 829                                 up (&mdc800->io_lock);
 830                                 return -EIO;
 831                         }
 832
 833                         answersize=mdc800_getAnswerSize (mdc800->in[1]);
 834
 835                         mdc800->state=WORKING;
 836                         memcpy (mdc800->write_urb->transfer_buffer, mdc800->in,8);
 837                         mdc800->write_urb->dev = mdc800->dev;
 838                         if (usb_submit_urb (mdc800->write_urb, GFP_KERNEL))
 839                         {
 840                                 err ("submitting write urb fails (status=%i)", mdc800->write_urb->status);
 841                                 up (&mdc800->io_lock);
 842                                 return -EIO;
 843                         }
 844                         add_wait_queue(&mdc800->write_wait, &wait);
 845                         timeout = TO_WRITE_GET_READY*HZ/1000;
 846                         while (!mdc800->written && timeout)
 847                         {
 848                                 set_current_state(TASK_UNINTERRUPTIBLE);
 849                                 timeout = schedule_timeout (timeout);
 850                         }
 851                         remove_wait_queue(&mdc800->write_wait, &wait);
 852                         mdc800->written = 0;
 853                         if (mdc800->state == WORKING)
 854                         {
 855                                 usb_kill_urb(mdc800->write_urb);
 856                                 up (&mdc800->io_lock);
 857                                 return -EIO;
 858                         }
 859
 860                         switch ((unsigned char) mdc800->in[1])
 861                         {
 862                                 case 0x05: /* Download Image */
 863                                 case 0x3e: /* Take shot in Fine Mode (WCam Mode) */
 864                                         if (mdc800->pic_len < 0)
 865                                         {
 866                                                 err ("call 0x07 before 0x05,0x3e");
 867                                                 mdc800->state=READY;
 868                                                 up (&mdc800->io_lock);
 869                                                 return -EIO;
 870                                         }
 871                                         mdc800->pic_len=-1;
 872
 873                                 case 0x09: /* Download Thumbnail */
 874                                         mdc800->download_left=answersize+64;
 875                                         mdc800->state=DOWNLOAD;
 876                                         mdc800_usb_waitForIRQ (0,TO_DOWNLOAD_GET_BUSY);
 877                                         break;
 878
 879
 880                                 default:
 881                                         if (answersize)
 882                                         {
 883
 884                                                 if (mdc800_usb_waitForIRQ (1,TO_READ_FROM_IRQ))
 885                                                 {
 886                                                         err ("requesting answer from irq fails");
 887                                                         up (&mdc800->io_lock);
 888                                                         return -EIO;
 889                                                 }
 890
 891                                                 /* Write dummy data, (this is ugly but part of the USB Protocol */
 892                                                 /* if you use endpoint 1 as bulk and not as irq) */
 893                                                 memcpy (mdc800->out, mdc800->camera_response,8);
 894
 895                                                 /* This is the interpreted answer */
 896                                                 memcpy (&mdc800->out[8], mdc800->camera_response,8);
 897
 898                                                 mdc800->out_ptr=0;
 899                                                 mdc800->out_count=16;
 900
 901                                                 /* Cache the Imagesize, if command was getImageSize */
 902                                                 if (mdc800->in [1] == (char) 0x07)
 903                                                 {
 904                                                         mdc800->pic_len=(int) 65536*(unsigned char) mdc800->camera_response[0]+256*(unsigned char) mdc800->camera_response[1]+(unsigned char) mdc800->camera_response[2];
 905
 906                                                         dbg ("cached imagesize = %i",mdc800->pic_len);
 907                                                 }
 908
 909                                         }
 910                                         else
 911                                         {
 912                                                 if (mdc800_usb_waitForIRQ (0,TO_DEFAULT_COMMAND))
 913                                                 {
 914                                                         err ("Command Timeout.");
 915                                                         up (&mdc800->io_lock);
 916                                                         return -EIO;
 917                                                 }
 918                                         }
 919                                         mdc800->state=READY;
 920                                         break;
 921                         }
 922                 }
 923                 i++;
 924         }
 925         up (&mdc800->io_lock);
 926         return i;
 927 }
 928
 929
 930 /***************************************************************************
 931         Init and Cleanup this driver (Structs and types)
 932 ****************************************************************************/
 933
 934 /* File Operations of this drivers */
 935 static struct file_operations mdc800_device_ops =
 936 {
 937         .owner =        THIS_MODULE,
 938         .read =         mdc800_device_read,
 939         .write =        mdc800_device_write,
 940         .open =         mdc800_device_open,
 941         .release =      mdc800_device_release,
 942 };
 943
 944
 945
 946 static struct usb_device_id mdc800_table [] = {
 947         { USB_DEVICE(MDC800_VENDOR_ID, MDC800_PRODUCT_ID) },
 948         { }                                             /* Terminating entry */
 949 };
 950
 951 MODULE_DEVICE_TABLE (usb, mdc800_table);
 952 /*
 953  * USB Driver Struct for this device
 954  */
 955 static struct usb_driver mdc800_usb_driver =
 956 {
 957         .owner =        THIS_MODULE,
 958         .name =         "mdc800",
 959         .probe =        mdc800_usb_probe,
 960         .disconnect =   mdc800_usb_disconnect,
 961         .id_table =     mdc800_table
 962 };
 963
 964
 965
 966 /************************************************************************
 967         Init and Cleanup this driver (Main Functions)
 968 *************************************************************************/
 969
 970 #define try(A)           if (!(A)) goto cleanup_on_fail;
 971
 972 static int __init usb_mdc800_init (void)
 973 {
 974         int retval = -ENODEV;
 975         /* Allocate Memory */
 976         try (mdc800=kmalloc (sizeof (struct mdc800_data), GFP_KERNEL));
 977
 978         memset(mdc800, 0, sizeof(struct mdc800_data));
 979         mdc800->dev = NULL;
 980         mdc800->open=0;
 981         mdc800->state=NOT_CONNECTED;
 982         init_MUTEX (&mdc800->io_lock);
 983
 984         init_waitqueue_head (&mdc800->irq_wait);
 985         init_waitqueue_head (&mdc800->write_wait);
 986         init_waitqueue_head (&mdc800->download_wait);
 987
 988         mdc800->irq_woken = 0;
 989         mdc800->downloaded = 0;
 990         mdc800->written = 0;
 991
 992         try (mdc800->irq_urb_buffer=kmalloc (8, GFP_KERNEL));
 993         try (mdc800->write_urb_buffer=kmalloc (8, GFP_KERNEL));
 994         try (mdc800->download_urb_buffer=kmalloc (64, GFP_KERNEL));
 995
 996         try (mdc800->irq_urb=usb_alloc_urb (0, GFP_KERNEL));
 997         try (mdc800->download_urb=usb_alloc_urb (0, GFP_KERNEL));
 998         try (mdc800->write_urb=usb_alloc_urb (0, GFP_KERNEL));
 999
1000         /* Register the driver */
1001         retval = usb_register(&mdc800_usb_driver);
1002         if (retval)
1003                 goto cleanup_on_fail;
1004
1005         info (DRIVER_VERSION ":" DRIVER_DESC);
1006
1007         return 0;
1008
1009         /* Clean driver up, when something fails */
1010
1011 cleanup_on_fail:
1012
1013         if (mdc800 != 0)
1014         {
1015                 err ("can't alloc memory!");
1016
1017                 kfree(mdc800->download_urb_buffer);
1018                 kfree(mdc800->write_urb_buffer);
1019                 kfree(mdc800->irq_urb_buffer);
1020
1021                 usb_free_urb(mdc800->write_urb);
1022                 usb_free_urb(mdc800->download_urb);
1023                 usb_free_urb(mdc800->irq_urb);
1024
1025                 kfree (mdc800);
1026         }
1027         mdc800 = NULL;
1028         return retval;
1029 }
1030
1031
1032 static void __exit usb_mdc800_cleanup (void)
1033 {
1034         usb_deregister (&mdc800_usb_driver);
1035
1036         usb_free_urb (mdc800->irq_urb);
1037         usb_free_urb (mdc800->download_urb);
1038         usb_free_urb (mdc800->write_urb);
1039
1040         kfree (mdc800->irq_urb_buffer);
1041         kfree (mdc800->write_urb_buffer);
1042         kfree (mdc800->download_urb_buffer);
1043
1044         kfree (mdc800);
1045         mdc800 = NULL;
1046 }
1047
1048 module_init (usb_mdc800_init);
1049 module_exit (usb_mdc800_cleanup);
1050
1051 MODULE_AUTHOR( DRIVER_AUTHOR );
1052 MODULE_DESCRIPTION( DRIVER_DESC );
1053 MODULE_LICENSE("GPL");
1054