drivers/usb/image/mdc800.c

   1 /*
   2  * copyright (C) 1999/2000 by Henning Zabel <henning@uni-paderborn.de>
   3  *
   4  * This program is free software; you can redistribute it and/or modify it
   5  * under the terms of the GNU General Public License as published by the
   6  * Free Software Foundation; either version 2 of the License, or (at your
   7  * option) any later version.
   8  *
   9  * This program is distributed in the hope that it will be useful, but
  10  * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
  11  * or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
  12  * for more details.
  13  *
  14  * You should have received a copy of the GNU General Public License
  15  * along with this program; if not, write to the Free Software Foundation,
  16  * Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
  17  */
  18
  19
  20 /*
  21  *      USB-Kernel Driver for the Mustek MDC800 Digital Camera
  22  *      (c) 1999/2000 Henning Zabel <henning@uni-paderborn.de>
  23  *
  24  *
  25  * The driver brings the USB functions of the MDC800 to Linux.
  26  * To use the Camera you must support the USB Protocoll of the camera
  27  * to the Kernel Node.
  28  * The Driver uses a misc device Node. Create it with :
  29  * mknod /dev/mustek c 180 32
  30  *
  31  * The driver supports only one camera.
  32  *
  33  * Fix: mdc800 used sleep_on and slept with io_lock held.
  34  * Converted sleep_on to waitqueues with schedule_timeout and made io_lock
  35  * a semaphore from a spinlock.
  36  * by Oliver Neukum <520047054719-0001@t-online.de>
  37  * (02/12/2001)
  38  *
  39  * Identify version on module load.
  40  * (08/04/2001) gb
  41  *
  42  * version 0.7.5
  43  * Fixed potential SMP races with Spinlocks.
  44  * Thanks to Oliver Neukum <oliver.neukum@lrz.uni-muenchen.de> who
  45  * noticed the race conditions.
  46  * (30/10/2000)
  47  *
  48  * Fixed: Setting urb->dev before submitting urb.
  49  * by Greg KH <greg@kroah.com>
  50  * (13/10/2000)
  51  *
  52  * version 0.7.3
  53  * bugfix : The mdc800->state field gets set to READY after the
  54  * the diconnect function sets it to NOT_CONNECTED. This makes the
  55  * driver running like the camera is connected and causes some
  56  * hang ups.
  57  *
  58  * version 0.7.1
  59  * MOD_INC and MOD_DEC are changed in usb_probe to prevent load/unload
  60  * problems when compiled as Module.
  61  * (04/04/2000)
  62  *
  63  * The mdc800 driver gets assigned the USB Minor 32-47. The Registration
  64  * was updated to use these values.
  65  * (26/03/2000)
  66  *
  67  * The Init und Exit Module Function are updated.
  68  * (01/03/2000)
  69  *
  70  * version 0.7.0
  71  * Rewrite of the driver : The driver now uses URB's. The old stuff
  72  * has been removed.
  73  *
  74  * version 0.6.0
  75  * Rewrite of this driver: The Emulation of the rs232 protocoll
  76  * has been removed from the driver. A special executeCommand function
  77  * for this driver is included to gphoto.
  78  * The driver supports two kind of communication to bulk endpoints.
  79  * Either with the dev->bus->ops->bulk... or with callback function.
  80  * (09/11/1999)
  81  *
  82  * version 0.5.0:
  83  * first Version that gets a version number. Most of the needed
  84  * functions work.
  85  * (20/10/1999)
  86  */
  87
  88 #include <linux/sched.h>
  89 #include <linux/signal.h>
  90 #include <linux/spinlock.h>
  91 #include <linux/errno.h>
  92 #include <linux/random.h>
  93 #include <linux/poll.h>
  94 #include <linux/init.h>
  95 #include <linux/slab.h>
  96 #include <linux/module.h>
  97 #include <linux/smp_lock.h>
  98
  99 #include <linux/usb.h>
 100 #include <linux/fs.h>
 101
 102 /*
 103  * Version Information
 104  */
 105 #define DRIVER_VERSION "v0.7.5 (30/10/2000)"
 106 #define DRIVER_AUTHOR "Henning Zabel <henning@uni-paderborn.de>"
 107 #define DRIVER_DESC "USB Driver for Mustek MDC800 Digital Camera"
 108
 109 /* Vendor and Product Information */
 110 #define MDC800_VENDOR_ID        0x055f
 111 #define MDC800_PRODUCT_ID       0xa800
 112
 113 /* Timeouts (msec) */
 114 #define TO_DOWNLOAD_GET_READY           1500
 115 #define TO_DOWNLOAD_GET_BUSY            1500
 116 #define TO_WRITE_GET_READY              1000
 117 #define TO_DEFAULT_COMMAND              5000
 118 #define TO_READ_FROM_IRQ                TO_DEFAULT_COMMAND
 119 #define TO_GET_READY                    TO_DEFAULT_COMMAND
 120
 121 /* Minor Number of the device (create with mknod /dev/mustek c 180 32) */
 122 #define MDC800_DEVICE_MINOR_BASE 32
 123
 124
 125 /**************************************************************************
 126         Data and structs
 127 ***************************************************************************/
 128
 129
 130 typedef enum {
 131         NOT_CONNECTED, READY, WORKING, DOWNLOAD
 132 } mdc800_state;
 133
 134
 135 /* Data for the driver */
 136 struct mdc800_data
 137 {
 138         struct usb_device *     dev;                    // Device Data
 139         mdc800_state            state;
 140
 141         unsigned int            endpoint [4];
 142
 143         struct urb *            irq_urb;
 144         wait_queue_head_t       irq_wait;
 145         int                     irq_woken;
 146         char*                   irq_urb_buffer;
 147
 148         int                     camera_busy;          // is camera busy ?
 149         int                     camera_request_ready; // Status to synchronize with irq
 150         char                    camera_response [8];  // last Bytes send after busy
 151
 152         struct urb *            write_urb;
 153         char*                   write_urb_buffer;
 154         wait_queue_head_t       write_wait;
 155         int                     written;
 156
 157
 158         struct urb *            download_urb;
 159         char*                   download_urb_buffer;
 160         wait_queue_head_t       download_wait;
 161         int                     downloaded;
 162         int                     download_left;          // Bytes left to download ?
 163
 164
 165         /* Device Data */
 166         char                    out [64];       // Answer Buffer
 167         int                     out_ptr;        // Index to the first not readen byte
 168         int                     out_count;      // Bytes in the buffer
 169
 170         int                     open;           // Camera device open ?
 171         struct semaphore        io_lock;        // IO -lock
 172
 173         char                    in [8];         // Command Input Buffer
 174         int                     in_count;
 175
 176         int                     pic_index;      // Cache for the Imagesize (-1 for nothing cached )
 177         int                     pic_len;
 178         int                     minor;
 179 };
 180
 181
 182 /* Specification of the Endpoints */
 183 static struct usb_endpoint_descriptor mdc800_ed [4] =
 184 {
 185         { 0,0, 0x01, 0x02,  8, 0,0,0 },
 186         { 0,0, 0x82, 0x03,  8, 0,0,0 },
 187         { 0,0, 0x03, 0x02, 64, 0,0,0 },
 188         { 0,0, 0x84, 0x02, 64, 0,0,0 }
 189 };
 190
 191
 192 /* The Variable used by the driver */
 193 static struct mdc800_data* mdc800=0;
 194
 195
 196 /***************************************************************************
 197         The USB Part of the driver
 198 ****************************************************************************/
 199
 200 static int mdc800_endpoint_equals (struct usb_endpoint_descriptor *a,struct usb_endpoint_descriptor *b)
 201 {
 202         return (
 203                    ( a->bEndpointAddress == b->bEndpointAddress )
 204                 && ( a->bmAttributes     == b->bmAttributes     )
 205                 && ( a->wMaxPacketSize   == b->wMaxPacketSize   )
 206         );
 207 }
 208
 209
 210 /*
 211  * Checks whether the camera responds busy
 212  */
 213 static int mdc800_isBusy (char* ch)
 214 {
 215         int i=0;
 216         while (i<8)
 217         {
 218                 if (ch [i] != (char)0x99)
 219                         return 0;
 220                 i++;
 221         }
 222         return 1;
 223 }
 224
 225
 226 /*
 227  * Checks whether the Camera is ready
 228  */
 229 static int mdc800_isReady (char *ch)
 230 {
 231         int i=0;
 232         while (i<8)
 233         {
 234                 if (ch [i] != (char)0xbb)
 235                         return 0;
 236                 i++;
 237         }
 238         return 1;
 239 }
 240
 241
 242
 243 /*
 244  * USB IRQ Handler for InputLine
 245  */
 246 static void mdc800_usb_irq (struct urb *urb, struct pt_regs *res)
 247 {
 248         int data_received=0, wake_up;
 249         unsigned char* b=urb->transfer_buffer;
 250         struct mdc800_data* mdc800=urb->context;
 251
 252         if (urb->status >= 0)
 253         {
 254
 255                 //dbg ("%i %i %i %i %i %i %i %i \n",b[0],b[1],b[2],b[3],b[4],b[5],b[6],b[7]);
 256
 257                 if (mdc800_isBusy (b))
 258                 {
 259                         if (!mdc800->camera_busy)
 260                         {
 261                                 mdc800->camera_busy=1;
 262                                 dbg ("gets busy");
 263                         }
 264                 }
 265                 else
 266                 {
 267                         if (mdc800->camera_busy && mdc800_isReady (b))
 268                         {
 269                                 mdc800->camera_busy=0;
 270                                 dbg ("gets ready");
 271                         }
 272                 }
 273                 if (!(mdc800_isBusy (b) || mdc800_isReady (b)))
 274                 {
 275                         /* Store Data in camera_answer field */
 276                         dbg ("%i %i %i %i %i %i %i %i ",b[0],b[1],b[2],b[3],b[4],b[5],b[6],b[7]);
 277
 278                         memcpy (mdc800->camera_response,b,8);
 279                         data_received=1;
 280                 }
 281         }
 282         wake_up= ( mdc800->camera_request_ready > 0 )
 283                 &&
 284                 (
 285                         ((mdc800->camera_request_ready == 1) && (!mdc800->camera_busy))
 286                 ||
 287                         ((mdc800->camera_request_ready == 2) && data_received)
 288                 ||
 289                         ((mdc800->camera_request_ready == 3) && (mdc800->camera_busy))
 290                 ||
 291                         (urb->status < 0)
 292                 );
 293
 294         if (wake_up)
 295         {
 296                 mdc800->camera_request_ready=0;
 297                 mdc800->irq_woken=1;
 298                 wake_up_interruptible (&mdc800->irq_wait);
 299         }
 300 }
 301
 302
 303 /*
 304  * Waits a while until the irq responds that camera is ready
 305  *
 306  *  mode : 0: Wait for camera gets ready
 307  *         1: Wait for receiving data
 308  *         2: Wait for camera gets busy
 309  *
 310  * msec: Time to wait
 311  */
 312 static int mdc800_usb_waitForIRQ (int mode, int msec)
 313 {
 314         DECLARE_WAITQUEUE(wait, current);
 315
 316         mdc800->camera_request_ready=1+mode;
 317
 318         add_wait_queue(&mdc800->irq_wait, &wait);
 319         set_current_state(TASK_INTERRUPTIBLE);
 320         if (!mdc800->irq_woken)
 321         {
 322                 schedule_timeout (msec*HZ/1000);
 323         }
 324         remove_wait_queue(&mdc800->irq_wait, &wait);
 325         set_current_state(TASK_RUNNING);
 326         mdc800->irq_woken = 0;
 327
 328         if (mdc800->camera_request_ready>0)
 329         {
 330                 mdc800->camera_request_ready=0;
 331                 err ("timeout waiting for camera.");
 332                 return -1;
 333         }
 334
 335         if (mdc800->state == NOT_CONNECTED)
 336         {
 337                 warn ("Camera gets disconnected during waiting for irq.");
 338                 mdc800->camera_request_ready=0;
 339                 return -2;
 340         }
 341
 342         return 0;
 343 }
 344
 345
 346 /*
 347  * The write_urb callback function
 348  */
 349 static void mdc800_usb_write_notify (struct urb *urb, struct pt_regs *res)
 350 {
 351         struct mdc800_data* mdc800=urb->context;
 352
 353         if (urb->status != 0)
 354         {
 355                 err ("writing command fails (status=%i)", urb->status);
 356         }
 357         else
 358         {
 359                 mdc800->state=READY;
 360         }
 361         mdc800->written = 1;
 362         wake_up_interruptible (&mdc800->write_wait);
 363 }
 364
 365
 366 /*
 367  * The download_urb callback function
 368  */
 369 static void mdc800_usb_download_notify (struct urb *urb, struct pt_regs *res)
 370 {
 371         struct mdc800_data* mdc800=urb->context;
 372
 373         if (urb->status == 0)
 374         {
 375                 /* Fill output buffer with these data */
 376                 memcpy (mdc800->out,  urb->transfer_buffer, 64);
 377                 mdc800->out_count=64;
 378                 mdc800->out_ptr=0;
 379                 mdc800->download_left-=64;
 380                 if (mdc800->download_left == 0)
 381                 {
 382                         mdc800->state=READY;
 383                 }
 384         }
 385         else
 386         {
 387                 err ("request bytes fails (status:%i)", urb->status);
 388         }
 389         mdc800->downloaded = 1;
 390         wake_up_interruptible (&mdc800->download_wait);
 391 }
 392
 393
 394 /***************************************************************************
 395         Probing for the Camera
 396  ***************************************************************************/
 397
 398 static struct usb_driver mdc800_usb_driver;
 399 static struct file_operations mdc800_device_ops;
 400 static struct usb_class_driver mdc800_class = {
 401         .name =         "usb/mdc800%d",
 402         .fops =         &mdc800_device_ops,
 403         .mode =         S_IFCHR | S_IRUSR | S_IWUSR | S_IRGRP | S_IWGRP,
 404         .minor_base =   MDC800_DEVICE_MINOR_BASE,
 405 };
 406
 407
 408 /*
 409  * Callback to search the Mustek MDC800 on the USB Bus
 410  */
 411 static int mdc800_usb_probe (struct usb_interface *intf,
 412                                const struct usb_device_id *id)
 413 {
 414         int i,j;
 415         struct usb_host_interface *intf_desc;
 416         struct usb_device *dev = interface_to_usbdev (intf);
 417         int irq_interval=0;
 418         int retval;
 419
 420         dbg ("(mdc800_usb_probe) called.");
 421
 422
 423         if (mdc800->dev != 0)
 424         {
 425                 warn ("only one Mustek MDC800 is supported.");
 426                 return -ENODEV;
 427         }
 428
 429         if (dev->descriptor.bNumConfigurations != 1)
 430         {
 431                 err ("probe fails -> wrong Number of Configuration");
 432                 return -ENODEV;
 433         }
 434         intf_desc = intf->cur_altsetting;
 435
 436         if (
 437                         ( intf_desc->desc.bInterfaceClass != 0xff )
 438                 ||      ( intf_desc->desc.bInterfaceSubClass != 0 )
 439                 || ( intf_desc->desc.bInterfaceProtocol != 0 )
 440                 || ( intf_desc->desc.bNumEndpoints != 4)
 441         )
 442         {
 443                 err ("probe fails -> wrong Interface");
 444                 return -ENODEV;
 445         }
 446
 447         /* Check the Endpoints */
 448         for (i=0; i<4; i++)
 449         {
 450                 mdc800->endpoint[i]=-1;
 451                 for (j=0; j<4; j++)
 452                 {
 453                         if (mdc800_endpoint_equals (&intf_desc->endpoint [j].desc,&mdc800_ed [i]))
 454                         {
 455                                 mdc800->endpoint[i]=intf_desc->endpoint [j].desc.bEndpointAddress ;
 456                                 if (i==1)
 457                                 {
 458                                         irq_interval=intf_desc->endpoint [j].desc.bInterval;
 459                                 }
 460
 461                                 continue;
 462                         }
 463                 }
 464                 if (mdc800->endpoint[i] == -1)
 465                 {
 466                         err ("probe fails -> Wrong Endpoints.");
 467                         return -ENODEV;
 468                 }
 469         }
 470
 471
 472         info ("Found Mustek MDC800 on USB.");
 473
 474         down (&mdc800->io_lock);
 475
 476         retval = usb_register_dev(intf, &mdc800_class);
 477         if (retval) {
 478                 err ("Not able to get a minor for this device.");
 479                 return -ENODEV;
 480         }
 481
 482         mdc800->dev=dev;
 483         mdc800->open=0;
 484
 485         /* Setup URB Structs */
 486         usb_fill_int_urb (
 487                 mdc800->irq_urb,
 488                 mdc800->dev,
 489                 usb_rcvintpipe (mdc800->dev,mdc800->endpoint [1]),
 490                 mdc800->irq_urb_buffer,
 491                 8,
 492                 mdc800_usb_irq,
 493                 mdc800,
 494                 irq_interval
 495         );
 496
 497         usb_fill_bulk_urb (
 498                 mdc800->write_urb,
 499                 mdc800->dev,
 500                 usb_sndbulkpipe (mdc800->dev, mdc800->endpoint[0]),
 501                 mdc800->write_urb_buffer,
 502                 8,
 503                 mdc800_usb_write_notify,
 504                 mdc800
 505         );
 506
 507         usb_fill_bulk_urb (
 508                 mdc800->download_urb,
 509                 mdc800->dev,
 510                 usb_rcvbulkpipe (mdc800->dev, mdc800->endpoint [3]),
 511                 mdc800->download_urb_buffer,
 512                 64,
 513                 mdc800_usb_download_notify,
 514                 mdc800
 515         );
 516
 517         mdc800->state=READY;
 518
 519         up (&mdc800->io_lock);
 520
 521         usb_set_intfdata(intf, mdc800);
 522         return 0;
 523 }
 524
 525
 526 /*
 527  * Disconnect USB device (maybe the MDC800)
 528  */
 529 static void mdc800_usb_disconnect (struct usb_interface *intf)
 530 {
 531         struct mdc800_data* mdc800 = usb_get_intfdata(intf);
 532
 533         dbg ("(mdc800_usb_disconnect) called");
 534
 535         if (mdc800) {
 536                 if (mdc800->state == NOT_CONNECTED)
 537                         return;
 538
 539                 usb_deregister_dev(intf, &mdc800_class);
 540
 541                 mdc800->state=NOT_CONNECTED;
 542
 543                 usb_unlink_urb (mdc800->irq_urb);
 544                 usb_unlink_urb (mdc800->write_urb);
 545                 usb_unlink_urb (mdc800->download_urb);
 546
 547                 mdc800->dev=0;
 548                 usb_set_intfdata(intf, NULL);
 549         }
 550         info ("Mustek MDC800 disconnected from USB.");
 551 }
 552
 553
 554 /***************************************************************************
 555         The Misc device Part (file_operations)
 556 ****************************************************************************/
 557
 558 /*
 559  * This Function calc the Answersize for a command.
 560  */
 561 static int mdc800_getAnswerSize (char command)
 562 {
 563         switch ((unsigned char) command)
 564         {
 565                 case 0x2a:
 566                 case 0x49:
 567                 case 0x51:
 568                 case 0x0d:
 569                 case 0x20:
 570                 case 0x07:
 571                 case 0x01:
 572                 case 0x25:
 573                 case 0x00:
 574                         return 8;
 575
 576                 case 0x05:
 577                 case 0x3e:
 578                         return mdc800->pic_len;
 579
 580                 case 0x09:
 581                         return 4096;
 582
 583                 default:
 584                         return 0;
 585         }
 586 }
 587
 588
 589 /*
 590  * Init the device: (1) alloc mem (2) Increase MOD Count ..
 591  */
 592 static int mdc800_device_open (struct inode* inode, struct file *file)
 593 {
 594         int retval=0;
 595         int errn=0;
 596
 597         down (&mdc800->io_lock);
 598
 599         if (mdc800->state == NOT_CONNECTED)
 600         {
 601                 errn=-EBUSY;
 602                 goto error_out;
 603         }
 604         if (mdc800->open)
 605         {
 606                 errn=-EBUSY;
 607                 goto error_out;
 608         }
 609
 610         mdc800->in_count=0;
 611         mdc800->out_count=0;
 612         mdc800->out_ptr=0;
 613         mdc800->pic_index=0;
 614         mdc800->pic_len=-1;
 615         mdc800->download_left=0;
 616
 617         mdc800->camera_busy=0;
 618         mdc800->camera_request_ready=0;
 619
 620         retval=0;
 621         mdc800->irq_urb->dev = mdc800->dev;
 622         if (usb_submit_urb (mdc800->irq_urb, GFP_KERNEL))
 623         {
 624                 err ("request USB irq fails (submit_retval=%i urb_status=%i).",retval, mdc800->irq_urb->status);
 625                 errn = -EIO;
 626                 goto error_out;
 627         }
 628
 629         mdc800->open=1;
 630         dbg ("Mustek MDC800 device opened.");
 631
 632 error_out:
 633         up (&mdc800->io_lock);
 634         return errn;
 635 }
 636
 637
 638 /*
 639  * Close the Camera and release Memory
 640  */
 641 static int mdc800_device_release (struct inode* inode, struct file *file)
 642 {
 643         int retval=0;
 644         dbg ("Mustek MDC800 device closed.");
 645
 646         down (&mdc800->io_lock);
 647         if (mdc800->open && (mdc800->state != NOT_CONNECTED))
 648         {
 649                 usb_unlink_urb (mdc800->irq_urb);
 650                 usb_unlink_urb (mdc800->write_urb);
 651                 usb_unlink_urb (mdc800->download_urb);
 652                 mdc800->open=0;
 653         }
 654         else
 655         {
 656                 retval=-EIO;
 657         }
 658
 659         up(&mdc800->io_lock);
 660         return retval;
 661 }
 662
 663
 664 /*
 665  * The Device read callback Function
 666  */
 667 static ssize_t mdc800_device_read (struct file *file, char *buf, size_t len, loff_t *pos)
 668 {
 669         size_t left=len, sts=len; /* single transfer size */
 670         char* ptr=buf;
 671         DECLARE_WAITQUEUE(wait, current);
 672
 673         down (&mdc800->io_lock);
 674         if (mdc800->state == NOT_CONNECTED)
 675         {
 676                 up (&mdc800->io_lock);
 677                 return -EBUSY;
 678         }
 679         if (mdc800->state == WORKING)
 680         {
 681                 warn ("Illegal State \"working\" reached during read ?!");
 682                 up (&mdc800->io_lock);
 683                 return -EBUSY;
 684         }
 685         if (!mdc800->open)
 686         {
 687                 up (&mdc800->io_lock);
 688                 return -EBUSY;
 689         }
 690
 691         while (left)
 692         {
 693                 if (signal_pending (current))
 694                 {
 695                         up (&mdc800->io_lock);
 696                         return -EINTR;
 697                 }
 698
 699                 sts=left > (mdc800->out_count-mdc800->out_ptr)?mdc800->out_count-mdc800->out_ptr:left;
 700
 701                 if (sts <= 0)
 702                 {
 703                         /* Too less Data in buffer */
 704                         if (mdc800->state == DOWNLOAD)
 705                         {
 706                                 mdc800->out_count=0;
 707                                 mdc800->out_ptr=0;
 708
 709                                 /* Download -> Request new bytes */
 710                                 mdc800->download_urb->dev = mdc800->dev;
 711                                 if (usb_submit_urb (mdc800->download_urb, GFP_KERNEL))
 712                                 {
 713                                         err ("Can't submit download urb (status=%i)",mdc800->download_urb->status);
 714                                         up (&mdc800->io_lock);
 715                                         return len-left;
 716                                 }
 717                                 add_wait_queue(&mdc800->download_wait, &wait);
 718                                 set_current_state(TASK_INTERRUPTIBLE);
 719                                 if (!mdc800->downloaded)
 720                                 {
 721                                         schedule_timeout (TO_DOWNLOAD_GET_READY*HZ/1000);
 722                                 }
 723                                 set_current_state(TASK_RUNNING);
 724                                 remove_wait_queue(&mdc800->download_wait, &wait);
 725                                 mdc800->downloaded = 0;
 726                                 if (mdc800->download_urb->status != 0)
 727                                 {
 728                                         err ("request download-bytes fails (status=%i)",mdc800->download_urb->status);
 729                                         up (&mdc800->io_lock);
 730                                         return len-left;
 731                                 }
 732                         }
 733                         else
 734                         {
 735                                 /* No more bytes -> that's an error*/
 736                                 up (&mdc800->io_lock);
 737                                 return -EIO;
 738                         }
 739                 }
 740                 else
 741                 {
 742                         /* Copy Bytes */
 743                         if (copy_to_user(ptr, &mdc800->out [mdc800->out_ptr],
 744                                                 sts)) {
 745                                 up(&mdc800->io_lock);
 746                                 return -EFAULT;
 747                         }
 748                         ptr+=sts;
 749                         left-=sts;
 750                         mdc800->out_ptr+=sts;
 751                 }
 752         }
 753
 754         up (&mdc800->io_lock);
 755         return len-left;
 756 }
 757
 758
 759 /*
 760  * The Device write callback Function
 761  * If a 8Byte Command is received, it will be send to the camera.
 762  * After this the driver initiates the request for the answer or
 763  * just waits until the camera becomes ready.
 764  */
 765 static ssize_t mdc800_device_write (struct file *file, const char *buf, size_t len, loff_t *pos)
 766 {
 767         size_t i=0;
 768         DECLARE_WAITQUEUE(wait, current);
 769
 770         down (&mdc800->io_lock);
 771         if (mdc800->state != READY)
 772         {
 773                 up (&mdc800->io_lock);
 774                 return -EBUSY;
 775         }
 776         if (!mdc800->open )
 777         {
 778                 up (&mdc800->io_lock);
 779                 return -EBUSY;
 780         }
 781
 782         while (i<len)
 783         {
 784                 unsigned char c;
 785                 if (signal_pending (current))
 786                 {
 787                         up (&mdc800->io_lock);
 788                         return -EINTR;
 789                 }
 790
 791                 if(get_user(c, buf+i))
 792                 {
 793                         up(&mdc800->io_lock);
 794                         return -EFAULT;
 795                 }
 796
 797                 /* check for command start */
 798                 if (c == 0x55)
 799                 {
 800                         mdc800->in_count=0;
 801                         mdc800->out_count=0;
 802                         mdc800->out_ptr=0;
 803                         mdc800->download_left=0;
 804                 }
 805
 806                 /* save command byte */
 807                 if (mdc800->in_count < 8)
 808                 {
 809                         mdc800->in[mdc800->in_count] = c;
 810                         mdc800->in_count++;
 811                 }
 812                 else
 813                 {
 814                         up (&mdc800->io_lock);
 815                         return -EIO;
 816                 }
 817
 818                 /* Command Buffer full ? -> send it to camera */
 819                 if (mdc800->in_count == 8)
 820                 {
 821                         int answersize;
 822
 823                         if (mdc800_usb_waitForIRQ (0,TO_GET_READY))
 824                         {
 825                                 err ("Camera didn't get ready.\n");
 826                                 up (&mdc800->io_lock);
 827                                 return -EIO;
 828                         }
 829
 830                         answersize=mdc800_getAnswerSize (mdc800->in[1]);
 831
 832                         mdc800->state=WORKING;
 833                         memcpy (mdc800->write_urb->transfer_buffer, mdc800->in,8);
 834                         mdc800->write_urb->dev = mdc800->dev;
 835                         if (usb_submit_urb (mdc800->write_urb, GFP_KERNEL))
 836                         {
 837                                 err ("submitting write urb fails (status=%i)", mdc800->write_urb->status);
 838                                 up (&mdc800->io_lock);
 839                                 return -EIO;
 840                         }
 841                         add_wait_queue(&mdc800->write_wait, &wait);
 842                         set_current_state(TASK_INTERRUPTIBLE);
 843                         if (!mdc800->written)
 844                         {
 845                                 schedule_timeout (TO_WRITE_GET_READY*HZ/1000);
 846                         }
 847                         set_current_state(TASK_RUNNING);
 848                         remove_wait_queue(&mdc800->write_wait, &wait);
 849                         mdc800->written = 0;
 850                         if (mdc800->state == WORKING)
 851                         {
 852                                 usb_unlink_urb (mdc800->write_urb);
 853                                 up (&mdc800->io_lock);
 854                                 return -EIO;
 855                         }
 856
 857                         switch ((unsigned char) mdc800->in[1])
 858                         {
 859                                 case 0x05: /* Download Image */
 860                                 case 0x3e: /* Take shot in Fine Mode (WCam Mode) */
 861                                         if (mdc800->pic_len < 0)
 862                                         {
 863                                                 err ("call 0x07 before 0x05,0x3e");
 864                                                 mdc800->state=READY;
 865                                                 up (&mdc800->io_lock);
 866                                                 return -EIO;
 867                                         }
 868                                         mdc800->pic_len=-1;
 869
 870                                 case 0x09: /* Download Thumbnail */
 871                                         mdc800->download_left=answersize+64;
 872                                         mdc800->state=DOWNLOAD;
 873                                         mdc800_usb_waitForIRQ (0,TO_DOWNLOAD_GET_BUSY);
 874                                         break;
 875
 876
 877                                 default:
 878                                         if (answersize)
 879                                         {
 880
 881                                                 if (mdc800_usb_waitForIRQ (1,TO_READ_FROM_IRQ))
 882                                                 {
 883                                                         err ("requesting answer from irq fails");
 884                                                         up (&mdc800->io_lock);
 885                                                         return -EIO;
 886                                                 }
 887
 888                                                 /* Write dummy data, (this is ugly but part of the USB Protocol */
 889                                                 /* if you use endpoint 1 as bulk and not as irq) */
 890                                                 memcpy (mdc800->out, mdc800->camera_response,8);
 891
 892                                                 /* This is the interpreted answer */
 893                                                 memcpy (&mdc800->out[8], mdc800->camera_response,8);
 894
 895                                                 mdc800->out_ptr=0;
 896                                                 mdc800->out_count=16;
 897
 898                                                 /* Cache the Imagesize, if command was getImageSize */
 899                                                 if (mdc800->in [1] == (char) 0x07)
 900                                                 {
 901                                                         mdc800->pic_len=(int) 65536*(unsigned char) mdc800->camera_response[0]+256*(unsigned char) mdc800->camera_response[1]+(unsigned char) mdc800->camera_response[2];
 902
 903                                                         dbg ("cached imagesize = %i",mdc800->pic_len);
 904                                                 }
 905
 906                                         }
 907                                         else
 908                                         {
 909                                                 if (mdc800_usb_waitForIRQ (0,TO_DEFAULT_COMMAND))
 910                                                 {
 911                                                         err ("Command Timeout.");
 912                                                         up (&mdc800->io_lock);
 913                                                         return -EIO;
 914                                                 }
 915                                         }
 916                                         mdc800->state=READY;
 917                                         break;
 918                         }
 919                 }
 920                 i++;
 921         }
 922         up (&mdc800->io_lock);
 923         return i;
 924 }
 925
 926
 927 /***************************************************************************
 928         Init and Cleanup this driver (Structs and types)
 929 ****************************************************************************/
 930
 931 /* File Operations of this drivers */
 932 static struct file_operations mdc800_device_ops =
 933 {
 934         .owner =        THIS_MODULE,
 935         .read =         mdc800_device_read,
 936         .write =        mdc800_device_write,
 937         .open =         mdc800_device_open,
 938         .release =      mdc800_device_release,
 939 };
 940
 941
 942
 943 static struct usb_device_id mdc800_table [] = {
 944         { USB_DEVICE(MDC800_VENDOR_ID, MDC800_PRODUCT_ID) },
 945         { }                                             /* Terminating entry */
 946 };
 947
 948 MODULE_DEVICE_TABLE (usb, mdc800_table);
 949 /*
 950  * USB Driver Struct for this device
 951  */
 952 static struct usb_driver mdc800_usb_driver =
 953 {
 954         .owner =        THIS_MODULE,
 955         .name =         "mdc800",
 956         .probe =        mdc800_usb_probe,
 957         .disconnect =   mdc800_usb_disconnect,
 958         .id_table =     mdc800_table
 959 };
 960
 961
 962
 963 /************************************************************************
 964         Init and Cleanup this driver (Main Functions)
 965 *************************************************************************/
 966
 967 #define try(A)           if ((A) == 0) goto cleanup_on_fail;
 968 #define try_free_mem(A)  if (A != 0) { kfree (A); A=0; }
 969 #define try_free_urb(A)  if (A != 0) { usb_free_urb (A); A=0; }
 970
 971 static int __init usb_mdc800_init (void)
 972 {
 973         int retval = -ENODEV;
 974         /* Allocate Memory */
 975         try (mdc800=kmalloc (sizeof (struct mdc800_data), GFP_KERNEL));
 976
 977         memset(mdc800, 0, sizeof(struct mdc800_data));
 978         mdc800->dev=0;
 979         mdc800->open=0;
 980         mdc800->state=NOT_CONNECTED;
 981         init_MUTEX (&mdc800->io_lock);
 982
 983         init_waitqueue_head (&mdc800->irq_wait);
 984         init_waitqueue_head (&mdc800->write_wait);
 985         init_waitqueue_head (&mdc800->download_wait);
 986
 987         mdc800->irq_woken = 0;
 988         mdc800->downloaded = 0;
 989         mdc800->written = 0;
 990
 991         try (mdc800->irq_urb_buffer=kmalloc (8, GFP_KERNEL));
 992         try (mdc800->write_urb_buffer=kmalloc (8, GFP_KERNEL));
 993         try (mdc800->download_urb_buffer=kmalloc (64, GFP_KERNEL));
 994
 995         try (mdc800->irq_urb=usb_alloc_urb (0, GFP_KERNEL));
 996         try (mdc800->download_urb=usb_alloc_urb (0, GFP_KERNEL));
 997         try (mdc800->write_urb=usb_alloc_urb (0, GFP_KERNEL));
 998
 999         /* Register the driver */
1000         retval = usb_register(&mdc800_usb_driver);
1001         if (retval)
1002                 goto cleanup_on_fail;
1003
1004         info (DRIVER_VERSION ":" DRIVER_DESC);
1005
1006         return 0;
1007
1008         /* Clean driver up, when something fails */
1009
1010 cleanup_on_fail:
1011
1012         if (mdc800 != 0)
1013         {
1014                 err ("can't alloc memory!");
1015
1016                 try_free_mem (mdc800->download_urb_buffer);
1017                 try_free_mem (mdc800->write_urb_buffer);
1018                 try_free_mem (mdc800->irq_urb_buffer);
1019
1020                 try_free_urb (mdc800->write_urb);
1021                 try_free_urb (mdc800->download_urb);
1022                 try_free_urb (mdc800->irq_urb);
1023
1024                 kfree (mdc800);
1025         }
1026         mdc800=0;
1027         return retval;
1028 }
1029
1030
1031 static void __exit usb_mdc800_cleanup (void)
1032 {
1033         usb_deregister (&mdc800_usb_driver);
1034
1035         usb_free_urb (mdc800->irq_urb);
1036         usb_free_urb (mdc800->download_urb);
1037         usb_free_urb (mdc800->write_urb);
1038
1039         kfree (mdc800->irq_urb_buffer);
1040         kfree (mdc800->write_urb_buffer);
1041         kfree (mdc800->download_urb_buffer);
1042
1043         kfree (mdc800);
1044         mdc800=0;
1045 }
1046
1047 module_init (usb_mdc800_init);
1048 module_exit (usb_mdc800_cleanup);
1049
1050 MODULE_AUTHOR( DRIVER_AUTHOR );
1051 MODULE_DESCRIPTION( DRIVER_DESC );
1052 MODULE_LICENSE("GPL");
1053