1 // SPDX-License-Identifier: GPL-2.0+
3 * Most of this source has been derived from the Linux USB
5 * (c) 1999-2002 Matthew Dharm (mdharm-usb@one-eyed-alien.net)
6 * (c) 2000 David L. Brown, Jr. (usb-storage@davidb.org)
7 * (c) 1999 Michael Gee (michael@linuxspecific.com)
8 * (c) 2000 Yggdrasil Computing, Inc.
12 * (C) Copyright 2001 Denis Peter, MPL AG Switzerland
13 * Driver model conversion:
14 * (C) Copyright 2015 Google, Inc
16 * For BBB support (C) Copyright 2003
17 * Gary Jennejohn, DENX Software Engineering <garyj@denx.de>
19 * BBB support based on /sys/dev/usb/umass.c from
24 * Currently only the CBI transport protocoll has been implemented, and it
25 * is only tested with a TEAC USB Floppy. Other Massstorages with CBI or CB
26 * transport protocoll may work as well.
30 * Support for USB Mass Storage Devices (BBB) has been added. It has
31 * only been tested with USB memory sticks.
42 #include <asm/byteorder.h>
43 #include <asm/processor.h>
44 #include <dm/device-internal.h>
50 #undef BBB_COMDAT_TRACE
51 #undef BBB_XPORT_TRACE
54 /* direction table -- this indicates the direction of the data
55 * transfer for each command code -- a 1 indicates input
57 static const unsigned char us_direction[256/8] = {
58 0x28, 0x81, 0x14, 0x14, 0x20, 0x01, 0x90, 0x77,
59 0x0C, 0x20, 0x00, 0x04, 0x00, 0x00, 0x00, 0x00,
60 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0x00, 0x01,
61 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
63 #define US_DIRECTION(x) ((us_direction[x>>3] >> (x & 7)) & 1)
65 static struct scsi_cmd usb_ccb __aligned(ARCH_DMA_MINALIGN);
68 static int usb_max_devs; /* number of highest available usb device */
71 static struct blk_desc usb_dev_desc[USB_MAX_STOR_DEV];
75 typedef int (*trans_cmnd)(struct scsi_cmd *cb, struct us_data *data);
76 typedef int (*trans_reset)(struct us_data *data);
79 struct usb_device *pusb_dev; /* this usb_device */
81 unsigned int flags; /* from filter initially */
82 # define USB_READY (1 << 0)
83 unsigned char ifnum; /* interface number */
84 unsigned char ep_in; /* in endpoint */
85 unsigned char ep_out; /* out ....... */
86 unsigned char ep_int; /* interrupt . */
87 unsigned char subclass; /* as in overview */
88 unsigned char protocol; /* .............. */
89 unsigned char attention_done; /* force attn on first cmd */
90 unsigned short ip_data; /* interrupt data */
91 int action; /* what to do */
92 int ip_wanted; /* needed */
93 int *irq_handle; /* for USB int requests */
94 unsigned int irqpipe; /* pipe for release_irq */
95 unsigned char irqmaxp; /* max packed for irq Pipe */
96 unsigned char irqinterval; /* Intervall for IRQ Pipe */
97 struct scsi_cmd *srb; /* current srb */
98 trans_reset transport_reset; /* reset routine */
99 trans_cmnd transport; /* transport routine */
100 unsigned short max_xfer_blk; /* maximum transfer blocks */
104 static struct us_data usb_stor[USB_MAX_STOR_DEV];
107 #define USB_STOR_TRANSPORT_GOOD 0
108 #define USB_STOR_TRANSPORT_FAILED -1
109 #define USB_STOR_TRANSPORT_ERROR -2
111 int usb_stor_get_info(struct usb_device *dev, struct us_data *us,
112 struct blk_desc *dev_desc);
113 int usb_storage_probe(struct usb_device *dev, unsigned int ifnum,
116 static unsigned long usb_stor_read(struct udevice *dev, lbaint_t blknr,
117 lbaint_t blkcnt, void *buffer);
118 static unsigned long usb_stor_write(struct udevice *dev, lbaint_t blknr,
119 lbaint_t blkcnt, const void *buffer);
121 static unsigned long usb_stor_read(struct blk_desc *block_dev, lbaint_t blknr,
122 lbaint_t blkcnt, void *buffer);
123 static unsigned long usb_stor_write(struct blk_desc *block_dev, lbaint_t blknr,
124 lbaint_t blkcnt, const void *buffer);
126 void uhci_show_temp_int_td(void);
128 static void usb_show_progress(void)
133 /*******************************************************************************
134 * show info on storage devices; 'usb start/init' must be invoked earlier
135 * as we only retrieve structures populated during devices initialization
137 int usb_stor_info(void)
143 for (blk_first_device(IF_TYPE_USB, &dev);
145 blk_next_device(&dev)) {
146 struct blk_desc *desc = dev_get_uclass_platdata(dev);
148 printf(" Device %d: ", desc->devnum);
155 if (usb_max_devs > 0) {
156 for (i = 0; i < usb_max_devs; i++) {
157 printf(" Device %d: ", i);
158 dev_print(&usb_dev_desc[i]);
164 printf("No storage devices, perhaps not 'usb start'ed..?\n");
171 static unsigned int usb_get_max_lun(struct us_data *us)
174 ALLOC_CACHE_ALIGN_BUFFER(unsigned char, result, 1);
175 len = usb_control_msg(us->pusb_dev,
176 usb_rcvctrlpipe(us->pusb_dev, 0),
178 USB_TYPE_CLASS | USB_RECIP_INTERFACE | USB_DIR_IN,
180 result, sizeof(char),
181 USB_CNTL_TIMEOUT * 5);
182 debug("Get Max LUN -> len = %i, result = %i\n", len, (int) *result);
183 return (len > 0) ? *result : 0;
186 static int usb_stor_probe_device(struct usb_device *udev)
191 struct us_data *data;
197 return -ENOENT; /* no more devices available */
200 debug("\n\nProbing for storage\n");
203 * We store the us_data in the mass storage device's platdata. It
204 * is shared by all LUNs (block devices) attached to this mass storage
207 data = dev_get_platdata(udev->dev);
208 if (!usb_storage_probe(udev, 0, data))
210 max_lun = usb_get_max_lun(data);
211 for (lun = 0; lun <= max_lun; lun++) {
212 struct blk_desc *blkdev;
216 snprintf(str, sizeof(str), "lun%d", lun);
217 ret = blk_create_devicef(udev->dev, "usb_storage_blk", str,
218 IF_TYPE_USB, usb_max_devs, 512, 0,
221 debug("Cannot bind driver\n");
225 blkdev = dev_get_uclass_platdata(dev);
226 blkdev->target = 0xff;
229 ret = usb_stor_get_info(udev, data, blkdev);
231 ret = blk_prepare_device(dev);
234 debug("%s: Found device %p\n", __func__, udev);
236 debug("usb_stor_get_info: Invalid device\n");
237 ret = device_unbind(dev);
243 /* We don't have space to even probe if we hit the maximum */
244 if (usb_max_devs == USB_MAX_STOR_DEV) {
245 printf("max USB Storage Device reached: %d stopping\n",
250 if (!usb_storage_probe(udev, 0, &usb_stor[usb_max_devs]))
254 * OK, it's a storage device. Iterate over its LUNs and populate
257 start = usb_max_devs;
259 max_lun = usb_get_max_lun(&usb_stor[usb_max_devs]);
260 for (lun = 0; lun <= max_lun && usb_max_devs < USB_MAX_STOR_DEV;
262 struct blk_desc *blkdev;
264 blkdev = &usb_dev_desc[usb_max_devs];
265 memset(blkdev, '\0', sizeof(struct blk_desc));
266 blkdev->if_type = IF_TYPE_USB;
267 blkdev->devnum = usb_max_devs;
268 blkdev->part_type = PART_TYPE_UNKNOWN;
269 blkdev->target = 0xff;
270 blkdev->type = DEV_TYPE_UNKNOWN;
271 blkdev->block_read = usb_stor_read;
272 blkdev->block_write = usb_stor_write;
276 if (usb_stor_get_info(udev, &usb_stor[start],
277 &usb_dev_desc[usb_max_devs]) == 1) {
278 debug("partype: %d\n", blkdev->part_type);
280 debug("partype: %d\n", blkdev->part_type);
282 debug("%s: Found device %p\n", __func__, udev);
290 void usb_stor_reset(void)
295 /*******************************************************************************
296 * scan the usb and reports device info
297 * to the user if mode = 1
298 * returns current device or -1 if no
300 int usb_stor_scan(int mode)
303 printf(" scanning usb for storage devices... ");
305 #ifndef CONFIG_DM_USB
308 usb_disable_asynch(1); /* asynch transfer not allowed */
311 for (i = 0; i < USB_MAX_DEVICE; i++) {
312 struct usb_device *dev;
314 dev = usb_get_dev_index(i); /* get device */
316 if (usb_stor_probe_device(dev))
320 usb_disable_asynch(0); /* asynch transfer allowed */
322 printf("%d Storage Device(s) found\n", usb_max_devs);
323 if (usb_max_devs > 0)
328 static int usb_stor_irq(struct usb_device *dev)
331 us = (struct us_data *)dev->privptr;
341 static void usb_show_srb(struct scsi_cmd *pccb)
344 printf("SRB: len %d datalen 0x%lX\n ", pccb->cmdlen, pccb->datalen);
345 for (i = 0; i < 12; i++)
346 printf("%02X ", pccb->cmd[i]);
350 static void display_int_status(unsigned long tmp)
352 printf("Status: %s %s %s %s %s %s %s\n",
353 (tmp & USB_ST_ACTIVE) ? "Active" : "",
354 (tmp & USB_ST_STALLED) ? "Stalled" : "",
355 (tmp & USB_ST_BUF_ERR) ? "Buffer Error" : "",
356 (tmp & USB_ST_BABBLE_DET) ? "Babble Det" : "",
357 (tmp & USB_ST_NAK_REC) ? "NAKed" : "",
358 (tmp & USB_ST_CRC_ERR) ? "CRC Error" : "",
359 (tmp & USB_ST_BIT_ERR) ? "Bitstuff Error" : "");
362 /***********************************************************************
363 * Data transfer routines
364 ***********************************************************************/
366 static int us_one_transfer(struct us_data *us, int pipe, char *buf, int length)
375 /* determine the maximum packet size for these transfers */
376 max_size = usb_maxpacket(us->pusb_dev, pipe) * 16;
378 /* while we have data left to transfer */
381 /* calculate how long this will be -- maximum or a remainder */
382 this_xfer = length > max_size ? max_size : length;
385 /* setup the retry counter */
388 /* set up the transfer loop */
390 /* transfer the data */
391 debug("Bulk xfer 0x%lx(%d) try #%d\n",
392 (ulong)map_to_sysmem(buf), this_xfer,
394 result = usb_bulk_msg(us->pusb_dev, pipe, buf,
396 USB_CNTL_TIMEOUT * 5);
397 debug("bulk_msg returned %d xferred %d/%d\n",
398 result, partial, this_xfer);
399 if (us->pusb_dev->status != 0) {
400 /* if we stall, we need to clear it before
404 display_int_status(us->pusb_dev->status);
406 if (us->pusb_dev->status & USB_ST_STALLED) {
407 debug("stalled ->clearing endpoint" \
408 "halt for pipe 0x%x\n", pipe);
409 stat = us->pusb_dev->status;
410 usb_clear_halt(us->pusb_dev, pipe);
411 us->pusb_dev->status = stat;
412 if (this_xfer == partial) {
413 debug("bulk transferred" \
416 us->pusb_dev->status);
422 if (us->pusb_dev->status & USB_ST_NAK_REC) {
423 debug("Device NAKed bulk_msg\n");
426 debug("bulk transferred with error");
427 if (this_xfer == partial) {
428 debug(" %ld, but data ok\n",
429 us->pusb_dev->status);
432 /* if our try counter reaches 0, bail out */
433 debug(" %ld, data %d\n",
434 us->pusb_dev->status, partial);
438 /* update to show what data was transferred */
439 this_xfer -= partial;
441 /* continue until this transfer is done */
445 /* if we get here, we're done and successful */
449 static int usb_stor_BBB_reset(struct us_data *us)
455 * Reset recovery (5.3.4 in Universal Serial Bus Mass Storage Class)
457 * For Reset Recovery the host shall issue in the following order:
458 * a) a Bulk-Only Mass Storage Reset
459 * b) a Clear Feature HALT to the Bulk-In endpoint
460 * c) a Clear Feature HALT to the Bulk-Out endpoint
462 * This is done in 3 steps.
464 * If the reset doesn't succeed, the device should be port reset.
466 * This comment stolen from FreeBSD's /sys/dev/usb/umass.c.
468 debug("BBB_reset\n");
469 result = usb_control_msg(us->pusb_dev, usb_sndctrlpipe(us->pusb_dev, 0),
471 USB_TYPE_CLASS | USB_RECIP_INTERFACE,
472 0, us->ifnum, NULL, 0, USB_CNTL_TIMEOUT * 5);
474 if ((result < 0) && (us->pusb_dev->status & USB_ST_STALLED)) {
475 debug("RESET:stall\n");
479 /* long wait for reset */
481 debug("BBB_reset result %d: status %lX reset\n",
482 result, us->pusb_dev->status);
483 pipe = usb_rcvbulkpipe(us->pusb_dev, us->ep_in);
484 result = usb_clear_halt(us->pusb_dev, pipe);
485 /* long wait for reset */
487 debug("BBB_reset result %d: status %lX clearing IN endpoint\n",
488 result, us->pusb_dev->status);
489 /* long wait for reset */
490 pipe = usb_sndbulkpipe(us->pusb_dev, us->ep_out);
491 result = usb_clear_halt(us->pusb_dev, pipe);
493 debug("BBB_reset result %d: status %lX clearing OUT endpoint\n",
494 result, us->pusb_dev->status);
495 debug("BBB_reset done\n");
499 /* FIXME: this reset function doesn't really reset the port, and it
500 * should. Actually it should probably do what it's doing here, and
501 * reset the port physically
503 static int usb_stor_CB_reset(struct us_data *us)
505 unsigned char cmd[12];
509 memset(cmd, 0xff, sizeof(cmd));
510 cmd[0] = SCSI_SEND_DIAG;
512 result = usb_control_msg(us->pusb_dev, usb_sndctrlpipe(us->pusb_dev, 0),
514 USB_TYPE_CLASS | USB_RECIP_INTERFACE,
515 0, us->ifnum, cmd, sizeof(cmd),
516 USB_CNTL_TIMEOUT * 5);
518 /* long wait for reset */
520 debug("CB_reset result %d: status %lX clearing endpoint halt\n",
521 result, us->pusb_dev->status);
522 usb_clear_halt(us->pusb_dev, usb_rcvbulkpipe(us->pusb_dev, us->ep_in));
523 usb_clear_halt(us->pusb_dev, usb_rcvbulkpipe(us->pusb_dev, us->ep_out));
525 debug("CB_reset done\n");
530 * Set up the command for a BBB device. Note that the actual SCSI
531 * command is copied into cbw.CBWCDB.
533 static int usb_stor_BBB_comdat(struct scsi_cmd *srb, struct us_data *us)
539 ALLOC_CACHE_ALIGN_BUFFER(struct umass_bbb_cbw, cbw, 1);
541 dir_in = US_DIRECTION(srb->cmd[0]);
543 #ifdef BBB_COMDAT_TRACE
544 printf("dir %d lun %d cmdlen %d cmd %p datalen %lu pdata %p\n",
545 dir_in, srb->lun, srb->cmdlen, srb->cmd, srb->datalen,
548 for (result = 0; result < srb->cmdlen; result++)
549 printf("cmd[%d] %#x ", result, srb->cmd[result]);
554 if (!(srb->cmdlen <= CBWCDBLENGTH)) {
555 debug("usb_stor_BBB_comdat:cmdlen too large\n");
559 /* always OUT to the ep */
560 pipe = usb_sndbulkpipe(us->pusb_dev, us->ep_out);
562 cbw->dCBWSignature = cpu_to_le32(CBWSIGNATURE);
563 cbw->dCBWTag = cpu_to_le32(CBWTag++);
564 cbw->dCBWDataTransferLength = cpu_to_le32(srb->datalen);
565 cbw->bCBWFlags = (dir_in ? CBWFLAGS_IN : CBWFLAGS_OUT);
566 cbw->bCBWLUN = srb->lun;
567 cbw->bCDBLength = srb->cmdlen;
568 /* copy the command data into the CBW command data buffer */
571 memcpy(cbw->CBWCDB, srb->cmd, srb->cmdlen);
572 result = usb_bulk_msg(us->pusb_dev, pipe, cbw, UMASS_BBB_CBW_SIZE,
573 &actlen, USB_CNTL_TIMEOUT * 5);
575 debug("usb_stor_BBB_comdat:usb_bulk_msg error\n");
579 /* FIXME: we also need a CBI_command which sets up the completion
580 * interrupt, and waits for it
582 static int usb_stor_CB_comdat(struct scsi_cmd *srb, struct us_data *us)
587 unsigned long status;
590 dir_in = US_DIRECTION(srb->cmd[0]);
593 pipe = usb_rcvbulkpipe(us->pusb_dev, us->ep_in);
595 pipe = usb_sndbulkpipe(us->pusb_dev, us->ep_out);
598 debug("CBI gets a command: Try %d\n", 5 - retry);
602 /* let's send the command via the control pipe */
603 result = usb_control_msg(us->pusb_dev,
604 usb_sndctrlpipe(us->pusb_dev , 0),
606 USB_TYPE_CLASS | USB_RECIP_INTERFACE,
608 srb->cmd, srb->cmdlen,
609 USB_CNTL_TIMEOUT * 5);
610 debug("CB_transport: control msg returned %d, status %lX\n",
611 result, us->pusb_dev->status);
612 /* check the return code for the command */
614 if (us->pusb_dev->status & USB_ST_STALLED) {
615 status = us->pusb_dev->status;
616 debug(" stall during command found," \
618 usb_clear_halt(us->pusb_dev,
619 usb_sndctrlpipe(us->pusb_dev, 0));
620 us->pusb_dev->status = status;
622 debug(" error during command %02X" \
623 " Stat = %lX\n", srb->cmd[0],
624 us->pusb_dev->status);
627 /* transfer the data payload for this command, if one exists*/
629 debug("CB_transport: control msg returned %d," \
630 " direction is %s to go 0x%lx\n", result,
631 dir_in ? "IN" : "OUT", srb->datalen);
633 result = us_one_transfer(us, pipe, (char *)srb->pdata,
635 debug("CBI attempted to transfer data," \
636 " result is %d status %lX, len %d\n",
637 result, us->pusb_dev->status,
638 us->pusb_dev->act_len);
639 if (!(us->pusb_dev->status & USB_ST_NAK_REC))
641 } /* if (srb->datalen) */
651 static int usb_stor_CBI_get_status(struct scsi_cmd *srb, struct us_data *us)
656 submit_int_msg(us->pusb_dev, us->irqpipe,
657 (void *) &us->ip_data, us->irqmaxp, us->irqinterval);
660 if (us->ip_wanted == 0)
665 printf(" Did not get interrupt on CBI\n");
667 return USB_STOR_TRANSPORT_ERROR;
669 debug("Got interrupt data 0x%x, transferred %d status 0x%lX\n",
670 us->ip_data, us->pusb_dev->irq_act_len,
671 us->pusb_dev->irq_status);
672 /* UFI gives us ASC and ASCQ, like a request sense */
673 if (us->subclass == US_SC_UFI) {
674 if (srb->cmd[0] == SCSI_REQ_SENSE ||
675 srb->cmd[0] == SCSI_INQUIRY)
676 return USB_STOR_TRANSPORT_GOOD; /* Good */
677 else if (us->ip_data)
678 return USB_STOR_TRANSPORT_FAILED;
680 return USB_STOR_TRANSPORT_GOOD;
682 /* otherwise, we interpret the data normally */
683 switch (us->ip_data) {
685 return USB_STOR_TRANSPORT_GOOD;
687 return USB_STOR_TRANSPORT_FAILED;
689 return USB_STOR_TRANSPORT_ERROR;
691 return USB_STOR_TRANSPORT_ERROR;
694 #define USB_TRANSPORT_UNKNOWN_RETRY 5
695 #define USB_TRANSPORT_NOT_READY_RETRY 10
697 /* clear a stall on an endpoint - special for BBB devices */
698 static int usb_stor_BBB_clear_endpt_stall(struct us_data *us, __u8 endpt)
700 /* ENDPOINT_HALT = 0, so set value to 0 */
701 return usb_control_msg(us->pusb_dev, usb_sndctrlpipe(us->pusb_dev, 0),
702 USB_REQ_CLEAR_FEATURE, USB_RECIP_ENDPOINT, 0,
703 endpt, NULL, 0, USB_CNTL_TIMEOUT * 5);
706 static int usb_stor_BBB_transport(struct scsi_cmd *srb, struct us_data *us)
710 int actlen, data_actlen;
711 unsigned int pipe, pipein, pipeout;
712 ALLOC_CACHE_ALIGN_BUFFER(struct umass_bbb_csw, csw, 1);
713 #ifdef BBB_XPORT_TRACE
718 dir_in = US_DIRECTION(srb->cmd[0]);
721 debug("COMMAND phase\n");
722 result = usb_stor_BBB_comdat(srb, us);
724 debug("failed to send CBW status %ld\n",
725 us->pusb_dev->status);
726 usb_stor_BBB_reset(us);
727 return USB_STOR_TRANSPORT_FAILED;
729 if (!(us->flags & USB_READY))
731 pipein = usb_rcvbulkpipe(us->pusb_dev, us->ep_in);
732 pipeout = usb_sndbulkpipe(us->pusb_dev, us->ep_out);
733 /* DATA phase + error handling */
735 /* no data, go immediately to the STATUS phase */
736 if (srb->datalen == 0)
738 debug("DATA phase\n");
744 result = usb_bulk_msg(us->pusb_dev, pipe, srb->pdata, srb->datalen,
745 &data_actlen, USB_CNTL_TIMEOUT * 5);
746 /* special handling of STALL in DATA phase */
747 if ((result < 0) && (us->pusb_dev->status & USB_ST_STALLED)) {
748 debug("DATA:stall\n");
749 /* clear the STALL on the endpoint */
750 result = usb_stor_BBB_clear_endpt_stall(us,
751 dir_in ? us->ep_in : us->ep_out);
753 /* continue on to STATUS phase */
757 debug("usb_bulk_msg error status %ld\n",
758 us->pusb_dev->status);
759 usb_stor_BBB_reset(us);
760 return USB_STOR_TRANSPORT_FAILED;
762 #ifdef BBB_XPORT_TRACE
763 for (index = 0; index < data_actlen; index++)
764 printf("pdata[%d] %#x ", index, srb->pdata[index]);
767 /* STATUS phase + error handling */
771 debug("STATUS phase\n");
772 result = usb_bulk_msg(us->pusb_dev, pipein, csw, UMASS_BBB_CSW_SIZE,
773 &actlen, USB_CNTL_TIMEOUT*5);
775 /* special handling of STALL in STATUS phase */
776 if ((result < 0) && (retry < 1) &&
777 (us->pusb_dev->status & USB_ST_STALLED)) {
778 debug("STATUS:stall\n");
779 /* clear the STALL on the endpoint */
780 result = usb_stor_BBB_clear_endpt_stall(us, us->ep_in);
781 if (result >= 0 && (retry++ < 1))
786 debug("usb_bulk_msg error status %ld\n",
787 us->pusb_dev->status);
788 usb_stor_BBB_reset(us);
789 return USB_STOR_TRANSPORT_FAILED;
791 #ifdef BBB_XPORT_TRACE
792 ptr = (unsigned char *)csw;
793 for (index = 0; index < UMASS_BBB_CSW_SIZE; index++)
794 printf("ptr[%d] %#x ", index, ptr[index]);
797 /* misuse pipe to get the residue */
798 pipe = le32_to_cpu(csw->dCSWDataResidue);
799 if (pipe == 0 && srb->datalen != 0 && srb->datalen - data_actlen != 0)
800 pipe = srb->datalen - data_actlen;
801 if (CSWSIGNATURE != le32_to_cpu(csw->dCSWSignature)) {
802 debug("!CSWSIGNATURE\n");
803 usb_stor_BBB_reset(us);
804 return USB_STOR_TRANSPORT_FAILED;
805 } else if ((CBWTag - 1) != le32_to_cpu(csw->dCSWTag)) {
807 usb_stor_BBB_reset(us);
808 return USB_STOR_TRANSPORT_FAILED;
809 } else if (csw->bCSWStatus > CSWSTATUS_PHASE) {
811 usb_stor_BBB_reset(us);
812 return USB_STOR_TRANSPORT_FAILED;
813 } else if (csw->bCSWStatus == CSWSTATUS_PHASE) {
815 usb_stor_BBB_reset(us);
816 return USB_STOR_TRANSPORT_FAILED;
817 } else if (data_actlen > srb->datalen) {
818 debug("transferred %dB instead of %ldB\n",
819 data_actlen, srb->datalen);
820 return USB_STOR_TRANSPORT_FAILED;
821 } else if (csw->bCSWStatus == CSWSTATUS_FAILED) {
823 return USB_STOR_TRANSPORT_FAILED;
829 static int usb_stor_CB_transport(struct scsi_cmd *srb, struct us_data *us)
832 struct scsi_cmd *psrb;
833 struct scsi_cmd reqsrb;
837 status = USB_STOR_TRANSPORT_GOOD;
840 /* issue the command */
842 result = usb_stor_CB_comdat(srb, us);
843 debug("command / Data returned %d, status %lX\n",
844 result, us->pusb_dev->status);
845 /* if this is an CBI Protocol, get IRQ */
846 if (us->protocol == US_PR_CBI) {
847 status = usb_stor_CBI_get_status(srb, us);
848 /* if the status is error, report it */
849 if (status == USB_STOR_TRANSPORT_ERROR) {
850 debug(" USB CBI Command Error\n");
853 srb->sense_buf[12] = (unsigned char)(us->ip_data >> 8);
854 srb->sense_buf[13] = (unsigned char)(us->ip_data & 0xff);
856 /* if the status is good, report it */
857 if (status == USB_STOR_TRANSPORT_GOOD) {
858 debug(" USB CBI Command Good\n");
863 /* do we have to issue an auto request? */
864 /* HERE we have to check the result */
865 if ((result < 0) && !(us->pusb_dev->status & USB_ST_STALLED)) {
866 debug("ERROR %lX\n", us->pusb_dev->status);
867 us->transport_reset(us);
868 return USB_STOR_TRANSPORT_ERROR;
870 if ((us->protocol == US_PR_CBI) &&
871 ((srb->cmd[0] == SCSI_REQ_SENSE) ||
872 (srb->cmd[0] == SCSI_INQUIRY))) {
873 /* do not issue an autorequest after request sense */
874 debug("No auto request and good\n");
875 return USB_STOR_TRANSPORT_GOOD;
877 /* issue an request_sense */
878 memset(&psrb->cmd[0], 0, 12);
879 psrb->cmd[0] = SCSI_REQ_SENSE;
880 psrb->cmd[1] = srb->lun << 5;
883 psrb->pdata = &srb->sense_buf[0];
885 /* issue the command */
886 result = usb_stor_CB_comdat(psrb, us);
887 debug("auto request returned %d\n", result);
888 /* if this is an CBI Protocol, get IRQ */
889 if (us->protocol == US_PR_CBI)
890 status = usb_stor_CBI_get_status(psrb, us);
892 if ((result < 0) && !(us->pusb_dev->status & USB_ST_STALLED)) {
893 debug(" AUTO REQUEST ERROR %ld\n",
894 us->pusb_dev->status);
895 return USB_STOR_TRANSPORT_ERROR;
897 debug("autorequest returned 0x%02X 0x%02X 0x%02X 0x%02X\n",
898 srb->sense_buf[0], srb->sense_buf[2],
899 srb->sense_buf[12], srb->sense_buf[13]);
900 /* Check the auto request result */
901 if ((srb->sense_buf[2] == 0) &&
902 (srb->sense_buf[12] == 0) &&
903 (srb->sense_buf[13] == 0)) {
905 return USB_STOR_TRANSPORT_GOOD;
908 /* Check the auto request result */
909 switch (srb->sense_buf[2]) {
911 /* Recovered Error */
912 return USB_STOR_TRANSPORT_GOOD;
916 if (notready++ > USB_TRANSPORT_NOT_READY_RETRY) {
917 printf("cmd 0x%02X returned 0x%02X 0x%02X 0x%02X"
918 " 0x%02X (NOT READY)\n", srb->cmd[0],
919 srb->sense_buf[0], srb->sense_buf[2],
920 srb->sense_buf[12], srb->sense_buf[13]);
921 return USB_STOR_TRANSPORT_FAILED;
928 if (retry++ > USB_TRANSPORT_UNKNOWN_RETRY) {
929 printf("cmd 0x%02X returned 0x%02X 0x%02X 0x%02X"
930 " 0x%02X\n", srb->cmd[0], srb->sense_buf[0],
931 srb->sense_buf[2], srb->sense_buf[12],
933 return USB_STOR_TRANSPORT_FAILED;
938 return USB_STOR_TRANSPORT_FAILED;
941 static void usb_stor_set_max_xfer_blk(struct usb_device *udev,
945 size_t __maybe_unused size;
946 int __maybe_unused ret;
948 #ifndef CONFIG_DM_USB
949 #ifdef CONFIG_USB_EHCI_HCD
951 * The U-Boot EHCI driver can handle any transfer length as long as
952 * there is enough free heap space left, but the SCSI READ(10) and
953 * WRITE(10) commands are limited to 65535 blocks.
960 ret = usb_get_max_xfer_size(udev, (size_t *)&size);
962 /* unimplemented, let's use default 20 */
965 if (size > USHRT_MAX * 512)
966 size = USHRT_MAX * 512;
971 us->max_xfer_blk = blk;
974 static int usb_inquiry(struct scsi_cmd *srb, struct us_data *ss)
979 memset(&srb->cmd[0], 0, 12);
980 srb->cmd[0] = SCSI_INQUIRY;
981 srb->cmd[1] = srb->lun << 5;
985 i = ss->transport(srb, ss);
986 debug("inquiry returns %d\n", i);
992 printf("error in inquiry\n");
998 static int usb_request_sense(struct scsi_cmd *srb, struct us_data *ss)
1002 ptr = (char *)srb->pdata;
1003 memset(&srb->cmd[0], 0, 12);
1004 srb->cmd[0] = SCSI_REQ_SENSE;
1005 srb->cmd[1] = srb->lun << 5;
1008 srb->pdata = &srb->sense_buf[0];
1010 ss->transport(srb, ss);
1011 debug("Request Sense returned %02X %02X %02X\n",
1012 srb->sense_buf[2], srb->sense_buf[12],
1013 srb->sense_buf[13]);
1014 srb->pdata = (uchar *)ptr;
1018 static int usb_test_unit_ready(struct scsi_cmd *srb, struct us_data *ss)
1023 memset(&srb->cmd[0], 0, 12);
1024 srb->cmd[0] = SCSI_TST_U_RDY;
1025 srb->cmd[1] = srb->lun << 5;
1028 if (ss->transport(srb, ss) == USB_STOR_TRANSPORT_GOOD) {
1029 ss->flags |= USB_READY;
1032 usb_request_sense(srb, ss);
1034 * Check the Key Code Qualifier, if it matches
1035 * "Not Ready - medium not present"
1036 * (the sense Key equals 0x2 and the ASC is 0x3a)
1037 * return immediately as the medium being absent won't change
1038 * unless there is a user action.
1040 if ((srb->sense_buf[2] == 0x02) &&
1041 (srb->sense_buf[12] == 0x3a))
1044 } while (retries--);
1049 static int usb_read_capacity(struct scsi_cmd *srb, struct us_data *ss)
1055 memset(&srb->cmd[0], 0, 12);
1056 srb->cmd[0] = SCSI_RD_CAPAC;
1057 srb->cmd[1] = srb->lun << 5;
1060 if (ss->transport(srb, ss) == USB_STOR_TRANSPORT_GOOD)
1067 static int usb_read_10(struct scsi_cmd *srb, struct us_data *ss,
1068 unsigned long start, unsigned short blocks)
1070 memset(&srb->cmd[0], 0, 12);
1071 srb->cmd[0] = SCSI_READ10;
1072 srb->cmd[1] = srb->lun << 5;
1073 srb->cmd[2] = ((unsigned char) (start >> 24)) & 0xff;
1074 srb->cmd[3] = ((unsigned char) (start >> 16)) & 0xff;
1075 srb->cmd[4] = ((unsigned char) (start >> 8)) & 0xff;
1076 srb->cmd[5] = ((unsigned char) (start)) & 0xff;
1077 srb->cmd[7] = ((unsigned char) (blocks >> 8)) & 0xff;
1078 srb->cmd[8] = (unsigned char) blocks & 0xff;
1080 debug("read10: start %lx blocks %x\n", start, blocks);
1081 return ss->transport(srb, ss);
1084 static int usb_write_10(struct scsi_cmd *srb, struct us_data *ss,
1085 unsigned long start, unsigned short blocks)
1087 memset(&srb->cmd[0], 0, 12);
1088 srb->cmd[0] = SCSI_WRITE10;
1089 srb->cmd[1] = srb->lun << 5;
1090 srb->cmd[2] = ((unsigned char) (start >> 24)) & 0xff;
1091 srb->cmd[3] = ((unsigned char) (start >> 16)) & 0xff;
1092 srb->cmd[4] = ((unsigned char) (start >> 8)) & 0xff;
1093 srb->cmd[5] = ((unsigned char) (start)) & 0xff;
1094 srb->cmd[7] = ((unsigned char) (blocks >> 8)) & 0xff;
1095 srb->cmd[8] = (unsigned char) blocks & 0xff;
1097 debug("write10: start %lx blocks %x\n", start, blocks);
1098 return ss->transport(srb, ss);
1102 #ifdef CONFIG_USB_BIN_FIXUP
1104 * Some USB storage devices queried for SCSI identification data respond with
1105 * binary strings, which if output to the console freeze the terminal. The
1106 * workaround is to modify the vendor and product strings read from such
1107 * device with proper values (as reported by 'usb info').
1109 * Vendor and product length limits are taken from the definition of
1110 * struct blk_desc in include/part.h.
1112 static void usb_bin_fixup(struct usb_device_descriptor descriptor,
1113 unsigned char vendor[],
1114 unsigned char product[]) {
1115 const unsigned char max_vendor_len = 40;
1116 const unsigned char max_product_len = 20;
1117 if (descriptor.idVendor == 0x0424 && descriptor.idProduct == 0x223a) {
1118 strncpy((char *)vendor, "SMSC", max_vendor_len);
1119 strncpy((char *)product, "Flash Media Cntrller",
1123 #endif /* CONFIG_USB_BIN_FIXUP */
1126 static unsigned long usb_stor_read(struct udevice *dev, lbaint_t blknr,
1127 lbaint_t blkcnt, void *buffer)
1129 static unsigned long usb_stor_read(struct blk_desc *block_dev, lbaint_t blknr,
1130 lbaint_t blkcnt, void *buffer)
1133 lbaint_t start, blks;
1135 unsigned short smallblks;
1136 struct usb_device *udev;
1139 struct scsi_cmd *srb = &usb_ccb;
1141 struct blk_desc *block_dev;
1148 block_dev = dev_get_uclass_platdata(dev);
1149 udev = dev_get_parent_priv(dev_get_parent(dev));
1150 debug("\nusb_read: udev %d\n", block_dev->devnum);
1152 debug("\nusb_read: udev %d\n", block_dev->devnum);
1153 udev = usb_dev_desc[block_dev->devnum].priv;
1155 debug("%s: No device\n", __func__);
1159 ss = (struct us_data *)udev->privptr;
1161 usb_disable_asynch(1); /* asynch transfer not allowed */
1162 srb->lun = block_dev->lun;
1163 buf_addr = (uintptr_t)buffer;
1167 debug("\nusb_read: dev %d startblk " LBAF ", blccnt " LBAF " buffer %"
1168 PRIxPTR "\n", block_dev->devnum, start, blks, buf_addr);
1171 /* XXX need some comment here */
1173 srb->pdata = (unsigned char *)buf_addr;
1174 if (blks > ss->max_xfer_blk)
1175 smallblks = ss->max_xfer_blk;
1177 smallblks = (unsigned short) blks;
1179 if (smallblks == ss->max_xfer_blk)
1180 usb_show_progress();
1181 srb->datalen = block_dev->blksz * smallblks;
1182 srb->pdata = (unsigned char *)buf_addr;
1183 if (usb_read_10(srb, ss, start, smallblks)) {
1184 debug("Read ERROR\n");
1185 usb_request_sense(srb, ss);
1193 buf_addr += srb->datalen;
1194 } while (blks != 0);
1195 ss->flags &= ~USB_READY;
1197 debug("usb_read: end startblk " LBAF
1198 ", blccnt %x buffer %" PRIxPTR "\n",
1199 start, smallblks, buf_addr);
1201 usb_disable_asynch(0); /* asynch transfer allowed */
1202 if (blkcnt >= ss->max_xfer_blk)
1208 static unsigned long usb_stor_write(struct udevice *dev, lbaint_t blknr,
1209 lbaint_t blkcnt, const void *buffer)
1211 static unsigned long usb_stor_write(struct blk_desc *block_dev, lbaint_t blknr,
1212 lbaint_t blkcnt, const void *buffer)
1215 lbaint_t start, blks;
1217 unsigned short smallblks;
1218 struct usb_device *udev;
1221 struct scsi_cmd *srb = &usb_ccb;
1223 struct blk_desc *block_dev;
1231 block_dev = dev_get_uclass_platdata(dev);
1232 udev = dev_get_parent_priv(dev_get_parent(dev));
1233 debug("\nusb_read: udev %d\n", block_dev->devnum);
1235 debug("\nusb_read: udev %d\n", block_dev->devnum);
1236 udev = usb_dev_desc[block_dev->devnum].priv;
1238 debug("%s: No device\n", __func__);
1242 ss = (struct us_data *)udev->privptr;
1244 usb_disable_asynch(1); /* asynch transfer not allowed */
1246 srb->lun = block_dev->lun;
1247 buf_addr = (uintptr_t)buffer;
1251 debug("\nusb_write: dev %d startblk " LBAF ", blccnt " LBAF " buffer %"
1252 PRIxPTR "\n", block_dev->devnum, start, blks, buf_addr);
1255 /* If write fails retry for max retry count else
1256 * return with number of blocks written successfully.
1259 srb->pdata = (unsigned char *)buf_addr;
1260 if (blks > ss->max_xfer_blk)
1261 smallblks = ss->max_xfer_blk;
1263 smallblks = (unsigned short) blks;
1265 if (smallblks == ss->max_xfer_blk)
1266 usb_show_progress();
1267 srb->datalen = block_dev->blksz * smallblks;
1268 srb->pdata = (unsigned char *)buf_addr;
1269 if (usb_write_10(srb, ss, start, smallblks)) {
1270 debug("Write ERROR\n");
1271 usb_request_sense(srb, ss);
1279 buf_addr += srb->datalen;
1280 } while (blks != 0);
1281 ss->flags &= ~USB_READY;
1283 debug("usb_write: end startblk " LBAF ", blccnt %x buffer %"
1284 PRIxPTR "\n", start, smallblks, buf_addr);
1286 usb_disable_asynch(0); /* asynch transfer allowed */
1287 if (blkcnt >= ss->max_xfer_blk)
1293 /* Probe to see if a new device is actually a Storage device */
1294 int usb_storage_probe(struct usb_device *dev, unsigned int ifnum,
1297 struct usb_interface *iface;
1299 struct usb_endpoint_descriptor *ep_desc;
1300 unsigned int flags = 0;
1302 /* let's examine the device now */
1303 iface = &dev->config.if_desc[ifnum];
1305 if (dev->descriptor.bDeviceClass != 0 ||
1306 iface->desc.bInterfaceClass != USB_CLASS_MASS_STORAGE ||
1307 iface->desc.bInterfaceSubClass < US_SC_MIN ||
1308 iface->desc.bInterfaceSubClass > US_SC_MAX) {
1309 debug("Not mass storage\n");
1310 /* if it's not a mass storage, we go no further */
1314 memset(ss, 0, sizeof(struct us_data));
1316 /* At this point, we know we've got a live one */
1317 debug("\n\nUSB Mass Storage device detected\n");
1319 /* Initialize the us_data structure with some useful info */
1323 ss->attention_done = 0;
1324 ss->subclass = iface->desc.bInterfaceSubClass;
1325 ss->protocol = iface->desc.bInterfaceProtocol;
1327 /* set the handler pointers based on the protocol */
1328 debug("Transport: ");
1329 switch (ss->protocol) {
1331 debug("Control/Bulk\n");
1332 ss->transport = usb_stor_CB_transport;
1333 ss->transport_reset = usb_stor_CB_reset;
1337 debug("Control/Bulk/Interrupt\n");
1338 ss->transport = usb_stor_CB_transport;
1339 ss->transport_reset = usb_stor_CB_reset;
1342 debug("Bulk/Bulk/Bulk\n");
1343 ss->transport = usb_stor_BBB_transport;
1344 ss->transport_reset = usb_stor_BBB_reset;
1347 printf("USB Storage Transport unknown / not yet implemented\n");
1353 * We are expecting a minimum of 2 endpoints - in and out (bulk).
1354 * An optional interrupt is OK (necessary for CBI protocol).
1355 * We will ignore any others.
1357 for (i = 0; i < iface->desc.bNumEndpoints; i++) {
1358 ep_desc = &iface->ep_desc[i];
1359 /* is it an BULK endpoint? */
1360 if ((ep_desc->bmAttributes &
1361 USB_ENDPOINT_XFERTYPE_MASK) == USB_ENDPOINT_XFER_BULK) {
1362 if (ep_desc->bEndpointAddress & USB_DIR_IN)
1363 ss->ep_in = ep_desc->bEndpointAddress &
1364 USB_ENDPOINT_NUMBER_MASK;
1367 ep_desc->bEndpointAddress &
1368 USB_ENDPOINT_NUMBER_MASK;
1371 /* is it an interrupt endpoint? */
1372 if ((ep_desc->bmAttributes &
1373 USB_ENDPOINT_XFERTYPE_MASK) == USB_ENDPOINT_XFER_INT) {
1374 ss->ep_int = ep_desc->bEndpointAddress &
1375 USB_ENDPOINT_NUMBER_MASK;
1376 ss->irqinterval = ep_desc->bInterval;
1379 debug("Endpoints In %d Out %d Int %d\n",
1380 ss->ep_in, ss->ep_out, ss->ep_int);
1382 /* Do some basic sanity checks, and bail if we find a problem */
1383 if (usb_set_interface(dev, iface->desc.bInterfaceNumber, 0) ||
1384 !ss->ep_in || !ss->ep_out ||
1385 (ss->protocol == US_PR_CBI && ss->ep_int == 0)) {
1386 debug("Problems with device\n");
1389 /* set class specific stuff */
1390 /* We only handle certain protocols. Currently, these are
1392 * The SFF8070 accepts the requests used in u-boot
1394 if (ss->subclass != US_SC_UFI && ss->subclass != US_SC_SCSI &&
1395 ss->subclass != US_SC_8070) {
1396 printf("Sorry, protocol %d not yet supported.\n", ss->subclass);
1400 /* we had found an interrupt endpoint, prepare irq pipe
1401 * set up the IRQ pipe and handler
1403 ss->irqinterval = (ss->irqinterval > 0) ? ss->irqinterval : 255;
1404 ss->irqpipe = usb_rcvintpipe(ss->pusb_dev, ss->ep_int);
1405 ss->irqmaxp = usb_maxpacket(dev, ss->irqpipe);
1406 dev->irq_handle = usb_stor_irq;
1409 /* Set the maximum transfer size per host controller setting */
1410 usb_stor_set_max_xfer_blk(dev, ss);
1412 dev->privptr = (void *)ss;
1416 int usb_stor_get_info(struct usb_device *dev, struct us_data *ss,
1417 struct blk_desc *dev_desc)
1419 unsigned char perq, modi;
1420 ALLOC_CACHE_ALIGN_BUFFER(u32, cap, 2);
1421 ALLOC_CACHE_ALIGN_BUFFER(u8, usb_stor_buf, 36);
1422 u32 capacity, blksz;
1423 struct scsi_cmd *pccb = &usb_ccb;
1425 pccb->pdata = usb_stor_buf;
1427 dev_desc->target = dev->devnum;
1428 pccb->lun = dev_desc->lun;
1429 debug(" address %d\n", dev_desc->target);
1431 if (usb_inquiry(pccb, ss)) {
1432 debug("%s: usb_inquiry() failed\n", __func__);
1436 perq = usb_stor_buf[0];
1437 modi = usb_stor_buf[1];
1440 * Skip unknown devices (0x1f) and enclosure service devices (0x0d),
1441 * they would not respond to test_unit_ready .
1443 if (((perq & 0x1f) == 0x1f) || ((perq & 0x1f) == 0x0d)) {
1444 debug("%s: unknown/unsupported device\n", __func__);
1447 if ((modi&0x80) == 0x80) {
1448 /* drive is removable */
1449 dev_desc->removable = 1;
1451 memcpy(dev_desc->vendor, (const void *)&usb_stor_buf[8], 8);
1452 memcpy(dev_desc->product, (const void *)&usb_stor_buf[16], 16);
1453 memcpy(dev_desc->revision, (const void *)&usb_stor_buf[32], 4);
1454 dev_desc->vendor[8] = 0;
1455 dev_desc->product[16] = 0;
1456 dev_desc->revision[4] = 0;
1457 #ifdef CONFIG_USB_BIN_FIXUP
1458 usb_bin_fixup(dev->descriptor, (uchar *)dev_desc->vendor,
1459 (uchar *)dev_desc->product);
1460 #endif /* CONFIG_USB_BIN_FIXUP */
1461 debug("ISO Vers %X, Response Data %X\n", usb_stor_buf[2],
1463 if (usb_test_unit_ready(pccb, ss)) {
1464 printf("Device NOT ready\n"
1465 " Request Sense returned %02X %02X %02X\n",
1466 pccb->sense_buf[2], pccb->sense_buf[12],
1467 pccb->sense_buf[13]);
1468 if (dev_desc->removable == 1)
1469 dev_desc->type = perq;
1472 pccb->pdata = (unsigned char *)cap;
1473 memset(pccb->pdata, 0, 8);
1474 if (usb_read_capacity(pccb, ss) != 0) {
1475 printf("READ_CAP ERROR\n");
1479 ss->flags &= ~USB_READY;
1480 debug("Read Capacity returns: 0x%08x, 0x%08x\n", cap[0], cap[1]);
1482 if (cap[0] > (0x200000 * 10)) /* greater than 10 GByte */
1485 cap[0] = cpu_to_be32(cap[0]);
1486 cap[1] = cpu_to_be32(cap[1]);
1489 capacity = be32_to_cpu(cap[0]) + 1;
1490 blksz = be32_to_cpu(cap[1]);
1492 debug("Capacity = 0x%08x, blocksz = 0x%08x\n", capacity, blksz);
1493 dev_desc->lba = capacity;
1494 dev_desc->blksz = blksz;
1495 dev_desc->log2blksz = LOG2(dev_desc->blksz);
1496 dev_desc->type = perq;
1497 debug(" address %d\n", dev_desc->target);
1502 #ifdef CONFIG_DM_USB
1504 static int usb_mass_storage_probe(struct udevice *dev)
1506 struct usb_device *udev = dev_get_parent_priv(dev);
1509 usb_disable_asynch(1); /* asynch transfer not allowed */
1510 ret = usb_stor_probe_device(udev);
1511 usb_disable_asynch(0); /* asynch transfer allowed */
1516 static const struct udevice_id usb_mass_storage_ids[] = {
1517 { .compatible = "usb-mass-storage" },
1521 U_BOOT_DRIVER(usb_mass_storage) = {
1522 .name = "usb_mass_storage",
1523 .id = UCLASS_MASS_STORAGE,
1524 .of_match = usb_mass_storage_ids,
1525 .probe = usb_mass_storage_probe,
1527 .platdata_auto_alloc_size = sizeof(struct us_data),
1531 UCLASS_DRIVER(usb_mass_storage) = {
1532 .id = UCLASS_MASS_STORAGE,
1533 .name = "usb_mass_storage",
1536 static const struct usb_device_id mass_storage_id_table[] = {
1538 .match_flags = USB_DEVICE_ID_MATCH_INT_CLASS,
1539 .bInterfaceClass = USB_CLASS_MASS_STORAGE
1541 { } /* Terminating entry */
1544 U_BOOT_USB_DEVICE(usb_mass_storage, mass_storage_id_table);
1548 static const struct blk_ops usb_storage_ops = {
1549 .read = usb_stor_read,
1550 .write = usb_stor_write,
1553 U_BOOT_DRIVER(usb_storage_blk) = {
1554 .name = "usb_storage_blk",
1556 .ops = &usb_storage_ops,
1559 U_BOOT_LEGACY_BLK(usb) = {
1560 .if_typename = "usb",
1561 .if_type = IF_TYPE_USB,
1562 .max_devs = USB_MAX_STOR_DEV,
1563 .desc = usb_dev_desc,