1/*
2 * copyright (C) 1999/2000 by Henning Zabel <henning@uni-paderborn.de>
3 *
4 * This program is free software; you can redistribute it and/or modify it
5 * under the terms of the GNU General Public License as published by the
6 * Free Software Foundation; either version 2 of the License, or (at your
7 * option) any later version.
8 *
9 * This program is distributed in the hope that it will be useful, but
10 * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
11 * or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
12 * for more details.
13 *
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, write to the Free Software Foundation,
16 * Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
17 */
18
19
20/*
21 *	USB-Kernel Driver for the Mustek MDC800 Digital Camera
22 *	(c) 1999/2000 Henning Zabel <henning@uni-paderborn.de>
23 *
24 *
25 * The driver brings the USB functions of the MDC800 to Linux.
26 * To use the Camera you must support the USB Protocol of the camera
27 * to the Kernel Node.
28 * The Driver uses a misc device Node. Create it with :
29 * mknod /dev/mustek c 180 32
30 *
31 * The driver supports only one camera.
32 *
33 * Fix: mdc800 used sleep_on and slept with io_lock held.
34 * Converted sleep_on to waitqueues with schedule_timeout and made io_lock
35 * a semaphore from a spinlock.
36 * by Oliver Neukum <oliver@neukum.name>
37 * (02/12/2001)
38 *
39 * Identify version on module load.
40 * (08/04/2001) gb
41 *
42 * version 0.7.5
43 * Fixed potential SMP races with Spinlocks.
44 * Thanks to Oliver Neukum <oliver@neukum.name> who
45 * noticed the race conditions.
46 * (30/10/2000)
47 *
48 * Fixed: Setting urb->dev before submitting urb.
49 * by Greg KH <greg@kroah.com>
50 * (13/10/2000)
51 *
52 * version 0.7.3
53 * bugfix : The mdc800->state field gets set to READY after the
54 * the diconnect function sets it to NOT_CONNECTED. This makes the
55 * driver running like the camera is connected and causes some
56 * hang ups.
57 *
58 * version 0.7.1
59 * MOD_INC and MOD_DEC are changed in usb_probe to prevent load/unload
60 * problems when compiled as Module.
61 * (04/04/2000)
62 *
63 * The mdc800 driver gets assigned the USB Minor 32-47. The Registration
64 * was updated to use these values.
65 * (26/03/2000)
66 *
67 * The Init und Exit Module Function are updated.
68 * (01/03/2000)
69 *
70 * version 0.7.0
71 * Rewrite of the driver : The driver now uses URB's. The old stuff
72 * has been removed.
73 *
74 * version 0.6.0
75 * Rewrite of this driver: The Emulation of the rs232 protocoll
76 * has been removed from the driver. A special executeCommand function
77 * for this driver is included to gphoto.
78 * The driver supports two kind of communication to bulk endpoints.
79 * Either with the dev->bus->ops->bulk... or with callback function.
80 * (09/11/1999)
81 *
82 * version 0.5.0:
83 * first Version that gets a version number. Most of the needed
84 * functions work.
85 * (20/10/1999)
86 */
87
88#include <linux/sched.h>
89#include <linux/signal.h>
90#include <linux/spinlock.h>
91#include <linux/errno.h>
92#include <linux/random.h>
93#include <linux/poll.h>
94#include <linux/init.h>
95#include <linux/slab.h>
96#include <linux/module.h>
97#include <linux/wait.h>
98#include <linux/mutex.h>
99
100#include <linux/usb.h>
101#include <linux/fs.h>
102
103/*
104 * Version Information
105 */
106#define DRIVER_VERSION "v0.7.5 (30/10/2000)"
107#define DRIVER_AUTHOR "Henning Zabel <henning@uni-paderborn.de>"
108#define DRIVER_DESC "USB Driver for Mustek MDC800 Digital Camera"
109
110/* Vendor and Product Information */
111#define MDC800_VENDOR_ID 	0x055f
112#define MDC800_PRODUCT_ID	0xa800
113
114/* Timeouts (msec) */
115#define TO_DOWNLOAD_GET_READY		1500
116#define TO_DOWNLOAD_GET_BUSY		1500
117#define TO_WRITE_GET_READY		1000
118#define TO_DEFAULT_COMMAND		5000
119#define TO_READ_FROM_IRQ 		TO_DEFAULT_COMMAND
120#define TO_GET_READY			TO_DEFAULT_COMMAND
121
122/* Minor Number of the device (create with mknod /dev/mustek c 180 32) */
123#define MDC800_DEVICE_MINOR_BASE 32
124
125
126/**************************************************************************
127	Data and structs
128***************************************************************************/
129
130
131typedef enum {
132	NOT_CONNECTED, READY, WORKING, DOWNLOAD
133} mdc800_state;
134
135
136/* Data for the driver */
137struct mdc800_data
138{
139	struct usb_device *	dev;			// Device Data
140	mdc800_state 		state;
141
142	unsigned int		endpoint [4];
143
144	struct urb *		irq_urb;
145	wait_queue_head_t	irq_wait;
146	int			irq_woken;
147	char*			irq_urb_buffer;
148
149	int			camera_busy;          // is camera busy ?
150	int 			camera_request_ready; // Status to synchronize with irq
151	char 			camera_response [8];  // last Bytes send after busy
152
153	struct urb *   		write_urb;
154	char*			write_urb_buffer;
155	wait_queue_head_t	write_wait;
156	int			written;
157
158
159	struct urb *   		download_urb;
160	char*			download_urb_buffer;
161	wait_queue_head_t	download_wait;
162	int			downloaded;
163	int			download_left;		// Bytes left to download ?
164
165
166	/* Device Data */
167	char			out [64];	// Answer Buffer
168	int 			out_ptr;	// Index to the first not readen byte
169	int			out_count;	// Bytes in the buffer
170
171	int			open;		// Camera device open ?
172	struct mutex		io_lock;	// IO -lock
173
174	char 			in [8];		// Command Input Buffer
175	int  			in_count;
176
177	int			pic_index;	// Cache for the Imagesize (-1 for nothing cached )
178	int			pic_len;
179	int			minor;
180};
181
182
183/* Specification of the Endpoints */
184static struct usb_endpoint_descriptor mdc800_ed [4] =
185{
186	{
187		.bLength = 		0,
188		.bDescriptorType =	0,
189		.bEndpointAddress =	0x01,
190		.bmAttributes = 	0x02,
191		.wMaxPacketSize =	__constant_cpu_to_le16(8),
192		.bInterval = 		0,
193		.bRefresh = 		0,
194		.bSynchAddress = 	0,
195	},
196	{
197		.bLength = 		0,
198		.bDescriptorType = 	0,
199		.bEndpointAddress = 	0x82,
200		.bmAttributes = 	0x03,
201		.wMaxPacketSize = 	__constant_cpu_to_le16(8),
202		.bInterval = 		0,
203		.bRefresh = 		0,
204		.bSynchAddress = 	0,
205	},
206	{
207		.bLength = 		0,
208		.bDescriptorType = 	0,
209		.bEndpointAddress = 	0x03,
210		.bmAttributes = 	0x02,
211		.wMaxPacketSize = 	__constant_cpu_to_le16(64),
212		.bInterval = 		0,
213		.bRefresh = 		0,
214		.bSynchAddress = 	0,
215	},
216	{
217		.bLength = 		0,
218		.bDescriptorType = 	0,
219		.bEndpointAddress = 	0x84,
220		.bmAttributes = 	0x02,
221		.wMaxPacketSize = 	__constant_cpu_to_le16(64),
222		.bInterval = 		0,
223		.bRefresh = 		0,
224		.bSynchAddress = 	0,
225	},
226};
227
228/* The Variable used by the driver */
229static struct mdc800_data* mdc800;
230
231
232/***************************************************************************
233	The USB Part of the driver
234****************************************************************************/
235
236static int mdc800_endpoint_equals (struct usb_endpoint_descriptor *a,struct usb_endpoint_descriptor *b)
237{
238	return (
239		   ( a->bEndpointAddress == b->bEndpointAddress )
240		&& ( a->bmAttributes     == b->bmAttributes     )
241		&& ( a->wMaxPacketSize   == b->wMaxPacketSize   )
242	);
243}
244
245
246/*
247 * Checks whether the camera responds busy
248 */
249static int mdc800_isBusy (char* ch)
250{
251	int i=0;
252	while (i<8)
253	{
254		if (ch [i] != (char)0x99)
255			return 0;
256		i++;
257	}
258	return 1;
259}
260
261
262/*
263 * Checks whether the Camera is ready
264 */
265static int mdc800_isReady (char *ch)
266{
267	int i=0;
268	while (i<8)
269	{
270		if (ch [i] != (char)0xbb)
271			return 0;
272		i++;
273	}
274	return 1;
275}
276
277
278
279/*
280 * USB IRQ Handler for InputLine
281 */
282static void mdc800_usb_irq (struct urb *urb)
283{
284	int data_received=0, wake_up;
285	unsigned char* b=urb->transfer_buffer;
286	struct mdc800_data* mdc800=urb->context;
287
288	if (urb->status >= 0)
289	{
290
291		//dbg ("%i %i %i %i %i %i %i %i \n",b[0],b[1],b[2],b[3],b[4],b[5],b[6],b[7]);
292
293		if (mdc800_isBusy (b))
294		{
295			if (!mdc800->camera_busy)
296			{
297				mdc800->camera_busy=1;
298				dbg ("gets busy");
299			}
300		}
301		else
302		{
303			if (mdc800->camera_busy && mdc800_isReady (b))
304			{
305				mdc800->camera_busy=0;
306				dbg ("gets ready");
307			}
308		}
309		if (!(mdc800_isBusy (b) || mdc800_isReady (b)))
310		{
311			/* Store Data in camera_answer field */
312			dbg ("%i %i %i %i %i %i %i %i ",b[0],b[1],b[2],b[3],b[4],b[5],b[6],b[7]);
313
314			memcpy (mdc800->camera_response,b,8);
315			data_received=1;
316		}
317	}
318	wake_up= ( mdc800->camera_request_ready > 0 )
319		&&
320		(
321			((mdc800->camera_request_ready == 1) && (!mdc800->camera_busy))
322		||
323			((mdc800->camera_request_ready == 2) && data_received)
324		||
325			((mdc800->camera_request_ready == 3) && (mdc800->camera_busy))
326		||
327			(urb->status < 0)
328		);
329
330	if (wake_up)
331	{
332		mdc800->camera_request_ready=0;
333		mdc800->irq_woken=1;
334		wake_up (&mdc800->irq_wait);
335	}
336}
337
338
339/*
340 * Waits a while until the irq responds that camera is ready
341 *
342 *  mode : 0: Wait for camera gets ready
343 *         1: Wait for receiving data
344 *         2: Wait for camera gets busy
345 *
346 * msec: Time to wait
347 */
348static int mdc800_usb_waitForIRQ (int mode, int msec)
349{
350	mdc800->camera_request_ready=1+mode;
351
352	wait_event_timeout(mdc800->irq_wait, mdc800->irq_woken, msec*HZ/1000);
353	mdc800->irq_woken = 0;
354
355	if (mdc800->camera_request_ready>0)
356	{
357		mdc800->camera_request_ready=0;
358		err ("timeout waiting for camera.");
359		return -1;
360	}
361
362	if (mdc800->state == NOT_CONNECTED)
363	{
364		warn ("Camera gets disconnected during waiting for irq.");
365		mdc800->camera_request_ready=0;
366		return -2;
367	}
368
369	return 0;
370}
371
372
373/*
374 * The write_urb callback function
375 */
376static void mdc800_usb_write_notify (struct urb *urb)
377{
378	struct mdc800_data* mdc800=urb->context;
379
380	if (urb->status != 0)
381	{
382		err ("writing command fails (status=%i)", urb->status);
383	}
384	else
385	{
386		mdc800->state=READY;
387	}
388	mdc800->written = 1;
389	wake_up (&mdc800->write_wait);
390}
391
392
393/*
394 * The download_urb callback function
395 */
396static void mdc800_usb_download_notify (struct urb *urb)
397{
398	struct mdc800_data* mdc800=urb->context;
399
400	if (urb->status == 0)
401	{
402		/* Fill output buffer with these data */
403		memcpy (mdc800->out,  urb->transfer_buffer, 64);
404		mdc800->out_count=64;
405		mdc800->out_ptr=0;
406		mdc800->download_left-=64;
407		if (mdc800->download_left == 0)
408		{
409			mdc800->state=READY;
410		}
411	}
412	else
413	{
414		err ("request bytes fails (status:%i)", urb->status);
415	}
416	mdc800->downloaded = 1;
417	wake_up (&mdc800->download_wait);
418}
419
420
421/***************************************************************************
422	Probing for the Camera
423 ***************************************************************************/
424
425static struct usb_driver mdc800_usb_driver;
426static const struct file_operations mdc800_device_ops;
427static struct usb_class_driver mdc800_class = {
428	.name =		"mdc800%d",
429	.fops =		&mdc800_device_ops,
430	.minor_base =	MDC800_DEVICE_MINOR_BASE,
431};
432
433
434/*
435 * Callback to search the Mustek MDC800 on the USB Bus
436 */
437static int mdc800_usb_probe (struct usb_interface *intf,
438			       const struct usb_device_id *id)
439{
440	int i,j;
441	struct usb_host_interface *intf_desc;
442	struct usb_device *dev = interface_to_usbdev (intf);
443	int irq_interval=0;
444	int retval;
445
446	dbg ("(mdc800_usb_probe) called.");
447
448
449	if (mdc800->dev != NULL)
450	{
451		warn ("only one Mustek MDC800 is supported.");
452		return -ENODEV;
453	}
454
455	if (dev->descriptor.bNumConfigurations != 1)
456	{
457		err ("probe fails -> wrong Number of Configuration");
458		return -ENODEV;
459	}
460	intf_desc = intf->cur_altsetting;
461
462	if (
463			( intf_desc->desc.bInterfaceClass != 0xff )
464		||	( intf_desc->desc.bInterfaceSubClass != 0 )
465		|| ( intf_desc->desc.bInterfaceProtocol != 0 )
466		|| ( intf_desc->desc.bNumEndpoints != 4)
467	)
468	{
469		err ("probe fails -> wrong Interface");
470		return -ENODEV;
471	}
472
473	/* Check the Endpoints */
474	for (i=0; i<4; i++)
475	{
476		mdc800->endpoint[i]=-1;
477		for (j=0; j<4; j++)
478		{
479			if (mdc800_endpoint_equals (&intf_desc->endpoint [j].desc,&mdc800_ed [i]))
480			{
481				mdc800->endpoint[i]=intf_desc->endpoint [j].desc.bEndpointAddress ;
482				if (i==1)
483				{
484					irq_interval=intf_desc->endpoint [j].desc.bInterval;
485				}
486
487				continue;
488			}
489		}
490		if (mdc800->endpoint[i] == -1)
491		{
492			err ("probe fails -> Wrong Endpoints.");
493			return -ENODEV;
494		}
495	}
496
497
498	info ("Found Mustek MDC800 on USB.");
499
500	mutex_lock(&mdc800->io_lock);
501
502	retval = usb_register_dev(intf, &mdc800_class);
503	if (retval) {
504		err ("Not able to get a minor for this device.");
505		return -ENODEV;
506	}
507
508	mdc800->dev=dev;
509	mdc800->open=0;
510
511	/* Setup URB Structs */
512	usb_fill_int_urb (
513		mdc800->irq_urb,
514		mdc800->dev,
515		usb_rcvintpipe (mdc800->dev,mdc800->endpoint [1]),
516		mdc800->irq_urb_buffer,
517		8,
518		mdc800_usb_irq,
519		mdc800,
520		irq_interval
521	);
522
523	usb_fill_bulk_urb (
524		mdc800->write_urb,
525		mdc800->dev,
526		usb_sndbulkpipe (mdc800->dev, mdc800->endpoint[0]),
527		mdc800->write_urb_buffer,
528		8,
529		mdc800_usb_write_notify,
530		mdc800
531	);
532
533	usb_fill_bulk_urb (
534		mdc800->download_urb,
535		mdc800->dev,
536		usb_rcvbulkpipe (mdc800->dev, mdc800->endpoint [3]),
537		mdc800->download_urb_buffer,
538		64,
539		mdc800_usb_download_notify,
540		mdc800
541	);
542
543	mdc800->state=READY;
544
545	mutex_unlock(&mdc800->io_lock);
546
547	usb_set_intfdata(intf, mdc800);
548	return 0;
549}
550
551
552/*
553 * Disconnect USB device (maybe the MDC800)
554 */
555static void mdc800_usb_disconnect (struct usb_interface *intf)
556{
557	struct mdc800_data* mdc800 = usb_get_intfdata(intf);
558
559	dbg ("(mdc800_usb_disconnect) called");
560
561	if (mdc800) {
562		if (mdc800->state == NOT_CONNECTED)
563			return;
564
565		usb_deregister_dev(intf, &mdc800_class);
566
567		/* must be under lock to make sure no URB
568		   is submitted after usb_kill_urb() */
569		mutex_lock(&mdc800->io_lock);
570		mdc800->state=NOT_CONNECTED;
571
572		usb_kill_urb(mdc800->irq_urb);
573		usb_kill_urb(mdc800->write_urb);
574		usb_kill_urb(mdc800->download_urb);
575		mutex_unlock(&mdc800->io_lock);
576
577		mdc800->dev = NULL;
578		usb_set_intfdata(intf, NULL);
579	}
580	info ("Mustek MDC800 disconnected from USB.");
581}
582
583
584/***************************************************************************
585	The Misc device Part (file_operations)
586****************************************************************************/
587
588/*
589 * This Function calc the Answersize for a command.
590 */
591static int mdc800_getAnswerSize (char command)
592{
593	switch ((unsigned char) command)
594	{
595		case 0x2a:
596		case 0x49:
597		case 0x51:
598		case 0x0d:
599		case 0x20:
600		case 0x07:
601		case 0x01:
602		case 0x25:
603		case 0x00:
604			return 8;
605
606		case 0x05:
607		case 0x3e:
608			return mdc800->pic_len;
609
610		case 0x09:
611			return 4096;
612
613		default:
614			return 0;
615	}
616}
617
618
619/*
620 * Init the device: (1) alloc mem (2) Increase MOD Count ..
621 */
622static int mdc800_device_open (struct inode* inode, struct file *file)
623{
624	int retval=0;
625	int errn=0;
626
627	mutex_lock(&mdc800->io_lock);
628
629	if (mdc800->state == NOT_CONNECTED)
630	{
631		errn=-EBUSY;
632		goto error_out;
633	}
634	if (mdc800->open)
635	{
636		errn=-EBUSY;
637		goto error_out;
638	}
639
640	mdc800->in_count=0;
641	mdc800->out_count=0;
642	mdc800->out_ptr=0;
643	mdc800->pic_index=0;
644	mdc800->pic_len=-1;
645	mdc800->download_left=0;
646
647	mdc800->camera_busy=0;
648	mdc800->camera_request_ready=0;
649
650	retval=0;
651	mdc800->irq_urb->dev = mdc800->dev;
652	if (usb_submit_urb (mdc800->irq_urb, GFP_KERNEL))
653	{
654		err ("request USB irq fails (submit_retval=%i urb_status=%i).",retval, mdc800->irq_urb->status);
655		errn = -EIO;
656		goto error_out;
657	}
658
659	mdc800->open=1;
660	dbg ("Mustek MDC800 device opened.");
661
662error_out:
663	mutex_unlock(&mdc800->io_lock);
664	return errn;
665}
666
667
668/*
669 * Close the Camera and release Memory
670 */
671static int mdc800_device_release (struct inode* inode, struct file *file)
672{
673	int retval=0;
674	dbg ("Mustek MDC800 device closed.");
675
676	mutex_lock(&mdc800->io_lock);
677	if (mdc800->open && (mdc800->state != NOT_CONNECTED))
678	{
679		usb_kill_urb(mdc800->irq_urb);
680		usb_kill_urb(mdc800->write_urb);
681		usb_kill_urb(mdc800->download_urb);
682		mdc800->open=0;
683	}
684	else
685	{
686		retval=-EIO;
687	}
688
689	mutex_unlock(&mdc800->io_lock);
690	return retval;
691}
692
693
694/*
695 * The Device read callback Function
696 */
697static ssize_t mdc800_device_read (struct file *file, char __user *buf, size_t len, loff_t *pos)
698{
699	size_t left=len, sts=len; /* single transfer size */
700	char __user *ptr = buf;
701
702	mutex_lock(&mdc800->io_lock);
703	if (mdc800->state == NOT_CONNECTED)
704	{
705		mutex_unlock(&mdc800->io_lock);
706		return -EBUSY;
707	}
708	if (mdc800->state == WORKING)
709	{
710		warn ("Illegal State \"working\" reached during read ?!");
711		mutex_unlock(&mdc800->io_lock);
712		return -EBUSY;
713	}
714	if (!mdc800->open)
715	{
716		mutex_unlock(&mdc800->io_lock);
717		return -EBUSY;
718	}
719
720	while (left)
721	{
722		if (signal_pending (current))
723		{
724			mutex_unlock(&mdc800->io_lock);
725			return -EINTR;
726		}
727
728		sts=left > (mdc800->out_count-mdc800->out_ptr)?mdc800->out_count-mdc800->out_ptr:left;
729
730		if (sts <= 0)
731		{
732			/* Too less Data in buffer */
733			if (mdc800->state == DOWNLOAD)
734			{
735				mdc800->out_count=0;
736				mdc800->out_ptr=0;
737
738				/* Download -> Request new bytes */
739				mdc800->download_urb->dev = mdc800->dev;
740				if (usb_submit_urb (mdc800->download_urb, GFP_KERNEL))
741				{
742					err ("Can't submit download urb (status=%i)",mdc800->download_urb->status);
743					mutex_unlock(&mdc800->io_lock);
744					return len-left;
745				}
746				wait_event_timeout(mdc800->download_wait, mdc800->downloaded,
747										TO_DOWNLOAD_GET_READY*HZ/1000);
748				mdc800->downloaded = 0;
749				if (mdc800->download_urb->status != 0)
750				{
751					err ("request download-bytes fails (status=%i)",mdc800->download_urb->status);
752					mutex_unlock(&mdc800->io_lock);
753					return len-left;
754				}
755			}
756			else
757			{
758				/* No more bytes -> that's an error*/
759				mutex_unlock(&mdc800->io_lock);
760				return -EIO;
761			}
762		}
763		else
764		{
765			/* Copy Bytes */
766			if (copy_to_user(ptr, &mdc800->out [mdc800->out_ptr],
767						sts)) {
768				mutex_unlock(&mdc800->io_lock);
769				return -EFAULT;
770			}
771			ptr+=sts;
772			left-=sts;
773			mdc800->out_ptr+=sts;
774		}
775	}
776
777	mutex_unlock(&mdc800->io_lock);
778	return len-left;
779}
780
781
782/*
783 * The Device write callback Function
784 * If a 8Byte Command is received, it will be send to the camera.
785 * After this the driver initiates the request for the answer or
786 * just waits until the camera becomes ready.
787 */
788static ssize_t mdc800_device_write (struct file *file, const char __user *buf, size_t len, loff_t *pos)
789{
790	size_t i=0;
791
792	mutex_lock(&mdc800->io_lock);
793	if (mdc800->state != READY)
794	{
795		mutex_unlock(&mdc800->io_lock);
796		return -EBUSY;
797	}
798	if (!mdc800->open )
799	{
800		mutex_unlock(&mdc800->io_lock);
801		return -EBUSY;
802	}
803
804	while (i<len)
805	{
806		unsigned char c;
807		if (signal_pending (current))
808		{
809			mutex_unlock(&mdc800->io_lock);
810			return -EINTR;
811		}
812
813		if(get_user(c, buf+i))
814		{
815			mutex_unlock(&mdc800->io_lock);
816			return -EFAULT;
817		}
818
819		/* check for command start */
820		if (c == 0x55)
821		{
822			mdc800->in_count=0;
823			mdc800->out_count=0;
824			mdc800->out_ptr=0;
825			mdc800->download_left=0;
826		}
827
828		/* save command byte */
829		if (mdc800->in_count < 8)
830		{
831			mdc800->in[mdc800->in_count] = c;
832			mdc800->in_count++;
833		}
834		else
835		{
836			mutex_unlock(&mdc800->io_lock);
837			return -EIO;
838		}
839
840		/* Command Buffer full ? -> send it to camera */
841		if (mdc800->in_count == 8)
842		{
843			int answersize;
844
845			if (mdc800_usb_waitForIRQ (0,TO_GET_READY))
846			{
847				err ("Camera didn't get ready.\n");
848				mutex_unlock(&mdc800->io_lock);
849				return -EIO;
850			}
851
852			answersize=mdc800_getAnswerSize (mdc800->in[1]);
853
854			mdc800->state=WORKING;
855			memcpy (mdc800->write_urb->transfer_buffer, mdc800->in,8);
856			mdc800->write_urb->dev = mdc800->dev;
857			if (usb_submit_urb (mdc800->write_urb, GFP_KERNEL))
858			{
859				err ("submitting write urb fails (status=%i)", mdc800->write_urb->status);
860				mutex_unlock(&mdc800->io_lock);
861				return -EIO;
862			}
863			wait_event_timeout(mdc800->write_wait, mdc800->written, TO_WRITE_GET_READY*HZ/1000);
864			mdc800->written = 0;
865			if (mdc800->state == WORKING)
866			{
867				usb_kill_urb(mdc800->write_urb);
868				mutex_unlock(&mdc800->io_lock);
869				return -EIO;
870			}
871
872			switch ((unsigned char) mdc800->in[1])
873			{
874				case 0x05: /* Download Image */
875				case 0x3e: /* Take shot in Fine Mode (WCam Mode) */
876					if (mdc800->pic_len < 0)
877					{
878						err ("call 0x07 before 0x05,0x3e");
879						mdc800->state=READY;
880						mutex_unlock(&mdc800->io_lock);
881						return -EIO;
882					}
883					mdc800->pic_len=-1;
884
885				case 0x09: /* Download Thumbnail */
886					mdc800->download_left=answersize+64;
887					mdc800->state=DOWNLOAD;
888					mdc800_usb_waitForIRQ (0,TO_DOWNLOAD_GET_BUSY);
889					break;
890
891
892				default:
893					if (answersize)
894					{
895
896						if (mdc800_usb_waitForIRQ (1,TO_READ_FROM_IRQ))
897						{
898							err ("requesting answer from irq fails");
899							mutex_unlock(&mdc800->io_lock);
900							return -EIO;
901						}
902
903						/* Write dummy data, (this is ugly but part of the USB Protocol */
904						/* if you use endpoint 1 as bulk and not as irq) */
905						memcpy (mdc800->out, mdc800->camera_response,8);
906
907						/* This is the interpreted answer */
908						memcpy (&mdc800->out[8], mdc800->camera_response,8);
909
910						mdc800->out_ptr=0;
911						mdc800->out_count=16;
912
913						/* Cache the Imagesize, if command was getImageSize */
914						if (mdc800->in [1] == (char) 0x07)
915						{
916							mdc800->pic_len=(int) 65536*(unsigned char) mdc800->camera_response[0]+256*(unsigned char) mdc800->camera_response[1]+(unsigned char) mdc800->camera_response[2];
917
918							dbg ("cached imagesize = %i",mdc800->pic_len);
919						}
920
921					}
922					else
923					{
924						if (mdc800_usb_waitForIRQ (0,TO_DEFAULT_COMMAND))
925						{
926							err ("Command Timeout.");
927							mutex_unlock(&mdc800->io_lock);
928							return -EIO;
929						}
930					}
931					mdc800->state=READY;
932					break;
933			}
934		}
935		i++;
936	}
937	mutex_unlock(&mdc800->io_lock);
938	return i;
939}
940
941
942/***************************************************************************
943	Init and Cleanup this driver (Structs and types)
944****************************************************************************/
945
946/* File Operations of this drivers */
947static const struct file_operations mdc800_device_ops =
948{
949	.owner =	THIS_MODULE,
950	.read =		mdc800_device_read,
951	.write =	mdc800_device_write,
952	.open =		mdc800_device_open,
953	.release =	mdc800_device_release,
954};
955
956
957
958static struct usb_device_id mdc800_table [] = {
959	{ USB_DEVICE(MDC800_VENDOR_ID, MDC800_PRODUCT_ID) },
960	{ }						/* Terminating entry */
961};
962
963MODULE_DEVICE_TABLE (usb, mdc800_table);
964/*
965 * USB Driver Struct for this device
966 */
967static struct usb_driver mdc800_usb_driver =
968{
969	.name =		"mdc800",
970	.probe =	mdc800_usb_probe,
971	.disconnect =	mdc800_usb_disconnect,
972	.id_table =	mdc800_table
973};
974
975
976
977/************************************************************************
978	Init and Cleanup this driver (Main Functions)
979*************************************************************************/
980
981static int __init usb_mdc800_init (void)
982{
983	int retval = -ENODEV;
984	/* Allocate Memory */
985	mdc800=kzalloc (sizeof (struct mdc800_data), GFP_KERNEL);
986	if (!mdc800)
987		goto cleanup_on_fail;
988
989	mdc800->dev = NULL;
990	mdc800->state=NOT_CONNECTED;
991	mutex_init (&mdc800->io_lock);
992
993	init_waitqueue_head (&mdc800->irq_wait);
994	init_waitqueue_head (&mdc800->write_wait);
995	init_waitqueue_head (&mdc800->download_wait);
996
997	mdc800->irq_woken = 0;
998	mdc800->downloaded = 0;
999	mdc800->written = 0;
1000
1001	mdc800->irq_urb_buffer=kmalloc (8, GFP_KERNEL);
1002	if (!mdc800->irq_urb_buffer)
1003		goto cleanup_on_fail;
1004	mdc800->write_urb_buffer=kmalloc (8, GFP_KERNEL);
1005	if (!mdc800->write_urb_buffer)
1006		goto cleanup_on_fail;
1007	mdc800->download_urb_buffer=kmalloc (64, GFP_KERNEL);
1008	if (!mdc800->download_urb_buffer)
1009		goto cleanup_on_fail;
1010
1011	mdc800->irq_urb=usb_alloc_urb (0, GFP_KERNEL);
1012	if (!mdc800->irq_urb)
1013		goto cleanup_on_fail;
1014	mdc800->download_urb=usb_alloc_urb (0, GFP_KERNEL);
1015	if (!mdc800->download_urb)
1016		goto cleanup_on_fail;
1017	mdc800->write_urb=usb_alloc_urb (0, GFP_KERNEL);
1018	if (!mdc800->write_urb)
1019		goto cleanup_on_fail;
1020
1021	/* Register the driver */
1022	retval = usb_register(&mdc800_usb_driver);
1023	if (retval)
1024		goto cleanup_on_fail;
1025
1026	info (DRIVER_VERSION ":" DRIVER_DESC);
1027
1028	return 0;
1029
1030	/* Clean driver up, when something fails */
1031
1032cleanup_on_fail:
1033
1034	if (mdc800 != NULL)
1035	{
1036		err ("can't alloc memory!");
1037
1038		kfree(mdc800->download_urb_buffer);
1039		kfree(mdc800->write_urb_buffer);
1040		kfree(mdc800->irq_urb_buffer);
1041
1042		usb_free_urb(mdc800->write_urb);
1043		usb_free_urb(mdc800->download_urb);
1044		usb_free_urb(mdc800->irq_urb);
1045
1046		kfree (mdc800);
1047	}
1048	mdc800 = NULL;
1049	return retval;
1050}
1051
1052
1053static void __exit usb_mdc800_cleanup (void)
1054{
1055	usb_deregister (&mdc800_usb_driver);
1056
1057	usb_free_urb (mdc800->irq_urb);
1058	usb_free_urb (mdc800->download_urb);
1059	usb_free_urb (mdc800->write_urb);
1060
1061	kfree (mdc800->irq_urb_buffer);
1062	kfree (mdc800->write_urb_buffer);
1063	kfree (mdc800->download_urb_buffer);
1064
1065	kfree (mdc800);
1066	mdc800 = NULL;
1067}
1068
1069module_init (usb_mdc800_init);
1070module_exit (usb_mdc800_cleanup);
1071
1072MODULE_AUTHOR( DRIVER_AUTHOR );
1073MODULE_DESCRIPTION( DRIVER_DESC );
1074MODULE_LICENSE("GPL");
1075