drivers/media/usb/tm6000/tm6000-video.c

   1 // SPDX-License-Identifier: GPL-2.0
   2 // tm6000-video.c - driver for TM5600/TM6000/TM6010 USB video capture devices
   3 //
   4 // Copyright (c) 2006-2007 Mauro Carvalho Chehab <mchehab@kernel.org>
   5 //
   6 // Copyright (c) 2007 Michel Ludwig <michel.ludwig@gmail.com>
   7 //      - Fixed module load/unload
   8
   9 #include <linux/module.h>
  10 #include <linux/delay.h>
  11 #include <linux/errno.h>
  12 #include <linux/fs.h>
  13 #include <linux/kernel.h>
  14 #include <linux/slab.h>
  15 #include <linux/mm.h>
  16 #include <linux/ioport.h>
  17 #include <linux/init.h>
  18 #include <linux/sched.h>
  19 #include <linux/random.h>
  20 #include <linux/usb.h>
  21 #include <linux/videodev2.h>
  22 #include <media/v4l2-ioctl.h>
  23 #include <media/v4l2-event.h>
  24 #include <media/tuner.h>
  25 #include <linux/interrupt.h>
  26 #include <linux/kthread.h>
  27 #include <linux/highmem.h>
  28 #include <linux/freezer.h>
  29
  30 #include "tm6000-regs.h"
  31 #include "tm6000.h"
  32
  33 #define BUFFER_TIMEOUT     msecs_to_jiffies(2000)  /* 2 seconds */
  34
  35 /* Limits minimum and default number of buffers */
  36 #define TM6000_MIN_BUF 4
  37 #define TM6000_DEF_BUF 8
  38
  39 #define TM6000_NUM_URB_BUF 8
  40
  41 #define TM6000_MAX_ISO_PACKETS  46      /* Max number of ISO packets */
  42
  43 /* Declare static vars that will be used as parameters */
  44 static unsigned int vid_limit = 16;     /* Video memory limit, in Mb */
  45 static int video_nr = -1;               /* /dev/videoN, -1 for autodetect */
  46 static int radio_nr = -1;               /* /dev/radioN, -1 for autodetect */
  47 static bool keep_urb;                   /* keep urb buffers allocated */
  48
  49 /* Debug level */
  50 int tm6000_debug;
  51 EXPORT_SYMBOL_GPL(tm6000_debug);
  52
  53 static struct tm6000_fmt format[] = {
  54         {
  55                 .name     = "4:2:2, packed, YVY2",
  56                 .fourcc   = V4L2_PIX_FMT_YUYV,
  57                 .depth    = 16,
  58         }, {
  59                 .name     = "4:2:2, packed, UYVY",
  60                 .fourcc   = V4L2_PIX_FMT_UYVY,
  61                 .depth    = 16,
  62         }, {
  63                 .name     = "A/V + VBI mux packet",
  64                 .fourcc   = V4L2_PIX_FMT_TM6000,
  65                 .depth    = 16,
  66         }
  67 };
  68
  69 /* ------------------------------------------------------------------
  70  *      DMA and thread functions
  71  * ------------------------------------------------------------------
  72  */
  73
  74 #define norm_maxw(a) 720
  75 #define norm_maxh(a) 576
  76
  77 #define norm_minw(a) norm_maxw(a)
  78 #define norm_minh(a) norm_maxh(a)
  79
  80 /*
  81  * video-buf generic routine to get the next available buffer
  82  */
  83 static inline void get_next_buf(struct tm6000_dmaqueue *dma_q,
  84                                struct tm6000_buffer   **buf)
  85 {
  86         struct tm6000_core *dev = container_of(dma_q, struct tm6000_core, vidq);
  87
  88         if (list_empty(&dma_q->active)) {
  89                 dprintk(dev, V4L2_DEBUG_QUEUE, "No active queue to serve\n");
  90                 *buf = NULL;
  91                 return;
  92         }
  93
  94         *buf = list_entry(dma_q->active.next,
  95                         struct tm6000_buffer, vb.queue);
  96 }
  97
  98 /*
  99  * Announces that a buffer were filled and request the next
 100  */
 101 static inline void buffer_filled(struct tm6000_core *dev,
 102                                  struct tm6000_dmaqueue *dma_q,
 103                                  struct tm6000_buffer *buf)
 104 {
 105         /* Advice that buffer was filled */
 106         dprintk(dev, V4L2_DEBUG_ISOC, "[%p/%d] wakeup\n", buf, buf->vb.i);
 107         buf->vb.state = VIDEOBUF_DONE;
 108         buf->vb.field_count++;
 109         buf->vb.ts = ktime_get_ns();
 110
 111         list_del(&buf->vb.queue);
 112         wake_up(&buf->vb.done);
 113 }
 114
 115 /*
 116  * Identify the tm5600/6000 buffer header type and properly handles
 117  */
 118 static int copy_streams(u8 *data, unsigned long len,
 119                         struct urb *urb)
 120 {
 121         struct tm6000_dmaqueue  *dma_q = urb->context;
 122         struct tm6000_core *dev = container_of(dma_q, struct tm6000_core, vidq);
 123         u8 *ptr = data, *endp = data+len;
 124         unsigned long header = 0;
 125         int rc = 0;
 126         unsigned int cmd, cpysize, pktsize, size, field, block, line, pos = 0;
 127         struct tm6000_buffer *vbuf = NULL;
 128         char *voutp = NULL;
 129         unsigned int linewidth;
 130
 131         if (!dev->radio) {
 132                 /* get video buffer */
 133                 get_next_buf(dma_q, &vbuf);
 134
 135                 if (!vbuf)
 136                         return rc;
 137                 voutp = videobuf_to_vmalloc(&vbuf->vb);
 138
 139                 if (!voutp)
 140                         return 0;
 141         }
 142
 143         for (ptr = data; ptr < endp;) {
 144                 if (!dev->isoc_ctl.cmd) {
 145                         /* Header */
 146                         if (dev->isoc_ctl.tmp_buf_len > 0) {
 147                                 /* from last urb or packet */
 148                                 header = dev->isoc_ctl.tmp_buf;
 149                                 if (4 - dev->isoc_ctl.tmp_buf_len > 0) {
 150                                         memcpy((u8 *)&header +
 151                                                 dev->isoc_ctl.tmp_buf_len,
 152                                                 ptr,
 153                                                 4 - dev->isoc_ctl.tmp_buf_len);
 154                                         ptr += 4 - dev->isoc_ctl.tmp_buf_len;
 155                                 }
 156                                 dev->isoc_ctl.tmp_buf_len = 0;
 157                         } else {
 158                                 if (ptr + 3 >= endp) {
 159                                         /* have incomplete header */
 160                                         dev->isoc_ctl.tmp_buf_len = endp - ptr;
 161                                         memcpy(&dev->isoc_ctl.tmp_buf, ptr,
 162                                                 dev->isoc_ctl.tmp_buf_len);
 163                                         return rc;
 164                                 }
 165                                 /* Seek for sync */
 166                                 for (; ptr < endp - 3; ptr++) {
 167                                         if (*(ptr + 3) == 0x47)
 168                                                 break;
 169                                 }
 170                                 /* Get message header */
 171                                 header = *(unsigned long *)ptr;
 172                                 ptr += 4;
 173                         }
 174
 175                         /* split the header fields */
 176                         size = ((header & 0x7e) << 1);
 177                         if (size > 0)
 178                                 size -= 4;
 179                         block = (header >> 7) & 0xf;
 180                         field = (header >> 11) & 0x1;
 181                         line  = (header >> 12) & 0x1ff;
 182                         cmd   = (header >> 21) & 0x7;
 183                         /* Validates header fields */
 184                         if (size > TM6000_URB_MSG_LEN)
 185                                 size = TM6000_URB_MSG_LEN;
 186                         pktsize = TM6000_URB_MSG_LEN;
 187                         /*
 188                          * calculate position in buffer and change the buffer
 189                          */
 190                         switch (cmd) {
 191                         case TM6000_URB_MSG_VIDEO:
 192                                 if (!dev->radio) {
 193                                         if ((dev->isoc_ctl.vfield != field) &&
 194                                                 (field == 1)) {
 195                                                 /*
 196                                                  * Announces that a new buffer
 197                                                  * were filled
 198                                                  */
 199                                                 buffer_filled(dev, dma_q, vbuf);
 200                                                 dprintk(dev, V4L2_DEBUG_ISOC,
 201                                                         "new buffer filled\n");
 202                                                 get_next_buf(dma_q, &vbuf);
 203                                                 if (!vbuf)
 204                                                         return rc;
 205                                                 voutp = videobuf_to_vmalloc(&vbuf->vb);
 206                                                 if (!voutp)
 207                                                         return rc;
 208                                                 memset(voutp, 0, vbuf->vb.size);
 209                                         }
 210                                         linewidth = vbuf->vb.width << 1;
 211                                         pos = ((line << 1) - field - 1) *
 212                                         linewidth + block * TM6000_URB_MSG_LEN;
 213                                         /* Don't allow to write out of the buffer */
 214                                         if (pos + size > vbuf->vb.size)
 215                                                 cmd = TM6000_URB_MSG_ERR;
 216                                         dev->isoc_ctl.vfield = field;
 217                                 }
 218                                 break;
 219                         case TM6000_URB_MSG_VBI:
 220                                 break;
 221                         case TM6000_URB_MSG_AUDIO:
 222                         case TM6000_URB_MSG_PTS:
 223                                 size = pktsize; /* Size is always 180 bytes */
 224                                 break;
 225                         }
 226                 } else {
 227                         /* Continue the last copy */
 228                         cmd = dev->isoc_ctl.cmd;
 229                         size = dev->isoc_ctl.size;
 230                         pos = dev->isoc_ctl.pos;
 231                         pktsize = dev->isoc_ctl.pktsize;
 232                         field = dev->isoc_ctl.field;
 233                 }
 234                 cpysize = (endp - ptr > size) ? size : endp - ptr;
 235                 if (cpysize) {
 236                         /* copy data in different buffers */
 237                         switch (cmd) {
 238                         case TM6000_URB_MSG_VIDEO:
 239                                 /* Fills video buffer */
 240                                 if (vbuf)
 241                                         memcpy(&voutp[pos], ptr, cpysize);
 242                                 break;
 243                         case TM6000_URB_MSG_AUDIO: {
 244                                 int i;
 245                                 for (i = 0; i < cpysize; i += 2)
 246                                         swab16s((u16 *)(ptr + i));
 247
 248                                 tm6000_call_fillbuf(dev, TM6000_AUDIO, ptr, cpysize);
 249                                 break;
 250                         }
 251                         case TM6000_URB_MSG_VBI:
 252                                 /* Need some code to copy vbi buffer */
 253                                 break;
 254                         case TM6000_URB_MSG_PTS: {
 255                                 /* Need some code to copy pts */
 256                                 u32 pts;
 257                                 pts = *(u32 *)ptr;
 258                                 dprintk(dev, V4L2_DEBUG_ISOC, "field %d, PTS %x",
 259                                         field, pts);
 260                                 break;
 261                         }
 262                         }
 263                 }
 264                 if (ptr + pktsize > endp) {
 265                         /*
 266                          * End of URB packet, but cmd processing is not
 267                          * complete. Preserve the state for a next packet
 268                          */
 269                         dev->isoc_ctl.pos = pos + cpysize;
 270                         dev->isoc_ctl.size = size - cpysize;
 271                         dev->isoc_ctl.cmd = cmd;
 272                         dev->isoc_ctl.field = field;
 273                         dev->isoc_ctl.pktsize = pktsize - (endp - ptr);
 274                         ptr += endp - ptr;
 275                 } else {
 276                         dev->isoc_ctl.cmd = 0;
 277                         ptr += pktsize;
 278                 }
 279         }
 280         return 0;
 281 }
 282
 283 /*
 284  * Identify the tm5600/6000 buffer header type and properly handles
 285  */
 286 static int copy_multiplexed(u8 *ptr, unsigned long len,
 287                         struct urb *urb)
 288 {
 289         struct tm6000_dmaqueue  *dma_q = urb->context;
 290         struct tm6000_core *dev = container_of(dma_q, struct tm6000_core, vidq);
 291         unsigned int pos = dev->isoc_ctl.pos, cpysize;
 292         int rc = 1;
 293         struct tm6000_buffer *buf;
 294         char *outp = NULL;
 295
 296         get_next_buf(dma_q, &buf);
 297         if (buf)
 298                 outp = videobuf_to_vmalloc(&buf->vb);
 299
 300         if (!outp)
 301                 return 0;
 302
 303         while (len > 0) {
 304                 cpysize = min(len, buf->vb.size-pos);
 305                 memcpy(&outp[pos], ptr, cpysize);
 306                 pos += cpysize;
 307                 ptr += cpysize;
 308                 len -= cpysize;
 309                 if (pos >= buf->vb.size) {
 310                         pos = 0;
 311                         /* Announces that a new buffer were filled */
 312                         buffer_filled(dev, dma_q, buf);
 313                         dprintk(dev, V4L2_DEBUG_ISOC, "new buffer filled\n");
 314                         get_next_buf(dma_q, &buf);
 315                         if (!buf)
 316                                 break;
 317                         outp = videobuf_to_vmalloc(&(buf->vb));
 318                         if (!outp)
 319                                 return rc;
 320                         pos = 0;
 321                 }
 322         }
 323
 324         dev->isoc_ctl.pos = pos;
 325         return rc;
 326 }
 327
 328 static inline void print_err_status(struct tm6000_core *dev,
 329                                      int packet, int status)
 330 {
 331         char *errmsg = "Unknown";
 332
 333         switch (status) {
 334         case -ENOENT:
 335                 errmsg = "unlinked synchronously";
 336                 break;
 337         case -ECONNRESET:
 338                 errmsg = "unlinked asynchronously";
 339                 break;
 340         case -ENOSR:
 341                 errmsg = "Buffer error (overrun)";
 342                 break;
 343         case -EPIPE:
 344                 errmsg = "Stalled (device not responding)";
 345                 break;
 346         case -EOVERFLOW:
 347                 errmsg = "Babble (bad cable?)";
 348                 break;
 349         case -EPROTO:
 350                 errmsg = "Bit-stuff error (bad cable?)";
 351                 break;
 352         case -EILSEQ:
 353                 errmsg = "CRC/Timeout (could be anything)";
 354                 break;
 355         case -ETIME:
 356                 errmsg = "Device does not respond";
 357                 break;
 358         }
 359         if (packet < 0) {
 360                 dprintk(dev, V4L2_DEBUG_QUEUE, "URB status %d [%s].\n",
 361                         status, errmsg);
 362         } else {
 363                 dprintk(dev, V4L2_DEBUG_QUEUE, "URB packet %d, status %d [%s].\n",
 364                         packet, status, errmsg);
 365         }
 366 }
 367
 368
 369 /*
 370  * Controls the isoc copy of each urb packet
 371  */
 372 static inline int tm6000_isoc_copy(struct urb *urb)
 373 {
 374         struct tm6000_dmaqueue  *dma_q = urb->context;
 375         struct tm6000_core *dev = container_of(dma_q, struct tm6000_core, vidq);
 376         int i, len = 0, rc = 1, status;
 377         char *p;
 378
 379         if (urb->status < 0) {
 380                 print_err_status(dev, -1, urb->status);
 381                 return 0;
 382         }
 383
 384         for (i = 0; i < urb->number_of_packets; i++) {
 385                 status = urb->iso_frame_desc[i].status;
 386
 387                 if (status < 0) {
 388                         print_err_status(dev, i, status);
 389                         continue;
 390                 }
 391
 392                 len = urb->iso_frame_desc[i].actual_length;
 393
 394                 if (len > 0) {
 395                         p = urb->transfer_buffer + urb->iso_frame_desc[i].offset;
 396                         if (!urb->iso_frame_desc[i].status) {
 397                                 if ((dev->fourcc) == V4L2_PIX_FMT_TM6000) {
 398                                         rc = copy_multiplexed(p, len, urb);
 399                                         if (rc <= 0)
 400                                                 return rc;
 401                                 } else {
 402                                         copy_streams(p, len, urb);
 403                                 }
 404                         }
 405                 }
 406         }
 407         return rc;
 408 }
 409
 410 /* ------------------------------------------------------------------
 411  *      URB control
 412  * ------------------------------------------------------------------
 413  */
 414
 415 /*
 416  * IRQ callback, called by URB callback
 417  */
 418 static void tm6000_irq_callback(struct urb *urb)
 419 {
 420         struct tm6000_dmaqueue  *dma_q = urb->context;
 421         struct tm6000_core *dev = container_of(dma_q, struct tm6000_core, vidq);
 422         unsigned long flags;
 423         int i;
 424
 425         switch (urb->status) {
 426         case 0:
 427         case -ETIMEDOUT:
 428                 break;
 429
 430         case -ECONNRESET:
 431         case -ENOENT:
 432         case -ESHUTDOWN:
 433                 return;
 434
 435         default:
 436                 tm6000_err("urb completion error %d.\n", urb->status);
 437                 break;
 438         }
 439
 440         spin_lock_irqsave(&dev->slock, flags);
 441         tm6000_isoc_copy(urb);
 442         spin_unlock_irqrestore(&dev->slock, flags);
 443
 444         /* Reset urb buffers */
 445         for (i = 0; i < urb->number_of_packets; i++) {
 446                 urb->iso_frame_desc[i].status = 0;
 447                 urb->iso_frame_desc[i].actual_length = 0;
 448         }
 449
 450         urb->status = usb_submit_urb(urb, GFP_ATOMIC);
 451         if (urb->status)
 452                 tm6000_err("urb resubmit failed (error=%i)\n",
 453                         urb->status);
 454 }
 455
 456 /*
 457  * Allocate URB buffers
 458  */
 459 static int tm6000_alloc_urb_buffers(struct tm6000_core *dev)
 460 {
 461         int num_bufs = TM6000_NUM_URB_BUF;
 462         int i;
 463
 464         if (dev->urb_buffer)
 465                 return 0;
 466
 467         dev->urb_buffer = kmalloc_array(num_bufs, sizeof(void *), GFP_KERNEL);
 468         if (!dev->urb_buffer)
 469                 return -ENOMEM;
 470
 471         dev->urb_dma = kmalloc_array(num_bufs, sizeof(dma_addr_t *),
 472                                      GFP_KERNEL);
 473         if (!dev->urb_dma)
 474                 return -ENOMEM;
 475
 476         for (i = 0; i < num_bufs; i++) {
 477                 dev->urb_buffer[i] = usb_alloc_coherent(
 478                                         dev->udev, dev->urb_size,
 479                                         GFP_KERNEL, &dev->urb_dma[i]);
 480                 if (!dev->urb_buffer[i]) {
 481                         tm6000_err("unable to allocate %i bytes for transfer buffer %i\n",
 482                                     dev->urb_size, i);
 483                         return -ENOMEM;
 484                 }
 485                 memset(dev->urb_buffer[i], 0, dev->urb_size);
 486         }
 487
 488         return 0;
 489 }
 490
 491 /*
 492  * Free URB buffers
 493  */
 494 static int tm6000_free_urb_buffers(struct tm6000_core *dev)
 495 {
 496         int i;
 497
 498         if (!dev->urb_buffer)
 499                 return 0;
 500
 501         for (i = 0; i < TM6000_NUM_URB_BUF; i++) {
 502                 if (dev->urb_buffer[i]) {
 503                         usb_free_coherent(dev->udev,
 504                                         dev->urb_size,
 505                                         dev->urb_buffer[i],
 506                                         dev->urb_dma[i]);
 507                         dev->urb_buffer[i] = NULL;
 508                 }
 509         }
 510         kfree(dev->urb_buffer);
 511         kfree(dev->urb_dma);
 512         dev->urb_buffer = NULL;
 513         dev->urb_dma = NULL;
 514
 515         return 0;
 516 }
 517
 518 /*
 519  * Stop and Deallocate URBs
 520  */
 521 static void tm6000_uninit_isoc(struct tm6000_core *dev)
 522 {
 523         struct urb *urb;
 524         int i;
 525
 526         dev->isoc_ctl.buf = NULL;
 527         for (i = 0; i < dev->isoc_ctl.num_bufs; i++) {
 528                 urb = dev->isoc_ctl.urb[i];
 529                 if (urb) {
 530                         usb_kill_urb(urb);
 531                         usb_unlink_urb(urb);
 532                         usb_free_urb(urb);
 533                         dev->isoc_ctl.urb[i] = NULL;
 534                 }
 535                 dev->isoc_ctl.transfer_buffer[i] = NULL;
 536         }
 537
 538         if (!keep_urb)
 539                 tm6000_free_urb_buffers(dev);
 540
 541         kfree(dev->isoc_ctl.urb);
 542         kfree(dev->isoc_ctl.transfer_buffer);
 543
 544         dev->isoc_ctl.urb = NULL;
 545         dev->isoc_ctl.transfer_buffer = NULL;
 546         dev->isoc_ctl.num_bufs = 0;
 547 }
 548
 549 /*
 550  * Assign URBs and start IRQ
 551  */
 552 static int tm6000_prepare_isoc(struct tm6000_core *dev)
 553 {
 554         struct tm6000_dmaqueue *dma_q = &dev->vidq;
 555         int i, j, sb_size, pipe, size, max_packets;
 556         int num_bufs = TM6000_NUM_URB_BUF;
 557         struct urb *urb;
 558
 559         /* De-allocates all pending stuff */
 560         tm6000_uninit_isoc(dev);
 561         /* Stop interrupt USB pipe */
 562         tm6000_ir_int_stop(dev);
 563
 564         usb_set_interface(dev->udev,
 565                           dev->isoc_in.bInterfaceNumber,
 566                           dev->isoc_in.bAlternateSetting);
 567
 568         /* Start interrupt USB pipe */
 569         tm6000_ir_int_start(dev);
 570
 571         pipe = usb_rcvisocpipe(dev->udev,
 572                                dev->isoc_in.endp->desc.bEndpointAddress &
 573                                USB_ENDPOINT_NUMBER_MASK);
 574
 575         size = usb_maxpacket(dev->udev, pipe, usb_pipeout(pipe));
 576
 577         if (size > dev->isoc_in.maxsize)
 578                 size = dev->isoc_in.maxsize;
 579
 580         dev->isoc_ctl.max_pkt_size = size;
 581
 582         max_packets = TM6000_MAX_ISO_PACKETS;
 583         sb_size = max_packets * size;
 584         dev->urb_size = sb_size;
 585
 586         dev->isoc_ctl.num_bufs = num_bufs;
 587
 588         dev->isoc_ctl.urb = kmalloc_array(num_bufs, sizeof(void *),
 589                                           GFP_KERNEL);
 590         if (!dev->isoc_ctl.urb)
 591                 return -ENOMEM;
 592
 593         dev->isoc_ctl.transfer_buffer = kmalloc_array(num_bufs,
 594                                                       sizeof(void *),
 595                                                       GFP_KERNEL);
 596         if (!dev->isoc_ctl.transfer_buffer) {
 597                 kfree(dev->isoc_ctl.urb);
 598                 return -ENOMEM;
 599         }
 600
 601         dprintk(dev, V4L2_DEBUG_QUEUE, "Allocating %d x %d packets (%d bytes) of %d bytes each to handle %u size\n",
 602                     max_packets, num_bufs, sb_size,
 603                     dev->isoc_in.maxsize, size);
 604
 605
 606         if (tm6000_alloc_urb_buffers(dev) < 0) {
 607                 tm6000_err("cannot allocate memory for urb buffers\n");
 608
 609                 /* call free, as some buffers might have been allocated */
 610                 tm6000_free_urb_buffers(dev);
 611                 kfree(dev->isoc_ctl.urb);
 612                 kfree(dev->isoc_ctl.transfer_buffer);
 613                 return -ENOMEM;
 614         }
 615
 616         /* allocate urbs and transfer buffers */
 617         for (i = 0; i < dev->isoc_ctl.num_bufs; i++) {
 618                 urb = usb_alloc_urb(max_packets, GFP_KERNEL);
 619                 if (!urb) {
 620                         tm6000_uninit_isoc(dev);
 621                         tm6000_free_urb_buffers(dev);
 622                         return -ENOMEM;
 623                 }
 624                 dev->isoc_ctl.urb[i] = urb;
 625
 626                 urb->transfer_dma = dev->urb_dma[i];
 627                 dev->isoc_ctl.transfer_buffer[i] = dev->urb_buffer[i];
 628
 629                 usb_fill_bulk_urb(urb, dev->udev, pipe,
 630                                   dev->isoc_ctl.transfer_buffer[i], sb_size,
 631                                   tm6000_irq_callback, dma_q);
 632                 urb->interval = dev->isoc_in.endp->desc.bInterval;
 633                 urb->number_of_packets = max_packets;
 634                 urb->transfer_flags = URB_ISO_ASAP | URB_NO_TRANSFER_DMA_MAP;
 635
 636                 for (j = 0; j < max_packets; j++) {
 637                         urb->iso_frame_desc[j].offset = size * j;
 638                         urb->iso_frame_desc[j].length = size;
 639                 }
 640         }
 641
 642         return 0;
 643 }
 644
 645 static int tm6000_start_thread(struct tm6000_core *dev)
 646 {
 647         struct tm6000_dmaqueue *dma_q = &dev->vidq;
 648         int i;
 649
 650         dma_q->frame = 0;
 651         dma_q->ini_jiffies = jiffies;
 652
 653         init_waitqueue_head(&dma_q->wq);
 654
 655         /* submit urbs and enables IRQ */
 656         for (i = 0; i < dev->isoc_ctl.num_bufs; i++) {
 657                 int rc = usb_submit_urb(dev->isoc_ctl.urb[i], GFP_ATOMIC);
 658                 if (rc) {
 659                         tm6000_err("submit of urb %i failed (error=%i)\n", i,
 660                                    rc);
 661                         tm6000_uninit_isoc(dev);
 662                         return rc;
 663                 }
 664         }
 665
 666         return 0;
 667 }
 668
 669 /* ------------------------------------------------------------------
 670  *      Videobuf operations
 671  * ------------------------------------------------------------------
 672  */
 673
 674 static int
 675 buffer_setup(struct videobuf_queue *vq, unsigned int *count, unsigned int *size)
 676 {
 677         struct tm6000_fh *fh = vq->priv_data;
 678
 679         *size = fh->fmt->depth * fh->width * fh->height >> 3;
 680         if (0 == *count)
 681                 *count = TM6000_DEF_BUF;
 682
 683         if (*count < TM6000_MIN_BUF)
 684                 *count = TM6000_MIN_BUF;
 685
 686         while (*size * *count > vid_limit * 1024 * 1024)
 687                 (*count)--;
 688
 689         return 0;
 690 }
 691
 692 static void free_buffer(struct videobuf_queue *vq, struct tm6000_buffer *buf)
 693 {
 694         struct tm6000_fh *fh = vq->priv_data;
 695         struct tm6000_core   *dev = fh->dev;
 696         unsigned long flags;
 697
 698         BUG_ON(in_interrupt());
 699
 700         /* We used to wait for the buffer to finish here, but this didn't work
 701            because, as we were keeping the state as VIDEOBUF_QUEUED,
 702            videobuf_queue_cancel marked it as finished for us.
 703            (Also, it could wedge forever if the hardware was misconfigured.)
 704
 705            This should be safe; by the time we get here, the buffer isn't
 706            queued anymore. If we ever start marking the buffers as
 707            VIDEOBUF_ACTIVE, it won't be, though.
 708         */
 709         spin_lock_irqsave(&dev->slock, flags);
 710         if (dev->isoc_ctl.buf == buf)
 711                 dev->isoc_ctl.buf = NULL;
 712         spin_unlock_irqrestore(&dev->slock, flags);
 713
 714         videobuf_vmalloc_free(&buf->vb);
 715         buf->vb.state = VIDEOBUF_NEEDS_INIT;
 716 }
 717
 718 static int
 719 buffer_prepare(struct videobuf_queue *vq, struct videobuf_buffer *vb,
 720                                                 enum v4l2_field field)
 721 {
 722         struct tm6000_fh     *fh  = vq->priv_data;
 723         struct tm6000_buffer *buf = container_of(vb, struct tm6000_buffer, vb);
 724         struct tm6000_core   *dev = fh->dev;
 725         int rc = 0;
 726
 727         BUG_ON(NULL == fh->fmt);
 728
 729
 730         /* FIXME: It assumes depth=2 */
 731         /* The only currently supported format is 16 bits/pixel */
 732         buf->vb.size = fh->fmt->depth*fh->width*fh->height >> 3;
 733         if (0 != buf->vb.baddr  &&  buf->vb.bsize < buf->vb.size)
 734                 return -EINVAL;
 735
 736         if (buf->fmt       != fh->fmt    ||
 737             buf->vb.width  != fh->width  ||
 738             buf->vb.height != fh->height ||
 739             buf->vb.field  != field) {
 740                 buf->fmt       = fh->fmt;
 741                 buf->vb.width  = fh->width;
 742                 buf->vb.height = fh->height;
 743                 buf->vb.field  = field;
 744                 buf->vb.state = VIDEOBUF_NEEDS_INIT;
 745         }
 746
 747         if (VIDEOBUF_NEEDS_INIT == buf->vb.state) {
 748                 rc = videobuf_iolock(vq, &buf->vb, NULL);
 749                 if (rc != 0)
 750                         goto fail;
 751         }
 752
 753         if (!dev->isoc_ctl.num_bufs) {
 754                 rc = tm6000_prepare_isoc(dev);
 755                 if (rc < 0)
 756                         goto fail;
 757
 758                 rc = tm6000_start_thread(dev);
 759                 if (rc < 0)
 760                         goto fail;
 761
 762         }
 763
 764         buf->vb.state = VIDEOBUF_PREPARED;
 765         return 0;
 766
 767 fail:
 768         free_buffer(vq, buf);
 769         return rc;
 770 }
 771
 772 static void
 773 buffer_queue(struct videobuf_queue *vq, struct videobuf_buffer *vb)
 774 {
 775         struct tm6000_buffer    *buf     = container_of(vb, struct tm6000_buffer, vb);
 776         struct tm6000_fh        *fh      = vq->priv_data;
 777         struct tm6000_core      *dev     = fh->dev;
 778         struct tm6000_dmaqueue  *vidq    = &dev->vidq;
 779
 780         buf->vb.state = VIDEOBUF_QUEUED;
 781         list_add_tail(&buf->vb.queue, &vidq->active);
 782 }
 783
 784 static void buffer_release(struct videobuf_queue *vq, struct videobuf_buffer *vb)
 785 {
 786         struct tm6000_buffer   *buf  = container_of(vb, struct tm6000_buffer, vb);
 787
 788         free_buffer(vq, buf);
 789 }
 790
 791 static const struct videobuf_queue_ops tm6000_video_qops = {
 792         .buf_setup      = buffer_setup,
 793         .buf_prepare    = buffer_prepare,
 794         .buf_queue      = buffer_queue,
 795         .buf_release    = buffer_release,
 796 };
 797
 798 /* ------------------------------------------------------------------
 799  *      IOCTL handling
 800  * ------------------------------------------------------------------
 801  */
 802
 803 static bool is_res_read(struct tm6000_core *dev, struct tm6000_fh *fh)
 804 {
 805         /* Is the current fh handling it? if so, that's OK */
 806         if (dev->resources == fh && dev->is_res_read)
 807                 return true;
 808
 809         return false;
 810 }
 811
 812 static bool is_res_streaming(struct tm6000_core *dev, struct tm6000_fh *fh)
 813 {
 814         /* Is the current fh handling it? if so, that's OK */
 815         if (dev->resources == fh)
 816                 return true;
 817
 818         return false;
 819 }
 820
 821 static bool res_get(struct tm6000_core *dev, struct tm6000_fh *fh,
 822                    bool is_res_read)
 823 {
 824         /* Is the current fh handling it? if so, that's OK */
 825         if (dev->resources == fh && dev->is_res_read == is_res_read)
 826                 return true;
 827
 828         /* is it free? */
 829         if (dev->resources)
 830                 return false;
 831
 832         /* grab it */
 833         dev->resources = fh;
 834         dev->is_res_read = is_res_read;
 835         dprintk(dev, V4L2_DEBUG_RES_LOCK, "res: get\n");
 836         return true;
 837 }
 838
 839 static void res_free(struct tm6000_core *dev, struct tm6000_fh *fh)
 840 {
 841         /* Is the current fh handling it? if so, that's OK */
 842         if (dev->resources != fh)
 843                 return;
 844
 845         dev->resources = NULL;
 846         dprintk(dev, V4L2_DEBUG_RES_LOCK, "res: put\n");
 847 }
 848
 849 /* ------------------------------------------------------------------
 850  *      IOCTL vidioc handling
 851  * ------------------------------------------------------------------
 852  */
 853 static int vidioc_querycap(struct file *file, void  *priv,
 854                                         struct v4l2_capability *cap)
 855 {
 856         struct tm6000_core *dev = ((struct tm6000_fh *)priv)->dev;
 857
 858         strscpy(cap->driver, "tm6000", sizeof(cap->driver));
 859         strscpy(cap->card, "Trident TVMaster TM5600/6000/6010",
 860                 sizeof(cap->card));
 861         usb_make_path(dev->udev, cap->bus_info, sizeof(cap->bus_info));
 862         cap->capabilities = V4L2_CAP_VIDEO_CAPTURE | V4L2_CAP_READWRITE |
 863                             V4L2_CAP_DEVICE_CAPS;
 864         if (dev->tuner_type != TUNER_ABSENT)
 865                 cap->capabilities |= V4L2_CAP_TUNER;
 866         if (dev->caps.has_radio)
 867                 cap->capabilities |= V4L2_CAP_RADIO;
 868
 869         return 0;
 870 }
 871
 872 static int vidioc_enum_fmt_vid_cap(struct file *file, void  *priv,
 873                                         struct v4l2_fmtdesc *f)
 874 {
 875         if (f->index >= ARRAY_SIZE(format))
 876                 return -EINVAL;
 877
 878         strscpy(f->description, format[f->index].name, sizeof(f->description));
 879         f->pixelformat = format[f->index].fourcc;
 880         return 0;
 881 }
 882
 883 static int vidioc_g_fmt_vid_cap(struct file *file, void *priv,
 884                                         struct v4l2_format *f)
 885 {
 886         struct tm6000_fh  *fh = priv;
 887
 888         f->fmt.pix.width        = fh->width;
 889         f->fmt.pix.height       = fh->height;
 890         f->fmt.pix.field        = fh->vb_vidq.field;
 891         f->fmt.pix.pixelformat  = fh->fmt->fourcc;
 892         f->fmt.pix.colorspace   = V4L2_COLORSPACE_SMPTE170M;
 893         f->fmt.pix.bytesperline =
 894                 (f->fmt.pix.width * fh->fmt->depth) >> 3;
 895         f->fmt.pix.sizeimage =
 896                 f->fmt.pix.height * f->fmt.pix.bytesperline;
 897
 898         return 0;
 899 }
 900
 901 static struct tm6000_fmt *format_by_fourcc(unsigned int fourcc)
 902 {
 903         unsigned int i;
 904
 905         for (i = 0; i < ARRAY_SIZE(format); i++)
 906                 if (format[i].fourcc == fourcc)
 907                         return format+i;
 908         return NULL;
 909 }
 910
 911 static int vidioc_try_fmt_vid_cap(struct file *file, void *priv,
 912                         struct v4l2_format *f)
 913 {
 914         struct tm6000_core *dev = ((struct tm6000_fh *)priv)->dev;
 915         struct tm6000_fmt *fmt;
 916         enum v4l2_field field;
 917
 918         fmt = format_by_fourcc(f->fmt.pix.pixelformat);
 919         if (NULL == fmt) {
 920                 dprintk(dev, 2, "Fourcc format (0x%08x) invalid.\n",
 921                         f->fmt.pix.pixelformat);
 922                 return -EINVAL;
 923         }
 924
 925         field = f->fmt.pix.field;
 926
 927         field = V4L2_FIELD_INTERLACED;
 928
 929         tm6000_get_std_res(dev);
 930
 931         f->fmt.pix.width  = dev->width;
 932         f->fmt.pix.height = dev->height;
 933
 934         f->fmt.pix.width &= ~0x01;
 935
 936         f->fmt.pix.field = field;
 937
 938         f->fmt.pix.bytesperline =
 939                 (f->fmt.pix.width * fmt->depth) >> 3;
 940         f->fmt.pix.sizeimage =
 941                 f->fmt.pix.height * f->fmt.pix.bytesperline;
 942         f->fmt.pix.colorspace   = V4L2_COLORSPACE_SMPTE170M;
 943
 944         return 0;
 945 }
 946
 947 /*FIXME: This seems to be generic enough to be at videodev2 */
 948 static int vidioc_s_fmt_vid_cap(struct file *file, void *priv,
 949                                         struct v4l2_format *f)
 950 {
 951         struct tm6000_fh  *fh = priv;
 952         struct tm6000_core *dev = fh->dev;
 953         int ret = vidioc_try_fmt_vid_cap(file, fh, f);
 954         if (ret < 0)
 955                 return ret;
 956
 957         fh->fmt           = format_by_fourcc(f->fmt.pix.pixelformat);
 958         fh->width         = f->fmt.pix.width;
 959         fh->height        = f->fmt.pix.height;
 960         fh->vb_vidq.field = f->fmt.pix.field;
 961         fh->type          = f->type;
 962
 963         dev->fourcc       = f->fmt.pix.pixelformat;
 964
 965         tm6000_set_fourcc_format(dev);
 966
 967         return 0;
 968 }
 969
 970 static int vidioc_reqbufs(struct file *file, void *priv,
 971                            struct v4l2_requestbuffers *p)
 972 {
 973         struct tm6000_fh  *fh = priv;
 974
 975         return videobuf_reqbufs(&fh->vb_vidq, p);
 976 }
 977
 978 static int vidioc_querybuf(struct file *file, void *priv,
 979                             struct v4l2_buffer *p)
 980 {
 981         struct tm6000_fh  *fh = priv;
 982
 983         return videobuf_querybuf(&fh->vb_vidq, p);
 984 }
 985
 986 static int vidioc_qbuf(struct file *file, void *priv, struct v4l2_buffer *p)
 987 {
 988         struct tm6000_fh  *fh = priv;
 989
 990         return videobuf_qbuf(&fh->vb_vidq, p);
 991 }
 992
 993 static int vidioc_dqbuf(struct file *file, void *priv, struct v4l2_buffer *p)
 994 {
 995         struct tm6000_fh  *fh = priv;
 996
 997         return videobuf_dqbuf(&fh->vb_vidq, p,
 998                                 file->f_flags & O_NONBLOCK);
 999 }
1000
1001 static int vidioc_streamon(struct file *file, void *priv, enum v4l2_buf_type i)
1002 {
1003         struct tm6000_fh *fh = priv;
1004         struct tm6000_core *dev = fh->dev;
1005
1006         if (fh->type != V4L2_BUF_TYPE_VIDEO_CAPTURE)
1007                 return -EINVAL;
1008         if (i != fh->type)
1009                 return -EINVAL;
1010
1011         if (!res_get(dev, fh, false))
1012                 return -EBUSY;
1013         return videobuf_streamon(&fh->vb_vidq);
1014 }
1015
1016 static int vidioc_streamoff(struct file *file, void *priv, enum v4l2_buf_type i)
1017 {
1018         struct tm6000_fh *fh = priv;
1019         struct tm6000_core *dev = fh->dev;
1020
1021         if (fh->type != V4L2_BUF_TYPE_VIDEO_CAPTURE)
1022                 return -EINVAL;
1023
1024         if (i != fh->type)
1025                 return -EINVAL;
1026
1027         videobuf_streamoff(&fh->vb_vidq);
1028         res_free(dev, fh);
1029
1030         return 0;
1031 }
1032
1033 static int vidioc_s_std(struct file *file, void *priv, v4l2_std_id norm)
1034 {
1035         int rc = 0;
1036         struct tm6000_fh *fh = priv;
1037         struct tm6000_core *dev = fh->dev;
1038
1039         dev->norm = norm;
1040         rc = tm6000_init_analog_mode(dev);
1041
1042         fh->width  = dev->width;
1043         fh->height = dev->height;
1044
1045         if (rc < 0)
1046                 return rc;
1047
1048         v4l2_device_call_all(&dev->v4l2_dev, 0, video, s_std, dev->norm);
1049
1050         return 0;
1051 }
1052
1053 static int vidioc_g_std(struct file *file, void *priv, v4l2_std_id *norm)
1054 {
1055         struct tm6000_fh *fh = priv;
1056         struct tm6000_core *dev = fh->dev;
1057
1058         *norm = dev->norm;
1059         return 0;
1060 }
1061
1062 static const char *iname[] = {
1063         [TM6000_INPUT_TV] = "Television",
1064         [TM6000_INPUT_COMPOSITE1] = "Composite 1",
1065         [TM6000_INPUT_COMPOSITE2] = "Composite 2",
1066         [TM6000_INPUT_SVIDEO] = "S-Video",
1067 };
1068
1069 static int vidioc_enum_input(struct file *file, void *priv,
1070                                 struct v4l2_input *i)
1071 {
1072         struct tm6000_fh   *fh = priv;
1073         struct tm6000_core *dev = fh->dev;
1074         unsigned int n;
1075
1076         n = i->index;
1077         if (n >= 3)
1078                 return -EINVAL;
1079
1080         if (!dev->vinput[n].type)
1081                 return -EINVAL;
1082
1083         i->index = n;
1084
1085         if (dev->vinput[n].type == TM6000_INPUT_TV)
1086                 i->type = V4L2_INPUT_TYPE_TUNER;
1087         else
1088                 i->type = V4L2_INPUT_TYPE_CAMERA;
1089
1090         strscpy(i->name, iname[dev->vinput[n].type], sizeof(i->name));
1091
1092         i->std = TM6000_STD;
1093
1094         return 0;
1095 }
1096
1097 static int vidioc_g_input(struct file *file, void *priv, unsigned int *i)
1098 {
1099         struct tm6000_fh   *fh = priv;
1100         struct tm6000_core *dev = fh->dev;
1101
1102         *i = dev->input;
1103
1104         return 0;
1105 }
1106
1107 static int vidioc_s_input(struct file *file, void *priv, unsigned int i)
1108 {
1109         struct tm6000_fh   *fh = priv;
1110         struct tm6000_core *dev = fh->dev;
1111         int rc = 0;
1112
1113         if (i >= 3)
1114                 return -EINVAL;
1115         if (!dev->vinput[i].type)
1116                 return -EINVAL;
1117
1118         dev->input = i;
1119
1120         rc = vidioc_s_std(file, priv, dev->norm);
1121
1122         return rc;
1123 }
1124
1125 /* --- controls ---------------------------------------------- */
1126
1127 static int tm6000_s_ctrl(struct v4l2_ctrl *ctrl)
1128 {
1129         struct tm6000_core *dev = container_of(ctrl->handler, struct tm6000_core, ctrl_handler);
1130         u8  val = ctrl->val;
1131
1132         switch (ctrl->id) {
1133         case V4L2_CID_CONTRAST:
1134                 tm6000_set_reg(dev, TM6010_REQ07_R08_LUMA_CONTRAST_ADJ, val);
1135                 return 0;
1136         case V4L2_CID_BRIGHTNESS:
1137                 tm6000_set_reg(dev, TM6010_REQ07_R09_LUMA_BRIGHTNESS_ADJ, val);
1138                 return 0;
1139         case V4L2_CID_SATURATION:
1140                 tm6000_set_reg(dev, TM6010_REQ07_R0A_CHROMA_SATURATION_ADJ, val);
1141                 return 0;
1142         case V4L2_CID_HUE:
1143                 tm6000_set_reg(dev, TM6010_REQ07_R0B_CHROMA_HUE_PHASE_ADJ, val);
1144                 return 0;
1145         }
1146         return -EINVAL;
1147 }
1148
1149 static const struct v4l2_ctrl_ops tm6000_ctrl_ops = {
1150         .s_ctrl = tm6000_s_ctrl,
1151 };
1152
1153 static int tm6000_radio_s_ctrl(struct v4l2_ctrl *ctrl)
1154 {
1155         struct tm6000_core *dev = container_of(ctrl->handler,
1156                         struct tm6000_core, radio_ctrl_handler);
1157         u8  val = ctrl->val;
1158
1159         switch (ctrl->id) {
1160         case V4L2_CID_AUDIO_MUTE:
1161                 dev->ctl_mute = val;
1162                 tm6000_tvaudio_set_mute(dev, val);
1163                 return 0;
1164         case V4L2_CID_AUDIO_VOLUME:
1165                 dev->ctl_volume = val;
1166                 tm6000_set_volume(dev, val);
1167                 return 0;
1168         }
1169         return -EINVAL;
1170 }
1171
1172 static const struct v4l2_ctrl_ops tm6000_radio_ctrl_ops = {
1173         .s_ctrl = tm6000_radio_s_ctrl,
1174 };
1175
1176 static int vidioc_g_tuner(struct file *file, void *priv,
1177                                 struct v4l2_tuner *t)
1178 {
1179         struct tm6000_fh   *fh  = priv;
1180         struct tm6000_core *dev = fh->dev;
1181
1182         if (UNSET == dev->tuner_type)
1183                 return -ENOTTY;
1184         if (0 != t->index)
1185                 return -EINVAL;
1186
1187         strscpy(t->name, "Television", sizeof(t->name));
1188         t->type       = V4L2_TUNER_ANALOG_TV;
1189         t->capability = V4L2_TUNER_CAP_NORM | V4L2_TUNER_CAP_STEREO;
1190         t->rangehigh  = 0xffffffffUL;
1191         t->rxsubchans = V4L2_TUNER_SUB_STEREO;
1192
1193         v4l2_device_call_all(&dev->v4l2_dev, 0, tuner, g_tuner, t);
1194
1195         t->audmode = dev->amode;
1196
1197         return 0;
1198 }
1199
1200 static int vidioc_s_tuner(struct file *file, void *priv,
1201                                 const struct v4l2_tuner *t)
1202 {
1203         struct tm6000_fh   *fh  = priv;
1204         struct tm6000_core *dev = fh->dev;
1205
1206         if (UNSET == dev->tuner_type)
1207                 return -ENOTTY;
1208         if (0 != t->index)
1209                 return -EINVAL;
1210
1211         if (t->audmode > V4L2_TUNER_MODE_STEREO)
1212                 dev->amode = V4L2_TUNER_MODE_STEREO;
1213         else
1214                 dev->amode = t->audmode;
1215         dprintk(dev, 3, "audio mode: %x\n", t->audmode);
1216
1217         v4l2_device_call_all(&dev->v4l2_dev, 0, tuner, s_tuner, t);
1218
1219         return 0;
1220 }
1221
1222 static int vidioc_g_frequency(struct file *file, void *priv,
1223                                 struct v4l2_frequency *f)
1224 {
1225         struct tm6000_fh   *fh  = priv;
1226         struct tm6000_core *dev = fh->dev;
1227
1228         if (UNSET == dev->tuner_type)
1229                 return -ENOTTY;
1230         if (f->tuner)
1231                 return -EINVAL;
1232
1233         f->frequency = dev->freq;
1234
1235         v4l2_device_call_all(&dev->v4l2_dev, 0, tuner, g_frequency, f);
1236
1237         return 0;
1238 }
1239
1240 static int vidioc_s_frequency(struct file *file, void *priv,
1241                                 const struct v4l2_frequency *f)
1242 {
1243         struct tm6000_fh   *fh  = priv;
1244         struct tm6000_core *dev = fh->dev;
1245
1246         if (UNSET == dev->tuner_type)
1247                 return -ENOTTY;
1248         if (f->tuner != 0)
1249                 return -EINVAL;
1250
1251         dev->freq = f->frequency;
1252         v4l2_device_call_all(&dev->v4l2_dev, 0, tuner, s_frequency, f);
1253
1254         return 0;
1255 }
1256
1257 static int radio_g_tuner(struct file *file, void *priv,
1258                                         struct v4l2_tuner *t)
1259 {
1260         struct tm6000_fh *fh = file->private_data;
1261         struct tm6000_core *dev = fh->dev;
1262
1263         if (0 != t->index)
1264                 return -EINVAL;
1265
1266         memset(t, 0, sizeof(*t));
1267         strscpy(t->name, "Radio", sizeof(t->name));
1268         t->type = V4L2_TUNER_RADIO;
1269         t->capability = V4L2_TUNER_CAP_LOW | V4L2_TUNER_CAP_STEREO;
1270         t->rxsubchans = V4L2_TUNER_SUB_STEREO;
1271         t->audmode = V4L2_TUNER_MODE_STEREO;
1272
1273         v4l2_device_call_all(&dev->v4l2_dev, 0, tuner, g_tuner, t);
1274
1275         return 0;
1276 }
1277
1278 static int radio_s_tuner(struct file *file, void *priv,
1279                                         const struct v4l2_tuner *t)
1280 {
1281         struct tm6000_fh *fh = file->private_data;
1282         struct tm6000_core *dev = fh->dev;
1283
1284         if (0 != t->index)
1285                 return -EINVAL;
1286         v4l2_device_call_all(&dev->v4l2_dev, 0, tuner, s_tuner, t);
1287         return 0;
1288 }
1289
1290 /* ------------------------------------------------------------------
1291         File operations for the device
1292    ------------------------------------------------------------------*/
1293
1294 static int __tm6000_open(struct file *file)
1295 {
1296         struct video_device *vdev = video_devdata(file);
1297         struct tm6000_core *dev = video_drvdata(file);
1298         struct tm6000_fh *fh;
1299         enum v4l2_buf_type type = V4L2_BUF_TYPE_VIDEO_CAPTURE;
1300         int rc;
1301         int radio = 0;
1302
1303         dprintk(dev, V4L2_DEBUG_OPEN, "tm6000: open called (dev=%s)\n",
1304                 video_device_node_name(vdev));
1305
1306         switch (vdev->vfl_type) {
1307         case VFL_TYPE_GRABBER:
1308                 type = V4L2_BUF_TYPE_VIDEO_CAPTURE;
1309                 break;
1310         case VFL_TYPE_VBI:
1311                 type = V4L2_BUF_TYPE_VBI_CAPTURE;
1312                 break;
1313         case VFL_TYPE_RADIO:
1314                 radio = 1;
1315                 break;
1316         default:
1317                 return -EINVAL;
1318         }
1319
1320         /* If more than one user, mutex should be added */
1321         dev->users++;
1322
1323         dprintk(dev, V4L2_DEBUG_OPEN, "open dev=%s type=%s users=%d\n",
1324                 video_device_node_name(vdev), v4l2_type_names[type],
1325                 dev->users);
1326
1327         /* allocate + initialize per filehandle data */
1328         fh = kzalloc(sizeof(*fh), GFP_KERNEL);
1329         if (NULL == fh) {
1330                 dev->users--;
1331                 return -ENOMEM;
1332         }
1333
1334         v4l2_fh_init(&fh->fh, vdev);
1335         file->private_data = fh;
1336         fh->dev      = dev;
1337         fh->radio    = radio;
1338         dev->radio   = radio;
1339         fh->type     = type;
1340         dev->fourcc  = format[0].fourcc;
1341
1342         fh->fmt      = format_by_fourcc(dev->fourcc);
1343
1344         tm6000_get_std_res(dev);
1345
1346         fh->width = dev->width;
1347         fh->height = dev->height;
1348
1349         dprintk(dev, V4L2_DEBUG_OPEN, "Open: fh=%p, dev=%p, dev->vidq=%p\n",
1350                 fh, dev, &dev->vidq);
1351         dprintk(dev, V4L2_DEBUG_OPEN, "Open: list_empty queued=%d\n",
1352                 list_empty(&dev->vidq.queued));
1353         dprintk(dev, V4L2_DEBUG_OPEN, "Open: list_empty active=%d\n",
1354                 list_empty(&dev->vidq.active));
1355
1356         /* initialize hardware on analog mode */
1357         rc = tm6000_init_analog_mode(dev);
1358         if (rc < 0) {
1359                 v4l2_fh_exit(&fh->fh);
1360                 kfree(fh);
1361                 return rc;
1362         }
1363
1364         dev->mode = TM6000_MODE_ANALOG;
1365
1366         if (!fh->radio) {
1367                 videobuf_queue_vmalloc_init(&fh->vb_vidq, &tm6000_video_qops,
1368                                 NULL, &dev->slock,
1369                                 fh->type,
1370                                 V4L2_FIELD_INTERLACED,
1371                                 sizeof(struct tm6000_buffer), fh, &dev->lock);
1372         } else {
1373                 dprintk(dev, V4L2_DEBUG_OPEN, "video_open: setting radio device\n");
1374                 tm6000_set_audio_rinput(dev);
1375                 v4l2_device_call_all(&dev->v4l2_dev, 0, tuner, s_radio);
1376                 tm6000_prepare_isoc(dev);
1377                 tm6000_start_thread(dev);
1378         }
1379         v4l2_fh_add(&fh->fh);
1380
1381         return 0;
1382 }
1383
1384 static int tm6000_open(struct file *file)
1385 {
1386         struct video_device *vdev = video_devdata(file);
1387         int res;
1388
1389         mutex_lock(vdev->lock);
1390         res = __tm6000_open(file);
1391         mutex_unlock(vdev->lock);
1392         return res;
1393 }
1394
1395 static ssize_t
1396 tm6000_read(struct file *file, char __user *data, size_t count, loff_t *pos)
1397 {
1398         struct tm6000_fh *fh = file->private_data;
1399         struct tm6000_core *dev = fh->dev;
1400
1401         if (fh->type == V4L2_BUF_TYPE_VIDEO_CAPTURE) {
1402                 int res;
1403
1404                 if (!res_get(fh->dev, fh, true))
1405                         return -EBUSY;
1406
1407                 if (mutex_lock_interruptible(&dev->lock))
1408                         return -ERESTARTSYS;
1409                 res = videobuf_read_stream(&fh->vb_vidq, data, count, pos, 0,
1410                                         file->f_flags & O_NONBLOCK);
1411                 mutex_unlock(&dev->lock);
1412                 return res;
1413         }
1414         return 0;
1415 }
1416
1417 static __poll_t
1418 __tm6000_poll(struct file *file, struct poll_table_struct *wait)
1419 {
1420         __poll_t req_events = poll_requested_events(wait);
1421         struct tm6000_fh        *fh = file->private_data;
1422         struct tm6000_buffer    *buf;
1423         __poll_t res = 0;
1424
1425         if (v4l2_event_pending(&fh->fh))
1426                 res = EPOLLPRI;
1427         else if (req_events & EPOLLPRI)
1428                 poll_wait(file, &fh->fh.wait, wait);
1429         if (V4L2_BUF_TYPE_VIDEO_CAPTURE != fh->type)
1430                 return res | EPOLLERR;
1431
1432         if (!!is_res_streaming(fh->dev, fh))
1433                 return res | EPOLLERR;
1434
1435         if (!is_res_read(fh->dev, fh)) {
1436                 /* streaming capture */
1437                 if (list_empty(&fh->vb_vidq.stream))
1438                         return res | EPOLLERR;
1439                 buf = list_entry(fh->vb_vidq.stream.next, struct tm6000_buffer, vb.stream);
1440                 poll_wait(file, &buf->vb.done, wait);
1441                 if (buf->vb.state == VIDEOBUF_DONE ||
1442                     buf->vb.state == VIDEOBUF_ERROR)
1443                         return res | EPOLLIN | EPOLLRDNORM;
1444         } else if (req_events & (EPOLLIN | EPOLLRDNORM)) {
1445                 /* read() capture */
1446                 return res | videobuf_poll_stream(file, &fh->vb_vidq, wait);
1447         }
1448         return res;
1449 }
1450
1451 static __poll_t tm6000_poll(struct file *file, struct poll_table_struct *wait)
1452 {
1453         struct tm6000_fh *fh = file->private_data;
1454         struct tm6000_core *dev = fh->dev;
1455         __poll_t res;
1456
1457         mutex_lock(&dev->lock);
1458         res = __tm6000_poll(file, wait);
1459         mutex_unlock(&dev->lock);
1460         return res;
1461 }
1462
1463 static int tm6000_release(struct file *file)
1464 {
1465         struct tm6000_fh         *fh = file->private_data;
1466         struct tm6000_core      *dev = fh->dev;
1467         struct video_device    *vdev = video_devdata(file);
1468
1469         dprintk(dev, V4L2_DEBUG_OPEN, "tm6000: close called (dev=%s, users=%d)\n",
1470                 video_device_node_name(vdev), dev->users);
1471
1472         mutex_lock(&dev->lock);
1473         dev->users--;
1474
1475         res_free(dev, fh);
1476
1477         if (!dev->users) {
1478                 tm6000_uninit_isoc(dev);
1479
1480                 /* Stop interrupt USB pipe */
1481                 tm6000_ir_int_stop(dev);
1482
1483                 usb_reset_configuration(dev->udev);
1484
1485                 if (dev->int_in.endp)
1486                         usb_set_interface(dev->udev,
1487                                         dev->isoc_in.bInterfaceNumber, 2);
1488                 else
1489                         usb_set_interface(dev->udev,
1490                                         dev->isoc_in.bInterfaceNumber, 0);
1491
1492                 /* Start interrupt USB pipe */
1493                 tm6000_ir_int_start(dev);
1494
1495                 if (!fh->radio)
1496                         videobuf_mmap_free(&fh->vb_vidq);
1497         }
1498         v4l2_fh_del(&fh->fh);
1499         v4l2_fh_exit(&fh->fh);
1500         kfree(fh);
1501         mutex_unlock(&dev->lock);
1502
1503         return 0;
1504 }
1505
1506 static int tm6000_mmap(struct file *file, struct vm_area_struct * vma)
1507 {
1508         struct tm6000_fh *fh = file->private_data;
1509         struct tm6000_core *dev = fh->dev;
1510         int res;
1511
1512         if (mutex_lock_interruptible(&dev->lock))
1513                 return -ERESTARTSYS;
1514         res = videobuf_mmap_mapper(&fh->vb_vidq, vma);
1515         mutex_unlock(&dev->lock);
1516         return res;
1517 }
1518
1519 static const struct v4l2_file_operations tm6000_fops = {
1520         .owner = THIS_MODULE,
1521         .open = tm6000_open,
1522         .release = tm6000_release,
1523         .unlocked_ioctl = video_ioctl2, /* V4L2 ioctl handler */
1524         .read = tm6000_read,
1525         .poll = tm6000_poll,
1526         .mmap = tm6000_mmap,
1527 };
1528
1529 static const struct v4l2_ioctl_ops video_ioctl_ops = {
1530         .vidioc_querycap          = vidioc_querycap,
1531         .vidioc_enum_fmt_vid_cap  = vidioc_enum_fmt_vid_cap,
1532         .vidioc_g_fmt_vid_cap     = vidioc_g_fmt_vid_cap,
1533         .vidioc_try_fmt_vid_cap   = vidioc_try_fmt_vid_cap,
1534         .vidioc_s_fmt_vid_cap     = vidioc_s_fmt_vid_cap,
1535         .vidioc_s_std             = vidioc_s_std,
1536         .vidioc_g_std             = vidioc_g_std,
1537         .vidioc_enum_input        = vidioc_enum_input,
1538         .vidioc_g_input           = vidioc_g_input,
1539         .vidioc_s_input           = vidioc_s_input,
1540         .vidioc_g_tuner           = vidioc_g_tuner,
1541         .vidioc_s_tuner           = vidioc_s_tuner,
1542         .vidioc_g_frequency       = vidioc_g_frequency,
1543         .vidioc_s_frequency       = vidioc_s_frequency,
1544         .vidioc_streamon          = vidioc_streamon,
1545         .vidioc_streamoff         = vidioc_streamoff,
1546         .vidioc_reqbufs           = vidioc_reqbufs,
1547         .vidioc_querybuf          = vidioc_querybuf,
1548         .vidioc_qbuf              = vidioc_qbuf,
1549         .vidioc_dqbuf             = vidioc_dqbuf,
1550         .vidioc_subscribe_event = v4l2_ctrl_subscribe_event,
1551         .vidioc_unsubscribe_event = v4l2_event_unsubscribe,
1552 };
1553
1554 static struct video_device tm6000_template = {
1555         .name           = "tm6000",
1556         .fops           = &tm6000_fops,
1557         .ioctl_ops      = &video_ioctl_ops,
1558         .release        = video_device_release_empty,
1559         .tvnorms        = TM6000_STD,
1560 };
1561
1562 static const struct v4l2_file_operations radio_fops = {
1563         .owner          = THIS_MODULE,
1564         .open           = tm6000_open,
1565         .poll           = v4l2_ctrl_poll,
1566         .release        = tm6000_release,
1567         .unlocked_ioctl = video_ioctl2,
1568 };
1569
1570 static const struct v4l2_ioctl_ops radio_ioctl_ops = {
1571         .vidioc_querycap        = vidioc_querycap,
1572         .vidioc_g_tuner         = radio_g_tuner,
1573         .vidioc_s_tuner         = radio_s_tuner,
1574         .vidioc_g_frequency     = vidioc_g_frequency,
1575         .vidioc_s_frequency     = vidioc_s_frequency,
1576         .vidioc_subscribe_event = v4l2_ctrl_subscribe_event,
1577         .vidioc_unsubscribe_event = v4l2_event_unsubscribe,
1578 };
1579
1580 static struct video_device tm6000_radio_template = {
1581         .name                   = "tm6000",
1582         .fops                   = &radio_fops,
1583         .ioctl_ops              = &radio_ioctl_ops,
1584 };
1585
1586 /* -----------------------------------------------------------------
1587  *      Initialization and module stuff
1588  * ------------------------------------------------------------------
1589  */
1590
1591 static void vdev_init(struct tm6000_core *dev,
1592                 struct video_device *vfd,
1593                 const struct video_device
1594                 *template, const char *type_name)
1595 {
1596         *vfd = *template;
1597         vfd->v4l2_dev = &dev->v4l2_dev;
1598         vfd->release = video_device_release_empty;
1599         vfd->lock = &dev->lock;
1600
1601         snprintf(vfd->name, sizeof(vfd->name), "%s %s", dev->name, type_name);
1602
1603         video_set_drvdata(vfd, dev);
1604 }
1605
1606 int tm6000_v4l2_register(struct tm6000_core *dev)
1607 {
1608         int ret = 0;
1609
1610         v4l2_ctrl_handler_init(&dev->ctrl_handler, 6);
1611         v4l2_ctrl_handler_init(&dev->radio_ctrl_handler, 2);
1612         v4l2_ctrl_new_std(&dev->radio_ctrl_handler, &tm6000_radio_ctrl_ops,
1613                         V4L2_CID_AUDIO_MUTE, 0, 1, 1, 0);
1614         v4l2_ctrl_new_std(&dev->radio_ctrl_handler, &tm6000_radio_ctrl_ops,
1615                         V4L2_CID_AUDIO_VOLUME, -15, 15, 1, 0);
1616         v4l2_ctrl_new_std(&dev->ctrl_handler, &tm6000_ctrl_ops,
1617                         V4L2_CID_BRIGHTNESS, 0, 255, 1, 54);
1618         v4l2_ctrl_new_std(&dev->ctrl_handler, &tm6000_ctrl_ops,
1619                         V4L2_CID_CONTRAST, 0, 255, 1, 119);
1620         v4l2_ctrl_new_std(&dev->ctrl_handler, &tm6000_ctrl_ops,
1621                         V4L2_CID_SATURATION, 0, 255, 1, 112);
1622         v4l2_ctrl_new_std(&dev->ctrl_handler, &tm6000_ctrl_ops,
1623                         V4L2_CID_HUE, -128, 127, 1, 0);
1624         v4l2_ctrl_add_handler(&dev->ctrl_handler,
1625                         &dev->radio_ctrl_handler, NULL, false);
1626
1627         if (dev->radio_ctrl_handler.error)
1628                 ret = dev->radio_ctrl_handler.error;
1629         if (!ret && dev->ctrl_handler.error)
1630                 ret = dev->ctrl_handler.error;
1631         if (ret)
1632                 goto free_ctrl;
1633
1634         vdev_init(dev, &dev->vfd, &tm6000_template, "video");
1635
1636         dev->vfd.ctrl_handler = &dev->ctrl_handler;
1637         dev->vfd.device_caps = V4L2_CAP_VIDEO_CAPTURE | V4L2_CAP_STREAMING |
1638                                V4L2_CAP_READWRITE;
1639         if (dev->tuner_type != TUNER_ABSENT)
1640                 dev->vfd.device_caps |= V4L2_CAP_TUNER;
1641
1642         /* init video dma queues */
1643         INIT_LIST_HEAD(&dev->vidq.active);
1644         INIT_LIST_HEAD(&dev->vidq.queued);
1645
1646         ret = video_register_device(&dev->vfd, VFL_TYPE_GRABBER, video_nr);
1647
1648         if (ret < 0) {
1649                 printk(KERN_INFO "%s: can't register video device\n",
1650                        dev->name);
1651                 goto free_ctrl;
1652         }
1653
1654         printk(KERN_INFO "%s: registered device %s\n",
1655                dev->name, video_device_node_name(&dev->vfd));
1656
1657         if (dev->caps.has_radio) {
1658                 vdev_init(dev, &dev->radio_dev, &tm6000_radio_template,
1659                                                            "radio");
1660                 dev->radio_dev.ctrl_handler = &dev->radio_ctrl_handler;
1661                 dev->radio_dev.device_caps = V4L2_CAP_RADIO | V4L2_CAP_TUNER;
1662                 ret = video_register_device(&dev->radio_dev, VFL_TYPE_RADIO,
1663                                             radio_nr);
1664                 if (ret < 0) {
1665                         printk(KERN_INFO "%s: can't register radio device\n",
1666                                dev->name);
1667                         goto unreg_video;
1668                 }
1669
1670                 printk(KERN_INFO "%s: registered device %s\n",
1671                        dev->name, video_device_node_name(&dev->radio_dev));
1672         }
1673
1674         printk(KERN_INFO "Trident TVMaster TM5600/TM6000/TM6010 USB2 board (Load status: %d)\n", ret);
1675         return ret;
1676
1677 unreg_video:
1678         video_unregister_device(&dev->vfd);
1679 free_ctrl:
1680         v4l2_ctrl_handler_free(&dev->ctrl_handler);
1681         v4l2_ctrl_handler_free(&dev->radio_ctrl_handler);
1682         return ret;
1683 }
1684
1685 int tm6000_v4l2_unregister(struct tm6000_core *dev)
1686 {
1687         video_unregister_device(&dev->vfd);
1688
1689         /* if URB buffers are still allocated free them now */
1690         tm6000_free_urb_buffers(dev);
1691
1692         video_unregister_device(&dev->radio_dev);
1693         return 0;
1694 }
1695
1696 int tm6000_v4l2_exit(void)
1697 {
1698         return 0;
1699 }
1700
1701 module_param(video_nr, int, 0);
1702 MODULE_PARM_DESC(video_nr, "Allow changing video device number");
1703
1704 module_param_named(debug, tm6000_debug, int, 0444);
1705 MODULE_PARM_DESC(debug, "activates debug info");
1706
1707 module_param(vid_limit, int, 0644);
1708 MODULE_PARM_DESC(vid_limit, "capture memory limit in megabytes");
1709
1710 module_param(keep_urb, bool, 0);
1711 MODULE_PARM_DESC(keep_urb, "Keep urb buffers allocated even when the device is closed by the user");