drivers/media/usb/tm6000/tm6000-video.c

   1 // SPDX-License-Identifier: GPL-2.0
   2 // tm6000-video.c - driver for TM5600/TM6000/TM6010 USB video capture devices
   3 //
   4 // Copyright (c) 2006-2007 Mauro Carvalho Chehab <mchehab@kernel.org>
   5 //
   6 // Copyright (c) 2007 Michel Ludwig <michel.ludwig@gmail.com>
   7 //      - Fixed module load/unload
   8
   9 #include <linux/module.h>
  10 #include <linux/delay.h>
  11 #include <linux/errno.h>
  12 #include <linux/fs.h>
  13 #include <linux/kernel.h>
  14 #include <linux/slab.h>
  15 #include <linux/mm.h>
  16 #include <linux/ioport.h>
  17 #include <linux/init.h>
  18 #include <linux/sched.h>
  19 #include <linux/random.h>
  20 #include <linux/usb.h>
  21 #include <linux/videodev2.h>
  22 #include <media/v4l2-ioctl.h>
  23 #include <media/v4l2-event.h>
  24 #include <media/tuner.h>
  25 #include <linux/interrupt.h>
  26 #include <linux/kthread.h>
  27 #include <linux/highmem.h>
  28 #include <linux/freezer.h>
  29
  30 #include "tm6000-regs.h"
  31 #include "tm6000.h"
  32
  33 #define BUFFER_TIMEOUT     msecs_to_jiffies(2000)  /* 2 seconds */
  34
  35 /* Limits minimum and default number of buffers */
  36 #define TM6000_MIN_BUF 4
  37 #define TM6000_DEF_BUF 8
  38
  39 #define TM6000_NUM_URB_BUF 8
  40
  41 #define TM6000_MAX_ISO_PACKETS  46      /* Max number of ISO packets */
  42
  43 /* Declare static vars that will be used as parameters */
  44 static unsigned int vid_limit = 16;     /* Video memory limit, in Mb */
  45 static int video_nr = -1;               /* /dev/videoN, -1 for autodetect */
  46 static int radio_nr = -1;               /* /dev/radioN, -1 for autodetect */
  47 static bool keep_urb;                   /* keep urb buffers allocated */
  48
  49 /* Debug level */
  50 int tm6000_debug;
  51 EXPORT_SYMBOL_GPL(tm6000_debug);
  52
  53 static struct tm6000_fmt format[] = {
  54         {
  55                 .name     = "4:2:2, packed, YVY2",
  56                 .fourcc   = V4L2_PIX_FMT_YUYV,
  57                 .depth    = 16,
  58         }, {
  59                 .name     = "4:2:2, packed, UYVY",
  60                 .fourcc   = V4L2_PIX_FMT_UYVY,
  61                 .depth    = 16,
  62         }, {
  63                 .name     = "A/V + VBI mux packet",
  64                 .fourcc   = V4L2_PIX_FMT_TM6000,
  65                 .depth    = 16,
  66         }
  67 };
  68
  69 /* ------------------------------------------------------------------
  70  *      DMA and thread functions
  71  * ------------------------------------------------------------------
  72  */
  73
  74 #define norm_maxw(a) 720
  75 #define norm_maxh(a) 576
  76
  77 #define norm_minw(a) norm_maxw(a)
  78 #define norm_minh(a) norm_maxh(a)
  79
  80 /*
  81  * video-buf generic routine to get the next available buffer
  82  */
  83 static inline void get_next_buf(struct tm6000_dmaqueue *dma_q,
  84                                struct tm6000_buffer   **buf)
  85 {
  86         struct tm6000_core *dev = container_of(dma_q, struct tm6000_core, vidq);
  87
  88         if (list_empty(&dma_q->active)) {
  89                 dprintk(dev, V4L2_DEBUG_QUEUE, "No active queue to serve\n");
  90                 *buf = NULL;
  91                 return;
  92         }
  93
  94         *buf = list_entry(dma_q->active.next,
  95                         struct tm6000_buffer, vb.queue);
  96 }
  97
  98 /*
  99  * Announces that a buffer were filled and request the next
 100  */
 101 static inline void buffer_filled(struct tm6000_core *dev,
 102                                  struct tm6000_dmaqueue *dma_q,
 103                                  struct tm6000_buffer *buf)
 104 {
 105         /* Advice that buffer was filled */
 106         dprintk(dev, V4L2_DEBUG_ISOC, "[%p/%d] wakeup\n", buf, buf->vb.i);
 107         buf->vb.state = VIDEOBUF_DONE;
 108         buf->vb.field_count++;
 109         v4l2_get_timestamp(&buf->vb.ts);
 110
 111         list_del(&buf->vb.queue);
 112         wake_up(&buf->vb.done);
 113 }
 114
 115 /*
 116  * Identify the tm5600/6000 buffer header type and properly handles
 117  */
 118 static int copy_streams(u8 *data, unsigned long len,
 119                         struct urb *urb)
 120 {
 121         struct tm6000_dmaqueue  *dma_q = urb->context;
 122         struct tm6000_core *dev = container_of(dma_q, struct tm6000_core, vidq);
 123         u8 *ptr = data, *endp = data+len;
 124         unsigned long header = 0;
 125         int rc = 0;
 126         unsigned int cmd, cpysize, pktsize, size, field, block, line, pos = 0;
 127         struct tm6000_buffer *vbuf = NULL;
 128         char *voutp = NULL;
 129         unsigned int linewidth;
 130
 131         if (!dev->radio) {
 132                 /* get video buffer */
 133                 get_next_buf(dma_q, &vbuf);
 134
 135                 if (!vbuf)
 136                         return rc;
 137                 voutp = videobuf_to_vmalloc(&vbuf->vb);
 138
 139                 if (!voutp)
 140                         return 0;
 141         }
 142
 143         for (ptr = data; ptr < endp;) {
 144                 if (!dev->isoc_ctl.cmd) {
 145                         /* Header */
 146                         if (dev->isoc_ctl.tmp_buf_len > 0) {
 147                                 /* from last urb or packet */
 148                                 header = dev->isoc_ctl.tmp_buf;
 149                                 if (4 - dev->isoc_ctl.tmp_buf_len > 0) {
 150                                         memcpy((u8 *)&header +
 151                                                 dev->isoc_ctl.tmp_buf_len,
 152                                                 ptr,
 153                                                 4 - dev->isoc_ctl.tmp_buf_len);
 154                                         ptr += 4 - dev->isoc_ctl.tmp_buf_len;
 155                                 }
 156                                 dev->isoc_ctl.tmp_buf_len = 0;
 157                         } else {
 158                                 if (ptr + 3 >= endp) {
 159                                         /* have incomplete header */
 160                                         dev->isoc_ctl.tmp_buf_len = endp - ptr;
 161                                         memcpy(&dev->isoc_ctl.tmp_buf, ptr,
 162                                                 dev->isoc_ctl.tmp_buf_len);
 163                                         return rc;
 164                                 }
 165                                 /* Seek for sync */
 166                                 for (; ptr < endp - 3; ptr++) {
 167                                         if (*(ptr + 3) == 0x47)
 168                                                 break;
 169                                 }
 170                                 /* Get message header */
 171                                 header = *(unsigned long *)ptr;
 172                                 ptr += 4;
 173                         }
 174
 175                         /* split the header fields */
 176                         size = ((header & 0x7e) << 1);
 177                         if (size > 0)
 178                                 size -= 4;
 179                         block = (header >> 7) & 0xf;
 180                         field = (header >> 11) & 0x1;
 181                         line  = (header >> 12) & 0x1ff;
 182                         cmd   = (header >> 21) & 0x7;
 183                         /* Validates haeder fields */
 184                         if (size > TM6000_URB_MSG_LEN)
 185                                 size = TM6000_URB_MSG_LEN;
 186                         pktsize = TM6000_URB_MSG_LEN;
 187                         /*
 188                          * calculate position in buffer and change the buffer
 189                          */
 190                         switch (cmd) {
 191                         case TM6000_URB_MSG_VIDEO:
 192                                 if (!dev->radio) {
 193                                         if ((dev->isoc_ctl.vfield != field) &&
 194                                                 (field == 1)) {
 195                                                 /*
 196                                                  * Announces that a new buffer
 197                                                  * were filled
 198                                                  */
 199                                                 buffer_filled(dev, dma_q, vbuf);
 200                                                 dprintk(dev, V4L2_DEBUG_ISOC,
 201                                                         "new buffer filled\n");
 202                                                 get_next_buf(dma_q, &vbuf);
 203                                                 if (!vbuf)
 204                                                         return rc;
 205                                                 voutp = videobuf_to_vmalloc(&vbuf->vb);
 206                                                 if (!voutp)
 207                                                         return rc;
 208                                                 memset(voutp, 0, vbuf->vb.size);
 209                                         }
 210                                         linewidth = vbuf->vb.width << 1;
 211                                         pos = ((line << 1) - field - 1) *
 212                                         linewidth + block * TM6000_URB_MSG_LEN;
 213                                         /* Don't allow to write out of the buffer */
 214                                         if (pos + size > vbuf->vb.size)
 215                                                 cmd = TM6000_URB_MSG_ERR;
 216                                         dev->isoc_ctl.vfield = field;
 217                                 }
 218                                 break;
 219                         case TM6000_URB_MSG_VBI:
 220                                 break;
 221                         case TM6000_URB_MSG_AUDIO:
 222                         case TM6000_URB_MSG_PTS:
 223                                 size = pktsize; /* Size is always 180 bytes */
 224                                 break;
 225                         }
 226                 } else {
 227                         /* Continue the last copy */
 228                         cmd = dev->isoc_ctl.cmd;
 229                         size = dev->isoc_ctl.size;
 230                         pos = dev->isoc_ctl.pos;
 231                         pktsize = dev->isoc_ctl.pktsize;
 232                         field = dev->isoc_ctl.field;
 233                 }
 234                 cpysize = (endp - ptr > size) ? size : endp - ptr;
 235                 if (cpysize) {
 236                         /* copy data in different buffers */
 237                         switch (cmd) {
 238                         case TM6000_URB_MSG_VIDEO:
 239                                 /* Fills video buffer */
 240                                 if (vbuf)
 241                                         memcpy(&voutp[pos], ptr, cpysize);
 242                                 break;
 243                         case TM6000_URB_MSG_AUDIO: {
 244                                 int i;
 245                                 for (i = 0; i < cpysize; i += 2)
 246                                         swab16s((u16 *)(ptr + i));
 247
 248                                 tm6000_call_fillbuf(dev, TM6000_AUDIO, ptr, cpysize);
 249                                 break;
 250                         }
 251                         case TM6000_URB_MSG_VBI:
 252                                 /* Need some code to copy vbi buffer */
 253                                 break;
 254                         case TM6000_URB_MSG_PTS: {
 255                                 /* Need some code to copy pts */
 256                                 u32 pts;
 257                                 pts = *(u32 *)ptr;
 258                                 dprintk(dev, V4L2_DEBUG_ISOC, "field %d, PTS %x",
 259                                         field, pts);
 260                                 break;
 261                         }
 262                         }
 263                 }
 264                 if (ptr + pktsize > endp) {
 265                         /*
 266                          * End of URB packet, but cmd processing is not
 267                          * complete. Preserve the state for a next packet
 268                          */
 269                         dev->isoc_ctl.pos = pos + cpysize;
 270                         dev->isoc_ctl.size = size - cpysize;
 271                         dev->isoc_ctl.cmd = cmd;
 272                         dev->isoc_ctl.field = field;
 273                         dev->isoc_ctl.pktsize = pktsize - (endp - ptr);
 274                         ptr += endp - ptr;
 275                 } else {
 276                         dev->isoc_ctl.cmd = 0;
 277                         ptr += pktsize;
 278                 }
 279         }
 280         return 0;
 281 }
 282
 283 /*
 284  * Identify the tm5600/6000 buffer header type and properly handles
 285  */
 286 static int copy_multiplexed(u8 *ptr, unsigned long len,
 287                         struct urb *urb)
 288 {
 289         struct tm6000_dmaqueue  *dma_q = urb->context;
 290         struct tm6000_core *dev = container_of(dma_q, struct tm6000_core, vidq);
 291         unsigned int pos = dev->isoc_ctl.pos, cpysize;
 292         int rc = 1;
 293         struct tm6000_buffer *buf;
 294         char *outp = NULL;
 295
 296         get_next_buf(dma_q, &buf);
 297         if (buf)
 298                 outp = videobuf_to_vmalloc(&buf->vb);
 299
 300         if (!outp)
 301                 return 0;
 302
 303         while (len > 0) {
 304                 cpysize = min(len, buf->vb.size-pos);
 305                 memcpy(&outp[pos], ptr, cpysize);
 306                 pos += cpysize;
 307                 ptr += cpysize;
 308                 len -= cpysize;
 309                 if (pos >= buf->vb.size) {
 310                         pos = 0;
 311                         /* Announces that a new buffer were filled */
 312                         buffer_filled(dev, dma_q, buf);
 313                         dprintk(dev, V4L2_DEBUG_ISOC, "new buffer filled\n");
 314                         get_next_buf(dma_q, &buf);
 315                         if (!buf)
 316                                 break;
 317                         outp = videobuf_to_vmalloc(&(buf->vb));
 318                         if (!outp)
 319                                 return rc;
 320                         pos = 0;
 321                 }
 322         }
 323
 324         dev->isoc_ctl.pos = pos;
 325         return rc;
 326 }
 327
 328 static inline void print_err_status(struct tm6000_core *dev,
 329                                      int packet, int status)
 330 {
 331         char *errmsg = "Unknown";
 332
 333         switch (status) {
 334         case -ENOENT:
 335                 errmsg = "unlinked synchronously";
 336                 break;
 337         case -ECONNRESET:
 338                 errmsg = "unlinked asynchronously";
 339                 break;
 340         case -ENOSR:
 341                 errmsg = "Buffer error (overrun)";
 342                 break;
 343         case -EPIPE:
 344                 errmsg = "Stalled (device not responding)";
 345                 break;
 346         case -EOVERFLOW:
 347                 errmsg = "Babble (bad cable?)";
 348                 break;
 349         case -EPROTO:
 350                 errmsg = "Bit-stuff error (bad cable?)";
 351                 break;
 352         case -EILSEQ:
 353                 errmsg = "CRC/Timeout (could be anything)";
 354                 break;
 355         case -ETIME:
 356                 errmsg = "Device does not respond";
 357                 break;
 358         }
 359         if (packet < 0) {
 360                 dprintk(dev, V4L2_DEBUG_QUEUE, "URB status %d [%s].\n",
 361                         status, errmsg);
 362         } else {
 363                 dprintk(dev, V4L2_DEBUG_QUEUE, "URB packet %d, status %d [%s].\n",
 364                         packet, status, errmsg);
 365         }
 366 }
 367
 368
 369 /*
 370  * Controls the isoc copy of each urb packet
 371  */
 372 static inline int tm6000_isoc_copy(struct urb *urb)
 373 {
 374         struct tm6000_dmaqueue  *dma_q = urb->context;
 375         struct tm6000_core *dev = container_of(dma_q, struct tm6000_core, vidq);
 376         int i, len = 0, rc = 1, status;
 377         char *p;
 378
 379         if (urb->status < 0) {
 380                 print_err_status(dev, -1, urb->status);
 381                 return 0;
 382         }
 383
 384         for (i = 0; i < urb->number_of_packets; i++) {
 385                 status = urb->iso_frame_desc[i].status;
 386
 387                 if (status < 0) {
 388                         print_err_status(dev, i, status);
 389                         continue;
 390                 }
 391
 392                 len = urb->iso_frame_desc[i].actual_length;
 393
 394                 if (len > 0) {
 395                         p = urb->transfer_buffer + urb->iso_frame_desc[i].offset;
 396                         if (!urb->iso_frame_desc[i].status) {
 397                                 if ((dev->fourcc) == V4L2_PIX_FMT_TM6000) {
 398                                         rc = copy_multiplexed(p, len, urb);
 399                                         if (rc <= 0)
 400                                                 return rc;
 401                                 } else {
 402                                         copy_streams(p, len, urb);
 403                                 }
 404                         }
 405                 }
 406         }
 407         return rc;
 408 }
 409
 410 /* ------------------------------------------------------------------
 411  *      URB control
 412  * ------------------------------------------------------------------
 413  */
 414
 415 /*
 416  * IRQ callback, called by URB callback
 417  */
 418 static void tm6000_irq_callback(struct urb *urb)
 419 {
 420         struct tm6000_dmaqueue  *dma_q = urb->context;
 421         struct tm6000_core *dev = container_of(dma_q, struct tm6000_core, vidq);
 422         int i;
 423
 424         switch (urb->status) {
 425         case 0:
 426         case -ETIMEDOUT:
 427                 break;
 428
 429         case -ECONNRESET:
 430         case -ENOENT:
 431         case -ESHUTDOWN:
 432                 return;
 433
 434         default:
 435                 tm6000_err("urb completion error %d.\n", urb->status);
 436                 break;
 437         }
 438
 439         spin_lock(&dev->slock);
 440         tm6000_isoc_copy(urb);
 441         spin_unlock(&dev->slock);
 442
 443         /* Reset urb buffers */
 444         for (i = 0; i < urb->number_of_packets; i++) {
 445                 urb->iso_frame_desc[i].status = 0;
 446                 urb->iso_frame_desc[i].actual_length = 0;
 447         }
 448
 449         urb->status = usb_submit_urb(urb, GFP_ATOMIC);
 450         if (urb->status)
 451                 tm6000_err("urb resubmit failed (error=%i)\n",
 452                         urb->status);
 453 }
 454
 455 /*
 456  * Allocate URB buffers
 457  */
 458 static int tm6000_alloc_urb_buffers(struct tm6000_core *dev)
 459 {
 460         int num_bufs = TM6000_NUM_URB_BUF;
 461         int i;
 462
 463         if (dev->urb_buffer)
 464                 return 0;
 465
 466         dev->urb_buffer = kmalloc_array(num_bufs, sizeof(*dev->urb_buffer),
 467                                         GFP_KERNEL);
 468         if (!dev->urb_buffer)
 469                 return -ENOMEM;
 470
 471         dev->urb_dma = kmalloc_array(num_bufs, sizeof(*dev->urb_dma),
 472                                      GFP_KERNEL);
 473         if (!dev->urb_dma)
 474                 return -ENOMEM;
 475
 476         for (i = 0; i < num_bufs; i++) {
 477                 dev->urb_buffer[i] = usb_alloc_coherent(
 478                                         dev->udev, dev->urb_size,
 479                                         GFP_KERNEL, &dev->urb_dma[i]);
 480                 if (!dev->urb_buffer[i]) {
 481                         tm6000_err("unable to allocate %i bytes for transfer buffer %i\n",
 482                                     dev->urb_size, i);
 483                         return -ENOMEM;
 484                 }
 485                 memset(dev->urb_buffer[i], 0, dev->urb_size);
 486         }
 487
 488         return 0;
 489 }
 490
 491 /*
 492  * Free URB buffers
 493  */
 494 static int tm6000_free_urb_buffers(struct tm6000_core *dev)
 495 {
 496         int i;
 497
 498         if (!dev->urb_buffer)
 499                 return 0;
 500
 501         for (i = 0; i < TM6000_NUM_URB_BUF; i++) {
 502                 if (dev->urb_buffer[i]) {
 503                         usb_free_coherent(dev->udev,
 504                                         dev->urb_size,
 505                                         dev->urb_buffer[i],
 506                                         dev->urb_dma[i]);
 507                         dev->urb_buffer[i] = NULL;
 508                 }
 509         }
 510         kfree(dev->urb_buffer);
 511         kfree(dev->urb_dma);
 512         dev->urb_buffer = NULL;
 513         dev->urb_dma = NULL;
 514
 515         return 0;
 516 }
 517
 518 /*
 519  * Stop and Deallocate URBs
 520  */
 521 static void tm6000_uninit_isoc(struct tm6000_core *dev)
 522 {
 523         struct urb *urb;
 524         int i;
 525
 526         dev->isoc_ctl.buf = NULL;
 527         for (i = 0; i < dev->isoc_ctl.num_bufs; i++) {
 528                 urb = dev->isoc_ctl.urb[i];
 529                 if (urb) {
 530                         usb_kill_urb(urb);
 531                         usb_unlink_urb(urb);
 532                         usb_free_urb(urb);
 533                         dev->isoc_ctl.urb[i] = NULL;
 534                 }
 535                 dev->isoc_ctl.transfer_buffer[i] = NULL;
 536         }
 537
 538         if (!keep_urb)
 539                 tm6000_free_urb_buffers(dev);
 540
 541         kfree(dev->isoc_ctl.urb);
 542         kfree(dev->isoc_ctl.transfer_buffer);
 543
 544         dev->isoc_ctl.urb = NULL;
 545         dev->isoc_ctl.transfer_buffer = NULL;
 546         dev->isoc_ctl.num_bufs = 0;
 547 }
 548
 549 /*
 550  * Assign URBs and start IRQ
 551  */
 552 static int tm6000_prepare_isoc(struct tm6000_core *dev)
 553 {
 554         struct tm6000_dmaqueue *dma_q = &dev->vidq;
 555         int i, j, sb_size, pipe, size, max_packets;
 556         int num_bufs = TM6000_NUM_URB_BUF;
 557         struct urb *urb;
 558
 559         /* De-allocates all pending stuff */
 560         tm6000_uninit_isoc(dev);
 561         /* Stop interrupt USB pipe */
 562         tm6000_ir_int_stop(dev);
 563
 564         usb_set_interface(dev->udev,
 565                           dev->isoc_in.bInterfaceNumber,
 566                           dev->isoc_in.bAlternateSetting);
 567
 568         /* Start interrupt USB pipe */
 569         tm6000_ir_int_start(dev);
 570
 571         pipe = usb_rcvisocpipe(dev->udev,
 572                                dev->isoc_in.endp->desc.bEndpointAddress &
 573                                USB_ENDPOINT_NUMBER_MASK);
 574
 575         size = usb_maxpacket(dev->udev, pipe, usb_pipeout(pipe));
 576
 577         if (size > dev->isoc_in.maxsize)
 578                 size = dev->isoc_in.maxsize;
 579
 580         dev->isoc_ctl.max_pkt_size = size;
 581
 582         max_packets = TM6000_MAX_ISO_PACKETS;
 583         sb_size = max_packets * size;
 584         dev->urb_size = sb_size;
 585
 586         dev->isoc_ctl.num_bufs = num_bufs;
 587
 588         dev->isoc_ctl.urb = kmalloc_array(num_bufs, sizeof(void *),
 589                                           GFP_KERNEL);
 590         if (!dev->isoc_ctl.urb)
 591                 return -ENOMEM;
 592
 593         dev->isoc_ctl.transfer_buffer = kmalloc_array(num_bufs,
 594                                                       sizeof(void *),
 595                                                       GFP_KERNEL);
 596         if (!dev->isoc_ctl.transfer_buffer) {
 597                 kfree(dev->isoc_ctl.urb);
 598                 return -ENOMEM;
 599         }
 600
 601         dprintk(dev, V4L2_DEBUG_QUEUE, "Allocating %d x %d packets (%d bytes) of %d bytes each to handle %u size\n",
 602                     max_packets, num_bufs, sb_size,
 603                     dev->isoc_in.maxsize, size);
 604
 605
 606         if (tm6000_alloc_urb_buffers(dev) < 0) {
 607                 tm6000_err("cannot allocate memory for urb buffers\n");
 608
 609                 /* call free, as some buffers might have been allocated */
 610                 tm6000_free_urb_buffers(dev);
 611                 kfree(dev->isoc_ctl.urb);
 612                 kfree(dev->isoc_ctl.transfer_buffer);
 613                 return -ENOMEM;
 614         }
 615
 616         /* allocate urbs and transfer buffers */
 617         for (i = 0; i < dev->isoc_ctl.num_bufs; i++) {
 618                 urb = usb_alloc_urb(max_packets, GFP_KERNEL);
 619                 if (!urb) {
 620                         tm6000_uninit_isoc(dev);
 621                         tm6000_free_urb_buffers(dev);
 622                         return -ENOMEM;
 623                 }
 624                 dev->isoc_ctl.urb[i] = urb;
 625
 626                 urb->transfer_dma = dev->urb_dma[i];
 627                 dev->isoc_ctl.transfer_buffer[i] = dev->urb_buffer[i];
 628
 629                 usb_fill_bulk_urb(urb, dev->udev, pipe,
 630                                   dev->isoc_ctl.transfer_buffer[i], sb_size,
 631                                   tm6000_irq_callback, dma_q);
 632                 urb->interval = dev->isoc_in.endp->desc.bInterval;
 633                 urb->number_of_packets = max_packets;
 634                 urb->transfer_flags = URB_ISO_ASAP | URB_NO_TRANSFER_DMA_MAP;
 635
 636                 for (j = 0; j < max_packets; j++) {
 637                         urb->iso_frame_desc[j].offset = size * j;
 638                         urb->iso_frame_desc[j].length = size;
 639                 }
 640         }
 641
 642         return 0;
 643 }
 644
 645 static int tm6000_start_thread(struct tm6000_core *dev)
 646 {
 647         struct tm6000_dmaqueue *dma_q = &dev->vidq;
 648         int i;
 649
 650         dma_q->frame = 0;
 651         dma_q->ini_jiffies = jiffies;
 652
 653         init_waitqueue_head(&dma_q->wq);
 654
 655         /* submit urbs and enables IRQ */
 656         for (i = 0; i < dev->isoc_ctl.num_bufs; i++) {
 657                 int rc = usb_submit_urb(dev->isoc_ctl.urb[i], GFP_ATOMIC);
 658                 if (rc) {
 659                         tm6000_err("submit of urb %i failed (error=%i)\n", i,
 660                                    rc);
 661                         tm6000_uninit_isoc(dev);
 662                         return rc;
 663                 }
 664         }
 665
 666         return 0;
 667 }
 668
 669 /* ------------------------------------------------------------------
 670  *      Videobuf operations
 671  * ------------------------------------------------------------------
 672  */
 673
 674 static int
 675 buffer_setup(struct videobuf_queue *vq, unsigned int *count, unsigned int *size)
 676 {
 677         struct tm6000_fh *fh = vq->priv_data;
 678
 679         *size = fh->fmt->depth * fh->width * fh->height >> 3;
 680         if (0 == *count)
 681                 *count = TM6000_DEF_BUF;
 682
 683         if (*count < TM6000_MIN_BUF)
 684                 *count = TM6000_MIN_BUF;
 685
 686         while (*size * *count > vid_limit * 1024 * 1024)
 687                 (*count)--;
 688
 689         return 0;
 690 }
 691
 692 static void free_buffer(struct videobuf_queue *vq, struct tm6000_buffer *buf)
 693 {
 694         struct tm6000_fh *fh = vq->priv_data;
 695         struct tm6000_core   *dev = fh->dev;
 696         unsigned long flags;
 697
 698         BUG_ON(in_interrupt());
 699
 700         /* We used to wait for the buffer to finish here, but this didn't work
 701            because, as we were keeping the state as VIDEOBUF_QUEUED,
 702            videobuf_queue_cancel marked it as finished for us.
 703            (Also, it could wedge forever if the hardware was misconfigured.)
 704
 705            This should be safe; by the time we get here, the buffer isn't
 706            queued anymore. If we ever start marking the buffers as
 707            VIDEOBUF_ACTIVE, it won't be, though.
 708         */
 709         spin_lock_irqsave(&dev->slock, flags);
 710         if (dev->isoc_ctl.buf == buf)
 711                 dev->isoc_ctl.buf = NULL;
 712         spin_unlock_irqrestore(&dev->slock, flags);
 713
 714         videobuf_vmalloc_free(&buf->vb);
 715         buf->vb.state = VIDEOBUF_NEEDS_INIT;
 716 }
 717
 718 static int
 719 buffer_prepare(struct videobuf_queue *vq, struct videobuf_buffer *vb,
 720                                                 enum v4l2_field field)
 721 {
 722         struct tm6000_fh     *fh  = vq->priv_data;
 723         struct tm6000_buffer *buf = container_of(vb, struct tm6000_buffer, vb);
 724         struct tm6000_core   *dev = fh->dev;
 725         int rc = 0;
 726
 727         BUG_ON(NULL == fh->fmt);
 728
 729
 730         /* FIXME: It assumes depth=2 */
 731         /* The only currently supported format is 16 bits/pixel */
 732         buf->vb.size = fh->fmt->depth*fh->width*fh->height >> 3;
 733         if (0 != buf->vb.baddr  &&  buf->vb.bsize < buf->vb.size)
 734                 return -EINVAL;
 735
 736         if (buf->fmt       != fh->fmt    ||
 737             buf->vb.width  != fh->width  ||
 738             buf->vb.height != fh->height ||
 739             buf->vb.field  != field) {
 740                 buf->fmt       = fh->fmt;
 741                 buf->vb.width  = fh->width;
 742                 buf->vb.height = fh->height;
 743                 buf->vb.field  = field;
 744                 buf->vb.state = VIDEOBUF_NEEDS_INIT;
 745         }
 746
 747         if (VIDEOBUF_NEEDS_INIT == buf->vb.state) {
 748                 rc = videobuf_iolock(vq, &buf->vb, NULL);
 749                 if (rc != 0)
 750                         goto fail;
 751         }
 752
 753         if (!dev->isoc_ctl.num_bufs) {
 754                 rc = tm6000_prepare_isoc(dev);
 755                 if (rc < 0)
 756                         goto fail;
 757
 758                 rc = tm6000_start_thread(dev);
 759                 if (rc < 0)
 760                         goto fail;
 761
 762         }
 763
 764         buf->vb.state = VIDEOBUF_PREPARED;
 765         return 0;
 766
 767 fail:
 768         free_buffer(vq, buf);
 769         return rc;
 770 }
 771
 772 static void
 773 buffer_queue(struct videobuf_queue *vq, struct videobuf_buffer *vb)
 774 {
 775         struct tm6000_buffer    *buf     = container_of(vb, struct tm6000_buffer, vb);
 776         struct tm6000_fh        *fh      = vq->priv_data;
 777         struct tm6000_core      *dev     = fh->dev;
 778         struct tm6000_dmaqueue  *vidq    = &dev->vidq;
 779
 780         buf->vb.state = VIDEOBUF_QUEUED;
 781         list_add_tail(&buf->vb.queue, &vidq->active);
 782 }
 783
 784 static void buffer_release(struct videobuf_queue *vq, struct videobuf_buffer *vb)
 785 {
 786         struct tm6000_buffer   *buf  = container_of(vb, struct tm6000_buffer, vb);
 787
 788         free_buffer(vq, buf);
 789 }
 790
 791 static const struct videobuf_queue_ops tm6000_video_qops = {
 792         .buf_setup      = buffer_setup,
 793         .buf_prepare    = buffer_prepare,
 794         .buf_queue      = buffer_queue,
 795         .buf_release    = buffer_release,
 796 };
 797
 798 /* ------------------------------------------------------------------
 799  *      IOCTL handling
 800  * ------------------------------------------------------------------
 801  */
 802
 803 static bool is_res_read(struct tm6000_core *dev, struct tm6000_fh *fh)
 804 {
 805         /* Is the current fh handling it? if so, that's OK */
 806         if (dev->resources == fh && dev->is_res_read)
 807                 return true;
 808
 809         return false;
 810 }
 811
 812 static bool is_res_streaming(struct tm6000_core *dev, struct tm6000_fh *fh)
 813 {
 814         /* Is the current fh handling it? if so, that's OK */
 815         if (dev->resources == fh)
 816                 return true;
 817
 818         return false;
 819 }
 820
 821 static bool res_get(struct tm6000_core *dev, struct tm6000_fh *fh,
 822                    bool is_res_read)
 823 {
 824         /* Is the current fh handling it? if so, that's OK */
 825         if (dev->resources == fh && dev->is_res_read == is_res_read)
 826                 return true;
 827
 828         /* is it free? */
 829         if (dev->resources)
 830                 return false;
 831
 832         /* grab it */
 833         dev->resources = fh;
 834         dev->is_res_read = is_res_read;
 835         dprintk(dev, V4L2_DEBUG_RES_LOCK, "res: get\n");
 836         return true;
 837 }
 838
 839 static void res_free(struct tm6000_core *dev, struct tm6000_fh *fh)
 840 {
 841         /* Is the current fh handling it? if so, that's OK */
 842         if (dev->resources != fh)
 843                 return;
 844
 845         dev->resources = NULL;
 846         dprintk(dev, V4L2_DEBUG_RES_LOCK, "res: put\n");
 847 }
 848
 849 /* ------------------------------------------------------------------
 850  *      IOCTL vidioc handling
 851  * ------------------------------------------------------------------
 852  */
 853 static int vidioc_querycap(struct file *file, void  *priv,
 854                                         struct v4l2_capability *cap)
 855 {
 856         struct tm6000_core *dev = ((struct tm6000_fh *)priv)->dev;
 857         struct video_device *vdev = video_devdata(file);
 858
 859         strlcpy(cap->driver, "tm6000", sizeof(cap->driver));
 860         strlcpy(cap->card, "Trident TVMaster TM5600/6000/6010", sizeof(cap->card));
 861         usb_make_path(dev->udev, cap->bus_info, sizeof(cap->bus_info));
 862         if (dev->tuner_type != TUNER_ABSENT)
 863                 cap->device_caps |= V4L2_CAP_TUNER;
 864         if (vdev->vfl_type == VFL_TYPE_GRABBER)
 865                 cap->device_caps |= V4L2_CAP_VIDEO_CAPTURE |
 866                                 V4L2_CAP_STREAMING |
 867                                 V4L2_CAP_READWRITE;
 868         else
 869                 cap->device_caps |= V4L2_CAP_RADIO;
 870         cap->capabilities = cap->device_caps | V4L2_CAP_DEVICE_CAPS |
 871                 V4L2_CAP_RADIO | V4L2_CAP_VIDEO_CAPTURE | V4L2_CAP_READWRITE;
 872
 873         return 0;
 874 }
 875
 876 static int vidioc_enum_fmt_vid_cap(struct file *file, void  *priv,
 877                                         struct v4l2_fmtdesc *f)
 878 {
 879         if (f->index >= ARRAY_SIZE(format))
 880                 return -EINVAL;
 881
 882         strlcpy(f->description, format[f->index].name, sizeof(f->description));
 883         f->pixelformat = format[f->index].fourcc;
 884         return 0;
 885 }
 886
 887 static int vidioc_g_fmt_vid_cap(struct file *file, void *priv,
 888                                         struct v4l2_format *f)
 889 {
 890         struct tm6000_fh  *fh = priv;
 891
 892         f->fmt.pix.width        = fh->width;
 893         f->fmt.pix.height       = fh->height;
 894         f->fmt.pix.field        = fh->vb_vidq.field;
 895         f->fmt.pix.pixelformat  = fh->fmt->fourcc;
 896         f->fmt.pix.colorspace   = V4L2_COLORSPACE_SMPTE170M;
 897         f->fmt.pix.bytesperline =
 898                 (f->fmt.pix.width * fh->fmt->depth) >> 3;
 899         f->fmt.pix.sizeimage =
 900                 f->fmt.pix.height * f->fmt.pix.bytesperline;
 901
 902         return 0;
 903 }
 904
 905 static struct tm6000_fmt *format_by_fourcc(unsigned int fourcc)
 906 {
 907         unsigned int i;
 908
 909         for (i = 0; i < ARRAY_SIZE(format); i++)
 910                 if (format[i].fourcc == fourcc)
 911                         return format+i;
 912         return NULL;
 913 }
 914
 915 static int vidioc_try_fmt_vid_cap(struct file *file, void *priv,
 916                         struct v4l2_format *f)
 917 {
 918         struct tm6000_core *dev = ((struct tm6000_fh *)priv)->dev;
 919         struct tm6000_fmt *fmt;
 920         enum v4l2_field field;
 921
 922         fmt = format_by_fourcc(f->fmt.pix.pixelformat);
 923         if (NULL == fmt) {
 924                 dprintk(dev, 2, "Fourcc format (0x%08x) invalid.\n",
 925                         f->fmt.pix.pixelformat);
 926                 return -EINVAL;
 927         }
 928
 929         field = f->fmt.pix.field;
 930
 931         field = V4L2_FIELD_INTERLACED;
 932
 933         tm6000_get_std_res(dev);
 934
 935         f->fmt.pix.width  = dev->width;
 936         f->fmt.pix.height = dev->height;
 937
 938         f->fmt.pix.width &= ~0x01;
 939
 940         f->fmt.pix.field = field;
 941
 942         f->fmt.pix.bytesperline =
 943                 (f->fmt.pix.width * fmt->depth) >> 3;
 944         f->fmt.pix.sizeimage =
 945                 f->fmt.pix.height * f->fmt.pix.bytesperline;
 946         f->fmt.pix.colorspace   = V4L2_COLORSPACE_SMPTE170M;
 947
 948         return 0;
 949 }
 950
 951 /*FIXME: This seems to be generic enough to be at videodev2 */
 952 static int vidioc_s_fmt_vid_cap(struct file *file, void *priv,
 953                                         struct v4l2_format *f)
 954 {
 955         struct tm6000_fh  *fh = priv;
 956         struct tm6000_core *dev = fh->dev;
 957         int ret = vidioc_try_fmt_vid_cap(file, fh, f);
 958         if (ret < 0)
 959                 return ret;
 960
 961         fh->fmt           = format_by_fourcc(f->fmt.pix.pixelformat);
 962         fh->width         = f->fmt.pix.width;
 963         fh->height        = f->fmt.pix.height;
 964         fh->vb_vidq.field = f->fmt.pix.field;
 965         fh->type          = f->type;
 966
 967         dev->fourcc       = f->fmt.pix.pixelformat;
 968
 969         tm6000_set_fourcc_format(dev);
 970
 971         return 0;
 972 }
 973
 974 static int vidioc_reqbufs(struct file *file, void *priv,
 975                            struct v4l2_requestbuffers *p)
 976 {
 977         struct tm6000_fh  *fh = priv;
 978
 979         return videobuf_reqbufs(&fh->vb_vidq, p);
 980 }
 981
 982 static int vidioc_querybuf(struct file *file, void *priv,
 983                             struct v4l2_buffer *p)
 984 {
 985         struct tm6000_fh  *fh = priv;
 986
 987         return videobuf_querybuf(&fh->vb_vidq, p);
 988 }
 989
 990 static int vidioc_qbuf(struct file *file, void *priv, struct v4l2_buffer *p)
 991 {
 992         struct tm6000_fh  *fh = priv;
 993
 994         return videobuf_qbuf(&fh->vb_vidq, p);
 995 }
 996
 997 static int vidioc_dqbuf(struct file *file, void *priv, struct v4l2_buffer *p)
 998 {
 999         struct tm6000_fh  *fh = priv;
1000
1001         return videobuf_dqbuf(&fh->vb_vidq, p,
1002                                 file->f_flags & O_NONBLOCK);
1003 }
1004
1005 static int vidioc_streamon(struct file *file, void *priv, enum v4l2_buf_type i)
1006 {
1007         struct tm6000_fh *fh = priv;
1008         struct tm6000_core *dev = fh->dev;
1009
1010         if (fh->type != V4L2_BUF_TYPE_VIDEO_CAPTURE)
1011                 return -EINVAL;
1012         if (i != fh->type)
1013                 return -EINVAL;
1014
1015         if (!res_get(dev, fh, false))
1016                 return -EBUSY;
1017         return videobuf_streamon(&fh->vb_vidq);
1018 }
1019
1020 static int vidioc_streamoff(struct file *file, void *priv, enum v4l2_buf_type i)
1021 {
1022         struct tm6000_fh *fh = priv;
1023         struct tm6000_core *dev = fh->dev;
1024
1025         if (fh->type != V4L2_BUF_TYPE_VIDEO_CAPTURE)
1026                 return -EINVAL;
1027
1028         if (i != fh->type)
1029                 return -EINVAL;
1030
1031         videobuf_streamoff(&fh->vb_vidq);
1032         res_free(dev, fh);
1033
1034         return 0;
1035 }
1036
1037 static int vidioc_s_std(struct file *file, void *priv, v4l2_std_id norm)
1038 {
1039         int rc = 0;
1040         struct tm6000_fh *fh = priv;
1041         struct tm6000_core *dev = fh->dev;
1042
1043         dev->norm = norm;
1044         rc = tm6000_init_analog_mode(dev);
1045
1046         fh->width  = dev->width;
1047         fh->height = dev->height;
1048
1049         if (rc < 0)
1050                 return rc;
1051
1052         v4l2_device_call_all(&dev->v4l2_dev, 0, video, s_std, dev->norm);
1053
1054         return 0;
1055 }
1056
1057 static int vidioc_g_std(struct file *file, void *priv, v4l2_std_id *norm)
1058 {
1059         struct tm6000_fh *fh = priv;
1060         struct tm6000_core *dev = fh->dev;
1061
1062         *norm = dev->norm;
1063         return 0;
1064 }
1065
1066 static const char *iname[] = {
1067         [TM6000_INPUT_TV] = "Television",
1068         [TM6000_INPUT_COMPOSITE1] = "Composite 1",
1069         [TM6000_INPUT_COMPOSITE2] = "Composite 2",
1070         [TM6000_INPUT_SVIDEO] = "S-Video",
1071 };
1072
1073 static int vidioc_enum_input(struct file *file, void *priv,
1074                                 struct v4l2_input *i)
1075 {
1076         struct tm6000_fh   *fh = priv;
1077         struct tm6000_core *dev = fh->dev;
1078         unsigned int n;
1079
1080         n = i->index;
1081         if (n >= 3)
1082                 return -EINVAL;
1083
1084         if (!dev->vinput[n].type)
1085                 return -EINVAL;
1086
1087         i->index = n;
1088
1089         if (dev->vinput[n].type == TM6000_INPUT_TV)
1090                 i->type = V4L2_INPUT_TYPE_TUNER;
1091         else
1092                 i->type = V4L2_INPUT_TYPE_CAMERA;
1093
1094         strcpy(i->name, iname[dev->vinput[n].type]);
1095
1096         i->std = TM6000_STD;
1097
1098         return 0;
1099 }
1100
1101 static int vidioc_g_input(struct file *file, void *priv, unsigned int *i)
1102 {
1103         struct tm6000_fh   *fh = priv;
1104         struct tm6000_core *dev = fh->dev;
1105
1106         *i = dev->input;
1107
1108         return 0;
1109 }
1110
1111 static int vidioc_s_input(struct file *file, void *priv, unsigned int i)
1112 {
1113         struct tm6000_fh   *fh = priv;
1114         struct tm6000_core *dev = fh->dev;
1115         int rc = 0;
1116
1117         if (i >= 3)
1118                 return -EINVAL;
1119         if (!dev->vinput[i].type)
1120                 return -EINVAL;
1121
1122         dev->input = i;
1123
1124         rc = vidioc_s_std(file, priv, dev->norm);
1125
1126         return rc;
1127 }
1128
1129 /* --- controls ---------------------------------------------- */
1130
1131 static int tm6000_s_ctrl(struct v4l2_ctrl *ctrl)
1132 {
1133         struct tm6000_core *dev = container_of(ctrl->handler, struct tm6000_core, ctrl_handler);
1134         u8  val = ctrl->val;
1135
1136         switch (ctrl->id) {
1137         case V4L2_CID_CONTRAST:
1138                 tm6000_set_reg(dev, TM6010_REQ07_R08_LUMA_CONTRAST_ADJ, val);
1139                 return 0;
1140         case V4L2_CID_BRIGHTNESS:
1141                 tm6000_set_reg(dev, TM6010_REQ07_R09_LUMA_BRIGHTNESS_ADJ, val);
1142                 return 0;
1143         case V4L2_CID_SATURATION:
1144                 tm6000_set_reg(dev, TM6010_REQ07_R0A_CHROMA_SATURATION_ADJ, val);
1145                 return 0;
1146         case V4L2_CID_HUE:
1147                 tm6000_set_reg(dev, TM6010_REQ07_R0B_CHROMA_HUE_PHASE_ADJ, val);
1148                 return 0;
1149         }
1150         return -EINVAL;
1151 }
1152
1153 static const struct v4l2_ctrl_ops tm6000_ctrl_ops = {
1154         .s_ctrl = tm6000_s_ctrl,
1155 };
1156
1157 static int tm6000_radio_s_ctrl(struct v4l2_ctrl *ctrl)
1158 {
1159         struct tm6000_core *dev = container_of(ctrl->handler,
1160                         struct tm6000_core, radio_ctrl_handler);
1161         u8  val = ctrl->val;
1162
1163         switch (ctrl->id) {
1164         case V4L2_CID_AUDIO_MUTE:
1165                 dev->ctl_mute = val;
1166                 tm6000_tvaudio_set_mute(dev, val);
1167                 return 0;
1168         case V4L2_CID_AUDIO_VOLUME:
1169                 dev->ctl_volume = val;
1170                 tm6000_set_volume(dev, val);
1171                 return 0;
1172         }
1173         return -EINVAL;
1174 }
1175
1176 static const struct v4l2_ctrl_ops tm6000_radio_ctrl_ops = {
1177         .s_ctrl = tm6000_radio_s_ctrl,
1178 };
1179
1180 static int vidioc_g_tuner(struct file *file, void *priv,
1181                                 struct v4l2_tuner *t)
1182 {
1183         struct tm6000_fh   *fh  = priv;
1184         struct tm6000_core *dev = fh->dev;
1185
1186         if (UNSET == dev->tuner_type)
1187                 return -ENOTTY;
1188         if (0 != t->index)
1189                 return -EINVAL;
1190
1191         strcpy(t->name, "Television");
1192         t->type       = V4L2_TUNER_ANALOG_TV;
1193         t->capability = V4L2_TUNER_CAP_NORM | V4L2_TUNER_CAP_STEREO;
1194         t->rangehigh  = 0xffffffffUL;
1195         t->rxsubchans = V4L2_TUNER_SUB_STEREO;
1196
1197         v4l2_device_call_all(&dev->v4l2_dev, 0, tuner, g_tuner, t);
1198
1199         t->audmode = dev->amode;
1200
1201         return 0;
1202 }
1203
1204 static int vidioc_s_tuner(struct file *file, void *priv,
1205                                 const struct v4l2_tuner *t)
1206 {
1207         struct tm6000_fh   *fh  = priv;
1208         struct tm6000_core *dev = fh->dev;
1209
1210         if (UNSET == dev->tuner_type)
1211                 return -ENOTTY;
1212         if (0 != t->index)
1213                 return -EINVAL;
1214
1215         if (t->audmode > V4L2_TUNER_MODE_STEREO)
1216                 dev->amode = V4L2_TUNER_MODE_STEREO;
1217         else
1218                 dev->amode = t->audmode;
1219         dprintk(dev, 3, "audio mode: %x\n", t->audmode);
1220
1221         v4l2_device_call_all(&dev->v4l2_dev, 0, tuner, s_tuner, t);
1222
1223         return 0;
1224 }
1225
1226 static int vidioc_g_frequency(struct file *file, void *priv,
1227                                 struct v4l2_frequency *f)
1228 {
1229         struct tm6000_fh   *fh  = priv;
1230         struct tm6000_core *dev = fh->dev;
1231
1232         if (UNSET == dev->tuner_type)
1233                 return -ENOTTY;
1234         if (f->tuner)
1235                 return -EINVAL;
1236
1237         f->frequency = dev->freq;
1238
1239         v4l2_device_call_all(&dev->v4l2_dev, 0, tuner, g_frequency, f);
1240
1241         return 0;
1242 }
1243
1244 static int vidioc_s_frequency(struct file *file, void *priv,
1245                                 const struct v4l2_frequency *f)
1246 {
1247         struct tm6000_fh   *fh  = priv;
1248         struct tm6000_core *dev = fh->dev;
1249
1250         if (UNSET == dev->tuner_type)
1251                 return -ENOTTY;
1252         if (f->tuner != 0)
1253                 return -EINVAL;
1254
1255         dev->freq = f->frequency;
1256         v4l2_device_call_all(&dev->v4l2_dev, 0, tuner, s_frequency, f);
1257
1258         return 0;
1259 }
1260
1261 static int radio_g_tuner(struct file *file, void *priv,
1262                                         struct v4l2_tuner *t)
1263 {
1264         struct tm6000_fh *fh = file->private_data;
1265         struct tm6000_core *dev = fh->dev;
1266
1267         if (0 != t->index)
1268                 return -EINVAL;
1269
1270         memset(t, 0, sizeof(*t));
1271         strcpy(t->name, "Radio");
1272         t->type = V4L2_TUNER_RADIO;
1273         t->capability = V4L2_TUNER_CAP_LOW | V4L2_TUNER_CAP_STEREO;
1274         t->rxsubchans = V4L2_TUNER_SUB_STEREO;
1275         t->audmode = V4L2_TUNER_MODE_STEREO;
1276
1277         v4l2_device_call_all(&dev->v4l2_dev, 0, tuner, g_tuner, t);
1278
1279         return 0;
1280 }
1281
1282 static int radio_s_tuner(struct file *file, void *priv,
1283                                         const struct v4l2_tuner *t)
1284 {
1285         struct tm6000_fh *fh = file->private_data;
1286         struct tm6000_core *dev = fh->dev;
1287
1288         if (0 != t->index)
1289                 return -EINVAL;
1290         v4l2_device_call_all(&dev->v4l2_dev, 0, tuner, s_tuner, t);
1291         return 0;
1292 }
1293
1294 /* ------------------------------------------------------------------
1295         File operations for the device
1296    ------------------------------------------------------------------*/
1297
1298 static int __tm6000_open(struct file *file)
1299 {
1300         struct video_device *vdev = video_devdata(file);
1301         struct tm6000_core *dev = video_drvdata(file);
1302         struct tm6000_fh *fh;
1303         enum v4l2_buf_type type = V4L2_BUF_TYPE_VIDEO_CAPTURE;
1304         int rc;
1305         int radio = 0;
1306
1307         dprintk(dev, V4L2_DEBUG_OPEN, "tm6000: open called (dev=%s)\n",
1308                 video_device_node_name(vdev));
1309
1310         switch (vdev->vfl_type) {
1311         case VFL_TYPE_GRABBER:
1312                 type = V4L2_BUF_TYPE_VIDEO_CAPTURE;
1313                 break;
1314         case VFL_TYPE_VBI:
1315                 type = V4L2_BUF_TYPE_VBI_CAPTURE;
1316                 break;
1317         case VFL_TYPE_RADIO:
1318                 radio = 1;
1319                 break;
1320         default:
1321                 return -EINVAL;
1322         }
1323
1324         /* If more than one user, mutex should be added */
1325         dev->users++;
1326
1327         dprintk(dev, V4L2_DEBUG_OPEN, "open dev=%s type=%s users=%d\n",
1328                 video_device_node_name(vdev), v4l2_type_names[type],
1329                 dev->users);
1330
1331         /* allocate + initialize per filehandle data */
1332         fh = kzalloc(sizeof(*fh), GFP_KERNEL);
1333         if (NULL == fh) {
1334                 dev->users--;
1335                 return -ENOMEM;
1336         }
1337
1338         v4l2_fh_init(&fh->fh, vdev);
1339         file->private_data = fh;
1340         fh->dev      = dev;
1341         fh->radio    = radio;
1342         dev->radio   = radio;
1343         fh->type     = type;
1344         dev->fourcc  = format[0].fourcc;
1345
1346         fh->fmt      = format_by_fourcc(dev->fourcc);
1347
1348         tm6000_get_std_res(dev);
1349
1350         fh->width = dev->width;
1351         fh->height = dev->height;
1352
1353         dprintk(dev, V4L2_DEBUG_OPEN, "Open: fh=%p, dev=%p, dev->vidq=%p\n",
1354                 fh, dev, &dev->vidq);
1355         dprintk(dev, V4L2_DEBUG_OPEN, "Open: list_empty queued=%d\n",
1356                 list_empty(&dev->vidq.queued));
1357         dprintk(dev, V4L2_DEBUG_OPEN, "Open: list_empty active=%d\n",
1358                 list_empty(&dev->vidq.active));
1359
1360         /* initialize hardware on analog mode */
1361         rc = tm6000_init_analog_mode(dev);
1362         if (rc < 0) {
1363                 v4l2_fh_exit(&fh->fh);
1364                 kfree(fh);
1365                 return rc;
1366         }
1367
1368         dev->mode = TM6000_MODE_ANALOG;
1369
1370         if (!fh->radio) {
1371                 videobuf_queue_vmalloc_init(&fh->vb_vidq, &tm6000_video_qops,
1372                                 NULL, &dev->slock,
1373                                 fh->type,
1374                                 V4L2_FIELD_INTERLACED,
1375                                 sizeof(struct tm6000_buffer), fh, &dev->lock);
1376         } else {
1377                 dprintk(dev, V4L2_DEBUG_OPEN, "video_open: setting radio device\n");
1378                 tm6000_set_audio_rinput(dev);
1379                 v4l2_device_call_all(&dev->v4l2_dev, 0, tuner, s_radio);
1380                 tm6000_prepare_isoc(dev);
1381                 tm6000_start_thread(dev);
1382         }
1383         v4l2_fh_add(&fh->fh);
1384
1385         return 0;
1386 }
1387
1388 static int tm6000_open(struct file *file)
1389 {
1390         struct video_device *vdev = video_devdata(file);
1391         int res;
1392
1393         mutex_lock(vdev->lock);
1394         res = __tm6000_open(file);
1395         mutex_unlock(vdev->lock);
1396         return res;
1397 }
1398
1399 static ssize_t
1400 tm6000_read(struct file *file, char __user *data, size_t count, loff_t *pos)
1401 {
1402         struct tm6000_fh *fh = file->private_data;
1403         struct tm6000_core *dev = fh->dev;
1404
1405         if (fh->type == V4L2_BUF_TYPE_VIDEO_CAPTURE) {
1406                 int res;
1407
1408                 if (!res_get(fh->dev, fh, true))
1409                         return -EBUSY;
1410
1411                 if (mutex_lock_interruptible(&dev->lock))
1412                         return -ERESTARTSYS;
1413                 res = videobuf_read_stream(&fh->vb_vidq, data, count, pos, 0,
1414                                         file->f_flags & O_NONBLOCK);
1415                 mutex_unlock(&dev->lock);
1416                 return res;
1417         }
1418         return 0;
1419 }
1420
1421 static __poll_t
1422 __tm6000_poll(struct file *file, struct poll_table_struct *wait)
1423 {
1424         __poll_t req_events = poll_requested_events(wait);
1425         struct tm6000_fh        *fh = file->private_data;
1426         struct tm6000_buffer    *buf;
1427         __poll_t res = 0;
1428
1429         if (v4l2_event_pending(&fh->fh))
1430                 res = EPOLLPRI;
1431         else if (req_events & EPOLLPRI)
1432                 poll_wait(file, &fh->fh.wait, wait);
1433         if (V4L2_BUF_TYPE_VIDEO_CAPTURE != fh->type)
1434                 return res | EPOLLERR;
1435
1436         if (!!is_res_streaming(fh->dev, fh))
1437                 return res | EPOLLERR;
1438
1439         if (!is_res_read(fh->dev, fh)) {
1440                 /* streaming capture */
1441                 if (list_empty(&fh->vb_vidq.stream))
1442                         return res | EPOLLERR;
1443                 buf = list_entry(fh->vb_vidq.stream.next, struct tm6000_buffer, vb.stream);
1444                 poll_wait(file, &buf->vb.done, wait);
1445                 if (buf->vb.state == VIDEOBUF_DONE ||
1446                     buf->vb.state == VIDEOBUF_ERROR)
1447                         return res | EPOLLIN | EPOLLRDNORM;
1448         } else if (req_events & (EPOLLIN | EPOLLRDNORM)) {
1449                 /* read() capture */
1450                 return res | videobuf_poll_stream(file, &fh->vb_vidq, wait);
1451         }
1452         return res;
1453 }
1454
1455 static __poll_t tm6000_poll(struct file *file, struct poll_table_struct *wait)
1456 {
1457         struct tm6000_fh *fh = file->private_data;
1458         struct tm6000_core *dev = fh->dev;
1459         __poll_t res;
1460
1461         mutex_lock(&dev->lock);
1462         res = __tm6000_poll(file, wait);
1463         mutex_unlock(&dev->lock);
1464         return res;
1465 }
1466
1467 static int tm6000_release(struct file *file)
1468 {
1469         struct tm6000_fh         *fh = file->private_data;
1470         struct tm6000_core      *dev = fh->dev;
1471         struct video_device    *vdev = video_devdata(file);
1472
1473         dprintk(dev, V4L2_DEBUG_OPEN, "tm6000: close called (dev=%s, users=%d)\n",
1474                 video_device_node_name(vdev), dev->users);
1475
1476         mutex_lock(&dev->lock);
1477         dev->users--;
1478
1479         res_free(dev, fh);
1480
1481         if (!dev->users) {
1482                 tm6000_uninit_isoc(dev);
1483
1484                 /* Stop interrupt USB pipe */
1485                 tm6000_ir_int_stop(dev);
1486
1487                 usb_reset_configuration(dev->udev);
1488
1489                 if (dev->int_in.endp)
1490                         usb_set_interface(dev->udev,
1491                                         dev->isoc_in.bInterfaceNumber, 2);
1492                 else
1493                         usb_set_interface(dev->udev,
1494                                         dev->isoc_in.bInterfaceNumber, 0);
1495
1496                 /* Start interrupt USB pipe */
1497                 tm6000_ir_int_start(dev);
1498
1499                 if (!fh->radio)
1500                         videobuf_mmap_free(&fh->vb_vidq);
1501         }
1502         v4l2_fh_del(&fh->fh);
1503         v4l2_fh_exit(&fh->fh);
1504         kfree(fh);
1505         mutex_unlock(&dev->lock);
1506
1507         return 0;
1508 }
1509
1510 static int tm6000_mmap(struct file *file, struct vm_area_struct * vma)
1511 {
1512         struct tm6000_fh *fh = file->private_data;
1513         struct tm6000_core *dev = fh->dev;
1514         int res;
1515
1516         if (mutex_lock_interruptible(&dev->lock))
1517                 return -ERESTARTSYS;
1518         res = videobuf_mmap_mapper(&fh->vb_vidq, vma);
1519         mutex_unlock(&dev->lock);
1520         return res;
1521 }
1522
1523 static const struct v4l2_file_operations tm6000_fops = {
1524         .owner = THIS_MODULE,
1525         .open = tm6000_open,
1526         .release = tm6000_release,
1527         .unlocked_ioctl = video_ioctl2, /* V4L2 ioctl handler */
1528         .read = tm6000_read,
1529         .poll = tm6000_poll,
1530         .mmap = tm6000_mmap,
1531 };
1532
1533 static const struct v4l2_ioctl_ops video_ioctl_ops = {
1534         .vidioc_querycap          = vidioc_querycap,
1535         .vidioc_enum_fmt_vid_cap  = vidioc_enum_fmt_vid_cap,
1536         .vidioc_g_fmt_vid_cap     = vidioc_g_fmt_vid_cap,
1537         .vidioc_try_fmt_vid_cap   = vidioc_try_fmt_vid_cap,
1538         .vidioc_s_fmt_vid_cap     = vidioc_s_fmt_vid_cap,
1539         .vidioc_s_std             = vidioc_s_std,
1540         .vidioc_g_std             = vidioc_g_std,
1541         .vidioc_enum_input        = vidioc_enum_input,
1542         .vidioc_g_input           = vidioc_g_input,
1543         .vidioc_s_input           = vidioc_s_input,
1544         .vidioc_g_tuner           = vidioc_g_tuner,
1545         .vidioc_s_tuner           = vidioc_s_tuner,
1546         .vidioc_g_frequency       = vidioc_g_frequency,
1547         .vidioc_s_frequency       = vidioc_s_frequency,
1548         .vidioc_streamon          = vidioc_streamon,
1549         .vidioc_streamoff         = vidioc_streamoff,
1550         .vidioc_reqbufs           = vidioc_reqbufs,
1551         .vidioc_querybuf          = vidioc_querybuf,
1552         .vidioc_qbuf              = vidioc_qbuf,
1553         .vidioc_dqbuf             = vidioc_dqbuf,
1554         .vidioc_subscribe_event = v4l2_ctrl_subscribe_event,
1555         .vidioc_unsubscribe_event = v4l2_event_unsubscribe,
1556 };
1557
1558 static struct video_device tm6000_template = {
1559         .name           = "tm6000",
1560         .fops           = &tm6000_fops,
1561         .ioctl_ops      = &video_ioctl_ops,
1562         .release        = video_device_release_empty,
1563         .tvnorms        = TM6000_STD,
1564 };
1565
1566 static const struct v4l2_file_operations radio_fops = {
1567         .owner          = THIS_MODULE,
1568         .open           = tm6000_open,
1569         .poll           = v4l2_ctrl_poll,
1570         .release        = tm6000_release,
1571         .unlocked_ioctl = video_ioctl2,
1572 };
1573
1574 static const struct v4l2_ioctl_ops radio_ioctl_ops = {
1575         .vidioc_querycap        = vidioc_querycap,
1576         .vidioc_g_tuner         = radio_g_tuner,
1577         .vidioc_s_tuner         = radio_s_tuner,
1578         .vidioc_g_frequency     = vidioc_g_frequency,
1579         .vidioc_s_frequency     = vidioc_s_frequency,
1580         .vidioc_subscribe_event = v4l2_ctrl_subscribe_event,
1581         .vidioc_unsubscribe_event = v4l2_event_unsubscribe,
1582 };
1583
1584 static struct video_device tm6000_radio_template = {
1585         .name                   = "tm6000",
1586         .fops                   = &radio_fops,
1587         .ioctl_ops              = &radio_ioctl_ops,
1588 };
1589
1590 /* -----------------------------------------------------------------
1591  *      Initialization and module stuff
1592  * ------------------------------------------------------------------
1593  */
1594
1595 static void vdev_init(struct tm6000_core *dev,
1596                 struct video_device *vfd,
1597                 const struct video_device
1598                 *template, const char *type_name)
1599 {
1600         *vfd = *template;
1601         vfd->v4l2_dev = &dev->v4l2_dev;
1602         vfd->release = video_device_release_empty;
1603         vfd->lock = &dev->lock;
1604
1605         snprintf(vfd->name, sizeof(vfd->name), "%s %s", dev->name, type_name);
1606
1607         video_set_drvdata(vfd, dev);
1608 }
1609
1610 int tm6000_v4l2_register(struct tm6000_core *dev)
1611 {
1612         int ret = 0;
1613
1614         v4l2_ctrl_handler_init(&dev->ctrl_handler, 6);
1615         v4l2_ctrl_handler_init(&dev->radio_ctrl_handler, 2);
1616         v4l2_ctrl_new_std(&dev->radio_ctrl_handler, &tm6000_radio_ctrl_ops,
1617                         V4L2_CID_AUDIO_MUTE, 0, 1, 1, 0);
1618         v4l2_ctrl_new_std(&dev->radio_ctrl_handler, &tm6000_radio_ctrl_ops,
1619                         V4L2_CID_AUDIO_VOLUME, -15, 15, 1, 0);
1620         v4l2_ctrl_new_std(&dev->ctrl_handler, &tm6000_ctrl_ops,
1621                         V4L2_CID_BRIGHTNESS, 0, 255, 1, 54);
1622         v4l2_ctrl_new_std(&dev->ctrl_handler, &tm6000_ctrl_ops,
1623                         V4L2_CID_CONTRAST, 0, 255, 1, 119);
1624         v4l2_ctrl_new_std(&dev->ctrl_handler, &tm6000_ctrl_ops,
1625                         V4L2_CID_SATURATION, 0, 255, 1, 112);
1626         v4l2_ctrl_new_std(&dev->ctrl_handler, &tm6000_ctrl_ops,
1627                         V4L2_CID_HUE, -128, 127, 1, 0);
1628         v4l2_ctrl_add_handler(&dev->ctrl_handler,
1629                         &dev->radio_ctrl_handler, NULL);
1630
1631         if (dev->radio_ctrl_handler.error)
1632                 ret = dev->radio_ctrl_handler.error;
1633         if (!ret && dev->ctrl_handler.error)
1634                 ret = dev->ctrl_handler.error;
1635         if (ret)
1636                 goto free_ctrl;
1637
1638         vdev_init(dev, &dev->vfd, &tm6000_template, "video");
1639
1640         dev->vfd.ctrl_handler = &dev->ctrl_handler;
1641
1642         /* init video dma queues */
1643         INIT_LIST_HEAD(&dev->vidq.active);
1644         INIT_LIST_HEAD(&dev->vidq.queued);
1645
1646         ret = video_register_device(&dev->vfd, VFL_TYPE_GRABBER, video_nr);
1647
1648         if (ret < 0) {
1649                 printk(KERN_INFO "%s: can't register video device\n",
1650                        dev->name);
1651                 goto free_ctrl;
1652         }
1653
1654         printk(KERN_INFO "%s: registered device %s\n",
1655                dev->name, video_device_node_name(&dev->vfd));
1656
1657         if (dev->caps.has_radio) {
1658                 vdev_init(dev, &dev->radio_dev, &tm6000_radio_template,
1659                                                            "radio");
1660                 dev->radio_dev.ctrl_handler = &dev->radio_ctrl_handler;
1661                 ret = video_register_device(&dev->radio_dev, VFL_TYPE_RADIO,
1662                                             radio_nr);
1663                 if (ret < 0) {
1664                         printk(KERN_INFO "%s: can't register radio device\n",
1665                                dev->name);
1666                         goto unreg_video;
1667                 }
1668
1669                 printk(KERN_INFO "%s: registered device %s\n",
1670                        dev->name, video_device_node_name(&dev->radio_dev));
1671         }
1672
1673         printk(KERN_INFO "Trident TVMaster TM5600/TM6000/TM6010 USB2 board (Load status: %d)\n", ret);
1674         return ret;
1675
1676 unreg_video:
1677         video_unregister_device(&dev->vfd);
1678 free_ctrl:
1679         v4l2_ctrl_handler_free(&dev->ctrl_handler);
1680         v4l2_ctrl_handler_free(&dev->radio_ctrl_handler);
1681         return ret;
1682 }
1683
1684 int tm6000_v4l2_unregister(struct tm6000_core *dev)
1685 {
1686         video_unregister_device(&dev->vfd);
1687
1688         /* if URB buffers are still allocated free them now */
1689         tm6000_free_urb_buffers(dev);
1690
1691         video_unregister_device(&dev->radio_dev);
1692         return 0;
1693 }
1694
1695 int tm6000_v4l2_exit(void)
1696 {
1697         return 0;
1698 }
1699
1700 module_param(video_nr, int, 0);
1701 MODULE_PARM_DESC(video_nr, "Allow changing video device number");
1702
1703 module_param_named(debug, tm6000_debug, int, 0444);
1704 MODULE_PARM_DESC(debug, "activates debug info");
1705
1706 module_param(vid_limit, int, 0644);
1707 MODULE_PARM_DESC(vid_limit, "capture memory limit in megabytes");
1708
1709 module_param(keep_urb, bool, 0);
1710 MODULE_PARM_DESC(keep_urb, "Keep urb buffers allocated even when the device is closed by the user");