drivers/media/usb/dvb-usb-v2/af9035.c

   1 /*
   2  * Afatech AF9035 DVB USB driver
   3  *
   4  * Copyright (C) 2009 Antti Palosaari <crope@iki.fi>
   5  * Copyright (C) 2012 Antti Palosaari <crope@iki.fi>
   6  *
   7  *    This program is free software; you can redistribute it and/or modify
   8  *    it under the terms of the GNU General Public License as published by
   9  *    the Free Software Foundation; either version 2 of the License, or
  10  *    (at your option) any later version.
  11  *
  12  *    This program is distributed in the hope that it will be useful,
  13  *    but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  *    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15  *    GNU General Public License for more details.
  16  *
  17  *    You should have received a copy of the GNU General Public License along
  18  *    with this program; if not, write to the Free Software Foundation, Inc.,
  19  *    51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
  20  */
  21
  22 #include "af9035.h"
  23
  24 /* Max transfer size done by I2C transfer functions */
  25 #define MAX_XFER_SIZE  64
  26
  27 DVB_DEFINE_MOD_OPT_ADAPTER_NR(adapter_nr);
  28
  29 static u16 af9035_checksum(const u8 *buf, size_t len)
  30 {
  31         size_t i;
  32         u16 checksum = 0;
  33
  34         for (i = 1; i < len; i++) {
  35                 if (i % 2)
  36                         checksum += buf[i] << 8;
  37                 else
  38                         checksum += buf[i];
  39         }
  40         checksum = ~checksum;
  41
  42         return checksum;
  43 }
  44
  45 static int af9035_ctrl_msg(struct dvb_usb_device *d, struct usb_req *req)
  46 {
  47 #define REQ_HDR_LEN 4 /* send header size */
  48 #define ACK_HDR_LEN 3 /* rece header size */
  49 #define CHECKSUM_LEN 2
  50 #define USB_TIMEOUT 2000
  51         struct state *state = d_to_priv(d);
  52         int ret, wlen, rlen;
  53         u16 checksum, tmp_checksum;
  54
  55         mutex_lock(&d->usb_mutex);
  56
  57         /* buffer overflow check */
  58         if (req->wlen > (BUF_LEN - REQ_HDR_LEN - CHECKSUM_LEN) ||
  59                         req->rlen > (BUF_LEN - ACK_HDR_LEN - CHECKSUM_LEN)) {
  60                 dev_err(&d->udev->dev, "%s: too much data wlen=%d rlen=%d\n",
  61                                 KBUILD_MODNAME, req->wlen, req->rlen);
  62                 ret = -EINVAL;
  63                 goto exit;
  64         }
  65
  66         state->buf[0] = REQ_HDR_LEN + req->wlen + CHECKSUM_LEN - 1;
  67         state->buf[1] = req->mbox;
  68         state->buf[2] = req->cmd;
  69         state->buf[3] = state->seq++;
  70         memcpy(&state->buf[REQ_HDR_LEN], req->wbuf, req->wlen);
  71
  72         wlen = REQ_HDR_LEN + req->wlen + CHECKSUM_LEN;
  73         rlen = ACK_HDR_LEN + req->rlen + CHECKSUM_LEN;
  74
  75         /* calc and add checksum */
  76         checksum = af9035_checksum(state->buf, state->buf[0] - 1);
  77         state->buf[state->buf[0] - 1] = (checksum >> 8);
  78         state->buf[state->buf[0] - 0] = (checksum & 0xff);
  79
  80         /* no ack for these packets */
  81         if (req->cmd == CMD_FW_DL)
  82                 rlen = 0;
  83
  84         ret = dvb_usbv2_generic_rw_locked(d,
  85                         state->buf, wlen, state->buf, rlen);
  86         if (ret)
  87                 goto exit;
  88
  89         /* no ack for those packets */
  90         if (req->cmd == CMD_FW_DL)
  91                 goto exit;
  92
  93         /* verify checksum */
  94         checksum = af9035_checksum(state->buf, rlen - 2);
  95         tmp_checksum = (state->buf[rlen - 2] << 8) | state->buf[rlen - 1];
  96         if (tmp_checksum != checksum) {
  97                 dev_err(&d->udev->dev,
  98                                 "%s: command=%02x checksum mismatch (%04x != %04x)\n",
  99                                 KBUILD_MODNAME, req->cmd, tmp_checksum,
 100                                 checksum);
 101                 ret = -EIO;
 102                 goto exit;
 103         }
 104
 105         /* check status */
 106         if (state->buf[2]) {
 107                 /* fw returns status 1 when IR code was not received */
 108                 if (req->cmd == CMD_IR_GET || state->buf[2] == 1) {
 109                         ret = 1;
 110                         goto exit;
 111                 }
 112
 113                 dev_dbg(&d->udev->dev, "%s: command=%02x failed fw error=%d\n",
 114                                 __func__, req->cmd, state->buf[2]);
 115                 ret = -EIO;
 116                 goto exit;
 117         }
 118
 119         /* read request, copy returned data to return buf */
 120         if (req->rlen)
 121                 memcpy(req->rbuf, &state->buf[ACK_HDR_LEN], req->rlen);
 122 exit:
 123         mutex_unlock(&d->usb_mutex);
 124         if (ret < 0)
 125                 dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 126         return ret;
 127 }
 128
 129 /* write multiple registers */
 130 static int af9035_wr_regs(struct dvb_usb_device *d, u32 reg, u8 *val, int len)
 131 {
 132         u8 wbuf[MAX_XFER_SIZE];
 133         u8 mbox = (reg >> 16) & 0xff;
 134         struct usb_req req = { CMD_MEM_WR, mbox, 6 + len, wbuf, 0, NULL };
 135
 136         if (6 + len > sizeof(wbuf)) {
 137                 dev_warn(&d->udev->dev, "%s: i2c wr: len=%d is too big!\n",
 138                          KBUILD_MODNAME, len);
 139                 return -EOPNOTSUPP;
 140         }
 141
 142         wbuf[0] = len;
 143         wbuf[1] = 2;
 144         wbuf[2] = 0;
 145         wbuf[3] = 0;
 146         wbuf[4] = (reg >> 8) & 0xff;
 147         wbuf[5] = (reg >> 0) & 0xff;
 148         memcpy(&wbuf[6], val, len);
 149
 150         return af9035_ctrl_msg(d, &req);
 151 }
 152
 153 /* read multiple registers */
 154 static int af9035_rd_regs(struct dvb_usb_device *d, u32 reg, u8 *val, int len)
 155 {
 156         u8 wbuf[] = { len, 2, 0, 0, (reg >> 8) & 0xff, reg & 0xff };
 157         u8 mbox = (reg >> 16) & 0xff;
 158         struct usb_req req = { CMD_MEM_RD, mbox, sizeof(wbuf), wbuf, len, val };
 159
 160         return af9035_ctrl_msg(d, &req);
 161 }
 162
 163 /* write single register */
 164 static int af9035_wr_reg(struct dvb_usb_device *d, u32 reg, u8 val)
 165 {
 166         return af9035_wr_regs(d, reg, &val, 1);
 167 }
 168
 169 /* read single register */
 170 static int af9035_rd_reg(struct dvb_usb_device *d, u32 reg, u8 *val)
 171 {
 172         return af9035_rd_regs(d, reg, val, 1);
 173 }
 174
 175 /* write single register with mask */
 176 static int af9035_wr_reg_mask(struct dvb_usb_device *d, u32 reg, u8 val,
 177                 u8 mask)
 178 {
 179         int ret;
 180         u8 tmp;
 181
 182         /* no need for read if whole reg is written */
 183         if (mask != 0xff) {
 184                 ret = af9035_rd_regs(d, reg, &tmp, 1);
 185                 if (ret)
 186                         return ret;
 187
 188                 val &= mask;
 189                 tmp &= ~mask;
 190                 val |= tmp;
 191         }
 192
 193         return af9035_wr_regs(d, reg, &val, 1);
 194 }
 195
 196 static int af9035_i2c_master_xfer(struct i2c_adapter *adap,
 197                 struct i2c_msg msg[], int num)
 198 {
 199         struct dvb_usb_device *d = i2c_get_adapdata(adap);
 200         struct state *state = d_to_priv(d);
 201         int ret;
 202
 203         if (mutex_lock_interruptible(&d->i2c_mutex) < 0)
 204                 return -EAGAIN;
 205
 206         /*
 207          * I2C sub header is 5 bytes long. Meaning of those bytes are:
 208          * 0: data len
 209          * 1: I2C addr << 1
 210          * 2: reg addr len
 211          *    byte 3 and 4 can be used as reg addr
 212          * 3: reg addr MSB
 213          *    used when reg addr len is set to 2
 214          * 4: reg addr LSB
 215          *    used when reg addr len is set to 1 or 2
 216          *
 217          * For the simplify we do not use register addr at all.
 218          * NOTE: As a firmware knows tuner type there is very small possibility
 219          * there could be some tuner I2C hacks done by firmware and this may
 220          * lead problems if firmware expects those bytes are used.
 221          */
 222         if (num == 2 && !(msg[0].flags & I2C_M_RD) &&
 223                         (msg[1].flags & I2C_M_RD)) {
 224                 if (msg[0].len > 40 || msg[1].len > 40) {
 225                         /* TODO: correct limits > 40 */
 226                         ret = -EOPNOTSUPP;
 227                 } else if ((msg[0].addr == state->af9033_config[0].i2c_addr) ||
 228                            (msg[0].addr == state->af9033_config[1].i2c_addr)) {
 229                         /* demod access via firmware interface */
 230                         u32 reg = msg[0].buf[0] << 16 | msg[0].buf[1] << 8 |
 231                                         msg[0].buf[2];
 232
 233                         if (msg[0].addr == state->af9033_config[1].i2c_addr)
 234                                 reg |= 0x100000;
 235
 236                         ret = af9035_rd_regs(d, reg, &msg[1].buf[0],
 237                                         msg[1].len);
 238                 } else {
 239                         /* I2C */
 240                         u8 buf[MAX_XFER_SIZE];
 241                         struct usb_req req = { CMD_I2C_RD, 0, 5 + msg[0].len,
 242                                         buf, msg[1].len, msg[1].buf };
 243
 244                         if (5 + msg[0].len > sizeof(buf)) {
 245                                 dev_warn(&d->udev->dev,
 246                                          "%s: i2c xfer: len=%d is too big!\n",
 247                                          KBUILD_MODNAME, msg[0].len);
 248                                 ret = -EOPNOTSUPP;
 249                                 goto unlock;
 250                         }
 251                         req.mbox |= ((msg[0].addr & 0x80)  >>  3);
 252                         buf[0] = msg[1].len;
 253                         buf[1] = msg[0].addr << 1;
 254                         buf[2] = 0x00; /* reg addr len */
 255                         buf[3] = 0x00; /* reg addr MSB */
 256                         buf[4] = 0x00; /* reg addr LSB */
 257                         memcpy(&buf[5], msg[0].buf, msg[0].len);
 258                         ret = af9035_ctrl_msg(d, &req);
 259                 }
 260         } else if (num == 1 && !(msg[0].flags & I2C_M_RD)) {
 261                 if (msg[0].len > 40) {
 262                         /* TODO: correct limits > 40 */
 263                         ret = -EOPNOTSUPP;
 264                 } else if ((msg[0].addr == state->af9033_config[0].i2c_addr) ||
 265                            (msg[0].addr == state->af9033_config[1].i2c_addr)) {
 266                         /* demod access via firmware interface */
 267                         u32 reg = msg[0].buf[0] << 16 | msg[0].buf[1] << 8 |
 268                                         msg[0].buf[2];
 269
 270                         if (msg[0].addr == state->af9033_config[1].i2c_addr)
 271                                 reg |= 0x100000;
 272
 273                         ret = af9035_wr_regs(d, reg, &msg[0].buf[3],
 274                                         msg[0].len - 3);
 275                 } else {
 276                         /* I2C */
 277                         u8 buf[MAX_XFER_SIZE];
 278                         struct usb_req req = { CMD_I2C_WR, 0, 5 + msg[0].len,
 279                                         buf, 0, NULL };
 280
 281                         if (5 + msg[0].len > sizeof(buf)) {
 282                                 dev_warn(&d->udev->dev,
 283                                          "%s: i2c xfer: len=%d is too big!\n",
 284                                          KBUILD_MODNAME, msg[0].len);
 285                                 ret = -EOPNOTSUPP;
 286                                 goto unlock;
 287                         }
 288                         req.mbox |= ((msg[0].addr & 0x80)  >>  3);
 289                         buf[0] = msg[0].len;
 290                         buf[1] = msg[0].addr << 1;
 291                         buf[2] = 0x00; /* reg addr len */
 292                         buf[3] = 0x00; /* reg addr MSB */
 293                         buf[4] = 0x00; /* reg addr LSB */
 294                         memcpy(&buf[5], msg[0].buf, msg[0].len);
 295                         ret = af9035_ctrl_msg(d, &req);
 296                 }
 297         } else if (num == 1 && (msg[0].flags & I2C_M_RD)) {
 298                 if (msg[0].len > 40) {
 299                         /* TODO: correct limits > 40 */
 300                         ret = -EOPNOTSUPP;
 301                 } else {
 302                         /* I2C */
 303                         u8 buf[5];
 304                         struct usb_req req = { CMD_I2C_RD, 0, sizeof(buf),
 305                                         buf, msg[0].len, msg[0].buf };
 306                         req.mbox |= ((msg[0].addr & 0x80)  >>  3);
 307                         buf[0] = msg[0].len;
 308                         buf[1] = msg[0].addr << 1;
 309                         buf[2] = 0x00; /* reg addr len */
 310                         buf[3] = 0x00; /* reg addr MSB */
 311                         buf[4] = 0x00; /* reg addr LSB */
 312                         ret = af9035_ctrl_msg(d, &req);
 313                 }
 314         } else {
 315                 /*
 316                  * We support only three kind of I2C transactions:
 317                  * 1) 1 x read + 1 x write (repeated start)
 318                  * 2) 1 x write
 319                  * 3) 1 x read
 320                  */
 321                 ret = -EOPNOTSUPP;
 322         }
 323
 324 unlock:
 325         mutex_unlock(&d->i2c_mutex);
 326
 327         if (ret < 0)
 328                 return ret;
 329         else
 330                 return num;
 331 }
 332
 333 static u32 af9035_i2c_functionality(struct i2c_adapter *adapter)
 334 {
 335         return I2C_FUNC_I2C;
 336 }
 337
 338 static struct i2c_algorithm af9035_i2c_algo = {
 339         .master_xfer = af9035_i2c_master_xfer,
 340         .functionality = af9035_i2c_functionality,
 341 };
 342
 343 static int af9035_identify_state(struct dvb_usb_device *d, const char **name)
 344 {
 345         struct state *state = d_to_priv(d);
 346         int ret;
 347         u8 wbuf[1] = { 1 };
 348         u8 rbuf[4];
 349         struct usb_req req = { CMD_FW_QUERYINFO, 0, sizeof(wbuf), wbuf,
 350                         sizeof(rbuf), rbuf };
 351
 352         ret = af9035_rd_regs(d, 0x1222, rbuf, 3);
 353         if (ret < 0)
 354                 goto err;
 355
 356         state->chip_version = rbuf[0];
 357         state->chip_type = rbuf[2] << 8 | rbuf[1] << 0;
 358
 359         ret = af9035_rd_reg(d, 0x384f, &state->prechip_version);
 360         if (ret < 0)
 361                 goto err;
 362
 363         dev_info(&d->udev->dev,
 364                         "%s: prechip_version=%02x chip_version=%02x chip_type=%04x\n",
 365                         KBUILD_MODNAME, state->prechip_version,
 366                         state->chip_version, state->chip_type);
 367
 368         if (state->chip_type == 0x9135) {
 369                 if (state->chip_version == 0x02)
 370                         *name = AF9035_FIRMWARE_IT9135_V2;
 371                 else
 372                         *name = AF9035_FIRMWARE_IT9135_V1;
 373                 state->eeprom_addr = EEPROM_BASE_IT9135;
 374         } else {
 375                 *name = AF9035_FIRMWARE_AF9035;
 376                 state->eeprom_addr = EEPROM_BASE_AF9035;
 377         }
 378
 379         ret = af9035_ctrl_msg(d, &req);
 380         if (ret < 0)
 381                 goto err;
 382
 383         dev_dbg(&d->udev->dev, "%s: reply=%*ph\n", __func__, 4, rbuf);
 384         if (rbuf[0] || rbuf[1] || rbuf[2] || rbuf[3])
 385                 ret = WARM;
 386         else
 387                 ret = COLD;
 388
 389         return ret;
 390
 391 err:
 392         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 393
 394         return ret;
 395 }
 396
 397 static int af9035_download_firmware_old(struct dvb_usb_device *d,
 398                 const struct firmware *fw)
 399 {
 400         int ret, i, j, len;
 401         u8 wbuf[1];
 402         struct usb_req req = { 0, 0, 0, NULL, 0, NULL };
 403         struct usb_req req_fw_dl = { CMD_FW_DL, 0, 0, wbuf, 0, NULL };
 404         u8 hdr_core;
 405         u16 hdr_addr, hdr_data_len, hdr_checksum;
 406         #define MAX_DATA 58
 407         #define HDR_SIZE 7
 408
 409         /*
 410          * Thanks to Daniel Glöckner <daniel-gl@gmx.net> about that info!
 411          *
 412          * byte 0: MCS 51 core
 413          *  There are two inside the AF9035 (1=Link and 2=OFDM) with separate
 414          *  address spaces
 415          * byte 1-2: Big endian destination address
 416          * byte 3-4: Big endian number of data bytes following the header
 417          * byte 5-6: Big endian header checksum, apparently ignored by the chip
 418          *  Calculated as ~(h[0]*256+h[1]+h[2]*256+h[3]+h[4]*256)
 419          */
 420
 421         for (i = fw->size; i > HDR_SIZE;) {
 422                 hdr_core = fw->data[fw->size - i + 0];
 423                 hdr_addr = fw->data[fw->size - i + 1] << 8;
 424                 hdr_addr |= fw->data[fw->size - i + 2] << 0;
 425                 hdr_data_len = fw->data[fw->size - i + 3] << 8;
 426                 hdr_data_len |= fw->data[fw->size - i + 4] << 0;
 427                 hdr_checksum = fw->data[fw->size - i + 5] << 8;
 428                 hdr_checksum |= fw->data[fw->size - i + 6] << 0;
 429
 430                 dev_dbg(&d->udev->dev,
 431                                 "%s: core=%d addr=%04x data_len=%d checksum=%04x\n",
 432                                 __func__, hdr_core, hdr_addr, hdr_data_len,
 433                                 hdr_checksum);
 434
 435                 if (((hdr_core != 1) && (hdr_core != 2)) ||
 436                                 (hdr_data_len > i)) {
 437                         dev_dbg(&d->udev->dev, "%s: bad firmware\n", __func__);
 438                         break;
 439                 }
 440
 441                 /* download begin packet */
 442                 req.cmd = CMD_FW_DL_BEGIN;
 443                 ret = af9035_ctrl_msg(d, &req);
 444                 if (ret < 0)
 445                         goto err;
 446
 447                 /* download firmware packet(s) */
 448                 for (j = HDR_SIZE + hdr_data_len; j > 0; j -= MAX_DATA) {
 449                         len = j;
 450                         if (len > MAX_DATA)
 451                                 len = MAX_DATA;
 452                         req_fw_dl.wlen = len;
 453                         req_fw_dl.wbuf = (u8 *) &fw->data[fw->size - i +
 454                                         HDR_SIZE + hdr_data_len - j];
 455                         ret = af9035_ctrl_msg(d, &req_fw_dl);
 456                         if (ret < 0)
 457                                 goto err;
 458                 }
 459
 460                 /* download end packet */
 461                 req.cmd = CMD_FW_DL_END;
 462                 ret = af9035_ctrl_msg(d, &req);
 463                 if (ret < 0)
 464                         goto err;
 465
 466                 i -= hdr_data_len + HDR_SIZE;
 467
 468                 dev_dbg(&d->udev->dev, "%s: data uploaded=%zu\n",
 469                                 __func__, fw->size - i);
 470         }
 471
 472         /* print warn if firmware is bad, continue and see what happens */
 473         if (i)
 474                 dev_warn(&d->udev->dev, "%s: bad firmware\n", KBUILD_MODNAME);
 475
 476         return 0;
 477
 478 err:
 479         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 480
 481         return ret;
 482 }
 483
 484 static int af9035_download_firmware_new(struct dvb_usb_device *d,
 485                 const struct firmware *fw)
 486 {
 487         int ret, i, i_prev;
 488         struct usb_req req_fw_dl = { CMD_FW_SCATTER_WR, 0, 0, NULL, 0, NULL };
 489         #define HDR_SIZE 7
 490
 491         /*
 492          * There seems to be following firmware header. Meaning of bytes 0-3
 493          * is unknown.
 494          *
 495          * 0: 3
 496          * 1: 0, 1
 497          * 2: 0
 498          * 3: 1, 2, 3
 499          * 4: addr MSB
 500          * 5: addr LSB
 501          * 6: count of data bytes ?
 502          */
 503         for (i = HDR_SIZE, i_prev = 0; i <= fw->size; i++) {
 504                 if (i == fw->size ||
 505                                 (fw->data[i + 0] == 0x03 &&
 506                                 (fw->data[i + 1] == 0x00 ||
 507                                 fw->data[i + 1] == 0x01) &&
 508                                 fw->data[i + 2] == 0x00)) {
 509                         req_fw_dl.wlen = i - i_prev;
 510                         req_fw_dl.wbuf = (u8 *) &fw->data[i_prev];
 511                         i_prev = i;
 512                         ret = af9035_ctrl_msg(d, &req_fw_dl);
 513                         if (ret < 0)
 514                                 goto err;
 515
 516                         dev_dbg(&d->udev->dev, "%s: data uploaded=%d\n",
 517                                         __func__, i);
 518                 }
 519         }
 520
 521         return 0;
 522
 523 err:
 524         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 525
 526         return ret;
 527 }
 528
 529 static int af9035_download_firmware(struct dvb_usb_device *d,
 530                 const struct firmware *fw)
 531 {
 532         struct state *state = d_to_priv(d);
 533         int ret;
 534         u8 wbuf[1];
 535         u8 rbuf[4];
 536         u8 tmp;
 537         struct usb_req req = { 0, 0, 0, NULL, 0, NULL };
 538         struct usb_req req_fw_ver = { CMD_FW_QUERYINFO, 0, 1, wbuf, 4, rbuf };
 539         dev_dbg(&d->udev->dev, "%s:\n", __func__);
 540
 541         /*
 542          * In case of dual tuner configuration we need to do some extra
 543          * initialization in order to download firmware to slave demod too,
 544          * which is done by master demod.
 545          * Master feeds also clock and controls power via GPIO.
 546          */
 547         ret = af9035_rd_reg(d, state->eeprom_addr + EEPROM_TS_MODE, &tmp);
 548         if (ret < 0)
 549                 goto err;
 550
 551         if (tmp == 1 || tmp == 3) {
 552                 /* configure gpioh1, reset & power slave demod */
 553                 ret = af9035_wr_reg_mask(d, 0x00d8b0, 0x01, 0x01);
 554                 if (ret < 0)
 555                         goto err;
 556
 557                 ret = af9035_wr_reg_mask(d, 0x00d8b1, 0x01, 0x01);
 558                 if (ret < 0)
 559                         goto err;
 560
 561                 ret = af9035_wr_reg_mask(d, 0x00d8af, 0x00, 0x01);
 562                 if (ret < 0)
 563                         goto err;
 564
 565                 usleep_range(10000, 50000);
 566
 567                 ret = af9035_wr_reg_mask(d, 0x00d8af, 0x01, 0x01);
 568                 if (ret < 0)
 569                         goto err;
 570
 571                 /* tell the slave I2C address */
 572                 ret = af9035_rd_reg(d,
 573                                 state->eeprom_addr + EEPROM_2ND_DEMOD_ADDR,
 574                                 &tmp);
 575                 if (ret < 0)
 576                         goto err;
 577
 578                 /* use default I2C address if eeprom has no address set */
 579                 if (!tmp)
 580                         tmp = 0x3a;
 581
 582                 if (state->chip_type == 0x9135) {
 583                         ret = af9035_wr_reg(d, 0x004bfb, tmp);
 584                         if (ret < 0)
 585                                 goto err;
 586                 } else {
 587                         ret = af9035_wr_reg(d, 0x00417f, tmp);
 588                         if (ret < 0)
 589                                 goto err;
 590
 591                         /* enable clock out */
 592                         ret = af9035_wr_reg_mask(d, 0x00d81a, 0x01, 0x01);
 593                         if (ret < 0)
 594                                 goto err;
 595                 }
 596         }
 597
 598         if (fw->data[0] == 0x01)
 599                 ret = af9035_download_firmware_old(d, fw);
 600         else
 601                 ret = af9035_download_firmware_new(d, fw);
 602         if (ret < 0)
 603                 goto err;
 604
 605         /* firmware loaded, request boot */
 606         req.cmd = CMD_FW_BOOT;
 607         ret = af9035_ctrl_msg(d, &req);
 608         if (ret < 0)
 609                 goto err;
 610
 611         /* ensure firmware starts */
 612         wbuf[0] = 1;
 613         ret = af9035_ctrl_msg(d, &req_fw_ver);
 614         if (ret < 0)
 615                 goto err;
 616
 617         if (!(rbuf[0] || rbuf[1] || rbuf[2] || rbuf[3])) {
 618                 dev_err(&d->udev->dev, "%s: firmware did not run\n",
 619                                 KBUILD_MODNAME);
 620                 ret = -ENODEV;
 621                 goto err;
 622         }
 623
 624         dev_info(&d->udev->dev, "%s: firmware version=%d.%d.%d.%d",
 625                         KBUILD_MODNAME, rbuf[0], rbuf[1], rbuf[2], rbuf[3]);
 626
 627         return 0;
 628
 629 err:
 630         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 631
 632         return ret;
 633 }
 634
 635 static int af9035_read_config(struct dvb_usb_device *d)
 636 {
 637         struct state *state = d_to_priv(d);
 638         int ret, i;
 639         u8 tmp;
 640         u16 tmp16, addr;
 641
 642         /* demod I2C "address" */
 643         state->af9033_config[0].i2c_addr = 0x38;
 644         state->af9033_config[1].i2c_addr = 0x3a;
 645         state->af9033_config[0].adc_multiplier = AF9033_ADC_MULTIPLIER_2X;
 646         state->af9033_config[1].adc_multiplier = AF9033_ADC_MULTIPLIER_2X;
 647         state->af9033_config[0].ts_mode = AF9033_TS_MODE_USB;
 648         state->af9033_config[1].ts_mode = AF9033_TS_MODE_SERIAL;
 649
 650         /* eeprom memory mapped location */
 651         if (state->chip_type == 0x9135) {
 652                 if (state->chip_version == 0x02) {
 653                         state->af9033_config[0].tuner = AF9033_TUNER_IT9135_60;
 654                         state->af9033_config[1].tuner = AF9033_TUNER_IT9135_60;
 655                         tmp16 = 0x00461d;
 656                 } else {
 657                         state->af9033_config[0].tuner = AF9033_TUNER_IT9135_38;
 658                         state->af9033_config[1].tuner = AF9033_TUNER_IT9135_38;
 659                         tmp16 = 0x00461b;
 660                 }
 661
 662                 /* check if eeprom exists */
 663                 ret = af9035_rd_reg(d, tmp16, &tmp);
 664                 if (ret < 0)
 665                         goto err;
 666
 667                 if (tmp == 0x00) {
 668                         dev_dbg(&d->udev->dev, "%s: no eeprom\n", __func__);
 669                         goto skip_eeprom;
 670                 }
 671         }
 672
 673         /* check if there is dual tuners */
 674         ret = af9035_rd_reg(d, state->eeprom_addr + EEPROM_TS_MODE, &tmp);
 675         if (ret < 0)
 676                 goto err;
 677
 678         if (tmp == 1 || tmp == 3)
 679                 state->dual_mode = true;
 680
 681         dev_dbg(&d->udev->dev, "%s: ts mode=%d dual mode=%d\n", __func__,
 682                         tmp, state->dual_mode);
 683
 684         if (state->dual_mode) {
 685                 /* read 2nd demodulator I2C address */
 686                 ret = af9035_rd_reg(d,
 687                                 state->eeprom_addr + EEPROM_2ND_DEMOD_ADDR,
 688                                 &tmp);
 689                 if (ret < 0)
 690                         goto err;
 691
 692                 if (tmp)
 693                         state->af9033_config[1].i2c_addr = tmp;
 694
 695                 dev_dbg(&d->udev->dev, "%s: 2nd demod I2C addr=%02x\n",
 696                                 __func__, tmp);
 697         }
 698
 699         addr = state->eeprom_addr;
 700
 701         for (i = 0; i < state->dual_mode + 1; i++) {
 702                 /* tuner */
 703                 ret = af9035_rd_reg(d, addr + EEPROM_1_TUNER_ID, &tmp);
 704                 if (ret < 0)
 705                         goto err;
 706
 707                 dev_dbg(&d->udev->dev, "%s: [%d]tuner=%02x\n",
 708                                 __func__, i, tmp);
 709
 710                 /* tuner sanity check */
 711                 if (state->chip_type == 0x9135) {
 712                         if (state->chip_version == 0x02) {
 713                                 /* IT9135 BX (v2) */
 714                                 switch (tmp) {
 715                                 case AF9033_TUNER_IT9135_60:
 716                                 case AF9033_TUNER_IT9135_61:
 717                                 case AF9033_TUNER_IT9135_62:
 718                                         state->af9033_config[i].tuner = tmp;
 719                                         break;
 720                                 }
 721                         } else {
 722                                 /* IT9135 AX (v1) */
 723                                 switch (tmp) {
 724                                 case AF9033_TUNER_IT9135_38:
 725                                 case AF9033_TUNER_IT9135_51:
 726                                 case AF9033_TUNER_IT9135_52:
 727                                         state->af9033_config[i].tuner = tmp;
 728                                         break;
 729                                 }
 730                         }
 731                 } else {
 732                         /* AF9035 */
 733                         state->af9033_config[i].tuner = tmp;
 734                 }
 735
 736                 if (state->af9033_config[i].tuner != tmp) {
 737                         dev_info(&d->udev->dev,
 738                                         "%s: [%d] overriding tuner from %02x to %02x\n",
 739                                         KBUILD_MODNAME, i, tmp,
 740                                         state->af9033_config[i].tuner);
 741                 }
 742
 743                 switch (state->af9033_config[i].tuner) {
 744                 case AF9033_TUNER_TUA9001:
 745                 case AF9033_TUNER_FC0011:
 746                 case AF9033_TUNER_MXL5007T:
 747                 case AF9033_TUNER_TDA18218:
 748                 case AF9033_TUNER_FC2580:
 749                 case AF9033_TUNER_FC0012:
 750                         state->af9033_config[i].spec_inv = 1;
 751                         break;
 752                 case AF9033_TUNER_IT9135_38:
 753                 case AF9033_TUNER_IT9135_51:
 754                 case AF9033_TUNER_IT9135_52:
 755                 case AF9033_TUNER_IT9135_60:
 756                 case AF9033_TUNER_IT9135_61:
 757                 case AF9033_TUNER_IT9135_62:
 758                         break;
 759                 default:
 760                         dev_warn(&d->udev->dev,
 761                                         "%s: tuner id=%02x not supported, please report!",
 762                                         KBUILD_MODNAME, tmp);
 763                 }
 764
 765                 /* disable dual mode if driver does not support it */
 766                 if (i == 1)
 767                         switch (state->af9033_config[i].tuner) {
 768                         case AF9033_TUNER_FC0012:
 769                         case AF9033_TUNER_IT9135_38:
 770                         case AF9033_TUNER_IT9135_51:
 771                         case AF9033_TUNER_IT9135_52:
 772                         case AF9033_TUNER_IT9135_60:
 773                         case AF9033_TUNER_IT9135_61:
 774                         case AF9033_TUNER_IT9135_62:
 775                         case AF9033_TUNER_MXL5007T:
 776                                 break;
 777                         default:
 778                                 state->dual_mode = false;
 779                                 dev_info(&d->udev->dev,
 780                                                 "%s: driver does not support 2nd tuner and will disable it",
 781                                                 KBUILD_MODNAME);
 782                 }
 783
 784                 /* tuner IF frequency */
 785                 ret = af9035_rd_reg(d, addr + EEPROM_1_IF_L, &tmp);
 786                 if (ret < 0)
 787                         goto err;
 788
 789                 tmp16 = tmp;
 790
 791                 ret = af9035_rd_reg(d, addr + EEPROM_1_IF_H, &tmp);
 792                 if (ret < 0)
 793                         goto err;
 794
 795                 tmp16 |= tmp << 8;
 796
 797                 dev_dbg(&d->udev->dev, "%s: [%d]IF=%d\n", __func__, i, tmp16);
 798
 799                 addr += 0x10; /* shift for the 2nd tuner params */
 800         }
 801
 802 skip_eeprom:
 803         /* get demod clock */
 804         ret = af9035_rd_reg(d, 0x00d800, &tmp);
 805         if (ret < 0)
 806                 goto err;
 807
 808         tmp = (tmp >> 0) & 0x0f;
 809
 810         for (i = 0; i < ARRAY_SIZE(state->af9033_config); i++) {
 811                 if (state->chip_type == 0x9135)
 812                         state->af9033_config[i].clock = clock_lut_it9135[tmp];
 813                 else
 814                         state->af9033_config[i].clock = clock_lut_af9035[tmp];
 815         }
 816
 817         return 0;
 818
 819 err:
 820         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 821
 822         return ret;
 823 }
 824
 825 static int af9035_tua9001_tuner_callback(struct dvb_usb_device *d,
 826                 int cmd, int arg)
 827 {
 828         int ret;
 829         u8 val;
 830
 831         dev_dbg(&d->udev->dev, "%s: cmd=%d arg=%d\n", __func__, cmd, arg);
 832
 833         /*
 834          * CEN     always enabled by hardware wiring
 835          * RESETN  GPIOT3
 836          * RXEN    GPIOT2
 837          */
 838
 839         switch (cmd) {
 840         case TUA9001_CMD_RESETN:
 841                 if (arg)
 842                         val = 0x00;
 843                 else
 844                         val = 0x01;
 845
 846                 ret = af9035_wr_reg_mask(d, 0x00d8e7, val, 0x01);
 847                 if (ret < 0)
 848                         goto err;
 849                 break;
 850         case TUA9001_CMD_RXEN:
 851                 if (arg)
 852                         val = 0x01;
 853                 else
 854                         val = 0x00;
 855
 856                 ret = af9035_wr_reg_mask(d, 0x00d8eb, val, 0x01);
 857                 if (ret < 0)
 858                         goto err;
 859                 break;
 860         }
 861
 862         return 0;
 863
 864 err:
 865         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 866
 867         return ret;
 868 }
 869
 870
 871 static int af9035_fc0011_tuner_callback(struct dvb_usb_device *d,
 872                 int cmd, int arg)
 873 {
 874         int ret;
 875
 876         switch (cmd) {
 877         case FC0011_FE_CALLBACK_POWER:
 878                 /* Tuner enable */
 879                 ret = af9035_wr_reg_mask(d, 0xd8eb, 1, 1);
 880                 if (ret < 0)
 881                         goto err;
 882
 883                 ret = af9035_wr_reg_mask(d, 0xd8ec, 1, 1);
 884                 if (ret < 0)
 885                         goto err;
 886
 887                 ret = af9035_wr_reg_mask(d, 0xd8ed, 1, 1);
 888                 if (ret < 0)
 889                         goto err;
 890
 891                 /* LED */
 892                 ret = af9035_wr_reg_mask(d, 0xd8d0, 1, 1);
 893                 if (ret < 0)
 894                         goto err;
 895
 896                 ret = af9035_wr_reg_mask(d, 0xd8d1, 1, 1);
 897                 if (ret < 0)
 898                         goto err;
 899
 900                 usleep_range(10000, 50000);
 901                 break;
 902         case FC0011_FE_CALLBACK_RESET:
 903                 ret = af9035_wr_reg(d, 0xd8e9, 1);
 904                 if (ret < 0)
 905                         goto err;
 906
 907                 ret = af9035_wr_reg(d, 0xd8e8, 1);
 908                 if (ret < 0)
 909                         goto err;
 910
 911                 ret = af9035_wr_reg(d, 0xd8e7, 1);
 912                 if (ret < 0)
 913                         goto err;
 914
 915                 usleep_range(10000, 20000);
 916
 917                 ret = af9035_wr_reg(d, 0xd8e7, 0);
 918                 if (ret < 0)
 919                         goto err;
 920
 921                 usleep_range(10000, 20000);
 922                 break;
 923         default:
 924                 ret = -EINVAL;
 925                 goto err;
 926         }
 927
 928         return 0;
 929
 930 err:
 931         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
 932
 933         return ret;
 934 }
 935
 936 static int af9035_tuner_callback(struct dvb_usb_device *d, int cmd, int arg)
 937 {
 938         struct state *state = d_to_priv(d);
 939
 940         switch (state->af9033_config[0].tuner) {
 941         case AF9033_TUNER_FC0011:
 942                 return af9035_fc0011_tuner_callback(d, cmd, arg);
 943         case AF9033_TUNER_TUA9001:
 944                 return af9035_tua9001_tuner_callback(d, cmd, arg);
 945         default:
 946                 break;
 947         }
 948
 949         return 0;
 950 }
 951
 952 static int af9035_frontend_callback(void *adapter_priv, int component,
 953                                     int cmd, int arg)
 954 {
 955         struct i2c_adapter *adap = adapter_priv;
 956         struct dvb_usb_device *d = i2c_get_adapdata(adap);
 957
 958         dev_dbg(&d->udev->dev, "%s: component=%d cmd=%d arg=%d\n",
 959                         __func__, component, cmd, arg);
 960
 961         switch (component) {
 962         case DVB_FRONTEND_COMPONENT_TUNER:
 963                 return af9035_tuner_callback(d, cmd, arg);
 964         default:
 965                 break;
 966         }
 967
 968         return 0;
 969 }
 970
 971 static int af9035_get_adapter_count(struct dvb_usb_device *d)
 972 {
 973         struct state *state = d_to_priv(d);
 974         return state->dual_mode + 1;
 975 }
 976
 977 static int af9035_frontend_attach(struct dvb_usb_adapter *adap)
 978 {
 979         struct state *state = adap_to_priv(adap);
 980         struct dvb_usb_device *d = adap_to_d(adap);
 981         int ret;
 982         dev_dbg(&d->udev->dev, "%s:\n", __func__);
 983
 984         if (!state->af9033_config[adap->id].tuner) {
 985                 /* unsupported tuner */
 986                 ret = -ENODEV;
 987                 goto err;
 988         }
 989
 990         /* attach demodulator */
 991         adap->fe[0] = dvb_attach(af9033_attach, &state->af9033_config[adap->id],
 992                         &d->i2c_adap, &state->ops);
 993         if (adap->fe[0] == NULL) {
 994                 ret = -ENODEV;
 995                 goto err;
 996         }
 997
 998         /* disable I2C-gate */
 999         adap->fe[0]->ops.i2c_gate_ctrl = NULL;
1000         adap->fe[0]->callback = af9035_frontend_callback;
1001
1002         return 0;
1003
1004 err:
1005         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
1006
1007         return ret;
1008 }
1009
1010 static struct tua9001_config af9035_tua9001_config = {
1011         .i2c_addr = 0x60,
1012 };
1013
1014 static const struct fc0011_config af9035_fc0011_config = {
1015         .i2c_address = 0x60,
1016 };
1017
1018 static struct mxl5007t_config af9035_mxl5007t_config[] = {
1019         {
1020                 .xtal_freq_hz = MxL_XTAL_24_MHZ,
1021                 .if_freq_hz = MxL_IF_4_57_MHZ,
1022                 .invert_if = 0,
1023                 .loop_thru_enable = 0,
1024                 .clk_out_enable = 0,
1025                 .clk_out_amp = MxL_CLKOUT_AMP_0_94V,
1026         }, {
1027                 .xtal_freq_hz = MxL_XTAL_24_MHZ,
1028                 .if_freq_hz = MxL_IF_4_57_MHZ,
1029                 .invert_if = 0,
1030                 .loop_thru_enable = 1,
1031                 .clk_out_enable = 1,
1032                 .clk_out_amp = MxL_CLKOUT_AMP_0_94V,
1033         }
1034 };
1035
1036 static struct tda18218_config af9035_tda18218_config = {
1037         .i2c_address = 0x60,
1038         .i2c_wr_max = 21,
1039 };
1040
1041 static const struct fc2580_config af9035_fc2580_config = {
1042         .i2c_addr = 0x56,
1043         .clock = 16384000,
1044 };
1045
1046 static const struct fc0012_config af9035_fc0012_config[] = {
1047         {
1048                 .i2c_address = 0x63,
1049                 .xtal_freq = FC_XTAL_36_MHZ,
1050                 .dual_master = true,
1051                 .loop_through = true,
1052                 .clock_out = true,
1053         }, {
1054                 .i2c_address = 0x63 | 0x80, /* I2C bus select hack */
1055                 .xtal_freq = FC_XTAL_36_MHZ,
1056                 .dual_master = true,
1057         }
1058 };
1059
1060 static int af9035_tuner_attach(struct dvb_usb_adapter *adap)
1061 {
1062         struct state *state = adap_to_priv(adap);
1063         struct dvb_usb_device *d = adap_to_d(adap);
1064         int ret;
1065         struct dvb_frontend *fe;
1066         struct i2c_msg msg[1];
1067         u8 tuner_addr;
1068         dev_dbg(&d->udev->dev, "%s:\n", __func__);
1069
1070         /*
1071          * XXX: Hack used in that function: we abuse unused I2C address bit [7]
1072          * to carry info about used I2C bus for dual tuner configuration.
1073          */
1074
1075         switch (state->af9033_config[adap->id].tuner) {
1076         case AF9033_TUNER_TUA9001:
1077                 /* AF9035 gpiot3 = TUA9001 RESETN
1078                    AF9035 gpiot2 = TUA9001 RXEN */
1079
1080                 /* configure gpiot2 and gpiot2 as output */
1081                 ret = af9035_wr_reg_mask(d, 0x00d8ec, 0x01, 0x01);
1082                 if (ret < 0)
1083                         goto err;
1084
1085                 ret = af9035_wr_reg_mask(d, 0x00d8ed, 0x01, 0x01);
1086                 if (ret < 0)
1087                         goto err;
1088
1089                 ret = af9035_wr_reg_mask(d, 0x00d8e8, 0x01, 0x01);
1090                 if (ret < 0)
1091                         goto err;
1092
1093                 ret = af9035_wr_reg_mask(d, 0x00d8e9, 0x01, 0x01);
1094                 if (ret < 0)
1095                         goto err;
1096
1097                 /* attach tuner */
1098                 fe = dvb_attach(tua9001_attach, adap->fe[0],
1099                                 &d->i2c_adap, &af9035_tua9001_config);
1100                 break;
1101         case AF9033_TUNER_FC0011:
1102                 fe = dvb_attach(fc0011_attach, adap->fe[0],
1103                                 &d->i2c_adap, &af9035_fc0011_config);
1104                 break;
1105         case AF9033_TUNER_MXL5007T:
1106                 if (adap->id == 0) {
1107                         ret = af9035_wr_reg(d, 0x00d8e0, 1);
1108                         if (ret < 0)
1109                                 goto err;
1110
1111                         ret = af9035_wr_reg(d, 0x00d8e1, 1);
1112                         if (ret < 0)
1113                                 goto err;
1114
1115                         ret = af9035_wr_reg(d, 0x00d8df, 0);
1116                         if (ret < 0)
1117                                 goto err;
1118
1119                         msleep(30);
1120
1121                         ret = af9035_wr_reg(d, 0x00d8df, 1);
1122                         if (ret < 0)
1123                                 goto err;
1124
1125                         msleep(300);
1126
1127                         ret = af9035_wr_reg(d, 0x00d8c0, 1);
1128                         if (ret < 0)
1129                                 goto err;
1130
1131                         ret = af9035_wr_reg(d, 0x00d8c1, 1);
1132                         if (ret < 0)
1133                                 goto err;
1134
1135                         ret = af9035_wr_reg(d, 0x00d8bf, 0);
1136                         if (ret < 0)
1137                                 goto err;
1138
1139                         ret = af9035_wr_reg(d, 0x00d8b4, 1);
1140                         if (ret < 0)
1141                                 goto err;
1142
1143                         ret = af9035_wr_reg(d, 0x00d8b5, 1);
1144                         if (ret < 0)
1145                                 goto err;
1146
1147                         ret = af9035_wr_reg(d, 0x00d8b3, 1);
1148                         if (ret < 0)
1149                                 goto err;
1150
1151                         tuner_addr = 0x60;
1152                 } else {
1153                         tuner_addr = 0x60 | 0x80; /* I2C bus hack */
1154                 }
1155
1156                 /* attach tuner */
1157                 fe = dvb_attach(mxl5007t_attach, adap->fe[0], &d->i2c_adap,
1158                                 tuner_addr, &af9035_mxl5007t_config[adap->id]);
1159                 break;
1160         case AF9033_TUNER_TDA18218:
1161                 /* attach tuner */
1162                 fe = dvb_attach(tda18218_attach, adap->fe[0],
1163                                 &d->i2c_adap, &af9035_tda18218_config);
1164                 break;
1165         case AF9033_TUNER_FC2580:
1166                 /* Tuner enable using gpiot2_o, gpiot2_en and gpiot2_on  */
1167                 ret = af9035_wr_reg_mask(d, 0xd8eb, 0x01, 0x01);
1168                 if (ret < 0)
1169                         goto err;
1170
1171                 ret = af9035_wr_reg_mask(d, 0xd8ec, 0x01, 0x01);
1172                 if (ret < 0)
1173                         goto err;
1174
1175                 ret = af9035_wr_reg_mask(d, 0xd8ed, 0x01, 0x01);
1176                 if (ret < 0)
1177                         goto err;
1178
1179                 usleep_range(10000, 50000);
1180                 /* attach tuner */
1181                 fe = dvb_attach(fc2580_attach, adap->fe[0],
1182                                 &d->i2c_adap, &af9035_fc2580_config);
1183                 break;
1184         case AF9033_TUNER_FC0012:
1185                 /*
1186                  * AF9035 gpiot2 = FC0012 enable
1187                  * XXX: there seems to be something on gpioh8 too, but on my
1188                  * my test I didn't find any difference.
1189                  */
1190
1191                 if (adap->id == 0) {
1192                         /* configure gpiot2 as output and high */
1193                         ret = af9035_wr_reg_mask(d, 0xd8eb, 0x01, 0x01);
1194                         if (ret < 0)
1195                                 goto err;
1196
1197                         ret = af9035_wr_reg_mask(d, 0xd8ec, 0x01, 0x01);
1198                         if (ret < 0)
1199                                 goto err;
1200
1201                         ret = af9035_wr_reg_mask(d, 0xd8ed, 0x01, 0x01);
1202                         if (ret < 0)
1203                                 goto err;
1204                 } else {
1205                         /*
1206                          * FIXME: That belongs for the FC0012 driver.
1207                          * Write 02 to FC0012 master tuner register 0d directly
1208                          * in order to make slave tuner working.
1209                          */
1210                         msg[0].addr = 0x63;
1211                         msg[0].flags = 0;
1212                         msg[0].len = 2;
1213                         msg[0].buf = "\x0d\x02";
1214                         ret = i2c_transfer(&d->i2c_adap, msg, 1);
1215                         if (ret < 0)
1216                                 goto err;
1217                 }
1218
1219                 usleep_range(10000, 50000);
1220
1221                 fe = dvb_attach(fc0012_attach, adap->fe[0], &d->i2c_adap,
1222                                 &af9035_fc0012_config[adap->id]);
1223                 break;
1224         case AF9033_TUNER_IT9135_38:
1225         case AF9033_TUNER_IT9135_51:
1226         case AF9033_TUNER_IT9135_52:
1227         case AF9033_TUNER_IT9135_60:
1228         case AF9033_TUNER_IT9135_61:
1229         case AF9033_TUNER_IT9135_62:
1230                 /* attach tuner */
1231                 fe = dvb_attach(it913x_attach, adap->fe[0], &d->i2c_adap,
1232                                 state->af9033_config[adap->id].i2c_addr,
1233                                 state->af9033_config[0].tuner);
1234                 break;
1235         default:
1236                 fe = NULL;
1237         }
1238
1239         if (fe == NULL) {
1240                 ret = -ENODEV;
1241                 goto err;
1242         }
1243
1244         return 0;
1245
1246 err:
1247         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
1248
1249         return ret;
1250 }
1251
1252 static int af9035_init(struct dvb_usb_device *d)
1253 {
1254         struct state *state = d_to_priv(d);
1255         int ret, i;
1256         u16 frame_size = (d->udev->speed == USB_SPEED_FULL ? 5 : 87) * 188 / 4;
1257         u8 packet_size = (d->udev->speed == USB_SPEED_FULL ? 64 : 512) / 4;
1258         struct reg_val_mask tab[] = {
1259                 { 0x80f99d, 0x01, 0x01 },
1260                 { 0x80f9a4, 0x01, 0x01 },
1261                 { 0x00dd11, 0x00, 0x20 },
1262                 { 0x00dd11, 0x00, 0x40 },
1263                 { 0x00dd13, 0x00, 0x20 },
1264                 { 0x00dd13, 0x00, 0x40 },
1265                 { 0x00dd11, 0x20, 0x20 },
1266                 { 0x00dd88, (frame_size >> 0) & 0xff, 0xff},
1267                 { 0x00dd89, (frame_size >> 8) & 0xff, 0xff},
1268                 { 0x00dd0c, packet_size, 0xff},
1269                 { 0x00dd11, state->dual_mode << 6, 0x40 },
1270                 { 0x00dd8a, (frame_size >> 0) & 0xff, 0xff},
1271                 { 0x00dd8b, (frame_size >> 8) & 0xff, 0xff},
1272                 { 0x00dd0d, packet_size, 0xff },
1273                 { 0x80f9a3, state->dual_mode, 0x01 },
1274                 { 0x80f9cd, state->dual_mode, 0x01 },
1275                 { 0x80f99d, 0x00, 0x01 },
1276                 { 0x80f9a4, 0x00, 0x01 },
1277         };
1278
1279         dev_dbg(&d->udev->dev,
1280                         "%s: USB speed=%d frame_size=%04x packet_size=%02x\n",
1281                         __func__, d->udev->speed, frame_size, packet_size);
1282
1283         /* init endpoints */
1284         for (i = 0; i < ARRAY_SIZE(tab); i++) {
1285                 ret = af9035_wr_reg_mask(d, tab[i].reg, tab[i].val,
1286                                 tab[i].mask);
1287                 if (ret < 0)
1288                         goto err;
1289         }
1290
1291         return 0;
1292
1293 err:
1294         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
1295
1296         return ret;
1297 }
1298
1299 #if IS_ENABLED(CONFIG_RC_CORE)
1300 static int af9035_rc_query(struct dvb_usb_device *d)
1301 {
1302         int ret;
1303         u32 key;
1304         u8 buf[4];
1305         struct usb_req req = { CMD_IR_GET, 0, 0, NULL, 4, buf };
1306
1307         ret = af9035_ctrl_msg(d, &req);
1308         if (ret == 1)
1309                 return 0;
1310         else if (ret < 0)
1311                 goto err;
1312
1313         if ((buf[2] + buf[3]) == 0xff) {
1314                 if ((buf[0] + buf[1]) == 0xff) {
1315                         /* NEC standard 16bit */
1316                         key = buf[0] << 8 | buf[2];
1317                 } else {
1318                         /* NEC extended 24bit */
1319                         key = buf[0] << 16 | buf[1] << 8 | buf[2];
1320                 }
1321         } else {
1322                 /* NEC full code 32bit */
1323                 key = buf[0] << 24 | buf[1] << 16 | buf[2] << 8 | buf[3];
1324         }
1325
1326         dev_dbg(&d->udev->dev, "%s: %*ph\n", __func__, 4, buf);
1327
1328         rc_keydown(d->rc_dev, key, 0);
1329
1330         return 0;
1331
1332 err:
1333         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
1334
1335         return ret;
1336 }
1337
1338 static int af9035_get_rc_config(struct dvb_usb_device *d, struct dvb_usb_rc *rc)
1339 {
1340         struct state *state = d_to_priv(d);
1341         int ret;
1342         u8 tmp;
1343
1344         ret = af9035_rd_reg(d, state->eeprom_addr + EEPROM_IR_MODE, &tmp);
1345         if (ret < 0)
1346                 goto err;
1347
1348         dev_dbg(&d->udev->dev, "%s: ir_mode=%02x\n", __func__, tmp);
1349
1350         /* don't activate rc if in HID mode or if not available */
1351         if (tmp == 5) {
1352                 ret = af9035_rd_reg(d, state->eeprom_addr + EEPROM_IR_TYPE,
1353                                 &tmp);
1354                 if (ret < 0)
1355                         goto err;
1356
1357                 dev_dbg(&d->udev->dev, "%s: ir_type=%02x\n", __func__, tmp);
1358
1359                 switch (tmp) {
1360                 case 0: /* NEC */
1361                 default:
1362                         rc->allowed_protos = RC_BIT_NEC;
1363                         break;
1364                 case 1: /* RC6 */
1365                         rc->allowed_protos = RC_BIT_RC6_MCE;
1366                         break;
1367                 }
1368
1369                 rc->query = af9035_rc_query;
1370                 rc->interval = 500;
1371
1372                 /* load empty to enable rc */
1373                 if (!rc->map_name)
1374                         rc->map_name = RC_MAP_EMPTY;
1375         }
1376
1377         return 0;
1378
1379 err:
1380         dev_dbg(&d->udev->dev, "%s: failed=%d\n", __func__, ret);
1381
1382         return ret;
1383 }
1384 #else
1385         #define af9035_get_rc_config NULL
1386 #endif
1387
1388 static int af9035_get_stream_config(struct dvb_frontend *fe, u8 *ts_type,
1389                 struct usb_data_stream_properties *stream)
1390 {
1391         struct dvb_usb_device *d = fe_to_d(fe);
1392         dev_dbg(&d->udev->dev, "%s: adap=%d\n", __func__, fe_to_adap(fe)->id);
1393
1394         if (d->udev->speed == USB_SPEED_FULL)
1395                 stream->u.bulk.buffersize = 5 * 188;
1396
1397         return 0;
1398 }
1399
1400 static int af9035_pid_filter_ctrl(struct dvb_usb_adapter *adap, int onoff)
1401 {
1402         struct state *state = adap_to_priv(adap);
1403
1404         return state->ops.pid_filter_ctrl(adap->fe[0], onoff);
1405 }
1406
1407 static int af9035_pid_filter(struct dvb_usb_adapter *adap, int index, u16 pid,
1408                 int onoff)
1409 {
1410         struct state *state = adap_to_priv(adap);
1411
1412         return state->ops.pid_filter(adap->fe[0], index, pid, onoff);
1413 }
1414
1415 static int af9035_probe(struct usb_interface *intf,
1416                 const struct usb_device_id *id)
1417 {
1418         struct usb_device *udev = interface_to_usbdev(intf);
1419         char manufacturer[sizeof("Afatech")];
1420
1421         memset(manufacturer, 0, sizeof(manufacturer));
1422         usb_string(udev, udev->descriptor.iManufacturer,
1423                         manufacturer, sizeof(manufacturer));
1424         /*
1425          * There is two devices having same ID but different chipset. One uses
1426          * AF9015 and the other IT9135 chipset. Only difference seen on lsusb
1427          * is iManufacturer string.
1428          *
1429          * idVendor           0x0ccd TerraTec Electronic GmbH
1430          * idProduct          0x0099
1431          * bcdDevice            2.00
1432          * iManufacturer           1 Afatech
1433          * iProduct                2 DVB-T 2
1434          *
1435          * idVendor           0x0ccd TerraTec Electronic GmbH
1436          * idProduct          0x0099
1437          * bcdDevice            2.00
1438          * iManufacturer           1 ITE Technologies, Inc.
1439          * iProduct                2 DVB-T TV Stick
1440          */
1441         if ((le16_to_cpu(udev->descriptor.idVendor) == USB_VID_TERRATEC) &&
1442                         (le16_to_cpu(udev->descriptor.idProduct) == 0x0099)) {
1443                 if (!strcmp("Afatech", manufacturer)) {
1444                         dev_dbg(&udev->dev, "%s: rejecting device\n", __func__);
1445                         return -ENODEV;
1446                 }
1447         }
1448
1449         return dvb_usbv2_probe(intf, id);
1450 }
1451
1452 /* interface 0 is used by DVB-T receiver and
1453    interface 1 is for remote controller (HID) */
1454 static const struct dvb_usb_device_properties af9035_props = {
1455         .driver_name = KBUILD_MODNAME,
1456         .owner = THIS_MODULE,
1457         .adapter_nr = adapter_nr,
1458         .size_of_priv = sizeof(struct state),
1459
1460         .generic_bulk_ctrl_endpoint = 0x02,
1461         .generic_bulk_ctrl_endpoint_response = 0x81,
1462
1463         .identify_state = af9035_identify_state,
1464         .download_firmware = af9035_download_firmware,
1465
1466         .i2c_algo = &af9035_i2c_algo,
1467         .read_config = af9035_read_config,
1468         .frontend_attach = af9035_frontend_attach,
1469         .tuner_attach = af9035_tuner_attach,
1470         .init = af9035_init,
1471         .get_rc_config = af9035_get_rc_config,
1472         .get_stream_config = af9035_get_stream_config,
1473
1474         .get_adapter_count = af9035_get_adapter_count,
1475         .adapter = {
1476                 {
1477                         .caps = DVB_USB_ADAP_HAS_PID_FILTER |
1478                                 DVB_USB_ADAP_PID_FILTER_CAN_BE_TURNED_OFF,
1479
1480                         .pid_filter_count = 32,
1481                         .pid_filter_ctrl = af9035_pid_filter_ctrl,
1482                         .pid_filter = af9035_pid_filter,
1483
1484                         .stream = DVB_USB_STREAM_BULK(0x84, 6, 87 * 188),
1485                 }, {
1486                         .caps = DVB_USB_ADAP_HAS_PID_FILTER |
1487                                 DVB_USB_ADAP_PID_FILTER_CAN_BE_TURNED_OFF,
1488
1489                         .pid_filter_count = 32,
1490                         .pid_filter_ctrl = af9035_pid_filter_ctrl,
1491                         .pid_filter = af9035_pid_filter,
1492
1493                         .stream = DVB_USB_STREAM_BULK(0x85, 6, 87 * 188),
1494                 },
1495         },
1496 };
1497
1498 static const struct usb_device_id af9035_id_table[] = {
1499         /* AF9035 devices */
1500         { DVB_USB_DEVICE(USB_VID_AFATECH, USB_PID_AFATECH_AF9035_9035,
1501                 &af9035_props, "Afatech AF9035 reference design", NULL) },
1502         { DVB_USB_DEVICE(USB_VID_AFATECH, USB_PID_AFATECH_AF9035_1000,
1503                 &af9035_props, "Afatech AF9035 reference design", NULL) },
1504         { DVB_USB_DEVICE(USB_VID_AFATECH, USB_PID_AFATECH_AF9035_1001,
1505                 &af9035_props, "Afatech AF9035 reference design", NULL) },
1506         { DVB_USB_DEVICE(USB_VID_AFATECH, USB_PID_AFATECH_AF9035_1002,
1507                 &af9035_props, "Afatech AF9035 reference design", NULL) },
1508         { DVB_USB_DEVICE(USB_VID_AFATECH, USB_PID_AFATECH_AF9035_1003,
1509                 &af9035_props, "Afatech AF9035 reference design", NULL) },
1510         { DVB_USB_DEVICE(USB_VID_TERRATEC, USB_PID_TERRATEC_CINERGY_T_STICK,
1511                 &af9035_props, "TerraTec Cinergy T Stick", NULL) },
1512         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_A835,
1513                 &af9035_props, "AVerMedia AVerTV Volar HD/PRO (A835)", NULL) },
1514         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_B835,
1515                 &af9035_props, "AVerMedia AVerTV Volar HD/PRO (A835)", NULL) },
1516         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_1867,
1517                 &af9035_props, "AVerMedia HD Volar (A867)", NULL) },
1518         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_A867,
1519                 &af9035_props, "AVerMedia HD Volar (A867)", NULL) },
1520         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_TWINSTAR,
1521                 &af9035_props, "AVerMedia Twinstar (A825)", NULL) },
1522         { DVB_USB_DEVICE(USB_VID_ASUS, USB_PID_ASUS_U3100MINI_PLUS,
1523                 &af9035_props, "Asus U3100Mini Plus", NULL) },
1524         { DVB_USB_DEVICE(USB_VID_TERRATEC, 0x00aa,
1525                 &af9035_props, "TerraTec Cinergy T Stick (rev. 2)", NULL) },
1526         /* IT9135 devices */
1527         { DVB_USB_DEVICE(USB_VID_ITETECH, USB_PID_ITETECH_IT9135,
1528                 &af9035_props, "ITE 9135 Generic", RC_MAP_IT913X_V1) },
1529         { DVB_USB_DEVICE(USB_VID_ITETECH, USB_PID_ITETECH_IT9135_9005,
1530                 &af9035_props, "ITE 9135(9005) Generic", RC_MAP_IT913X_V2) },
1531         { DVB_USB_DEVICE(USB_VID_ITETECH, USB_PID_ITETECH_IT9135_9006,
1532                 &af9035_props, "ITE 9135(9006) Generic", RC_MAP_IT913X_V1) },
1533         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_A835B_1835,
1534                 &af9035_props, "Avermedia A835B(1835)", RC_MAP_IT913X_V2) },
1535         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_A835B_2835,
1536                 &af9035_props, "Avermedia A835B(2835)", RC_MAP_IT913X_V2) },
1537         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_A835B_3835,
1538                 &af9035_props, "Avermedia A835B(3835)", RC_MAP_IT913X_V2) },
1539         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_A835B_4835,
1540                 &af9035_props, "Avermedia A835B(4835)", RC_MAP_IT913X_V2) },
1541         { DVB_USB_DEVICE(USB_VID_AVERMEDIA, USB_PID_AVERMEDIA_H335,
1542                 &af9035_props, "Avermedia H335", RC_MAP_IT913X_V2) },
1543         { DVB_USB_DEVICE(USB_VID_KWORLD_2, USB_PID_KWORLD_UB499_2T_T09,
1544                 &af9035_props, "Kworld UB499-2T T09", RC_MAP_IT913X_V1) },
1545         { DVB_USB_DEVICE(USB_VID_KWORLD_2, USB_PID_SVEON_STV22_IT9137,
1546                 &af9035_props, "Sveon STV22 Dual DVB-T HDTV",
1547                                                         RC_MAP_IT913X_V1) },
1548         { DVB_USB_DEVICE(USB_VID_KWORLD_2, USB_PID_CTVDIGDUAL_V2,
1549                 &af9035_props, "Digital Dual TV Receiver CTVDIGDUAL_V2",
1550                                                         RC_MAP_IT913X_V1) },
1551         /* XXX: that same ID [0ccd:0099] is used by af9015 driver too */
1552         { DVB_USB_DEVICE(USB_VID_TERRATEC, 0x0099,
1553                 &af9035_props, "TerraTec Cinergy T Stick Dual RC (rev. 2)", NULL) },
1554         { DVB_USB_DEVICE(USB_VID_LEADTEK, 0x6a05,
1555                 &af9035_props, "Leadtek WinFast DTV Dongle Dual", NULL) },
1556         { DVB_USB_DEVICE(USB_VID_HAUPPAUGE, 0xf900,
1557                 &af9035_props, "Hauppauge WinTV-MiniStick 2", NULL) },
1558         { }
1559 };
1560 MODULE_DEVICE_TABLE(usb, af9035_id_table);
1561
1562 static struct usb_driver af9035_usb_driver = {
1563         .name = KBUILD_MODNAME,
1564         .id_table = af9035_id_table,
1565         .probe = af9035_probe,
1566         .disconnect = dvb_usbv2_disconnect,
1567         .suspend = dvb_usbv2_suspend,
1568         .resume = dvb_usbv2_resume,
1569         .reset_resume = dvb_usbv2_reset_resume,
1570         .no_dynamic_id = 1,
1571         .soft_unbind = 1,
1572 };
1573
1574 module_usb_driver(af9035_usb_driver);
1575
1576 MODULE_AUTHOR("Antti Palosaari <crope@iki.fi>");
1577 MODULE_DESCRIPTION("Afatech AF9035 driver");
1578 MODULE_LICENSE("GPL");
1579 MODULE_FIRMWARE(AF9035_FIRMWARE_AF9035);
1580 MODULE_FIRMWARE(AF9035_FIRMWARE_IT9135_V1);
1581 MODULE_FIRMWARE(AF9035_FIRMWARE_IT9135_V2);