linux/drivers/media/firewire/firedtv-avc.c
<<
>>
Prefs
   1/*
   2 * FireDTV driver (formerly known as FireSAT)
   3 *
   4 * Copyright (C) 2004 Andreas Monitzer <andy@monitzer.com>
   5 * Copyright (C) 2008 Ben Backx <ben@bbackx.com>
   6 * Copyright (C) 2008 Henrik Kurelid <henrik@kurelid.se>
   7 *
   8 *      This program is free software; you can redistribute it and/or
   9 *      modify it under the terms of the GNU General Public License as
  10 *      published by the Free Software Foundation; either version 2 of
  11 *      the License, or (at your option) any later version.
  12 */
  13
  14#include <linux/bug.h>
  15#include <linux/crc32.h>
  16#include <linux/delay.h>
  17#include <linux/device.h>
  18#include <linux/jiffies.h>
  19#include <linux/kernel.h>
  20#include <linux/moduleparam.h>
  21#include <linux/mutex.h>
  22#include <linux/string.h>
  23#include <linux/stringify.h>
  24#include <linux/wait.h>
  25#include <linux/workqueue.h>
  26
  27#include <media/dvb_frontend.h>
  28
  29#include "firedtv.h"
  30
  31#define FCP_COMMAND_REGISTER            0xfffff0000b00ULL
  32
  33#define AVC_CTYPE_CONTROL               0x0
  34#define AVC_CTYPE_STATUS                0x1
  35#define AVC_CTYPE_NOTIFY                0x3
  36
  37#define AVC_RESPONSE_ACCEPTED           0x9
  38#define AVC_RESPONSE_STABLE             0xc
  39#define AVC_RESPONSE_CHANGED            0xd
  40#define AVC_RESPONSE_INTERIM            0xf
  41
  42#define AVC_SUBUNIT_TYPE_TUNER          (0x05 << 3)
  43#define AVC_SUBUNIT_TYPE_UNIT           (0x1f << 3)
  44
  45#define AVC_OPCODE_VENDOR               0x00
  46#define AVC_OPCODE_READ_DESCRIPTOR      0x09
  47#define AVC_OPCODE_DSIT                 0xc8
  48#define AVC_OPCODE_DSD                  0xcb
  49
  50#define DESCRIPTOR_TUNER_STATUS         0x80
  51#define DESCRIPTOR_SUBUNIT_IDENTIFIER   0x00
  52
  53#define SFE_VENDOR_DE_COMPANYID_0       0x00 /* OUI of Digital Everywhere */
  54#define SFE_VENDOR_DE_COMPANYID_1       0x12
  55#define SFE_VENDOR_DE_COMPANYID_2       0x87
  56
  57#define SFE_VENDOR_OPCODE_REGISTER_REMOTE_CONTROL 0x0a
  58#define SFE_VENDOR_OPCODE_LNB_CONTROL           0x52
  59#define SFE_VENDOR_OPCODE_TUNE_QPSK             0x58 /* for DVB-S */
  60
  61#define SFE_VENDOR_OPCODE_GET_FIRMWARE_VERSION  0x00
  62#define SFE_VENDOR_OPCODE_HOST2CA               0x56
  63#define SFE_VENDOR_OPCODE_CA2HOST               0x57
  64#define SFE_VENDOR_OPCODE_CISTATUS              0x59
  65#define SFE_VENDOR_OPCODE_TUNE_QPSK2            0x60 /* for DVB-S2 */
  66
  67#define SFE_VENDOR_TAG_CA_RESET                 0x00
  68#define SFE_VENDOR_TAG_CA_APPLICATION_INFO      0x01
  69#define SFE_VENDOR_TAG_CA_PMT                   0x02
  70#define SFE_VENDOR_TAG_CA_DATE_TIME             0x04
  71#define SFE_VENDOR_TAG_CA_MMI                   0x05
  72#define SFE_VENDOR_TAG_CA_ENTER_MENU            0x07
  73
  74#define EN50221_LIST_MANAGEMENT_ONLY    0x03
  75#define EN50221_TAG_APP_INFO            0x9f8021
  76#define EN50221_TAG_CA_INFO             0x9f8031
  77
  78struct avc_command_frame {
  79        u8 ctype;
  80        u8 subunit;
  81        u8 opcode;
  82        u8 operand[509];
  83};
  84
  85struct avc_response_frame {
  86        u8 response;
  87        u8 subunit;
  88        u8 opcode;
  89        u8 operand[509];
  90};
  91
  92#define LAST_OPERAND (509 - 1)
  93
  94static inline void clear_operands(struct avc_command_frame *c, int from, int to)
  95{
  96        memset(&c->operand[from], 0, to - from + 1);
  97}
  98
  99static void pad_operands(struct avc_command_frame *c, int from)
 100{
 101        int to = ALIGN(from, 4);
 102
 103        if (from <= to && to <= LAST_OPERAND)
 104                clear_operands(c, from, to);
 105}
 106
 107#define AVC_DEBUG_READ_DESCRIPTOR              0x0001
 108#define AVC_DEBUG_DSIT                         0x0002
 109#define AVC_DEBUG_DSD                          0x0004
 110#define AVC_DEBUG_REGISTER_REMOTE_CONTROL      0x0008
 111#define AVC_DEBUG_LNB_CONTROL                  0x0010
 112#define AVC_DEBUG_TUNE_QPSK                    0x0020
 113#define AVC_DEBUG_TUNE_QPSK2                   0x0040
 114#define AVC_DEBUG_HOST2CA                      0x0080
 115#define AVC_DEBUG_CA2HOST                      0x0100
 116#define AVC_DEBUG_APPLICATION_PMT              0x4000
 117#define AVC_DEBUG_FCP_PAYLOADS                 0x8000
 118
 119static int avc_debug;
 120module_param_named(debug, avc_debug, int, 0644);
 121MODULE_PARM_DESC(debug, "Verbose logging (none = 0"
 122        ", FCP subactions"
 123        ": READ DESCRIPTOR = "          __stringify(AVC_DEBUG_READ_DESCRIPTOR)
 124        ", DSIT = "                     __stringify(AVC_DEBUG_DSIT)
 125        ", REGISTER_REMOTE_CONTROL = "  __stringify(AVC_DEBUG_REGISTER_REMOTE_CONTROL)
 126        ", LNB CONTROL = "              __stringify(AVC_DEBUG_LNB_CONTROL)
 127        ", TUNE QPSK = "                __stringify(AVC_DEBUG_TUNE_QPSK)
 128        ", TUNE QPSK2 = "               __stringify(AVC_DEBUG_TUNE_QPSK2)
 129        ", HOST2CA = "                  __stringify(AVC_DEBUG_HOST2CA)
 130        ", CA2HOST = "                  __stringify(AVC_DEBUG_CA2HOST)
 131        "; Application sent PMT = "     __stringify(AVC_DEBUG_APPLICATION_PMT)
 132        ", FCP payloads = "             __stringify(AVC_DEBUG_FCP_PAYLOADS)
 133        ", or a combination, or all = -1)");
 134
 135/*
 136 * This is a workaround since there is no vendor specific command to retrieve
 137 * ca_info using AVC. If this parameter is not used, ca_system_id will be
 138 * filled with application_manufacturer from ca_app_info.
 139 * Digital Everywhere have said that adding ca_info is on their TODO list.
 140 */
 141static unsigned int num_fake_ca_system_ids;
 142static int fake_ca_system_ids[4] = { -1, -1, -1, -1 };
 143module_param_array(fake_ca_system_ids, int, &num_fake_ca_system_ids, 0644);
 144MODULE_PARM_DESC(fake_ca_system_ids, "If your CAM application manufacturer "
 145                 "does not have the same ca_system_id as your CAS, you can "
 146                 "override what ca_system_ids are presented to the "
 147                 "application by setting this field to an array of ids.");
 148
 149static const char *debug_fcp_ctype(unsigned int ctype)
 150{
 151        static const char *ctypes[] = {
 152                [0x0] = "CONTROL",              [0x1] = "STATUS",
 153                [0x2] = "SPECIFIC INQUIRY",     [0x3] = "NOTIFY",
 154                [0x4] = "GENERAL INQUIRY",      [0x8] = "NOT IMPLEMENTED",
 155                [0x9] = "ACCEPTED",             [0xa] = "REJECTED",
 156                [0xb] = "IN TRANSITION",        [0xc] = "IMPLEMENTED/STABLE",
 157                [0xd] = "CHANGED",              [0xf] = "INTERIM",
 158        };
 159        const char *ret = ctype < ARRAY_SIZE(ctypes) ? ctypes[ctype] : NULL;
 160
 161        return ret ? ret : "?";
 162}
 163
 164static const char *debug_fcp_opcode(unsigned int opcode,
 165                                    const u8 *data, int length)
 166{
 167        switch (opcode) {
 168        case AVC_OPCODE_VENDOR:
 169                break;
 170        case AVC_OPCODE_READ_DESCRIPTOR:
 171                return avc_debug & AVC_DEBUG_READ_DESCRIPTOR ?
 172                                "ReadDescriptor" : NULL;
 173        case AVC_OPCODE_DSIT:
 174                return avc_debug & AVC_DEBUG_DSIT ?
 175                                "DirectSelectInfo.Type" : NULL;
 176        case AVC_OPCODE_DSD:
 177                return avc_debug & AVC_DEBUG_DSD ? "DirectSelectData" : NULL;
 178        default:
 179                return "Unknown";
 180        }
 181
 182        if (length < 7 ||
 183            data[3] != SFE_VENDOR_DE_COMPANYID_0 ||
 184            data[4] != SFE_VENDOR_DE_COMPANYID_1 ||
 185            data[5] != SFE_VENDOR_DE_COMPANYID_2)
 186                return "Vendor/Unknown";
 187
 188        switch (data[6]) {
 189        case SFE_VENDOR_OPCODE_REGISTER_REMOTE_CONTROL:
 190                return avc_debug & AVC_DEBUG_REGISTER_REMOTE_CONTROL ?
 191                                "RegisterRC" : NULL;
 192        case SFE_VENDOR_OPCODE_LNB_CONTROL:
 193                return avc_debug & AVC_DEBUG_LNB_CONTROL ? "LNBControl" : NULL;
 194        case SFE_VENDOR_OPCODE_TUNE_QPSK:
 195                return avc_debug & AVC_DEBUG_TUNE_QPSK ? "TuneQPSK" : NULL;
 196        case SFE_VENDOR_OPCODE_TUNE_QPSK2:
 197                return avc_debug & AVC_DEBUG_TUNE_QPSK2 ? "TuneQPSK2" : NULL;
 198        case SFE_VENDOR_OPCODE_HOST2CA:
 199                return avc_debug & AVC_DEBUG_HOST2CA ? "Host2CA" : NULL;
 200        case SFE_VENDOR_OPCODE_CA2HOST:
 201                return avc_debug & AVC_DEBUG_CA2HOST ? "CA2Host" : NULL;
 202        }
 203        return "Vendor/Unknown";
 204}
 205
 206static void debug_fcp(const u8 *data, int length)
 207{
 208        unsigned int subunit_type, subunit_id, opcode;
 209        const char *op, *prefix;
 210
 211        prefix       = data[0] > 7 ? "FCP <- " : "FCP -> ";
 212        subunit_type = data[1] >> 3;
 213        subunit_id   = data[1] & 7;
 214        opcode       = subunit_type == 0x1e || subunit_id == 5 ? ~0 : data[2];
 215        op           = debug_fcp_opcode(opcode, data, length);
 216
 217        if (op) {
 218                printk(KERN_INFO "%ssu=%x.%x l=%d: %-8s - %s\n",
 219                       prefix, subunit_type, subunit_id, length,
 220                       debug_fcp_ctype(data[0]), op);
 221                if (avc_debug & AVC_DEBUG_FCP_PAYLOADS)
 222                        print_hex_dump(KERN_INFO, prefix, DUMP_PREFIX_NONE,
 223                                       16, 1, data, length, false);
 224        }
 225}
 226
 227static void debug_pmt(char *msg, int length)
 228{
 229        printk(KERN_INFO "APP PMT -> l=%d\n", length);
 230        print_hex_dump(KERN_INFO, "APP PMT -> ", DUMP_PREFIX_NONE,
 231                       16, 1, msg, length, false);
 232}
 233
 234static int avc_write(struct firedtv *fdtv)
 235{
 236        int err, retry;
 237
 238        fdtv->avc_reply_received = false;
 239
 240        for (retry = 0; retry < 6; retry++) {
 241                if (unlikely(avc_debug))
 242                        debug_fcp(fdtv->avc_data, fdtv->avc_data_length);
 243
 244                err = fdtv_write(fdtv, FCP_COMMAND_REGISTER,
 245                                 fdtv->avc_data, fdtv->avc_data_length);
 246                if (err) {
 247                        dev_err(fdtv->device, "FCP command write failed\n");
 248
 249                        return err;
 250                }
 251
 252                /*
 253                 * AV/C specs say that answers should be sent within 150 ms.
 254                 * Time out after 200 ms.
 255                 */
 256                if (wait_event_timeout(fdtv->avc_wait,
 257                                       fdtv->avc_reply_received,
 258                                       msecs_to_jiffies(200)) != 0)
 259                        return 0;
 260        }
 261        dev_err(fdtv->device, "FCP response timed out\n");
 262
 263        return -ETIMEDOUT;
 264}
 265
 266static bool is_register_rc(struct avc_response_frame *r)
 267{
 268        return r->opcode     == AVC_OPCODE_VENDOR &&
 269               r->operand[0] == SFE_VENDOR_DE_COMPANYID_0 &&
 270               r->operand[1] == SFE_VENDOR_DE_COMPANYID_1 &&
 271               r->operand[2] == SFE_VENDOR_DE_COMPANYID_2 &&
 272               r->operand[3] == SFE_VENDOR_OPCODE_REGISTER_REMOTE_CONTROL;
 273}
 274
 275int avc_recv(struct firedtv *fdtv, void *data, size_t length)
 276{
 277        struct avc_response_frame *r = data;
 278
 279        if (unlikely(avc_debug))
 280                debug_fcp(data, length);
 281
 282        if (length >= 8 && is_register_rc(r)) {
 283                switch (r->response) {
 284                case AVC_RESPONSE_CHANGED:
 285                        fdtv_handle_rc(fdtv, r->operand[4] << 8 | r->operand[5]);
 286                        schedule_work(&fdtv->remote_ctrl_work);
 287                        break;
 288                case AVC_RESPONSE_INTERIM:
 289                        if (is_register_rc((void *)fdtv->avc_data))
 290                                goto wake;
 291                        break;
 292                default:
 293                        dev_info(fdtv->device,
 294                                 "remote control result = %d\n", r->response);
 295                }
 296                return 0;
 297        }
 298
 299        if (fdtv->avc_reply_received) {
 300                dev_err(fdtv->device, "out-of-order AVC response, ignored\n");
 301                return -EIO;
 302        }
 303
 304        memcpy(fdtv->avc_data, data, length);
 305        fdtv->avc_data_length = length;
 306wake:
 307        fdtv->avc_reply_received = true;
 308        wake_up(&fdtv->avc_wait);
 309
 310        return 0;
 311}
 312
 313static int add_pid_filter(struct firedtv *fdtv, u8 *operand)
 314{
 315        int i, n, pos = 1;
 316
 317        for (i = 0, n = 0; i < 16; i++) {
 318                if (test_bit(i, &fdtv->channel_active)) {
 319                        operand[pos++] = 0x13; /* flowfunction relay */
 320                        operand[pos++] = 0x80; /* dsd_sel_spec_valid_flags -> PID */
 321                        operand[pos++] = (fdtv->channel_pid[i] >> 8) & 0x1f;
 322                        operand[pos++] = fdtv->channel_pid[i] & 0xff;
 323                        operand[pos++] = 0x00; /* tableID */
 324                        operand[pos++] = 0x00; /* filter_length */
 325                        n++;
 326                }
 327        }
 328        operand[0] = n;
 329
 330        return pos;
 331}
 332
 333/*
 334 * tuning command for setting the relative LNB frequency
 335 * (not supported by the AVC standard)
 336 */
 337static int avc_tuner_tuneqpsk(struct firedtv *fdtv,
 338                              struct dtv_frontend_properties *p)
 339{
 340        struct avc_command_frame *c = (void *)fdtv->avc_data;
 341
 342        c->opcode = AVC_OPCODE_VENDOR;
 343
 344        c->operand[0] = SFE_VENDOR_DE_COMPANYID_0;
 345        c->operand[1] = SFE_VENDOR_DE_COMPANYID_1;
 346        c->operand[2] = SFE_VENDOR_DE_COMPANYID_2;
 347        if (fdtv->type == FIREDTV_DVB_S2)
 348                c->operand[3] = SFE_VENDOR_OPCODE_TUNE_QPSK2;
 349        else
 350                c->operand[3] = SFE_VENDOR_OPCODE_TUNE_QPSK;
 351
 352        c->operand[4] = (p->frequency >> 24) & 0xff;
 353        c->operand[5] = (p->frequency >> 16) & 0xff;
 354        c->operand[6] = (p->frequency >> 8) & 0xff;
 355        c->operand[7] = p->frequency & 0xff;
 356
 357        c->operand[8] = ((p->symbol_rate / 1000) >> 8) & 0xff;
 358        c->operand[9] = (p->symbol_rate / 1000) & 0xff;
 359
 360        switch (p->fec_inner) {
 361        case FEC_1_2:   c->operand[10] = 0x1; break;
 362        case FEC_2_3:   c->operand[10] = 0x2; break;
 363        case FEC_3_4:   c->operand[10] = 0x3; break;
 364        case FEC_5_6:   c->operand[10] = 0x4; break;
 365        case FEC_7_8:   c->operand[10] = 0x5; break;
 366        case FEC_4_5:
 367        case FEC_8_9:
 368        case FEC_AUTO:
 369        default:        c->operand[10] = 0x0;
 370        }
 371
 372        if (fdtv->voltage == 0xff)
 373                c->operand[11] = 0xff;
 374        else if (fdtv->voltage == SEC_VOLTAGE_18) /* polarisation */
 375                c->operand[11] = 0;
 376        else
 377                c->operand[11] = 1;
 378
 379        if (fdtv->tone == 0xff)
 380                c->operand[12] = 0xff;
 381        else if (fdtv->tone == SEC_TONE_ON) /* band */
 382                c->operand[12] = 1;
 383        else
 384                c->operand[12] = 0;
 385
 386        if (fdtv->type == FIREDTV_DVB_S2) {
 387                if (fdtv->fe.dtv_property_cache.delivery_system == SYS_DVBS2) {
 388                        switch (fdtv->fe.dtv_property_cache.modulation) {
 389                        case QAM_16:            c->operand[13] = 0x1; break;
 390                        case QPSK:              c->operand[13] = 0x2; break;
 391                        case PSK_8:             c->operand[13] = 0x3; break;
 392                        default:                c->operand[13] = 0x2; break;
 393                        }
 394                        switch (fdtv->fe.dtv_property_cache.rolloff) {
 395                        case ROLLOFF_35:        c->operand[14] = 0x2; break;
 396                        case ROLLOFF_20:        c->operand[14] = 0x0; break;
 397                        case ROLLOFF_25:        c->operand[14] = 0x1; break;
 398                        case ROLLOFF_AUTO:
 399                        default:                c->operand[14] = 0x2; break;
 400                        /* case ROLLOFF_NONE:   c->operand[14] = 0xff; break; */
 401                        }
 402                        switch (fdtv->fe.dtv_property_cache.pilot) {
 403                        case PILOT_AUTO:        c->operand[15] = 0x0; break;
 404                        case PILOT_OFF:         c->operand[15] = 0x0; break;
 405                        case PILOT_ON:          c->operand[15] = 0x1; break;
 406                        }
 407                } else {
 408                        c->operand[13] = 0x1;  /* auto modulation */
 409                        c->operand[14] = 0xff; /* disable rolloff */
 410                        c->operand[15] = 0xff; /* disable pilot */
 411                }
 412                return 16;
 413        } else {
 414                return 13;
 415        }
 416}
 417
 418static int avc_tuner_dsd_dvb_c(struct firedtv *fdtv,
 419                               struct dtv_frontend_properties *p)
 420{
 421        struct avc_command_frame *c = (void *)fdtv->avc_data;
 422
 423        c->opcode = AVC_OPCODE_DSD;
 424
 425        c->operand[0] = 0;    /* source plug */
 426        c->operand[1] = 0xd2; /* subfunction replace */
 427        c->operand[2] = 0x20; /* system id = DVB */
 428        c->operand[3] = 0x00; /* antenna number */
 429        c->operand[4] = 0x11; /* system_specific_multiplex selection_length */
 430
 431        /* multiplex_valid_flags, high byte */
 432        c->operand[5] =   0 << 7 /* reserved */
 433                        | 0 << 6 /* Polarisation */
 434                        | 0 << 5 /* Orbital_Pos */
 435                        | 1 << 4 /* Frequency */
 436                        | 1 << 3 /* Symbol_Rate */
 437                        | 0 << 2 /* FEC_outer */
 438                        | (p->fec_inner  != FEC_AUTO ? 1 << 1 : 0)
 439                        | (p->modulation != QAM_AUTO ? 1 << 0 : 0);
 440
 441        /* multiplex_valid_flags, low byte */
 442        c->operand[6] =   0 << 7 /* NetworkID */
 443                        | 0 << 0 /* reserved */ ;
 444
 445        c->operand[7]  = 0x00;
 446        c->operand[8]  = 0x00;
 447        c->operand[9]  = 0x00;
 448        c->operand[10] = 0x00;
 449
 450        c->operand[11] = (((p->frequency / 4000) >> 16) & 0xff) | (2 << 6);
 451        c->operand[12] = ((p->frequency / 4000) >> 8) & 0xff;
 452        c->operand[13] = (p->frequency / 4000) & 0xff;
 453        c->operand[14] = ((p->symbol_rate / 1000) >> 12) & 0xff;
 454        c->operand[15] = ((p->symbol_rate / 1000) >> 4) & 0xff;
 455        c->operand[16] = ((p->symbol_rate / 1000) << 4) & 0xf0;
 456        c->operand[17] = 0x00;
 457
 458        switch (p->fec_inner) {
 459        case FEC_1_2:   c->operand[18] = 0x1; break;
 460        case FEC_2_3:   c->operand[18] = 0x2; break;
 461        case FEC_3_4:   c->operand[18] = 0x3; break;
 462        case FEC_5_6:   c->operand[18] = 0x4; break;
 463        case FEC_7_8:   c->operand[18] = 0x5; break;
 464        case FEC_8_9:   c->operand[18] = 0x6; break;
 465        case FEC_4_5:   c->operand[18] = 0x8; break;
 466        case FEC_AUTO:
 467        default:        c->operand[18] = 0x0;
 468        }
 469
 470        switch (p->modulation) {
 471        case QAM_16:    c->operand[19] = 0x08; break;
 472        case QAM_32:    c->operand[19] = 0x10; break;
 473        case QAM_64:    c->operand[19] = 0x18; break;
 474        case QAM_128:   c->operand[19] = 0x20; break;
 475        case QAM_256:   c->operand[19] = 0x28; break;
 476        case QAM_AUTO:
 477        default:        c->operand[19] = 0x00;
 478        }
 479
 480        c->operand[20] = 0x00;
 481        c->operand[21] = 0x00;
 482
 483        return 22 + add_pid_filter(fdtv, &c->operand[22]);
 484}
 485
 486static int avc_tuner_dsd_dvb_t(struct firedtv *fdtv,
 487                               struct dtv_frontend_properties *p)
 488{
 489        struct avc_command_frame *c = (void *)fdtv->avc_data;
 490
 491        c->opcode = AVC_OPCODE_DSD;
 492
 493        c->operand[0] = 0;    /* source plug */
 494        c->operand[1] = 0xd2; /* subfunction replace */
 495        c->operand[2] = 0x20; /* system id = DVB */
 496        c->operand[3] = 0x00; /* antenna number */
 497        c->operand[4] = 0x0c; /* system_specific_multiplex selection_length */
 498
 499        /* multiplex_valid_flags, high byte */
 500        c->operand[5] =
 501              0 << 7 /* reserved */
 502            | 1 << 6 /* CenterFrequency */
 503            | (p->bandwidth_hz != 0        ? 1 << 5 : 0)
 504            | (p->modulation  != QAM_AUTO              ? 1 << 4 : 0)
 505            | (p->hierarchy != HIERARCHY_AUTO ? 1 << 3 : 0)
 506            | (p->code_rate_HP   != FEC_AUTO              ? 1 << 2 : 0)
 507            | (p->code_rate_LP   != FEC_AUTO              ? 1 << 1 : 0)
 508            | (p->guard_interval != GUARD_INTERVAL_AUTO   ? 1 << 0 : 0);
 509
 510        /* multiplex_valid_flags, low byte */
 511        c->operand[6] =
 512              0 << 7 /* NetworkID */
 513            | (p->transmission_mode != TRANSMISSION_MODE_AUTO ? 1 << 6 : 0)
 514            | 0 << 5 /* OtherFrequencyFlag */
 515            | 0 << 0 /* reserved */ ;
 516
 517        c->operand[7]  = 0x0;
 518        c->operand[8]  = (p->frequency / 10) >> 24;
 519        c->operand[9]  = ((p->frequency / 10) >> 16) & 0xff;
 520        c->operand[10] = ((p->frequency / 10) >>  8) & 0xff;
 521        c->operand[11] = (p->frequency / 10) & 0xff;
 522
 523        switch (p->bandwidth_hz) {
 524        case 7000000:   c->operand[12] = 0x20; break;
 525        case 8000000:
 526        case 6000000:   /* not defined by AVC spec */
 527        case 0:
 528        default:                c->operand[12] = 0x00;
 529        }
 530
 531        switch (p->modulation) {
 532        case QAM_16:    c->operand[13] = 1 << 6; break;
 533        case QAM_64:    c->operand[13] = 2 << 6; break;
 534        case QPSK:
 535        default:        c->operand[13] = 0x00;
 536        }
 537
 538        switch (p->hierarchy) {
 539        case HIERARCHY_1:       c->operand[13] |= 1 << 3; break;
 540        case HIERARCHY_2:       c->operand[13] |= 2 << 3; break;
 541        case HIERARCHY_4:       c->operand[13] |= 3 << 3; break;
 542        case HIERARCHY_AUTO:
 543        case HIERARCHY_NONE:
 544        default:                break;
 545        }
 546
 547        switch (p->code_rate_HP) {
 548        case FEC_2_3:   c->operand[13] |= 1; break;
 549        case FEC_3_4:   c->operand[13] |= 2; break;
 550        case FEC_5_6:   c->operand[13] |= 3; break;
 551        case FEC_7_8:   c->operand[13] |= 4; break;
 552        case FEC_1_2:
 553        default:        break;
 554        }
 555
 556        switch (p->code_rate_LP) {
 557        case FEC_2_3:   c->operand[14] = 1 << 5; break;
 558        case FEC_3_4:   c->operand[14] = 2 << 5; break;
 559        case FEC_5_6:   c->operand[14] = 3 << 5; break;
 560        case FEC_7_8:   c->operand[14] = 4 << 5; break;
 561        case FEC_1_2:
 562        default:        c->operand[14] = 0x00; break;
 563        }
 564
 565        switch (p->guard_interval) {
 566        case GUARD_INTERVAL_1_16:       c->operand[14] |= 1 << 3; break;
 567        case GUARD_INTERVAL_1_8:        c->operand[14] |= 2 << 3; break;
 568        case GUARD_INTERVAL_1_4:        c->operand[14] |= 3 << 3; break;
 569        case GUARD_INTERVAL_1_32:
 570        case GUARD_INTERVAL_AUTO:
 571        default:                        break;
 572        }
 573
 574        switch (p->transmission_mode) {
 575        case TRANSMISSION_MODE_8K:      c->operand[14] |= 1 << 1; break;
 576        case TRANSMISSION_MODE_2K:
 577        case TRANSMISSION_MODE_AUTO:
 578        default:                        break;
 579        }
 580
 581        c->operand[15] = 0x00; /* network_ID[0] */
 582        c->operand[16] = 0x00; /* network_ID[1] */
 583
 584        return 17 + add_pid_filter(fdtv, &c->operand[17]);
 585}
 586
 587int avc_tuner_dsd(struct firedtv *fdtv,
 588                  struct dtv_frontend_properties *p)
 589{
 590        struct avc_command_frame *c = (void *)fdtv->avc_data;
 591        int pos, ret;
 592
 593        mutex_lock(&fdtv->avc_mutex);
 594
 595        c->ctype   = AVC_CTYPE_CONTROL;
 596        c->subunit = AVC_SUBUNIT_TYPE_TUNER | fdtv->subunit;
 597
 598        switch (fdtv->type) {
 599        case FIREDTV_DVB_S:
 600        case FIREDTV_DVB_S2: pos = avc_tuner_tuneqpsk(fdtv, p); break;
 601        case FIREDTV_DVB_C: pos = avc_tuner_dsd_dvb_c(fdtv, p); break;
 602        case FIREDTV_DVB_T: pos = avc_tuner_dsd_dvb_t(fdtv, p); break;
 603        default:
 604                BUG();
 605        }
 606        pad_operands(c, pos);
 607
 608        fdtv->avc_data_length = ALIGN(3 + pos, 4);
 609        ret = avc_write(fdtv);
 610#if 0
 611        /*
 612         * FIXME:
 613         * u8 *status was an out-parameter of avc_tuner_dsd, unused by caller.
 614         * Check for AVC_RESPONSE_ACCEPTED here instead?
 615         */
 616        if (status)
 617                *status = r->operand[2];
 618#endif
 619        mutex_unlock(&fdtv->avc_mutex);
 620
 621        if (ret == 0)
 622                msleep(500);
 623
 624        return ret;
 625}
 626
 627int avc_tuner_set_pids(struct firedtv *fdtv, unsigned char pidc, u16 pid[])
 628{
 629        struct avc_command_frame *c = (void *)fdtv->avc_data;
 630        int ret, pos, k;
 631
 632        if (pidc > 16 && pidc != 0xff)
 633                return -EINVAL;
 634
 635        mutex_lock(&fdtv->avc_mutex);
 636
 637        c->ctype   = AVC_CTYPE_CONTROL;
 638        c->subunit = AVC_SUBUNIT_TYPE_TUNER | fdtv->subunit;
 639        c->opcode  = AVC_OPCODE_DSD;
 640
 641        c->operand[0] = 0;      /* source plug */
 642        c->operand[1] = 0xd2;   /* subfunction replace */
 643        c->operand[2] = 0x20;   /* system id = DVB */
 644        c->operand[3] = 0x00;   /* antenna number */
 645        c->operand[4] = 0x00;   /* system_specific_multiplex selection_length */
 646        c->operand[5] = pidc;   /* Nr_of_dsd_sel_specs */
 647
 648        pos = 6;
 649        if (pidc != 0xff)
 650                for (k = 0; k < pidc; k++) {
 651                        c->operand[pos++] = 0x13; /* flowfunction relay */
 652                        c->operand[pos++] = 0x80; /* dsd_sel_spec_valid_flags -> PID */
 653                        c->operand[pos++] = (pid[k] >> 8) & 0x1f;
 654                        c->operand[pos++] = pid[k] & 0xff;
 655                        c->operand[pos++] = 0x00; /* tableID */
 656                        c->operand[pos++] = 0x00; /* filter_length */
 657                }
 658        pad_operands(c, pos);
 659
 660        fdtv->avc_data_length = ALIGN(3 + pos, 4);
 661        ret = avc_write(fdtv);
 662
 663        /* FIXME: check response code? */
 664
 665        mutex_unlock(&fdtv->avc_mutex);
 666
 667        if (ret == 0)
 668                msleep(50);
 669
 670        return ret;
 671}
 672
 673int avc_tuner_get_ts(struct firedtv *fdtv)
 674{
 675        struct avc_command_frame *c = (void *)fdtv->avc_data;
 676        int ret, sl;
 677
 678        mutex_lock(&fdtv->avc_mutex);
 679
 680        c->ctype   = AVC_CTYPE_CONTROL;
 681        c->subunit = AVC_SUBUNIT_TYPE_TUNER | fdtv->subunit;
 682        c->opcode  = AVC_OPCODE_DSIT;
 683
 684        sl = fdtv->type == FIREDTV_DVB_T ? 0x0c : 0x11;
 685
 686        c->operand[0] = 0;      /* source plug */
 687        c->operand[1] = 0xd2;   /* subfunction replace */
 688        c->operand[2] = 0xff;   /* status */
 689        c->operand[3] = 0x20;   /* system id = DVB */
 690        c->operand[4] = 0x00;   /* antenna number */
 691        c->operand[5] = 0x0;    /* system_specific_search_flags */
 692        c->operand[6] = sl;     /* system_specific_multiplex selection_length */
 693        /*
 694         * operand[7]: valid_flags[0]
 695         * operand[8]: valid_flags[1]
 696         * operand[7 + sl]: nr_of_dsit_sel_specs (always 0)
 697         */
 698        clear_operands(c, 7, 24);
 699
 700        fdtv->avc_data_length = fdtv->type == FIREDTV_DVB_T ? 24 : 28;
 701        ret = avc_write(fdtv);
 702
 703        /* FIXME: check response code? */
 704
 705        mutex_unlock(&fdtv->avc_mutex);
 706
 707        if (ret == 0)
 708                msleep(250);
 709
 710        return ret;
 711}
 712
 713int avc_identify_subunit(struct firedtv *fdtv)
 714{
 715        struct avc_command_frame *c = (void *)fdtv->avc_data;
 716        struct avc_response_frame *r = (void *)fdtv->avc_data;
 717        int ret;
 718
 719        mutex_lock(&fdtv->avc_mutex);
 720
 721        c->ctype   = AVC_CTYPE_CONTROL;
 722        c->subunit = AVC_SUBUNIT_TYPE_TUNER | fdtv->subunit;
 723        c->opcode  = AVC_OPCODE_READ_DESCRIPTOR;
 724
 725        c->operand[0] = DESCRIPTOR_SUBUNIT_IDENTIFIER;
 726        c->operand[1] = 0xff;
 727        c->operand[2] = 0x00;
 728        c->operand[3] = 0x00; /* length highbyte */
 729        c->operand[4] = 0x08; /* length lowbyte  */
 730        c->operand[5] = 0x00; /* offset highbyte */
 731        c->operand[6] = 0x0d; /* offset lowbyte  */
 732        clear_operands(c, 7, 8); /* padding */
 733
 734        fdtv->avc_data_length = 12;
 735        ret = avc_write(fdtv);
 736        if (ret < 0)
 737                goto out;
 738
 739        if ((r->response != AVC_RESPONSE_STABLE &&
 740             r->response != AVC_RESPONSE_ACCEPTED) ||
 741            (r->operand[3] << 8) + r->operand[4] != 8) {
 742                dev_err(fdtv->device, "cannot read subunit identifier\n");
 743                ret = -EINVAL;
 744        }
 745out:
 746        mutex_unlock(&fdtv->avc_mutex);
 747
 748        return ret;
 749}
 750
 751#define SIZEOF_ANTENNA_INPUT_INFO 22
 752
 753int avc_tuner_status(struct firedtv *fdtv, struct firedtv_tuner_status *stat)
 754{
 755        struct avc_command_frame *c = (void *)fdtv->avc_data;
 756        struct avc_response_frame *r = (void *)fdtv->avc_data;
 757        int length, ret;
 758
 759        mutex_lock(&fdtv->avc_mutex);
 760
 761        c->ctype   = AVC_CTYPE_CONTROL;
 762        c->subunit = AVC_SUBUNIT_TYPE_TUNER | fdtv->subunit;
 763        c->opcode  = AVC_OPCODE_READ_DESCRIPTOR;
 764
 765        c->operand[0] = DESCRIPTOR_TUNER_STATUS;
 766        c->operand[1] = 0xff;   /* read_result_status */
 767        /*
 768         * operand[2]: reserved
 769         * operand[3]: SIZEOF_ANTENNA_INPUT_INFO >> 8
 770         * operand[4]: SIZEOF_ANTENNA_INPUT_INFO & 0xff
 771         */
 772        clear_operands(c, 2, 31);
 773
 774        fdtv->avc_data_length = 12;
 775        ret = avc_write(fdtv);
 776        if (ret < 0)
 777                goto out;
 778
 779        if (r->response != AVC_RESPONSE_STABLE &&
 780            r->response != AVC_RESPONSE_ACCEPTED) {
 781                dev_err(fdtv->device, "cannot read tuner status\n");
 782                ret = -EINVAL;
 783                goto out;
 784        }
 785
 786        length = r->operand[9];
 787        if (r->operand[1] != 0x10 || length != SIZEOF_ANTENNA_INPUT_INFO) {
 788                dev_err(fdtv->device, "got invalid tuner status\n");
 789                ret = -EINVAL;
 790                goto out;
 791        }
 792
 793        stat->active_system             = r->operand[10];
 794        stat->searching                 = r->operand[11] >> 7 & 1;
 795        stat->moving                    = r->operand[11] >> 6 & 1;
 796        stat->no_rf                     = r->operand[11] >> 5 & 1;
 797        stat->input                     = r->operand[12] >> 7 & 1;
 798        stat->selected_antenna          = r->operand[12] & 0x7f;
 799        stat->ber                       = r->operand[13] << 24 |
 800                                          r->operand[14] << 16 |
 801                                          r->operand[15] << 8 |
 802                                          r->operand[16];
 803        stat->signal_strength           = r->operand[17];
 804        stat->raster_frequency          = r->operand[18] >> 6 & 2;
 805        stat->rf_frequency              = (r->operand[18] & 0x3f) << 16 |
 806                                          r->operand[19] << 8 |
 807                                          r->operand[20];
 808        stat->man_dep_info_length       = r->operand[21];
 809        stat->front_end_error           = r->operand[22] >> 4 & 1;
 810        stat->antenna_error             = r->operand[22] >> 3 & 1;
 811        stat->front_end_power_status    = r->operand[22] >> 1 & 1;
 812        stat->power_supply              = r->operand[22] & 1;
 813        stat->carrier_noise_ratio       = r->operand[23] << 8 |
 814                                          r->operand[24];
 815        stat->power_supply_voltage      = r->operand[27];
 816        stat->antenna_voltage           = r->operand[28];
 817        stat->firewire_bus_voltage      = r->operand[29];
 818        stat->ca_mmi                    = r->operand[30] & 1;
 819        stat->ca_pmt_reply              = r->operand[31] >> 7 & 1;
 820        stat->ca_date_time_request      = r->operand[31] >> 6 & 1;
 821        stat->ca_application_info       = r->operand[31] >> 5 & 1;
 822        stat->ca_module_present_status  = r->operand[31] >> 4 & 1;
 823        stat->ca_dvb_flag               = r->operand[31] >> 3 & 1;
 824        stat->ca_error_flag             = r->operand[31] >> 2 & 1;
 825        stat->ca_initialization_status  = r->operand[31] >> 1 & 1;
 826out:
 827        mutex_unlock(&fdtv->avc_mutex);
 828
 829        return ret;
 830}
 831
 832int avc_lnb_control(struct firedtv *fdtv, char voltage, char burst,
 833                    char conttone, char nrdiseq,
 834                    struct dvb_diseqc_master_cmd *diseqcmd)
 835{
 836        struct avc_command_frame *c = (void *)fdtv->avc_data;
 837        struct avc_response_frame *r = (void *)fdtv->avc_data;
 838        int pos, j, k, ret;
 839
 840        mutex_lock(&fdtv->avc_mutex);
 841
 842        c->ctype   = AVC_CTYPE_CONTROL;
 843        c->subunit = AVC_SUBUNIT_TYPE_TUNER | fdtv->subunit;
 844        c->opcode  = AVC_OPCODE_VENDOR;
 845
 846        c->operand[0] = SFE_VENDOR_DE_COMPANYID_0;
 847        c->operand[1] = SFE_VENDOR_DE_COMPANYID_1;
 848        c->operand[2] = SFE_VENDOR_DE_COMPANYID_2;
 849        c->operand[3] = SFE_VENDOR_OPCODE_LNB_CONTROL;
 850        c->operand[4] = voltage;
 851        c->operand[5] = nrdiseq;
 852
 853        pos = 6;
 854        for (j = 0; j < nrdiseq; j++) {
 855                c->operand[pos++] = diseqcmd[j].msg_len;
 856
 857                for (k = 0; k < diseqcmd[j].msg_len; k++)
 858                        c->operand[pos++] = diseqcmd[j].msg[k];
 859        }
 860        c->operand[pos++] = burst;
 861        c->operand[pos++] = conttone;
 862        pad_operands(c, pos);
 863
 864        fdtv->avc_data_length = ALIGN(3 + pos, 4);
 865        ret = avc_write(fdtv);
 866        if (ret < 0)
 867                goto out;
 868
 869        if (r->response != AVC_RESPONSE_ACCEPTED) {
 870                dev_err(fdtv->device, "LNB control failed\n");
 871                ret = -EINVAL;
 872        }
 873out:
 874        mutex_unlock(&fdtv->avc_mutex);
 875
 876        return ret;
 877}
 878
 879int avc_register_remote_control(struct firedtv *fdtv)
 880{
 881        struct avc_command_frame *c = (void *)fdtv->avc_data;
 882        int ret;
 883
 884        mutex_lock(&fdtv->avc_mutex);
 885
 886        c->ctype   = AVC_CTYPE_NOTIFY;
 887        c->subunit = AVC_SUBUNIT_TYPE_UNIT | 7;
 888        c->opcode  = AVC_OPCODE_VENDOR;
 889
 890        c->operand[0] = SFE_VENDOR_DE_COMPANYID_0;
 891        c->operand[1] = SFE_VENDOR_DE_COMPANYID_1;
 892        c->operand[2] = SFE_VENDOR_DE_COMPANYID_2;
 893        c->operand[3] = SFE_VENDOR_OPCODE_REGISTER_REMOTE_CONTROL;
 894        c->operand[4] = 0; /* padding */
 895
 896        fdtv->avc_data_length = 8;
 897        ret = avc_write(fdtv);
 898
 899        /* FIXME: check response code? */
 900
 901        mutex_unlock(&fdtv->avc_mutex);
 902
 903        return ret;
 904}
 905
 906void avc_remote_ctrl_work(struct work_struct *work)
 907{
 908        struct firedtv *fdtv =
 909                        container_of(work, struct firedtv, remote_ctrl_work);
 910
 911        /* Should it be rescheduled in failure cases? */
 912        avc_register_remote_control(fdtv);
 913}
 914
 915#if 0 /* FIXME: unused */
 916int avc_tuner_host2ca(struct firedtv *fdtv)
 917{
 918        struct avc_command_frame *c = (void *)fdtv->avc_data;
 919        int ret;
 920
 921        mutex_lock(&fdtv->avc_mutex);
 922
 923        c->ctype   = AVC_CTYPE_CONTROL;
 924        c->subunit = AVC_SUBUNIT_TYPE_TUNER | fdtv->subunit;
 925        c->opcode  = AVC_OPCODE_VENDOR;
 926
 927        c->operand[0] = SFE_VENDOR_DE_COMPANYID_0;
 928        c->operand[1] = SFE_VENDOR_DE_COMPANYID_1;
 929        c->operand[2] = SFE_VENDOR_DE_COMPANYID_2;
 930        c->operand[3] = SFE_VENDOR_OPCODE_HOST2CA;
 931        c->operand[4] = 0; /* slot */
 932        c->operand[5] = SFE_VENDOR_TAG_CA_APPLICATION_INFO; /* ca tag */
 933        clear_operands(c, 6, 8);
 934
 935        fdtv->avc_data_length = 12;
 936        ret = avc_write(fdtv);
 937
 938        /* FIXME: check response code? */
 939
 940        mutex_unlock(&fdtv->avc_mutex);
 941
 942        return ret;
 943}
 944#endif
 945
 946static int get_ca_object_pos(struct avc_response_frame *r)
 947{
 948        int length = 1;
 949
 950        /* Check length of length field */
 951        if (r->operand[7] & 0x80)
 952                length = (r->operand[7] & 0x7f) + 1;
 953        return length + 7;
 954}
 955
 956static int get_ca_object_length(struct avc_response_frame *r)
 957{
 958#if 0 /* FIXME: unused */
 959        int size = 0;
 960        int i;
 961
 962        if (r->operand[7] & 0x80)
 963                for (i = 0; i < (r->operand[7] & 0x7f); i++) {
 964                        size <<= 8;
 965                        size += r->operand[8 + i];
 966                }
 967#endif
 968        return r->operand[7];
 969}
 970
 971int avc_ca_app_info(struct firedtv *fdtv, char *app_info, unsigned int *len)
 972{
 973        struct avc_command_frame *c = (void *)fdtv->avc_data;
 974        struct avc_response_frame *r = (void *)fdtv->avc_data;
 975        int pos, ret;
 976
 977        mutex_lock(&fdtv->avc_mutex);
 978
 979        c->ctype   = AVC_CTYPE_STATUS;
 980        c->subunit = AVC_SUBUNIT_TYPE_TUNER | fdtv->subunit;
 981        c->opcode  = AVC_OPCODE_VENDOR;
 982
 983        c->operand[0] = SFE_VENDOR_DE_COMPANYID_0;
 984        c->operand[1] = SFE_VENDOR_DE_COMPANYID_1;
 985        c->operand[2] = SFE_VENDOR_DE_COMPANYID_2;
 986        c->operand[3] = SFE_VENDOR_OPCODE_CA2HOST;
 987        c->operand[4] = 0; /* slot */
 988        c->operand[5] = SFE_VENDOR_TAG_CA_APPLICATION_INFO; /* ca tag */
 989        clear_operands(c, 6, LAST_OPERAND);
 990
 991        fdtv->avc_data_length = 12;
 992        ret = avc_write(fdtv);
 993        if (ret < 0)
 994                goto out;
 995
 996        /* FIXME: check response code and validate response data */
 997
 998        pos = get_ca_object_pos(r);
 999        app_info[0] = (EN50221_TAG_APP_INFO >> 16) & 0xff;
1000        app_info[1] = (EN50221_TAG_APP_INFO >>  8) & 0xff;
1001        app_info[2] = (EN50221_TAG_APP_INFO >>  0) & 0xff;
1002        app_info[3] = 6 + r->operand[pos + 4];
1003        app_info[4] = 0x01;
1004        memcpy(&app_info[5], &r->operand[pos], 5 + r->operand[pos + 4]);
1005        *len = app_info[3] + 4;
1006out:
1007        mutex_unlock(&fdtv->avc_mutex);
1008
1009        return ret;
1010}
1011
1012int avc_ca_info(struct firedtv *fdtv, char *app_info, unsigned int *len)
1013{
1014        struct avc_command_frame *c = (void *)fdtv->avc_data;
1015        struct avc_response_frame *r = (void *)fdtv->avc_data;
1016        int i, pos, ret;
1017
1018        mutex_lock(&fdtv->avc_mutex);
1019
1020        c->ctype   = AVC_CTYPE_STATUS;
1021        c->subunit = AVC_SUBUNIT_TYPE_TUNER | fdtv->subunit;
1022        c->opcode  = AVC_OPCODE_VENDOR;
1023
1024        c->operand[0] = SFE_VENDOR_DE_COMPANYID_0;
1025        c->operand[1] = SFE_VENDOR_DE_COMPANYID_1;
1026        c->operand[2] = SFE_VENDOR_DE_COMPANYID_2;
1027        c->operand[3] = SFE_VENDOR_OPCODE_CA2HOST;
1028        c->operand[4] = 0; /* slot */
1029        c->operand[5] = SFE_VENDOR_TAG_CA_APPLICATION_INFO; /* ca tag */
1030        clear_operands(c, 6, LAST_OPERAND);
1031
1032        fdtv->avc_data_length = 12;
1033        ret = avc_write(fdtv);
1034        if (ret < 0)
1035                goto out;
1036
1037        /* FIXME: check response code and validate response data */
1038
1039        pos = get_ca_object_pos(r);
1040        app_info[0] = (EN50221_TAG_CA_INFO >> 16) & 0xff;
1041        app_info[1] = (EN50221_TAG_CA_INFO >>  8) & 0xff;
1042        app_info[2] = (EN50221_TAG_CA_INFO >>  0) & 0xff;
1043        if (num_fake_ca_system_ids == 0) {
1044                app_info[3] = 2;
1045                app_info[4] = r->operand[pos + 0];
1046                app_info[5] = r->operand[pos + 1];
1047        } else {
1048                app_info[3] = num_fake_ca_system_ids * 2;
1049                for (i = 0; i < num_fake_ca_system_ids; i++) {
1050                        app_info[4 + i * 2] =
1051                                (fake_ca_system_ids[i] >> 8) & 0xff;
1052                        app_info[5 + i * 2] = fake_ca_system_ids[i] & 0xff;
1053                }
1054        }
1055        *len = app_info[3] + 4;
1056out:
1057        mutex_unlock(&fdtv->avc_mutex);
1058
1059        return ret;
1060}
1061
1062int avc_ca_reset(struct firedtv *fdtv)
1063{
1064        struct avc_command_frame *c = (void *)fdtv->avc_data;
1065        int ret;
1066
1067        mutex_lock(&fdtv->avc_mutex);
1068
1069        c->ctype   = AVC_CTYPE_CONTROL;
1070        c->subunit = AVC_SUBUNIT_TYPE_TUNER | fdtv->subunit;
1071        c->opcode  = AVC_OPCODE_VENDOR;
1072
1073        c->operand[0] = SFE_VENDOR_DE_COMPANYID_0;
1074        c->operand[1] = SFE_VENDOR_DE_COMPANYID_1;
1075        c->operand[2] = SFE_VENDOR_DE_COMPANYID_2;
1076        c->operand[3] = SFE_VENDOR_OPCODE_HOST2CA;
1077        c->operand[4] = 0; /* slot */
1078        c->operand[5] = SFE_VENDOR_TAG_CA_RESET; /* ca tag */
1079        c->operand[6] = 0; /* more/last */
1080        c->operand[7] = 1; /* length */
1081        c->operand[8] = 0; /* force hardware reset */
1082
1083        fdtv->avc_data_length = 12;
1084        ret = avc_write(fdtv);
1085
1086        /* FIXME: check response code? */
1087
1088        mutex_unlock(&fdtv->avc_mutex);
1089
1090        return ret;
1091}
1092
1093int avc_ca_pmt(struct firedtv *fdtv, char *msg, int length)
1094{
1095        struct avc_command_frame *c = (void *)fdtv->avc_data;
1096        struct avc_response_frame *r = (void *)fdtv->avc_data;
1097        int list_management;
1098        int program_info_length;
1099        int pmt_cmd_id;
1100        int read_pos;
1101        int write_pos;
1102        int es_info_length;
1103        int crc32_csum;
1104        int ret;
1105
1106        if (unlikely(avc_debug & AVC_DEBUG_APPLICATION_PMT))
1107                debug_pmt(msg, length);
1108
1109        mutex_lock(&fdtv->avc_mutex);
1110
1111        c->ctype   = AVC_CTYPE_CONTROL;
1112        c->subunit = AVC_SUBUNIT_TYPE_TUNER | fdtv->subunit;
1113        c->opcode  = AVC_OPCODE_VENDOR;
1114
1115        if (msg[0] != EN50221_LIST_MANAGEMENT_ONLY) {
1116                dev_info(fdtv->device, "forcing list_management to ONLY\n");
1117                msg[0] = EN50221_LIST_MANAGEMENT_ONLY;
1118        }
1119        /* We take the cmd_id from the programme level only! */
1120        list_management = msg[0];
1121        program_info_length = ((msg[4] & 0x0f) << 8) + msg[5];
1122        if (program_info_length > 0)
1123                program_info_length--; /* Remove pmt_cmd_id */
1124        pmt_cmd_id = msg[6];
1125
1126        c->operand[0] = SFE_VENDOR_DE_COMPANYID_0;
1127        c->operand[1] = SFE_VENDOR_DE_COMPANYID_1;
1128        c->operand[2] = SFE_VENDOR_DE_COMPANYID_2;
1129        c->operand[3] = SFE_VENDOR_OPCODE_HOST2CA;
1130        c->operand[4] = 0; /* slot */
1131        c->operand[5] = SFE_VENDOR_TAG_CA_PMT; /* ca tag */
1132        c->operand[6] = 0; /* more/last */
1133        /* Use three bytes for length field in case length > 127 */
1134        c->operand[10] = list_management;
1135        c->operand[11] = 0x01; /* pmt_cmd=OK_descramble */
1136
1137        /* TS program map table */
1138
1139        c->operand[12] = 0x02; /* Table id=2 */
1140        c->operand[13] = 0x80; /* Section syntax + length */
1141
1142        c->operand[15] = msg[1]; /* Program number */
1143        c->operand[16] = msg[2];
1144        c->operand[17] = msg[3]; /* Version number and current/next */
1145        c->operand[18] = 0x00; /* Section number=0 */
1146        c->operand[19] = 0x00; /* Last section number=0 */
1147        c->operand[20] = 0x1f; /* PCR_PID=1FFF */
1148        c->operand[21] = 0xff;
1149        c->operand[22] = (program_info_length >> 8); /* Program info length */
1150        c->operand[23] = (program_info_length & 0xff);
1151
1152        /* CA descriptors at programme level */
1153        read_pos = 6;
1154        write_pos = 24;
1155        if (program_info_length > 0) {
1156                pmt_cmd_id = msg[read_pos++];
1157                if (pmt_cmd_id != 1 && pmt_cmd_id != 4)
1158                        dev_err(fdtv->device,
1159                                "invalid pmt_cmd_id %d\n", pmt_cmd_id);
1160                if (program_info_length > sizeof(c->operand) - 4 - write_pos) {
1161                        ret = -EINVAL;
1162                        goto out;
1163                }
1164
1165                memcpy(&c->operand[write_pos], &msg[read_pos],
1166                       program_info_length);
1167                read_pos += program_info_length;
1168                write_pos += program_info_length;
1169        }
1170        while (read_pos < length) {
1171                c->operand[write_pos++] = msg[read_pos++];
1172                c->operand[write_pos++] = msg[read_pos++];
1173                c->operand[write_pos++] = msg[read_pos++];
1174                es_info_length =
1175                        ((msg[read_pos] & 0x0f) << 8) + msg[read_pos + 1];
1176                read_pos += 2;
1177                if (es_info_length > 0)
1178                        es_info_length--; /* Remove pmt_cmd_id */
1179                c->operand[write_pos++] = es_info_length >> 8;
1180                c->operand[write_pos++] = es_info_length & 0xff;
1181                if (es_info_length > 0) {
1182                        pmt_cmd_id = msg[read_pos++];
1183                        if (pmt_cmd_id != 1 && pmt_cmd_id != 4)
1184                                dev_err(fdtv->device, "invalid pmt_cmd_id %d at stream level\n",
1185                                        pmt_cmd_id);
1186
1187                        if (es_info_length > sizeof(c->operand) - 4 -
1188                                             write_pos) {
1189                                ret = -EINVAL;
1190                                goto out;
1191                        }
1192
1193                        memcpy(&c->operand[write_pos], &msg[read_pos],
1194                               es_info_length);
1195                        read_pos += es_info_length;
1196                        write_pos += es_info_length;
1197                }
1198        }
1199        write_pos += 4; /* CRC */
1200
1201        c->operand[7] = 0x82;
1202        c->operand[8] = (write_pos - 10) >> 8;
1203        c->operand[9] = (write_pos - 10) & 0xff;
1204        c->operand[14] = write_pos - 15;
1205
1206        crc32_csum = crc32_be(0, &c->operand[10], c->operand[12] - 1);
1207        c->operand[write_pos - 4] = (crc32_csum >> 24) & 0xff;
1208        c->operand[write_pos - 3] = (crc32_csum >> 16) & 0xff;
1209        c->operand[write_pos - 2] = (crc32_csum >>  8) & 0xff;
1210        c->operand[write_pos - 1] = (crc32_csum >>  0) & 0xff;
1211        pad_operands(c, write_pos);
1212
1213        fdtv->avc_data_length = ALIGN(3 + write_pos, 4);
1214        ret = avc_write(fdtv);
1215        if (ret < 0)
1216                goto out;
1217
1218        if (r->response != AVC_RESPONSE_ACCEPTED) {
1219                dev_err(fdtv->device,
1220                        "CA PMT failed with response 0x%x\n", r->response);
1221                ret = -EACCES;
1222        }
1223out:
1224        mutex_unlock(&fdtv->avc_mutex);
1225
1226        return ret;
1227}
1228
1229int avc_ca_get_time_date(struct firedtv *fdtv, int *interval)
1230{
1231        struct avc_command_frame *c = (void *)fdtv->avc_data;
1232        struct avc_response_frame *r = (void *)fdtv->avc_data;
1233        int ret;
1234
1235        mutex_lock(&fdtv->avc_mutex);
1236
1237        c->ctype   = AVC_CTYPE_STATUS;
1238        c->subunit = AVC_SUBUNIT_TYPE_TUNER | fdtv->subunit;
1239        c->opcode  = AVC_OPCODE_VENDOR;
1240
1241        c->operand[0] = SFE_VENDOR_DE_COMPANYID_0;
1242        c->operand[1] = SFE_VENDOR_DE_COMPANYID_1;
1243        c->operand[2] = SFE_VENDOR_DE_COMPANYID_2;
1244        c->operand[3] = SFE_VENDOR_OPCODE_CA2HOST;
1245        c->operand[4] = 0; /* slot */
1246        c->operand[5] = SFE_VENDOR_TAG_CA_DATE_TIME; /* ca tag */
1247        clear_operands(c, 6, LAST_OPERAND);
1248
1249        fdtv->avc_data_length = 12;
1250        ret = avc_write(fdtv);
1251        if (ret < 0)
1252                goto out;
1253
1254        /* FIXME: check response code and validate response data */
1255
1256        *interval = r->operand[get_ca_object_pos(r)];
1257out:
1258        mutex_unlock(&fdtv->avc_mutex);
1259
1260        return ret;
1261}
1262
1263int avc_ca_enter_menu(struct firedtv *fdtv)
1264{
1265        struct avc_command_frame *c = (void *)fdtv->avc_data;
1266        int ret;
1267
1268        mutex_lock(&fdtv->avc_mutex);
1269
1270        c->ctype   = AVC_CTYPE_STATUS;
1271        c->subunit = AVC_SUBUNIT_TYPE_TUNER | fdtv->subunit;
1272        c->opcode  = AVC_OPCODE_VENDOR;
1273
1274        c->operand[0] = SFE_VENDOR_DE_COMPANYID_0;
1275        c->operand[1] = SFE_VENDOR_DE_COMPANYID_1;
1276        c->operand[2] = SFE_VENDOR_DE_COMPANYID_2;
1277        c->operand[3] = SFE_VENDOR_OPCODE_HOST2CA;
1278        c->operand[4] = 0; /* slot */
1279        c->operand[5] = SFE_VENDOR_TAG_CA_ENTER_MENU;
1280        clear_operands(c, 6, 8);
1281
1282        fdtv->avc_data_length = 12;
1283        ret = avc_write(fdtv);
1284
1285        /* FIXME: check response code? */
1286
1287        mutex_unlock(&fdtv->avc_mutex);
1288
1289        return ret;
1290}
1291
1292int avc_ca_get_mmi(struct firedtv *fdtv, char *mmi_object, unsigned int *len)
1293{
1294        struct avc_command_frame *c = (void *)fdtv->avc_data;
1295        struct avc_response_frame *r = (void *)fdtv->avc_data;
1296        int ret;
1297
1298        mutex_lock(&fdtv->avc_mutex);
1299
1300        c->ctype   = AVC_CTYPE_STATUS;
1301        c->subunit = AVC_SUBUNIT_TYPE_TUNER | fdtv->subunit;
1302        c->opcode  = AVC_OPCODE_VENDOR;
1303
1304        c->operand[0] = SFE_VENDOR_DE_COMPANYID_0;
1305        c->operand[1] = SFE_VENDOR_DE_COMPANYID_1;
1306        c->operand[2] = SFE_VENDOR_DE_COMPANYID_2;
1307        c->operand[3] = SFE_VENDOR_OPCODE_CA2HOST;
1308        c->operand[4] = 0; /* slot */
1309        c->operand[5] = SFE_VENDOR_TAG_CA_MMI;
1310        clear_operands(c, 6, LAST_OPERAND);
1311
1312        fdtv->avc_data_length = 12;
1313        ret = avc_write(fdtv);
1314        if (ret < 0)
1315                goto out;
1316
1317        /* FIXME: check response code and validate response data */
1318
1319        *len = get_ca_object_length(r);
1320        memcpy(mmi_object, &r->operand[get_ca_object_pos(r)], *len);
1321out:
1322        mutex_unlock(&fdtv->avc_mutex);
1323
1324        return ret;
1325}
1326
1327#define CMP_OUTPUT_PLUG_CONTROL_REG_0   0xfffff0000904ULL
1328
1329static int cmp_read(struct firedtv *fdtv, u64 addr, __be32 *data)
1330{
1331        int ret;
1332
1333        ret = fdtv_read(fdtv, addr, data);
1334        if (ret < 0)
1335                dev_err(fdtv->device, "CMP: read I/O error\n");
1336
1337        return ret;
1338}
1339
1340static int cmp_lock(struct firedtv *fdtv, u64 addr, __be32 data[])
1341{
1342        int ret;
1343
1344        ret = fdtv_lock(fdtv, addr, data);
1345        if (ret < 0)
1346                dev_err(fdtv->device, "CMP: lock I/O error\n");
1347
1348        return ret;
1349}
1350
1351static inline u32 get_opcr(__be32 opcr, u32 mask, u32 shift)
1352{
1353        return (be32_to_cpu(opcr) >> shift) & mask;
1354}
1355
1356static inline void set_opcr(__be32 *opcr, u32 value, u32 mask, u32 shift)
1357{
1358        *opcr &= ~cpu_to_be32(mask << shift);
1359        *opcr |= cpu_to_be32((value & mask) << shift);
1360}
1361
1362#define get_opcr_online(v)              get_opcr((v), 0x1, 31)
1363#define get_opcr_p2p_connections(v)     get_opcr((v), 0x3f, 24)
1364#define get_opcr_channel(v)             get_opcr((v), 0x3f, 16)
1365
1366#define set_opcr_p2p_connections(p, v)  set_opcr((p), (v), 0x3f, 24)
1367#define set_opcr_channel(p, v)          set_opcr((p), (v), 0x3f, 16)
1368#define set_opcr_data_rate(p, v)        set_opcr((p), (v), 0x3, 14)
1369#define set_opcr_overhead_id(p, v)      set_opcr((p), (v), 0xf, 10)
1370
1371int cmp_establish_pp_connection(struct firedtv *fdtv, int plug, int channel)
1372{
1373        __be32 old_opcr, opcr[2];
1374        u64 opcr_address = CMP_OUTPUT_PLUG_CONTROL_REG_0 + (plug << 2);
1375        int attempts = 0;
1376        int ret;
1377
1378        ret = cmp_read(fdtv, opcr_address, opcr);
1379        if (ret < 0)
1380                return ret;
1381
1382repeat:
1383        if (!get_opcr_online(*opcr)) {
1384                dev_err(fdtv->device, "CMP: output offline\n");
1385                return -EBUSY;
1386        }
1387
1388        old_opcr = *opcr;
1389
1390        if (get_opcr_p2p_connections(*opcr)) {
1391                if (get_opcr_channel(*opcr) != channel) {
1392                        dev_err(fdtv->device, "CMP: cannot change channel\n");
1393                        return -EBUSY;
1394                }
1395                dev_info(fdtv->device, "CMP: overlaying connection\n");
1396
1397                /* We don't allocate isochronous resources. */
1398        } else {
1399                set_opcr_channel(opcr, channel);
1400                set_opcr_data_rate(opcr, 2); /* S400 */
1401
1402                /* FIXME: this is for the worst case - optimize */
1403                set_opcr_overhead_id(opcr, 0);
1404
1405                /* FIXME: allocate isochronous channel and bandwidth at IRM */
1406        }
1407
1408        set_opcr_p2p_connections(opcr, get_opcr_p2p_connections(*opcr) + 1);
1409
1410        opcr[1] = *opcr;
1411        opcr[0] = old_opcr;
1412
1413        ret = cmp_lock(fdtv, opcr_address, opcr);
1414        if (ret < 0)
1415                return ret;
1416
1417        if (old_opcr != *opcr) {
1418                /*
1419                 * FIXME: if old_opcr.P2P_Connections > 0,
1420                 * deallocate isochronous channel and bandwidth at IRM
1421                 */
1422
1423                if (++attempts < 6) /* arbitrary limit */
1424                        goto repeat;
1425                return -EBUSY;
1426        }
1427
1428        return 0;
1429}
1430
1431void cmp_break_pp_connection(struct firedtv *fdtv, int plug, int channel)
1432{
1433        __be32 old_opcr, opcr[2];
1434        u64 opcr_address = CMP_OUTPUT_PLUG_CONTROL_REG_0 + (plug << 2);
1435        int attempts = 0;
1436
1437        if (cmp_read(fdtv, opcr_address, opcr) < 0)
1438                return;
1439
1440repeat:
1441        if (!get_opcr_online(*opcr) || !get_opcr_p2p_connections(*opcr) ||
1442            get_opcr_channel(*opcr) != channel) {
1443                dev_err(fdtv->device, "CMP: no connection to break\n");
1444                return;
1445        }
1446
1447        old_opcr = *opcr;
1448        set_opcr_p2p_connections(opcr, get_opcr_p2p_connections(*opcr) - 1);
1449
1450        opcr[1] = *opcr;
1451        opcr[0] = old_opcr;
1452
1453        if (cmp_lock(fdtv, opcr_address, opcr) < 0)
1454                return;
1455
1456        if (old_opcr != *opcr) {
1457                /*
1458                 * FIXME: if old_opcr.P2P_Connections == 1, i.e. we were last
1459                 * owner, deallocate isochronous channel and bandwidth at IRM
1460                 * if (...)
1461                 *      fdtv->backend->dealloc_resources(fdtv, channel, bw);
1462                 */
1463
1464                if (++attempts < 6) /* arbitrary limit */
1465                        goto repeat;
1466        }
1467}
1468