mirror of
https://github.com/torvalds/linux.git
synced 2024-12-22 19:01:37 +00:00
7724325a19
The data_mutex is initialized too late, as it is needed for each device driver's power control, causing an OOPS: dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. BUG: unable to handle kernel NULL pointer dereference at (null) IP: [<ffffffff846617af>] __mutex_lock_slowpath+0x6f/0x100 PGD 0 Oops: 0002 [#1] SMP Modules linked in: dvb_usb_cinergyT2(+) dvb_usb CPU: 0 PID: 2029 Comm: modprobe Not tainted 4.9.0-rc4-dvbmod #24 Hardware name: FUJITSU LIFEBOOK A544/FJNBB35 , BIOS Version 1.17 05/09/2014 task: ffff88020e943840 task.stack: ffff8801f36ec000 RIP: 0010:[<ffffffff846617af>] [<ffffffff846617af>] __mutex_lock_slowpath+0x6f/0x100 RSP: 0018:ffff8801f36efb10 EFLAGS: 00010282 RAX: 0000000000000000 RBX: ffff88021509bdc8 RCX: 00000000c0000100 RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88021509bdcc RBP: ffff8801f36efb58 R08: ffff88021f216320 R09: 0000000000100000 R10: ffff88021f216320 R11: 00000023fee6c5a1 R12: ffff88020e943840 R13: ffff88021509bdcc R14: 00000000ffffffff R15: ffff88021509bdd0 FS: 00007f21adb86740(0000) GS:ffff88021f200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 0000000215bce000 CR4: 00000000001406f0 Call Trace: mutex_lock+0x16/0x25 cinergyt2_power_ctrl+0x1f/0x60 [dvb_usb_cinergyT2] dvb_usb_device_init+0x21e/0x5d0 [dvb_usb] cinergyt2_usb_probe+0x21/0x50 [dvb_usb_cinergyT2] usb_probe_interface+0xf3/0x2a0 driver_probe_device+0x208/0x2b0 __driver_attach+0x87/0x90 driver_probe_device+0x2b0/0x2b0 bus_for_each_dev+0x52/0x80 bus_add_driver+0x1a3/0x220 driver_register+0x56/0xd0 usb_register_driver+0x77/0x130 do_one_initcall+0x46/0x180 free_vmap_area_noflush+0x38/0x70 kmem_cache_alloc+0x84/0xc0 do_init_module+0x50/0x1be load_module+0x1d8b/0x2100 find_symbol_in_section+0xa0/0xa0 SyS_finit_module+0x89/0x90 entry_SYSCALL_64_fastpath+0x13/0x94 Code: e8 a7 1d 00 00 8b 03 83 f8 01 0f 84 97 00 00 00 48 8b 43 10 4c 8d 7b 08 48 89 63 10 4c 89 3c 24 41 be ff ff ff ff 48 89 44 24 08 <48> 89 20 4c 89 64 24 10 eb 1a 49 c7 44 24 08 02 00 00 00 c6 43 RIP [<ffffffff846617af>] __mutex_lock_slowpath+0x6f/0x100 RSP <ffff8801f36efb10> CR2: 0000000000000000 So, move it to the struct dvb_usb_device and initialize it before calling the driver's callbacks. Reported-by: Jörg Otte <jrg.otte@gmail.com> Tested-by: Jörg Otte <jrg.otte@gmail.com> Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
281 lines
6.6 KiB
C
281 lines
6.6 KiB
C
/*
|
|
* TerraTec Cinergy T2/qanu USB2 DVB-T adapter.
|
|
*
|
|
* Copyright (C) 2007 Tomi Orava (tomimo@ncircle.nullnet.fi)
|
|
*
|
|
* Based on the dvb-usb-framework code and the
|
|
* original Terratec Cinergy T2 driver by:
|
|
*
|
|
* Copyright (C) 2004 Daniel Mack <daniel@qanu.de> and
|
|
* Holger Waechtler <holger@qanu.de>
|
|
*
|
|
* Protocol Spec published on http://qanu.de/specs/terratec_cinergyT2.pdf
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
|
*
|
|
*/
|
|
|
|
#include "cinergyT2.h"
|
|
|
|
|
|
/* debug */
|
|
int dvb_usb_cinergyt2_debug;
|
|
|
|
module_param_named(debug, dvb_usb_cinergyt2_debug, int, 0644);
|
|
MODULE_PARM_DESC(debug, "set debugging level (1=info, xfer=2, rc=4 "
|
|
"(or-able)).");
|
|
|
|
DVB_DEFINE_MOD_OPT_ADAPTER_NR(adapter_nr);
|
|
|
|
struct cinergyt2_state {
|
|
u8 rc_counter;
|
|
unsigned char data[64];
|
|
};
|
|
|
|
/* We are missing a release hook with usb_device data */
|
|
static struct dvb_usb_device *cinergyt2_usb_device;
|
|
|
|
static struct dvb_usb_device_properties cinergyt2_properties;
|
|
|
|
static int cinergyt2_streaming_ctrl(struct dvb_usb_adapter *adap, int enable)
|
|
{
|
|
struct dvb_usb_device *d = adap->dev;
|
|
struct cinergyt2_state *st = d->priv;
|
|
int ret;
|
|
|
|
mutex_lock(&d->data_mutex);
|
|
st->data[0] = CINERGYT2_EP1_CONTROL_STREAM_TRANSFER;
|
|
st->data[1] = enable ? 1 : 0;
|
|
|
|
ret = dvb_usb_generic_rw(d, st->data, 2, st->data, 64, 0);
|
|
mutex_unlock(&d->data_mutex);
|
|
|
|
return ret;
|
|
}
|
|
|
|
static int cinergyt2_power_ctrl(struct dvb_usb_device *d, int enable)
|
|
{
|
|
struct cinergyt2_state *st = d->priv;
|
|
int ret;
|
|
|
|
mutex_lock(&d->data_mutex);
|
|
st->data[0] = CINERGYT2_EP1_SLEEP_MODE;
|
|
st->data[1] = enable ? 0 : 1;
|
|
|
|
ret = dvb_usb_generic_rw(d, st->data, 2, st->data, 3, 0);
|
|
mutex_unlock(&d->data_mutex);
|
|
|
|
return ret;
|
|
}
|
|
|
|
static int cinergyt2_frontend_attach(struct dvb_usb_adapter *adap)
|
|
{
|
|
struct dvb_usb_device *d = adap->dev;
|
|
struct cinergyt2_state *st = d->priv;
|
|
int ret;
|
|
|
|
adap->fe_adap[0].fe = cinergyt2_fe_attach(adap->dev);
|
|
|
|
mutex_lock(&d->data_mutex);
|
|
st->data[0] = CINERGYT2_EP1_GET_FIRMWARE_VERSION;
|
|
|
|
ret = dvb_usb_generic_rw(d, st->data, 1, st->data, 3, 0);
|
|
if (ret < 0) {
|
|
deb_rc("cinergyt2_power_ctrl() Failed to retrieve sleep "
|
|
"state info\n");
|
|
}
|
|
mutex_unlock(&d->data_mutex);
|
|
|
|
/* Copy this pointer as we are gonna need it in the release phase */
|
|
cinergyt2_usb_device = adap->dev;
|
|
|
|
return ret;
|
|
}
|
|
|
|
static struct rc_map_table rc_map_cinergyt2_table[] = {
|
|
{ 0x0401, KEY_POWER },
|
|
{ 0x0402, KEY_1 },
|
|
{ 0x0403, KEY_2 },
|
|
{ 0x0404, KEY_3 },
|
|
{ 0x0405, KEY_4 },
|
|
{ 0x0406, KEY_5 },
|
|
{ 0x0407, KEY_6 },
|
|
{ 0x0408, KEY_7 },
|
|
{ 0x0409, KEY_8 },
|
|
{ 0x040a, KEY_9 },
|
|
{ 0x040c, KEY_0 },
|
|
{ 0x040b, KEY_VIDEO },
|
|
{ 0x040d, KEY_REFRESH },
|
|
{ 0x040e, KEY_SELECT },
|
|
{ 0x040f, KEY_EPG },
|
|
{ 0x0410, KEY_UP },
|
|
{ 0x0414, KEY_DOWN },
|
|
{ 0x0411, KEY_LEFT },
|
|
{ 0x0413, KEY_RIGHT },
|
|
{ 0x0412, KEY_OK },
|
|
{ 0x0415, KEY_TEXT },
|
|
{ 0x0416, KEY_INFO },
|
|
{ 0x0417, KEY_RED },
|
|
{ 0x0418, KEY_GREEN },
|
|
{ 0x0419, KEY_YELLOW },
|
|
{ 0x041a, KEY_BLUE },
|
|
{ 0x041c, KEY_VOLUMEUP },
|
|
{ 0x041e, KEY_VOLUMEDOWN },
|
|
{ 0x041d, KEY_MUTE },
|
|
{ 0x041b, KEY_CHANNELUP },
|
|
{ 0x041f, KEY_CHANNELDOWN },
|
|
{ 0x0440, KEY_PAUSE },
|
|
{ 0x044c, KEY_PLAY },
|
|
{ 0x0458, KEY_RECORD },
|
|
{ 0x0454, KEY_PREVIOUS },
|
|
{ 0x0448, KEY_STOP },
|
|
{ 0x045c, KEY_NEXT }
|
|
};
|
|
|
|
/* Number of keypresses to ignore before detect repeating */
|
|
#define RC_REPEAT_DELAY 3
|
|
|
|
static int repeatable_keys[] = {
|
|
KEY_UP,
|
|
KEY_DOWN,
|
|
KEY_LEFT,
|
|
KEY_RIGHT,
|
|
KEY_VOLUMEUP,
|
|
KEY_VOLUMEDOWN,
|
|
KEY_CHANNELUP,
|
|
KEY_CHANNELDOWN
|
|
};
|
|
|
|
static int cinergyt2_rc_query(struct dvb_usb_device *d, u32 *event, int *state)
|
|
{
|
|
struct cinergyt2_state *st = d->priv;
|
|
int i, ret;
|
|
|
|
*state = REMOTE_NO_KEY_PRESSED;
|
|
|
|
mutex_lock(&d->data_mutex);
|
|
st->data[0] = CINERGYT2_EP1_GET_RC_EVENTS;
|
|
|
|
ret = dvb_usb_generic_rw(d, st->data, 1, st->data, 5, 0);
|
|
if (ret < 0)
|
|
goto ret;
|
|
|
|
if (st->data[4] == 0xff) {
|
|
/* key repeat */
|
|
st->rc_counter++;
|
|
if (st->rc_counter > RC_REPEAT_DELAY) {
|
|
for (i = 0; i < ARRAY_SIZE(repeatable_keys); i++) {
|
|
if (d->last_event == repeatable_keys[i]) {
|
|
*state = REMOTE_KEY_REPEAT;
|
|
*event = d->last_event;
|
|
deb_rc("repeat key, event %x\n",
|
|
*event);
|
|
goto ret;
|
|
}
|
|
}
|
|
deb_rc("repeated key (non repeatable)\n");
|
|
}
|
|
goto ret;
|
|
}
|
|
|
|
/* hack to pass checksum on the custom field */
|
|
st->data[2] = ~st->data[1];
|
|
dvb_usb_nec_rc_key_to_event(d, st->data, event, state);
|
|
if (st->data[0] != 0) {
|
|
if (*event != d->last_event)
|
|
st->rc_counter = 0;
|
|
|
|
deb_rc("key: %*ph\n", 5, st->data);
|
|
}
|
|
|
|
ret:
|
|
mutex_unlock(&d->data_mutex);
|
|
return ret;
|
|
}
|
|
|
|
static int cinergyt2_usb_probe(struct usb_interface *intf,
|
|
const struct usb_device_id *id)
|
|
{
|
|
return dvb_usb_device_init(intf, &cinergyt2_properties,
|
|
THIS_MODULE, NULL, adapter_nr);
|
|
}
|
|
|
|
static struct usb_device_id cinergyt2_usb_table[] = {
|
|
{ USB_DEVICE(USB_VID_TERRATEC, 0x0038) },
|
|
{ 0 }
|
|
};
|
|
|
|
MODULE_DEVICE_TABLE(usb, cinergyt2_usb_table);
|
|
|
|
static struct dvb_usb_device_properties cinergyt2_properties = {
|
|
.size_of_priv = sizeof(struct cinergyt2_state),
|
|
.num_adapters = 1,
|
|
.adapter = {
|
|
{
|
|
.num_frontends = 1,
|
|
.fe = {{
|
|
.streaming_ctrl = cinergyt2_streaming_ctrl,
|
|
.frontend_attach = cinergyt2_frontend_attach,
|
|
|
|
/* parameter for the MPEG2-data transfer */
|
|
.stream = {
|
|
.type = USB_BULK,
|
|
.count = 5,
|
|
.endpoint = 0x02,
|
|
.u = {
|
|
.bulk = {
|
|
.buffersize = 512,
|
|
}
|
|
}
|
|
},
|
|
}},
|
|
}
|
|
},
|
|
|
|
.power_ctrl = cinergyt2_power_ctrl,
|
|
|
|
.rc.legacy = {
|
|
.rc_interval = 50,
|
|
.rc_map_table = rc_map_cinergyt2_table,
|
|
.rc_map_size = ARRAY_SIZE(rc_map_cinergyt2_table),
|
|
.rc_query = cinergyt2_rc_query,
|
|
},
|
|
|
|
.generic_bulk_ctrl_endpoint = 1,
|
|
|
|
.num_device_descs = 1,
|
|
.devices = {
|
|
{ .name = "TerraTec/qanu USB2.0 Highspeed DVB-T Receiver",
|
|
.cold_ids = {NULL},
|
|
.warm_ids = { &cinergyt2_usb_table[0], NULL },
|
|
},
|
|
{ NULL },
|
|
}
|
|
};
|
|
|
|
|
|
static struct usb_driver cinergyt2_driver = {
|
|
.name = "cinergyT2",
|
|
.probe = cinergyt2_usb_probe,
|
|
.disconnect = dvb_usb_device_exit,
|
|
.id_table = cinergyt2_usb_table
|
|
};
|
|
|
|
module_usb_driver(cinergyt2_driver);
|
|
|
|
MODULE_DESCRIPTION("Terratec Cinergy T2 DVB-T driver");
|
|
MODULE_LICENSE("GPL");
|
|
MODULE_AUTHOR("Tomi Orava");
|