media: cec: move the core to a separate directory
authorMauro Carvalho Chehab <mchehab+huawei@kernel.org>
Wed, 15 Apr 2020 08:43:44 +0000 (10:43 +0200)
committerMauro Carvalho Chehab <mchehab+huawei@kernel.org>
Wed, 15 Apr 2020 09:44:05 +0000 (11:44 +0200)
In preparation for moving CEC drivers to the CEC directory,
move the core to a separate place.

Acked-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
18 files changed:
drivers/media/cec/Makefile
drivers/media/cec/cec-adap.c [deleted file]
drivers/media/cec/cec-api.c [deleted file]
drivers/media/cec/cec-core.c [deleted file]
drivers/media/cec/cec-notifier.c [deleted file]
drivers/media/cec/cec-pin-error-inj.c [deleted file]
drivers/media/cec/cec-pin-priv.h [deleted file]
drivers/media/cec/cec-pin.c [deleted file]
drivers/media/cec/cec-priv.h [deleted file]
drivers/media/cec/core/Makefile [new file with mode: 0644]
drivers/media/cec/core/cec-adap.c [new file with mode: 0644]
drivers/media/cec/core/cec-api.c [new file with mode: 0644]
drivers/media/cec/core/cec-core.c [new file with mode: 0644]
drivers/media/cec/core/cec-notifier.c [new file with mode: 0644]
drivers/media/cec/core/cec-pin-error-inj.c [new file with mode: 0644]
drivers/media/cec/core/cec-pin-priv.h [new file with mode: 0644]
drivers/media/cec/core/cec-pin.c [new file with mode: 0644]
drivers/media/cec/core/cec-priv.h [new file with mode: 0644]

index ad8677d8c89679bb6b0eda8357a136dfb920fbf3..3fdbc22b153041bd514a9651d81312dc9f03dff1 100644 (file)
@@ -1,16 +1,2 @@
 # SPDX-License-Identifier: GPL-2.0
-cec-objs := cec-core.o cec-adap.o cec-api.o
-
-ifeq ($(CONFIG_CEC_NOTIFIER),y)
-  cec-objs += cec-notifier.o
-endif
-
-ifeq ($(CONFIG_CEC_PIN),y)
-  cec-objs += cec-pin.o
-endif
-
-ifeq ($(CONFIG_CEC_PIN_ERROR_INJ),y)
-  cec-objs += cec-pin-error-inj.o
-endif
-
-obj-$(CONFIG_CEC_CORE) += cec.o
+obj-y += core/
diff --git a/drivers/media/cec/cec-adap.c b/drivers/media/cec/cec-adap.c
deleted file mode 100644 (file)
index 6c95dc4..0000000
+++ /dev/null
@@ -1,2199 +0,0 @@
-// SPDX-License-Identifier: GPL-2.0-only
-/*
- * cec-adap.c - HDMI Consumer Electronics Control framework - CEC adapter
- *
- * Copyright 2016 Cisco Systems, Inc. and/or its affiliates. All rights reserved.
- */
-
-#include <linux/errno.h>
-#include <linux/init.h>
-#include <linux/module.h>
-#include <linux/kernel.h>
-#include <linux/kmod.h>
-#include <linux/ktime.h>
-#include <linux/slab.h>
-#include <linux/mm.h>
-#include <linux/string.h>
-#include <linux/types.h>
-
-#include <drm/drm_connector.h>
-#include <drm/drm_device.h>
-#include <drm/drm_edid.h>
-#include <drm/drm_file.h>
-
-#include "cec-priv.h"
-
-static void cec_fill_msg_report_features(struct cec_adapter *adap,
-                                        struct cec_msg *msg,
-                                        unsigned int la_idx);
-
-/*
- * 400 ms is the time it takes for one 16 byte message to be
- * transferred and 5 is the maximum number of retries. Add
- * another 100 ms as a margin. So if the transmit doesn't
- * finish before that time something is really wrong and we
- * have to time out.
- *
- * This is a sign that something it really wrong and a warning
- * will be issued.
- */
-#define CEC_XFER_TIMEOUT_MS (5 * 400 + 100)
-
-#define call_op(adap, op, arg...) \
-       (adap->ops->op ? adap->ops->op(adap, ## arg) : 0)
-
-#define call_void_op(adap, op, arg...)                 \
-       do {                                            \
-               if (adap->ops->op)                      \
-                       adap->ops->op(adap, ## arg);    \
-       } while (0)
-
-static int cec_log_addr2idx(const struct cec_adapter *adap, u8 log_addr)
-{
-       int i;
-
-       for (i = 0; i < adap->log_addrs.num_log_addrs; i++)
-               if (adap->log_addrs.log_addr[i] == log_addr)
-                       return i;
-       return -1;
-}
-
-static unsigned int cec_log_addr2dev(const struct cec_adapter *adap, u8 log_addr)
-{
-       int i = cec_log_addr2idx(adap, log_addr);
-
-       return adap->log_addrs.primary_device_type[i < 0 ? 0 : i];
-}
-
-u16 cec_get_edid_phys_addr(const u8 *edid, unsigned int size,
-                          unsigned int *offset)
-{
-       unsigned int loc = cec_get_edid_spa_location(edid, size);
-
-       if (offset)
-               *offset = loc;
-       if (loc == 0)
-               return CEC_PHYS_ADDR_INVALID;
-       return (edid[loc] << 8) | edid[loc + 1];
-}
-EXPORT_SYMBOL_GPL(cec_get_edid_phys_addr);
-
-void cec_fill_conn_info_from_drm(struct cec_connector_info *conn_info,
-                                const struct drm_connector *connector)
-{
-       memset(conn_info, 0, sizeof(*conn_info));
-       conn_info->type = CEC_CONNECTOR_TYPE_DRM;
-       conn_info->drm.card_no = connector->dev->primary->index;
-       conn_info->drm.connector_id = connector->base.id;
-}
-EXPORT_SYMBOL_GPL(cec_fill_conn_info_from_drm);
-
-/*
- * Queue a new event for this filehandle. If ts == 0, then set it
- * to the current time.
- *
- * We keep a queue of at most max_event events where max_event differs
- * per event. If the queue becomes full, then drop the oldest event and
- * keep track of how many events we've dropped.
- */
-void cec_queue_event_fh(struct cec_fh *fh,
-                       const struct cec_event *new_ev, u64 ts)
-{
-       static const u16 max_events[CEC_NUM_EVENTS] = {
-               1, 1, 800, 800, 8, 8, 8, 8
-       };
-       struct cec_event_entry *entry;
-       unsigned int ev_idx = new_ev->event - 1;
-
-       if (WARN_ON(ev_idx >= ARRAY_SIZE(fh->events)))
-               return;
-
-       if (ts == 0)
-               ts = ktime_get_ns();
-
-       mutex_lock(&fh->lock);
-       if (ev_idx < CEC_NUM_CORE_EVENTS)
-               entry = &fh->core_events[ev_idx];
-       else
-               entry = kmalloc(sizeof(*entry), GFP_KERNEL);
-       if (entry) {
-               if (new_ev->event == CEC_EVENT_LOST_MSGS &&
-                   fh->queued_events[ev_idx]) {
-                       entry->ev.lost_msgs.lost_msgs +=
-                               new_ev->lost_msgs.lost_msgs;
-                       goto unlock;
-               }
-               entry->ev = *new_ev;
-               entry->ev.ts = ts;
-
-               if (fh->queued_events[ev_idx] < max_events[ev_idx]) {
-                       /* Add new msg at the end of the queue */
-                       list_add_tail(&entry->list, &fh->events[ev_idx]);
-                       fh->queued_events[ev_idx]++;
-                       fh->total_queued_events++;
-                       goto unlock;
-               }
-
-               if (ev_idx >= CEC_NUM_CORE_EVENTS) {
-                       list_add_tail(&entry->list, &fh->events[ev_idx]);
-                       /* drop the oldest event */
-                       entry = list_first_entry(&fh->events[ev_idx],
-                                                struct cec_event_entry, list);
-                       list_del(&entry->list);
-                       kfree(entry);
-               }
-       }
-       /* Mark that events were lost */
-       entry = list_first_entry_or_null(&fh->events[ev_idx],
-                                        struct cec_event_entry, list);
-       if (entry)
-               entry->ev.flags |= CEC_EVENT_FL_DROPPED_EVENTS;
-
-unlock:
-       mutex_unlock(&fh->lock);
-       wake_up_interruptible(&fh->wait);
-}
-
-/* Queue a new event for all open filehandles. */
-static void cec_queue_event(struct cec_adapter *adap,
-                           const struct cec_event *ev)
-{
-       u64 ts = ktime_get_ns();
-       struct cec_fh *fh;
-
-       mutex_lock(&adap->devnode.lock);
-       list_for_each_entry(fh, &adap->devnode.fhs, list)
-               cec_queue_event_fh(fh, ev, ts);
-       mutex_unlock(&adap->devnode.lock);
-}
-
-/* Notify userspace that the CEC pin changed state at the given time. */
-void cec_queue_pin_cec_event(struct cec_adapter *adap, bool is_high,
-                            bool dropped_events, ktime_t ts)
-{
-       struct cec_event ev = {
-               .event = is_high ? CEC_EVENT_PIN_CEC_HIGH :
-                                  CEC_EVENT_PIN_CEC_LOW,
-               .flags = dropped_events ? CEC_EVENT_FL_DROPPED_EVENTS : 0,
-       };
-       struct cec_fh *fh;
-
-       mutex_lock(&adap->devnode.lock);
-       list_for_each_entry(fh, &adap->devnode.fhs, list)
-               if (fh->mode_follower == CEC_MODE_MONITOR_PIN)
-                       cec_queue_event_fh(fh, &ev, ktime_to_ns(ts));
-       mutex_unlock(&adap->devnode.lock);
-}
-EXPORT_SYMBOL_GPL(cec_queue_pin_cec_event);
-
-/* Notify userspace that the HPD pin changed state at the given time. */
-void cec_queue_pin_hpd_event(struct cec_adapter *adap, bool is_high, ktime_t ts)
-{
-       struct cec_event ev = {
-               .event = is_high ? CEC_EVENT_PIN_HPD_HIGH :
-                                  CEC_EVENT_PIN_HPD_LOW,
-       };
-       struct cec_fh *fh;
-
-       mutex_lock(&adap->devnode.lock);
-       list_for_each_entry(fh, &adap->devnode.fhs, list)
-               cec_queue_event_fh(fh, &ev, ktime_to_ns(ts));
-       mutex_unlock(&adap->devnode.lock);
-}
-EXPORT_SYMBOL_GPL(cec_queue_pin_hpd_event);
-
-/* Notify userspace that the 5V pin changed state at the given time. */
-void cec_queue_pin_5v_event(struct cec_adapter *adap, bool is_high, ktime_t ts)
-{
-       struct cec_event ev = {
-               .event = is_high ? CEC_EVENT_PIN_5V_HIGH :
-                                  CEC_EVENT_PIN_5V_LOW,
-       };
-       struct cec_fh *fh;
-
-       mutex_lock(&adap->devnode.lock);
-       list_for_each_entry(fh, &adap->devnode.fhs, list)
-               cec_queue_event_fh(fh, &ev, ktime_to_ns(ts));
-       mutex_unlock(&adap->devnode.lock);
-}
-EXPORT_SYMBOL_GPL(cec_queue_pin_5v_event);
-
-/*
- * Queue a new message for this filehandle.
- *
- * We keep a queue of at most CEC_MAX_MSG_RX_QUEUE_SZ messages. If the
- * queue becomes full, then drop the oldest message and keep track
- * of how many messages we've dropped.
- */
-static void cec_queue_msg_fh(struct cec_fh *fh, const struct cec_msg *msg)
-{
-       static const struct cec_event ev_lost_msgs = {
-               .event = CEC_EVENT_LOST_MSGS,
-               .flags = 0,
-               {
-                       .lost_msgs = { 1 },
-               },
-       };
-       struct cec_msg_entry *entry;
-
-       mutex_lock(&fh->lock);
-       entry = kmalloc(sizeof(*entry), GFP_KERNEL);
-       if (entry) {
-               entry->msg = *msg;
-               /* Add new msg at the end of the queue */
-               list_add_tail(&entry->list, &fh->msgs);
-
-               if (fh->queued_msgs < CEC_MAX_MSG_RX_QUEUE_SZ) {
-                       /* All is fine if there is enough room */
-                       fh->queued_msgs++;
-                       mutex_unlock(&fh->lock);
-                       wake_up_interruptible(&fh->wait);
-                       return;
-               }
-
-               /*
-                * if the message queue is full, then drop the oldest one and
-                * send a lost message event.
-                */
-               entry = list_first_entry(&fh->msgs, struct cec_msg_entry, list);
-               list_del(&entry->list);
-               kfree(entry);
-       }
-       mutex_unlock(&fh->lock);
-
-       /*
-        * We lost a message, either because kmalloc failed or the queue
-        * was full.
-        */
-       cec_queue_event_fh(fh, &ev_lost_msgs, ktime_get_ns());
-}
-
-/*
- * Queue the message for those filehandles that are in monitor mode.
- * If valid_la is true (this message is for us or was sent by us),
- * then pass it on to any monitoring filehandle. If this message
- * isn't for us or from us, then only give it to filehandles that
- * are in MONITOR_ALL mode.
- *
- * This can only happen if the CEC_CAP_MONITOR_ALL capability is
- * set and the CEC adapter was placed in 'monitor all' mode.
- */
-static void cec_queue_msg_monitor(struct cec_adapter *adap,
-                                 const struct cec_msg *msg,
-                                 bool valid_la)
-{
-       struct cec_fh *fh;
-       u32 monitor_mode = valid_la ? CEC_MODE_MONITOR :
-                                     CEC_MODE_MONITOR_ALL;
-
-       mutex_lock(&adap->devnode.lock);
-       list_for_each_entry(fh, &adap->devnode.fhs, list) {
-               if (fh->mode_follower >= monitor_mode)
-                       cec_queue_msg_fh(fh, msg);
-       }
-       mutex_unlock(&adap->devnode.lock);
-}
-
-/*
- * Queue the message for follower filehandles.
- */
-static void cec_queue_msg_followers(struct cec_adapter *adap,
-                                   const struct cec_msg *msg)
-{
-       struct cec_fh *fh;
-
-       mutex_lock(&adap->devnode.lock);
-       list_for_each_entry(fh, &adap->devnode.fhs, list) {
-               if (fh->mode_follower == CEC_MODE_FOLLOWER)
-                       cec_queue_msg_fh(fh, msg);
-       }
-       mutex_unlock(&adap->devnode.lock);
-}
-
-/* Notify userspace of an adapter state change. */
-static void cec_post_state_event(struct cec_adapter *adap)
-{
-       struct cec_event ev = {
-               .event = CEC_EVENT_STATE_CHANGE,
-       };
-
-       ev.state_change.phys_addr = adap->phys_addr;
-       ev.state_change.log_addr_mask = adap->log_addrs.log_addr_mask;
-       ev.state_change.have_conn_info =
-               adap->conn_info.type != CEC_CONNECTOR_TYPE_NO_CONNECTOR;
-       cec_queue_event(adap, &ev);
-}
-
-/*
- * A CEC transmit (and a possible wait for reply) completed.
- * If this was in blocking mode, then complete it, otherwise
- * queue the message for userspace to dequeue later.
- *
- * This function is called with adap->lock held.
- */
-static void cec_data_completed(struct cec_data *data)
-{
-       /*
-        * Delete this transmit from the filehandle's xfer_list since
-        * we're done with it.
-        *
-        * Note that if the filehandle is closed before this transmit
-        * finished, then the release() function will set data->fh to NULL.
-        * Without that we would be referring to a closed filehandle.
-        */
-       if (data->fh)
-               list_del(&data->xfer_list);
-
-       if (data->blocking) {
-               /*
-                * Someone is blocking so mark the message as completed
-                * and call complete.
-                */
-               data->completed = true;
-               complete(&data->c);
-       } else {
-               /*
-                * No blocking, so just queue the message if needed and
-                * free the memory.
-                */
-               if (data->fh)
-                       cec_queue_msg_fh(data->fh, &data->msg);
-               kfree(data);
-       }
-}
-
-/*
- * A pending CEC transmit needs to be cancelled, either because the CEC
- * adapter is disabled or the transmit takes an impossibly long time to
- * finish.
- *
- * This function is called with adap->lock held.
- */
-static void cec_data_cancel(struct cec_data *data, u8 tx_status)
-{
-       /*
-        * It's either the current transmit, or it is a pending
-        * transmit. Take the appropriate action to clear it.
-        */
-       if (data->adap->transmitting == data) {
-               data->adap->transmitting = NULL;
-       } else {
-               list_del_init(&data->list);
-               if (!(data->msg.tx_status & CEC_TX_STATUS_OK))
-                       if (!WARN_ON(!data->adap->transmit_queue_sz))
-                               data->adap->transmit_queue_sz--;
-       }
-
-       if (data->msg.tx_status & CEC_TX_STATUS_OK) {
-               data->msg.rx_ts = ktime_get_ns();
-               data->msg.rx_status = CEC_RX_STATUS_ABORTED;
-       } else {
-               data->msg.tx_ts = ktime_get_ns();
-               data->msg.tx_status |= tx_status |
-                                      CEC_TX_STATUS_MAX_RETRIES;
-               data->msg.tx_error_cnt++;
-               data->attempts = 0;
-       }
-
-       /* Queue transmitted message for monitoring purposes */
-       cec_queue_msg_monitor(data->adap, &data->msg, 1);
-
-       cec_data_completed(data);
-}
-
-/*
- * Flush all pending transmits and cancel any pending timeout work.
- *
- * This function is called with adap->lock held.
- */
-static void cec_flush(struct cec_adapter *adap)
-{
-       struct cec_data *data, *n;
-
-       /*
-        * If the adapter is disabled, or we're asked to stop,
-        * then cancel any pending transmits.
-        */
-       while (!list_empty(&adap->transmit_queue)) {
-               data = list_first_entry(&adap->transmit_queue,
-                                       struct cec_data, list);
-               cec_data_cancel(data, CEC_TX_STATUS_ABORTED);
-       }
-       if (adap->transmitting)
-               cec_data_cancel(adap->transmitting, CEC_TX_STATUS_ABORTED);
-
-       /* Cancel the pending timeout work. */
-       list_for_each_entry_safe(data, n, &adap->wait_queue, list) {
-               if (cancel_delayed_work(&data->work))
-                       cec_data_cancel(data, CEC_TX_STATUS_OK);
-               /*
-                * If cancel_delayed_work returned false, then
-                * the cec_wait_timeout function is running,
-                * which will call cec_data_completed. So no
-                * need to do anything special in that case.
-                */
-       }
-       /*
-        * If something went wrong and this counter isn't what it should
-        * be, then this will reset it back to 0. Warn if it is not 0,
-        * since it indicates a bug, either in this framework or in a
-        * CEC driver.
-        */
-       if (WARN_ON(adap->transmit_queue_sz))
-               adap->transmit_queue_sz = 0;
-}
-
-/*
- * Main CEC state machine
- *
- * Wait until the thread should be stopped, or we are not transmitting and
- * a new transmit message is queued up, in which case we start transmitting
- * that message. When the adapter finished transmitting the message it will
- * call cec_transmit_done().
- *
- * If the adapter is disabled, then remove all queued messages instead.
- *
- * If the current transmit times out, then cancel that transmit.
- */
-int cec_thread_func(void *_adap)
-{
-       struct cec_adapter *adap = _adap;
-
-       for (;;) {
-               unsigned int signal_free_time;
-               struct cec_data *data;
-               bool timeout = false;
-               u8 attempts;
-
-               if (adap->transmit_in_progress) {
-                       int err;
-
-                       /*
-                        * We are transmitting a message, so add a timeout
-                        * to prevent the state machine to get stuck waiting
-                        * for this message to finalize and add a check to
-                        * see if the adapter is disabled in which case the
-                        * transmit should be canceled.
-                        */
-                       err = wait_event_interruptible_timeout(adap->kthread_waitq,
-                               (adap->needs_hpd &&
-                                (!adap->is_configured && !adap->is_configuring)) ||
-                               kthread_should_stop() ||
-                               (!adap->transmit_in_progress &&
-                                !list_empty(&adap->transmit_queue)),
-                               msecs_to_jiffies(CEC_XFER_TIMEOUT_MS));
-                       timeout = err == 0;
-               } else {
-                       /* Otherwise we just wait for something to happen. */
-                       wait_event_interruptible(adap->kthread_waitq,
-                               kthread_should_stop() ||
-                               (!adap->transmit_in_progress &&
-                                !list_empty(&adap->transmit_queue)));
-               }
-
-               mutex_lock(&adap->lock);
-
-               if ((adap->needs_hpd &&
-                    (!adap->is_configured && !adap->is_configuring)) ||
-                   kthread_should_stop()) {
-                       cec_flush(adap);
-                       goto unlock;
-               }
-
-               if (adap->transmit_in_progress && timeout) {
-                       /*
-                        * If we timeout, then log that. Normally this does
-                        * not happen and it is an indication of a faulty CEC
-                        * adapter driver, or the CEC bus is in some weird
-                        * state. On rare occasions it can happen if there is
-                        * so much traffic on the bus that the adapter was
-                        * unable to transmit for CEC_XFER_TIMEOUT_MS (2.1s).
-                        */
-                       if (adap->transmitting) {
-                               pr_warn("cec-%s: message %*ph timed out\n", adap->name,
-                                       adap->transmitting->msg.len,
-                                       adap->transmitting->msg.msg);
-                               /* Just give up on this. */
-                               cec_data_cancel(adap->transmitting,
-                                               CEC_TX_STATUS_TIMEOUT);
-                       } else {
-                               pr_warn("cec-%s: transmit timed out\n", adap->name);
-                       }
-                       adap->transmit_in_progress = false;
-                       adap->tx_timeouts++;
-                       goto unlock;
-               }
-
-               /*
-                * If we are still transmitting, or there is nothing new to
-                * transmit, then just continue waiting.
-                */
-               if (adap->transmit_in_progress || list_empty(&adap->transmit_queue))
-                       goto unlock;
-
-               /* Get a new message to transmit */
-               data = list_first_entry(&adap->transmit_queue,
-                                       struct cec_data, list);
-               list_del_init(&data->list);
-               if (!WARN_ON(!data->adap->transmit_queue_sz))
-                       adap->transmit_queue_sz--;
-
-               /* Make this the current transmitting message */
-               adap->transmitting = data;
-
-               /*
-                * Suggested number of attempts as per the CEC 2.0 spec:
-                * 4 attempts is the default, except for 'secondary poll
-                * messages', i.e. poll messages not sent during the adapter
-                * configuration phase when it allocates logical addresses.
-                */
-               if (data->msg.len == 1 && adap->is_configured)
-                       attempts = 2;
-               else
-                       attempts = 4;
-
-               /* Set the suggested signal free time */
-               if (data->attempts) {
-                       /* should be >= 3 data bit periods for a retry */
-                       signal_free_time = CEC_SIGNAL_FREE_TIME_RETRY;
-               } else if (adap->last_initiator !=
-                          cec_msg_initiator(&data->msg)) {
-                       /* should be >= 5 data bit periods for new initiator */
-                       signal_free_time = CEC_SIGNAL_FREE_TIME_NEW_INITIATOR;
-                       adap->last_initiator = cec_msg_initiator(&data->msg);
-               } else {
-                       /*
-                        * should be >= 7 data bit periods for sending another
-                        * frame immediately after another.
-                        */
-                       signal_free_time = CEC_SIGNAL_FREE_TIME_NEXT_XFER;
-               }
-               if (data->attempts == 0)
-                       data->attempts = attempts;
-
-               /* Tell the adapter to transmit, cancel on error */
-               if (adap->ops->adap_transmit(adap, data->attempts,
-                                            signal_free_time, &data->msg))
-                       cec_data_cancel(data, CEC_TX_STATUS_ABORTED);
-               else
-                       adap->transmit_in_progress = true;
-
-unlock:
-               mutex_unlock(&adap->lock);
-
-               if (kthread_should_stop())
-                       break;
-       }
-       return 0;
-}
-
-/*
- * Called by the CEC adapter if a transmit finished.
- */
-void cec_transmit_done_ts(struct cec_adapter *adap, u8 status,
-                         u8 arb_lost_cnt, u8 nack_cnt, u8 low_drive_cnt,
-                         u8 error_cnt, ktime_t ts)
-{
-       struct cec_data *data;
-       struct cec_msg *msg;
-       unsigned int attempts_made = arb_lost_cnt + nack_cnt +
-                                    low_drive_cnt + error_cnt;
-
-       dprintk(2, "%s: status 0x%02x\n", __func__, status);
-       if (attempts_made < 1)
-               attempts_made = 1;
-
-       mutex_lock(&adap->lock);
-       data = adap->transmitting;
-       if (!data) {
-               /*
-                * This might happen if a transmit was issued and the cable is
-                * unplugged while the transmit is ongoing. Ignore this
-                * transmit in that case.
-                */
-               if (!adap->transmit_in_progress)
-                       dprintk(1, "%s was called without an ongoing transmit!\n",
-                               __func__);
-               adap->transmit_in_progress = false;
-               goto wake_thread;
-       }
-       adap->transmit_in_progress = false;
-
-       msg = &data->msg;
-
-       /* Drivers must fill in the status! */
-       WARN_ON(status == 0);
-       msg->tx_ts = ktime_to_ns(ts);
-       msg->tx_status |= status;
-       msg->tx_arb_lost_cnt += arb_lost_cnt;
-       msg->tx_nack_cnt += nack_cnt;
-       msg->tx_low_drive_cnt += low_drive_cnt;
-       msg->tx_error_cnt += error_cnt;
-
-       /* Mark that we're done with this transmit */
-       adap->transmitting = NULL;
-
-       /*
-        * If there are still retry attempts left and there was an error and
-        * the hardware didn't signal that it retried itself (by setting
-        * CEC_TX_STATUS_MAX_RETRIES), then we will retry ourselves.
-        */
-       if (data->attempts > attempts_made &&
-           !(status & (CEC_TX_STATUS_MAX_RETRIES | CEC_TX_STATUS_OK))) {
-               /* Retry this message */
-               data->attempts -= attempts_made;
-               if (msg->timeout)
-                       dprintk(2, "retransmit: %*ph (attempts: %d, wait for 0x%02x)\n",
-                               msg->len, msg->msg, data->attempts, msg->reply);
-               else
-                       dprintk(2, "retransmit: %*ph (attempts: %d)\n",
-                               msg->len, msg->msg, data->attempts);
-               /* Add the message in front of the transmit queue */
-               list_add(&data->list, &adap->transmit_queue);
-               adap->transmit_queue_sz++;
-               goto wake_thread;
-       }
-
-       data->attempts = 0;
-
-       /* Always set CEC_TX_STATUS_MAX_RETRIES on error */
-       if (!(status & CEC_TX_STATUS_OK))
-               msg->tx_status |= CEC_TX_STATUS_MAX_RETRIES;
-
-       /* Queue transmitted message for monitoring purposes */
-       cec_queue_msg_monitor(adap, msg, 1);
-
-       if ((status & CEC_TX_STATUS_OK) && adap->is_configured &&
-           msg->timeout) {
-               /*
-                * Queue the message into the wait queue if we want to wait
-                * for a reply.
-                */
-               list_add_tail(&data->list, &adap->wait_queue);
-               schedule_delayed_work(&data->work,
-                                     msecs_to_jiffies(msg->timeout));
-       } else {
-               /* Otherwise we're done */
-               cec_data_completed(data);
-       }
-
-wake_thread:
-       /*
-        * Wake up the main thread to see if another message is ready
-        * for transmitting or to retry the current message.
-        */
-       wake_up_interruptible(&adap->kthread_waitq);
-       mutex_unlock(&adap->lock);
-}
-EXPORT_SYMBOL_GPL(cec_transmit_done_ts);
-
-void cec_transmit_attempt_done_ts(struct cec_adapter *adap,
-                                 u8 status, ktime_t ts)
-{
-       switch (status & ~CEC_TX_STATUS_MAX_RETRIES) {
-       case CEC_TX_STATUS_OK:
-               cec_transmit_done_ts(adap, status, 0, 0, 0, 0, ts);
-               return;
-       case CEC_TX_STATUS_ARB_LOST:
-               cec_transmit_done_ts(adap, status, 1, 0, 0, 0, ts);
-               return;
-       case CEC_TX_STATUS_NACK:
-               cec_transmit_done_ts(adap, status, 0, 1, 0, 0, ts);
-               return;
-       case CEC_TX_STATUS_LOW_DRIVE:
-               cec_transmit_done_ts(adap, status, 0, 0, 1, 0, ts);
-               return;
-       case CEC_TX_STATUS_ERROR:
-               cec_transmit_done_ts(adap, status, 0, 0, 0, 1, ts);
-               return;
-       default:
-               /* Should never happen */
-               WARN(1, "cec-%s: invalid status 0x%02x\n", adap->name, status);
-               return;
-       }
-}
-EXPORT_SYMBOL_GPL(cec_transmit_attempt_done_ts);
-
-/*
- * Called when waiting for a reply times out.
- */
-static void cec_wait_timeout(struct work_struct *work)
-{
-       struct cec_data *data = container_of(work, struct cec_data, work.work);
-       struct cec_adapter *adap = data->adap;
-
-       mutex_lock(&adap->lock);
-       /*
-        * Sanity check in case the timeout and the arrival of the message
-        * happened at the same time.
-        */
-       if (list_empty(&data->list))
-               goto unlock;
-
-       /* Mark the message as timed out */
-       list_del_init(&data->list);
-       data->msg.rx_ts = ktime_get_ns();
-       data->msg.rx_status = CEC_RX_STATUS_TIMEOUT;
-       cec_data_completed(data);
-unlock:
-       mutex_unlock(&adap->lock);
-}
-
-/*
- * Transmit a message. The fh argument may be NULL if the transmit is not
- * associated with a specific filehandle.
- *
- * This function is called with adap->lock held.
- */
-int cec_transmit_msg_fh(struct cec_adapter *adap, struct cec_msg *msg,
-                       struct cec_fh *fh, bool block)
-{
-       struct cec_data *data;
-       bool is_raw = msg_is_raw(msg);
-
-       msg->rx_ts = 0;
-       msg->tx_ts = 0;
-       msg->rx_status = 0;
-       msg->tx_status = 0;
-       msg->tx_arb_lost_cnt = 0;
-       msg->tx_nack_cnt = 0;
-       msg->tx_low_drive_cnt = 0;
-       msg->tx_error_cnt = 0;
-       msg->sequence = 0;
-
-       if (msg->reply && msg->timeout == 0) {
-               /* Make sure the timeout isn't 0. */
-               msg->timeout = 1000;
-       }
-       msg->flags &= CEC_MSG_FL_REPLY_TO_FOLLOWERS | CEC_MSG_FL_RAW;
-
-       if (!msg->timeout)
-               msg->flags &= ~CEC_MSG_FL_REPLY_TO_FOLLOWERS;
-
-       /* Sanity checks */
-       if (msg->len == 0 || msg->len > CEC_MAX_MSG_SIZE) {
-               dprintk(1, "%s: invalid length %d\n", __func__, msg->len);
-               return -EINVAL;
-       }
-
-       memset(msg->msg + msg->len, 0, sizeof(msg->msg) - msg->len);
-
-       if (msg->timeout)
-               dprintk(2, "%s: %*ph (wait for 0x%02x%s)\n",
-                       __func__, msg->len, msg->msg, msg->reply,
-                       !block ? ", nb" : "");
-       else
-               dprintk(2, "%s: %*ph%s\n",
-                       __func__, msg->len, msg->msg, !block ? " (nb)" : "");
-
-       if (msg->timeout && msg->len == 1) {
-               dprintk(1, "%s: can't reply to poll msg\n", __func__);
-               return -EINVAL;
-       }
-
-       if (is_raw) {
-               if (!capable(CAP_SYS_RAWIO))
-                       return -EPERM;
-       } else {
-               /* A CDC-Only device can only send CDC messages */
-               if ((adap->log_addrs.flags & CEC_LOG_ADDRS_FL_CDC_ONLY) &&
-                   (msg->len == 1 || msg->msg[1] != CEC_MSG_CDC_MESSAGE)) {
-                       dprintk(1, "%s: not a CDC message\n", __func__);
-                       return -EINVAL;
-               }
-
-               if (msg->len >= 4 && msg->msg[1] == CEC_MSG_CDC_MESSAGE) {
-                       msg->msg[2] = adap->phys_addr >> 8;
-                       msg->msg[3] = adap->phys_addr & 0xff;
-               }
-
-               if (msg->len == 1) {
-                       if (cec_msg_destination(msg) == 0xf) {
-                               dprintk(1, "%s: invalid poll message\n",
-                                       __func__);
-                               return -EINVAL;
-                       }
-                       if (cec_has_log_addr(adap, cec_msg_destination(msg))) {
-                               /*
-                                * If the destination is a logical address our
-                                * adapter has already claimed, then just NACK
-                                * this. It depends on the hardware what it will
-                                * do with a POLL to itself (some OK this), so
-                                * it is just as easy to handle it here so the
-                                * behavior will be consistent.
-                                */
-                               msg->tx_ts = ktime_get_ns();
-                               msg->tx_status = CEC_TX_STATUS_NACK |
-                                       CEC_TX_STATUS_MAX_RETRIES;
-                               msg->tx_nack_cnt = 1;
-                               msg->sequence = ++adap->sequence;
-                               if (!msg->sequence)
-                                       msg->sequence = ++adap->sequence;
-                               return 0;
-                       }
-               }
-               if (msg->len > 1 && !cec_msg_is_broadcast(msg) &&
-                   cec_has_log_addr(adap, cec_msg_destination(msg))) {
-                       dprintk(1, "%s: destination is the adapter itself\n",
-                               __func__);
-                       return -EINVAL;
-               }
-               if (msg->len > 1 && adap->is_configured &&
-                   !cec_has_log_addr(adap, cec_msg_initiator(msg))) {
-                       dprintk(1, "%s: initiator has unknown logical address %d\n",
-                               __func__, cec_msg_initiator(msg));
-                       return -EINVAL;
-               }
-               /*
-                * Special case: allow Ping and IMAGE/TEXT_VIEW_ON to be
-                * transmitted to a TV, even if the adapter is unconfigured.
-                * This makes it possible to detect or wake up displays that
-                * pull down the HPD when in standby.
-                */
-               if (!adap->is_configured && !adap->is_configuring &&
-                   (msg->len > 2 ||
-                    cec_msg_destination(msg) != CEC_LOG_ADDR_TV ||
-                    (msg->len == 2 && msg->msg[1] != CEC_MSG_IMAGE_VIEW_ON &&
-                     msg->msg[1] != CEC_MSG_TEXT_VIEW_ON))) {
-                       dprintk(1, "%s: adapter is unconfigured\n", __func__);
-                       return -ENONET;
-               }
-       }
-
-       if (!adap->is_configured && !adap->is_configuring) {
-               if (adap->needs_hpd) {
-                       dprintk(1, "%s: adapter is unconfigured and needs HPD\n",
-                               __func__);
-                       return -ENONET;
-               }
-               if (msg->reply) {
-                       dprintk(1, "%s: invalid msg->reply\n", __func__);
-                       return -EINVAL;
-               }
-       }
-
-       if (adap->transmit_queue_sz >= CEC_MAX_MSG_TX_QUEUE_SZ) {
-               dprintk(2, "%s: transmit queue full\n", __func__);
-               return -EBUSY;
-       }
-
-       data = kzalloc(sizeof(*data), GFP_KERNEL);
-       if (!data)
-               return -ENOMEM;
-
-       msg->sequence = ++adap->sequence;
-       if (!msg->sequence)
-               msg->sequence = ++adap->sequence;
-
-       data->msg = *msg;
-       data->fh = fh;
-       data->adap = adap;
-       data->blocking = block;
-
-       init_completion(&data->c);
-       INIT_DELAYED_WORK(&data->work, cec_wait_timeout);
-
-       if (fh)
-               list_add_tail(&data->xfer_list, &fh->xfer_list);
-
-       list_add_tail(&data->list, &adap->transmit_queue);
-       adap->transmit_queue_sz++;
-       if (!adap->transmitting)
-               wake_up_interruptible(&adap->kthread_waitq);
-
-       /* All done if we don't need to block waiting for completion */
-       if (!block)
-               return 0;
-
-       /*
-        * Release the lock and wait, retake the lock afterwards.
-        */
-       mutex_unlock(&adap->lock);
-       wait_for_completion_killable(&data->c);
-       if (!data->completed)
-               cancel_delayed_work_sync(&data->work);
-       mutex_lock(&adap->lock);
-
-       /* Cancel the transmit if it was interrupted */
-       if (!data->completed)
-               cec_data_cancel(data, CEC_TX_STATUS_ABORTED);
-
-       /* The transmit completed (possibly with an error) */
-       *msg = data->msg;
-       kfree(data);
-       return 0;
-}
-
-/* Helper function to be used by drivers and this framework. */
-int cec_transmit_msg(struct cec_adapter *adap, struct cec_msg *msg,
-                    bool block)
-{
-       int ret;
-
-       mutex_lock(&adap->lock);
-       ret = cec_transmit_msg_fh(adap, msg, NULL, block);
-       mutex_unlock(&adap->lock);
-       return ret;
-}
-EXPORT_SYMBOL_GPL(cec_transmit_msg);
-
-/*
- * I don't like forward references but without this the low-level
- * cec_received_msg() function would come after a bunch of high-level
- * CEC protocol handling functions. That was very confusing.
- */
-static int cec_receive_notify(struct cec_adapter *adap, struct cec_msg *msg,
-                             bool is_reply);
-
-#define DIRECTED       0x80
-#define BCAST1_4       0x40
-#define BCAST2_0       0x20    /* broadcast only allowed for >= 2.0 */
-#define BCAST          (BCAST1_4 | BCAST2_0)
-#define BOTH           (BCAST | DIRECTED)
-
-/*
- * Specify minimum length and whether the message is directed, broadcast
- * or both. Messages that do not match the criteria are ignored as per
- * the CEC specification.
- */
-static const u8 cec_msg_size[256] = {
-       [CEC_MSG_ACTIVE_SOURCE] = 4 | BCAST,
-       [CEC_MSG_IMAGE_VIEW_ON] = 2 | DIRECTED,
-       [CEC_MSG_TEXT_VIEW_ON] = 2 | DIRECTED,
-       [CEC_MSG_INACTIVE_SOURCE] = 4 | DIRECTED,
-       [CEC_MSG_REQUEST_ACTIVE_SOURCE] = 2 | BCAST,
-       [CEC_MSG_ROUTING_CHANGE] = 6 | BCAST,
-       [CEC_MSG_ROUTING_INFORMATION] = 4 | BCAST,
-       [CEC_MSG_SET_STREAM_PATH] = 4 | BCAST,
-       [CEC_MSG_STANDBY] = 2 | BOTH,
-       [CEC_MSG_RECORD_OFF] = 2 | DIRECTED,
-       [CEC_MSG_RECORD_ON] = 3 | DIRECTED,
-       [CEC_MSG_RECORD_STATUS] = 3 | DIRECTED,
-       [CEC_MSG_RECORD_TV_SCREEN] = 2 | DIRECTED,
-       [CEC_MSG_CLEAR_ANALOGUE_TIMER] = 13 | DIRECTED,
-       [CEC_MSG_CLEAR_DIGITAL_TIMER] = 16 | DIRECTED,
-       [CEC_MSG_CLEAR_EXT_TIMER] = 13 | DIRECTED,
-       [CEC_MSG_SET_ANALOGUE_TIMER] = 13 | DIRECTED,
-       [CEC_MSG_SET_DIGITAL_TIMER] = 16 | DIRECTED,
-       [CEC_MSG_SET_EXT_TIMER] = 13 | DIRECTED,
-       [CEC_MSG_SET_TIMER_PROGRAM_TITLE] = 2 | DIRECTED,
-       [CEC_MSG_TIMER_CLEARED_STATUS] = 3 | DIRECTED,
-       [CEC_MSG_TIMER_STATUS] = 3 | DIRECTED,
-       [CEC_MSG_CEC_VERSION] = 3 | DIRECTED,
-       [CEC_MSG_GET_CEC_VERSION] = 2 | DIRECTED,
-       [CEC_MSG_GIVE_PHYSICAL_ADDR] = 2 | DIRECTED,
-       [CEC_MSG_GET_MENU_LANGUAGE] = 2 | DIRECTED,
-       [CEC_MSG_REPORT_PHYSICAL_ADDR] = 5 | BCAST,
-       [CEC_MSG_SET_MENU_LANGUAGE] = 5 | BCAST,
-       [CEC_MSG_REPORT_FEATURES] = 6 | BCAST,
-       [CEC_MSG_GIVE_FEATURES] = 2 | DIRECTED,
-       [CEC_MSG_DECK_CONTROL] = 3 | DIRECTED,
-       [CEC_MSG_DECK_STATUS] = 3 | DIRECTED,
-       [CEC_MSG_GIVE_DECK_STATUS] = 3 | DIRECTED,
-       [CEC_MSG_PLAY] = 3 | DIRECTED,
-       [CEC_MSG_GIVE_TUNER_DEVICE_STATUS] = 3 | DIRECTED,
-       [CEC_MSG_SELECT_ANALOGUE_SERVICE] = 6 | DIRECTED,
-       [CEC_MSG_SELECT_DIGITAL_SERVICE] = 9 | DIRECTED,
-       [CEC_MSG_TUNER_DEVICE_STATUS] = 7 | DIRECTED,
-       [CEC_MSG_TUNER_STEP_DECREMENT] = 2 | DIRECTED,
-       [CEC_MSG_TUNER_STEP_INCREMENT] = 2 | DIRECTED,
-       [CEC_MSG_DEVICE_VENDOR_ID] = 5 | BCAST,
-       [CEC_MSG_GIVE_DEVICE_VENDOR_ID] = 2 | DIRECTED,
-       [CEC_MSG_VENDOR_COMMAND] = 2 | DIRECTED,
-       [CEC_MSG_VENDOR_COMMAND_WITH_ID] = 5 | BOTH,
-       [CEC_MSG_VENDOR_REMOTE_BUTTON_DOWN] = 2 | BOTH,
-       [CEC_MSG_VENDOR_REMOTE_BUTTON_UP] = 2 | BOTH,
-       [CEC_MSG_SET_OSD_STRING] = 3 | DIRECTED,
-       [CEC_MSG_GIVE_OSD_NAME] = 2 | DIRECTED,
-       [CEC_MSG_SET_OSD_NAME] = 2 | DIRECTED,
-       [CEC_MSG_MENU_REQUEST] = 3 | DIRECTED,
-       [CEC_MSG_MENU_STATUS] = 3 | DIRECTED,
-       [CEC_MSG_USER_CONTROL_PRESSED] = 3 | DIRECTED,
-       [CEC_MSG_USER_CONTROL_RELEASED] = 2 | DIRECTED,
-       [CEC_MSG_GIVE_DEVICE_POWER_STATUS] = 2 | DIRECTED,
-       [CEC_MSG_REPORT_POWER_STATUS] = 3 | DIRECTED | BCAST2_0,
-       [CEC_MSG_FEATURE_ABORT] = 4 | DIRECTED,
-       [CEC_MSG_ABORT] = 2 | DIRECTED,
-       [CEC_MSG_GIVE_AUDIO_STATUS] = 2 | DIRECTED,
-       [CEC_MSG_GIVE_SYSTEM_AUDIO_MODE_STATUS] = 2 | DIRECTED,
-       [CEC_MSG_REPORT_AUDIO_STATUS] = 3 | DIRECTED,
-       [CEC_MSG_REPORT_SHORT_AUDIO_DESCRIPTOR] = 2 | DIRECTED,
-       [CEC_MSG_REQUEST_SHORT_AUDIO_DESCRIPTOR] = 2 | DIRECTED,
-       [CEC_MSG_SET_SYSTEM_AUDIO_MODE] = 3 | BOTH,
-       [CEC_MSG_SYSTEM_AUDIO_MODE_REQUEST] = 2 | DIRECTED,
-       [CEC_MSG_SYSTEM_AUDIO_MODE_STATUS] = 3 | DIRECTED,
-       [CEC_MSG_SET_AUDIO_RATE] = 3 | DIRECTED,
-       [CEC_MSG_INITIATE_ARC] = 2 | DIRECTED,
-       [CEC_MSG_REPORT_ARC_INITIATED] = 2 | DIRECTED,
-       [CEC_MSG_REPORT_ARC_TERMINATED] = 2 | DIRECTED,
-       [CEC_MSG_REQUEST_ARC_INITIATION] = 2 | DIRECTED,
-       [CEC_MSG_REQUEST_ARC_TERMINATION] = 2 | DIRECTED,
-       [CEC_MSG_TERMINATE_ARC] = 2 | DIRECTED,
-       [CEC_MSG_REQUEST_CURRENT_LATENCY] = 4 | BCAST,
-       [CEC_MSG_REPORT_CURRENT_LATENCY] = 6 | BCAST,
-       [CEC_MSG_CDC_MESSAGE] = 2 | BCAST,
-};
-
-/* Called by the CEC adapter if a message is received */
-void cec_received_msg_ts(struct cec_adapter *adap,
-                        struct cec_msg *msg, ktime_t ts)
-{
-       struct cec_data *data;
-       u8 msg_init = cec_msg_initiator(msg);
-       u8 msg_dest = cec_msg_destination(msg);
-       u8 cmd = msg->msg[1];
-       bool is_reply = false;
-       bool valid_la = true;
-       u8 min_len = 0;
-
-       if (WARN_ON(!msg->len || msg->len > CEC_MAX_MSG_SIZE))
-               return;
-
-       /*
-        * Some CEC adapters will receive the messages that they transmitted.
-        * This test filters out those messages by checking if we are the
-        * initiator, and just returning in that case.
-        *
-        * Note that this won't work if this is an Unregistered device.
-        *
-        * It is bad practice if the hardware receives the message that it
-        * transmitted and luckily most CEC adapters behave correctly in this
-        * respect.
-        */
-       if (msg_init != CEC_LOG_ADDR_UNREGISTERED &&
-           cec_has_log_addr(adap, msg_init))
-               return;
-
-       msg->rx_ts = ktime_to_ns(ts);
-       msg->rx_status = CEC_RX_STATUS_OK;
-       msg->sequence = msg->reply = msg->timeout = 0;
-       msg->tx_status = 0;
-       msg->tx_ts = 0;
-       msg->tx_arb_lost_cnt = 0;
-       msg->tx_nack_cnt = 0;
-       msg->tx_low_drive_cnt = 0;
-       msg->tx_error_cnt = 0;
-       msg->flags = 0;
-       memset(msg->msg + msg->len, 0, sizeof(msg->msg) - msg->len);
-
-       mutex_lock(&adap->lock);
-       dprintk(2, "%s: %*ph\n", __func__, msg->len, msg->msg);
-
-       adap->last_initiator = 0xff;
-
-       /* Check if this message was for us (directed or broadcast). */
-       if (!cec_msg_is_broadcast(msg))
-               valid_la = cec_has_log_addr(adap, msg_dest);
-
-       /*
-        * Check if the length is not too short or if the message is a
-        * broadcast message where a directed message was expected or
-        * vice versa. If so, then the message has to be ignored (according
-        * to section CEC 7.3 and CEC 12.2).
-        */
-       if (valid_la && msg->len > 1 && cec_msg_size[cmd]) {
-               u8 dir_fl = cec_msg_size[cmd] & BOTH;
-
-               min_len = cec_msg_size[cmd] & 0x1f;
-               if (msg->len < min_len)
-                       valid_la = false;
-               else if (!cec_msg_is_broadcast(msg) && !(dir_fl & DIRECTED))
-                       valid_la = false;
-               else if (cec_msg_is_broadcast(msg) && !(dir_fl & BCAST))
-                       valid_la = false;
-               else if (cec_msg_is_broadcast(msg) &&
-                        adap->log_addrs.cec_version < CEC_OP_CEC_VERSION_2_0 &&
-                        !(dir_fl & BCAST1_4))
-                       valid_la = false;
-       }
-       if (valid_la && min_len) {
-               /* These messages have special length requirements */
-               switch (cmd) {
-               case CEC_MSG_TIMER_STATUS:
-                       if (msg->msg[2] & 0x10) {
-                               switch (msg->msg[2] & 0xf) {
-                               case CEC_OP_PROG_INFO_NOT_ENOUGH_SPACE:
-                               case CEC_OP_PROG_INFO_MIGHT_NOT_BE_ENOUGH_SPACE:
-                                       if (msg->len < 5)
-                                               valid_la = false;
-                                       break;
-                               }
-                       } else if ((msg->msg[2] & 0xf) == CEC_OP_PROG_ERROR_DUPLICATE) {
-                               if (msg->len < 5)
-                                       valid_la = false;
-                       }
-                       break;
-               case CEC_MSG_RECORD_ON:
-                       switch (msg->msg[2]) {
-                       case CEC_OP_RECORD_SRC_OWN:
-                               break;
-                       case CEC_OP_RECORD_SRC_DIGITAL:
-                               if (msg->len < 10)
-                                       valid_la = false;
-                               break;
-                       case CEC_OP_RECORD_SRC_ANALOG:
-                               if (msg->len < 7)
-                                       valid_la = false;
-                               break;
-                       case CEC_OP_RECORD_SRC_EXT_PLUG:
-                               if (msg->len < 4)
-                                       valid_la = false;
-                               break;
-                       case CEC_OP_RECORD_SRC_EXT_PHYS_ADDR:
-                               if (msg->len < 5)
-                                       valid_la = false;
-                               break;
-                       }
-                       break;
-               }
-       }
-
-       /* It's a valid message and not a poll or CDC message */
-       if (valid_la && msg->len > 1 && cmd != CEC_MSG_CDC_MESSAGE) {
-               bool abort = cmd == CEC_MSG_FEATURE_ABORT;
-
-               /* The aborted command is in msg[2] */
-               if (abort)
-                       cmd = msg->msg[2];
-
-               /*
-                * Walk over all transmitted messages that are waiting for a
-                * reply.
-                */
-               list_for_each_entry(data, &adap->wait_queue, list) {
-                       struct cec_msg *dst = &data->msg;
-
-                       /*
-                        * The *only* CEC message that has two possible replies
-                        * is CEC_MSG_INITIATE_ARC.
-                        * In this case allow either of the two replies.
-                        */
-                       if (!abort && dst->msg[1] == CEC_MSG_INITIATE_ARC &&
-                           (cmd == CEC_MSG_REPORT_ARC_INITIATED ||
-                            cmd == CEC_MSG_REPORT_ARC_TERMINATED) &&
-                           (dst->reply == CEC_MSG_REPORT_ARC_INITIATED ||
-                            dst->reply == CEC_MSG_REPORT_ARC_TERMINATED))
-                               dst->reply = cmd;
-
-                       /* Does the command match? */
-                       if ((abort && cmd != dst->msg[1]) ||
-                           (!abort && cmd != dst->reply))
-                               continue;
-
-                       /* Does the addressing match? */
-                       if (msg_init != cec_msg_destination(dst) &&
-                           !cec_msg_is_broadcast(dst))
-                               continue;
-
-                       /* We got a reply */
-                       memcpy(dst->msg, msg->msg, msg->len);
-                       dst->len = msg->len;
-                       dst->rx_ts = msg->rx_ts;
-                       dst->rx_status = msg->rx_status;
-                       if (abort)
-                               dst->rx_status |= CEC_RX_STATUS_FEATURE_ABORT;
-                       msg->flags = dst->flags;
-                       /* Remove it from the wait_queue */
-                       list_del_init(&data->list);
-
-                       /* Cancel the pending timeout work */
-                       if (!cancel_delayed_work(&data->work)) {
-                               mutex_unlock(&adap->lock);
-                               flush_scheduled_work();
-                               mutex_lock(&adap->lock);
-                       }
-                       /*
-                        * Mark this as a reply, provided someone is still
-                        * waiting for the answer.
-                        */
-                       if (data->fh)
-                               is_reply = true;
-                       cec_data_completed(data);
-                       break;
-               }
-       }
-       mutex_unlock(&adap->lock);
-
-       /* Pass the message on to any monitoring filehandles */
-       cec_queue_msg_monitor(adap, msg, valid_la);
-
-       /* We're done if it is not for us or a poll message */
-       if (!valid_la || msg->len <= 1)
-               return;
-
-       if (adap->log_addrs.log_addr_mask == 0)
-               return;
-
-       /*
-        * Process the message on the protocol level. If is_reply is true,
-        * then cec_receive_notify() won't pass on the reply to the listener(s)
-        * since that was already done by cec_data_completed() above.
-        */
-       cec_receive_notify(adap, msg, is_reply);
-}
-EXPORT_SYMBOL_GPL(cec_received_msg_ts);
-
-/* Logical Address Handling */
-
-/*
- * Attempt to claim a specific logical address.
- *
- * This function is called with adap->lock held.
- */
-static int cec_config_log_addr(struct cec_adapter *adap,
-                              unsigned int idx,
-                              unsigned int log_addr)
-{
-       struct cec_log_addrs *las = &adap->log_addrs;
-       struct cec_msg msg = { };
-       const unsigned int max_retries = 2;
-       unsigned int i;
-       int err;
-
-       if (cec_has_log_addr(adap, log_addr))
-               return 0;
-
-       /* Send poll message */
-       msg.len = 1;
-       msg.msg[0] = (log_addr << 4) | log_addr;
-
-       for (i = 0; i < max_retries; i++) {
-               err = cec_transmit_msg_fh(adap, &msg, NULL, true);
-
-               /*
-                * While trying to poll the physical address was reset
-                * and the adapter was unconfigured, so bail out.
-                */
-               if (!adap->is_configuring)
-                       return -EINTR;
-
-               if (err)
-                       return err;
-
-               /*
-                * The message was aborted due to a disconnect or
-                * unconfigure, just bail out.
-                */
-               if (msg.tx_status & CEC_TX_STATUS_ABORTED)
-                       return -EINTR;
-               if (msg.tx_status & CEC_TX_STATUS_OK)
-                       return 0;
-               if (msg.tx_status & CEC_TX_STATUS_NACK)
-                       break;
-               /*
-                * Retry up to max_retries times if the message was neither
-                * OKed or NACKed. This can happen due to e.g. a Lost
-                * Arbitration condition.
-                */
-       }
-
-       /*
-        * If we are unable to get an OK or a NACK after max_retries attempts
-        * (and note that each attempt already consists of four polls), then
-        * then we assume that something is really weird and that it is not a
-        * good idea to try and claim this logical address.
-        */
-       if (i == max_retries)
-               return 0;
-
-       /*
-        * Message not acknowledged, so this logical
-        * address is free to use.
-        */
-       err = adap->ops->adap_log_addr(adap, log_addr);
-       if (err)
-               return err;
-
-       las->log_addr[idx] = log_addr;
-       las->log_addr_mask |= 1 << log_addr;
-       adap->phys_addrs[log_addr] = adap->phys_addr;
-       return 1;
-}
-
-/*
- * Unconfigure the adapter: clear all logical addresses and send
- * the state changed event.
- *
- * This function is called with adap->lock held.
- */
-static void cec_adap_unconfigure(struct cec_adapter *adap)
-{
-       if (!adap->needs_hpd ||
-           adap->phys_addr != CEC_PHYS_ADDR_INVALID)
-               WARN_ON(adap->ops->adap_log_addr(adap, CEC_LOG_ADDR_INVALID));
-       adap->log_addrs.log_addr_mask = 0;
-       adap->is_configuring = false;
-       adap->is_configured = false;
-       memset(adap->phys_addrs, 0xff, sizeof(adap->phys_addrs));
-       cec_flush(adap);
-       wake_up_interruptible(&adap->kthread_waitq);
-       cec_post_state_event(adap);
-}
-
-/*
- * Attempt to claim the required logical addresses.
- */
-static int cec_config_thread_func(void *arg)
-{
-       /* The various LAs for each type of device */
-       static const u8 tv_log_addrs[] = {
-               CEC_LOG_ADDR_TV, CEC_LOG_ADDR_SPECIFIC,
-               CEC_LOG_ADDR_INVALID
-       };
-       static const u8 record_log_addrs[] = {
-               CEC_LOG_ADDR_RECORD_1, CEC_LOG_ADDR_RECORD_2,
-               CEC_LOG_ADDR_RECORD_3,
-               CEC_LOG_ADDR_BACKUP_1, CEC_LOG_ADDR_BACKUP_2,
-               CEC_LOG_ADDR_INVALID
-       };
-       static const u8 tuner_log_addrs[] = {
-               CEC_LOG_ADDR_TUNER_1, CEC_LOG_ADDR_TUNER_2,
-               CEC_LOG_ADDR_TUNER_3, CEC_LOG_ADDR_TUNER_4,
-               CEC_LOG_ADDR_BACKUP_1, CEC_LOG_ADDR_BACKUP_2,
-               CEC_LOG_ADDR_INVALID
-       };
-       static const u8 playback_log_addrs[] = {
-               CEC_LOG_ADDR_PLAYBACK_1, CEC_LOG_ADDR_PLAYBACK_2,
-               CEC_LOG_ADDR_PLAYBACK_3,
-               CEC_LOG_ADDR_BACKUP_1, CEC_LOG_ADDR_BACKUP_2,
-               CEC_LOG_ADDR_INVALID
-       };
-       static const u8 audiosystem_log_addrs[] = {
-               CEC_LOG_ADDR_AUDIOSYSTEM,
-               CEC_LOG_ADDR_INVALID
-       };
-       static const u8 specific_use_log_addrs[] = {
-               CEC_LOG_ADDR_SPECIFIC,
-               CEC_LOG_ADDR_BACKUP_1, CEC_LOG_ADDR_BACKUP_2,
-               CEC_LOG_ADDR_INVALID
-       };
-       static const u8 *type2addrs[6] = {
-               [CEC_LOG_ADDR_TYPE_TV] = tv_log_addrs,
-               [CEC_LOG_ADDR_TYPE_RECORD] = record_log_addrs,
-               [CEC_LOG_ADDR_TYPE_TUNER] = tuner_log_addrs,
-               [CEC_LOG_ADDR_TYPE_PLAYBACK] = playback_log_addrs,
-               [CEC_LOG_ADDR_TYPE_AUDIOSYSTEM] = audiosystem_log_addrs,
-               [CEC_LOG_ADDR_TYPE_SPECIFIC] = specific_use_log_addrs,
-       };
-       static const u16 type2mask[] = {
-               [CEC_LOG_ADDR_TYPE_TV] = CEC_LOG_ADDR_MASK_TV,
-               [CEC_LOG_ADDR_TYPE_RECORD] = CEC_LOG_ADDR_MASK_RECORD,
-               [CEC_LOG_ADDR_TYPE_TUNER] = CEC_LOG_ADDR_MASK_TUNER,
-               [CEC_LOG_ADDR_TYPE_PLAYBACK] = CEC_LOG_ADDR_MASK_PLAYBACK,
-               [CEC_LOG_ADDR_TYPE_AUDIOSYSTEM] = CEC_LOG_ADDR_MASK_AUDIOSYSTEM,
-               [CEC_LOG_ADDR_TYPE_SPECIFIC] = CEC_LOG_ADDR_MASK_SPECIFIC,
-       };
-       struct cec_adapter *adap = arg;
-       struct cec_log_addrs *las = &adap->log_addrs;
-       int err;
-       int i, j;
-
-       mutex_lock(&adap->lock);
-       dprintk(1, "physical address: %x.%x.%x.%x, claim %d logical addresses\n",
-               cec_phys_addr_exp(adap->phys_addr), las->num_log_addrs);
-       las->log_addr_mask = 0;
-
-       if (las->log_addr_type[0] == CEC_LOG_ADDR_TYPE_UNREGISTERED)
-               goto configured;
-
-       for (i = 0; i < las->num_log_addrs; i++) {
-               unsigned int type = las->log_addr_type[i];
-               const u8 *la_list;
-               u8 last_la;
-
-               /*
-                * The TV functionality can only map to physical address 0.
-                * For any other address, try the Specific functionality
-                * instead as per the spec.
-                */
-               if (adap->phys_addr && type == CEC_LOG_ADDR_TYPE_TV)
-                       type = CEC_LOG_ADDR_TYPE_SPECIFIC;
-
-               la_list = type2addrs[type];
-               last_la = las->log_addr[i];
-               las->log_addr[i] = CEC_LOG_ADDR_INVALID;
-               if (last_la == CEC_LOG_ADDR_INVALID ||
-                   last_la == CEC_LOG_ADDR_UNREGISTERED ||
-                   !((1 << last_la) & type2mask[type]))
-                       last_la = la_list[0];
-
-               err = cec_config_log_addr(adap, i, last_la);
-               if (err > 0) /* Reused last LA */
-                       continue;
-
-               if (err < 0)
-                       goto unconfigure;
-
-               for (j = 0; la_list[j] != CEC_LOG_ADDR_INVALID; j++) {
-                       /* Tried this one already, skip it */
-                       if (la_list[j] == last_la)
-                               continue;
-                       /* The backup addresses are CEC 2.0 specific */
-                       if ((la_list[j] == CEC_LOG_ADDR_BACKUP_1 ||
-                            la_list[j] == CEC_LOG_ADDR_BACKUP_2) &&
-                           las->cec_version < CEC_OP_CEC_VERSION_2_0)
-                               continue;
-
-                       err = cec_config_log_addr(adap, i, la_list[j]);
-                       if (err == 0) /* LA is in use */
-                               continue;
-                       if (err < 0)
-                               goto unconfigure;
-                       /* Done, claimed an LA */
-                       break;
-               }
-
-               if (la_list[j] == CEC_LOG_ADDR_INVALID)
-                       dprintk(1, "could not claim LA %d\n", i);
-       }
-
-       if (adap->log_addrs.log_addr_mask == 0 &&
-           !(las->flags & CEC_LOG_ADDRS_FL_ALLOW_UNREG_FALLBACK))
-               goto unconfigure;
-
-configured:
-       if (adap->log_addrs.log_addr_mask == 0) {
-               /* Fall back to unregistered */
-               las->log_addr[0] = CEC_LOG_ADDR_UNREGISTERED;
-               las->log_addr_mask = 1 << las->log_addr[0];
-               for (i = 1; i < las->num_log_addrs; i++)
-                       las->log_addr[i] = CEC_LOG_ADDR_INVALID;
-       }
-       for (i = las->num_log_addrs; i < CEC_MAX_LOG_ADDRS; i++)
-               las->log_addr[i] = CEC_LOG_ADDR_INVALID;
-       adap->is_configured = true;
-       adap->is_configuring = false;
-       cec_post_state_event(adap);
-
-       /*
-        * Now post the Report Features and Report Physical Address broadcast
-        * messages. Note that these are non-blocking transmits, meaning that
-        * they are just queued up and once adap->lock is unlocked the main
-        * thread will kick in and start transmitting these.
-        *
-        * If after this function is done (but before one or more of these
-        * messages are actually transmitted) the CEC adapter is unconfigured,
-        * then any remaining messages will be dropped by the main thread.
-        */
-       for (i = 0; i < las->num_log_addrs; i++) {
-               struct cec_msg msg = {};
-
-               if (las->log_addr[i] == CEC_LOG_ADDR_INVALID ||
-                   (las->flags & CEC_LOG_ADDRS_FL_CDC_ONLY))
-                       continue;
-
-               msg.msg[0] = (las->log_addr[i] << 4) | 0x0f;
-
-               /* Report Features must come first according to CEC 2.0 */
-               if (las->log_addr[i] != CEC_LOG_ADDR_UNREGISTERED &&
-                   adap->log_addrs.cec_version >= CEC_OP_CEC_VERSION_2_0) {
-                       cec_fill_msg_report_features(adap, &msg, i);
-                       cec_transmit_msg_fh(adap, &msg, NULL, false);
-               }
-
-               /* Report Physical Address */
-               cec_msg_report_physical_addr(&msg, adap->phys_addr,
-                                            las->primary_device_type[i]);
-               dprintk(1, "config: la %d pa %x.%x.%x.%x\n",
-                       las->log_addr[i],
-                       cec_phys_addr_exp(adap->phys_addr));
-               cec_transmit_msg_fh(adap, &msg, NULL, false);
-
-               /* Report Vendor ID */
-               if (adap->log_addrs.vendor_id != CEC_VENDOR_ID_NONE) {
-                       cec_msg_device_vendor_id(&msg,
-                                                adap->log_addrs.vendor_id);
-                       cec_transmit_msg_fh(adap, &msg, NULL, false);
-               }
-       }
-       adap->kthread_config = NULL;
-       complete(&adap->config_completion);
-       mutex_unlock(&adap->lock);
-       return 0;
-
-unconfigure:
-       for (i = 0; i < las->num_log_addrs; i++)
-               las->log_addr[i] = CEC_LOG_ADDR_INVALID;
-       cec_adap_unconfigure(adap);
-       adap->kthread_config = NULL;
-       mutex_unlock(&adap->lock);
-       complete(&adap->config_completion);
-       return 0;
-}
-
-/*
- * Called from either __cec_s_phys_addr or __cec_s_log_addrs to claim the
- * logical addresses.
- *
- * This function is called with adap->lock held.
- */
-static void cec_claim_log_addrs(struct cec_adapter *adap, bool block)
-{
-       if (WARN_ON(adap->is_configuring || adap->is_configured))
-               return;
-
-       init_completion(&adap->config_completion);
-
-       /* Ready to kick off the thread */
-       adap->is_configuring = true;
-       adap->kthread_config = kthread_run(cec_config_thread_func, adap,
-                                          "ceccfg-%s", adap->name);
-       if (IS_ERR(adap->kthread_config)) {
-               adap->kthread_config = NULL;
-       } else if (block) {
-               mutex_unlock(&adap->lock);
-               wait_for_completion(&adap->config_completion);
-               mutex_lock(&adap->lock);
-       }
-}
-
-/* Set a new physical address and send an event notifying userspace of this.
- *
- * This function is called with adap->lock held.
- */
-void __cec_s_phys_addr(struct cec_adapter *adap, u16 phys_addr, bool block)
-{
-       if (phys_addr == adap->phys_addr)
-               return;
-       if (phys_addr != CEC_PHYS_ADDR_INVALID && adap->devnode.unregistered)
-               return;
-
-       dprintk(1, "new physical address %x.%x.%x.%x\n",
-               cec_phys_addr_exp(phys_addr));
-       if (phys_addr == CEC_PHYS_ADDR_INVALID ||
-           adap->phys_addr != CEC_PHYS_ADDR_INVALID) {
-               adap->phys_addr = CEC_PHYS_ADDR_INVALID;
-               cec_post_state_event(adap);
-               cec_adap_unconfigure(adap);
-               /* Disabling monitor all mode should always succeed */
-               if (adap->monitor_all_cnt)
-                       WARN_ON(call_op(adap, adap_monitor_all_enable, false));
-               mutex_lock(&adap->devnode.lock);
-               if (adap->needs_hpd || list_empty(&adap->devnode.fhs)) {
-                       WARN_ON(adap->ops->adap_enable(adap, false));
-                       adap->transmit_in_progress = false;
-                       wake_up_interruptible(&adap->kthread_waitq);
-               }
-               mutex_unlock(&adap->devnode.lock);
-               if (phys_addr == CEC_PHYS_ADDR_INVALID)
-                       return;
-       }
-
-       mutex_lock(&adap->devnode.lock);
-       adap->last_initiator = 0xff;
-       adap->transmit_in_progress = false;
-
-       if ((adap->needs_hpd || list_empty(&adap->devnode.fhs)) &&
-           adap->ops->adap_enable(adap, true)) {
-               mutex_unlock(&adap->devnode.lock);
-               return;
-       }
-
-       if (adap->monitor_all_cnt &&
-           call_op(adap, adap_monitor_all_enable, true)) {
-               if (adap->needs_hpd || list_empty(&adap->devnode.fhs))
-                       WARN_ON(adap->ops->adap_enable(adap, false));
-               mutex_unlock(&adap->devnode.lock);
-               return;
-       }
-       mutex_unlock(&adap->devnode.lock);
-
-       adap->phys_addr = phys_addr;
-       cec_post_state_event(adap);
-       if (adap->log_addrs.num_log_addrs)
-               cec_claim_log_addrs(adap, block);
-}
-
-void cec_s_phys_addr(struct cec_adapter *adap, u16 phys_addr, bool block)
-{
-       if (IS_ERR_OR_NULL(adap))
-               return;
-
-       mutex_lock(&adap->lock);
-       __cec_s_phys_addr(adap, phys_addr, block);
-       mutex_unlock(&adap->lock);
-}
-EXPORT_SYMBOL_GPL(cec_s_phys_addr);
-
-void cec_s_phys_addr_from_edid(struct cec_adapter *adap,
-                              const struct edid *edid)
-{
-       u16 pa = CEC_PHYS_ADDR_INVALID;
-
-       if (edid && edid->extensions)
-               pa = cec_get_edid_phys_addr((const u8 *)edid,
-                               EDID_LENGTH * (edid->extensions + 1), NULL);
-       cec_s_phys_addr(adap, pa, false);
-}
-EXPORT_SYMBOL_GPL(cec_s_phys_addr_from_edid);
-
-void cec_s_conn_info(struct cec_adapter *adap,
-                    const struct cec_connector_info *conn_info)
-{
-       if (IS_ERR_OR_NULL(adap))
-               return;
-
-       if (!(adap->capabilities & CEC_CAP_CONNECTOR_INFO))
-               return;
-
-       mutex_lock(&adap->lock);
-       if (conn_info)
-               adap->conn_info = *conn_info;
-       else
-               memset(&adap->conn_info, 0, sizeof(adap->conn_info));
-       cec_post_state_event(adap);
-       mutex_unlock(&adap->lock);
-}
-EXPORT_SYMBOL_GPL(cec_s_conn_info);
-
-/*
- * Called from either the ioctl or a driver to set the logical addresses.
- *
- * This function is called with adap->lock held.
- */
-int __cec_s_log_addrs(struct cec_adapter *adap,
-                     struct cec_log_addrs *log_addrs, bool block)
-{
-       u16 type_mask = 0;
-       int i;
-
-       if (adap->devnode.unregistered)
-               return -ENODEV;
-
-       if (!log_addrs || log_addrs->num_log_addrs == 0) {
-               cec_adap_unconfigure(adap);
-               adap->log_addrs.num_log_addrs = 0;
-               for (i = 0; i < CEC_MAX_LOG_ADDRS; i++)
-                       adap->log_addrs.log_addr[i] = CEC_LOG_ADDR_INVALID;
-               adap->log_addrs.osd_name[0] = '\0';
-               adap->log_addrs.vendor_id = CEC_VENDOR_ID_NONE;
-               adap->log_addrs.cec_version = CEC_OP_CEC_VERSION_2_0;
-               return 0;
-       }
-
-       if (log_addrs->flags & CEC_LOG_ADDRS_FL_CDC_ONLY) {
-               /*
-                * Sanitize log_addrs fields if a CDC-Only device is
-                * requested.
-                */
-               log_addrs->num_log_addrs = 1;
-               log_addrs->osd_name[0] = '\0';
-               log_addrs->vendor_id = CEC_VENDOR_ID_NONE;
-               log_addrs->log_addr_type[0] = CEC_LOG_ADDR_TYPE_UNREGISTERED;
-               /*
-                * This is just an internal convention since a CDC-Only device
-                * doesn't have to be a switch. But switches already use
-                * unregistered, so it makes some kind of sense to pick this
-                * as the primary device. Since a CDC-Only device never sends
-                * any 'normal' CEC messages this primary device type is never
-                * sent over the CEC bus.
-                */
-               log_addrs->primary_device_type[0] = CEC_OP_PRIM_DEVTYPE_SWITCH;
-               log_addrs->all_device_types[0] = 0;
-               log_addrs->features[0][0] = 0;
-               log_addrs->features[0][1] = 0;
-       }
-
-       /* Ensure the osd name is 0-terminated */
-       log_addrs->osd_name[sizeof(log_addrs->osd_name) - 1] = '\0';
-
-       /* Sanity checks */
-       if (log_addrs->num_log_addrs > adap->available_log_addrs) {
-               dprintk(1, "num_log_addrs > %d\n", adap->available_log_addrs);
-               return -EINVAL;
-       }
-
-       /*
-        * Vendor ID is a 24 bit number, so check if the value is
-        * within the correct range.
-        */
-       if (log_addrs->vendor_id != CEC_VENDOR_ID_NONE &&
-           (log_addrs->vendor_id & 0xff000000) != 0) {
-               dprintk(1, "invalid vendor ID\n");
-               return -EINVAL;
-       }
-
-       if (log_addrs->cec_version != CEC_OP_CEC_VERSION_1_4 &&
-           log_addrs->cec_version != CEC_OP_CEC_VERSION_2_0) {
-               dprintk(1, "invalid CEC version\n");
-               return -EINVAL;
-       }
-
-       if (log_addrs->num_log_addrs > 1)
-               for (i = 0; i < log_addrs->num_log_addrs; i++)
-                       if (log_addrs->log_addr_type[i] ==
-                                       CEC_LOG_ADDR_TYPE_UNREGISTERED) {
-                               dprintk(1, "num_log_addrs > 1 can't be combined with unregistered LA\n");
-                               return -EINVAL;
-                       }
-
-       for (i = 0; i < log_addrs->num_log_addrs; i++) {
-               const u8 feature_sz = ARRAY_SIZE(log_addrs->features[0]);
-               u8 *features = log_addrs->features[i];
-               bool op_is_dev_features = false;
-               unsigned j;
-
-               log_addrs->log_addr[i] = CEC_LOG_ADDR_INVALID;
-               if (type_mask & (1 << log_addrs->log_addr_type[i])) {
-                       dprintk(1, "duplicate logical address type\n");
-                       return -EINVAL;
-               }
-               type_mask |= 1 << log_addrs->log_addr_type[i];
-               if ((type_mask & (1 << CEC_LOG_ADDR_TYPE_RECORD)) &&
-                   (type_mask & (1 << CEC_LOG_ADDR_TYPE_PLAYBACK))) {
-                       /* Record already contains the playback functionality */
-                       dprintk(1, "invalid record + playback combination\n");
-                       return -EINVAL;
-               }
-               if (log_addrs->primary_device_type[i] >
-                                       CEC_OP_PRIM_DEVTYPE_PROCESSOR) {
-                       dprintk(1, "unknown primary device type\n");
-                       return -EINVAL;
-               }
-               if (log_addrs->primary_device_type[i] == 2) {
-                       dprintk(1, "invalid primary device type\n");
-                       return -EINVAL;
-               }
-               if (log_addrs->log_addr_type[i] > CEC_LOG_ADDR_TYPE_UNREGISTERED) {
-                       dprintk(1, "unknown logical address type\n");
-                       return -EINVAL;
-               }
-               for (j = 0; j < feature_sz; j++) {
-                       if ((features[j] & 0x80) == 0) {
-                               if (op_is_dev_features)
-                                       break;
-                               op_is_dev_features = true;
-                       }
-               }
-               if (!op_is_dev_features || j == feature_sz) {
-                       dprintk(1, "malformed features\n");
-                       return -EINVAL;
-               }
-               /* Zero unused part of the feature array */
-               memset(features + j + 1, 0, feature_sz - j - 1);
-       }
-
-       if (log_addrs->cec_version >= CEC_OP_CEC_VERSION_2_0) {
-               if (log_addrs->num_log_addrs > 2) {
-                       dprintk(1, "CEC 2.0 allows no more than 2 logical addresses\n");
-                       return -EINVAL;
-               }
-               if (log_addrs->num_log_addrs == 2) {
-                       if (!(type_mask & ((1 << CEC_LOG_ADDR_TYPE_AUDIOSYSTEM) |
-                                          (1 << CEC_LOG_ADDR_TYPE_TV)))) {
-                               dprintk(1, "two LAs is only allowed for audiosystem and TV\n");
-                               return -EINVAL;
-                       }
-                       if (!(type_mask & ((1 << CEC_LOG_ADDR_TYPE_PLAYBACK) |
-                                          (1 << CEC_LOG_ADDR_TYPE_RECORD)))) {
-                               dprintk(1, "an audiosystem/TV can only be combined with record or playback\n");
-                               return -EINVAL;
-                       }
-               }
-       }
-
-       /* Zero unused LAs */
-       for (i = log_addrs->num_log_addrs; i < CEC_MAX_LOG_ADDRS; i++) {
-               log_addrs->primary_device_type[i] = 0;
-               log_addrs->log_addr_type[i] = 0;
-               log_addrs->all_device_types[i] = 0;
-               memset(log_addrs->features[i], 0,
-                      sizeof(log_addrs->features[i]));
-       }
-
-       log_addrs->log_addr_mask = adap->log_addrs.log_addr_mask;
-       adap->log_addrs = *log_addrs;
-       if (adap->phys_addr != CEC_PHYS_ADDR_INVALID)
-               cec_claim_log_addrs(adap, block);
-       return 0;
-}
-
-int cec_s_log_addrs(struct cec_adapter *adap,
-                   struct cec_log_addrs *log_addrs, bool block)
-{
-       int err;
-
-       mutex_lock(&adap->lock);
-       err = __cec_s_log_addrs(adap, log_addrs, block);
-       mutex_unlock(&adap->lock);
-       return err;
-}
-EXPORT_SYMBOL_GPL(cec_s_log_addrs);
-
-/* High-level core CEC message handling */
-
-/* Fill in the Report Features message */
-static void cec_fill_msg_report_features(struct cec_adapter *adap,
-                                        struct cec_msg *msg,
-                                        unsigned int la_idx)
-{
-       const struct cec_log_addrs *las = &adap->log_addrs;
-       const u8 *features = las->features[la_idx];
-       bool op_is_dev_features = false;
-       unsigned int idx;
-
-       /* Report Features */
-       msg->msg[0] = (las->log_addr[la_idx] << 4) | 0x0f;
-       msg->len = 4;
-       msg->msg[1] = CEC_MSG_REPORT_FEATURES;
-       msg->msg[2] = adap->log_addrs.cec_version;
-       msg->msg[3] = las->all_device_types[la_idx];
-
-       /* Write RC Profiles first, then Device Features */
-       for (idx = 0; idx < ARRAY_SIZE(las->features[0]); idx++) {
-               msg->msg[msg->len++] = features[idx];
-               if ((features[idx] & CEC_OP_FEAT_EXT) == 0) {
-                       if (op_is_dev_features)
-                               break;
-                       op_is_dev_features = true;
-               }
-       }
-}
-
-/* Transmit the Feature Abort message */
-static int cec_feature_abort_reason(struct cec_adapter *adap,
-                                   struct cec_msg *msg, u8 reason)
-{
-       struct cec_msg tx_msg = { };
-
-       /*
-        * Don't reply with CEC_MSG_FEATURE_ABORT to a CEC_MSG_FEATURE_ABORT
-        * message!
-        */
-       if (msg->msg[1] == CEC_MSG_FEATURE_ABORT)
-               return 0;
-       /* Don't Feature Abort messages from 'Unregistered' */
-       if (cec_msg_initiator(msg) == CEC_LOG_ADDR_UNREGISTERED)
-               return 0;
-       cec_msg_set_reply_to(&tx_msg, msg);
-       cec_msg_feature_abort(&tx_msg, msg->msg[1], reason);
-       return cec_transmit_msg(adap, &tx_msg, false);
-}
-
-static int cec_feature_abort(struct cec_adapter *adap, struct cec_msg *msg)
-{
-       return cec_feature_abort_reason(adap, msg,
-                                       CEC_OP_ABORT_UNRECOGNIZED_OP);
-}
-
-static int cec_feature_refused(struct cec_adapter *adap, struct cec_msg *msg)
-{
-       return cec_feature_abort_reason(adap, msg,
-                                       CEC_OP_ABORT_REFUSED);
-}
-
-/*
- * Called when a CEC message is received. This function will do any
- * necessary core processing. The is_reply bool is true if this message
- * is a reply to an earlier transmit.
- *
- * The message is either a broadcast message or a valid directed message.
- */
-static int cec_receive_notify(struct cec_adapter *adap, struct cec_msg *msg,
-                             bool is_reply)
-{
-       bool is_broadcast = cec_msg_is_broadcast(msg);
-       u8 dest_laddr = cec_msg_destination(msg);
-       u8 init_laddr = cec_msg_initiator(msg);
-       u8 devtype = cec_log_addr2dev(adap, dest_laddr);
-       int la_idx = cec_log_addr2idx(adap, dest_laddr);
-       bool from_unregistered = init_laddr == 0xf;
-       struct cec_msg tx_cec_msg = { };
-
-       dprintk(2, "%s: %*ph\n", __func__, msg->len, msg->msg);
-
-       /* If this is a CDC-Only device, then ignore any non-CDC messages */
-       if (cec_is_cdc_only(&adap->log_addrs) &&
-           msg->msg[1] != CEC_MSG_CDC_MESSAGE)
-               return 0;
-
-       if (adap->ops->received) {
-               /* Allow drivers to process the message first */
-               if (adap->ops->received(adap, msg) != -ENOMSG)
-                       return 0;
-       }
-
-       /*
-        * REPORT_PHYSICAL_ADDR, CEC_MSG_USER_CONTROL_PRESSED and
-        * CEC_MSG_USER_CONTROL_RELEASED messages always have to be
-        * handled by the CEC core, even if the passthrough mode is on.
-        * The others are just ignored if passthrough mode is on.
-        */
-       switch (msg->msg[1]) {
-       case CEC_MSG_GET_CEC_VERSION:
-       case CEC_MSG_ABORT:
-       case CEC_MSG_GIVE_DEVICE_POWER_STATUS:
-       case CEC_MSG_GIVE_OSD_NAME:
-               /*
-                * These messages reply with a directed message, so ignore if
-                * the initiator is Unregistered.
-                */
-               if (!adap->passthrough && from_unregistered)
-                       return 0;
-               /* Fall through */
-       case CEC_MSG_GIVE_DEVICE_VENDOR_ID:
-       case CEC_MSG_GIVE_FEATURES:
-       case CEC_MSG_GIVE_PHYSICAL_ADDR:
-               /*
-                * Skip processing these messages if the passthrough mode
-                * is on.
-                */
-               if (adap->passthrough)
-                       goto skip_processing;
-               /* Ignore if addressing is wrong */
-               if (is_broadcast)
-                       return 0;
-               break;
-
-       case CEC_MSG_USER_CONTROL_PRESSED:
-       case CEC_MSG_USER_CONTROL_RELEASED:
-               /* Wrong addressing mode: don't process */
-               if (is_broadcast || from_unregistered)
-                       goto skip_processing;
-               break;
-
-       case CEC_MSG_REPORT_PHYSICAL_ADDR:
-               /*
-                * This message is always processed, regardless of the
-                * passthrough setting.
-                *
-                * Exception: don't process if wrong addressing mode.
-                */
-               if (!is_broadcast)
-                       goto skip_processing;
-               break;
-
-       default:
-               break;
-       }
-
-       cec_msg_set_reply_to(&tx_cec_msg, msg);
-
-       switch (msg->msg[1]) {
-       /* The following messages are processed but still passed through */
-       case CEC_MSG_REPORT_PHYSICAL_ADDR: {
-               u16 pa = (msg->msg[2] << 8) | msg->msg[3];
-
-               if (!from_unregistered)
-                       adap->phys_addrs[init_laddr] = pa;
-               dprintk(1, "reported physical address %x.%x.%x.%x for logical address %d\n",
-                       cec_phys_addr_exp(pa), init_laddr);
-               break;
-       }
-
-       case CEC_MSG_USER_CONTROL_PRESSED:
-               if (!(adap->capabilities & CEC_CAP_RC) ||
-                   !(adap->log_addrs.flags & CEC_LOG_ADDRS_FL_ALLOW_RC_PASSTHRU))
-                       break;
-
-#ifdef CONFIG_MEDIA_CEC_RC
-               switch (msg->msg[2]) {
-               /*
-                * Play function, this message can have variable length
-                * depending on the specific play function that is used.
-                */
-               case CEC_OP_UI_CMD_PLAY_FUNCTION:
-                       if (msg->len == 2)
-                               rc_keydown(adap->rc, RC_PROTO_CEC,
-                                          msg->msg[2], 0);
-                       else
-                               rc_keydown(adap->rc, RC_PROTO_CEC,
-                                          msg->msg[2] << 8 | msg->msg[3], 0);
-                       break;
-               /*
-                * Other function messages that are not handled.
-                * Currently the RC framework does not allow to supply an
-                * additional parameter to a keypress. These "keys" contain
-                * other information such as channel number, an input number
-                * etc.
-                * For the time being these messages are not processed by the
-                * framework and are simply forwarded to the user space.
-                */
-               case CEC_OP_UI_CMD_SELECT_BROADCAST_TYPE:
-               case CEC_OP_UI_CMD_SELECT_SOUND_PRESENTATION:
-               case CEC_OP_UI_CMD_TUNE_FUNCTION:
-               case CEC_OP_UI_CMD_SELECT_MEDIA_FUNCTION:
-               case CEC_OP_UI_CMD_SELECT_AV_INPUT_FUNCTION:
-               case CEC_OP_UI_CMD_SELECT_AUDIO_INPUT_FUNCTION:
-                       break;
-               default:
-                       rc_keydown(adap->rc, RC_PROTO_CEC, msg->msg[2], 0);
-                       break;
-               }
-#endif
-               break;
-
-       case CEC_MSG_USER_CONTROL_RELEASED:
-               if (!(adap->capabilities & CEC_CAP_RC) ||
-                   !(adap->log_addrs.flags & CEC_LOG_ADDRS_FL_ALLOW_RC_PASSTHRU))
-                       break;
-#ifdef CONFIG_MEDIA_CEC_RC
-               rc_keyup(adap->rc);
-#endif
-               break;
-
-       /*
-        * The remaining messages are only processed if the passthrough mode
-        * is off.
-        */
-       case CEC_MSG_GET_CEC_VERSION:
-               cec_msg_cec_version(&tx_cec_msg, adap->log_addrs.cec_version);
-               return cec_transmit_msg(adap, &tx_cec_msg, false);
-
-       case CEC_MSG_GIVE_PHYSICAL_ADDR:
-               /* Do nothing for CEC switches using addr 15 */
-               if (devtype == CEC_OP_PRIM_DEVTYPE_SWITCH && dest_laddr == 15)
-                       return 0;
-               cec_msg_report_physical_addr(&tx_cec_msg, adap->phys_addr, devtype);
-               return cec_transmit_msg(adap, &tx_cec_msg, false);
-
-       case CEC_MSG_GIVE_DEVICE_VENDOR_ID:
-               if (adap->log_addrs.vendor_id == CEC_VENDOR_ID_NONE)
-                       return cec_feature_abort(adap, msg);
-               cec_msg_device_vendor_id(&tx_cec_msg, adap->log_addrs.vendor_id);
-               return cec_transmit_msg(adap, &tx_cec_msg, false);
-
-       case CEC_MSG_ABORT:
-               /* Do nothing for CEC switches */
-               if (devtype == CEC_OP_PRIM_DEVTYPE_SWITCH)
-                       return 0;
-               return cec_feature_refused(adap, msg);
-
-       case CEC_MSG_GIVE_OSD_NAME: {
-               if (adap->log_addrs.osd_name[0] == 0)
-                       return cec_feature_abort(adap, msg);
-               cec_msg_set_osd_name(&tx_cec_msg, adap->log_addrs.osd_name);
-               return cec_transmit_msg(adap, &tx_cec_msg, false);
-       }
-
-       case CEC_MSG_GIVE_FEATURES:
-               if (adap->log_addrs.cec_version < CEC_OP_CEC_VERSION_2_0)
-                       return cec_feature_abort(adap, msg);
-               cec_fill_msg_report_features(adap, &tx_cec_msg, la_idx);
-               return cec_transmit_msg(adap, &tx_cec_msg, false);
-
-       default:
-               /*
-                * Unprocessed messages are aborted if userspace isn't doing
-                * any processing either.
-                */
-               if (!is_broadcast && !is_reply && !adap->follower_cnt &&
-                   !adap->cec_follower && msg->msg[1] != CEC_MSG_FEATURE_ABORT)
-                       return cec_feature_abort(adap, msg);
-               break;
-       }
-
-skip_processing:
-       /* If this was a reply, then we're done, unless otherwise specified */
-       if (is_reply && !(msg->flags & CEC_MSG_FL_REPLY_TO_FOLLOWERS))
-               return 0;
-
-       /*
-        * Send to the exclusive follower if there is one, otherwise send
-        * to all followers.
-        */
-       if (adap->cec_follower)
-               cec_queue_msg_fh(adap->cec_follower, msg);
-       else
-               cec_queue_msg_followers(adap, msg);
-       return 0;
-}
-
-/*
- * Helper functions to keep track of the 'monitor all' use count.
- *
- * These functions are called with adap->lock held.
- */
-int cec_monitor_all_cnt_inc(struct cec_adapter *adap)
-{
-       int ret = 0;
-
-       if (adap->monitor_all_cnt == 0)
-               ret = call_op(adap, adap_monitor_all_enable, 1);
-       if (ret == 0)
-               adap->monitor_all_cnt++;
-       return ret;
-}
-
-void cec_monitor_all_cnt_dec(struct cec_adapter *adap)
-{
-       adap->monitor_all_cnt--;
-       if (adap->monitor_all_cnt == 0)
-               WARN_ON(call_op(adap, adap_monitor_all_enable, 0));
-}
-
-/*
- * Helper functions to keep track of the 'monitor pin' use count.
- *
- * These functions are called with adap->lock held.
- */
-int cec_monitor_pin_cnt_inc(struct cec_adapter *adap)
-{
-       int ret = 0;
-
-       if (adap->monitor_pin_cnt == 0)
-               ret = call_op(adap, adap_monitor_pin_enable, 1);
-       if (ret == 0)
-               adap->monitor_pin_cnt++;
-       return ret;
-}
-
-void cec_monitor_pin_cnt_dec(struct cec_adapter *adap)
-{
-       adap->monitor_pin_cnt--;
-       if (adap->monitor_pin_cnt == 0)
-               WARN_ON(call_op(adap, adap_monitor_pin_enable, 0));
-}
-
-#ifdef CONFIG_DEBUG_FS
-/*
- * Log the current state of the CEC adapter.
- * Very useful for debugging.
- */
-int cec_adap_status(struct seq_file *file, void *priv)
-{
-       struct cec_adapter *adap = dev_get_drvdata(file->private);
-       struct cec_data *data;
-
-       mutex_lock(&adap->lock);
-       seq_printf(file, "configured: %d\n", adap->is_configured);
-       seq_printf(file, "configuring: %d\n", adap->is_configuring);
-       seq_printf(file, "phys_addr: %x.%x.%x.%x\n",
-                  cec_phys_addr_exp(adap->phys_addr));
-       seq_printf(file, "number of LAs: %d\n", adap->log_addrs.num_log_addrs);
-       seq_printf(file, "LA mask: 0x%04x\n", adap->log_addrs.log_addr_mask);
-       if (adap->cec_follower)
-               seq_printf(file, "has CEC follower%s\n",
-                          adap->passthrough ? " (in passthrough mode)" : "");
-       if (adap->cec_initiator)
-               seq_puts(file, "has CEC initiator\n");
-       if (adap->monitor_all_cnt)
-               seq_printf(file, "file handles in Monitor All mode: %u\n",
-                          adap->monitor_all_cnt);
-       if (adap->tx_timeouts) {
-               seq_printf(file, "transmit timeouts: %u\n",
-                          adap->tx_timeouts);
-               adap->tx_timeouts = 0;
-       }
-       data = adap->transmitting;
-       if (data)
-               seq_printf(file, "transmitting message: %*ph (reply: %02x, timeout: %ums)\n",
-                          data->msg.len, data->msg.msg, data->msg.reply,
-                          data->msg.timeout);
-       seq_printf(file, "pending transmits: %u\n", adap->transmit_queue_sz);
-       list_for_each_entry(data, &adap->transmit_queue, list) {
-               seq_printf(file, "queued tx message: %*ph (reply: %02x, timeout: %ums)\n",
-                          data->msg.len, data->msg.msg, data->msg.reply,
-                          data->msg.timeout);
-       }
-       list_for_each_entry(data, &adap->wait_queue, list) {
-               seq_printf(file, "message waiting for reply: %*ph (reply: %02x, timeout: %ums)\n",
-                          data->msg.len, data->msg.msg, data->msg.reply,
-                          data->msg.timeout);
-       }
-
-       call_void_op(adap, adap_status, file);
-       mutex_unlock(&adap->lock);
-       return 0;
-}
-#endif
diff --git a/drivers/media/cec/cec-api.c b/drivers/media/cec/cec-api.c
deleted file mode 100644 (file)
index 17d1cb2..0000000
+++ /dev/null
@@ -1,701 +0,0 @@
-// SPDX-License-Identifier: GPL-2.0-only
-/*
- * cec-api.c - HDMI Consumer Electronics Control framework - API
- *
- * Copyright 2016 Cisco Systems, Inc. and/or its affiliates. All rights reserved.
- */
-
-#include <linux/errno.h>
-#include <linux/init.h>
-#include <linux/module.h>
-#include <linux/kernel.h>
-#include <linux/kmod.h>
-#include <linux/ktime.h>
-#include <linux/slab.h>
-#include <linux/mm.h>
-#include <linux/string.h>
-#include <linux/types.h>
-#include <linux/uaccess.h>
-#include <linux/version.h>
-
-#include <media/cec-pin.h>
-#include "cec-priv.h"
-#include "cec-pin-priv.h"
-
-static inline struct cec_devnode *cec_devnode_data(struct file *filp)
-{
-       struct cec_fh *fh = filp->private_data;
-
-       return &fh->adap->devnode;
-}
-
-/* CEC file operations */
-
-static __poll_t cec_poll(struct file *filp,
-                            struct poll_table_struct *poll)
-{
-       struct cec_fh *fh = filp->private_data;
-       struct cec_adapter *adap = fh->adap;
-       __poll_t res = 0;
-
-       poll_wait(filp, &fh->wait, poll);
-       if (!cec_is_registered(adap))
-               return EPOLLERR | EPOLLHUP;
-       mutex_lock(&adap->lock);
-       if (adap->is_configured &&
-           adap->transmit_queue_sz < CEC_MAX_MSG_TX_QUEUE_SZ)
-               res |= EPOLLOUT | EPOLLWRNORM;
-       if (fh->queued_msgs)
-               res |= EPOLLIN | EPOLLRDNORM;
-       if (fh->total_queued_events)
-               res |= EPOLLPRI;
-       mutex_unlock(&adap->lock);
-       return res;
-}
-
-static bool cec_is_busy(const struct cec_adapter *adap,
-                       const struct cec_fh *fh)
-{
-       bool valid_initiator = adap->cec_initiator && adap->cec_initiator == fh;
-       bool valid_follower = adap->cec_follower && adap->cec_follower == fh;
-
-       /*
-        * Exclusive initiators and followers can always access the CEC adapter
-        */
-       if (valid_initiator || valid_follower)
-               return false;
-       /*
-        * All others can only access the CEC adapter if there is no
-        * exclusive initiator and they are in INITIATOR mode.
-        */
-       return adap->cec_initiator ||
-              fh->mode_initiator == CEC_MODE_NO_INITIATOR;
-}
-
-static long cec_adap_g_caps(struct cec_adapter *adap,
-                           struct cec_caps __user *parg)
-{
-       struct cec_caps caps = {};
-
-       strscpy(caps.driver, adap->devnode.dev.parent->driver->name,
-               sizeof(caps.driver));
-       strscpy(caps.name, adap->name, sizeof(caps.name));
-       caps.available_log_addrs = adap->available_log_addrs;
-       caps.capabilities = adap->capabilities;
-       caps.version = LINUX_VERSION_CODE;
-       if (copy_to_user(parg, &caps, sizeof(caps)))
-               return -EFAULT;
-       return 0;
-}
-
-static long cec_adap_g_phys_addr(struct cec_adapter *adap,
-                                __u16 __user *parg)
-{
-       u16 phys_addr;
-
-       mutex_lock(&adap->lock);
-       phys_addr = adap->phys_addr;
-       mutex_unlock(&adap->lock);
-       if (copy_to_user(parg, &phys_addr, sizeof(phys_addr)))
-               return -EFAULT;
-       return 0;
-}
-
-static int cec_validate_phys_addr(u16 phys_addr)
-{
-       int i;
-
-       if (phys_addr == CEC_PHYS_ADDR_INVALID)
-               return 0;
-       for (i = 0; i < 16; i += 4)
-               if (phys_addr & (0xf << i))
-                       break;
-       if (i == 16)
-               return 0;
-       for (i += 4; i < 16; i += 4)
-               if ((phys_addr & (0xf << i)) == 0)
-                       return -EINVAL;
-       return 0;
-}
-
-static long cec_adap_s_phys_addr(struct cec_adapter *adap, struct cec_fh *fh,
-                                bool block, __u16 __user *parg)
-{
-       u16 phys_addr;
-       long err;
-
-       if (!(adap->capabilities & CEC_CAP_PHYS_ADDR))
-               return -ENOTTY;
-       if (copy_from_user(&phys_addr, parg, sizeof(phys_addr)))
-               return -EFAULT;
-
-       err = cec_validate_phys_addr(phys_addr);
-       if (err)
-               return err;
-       mutex_lock(&adap->lock);
-       if (cec_is_busy(adap, fh))
-               err = -EBUSY;
-       else
-               __cec_s_phys_addr(adap, phys_addr, block);
-       mutex_unlock(&adap->lock);
-       return err;
-}
-
-static long cec_adap_g_log_addrs(struct cec_adapter *adap,
-                                struct cec_log_addrs __user *parg)
-{
-       struct cec_log_addrs log_addrs;
-
-       mutex_lock(&adap->lock);
-       log_addrs = adap->log_addrs;
-       if (!adap->is_configured)
-               memset(log_addrs.log_addr, CEC_LOG_ADDR_INVALID,
-                      sizeof(log_addrs.log_addr));
-       mutex_unlock(&adap->lock);
-
-       if (copy_to_user(parg, &log_addrs, sizeof(log_addrs)))
-               return -EFAULT;
-       return 0;
-}
-
-static long cec_adap_s_log_addrs(struct cec_adapter *adap, struct cec_fh *fh,
-                                bool block, struct cec_log_addrs __user *parg)
-{
-       struct cec_log_addrs log_addrs;
-       long err = -EBUSY;
-
-       if (!(adap->capabilities & CEC_CAP_LOG_ADDRS))
-               return -ENOTTY;
-       if (copy_from_user(&log_addrs, parg, sizeof(log_addrs)))
-               return -EFAULT;
-       log_addrs.flags &= CEC_LOG_ADDRS_FL_ALLOW_UNREG_FALLBACK |
-                          CEC_LOG_ADDRS_FL_ALLOW_RC_PASSTHRU |
-                          CEC_LOG_ADDRS_FL_CDC_ONLY;
-       mutex_lock(&adap->lock);
-       if (!adap->is_configuring &&
-           (!log_addrs.num_log_addrs || !adap->is_configured) &&
-           !cec_is_busy(adap, fh)) {
-               err = __cec_s_log_addrs(adap, &log_addrs, block);
-               if (!err)
-                       log_addrs = adap->log_addrs;
-       }
-       mutex_unlock(&adap->lock);
-       if (err)
-               return err;
-       if (copy_to_user(parg, &log_addrs, sizeof(log_addrs)))
-               return -EFAULT;
-       return 0;
-}
-
-static long cec_adap_g_connector_info(struct cec_adapter *adap,
-                                     struct cec_log_addrs __user *parg)
-{
-       int ret = 0;
-
-       if (!(adap->capabilities & CEC_CAP_CONNECTOR_INFO))
-               return -ENOTTY;
-
-       mutex_lock(&adap->lock);
-       if (copy_to_user(parg, &adap->conn_info, sizeof(adap->conn_info)))
-               ret = -EFAULT;
-       mutex_unlock(&adap->lock);
-       return ret;
-}
-
-static long cec_transmit(struct cec_adapter *adap, struct cec_fh *fh,
-                        bool block, struct cec_msg __user *parg)
-{
-       struct cec_msg msg = {};
-       long err = 0;
-
-       if (!(adap->capabilities & CEC_CAP_TRANSMIT))
-               return -ENOTTY;
-       if (copy_from_user(&msg, parg, sizeof(msg)))
-               return -EFAULT;
-
-       mutex_lock(&adap->lock);
-       if (adap->log_addrs.num_log_addrs == 0)
-               err = -EPERM;
-       else if (adap->is_configuring)
-               err = -ENONET;
-       else if (cec_is_busy(adap, fh))
-               err = -EBUSY;
-       else
-               err = cec_transmit_msg_fh(adap, &msg, fh, block);
-       mutex_unlock(&adap->lock);
-       if (err)
-               return err;
-       if (copy_to_user(parg, &msg, sizeof(msg)))
-               return -EFAULT;
-       return 0;
-}
-
-/* Called by CEC_RECEIVE: wait for a message to arrive */
-static int cec_receive_msg(struct cec_fh *fh, struct cec_msg *msg, bool block)
-{
-       u32 timeout = msg->timeout;
-       int res;
-
-       do {
-               mutex_lock(&fh->lock);
-               /* Are there received messages queued up? */
-               if (fh->queued_msgs) {
-                       /* Yes, return the first one */
-                       struct cec_msg_entry *entry =
-                               list_first_entry(&fh->msgs,
-                                                struct cec_msg_entry, list);
-
-                       list_del(&entry->list);
-                       *msg = entry->msg;
-                       kfree(entry);
-                       fh->queued_msgs--;
-                       mutex_unlock(&fh->lock);
-                       /* restore original timeout value */
-                       msg->timeout = timeout;
-                       return 0;
-               }
-
-               /* No, return EAGAIN in non-blocking mode or wait */
-               mutex_unlock(&fh->lock);
-
-               /* Return when in non-blocking mode */
-               if (!block)
-                       return -EAGAIN;
-
-               if (msg->timeout) {
-                       /* The user specified a timeout */
-                       res = wait_event_interruptible_timeout(fh->wait,
-                                                              fh->queued_msgs,
-                               msecs_to_jiffies(msg->timeout));
-                       if (res == 0)
-                               res = -ETIMEDOUT;
-                       else if (res > 0)
-                               res = 0;
-               } else {
-                       /* Wait indefinitely */
-                       res = wait_event_interruptible(fh->wait,
-                                                      fh->queued_msgs);
-               }
-               /* Exit on error, otherwise loop to get the new message */
-       } while (!res);
-       return res;
-}
-
-static long cec_receive(struct cec_adapter *adap, struct cec_fh *fh,
-                       bool block, struct cec_msg __user *parg)
-{
-       struct cec_msg msg = {};
-       long err;
-
-       if (copy_from_user(&msg, parg, sizeof(msg)))
-               return -EFAULT;
-
-       err = cec_receive_msg(fh, &msg, block);
-       if (err)
-               return err;
-       msg.flags = 0;
-       if (copy_to_user(parg, &msg, sizeof(msg)))
-               return -EFAULT;
-       return 0;
-}
-
-static long cec_dqevent(struct cec_adapter *adap, struct cec_fh *fh,
-                       bool block, struct cec_event __user *parg)
-{
-       struct cec_event_entry *ev = NULL;
-       u64 ts = ~0ULL;
-       unsigned int i;
-       unsigned int ev_idx;
-       long err = 0;
-
-       mutex_lock(&fh->lock);
-       while (!fh->total_queued_events && block) {
-               mutex_unlock(&fh->lock);
-               err = wait_event_interruptible(fh->wait,
-                                              fh->total_queued_events);
-               if (err)
-                       return err;
-               mutex_lock(&fh->lock);
-       }
-
-       /* Find the oldest event */
-       for (i = 0; i < CEC_NUM_EVENTS; i++) {
-               struct cec_event_entry *entry =
-                       list_first_entry_or_null(&fh->events[i],
-                                                struct cec_event_entry, list);
-
-               if (entry && entry->ev.ts <= ts) {
-                       ev = entry;
-                       ev_idx = i;
-                       ts = ev->ev.ts;
-               }
-       }
-
-       if (!ev) {
-               err = -EAGAIN;
-               goto unlock;
-       }
-       list_del(&ev->list);
-
-       if (copy_to_user(parg, &ev->ev, sizeof(ev->ev)))
-               err = -EFAULT;
-       if (ev_idx >= CEC_NUM_CORE_EVENTS)
-               kfree(ev);
-       fh->queued_events[ev_idx]--;
-       fh->total_queued_events--;
-
-unlock:
-       mutex_unlock(&fh->lock);
-       return err;
-}
-
-static long cec_g_mode(struct cec_adapter *adap, struct cec_fh *fh,
-                      u32 __user *parg)
-{
-       u32 mode = fh->mode_initiator | fh->mode_follower;
-
-       if (copy_to_user(parg, &mode, sizeof(mode)))
-               return -EFAULT;
-       return 0;
-}
-
-static long cec_s_mode(struct cec_adapter *adap, struct cec_fh *fh,
-                      u32 __user *parg)
-{
-       u32 mode;
-       u8 mode_initiator;
-       u8 mode_follower;
-       bool send_pin_event = false;
-       long err = 0;
-
-       if (copy_from_user(&mode, parg, sizeof(mode)))
-               return -EFAULT;
-       if (mode & ~(CEC_MODE_INITIATOR_MSK | CEC_MODE_FOLLOWER_MSK)) {
-               dprintk(1, "%s: invalid mode bits set\n", __func__);
-               return -EINVAL;
-       }
-
-       mode_initiator = mode & CEC_MODE_INITIATOR_MSK;
-       mode_follower = mode & CEC_MODE_FOLLOWER_MSK;
-
-       if (mode_initiator > CEC_MODE_EXCL_INITIATOR ||
-           mode_follower > CEC_MODE_MONITOR_ALL) {
-               dprintk(1, "%s: unknown mode\n", __func__);
-               return -EINVAL;
-       }
-
-       if (mode_follower == CEC_MODE_MONITOR_ALL &&
-           !(adap->capabilities & CEC_CAP_MONITOR_ALL)) {
-               dprintk(1, "%s: MONITOR_ALL not supported\n", __func__);
-               return -EINVAL;
-       }
-
-       if (mode_follower == CEC_MODE_MONITOR_PIN &&
-           !(adap->capabilities & CEC_CAP_MONITOR_PIN)) {
-               dprintk(1, "%s: MONITOR_PIN not supported\n", __func__);
-               return -EINVAL;
-       }
-
-       /* Follower modes should always be able to send CEC messages */
-       if ((mode_initiator == CEC_MODE_NO_INITIATOR ||
-            !(adap->capabilities & CEC_CAP_TRANSMIT)) &&
-           mode_follower >= CEC_MODE_FOLLOWER &&
-           mode_follower <= CEC_MODE_EXCL_FOLLOWER_PASSTHRU) {
-               dprintk(1, "%s: cannot transmit\n", __func__);
-               return -EINVAL;
-       }
-
-       /* Monitor modes require CEC_MODE_NO_INITIATOR */
-       if (mode_initiator && mode_follower >= CEC_MODE_MONITOR_PIN) {
-               dprintk(1, "%s: monitor modes require NO_INITIATOR\n",
-                       __func__);
-               return -EINVAL;
-       }
-
-       /* Monitor modes require CAP_NET_ADMIN */
-       if (mode_follower >= CEC_MODE_MONITOR_PIN && !capable(CAP_NET_ADMIN))
-               return -EPERM;
-
-       mutex_lock(&adap->lock);
-       /*
-        * You can't become exclusive follower if someone else already
-        * has that job.
-        */
-       if ((mode_follower == CEC_MODE_EXCL_FOLLOWER ||
-            mode_follower == CEC_MODE_EXCL_FOLLOWER_PASSTHRU) &&
-           adap->cec_follower && adap->cec_follower != fh)
-               err = -EBUSY;
-       /*
-        * You can't become exclusive initiator if someone else already
-        * has that job.
-        */
-       if (mode_initiator == CEC_MODE_EXCL_INITIATOR &&
-           adap->cec_initiator && adap->cec_initiator != fh)
-               err = -EBUSY;
-
-       if (!err) {
-               bool old_mon_all = fh->mode_follower == CEC_MODE_MONITOR_ALL;
-               bool new_mon_all = mode_follower == CEC_MODE_MONITOR_ALL;
-
-               if (old_mon_all != new_mon_all) {
-                       if (new_mon_all)
-                               err = cec_monitor_all_cnt_inc(adap);
-                       else
-                               cec_monitor_all_cnt_dec(adap);
-               }
-       }
-
-       if (!err) {
-               bool old_mon_pin = fh->mode_follower == CEC_MODE_MONITOR_PIN;
-               bool new_mon_pin = mode_follower == CEC_MODE_MONITOR_PIN;
-
-               if (old_mon_pin != new_mon_pin) {
-                       send_pin_event = new_mon_pin;
-                       if (new_mon_pin)
-                               err = cec_monitor_pin_cnt_inc(adap);
-                       else
-                               cec_monitor_pin_cnt_dec(adap);
-               }
-       }
-
-       if (err) {
-               mutex_unlock(&adap->lock);
-               return err;
-       }
-
-       if (fh->mode_follower == CEC_MODE_FOLLOWER)
-               adap->follower_cnt--;
-       if (mode_follower == CEC_MODE_FOLLOWER)
-               adap->follower_cnt++;
-       if (send_pin_event) {
-               struct cec_event ev = {
-                       .flags = CEC_EVENT_FL_INITIAL_STATE,
-               };
-
-               ev.event = adap->cec_pin_is_high ? CEC_EVENT_PIN_CEC_HIGH :
-                                                  CEC_EVENT_PIN_CEC_LOW;
-               cec_queue_event_fh(fh, &ev, 0);
-       }
-       if (mode_follower == CEC_MODE_EXCL_FOLLOWER ||
-           mode_follower == CEC_MODE_EXCL_FOLLOWER_PASSTHRU) {
-               adap->passthrough =
-                       mode_follower == CEC_MODE_EXCL_FOLLOWER_PASSTHRU;
-               adap->cec_follower = fh;
-       } else if (adap->cec_follower == fh) {
-               adap->passthrough = false;
-               adap->cec_follower = NULL;
-       }
-       if (mode_initiator == CEC_MODE_EXCL_INITIATOR)
-               adap->cec_initiator = fh;
-       else if (adap->cec_initiator == fh)
-               adap->cec_initiator = NULL;
-       fh->mode_initiator = mode_initiator;
-       fh->mode_follower = mode_follower;
-       mutex_unlock(&adap->lock);
-       return 0;
-}
-
-static long cec_ioctl(struct file *filp, unsigned int cmd, unsigned long arg)
-{
-       struct cec_fh *fh = filp->private_data;
-       struct cec_adapter *adap = fh->adap;
-       bool block = !(filp->f_flags & O_NONBLOCK);
-       void __user *parg = (void __user *)arg;
-
-       if (!cec_is_registered(adap))
-               return -ENODEV;
-
-       switch (cmd) {
-       case CEC_ADAP_G_CAPS:
-               return cec_adap_g_caps(adap, parg);
-
-       case CEC_ADAP_G_PHYS_ADDR:
-               return cec_adap_g_phys_addr(adap, parg);
-
-       case CEC_ADAP_S_PHYS_ADDR:
-               return cec_adap_s_phys_addr(adap, fh, block, parg);
-
-       case CEC_ADAP_G_LOG_ADDRS:
-               return cec_adap_g_log_addrs(adap, parg);
-
-       case CEC_ADAP_S_LOG_ADDRS:
-               return cec_adap_s_log_addrs(adap, fh, block, parg);
-
-       case CEC_ADAP_G_CONNECTOR_INFO:
-               return cec_adap_g_connector_info(adap, parg);
-
-       case CEC_TRANSMIT:
-               return cec_transmit(adap, fh, block, parg);
-
-       case CEC_RECEIVE:
-               return cec_receive(adap, fh, block, parg);
-
-       case CEC_DQEVENT:
-               return cec_dqevent(adap, fh, block, parg);
-
-       case CEC_G_MODE:
-               return cec_g_mode(adap, fh, parg);
-
-       case CEC_S_MODE:
-               return cec_s_mode(adap, fh, parg);
-
-       default:
-               return -ENOTTY;
-       }
-}
-
-static int cec_open(struct inode *inode, struct file *filp)
-{
-       struct cec_devnode *devnode =
-               container_of(inode->i_cdev, struct cec_devnode, cdev);
-       struct cec_adapter *adap = to_cec_adapter(devnode);
-       struct cec_fh *fh = kzalloc(sizeof(*fh), GFP_KERNEL);
-       /*
-        * Initial events that are automatically sent when the cec device is
-        * opened.
-        */
-       struct cec_event ev = {
-               .event = CEC_EVENT_STATE_CHANGE,
-               .flags = CEC_EVENT_FL_INITIAL_STATE,
-       };
-       unsigned int i;
-       int err;
-
-       if (!fh)
-               return -ENOMEM;
-
-       INIT_LIST_HEAD(&fh->msgs);
-       INIT_LIST_HEAD(&fh->xfer_list);
-       for (i = 0; i < CEC_NUM_EVENTS; i++)
-               INIT_LIST_HEAD(&fh->events[i]);
-       mutex_init(&fh->lock);
-       init_waitqueue_head(&fh->wait);
-
-       fh->mode_initiator = CEC_MODE_INITIATOR;
-       fh->adap = adap;
-
-       err = cec_get_device(devnode);
-       if (err) {
-               kfree(fh);
-               return err;
-       }
-
-       mutex_lock(&devnode->lock);
-       if (list_empty(&devnode->fhs) &&
-           !adap->needs_hpd &&
-           adap->phys_addr == CEC_PHYS_ADDR_INVALID) {
-               err = adap->ops->adap_enable(adap, true);
-               if (err) {
-                       mutex_unlock(&devnode->lock);
-                       kfree(fh);
-                       return err;
-               }
-       }
-       filp->private_data = fh;
-
-       /* Queue up initial state events */
-       ev.state_change.phys_addr = adap->phys_addr;
-       ev.state_change.log_addr_mask = adap->log_addrs.log_addr_mask;
-       ev.state_change.have_conn_info =
-               adap->conn_info.type != CEC_CONNECTOR_TYPE_NO_CONNECTOR;
-       cec_queue_event_fh(fh, &ev, 0);
-#ifdef CONFIG_CEC_PIN
-       if (adap->pin && adap->pin->ops->read_hpd) {
-               err = adap->pin->ops->read_hpd(adap);
-               if (err >= 0) {
-                       ev.event = err ? CEC_EVENT_PIN_HPD_HIGH :
-                                        CEC_EVENT_PIN_HPD_LOW;
-                       cec_queue_event_fh(fh, &ev, 0);
-               }
-       }
-       if (adap->pin && adap->pin->ops->read_5v) {
-               err = adap->pin->ops->read_5v(adap);
-               if (err >= 0) {
-                       ev.event = err ? CEC_EVENT_PIN_5V_HIGH :
-                                        CEC_EVENT_PIN_5V_LOW;
-                       cec_queue_event_fh(fh, &ev, 0);
-               }
-       }
-#endif
-
-       list_add(&fh->list, &devnode->fhs);
-       mutex_unlock(&devnode->lock);
-
-       return 0;
-}
-
-/* Override for the release function */
-static int cec_release(struct inode *inode, struct file *filp)
-{
-       struct cec_devnode *devnode = cec_devnode_data(filp);
-       struct cec_adapter *adap = to_cec_adapter(devnode);
-       struct cec_fh *fh = filp->private_data;
-       unsigned int i;
-
-       mutex_lock(&adap->lock);
-       if (adap->cec_initiator == fh)
-               adap->cec_initiator = NULL;
-       if (adap->cec_follower == fh) {
-               adap->cec_follower = NULL;
-               adap->passthrough = false;
-       }
-       if (fh->mode_follower == CEC_MODE_FOLLOWER)
-               adap->follower_cnt--;
-       if (fh->mode_follower == CEC_MODE_MONITOR_PIN)
-               cec_monitor_pin_cnt_dec(adap);
-       if (fh->mode_follower == CEC_MODE_MONITOR_ALL)
-               cec_monitor_all_cnt_dec(adap);
-       mutex_unlock(&adap->lock);
-
-       mutex_lock(&devnode->lock);
-       list_del(&fh->list);
-       if (cec_is_registered(adap) && list_empty(&devnode->fhs) &&
-           !adap->needs_hpd && adap->phys_addr == CEC_PHYS_ADDR_INVALID) {
-               WARN_ON(adap->ops->adap_enable(adap, false));
-       }
-       mutex_unlock(&devnode->lock);
-
-       /* Unhook pending transmits from this filehandle. */
-       mutex_lock(&adap->lock);
-       while (!list_empty(&fh->xfer_list)) {
-               struct cec_data *data =
-                       list_first_entry(&fh->xfer_list, struct cec_data, xfer_list);
-
-               data->blocking = false;
-               data->fh = NULL;
-               list_del(&data->xfer_list);
-       }
-       mutex_unlock(&adap->lock);
-       while (!list_empty(&fh->msgs)) {
-               struct cec_msg_entry *entry =
-                       list_first_entry(&fh->msgs, struct cec_msg_entry, list);
-
-               list_del(&entry->list);
-               kfree(entry);
-       }
-       for (i = CEC_NUM_CORE_EVENTS; i < CEC_NUM_EVENTS; i++) {
-               while (!list_empty(&fh->events[i])) {
-                       struct cec_event_entry *entry =
-                               list_first_entry(&fh->events[i],
-                                                struct cec_event_entry, list);
-
-                       list_del(&entry->list);
-                       kfree(entry);
-               }
-       }
-       kfree(fh);
-
-       cec_put_device(devnode);
-       filp->private_data = NULL;
-       return 0;
-}
-
-const struct file_operations cec_devnode_fops = {
-       .owner = THIS_MODULE,
-       .open = cec_open,
-       .unlocked_ioctl = cec_ioctl,
-       .compat_ioctl = cec_ioctl,
-       .release = cec_release,
-       .poll = cec_poll,
-       .llseek = no_llseek,
-};
diff --git a/drivers/media/cec/cec-core.c b/drivers/media/cec/cec-core.c
deleted file mode 100644 (file)
index 0c52e1b..0000000
+++ /dev/null
@@ -1,465 +0,0 @@
-// SPDX-License-Identifier: GPL-2.0-only
-/*
- * cec-core.c - HDMI Consumer Electronics Control framework - Core
- *
- * Copyright 2016 Cisco Systems, Inc. and/or its affiliates. All rights reserved.
- */
-
-#include <linux/errno.h>
-#include <linux/init.h>
-#include <linux/module.h>
-#include <linux/kernel.h>
-#include <linux/kmod.h>
-#include <linux/slab.h>
-#include <linux/mm.h>
-#include <linux/string.h>
-#include <linux/types.h>
-
-#include "cec-priv.h"
-
-#define CEC_NUM_DEVICES        256
-#define CEC_NAME       "cec"
-
-int cec_debug;
-module_param_named(debug, cec_debug, int, 0644);
-MODULE_PARM_DESC(debug, "debug level (0-2)");
-
-static bool debug_phys_addr;
-module_param(debug_phys_addr, bool, 0644);
-MODULE_PARM_DESC(debug_phys_addr, "add CEC_CAP_PHYS_ADDR if set");
-
-static dev_t cec_dev_t;
-
-/* Active devices */
-static DEFINE_MUTEX(cec_devnode_lock);
-static DECLARE_BITMAP(cec_devnode_nums, CEC_NUM_DEVICES);
-
-static struct dentry *top_cec_dir;
-
-/* dev to cec_devnode */
-#define to_cec_devnode(cd) container_of(cd, struct cec_devnode, dev)
-
-int cec_get_device(struct cec_devnode *devnode)
-{
-       /*
-        * Check if the cec device is available. This needs to be done with
-        * the devnode->lock held to prevent an open/unregister race:
-        * without the lock, the device could be unregistered and freed between
-        * the devnode->registered check and get_device() calls, leading to
-        * a crash.
-        */
-       mutex_lock(&devnode->lock);
-       /*
-        * return ENXIO if the cec device has been removed
-        * already or if it is not registered anymore.
-        */
-       if (!devnode->registered) {
-               mutex_unlock(&devnode->lock);
-               return -ENXIO;
-       }
-       /* and increase the device refcount */
-       get_device(&devnode->dev);
-       mutex_unlock(&devnode->lock);
-       return 0;
-}
-
-void cec_put_device(struct cec_devnode *devnode)
-{
-       put_device(&devnode->dev);
-}
-
-/* Called when the last user of the cec device exits. */
-static void cec_devnode_release(struct device *cd)
-{
-       struct cec_devnode *devnode = to_cec_devnode(cd);
-
-       mutex_lock(&cec_devnode_lock);
-       /* Mark device node number as free */
-       clear_bit(devnode->minor, cec_devnode_nums);
-       mutex_unlock(&cec_devnode_lock);
-
-       cec_delete_adapter(to_cec_adapter(devnode));
-}
-
-static struct bus_type cec_bus_type = {
-       .name = CEC_NAME,
-};
-
-/*
- * Register a cec device node
- *
- * The registration code assigns minor numbers and registers the new device node
- * with the kernel. An error is returned if no free minor number can be found,
- * or if the registration of the device node fails.
- *
- * Zero is returned on success.
- *
- * Note that if the cec_devnode_register call fails, the release() callback of
- * the cec_devnode structure is *not* called, so the caller is responsible for
- * freeing any data.
- */
-static int __must_check cec_devnode_register(struct cec_devnode *devnode,
-                                            struct module *owner)
-{
-       int minor;
-       int ret;
-
-       /* Part 1: Find a free minor number */
-       mutex_lock(&cec_devnode_lock);
-       minor = find_next_zero_bit(cec_devnode_nums, CEC_NUM_DEVICES, 0);
-       if (minor == CEC_NUM_DEVICES) {
-               mutex_unlock(&cec_devnode_lock);
-               pr_err("could not get a free minor\n");
-               return -ENFILE;
-       }
-
-       set_bit(minor, cec_devnode_nums);
-       mutex_unlock(&cec_devnode_lock);
-
-       devnode->minor = minor;
-       devnode->dev.bus = &cec_bus_type;
-       devnode->dev.devt = MKDEV(MAJOR(cec_dev_t), minor);
-       devnode->dev.release = cec_devnode_release;
-       dev_set_name(&devnode->dev, "cec%d", devnode->minor);
-       device_initialize(&devnode->dev);
-
-       /* Part 2: Initialize and register the character device */
-       cdev_init(&devnode->cdev, &cec_devnode_fops);
-       devnode->cdev.owner = owner;
-       kobject_set_name(&devnode->cdev.kobj, "cec%d", devnode->minor);
-
-       devnode->registered = true;
-       ret = cdev_device_add(&devnode->cdev, &devnode->dev);
-       if (ret) {
-               devnode->registered = false;
-               pr_err("%s: cdev_device_add failed\n", __func__);
-               goto clr_bit;
-       }
-
-       return 0;
-
-clr_bit:
-       mutex_lock(&cec_devnode_lock);
-       clear_bit(devnode->minor, cec_devnode_nums);
-       mutex_unlock(&cec_devnode_lock);
-       return ret;
-}
-
-/*
- * Unregister a cec device node
- *
- * This unregisters the passed device. Future open calls will be met with
- * errors.
- *
- * This function can safely be called if the device node has never been
- * registered or has already been unregistered.
- */
-static void cec_devnode_unregister(struct cec_adapter *adap)
-{
-       struct cec_devnode *devnode = &adap->devnode;
-       struct cec_fh *fh;
-
-       mutex_lock(&devnode->lock);
-
-       /* Check if devnode was never registered or already unregistered */
-       if (!devnode->registered || devnode->unregistered) {
-               mutex_unlock(&devnode->lock);
-               return;
-       }
-
-       list_for_each_entry(fh, &devnode->fhs, list)
-               wake_up_interruptible(&fh->wait);
-
-       devnode->registered = false;
-       devnode->unregistered = true;
-       mutex_unlock(&devnode->lock);
-
-       mutex_lock(&adap->lock);
-       __cec_s_phys_addr(adap, CEC_PHYS_ADDR_INVALID, false);
-       __cec_s_log_addrs(adap, NULL, false);
-       mutex_unlock(&adap->lock);
-
-       cdev_device_del(&devnode->cdev, &devnode->dev);
-       put_device(&devnode->dev);
-}
-
-#ifdef CONFIG_DEBUG_FS
-static ssize_t cec_error_inj_write(struct file *file,
-       const char __user *ubuf, size_t count, loff_t *ppos)
-{
-       struct seq_file *sf = file->private_data;
-       struct cec_adapter *adap = sf->private;
-       char *buf;
-       char *line;
-       char *p;
-
-       buf = memdup_user_nul(ubuf, min_t(size_t, PAGE_SIZE, count));
-       if (IS_ERR(buf))
-               return PTR_ERR(buf);
-       p = buf;
-       while (p && *p) {
-               p = skip_spaces(p);
-               line = strsep(&p, "\n");
-               if (!*line || *line == '#')
-                       continue;
-               if (!adap->ops->error_inj_parse_line(adap, line)) {
-                       kfree(buf);
-                       return -EINVAL;
-               }
-       }
-       kfree(buf);
-       return count;
-}
-
-static int cec_error_inj_show(struct seq_file *sf, void *unused)
-{
-       struct cec_adapter *adap = sf->private;
-
-       return adap->ops->error_inj_show(adap, sf);
-}
-
-static int cec_error_inj_open(struct inode *inode, struct file *file)
-{
-       return single_open(file, cec_error_inj_show, inode->i_private);
-}
-
-static const struct file_operations cec_error_inj_fops = {
-       .open = cec_error_inj_open,
-       .write = cec_error_inj_write,
-       .read = seq_read,
-       .llseek = seq_lseek,
-       .release = single_release,
-};
-#endif
-
-struct cec_adapter *cec_allocate_adapter(const struct cec_adap_ops *ops,
-                                        void *priv, const char *name, u32 caps,
-                                        u8 available_las)
-{
-       struct cec_adapter *adap;
-       int res;
-
-#ifndef CONFIG_MEDIA_CEC_RC
-       caps &= ~CEC_CAP_RC;
-#endif
-
-       if (WARN_ON(!caps))
-               return ERR_PTR(-EINVAL);
-       if (WARN_ON(!ops))
-               return ERR_PTR(-EINVAL);
-       if (WARN_ON(!available_las || available_las > CEC_MAX_LOG_ADDRS))
-               return ERR_PTR(-EINVAL);
-       adap = kzalloc(sizeof(*adap), GFP_KERNEL);
-       if (!adap)
-               return ERR_PTR(-ENOMEM);
-       strscpy(adap->name, name, sizeof(adap->name));
-       adap->phys_addr = CEC_PHYS_ADDR_INVALID;
-       adap->cec_pin_is_high = true;
-       adap->log_addrs.cec_version = CEC_OP_CEC_VERSION_2_0;
-       adap->log_addrs.vendor_id = CEC_VENDOR_ID_NONE;
-       adap->capabilities = caps;
-       if (debug_phys_addr)
-               adap->capabilities |= CEC_CAP_PHYS_ADDR;
-       adap->needs_hpd = caps & CEC_CAP_NEEDS_HPD;
-       adap->available_log_addrs = available_las;
-       adap->sequence = 0;
-       adap->ops = ops;
-       adap->priv = priv;
-       memset(adap->phys_addrs, 0xff, sizeof(adap->phys_addrs));
-       mutex_init(&adap->lock);
-       INIT_LIST_HEAD(&adap->transmit_queue);
-       INIT_LIST_HEAD(&adap->wait_queue);
-       init_waitqueue_head(&adap->kthread_waitq);
-
-       /* adap->devnode initialization */
-       INIT_LIST_HEAD(&adap->devnode.fhs);
-       mutex_init(&adap->devnode.lock);
-
-       adap->kthread = kthread_run(cec_thread_func, adap, "cec-%s", name);
-       if (IS_ERR(adap->kthread)) {
-               pr_err("cec-%s: kernel_thread() failed\n", name);
-               res = PTR_ERR(adap->kthread);
-               kfree(adap);
-               return ERR_PTR(res);
-       }
-
-#ifdef CONFIG_MEDIA_CEC_RC
-       if (!(caps & CEC_CAP_RC))
-               return adap;
-
-       /* Prepare the RC input device */
-       adap->rc = rc_allocate_device(RC_DRIVER_SCANCODE);
-       if (!adap->rc) {
-               pr_err("cec-%s: failed to allocate memory for rc_dev\n",
-                      name);
-               kthread_stop(adap->kthread);
-               kfree(adap);
-               return ERR_PTR(-ENOMEM);
-       }
-
-       snprintf(adap->input_phys, sizeof(adap->input_phys),
-                "%s/input0", adap->name);
-
-       adap->rc->device_name = adap->name;
-       adap->rc->input_phys = adap->input_phys;
-       adap->rc->input_id.bustype = BUS_CEC;
-       adap->rc->input_id.vendor = 0;
-       adap->rc->input_id.product = 0;
-       adap->rc->input_id.version = 1;
-       adap->rc->driver_name = CEC_NAME;
-       adap->rc->allowed_protocols = RC_PROTO_BIT_CEC;
-       adap->rc->priv = adap;
-       adap->rc->map_name = RC_MAP_CEC;
-       adap->rc->timeout = MS_TO_NS(550);
-#endif
-       return adap;
-}
-EXPORT_SYMBOL_GPL(cec_allocate_adapter);
-
-int cec_register_adapter(struct cec_adapter *adap,
-                        struct device *parent)
-{
-       int res;
-
-       if (IS_ERR_OR_NULL(adap))
-               return 0;
-
-       if (WARN_ON(!parent))
-               return -EINVAL;
-
-       adap->owner = parent->driver->owner;
-       adap->devnode.dev.parent = parent;
-
-#ifdef CONFIG_MEDIA_CEC_RC
-       if (adap->capabilities & CEC_CAP_RC) {
-               adap->rc->dev.parent = parent;
-               res = rc_register_device(adap->rc);
-
-               if (res) {
-                       pr_err("cec-%s: failed to prepare input device\n",
-                              adap->name);
-                       rc_free_device(adap->rc);
-                       adap->rc = NULL;
-                       return res;
-               }
-       }
-#endif
-
-       res = cec_devnode_register(&adap->devnode, adap->owner);
-       if (res) {
-#ifdef CONFIG_MEDIA_CEC_RC
-               /* Note: rc_unregister also calls rc_free */
-               rc_unregister_device(adap->rc);
-               adap->rc = NULL;
-#endif
-               return res;
-       }
-
-       dev_set_drvdata(&adap->devnode.dev, adap);
-#ifdef CONFIG_DEBUG_FS
-       if (!top_cec_dir)
-               return 0;
-
-       adap->cec_dir = debugfs_create_dir(dev_name(&adap->devnode.dev), top_cec_dir);
-       if (IS_ERR_OR_NULL(adap->cec_dir)) {
-               pr_warn("cec-%s: Failed to create debugfs dir\n", adap->name);
-               return 0;
-       }
-       adap->status_file = debugfs_create_devm_seqfile(&adap->devnode.dev,
-               "status", adap->cec_dir, cec_adap_status);
-       if (IS_ERR_OR_NULL(adap->status_file)) {
-               pr_warn("cec-%s: Failed to create status file\n", adap->name);
-               debugfs_remove_recursive(adap->cec_dir);
-               adap->cec_dir = NULL;
-               return 0;
-       }
-       if (!adap->ops->error_inj_show || !adap->ops->error_inj_parse_line)
-               return 0;
-       adap->error_inj_file = debugfs_create_file("error-inj", 0644,
-                                                  adap->cec_dir, adap,
-                                                  &cec_error_inj_fops);
-       if (IS_ERR_OR_NULL(adap->error_inj_file))
-               pr_warn("cec-%s: Failed to create error-inj file\n",
-                       adap->name);
-#endif
-       return 0;
-}
-EXPORT_SYMBOL_GPL(cec_register_adapter);
-
-void cec_unregister_adapter(struct cec_adapter *adap)
-{
-       if (IS_ERR_OR_NULL(adap))
-               return;
-
-#ifdef CONFIG_MEDIA_CEC_RC
-       /* Note: rc_unregister also calls rc_free */
-       rc_unregister_device(adap->rc);
-       adap->rc = NULL;
-#endif
-       debugfs_remove_recursive(adap->cec_dir);
-#ifdef CONFIG_CEC_NOTIFIER
-       cec_notifier_cec_adap_unregister(adap->notifier, adap);
-#endif
-       cec_devnode_unregister(adap);
-}
-EXPORT_SYMBOL_GPL(cec_unregister_adapter);
-
-void cec_delete_adapter(struct cec_adapter *adap)
-{
-       if (IS_ERR_OR_NULL(adap))
-               return;
-       kthread_stop(adap->kthread);
-       if (adap->kthread_config)
-               kthread_stop(adap->kthread_config);
-       if (adap->ops->adap_free)
-               adap->ops->adap_free(adap);
-#ifdef CONFIG_MEDIA_CEC_RC
-       rc_free_device(adap->rc);
-#endif
-       kfree(adap);
-}
-EXPORT_SYMBOL_GPL(cec_delete_adapter);
-
-/*
- *     Initialise cec for linux
- */
-static int __init cec_devnode_init(void)
-{
-       int ret = alloc_chrdev_region(&cec_dev_t, 0, CEC_NUM_DEVICES, CEC_NAME);
-
-       if (ret < 0) {
-               pr_warn("cec: unable to allocate major\n");
-               return ret;
-       }
-
-#ifdef CONFIG_DEBUG_FS
-       top_cec_dir = debugfs_create_dir("cec", NULL);
-       if (IS_ERR_OR_NULL(top_cec_dir)) {
-               pr_warn("cec: Failed to create debugfs cec dir\n");
-               top_cec_dir = NULL;
-       }
-#endif
-
-       ret = bus_register(&cec_bus_type);
-       if (ret < 0) {
-               unregister_chrdev_region(cec_dev_t, CEC_NUM_DEVICES);
-               pr_warn("cec: bus_register failed\n");
-               return -EIO;
-       }
-
-       return 0;
-}
-
-static void __exit cec_devnode_exit(void)
-{
-       debugfs_remove_recursive(top_cec_dir);
-       bus_unregister(&cec_bus_type);
-       unregister_chrdev_region(cec_dev_t, CEC_NUM_DEVICES);
-}
-
-subsys_initcall(cec_devnode_init);
-module_exit(cec_devnode_exit)
-
-MODULE_AUTHOR("Hans Verkuil <hans.verkuil@cisco.com>");
-MODULE_DESCRIPTION("Device node registration for cec drivers");
-MODULE_LICENSE("GPL");
diff --git a/drivers/media/cec/cec-notifier.c b/drivers/media/cec/cec-notifier.c
deleted file mode 100644 (file)
index e748cd5..0000000
+++ /dev/null
@@ -1,236 +0,0 @@
-// SPDX-License-Identifier: GPL-2.0-only
-/*
- * cec-notifier.c - notify CEC drivers of physical address changes
- *
- * Copyright 2016 Russell King <rmk+kernel@arm.linux.org.uk>
- * Copyright 2016-2017 Cisco Systems, Inc. and/or its affiliates. All rights reserved.
- */
-
-#include <linux/export.h>
-#include <linux/string.h>
-#include <linux/slab.h>
-#include <linux/list.h>
-#include <linux/kref.h>
-#include <linux/of_platform.h>
-
-#include <media/cec.h>
-#include <media/cec-notifier.h>
-#include <drm/drm_edid.h>
-
-struct cec_notifier {
-       struct mutex lock;
-       struct list_head head;
-       struct kref kref;
-       struct device *hdmi_dev;
-       struct cec_connector_info conn_info;
-       const char *port_name;
-       struct cec_adapter *cec_adap;
-
-       u16 phys_addr;
-};
-
-static LIST_HEAD(cec_notifiers);
-static DEFINE_MUTEX(cec_notifiers_lock);
-
-/**
- * cec_notifier_get_conn - find or create a new cec_notifier for the given
- * device and connector tuple.
- * @hdmi_dev: device that sends the events.
- * @port_name: the connector name from which the event occurs
- *
- * If a notifier for device @dev already exists, then increase the refcount
- * and return that notifier.
- *
- * If it doesn't exist, then allocate a new notifier struct and return a
- * pointer to that new struct.
- *
- * Return NULL if the memory could not be allocated.
- */
-static struct cec_notifier *
-cec_notifier_get_conn(struct device *hdmi_dev, const char *port_name)
-{
-       struct cec_notifier *n;
-
-       mutex_lock(&cec_notifiers_lock);
-       list_for_each_entry(n, &cec_notifiers, head) {
-               if (n->hdmi_dev == hdmi_dev &&
-                   (!port_name ||
-                    (n->port_name && !strcmp(n->port_name, port_name)))) {
-                       kref_get(&n->kref);
-                       mutex_unlock(&cec_notifiers_lock);
-                       return n;
-               }
-       }
-       n = kzalloc(sizeof(*n), GFP_KERNEL);
-       if (!n)
-               goto unlock;
-       n->hdmi_dev = hdmi_dev;
-       if (port_name) {
-               n->port_name = kstrdup(port_name, GFP_KERNEL);
-               if (!n->port_name) {
-                       kfree(n);
-                       n = NULL;
-                       goto unlock;
-               }
-       }
-       n->phys_addr = CEC_PHYS_ADDR_INVALID;
-
-       mutex_init(&n->lock);
-       kref_init(&n->kref);
-       list_add_tail(&n->head, &cec_notifiers);
-unlock:
-       mutex_unlock(&cec_notifiers_lock);
-       return n;
-}
-
-static void cec_notifier_release(struct kref *kref)
-{
-       struct cec_notifier *n =
-               container_of(kref, struct cec_notifier, kref);
-
-       list_del(&n->head);
-       kfree(n->port_name);
-       kfree(n);
-}
-
-static void cec_notifier_put(struct cec_notifier *n)
-{
-       mutex_lock(&cec_notifiers_lock);
-       kref_put(&n->kref, cec_notifier_release);
-       mutex_unlock(&cec_notifiers_lock);
-}
-
-struct cec_notifier *
-cec_notifier_conn_register(struct device *hdmi_dev, const char *port_name,
-                          const struct cec_connector_info *conn_info)
-{
-       struct cec_notifier *n = cec_notifier_get_conn(hdmi_dev, port_name);
-
-       if (!n)
-               return n;
-
-       mutex_lock(&n->lock);
-       n->phys_addr = CEC_PHYS_ADDR_INVALID;
-       if (conn_info)
-               n->conn_info = *conn_info;
-       else
-               memset(&n->conn_info, 0, sizeof(n->conn_info));
-       if (n->cec_adap) {
-               cec_phys_addr_invalidate(n->cec_adap);
-               cec_s_conn_info(n->cec_adap, conn_info);
-       }
-       mutex_unlock(&n->lock);
-       return n;
-}
-EXPORT_SYMBOL_GPL(cec_notifier_conn_register);
-
-void cec_notifier_conn_unregister(struct cec_notifier *n)
-{
-       if (!n)
-               return;
-
-       mutex_lock(&n->lock);
-       memset(&n->conn_info, 0, sizeof(n->conn_info));
-       n->phys_addr = CEC_PHYS_ADDR_INVALID;
-       if (n->cec_adap) {
-               cec_phys_addr_invalidate(n->cec_adap);
-               cec_s_conn_info(n->cec_adap, NULL);
-       }
-       mutex_unlock(&n->lock);
-       cec_notifier_put(n);
-}
-EXPORT_SYMBOL_GPL(cec_notifier_conn_unregister);
-
-struct cec_notifier *
-cec_notifier_cec_adap_register(struct device *hdmi_dev, const char *port_name,
-                              struct cec_adapter *adap)
-{
-       struct cec_notifier *n;
-
-       if (WARN_ON(!adap))
-               return NULL;
-
-       n = cec_notifier_get_conn(hdmi_dev, port_name);
-       if (!n)
-               return n;
-
-       mutex_lock(&n->lock);
-       n->cec_adap = adap;
-       adap->conn_info = n->conn_info;
-       adap->notifier = n;
-       cec_s_phys_addr(adap, n->phys_addr, false);
-       mutex_unlock(&n->lock);
-       return n;
-}
-EXPORT_SYMBOL_GPL(cec_notifier_cec_adap_register);
-
-void cec_notifier_cec_adap_unregister(struct cec_notifier *n,
-                                     struct cec_adapter *adap)
-{
-       if (!n)
-               return;
-
-       mutex_lock(&n->lock);
-       adap->notifier = NULL;
-       n->cec_adap = NULL;
-       mutex_unlock(&n->lock);
-       cec_notifier_put(n);
-}
-EXPORT_SYMBOL_GPL(cec_notifier_cec_adap_unregister);
-
-void cec_notifier_set_phys_addr(struct cec_notifier *n, u16 pa)
-{
-       if (n == NULL)
-               return;
-
-       mutex_lock(&n->lock);
-       n->phys_addr = pa;
-       if (n->cec_adap)
-               cec_s_phys_addr(n->cec_adap, n->phys_addr, false);
-       mutex_unlock(&n->lock);
-}
-EXPORT_SYMBOL_GPL(cec_notifier_set_phys_addr);
-
-void cec_notifier_set_phys_addr_from_edid(struct cec_notifier *n,
-                                         const struct edid *edid)
-{
-       u16 pa = CEC_PHYS_ADDR_INVALID;
-
-       if (n == NULL)
-               return;
-
-       if (edid && edid->extensions)
-               pa = cec_get_edid_phys_addr((const u8 *)edid,
-                               EDID_LENGTH * (edid->extensions + 1), NULL);
-       cec_notifier_set_phys_addr(n, pa);
-}
-EXPORT_SYMBOL_GPL(cec_notifier_set_phys_addr_from_edid);
-
-struct device *cec_notifier_parse_hdmi_phandle(struct device *dev)
-{
-       struct platform_device *hdmi_pdev;
-       struct device *hdmi_dev = NULL;
-       struct device_node *np;
-
-       np = of_parse_phandle(dev->of_node, "hdmi-phandle", 0);
-
-       if (!np) {
-               dev_err(dev, "Failed to find HDMI node in device tree\n");
-               return ERR_PTR(-ENODEV);
-       }
-       hdmi_pdev = of_find_device_by_node(np);
-       of_node_put(np);
-       if (hdmi_pdev) {
-               hdmi_dev = &hdmi_pdev->dev;
-               /*
-                * Note that the device struct is only used as a key into the
-                * cec_notifiers list, it is never actually accessed.
-                * So we decrement the reference here so we don't leak
-                * memory.
-                */
-               put_device(hdmi_dev);
-               return hdmi_dev;
-       }
-       return ERR_PTR(-EPROBE_DEFER);
-}
-EXPORT_SYMBOL_GPL(cec_notifier_parse_hdmi_phandle);
diff --git a/drivers/media/cec/cec-pin-error-inj.c b/drivers/media/cec/cec-pin-error-inj.c
deleted file mode 100644 (file)
index c0088d3..0000000
+++ /dev/null
@@ -1,345 +0,0 @@
-// SPDX-License-Identifier: GPL-2.0-only
-/*
- * Copyright 2017 Cisco Systems, Inc. and/or its affiliates. All rights reserved.
- */
-
-#include <linux/delay.h>
-#include <linux/slab.h>
-#include <linux/sched/types.h>
-
-#include <media/cec-pin.h>
-#include "cec-pin-priv.h"
-
-struct cec_error_inj_cmd {
-       unsigned int mode_offset;
-       int arg_idx;
-       const char *cmd;
-};
-
-static const struct cec_error_inj_cmd cec_error_inj_cmds[] = {
-       { CEC_ERROR_INJ_RX_NACK_OFFSET, -1, "rx-nack" },
-       { CEC_ERROR_INJ_RX_LOW_DRIVE_OFFSET,
-         CEC_ERROR_INJ_RX_LOW_DRIVE_ARG_IDX, "rx-low-drive" },
-       { CEC_ERROR_INJ_RX_ADD_BYTE_OFFSET, -1, "rx-add-byte" },
-       { CEC_ERROR_INJ_RX_REMOVE_BYTE_OFFSET, -1, "rx-remove-byte" },
-       { CEC_ERROR_INJ_RX_ARB_LOST_OFFSET,
-         CEC_ERROR_INJ_RX_ARB_LOST_ARG_IDX, "rx-arb-lost" },
-
-       { CEC_ERROR_INJ_TX_NO_EOM_OFFSET, -1, "tx-no-eom" },
-       { CEC_ERROR_INJ_TX_EARLY_EOM_OFFSET, -1, "tx-early-eom" },
-       { CEC_ERROR_INJ_TX_ADD_BYTES_OFFSET,
-         CEC_ERROR_INJ_TX_ADD_BYTES_ARG_IDX, "tx-add-bytes" },
-       { CEC_ERROR_INJ_TX_REMOVE_BYTE_OFFSET, -1, "tx-remove-byte" },
-       { CEC_ERROR_INJ_TX_SHORT_BIT_OFFSET,
-         CEC_ERROR_INJ_TX_SHORT_BIT_ARG_IDX, "tx-short-bit" },
-       { CEC_ERROR_INJ_TX_LONG_BIT_OFFSET,
-         CEC_ERROR_INJ_TX_LONG_BIT_ARG_IDX, "tx-long-bit" },
-       { CEC_ERROR_INJ_TX_CUSTOM_BIT_OFFSET,
-         CEC_ERROR_INJ_TX_CUSTOM_BIT_ARG_IDX, "tx-custom-bit" },
-       { CEC_ERROR_INJ_TX_SHORT_START_OFFSET, -1, "tx-short-start" },
-       { CEC_ERROR_INJ_TX_LONG_START_OFFSET, -1, "tx-long-start" },
-       { CEC_ERROR_INJ_TX_CUSTOM_START_OFFSET, -1, "tx-custom-start" },
-       { CEC_ERROR_INJ_TX_LAST_BIT_OFFSET,
-         CEC_ERROR_INJ_TX_LAST_BIT_ARG_IDX, "tx-last-bit" },
-       { CEC_ERROR_INJ_TX_LOW_DRIVE_OFFSET,
-         CEC_ERROR_INJ_TX_LOW_DRIVE_ARG_IDX, "tx-low-drive" },
-       { 0, -1, NULL }
-};
-
-u16 cec_pin_rx_error_inj(struct cec_pin *pin)
-{
-       u16 cmd = CEC_ERROR_INJ_OP_ANY;
-
-       /* Only when 18 bits have been received do we have a valid cmd */
-       if (!(pin->error_inj[cmd] & CEC_ERROR_INJ_RX_MASK) &&
-           pin->rx_bit >= 18)
-               cmd = pin->rx_msg.msg[1];
-       return (pin->error_inj[cmd] & CEC_ERROR_INJ_RX_MASK) ? cmd :
-               CEC_ERROR_INJ_OP_ANY;
-}
-
-u16 cec_pin_tx_error_inj(struct cec_pin *pin)
-{
-       u16 cmd = CEC_ERROR_INJ_OP_ANY;
-
-       if (!(pin->error_inj[cmd] & CEC_ERROR_INJ_TX_MASK) &&
-           pin->tx_msg.len > 1)
-               cmd = pin->tx_msg.msg[1];
-       return (pin->error_inj[cmd] & CEC_ERROR_INJ_TX_MASK) ? cmd :
-               CEC_ERROR_INJ_OP_ANY;
-}
-
-bool cec_pin_error_inj_parse_line(struct cec_adapter *adap, char *line)
-{
-       static const char *delims = " \t\r";
-       struct cec_pin *pin = adap->pin;
-       unsigned int i;
-       bool has_pos = false;
-       char *p = line;
-       char *token;
-       char *comma;
-       u64 *error;
-       u8 *args;
-       bool has_op;
-       u8 op;
-       u8 mode;
-       u8 pos;
-
-       p = skip_spaces(p);
-       token = strsep(&p, delims);
-       if (!strcmp(token, "clear")) {
-               memset(pin->error_inj, 0, sizeof(pin->error_inj));
-               pin->rx_toggle = pin->tx_toggle = false;
-               pin->tx_ignore_nack_until_eom = false;
-               pin->tx_custom_pulse = false;
-               pin->tx_custom_low_usecs = CEC_TIM_CUSTOM_DEFAULT;
-               pin->tx_custom_high_usecs = CEC_TIM_CUSTOM_DEFAULT;
-               return true;
-       }
-       if (!strcmp(token, "rx-clear")) {
-               for (i = 0; i <= CEC_ERROR_INJ_OP_ANY; i++)
-                       pin->error_inj[i] &= ~CEC_ERROR_INJ_RX_MASK;
-               pin->rx_toggle = false;
-               return true;
-       }
-       if (!strcmp(token, "tx-clear")) {
-               for (i = 0; i <= CEC_ERROR_INJ_OP_ANY; i++)
-                       pin->error_inj[i] &= ~CEC_ERROR_INJ_TX_MASK;
-               pin->tx_toggle = false;
-               pin->tx_ignore_nack_until_eom = false;
-               pin->tx_custom_pulse = false;
-               pin->tx_custom_low_usecs = CEC_TIM_CUSTOM_DEFAULT;
-               pin->tx_custom_high_usecs = CEC_TIM_CUSTOM_DEFAULT;
-               return true;
-       }
-       if (!strcmp(token, "tx-ignore-nack-until-eom")) {
-               pin->tx_ignore_nack_until_eom = true;
-               return true;
-       }
-       if (!strcmp(token, "tx-custom-pulse")) {
-               pin->tx_custom_pulse = true;
-               cec_pin_start_timer(pin);
-               return true;
-       }
-       if (!p)
-               return false;
-
-       p = skip_spaces(p);
-       if (!strcmp(token, "tx-custom-low-usecs")) {
-               u32 usecs;
-
-               if (kstrtou32(p, 0, &usecs) || usecs > 10000000)
-                       return false;
-               pin->tx_custom_low_usecs = usecs;
-               return true;
-       }
-       if (!strcmp(token, "tx-custom-high-usecs")) {
-               u32 usecs;
-
-               if (kstrtou32(p, 0, &usecs) || usecs > 10000000)
-                       return false;
-               pin->tx_custom_high_usecs = usecs;
-               return true;
-       }
-
-       comma = strchr(token, ',');
-       if (comma)
-               *comma++ = '\0';
-       if (!strcmp(token, "any")) {
-               has_op = false;
-               error = pin->error_inj + CEC_ERROR_INJ_OP_ANY;
-               args = pin->error_inj_args[CEC_ERROR_INJ_OP_ANY];
-       } else if (!kstrtou8(token, 0, &op)) {
-               has_op = true;
-               error = pin->error_inj + op;
-               args = pin->error_inj_args[op];
-       } else {
-               return false;
-       }
-
-       mode = CEC_ERROR_INJ_MODE_ONCE;
-       if (comma) {
-               if (!strcmp(comma, "off"))
-                       mode = CEC_ERROR_INJ_MODE_OFF;
-               else if (!strcmp(comma, "once"))
-                       mode = CEC_ERROR_INJ_MODE_ONCE;
-               else if (!strcmp(comma, "always"))
-                       mode = CEC_ERROR_INJ_MODE_ALWAYS;
-               else if (!strcmp(comma, "toggle"))
-                       mode = CEC_ERROR_INJ_MODE_TOGGLE;
-               else
-                       return false;
-       }
-
-       token = strsep(&p, delims);
-       if (p) {
-               p = skip_spaces(p);
-               has_pos = !kstrtou8(p, 0, &pos);
-       }
-
-       if (!strcmp(token, "clear")) {
-               *error = 0;
-               return true;
-       }
-       if (!strcmp(token, "rx-clear")) {
-               *error &= ~CEC_ERROR_INJ_RX_MASK;
-               return true;
-       }
-       if (!strcmp(token, "tx-clear")) {
-               *error &= ~CEC_ERROR_INJ_TX_MASK;
-               return true;
-       }
-
-       for (i = 0; cec_error_inj_cmds[i].cmd; i++) {
-               const char *cmd = cec_error_inj_cmds[i].cmd;
-               unsigned int mode_offset;
-               u64 mode_mask;
-               int arg_idx;
-               bool is_bit_pos = true;
-
-               if (strcmp(token, cmd))
-                       continue;
-
-               mode_offset = cec_error_inj_cmds[i].mode_offset;
-               mode_mask = CEC_ERROR_INJ_MODE_MASK << mode_offset;
-               arg_idx = cec_error_inj_cmds[i].arg_idx;
-
-               if (mode_offset == CEC_ERROR_INJ_RX_ARB_LOST_OFFSET) {
-                       if (has_op)
-                               return false;
-                       if (!has_pos)
-                               pos = 0x0f;
-                       is_bit_pos = false;
-               } else if (mode_offset == CEC_ERROR_INJ_TX_ADD_BYTES_OFFSET) {
-                       if (!has_pos || !pos)
-                               return false;
-                       is_bit_pos = false;
-               }
-
-               if (arg_idx >= 0 && is_bit_pos) {
-                       if (!has_pos || pos >= 160)
-                               return false;
-                       if (has_op && pos < 10 + 8)
-                               return false;
-                       /* Invalid bit position may not be the Ack bit */
-                       if ((mode_offset == CEC_ERROR_INJ_TX_SHORT_BIT_OFFSET ||
-                            mode_offset == CEC_ERROR_INJ_TX_LONG_BIT_OFFSET ||
-                            mode_offset == CEC_ERROR_INJ_TX_CUSTOM_BIT_OFFSET) &&
-                           (pos % 10) == 9)
-                               return false;
-               }
-               *error &= ~mode_mask;
-               *error |= (u64)mode << mode_offset;
-               if (arg_idx >= 0)
-                       args[arg_idx] = pos;
-               return true;
-       }
-       return false;
-}
-
-static void cec_pin_show_cmd(struct seq_file *sf, u32 cmd, u8 mode)
-{
-       if (cmd == CEC_ERROR_INJ_OP_ANY)
-               seq_puts(sf, "any,");
-       else
-               seq_printf(sf, "0x%02x,", cmd);
-       switch (mode) {
-       case CEC_ERROR_INJ_MODE_ONCE:
-               seq_puts(sf, "once ");
-               break;
-       case CEC_ERROR_INJ_MODE_ALWAYS:
-               seq_puts(sf, "always ");
-               break;
-       case CEC_ERROR_INJ_MODE_TOGGLE:
-               seq_puts(sf, "toggle ");
-               break;
-       default:
-               seq_puts(sf, "off ");
-               break;
-       }
-}
-
-int cec_pin_error_inj_show(struct cec_adapter *adap, struct seq_file *sf)
-{
-       struct cec_pin *pin = adap->pin;
-       unsigned int i, j;
-
-       seq_puts(sf, "# Clear error injections:\n");
-       seq_puts(sf, "#   clear          clear all rx and tx error injections\n");
-       seq_puts(sf, "#   rx-clear       clear all rx error injections\n");
-       seq_puts(sf, "#   tx-clear       clear all tx error injections\n");
-       seq_puts(sf, "#   <op> clear     clear all rx and tx error injections for <op>\n");
-       seq_puts(sf, "#   <op> rx-clear  clear all rx error injections for <op>\n");
-       seq_puts(sf, "#   <op> tx-clear  clear all tx error injections for <op>\n");
-       seq_puts(sf, "#\n");
-       seq_puts(sf, "# RX error injection:\n");
-       seq_puts(sf, "#   <op>[,<mode>] rx-nack              NACK the message instead of sending an ACK\n");
-       seq_puts(sf, "#   <op>[,<mode>] rx-low-drive <bit>   force a low-drive condition at this bit position\n");
-       seq_puts(sf, "#   <op>[,<mode>] rx-add-byte          add a spurious byte to the received CEC message\n");
-       seq_puts(sf, "#   <op>[,<mode>] rx-remove-byte       remove the last byte from the received CEC message\n");
-       seq_puts(sf, "#   <op>[,<mode>] rx-arb-lost <poll>   generate a POLL message to trigger an arbitration lost\n");
-       seq_puts(sf, "#\n");
-       seq_puts(sf, "# TX error injection settings:\n");
-       seq_puts(sf, "#   tx-ignore-nack-until-eom           ignore early NACKs until EOM\n");
-       seq_puts(sf, "#   tx-custom-low-usecs <usecs>        define the 'low' time for the custom pulse\n");
-       seq_puts(sf, "#   tx-custom-high-usecs <usecs>       define the 'high' time for the custom pulse\n");
-       seq_puts(sf, "#   tx-custom-pulse                    transmit the custom pulse once the bus is idle\n");
-       seq_puts(sf, "#\n");
-       seq_puts(sf, "# TX error injection:\n");
-       seq_puts(sf, "#   <op>[,<mode>] tx-no-eom            don't set the EOM bit\n");
-       seq_puts(sf, "#   <op>[,<mode>] tx-early-eom         set the EOM bit one byte too soon\n");
-       seq_puts(sf, "#   <op>[,<mode>] tx-add-bytes <num>   append <num> (1-255) spurious bytes to the message\n");
-       seq_puts(sf, "#   <op>[,<mode>] tx-remove-byte       drop the last byte from the message\n");
-       seq_puts(sf, "#   <op>[,<mode>] tx-short-bit <bit>   make this bit shorter than allowed\n");
-       seq_puts(sf, "#   <op>[,<mode>] tx-long-bit <bit>    make this bit longer than allowed\n");
-       seq_puts(sf, "#   <op>[,<mode>] tx-custom-bit <bit>  send the custom pulse instead of this bit\n");
-       seq_puts(sf, "#   <op>[,<mode>] tx-short-start       send a start pulse that's too short\n");
-       seq_puts(sf, "#   <op>[,<mode>] tx-long-start        send a start pulse that's too long\n");
-       seq_puts(sf, "#   <op>[,<mode>] tx-custom-start      send the custom pulse instead of the start pulse\n");
-       seq_puts(sf, "#   <op>[,<mode>] tx-last-bit <bit>    stop sending after this bit\n");
-       seq_puts(sf, "#   <op>[,<mode>] tx-low-drive <bit>   force a low-drive condition at this bit position\n");
-       seq_puts(sf, "#\n");
-       seq_puts(sf, "# <op>       CEC message opcode (0-255) or 'any'\n");
-       seq_puts(sf, "# <mode>     'once' (default), 'always', 'toggle' or 'off'\n");
-       seq_puts(sf, "# <bit>      CEC message bit (0-159)\n");
-       seq_puts(sf, "#            10 bits per 'byte': bits 0-7: data, bit 8: EOM, bit 9: ACK\n");
-       seq_puts(sf, "# <poll>     CEC poll message used to test arbitration lost (0x00-0xff, default 0x0f)\n");
-       seq_puts(sf, "# <usecs>    microseconds (0-10000000, default 1000)\n");
-
-       seq_puts(sf, "\nclear\n");
-
-       for (i = 0; i < ARRAY_SIZE(pin->error_inj); i++) {
-               u64 e = pin->error_inj[i];
-
-               for (j = 0; cec_error_inj_cmds[j].cmd; j++) {
-                       const char *cmd = cec_error_inj_cmds[j].cmd;
-                       unsigned int mode;
-                       unsigned int mode_offset;
-                       int arg_idx;
-
-                       mode_offset = cec_error_inj_cmds[j].mode_offset;
-                       arg_idx = cec_error_inj_cmds[j].arg_idx;
-                       mode = (e >> mode_offset) & CEC_ERROR_INJ_MODE_MASK;
-                       if (!mode)
-                               continue;
-                       cec_pin_show_cmd(sf, i, mode);
-                       seq_puts(sf, cmd);
-                       if (arg_idx >= 0)
-                               seq_printf(sf, " %u",
-                                          pin->error_inj_args[i][arg_idx]);
-                       seq_puts(sf, "\n");
-               }
-       }
-
-       if (pin->tx_ignore_nack_until_eom)
-               seq_puts(sf, "tx-ignore-nack-until-eom\n");
-       if (pin->tx_custom_pulse)
-               seq_puts(sf, "tx-custom-pulse\n");
-       if (pin->tx_custom_low_usecs != CEC_TIM_CUSTOM_DEFAULT)
-               seq_printf(sf, "tx-custom-low-usecs %u\n",
-                          pin->tx_custom_low_usecs);
-       if (pin->tx_custom_high_usecs != CEC_TIM_CUSTOM_DEFAULT)
-               seq_printf(sf, "tx-custom-high-usecs %u\n",
-                          pin->tx_custom_high_usecs);
-       return 0;
-}
diff --git a/drivers/media/cec/cec-pin-priv.h b/drivers/media/cec/cec-pin-priv.h
deleted file mode 100644 (file)
index f423db8..0000000
+++ /dev/null
@@ -1,241 +0,0 @@
-/* SPDX-License-Identifier: GPL-2.0-only */
-/*
- * cec-pin-priv.h - internal cec-pin header
- *
- * Copyright 2017 Cisco Systems, Inc. and/or its affiliates. All rights reserved.
- */
-
-#ifndef LINUX_CEC_PIN_PRIV_H
-#define LINUX_CEC_PIN_PRIV_H
-
-#include <linux/types.h>
-#include <linux/atomic.h>
-#include <media/cec-pin.h>
-
-enum cec_pin_state {
-       /* CEC is off */
-       CEC_ST_OFF,
-       /* CEC is idle, waiting for Rx or Tx */
-       CEC_ST_IDLE,
-
-       /* Tx states */
-
-       /* Pending Tx, waiting for Signal Free Time to expire */
-       CEC_ST_TX_WAIT,
-       /* Low-drive was detected, wait for bus to go high */
-       CEC_ST_TX_WAIT_FOR_HIGH,
-       /* Drive CEC low for the start bit */
-       CEC_ST_TX_START_BIT_LOW,
-       /* Drive CEC high for the start bit */
-       CEC_ST_TX_START_BIT_HIGH,
-       /* Generate a start bit period that is too short */
-       CEC_ST_TX_START_BIT_HIGH_SHORT,
-       /* Generate a start bit period that is too long */
-       CEC_ST_TX_START_BIT_HIGH_LONG,
-       /* Drive CEC low for the start bit using the custom timing */
-       CEC_ST_TX_START_BIT_LOW_CUSTOM,
-       /* Drive CEC high for the start bit using the custom timing */
-       CEC_ST_TX_START_BIT_HIGH_CUSTOM,
-       /* Drive CEC low for the 0 bit */
-       CEC_ST_TX_DATA_BIT_0_LOW,
-       /* Drive CEC high for the 0 bit */
-       CEC_ST_TX_DATA_BIT_0_HIGH,
-       /* Generate a bit period that is too short */
-       CEC_ST_TX_DATA_BIT_0_HIGH_SHORT,
-       /* Generate a bit period that is too long */
-       CEC_ST_TX_DATA_BIT_0_HIGH_LONG,
-       /* Drive CEC low for the 1 bit */
-       CEC_ST_TX_DATA_BIT_1_LOW,
-       /* Drive CEC high for the 1 bit */
-       CEC_ST_TX_DATA_BIT_1_HIGH,
-       /* Generate a bit period that is too short */
-       CEC_ST_TX_DATA_BIT_1_HIGH_SHORT,
-       /* Generate a bit period that is too long */
-       CEC_ST_TX_DATA_BIT_1_HIGH_LONG,
-       /*
-        * Wait for start of sample time to check for Ack bit or first
-        * four initiator bits to check for Arbitration Lost.
-        */
-       CEC_ST_TX_DATA_BIT_1_HIGH_PRE_SAMPLE,
-       /* Wait for end of bit period after sampling */
-       CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE,
-       /* Generate a bit period that is too short */
-       CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE_SHORT,
-       /* Generate a bit period that is too long */
-       CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE_LONG,
-       /* Drive CEC low for a data bit using the custom timing */
-       CEC_ST_TX_DATA_BIT_LOW_CUSTOM,
-       /* Drive CEC high for a data bit using the custom timing */
-       CEC_ST_TX_DATA_BIT_HIGH_CUSTOM,
-       /* Drive CEC low for a standalone pulse using the custom timing */
-       CEC_ST_TX_PULSE_LOW_CUSTOM,
-       /* Drive CEC high for a standalone pulse using the custom timing */
-       CEC_ST_TX_PULSE_HIGH_CUSTOM,
-       /* Start low drive */
-       CEC_ST_TX_LOW_DRIVE,
-
-       /* Rx states */
-
-       /* Start bit low detected */
-       CEC_ST_RX_START_BIT_LOW,
-       /* Start bit high detected */
-       CEC_ST_RX_START_BIT_HIGH,
-       /* Wait for bit sample time */
-       CEC_ST_RX_DATA_SAMPLE,
-       /* Wait for earliest end of bit period after sampling */
-       CEC_ST_RX_DATA_POST_SAMPLE,
-       /* Wait for CEC to go low (i.e. end of bit period) */
-       CEC_ST_RX_DATA_WAIT_FOR_LOW,
-       /* Drive CEC low to send 0 Ack bit */
-       CEC_ST_RX_ACK_LOW,
-       /* End of 0 Ack time, wait for earliest end of bit period */
-       CEC_ST_RX_ACK_LOW_POST,
-       /* Wait for CEC to go high (i.e. end of bit period */
-       CEC_ST_RX_ACK_HIGH_POST,
-       /* Wait for earliest end of bit period and end of message */
-       CEC_ST_RX_ACK_FINISH,
-       /* Start low drive */
-       CEC_ST_RX_LOW_DRIVE,
-
-       /* Monitor pin using interrupts */
-       CEC_ST_RX_IRQ,
-
-       /* Total number of pin states */
-       CEC_PIN_STATES
-};
-
-/* Error Injection */
-
-/* Error injection modes */
-#define CEC_ERROR_INJ_MODE_OFF                         0
-#define CEC_ERROR_INJ_MODE_ONCE                                1
-#define CEC_ERROR_INJ_MODE_ALWAYS                      2
-#define CEC_ERROR_INJ_MODE_TOGGLE                      3
-#define CEC_ERROR_INJ_MODE_MASK                                3ULL
-
-/* Receive error injection options */
-#define CEC_ERROR_INJ_RX_NACK_OFFSET                   0
-#define CEC_ERROR_INJ_RX_LOW_DRIVE_OFFSET              2
-#define CEC_ERROR_INJ_RX_ADD_BYTE_OFFSET               4
-#define CEC_ERROR_INJ_RX_REMOVE_BYTE_OFFSET            6
-#define CEC_ERROR_INJ_RX_ARB_LOST_OFFSET               8
-#define CEC_ERROR_INJ_RX_MASK                          0xffffULL
-
-/* Transmit error injection options */
-#define CEC_ERROR_INJ_TX_NO_EOM_OFFSET                 16
-#define CEC_ERROR_INJ_TX_EARLY_EOM_OFFSET              18
-#define CEC_ERROR_INJ_TX_SHORT_BIT_OFFSET              20
-#define CEC_ERROR_INJ_TX_LONG_BIT_OFFSET               22
-#define CEC_ERROR_INJ_TX_CUSTOM_BIT_OFFSET             24
-#define CEC_ERROR_INJ_TX_SHORT_START_OFFSET            26
-#define CEC_ERROR_INJ_TX_LONG_START_OFFSET             28
-#define CEC_ERROR_INJ_TX_CUSTOM_START_OFFSET           30
-#define CEC_ERROR_INJ_TX_LAST_BIT_OFFSET               32
-#define CEC_ERROR_INJ_TX_ADD_BYTES_OFFSET              34
-#define CEC_ERROR_INJ_TX_REMOVE_BYTE_OFFSET            36
-#define CEC_ERROR_INJ_TX_LOW_DRIVE_OFFSET              38
-#define CEC_ERROR_INJ_TX_MASK                          0xffffffffffff0000ULL
-
-#define CEC_ERROR_INJ_RX_LOW_DRIVE_ARG_IDX             0
-#define CEC_ERROR_INJ_RX_ARB_LOST_ARG_IDX              1
-
-#define CEC_ERROR_INJ_TX_ADD_BYTES_ARG_IDX             2
-#define CEC_ERROR_INJ_TX_SHORT_BIT_ARG_IDX             3
-#define CEC_ERROR_INJ_TX_LONG_BIT_ARG_IDX              4
-#define CEC_ERROR_INJ_TX_CUSTOM_BIT_ARG_IDX            5
-#define CEC_ERROR_INJ_TX_LAST_BIT_ARG_IDX              6
-#define CEC_ERROR_INJ_TX_LOW_DRIVE_ARG_IDX             7
-#define CEC_ERROR_INJ_NUM_ARGS                         8
-
-/* Special CEC op values */
-#define CEC_ERROR_INJ_OP_ANY                           0x00000100
-
-/* The default for the low/high time of the custom pulse */
-#define CEC_TIM_CUSTOM_DEFAULT                         1000
-
-#define CEC_NUM_PIN_EVENTS                             128
-#define CEC_PIN_EVENT_FL_IS_HIGH                       (1 << 0)
-#define CEC_PIN_EVENT_FL_DROPPED                       (1 << 1)
-
-#define CEC_PIN_IRQ_UNCHANGED  0
-#define CEC_PIN_IRQ_DISABLE    1
-#define CEC_PIN_IRQ_ENABLE     2
-
-struct cec_pin {
-       struct cec_adapter              *adap;
-       const struct cec_pin_ops        *ops;
-       struct task_struct              *kthread;
-       wait_queue_head_t               kthread_waitq;
-       struct hrtimer                  timer;
-       ktime_t                         ts;
-       unsigned int                    wait_usecs;
-       u16                             la_mask;
-       bool                            enabled;
-       bool                            monitor_all;
-       bool                            rx_eom;
-       bool                            enable_irq_failed;
-       enum cec_pin_state              state;
-       struct cec_msg                  tx_msg;
-       u32                             tx_bit;
-       bool                            tx_nacked;
-       u32                             tx_signal_free_time;
-       bool                            tx_toggle;
-       struct cec_msg                  rx_msg;
-       u32                             rx_bit;
-       bool                            rx_toggle;
-       u32                             rx_start_bit_low_too_short_cnt;
-       u64                             rx_start_bit_low_too_short_ts;
-       u32                             rx_start_bit_low_too_short_delta;
-       u32                             rx_start_bit_too_short_cnt;
-       u64                             rx_start_bit_too_short_ts;
-       u32                             rx_start_bit_too_short_delta;
-       u32                             rx_start_bit_too_long_cnt;
-       u32                             rx_data_bit_too_short_cnt;
-       u64                             rx_data_bit_too_short_ts;
-       u32                             rx_data_bit_too_short_delta;
-       u32                             rx_data_bit_too_long_cnt;
-       u32                             rx_low_drive_cnt;
-
-       struct cec_msg                  work_rx_msg;
-       u8                              work_tx_status;
-       ktime_t                         work_tx_ts;
-       atomic_t                        work_irq_change;
-       atomic_t                        work_pin_num_events;
-       unsigned int                    work_pin_events_wr;
-       unsigned int                    work_pin_events_rd;
-       ktime_t                         work_pin_ts[CEC_NUM_PIN_EVENTS];
-       u8                              work_pin_events[CEC_NUM_PIN_EVENTS];
-       bool                            work_pin_events_dropped;
-       u32                             work_pin_events_dropped_cnt;
-       ktime_t                         timer_ts;
-       u32                             timer_cnt;
-       u32                             timer_100ms_overruns;
-       u32                             timer_300ms_overruns;
-       u32                             timer_max_overrun;
-       u32                             timer_sum_overrun;
-
-       u32                             tx_custom_low_usecs;
-       u32                             tx_custom_high_usecs;
-       bool                            tx_ignore_nack_until_eom;
-       bool                            tx_custom_pulse;
-       bool                            tx_generated_poll;
-       bool                            tx_post_eom;
-       u8                              tx_extra_bytes;
-       u32                             tx_low_drive_cnt;
-#ifdef CONFIG_CEC_PIN_ERROR_INJ
-       u64                             error_inj[CEC_ERROR_INJ_OP_ANY + 1];
-       u8                              error_inj_args[CEC_ERROR_INJ_OP_ANY + 1][CEC_ERROR_INJ_NUM_ARGS];
-#endif
-};
-
-void cec_pin_start_timer(struct cec_pin *pin);
-
-#ifdef CONFIG_CEC_PIN_ERROR_INJ
-bool cec_pin_error_inj_parse_line(struct cec_adapter *adap, char *line);
-int cec_pin_error_inj_show(struct cec_adapter *adap, struct seq_file *sf);
-
-u16 cec_pin_rx_error_inj(struct cec_pin *pin);
-u16 cec_pin_tx_error_inj(struct cec_pin *pin);
-#endif
-
-#endif
diff --git a/drivers/media/cec/cec-pin.c b/drivers/media/cec/cec-pin.c
deleted file mode 100644 (file)
index 660fe11..0000000
+++ /dev/null
@@ -1,1345 +0,0 @@
-// SPDX-License-Identifier: GPL-2.0-only
-/*
- * Copyright 2017 Cisco Systems, Inc. and/or its affiliates. All rights reserved.
- */
-
-#include <linux/delay.h>
-#include <linux/slab.h>
-#include <linux/sched/types.h>
-
-#include <media/cec-pin.h>
-#include "cec-pin-priv.h"
-
-/* All timings are in microseconds */
-
-/* start bit timings */
-#define CEC_TIM_START_BIT_LOW          3700
-#define CEC_TIM_START_BIT_LOW_MIN      3500
-#define CEC_TIM_START_BIT_LOW_MAX      3900
-#define CEC_TIM_START_BIT_TOTAL                4500
-#define CEC_TIM_START_BIT_TOTAL_MIN    4300
-#define CEC_TIM_START_BIT_TOTAL_MAX    4700
-
-/* data bit timings */
-#define CEC_TIM_DATA_BIT_0_LOW         1500
-#define CEC_TIM_DATA_BIT_0_LOW_MIN     1300
-#define CEC_TIM_DATA_BIT_0_LOW_MAX     1700
-#define CEC_TIM_DATA_BIT_1_LOW         600
-#define CEC_TIM_DATA_BIT_1_LOW_MIN     400
-#define CEC_TIM_DATA_BIT_1_LOW_MAX     800
-#define CEC_TIM_DATA_BIT_TOTAL         2400
-#define CEC_TIM_DATA_BIT_TOTAL_MIN     2050
-#define CEC_TIM_DATA_BIT_TOTAL_MAX     2750
-/* earliest safe time to sample the bit state */
-#define CEC_TIM_DATA_BIT_SAMPLE                850
-/* earliest time the bit is back to 1 (T7 + 50) */
-#define CEC_TIM_DATA_BIT_HIGH          1750
-
-/* when idle, sample once per millisecond */
-#define CEC_TIM_IDLE_SAMPLE            1000
-/* when processing the start bit, sample twice per millisecond */
-#define CEC_TIM_START_BIT_SAMPLE       500
-/* when polling for a state change, sample once every 50 microseconds */
-#define CEC_TIM_SAMPLE                 50
-
-#define CEC_TIM_LOW_DRIVE_ERROR                (1.5 * CEC_TIM_DATA_BIT_TOTAL)
-
-/*
- * Total data bit time that is too short/long for a valid bit,
- * used for error injection.
- */
-#define CEC_TIM_DATA_BIT_TOTAL_SHORT   1800
-#define CEC_TIM_DATA_BIT_TOTAL_LONG    2900
-
-/*
- * Total start bit time that is too short/long for a valid bit,
- * used for error injection.
- */
-#define CEC_TIM_START_BIT_TOTAL_SHORT  4100
-#define CEC_TIM_START_BIT_TOTAL_LONG   5000
-
-/* Data bits are 0-7, EOM is bit 8 and ACK is bit 9 */
-#define EOM_BIT                                8
-#define ACK_BIT                                9
-
-struct cec_state {
-       const char * const name;
-       unsigned int usecs;
-};
-
-static const struct cec_state states[CEC_PIN_STATES] = {
-       { "Off",                   0 },
-       { "Idle",                  CEC_TIM_IDLE_SAMPLE },
-       { "Tx Wait",               CEC_TIM_SAMPLE },
-       { "Tx Wait for High",      CEC_TIM_IDLE_SAMPLE },
-       { "Tx Start Bit Low",      CEC_TIM_START_BIT_LOW },
-       { "Tx Start Bit High",     CEC_TIM_START_BIT_TOTAL - CEC_TIM_START_BIT_LOW },
-       { "Tx Start Bit High Short", CEC_TIM_START_BIT_TOTAL_SHORT - CEC_TIM_START_BIT_LOW },
-       { "Tx Start Bit High Long", CEC_TIM_START_BIT_TOTAL_LONG - CEC_TIM_START_BIT_LOW },
-       { "Tx Start Bit Low Custom", 0 },
-       { "Tx Start Bit High Custom", 0 },
-       { "Tx Data 0 Low",         CEC_TIM_DATA_BIT_0_LOW },
-       { "Tx Data 0 High",        CEC_TIM_DATA_BIT_TOTAL - CEC_TIM_DATA_BIT_0_LOW },
-       { "Tx Data 0 High Short",  CEC_TIM_DATA_BIT_TOTAL_SHORT - CEC_TIM_DATA_BIT_0_LOW },
-       { "Tx Data 0 High Long",   CEC_TIM_DATA_BIT_TOTAL_LONG - CEC_TIM_DATA_BIT_0_LOW },
-       { "Tx Data 1 Low",         CEC_TIM_DATA_BIT_1_LOW },
-       { "Tx Data 1 High",        CEC_TIM_DATA_BIT_TOTAL - CEC_TIM_DATA_BIT_1_LOW },
-       { "Tx Data 1 High Short",  CEC_TIM_DATA_BIT_TOTAL_SHORT - CEC_TIM_DATA_BIT_1_LOW },
-       { "Tx Data 1 High Long",   CEC_TIM_DATA_BIT_TOTAL_LONG - CEC_TIM_DATA_BIT_1_LOW },
-       { "Tx Data 1 High Pre Sample", CEC_TIM_DATA_BIT_SAMPLE - CEC_TIM_DATA_BIT_1_LOW },
-       { "Tx Data 1 High Post Sample", CEC_TIM_DATA_BIT_TOTAL - CEC_TIM_DATA_BIT_SAMPLE },
-       { "Tx Data 1 High Post Sample Short", CEC_TIM_DATA_BIT_TOTAL_SHORT - CEC_TIM_DATA_BIT_SAMPLE },
-       { "Tx Data 1 High Post Sample Long", CEC_TIM_DATA_BIT_TOTAL_LONG - CEC_TIM_DATA_BIT_SAMPLE },
-       { "Tx Data Bit Low Custom", 0 },
-       { "Tx Data Bit High Custom", 0 },
-       { "Tx Pulse Low Custom",   0 },
-       { "Tx Pulse High Custom",  0 },
-       { "Tx Low Drive",          CEC_TIM_LOW_DRIVE_ERROR },
-       { "Rx Start Bit Low",      CEC_TIM_SAMPLE },
-       { "Rx Start Bit High",     CEC_TIM_SAMPLE },
-       { "Rx Data Sample",        CEC_TIM_DATA_BIT_SAMPLE },
-       { "Rx Data Post Sample",   CEC_TIM_DATA_BIT_HIGH - CEC_TIM_DATA_BIT_SAMPLE },
-       { "Rx Data Wait for Low",  CEC_TIM_SAMPLE },
-       { "Rx Ack Low",            CEC_TIM_DATA_BIT_0_LOW },
-       { "Rx Ack Low Post",       CEC_TIM_DATA_BIT_HIGH - CEC_TIM_DATA_BIT_0_LOW },
-       { "Rx Ack High Post",      CEC_TIM_DATA_BIT_HIGH },
-       { "Rx Ack Finish",         CEC_TIM_DATA_BIT_TOTAL_MIN - CEC_TIM_DATA_BIT_HIGH },
-       { "Rx Low Drive",          CEC_TIM_LOW_DRIVE_ERROR },
-       { "Rx Irq",                0 },
-};
-
-static void cec_pin_update(struct cec_pin *pin, bool v, bool force)
-{
-       if (!force && v == pin->adap->cec_pin_is_high)
-               return;
-
-       pin->adap->cec_pin_is_high = v;
-       if (atomic_read(&pin->work_pin_num_events) < CEC_NUM_PIN_EVENTS) {
-               u8 ev = v;
-
-               if (pin->work_pin_events_dropped) {
-                       pin->work_pin_events_dropped = false;
-                       ev |= CEC_PIN_EVENT_FL_DROPPED;
-               }
-               pin->work_pin_events[pin->work_pin_events_wr] = ev;
-               pin->work_pin_ts[pin->work_pin_events_wr] = ktime_get();
-               pin->work_pin_events_wr =
-                       (pin->work_pin_events_wr + 1) % CEC_NUM_PIN_EVENTS;
-               atomic_inc(&pin->work_pin_num_events);
-       } else {
-               pin->work_pin_events_dropped = true;
-               pin->work_pin_events_dropped_cnt++;
-       }
-       wake_up_interruptible(&pin->kthread_waitq);
-}
-
-static bool cec_pin_read(struct cec_pin *pin)
-{
-       bool v = pin->ops->read(pin->adap);
-
-       cec_pin_update(pin, v, false);
-       return v;
-}
-
-static void cec_pin_low(struct cec_pin *pin)
-{
-       pin->ops->low(pin->adap);
-       cec_pin_update(pin, false, false);
-}
-
-static bool cec_pin_high(struct cec_pin *pin)
-{
-       pin->ops->high(pin->adap);
-       return cec_pin_read(pin);
-}
-
-static bool rx_error_inj(struct cec_pin *pin, unsigned int mode_offset,
-                        int arg_idx, u8 *arg)
-{
-#ifdef CONFIG_CEC_PIN_ERROR_INJ
-       u16 cmd = cec_pin_rx_error_inj(pin);
-       u64 e = pin->error_inj[cmd];
-       unsigned int mode = (e >> mode_offset) & CEC_ERROR_INJ_MODE_MASK;
-
-       if (arg_idx >= 0) {
-               u8 pos = pin->error_inj_args[cmd][arg_idx];
-
-               if (arg)
-                       *arg = pos;
-               else if (pos != pin->rx_bit)
-                       return false;
-       }
-
-       switch (mode) {
-       case CEC_ERROR_INJ_MODE_ONCE:
-               pin->error_inj[cmd] &=
-                       ~(CEC_ERROR_INJ_MODE_MASK << mode_offset);
-               return true;
-       case CEC_ERROR_INJ_MODE_ALWAYS:
-               return true;
-       case CEC_ERROR_INJ_MODE_TOGGLE:
-               return pin->rx_toggle;
-       default:
-               return false;
-       }
-#else
-       return false;
-#endif
-}
-
-static bool rx_nack(struct cec_pin *pin)
-{
-       return rx_error_inj(pin, CEC_ERROR_INJ_RX_NACK_OFFSET, -1, NULL);
-}
-
-static bool rx_low_drive(struct cec_pin *pin)
-{
-       return rx_error_inj(pin, CEC_ERROR_INJ_RX_LOW_DRIVE_OFFSET,
-                           CEC_ERROR_INJ_RX_LOW_DRIVE_ARG_IDX, NULL);
-}
-
-static bool rx_add_byte(struct cec_pin *pin)
-{
-       return rx_error_inj(pin, CEC_ERROR_INJ_RX_ADD_BYTE_OFFSET, -1, NULL);
-}
-
-static bool rx_remove_byte(struct cec_pin *pin)
-{
-       return rx_error_inj(pin, CEC_ERROR_INJ_RX_REMOVE_BYTE_OFFSET, -1, NULL);
-}
-
-static bool rx_arb_lost(struct cec_pin *pin, u8 *poll)
-{
-       return pin->tx_msg.len == 0 &&
-               rx_error_inj(pin, CEC_ERROR_INJ_RX_ARB_LOST_OFFSET,
-                            CEC_ERROR_INJ_RX_ARB_LOST_ARG_IDX, poll);
-}
-
-static bool tx_error_inj(struct cec_pin *pin, unsigned int mode_offset,
-                        int arg_idx, u8 *arg)
-{
-#ifdef CONFIG_CEC_PIN_ERROR_INJ
-       u16 cmd = cec_pin_tx_error_inj(pin);
-       u64 e = pin->error_inj[cmd];
-       unsigned int mode = (e >> mode_offset) & CEC_ERROR_INJ_MODE_MASK;
-
-       if (arg_idx >= 0) {
-               u8 pos = pin->error_inj_args[cmd][arg_idx];
-
-               if (arg)
-                       *arg = pos;
-               else if (pos != pin->tx_bit)
-                       return false;
-       }
-
-       switch (mode) {
-       case CEC_ERROR_INJ_MODE_ONCE:
-               pin->error_inj[cmd] &=
-                       ~(CEC_ERROR_INJ_MODE_MASK << mode_offset);
-               return true;
-       case CEC_ERROR_INJ_MODE_ALWAYS:
-               return true;
-       case CEC_ERROR_INJ_MODE_TOGGLE:
-               return pin->tx_toggle;
-       default:
-               return false;
-       }
-#else
-       return false;
-#endif
-}
-
-static bool tx_no_eom(struct cec_pin *pin)
-{
-       return tx_error_inj(pin, CEC_ERROR_INJ_TX_NO_EOM_OFFSET, -1, NULL);
-}
-
-static bool tx_early_eom(struct cec_pin *pin)
-{
-       return tx_error_inj(pin, CEC_ERROR_INJ_TX_EARLY_EOM_OFFSET, -1, NULL);
-}
-
-static bool tx_short_bit(struct cec_pin *pin)
-{
-       return tx_error_inj(pin, CEC_ERROR_INJ_TX_SHORT_BIT_OFFSET,
-                           CEC_ERROR_INJ_TX_SHORT_BIT_ARG_IDX, NULL);
-}
-
-static bool tx_long_bit(struct cec_pin *pin)
-{
-       return tx_error_inj(pin, CEC_ERROR_INJ_TX_LONG_BIT_OFFSET,
-                           CEC_ERROR_INJ_TX_LONG_BIT_ARG_IDX, NULL);
-}
-
-static bool tx_custom_bit(struct cec_pin *pin)
-{
-       return tx_error_inj(pin, CEC_ERROR_INJ_TX_CUSTOM_BIT_OFFSET,
-                           CEC_ERROR_INJ_TX_CUSTOM_BIT_ARG_IDX, NULL);
-}
-
-static bool tx_short_start(struct cec_pin *pin)
-{
-       return tx_error_inj(pin, CEC_ERROR_INJ_TX_SHORT_START_OFFSET, -1, NULL);
-}
-
-static bool tx_long_start(struct cec_pin *pin)
-{
-       return tx_error_inj(pin, CEC_ERROR_INJ_TX_LONG_START_OFFSET, -1, NULL);
-}
-
-static bool tx_custom_start(struct cec_pin *pin)
-{
-       return tx_error_inj(pin, CEC_ERROR_INJ_TX_CUSTOM_START_OFFSET,
-                           -1, NULL);
-}
-
-static bool tx_last_bit(struct cec_pin *pin)
-{
-       return tx_error_inj(pin, CEC_ERROR_INJ_TX_LAST_BIT_OFFSET,
-                           CEC_ERROR_INJ_TX_LAST_BIT_ARG_IDX, NULL);
-}
-
-static u8 tx_add_bytes(struct cec_pin *pin)
-{
-       u8 bytes;
-
-       if (tx_error_inj(pin, CEC_ERROR_INJ_TX_ADD_BYTES_OFFSET,
-                        CEC_ERROR_INJ_TX_ADD_BYTES_ARG_IDX, &bytes))
-               return bytes;
-       return 0;
-}
-
-static bool tx_remove_byte(struct cec_pin *pin)
-{
-       return tx_error_inj(pin, CEC_ERROR_INJ_TX_REMOVE_BYTE_OFFSET, -1, NULL);
-}
-
-static bool tx_low_drive(struct cec_pin *pin)
-{
-       return tx_error_inj(pin, CEC_ERROR_INJ_TX_LOW_DRIVE_OFFSET,
-                           CEC_ERROR_INJ_TX_LOW_DRIVE_ARG_IDX, NULL);
-}
-
-static void cec_pin_to_idle(struct cec_pin *pin)
-{
-       /*
-        * Reset all status fields, release the bus and
-        * go to idle state.
-        */
-       pin->rx_bit = pin->tx_bit = 0;
-       pin->rx_msg.len = 0;
-       memset(pin->rx_msg.msg, 0, sizeof(pin->rx_msg.msg));
-       pin->ts = ns_to_ktime(0);
-       pin->tx_generated_poll = false;
-       pin->tx_post_eom = false;
-       if (pin->state >= CEC_ST_TX_WAIT &&
-           pin->state <= CEC_ST_TX_LOW_DRIVE)
-               pin->tx_toggle ^= 1;
-       if (pin->state >= CEC_ST_RX_START_BIT_LOW &&
-           pin->state <= CEC_ST_RX_LOW_DRIVE)
-               pin->rx_toggle ^= 1;
-       pin->state = CEC_ST_IDLE;
-}
-
-/*
- * Handle Transmit-related states
- *
- * Basic state changes when transmitting:
- *
- * Idle -> Tx Wait (waiting for the end of signal free time) ->
- *     Tx Start Bit Low -> Tx Start Bit High ->
- *
- *   Regular data bits + EOM:
- *     Tx Data 0 Low -> Tx Data 0 High ->
- *   or:
- *     Tx Data 1 Low -> Tx Data 1 High ->
- *
- *   First 4 data bits or Ack bit:
- *     Tx Data 0 Low -> Tx Data 0 High ->
- *   or:
- *     Tx Data 1 Low -> Tx Data 1 High -> Tx Data 1 Pre Sample ->
- *             Tx Data 1 Post Sample ->
- *
- *   After the last Ack go to Idle.
- *
- * If it detects a Low Drive condition then:
- *     Tx Wait For High -> Idle
- *
- * If it loses arbitration, then it switches to state Rx Data Post Sample.
- */
-static void cec_pin_tx_states(struct cec_pin *pin, ktime_t ts)
-{
-       bool v;
-       bool is_ack_bit, ack;
-
-       switch (pin->state) {
-       case CEC_ST_TX_WAIT_FOR_HIGH:
-               if (cec_pin_read(pin))
-                       cec_pin_to_idle(pin);
-               break;
-
-       case CEC_ST_TX_START_BIT_LOW:
-               if (tx_short_start(pin)) {
-                       /*
-                        * Error Injection: send an invalid (too short)
-                        * start pulse.
-                        */
-                       pin->state = CEC_ST_TX_START_BIT_HIGH_SHORT;
-               } else if (tx_long_start(pin)) {
-                       /*
-                        * Error Injection: send an invalid (too long)
-                        * start pulse.
-                        */
-                       pin->state = CEC_ST_TX_START_BIT_HIGH_LONG;
-               } else {
-                       pin->state = CEC_ST_TX_START_BIT_HIGH;
-               }
-               /* Generate start bit */
-               cec_pin_high(pin);
-               break;
-
-       case CEC_ST_TX_START_BIT_LOW_CUSTOM:
-               pin->state = CEC_ST_TX_START_BIT_HIGH_CUSTOM;
-               /* Generate start bit */
-               cec_pin_high(pin);
-               break;
-
-       case CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE:
-       case CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE_SHORT:
-       case CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE_LONG:
-               if (pin->tx_nacked) {
-                       cec_pin_to_idle(pin);
-                       pin->tx_msg.len = 0;
-                       if (pin->tx_generated_poll)
-                               break;
-                       pin->work_tx_ts = ts;
-                       pin->work_tx_status = CEC_TX_STATUS_NACK;
-                       wake_up_interruptible(&pin->kthread_waitq);
-                       break;
-               }
-               /* fall through */
-       case CEC_ST_TX_DATA_BIT_0_HIGH:
-       case CEC_ST_TX_DATA_BIT_0_HIGH_SHORT:
-       case CEC_ST_TX_DATA_BIT_0_HIGH_LONG:
-       case CEC_ST_TX_DATA_BIT_1_HIGH:
-       case CEC_ST_TX_DATA_BIT_1_HIGH_SHORT:
-       case CEC_ST_TX_DATA_BIT_1_HIGH_LONG:
-               /*
-                * If the read value is 1, then all is OK, otherwise we have a
-                * low drive condition.
-                *
-                * Special case: when we generate a poll message due to an
-                * Arbitration Lost error injection, then ignore this since
-                * the pin can actually be low in that case.
-                */
-               if (!cec_pin_read(pin) && !pin->tx_generated_poll) {
-                       /*
-                        * It's 0, so someone detected an error and pulled the
-                        * line low for 1.5 times the nominal bit period.
-                        */
-                       pin->tx_msg.len = 0;
-                       pin->state = CEC_ST_TX_WAIT_FOR_HIGH;
-                       pin->work_tx_ts = ts;
-                       pin->work_tx_status = CEC_TX_STATUS_LOW_DRIVE;
-                       pin->tx_low_drive_cnt++;
-                       wake_up_interruptible(&pin->kthread_waitq);
-                       break;
-               }
-               /* fall through */
-       case CEC_ST_TX_DATA_BIT_HIGH_CUSTOM:
-               if (tx_last_bit(pin)) {
-                       /* Error Injection: just stop sending after this bit */
-                       cec_pin_to_idle(pin);
-                       pin->tx_msg.len = 0;
-                       if (pin->tx_generated_poll)
-                               break;
-                       pin->work_tx_ts = ts;
-                       pin->work_tx_status = CEC_TX_STATUS_OK;
-                       wake_up_interruptible(&pin->kthread_waitq);
-                       break;
-               }
-               pin->tx_bit++;
-               /* fall through */
-       case CEC_ST_TX_START_BIT_HIGH:
-       case CEC_ST_TX_START_BIT_HIGH_SHORT:
-       case CEC_ST_TX_START_BIT_HIGH_LONG:
-       case CEC_ST_TX_START_BIT_HIGH_CUSTOM:
-               if (tx_low_drive(pin)) {
-                       /* Error injection: go to low drive */
-                       cec_pin_low(pin);
-                       pin->state = CEC_ST_TX_LOW_DRIVE;
-                       pin->tx_msg.len = 0;
-                       if (pin->tx_generated_poll)
-                               break;
-                       pin->work_tx_ts = ts;
-                       pin->work_tx_status = CEC_TX_STATUS_LOW_DRIVE;
-                       pin->tx_low_drive_cnt++;
-                       wake_up_interruptible(&pin->kthread_waitq);
-                       break;
-               }
-               if (pin->tx_bit / 10 >= pin->tx_msg.len + pin->tx_extra_bytes) {
-                       cec_pin_to_idle(pin);
-                       pin->tx_msg.len = 0;
-                       if (pin->tx_generated_poll)
-                               break;
-                       pin->work_tx_ts = ts;
-                       pin->work_tx_status = CEC_TX_STATUS_OK;
-                       wake_up_interruptible(&pin->kthread_waitq);
-                       break;
-               }
-
-               switch (pin->tx_bit % 10) {
-               default: {
-                       /*
-                        * In the CEC_ERROR_INJ_TX_ADD_BYTES case we transmit
-                        * extra bytes, so pin->tx_bit / 10 can become >= 16.
-                        * Generate bit values for those extra bytes instead
-                        * of reading them from the transmit buffer.
-                        */
-                       unsigned int idx = (pin->tx_bit / 10);
-                       u8 val = idx;
-
-                       if (idx < pin->tx_msg.len)
-                               val = pin->tx_msg.msg[idx];
-                       v = val & (1 << (7 - (pin->tx_bit % 10)));
-
-                       pin->state = v ? CEC_ST_TX_DATA_BIT_1_LOW :
-                                        CEC_ST_TX_DATA_BIT_0_LOW;
-                       break;
-               }
-               case EOM_BIT: {
-                       unsigned int tot_len = pin->tx_msg.len +
-                                              pin->tx_extra_bytes;
-                       unsigned int tx_byte_idx = pin->tx_bit / 10;
-
-                       v = !pin->tx_post_eom && tx_byte_idx == tot_len - 1;
-                       if (tot_len > 1 && tx_byte_idx == tot_len - 2 &&
-                           tx_early_eom(pin)) {
-                               /* Error injection: set EOM one byte early */
-                               v = true;
-                               pin->tx_post_eom = true;
-                       } else if (v && tx_no_eom(pin)) {
-                               /* Error injection: no EOM */
-                               v = false;
-                       }
-                       pin->state = v ? CEC_ST_TX_DATA_BIT_1_LOW :
-                                        CEC_ST_TX_DATA_BIT_0_LOW;
-                       break;
-               }
-               case ACK_BIT:
-                       pin->state = CEC_ST_TX_DATA_BIT_1_LOW;
-                       break;
-               }
-               if (tx_custom_bit(pin))
-                       pin->state = CEC_ST_TX_DATA_BIT_LOW_CUSTOM;
-               cec_pin_low(pin);
-               break;
-
-       case CEC_ST_TX_DATA_BIT_0_LOW:
-       case CEC_ST_TX_DATA_BIT_1_LOW:
-               v = pin->state == CEC_ST_TX_DATA_BIT_1_LOW;
-               is_ack_bit = pin->tx_bit % 10 == ACK_BIT;
-               if (v && (pin->tx_bit < 4 || is_ack_bit)) {
-                       pin->state = CEC_ST_TX_DATA_BIT_1_HIGH_PRE_SAMPLE;
-               } else if (!is_ack_bit && tx_short_bit(pin)) {
-                       /* Error Injection: send an invalid (too short) bit */
-                       pin->state = v ? CEC_ST_TX_DATA_BIT_1_HIGH_SHORT :
-                                        CEC_ST_TX_DATA_BIT_0_HIGH_SHORT;
-               } else if (!is_ack_bit && tx_long_bit(pin)) {
-                       /* Error Injection: send an invalid (too long) bit */
-                       pin->state = v ? CEC_ST_TX_DATA_BIT_1_HIGH_LONG :
-                                        CEC_ST_TX_DATA_BIT_0_HIGH_LONG;
-               } else {
-                       pin->state = v ? CEC_ST_TX_DATA_BIT_1_HIGH :
-                                        CEC_ST_TX_DATA_BIT_0_HIGH;
-               }
-               cec_pin_high(pin);
-               break;
-
-       case CEC_ST_TX_DATA_BIT_LOW_CUSTOM:
-               pin->state = CEC_ST_TX_DATA_BIT_HIGH_CUSTOM;
-               cec_pin_high(pin);
-               break;
-
-       case CEC_ST_TX_DATA_BIT_1_HIGH_PRE_SAMPLE:
-               /* Read the CEC value at the sample time */
-               v = cec_pin_read(pin);
-               is_ack_bit = pin->tx_bit % 10 == ACK_BIT;
-               /*
-                * If v == 0 and we're within the first 4 bits
-                * of the initiator, then someone else started
-                * transmitting and we lost the arbitration
-                * (i.e. the logical address of the other
-                * transmitter has more leading 0 bits in the
-                * initiator).
-                */
-               if (!v && !is_ack_bit && !pin->tx_generated_poll) {
-                       pin->tx_msg.len = 0;
-                       pin->work_tx_ts = ts;
-                       pin->work_tx_status = CEC_TX_STATUS_ARB_LOST;
-                       wake_up_interruptible(&pin->kthread_waitq);
-                       pin->rx_bit = pin->tx_bit;
-                       pin->tx_bit = 0;
-                       memset(pin->rx_msg.msg, 0, sizeof(pin->rx_msg.msg));
-                       pin->rx_msg.msg[0] = pin->tx_msg.msg[0];
-                       pin->rx_msg.msg[0] &= (0xff << (8 - pin->rx_bit));
-                       pin->rx_msg.len = 0;
-                       pin->ts = ktime_sub_us(ts, CEC_TIM_DATA_BIT_SAMPLE);
-                       pin->state = CEC_ST_RX_DATA_POST_SAMPLE;
-                       pin->rx_bit++;
-                       break;
-               }
-               pin->state = CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE;
-               if (!is_ack_bit && tx_short_bit(pin)) {
-                       /* Error Injection: send an invalid (too short) bit */
-                       pin->state = CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE_SHORT;
-               } else if (!is_ack_bit && tx_long_bit(pin)) {
-                       /* Error Injection: send an invalid (too long) bit */
-                       pin->state = CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE_LONG;
-               }
-               if (!is_ack_bit)
-                       break;
-               /* Was the message ACKed? */
-               ack = cec_msg_is_broadcast(&pin->tx_msg) ? v : !v;
-               if (!ack && (!pin->tx_ignore_nack_until_eom ||
-                   pin->tx_bit / 10 == pin->tx_msg.len - 1) &&
-                   !pin->tx_post_eom) {
-                       /*
-                        * Note: the CEC spec is ambiguous regarding
-                        * what action to take when a NACK appears
-                        * before the last byte of the payload was
-                        * transmitted: either stop transmitting
-                        * immediately, or wait until the last byte
-                        * was transmitted.
-                        *
-                        * Most CEC implementations appear to stop
-                        * immediately, and that's what we do here
-                        * as well.
-                        */
-                       pin->tx_nacked = true;
-               }
-               break;
-
-       case CEC_ST_TX_PULSE_LOW_CUSTOM:
-               cec_pin_high(pin);
-               pin->state = CEC_ST_TX_PULSE_HIGH_CUSTOM;
-               break;
-
-       case CEC_ST_TX_PULSE_HIGH_CUSTOM:
-               cec_pin_to_idle(pin);
-               break;
-
-       default:
-               break;
-       }
-}
-
-/*
- * Handle Receive-related states
- *
- * Basic state changes when receiving:
- *
- *     Rx Start Bit Low -> Rx Start Bit High ->
- *   Regular data bits + EOM:
- *     Rx Data Sample -> Rx Data Post Sample -> Rx Data High ->
- *   Ack bit 0:
- *     Rx Ack Low -> Rx Ack Low Post -> Rx Data High ->
- *   Ack bit 1:
- *     Rx Ack High Post -> Rx Data High ->
- *   Ack bit 0 && EOM:
- *     Rx Ack Low -> Rx Ack Low Post -> Rx Ack Finish -> Idle
- */
-static void cec_pin_rx_states(struct cec_pin *pin, ktime_t ts)
-{
-       s32 delta;
-       bool v;
-       bool ack;
-       bool bcast, for_us;
-       u8 dest;
-       u8 poll;
-
-       switch (pin->state) {
-       /* Receive states */
-       case CEC_ST_RX_START_BIT_LOW:
-               v = cec_pin_read(pin);
-               if (!v)
-                       break;
-               pin->state = CEC_ST_RX_START_BIT_HIGH;
-               delta = ktime_us_delta(ts, pin->ts);
-               /* Start bit low is too short, go back to idle */
-               if (delta < CEC_TIM_START_BIT_LOW_MIN - CEC_TIM_IDLE_SAMPLE) {
-                       if (!pin->rx_start_bit_low_too_short_cnt++) {
-                               pin->rx_start_bit_low_too_short_ts = ktime_to_ns(pin->ts);
-                               pin->rx_start_bit_low_too_short_delta = delta;
-                       }
-                       cec_pin_to_idle(pin);
-                       break;
-               }
-               if (rx_arb_lost(pin, &poll)) {
-                       cec_msg_init(&pin->tx_msg, poll >> 4, poll & 0xf);
-                       pin->tx_generated_poll = true;
-                       pin->tx_extra_bytes = 0;
-                       pin->state = CEC_ST_TX_START_BIT_HIGH;
-                       pin->ts = ts;
-               }
-               break;
-
-       case CEC_ST_RX_START_BIT_HIGH:
-               v = cec_pin_read(pin);
-               delta = ktime_us_delta(ts, pin->ts);
-               /*
-                * Unfortunately the spec does not specify when to give up
-                * and go to idle. We just pick TOTAL_LONG.
-                */
-               if (v && delta > CEC_TIM_START_BIT_TOTAL_LONG) {
-                       pin->rx_start_bit_too_long_cnt++;
-                       cec_pin_to_idle(pin);
-                       break;
-               }
-               if (v)
-                       break;
-               /* Start bit is too short, go back to idle */
-               if (delta < CEC_TIM_START_BIT_TOTAL_MIN - CEC_TIM_IDLE_SAMPLE) {
-                       if (!pin->rx_start_bit_too_short_cnt++) {
-                               pin->rx_start_bit_too_short_ts = ktime_to_ns(pin->ts);
-                               pin->rx_start_bit_too_short_delta = delta;
-                       }
-                       cec_pin_to_idle(pin);
-                       break;
-               }
-               if (rx_low_drive(pin)) {
-                       /* Error injection: go to low drive */
-                       cec_pin_low(pin);
-                       pin->state = CEC_ST_RX_LOW_DRIVE;
-                       pin->rx_low_drive_cnt++;
-                       break;
-               }
-               pin->state = CEC_ST_RX_DATA_SAMPLE;
-               pin->ts = ts;
-               pin->rx_eom = false;
-               break;
-
-       case CEC_ST_RX_DATA_SAMPLE:
-               v = cec_pin_read(pin);
-               pin->state = CEC_ST_RX_DATA_POST_SAMPLE;
-               switch (pin->rx_bit % 10) {
-               default:
-                       if (pin->rx_bit / 10 < CEC_MAX_MSG_SIZE)
-                               pin->rx_msg.msg[pin->rx_bit / 10] |=
-                                       v << (7 - (pin->rx_bit % 10));
-                       break;
-               case EOM_BIT:
-                       pin->rx_eom = v;
-                       pin->rx_msg.len = pin->rx_bit / 10 + 1;
-                       break;
-               case ACK_BIT:
-                       break;
-               }
-               pin->rx_bit++;
-               break;
-
-       case CEC_ST_RX_DATA_POST_SAMPLE:
-               pin->state = CEC_ST_RX_DATA_WAIT_FOR_LOW;
-               break;
-
-       case CEC_ST_RX_DATA_WAIT_FOR_LOW:
-               v = cec_pin_read(pin);
-               delta = ktime_us_delta(ts, pin->ts);
-               /*
-                * Unfortunately the spec does not specify when to give up
-                * and go to idle. We just pick TOTAL_LONG.
-                */
-               if (v && delta > CEC_TIM_DATA_BIT_TOTAL_LONG) {
-                       pin->rx_data_bit_too_long_cnt++;
-                       cec_pin_to_idle(pin);
-                       break;
-               }
-               if (v)
-                       break;
-
-               if (rx_low_drive(pin)) {
-                       /* Error injection: go to low drive */
-                       cec_pin_low(pin);
-                       pin->state = CEC_ST_RX_LOW_DRIVE;
-                       pin->rx_low_drive_cnt++;
-                       break;
-               }
-
-               /*
-                * Go to low drive state when the total bit time is
-                * too short.
-                */
-               if (delta < CEC_TIM_DATA_BIT_TOTAL_MIN) {
-                       if (!pin->rx_data_bit_too_short_cnt++) {
-                               pin->rx_data_bit_too_short_ts = ktime_to_ns(pin->ts);
-                               pin->rx_data_bit_too_short_delta = delta;
-                       }
-                       cec_pin_low(pin);
-                       pin->state = CEC_ST_RX_LOW_DRIVE;
-                       pin->rx_low_drive_cnt++;
-                       break;
-               }
-               pin->ts = ts;
-               if (pin->rx_bit % 10 != 9) {
-                       pin->state = CEC_ST_RX_DATA_SAMPLE;
-                       break;
-               }
-
-               dest = cec_msg_destination(&pin->rx_msg);
-               bcast = dest == CEC_LOG_ADDR_BROADCAST;
-               /* for_us == broadcast or directed to us */
-               for_us = bcast || (pin->la_mask & (1 << dest));
-               /* ACK bit value */
-               ack = bcast ? 1 : !for_us;
-
-               if (for_us && rx_nack(pin)) {
-                       /* Error injection: toggle the ACK bit */
-                       ack = !ack;
-               }
-
-               if (ack) {
-                       /* No need to write to the bus, just wait */
-                       pin->state = CEC_ST_RX_ACK_HIGH_POST;
-                       break;
-               }
-               cec_pin_low(pin);
-               pin->state = CEC_ST_RX_ACK_LOW;
-               break;
-
-       case CEC_ST_RX_ACK_LOW:
-               cec_pin_high(pin);
-               pin->state = CEC_ST_RX_ACK_LOW_POST;
-               break;
-
-       case CEC_ST_RX_ACK_LOW_POST:
-       case CEC_ST_RX_ACK_HIGH_POST:
-               v = cec_pin_read(pin);
-               if (v && pin->rx_eom) {
-                       pin->work_rx_msg = pin->rx_msg;
-                       pin->work_rx_msg.rx_ts = ktime_to_ns(ts);
-                       wake_up_interruptible(&pin->kthread_waitq);
-                       pin->ts = ts;
-                       pin->state = CEC_ST_RX_ACK_FINISH;
-                       break;
-               }
-               pin->rx_bit++;
-               pin->state = CEC_ST_RX_DATA_WAIT_FOR_LOW;
-               break;
-
-       case CEC_ST_RX_ACK_FINISH:
-               cec_pin_to_idle(pin);
-               break;
-
-       default:
-               break;
-       }
-}
-
-/*
- * Main timer function
- *
- */
-static enum hrtimer_restart cec_pin_timer(struct hrtimer *timer)
-{
-       struct cec_pin *pin = container_of(timer, struct cec_pin, timer);
-       struct cec_adapter *adap = pin->adap;
-       ktime_t ts;
-       s32 delta;
-       u32 usecs;
-
-       ts = ktime_get();
-       if (ktime_to_ns(pin->timer_ts)) {
-               delta = ktime_us_delta(ts, pin->timer_ts);
-               pin->timer_cnt++;
-               if (delta > 100 && pin->state != CEC_ST_IDLE) {
-                       /* Keep track of timer overruns */
-                       pin->timer_sum_overrun += delta;
-                       pin->timer_100ms_overruns++;
-                       if (delta > 300)
-                               pin->timer_300ms_overruns++;
-                       if (delta > pin->timer_max_overrun)
-                               pin->timer_max_overrun = delta;
-               }
-       }
-       if (adap->monitor_pin_cnt)
-               cec_pin_read(pin);
-
-       if (pin->wait_usecs) {
-               /*
-                * If we are monitoring the pin, then we have to
-                * sample at regular intervals.
-                */
-               if (pin->wait_usecs > 150) {
-                       pin->wait_usecs -= 100;
-                       pin->timer_ts = ktime_add_us(ts, 100);
-                       hrtimer_forward_now(timer, ns_to_ktime(100000));
-                       return HRTIMER_RESTART;
-               }
-               if (pin->wait_usecs > 100) {
-                       pin->wait_usecs /= 2;
-                       pin->timer_ts = ktime_add_us(ts, pin->wait_usecs);
-                       hrtimer_forward_now(timer,
-                                       ns_to_ktime(pin->wait_usecs * 1000));
-                       return HRTIMER_RESTART;
-               }
-               pin->timer_ts = ktime_add_us(ts, pin->wait_usecs);
-               hrtimer_forward_now(timer,
-                                   ns_to_ktime(pin->wait_usecs * 1000));
-               pin->wait_usecs = 0;
-               return HRTIMER_RESTART;
-       }
-
-       switch (pin->state) {
-       /* Transmit states */
-       case CEC_ST_TX_WAIT_FOR_HIGH:
-       case CEC_ST_TX_START_BIT_LOW:
-       case CEC_ST_TX_START_BIT_HIGH:
-       case CEC_ST_TX_START_BIT_HIGH_SHORT:
-       case CEC_ST_TX_START_BIT_HIGH_LONG:
-       case CEC_ST_TX_START_BIT_LOW_CUSTOM:
-       case CEC_ST_TX_START_BIT_HIGH_CUSTOM:
-       case CEC_ST_TX_DATA_BIT_0_LOW:
-       case CEC_ST_TX_DATA_BIT_0_HIGH:
-       case CEC_ST_TX_DATA_BIT_0_HIGH_SHORT:
-       case CEC_ST_TX_DATA_BIT_0_HIGH_LONG:
-       case CEC_ST_TX_DATA_BIT_1_LOW:
-       case CEC_ST_TX_DATA_BIT_1_HIGH:
-       case CEC_ST_TX_DATA_BIT_1_HIGH_SHORT:
-       case CEC_ST_TX_DATA_BIT_1_HIGH_LONG:
-       case CEC_ST_TX_DATA_BIT_1_HIGH_PRE_SAMPLE:
-       case CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE:
-       case CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE_SHORT:
-       case CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE_LONG:
-       case CEC_ST_TX_DATA_BIT_LOW_CUSTOM:
-       case CEC_ST_TX_DATA_BIT_HIGH_CUSTOM:
-       case CEC_ST_TX_PULSE_LOW_CUSTOM:
-       case CEC_ST_TX_PULSE_HIGH_CUSTOM:
-               cec_pin_tx_states(pin, ts);
-               break;
-
-       /* Receive states */
-       case CEC_ST_RX_START_BIT_LOW:
-       case CEC_ST_RX_START_BIT_HIGH:
-       case CEC_ST_RX_DATA_SAMPLE:
-       case CEC_ST_RX_DATA_POST_SAMPLE:
-       case CEC_ST_RX_DATA_WAIT_FOR_LOW:
-       case CEC_ST_RX_ACK_LOW:
-       case CEC_ST_RX_ACK_LOW_POST:
-       case CEC_ST_RX_ACK_HIGH_POST:
-       case CEC_ST_RX_ACK_FINISH:
-               cec_pin_rx_states(pin, ts);
-               break;
-
-       case CEC_ST_IDLE:
-       case CEC_ST_TX_WAIT:
-               if (!cec_pin_high(pin)) {
-                       /* Start bit, switch to receive state */
-                       pin->ts = ts;
-                       pin->state = CEC_ST_RX_START_BIT_LOW;
-                       /*
-                        * If a transmit is pending, then that transmit should
-                        * use a signal free time of no more than
-                        * CEC_SIGNAL_FREE_TIME_NEW_INITIATOR since it will
-                        * have a new initiator due to the receive that is now
-                        * starting.
-                        */
-                       if (pin->tx_msg.len && pin->tx_signal_free_time >
-                           CEC_SIGNAL_FREE_TIME_NEW_INITIATOR)
-                               pin->tx_signal_free_time =
-                                       CEC_SIGNAL_FREE_TIME_NEW_INITIATOR;
-                       break;
-               }
-               if (ktime_to_ns(pin->ts) == 0)
-                       pin->ts = ts;
-               if (pin->tx_msg.len) {
-                       /*
-                        * Check if the bus has been free for long enough
-                        * so we can kick off the pending transmit.
-                        */
-                       delta = ktime_us_delta(ts, pin->ts);
-                       if (delta / CEC_TIM_DATA_BIT_TOTAL >
-                           pin->tx_signal_free_time) {
-                               pin->tx_nacked = false;
-                               if (tx_custom_start(pin))
-                                       pin->state = CEC_ST_TX_START_BIT_LOW_CUSTOM;
-                               else
-                                       pin->state = CEC_ST_TX_START_BIT_LOW;
-                               /* Generate start bit */
-                               cec_pin_low(pin);
-                               break;
-                       }
-                       if (delta / CEC_TIM_DATA_BIT_TOTAL >
-                           pin->tx_signal_free_time - 1)
-                               pin->state = CEC_ST_TX_WAIT;
-                       break;
-               }
-               if (pin->tx_custom_pulse && pin->state == CEC_ST_IDLE) {
-                       pin->tx_custom_pulse = false;
-                       /* Generate custom pulse */
-                       cec_pin_low(pin);
-                       pin->state = CEC_ST_TX_PULSE_LOW_CUSTOM;
-                       break;
-               }
-               if (pin->state != CEC_ST_IDLE || pin->ops->enable_irq == NULL ||
-                   pin->enable_irq_failed || adap->is_configuring ||
-                   adap->is_configured || adap->monitor_all_cnt)
-                       break;
-               /* Switch to interrupt mode */
-               atomic_set(&pin->work_irq_change, CEC_PIN_IRQ_ENABLE);
-               pin->state = CEC_ST_RX_IRQ;
-               wake_up_interruptible(&pin->kthread_waitq);
-               return HRTIMER_NORESTART;
-
-       case CEC_ST_TX_LOW_DRIVE:
-       case CEC_ST_RX_LOW_DRIVE:
-               cec_pin_high(pin);
-               cec_pin_to_idle(pin);
-               break;
-
-       default:
-               break;
-       }
-
-       switch (pin->state) {
-       case CEC_ST_TX_START_BIT_LOW_CUSTOM:
-       case CEC_ST_TX_DATA_BIT_LOW_CUSTOM:
-       case CEC_ST_TX_PULSE_LOW_CUSTOM:
-               usecs = pin->tx_custom_low_usecs;
-               break;
-       case CEC_ST_TX_START_BIT_HIGH_CUSTOM:
-       case CEC_ST_TX_DATA_BIT_HIGH_CUSTOM:
-       case CEC_ST_TX_PULSE_HIGH_CUSTOM:
-               usecs = pin->tx_custom_high_usecs;
-               break;
-       default:
-               usecs = states[pin->state].usecs;
-               break;
-       }
-
-       if (!adap->monitor_pin_cnt || usecs <= 150) {
-               pin->wait_usecs = 0;
-               pin->timer_ts = ktime_add_us(ts, usecs);
-               hrtimer_forward_now(timer,
-                               ns_to_ktime(usecs * 1000));
-               return HRTIMER_RESTART;
-       }
-       pin->wait_usecs = usecs - 100;
-       pin->timer_ts = ktime_add_us(ts, 100);
-       hrtimer_forward_now(timer, ns_to_ktime(100000));
-       return HRTIMER_RESTART;
-}
-
-static int cec_pin_thread_func(void *_adap)
-{
-       struct cec_adapter *adap = _adap;
-       struct cec_pin *pin = adap->pin;
-
-       for (;;) {
-               wait_event_interruptible(pin->kthread_waitq,
-                       kthread_should_stop() ||
-                       pin->work_rx_msg.len ||
-                       pin->work_tx_status ||
-                       atomic_read(&pin->work_irq_change) ||
-                       atomic_read(&pin->work_pin_num_events));
-
-               if (pin->work_rx_msg.len) {
-                       struct cec_msg *msg = &pin->work_rx_msg;
-
-                       if (msg->len > 1 && msg->len < CEC_MAX_MSG_SIZE &&
-                           rx_add_byte(pin)) {
-                               /* Error injection: add byte to the message */
-                               msg->msg[msg->len++] = 0x55;
-                       }
-                       if (msg->len > 2 && rx_remove_byte(pin)) {
-                               /* Error injection: remove byte from message */
-                               msg->len--;
-                       }
-                       if (msg->len > CEC_MAX_MSG_SIZE)
-                               msg->len = CEC_MAX_MSG_SIZE;
-                       cec_received_msg_ts(adap, msg,
-                               ns_to_ktime(pin->work_rx_msg.rx_ts));
-                       msg->len = 0;
-               }
-               if (pin->work_tx_status) {
-                       unsigned int tx_status = pin->work_tx_status;
-
-                       pin->work_tx_status = 0;
-                       cec_transmit_attempt_done_ts(adap, tx_status,
-                                                    pin->work_tx_ts);
-               }
-
-               while (atomic_read(&pin->work_pin_num_events)) {
-                       unsigned int idx = pin->work_pin_events_rd;
-                       u8 v = pin->work_pin_events[idx];
-
-                       cec_queue_pin_cec_event(adap,
-                                               v & CEC_PIN_EVENT_FL_IS_HIGH,
-                                               v & CEC_PIN_EVENT_FL_DROPPED,
-                                               pin->work_pin_ts[idx]);
-                       pin->work_pin_events_rd = (idx + 1) % CEC_NUM_PIN_EVENTS;
-                       atomic_dec(&pin->work_pin_num_events);
-               }
-
-               switch (atomic_xchg(&pin->work_irq_change,
-                                   CEC_PIN_IRQ_UNCHANGED)) {
-               case CEC_PIN_IRQ_DISABLE:
-                       pin->ops->disable_irq(adap);
-                       cec_pin_high(pin);
-                       cec_pin_to_idle(pin);
-                       hrtimer_start(&pin->timer, ns_to_ktime(0),
-                                     HRTIMER_MODE_REL);
-                       break;
-               case CEC_PIN_IRQ_ENABLE:
-                       pin->enable_irq_failed = !pin->ops->enable_irq(adap);
-                       if (pin->enable_irq_failed) {
-                               cec_pin_to_idle(pin);
-                               hrtimer_start(&pin->timer, ns_to_ktime(0),
-                                             HRTIMER_MODE_REL);
-                       }
-                       break;
-               default:
-                       break;
-               }
-
-               if (kthread_should_stop())
-                       break;
-       }
-       return 0;
-}
-
-static int cec_pin_adap_enable(struct cec_adapter *adap, bool enable)
-{
-       struct cec_pin *pin = adap->pin;
-
-       pin->enabled = enable;
-       if (enable) {
-               atomic_set(&pin->work_pin_num_events, 0);
-               pin->work_pin_events_rd = pin->work_pin_events_wr = 0;
-               pin->work_pin_events_dropped = false;
-               cec_pin_read(pin);
-               cec_pin_to_idle(pin);
-               pin->tx_msg.len = 0;
-               pin->timer_ts = ns_to_ktime(0);
-               atomic_set(&pin->work_irq_change, CEC_PIN_IRQ_UNCHANGED);
-               pin->kthread = kthread_run(cec_pin_thread_func, adap,
-                                          "cec-pin");
-               if (IS_ERR(pin->kthread)) {
-                       pr_err("cec-pin: kernel_thread() failed\n");
-                       return PTR_ERR(pin->kthread);
-               }
-               hrtimer_start(&pin->timer, ns_to_ktime(0),
-                             HRTIMER_MODE_REL);
-       } else {
-               if (pin->ops->disable_irq)
-                       pin->ops->disable_irq(adap);
-               hrtimer_cancel(&pin->timer);
-               kthread_stop(pin->kthread);
-               cec_pin_read(pin);
-               cec_pin_to_idle(pin);
-               pin->state = CEC_ST_OFF;
-       }
-       return 0;
-}
-
-static int cec_pin_adap_log_addr(struct cec_adapter *adap, u8 log_addr)
-{
-       struct cec_pin *pin = adap->pin;
-
-       if (log_addr == CEC_LOG_ADDR_INVALID)
-               pin->la_mask = 0;
-       else
-               pin->la_mask |= (1 << log_addr);
-       return 0;
-}
-
-void cec_pin_start_timer(struct cec_pin *pin)
-{
-       if (pin->state != CEC_ST_RX_IRQ)
-               return;
-
-       atomic_set(&pin->work_irq_change, CEC_PIN_IRQ_UNCHANGED);
-       pin->ops->disable_irq(pin->adap);
-       cec_pin_high(pin);
-       cec_pin_to_idle(pin);
-       hrtimer_start(&pin->timer, ns_to_ktime(0), HRTIMER_MODE_REL);
-}
-
-static int cec_pin_adap_transmit(struct cec_adapter *adap, u8 attempts,
-                                     u32 signal_free_time, struct cec_msg *msg)
-{
-       struct cec_pin *pin = adap->pin;
-
-       /*
-        * If a receive is in progress, then this transmit should use
-        * a signal free time of max CEC_SIGNAL_FREE_TIME_NEW_INITIATOR
-        * since when it starts transmitting it will have a new initiator.
-        */
-       if (pin->state != CEC_ST_IDLE &&
-           signal_free_time > CEC_SIGNAL_FREE_TIME_NEW_INITIATOR)
-               signal_free_time = CEC_SIGNAL_FREE_TIME_NEW_INITIATOR;
-
-       pin->tx_signal_free_time = signal_free_time;
-       pin->tx_extra_bytes = 0;
-       pin->tx_msg = *msg;
-       if (msg->len > 1) {
-               /* Error injection: add byte to the message */
-               pin->tx_extra_bytes = tx_add_bytes(pin);
-       }
-       if (msg->len > 2 && tx_remove_byte(pin)) {
-               /* Error injection: remove byte from the message */
-               pin->tx_msg.len--;
-       }
-       pin->work_tx_status = 0;
-       pin->tx_bit = 0;
-       cec_pin_start_timer(pin);
-       return 0;
-}
-
-static void cec_pin_adap_status(struct cec_adapter *adap,
-                                      struct seq_file *file)
-{
-       struct cec_pin *pin = adap->pin;
-
-       seq_printf(file, "state: %s\n", states[pin->state].name);
-       seq_printf(file, "tx_bit: %d\n", pin->tx_bit);
-       seq_printf(file, "rx_bit: %d\n", pin->rx_bit);
-       seq_printf(file, "cec pin: %d\n", pin->ops->read(adap));
-       seq_printf(file, "cec pin events dropped: %u\n",
-                  pin->work_pin_events_dropped_cnt);
-       seq_printf(file, "irq failed: %d\n", pin->enable_irq_failed);
-       if (pin->timer_100ms_overruns) {
-               seq_printf(file, "timer overruns > 100ms: %u of %u\n",
-                          pin->timer_100ms_overruns, pin->timer_cnt);
-               seq_printf(file, "timer overruns > 300ms: %u of %u\n",
-                          pin->timer_300ms_overruns, pin->timer_cnt);
-               seq_printf(file, "max timer overrun: %u usecs\n",
-                          pin->timer_max_overrun);
-               seq_printf(file, "avg timer overrun: %u usecs\n",
-                          pin->timer_sum_overrun / pin->timer_100ms_overruns);
-       }
-       if (pin->rx_start_bit_low_too_short_cnt)
-               seq_printf(file,
-                          "rx start bit low too short: %u (delta %u, ts %llu)\n",
-                          pin->rx_start_bit_low_too_short_cnt,
-                          pin->rx_start_bit_low_too_short_delta,
-                          pin->rx_start_bit_low_too_short_ts);
-       if (pin->rx_start_bit_too_short_cnt)
-               seq_printf(file,
-                          "rx start bit too short: %u (delta %u, ts %llu)\n",
-                          pin->rx_start_bit_too_short_cnt,
-                          pin->rx_start_bit_too_short_delta,
-                          pin->rx_start_bit_too_short_ts);
-       if (pin->rx_start_bit_too_long_cnt)
-               seq_printf(file, "rx start bit too long: %u\n",
-                          pin->rx_start_bit_too_long_cnt);
-       if (pin->rx_data_bit_too_short_cnt)
-               seq_printf(file,
-                          "rx data bit too short: %u (delta %u, ts %llu)\n",
-                          pin->rx_data_bit_too_short_cnt,
-                          pin->rx_data_bit_too_short_delta,
-                          pin->rx_data_bit_too_short_ts);
-       if (pin->rx_data_bit_too_long_cnt)
-               seq_printf(file, "rx data bit too long: %u\n",
-                          pin->rx_data_bit_too_long_cnt);
-       seq_printf(file, "rx initiated low drive: %u\n", pin->rx_low_drive_cnt);
-       seq_printf(file, "tx detected low drive: %u\n", pin->tx_low_drive_cnt);
-       pin->work_pin_events_dropped_cnt = 0;
-       pin->timer_cnt = 0;
-       pin->timer_100ms_overruns = 0;
-       pin->timer_300ms_overruns = 0;
-       pin->timer_max_overrun = 0;
-       pin->timer_sum_overrun = 0;
-       pin->rx_start_bit_low_too_short_cnt = 0;
-       pin->rx_start_bit_too_short_cnt = 0;
-       pin->rx_start_bit_too_long_cnt = 0;
-       pin->rx_data_bit_too_short_cnt = 0;
-       pin->rx_data_bit_too_long_cnt = 0;
-       pin->rx_low_drive_cnt = 0;
-       pin->tx_low_drive_cnt = 0;
-       if (pin->ops->status)
-               pin->ops->status(adap, file);
-}
-
-static int cec_pin_adap_monitor_all_enable(struct cec_adapter *adap,
-                                                 bool enable)
-{
-       struct cec_pin *pin = adap->pin;
-
-       pin->monitor_all = enable;
-       return 0;
-}
-
-static void cec_pin_adap_free(struct cec_adapter *adap)
-{
-       struct cec_pin *pin = adap->pin;
-
-       if (pin->ops->free)
-               pin->ops->free(adap);
-       adap->pin = NULL;
-       kfree(pin);
-}
-
-static int cec_pin_received(struct cec_adapter *adap, struct cec_msg *msg)
-{
-       struct cec_pin *pin = adap->pin;
-
-       if (pin->ops->received)
-               return pin->ops->received(adap, msg);
-       return -ENOMSG;
-}
-
-void cec_pin_changed(struct cec_adapter *adap, bool value)
-{
-       struct cec_pin *pin = adap->pin;
-
-       cec_pin_update(pin, value, false);
-       if (!value && (adap->is_configuring || adap->is_configured ||
-                      adap->monitor_all_cnt))
-               atomic_set(&pin->work_irq_change, CEC_PIN_IRQ_DISABLE);
-}
-EXPORT_SYMBOL_GPL(cec_pin_changed);
-
-static const struct cec_adap_ops cec_pin_adap_ops = {
-       .adap_enable = cec_pin_adap_enable,
-       .adap_monitor_all_enable = cec_pin_adap_monitor_all_enable,
-       .adap_log_addr = cec_pin_adap_log_addr,
-       .adap_transmit = cec_pin_adap_transmit,
-       .adap_status = cec_pin_adap_status,
-       .adap_free = cec_pin_adap_free,
-#ifdef CONFIG_CEC_PIN_ERROR_INJ
-       .error_inj_parse_line = cec_pin_error_inj_parse_line,
-       .error_inj_show = cec_pin_error_inj_show,
-#endif
-       .received = cec_pin_received,
-};
-
-struct cec_adapter *cec_pin_allocate_adapter(const struct cec_pin_ops *pin_ops,
-                                       void *priv, const char *name, u32 caps)
-{
-       struct cec_adapter *adap;
-       struct cec_pin *pin = kzalloc(sizeof(*pin), GFP_KERNEL);
-
-       if (pin == NULL)
-               return ERR_PTR(-ENOMEM);
-       pin->ops = pin_ops;
-       hrtimer_init(&pin->timer, CLOCK_MONOTONIC, HRTIMER_MODE_REL);
-       pin->timer.function = cec_pin_timer;
-       init_waitqueue_head(&pin->kthread_waitq);
-       pin->tx_custom_low_usecs = CEC_TIM_CUSTOM_DEFAULT;
-       pin->tx_custom_high_usecs = CEC_TIM_CUSTOM_DEFAULT;
-
-       adap = cec_allocate_adapter(&cec_pin_adap_ops, priv, name,
-                           caps | CEC_CAP_MONITOR_ALL | CEC_CAP_MONITOR_PIN,
-                           CEC_MAX_LOG_ADDRS);
-
-       if (IS_ERR(adap)) {
-               kfree(pin);
-               return adap;
-       }
-
-       adap->pin = pin;
-       pin->adap = adap;
-       cec_pin_update(pin, cec_pin_high(pin), true);
-       return adap;
-}
-EXPORT_SYMBOL_GPL(cec_pin_allocate_adapter);
diff --git a/drivers/media/cec/cec-priv.h b/drivers/media/cec/cec-priv.h
deleted file mode 100644 (file)
index 9bbd050..0000000
+++ /dev/null
@@ -1,51 +0,0 @@
-/* SPDX-License-Identifier: GPL-2.0-only */
-/*
- * cec-priv.h - HDMI Consumer Electronics Control internal header
- *
- * Copyright 2016 Cisco Systems, Inc. and/or its affiliates. All rights reserved.
- */
-
-#ifndef _CEC_PRIV_H
-#define _CEC_PRIV_H
-
-#include <linux/cec-funcs.h>
-#include <media/cec-notifier.h>
-
-#define dprintk(lvl, fmt, arg...)                                      \
-       do {                                                            \
-               if (lvl <= cec_debug)                                   \
-                       pr_info("cec-%s: " fmt, adap->name, ## arg);    \
-       } while (0)
-
-/* devnode to cec_adapter */
-#define to_cec_adapter(node) container_of(node, struct cec_adapter, devnode)
-
-static inline bool msg_is_raw(const struct cec_msg *msg)
-{
-       return msg->flags & CEC_MSG_FL_RAW;
-}
-
-/* cec-core.c */
-extern int cec_debug;
-int cec_get_device(struct cec_devnode *devnode);
-void cec_put_device(struct cec_devnode *devnode);
-
-/* cec-adap.c */
-int cec_monitor_all_cnt_inc(struct cec_adapter *adap);
-void cec_monitor_all_cnt_dec(struct cec_adapter *adap);
-int cec_monitor_pin_cnt_inc(struct cec_adapter *adap);
-void cec_monitor_pin_cnt_dec(struct cec_adapter *adap);
-int cec_adap_status(struct seq_file *file, void *priv);
-int cec_thread_func(void *_adap);
-void __cec_s_phys_addr(struct cec_adapter *adap, u16 phys_addr, bool block);
-int __cec_s_log_addrs(struct cec_adapter *adap,
-                     struct cec_log_addrs *log_addrs, bool block);
-int cec_transmit_msg_fh(struct cec_adapter *adap, struct cec_msg *msg,
-                       struct cec_fh *fh, bool block);
-void cec_queue_event_fh(struct cec_fh *fh,
-                       const struct cec_event *new_ev, u64 ts);
-
-/* cec-api.c */
-extern const struct file_operations cec_devnode_fops;
-
-#endif
diff --git a/drivers/media/cec/core/Makefile b/drivers/media/cec/core/Makefile
new file mode 100644 (file)
index 0000000..ad8677d
--- /dev/null
@@ -0,0 +1,16 @@
+# SPDX-License-Identifier: GPL-2.0
+cec-objs := cec-core.o cec-adap.o cec-api.o
+
+ifeq ($(CONFIG_CEC_NOTIFIER),y)
+  cec-objs += cec-notifier.o
+endif
+
+ifeq ($(CONFIG_CEC_PIN),y)
+  cec-objs += cec-pin.o
+endif
+
+ifeq ($(CONFIG_CEC_PIN_ERROR_INJ),y)
+  cec-objs += cec-pin-error-inj.o
+endif
+
+obj-$(CONFIG_CEC_CORE) += cec.o
diff --git a/drivers/media/cec/core/cec-adap.c b/drivers/media/cec/core/cec-adap.c
new file mode 100644 (file)
index 0000000..6c95dc4
--- /dev/null
@@ -0,0 +1,2199 @@
+// SPDX-License-Identifier: GPL-2.0-only
+/*
+ * cec-adap.c - HDMI Consumer Electronics Control framework - CEC adapter
+ *
+ * Copyright 2016 Cisco Systems, Inc. and/or its affiliates. All rights reserved.
+ */
+
+#include <linux/errno.h>
+#include <linux/init.h>
+#include <linux/module.h>
+#include <linux/kernel.h>
+#include <linux/kmod.h>
+#include <linux/ktime.h>
+#include <linux/slab.h>
+#include <linux/mm.h>
+#include <linux/string.h>
+#include <linux/types.h>
+
+#include <drm/drm_connector.h>
+#include <drm/drm_device.h>
+#include <drm/drm_edid.h>
+#include <drm/drm_file.h>
+
+#include "cec-priv.h"
+
+static void cec_fill_msg_report_features(struct cec_adapter *adap,
+                                        struct cec_msg *msg,
+                                        unsigned int la_idx);
+
+/*
+ * 400 ms is the time it takes for one 16 byte message to be
+ * transferred and 5 is the maximum number of retries. Add
+ * another 100 ms as a margin. So if the transmit doesn't
+ * finish before that time something is really wrong and we
+ * have to time out.
+ *
+ * This is a sign that something it really wrong and a warning
+ * will be issued.
+ */
+#define CEC_XFER_TIMEOUT_MS (5 * 400 + 100)
+
+#define call_op(adap, op, arg...) \
+       (adap->ops->op ? adap->ops->op(adap, ## arg) : 0)
+
+#define call_void_op(adap, op, arg...)                 \
+       do {                                            \
+               if (adap->ops->op)                      \
+                       adap->ops->op(adap, ## arg);    \
+       } while (0)
+
+static int cec_log_addr2idx(const struct cec_adapter *adap, u8 log_addr)
+{
+       int i;
+
+       for (i = 0; i < adap->log_addrs.num_log_addrs; i++)
+               if (adap->log_addrs.log_addr[i] == log_addr)
+                       return i;
+       return -1;
+}
+
+static unsigned int cec_log_addr2dev(const struct cec_adapter *adap, u8 log_addr)
+{
+       int i = cec_log_addr2idx(adap, log_addr);
+
+       return adap->log_addrs.primary_device_type[i < 0 ? 0 : i];
+}
+
+u16 cec_get_edid_phys_addr(const u8 *edid, unsigned int size,
+                          unsigned int *offset)
+{
+       unsigned int loc = cec_get_edid_spa_location(edid, size);
+
+       if (offset)
+               *offset = loc;
+       if (loc == 0)
+               return CEC_PHYS_ADDR_INVALID;
+       return (edid[loc] << 8) | edid[loc + 1];
+}
+EXPORT_SYMBOL_GPL(cec_get_edid_phys_addr);
+
+void cec_fill_conn_info_from_drm(struct cec_connector_info *conn_info,
+                                const struct drm_connector *connector)
+{
+       memset(conn_info, 0, sizeof(*conn_info));
+       conn_info->type = CEC_CONNECTOR_TYPE_DRM;
+       conn_info->drm.card_no = connector->dev->primary->index;
+       conn_info->drm.connector_id = connector->base.id;
+}
+EXPORT_SYMBOL_GPL(cec_fill_conn_info_from_drm);
+
+/*
+ * Queue a new event for this filehandle. If ts == 0, then set it
+ * to the current time.
+ *
+ * We keep a queue of at most max_event events where max_event differs
+ * per event. If the queue becomes full, then drop the oldest event and
+ * keep track of how many events we've dropped.
+ */
+void cec_queue_event_fh(struct cec_fh *fh,
+                       const struct cec_event *new_ev, u64 ts)
+{
+       static const u16 max_events[CEC_NUM_EVENTS] = {
+               1, 1, 800, 800, 8, 8, 8, 8
+       };
+       struct cec_event_entry *entry;
+       unsigned int ev_idx = new_ev->event - 1;
+
+       if (WARN_ON(ev_idx >= ARRAY_SIZE(fh->events)))
+               return;
+
+       if (ts == 0)
+               ts = ktime_get_ns();
+
+       mutex_lock(&fh->lock);
+       if (ev_idx < CEC_NUM_CORE_EVENTS)
+               entry = &fh->core_events[ev_idx];
+       else
+               entry = kmalloc(sizeof(*entry), GFP_KERNEL);
+       if (entry) {
+               if (new_ev->event == CEC_EVENT_LOST_MSGS &&
+                   fh->queued_events[ev_idx]) {
+                       entry->ev.lost_msgs.lost_msgs +=
+                               new_ev->lost_msgs.lost_msgs;
+                       goto unlock;
+               }
+               entry->ev = *new_ev;
+               entry->ev.ts = ts;
+
+               if (fh->queued_events[ev_idx] < max_events[ev_idx]) {
+                       /* Add new msg at the end of the queue */
+                       list_add_tail(&entry->list, &fh->events[ev_idx]);
+                       fh->queued_events[ev_idx]++;
+                       fh->total_queued_events++;
+                       goto unlock;
+               }
+
+               if (ev_idx >= CEC_NUM_CORE_EVENTS) {
+                       list_add_tail(&entry->list, &fh->events[ev_idx]);
+                       /* drop the oldest event */
+                       entry = list_first_entry(&fh->events[ev_idx],
+                                                struct cec_event_entry, list);
+                       list_del(&entry->list);
+                       kfree(entry);
+               }
+       }
+       /* Mark that events were lost */
+       entry = list_first_entry_or_null(&fh->events[ev_idx],
+                                        struct cec_event_entry, list);
+       if (entry)
+               entry->ev.flags |= CEC_EVENT_FL_DROPPED_EVENTS;
+
+unlock:
+       mutex_unlock(&fh->lock);
+       wake_up_interruptible(&fh->wait);
+}
+
+/* Queue a new event for all open filehandles. */
+static void cec_queue_event(struct cec_adapter *adap,
+                           const struct cec_event *ev)
+{
+       u64 ts = ktime_get_ns();
+       struct cec_fh *fh;
+
+       mutex_lock(&adap->devnode.lock);
+       list_for_each_entry(fh, &adap->devnode.fhs, list)
+               cec_queue_event_fh(fh, ev, ts);
+       mutex_unlock(&adap->devnode.lock);
+}
+
+/* Notify userspace that the CEC pin changed state at the given time. */
+void cec_queue_pin_cec_event(struct cec_adapter *adap, bool is_high,
+                            bool dropped_events, ktime_t ts)
+{
+       struct cec_event ev = {
+               .event = is_high ? CEC_EVENT_PIN_CEC_HIGH :
+                                  CEC_EVENT_PIN_CEC_LOW,
+               .flags = dropped_events ? CEC_EVENT_FL_DROPPED_EVENTS : 0,
+       };
+       struct cec_fh *fh;
+
+       mutex_lock(&adap->devnode.lock);
+       list_for_each_entry(fh, &adap->devnode.fhs, list)
+               if (fh->mode_follower == CEC_MODE_MONITOR_PIN)
+                       cec_queue_event_fh(fh, &ev, ktime_to_ns(ts));
+       mutex_unlock(&adap->devnode.lock);
+}
+EXPORT_SYMBOL_GPL(cec_queue_pin_cec_event);
+
+/* Notify userspace that the HPD pin changed state at the given time. */
+void cec_queue_pin_hpd_event(struct cec_adapter *adap, bool is_high, ktime_t ts)
+{
+       struct cec_event ev = {
+               .event = is_high ? CEC_EVENT_PIN_HPD_HIGH :
+                                  CEC_EVENT_PIN_HPD_LOW,
+       };
+       struct cec_fh *fh;
+
+       mutex_lock(&adap->devnode.lock);
+       list_for_each_entry(fh, &adap->devnode.fhs, list)
+               cec_queue_event_fh(fh, &ev, ktime_to_ns(ts));
+       mutex_unlock(&adap->devnode.lock);
+}
+EXPORT_SYMBOL_GPL(cec_queue_pin_hpd_event);
+
+/* Notify userspace that the 5V pin changed state at the given time. */
+void cec_queue_pin_5v_event(struct cec_adapter *adap, bool is_high, ktime_t ts)
+{
+       struct cec_event ev = {
+               .event = is_high ? CEC_EVENT_PIN_5V_HIGH :
+                                  CEC_EVENT_PIN_5V_LOW,
+       };
+       struct cec_fh *fh;
+
+       mutex_lock(&adap->devnode.lock);
+       list_for_each_entry(fh, &adap->devnode.fhs, list)
+               cec_queue_event_fh(fh, &ev, ktime_to_ns(ts));
+       mutex_unlock(&adap->devnode.lock);
+}
+EXPORT_SYMBOL_GPL(cec_queue_pin_5v_event);
+
+/*
+ * Queue a new message for this filehandle.
+ *
+ * We keep a queue of at most CEC_MAX_MSG_RX_QUEUE_SZ messages. If the
+ * queue becomes full, then drop the oldest message and keep track
+ * of how many messages we've dropped.
+ */
+static void cec_queue_msg_fh(struct cec_fh *fh, const struct cec_msg *msg)
+{
+       static const struct cec_event ev_lost_msgs = {
+               .event = CEC_EVENT_LOST_MSGS,
+               .flags = 0,
+               {
+                       .lost_msgs = { 1 },
+               },
+       };
+       struct cec_msg_entry *entry;
+
+       mutex_lock(&fh->lock);
+       entry = kmalloc(sizeof(*entry), GFP_KERNEL);
+       if (entry) {
+               entry->msg = *msg;
+               /* Add new msg at the end of the queue */
+               list_add_tail(&entry->list, &fh->msgs);
+
+               if (fh->queued_msgs < CEC_MAX_MSG_RX_QUEUE_SZ) {
+                       /* All is fine if there is enough room */
+                       fh->queued_msgs++;
+                       mutex_unlock(&fh->lock);
+                       wake_up_interruptible(&fh->wait);
+                       return;
+               }
+
+               /*
+                * if the message queue is full, then drop the oldest one and
+                * send a lost message event.
+                */
+               entry = list_first_entry(&fh->msgs, struct cec_msg_entry, list);
+               list_del(&entry->list);
+               kfree(entry);
+       }
+       mutex_unlock(&fh->lock);
+
+       /*
+        * We lost a message, either because kmalloc failed or the queue
+        * was full.
+        */
+       cec_queue_event_fh(fh, &ev_lost_msgs, ktime_get_ns());
+}
+
+/*
+ * Queue the message for those filehandles that are in monitor mode.
+ * If valid_la is true (this message is for us or was sent by us),
+ * then pass it on to any monitoring filehandle. If this message
+ * isn't for us or from us, then only give it to filehandles that
+ * are in MONITOR_ALL mode.
+ *
+ * This can only happen if the CEC_CAP_MONITOR_ALL capability is
+ * set and the CEC adapter was placed in 'monitor all' mode.
+ */
+static void cec_queue_msg_monitor(struct cec_adapter *adap,
+                                 const struct cec_msg *msg,
+                                 bool valid_la)
+{
+       struct cec_fh *fh;
+       u32 monitor_mode = valid_la ? CEC_MODE_MONITOR :
+                                     CEC_MODE_MONITOR_ALL;
+
+       mutex_lock(&adap->devnode.lock);
+       list_for_each_entry(fh, &adap->devnode.fhs, list) {
+               if (fh->mode_follower >= monitor_mode)
+                       cec_queue_msg_fh(fh, msg);
+       }
+       mutex_unlock(&adap->devnode.lock);
+}
+
+/*
+ * Queue the message for follower filehandles.
+ */
+static void cec_queue_msg_followers(struct cec_adapter *adap,
+                                   const struct cec_msg *msg)
+{
+       struct cec_fh *fh;
+
+       mutex_lock(&adap->devnode.lock);
+       list_for_each_entry(fh, &adap->devnode.fhs, list) {
+               if (fh->mode_follower == CEC_MODE_FOLLOWER)
+                       cec_queue_msg_fh(fh, msg);
+       }
+       mutex_unlock(&adap->devnode.lock);
+}
+
+/* Notify userspace of an adapter state change. */
+static void cec_post_state_event(struct cec_adapter *adap)
+{
+       struct cec_event ev = {
+               .event = CEC_EVENT_STATE_CHANGE,
+       };
+
+       ev.state_change.phys_addr = adap->phys_addr;
+       ev.state_change.log_addr_mask = adap->log_addrs.log_addr_mask;
+       ev.state_change.have_conn_info =
+               adap->conn_info.type != CEC_CONNECTOR_TYPE_NO_CONNECTOR;
+       cec_queue_event(adap, &ev);
+}
+
+/*
+ * A CEC transmit (and a possible wait for reply) completed.
+ * If this was in blocking mode, then complete it, otherwise
+ * queue the message for userspace to dequeue later.
+ *
+ * This function is called with adap->lock held.
+ */
+static void cec_data_completed(struct cec_data *data)
+{
+       /*
+        * Delete this transmit from the filehandle's xfer_list since
+        * we're done with it.
+        *
+        * Note that if the filehandle is closed before this transmit
+        * finished, then the release() function will set data->fh to NULL.
+        * Without that we would be referring to a closed filehandle.
+        */
+       if (data->fh)
+               list_del(&data->xfer_list);
+
+       if (data->blocking) {
+               /*
+                * Someone is blocking so mark the message as completed
+                * and call complete.
+                */
+               data->completed = true;
+               complete(&data->c);
+       } else {
+               /*
+                * No blocking, so just queue the message if needed and
+                * free the memory.
+                */
+               if (data->fh)
+                       cec_queue_msg_fh(data->fh, &data->msg);
+               kfree(data);
+       }
+}
+
+/*
+ * A pending CEC transmit needs to be cancelled, either because the CEC
+ * adapter is disabled or the transmit takes an impossibly long time to
+ * finish.
+ *
+ * This function is called with adap->lock held.
+ */
+static void cec_data_cancel(struct cec_data *data, u8 tx_status)
+{
+       /*
+        * It's either the current transmit, or it is a pending
+        * transmit. Take the appropriate action to clear it.
+        */
+       if (data->adap->transmitting == data) {
+               data->adap->transmitting = NULL;
+       } else {
+               list_del_init(&data->list);
+               if (!(data->msg.tx_status & CEC_TX_STATUS_OK))
+                       if (!WARN_ON(!data->adap->transmit_queue_sz))
+                               data->adap->transmit_queue_sz--;
+       }
+
+       if (data->msg.tx_status & CEC_TX_STATUS_OK) {
+               data->msg.rx_ts = ktime_get_ns();
+               data->msg.rx_status = CEC_RX_STATUS_ABORTED;
+       } else {
+               data->msg.tx_ts = ktime_get_ns();
+               data->msg.tx_status |= tx_status |
+                                      CEC_TX_STATUS_MAX_RETRIES;
+               data->msg.tx_error_cnt++;
+               data->attempts = 0;
+       }
+
+       /* Queue transmitted message for monitoring purposes */
+       cec_queue_msg_monitor(data->adap, &data->msg, 1);
+
+       cec_data_completed(data);
+}
+
+/*
+ * Flush all pending transmits and cancel any pending timeout work.
+ *
+ * This function is called with adap->lock held.
+ */
+static void cec_flush(struct cec_adapter *adap)
+{
+       struct cec_data *data, *n;
+
+       /*
+        * If the adapter is disabled, or we're asked to stop,
+        * then cancel any pending transmits.
+        */
+       while (!list_empty(&adap->transmit_queue)) {
+               data = list_first_entry(&adap->transmit_queue,
+                                       struct cec_data, list);
+               cec_data_cancel(data, CEC_TX_STATUS_ABORTED);
+       }
+       if (adap->transmitting)
+               cec_data_cancel(adap->transmitting, CEC_TX_STATUS_ABORTED);
+
+       /* Cancel the pending timeout work. */
+       list_for_each_entry_safe(data, n, &adap->wait_queue, list) {
+               if (cancel_delayed_work(&data->work))
+                       cec_data_cancel(data, CEC_TX_STATUS_OK);
+               /*
+                * If cancel_delayed_work returned false, then
+                * the cec_wait_timeout function is running,
+                * which will call cec_data_completed. So no
+                * need to do anything special in that case.
+                */
+       }
+       /*
+        * If something went wrong and this counter isn't what it should
+        * be, then this will reset it back to 0. Warn if it is not 0,
+        * since it indicates a bug, either in this framework or in a
+        * CEC driver.
+        */
+       if (WARN_ON(adap->transmit_queue_sz))
+               adap->transmit_queue_sz = 0;
+}
+
+/*
+ * Main CEC state machine
+ *
+ * Wait until the thread should be stopped, or we are not transmitting and
+ * a new transmit message is queued up, in which case we start transmitting
+ * that message. When the adapter finished transmitting the message it will
+ * call cec_transmit_done().
+ *
+ * If the adapter is disabled, then remove all queued messages instead.
+ *
+ * If the current transmit times out, then cancel that transmit.
+ */
+int cec_thread_func(void *_adap)
+{
+       struct cec_adapter *adap = _adap;
+
+       for (;;) {
+               unsigned int signal_free_time;
+               struct cec_data *data;
+               bool timeout = false;
+               u8 attempts;
+
+               if (adap->transmit_in_progress) {
+                       int err;
+
+                       /*
+                        * We are transmitting a message, so add a timeout
+                        * to prevent the state machine to get stuck waiting
+                        * for this message to finalize and add a check to
+                        * see if the adapter is disabled in which case the
+                        * transmit should be canceled.
+                        */
+                       err = wait_event_interruptible_timeout(adap->kthread_waitq,
+                               (adap->needs_hpd &&
+                                (!adap->is_configured && !adap->is_configuring)) ||
+                               kthread_should_stop() ||
+                               (!adap->transmit_in_progress &&
+                                !list_empty(&adap->transmit_queue)),
+                               msecs_to_jiffies(CEC_XFER_TIMEOUT_MS));
+                       timeout = err == 0;
+               } else {
+                       /* Otherwise we just wait for something to happen. */
+                       wait_event_interruptible(adap->kthread_waitq,
+                               kthread_should_stop() ||
+                               (!adap->transmit_in_progress &&
+                                !list_empty(&adap->transmit_queue)));
+               }
+
+               mutex_lock(&adap->lock);
+
+               if ((adap->needs_hpd &&
+                    (!adap->is_configured && !adap->is_configuring)) ||
+                   kthread_should_stop()) {
+                       cec_flush(adap);
+                       goto unlock;
+               }
+
+               if (adap->transmit_in_progress && timeout) {
+                       /*
+                        * If we timeout, then log that. Normally this does
+                        * not happen and it is an indication of a faulty CEC
+                        * adapter driver, or the CEC bus is in some weird
+                        * state. On rare occasions it can happen if there is
+                        * so much traffic on the bus that the adapter was
+                        * unable to transmit for CEC_XFER_TIMEOUT_MS (2.1s).
+                        */
+                       if (adap->transmitting) {
+                               pr_warn("cec-%s: message %*ph timed out\n", adap->name,
+                                       adap->transmitting->msg.len,
+                                       adap->transmitting->msg.msg);
+                               /* Just give up on this. */
+                               cec_data_cancel(adap->transmitting,
+                                               CEC_TX_STATUS_TIMEOUT);
+                       } else {
+                               pr_warn("cec-%s: transmit timed out\n", adap->name);
+                       }
+                       adap->transmit_in_progress = false;
+                       adap->tx_timeouts++;
+                       goto unlock;
+               }
+
+               /*
+                * If we are still transmitting, or there is nothing new to
+                * transmit, then just continue waiting.
+                */
+               if (adap->transmit_in_progress || list_empty(&adap->transmit_queue))
+                       goto unlock;
+
+               /* Get a new message to transmit */
+               data = list_first_entry(&adap->transmit_queue,
+                                       struct cec_data, list);
+               list_del_init(&data->list);
+               if (!WARN_ON(!data->adap->transmit_queue_sz))
+                       adap->transmit_queue_sz--;
+
+               /* Make this the current transmitting message */
+               adap->transmitting = data;
+
+               /*
+                * Suggested number of attempts as per the CEC 2.0 spec:
+                * 4 attempts is the default, except for 'secondary poll
+                * messages', i.e. poll messages not sent during the adapter
+                * configuration phase when it allocates logical addresses.
+                */
+               if (data->msg.len == 1 && adap->is_configured)
+                       attempts = 2;
+               else
+                       attempts = 4;
+
+               /* Set the suggested signal free time */
+               if (data->attempts) {
+                       /* should be >= 3 data bit periods for a retry */
+                       signal_free_time = CEC_SIGNAL_FREE_TIME_RETRY;
+               } else if (adap->last_initiator !=
+                          cec_msg_initiator(&data->msg)) {
+                       /* should be >= 5 data bit periods for new initiator */
+                       signal_free_time = CEC_SIGNAL_FREE_TIME_NEW_INITIATOR;
+                       adap->last_initiator = cec_msg_initiator(&data->msg);
+               } else {
+                       /*
+                        * should be >= 7 data bit periods for sending another
+                        * frame immediately after another.
+                        */
+                       signal_free_time = CEC_SIGNAL_FREE_TIME_NEXT_XFER;
+               }
+               if (data->attempts == 0)
+                       data->attempts = attempts;
+
+               /* Tell the adapter to transmit, cancel on error */
+               if (adap->ops->adap_transmit(adap, data->attempts,
+                                            signal_free_time, &data->msg))
+                       cec_data_cancel(data, CEC_TX_STATUS_ABORTED);
+               else
+                       adap->transmit_in_progress = true;
+
+unlock:
+               mutex_unlock(&adap->lock);
+
+               if (kthread_should_stop())
+                       break;
+       }
+       return 0;
+}
+
+/*
+ * Called by the CEC adapter if a transmit finished.
+ */
+void cec_transmit_done_ts(struct cec_adapter *adap, u8 status,
+                         u8 arb_lost_cnt, u8 nack_cnt, u8 low_drive_cnt,
+                         u8 error_cnt, ktime_t ts)
+{
+       struct cec_data *data;
+       struct cec_msg *msg;
+       unsigned int attempts_made = arb_lost_cnt + nack_cnt +
+                                    low_drive_cnt + error_cnt;
+
+       dprintk(2, "%s: status 0x%02x\n", __func__, status);
+       if (attempts_made < 1)
+               attempts_made = 1;
+
+       mutex_lock(&adap->lock);
+       data = adap->transmitting;
+       if (!data) {
+               /*
+                * This might happen if a transmit was issued and the cable is
+                * unplugged while the transmit is ongoing. Ignore this
+                * transmit in that case.
+                */
+               if (!adap->transmit_in_progress)
+                       dprintk(1, "%s was called without an ongoing transmit!\n",
+                               __func__);
+               adap->transmit_in_progress = false;
+               goto wake_thread;
+       }
+       adap->transmit_in_progress = false;
+
+       msg = &data->msg;
+
+       /* Drivers must fill in the status! */
+       WARN_ON(status == 0);
+       msg->tx_ts = ktime_to_ns(ts);
+       msg->tx_status |= status;
+       msg->tx_arb_lost_cnt += arb_lost_cnt;
+       msg->tx_nack_cnt += nack_cnt;
+       msg->tx_low_drive_cnt += low_drive_cnt;
+       msg->tx_error_cnt += error_cnt;
+
+       /* Mark that we're done with this transmit */
+       adap->transmitting = NULL;
+
+       /*
+        * If there are still retry attempts left and there was an error and
+        * the hardware didn't signal that it retried itself (by setting
+        * CEC_TX_STATUS_MAX_RETRIES), then we will retry ourselves.
+        */
+       if (data->attempts > attempts_made &&
+           !(status & (CEC_TX_STATUS_MAX_RETRIES | CEC_TX_STATUS_OK))) {
+               /* Retry this message */
+               data->attempts -= attempts_made;
+               if (msg->timeout)
+                       dprintk(2, "retransmit: %*ph (attempts: %d, wait for 0x%02x)\n",
+                               msg->len, msg->msg, data->attempts, msg->reply);
+               else
+                       dprintk(2, "retransmit: %*ph (attempts: %d)\n",
+                               msg->len, msg->msg, data->attempts);
+               /* Add the message in front of the transmit queue */
+               list_add(&data->list, &adap->transmit_queue);
+               adap->transmit_queue_sz++;
+               goto wake_thread;
+       }
+
+       data->attempts = 0;
+
+       /* Always set CEC_TX_STATUS_MAX_RETRIES on error */
+       if (!(status & CEC_TX_STATUS_OK))
+               msg->tx_status |= CEC_TX_STATUS_MAX_RETRIES;
+
+       /* Queue transmitted message for monitoring purposes */
+       cec_queue_msg_monitor(adap, msg, 1);
+
+       if ((status & CEC_TX_STATUS_OK) && adap->is_configured &&
+           msg->timeout) {
+               /*
+                * Queue the message into the wait queue if we want to wait
+                * for a reply.
+                */
+               list_add_tail(&data->list, &adap->wait_queue);
+               schedule_delayed_work(&data->work,
+                                     msecs_to_jiffies(msg->timeout));
+       } else {
+               /* Otherwise we're done */
+               cec_data_completed(data);
+       }
+
+wake_thread:
+       /*
+        * Wake up the main thread to see if another message is ready
+        * for transmitting or to retry the current message.
+        */
+       wake_up_interruptible(&adap->kthread_waitq);
+       mutex_unlock(&adap->lock);
+}
+EXPORT_SYMBOL_GPL(cec_transmit_done_ts);
+
+void cec_transmit_attempt_done_ts(struct cec_adapter *adap,
+                                 u8 status, ktime_t ts)
+{
+       switch (status & ~CEC_TX_STATUS_MAX_RETRIES) {
+       case CEC_TX_STATUS_OK:
+               cec_transmit_done_ts(adap, status, 0, 0, 0, 0, ts);
+               return;
+       case CEC_TX_STATUS_ARB_LOST:
+               cec_transmit_done_ts(adap, status, 1, 0, 0, 0, ts);
+               return;
+       case CEC_TX_STATUS_NACK:
+               cec_transmit_done_ts(adap, status, 0, 1, 0, 0, ts);
+               return;
+       case CEC_TX_STATUS_LOW_DRIVE:
+               cec_transmit_done_ts(adap, status, 0, 0, 1, 0, ts);
+               return;
+       case CEC_TX_STATUS_ERROR:
+               cec_transmit_done_ts(adap, status, 0, 0, 0, 1, ts);
+               return;
+       default:
+               /* Should never happen */
+               WARN(1, "cec-%s: invalid status 0x%02x\n", adap->name, status);
+               return;
+       }
+}
+EXPORT_SYMBOL_GPL(cec_transmit_attempt_done_ts);
+
+/*
+ * Called when waiting for a reply times out.
+ */
+static void cec_wait_timeout(struct work_struct *work)
+{
+       struct cec_data *data = container_of(work, struct cec_data, work.work);
+       struct cec_adapter *adap = data->adap;
+
+       mutex_lock(&adap->lock);
+       /*
+        * Sanity check in case the timeout and the arrival of the message
+        * happened at the same time.
+        */
+       if (list_empty(&data->list))
+               goto unlock;
+
+       /* Mark the message as timed out */
+       list_del_init(&data->list);
+       data->msg.rx_ts = ktime_get_ns();
+       data->msg.rx_status = CEC_RX_STATUS_TIMEOUT;
+       cec_data_completed(data);
+unlock:
+       mutex_unlock(&adap->lock);
+}
+
+/*
+ * Transmit a message. The fh argument may be NULL if the transmit is not
+ * associated with a specific filehandle.
+ *
+ * This function is called with adap->lock held.
+ */
+int cec_transmit_msg_fh(struct cec_adapter *adap, struct cec_msg *msg,
+                       struct cec_fh *fh, bool block)
+{
+       struct cec_data *data;
+       bool is_raw = msg_is_raw(msg);
+
+       msg->rx_ts = 0;
+       msg->tx_ts = 0;
+       msg->rx_status = 0;
+       msg->tx_status = 0;
+       msg->tx_arb_lost_cnt = 0;
+       msg->tx_nack_cnt = 0;
+       msg->tx_low_drive_cnt = 0;
+       msg->tx_error_cnt = 0;
+       msg->sequence = 0;
+
+       if (msg->reply && msg->timeout == 0) {
+               /* Make sure the timeout isn't 0. */
+               msg->timeout = 1000;
+       }
+       msg->flags &= CEC_MSG_FL_REPLY_TO_FOLLOWERS | CEC_MSG_FL_RAW;
+
+       if (!msg->timeout)
+               msg->flags &= ~CEC_MSG_FL_REPLY_TO_FOLLOWERS;
+
+       /* Sanity checks */
+       if (msg->len == 0 || msg->len > CEC_MAX_MSG_SIZE) {
+               dprintk(1, "%s: invalid length %d\n", __func__, msg->len);
+               return -EINVAL;
+       }
+
+       memset(msg->msg + msg->len, 0, sizeof(msg->msg) - msg->len);
+
+       if (msg->timeout)
+               dprintk(2, "%s: %*ph (wait for 0x%02x%s)\n",
+                       __func__, msg->len, msg->msg, msg->reply,
+                       !block ? ", nb" : "");
+       else
+               dprintk(2, "%s: %*ph%s\n",
+                       __func__, msg->len, msg->msg, !block ? " (nb)" : "");
+
+       if (msg->timeout && msg->len == 1) {
+               dprintk(1, "%s: can't reply to poll msg\n", __func__);
+               return -EINVAL;
+       }
+
+       if (is_raw) {
+               if (!capable(CAP_SYS_RAWIO))
+                       return -EPERM;
+       } else {
+               /* A CDC-Only device can only send CDC messages */
+               if ((adap->log_addrs.flags & CEC_LOG_ADDRS_FL_CDC_ONLY) &&
+                   (msg->len == 1 || msg->msg[1] != CEC_MSG_CDC_MESSAGE)) {
+                       dprintk(1, "%s: not a CDC message\n", __func__);
+                       return -EINVAL;
+               }
+
+               if (msg->len >= 4 && msg->msg[1] == CEC_MSG_CDC_MESSAGE) {
+                       msg->msg[2] = adap->phys_addr >> 8;
+                       msg->msg[3] = adap->phys_addr & 0xff;
+               }
+
+               if (msg->len == 1) {
+                       if (cec_msg_destination(msg) == 0xf) {
+                               dprintk(1, "%s: invalid poll message\n",
+                                       __func__);
+                               return -EINVAL;
+                       }
+                       if (cec_has_log_addr(adap, cec_msg_destination(msg))) {
+                               /*
+                                * If the destination is a logical address our
+                                * adapter has already claimed, then just NACK
+                                * this. It depends on the hardware what it will
+                                * do with a POLL to itself (some OK this), so
+                                * it is just as easy to handle it here so the
+                                * behavior will be consistent.
+                                */
+                               msg->tx_ts = ktime_get_ns();
+                               msg->tx_status = CEC_TX_STATUS_NACK |
+                                       CEC_TX_STATUS_MAX_RETRIES;
+                               msg->tx_nack_cnt = 1;
+                               msg->sequence = ++adap->sequence;
+                               if (!msg->sequence)
+                                       msg->sequence = ++adap->sequence;
+                               return 0;
+                       }
+               }
+               if (msg->len > 1 && !cec_msg_is_broadcast(msg) &&
+                   cec_has_log_addr(adap, cec_msg_destination(msg))) {
+                       dprintk(1, "%s: destination is the adapter itself\n",
+                               __func__);
+                       return -EINVAL;
+               }
+               if (msg->len > 1 && adap->is_configured &&
+                   !cec_has_log_addr(adap, cec_msg_initiator(msg))) {
+                       dprintk(1, "%s: initiator has unknown logical address %d\n",
+                               __func__, cec_msg_initiator(msg));
+                       return -EINVAL;
+               }
+               /*
+                * Special case: allow Ping and IMAGE/TEXT_VIEW_ON to be
+                * transmitted to a TV, even if the adapter is unconfigured.
+                * This makes it possible to detect or wake up displays that
+                * pull down the HPD when in standby.
+                */
+               if (!adap->is_configured && !adap->is_configuring &&
+                   (msg->len > 2 ||
+                    cec_msg_destination(msg) != CEC_LOG_ADDR_TV ||
+                    (msg->len == 2 && msg->msg[1] != CEC_MSG_IMAGE_VIEW_ON &&
+                     msg->msg[1] != CEC_MSG_TEXT_VIEW_ON))) {
+                       dprintk(1, "%s: adapter is unconfigured\n", __func__);
+                       return -ENONET;
+               }
+       }
+
+       if (!adap->is_configured && !adap->is_configuring) {
+               if (adap->needs_hpd) {
+                       dprintk(1, "%s: adapter is unconfigured and needs HPD\n",
+                               __func__);
+                       return -ENONET;
+               }
+               if (msg->reply) {
+                       dprintk(1, "%s: invalid msg->reply\n", __func__);
+                       return -EINVAL;
+               }
+       }
+
+       if (adap->transmit_queue_sz >= CEC_MAX_MSG_TX_QUEUE_SZ) {
+               dprintk(2, "%s: transmit queue full\n", __func__);
+               return -EBUSY;
+       }
+
+       data = kzalloc(sizeof(*data), GFP_KERNEL);
+       if (!data)
+               return -ENOMEM;
+
+       msg->sequence = ++adap->sequence;
+       if (!msg->sequence)
+               msg->sequence = ++adap->sequence;
+
+       data->msg = *msg;
+       data->fh = fh;
+       data->adap = adap;
+       data->blocking = block;
+
+       init_completion(&data->c);
+       INIT_DELAYED_WORK(&data->work, cec_wait_timeout);
+
+       if (fh)
+               list_add_tail(&data->xfer_list, &fh->xfer_list);
+
+       list_add_tail(&data->list, &adap->transmit_queue);
+       adap->transmit_queue_sz++;
+       if (!adap->transmitting)
+               wake_up_interruptible(&adap->kthread_waitq);
+
+       /* All done if we don't need to block waiting for completion */
+       if (!block)
+               return 0;
+
+       /*
+        * Release the lock and wait, retake the lock afterwards.
+        */
+       mutex_unlock(&adap->lock);
+       wait_for_completion_killable(&data->c);
+       if (!data->completed)
+               cancel_delayed_work_sync(&data->work);
+       mutex_lock(&adap->lock);
+
+       /* Cancel the transmit if it was interrupted */
+       if (!data->completed)
+               cec_data_cancel(data, CEC_TX_STATUS_ABORTED);
+
+       /* The transmit completed (possibly with an error) */
+       *msg = data->msg;
+       kfree(data);
+       return 0;
+}
+
+/* Helper function to be used by drivers and this framework. */
+int cec_transmit_msg(struct cec_adapter *adap, struct cec_msg *msg,
+                    bool block)
+{
+       int ret;
+
+       mutex_lock(&adap->lock);
+       ret = cec_transmit_msg_fh(adap, msg, NULL, block);
+       mutex_unlock(&adap->lock);
+       return ret;
+}
+EXPORT_SYMBOL_GPL(cec_transmit_msg);
+
+/*
+ * I don't like forward references but without this the low-level
+ * cec_received_msg() function would come after a bunch of high-level
+ * CEC protocol handling functions. That was very confusing.
+ */
+static int cec_receive_notify(struct cec_adapter *adap, struct cec_msg *msg,
+                             bool is_reply);
+
+#define DIRECTED       0x80
+#define BCAST1_4       0x40
+#define BCAST2_0       0x20    /* broadcast only allowed for >= 2.0 */
+#define BCAST          (BCAST1_4 | BCAST2_0)
+#define BOTH           (BCAST | DIRECTED)
+
+/*
+ * Specify minimum length and whether the message is directed, broadcast
+ * or both. Messages that do not match the criteria are ignored as per
+ * the CEC specification.
+ */
+static const u8 cec_msg_size[256] = {
+       [CEC_MSG_ACTIVE_SOURCE] = 4 | BCAST,
+       [CEC_MSG_IMAGE_VIEW_ON] = 2 | DIRECTED,
+       [CEC_MSG_TEXT_VIEW_ON] = 2 | DIRECTED,
+       [CEC_MSG_INACTIVE_SOURCE] = 4 | DIRECTED,
+       [CEC_MSG_REQUEST_ACTIVE_SOURCE] = 2 | BCAST,
+       [CEC_MSG_ROUTING_CHANGE] = 6 | BCAST,
+       [CEC_MSG_ROUTING_INFORMATION] = 4 | BCAST,
+       [CEC_MSG_SET_STREAM_PATH] = 4 | BCAST,
+       [CEC_MSG_STANDBY] = 2 | BOTH,
+       [CEC_MSG_RECORD_OFF] = 2 | DIRECTED,
+       [CEC_MSG_RECORD_ON] = 3 | DIRECTED,
+       [CEC_MSG_RECORD_STATUS] = 3 | DIRECTED,
+       [CEC_MSG_RECORD_TV_SCREEN] = 2 | DIRECTED,
+       [CEC_MSG_CLEAR_ANALOGUE_TIMER] = 13 | DIRECTED,
+       [CEC_MSG_CLEAR_DIGITAL_TIMER] = 16 | DIRECTED,
+       [CEC_MSG_CLEAR_EXT_TIMER] = 13 | DIRECTED,
+       [CEC_MSG_SET_ANALOGUE_TIMER] = 13 | DIRECTED,
+       [CEC_MSG_SET_DIGITAL_TIMER] = 16 | DIRECTED,
+       [CEC_MSG_SET_EXT_TIMER] = 13 | DIRECTED,
+       [CEC_MSG_SET_TIMER_PROGRAM_TITLE] = 2 | DIRECTED,
+       [CEC_MSG_TIMER_CLEARED_STATUS] = 3 | DIRECTED,
+       [CEC_MSG_TIMER_STATUS] = 3 | DIRECTED,
+       [CEC_MSG_CEC_VERSION] = 3 | DIRECTED,
+       [CEC_MSG_GET_CEC_VERSION] = 2 | DIRECTED,
+       [CEC_MSG_GIVE_PHYSICAL_ADDR] = 2 | DIRECTED,
+       [CEC_MSG_GET_MENU_LANGUAGE] = 2 | DIRECTED,
+       [CEC_MSG_REPORT_PHYSICAL_ADDR] = 5 | BCAST,
+       [CEC_MSG_SET_MENU_LANGUAGE] = 5 | BCAST,
+       [CEC_MSG_REPORT_FEATURES] = 6 | BCAST,
+       [CEC_MSG_GIVE_FEATURES] = 2 | DIRECTED,
+       [CEC_MSG_DECK_CONTROL] = 3 | DIRECTED,
+       [CEC_MSG_DECK_STATUS] = 3 | DIRECTED,
+       [CEC_MSG_GIVE_DECK_STATUS] = 3 | DIRECTED,
+       [CEC_MSG_PLAY] = 3 | DIRECTED,
+       [CEC_MSG_GIVE_TUNER_DEVICE_STATUS] = 3 | DIRECTED,
+       [CEC_MSG_SELECT_ANALOGUE_SERVICE] = 6 | DIRECTED,
+       [CEC_MSG_SELECT_DIGITAL_SERVICE] = 9 | DIRECTED,
+       [CEC_MSG_TUNER_DEVICE_STATUS] = 7 | DIRECTED,
+       [CEC_MSG_TUNER_STEP_DECREMENT] = 2 | DIRECTED,
+       [CEC_MSG_TUNER_STEP_INCREMENT] = 2 | DIRECTED,
+       [CEC_MSG_DEVICE_VENDOR_ID] = 5 | BCAST,
+       [CEC_MSG_GIVE_DEVICE_VENDOR_ID] = 2 | DIRECTED,
+       [CEC_MSG_VENDOR_COMMAND] = 2 | DIRECTED,
+       [CEC_MSG_VENDOR_COMMAND_WITH_ID] = 5 | BOTH,
+       [CEC_MSG_VENDOR_REMOTE_BUTTON_DOWN] = 2 | BOTH,
+       [CEC_MSG_VENDOR_REMOTE_BUTTON_UP] = 2 | BOTH,
+       [CEC_MSG_SET_OSD_STRING] = 3 | DIRECTED,
+       [CEC_MSG_GIVE_OSD_NAME] = 2 | DIRECTED,
+       [CEC_MSG_SET_OSD_NAME] = 2 | DIRECTED,
+       [CEC_MSG_MENU_REQUEST] = 3 | DIRECTED,
+       [CEC_MSG_MENU_STATUS] = 3 | DIRECTED,
+       [CEC_MSG_USER_CONTROL_PRESSED] = 3 | DIRECTED,
+       [CEC_MSG_USER_CONTROL_RELEASED] = 2 | DIRECTED,
+       [CEC_MSG_GIVE_DEVICE_POWER_STATUS] = 2 | DIRECTED,
+       [CEC_MSG_REPORT_POWER_STATUS] = 3 | DIRECTED | BCAST2_0,
+       [CEC_MSG_FEATURE_ABORT] = 4 | DIRECTED,
+       [CEC_MSG_ABORT] = 2 | DIRECTED,
+       [CEC_MSG_GIVE_AUDIO_STATUS] = 2 | DIRECTED,
+       [CEC_MSG_GIVE_SYSTEM_AUDIO_MODE_STATUS] = 2 | DIRECTED,
+       [CEC_MSG_REPORT_AUDIO_STATUS] = 3 | DIRECTED,
+       [CEC_MSG_REPORT_SHORT_AUDIO_DESCRIPTOR] = 2 | DIRECTED,
+       [CEC_MSG_REQUEST_SHORT_AUDIO_DESCRIPTOR] = 2 | DIRECTED,
+       [CEC_MSG_SET_SYSTEM_AUDIO_MODE] = 3 | BOTH,
+       [CEC_MSG_SYSTEM_AUDIO_MODE_REQUEST] = 2 | DIRECTED,
+       [CEC_MSG_SYSTEM_AUDIO_MODE_STATUS] = 3 | DIRECTED,
+       [CEC_MSG_SET_AUDIO_RATE] = 3 | DIRECTED,
+       [CEC_MSG_INITIATE_ARC] = 2 | DIRECTED,
+       [CEC_MSG_REPORT_ARC_INITIATED] = 2 | DIRECTED,
+       [CEC_MSG_REPORT_ARC_TERMINATED] = 2 | DIRECTED,
+       [CEC_MSG_REQUEST_ARC_INITIATION] = 2 | DIRECTED,
+       [CEC_MSG_REQUEST_ARC_TERMINATION] = 2 | DIRECTED,
+       [CEC_MSG_TERMINATE_ARC] = 2 | DIRECTED,
+       [CEC_MSG_REQUEST_CURRENT_LATENCY] = 4 | BCAST,
+       [CEC_MSG_REPORT_CURRENT_LATENCY] = 6 | BCAST,
+       [CEC_MSG_CDC_MESSAGE] = 2 | BCAST,
+};
+
+/* Called by the CEC adapter if a message is received */
+void cec_received_msg_ts(struct cec_adapter *adap,
+                        struct cec_msg *msg, ktime_t ts)
+{
+       struct cec_data *data;
+       u8 msg_init = cec_msg_initiator(msg);
+       u8 msg_dest = cec_msg_destination(msg);
+       u8 cmd = msg->msg[1];
+       bool is_reply = false;
+       bool valid_la = true;
+       u8 min_len = 0;
+
+       if (WARN_ON(!msg->len || msg->len > CEC_MAX_MSG_SIZE))
+               return;
+
+       /*
+        * Some CEC adapters will receive the messages that they transmitted.
+        * This test filters out those messages by checking if we are the
+        * initiator, and just returning in that case.
+        *
+        * Note that this won't work if this is an Unregistered device.
+        *
+        * It is bad practice if the hardware receives the message that it
+        * transmitted and luckily most CEC adapters behave correctly in this
+        * respect.
+        */
+       if (msg_init != CEC_LOG_ADDR_UNREGISTERED &&
+           cec_has_log_addr(adap, msg_init))
+               return;
+
+       msg->rx_ts = ktime_to_ns(ts);
+       msg->rx_status = CEC_RX_STATUS_OK;
+       msg->sequence = msg->reply = msg->timeout = 0;
+       msg->tx_status = 0;
+       msg->tx_ts = 0;
+       msg->tx_arb_lost_cnt = 0;
+       msg->tx_nack_cnt = 0;
+       msg->tx_low_drive_cnt = 0;
+       msg->tx_error_cnt = 0;
+       msg->flags = 0;
+       memset(msg->msg + msg->len, 0, sizeof(msg->msg) - msg->len);
+
+       mutex_lock(&adap->lock);
+       dprintk(2, "%s: %*ph\n", __func__, msg->len, msg->msg);
+
+       adap->last_initiator = 0xff;
+
+       /* Check if this message was for us (directed or broadcast). */
+       if (!cec_msg_is_broadcast(msg))
+               valid_la = cec_has_log_addr(adap, msg_dest);
+
+       /*
+        * Check if the length is not too short or if the message is a
+        * broadcast message where a directed message was expected or
+        * vice versa. If so, then the message has to be ignored (according
+        * to section CEC 7.3 and CEC 12.2).
+        */
+       if (valid_la && msg->len > 1 && cec_msg_size[cmd]) {
+               u8 dir_fl = cec_msg_size[cmd] & BOTH;
+
+               min_len = cec_msg_size[cmd] & 0x1f;
+               if (msg->len < min_len)
+                       valid_la = false;
+               else if (!cec_msg_is_broadcast(msg) && !(dir_fl & DIRECTED))
+                       valid_la = false;
+               else if (cec_msg_is_broadcast(msg) && !(dir_fl & BCAST))
+                       valid_la = false;
+               else if (cec_msg_is_broadcast(msg) &&
+                        adap->log_addrs.cec_version < CEC_OP_CEC_VERSION_2_0 &&
+                        !(dir_fl & BCAST1_4))
+                       valid_la = false;
+       }
+       if (valid_la && min_len) {
+               /* These messages have special length requirements */
+               switch (cmd) {
+               case CEC_MSG_TIMER_STATUS:
+                       if (msg->msg[2] & 0x10) {
+                               switch (msg->msg[2] & 0xf) {
+                               case CEC_OP_PROG_INFO_NOT_ENOUGH_SPACE:
+                               case CEC_OP_PROG_INFO_MIGHT_NOT_BE_ENOUGH_SPACE:
+                                       if (msg->len < 5)
+                                               valid_la = false;
+                                       break;
+                               }
+                       } else if ((msg->msg[2] & 0xf) == CEC_OP_PROG_ERROR_DUPLICATE) {
+                               if (msg->len < 5)
+                                       valid_la = false;
+                       }
+                       break;
+               case CEC_MSG_RECORD_ON:
+                       switch (msg->msg[2]) {
+                       case CEC_OP_RECORD_SRC_OWN:
+                               break;
+                       case CEC_OP_RECORD_SRC_DIGITAL:
+                               if (msg->len < 10)
+                                       valid_la = false;
+                               break;
+                       case CEC_OP_RECORD_SRC_ANALOG:
+                               if (msg->len < 7)
+                                       valid_la = false;
+                               break;
+                       case CEC_OP_RECORD_SRC_EXT_PLUG:
+                               if (msg->len < 4)
+                                       valid_la = false;
+                               break;
+                       case CEC_OP_RECORD_SRC_EXT_PHYS_ADDR:
+                               if (msg->len < 5)
+                                       valid_la = false;
+                               break;
+                       }
+                       break;
+               }
+       }
+
+       /* It's a valid message and not a poll or CDC message */
+       if (valid_la && msg->len > 1 && cmd != CEC_MSG_CDC_MESSAGE) {
+               bool abort = cmd == CEC_MSG_FEATURE_ABORT;
+
+               /* The aborted command is in msg[2] */
+               if (abort)
+                       cmd = msg->msg[2];
+
+               /*
+                * Walk over all transmitted messages that are waiting for a
+                * reply.
+                */
+               list_for_each_entry(data, &adap->wait_queue, list) {
+                       struct cec_msg *dst = &data->msg;
+
+                       /*
+                        * The *only* CEC message that has two possible replies
+                        * is CEC_MSG_INITIATE_ARC.
+                        * In this case allow either of the two replies.
+                        */
+                       if (!abort && dst->msg[1] == CEC_MSG_INITIATE_ARC &&
+                           (cmd == CEC_MSG_REPORT_ARC_INITIATED ||
+                            cmd == CEC_MSG_REPORT_ARC_TERMINATED) &&
+                           (dst->reply == CEC_MSG_REPORT_ARC_INITIATED ||
+                            dst->reply == CEC_MSG_REPORT_ARC_TERMINATED))
+                               dst->reply = cmd;
+
+                       /* Does the command match? */
+                       if ((abort && cmd != dst->msg[1]) ||
+                           (!abort && cmd != dst->reply))
+                               continue;
+
+                       /* Does the addressing match? */
+                       if (msg_init != cec_msg_destination(dst) &&
+                           !cec_msg_is_broadcast(dst))
+                               continue;
+
+                       /* We got a reply */
+                       memcpy(dst->msg, msg->msg, msg->len);
+                       dst->len = msg->len;
+                       dst->rx_ts = msg->rx_ts;
+                       dst->rx_status = msg->rx_status;
+                       if (abort)
+                               dst->rx_status |= CEC_RX_STATUS_FEATURE_ABORT;
+                       msg->flags = dst->flags;
+                       /* Remove it from the wait_queue */
+                       list_del_init(&data->list);
+
+                       /* Cancel the pending timeout work */
+                       if (!cancel_delayed_work(&data->work)) {
+                               mutex_unlock(&adap->lock);
+                               flush_scheduled_work();
+                               mutex_lock(&adap->lock);
+                       }
+                       /*
+                        * Mark this as a reply, provided someone is still
+                        * waiting for the answer.
+                        */
+                       if (data->fh)
+                               is_reply = true;
+                       cec_data_completed(data);
+                       break;
+               }
+       }
+       mutex_unlock(&adap->lock);
+
+       /* Pass the message on to any monitoring filehandles */
+       cec_queue_msg_monitor(adap, msg, valid_la);
+
+       /* We're done if it is not for us or a poll message */
+       if (!valid_la || msg->len <= 1)
+               return;
+
+       if (adap->log_addrs.log_addr_mask == 0)
+               return;
+
+       /*
+        * Process the message on the protocol level. If is_reply is true,
+        * then cec_receive_notify() won't pass on the reply to the listener(s)
+        * since that was already done by cec_data_completed() above.
+        */
+       cec_receive_notify(adap, msg, is_reply);
+}
+EXPORT_SYMBOL_GPL(cec_received_msg_ts);
+
+/* Logical Address Handling */
+
+/*
+ * Attempt to claim a specific logical address.
+ *
+ * This function is called with adap->lock held.
+ */
+static int cec_config_log_addr(struct cec_adapter *adap,
+                              unsigned int idx,
+                              unsigned int log_addr)
+{
+       struct cec_log_addrs *las = &adap->log_addrs;
+       struct cec_msg msg = { };
+       const unsigned int max_retries = 2;
+       unsigned int i;
+       int err;
+
+       if (cec_has_log_addr(adap, log_addr))
+               return 0;
+
+       /* Send poll message */
+       msg.len = 1;
+       msg.msg[0] = (log_addr << 4) | log_addr;
+
+       for (i = 0; i < max_retries; i++) {
+               err = cec_transmit_msg_fh(adap, &msg, NULL, true);
+
+               /*
+                * While trying to poll the physical address was reset
+                * and the adapter was unconfigured, so bail out.
+                */
+               if (!adap->is_configuring)
+                       return -EINTR;
+
+               if (err)
+                       return err;
+
+               /*
+                * The message was aborted due to a disconnect or
+                * unconfigure, just bail out.
+                */
+               if (msg.tx_status & CEC_TX_STATUS_ABORTED)
+                       return -EINTR;
+               if (msg.tx_status & CEC_TX_STATUS_OK)
+                       return 0;
+               if (msg.tx_status & CEC_TX_STATUS_NACK)
+                       break;
+               /*
+                * Retry up to max_retries times if the message was neither
+                * OKed or NACKed. This can happen due to e.g. a Lost
+                * Arbitration condition.
+                */
+       }
+
+       /*
+        * If we are unable to get an OK or a NACK after max_retries attempts
+        * (and note that each attempt already consists of four polls), then
+        * then we assume that something is really weird and that it is not a
+        * good idea to try and claim this logical address.
+        */
+       if (i == max_retries)
+               return 0;
+
+       /*
+        * Message not acknowledged, so this logical
+        * address is free to use.
+        */
+       err = adap->ops->adap_log_addr(adap, log_addr);
+       if (err)
+               return err;
+
+       las->log_addr[idx] = log_addr;
+       las->log_addr_mask |= 1 << log_addr;
+       adap->phys_addrs[log_addr] = adap->phys_addr;
+       return 1;
+}
+
+/*
+ * Unconfigure the adapter: clear all logical addresses and send
+ * the state changed event.
+ *
+ * This function is called with adap->lock held.
+ */
+static void cec_adap_unconfigure(struct cec_adapter *adap)
+{
+       if (!adap->needs_hpd ||
+           adap->phys_addr != CEC_PHYS_ADDR_INVALID)
+               WARN_ON(adap->ops->adap_log_addr(adap, CEC_LOG_ADDR_INVALID));
+       adap->log_addrs.log_addr_mask = 0;
+       adap->is_configuring = false;
+       adap->is_configured = false;
+       memset(adap->phys_addrs, 0xff, sizeof(adap->phys_addrs));
+       cec_flush(adap);
+       wake_up_interruptible(&adap->kthread_waitq);
+       cec_post_state_event(adap);
+}
+
+/*
+ * Attempt to claim the required logical addresses.
+ */
+static int cec_config_thread_func(void *arg)
+{
+       /* The various LAs for each type of device */
+       static const u8 tv_log_addrs[] = {
+               CEC_LOG_ADDR_TV, CEC_LOG_ADDR_SPECIFIC,
+               CEC_LOG_ADDR_INVALID
+       };
+       static const u8 record_log_addrs[] = {
+               CEC_LOG_ADDR_RECORD_1, CEC_LOG_ADDR_RECORD_2,
+               CEC_LOG_ADDR_RECORD_3,
+               CEC_LOG_ADDR_BACKUP_1, CEC_LOG_ADDR_BACKUP_2,
+               CEC_LOG_ADDR_INVALID
+       };
+       static const u8 tuner_log_addrs[] = {
+               CEC_LOG_ADDR_TUNER_1, CEC_LOG_ADDR_TUNER_2,
+               CEC_LOG_ADDR_TUNER_3, CEC_LOG_ADDR_TUNER_4,
+               CEC_LOG_ADDR_BACKUP_1, CEC_LOG_ADDR_BACKUP_2,
+               CEC_LOG_ADDR_INVALID
+       };
+       static const u8 playback_log_addrs[] = {
+               CEC_LOG_ADDR_PLAYBACK_1, CEC_LOG_ADDR_PLAYBACK_2,
+               CEC_LOG_ADDR_PLAYBACK_3,
+               CEC_LOG_ADDR_BACKUP_1, CEC_LOG_ADDR_BACKUP_2,
+               CEC_LOG_ADDR_INVALID
+       };
+       static const u8 audiosystem_log_addrs[] = {
+               CEC_LOG_ADDR_AUDIOSYSTEM,
+               CEC_LOG_ADDR_INVALID
+       };
+       static const u8 specific_use_log_addrs[] = {
+               CEC_LOG_ADDR_SPECIFIC,
+               CEC_LOG_ADDR_BACKUP_1, CEC_LOG_ADDR_BACKUP_2,
+               CEC_LOG_ADDR_INVALID
+       };
+       static const u8 *type2addrs[6] = {
+               [CEC_LOG_ADDR_TYPE_TV] = tv_log_addrs,
+               [CEC_LOG_ADDR_TYPE_RECORD] = record_log_addrs,
+               [CEC_LOG_ADDR_TYPE_TUNER] = tuner_log_addrs,
+               [CEC_LOG_ADDR_TYPE_PLAYBACK] = playback_log_addrs,
+               [CEC_LOG_ADDR_TYPE_AUDIOSYSTEM] = audiosystem_log_addrs,
+               [CEC_LOG_ADDR_TYPE_SPECIFIC] = specific_use_log_addrs,
+       };
+       static const u16 type2mask[] = {
+               [CEC_LOG_ADDR_TYPE_TV] = CEC_LOG_ADDR_MASK_TV,
+               [CEC_LOG_ADDR_TYPE_RECORD] = CEC_LOG_ADDR_MASK_RECORD,
+               [CEC_LOG_ADDR_TYPE_TUNER] = CEC_LOG_ADDR_MASK_TUNER,
+               [CEC_LOG_ADDR_TYPE_PLAYBACK] = CEC_LOG_ADDR_MASK_PLAYBACK,
+               [CEC_LOG_ADDR_TYPE_AUDIOSYSTEM] = CEC_LOG_ADDR_MASK_AUDIOSYSTEM,
+               [CEC_LOG_ADDR_TYPE_SPECIFIC] = CEC_LOG_ADDR_MASK_SPECIFIC,
+       };
+       struct cec_adapter *adap = arg;
+       struct cec_log_addrs *las = &adap->log_addrs;
+       int err;
+       int i, j;
+
+       mutex_lock(&adap->lock);
+       dprintk(1, "physical address: %x.%x.%x.%x, claim %d logical addresses\n",
+               cec_phys_addr_exp(adap->phys_addr), las->num_log_addrs);
+       las->log_addr_mask = 0;
+
+       if (las->log_addr_type[0] == CEC_LOG_ADDR_TYPE_UNREGISTERED)
+               goto configured;
+
+       for (i = 0; i < las->num_log_addrs; i++) {
+               unsigned int type = las->log_addr_type[i];
+               const u8 *la_list;
+               u8 last_la;
+
+               /*
+                * The TV functionality can only map to physical address 0.
+                * For any other address, try the Specific functionality
+                * instead as per the spec.
+                */
+               if (adap->phys_addr && type == CEC_LOG_ADDR_TYPE_TV)
+                       type = CEC_LOG_ADDR_TYPE_SPECIFIC;
+
+               la_list = type2addrs[type];
+               last_la = las->log_addr[i];
+               las->log_addr[i] = CEC_LOG_ADDR_INVALID;
+               if (last_la == CEC_LOG_ADDR_INVALID ||
+                   last_la == CEC_LOG_ADDR_UNREGISTERED ||
+                   !((1 << last_la) & type2mask[type]))
+                       last_la = la_list[0];
+
+               err = cec_config_log_addr(adap, i, last_la);
+               if (err > 0) /* Reused last LA */
+                       continue;
+
+               if (err < 0)
+                       goto unconfigure;
+
+               for (j = 0; la_list[j] != CEC_LOG_ADDR_INVALID; j++) {
+                       /* Tried this one already, skip it */
+                       if (la_list[j] == last_la)
+                               continue;
+                       /* The backup addresses are CEC 2.0 specific */
+                       if ((la_list[j] == CEC_LOG_ADDR_BACKUP_1 ||
+                            la_list[j] == CEC_LOG_ADDR_BACKUP_2) &&
+                           las->cec_version < CEC_OP_CEC_VERSION_2_0)
+                               continue;
+
+                       err = cec_config_log_addr(adap, i, la_list[j]);
+                       if (err == 0) /* LA is in use */
+                               continue;
+                       if (err < 0)
+                               goto unconfigure;
+                       /* Done, claimed an LA */
+                       break;
+               }
+
+               if (la_list[j] == CEC_LOG_ADDR_INVALID)
+                       dprintk(1, "could not claim LA %d\n", i);
+       }
+
+       if (adap->log_addrs.log_addr_mask == 0 &&
+           !(las->flags & CEC_LOG_ADDRS_FL_ALLOW_UNREG_FALLBACK))
+               goto unconfigure;
+
+configured:
+       if (adap->log_addrs.log_addr_mask == 0) {
+               /* Fall back to unregistered */
+               las->log_addr[0] = CEC_LOG_ADDR_UNREGISTERED;
+               las->log_addr_mask = 1 << las->log_addr[0];
+               for (i = 1; i < las->num_log_addrs; i++)
+                       las->log_addr[i] = CEC_LOG_ADDR_INVALID;
+       }
+       for (i = las->num_log_addrs; i < CEC_MAX_LOG_ADDRS; i++)
+               las->log_addr[i] = CEC_LOG_ADDR_INVALID;
+       adap->is_configured = true;
+       adap->is_configuring = false;
+       cec_post_state_event(adap);
+
+       /*
+        * Now post the Report Features and Report Physical Address broadcast
+        * messages. Note that these are non-blocking transmits, meaning that
+        * they are just queued up and once adap->lock is unlocked the main
+        * thread will kick in and start transmitting these.
+        *
+        * If after this function is done (but before one or more of these
+        * messages are actually transmitted) the CEC adapter is unconfigured,
+        * then any remaining messages will be dropped by the main thread.
+        */
+       for (i = 0; i < las->num_log_addrs; i++) {
+               struct cec_msg msg = {};
+
+               if (las->log_addr[i] == CEC_LOG_ADDR_INVALID ||
+                   (las->flags & CEC_LOG_ADDRS_FL_CDC_ONLY))
+                       continue;
+
+               msg.msg[0] = (las->log_addr[i] << 4) | 0x0f;
+
+               /* Report Features must come first according to CEC 2.0 */
+               if (las->log_addr[i] != CEC_LOG_ADDR_UNREGISTERED &&
+                   adap->log_addrs.cec_version >= CEC_OP_CEC_VERSION_2_0) {
+                       cec_fill_msg_report_features(adap, &msg, i);
+                       cec_transmit_msg_fh(adap, &msg, NULL, false);
+               }
+
+               /* Report Physical Address */
+               cec_msg_report_physical_addr(&msg, adap->phys_addr,
+                                            las->primary_device_type[i]);
+               dprintk(1, "config: la %d pa %x.%x.%x.%x\n",
+                       las->log_addr[i],
+                       cec_phys_addr_exp(adap->phys_addr));
+               cec_transmit_msg_fh(adap, &msg, NULL, false);
+
+               /* Report Vendor ID */
+               if (adap->log_addrs.vendor_id != CEC_VENDOR_ID_NONE) {
+                       cec_msg_device_vendor_id(&msg,
+                                                adap->log_addrs.vendor_id);
+                       cec_transmit_msg_fh(adap, &msg, NULL, false);
+               }
+       }
+       adap->kthread_config = NULL;
+       complete(&adap->config_completion);
+       mutex_unlock(&adap->lock);
+       return 0;
+
+unconfigure:
+       for (i = 0; i < las->num_log_addrs; i++)
+               las->log_addr[i] = CEC_LOG_ADDR_INVALID;
+       cec_adap_unconfigure(adap);
+       adap->kthread_config = NULL;
+       mutex_unlock(&adap->lock);
+       complete(&adap->config_completion);
+       return 0;
+}
+
+/*
+ * Called from either __cec_s_phys_addr or __cec_s_log_addrs to claim the
+ * logical addresses.
+ *
+ * This function is called with adap->lock held.
+ */
+static void cec_claim_log_addrs(struct cec_adapter *adap, bool block)
+{
+       if (WARN_ON(adap->is_configuring || adap->is_configured))
+               return;
+
+       init_completion(&adap->config_completion);
+
+       /* Ready to kick off the thread */
+       adap->is_configuring = true;
+       adap->kthread_config = kthread_run(cec_config_thread_func, adap,
+                                          "ceccfg-%s", adap->name);
+       if (IS_ERR(adap->kthread_config)) {
+               adap->kthread_config = NULL;
+       } else if (block) {
+               mutex_unlock(&adap->lock);
+               wait_for_completion(&adap->config_completion);
+               mutex_lock(&adap->lock);
+       }
+}
+
+/* Set a new physical address and send an event notifying userspace of this.
+ *
+ * This function is called with adap->lock held.
+ */
+void __cec_s_phys_addr(struct cec_adapter *adap, u16 phys_addr, bool block)
+{
+       if (phys_addr == adap->phys_addr)
+               return;
+       if (phys_addr != CEC_PHYS_ADDR_INVALID && adap->devnode.unregistered)
+               return;
+
+       dprintk(1, "new physical address %x.%x.%x.%x\n",
+               cec_phys_addr_exp(phys_addr));
+       if (phys_addr == CEC_PHYS_ADDR_INVALID ||
+           adap->phys_addr != CEC_PHYS_ADDR_INVALID) {
+               adap->phys_addr = CEC_PHYS_ADDR_INVALID;
+               cec_post_state_event(adap);
+               cec_adap_unconfigure(adap);
+               /* Disabling monitor all mode should always succeed */
+               if (adap->monitor_all_cnt)
+                       WARN_ON(call_op(adap, adap_monitor_all_enable, false));
+               mutex_lock(&adap->devnode.lock);
+               if (adap->needs_hpd || list_empty(&adap->devnode.fhs)) {
+                       WARN_ON(adap->ops->adap_enable(adap, false));
+                       adap->transmit_in_progress = false;
+                       wake_up_interruptible(&adap->kthread_waitq);
+               }
+               mutex_unlock(&adap->devnode.lock);
+               if (phys_addr == CEC_PHYS_ADDR_INVALID)
+                       return;
+       }
+
+       mutex_lock(&adap->devnode.lock);
+       adap->last_initiator = 0xff;
+       adap->transmit_in_progress = false;
+
+       if ((adap->needs_hpd || list_empty(&adap->devnode.fhs)) &&
+           adap->ops->adap_enable(adap, true)) {
+               mutex_unlock(&adap->devnode.lock);
+               return;
+       }
+
+       if (adap->monitor_all_cnt &&
+           call_op(adap, adap_monitor_all_enable, true)) {
+               if (adap->needs_hpd || list_empty(&adap->devnode.fhs))
+                       WARN_ON(adap->ops->adap_enable(adap, false));
+               mutex_unlock(&adap->devnode.lock);
+               return;
+       }
+       mutex_unlock(&adap->devnode.lock);
+
+       adap->phys_addr = phys_addr;
+       cec_post_state_event(adap);
+       if (adap->log_addrs.num_log_addrs)
+               cec_claim_log_addrs(adap, block);
+}
+
+void cec_s_phys_addr(struct cec_adapter *adap, u16 phys_addr, bool block)
+{
+       if (IS_ERR_OR_NULL(adap))
+               return;
+
+       mutex_lock(&adap->lock);
+       __cec_s_phys_addr(adap, phys_addr, block);
+       mutex_unlock(&adap->lock);
+}
+EXPORT_SYMBOL_GPL(cec_s_phys_addr);
+
+void cec_s_phys_addr_from_edid(struct cec_adapter *adap,
+                              const struct edid *edid)
+{
+       u16 pa = CEC_PHYS_ADDR_INVALID;
+
+       if (edid && edid->extensions)
+               pa = cec_get_edid_phys_addr((const u8 *)edid,
+                               EDID_LENGTH * (edid->extensions + 1), NULL);
+       cec_s_phys_addr(adap, pa, false);
+}
+EXPORT_SYMBOL_GPL(cec_s_phys_addr_from_edid);
+
+void cec_s_conn_info(struct cec_adapter *adap,
+                    const struct cec_connector_info *conn_info)
+{
+       if (IS_ERR_OR_NULL(adap))
+               return;
+
+       if (!(adap->capabilities & CEC_CAP_CONNECTOR_INFO))
+               return;
+
+       mutex_lock(&adap->lock);
+       if (conn_info)
+               adap->conn_info = *conn_info;
+       else
+               memset(&adap->conn_info, 0, sizeof(adap->conn_info));
+       cec_post_state_event(adap);
+       mutex_unlock(&adap->lock);
+}
+EXPORT_SYMBOL_GPL(cec_s_conn_info);
+
+/*
+ * Called from either the ioctl or a driver to set the logical addresses.
+ *
+ * This function is called with adap->lock held.
+ */
+int __cec_s_log_addrs(struct cec_adapter *adap,
+                     struct cec_log_addrs *log_addrs, bool block)
+{
+       u16 type_mask = 0;
+       int i;
+
+       if (adap->devnode.unregistered)
+               return -ENODEV;
+
+       if (!log_addrs || log_addrs->num_log_addrs == 0) {
+               cec_adap_unconfigure(adap);
+               adap->log_addrs.num_log_addrs = 0;
+               for (i = 0; i < CEC_MAX_LOG_ADDRS; i++)
+                       adap->log_addrs.log_addr[i] = CEC_LOG_ADDR_INVALID;
+               adap->log_addrs.osd_name[0] = '\0';
+               adap->log_addrs.vendor_id = CEC_VENDOR_ID_NONE;
+               adap->log_addrs.cec_version = CEC_OP_CEC_VERSION_2_0;
+               return 0;
+       }
+
+       if (log_addrs->flags & CEC_LOG_ADDRS_FL_CDC_ONLY) {
+               /*
+                * Sanitize log_addrs fields if a CDC-Only device is
+                * requested.
+                */
+               log_addrs->num_log_addrs = 1;
+               log_addrs->osd_name[0] = '\0';
+               log_addrs->vendor_id = CEC_VENDOR_ID_NONE;
+               log_addrs->log_addr_type[0] = CEC_LOG_ADDR_TYPE_UNREGISTERED;
+               /*
+                * This is just an internal convention since a CDC-Only device
+                * doesn't have to be a switch. But switches already use
+                * unregistered, so it makes some kind of sense to pick this
+                * as the primary device. Since a CDC-Only device never sends
+                * any 'normal' CEC messages this primary device type is never
+                * sent over the CEC bus.
+                */
+               log_addrs->primary_device_type[0] = CEC_OP_PRIM_DEVTYPE_SWITCH;
+               log_addrs->all_device_types[0] = 0;
+               log_addrs->features[0][0] = 0;
+               log_addrs->features[0][1] = 0;
+       }
+
+       /* Ensure the osd name is 0-terminated */
+       log_addrs->osd_name[sizeof(log_addrs->osd_name) - 1] = '\0';
+
+       /* Sanity checks */
+       if (log_addrs->num_log_addrs > adap->available_log_addrs) {
+               dprintk(1, "num_log_addrs > %d\n", adap->available_log_addrs);
+               return -EINVAL;
+       }
+
+       /*
+        * Vendor ID is a 24 bit number, so check if the value is
+        * within the correct range.
+        */
+       if (log_addrs->vendor_id != CEC_VENDOR_ID_NONE &&
+           (log_addrs->vendor_id & 0xff000000) != 0) {
+               dprintk(1, "invalid vendor ID\n");
+               return -EINVAL;
+       }
+
+       if (log_addrs->cec_version != CEC_OP_CEC_VERSION_1_4 &&
+           log_addrs->cec_version != CEC_OP_CEC_VERSION_2_0) {
+               dprintk(1, "invalid CEC version\n");
+               return -EINVAL;
+       }
+
+       if (log_addrs->num_log_addrs > 1)
+               for (i = 0; i < log_addrs->num_log_addrs; i++)
+                       if (log_addrs->log_addr_type[i] ==
+                                       CEC_LOG_ADDR_TYPE_UNREGISTERED) {
+                               dprintk(1, "num_log_addrs > 1 can't be combined with unregistered LA\n");
+                               return -EINVAL;
+                       }
+
+       for (i = 0; i < log_addrs->num_log_addrs; i++) {
+               const u8 feature_sz = ARRAY_SIZE(log_addrs->features[0]);
+               u8 *features = log_addrs->features[i];
+               bool op_is_dev_features = false;
+               unsigned j;
+
+               log_addrs->log_addr[i] = CEC_LOG_ADDR_INVALID;
+               if (type_mask & (1 << log_addrs->log_addr_type[i])) {
+                       dprintk(1, "duplicate logical address type\n");
+                       return -EINVAL;
+               }
+               type_mask |= 1 << log_addrs->log_addr_type[i];
+               if ((type_mask & (1 << CEC_LOG_ADDR_TYPE_RECORD)) &&
+                   (type_mask & (1 << CEC_LOG_ADDR_TYPE_PLAYBACK))) {
+                       /* Record already contains the playback functionality */
+                       dprintk(1, "invalid record + playback combination\n");
+                       return -EINVAL;
+               }
+               if (log_addrs->primary_device_type[i] >
+                                       CEC_OP_PRIM_DEVTYPE_PROCESSOR) {
+                       dprintk(1, "unknown primary device type\n");
+                       return -EINVAL;
+               }
+               if (log_addrs->primary_device_type[i] == 2) {
+                       dprintk(1, "invalid primary device type\n");
+                       return -EINVAL;
+               }
+               if (log_addrs->log_addr_type[i] > CEC_LOG_ADDR_TYPE_UNREGISTERED) {
+                       dprintk(1, "unknown logical address type\n");
+                       return -EINVAL;
+               }
+               for (j = 0; j < feature_sz; j++) {
+                       if ((features[j] & 0x80) == 0) {
+                               if (op_is_dev_features)
+                                       break;
+                               op_is_dev_features = true;
+                       }
+               }
+               if (!op_is_dev_features || j == feature_sz) {
+                       dprintk(1, "malformed features\n");
+                       return -EINVAL;
+               }
+               /* Zero unused part of the feature array */
+               memset(features + j + 1, 0, feature_sz - j - 1);
+       }
+
+       if (log_addrs->cec_version >= CEC_OP_CEC_VERSION_2_0) {
+               if (log_addrs->num_log_addrs > 2) {
+                       dprintk(1, "CEC 2.0 allows no more than 2 logical addresses\n");
+                       return -EINVAL;
+               }
+               if (log_addrs->num_log_addrs == 2) {
+                       if (!(type_mask & ((1 << CEC_LOG_ADDR_TYPE_AUDIOSYSTEM) |
+                                          (1 << CEC_LOG_ADDR_TYPE_TV)))) {
+                               dprintk(1, "two LAs is only allowed for audiosystem and TV\n");
+                               return -EINVAL;
+                       }
+                       if (!(type_mask & ((1 << CEC_LOG_ADDR_TYPE_PLAYBACK) |
+                                          (1 << CEC_LOG_ADDR_TYPE_RECORD)))) {
+                               dprintk(1, "an audiosystem/TV can only be combined with record or playback\n");
+                               return -EINVAL;
+                       }
+               }
+       }
+
+       /* Zero unused LAs */
+       for (i = log_addrs->num_log_addrs; i < CEC_MAX_LOG_ADDRS; i++) {
+               log_addrs->primary_device_type[i] = 0;
+               log_addrs->log_addr_type[i] = 0;
+               log_addrs->all_device_types[i] = 0;
+               memset(log_addrs->features[i], 0,
+                      sizeof(log_addrs->features[i]));
+       }
+
+       log_addrs->log_addr_mask = adap->log_addrs.log_addr_mask;
+       adap->log_addrs = *log_addrs;
+       if (adap->phys_addr != CEC_PHYS_ADDR_INVALID)
+               cec_claim_log_addrs(adap, block);
+       return 0;
+}
+
+int cec_s_log_addrs(struct cec_adapter *adap,
+                   struct cec_log_addrs *log_addrs, bool block)
+{
+       int err;
+
+       mutex_lock(&adap->lock);
+       err = __cec_s_log_addrs(adap, log_addrs, block);
+       mutex_unlock(&adap->lock);
+       return err;
+}
+EXPORT_SYMBOL_GPL(cec_s_log_addrs);
+
+/* High-level core CEC message handling */
+
+/* Fill in the Report Features message */
+static void cec_fill_msg_report_features(struct cec_adapter *adap,
+                                        struct cec_msg *msg,
+                                        unsigned int la_idx)
+{
+       const struct cec_log_addrs *las = &adap->log_addrs;
+       const u8 *features = las->features[la_idx];
+       bool op_is_dev_features = false;
+       unsigned int idx;
+
+       /* Report Features */
+       msg->msg[0] = (las->log_addr[la_idx] << 4) | 0x0f;
+       msg->len = 4;
+       msg->msg[1] = CEC_MSG_REPORT_FEATURES;
+       msg->msg[2] = adap->log_addrs.cec_version;
+       msg->msg[3] = las->all_device_types[la_idx];
+
+       /* Write RC Profiles first, then Device Features */
+       for (idx = 0; idx < ARRAY_SIZE(las->features[0]); idx++) {
+               msg->msg[msg->len++] = features[idx];
+               if ((features[idx] & CEC_OP_FEAT_EXT) == 0) {
+                       if (op_is_dev_features)
+                               break;
+                       op_is_dev_features = true;
+               }
+       }
+}
+
+/* Transmit the Feature Abort message */
+static int cec_feature_abort_reason(struct cec_adapter *adap,
+                                   struct cec_msg *msg, u8 reason)
+{
+       struct cec_msg tx_msg = { };
+
+       /*
+        * Don't reply with CEC_MSG_FEATURE_ABORT to a CEC_MSG_FEATURE_ABORT
+        * message!
+        */
+       if (msg->msg[1] == CEC_MSG_FEATURE_ABORT)
+               return 0;
+       /* Don't Feature Abort messages from 'Unregistered' */
+       if (cec_msg_initiator(msg) == CEC_LOG_ADDR_UNREGISTERED)
+               return 0;
+       cec_msg_set_reply_to(&tx_msg, msg);
+       cec_msg_feature_abort(&tx_msg, msg->msg[1], reason);
+       return cec_transmit_msg(adap, &tx_msg, false);
+}
+
+static int cec_feature_abort(struct cec_adapter *adap, struct cec_msg *msg)
+{
+       return cec_feature_abort_reason(adap, msg,
+                                       CEC_OP_ABORT_UNRECOGNIZED_OP);
+}
+
+static int cec_feature_refused(struct cec_adapter *adap, struct cec_msg *msg)
+{
+       return cec_feature_abort_reason(adap, msg,
+                                       CEC_OP_ABORT_REFUSED);
+}
+
+/*
+ * Called when a CEC message is received. This function will do any
+ * necessary core processing. The is_reply bool is true if this message
+ * is a reply to an earlier transmit.
+ *
+ * The message is either a broadcast message or a valid directed message.
+ */
+static int cec_receive_notify(struct cec_adapter *adap, struct cec_msg *msg,
+                             bool is_reply)
+{
+       bool is_broadcast = cec_msg_is_broadcast(msg);
+       u8 dest_laddr = cec_msg_destination(msg);
+       u8 init_laddr = cec_msg_initiator(msg);
+       u8 devtype = cec_log_addr2dev(adap, dest_laddr);
+       int la_idx = cec_log_addr2idx(adap, dest_laddr);
+       bool from_unregistered = init_laddr == 0xf;
+       struct cec_msg tx_cec_msg = { };
+
+       dprintk(2, "%s: %*ph\n", __func__, msg->len, msg->msg);
+
+       /* If this is a CDC-Only device, then ignore any non-CDC messages */
+       if (cec_is_cdc_only(&adap->log_addrs) &&
+           msg->msg[1] != CEC_MSG_CDC_MESSAGE)
+               return 0;
+
+       if (adap->ops->received) {
+               /* Allow drivers to process the message first */
+               if (adap->ops->received(adap, msg) != -ENOMSG)
+                       return 0;
+       }
+
+       /*
+        * REPORT_PHYSICAL_ADDR, CEC_MSG_USER_CONTROL_PRESSED and
+        * CEC_MSG_USER_CONTROL_RELEASED messages always have to be
+        * handled by the CEC core, even if the passthrough mode is on.
+        * The others are just ignored if passthrough mode is on.
+        */
+       switch (msg->msg[1]) {
+       case CEC_MSG_GET_CEC_VERSION:
+       case CEC_MSG_ABORT:
+       case CEC_MSG_GIVE_DEVICE_POWER_STATUS:
+       case CEC_MSG_GIVE_OSD_NAME:
+               /*
+                * These messages reply with a directed message, so ignore if
+                * the initiator is Unregistered.
+                */
+               if (!adap->passthrough && from_unregistered)
+                       return 0;
+               /* Fall through */
+       case CEC_MSG_GIVE_DEVICE_VENDOR_ID:
+       case CEC_MSG_GIVE_FEATURES:
+       case CEC_MSG_GIVE_PHYSICAL_ADDR:
+               /*
+                * Skip processing these messages if the passthrough mode
+                * is on.
+                */
+               if (adap->passthrough)
+                       goto skip_processing;
+               /* Ignore if addressing is wrong */
+               if (is_broadcast)
+                       return 0;
+               break;
+
+       case CEC_MSG_USER_CONTROL_PRESSED:
+       case CEC_MSG_USER_CONTROL_RELEASED:
+               /* Wrong addressing mode: don't process */
+               if (is_broadcast || from_unregistered)
+                       goto skip_processing;
+               break;
+
+       case CEC_MSG_REPORT_PHYSICAL_ADDR:
+               /*
+                * This message is always processed, regardless of the
+                * passthrough setting.
+                *
+                * Exception: don't process if wrong addressing mode.
+                */
+               if (!is_broadcast)
+                       goto skip_processing;
+               break;
+
+       default:
+               break;
+       }
+
+       cec_msg_set_reply_to(&tx_cec_msg, msg);
+
+       switch (msg->msg[1]) {
+       /* The following messages are processed but still passed through */
+       case CEC_MSG_REPORT_PHYSICAL_ADDR: {
+               u16 pa = (msg->msg[2] << 8) | msg->msg[3];
+
+               if (!from_unregistered)
+                       adap->phys_addrs[init_laddr] = pa;
+               dprintk(1, "reported physical address %x.%x.%x.%x for logical address %d\n",
+                       cec_phys_addr_exp(pa), init_laddr);
+               break;
+       }
+
+       case CEC_MSG_USER_CONTROL_PRESSED:
+               if (!(adap->capabilities & CEC_CAP_RC) ||
+                   !(adap->log_addrs.flags & CEC_LOG_ADDRS_FL_ALLOW_RC_PASSTHRU))
+                       break;
+
+#ifdef CONFIG_MEDIA_CEC_RC
+               switch (msg->msg[2]) {
+               /*
+                * Play function, this message can have variable length
+                * depending on the specific play function that is used.
+                */
+               case CEC_OP_UI_CMD_PLAY_FUNCTION:
+                       if (msg->len == 2)
+                               rc_keydown(adap->rc, RC_PROTO_CEC,
+                                          msg->msg[2], 0);
+                       else
+                               rc_keydown(adap->rc, RC_PROTO_CEC,
+                                          msg->msg[2] << 8 | msg->msg[3], 0);
+                       break;
+               /*
+                * Other function messages that are not handled.
+                * Currently the RC framework does not allow to supply an
+                * additional parameter to a keypress. These "keys" contain
+                * other information such as channel number, an input number
+                * etc.
+                * For the time being these messages are not processed by the
+                * framework and are simply forwarded to the user space.
+                */
+               case CEC_OP_UI_CMD_SELECT_BROADCAST_TYPE:
+               case CEC_OP_UI_CMD_SELECT_SOUND_PRESENTATION:
+               case CEC_OP_UI_CMD_TUNE_FUNCTION:
+               case CEC_OP_UI_CMD_SELECT_MEDIA_FUNCTION:
+               case CEC_OP_UI_CMD_SELECT_AV_INPUT_FUNCTION:
+               case CEC_OP_UI_CMD_SELECT_AUDIO_INPUT_FUNCTION:
+                       break;
+               default:
+                       rc_keydown(adap->rc, RC_PROTO_CEC, msg->msg[2], 0);
+                       break;
+               }
+#endif
+               break;
+
+       case CEC_MSG_USER_CONTROL_RELEASED:
+               if (!(adap->capabilities & CEC_CAP_RC) ||
+                   !(adap->log_addrs.flags & CEC_LOG_ADDRS_FL_ALLOW_RC_PASSTHRU))
+                       break;
+#ifdef CONFIG_MEDIA_CEC_RC
+               rc_keyup(adap->rc);
+#endif
+               break;
+
+       /*
+        * The remaining messages are only processed if the passthrough mode
+        * is off.
+        */
+       case CEC_MSG_GET_CEC_VERSION:
+               cec_msg_cec_version(&tx_cec_msg, adap->log_addrs.cec_version);
+               return cec_transmit_msg(adap, &tx_cec_msg, false);
+
+       case CEC_MSG_GIVE_PHYSICAL_ADDR:
+               /* Do nothing for CEC switches using addr 15 */
+               if (devtype == CEC_OP_PRIM_DEVTYPE_SWITCH && dest_laddr == 15)
+                       return 0;
+               cec_msg_report_physical_addr(&tx_cec_msg, adap->phys_addr, devtype);
+               return cec_transmit_msg(adap, &tx_cec_msg, false);
+
+       case CEC_MSG_GIVE_DEVICE_VENDOR_ID:
+               if (adap->log_addrs.vendor_id == CEC_VENDOR_ID_NONE)
+                       return cec_feature_abort(adap, msg);
+               cec_msg_device_vendor_id(&tx_cec_msg, adap->log_addrs.vendor_id);
+               return cec_transmit_msg(adap, &tx_cec_msg, false);
+
+       case CEC_MSG_ABORT:
+               /* Do nothing for CEC switches */
+               if (devtype == CEC_OP_PRIM_DEVTYPE_SWITCH)
+                       return 0;
+               return cec_feature_refused(adap, msg);
+
+       case CEC_MSG_GIVE_OSD_NAME: {
+               if (adap->log_addrs.osd_name[0] == 0)
+                       return cec_feature_abort(adap, msg);
+               cec_msg_set_osd_name(&tx_cec_msg, adap->log_addrs.osd_name);
+               return cec_transmit_msg(adap, &tx_cec_msg, false);
+       }
+
+       case CEC_MSG_GIVE_FEATURES:
+               if (adap->log_addrs.cec_version < CEC_OP_CEC_VERSION_2_0)
+                       return cec_feature_abort(adap, msg);
+               cec_fill_msg_report_features(adap, &tx_cec_msg, la_idx);
+               return cec_transmit_msg(adap, &tx_cec_msg, false);
+
+       default:
+               /*
+                * Unprocessed messages are aborted if userspace isn't doing
+                * any processing either.
+                */
+               if (!is_broadcast && !is_reply && !adap->follower_cnt &&
+                   !adap->cec_follower && msg->msg[1] != CEC_MSG_FEATURE_ABORT)
+                       return cec_feature_abort(adap, msg);
+               break;
+       }
+
+skip_processing:
+       /* If this was a reply, then we're done, unless otherwise specified */
+       if (is_reply && !(msg->flags & CEC_MSG_FL_REPLY_TO_FOLLOWERS))
+               return 0;
+
+       /*
+        * Send to the exclusive follower if there is one, otherwise send
+        * to all followers.
+        */
+       if (adap->cec_follower)
+               cec_queue_msg_fh(adap->cec_follower, msg);
+       else
+               cec_queue_msg_followers(adap, msg);
+       return 0;
+}
+
+/*
+ * Helper functions to keep track of the 'monitor all' use count.
+ *
+ * These functions are called with adap->lock held.
+ */
+int cec_monitor_all_cnt_inc(struct cec_adapter *adap)
+{
+       int ret = 0;
+
+       if (adap->monitor_all_cnt == 0)
+               ret = call_op(adap, adap_monitor_all_enable, 1);
+       if (ret == 0)
+               adap->monitor_all_cnt++;
+       return ret;
+}
+
+void cec_monitor_all_cnt_dec(struct cec_adapter *adap)
+{
+       adap->monitor_all_cnt--;
+       if (adap->monitor_all_cnt == 0)
+               WARN_ON(call_op(adap, adap_monitor_all_enable, 0));
+}
+
+/*
+ * Helper functions to keep track of the 'monitor pin' use count.
+ *
+ * These functions are called with adap->lock held.
+ */
+int cec_monitor_pin_cnt_inc(struct cec_adapter *adap)
+{
+       int ret = 0;
+
+       if (adap->monitor_pin_cnt == 0)
+               ret = call_op(adap, adap_monitor_pin_enable, 1);
+       if (ret == 0)
+               adap->monitor_pin_cnt++;
+       return ret;
+}
+
+void cec_monitor_pin_cnt_dec(struct cec_adapter *adap)
+{
+       adap->monitor_pin_cnt--;
+       if (adap->monitor_pin_cnt == 0)
+               WARN_ON(call_op(adap, adap_monitor_pin_enable, 0));
+}
+
+#ifdef CONFIG_DEBUG_FS
+/*
+ * Log the current state of the CEC adapter.
+ * Very useful for debugging.
+ */
+int cec_adap_status(struct seq_file *file, void *priv)
+{
+       struct cec_adapter *adap = dev_get_drvdata(file->private);
+       struct cec_data *data;
+
+       mutex_lock(&adap->lock);
+       seq_printf(file, "configured: %d\n", adap->is_configured);
+       seq_printf(file, "configuring: %d\n", adap->is_configuring);
+       seq_printf(file, "phys_addr: %x.%x.%x.%x\n",
+                  cec_phys_addr_exp(adap->phys_addr));
+       seq_printf(file, "number of LAs: %d\n", adap->log_addrs.num_log_addrs);
+       seq_printf(file, "LA mask: 0x%04x\n", adap->log_addrs.log_addr_mask);
+       if (adap->cec_follower)
+               seq_printf(file, "has CEC follower%s\n",
+                          adap->passthrough ? " (in passthrough mode)" : "");
+       if (adap->cec_initiator)
+               seq_puts(file, "has CEC initiator\n");
+       if (adap->monitor_all_cnt)
+               seq_printf(file, "file handles in Monitor All mode: %u\n",
+                          adap->monitor_all_cnt);
+       if (adap->tx_timeouts) {
+               seq_printf(file, "transmit timeouts: %u\n",
+                          adap->tx_timeouts);
+               adap->tx_timeouts = 0;
+       }
+       data = adap->transmitting;
+       if (data)
+               seq_printf(file, "transmitting message: %*ph (reply: %02x, timeout: %ums)\n",
+                          data->msg.len, data->msg.msg, data->msg.reply,
+                          data->msg.timeout);
+       seq_printf(file, "pending transmits: %u\n", adap->transmit_queue_sz);
+       list_for_each_entry(data, &adap->transmit_queue, list) {
+               seq_printf(file, "queued tx message: %*ph (reply: %02x, timeout: %ums)\n",
+                          data->msg.len, data->msg.msg, data->msg.reply,
+                          data->msg.timeout);
+       }
+       list_for_each_entry(data, &adap->wait_queue, list) {
+               seq_printf(file, "message waiting for reply: %*ph (reply: %02x, timeout: %ums)\n",
+                          data->msg.len, data->msg.msg, data->msg.reply,
+                          data->msg.timeout);
+       }
+
+       call_void_op(adap, adap_status, file);
+       mutex_unlock(&adap->lock);
+       return 0;
+}
+#endif
diff --git a/drivers/media/cec/core/cec-api.c b/drivers/media/cec/core/cec-api.c
new file mode 100644 (file)
index 0000000..17d1cb2
--- /dev/null
@@ -0,0 +1,701 @@
+// SPDX-License-Identifier: GPL-2.0-only
+/*
+ * cec-api.c - HDMI Consumer Electronics Control framework - API
+ *
+ * Copyright 2016 Cisco Systems, Inc. and/or its affiliates. All rights reserved.
+ */
+
+#include <linux/errno.h>
+#include <linux/init.h>
+#include <linux/module.h>
+#include <linux/kernel.h>
+#include <linux/kmod.h>
+#include <linux/ktime.h>
+#include <linux/slab.h>
+#include <linux/mm.h>
+#include <linux/string.h>
+#include <linux/types.h>
+#include <linux/uaccess.h>
+#include <linux/version.h>
+
+#include <media/cec-pin.h>
+#include "cec-priv.h"
+#include "cec-pin-priv.h"
+
+static inline struct cec_devnode *cec_devnode_data(struct file *filp)
+{
+       struct cec_fh *fh = filp->private_data;
+
+       return &fh->adap->devnode;
+}
+
+/* CEC file operations */
+
+static __poll_t cec_poll(struct file *filp,
+                            struct poll_table_struct *poll)
+{
+       struct cec_fh *fh = filp->private_data;
+       struct cec_adapter *adap = fh->adap;
+       __poll_t res = 0;
+
+       poll_wait(filp, &fh->wait, poll);
+       if (!cec_is_registered(adap))
+               return EPOLLERR | EPOLLHUP;
+       mutex_lock(&adap->lock);
+       if (adap->is_configured &&
+           adap->transmit_queue_sz < CEC_MAX_MSG_TX_QUEUE_SZ)
+               res |= EPOLLOUT | EPOLLWRNORM;
+       if (fh->queued_msgs)
+               res |= EPOLLIN | EPOLLRDNORM;
+       if (fh->total_queued_events)
+               res |= EPOLLPRI;
+       mutex_unlock(&adap->lock);
+       return res;
+}
+
+static bool cec_is_busy(const struct cec_adapter *adap,
+                       const struct cec_fh *fh)
+{
+       bool valid_initiator = adap->cec_initiator && adap->cec_initiator == fh;
+       bool valid_follower = adap->cec_follower && adap->cec_follower == fh;
+
+       /*
+        * Exclusive initiators and followers can always access the CEC adapter
+        */
+       if (valid_initiator || valid_follower)
+               return false;
+       /*
+        * All others can only access the CEC adapter if there is no
+        * exclusive initiator and they are in INITIATOR mode.
+        */
+       return adap->cec_initiator ||
+              fh->mode_initiator == CEC_MODE_NO_INITIATOR;
+}
+
+static long cec_adap_g_caps(struct cec_adapter *adap,
+                           struct cec_caps __user *parg)
+{
+       struct cec_caps caps = {};
+
+       strscpy(caps.driver, adap->devnode.dev.parent->driver->name,
+               sizeof(caps.driver));
+       strscpy(caps.name, adap->name, sizeof(caps.name));
+       caps.available_log_addrs = adap->available_log_addrs;
+       caps.capabilities = adap->capabilities;
+       caps.version = LINUX_VERSION_CODE;
+       if (copy_to_user(parg, &caps, sizeof(caps)))
+               return -EFAULT;
+       return 0;
+}
+
+static long cec_adap_g_phys_addr(struct cec_adapter *adap,
+                                __u16 __user *parg)
+{
+       u16 phys_addr;
+
+       mutex_lock(&adap->lock);
+       phys_addr = adap->phys_addr;
+       mutex_unlock(&adap->lock);
+       if (copy_to_user(parg, &phys_addr, sizeof(phys_addr)))
+               return -EFAULT;
+       return 0;
+}
+
+static int cec_validate_phys_addr(u16 phys_addr)
+{
+       int i;
+
+       if (phys_addr == CEC_PHYS_ADDR_INVALID)
+               return 0;
+       for (i = 0; i < 16; i += 4)
+               if (phys_addr & (0xf << i))
+                       break;
+       if (i == 16)
+               return 0;
+       for (i += 4; i < 16; i += 4)
+               if ((phys_addr & (0xf << i)) == 0)
+                       return -EINVAL;
+       return 0;
+}
+
+static long cec_adap_s_phys_addr(struct cec_adapter *adap, struct cec_fh *fh,
+                                bool block, __u16 __user *parg)
+{
+       u16 phys_addr;
+       long err;
+
+       if (!(adap->capabilities & CEC_CAP_PHYS_ADDR))
+               return -ENOTTY;
+       if (copy_from_user(&phys_addr, parg, sizeof(phys_addr)))
+               return -EFAULT;
+
+       err = cec_validate_phys_addr(phys_addr);
+       if (err)
+               return err;
+       mutex_lock(&adap->lock);
+       if (cec_is_busy(adap, fh))
+               err = -EBUSY;
+       else
+               __cec_s_phys_addr(adap, phys_addr, block);
+       mutex_unlock(&adap->lock);
+       return err;
+}
+
+static long cec_adap_g_log_addrs(struct cec_adapter *adap,
+                                struct cec_log_addrs __user *parg)
+{
+       struct cec_log_addrs log_addrs;
+
+       mutex_lock(&adap->lock);
+       log_addrs = adap->log_addrs;
+       if (!adap->is_configured)
+               memset(log_addrs.log_addr, CEC_LOG_ADDR_INVALID,
+                      sizeof(log_addrs.log_addr));
+       mutex_unlock(&adap->lock);
+
+       if (copy_to_user(parg, &log_addrs, sizeof(log_addrs)))
+               return -EFAULT;
+       return 0;
+}
+
+static long cec_adap_s_log_addrs(struct cec_adapter *adap, struct cec_fh *fh,
+                                bool block, struct cec_log_addrs __user *parg)
+{
+       struct cec_log_addrs log_addrs;
+       long err = -EBUSY;
+
+       if (!(adap->capabilities & CEC_CAP_LOG_ADDRS))
+               return -ENOTTY;
+       if (copy_from_user(&log_addrs, parg, sizeof(log_addrs)))
+               return -EFAULT;
+       log_addrs.flags &= CEC_LOG_ADDRS_FL_ALLOW_UNREG_FALLBACK |
+                          CEC_LOG_ADDRS_FL_ALLOW_RC_PASSTHRU |
+                          CEC_LOG_ADDRS_FL_CDC_ONLY;
+       mutex_lock(&adap->lock);
+       if (!adap->is_configuring &&
+           (!log_addrs.num_log_addrs || !adap->is_configured) &&
+           !cec_is_busy(adap, fh)) {
+               err = __cec_s_log_addrs(adap, &log_addrs, block);
+               if (!err)
+                       log_addrs = adap->log_addrs;
+       }
+       mutex_unlock(&adap->lock);
+       if (err)
+               return err;
+       if (copy_to_user(parg, &log_addrs, sizeof(log_addrs)))
+               return -EFAULT;
+       return 0;
+}
+
+static long cec_adap_g_connector_info(struct cec_adapter *adap,
+                                     struct cec_log_addrs __user *parg)
+{
+       int ret = 0;
+
+       if (!(adap->capabilities & CEC_CAP_CONNECTOR_INFO))
+               return -ENOTTY;
+
+       mutex_lock(&adap->lock);
+       if (copy_to_user(parg, &adap->conn_info, sizeof(adap->conn_info)))
+               ret = -EFAULT;
+       mutex_unlock(&adap->lock);
+       return ret;
+}
+
+static long cec_transmit(struct cec_adapter *adap, struct cec_fh *fh,
+                        bool block, struct cec_msg __user *parg)
+{
+       struct cec_msg msg = {};
+       long err = 0;
+
+       if (!(adap->capabilities & CEC_CAP_TRANSMIT))
+               return -ENOTTY;
+       if (copy_from_user(&msg, parg, sizeof(msg)))
+               return -EFAULT;
+
+       mutex_lock(&adap->lock);
+       if (adap->log_addrs.num_log_addrs == 0)
+               err = -EPERM;
+       else if (adap->is_configuring)
+               err = -ENONET;
+       else if (cec_is_busy(adap, fh))
+               err = -EBUSY;
+       else
+               err = cec_transmit_msg_fh(adap, &msg, fh, block);
+       mutex_unlock(&adap->lock);
+       if (err)
+               return err;
+       if (copy_to_user(parg, &msg, sizeof(msg)))
+               return -EFAULT;
+       return 0;
+}
+
+/* Called by CEC_RECEIVE: wait for a message to arrive */
+static int cec_receive_msg(struct cec_fh *fh, struct cec_msg *msg, bool block)
+{
+       u32 timeout = msg->timeout;
+       int res;
+
+       do {
+               mutex_lock(&fh->lock);
+               /* Are there received messages queued up? */
+               if (fh->queued_msgs) {
+                       /* Yes, return the first one */
+                       struct cec_msg_entry *entry =
+                               list_first_entry(&fh->msgs,
+                                                struct cec_msg_entry, list);
+
+                       list_del(&entry->list);
+                       *msg = entry->msg;
+                       kfree(entry);
+                       fh->queued_msgs--;
+                       mutex_unlock(&fh->lock);
+                       /* restore original timeout value */
+                       msg->timeout = timeout;
+                       return 0;
+               }
+
+               /* No, return EAGAIN in non-blocking mode or wait */
+               mutex_unlock(&fh->lock);
+
+               /* Return when in non-blocking mode */
+               if (!block)
+                       return -EAGAIN;
+
+               if (msg->timeout) {
+                       /* The user specified a timeout */
+                       res = wait_event_interruptible_timeout(fh->wait,
+                                                              fh->queued_msgs,
+                               msecs_to_jiffies(msg->timeout));
+                       if (res == 0)
+                               res = -ETIMEDOUT;
+                       else if (res > 0)
+                               res = 0;
+               } else {
+                       /* Wait indefinitely */
+                       res = wait_event_interruptible(fh->wait,
+                                                      fh->queued_msgs);
+               }
+               /* Exit on error, otherwise loop to get the new message */
+       } while (!res);
+       return res;
+}
+
+static long cec_receive(struct cec_adapter *adap, struct cec_fh *fh,
+                       bool block, struct cec_msg __user *parg)
+{
+       struct cec_msg msg = {};
+       long err;
+
+       if (copy_from_user(&msg, parg, sizeof(msg)))
+               return -EFAULT;
+
+       err = cec_receive_msg(fh, &msg, block);
+       if (err)
+               return err;
+       msg.flags = 0;
+       if (copy_to_user(parg, &msg, sizeof(msg)))
+               return -EFAULT;
+       return 0;
+}
+
+static long cec_dqevent(struct cec_adapter *adap, struct cec_fh *fh,
+                       bool block, struct cec_event __user *parg)
+{
+       struct cec_event_entry *ev = NULL;
+       u64 ts = ~0ULL;
+       unsigned int i;
+       unsigned int ev_idx;
+       long err = 0;
+
+       mutex_lock(&fh->lock);
+       while (!fh->total_queued_events && block) {
+               mutex_unlock(&fh->lock);
+               err = wait_event_interruptible(fh->wait,
+                                              fh->total_queued_events);
+               if (err)
+                       return err;
+               mutex_lock(&fh->lock);
+       }
+
+       /* Find the oldest event */
+       for (i = 0; i < CEC_NUM_EVENTS; i++) {
+               struct cec_event_entry *entry =
+                       list_first_entry_or_null(&fh->events[i],
+                                                struct cec_event_entry, list);
+
+               if (entry && entry->ev.ts <= ts) {
+                       ev = entry;
+                       ev_idx = i;
+                       ts = ev->ev.ts;
+               }
+       }
+
+       if (!ev) {
+               err = -EAGAIN;
+               goto unlock;
+       }
+       list_del(&ev->list);
+
+       if (copy_to_user(parg, &ev->ev, sizeof(ev->ev)))
+               err = -EFAULT;
+       if (ev_idx >= CEC_NUM_CORE_EVENTS)
+               kfree(ev);
+       fh->queued_events[ev_idx]--;
+       fh->total_queued_events--;
+
+unlock:
+       mutex_unlock(&fh->lock);
+       return err;
+}
+
+static long cec_g_mode(struct cec_adapter *adap, struct cec_fh *fh,
+                      u32 __user *parg)
+{
+       u32 mode = fh->mode_initiator | fh->mode_follower;
+
+       if (copy_to_user(parg, &mode, sizeof(mode)))
+               return -EFAULT;
+       return 0;
+}
+
+static long cec_s_mode(struct cec_adapter *adap, struct cec_fh *fh,
+                      u32 __user *parg)
+{
+       u32 mode;
+       u8 mode_initiator;
+       u8 mode_follower;
+       bool send_pin_event = false;
+       long err = 0;
+
+       if (copy_from_user(&mode, parg, sizeof(mode)))
+               return -EFAULT;
+       if (mode & ~(CEC_MODE_INITIATOR_MSK | CEC_MODE_FOLLOWER_MSK)) {
+               dprintk(1, "%s: invalid mode bits set\n", __func__);
+               return -EINVAL;
+       }
+
+       mode_initiator = mode & CEC_MODE_INITIATOR_MSK;
+       mode_follower = mode & CEC_MODE_FOLLOWER_MSK;
+
+       if (mode_initiator > CEC_MODE_EXCL_INITIATOR ||
+           mode_follower > CEC_MODE_MONITOR_ALL) {
+               dprintk(1, "%s: unknown mode\n", __func__);
+               return -EINVAL;
+       }
+
+       if (mode_follower == CEC_MODE_MONITOR_ALL &&
+           !(adap->capabilities & CEC_CAP_MONITOR_ALL)) {
+               dprintk(1, "%s: MONITOR_ALL not supported\n", __func__);
+               return -EINVAL;
+       }
+
+       if (mode_follower == CEC_MODE_MONITOR_PIN &&
+           !(adap->capabilities & CEC_CAP_MONITOR_PIN)) {
+               dprintk(1, "%s: MONITOR_PIN not supported\n", __func__);
+               return -EINVAL;
+       }
+
+       /* Follower modes should always be able to send CEC messages */
+       if ((mode_initiator == CEC_MODE_NO_INITIATOR ||
+            !(adap->capabilities & CEC_CAP_TRANSMIT)) &&
+           mode_follower >= CEC_MODE_FOLLOWER &&
+           mode_follower <= CEC_MODE_EXCL_FOLLOWER_PASSTHRU) {
+               dprintk(1, "%s: cannot transmit\n", __func__);
+               return -EINVAL;
+       }
+
+       /* Monitor modes require CEC_MODE_NO_INITIATOR */
+       if (mode_initiator && mode_follower >= CEC_MODE_MONITOR_PIN) {
+               dprintk(1, "%s: monitor modes require NO_INITIATOR\n",
+                       __func__);
+               return -EINVAL;
+       }
+
+       /* Monitor modes require CAP_NET_ADMIN */
+       if (mode_follower >= CEC_MODE_MONITOR_PIN && !capable(CAP_NET_ADMIN))
+               return -EPERM;
+
+       mutex_lock(&adap->lock);
+       /*
+        * You can't become exclusive follower if someone else already
+        * has that job.
+        */
+       if ((mode_follower == CEC_MODE_EXCL_FOLLOWER ||
+            mode_follower == CEC_MODE_EXCL_FOLLOWER_PASSTHRU) &&
+           adap->cec_follower && adap->cec_follower != fh)
+               err = -EBUSY;
+       /*
+        * You can't become exclusive initiator if someone else already
+        * has that job.
+        */
+       if (mode_initiator == CEC_MODE_EXCL_INITIATOR &&
+           adap->cec_initiator && adap->cec_initiator != fh)
+               err = -EBUSY;
+
+       if (!err) {
+               bool old_mon_all = fh->mode_follower == CEC_MODE_MONITOR_ALL;
+               bool new_mon_all = mode_follower == CEC_MODE_MONITOR_ALL;
+
+               if (old_mon_all != new_mon_all) {
+                       if (new_mon_all)
+                               err = cec_monitor_all_cnt_inc(adap);
+                       else
+                               cec_monitor_all_cnt_dec(adap);
+               }
+       }
+
+       if (!err) {
+               bool old_mon_pin = fh->mode_follower == CEC_MODE_MONITOR_PIN;
+               bool new_mon_pin = mode_follower == CEC_MODE_MONITOR_PIN;
+
+               if (old_mon_pin != new_mon_pin) {
+                       send_pin_event = new_mon_pin;
+                       if (new_mon_pin)
+                               err = cec_monitor_pin_cnt_inc(adap);
+                       else
+                               cec_monitor_pin_cnt_dec(adap);
+               }
+       }
+
+       if (err) {
+               mutex_unlock(&adap->lock);
+               return err;
+       }
+
+       if (fh->mode_follower == CEC_MODE_FOLLOWER)
+               adap->follower_cnt--;
+       if (mode_follower == CEC_MODE_FOLLOWER)
+               adap->follower_cnt++;
+       if (send_pin_event) {
+               struct cec_event ev = {
+                       .flags = CEC_EVENT_FL_INITIAL_STATE,
+               };
+
+               ev.event = adap->cec_pin_is_high ? CEC_EVENT_PIN_CEC_HIGH :
+                                                  CEC_EVENT_PIN_CEC_LOW;
+               cec_queue_event_fh(fh, &ev, 0);
+       }
+       if (mode_follower == CEC_MODE_EXCL_FOLLOWER ||
+           mode_follower == CEC_MODE_EXCL_FOLLOWER_PASSTHRU) {
+               adap->passthrough =
+                       mode_follower == CEC_MODE_EXCL_FOLLOWER_PASSTHRU;
+               adap->cec_follower = fh;
+       } else if (adap->cec_follower == fh) {
+               adap->passthrough = false;
+               adap->cec_follower = NULL;
+       }
+       if (mode_initiator == CEC_MODE_EXCL_INITIATOR)
+               adap->cec_initiator = fh;
+       else if (adap->cec_initiator == fh)
+               adap->cec_initiator = NULL;
+       fh->mode_initiator = mode_initiator;
+       fh->mode_follower = mode_follower;
+       mutex_unlock(&adap->lock);
+       return 0;
+}
+
+static long cec_ioctl(struct file *filp, unsigned int cmd, unsigned long arg)
+{
+       struct cec_fh *fh = filp->private_data;
+       struct cec_adapter *adap = fh->adap;
+       bool block = !(filp->f_flags & O_NONBLOCK);
+       void __user *parg = (void __user *)arg;
+
+       if (!cec_is_registered(adap))
+               return -ENODEV;
+
+       switch (cmd) {
+       case CEC_ADAP_G_CAPS:
+               return cec_adap_g_caps(adap, parg);
+
+       case CEC_ADAP_G_PHYS_ADDR:
+               return cec_adap_g_phys_addr(adap, parg);
+
+       case CEC_ADAP_S_PHYS_ADDR:
+               return cec_adap_s_phys_addr(adap, fh, block, parg);
+
+       case CEC_ADAP_G_LOG_ADDRS:
+               return cec_adap_g_log_addrs(adap, parg);
+
+       case CEC_ADAP_S_LOG_ADDRS:
+               return cec_adap_s_log_addrs(adap, fh, block, parg);
+
+       case CEC_ADAP_G_CONNECTOR_INFO:
+               return cec_adap_g_connector_info(adap, parg);
+
+       case CEC_TRANSMIT:
+               return cec_transmit(adap, fh, block, parg);
+
+       case CEC_RECEIVE:
+               return cec_receive(adap, fh, block, parg);
+
+       case CEC_DQEVENT:
+               return cec_dqevent(adap, fh, block, parg);
+
+       case CEC_G_MODE:
+               return cec_g_mode(adap, fh, parg);
+
+       case CEC_S_MODE:
+               return cec_s_mode(adap, fh, parg);
+
+       default:
+               return -ENOTTY;
+       }
+}
+
+static int cec_open(struct inode *inode, struct file *filp)
+{
+       struct cec_devnode *devnode =
+               container_of(inode->i_cdev, struct cec_devnode, cdev);
+       struct cec_adapter *adap = to_cec_adapter(devnode);
+       struct cec_fh *fh = kzalloc(sizeof(*fh), GFP_KERNEL);
+       /*
+        * Initial events that are automatically sent when the cec device is
+        * opened.
+        */
+       struct cec_event ev = {
+               .event = CEC_EVENT_STATE_CHANGE,
+               .flags = CEC_EVENT_FL_INITIAL_STATE,
+       };
+       unsigned int i;
+       int err;
+
+       if (!fh)
+               return -ENOMEM;
+
+       INIT_LIST_HEAD(&fh->msgs);
+       INIT_LIST_HEAD(&fh->xfer_list);
+       for (i = 0; i < CEC_NUM_EVENTS; i++)
+               INIT_LIST_HEAD(&fh->events[i]);
+       mutex_init(&fh->lock);
+       init_waitqueue_head(&fh->wait);
+
+       fh->mode_initiator = CEC_MODE_INITIATOR;
+       fh->adap = adap;
+
+       err = cec_get_device(devnode);
+       if (err) {
+               kfree(fh);
+               return err;
+       }
+
+       mutex_lock(&devnode->lock);
+       if (list_empty(&devnode->fhs) &&
+           !adap->needs_hpd &&
+           adap->phys_addr == CEC_PHYS_ADDR_INVALID) {
+               err = adap->ops->adap_enable(adap, true);
+               if (err) {
+                       mutex_unlock(&devnode->lock);
+                       kfree(fh);
+                       return err;
+               }
+       }
+       filp->private_data = fh;
+
+       /* Queue up initial state events */
+       ev.state_change.phys_addr = adap->phys_addr;
+       ev.state_change.log_addr_mask = adap->log_addrs.log_addr_mask;
+       ev.state_change.have_conn_info =
+               adap->conn_info.type != CEC_CONNECTOR_TYPE_NO_CONNECTOR;
+       cec_queue_event_fh(fh, &ev, 0);
+#ifdef CONFIG_CEC_PIN
+       if (adap->pin && adap->pin->ops->read_hpd) {
+               err = adap->pin->ops->read_hpd(adap);
+               if (err >= 0) {
+                       ev.event = err ? CEC_EVENT_PIN_HPD_HIGH :
+                                        CEC_EVENT_PIN_HPD_LOW;
+                       cec_queue_event_fh(fh, &ev, 0);
+               }
+       }
+       if (adap->pin && adap->pin->ops->read_5v) {
+               err = adap->pin->ops->read_5v(adap);
+               if (err >= 0) {
+                       ev.event = err ? CEC_EVENT_PIN_5V_HIGH :
+                                        CEC_EVENT_PIN_5V_LOW;
+                       cec_queue_event_fh(fh, &ev, 0);
+               }
+       }
+#endif
+
+       list_add(&fh->list, &devnode->fhs);
+       mutex_unlock(&devnode->lock);
+
+       return 0;
+}
+
+/* Override for the release function */
+static int cec_release(struct inode *inode, struct file *filp)
+{
+       struct cec_devnode *devnode = cec_devnode_data(filp);
+       struct cec_adapter *adap = to_cec_adapter(devnode);
+       struct cec_fh *fh = filp->private_data;
+       unsigned int i;
+
+       mutex_lock(&adap->lock);
+       if (adap->cec_initiator == fh)
+               adap->cec_initiator = NULL;
+       if (adap->cec_follower == fh) {
+               adap->cec_follower = NULL;
+               adap->passthrough = false;
+       }
+       if (fh->mode_follower == CEC_MODE_FOLLOWER)
+               adap->follower_cnt--;
+       if (fh->mode_follower == CEC_MODE_MONITOR_PIN)
+               cec_monitor_pin_cnt_dec(adap);
+       if (fh->mode_follower == CEC_MODE_MONITOR_ALL)
+               cec_monitor_all_cnt_dec(adap);
+       mutex_unlock(&adap->lock);
+
+       mutex_lock(&devnode->lock);
+       list_del(&fh->list);
+       if (cec_is_registered(adap) && list_empty(&devnode->fhs) &&
+           !adap->needs_hpd && adap->phys_addr == CEC_PHYS_ADDR_INVALID) {
+               WARN_ON(adap->ops->adap_enable(adap, false));
+       }
+       mutex_unlock(&devnode->lock);
+
+       /* Unhook pending transmits from this filehandle. */
+       mutex_lock(&adap->lock);
+       while (!list_empty(&fh->xfer_list)) {
+               struct cec_data *data =
+                       list_first_entry(&fh->xfer_list, struct cec_data, xfer_list);
+
+               data->blocking = false;
+               data->fh = NULL;
+               list_del(&data->xfer_list);
+       }
+       mutex_unlock(&adap->lock);
+       while (!list_empty(&fh->msgs)) {
+               struct cec_msg_entry *entry =
+                       list_first_entry(&fh->msgs, struct cec_msg_entry, list);
+
+               list_del(&entry->list);
+               kfree(entry);
+       }
+       for (i = CEC_NUM_CORE_EVENTS; i < CEC_NUM_EVENTS; i++) {
+               while (!list_empty(&fh->events[i])) {
+                       struct cec_event_entry *entry =
+                               list_first_entry(&fh->events[i],
+                                                struct cec_event_entry, list);
+
+                       list_del(&entry->list);
+                       kfree(entry);
+               }
+       }
+       kfree(fh);
+
+       cec_put_device(devnode);
+       filp->private_data = NULL;
+       return 0;
+}
+
+const struct file_operations cec_devnode_fops = {
+       .owner = THIS_MODULE,
+       .open = cec_open,
+       .unlocked_ioctl = cec_ioctl,
+       .compat_ioctl = cec_ioctl,
+       .release = cec_release,
+       .poll = cec_poll,
+       .llseek = no_llseek,
+};
diff --git a/drivers/media/cec/core/cec-core.c b/drivers/media/cec/core/cec-core.c
new file mode 100644 (file)
index 0000000..0c52e1b
--- /dev/null
@@ -0,0 +1,465 @@
+// SPDX-License-Identifier: GPL-2.0-only
+/*
+ * cec-core.c - HDMI Consumer Electronics Control framework - Core
+ *
+ * Copyright 2016 Cisco Systems, Inc. and/or its affiliates. All rights reserved.
+ */
+
+#include <linux/errno.h>
+#include <linux/init.h>
+#include <linux/module.h>
+#include <linux/kernel.h>
+#include <linux/kmod.h>
+#include <linux/slab.h>
+#include <linux/mm.h>
+#include <linux/string.h>
+#include <linux/types.h>
+
+#include "cec-priv.h"
+
+#define CEC_NUM_DEVICES        256
+#define CEC_NAME       "cec"
+
+int cec_debug;
+module_param_named(debug, cec_debug, int, 0644);
+MODULE_PARM_DESC(debug, "debug level (0-2)");
+
+static bool debug_phys_addr;
+module_param(debug_phys_addr, bool, 0644);
+MODULE_PARM_DESC(debug_phys_addr, "add CEC_CAP_PHYS_ADDR if set");
+
+static dev_t cec_dev_t;
+
+/* Active devices */
+static DEFINE_MUTEX(cec_devnode_lock);
+static DECLARE_BITMAP(cec_devnode_nums, CEC_NUM_DEVICES);
+
+static struct dentry *top_cec_dir;
+
+/* dev to cec_devnode */
+#define to_cec_devnode(cd) container_of(cd, struct cec_devnode, dev)
+
+int cec_get_device(struct cec_devnode *devnode)
+{
+       /*
+        * Check if the cec device is available. This needs to be done with
+        * the devnode->lock held to prevent an open/unregister race:
+        * without the lock, the device could be unregistered and freed between
+        * the devnode->registered check and get_device() calls, leading to
+        * a crash.
+        */
+       mutex_lock(&devnode->lock);
+       /*
+        * return ENXIO if the cec device has been removed
+        * already or if it is not registered anymore.
+        */
+       if (!devnode->registered) {
+               mutex_unlock(&devnode->lock);
+               return -ENXIO;
+       }
+       /* and increase the device refcount */
+       get_device(&devnode->dev);
+       mutex_unlock(&devnode->lock);
+       return 0;
+}
+
+void cec_put_device(struct cec_devnode *devnode)
+{
+       put_device(&devnode->dev);
+}
+
+/* Called when the last user of the cec device exits. */
+static void cec_devnode_release(struct device *cd)
+{
+       struct cec_devnode *devnode = to_cec_devnode(cd);
+
+       mutex_lock(&cec_devnode_lock);
+       /* Mark device node number as free */
+       clear_bit(devnode->minor, cec_devnode_nums);
+       mutex_unlock(&cec_devnode_lock);
+
+       cec_delete_adapter(to_cec_adapter(devnode));
+}
+
+static struct bus_type cec_bus_type = {
+       .name = CEC_NAME,
+};
+
+/*
+ * Register a cec device node
+ *
+ * The registration code assigns minor numbers and registers the new device node
+ * with the kernel. An error is returned if no free minor number can be found,
+ * or if the registration of the device node fails.
+ *
+ * Zero is returned on success.
+ *
+ * Note that if the cec_devnode_register call fails, the release() callback of
+ * the cec_devnode structure is *not* called, so the caller is responsible for
+ * freeing any data.
+ */
+static int __must_check cec_devnode_register(struct cec_devnode *devnode,
+                                            struct module *owner)
+{
+       int minor;
+       int ret;
+
+       /* Part 1: Find a free minor number */
+       mutex_lock(&cec_devnode_lock);
+       minor = find_next_zero_bit(cec_devnode_nums, CEC_NUM_DEVICES, 0);
+       if (minor == CEC_NUM_DEVICES) {
+               mutex_unlock(&cec_devnode_lock);
+               pr_err("could not get a free minor\n");
+               return -ENFILE;
+       }
+
+       set_bit(minor, cec_devnode_nums);
+       mutex_unlock(&cec_devnode_lock);
+
+       devnode->minor = minor;
+       devnode->dev.bus = &cec_bus_type;
+       devnode->dev.devt = MKDEV(MAJOR(cec_dev_t), minor);
+       devnode->dev.release = cec_devnode_release;
+       dev_set_name(&devnode->dev, "cec%d", devnode->minor);
+       device_initialize(&devnode->dev);
+
+       /* Part 2: Initialize and register the character device */
+       cdev_init(&devnode->cdev, &cec_devnode_fops);
+       devnode->cdev.owner = owner;
+       kobject_set_name(&devnode->cdev.kobj, "cec%d", devnode->minor);
+
+       devnode->registered = true;
+       ret = cdev_device_add(&devnode->cdev, &devnode->dev);
+       if (ret) {
+               devnode->registered = false;
+               pr_err("%s: cdev_device_add failed\n", __func__);
+               goto clr_bit;
+       }
+
+       return 0;
+
+clr_bit:
+       mutex_lock(&cec_devnode_lock);
+       clear_bit(devnode->minor, cec_devnode_nums);
+       mutex_unlock(&cec_devnode_lock);
+       return ret;
+}
+
+/*
+ * Unregister a cec device node
+ *
+ * This unregisters the passed device. Future open calls will be met with
+ * errors.
+ *
+ * This function can safely be called if the device node has never been
+ * registered or has already been unregistered.
+ */
+static void cec_devnode_unregister(struct cec_adapter *adap)
+{
+       struct cec_devnode *devnode = &adap->devnode;
+       struct cec_fh *fh;
+
+       mutex_lock(&devnode->lock);
+
+       /* Check if devnode was never registered or already unregistered */
+       if (!devnode->registered || devnode->unregistered) {
+               mutex_unlock(&devnode->lock);
+               return;
+       }
+
+       list_for_each_entry(fh, &devnode->fhs, list)
+               wake_up_interruptible(&fh->wait);
+
+       devnode->registered = false;
+       devnode->unregistered = true;
+       mutex_unlock(&devnode->lock);
+
+       mutex_lock(&adap->lock);
+       __cec_s_phys_addr(adap, CEC_PHYS_ADDR_INVALID, false);
+       __cec_s_log_addrs(adap, NULL, false);
+       mutex_unlock(&adap->lock);
+
+       cdev_device_del(&devnode->cdev, &devnode->dev);
+       put_device(&devnode->dev);
+}
+
+#ifdef CONFIG_DEBUG_FS
+static ssize_t cec_error_inj_write(struct file *file,
+       const char __user *ubuf, size_t count, loff_t *ppos)
+{
+       struct seq_file *sf = file->private_data;
+       struct cec_adapter *adap = sf->private;
+       char *buf;
+       char *line;
+       char *p;
+
+       buf = memdup_user_nul(ubuf, min_t(size_t, PAGE_SIZE, count));
+       if (IS_ERR(buf))
+               return PTR_ERR(buf);
+       p = buf;
+       while (p && *p) {
+               p = skip_spaces(p);
+               line = strsep(&p, "\n");
+               if (!*line || *line == '#')
+                       continue;
+               if (!adap->ops->error_inj_parse_line(adap, line)) {
+                       kfree(buf);
+                       return -EINVAL;
+               }
+       }
+       kfree(buf);
+       return count;
+}
+
+static int cec_error_inj_show(struct seq_file *sf, void *unused)
+{
+       struct cec_adapter *adap = sf->private;
+
+       return adap->ops->error_inj_show(adap, sf);
+}
+
+static int cec_error_inj_open(struct inode *inode, struct file *file)
+{
+       return single_open(file, cec_error_inj_show, inode->i_private);
+}
+
+static const struct file_operations cec_error_inj_fops = {
+       .open = cec_error_inj_open,
+       .write = cec_error_inj_write,
+       .read = seq_read,
+       .llseek = seq_lseek,
+       .release = single_release,
+};
+#endif
+
+struct cec_adapter *cec_allocate_adapter(const struct cec_adap_ops *ops,
+                                        void *priv, const char *name, u32 caps,
+                                        u8 available_las)
+{
+       struct cec_adapter *adap;
+       int res;
+
+#ifndef CONFIG_MEDIA_CEC_RC
+       caps &= ~CEC_CAP_RC;
+#endif
+
+       if (WARN_ON(!caps))
+               return ERR_PTR(-EINVAL);
+       if (WARN_ON(!ops))
+               return ERR_PTR(-EINVAL);
+       if (WARN_ON(!available_las || available_las > CEC_MAX_LOG_ADDRS))
+               return ERR_PTR(-EINVAL);
+       adap = kzalloc(sizeof(*adap), GFP_KERNEL);
+       if (!adap)
+               return ERR_PTR(-ENOMEM);
+       strscpy(adap->name, name, sizeof(adap->name));
+       adap->phys_addr = CEC_PHYS_ADDR_INVALID;
+       adap->cec_pin_is_high = true;
+       adap->log_addrs.cec_version = CEC_OP_CEC_VERSION_2_0;
+       adap->log_addrs.vendor_id = CEC_VENDOR_ID_NONE;
+       adap->capabilities = caps;
+       if (debug_phys_addr)
+               adap->capabilities |= CEC_CAP_PHYS_ADDR;
+       adap->needs_hpd = caps & CEC_CAP_NEEDS_HPD;
+       adap->available_log_addrs = available_las;
+       adap->sequence = 0;
+       adap->ops = ops;
+       adap->priv = priv;
+       memset(adap->phys_addrs, 0xff, sizeof(adap->phys_addrs));
+       mutex_init(&adap->lock);
+       INIT_LIST_HEAD(&adap->transmit_queue);
+       INIT_LIST_HEAD(&adap->wait_queue);
+       init_waitqueue_head(&adap->kthread_waitq);
+
+       /* adap->devnode initialization */
+       INIT_LIST_HEAD(&adap->devnode.fhs);
+       mutex_init(&adap->devnode.lock);
+
+       adap->kthread = kthread_run(cec_thread_func, adap, "cec-%s", name);
+       if (IS_ERR(adap->kthread)) {
+               pr_err("cec-%s: kernel_thread() failed\n", name);
+               res = PTR_ERR(adap->kthread);
+               kfree(adap);
+               return ERR_PTR(res);
+       }
+
+#ifdef CONFIG_MEDIA_CEC_RC
+       if (!(caps & CEC_CAP_RC))
+               return adap;
+
+       /* Prepare the RC input device */
+       adap->rc = rc_allocate_device(RC_DRIVER_SCANCODE);
+       if (!adap->rc) {
+               pr_err("cec-%s: failed to allocate memory for rc_dev\n",
+                      name);
+               kthread_stop(adap->kthread);
+               kfree(adap);
+               return ERR_PTR(-ENOMEM);
+       }
+
+       snprintf(adap->input_phys, sizeof(adap->input_phys),
+                "%s/input0", adap->name);
+
+       adap->rc->device_name = adap->name;
+       adap->rc->input_phys = adap->input_phys;
+       adap->rc->input_id.bustype = BUS_CEC;
+       adap->rc->input_id.vendor = 0;
+       adap->rc->input_id.product = 0;
+       adap->rc->input_id.version = 1;
+       adap->rc->driver_name = CEC_NAME;
+       adap->rc->allowed_protocols = RC_PROTO_BIT_CEC;
+       adap->rc->priv = adap;
+       adap->rc->map_name = RC_MAP_CEC;
+       adap->rc->timeout = MS_TO_NS(550);
+#endif
+       return adap;
+}
+EXPORT_SYMBOL_GPL(cec_allocate_adapter);
+
+int cec_register_adapter(struct cec_adapter *adap,
+                        struct device *parent)
+{
+       int res;
+
+       if (IS_ERR_OR_NULL(adap))
+               return 0;
+
+       if (WARN_ON(!parent))
+               return -EINVAL;
+
+       adap->owner = parent->driver->owner;
+       adap->devnode.dev.parent = parent;
+
+#ifdef CONFIG_MEDIA_CEC_RC
+       if (adap->capabilities & CEC_CAP_RC) {
+               adap->rc->dev.parent = parent;
+               res = rc_register_device(adap->rc);
+
+               if (res) {
+                       pr_err("cec-%s: failed to prepare input device\n",
+                              adap->name);
+                       rc_free_device(adap->rc);
+                       adap->rc = NULL;
+                       return res;
+               }
+       }
+#endif
+
+       res = cec_devnode_register(&adap->devnode, adap->owner);
+       if (res) {
+#ifdef CONFIG_MEDIA_CEC_RC
+               /* Note: rc_unregister also calls rc_free */
+               rc_unregister_device(adap->rc);
+               adap->rc = NULL;
+#endif
+               return res;
+       }
+
+       dev_set_drvdata(&adap->devnode.dev, adap);
+#ifdef CONFIG_DEBUG_FS
+       if (!top_cec_dir)
+               return 0;
+
+       adap->cec_dir = debugfs_create_dir(dev_name(&adap->devnode.dev), top_cec_dir);
+       if (IS_ERR_OR_NULL(adap->cec_dir)) {
+               pr_warn("cec-%s: Failed to create debugfs dir\n", adap->name);
+               return 0;
+       }
+       adap->status_file = debugfs_create_devm_seqfile(&adap->devnode.dev,
+               "status", adap->cec_dir, cec_adap_status);
+       if (IS_ERR_OR_NULL(adap->status_file)) {
+               pr_warn("cec-%s: Failed to create status file\n", adap->name);
+               debugfs_remove_recursive(adap->cec_dir);
+               adap->cec_dir = NULL;
+               return 0;
+       }
+       if (!adap->ops->error_inj_show || !adap->ops->error_inj_parse_line)
+               return 0;
+       adap->error_inj_file = debugfs_create_file("error-inj", 0644,
+                                                  adap->cec_dir, adap,
+                                                  &cec_error_inj_fops);
+       if (IS_ERR_OR_NULL(adap->error_inj_file))
+               pr_warn("cec-%s: Failed to create error-inj file\n",
+                       adap->name);
+#endif
+       return 0;
+}
+EXPORT_SYMBOL_GPL(cec_register_adapter);
+
+void cec_unregister_adapter(struct cec_adapter *adap)
+{
+       if (IS_ERR_OR_NULL(adap))
+               return;
+
+#ifdef CONFIG_MEDIA_CEC_RC
+       /* Note: rc_unregister also calls rc_free */
+       rc_unregister_device(adap->rc);
+       adap->rc = NULL;
+#endif
+       debugfs_remove_recursive(adap->cec_dir);
+#ifdef CONFIG_CEC_NOTIFIER
+       cec_notifier_cec_adap_unregister(adap->notifier, adap);
+#endif
+       cec_devnode_unregister(adap);
+}
+EXPORT_SYMBOL_GPL(cec_unregister_adapter);
+
+void cec_delete_adapter(struct cec_adapter *adap)
+{
+       if (IS_ERR_OR_NULL(adap))
+               return;
+       kthread_stop(adap->kthread);
+       if (adap->kthread_config)
+               kthread_stop(adap->kthread_config);
+       if (adap->ops->adap_free)
+               adap->ops->adap_free(adap);
+#ifdef CONFIG_MEDIA_CEC_RC
+       rc_free_device(adap->rc);
+#endif
+       kfree(adap);
+}
+EXPORT_SYMBOL_GPL(cec_delete_adapter);
+
+/*
+ *     Initialise cec for linux
+ */
+static int __init cec_devnode_init(void)
+{
+       int ret = alloc_chrdev_region(&cec_dev_t, 0, CEC_NUM_DEVICES, CEC_NAME);
+
+       if (ret < 0) {
+               pr_warn("cec: unable to allocate major\n");
+               return ret;
+       }
+
+#ifdef CONFIG_DEBUG_FS
+       top_cec_dir = debugfs_create_dir("cec", NULL);
+       if (IS_ERR_OR_NULL(top_cec_dir)) {
+               pr_warn("cec: Failed to create debugfs cec dir\n");
+               top_cec_dir = NULL;
+       }
+#endif
+
+       ret = bus_register(&cec_bus_type);
+       if (ret < 0) {
+               unregister_chrdev_region(cec_dev_t, CEC_NUM_DEVICES);
+               pr_warn("cec: bus_register failed\n");
+               return -EIO;
+       }
+
+       return 0;
+}
+
+static void __exit cec_devnode_exit(void)
+{
+       debugfs_remove_recursive(top_cec_dir);
+       bus_unregister(&cec_bus_type);
+       unregister_chrdev_region(cec_dev_t, CEC_NUM_DEVICES);
+}
+
+subsys_initcall(cec_devnode_init);
+module_exit(cec_devnode_exit)
+
+MODULE_AUTHOR("Hans Verkuil <hans.verkuil@cisco.com>");
+MODULE_DESCRIPTION("Device node registration for cec drivers");
+MODULE_LICENSE("GPL");
diff --git a/drivers/media/cec/core/cec-notifier.c b/drivers/media/cec/core/cec-notifier.c
new file mode 100644 (file)
index 0000000..e748cd5
--- /dev/null
@@ -0,0 +1,236 @@
+// SPDX-License-Identifier: GPL-2.0-only
+/*
+ * cec-notifier.c - notify CEC drivers of physical address changes
+ *
+ * Copyright 2016 Russell King <rmk+kernel@arm.linux.org.uk>
+ * Copyright 2016-2017 Cisco Systems, Inc. and/or its affiliates. All rights reserved.
+ */
+
+#include <linux/export.h>
+#include <linux/string.h>
+#include <linux/slab.h>
+#include <linux/list.h>
+#include <linux/kref.h>
+#include <linux/of_platform.h>
+
+#include <media/cec.h>
+#include <media/cec-notifier.h>
+#include <drm/drm_edid.h>
+
+struct cec_notifier {
+       struct mutex lock;
+       struct list_head head;
+       struct kref kref;
+       struct device *hdmi_dev;
+       struct cec_connector_info conn_info;
+       const char *port_name;
+       struct cec_adapter *cec_adap;
+
+       u16 phys_addr;
+};
+
+static LIST_HEAD(cec_notifiers);
+static DEFINE_MUTEX(cec_notifiers_lock);
+
+/**
+ * cec_notifier_get_conn - find or create a new cec_notifier for the given
+ * device and connector tuple.
+ * @hdmi_dev: device that sends the events.
+ * @port_name: the connector name from which the event occurs
+ *
+ * If a notifier for device @dev already exists, then increase the refcount
+ * and return that notifier.
+ *
+ * If it doesn't exist, then allocate a new notifier struct and return a
+ * pointer to that new struct.
+ *
+ * Return NULL if the memory could not be allocated.
+ */
+static struct cec_notifier *
+cec_notifier_get_conn(struct device *hdmi_dev, const char *port_name)
+{
+       struct cec_notifier *n;
+
+       mutex_lock(&cec_notifiers_lock);
+       list_for_each_entry(n, &cec_notifiers, head) {
+               if (n->hdmi_dev == hdmi_dev &&
+                   (!port_name ||
+                    (n->port_name && !strcmp(n->port_name, port_name)))) {
+                       kref_get(&n->kref);
+                       mutex_unlock(&cec_notifiers_lock);
+                       return n;
+               }
+       }
+       n = kzalloc(sizeof(*n), GFP_KERNEL);
+       if (!n)
+               goto unlock;
+       n->hdmi_dev = hdmi_dev;
+       if (port_name) {
+               n->port_name = kstrdup(port_name, GFP_KERNEL);
+               if (!n->port_name) {
+                       kfree(n);
+                       n = NULL;
+                       goto unlock;
+               }
+       }
+       n->phys_addr = CEC_PHYS_ADDR_INVALID;
+
+       mutex_init(&n->lock);
+       kref_init(&n->kref);
+       list_add_tail(&n->head, &cec_notifiers);
+unlock:
+       mutex_unlock(&cec_notifiers_lock);
+       return n;
+}
+
+static void cec_notifier_release(struct kref *kref)
+{
+       struct cec_notifier *n =
+               container_of(kref, struct cec_notifier, kref);
+
+       list_del(&n->head);
+       kfree(n->port_name);
+       kfree(n);
+}
+
+static void cec_notifier_put(struct cec_notifier *n)
+{
+       mutex_lock(&cec_notifiers_lock);
+       kref_put(&n->kref, cec_notifier_release);
+       mutex_unlock(&cec_notifiers_lock);
+}
+
+struct cec_notifier *
+cec_notifier_conn_register(struct device *hdmi_dev, const char *port_name,
+                          const struct cec_connector_info *conn_info)
+{
+       struct cec_notifier *n = cec_notifier_get_conn(hdmi_dev, port_name);
+
+       if (!n)
+               return n;
+
+       mutex_lock(&n->lock);
+       n->phys_addr = CEC_PHYS_ADDR_INVALID;
+       if (conn_info)
+               n->conn_info = *conn_info;
+       else
+               memset(&n->conn_info, 0, sizeof(n->conn_info));
+       if (n->cec_adap) {
+               cec_phys_addr_invalidate(n->cec_adap);
+               cec_s_conn_info(n->cec_adap, conn_info);
+       }
+       mutex_unlock(&n->lock);
+       return n;
+}
+EXPORT_SYMBOL_GPL(cec_notifier_conn_register);
+
+void cec_notifier_conn_unregister(struct cec_notifier *n)
+{
+       if (!n)
+               return;
+
+       mutex_lock(&n->lock);
+       memset(&n->conn_info, 0, sizeof(n->conn_info));
+       n->phys_addr = CEC_PHYS_ADDR_INVALID;
+       if (n->cec_adap) {
+               cec_phys_addr_invalidate(n->cec_adap);
+               cec_s_conn_info(n->cec_adap, NULL);
+       }
+       mutex_unlock(&n->lock);
+       cec_notifier_put(n);
+}
+EXPORT_SYMBOL_GPL(cec_notifier_conn_unregister);
+
+struct cec_notifier *
+cec_notifier_cec_adap_register(struct device *hdmi_dev, const char *port_name,
+                              struct cec_adapter *adap)
+{
+       struct cec_notifier *n;
+
+       if (WARN_ON(!adap))
+               return NULL;
+
+       n = cec_notifier_get_conn(hdmi_dev, port_name);
+       if (!n)
+               return n;
+
+       mutex_lock(&n->lock);
+       n->cec_adap = adap;
+       adap->conn_info = n->conn_info;
+       adap->notifier = n;
+       cec_s_phys_addr(adap, n->phys_addr, false);
+       mutex_unlock(&n->lock);
+       return n;
+}
+EXPORT_SYMBOL_GPL(cec_notifier_cec_adap_register);
+
+void cec_notifier_cec_adap_unregister(struct cec_notifier *n,
+                                     struct cec_adapter *adap)
+{
+       if (!n)
+               return;
+
+       mutex_lock(&n->lock);
+       adap->notifier = NULL;
+       n->cec_adap = NULL;
+       mutex_unlock(&n->lock);
+       cec_notifier_put(n);
+}
+EXPORT_SYMBOL_GPL(cec_notifier_cec_adap_unregister);
+
+void cec_notifier_set_phys_addr(struct cec_notifier *n, u16 pa)
+{
+       if (n == NULL)
+               return;
+
+       mutex_lock(&n->lock);
+       n->phys_addr = pa;
+       if (n->cec_adap)
+               cec_s_phys_addr(n->cec_adap, n->phys_addr, false);
+       mutex_unlock(&n->lock);
+}
+EXPORT_SYMBOL_GPL(cec_notifier_set_phys_addr);
+
+void cec_notifier_set_phys_addr_from_edid(struct cec_notifier *n,
+                                         const struct edid *edid)
+{
+       u16 pa = CEC_PHYS_ADDR_INVALID;
+
+       if (n == NULL)
+               return;
+
+       if (edid && edid->extensions)
+               pa = cec_get_edid_phys_addr((const u8 *)edid,
+                               EDID_LENGTH * (edid->extensions + 1), NULL);
+       cec_notifier_set_phys_addr(n, pa);
+}
+EXPORT_SYMBOL_GPL(cec_notifier_set_phys_addr_from_edid);
+
+struct device *cec_notifier_parse_hdmi_phandle(struct device *dev)
+{
+       struct platform_device *hdmi_pdev;
+       struct device *hdmi_dev = NULL;
+       struct device_node *np;
+
+       np = of_parse_phandle(dev->of_node, "hdmi-phandle", 0);
+
+       if (!np) {
+               dev_err(dev, "Failed to find HDMI node in device tree\n");
+               return ERR_PTR(-ENODEV);
+       }
+       hdmi_pdev = of_find_device_by_node(np);
+       of_node_put(np);
+       if (hdmi_pdev) {
+               hdmi_dev = &hdmi_pdev->dev;
+               /*
+                * Note that the device struct is only used as a key into the
+                * cec_notifiers list, it is never actually accessed.
+                * So we decrement the reference here so we don't leak
+                * memory.
+                */
+               put_device(hdmi_dev);
+               return hdmi_dev;
+       }
+       return ERR_PTR(-EPROBE_DEFER);
+}
+EXPORT_SYMBOL_GPL(cec_notifier_parse_hdmi_phandle);
diff --git a/drivers/media/cec/core/cec-pin-error-inj.c b/drivers/media/cec/core/cec-pin-error-inj.c
new file mode 100644 (file)
index 0000000..c0088d3
--- /dev/null
@@ -0,0 +1,345 @@
+// SPDX-License-Identifier: GPL-2.0-only
+/*
+ * Copyright 2017 Cisco Systems, Inc. and/or its affiliates. All rights reserved.
+ */
+
+#include <linux/delay.h>
+#include <linux/slab.h>
+#include <linux/sched/types.h>
+
+#include <media/cec-pin.h>
+#include "cec-pin-priv.h"
+
+struct cec_error_inj_cmd {
+       unsigned int mode_offset;
+       int arg_idx;
+       const char *cmd;
+};
+
+static const struct cec_error_inj_cmd cec_error_inj_cmds[] = {
+       { CEC_ERROR_INJ_RX_NACK_OFFSET, -1, "rx-nack" },
+       { CEC_ERROR_INJ_RX_LOW_DRIVE_OFFSET,
+         CEC_ERROR_INJ_RX_LOW_DRIVE_ARG_IDX, "rx-low-drive" },
+       { CEC_ERROR_INJ_RX_ADD_BYTE_OFFSET, -1, "rx-add-byte" },
+       { CEC_ERROR_INJ_RX_REMOVE_BYTE_OFFSET, -1, "rx-remove-byte" },
+       { CEC_ERROR_INJ_RX_ARB_LOST_OFFSET,
+         CEC_ERROR_INJ_RX_ARB_LOST_ARG_IDX, "rx-arb-lost" },
+
+       { CEC_ERROR_INJ_TX_NO_EOM_OFFSET, -1, "tx-no-eom" },
+       { CEC_ERROR_INJ_TX_EARLY_EOM_OFFSET, -1, "tx-early-eom" },
+       { CEC_ERROR_INJ_TX_ADD_BYTES_OFFSET,
+         CEC_ERROR_INJ_TX_ADD_BYTES_ARG_IDX, "tx-add-bytes" },
+       { CEC_ERROR_INJ_TX_REMOVE_BYTE_OFFSET, -1, "tx-remove-byte" },
+       { CEC_ERROR_INJ_TX_SHORT_BIT_OFFSET,
+         CEC_ERROR_INJ_TX_SHORT_BIT_ARG_IDX, "tx-short-bit" },
+       { CEC_ERROR_INJ_TX_LONG_BIT_OFFSET,
+         CEC_ERROR_INJ_TX_LONG_BIT_ARG_IDX, "tx-long-bit" },
+       { CEC_ERROR_INJ_TX_CUSTOM_BIT_OFFSET,
+         CEC_ERROR_INJ_TX_CUSTOM_BIT_ARG_IDX, "tx-custom-bit" },
+       { CEC_ERROR_INJ_TX_SHORT_START_OFFSET, -1, "tx-short-start" },
+       { CEC_ERROR_INJ_TX_LONG_START_OFFSET, -1, "tx-long-start" },
+       { CEC_ERROR_INJ_TX_CUSTOM_START_OFFSET, -1, "tx-custom-start" },
+       { CEC_ERROR_INJ_TX_LAST_BIT_OFFSET,
+         CEC_ERROR_INJ_TX_LAST_BIT_ARG_IDX, "tx-last-bit" },
+       { CEC_ERROR_INJ_TX_LOW_DRIVE_OFFSET,
+         CEC_ERROR_INJ_TX_LOW_DRIVE_ARG_IDX, "tx-low-drive" },
+       { 0, -1, NULL }
+};
+
+u16 cec_pin_rx_error_inj(struct cec_pin *pin)
+{
+       u16 cmd = CEC_ERROR_INJ_OP_ANY;
+
+       /* Only when 18 bits have been received do we have a valid cmd */
+       if (!(pin->error_inj[cmd] & CEC_ERROR_INJ_RX_MASK) &&
+           pin->rx_bit >= 18)
+               cmd = pin->rx_msg.msg[1];
+       return (pin->error_inj[cmd] & CEC_ERROR_INJ_RX_MASK) ? cmd :
+               CEC_ERROR_INJ_OP_ANY;
+}
+
+u16 cec_pin_tx_error_inj(struct cec_pin *pin)
+{
+       u16 cmd = CEC_ERROR_INJ_OP_ANY;
+
+       if (!(pin->error_inj[cmd] & CEC_ERROR_INJ_TX_MASK) &&
+           pin->tx_msg.len > 1)
+               cmd = pin->tx_msg.msg[1];
+       return (pin->error_inj[cmd] & CEC_ERROR_INJ_TX_MASK) ? cmd :
+               CEC_ERROR_INJ_OP_ANY;
+}
+
+bool cec_pin_error_inj_parse_line(struct cec_adapter *adap, char *line)
+{
+       static const char *delims = " \t\r";
+       struct cec_pin *pin = adap->pin;
+       unsigned int i;
+       bool has_pos = false;
+       char *p = line;
+       char *token;
+       char *comma;
+       u64 *error;
+       u8 *args;
+       bool has_op;
+       u8 op;
+       u8 mode;
+       u8 pos;
+
+       p = skip_spaces(p);
+       token = strsep(&p, delims);
+       if (!strcmp(token, "clear")) {
+               memset(pin->error_inj, 0, sizeof(pin->error_inj));
+               pin->rx_toggle = pin->tx_toggle = false;
+               pin->tx_ignore_nack_until_eom = false;
+               pin->tx_custom_pulse = false;
+               pin->tx_custom_low_usecs = CEC_TIM_CUSTOM_DEFAULT;
+               pin->tx_custom_high_usecs = CEC_TIM_CUSTOM_DEFAULT;
+               return true;
+       }
+       if (!strcmp(token, "rx-clear")) {
+               for (i = 0; i <= CEC_ERROR_INJ_OP_ANY; i++)
+                       pin->error_inj[i] &= ~CEC_ERROR_INJ_RX_MASK;
+               pin->rx_toggle = false;
+               return true;
+       }
+       if (!strcmp(token, "tx-clear")) {
+               for (i = 0; i <= CEC_ERROR_INJ_OP_ANY; i++)
+                       pin->error_inj[i] &= ~CEC_ERROR_INJ_TX_MASK;
+               pin->tx_toggle = false;
+               pin->tx_ignore_nack_until_eom = false;
+               pin->tx_custom_pulse = false;
+               pin->tx_custom_low_usecs = CEC_TIM_CUSTOM_DEFAULT;
+               pin->tx_custom_high_usecs = CEC_TIM_CUSTOM_DEFAULT;
+               return true;
+       }
+       if (!strcmp(token, "tx-ignore-nack-until-eom")) {
+               pin->tx_ignore_nack_until_eom = true;
+               return true;
+       }
+       if (!strcmp(token, "tx-custom-pulse")) {
+               pin->tx_custom_pulse = true;
+               cec_pin_start_timer(pin);
+               return true;
+       }
+       if (!p)
+               return false;
+
+       p = skip_spaces(p);
+       if (!strcmp(token, "tx-custom-low-usecs")) {
+               u32 usecs;
+
+               if (kstrtou32(p, 0, &usecs) || usecs > 10000000)
+                       return false;
+               pin->tx_custom_low_usecs = usecs;
+               return true;
+       }
+       if (!strcmp(token, "tx-custom-high-usecs")) {
+               u32 usecs;
+
+               if (kstrtou32(p, 0, &usecs) || usecs > 10000000)
+                       return false;
+               pin->tx_custom_high_usecs = usecs;
+               return true;
+       }
+
+       comma = strchr(token, ',');
+       if (comma)
+               *comma++ = '\0';
+       if (!strcmp(token, "any")) {
+               has_op = false;
+               error = pin->error_inj + CEC_ERROR_INJ_OP_ANY;
+               args = pin->error_inj_args[CEC_ERROR_INJ_OP_ANY];
+       } else if (!kstrtou8(token, 0, &op)) {
+               has_op = true;
+               error = pin->error_inj + op;
+               args = pin->error_inj_args[op];
+       } else {
+               return false;
+       }
+
+       mode = CEC_ERROR_INJ_MODE_ONCE;
+       if (comma) {
+               if (!strcmp(comma, "off"))
+                       mode = CEC_ERROR_INJ_MODE_OFF;
+               else if (!strcmp(comma, "once"))
+                       mode = CEC_ERROR_INJ_MODE_ONCE;
+               else if (!strcmp(comma, "always"))
+                       mode = CEC_ERROR_INJ_MODE_ALWAYS;
+               else if (!strcmp(comma, "toggle"))
+                       mode = CEC_ERROR_INJ_MODE_TOGGLE;
+               else
+                       return false;
+       }
+
+       token = strsep(&p, delims);
+       if (p) {
+               p = skip_spaces(p);
+               has_pos = !kstrtou8(p, 0, &pos);
+       }
+
+       if (!strcmp(token, "clear")) {
+               *error = 0;
+               return true;
+       }
+       if (!strcmp(token, "rx-clear")) {
+               *error &= ~CEC_ERROR_INJ_RX_MASK;
+               return true;
+       }
+       if (!strcmp(token, "tx-clear")) {
+               *error &= ~CEC_ERROR_INJ_TX_MASK;
+               return true;
+       }
+
+       for (i = 0; cec_error_inj_cmds[i].cmd; i++) {
+               const char *cmd = cec_error_inj_cmds[i].cmd;
+               unsigned int mode_offset;
+               u64 mode_mask;
+               int arg_idx;
+               bool is_bit_pos = true;
+
+               if (strcmp(token, cmd))
+                       continue;
+
+               mode_offset = cec_error_inj_cmds[i].mode_offset;
+               mode_mask = CEC_ERROR_INJ_MODE_MASK << mode_offset;
+               arg_idx = cec_error_inj_cmds[i].arg_idx;
+
+               if (mode_offset == CEC_ERROR_INJ_RX_ARB_LOST_OFFSET) {
+                       if (has_op)
+                               return false;
+                       if (!has_pos)
+                               pos = 0x0f;
+                       is_bit_pos = false;
+               } else if (mode_offset == CEC_ERROR_INJ_TX_ADD_BYTES_OFFSET) {
+                       if (!has_pos || !pos)
+                               return false;
+                       is_bit_pos = false;
+               }
+
+               if (arg_idx >= 0 && is_bit_pos) {
+                       if (!has_pos || pos >= 160)
+                               return false;
+                       if (has_op && pos < 10 + 8)
+                               return false;
+                       /* Invalid bit position may not be the Ack bit */
+                       if ((mode_offset == CEC_ERROR_INJ_TX_SHORT_BIT_OFFSET ||
+                            mode_offset == CEC_ERROR_INJ_TX_LONG_BIT_OFFSET ||
+                            mode_offset == CEC_ERROR_INJ_TX_CUSTOM_BIT_OFFSET) &&
+                           (pos % 10) == 9)
+                               return false;
+               }
+               *error &= ~mode_mask;
+               *error |= (u64)mode << mode_offset;
+               if (arg_idx >= 0)
+                       args[arg_idx] = pos;
+               return true;
+       }
+       return false;
+}
+
+static void cec_pin_show_cmd(struct seq_file *sf, u32 cmd, u8 mode)
+{
+       if (cmd == CEC_ERROR_INJ_OP_ANY)
+               seq_puts(sf, "any,");
+       else
+               seq_printf(sf, "0x%02x,", cmd);
+       switch (mode) {
+       case CEC_ERROR_INJ_MODE_ONCE:
+               seq_puts(sf, "once ");
+               break;
+       case CEC_ERROR_INJ_MODE_ALWAYS:
+               seq_puts(sf, "always ");
+               break;
+       case CEC_ERROR_INJ_MODE_TOGGLE:
+               seq_puts(sf, "toggle ");
+               break;
+       default:
+               seq_puts(sf, "off ");
+               break;
+       }
+}
+
+int cec_pin_error_inj_show(struct cec_adapter *adap, struct seq_file *sf)
+{
+       struct cec_pin *pin = adap->pin;
+       unsigned int i, j;
+
+       seq_puts(sf, "# Clear error injections:\n");
+       seq_puts(sf, "#   clear          clear all rx and tx error injections\n");
+       seq_puts(sf, "#   rx-clear       clear all rx error injections\n");
+       seq_puts(sf, "#   tx-clear       clear all tx error injections\n");
+       seq_puts(sf, "#   <op> clear     clear all rx and tx error injections for <op>\n");
+       seq_puts(sf, "#   <op> rx-clear  clear all rx error injections for <op>\n");
+       seq_puts(sf, "#   <op> tx-clear  clear all tx error injections for <op>\n");
+       seq_puts(sf, "#\n");
+       seq_puts(sf, "# RX error injection:\n");
+       seq_puts(sf, "#   <op>[,<mode>] rx-nack              NACK the message instead of sending an ACK\n");
+       seq_puts(sf, "#   <op>[,<mode>] rx-low-drive <bit>   force a low-drive condition at this bit position\n");
+       seq_puts(sf, "#   <op>[,<mode>] rx-add-byte          add a spurious byte to the received CEC message\n");
+       seq_puts(sf, "#   <op>[,<mode>] rx-remove-byte       remove the last byte from the received CEC message\n");
+       seq_puts(sf, "#   <op>[,<mode>] rx-arb-lost <poll>   generate a POLL message to trigger an arbitration lost\n");
+       seq_puts(sf, "#\n");
+       seq_puts(sf, "# TX error injection settings:\n");
+       seq_puts(sf, "#   tx-ignore-nack-until-eom           ignore early NACKs until EOM\n");
+       seq_puts(sf, "#   tx-custom-low-usecs <usecs>        define the 'low' time for the custom pulse\n");
+       seq_puts(sf, "#   tx-custom-high-usecs <usecs>       define the 'high' time for the custom pulse\n");
+       seq_puts(sf, "#   tx-custom-pulse                    transmit the custom pulse once the bus is idle\n");
+       seq_puts(sf, "#\n");
+       seq_puts(sf, "# TX error injection:\n");
+       seq_puts(sf, "#   <op>[,<mode>] tx-no-eom            don't set the EOM bit\n");
+       seq_puts(sf, "#   <op>[,<mode>] tx-early-eom         set the EOM bit one byte too soon\n");
+       seq_puts(sf, "#   <op>[,<mode>] tx-add-bytes <num>   append <num> (1-255) spurious bytes to the message\n");
+       seq_puts(sf, "#   <op>[,<mode>] tx-remove-byte       drop the last byte from the message\n");
+       seq_puts(sf, "#   <op>[,<mode>] tx-short-bit <bit>   make this bit shorter than allowed\n");
+       seq_puts(sf, "#   <op>[,<mode>] tx-long-bit <bit>    make this bit longer than allowed\n");
+       seq_puts(sf, "#   <op>[,<mode>] tx-custom-bit <bit>  send the custom pulse instead of this bit\n");
+       seq_puts(sf, "#   <op>[,<mode>] tx-short-start       send a start pulse that's too short\n");
+       seq_puts(sf, "#   <op>[,<mode>] tx-long-start        send a start pulse that's too long\n");
+       seq_puts(sf, "#   <op>[,<mode>] tx-custom-start      send the custom pulse instead of the start pulse\n");
+       seq_puts(sf, "#   <op>[,<mode>] tx-last-bit <bit>    stop sending after this bit\n");
+       seq_puts(sf, "#   <op>[,<mode>] tx-low-drive <bit>   force a low-drive condition at this bit position\n");
+       seq_puts(sf, "#\n");
+       seq_puts(sf, "# <op>       CEC message opcode (0-255) or 'any'\n");
+       seq_puts(sf, "# <mode>     'once' (default), 'always', 'toggle' or 'off'\n");
+       seq_puts(sf, "# <bit>      CEC message bit (0-159)\n");
+       seq_puts(sf, "#            10 bits per 'byte': bits 0-7: data, bit 8: EOM, bit 9: ACK\n");
+       seq_puts(sf, "# <poll>     CEC poll message used to test arbitration lost (0x00-0xff, default 0x0f)\n");
+       seq_puts(sf, "# <usecs>    microseconds (0-10000000, default 1000)\n");
+
+       seq_puts(sf, "\nclear\n");
+
+       for (i = 0; i < ARRAY_SIZE(pin->error_inj); i++) {
+               u64 e = pin->error_inj[i];
+
+               for (j = 0; cec_error_inj_cmds[j].cmd; j++) {
+                       const char *cmd = cec_error_inj_cmds[j].cmd;
+                       unsigned int mode;
+                       unsigned int mode_offset;
+                       int arg_idx;
+
+                       mode_offset = cec_error_inj_cmds[j].mode_offset;
+                       arg_idx = cec_error_inj_cmds[j].arg_idx;
+                       mode = (e >> mode_offset) & CEC_ERROR_INJ_MODE_MASK;
+                       if (!mode)
+                               continue;
+                       cec_pin_show_cmd(sf, i, mode);
+                       seq_puts(sf, cmd);
+                       if (arg_idx >= 0)
+                               seq_printf(sf, " %u",
+                                          pin->error_inj_args[i][arg_idx]);
+                       seq_puts(sf, "\n");
+               }
+       }
+
+       if (pin->tx_ignore_nack_until_eom)
+               seq_puts(sf, "tx-ignore-nack-until-eom\n");
+       if (pin->tx_custom_pulse)
+               seq_puts(sf, "tx-custom-pulse\n");
+       if (pin->tx_custom_low_usecs != CEC_TIM_CUSTOM_DEFAULT)
+               seq_printf(sf, "tx-custom-low-usecs %u\n",
+                          pin->tx_custom_low_usecs);
+       if (pin->tx_custom_high_usecs != CEC_TIM_CUSTOM_DEFAULT)
+               seq_printf(sf, "tx-custom-high-usecs %u\n",
+                          pin->tx_custom_high_usecs);
+       return 0;
+}
diff --git a/drivers/media/cec/core/cec-pin-priv.h b/drivers/media/cec/core/cec-pin-priv.h
new file mode 100644 (file)
index 0000000..f423db8
--- /dev/null
@@ -0,0 +1,241 @@
+/* SPDX-License-Identifier: GPL-2.0-only */
+/*
+ * cec-pin-priv.h - internal cec-pin header
+ *
+ * Copyright 2017 Cisco Systems, Inc. and/or its affiliates. All rights reserved.
+ */
+
+#ifndef LINUX_CEC_PIN_PRIV_H
+#define LINUX_CEC_PIN_PRIV_H
+
+#include <linux/types.h>
+#include <linux/atomic.h>
+#include <media/cec-pin.h>
+
+enum cec_pin_state {
+       /* CEC is off */
+       CEC_ST_OFF,
+       /* CEC is idle, waiting for Rx or Tx */
+       CEC_ST_IDLE,
+
+       /* Tx states */
+
+       /* Pending Tx, waiting for Signal Free Time to expire */
+       CEC_ST_TX_WAIT,
+       /* Low-drive was detected, wait for bus to go high */
+       CEC_ST_TX_WAIT_FOR_HIGH,
+       /* Drive CEC low for the start bit */
+       CEC_ST_TX_START_BIT_LOW,
+       /* Drive CEC high for the start bit */
+       CEC_ST_TX_START_BIT_HIGH,
+       /* Generate a start bit period that is too short */
+       CEC_ST_TX_START_BIT_HIGH_SHORT,
+       /* Generate a start bit period that is too long */
+       CEC_ST_TX_START_BIT_HIGH_LONG,
+       /* Drive CEC low for the start bit using the custom timing */
+       CEC_ST_TX_START_BIT_LOW_CUSTOM,
+       /* Drive CEC high for the start bit using the custom timing */
+       CEC_ST_TX_START_BIT_HIGH_CUSTOM,
+       /* Drive CEC low for the 0 bit */
+       CEC_ST_TX_DATA_BIT_0_LOW,
+       /* Drive CEC high for the 0 bit */
+       CEC_ST_TX_DATA_BIT_0_HIGH,
+       /* Generate a bit period that is too short */
+       CEC_ST_TX_DATA_BIT_0_HIGH_SHORT,
+       /* Generate a bit period that is too long */
+       CEC_ST_TX_DATA_BIT_0_HIGH_LONG,
+       /* Drive CEC low for the 1 bit */
+       CEC_ST_TX_DATA_BIT_1_LOW,
+       /* Drive CEC high for the 1 bit */
+       CEC_ST_TX_DATA_BIT_1_HIGH,
+       /* Generate a bit period that is too short */
+       CEC_ST_TX_DATA_BIT_1_HIGH_SHORT,
+       /* Generate a bit period that is too long */
+       CEC_ST_TX_DATA_BIT_1_HIGH_LONG,
+       /*
+        * Wait for start of sample time to check for Ack bit or first
+        * four initiator bits to check for Arbitration Lost.
+        */
+       CEC_ST_TX_DATA_BIT_1_HIGH_PRE_SAMPLE,
+       /* Wait for end of bit period after sampling */
+       CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE,
+       /* Generate a bit period that is too short */
+       CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE_SHORT,
+       /* Generate a bit period that is too long */
+       CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE_LONG,
+       /* Drive CEC low for a data bit using the custom timing */
+       CEC_ST_TX_DATA_BIT_LOW_CUSTOM,
+       /* Drive CEC high for a data bit using the custom timing */
+       CEC_ST_TX_DATA_BIT_HIGH_CUSTOM,
+       /* Drive CEC low for a standalone pulse using the custom timing */
+       CEC_ST_TX_PULSE_LOW_CUSTOM,
+       /* Drive CEC high for a standalone pulse using the custom timing */
+       CEC_ST_TX_PULSE_HIGH_CUSTOM,
+       /* Start low drive */
+       CEC_ST_TX_LOW_DRIVE,
+
+       /* Rx states */
+
+       /* Start bit low detected */
+       CEC_ST_RX_START_BIT_LOW,
+       /* Start bit high detected */
+       CEC_ST_RX_START_BIT_HIGH,
+       /* Wait for bit sample time */
+       CEC_ST_RX_DATA_SAMPLE,
+       /* Wait for earliest end of bit period after sampling */
+       CEC_ST_RX_DATA_POST_SAMPLE,
+       /* Wait for CEC to go low (i.e. end of bit period) */
+       CEC_ST_RX_DATA_WAIT_FOR_LOW,
+       /* Drive CEC low to send 0 Ack bit */
+       CEC_ST_RX_ACK_LOW,
+       /* End of 0 Ack time, wait for earliest end of bit period */
+       CEC_ST_RX_ACK_LOW_POST,
+       /* Wait for CEC to go high (i.e. end of bit period */
+       CEC_ST_RX_ACK_HIGH_POST,
+       /* Wait for earliest end of bit period and end of message */
+       CEC_ST_RX_ACK_FINISH,
+       /* Start low drive */
+       CEC_ST_RX_LOW_DRIVE,
+
+       /* Monitor pin using interrupts */
+       CEC_ST_RX_IRQ,
+
+       /* Total number of pin states */
+       CEC_PIN_STATES
+};
+
+/* Error Injection */
+
+/* Error injection modes */
+#define CEC_ERROR_INJ_MODE_OFF                         0
+#define CEC_ERROR_INJ_MODE_ONCE                                1
+#define CEC_ERROR_INJ_MODE_ALWAYS                      2
+#define CEC_ERROR_INJ_MODE_TOGGLE                      3
+#define CEC_ERROR_INJ_MODE_MASK                                3ULL
+
+/* Receive error injection options */
+#define CEC_ERROR_INJ_RX_NACK_OFFSET                   0
+#define CEC_ERROR_INJ_RX_LOW_DRIVE_OFFSET              2
+#define CEC_ERROR_INJ_RX_ADD_BYTE_OFFSET               4
+#define CEC_ERROR_INJ_RX_REMOVE_BYTE_OFFSET            6
+#define CEC_ERROR_INJ_RX_ARB_LOST_OFFSET               8
+#define CEC_ERROR_INJ_RX_MASK                          0xffffULL
+
+/* Transmit error injection options */
+#define CEC_ERROR_INJ_TX_NO_EOM_OFFSET                 16
+#define CEC_ERROR_INJ_TX_EARLY_EOM_OFFSET              18
+#define CEC_ERROR_INJ_TX_SHORT_BIT_OFFSET              20
+#define CEC_ERROR_INJ_TX_LONG_BIT_OFFSET               22
+#define CEC_ERROR_INJ_TX_CUSTOM_BIT_OFFSET             24
+#define CEC_ERROR_INJ_TX_SHORT_START_OFFSET            26
+#define CEC_ERROR_INJ_TX_LONG_START_OFFSET             28
+#define CEC_ERROR_INJ_TX_CUSTOM_START_OFFSET           30
+#define CEC_ERROR_INJ_TX_LAST_BIT_OFFSET               32
+#define CEC_ERROR_INJ_TX_ADD_BYTES_OFFSET              34
+#define CEC_ERROR_INJ_TX_REMOVE_BYTE_OFFSET            36
+#define CEC_ERROR_INJ_TX_LOW_DRIVE_OFFSET              38
+#define CEC_ERROR_INJ_TX_MASK                          0xffffffffffff0000ULL
+
+#define CEC_ERROR_INJ_RX_LOW_DRIVE_ARG_IDX             0
+#define CEC_ERROR_INJ_RX_ARB_LOST_ARG_IDX              1
+
+#define CEC_ERROR_INJ_TX_ADD_BYTES_ARG_IDX             2
+#define CEC_ERROR_INJ_TX_SHORT_BIT_ARG_IDX             3
+#define CEC_ERROR_INJ_TX_LONG_BIT_ARG_IDX              4
+#define CEC_ERROR_INJ_TX_CUSTOM_BIT_ARG_IDX            5
+#define CEC_ERROR_INJ_TX_LAST_BIT_ARG_IDX              6
+#define CEC_ERROR_INJ_TX_LOW_DRIVE_ARG_IDX             7
+#define CEC_ERROR_INJ_NUM_ARGS                         8
+
+/* Special CEC op values */
+#define CEC_ERROR_INJ_OP_ANY                           0x00000100
+
+/* The default for the low/high time of the custom pulse */
+#define CEC_TIM_CUSTOM_DEFAULT                         1000
+
+#define CEC_NUM_PIN_EVENTS                             128
+#define CEC_PIN_EVENT_FL_IS_HIGH                       (1 << 0)
+#define CEC_PIN_EVENT_FL_DROPPED                       (1 << 1)
+
+#define CEC_PIN_IRQ_UNCHANGED  0
+#define CEC_PIN_IRQ_DISABLE    1
+#define CEC_PIN_IRQ_ENABLE     2
+
+struct cec_pin {
+       struct cec_adapter              *adap;
+       const struct cec_pin_ops        *ops;
+       struct task_struct              *kthread;
+       wait_queue_head_t               kthread_waitq;
+       struct hrtimer                  timer;
+       ktime_t                         ts;
+       unsigned int                    wait_usecs;
+       u16                             la_mask;
+       bool                            enabled;
+       bool                            monitor_all;
+       bool                            rx_eom;
+       bool                            enable_irq_failed;
+       enum cec_pin_state              state;
+       struct cec_msg                  tx_msg;
+       u32                             tx_bit;
+       bool                            tx_nacked;
+       u32                             tx_signal_free_time;
+       bool                            tx_toggle;
+       struct cec_msg                  rx_msg;
+       u32                             rx_bit;
+       bool                            rx_toggle;
+       u32                             rx_start_bit_low_too_short_cnt;
+       u64                             rx_start_bit_low_too_short_ts;
+       u32                             rx_start_bit_low_too_short_delta;
+       u32                             rx_start_bit_too_short_cnt;
+       u64                             rx_start_bit_too_short_ts;
+       u32                             rx_start_bit_too_short_delta;
+       u32                             rx_start_bit_too_long_cnt;
+       u32                             rx_data_bit_too_short_cnt;
+       u64                             rx_data_bit_too_short_ts;
+       u32                             rx_data_bit_too_short_delta;
+       u32                             rx_data_bit_too_long_cnt;
+       u32                             rx_low_drive_cnt;
+
+       struct cec_msg                  work_rx_msg;
+       u8                              work_tx_status;
+       ktime_t                         work_tx_ts;
+       atomic_t                        work_irq_change;
+       atomic_t                        work_pin_num_events;
+       unsigned int                    work_pin_events_wr;
+       unsigned int                    work_pin_events_rd;
+       ktime_t                         work_pin_ts[CEC_NUM_PIN_EVENTS];
+       u8                              work_pin_events[CEC_NUM_PIN_EVENTS];
+       bool                            work_pin_events_dropped;
+       u32                             work_pin_events_dropped_cnt;
+       ktime_t                         timer_ts;
+       u32                             timer_cnt;
+       u32                             timer_100ms_overruns;
+       u32                             timer_300ms_overruns;
+       u32                             timer_max_overrun;
+       u32                             timer_sum_overrun;
+
+       u32                             tx_custom_low_usecs;
+       u32                             tx_custom_high_usecs;
+       bool                            tx_ignore_nack_until_eom;
+       bool                            tx_custom_pulse;
+       bool                            tx_generated_poll;
+       bool                            tx_post_eom;
+       u8                              tx_extra_bytes;
+       u32                             tx_low_drive_cnt;
+#ifdef CONFIG_CEC_PIN_ERROR_INJ
+       u64                             error_inj[CEC_ERROR_INJ_OP_ANY + 1];
+       u8                              error_inj_args[CEC_ERROR_INJ_OP_ANY + 1][CEC_ERROR_INJ_NUM_ARGS];
+#endif
+};
+
+void cec_pin_start_timer(struct cec_pin *pin);
+
+#ifdef CONFIG_CEC_PIN_ERROR_INJ
+bool cec_pin_error_inj_parse_line(struct cec_adapter *adap, char *line);
+int cec_pin_error_inj_show(struct cec_adapter *adap, struct seq_file *sf);
+
+u16 cec_pin_rx_error_inj(struct cec_pin *pin);
+u16 cec_pin_tx_error_inj(struct cec_pin *pin);
+#endif
+
+#endif
diff --git a/drivers/media/cec/core/cec-pin.c b/drivers/media/cec/core/cec-pin.c
new file mode 100644 (file)
index 0000000..660fe11
--- /dev/null
@@ -0,0 +1,1345 @@
+// SPDX-License-Identifier: GPL-2.0-only
+/*
+ * Copyright 2017 Cisco Systems, Inc. and/or its affiliates. All rights reserved.
+ */
+
+#include <linux/delay.h>
+#include <linux/slab.h>
+#include <linux/sched/types.h>
+
+#include <media/cec-pin.h>
+#include "cec-pin-priv.h"
+
+/* All timings are in microseconds */
+
+/* start bit timings */
+#define CEC_TIM_START_BIT_LOW          3700
+#define CEC_TIM_START_BIT_LOW_MIN      3500
+#define CEC_TIM_START_BIT_LOW_MAX      3900
+#define CEC_TIM_START_BIT_TOTAL                4500
+#define CEC_TIM_START_BIT_TOTAL_MIN    4300
+#define CEC_TIM_START_BIT_TOTAL_MAX    4700
+
+/* data bit timings */
+#define CEC_TIM_DATA_BIT_0_LOW         1500
+#define CEC_TIM_DATA_BIT_0_LOW_MIN     1300
+#define CEC_TIM_DATA_BIT_0_LOW_MAX     1700
+#define CEC_TIM_DATA_BIT_1_LOW         600
+#define CEC_TIM_DATA_BIT_1_LOW_MIN     400
+#define CEC_TIM_DATA_BIT_1_LOW_MAX     800
+#define CEC_TIM_DATA_BIT_TOTAL         2400
+#define CEC_TIM_DATA_BIT_TOTAL_MIN     2050
+#define CEC_TIM_DATA_BIT_TOTAL_MAX     2750
+/* earliest safe time to sample the bit state */
+#define CEC_TIM_DATA_BIT_SAMPLE                850
+/* earliest time the bit is back to 1 (T7 + 50) */
+#define CEC_TIM_DATA_BIT_HIGH          1750
+
+/* when idle, sample once per millisecond */
+#define CEC_TIM_IDLE_SAMPLE            1000
+/* when processing the start bit, sample twice per millisecond */
+#define CEC_TIM_START_BIT_SAMPLE       500
+/* when polling for a state change, sample once every 50 microseconds */
+#define CEC_TIM_SAMPLE                 50
+
+#define CEC_TIM_LOW_DRIVE_ERROR                (1.5 * CEC_TIM_DATA_BIT_TOTAL)
+
+/*
+ * Total data bit time that is too short/long for a valid bit,
+ * used for error injection.
+ */
+#define CEC_TIM_DATA_BIT_TOTAL_SHORT   1800
+#define CEC_TIM_DATA_BIT_TOTAL_LONG    2900
+
+/*
+ * Total start bit time that is too short/long for a valid bit,
+ * used for error injection.
+ */
+#define CEC_TIM_START_BIT_TOTAL_SHORT  4100
+#define CEC_TIM_START_BIT_TOTAL_LONG   5000
+
+/* Data bits are 0-7, EOM is bit 8 and ACK is bit 9 */
+#define EOM_BIT                                8
+#define ACK_BIT                                9
+
+struct cec_state {
+       const char * const name;
+       unsigned int usecs;
+};
+
+static const struct cec_state states[CEC_PIN_STATES] = {
+       { "Off",                   0 },
+       { "Idle",                  CEC_TIM_IDLE_SAMPLE },
+       { "Tx Wait",               CEC_TIM_SAMPLE },
+       { "Tx Wait for High",      CEC_TIM_IDLE_SAMPLE },
+       { "Tx Start Bit Low",      CEC_TIM_START_BIT_LOW },
+       { "Tx Start Bit High",     CEC_TIM_START_BIT_TOTAL - CEC_TIM_START_BIT_LOW },
+       { "Tx Start Bit High Short", CEC_TIM_START_BIT_TOTAL_SHORT - CEC_TIM_START_BIT_LOW },
+       { "Tx Start Bit High Long", CEC_TIM_START_BIT_TOTAL_LONG - CEC_TIM_START_BIT_LOW },
+       { "Tx Start Bit Low Custom", 0 },
+       { "Tx Start Bit High Custom", 0 },
+       { "Tx Data 0 Low",         CEC_TIM_DATA_BIT_0_LOW },
+       { "Tx Data 0 High",        CEC_TIM_DATA_BIT_TOTAL - CEC_TIM_DATA_BIT_0_LOW },
+       { "Tx Data 0 High Short",  CEC_TIM_DATA_BIT_TOTAL_SHORT - CEC_TIM_DATA_BIT_0_LOW },
+       { "Tx Data 0 High Long",   CEC_TIM_DATA_BIT_TOTAL_LONG - CEC_TIM_DATA_BIT_0_LOW },
+       { "Tx Data 1 Low",         CEC_TIM_DATA_BIT_1_LOW },
+       { "Tx Data 1 High",        CEC_TIM_DATA_BIT_TOTAL - CEC_TIM_DATA_BIT_1_LOW },
+       { "Tx Data 1 High Short",  CEC_TIM_DATA_BIT_TOTAL_SHORT - CEC_TIM_DATA_BIT_1_LOW },
+       { "Tx Data 1 High Long",   CEC_TIM_DATA_BIT_TOTAL_LONG - CEC_TIM_DATA_BIT_1_LOW },
+       { "Tx Data 1 High Pre Sample", CEC_TIM_DATA_BIT_SAMPLE - CEC_TIM_DATA_BIT_1_LOW },
+       { "Tx Data 1 High Post Sample", CEC_TIM_DATA_BIT_TOTAL - CEC_TIM_DATA_BIT_SAMPLE },
+       { "Tx Data 1 High Post Sample Short", CEC_TIM_DATA_BIT_TOTAL_SHORT - CEC_TIM_DATA_BIT_SAMPLE },
+       { "Tx Data 1 High Post Sample Long", CEC_TIM_DATA_BIT_TOTAL_LONG - CEC_TIM_DATA_BIT_SAMPLE },
+       { "Tx Data Bit Low Custom", 0 },
+       { "Tx Data Bit High Custom", 0 },
+       { "Tx Pulse Low Custom",   0 },
+       { "Tx Pulse High Custom",  0 },
+       { "Tx Low Drive",          CEC_TIM_LOW_DRIVE_ERROR },
+       { "Rx Start Bit Low",      CEC_TIM_SAMPLE },
+       { "Rx Start Bit High",     CEC_TIM_SAMPLE },
+       { "Rx Data Sample",        CEC_TIM_DATA_BIT_SAMPLE },
+       { "Rx Data Post Sample",   CEC_TIM_DATA_BIT_HIGH - CEC_TIM_DATA_BIT_SAMPLE },
+       { "Rx Data Wait for Low",  CEC_TIM_SAMPLE },
+       { "Rx Ack Low",            CEC_TIM_DATA_BIT_0_LOW },
+       { "Rx Ack Low Post",       CEC_TIM_DATA_BIT_HIGH - CEC_TIM_DATA_BIT_0_LOW },
+       { "Rx Ack High Post",      CEC_TIM_DATA_BIT_HIGH },
+       { "Rx Ack Finish",         CEC_TIM_DATA_BIT_TOTAL_MIN - CEC_TIM_DATA_BIT_HIGH },
+       { "Rx Low Drive",          CEC_TIM_LOW_DRIVE_ERROR },
+       { "Rx Irq",                0 },
+};
+
+static void cec_pin_update(struct cec_pin *pin, bool v, bool force)
+{
+       if (!force && v == pin->adap->cec_pin_is_high)
+               return;
+
+       pin->adap->cec_pin_is_high = v;
+       if (atomic_read(&pin->work_pin_num_events) < CEC_NUM_PIN_EVENTS) {
+               u8 ev = v;
+
+               if (pin->work_pin_events_dropped) {
+                       pin->work_pin_events_dropped = false;
+                       ev |= CEC_PIN_EVENT_FL_DROPPED;
+               }
+               pin->work_pin_events[pin->work_pin_events_wr] = ev;
+               pin->work_pin_ts[pin->work_pin_events_wr] = ktime_get();
+               pin->work_pin_events_wr =
+                       (pin->work_pin_events_wr + 1) % CEC_NUM_PIN_EVENTS;
+               atomic_inc(&pin->work_pin_num_events);
+       } else {
+               pin->work_pin_events_dropped = true;
+               pin->work_pin_events_dropped_cnt++;
+       }
+       wake_up_interruptible(&pin->kthread_waitq);
+}
+
+static bool cec_pin_read(struct cec_pin *pin)
+{
+       bool v = pin->ops->read(pin->adap);
+
+       cec_pin_update(pin, v, false);
+       return v;
+}
+
+static void cec_pin_low(struct cec_pin *pin)
+{
+       pin->ops->low(pin->adap);
+       cec_pin_update(pin, false, false);
+}
+
+static bool cec_pin_high(struct cec_pin *pin)
+{
+       pin->ops->high(pin->adap);
+       return cec_pin_read(pin);
+}
+
+static bool rx_error_inj(struct cec_pin *pin, unsigned int mode_offset,
+                        int arg_idx, u8 *arg)
+{
+#ifdef CONFIG_CEC_PIN_ERROR_INJ
+       u16 cmd = cec_pin_rx_error_inj(pin);
+       u64 e = pin->error_inj[cmd];
+       unsigned int mode = (e >> mode_offset) & CEC_ERROR_INJ_MODE_MASK;
+
+       if (arg_idx >= 0) {
+               u8 pos = pin->error_inj_args[cmd][arg_idx];
+
+               if (arg)
+                       *arg = pos;
+               else if (pos != pin->rx_bit)
+                       return false;
+       }
+
+       switch (mode) {
+       case CEC_ERROR_INJ_MODE_ONCE:
+               pin->error_inj[cmd] &=
+                       ~(CEC_ERROR_INJ_MODE_MASK << mode_offset);
+               return true;
+       case CEC_ERROR_INJ_MODE_ALWAYS:
+               return true;
+       case CEC_ERROR_INJ_MODE_TOGGLE:
+               return pin->rx_toggle;
+       default:
+               return false;
+       }
+#else
+       return false;
+#endif
+}
+
+static bool rx_nack(struct cec_pin *pin)
+{
+       return rx_error_inj(pin, CEC_ERROR_INJ_RX_NACK_OFFSET, -1, NULL);
+}
+
+static bool rx_low_drive(struct cec_pin *pin)
+{
+       return rx_error_inj(pin, CEC_ERROR_INJ_RX_LOW_DRIVE_OFFSET,
+                           CEC_ERROR_INJ_RX_LOW_DRIVE_ARG_IDX, NULL);
+}
+
+static bool rx_add_byte(struct cec_pin *pin)
+{
+       return rx_error_inj(pin, CEC_ERROR_INJ_RX_ADD_BYTE_OFFSET, -1, NULL);
+}
+
+static bool rx_remove_byte(struct cec_pin *pin)
+{
+       return rx_error_inj(pin, CEC_ERROR_INJ_RX_REMOVE_BYTE_OFFSET, -1, NULL);
+}
+
+static bool rx_arb_lost(struct cec_pin *pin, u8 *poll)
+{
+       return pin->tx_msg.len == 0 &&
+               rx_error_inj(pin, CEC_ERROR_INJ_RX_ARB_LOST_OFFSET,
+                            CEC_ERROR_INJ_RX_ARB_LOST_ARG_IDX, poll);
+}
+
+static bool tx_error_inj(struct cec_pin *pin, unsigned int mode_offset,
+                        int arg_idx, u8 *arg)
+{
+#ifdef CONFIG_CEC_PIN_ERROR_INJ
+       u16 cmd = cec_pin_tx_error_inj(pin);
+       u64 e = pin->error_inj[cmd];
+       unsigned int mode = (e >> mode_offset) & CEC_ERROR_INJ_MODE_MASK;
+
+       if (arg_idx >= 0) {
+               u8 pos = pin->error_inj_args[cmd][arg_idx];
+
+               if (arg)
+                       *arg = pos;
+               else if (pos != pin->tx_bit)
+                       return false;
+       }
+
+       switch (mode) {
+       case CEC_ERROR_INJ_MODE_ONCE:
+               pin->error_inj[cmd] &=
+                       ~(CEC_ERROR_INJ_MODE_MASK << mode_offset);
+               return true;
+       case CEC_ERROR_INJ_MODE_ALWAYS:
+               return true;
+       case CEC_ERROR_INJ_MODE_TOGGLE:
+               return pin->tx_toggle;
+       default:
+               return false;
+       }
+#else
+       return false;
+#endif
+}
+
+static bool tx_no_eom(struct cec_pin *pin)
+{
+       return tx_error_inj(pin, CEC_ERROR_INJ_TX_NO_EOM_OFFSET, -1, NULL);
+}
+
+static bool tx_early_eom(struct cec_pin *pin)
+{
+       return tx_error_inj(pin, CEC_ERROR_INJ_TX_EARLY_EOM_OFFSET, -1, NULL);
+}
+
+static bool tx_short_bit(struct cec_pin *pin)
+{
+       return tx_error_inj(pin, CEC_ERROR_INJ_TX_SHORT_BIT_OFFSET,
+                           CEC_ERROR_INJ_TX_SHORT_BIT_ARG_IDX, NULL);
+}
+
+static bool tx_long_bit(struct cec_pin *pin)
+{
+       return tx_error_inj(pin, CEC_ERROR_INJ_TX_LONG_BIT_OFFSET,
+                           CEC_ERROR_INJ_TX_LONG_BIT_ARG_IDX, NULL);
+}
+
+static bool tx_custom_bit(struct cec_pin *pin)
+{
+       return tx_error_inj(pin, CEC_ERROR_INJ_TX_CUSTOM_BIT_OFFSET,
+                           CEC_ERROR_INJ_TX_CUSTOM_BIT_ARG_IDX, NULL);
+}
+
+static bool tx_short_start(struct cec_pin *pin)
+{
+       return tx_error_inj(pin, CEC_ERROR_INJ_TX_SHORT_START_OFFSET, -1, NULL);
+}
+
+static bool tx_long_start(struct cec_pin *pin)
+{
+       return tx_error_inj(pin, CEC_ERROR_INJ_TX_LONG_START_OFFSET, -1, NULL);
+}
+
+static bool tx_custom_start(struct cec_pin *pin)
+{
+       return tx_error_inj(pin, CEC_ERROR_INJ_TX_CUSTOM_START_OFFSET,
+                           -1, NULL);
+}
+
+static bool tx_last_bit(struct cec_pin *pin)
+{
+       return tx_error_inj(pin, CEC_ERROR_INJ_TX_LAST_BIT_OFFSET,
+                           CEC_ERROR_INJ_TX_LAST_BIT_ARG_IDX, NULL);
+}
+
+static u8 tx_add_bytes(struct cec_pin *pin)
+{
+       u8 bytes;
+
+       if (tx_error_inj(pin, CEC_ERROR_INJ_TX_ADD_BYTES_OFFSET,
+                        CEC_ERROR_INJ_TX_ADD_BYTES_ARG_IDX, &bytes))
+               return bytes;
+       return 0;
+}
+
+static bool tx_remove_byte(struct cec_pin *pin)
+{
+       return tx_error_inj(pin, CEC_ERROR_INJ_TX_REMOVE_BYTE_OFFSET, -1, NULL);
+}
+
+static bool tx_low_drive(struct cec_pin *pin)
+{
+       return tx_error_inj(pin, CEC_ERROR_INJ_TX_LOW_DRIVE_OFFSET,
+                           CEC_ERROR_INJ_TX_LOW_DRIVE_ARG_IDX, NULL);
+}
+
+static void cec_pin_to_idle(struct cec_pin *pin)
+{
+       /*
+        * Reset all status fields, release the bus and
+        * go to idle state.
+        */
+       pin->rx_bit = pin->tx_bit = 0;
+       pin->rx_msg.len = 0;
+       memset(pin->rx_msg.msg, 0, sizeof(pin->rx_msg.msg));
+       pin->ts = ns_to_ktime(0);
+       pin->tx_generated_poll = false;
+       pin->tx_post_eom = false;
+       if (pin->state >= CEC_ST_TX_WAIT &&
+           pin->state <= CEC_ST_TX_LOW_DRIVE)
+               pin->tx_toggle ^= 1;
+       if (pin->state >= CEC_ST_RX_START_BIT_LOW &&
+           pin->state <= CEC_ST_RX_LOW_DRIVE)
+               pin->rx_toggle ^= 1;
+       pin->state = CEC_ST_IDLE;
+}
+
+/*
+ * Handle Transmit-related states
+ *
+ * Basic state changes when transmitting:
+ *
+ * Idle -> Tx Wait (waiting for the end of signal free time) ->
+ *     Tx Start Bit Low -> Tx Start Bit High ->
+ *
+ *   Regular data bits + EOM:
+ *     Tx Data 0 Low -> Tx Data 0 High ->
+ *   or:
+ *     Tx Data 1 Low -> Tx Data 1 High ->
+ *
+ *   First 4 data bits or Ack bit:
+ *     Tx Data 0 Low -> Tx Data 0 High ->
+ *   or:
+ *     Tx Data 1 Low -> Tx Data 1 High -> Tx Data 1 Pre Sample ->
+ *             Tx Data 1 Post Sample ->
+ *
+ *   After the last Ack go to Idle.
+ *
+ * If it detects a Low Drive condition then:
+ *     Tx Wait For High -> Idle
+ *
+ * If it loses arbitration, then it switches to state Rx Data Post Sample.
+ */
+static void cec_pin_tx_states(struct cec_pin *pin, ktime_t ts)
+{
+       bool v;
+       bool is_ack_bit, ack;
+
+       switch (pin->state) {
+       case CEC_ST_TX_WAIT_FOR_HIGH:
+               if (cec_pin_read(pin))
+                       cec_pin_to_idle(pin);
+               break;
+
+       case CEC_ST_TX_START_BIT_LOW:
+               if (tx_short_start(pin)) {
+                       /*
+                        * Error Injection: send an invalid (too short)
+                        * start pulse.
+                        */
+                       pin->state = CEC_ST_TX_START_BIT_HIGH_SHORT;
+               } else if (tx_long_start(pin)) {
+                       /*
+                        * Error Injection: send an invalid (too long)
+                        * start pulse.
+                        */
+                       pin->state = CEC_ST_TX_START_BIT_HIGH_LONG;
+               } else {
+                       pin->state = CEC_ST_TX_START_BIT_HIGH;
+               }
+               /* Generate start bit */
+               cec_pin_high(pin);
+               break;
+
+       case CEC_ST_TX_START_BIT_LOW_CUSTOM:
+               pin->state = CEC_ST_TX_START_BIT_HIGH_CUSTOM;
+               /* Generate start bit */
+               cec_pin_high(pin);
+               break;
+
+       case CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE:
+       case CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE_SHORT:
+       case CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE_LONG:
+               if (pin->tx_nacked) {
+                       cec_pin_to_idle(pin);
+                       pin->tx_msg.len = 0;
+                       if (pin->tx_generated_poll)
+                               break;
+                       pin->work_tx_ts = ts;
+                       pin->work_tx_status = CEC_TX_STATUS_NACK;
+                       wake_up_interruptible(&pin->kthread_waitq);
+                       break;
+               }
+               /* fall through */
+       case CEC_ST_TX_DATA_BIT_0_HIGH:
+       case CEC_ST_TX_DATA_BIT_0_HIGH_SHORT:
+       case CEC_ST_TX_DATA_BIT_0_HIGH_LONG:
+       case CEC_ST_TX_DATA_BIT_1_HIGH:
+       case CEC_ST_TX_DATA_BIT_1_HIGH_SHORT:
+       case CEC_ST_TX_DATA_BIT_1_HIGH_LONG:
+               /*
+                * If the read value is 1, then all is OK, otherwise we have a
+                * low drive condition.
+                *
+                * Special case: when we generate a poll message due to an
+                * Arbitration Lost error injection, then ignore this since
+                * the pin can actually be low in that case.
+                */
+               if (!cec_pin_read(pin) && !pin->tx_generated_poll) {
+                       /*
+                        * It's 0, so someone detected an error and pulled the
+                        * line low for 1.5 times the nominal bit period.
+                        */
+                       pin->tx_msg.len = 0;
+                       pin->state = CEC_ST_TX_WAIT_FOR_HIGH;
+                       pin->work_tx_ts = ts;
+                       pin->work_tx_status = CEC_TX_STATUS_LOW_DRIVE;
+                       pin->tx_low_drive_cnt++;
+                       wake_up_interruptible(&pin->kthread_waitq);
+                       break;
+               }
+               /* fall through */
+       case CEC_ST_TX_DATA_BIT_HIGH_CUSTOM:
+               if (tx_last_bit(pin)) {
+                       /* Error Injection: just stop sending after this bit */
+                       cec_pin_to_idle(pin);
+                       pin->tx_msg.len = 0;
+                       if (pin->tx_generated_poll)
+                               break;
+                       pin->work_tx_ts = ts;
+                       pin->work_tx_status = CEC_TX_STATUS_OK;
+                       wake_up_interruptible(&pin->kthread_waitq);
+                       break;
+               }
+               pin->tx_bit++;
+               /* fall through */
+       case CEC_ST_TX_START_BIT_HIGH:
+       case CEC_ST_TX_START_BIT_HIGH_SHORT:
+       case CEC_ST_TX_START_BIT_HIGH_LONG:
+       case CEC_ST_TX_START_BIT_HIGH_CUSTOM:
+               if (tx_low_drive(pin)) {
+                       /* Error injection: go to low drive */
+                       cec_pin_low(pin);
+                       pin->state = CEC_ST_TX_LOW_DRIVE;
+                       pin->tx_msg.len = 0;
+                       if (pin->tx_generated_poll)
+                               break;
+                       pin->work_tx_ts = ts;
+                       pin->work_tx_status = CEC_TX_STATUS_LOW_DRIVE;
+                       pin->tx_low_drive_cnt++;
+                       wake_up_interruptible(&pin->kthread_waitq);
+                       break;
+               }
+               if (pin->tx_bit / 10 >= pin->tx_msg.len + pin->tx_extra_bytes) {
+                       cec_pin_to_idle(pin);
+                       pin->tx_msg.len = 0;
+                       if (pin->tx_generated_poll)
+                               break;
+                       pin->work_tx_ts = ts;
+                       pin->work_tx_status = CEC_TX_STATUS_OK;
+                       wake_up_interruptible(&pin->kthread_waitq);
+                       break;
+               }
+
+               switch (pin->tx_bit % 10) {
+               default: {
+                       /*
+                        * In the CEC_ERROR_INJ_TX_ADD_BYTES case we transmit
+                        * extra bytes, so pin->tx_bit / 10 can become >= 16.
+                        * Generate bit values for those extra bytes instead
+                        * of reading them from the transmit buffer.
+                        */
+                       unsigned int idx = (pin->tx_bit / 10);
+                       u8 val = idx;
+
+                       if (idx < pin->tx_msg.len)
+                               val = pin->tx_msg.msg[idx];
+                       v = val & (1 << (7 - (pin->tx_bit % 10)));
+
+                       pin->state = v ? CEC_ST_TX_DATA_BIT_1_LOW :
+                                        CEC_ST_TX_DATA_BIT_0_LOW;
+                       break;
+               }
+               case EOM_BIT: {
+                       unsigned int tot_len = pin->tx_msg.len +
+                                              pin->tx_extra_bytes;
+                       unsigned int tx_byte_idx = pin->tx_bit / 10;
+
+                       v = !pin->tx_post_eom && tx_byte_idx == tot_len - 1;
+                       if (tot_len > 1 && tx_byte_idx == tot_len - 2 &&
+                           tx_early_eom(pin)) {
+                               /* Error injection: set EOM one byte early */
+                               v = true;
+                               pin->tx_post_eom = true;
+                       } else if (v && tx_no_eom(pin)) {
+                               /* Error injection: no EOM */
+                               v = false;
+                       }
+                       pin->state = v ? CEC_ST_TX_DATA_BIT_1_LOW :
+                                        CEC_ST_TX_DATA_BIT_0_LOW;
+                       break;
+               }
+               case ACK_BIT:
+                       pin->state = CEC_ST_TX_DATA_BIT_1_LOW;
+                       break;
+               }
+               if (tx_custom_bit(pin))
+                       pin->state = CEC_ST_TX_DATA_BIT_LOW_CUSTOM;
+               cec_pin_low(pin);
+               break;
+
+       case CEC_ST_TX_DATA_BIT_0_LOW:
+       case CEC_ST_TX_DATA_BIT_1_LOW:
+               v = pin->state == CEC_ST_TX_DATA_BIT_1_LOW;
+               is_ack_bit = pin->tx_bit % 10 == ACK_BIT;
+               if (v && (pin->tx_bit < 4 || is_ack_bit)) {
+                       pin->state = CEC_ST_TX_DATA_BIT_1_HIGH_PRE_SAMPLE;
+               } else if (!is_ack_bit && tx_short_bit(pin)) {
+                       /* Error Injection: send an invalid (too short) bit */
+                       pin->state = v ? CEC_ST_TX_DATA_BIT_1_HIGH_SHORT :
+                                        CEC_ST_TX_DATA_BIT_0_HIGH_SHORT;
+               } else if (!is_ack_bit && tx_long_bit(pin)) {
+                       /* Error Injection: send an invalid (too long) bit */
+                       pin->state = v ? CEC_ST_TX_DATA_BIT_1_HIGH_LONG :
+                                        CEC_ST_TX_DATA_BIT_0_HIGH_LONG;
+               } else {
+                       pin->state = v ? CEC_ST_TX_DATA_BIT_1_HIGH :
+                                        CEC_ST_TX_DATA_BIT_0_HIGH;
+               }
+               cec_pin_high(pin);
+               break;
+
+       case CEC_ST_TX_DATA_BIT_LOW_CUSTOM:
+               pin->state = CEC_ST_TX_DATA_BIT_HIGH_CUSTOM;
+               cec_pin_high(pin);
+               break;
+
+       case CEC_ST_TX_DATA_BIT_1_HIGH_PRE_SAMPLE:
+               /* Read the CEC value at the sample time */
+               v = cec_pin_read(pin);
+               is_ack_bit = pin->tx_bit % 10 == ACK_BIT;
+               /*
+                * If v == 0 and we're within the first 4 bits
+                * of the initiator, then someone else started
+                * transmitting and we lost the arbitration
+                * (i.e. the logical address of the other
+                * transmitter has more leading 0 bits in the
+                * initiator).
+                */
+               if (!v && !is_ack_bit && !pin->tx_generated_poll) {
+                       pin->tx_msg.len = 0;
+                       pin->work_tx_ts = ts;
+                       pin->work_tx_status = CEC_TX_STATUS_ARB_LOST;
+                       wake_up_interruptible(&pin->kthread_waitq);
+                       pin->rx_bit = pin->tx_bit;
+                       pin->tx_bit = 0;
+                       memset(pin->rx_msg.msg, 0, sizeof(pin->rx_msg.msg));
+                       pin->rx_msg.msg[0] = pin->tx_msg.msg[0];
+                       pin->rx_msg.msg[0] &= (0xff << (8 - pin->rx_bit));
+                       pin->rx_msg.len = 0;
+                       pin->ts = ktime_sub_us(ts, CEC_TIM_DATA_BIT_SAMPLE);
+                       pin->state = CEC_ST_RX_DATA_POST_SAMPLE;
+                       pin->rx_bit++;
+                       break;
+               }
+               pin->state = CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE;
+               if (!is_ack_bit && tx_short_bit(pin)) {
+                       /* Error Injection: send an invalid (too short) bit */
+                       pin->state = CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE_SHORT;
+               } else if (!is_ack_bit && tx_long_bit(pin)) {
+                       /* Error Injection: send an invalid (too long) bit */
+                       pin->state = CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE_LONG;
+               }
+               if (!is_ack_bit)
+                       break;
+               /* Was the message ACKed? */
+               ack = cec_msg_is_broadcast(&pin->tx_msg) ? v : !v;
+               if (!ack && (!pin->tx_ignore_nack_until_eom ||
+                   pin->tx_bit / 10 == pin->tx_msg.len - 1) &&
+                   !pin->tx_post_eom) {
+                       /*
+                        * Note: the CEC spec is ambiguous regarding
+                        * what action to take when a NACK appears
+                        * before the last byte of the payload was
+                        * transmitted: either stop transmitting
+                        * immediately, or wait until the last byte
+                        * was transmitted.
+                        *
+                        * Most CEC implementations appear to stop
+                        * immediately, and that's what we do here
+                        * as well.
+                        */
+                       pin->tx_nacked = true;
+               }
+               break;
+
+       case CEC_ST_TX_PULSE_LOW_CUSTOM:
+               cec_pin_high(pin);
+               pin->state = CEC_ST_TX_PULSE_HIGH_CUSTOM;
+               break;
+
+       case CEC_ST_TX_PULSE_HIGH_CUSTOM:
+               cec_pin_to_idle(pin);
+               break;
+
+       default:
+               break;
+       }
+}
+
+/*
+ * Handle Receive-related states
+ *
+ * Basic state changes when receiving:
+ *
+ *     Rx Start Bit Low -> Rx Start Bit High ->
+ *   Regular data bits + EOM:
+ *     Rx Data Sample -> Rx Data Post Sample -> Rx Data High ->
+ *   Ack bit 0:
+ *     Rx Ack Low -> Rx Ack Low Post -> Rx Data High ->
+ *   Ack bit 1:
+ *     Rx Ack High Post -> Rx Data High ->
+ *   Ack bit 0 && EOM:
+ *     Rx Ack Low -> Rx Ack Low Post -> Rx Ack Finish -> Idle
+ */
+static void cec_pin_rx_states(struct cec_pin *pin, ktime_t ts)
+{
+       s32 delta;
+       bool v;
+       bool ack;
+       bool bcast, for_us;
+       u8 dest;
+       u8 poll;
+
+       switch (pin->state) {
+       /* Receive states */
+       case CEC_ST_RX_START_BIT_LOW:
+               v = cec_pin_read(pin);
+               if (!v)
+                       break;
+               pin->state = CEC_ST_RX_START_BIT_HIGH;
+               delta = ktime_us_delta(ts, pin->ts);
+               /* Start bit low is too short, go back to idle */
+               if (delta < CEC_TIM_START_BIT_LOW_MIN - CEC_TIM_IDLE_SAMPLE) {
+                       if (!pin->rx_start_bit_low_too_short_cnt++) {
+                               pin->rx_start_bit_low_too_short_ts = ktime_to_ns(pin->ts);
+                               pin->rx_start_bit_low_too_short_delta = delta;
+                       }
+                       cec_pin_to_idle(pin);
+                       break;
+               }
+               if (rx_arb_lost(pin, &poll)) {
+                       cec_msg_init(&pin->tx_msg, poll >> 4, poll & 0xf);
+                       pin->tx_generated_poll = true;
+                       pin->tx_extra_bytes = 0;
+                       pin->state = CEC_ST_TX_START_BIT_HIGH;
+                       pin->ts = ts;
+               }
+               break;
+
+       case CEC_ST_RX_START_BIT_HIGH:
+               v = cec_pin_read(pin);
+               delta = ktime_us_delta(ts, pin->ts);
+               /*
+                * Unfortunately the spec does not specify when to give up
+                * and go to idle. We just pick TOTAL_LONG.
+                */
+               if (v && delta > CEC_TIM_START_BIT_TOTAL_LONG) {
+                       pin->rx_start_bit_too_long_cnt++;
+                       cec_pin_to_idle(pin);
+                       break;
+               }
+               if (v)
+                       break;
+               /* Start bit is too short, go back to idle */
+               if (delta < CEC_TIM_START_BIT_TOTAL_MIN - CEC_TIM_IDLE_SAMPLE) {
+                       if (!pin->rx_start_bit_too_short_cnt++) {
+                               pin->rx_start_bit_too_short_ts = ktime_to_ns(pin->ts);
+                               pin->rx_start_bit_too_short_delta = delta;
+                       }
+                       cec_pin_to_idle(pin);
+                       break;
+               }
+               if (rx_low_drive(pin)) {
+                       /* Error injection: go to low drive */
+                       cec_pin_low(pin);
+                       pin->state = CEC_ST_RX_LOW_DRIVE;
+                       pin->rx_low_drive_cnt++;
+                       break;
+               }
+               pin->state = CEC_ST_RX_DATA_SAMPLE;
+               pin->ts = ts;
+               pin->rx_eom = false;
+               break;
+
+       case CEC_ST_RX_DATA_SAMPLE:
+               v = cec_pin_read(pin);
+               pin->state = CEC_ST_RX_DATA_POST_SAMPLE;
+               switch (pin->rx_bit % 10) {
+               default:
+                       if (pin->rx_bit / 10 < CEC_MAX_MSG_SIZE)
+                               pin->rx_msg.msg[pin->rx_bit / 10] |=
+                                       v << (7 - (pin->rx_bit % 10));
+                       break;
+               case EOM_BIT:
+                       pin->rx_eom = v;
+                       pin->rx_msg.len = pin->rx_bit / 10 + 1;
+                       break;
+               case ACK_BIT:
+                       break;
+               }
+               pin->rx_bit++;
+               break;
+
+       case CEC_ST_RX_DATA_POST_SAMPLE:
+               pin->state = CEC_ST_RX_DATA_WAIT_FOR_LOW;
+               break;
+
+       case CEC_ST_RX_DATA_WAIT_FOR_LOW:
+               v = cec_pin_read(pin);
+               delta = ktime_us_delta(ts, pin->ts);
+               /*
+                * Unfortunately the spec does not specify when to give up
+                * and go to idle. We just pick TOTAL_LONG.
+                */
+               if (v && delta > CEC_TIM_DATA_BIT_TOTAL_LONG) {
+                       pin->rx_data_bit_too_long_cnt++;
+                       cec_pin_to_idle(pin);
+                       break;
+               }
+               if (v)
+                       break;
+
+               if (rx_low_drive(pin)) {
+                       /* Error injection: go to low drive */
+                       cec_pin_low(pin);
+                       pin->state = CEC_ST_RX_LOW_DRIVE;
+                       pin->rx_low_drive_cnt++;
+                       break;
+               }
+
+               /*
+                * Go to low drive state when the total bit time is
+                * too short.
+                */
+               if (delta < CEC_TIM_DATA_BIT_TOTAL_MIN) {
+                       if (!pin->rx_data_bit_too_short_cnt++) {
+                               pin->rx_data_bit_too_short_ts = ktime_to_ns(pin->ts);
+                               pin->rx_data_bit_too_short_delta = delta;
+                       }
+                       cec_pin_low(pin);
+                       pin->state = CEC_ST_RX_LOW_DRIVE;
+                       pin->rx_low_drive_cnt++;
+                       break;
+               }
+               pin->ts = ts;
+               if (pin->rx_bit % 10 != 9) {
+                       pin->state = CEC_ST_RX_DATA_SAMPLE;
+                       break;
+               }
+
+               dest = cec_msg_destination(&pin->rx_msg);
+               bcast = dest == CEC_LOG_ADDR_BROADCAST;
+               /* for_us == broadcast or directed to us */
+               for_us = bcast || (pin->la_mask & (1 << dest));
+               /* ACK bit value */
+               ack = bcast ? 1 : !for_us;
+
+               if (for_us && rx_nack(pin)) {
+                       /* Error injection: toggle the ACK bit */
+                       ack = !ack;
+               }
+
+               if (ack) {
+                       /* No need to write to the bus, just wait */
+                       pin->state = CEC_ST_RX_ACK_HIGH_POST;
+                       break;
+               }
+               cec_pin_low(pin);
+               pin->state = CEC_ST_RX_ACK_LOW;
+               break;
+
+       case CEC_ST_RX_ACK_LOW:
+               cec_pin_high(pin);
+               pin->state = CEC_ST_RX_ACK_LOW_POST;
+               break;
+
+       case CEC_ST_RX_ACK_LOW_POST:
+       case CEC_ST_RX_ACK_HIGH_POST:
+               v = cec_pin_read(pin);
+               if (v && pin->rx_eom) {
+                       pin->work_rx_msg = pin->rx_msg;
+                       pin->work_rx_msg.rx_ts = ktime_to_ns(ts);
+                       wake_up_interruptible(&pin->kthread_waitq);
+                       pin->ts = ts;
+                       pin->state = CEC_ST_RX_ACK_FINISH;
+                       break;
+               }
+               pin->rx_bit++;
+               pin->state = CEC_ST_RX_DATA_WAIT_FOR_LOW;
+               break;
+
+       case CEC_ST_RX_ACK_FINISH:
+               cec_pin_to_idle(pin);
+               break;
+
+       default:
+               break;
+       }
+}
+
+/*
+ * Main timer function
+ *
+ */
+static enum hrtimer_restart cec_pin_timer(struct hrtimer *timer)
+{
+       struct cec_pin *pin = container_of(timer, struct cec_pin, timer);
+       struct cec_adapter *adap = pin->adap;
+       ktime_t ts;
+       s32 delta;
+       u32 usecs;
+
+       ts = ktime_get();
+       if (ktime_to_ns(pin->timer_ts)) {
+               delta = ktime_us_delta(ts, pin->timer_ts);
+               pin->timer_cnt++;
+               if (delta > 100 && pin->state != CEC_ST_IDLE) {
+                       /* Keep track of timer overruns */
+                       pin->timer_sum_overrun += delta;
+                       pin->timer_100ms_overruns++;
+                       if (delta > 300)
+                               pin->timer_300ms_overruns++;
+                       if (delta > pin->timer_max_overrun)
+                               pin->timer_max_overrun = delta;
+               }
+       }
+       if (adap->monitor_pin_cnt)
+               cec_pin_read(pin);
+
+       if (pin->wait_usecs) {
+               /*
+                * If we are monitoring the pin, then we have to
+                * sample at regular intervals.
+                */
+               if (pin->wait_usecs > 150) {
+                       pin->wait_usecs -= 100;
+                       pin->timer_ts = ktime_add_us(ts, 100);
+                       hrtimer_forward_now(timer, ns_to_ktime(100000));
+                       return HRTIMER_RESTART;
+               }
+               if (pin->wait_usecs > 100) {
+                       pin->wait_usecs /= 2;
+                       pin->timer_ts = ktime_add_us(ts, pin->wait_usecs);
+                       hrtimer_forward_now(timer,
+                                       ns_to_ktime(pin->wait_usecs * 1000));
+                       return HRTIMER_RESTART;
+               }
+               pin->timer_ts = ktime_add_us(ts, pin->wait_usecs);
+               hrtimer_forward_now(timer,
+                                   ns_to_ktime(pin->wait_usecs * 1000));
+               pin->wait_usecs = 0;
+               return HRTIMER_RESTART;
+       }
+
+       switch (pin->state) {
+       /* Transmit states */
+       case CEC_ST_TX_WAIT_FOR_HIGH:
+       case CEC_ST_TX_START_BIT_LOW:
+       case CEC_ST_TX_START_BIT_HIGH:
+       case CEC_ST_TX_START_BIT_HIGH_SHORT:
+       case CEC_ST_TX_START_BIT_HIGH_LONG:
+       case CEC_ST_TX_START_BIT_LOW_CUSTOM:
+       case CEC_ST_TX_START_BIT_HIGH_CUSTOM:
+       case CEC_ST_TX_DATA_BIT_0_LOW:
+       case CEC_ST_TX_DATA_BIT_0_HIGH:
+       case CEC_ST_TX_DATA_BIT_0_HIGH_SHORT:
+       case CEC_ST_TX_DATA_BIT_0_HIGH_LONG:
+       case CEC_ST_TX_DATA_BIT_1_LOW:
+       case CEC_ST_TX_DATA_BIT_1_HIGH:
+       case CEC_ST_TX_DATA_BIT_1_HIGH_SHORT:
+       case CEC_ST_TX_DATA_BIT_1_HIGH_LONG:
+       case CEC_ST_TX_DATA_BIT_1_HIGH_PRE_SAMPLE:
+       case CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE:
+       case CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE_SHORT:
+       case CEC_ST_TX_DATA_BIT_1_HIGH_POST_SAMPLE_LONG:
+       case CEC_ST_TX_DATA_BIT_LOW_CUSTOM:
+       case CEC_ST_TX_DATA_BIT_HIGH_CUSTOM:
+       case CEC_ST_TX_PULSE_LOW_CUSTOM:
+       case CEC_ST_TX_PULSE_HIGH_CUSTOM:
+               cec_pin_tx_states(pin, ts);
+               break;
+
+       /* Receive states */
+       case CEC_ST_RX_START_BIT_LOW:
+       case CEC_ST_RX_START_BIT_HIGH:
+       case CEC_ST_RX_DATA_SAMPLE:
+       case CEC_ST_RX_DATA_POST_SAMPLE:
+       case CEC_ST_RX_DATA_WAIT_FOR_LOW:
+       case CEC_ST_RX_ACK_LOW:
+       case CEC_ST_RX_ACK_LOW_POST:
+       case CEC_ST_RX_ACK_HIGH_POST:
+       case CEC_ST_RX_ACK_FINISH:
+               cec_pin_rx_states(pin, ts);
+               break;
+
+       case CEC_ST_IDLE:
+       case CEC_ST_TX_WAIT:
+               if (!cec_pin_high(pin)) {
+                       /* Start bit, switch to receive state */
+                       pin->ts = ts;
+                       pin->state = CEC_ST_RX_START_BIT_LOW;
+                       /*
+                        * If a transmit is pending, then that transmit should
+                        * use a signal free time of no more than
+                        * CEC_SIGNAL_FREE_TIME_NEW_INITIATOR since it will
+                        * have a new initiator due to the receive that is now
+                        * starting.
+                        */
+                       if (pin->tx_msg.len && pin->tx_signal_free_time >
+                           CEC_SIGNAL_FREE_TIME_NEW_INITIATOR)
+                               pin->tx_signal_free_time =
+                                       CEC_SIGNAL_FREE_TIME_NEW_INITIATOR;
+                       break;
+               }
+               if (ktime_to_ns(pin->ts) == 0)
+                       pin->ts = ts;
+               if (pin->tx_msg.len) {
+                       /*
+                        * Check if the bus has been free for long enough
+                        * so we can kick off the pending transmit.
+                        */
+                       delta = ktime_us_delta(ts, pin->ts);
+                       if (delta / CEC_TIM_DATA_BIT_TOTAL >
+                           pin->tx_signal_free_time) {
+                               pin->tx_nacked = false;
+                               if (tx_custom_start(pin))
+                                       pin->state = CEC_ST_TX_START_BIT_LOW_CUSTOM;
+                               else
+                                       pin->state = CEC_ST_TX_START_BIT_LOW;
+                               /* Generate start bit */
+                               cec_pin_low(pin);
+                               break;
+                       }
+                       if (delta / CEC_TIM_DATA_BIT_TOTAL >
+                           pin->tx_signal_free_time - 1)
+                               pin->state = CEC_ST_TX_WAIT;
+                       break;
+               }
+               if (pin->tx_custom_pulse && pin->state == CEC_ST_IDLE) {
+                       pin->tx_custom_pulse = false;
+                       /* Generate custom pulse */
+                       cec_pin_low(pin);
+                       pin->state = CEC_ST_TX_PULSE_LOW_CUSTOM;
+                       break;
+               }
+               if (pin->state != CEC_ST_IDLE || pin->ops->enable_irq == NULL ||
+                   pin->enable_irq_failed || adap->is_configuring ||
+                   adap->is_configured || adap->monitor_all_cnt)
+                       break;
+               /* Switch to interrupt mode */
+               atomic_set(&pin->work_irq_change, CEC_PIN_IRQ_ENABLE);
+               pin->state = CEC_ST_RX_IRQ;
+               wake_up_interruptible(&pin->kthread_waitq);
+               return HRTIMER_NORESTART;
+
+       case CEC_ST_TX_LOW_DRIVE:
+       case CEC_ST_RX_LOW_DRIVE:
+               cec_pin_high(pin);
+               cec_pin_to_idle(pin);
+               break;
+
+       default:
+               break;
+       }
+
+       switch (pin->state) {
+       case CEC_ST_TX_START_BIT_LOW_CUSTOM:
+       case CEC_ST_TX_DATA_BIT_LOW_CUSTOM:
+       case CEC_ST_TX_PULSE_LOW_CUSTOM:
+               usecs = pin->tx_custom_low_usecs;
+               break;
+       case CEC_ST_TX_START_BIT_HIGH_CUSTOM:
+       case CEC_ST_TX_DATA_BIT_HIGH_CUSTOM:
+       case CEC_ST_TX_PULSE_HIGH_CUSTOM:
+               usecs = pin->tx_custom_high_usecs;
+               break;
+       default:
+               usecs = states[pin->state].usecs;
+               break;
+       }
+
+       if (!adap->monitor_pin_cnt || usecs <= 150) {
+               pin->wait_usecs = 0;
+               pin->timer_ts = ktime_add_us(ts, usecs);
+               hrtimer_forward_now(timer,
+                               ns_to_ktime(usecs * 1000));
+               return HRTIMER_RESTART;
+       }
+       pin->wait_usecs = usecs - 100;
+       pin->timer_ts = ktime_add_us(ts, 100);
+       hrtimer_forward_now(timer, ns_to_ktime(100000));
+       return HRTIMER_RESTART;
+}
+
+static int cec_pin_thread_func(void *_adap)
+{
+       struct cec_adapter *adap = _adap;
+       struct cec_pin *pin = adap->pin;
+
+       for (;;) {
+               wait_event_interruptible(pin->kthread_waitq,
+                       kthread_should_stop() ||
+                       pin->work_rx_msg.len ||
+                       pin->work_tx_status ||
+                       atomic_read(&pin->work_irq_change) ||
+                       atomic_read(&pin->work_pin_num_events));
+
+               if (pin->work_rx_msg.len) {
+                       struct cec_msg *msg = &pin->work_rx_msg;
+
+                       if (msg->len > 1 && msg->len < CEC_MAX_MSG_SIZE &&
+                           rx_add_byte(pin)) {
+                               /* Error injection: add byte to the message */
+                               msg->msg[msg->len++] = 0x55;
+                       }
+                       if (msg->len > 2 && rx_remove_byte(pin)) {
+                               /* Error injection: remove byte from message */
+                               msg->len--;
+                       }
+                       if (msg->len > CEC_MAX_MSG_SIZE)
+                               msg->len = CEC_MAX_MSG_SIZE;
+                       cec_received_msg_ts(adap, msg,
+                               ns_to_ktime(pin->work_rx_msg.rx_ts));
+                       msg->len = 0;
+               }
+               if (pin->work_tx_status) {
+                       unsigned int tx_status = pin->work_tx_status;
+
+                       pin->work_tx_status = 0;
+                       cec_transmit_attempt_done_ts(adap, tx_status,
+                                                    pin->work_tx_ts);
+               }
+
+               while (atomic_read(&pin->work_pin_num_events)) {
+                       unsigned int idx = pin->work_pin_events_rd;
+                       u8 v = pin->work_pin_events[idx];
+
+                       cec_queue_pin_cec_event(adap,
+                                               v & CEC_PIN_EVENT_FL_IS_HIGH,
+                                               v & CEC_PIN_EVENT_FL_DROPPED,
+                                               pin->work_pin_ts[idx]);
+                       pin->work_pin_events_rd = (idx + 1) % CEC_NUM_PIN_EVENTS;
+                       atomic_dec(&pin->work_pin_num_events);
+               }
+
+               switch (atomic_xchg(&pin->work_irq_change,
+                                   CEC_PIN_IRQ_UNCHANGED)) {
+               case CEC_PIN_IRQ_DISABLE:
+                       pin->ops->disable_irq(adap);
+                       cec_pin_high(pin);
+                       cec_pin_to_idle(pin);
+                       hrtimer_start(&pin->timer, ns_to_ktime(0),
+                                     HRTIMER_MODE_REL);
+                       break;
+               case CEC_PIN_IRQ_ENABLE:
+                       pin->enable_irq_failed = !pin->ops->enable_irq(adap);
+                       if (pin->enable_irq_failed) {
+                               cec_pin_to_idle(pin);
+                               hrtimer_start(&pin->timer, ns_to_ktime(0),
+                                             HRTIMER_MODE_REL);
+                       }
+                       break;
+               default:
+                       break;
+               }
+
+               if (kthread_should_stop())
+                       break;
+       }
+       return 0;
+}
+
+static int cec_pin_adap_enable(struct cec_adapter *adap, bool enable)
+{
+       struct cec_pin *pin = adap->pin;
+
+       pin->enabled = enable;
+       if (enable) {
+               atomic_set(&pin->work_pin_num_events, 0);
+               pin->work_pin_events_rd = pin->work_pin_events_wr = 0;
+               pin->work_pin_events_dropped = false;
+               cec_pin_read(pin);
+               cec_pin_to_idle(pin);
+               pin->tx_msg.len = 0;
+               pin->timer_ts = ns_to_ktime(0);
+               atomic_set(&pin->work_irq_change, CEC_PIN_IRQ_UNCHANGED);
+               pin->kthread = kthread_run(cec_pin_thread_func, adap,
+                                          "cec-pin");
+               if (IS_ERR(pin->kthread)) {
+                       pr_err("cec-pin: kernel_thread() failed\n");
+                       return PTR_ERR(pin->kthread);
+               }
+               hrtimer_start(&pin->timer, ns_to_ktime(0),
+                             HRTIMER_MODE_REL);
+       } else {
+               if (pin->ops->disable_irq)
+                       pin->ops->disable_irq(adap);
+               hrtimer_cancel(&pin->timer);
+               kthread_stop(pin->kthread);
+               cec_pin_read(pin);
+               cec_pin_to_idle(pin);
+               pin->state = CEC_ST_OFF;
+       }
+       return 0;
+}
+
+static int cec_pin_adap_log_addr(struct cec_adapter *adap, u8 log_addr)
+{
+       struct cec_pin *pin = adap->pin;
+
+       if (log_addr == CEC_LOG_ADDR_INVALID)
+               pin->la_mask = 0;
+       else
+               pin->la_mask |= (1 << log_addr);
+       return 0;
+}
+
+void cec_pin_start_timer(struct cec_pin *pin)
+{
+       if (pin->state != CEC_ST_RX_IRQ)
+               return;
+
+       atomic_set(&pin->work_irq_change, CEC_PIN_IRQ_UNCHANGED);
+       pin->ops->disable_irq(pin->adap);
+       cec_pin_high(pin);
+       cec_pin_to_idle(pin);
+       hrtimer_start(&pin->timer, ns_to_ktime(0), HRTIMER_MODE_REL);
+}
+
+static int cec_pin_adap_transmit(struct cec_adapter *adap, u8 attempts,
+                                     u32 signal_free_time, struct cec_msg *msg)
+{
+       struct cec_pin *pin = adap->pin;
+
+       /*
+        * If a receive is in progress, then this transmit should use
+        * a signal free time of max CEC_SIGNAL_FREE_TIME_NEW_INITIATOR
+        * since when it starts transmitting it will have a new initiator.
+        */
+       if (pin->state != CEC_ST_IDLE &&
+           signal_free_time > CEC_SIGNAL_FREE_TIME_NEW_INITIATOR)
+               signal_free_time = CEC_SIGNAL_FREE_TIME_NEW_INITIATOR;
+
+       pin->tx_signal_free_time = signal_free_time;
+       pin->tx_extra_bytes = 0;
+       pin->tx_msg = *msg;
+       if (msg->len > 1) {
+               /* Error injection: add byte to the message */
+               pin->tx_extra_bytes = tx_add_bytes(pin);
+       }
+       if (msg->len > 2 && tx_remove_byte(pin)) {
+               /* Error injection: remove byte from the message */
+               pin->tx_msg.len--;
+       }
+       pin->work_tx_status = 0;
+       pin->tx_bit = 0;
+       cec_pin_start_timer(pin);
+       return 0;
+}
+
+static void cec_pin_adap_status(struct cec_adapter *adap,
+                                      struct seq_file *file)
+{
+       struct cec_pin *pin = adap->pin;
+
+       seq_printf(file, "state: %s\n", states[pin->state].name);
+       seq_printf(file, "tx_bit: %d\n", pin->tx_bit);
+       seq_printf(file, "rx_bit: %d\n", pin->rx_bit);
+       seq_printf(file, "cec pin: %d\n", pin->ops->read(adap));
+       seq_printf(file, "cec pin events dropped: %u\n",
+                  pin->work_pin_events_dropped_cnt);
+       seq_printf(file, "irq failed: %d\n", pin->enable_irq_failed);
+       if (pin->timer_100ms_overruns) {
+               seq_printf(file, "timer overruns > 100ms: %u of %u\n",
+                          pin->timer_100ms_overruns, pin->timer_cnt);
+               seq_printf(file, "timer overruns > 300ms: %u of %u\n",
+                          pin->timer_300ms_overruns, pin->timer_cnt);
+               seq_printf(file, "max timer overrun: %u usecs\n",
+                          pin->timer_max_overrun);
+               seq_printf(file, "avg timer overrun: %u usecs\n",
+                          pin->timer_sum_overrun / pin->timer_100ms_overruns);
+       }
+       if (pin->rx_start_bit_low_too_short_cnt)
+               seq_printf(file,
+                          "rx start bit low too short: %u (delta %u, ts %llu)\n",
+                          pin->rx_start_bit_low_too_short_cnt,
+                          pin->rx_start_bit_low_too_short_delta,
+                          pin->rx_start_bit_low_too_short_ts);
+       if (pin->rx_start_bit_too_short_cnt)
+               seq_printf(file,
+                          "rx start bit too short: %u (delta %u, ts %llu)\n",
+                          pin->rx_start_bit_too_short_cnt,
+                          pin->rx_start_bit_too_short_delta,
+                          pin->rx_start_bit_too_short_ts);
+       if (pin->rx_start_bit_too_long_cnt)
+               seq_printf(file, "rx start bit too long: %u\n",
+                          pin->rx_start_bit_too_long_cnt);
+       if (pin->rx_data_bit_too_short_cnt)
+               seq_printf(file,
+                          "rx data bit too short: %u (delta %u, ts %llu)\n",
+                          pin->rx_data_bit_too_short_cnt,
+                          pin->rx_data_bit_too_short_delta,
+                          pin->rx_data_bit_too_short_ts);
+       if (pin->rx_data_bit_too_long_cnt)
+               seq_printf(file, "rx data bit too long: %u\n",
+                          pin->rx_data_bit_too_long_cnt);
+       seq_printf(file, "rx initiated low drive: %u\n", pin->rx_low_drive_cnt);
+       seq_printf(file, "tx detected low drive: %u\n", pin->tx_low_drive_cnt);
+       pin->work_pin_events_dropped_cnt = 0;
+       pin->timer_cnt = 0;
+       pin->timer_100ms_overruns = 0;
+       pin->timer_300ms_overruns = 0;
+       pin->timer_max_overrun = 0;
+       pin->timer_sum_overrun = 0;
+       pin->rx_start_bit_low_too_short_cnt = 0;
+       pin->rx_start_bit_too_short_cnt = 0;
+       pin->rx_start_bit_too_long_cnt = 0;
+       pin->rx_data_bit_too_short_cnt = 0;
+       pin->rx_data_bit_too_long_cnt = 0;
+       pin->rx_low_drive_cnt = 0;
+       pin->tx_low_drive_cnt = 0;
+       if (pin->ops->status)
+               pin->ops->status(adap, file);
+}
+
+static int cec_pin_adap_monitor_all_enable(struct cec_adapter *adap,
+                                                 bool enable)
+{
+       struct cec_pin *pin = adap->pin;
+
+       pin->monitor_all = enable;
+       return 0;
+}
+
+static void cec_pin_adap_free(struct cec_adapter *adap)
+{
+       struct cec_pin *pin = adap->pin;
+
+       if (pin->ops->free)
+               pin->ops->free(adap);
+       adap->pin = NULL;
+       kfree(pin);
+}
+
+static int cec_pin_received(struct cec_adapter *adap, struct cec_msg *msg)
+{
+       struct cec_pin *pin = adap->pin;
+
+       if (pin->ops->received)
+               return pin->ops->received(adap, msg);
+       return -ENOMSG;
+}
+
+void cec_pin_changed(struct cec_adapter *adap, bool value)
+{
+       struct cec_pin *pin = adap->pin;
+
+       cec_pin_update(pin, value, false);
+       if (!value && (adap->is_configuring || adap->is_configured ||
+                      adap->monitor_all_cnt))
+               atomic_set(&pin->work_irq_change, CEC_PIN_IRQ_DISABLE);
+}
+EXPORT_SYMBOL_GPL(cec_pin_changed);
+
+static const struct cec_adap_ops cec_pin_adap_ops = {
+       .adap_enable = cec_pin_adap_enable,
+       .adap_monitor_all_enable = cec_pin_adap_monitor_all_enable,
+       .adap_log_addr = cec_pin_adap_log_addr,
+       .adap_transmit = cec_pin_adap_transmit,
+       .adap_status = cec_pin_adap_status,
+       .adap_free = cec_pin_adap_free,
+#ifdef CONFIG_CEC_PIN_ERROR_INJ
+       .error_inj_parse_line = cec_pin_error_inj_parse_line,
+       .error_inj_show = cec_pin_error_inj_show,
+#endif
+       .received = cec_pin_received,
+};
+
+struct cec_adapter *cec_pin_allocate_adapter(const struct cec_pin_ops *pin_ops,
+                                       void *priv, const char *name, u32 caps)
+{
+       struct cec_adapter *adap;
+       struct cec_pin *pin = kzalloc(sizeof(*pin), GFP_KERNEL);
+
+       if (pin == NULL)
+               return ERR_PTR(-ENOMEM);
+       pin->ops = pin_ops;
+       hrtimer_init(&pin->timer, CLOCK_MONOTONIC, HRTIMER_MODE_REL);
+       pin->timer.function = cec_pin_timer;
+       init_waitqueue_head(&pin->kthread_waitq);
+       pin->tx_custom_low_usecs = CEC_TIM_CUSTOM_DEFAULT;
+       pin->tx_custom_high_usecs = CEC_TIM_CUSTOM_DEFAULT;
+
+       adap = cec_allocate_adapter(&cec_pin_adap_ops, priv, name,
+                           caps | CEC_CAP_MONITOR_ALL | CEC_CAP_MONITOR_PIN,
+                           CEC_MAX_LOG_ADDRS);
+
+       if (IS_ERR(adap)) {
+               kfree(pin);
+               return adap;
+       }
+
+       adap->pin = pin;
+       pin->adap = adap;
+       cec_pin_update(pin, cec_pin_high(pin), true);
+       return adap;
+}
+EXPORT_SYMBOL_GPL(cec_pin_allocate_adapter);
diff --git a/drivers/media/cec/core/cec-priv.h b/drivers/media/cec/core/cec-priv.h
new file mode 100644 (file)
index 0000000..9bbd050
--- /dev/null
@@ -0,0 +1,51 @@
+/* SPDX-License-Identifier: GPL-2.0-only */
+/*
+ * cec-priv.h - HDMI Consumer Electronics Control internal header
+ *
+ * Copyright 2016 Cisco Systems, Inc. and/or its affiliates. All rights reserved.
+ */
+
+#ifndef _CEC_PRIV_H
+#define _CEC_PRIV_H
+
+#include <linux/cec-funcs.h>
+#include <media/cec-notifier.h>
+
+#define dprintk(lvl, fmt, arg...)                                      \
+       do {                                                            \
+               if (lvl <= cec_debug)                                   \
+                       pr_info("cec-%s: " fmt, adap->name, ## arg);    \
+       } while (0)
+
+/* devnode to cec_adapter */
+#define to_cec_adapter(node) container_of(node, struct cec_adapter, devnode)
+
+static inline bool msg_is_raw(const struct cec_msg *msg)
+{
+       return msg->flags & CEC_MSG_FL_RAW;
+}
+
+/* cec-core.c */
+extern int cec_debug;
+int cec_get_device(struct cec_devnode *devnode);
+void cec_put_device(struct cec_devnode *devnode);
+
+/* cec-adap.c */
+int cec_monitor_all_cnt_inc(struct cec_adapter *adap);
+void cec_monitor_all_cnt_dec(struct cec_adapter *adap);
+int cec_monitor_pin_cnt_inc(struct cec_adapter *adap);
+void cec_monitor_pin_cnt_dec(struct cec_adapter *adap);
+int cec_adap_status(struct seq_file *file, void *priv);
+int cec_thread_func(void *_adap);
+void __cec_s_phys_addr(struct cec_adapter *adap, u16 phys_addr, bool block);
+int __cec_s_log_addrs(struct cec_adapter *adap,
+                     struct cec_log_addrs *log_addrs, bool block);
+int cec_transmit_msg_fh(struct cec_adapter *adap, struct cec_msg *msg,
+                       struct cec_fh *fh, bool block);
+void cec_queue_event_fh(struct cec_fh *fh,
+                       const struct cec_event *new_ev, u64 ts);
+
+/* cec-api.c */
+extern const struct file_operations cec_devnode_fops;
+
+#endif