summaryrefslogtreecommitdiffstats
path: root/drivers/usb
diff options
context:
space:
mode:
authorSarah Sharp2009-07-27 21:03:36 +0200
committerGreg Kroah-Hartman2009-07-28 23:31:12 +0200
commit62889610f5591005bed9517360e17531684f72d0 (patch)
tree3fe063ec9a07d3cee20874fd0000be92fd0f8a9e /drivers/usb
parentUSB: xhci: Represent 64-bit addresses with one u64. (diff)
downloadkernel-qcow2-linux-62889610f5591005bed9517360e17531684f72d0.tar.gz
kernel-qcow2-linux-62889610f5591005bed9517360e17531684f72d0.tar.xz
kernel-qcow2-linux-62889610f5591005bed9517360e17531684f72d0.zip
USB: xhci: Handle short control packets correctly.
When there is a short packet on a control transfer, the xHCI host controller hardware will generate two events. The first event will be for the data stage TD with a completion code for a short packet. The second event will be for the status stage with a successful completion code. Before this patch, the xHCI driver would giveback the short control URB when it received the event for the data stage TD. Then it would become confused when it saw a status stage event for the endpoint for an URB it had already finished processing. Change the xHCI host controller driver to wait for the status stage event when it receives a short transfer completion code for a data stage TD. Signed-off-by: Sarah Sharp <sarah.a.sharp@linux.intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
Diffstat (limited to 'drivers/usb')
-rw-r--r--drivers/usb/host/xhci-ring.c14
1 files changed, 11 insertions, 3 deletions
diff --git a/drivers/usb/host/xhci-ring.c b/drivers/usb/host/xhci-ring.c
index 588686fca471..5dd3b1fd71c0 100644
--- a/drivers/usb/host/xhci-ring.c
+++ b/drivers/usb/host/xhci-ring.c
@@ -892,15 +892,23 @@ static int handle_tx_event(struct xhci_hcd *xhci,
if (event_trb != ep_ring->dequeue) {
/* The event was for the status stage */
if (event_trb == td->last_trb) {
- td->urb->actual_length =
- td->urb->transfer_buffer_length;
+ /* Did we already see a short data stage? */
+ if (td->urb->actual_length != 0)
+ status = -EREMOTEIO;
+ else
+ td->urb->actual_length =
+ td->urb->transfer_buffer_length;
} else {
/* Maybe the event was for the data stage? */
- if (GET_COMP_CODE(event->transfer_len) != COMP_STOP_INVAL)
+ if (GET_COMP_CODE(event->transfer_len) != COMP_STOP_INVAL) {
/* We didn't stop on a link TRB in the middle */
td->urb->actual_length =
td->urb->transfer_buffer_length -
TRB_LEN(event->transfer_len);
+ xhci_dbg(xhci, "Waiting for status stage event\n");
+ urb = NULL;
+ goto cleanup;
+ }
}
}
} else {