361 	struct async *as;  in alloc_async()  local
363 	as = kzalloc(sizeof(struct async), GFP_KERNEL);  in alloc_async()
364 	if (!as)  in alloc_async()
366 	as->urb = usb_alloc_urb(numisoframes, GFP_KERNEL);  in alloc_async()
367 	if (!as->urb) {  in alloc_async()
368 		kfree(as);  in alloc_async()
371 	return as;  in alloc_async()
374 static void free_async(struct async *as)  in free_async()  argument
378 	put_pid(as->pid);  in free_async()
379 	if (as->cred)  in free_async()
380 		put_cred(as->cred);  in free_async()
381 	for (i = 0; i < as->urb->num_sgs; i++) {  in free_async()
382 		if (sg_page(&as->urb->sg[i]))  in free_async()
383 			kfree(sg_virt(&as->urb->sg[i]));  in free_async()
386 	kfree(as->urb->sg);  in free_async()
387 	if (as->usbm == NULL)  in free_async()
388 		kfree(as->urb->transfer_buffer);  in free_async()
390 		dec_usb_memory_use_count(as->usbm, &as->usbm->urb_use_count);  in free_async()
392 	kfree(as->urb->setup_packet);  in free_async()
393 	usb_free_urb(as->urb);  in free_async()
394 	usbfs_decrease_memory_usage(as->mem_usage);  in free_async()
395 	kfree(as);  in free_async()
398 static void async_newpending(struct async *as)  in async_newpending()  argument
400 	struct usb_dev_state *ps = as->ps;  in async_newpending()
404 	list_add_tail(&as->asynclist, &ps->async_pending);  in async_newpending()
408 static void async_removepending(struct async *as)  in async_removepending()  argument
410 	struct usb_dev_state *ps = as->ps;  in async_removepending()
414 	list_del_init(&as->asynclist);  in async_removepending()
421 	struct async *as = NULL;  in async_getcompleted()  local
425 		as = list_entry(ps->async_completed.next, struct async,  in async_getcompleted()
427 		list_del_init(&as->asynclist);  in async_getcompleted()
430 	return as;  in async_getcompleted()
436 	struct async *as;  in async_getpending()  local
438 	list_for_each_entry(as, &ps->async_pending, asynclist)  in async_getpending()
439 		if (as->userurb == userurb) {  in async_getpending()
440 			list_del_init(&as->asynclist);  in async_getpending()
441 			return as;  in async_getpending()
548 	struct async *as;  in cancel_bulk_urbs()  local
555 	list_for_each_entry(as, &ps->async_pending, asynclist) {  in cancel_bulk_urbs()
556 		if (as->bulk_addr == bulk_addr) {  in cancel_bulk_urbs()
557 			if (as->bulk_status != AS_CONTINUATION)  in cancel_bulk_urbs()
559 			as->bulk_status = AS_UNLINK;  in cancel_bulk_urbs()
560 			as->bulk_addr = 0;  in cancel_bulk_urbs()
567 	list_for_each_entry(as, &ps->async_pending, asynclist) {  in cancel_bulk_urbs()
568 		if (as->bulk_status == AS_UNLINK) {  in cancel_bulk_urbs()
569 			as->bulk_status = 0;		/* Only once */  in cancel_bulk_urbs()
570 			urb = as->urb;  in cancel_bulk_urbs()
583 	struct async *as = urb->context;  in async_completed()  local
584 	struct usb_dev_state *ps = as->ps;  in async_completed()
592 	list_move_tail(&as->asynclist, &ps->async_completed);  in async_completed()
593 	as->status = urb->status;  in async_completed()
594 	signr = as->signr;  in async_completed()
597 		sinfo.si_signo = as->signr;  in async_completed()
598 		sinfo.si_errno = as->status;  in async_completed()
600 		sinfo.si_addr = as->userurb;  in async_completed()
601 		pid = get_pid(as->pid);  in async_completed()
602 		cred = get_cred(as->cred);  in async_completed()
605 	snoop_urb(urb->dev, as->userurb, urb->pipe, urb->actual_length,  in async_completed()
606 			as->status, COMPLETE, NULL, 0);  in async_completed()
610 	if (as->status < 0 && as->bulk_addr && as->status != -ECONNRESET &&  in async_completed()
611 			as->status != -ENOENT)  in async_completed()
612 		cancel_bulk_urbs(ps, as->bulk_addr);  in async_completed()
627 	struct async *as;  in destroy_async()  local
632 		as = list_entry(list->next, struct async, asynclist);  in destroy_async()
633 		list_del_init(&as->asynclist);  in destroy_async()
634 		urb = as->urb;  in destroy_async()
1034 	struct async *as;  in usbdev_release()  local
1053 	as = async_getcompleted(ps);  in usbdev_release()
1054 	while (as) {  in usbdev_release()
1055 		free_async(as);  in usbdev_release()
1056 		as = async_getcompleted(ps);  in usbdev_release()
1434 	struct async *as = NULL;  in proc_do_submiturb()  local
1592 	as = alloc_async(number_of_packets);  in proc_do_submiturb()
1593 	if (!as) {  in proc_do_submiturb()
1598 	as->usbm = find_memory_area(ps, uurb);  in proc_do_submiturb()
1599 	if (IS_ERR(as->usbm)) {  in proc_do_submiturb()
1600 		ret = PTR_ERR(as->usbm);  in proc_do_submiturb()
1601 		as->usbm = NULL;  in proc_do_submiturb()
1608 	if (as->usbm)  in proc_do_submiturb()
1616 	as->mem_usage = u;  in proc_do_submiturb()
1619 		as->urb->sg = kmalloc_array(num_sgs,  in proc_do_submiturb()
1622 		if (!as->urb->sg) {  in proc_do_submiturb()
1626 		as->urb->num_sgs = num_sgs;  in proc_do_submiturb()
1627 		sg_init_table(as->urb->sg, as->urb->num_sgs);  in proc_do_submiturb()
1630 		for (i = 0; i < as->urb->num_sgs; i++) {  in proc_do_submiturb()
1637 			sg_set_buf(&as->urb->sg[i], buf, u);  in proc_do_submiturb()
1649 		if (as->usbm) {  in proc_do_submiturb()
1652 			as->urb->transfer_buffer = as->usbm->mem +  in proc_do_submiturb()
1653 					(uurb_start - as->usbm->vm_start);  in proc_do_submiturb()
1655 			as->urb->transfer_buffer = kmalloc(uurb->buffer_length,  in proc_do_submiturb()
1657 			if (!as->urb->transfer_buffer) {  in proc_do_submiturb()
1662 				if (copy_from_user(as->urb->transfer_buffer,  in proc_do_submiturb()
1675 				memset(as->urb->transfer_buffer, 0,  in proc_do_submiturb()
1680 	as->urb->dev = ps->dev;  in proc_do_submiturb()
1681 	as->urb->pipe = (uurb->type << 30) |  in proc_do_submiturb()
1698 	as->urb->transfer_flags = u;  in proc_do_submiturb()
1705 	as->urb->transfer_buffer_length = uurb->buffer_length;  in proc_do_submiturb()
1706 	as->urb->setup_packet = (unsigned char *)dr;  in proc_do_submiturb()
1708 	as->urb->start_frame = uurb->start_frame;  in proc_do_submiturb()
1709 	as->urb->number_of_packets = number_of_packets;  in proc_do_submiturb()
1710 	as->urb->stream_id = stream_id;  in proc_do_submiturb()
1716 			as->urb->interval = 1 <<  in proc_do_submiturb()
1719 			as->urb->interval = ep->desc.bInterval;  in proc_do_submiturb()
1722 	as->urb->context = as;  in proc_do_submiturb()
1723 	as->urb->complete = async_completed;  in proc_do_submiturb()
1725 		as->urb->iso_frame_desc[u].offset = totlen;  in proc_do_submiturb()
1726 		as->urb->iso_frame_desc[u].length = isopkt[u].length;  in proc_do_submiturb()
1731 	as->ps = ps;  in proc_do_submiturb()
1732 	as->userurb = arg;  in proc_do_submiturb()
1733 	if (as->usbm) {  in proc_do_submiturb()
1736 		as->urb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;  in proc_do_submiturb()
1737 		as->urb->transfer_dma = as->usbm->dma_handle +  in proc_do_submiturb()
1738 				(uurb_start - as->usbm->vm_start);  in proc_do_submiturb()
1740 		as->userbuffer = uurb->buffer;  in proc_do_submiturb()
1741 	as->signr = uurb->signr;  in proc_do_submiturb()
1742 	as->ifnum = ifnum;  in proc_do_submiturb()
1743 	as->pid = get_pid(task_pid(current));  in proc_do_submiturb()
1744 	as->cred = get_current_cred();  in proc_do_submiturb()
1745 	snoop_urb(ps->dev, as->userurb, as->urb->pipe,  in proc_do_submiturb()
1746 			as->urb->transfer_buffer_length, 0, SUBMIT,  in proc_do_submiturb()
1749 		snoop_urb_data(as->urb, as->urb->transfer_buffer_length);  in proc_do_submiturb()
1751 	async_newpending(as);  in proc_do_submiturb()
1760 		as->bulk_addr = usb_endpoint_num(&ep->desc) |  in proc_do_submiturb()
1768 			as->bulk_status = AS_CONTINUATION;  in proc_do_submiturb()
1770 			ps->disabled_bulk_eps &= ~(1 << as->bulk_addr);  in proc_do_submiturb()
1775 		if (ps->disabled_bulk_eps & (1 << as->bulk_addr))  in proc_do_submiturb()
1778 			ret = usb_submit_urb(as->urb, GFP_ATOMIC);  in proc_do_submiturb()
1781 		ret = usb_submit_urb(as->urb, GFP_KERNEL);  in proc_do_submiturb()
1787 		snoop_urb(ps->dev, as->userurb, as->urb->pipe,  in proc_do_submiturb()
1789 		async_removepending(as);  in proc_do_submiturb()
1795 	if (as && as->usbm)  in proc_do_submiturb()
1796 		dec_usb_memory_use_count(as->usbm, &as->usbm->urb_use_count);  in proc_do_submiturb()
1799 	if (as)  in proc_do_submiturb()
1800 		free_async(as);  in proc_do_submiturb()
1819 	struct async *as;  in proc_unlinkurb()  local
1823 	as = async_getpending(ps, arg);  in proc_unlinkurb()
1824 	if (!as) {  in proc_unlinkurb()
1829 	urb = as->urb;  in proc_unlinkurb()
1851 static int processcompl(struct async *as, void __user * __user *arg)  in processcompl()  argument
1853 	struct urb *urb = as->urb;  in processcompl()
1854 	struct usbdevfs_urb __user *userurb = as->userurb;  in processcompl()
1855 	void __user *addr = as->userurb;  in processcompl()
1859 	if (as->userbuffer && urb->actual_length) {  in processcompl()
1860 		if (copy_urb_data_to_user(as->userbuffer, urb))  in processcompl()
1863 	if (put_user(as->status, &userurb->status))  in processcompl()
1892 	struct async *as = NULL;  in reap_as()  local
1898 		as = async_getcompleted(ps);  in reap_as()
1899 		if (as || !connected(ps))  in reap_as()
1909 	return as;  in reap_as()
1914 	struct async *as = reap_as(ps);  in proc_reapurb()  local
1916 	if (as) {  in proc_reapurb()
1919 		snoop(&ps->dev->dev, "reap %pK\n", as->userurb);  in proc_reapurb()
1920 		retval = processcompl(as, (void __user * __user *)arg);  in proc_reapurb()
1921 		free_async(as);  in proc_reapurb()
1932 	struct async *as;  in proc_reapurbnonblock()  local
1934 	as = async_getcompleted(ps);  in proc_reapurbnonblock()
1935 	if (as) {  in proc_reapurbnonblock()
1936 		snoop(&ps->dev->dev, "reap %pK\n", as->userurb);  in proc_reapurbnonblock()
1937 		retval = processcompl(as, (void __user * __user *)arg);  in proc_reapurbnonblock()
1938 		free_async(as);  in proc_reapurbnonblock()
2020 static int processcompl_compat(struct async *as, void __user * __user *arg)  in processcompl_compat()  argument
2022 	struct urb *urb = as->urb;  in processcompl_compat()
2023 	struct usbdevfs_urb32 __user *userurb = as->userurb;  in processcompl_compat()
2024 	void __user *addr = as->userurb;  in processcompl_compat()
2028 	if (as->userbuffer && urb->actual_length) {  in processcompl_compat()
2029 		if (copy_urb_data_to_user(as->userbuffer, urb))  in processcompl_compat()
2032 	if (put_user(as->status, &userurb->status))  in processcompl_compat()
2057 	struct async *as = reap_as(ps);  in proc_reapurb_compat()  local
2059 	if (as) {  in proc_reapurb_compat()
2062 		snoop(&ps->dev->dev, "reap %pK\n", as->userurb);  in proc_reapurb_compat()
2063 		retval = processcompl_compat(as, (void __user * __user *)arg);  in proc_reapurb_compat()
2064 		free_async(as);  in proc_reapurb_compat()
2075 	struct async *as;  in proc_reapurbnonblock_compat()  local
2077 	as = async_getcompleted(ps);  in proc_reapurbnonblock_compat()
2078 	if (as) {  in proc_reapurbnonblock_compat()
2079 		snoop(&ps->dev->dev, "reap %pK\n", as->userurb);  in proc_reapurbnonblock_compat()
2080 		retval = processcompl_compat(as, (void __user * __user *)arg);  in proc_reapurbnonblock_compat()
2081 		free_async(as);  in proc_reapurbnonblock_compat()