380 	struct async *as;  in alloc_async()  local
382 	as = kzalloc(sizeof(struct async), GFP_KERNEL);  in alloc_async()
383 	if (!as)  in alloc_async()
385 	as->urb = usb_alloc_urb(numisoframes, GFP_KERNEL);  in alloc_async()
386 	if (!as->urb) {  in alloc_async()
387 		kfree(as);  in alloc_async()
390 	return as;  in alloc_async()
393 static void free_async(struct async *as)  in free_async()  argument
397 	put_pid(as->pid);  in free_async()
398 	if (as->cred)  in free_async()
399 		put_cred(as->cred);  in free_async()
400 	for (i = 0; i < as->urb->num_sgs; i++) {  in free_async()
401 		if (sg_page(&as->urb->sg[i]))  in free_async()
402 			kfree(sg_virt(&as->urb->sg[i]));  in free_async()
405 	kfree(as->urb->sg);  in free_async()
406 	if (as->usbm == NULL)  in free_async()
407 		kfree(as->urb->transfer_buffer);  in free_async()
409 		dec_usb_memory_use_count(as->usbm, &as->usbm->urb_use_count);  in free_async()
411 	kfree(as->urb->setup_packet);  in free_async()
412 	usb_free_urb(as->urb);  in free_async()
413 	usbfs_decrease_memory_usage(as->mem_usage);  in free_async()
414 	kfree(as);  in free_async()
417 static void async_newpending(struct async *as)  in async_newpending()  argument
419 	struct usb_dev_state *ps = as->ps;  in async_newpending()
423 	list_add_tail(&as->asynclist, &ps->async_pending);  in async_newpending()
427 static void async_removepending(struct async *as)  in async_removepending()  argument
429 	struct usb_dev_state *ps = as->ps;  in async_removepending()
433 	list_del_init(&as->asynclist);  in async_removepending()
440 	struct async *as = NULL;  in async_getcompleted()  local
444 		as = list_entry(ps->async_completed.next, struct async,  in async_getcompleted()
446 		list_del_init(&as->asynclist);  in async_getcompleted()
449 	return as;  in async_getcompleted()
455 	struct async *as;  in async_getpending()  local
457 	list_for_each_entry(as, &ps->async_pending, asynclist)  in async_getpending()
458 		if (as->userurb == userurb) {  in async_getpending()
459 			list_del_init(&as->asynclist);  in async_getpending()
460 			return as;  in async_getpending()
567 	struct async *as;  in cancel_bulk_urbs()  local
574 	list_for_each_entry(as, &ps->async_pending, asynclist) {  in cancel_bulk_urbs()
575 		if (as->bulk_addr == bulk_addr) {  in cancel_bulk_urbs()
576 			if (as->bulk_status != AS_CONTINUATION)  in cancel_bulk_urbs()
578 			as->bulk_status = AS_UNLINK;  in cancel_bulk_urbs()
579 			as->bulk_addr = 0;  in cancel_bulk_urbs()
586 	list_for_each_entry_reverse(as, &ps->async_pending, asynclist) {  in cancel_bulk_urbs()
587 		if (as->bulk_status == AS_UNLINK) {  in cancel_bulk_urbs()
588 			as->bulk_status = 0;		/* Only once */  in cancel_bulk_urbs()
589 			urb = as->urb;  in cancel_bulk_urbs()
602 	struct async *as = urb->context;  in async_completed()  local
603 	struct usb_dev_state *ps = as->ps;  in async_completed()
611 	list_move_tail(&as->asynclist, &ps->async_completed);  in async_completed()
612 	as->status = urb->status;  in async_completed()
613 	signr = as->signr;  in async_completed()
615 		errno = as->status;  in async_completed()
616 		addr = as->userurb_sigval;  in async_completed()
617 		pid = get_pid(as->pid);  in async_completed()
618 		cred = get_cred(as->cred);  in async_completed()
621 	snoop_urb(urb->dev, as->userurb, urb->pipe, urb->actual_length,  in async_completed()
622 			as->status, COMPLETE, NULL, 0);  in async_completed()
626 	if (as->status < 0 && as->bulk_addr && as->status != -ECONNRESET &&  in async_completed()
627 			as->status != -ENOENT)  in async_completed()
628 		cancel_bulk_urbs(ps, as->bulk_addr);  in async_completed()
643 	struct async *as;  in destroy_async()  local
648 		as = list_last_entry(list, struct async, asynclist);  in destroy_async()
649 		list_del_init(&as->asynclist);  in destroy_async()
650 		urb = as->urb;  in destroy_async()
1072 	struct async *as;  in usbdev_release()  local
1095 	as = async_getcompleted(ps);  in usbdev_release()
1096 	while (as) {  in usbdev_release()
1097 		free_async(as);  in usbdev_release()
1098 		as = async_getcompleted(ps);  in usbdev_release()
1514 	struct async *as = NULL;  in proc_do_submiturb()  local
1669 	as = alloc_async(number_of_packets);  in proc_do_submiturb()
1670 	if (!as) {  in proc_do_submiturb()
1675 	as->usbm = find_memory_area(ps, uurb);  in proc_do_submiturb()
1676 	if (IS_ERR(as->usbm)) {  in proc_do_submiturb()
1677 		ret = PTR_ERR(as->usbm);  in proc_do_submiturb()
1678 		as->usbm = NULL;  in proc_do_submiturb()
1685 	if (as->usbm)  in proc_do_submiturb()
1689 	     (as->usbm ? 0 : uurb->buffer_length) +  in proc_do_submiturb()
1694 	as->mem_usage = u;  in proc_do_submiturb()
1697 		as->urb->sg = kmalloc_array(num_sgs,  in proc_do_submiturb()
1700 		if (!as->urb->sg) {  in proc_do_submiturb()
1704 		as->urb->num_sgs = num_sgs;  in proc_do_submiturb()
1705 		sg_init_table(as->urb->sg, as->urb->num_sgs);  in proc_do_submiturb()
1708 		for (i = 0; i < as->urb->num_sgs; i++) {  in proc_do_submiturb()
1715 			sg_set_buf(&as->urb->sg[i], buf, u);  in proc_do_submiturb()
1727 		if (as->usbm) {  in proc_do_submiturb()
1730 			as->urb->transfer_buffer = as->usbm->mem +  in proc_do_submiturb()
1731 					(uurb_start - as->usbm->vm_start);  in proc_do_submiturb()
1733 			as->urb->transfer_buffer = kmalloc(uurb->buffer_length,  in proc_do_submiturb()
1735 			if (!as->urb->transfer_buffer) {  in proc_do_submiturb()
1740 				if (copy_from_user(as->urb->transfer_buffer,  in proc_do_submiturb()
1753 				memset(as->urb->transfer_buffer, 0,  in proc_do_submiturb()
1758 	as->urb->dev = ps->dev;  in proc_do_submiturb()
1759 	as->urb->pipe = (uurb->type << 30) |  in proc_do_submiturb()
1776 	as->urb->transfer_flags = u;  in proc_do_submiturb()
1783 	as->urb->transfer_buffer_length = uurb->buffer_length;  in proc_do_submiturb()
1784 	as->urb->setup_packet = (unsigned char *)dr;  in proc_do_submiturb()
1786 	as->urb->start_frame = uurb->start_frame;  in proc_do_submiturb()
1787 	as->urb->number_of_packets = number_of_packets;  in proc_do_submiturb()
1788 	as->urb->stream_id = stream_id;  in proc_do_submiturb()
1794 			as->urb->interval = 1 <<  in proc_do_submiturb()
1797 			as->urb->interval = ep->desc.bInterval;  in proc_do_submiturb()
1800 	as->urb->context = as;  in proc_do_submiturb()
1801 	as->urb->complete = async_completed;  in proc_do_submiturb()
1803 		as->urb->iso_frame_desc[u].offset = totlen;  in proc_do_submiturb()
1804 		as->urb->iso_frame_desc[u].length = isopkt[u].length;  in proc_do_submiturb()
1809 	as->ps = ps;  in proc_do_submiturb()
1810 	as->userurb = arg;  in proc_do_submiturb()
1811 	as->userurb_sigval = userurb_sigval;  in proc_do_submiturb()
1812 	if (as->usbm) {  in proc_do_submiturb()
1815 		as->urb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;  in proc_do_submiturb()
1816 		as->urb->transfer_dma = as->usbm->dma_handle +  in proc_do_submiturb()
1817 				(uurb_start - as->usbm->vm_start);  in proc_do_submiturb()
1819 		as->userbuffer = uurb->buffer;  in proc_do_submiturb()
1820 	as->signr = uurb->signr;  in proc_do_submiturb()
1821 	as->ifnum = ifnum;  in proc_do_submiturb()
1822 	as->pid = get_pid(task_pid(current));  in proc_do_submiturb()
1823 	as->cred = get_current_cred();  in proc_do_submiturb()
1824 	snoop_urb(ps->dev, as->userurb, as->urb->pipe,  in proc_do_submiturb()
1825 			as->urb->transfer_buffer_length, 0, SUBMIT,  in proc_do_submiturb()
1828 		snoop_urb_data(as->urb, as->urb->transfer_buffer_length);  in proc_do_submiturb()
1830 	async_newpending(as);  in proc_do_submiturb()
1839 		as->bulk_addr = usb_endpoint_num(&ep->desc) |  in proc_do_submiturb()
1847 			as->bulk_status = AS_CONTINUATION;  in proc_do_submiturb()
1849 			ps->disabled_bulk_eps &= ~(1 << as->bulk_addr);  in proc_do_submiturb()
1854 		if (ps->disabled_bulk_eps & (1 << as->bulk_addr))  in proc_do_submiturb()
1857 			ret = usb_submit_urb(as->urb, GFP_ATOMIC);  in proc_do_submiturb()
1860 		ret = usb_submit_urb(as->urb, GFP_KERNEL);  in proc_do_submiturb()
1866 		snoop_urb(ps->dev, as->userurb, as->urb->pipe,  in proc_do_submiturb()
1868 		async_removepending(as);  in proc_do_submiturb()
1876 	if (as)  in proc_do_submiturb()
1877 		free_async(as);  in proc_do_submiturb()
1900 	struct async *as;  in proc_unlinkurb()  local
1904 	as = async_getpending(ps, arg);  in proc_unlinkurb()
1905 	if (!as) {  in proc_unlinkurb()
1910 	urb = as->urb;  in proc_unlinkurb()
1932 static int processcompl(struct async *as, void __user * __user *arg)  in processcompl()  argument
1934 	struct urb *urb = as->urb;  in processcompl()
1935 	struct usbdevfs_urb __user *userurb = as->userurb;  in processcompl()
1936 	void __user *addr = as->userurb;  in processcompl()
1940 	if (as->userbuffer && urb->actual_length) {  in processcompl()
1941 		if (copy_urb_data_to_user(as->userbuffer, urb))  in processcompl()
1944 	if (put_user(as->status, &userurb->status))  in processcompl()
1973 	struct async *as = NULL;  in reap_as()  local
1979 		as = async_getcompleted(ps);  in reap_as()
1980 		if (as || !connected(ps))  in reap_as()
1990 	return as;  in reap_as()
1995 	struct async *as = reap_as(ps);  in proc_reapurb()  local
1997 	if (as) {  in proc_reapurb()
2000 		snoop(&ps->dev->dev, "reap %px\n", as->userurb);  in proc_reapurb()
2001 		retval = processcompl(as, (void __user * __user *)arg);  in proc_reapurb()
2002 		free_async(as);  in proc_reapurb()
2013 	struct async *as;  in proc_reapurbnonblock()  local
2015 	as = async_getcompleted(ps);  in proc_reapurbnonblock()
2016 	if (as) {  in proc_reapurbnonblock()
2017 		snoop(&ps->dev->dev, "reap %px\n", as->userurb);  in proc_reapurbnonblock()
2018 		retval = processcompl(as, (void __user * __user *)arg);  in proc_reapurbnonblock()
2019 		free_async(as);  in proc_reapurbnonblock()
2103 static int processcompl_compat(struct async *as, void __user * __user *arg)  in processcompl_compat()  argument
2105 	struct urb *urb = as->urb;  in processcompl_compat()
2106 	struct usbdevfs_urb32 __user *userurb = as->userurb;  in processcompl_compat()
2107 	void __user *addr = as->userurb;  in processcompl_compat()
2111 	if (as->userbuffer && urb->actual_length) {  in processcompl_compat()
2112 		if (copy_urb_data_to_user(as->userbuffer, urb))  in processcompl_compat()
2115 	if (put_user(as->status, &userurb->status))  in processcompl_compat()
2140 	struct async *as = reap_as(ps);  in proc_reapurb_compat()  local
2142 	if (as) {  in proc_reapurb_compat()
2145 		snoop(&ps->dev->dev, "reap %px\n", as->userurb);  in proc_reapurb_compat()
2146 		retval = processcompl_compat(as, (void __user * __user *)arg);  in proc_reapurb_compat()
2147 		free_async(as);  in proc_reapurb_compat()
2158 	struct async *as;  in proc_reapurbnonblock_compat()  local
2160 	as = async_getcompleted(ps);  in proc_reapurbnonblock_compat()
2161 	if (as) {  in proc_reapurbnonblock_compat()
2162 		snoop(&ps->dev->dev, "reap %px\n", as->userurb);  in proc_reapurbnonblock_compat()
2163 		retval = processcompl_compat(as, (void __user * __user *)arg);  in proc_reapurbnonblock_compat()
2164 		free_async(as);  in proc_reapurbnonblock_compat()