380 	struct async *as;  in alloc_async()  local
382 	as = kzalloc(sizeof(struct async), GFP_KERNEL);  in alloc_async()
383 	if (!as)  in alloc_async()
385 	as->urb = usb_alloc_urb(numisoframes, GFP_KERNEL);  in alloc_async()
386 	if (!as->urb) {  in alloc_async()
387 		kfree(as);  in alloc_async()
390 	return as;  in alloc_async()
393 static void free_async(struct async *as)  in free_async()  argument
397 	put_pid(as->pid);  in free_async()
398 	if (as->cred)  in free_async()
399 		put_cred(as->cred);  in free_async()
400 	for (i = 0; i < as->urb->num_sgs; i++) {  in free_async()
401 		if (sg_page(&as->urb->sg[i]))  in free_async()
402 			kfree(sg_virt(&as->urb->sg[i]));  in free_async()
405 	kfree(as->urb->sg);  in free_async()
406 	if (as->usbm == NULL)  in free_async()
407 		kfree(as->urb->transfer_buffer);  in free_async()
409 		dec_usb_memory_use_count(as->usbm, &as->usbm->urb_use_count);  in free_async()
411 	kfree(as->urb->setup_packet);  in free_async()
412 	usb_free_urb(as->urb);  in free_async()
413 	usbfs_decrease_memory_usage(as->mem_usage);  in free_async()
414 	kfree(as);  in free_async()
417 static void async_newpending(struct async *as)  in async_newpending()  argument
419 	struct usb_dev_state *ps = as->ps;  in async_newpending()
423 	list_add_tail(&as->asynclist, &ps->async_pending);  in async_newpending()
427 static void async_removepending(struct async *as)  in async_removepending()  argument
429 	struct usb_dev_state *ps = as->ps;  in async_removepending()
433 	list_del_init(&as->asynclist);  in async_removepending()
440 	struct async *as = NULL;  in async_getcompleted()  local
444 		as = list_entry(ps->async_completed.next, struct async,  in async_getcompleted()
446 		list_del_init(&as->asynclist);  in async_getcompleted()
449 	return as;  in async_getcompleted()
455 	struct async *as;  in async_getpending()  local
457 	list_for_each_entry(as, &ps->async_pending, asynclist)  in async_getpending()
458 		if (as->userurb == userurb) {  in async_getpending()
459 			list_del_init(&as->asynclist);  in async_getpending()
460 			return as;  in async_getpending()
567 	struct async *as;  in cancel_bulk_urbs()  local
574 	list_for_each_entry(as, &ps->async_pending, asynclist) {  in cancel_bulk_urbs()
575 		if (as->bulk_addr == bulk_addr) {  in cancel_bulk_urbs()
576 			if (as->bulk_status != AS_CONTINUATION)  in cancel_bulk_urbs()
578 			as->bulk_status = AS_UNLINK;  in cancel_bulk_urbs()
579 			as->bulk_addr = 0;  in cancel_bulk_urbs()
586 	list_for_each_entry_reverse(as, &ps->async_pending, asynclist) {  in cancel_bulk_urbs()
587 		if (as->bulk_status == AS_UNLINK) {  in cancel_bulk_urbs()
588 			as->bulk_status = 0;		/* Only once */  in cancel_bulk_urbs()
589 			urb = as->urb;  in cancel_bulk_urbs()
602 	struct async *as = urb->context;  in async_completed()  local
603 	struct usb_dev_state *ps = as->ps;  in async_completed()
611 	list_move_tail(&as->asynclist, &ps->async_completed);  in async_completed()
612 	as->status = urb->status;  in async_completed()
613 	signr = as->signr;  in async_completed()
615 		errno = as->status;  in async_completed()
616 		addr = as->userurb_sigval;  in async_completed()
617 		pid = get_pid(as->pid);  in async_completed()
618 		cred = get_cred(as->cred);  in async_completed()
621 	snoop_urb(urb->dev, as->userurb, urb->pipe, urb->actual_length,  in async_completed()
622 			as->status, COMPLETE, NULL, 0);  in async_completed()
626 	if (as->status < 0 && as->bulk_addr && as->status != -ECONNRESET &&  in async_completed()
627 			as->status != -ENOENT)  in async_completed()
628 		cancel_bulk_urbs(ps, as->bulk_addr);  in async_completed()
643 	struct async *as;  in destroy_async()  local
648 		as = list_last_entry(list, struct async, asynclist);  in destroy_async()
649 		list_del_init(&as->asynclist);  in destroy_async()
650 		urb = as->urb;  in destroy_async()
1072 	struct async *as;  in usbdev_release()  local
1095 	as = async_getcompleted(ps);  in usbdev_release()
1096 	while (as) {  in usbdev_release()
1097 		free_async(as);  in usbdev_release()
1098 		as = async_getcompleted(ps);  in usbdev_release()
1519 	struct async *as = NULL;  in proc_do_submiturb()  local
1674 	as = alloc_async(number_of_packets);  in proc_do_submiturb()
1675 	if (!as) {  in proc_do_submiturb()
1680 	as->usbm = find_memory_area(ps, uurb);  in proc_do_submiturb()
1681 	if (IS_ERR(as->usbm)) {  in proc_do_submiturb()
1682 		ret = PTR_ERR(as->usbm);  in proc_do_submiturb()
1683 		as->usbm = NULL;  in proc_do_submiturb()
1690 	if (as->usbm)  in proc_do_submiturb()
1694 	     (as->usbm ? 0 : uurb->buffer_length) +  in proc_do_submiturb()
1699 	as->mem_usage = u;  in proc_do_submiturb()
1702 		as->urb->sg = kmalloc_array(num_sgs,  in proc_do_submiturb()
1705 		if (!as->urb->sg) {  in proc_do_submiturb()
1709 		as->urb->num_sgs = num_sgs;  in proc_do_submiturb()
1710 		sg_init_table(as->urb->sg, as->urb->num_sgs);  in proc_do_submiturb()
1713 		for (i = 0; i < as->urb->num_sgs; i++) {  in proc_do_submiturb()
1720 			sg_set_buf(&as->urb->sg[i], buf, u);  in proc_do_submiturb()
1732 		if (as->usbm) {  in proc_do_submiturb()
1735 			as->urb->transfer_buffer = as->usbm->mem +  in proc_do_submiturb()
1736 					(uurb_start - as->usbm->vm_start);  in proc_do_submiturb()
1738 			as->urb->transfer_buffer = kmalloc(uurb->buffer_length,  in proc_do_submiturb()
1740 			if (!as->urb->transfer_buffer) {  in proc_do_submiturb()
1745 				if (copy_from_user(as->urb->transfer_buffer,  in proc_do_submiturb()
1758 				memset(as->urb->transfer_buffer, 0,  in proc_do_submiturb()
1763 	as->urb->dev = ps->dev;  in proc_do_submiturb()
1764 	as->urb->pipe = (uurb->type << 30) |  in proc_do_submiturb()
1781 	as->urb->transfer_flags = u;  in proc_do_submiturb()
1788 	as->urb->transfer_buffer_length = uurb->buffer_length;  in proc_do_submiturb()
1789 	as->urb->setup_packet = (unsigned char *)dr;  in proc_do_submiturb()
1791 	as->urb->start_frame = uurb->start_frame;  in proc_do_submiturb()
1792 	as->urb->number_of_packets = number_of_packets;  in proc_do_submiturb()
1793 	as->urb->stream_id = stream_id;  in proc_do_submiturb()
1799 			as->urb->interval = 1 <<  in proc_do_submiturb()
1802 			as->urb->interval = ep->desc.bInterval;  in proc_do_submiturb()
1805 	as->urb->context = as;  in proc_do_submiturb()
1806 	as->urb->complete = async_completed;  in proc_do_submiturb()
1808 		as->urb->iso_frame_desc[u].offset = totlen;  in proc_do_submiturb()
1809 		as->urb->iso_frame_desc[u].length = isopkt[u].length;  in proc_do_submiturb()
1814 	as->ps = ps;  in proc_do_submiturb()
1815 	as->userurb = arg;  in proc_do_submiturb()
1816 	as->userurb_sigval = userurb_sigval;  in proc_do_submiturb()
1817 	if (as->usbm) {  in proc_do_submiturb()
1820 		as->urb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;  in proc_do_submiturb()
1821 		as->urb->transfer_dma = as->usbm->dma_handle +  in proc_do_submiturb()
1822 				(uurb_start - as->usbm->vm_start);  in proc_do_submiturb()
1824 		as->userbuffer = uurb->buffer;  in proc_do_submiturb()
1825 	as->signr = uurb->signr;  in proc_do_submiturb()
1826 	as->ifnum = ifnum;  in proc_do_submiturb()
1827 	as->pid = get_pid(task_pid(current));  in proc_do_submiturb()
1828 	as->cred = get_current_cred();  in proc_do_submiturb()
1829 	snoop_urb(ps->dev, as->userurb, as->urb->pipe,  in proc_do_submiturb()
1830 			as->urb->transfer_buffer_length, 0, SUBMIT,  in proc_do_submiturb()
1833 		snoop_urb_data(as->urb, as->urb->transfer_buffer_length);  in proc_do_submiturb()
1835 	async_newpending(as);  in proc_do_submiturb()
1844 		as->bulk_addr = usb_endpoint_num(&ep->desc) |  in proc_do_submiturb()
1852 			as->bulk_status = AS_CONTINUATION;  in proc_do_submiturb()
1854 			ps->disabled_bulk_eps &= ~(1 << as->bulk_addr);  in proc_do_submiturb()
1859 		if (ps->disabled_bulk_eps & (1 << as->bulk_addr))  in proc_do_submiturb()
1862 			ret = usb_submit_urb(as->urb, GFP_ATOMIC);  in proc_do_submiturb()
1865 		ret = usb_submit_urb(as->urb, GFP_KERNEL);  in proc_do_submiturb()
1871 		snoop_urb(ps->dev, as->userurb, as->urb->pipe,  in proc_do_submiturb()
1873 		async_removepending(as);  in proc_do_submiturb()
1881 	if (as)  in proc_do_submiturb()
1882 		free_async(as);  in proc_do_submiturb()
1905 	struct async *as;  in proc_unlinkurb()  local
1909 	as = async_getpending(ps, arg);  in proc_unlinkurb()
1910 	if (!as) {  in proc_unlinkurb()
1915 	urb = as->urb;  in proc_unlinkurb()
1937 static int processcompl(struct async *as, void __user * __user *arg)  in processcompl()  argument
1939 	struct urb *urb = as->urb;  in processcompl()
1940 	struct usbdevfs_urb __user *userurb = as->userurb;  in processcompl()
1941 	void __user *addr = as->userurb;  in processcompl()
1945 	if (as->userbuffer && urb->actual_length) {  in processcompl()
1946 		if (copy_urb_data_to_user(as->userbuffer, urb))  in processcompl()
1949 	if (put_user(as->status, &userurb->status))  in processcompl()
1978 	struct async *as = NULL;  in reap_as()  local
1984 		as = async_getcompleted(ps);  in reap_as()
1985 		if (as || !connected(ps))  in reap_as()
1995 	return as;  in reap_as()
2000 	struct async *as = reap_as(ps);  in proc_reapurb()  local
2002 	if (as) {  in proc_reapurb()
2005 		snoop(&ps->dev->dev, "reap %px\n", as->userurb);  in proc_reapurb()
2006 		retval = processcompl(as, (void __user * __user *)arg);  in proc_reapurb()
2007 		free_async(as);  in proc_reapurb()
2018 	struct async *as;  in proc_reapurbnonblock()  local
2020 	as = async_getcompleted(ps);  in proc_reapurbnonblock()
2021 	if (as) {  in proc_reapurbnonblock()
2022 		snoop(&ps->dev->dev, "reap %px\n", as->userurb);  in proc_reapurbnonblock()
2023 		retval = processcompl(as, (void __user * __user *)arg);  in proc_reapurbnonblock()
2024 		free_async(as);  in proc_reapurbnonblock()
2108 static int processcompl_compat(struct async *as, void __user * __user *arg)  in processcompl_compat()  argument
2110 	struct urb *urb = as->urb;  in processcompl_compat()
2111 	struct usbdevfs_urb32 __user *userurb = as->userurb;  in processcompl_compat()
2112 	void __user *addr = as->userurb;  in processcompl_compat()
2116 	if (as->userbuffer && urb->actual_length) {  in processcompl_compat()
2117 		if (copy_urb_data_to_user(as->userbuffer, urb))  in processcompl_compat()
2120 	if (put_user(as->status, &userurb->status))  in processcompl_compat()
2145 	struct async *as = reap_as(ps);  in proc_reapurb_compat()  local
2147 	if (as) {  in proc_reapurb_compat()
2150 		snoop(&ps->dev->dev, "reap %px\n", as->userurb);  in proc_reapurb_compat()
2151 		retval = processcompl_compat(as, (void __user * __user *)arg);  in proc_reapurb_compat()
2152 		free_async(as);  in proc_reapurb_compat()
2163 	struct async *as;  in proc_reapurbnonblock_compat()  local
2165 	as = async_getcompleted(ps);  in proc_reapurbnonblock_compat()
2166 	if (as) {  in proc_reapurbnonblock_compat()
2167 		snoop(&ps->dev->dev, "reap %px\n", as->userurb);  in proc_reapurbnonblock_compat()
2168 		retval = processcompl_compat(as, (void __user * __user *)arg);  in proc_reapurbnonblock_compat()
2169 		free_async(as);  in proc_reapurbnonblock_compat()