400 	struct async *as;  in alloc_async()  local
402 	as = kzalloc(sizeof(struct async), GFP_KERNEL);  in alloc_async()
403 	if (!as)  in alloc_async()
405 	as->urb = usb_alloc_urb(numisoframes, GFP_KERNEL);  in alloc_async()
406 	if (!as->urb) {  in alloc_async()
407 		kfree(as);  in alloc_async()
410 	return as;  in alloc_async()
413 static void free_async(struct async *as)  in free_async()  argument
417 	put_pid(as->pid);  in free_async()
418 	if (as->cred)  in free_async()
419 		put_cred(as->cred);  in free_async()
420 	for (i = 0; i < as->urb->num_sgs; i++) {  in free_async()
421 		if (sg_page(&as->urb->sg[i]))  in free_async()
422 			kfree(sg_virt(&as->urb->sg[i]));  in free_async()
425 	kfree(as->urb->sg);  in free_async()
426 	if (as->usbm == NULL)  in free_async()
427 		kfree(as->urb->transfer_buffer);  in free_async()
429 		dec_usb_memory_use_count(as->usbm, &as->usbm->urb_use_count);  in free_async()
431 	kfree(as->urb->setup_packet);  in free_async()
432 	usb_free_urb(as->urb);  in free_async()
433 	usbfs_decrease_memory_usage(as->mem_usage);  in free_async()
434 	kfree(as);  in free_async()
437 static void async_newpending(struct async *as)  in async_newpending()  argument
439 	struct usb_dev_state *ps = as->ps;  in async_newpending()
443 	list_add_tail(&as->asynclist, &ps->async_pending);  in async_newpending()
447 static void async_removepending(struct async *as)  in async_removepending()  argument
449 	struct usb_dev_state *ps = as->ps;  in async_removepending()
453 	list_del_init(&as->asynclist);  in async_removepending()
460 	struct async *as = NULL;  in async_getcompleted()  local
464 		as = list_entry(ps->async_completed.next, struct async,  in async_getcompleted()
466 		list_del_init(&as->asynclist);  in async_getcompleted()
469 	return as;  in async_getcompleted()
475 	struct async *as;  in async_getpending()  local
477 	list_for_each_entry(as, &ps->async_pending, asynclist)  in async_getpending()
478 		if (as->userurb == userurb) {  in async_getpending()
479 			list_del_init(&as->asynclist);  in async_getpending()
480 			return as;  in async_getpending()
587 	struct async *as;  in cancel_bulk_urbs()  local
594 	list_for_each_entry(as, &ps->async_pending, asynclist) {  in cancel_bulk_urbs()
595 		if (as->bulk_addr == bulk_addr) {  in cancel_bulk_urbs()
596 			if (as->bulk_status != AS_CONTINUATION)  in cancel_bulk_urbs()
598 			as->bulk_status = AS_UNLINK;  in cancel_bulk_urbs()
599 			as->bulk_addr = 0;  in cancel_bulk_urbs()
606 	list_for_each_entry_reverse(as, &ps->async_pending, asynclist) {  in cancel_bulk_urbs()
607 		if (as->bulk_status == AS_UNLINK) {  in cancel_bulk_urbs()
608 			as->bulk_status = 0;		/* Only once */  in cancel_bulk_urbs()
609 			urb = as->urb;  in cancel_bulk_urbs()
622 	struct async *as = urb->context;  in async_completed()  local
623 	struct usb_dev_state *ps = as->ps;  in async_completed()
631 	list_move_tail(&as->asynclist, &ps->async_completed);  in async_completed()
632 	as->status = urb->status;  in async_completed()
633 	signr = as->signr;  in async_completed()
635 		errno = as->status;  in async_completed()
636 		addr = as->userurb_sigval;  in async_completed()
637 		pid = get_pid(as->pid);  in async_completed()
638 		cred = get_cred(as->cred);  in async_completed()
641 	snoop_urb(urb->dev, as->userurb, urb->pipe, urb->actual_length,  in async_completed()
642 			as->status, COMPLETE, NULL, 0);  in async_completed()
646 	if (as->status < 0 && as->bulk_addr && as->status != -ECONNRESET &&  in async_completed()
647 			as->status != -ENOENT)  in async_completed()
648 		cancel_bulk_urbs(ps, as->bulk_addr);  in async_completed()
663 	struct async *as;  in destroy_async()  local
668 		as = list_last_entry(list, struct async, asynclist);  in destroy_async()
669 		list_del_init(&as->asynclist);  in destroy_async()
670 		urb = as->urb;  in destroy_async()
1094 	struct async *as;  in usbdev_release()  local
1117 	as = async_getcompleted(ps);  in usbdev_release()
1118 	while (as) {  in usbdev_release()
1119 		free_async(as);  in usbdev_release()
1120 		as = async_getcompleted(ps);  in usbdev_release()
1622 	struct async *as = NULL;  in proc_do_submiturb()  local
1777 	as = alloc_async(number_of_packets);  in proc_do_submiturb()
1778 	if (!as) {  in proc_do_submiturb()
1783 	as->usbm = find_memory_area(ps, uurb);  in proc_do_submiturb()
1784 	if (IS_ERR(as->usbm)) {  in proc_do_submiturb()
1785 		ret = PTR_ERR(as->usbm);  in proc_do_submiturb()
1786 		as->usbm = NULL;  in proc_do_submiturb()
1793 	if (as->usbm)  in proc_do_submiturb()
1797 	     (as->usbm ? 0 : uurb->buffer_length) +  in proc_do_submiturb()
1802 	as->mem_usage = u;  in proc_do_submiturb()
1805 		as->urb->sg = kmalloc_array(num_sgs,  in proc_do_submiturb()
1808 		if (!as->urb->sg) {  in proc_do_submiturb()
1812 		as->urb->num_sgs = num_sgs;  in proc_do_submiturb()
1813 		sg_init_table(as->urb->sg, as->urb->num_sgs);  in proc_do_submiturb()
1816 		for (i = 0; i < as->urb->num_sgs; i++) {  in proc_do_submiturb()
1823 			sg_set_buf(&as->urb->sg[i], buf, u);  in proc_do_submiturb()
1835 		if (as->usbm) {  in proc_do_submiturb()
1838 			as->urb->transfer_buffer = as->usbm->mem +  in proc_do_submiturb()
1839 					(uurb_start - as->usbm->vm_start);  in proc_do_submiturb()
1841 			as->urb->transfer_buffer = kmalloc(uurb->buffer_length,  in proc_do_submiturb()
1843 			if (!as->urb->transfer_buffer) {  in proc_do_submiturb()
1848 				if (copy_from_user(as->urb->transfer_buffer,  in proc_do_submiturb()
1861 				memset(as->urb->transfer_buffer, 0,  in proc_do_submiturb()
1866 	as->urb->dev = ps->dev;  in proc_do_submiturb()
1867 	as->urb->pipe = (uurb->type << 30) |  in proc_do_submiturb()
1884 	as->urb->transfer_flags = u;  in proc_do_submiturb()
1891 	as->urb->transfer_buffer_length = uurb->buffer_length;  in proc_do_submiturb()
1892 	as->urb->setup_packet = (unsigned char *)dr;  in proc_do_submiturb()
1894 	as->urb->start_frame = uurb->start_frame;  in proc_do_submiturb()
1895 	as->urb->number_of_packets = number_of_packets;  in proc_do_submiturb()
1896 	as->urb->stream_id = stream_id;  in proc_do_submiturb()
1902 			as->urb->interval = 1 <<  in proc_do_submiturb()
1905 			as->urb->interval = ep->desc.bInterval;  in proc_do_submiturb()
1908 	as->urb->context = as;  in proc_do_submiturb()
1909 	as->urb->complete = async_completed;  in proc_do_submiturb()
1911 		as->urb->iso_frame_desc[u].offset = totlen;  in proc_do_submiturb()
1912 		as->urb->iso_frame_desc[u].length = isopkt[u].length;  in proc_do_submiturb()
1917 	as->ps = ps;  in proc_do_submiturb()
1918 	as->userurb = arg;  in proc_do_submiturb()
1919 	as->userurb_sigval = userurb_sigval;  in proc_do_submiturb()
1920 	if (as->usbm) {  in proc_do_submiturb()
1923 		as->urb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;  in proc_do_submiturb()
1924 		as->urb->transfer_dma = as->usbm->dma_handle +  in proc_do_submiturb()
1925 				(uurb_start - as->usbm->vm_start);  in proc_do_submiturb()
1927 		as->userbuffer = uurb->buffer;  in proc_do_submiturb()
1928 	as->signr = uurb->signr;  in proc_do_submiturb()
1929 	as->ifnum = ifnum;  in proc_do_submiturb()
1930 	as->pid = get_pid(task_pid(current));  in proc_do_submiturb()
1931 	as->cred = get_current_cred();  in proc_do_submiturb()
1932 	snoop_urb(ps->dev, as->userurb, as->urb->pipe,  in proc_do_submiturb()
1933 			as->urb->transfer_buffer_length, 0, SUBMIT,  in proc_do_submiturb()
1936 		snoop_urb_data(as->urb, as->urb->transfer_buffer_length);  in proc_do_submiturb()
1938 	async_newpending(as);  in proc_do_submiturb()
1947 		as->bulk_addr = usb_endpoint_num(&ep->desc) |  in proc_do_submiturb()
1955 			as->bulk_status = AS_CONTINUATION;  in proc_do_submiturb()
1957 			ps->disabled_bulk_eps &= ~(1 << as->bulk_addr);  in proc_do_submiturb()
1962 		if (ps->disabled_bulk_eps & (1 << as->bulk_addr))  in proc_do_submiturb()
1965 			ret = usb_submit_urb(as->urb, GFP_ATOMIC);  in proc_do_submiturb()
1968 		ret = usb_submit_urb(as->urb, GFP_KERNEL);  in proc_do_submiturb()
1974 		snoop_urb(ps->dev, as->userurb, as->urb->pipe,  in proc_do_submiturb()
1976 		async_removepending(as);  in proc_do_submiturb()
1984 	if (as)  in proc_do_submiturb()
1985 		free_async(as);  in proc_do_submiturb()
2008 	struct async *as;  in proc_unlinkurb()  local
2012 	as = async_getpending(ps, arg);  in proc_unlinkurb()
2013 	if (!as) {  in proc_unlinkurb()
2018 	urb = as->urb;  in proc_unlinkurb()
2040 static int processcompl(struct async *as, void __user * __user *arg)  in processcompl()  argument
2042 	struct urb *urb = as->urb;  in processcompl()
2043 	struct usbdevfs_urb __user *userurb = as->userurb;  in processcompl()
2044 	void __user *addr = as->userurb;  in processcompl()
2048 	if (as->userbuffer && urb->actual_length) {  in processcompl()
2049 		if (copy_urb_data_to_user(as->userbuffer, urb))  in processcompl()
2052 	if (put_user(as->status, &userurb->status))  in processcompl()
2081 	struct async *as = NULL;  in reap_as()  local
2087 		as = async_getcompleted(ps);  in reap_as()
2088 		if (as || !connected(ps))  in reap_as()
2098 	return as;  in reap_as()
2103 	struct async *as = reap_as(ps);  in proc_reapurb()  local
2105 	if (as) {  in proc_reapurb()
2108 		snoop(&ps->dev->dev, "reap %px\n", as->userurb);  in proc_reapurb()
2109 		retval = processcompl(as, (void __user * __user *)arg);  in proc_reapurb()
2110 		free_async(as);  in proc_reapurb()
2121 	struct async *as;  in proc_reapurbnonblock()  local
2123 	as = async_getcompleted(ps);  in proc_reapurbnonblock()
2124 	if (as) {  in proc_reapurbnonblock()
2125 		snoop(&ps->dev->dev, "reap %px\n", as->userurb);  in proc_reapurbnonblock()
2126 		retval = processcompl(as, (void __user * __user *)arg);  in proc_reapurbnonblock()
2127 		free_async(as);  in proc_reapurbnonblock()
2211 static int processcompl_compat(struct async *as, void __user * __user *arg)  in processcompl_compat()  argument
2213 	struct urb *urb = as->urb;  in processcompl_compat()
2214 	struct usbdevfs_urb32 __user *userurb = as->userurb;  in processcompl_compat()
2215 	void __user *addr = as->userurb;  in processcompl_compat()
2219 	if (as->userbuffer && urb->actual_length) {  in processcompl_compat()
2220 		if (copy_urb_data_to_user(as->userbuffer, urb))  in processcompl_compat()
2223 	if (put_user(as->status, &userurb->status))  in processcompl_compat()
2248 	struct async *as = reap_as(ps);  in proc_reapurb_compat()  local
2250 	if (as) {  in proc_reapurb_compat()
2253 		snoop(&ps->dev->dev, "reap %px\n", as->userurb);  in proc_reapurb_compat()
2254 		retval = processcompl_compat(as, (void __user * __user *)arg);  in proc_reapurb_compat()
2255 		free_async(as);  in proc_reapurb_compat()
2266 	struct async *as;  in proc_reapurbnonblock_compat()  local
2268 	as = async_getcompleted(ps);  in proc_reapurbnonblock_compat()
2269 	if (as) {  in proc_reapurbnonblock_compat()
2270 		snoop(&ps->dev->dev, "reap %px\n", as->userurb);  in proc_reapurbnonblock_compat()
2271 		retval = processcompl_compat(as, (void __user * __user *)arg);  in proc_reapurbnonblock_compat()
2272 		free_async(as);  in proc_reapurbnonblock_compat()