Merge git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/v4l-dvb

* git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/v4l-dvb: (98 commits)
  V4L/DVB (8549): mxl5007: Fix an error at include file
  V4L/DVB (8548): pwc: Fix compilation
  V4L/DVB (8546): add tuner-3036 and dpc7146 drivers to feature-removal-schedule.txt
  V4L/DVB (8546): saa7146: fix read from uninitialized memory
  V4L/DVB (8544): gspca: probe/open race.
  V4L/DVB (8543): em28xx: Rename #define for Compro VideoMate ForYou/Stereo
  V4L/DVB (8542): em28xx: AMD ATI TV Wonder HD 600 entry at cards struct is duplicated
  V4L/DVB (8541): em28xx: HVR-950 entry is duplicated.
  V4L/DVB (8540): em28xx-cards: Add Compro VideoMate ForYou/Stereo model
  V4L/DVB (8539): em28xx-cards: New supported IDs for analog models
  V4L/DVB (8538): em28xx-cards: Add GrabBeeX+ USB2800 model
  V4L/DVB (8534): remove select's of FW_LOADER
  V4L/DVB (8522): videodev2: Fix merge conflict
  V4L/DVB (8532): mxl5007t: remove excessive locks
  V4L/DVB (8531): mxl5007t: move i2c gate handling outside of mutex protected code blocks
  V4L/DVB (8530): au0828: add support for new revision of HVR950Q
  V4L/DVB (8529): mxl5007t: enable _init and _sleep power management functionality
  V4L/DVB (8528): add support for MaxLinear MxL5007T silicon tuner
  V4L/DVB (8526): saa7146: fix VIDIOC_ENUM_FMT
  V4L/DVB (8525): fix a few assorted spelling mistakes.
  ...

1 files changed, 77 insertions, 53 deletions

diff --git a/drivers/media/video/s2255drv.c b/drivers/media/video/s2255drv.c
index 04eb2c3fabd8..b1d09d8e2b85 100644
--- a/drivers/media/video/s2255drv.c
+++ b/drivers/media/video/s2255drv.c
@@ -47,8 +47,10 @@
 #include <linux/mutex.h>
 #include <linux/videodev2.h>
 #include <linux/version.h>
+#include <linux/mm.h>
 #include <media/videobuf-vmalloc.h>
 #include <media/v4l2-common.h>
+#include <media/v4l2-ioctl.h>
 #include <linux/vmalloc.h>
 #include <linux/usb.h>
 
@@ -184,6 +186,7 @@ struct s2255_dmaqueue {
 #define S2255_FW_LOADED_DSPWAIT 1
 #define S2255_FW_SUCCESS        2
 #define S2255_FW_FAILED         3
+#define S2255_FW_DISCONNECTING  4
 
 struct s2255_fw {
         int                   fw_loaded;
@@ -263,7 +266,6 @@ struct s2255_buffer {
 
 struct s2255_fh {
         struct s2255_dev        *dev;
-        unsigned int            resources;
         const struct s2255_fmt  *fmt;
         unsigned int            width;
         unsigned int            height;
@@ -273,14 +275,9 @@ struct s2255_fh {
         /* mode below is the desired mode.
            mode in s2255_dev is the current mode that was last set */
         struct s2255_mode       mode;
+        int                     resources[MAX_CHANNELS];
 };
 
-/*
- * TODO: fixme S2255_MAX_USERS. Do not limit open driver handles.
- * Limit V4L to one stream at a time.
- */
-#define S2255_MAX_USERS         1
-
 #define CUR_USB_FWVER   774     /* current cypress EEPROM firmware version */
 #define S2255_MAJOR_VERSION     1
 #define S2255_MINOR_VERSION     13
@@ -476,10 +473,9 @@ static void s2255_timer(unsigned long user_data)
         dprintk(100, "s2255 timer\n");
         if (usb_submit_urb(data->fw_urb, GFP_ATOMIC) < 0) {
                 printk(KERN_ERR "s2255: can't submit urb\n");
-                if (data->fw) {
-                        release_firmware(data->fw);
-                        data->fw = NULL;
-                }
+                atomic_set(&data->fw_state, S2255_FW_FAILED);
+                /* wake up anything waiting for the firmware */
+                wake_up(&data->wait_fw);
                 return;
         }
 }
@@ -509,13 +505,18 @@ static void s2255_fwchunk_complete(struct urb *urb)
         struct usb_device *udev = urb->dev;
         int len;
         dprintk(100, "udev %p urb %p", udev, urb);
-        /* TODO: fixme.  reflect change in status */
         if (urb->status) {
                 dev_err(&udev->dev, "URB failed with status %d", urb->status);
+                atomic_set(&data->fw_state, S2255_FW_FAILED);
+                /* wake up anything waiting for the firmware */
+                wake_up(&data->wait_fw);
                 return;
         }
         if (data->fw_urb == NULL) {
-                dev_err(&udev->dev, "early disconncect\n");
+                dev_err(&udev->dev, "s2255 disconnected\n");
+                atomic_set(&data->fw_state, S2255_FW_FAILED);
+                /* wake up anything waiting for the firmware */
+                wake_up(&data->wait_fw);
                 return;
         }
 #define CHUNK_SIZE 512
@@ -789,7 +790,8 @@ static int res_get(struct s2255_dev *dev, struct s2255_fh *fh)
         }
         /* it's free, grab it */
         dev->resources[fh->channel] = 1;
-        dprintk(1, "res: get\n");
+        fh->resources[fh->channel] = 1;
+        dprintk(1, "s2255: res: get\n");
         mutex_unlock(&dev->lock);
         return 1;
 }
@@ -799,9 +801,18 @@ static int res_locked(struct s2255_dev *dev, struct s2255_fh *fh)
         return dev->resources[fh->channel];
 }
 
+static int res_check(struct s2255_fh *fh)
+{
+        return fh->resources[fh->channel];
+}
+
+
 static void res_free(struct s2255_dev *dev, struct s2255_fh *fh)
 {
+        mutex_lock(&dev->lock);
         dev->resources[fh->channel] = 0;
+        fh->resources[fh->channel] = 0;
+        mutex_unlock(&dev->lock);
         dprintk(1, "res: put\n");
 }
 
@@ -1232,7 +1243,7 @@ static int vidioc_streamon(struct file *file, void *priv, enum v4l2_buf_type i)
         }
 
         if (!res_get(dev, fh)) {
-                dev_err(&dev->udev->dev, "res get busy\n");
+                dev_err(&dev->udev->dev, "s2255: stream busy\n");
                 return -EBUSY;
         }
 
@@ -1288,8 +1299,10 @@ static int vidioc_streamoff(struct file *file, void *priv, enum v4l2_buf_type i)
         }
         s2255_stop_acquire(dev, fh->channel);
         res = videobuf_streamoff(&fh->vb_vidq);
+        if (res < 0)
+                return res;
         res_free(dev, fh);
-        return res;
+        return 0;
 }
 
 static int vidioc_s_std(struct file *file, void *priv, v4l2_std_id *i)
@@ -1462,12 +1475,7 @@ static int s2255_open(struct inode *inode, struct file *file)
         mutex_lock(&dev->open_lock);
 
         dev->users[cur_channel]++;
-        if (dev->users[cur_channel] > S2255_MAX_USERS) {
-                dev->users[cur_channel]--;
-                mutex_unlock(&dev->open_lock);
-                printk(KERN_INFO "s2255drv: too many open handles!\n");
-                return -EBUSY;
-        }
+        dprintk(4, "s2255: open_handles %d\n", dev->users[cur_channel]);
 
         if (atomic_read(&dev->fw_data->fw_state) == S2255_FW_FAILED) {
                 err("2255 firmware load failed. retrying.\n");
@@ -1478,7 +1486,8 @@ static int s2255_open(struct inode *inode, struct file *file)
                                    msecs_to_jiffies(S2255_LOAD_TIMEOUT));
                 if (atomic_read(&dev->fw_data->fw_state)
                     != S2255_FW_SUCCESS) {
-                        printk(KERN_INFO "2255 FW load failed after 2 tries\n");
+                        printk(KERN_INFO "2255 FW load failed.\n");
+                        dev->users[cur_channel]--;
                         mutex_unlock(&dev->open_lock);
                         return -EFAULT;
                 }
@@ -1494,6 +1503,7 @@ static int s2255_open(struct inode *inode, struct file *file)
                     != S2255_FW_SUCCESS) {
                         printk(KERN_INFO "2255 firmware not loaded"
                                "try again\n");
+                        dev->users[cur_channel]--;
                         mutex_unlock(&dev->open_lock);
                         return -EBUSY;
                 }
@@ -1502,6 +1512,7 @@ static int s2255_open(struct inode *inode, struct file *file)
         /* allocate + initialize per filehandle data */
         fh = kzalloc(sizeof(*fh), GFP_KERNEL);
         if (NULL == fh) {
+                dev->users[cur_channel]--;
                 mutex_unlock(&dev->open_lock);
                 return -ENOMEM;
         }
@@ -1561,44 +1572,48 @@ static void s2255_destroy(struct kref *kref)
                 printk(KERN_ERR "s2255drv: kref problem\n");
                 return;
         }
+
+        /*
+         * Wake up any firmware load waiting (only done in .open,
+         * which holds the open_lock mutex)
+         */
+        atomic_set(&dev->fw_data->fw_state, S2255_FW_DISCONNECTING);
+        wake_up(&dev->fw_data->wait_fw);
+
         /* prevent s2255_disconnect from racing s2255_open */
         mutex_lock(&dev->open_lock);
         s2255_exit_v4l(dev);
-        /* device unregistered so no longer possible to open. open_mutex
-           can be unlocked */
+        /*
+         * device unregistered so no longer possible to open. open_mutex
+         *  can be unlocked and timers deleted afterwards.
+         */
         mutex_unlock(&dev->open_lock);
 
         /* board shutdown stops the read pipe if it is running */
         s2255_board_shutdown(dev);
 
         /* make sure firmware still not trying to load */
+        del_timer(&dev->timer);  /* only started in .probe and .open */
+
         if (dev->fw_data->fw_urb) {
                 dprintk(2, "kill fw_urb\n");
                 usb_kill_urb(dev->fw_data->fw_urb);
                 usb_free_urb(dev->fw_data->fw_urb);
                 dev->fw_data->fw_urb = NULL;
         }
+
         /*
-         * TODO: fixme(above, below): potentially leaving timers alive.
-         *                            do not ignore timeout below if
-         *                            it occurs.
+         * delete the dsp_wait timer, which sets the firmware
+         * state on completion.  This is done before fw_data
+         * is freed below.
          */
 
-        /* make sure we aren't waiting for the DSP */
-        if (atomic_read(&dev->fw_data->fw_state) == S2255_FW_LOADED_DSPWAIT) {
-                /* if we are, wait for the wakeup for fw_success or timeout */
-                wait_event_timeout(dev->fw_data->wait_fw,
-                                   (atomic_read(&dev->fw_data->fw_state)
-                                   == S2255_FW_SUCCESS),
-                                   msecs_to_jiffies(S2255_LOAD_TIMEOUT));
-        }
+        del_timer(&dev->fw_data->dsp_wait); /* only started in .open */
 
-        if (dev->fw_data) {
-                if (dev->fw_data->fw)
-                        release_firmware(dev->fw_data->fw);
-                kfree(dev->fw_data->pfw_data);
-                kfree(dev->fw_data);
-        }
+        if (dev->fw_data->fw)
+                release_firmware(dev->fw_data->fw);
+        kfree(dev->fw_data->pfw_data);
+        kfree(dev->fw_data);
 
         usb_put_dev(dev->udev);
         dprintk(1, "%s", __func__);
@@ -1615,17 +1630,23 @@ static int s2255_close(struct inode *inode, struct file *file)
 
         mutex_lock(&dev->open_lock);
 
-        if (dev->b_acquire[fh->channel])
-                s2255_stop_acquire(dev, fh->channel);
-        res_free(dev, fh);
+        /* turn off stream */
+        if (res_check(fh)) {
+                if (dev->b_acquire[fh->channel])
+                        s2255_stop_acquire(dev, fh->channel);
+                videobuf_streamoff(&fh->vb_vidq);
+                res_free(dev, fh);
+        }
+
         videobuf_mmap_free(&fh->vb_vidq);
-        kfree(fh);
         dev->users[fh->channel]--;
+
         mutex_unlock(&dev->open_lock);
 
         kref_put(&dev->kref, s2255_destroy);
         dprintk(1, "s2255: close called (minor=%d, users=%d)\n",
                 minor, dev->users[fh->channel]);
+        kfree(fh);
         return 0;
 }
 
@@ -1658,12 +1679,7 @@ static const struct file_operations s2255_fops_v4l = {
         .llseek = no_llseek,
 };
 
-static struct video_device template = {
-        .name = "s2255v",
-        .type = VID_TYPE_CAPTURE,
-        .fops = &s2255_fops_v4l,
-        .minor = -1,
-        .release = video_device_release,
+static const struct v4l2_ioctl_ops s2255_ioctl_ops = {
         .vidioc_querycap = vidioc_querycap,
         .vidioc_enum_fmt_vid_cap = vidioc_enum_fmt_vid_cap,
         .vidioc_g_fmt_vid_cap = vidioc_g_fmt_vid_cap,
@@ -1685,6 +1701,14 @@ static struct video_device template = {
 #ifdef CONFIG_VIDEO_V4L1_COMPAT
         .vidiocgmbuf = vidioc_cgmbuf,
 #endif
+};
+
+static struct video_device template = {
+        .name = "s2255v",
+        .fops = &s2255_fops_v4l,
+        .ioctl_ops = &s2255_ioctl_ops,
+        .minor = -1,
+        .release = video_device_release,
         .tvnorms = S2255_NORMS,
         .current_norm = V4L2_STD_NTSC_M,
 };
@@ -1706,7 +1730,7 @@ static int s2255_probe_v4l(struct s2255_dev *dev)
                 /* register 4 video devices */
                 dev->vdev[i] = video_device_alloc();
                 memcpy(dev->vdev[i], &template, sizeof(struct video_device));
-                dev->vdev[i]->dev = &dev->interface->dev;
+                dev->vdev[i]->parent = &dev->interface->dev;
                 if (video_nr == -1)
                         ret = video_register_device(dev->vdev[i],
                                                     VFL_TYPE_GRABBER,