lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <201012301406.46257.hverkuil@xs4all.nl>
Date:	Thu, 30 Dec 2010 14:06:45 +0100
From:	Hans Verkuil <hverkuil@...all.nl>
To:	manjunatha_halli@...com
Cc:	mchehab@...radead.org, linux-kernel@...r.kernel.org,
	linux-media@...r.kernel.org
Subject: Re: [RFC V8 3/7] drivers:media:radio: wl128x: fmdrv_common sources

Hi Manjunatha,

Below is a review of this code. There is a lot that can be improved here and
I'll give some code examples on how to do it.

On Thursday, December 30, 2010 12:11:43 manjunatha_halli@...com wrote:
> From: Manjunatha Halli <manjunatha_halli@...com>
> 
> These are the sources for the common interfaces required by the
> FM V4L2 driver for TI WL127x and WL128x chips.
> 
> These implement the FM channel-8 protocol communication with the
> chip. This makes use of the Shared Transport as its transport.
> 
> Signed-off-by: Manjunatha Halli <manjunatha_halli@...com>
> ---
>  drivers/media/radio/wl128x/fmdrv_common.c | 1970 +++++++++++++++++++++++++++++
>  drivers/media/radio/wl128x/fmdrv_common.h |  402 ++++++
>  2 files changed, 2372 insertions(+), 0 deletions(-)
>  create mode 100644 drivers/media/radio/wl128x/fmdrv_common.c
>  create mode 100644 drivers/media/radio/wl128x/fmdrv_common.h
> 
> diff --git a/drivers/media/radio/wl128x/fmdrv_common.c b/drivers/media/radio/wl128x/fmdrv_common.c
> new file mode 100644
> index 0000000..874dbd8
> --- /dev/null
> +++ b/drivers/media/radio/wl128x/fmdrv_common.c
> @@ -0,0 +1,1970 @@
> +/*
> + *  FM Driver for Connectivity chip of Texas Instruments.
> + *
> + *  This sub-module of FM driver is common for FM RX and TX
> + *  functionality. This module is responsible for:
> + *  1) Forming group of Channel-8 commands to perform particular
> + *     functionality (eg., frequency set require more than
> + *     one Channel-8 command to be sent to the chip).
> + *  2) Sending each Channel-8 command to the chip and reading
> + *     response back over Shared Transport.
> + *  3) Managing TX and RX Queues and Tasklets.
> + *  4) Handling FM Interrupt packet and taking appropriate action.
> + *  5) Loading FM firmware to the chip (common, FM TX, and FM RX
> + *     firmware files based on mode selection)
> + *
> + *  Copyright (C) 2010 Texas Instruments
> + *  Author: Raja Mani <raja_mani@...com>
> + *
> + *  This program is free software; you can redistribute it and/or modify
> + *  it under the terms of the GNU General Public License version 2 as
> + *  published by the Free Software Foundation.
> + *
> + *  This program is distributed in the hope that it will be useful,
> + *  but WITHOUT ANY WARRANTY; without even the implied warranty of
> + *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
> + *  GNU General Public License for more details.
> + *
> + *  You should have received a copy of the GNU General Public License
> + *  along with this program; if not, write to the Free Software
> + *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
> + *
> + */
> +
> +#include <linux/module.h>
> +#include <linux/firmware.h>
> +#include <linux/delay.h>
> +#include "fmdrv.h"
> +#include "fmdrv_v4l2.h"
> +#include "fmdrv_common.h"
> +#include <linux/ti_wilink_st.h>
> +#include "fmdrv_rx.h"
> +#include "fmdrv_tx.h"
> +
> +/* Region info */
> +static struct region_info region_configs[] = {
> +	/* Europe/US */
> +	{
> +	 .channel_spacing = FM_CHANNEL_SPACING_200KHZ * FM_FREQ_MUL,
> +	 .bottom_frequency = 87500,	/* 87.5 MHz */
> +	 .top_frequency = 108000,	/* 108 MHz */
> +	 .region_index = 0,
> +	 },
> +	/* Japan */
> +	{
> +	 .channel_spacing = FM_CHANNEL_SPACING_200KHZ * FM_FREQ_MUL,
> +	 .bottom_frequency = 76000,	/* 76 MHz */
> +	 .top_frequency = 90000,	/* 90 MHz */
> +	 .region_index = 1,
> +	 },
> +};
> +
> +/* Band selection */
> +static unsigned char default_radio_region;	/* Europe/US */
> +module_param(default_radio_region, byte, 0);
> +MODULE_PARM_DESC(default_radio_region, "Region: 0=Europe/US, 1=Japan");
> +
> +/* RDS buffer blocks */
> +static unsigned int default_rds_buf = 300;
> +module_param(default_rds_buf, uint, 0444);
> +MODULE_PARM_DESC(rds_buf, "RDS buffer entries");
> +
> +/* Radio Nr */
> +static int radio_nr = -1;
> +module_param(radio_nr, int, 0444);
> +MODULE_PARM_DESC(radio_nr, "Radio Nr");
> +
> +/* FM irq handlers forward declaration */

Don't use forward declarations, instead just move these functions forward in the
code.

> +static void fm_irq_send_flag_getcmd(void *);

Why the void *? You know it is always a struct fmdrv_ops *! That way you don't
need the 'struct fmdrv_ops *fmdev = arg' at the beginning of each irq function.

> +static void fm_irq_handle_flag_getcmd_resp(void *);
> +static void fm_irq_handle_hw_malfunction(void *);
> +static void fm_irq_handle_rds_start(void *);
> +static void fm_irq_send_rdsdata_getcmd(void *);
> +static void fm_irq_handle_rdsdata_getcmd_resp(void *);
> +static void fm_irq_handle_rds_finish(void *);
> +static void fm_irq_handle_tune_op_ended(void *);
> +static void fm_irq_handle_power_enb(void *);
> +static void fm_irq_handle_low_rssi_start(void *);
> +static void fm_irq_afjump_set_pi(void *);
> +static void fm_irq_handle_set_pi_resp(void *);
> +static void fm_irq_afjump_set_pimask(void *);
> +static void fm_irq_handle_set_pimask_resp(void *);
> +static void fm_irq_afjump_setfreq(void *);
> +static void fm_irq_handle_setfreq_resp(void *);
> +static void fm_irq_afjump_enableint(void *);
> +static void fm_irq_afjump_enableint_resp(void *);
> +static void fm_irq_start_afjump(void *);
> +static void fm_irq_handle_start_afjump_resp(void *);
> +static void fm_irq_afjump_rd_freq(void *);
> +static void fm_irq_afjump_rd_freq_resp(void *);
> +static void fm_irq_handle_low_rssi_finish(void *);
> +static void fm_irq_send_intmsk_cmd(void *);
> +static void fm_irq_handle_intmsk_cmd_resp(void *);
> +
> +/*
> + * When FM common module receives interrupt packet, following handlers
> + * will be executed one after another to service the interrupt(s)
> + */
> +enum fmc_irq_handler_index {
> +	FM_SEND_FLAG_GETCMD_INDEX,
> +	FM_HANDLE_FLAG_GETCMD_RESP_INDEX,
> +
> +	/* HW malfunction irq handler */
> +	FM_HW_MAL_FUNC_INDEX,
> +
> +	/* RDS threshold reached irq handler */
> +	FM_RDS_START_INDEX,
> +	FM_RDS_SEND_RDS_GETCMD_INDEX,
> +	FM_RDS_HANDLE_RDS_GETCMD_RESP_INDEX,
> +	FM_RDS_FINISH_INDEX,
> +
> +	/* Tune operation ended irq handler */
> +	FM_HW_TUNE_OP_ENDED_INDEX,
> +
> +	/* TX power enable irq handler */
> +	FM_HW_POWER_ENB_INDEX,
> +
> +	/* Low RSSI irq handler */
> +	FM_LOW_RSSI_START_INDEX,
> +	FM_AF_JUMP_SETPI_INDEX,
> +	FM_AF_JUMP_HANDLE_SETPI_RESP_INDEX,
> +	FM_AF_JUMP_SETPI_MASK_INDEX,
> +	FM_AF_JUMP_HANDLE_SETPI_MASK_RESP_INDEX,
> +	FM_AF_JUMP_SET_AF_FREQ_INDEX,
> +	FM_AF_JUMP_HENDLE_SET_AFFREQ_RESP_INDEX,
> +	FM_AF_JUMP_ENABLE_INT_INDEX,
> +	FM_AF_JUMP_ENABLE_INT_RESP_INDEX,
> +	FM_AF_JUMP_START_AFJUMP_INDEX,
> +	FM_AF_JUMP_HANDLE_START_AFJUMP_RESP_INDEX,
> +	FM_AF_JUMP_RD_FREQ_INDEX,
> +	FM_AF_JUMP_RD_FREQ_RESP_INDEX,
> +	FM_LOW_RSSI_FINISH_INDEX,
> +
> +	/* Interrupt process post action */
> +	FM_SEND_INTMSK_CMD_INDEX,
> +	FM_HANDLE_INTMSK_CMD_RESP_INDEX,
> +};
> +
> +/* FM interrupt handler table */
> +static int_handler_prototype g_IntHandlerTable[] = {
> +	fm_irq_send_flag_getcmd,
> +	fm_irq_handle_flag_getcmd_resp,
> +	fm_irq_handle_hw_malfunction,
> +	fm_irq_handle_rds_start, /* RDS threshold reached irq handler */
> +	fm_irq_send_rdsdata_getcmd,
> +	fm_irq_handle_rdsdata_getcmd_resp,
> +	fm_irq_handle_rds_finish,
> +	fm_irq_handle_tune_op_ended,
> +	fm_irq_handle_power_enb, /* TX power enable irq handler */
> +	fm_irq_handle_low_rssi_start,
> +	fm_irq_afjump_set_pi,
> +	fm_irq_handle_set_pi_resp,
> +	fm_irq_afjump_set_pimask,
> +	fm_irq_handle_set_pimask_resp,
> +	fm_irq_afjump_setfreq,
> +	fm_irq_handle_setfreq_resp,
> +	fm_irq_afjump_enableint,
> +	fm_irq_afjump_enableint_resp,
> +	fm_irq_start_afjump,
> +	fm_irq_handle_start_afjump_resp,
> +	fm_irq_afjump_rd_freq,
> +	fm_irq_afjump_rd_freq_resp,
> +	fm_irq_handle_low_rssi_finish,
> +	fm_irq_send_intmsk_cmd, /* Interrupt process post action */
> +	fm_irq_handle_intmsk_cmd_resp
> +};
> +
> +long (*g_st_write) (struct sk_buff *skb);
> +static struct completion wait_for_fmdrv_reg_comp;

I suggest that you add two little helper functions here:

static inline void fm_irq_call(struct fmdrv_ops *fmdev)
{
        fmdev->irq_info.fm_int_handlers[fmdev->irq_info.stage_index](fmdev);
}

static inline void fm_irq_call_stage(struct fmdrv_ops *fmdev, unsigned char stage)
{
        fmdev->irq_info.stage_index = stage;
        fm_irq_call(fmdev);
}

This code is used everywhere, so having these helpers will simplify things.

> +
> +#ifdef FM_DUMP_TXRX_PKT
> + /* To dump outgoing FM Channel-8 packets */
> +inline void dump_tx_skb_data(struct sk_buff *skb)
> +{
> +	int len, len_org;
> +	char index;
> +	struct fm_cmd_msg_hdr *cmd_hdr;
> +
> +	cmd_hdr = (struct fm_cmd_msg_hdr *)skb->data;
> +	printk(KERN_INFO "<<%shdr:%02x len:%02x opcode:%02x type:%s dlen:%02x",
> +	       fm_cb(skb)->completion ? " " : "*", cmd_hdr->header,
> +	       cmd_hdr->len, cmd_hdr->fm_opcode,
> +	       cmd_hdr->rd_wr ? "RD" : "WR", cmd_hdr->dlen);
> +
> +	len_org = skb->len - FM_CMD_MSG_HDR_SIZE;
> +	if (len_org > 0) {
> +		printk("\n   data(%d): ", cmd_hdr->dlen);
> +		len = min(len_org, 14);
> +		for (index = 0; index < len; index++)
> +			printk("%x ",
> +			       skb->data[FM_CMD_MSG_HDR_SIZE + index]);
> +		printk("%s", (len_org > 14) ? ".." : "");
> +	}
> +	printk("\n");
> +}
> +
> + /* To dump incoming FM Channel-8 packets */
> +inline void dump_rx_skb_data(struct sk_buff *skb)
> +{
> +	int len, len_org;
> +	char index;
> +	struct fm_event_msg_hdr *evt_hdr;
> +
> +	evt_hdr = (struct fm_event_msg_hdr *)skb->data;
> +	printk(KERN_INFO ">> hdr:%02x len:%02x sts:%02x numhci:%02x "
> +	    "opcode:%02x type:%s dlen:%02x", evt_hdr->header, evt_hdr->len,
> +	    evt_hdr->status, evt_hdr->num_fm_hci_cmds, evt_hdr->fm_opcode,
> +	    (evt_hdr->rd_wr) ? "RD" : "WR", evt_hdr->dlen);
> +
> +	len_org = skb->len - FM_EVT_MSG_HDR_SIZE;
> +	if (len_org > 0) {
> +		printk("\n   data(%d): ", evt_hdr->dlen);
> +		len = min(len_org, 14);
> +		for (index = 0; index < len; index++)
> +			printk("%x ",
> +			       skb->data[FM_EVT_MSG_HDR_SIZE + index]);
> +		printk("%s", (len_org > 14) ? ".." : "");
> +	}
> +	printk("\n");
> +}
> +#endif
> +
> +void fmc_update_region_info(struct fmdrv_ops *fmdev,
> +				unsigned char region_to_set)
> +{
> +	memcpy(&fmdev->rx.region, &region_configs[region_to_set],
> +		sizeof(struct region_info));

Don't memcpy, just assign:

	fmdev->rx.region = region_configs[region_to_set];

> +}
> +
> +/*
> + * FM common sub-module will schedule this tasklet whenever it receives
> + * FM packet from ST driver.
> + */
> +static void __recv_tasklet(unsigned long arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +	struct fm_event_msg_hdr *fm_evt_hdr;
> +	struct sk_buff *skb;
> +	unsigned char num_fm_hci_cmds;
> +	unsigned long flags;
> +
> +	fmdev = (struct fmdrv_ops *)arg;
> +	/* Process all packets in the RX queue */
> +	while ((skb = skb_dequeue(&fmdev->rx_q))) {
> +		if (skb->len < sizeof(struct fm_event_msg_hdr)) {
> +			pr_err("(fmdrv): skb(%p) has only %d bytes"
> +				"atleast need %d bytes to decode\n",
> +				skb, skb->len,
> +				sizeof(struct fm_event_msg_hdr));
> +			kfree_skb(skb);
> +			continue;
> +		}
> +
> +		fm_evt_hdr = (void *)skb->data;
> +		num_fm_hci_cmds = fm_evt_hdr->num_fm_hci_cmds;
> +
> +		/* FM interrupt packet? */
> +		if (fm_evt_hdr->fm_opcode == FM_INTERRUPT) {
> +			/* FM interrupt handler started already? */
> +			if (!test_bit(FM_INTTASK_RUNNING, &fmdev->flag)) {
> +				set_bit(FM_INTTASK_RUNNING, &fmdev->flag);
> +				if (fmdev->irq_info.stage_index != 0) {
> +					pr_err("(fmdrv): Invalid stage index,"
> +						"resetting to zero\n");
> +					fmdev->irq_info.stage_index = 0;
> +				}
> +
> +				/*
> +				 * Execute first function in interrupt handler
> +				 * table.
> +				 */
> +				fmdev->irq_info.fm_int_handlers
> +					[fmdev->irq_info.stage_index](fmdev);
> +			} else {
> +				set_bit(FM_INTTASK_SCHEDULE_PENDING,
> +				&fmdev->flag);

Don't break a line just because it is a bit over 80 chars. Those warnings
are a hint only. In this case breaking up the line makes it hard to read.
Readability is really more important than a checkpatch warning.

> +			}
> +			kfree_skb(skb);
> +		}
> +		/* Anyone waiting for this with completion handler? */
> +		else if (fm_evt_hdr->fm_opcode == fmdev->last_sent_pkt_opcode &&
> +			fmdev->response_completion != NULL) {
> +			if (fmdev->response_skb != NULL)
> +				pr_err("(fmdrv): Response SKB ptr not NULL\n");
> +
> +			spin_lock_irqsave(&fmdev->resp_skb_lock, flags);
> +			fmdev->response_skb = skb;
> +			spin_unlock_irqrestore(&fmdev->resp_skb_lock, flags);
> +			complete(fmdev->response_completion);
> +
> +			fmdev->response_completion = NULL;
> +			atomic_set(&fmdev->tx_cnt, 1);
> +		}
> +		/* Is this for interrupt handler? */
> +		else if (fm_evt_hdr->fm_opcode == fmdev->last_sent_pkt_opcode &&
> +			fmdev->response_completion == NULL) {
> +			if (fmdev->response_skb != NULL)
> +				pr_err("(fmdrv): Response SKB ptr not NULL\n");
> +
> +			spin_lock_irqsave(&fmdev->resp_skb_lock, flags);
> +			fmdev->response_skb = skb;
> +			spin_unlock_irqrestore(&fmdev->resp_skb_lock, flags);
> +
> +			/* Execute interrupt handler where state index points */
> +			fmdev->irq_info.fm_int_handlers
> +				[fmdev->irq_info.stage_index](fmdev);
> +
> +			kfree_skb(skb);
> +			atomic_set(&fmdev->tx_cnt, 1);
> +		} else {
> +			pr_err("(fmdrv): Nobody claimed SKB(%p),purging\n",
> +				skb);
> +		}
> +
> +		/*
> +		 * Check flow control field. If Num_FM_HCI_Commands field is
> +		 * not zero, schedule FM TX tasklet.
> +		 */
> +		if (num_fm_hci_cmds && atomic_read(&fmdev->tx_cnt))
> +			if (!skb_queue_empty(&fmdev->tx_q))
> +				tasklet_schedule(&fmdev->tx_task);
> +	}
> +}
> +
> +/* FM send tasklet: is scheduled when FM packet has to be sent to chip */
> +static void __send_tasklet(unsigned long arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +	struct sk_buff *skb;
> +	int len;
> +
> +	fmdev = (struct fmdrv_ops *)arg;
> +	/* Check, is there any timeout happenned to last transmitted packet */
> +	if (!atomic_read(&fmdev->tx_cnt) &&
> +		((jiffies - fmdev->last_tx_jiffies) > FM_DRV_TX_TIMEOUT)) {
> +		pr_err("(fmdrv): TX timeout occurred\n");
> +		atomic_set(&fmdev->tx_cnt, 1);
> +	}
> +	/* Send queued FM TX packets */
> +	if (atomic_read(&fmdev->tx_cnt)) {
> +		skb = skb_dequeue(&fmdev->tx_q);
> +		if (skb) {

Use the 'early return' construct here:

        if (!atomic_read(&fmdev->tx_cnt))
                return;
        skb = skb_dequeue(&fmdev->tx_q);
        if (!skb)
                return;

The rest of the code can be moved two indents to the left. Much easier to
read that way.

> +			atomic_dec(&fmdev->tx_cnt);
> +			fmdev->last_sent_pkt_opcode = fm_cb(skb)->fm_opcode;
> +
> +			if (fmdev->response_completion != NULL)
> +				pr_err("(fmdrv): Response completion handler"
> +						"is not NULL\n");
> +
> +			fmdev->response_completion = fm_cb(skb)->completion;
> +
> +			/* Write FM packet to ST driver */
> +			len = g_st_write(skb);
> +			if (len < 0) {
> +				kfree_skb(skb);
> +				fmdev->response_completion = NULL;
> +				pr_err("(fmdrv): TX tasklet failed to send"
> +					"skb(%p)\n", skb);
> +				atomic_set(&fmdev->tx_cnt, 1);
> +			} else {
> +				fmdev->last_tx_jiffies = jiffies;
> +			}
> +		}
> +	}
> +}
> +
> +/*
> + * Queues FM Channel-8 packet to FM TX queue and schedules FM TX tasklet for
> + * transmission
> + */
> +static int __fm_send_cmd(struct fmdrv_ops *fmdev, unsigned char fm_opcode,
> +				unsigned short int type, void *payload,
> +				int payload_len,
> +				struct completion *wait_completion)
> +{
> +	struct sk_buff *skb;
> +	struct fm_cmd_msg_hdr *cmd_hdr;
> +	int size;
> +
> +
> +	if (fm_opcode >= FM_INTERRUPT) {
> +		pr_err("(fmdrv): Invalid fm register index\n");

I recommend printing the fm_opcode here as well.

> +		return -EINVAL;
> +	}
> +	if (test_bit(FM_FIRMWARE_DW_INPROGRESS, &fmdev->flag) &&
> +			payload == NULL) {
> +		pr_err("(fmdrv): Payload data is NULL during fw download\n");
> +		return -EINVAL;
> +	}
> +	if (!test_bit(FM_FIRMWARE_DW_INPROGRESS, &fmdev->flag))
> +		size =
> +		    FM_CMD_MSG_HDR_SIZE + ((payload == NULL) ? 0 : payload_len);
> +	else
> +		size = payload_len;
> +
> +	skb = alloc_skb(size, GFP_ATOMIC);
> +	if (!skb) {
> +		pr_err("(fmdrv): No memory to create new SKB\n");
> +		return -ENOMEM;
> +	}
> +	/*
> +	 * Don't fill FM header info for the commands which come from
> +	 * FM firmware file.
> +	 */
> +	if (!test_bit(FM_FIRMWARE_DW_INPROGRESS, &fmdev->flag) ||
> +	    test_bit(FM_INTTASK_RUNNING, &fmdev->flag)) {
> +		/* Fill command header info */
> +		cmd_hdr =
> +		    (struct fm_cmd_msg_hdr *)skb_put(skb, FM_CMD_MSG_HDR_SIZE);
> +		cmd_hdr->header = FM_PKT_LOGICAL_CHAN_NUMBER;	/* 0x08 */
> +		/* 3 (fm_opcode,rd_wr,dlen) + payload len) */
> +		cmd_hdr->len = ((payload == NULL) ? 0 : payload_len) + 3;
> +		/* FM opcode */
> +		cmd_hdr->fm_opcode = fm_opcode;
> +		/* read/write type */
> +		cmd_hdr->rd_wr = type;
> +		cmd_hdr->dlen = payload_len;
> +		fm_cb(skb)->fm_opcode = fm_opcode;
> +		/*
> +		 * If firmware download has finished and the command is
> +		 * not a read command then payload is != NULL - a write
> +		 * command with unsigned short payload - convert to be16
> +		 */
> +		if (payload != NULL)
> +			*(unsigned short *)payload =
> +				cpu_to_be16(*(unsigned short *)payload);
> +	} else if (payload != NULL) {
> +		fm_cb(skb)->fm_opcode = *((char *)payload + 2);
> +	}
> +	if (payload != NULL)
> +		memcpy(skb_put(skb, payload_len), payload, payload_len);
> +
> +	fm_cb(skb)->completion = wait_completion;
> +	skb_queue_tail(&fmdev->tx_q, skb);
> +	tasklet_schedule(&fmdev->tx_task);
> +
> +	return 0;
> +}
> +
> +/* Sends FM Channel-8 command to the chip and waits for the reponse */

reponse -> response

> +int fmc_send_cmd(struct fmdrv_ops *fmdev, unsigned char fm_opcode,
> +			unsigned short int type, void *payload, int payload_len,
> +			void *reponse, int *reponse_len)

Ditto.

> +{
> +	struct sk_buff *skb;
> +	struct fm_event_msg_hdr *fm_evt_hdr;
> +	unsigned long timeleft;
> +	unsigned long flags;
> +	int ret;
> +
> +	init_completion(&fmdev->maintask_completion);
> +	ret = __fm_send_cmd(fmdev, fm_opcode, type, payload, payload_len,
> +			    &fmdev->maintask_completion);
> +	if (ret < 0)
> +		goto exit;
> +
> +	timeleft = wait_for_completion_timeout(&fmdev->maintask_completion,
> +					       FM_DRV_TX_TIMEOUT);
> +	if (!timeleft) {
> +		pr_err("(fmdrv): Timeout(%d sec),didn't get reg"
> +			   "completion signal from RX tasklet\n",
> +			   jiffies_to_msecs(FM_DRV_TX_TIMEOUT) / 1000);
> +		return -ETIMEDOUT;
> +		goto exit;
> +	}
> +	if (!fmdev->response_skb) {
> +		pr_err("(fmdrv): Reponse SKB is missing\n");
> +		return -EFAULT;
> +		goto exit;
> +	}
> +	spin_lock_irqsave(&fmdev->resp_skb_lock, flags);
> +	skb = fmdev->response_skb;
> +	fmdev->response_skb = NULL;
> +	spin_unlock_irqrestore(&fmdev->resp_skb_lock, flags);
> +
> +	fm_evt_hdr = (void *)skb->data;
> +	if (fm_evt_hdr->status != 0) {
> +		pr_err("(fmdrv): Received event pkt status(%d) is not zero\n",
> +			   fm_evt_hdr->status);
> +		kfree_skb(skb);
> +		ret = -EIO;
> +		goto exit;
> +	}
> +	/* Send reponse data to caller */
> +	if (reponse != NULL && reponse_len != NULL && fm_evt_hdr->dlen) {
> +		/* Skip header info and copy only response data */
> +		skb_pull(skb, sizeof(struct fm_event_msg_hdr));
> +		memcpy(reponse, skb->data, fm_evt_hdr->dlen);
> +		*reponse_len = fm_evt_hdr->dlen;
> +	} else if (reponse_len != NULL && fm_evt_hdr->dlen == 0) {
> +		*reponse_len = 0;
> +	}
> +	kfree_skb(skb);
> +exit:
> +	if (ret < 0) {
> +		pr_err("(fmdrv): Command %d failed\n", fm_opcode);
> +		return ret;
> +	}
> +
> +	return ret;
> +}
> +
> +/* --- Helper functions used in FM interrupt handlers ---*/
> +static inline int __check_cmdresp_status(struct fmdrv_ops *fmdev,
> +						struct sk_buff **skb)
> +{
> +	struct fm_event_msg_hdr *fm_evt_hdr;
> +	unsigned long flags;
> +
> +	del_timer(&fmdev->irq_info.int_timeout_timer);
> +
> +	spin_lock_irqsave(&fmdev->resp_skb_lock, flags);
> +	*skb = fmdev->response_skb;
> +	fmdev->response_skb = NULL;
> +	spin_unlock_irqrestore(&fmdev->resp_skb_lock, flags);
> +
> +	fm_evt_hdr = (void *)(*skb)->data;
> +	if (fm_evt_hdr->status != 0) {
> +		pr_err("(fmdrv): irq: opcode %x response status is not zero "
> +				"Initiating irq recovery process\n",
> +				fm_evt_hdr->fm_opcode);
> +
> +		mod_timer(&fmdev->irq_info.int_timeout_timer, jiffies +
> +				FM_DRV_TX_TIMEOUT);
> +		return -1;
> +	}
> +
> +	return 0;
> +}
> +
> +/*
> + * Interrupt process timeout handler.
> + * One of the irq handler did not get proper response from the chip. So take
> + * recovery action here. FM interrupts are disabled in the beginning of
> + * interrupt process. Therefore reset stage index to re-enable default
> + * interrupts. So that next interrupt will be processed as usual.
> + */
> +static void __int_timeout_handler(unsigned long data)
> +{
> +	struct fmdrv_ops *fmdev;
> +
> +	pr_debug("(fmdrv): irq: timeout,trying to re-enable fm interrupts\n");
> +	fmdev = (struct fmdrv_ops *)data;
> +	fmdev->irq_info.irq_service_timeout_retry++;
> +
> +	if (fmdev->irq_info.irq_service_timeout_retry <=
> +	    FM_IRQ_TIMEOUT_RETRY_MAX) {
> +		fmdev->irq_info.stage_index = FM_SEND_INTMSK_CMD_INDEX;
> +		fmdev->irq_info.fm_int_handlers[fmdev->irq_info.
> +							 stage_index] (fmdev);
> +	} else {
> +		/*
> +		 * Stop recovery action (interrupt reenable process) and
> +		 * reset stage index & retry count values
> +		 */
> +		fmdev->irq_info.stage_index = 0;
> +		fmdev->irq_info.irq_service_timeout_retry = 0;
> +		pr_err("(fmdrv): Recovery action failed during"
> +			"irq processing, max retry reached\n");
> +	}
> +}

Try this, it's easier to read:

static void __int_timeout_handler(unsigned long data)
{
        struct fmdrv_ops *fmdev;
        struct fm_irq *fmirq;

        pr_debug("(fmdrv): irq: timeout,trying to re-enable fm interrupts\n");
        fmdev = (struct fmdrv_ops *)data;
        fmirq = &fmdev->irq_info;
        fmirq->irq_service_timeout_retry++;

        if (fmirq->irq_service_timeout_retry > FM_IRQ_TIMEOUT_RETRY_MAX) {
                /* Stop recovery action (interrupt reenable process) and
                 * reset stage index & retry count values */
                fmirq->stage_index = 0;
                fmirq->irq_service_timeout_retry = 0;
                pr_err("(fmdrv): Recovery action failed during"
                        "irq processing, max retry reached\n");
                return;
        }
        fm_irq_call_stage(fmdev, FM_SEND_INTMSK_CMD_INDEX);
}

Note the use of the fmirq local variable: it is highly recommended to use such
locals if you access a struct within fmdev repeatedly. Again, it makes the code
shorter and easier to read.

BTW: it might be a good idea to make fm_err and fm_dbg macros that add the (fmdrv)
prefix automatically.

> +
> +/* --------- FM interrupt handlers ------------*/
> +static void fm_irq_send_flag_getcmd(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +	unsigned short flag;
> +	int ret;
> +
> +	fmdev = arg;
> +	/* Send FLAG_GET command , to know the source of interrupt */
> +	ret = __fm_send_cmd(fmdev, FLAG_GET, REG_RD, NULL, sizeof(flag), NULL);
> +	if (ret)
> +		pr_err("(fmdrv): irq: failed to send flag_get command,"
> +			   "initiating irq recovery process\n");

Why print another error if __fm_send_cmd already does that?

> +	else
> +		fmdev->irq_info.stage_index = FM_HANDLE_FLAG_GETCMD_RESP_INDEX;
> +
> +	mod_timer(&fmdev->irq_info.int_timeout_timer, jiffies +
> +		  FM_DRV_TX_TIMEOUT);
> +}
> +
> +static void fm_irq_handle_flag_getcmd_resp(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +	struct sk_buff *skb;
> +	struct fm_event_msg_hdr *fm_evt_hdr;
> +	char ret;
> +
> +	fmdev = arg;
> +
> +	ret = __check_cmdresp_status(fmdev, &skb);
> +	if (ret < 0)
> +		return;
> +
> +	fm_evt_hdr = (void *)skb->data;
> +
> +	/* Skip header info and copy only response data */
> +	skb_pull(skb, sizeof(struct fm_event_msg_hdr));
> +	memcpy(&fmdev->irq_info.flag, skb->data, fm_evt_hdr->dlen);
> +
> +	fmdev->irq_info.flag = be16_to_cpu(fmdev->irq_info.flag);
> +	pr_debug("(fmdrv): irq: flag register(0x%x)\n", fmdev->irq_info.flag);
> +
> +	/* Continue next function in interrupt handler table */
> +	fmdev->irq_info.stage_index = FM_HW_MAL_FUNC_INDEX;
> +
> +	fmdev->irq_info.fm_int_handlers[fmdev->irq_info.stage_index](fmdev);
> +}
> +
> +static void fm_irq_handle_hw_malfunction(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +
> +	fmdev = arg;
> +	if (fmdev->irq_info.flag & FM_MAL_EVENT & fmdev->irq_info.mask)
> +		pr_err("(fmdrv): irq: HW MAL int received - do nothing\n");
> +
> +	/* Continue next function in interrupt handler table */
> +	fmdev->irq_info.stage_index = FM_RDS_START_INDEX;
> +	fmdev->irq_info.fm_int_handlers[fmdev->irq_info.stage_index](fmdev);
> +}
> +
> +static void fm_irq_handle_rds_start(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +
> +	fmdev = arg;
> +	if (fmdev->irq_info.flag & FM_RDS_EVENT & fmdev->irq_info.mask) {
> +		pr_debug("(fmdrv): irq: rds threshold reached\n");
> +		fmdev->irq_info.stage_index = FM_RDS_SEND_RDS_GETCMD_INDEX;
> +	} else {
> +		/* Continue next function in interrupt handler table */
> +		fmdev->irq_info.stage_index = FM_HW_TUNE_OP_ENDED_INDEX;
> +	}
> +	fmdev->irq_info.fm_int_handlers[fmdev->irq_info.stage_index](fmdev);
> +}
> +
> +static void fm_irq_send_rdsdata_getcmd(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +	int ret;
> +
> +	fmdev = arg;
> +	/* Send the command to read RDS data from the chip */
> +	ret = __fm_send_cmd(fmdev, RDS_DATA_GET, REG_RD, NULL,
> +			    (FM_RX_RDS_FIFO_THRESHOLD * 3), NULL);
> +	if (ret < 0)
> +		pr_err("(fmdrv): irq : failed to send rds get command,"
> +			   "initiating irq recovery process\n");
> +	else
> +		fmdev->irq_info.stage_index =
> +		    FM_RDS_HANDLE_RDS_GETCMD_RESP_INDEX;
> +
> +	/* Start timer to track timeout */
> +	mod_timer(&fmdev->irq_info.int_timeout_timer, jiffies +
> +		  FM_DRV_TX_TIMEOUT);
> +}
> +
> +/* Keeps track of current RX channel AF (Alternate Frequency) */
> +static void __fm_rx_update_af_cache(struct fmdrv_ops *fmdev,
> +					unsigned char af)
> +{
> +	unsigned char index;
> +	unsigned int freq;
> +
> +	/* First AF indicates the number of AF follows. Reset the list */
> +	if ((af >= FM_RDS_1_AF_FOLLOWS) && (af <= FM_RDS_25_AF_FOLLOWS)) {
> +		fmdev->rx.cur_station_info.af_list_max =
> +		    (af - FM_RDS_1_AF_FOLLOWS + 1);
> +		fmdev->rx.cur_station_info.no_of_items_in_afcache = 0;
> +		pr_debug("(fmdrv): No of expected AF : %d\n",
> +			   fmdev->rx.cur_station_info.af_list_max);

Add a return here.

> +	} else if (((af >= FM_RDS_MIN_AF)
> +		    && (fmdev->rx.region.region_index == FM_BAND_EUROPE_US)
> +		    && (af <= FM_RDS_MAX_AF)) || ((af >= FM_RDS_MIN_AF)
> +						  && (fmdev->rx.region.
> +						      region_index ==
> +						      FM_BAND_JAPAN)
> +						  && (af <=
> +						      FM_RDS_MAX_AF_JAPAN))) {

Unreadable if statement. Store fmdev->rx.region.region_index in a local variable
first and then the condition can be simplified, especially when using the 'early
return' construct:

	if (af < FM_RDS_MIN_AF)
		return;
	if (regidx == FM_BAND_EUROPE_US && af > FM_RDS_MAX_AF)
		return;
	if (regidx == FM_BAND_JAPAN && af > FM_RDS_MAX_AF_JAPAN)
		return;


> +		freq = fmdev->rx.region.bottom_frequency + (af * 100);
> +		if (freq == fmdev->rx.curr_freq) {
> +			pr_debug("(fmdrv): Current frequency(%d) is"
> +				"matching with received AF(%d)\n",
> +			    fmdev->rx.curr_freq, freq);
> +			return;
> +		}
> +		/* Do check in AF cache */
> +		for (index = 0;
> +		     index < fmdev->rx.cur_station_info.no_of_items_in_afcache;

Make a local pointer to fmdev->rx.cur_station_info.

I'm not going to repeat myself in the rest of this review. Just use the
'early return' constructs where applicable, use temp pointer, don't break
up lines unnecessarily just because it's a bit over the 80 char limit.

Instead, such lines are often an indication that a temp variable is needed.

Don't repeat error messages at multiple levels. Do it at the lowest level,
and just propagate the error code up without repeating the error message.

These are all good coding practices.

I also have some comments regarding naming, but I'll do that in my review of
patch 1/8.

> +		     index++) {
> +			if (fmdev->rx.cur_station_info.af_cache[index] == freq)
> +				break;
> +		}
> +		/* Reached the limit of the list - ignore the next AF */
> +		if (index == fmdev->rx.cur_station_info.af_list_max) {
> +			pr_debug("(fmdrv): AF cache is full\n");
> +			return;
> +		}
> +		/*
> +		 * If we reached the end of the list then this AF is not
> +		 * in the list - add it.
> +		 */
> +		if (index == fmdev->rx.cur_station_info.
> +				   no_of_items_in_afcache) {
> +			pr_debug("(fmdrv): Storing AF %d to cache index %d\n",
> +					freq, index);
> +			fmdev->rx.cur_station_info.af_cache[index] = freq;
> +			fmdev->rx.cur_station_info.no_of_items_in_afcache++;
> +		}
> +	}
> +}
> +
> +/*
> + * Converts RDS buffer data from big endian format
> + * to little endian format.
> + */
> +static void __fm_rdsparse_swapbytes(struct fmdrv_ops *fmdev,
> +					struct fm_rdsdata_format *rds_format)
> +{
> +	unsigned char byte1;
> +	unsigned char index = 0;
> +	char *rds_buff;
> +
> +	/*
> +	 * Since in Orca the 2 RDS Data bytes are in little endian and
> +	 * in Dolphin they are in big endian, the parsing of the RDS data
> +	 * is chip dependent
> +	 */
> +	if (fmdev->asci_id != 0x6350) {
> +		rds_buff = &rds_format->rdsdata.groupdatabuff.rdsbuff[0];
> +		while (index + 1 < FM_RX_RDS_INFO_FIELD_MAX) {
> +			byte1 = rds_buff[index];
> +			rds_buff[index] = rds_buff[index + 1];
> +			rds_buff[index + 1] = byte1;
> +			index += 2;
> +		}
> +	}
> +}
> +
> +static void fm_irq_handle_rdsdata_getcmd_resp(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +	struct sk_buff *skb;
> +	char *rds_data;
> +	char meta_data;
> +	unsigned char type, block_index;
> +	unsigned long group_index;
> +	struct fm_rdsdata_format rds_format;
> +	int rds_len, ret;
> +	unsigned short cur_picode;
> +	unsigned char tmpbuf[3];
> +	unsigned long flags;
> +
> +	fmdev = arg;
> +
> +	ret = __check_cmdresp_status(fmdev, &skb);
> +	if (ret < 0)
> +		return;
> +
> +	/* Skip header info */
> +	skb_pull(skb, sizeof(struct fm_event_msg_hdr));
> +	rds_data = skb->data;
> +	rds_len = skb->len;
> +
> +	/* Parse the RDS data */
> +	while (rds_len >= FM_RDS_BLOCK_SIZE) {
> +		meta_data = rds_data[2];
> +		/*
> +		 * Get the type:
> +		 * 0=A, 1=B, 2=C, 3=C', 4=D, 5=E
> +		 */
> +		type = (meta_data & 0x07);
> +
> +		/*
> +		 * Transform the block type into an
> +		 * index sequence (0, 1, 2, 3, 4)
> +		 */
> +		block_index = (type <= FM_RDS_BLOCK_C ? type : (type - 1));
> +		pr_debug("(fmdrv): Block index:%d(%s)\n", block_index,
> +			   (meta_data & FM_RDS_STATUS_ERROR_MASK) ? "Bad" :
> +			   "Ok");
> +		if (((meta_data & FM_RDS_STATUS_ERROR_MASK) == 0)
> +		    && (block_index == FM_RDS_BLOCK_INDEX_A
> +			|| (block_index == fmdev->rx.rds.last_block_index + 1
> +			    && block_index <= FM_RDS_BLOCK_INDEX_D))) {
> +			/*
> +			 * Skip checkword (control) byte and copy only data
> +			 * byte
> +			 */
> +			memcpy(&rds_format.rdsdata.groupdatabuff.
> +			       rdsbuff[block_index * (FM_RDS_BLOCK_SIZE - 1)],
> +			       rds_data, (FM_RDS_BLOCK_SIZE - 1));
> +			fmdev->rx.rds.last_block_index = block_index;
> +
> +			/* If completed a whole group then handle it */
> +			if (block_index == FM_RDS_BLOCK_INDEX_D) {
> +				pr_debug("(fmdrv): Good block received\n");
> +				__fm_rdsparse_swapbytes(fmdev, &rds_format);
> +
> +				/*
> +				 * Extract PI code and store in local cache.
> +				 * We need this during AF switch processing.
> +				 */
> +				cur_picode = be16_to_cpu
> +				(rds_format.rdsdata.groupgeneral.pidata);
> +				if (fmdev->rx.cur_station_info.picode !=
> +				    cur_picode)
> +					fmdev->rx.cur_station_info.picode =
> +					    cur_picode;
> +				pr_debug("(fmdrv): picode:%d\n", cur_picode);
> +
> +				group_index =
> +				    (rds_format.rdsdata.groupgeneral.
> +				     block_b_byte1 >> 3);
> +				pr_debug("(fmdrv):Group:%ld%s\n", group_index/2,
> +					   (group_index % 2) ? "B" : "A");
> +
> +				group_index =
> +				    1 << (rds_format.rdsdata.groupgeneral.
> +					  block_b_byte1 >> 3);
> +				if (group_index == FM_RDS_GROUP_TYPE_MASK_0A) {
> +					__fm_rx_update_af_cache
> +					    (fmdev, rds_format.rdsdata.
> +					     group0A.firstaf);
> +					__fm_rx_update_af_cache
> +						(fmdev, rds_format.
> +						 rdsdata.group0A.secondaf);
> +				}
> +			}
> +		} else {
> +			pr_debug("(fmdrv): Block sequence mismatch\n");
> +			fmdev->rx.rds.last_block_index = -1;
> +		}
> +		rds_len -= FM_RDS_BLOCK_SIZE;
> +		rds_data += FM_RDS_BLOCK_SIZE;

Ugly code. Again, rewrite to use early return (or early continue in this case).
Some temp variables will probably also help.

> +	}
> +
> +	/* Copy raw rds data to internal rds buffer */
> +	rds_data = skb->data;
> +	rds_len = skb->len;
> +
> +	spin_lock_irqsave(&fmdev->rds_buff_lock, flags);
> +	while (rds_len > 0) {
> +		/*
> +		 * Fill RDS buffer as per V4L2 specification.
> +		 * Store control byte
> +		 */
> +		type = (rds_data[2] & 0x07);
> +		block_index = (type <= FM_RDS_BLOCK_C ? type : (type - 1));
> +		tmpbuf[2] = block_index;	/* Offset name */
> +		tmpbuf[2] |= block_index << 3;	/* Received offset */
> +
> +		/* Store data byte */
> +		tmpbuf[0] = rds_data[0];
> +		tmpbuf[1] = rds_data[1];
> +
> +		memcpy(&fmdev->rx.rds.buffer[fmdev->rx.rds.wr_index], &tmpbuf,
> +		       FM_RDS_BLOCK_SIZE);
> +		fmdev->rx.rds.wr_index =
> +		    (fmdev->rx.rds.wr_index +
> +		     FM_RDS_BLOCK_SIZE) % fmdev->rx.rds.buf_size;
> +
> +		/* Check for overflow & start over */
> +		if (fmdev->rx.rds.wr_index == fmdev->rx.rds.rd_index) {
> +			pr_debug("(fmdrv): RDS buffer overflow\n");
> +			fmdev->rx.rds.wr_index = 0;
> +			fmdev->rx.rds.rd_index = 0;
> +			break;
> +		}
> +		rds_len -= FM_RDS_BLOCK_SIZE;
> +		rds_data += FM_RDS_BLOCK_SIZE;
> +	}
> +	spin_unlock_irqrestore(&fmdev->rds_buff_lock, flags);
> +
> +	/* Wakeup read queue */
> +	if (fmdev->rx.rds.wr_index != fmdev->rx.rds.rd_index)
> +		wake_up_interruptible(&fmdev->rx.rds.read_queue);
> +
> +	fmdev->irq_info.stage_index = FM_RDS_FINISH_INDEX;
> +	fmdev->irq_info.fm_int_handlers[fmdev->irq_info.stage_index](fmdev);
> +}
> +
> +static void fm_irq_handle_rds_finish(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +
> +	fmdev = arg;
> +	/* Continue next function in interrupt handler table */
> +	fmdev->irq_info.stage_index = FM_HW_TUNE_OP_ENDED_INDEX;
> +	fmdev->irq_info.fm_int_handlers[fmdev->irq_info.stage_index](fmdev);
> +}
> +
> +static void fm_irq_handle_tune_op_ended(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +	fmdev = arg;
> +	if (fmdev->irq_info.flag & (FM_FR_EVENT | FM_BL_EVENT) & fmdev->
> +	    irq_info.mask) {
> +		pr_debug("(fmdrv): irq: tune ended/bandlimit reached\n");
> +		if (test_and_clear_bit(FM_AF_SWITCH_INPROGRESS, &fmdev->flag)) {
> +			fmdev->irq_info.stage_index = FM_AF_JUMP_RD_FREQ_INDEX;
> +		} else {
> +			complete(&fmdev->maintask_completion);
> +			fmdev->irq_info.stage_index = FM_HW_POWER_ENB_INDEX;
> +		}
> +	} else
> +		fmdev->irq_info.stage_index = FM_HW_POWER_ENB_INDEX;
> +
> +	fmdev->irq_info.fm_int_handlers[fmdev->irq_info.stage_index](fmdev);
> +}
> +
> +static void fm_irq_handle_power_enb(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +
> +	fmdev = arg;
> +	if (fmdev->irq_info.flag & FM_POW_ENB_EVENT) {
> +		pr_debug("(fmdrv): irq: Power Enabled/Disabled\n");
> +		complete(&fmdev->maintask_completion);
> +	}
> +
> +	/* Continue next function in interrupt handler table */
> +	fmdev->irq_info.stage_index = FM_LOW_RSSI_START_INDEX;
> +	fmdev->irq_info.fm_int_handlers[fmdev->irq_info.stage_index](fmdev);
> +}
> +
> +static void fm_irq_handle_low_rssi_start(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +
> +	fmdev = arg;
> +	if ((fmdev->rx.af_mode == FM_RX_RDS_AF_SWITCH_MODE_ON) &&
> +	    (fmdev->irq_info.flag & FM_LEV_EVENT & fmdev->irq_info.mask) &&
> +	    (fmdev->rx.curr_freq != FM_UNDEFINED_FREQ) &&
> +	    (fmdev->rx.cur_station_info.no_of_items_in_afcache != 0)) {
> +		pr_debug("(fmdrv): irq: rssi level has fallen below"
> +			" threshold level\n");
> +
> +		/* Disable further low RSSI interrupts */
> +		fmdev->irq_info.mask &= ~FM_LEV_EVENT;
> +
> +		fmdev->rx.cur_afjump_index = 0;
> +		fmdev->rx.freq_before_jump = fmdev->rx.curr_freq;
> +		fmdev->irq_info.stage_index = FM_AF_JUMP_SETPI_INDEX;
> +	} else {
> +		/* Continue next function in interrupt handler table */
> +		fmdev->irq_info.stage_index = FM_SEND_INTMSK_CMD_INDEX;
> +	}
> +	fmdev->irq_info.fm_int_handlers[fmdev->irq_info.stage_index](fmdev);
> +}
> +
> +static void fm_irq_afjump_set_pi(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +	int ret;
> +	unsigned short payload;
> +
> +	fmdev = arg;
> +	/* Set PI code - must be updated if the AF list is not empty */
> +	payload = fmdev->rx.cur_station_info.picode;
> +	ret = __fm_send_cmd(fmdev, RDS_PI_SET, REG_WR, &payload,
> +			sizeof(payload), NULL);
> +	if (ret < 0)
> +		pr_err("(fmdrv): irq : failed to set PI,"
> +			   "initiating irq recovery process\n");
> +	else
> +		fmdev->irq_info.stage_index =
> +		    FM_AF_JUMP_HANDLE_SETPI_RESP_INDEX;
> +
> +	mod_timer(&fmdev->irq_info.int_timeout_timer, jiffies +
> +		  FM_DRV_TX_TIMEOUT);
> +}
> +
> +static void fm_irq_handle_set_pi_resp(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +	struct sk_buff *skb;
> +	int ret;
> +
> +	fmdev = arg;
> +
> +	ret = __check_cmdresp_status(fmdev, &skb);
> +	if (ret < 0)
> +		return;
> +
> +	/* Continue next function in interrupt handler table */
> +	fmdev->irq_info.stage_index = FM_AF_JUMP_SETPI_MASK_INDEX;
> +
> +	fmdev->irq_info.fm_int_handlers[fmdev->irq_info.stage_index](fmdev);
> +}
> +
> +/*
> + * Set PI mask.
> + * 0xFFFF = Enable PI code matching
> + * 0x0000 = Disable PI code matching
> + */
> +static void fm_irq_afjump_set_pimask(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +	int ret;
> +	unsigned short payload;
> +
> +	fmdev = arg;
> +	payload = 0x0000;
> +	ret = __fm_send_cmd(fmdev, RDS_PI_MASK_SET, REG_WR, &payload,
> +			sizeof(payload), NULL);
> +	if (ret < 0)
> +		pr_err("(fmdrv): irq: failed to set PI mask, "
> +			   "initiating irq recovery process\n");
> +	else
> +		fmdev->irq_info.stage_index =
> +		    FM_AF_JUMP_HANDLE_SETPI_MASK_RESP_INDEX;
> +
> +	mod_timer(&fmdev->irq_info.int_timeout_timer, jiffies +
> +		  FM_DRV_TX_TIMEOUT);
> +}
> +
> +static void fm_irq_handle_set_pimask_resp(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +	struct sk_buff *skb;
> +	int ret;
> +
> +	fmdev = arg;
> +
> +	ret = __check_cmdresp_status(fmdev, &skb);
> +	if (ret < 0)
> +		return;

Since ret is not used, why not do just:

	if (!__check_cmdresp_status(fmdev, &skb))
		fm_call_irq_stage(fmdev, FM_AF_JUMP_SET_AF_FREQ_INDEX);

A lot shorter and just as readable.

If __check_cmdresp_status() is slightly changed to allow the second arg to be
NULL then you can even dump the skb local variable.

In that case the function would look like this:

static void fm_irq_handle_set_pimask_resp(struct fmdrv_ops *fmdev)
{
	if (!__check_cmdresp_status(fmdev, NULL))
		fm_call_irq_stage(fmdev, FM_AF_JUMP_SET_AF_FREQ_INDEX);
}

That's from 13 lines to just 2.

BTW, why all the __ at the start? These are just local functions, so I don't
really see any reason for that prefix.

> +
> +	/* Continue next function in interrupt handler table */
> +	fmdev->irq_info.stage_index = FM_AF_JUMP_SET_AF_FREQ_INDEX;
> +	fmdev->irq_info.fm_int_handlers[fmdev->irq_info.stage_index](fmdev);
> +}
> +
> +static void fm_irq_afjump_setfreq(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +	unsigned short frq_index;
> +	unsigned short payload;
> +	int ret;
> +
> +	fmdev = arg;
> +	pr_debug("(fmdrv): Swtiching to %d KHz\n",
> +	       fmdev->rx.cur_station_info.af_cache[fmdev->rx.cur_afjump_index]);
> +	frq_index =
> +	    (fmdev->rx.cur_station_info.af_cache[fmdev->rx.cur_afjump_index] -
> +	     fmdev->rx.region.bottom_frequency) / FM_FREQ_MUL;
> +
> +	payload = frq_index;
> +	ret = __fm_send_cmd(fmdev, AF_FREQ_SET, REG_WR, &payload,
> +			sizeof(payload), NULL);
> +	if (ret < 0)
> +		pr_err("(fmdrv): irq : failed to set AF freq, "
> +			   "initiating irq recovery process\n");
> +	else
> +		fmdev->irq_info.stage_index =
> +		    FM_AF_JUMP_HENDLE_SET_AFFREQ_RESP_INDEX;
> +
> +	mod_timer(&fmdev->irq_info.int_timeout_timer, jiffies +
> +		  FM_DRV_TX_TIMEOUT);
> +}
> +
> +static void fm_irq_handle_setfreq_resp(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +	struct sk_buff *skb;
> +	int ret;
> +
> +	fmdev = arg;
> +
> +	ret = __check_cmdresp_status(fmdev, &skb);
> +	if (ret < 0) {
> +		return;
> +	} else {

No need for the 'else' here.

> +		/* Continue next function in interrupt handler table */
> +		fmdev->irq_info.stage_index = FM_AF_JUMP_ENABLE_INT_INDEX;
> +	}
> +	fmdev->irq_info.fm_int_handlers[fmdev->irq_info.stage_index](fmdev);
> +}
> +
> +static void fm_irq_afjump_enableint(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +	unsigned short payload;
> +	int ret;
> +
> +	fmdev = arg;
> +	/* Enable FR (tuning operation ended) interrupt */
> +	payload = FM_FR_EVENT;
> +	ret = __fm_send_cmd(fmdev, INT_MASK_SET, REG_WR, &payload,
> +			sizeof(payload), NULL);
> +	if (ret)
> +		pr_err("(fmdrv): irq : failed to enable FR interrupt, "
> +			   "initiating irq recovery process\n");
> +	else
> +		fmdev->irq_info.stage_index = FM_AF_JUMP_ENABLE_INT_RESP_INDEX;
> +
> +	mod_timer(&fmdev->irq_info.int_timeout_timer, jiffies +
> +		  FM_DRV_TX_TIMEOUT);
> +}
> +
> +static void fm_irq_afjump_enableint_resp(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +	struct sk_buff *skb;
> +	int ret;
> +
> +	fmdev = arg;
> +
> +	ret = __check_cmdresp_status(fmdev, &skb);
> +	if (ret < 0)
> +		return;
> +
> +	/* Continue next function in interrupt handler table */
> +	fmdev->irq_info.stage_index = FM_AF_JUMP_START_AFJUMP_INDEX;
> +	fmdev->irq_info.fm_int_handlers[fmdev->irq_info.stage_index](fmdev);
> +}
> +
> +static void fm_irq_start_afjump(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +	unsigned short payload;
> +	int ret;
> +
> +	fmdev = arg;
> +	payload = FM_TUNER_AF_JUMP_MODE;
> +	ret = __fm_send_cmd(fmdev, TUNER_MODE_SET, REG_WR, &payload,
> +			sizeof(payload), NULL);
> +	if (ret)
> +		pr_err("(fmdrv): irq : failed to start af switch, "
> +			   "initiating irq recovery process\n");
> +	else
> +		fmdev->irq_info.stage_index =
> +		    FM_AF_JUMP_HANDLE_START_AFJUMP_RESP_INDEX;
> +
> +	mod_timer(&fmdev->irq_info.int_timeout_timer, jiffies +
> +		  FM_DRV_TX_TIMEOUT);

Hmm, a lot of these functions look alike. I think we need to add an inline
like this as well:

static inline void fm_irq_timeout_stage(struct fmdrv_ops *fmdev, unsigned char stage)
{
        fmdev->irq_info.stage_index = stage;
	mod_timer(&fmdev->irq_info.int_timeout_timer, jiffies + FM_DRV_TX_TIMEOUT);
}

This function then becomes:

static void fm_irq_start_afjump(struct fmdrv_ops *fmdev)
{
	unsigned short payload = FM_TUNER_AF_JUMP_MODE;

	if (!__fm_send_cmd(fmdev, TUNER_MODE_SET, REG_WR, &payload,
			sizeof(payload), NULL))
		fm_irq_timeout_stage(fmdev, FM_AF_JUMP_HANDLE_START_AFJUMP_RESP_INDEX);
}

> +}
> +
> +static void fm_irq_handle_start_afjump_resp(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +	struct sk_buff *skb;
> +	int ret;
> +
> +	fmdev = arg;
> +
> +	ret = __check_cmdresp_status(fmdev, &skb);
> +	if (ret < 0)
> +		return;
> +
> +	fmdev->irq_info.stage_index = FM_SEND_FLAG_GETCMD_INDEX;
> +	set_bit(FM_AF_SWITCH_INPROGRESS, &fmdev->flag);
> +	clear_bit(FM_INTTASK_RUNNING, &fmdev->flag);
> +}
> +
> +static void fm_irq_afjump_rd_freq(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +	unsigned short payload;
> +	int ret;
> +
> +	fmdev = arg;
> +	ret = __fm_send_cmd(fmdev, FREQ_SET, REG_RD, NULL,
> +			sizeof(payload), NULL);
> +	if (ret < 0)
> +		pr_err("(fmdrv): irq: failed to read cur freq, "
> +			   "initiating irq recovery process\n");
> +	else
> +		fmdev->irq_info.stage_index = FM_AF_JUMP_RD_FREQ_RESP_INDEX;
> +
> +	/* Start timer to track timeout */
> +	mod_timer(&fmdev->irq_info.int_timeout_timer, jiffies +
> +		  FM_DRV_TX_TIMEOUT);
> +}
> +
> +static void fm_irq_afjump_rd_freq_resp(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +	struct sk_buff *skb;
> +	unsigned short read_freq;
> +	unsigned int curr_freq, jumped_freq;
> +	int ret;
> +
> +	fmdev = arg;
> +
> +	ret = __check_cmdresp_status(fmdev, &skb);
> +	if (ret < 0)
> +		return;
> +
> +	/* Skip header info and copy only response data */
> +	skb_pull(skb, sizeof(struct fm_event_msg_hdr));
> +	memcpy(&read_freq, skb->data, sizeof(read_freq));
> +	read_freq = be16_to_cpu(read_freq);
> +	curr_freq = fmdev->rx.region.bottom_frequency +
> +	    ((unsigned int)read_freq * FM_FREQ_MUL);
> +
> +	jumped_freq =
> +	    fmdev->rx.cur_station_info.af_cache[fmdev->rx.cur_afjump_index];
> +
> +	/* If the frequency was changed the jump succeeded */
> +	if ((curr_freq != fmdev->rx.freq_before_jump) &&
> +	    (curr_freq == jumped_freq)) {
> +		pr_debug("(fmdrv): Successfully switched to alternate"
> +			"frequency %d\n", curr_freq);
> +		fmdev->rx.curr_freq = curr_freq;
> +		fm_rx_reset_rds_cache(fmdev);
> +
> +		/* AF feature is on, enable low level RSSI interrupt */
> +		if (fmdev->rx.af_mode == FM_RX_RDS_AF_SWITCH_MODE_ON)
> +			fmdev->irq_info.mask |= FM_LEV_EVENT;
> +
> +		fmdev->irq_info.stage_index = FM_LOW_RSSI_FINISH_INDEX;
> +	} else {		/* jump to the next freq in the AF list */
> +		fmdev->rx.cur_afjump_index++;
> +
> +		/* If we reached the end of the list - stop searching */
> +		if (fmdev->rx.cur_afjump_index >=
> +		    fmdev->rx.cur_station_info.no_of_items_in_afcache) {
> +			pr_debug("(fmdrv): AF switch processing failed\n");
> +			fmdev->irq_info.stage_index = FM_LOW_RSSI_FINISH_INDEX;
> +		} else {	/* AF List is not over - try next one */
> +
> +			pr_debug("(fmdrv): Trying next freq in AF cache\n");
> +			fmdev->irq_info.stage_index = FM_AF_JUMP_SETPI_INDEX;
> +		}
> +	}
> +	fmdev->irq_info.fm_int_handlers[fmdev->irq_info.stage_index](fmdev);
> +}
> +
> +static void fm_irq_handle_low_rssi_finish(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +
> +	fmdev = arg;
> +	/* Continue next function in interrupt handler table */
> +	fmdev->irq_info.stage_index = FM_SEND_INTMSK_CMD_INDEX;
> +	fmdev->irq_info.fm_int_handlers[fmdev->irq_info.stage_index](fmdev);
> +}
> +
> +static void fm_irq_send_intmsk_cmd(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +	unsigned short payload;
> +	int ret;
> +
> +	fmdev = arg;
> +
> +	/* Re-enable FM interrupts */
> +	payload = fmdev->irq_info.mask;
> +	ret = __fm_send_cmd(fmdev, INT_MASK_SET, REG_WR, &payload,
> +			sizeof(payload), NULL);
> +	if (ret)
> +		pr_err("(fmdrv): irq: failed to send int_mask_set cmd, "
> +			   "initiating irq recovery process\n");
> +	else
> +		fmdev->irq_info.stage_index = FM_HANDLE_INTMSK_CMD_RESP_INDEX;
> +
> +	/* Start timer to track timeout */
> +	mod_timer(&fmdev->irq_info.int_timeout_timer, jiffies +
> +		  FM_DRV_TX_TIMEOUT);
> +}
> +
> +static void fm_irq_handle_intmsk_cmd_resp(void *arg)
> +{
> +	struct fmdrv_ops *fmdev;
> +	struct sk_buff *skb;
> +	int ret;
> +
> +	fmdev = arg;
> +
> +	ret = __check_cmdresp_status(fmdev, &skb);
> +	if (ret < 0)
> +		return;
> +	/*
> +	 * This is last function in interrupt table to be executed.
> +	 * So, reset stage index to 0.
> +	 */
> +	fmdev->irq_info.stage_index = FM_SEND_FLAG_GETCMD_INDEX;
> +
> +	/* Start processing any pending interrupt */
> +	if (test_and_clear_bit(FM_INTTASK_SCHEDULE_PENDING, &fmdev->flag)) {
> +		fmdev->irq_info.fm_int_handlers[fmdev->irq_info.stage_index]
> +						(fmdev);
> +	} else
> +		clear_bit(FM_INTTASK_RUNNING, &fmdev->flag);
> +}
> +
> +/* Returns availability of RDS data in internel buffer */
> +int fmc_is_rds_data_available(struct fmdrv_ops *fmdev, struct file *file,
> +				struct poll_table_struct *pts)
> +{
> +	poll_wait(file, &fmdev->rx.rds.read_queue, pts);
> +	if (fmdev->rx.rds.rd_index != fmdev->rx.rds.wr_index)
> +		return 0;
> +
> +	return -EAGAIN;
> +}
> +
> +/* Copies RDS data from internal buffer to user buffer */
> +int fmc_transfer_rds_from_internal_buff(struct fmdrv_ops *fmdev,
> +					struct file *file,
> +					char __user *buf, size_t count)
> +{
> +	unsigned int block_count;
> +	unsigned long flags;
> +	int ret;
> +
> +	if (fmdev->rx.rds.wr_index == fmdev->rx.rds.rd_index) {
> +		if (file->f_flags & O_NONBLOCK)
> +			return -EWOULDBLOCK;
> +
> +		ret = wait_event_interruptible(fmdev->rx.rds.read_queue,
> +					       (fmdev->rx.rds.wr_index !=
> +						fmdev->rx.rds.rd_index));
> +		if (ret)
> +			return -EINTR;
> +	}
> +
> +	/* Calculate block count from byte count */
> +	count /= 3;
> +	block_count = 0;
> +	ret = 0;
> +
> +	spin_lock_irqsave(&fmdev->rds_buff_lock, flags);
> +
> +	while (block_count < count) {
> +		if (fmdev->rx.rds.wr_index == fmdev->rx.rds.rd_index)
> +			break;
> +
> +		if (copy_to_user
> +		    (buf, &fmdev->rx.rds.buffer[fmdev->rx.rds.rd_index],
> +		     FM_RDS_BLOCK_SIZE))
> +			break;
> +
> +		fmdev->rx.rds.rd_index += FM_RDS_BLOCK_SIZE;
> +		if (fmdev->rx.rds.rd_index >= fmdev->rx.rds.buf_size)
> +			fmdev->rx.rds.rd_index = 0;
> +
> +		block_count++;
> +		buf += FM_RDS_BLOCK_SIZE;
> +		ret += FM_RDS_BLOCK_SIZE;
> +	}
> +	spin_unlock_irqrestore(&fmdev->rds_buff_lock, flags);
> +	return ret;
> +}
> +
> +int fmc_set_frequency(struct fmdrv_ops *fmdev, unsigned int freq_to_set)
> +{
> +	int ret;
> +
> +	switch (fmdev->curr_fmmode) {
> +	case FM_MODE_RX:
> +		ret = fm_rx_set_frequency(fmdev, freq_to_set);

Just return directly.

> +		break;
> +
> +	case FM_MODE_TX:
> +		ret = fm_tx_set_frequency(fmdev, freq_to_set);

Ditto.

> +		break;
> +
> +	default:
> +		ret = -EINVAL;

Ditto.

Similar things can be done in the other functions. Saves a 'ret' variable
which makes it shorter and it is just as readable (if not more).

> +	}
> +	return ret;
> +}
> +
> +int fmc_get_frequency(struct fmdrv_ops *fmdev, unsigned int *cur_tuned_frq)
> +{
> +	int ret = 0;
> +
> +	if (fmdev->rx.curr_freq == FM_UNDEFINED_FREQ) {
> +		pr_err("(fmdrv): RX frequency is not set\n");
> +		return -EPERM;
> +	}
> +	if (cur_tuned_frq == NULL) {
> +		pr_err("(fmdrv): Invalid memory\n");
> +		return -ENOMEM;
> +	}
> +
> +	switch (fmdev->curr_fmmode) {
> +	case FM_MODE_RX:
> +		*cur_tuned_frq = fmdev->rx.curr_freq;
> +		break;
> +
> +	case FM_MODE_TX:
> +		*cur_tuned_frq = 0;	/* TODO : Change this later */
> +		break;
> +
> +	default:
> +		ret = -EINVAL;
> +	}
> +
> +	return ret;
> +}
> +
> +int fmc_set_region(struct fmdrv_ops *fmdev, unsigned char region_to_set)
> +{
> +	int ret;
> +
> +	switch (fmdev->curr_fmmode) {
> +	case FM_MODE_RX:
> +		ret = fm_rx_set_region(fmdev, region_to_set);
> +		break;
> +
> +	case FM_MODE_TX:
> +		ret = fm_tx_set_region(fmdev, region_to_set);
> +		break;
> +
> +	default:
> +		ret = -EINVAL;
> +	}
> +	return ret;
> +}
> +
> +int fmc_set_mute_mode(struct fmdrv_ops *fmdev, unsigned char mute_mode_toset)
> +{
> +	int ret;
> +
> +	switch (fmdev->curr_fmmode) {
> +	case FM_MODE_RX:
> +		ret = fm_rx_set_mute_mode(fmdev, mute_mode_toset);
> +		break;
> +
> +	case FM_MODE_TX:
> +		ret = fm_tx_set_mute_mode(fmdev, mute_mode_toset);
> +		break;
> +
> +	default:
> +		ret = -EINVAL;
> +	}
> +	return ret;
> +}
> +
> +int fmc_set_stereo_mono(struct fmdrv_ops *fmdev, unsigned short mode)
> +{
> +	int ret;
> +
> +	switch (fmdev->curr_fmmode) {
> +	case FM_MODE_RX:
> +		ret = fm_rx_set_stereo_mono(fmdev, mode);
> +		break;
> +
> +	case FM_MODE_TX:
> +		ret = fm_tx_set_stereo_mono(fmdev, mode);
> +		break;
> +
> +	default:
> +		ret = -EINVAL;
> +	}
> +	return ret;
> +}
> +
> +int fmc_set_rds_mode(struct fmdrv_ops *fmdev, unsigned char rds_en_dis)
> +{
> +	int ret;
> +
> +	switch (fmdev->curr_fmmode) {
> +	case FM_MODE_RX:
> +		ret = fm_rx_set_rds_mode(fmdev, rds_en_dis);
> +		break;
> +
> +	case FM_MODE_TX:
> +		ret = fm_tx_set_rds_mode(fmdev, rds_en_dis);
> +		break;
> +
> +	default:
> +		ret = -EINVAL;
> +	}
> +	return ret;
> +}
> +
> +/* Sends power off command to the chip */
> +static int fm_power_down(struct fmdrv_ops *fmdev)
> +{
> +	unsigned short payload;
> +	int ret = 0;
> +
> +	if (!test_bit(FM_CORE_READY, &fmdev->flag)) {
> +		pr_err("(fmdrv): FM core is not ready\n");
> +		return -EPERM;
> +	}
> +	if (fmdev->curr_fmmode == FM_MODE_OFF) {
> +		pr_debug("(fmdrv): FM chip is already in OFF state\n");
> +		return ret;
> +	}
> +
> +	payload = 0x0;
> +	ret = fmc_send_cmd(fmdev, FM_POWER_MODE, REG_WR, &payload,
> +		sizeof(payload), NULL, NULL);
> +	if (ret < 0)
> +		return ret;
> +
> +	ret = fmc_release(fmdev);
> +	if (ret < 0)
> +		pr_err("(fmdrv): FM CORE release failed\n");
> +
> +	return ret;
> +}
> +
> +/* Reads init command from FM firmware file and loads to the chip */
> +static int fm_download_firmware(struct fmdrv_ops *fmdev,
> +				const char *firmware_name)
> +{
> +	const struct firmware *fw_entry;
> +	struct bts_header *fw_header;
> +	struct bts_action *action;
> +	struct bts_action_delay *delay;
> +	char *fw_data;
> +	int ret, fw_len, cmd_cnt;
> +
> +	cmd_cnt = 0;
> +	set_bit(FM_FIRMWARE_DW_INPROGRESS, &fmdev->flag);
> +
> +	ret = request_firmware(&fw_entry, firmware_name,
> +				&fmdev->radio_dev->dev);
> +	if (ret < 0) {
> +		pr_err("(fmdrv): Unable to read firmware(%s) content\n",
> +			   firmware_name);
> +		return ret;
> +	}
> +	pr_debug("(fmdrv): Firmware(%s) length : %d bytes\n", firmware_name,
> +		   fw_entry->size);
> +
> +	fw_data = (void *)fw_entry->data;
> +	fw_len = fw_entry->size;
> +
> +	fw_header = (struct bts_header *)fw_data;
> +	if (fw_header->magic != FM_FW_FILE_HEADER_MAGIC) {
> +		pr_err("(fmdrv): %s not a legal TI firmware file\n",
> +			firmware_name);
> +		ret = -EINVAL;
> +		goto rel_fw;
> +	}
> +	pr_debug("(fmdrv): Firmware(%s) magic number : 0x%x\n", firmware_name,
> +		   fw_header->magic);
> +
> +	/* Skip file header info , we already verified it */
> +	fw_data += sizeof(struct bts_header);
> +	fw_len -= sizeof(struct bts_header);
> +
> +	while (fw_data && fw_len > 0) {
> +		action = (struct bts_action *)fw_data;
> +
> +		switch (action->type) {
> +		case ACTION_SEND_COMMAND:	/* Send */
> +			ret = fmc_send_cmd(fmdev, 0, 0, action->data,
> +				action->size, NULL, NULL);
> +			if (ret < 0)
> +				goto rel_fw;
> +
> +			cmd_cnt++;
> +			break;
> +
> +		case ACTION_DELAY:	/* Delay */
> +			delay = (struct bts_action_delay *)action->data;
> +			mdelay(delay->msec);
> +			break;
> +		}
> +
> +		fw_data += (sizeof(struct bts_action) + (action->size));
> +		fw_len -= (sizeof(struct bts_action) + (action->size));
> +	}
> +	pr_debug("(fmdrv): Firmare commands(%d) loaded to chip\n", cmd_cnt);
> +rel_fw:
> +	release_firmware(fw_entry);
> +	clear_bit(FM_FIRMWARE_DW_INPROGRESS, &fmdev->flag);
> +
> +	return ret;
> +}
> +
> +/* Loads default RX configuration to the chip */
> +static int __load_default_rx_configuration(struct fmdrv_ops *fmdev)
> +{
> +	int ret;
> +
> +	ret = fm_rx_set_volume(fmdev, FM_DEFAULT_RX_VOLUME);
> +	if (ret < 0)
> +		return ret;
> +
> +	ret = fm_rx_set_rssi_threshold(fmdev, FM_DEFAULT_RSSI_THRESHOLD);
> +	return ret;
> +}
> +
> +/* Does FM power on sequence */
> +static int fm_power_up(struct fmdrv_ops *fmdev, unsigned char fw_option)
> +{
> +	unsigned short payload, asic_id, asic_ver;
> +	int resp_len, ret;
> +	char fw_name[50];
> +
> +	if (fw_option >= FM_MODE_ENTRY_MAX) {
> +		pr_err("(fmdrv): Invalid firmware download option\n");
> +		return -EINVAL;
> +	}
> +
> +	/*
> +	 * Initialize FM common module. FM GPIO toggling is
> +	 * taken care in Shared Transport driver.
> +	 */
> +	ret = fmc_prepare(fmdev);
> +	if (ret < 0) {
> +		pr_err("(fmdrv): Unable to prepare FM Common\n");
> +		return ret;
> +	}
> +
> +	payload = FM_ENABLE;
> +	ret = fmc_send_cmd(fmdev, FM_POWER_MODE, REG_WR, &payload,
> +			sizeof(payload), NULL, NULL);
> +	if (ret < 0)
> +		goto rel;
> +
> +	/* Allow the chip to settle down in Channel-8 mode */
> +	msleep(20);
> +
> +	ret = fmc_send_cmd(fmdev, ASIC_ID_GET, REG_RD, NULL,
> +			sizeof(asic_id), &asic_id, &resp_len);
> +	if (ret < 0)
> +		goto rel;
> +
> +	ret = fmc_send_cmd(fmdev, ASIC_VER_GET, REG_RD, NULL,
> +			sizeof(asic_ver), &asic_ver, &resp_len);
> +	if (ret < 0)
> +		goto rel;
> +
> +	pr_debug("(fmdrv): ASIC ID: 0x%x , ASIC Version: %d\n",
> +		be16_to_cpu(asic_id), be16_to_cpu(asic_ver));
> +
> +	sprintf(fw_name, "%s_%x.%d.bts", FM_FMC_FW_FILE_START,
> +		be16_to_cpu(asic_id), be16_to_cpu(asic_ver));
> +	ret = fm_download_firmware(fmdev, fw_name);
> +	if (ret < 0) {
> +		pr_debug("(fmdrv): Failed to download firmware file %s\n",
> +			fw_name);
> +		goto rel;
> +	}
> +
> +	sprintf(fw_name, "%s_%x.%d.bts", (fw_option == FM_MODE_RX) ?
> +		FM_RX_FW_FILE_START : FM_TX_FW_FILE_START,
> +		be16_to_cpu(asic_id), be16_to_cpu(asic_ver));
> +	ret = fm_download_firmware(fmdev, fw_name);
> +	if (ret < 0) {
> +		pr_debug("(fmdrv): Failed to download firmware file %s\n",
> +			fw_name);
> +		goto rel;
> +	} else
> +		return ret;
> +rel:
> +	fmc_release(fmdev);
> +
> +	return ret;
> +}
> +
> +/* Set FM Modes(TX, RX, OFF) */
> +int fmc_set_mode(struct fmdrv_ops *fmdev, unsigned char fm_mode)
> +{
> +	int ret = 0;
> +
> +	if (fm_mode >= FM_MODE_ENTRY_MAX) {
> +		pr_err("(fmdrv): Invalid FM mode\n");
> +		return -EINVAL;
> +	}
> +	if (fmdev->curr_fmmode == fm_mode) {
> +		pr_debug("(fmdrv): Already fm is in mode(%d)\n", fm_mode);
> +		return ret;
> +	}
> +
> +	switch (fm_mode) {
> +	case FM_MODE_OFF:	/* OFF Mode */
> +		ret = fm_power_down(fmdev);
> +		if (ret < 0) {
> +			pr_err("(fmdrv): Failed to set OFF mode\n");
> +			return ret;
> +		}
> +		break;
> +
> +	case FM_MODE_TX:	/* TX Mode */
> +	case FM_MODE_RX:	/* RX Mode */
> +		/* Power down before switching to TX or RX mode */
> +		if (fmdev->curr_fmmode != FM_MODE_OFF) {
> +			ret = fm_power_down(fmdev);
> +			if (ret < 0) {
> +				pr_err("(fmdrv): Failed to set OFF mode\n");
> +				return ret;
> +			}
> +			msleep(30);
> +		}
> +		ret = fm_power_up(fmdev, fm_mode);
> +		if (ret < 0) {
> +			pr_err("(fmdrv): Failed to load firmware\n");
> +			return ret;
> +		}
> +	}
> +	fmdev->curr_fmmode = fm_mode;
> +
> +	/* Set default configuration */
> +	if (fmdev->curr_fmmode == FM_MODE_RX) {
> +		pr_debug("(fmdrv): Loading default rx configuration..\n");
> +		ret = __load_default_rx_configuration(fmdev);
> +		if (ret < 0)
> +			pr_err("(fmdrv): Failed to load default values\n");
> +	}
> +
> +	return ret;
> +}
> +
> +/* Returns current FM mode (TX, RX, OFF) */
> +int fmc_get_mode(struct fmdrv_ops *fmdev, unsigned char *fmmode)
> +{
> +	if (!test_bit(FM_CORE_READY, &fmdev->flag)) {
> +		pr_err("(fmdrv): FM core is not ready\n");
> +		return -EPERM;
> +	}
> +	if (fmmode == NULL) {
> +		pr_err("(fmdrv): Invalid memory\n");
> +		return -ENOMEM;
> +	}
> +
> +	*fmmode = fmdev->curr_fmmode;
> +	return 0;
> +}
> +
> +/* Called by ST layer when FM packet is available */
> +static long fm_st_receive(void *arg, struct sk_buff *skb)
> +{
> +	struct fmdrv_ops *fmdev;
> +
> +	fmdev = (struct fmdrv_ops *)arg;
> +
> +	if (skb == NULL) {
> +		pr_err("(fmdrv): Invalid SKB received from ST\n");
> +		return -EFAULT;
> +	}
> +
> +	if (skb->cb[0] != FM_PKT_LOGICAL_CHAN_NUMBER) {
> +		pr_err("(fmdrv): Received SKB (%p) is not FM Channel 8 pkt\n",
> +			skb);
> +		return -EINVAL;
> +	}
> +
> +	memcpy(skb_push(skb, 1), &skb->cb[0], 1);
> +	skb_queue_tail(&fmdev->rx_q, skb);
> +	tasklet_schedule(&fmdev->rx_task);
> +
> +	return 0;
> +}
> +
> +/*
> + * Called by ST layer to indicate protocol registration completion
> + * status.
> + */
> +static void fm_st_reg_comp_cb(void *arg, char data)
> +{
> +	struct fmdrv_ops *fmdev;
> +
> +	fmdev = (struct fmdrv_ops *)arg;
> +	fmdev->streg_cbdata = data;
> +	complete(&wait_for_fmdrv_reg_comp);
> +}
> +
> +/*
> + * This function will be called from FM V4L2 open function.
> + * Register with ST driver and initialize driver data.
> + */
> +int fmc_prepare(struct fmdrv_ops *fmdev)
> +{
> +	static struct st_proto_s fm_st_proto;
> +	unsigned long timeleft;
> +	int ret = 0;
> +
> +	if (test_bit(FM_CORE_READY, &fmdev->flag)) {
> +		pr_debug("(fmdrv): FM Core is already up\n");
> +		return ret;
> +	}
> +
> +	memset(&fm_st_proto, 0, sizeof(fm_st_proto));
> +	fm_st_proto.type = ST_FM;
> +	fm_st_proto.recv = fm_st_receive;
> +	fm_st_proto.match_packet = NULL;
> +	fm_st_proto.reg_complete_cb = fm_st_reg_comp_cb;
> +	fm_st_proto.write = NULL; /* TI ST driver will fill write pointer */
> +	fm_st_proto.priv_data = fmdev;
> +
> +	ret = st_register(&fm_st_proto);
> +	if (ret == -EINPROGRESS) {
> +		init_completion(&wait_for_fmdrv_reg_comp);
> +		fmdev->streg_cbdata = -EINPROGRESS;
> +		pr_debug("(fmdrv): %s waiting for ST reg completion signal\n",
> +			__func__);
> +
> +		timeleft =
> +		wait_for_completion_timeout(&wait_for_fmdrv_reg_comp,
> +		FM_ST_REGISTER_TIMEOUT);
> +
> +		if (!timeleft) {
> +			pr_err("(fmdrv): Timeout(%d sec), didn't get reg "
> +			"completion signal from ST\n",
> +			jiffies_to_msecs(FM_ST_REGISTER_TIMEOUT) / 1000);
> +			return -ETIMEDOUT;
> +		}
> +		if (fmdev->streg_cbdata != 0) {
> +			pr_err("(fmdrv): ST reg comp CB called with error "
> +			"status %d\n", fmdev->streg_cbdata);
> +			return -EAGAIN;
> +		}
> +		ret = 0;
> +	} else if (ret == -1) {
> +		pr_err("(fmdrv): st_register failed %d\n", ret);
> +		return -EAGAIN;
> +	}
> +
> +	if (fm_st_proto.write != NULL) {
> +		g_st_write = fm_st_proto.write;
> +	} else {
> +		pr_err("(fmdrv): Failed to get ST write func pointer\n");
> +		ret = st_unregister(ST_FM);
> +		if (ret < 0)
> +			pr_err("(fmdrv): st_unregister failed %d\n", ret);
> +		return -EAGAIN;
> +	}
> +
> +	spin_lock_init(&fmdev->rds_buff_lock);
> +	spin_lock_init(&fmdev->resp_skb_lock);
> +
> +	/* Initialize TX queue and TX tasklet */
> +	skb_queue_head_init(&fmdev->tx_q);
> +	tasklet_init(&fmdev->tx_task, __send_tasklet, (unsigned long)fmdev);
> +
> +	/* Initialize RX Queue and RX tasklet */
> +	skb_queue_head_init(&fmdev->rx_q);
> +	tasklet_init(&fmdev->rx_task, __recv_tasklet, (unsigned long)fmdev);
> +
> +	fmdev->irq_info.stage_index = 0;
> +	atomic_set(&fmdev->tx_cnt, 1);
> +	fmdev->response_completion = NULL;
> +
> +	init_timer(&fmdev->irq_info.int_timeout_timer);
> +	fmdev->irq_info.int_timeout_timer.function =
> +	    &__int_timeout_handler;
> +	fmdev->irq_info.int_timeout_timer.data = (unsigned long)fmdev;
> +	fmdev->irq_info.mask =
> +	    FM_MAL_EVENT /*| FM_STIC_EVENT <<Enable this later>> */ ;
> +
> +	/* Region info */
> +	memcpy(&fmdev->rx.region, &region_configs[default_radio_region],
> +	       sizeof(struct region_info));
> +
> +	fmdev->rx.curr_mute_mode = FM_MUTE_OFF;
> +	fmdev->rx.curr_rf_depend_mute = FM_RX_RF_DEPENDENT_MUTE_OFF;
> +	fmdev->rx.rds.flag = FM_RDS_DISABLE;
> +	fmdev->rx.curr_freq = FM_UNDEFINED_FREQ;
> +	fmdev->rx.rds_mode = FM_RDS_SYSTEM_RDS;
> +	fmdev->rx.af_mode = FM_RX_RDS_AF_SWITCH_MODE_OFF;
> +	fmdev->irq_info.irq_service_timeout_retry = 0;
> +
> +	fm_rx_reset_rds_cache(fmdev);
> +	init_waitqueue_head(&fmdev->rx.rds.read_queue);
> +
> +	fm_rx_reset_curr_station_info(fmdev);
> +	set_bit(FM_CORE_READY, &fmdev->flag);
> +
> +	return ret;
> +}
> +
> +/*
> + * This function will be called from FM V4L2 release function.
> + * Unregister from ST driver.
> + */
> +int fmc_release(struct fmdrv_ops *fmdev)
> +{
> +	int ret;
> +
> +	if (!test_bit(FM_CORE_READY, &fmdev->flag)) {
> +		pr_debug("(fmdrv): FM Core is already down\n");
> +		return 0;
> +	}
> +	/* Sevice pending read */
> +	wake_up_interruptible(&fmdev->rx.rds.read_queue);
> +
> +	tasklet_kill(&fmdev->tx_task);
> +	tasklet_kill(&fmdev->rx_task);
> +
> +	skb_queue_purge(&fmdev->tx_q);
> +	skb_queue_purge(&fmdev->rx_q);
> +
> +	fmdev->response_completion = NULL;
> +	fmdev->rx.curr_freq = 0;
> +
> +	ret = st_unregister(ST_FM);
> +	if (ret < 0)
> +		pr_err("(fmdrv): Failed to de-register FM from ST %d\n", ret);
> +	else
> +		pr_debug("(fmdrv): Successfully unregistered from ST\n");
> +
> +	clear_bit(FM_CORE_READY, &fmdev->flag);
> +	return ret;
> +}
> +
> +/*
> + * Module init function. Ask FM V4L module to register video device.
> + * Allocate memory for FM driver context and RX RDS buffer.
> + */
> +static int __init fm_drv_init(void)
> +{
> +	struct fmdrv_ops *fmdev = NULL;
> +	int ret = -ENOMEM;
> +
> +	pr_debug("(fmdrv): FM driver version %s\n", FM_DRV_VERSION);
> +
> +	fmdev = kzalloc(sizeof(struct fmdrv_ops), GFP_KERNEL);
> +	if (NULL == fmdev) {
> +		pr_err("(fmdrv): Can't allocate operation structure memory\n");
> +		return ret;
> +	}
> +	fmdev->rx.rds.buf_size = default_rds_buf * FM_RDS_BLOCK_SIZE;
> +	fmdev->rx.rds.buffer = kzalloc(fmdev->rx.rds.buf_size, GFP_KERNEL);
> +	if (NULL == fmdev->rx.rds.buffer) {
> +		pr_err("(fmdrv): Can't allocate rds ring buffer\n");
> +		goto rel_dev;
> +	}
> +
> +	ret = fm_v4l2_init_video_device(fmdev, radio_nr);
> +	if (ret < 0)
> +		goto rel_rdsbuf;
> +
> +	fmdev->irq_info.fm_int_handlers = g_IntHandlerTable;
> +	fmdev->curr_fmmode = FM_MODE_OFF;
> +	fmdev->tx_data.pwr_lvl = FM_PWR_LVL_DEF;
> +	fmdev->tx_data.preemph = FM_TX_PREEMPH_50US;
> +	return ret;
> +
> +rel_rdsbuf:
> +	kfree(fmdev->rx.rds.buffer);
> +rel_dev:
> +	kfree(fmdev);
> +
> +	return ret;
> +}
> +
> +/* Module exit function. Ask FM V4L module to unregister video device */
> +static void __exit fm_drv_exit(void)
> +{
> +	struct fmdrv_ops *fmdev = NULL;
> +
> +	fmdev = fm_v4l2_deinit_video_device();
> +	if (fmdev != NULL) {
> +		kfree(fmdev->rx.rds.buffer);
> +		kfree(fmdev);
> +	}
> +}
> +
> +module_init(fm_drv_init);
> +module_exit(fm_drv_exit);
> +
> +/* ------------- Module Info ------------- */
> +MODULE_AUTHOR("Raja Mani <raja_mani@...com>");
> +MODULE_DESCRIPTION("FM Driver for Connectivity chip of Texas Instruments. "
> +		   FM_DRV_VERSION);
> +MODULE_VERSION(FM_DRV_VERSION);
> +MODULE_LICENSE("GPL");
> diff --git a/drivers/media/radio/wl128x/fmdrv_common.h b/drivers/media/radio/wl128x/fmdrv_common.h
> new file mode 100644
> index 0000000..d76550d
> --- /dev/null
> +++ b/drivers/media/radio/wl128x/fmdrv_common.h
> @@ -0,0 +1,402 @@
> +/*
> + *  FM Driver for Connectivity chip of Texas Instruments.
> + *  FM Common module header file
> + *
> + *  Copyright (C) 2010 Texas Instruments
> + *
> + *  This program is free software; you can redistribute it and/or modify
> + *  it under the terms of the GNU General Public License version 2 as
> + *  published by the Free Software Foundation.
> + *
> + *  This program is distributed in the hope that it will be useful,
> + *  but WITHOUT ANY WARRANTY; without even the implied warranty of
> + *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
> + *  GNU General Public License for more details.
> + *
> + *  You should have received a copy of the GNU General Public License
> + *  along with this program; if not, write to the Free Software
> + *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
> + *
> + */
> +
> +#ifndef _FMDRV_COMMON_H
> +#define _FMDRV_COMMON_H
> +
> +#define FM_ST_REGISTER_TIMEOUT   msecs_to_jiffies(6000)	/* 6 sec */
> +#define FM_PKT_LOGICAL_CHAN_NUMBER  0x08   /* Logical channel 8 */
> +
> +#define REG_RD       0x1
> +#define REG_WR      0x0
> +
> +struct fm_reg_table {
> +	unsigned char opcode;
> +	unsigned char type;
> +	char *name;
> +};
> +
> +#define STEREO_GET               0
> +#define RSSI_LVL_GET             1
> +#define IF_COUNT_GET             2
> +#define FLAG_GET                 3
> +#define RDS_SYNC_GET             4
> +#define RDS_DATA_GET             5
> +#define FREQ_SET                 10
> +#define AF_FREQ_SET              11
> +#define MOST_MODE_SET            12
> +#define MOST_BLEND_SET           13
> +#define DEMPH_MODE_SET           14
> +#define SEARCH_LVL_SET           15
> +#define BAND_SET                 16
> +#define MUTE_STATUS_SET          17
> +#define RDS_PAUSE_LVL_SET        18
> +#define RDS_PAUSE_DUR_SET        19
> +#define RDS_MEM_SET              20
> +#define RDS_BLK_B_SET            21
> +#define RDS_MSK_B_SET            22
> +#define RDS_PI_MASK_SET          23
> +#define RDS_PI_SET               24
> +#define RDS_SYSTEM_SET           25
> +#define INT_MASK_SET             26
> +#define SEARCH_DIR_SET           27
> +#define VOLUME_SET               28
> +#define AUDIO_ENABLE_SET         29
> +#define PCM_MODE_SET             30
> +#define I2S_MODE_CONFIG_SET      31
> +#define POWER_SET                32
> +#define INTX_CONFIG_SET          33
> +#define PULL_EN_SET              34
> +#define HILO_SET                 35
> +#define SWITCH2FREF              36
> +#define FREQ_DRIFT_REPORT        37
> +
> +#define PCE_GET                  40
> +#define FIRM_VER_GET             41
> +#define ASIC_VER_GET             42
> +#define ASIC_ID_GET              43
> +#define MAN_ID_GET               44
> +#define TUNER_MODE_SET           45
> +#define STOP_SEARCH              46
> +#define RDS_CNTRL_SET            47
> +
> +#define WRITE_HARDWARE_REG       100
> +#define CODE_DOWNLOAD            101
> +#define RESET                    102
> +
> +#define FM_POWER_MODE            254
> +#define FM_INTERRUPT             255
> +
> +/* Transmitter API */
> +
> +#define CHANL_SET                55
> +#define CHANL_BW_SET		56
> +#define REF_SET                  57
> +#define POWER_ENB_SET            90
> +#define POWER_ATT_SET            58
> +#define POWER_LEV_SET            59
> +#define AUDIO_DEV_SET            60
> +#define PILOT_DEV_SET            61
> +#define RDS_DEV_SET              62
> +#define TX_BAND_SET              65
> +#define PUPD_SET                 91
> +#define AUDIO_IO_SET             63
> +#define PREMPH_SET               64
> +#define MONO_SET                 66
> +#define MUTE                     92
> +#define MPX_LMT_ENABLE           67
> +#define PI_SET                   93
> +#define ECC_SET                  69
> +#define PTY                      70
> +#define AF                       71
> +#define DISPLAY_MODE             74
> +#define RDS_REP_SET              77
> +#define RDS_CONFIG_DATA_SET      98
> +#define RDS_DATA_SET             99
> +#define RDS_DATA_ENB             94
> +#define TA_SET                   78
> +#define TP_SET                   79
> +#define DI_SET                   80
> +#define MS_SET                   81
> +#define PS_SCROLL_SPEED          82
> +#define TX_AUDIO_LEVEL_TEST      96
> +#define TX_AUDIO_LEVEL_TEST_THRESHOLD    73
> +#define TX_AUDIO_INPUT_LEVEL_RANGE_SET   54
> +#define RX_ANTENNA_SELECT        87
> +#define I2C_DEV_ADDR_SET         86
> +#define REF_ERR_CALIB_PARAM_SET          88
> +#define REF_ERR_CALIB_PERIODICITY_SET    89
> +#define SOC_INT_TRIGGER                  52
> +#define SOC_AUDIO_PATH_SET               83
> +#define SOC_PCMI_OVERRIDE                84
> +#define SOC_I2S_OVERRIDE         85
> +#define RSSI_BLOCK_SCAN_FREQ_SET 95
> +#define RSSI_BLOCK_SCAN_START    97
> +#define RSSI_BLOCK_SCAN_DATA_GET  5
> +#define READ_FMANT_TUNE_VALUE            104
> +
> +/* SKB helpers */
> +struct fm_skb_cb {
> +	__u8 fm_opcode;
> +	struct completion *completion;
> +};
> +
> +#define fm_cb(skb) ((struct fm_skb_cb *)(skb->cb))
> +
> +/* FM Channel-8 command message format */
> +struct fm_cmd_msg_hdr {
> +	__u8 header;		/* Logical Channel-8 */
> +	__u8 len;		/* Number of bytes follows */
> +	__u8 fm_opcode;		/* FM Opcode */
> +	__u8 rd_wr;		/* Read/Write command */
> +	__u8 dlen;		/* Length of payload */
> +} __attribute__ ((packed));
> +
> +#define FM_CMD_MSG_HDR_SIZE    5	/* sizeof(struct fm_cmd_msg_hdr) */
> +
> +/* FM Channel-8 event messgage format */
> +struct fm_event_msg_hdr {
> +	__u8 header;		/* Logical Channel-8 */
> +	__u8 len;		/* Number of bytes follows */
> +	__u8 status;		/* Event status */
> +	__u8 num_fm_hci_cmds;	/* Number of pkts the host allowed to send */
> +	__u8 fm_opcode;		/* FM Opcode */
> +	__u8 rd_wr;		/* Read/Write command */
> +	__u8 dlen;		/* Length of payload */
> +} __attribute__ ((packed));
> +
> +#define FM_EVT_MSG_HDR_SIZE     7	/* sizeof(struct fm_event_msg_hdr) */
> +
> +/* TI's magic number in firmware file */
> +#define FM_FW_FILE_HEADER_MAGIC	     0x42535442
> +
> +#define FM_ENABLE   1
> +#define FM_DISABLE  0
> +
> +/* FLAG_GET register bits */
> +#define FM_FR_EVENT		(1 << 0)
> +#define FM_BL_EVENT		(1 << 1)
> +#define FM_RDS_EVENT		(1 << 2)
> +#define FM_BBLK_EVENT		(1 << 3)
> +#define FM_LSYNC_EVENT		(1 << 4)
> +#define FM_LEV_EVENT		(1 << 5)
> +#define FM_IFFR_EVENT		(1 << 6)
> +#define FM_PI_EVENT		(1 << 7)
> +#define FM_PD_EVENT		(1 << 8)
> +#define FM_STIC_EVENT		(1 << 9)
> +#define FM_MAL_EVENT		(1 << 10)
> +#define FM_POW_ENB_EVENT	(1 << 11)
> +
> +/*
> + * Firmware files of FM. ASIC ID and ASIC version will be appened to this,
> + * later.
> + */
> +#define FM_FMC_FW_FILE_START      ("fmc_ch8")
> +#define FM_RX_FW_FILE_START       ("fm_rx_ch8")
> +#define FM_TX_FW_FILE_START       ("fm_tx_ch8")
> +
> +#define FM_UNDEFINED_FREQ		   0xFFFFFFFF
> +
> +/* Band types */
> +#define FM_BAND_EUROPE_US	0
> +#define FM_BAND_JAPAN		1
> +
> +/* Seek directions */
> +#define FM_SEARCH_DIRECTION_DOWN	0
> +#define FM_SEARCH_DIRECTION_UP		1
> +
> +/* Tunner modes */
> +#define FM_TUNER_STOP_SEARCH_MODE	0
> +#define FM_TUNER_PRESET_MODE		1
> +#define FM_TUNER_AUTONOMOUS_SEARCH_MODE	2
> +#define FM_TUNER_AF_JUMP_MODE		3
> +
> +/* Min and Max volume */
> +#define FM_RX_VOLUME_MIN	0
> +#define FM_RX_VOLUME_MAX	70
> +
> +/* Volume gain step */
> +#define FM_RX_VOLUME_GAIN_STEP	0x370
> +
> +/* Mute modes */
> +#define FM_MUTE_OFF		0
> +#define	FM_MUTE_ON		1
> +#define	FM_MUTE_ATTENUATE	2
> +
> +#define FM_RX_MUTE_UNMUTE_MODE		0x00
> +#define FM_RX_MUTE_RF_DEP_MODE		0x01
> +#define FM_RX_MUTE_AC_MUTE_MODE		0x02
> +#define FM_RX_MUTE_HARD_MUTE_LEFT_MODE	0x04
> +#define FM_RX_MUTE_HARD_MUTE_RIGHT_MODE	0x08
> +#define FM_RX_MUTE_SOFT_MUTE_FORCE_MODE	0x10
> +
> +/* RF dependent mute mode */
> +#define FM_RX_RF_DEPENDENT_MUTE_ON	1
> +#define FM_RX_RF_DEPENDENT_MUTE_OFF	0
> +
> +/* RSSI threshold min and max */
> +#define FM_RX_RSSI_THRESHOLD_MIN	-128
> +#define FM_RX_RSSI_THRESHOLD_MAX	127
> +
> +/* Stereo/Mono mode */
> +#define FM_STEREO_MODE		0
> +#define FM_MONO_MODE		1
> +#define FM_STEREO_SOFT_BLEND	1
> +
> +/* FM RX De-emphasis filter modes */
> +#define FM_RX_EMPHASIS_FILTER_50_USEC	0
> +#define FM_RX_EMPHASIS_FILTER_75_USEC	1
> +
> +/* FM RDS modes */
> +#define FM_RDS_DISABLE	0
> +#define FM_RDS_ENABLE	1
> +
> +#define FM_NO_PI_CODE	0
> +
> +/* FM and RX RDS block enable/disable  */
> +#define FM_RX_POWER_SET_FM_ON_RDS_OFF		0x1
> +#define FM_RX_POWET_SET_FM_AND_RDS_BLK_ON	0x3
> +#define FM_RX_POWET_SET_FM_AND_RDS_BLK_OFF	0x0
> +
> +/* RX RDS */
> +#define FM_RX_RDS_FLUSH_FIFO		0x1
> +#define FM_RX_RDS_FIFO_THRESHOLD	64	/* tuples */
> +#define FM_RDS_BLOCK_SIZE		3	/* 3 bytes */
> +
> +/* RDS block types */
> +#define FM_RDS_BLOCK_A		0
> +#define FM_RDS_BLOCK_B		1
> +#define FM_RDS_BLOCK_C		2
> +#define FM_RDS_BLOCK_Ctag	3
> +#define FM_RDS_BLOCK_D		4
> +#define FM_RDS_BLOCK_E		5
> +
> +#define FM_RDS_BLOCK_INDEX_A		0
> +#define FM_RDS_BLOCK_INDEX_B		1
> +#define FM_RDS_BLOCK_INDEX_C		2
> +#define FM_RDS_BLOCK_INDEX_D		3
> +#define FM_RDS_BLOCK_INDEX_UNKNOWN	0xF0
> +
> +#define FM_RDS_STATUS_ERROR_MASK	0x18
> +
> +/*
> + * Represents an RDS group type & version.
> + * There are 15 groups, each group has 2 versions: A and B.
> + */
> +#define FM_RDS_GROUP_TYPE_MASK_0A	    ((unsigned long)1<<0)
> +#define FM_RDS_GROUP_TYPE_MASK_0B	    ((unsigned long)1<<1)
> +#define FM_RDS_GROUP_TYPE_MASK_1A	    ((unsigned long)1<<2)
> +#define FM_RDS_GROUP_TYPE_MASK_1B	    ((unsigned long)1<<3)
> +#define FM_RDS_GROUP_TYPE_MASK_2A	    ((unsigned long)1<<4)
> +#define FM_RDS_GROUP_TYPE_MASK_2B	    ((unsigned long)1<<5)
> +#define FM_RDS_GROUP_TYPE_MASK_3A	    ((unsigned long)1<<6)
> +#define FM_RDS_GROUP_TYPE_MASK_3B           ((unsigned long)1<<7)
> +#define FM_RDS_GROUP_TYPE_MASK_4A	    ((unsigned long)1<<8)
> +#define FM_RDS_GROUP_TYPE_MASK_4B	    ((unsigned long)1<<9)
> +#define FM_RDS_GROUP_TYPE_MASK_5A	    ((unsigned long)1<<10)
> +#define FM_RDS_GROUP_TYPE_MASK_5B	    ((unsigned long)1<<11)
> +#define FM_RDS_GROUP_TYPE_MASK_6A	    ((unsigned long)1<<12)
> +#define FM_RDS_GROUP_TYPE_MASK_6B	    ((unsigned long)1<<13)
> +#define FM_RDS_GROUP_TYPE_MASK_7A	    ((unsigned long)1<<14)
> +#define FM_RDS_GROUP_TYPE_MASK_7B	    ((unsigned long)1<<15)
> +#define FM_RDS_GROUP_TYPE_MASK_8A           ((unsigned long)1<<16)
> +#define FM_RDS_GROUP_TYPE_MASK_8B	    ((unsigned long)1<<17)
> +#define FM_RDS_GROUP_TYPE_MASK_9A	    ((unsigned long)1<<18)
> +#define FM_RDS_GROUP_TYPE_MASK_9B	    ((unsigned long)1<<19)
> +#define FM_RDS_GROUP_TYPE_MASK_10A	    ((unsigned long)1<<20)
> +#define FM_RDS_GROUP_TYPE_MASK_10B	    ((unsigned long)1<<21)
> +#define FM_RDS_GROUP_TYPE_MASK_11A	    ((unsigned long)1<<22)
> +#define FM_RDS_GROUP_TYPE_MASK_11B	    ((unsigned long)1<<23)
> +#define FM_RDS_GROUP_TYPE_MASK_12A	    ((unsigned long)1<<24)
> +#define FM_RDS_GROUP_TYPE_MASK_12B	    ((unsigned long)1<<25)
> +#define FM_RDS_GROUP_TYPE_MASK_13A	    ((unsigned long)1<<26)
> +#define FM_RDS_GROUP_TYPE_MASK_13B	    ((unsigned long)1<<27)
> +#define FM_RDS_GROUP_TYPE_MASK_14A	    ((unsigned long)1<<28)
> +#define FM_RDS_GROUP_TYPE_MASK_14B	    ((unsigned long)1<<29)
> +#define FM_RDS_GROUP_TYPE_MASK_15A	    ((unsigned long)1<<30)
> +#define FM_RDS_GROUP_TYPE_MASK_15B	    ((unsigned long)1<<31)
> +
> +/* RX Alternate Frequency info */
> +#define FM_RDS_MIN_AF		          1
> +#define FM_RDS_MAX_AF		        204
> +#define FM_RDS_MAX_AF_JAPAN	        140
> +#define FM_RDS_1_AF_FOLLOWS	        225
> +#define FM_RDS_25_AF_FOLLOWS	        249
> +
> +/* RDS system type (RDS/RBDS) */
> +#define FM_RDS_SYSTEM_RDS		0
> +#define FM_RDS_SYSTEM_RBDS		1
> +
> +/* AF on/off */
> +#define FM_RX_RDS_AF_SWITCH_MODE_ON	1
> +#define FM_RX_RDS_AF_SWITCH_MODE_OFF	0
> +
> +/* Retry count when interrupt process goes wrong */
> +#define FM_IRQ_TIMEOUT_RETRY_MAX	5	/* 5 times */
> +
> +/* Audio IO set values */
> +#define FM_RX_FM_AUDIO_ENABLE_I2S	0x01
> +#define FM_RX_FM_AUDIO_ENABLE_ANALOG	0x02
> +#define FM_RX_FM_AUDIO_ENABLE_I2S_AND_ANALOG	0x03
> +#define FM_RX_FM_AUDIO_ENABLE_DISABLE	0x00
> +
> +/* HI/LO set values */
> +#define FM_RX_IFFREQ_TO_HI_SIDE		0x0
> +#define FM_RX_IFFREQ_TO_LO_SIDE		0x1
> +#define FM_RX_IFFREQ_HILO_AUTOMATIC	0x2
> +
> +/*
> + * Default RX mode configuration. Chip will be configured
> + * with this default values after loading RX firmware.
> + */
> +#define FM_DEFAULT_RX_VOLUME		10
> +#define FM_DEFAULT_RSSI_THRESHOLD	3
> +
> +/* Range for TX power level in units for dB/uV */
> +#define FM_PWR_LVL_LOW			91
> +#define FM_PWR_LVL_HIGH			122
> +
> +/* Chip specific default TX power level value */
> +#define FM_PWR_LVL_DEF			4
> +
> +/* FM TX Pre-emphasis filter values */
> +#define FM_TX_PREEMPH_OFF		1
> +#define FM_TX_PREEMPH_50US		0
> +#define FM_TX_PREEMPH_75US		2
> +
> +/* FM TX antenna impedence values */
> +#define FM_TX_ANT_IMP_50		0
> +#define FM_TX_ANT_IMP_200		1
> +#define FM_TX_ANT_IMP_500		2
> +
> +/* Functions exported by FM common sub-module */
> +int fmc_prepare(struct fmdrv_ops *);
> +int fmc_release(struct fmdrv_ops *);
> +
> +void fmc_update_region_info(struct fmdrv_ops *, unsigned char);
> +int fmc_send_cmd(struct fmdrv_ops *, unsigned char, unsigned short int,
> +				void *, int, void *, int *);
> +int fmc_is_rds_data_available(struct fmdrv_ops *, struct file *,
> +				struct poll_table_struct *);
> +int fmc_transfer_rds_from_internal_buff(struct fmdrv_ops *, struct file *,
> +					char __user *, size_t);
> +
> +int fmc_set_frequency(struct fmdrv_ops *, unsigned int);
> +int fmc_set_mode(struct fmdrv_ops *, unsigned char);
> +int fmc_set_region(struct fmdrv_ops *, unsigned char);
> +int fmc_set_mute_mode(struct fmdrv_ops *, unsigned char);
> +int fmc_set_stereo_mono(struct fmdrv_ops *, unsigned short);
> +int fmc_set_rds_mode(struct fmdrv_ops *, unsigned char);
> +
> +int fmc_get_frequency(struct fmdrv_ops *, unsigned int *);
> +int fmc_get_region(struct fmdrv_ops *, unsigned char *);
> +int fmc_get_mode(struct fmdrv_ops *, unsigned char *);
> +
> +/*
> + * channel spacing
> + */
> +#define FM_CHANNEL_SPACING_50KHZ 1
> +#define FM_CHANNEL_SPACING_100KHZ 2
> +#define FM_CHANNEL_SPACING_200KHZ 4
> +#define FM_FREQ_MUL 50
> +
> +#endif
> +
> 

Regards,

	Hans

-- 
Hans Verkuil - video4linux developer - sponsored by Cisco
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ