Endpoint STALLed

[Nik]

Hello,

I am trying to implement USB MSD Host using MAX3421.
My device gets enumerated properly.

But on sending a SCSI request(Test Unit Ready or Read capacity) , I get Endpoint STALL error.

Any pointers to get it working ?

Appreciate your time and help.



Regards,
Nik

[Jan Axelson]

In the mass storage class, STALL can indicate many things including invalid received CBW, the device has less than or more than the requested amount of data to return, the device can't complete a command.

Compare what you're sending with a working host.

 

[tsybezoff]

When my colleague used MAX USB Chips for host msd driver, he operated with data-toggle register . 'Cause in enumaration process standard usb max host driver has a data-toggle control, but all configuration process is absent at this driver. So, you should look at data-toggle control in enumaration process.

[Nik]

Thanks Jan, tsybezoff,

I did try something differently to see if my CBW was wrong. It worked for CBW but now I have issues in receiving CSW. Working on it.

Thanks again.

Regards,
Nik

[Nik]

Hi again,

I have  a very basic doubt.

Do I need to send anything (from Host to Device) to read the CSW (from Device to Host) ?


Regards,
Nik

[Barry Twycross]

Do I need to send anything (from Host to Device) to read the CSW (from Device to Host) ?

The CSW should be automatically available on the IN pipe when the command completes.

The host must send an IN of course. The driver doesn't have to send anything specific to get the CSW. It should be available after the data transfer (if any) is complete.

[Nik]

Thank Barry.

I implemented what you had mentioned.

There no error when I send the CBW and read the CSW. But the CSW data is not at all correct.


Regards,
Nik

[Barry Twycross]

What's wrong with the CSW data?

[Nik]

I think my BULK-IN transfer is at fault.

Please have a look at the code below and let me know if something is missing :


UINT8_T  fnReadCapacity(void)
{

   UINT8_T au8BotCommand[31];
   UINT8_T au8CSWReceive[13];

    //CBW Signature in Little Endian
    au8BotCommand[3] =  0x55;
    au8BotCommand[2] =  0x53;
    au8BotCommand[1] =  0x42;
    au8BotCommand[0] =  0x43;

    //CBW Tag in Little Endian
    au8BotCommand[7] =  0x25;
    au8BotCommand[6] =  0x49;
    au8BotCommand[5] =  0x44;
    au8BotCommand[4] =  0x41;

    //Data Transfer Length in Little Endian
    au8BotCommand[11] = 0x08;
    au8BotCommand[10] = 0x00;
    au8BotCommand[9]  = 0x00;
    au8BotCommand[8]  = 0x00;


    //Data Transfer direction
    au8BotCommand[12] = 0x80;  //Device to host

    //LUN
    au8BotCommand[13] = 0x00;  //Zero

    //CBW Length
    au8BotCommand[14] = 0x0A;

    //Read Capacity command in Little Endian
    au8BotCommand[24] = 0x25;
    au8BotCommand[23] = 0x00;
    au8BotCommand[22] = 0x00;
    au8BotCommand[21] = 0x00;
    au8BotCommand[20] = 0x00;
    au8BotCommand[19] = 0x00;
    au8BotCommand[18] = 0x00;
    au8BotCommand[17] = 0x00;
    au8BotCommand[16] = 0x00;
    au8BotCommand[15] = 0x00;

     //Host Bulk Out (SCSI Read CBW)

     u8LocalReturn = fnUsbHostBulkOut(25, au8BotCommand);

   

    Bulk-Out is giving back success.
   //Bulk Out was successful
   if(SUCCESS == u8LocalReturn)
   {
     
     //Host Bulk In (EP and data length)
     u8LocalReturn = fnUsbHostBulkIn(READ_CAPACITY_DATA_LENGTH,
                                          au8ReadCapacityData);


    //Bulk In was successful
      if(SUCCESS == u8LocalReturn)
      {
        Bulk-In is failing. I am getting EP Stall error.
      }

  }




}



INT8_T fnUsbHostBulkIn(UINT32_T u32Length, UINT8_T * ptu8DataBuffer)
{
  UINT16_T u16BytesRead;

  UINT16_T u16LMaxPacketSize = u16MaxPacketSize;

  UINT32_T u32TotalTransferred = ZERO;

  UINT16_T u16ResultCode;

  INT8_T s8LocalReturn;

  UINT8_T u8TransferStatus;

  UINT8_T u8NoOfBytesReceived;

  printf("USB Host Bulk In\n");



  // Set toggle value.
  fnWriteMax3421Reg(rHCTL, u8RecvToggle);

  u8TransferStatus = INCOMPLETE_TRANSFER;

  while ((u8TransferStatus == INCOMPLETE_TRANSFER))
  {

    // Start IN transfer
    u16ResultCode = fnUsbSendPktToDev(tokIN, u8InEpAddress);


    if (u16ResultCode)
    {
      s8LocalReturn = u16ResultCode;
      break;
    }



   else
   {

     // number of received bytes
     u8NoOfBytesReceived = fnReadMax3421Reg(rRCVBC);

      // Read the data from the FIFO.
     fnReadBytes(rRCVFIFO, u16BytesRead, ptu8DataBuffer);

     // Clear the IRQ & free the buffer
     fnWriteMax3421Reg(rHIRQ,bmRCVDAVIRQ);


     // add this packet's byte count to total transfer length
     u32TotalTransferred += u8NoOfBytesReceived;


     // Check for transfer complete
     if ((u8NoOfBytesReceived < u16LMaxPacketSize) || (u32TotalTransferred >= u32Length))
     {

       u8TransferStatus = COMPLETE_TRANSFER ;

       s8LocalReturn = u16ResultCode;

       //To make sure we break out of the while loop,
       //although TRANSFER_COMPLETE will break it
       break;
     }

     else
     {
       ;
     }

   }

return (u8LocalReturn);


}



Any help is greatly appreciated.


Regards,
Nik

[Barry Twycross]

You signature is backwards. The BOT spec says:

dCBWSignature:
Signature that helps identify this data packet as a CBW. The signature field shall contain the value 43425355h (little endian), indicating a CBW.

So 55 should be first. It looks like you wrote the word backwards, and then put the indexes in backwards. Personally, I have a function for writing words in USB order, so my code would say:

PutUSBWord32(&au8BotCommand[0], 0x43425355);

Then I don't confuse myself.

[Nik]

Thank Barry !

That was really stupid.

Having fixed the CBW signature, I am still having STALL issue.

The part
   // Start IN transfer
      u16ResultCode = fnUsbSendPktToDev(tokIN, u8InEpAddress);

is giving back STALL error. It is called  while doing Host Bulk In (CSW).


Regards,
Nik

[Barry Twycross]

It looks like you have the same issue with the transfer length.

[Nik]

Barry, I had fixed that when you pointed out the Signature issue.

Here is my new set of command data :

//CBW Signature in Little Endian
    au8BotCommand[0] =  0x55;
    au8BotCommand[1] =  0x53;
    au8BotCommand[2] =  0x42;
    au8BotCommand[3] =  0x43;



    //CBW Tag in Little Endian
    au8BotCommand[4] =  0x25;
    au8BotCommand[5] =  0x49;
    au8BotCommand[6] =  0x44;
    au8BotCommand[7] =  0x41;

    //Data Transfer Length in Little Endian
    au8BotCommand[8]   = 0x08;
    au8BotCommand[9]   = 0x00;
    au8BotCommand[10]  = 0x00;
    au8BotCommand[11]  = 0x00;


    //Data Transfer direction
    au8BotCommand[12] = 0x80;  //Device to host

    //LUN
    au8BotCommand[13] = 0x00;  //Zero

    //CBW Length
    au8BotCommand[14] = 0x0A;

    //Read Capacity command
    au8BotCommand[24] = 0x25;
    au8BotCommand[23] = 0x00;
    au8BotCommand[22] = 0x00;
    au8BotCommand[21] = 0x00;
    au8BotCommand[20] = 0x00;
    au8BotCommand[19] = 0x00;
    au8BotCommand[18] = 0x00;
    au8BotCommand[17] = 0x00;
    au8BotCommand[16] = 0x00;
    au8BotCommand[15] = 0x00;


Thank you again !

[Barry Twycross]

Next question would be what's the device? Is it a device which is expected to behave well, or something like a cheap memory stick which isn't.

You could try sending a request sense to see what the device is complaining about, if you can get request sense to work. If its a dubious device, you could try sending it a few inquiries and test unit readies first. I'm not sure a read capacity should work if the unit isn't ready, so a test unit ready is a good idea anyway.

[tsybezoff]

//Read Capacity command
    au8BotCommand[24] = 0x25;
    au8BotCommand[23] = 0x00;
    au8BotCommand[22] = 0x00;
    au8BotCommand[21] = 0x00;
    au8BotCommand[20] = 0x00;
    au8BotCommand[19] = 0x00;
    au8BotCommand[18] = 0x00;
    au8BotCommand[17] = 0x00;
    au8BotCommand[16] = 0x00;
    au8BotCommand[15] = 0x00;

May be au8BotCommand[15] = 0x25;