blob: 2df43cf4a38382438c464e29dbb72bb13ebda2ff [file] [log] [blame]
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001/*
2 *
3 * Generic Bluetooth USB driver
4 *
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +02005 * Copyright (C) 2005-2008 Marcel Holtmann <marcel@holtmann.org>
Marcel Holtmann5e23b922007-10-20 14:12:34 +02006 *
7 *
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License as published by
10 * the Free Software Foundation; either version 2 of the License, or
11 * (at your option) any later version.
12 *
13 * This program is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 * GNU General Public License for more details.
17 *
18 * You should have received a copy of the GNU General Public License
19 * along with this program; if not, write to the Free Software
20 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
21 *
22 */
23
Marcel Holtmann5e23b922007-10-20 14:12:34 +020024#include <linux/module.h>
Marcel Holtmann5e23b922007-10-20 14:12:34 +020025#include <linux/usb.h>
Tedd Ho-Jeong Andffd30e2013-04-19 09:57:43 -070026#include <linux/firmware.h>
Daniel Drakea2698a92015-04-16 14:09:55 -060027#include <asm/unaligned.h>
Marcel Holtmann5e23b922007-10-20 14:12:34 +020028
29#include <net/bluetooth/bluetooth.h>
30#include <net/bluetooth/hci_core.h>
31
Marcel Holtmann4185a0f2015-04-06 00:52:12 -070032#include "btintel.h"
Marcel Holtmann1df1f592015-04-05 22:52:11 -070033#include "btbcm.h"
Carlo Caionedb33c772015-05-14 10:49:09 +020034#include "btrtl.h"
Marcel Holtmann1df1f592015-04-05 22:52:11 -070035
Marcel Holtmann34dced9b2015-04-05 22:52:16 -070036#define VERSION "0.8"
Marcel Holtmanncfeb4142008-08-07 22:26:56 +020037
Rusty Russell90ab5ee2012-01-13 09:32:20 +103038static bool disable_scofix;
39static bool force_scofix;
Marcel Holtmann7a9d4022008-11-30 12:17:26 +010040
Shailendra Verma917a3332015-05-25 23:53:40 +053041static bool reset = true;
Marcel Holtmanncfeb4142008-08-07 22:26:56 +020042
43static struct usb_driver btusb_driver;
44
45#define BTUSB_IGNORE 0x01
Marcel Holtmann7a9d4022008-11-30 12:17:26 +010046#define BTUSB_DIGIANSWER 0x02
47#define BTUSB_CSR 0x04
48#define BTUSB_SNIFFER 0x08
49#define BTUSB_BCM92035 0x10
50#define BTUSB_BROKEN_ISOC 0x20
51#define BTUSB_WRONG_SCO_MTU 0x40
Steven.Li2d25f8b2011-07-01 14:02:36 +080052#define BTUSB_ATH3012 0x80
Tedd Ho-Jeong Andffd30e2013-04-19 09:57:43 -070053#define BTUSB_INTEL 0x100
Marcel Holtmann40df7832014-07-06 13:29:58 +020054#define BTUSB_INTEL_BOOT 0x200
55#define BTUSB_BCM_PATCHRAM 0x400
Amitkumar Karwarae8df492014-07-18 14:47:06 -070056#define BTUSB_MARVELL 0x800
Marcel Holtmann4fcef8e2015-01-01 17:34:37 -080057#define BTUSB_SWAVE 0x1000
Marcel Holtmanncda0dd72015-01-26 21:33:48 -080058#define BTUSB_INTEL_NEW 0x2000
Marcel Holtmann893ba542015-01-28 20:27:34 -080059#define BTUSB_AMP 0x4000
Kim, Ben Young Tae3267c882015-02-15 23:07:33 +000060#define BTUSB_QCA_ROME 0x8000
Marcel Holtmann17b27722015-03-22 15:52:38 +010061#define BTUSB_BCM_APPLE 0x10000
Daniel Drakea2698a92015-04-16 14:09:55 -060062#define BTUSB_REALTEK 0x20000
Marcel Holtmann5e23b922007-10-20 14:12:34 +020063
Marcel Holtmann54265202013-10-11 07:46:18 -070064static const struct usb_device_id btusb_table[] = {
Marcel Holtmann5e23b922007-10-20 14:12:34 +020065 /* Generic Bluetooth USB device */
66 { USB_DEVICE_INFO(0xe0, 0x01, 0x01) },
67
Marcel Holtmann893ba542015-01-28 20:27:34 -080068 /* Generic Bluetooth AMP device */
69 { USB_DEVICE_INFO(0xe0, 0x01, 0x04), .driver_info = BTUSB_AMP },
70
Henrik Rydberg1fa65352012-08-25 19:28:06 +020071 /* Apple-specific (Broadcom) devices */
Marcel Holtmann17b27722015-03-22 15:52:38 +010072 { USB_VENDOR_AND_INTERFACE_INFO(0x05ac, 0xff, 0x01, 0x01),
73 .driver_info = BTUSB_BCM_APPLE },
Henrik Rydberg1fa65352012-08-25 19:28:06 +020074
Cho, Yu-Chen178c0592013-06-04 21:40:26 +080075 /* MediaTek MT76x0E */
76 { USB_DEVICE(0x0e8d, 0x763f) },
77
Oliver Neukumc510eae2011-09-21 11:41:45 +020078 /* Broadcom SoftSailing reporting vendor specific */
Don Zickus2e8b50632012-03-28 16:41:11 -040079 { USB_DEVICE(0x0a5c, 0x21e1) },
Oliver Neukumc510eae2011-09-21 11:41:45 +020080
Nobuhiro Iwamatsu3cd01972010-08-20 16:24:07 +090081 /* Apple MacBookPro 7,1 */
82 { USB_DEVICE(0x05ac, 0x8213) },
83
Cyril Lacoux0a79f672010-07-14 10:29:27 +040084 /* Apple iMac11,1 */
85 { USB_DEVICE(0x05ac, 0x8215) },
86
Nobuhiro Iwamatsu9c047152010-08-20 16:24:06 +090087 /* Apple MacBookPro6,2 */
88 { USB_DEVICE(0x05ac, 0x8218) },
89
Edgar (gimli) Hucek3e3ede72010-11-04 08:04:33 +010090 /* Apple MacBookAir3,1, MacBookAir3,2 */
91 { USB_DEVICE(0x05ac, 0x821b) },
92
Pieter-Augustijn Van Malleghema63b7232011-09-07 02:28:10 -040093 /* Apple MacBookAir4,1 */
94 { USB_DEVICE(0x05ac, 0x821f) },
95
Marc-Antoine Perennou88d377b2011-03-24 14:51:21 -030096 /* Apple MacBookPro8,2 */
97 { USB_DEVICE(0x05ac, 0x821a) },
98
Jurgen Kramerf78b68262011-09-04 18:01:42 +020099 /* Apple MacMini5,1 */
100 { USB_DEVICE(0x05ac, 0x8281) },
101
Marcel Holtmanncfeb4142008-08-07 22:26:56 +0200102 /* AVM BlueFRITZ! USB v2.0 */
Marcel Holtmann4fcef8e2015-01-01 17:34:37 -0800103 { USB_DEVICE(0x057c, 0x3800), .driver_info = BTUSB_SWAVE },
Marcel Holtmanncfeb4142008-08-07 22:26:56 +0200104
105 /* Bluetooth Ultraport Module from IBM */
106 { USB_DEVICE(0x04bf, 0x030a) },
107
108 /* ALPS Modules with non-standard id */
109 { USB_DEVICE(0x044e, 0x3001) },
110 { USB_DEVICE(0x044e, 0x3002) },
111
112 /* Ericsson with non-standard id */
113 { USB_DEVICE(0x0bdb, 0x1002) },
114
115 /* Canyon CN-BTU1 with HID interfaces */
Marcel Holtmann7a9d4022008-11-30 12:17:26 +0100116 { USB_DEVICE(0x0c10, 0x0000) },
Marcel Holtmanncfeb4142008-08-07 22:26:56 +0200117
Wen-chien Jesse Sungd13431c2011-11-08 14:30:22 +0800118 /* Broadcom BCM20702A0 */
119 { USB_DEVICE(0x413c, 0x8197) },
120
Marcel Holtmannd049f4e2015-01-26 20:35:32 -0800121 /* Broadcom BCM20702B0 (Dynex/Insignia) */
122 { USB_DEVICE(0x19ff, 0x0239), .driver_info = BTUSB_BCM_PATCHRAM },
123
Steven Harms98514032012-04-13 14:45:55 -0400124 /* Foxconn - Hon Hai */
Heinrich Siebmanns6029ddc2014-12-03 19:32:22 +0100125 { USB_VENDOR_AND_INTERFACE_INFO(0x0489, 0xff, 0x01, 0x01),
126 .driver_info = BTUSB_BCM_PATCHRAM },
Steven Harms98514032012-04-13 14:45:55 -0400127
Matej Dubovy8f0c3042015-02-02 18:50:14 +0100128 /* Lite-On Technology - Broadcom based */
129 { USB_VENDOR_AND_INTERFACE_INFO(0x04ca, 0xff, 0x01, 0x01),
130 .driver_info = BTUSB_BCM_PATCHRAM },
131
Andy Shevchenko0b880062014-02-18 18:26:19 +0200132 /* Broadcom devices with vendor specific id */
Petri Gynther10d4c672014-05-08 15:50:01 -0700133 { USB_VENDOR_AND_INTERFACE_INFO(0x0a5c, 0xff, 0x01, 0x01),
134 .driver_info = BTUSB_BCM_PATCHRAM },
Gustavo Padovan92c385f2012-08-06 15:36:49 -0300135
Marcel Holtmannc2aef6e2014-07-21 14:02:33 +0200136 /* ASUSTek Computer - Broadcom based */
Rick Dunn9a5abda2015-01-17 05:29:12 +0100137 { USB_VENDOR_AND_INTERFACE_INFO(0x0b05, 0xff, 0x01, 0x01),
138 .driver_info = BTUSB_BCM_PATCHRAM },
Marcel Holtmannc2aef6e2014-07-21 14:02:33 +0200139
Ken O'Brien5bcecf32013-09-21 19:14:43 +0100140 /* Belkin F8065bf - Broadcom based */
Marcel Holtmann6331c682015-03-27 15:11:41 -0700141 { USB_VENDOR_AND_INTERFACE_INFO(0x050d, 0xff, 0x01, 0x01),
142 .driver_info = BTUSB_BCM_PATCHRAM },
Ken O'Brien5bcecf32013-09-21 19:14:43 +0100143
Jurgen Kramer9113bfd2014-02-15 12:01:09 +0100144 /* IMC Networks - Broadcom based */
Marcel Holtmann6331c682015-03-27 15:11:41 -0700145 { USB_VENDOR_AND_INTERFACE_INFO(0x13d3, 0xff, 0x01, 0x01),
146 .driver_info = BTUSB_BCM_PATCHRAM },
Jurgen Kramer9113bfd2014-02-15 12:01:09 +0100147
Marcel Holtmann40df7832014-07-06 13:29:58 +0200148 /* Intel Bluetooth USB Bootloader (RAM module) */
Marcel Holtmannd92f2df2014-07-06 14:53:55 +0200149 { USB_DEVICE(0x8087, 0x0a5a),
150 .driver_info = BTUSB_INTEL_BOOT | BTUSB_BROKEN_ISOC },
Marcel Holtmann40df7832014-07-06 13:29:58 +0200151
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200152 { } /* Terminating entry */
153};
154
155MODULE_DEVICE_TABLE(usb, btusb_table);
156
Marcel Holtmann54265202013-10-11 07:46:18 -0700157static const struct usb_device_id blacklist_table[] = {
Marcel Holtmanncfeb4142008-08-07 22:26:56 +0200158 /* CSR BlueCore devices */
159 { USB_DEVICE(0x0a12, 0x0001), .driver_info = BTUSB_CSR },
160
161 /* Broadcom BCM2033 without firmware */
162 { USB_DEVICE(0x0a5c, 0x2033), .driver_info = BTUSB_IGNORE },
163
Bala Shanmugambe931122010-11-26 17:35:46 +0530164 /* Atheros 3011 with sflash firmware */
Andy Shevchenko0b880062014-02-18 18:26:19 +0200165 { USB_DEVICE(0x0489, 0xe027), .driver_info = BTUSB_IGNORE },
166 { USB_DEVICE(0x0489, 0xe03d), .driver_info = BTUSB_IGNORE },
Alexander Ploumistos2eeff0b2015-02-13 21:05:11 +0200167 { USB_DEVICE(0x04f2, 0xaff1), .driver_info = BTUSB_IGNORE },
Andy Shevchenko0b880062014-02-18 18:26:19 +0200168 { USB_DEVICE(0x0930, 0x0215), .driver_info = BTUSB_IGNORE },
Bala Shanmugambe931122010-11-26 17:35:46 +0530169 { USB_DEVICE(0x0cf3, 0x3002), .driver_info = BTUSB_IGNORE },
Marek Vasut6eda5412012-06-08 14:32:50 +0200170 { USB_DEVICE(0x0cf3, 0xe019), .driver_info = BTUSB_IGNORE },
Andy Ross2a7bccc2011-05-09 16:11:16 -0700171 { USB_DEVICE(0x13d3, 0x3304), .driver_info = BTUSB_IGNORE },
Bala Shanmugambe931122010-11-26 17:35:46 +0530172
Cho, Yu-Chen509e7862011-01-26 17:10:59 +0800173 /* Atheros AR9285 Malbec with sflash firmware */
174 { USB_DEVICE(0x03f0, 0x311d), .driver_info = BTUSB_IGNORE },
175
Bala Shanmugamd9f51b52011-02-11 15:38:53 +0530176 /* Atheros 3012 with sflash firmware */
Andy Shevchenko0b880062014-02-18 18:26:19 +0200177 { USB_DEVICE(0x0489, 0xe04d), .driver_info = BTUSB_ATH3012 },
178 { USB_DEVICE(0x0489, 0xe04e), .driver_info = BTUSB_ATH3012 },
179 { USB_DEVICE(0x0489, 0xe056), .driver_info = BTUSB_ATH3012 },
180 { USB_DEVICE(0x0489, 0xe057), .driver_info = BTUSB_ATH3012 },
181 { USB_DEVICE(0x0489, 0xe05f), .driver_info = BTUSB_ATH3012 },
Dmitry Tunin692c0622015-06-06 20:25:40 +0300182 { USB_DEVICE(0x0489, 0xe076), .driver_info = BTUSB_ATH3012 },
Anantha Krishnan4b552bc2014-10-06 16:31:49 +0530183 { USB_DEVICE(0x0489, 0xe078), .driver_info = BTUSB_ATH3012 },
Andy Shevchenko0b880062014-02-18 18:26:19 +0200184 { USB_DEVICE(0x04c5, 0x1330), .driver_info = BTUSB_ATH3012 },
185 { USB_DEVICE(0x04ca, 0x3004), .driver_info = BTUSB_ATH3012 },
186 { USB_DEVICE(0x04ca, 0x3005), .driver_info = BTUSB_ATH3012 },
187 { USB_DEVICE(0x04ca, 0x3006), .driver_info = BTUSB_ATH3012 },
Mohammed Habibulla1fb4e092014-04-17 11:37:13 -0700188 { USB_DEVICE(0x04ca, 0x3007), .driver_info = BTUSB_ATH3012 },
Andy Shevchenko0b880062014-02-18 18:26:19 +0200189 { USB_DEVICE(0x04ca, 0x3008), .driver_info = BTUSB_ATH3012 },
190 { USB_DEVICE(0x04ca, 0x300b), .driver_info = BTUSB_ATH3012 },
Dmitry Tuninec0810d2015-05-02 13:36:58 +0300191 { USB_DEVICE(0x04ca, 0x300f), .driver_info = BTUSB_ATH3012 },
Janne Heikkinen134d3b32014-12-09 07:44:51 +0200192 { USB_DEVICE(0x04ca, 0x3010), .driver_info = BTUSB_ATH3012 },
Andy Shevchenko0b880062014-02-18 18:26:19 +0200193 { USB_DEVICE(0x0930, 0x0219), .driver_info = BTUSB_ATH3012 },
194 { USB_DEVICE(0x0930, 0x0220), .driver_info = BTUSB_ATH3012 },
Vincent Zwanenburg89d29752014-08-08 12:33:56 +0100195 { USB_DEVICE(0x0930, 0x0227), .driver_info = BTUSB_ATH3012 },
Andy Shevchenkoa735f9e2014-02-18 18:26:20 +0200196 { USB_DEVICE(0x0b05, 0x17d0), .driver_info = BTUSB_ATH3012 },
Ming Leid66629c2013-03-15 11:00:39 +0800197 { USB_DEVICE(0x0cf3, 0x0036), .driver_info = BTUSB_ATH3012 },
Steven.Li2d25f8b2011-07-01 14:02:36 +0800198 { USB_DEVICE(0x0cf3, 0x3004), .driver_info = BTUSB_ATH3012 },
Sunguk Lee94a32d102013-03-12 04:41:58 +0900199 { USB_DEVICE(0x0cf3, 0x3008), .driver_info = BTUSB_ATH3012 },
Cho, Yu-Chen07c0ea82012-03-14 22:01:21 +0200200 { USB_DEVICE(0x0cf3, 0x311d), .driver_info = BTUSB_ATH3012 },
Oliver Neukumb1312372014-01-16 15:37:11 +0100201 { USB_DEVICE(0x0cf3, 0x311e), .driver_info = BTUSB_ATH3012 },
Oliver Neukum1e56f1e2014-01-16 16:02:58 +0100202 { USB_DEVICE(0x0cf3, 0x311f), .driver_info = BTUSB_ATH3012 },
Andy Shevchenko0b880062014-02-18 18:26:19 +0200203 { USB_DEVICE(0x0cf3, 0x3121), .driver_info = BTUSB_ATH3012 },
Ming Leiebaf5792013-03-18 23:45:11 +0800204 { USB_DEVICE(0x0cf3, 0x817a), .driver_info = BTUSB_ATH3012 },
Andy Shevchenko0b880062014-02-18 18:26:19 +0200205 { USB_DEVICE(0x0cf3, 0xe003), .driver_info = BTUSB_ATH3012 },
AceLan Kaoac713112012-04-19 14:53:45 +0800206 { USB_DEVICE(0x0cf3, 0xe004), .driver_info = BTUSB_ATH3012 },
Peng Chen0a3658c2013-08-30 17:41:40 +0800207 { USB_DEVICE(0x0cf3, 0xe005), .driver_info = BTUSB_ATH3012 },
Wen-chien Jesse Sungca79f232015-05-13 11:39:24 +0800208 { USB_DEVICE(0x0cf3, 0xe006), .driver_info = BTUSB_ATH3012 },
Andy Shevchenko0b880062014-02-18 18:26:19 +0200209 { USB_DEVICE(0x13d3, 0x3362), .driver_info = BTUSB_ATH3012 },
210 { USB_DEVICE(0x13d3, 0x3375), .driver_info = BTUSB_ATH3012 },
AceLan Kaoeed307e2012-12-11 11:41:20 +0800211 { USB_DEVICE(0x13d3, 0x3393), .driver_info = BTUSB_ATH3012 },
Sujith Manoharan5b77a1f2013-07-15 09:29:03 +0530212 { USB_DEVICE(0x13d3, 0x3402), .driver_info = BTUSB_ATH3012 },
Dmitry Tunin3bb30a7c2014-11-25 20:19:52 +0300213 { USB_DEVICE(0x13d3, 0x3408), .driver_info = BTUSB_ATH3012 },
Dmitry Tunin033efa92015-01-18 00:16:51 +0300214 { USB_DEVICE(0x13d3, 0x3423), .driver_info = BTUSB_ATH3012 },
Anantha Krishnanfa2f1392014-07-08 19:25:08 +0530215 { USB_DEVICE(0x13d3, 0x3432), .driver_info = BTUSB_ATH3012 },
Dmitry Tunin0d0cef62015-06-06 20:29:25 +0300216 { USB_DEVICE(0x13d3, 0x3474), .driver_info = BTUSB_ATH3012 },
Bala Shanmugamd9f51b52011-02-11 15:38:53 +0530217
Cho, Yu-Chene9036e32011-02-15 10:20:07 +0800218 /* Atheros AR5BBU12 with sflash firmware */
219 { USB_DEVICE(0x0489, 0xe02c), .driver_info = BTUSB_IGNORE },
220
Michael Gruetzner85d59722012-05-02 22:33:40 +0200221 /* Atheros AR5BBU12 with sflash firmware */
Yevgeniy Melnichukbc21fde2012-08-07 19:48:10 +0530222 { USB_DEVICE(0x0489, 0xe036), .driver_info = BTUSB_ATH3012 },
Andy Shevchenko0b880062014-02-18 18:26:19 +0200223 { USB_DEVICE(0x0489, 0xe03c), .driver_info = BTUSB_ATH3012 },
Michael Gruetzner85d59722012-05-02 22:33:40 +0200224
Kim, Ben Young Tae3267c882015-02-15 23:07:33 +0000225 /* QCA ROME chipset */
Wen-chien Jesse Sung20541112015-05-13 11:39:25 +0800226 { USB_DEVICE(0x0cf3, 0xe007), .driver_info = BTUSB_QCA_ROME },
Marcel Holtmannc9e44472015-03-16 23:56:04 -0700227 { USB_DEVICE(0x0cf3, 0xe300), .driver_info = BTUSB_QCA_ROME },
228 { USB_DEVICE(0x0cf3, 0xe360), .driver_info = BTUSB_QCA_ROME },
Kim, Ben Young Tae3267c882015-02-15 23:07:33 +0000229
Marcel Holtmanncfeb4142008-08-07 22:26:56 +0200230 /* Broadcom BCM2035 */
Marcel Holtmann7a9d4022008-11-30 12:17:26 +0100231 { USB_DEVICE(0x0a5c, 0x2009), .driver_info = BTUSB_BCM92035 },
Andy Shevchenko0b880062014-02-18 18:26:19 +0200232 { USB_DEVICE(0x0a5c, 0x200a), .driver_info = BTUSB_WRONG_SCO_MTU },
233 { USB_DEVICE(0x0a5c, 0x2035), .driver_info = BTUSB_WRONG_SCO_MTU },
Marcel Holtmanncfeb4142008-08-07 22:26:56 +0200234
235 /* Broadcom BCM2045 */
Marcel Holtmann7a9d4022008-11-30 12:17:26 +0100236 { USB_DEVICE(0x0a5c, 0x2039), .driver_info = BTUSB_WRONG_SCO_MTU },
237 { USB_DEVICE(0x0a5c, 0x2101), .driver_info = BTUSB_WRONG_SCO_MTU },
Marcel Holtmannbdbef3d2008-09-23 00:16:35 +0200238
Marcel Holtmanncfeb4142008-08-07 22:26:56 +0200239 /* IBM/Lenovo ThinkPad with Broadcom chip */
Marcel Holtmann7a9d4022008-11-30 12:17:26 +0100240 { USB_DEVICE(0x0a5c, 0x201e), .driver_info = BTUSB_WRONG_SCO_MTU },
241 { USB_DEVICE(0x0a5c, 0x2110), .driver_info = BTUSB_WRONG_SCO_MTU },
Marcel Holtmanncfeb4142008-08-07 22:26:56 +0200242
243 /* HP laptop with Broadcom chip */
Marcel Holtmann7a9d4022008-11-30 12:17:26 +0100244 { USB_DEVICE(0x03f0, 0x171d), .driver_info = BTUSB_WRONG_SCO_MTU },
Marcel Holtmanncfeb4142008-08-07 22:26:56 +0200245
246 /* Dell laptop with Broadcom chip */
Marcel Holtmann7a9d4022008-11-30 12:17:26 +0100247 { USB_DEVICE(0x413c, 0x8126), .driver_info = BTUSB_WRONG_SCO_MTU },
Marcel Holtmanncfeb4142008-08-07 22:26:56 +0200248
Marcel Holtmann5ddd4a62008-11-30 12:17:27 +0100249 /* Dell Wireless 370 and 410 devices */
Marcel Holtmann7a9d4022008-11-30 12:17:26 +0100250 { USB_DEVICE(0x413c, 0x8152), .driver_info = BTUSB_WRONG_SCO_MTU },
Marcel Holtmann5ddd4a62008-11-30 12:17:27 +0100251 { USB_DEVICE(0x413c, 0x8156), .driver_info = BTUSB_WRONG_SCO_MTU },
Marcel Holtmanncfeb4142008-08-07 22:26:56 +0200252
Marcel Holtmann7a9d4022008-11-30 12:17:26 +0100253 /* Belkin F8T012 and F8T013 devices */
254 { USB_DEVICE(0x050d, 0x0012), .driver_info = BTUSB_WRONG_SCO_MTU },
255 { USB_DEVICE(0x050d, 0x0013), .driver_info = BTUSB_WRONG_SCO_MTU },
Marcel Holtmanncfeb4142008-08-07 22:26:56 +0200256
Marcel Holtmann5ddd4a62008-11-30 12:17:27 +0100257 /* Asus WL-BTD202 device */
258 { USB_DEVICE(0x0b05, 0x1715), .driver_info = BTUSB_WRONG_SCO_MTU },
259
260 /* Kensington Bluetooth USB adapter */
261 { USB_DEVICE(0x047d, 0x105e), .driver_info = BTUSB_WRONG_SCO_MTU },
262
Marcel Holtmanncfeb4142008-08-07 22:26:56 +0200263 /* RTX Telecom based adapters with buggy SCO support */
264 { USB_DEVICE(0x0400, 0x0807), .driver_info = BTUSB_BROKEN_ISOC },
265 { USB_DEVICE(0x0400, 0x080a), .driver_info = BTUSB_BROKEN_ISOC },
266
267 /* CONWISE Technology based adapters with buggy SCO support */
268 { USB_DEVICE(0x0e5e, 0x6622), .driver_info = BTUSB_BROKEN_ISOC },
269
Marcel Holtmann4fcef8e2015-01-01 17:34:37 -0800270 /* Roper Class 1 Bluetooth Dongle (Silicon Wave based) */
271 { USB_DEVICE(0x1300, 0x0001), .driver_info = BTUSB_SWAVE },
272
Marcel Holtmanncfeb4142008-08-07 22:26:56 +0200273 /* Digianswer devices */
274 { USB_DEVICE(0x08fd, 0x0001), .driver_info = BTUSB_DIGIANSWER },
275 { USB_DEVICE(0x08fd, 0x0002), .driver_info = BTUSB_IGNORE },
276
277 /* CSR BlueCore Bluetooth Sniffer */
Marcel Holtmann4f64fa82014-07-07 00:12:04 +0200278 { USB_DEVICE(0x0a12, 0x0002),
279 .driver_info = BTUSB_SNIFFER | BTUSB_BROKEN_ISOC },
Marcel Holtmanncfeb4142008-08-07 22:26:56 +0200280
281 /* Frontline ComProbe Bluetooth Sniffer */
Marcel Holtmann4f64fa82014-07-07 00:12:04 +0200282 { USB_DEVICE(0x16d3, 0x0002),
283 .driver_info = BTUSB_SNIFFER | BTUSB_BROKEN_ISOC },
Marcel Holtmanncfeb4142008-08-07 22:26:56 +0200284
Marcel Holtmanncb1ee892015-01-28 19:41:42 -0800285 /* Marvell Bluetooth devices */
286 { USB_DEVICE(0x1286, 0x2044), .driver_info = BTUSB_MARVELL },
287 { USB_DEVICE(0x1286, 0x2046), .driver_info = BTUSB_MARVELL },
288
Marcel Holtmannd0ac9eb2015-01-28 19:41:43 -0800289 /* Intel Bluetooth devices */
Marcel Holtmann407550f2015-02-22 15:41:18 -0800290 { USB_DEVICE(0x8087, 0x07da), .driver_info = BTUSB_CSR },
Tedd Ho-Jeong Andffd30e2013-04-19 09:57:43 -0700291 { USB_DEVICE(0x8087, 0x07dc), .driver_info = BTUSB_INTEL },
Tedd Ho-Jeong Anef4e5e42013-11-12 13:10:58 -0800292 { USB_DEVICE(0x8087, 0x0a2a), .driver_info = BTUSB_INTEL },
Marcel Holtmanncda0dd72015-01-26 21:33:48 -0800293 { USB_DEVICE(0x8087, 0x0a2b), .driver_info = BTUSB_INTEL_NEW },
Tedd Ho-Jeong Andffd30e2013-04-19 09:57:43 -0700294
Marcel Holtmannd0ac9eb2015-01-28 19:41:43 -0800295 /* Other Intel Bluetooth devices */
296 { USB_VENDOR_AND_INTERFACE_INFO(0x8087, 0xe0, 0x01, 0x01),
297 .driver_info = BTUSB_IGNORE },
Amitkumar Karwarae8df492014-07-18 14:47:06 -0700298
Daniel Drakea2698a92015-04-16 14:09:55 -0600299 /* Realtek Bluetooth devices */
300 { USB_VENDOR_AND_INTERFACE_INFO(0x0bda, 0xe0, 0x01, 0x01),
301 .driver_info = BTUSB_REALTEK },
302
303 /* Additional Realtek 8723AE Bluetooth devices */
304 { USB_DEVICE(0x0930, 0x021d), .driver_info = BTUSB_REALTEK },
305 { USB_DEVICE(0x13d3, 0x3394), .driver_info = BTUSB_REALTEK },
306
307 /* Additional Realtek 8723BE Bluetooth devices */
308 { USB_DEVICE(0x0489, 0xe085), .driver_info = BTUSB_REALTEK },
309 { USB_DEVICE(0x0489, 0xe08b), .driver_info = BTUSB_REALTEK },
310 { USB_DEVICE(0x13d3, 0x3410), .driver_info = BTUSB_REALTEK },
311 { USB_DEVICE(0x13d3, 0x3416), .driver_info = BTUSB_REALTEK },
312 { USB_DEVICE(0x13d3, 0x3459), .driver_info = BTUSB_REALTEK },
313
314 /* Additional Realtek 8821AE Bluetooth devices */
315 { USB_DEVICE(0x0b05, 0x17dc), .driver_info = BTUSB_REALTEK },
316 { USB_DEVICE(0x13d3, 0x3414), .driver_info = BTUSB_REALTEK },
317 { USB_DEVICE(0x13d3, 0x3458), .driver_info = BTUSB_REALTEK },
318 { USB_DEVICE(0x13d3, 0x3461), .driver_info = BTUSB_REALTEK },
319 { USB_DEVICE(0x13d3, 0x3462), .driver_info = BTUSB_REALTEK },
320
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200321 { } /* Terminating entry */
322};
323
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200324#define BTUSB_MAX_ISOC_FRAMES 10
325
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200326#define BTUSB_INTR_RUNNING 0
327#define BTUSB_BULK_RUNNING 1
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200328#define BTUSB_ISOC_RUNNING 2
Oliver Neukum7bee5492009-08-24 23:44:59 +0200329#define BTUSB_SUSPENDING 3
Gustavo F. Padovan08b8b6c2010-07-16 17:20:33 -0300330#define BTUSB_DID_ISO_RESUME 4
Marcel Holtmanncda0dd72015-01-26 21:33:48 -0800331#define BTUSB_BOOTLOADER 5
332#define BTUSB_DOWNLOADING 6
Marcel Holtmannce6bb922015-01-28 01:58:40 -0800333#define BTUSB_FIRMWARE_LOADED 7
Marcel Holtmanncda0dd72015-01-26 21:33:48 -0800334#define BTUSB_FIRMWARE_FAILED 8
Marcel Holtmannce6bb922015-01-28 01:58:40 -0800335#define BTUSB_BOOTING 9
Daniel Drake04b8c812015-05-21 08:23:50 -0600336#define BTUSB_RESET_RESUME 10
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200337
338struct btusb_data {
339 struct hci_dev *hdev;
340 struct usb_device *udev;
Marcel Holtmann5fbcd262008-09-23 00:16:36 +0200341 struct usb_interface *intf;
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200342 struct usb_interface *isoc;
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200343
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200344 unsigned long flags;
345
346 struct work_struct work;
Oliver Neukum7bee5492009-08-24 23:44:59 +0200347 struct work_struct waker;
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200348
Marcel Holtmann803b5832014-09-16 08:00:29 +0200349 struct usb_anchor deferred;
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200350 struct usb_anchor tx_anchor;
Marcel Holtmann803b5832014-09-16 08:00:29 +0200351 int tx_in_flight;
352 spinlock_t txlock;
353
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200354 struct usb_anchor intr_anchor;
355 struct usb_anchor bulk_anchor;
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200356 struct usb_anchor isoc_anchor;
Marcel Holtmann803b5832014-09-16 08:00:29 +0200357 spinlock_t rxlock;
358
359 struct sk_buff *evt_skb;
360 struct sk_buff *acl_skb;
361 struct sk_buff *sco_skb;
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200362
363 struct usb_endpoint_descriptor *intr_ep;
364 struct usb_endpoint_descriptor *bulk_tx_ep;
365 struct usb_endpoint_descriptor *bulk_rx_ep;
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200366 struct usb_endpoint_descriptor *isoc_tx_ep;
367 struct usb_endpoint_descriptor *isoc_rx_ep;
368
Marcel Holtmann7a9d4022008-11-30 12:17:26 +0100369 __u8 cmdreq_type;
Marcel Holtmann893ba542015-01-28 20:27:34 -0800370 __u8 cmdreq;
Marcel Holtmann7a9d4022008-11-30 12:17:26 +0100371
Marcel Holtmann43c2e572009-02-04 17:41:38 +0100372 unsigned int sco_num;
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200373 int isoc_altsetting;
Marcel Holtmann6a88adf2008-11-30 12:17:14 +0100374 int suspend_count;
Marcel Holtmann2cbd3f52014-11-03 05:16:07 +0100375
Marcel Holtmann97307f52015-01-12 13:51:10 -0800376 int (*recv_event)(struct hci_dev *hdev, struct sk_buff *skb);
Marcel Holtmann2cbd3f52014-11-03 05:16:07 +0100377 int (*recv_bulk)(struct btusb_data *data, void *buffer, int count);
Kim, Ben Young Taeace31982015-02-15 23:06:14 +0000378
379 int (*setup_on_usb)(struct hci_dev *hdev);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200380};
381
Marcel Holtmann803b5832014-09-16 08:00:29 +0200382static inline void btusb_free_frags(struct btusb_data *data)
383{
384 unsigned long flags;
385
386 spin_lock_irqsave(&data->rxlock, flags);
387
388 kfree_skb(data->evt_skb);
389 data->evt_skb = NULL;
390
391 kfree_skb(data->acl_skb);
392 data->acl_skb = NULL;
393
394 kfree_skb(data->sco_skb);
395 data->sco_skb = NULL;
396
397 spin_unlock_irqrestore(&data->rxlock, flags);
398}
399
Marcel Holtmann1ffa4ad2014-09-16 05:33:33 +0200400static int btusb_recv_intr(struct btusb_data *data, void *buffer, int count)
401{
Marcel Holtmann803b5832014-09-16 08:00:29 +0200402 struct sk_buff *skb;
403 int err = 0;
404
405 spin_lock(&data->rxlock);
406 skb = data->evt_skb;
407
408 while (count) {
409 int len;
410
411 if (!skb) {
412 skb = bt_skb_alloc(HCI_MAX_EVENT_SIZE, GFP_ATOMIC);
413 if (!skb) {
414 err = -ENOMEM;
415 break;
416 }
417
418 bt_cb(skb)->pkt_type = HCI_EVENT_PKT;
419 bt_cb(skb)->expect = HCI_EVENT_HDR_SIZE;
420 }
421
422 len = min_t(uint, bt_cb(skb)->expect, count);
423 memcpy(skb_put(skb, len), buffer, len);
424
425 count -= len;
426 buffer += len;
427 bt_cb(skb)->expect -= len;
428
429 if (skb->len == HCI_EVENT_HDR_SIZE) {
430 /* Complete event header */
431 bt_cb(skb)->expect = hci_event_hdr(skb)->plen;
432
433 if (skb_tailroom(skb) < bt_cb(skb)->expect) {
434 kfree_skb(skb);
435 skb = NULL;
436
437 err = -EILSEQ;
438 break;
439 }
440 }
441
442 if (bt_cb(skb)->expect == 0) {
443 /* Complete frame */
Marcel Holtmann97307f52015-01-12 13:51:10 -0800444 data->recv_event(data->hdev, skb);
Marcel Holtmann803b5832014-09-16 08:00:29 +0200445 skb = NULL;
446 }
447 }
448
449 data->evt_skb = skb;
450 spin_unlock(&data->rxlock);
451
452 return err;
Marcel Holtmann1ffa4ad2014-09-16 05:33:33 +0200453}
454
455static int btusb_recv_bulk(struct btusb_data *data, void *buffer, int count)
456{
Marcel Holtmann803b5832014-09-16 08:00:29 +0200457 struct sk_buff *skb;
458 int err = 0;
459
460 spin_lock(&data->rxlock);
461 skb = data->acl_skb;
462
463 while (count) {
464 int len;
465
466 if (!skb) {
467 skb = bt_skb_alloc(HCI_MAX_FRAME_SIZE, GFP_ATOMIC);
468 if (!skb) {
469 err = -ENOMEM;
470 break;
471 }
472
473 bt_cb(skb)->pkt_type = HCI_ACLDATA_PKT;
474 bt_cb(skb)->expect = HCI_ACL_HDR_SIZE;
475 }
476
477 len = min_t(uint, bt_cb(skb)->expect, count);
478 memcpy(skb_put(skb, len), buffer, len);
479
480 count -= len;
481 buffer += len;
482 bt_cb(skb)->expect -= len;
483
484 if (skb->len == HCI_ACL_HDR_SIZE) {
485 __le16 dlen = hci_acl_hdr(skb)->dlen;
486
487 /* Complete ACL header */
488 bt_cb(skb)->expect = __le16_to_cpu(dlen);
489
490 if (skb_tailroom(skb) < bt_cb(skb)->expect) {
491 kfree_skb(skb);
492 skb = NULL;
493
494 err = -EILSEQ;
495 break;
496 }
497 }
498
499 if (bt_cb(skb)->expect == 0) {
500 /* Complete frame */
501 hci_recv_frame(data->hdev, skb);
502 skb = NULL;
503 }
504 }
505
506 data->acl_skb = skb;
507 spin_unlock(&data->rxlock);
508
509 return err;
Marcel Holtmann1ffa4ad2014-09-16 05:33:33 +0200510}
511
512static int btusb_recv_isoc(struct btusb_data *data, void *buffer, int count)
513{
Marcel Holtmann803b5832014-09-16 08:00:29 +0200514 struct sk_buff *skb;
515 int err = 0;
516
517 spin_lock(&data->rxlock);
518 skb = data->sco_skb;
519
520 while (count) {
521 int len;
522
523 if (!skb) {
524 skb = bt_skb_alloc(HCI_MAX_SCO_SIZE, GFP_ATOMIC);
525 if (!skb) {
526 err = -ENOMEM;
527 break;
528 }
529
530 bt_cb(skb)->pkt_type = HCI_SCODATA_PKT;
531 bt_cb(skb)->expect = HCI_SCO_HDR_SIZE;
532 }
533
534 len = min_t(uint, bt_cb(skb)->expect, count);
535 memcpy(skb_put(skb, len), buffer, len);
536
537 count -= len;
538 buffer += len;
539 bt_cb(skb)->expect -= len;
540
541 if (skb->len == HCI_SCO_HDR_SIZE) {
542 /* Complete SCO header */
543 bt_cb(skb)->expect = hci_sco_hdr(skb)->dlen;
544
545 if (skb_tailroom(skb) < bt_cb(skb)->expect) {
546 kfree_skb(skb);
547 skb = NULL;
548
549 err = -EILSEQ;
550 break;
551 }
552 }
553
554 if (bt_cb(skb)->expect == 0) {
555 /* Complete frame */
556 hci_recv_frame(data->hdev, skb);
557 skb = NULL;
558 }
559 }
560
561 data->sco_skb = skb;
562 spin_unlock(&data->rxlock);
563
564 return err;
Marcel Holtmann1ffa4ad2014-09-16 05:33:33 +0200565}
566
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200567static void btusb_intr_complete(struct urb *urb)
568{
569 struct hci_dev *hdev = urb->context;
David Herrmann155961e2012-02-09 21:58:32 +0100570 struct btusb_data *data = hci_get_drvdata(hdev);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200571 int err;
572
Marcel Holtmann89e75332014-09-16 04:44:50 +0200573 BT_DBG("%s urb %p status %d count %d", hdev->name, urb, urb->status,
574 urb->actual_length);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200575
576 if (!test_bit(HCI_RUNNING, &hdev->flags))
577 return;
578
579 if (urb->status == 0) {
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200580 hdev->stat.byte_rx += urb->actual_length;
581
Marcel Holtmann1ffa4ad2014-09-16 05:33:33 +0200582 if (btusb_recv_intr(data, urb->transfer_buffer,
583 urb->actual_length) < 0) {
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200584 BT_ERR("%s corrupted event packet", hdev->name);
585 hdev->stat.err_rx++;
586 }
Champion Chen85560c42014-09-06 14:06:08 -0500587 } else if (urb->status == -ENOENT) {
588 /* Avoid suspend failed when usb_kill_urb */
589 return;
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200590 }
591
592 if (!test_bit(BTUSB_INTR_RUNNING, &data->flags))
593 return;
594
Oliver Neukum7bee5492009-08-24 23:44:59 +0200595 usb_mark_last_busy(data->udev);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200596 usb_anchor_urb(urb, &data->intr_anchor);
597
598 err = usb_submit_urb(urb, GFP_ATOMIC);
599 if (err < 0) {
Paul Bolle4935f1c2011-08-09 17:16:28 +0200600 /* -EPERM: urb is being killed;
601 * -ENODEV: device got disconnected */
602 if (err != -EPERM && err != -ENODEV)
Stefan Seyfried61faddf2010-11-30 21:49:08 +0100603 BT_ERR("%s urb %p failed to resubmit (%d)",
Marcel Holtmann89e75332014-09-16 04:44:50 +0200604 hdev->name, urb, -err);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200605 usb_unanchor_urb(urb);
606 }
607}
608
Marcel Holtmann2eda66f2008-11-30 12:17:10 +0100609static int btusb_submit_intr_urb(struct hci_dev *hdev, gfp_t mem_flags)
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200610{
David Herrmann155961e2012-02-09 21:58:32 +0100611 struct btusb_data *data = hci_get_drvdata(hdev);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200612 struct urb *urb;
613 unsigned char *buf;
614 unsigned int pipe;
615 int err, size;
616
617 BT_DBG("%s", hdev->name);
618
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200619 if (!data->intr_ep)
620 return -ENODEV;
621
Marcel Holtmann2eda66f2008-11-30 12:17:10 +0100622 urb = usb_alloc_urb(0, mem_flags);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200623 if (!urb)
624 return -ENOMEM;
625
626 size = le16_to_cpu(data->intr_ep->wMaxPacketSize);
627
Marcel Holtmann2eda66f2008-11-30 12:17:10 +0100628 buf = kmalloc(size, mem_flags);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200629 if (!buf) {
630 usb_free_urb(urb);
631 return -ENOMEM;
632 }
633
634 pipe = usb_rcvintpipe(data->udev, data->intr_ep->bEndpointAddress);
635
636 usb_fill_int_urb(urb, data->udev, pipe, buf, size,
Marcel Holtmann89e75332014-09-16 04:44:50 +0200637 btusb_intr_complete, hdev, data->intr_ep->bInterval);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200638
639 urb->transfer_flags |= URB_FREE_BUFFER;
640
641 usb_anchor_urb(urb, &data->intr_anchor);
642
Marcel Holtmann2eda66f2008-11-30 12:17:10 +0100643 err = usb_submit_urb(urb, mem_flags);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200644 if (err < 0) {
Paul Bolled4b8d1c2011-10-09 12:12:22 +0200645 if (err != -EPERM && err != -ENODEV)
646 BT_ERR("%s urb %p submission failed (%d)",
Marcel Holtmann89e75332014-09-16 04:44:50 +0200647 hdev->name, urb, -err);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200648 usb_unanchor_urb(urb);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200649 }
650
651 usb_free_urb(urb);
652
653 return err;
654}
655
656static void btusb_bulk_complete(struct urb *urb)
657{
658 struct hci_dev *hdev = urb->context;
David Herrmann155961e2012-02-09 21:58:32 +0100659 struct btusb_data *data = hci_get_drvdata(hdev);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200660 int err;
661
Marcel Holtmann89e75332014-09-16 04:44:50 +0200662 BT_DBG("%s urb %p status %d count %d", hdev->name, urb, urb->status,
663 urb->actual_length);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200664
665 if (!test_bit(HCI_RUNNING, &hdev->flags))
666 return;
667
668 if (urb->status == 0) {
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200669 hdev->stat.byte_rx += urb->actual_length;
670
Marcel Holtmann2cbd3f52014-11-03 05:16:07 +0100671 if (data->recv_bulk(data, urb->transfer_buffer,
Marcel Holtmann1ffa4ad2014-09-16 05:33:33 +0200672 urb->actual_length) < 0) {
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200673 BT_ERR("%s corrupted ACL packet", hdev->name);
674 hdev->stat.err_rx++;
675 }
Champion Chen85560c42014-09-06 14:06:08 -0500676 } else if (urb->status == -ENOENT) {
677 /* Avoid suspend failed when usb_kill_urb */
678 return;
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200679 }
680
681 if (!test_bit(BTUSB_BULK_RUNNING, &data->flags))
682 return;
683
684 usb_anchor_urb(urb, &data->bulk_anchor);
Oliver Neukum652fd782009-12-16 19:23:43 +0100685 usb_mark_last_busy(data->udev);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200686
687 err = usb_submit_urb(urb, GFP_ATOMIC);
688 if (err < 0) {
Paul Bolle4935f1c2011-08-09 17:16:28 +0200689 /* -EPERM: urb is being killed;
690 * -ENODEV: device got disconnected */
691 if (err != -EPERM && err != -ENODEV)
Stefan Seyfried61faddf2010-11-30 21:49:08 +0100692 BT_ERR("%s urb %p failed to resubmit (%d)",
Marcel Holtmann89e75332014-09-16 04:44:50 +0200693 hdev->name, urb, -err);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200694 usb_unanchor_urb(urb);
695 }
696}
697
Marcel Holtmann2eda66f2008-11-30 12:17:10 +0100698static int btusb_submit_bulk_urb(struct hci_dev *hdev, gfp_t mem_flags)
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200699{
David Herrmann155961e2012-02-09 21:58:32 +0100700 struct btusb_data *data = hci_get_drvdata(hdev);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200701 struct urb *urb;
702 unsigned char *buf;
703 unsigned int pipe;
Vikram Kandukuri290ba202009-07-02 14:31:59 +0530704 int err, size = HCI_MAX_FRAME_SIZE;
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200705
706 BT_DBG("%s", hdev->name);
707
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200708 if (!data->bulk_rx_ep)
709 return -ENODEV;
710
Marcel Holtmann2eda66f2008-11-30 12:17:10 +0100711 urb = usb_alloc_urb(0, mem_flags);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200712 if (!urb)
713 return -ENOMEM;
714
Marcel Holtmann2eda66f2008-11-30 12:17:10 +0100715 buf = kmalloc(size, mem_flags);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200716 if (!buf) {
717 usb_free_urb(urb);
718 return -ENOMEM;
719 }
720
721 pipe = usb_rcvbulkpipe(data->udev, data->bulk_rx_ep->bEndpointAddress);
722
Marcel Holtmann89e75332014-09-16 04:44:50 +0200723 usb_fill_bulk_urb(urb, data->udev, pipe, buf, size,
724 btusb_bulk_complete, hdev);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200725
726 urb->transfer_flags |= URB_FREE_BUFFER;
727
Oliver Neukum7bee5492009-08-24 23:44:59 +0200728 usb_mark_last_busy(data->udev);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200729 usb_anchor_urb(urb, &data->bulk_anchor);
730
Marcel Holtmann2eda66f2008-11-30 12:17:10 +0100731 err = usb_submit_urb(urb, mem_flags);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200732 if (err < 0) {
Paul Bolled4b8d1c2011-10-09 12:12:22 +0200733 if (err != -EPERM && err != -ENODEV)
734 BT_ERR("%s urb %p submission failed (%d)",
Marcel Holtmann89e75332014-09-16 04:44:50 +0200735 hdev->name, urb, -err);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200736 usb_unanchor_urb(urb);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200737 }
738
739 usb_free_urb(urb);
740
741 return err;
742}
743
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200744static void btusb_isoc_complete(struct urb *urb)
745{
746 struct hci_dev *hdev = urb->context;
David Herrmann155961e2012-02-09 21:58:32 +0100747 struct btusb_data *data = hci_get_drvdata(hdev);
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200748 int i, err;
749
Marcel Holtmann89e75332014-09-16 04:44:50 +0200750 BT_DBG("%s urb %p status %d count %d", hdev->name, urb, urb->status,
751 urb->actual_length);
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200752
753 if (!test_bit(HCI_RUNNING, &hdev->flags))
754 return;
755
756 if (urb->status == 0) {
757 for (i = 0; i < urb->number_of_packets; i++) {
758 unsigned int offset = urb->iso_frame_desc[i].offset;
759 unsigned int length = urb->iso_frame_desc[i].actual_length;
760
761 if (urb->iso_frame_desc[i].status)
762 continue;
763
764 hdev->stat.byte_rx += length;
765
Marcel Holtmann1ffa4ad2014-09-16 05:33:33 +0200766 if (btusb_recv_isoc(data, urb->transfer_buffer + offset,
767 length) < 0) {
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200768 BT_ERR("%s corrupted SCO packet", hdev->name);
769 hdev->stat.err_rx++;
770 }
771 }
Champion Chen85560c42014-09-06 14:06:08 -0500772 } else if (urb->status == -ENOENT) {
773 /* Avoid suspend failed when usb_kill_urb */
774 return;
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200775 }
776
777 if (!test_bit(BTUSB_ISOC_RUNNING, &data->flags))
778 return;
779
780 usb_anchor_urb(urb, &data->isoc_anchor);
781
782 err = usb_submit_urb(urb, GFP_ATOMIC);
783 if (err < 0) {
Paul Bolle4935f1c2011-08-09 17:16:28 +0200784 /* -EPERM: urb is being killed;
785 * -ENODEV: device got disconnected */
786 if (err != -EPERM && err != -ENODEV)
Stefan Seyfried61faddf2010-11-30 21:49:08 +0100787 BT_ERR("%s urb %p failed to resubmit (%d)",
Marcel Holtmann89e75332014-09-16 04:44:50 +0200788 hdev->name, urb, -err);
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200789 usb_unanchor_urb(urb);
790 }
791}
792
Jesper Juhl42b16b32011-01-17 00:09:38 +0100793static inline void __fill_isoc_descriptor(struct urb *urb, int len, int mtu)
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200794{
795 int i, offset = 0;
796
797 BT_DBG("len %d mtu %d", len, mtu);
798
799 for (i = 0; i < BTUSB_MAX_ISOC_FRAMES && len >= mtu;
800 i++, offset += mtu, len -= mtu) {
801 urb->iso_frame_desc[i].offset = offset;
802 urb->iso_frame_desc[i].length = mtu;
803 }
804
805 if (len && i < BTUSB_MAX_ISOC_FRAMES) {
806 urb->iso_frame_desc[i].offset = offset;
807 urb->iso_frame_desc[i].length = len;
808 i++;
809 }
810
811 urb->number_of_packets = i;
812}
813
Marcel Holtmann2eda66f2008-11-30 12:17:10 +0100814static int btusb_submit_isoc_urb(struct hci_dev *hdev, gfp_t mem_flags)
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200815{
David Herrmann155961e2012-02-09 21:58:32 +0100816 struct btusb_data *data = hci_get_drvdata(hdev);
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200817 struct urb *urb;
818 unsigned char *buf;
819 unsigned int pipe;
820 int err, size;
821
822 BT_DBG("%s", hdev->name);
823
824 if (!data->isoc_rx_ep)
825 return -ENODEV;
826
Marcel Holtmann2eda66f2008-11-30 12:17:10 +0100827 urb = usb_alloc_urb(BTUSB_MAX_ISOC_FRAMES, mem_flags);
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200828 if (!urb)
829 return -ENOMEM;
830
831 size = le16_to_cpu(data->isoc_rx_ep->wMaxPacketSize) *
832 BTUSB_MAX_ISOC_FRAMES;
833
Marcel Holtmann2eda66f2008-11-30 12:17:10 +0100834 buf = kmalloc(size, mem_flags);
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200835 if (!buf) {
836 usb_free_urb(urb);
837 return -ENOMEM;
838 }
839
840 pipe = usb_rcvisocpipe(data->udev, data->isoc_rx_ep->bEndpointAddress);
841
Bing Zhaofa0fb932011-12-20 18:19:00 -0800842 usb_fill_int_urb(urb, data->udev, pipe, buf, size, btusb_isoc_complete,
Marcel Holtmann89e75332014-09-16 04:44:50 +0200843 hdev, data->isoc_rx_ep->bInterval);
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200844
Marcel Holtmann89e75332014-09-16 04:44:50 +0200845 urb->transfer_flags = URB_FREE_BUFFER | URB_ISO_ASAP;
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200846
847 __fill_isoc_descriptor(urb, size,
Marcel Holtmann89e75332014-09-16 04:44:50 +0200848 le16_to_cpu(data->isoc_rx_ep->wMaxPacketSize));
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200849
850 usb_anchor_urb(urb, &data->isoc_anchor);
851
Marcel Holtmann2eda66f2008-11-30 12:17:10 +0100852 err = usb_submit_urb(urb, mem_flags);
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200853 if (err < 0) {
Paul Bolled4b8d1c2011-10-09 12:12:22 +0200854 if (err != -EPERM && err != -ENODEV)
855 BT_ERR("%s urb %p submission failed (%d)",
Marcel Holtmann89e75332014-09-16 04:44:50 +0200856 hdev->name, urb, -err);
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200857 usb_unanchor_urb(urb);
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200858 }
859
860 usb_free_urb(urb);
861
862 return err;
863}
864
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200865static void btusb_tx_complete(struct urb *urb)
866{
867 struct sk_buff *skb = urb->context;
Marcel Holtmann89e75332014-09-16 04:44:50 +0200868 struct hci_dev *hdev = (struct hci_dev *)skb->dev;
David Herrmann155961e2012-02-09 21:58:32 +0100869 struct btusb_data *data = hci_get_drvdata(hdev);
Oliver Neukum7bee5492009-08-24 23:44:59 +0200870
Marcel Holtmann89e75332014-09-16 04:44:50 +0200871 BT_DBG("%s urb %p status %d count %d", hdev->name, urb, urb->status,
872 urb->actual_length);
Oliver Neukum7bee5492009-08-24 23:44:59 +0200873
874 if (!test_bit(HCI_RUNNING, &hdev->flags))
875 goto done;
876
877 if (!urb->status)
878 hdev->stat.byte_tx += urb->transfer_buffer_length;
879 else
880 hdev->stat.err_tx++;
881
882done:
883 spin_lock(&data->txlock);
884 data->tx_in_flight--;
885 spin_unlock(&data->txlock);
886
887 kfree(urb->setup_packet);
888
889 kfree_skb(skb);
890}
891
892static void btusb_isoc_tx_complete(struct urb *urb)
893{
894 struct sk_buff *skb = urb->context;
Marcel Holtmann89e75332014-09-16 04:44:50 +0200895 struct hci_dev *hdev = (struct hci_dev *)skb->dev;
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200896
Marcel Holtmann89e75332014-09-16 04:44:50 +0200897 BT_DBG("%s urb %p status %d count %d", hdev->name, urb, urb->status,
898 urb->actual_length);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200899
900 if (!test_bit(HCI_RUNNING, &hdev->flags))
901 goto done;
902
903 if (!urb->status)
904 hdev->stat.byte_tx += urb->transfer_buffer_length;
905 else
906 hdev->stat.err_tx++;
907
908done:
909 kfree(urb->setup_packet);
910
911 kfree_skb(skb);
912}
913
914static int btusb_open(struct hci_dev *hdev)
915{
David Herrmann155961e2012-02-09 21:58:32 +0100916 struct btusb_data *data = hci_get_drvdata(hdev);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200917 int err;
918
919 BT_DBG("%s", hdev->name);
920
Kim, Ben Young Taeace31982015-02-15 23:06:14 +0000921 /* Patching USB firmware files prior to starting any URBs of HCI path
922 * It is more safe to use USB bulk channel for downloading USB patch
923 */
924 if (data->setup_on_usb) {
925 err = data->setup_on_usb(hdev);
Marcel Holtmanneb500422015-04-16 23:15:50 +0200926 if (err < 0)
Kim, Ben Young Taeace31982015-02-15 23:06:14 +0000927 return err;
928 }
929
Oliver Neukum7bee5492009-08-24 23:44:59 +0200930 err = usb_autopm_get_interface(data->intf);
931 if (err < 0)
932 return err;
933
934 data->intf->needs_remote_wakeup = 1;
935
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200936 if (test_and_set_bit(HCI_RUNNING, &hdev->flags))
Oliver Neukum7bee5492009-08-24 23:44:59 +0200937 goto done;
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200938
939 if (test_and_set_bit(BTUSB_INTR_RUNNING, &data->flags))
Oliver Neukum7bee5492009-08-24 23:44:59 +0200940 goto done;
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200941
Marcel Holtmann2eda66f2008-11-30 12:17:10 +0100942 err = btusb_submit_intr_urb(hdev, GFP_KERNEL);
Marcel Holtmann43c2e572009-02-04 17:41:38 +0100943 if (err < 0)
944 goto failed;
945
946 err = btusb_submit_bulk_urb(hdev, GFP_KERNEL);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200947 if (err < 0) {
Marcel Holtmann43c2e572009-02-04 17:41:38 +0100948 usb_kill_anchored_urbs(&data->intr_anchor);
949 goto failed;
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200950 }
951
Marcel Holtmann43c2e572009-02-04 17:41:38 +0100952 set_bit(BTUSB_BULK_RUNNING, &data->flags);
953 btusb_submit_bulk_urb(hdev, GFP_KERNEL);
954
Oliver Neukum7bee5492009-08-24 23:44:59 +0200955done:
956 usb_autopm_put_interface(data->intf);
Marcel Holtmann43c2e572009-02-04 17:41:38 +0100957 return 0;
958
959failed:
960 clear_bit(BTUSB_INTR_RUNNING, &data->flags);
961 clear_bit(HCI_RUNNING, &hdev->flags);
Oliver Neukum7bee5492009-08-24 23:44:59 +0200962 usb_autopm_put_interface(data->intf);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200963 return err;
964}
965
Oliver Neukum7bee5492009-08-24 23:44:59 +0200966static void btusb_stop_traffic(struct btusb_data *data)
967{
968 usb_kill_anchored_urbs(&data->intr_anchor);
969 usb_kill_anchored_urbs(&data->bulk_anchor);
970 usb_kill_anchored_urbs(&data->isoc_anchor);
971}
972
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200973static int btusb_close(struct hci_dev *hdev)
974{
David Herrmann155961e2012-02-09 21:58:32 +0100975 struct btusb_data *data = hci_get_drvdata(hdev);
Oliver Neukum7bee5492009-08-24 23:44:59 +0200976 int err;
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200977
978 BT_DBG("%s", hdev->name);
979
980 if (!test_and_clear_bit(HCI_RUNNING, &hdev->flags))
981 return 0;
982
Marcel Holtmanne8c3c3d2008-09-23 00:16:36 +0200983 cancel_work_sync(&data->work);
Linus Torvalds404291a2009-11-11 13:32:29 -0800984 cancel_work_sync(&data->waker);
Marcel Holtmanne8c3c3d2008-09-23 00:16:36 +0200985
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +0200986 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200987 clear_bit(BTUSB_BULK_RUNNING, &data->flags);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200988 clear_bit(BTUSB_INTR_RUNNING, &data->flags);
Oliver Neukum7bee5492009-08-24 23:44:59 +0200989
990 btusb_stop_traffic(data);
Marcel Holtmann803b5832014-09-16 08:00:29 +0200991 btusb_free_frags(data);
992
Oliver Neukum7bee5492009-08-24 23:44:59 +0200993 err = usb_autopm_get_interface(data->intf);
994 if (err < 0)
Oliver Neukum7b8e2c12009-11-13 14:26:23 +0100995 goto failed;
Oliver Neukum7bee5492009-08-24 23:44:59 +0200996
997 data->intf->needs_remote_wakeup = 0;
998 usb_autopm_put_interface(data->intf);
Marcel Holtmann5e23b922007-10-20 14:12:34 +0200999
Oliver Neukum7b8e2c12009-11-13 14:26:23 +01001000failed:
1001 usb_scuttle_anchored_urbs(&data->deferred);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001002 return 0;
1003}
1004
1005static int btusb_flush(struct hci_dev *hdev)
1006{
David Herrmann155961e2012-02-09 21:58:32 +01001007 struct btusb_data *data = hci_get_drvdata(hdev);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001008
1009 BT_DBG("%s", hdev->name);
1010
1011 usb_kill_anchored_urbs(&data->tx_anchor);
Marcel Holtmann803b5832014-09-16 08:00:29 +02001012 btusb_free_frags(data);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001013
1014 return 0;
1015}
1016
Marcel Holtmann047b2ec2014-09-14 09:11:06 +02001017static struct urb *alloc_ctrl_urb(struct hci_dev *hdev, struct sk_buff *skb)
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001018{
David Herrmann155961e2012-02-09 21:58:32 +01001019 struct btusb_data *data = hci_get_drvdata(hdev);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001020 struct usb_ctrlrequest *dr;
1021 struct urb *urb;
1022 unsigned int pipe;
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001023
Marcel Holtmann047b2ec2014-09-14 09:11:06 +02001024 urb = usb_alloc_urb(0, GFP_KERNEL);
1025 if (!urb)
1026 return ERR_PTR(-ENOMEM);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001027
Marcel Holtmann047b2ec2014-09-14 09:11:06 +02001028 dr = kmalloc(sizeof(*dr), GFP_KERNEL);
1029 if (!dr) {
1030 usb_free_urb(urb);
1031 return ERR_PTR(-ENOMEM);
1032 }
1033
1034 dr->bRequestType = data->cmdreq_type;
Marcel Holtmann893ba542015-01-28 20:27:34 -08001035 dr->bRequest = data->cmdreq;
Marcel Holtmann047b2ec2014-09-14 09:11:06 +02001036 dr->wIndex = 0;
1037 dr->wValue = 0;
1038 dr->wLength = __cpu_to_le16(skb->len);
1039
1040 pipe = usb_sndctrlpipe(data->udev, 0x00);
1041
Marcel Holtmann89e75332014-09-16 04:44:50 +02001042 usb_fill_control_urb(urb, data->udev, pipe, (void *)dr,
Marcel Holtmann047b2ec2014-09-14 09:11:06 +02001043 skb->data, skb->len, btusb_tx_complete, skb);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001044
Marcel Holtmann89e75332014-09-16 04:44:50 +02001045 skb->dev = (void *)hdev;
Marcel Holtmann7bd8f092013-10-11 06:19:18 -07001046
Marcel Holtmann047b2ec2014-09-14 09:11:06 +02001047 return urb;
1048}
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001049
Marcel Holtmann047b2ec2014-09-14 09:11:06 +02001050static struct urb *alloc_bulk_urb(struct hci_dev *hdev, struct sk_buff *skb)
1051{
1052 struct btusb_data *data = hci_get_drvdata(hdev);
1053 struct urb *urb;
1054 unsigned int pipe;
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001055
Marcel Holtmann047b2ec2014-09-14 09:11:06 +02001056 if (!data->bulk_tx_ep)
1057 return ERR_PTR(-ENODEV);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001058
Marcel Holtmann047b2ec2014-09-14 09:11:06 +02001059 urb = usb_alloc_urb(0, GFP_KERNEL);
1060 if (!urb)
1061 return ERR_PTR(-ENOMEM);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001062
Marcel Holtmann047b2ec2014-09-14 09:11:06 +02001063 pipe = usb_sndbulkpipe(data->udev, data->bulk_tx_ep->bEndpointAddress);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001064
Marcel Holtmann047b2ec2014-09-14 09:11:06 +02001065 usb_fill_bulk_urb(urb, data->udev, pipe,
1066 skb->data, skb->len, btusb_tx_complete, skb);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001067
Marcel Holtmann89e75332014-09-16 04:44:50 +02001068 skb->dev = (void *)hdev;
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +02001069
Marcel Holtmann047b2ec2014-09-14 09:11:06 +02001070 return urb;
1071}
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001072
Marcel Holtmann047b2ec2014-09-14 09:11:06 +02001073static struct urb *alloc_isoc_urb(struct hci_dev *hdev, struct sk_buff *skb)
1074{
1075 struct btusb_data *data = hci_get_drvdata(hdev);
1076 struct urb *urb;
1077 unsigned int pipe;
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001078
Marcel Holtmann047b2ec2014-09-14 09:11:06 +02001079 if (!data->isoc_tx_ep)
1080 return ERR_PTR(-ENODEV);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001081
Marcel Holtmann047b2ec2014-09-14 09:11:06 +02001082 urb = usb_alloc_urb(BTUSB_MAX_ISOC_FRAMES, GFP_KERNEL);
1083 if (!urb)
1084 return ERR_PTR(-ENOMEM);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001085
Marcel Holtmann047b2ec2014-09-14 09:11:06 +02001086 pipe = usb_sndisocpipe(data->udev, data->isoc_tx_ep->bEndpointAddress);
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +02001087
Marcel Holtmann047b2ec2014-09-14 09:11:06 +02001088 usb_fill_int_urb(urb, data->udev, pipe,
1089 skb->data, skb->len, btusb_isoc_tx_complete,
1090 skb, data->isoc_tx_ep->bInterval);
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +02001091
Marcel Holtmann047b2ec2014-09-14 09:11:06 +02001092 urb->transfer_flags = URB_ISO_ASAP;
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +02001093
Marcel Holtmann047b2ec2014-09-14 09:11:06 +02001094 __fill_isoc_descriptor(urb, skb->len,
1095 le16_to_cpu(data->isoc_tx_ep->wMaxPacketSize));
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +02001096
Marcel Holtmann89e75332014-09-16 04:44:50 +02001097 skb->dev = (void *)hdev;
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +02001098
Marcel Holtmann047b2ec2014-09-14 09:11:06 +02001099 return urb;
1100}
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +02001101
Marcel Holtmann047b2ec2014-09-14 09:11:06 +02001102static int submit_tx_urb(struct hci_dev *hdev, struct urb *urb)
1103{
1104 struct btusb_data *data = hci_get_drvdata(hdev);
1105 int err;
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001106
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001107 usb_anchor_urb(urb, &data->tx_anchor);
1108
Johan Hedberge9753ef2014-09-14 08:49:34 +03001109 err = usb_submit_urb(urb, GFP_KERNEL);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001110 if (err < 0) {
Paul Bolle5a9b80e2011-10-09 12:12:16 +02001111 if (err != -EPERM && err != -ENODEV)
1112 BT_ERR("%s urb %p submission failed (%d)",
Marcel Holtmann89e75332014-09-16 04:44:50 +02001113 hdev->name, urb, -err);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001114 kfree(urb->setup_packet);
1115 usb_unanchor_urb(urb);
Oliver Neukum7bee5492009-08-24 23:44:59 +02001116 } else {
1117 usb_mark_last_busy(data->udev);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001118 }
1119
Cong Wang54a8a792011-11-22 09:32:57 +08001120 usb_free_urb(urb);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001121 return err;
1122}
1123
Marcel Holtmann047b2ec2014-09-14 09:11:06 +02001124static int submit_or_queue_tx_urb(struct hci_dev *hdev, struct urb *urb)
1125{
1126 struct btusb_data *data = hci_get_drvdata(hdev);
1127 unsigned long flags;
1128 bool suspending;
1129
1130 spin_lock_irqsave(&data->txlock, flags);
1131 suspending = test_bit(BTUSB_SUSPENDING, &data->flags);
1132 if (!suspending)
1133 data->tx_in_flight++;
1134 spin_unlock_irqrestore(&data->txlock, flags);
1135
1136 if (!suspending)
1137 return submit_tx_urb(hdev, urb);
1138
1139 usb_anchor_urb(urb, &data->deferred);
1140 schedule_work(&data->waker);
1141
1142 usb_free_urb(urb);
1143 return 0;
1144}
1145
1146static int btusb_send_frame(struct hci_dev *hdev, struct sk_buff *skb)
1147{
1148 struct urb *urb;
1149
1150 BT_DBG("%s", hdev->name);
1151
1152 if (!test_bit(HCI_RUNNING, &hdev->flags))
1153 return -EBUSY;
1154
1155 switch (bt_cb(skb)->pkt_type) {
1156 case HCI_COMMAND_PKT:
1157 urb = alloc_ctrl_urb(hdev, skb);
1158 if (IS_ERR(urb))
1159 return PTR_ERR(urb);
1160
1161 hdev->stat.cmd_tx++;
1162 return submit_or_queue_tx_urb(hdev, urb);
1163
1164 case HCI_ACLDATA_PKT:
1165 urb = alloc_bulk_urb(hdev, skb);
1166 if (IS_ERR(urb))
1167 return PTR_ERR(urb);
1168
1169 hdev->stat.acl_tx++;
1170 return submit_or_queue_tx_urb(hdev, urb);
1171
1172 case HCI_SCODATA_PKT:
1173 if (hci_conn_num(hdev, SCO_LINK) < 1)
1174 return -ENODEV;
1175
1176 urb = alloc_isoc_urb(hdev, skb);
1177 if (IS_ERR(urb))
1178 return PTR_ERR(urb);
1179
1180 hdev->stat.sco_tx++;
1181 return submit_tx_urb(hdev, urb);
1182 }
1183
1184 return -EILSEQ;
1185}
1186
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001187static void btusb_notify(struct hci_dev *hdev, unsigned int evt)
1188{
David Herrmann155961e2012-02-09 21:58:32 +01001189 struct btusb_data *data = hci_get_drvdata(hdev);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001190
1191 BT_DBG("%s evt %d", hdev->name, evt);
1192
Marcel Holtmann014f7bc2013-10-10 09:47:55 -07001193 if (hci_conn_num(hdev, SCO_LINK) != data->sco_num) {
1194 data->sco_num = hci_conn_num(hdev, SCO_LINK);
Marcel Holtmann43c2e572009-02-04 17:41:38 +01001195 schedule_work(&data->work);
Marcel Holtmanna780efa2008-11-30 12:17:12 +01001196 }
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001197}
1198
Jesper Juhl42b16b32011-01-17 00:09:38 +01001199static inline int __set_isoc_interface(struct hci_dev *hdev, int altsetting)
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +02001200{
David Herrmann155961e2012-02-09 21:58:32 +01001201 struct btusb_data *data = hci_get_drvdata(hdev);
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +02001202 struct usb_interface *intf = data->isoc;
1203 struct usb_endpoint_descriptor *ep_desc;
1204 int i, err;
1205
1206 if (!data->isoc)
1207 return -ENODEV;
1208
1209 err = usb_set_interface(data->udev, 1, altsetting);
1210 if (err < 0) {
1211 BT_ERR("%s setting interface failed (%d)", hdev->name, -err);
1212 return err;
1213 }
1214
1215 data->isoc_altsetting = altsetting;
1216
1217 data->isoc_tx_ep = NULL;
1218 data->isoc_rx_ep = NULL;
1219
1220 for (i = 0; i < intf->cur_altsetting->desc.bNumEndpoints; i++) {
1221 ep_desc = &intf->cur_altsetting->endpoint[i].desc;
1222
1223 if (!data->isoc_tx_ep && usb_endpoint_is_isoc_out(ep_desc)) {
1224 data->isoc_tx_ep = ep_desc;
1225 continue;
1226 }
1227
1228 if (!data->isoc_rx_ep && usb_endpoint_is_isoc_in(ep_desc)) {
1229 data->isoc_rx_ep = ep_desc;
1230 continue;
1231 }
1232 }
1233
1234 if (!data->isoc_tx_ep || !data->isoc_rx_ep) {
1235 BT_ERR("%s invalid SCO descriptors", hdev->name);
1236 return -ENODEV;
1237 }
1238
1239 return 0;
1240}
1241
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001242static void btusb_work(struct work_struct *work)
1243{
1244 struct btusb_data *data = container_of(work, struct btusb_data, work);
1245 struct hci_dev *hdev = data->hdev;
Mikel Astizf4001d22012-04-11 08:48:51 +02001246 int new_alts;
Oliver Neukum7bee5492009-08-24 23:44:59 +02001247 int err;
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001248
Marcel Holtmann014f7bc2013-10-10 09:47:55 -07001249 if (data->sco_num > 0) {
Gustavo F. Padovan08b8b6c2010-07-16 17:20:33 -03001250 if (!test_bit(BTUSB_DID_ISO_RESUME, &data->flags)) {
Oliver Neukum8efdd0c2011-02-11 13:00:06 +01001251 err = usb_autopm_get_interface(data->isoc ? data->isoc : data->intf);
Oliver Neukum7bee5492009-08-24 23:44:59 +02001252 if (err < 0) {
1253 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
1254 usb_kill_anchored_urbs(&data->isoc_anchor);
1255 return;
1256 }
1257
Gustavo F. Padovan08b8b6c2010-07-16 17:20:33 -03001258 set_bit(BTUSB_DID_ISO_RESUME, &data->flags);
Oliver Neukum7bee5492009-08-24 23:44:59 +02001259 }
Mikel Astizf4001d22012-04-11 08:48:51 +02001260
1261 if (hdev->voice_setting & 0x0020) {
1262 static const int alts[3] = { 2, 4, 5 };
Marcel Holtmann89e75332014-09-16 04:44:50 +02001263
Marcel Holtmann014f7bc2013-10-10 09:47:55 -07001264 new_alts = alts[data->sco_num - 1];
Mikel Astizf4001d22012-04-11 08:48:51 +02001265 } else {
Marcel Holtmann014f7bc2013-10-10 09:47:55 -07001266 new_alts = data->sco_num;
Mikel Astizf4001d22012-04-11 08:48:51 +02001267 }
1268
1269 if (data->isoc_altsetting != new_alts) {
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +02001270 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
1271 usb_kill_anchored_urbs(&data->isoc_anchor);
1272
Mikel Astizf4001d22012-04-11 08:48:51 +02001273 if (__set_isoc_interface(hdev, new_alts) < 0)
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +02001274 return;
1275 }
1276
1277 if (!test_and_set_bit(BTUSB_ISOC_RUNNING, &data->flags)) {
Marcel Holtmann2eda66f2008-11-30 12:17:10 +01001278 if (btusb_submit_isoc_urb(hdev, GFP_KERNEL) < 0)
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +02001279 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
1280 else
Marcel Holtmann2eda66f2008-11-30 12:17:10 +01001281 btusb_submit_isoc_urb(hdev, GFP_KERNEL);
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +02001282 }
1283 } else {
1284 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
1285 usb_kill_anchored_urbs(&data->isoc_anchor);
1286
1287 __set_isoc_interface(hdev, 0);
Gustavo F. Padovan08b8b6c2010-07-16 17:20:33 -03001288 if (test_and_clear_bit(BTUSB_DID_ISO_RESUME, &data->flags))
Oliver Neukum8efdd0c2011-02-11 13:00:06 +01001289 usb_autopm_put_interface(data->isoc ? data->isoc : data->intf);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02001290 }
1291}
1292
Oliver Neukum7bee5492009-08-24 23:44:59 +02001293static void btusb_waker(struct work_struct *work)
1294{
1295 struct btusb_data *data = container_of(work, struct btusb_data, waker);
1296 int err;
1297
1298 err = usb_autopm_get_interface(data->intf);
1299 if (err < 0)
1300 return;
1301
1302 usb_autopm_put_interface(data->intf);
1303}
1304
Marcel Holtmann9f8f9622013-04-10 08:11:35 -07001305static int btusb_setup_bcm92035(struct hci_dev *hdev)
1306{
1307 struct sk_buff *skb;
1308 u8 val = 0x00;
1309
1310 BT_DBG("%s", hdev->name);
1311
1312 skb = __hci_cmd_sync(hdev, 0xfc3b, 1, &val, HCI_INIT_TIMEOUT);
1313 if (IS_ERR(skb))
1314 BT_ERR("BCM92035 command failed (%ld)", -PTR_ERR(skb));
1315 else
1316 kfree_skb(skb);
1317
1318 return 0;
1319}
1320
Marcel Holtmann81cac642014-01-03 03:02:36 -08001321static int btusb_setup_csr(struct hci_dev *hdev)
1322{
1323 struct hci_rp_read_local_version *rp;
1324 struct sk_buff *skb;
Marcel Holtmann81cac642014-01-03 03:02:36 -08001325
1326 BT_DBG("%s", hdev->name);
1327
Marcel Holtmann7cd84d72015-06-07 10:01:02 +02001328 skb = __hci_cmd_sync(hdev, HCI_OP_READ_LOCAL_VERSION, 0, NULL,
1329 HCI_INIT_TIMEOUT);
1330 if (IS_ERR(skb)) {
1331 int err = PTR_ERR(skb);
1332 BT_ERR("%s: CSR: Local version failed (%d)", hdev->name, err);
1333 return err;
1334 }
1335
1336 if (skb->len != sizeof(struct hci_rp_read_local_version)) {
1337 BT_ERR("%s: CSR: Local version length mismatch", hdev->name);
1338 kfree_skb(skb);
1339 return -EIO;
1340 }
Marcel Holtmann81cac642014-01-03 03:02:36 -08001341
Marcel Holtmann89e75332014-09-16 04:44:50 +02001342 rp = (struct hci_rp_read_local_version *)skb->data;
Marcel Holtmann81cac642014-01-03 03:02:36 -08001343
Marcel Holtmann9641d342015-06-07 10:01:01 +02001344 if (le16_to_cpu(rp->manufacturer) != 10) {
1345 /* Clear the reset quirk since this is not an actual
1346 * early Bluetooth 1.1 device from CSR.
1347 */
1348 clear_bit(HCI_QUIRK_RESET_ON_CLOSE, &hdev->quirks);
Marcel Holtmann81cac642014-01-03 03:02:36 -08001349
Marcel Holtmann9641d342015-06-07 10:01:01 +02001350 /* These fake CSR controllers have all a broken
1351 * stored link key handling and so just disable it.
1352 */
1353 set_bit(HCI_QUIRK_BROKEN_STORED_LINK_KEY, &hdev->quirks);
Marcel Holtmann81cac642014-01-03 03:02:36 -08001354 }
1355
Marcel Holtmann81cac642014-01-03 03:02:36 -08001356 kfree_skb(skb);
1357
Marcel Holtmann9641d342015-06-07 10:01:01 +02001358 return 0;
Marcel Holtmann81cac642014-01-03 03:02:36 -08001359}
1360
Tedd Ho-Jeong Andffd30e2013-04-19 09:57:43 -07001361static const struct firmware *btusb_setup_intel_get_fw(struct hci_dev *hdev,
Marcel Holtmann89e75332014-09-16 04:44:50 +02001362 struct intel_version *ver)
Tedd Ho-Jeong Andffd30e2013-04-19 09:57:43 -07001363{
1364 const struct firmware *fw;
1365 char fwname[64];
1366 int ret;
1367
1368 snprintf(fwname, sizeof(fwname),
1369 "intel/ibt-hw-%x.%x.%x-fw-%x.%x.%x.%x.%x.bseq",
1370 ver->hw_platform, ver->hw_variant, ver->hw_revision,
1371 ver->fw_variant, ver->fw_revision, ver->fw_build_num,
1372 ver->fw_build_ww, ver->fw_build_yy);
1373
1374 ret = request_firmware(&fw, fwname, &hdev->dev);
1375 if (ret < 0) {
1376 if (ret == -EINVAL) {
1377 BT_ERR("%s Intel firmware file request failed (%d)",
1378 hdev->name, ret);
1379 return NULL;
1380 }
1381
1382 BT_ERR("%s failed to open Intel firmware file: %s(%d)",
1383 hdev->name, fwname, ret);
1384
1385 /* If the correct firmware patch file is not found, use the
1386 * default firmware patch file instead
1387 */
1388 snprintf(fwname, sizeof(fwname), "intel/ibt-hw-%x.%x.bseq",
1389 ver->hw_platform, ver->hw_variant);
1390 if (request_firmware(&fw, fwname, &hdev->dev) < 0) {
1391 BT_ERR("%s failed to open default Intel fw file: %s",
1392 hdev->name, fwname);
1393 return NULL;
1394 }
1395 }
1396
1397 BT_INFO("%s: Intel Bluetooth firmware file: %s", hdev->name, fwname);
1398
1399 return fw;
1400}
1401
1402static int btusb_setup_intel_patching(struct hci_dev *hdev,
1403 const struct firmware *fw,
1404 const u8 **fw_ptr, int *disable_patch)
1405{
1406 struct sk_buff *skb;
1407 struct hci_command_hdr *cmd;
1408 const u8 *cmd_param;
1409 struct hci_event_hdr *evt = NULL;
1410 const u8 *evt_param = NULL;
1411 int remain = fw->size - (*fw_ptr - fw->data);
1412
1413 /* The first byte indicates the types of the patch command or event.
1414 * 0x01 means HCI command and 0x02 is HCI event. If the first bytes
1415 * in the current firmware buffer doesn't start with 0x01 or
1416 * the size of remain buffer is smaller than HCI command header,
1417 * the firmware file is corrupted and it should stop the patching
1418 * process.
1419 */
1420 if (remain > HCI_COMMAND_HDR_SIZE && *fw_ptr[0] != 0x01) {
1421 BT_ERR("%s Intel fw corrupted: invalid cmd read", hdev->name);
1422 return -EINVAL;
1423 }
1424 (*fw_ptr)++;
1425 remain--;
1426
1427 cmd = (struct hci_command_hdr *)(*fw_ptr);
1428 *fw_ptr += sizeof(*cmd);
1429 remain -= sizeof(*cmd);
1430
1431 /* Ensure that the remain firmware data is long enough than the length
1432 * of command parameter. If not, the firmware file is corrupted.
1433 */
1434 if (remain < cmd->plen) {
1435 BT_ERR("%s Intel fw corrupted: invalid cmd len", hdev->name);
1436 return -EFAULT;
1437 }
1438
1439 /* If there is a command that loads a patch in the firmware
1440 * file, then enable the patch upon success, otherwise just
1441 * disable the manufacturer mode, for example patch activation
1442 * is not required when the default firmware patch file is used
1443 * because there are no patch data to load.
1444 */
1445 if (*disable_patch && le16_to_cpu(cmd->opcode) == 0xfc8e)
1446 *disable_patch = 0;
1447
1448 cmd_param = *fw_ptr;
1449 *fw_ptr += cmd->plen;
1450 remain -= cmd->plen;
1451
1452 /* This reads the expected events when the above command is sent to the
1453 * device. Some vendor commands expects more than one events, for
1454 * example command status event followed by vendor specific event.
1455 * For this case, it only keeps the last expected event. so the command
1456 * can be sent with __hci_cmd_sync_ev() which returns the sk_buff of
1457 * last expected event.
1458 */
1459 while (remain > HCI_EVENT_HDR_SIZE && *fw_ptr[0] == 0x02) {
1460 (*fw_ptr)++;
1461 remain--;
1462
1463 evt = (struct hci_event_hdr *)(*fw_ptr);
1464 *fw_ptr += sizeof(*evt);
1465 remain -= sizeof(*evt);
1466
1467 if (remain < evt->plen) {
1468 BT_ERR("%s Intel fw corrupted: invalid evt len",
1469 hdev->name);
1470 return -EFAULT;
1471 }
1472
1473 evt_param = *fw_ptr;
1474 *fw_ptr += evt->plen;
1475 remain -= evt->plen;
1476 }
1477
1478 /* Every HCI commands in the firmware file has its correspond event.
1479 * If event is not found or remain is smaller than zero, the firmware
1480 * file is corrupted.
1481 */
1482 if (!evt || !evt_param || remain < 0) {
1483 BT_ERR("%s Intel fw corrupted: invalid evt read", hdev->name);
1484 return -EFAULT;
1485 }
1486
1487 skb = __hci_cmd_sync_ev(hdev, le16_to_cpu(cmd->opcode), cmd->plen,
1488 cmd_param, evt->evt, HCI_INIT_TIMEOUT);
1489 if (IS_ERR(skb)) {
1490 BT_ERR("%s sending Intel patch command (0x%4.4x) failed (%ld)",
1491 hdev->name, cmd->opcode, PTR_ERR(skb));
Adam Leed9c78e92013-07-10 10:02:12 +08001492 return PTR_ERR(skb);
Tedd Ho-Jeong Andffd30e2013-04-19 09:57:43 -07001493 }
1494
1495 /* It ensures that the returned event matches the event data read from
1496 * the firmware file. At fist, it checks the length and then
1497 * the contents of the event.
1498 */
1499 if (skb->len != evt->plen) {
1500 BT_ERR("%s mismatch event length (opcode 0x%4.4x)", hdev->name,
1501 le16_to_cpu(cmd->opcode));
1502 kfree_skb(skb);
1503 return -EFAULT;
1504 }
1505
1506 if (memcmp(skb->data, evt_param, evt->plen)) {
1507 BT_ERR("%s mismatch event parameter (opcode 0x%4.4x)",
1508 hdev->name, le16_to_cpu(cmd->opcode));
1509 kfree_skb(skb);
1510 return -EFAULT;
1511 }
1512 kfree_skb(skb);
1513
1514 return 0;
1515}
1516
1517static int btusb_setup_intel(struct hci_dev *hdev)
1518{
1519 struct sk_buff *skb;
1520 const struct firmware *fw;
1521 const u8 *fw_ptr;
1522 int disable_patch;
1523 struct intel_version *ver;
1524
1525 const u8 mfg_enable[] = { 0x01, 0x00 };
1526 const u8 mfg_disable[] = { 0x00, 0x00 };
1527 const u8 mfg_reset_deactivate[] = { 0x00, 0x01 };
1528 const u8 mfg_reset_activate[] = { 0x00, 0x02 };
1529
1530 BT_DBG("%s", hdev->name);
1531
1532 /* The controller has a bug with the first HCI command sent to it
1533 * returning number of completed commands as zero. This would stall the
1534 * command processing in the Bluetooth core.
1535 *
1536 * As a workaround, send HCI Reset command first which will reset the
1537 * number of completed commands and allow normal command processing
1538 * from now on.
1539 */
1540 skb = __hci_cmd_sync(hdev, HCI_OP_RESET, 0, NULL, HCI_INIT_TIMEOUT);
1541 if (IS_ERR(skb)) {
1542 BT_ERR("%s sending initial HCI reset command failed (%ld)",
1543 hdev->name, PTR_ERR(skb));
Adam Leed9c78e92013-07-10 10:02:12 +08001544 return PTR_ERR(skb);
Tedd Ho-Jeong Andffd30e2013-04-19 09:57:43 -07001545 }
1546 kfree_skb(skb);
1547
1548 /* Read Intel specific controller version first to allow selection of
1549 * which firmware file to load.
1550 *
1551 * The returned information are hardware variant and revision plus
1552 * firmware variant, revision and build number.
1553 */
1554 skb = __hci_cmd_sync(hdev, 0xfc05, 0, NULL, HCI_INIT_TIMEOUT);
1555 if (IS_ERR(skb)) {
1556 BT_ERR("%s reading Intel fw version command failed (%ld)",
1557 hdev->name, PTR_ERR(skb));
Adam Leed9c78e92013-07-10 10:02:12 +08001558 return PTR_ERR(skb);
Tedd Ho-Jeong Andffd30e2013-04-19 09:57:43 -07001559 }
1560
1561 if (skb->len != sizeof(*ver)) {
1562 BT_ERR("%s Intel version event length mismatch", hdev->name);
1563 kfree_skb(skb);
1564 return -EIO;
1565 }
1566
1567 ver = (struct intel_version *)skb->data;
Tedd Ho-Jeong Andffd30e2013-04-19 09:57:43 -07001568
1569 BT_INFO("%s: read Intel version: %02x%02x%02x%02x%02x%02x%02x%02x%02x",
1570 hdev->name, ver->hw_platform, ver->hw_variant,
1571 ver->hw_revision, ver->fw_variant, ver->fw_revision,
1572 ver->fw_build_num, ver->fw_build_ww, ver->fw_build_yy,
1573 ver->fw_patch_num);
1574
1575 /* fw_patch_num indicates the version of patch the device currently
1576 * have. If there is no patch data in the device, it is always 0x00.
1577 * So, if it is other than 0x00, no need to patch the deivce again.
1578 */
1579 if (ver->fw_patch_num) {
1580 BT_INFO("%s: Intel device is already patched. patch num: %02x",
1581 hdev->name, ver->fw_patch_num);
1582 kfree_skb(skb);
Marcel Holtmann4185a0f2015-04-06 00:52:12 -07001583 btintel_check_bdaddr(hdev);
Tedd Ho-Jeong Andffd30e2013-04-19 09:57:43 -07001584 return 0;
1585 }
1586
1587 /* Opens the firmware patch file based on the firmware version read
1588 * from the controller. If it fails to open the matching firmware
1589 * patch file, it tries to open the default firmware patch file.
1590 * If no patch file is found, allow the device to operate without
1591 * a patch.
1592 */
1593 fw = btusb_setup_intel_get_fw(hdev, ver);
1594 if (!fw) {
1595 kfree_skb(skb);
Marcel Holtmann4185a0f2015-04-06 00:52:12 -07001596 btintel_check_bdaddr(hdev);
Tedd Ho-Jeong Andffd30e2013-04-19 09:57:43 -07001597 return 0;
1598 }
1599 fw_ptr = fw->data;
1600
Marcel Holtmannecffc802015-06-07 09:42:19 +02001601 kfree_skb(skb);
1602
Tedd Ho-Jeong Andffd30e2013-04-19 09:57:43 -07001603 /* This Intel specific command enables the manufacturer mode of the
1604 * controller.
1605 *
1606 * Only while this mode is enabled, the driver can download the
1607 * firmware patch data and configuration parameters.
1608 */
1609 skb = __hci_cmd_sync(hdev, 0xfc11, 2, mfg_enable, HCI_INIT_TIMEOUT);
1610 if (IS_ERR(skb)) {
1611 BT_ERR("%s entering Intel manufacturer mode failed (%ld)",
1612 hdev->name, PTR_ERR(skb));
1613 release_firmware(fw);
Adam Leed9c78e92013-07-10 10:02:12 +08001614 return PTR_ERR(skb);
Tedd Ho-Jeong Andffd30e2013-04-19 09:57:43 -07001615 }
1616
Tedd Ho-Jeong Andffd30e2013-04-19 09:57:43 -07001617 kfree_skb(skb);
1618
1619 disable_patch = 1;
1620
1621 /* The firmware data file consists of list of Intel specific HCI
1622 * commands and its expected events. The first byte indicates the
1623 * type of the message, either HCI command or HCI event.
1624 *
1625 * It reads the command and its expected event from the firmware file,
1626 * and send to the controller. Once __hci_cmd_sync_ev() returns,
1627 * the returned event is compared with the event read from the firmware
1628 * file and it will continue until all the messages are downloaded to
1629 * the controller.
1630 *
1631 * Once the firmware patching is completed successfully,
1632 * the manufacturer mode is disabled with reset and activating the
1633 * downloaded patch.
1634 *
1635 * If the firmware patching fails, the manufacturer mode is
1636 * disabled with reset and deactivating the patch.
1637 *
1638 * If the default patch file is used, no reset is done when disabling
1639 * the manufacturer.
1640 */
1641 while (fw->size > fw_ptr - fw->data) {
1642 int ret;
1643
1644 ret = btusb_setup_intel_patching(hdev, fw, &fw_ptr,
1645 &disable_patch);
1646 if (ret < 0)
1647 goto exit_mfg_deactivate;
1648 }
1649
1650 release_firmware(fw);
1651
1652 if (disable_patch)
1653 goto exit_mfg_disable;
1654
1655 /* Patching completed successfully and disable the manufacturer mode
1656 * with reset and activate the downloaded firmware patches.
1657 */
1658 skb = __hci_cmd_sync(hdev, 0xfc11, sizeof(mfg_reset_activate),
1659 mfg_reset_activate, HCI_INIT_TIMEOUT);
1660 if (IS_ERR(skb)) {
1661 BT_ERR("%s exiting Intel manufacturer mode failed (%ld)",
1662 hdev->name, PTR_ERR(skb));
Adam Leed9c78e92013-07-10 10:02:12 +08001663 return PTR_ERR(skb);
Tedd Ho-Jeong Andffd30e2013-04-19 09:57:43 -07001664 }
1665 kfree_skb(skb);
1666
1667 BT_INFO("%s: Intel Bluetooth firmware patch completed and activated",
1668 hdev->name);
1669
Marcel Holtmann4185a0f2015-04-06 00:52:12 -07001670 btintel_check_bdaddr(hdev);
Tedd Ho-Jeong Andffd30e2013-04-19 09:57:43 -07001671 return 0;
1672
1673exit_mfg_disable:
1674 /* Disable the manufacturer mode without reset */
1675 skb = __hci_cmd_sync(hdev, 0xfc11, sizeof(mfg_disable), mfg_disable,
1676 HCI_INIT_TIMEOUT);
1677 if (IS_ERR(skb)) {
1678 BT_ERR("%s exiting Intel manufacturer mode failed (%ld)",
1679 hdev->name, PTR_ERR(skb));
Adam Leed9c78e92013-07-10 10:02:12 +08001680 return PTR_ERR(skb);
Tedd Ho-Jeong Andffd30e2013-04-19 09:57:43 -07001681 }
1682 kfree_skb(skb);
1683
1684 BT_INFO("%s: Intel Bluetooth firmware patch completed", hdev->name);
Marcel Holtmann40cb0982014-07-02 12:06:45 +02001685
Marcel Holtmann4185a0f2015-04-06 00:52:12 -07001686 btintel_check_bdaddr(hdev);
Tedd Ho-Jeong Andffd30e2013-04-19 09:57:43 -07001687 return 0;
1688
1689exit_mfg_deactivate:
1690 release_firmware(fw);
1691
1692 /* Patching failed. Disable the manufacturer mode with reset and
1693 * deactivate the downloaded firmware patches.
1694 */
1695 skb = __hci_cmd_sync(hdev, 0xfc11, sizeof(mfg_reset_deactivate),
1696 mfg_reset_deactivate, HCI_INIT_TIMEOUT);
1697 if (IS_ERR(skb)) {
1698 BT_ERR("%s exiting Intel manufacturer mode failed (%ld)",
1699 hdev->name, PTR_ERR(skb));
Adam Leed9c78e92013-07-10 10:02:12 +08001700 return PTR_ERR(skb);
Tedd Ho-Jeong Andffd30e2013-04-19 09:57:43 -07001701 }
1702 kfree_skb(skb);
1703
1704 BT_INFO("%s: Intel Bluetooth firmware patch completed and deactivated",
1705 hdev->name);
1706
Marcel Holtmann4185a0f2015-04-06 00:52:12 -07001707 btintel_check_bdaddr(hdev);
Tedd Ho-Jeong Andffd30e2013-04-19 09:57:43 -07001708 return 0;
1709}
1710
Marcel Holtmanncda0dd72015-01-26 21:33:48 -08001711static int inject_cmd_complete(struct hci_dev *hdev, __u16 opcode)
1712{
1713 struct sk_buff *skb;
1714 struct hci_event_hdr *hdr;
1715 struct hci_ev_cmd_complete *evt;
1716
1717 skb = bt_skb_alloc(sizeof(*hdr) + sizeof(*evt) + 1, GFP_ATOMIC);
1718 if (!skb)
1719 return -ENOMEM;
1720
1721 hdr = (struct hci_event_hdr *)skb_put(skb, sizeof(*hdr));
1722 hdr->evt = HCI_EV_CMD_COMPLETE;
1723 hdr->plen = sizeof(*evt) + 1;
1724
1725 evt = (struct hci_ev_cmd_complete *)skb_put(skb, sizeof(*evt));
1726 evt->ncmd = 0x01;
1727 evt->opcode = cpu_to_le16(opcode);
1728
1729 *skb_put(skb, 1) = 0x00;
1730
1731 bt_cb(skb)->pkt_type = HCI_EVENT_PKT;
1732
1733 return hci_recv_frame(hdev, skb);
1734}
1735
1736static int btusb_recv_bulk_intel(struct btusb_data *data, void *buffer,
1737 int count)
1738{
1739 /* When the device is in bootloader mode, then it can send
1740 * events via the bulk endpoint. These events are treated the
1741 * same way as the ones received from the interrupt endpoint.
1742 */
1743 if (test_bit(BTUSB_BOOTLOADER, &data->flags))
1744 return btusb_recv_intr(data, buffer, count);
1745
1746 return btusb_recv_bulk(data, buffer, count);
1747}
1748
Marcel Holtmannccd6da22015-04-09 00:35:19 -07001749static void btusb_intel_bootup(struct btusb_data *data, const void *ptr,
1750 unsigned int len)
1751{
1752 const struct intel_bootup *evt = ptr;
1753
1754 if (len != sizeof(*evt))
1755 return;
1756
1757 if (test_and_clear_bit(BTUSB_BOOTING, &data->flags)) {
1758 smp_mb__after_atomic();
1759 wake_up_bit(&data->flags, BTUSB_BOOTING);
1760 }
1761}
1762
1763static void btusb_intel_secure_send_result(struct btusb_data *data,
1764 const void *ptr, unsigned int len)
1765{
1766 const struct intel_secure_send_result *evt = ptr;
1767
1768 if (len != sizeof(*evt))
1769 return;
1770
1771 if (evt->result)
1772 set_bit(BTUSB_FIRMWARE_FAILED, &data->flags);
1773
1774 if (test_and_clear_bit(BTUSB_DOWNLOADING, &data->flags) &&
1775 test_bit(BTUSB_FIRMWARE_LOADED, &data->flags)) {
1776 smp_mb__after_atomic();
1777 wake_up_bit(&data->flags, BTUSB_DOWNLOADING);
1778 }
1779}
1780
Marcel Holtmanncda0dd72015-01-26 21:33:48 -08001781static int btusb_recv_event_intel(struct hci_dev *hdev, struct sk_buff *skb)
1782{
1783 struct btusb_data *data = hci_get_drvdata(hdev);
1784
1785 if (test_bit(BTUSB_BOOTLOADER, &data->flags)) {
1786 struct hci_event_hdr *hdr = (void *)skb->data;
1787
Marcel Holtmannccd6da22015-04-09 00:35:19 -07001788 if (skb->len > HCI_EVENT_HDR_SIZE && hdr->evt == 0xff &&
1789 hdr->plen > 0) {
1790 const void *ptr = skb->data + HCI_EVENT_HDR_SIZE + 1;
1791 unsigned int len = skb->len - HCI_EVENT_HDR_SIZE - 1;
Marcel Holtmanncda0dd72015-01-26 21:33:48 -08001792
Marcel Holtmannccd6da22015-04-09 00:35:19 -07001793 switch (skb->data[2]) {
1794 case 0x02:
1795 /* When switching to the operational firmware
1796 * the device sends a vendor specific event
1797 * indicating that the bootup completed.
1798 */
1799 btusb_intel_bootup(data, ptr, len);
1800 break;
1801 case 0x06:
1802 /* When the firmware loading completes the
1803 * device sends out a vendor specific event
1804 * indicating the result of the firmware
1805 * loading.
1806 */
1807 btusb_intel_secure_send_result(data, ptr, len);
1808 break;
Johan Hedbergfad70972015-01-30 10:58:55 +02001809 }
Marcel Holtmanncda0dd72015-01-26 21:33:48 -08001810 }
1811 }
1812
1813 return hci_recv_frame(hdev, skb);
1814}
1815
1816static int btusb_send_frame_intel(struct hci_dev *hdev, struct sk_buff *skb)
1817{
1818 struct btusb_data *data = hci_get_drvdata(hdev);
1819 struct urb *urb;
1820
1821 BT_DBG("%s", hdev->name);
1822
1823 if (!test_bit(HCI_RUNNING, &hdev->flags))
1824 return -EBUSY;
1825
1826 switch (bt_cb(skb)->pkt_type) {
1827 case HCI_COMMAND_PKT:
1828 if (test_bit(BTUSB_BOOTLOADER, &data->flags)) {
1829 struct hci_command_hdr *cmd = (void *)skb->data;
1830 __u16 opcode = le16_to_cpu(cmd->opcode);
1831
1832 /* When in bootloader mode and the command 0xfc09
1833 * is received, it needs to be send down the
1834 * bulk endpoint. So allocate a bulk URB instead.
1835 */
1836 if (opcode == 0xfc09)
1837 urb = alloc_bulk_urb(hdev, skb);
1838 else
1839 urb = alloc_ctrl_urb(hdev, skb);
1840
1841 /* When the 0xfc01 command is issued to boot into
1842 * the operational firmware, it will actually not
1843 * send a command complete event. To keep the flow
1844 * control working inject that event here.
1845 */
1846 if (opcode == 0xfc01)
1847 inject_cmd_complete(hdev, opcode);
1848 } else {
1849 urb = alloc_ctrl_urb(hdev, skb);
1850 }
1851 if (IS_ERR(urb))
1852 return PTR_ERR(urb);
1853
1854 hdev->stat.cmd_tx++;
1855 return submit_or_queue_tx_urb(hdev, urb);
1856
1857 case HCI_ACLDATA_PKT:
1858 urb = alloc_bulk_urb(hdev, skb);
1859 if (IS_ERR(urb))
1860 return PTR_ERR(urb);
1861
1862 hdev->stat.acl_tx++;
1863 return submit_or_queue_tx_urb(hdev, urb);
1864
1865 case HCI_SCODATA_PKT:
1866 if (hci_conn_num(hdev, SCO_LINK) < 1)
1867 return -ENODEV;
1868
1869 urb = alloc_isoc_urb(hdev, skb);
1870 if (IS_ERR(urb))
1871 return PTR_ERR(urb);
1872
1873 hdev->stat.sco_tx++;
1874 return submit_tx_urb(hdev, urb);
1875 }
1876
1877 return -EILSEQ;
1878}
1879
1880static int btusb_intel_secure_send(struct hci_dev *hdev, u8 fragment_type,
1881 u32 plen, const void *param)
1882{
1883 while (plen > 0) {
1884 struct sk_buff *skb;
1885 u8 cmd_param[253], fragment_len = (plen > 252) ? 252 : plen;
1886
1887 cmd_param[0] = fragment_type;
1888 memcpy(cmd_param + 1, param, fragment_len);
1889
1890 skb = __hci_cmd_sync(hdev, 0xfc09, fragment_len + 1,
1891 cmd_param, HCI_INIT_TIMEOUT);
1892 if (IS_ERR(skb))
1893 return PTR_ERR(skb);
1894
1895 kfree_skb(skb);
1896
1897 plen -= fragment_len;
1898 param += fragment_len;
1899 }
1900
1901 return 0;
1902}
1903
1904static void btusb_intel_version_info(struct hci_dev *hdev,
1905 struct intel_version *ver)
1906{
1907 const char *variant;
1908
1909 switch (ver->fw_variant) {
1910 case 0x06:
1911 variant = "Bootloader";
1912 break;
1913 case 0x23:
1914 variant = "Firmware";
1915 break;
1916 default:
1917 return;
1918 }
1919
1920 BT_INFO("%s: %s revision %u.%u build %u week %u %u", hdev->name,
1921 variant, ver->fw_revision >> 4, ver->fw_revision & 0x0f,
1922 ver->fw_build_num, ver->fw_build_ww, 2000 + ver->fw_build_yy);
1923}
1924
1925static int btusb_setup_intel_new(struct hci_dev *hdev)
1926{
1927 static const u8 reset_param[] = { 0x00, 0x01, 0x00, 0x01,
1928 0x00, 0x08, 0x04, 0x00 };
1929 struct btusb_data *data = hci_get_drvdata(hdev);
1930 struct sk_buff *skb;
1931 struct intel_version *ver;
1932 struct intel_boot_params *params;
1933 const struct firmware *fw;
1934 const u8 *fw_ptr;
1935 char fwname[64];
1936 ktime_t calltime, delta, rettime;
1937 unsigned long long duration;
1938 int err;
1939
1940 BT_DBG("%s", hdev->name);
1941
1942 calltime = ktime_get();
1943
1944 /* Read the Intel version information to determine if the device
1945 * is in bootloader mode or if it already has operational firmware
1946 * loaded.
1947 */
1948 skb = __hci_cmd_sync(hdev, 0xfc05, 0, NULL, HCI_INIT_TIMEOUT);
1949 if (IS_ERR(skb)) {
1950 BT_ERR("%s: Reading Intel version information failed (%ld)",
1951 hdev->name, PTR_ERR(skb));
1952 return PTR_ERR(skb);
1953 }
1954
1955 if (skb->len != sizeof(*ver)) {
1956 BT_ERR("%s: Intel version event size mismatch", hdev->name);
1957 kfree_skb(skb);
1958 return -EILSEQ;
1959 }
1960
1961 ver = (struct intel_version *)skb->data;
Marcel Holtmanncda0dd72015-01-26 21:33:48 -08001962
1963 /* The hardware platform number has a fixed value of 0x37 and
1964 * for now only accept this single value.
1965 */
1966 if (ver->hw_platform != 0x37) {
1967 BT_ERR("%s: Unsupported Intel hardware platform (%u)",
1968 hdev->name, ver->hw_platform);
1969 kfree_skb(skb);
1970 return -EINVAL;
1971 }
1972
1973 /* At the moment only the hardware variant iBT 3.0 (LnP/SfP) is
1974 * supported by this firmware loading method. This check has been
1975 * put in place to ensure correct forward compatibility options
1976 * when newer hardware variants come along.
1977 */
1978 if (ver->hw_variant != 0x0b) {
1979 BT_ERR("%s: Unsupported Intel hardware variant (%u)",
1980 hdev->name, ver->hw_variant);
1981 kfree_skb(skb);
1982 return -EINVAL;
1983 }
1984
1985 btusb_intel_version_info(hdev, ver);
1986
1987 /* The firmware variant determines if the device is in bootloader
1988 * mode or is running operational firmware. The value 0x06 identifies
1989 * the bootloader and the value 0x23 identifies the operational
1990 * firmware.
1991 *
1992 * When the operational firmware is already present, then only
1993 * the check for valid Bluetooth device address is needed. This
1994 * determines if the device will be added as configured or
1995 * unconfigured controller.
1996 *
1997 * It is not possible to use the Secure Boot Parameters in this
1998 * case since that command is only available in bootloader mode.
1999 */
2000 if (ver->fw_variant == 0x23) {
2001 kfree_skb(skb);
2002 clear_bit(BTUSB_BOOTLOADER, &data->flags);
Marcel Holtmann4185a0f2015-04-06 00:52:12 -07002003 btintel_check_bdaddr(hdev);
Marcel Holtmanncda0dd72015-01-26 21:33:48 -08002004 return 0;
2005 }
2006
2007 /* If the device is not in bootloader mode, then the only possible
2008 * choice is to return an error and abort the device initialization.
2009 */
2010 if (ver->fw_variant != 0x06) {
2011 BT_ERR("%s: Unsupported Intel firmware variant (%u)",
2012 hdev->name, ver->fw_variant);
2013 kfree_skb(skb);
2014 return -ENODEV;
2015 }
2016
2017 kfree_skb(skb);
2018
2019 /* Read the secure boot parameters to identify the operating
2020 * details of the bootloader.
2021 */
2022 skb = __hci_cmd_sync(hdev, 0xfc0d, 0, NULL, HCI_INIT_TIMEOUT);
2023 if (IS_ERR(skb)) {
2024 BT_ERR("%s: Reading Intel boot parameters failed (%ld)",
2025 hdev->name, PTR_ERR(skb));
2026 return PTR_ERR(skb);
2027 }
2028
2029 if (skb->len != sizeof(*params)) {
2030 BT_ERR("%s: Intel boot parameters size mismatch", hdev->name);
2031 kfree_skb(skb);
2032 return -EILSEQ;
2033 }
2034
2035 params = (struct intel_boot_params *)skb->data;
Marcel Holtmanncda0dd72015-01-26 21:33:48 -08002036
2037 BT_INFO("%s: Device revision is %u", hdev->name,
2038 le16_to_cpu(params->dev_revid));
2039
2040 BT_INFO("%s: Secure boot is %s", hdev->name,
2041 params->secure_boot ? "enabled" : "disabled");
2042
2043 BT_INFO("%s: Minimum firmware build %u week %u %u", hdev->name,
2044 params->min_fw_build_nn, params->min_fw_build_cw,
2045 2000 + params->min_fw_build_yy);
2046
2047 /* It is required that every single firmware fragment is acknowledged
2048 * with a command complete event. If the boot parameters indicate
2049 * that this bootloader does not send them, then abort the setup.
2050 */
2051 if (params->limited_cce != 0x00) {
2052 BT_ERR("%s: Unsupported Intel firmware loading method (%u)",
2053 hdev->name, params->limited_cce);
2054 kfree_skb(skb);
2055 return -EINVAL;
2056 }
2057
2058 /* If the OTP has no valid Bluetooth device address, then there will
2059 * also be no valid address for the operational firmware.
2060 */
2061 if (!bacmp(&params->otp_bdaddr, BDADDR_ANY)) {
2062 BT_INFO("%s: No device address configured", hdev->name);
2063 set_bit(HCI_QUIRK_INVALID_BDADDR, &hdev->quirks);
2064 }
2065
2066 /* With this Intel bootloader only the hardware variant and device
2067 * revision information are used to select the right firmware.
2068 *
2069 * Currently this bootloader support is limited to hardware variant
2070 * iBT 3.0 (LnP/SfP) which is identified by the value 11 (0x0b).
2071 */
2072 snprintf(fwname, sizeof(fwname), "intel/ibt-11-%u.sfi",
2073 le16_to_cpu(params->dev_revid));
2074
2075 err = request_firmware(&fw, fwname, &hdev->dev);
2076 if (err < 0) {
2077 BT_ERR("%s: Failed to load Intel firmware file (%d)",
2078 hdev->name, err);
2079 kfree_skb(skb);
2080 return err;
2081 }
2082
2083 BT_INFO("%s: Found device firmware: %s", hdev->name, fwname);
2084
2085 kfree_skb(skb);
2086
2087 if (fw->size < 644) {
2088 BT_ERR("%s: Invalid size of firmware file (%zu)",
2089 hdev->name, fw->size);
2090 err = -EBADF;
2091 goto done;
2092 }
2093
2094 set_bit(BTUSB_DOWNLOADING, &data->flags);
2095
2096 /* Start the firmware download transaction with the Init fragment
2097 * represented by the 128 bytes of CSS header.
2098 */
2099 err = btusb_intel_secure_send(hdev, 0x00, 128, fw->data);
2100 if (err < 0) {
2101 BT_ERR("%s: Failed to send firmware header (%d)",
2102 hdev->name, err);
2103 goto done;
2104 }
2105
2106 /* Send the 256 bytes of public key information from the firmware
2107 * as the PKey fragment.
2108 */
2109 err = btusb_intel_secure_send(hdev, 0x03, 256, fw->data + 128);
2110 if (err < 0) {
2111 BT_ERR("%s: Failed to send firmware public key (%d)",
2112 hdev->name, err);
2113 goto done;
2114 }
2115
2116 /* Send the 256 bytes of signature information from the firmware
2117 * as the Sign fragment.
2118 */
2119 err = btusb_intel_secure_send(hdev, 0x02, 256, fw->data + 388);
2120 if (err < 0) {
2121 BT_ERR("%s: Failed to send firmware signature (%d)",
2122 hdev->name, err);
2123 goto done;
2124 }
2125
2126 fw_ptr = fw->data + 644;
2127
2128 while (fw_ptr - fw->data < fw->size) {
2129 struct hci_command_hdr *cmd = (void *)fw_ptr;
2130 u8 cmd_len;
2131
2132 cmd_len = sizeof(*cmd) + cmd->plen;
2133
2134 /* Send each command from the firmware data buffer as
2135 * a single Data fragment.
2136 */
2137 err = btusb_intel_secure_send(hdev, 0x01, cmd_len, fw_ptr);
2138 if (err < 0) {
2139 BT_ERR("%s: Failed to send firmware data (%d)",
2140 hdev->name, err);
2141 goto done;
2142 }
2143
2144 fw_ptr += cmd_len;
2145 }
2146
Marcel Holtmannce6bb922015-01-28 01:58:40 -08002147 set_bit(BTUSB_FIRMWARE_LOADED, &data->flags);
2148
Johan Hedberga087a982015-01-30 10:58:54 +02002149 BT_INFO("%s: Waiting for firmware download to complete", hdev->name);
2150
Marcel Holtmanncda0dd72015-01-26 21:33:48 -08002151 /* Before switching the device into operational mode and with that
2152 * booting the loaded firmware, wait for the bootloader notification
2153 * that all fragments have been successfully received.
2154 *
Johan Hedberga087a982015-01-30 10:58:54 +02002155 * When the event processing receives the notification, then the
2156 * BTUSB_DOWNLOADING flag will be cleared.
2157 *
2158 * The firmware loading should not take longer than 5 seconds
2159 * and thus just timeout if that happens and fail the setup
2160 * of this device.
Marcel Holtmanncda0dd72015-01-26 21:33:48 -08002161 */
Johan Hedberg129a7692015-02-14 09:33:35 +02002162 err = wait_on_bit_timeout(&data->flags, BTUSB_DOWNLOADING,
2163 TASK_INTERRUPTIBLE,
2164 msecs_to_jiffies(5000));
Johan Hedberga087a982015-01-30 10:58:54 +02002165 if (err == 1) {
2166 BT_ERR("%s: Firmware loading interrupted", hdev->name);
2167 err = -EINTR;
2168 goto done;
2169 }
Marcel Holtmanncda0dd72015-01-26 21:33:48 -08002170
Johan Hedberga087a982015-01-30 10:58:54 +02002171 if (err) {
2172 BT_ERR("%s: Firmware loading timeout", hdev->name);
2173 err = -ETIMEDOUT;
2174 goto done;
Marcel Holtmanncda0dd72015-01-26 21:33:48 -08002175 }
2176
2177 if (test_bit(BTUSB_FIRMWARE_FAILED, &data->flags)) {
2178 BT_ERR("%s: Firmware loading failed", hdev->name);
2179 err = -ENOEXEC;
2180 goto done;
2181 }
2182
2183 rettime = ktime_get();
2184 delta = ktime_sub(rettime, calltime);
2185 duration = (unsigned long long) ktime_to_ns(delta) >> 10;
2186
2187 BT_INFO("%s: Firmware loaded in %llu usecs", hdev->name, duration);
2188
2189done:
2190 release_firmware(fw);
2191
2192 if (err < 0)
2193 return err;
2194
2195 calltime = ktime_get();
2196
2197 set_bit(BTUSB_BOOTING, &data->flags);
2198
2199 skb = __hci_cmd_sync(hdev, 0xfc01, sizeof(reset_param), reset_param,
2200 HCI_INIT_TIMEOUT);
2201 if (IS_ERR(skb))
2202 return PTR_ERR(skb);
2203
2204 kfree_skb(skb);
2205
2206 /* The bootloader will not indicate when the device is ready. This
2207 * is done by the operational firmware sending bootup notification.
Johan Hedbergfad70972015-01-30 10:58:55 +02002208 *
2209 * Booting into operational firmware should not take longer than
2210 * 1 second. However if that happens, then just fail the setup
2211 * since something went wrong.
Marcel Holtmanncda0dd72015-01-26 21:33:48 -08002212 */
Johan Hedbergfad70972015-01-30 10:58:55 +02002213 BT_INFO("%s: Waiting for device to boot", hdev->name);
Marcel Holtmanncda0dd72015-01-26 21:33:48 -08002214
Johan Hedberg129a7692015-02-14 09:33:35 +02002215 err = wait_on_bit_timeout(&data->flags, BTUSB_BOOTING,
2216 TASK_INTERRUPTIBLE,
2217 msecs_to_jiffies(1000));
Marcel Holtmanncda0dd72015-01-26 21:33:48 -08002218
Johan Hedbergfad70972015-01-30 10:58:55 +02002219 if (err == 1) {
2220 BT_ERR("%s: Device boot interrupted", hdev->name);
2221 return -EINTR;
2222 }
Marcel Holtmanncda0dd72015-01-26 21:33:48 -08002223
Johan Hedbergfad70972015-01-30 10:58:55 +02002224 if (err) {
2225 BT_ERR("%s: Device boot timeout", hdev->name);
2226 return -ETIMEDOUT;
Marcel Holtmanncda0dd72015-01-26 21:33:48 -08002227 }
2228
2229 rettime = ktime_get();
2230 delta = ktime_sub(rettime, calltime);
2231 duration = (unsigned long long) ktime_to_ns(delta) >> 10;
2232
2233 BT_INFO("%s: Device booted in %llu usecs", hdev->name, duration);
2234
2235 clear_bit(BTUSB_BOOTLOADER, &data->flags);
2236
2237 return 0;
2238}
2239
Marcel Holtmann385a7682015-01-28 11:09:56 -08002240static void btusb_hw_error_intel(struct hci_dev *hdev, u8 code)
2241{
2242 struct sk_buff *skb;
2243 u8 type = 0x00;
2244
2245 BT_ERR("%s: Hardware error 0x%2.2x", hdev->name, code);
2246
2247 skb = __hci_cmd_sync(hdev, HCI_OP_RESET, 0, NULL, HCI_INIT_TIMEOUT);
2248 if (IS_ERR(skb)) {
2249 BT_ERR("%s: Reset after hardware error failed (%ld)",
2250 hdev->name, PTR_ERR(skb));
2251 return;
2252 }
2253 kfree_skb(skb);
2254
2255 skb = __hci_cmd_sync(hdev, 0xfc22, 1, &type, HCI_INIT_TIMEOUT);
2256 if (IS_ERR(skb)) {
2257 BT_ERR("%s: Retrieving Intel exception info failed (%ld)",
2258 hdev->name, PTR_ERR(skb));
2259 return;
2260 }
2261
2262 if (skb->len != 13) {
2263 BT_ERR("%s: Exception info size mismatch", hdev->name);
2264 kfree_skb(skb);
2265 return;
2266 }
2267
Marcel Holtmann385a7682015-01-28 11:09:56 -08002268 BT_ERR("%s: Exception info %s", hdev->name, (char *)(skb->data + 1));
2269
2270 kfree_skb(skb);
2271}
2272
Tedd Ho-Jeong Anbfbd45e2015-02-13 09:20:52 -08002273static int btusb_shutdown_intel(struct hci_dev *hdev)
2274{
2275 struct sk_buff *skb;
2276 long ret;
2277
2278 /* Some platforms have an issue with BT LED when the interface is
2279 * down or BT radio is turned off, which takes 5 seconds to BT LED
2280 * goes off. This command turns off the BT LED immediately.
2281 */
2282 skb = __hci_cmd_sync(hdev, 0xfc3f, 0, NULL, HCI_INIT_TIMEOUT);
2283 if (IS_ERR(skb)) {
2284 ret = PTR_ERR(skb);
2285 BT_ERR("%s: turning off Intel device LED failed (%ld)",
2286 hdev->name, ret);
2287 return ret;
2288 }
2289 kfree_skb(skb);
2290
2291 return 0;
2292}
2293
Amitkumar Karwarae8df492014-07-18 14:47:06 -07002294static int btusb_set_bdaddr_marvell(struct hci_dev *hdev,
2295 const bdaddr_t *bdaddr)
2296{
2297 struct sk_buff *skb;
2298 u8 buf[8];
2299 long ret;
2300
2301 buf[0] = 0xfe;
2302 buf[1] = sizeof(bdaddr_t);
2303 memcpy(buf + 2, bdaddr, sizeof(bdaddr_t));
2304
2305 skb = __hci_cmd_sync(hdev, 0xfc22, sizeof(buf), buf, HCI_INIT_TIMEOUT);
2306 if (IS_ERR(skb)) {
2307 ret = PTR_ERR(skb);
2308 BT_ERR("%s: changing Marvell device address failed (%ld)",
2309 hdev->name, ret);
2310 return ret;
2311 }
2312 kfree_skb(skb);
2313
2314 return 0;
2315}
2316
Toshi Kikuchi58592232014-12-12 10:58:05 -08002317static int btusb_set_bdaddr_ath3012(struct hci_dev *hdev,
2318 const bdaddr_t *bdaddr)
2319{
2320 struct sk_buff *skb;
2321 u8 buf[10];
2322 long ret;
2323
2324 buf[0] = 0x01;
2325 buf[1] = 0x01;
2326 buf[2] = 0x00;
2327 buf[3] = sizeof(bdaddr_t);
2328 memcpy(buf + 4, bdaddr, sizeof(bdaddr_t));
2329
2330 skb = __hci_cmd_sync(hdev, 0xfc0b, sizeof(buf), buf, HCI_INIT_TIMEOUT);
2331 if (IS_ERR(skb)) {
2332 ret = PTR_ERR(skb);
2333 BT_ERR("%s: Change address command failed (%ld)",
2334 hdev->name, ret);
2335 return ret;
2336 }
2337 kfree_skb(skb);
2338
2339 return 0;
2340}
2341
Kim, Ben Young Tae3267c882015-02-15 23:07:33 +00002342#define QCA_DFU_PACKET_LEN 4096
2343
2344#define QCA_GET_TARGET_VERSION 0x09
2345#define QCA_CHECK_STATUS 0x05
2346#define QCA_DFU_DOWNLOAD 0x01
2347
2348#define QCA_SYSCFG_UPDATED 0x40
2349#define QCA_PATCH_UPDATED 0x80
2350#define QCA_DFU_TIMEOUT 3000
2351
2352struct qca_version {
2353 __le32 rom_version;
2354 __le32 patch_version;
2355 __le32 ram_version;
2356 __le32 ref_clock;
2357 __u8 reserved[4];
2358} __packed;
2359
2360struct qca_rampatch_version {
2361 __le16 rom_version;
2362 __le16 patch_version;
2363} __packed;
2364
2365struct qca_device_info {
Kim, Ben Young Taebf906b32015-03-10 23:34:58 +00002366 u32 rom_version;
2367 u8 rampatch_hdr; /* length of header in rampatch */
2368 u8 nvm_hdr; /* length of header in NVM */
2369 u8 ver_offset; /* offset of version structure in rampatch */
Kim, Ben Young Tae3267c882015-02-15 23:07:33 +00002370};
2371
2372static const struct qca_device_info qca_devices_table[] = {
2373 { 0x00000100, 20, 4, 10 }, /* Rome 1.0 */
2374 { 0x00000101, 20, 4, 10 }, /* Rome 1.1 */
Chan-yeol Park7f6e6362015-05-21 11:24:27 +09002375 { 0x00000200, 28, 4, 18 }, /* Rome 2.0 */
Kim, Ben Young Tae3267c882015-02-15 23:07:33 +00002376 { 0x00000201, 28, 4, 18 }, /* Rome 2.1 */
2377 { 0x00000300, 28, 4, 18 }, /* Rome 3.0 */
2378 { 0x00000302, 28, 4, 18 }, /* Rome 3.2 */
2379};
2380
2381static int btusb_qca_send_vendor_req(struct hci_dev *hdev, u8 request,
2382 void *data, u16 size)
2383{
2384 struct btusb_data *btdata = hci_get_drvdata(hdev);
2385 struct usb_device *udev = btdata->udev;
2386 int pipe, err;
2387 u8 *buf;
2388
2389 buf = kmalloc(size, GFP_KERNEL);
2390 if (!buf)
2391 return -ENOMEM;
2392
2393 /* Found some of USB hosts have IOT issues with ours so that we should
2394 * not wait until HCI layer is ready.
2395 */
2396 pipe = usb_rcvctrlpipe(udev, 0);
2397 err = usb_control_msg(udev, pipe, request, USB_TYPE_VENDOR | USB_DIR_IN,
2398 0, 0, buf, size, USB_CTRL_SET_TIMEOUT);
2399 if (err < 0) {
2400 BT_ERR("%s: Failed to access otp area (%d)", hdev->name, err);
2401 goto done;
2402 }
2403
2404 memcpy(data, buf, size);
2405
2406done:
2407 kfree(buf);
2408
2409 return err;
2410}
2411
2412static int btusb_setup_qca_download_fw(struct hci_dev *hdev,
2413 const struct firmware *firmware,
2414 size_t hdr_size)
2415{
2416 struct btusb_data *btdata = hci_get_drvdata(hdev);
2417 struct usb_device *udev = btdata->udev;
2418 size_t count, size, sent = 0;
2419 int pipe, len, err;
2420 u8 *buf;
2421
2422 buf = kmalloc(QCA_DFU_PACKET_LEN, GFP_KERNEL);
2423 if (!buf)
2424 return -ENOMEM;
2425
2426 count = firmware->size;
2427
2428 size = min_t(size_t, count, hdr_size);
2429 memcpy(buf, firmware->data, size);
2430
2431 /* USB patches should go down to controller through USB path
2432 * because binary format fits to go down through USB channel.
2433 * USB control path is for patching headers and USB bulk is for
2434 * patch body.
2435 */
2436 pipe = usb_sndctrlpipe(udev, 0);
2437 err = usb_control_msg(udev, pipe, QCA_DFU_DOWNLOAD, USB_TYPE_VENDOR,
2438 0, 0, buf, size, USB_CTRL_SET_TIMEOUT);
2439 if (err < 0) {
2440 BT_ERR("%s: Failed to send headers (%d)", hdev->name, err);
2441 goto done;
2442 }
2443
2444 sent += size;
2445 count -= size;
2446
2447 while (count) {
2448 size = min_t(size_t, count, QCA_DFU_PACKET_LEN);
2449
2450 memcpy(buf, firmware->data + sent, size);
2451
2452 pipe = usb_sndbulkpipe(udev, 0x02);
2453 err = usb_bulk_msg(udev, pipe, buf, size, &len,
2454 QCA_DFU_TIMEOUT);
2455 if (err < 0) {
2456 BT_ERR("%s: Failed to send body at %zd of %zd (%d)",
2457 hdev->name, sent, firmware->size, err);
2458 break;
2459 }
2460
2461 if (size != len) {
2462 BT_ERR("%s: Failed to get bulk buffer", hdev->name);
2463 err = -EILSEQ;
2464 break;
2465 }
2466
2467 sent += size;
2468 count -= size;
2469 }
2470
2471done:
2472 kfree(buf);
2473 return err;
2474}
2475
2476static int btusb_setup_qca_load_rampatch(struct hci_dev *hdev,
2477 struct qca_version *ver,
2478 const struct qca_device_info *info)
2479{
2480 struct qca_rampatch_version *rver;
2481 const struct firmware *fw;
Kim, Ben Young Taebf906b32015-03-10 23:34:58 +00002482 u32 ver_rom, ver_patch;
2483 u16 rver_rom, rver_patch;
Kim, Ben Young Tae3267c882015-02-15 23:07:33 +00002484 char fwname[64];
2485 int err;
2486
Kim, Ben Young Taebf906b32015-03-10 23:34:58 +00002487 ver_rom = le32_to_cpu(ver->rom_version);
2488 ver_patch = le32_to_cpu(ver->patch_version);
2489
2490 snprintf(fwname, sizeof(fwname), "qca/rampatch_usb_%08x.bin", ver_rom);
Kim, Ben Young Tae3267c882015-02-15 23:07:33 +00002491
2492 err = request_firmware(&fw, fwname, &hdev->dev);
2493 if (err) {
2494 BT_ERR("%s: failed to request rampatch file: %s (%d)",
2495 hdev->name, fwname, err);
2496 return err;
2497 }
2498
2499 BT_INFO("%s: using rampatch file: %s", hdev->name, fwname);
Kim, Ben Young Tae3267c882015-02-15 23:07:33 +00002500
Kim, Ben Young Taebf906b32015-03-10 23:34:58 +00002501 rver = (struct qca_rampatch_version *)(fw->data + info->ver_offset);
2502 rver_rom = le16_to_cpu(rver->rom_version);
2503 rver_patch = le16_to_cpu(rver->patch_version);
2504
2505 BT_INFO("%s: QCA: patch rome 0x%x build 0x%x, firmware rome 0x%x "
2506 "build 0x%x", hdev->name, rver_rom, rver_patch, ver_rom,
2507 ver_patch);
2508
2509 if (rver_rom != ver_rom || rver_patch <= ver_patch) {
Kim, Ben Young Tae3267c882015-02-15 23:07:33 +00002510 BT_ERR("%s: rampatch file version did not match with firmware",
2511 hdev->name);
2512 err = -EINVAL;
2513 goto done;
2514 }
2515
2516 err = btusb_setup_qca_download_fw(hdev, fw, info->rampatch_hdr);
2517
2518done:
2519 release_firmware(fw);
2520
2521 return err;
2522}
2523
2524static int btusb_setup_qca_load_nvm(struct hci_dev *hdev,
2525 struct qca_version *ver,
2526 const struct qca_device_info *info)
2527{
2528 const struct firmware *fw;
2529 char fwname[64];
2530 int err;
2531
2532 snprintf(fwname, sizeof(fwname), "qca/nvm_usb_%08x.bin",
2533 le32_to_cpu(ver->rom_version));
2534
2535 err = request_firmware(&fw, fwname, &hdev->dev);
2536 if (err) {
2537 BT_ERR("%s: failed to request NVM file: %s (%d)",
2538 hdev->name, fwname, err);
2539 return err;
2540 }
2541
2542 BT_INFO("%s: using NVM file: %s", hdev->name, fwname);
2543
2544 err = btusb_setup_qca_download_fw(hdev, fw, info->nvm_hdr);
2545
2546 release_firmware(fw);
2547
2548 return err;
2549}
2550
2551static int btusb_setup_qca(struct hci_dev *hdev)
2552{
2553 const struct qca_device_info *info = NULL;
2554 struct qca_version ver;
Kim, Ben Young Taebf906b32015-03-10 23:34:58 +00002555 u32 ver_rom;
Kim, Ben Young Tae3267c882015-02-15 23:07:33 +00002556 u8 status;
2557 int i, err;
2558
2559 err = btusb_qca_send_vendor_req(hdev, QCA_GET_TARGET_VERSION, &ver,
Marcel Holtmanneb500422015-04-16 23:15:50 +02002560 sizeof(ver));
Kim, Ben Young Tae3267c882015-02-15 23:07:33 +00002561 if (err < 0)
2562 return err;
2563
Kim, Ben Young Taebf906b32015-03-10 23:34:58 +00002564 ver_rom = le32_to_cpu(ver.rom_version);
Kim, Ben Young Tae3267c882015-02-15 23:07:33 +00002565 for (i = 0; i < ARRAY_SIZE(qca_devices_table); i++) {
Kim, Ben Young Taebf906b32015-03-10 23:34:58 +00002566 if (ver_rom == qca_devices_table[i].rom_version)
Kim, Ben Young Tae3267c882015-02-15 23:07:33 +00002567 info = &qca_devices_table[i];
2568 }
2569 if (!info) {
2570 BT_ERR("%s: don't support firmware rome 0x%x", hdev->name,
Kim, Ben Young Taebf906b32015-03-10 23:34:58 +00002571 ver_rom);
Kim, Ben Young Tae3267c882015-02-15 23:07:33 +00002572 return -ENODEV;
2573 }
2574
2575 err = btusb_qca_send_vendor_req(hdev, QCA_CHECK_STATUS, &status,
2576 sizeof(status));
2577 if (err < 0)
2578 return err;
2579
2580 if (!(status & QCA_PATCH_UPDATED)) {
2581 err = btusb_setup_qca_load_rampatch(hdev, &ver, info);
2582 if (err < 0)
2583 return err;
2584 }
2585
2586 if (!(status & QCA_SYSCFG_UPDATED)) {
2587 err = btusb_setup_qca_load_nvm(hdev, &ver, info);
2588 if (err < 0)
2589 return err;
2590 }
2591
2592 return 0;
2593}
2594
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002595static int btusb_probe(struct usb_interface *intf,
Marcel Holtmann89e75332014-09-16 04:44:50 +02002596 const struct usb_device_id *id)
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002597{
2598 struct usb_endpoint_descriptor *ep_desc;
2599 struct btusb_data *data;
2600 struct hci_dev *hdev;
2601 int i, err;
2602
2603 BT_DBG("intf %p id %p", intf, id);
2604
Marcel Holtmanncfeb4142008-08-07 22:26:56 +02002605 /* interface numbers are hardcoded in the spec */
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002606 if (intf->cur_altsetting->desc.bInterfaceNumber != 0)
2607 return -ENODEV;
2608
2609 if (!id->driver_info) {
2610 const struct usb_device_id *match;
Marcel Holtmann89e75332014-09-16 04:44:50 +02002611
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002612 match = usb_match_id(intf, blacklist_table);
2613 if (match)
2614 id = match;
2615 }
2616
Marcel Holtmanncfeb4142008-08-07 22:26:56 +02002617 if (id->driver_info == BTUSB_IGNORE)
2618 return -ENODEV;
2619
Steven.Li2d25f8b2011-07-01 14:02:36 +08002620 if (id->driver_info & BTUSB_ATH3012) {
2621 struct usb_device *udev = interface_to_usbdev(intf);
2622
2623 /* Old firmware would otherwise let ath3k driver load
2624 * patch and sysconfig files */
2625 if (le16_to_cpu(udev->descriptor.bcdDevice) <= 0x0001)
2626 return -ENODEV;
2627 }
2628
Sachin Kamat98921db2012-07-27 12:38:39 +05302629 data = devm_kzalloc(&intf->dev, sizeof(*data), GFP_KERNEL);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002630 if (!data)
2631 return -ENOMEM;
2632
2633 for (i = 0; i < intf->cur_altsetting->desc.bNumEndpoints; i++) {
2634 ep_desc = &intf->cur_altsetting->endpoint[i].desc;
2635
2636 if (!data->intr_ep && usb_endpoint_is_int_in(ep_desc)) {
2637 data->intr_ep = ep_desc;
2638 continue;
2639 }
2640
2641 if (!data->bulk_tx_ep && usb_endpoint_is_bulk_out(ep_desc)) {
2642 data->bulk_tx_ep = ep_desc;
2643 continue;
2644 }
2645
2646 if (!data->bulk_rx_ep && usb_endpoint_is_bulk_in(ep_desc)) {
2647 data->bulk_rx_ep = ep_desc;
2648 continue;
2649 }
2650 }
2651
Sachin Kamat98921db2012-07-27 12:38:39 +05302652 if (!data->intr_ep || !data->bulk_tx_ep || !data->bulk_rx_ep)
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002653 return -ENODEV;
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002654
Marcel Holtmann893ba542015-01-28 20:27:34 -08002655 if (id->driver_info & BTUSB_AMP) {
2656 data->cmdreq_type = USB_TYPE_CLASS | 0x01;
2657 data->cmdreq = 0x2b;
2658 } else {
2659 data->cmdreq_type = USB_TYPE_CLASS;
2660 data->cmdreq = 0x00;
2661 }
Marcel Holtmann7a9d4022008-11-30 12:17:26 +01002662
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002663 data->udev = interface_to_usbdev(intf);
Marcel Holtmann5fbcd262008-09-23 00:16:36 +02002664 data->intf = intf;
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002665
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002666 INIT_WORK(&data->work, btusb_work);
Oliver Neukum7bee5492009-08-24 23:44:59 +02002667 INIT_WORK(&data->waker, btusb_waker);
Marcel Holtmann803b5832014-09-16 08:00:29 +02002668 init_usb_anchor(&data->deferred);
2669 init_usb_anchor(&data->tx_anchor);
Oliver Neukum7bee5492009-08-24 23:44:59 +02002670 spin_lock_init(&data->txlock);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002671
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002672 init_usb_anchor(&data->intr_anchor);
2673 init_usb_anchor(&data->bulk_anchor);
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +02002674 init_usb_anchor(&data->isoc_anchor);
Marcel Holtmann803b5832014-09-16 08:00:29 +02002675 spin_lock_init(&data->rxlock);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002676
Marcel Holtmanncda0dd72015-01-26 21:33:48 -08002677 if (id->driver_info & BTUSB_INTEL_NEW) {
2678 data->recv_event = btusb_recv_event_intel;
2679 data->recv_bulk = btusb_recv_bulk_intel;
2680 set_bit(BTUSB_BOOTLOADER, &data->flags);
2681 } else {
2682 data->recv_event = hci_recv_frame;
2683 data->recv_bulk = btusb_recv_bulk;
2684 }
Marcel Holtmann2cbd3f52014-11-03 05:16:07 +01002685
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002686 hdev = hci_alloc_dev();
Sachin Kamat98921db2012-07-27 12:38:39 +05302687 if (!hdev)
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002688 return -ENOMEM;
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002689
Marcel Holtmannc13854c2010-02-08 15:27:07 +01002690 hdev->bus = HCI_USB;
David Herrmann155961e2012-02-09 21:58:32 +01002691 hci_set_drvdata(hdev, data);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002692
Marcel Holtmann893ba542015-01-28 20:27:34 -08002693 if (id->driver_info & BTUSB_AMP)
2694 hdev->dev_type = HCI_AMP;
2695 else
2696 hdev->dev_type = HCI_BREDR;
2697
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002698 data->hdev = hdev;
2699
2700 SET_HCIDEV_DEV(hdev, &intf->dev);
2701
Marcel Holtmann9f8f9622013-04-10 08:11:35 -07002702 hdev->open = btusb_open;
2703 hdev->close = btusb_close;
2704 hdev->flush = btusb_flush;
2705 hdev->send = btusb_send_frame;
2706 hdev->notify = btusb_notify;
2707
2708 if (id->driver_info & BTUSB_BCM92035)
2709 hdev->setup = btusb_setup_bcm92035;
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002710
Marcel Holtmannc2bfb102015-04-05 22:52:14 -07002711#ifdef CONFIG_BT_HCIBTUSB_BCM
Marcel Holtmannabbaf502014-07-02 00:53:48 +02002712 if (id->driver_info & BTUSB_BCM_PATCHRAM) {
Marcel Holtmannc2bfb102015-04-05 22:52:14 -07002713 hdev->setup = btbcm_setup_patchram;
Marcel Holtmann1df1f592015-04-05 22:52:11 -07002714 hdev->set_bdaddr = btbcm_set_bdaddr;
Marcel Holtmannabbaf502014-07-02 00:53:48 +02002715 }
Petri Gynther10d4c672014-05-08 15:50:01 -07002716
Marcel Holtmann941521e2015-04-05 22:52:15 -07002717 if (id->driver_info & BTUSB_BCM_APPLE)
Marcel Holtmannc2bfb102015-04-05 22:52:14 -07002718 hdev->setup = btbcm_setup_apple;
Marcel Holtmannc2bfb102015-04-05 22:52:14 -07002719#endif
Marcel Holtmann17b27722015-03-22 15:52:38 +01002720
Marcel Holtmanncb8d6592014-07-02 11:25:25 +02002721 if (id->driver_info & BTUSB_INTEL) {
Tedd Ho-Jeong Andffd30e2013-04-19 09:57:43 -07002722 hdev->setup = btusb_setup_intel;
Tedd Ho-Jeong Anbfbd45e2015-02-13 09:20:52 -08002723 hdev->shutdown = btusb_shutdown_intel;
Marcel Holtmann4185a0f2015-04-06 00:52:12 -07002724 hdev->set_bdaddr = btintel_set_bdaddr;
Jakub Pawlowskic33fb9b2015-01-30 18:55:58 -08002725 set_bit(HCI_QUIRK_STRICT_DUPLICATE_FILTER, &hdev->quirks);
Jakub Pawlowskic1154842015-03-17 09:04:16 -07002726 set_bit(HCI_QUIRK_SIMULTANEOUS_DISCOVERY, &hdev->quirks);
Marcel Holtmanncb8d6592014-07-02 11:25:25 +02002727 }
Tedd Ho-Jeong Andffd30e2013-04-19 09:57:43 -07002728
Marcel Holtmanncda0dd72015-01-26 21:33:48 -08002729 if (id->driver_info & BTUSB_INTEL_NEW) {
2730 hdev->send = btusb_send_frame_intel;
2731 hdev->setup = btusb_setup_intel_new;
Marcel Holtmann385a7682015-01-28 11:09:56 -08002732 hdev->hw_error = btusb_hw_error_intel;
Marcel Holtmann4185a0f2015-04-06 00:52:12 -07002733 hdev->set_bdaddr = btintel_set_bdaddr;
Marcel Holtmannb970c5b2015-02-01 23:57:18 -08002734 set_bit(HCI_QUIRK_STRICT_DUPLICATE_FILTER, &hdev->quirks);
Marcel Holtmanncda0dd72015-01-26 21:33:48 -08002735 }
2736
Amitkumar Karwarae8df492014-07-18 14:47:06 -07002737 if (id->driver_info & BTUSB_MARVELL)
2738 hdev->set_bdaddr = btusb_set_bdaddr_marvell;
2739
Marcel Holtmann661cf882015-01-02 23:35:20 -08002740 if (id->driver_info & BTUSB_SWAVE) {
2741 set_bit(HCI_QUIRK_FIXUP_INQUIRY_MODE, &hdev->quirks);
Marcel Holtmannd57dbe72014-12-26 04:42:33 +01002742 set_bit(HCI_QUIRK_BROKEN_LOCAL_COMMANDS, &hdev->quirks);
Marcel Holtmann661cf882015-01-02 23:35:20 -08002743 }
Marcel Holtmannd57dbe72014-12-26 04:42:33 +01002744
Marcel Holtmann40df7832014-07-06 13:29:58 +02002745 if (id->driver_info & BTUSB_INTEL_BOOT)
2746 set_bit(HCI_QUIRK_RAW_DEVICE, &hdev->quirks);
2747
Jakub Pawlowski79f0c872015-01-29 10:38:34 -08002748 if (id->driver_info & BTUSB_ATH3012) {
Toshi Kikuchi58592232014-12-12 10:58:05 -08002749 hdev->set_bdaddr = btusb_set_bdaddr_ath3012;
Jakub Pawlowski3d50d512015-03-17 09:04:15 -07002750 set_bit(HCI_QUIRK_SIMULTANEOUS_DISCOVERY, &hdev->quirks);
Jakub Pawlowski79f0c872015-01-29 10:38:34 -08002751 set_bit(HCI_QUIRK_STRICT_DUPLICATE_FILTER, &hdev->quirks);
2752 }
Toshi Kikuchi58592232014-12-12 10:58:05 -08002753
Kim, Ben Young Tae3267c882015-02-15 23:07:33 +00002754 if (id->driver_info & BTUSB_QCA_ROME) {
2755 data->setup_on_usb = btusb_setup_qca;
2756 hdev->set_bdaddr = btusb_set_bdaddr_ath3012;
2757 }
2758
Carlo Caionedb33c772015-05-14 10:49:09 +02002759#ifdef CONFIG_BT_HCIBTUSB_RTL
Daniel Drake04b8c812015-05-21 08:23:50 -06002760 if (id->driver_info & BTUSB_REALTEK) {
Carlo Caionedb33c772015-05-14 10:49:09 +02002761 hdev->setup = btrtl_setup_realtek;
Daniel Drake04b8c812015-05-21 08:23:50 -06002762
2763 /* Realtek devices lose their updated firmware over suspend,
2764 * but the USB hub doesn't notice any status change.
2765 * Explicitly request a device reset on resume.
2766 */
2767 set_bit(BTUSB_RESET_RESUME, &data->flags);
2768 }
Carlo Caionedb33c772015-05-14 10:49:09 +02002769#endif
Daniel Drakea2698a92015-04-16 14:09:55 -06002770
Marcel Holtmann893ba542015-01-28 20:27:34 -08002771 if (id->driver_info & BTUSB_AMP) {
2772 /* AMP controllers do not support SCO packets */
2773 data->isoc = NULL;
2774 } else {
2775 /* Interface numbers are hardcoded in the specification */
2776 data->isoc = usb_ifnum_to_if(data->udev, 1);
2777 }
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +02002778
Marcel Holtmann7a9d4022008-11-30 12:17:26 +01002779 if (!reset)
Szymon Janca6c511c2012-05-23 12:35:46 +02002780 set_bit(HCI_QUIRK_RESET_ON_CLOSE, &hdev->quirks);
Marcel Holtmanncfeb4142008-08-07 22:26:56 +02002781
2782 if (force_scofix || id->driver_info & BTUSB_WRONG_SCO_MTU) {
2783 if (!disable_scofix)
2784 set_bit(HCI_QUIRK_FIXUP_BUFFER_SIZE, &hdev->quirks);
2785 }
2786
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +02002787 if (id->driver_info & BTUSB_BROKEN_ISOC)
2788 data->isoc = NULL;
2789
Marcel Holtmann7a9d4022008-11-30 12:17:26 +01002790 if (id->driver_info & BTUSB_DIGIANSWER) {
2791 data->cmdreq_type = USB_TYPE_VENDOR;
Szymon Janca6c511c2012-05-23 12:35:46 +02002792 set_bit(HCI_QUIRK_RESET_ON_CLOSE, &hdev->quirks);
Marcel Holtmann7a9d4022008-11-30 12:17:26 +01002793 }
2794
2795 if (id->driver_info & BTUSB_CSR) {
2796 struct usb_device *udev = data->udev;
Marcel Holtmann81cac642014-01-03 03:02:36 -08002797 u16 bcdDevice = le16_to_cpu(udev->descriptor.bcdDevice);
Marcel Holtmann7a9d4022008-11-30 12:17:26 +01002798
2799 /* Old firmware would otherwise execute USB reset */
Marcel Holtmann81cac642014-01-03 03:02:36 -08002800 if (bcdDevice < 0x117)
Szymon Janca6c511c2012-05-23 12:35:46 +02002801 set_bit(HCI_QUIRK_RESET_ON_CLOSE, &hdev->quirks);
Marcel Holtmann81cac642014-01-03 03:02:36 -08002802
2803 /* Fake CSR devices with broken commands */
2804 if (bcdDevice <= 0x100)
2805 hdev->setup = btusb_setup_csr;
Jakub Pawlowski49c989a2015-03-17 09:04:17 -07002806
2807 set_bit(HCI_QUIRK_SIMULTANEOUS_DISCOVERY, &hdev->quirks);
Marcel Holtmann7a9d4022008-11-30 12:17:26 +01002808 }
2809
Marcel Holtmanncfeb4142008-08-07 22:26:56 +02002810 if (id->driver_info & BTUSB_SNIFFER) {
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +02002811 struct usb_device *udev = data->udev;
Marcel Holtmanncfeb4142008-08-07 22:26:56 +02002812
Marcel Holtmann7a9d4022008-11-30 12:17:26 +01002813 /* New sniffer firmware has crippled HCI interface */
Marcel Holtmanncfeb4142008-08-07 22:26:56 +02002814 if (le16_to_cpu(udev->descriptor.bcdDevice) > 0x997)
2815 set_bit(HCI_QUIRK_RAW_DEVICE, &hdev->quirks);
2816 }
2817
Marcel Holtmann3a5ef202014-07-06 14:53:54 +02002818 if (id->driver_info & BTUSB_INTEL_BOOT) {
2819 /* A bug in the bootloader causes that interrupt interface is
2820 * only enabled after receiving SetInterface(0, AltSetting=0).
2821 */
2822 err = usb_set_interface(data->udev, 0, 0);
2823 if (err < 0) {
2824 BT_ERR("failed to set interface 0, alt 0 %d", err);
2825 hci_free_dev(hdev);
2826 return err;
2827 }
2828 }
2829
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +02002830 if (data->isoc) {
2831 err = usb_driver_claim_interface(&btusb_driver,
Marcel Holtmann89e75332014-09-16 04:44:50 +02002832 data->isoc, data);
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +02002833 if (err < 0) {
2834 hci_free_dev(hdev);
Marcel Holtmann9bfa35f2008-08-18 13:23:52 +02002835 return err;
2836 }
2837 }
2838
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002839 err = hci_register_dev(hdev);
2840 if (err < 0) {
2841 hci_free_dev(hdev);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002842 return err;
2843 }
2844
2845 usb_set_intfdata(intf, data);
2846
2847 return 0;
2848}
2849
2850static void btusb_disconnect(struct usb_interface *intf)
2851{
2852 struct btusb_data *data = usb_get_intfdata(intf);
2853 struct hci_dev *hdev;
2854
2855 BT_DBG("intf %p", intf);
2856
2857 if (!data)
2858 return;
2859
2860 hdev = data->hdev;
Marcel Holtmann5fbcd262008-09-23 00:16:36 +02002861 usb_set_intfdata(data->intf, NULL);
2862
2863 if (data->isoc)
2864 usb_set_intfdata(data->isoc, NULL);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002865
2866 hci_unregister_dev(hdev);
2867
Marcel Holtmann5fbcd262008-09-23 00:16:36 +02002868 if (intf == data->isoc)
2869 usb_driver_release_interface(&btusb_driver, data->intf);
2870 else if (data->isoc)
2871 usb_driver_release_interface(&btusb_driver, data->isoc);
2872
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002873 hci_free_dev(hdev);
2874}
2875
Oliver Neukum7bee5492009-08-24 23:44:59 +02002876#ifdef CONFIG_PM
Marcel Holtmann6a88adf2008-11-30 12:17:14 +01002877static int btusb_suspend(struct usb_interface *intf, pm_message_t message)
2878{
2879 struct btusb_data *data = usb_get_intfdata(intf);
2880
2881 BT_DBG("intf %p", intf);
2882
2883 if (data->suspend_count++)
2884 return 0;
2885
Oliver Neukum7bee5492009-08-24 23:44:59 +02002886 spin_lock_irq(&data->txlock);
Alan Stern5b1b0b82011-08-19 23:49:48 +02002887 if (!(PMSG_IS_AUTO(message) && data->tx_in_flight)) {
Oliver Neukum7bee5492009-08-24 23:44:59 +02002888 set_bit(BTUSB_SUSPENDING, &data->flags);
2889 spin_unlock_irq(&data->txlock);
2890 } else {
2891 spin_unlock_irq(&data->txlock);
2892 data->suspend_count--;
2893 return -EBUSY;
2894 }
2895
Marcel Holtmann6a88adf2008-11-30 12:17:14 +01002896 cancel_work_sync(&data->work);
2897
Oliver Neukum7bee5492009-08-24 23:44:59 +02002898 btusb_stop_traffic(data);
Marcel Holtmann6a88adf2008-11-30 12:17:14 +01002899 usb_kill_anchored_urbs(&data->tx_anchor);
2900
Daniel Drake04b8c812015-05-21 08:23:50 -06002901 /* Optionally request a device reset on resume, but only when
2902 * wakeups are disabled. If wakeups are enabled we assume the
2903 * device will stay powered up throughout suspend.
2904 */
2905 if (test_bit(BTUSB_RESET_RESUME, &data->flags) &&
2906 !device_may_wakeup(&data->udev->dev))
2907 data->udev->reset_resume = 1;
2908
Marcel Holtmann6a88adf2008-11-30 12:17:14 +01002909 return 0;
2910}
2911
Oliver Neukum7bee5492009-08-24 23:44:59 +02002912static void play_deferred(struct btusb_data *data)
2913{
2914 struct urb *urb;
2915 int err;
2916
2917 while ((urb = usb_get_from_anchor(&data->deferred))) {
2918 err = usb_submit_urb(urb, GFP_ATOMIC);
2919 if (err < 0)
2920 break;
2921
2922 data->tx_in_flight++;
2923 }
2924 usb_scuttle_anchored_urbs(&data->deferred);
2925}
2926
Marcel Holtmann6a88adf2008-11-30 12:17:14 +01002927static int btusb_resume(struct usb_interface *intf)
2928{
2929 struct btusb_data *data = usb_get_intfdata(intf);
2930 struct hci_dev *hdev = data->hdev;
Oliver Neukum7bee5492009-08-24 23:44:59 +02002931 int err = 0;
Marcel Holtmann6a88adf2008-11-30 12:17:14 +01002932
2933 BT_DBG("intf %p", intf);
2934
2935 if (--data->suspend_count)
2936 return 0;
2937
2938 if (!test_bit(HCI_RUNNING, &hdev->flags))
Oliver Neukum7bee5492009-08-24 23:44:59 +02002939 goto done;
Marcel Holtmann6a88adf2008-11-30 12:17:14 +01002940
2941 if (test_bit(BTUSB_INTR_RUNNING, &data->flags)) {
2942 err = btusb_submit_intr_urb(hdev, GFP_NOIO);
2943 if (err < 0) {
2944 clear_bit(BTUSB_INTR_RUNNING, &data->flags);
Oliver Neukum7bee5492009-08-24 23:44:59 +02002945 goto failed;
Marcel Holtmann6a88adf2008-11-30 12:17:14 +01002946 }
2947 }
2948
2949 if (test_bit(BTUSB_BULK_RUNNING, &data->flags)) {
Marcel Holtmann43c2e572009-02-04 17:41:38 +01002950 err = btusb_submit_bulk_urb(hdev, GFP_NOIO);
2951 if (err < 0) {
Marcel Holtmann6a88adf2008-11-30 12:17:14 +01002952 clear_bit(BTUSB_BULK_RUNNING, &data->flags);
Oliver Neukum7bee5492009-08-24 23:44:59 +02002953 goto failed;
2954 }
2955
2956 btusb_submit_bulk_urb(hdev, GFP_NOIO);
Marcel Holtmann6a88adf2008-11-30 12:17:14 +01002957 }
2958
2959 if (test_bit(BTUSB_ISOC_RUNNING, &data->flags)) {
2960 if (btusb_submit_isoc_urb(hdev, GFP_NOIO) < 0)
2961 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
2962 else
2963 btusb_submit_isoc_urb(hdev, GFP_NOIO);
2964 }
2965
Oliver Neukum7bee5492009-08-24 23:44:59 +02002966 spin_lock_irq(&data->txlock);
2967 play_deferred(data);
2968 clear_bit(BTUSB_SUSPENDING, &data->flags);
2969 spin_unlock_irq(&data->txlock);
2970 schedule_work(&data->work);
2971
Marcel Holtmann6a88adf2008-11-30 12:17:14 +01002972 return 0;
Oliver Neukum7bee5492009-08-24 23:44:59 +02002973
2974failed:
2975 usb_scuttle_anchored_urbs(&data->deferred);
2976done:
2977 spin_lock_irq(&data->txlock);
2978 clear_bit(BTUSB_SUSPENDING, &data->flags);
2979 spin_unlock_irq(&data->txlock);
2980
2981 return err;
Marcel Holtmann6a88adf2008-11-30 12:17:14 +01002982}
Oliver Neukum7bee5492009-08-24 23:44:59 +02002983#endif
Marcel Holtmann6a88adf2008-11-30 12:17:14 +01002984
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002985static struct usb_driver btusb_driver = {
2986 .name = "btusb",
2987 .probe = btusb_probe,
2988 .disconnect = btusb_disconnect,
Oliver Neukum7bee5492009-08-24 23:44:59 +02002989#ifdef CONFIG_PM
Marcel Holtmann6a88adf2008-11-30 12:17:14 +01002990 .suspend = btusb_suspend,
2991 .resume = btusb_resume,
Oliver Neukum7bee5492009-08-24 23:44:59 +02002992#endif
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002993 .id_table = btusb_table,
Oliver Neukum7bee5492009-08-24 23:44:59 +02002994 .supports_autosuspend = 1,
Sarah Sharpe1f12eb2012-04-23 10:08:51 -07002995 .disable_hub_initiated_lpm = 1,
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002996};
2997
Greg Kroah-Hartman93f15082011-11-18 09:47:34 -08002998module_usb_driver(btusb_driver);
Marcel Holtmann5e23b922007-10-20 14:12:34 +02002999
Marcel Holtmanncfeb4142008-08-07 22:26:56 +02003000module_param(disable_scofix, bool, 0644);
3001MODULE_PARM_DESC(disable_scofix, "Disable fixup of wrong SCO buffer size");
3002
3003module_param(force_scofix, bool, 0644);
3004MODULE_PARM_DESC(force_scofix, "Force fixup of wrong SCO buffers size");
3005
3006module_param(reset, bool, 0644);
3007MODULE_PARM_DESC(reset, "Send HCI reset command on initialization");
3008
Marcel Holtmann5e23b922007-10-20 14:12:34 +02003009MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
3010MODULE_DESCRIPTION("Generic Bluetooth USB driver ver " VERSION);
3011MODULE_VERSION(VERSION);
3012MODULE_LICENSE("GPL");