blob: 31ade991aa913893e088fb69923be3c86e0d3e12 [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001/*
2 *
3 * AVM BlueFRITZ! USB driver
4 *
Marcel Holtmann9c724352006-07-06 15:45:23 +02005 * Copyright (C) 2003-2006 Marcel Holtmann <marcel@holtmann.org>
Linus Torvalds1da177e2005-04-16 15:20:36 -07006 *
7 *
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License as published by
10 * the Free Software Foundation; either version 2 of the License, or
11 * (at your option) any later version.
12 *
13 * This program is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 * GNU General Public License for more details.
17 *
18 * You should have received a copy of the GNU General Public License
19 * along with this program; if not, write to the Free Software
20 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
21 *
22 */
23
Linus Torvalds1da177e2005-04-16 15:20:36 -070024#include <linux/module.h>
25
26#include <linux/kernel.h>
27#include <linux/init.h>
28#include <linux/slab.h>
29#include <linux/types.h>
30#include <linux/sched.h>
31#include <linux/errno.h>
32#include <linux/skbuff.h>
33
34#include <linux/device.h>
35#include <linux/firmware.h>
36
37#include <linux/usb.h>
38
39#include <net/bluetooth/bluetooth.h>
40#include <net/bluetooth/hci_core.h>
41
42#ifndef CONFIG_BT_HCIBFUSB_DEBUG
43#undef BT_DBG
44#define BT_DBG(D...)
45#endif
46
47#define VERSION "1.1"
48
49static int ignore = 0;
50
51static struct usb_driver bfusb_driver;
52
53static struct usb_device_id bfusb_table[] = {
54 /* AVM BlueFRITZ! USB */
55 { USB_DEVICE(0x057c, 0x2200) },
56
57 { } /* Terminating entry */
58};
59
60MODULE_DEVICE_TABLE(usb, bfusb_table);
61
Linus Torvalds1da177e2005-04-16 15:20:36 -070062#define BFUSB_MAX_BLOCK_SIZE 256
63
64#define BFUSB_BLOCK_TIMEOUT 3000
65
66#define BFUSB_TX_PROCESS 1
67#define BFUSB_TX_WAKEUP 2
68
69#define BFUSB_MAX_BULK_TX 2
70#define BFUSB_MAX_BULK_RX 2
71
Marcel Holtmann9c724352006-07-06 15:45:23 +020072struct bfusb_data {
Linus Torvalds1da177e2005-04-16 15:20:36 -070073 struct hci_dev *hdev;
74
75 unsigned long state;
76
77 struct usb_device *udev;
78
79 unsigned int bulk_in_ep;
80 unsigned int bulk_out_ep;
81 unsigned int bulk_pkt_size;
82
83 rwlock_t lock;
84
85 struct sk_buff_head transmit_q;
86
87 struct sk_buff *reassembly;
88
89 atomic_t pending_tx;
90 struct sk_buff_head pending_q;
91 struct sk_buff_head completed_q;
92};
93
Marcel Holtmann9c724352006-07-06 15:45:23 +020094struct bfusb_data_scb {
Linus Torvalds1da177e2005-04-16 15:20:36 -070095 struct urb *urb;
96};
97
David Howells7d12e782006-10-05 14:55:46 +010098static void bfusb_tx_complete(struct urb *urb);
99static void bfusb_rx_complete(struct urb *urb);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700100
Marcel Holtmann9c724352006-07-06 15:45:23 +0200101static struct urb *bfusb_get_completed(struct bfusb_data *data)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700102{
103 struct sk_buff *skb;
104 struct urb *urb = NULL;
105
Marcel Holtmann9c724352006-07-06 15:45:23 +0200106 BT_DBG("bfusb %p", data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700107
Marcel Holtmann9c724352006-07-06 15:45:23 +0200108 skb = skb_dequeue(&data->completed_q);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700109 if (skb) {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200110 urb = ((struct bfusb_data_scb *) skb->cb)->urb;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700111 kfree_skb(skb);
112 }
113
114 return urb;
115}
116
Marcel Holtmann9c724352006-07-06 15:45:23 +0200117static void bfusb_unlink_urbs(struct bfusb_data *data)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700118{
119 struct sk_buff *skb;
120 struct urb *urb;
121
Marcel Holtmann9c724352006-07-06 15:45:23 +0200122 BT_DBG("bfusb %p", data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700123
Marcel Holtmann9c724352006-07-06 15:45:23 +0200124 while ((skb = skb_dequeue(&data->pending_q))) {
125 urb = ((struct bfusb_data_scb *) skb->cb)->urb;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700126 usb_kill_urb(urb);
Marcel Holtmann9c724352006-07-06 15:45:23 +0200127 skb_queue_tail(&data->completed_q, skb);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700128 }
129
Marcel Holtmann9c724352006-07-06 15:45:23 +0200130 while ((urb = bfusb_get_completed(data)))
Linus Torvalds1da177e2005-04-16 15:20:36 -0700131 usb_free_urb(urb);
132}
133
Marcel Holtmann9c724352006-07-06 15:45:23 +0200134static int bfusb_send_bulk(struct bfusb_data *data, struct sk_buff *skb)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700135{
Marcel Holtmann9c724352006-07-06 15:45:23 +0200136 struct bfusb_data_scb *scb = (void *) skb->cb;
137 struct urb *urb = bfusb_get_completed(data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700138 int err, pipe;
139
Marcel Holtmann9c724352006-07-06 15:45:23 +0200140 BT_DBG("bfusb %p skb %p len %d", data, skb, skb->len);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700141
142 if (!urb && !(urb = usb_alloc_urb(0, GFP_ATOMIC)))
143 return -ENOMEM;
144
Marcel Holtmann9c724352006-07-06 15:45:23 +0200145 pipe = usb_sndbulkpipe(data->udev, data->bulk_out_ep);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700146
Marcel Holtmann9c724352006-07-06 15:45:23 +0200147 usb_fill_bulk_urb(urb, data->udev, pipe, skb->data, skb->len,
Linus Torvalds1da177e2005-04-16 15:20:36 -0700148 bfusb_tx_complete, skb);
149
150 scb->urb = urb;
151
Marcel Holtmann9c724352006-07-06 15:45:23 +0200152 skb_queue_tail(&data->pending_q, skb);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700153
154 err = usb_submit_urb(urb, GFP_ATOMIC);
155 if (err) {
156 BT_ERR("%s bulk tx submit failed urb %p err %d",
Marcel Holtmann9c724352006-07-06 15:45:23 +0200157 data->hdev->name, urb, err);
158 skb_unlink(skb, &data->pending_q);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700159 usb_free_urb(urb);
160 } else
Marcel Holtmann9c724352006-07-06 15:45:23 +0200161 atomic_inc(&data->pending_tx);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700162
163 return err;
164}
165
Marcel Holtmann9c724352006-07-06 15:45:23 +0200166static void bfusb_tx_wakeup(struct bfusb_data *data)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700167{
168 struct sk_buff *skb;
169
Marcel Holtmann9c724352006-07-06 15:45:23 +0200170 BT_DBG("bfusb %p", data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700171
Marcel Holtmann9c724352006-07-06 15:45:23 +0200172 if (test_and_set_bit(BFUSB_TX_PROCESS, &data->state)) {
173 set_bit(BFUSB_TX_WAKEUP, &data->state);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700174 return;
175 }
176
177 do {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200178 clear_bit(BFUSB_TX_WAKEUP, &data->state);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700179
Marcel Holtmann9c724352006-07-06 15:45:23 +0200180 while ((atomic_read(&data->pending_tx) < BFUSB_MAX_BULK_TX) &&
181 (skb = skb_dequeue(&data->transmit_q))) {
182 if (bfusb_send_bulk(data, skb) < 0) {
183 skb_queue_head(&data->transmit_q, skb);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700184 break;
185 }
186 }
187
Marcel Holtmann9c724352006-07-06 15:45:23 +0200188 } while (test_bit(BFUSB_TX_WAKEUP, &data->state));
Linus Torvalds1da177e2005-04-16 15:20:36 -0700189
Marcel Holtmann9c724352006-07-06 15:45:23 +0200190 clear_bit(BFUSB_TX_PROCESS, &data->state);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700191}
192
David Howells7d12e782006-10-05 14:55:46 +0100193static void bfusb_tx_complete(struct urb *urb)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700194{
195 struct sk_buff *skb = (struct sk_buff *) urb->context;
Marcel Holtmann9c724352006-07-06 15:45:23 +0200196 struct bfusb_data *data = (struct bfusb_data *) skb->dev;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700197
Marcel Holtmann9c724352006-07-06 15:45:23 +0200198 BT_DBG("bfusb %p urb %p skb %p len %d", data, urb, skb, skb->len);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700199
Marcel Holtmann9c724352006-07-06 15:45:23 +0200200 atomic_dec(&data->pending_tx);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700201
Marcel Holtmann9c724352006-07-06 15:45:23 +0200202 if (!test_bit(HCI_RUNNING, &data->hdev->flags))
Linus Torvalds1da177e2005-04-16 15:20:36 -0700203 return;
204
205 if (!urb->status)
Marcel Holtmann9c724352006-07-06 15:45:23 +0200206 data->hdev->stat.byte_tx += skb->len;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700207 else
Marcel Holtmann9c724352006-07-06 15:45:23 +0200208 data->hdev->stat.err_tx++;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700209
Marcel Holtmann9c724352006-07-06 15:45:23 +0200210 read_lock(&data->lock);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700211
Marcel Holtmann9c724352006-07-06 15:45:23 +0200212 skb_unlink(skb, &data->pending_q);
213 skb_queue_tail(&data->completed_q, skb);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700214
Marcel Holtmann9c724352006-07-06 15:45:23 +0200215 bfusb_tx_wakeup(data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700216
Marcel Holtmann9c724352006-07-06 15:45:23 +0200217 read_unlock(&data->lock);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700218}
219
220
Marcel Holtmann9c724352006-07-06 15:45:23 +0200221static int bfusb_rx_submit(struct bfusb_data *data, struct urb *urb)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700222{
Marcel Holtmann9c724352006-07-06 15:45:23 +0200223 struct bfusb_data_scb *scb;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700224 struct sk_buff *skb;
225 int err, pipe, size = HCI_MAX_FRAME_SIZE + 32;
226
227 BT_DBG("bfusb %p urb %p", bfusb, urb);
228
229 if (!urb && !(urb = usb_alloc_urb(0, GFP_ATOMIC)))
230 return -ENOMEM;
231
Marcel Holtmann9c724352006-07-06 15:45:23 +0200232 skb = bt_skb_alloc(size, GFP_ATOMIC);
233 if (!skb) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700234 usb_free_urb(urb);
235 return -ENOMEM;
236 }
237
Marcel Holtmann9c724352006-07-06 15:45:23 +0200238 skb->dev = (void *) data;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700239
Marcel Holtmann9c724352006-07-06 15:45:23 +0200240 scb = (struct bfusb_data_scb *) skb->cb;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700241 scb->urb = urb;
242
Marcel Holtmann9c724352006-07-06 15:45:23 +0200243 pipe = usb_rcvbulkpipe(data->udev, data->bulk_in_ep);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700244
Marcel Holtmann9c724352006-07-06 15:45:23 +0200245 usb_fill_bulk_urb(urb, data->udev, pipe, skb->data, size,
Linus Torvalds1da177e2005-04-16 15:20:36 -0700246 bfusb_rx_complete, skb);
247
Marcel Holtmann9c724352006-07-06 15:45:23 +0200248 skb_queue_tail(&data->pending_q, skb);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700249
250 err = usb_submit_urb(urb, GFP_ATOMIC);
251 if (err) {
252 BT_ERR("%s bulk rx submit failed urb %p err %d",
Marcel Holtmann9c724352006-07-06 15:45:23 +0200253 data->hdev->name, urb, err);
254 skb_unlink(skb, &data->pending_q);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700255 kfree_skb(skb);
256 usb_free_urb(urb);
257 }
258
259 return err;
260}
261
Marcel Holtmann9c724352006-07-06 15:45:23 +0200262static inline int bfusb_recv_block(struct bfusb_data *data, int hdr, unsigned char *buf, int len)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700263{
Marcel Holtmann9c724352006-07-06 15:45:23 +0200264 BT_DBG("bfusb %p hdr 0x%02x data %p len %d", data, hdr, buf, len);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700265
266 if (hdr & 0x10) {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200267 BT_ERR("%s error in block", data->hdev->name);
268 if (data->reassembly)
269 kfree_skb(data->reassembly);
270 data->reassembly = NULL;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700271 return -EIO;
272 }
273
274 if (hdr & 0x04) {
275 struct sk_buff *skb;
276 unsigned char pkt_type;
277 int pkt_len = 0;
278
Marcel Holtmann9c724352006-07-06 15:45:23 +0200279 if (data->reassembly) {
280 BT_ERR("%s unexpected start block", data->hdev->name);
281 kfree_skb(data->reassembly);
282 data->reassembly = NULL;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700283 }
284
285 if (len < 1) {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200286 BT_ERR("%s no packet type found", data->hdev->name);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700287 return -EPROTO;
288 }
289
Marcel Holtmann9c724352006-07-06 15:45:23 +0200290 pkt_type = *buf++; len--;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700291
292 switch (pkt_type) {
293 case HCI_EVENT_PKT:
294 if (len >= HCI_EVENT_HDR_SIZE) {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200295 struct hci_event_hdr *hdr = (struct hci_event_hdr *) buf;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700296 pkt_len = HCI_EVENT_HDR_SIZE + hdr->plen;
297 } else {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200298 BT_ERR("%s event block is too short", data->hdev->name);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700299 return -EILSEQ;
300 }
301 break;
302
303 case HCI_ACLDATA_PKT:
304 if (len >= HCI_ACL_HDR_SIZE) {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200305 struct hci_acl_hdr *hdr = (struct hci_acl_hdr *) buf;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700306 pkt_len = HCI_ACL_HDR_SIZE + __le16_to_cpu(hdr->dlen);
307 } else {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200308 BT_ERR("%s data block is too short", data->hdev->name);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700309 return -EILSEQ;
310 }
311 break;
312
313 case HCI_SCODATA_PKT:
314 if (len >= HCI_SCO_HDR_SIZE) {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200315 struct hci_sco_hdr *hdr = (struct hci_sco_hdr *) buf;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700316 pkt_len = HCI_SCO_HDR_SIZE + hdr->dlen;
317 } else {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200318 BT_ERR("%s audio block is too short", data->hdev->name);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700319 return -EILSEQ;
320 }
321 break;
322 }
323
324 skb = bt_skb_alloc(pkt_len, GFP_ATOMIC);
325 if (!skb) {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200326 BT_ERR("%s no memory for the packet", data->hdev->name);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700327 return -ENOMEM;
328 }
329
Marcel Holtmann9c724352006-07-06 15:45:23 +0200330 skb->dev = (void *) data->hdev;
Marcel Holtmann0d48d932005-08-09 20:30:28 -0700331 bt_cb(skb)->pkt_type = pkt_type;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700332
Marcel Holtmann9c724352006-07-06 15:45:23 +0200333 data->reassembly = skb;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700334 } else {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200335 if (!data->reassembly) {
336 BT_ERR("%s unexpected continuation block", data->hdev->name);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700337 return -EIO;
338 }
339 }
340
341 if (len > 0)
Marcel Holtmann9c724352006-07-06 15:45:23 +0200342 memcpy(skb_put(data->reassembly, len), buf, len);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700343
344 if (hdr & 0x08) {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200345 hci_recv_frame(data->reassembly);
346 data->reassembly = NULL;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700347 }
348
349 return 0;
350}
351
David Howells7d12e782006-10-05 14:55:46 +0100352static void bfusb_rx_complete(struct urb *urb)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700353{
354 struct sk_buff *skb = (struct sk_buff *) urb->context;
Marcel Holtmann9c724352006-07-06 15:45:23 +0200355 struct bfusb_data *data = (struct bfusb_data *) skb->dev;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700356 unsigned char *buf = urb->transfer_buffer;
357 int count = urb->actual_length;
358 int err, hdr, len;
359
360 BT_DBG("bfusb %p urb %p skb %p len %d", bfusb, urb, skb, skb->len);
361
Marcel Holtmann9c724352006-07-06 15:45:23 +0200362 read_lock(&data->lock);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700363
Marcel Holtmann9c724352006-07-06 15:45:23 +0200364 if (!test_bit(HCI_RUNNING, &data->hdev->flags))
Linus Torvalds1da177e2005-04-16 15:20:36 -0700365 goto unlock;
366
367 if (urb->status || !count)
368 goto resubmit;
369
Marcel Holtmann9c724352006-07-06 15:45:23 +0200370 data->hdev->stat.byte_rx += count;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700371
372 skb_put(skb, count);
373
374 while (count) {
375 hdr = buf[0] | (buf[1] << 8);
376
377 if (hdr & 0x4000) {
378 len = 0;
379 count -= 2;
380 buf += 2;
381 } else {
382 len = (buf[2] == 0) ? 256 : buf[2];
383 count -= 3;
384 buf += 3;
385 }
386
387 if (count < len) {
388 BT_ERR("%s block extends over URB buffer ranges",
Marcel Holtmann9c724352006-07-06 15:45:23 +0200389 data->hdev->name);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700390 }
391
392 if ((hdr & 0xe1) == 0xc1)
Marcel Holtmann9c724352006-07-06 15:45:23 +0200393 bfusb_recv_block(data, hdr, buf, len);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700394
395 count -= len;
396 buf += len;
397 }
398
Marcel Holtmann9c724352006-07-06 15:45:23 +0200399 skb_unlink(skb, &data->pending_q);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700400 kfree_skb(skb);
401
Marcel Holtmann9c724352006-07-06 15:45:23 +0200402 bfusb_rx_submit(data, urb);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700403
Marcel Holtmann9c724352006-07-06 15:45:23 +0200404 read_unlock(&data->lock);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700405
406 return;
407
408resubmit:
Marcel Holtmann9c724352006-07-06 15:45:23 +0200409 urb->dev = data->udev;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700410
411 err = usb_submit_urb(urb, GFP_ATOMIC);
412 if (err) {
413 BT_ERR("%s bulk resubmit failed urb %p err %d",
Marcel Holtmann9c724352006-07-06 15:45:23 +0200414 data->hdev->name, urb, err);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700415 }
416
417unlock:
Marcel Holtmann9c724352006-07-06 15:45:23 +0200418 read_unlock(&data->lock);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700419}
420
Linus Torvalds1da177e2005-04-16 15:20:36 -0700421static int bfusb_open(struct hci_dev *hdev)
422{
Marcel Holtmann9c724352006-07-06 15:45:23 +0200423 struct bfusb_data *data = hdev->driver_data;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700424 unsigned long flags;
425 int i, err;
426
Marcel Holtmann9c724352006-07-06 15:45:23 +0200427 BT_DBG("hdev %p bfusb %p", hdev, data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700428
429 if (test_and_set_bit(HCI_RUNNING, &hdev->flags))
430 return 0;
431
Marcel Holtmann9c724352006-07-06 15:45:23 +0200432 write_lock_irqsave(&data->lock, flags);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700433
Marcel Holtmann9c724352006-07-06 15:45:23 +0200434 err = bfusb_rx_submit(data, NULL);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700435 if (!err) {
436 for (i = 1; i < BFUSB_MAX_BULK_RX; i++)
Marcel Holtmann9c724352006-07-06 15:45:23 +0200437 bfusb_rx_submit(data, NULL);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700438 } else {
439 clear_bit(HCI_RUNNING, &hdev->flags);
440 }
441
Marcel Holtmann9c724352006-07-06 15:45:23 +0200442 write_unlock_irqrestore(&data->lock, flags);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700443
444 return err;
445}
446
447static int bfusb_flush(struct hci_dev *hdev)
448{
Marcel Holtmann9c724352006-07-06 15:45:23 +0200449 struct bfusb_data *data = hdev->driver_data;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700450
Marcel Holtmann9c724352006-07-06 15:45:23 +0200451 BT_DBG("hdev %p bfusb %p", hdev, data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700452
Marcel Holtmann9c724352006-07-06 15:45:23 +0200453 skb_queue_purge(&data->transmit_q);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700454
455 return 0;
456}
457
458static int bfusb_close(struct hci_dev *hdev)
459{
Marcel Holtmann9c724352006-07-06 15:45:23 +0200460 struct bfusb_data *data = hdev->driver_data;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700461 unsigned long flags;
462
Marcel Holtmann9c724352006-07-06 15:45:23 +0200463 BT_DBG("hdev %p bfusb %p", hdev, data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700464
465 if (!test_and_clear_bit(HCI_RUNNING, &hdev->flags))
466 return 0;
467
Marcel Holtmann9c724352006-07-06 15:45:23 +0200468 write_lock_irqsave(&data->lock, flags);
469 write_unlock_irqrestore(&data->lock, flags);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700470
Marcel Holtmann9c724352006-07-06 15:45:23 +0200471 bfusb_unlink_urbs(data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700472 bfusb_flush(hdev);
473
474 return 0;
475}
476
477static int bfusb_send_frame(struct sk_buff *skb)
478{
479 struct hci_dev *hdev = (struct hci_dev *) skb->dev;
Marcel Holtmann9c724352006-07-06 15:45:23 +0200480 struct bfusb_data *data;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700481 struct sk_buff *nskb;
482 unsigned char buf[3];
483 int sent = 0, size, count;
484
Marcel Holtmann0d48d932005-08-09 20:30:28 -0700485 BT_DBG("hdev %p skb %p type %d len %d", hdev, skb, bt_cb(skb)->pkt_type, skb->len);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700486
487 if (!hdev) {
488 BT_ERR("Frame for unknown HCI device (hdev=NULL)");
489 return -ENODEV;
490 }
491
492 if (!test_bit(HCI_RUNNING, &hdev->flags))
493 return -EBUSY;
494
Marcel Holtmann9c724352006-07-06 15:45:23 +0200495 data = hdev->driver_data;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700496
Marcel Holtmann0d48d932005-08-09 20:30:28 -0700497 switch (bt_cb(skb)->pkt_type) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700498 case HCI_COMMAND_PKT:
499 hdev->stat.cmd_tx++;
500 break;
501 case HCI_ACLDATA_PKT:
502 hdev->stat.acl_tx++;
503 break;
504 case HCI_SCODATA_PKT:
505 hdev->stat.sco_tx++;
506 break;
507 };
508
509 /* Prepend skb with frame type */
Marcel Holtmann0d48d932005-08-09 20:30:28 -0700510 memcpy(skb_push(skb, 1), &bt_cb(skb)->pkt_type, 1);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700511
512 count = skb->len;
513
514 /* Max HCI frame size seems to be 1511 + 1 */
Marcel Holtmann9c724352006-07-06 15:45:23 +0200515 nskb = bt_skb_alloc(count + 32, GFP_ATOMIC);
516 if (!nskb) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700517 BT_ERR("Can't allocate memory for new packet");
518 return -ENOMEM;
519 }
520
Marcel Holtmann9c724352006-07-06 15:45:23 +0200521 nskb->dev = (void *) data;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700522
523 while (count) {
524 size = min_t(uint, count, BFUSB_MAX_BLOCK_SIZE);
525
526 buf[0] = 0xc1 | ((sent == 0) ? 0x04 : 0) | ((count == size) ? 0x08 : 0);
527 buf[1] = 0x00;
528 buf[2] = (size == BFUSB_MAX_BLOCK_SIZE) ? 0 : size;
529
530 memcpy(skb_put(nskb, 3), buf, 3);
531 memcpy(skb_put(nskb, size), skb->data + sent, size);
532
533 sent += size;
534 count -= size;
535 }
536
537 /* Don't send frame with multiple size of bulk max packet */
Marcel Holtmann9c724352006-07-06 15:45:23 +0200538 if ((nskb->len % data->bulk_pkt_size) == 0) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700539 buf[0] = 0xdd;
540 buf[1] = 0x00;
541 memcpy(skb_put(nskb, 2), buf, 2);
542 }
543
Marcel Holtmann9c724352006-07-06 15:45:23 +0200544 read_lock(&data->lock);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700545
Marcel Holtmann9c724352006-07-06 15:45:23 +0200546 skb_queue_tail(&data->transmit_q, nskb);
547 bfusb_tx_wakeup(data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700548
Marcel Holtmann9c724352006-07-06 15:45:23 +0200549 read_unlock(&data->lock);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700550
551 kfree_skb(skb);
552
553 return 0;
554}
555
556static void bfusb_destruct(struct hci_dev *hdev)
557{
Marcel Holtmann9c724352006-07-06 15:45:23 +0200558 struct bfusb_data *data = hdev->driver_data;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700559
Marcel Holtmann9c724352006-07-06 15:45:23 +0200560 BT_DBG("hdev %p bfusb %p", hdev, data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700561
Marcel Holtmann9c724352006-07-06 15:45:23 +0200562 kfree(data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700563}
564
565static int bfusb_ioctl(struct hci_dev *hdev, unsigned int cmd, unsigned long arg)
566{
567 return -ENOIOCTLCMD;
568}
569
Marcel Holtmann9c724352006-07-06 15:45:23 +0200570static int bfusb_load_firmware(struct bfusb_data *data, unsigned char *firmware, int count)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700571{
572 unsigned char *buf;
573 int err, pipe, len, size, sent = 0;
574
Marcel Holtmann9c724352006-07-06 15:45:23 +0200575 BT_DBG("bfusb %p udev %p", data, data->udev);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700576
577 BT_INFO("BlueFRITZ! USB loading firmware");
578
Marcel Holtmann9c724352006-07-06 15:45:23 +0200579 pipe = usb_sndctrlpipe(data->udev, 0);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700580
Marcel Holtmann9c724352006-07-06 15:45:23 +0200581 if (usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
Linus Torvalds1da177e2005-04-16 15:20:36 -0700582 0, 1, 0, NULL, 0, USB_CTRL_SET_TIMEOUT) < 0) {
583 BT_ERR("Can't change to loading configuration");
584 return -EBUSY;
585 }
586
Marcel Holtmann9c724352006-07-06 15:45:23 +0200587 data->udev->toggle[0] = data->udev->toggle[1] = 0;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700588
589 buf = kmalloc(BFUSB_MAX_BLOCK_SIZE + 3, GFP_ATOMIC);
590 if (!buf) {
591 BT_ERR("Can't allocate memory chunk for firmware");
592 return -ENOMEM;
593 }
594
Marcel Holtmann9c724352006-07-06 15:45:23 +0200595 pipe = usb_sndbulkpipe(data->udev, data->bulk_out_ep);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700596
597 while (count) {
598 size = min_t(uint, count, BFUSB_MAX_BLOCK_SIZE + 3);
599
600 memcpy(buf, firmware + sent, size);
601
Marcel Holtmann9c724352006-07-06 15:45:23 +0200602 err = usb_bulk_msg(data->udev, pipe, buf, size,
Linus Torvalds1da177e2005-04-16 15:20:36 -0700603 &len, BFUSB_BLOCK_TIMEOUT);
604
605 if (err || (len != size)) {
606 BT_ERR("Error in firmware loading");
607 goto error;
608 }
609
610 sent += size;
611 count -= size;
612 }
613
Marcel Holtmann9c724352006-07-06 15:45:23 +0200614 err = usb_bulk_msg(data->udev, pipe, NULL, 0,
615 &len, BFUSB_BLOCK_TIMEOUT);
616 if (err < 0) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700617 BT_ERR("Error in null packet request");
618 goto error;
619 }
620
Marcel Holtmann9c724352006-07-06 15:45:23 +0200621 pipe = usb_sndctrlpipe(data->udev, 0);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700622
Marcel Holtmann9c724352006-07-06 15:45:23 +0200623 err = usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
624 0, 2, 0, NULL, 0, USB_CTRL_SET_TIMEOUT);
625 if (err < 0) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700626 BT_ERR("Can't change to running configuration");
627 goto error;
628 }
629
Marcel Holtmann9c724352006-07-06 15:45:23 +0200630 data->udev->toggle[0] = data->udev->toggle[1] = 0;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700631
632 BT_INFO("BlueFRITZ! USB device ready");
633
634 kfree(buf);
635 return 0;
636
637error:
638 kfree(buf);
639
Marcel Holtmann9c724352006-07-06 15:45:23 +0200640 pipe = usb_sndctrlpipe(data->udev, 0);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700641
Marcel Holtmann9c724352006-07-06 15:45:23 +0200642 usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
Linus Torvalds1da177e2005-04-16 15:20:36 -0700643 0, 0, 0, NULL, 0, USB_CTRL_SET_TIMEOUT);
644
645 return err;
646}
647
648static int bfusb_probe(struct usb_interface *intf, const struct usb_device_id *id)
649{
650 const struct firmware *firmware;
651 struct usb_device *udev = interface_to_usbdev(intf);
652 struct usb_host_endpoint *bulk_out_ep;
653 struct usb_host_endpoint *bulk_in_ep;
654 struct hci_dev *hdev;
Marcel Holtmann9c724352006-07-06 15:45:23 +0200655 struct bfusb_data *data;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700656
657 BT_DBG("intf %p id %p", intf, id);
658
659 if (ignore)
660 return -ENODEV;
661
662 /* Check number of endpoints */
663 if (intf->cur_altsetting->desc.bNumEndpoints < 2)
664 return -EIO;
665
666 bulk_out_ep = &intf->cur_altsetting->endpoint[0];
667 bulk_in_ep = &intf->cur_altsetting->endpoint[1];
668
669 if (!bulk_out_ep || !bulk_in_ep) {
670 BT_ERR("Bulk endpoints not found");
671 goto done;
672 }
673
674 /* Initialize control structure and load firmware */
Marcel Holtmann9c724352006-07-06 15:45:23 +0200675 data = kzalloc(sizeof(struct bfusb_data), GFP_KERNEL);
676 if (!data) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700677 BT_ERR("Can't allocate memory for control structure");
678 goto done;
679 }
680
Marcel Holtmann9c724352006-07-06 15:45:23 +0200681 data->udev = udev;
682 data->bulk_in_ep = bulk_in_ep->desc.bEndpointAddress;
683 data->bulk_out_ep = bulk_out_ep->desc.bEndpointAddress;
684 data->bulk_pkt_size = le16_to_cpu(bulk_out_ep->desc.wMaxPacketSize);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700685
Marcel Holtmann9c724352006-07-06 15:45:23 +0200686 rwlock_init(&data->lock);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700687
Marcel Holtmann9c724352006-07-06 15:45:23 +0200688 data->reassembly = NULL;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700689
Marcel Holtmann9c724352006-07-06 15:45:23 +0200690 skb_queue_head_init(&data->transmit_q);
691 skb_queue_head_init(&data->pending_q);
692 skb_queue_head_init(&data->completed_q);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700693
694 if (request_firmware(&firmware, "bfubase.frm", &udev->dev) < 0) {
695 BT_ERR("Firmware request failed");
696 goto error;
697 }
698
699 BT_DBG("firmware data %p size %d", firmware->data, firmware->size);
700
Marcel Holtmann9c724352006-07-06 15:45:23 +0200701 if (bfusb_load_firmware(data, firmware->data, firmware->size) < 0) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700702 BT_ERR("Firmware loading failed");
703 goto release;
704 }
705
706 release_firmware(firmware);
707
708 /* Initialize and register HCI device */
709 hdev = hci_alloc_dev();
710 if (!hdev) {
711 BT_ERR("Can't allocate HCI device");
712 goto error;
713 }
714
Marcel Holtmann9c724352006-07-06 15:45:23 +0200715 data->hdev = hdev;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700716
717 hdev->type = HCI_USB;
Marcel Holtmann9c724352006-07-06 15:45:23 +0200718 hdev->driver_data = data;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700719 SET_HCIDEV_DEV(hdev, &intf->dev);
720
721 hdev->open = bfusb_open;
722 hdev->close = bfusb_close;
723 hdev->flush = bfusb_flush;
724 hdev->send = bfusb_send_frame;
725 hdev->destruct = bfusb_destruct;
726 hdev->ioctl = bfusb_ioctl;
727
728 hdev->owner = THIS_MODULE;
729
730 if (hci_register_dev(hdev) < 0) {
731 BT_ERR("Can't register HCI device");
732 hci_free_dev(hdev);
733 goto error;
734 }
735
Marcel Holtmann9c724352006-07-06 15:45:23 +0200736 usb_set_intfdata(intf, data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700737
738 return 0;
739
740release:
741 release_firmware(firmware);
742
743error:
Marcel Holtmann9c724352006-07-06 15:45:23 +0200744 kfree(data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700745
746done:
747 return -EIO;
748}
749
750static void bfusb_disconnect(struct usb_interface *intf)
751{
Marcel Holtmann9c724352006-07-06 15:45:23 +0200752 struct bfusb_data *data = usb_get_intfdata(intf);
753 struct hci_dev *hdev = data->hdev;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700754
755 BT_DBG("intf %p", intf);
756
757 if (!hdev)
758 return;
759
760 usb_set_intfdata(intf, NULL);
761
762 bfusb_close(hdev);
763
764 if (hci_unregister_dev(hdev) < 0)
765 BT_ERR("Can't unregister HCI device %s", hdev->name);
766
767 hci_free_dev(hdev);
768}
769
770static struct usb_driver bfusb_driver = {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700771 .name = "bfusb",
772 .probe = bfusb_probe,
773 .disconnect = bfusb_disconnect,
774 .id_table = bfusb_table,
775};
776
777static int __init bfusb_init(void)
778{
779 int err;
780
781 BT_INFO("BlueFRITZ! USB driver ver %s", VERSION);
782
Marcel Holtmann9c724352006-07-06 15:45:23 +0200783 err = usb_register(&bfusb_driver);
784 if (err < 0)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700785 BT_ERR("Failed to register BlueFRITZ! USB driver");
786
787 return err;
788}
789
790static void __exit bfusb_exit(void)
791{
792 usb_deregister(&bfusb_driver);
793}
794
795module_init(bfusb_init);
796module_exit(bfusb_exit);
797
798module_param(ignore, bool, 0644);
799MODULE_PARM_DESC(ignore, "Ignore devices from the matching table");
800
801MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
802MODULE_DESCRIPTION("BlueFRITZ! USB driver ver " VERSION);
803MODULE_VERSION(VERSION);
804MODULE_LICENSE("GPL");