blob: 005919ab043c16bb4e699b4f58ee5a4fdbd94c6e [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001/*
2 *
3 * AVM BlueFRITZ! USB driver
4 *
Marcel Holtmann9c724352006-07-06 15:45:23 +02005 * Copyright (C) 2003-2006 Marcel Holtmann <marcel@holtmann.org>
Linus Torvalds1da177e2005-04-16 15:20:36 -07006 *
7 *
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License as published by
10 * the Free Software Foundation; either version 2 of the License, or
11 * (at your option) any later version.
12 *
13 * This program is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 * GNU General Public License for more details.
17 *
18 * You should have received a copy of the GNU General Public License
19 * along with this program; if not, write to the Free Software
20 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
21 *
22 */
23
Linus Torvalds1da177e2005-04-16 15:20:36 -070024#include <linux/module.h>
25
26#include <linux/kernel.h>
27#include <linux/init.h>
28#include <linux/slab.h>
29#include <linux/types.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070030#include <linux/errno.h>
31#include <linux/skbuff.h>
32
33#include <linux/device.h>
34#include <linux/firmware.h>
35
36#include <linux/usb.h>
37
38#include <net/bluetooth/bluetooth.h>
39#include <net/bluetooth/hci_core.h>
40
Marcel Holtmann943d56b2008-08-07 22:26:55 +020041#define VERSION "1.2"
Linus Torvalds1da177e2005-04-16 15:20:36 -070042
43static struct usb_driver bfusb_driver;
44
45static struct usb_device_id bfusb_table[] = {
46 /* AVM BlueFRITZ! USB */
47 { USB_DEVICE(0x057c, 0x2200) },
48
49 { } /* Terminating entry */
50};
51
52MODULE_DEVICE_TABLE(usb, bfusb_table);
53
Linus Torvalds1da177e2005-04-16 15:20:36 -070054#define BFUSB_MAX_BLOCK_SIZE 256
55
56#define BFUSB_BLOCK_TIMEOUT 3000
57
58#define BFUSB_TX_PROCESS 1
59#define BFUSB_TX_WAKEUP 2
60
61#define BFUSB_MAX_BULK_TX 2
62#define BFUSB_MAX_BULK_RX 2
63
Marcel Holtmann9c724352006-07-06 15:45:23 +020064struct bfusb_data {
Linus Torvalds1da177e2005-04-16 15:20:36 -070065 struct hci_dev *hdev;
66
67 unsigned long state;
68
69 struct usb_device *udev;
70
71 unsigned int bulk_in_ep;
72 unsigned int bulk_out_ep;
73 unsigned int bulk_pkt_size;
74
75 rwlock_t lock;
76
77 struct sk_buff_head transmit_q;
78
79 struct sk_buff *reassembly;
80
81 atomic_t pending_tx;
82 struct sk_buff_head pending_q;
83 struct sk_buff_head completed_q;
84};
85
Marcel Holtmann9c724352006-07-06 15:45:23 +020086struct bfusb_data_scb {
Linus Torvalds1da177e2005-04-16 15:20:36 -070087 struct urb *urb;
88};
89
David Howells7d12e782006-10-05 14:55:46 +010090static void bfusb_tx_complete(struct urb *urb);
91static void bfusb_rx_complete(struct urb *urb);
Linus Torvalds1da177e2005-04-16 15:20:36 -070092
Marcel Holtmann9c724352006-07-06 15:45:23 +020093static struct urb *bfusb_get_completed(struct bfusb_data *data)
Linus Torvalds1da177e2005-04-16 15:20:36 -070094{
95 struct sk_buff *skb;
96 struct urb *urb = NULL;
97
Marcel Holtmann9c724352006-07-06 15:45:23 +020098 BT_DBG("bfusb %p", data);
Linus Torvalds1da177e2005-04-16 15:20:36 -070099
Marcel Holtmann9c724352006-07-06 15:45:23 +0200100 skb = skb_dequeue(&data->completed_q);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700101 if (skb) {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200102 urb = ((struct bfusb_data_scb *) skb->cb)->urb;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700103 kfree_skb(skb);
104 }
105
106 return urb;
107}
108
Marcel Holtmann9c724352006-07-06 15:45:23 +0200109static void bfusb_unlink_urbs(struct bfusb_data *data)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700110{
111 struct sk_buff *skb;
112 struct urb *urb;
113
Marcel Holtmann9c724352006-07-06 15:45:23 +0200114 BT_DBG("bfusb %p", data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700115
Marcel Holtmann9c724352006-07-06 15:45:23 +0200116 while ((skb = skb_dequeue(&data->pending_q))) {
117 urb = ((struct bfusb_data_scb *) skb->cb)->urb;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700118 usb_kill_urb(urb);
Marcel Holtmann9c724352006-07-06 15:45:23 +0200119 skb_queue_tail(&data->completed_q, skb);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700120 }
121
Marcel Holtmann9c724352006-07-06 15:45:23 +0200122 while ((urb = bfusb_get_completed(data)))
Linus Torvalds1da177e2005-04-16 15:20:36 -0700123 usb_free_urb(urb);
124}
125
Marcel Holtmann9c724352006-07-06 15:45:23 +0200126static int bfusb_send_bulk(struct bfusb_data *data, struct sk_buff *skb)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700127{
Marcel Holtmann9c724352006-07-06 15:45:23 +0200128 struct bfusb_data_scb *scb = (void *) skb->cb;
129 struct urb *urb = bfusb_get_completed(data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700130 int err, pipe;
131
Marcel Holtmann9c724352006-07-06 15:45:23 +0200132 BT_DBG("bfusb %p skb %p len %d", data, skb, skb->len);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700133
134 if (!urb && !(urb = usb_alloc_urb(0, GFP_ATOMIC)))
135 return -ENOMEM;
136
Marcel Holtmann9c724352006-07-06 15:45:23 +0200137 pipe = usb_sndbulkpipe(data->udev, data->bulk_out_ep);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700138
Marcel Holtmann9c724352006-07-06 15:45:23 +0200139 usb_fill_bulk_urb(urb, data->udev, pipe, skb->data, skb->len,
Linus Torvalds1da177e2005-04-16 15:20:36 -0700140 bfusb_tx_complete, skb);
141
142 scb->urb = urb;
143
Marcel Holtmann9c724352006-07-06 15:45:23 +0200144 skb_queue_tail(&data->pending_q, skb);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700145
146 err = usb_submit_urb(urb, GFP_ATOMIC);
147 if (err) {
148 BT_ERR("%s bulk tx submit failed urb %p err %d",
Marcel Holtmann9c724352006-07-06 15:45:23 +0200149 data->hdev->name, urb, err);
150 skb_unlink(skb, &data->pending_q);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700151 usb_free_urb(urb);
152 } else
Marcel Holtmann9c724352006-07-06 15:45:23 +0200153 atomic_inc(&data->pending_tx);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700154
155 return err;
156}
157
Marcel Holtmann9c724352006-07-06 15:45:23 +0200158static void bfusb_tx_wakeup(struct bfusb_data *data)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700159{
160 struct sk_buff *skb;
161
Marcel Holtmann9c724352006-07-06 15:45:23 +0200162 BT_DBG("bfusb %p", data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700163
Marcel Holtmann9c724352006-07-06 15:45:23 +0200164 if (test_and_set_bit(BFUSB_TX_PROCESS, &data->state)) {
165 set_bit(BFUSB_TX_WAKEUP, &data->state);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700166 return;
167 }
168
169 do {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200170 clear_bit(BFUSB_TX_WAKEUP, &data->state);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700171
Marcel Holtmann9c724352006-07-06 15:45:23 +0200172 while ((atomic_read(&data->pending_tx) < BFUSB_MAX_BULK_TX) &&
173 (skb = skb_dequeue(&data->transmit_q))) {
174 if (bfusb_send_bulk(data, skb) < 0) {
175 skb_queue_head(&data->transmit_q, skb);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700176 break;
177 }
178 }
179
Marcel Holtmann9c724352006-07-06 15:45:23 +0200180 } while (test_bit(BFUSB_TX_WAKEUP, &data->state));
Linus Torvalds1da177e2005-04-16 15:20:36 -0700181
Marcel Holtmann9c724352006-07-06 15:45:23 +0200182 clear_bit(BFUSB_TX_PROCESS, &data->state);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700183}
184
David Howells7d12e782006-10-05 14:55:46 +0100185static void bfusb_tx_complete(struct urb *urb)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700186{
187 struct sk_buff *skb = (struct sk_buff *) urb->context;
Marcel Holtmann9c724352006-07-06 15:45:23 +0200188 struct bfusb_data *data = (struct bfusb_data *) skb->dev;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700189
Marcel Holtmann9c724352006-07-06 15:45:23 +0200190 BT_DBG("bfusb %p urb %p skb %p len %d", data, urb, skb, skb->len);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700191
Marcel Holtmann9c724352006-07-06 15:45:23 +0200192 atomic_dec(&data->pending_tx);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700193
Marcel Holtmann9c724352006-07-06 15:45:23 +0200194 if (!test_bit(HCI_RUNNING, &data->hdev->flags))
Linus Torvalds1da177e2005-04-16 15:20:36 -0700195 return;
196
197 if (!urb->status)
Marcel Holtmann9c724352006-07-06 15:45:23 +0200198 data->hdev->stat.byte_tx += skb->len;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700199 else
Marcel Holtmann9c724352006-07-06 15:45:23 +0200200 data->hdev->stat.err_tx++;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700201
Marcel Holtmann9c724352006-07-06 15:45:23 +0200202 read_lock(&data->lock);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700203
Marcel Holtmann9c724352006-07-06 15:45:23 +0200204 skb_unlink(skb, &data->pending_q);
205 skb_queue_tail(&data->completed_q, skb);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700206
Marcel Holtmann9c724352006-07-06 15:45:23 +0200207 bfusb_tx_wakeup(data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700208
Marcel Holtmann9c724352006-07-06 15:45:23 +0200209 read_unlock(&data->lock);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700210}
211
212
Marcel Holtmann9c724352006-07-06 15:45:23 +0200213static int bfusb_rx_submit(struct bfusb_data *data, struct urb *urb)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700214{
Marcel Holtmann9c724352006-07-06 15:45:23 +0200215 struct bfusb_data_scb *scb;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700216 struct sk_buff *skb;
217 int err, pipe, size = HCI_MAX_FRAME_SIZE + 32;
218
Marcel Holtmanna418b892008-11-30 12:17:28 +0100219 BT_DBG("bfusb %p urb %p", data, urb);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700220
221 if (!urb && !(urb = usb_alloc_urb(0, GFP_ATOMIC)))
222 return -ENOMEM;
223
Marcel Holtmann9c724352006-07-06 15:45:23 +0200224 skb = bt_skb_alloc(size, GFP_ATOMIC);
225 if (!skb) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700226 usb_free_urb(urb);
227 return -ENOMEM;
228 }
229
Marcel Holtmann9c724352006-07-06 15:45:23 +0200230 skb->dev = (void *) data;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700231
Marcel Holtmann9c724352006-07-06 15:45:23 +0200232 scb = (struct bfusb_data_scb *) skb->cb;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700233 scb->urb = urb;
234
Marcel Holtmann9c724352006-07-06 15:45:23 +0200235 pipe = usb_rcvbulkpipe(data->udev, data->bulk_in_ep);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700236
Marcel Holtmann9c724352006-07-06 15:45:23 +0200237 usb_fill_bulk_urb(urb, data->udev, pipe, skb->data, size,
Linus Torvalds1da177e2005-04-16 15:20:36 -0700238 bfusb_rx_complete, skb);
239
Marcel Holtmann9c724352006-07-06 15:45:23 +0200240 skb_queue_tail(&data->pending_q, skb);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700241
242 err = usb_submit_urb(urb, GFP_ATOMIC);
243 if (err) {
244 BT_ERR("%s bulk rx submit failed urb %p err %d",
Marcel Holtmann9c724352006-07-06 15:45:23 +0200245 data->hdev->name, urb, err);
246 skb_unlink(skb, &data->pending_q);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700247 kfree_skb(skb);
248 usb_free_urb(urb);
249 }
250
251 return err;
252}
253
Marcel Holtmann9c724352006-07-06 15:45:23 +0200254static inline int bfusb_recv_block(struct bfusb_data *data, int hdr, unsigned char *buf, int len)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700255{
Marcel Holtmann9c724352006-07-06 15:45:23 +0200256 BT_DBG("bfusb %p hdr 0x%02x data %p len %d", data, hdr, buf, len);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700257
258 if (hdr & 0x10) {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200259 BT_ERR("%s error in block", data->hdev->name);
Wei Yongjunb1fb0682009-02-25 18:09:33 +0800260 kfree_skb(data->reassembly);
Marcel Holtmann9c724352006-07-06 15:45:23 +0200261 data->reassembly = NULL;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700262 return -EIO;
263 }
264
265 if (hdr & 0x04) {
266 struct sk_buff *skb;
267 unsigned char pkt_type;
268 int pkt_len = 0;
269
Marcel Holtmann9c724352006-07-06 15:45:23 +0200270 if (data->reassembly) {
271 BT_ERR("%s unexpected start block", data->hdev->name);
272 kfree_skb(data->reassembly);
273 data->reassembly = NULL;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700274 }
275
276 if (len < 1) {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200277 BT_ERR("%s no packet type found", data->hdev->name);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700278 return -EPROTO;
279 }
280
Marcel Holtmann9c724352006-07-06 15:45:23 +0200281 pkt_type = *buf++; len--;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700282
283 switch (pkt_type) {
284 case HCI_EVENT_PKT:
285 if (len >= HCI_EVENT_HDR_SIZE) {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200286 struct hci_event_hdr *hdr = (struct hci_event_hdr *) buf;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700287 pkt_len = HCI_EVENT_HDR_SIZE + hdr->plen;
288 } else {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200289 BT_ERR("%s event block is too short", data->hdev->name);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700290 return -EILSEQ;
291 }
292 break;
293
294 case HCI_ACLDATA_PKT:
295 if (len >= HCI_ACL_HDR_SIZE) {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200296 struct hci_acl_hdr *hdr = (struct hci_acl_hdr *) buf;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700297 pkt_len = HCI_ACL_HDR_SIZE + __le16_to_cpu(hdr->dlen);
298 } else {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200299 BT_ERR("%s data block is too short", data->hdev->name);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700300 return -EILSEQ;
301 }
302 break;
303
304 case HCI_SCODATA_PKT:
305 if (len >= HCI_SCO_HDR_SIZE) {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200306 struct hci_sco_hdr *hdr = (struct hci_sco_hdr *) buf;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700307 pkt_len = HCI_SCO_HDR_SIZE + hdr->dlen;
308 } else {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200309 BT_ERR("%s audio block is too short", data->hdev->name);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700310 return -EILSEQ;
311 }
312 break;
313 }
314
315 skb = bt_skb_alloc(pkt_len, GFP_ATOMIC);
316 if (!skb) {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200317 BT_ERR("%s no memory for the packet", data->hdev->name);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700318 return -ENOMEM;
319 }
320
Marcel Holtmann9c724352006-07-06 15:45:23 +0200321 skb->dev = (void *) data->hdev;
Marcel Holtmann0d48d932005-08-09 20:30:28 -0700322 bt_cb(skb)->pkt_type = pkt_type;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700323
Marcel Holtmann9c724352006-07-06 15:45:23 +0200324 data->reassembly = skb;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700325 } else {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200326 if (!data->reassembly) {
327 BT_ERR("%s unexpected continuation block", data->hdev->name);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700328 return -EIO;
329 }
330 }
331
332 if (len > 0)
Marcel Holtmann9c724352006-07-06 15:45:23 +0200333 memcpy(skb_put(data->reassembly, len), buf, len);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700334
335 if (hdr & 0x08) {
Marcel Holtmann9c724352006-07-06 15:45:23 +0200336 hci_recv_frame(data->reassembly);
337 data->reassembly = NULL;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700338 }
339
340 return 0;
341}
342
David Howells7d12e782006-10-05 14:55:46 +0100343static void bfusb_rx_complete(struct urb *urb)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700344{
345 struct sk_buff *skb = (struct sk_buff *) urb->context;
Marcel Holtmann9c724352006-07-06 15:45:23 +0200346 struct bfusb_data *data = (struct bfusb_data *) skb->dev;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700347 unsigned char *buf = urb->transfer_buffer;
348 int count = urb->actual_length;
349 int err, hdr, len;
350
Marcel Holtmanna418b892008-11-30 12:17:28 +0100351 BT_DBG("bfusb %p urb %p skb %p len %d", data, urb, skb, skb->len);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700352
Marcel Holtmann9c724352006-07-06 15:45:23 +0200353 read_lock(&data->lock);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700354
Marcel Holtmann9c724352006-07-06 15:45:23 +0200355 if (!test_bit(HCI_RUNNING, &data->hdev->flags))
Linus Torvalds1da177e2005-04-16 15:20:36 -0700356 goto unlock;
357
358 if (urb->status || !count)
359 goto resubmit;
360
Marcel Holtmann9c724352006-07-06 15:45:23 +0200361 data->hdev->stat.byte_rx += count;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700362
363 skb_put(skb, count);
364
365 while (count) {
366 hdr = buf[0] | (buf[1] << 8);
367
368 if (hdr & 0x4000) {
369 len = 0;
370 count -= 2;
371 buf += 2;
372 } else {
373 len = (buf[2] == 0) ? 256 : buf[2];
374 count -= 3;
375 buf += 3;
376 }
377
378 if (count < len) {
379 BT_ERR("%s block extends over URB buffer ranges",
Marcel Holtmann9c724352006-07-06 15:45:23 +0200380 data->hdev->name);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700381 }
382
383 if ((hdr & 0xe1) == 0xc1)
Marcel Holtmann9c724352006-07-06 15:45:23 +0200384 bfusb_recv_block(data, hdr, buf, len);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700385
386 count -= len;
387 buf += len;
388 }
389
Marcel Holtmann9c724352006-07-06 15:45:23 +0200390 skb_unlink(skb, &data->pending_q);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700391 kfree_skb(skb);
392
Marcel Holtmann9c724352006-07-06 15:45:23 +0200393 bfusb_rx_submit(data, urb);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700394
Marcel Holtmann9c724352006-07-06 15:45:23 +0200395 read_unlock(&data->lock);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700396
397 return;
398
399resubmit:
Marcel Holtmann9c724352006-07-06 15:45:23 +0200400 urb->dev = data->udev;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700401
402 err = usb_submit_urb(urb, GFP_ATOMIC);
403 if (err) {
404 BT_ERR("%s bulk resubmit failed urb %p err %d",
Marcel Holtmann9c724352006-07-06 15:45:23 +0200405 data->hdev->name, urb, err);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700406 }
407
408unlock:
Marcel Holtmann9c724352006-07-06 15:45:23 +0200409 read_unlock(&data->lock);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700410}
411
Linus Torvalds1da177e2005-04-16 15:20:36 -0700412static int bfusb_open(struct hci_dev *hdev)
413{
Marcel Holtmann9c724352006-07-06 15:45:23 +0200414 struct bfusb_data *data = hdev->driver_data;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700415 unsigned long flags;
416 int i, err;
417
Marcel Holtmann9c724352006-07-06 15:45:23 +0200418 BT_DBG("hdev %p bfusb %p", hdev, data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700419
420 if (test_and_set_bit(HCI_RUNNING, &hdev->flags))
421 return 0;
422
Marcel Holtmann9c724352006-07-06 15:45:23 +0200423 write_lock_irqsave(&data->lock, flags);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700424
Marcel Holtmann9c724352006-07-06 15:45:23 +0200425 err = bfusb_rx_submit(data, NULL);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700426 if (!err) {
427 for (i = 1; i < BFUSB_MAX_BULK_RX; i++)
Marcel Holtmann9c724352006-07-06 15:45:23 +0200428 bfusb_rx_submit(data, NULL);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700429 } else {
430 clear_bit(HCI_RUNNING, &hdev->flags);
431 }
432
Marcel Holtmann9c724352006-07-06 15:45:23 +0200433 write_unlock_irqrestore(&data->lock, flags);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700434
435 return err;
436}
437
438static int bfusb_flush(struct hci_dev *hdev)
439{
Marcel Holtmann9c724352006-07-06 15:45:23 +0200440 struct bfusb_data *data = hdev->driver_data;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700441
Marcel Holtmann9c724352006-07-06 15:45:23 +0200442 BT_DBG("hdev %p bfusb %p", hdev, data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700443
Marcel Holtmann9c724352006-07-06 15:45:23 +0200444 skb_queue_purge(&data->transmit_q);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700445
446 return 0;
447}
448
449static int bfusb_close(struct hci_dev *hdev)
450{
Marcel Holtmann9c724352006-07-06 15:45:23 +0200451 struct bfusb_data *data = hdev->driver_data;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700452 unsigned long flags;
453
Marcel Holtmann9c724352006-07-06 15:45:23 +0200454 BT_DBG("hdev %p bfusb %p", hdev, data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700455
456 if (!test_and_clear_bit(HCI_RUNNING, &hdev->flags))
457 return 0;
458
Marcel Holtmann9c724352006-07-06 15:45:23 +0200459 write_lock_irqsave(&data->lock, flags);
460 write_unlock_irqrestore(&data->lock, flags);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700461
Marcel Holtmann9c724352006-07-06 15:45:23 +0200462 bfusb_unlink_urbs(data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700463 bfusb_flush(hdev);
464
465 return 0;
466}
467
468static int bfusb_send_frame(struct sk_buff *skb)
469{
470 struct hci_dev *hdev = (struct hci_dev *) skb->dev;
Marcel Holtmann9c724352006-07-06 15:45:23 +0200471 struct bfusb_data *data;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700472 struct sk_buff *nskb;
473 unsigned char buf[3];
474 int sent = 0, size, count;
475
Marcel Holtmann0d48d932005-08-09 20:30:28 -0700476 BT_DBG("hdev %p skb %p type %d len %d", hdev, skb, bt_cb(skb)->pkt_type, skb->len);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700477
478 if (!hdev) {
479 BT_ERR("Frame for unknown HCI device (hdev=NULL)");
480 return -ENODEV;
481 }
482
483 if (!test_bit(HCI_RUNNING, &hdev->flags))
484 return -EBUSY;
485
Marcel Holtmann9c724352006-07-06 15:45:23 +0200486 data = hdev->driver_data;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700487
Marcel Holtmann0d48d932005-08-09 20:30:28 -0700488 switch (bt_cb(skb)->pkt_type) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700489 case HCI_COMMAND_PKT:
490 hdev->stat.cmd_tx++;
491 break;
492 case HCI_ACLDATA_PKT:
493 hdev->stat.acl_tx++;
494 break;
495 case HCI_SCODATA_PKT:
496 hdev->stat.sco_tx++;
497 break;
498 };
499
500 /* Prepend skb with frame type */
Marcel Holtmann0d48d932005-08-09 20:30:28 -0700501 memcpy(skb_push(skb, 1), &bt_cb(skb)->pkt_type, 1);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700502
503 count = skb->len;
504
505 /* Max HCI frame size seems to be 1511 + 1 */
Marcel Holtmann9c724352006-07-06 15:45:23 +0200506 nskb = bt_skb_alloc(count + 32, GFP_ATOMIC);
507 if (!nskb) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700508 BT_ERR("Can't allocate memory for new packet");
509 return -ENOMEM;
510 }
511
Marcel Holtmann9c724352006-07-06 15:45:23 +0200512 nskb->dev = (void *) data;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700513
514 while (count) {
515 size = min_t(uint, count, BFUSB_MAX_BLOCK_SIZE);
516
517 buf[0] = 0xc1 | ((sent == 0) ? 0x04 : 0) | ((count == size) ? 0x08 : 0);
518 buf[1] = 0x00;
519 buf[2] = (size == BFUSB_MAX_BLOCK_SIZE) ? 0 : size;
520
521 memcpy(skb_put(nskb, 3), buf, 3);
Arnaldo Carvalho de Melod626f622007-03-27 18:55:52 -0300522 skb_copy_from_linear_data_offset(skb, sent, skb_put(nskb, size), size);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700523
524 sent += size;
525 count -= size;
526 }
527
528 /* Don't send frame with multiple size of bulk max packet */
Marcel Holtmann9c724352006-07-06 15:45:23 +0200529 if ((nskb->len % data->bulk_pkt_size) == 0) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700530 buf[0] = 0xdd;
531 buf[1] = 0x00;
532 memcpy(skb_put(nskb, 2), buf, 2);
533 }
534
Marcel Holtmann9c724352006-07-06 15:45:23 +0200535 read_lock(&data->lock);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700536
Marcel Holtmann9c724352006-07-06 15:45:23 +0200537 skb_queue_tail(&data->transmit_q, nskb);
538 bfusb_tx_wakeup(data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700539
Marcel Holtmann9c724352006-07-06 15:45:23 +0200540 read_unlock(&data->lock);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700541
542 kfree_skb(skb);
543
544 return 0;
545}
546
547static void bfusb_destruct(struct hci_dev *hdev)
548{
Marcel Holtmann9c724352006-07-06 15:45:23 +0200549 struct bfusb_data *data = hdev->driver_data;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700550
Marcel Holtmann9c724352006-07-06 15:45:23 +0200551 BT_DBG("hdev %p bfusb %p", hdev, data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700552
Marcel Holtmann9c724352006-07-06 15:45:23 +0200553 kfree(data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700554}
555
556static int bfusb_ioctl(struct hci_dev *hdev, unsigned int cmd, unsigned long arg)
557{
558 return -ENOIOCTLCMD;
559}
560
David Woodhouse8187b4f2008-05-23 23:56:51 +0100561static int bfusb_load_firmware(struct bfusb_data *data,
562 const unsigned char *firmware, int count)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700563{
564 unsigned char *buf;
565 int err, pipe, len, size, sent = 0;
566
Marcel Holtmann9c724352006-07-06 15:45:23 +0200567 BT_DBG("bfusb %p udev %p", data, data->udev);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700568
569 BT_INFO("BlueFRITZ! USB loading firmware");
570
Marcel Holtmann9c724352006-07-06 15:45:23 +0200571 pipe = usb_sndctrlpipe(data->udev, 0);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700572
Marcel Holtmann9c724352006-07-06 15:45:23 +0200573 if (usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
Linus Torvalds1da177e2005-04-16 15:20:36 -0700574 0, 1, 0, NULL, 0, USB_CTRL_SET_TIMEOUT) < 0) {
575 BT_ERR("Can't change to loading configuration");
576 return -EBUSY;
577 }
578
Marcel Holtmann9c724352006-07-06 15:45:23 +0200579 data->udev->toggle[0] = data->udev->toggle[1] = 0;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700580
581 buf = kmalloc(BFUSB_MAX_BLOCK_SIZE + 3, GFP_ATOMIC);
582 if (!buf) {
583 BT_ERR("Can't allocate memory chunk for firmware");
584 return -ENOMEM;
585 }
586
Marcel Holtmann9c724352006-07-06 15:45:23 +0200587 pipe = usb_sndbulkpipe(data->udev, data->bulk_out_ep);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700588
589 while (count) {
590 size = min_t(uint, count, BFUSB_MAX_BLOCK_SIZE + 3);
591
592 memcpy(buf, firmware + sent, size);
593
Marcel Holtmann9c724352006-07-06 15:45:23 +0200594 err = usb_bulk_msg(data->udev, pipe, buf, size,
Linus Torvalds1da177e2005-04-16 15:20:36 -0700595 &len, BFUSB_BLOCK_TIMEOUT);
596
597 if (err || (len != size)) {
598 BT_ERR("Error in firmware loading");
599 goto error;
600 }
601
602 sent += size;
603 count -= size;
604 }
605
Marcel Holtmann9c724352006-07-06 15:45:23 +0200606 err = usb_bulk_msg(data->udev, pipe, NULL, 0,
607 &len, BFUSB_BLOCK_TIMEOUT);
608 if (err < 0) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700609 BT_ERR("Error in null packet request");
610 goto error;
611 }
612
Marcel Holtmann9c724352006-07-06 15:45:23 +0200613 pipe = usb_sndctrlpipe(data->udev, 0);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700614
Marcel Holtmann9c724352006-07-06 15:45:23 +0200615 err = usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
616 0, 2, 0, NULL, 0, USB_CTRL_SET_TIMEOUT);
617 if (err < 0) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700618 BT_ERR("Can't change to running configuration");
619 goto error;
620 }
621
Marcel Holtmann9c724352006-07-06 15:45:23 +0200622 data->udev->toggle[0] = data->udev->toggle[1] = 0;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700623
624 BT_INFO("BlueFRITZ! USB device ready");
625
626 kfree(buf);
627 return 0;
628
629error:
630 kfree(buf);
631
Marcel Holtmann9c724352006-07-06 15:45:23 +0200632 pipe = usb_sndctrlpipe(data->udev, 0);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700633
Marcel Holtmann9c724352006-07-06 15:45:23 +0200634 usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
Linus Torvalds1da177e2005-04-16 15:20:36 -0700635 0, 0, 0, NULL, 0, USB_CTRL_SET_TIMEOUT);
636
637 return err;
638}
639
640static int bfusb_probe(struct usb_interface *intf, const struct usb_device_id *id)
641{
642 const struct firmware *firmware;
643 struct usb_device *udev = interface_to_usbdev(intf);
644 struct usb_host_endpoint *bulk_out_ep;
645 struct usb_host_endpoint *bulk_in_ep;
646 struct hci_dev *hdev;
Marcel Holtmann9c724352006-07-06 15:45:23 +0200647 struct bfusb_data *data;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700648
649 BT_DBG("intf %p id %p", intf, id);
650
Linus Torvalds1da177e2005-04-16 15:20:36 -0700651 /* Check number of endpoints */
652 if (intf->cur_altsetting->desc.bNumEndpoints < 2)
653 return -EIO;
654
655 bulk_out_ep = &intf->cur_altsetting->endpoint[0];
656 bulk_in_ep = &intf->cur_altsetting->endpoint[1];
657
658 if (!bulk_out_ep || !bulk_in_ep) {
659 BT_ERR("Bulk endpoints not found");
660 goto done;
661 }
662
663 /* Initialize control structure and load firmware */
Marcel Holtmann9c724352006-07-06 15:45:23 +0200664 data = kzalloc(sizeof(struct bfusb_data), GFP_KERNEL);
665 if (!data) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700666 BT_ERR("Can't allocate memory for control structure");
667 goto done;
668 }
669
Marcel Holtmann9c724352006-07-06 15:45:23 +0200670 data->udev = udev;
671 data->bulk_in_ep = bulk_in_ep->desc.bEndpointAddress;
672 data->bulk_out_ep = bulk_out_ep->desc.bEndpointAddress;
673 data->bulk_pkt_size = le16_to_cpu(bulk_out_ep->desc.wMaxPacketSize);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700674
Marcel Holtmann9c724352006-07-06 15:45:23 +0200675 rwlock_init(&data->lock);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700676
Marcel Holtmann9c724352006-07-06 15:45:23 +0200677 data->reassembly = NULL;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700678
Marcel Holtmann9c724352006-07-06 15:45:23 +0200679 skb_queue_head_init(&data->transmit_q);
680 skb_queue_head_init(&data->pending_q);
681 skb_queue_head_init(&data->completed_q);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700682
683 if (request_firmware(&firmware, "bfubase.frm", &udev->dev) < 0) {
684 BT_ERR("Firmware request failed");
685 goto error;
686 }
687
Marcel Holtmanna418b892008-11-30 12:17:28 +0100688 BT_DBG("firmware data %p size %zu", firmware->data, firmware->size);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700689
Marcel Holtmann9c724352006-07-06 15:45:23 +0200690 if (bfusb_load_firmware(data, firmware->data, firmware->size) < 0) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700691 BT_ERR("Firmware loading failed");
692 goto release;
693 }
694
695 release_firmware(firmware);
696
697 /* Initialize and register HCI device */
698 hdev = hci_alloc_dev();
699 if (!hdev) {
700 BT_ERR("Can't allocate HCI device");
701 goto error;
702 }
703
Marcel Holtmann9c724352006-07-06 15:45:23 +0200704 data->hdev = hdev;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700705
Marcel Holtmannc13854ce2010-02-08 15:27:07 +0100706 hdev->bus = HCI_USB;
Marcel Holtmann9c724352006-07-06 15:45:23 +0200707 hdev->driver_data = data;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700708 SET_HCIDEV_DEV(hdev, &intf->dev);
709
710 hdev->open = bfusb_open;
711 hdev->close = bfusb_close;
712 hdev->flush = bfusb_flush;
713 hdev->send = bfusb_send_frame;
714 hdev->destruct = bfusb_destruct;
715 hdev->ioctl = bfusb_ioctl;
716
717 hdev->owner = THIS_MODULE;
718
719 if (hci_register_dev(hdev) < 0) {
720 BT_ERR("Can't register HCI device");
721 hci_free_dev(hdev);
722 goto error;
723 }
724
Marcel Holtmann9c724352006-07-06 15:45:23 +0200725 usb_set_intfdata(intf, data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700726
727 return 0;
728
729release:
730 release_firmware(firmware);
731
732error:
Marcel Holtmann9c724352006-07-06 15:45:23 +0200733 kfree(data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700734
735done:
736 return -EIO;
737}
738
739static void bfusb_disconnect(struct usb_interface *intf)
740{
Marcel Holtmann9c724352006-07-06 15:45:23 +0200741 struct bfusb_data *data = usb_get_intfdata(intf);
742 struct hci_dev *hdev = data->hdev;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700743
744 BT_DBG("intf %p", intf);
745
746 if (!hdev)
747 return;
748
749 usb_set_intfdata(intf, NULL);
750
751 bfusb_close(hdev);
752
753 if (hci_unregister_dev(hdev) < 0)
754 BT_ERR("Can't unregister HCI device %s", hdev->name);
755
756 hci_free_dev(hdev);
757}
758
759static struct usb_driver bfusb_driver = {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700760 .name = "bfusb",
761 .probe = bfusb_probe,
762 .disconnect = bfusb_disconnect,
763 .id_table = bfusb_table,
764};
765
766static int __init bfusb_init(void)
767{
768 int err;
769
770 BT_INFO("BlueFRITZ! USB driver ver %s", VERSION);
771
Marcel Holtmann9c724352006-07-06 15:45:23 +0200772 err = usb_register(&bfusb_driver);
773 if (err < 0)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700774 BT_ERR("Failed to register BlueFRITZ! USB driver");
775
776 return err;
777}
778
779static void __exit bfusb_exit(void)
780{
781 usb_deregister(&bfusb_driver);
782}
783
784module_init(bfusb_init);
785module_exit(bfusb_exit);
786
Linus Torvalds1da177e2005-04-16 15:20:36 -0700787MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
788MODULE_DESCRIPTION("BlueFRITZ! USB driver ver " VERSION);
789MODULE_VERSION(VERSION);
790MODULE_LICENSE("GPL");
Marcel Holtmann23121192007-02-17 23:59:02 +0100791MODULE_FIRMWARE("bfubase.frm");