1 // SPDX-License-Identifier: GPL-2.0-only
3 * keyspan_remote: USB driver for the Keyspan DMR
5 * Copyright (C) 2005 Zymeta Corporation - Michael Downey (downey@zymeta.com)
7 * This driver has been put together with the support of Innosys, Inc.
8 * and Keyspan, Inc the manufacturers of the Keyspan USB DMR product.
11 #include <linux/kernel.h>
12 #include <linux/errno.h>
13 #include <linux/slab.h>
14 #include <linux/module.h>
15 #include <linux/usb/input.h>
17 /* Parameters that can be passed to the driver. */
19 module_param(debug
, int, 0444);
20 MODULE_PARM_DESC(debug
, "Enable extra debug messages and information");
22 /* Vendor and product ids */
23 #define USB_KEYSPAN_VENDOR_ID 0x06CD
24 #define USB_KEYSPAN_PRODUCT_UIA11 0x0202
26 /* Defines for converting the data from the remote. */
28 #define ZERO_MASK 0x1F /* 5 bits for a 0 */
30 #define ONE_MASK 0x3F /* 6 bits for a 1 */
32 #define SYNC_MASK 0x3FFF /* 14 bits for a SYNC sequence */
34 #define STOP_MASK 0x1F /* 5 bits for the STOP sequence */
37 #define RECV_SIZE 8 /* The UIA-11 type have a 8 byte limit. */
40 * Table that maps the 31 possible keycodes to input keys.
41 * Currently there are 15 and 17 button models so RESERVED codes
42 * are blank areas in the mapping.
44 static const unsigned short keyspan_key_table
[] = {
45 KEY_RESERVED
, /* 0 is just a place holder. */
79 /* table of devices that work with this driver */
80 static const struct usb_device_id keyspan_table
[] = {
81 { USB_DEVICE(USB_KEYSPAN_VENDOR_ID
, USB_KEYSPAN_PRODUCT_UIA11
) },
82 { } /* Terminating entry */
85 /* Structure to store all the real stuff that a remote sends to us. */
86 struct keyspan_message
{
92 /* Structure used for all the bit testing magic needed to be done. */
101 /* Structure to hold all of our driver specific stuff */
105 unsigned short keymap
[ARRAY_SIZE(keyspan_key_table
)];
106 struct usb_device
*udev
;
107 struct input_dev
*input
;
108 struct usb_interface
*interface
;
109 struct usb_endpoint_descriptor
*in_endpoint
;
113 unsigned char *in_buffer
;
115 /* variables used to parse messages from remote. */
116 struct bit_tester data
;
121 static struct usb_driver keyspan_driver
;
124 * Debug routine that prints out what we've received from the remote.
126 static void keyspan_print(struct usb_keyspan
* dev
) /*unsigned char* data)*/
128 char codes
[4 * RECV_SIZE
];
131 for (i
= 0; i
< RECV_SIZE
; i
++)
132 snprintf(codes
+ i
* 3, 4, "%02x ", dev
->in_buffer
[i
]);
134 dev_info(&dev
->udev
->dev
, "%s\n", codes
);
138 * Routine that manages the bit_tester structure. It makes sure that there are
139 * at least bits_needed bits loaded into the tester.
141 static int keyspan_load_tester(struct usb_keyspan
* dev
, int bits_needed
)
143 if (dev
->data
.bits_left
>= bits_needed
)
147 * Somehow we've missed the last message. The message will be repeated
148 * though so it's not too big a deal
150 if (dev
->data
.pos
>= dev
->data
.len
) {
151 dev_dbg(&dev
->interface
->dev
,
152 "%s - Error ran out of data. pos: %d, len: %d\n",
153 __func__
, dev
->data
.pos
, dev
->data
.len
);
157 /* Load as much as we can into the tester. */
158 while ((dev
->data
.bits_left
+ 7 < (sizeof(dev
->data
.tester
) * 8)) &&
159 (dev
->data
.pos
< dev
->data
.len
)) {
160 dev
->data
.tester
+= (dev
->data
.buffer
[dev
->data
.pos
++] << dev
->data
.bits_left
);
161 dev
->data
.bits_left
+= 8;
167 static void keyspan_report_button(struct usb_keyspan
*remote
, int button
, int press
)
169 struct input_dev
*input
= remote
->input
;
171 input_event(input
, EV_MSC
, MSC_SCAN
, button
);
172 input_report_key(input
, remote
->keymap
[button
], press
);
177 * Routine that handles all the logic needed to parse out the message from the remote.
179 static void keyspan_check_data(struct usb_keyspan
*remote
)
183 struct keyspan_message message
;
185 switch(remote
->stage
) {
188 * In stage 0 we want to find the start of a message. The remote sends a 0xFF as filler.
189 * So the first byte that isn't a FF should be the start of a new message.
191 for (i
= 0; i
< RECV_SIZE
&& remote
->in_buffer
[i
] == GAP
; ++i
);
194 memcpy(remote
->data
.buffer
, remote
->in_buffer
, RECV_SIZE
);
195 remote
->data
.len
= RECV_SIZE
;
196 remote
->data
.pos
= 0;
197 remote
->data
.tester
= 0;
198 remote
->data
.bits_left
= 0;
205 * Stage 1 we should have 16 bytes and should be able to detect a
206 * SYNC. The SYNC is 14 bits, 7 0's and then 7 1's.
208 memcpy(remote
->data
.buffer
+ remote
->data
.len
, remote
->in_buffer
, RECV_SIZE
);
209 remote
->data
.len
+= RECV_SIZE
;
212 while ((remote
->data
.bits_left
>= 14 || remote
->data
.pos
< remote
->data
.len
) && !found
) {
213 for (i
= 0; i
< 8; ++i
) {
214 if (keyspan_load_tester(remote
, 14) != 0) {
219 if ((remote
->data
.tester
& SYNC_MASK
) == SYNC
) {
220 remote
->data
.tester
= remote
->data
.tester
>> 14;
221 remote
->data
.bits_left
-= 14;
225 remote
->data
.tester
= remote
->data
.tester
>> 1;
226 --remote
->data
.bits_left
;
233 remote
->data
.len
= 0;
241 * Stage 2 we should have 24 bytes which will be enough for a full
242 * message. We need to parse out the system code, button code,
243 * toggle code, and stop.
245 memcpy(remote
->data
.buffer
+ remote
->data
.len
, remote
->in_buffer
, RECV_SIZE
);
246 remote
->data
.len
+= RECV_SIZE
;
249 for (i
= 0; i
< 9; i
++) {
250 keyspan_load_tester(remote
, 6);
252 if ((remote
->data
.tester
& ZERO_MASK
) == ZERO
) {
253 message
.system
= message
.system
<< 1;
254 remote
->data
.tester
= remote
->data
.tester
>> 5;
255 remote
->data
.bits_left
-= 5;
256 } else if ((remote
->data
.tester
& ONE_MASK
) == ONE
) {
257 message
.system
= (message
.system
<< 1) + 1;
258 remote
->data
.tester
= remote
->data
.tester
>> 6;
259 remote
->data
.bits_left
-= 6;
261 dev_err(&remote
->interface
->dev
,
262 "%s - Unknown sequence found in system data.\n",
270 for (i
= 0; i
< 5; i
++) {
271 keyspan_load_tester(remote
, 6);
273 if ((remote
->data
.tester
& ZERO_MASK
) == ZERO
) {
274 message
.button
= message
.button
<< 1;
275 remote
->data
.tester
= remote
->data
.tester
>> 5;
276 remote
->data
.bits_left
-= 5;
277 } else if ((remote
->data
.tester
& ONE_MASK
) == ONE
) {
278 message
.button
= (message
.button
<< 1) + 1;
279 remote
->data
.tester
= remote
->data
.tester
>> 6;
280 remote
->data
.bits_left
-= 6;
282 dev_err(&remote
->interface
->dev
,
283 "%s - Unknown sequence found in button data.\n",
290 keyspan_load_tester(remote
, 6);
291 if ((remote
->data
.tester
& ZERO_MASK
) == ZERO
) {
293 remote
->data
.tester
= remote
->data
.tester
>> 5;
294 remote
->data
.bits_left
-= 5;
295 } else if ((remote
->data
.tester
& ONE_MASK
) == ONE
) {
297 remote
->data
.tester
= remote
->data
.tester
>> 6;
298 remote
->data
.bits_left
-= 6;
300 dev_err(&remote
->interface
->dev
,
301 "%s - Error in message, invalid toggle.\n",
307 keyspan_load_tester(remote
, 5);
308 if ((remote
->data
.tester
& STOP_MASK
) == STOP
) {
309 remote
->data
.tester
= remote
->data
.tester
>> 5;
310 remote
->data
.bits_left
-= 5;
312 dev_err(&remote
->interface
->dev
,
313 "Bad message received, no stop bit found.\n");
316 dev_dbg(&remote
->interface
->dev
,
317 "%s found valid message: system: %d, button: %d, toggle: %d\n",
318 __func__
, message
.system
, message
.button
, message
.toggle
);
320 if (message
.toggle
!= remote
->toggle
) {
321 keyspan_report_button(remote
, message
.button
, 1);
322 keyspan_report_button(remote
, message
.button
, 0);
323 remote
->toggle
= message
.toggle
;
332 * Routine for sending all the initialization messages to the remote.
334 static int keyspan_setup(struct usb_device
* dev
)
338 retval
= usb_control_msg(dev
, usb_sndctrlpipe(dev
, 0),
339 0x11, 0x40, 0x5601, 0x0, NULL
, 0,
340 USB_CTRL_SET_TIMEOUT
);
342 dev_dbg(&dev
->dev
, "%s - failed to set bit rate due to error: %d\n",
347 retval
= usb_control_msg(dev
, usb_sndctrlpipe(dev
, 0),
348 0x44, 0x40, 0x0, 0x0, NULL
, 0,
349 USB_CTRL_SET_TIMEOUT
);
351 dev_dbg(&dev
->dev
, "%s - failed to set resume sensitivity due to error: %d\n",
356 retval
= usb_control_msg(dev
, usb_sndctrlpipe(dev
, 0),
357 0x22, 0x40, 0x0, 0x0, NULL
, 0,
358 USB_CTRL_SET_TIMEOUT
);
360 dev_dbg(&dev
->dev
, "%s - failed to turn receive on due to error: %d\n",
365 dev_dbg(&dev
->dev
, "%s - Setup complete.\n", __func__
);
370 * Routine used to handle a new message that has come in.
372 static void keyspan_irq_recv(struct urb
*urb
)
374 struct usb_keyspan
*dev
= urb
->context
;
377 /* Check our status in case we need to bail out early. */
378 switch (urb
->status
) {
382 /* Device went away so don't keep trying to read from it. */
395 keyspan_check_data(dev
);
398 retval
= usb_submit_urb(urb
, GFP_ATOMIC
);
400 dev_err(&dev
->interface
->dev
,
401 "%s - usb_submit_urb failed with result: %d\n",
405 static int keyspan_open(struct input_dev
*dev
)
407 struct usb_keyspan
*remote
= input_get_drvdata(dev
);
409 remote
->irq_urb
->dev
= remote
->udev
;
410 if (usb_submit_urb(remote
->irq_urb
, GFP_KERNEL
))
416 static void keyspan_close(struct input_dev
*dev
)
418 struct usb_keyspan
*remote
= input_get_drvdata(dev
);
420 usb_kill_urb(remote
->irq_urb
);
423 static struct usb_endpoint_descriptor
*keyspan_get_in_endpoint(struct usb_host_interface
*iface
)
426 struct usb_endpoint_descriptor
*endpoint
;
429 for (i
= 0; i
< iface
->desc
.bNumEndpoints
; ++i
) {
430 endpoint
= &iface
->endpoint
[i
].desc
;
432 if (usb_endpoint_is_int_in(endpoint
)) {
433 /* we found our interrupt in endpoint */
442 * Routine that sets up the driver to handle a specific USB device detected on the bus.
444 static int keyspan_probe(struct usb_interface
*interface
, const struct usb_device_id
*id
)
446 struct usb_device
*udev
= interface_to_usbdev(interface
);
447 struct usb_endpoint_descriptor
*endpoint
;
448 struct usb_keyspan
*remote
;
449 struct input_dev
*input_dev
;
452 endpoint
= keyspan_get_in_endpoint(interface
->cur_altsetting
);
456 remote
= kzalloc(sizeof(*remote
), GFP_KERNEL
);
457 input_dev
= input_allocate_device();
458 if (!remote
|| !input_dev
) {
464 remote
->input
= input_dev
;
465 remote
->interface
= interface
;
466 remote
->in_endpoint
= endpoint
;
467 remote
->toggle
= -1; /* Set to -1 so we will always not match the toggle from the first remote message. */
469 remote
->in_buffer
= usb_alloc_coherent(udev
, RECV_SIZE
, GFP_KERNEL
, &remote
->in_dma
);
470 if (!remote
->in_buffer
) {
475 remote
->irq_urb
= usb_alloc_urb(0, GFP_KERNEL
);
476 if (!remote
->irq_urb
) {
481 error
= keyspan_setup(udev
);
487 if (udev
->manufacturer
)
488 strscpy(remote
->name
, udev
->manufacturer
, sizeof(remote
->name
));
491 if (udev
->manufacturer
)
492 strlcat(remote
->name
, " ", sizeof(remote
->name
));
493 strlcat(remote
->name
, udev
->product
, sizeof(remote
->name
));
496 if (!strlen(remote
->name
))
497 snprintf(remote
->name
, sizeof(remote
->name
),
498 "USB Keyspan Remote %04x:%04x",
499 le16_to_cpu(udev
->descriptor
.idVendor
),
500 le16_to_cpu(udev
->descriptor
.idProduct
));
502 usb_make_path(udev
, remote
->phys
, sizeof(remote
->phys
));
503 strlcat(remote
->phys
, "/input0", sizeof(remote
->phys
));
504 memcpy(remote
->keymap
, keyspan_key_table
, sizeof(remote
->keymap
));
506 input_dev
->name
= remote
->name
;
507 input_dev
->phys
= remote
->phys
;
508 usb_to_input_id(udev
, &input_dev
->id
);
509 input_dev
->dev
.parent
= &interface
->dev
;
510 input_dev
->keycode
= remote
->keymap
;
511 input_dev
->keycodesize
= sizeof(unsigned short);
512 input_dev
->keycodemax
= ARRAY_SIZE(remote
->keymap
);
514 input_set_capability(input_dev
, EV_MSC
, MSC_SCAN
);
515 __set_bit(EV_KEY
, input_dev
->evbit
);
516 for (i
= 0; i
< ARRAY_SIZE(keyspan_key_table
); i
++)
517 __set_bit(keyspan_key_table
[i
], input_dev
->keybit
);
518 __clear_bit(KEY_RESERVED
, input_dev
->keybit
);
520 input_set_drvdata(input_dev
, remote
);
522 input_dev
->open
= keyspan_open
;
523 input_dev
->close
= keyspan_close
;
526 * Initialize the URB to access the device.
527 * The urb gets sent to the device in keyspan_open()
529 usb_fill_int_urb(remote
->irq_urb
,
531 usb_rcvintpipe(remote
->udev
, endpoint
->bEndpointAddress
),
532 remote
->in_buffer
, RECV_SIZE
, keyspan_irq_recv
, remote
,
533 endpoint
->bInterval
);
534 remote
->irq_urb
->transfer_dma
= remote
->in_dma
;
535 remote
->irq_urb
->transfer_flags
|= URB_NO_TRANSFER_DMA_MAP
;
537 /* we can register the device now, as it is ready */
538 error
= input_register_device(remote
->input
);
542 /* save our data pointer in this interface device */
543 usb_set_intfdata(interface
, remote
);
547 fail3
: usb_free_urb(remote
->irq_urb
);
548 fail2
: usb_free_coherent(udev
, RECV_SIZE
, remote
->in_buffer
, remote
->in_dma
);
549 fail1
: kfree(remote
);
550 input_free_device(input_dev
);
556 * Routine called when a device is disconnected from the USB.
558 static void keyspan_disconnect(struct usb_interface
*interface
)
560 struct usb_keyspan
*remote
;
562 remote
= usb_get_intfdata(interface
);
563 usb_set_intfdata(interface
, NULL
);
565 if (remote
) { /* We have a valid driver structure so clean up everything we allocated. */
566 input_unregister_device(remote
->input
);
567 usb_kill_urb(remote
->irq_urb
);
568 usb_free_urb(remote
->irq_urb
);
569 usb_free_coherent(remote
->udev
, RECV_SIZE
, remote
->in_buffer
, remote
->in_dma
);
575 * Standard driver set up sections
577 static struct usb_driver keyspan_driver
=
579 .name
= "keyspan_remote",
580 .probe
= keyspan_probe
,
581 .disconnect
= keyspan_disconnect
,
582 .id_table
= keyspan_table
585 module_usb_driver(keyspan_driver
);
587 MODULE_DEVICE_TABLE(usb
, keyspan_table
);
588 MODULE_AUTHOR("Michael Downey <downey@zymeta.com>");
589 MODULE_DESCRIPTION("Driver for the USB Keyspan remote control.");
590 MODULE_LICENSE("GPL");