?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
Linux v2.6.13
[linux-2.6/next.git] / drivers / bluetooth / hci_usb.c
blob657719b8254f6c61d119128dec4ac7772ff824a2
1 /*
2 HCI USB driver for Linux Bluetooth protocol stack (BlueZ)
3 Copyright (C) 2000-2001 Qualcomm Incorporated
4 Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
5
6 Copyright (C) 2003 Maxim Krasnyansky <maxk@qualcomm.com>
7
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License version 2 as
10 published by the Free Software Foundation;
11
12 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
13 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
14 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
15 IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
16 CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
17 WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
18 ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
19 OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
20
21 ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
22 COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
23 SOFTWARE IS DISCLAIMED.
24 */
25
26 /*
27 * Bluetooth HCI USB driver.
28 * Based on original USB Bluetooth driver for Linux kernel
29 * Copyright (c) 2000 Greg Kroah-Hartman <greg@kroah.com>
30 * Copyright (c) 2000 Mark Douglas Corner <mcorner@umich.edu>
31 *
32 */
33
34 #include <linux/config.h>
35 #include <linux/module.h>
36
37 #include <linux/kernel.h>
38 #include <linux/init.h>
39 #include <linux/sched.h>
40 #include <linux/unistd.h>
41 #include <linux/types.h>
42 #include <linux/interrupt.h>
43 #include <linux/moduleparam.h>
44
45 #include <linux/slab.h>
46 #include <linux/errno.h>
47 #include <linux/string.h>
48 #include <linux/skbuff.h>
49
50 #include <linux/usb.h>
51
52 #include <net/bluetooth/bluetooth.h>
53 #include <net/bluetooth/hci_core.h>
54
55 #include "hci_usb.h"
56
57 #ifndef CONFIG_BT_HCIUSB_DEBUG
58 #undef BT_DBG
59 #define BT_DBG(D...)
60 #endif
61
62 #ifndef CONFIG_BT_HCIUSB_ZERO_PACKET
63 #undef URB_ZERO_PACKET
64 #define URB_ZERO_PACKET 0
65 #endif
66
67 static int ignore = 0;
68 static int reset = 0;
69
70 #ifdef CONFIG_BT_HCIUSB_SCO
71 static int isoc = 2;
72 #endif
73
74 #define VERSION "2.8"
75
76 static struct usb_driver hci_usb_driver;
77
78 static struct usb_device_id bluetooth_ids[] = {
79 /* Generic Bluetooth USB device */
80 { USB_DEVICE_INFO(HCI_DEV_CLASS, HCI_DEV_SUBCLASS, HCI_DEV_PROTOCOL) },
81
82 /* AVM BlueFRITZ! USB v2.0 */
83 { USB_DEVICE(0x057c, 0x3800) },
84
85 /* Bluetooth Ultraport Module from IBM */
86 { USB_DEVICE(0x04bf, 0x030a) },
87
88 /* ALPS Modules with non-standard id */
89 { USB_DEVICE(0x044e, 0x3001) },
90 { USB_DEVICE(0x044e, 0x3002) },
91
92 /* Ericsson with non-standard id */
93 { USB_DEVICE(0x0bdb, 0x1002) },
94
95 { } /* Terminating entry */
96 };
97
98 MODULE_DEVICE_TABLE (usb, bluetooth_ids);
99
100 static struct usb_device_id blacklist_ids[] = {
101 /* Broadcom BCM2033 without firmware */
102 { USB_DEVICE(0x0a5c, 0x2033), .driver_info = HCI_IGNORE },
103
104 /* Broadcom BCM2035 */
105 { USB_DEVICE(0x0a5c, 0x200a), .driver_info = HCI_RESET | HCI_BROKEN_ISOC },
106 { USB_DEVICE(0x0a5c, 0x2009), .driver_info = HCI_BCM92035 },
107
108 /* Microsoft Wireless Transceiver for Bluetooth 2.0 */
109 { USB_DEVICE(0x045e, 0x009c), .driver_info = HCI_RESET },
110
111 /* Kensington Bluetooth USB adapter */
112 { USB_DEVICE(0x047d, 0x105d), .driver_info = HCI_RESET },
113
114 /* ISSC Bluetooth Adapter v3.1 */
115 { USB_DEVICE(0x1131, 0x1001), .driver_info = HCI_RESET },
116
117 /* RTX Telecom based adapter with buggy SCO support */
118 { USB_DEVICE(0x0400, 0x0807), .driver_info = HCI_BROKEN_ISOC },
119
120 /* Digianswer devices */
121 { USB_DEVICE(0x08fd, 0x0001), .driver_info = HCI_DIGIANSWER },
122 { USB_DEVICE(0x08fd, 0x0002), .driver_info = HCI_IGNORE },
123
124 /* CSR BlueCore Bluetooth Sniffer */
125 { USB_DEVICE(0x0a12, 0x0002), .driver_info = HCI_SNIFFER },
126
127 { } /* Terminating entry */
128 };
129
130 static struct _urb *_urb_alloc(int isoc, int gfp)
131 {
132 struct _urb *_urb = kmalloc(sizeof(struct _urb) +
133 sizeof(struct usb_iso_packet_descriptor) * isoc, gfp);
134 if (_urb) {
135 memset(_urb, 0, sizeof(*_urb));
136 usb_init_urb(&_urb->urb);
137 }
138 return _urb;
139 }
140
141 static struct _urb *_urb_dequeue(struct _urb_queue *q)
142 {
143 struct _urb *_urb = NULL;
144 unsigned long flags;
145 spin_lock_irqsave(&q->lock, flags);
146 {
147 struct list_head *head = &q->head;
148 struct list_head *next = head->next;
149 if (next != head) {
150 _urb = list_entry(next, struct _urb, list);
151 list_del(next); _urb->queue = NULL;
152 }
153 }
154 spin_unlock_irqrestore(&q->lock, flags);
155 return _urb;
156 }
157
158 static void hci_usb_rx_complete(struct urb *urb, struct pt_regs *regs);
159 static void hci_usb_tx_complete(struct urb *urb, struct pt_regs *regs);
160
161 #define __pending_tx(husb, type) (&husb->pending_tx[type-1])
162 #define __pending_q(husb, type) (&husb->pending_q[type-1])
163 #define __completed_q(husb, type) (&husb->completed_q[type-1])
164 #define __transmit_q(husb, type) (&husb->transmit_q[type-1])
165 #define __reassembly(husb, type) (husb->reassembly[type-1])
166
167 static inline struct _urb *__get_completed(struct hci_usb *husb, int type)
168 {
169 return _urb_dequeue(__completed_q(husb, type));
170 }
171
172 #ifdef CONFIG_BT_HCIUSB_SCO
173 static void __fill_isoc_desc(struct urb *urb, int len, int mtu)
174 {
175 int offset = 0, i;
176
177 BT_DBG("len %d mtu %d", len, mtu);
178
179 for (i=0; i < HCI_MAX_ISOC_FRAMES && len >= mtu; i++, offset += mtu, len -= mtu) {
180 urb->iso_frame_desc[i].offset = offset;
181 urb->iso_frame_desc[i].length = mtu;
182 BT_DBG("desc %d offset %d len %d", i, offset, mtu);
183 }
184 if (len && i < HCI_MAX_ISOC_FRAMES) {
185 urb->iso_frame_desc[i].offset = offset;
186 urb->iso_frame_desc[i].length = len;
187 BT_DBG("desc %d offset %d len %d", i, offset, len);
188 i++;
189 }
190 urb->number_of_packets = i;
191 }
192 #endif
193
194 static int hci_usb_intr_rx_submit(struct hci_usb *husb)
195 {
196 struct _urb *_urb;
197 struct urb *urb;
198 int err, pipe, interval, size;
199 void *buf;
200
201 BT_DBG("%s", husb->hdev->name);
202
203 size = le16_to_cpu(husb->intr_in_ep->desc.wMaxPacketSize);
204
205 buf = kmalloc(size, GFP_ATOMIC);
206 if (!buf)
207 return -ENOMEM;
208
209 _urb = _urb_alloc(0, GFP_ATOMIC);
210 if (!_urb) {
211 kfree(buf);
212 return -ENOMEM;
213 }
214 _urb->type = HCI_EVENT_PKT;
215 _urb_queue_tail(__pending_q(husb, _urb->type), _urb);
216
217 urb = &_urb->urb;
218 pipe = usb_rcvintpipe(husb->udev, husb->intr_in_ep->desc.bEndpointAddress);
219 interval = husb->intr_in_ep->desc.bInterval;
220 usb_fill_int_urb(urb, husb->udev, pipe, buf, size, hci_usb_rx_complete, husb, interval);
221
222 err = usb_submit_urb(urb, GFP_ATOMIC);
223 if (err) {
224 BT_ERR("%s intr rx submit failed urb %p err %d",
225 husb->hdev->name, urb, err);
226 _urb_unlink(_urb);
227 _urb_free(_urb);
228 kfree(buf);
229 }
230 return err;
231 }
232
233 static int hci_usb_bulk_rx_submit(struct hci_usb *husb)
234 {
235 struct _urb *_urb;
236 struct urb *urb;
237 int err, pipe, size = HCI_MAX_FRAME_SIZE;
238 void *buf;
239
240 buf = kmalloc(size, GFP_ATOMIC);
241 if (!buf)
242 return -ENOMEM;
243
244 _urb = _urb_alloc(0, GFP_ATOMIC);
245 if (!_urb) {
246 kfree(buf);
247 return -ENOMEM;
248 }
249 _urb->type = HCI_ACLDATA_PKT;
250 _urb_queue_tail(__pending_q(husb, _urb->type), _urb);
251
252 urb = &_urb->urb;
253 pipe = usb_rcvbulkpipe(husb->udev, husb->bulk_in_ep->desc.bEndpointAddress);
254 usb_fill_bulk_urb(urb, husb->udev, pipe, buf, size, hci_usb_rx_complete, husb);
255 urb->transfer_flags = 0;
256
257 BT_DBG("%s urb %p", husb->hdev->name, urb);
258
259 err = usb_submit_urb(urb, GFP_ATOMIC);
260 if (err) {
261 BT_ERR("%s bulk rx submit failed urb %p err %d",
262 husb->hdev->name, urb, err);
263 _urb_unlink(_urb);
264 _urb_free(_urb);
265 kfree(buf);
266 }
267 return err;
268 }
269
270 #ifdef CONFIG_BT_HCIUSB_SCO
271 static int hci_usb_isoc_rx_submit(struct hci_usb *husb)
272 {
273 struct _urb *_urb;
274 struct urb *urb;
275 int err, mtu, size;
276 void *buf;
277
278 mtu = le16_to_cpu(husb->isoc_in_ep->desc.wMaxPacketSize);
279 size = mtu * HCI_MAX_ISOC_FRAMES;
280
281 buf = kmalloc(size, GFP_ATOMIC);
282 if (!buf)
283 return -ENOMEM;
284
285 _urb = _urb_alloc(HCI_MAX_ISOC_FRAMES, GFP_ATOMIC);
286 if (!_urb) {
287 kfree(buf);
288 return -ENOMEM;
289 }
290 _urb->type = HCI_SCODATA_PKT;
291 _urb_queue_tail(__pending_q(husb, _urb->type), _urb);
292
293 urb = &_urb->urb;
294
295 urb->context = husb;
296 urb->dev = husb->udev;
297 urb->pipe = usb_rcvisocpipe(husb->udev, husb->isoc_in_ep->desc.bEndpointAddress);
298 urb->complete = hci_usb_rx_complete;
299
300 urb->interval = husb->isoc_in_ep->desc.bInterval;
301
302 urb->transfer_buffer_length = size;
303 urb->transfer_buffer = buf;
304 urb->transfer_flags = URB_ISO_ASAP;
305
306 __fill_isoc_desc(urb, size, mtu);
307
308 BT_DBG("%s urb %p", husb->hdev->name, urb);
309
310 err = usb_submit_urb(urb, GFP_ATOMIC);
311 if (err) {
312 BT_ERR("%s isoc rx submit failed urb %p err %d",
313 husb->hdev->name, urb, err);
314 _urb_unlink(_urb);
315 _urb_free(_urb);
316 kfree(buf);
317 }
318 return err;
319 }
320 #endif
321
322 /* Initialize device */
323 static int hci_usb_open(struct hci_dev *hdev)
324 {
325 struct hci_usb *husb = (struct hci_usb *) hdev->driver_data;
326 int i, err;
327 unsigned long flags;
328
329 BT_DBG("%s", hdev->name);
330
331 if (test_and_set_bit(HCI_RUNNING, &hdev->flags))
332 return 0;
333
334 write_lock_irqsave(&husb->completion_lock, flags);
335
336 err = hci_usb_intr_rx_submit(husb);
337 if (!err) {
338 for (i = 0; i < HCI_MAX_BULK_RX; i++)
339 hci_usb_bulk_rx_submit(husb);
340
341 #ifdef CONFIG_BT_HCIUSB_SCO
342 if (husb->isoc_iface)
343 for (i = 0; i < HCI_MAX_ISOC_RX; i++)
344 hci_usb_isoc_rx_submit(husb);
345 #endif
346 } else {
347 clear_bit(HCI_RUNNING, &hdev->flags);
348 }
349
350 write_unlock_irqrestore(&husb->completion_lock, flags);
351 return err;
352 }
353
354 /* Reset device */
355 static int hci_usb_flush(struct hci_dev *hdev)
356 {
357 struct hci_usb *husb = (struct hci_usb *) hdev->driver_data;
358 int i;
359
360 BT_DBG("%s", hdev->name);
361
362 for (i = 0; i < 4; i++)
363 skb_queue_purge(&husb->transmit_q[i]);
364 return 0;
365 }
366
367 static void hci_usb_unlink_urbs(struct hci_usb *husb)
368 {
369 int i;
370
371 BT_DBG("%s", husb->hdev->name);
372
373 for (i = 0; i < 4; i++) {
374 struct _urb *_urb;
375 struct urb *urb;
376
377 /* Kill pending requests */
378 while ((_urb = _urb_dequeue(&husb->pending_q[i]))) {
379 urb = &_urb->urb;
380 BT_DBG("%s unlinking _urb %p type %d urb %p",
381 husb->hdev->name, _urb, _urb->type, urb);
382 usb_kill_urb(urb);
383 _urb_queue_tail(__completed_q(husb, _urb->type), _urb);
384 }
385
386 /* Release completed requests */
387 while ((_urb = _urb_dequeue(&husb->completed_q[i]))) {
388 urb = &_urb->urb;
389 BT_DBG("%s freeing _urb %p type %d urb %p",
390 husb->hdev->name, _urb, _urb->type, urb);
391 kfree(urb->setup_packet);
392 kfree(urb->transfer_buffer);
393 _urb_free(_urb);
394 }
395
396 /* Release reassembly buffers */
397 if (husb->reassembly[i]) {
398 kfree_skb(husb->reassembly[i]);
399 husb->reassembly[i] = NULL;
400 }
401 }
402 }
403
404 /* Close device */
405 static int hci_usb_close(struct hci_dev *hdev)
406 {
407 struct hci_usb *husb = (struct hci_usb *) hdev->driver_data;
408 unsigned long flags;
409
410 if (!test_and_clear_bit(HCI_RUNNING, &hdev->flags))
411 return 0;
412
413 BT_DBG("%s", hdev->name);
414
415 /* Synchronize with completion handlers */
416 write_lock_irqsave(&husb->completion_lock, flags);
417 write_unlock_irqrestore(&husb->completion_lock, flags);
418
419 hci_usb_unlink_urbs(husb);
420 hci_usb_flush(hdev);
421 return 0;
422 }
423
424 static int __tx_submit(struct hci_usb *husb, struct _urb *_urb)
425 {
426 struct urb *urb = &_urb->urb;
427 int err;
428
429 BT_DBG("%s urb %p type %d", husb->hdev->name, urb, _urb->type);
430
431 _urb_queue_tail(__pending_q(husb, _urb->type), _urb);
432 err = usb_submit_urb(urb, GFP_ATOMIC);
433 if (err) {
434 BT_ERR("%s tx submit failed urb %p type %d err %d",
435 husb->hdev->name, urb, _urb->type, err);
436 _urb_unlink(_urb);
437 _urb_queue_tail(__completed_q(husb, _urb->type), _urb);
438 } else
439 atomic_inc(__pending_tx(husb, _urb->type));
440
441 return err;
442 }
443
444 static inline int hci_usb_send_ctrl(struct hci_usb *husb, struct sk_buff *skb)
445 {
446 struct _urb *_urb = __get_completed(husb, skb->pkt_type);
447 struct usb_ctrlrequest *dr;
448 struct urb *urb;
449
450 if (!_urb) {
451 _urb = _urb_alloc(0, GFP_ATOMIC);
452 if (!_urb)
453 return -ENOMEM;
454 _urb->type = skb->pkt_type;
455
456 dr = kmalloc(sizeof(*dr), GFP_ATOMIC);
457 if (!dr) {
458 _urb_free(_urb);
459 return -ENOMEM;
460 }
461 } else
462 dr = (void *) _urb->urb.setup_packet;
463
464 dr->bRequestType = husb->ctrl_req;
465 dr->bRequest = 0;
466 dr->wIndex = 0;
467 dr->wValue = 0;
468 dr->wLength = __cpu_to_le16(skb->len);
469
470 urb = &_urb->urb;
471 usb_fill_control_urb(urb, husb->udev, usb_sndctrlpipe(husb->udev, 0),
472 (void *) dr, skb->data, skb->len, hci_usb_tx_complete, husb);
473
474 BT_DBG("%s skb %p len %d", husb->hdev->name, skb, skb->len);
475
476 _urb->priv = skb;
477 return __tx_submit(husb, _urb);
478 }
479
480 static inline int hci_usb_send_bulk(struct hci_usb *husb, struct sk_buff *skb)
481 {
482 struct _urb *_urb = __get_completed(husb, skb->pkt_type);
483 struct urb *urb;
484 int pipe;
485
486 if (!_urb) {
487 _urb = _urb_alloc(0, GFP_ATOMIC);
488 if (!_urb)
489 return -ENOMEM;
490 _urb->type = skb->pkt_type;
491 }
492
493 urb = &_urb->urb;
494 pipe = usb_sndbulkpipe(husb->udev, husb->bulk_out_ep->desc.bEndpointAddress);
495 usb_fill_bulk_urb(urb, husb->udev, pipe, skb->data, skb->len,
496 hci_usb_tx_complete, husb);
497 urb->transfer_flags = URB_ZERO_PACKET;
498
499 BT_DBG("%s skb %p len %d", husb->hdev->name, skb, skb->len);
500
501 _urb->priv = skb;
502 return __tx_submit(husb, _urb);
503 }
504
505 #ifdef CONFIG_BT_HCIUSB_SCO
506 static inline int hci_usb_send_isoc(struct hci_usb *husb, struct sk_buff *skb)
507 {
508 struct _urb *_urb = __get_completed(husb, skb->pkt_type);
509 struct urb *urb;
510
511 if (!_urb) {
512 _urb = _urb_alloc(HCI_MAX_ISOC_FRAMES, GFP_ATOMIC);
513 if (!_urb)
514 return -ENOMEM;
515 _urb->type = skb->pkt_type;
516 }
517
518 BT_DBG("%s skb %p len %d", husb->hdev->name, skb, skb->len);
519
520 urb = &_urb->urb;
521
522 urb->context = husb;
523 urb->dev = husb->udev;
524 urb->pipe = usb_sndisocpipe(husb->udev, husb->isoc_out_ep->desc.bEndpointAddress);
525 urb->complete = hci_usb_tx_complete;
526 urb->transfer_flags = URB_ISO_ASAP;
527
528 urb->interval = husb->isoc_out_ep->desc.bInterval;
529
530 urb->transfer_buffer = skb->data;
531 urb->transfer_buffer_length = skb->len;
532
533 __fill_isoc_desc(urb, skb->len, le16_to_cpu(husb->isoc_out_ep->desc.wMaxPacketSize));
534
535 _urb->priv = skb;
536 return __tx_submit(husb, _urb);
537 }
538 #endif
539
540 static void hci_usb_tx_process(struct hci_usb *husb)
541 {
542 struct sk_buff_head *q;
543 struct sk_buff *skb;
544
545 BT_DBG("%s", husb->hdev->name);
546
547 do {
548 clear_bit(HCI_USB_TX_WAKEUP, &husb->state);
549
550 /* Process command queue */
551 q = __transmit_q(husb, HCI_COMMAND_PKT);
552 if (!atomic_read(__pending_tx(husb, HCI_COMMAND_PKT)) &&
553 (skb = skb_dequeue(q))) {
554 if (hci_usb_send_ctrl(husb, skb) < 0)
555 skb_queue_head(q, skb);
556 }
557
558 #ifdef CONFIG_BT_HCIUSB_SCO
559 /* Process SCO queue */
560 q = __transmit_q(husb, HCI_SCODATA_PKT);
561 if (atomic_read(__pending_tx(husb, HCI_SCODATA_PKT)) < HCI_MAX_ISOC_TX &&
562 (skb = skb_dequeue(q))) {
563 if (hci_usb_send_isoc(husb, skb) < 0)
564 skb_queue_head(q, skb);
565 }
566 #endif
567
568 /* Process ACL queue */
569 q = __transmit_q(husb, HCI_ACLDATA_PKT);
570 while (atomic_read(__pending_tx(husb, HCI_ACLDATA_PKT)) < HCI_MAX_BULK_TX &&
571 (skb = skb_dequeue(q))) {
572 if (hci_usb_send_bulk(husb, skb) < 0) {
573 skb_queue_head(q, skb);
574 break;
575 }
576 }
577 } while(test_bit(HCI_USB_TX_WAKEUP, &husb->state));
578 }
579
580 static inline void hci_usb_tx_wakeup(struct hci_usb *husb)
581 {
582 /* Serialize TX queue processing to avoid data reordering */
583 if (!test_and_set_bit(HCI_USB_TX_PROCESS, &husb->state)) {
584 hci_usb_tx_process(husb);
585 clear_bit(HCI_USB_TX_PROCESS, &husb->state);
586 } else
587 set_bit(HCI_USB_TX_WAKEUP, &husb->state);
588 }
589
590 /* Send frames from HCI layer */
591 static int hci_usb_send_frame(struct sk_buff *skb)
592 {
593 struct hci_dev *hdev = (struct hci_dev *) skb->dev;
594 struct hci_usb *husb;
595
596 if (!hdev) {
597 BT_ERR("frame for uknown device (hdev=NULL)");
598 return -ENODEV;
599 }
600
601 if (!test_bit(HCI_RUNNING, &hdev->flags))
602 return -EBUSY;
603
604 BT_DBG("%s type %d len %d", hdev->name, skb->pkt_type, skb->len);
605
606 husb = (struct hci_usb *) hdev->driver_data;
607
608 switch (skb->pkt_type) {
609 case HCI_COMMAND_PKT:
610 hdev->stat.cmd_tx++;
611 break;
612
613 case HCI_ACLDATA_PKT:
614 hdev->stat.acl_tx++;
615 break;
616
617 #ifdef CONFIG_BT_HCIUSB_SCO
618 case HCI_SCODATA_PKT:
619 hdev->stat.sco_tx++;
620 break;
621 #endif
622
623 default:
624 kfree_skb(skb);
625 return 0;
626 }
627
628 read_lock(&husb->completion_lock);
629
630 skb_queue_tail(__transmit_q(husb, skb->pkt_type), skb);
631 hci_usb_tx_wakeup(husb);
632
633 read_unlock(&husb->completion_lock);
634 return 0;
635 }
636
637 static inline int __recv_frame(struct hci_usb *husb, int type, void *data, int count)
638 {
639 BT_DBG("%s type %d data %p count %d", husb->hdev->name, type, data, count);
640
641 husb->hdev->stat.byte_rx += count;
642
643 while (count) {
644 struct sk_buff *skb = __reassembly(husb, type);
645 struct { int expect; } *scb;
646 int len = 0;
647
648 if (!skb) {
649 /* Start of the frame */
650
651 switch (type) {
652 case HCI_EVENT_PKT:
653 if (count >= HCI_EVENT_HDR_SIZE) {
654 struct hci_event_hdr *h = data;
655 len = HCI_EVENT_HDR_SIZE + h->plen;
656 } else
657 return -EILSEQ;
658 break;
659
660 case HCI_ACLDATA_PKT:
661 if (count >= HCI_ACL_HDR_SIZE) {
662 struct hci_acl_hdr *h = data;
663 len = HCI_ACL_HDR_SIZE + __le16_to_cpu(h->dlen);
664 } else
665 return -EILSEQ;
666 break;
667 #ifdef CONFIG_BT_HCIUSB_SCO
668 case HCI_SCODATA_PKT:
669 if (count >= HCI_SCO_HDR_SIZE) {
670 struct hci_sco_hdr *h = data;
671 len = HCI_SCO_HDR_SIZE + h->dlen;
672 } else
673 return -EILSEQ;
674 break;
675 #endif
676 }
677 BT_DBG("new packet len %d", len);
678
679 skb = bt_skb_alloc(len, GFP_ATOMIC);
680 if (!skb) {
681 BT_ERR("%s no memory for the packet", husb->hdev->name);
682 return -ENOMEM;
683 }
684 skb->dev = (void *) husb->hdev;
685 skb->pkt_type = type;
686
687 __reassembly(husb, type) = skb;
688
689 scb = (void *) skb->cb;
690 scb->expect = len;
691 } else {
692 /* Continuation */
693 scb = (void *) skb->cb;
694 len = scb->expect;
695 }
696
697 len = min(len, count);
698
699 memcpy(skb_put(skb, len), data, len);
700
701 scb->expect -= len;
702 if (!scb->expect) {
703 /* Complete frame */
704 __reassembly(husb, type) = NULL;
705 hci_recv_frame(skb);
706 }
707
708 count -= len; data += len;
709 }
710 return 0;
711 }
712
713 static void hci_usb_rx_complete(struct urb *urb, struct pt_regs *regs)
714 {
715 struct _urb *_urb = container_of(urb, struct _urb, urb);
716 struct hci_usb *husb = (void *) urb->context;
717 struct hci_dev *hdev = husb->hdev;
718 int err, count = urb->actual_length;
719
720 BT_DBG("%s urb %p type %d status %d count %d flags %x", hdev->name, urb,
721 _urb->type, urb->status, count, urb->transfer_flags);
722
723 read_lock(&husb->completion_lock);
724
725 if (!test_bit(HCI_RUNNING, &hdev->flags))
726 goto unlock;
727
728 if (urb->status || !count)
729 goto resubmit;
730
731 if (_urb->type == HCI_SCODATA_PKT) {
732 #ifdef CONFIG_BT_HCIUSB_SCO
733 int i;
734 for (i=0; i < urb->number_of_packets; i++) {
735 BT_DBG("desc %d status %d offset %d len %d", i,
736 urb->iso_frame_desc[i].status,
737 urb->iso_frame_desc[i].offset,
738 urb->iso_frame_desc[i].actual_length);
739
740 if (!urb->iso_frame_desc[i].status)
741 __recv_frame(husb, _urb->type,
742 urb->transfer_buffer + urb->iso_frame_desc[i].offset,
743 urb->iso_frame_desc[i].actual_length);
744 }
745 #else
746 ;
747 #endif
748 } else {
749 err = __recv_frame(husb, _urb->type, urb->transfer_buffer, count);
750 if (err < 0) {
751 BT_ERR("%s corrupted packet: type %d count %d",
752 husb->hdev->name, _urb->type, count);
753 hdev->stat.err_rx++;
754 }
755 }
756
757 resubmit:
758 urb->dev = husb->udev;
759 err = usb_submit_urb(urb, GFP_ATOMIC);
760 BT_DBG("%s urb %p type %d resubmit status %d", hdev->name, urb,
761 _urb->type, err);
762
763 unlock:
764 read_unlock(&husb->completion_lock);
765 }
766
767 static void hci_usb_tx_complete(struct urb *urb, struct pt_regs *regs)
768 {
769 struct _urb *_urb = container_of(urb, struct _urb, urb);
770 struct hci_usb *husb = (void *) urb->context;
771 struct hci_dev *hdev = husb->hdev;
772
773 BT_DBG("%s urb %p status %d flags %x", hdev->name, urb,
774 urb->status, urb->transfer_flags);
775
776 atomic_dec(__pending_tx(husb, _urb->type));
777
778 urb->transfer_buffer = NULL;
779 kfree_skb((struct sk_buff *) _urb->priv);
780
781 if (!test_bit(HCI_RUNNING, &hdev->flags))
782 return;
783
784 if (!urb->status)
785 hdev->stat.byte_tx += urb->transfer_buffer_length;
786 else
787 hdev->stat.err_tx++;
788
789 read_lock(&husb->completion_lock);
790
791 _urb_unlink(_urb);
792 _urb_queue_tail(__completed_q(husb, _urb->type), _urb);
793
794 hci_usb_tx_wakeup(husb);
795
796 read_unlock(&husb->completion_lock);
797 }
798
799 static void hci_usb_destruct(struct hci_dev *hdev)
800 {
801 struct hci_usb *husb = (struct hci_usb *) hdev->driver_data;
802
803 BT_DBG("%s", hdev->name);
804
805 kfree(husb);
806 }
807
808 static void hci_usb_notify(struct hci_dev *hdev, unsigned int evt)
809 {
810 BT_DBG("%s evt %d", hdev->name, evt);
811 }
812
813 static int hci_usb_probe(struct usb_interface *intf, const struct usb_device_id *id)
814 {
815 struct usb_device *udev = interface_to_usbdev(intf);
816 struct usb_host_endpoint *bulk_out_ep = NULL;
817 struct usb_host_endpoint *bulk_in_ep = NULL;
818 struct usb_host_endpoint *intr_in_ep = NULL;
819 struct usb_host_endpoint *ep;
820 struct usb_host_interface *uif;
821 struct usb_interface *isoc_iface;
822 struct hci_usb *husb;
823 struct hci_dev *hdev;
824 int i, e, size, isoc_ifnum, isoc_alts;
825
826 BT_DBG("udev %p intf %p", udev, intf);
827
828 if (!id->driver_info) {
829 const struct usb_device_id *match;
830 match = usb_match_id(intf, blacklist_ids);
831 if (match)
832 id = match;
833 }
834
835 if (ignore || id->driver_info & HCI_IGNORE)
836 return -ENODEV;
837
838 if (intf->cur_altsetting->desc.bInterfaceNumber > 0)
839 return -ENODEV;
840
841 /* Find endpoints that we need */
842 uif = intf->cur_altsetting;
843 for (e = 0; e < uif->desc.bNumEndpoints; e++) {
844 ep = &uif->endpoint[e];
845
846 switch (ep->desc.bmAttributes & USB_ENDPOINT_XFERTYPE_MASK) {
847 case USB_ENDPOINT_XFER_INT:
848 if (ep->desc.bEndpointAddress & USB_DIR_IN)
849 intr_in_ep = ep;
850 break;
851
852 case USB_ENDPOINT_XFER_BULK:
853 if (ep->desc.bEndpointAddress & USB_DIR_IN)
854 bulk_in_ep = ep;
855 else
856 bulk_out_ep = ep;
857 break;
858 }
859 }
860
861 if (!bulk_in_ep || !bulk_out_ep || !intr_in_ep) {
862 BT_DBG("Bulk endpoints not found");
863 goto done;
864 }
865
866 if (!(husb = kmalloc(sizeof(struct hci_usb), GFP_KERNEL))) {
867 BT_ERR("Can't allocate: control structure");
868 goto done;
869 }
870
871 memset(husb, 0, sizeof(struct hci_usb));
872
873 husb->udev = udev;
874 husb->bulk_out_ep = bulk_out_ep;
875 husb->bulk_in_ep = bulk_in_ep;
876 husb->intr_in_ep = intr_in_ep;
877
878 if (id->driver_info & HCI_DIGIANSWER)
879 husb->ctrl_req = USB_TYPE_VENDOR;
880 else
881 husb->ctrl_req = USB_TYPE_CLASS;
882
883 /* Find isochronous endpoints that we can use */
884 size = 0;
885 isoc_iface = NULL;
886 isoc_alts = 0;
887 isoc_ifnum = 1;
888
889 #ifdef CONFIG_BT_HCIUSB_SCO
890 if (isoc && !(id->driver_info & (HCI_BROKEN_ISOC | HCI_SNIFFER)))
891 isoc_iface = usb_ifnum_to_if(udev, isoc_ifnum);
892
893 if (isoc_iface) {
894 int a;
895 struct usb_host_endpoint *isoc_out_ep = NULL;
896 struct usb_host_endpoint *isoc_in_ep = NULL;
897
898 for (a = 0; a < isoc_iface->num_altsetting; a++) {
899 uif = &isoc_iface->altsetting[a];
900 for (e = 0; e < uif->desc.bNumEndpoints; e++) {
901 ep = &uif->endpoint[e];
902
903 switch (ep->desc.bmAttributes & USB_ENDPOINT_XFERTYPE_MASK) {
904 case USB_ENDPOINT_XFER_ISOC:
905 if (le16_to_cpu(ep->desc.wMaxPacketSize) < size ||
906 uif->desc.bAlternateSetting != isoc)
907 break;
908 size = le16_to_cpu(ep->desc.wMaxPacketSize);
909
910 isoc_alts = uif->desc.bAlternateSetting;
911
912 if (ep->desc.bEndpointAddress & USB_DIR_IN)
913 isoc_in_ep = ep;
914 else
915 isoc_out_ep = ep;
916 break;
917 }
918 }
919 }
920
921 if (!isoc_in_ep || !isoc_out_ep)
922 BT_DBG("Isoc endpoints not found");
923 else {
924 BT_DBG("isoc ifnum %d alts %d", isoc_ifnum, isoc_alts);
925 if (usb_driver_claim_interface(&hci_usb_driver, isoc_iface, husb) != 0)
926 BT_ERR("Can't claim isoc interface");
927 else if (usb_set_interface(udev, isoc_ifnum, isoc_alts)) {
928 BT_ERR("Can't set isoc interface settings");
929 husb->isoc_iface = isoc_iface;
930 usb_driver_release_interface(&hci_usb_driver, isoc_iface);
931 husb->isoc_iface = NULL;
932 } else {
933 husb->isoc_iface = isoc_iface;
934 husb->isoc_in_ep = isoc_in_ep;
935 husb->isoc_out_ep = isoc_out_ep;
936 }
937 }
938 }
939 #endif
940
941 rwlock_init(&husb->completion_lock);
942
943 for (i = 0; i < 4; i++) {
944 skb_queue_head_init(&husb->transmit_q[i]);
945 _urb_queue_init(&husb->pending_q[i]);
946 _urb_queue_init(&husb->completed_q[i]);
947 }
948
949 /* Initialize and register HCI device */
950 hdev = hci_alloc_dev();
951 if (!hdev) {
952 BT_ERR("Can't allocate HCI device");
953 goto probe_error;
954 }
955
956 husb->hdev = hdev;
957
958 hdev->type = HCI_USB;
959 hdev->driver_data = husb;
960 SET_HCIDEV_DEV(hdev, &intf->dev);
961
962 hdev->open = hci_usb_open;
963 hdev->close = hci_usb_close;
964 hdev->flush = hci_usb_flush;
965 hdev->send = hci_usb_send_frame;
966 hdev->destruct = hci_usb_destruct;
967 hdev->notify = hci_usb_notify;
968
969 hdev->owner = THIS_MODULE;
970
971 if (reset || id->driver_info & HCI_RESET)
972 set_bit(HCI_QUIRK_RESET_ON_INIT, &hdev->quirks);
973
974 if (id->driver_info & HCI_SNIFFER) {
975 if (le16_to_cpu(udev->descriptor.bcdDevice) > 0x997)
976 set_bit(HCI_QUIRK_RAW_DEVICE, &hdev->quirks);
977 }
978
979 if (id->driver_info & HCI_BCM92035) {
980 unsigned char cmd[] = { 0x3b, 0xfc, 0x01, 0x00 };
981 struct sk_buff *skb;
982
983 skb = bt_skb_alloc(sizeof(cmd), GFP_KERNEL);
984 if (skb) {
985 memcpy(skb_put(skb, sizeof(cmd)), cmd, sizeof(cmd));
986 skb_queue_tail(&hdev->driver_init, skb);
987 }
988 }
989
990 if (hci_register_dev(hdev) < 0) {
991 BT_ERR("Can't register HCI device");
992 hci_free_dev(hdev);
993 goto probe_error;
994 }
995
996 usb_set_intfdata(intf, husb);
997 return 0;
998
999 probe_error:
1000 if (husb->isoc_iface)
1001 usb_driver_release_interface(&hci_usb_driver, husb->isoc_iface);
1002 kfree(husb);
1003
1004 done:
1005 return -EIO;
1006 }
1007
1008 static void hci_usb_disconnect(struct usb_interface *intf)
1009 {
1010 struct hci_usb *husb = usb_get_intfdata(intf);
1011 struct hci_dev *hdev;
1012
1013 if (!husb || intf == husb->isoc_iface)
1014 return;
1015
1016 usb_set_intfdata(intf, NULL);
1017 hdev = husb->hdev;
1018
1019 BT_DBG("%s", hdev->name);
1020
1021 hci_usb_close(hdev);
1022
1023 if (husb->isoc_iface)
1024 usb_driver_release_interface(&hci_usb_driver, husb->isoc_iface);
1025
1026 if (hci_unregister_dev(hdev) < 0)
1027 BT_ERR("Can't unregister HCI device %s", hdev->name);
1028
1029 hci_free_dev(hdev);
1030 }
1031
1032 static struct usb_driver hci_usb_driver = {
1033 .owner = THIS_MODULE,
1034 .name = "hci_usb",
1035 .probe = hci_usb_probe,
1036 .disconnect = hci_usb_disconnect,
1037 .id_table = bluetooth_ids,
1038 };
1039
1040 static int __init hci_usb_init(void)
1041 {
1042 int err;
1043
1044 BT_INFO("HCI USB driver ver %s", VERSION);
1045
1046 if ((err = usb_register(&hci_usb_driver)) < 0)
1047 BT_ERR("Failed to register HCI USB driver");
1048
1049 return err;
1050 }
1051
1052 static void __exit hci_usb_exit(void)
1053 {
1054 usb_deregister(&hci_usb_driver);
1055 }
1056
1057 module_init(hci_usb_init);
1058 module_exit(hci_usb_exit);
1059
1060 module_param(ignore, bool, 0644);
1061 MODULE_PARM_DESC(ignore, "Ignore devices from the matching table");
1062
1063 module_param(reset, bool, 0644);
1064 MODULE_PARM_DESC(reset, "Send HCI reset command on initialization");
1065
1066 #ifdef CONFIG_BT_HCIUSB_SCO
1067 module_param(isoc, int, 0644);
1068 MODULE_PARM_DESC(isoc, "Set isochronous transfers for SCO over HCI support");
1069 #endif
1070
1071 MODULE_AUTHOR("Maxim Krasnyansky <maxk@qualcomm.com>, Marcel Holtmann <marcel@holtmann.org>");
1072 MODULE_DESCRIPTION("Bluetooth HCI USB driver ver " VERSION);
1073 MODULE_VERSION(VERSION);
1074 MODULE_LICENSE("GPL");
linux-next