drivers/bluetooth/bpa10x.c

   1 // SPDX-License-Identifier: GPL-2.0-or-later
   2 /*
   3  *
   4  *  Digianswer Bluetooth USB driver
   5  *
   6  *  Copyright (C) 2004-2007  Marcel Holtmann <marcel@holtmann.org>
   7  */
   8
   9 #include <linux/kernel.h>
  10 #include <linux/module.h>
  11 #include <linux/init.h>
  12 #include <linux/slab.h>
  13 #include <linux/types.h>
  14 #include <linux/sched.h>
  15 #include <linux/errno.h>
  16 #include <linux/skbuff.h>
  17
  18 #include <linux/usb.h>
  19
  20 #include <net/bluetooth/bluetooth.h>
  21 #include <net/bluetooth/hci_core.h>
  22
  23 #include "h4_recv.h"
  24
  25 #define VERSION "0.11"
  26
  27 static const struct usb_device_id bpa10x_table[] = {
  28         /* Tektronix BPA 100/105 (Digianswer) */
  29         { USB_DEVICE(0x08fd, 0x0002) },
  30
  31         { }     /* Terminating entry */
  32 };
  33
  34 MODULE_DEVICE_TABLE(usb, bpa10x_table);
  35
  36 struct bpa10x_data {
  37         struct hci_dev    *hdev;
  38         struct usb_device *udev;
  39
  40         struct usb_anchor tx_anchor;
  41         struct usb_anchor rx_anchor;
  42
  43         struct sk_buff *rx_skb[2];
  44 };
  45
  46 static void bpa10x_tx_complete(struct urb *urb)
  47 {
  48         struct sk_buff *skb = urb->context;
  49         struct hci_dev *hdev = (struct hci_dev *) skb->dev;
  50
  51         BT_DBG("%s urb %p status %d count %d", hdev->name,
  52                                         urb, urb->status, urb->actual_length);
  53
  54         if (!test_bit(HCI_RUNNING, &hdev->flags))
  55                 goto done;
  56
  57         if (!urb->status)
  58                 hdev->stat.byte_tx += urb->transfer_buffer_length;
  59         else
  60                 hdev->stat.err_tx++;
  61
  62 done:
  63         kfree(urb->setup_packet);
  64
  65         kfree_skb(skb);
  66 }
  67
  68 #define HCI_VENDOR_HDR_SIZE 5
  69
  70 #define HCI_RECV_VENDOR \
  71         .type = HCI_VENDOR_PKT, \
  72         .hlen = HCI_VENDOR_HDR_SIZE, \
  73         .loff = 3, \
  74         .lsize = 2, \
  75         .maxlen = HCI_MAX_FRAME_SIZE
  76
  77 static const struct h4_recv_pkt bpa10x_recv_pkts[] = {
  78         { H4_RECV_ACL,     .recv = hci_recv_frame },
  79         { H4_RECV_SCO,     .recv = hci_recv_frame },
  80         { H4_RECV_EVENT,   .recv = hci_recv_frame },
  81         { HCI_RECV_VENDOR, .recv = hci_recv_diag  },
  82 };
  83
  84 static void bpa10x_rx_complete(struct urb *urb)
  85 {
  86         struct hci_dev *hdev = urb->context;
  87         struct bpa10x_data *data = hci_get_drvdata(hdev);
  88         int err;
  89
  90         BT_DBG("%s urb %p status %d count %d", hdev->name,
  91                                         urb, urb->status, urb->actual_length);
  92
  93         if (!test_bit(HCI_RUNNING, &hdev->flags))
  94                 return;
  95
  96         if (urb->status == 0) {
  97                 bool idx = usb_pipebulk(urb->pipe);
  98
  99                 data->rx_skb[idx] = h4_recv_buf(hdev, data->rx_skb[idx],
 100                                                 urb->transfer_buffer,
 101                                                 urb->actual_length,
 102                                                 bpa10x_recv_pkts,
 103                                                 ARRAY_SIZE(bpa10x_recv_pkts));
 104                 if (IS_ERR(data->rx_skb[idx])) {
 105                         bt_dev_err(hdev, "corrupted event packet");
 106                         hdev->stat.err_rx++;
 107                         data->rx_skb[idx] = NULL;
 108                 }
 109         }
 110
 111         usb_anchor_urb(urb, &data->rx_anchor);
 112
 113         err = usb_submit_urb(urb, GFP_ATOMIC);
 114         if (err < 0) {
 115                 bt_dev_err(hdev, "urb %p failed to resubmit (%d)", urb, -err);
 116                 usb_unanchor_urb(urb);
 117         }
 118 }
 119
 120 static inline int bpa10x_submit_intr_urb(struct hci_dev *hdev)
 121 {
 122         struct bpa10x_data *data = hci_get_drvdata(hdev);
 123         struct urb *urb;
 124         unsigned char *buf;
 125         unsigned int pipe;
 126         int err, size = 16;
 127
 128         BT_DBG("%s", hdev->name);
 129
 130         urb = usb_alloc_urb(0, GFP_KERNEL);
 131         if (!urb)
 132                 return -ENOMEM;
 133
 134         buf = kmalloc(size, GFP_KERNEL);
 135         if (!buf) {
 136                 usb_free_urb(urb);
 137                 return -ENOMEM;
 138         }
 139
 140         pipe = usb_rcvintpipe(data->udev, 0x81);
 141
 142         usb_fill_int_urb(urb, data->udev, pipe, buf, size,
 143                                                 bpa10x_rx_complete, hdev, 1);
 144
 145         urb->transfer_flags |= URB_FREE_BUFFER;
 146
 147         usb_anchor_urb(urb, &data->rx_anchor);
 148
 149         err = usb_submit_urb(urb, GFP_KERNEL);
 150         if (err < 0) {
 151                 bt_dev_err(hdev, "urb %p submission failed (%d)", urb, -err);
 152                 usb_unanchor_urb(urb);
 153         }
 154
 155         usb_free_urb(urb);
 156
 157         return err;
 158 }
 159
 160 static inline int bpa10x_submit_bulk_urb(struct hci_dev *hdev)
 161 {
 162         struct bpa10x_data *data = hci_get_drvdata(hdev);
 163         struct urb *urb;
 164         unsigned char *buf;
 165         unsigned int pipe;
 166         int err, size = 64;
 167
 168         BT_DBG("%s", hdev->name);
 169
 170         urb = usb_alloc_urb(0, GFP_KERNEL);
 171         if (!urb)
 172                 return -ENOMEM;
 173
 174         buf = kmalloc(size, GFP_KERNEL);
 175         if (!buf) {
 176                 usb_free_urb(urb);
 177                 return -ENOMEM;
 178         }
 179
 180         pipe = usb_rcvbulkpipe(data->udev, 0x82);
 181
 182         usb_fill_bulk_urb(urb, data->udev, pipe,
 183                                         buf, size, bpa10x_rx_complete, hdev);
 184
 185         urb->transfer_flags |= URB_FREE_BUFFER;
 186
 187         usb_anchor_urb(urb, &data->rx_anchor);
 188
 189         err = usb_submit_urb(urb, GFP_KERNEL);
 190         if (err < 0) {
 191                 bt_dev_err(hdev, "urb %p submission failed (%d)", urb, -err);
 192                 usb_unanchor_urb(urb);
 193         }
 194
 195         usb_free_urb(urb);
 196
 197         return err;
 198 }
 199
 200 static int bpa10x_open(struct hci_dev *hdev)
 201 {
 202         struct bpa10x_data *data = hci_get_drvdata(hdev);
 203         int err;
 204
 205         BT_DBG("%s", hdev->name);
 206
 207         err = bpa10x_submit_intr_urb(hdev);
 208         if (err < 0)
 209                 goto error;
 210
 211         err = bpa10x_submit_bulk_urb(hdev);
 212         if (err < 0)
 213                 goto error;
 214
 215         return 0;
 216
 217 error:
 218         usb_kill_anchored_urbs(&data->rx_anchor);
 219
 220         return err;
 221 }
 222
 223 static int bpa10x_close(struct hci_dev *hdev)
 224 {
 225         struct bpa10x_data *data = hci_get_drvdata(hdev);
 226
 227         BT_DBG("%s", hdev->name);
 228
 229         usb_kill_anchored_urbs(&data->rx_anchor);
 230
 231         return 0;
 232 }
 233
 234 static int bpa10x_flush(struct hci_dev *hdev)
 235 {
 236         struct bpa10x_data *data = hci_get_drvdata(hdev);
 237
 238         BT_DBG("%s", hdev->name);
 239
 240         usb_kill_anchored_urbs(&data->tx_anchor);
 241
 242         return 0;
 243 }
 244
 245 static int bpa10x_setup(struct hci_dev *hdev)
 246 {
 247         static const u8 req[] = { 0x07 };
 248         struct sk_buff *skb;
 249
 250         BT_DBG("%s", hdev->name);
 251
 252         /* Read revision string */
 253         skb = __hci_cmd_sync(hdev, 0xfc0e, sizeof(req), req, HCI_INIT_TIMEOUT);
 254         if (IS_ERR(skb))
 255                 return PTR_ERR(skb);
 256
 257         bt_dev_info(hdev, "%s", (char *)(skb->data + 1));
 258
 259         hci_set_fw_info(hdev, "%s", skb->data + 1);
 260
 261         kfree_skb(skb);
 262         return 0;
 263 }
 264
 265 static int bpa10x_send_frame(struct hci_dev *hdev, struct sk_buff *skb)
 266 {
 267         struct bpa10x_data *data = hci_get_drvdata(hdev);
 268         struct usb_ctrlrequest *dr;
 269         struct urb *urb;
 270         unsigned int pipe;
 271         int err;
 272
 273         BT_DBG("%s", hdev->name);
 274
 275         skb->dev = (void *) hdev;
 276
 277         urb = usb_alloc_urb(0, GFP_KERNEL);
 278         if (!urb)
 279                 return -ENOMEM;
 280
 281         /* Prepend skb with frame type */
 282         *(u8 *)skb_push(skb, 1) = hci_skb_pkt_type(skb);
 283
 284         switch (hci_skb_pkt_type(skb)) {
 285         case HCI_COMMAND_PKT:
 286                 dr = kmalloc(sizeof(*dr), GFP_KERNEL);
 287                 if (!dr) {
 288                         usb_free_urb(urb);
 289                         return -ENOMEM;
 290                 }
 291
 292                 dr->bRequestType = USB_TYPE_VENDOR;
 293                 dr->bRequest     = 0;
 294                 dr->wIndex       = 0;
 295                 dr->wValue       = 0;
 296                 dr->wLength      = __cpu_to_le16(skb->len);
 297
 298                 pipe = usb_sndctrlpipe(data->udev, 0x00);
 299
 300                 usb_fill_control_urb(urb, data->udev, pipe, (void *) dr,
 301                                 skb->data, skb->len, bpa10x_tx_complete, skb);
 302
 303                 hdev->stat.cmd_tx++;
 304                 break;
 305
 306         case HCI_ACLDATA_PKT:
 307                 pipe = usb_sndbulkpipe(data->udev, 0x02);
 308
 309                 usb_fill_bulk_urb(urb, data->udev, pipe,
 310                                 skb->data, skb->len, bpa10x_tx_complete, skb);
 311
 312                 hdev->stat.acl_tx++;
 313                 break;
 314
 315         case HCI_SCODATA_PKT:
 316                 pipe = usb_sndbulkpipe(data->udev, 0x02);
 317
 318                 usb_fill_bulk_urb(urb, data->udev, pipe,
 319                                 skb->data, skb->len, bpa10x_tx_complete, skb);
 320
 321                 hdev->stat.sco_tx++;
 322                 break;
 323
 324         default:
 325                 usb_free_urb(urb);
 326                 return -EILSEQ;
 327         }
 328
 329         usb_anchor_urb(urb, &data->tx_anchor);
 330
 331         err = usb_submit_urb(urb, GFP_KERNEL);
 332         if (err < 0) {
 333                 bt_dev_err(hdev, "urb %p submission failed", urb);
 334                 kfree(urb->setup_packet);
 335                 usb_unanchor_urb(urb);
 336         }
 337
 338         usb_free_urb(urb);
 339
 340         return err;
 341 }
 342
 343 static int bpa10x_set_diag(struct hci_dev *hdev, bool enable)
 344 {
 345         const u8 req[] = { 0x00, enable };
 346         struct sk_buff *skb;
 347
 348         BT_DBG("%s", hdev->name);
 349
 350         if (!test_bit(HCI_RUNNING, &hdev->flags))
 351                 return -ENETDOWN;
 352
 353         /* Enable sniffer operation */
 354         skb = __hci_cmd_sync(hdev, 0xfc0e, sizeof(req), req, HCI_INIT_TIMEOUT);
 355         if (IS_ERR(skb))
 356                 return PTR_ERR(skb);
 357
 358         kfree_skb(skb);
 359         return 0;
 360 }
 361
 362 static int bpa10x_probe(struct usb_interface *intf,
 363                         const struct usb_device_id *id)
 364 {
 365         struct bpa10x_data *data;
 366         struct hci_dev *hdev;
 367         int err;
 368
 369         BT_DBG("intf %p id %p", intf, id);
 370
 371         if (intf->cur_altsetting->desc.bInterfaceNumber != 0)
 372                 return -ENODEV;
 373
 374         data = devm_kzalloc(&intf->dev, sizeof(*data), GFP_KERNEL);
 375         if (!data)
 376                 return -ENOMEM;
 377
 378         data->udev = interface_to_usbdev(intf);
 379
 380         init_usb_anchor(&data->tx_anchor);
 381         init_usb_anchor(&data->rx_anchor);
 382
 383         hdev = hci_alloc_dev();
 384         if (!hdev)
 385                 return -ENOMEM;
 386
 387         hdev->bus = HCI_USB;
 388         hci_set_drvdata(hdev, data);
 389
 390         data->hdev = hdev;
 391
 392         SET_HCIDEV_DEV(hdev, &intf->dev);
 393
 394         hdev->open     = bpa10x_open;
 395         hdev->close    = bpa10x_close;
 396         hdev->flush    = bpa10x_flush;
 397         hdev->setup    = bpa10x_setup;
 398         hdev->send     = bpa10x_send_frame;
 399         hdev->set_diag = bpa10x_set_diag;
 400
 401         set_bit(HCI_QUIRK_RESET_ON_CLOSE, &hdev->quirks);
 402
 403         err = hci_register_dev(hdev);
 404         if (err < 0) {
 405                 hci_free_dev(hdev);
 406                 return err;
 407         }
 408
 409         usb_set_intfdata(intf, data);
 410
 411         return 0;
 412 }
 413
 414 static void bpa10x_disconnect(struct usb_interface *intf)
 415 {
 416         struct bpa10x_data *data = usb_get_intfdata(intf);
 417
 418         BT_DBG("intf %p", intf);
 419
 420         if (!data)
 421                 return;
 422
 423         usb_set_intfdata(intf, NULL);
 424
 425         hci_unregister_dev(data->hdev);
 426
 427         hci_free_dev(data->hdev);
 428         kfree_skb(data->rx_skb[0]);
 429         kfree_skb(data->rx_skb[1]);
 430 }
 431
 432 static struct usb_driver bpa10x_driver = {
 433         .name           = "bpa10x",
 434         .probe          = bpa10x_probe,
 435         .disconnect     = bpa10x_disconnect,
 436         .id_table       = bpa10x_table,
 437         .disable_hub_initiated_lpm = 1,
 438 };
 439
 440 module_usb_driver(bpa10x_driver);
 441
 442 MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
 443 MODULE_DESCRIPTION("Digianswer Bluetooth USB driver ver " VERSION);
 444 MODULE_VERSION(VERSION);
 445 MODULE_LICENSE("GPL");