2 * USB descriptor handling functions for libusbx
3 * Copyright © 2007 Daniel Drake <dsd@gentoo.org>
4 * Copyright © 2001 Johannes Erdfelt <johannes@erdfelt.com>
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2.1 of the License, or (at your option) any later version.
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, write to the Free Software
18 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
28 #define DESC_HEADER_LENGTH 2
29 #define DEVICE_DESC_LENGTH 18
30 #define CONFIG_DESC_LENGTH 9
31 #define INTERFACE_DESC_LENGTH 9
32 #define ENDPOINT_DESC_LENGTH 7
33 #define ENDPOINT_AUDIO_DESC_LENGTH 9
35 /** @defgroup desc USB descriptors
36 * This page details how to examine the various standard USB descriptors
37 * for detected devices
40 /* set host_endian if the w values are already in host endian format,
41 * as opposed to bus endian. */
42 int usbi_parse_descriptor(unsigned char *source, const char *descriptor,
43 void *dest, int host_endian)
45 unsigned char *sp = source, *dp = dest;
49 for (cp = descriptor; *cp; cp++) {
51 case 'b': /* 8-bit byte */
54 case 'w': /* 16-bit word, convert from little endian to CPU */
55 dp += ((uintptr_t)dp & 1); /* Align to word boundary */
60 w = (sp[1] << 8) | sp[0];
61 *((uint16_t *)dp) = w;
69 return (int) (sp - source);
72 static void clear_endpoint(struct libusb_endpoint_descriptor *endpoint)
75 free((unsigned char *) endpoint->extra);
78 static int parse_endpoint(struct libusb_context *ctx,
79 struct libusb_endpoint_descriptor *endpoint, unsigned char *buffer,
80 int size, int host_endian)
82 struct usb_descriptor_header header;
88 usbi_parse_descriptor(buffer, "bb", &header, 0);
90 /* Everything should be fine being passed into here, but we sanity */
92 if (header.bLength > size) {
93 usbi_err(ctx, "ran out of descriptors parsing");
97 if (header.bDescriptorType != LIBUSB_DT_ENDPOINT) {
98 usbi_err(ctx, "unexpected descriptor %x (expected %x)",
99 header.bDescriptorType, LIBUSB_DT_ENDPOINT);
103 if (header.bLength >= ENDPOINT_AUDIO_DESC_LENGTH)
104 usbi_parse_descriptor(buffer, "bbbbwbbb", endpoint, host_endian);
105 else if (header.bLength >= ENDPOINT_DESC_LENGTH)
106 usbi_parse_descriptor(buffer, "bbbbwb", endpoint, host_endian);
108 buffer += header.bLength;
109 size -= header.bLength;
110 parsed += header.bLength;
112 /* Skip over the rest of the Class Specific or Vendor Specific */
115 while (size >= DESC_HEADER_LENGTH) {
116 usbi_parse_descriptor(buffer, "bb", &header, 0);
118 if (header.bLength < 2) {
119 usbi_err(ctx, "invalid descriptor length %d", header.bLength);
123 /* If we find another "proper" descriptor then we're done */
124 if ((header.bDescriptorType == LIBUSB_DT_ENDPOINT) ||
125 (header.bDescriptorType == LIBUSB_DT_INTERFACE) ||
126 (header.bDescriptorType == LIBUSB_DT_CONFIG) ||
127 (header.bDescriptorType == LIBUSB_DT_DEVICE))
130 usbi_dbg("skipping descriptor %x", header.bDescriptorType);
131 buffer += header.bLength;
132 size -= header.bLength;
133 parsed += header.bLength;
136 /* Copy any unknown descriptors into a storage area for drivers */
138 len = (int)(buffer - begin);
140 endpoint->extra = NULL;
141 endpoint->extra_length = 0;
146 endpoint->extra = extra;
148 endpoint->extra_length = 0;
149 return LIBUSB_ERROR_NO_MEM;
152 memcpy(extra, begin, len);
153 endpoint->extra_length = len;
158 static void clear_interface(struct libusb_interface *usb_interface)
163 if (usb_interface->altsetting) {
164 for (i = 0; i < usb_interface->num_altsetting; i++) {
165 struct libusb_interface_descriptor *ifp =
166 (struct libusb_interface_descriptor *)
167 usb_interface->altsetting + i;
169 free((void *) ifp->extra);
171 for (j = 0; j < ifp->bNumEndpoints; j++)
172 clear_endpoint((struct libusb_endpoint_descriptor *)
174 free((void *) ifp->endpoint);
177 free((void *) usb_interface->altsetting);
178 usb_interface->altsetting = NULL;
183 static int parse_interface(libusb_context *ctx,
184 struct libusb_interface *usb_interface, unsigned char *buffer, int size,
192 struct usb_descriptor_header header;
193 struct libusb_interface_descriptor *ifp;
194 unsigned char *begin;
196 usb_interface->num_altsetting = 0;
198 while (size >= INTERFACE_DESC_LENGTH) {
199 struct libusb_interface_descriptor *altsetting =
200 (struct libusb_interface_descriptor *) usb_interface->altsetting;
201 altsetting = usbi_reallocf(altsetting,
202 sizeof(struct libusb_interface_descriptor) *
203 (usb_interface->num_altsetting + 1));
205 r = LIBUSB_ERROR_NO_MEM;
208 usb_interface->altsetting = altsetting;
210 ifp = altsetting + usb_interface->num_altsetting;
211 usb_interface->num_altsetting++;
212 usbi_parse_descriptor(buffer, "bbbbbbbbb", ifp, 0);
214 ifp->extra_length = 0;
215 ifp->endpoint = NULL;
217 /* Skip over the interface */
218 buffer += ifp->bLength;
219 parsed += ifp->bLength;
220 size -= ifp->bLength;
224 /* Skip over any interface, class or vendor descriptors */
225 while (size >= DESC_HEADER_LENGTH) {
226 usbi_parse_descriptor(buffer, "bb", &header, 0);
227 if (header.bLength < 2) {
228 usbi_err(ctx, "invalid descriptor of length %d",
232 } else if (header.bLength > size) {
233 usbi_warn(ctx, "invalid descriptor of length %d",
235 /* The remaining bytes are bogus, but at least
236 * one interface is OK, so let's continue. */
240 /* If we find another "proper" descriptor then we're done */
241 if ((header.bDescriptorType == LIBUSB_DT_INTERFACE) ||
242 (header.bDescriptorType == LIBUSB_DT_ENDPOINT) ||
243 (header.bDescriptorType == LIBUSB_DT_CONFIG) ||
244 (header.bDescriptorType == LIBUSB_DT_DEVICE))
247 buffer += header.bLength;
248 parsed += header.bLength;
249 size -= header.bLength;
252 /* Copy any unknown descriptors into a storage area for */
253 /* drivers to later parse */
254 len = (int)(buffer - begin);
256 ifp->extra = malloc(len);
258 r = LIBUSB_ERROR_NO_MEM;
261 memcpy((unsigned char *) ifp->extra, begin, len);
262 ifp->extra_length = len;
265 /* Did we hit an unexpected descriptor? */
266 if (size >= DESC_HEADER_LENGTH) {
267 usbi_parse_descriptor(buffer, "bb", &header, 0);
268 if ((header.bDescriptorType == LIBUSB_DT_CONFIG) ||
269 (header.bDescriptorType == LIBUSB_DT_DEVICE)) {
274 if (ifp->bNumEndpoints > USB_MAXENDPOINTS) {
275 usbi_err(ctx, "too many endpoints (%d)", ifp->bNumEndpoints);
280 if (ifp->bNumEndpoints > 0) {
281 struct libusb_endpoint_descriptor *endpoint;
282 tmp = ifp->bNumEndpoints * sizeof(struct libusb_endpoint_descriptor);
283 endpoint = malloc(tmp);
284 ifp->endpoint = endpoint;
286 r = LIBUSB_ERROR_NO_MEM;
290 memset(endpoint, 0, tmp);
291 for (i = 0; i < ifp->bNumEndpoints; i++) {
292 usbi_parse_descriptor(buffer, "bb", &header, 0);
294 if (header.bLength > size) {
295 usbi_err(ctx, "ran out of descriptors parsing");
300 r = parse_endpoint(ctx, endpoint + i, buffer, size,
311 /* We check to see if it's an alternate to this one */
312 ifp = (struct libusb_interface_descriptor *) buffer;
313 if (size < LIBUSB_DT_INTERFACE_SIZE ||
314 ifp->bDescriptorType != LIBUSB_DT_INTERFACE ||
315 !ifp->bAlternateSetting)
321 clear_interface(usb_interface);
325 static void clear_configuration(struct libusb_config_descriptor *config)
327 if (config->interface) {
329 for (i = 0; i < config->bNumInterfaces; i++)
330 clear_interface((struct libusb_interface *)
331 config->interface + i);
332 free((void *) config->interface);
335 free((void *) config->extra);
338 static int parse_configuration(struct libusb_context *ctx,
339 struct libusb_config_descriptor *config, unsigned char *buffer,
346 struct usb_descriptor_header header;
347 struct libusb_interface *usb_interface;
349 usbi_parse_descriptor(buffer, "bbwbbbbb", config, host_endian);
350 size = config->wTotalLength;
352 if (config->bNumInterfaces > USB_MAXINTERFACES) {
353 usbi_err(ctx, "too many interfaces (%d)", config->bNumInterfaces);
354 return LIBUSB_ERROR_IO;
357 tmp = config->bNumInterfaces * sizeof(struct libusb_interface);
358 usb_interface = malloc(tmp);
359 config->interface = usb_interface;
360 if (!config->interface)
361 return LIBUSB_ERROR_NO_MEM;
363 memset(usb_interface, 0, tmp);
364 buffer += config->bLength;
365 size -= config->bLength;
367 config->extra = NULL;
368 config->extra_length = 0;
370 for (i = 0; i < config->bNumInterfaces; i++) {
372 unsigned char *begin;
374 /* Skip over the rest of the Class Specific or Vendor */
375 /* Specific descriptors */
377 while (size >= DESC_HEADER_LENGTH) {
378 usbi_parse_descriptor(buffer, "bb", &header, 0);
380 /* If we've parsed at least one config descriptor then
381 * let's return that. */
382 if (header.bLength > size && i) {
383 usbi_warn(ctx, "invalid descriptor length of %d",
388 if ((header.bLength > size) ||
389 (header.bLength < DESC_HEADER_LENGTH)) {
390 usbi_err(ctx, "invalid descriptor length of %d",
396 /* If we find another "proper" descriptor then we're done */
397 if ((header.bDescriptorType == LIBUSB_DT_ENDPOINT) ||
398 (header.bDescriptorType == LIBUSB_DT_INTERFACE) ||
399 (header.bDescriptorType == LIBUSB_DT_CONFIG) ||
400 (header.bDescriptorType == LIBUSB_DT_DEVICE))
403 usbi_dbg("skipping descriptor 0x%x\n", header.bDescriptorType);
404 buffer += header.bLength;
405 size -= header.bLength;
408 /* Copy any unknown descriptors into a storage area for */
409 /* drivers to later parse */
410 len = (int)(buffer - begin);
412 /* FIXME: We should realloc and append here */
413 if (!config->extra_length) {
414 config->extra = malloc(len);
415 if (!config->extra) {
416 r = LIBUSB_ERROR_NO_MEM;
420 memcpy((unsigned char *) config->extra, begin, len);
421 config->extra_length = len;
425 r = parse_interface(ctx, usb_interface + i, buffer, size, host_endian);
436 clear_configuration(config);
441 * Get the USB device descriptor for a given device.
443 * This is a non-blocking function; the device descriptor is cached in memory.
445 * \param dev the device
446 * \param desc output location for the descriptor data
447 * \returns 0 on success or a LIBUSB_ERROR code on failure
449 int API_EXPORTED libusb_get_device_descriptor(libusb_device *dev,
450 struct libusb_device_descriptor *desc)
452 unsigned char raw_desc[DEVICE_DESC_LENGTH];
457 r = usbi_backend->get_device_descriptor(dev, raw_desc, &host_endian);
461 memcpy((unsigned char *) desc, raw_desc, sizeof(raw_desc));
463 desc->bcdUSB = libusb_le16_to_cpu(desc->bcdUSB);
464 desc->idVendor = libusb_le16_to_cpu(desc->idVendor);
465 desc->idProduct = libusb_le16_to_cpu(desc->idProduct);
466 desc->bcdDevice = libusb_le16_to_cpu(desc->bcdDevice);
472 * Get the USB configuration descriptor for the currently active configuration.
473 * This is a non-blocking function which does not involve any requests being
474 * sent to the device.
476 * \param dev a device
477 * \param config output location for the USB configuration descriptor. Only
478 * valid if 0 was returned. Must be freed with libusb_free_config_descriptor()
480 * \returns 0 on success
481 * \returns LIBUSB_ERROR_NOT_FOUND if the device is in unconfigured state
482 * \returns another LIBUSB_ERROR code on error
483 * \see libusb_get_config_descriptor
485 int API_EXPORTED libusb_get_active_config_descriptor(libusb_device *dev,
486 struct libusb_config_descriptor **config)
488 struct libusb_config_descriptor *_config = malloc(sizeof(*_config));
489 unsigned char tmp[8];
490 unsigned char *buf = NULL;
496 return LIBUSB_ERROR_NO_MEM;
498 r = usbi_backend->get_active_config_descriptor(dev, tmp, sizeof(tmp),
503 _config->wTotalLength = 0;
504 usbi_parse_descriptor(tmp, "bbw", _config, host_endian);
505 if (_config->wTotalLength != 0)
506 buf = malloc(_config->wTotalLength);
508 r = LIBUSB_ERROR_NO_MEM;
512 r = usbi_backend->get_active_config_descriptor(dev, buf,
513 _config->wTotalLength, &host_endian);
517 r = parse_configuration(dev->ctx, _config, buf, host_endian);
519 usbi_err(dev->ctx, "parse_configuration failed with error %d", r);
522 usbi_warn(dev->ctx, "descriptor data still left");
537 * Get a USB configuration descriptor based on its index.
538 * This is a non-blocking function which does not involve any requests being
539 * sent to the device.
541 * \param dev a device
542 * \param config_index the index of the configuration you wish to retrieve
543 * \param config output location for the USB configuration descriptor. Only
544 * valid if 0 was returned. Must be freed with libusb_free_config_descriptor()
546 * \returns 0 on success
547 * \returns LIBUSB_ERROR_NOT_FOUND if the configuration does not exist
548 * \returns another LIBUSB_ERROR code on error
549 * \see libusb_get_active_config_descriptor()
550 * \see libusb_get_config_descriptor_by_value()
552 int API_EXPORTED libusb_get_config_descriptor(libusb_device *dev,
553 uint8_t config_index, struct libusb_config_descriptor **config)
555 struct libusb_config_descriptor *_config;
556 unsigned char tmp[8];
557 unsigned char *buf = NULL;
561 usbi_dbg("index %d", config_index);
562 if (config_index >= dev->num_configurations)
563 return LIBUSB_ERROR_NOT_FOUND;
565 _config = malloc(sizeof(*_config));
567 return LIBUSB_ERROR_NO_MEM;
569 r = usbi_backend->get_config_descriptor(dev, config_index, tmp,
570 sizeof(tmp), &host_endian);
574 usbi_parse_descriptor(tmp, "bbw", _config, host_endian);
575 buf = malloc(_config->wTotalLength);
577 r = LIBUSB_ERROR_NO_MEM;
582 r = usbi_backend->get_config_descriptor(dev, config_index, buf,
583 _config->wTotalLength, &host_endian);
587 r = parse_configuration(dev->ctx, _config, buf, host_endian);
589 usbi_err(dev->ctx, "parse_configuration failed with error %d", r);
592 usbi_warn(dev->ctx, "descriptor data still left");
606 /* iterate through all configurations, returning the index of the configuration
607 * matching a specific bConfigurationValue in the idx output parameter, or -1
608 * if the config was not found.
609 * returns 0 or a LIBUSB_ERROR code
611 int usbi_get_config_index_by_value(struct libusb_device *dev,
612 uint8_t bConfigurationValue, int *idx)
616 usbi_dbg("value %d", bConfigurationValue);
617 for (i = 0; i < dev->num_configurations; i++) {
618 unsigned char tmp[6];
620 int r = usbi_backend->get_config_descriptor(dev, i, tmp, sizeof(tmp),
624 if (tmp[5] == bConfigurationValue) {
635 * Get a USB configuration descriptor with a specific bConfigurationValue.
636 * This is a non-blocking function which does not involve any requests being
637 * sent to the device.
639 * \param dev a device
640 * \param bConfigurationValue the bConfigurationValue of the configuration you
642 * \param config output location for the USB configuration descriptor. Only
643 * valid if 0 was returned. Must be freed with libusb_free_config_descriptor()
645 * \returns 0 on success
646 * \returns LIBUSB_ERROR_NOT_FOUND if the configuration does not exist
647 * \returns another LIBUSB_ERROR code on error
648 * \see libusb_get_active_config_descriptor()
649 * \see libusb_get_config_descriptor()
651 int API_EXPORTED libusb_get_config_descriptor_by_value(libusb_device *dev,
652 uint8_t bConfigurationValue, struct libusb_config_descriptor **config)
655 int r = usbi_get_config_index_by_value(dev, bConfigurationValue, &idx);
659 return LIBUSB_ERROR_NOT_FOUND;
661 return libusb_get_config_descriptor(dev, (uint8_t) idx, config);
665 * Free a configuration descriptor obtained from
666 * libusb_get_active_config_descriptor() or libusb_get_config_descriptor().
667 * It is safe to call this function with a NULL config parameter, in which
668 * case the function simply returns.
670 * \param config the configuration descriptor to free
672 void API_EXPORTED libusb_free_config_descriptor(
673 struct libusb_config_descriptor *config)
678 clear_configuration(config);
683 * Retrieve a string descriptor in C style ASCII.
685 * Wrapper around libusb_get_string_descriptor(). Uses the first language
686 * supported by the device.
688 * \param dev a device handle
689 * \param desc_index the index of the descriptor to retrieve
690 * \param data output buffer for ASCII string descriptor
691 * \param length size of data buffer
692 * \returns number of bytes returned in data, or LIBUSB_ERROR code on failure
694 int API_EXPORTED libusb_get_string_descriptor_ascii(libusb_device_handle *dev,
695 uint8_t desc_index, unsigned char *data, int length)
697 unsigned char tbuf[255]; /* Some devices choke on size > 255 */
701 /* Asking for the zero'th index is special - it returns a string
702 * descriptor that contains all the language IDs supported by the
703 * device. Typically there aren't many - often only one. Language
704 * IDs are 16 bit numbers, and they start at the third byte in the
705 * descriptor. There's also no point in trying to read descriptor 0
706 * with this function. See USB 2.0 specification section 9.6.7 for
711 return LIBUSB_ERROR_INVALID_PARAM;
713 r = libusb_get_string_descriptor(dev, 0, 0, tbuf, sizeof(tbuf));
718 return LIBUSB_ERROR_IO;
720 langid = tbuf[2] | (tbuf[3] << 8);
722 r = libusb_get_string_descriptor(dev, desc_index, langid, tbuf,
727 if (tbuf[1] != LIBUSB_DT_STRING)
728 return LIBUSB_ERROR_IO;
731 return LIBUSB_ERROR_IO;
733 for (di = 0, si = 2; si < tbuf[0]; si += 2) {
734 if (di >= (length - 1))
737 if ((tbuf[si] & 0x80) || (tbuf[si + 1])) /* non-ASCII */
740 data[di++] = tbuf[si];