1 | // SPDX-License-Identifier: GPL-2.0-or-later |
2 | /* |
3 | * |
4 | * Digianswer Bluetooth USB driver |
5 | * |
6 | * Copyright (C) 2004-2007 Marcel Holtmann <marcel@holtmann.org> |
7 | */ |
8 | |
9 | #include <linux/kernel.h> |
10 | #include <linux/module.h> |
11 | #include <linux/init.h> |
12 | #include <linux/slab.h> |
13 | #include <linux/types.h> |
14 | #include <linux/sched.h> |
15 | #include <linux/errno.h> |
16 | #include <linux/skbuff.h> |
17 | |
18 | #include <linux/usb.h> |
19 | |
20 | #include <net/bluetooth/bluetooth.h> |
21 | #include <net/bluetooth/hci_core.h> |
22 | |
23 | #include "h4_recv.h" |
24 | |
25 | #define VERSION "0.11" |
26 | |
27 | static const struct usb_device_id bpa10x_table[] = { |
28 | /* Tektronix BPA 100/105 (Digianswer) */ |
29 | { USB_DEVICE(0x08fd, 0x0002) }, |
30 | |
31 | { } /* Terminating entry */ |
32 | }; |
33 | |
34 | MODULE_DEVICE_TABLE(usb, bpa10x_table); |
35 | |
36 | struct bpa10x_data { |
37 | struct hci_dev *hdev; |
38 | struct usb_device *udev; |
39 | |
40 | struct usb_anchor tx_anchor; |
41 | struct usb_anchor rx_anchor; |
42 | |
43 | struct sk_buff *rx_skb[2]; |
44 | }; |
45 | |
46 | static void bpa10x_tx_complete(struct urb *urb) |
47 | { |
48 | struct sk_buff *skb = urb->context; |
49 | struct hci_dev *hdev = (struct hci_dev *) skb->dev; |
50 | |
51 | BT_DBG("%s urb %p status %d count %d" , hdev->name, |
52 | urb, urb->status, urb->actual_length); |
53 | |
54 | if (!test_bit(HCI_RUNNING, &hdev->flags)) |
55 | goto done; |
56 | |
57 | if (!urb->status) |
58 | hdev->stat.byte_tx += urb->transfer_buffer_length; |
59 | else |
60 | hdev->stat.err_tx++; |
61 | |
62 | done: |
63 | kfree(objp: urb->setup_packet); |
64 | |
65 | kfree_skb(skb); |
66 | } |
67 | |
68 | #define HCI_VENDOR_HDR_SIZE 5 |
69 | |
70 | #define HCI_RECV_VENDOR \ |
71 | .type = HCI_VENDOR_PKT, \ |
72 | .hlen = HCI_VENDOR_HDR_SIZE, \ |
73 | .loff = 3, \ |
74 | .lsize = 2, \ |
75 | .maxlen = HCI_MAX_FRAME_SIZE |
76 | |
77 | static const struct h4_recv_pkt bpa10x_recv_pkts[] = { |
78 | { H4_RECV_ACL, .recv = hci_recv_frame }, |
79 | { H4_RECV_SCO, .recv = hci_recv_frame }, |
80 | { H4_RECV_EVENT, .recv = hci_recv_frame }, |
81 | { HCI_RECV_VENDOR, .recv = hci_recv_diag }, |
82 | }; |
83 | |
84 | static void bpa10x_rx_complete(struct urb *urb) |
85 | { |
86 | struct hci_dev *hdev = urb->context; |
87 | struct bpa10x_data *data = hci_get_drvdata(hdev); |
88 | int err; |
89 | |
90 | BT_DBG("%s urb %p status %d count %d" , hdev->name, |
91 | urb, urb->status, urb->actual_length); |
92 | |
93 | if (!test_bit(HCI_RUNNING, &hdev->flags)) |
94 | return; |
95 | |
96 | if (urb->status == 0) { |
97 | bool idx = usb_pipebulk(urb->pipe); |
98 | |
99 | data->rx_skb[idx] = h4_recv_buf(hdev, skb: data->rx_skb[idx], |
100 | buffer: urb->transfer_buffer, |
101 | count: urb->actual_length, |
102 | pkts: bpa10x_recv_pkts, |
103 | ARRAY_SIZE(bpa10x_recv_pkts)); |
104 | if (IS_ERR(ptr: data->rx_skb[idx])) { |
105 | bt_dev_err(hdev, "corrupted event packet" ); |
106 | hdev->stat.err_rx++; |
107 | data->rx_skb[idx] = NULL; |
108 | } |
109 | } |
110 | |
111 | usb_anchor_urb(urb, anchor: &data->rx_anchor); |
112 | |
113 | err = usb_submit_urb(urb, GFP_ATOMIC); |
114 | if (err < 0) { |
115 | bt_dev_err(hdev, "urb %p failed to resubmit (%d)" , urb, -err); |
116 | usb_unanchor_urb(urb); |
117 | } |
118 | } |
119 | |
120 | static inline int bpa10x_submit_intr_urb(struct hci_dev *hdev) |
121 | { |
122 | struct bpa10x_data *data = hci_get_drvdata(hdev); |
123 | struct urb *urb; |
124 | unsigned char *buf; |
125 | unsigned int pipe; |
126 | int err, size = 16; |
127 | |
128 | BT_DBG("%s" , hdev->name); |
129 | |
130 | urb = usb_alloc_urb(iso_packets: 0, GFP_KERNEL); |
131 | if (!urb) |
132 | return -ENOMEM; |
133 | |
134 | buf = kmalloc(size, GFP_KERNEL); |
135 | if (!buf) { |
136 | usb_free_urb(urb); |
137 | return -ENOMEM; |
138 | } |
139 | |
140 | pipe = usb_rcvintpipe(data->udev, 0x81); |
141 | |
142 | usb_fill_int_urb(urb, dev: data->udev, pipe, transfer_buffer: buf, buffer_length: size, |
143 | complete_fn: bpa10x_rx_complete, context: hdev, interval: 1); |
144 | |
145 | urb->transfer_flags |= URB_FREE_BUFFER; |
146 | |
147 | usb_anchor_urb(urb, anchor: &data->rx_anchor); |
148 | |
149 | err = usb_submit_urb(urb, GFP_KERNEL); |
150 | if (err < 0) { |
151 | bt_dev_err(hdev, "urb %p submission failed (%d)" , urb, -err); |
152 | usb_unanchor_urb(urb); |
153 | } |
154 | |
155 | usb_free_urb(urb); |
156 | |
157 | return err; |
158 | } |
159 | |
160 | static inline int bpa10x_submit_bulk_urb(struct hci_dev *hdev) |
161 | { |
162 | struct bpa10x_data *data = hci_get_drvdata(hdev); |
163 | struct urb *urb; |
164 | unsigned char *buf; |
165 | unsigned int pipe; |
166 | int err, size = 64; |
167 | |
168 | BT_DBG("%s" , hdev->name); |
169 | |
170 | urb = usb_alloc_urb(iso_packets: 0, GFP_KERNEL); |
171 | if (!urb) |
172 | return -ENOMEM; |
173 | |
174 | buf = kmalloc(size, GFP_KERNEL); |
175 | if (!buf) { |
176 | usb_free_urb(urb); |
177 | return -ENOMEM; |
178 | } |
179 | |
180 | pipe = usb_rcvbulkpipe(data->udev, 0x82); |
181 | |
182 | usb_fill_bulk_urb(urb, dev: data->udev, pipe, |
183 | transfer_buffer: buf, buffer_length: size, complete_fn: bpa10x_rx_complete, context: hdev); |
184 | |
185 | urb->transfer_flags |= URB_FREE_BUFFER; |
186 | |
187 | usb_anchor_urb(urb, anchor: &data->rx_anchor); |
188 | |
189 | err = usb_submit_urb(urb, GFP_KERNEL); |
190 | if (err < 0) { |
191 | bt_dev_err(hdev, "urb %p submission failed (%d)" , urb, -err); |
192 | usb_unanchor_urb(urb); |
193 | } |
194 | |
195 | usb_free_urb(urb); |
196 | |
197 | return err; |
198 | } |
199 | |
200 | static int bpa10x_open(struct hci_dev *hdev) |
201 | { |
202 | struct bpa10x_data *data = hci_get_drvdata(hdev); |
203 | int err; |
204 | |
205 | BT_DBG("%s" , hdev->name); |
206 | |
207 | err = bpa10x_submit_intr_urb(hdev); |
208 | if (err < 0) |
209 | goto error; |
210 | |
211 | err = bpa10x_submit_bulk_urb(hdev); |
212 | if (err < 0) |
213 | goto error; |
214 | |
215 | return 0; |
216 | |
217 | error: |
218 | usb_kill_anchored_urbs(anchor: &data->rx_anchor); |
219 | |
220 | return err; |
221 | } |
222 | |
223 | static int bpa10x_close(struct hci_dev *hdev) |
224 | { |
225 | struct bpa10x_data *data = hci_get_drvdata(hdev); |
226 | |
227 | BT_DBG("%s" , hdev->name); |
228 | |
229 | usb_kill_anchored_urbs(anchor: &data->rx_anchor); |
230 | |
231 | return 0; |
232 | } |
233 | |
234 | static int bpa10x_flush(struct hci_dev *hdev) |
235 | { |
236 | struct bpa10x_data *data = hci_get_drvdata(hdev); |
237 | |
238 | BT_DBG("%s" , hdev->name); |
239 | |
240 | usb_kill_anchored_urbs(anchor: &data->tx_anchor); |
241 | |
242 | return 0; |
243 | } |
244 | |
245 | static int bpa10x_setup(struct hci_dev *hdev) |
246 | { |
247 | static const u8 req[] = { 0x07 }; |
248 | struct sk_buff *skb; |
249 | |
250 | BT_DBG("%s" , hdev->name); |
251 | |
252 | /* Read revision string */ |
253 | skb = __hci_cmd_sync(hdev, opcode: 0xfc0e, plen: sizeof(req), param: req, HCI_INIT_TIMEOUT); |
254 | if (IS_ERR(ptr: skb)) |
255 | return PTR_ERR(ptr: skb); |
256 | |
257 | bt_dev_info(hdev, "%s" , (char *)(skb->data + 1)); |
258 | |
259 | hci_set_fw_info(hdev, fmt: "%s" , skb->data + 1); |
260 | |
261 | kfree_skb(skb); |
262 | return 0; |
263 | } |
264 | |
265 | static int bpa10x_send_frame(struct hci_dev *hdev, struct sk_buff *skb) |
266 | { |
267 | struct bpa10x_data *data = hci_get_drvdata(hdev); |
268 | struct usb_ctrlrequest *dr; |
269 | struct urb *urb; |
270 | unsigned int pipe; |
271 | int err; |
272 | |
273 | BT_DBG("%s" , hdev->name); |
274 | |
275 | skb->dev = (void *) hdev; |
276 | |
277 | urb = usb_alloc_urb(iso_packets: 0, GFP_KERNEL); |
278 | if (!urb) |
279 | return -ENOMEM; |
280 | |
281 | /* Prepend skb with frame type */ |
282 | *(u8 *)skb_push(skb, len: 1) = hci_skb_pkt_type(skb); |
283 | |
284 | switch (hci_skb_pkt_type(skb)) { |
285 | case HCI_COMMAND_PKT: |
286 | dr = kmalloc(size: sizeof(*dr), GFP_KERNEL); |
287 | if (!dr) { |
288 | usb_free_urb(urb); |
289 | return -ENOMEM; |
290 | } |
291 | |
292 | dr->bRequestType = USB_TYPE_VENDOR; |
293 | dr->bRequest = 0; |
294 | dr->wIndex = 0; |
295 | dr->wValue = 0; |
296 | dr->wLength = __cpu_to_le16(skb->len); |
297 | |
298 | pipe = usb_sndctrlpipe(data->udev, 0x00); |
299 | |
300 | usb_fill_control_urb(urb, dev: data->udev, pipe, setup_packet: (void *) dr, |
301 | transfer_buffer: skb->data, buffer_length: skb->len, complete_fn: bpa10x_tx_complete, context: skb); |
302 | |
303 | hdev->stat.cmd_tx++; |
304 | break; |
305 | |
306 | case HCI_ACLDATA_PKT: |
307 | pipe = usb_sndbulkpipe(data->udev, 0x02); |
308 | |
309 | usb_fill_bulk_urb(urb, dev: data->udev, pipe, |
310 | transfer_buffer: skb->data, buffer_length: skb->len, complete_fn: bpa10x_tx_complete, context: skb); |
311 | |
312 | hdev->stat.acl_tx++; |
313 | break; |
314 | |
315 | case HCI_SCODATA_PKT: |
316 | pipe = usb_sndbulkpipe(data->udev, 0x02); |
317 | |
318 | usb_fill_bulk_urb(urb, dev: data->udev, pipe, |
319 | transfer_buffer: skb->data, buffer_length: skb->len, complete_fn: bpa10x_tx_complete, context: skb); |
320 | |
321 | hdev->stat.sco_tx++; |
322 | break; |
323 | |
324 | default: |
325 | usb_free_urb(urb); |
326 | return -EILSEQ; |
327 | } |
328 | |
329 | usb_anchor_urb(urb, anchor: &data->tx_anchor); |
330 | |
331 | err = usb_submit_urb(urb, GFP_KERNEL); |
332 | if (err < 0) { |
333 | bt_dev_err(hdev, "urb %p submission failed" , urb); |
334 | kfree(objp: urb->setup_packet); |
335 | usb_unanchor_urb(urb); |
336 | } |
337 | |
338 | usb_free_urb(urb); |
339 | |
340 | return err; |
341 | } |
342 | |
343 | static int bpa10x_set_diag(struct hci_dev *hdev, bool enable) |
344 | { |
345 | const u8 req[] = { 0x00, enable }; |
346 | struct sk_buff *skb; |
347 | |
348 | BT_DBG("%s" , hdev->name); |
349 | |
350 | if (!test_bit(HCI_RUNNING, &hdev->flags)) |
351 | return -ENETDOWN; |
352 | |
353 | /* Enable sniffer operation */ |
354 | skb = __hci_cmd_sync(hdev, opcode: 0xfc0e, plen: sizeof(req), param: req, HCI_INIT_TIMEOUT); |
355 | if (IS_ERR(ptr: skb)) |
356 | return PTR_ERR(ptr: skb); |
357 | |
358 | kfree_skb(skb); |
359 | return 0; |
360 | } |
361 | |
362 | static int bpa10x_probe(struct usb_interface *intf, |
363 | const struct usb_device_id *id) |
364 | { |
365 | struct bpa10x_data *data; |
366 | struct hci_dev *hdev; |
367 | int err; |
368 | |
369 | BT_DBG("intf %p id %p" , intf, id); |
370 | |
371 | if (intf->cur_altsetting->desc.bInterfaceNumber != 0) |
372 | return -ENODEV; |
373 | |
374 | data = devm_kzalloc(dev: &intf->dev, size: sizeof(*data), GFP_KERNEL); |
375 | if (!data) |
376 | return -ENOMEM; |
377 | |
378 | data->udev = interface_to_usbdev(intf); |
379 | |
380 | init_usb_anchor(anchor: &data->tx_anchor); |
381 | init_usb_anchor(anchor: &data->rx_anchor); |
382 | |
383 | hdev = hci_alloc_dev(); |
384 | if (!hdev) |
385 | return -ENOMEM; |
386 | |
387 | hdev->bus = HCI_USB; |
388 | hci_set_drvdata(hdev, data); |
389 | |
390 | data->hdev = hdev; |
391 | |
392 | SET_HCIDEV_DEV(hdev, &intf->dev); |
393 | |
394 | hdev->open = bpa10x_open; |
395 | hdev->close = bpa10x_close; |
396 | hdev->flush = bpa10x_flush; |
397 | hdev->setup = bpa10x_setup; |
398 | hdev->send = bpa10x_send_frame; |
399 | hdev->set_diag = bpa10x_set_diag; |
400 | |
401 | set_bit(nr: HCI_QUIRK_RESET_ON_CLOSE, addr: &hdev->quirks); |
402 | |
403 | err = hci_register_dev(hdev); |
404 | if (err < 0) { |
405 | hci_free_dev(hdev); |
406 | return err; |
407 | } |
408 | |
409 | usb_set_intfdata(intf, data); |
410 | |
411 | return 0; |
412 | } |
413 | |
414 | static void bpa10x_disconnect(struct usb_interface *intf) |
415 | { |
416 | struct bpa10x_data *data = usb_get_intfdata(intf); |
417 | |
418 | BT_DBG("intf %p" , intf); |
419 | |
420 | if (!data) |
421 | return; |
422 | |
423 | usb_set_intfdata(intf, NULL); |
424 | |
425 | hci_unregister_dev(hdev: data->hdev); |
426 | |
427 | hci_free_dev(hdev: data->hdev); |
428 | kfree_skb(skb: data->rx_skb[0]); |
429 | kfree_skb(skb: data->rx_skb[1]); |
430 | } |
431 | |
432 | static struct usb_driver bpa10x_driver = { |
433 | .name = "bpa10x" , |
434 | .probe = bpa10x_probe, |
435 | .disconnect = bpa10x_disconnect, |
436 | .id_table = bpa10x_table, |
437 | .disable_hub_initiated_lpm = 1, |
438 | }; |
439 | |
440 | module_usb_driver(bpa10x_driver); |
441 | |
442 | MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>" ); |
443 | MODULE_DESCRIPTION("Digianswer Bluetooth USB driver ver " VERSION); |
444 | MODULE_VERSION(VERSION); |
445 | MODULE_LICENSE("GPL" ); |
446 | |