Loading...
1/*
2 *
3 * Generic Bluetooth USB driver
4 *
5 * Copyright (C) 2005-2008 Marcel Holtmann <marcel@holtmann.org>
6 *
7 *
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License as published by
10 * the Free Software Foundation; either version 2 of the License, or
11 * (at your option) any later version.
12 *
13 * This program is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 * GNU General Public License for more details.
17 *
18 * You should have received a copy of the GNU General Public License
19 * along with this program; if not, write to the Free Software
20 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
21 *
22 */
23
24#include <linux/kernel.h>
25#include <linux/module.h>
26#include <linux/init.h>
27#include <linux/slab.h>
28#include <linux/types.h>
29#include <linux/sched.h>
30#include <linux/errno.h>
31#include <linux/skbuff.h>
32
33#include <linux/usb.h>
34
35#include <net/bluetooth/bluetooth.h>
36#include <net/bluetooth/hci_core.h>
37
38#define VERSION "0.6"
39
40static int ignore_dga;
41static int ignore_csr;
42static int ignore_sniffer;
43static int disable_scofix;
44static int force_scofix;
45
46static int reset = 1;
47
48static struct usb_driver btusb_driver;
49
50#define BTUSB_IGNORE 0x01
51#define BTUSB_DIGIANSWER 0x02
52#define BTUSB_CSR 0x04
53#define BTUSB_SNIFFER 0x08
54#define BTUSB_BCM92035 0x10
55#define BTUSB_BROKEN_ISOC 0x20
56#define BTUSB_WRONG_SCO_MTU 0x40
57#define BTUSB_ATH3012 0x80
58
59static struct usb_device_id btusb_table[] = {
60 /* Generic Bluetooth USB device */
61 { USB_DEVICE_INFO(0xe0, 0x01, 0x01) },
62
63 /* Apple MacBookPro 7,1 */
64 { USB_DEVICE(0x05ac, 0x8213) },
65
66 /* Apple iMac11,1 */
67 { USB_DEVICE(0x05ac, 0x8215) },
68
69 /* Apple MacBookPro6,2 */
70 { USB_DEVICE(0x05ac, 0x8218) },
71
72 /* Apple MacBookAir3,1, MacBookAir3,2 */
73 { USB_DEVICE(0x05ac, 0x821b) },
74
75 /* Apple MacBookAir4,1 */
76 { USB_DEVICE(0x05ac, 0x821f) },
77
78 /* Apple MacBookPro8,2 */
79 { USB_DEVICE(0x05ac, 0x821a) },
80
81 /* Apple MacMini5,1 */
82 { USB_DEVICE(0x05ac, 0x8281) },
83
84 /* AVM BlueFRITZ! USB v2.0 */
85 { USB_DEVICE(0x057c, 0x3800) },
86
87 /* Bluetooth Ultraport Module from IBM */
88 { USB_DEVICE(0x04bf, 0x030a) },
89
90 /* ALPS Modules with non-standard id */
91 { USB_DEVICE(0x044e, 0x3001) },
92 { USB_DEVICE(0x044e, 0x3002) },
93
94 /* Ericsson with non-standard id */
95 { USB_DEVICE(0x0bdb, 0x1002) },
96
97 /* Canyon CN-BTU1 with HID interfaces */
98 { USB_DEVICE(0x0c10, 0x0000) },
99
100 { } /* Terminating entry */
101};
102
103MODULE_DEVICE_TABLE(usb, btusb_table);
104
105static struct usb_device_id blacklist_table[] = {
106 /* CSR BlueCore devices */
107 { USB_DEVICE(0x0a12, 0x0001), .driver_info = BTUSB_CSR },
108
109 /* Broadcom BCM2033 without firmware */
110 { USB_DEVICE(0x0a5c, 0x2033), .driver_info = BTUSB_IGNORE },
111
112 /* Atheros 3011 with sflash firmware */
113 { USB_DEVICE(0x0cf3, 0x3002), .driver_info = BTUSB_IGNORE },
114 { USB_DEVICE(0x13d3, 0x3304), .driver_info = BTUSB_IGNORE },
115 { USB_DEVICE(0x0930, 0x0215), .driver_info = BTUSB_IGNORE },
116
117 /* Atheros AR9285 Malbec with sflash firmware */
118 { USB_DEVICE(0x03f0, 0x311d), .driver_info = BTUSB_IGNORE },
119
120 /* Atheros 3012 with sflash firmware */
121 { USB_DEVICE(0x0cf3, 0x3004), .driver_info = BTUSB_ATH3012 },
122
123 /* Atheros AR5BBU12 with sflash firmware */
124 { USB_DEVICE(0x0489, 0xe02c), .driver_info = BTUSB_IGNORE },
125
126 /* Broadcom BCM2035 */
127 { USB_DEVICE(0x0a5c, 0x2035), .driver_info = BTUSB_WRONG_SCO_MTU },
128 { USB_DEVICE(0x0a5c, 0x200a), .driver_info = BTUSB_WRONG_SCO_MTU },
129 { USB_DEVICE(0x0a5c, 0x2009), .driver_info = BTUSB_BCM92035 },
130
131 /* Broadcom BCM2045 */
132 { USB_DEVICE(0x0a5c, 0x2039), .driver_info = BTUSB_WRONG_SCO_MTU },
133 { USB_DEVICE(0x0a5c, 0x2101), .driver_info = BTUSB_WRONG_SCO_MTU },
134
135 /* IBM/Lenovo ThinkPad with Broadcom chip */
136 { USB_DEVICE(0x0a5c, 0x201e), .driver_info = BTUSB_WRONG_SCO_MTU },
137 { USB_DEVICE(0x0a5c, 0x2110), .driver_info = BTUSB_WRONG_SCO_MTU },
138
139 /* HP laptop with Broadcom chip */
140 { USB_DEVICE(0x03f0, 0x171d), .driver_info = BTUSB_WRONG_SCO_MTU },
141
142 /* Dell laptop with Broadcom chip */
143 { USB_DEVICE(0x413c, 0x8126), .driver_info = BTUSB_WRONG_SCO_MTU },
144
145 /* Dell Wireless 370 and 410 devices */
146 { USB_DEVICE(0x413c, 0x8152), .driver_info = BTUSB_WRONG_SCO_MTU },
147 { USB_DEVICE(0x413c, 0x8156), .driver_info = BTUSB_WRONG_SCO_MTU },
148
149 /* Belkin F8T012 and F8T013 devices */
150 { USB_DEVICE(0x050d, 0x0012), .driver_info = BTUSB_WRONG_SCO_MTU },
151 { USB_DEVICE(0x050d, 0x0013), .driver_info = BTUSB_WRONG_SCO_MTU },
152
153 /* Asus WL-BTD202 device */
154 { USB_DEVICE(0x0b05, 0x1715), .driver_info = BTUSB_WRONG_SCO_MTU },
155
156 /* Kensington Bluetooth USB adapter */
157 { USB_DEVICE(0x047d, 0x105e), .driver_info = BTUSB_WRONG_SCO_MTU },
158
159 /* RTX Telecom based adapters with buggy SCO support */
160 { USB_DEVICE(0x0400, 0x0807), .driver_info = BTUSB_BROKEN_ISOC },
161 { USB_DEVICE(0x0400, 0x080a), .driver_info = BTUSB_BROKEN_ISOC },
162
163 /* CONWISE Technology based adapters with buggy SCO support */
164 { USB_DEVICE(0x0e5e, 0x6622), .driver_info = BTUSB_BROKEN_ISOC },
165
166 /* Digianswer devices */
167 { USB_DEVICE(0x08fd, 0x0001), .driver_info = BTUSB_DIGIANSWER },
168 { USB_DEVICE(0x08fd, 0x0002), .driver_info = BTUSB_IGNORE },
169
170 /* CSR BlueCore Bluetooth Sniffer */
171 { USB_DEVICE(0x0a12, 0x0002), .driver_info = BTUSB_SNIFFER },
172
173 /* Frontline ComProbe Bluetooth Sniffer */
174 { USB_DEVICE(0x16d3, 0x0002), .driver_info = BTUSB_SNIFFER },
175
176 { } /* Terminating entry */
177};
178
179#define BTUSB_MAX_ISOC_FRAMES 10
180
181#define BTUSB_INTR_RUNNING 0
182#define BTUSB_BULK_RUNNING 1
183#define BTUSB_ISOC_RUNNING 2
184#define BTUSB_SUSPENDING 3
185#define BTUSB_DID_ISO_RESUME 4
186
187struct btusb_data {
188 struct hci_dev *hdev;
189 struct usb_device *udev;
190 struct usb_interface *intf;
191 struct usb_interface *isoc;
192
193 spinlock_t lock;
194
195 unsigned long flags;
196
197 struct work_struct work;
198 struct work_struct waker;
199
200 struct usb_anchor tx_anchor;
201 struct usb_anchor intr_anchor;
202 struct usb_anchor bulk_anchor;
203 struct usb_anchor isoc_anchor;
204 struct usb_anchor deferred;
205 int tx_in_flight;
206 spinlock_t txlock;
207
208 struct usb_endpoint_descriptor *intr_ep;
209 struct usb_endpoint_descriptor *bulk_tx_ep;
210 struct usb_endpoint_descriptor *bulk_rx_ep;
211 struct usb_endpoint_descriptor *isoc_tx_ep;
212 struct usb_endpoint_descriptor *isoc_rx_ep;
213
214 __u8 cmdreq_type;
215
216 unsigned int sco_num;
217 int isoc_altsetting;
218 int suspend_count;
219};
220
221static int inc_tx(struct btusb_data *data)
222{
223 unsigned long flags;
224 int rv;
225
226 spin_lock_irqsave(&data->txlock, flags);
227 rv = test_bit(BTUSB_SUSPENDING, &data->flags);
228 if (!rv)
229 data->tx_in_flight++;
230 spin_unlock_irqrestore(&data->txlock, flags);
231
232 return rv;
233}
234
235static void btusb_intr_complete(struct urb *urb)
236{
237 struct hci_dev *hdev = urb->context;
238 struct btusb_data *data = hdev->driver_data;
239 int err;
240
241 BT_DBG("%s urb %p status %d count %d", hdev->name,
242 urb, urb->status, urb->actual_length);
243
244 if (!test_bit(HCI_RUNNING, &hdev->flags))
245 return;
246
247 if (urb->status == 0) {
248 hdev->stat.byte_rx += urb->actual_length;
249
250 if (hci_recv_fragment(hdev, HCI_EVENT_PKT,
251 urb->transfer_buffer,
252 urb->actual_length) < 0) {
253 BT_ERR("%s corrupted event packet", hdev->name);
254 hdev->stat.err_rx++;
255 }
256 }
257
258 if (!test_bit(BTUSB_INTR_RUNNING, &data->flags))
259 return;
260
261 usb_mark_last_busy(data->udev);
262 usb_anchor_urb(urb, &data->intr_anchor);
263
264 err = usb_submit_urb(urb, GFP_ATOMIC);
265 if (err < 0) {
266 /* -EPERM: urb is being killed;
267 * -ENODEV: device got disconnected */
268 if (err != -EPERM && err != -ENODEV)
269 BT_ERR("%s urb %p failed to resubmit (%d)",
270 hdev->name, urb, -err);
271 usb_unanchor_urb(urb);
272 }
273}
274
275static int btusb_submit_intr_urb(struct hci_dev *hdev, gfp_t mem_flags)
276{
277 struct btusb_data *data = hdev->driver_data;
278 struct urb *urb;
279 unsigned char *buf;
280 unsigned int pipe;
281 int err, size;
282
283 BT_DBG("%s", hdev->name);
284
285 if (!data->intr_ep)
286 return -ENODEV;
287
288 urb = usb_alloc_urb(0, mem_flags);
289 if (!urb)
290 return -ENOMEM;
291
292 size = le16_to_cpu(data->intr_ep->wMaxPacketSize);
293
294 buf = kmalloc(size, mem_flags);
295 if (!buf) {
296 usb_free_urb(urb);
297 return -ENOMEM;
298 }
299
300 pipe = usb_rcvintpipe(data->udev, data->intr_ep->bEndpointAddress);
301
302 usb_fill_int_urb(urb, data->udev, pipe, buf, size,
303 btusb_intr_complete, hdev,
304 data->intr_ep->bInterval);
305
306 urb->transfer_flags |= URB_FREE_BUFFER;
307
308 usb_anchor_urb(urb, &data->intr_anchor);
309
310 err = usb_submit_urb(urb, mem_flags);
311 if (err < 0) {
312 BT_ERR("%s urb %p submission failed (%d)",
313 hdev->name, urb, -err);
314 usb_unanchor_urb(urb);
315 }
316
317 usb_free_urb(urb);
318
319 return err;
320}
321
322static void btusb_bulk_complete(struct urb *urb)
323{
324 struct hci_dev *hdev = urb->context;
325 struct btusb_data *data = hdev->driver_data;
326 int err;
327
328 BT_DBG("%s urb %p status %d count %d", hdev->name,
329 urb, urb->status, urb->actual_length);
330
331 if (!test_bit(HCI_RUNNING, &hdev->flags))
332 return;
333
334 if (urb->status == 0) {
335 hdev->stat.byte_rx += urb->actual_length;
336
337 if (hci_recv_fragment(hdev, HCI_ACLDATA_PKT,
338 urb->transfer_buffer,
339 urb->actual_length) < 0) {
340 BT_ERR("%s corrupted ACL packet", hdev->name);
341 hdev->stat.err_rx++;
342 }
343 }
344
345 if (!test_bit(BTUSB_BULK_RUNNING, &data->flags))
346 return;
347
348 usb_anchor_urb(urb, &data->bulk_anchor);
349 usb_mark_last_busy(data->udev);
350
351 err = usb_submit_urb(urb, GFP_ATOMIC);
352 if (err < 0) {
353 /* -EPERM: urb is being killed;
354 * -ENODEV: device got disconnected */
355 if (err != -EPERM && err != -ENODEV)
356 BT_ERR("%s urb %p failed to resubmit (%d)",
357 hdev->name, urb, -err);
358 usb_unanchor_urb(urb);
359 }
360}
361
362static int btusb_submit_bulk_urb(struct hci_dev *hdev, gfp_t mem_flags)
363{
364 struct btusb_data *data = hdev->driver_data;
365 struct urb *urb;
366 unsigned char *buf;
367 unsigned int pipe;
368 int err, size = HCI_MAX_FRAME_SIZE;
369
370 BT_DBG("%s", hdev->name);
371
372 if (!data->bulk_rx_ep)
373 return -ENODEV;
374
375 urb = usb_alloc_urb(0, mem_flags);
376 if (!urb)
377 return -ENOMEM;
378
379 buf = kmalloc(size, mem_flags);
380 if (!buf) {
381 usb_free_urb(urb);
382 return -ENOMEM;
383 }
384
385 pipe = usb_rcvbulkpipe(data->udev, data->bulk_rx_ep->bEndpointAddress);
386
387 usb_fill_bulk_urb(urb, data->udev, pipe,
388 buf, size, btusb_bulk_complete, hdev);
389
390 urb->transfer_flags |= URB_FREE_BUFFER;
391
392 usb_mark_last_busy(data->udev);
393 usb_anchor_urb(urb, &data->bulk_anchor);
394
395 err = usb_submit_urb(urb, mem_flags);
396 if (err < 0) {
397 BT_ERR("%s urb %p submission failed (%d)",
398 hdev->name, urb, -err);
399 usb_unanchor_urb(urb);
400 }
401
402 usb_free_urb(urb);
403
404 return err;
405}
406
407static void btusb_isoc_complete(struct urb *urb)
408{
409 struct hci_dev *hdev = urb->context;
410 struct btusb_data *data = hdev->driver_data;
411 int i, err;
412
413 BT_DBG("%s urb %p status %d count %d", hdev->name,
414 urb, urb->status, urb->actual_length);
415
416 if (!test_bit(HCI_RUNNING, &hdev->flags))
417 return;
418
419 if (urb->status == 0) {
420 for (i = 0; i < urb->number_of_packets; i++) {
421 unsigned int offset = urb->iso_frame_desc[i].offset;
422 unsigned int length = urb->iso_frame_desc[i].actual_length;
423
424 if (urb->iso_frame_desc[i].status)
425 continue;
426
427 hdev->stat.byte_rx += length;
428
429 if (hci_recv_fragment(hdev, HCI_SCODATA_PKT,
430 urb->transfer_buffer + offset,
431 length) < 0) {
432 BT_ERR("%s corrupted SCO packet", hdev->name);
433 hdev->stat.err_rx++;
434 }
435 }
436 }
437
438 if (!test_bit(BTUSB_ISOC_RUNNING, &data->flags))
439 return;
440
441 usb_anchor_urb(urb, &data->isoc_anchor);
442
443 err = usb_submit_urb(urb, GFP_ATOMIC);
444 if (err < 0) {
445 /* -EPERM: urb is being killed;
446 * -ENODEV: device got disconnected */
447 if (err != -EPERM && err != -ENODEV)
448 BT_ERR("%s urb %p failed to resubmit (%d)",
449 hdev->name, urb, -err);
450 usb_unanchor_urb(urb);
451 }
452}
453
454static inline void __fill_isoc_descriptor(struct urb *urb, int len, int mtu)
455{
456 int i, offset = 0;
457
458 BT_DBG("len %d mtu %d", len, mtu);
459
460 for (i = 0; i < BTUSB_MAX_ISOC_FRAMES && len >= mtu;
461 i++, offset += mtu, len -= mtu) {
462 urb->iso_frame_desc[i].offset = offset;
463 urb->iso_frame_desc[i].length = mtu;
464 }
465
466 if (len && i < BTUSB_MAX_ISOC_FRAMES) {
467 urb->iso_frame_desc[i].offset = offset;
468 urb->iso_frame_desc[i].length = len;
469 i++;
470 }
471
472 urb->number_of_packets = i;
473}
474
475static int btusb_submit_isoc_urb(struct hci_dev *hdev, gfp_t mem_flags)
476{
477 struct btusb_data *data = hdev->driver_data;
478 struct urb *urb;
479 unsigned char *buf;
480 unsigned int pipe;
481 int err, size;
482
483 BT_DBG("%s", hdev->name);
484
485 if (!data->isoc_rx_ep)
486 return -ENODEV;
487
488 urb = usb_alloc_urb(BTUSB_MAX_ISOC_FRAMES, mem_flags);
489 if (!urb)
490 return -ENOMEM;
491
492 size = le16_to_cpu(data->isoc_rx_ep->wMaxPacketSize) *
493 BTUSB_MAX_ISOC_FRAMES;
494
495 buf = kmalloc(size, mem_flags);
496 if (!buf) {
497 usb_free_urb(urb);
498 return -ENOMEM;
499 }
500
501 pipe = usb_rcvisocpipe(data->udev, data->isoc_rx_ep->bEndpointAddress);
502
503 urb->dev = data->udev;
504 urb->pipe = pipe;
505 urb->context = hdev;
506 urb->complete = btusb_isoc_complete;
507 urb->interval = data->isoc_rx_ep->bInterval;
508
509 urb->transfer_flags = URB_FREE_BUFFER | URB_ISO_ASAP;
510 urb->transfer_buffer = buf;
511 urb->transfer_buffer_length = size;
512
513 __fill_isoc_descriptor(urb, size,
514 le16_to_cpu(data->isoc_rx_ep->wMaxPacketSize));
515
516 usb_anchor_urb(urb, &data->isoc_anchor);
517
518 err = usb_submit_urb(urb, mem_flags);
519 if (err < 0) {
520 BT_ERR("%s urb %p submission failed (%d)",
521 hdev->name, urb, -err);
522 usb_unanchor_urb(urb);
523 }
524
525 usb_free_urb(urb);
526
527 return err;
528}
529
530static void btusb_tx_complete(struct urb *urb)
531{
532 struct sk_buff *skb = urb->context;
533 struct hci_dev *hdev = (struct hci_dev *) skb->dev;
534 struct btusb_data *data = hdev->driver_data;
535
536 BT_DBG("%s urb %p status %d count %d", hdev->name,
537 urb, urb->status, urb->actual_length);
538
539 if (!test_bit(HCI_RUNNING, &hdev->flags))
540 goto done;
541
542 if (!urb->status)
543 hdev->stat.byte_tx += urb->transfer_buffer_length;
544 else
545 hdev->stat.err_tx++;
546
547done:
548 spin_lock(&data->txlock);
549 data->tx_in_flight--;
550 spin_unlock(&data->txlock);
551
552 kfree(urb->setup_packet);
553
554 kfree_skb(skb);
555}
556
557static void btusb_isoc_tx_complete(struct urb *urb)
558{
559 struct sk_buff *skb = urb->context;
560 struct hci_dev *hdev = (struct hci_dev *) skb->dev;
561
562 BT_DBG("%s urb %p status %d count %d", hdev->name,
563 urb, urb->status, urb->actual_length);
564
565 if (!test_bit(HCI_RUNNING, &hdev->flags))
566 goto done;
567
568 if (!urb->status)
569 hdev->stat.byte_tx += urb->transfer_buffer_length;
570 else
571 hdev->stat.err_tx++;
572
573done:
574 kfree(urb->setup_packet);
575
576 kfree_skb(skb);
577}
578
579static int btusb_open(struct hci_dev *hdev)
580{
581 struct btusb_data *data = hdev->driver_data;
582 int err;
583
584 BT_DBG("%s", hdev->name);
585
586 err = usb_autopm_get_interface(data->intf);
587 if (err < 0)
588 return err;
589
590 data->intf->needs_remote_wakeup = 1;
591
592 if (test_and_set_bit(HCI_RUNNING, &hdev->flags))
593 goto done;
594
595 if (test_and_set_bit(BTUSB_INTR_RUNNING, &data->flags))
596 goto done;
597
598 err = btusb_submit_intr_urb(hdev, GFP_KERNEL);
599 if (err < 0)
600 goto failed;
601
602 err = btusb_submit_bulk_urb(hdev, GFP_KERNEL);
603 if (err < 0) {
604 usb_kill_anchored_urbs(&data->intr_anchor);
605 goto failed;
606 }
607
608 set_bit(BTUSB_BULK_RUNNING, &data->flags);
609 btusb_submit_bulk_urb(hdev, GFP_KERNEL);
610
611done:
612 usb_autopm_put_interface(data->intf);
613 return 0;
614
615failed:
616 clear_bit(BTUSB_INTR_RUNNING, &data->flags);
617 clear_bit(HCI_RUNNING, &hdev->flags);
618 usb_autopm_put_interface(data->intf);
619 return err;
620}
621
622static void btusb_stop_traffic(struct btusb_data *data)
623{
624 usb_kill_anchored_urbs(&data->intr_anchor);
625 usb_kill_anchored_urbs(&data->bulk_anchor);
626 usb_kill_anchored_urbs(&data->isoc_anchor);
627}
628
629static int btusb_close(struct hci_dev *hdev)
630{
631 struct btusb_data *data = hdev->driver_data;
632 int err;
633
634 BT_DBG("%s", hdev->name);
635
636 if (!test_and_clear_bit(HCI_RUNNING, &hdev->flags))
637 return 0;
638
639 cancel_work_sync(&data->work);
640 cancel_work_sync(&data->waker);
641
642 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
643 clear_bit(BTUSB_BULK_RUNNING, &data->flags);
644 clear_bit(BTUSB_INTR_RUNNING, &data->flags);
645
646 btusb_stop_traffic(data);
647 err = usb_autopm_get_interface(data->intf);
648 if (err < 0)
649 goto failed;
650
651 data->intf->needs_remote_wakeup = 0;
652 usb_autopm_put_interface(data->intf);
653
654failed:
655 usb_scuttle_anchored_urbs(&data->deferred);
656 return 0;
657}
658
659static int btusb_flush(struct hci_dev *hdev)
660{
661 struct btusb_data *data = hdev->driver_data;
662
663 BT_DBG("%s", hdev->name);
664
665 usb_kill_anchored_urbs(&data->tx_anchor);
666
667 return 0;
668}
669
670static int btusb_send_frame(struct sk_buff *skb)
671{
672 struct hci_dev *hdev = (struct hci_dev *) skb->dev;
673 struct btusb_data *data = hdev->driver_data;
674 struct usb_ctrlrequest *dr;
675 struct urb *urb;
676 unsigned int pipe;
677 int err;
678
679 BT_DBG("%s", hdev->name);
680
681 if (!test_bit(HCI_RUNNING, &hdev->flags))
682 return -EBUSY;
683
684 switch (bt_cb(skb)->pkt_type) {
685 case HCI_COMMAND_PKT:
686 urb = usb_alloc_urb(0, GFP_ATOMIC);
687 if (!urb)
688 return -ENOMEM;
689
690 dr = kmalloc(sizeof(*dr), GFP_ATOMIC);
691 if (!dr) {
692 usb_free_urb(urb);
693 return -ENOMEM;
694 }
695
696 dr->bRequestType = data->cmdreq_type;
697 dr->bRequest = 0;
698 dr->wIndex = 0;
699 dr->wValue = 0;
700 dr->wLength = __cpu_to_le16(skb->len);
701
702 pipe = usb_sndctrlpipe(data->udev, 0x00);
703
704 usb_fill_control_urb(urb, data->udev, pipe, (void *) dr,
705 skb->data, skb->len, btusb_tx_complete, skb);
706
707 hdev->stat.cmd_tx++;
708 break;
709
710 case HCI_ACLDATA_PKT:
711 if (!data->bulk_tx_ep || (hdev->conn_hash.acl_num < 1 &&
712 hdev->conn_hash.le_num < 1))
713 return -ENODEV;
714
715 urb = usb_alloc_urb(0, GFP_ATOMIC);
716 if (!urb)
717 return -ENOMEM;
718
719 pipe = usb_sndbulkpipe(data->udev,
720 data->bulk_tx_ep->bEndpointAddress);
721
722 usb_fill_bulk_urb(urb, data->udev, pipe,
723 skb->data, skb->len, btusb_tx_complete, skb);
724
725 hdev->stat.acl_tx++;
726 break;
727
728 case HCI_SCODATA_PKT:
729 if (!data->isoc_tx_ep || hdev->conn_hash.sco_num < 1)
730 return -ENODEV;
731
732 urb = usb_alloc_urb(BTUSB_MAX_ISOC_FRAMES, GFP_ATOMIC);
733 if (!urb)
734 return -ENOMEM;
735
736 pipe = usb_sndisocpipe(data->udev,
737 data->isoc_tx_ep->bEndpointAddress);
738
739 usb_fill_int_urb(urb, data->udev, pipe,
740 skb->data, skb->len, btusb_isoc_tx_complete,
741 skb, data->isoc_tx_ep->bInterval);
742
743 urb->transfer_flags = URB_ISO_ASAP;
744
745 __fill_isoc_descriptor(urb, skb->len,
746 le16_to_cpu(data->isoc_tx_ep->wMaxPacketSize));
747
748 hdev->stat.sco_tx++;
749 goto skip_waking;
750
751 default:
752 return -EILSEQ;
753 }
754
755 err = inc_tx(data);
756 if (err) {
757 usb_anchor_urb(urb, &data->deferred);
758 schedule_work(&data->waker);
759 err = 0;
760 goto done;
761 }
762
763skip_waking:
764 usb_anchor_urb(urb, &data->tx_anchor);
765
766 err = usb_submit_urb(urb, GFP_ATOMIC);
767 if (err < 0) {
768 BT_ERR("%s urb %p submission failed", hdev->name, urb);
769 kfree(urb->setup_packet);
770 usb_unanchor_urb(urb);
771 } else {
772 usb_mark_last_busy(data->udev);
773 }
774
775 usb_free_urb(urb);
776
777done:
778 return err;
779}
780
781static void btusb_destruct(struct hci_dev *hdev)
782{
783 struct btusb_data *data = hdev->driver_data;
784
785 BT_DBG("%s", hdev->name);
786
787 kfree(data);
788}
789
790static void btusb_notify(struct hci_dev *hdev, unsigned int evt)
791{
792 struct btusb_data *data = hdev->driver_data;
793
794 BT_DBG("%s evt %d", hdev->name, evt);
795
796 if (hdev->conn_hash.sco_num != data->sco_num) {
797 data->sco_num = hdev->conn_hash.sco_num;
798 schedule_work(&data->work);
799 }
800}
801
802static inline int __set_isoc_interface(struct hci_dev *hdev, int altsetting)
803{
804 struct btusb_data *data = hdev->driver_data;
805 struct usb_interface *intf = data->isoc;
806 struct usb_endpoint_descriptor *ep_desc;
807 int i, err;
808
809 if (!data->isoc)
810 return -ENODEV;
811
812 err = usb_set_interface(data->udev, 1, altsetting);
813 if (err < 0) {
814 BT_ERR("%s setting interface failed (%d)", hdev->name, -err);
815 return err;
816 }
817
818 data->isoc_altsetting = altsetting;
819
820 data->isoc_tx_ep = NULL;
821 data->isoc_rx_ep = NULL;
822
823 for (i = 0; i < intf->cur_altsetting->desc.bNumEndpoints; i++) {
824 ep_desc = &intf->cur_altsetting->endpoint[i].desc;
825
826 if (!data->isoc_tx_ep && usb_endpoint_is_isoc_out(ep_desc)) {
827 data->isoc_tx_ep = ep_desc;
828 continue;
829 }
830
831 if (!data->isoc_rx_ep && usb_endpoint_is_isoc_in(ep_desc)) {
832 data->isoc_rx_ep = ep_desc;
833 continue;
834 }
835 }
836
837 if (!data->isoc_tx_ep || !data->isoc_rx_ep) {
838 BT_ERR("%s invalid SCO descriptors", hdev->name);
839 return -ENODEV;
840 }
841
842 return 0;
843}
844
845static void btusb_work(struct work_struct *work)
846{
847 struct btusb_data *data = container_of(work, struct btusb_data, work);
848 struct hci_dev *hdev = data->hdev;
849 int err;
850
851 if (hdev->conn_hash.sco_num > 0) {
852 if (!test_bit(BTUSB_DID_ISO_RESUME, &data->flags)) {
853 err = usb_autopm_get_interface(data->isoc ? data->isoc : data->intf);
854 if (err < 0) {
855 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
856 usb_kill_anchored_urbs(&data->isoc_anchor);
857 return;
858 }
859
860 set_bit(BTUSB_DID_ISO_RESUME, &data->flags);
861 }
862 if (data->isoc_altsetting != 2) {
863 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
864 usb_kill_anchored_urbs(&data->isoc_anchor);
865
866 if (__set_isoc_interface(hdev, 2) < 0)
867 return;
868 }
869
870 if (!test_and_set_bit(BTUSB_ISOC_RUNNING, &data->flags)) {
871 if (btusb_submit_isoc_urb(hdev, GFP_KERNEL) < 0)
872 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
873 else
874 btusb_submit_isoc_urb(hdev, GFP_KERNEL);
875 }
876 } else {
877 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
878 usb_kill_anchored_urbs(&data->isoc_anchor);
879
880 __set_isoc_interface(hdev, 0);
881 if (test_and_clear_bit(BTUSB_DID_ISO_RESUME, &data->flags))
882 usb_autopm_put_interface(data->isoc ? data->isoc : data->intf);
883 }
884}
885
886static void btusb_waker(struct work_struct *work)
887{
888 struct btusb_data *data = container_of(work, struct btusb_data, waker);
889 int err;
890
891 err = usb_autopm_get_interface(data->intf);
892 if (err < 0)
893 return;
894
895 usb_autopm_put_interface(data->intf);
896}
897
898static int btusb_probe(struct usb_interface *intf,
899 const struct usb_device_id *id)
900{
901 struct usb_endpoint_descriptor *ep_desc;
902 struct btusb_data *data;
903 struct hci_dev *hdev;
904 int i, err;
905
906 BT_DBG("intf %p id %p", intf, id);
907
908 /* interface numbers are hardcoded in the spec */
909 if (intf->cur_altsetting->desc.bInterfaceNumber != 0)
910 return -ENODEV;
911
912 if (!id->driver_info) {
913 const struct usb_device_id *match;
914 match = usb_match_id(intf, blacklist_table);
915 if (match)
916 id = match;
917 }
918
919 if (id->driver_info == BTUSB_IGNORE)
920 return -ENODEV;
921
922 if (ignore_dga && id->driver_info & BTUSB_DIGIANSWER)
923 return -ENODEV;
924
925 if (ignore_csr && id->driver_info & BTUSB_CSR)
926 return -ENODEV;
927
928 if (ignore_sniffer && id->driver_info & BTUSB_SNIFFER)
929 return -ENODEV;
930
931 if (id->driver_info & BTUSB_ATH3012) {
932 struct usb_device *udev = interface_to_usbdev(intf);
933
934 /* Old firmware would otherwise let ath3k driver load
935 * patch and sysconfig files */
936 if (le16_to_cpu(udev->descriptor.bcdDevice) <= 0x0001)
937 return -ENODEV;
938 }
939
940 data = kzalloc(sizeof(*data), GFP_KERNEL);
941 if (!data)
942 return -ENOMEM;
943
944 for (i = 0; i < intf->cur_altsetting->desc.bNumEndpoints; i++) {
945 ep_desc = &intf->cur_altsetting->endpoint[i].desc;
946
947 if (!data->intr_ep && usb_endpoint_is_int_in(ep_desc)) {
948 data->intr_ep = ep_desc;
949 continue;
950 }
951
952 if (!data->bulk_tx_ep && usb_endpoint_is_bulk_out(ep_desc)) {
953 data->bulk_tx_ep = ep_desc;
954 continue;
955 }
956
957 if (!data->bulk_rx_ep && usb_endpoint_is_bulk_in(ep_desc)) {
958 data->bulk_rx_ep = ep_desc;
959 continue;
960 }
961 }
962
963 if (!data->intr_ep || !data->bulk_tx_ep || !data->bulk_rx_ep) {
964 kfree(data);
965 return -ENODEV;
966 }
967
968 data->cmdreq_type = USB_TYPE_CLASS;
969
970 data->udev = interface_to_usbdev(intf);
971 data->intf = intf;
972
973 spin_lock_init(&data->lock);
974
975 INIT_WORK(&data->work, btusb_work);
976 INIT_WORK(&data->waker, btusb_waker);
977 spin_lock_init(&data->txlock);
978
979 init_usb_anchor(&data->tx_anchor);
980 init_usb_anchor(&data->intr_anchor);
981 init_usb_anchor(&data->bulk_anchor);
982 init_usb_anchor(&data->isoc_anchor);
983 init_usb_anchor(&data->deferred);
984
985 hdev = hci_alloc_dev();
986 if (!hdev) {
987 kfree(data);
988 return -ENOMEM;
989 }
990
991 hdev->bus = HCI_USB;
992 hdev->driver_data = data;
993
994 data->hdev = hdev;
995
996 SET_HCIDEV_DEV(hdev, &intf->dev);
997
998 hdev->open = btusb_open;
999 hdev->close = btusb_close;
1000 hdev->flush = btusb_flush;
1001 hdev->send = btusb_send_frame;
1002 hdev->destruct = btusb_destruct;
1003 hdev->notify = btusb_notify;
1004
1005 hdev->owner = THIS_MODULE;
1006
1007 /* Interface numbers are hardcoded in the specification */
1008 data->isoc = usb_ifnum_to_if(data->udev, 1);
1009
1010 if (!reset)
1011 set_bit(HCI_QUIRK_NO_RESET, &hdev->quirks);
1012
1013 if (force_scofix || id->driver_info & BTUSB_WRONG_SCO_MTU) {
1014 if (!disable_scofix)
1015 set_bit(HCI_QUIRK_FIXUP_BUFFER_SIZE, &hdev->quirks);
1016 }
1017
1018 if (id->driver_info & BTUSB_BROKEN_ISOC)
1019 data->isoc = NULL;
1020
1021 if (id->driver_info & BTUSB_DIGIANSWER) {
1022 data->cmdreq_type = USB_TYPE_VENDOR;
1023 set_bit(HCI_QUIRK_NO_RESET, &hdev->quirks);
1024 }
1025
1026 if (id->driver_info & BTUSB_CSR) {
1027 struct usb_device *udev = data->udev;
1028
1029 /* Old firmware would otherwise execute USB reset */
1030 if (le16_to_cpu(udev->descriptor.bcdDevice) < 0x117)
1031 set_bit(HCI_QUIRK_NO_RESET, &hdev->quirks);
1032 }
1033
1034 if (id->driver_info & BTUSB_SNIFFER) {
1035 struct usb_device *udev = data->udev;
1036
1037 /* New sniffer firmware has crippled HCI interface */
1038 if (le16_to_cpu(udev->descriptor.bcdDevice) > 0x997)
1039 set_bit(HCI_QUIRK_RAW_DEVICE, &hdev->quirks);
1040
1041 data->isoc = NULL;
1042 }
1043
1044 if (id->driver_info & BTUSB_BCM92035) {
1045 unsigned char cmd[] = { 0x3b, 0xfc, 0x01, 0x00 };
1046 struct sk_buff *skb;
1047
1048 skb = bt_skb_alloc(sizeof(cmd), GFP_KERNEL);
1049 if (skb) {
1050 memcpy(skb_put(skb, sizeof(cmd)), cmd, sizeof(cmd));
1051 skb_queue_tail(&hdev->driver_init, skb);
1052 }
1053 }
1054
1055 if (data->isoc) {
1056 err = usb_driver_claim_interface(&btusb_driver,
1057 data->isoc, data);
1058 if (err < 0) {
1059 hci_free_dev(hdev);
1060 kfree(data);
1061 return err;
1062 }
1063 }
1064
1065 err = hci_register_dev(hdev);
1066 if (err < 0) {
1067 hci_free_dev(hdev);
1068 kfree(data);
1069 return err;
1070 }
1071
1072 usb_set_intfdata(intf, data);
1073
1074 return 0;
1075}
1076
1077static void btusb_disconnect(struct usb_interface *intf)
1078{
1079 struct btusb_data *data = usb_get_intfdata(intf);
1080 struct hci_dev *hdev;
1081
1082 BT_DBG("intf %p", intf);
1083
1084 if (!data)
1085 return;
1086
1087 hdev = data->hdev;
1088
1089 __hci_dev_hold(hdev);
1090
1091 usb_set_intfdata(data->intf, NULL);
1092
1093 if (data->isoc)
1094 usb_set_intfdata(data->isoc, NULL);
1095
1096 hci_unregister_dev(hdev);
1097
1098 if (intf == data->isoc)
1099 usb_driver_release_interface(&btusb_driver, data->intf);
1100 else if (data->isoc)
1101 usb_driver_release_interface(&btusb_driver, data->isoc);
1102
1103 __hci_dev_put(hdev);
1104
1105 hci_free_dev(hdev);
1106}
1107
1108#ifdef CONFIG_PM
1109static int btusb_suspend(struct usb_interface *intf, pm_message_t message)
1110{
1111 struct btusb_data *data = usb_get_intfdata(intf);
1112
1113 BT_DBG("intf %p", intf);
1114
1115 if (data->suspend_count++)
1116 return 0;
1117
1118 spin_lock_irq(&data->txlock);
1119 if (!((message.event & PM_EVENT_AUTO) && data->tx_in_flight)) {
1120 set_bit(BTUSB_SUSPENDING, &data->flags);
1121 spin_unlock_irq(&data->txlock);
1122 } else {
1123 spin_unlock_irq(&data->txlock);
1124 data->suspend_count--;
1125 return -EBUSY;
1126 }
1127
1128 cancel_work_sync(&data->work);
1129
1130 btusb_stop_traffic(data);
1131 usb_kill_anchored_urbs(&data->tx_anchor);
1132
1133 return 0;
1134}
1135
1136static void play_deferred(struct btusb_data *data)
1137{
1138 struct urb *urb;
1139 int err;
1140
1141 while ((urb = usb_get_from_anchor(&data->deferred))) {
1142 err = usb_submit_urb(urb, GFP_ATOMIC);
1143 if (err < 0)
1144 break;
1145
1146 data->tx_in_flight++;
1147 }
1148 usb_scuttle_anchored_urbs(&data->deferred);
1149}
1150
1151static int btusb_resume(struct usb_interface *intf)
1152{
1153 struct btusb_data *data = usb_get_intfdata(intf);
1154 struct hci_dev *hdev = data->hdev;
1155 int err = 0;
1156
1157 BT_DBG("intf %p", intf);
1158
1159 if (--data->suspend_count)
1160 return 0;
1161
1162 if (!test_bit(HCI_RUNNING, &hdev->flags))
1163 goto done;
1164
1165 if (test_bit(BTUSB_INTR_RUNNING, &data->flags)) {
1166 err = btusb_submit_intr_urb(hdev, GFP_NOIO);
1167 if (err < 0) {
1168 clear_bit(BTUSB_INTR_RUNNING, &data->flags);
1169 goto failed;
1170 }
1171 }
1172
1173 if (test_bit(BTUSB_BULK_RUNNING, &data->flags)) {
1174 err = btusb_submit_bulk_urb(hdev, GFP_NOIO);
1175 if (err < 0) {
1176 clear_bit(BTUSB_BULK_RUNNING, &data->flags);
1177 goto failed;
1178 }
1179
1180 btusb_submit_bulk_urb(hdev, GFP_NOIO);
1181 }
1182
1183 if (test_bit(BTUSB_ISOC_RUNNING, &data->flags)) {
1184 if (btusb_submit_isoc_urb(hdev, GFP_NOIO) < 0)
1185 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
1186 else
1187 btusb_submit_isoc_urb(hdev, GFP_NOIO);
1188 }
1189
1190 spin_lock_irq(&data->txlock);
1191 play_deferred(data);
1192 clear_bit(BTUSB_SUSPENDING, &data->flags);
1193 spin_unlock_irq(&data->txlock);
1194 schedule_work(&data->work);
1195
1196 return 0;
1197
1198failed:
1199 usb_scuttle_anchored_urbs(&data->deferred);
1200done:
1201 spin_lock_irq(&data->txlock);
1202 clear_bit(BTUSB_SUSPENDING, &data->flags);
1203 spin_unlock_irq(&data->txlock);
1204
1205 return err;
1206}
1207#endif
1208
1209static struct usb_driver btusb_driver = {
1210 .name = "btusb",
1211 .probe = btusb_probe,
1212 .disconnect = btusb_disconnect,
1213#ifdef CONFIG_PM
1214 .suspend = btusb_suspend,
1215 .resume = btusb_resume,
1216#endif
1217 .id_table = btusb_table,
1218 .supports_autosuspend = 1,
1219};
1220
1221static int __init btusb_init(void)
1222{
1223 BT_INFO("Generic Bluetooth USB driver ver %s", VERSION);
1224
1225 return usb_register(&btusb_driver);
1226}
1227
1228static void __exit btusb_exit(void)
1229{
1230 usb_deregister(&btusb_driver);
1231}
1232
1233module_init(btusb_init);
1234module_exit(btusb_exit);
1235
1236module_param(ignore_dga, bool, 0644);
1237MODULE_PARM_DESC(ignore_dga, "Ignore devices with id 08fd:0001");
1238
1239module_param(ignore_csr, bool, 0644);
1240MODULE_PARM_DESC(ignore_csr, "Ignore devices with id 0a12:0001");
1241
1242module_param(ignore_sniffer, bool, 0644);
1243MODULE_PARM_DESC(ignore_sniffer, "Ignore devices with id 0a12:0002");
1244
1245module_param(disable_scofix, bool, 0644);
1246MODULE_PARM_DESC(disable_scofix, "Disable fixup of wrong SCO buffer size");
1247
1248module_param(force_scofix, bool, 0644);
1249MODULE_PARM_DESC(force_scofix, "Force fixup of wrong SCO buffers size");
1250
1251module_param(reset, bool, 0644);
1252MODULE_PARM_DESC(reset, "Send HCI reset command on initialization");
1253
1254MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
1255MODULE_DESCRIPTION("Generic Bluetooth USB driver ver " VERSION);
1256MODULE_VERSION(VERSION);
1257MODULE_LICENSE("GPL");
1/*
2 *
3 * Generic Bluetooth USB driver
4 *
5 * Copyright (C) 2005-2008 Marcel Holtmann <marcel@holtmann.org>
6 *
7 *
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License as published by
10 * the Free Software Foundation; either version 2 of the License, or
11 * (at your option) any later version.
12 *
13 * This program is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 * GNU General Public License for more details.
17 *
18 * You should have received a copy of the GNU General Public License
19 * along with this program; if not, write to the Free Software
20 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
21 *
22 */
23
24#include <linux/kernel.h>
25#include <linux/module.h>
26#include <linux/init.h>
27#include <linux/slab.h>
28#include <linux/types.h>
29#include <linux/sched.h>
30#include <linux/errno.h>
31#include <linux/skbuff.h>
32
33#include <linux/usb.h>
34
35#include <net/bluetooth/bluetooth.h>
36#include <net/bluetooth/hci_core.h>
37
38#define VERSION "0.6"
39
40static bool ignore_dga;
41static bool ignore_csr;
42static bool ignore_sniffer;
43static bool disable_scofix;
44static bool force_scofix;
45
46static bool reset = 1;
47
48static struct usb_driver btusb_driver;
49
50#define BTUSB_IGNORE 0x01
51#define BTUSB_DIGIANSWER 0x02
52#define BTUSB_CSR 0x04
53#define BTUSB_SNIFFER 0x08
54#define BTUSB_BCM92035 0x10
55#define BTUSB_BROKEN_ISOC 0x20
56#define BTUSB_WRONG_SCO_MTU 0x40
57#define BTUSB_ATH3012 0x80
58
59static struct usb_device_id btusb_table[] = {
60 /* Generic Bluetooth USB device */
61 { USB_DEVICE_INFO(0xe0, 0x01, 0x01) },
62
63 /* Apple-specific (Broadcom) devices */
64 { USB_VENDOR_AND_INTERFACE_INFO(0x05ac, 0xff, 0x01, 0x01) },
65
66 /* Broadcom SoftSailing reporting vendor specific */
67 { USB_DEVICE(0x0a5c, 0x21e1) },
68
69 /* Apple MacBookPro 7,1 */
70 { USB_DEVICE(0x05ac, 0x8213) },
71
72 /* Apple iMac11,1 */
73 { USB_DEVICE(0x05ac, 0x8215) },
74
75 /* Apple MacBookPro6,2 */
76 { USB_DEVICE(0x05ac, 0x8218) },
77
78 /* Apple MacBookAir3,1, MacBookAir3,2 */
79 { USB_DEVICE(0x05ac, 0x821b) },
80
81 /* Apple MacBookAir4,1 */
82 { USB_DEVICE(0x05ac, 0x821f) },
83
84 /* Apple MacBookPro8,2 */
85 { USB_DEVICE(0x05ac, 0x821a) },
86
87 /* Apple MacMini5,1 */
88 { USB_DEVICE(0x05ac, 0x8281) },
89
90 /* AVM BlueFRITZ! USB v2.0 */
91 { USB_DEVICE(0x057c, 0x3800) },
92
93 /* Bluetooth Ultraport Module from IBM */
94 { USB_DEVICE(0x04bf, 0x030a) },
95
96 /* ALPS Modules with non-standard id */
97 { USB_DEVICE(0x044e, 0x3001) },
98 { USB_DEVICE(0x044e, 0x3002) },
99
100 /* Ericsson with non-standard id */
101 { USB_DEVICE(0x0bdb, 0x1002) },
102
103 /* Canyon CN-BTU1 with HID interfaces */
104 { USB_DEVICE(0x0c10, 0x0000) },
105
106 /* Broadcom BCM20702A0 */
107 { USB_DEVICE(0x0489, 0xe042) },
108 { USB_DEVICE(0x413c, 0x8197) },
109
110 /* Foxconn - Hon Hai */
111 { USB_DEVICE(0x0489, 0xe033) },
112
113 /*Broadcom devices with vendor specific id */
114 { USB_VENDOR_AND_INTERFACE_INFO(0x0a5c, 0xff, 0x01, 0x01) },
115
116 { } /* Terminating entry */
117};
118
119MODULE_DEVICE_TABLE(usb, btusb_table);
120
121static struct usb_device_id blacklist_table[] = {
122 /* CSR BlueCore devices */
123 { USB_DEVICE(0x0a12, 0x0001), .driver_info = BTUSB_CSR },
124
125 /* Broadcom BCM2033 without firmware */
126 { USB_DEVICE(0x0a5c, 0x2033), .driver_info = BTUSB_IGNORE },
127
128 /* Atheros 3011 with sflash firmware */
129 { USB_DEVICE(0x0cf3, 0x3002), .driver_info = BTUSB_IGNORE },
130 { USB_DEVICE(0x0cf3, 0xe019), .driver_info = BTUSB_IGNORE },
131 { USB_DEVICE(0x13d3, 0x3304), .driver_info = BTUSB_IGNORE },
132 { USB_DEVICE(0x0930, 0x0215), .driver_info = BTUSB_IGNORE },
133 { USB_DEVICE(0x0489, 0xe03d), .driver_info = BTUSB_IGNORE },
134
135 /* Atheros AR9285 Malbec with sflash firmware */
136 { USB_DEVICE(0x03f0, 0x311d), .driver_info = BTUSB_IGNORE },
137
138 /* Atheros 3012 with sflash firmware */
139 { USB_DEVICE(0x0cf3, 0x3004), .driver_info = BTUSB_ATH3012 },
140 { USB_DEVICE(0x0cf3, 0x311d), .driver_info = BTUSB_ATH3012 },
141 { USB_DEVICE(0x13d3, 0x3375), .driver_info = BTUSB_ATH3012 },
142 { USB_DEVICE(0x04ca, 0x3005), .driver_info = BTUSB_ATH3012 },
143 { USB_DEVICE(0x13d3, 0x3362), .driver_info = BTUSB_ATH3012 },
144 { USB_DEVICE(0x0cf3, 0xe004), .driver_info = BTUSB_ATH3012 },
145 { USB_DEVICE(0x0930, 0x0219), .driver_info = BTUSB_ATH3012 },
146 { USB_DEVICE(0x0489, 0xe057), .driver_info = BTUSB_ATH3012 },
147
148 /* Atheros AR5BBU12 with sflash firmware */
149 { USB_DEVICE(0x0489, 0xe02c), .driver_info = BTUSB_IGNORE },
150
151 /* Atheros AR5BBU12 with sflash firmware */
152 { USB_DEVICE(0x0489, 0xe03c), .driver_info = BTUSB_ATH3012 },
153 { USB_DEVICE(0x0489, 0xe036), .driver_info = BTUSB_ATH3012 },
154
155 /* Broadcom BCM2035 */
156 { USB_DEVICE(0x0a5c, 0x2035), .driver_info = BTUSB_WRONG_SCO_MTU },
157 { USB_DEVICE(0x0a5c, 0x200a), .driver_info = BTUSB_WRONG_SCO_MTU },
158 { USB_DEVICE(0x0a5c, 0x2009), .driver_info = BTUSB_BCM92035 },
159
160 /* Broadcom BCM2045 */
161 { USB_DEVICE(0x0a5c, 0x2039), .driver_info = BTUSB_WRONG_SCO_MTU },
162 { USB_DEVICE(0x0a5c, 0x2101), .driver_info = BTUSB_WRONG_SCO_MTU },
163
164 /* IBM/Lenovo ThinkPad with Broadcom chip */
165 { USB_DEVICE(0x0a5c, 0x201e), .driver_info = BTUSB_WRONG_SCO_MTU },
166 { USB_DEVICE(0x0a5c, 0x2110), .driver_info = BTUSB_WRONG_SCO_MTU },
167
168 /* HP laptop with Broadcom chip */
169 { USB_DEVICE(0x03f0, 0x171d), .driver_info = BTUSB_WRONG_SCO_MTU },
170
171 /* Dell laptop with Broadcom chip */
172 { USB_DEVICE(0x413c, 0x8126), .driver_info = BTUSB_WRONG_SCO_MTU },
173
174 /* Dell Wireless 370 and 410 devices */
175 { USB_DEVICE(0x413c, 0x8152), .driver_info = BTUSB_WRONG_SCO_MTU },
176 { USB_DEVICE(0x413c, 0x8156), .driver_info = BTUSB_WRONG_SCO_MTU },
177
178 /* Belkin F8T012 and F8T013 devices */
179 { USB_DEVICE(0x050d, 0x0012), .driver_info = BTUSB_WRONG_SCO_MTU },
180 { USB_DEVICE(0x050d, 0x0013), .driver_info = BTUSB_WRONG_SCO_MTU },
181
182 /* Asus WL-BTD202 device */
183 { USB_DEVICE(0x0b05, 0x1715), .driver_info = BTUSB_WRONG_SCO_MTU },
184
185 /* Kensington Bluetooth USB adapter */
186 { USB_DEVICE(0x047d, 0x105e), .driver_info = BTUSB_WRONG_SCO_MTU },
187
188 /* RTX Telecom based adapters with buggy SCO support */
189 { USB_DEVICE(0x0400, 0x0807), .driver_info = BTUSB_BROKEN_ISOC },
190 { USB_DEVICE(0x0400, 0x080a), .driver_info = BTUSB_BROKEN_ISOC },
191
192 /* CONWISE Technology based adapters with buggy SCO support */
193 { USB_DEVICE(0x0e5e, 0x6622), .driver_info = BTUSB_BROKEN_ISOC },
194
195 /* Digianswer devices */
196 { USB_DEVICE(0x08fd, 0x0001), .driver_info = BTUSB_DIGIANSWER },
197 { USB_DEVICE(0x08fd, 0x0002), .driver_info = BTUSB_IGNORE },
198
199 /* CSR BlueCore Bluetooth Sniffer */
200 { USB_DEVICE(0x0a12, 0x0002), .driver_info = BTUSB_SNIFFER },
201
202 /* Frontline ComProbe Bluetooth Sniffer */
203 { USB_DEVICE(0x16d3, 0x0002), .driver_info = BTUSB_SNIFFER },
204
205 { } /* Terminating entry */
206};
207
208#define BTUSB_MAX_ISOC_FRAMES 10
209
210#define BTUSB_INTR_RUNNING 0
211#define BTUSB_BULK_RUNNING 1
212#define BTUSB_ISOC_RUNNING 2
213#define BTUSB_SUSPENDING 3
214#define BTUSB_DID_ISO_RESUME 4
215
216struct btusb_data {
217 struct hci_dev *hdev;
218 struct usb_device *udev;
219 struct usb_interface *intf;
220 struct usb_interface *isoc;
221
222 spinlock_t lock;
223
224 unsigned long flags;
225
226 struct work_struct work;
227 struct work_struct waker;
228
229 struct usb_anchor tx_anchor;
230 struct usb_anchor intr_anchor;
231 struct usb_anchor bulk_anchor;
232 struct usb_anchor isoc_anchor;
233 struct usb_anchor deferred;
234 int tx_in_flight;
235 spinlock_t txlock;
236
237 struct usb_endpoint_descriptor *intr_ep;
238 struct usb_endpoint_descriptor *bulk_tx_ep;
239 struct usb_endpoint_descriptor *bulk_rx_ep;
240 struct usb_endpoint_descriptor *isoc_tx_ep;
241 struct usb_endpoint_descriptor *isoc_rx_ep;
242
243 __u8 cmdreq_type;
244
245 unsigned int sco_num;
246 int isoc_altsetting;
247 int suspend_count;
248};
249
250static int inc_tx(struct btusb_data *data)
251{
252 unsigned long flags;
253 int rv;
254
255 spin_lock_irqsave(&data->txlock, flags);
256 rv = test_bit(BTUSB_SUSPENDING, &data->flags);
257 if (!rv)
258 data->tx_in_flight++;
259 spin_unlock_irqrestore(&data->txlock, flags);
260
261 return rv;
262}
263
264static void btusb_intr_complete(struct urb *urb)
265{
266 struct hci_dev *hdev = urb->context;
267 struct btusb_data *data = hci_get_drvdata(hdev);
268 int err;
269
270 BT_DBG("%s urb %p status %d count %d", hdev->name,
271 urb, urb->status, urb->actual_length);
272
273 if (!test_bit(HCI_RUNNING, &hdev->flags))
274 return;
275
276 if (urb->status == 0) {
277 hdev->stat.byte_rx += urb->actual_length;
278
279 if (hci_recv_fragment(hdev, HCI_EVENT_PKT,
280 urb->transfer_buffer,
281 urb->actual_length) < 0) {
282 BT_ERR("%s corrupted event packet", hdev->name);
283 hdev->stat.err_rx++;
284 }
285 }
286
287 if (!test_bit(BTUSB_INTR_RUNNING, &data->flags))
288 return;
289
290 usb_mark_last_busy(data->udev);
291 usb_anchor_urb(urb, &data->intr_anchor);
292
293 err = usb_submit_urb(urb, GFP_ATOMIC);
294 if (err < 0) {
295 /* -EPERM: urb is being killed;
296 * -ENODEV: device got disconnected */
297 if (err != -EPERM && err != -ENODEV)
298 BT_ERR("%s urb %p failed to resubmit (%d)",
299 hdev->name, urb, -err);
300 usb_unanchor_urb(urb);
301 }
302}
303
304static int btusb_submit_intr_urb(struct hci_dev *hdev, gfp_t mem_flags)
305{
306 struct btusb_data *data = hci_get_drvdata(hdev);
307 struct urb *urb;
308 unsigned char *buf;
309 unsigned int pipe;
310 int err, size;
311
312 BT_DBG("%s", hdev->name);
313
314 if (!data->intr_ep)
315 return -ENODEV;
316
317 urb = usb_alloc_urb(0, mem_flags);
318 if (!urb)
319 return -ENOMEM;
320
321 size = le16_to_cpu(data->intr_ep->wMaxPacketSize);
322
323 buf = kmalloc(size, mem_flags);
324 if (!buf) {
325 usb_free_urb(urb);
326 return -ENOMEM;
327 }
328
329 pipe = usb_rcvintpipe(data->udev, data->intr_ep->bEndpointAddress);
330
331 usb_fill_int_urb(urb, data->udev, pipe, buf, size,
332 btusb_intr_complete, hdev,
333 data->intr_ep->bInterval);
334
335 urb->transfer_flags |= URB_FREE_BUFFER;
336
337 usb_anchor_urb(urb, &data->intr_anchor);
338
339 err = usb_submit_urb(urb, mem_flags);
340 if (err < 0) {
341 if (err != -EPERM && err != -ENODEV)
342 BT_ERR("%s urb %p submission failed (%d)",
343 hdev->name, urb, -err);
344 usb_unanchor_urb(urb);
345 }
346
347 usb_free_urb(urb);
348
349 return err;
350}
351
352static void btusb_bulk_complete(struct urb *urb)
353{
354 struct hci_dev *hdev = urb->context;
355 struct btusb_data *data = hci_get_drvdata(hdev);
356 int err;
357
358 BT_DBG("%s urb %p status %d count %d", hdev->name,
359 urb, urb->status, urb->actual_length);
360
361 if (!test_bit(HCI_RUNNING, &hdev->flags))
362 return;
363
364 if (urb->status == 0) {
365 hdev->stat.byte_rx += urb->actual_length;
366
367 if (hci_recv_fragment(hdev, HCI_ACLDATA_PKT,
368 urb->transfer_buffer,
369 urb->actual_length) < 0) {
370 BT_ERR("%s corrupted ACL packet", hdev->name);
371 hdev->stat.err_rx++;
372 }
373 }
374
375 if (!test_bit(BTUSB_BULK_RUNNING, &data->flags))
376 return;
377
378 usb_anchor_urb(urb, &data->bulk_anchor);
379 usb_mark_last_busy(data->udev);
380
381 err = usb_submit_urb(urb, GFP_ATOMIC);
382 if (err < 0) {
383 /* -EPERM: urb is being killed;
384 * -ENODEV: device got disconnected */
385 if (err != -EPERM && err != -ENODEV)
386 BT_ERR("%s urb %p failed to resubmit (%d)",
387 hdev->name, urb, -err);
388 usb_unanchor_urb(urb);
389 }
390}
391
392static int btusb_submit_bulk_urb(struct hci_dev *hdev, gfp_t mem_flags)
393{
394 struct btusb_data *data = hci_get_drvdata(hdev);
395 struct urb *urb;
396 unsigned char *buf;
397 unsigned int pipe;
398 int err, size = HCI_MAX_FRAME_SIZE;
399
400 BT_DBG("%s", hdev->name);
401
402 if (!data->bulk_rx_ep)
403 return -ENODEV;
404
405 urb = usb_alloc_urb(0, mem_flags);
406 if (!urb)
407 return -ENOMEM;
408
409 buf = kmalloc(size, mem_flags);
410 if (!buf) {
411 usb_free_urb(urb);
412 return -ENOMEM;
413 }
414
415 pipe = usb_rcvbulkpipe(data->udev, data->bulk_rx_ep->bEndpointAddress);
416
417 usb_fill_bulk_urb(urb, data->udev, pipe,
418 buf, size, btusb_bulk_complete, hdev);
419
420 urb->transfer_flags |= URB_FREE_BUFFER;
421
422 usb_mark_last_busy(data->udev);
423 usb_anchor_urb(urb, &data->bulk_anchor);
424
425 err = usb_submit_urb(urb, mem_flags);
426 if (err < 0) {
427 if (err != -EPERM && err != -ENODEV)
428 BT_ERR("%s urb %p submission failed (%d)",
429 hdev->name, urb, -err);
430 usb_unanchor_urb(urb);
431 }
432
433 usb_free_urb(urb);
434
435 return err;
436}
437
438static void btusb_isoc_complete(struct urb *urb)
439{
440 struct hci_dev *hdev = urb->context;
441 struct btusb_data *data = hci_get_drvdata(hdev);
442 int i, err;
443
444 BT_DBG("%s urb %p status %d count %d", hdev->name,
445 urb, urb->status, urb->actual_length);
446
447 if (!test_bit(HCI_RUNNING, &hdev->flags))
448 return;
449
450 if (urb->status == 0) {
451 for (i = 0; i < urb->number_of_packets; i++) {
452 unsigned int offset = urb->iso_frame_desc[i].offset;
453 unsigned int length = urb->iso_frame_desc[i].actual_length;
454
455 if (urb->iso_frame_desc[i].status)
456 continue;
457
458 hdev->stat.byte_rx += length;
459
460 if (hci_recv_fragment(hdev, HCI_SCODATA_PKT,
461 urb->transfer_buffer + offset,
462 length) < 0) {
463 BT_ERR("%s corrupted SCO packet", hdev->name);
464 hdev->stat.err_rx++;
465 }
466 }
467 }
468
469 if (!test_bit(BTUSB_ISOC_RUNNING, &data->flags))
470 return;
471
472 usb_anchor_urb(urb, &data->isoc_anchor);
473
474 err = usb_submit_urb(urb, GFP_ATOMIC);
475 if (err < 0) {
476 /* -EPERM: urb is being killed;
477 * -ENODEV: device got disconnected */
478 if (err != -EPERM && err != -ENODEV)
479 BT_ERR("%s urb %p failed to resubmit (%d)",
480 hdev->name, urb, -err);
481 usb_unanchor_urb(urb);
482 }
483}
484
485static inline void __fill_isoc_descriptor(struct urb *urb, int len, int mtu)
486{
487 int i, offset = 0;
488
489 BT_DBG("len %d mtu %d", len, mtu);
490
491 for (i = 0; i < BTUSB_MAX_ISOC_FRAMES && len >= mtu;
492 i++, offset += mtu, len -= mtu) {
493 urb->iso_frame_desc[i].offset = offset;
494 urb->iso_frame_desc[i].length = mtu;
495 }
496
497 if (len && i < BTUSB_MAX_ISOC_FRAMES) {
498 urb->iso_frame_desc[i].offset = offset;
499 urb->iso_frame_desc[i].length = len;
500 i++;
501 }
502
503 urb->number_of_packets = i;
504}
505
506static int btusb_submit_isoc_urb(struct hci_dev *hdev, gfp_t mem_flags)
507{
508 struct btusb_data *data = hci_get_drvdata(hdev);
509 struct urb *urb;
510 unsigned char *buf;
511 unsigned int pipe;
512 int err, size;
513
514 BT_DBG("%s", hdev->name);
515
516 if (!data->isoc_rx_ep)
517 return -ENODEV;
518
519 urb = usb_alloc_urb(BTUSB_MAX_ISOC_FRAMES, mem_flags);
520 if (!urb)
521 return -ENOMEM;
522
523 size = le16_to_cpu(data->isoc_rx_ep->wMaxPacketSize) *
524 BTUSB_MAX_ISOC_FRAMES;
525
526 buf = kmalloc(size, mem_flags);
527 if (!buf) {
528 usb_free_urb(urb);
529 return -ENOMEM;
530 }
531
532 pipe = usb_rcvisocpipe(data->udev, data->isoc_rx_ep->bEndpointAddress);
533
534 usb_fill_int_urb(urb, data->udev, pipe, buf, size, btusb_isoc_complete,
535 hdev, data->isoc_rx_ep->bInterval);
536
537 urb->transfer_flags = URB_FREE_BUFFER | URB_ISO_ASAP;
538
539 __fill_isoc_descriptor(urb, size,
540 le16_to_cpu(data->isoc_rx_ep->wMaxPacketSize));
541
542 usb_anchor_urb(urb, &data->isoc_anchor);
543
544 err = usb_submit_urb(urb, mem_flags);
545 if (err < 0) {
546 if (err != -EPERM && err != -ENODEV)
547 BT_ERR("%s urb %p submission failed (%d)",
548 hdev->name, urb, -err);
549 usb_unanchor_urb(urb);
550 }
551
552 usb_free_urb(urb);
553
554 return err;
555}
556
557static void btusb_tx_complete(struct urb *urb)
558{
559 struct sk_buff *skb = urb->context;
560 struct hci_dev *hdev = (struct hci_dev *) skb->dev;
561 struct btusb_data *data = hci_get_drvdata(hdev);
562
563 BT_DBG("%s urb %p status %d count %d", hdev->name,
564 urb, urb->status, urb->actual_length);
565
566 if (!test_bit(HCI_RUNNING, &hdev->flags))
567 goto done;
568
569 if (!urb->status)
570 hdev->stat.byte_tx += urb->transfer_buffer_length;
571 else
572 hdev->stat.err_tx++;
573
574done:
575 spin_lock(&data->txlock);
576 data->tx_in_flight--;
577 spin_unlock(&data->txlock);
578
579 kfree(urb->setup_packet);
580
581 kfree_skb(skb);
582}
583
584static void btusb_isoc_tx_complete(struct urb *urb)
585{
586 struct sk_buff *skb = urb->context;
587 struct hci_dev *hdev = (struct hci_dev *) skb->dev;
588
589 BT_DBG("%s urb %p status %d count %d", hdev->name,
590 urb, urb->status, urb->actual_length);
591
592 if (!test_bit(HCI_RUNNING, &hdev->flags))
593 goto done;
594
595 if (!urb->status)
596 hdev->stat.byte_tx += urb->transfer_buffer_length;
597 else
598 hdev->stat.err_tx++;
599
600done:
601 kfree(urb->setup_packet);
602
603 kfree_skb(skb);
604}
605
606static int btusb_open(struct hci_dev *hdev)
607{
608 struct btusb_data *data = hci_get_drvdata(hdev);
609 int err;
610
611 BT_DBG("%s", hdev->name);
612
613 err = usb_autopm_get_interface(data->intf);
614 if (err < 0)
615 return err;
616
617 data->intf->needs_remote_wakeup = 1;
618
619 if (test_and_set_bit(HCI_RUNNING, &hdev->flags))
620 goto done;
621
622 if (test_and_set_bit(BTUSB_INTR_RUNNING, &data->flags))
623 goto done;
624
625 err = btusb_submit_intr_urb(hdev, GFP_KERNEL);
626 if (err < 0)
627 goto failed;
628
629 err = btusb_submit_bulk_urb(hdev, GFP_KERNEL);
630 if (err < 0) {
631 usb_kill_anchored_urbs(&data->intr_anchor);
632 goto failed;
633 }
634
635 set_bit(BTUSB_BULK_RUNNING, &data->flags);
636 btusb_submit_bulk_urb(hdev, GFP_KERNEL);
637
638done:
639 usb_autopm_put_interface(data->intf);
640 return 0;
641
642failed:
643 clear_bit(BTUSB_INTR_RUNNING, &data->flags);
644 clear_bit(HCI_RUNNING, &hdev->flags);
645 usb_autopm_put_interface(data->intf);
646 return err;
647}
648
649static void btusb_stop_traffic(struct btusb_data *data)
650{
651 usb_kill_anchored_urbs(&data->intr_anchor);
652 usb_kill_anchored_urbs(&data->bulk_anchor);
653 usb_kill_anchored_urbs(&data->isoc_anchor);
654}
655
656static int btusb_close(struct hci_dev *hdev)
657{
658 struct btusb_data *data = hci_get_drvdata(hdev);
659 int err;
660
661 BT_DBG("%s", hdev->name);
662
663 if (!test_and_clear_bit(HCI_RUNNING, &hdev->flags))
664 return 0;
665
666 cancel_work_sync(&data->work);
667 cancel_work_sync(&data->waker);
668
669 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
670 clear_bit(BTUSB_BULK_RUNNING, &data->flags);
671 clear_bit(BTUSB_INTR_RUNNING, &data->flags);
672
673 btusb_stop_traffic(data);
674 err = usb_autopm_get_interface(data->intf);
675 if (err < 0)
676 goto failed;
677
678 data->intf->needs_remote_wakeup = 0;
679 usb_autopm_put_interface(data->intf);
680
681failed:
682 usb_scuttle_anchored_urbs(&data->deferred);
683 return 0;
684}
685
686static int btusb_flush(struct hci_dev *hdev)
687{
688 struct btusb_data *data = hci_get_drvdata(hdev);
689
690 BT_DBG("%s", hdev->name);
691
692 usb_kill_anchored_urbs(&data->tx_anchor);
693
694 return 0;
695}
696
697static int btusb_send_frame(struct sk_buff *skb)
698{
699 struct hci_dev *hdev = (struct hci_dev *) skb->dev;
700 struct btusb_data *data = hci_get_drvdata(hdev);
701 struct usb_ctrlrequest *dr;
702 struct urb *urb;
703 unsigned int pipe;
704 int err;
705
706 BT_DBG("%s", hdev->name);
707
708 if (!test_bit(HCI_RUNNING, &hdev->flags))
709 return -EBUSY;
710
711 switch (bt_cb(skb)->pkt_type) {
712 case HCI_COMMAND_PKT:
713 urb = usb_alloc_urb(0, GFP_ATOMIC);
714 if (!urb)
715 return -ENOMEM;
716
717 dr = kmalloc(sizeof(*dr), GFP_ATOMIC);
718 if (!dr) {
719 usb_free_urb(urb);
720 return -ENOMEM;
721 }
722
723 dr->bRequestType = data->cmdreq_type;
724 dr->bRequest = 0;
725 dr->wIndex = 0;
726 dr->wValue = 0;
727 dr->wLength = __cpu_to_le16(skb->len);
728
729 pipe = usb_sndctrlpipe(data->udev, 0x00);
730
731 usb_fill_control_urb(urb, data->udev, pipe, (void *) dr,
732 skb->data, skb->len, btusb_tx_complete, skb);
733
734 hdev->stat.cmd_tx++;
735 break;
736
737 case HCI_ACLDATA_PKT:
738 if (!data->bulk_tx_ep)
739 return -ENODEV;
740
741 urb = usb_alloc_urb(0, GFP_ATOMIC);
742 if (!urb)
743 return -ENOMEM;
744
745 pipe = usb_sndbulkpipe(data->udev,
746 data->bulk_tx_ep->bEndpointAddress);
747
748 usb_fill_bulk_urb(urb, data->udev, pipe,
749 skb->data, skb->len, btusb_tx_complete, skb);
750
751 hdev->stat.acl_tx++;
752 break;
753
754 case HCI_SCODATA_PKT:
755 if (!data->isoc_tx_ep || hdev->conn_hash.sco_num < 1)
756 return -ENODEV;
757
758 urb = usb_alloc_urb(BTUSB_MAX_ISOC_FRAMES, GFP_ATOMIC);
759 if (!urb)
760 return -ENOMEM;
761
762 pipe = usb_sndisocpipe(data->udev,
763 data->isoc_tx_ep->bEndpointAddress);
764
765 usb_fill_int_urb(urb, data->udev, pipe,
766 skb->data, skb->len, btusb_isoc_tx_complete,
767 skb, data->isoc_tx_ep->bInterval);
768
769 urb->transfer_flags = URB_ISO_ASAP;
770
771 __fill_isoc_descriptor(urb, skb->len,
772 le16_to_cpu(data->isoc_tx_ep->wMaxPacketSize));
773
774 hdev->stat.sco_tx++;
775 goto skip_waking;
776
777 default:
778 return -EILSEQ;
779 }
780
781 err = inc_tx(data);
782 if (err) {
783 usb_anchor_urb(urb, &data->deferred);
784 schedule_work(&data->waker);
785 err = 0;
786 goto done;
787 }
788
789skip_waking:
790 usb_anchor_urb(urb, &data->tx_anchor);
791
792 err = usb_submit_urb(urb, GFP_ATOMIC);
793 if (err < 0) {
794 if (err != -EPERM && err != -ENODEV)
795 BT_ERR("%s urb %p submission failed (%d)",
796 hdev->name, urb, -err);
797 kfree(urb->setup_packet);
798 usb_unanchor_urb(urb);
799 } else {
800 usb_mark_last_busy(data->udev);
801 }
802
803done:
804 usb_free_urb(urb);
805 return err;
806}
807
808static void btusb_notify(struct hci_dev *hdev, unsigned int evt)
809{
810 struct btusb_data *data = hci_get_drvdata(hdev);
811
812 BT_DBG("%s evt %d", hdev->name, evt);
813
814 if (hdev->conn_hash.sco_num != data->sco_num) {
815 data->sco_num = hdev->conn_hash.sco_num;
816 schedule_work(&data->work);
817 }
818}
819
820static inline int __set_isoc_interface(struct hci_dev *hdev, int altsetting)
821{
822 struct btusb_data *data = hci_get_drvdata(hdev);
823 struct usb_interface *intf = data->isoc;
824 struct usb_endpoint_descriptor *ep_desc;
825 int i, err;
826
827 if (!data->isoc)
828 return -ENODEV;
829
830 err = usb_set_interface(data->udev, 1, altsetting);
831 if (err < 0) {
832 BT_ERR("%s setting interface failed (%d)", hdev->name, -err);
833 return err;
834 }
835
836 data->isoc_altsetting = altsetting;
837
838 data->isoc_tx_ep = NULL;
839 data->isoc_rx_ep = NULL;
840
841 for (i = 0; i < intf->cur_altsetting->desc.bNumEndpoints; i++) {
842 ep_desc = &intf->cur_altsetting->endpoint[i].desc;
843
844 if (!data->isoc_tx_ep && usb_endpoint_is_isoc_out(ep_desc)) {
845 data->isoc_tx_ep = ep_desc;
846 continue;
847 }
848
849 if (!data->isoc_rx_ep && usb_endpoint_is_isoc_in(ep_desc)) {
850 data->isoc_rx_ep = ep_desc;
851 continue;
852 }
853 }
854
855 if (!data->isoc_tx_ep || !data->isoc_rx_ep) {
856 BT_ERR("%s invalid SCO descriptors", hdev->name);
857 return -ENODEV;
858 }
859
860 return 0;
861}
862
863static void btusb_work(struct work_struct *work)
864{
865 struct btusb_data *data = container_of(work, struct btusb_data, work);
866 struct hci_dev *hdev = data->hdev;
867 int new_alts;
868 int err;
869
870 if (hdev->conn_hash.sco_num > 0) {
871 if (!test_bit(BTUSB_DID_ISO_RESUME, &data->flags)) {
872 err = usb_autopm_get_interface(data->isoc ? data->isoc : data->intf);
873 if (err < 0) {
874 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
875 usb_kill_anchored_urbs(&data->isoc_anchor);
876 return;
877 }
878
879 set_bit(BTUSB_DID_ISO_RESUME, &data->flags);
880 }
881
882 if (hdev->voice_setting & 0x0020) {
883 static const int alts[3] = { 2, 4, 5 };
884 new_alts = alts[hdev->conn_hash.sco_num - 1];
885 } else {
886 new_alts = hdev->conn_hash.sco_num;
887 }
888
889 if (data->isoc_altsetting != new_alts) {
890 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
891 usb_kill_anchored_urbs(&data->isoc_anchor);
892
893 if (__set_isoc_interface(hdev, new_alts) < 0)
894 return;
895 }
896
897 if (!test_and_set_bit(BTUSB_ISOC_RUNNING, &data->flags)) {
898 if (btusb_submit_isoc_urb(hdev, GFP_KERNEL) < 0)
899 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
900 else
901 btusb_submit_isoc_urb(hdev, GFP_KERNEL);
902 }
903 } else {
904 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
905 usb_kill_anchored_urbs(&data->isoc_anchor);
906
907 __set_isoc_interface(hdev, 0);
908 if (test_and_clear_bit(BTUSB_DID_ISO_RESUME, &data->flags))
909 usb_autopm_put_interface(data->isoc ? data->isoc : data->intf);
910 }
911}
912
913static void btusb_waker(struct work_struct *work)
914{
915 struct btusb_data *data = container_of(work, struct btusb_data, waker);
916 int err;
917
918 err = usb_autopm_get_interface(data->intf);
919 if (err < 0)
920 return;
921
922 usb_autopm_put_interface(data->intf);
923}
924
925static int btusb_probe(struct usb_interface *intf,
926 const struct usb_device_id *id)
927{
928 struct usb_endpoint_descriptor *ep_desc;
929 struct btusb_data *data;
930 struct hci_dev *hdev;
931 int i, err;
932
933 BT_DBG("intf %p id %p", intf, id);
934
935 /* interface numbers are hardcoded in the spec */
936 if (intf->cur_altsetting->desc.bInterfaceNumber != 0)
937 return -ENODEV;
938
939 if (!id->driver_info) {
940 const struct usb_device_id *match;
941 match = usb_match_id(intf, blacklist_table);
942 if (match)
943 id = match;
944 }
945
946 if (id->driver_info == BTUSB_IGNORE)
947 return -ENODEV;
948
949 if (ignore_dga && id->driver_info & BTUSB_DIGIANSWER)
950 return -ENODEV;
951
952 if (ignore_csr && id->driver_info & BTUSB_CSR)
953 return -ENODEV;
954
955 if (ignore_sniffer && id->driver_info & BTUSB_SNIFFER)
956 return -ENODEV;
957
958 if (id->driver_info & BTUSB_ATH3012) {
959 struct usb_device *udev = interface_to_usbdev(intf);
960
961 /* Old firmware would otherwise let ath3k driver load
962 * patch and sysconfig files */
963 if (le16_to_cpu(udev->descriptor.bcdDevice) <= 0x0001)
964 return -ENODEV;
965 }
966
967 data = kzalloc(sizeof(*data), GFP_KERNEL);
968 if (!data)
969 return -ENOMEM;
970
971 for (i = 0; i < intf->cur_altsetting->desc.bNumEndpoints; i++) {
972 ep_desc = &intf->cur_altsetting->endpoint[i].desc;
973
974 if (!data->intr_ep && usb_endpoint_is_int_in(ep_desc)) {
975 data->intr_ep = ep_desc;
976 continue;
977 }
978
979 if (!data->bulk_tx_ep && usb_endpoint_is_bulk_out(ep_desc)) {
980 data->bulk_tx_ep = ep_desc;
981 continue;
982 }
983
984 if (!data->bulk_rx_ep && usb_endpoint_is_bulk_in(ep_desc)) {
985 data->bulk_rx_ep = ep_desc;
986 continue;
987 }
988 }
989
990 if (!data->intr_ep || !data->bulk_tx_ep || !data->bulk_rx_ep) {
991 kfree(data);
992 return -ENODEV;
993 }
994
995 data->cmdreq_type = USB_TYPE_CLASS;
996
997 data->udev = interface_to_usbdev(intf);
998 data->intf = intf;
999
1000 spin_lock_init(&data->lock);
1001
1002 INIT_WORK(&data->work, btusb_work);
1003 INIT_WORK(&data->waker, btusb_waker);
1004 spin_lock_init(&data->txlock);
1005
1006 init_usb_anchor(&data->tx_anchor);
1007 init_usb_anchor(&data->intr_anchor);
1008 init_usb_anchor(&data->bulk_anchor);
1009 init_usb_anchor(&data->isoc_anchor);
1010 init_usb_anchor(&data->deferred);
1011
1012 hdev = hci_alloc_dev();
1013 if (!hdev) {
1014 kfree(data);
1015 return -ENOMEM;
1016 }
1017
1018 hdev->bus = HCI_USB;
1019 hci_set_drvdata(hdev, data);
1020
1021 data->hdev = hdev;
1022
1023 SET_HCIDEV_DEV(hdev, &intf->dev);
1024
1025 hdev->open = btusb_open;
1026 hdev->close = btusb_close;
1027 hdev->flush = btusb_flush;
1028 hdev->send = btusb_send_frame;
1029 hdev->notify = btusb_notify;
1030
1031 /* Interface numbers are hardcoded in the specification */
1032 data->isoc = usb_ifnum_to_if(data->udev, 1);
1033
1034 if (!reset)
1035 set_bit(HCI_QUIRK_NO_RESET, &hdev->quirks);
1036
1037 if (force_scofix || id->driver_info & BTUSB_WRONG_SCO_MTU) {
1038 if (!disable_scofix)
1039 set_bit(HCI_QUIRK_FIXUP_BUFFER_SIZE, &hdev->quirks);
1040 }
1041
1042 if (id->driver_info & BTUSB_BROKEN_ISOC)
1043 data->isoc = NULL;
1044
1045 if (id->driver_info & BTUSB_DIGIANSWER) {
1046 data->cmdreq_type = USB_TYPE_VENDOR;
1047 set_bit(HCI_QUIRK_NO_RESET, &hdev->quirks);
1048 }
1049
1050 if (id->driver_info & BTUSB_CSR) {
1051 struct usb_device *udev = data->udev;
1052
1053 /* Old firmware would otherwise execute USB reset */
1054 if (le16_to_cpu(udev->descriptor.bcdDevice) < 0x117)
1055 set_bit(HCI_QUIRK_NO_RESET, &hdev->quirks);
1056 }
1057
1058 if (id->driver_info & BTUSB_SNIFFER) {
1059 struct usb_device *udev = data->udev;
1060
1061 /* New sniffer firmware has crippled HCI interface */
1062 if (le16_to_cpu(udev->descriptor.bcdDevice) > 0x997)
1063 set_bit(HCI_QUIRK_RAW_DEVICE, &hdev->quirks);
1064
1065 data->isoc = NULL;
1066 }
1067
1068 if (id->driver_info & BTUSB_BCM92035) {
1069 unsigned char cmd[] = { 0x3b, 0xfc, 0x01, 0x00 };
1070 struct sk_buff *skb;
1071
1072 skb = bt_skb_alloc(sizeof(cmd), GFP_KERNEL);
1073 if (skb) {
1074 memcpy(skb_put(skb, sizeof(cmd)), cmd, sizeof(cmd));
1075 skb_queue_tail(&hdev->driver_init, skb);
1076 }
1077 }
1078
1079 if (data->isoc) {
1080 err = usb_driver_claim_interface(&btusb_driver,
1081 data->isoc, data);
1082 if (err < 0) {
1083 hci_free_dev(hdev);
1084 kfree(data);
1085 return err;
1086 }
1087 }
1088
1089 err = hci_register_dev(hdev);
1090 if (err < 0) {
1091 hci_free_dev(hdev);
1092 kfree(data);
1093 return err;
1094 }
1095
1096 usb_set_intfdata(intf, data);
1097
1098 return 0;
1099}
1100
1101static void btusb_disconnect(struct usb_interface *intf)
1102{
1103 struct btusb_data *data = usb_get_intfdata(intf);
1104 struct hci_dev *hdev;
1105
1106 BT_DBG("intf %p", intf);
1107
1108 if (!data)
1109 return;
1110
1111 hdev = data->hdev;
1112 usb_set_intfdata(data->intf, NULL);
1113
1114 if (data->isoc)
1115 usb_set_intfdata(data->isoc, NULL);
1116
1117 hci_unregister_dev(hdev);
1118
1119 if (intf == data->isoc)
1120 usb_driver_release_interface(&btusb_driver, data->intf);
1121 else if (data->isoc)
1122 usb_driver_release_interface(&btusb_driver, data->isoc);
1123
1124 hci_free_dev(hdev);
1125 kfree(data);
1126}
1127
1128#ifdef CONFIG_PM
1129static int btusb_suspend(struct usb_interface *intf, pm_message_t message)
1130{
1131 struct btusb_data *data = usb_get_intfdata(intf);
1132
1133 BT_DBG("intf %p", intf);
1134
1135 if (data->suspend_count++)
1136 return 0;
1137
1138 spin_lock_irq(&data->txlock);
1139 if (!(PMSG_IS_AUTO(message) && data->tx_in_flight)) {
1140 set_bit(BTUSB_SUSPENDING, &data->flags);
1141 spin_unlock_irq(&data->txlock);
1142 } else {
1143 spin_unlock_irq(&data->txlock);
1144 data->suspend_count--;
1145 return -EBUSY;
1146 }
1147
1148 cancel_work_sync(&data->work);
1149
1150 btusb_stop_traffic(data);
1151 usb_kill_anchored_urbs(&data->tx_anchor);
1152
1153 return 0;
1154}
1155
1156static void play_deferred(struct btusb_data *data)
1157{
1158 struct urb *urb;
1159 int err;
1160
1161 while ((urb = usb_get_from_anchor(&data->deferred))) {
1162 err = usb_submit_urb(urb, GFP_ATOMIC);
1163 if (err < 0)
1164 break;
1165
1166 data->tx_in_flight++;
1167 }
1168 usb_scuttle_anchored_urbs(&data->deferred);
1169}
1170
1171static int btusb_resume(struct usb_interface *intf)
1172{
1173 struct btusb_data *data = usb_get_intfdata(intf);
1174 struct hci_dev *hdev = data->hdev;
1175 int err = 0;
1176
1177 BT_DBG("intf %p", intf);
1178
1179 if (--data->suspend_count)
1180 return 0;
1181
1182 if (!test_bit(HCI_RUNNING, &hdev->flags))
1183 goto done;
1184
1185 if (test_bit(BTUSB_INTR_RUNNING, &data->flags)) {
1186 err = btusb_submit_intr_urb(hdev, GFP_NOIO);
1187 if (err < 0) {
1188 clear_bit(BTUSB_INTR_RUNNING, &data->flags);
1189 goto failed;
1190 }
1191 }
1192
1193 if (test_bit(BTUSB_BULK_RUNNING, &data->flags)) {
1194 err = btusb_submit_bulk_urb(hdev, GFP_NOIO);
1195 if (err < 0) {
1196 clear_bit(BTUSB_BULK_RUNNING, &data->flags);
1197 goto failed;
1198 }
1199
1200 btusb_submit_bulk_urb(hdev, GFP_NOIO);
1201 }
1202
1203 if (test_bit(BTUSB_ISOC_RUNNING, &data->flags)) {
1204 if (btusb_submit_isoc_urb(hdev, GFP_NOIO) < 0)
1205 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
1206 else
1207 btusb_submit_isoc_urb(hdev, GFP_NOIO);
1208 }
1209
1210 spin_lock_irq(&data->txlock);
1211 play_deferred(data);
1212 clear_bit(BTUSB_SUSPENDING, &data->flags);
1213 spin_unlock_irq(&data->txlock);
1214 schedule_work(&data->work);
1215
1216 return 0;
1217
1218failed:
1219 usb_scuttle_anchored_urbs(&data->deferred);
1220done:
1221 spin_lock_irq(&data->txlock);
1222 clear_bit(BTUSB_SUSPENDING, &data->flags);
1223 spin_unlock_irq(&data->txlock);
1224
1225 return err;
1226}
1227#endif
1228
1229static struct usb_driver btusb_driver = {
1230 .name = "btusb",
1231 .probe = btusb_probe,
1232 .disconnect = btusb_disconnect,
1233#ifdef CONFIG_PM
1234 .suspend = btusb_suspend,
1235 .resume = btusb_resume,
1236#endif
1237 .id_table = btusb_table,
1238 .supports_autosuspend = 1,
1239 .disable_hub_initiated_lpm = 1,
1240};
1241
1242module_usb_driver(btusb_driver);
1243
1244module_param(ignore_dga, bool, 0644);
1245MODULE_PARM_DESC(ignore_dga, "Ignore devices with id 08fd:0001");
1246
1247module_param(ignore_csr, bool, 0644);
1248MODULE_PARM_DESC(ignore_csr, "Ignore devices with id 0a12:0001");
1249
1250module_param(ignore_sniffer, bool, 0644);
1251MODULE_PARM_DESC(ignore_sniffer, "Ignore devices with id 0a12:0002");
1252
1253module_param(disable_scofix, bool, 0644);
1254MODULE_PARM_DESC(disable_scofix, "Disable fixup of wrong SCO buffer size");
1255
1256module_param(force_scofix, bool, 0644);
1257MODULE_PARM_DESC(force_scofix, "Force fixup of wrong SCO buffers size");
1258
1259module_param(reset, bool, 0644);
1260MODULE_PARM_DESC(reset, "Send HCI reset command on initialization");
1261
1262MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
1263MODULE_DESCRIPTION("Generic Bluetooth USB driver ver " VERSION);
1264MODULE_VERSION(VERSION);
1265MODULE_LICENSE("GPL");