Linux Audio

Check our new training course

Loading...
v5.9
   1// SPDX-License-Identifier: GPL-2.0
   2/*
   3 * cdc-wdm.c
   4 *
   5 * This driver supports USB CDC WCM Device Management.
   6 *
   7 * Copyright (c) 2007-2009 Oliver Neukum
   8 *
   9 * Some code taken from cdc-acm.c
  10 *
  11 * Released under the GPLv2.
  12 *
  13 * Many thanks to Carl Nordbeck
  14 */
  15#include <linux/kernel.h>
  16#include <linux/errno.h>
  17#include <linux/ioctl.h>
  18#include <linux/slab.h>
  19#include <linux/module.h>
  20#include <linux/mutex.h>
  21#include <linux/uaccess.h>
  22#include <linux/bitops.h>
  23#include <linux/poll.h>
  24#include <linux/usb.h>
  25#include <linux/usb/cdc.h>
  26#include <asm/byteorder.h>
  27#include <asm/unaligned.h>
  28#include <linux/usb/cdc-wdm.h>
  29
 
 
 
 
  30#define DRIVER_AUTHOR "Oliver Neukum"
  31#define DRIVER_DESC "USB Abstract Control Model driver for USB WCM Device Management"
  32
  33static const struct usb_device_id wdm_ids[] = {
  34	{
  35		.match_flags = USB_DEVICE_ID_MATCH_INT_CLASS |
  36				 USB_DEVICE_ID_MATCH_INT_SUBCLASS,
  37		.bInterfaceClass = USB_CLASS_COMM,
  38		.bInterfaceSubClass = USB_CDC_SUBCLASS_DMM
  39	},
  40	{ }
  41};
  42
  43MODULE_DEVICE_TABLE (usb, wdm_ids);
  44
  45#define WDM_MINOR_BASE	176
  46
  47
  48#define WDM_IN_USE		1
  49#define WDM_DISCONNECTING	2
  50#define WDM_RESULT		3
  51#define WDM_READ		4
  52#define WDM_INT_STALL		5
  53#define WDM_POLL_RUNNING	6
  54#define WDM_RESPONDING		7
  55#define WDM_SUSPENDING		8
  56#define WDM_RESETTING		9
  57#define WDM_OVERFLOW		10
  58
  59#define WDM_MAX			16
  60
  61/* CDC-WMC r1.1 requires wMaxCommand to be "at least 256 decimal (0x100)" */
  62#define WDM_DEFAULT_BUFSIZE	256
  63
  64static DEFINE_MUTEX(wdm_mutex);
  65static DEFINE_SPINLOCK(wdm_device_list_lock);
  66static LIST_HEAD(wdm_device_list);
  67
  68/* --- method tables --- */
  69
  70struct wdm_device {
  71	u8			*inbuf; /* buffer for response */
  72	u8			*outbuf; /* buffer for command */
  73	u8			*sbuf; /* buffer for status */
  74	u8			*ubuf; /* buffer for copy to user space */
  75
  76	struct urb		*command;
  77	struct urb		*response;
  78	struct urb		*validity;
  79	struct usb_interface	*intf;
  80	struct usb_ctrlrequest	*orq;
  81	struct usb_ctrlrequest	*irq;
  82	spinlock_t		iuspin;
  83
  84	unsigned long		flags;
  85	u16			bufsize;
  86	u16			wMaxCommand;
  87	u16			wMaxPacketSize;
  88	__le16			inum;
  89	int			reslength;
  90	int			length;
  91	int			read;
  92	int			count;
  93	dma_addr_t		shandle;
  94	dma_addr_t		ihandle;
  95	struct mutex		wlock;
  96	struct mutex		rlock;
  97	wait_queue_head_t	wait;
  98	struct work_struct	rxwork;
  99	struct work_struct	service_outs_intr;
 100	int			werr;
 101	int			rerr;
 102	int                     resp_count;
 103
 104	struct list_head	device_list;
 105	int			(*manage_power)(struct usb_interface *, int);
 106};
 107
 108static struct usb_driver wdm_driver;
 109
 110/* return intfdata if we own the interface, else look up intf in the list */
 111static struct wdm_device *wdm_find_device(struct usb_interface *intf)
 112{
 113	struct wdm_device *desc;
 114
 115	spin_lock(&wdm_device_list_lock);
 116	list_for_each_entry(desc, &wdm_device_list, device_list)
 117		if (desc->intf == intf)
 118			goto found;
 119	desc = NULL;
 120found:
 121	spin_unlock(&wdm_device_list_lock);
 122
 123	return desc;
 124}
 125
 126static struct wdm_device *wdm_find_device_by_minor(int minor)
 127{
 128	struct wdm_device *desc;
 129
 130	spin_lock(&wdm_device_list_lock);
 131	list_for_each_entry(desc, &wdm_device_list, device_list)
 132		if (desc->intf->minor == minor)
 133			goto found;
 134	desc = NULL;
 135found:
 136	spin_unlock(&wdm_device_list_lock);
 137
 138	return desc;
 139}
 140
 141/* --- callbacks --- */
 142static void wdm_out_callback(struct urb *urb)
 143{
 144	struct wdm_device *desc;
 145	unsigned long flags;
 146
 147	desc = urb->context;
 148	spin_lock_irqsave(&desc->iuspin, flags);
 149	desc->werr = urb->status;
 150	spin_unlock_irqrestore(&desc->iuspin, flags);
 151	kfree(desc->outbuf);
 152	desc->outbuf = NULL;
 153	clear_bit(WDM_IN_USE, &desc->flags);
 154	wake_up(&desc->wait);
 155}
 156
 157static void wdm_in_callback(struct urb *urb)
 158{
 159	unsigned long flags;
 160	struct wdm_device *desc = urb->context;
 161	int status = urb->status;
 162	int length = urb->actual_length;
 163
 164	spin_lock_irqsave(&desc->iuspin, flags);
 165	clear_bit(WDM_RESPONDING, &desc->flags);
 166
 167	if (status) {
 168		switch (status) {
 169		case -ENOENT:
 170			dev_dbg(&desc->intf->dev,
 171				"nonzero urb status received: -ENOENT\n");
 172			goto skip_error;
 173		case -ECONNRESET:
 174			dev_dbg(&desc->intf->dev,
 175				"nonzero urb status received: -ECONNRESET\n");
 176			goto skip_error;
 177		case -ESHUTDOWN:
 178			dev_dbg(&desc->intf->dev,
 179				"nonzero urb status received: -ESHUTDOWN\n");
 180			goto skip_error;
 181		case -EPIPE:
 182			dev_err(&desc->intf->dev,
 183				"nonzero urb status received: -EPIPE\n");
 184			break;
 185		default:
 186			dev_err(&desc->intf->dev,
 187				"Unexpected error %d\n", status);
 188			break;
 189		}
 190	}
 191
 192	/*
 193	 * only set a new error if there is no previous error.
 194	 * Errors are only cleared during read/open
 195	 * Avoid propagating -EPIPE (stall) to userspace since it is
 196	 * better handled as an empty read
 197	 */
 198	if (desc->rerr == 0 && status != -EPIPE)
 199		desc->rerr = status;
 200
 201	if (length + desc->length > desc->wMaxCommand) {
 202		/* The buffer would overflow */
 203		set_bit(WDM_OVERFLOW, &desc->flags);
 204	} else {
 205		/* we may already be in overflow */
 206		if (!test_bit(WDM_OVERFLOW, &desc->flags)) {
 207			memmove(desc->ubuf + desc->length, desc->inbuf, length);
 208			desc->length += length;
 209			desc->reslength = length;
 210		}
 211	}
 212skip_error:
 
 213
 214	if (desc->rerr) {
 215		/*
 216		 * Since there was an error, userspace may decide to not read
 217		 * any data after poll'ing.
 218		 * We should respond to further attempts from the device to send
 219		 * data, so that we can get unstuck.
 220		 */
 221		schedule_work(&desc->service_outs_intr);
 222	} else {
 223		set_bit(WDM_READ, &desc->flags);
 224		wake_up(&desc->wait);
 225	}
 226	spin_unlock_irqrestore(&desc->iuspin, flags);
 227}
 228
 229static void wdm_int_callback(struct urb *urb)
 230{
 231	unsigned long flags;
 232	int rv = 0;
 233	int responding;
 234	int status = urb->status;
 235	struct wdm_device *desc;
 236	struct usb_cdc_notification *dr;
 237
 238	desc = urb->context;
 239	dr = (struct usb_cdc_notification *)desc->sbuf;
 240
 241	if (status) {
 242		switch (status) {
 243		case -ESHUTDOWN:
 244		case -ENOENT:
 245		case -ECONNRESET:
 246			return; /* unplug */
 247		case -EPIPE:
 248			set_bit(WDM_INT_STALL, &desc->flags);
 249			dev_err(&desc->intf->dev, "Stall on int endpoint\n");
 250			goto sw; /* halt is cleared in work */
 251		default:
 252			dev_err(&desc->intf->dev,
 253				"nonzero urb status received: %d\n", status);
 254			break;
 255		}
 256	}
 257
 258	if (urb->actual_length < sizeof(struct usb_cdc_notification)) {
 259		dev_err(&desc->intf->dev, "wdm_int_callback - %d bytes\n",
 260			urb->actual_length);
 261		goto exit;
 262	}
 263
 264	switch (dr->bNotificationType) {
 265	case USB_CDC_NOTIFY_RESPONSE_AVAILABLE:
 266		dev_dbg(&desc->intf->dev,
 267			"NOTIFY_RESPONSE_AVAILABLE received: index %d len %d\n",
 268			le16_to_cpu(dr->wIndex), le16_to_cpu(dr->wLength));
 269		break;
 270
 271	case USB_CDC_NOTIFY_NETWORK_CONNECTION:
 272
 273		dev_dbg(&desc->intf->dev,
 274			"NOTIFY_NETWORK_CONNECTION %s network\n",
 275			dr->wValue ? "connected to" : "disconnected from");
 276		goto exit;
 277	case USB_CDC_NOTIFY_SPEED_CHANGE:
 278		dev_dbg(&desc->intf->dev, "SPEED_CHANGE received (len %u)\n",
 279			urb->actual_length);
 280		goto exit;
 281	default:
 282		clear_bit(WDM_POLL_RUNNING, &desc->flags);
 283		dev_err(&desc->intf->dev,
 284			"unknown notification %d received: index %d len %d\n",
 285			dr->bNotificationType,
 286			le16_to_cpu(dr->wIndex),
 287			le16_to_cpu(dr->wLength));
 288		goto exit;
 289	}
 290
 291	spin_lock_irqsave(&desc->iuspin, flags);
 292	responding = test_and_set_bit(WDM_RESPONDING, &desc->flags);
 293	if (!desc->resp_count++ && !responding
 294		&& !test_bit(WDM_DISCONNECTING, &desc->flags)
 295		&& !test_bit(WDM_SUSPENDING, &desc->flags)) {
 296		rv = usb_submit_urb(desc->response, GFP_ATOMIC);
 297		dev_dbg(&desc->intf->dev, "submit response URB %d\n", rv);
 
 298	}
 299	spin_unlock_irqrestore(&desc->iuspin, flags);
 300	if (rv < 0) {
 301		clear_bit(WDM_RESPONDING, &desc->flags);
 302		if (rv == -EPERM)
 303			return;
 304		if (rv == -ENOMEM) {
 305sw:
 306			rv = schedule_work(&desc->rxwork);
 307			if (rv)
 308				dev_err(&desc->intf->dev,
 309					"Cannot schedule work\n");
 310		}
 311	}
 312exit:
 313	rv = usb_submit_urb(urb, GFP_ATOMIC);
 314	if (rv)
 315		dev_err(&desc->intf->dev,
 316			"%s - usb_submit_urb failed with result %d\n",
 317			__func__, rv);
 318
 319}
 320
 321static void kill_urbs(struct wdm_device *desc)
 322{
 323	/* the order here is essential */
 324	usb_kill_urb(desc->command);
 325	usb_kill_urb(desc->validity);
 326	usb_kill_urb(desc->response);
 327}
 328
 329static void free_urbs(struct wdm_device *desc)
 330{
 331	usb_free_urb(desc->validity);
 332	usb_free_urb(desc->response);
 333	usb_free_urb(desc->command);
 334}
 335
 336static void cleanup(struct wdm_device *desc)
 337{
 338	kfree(desc->sbuf);
 339	kfree(desc->inbuf);
 340	kfree(desc->orq);
 341	kfree(desc->irq);
 342	kfree(desc->ubuf);
 343	free_urbs(desc);
 344	kfree(desc);
 345}
 346
 347static ssize_t wdm_write
 348(struct file *file, const char __user *buffer, size_t count, loff_t *ppos)
 349{
 350	u8 *buf;
 351	int rv = -EMSGSIZE, r, we;
 352	struct wdm_device *desc = file->private_data;
 353	struct usb_ctrlrequest *req;
 354
 355	if (count > desc->wMaxCommand)
 356		count = desc->wMaxCommand;
 357
 358	spin_lock_irq(&desc->iuspin);
 359	we = desc->werr;
 360	desc->werr = 0;
 361	spin_unlock_irq(&desc->iuspin);
 362	if (we < 0)
 363		return usb_translate_errors(we);
 364
 365	buf = memdup_user(buffer, count);
 366	if (IS_ERR(buf))
 367		return PTR_ERR(buf);
 
 
 
 
 
 
 
 
 
 368
 369	/* concurrent writes and disconnect */
 370	r = mutex_lock_interruptible(&desc->wlock);
 371	rv = -ERESTARTSYS;
 372	if (r)
 373		goto out_free_mem;
 
 
 374
 375	if (test_bit(WDM_DISCONNECTING, &desc->flags)) {
 
 376		rv = -ENODEV;
 377		goto out_free_mem_lock;
 378	}
 379
 380	r = usb_autopm_get_interface(desc->intf);
 381	if (r < 0) {
 
 382		rv = usb_translate_errors(r);
 383		goto out_free_mem_lock;
 384	}
 385
 386	if (!(file->f_flags & O_NONBLOCK))
 387		r = wait_event_interruptible(desc->wait, !test_bit(WDM_IN_USE,
 388								&desc->flags));
 389	else
 390		if (test_bit(WDM_IN_USE, &desc->flags))
 391			r = -EAGAIN;
 392
 393	if (test_bit(WDM_RESETTING, &desc->flags))
 394		r = -EIO;
 395
 396	if (r < 0) {
 
 397		rv = r;
 398		goto out_free_mem_pm;
 399	}
 400
 401	req = desc->orq;
 402	usb_fill_control_urb(
 403		desc->command,
 404		interface_to_usbdev(desc->intf),
 405		/* using common endpoint 0 */
 406		usb_sndctrlpipe(interface_to_usbdev(desc->intf), 0),
 407		(unsigned char *)req,
 408		buf,
 409		count,
 410		wdm_out_callback,
 411		desc
 412	);
 413
 414	req->bRequestType = (USB_DIR_OUT | USB_TYPE_CLASS |
 415			     USB_RECIP_INTERFACE);
 416	req->bRequest = USB_CDC_SEND_ENCAPSULATED_COMMAND;
 417	req->wValue = 0;
 418	req->wIndex = desc->inum; /* already converted */
 419	req->wLength = cpu_to_le16(count);
 420	set_bit(WDM_IN_USE, &desc->flags);
 421	desc->outbuf = buf;
 422
 423	rv = usb_submit_urb(desc->command, GFP_KERNEL);
 424	if (rv < 0) {
 
 425		desc->outbuf = NULL;
 426		clear_bit(WDM_IN_USE, &desc->flags);
 427		dev_err(&desc->intf->dev, "Tx URB error: %d\n", rv);
 428		rv = usb_translate_errors(rv);
 429		goto out_free_mem_pm;
 430	} else {
 431		dev_dbg(&desc->intf->dev, "Tx URB has been submitted index=%d\n",
 432			le16_to_cpu(req->wIndex));
 433	}
 434
 435	usb_autopm_put_interface(desc->intf);
 436	mutex_unlock(&desc->wlock);
 437	return count;
 438
 439out_free_mem_pm:
 440	usb_autopm_put_interface(desc->intf);
 441out_free_mem_lock:
 442	mutex_unlock(&desc->wlock);
 443out_free_mem:
 444	kfree(buf);
 445	return rv;
 446}
 447
 448/*
 449 * Submit the read urb if resp_count is non-zero.
 
 450 *
 451 * Called with desc->iuspin locked
 452 */
 453static int service_outstanding_interrupt(struct wdm_device *desc)
 454{
 455	int rv = 0;
 456
 
 
 457	/* submit read urb only if the device is waiting for it */
 458	if (!desc->resp_count || !--desc->resp_count)
 459		goto out;
 460
 461	set_bit(WDM_RESPONDING, &desc->flags);
 462	spin_unlock_irq(&desc->iuspin);
 463	rv = usb_submit_urb(desc->response, GFP_KERNEL);
 464	spin_lock_irq(&desc->iuspin);
 465	if (rv) {
 466		dev_err(&desc->intf->dev,
 467			"usb_submit_urb failed with result %d\n", rv);
 468
 469		/* make sure the next notification trigger a submit */
 470		clear_bit(WDM_RESPONDING, &desc->flags);
 471		desc->resp_count = 0;
 472	}
 473out:
 474	return rv;
 475}
 476
 477static ssize_t wdm_read
 478(struct file *file, char __user *buffer, size_t count, loff_t *ppos)
 479{
 480	int rv, cntr;
 481	int i = 0;
 482	struct wdm_device *desc = file->private_data;
 483
 484
 485	rv = mutex_lock_interruptible(&desc->rlock); /*concurrent reads */
 486	if (rv < 0)
 487		return -ERESTARTSYS;
 488
 489	cntr = READ_ONCE(desc->length);
 490	if (cntr == 0) {
 491		desc->read = 0;
 492retry:
 493		if (test_bit(WDM_DISCONNECTING, &desc->flags)) {
 494			rv = -ENODEV;
 495			goto err;
 496		}
 497		if (test_bit(WDM_OVERFLOW, &desc->flags)) {
 498			clear_bit(WDM_OVERFLOW, &desc->flags);
 499			rv = -ENOBUFS;
 500			goto err;
 501		}
 502		i++;
 503		if (file->f_flags & O_NONBLOCK) {
 504			if (!test_bit(WDM_READ, &desc->flags)) {
 505				rv = -EAGAIN;
 506				goto err;
 507			}
 508			rv = 0;
 509		} else {
 510			rv = wait_event_interruptible(desc->wait,
 511				test_bit(WDM_READ, &desc->flags));
 512		}
 513
 514		/* may have happened while we slept */
 515		if (test_bit(WDM_DISCONNECTING, &desc->flags)) {
 516			rv = -ENODEV;
 517			goto err;
 518		}
 519		if (test_bit(WDM_RESETTING, &desc->flags)) {
 520			rv = -EIO;
 521			goto err;
 522		}
 523		usb_mark_last_busy(interface_to_usbdev(desc->intf));
 524		if (rv < 0) {
 525			rv = -ERESTARTSYS;
 526			goto err;
 527		}
 528
 529		spin_lock_irq(&desc->iuspin);
 530
 531		if (desc->rerr) { /* read completed, error happened */
 532			rv = usb_translate_errors(desc->rerr);
 533			desc->rerr = 0;
 534			spin_unlock_irq(&desc->iuspin);
 
 535			goto err;
 536		}
 537		/*
 538		 * recheck whether we've lost the race
 539		 * against the completion handler
 540		 */
 541		if (!test_bit(WDM_READ, &desc->flags)) { /* lost race */
 542			spin_unlock_irq(&desc->iuspin);
 543			goto retry;
 544		}
 545
 546		if (!desc->reslength) { /* zero length read */
 547			dev_dbg(&desc->intf->dev, "zero length - clearing WDM_READ\n");
 548			clear_bit(WDM_READ, &desc->flags);
 549			rv = service_outstanding_interrupt(desc);
 550			spin_unlock_irq(&desc->iuspin);
 551			if (rv < 0)
 552				goto err;
 553			goto retry;
 554		}
 555		cntr = desc->length;
 556		spin_unlock_irq(&desc->iuspin);
 557	}
 558
 559	if (cntr > count)
 560		cntr = count;
 561	rv = copy_to_user(buffer, desc->ubuf, cntr);
 562	if (rv > 0) {
 563		rv = -EFAULT;
 564		goto err;
 565	}
 566
 567	spin_lock_irq(&desc->iuspin);
 568
 569	for (i = 0; i < desc->length - cntr; i++)
 570		desc->ubuf[i] = desc->ubuf[i + cntr];
 571
 572	desc->length -= cntr;
 573	/* in case we had outstanding data */
 574	if (!desc->length) {
 575		clear_bit(WDM_READ, &desc->flags);
 576		service_outstanding_interrupt(desc);
 577	}
 578	spin_unlock_irq(&desc->iuspin);
 579	rv = cntr;
 580
 581err:
 582	mutex_unlock(&desc->rlock);
 583	return rv;
 584}
 585
 586static int wdm_flush(struct file *file, fl_owner_t id)
 587{
 588	struct wdm_device *desc = file->private_data;
 589
 590	wait_event(desc->wait,
 591			/*
 592			 * needs both flags. We cannot do with one
 593			 * because resetting it would cause a race
 594			 * with write() yet we need to signal
 595			 * a disconnect
 596			 */
 597			!test_bit(WDM_IN_USE, &desc->flags) ||
 598			test_bit(WDM_DISCONNECTING, &desc->flags));
 599
 600	/* cannot dereference desc->intf if WDM_DISCONNECTING */
 601	if (test_bit(WDM_DISCONNECTING, &desc->flags))
 602		return -ENODEV;
 603	if (desc->werr < 0)
 604		dev_err(&desc->intf->dev, "Error in flush path: %d\n",
 605			desc->werr);
 606
 607	return usb_translate_errors(desc->werr);
 608}
 609
 610static __poll_t wdm_poll(struct file *file, struct poll_table_struct *wait)
 611{
 612	struct wdm_device *desc = file->private_data;
 613	unsigned long flags;
 614	__poll_t mask = 0;
 615
 616	spin_lock_irqsave(&desc->iuspin, flags);
 617	if (test_bit(WDM_DISCONNECTING, &desc->flags)) {
 618		mask = EPOLLHUP | EPOLLERR;
 619		spin_unlock_irqrestore(&desc->iuspin, flags);
 620		goto desc_out;
 621	}
 622	if (test_bit(WDM_READ, &desc->flags))
 623		mask = EPOLLIN | EPOLLRDNORM;
 624	if (desc->rerr || desc->werr)
 625		mask |= EPOLLERR;
 626	if (!test_bit(WDM_IN_USE, &desc->flags))
 627		mask |= EPOLLOUT | EPOLLWRNORM;
 628	spin_unlock_irqrestore(&desc->iuspin, flags);
 629
 630	poll_wait(file, &desc->wait, wait);
 631
 632desc_out:
 633	return mask;
 634}
 635
 636static int wdm_open(struct inode *inode, struct file *file)
 637{
 638	int minor = iminor(inode);
 639	int rv = -ENODEV;
 640	struct usb_interface *intf;
 641	struct wdm_device *desc;
 642
 643	mutex_lock(&wdm_mutex);
 644	desc = wdm_find_device_by_minor(minor);
 645	if (!desc)
 646		goto out;
 647
 648	intf = desc->intf;
 649	if (test_bit(WDM_DISCONNECTING, &desc->flags))
 650		goto out;
 651	file->private_data = desc;
 652
 653	rv = usb_autopm_get_interface(desc->intf);
 654	if (rv < 0) {
 655		dev_err(&desc->intf->dev, "Error autopm - %d\n", rv);
 656		goto out;
 657	}
 658
 659	/* using write lock to protect desc->count */
 660	mutex_lock(&desc->wlock);
 661	if (!desc->count++) {
 662		desc->werr = 0;
 663		desc->rerr = 0;
 664		rv = usb_submit_urb(desc->validity, GFP_KERNEL);
 665		if (rv < 0) {
 666			desc->count--;
 667			dev_err(&desc->intf->dev,
 668				"Error submitting int urb - %d\n", rv);
 669			rv = usb_translate_errors(rv);
 670		}
 671	} else {
 672		rv = 0;
 673	}
 674	mutex_unlock(&desc->wlock);
 675	if (desc->count == 1)
 676		desc->manage_power(intf, 1);
 677	usb_autopm_put_interface(desc->intf);
 678out:
 679	mutex_unlock(&wdm_mutex);
 680	return rv;
 681}
 682
 683static int wdm_release(struct inode *inode, struct file *file)
 684{
 685	struct wdm_device *desc = file->private_data;
 686
 687	mutex_lock(&wdm_mutex);
 688
 689	/* using write lock to protect desc->count */
 690	mutex_lock(&desc->wlock);
 691	desc->count--;
 692	mutex_unlock(&desc->wlock);
 693
 694	if (!desc->count) {
 695		if (!test_bit(WDM_DISCONNECTING, &desc->flags)) {
 696			dev_dbg(&desc->intf->dev, "wdm_release: cleanup\n");
 697			kill_urbs(desc);
 698			spin_lock_irq(&desc->iuspin);
 699			desc->resp_count = 0;
 700			spin_unlock_irq(&desc->iuspin);
 701			desc->manage_power(desc->intf, 0);
 702		} else {
 703			/* must avoid dev_printk here as desc->intf is invalid */
 704			pr_debug(KBUILD_MODNAME " %s: device gone - cleaning up\n", __func__);
 705			cleanup(desc);
 706		}
 707	}
 708	mutex_unlock(&wdm_mutex);
 709	return 0;
 710}
 711
 712static long wdm_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
 713{
 714	struct wdm_device *desc = file->private_data;
 715	int rv = 0;
 716
 717	switch (cmd) {
 718	case IOCTL_WDM_MAX_COMMAND:
 719		if (copy_to_user((void __user *)arg, &desc->wMaxCommand, sizeof(desc->wMaxCommand)))
 720			rv = -EFAULT;
 721		break;
 722	default:
 723		rv = -ENOTTY;
 724	}
 725	return rv;
 726}
 727
 728static const struct file_operations wdm_fops = {
 729	.owner =	THIS_MODULE,
 730	.read =		wdm_read,
 731	.write =	wdm_write,
 732	.open =		wdm_open,
 733	.flush =	wdm_flush,
 734	.release =	wdm_release,
 735	.poll =		wdm_poll,
 736	.unlocked_ioctl = wdm_ioctl,
 737	.compat_ioctl = compat_ptr_ioctl,
 738	.llseek =	noop_llseek,
 739};
 740
 741static struct usb_class_driver wdm_class = {
 742	.name =		"cdc-wdm%d",
 743	.fops =		&wdm_fops,
 744	.minor_base =	WDM_MINOR_BASE,
 745};
 746
 747/* --- error handling --- */
 748static void wdm_rxwork(struct work_struct *work)
 749{
 750	struct wdm_device *desc = container_of(work, struct wdm_device, rxwork);
 751	unsigned long flags;
 752	int rv = 0;
 753	int responding;
 754
 755	spin_lock_irqsave(&desc->iuspin, flags);
 756	if (test_bit(WDM_DISCONNECTING, &desc->flags)) {
 757		spin_unlock_irqrestore(&desc->iuspin, flags);
 758	} else {
 759		responding = test_and_set_bit(WDM_RESPONDING, &desc->flags);
 760		spin_unlock_irqrestore(&desc->iuspin, flags);
 761		if (!responding)
 762			rv = usb_submit_urb(desc->response, GFP_KERNEL);
 763		if (rv < 0 && rv != -EPERM) {
 764			spin_lock_irqsave(&desc->iuspin, flags);
 765			clear_bit(WDM_RESPONDING, &desc->flags);
 766			if (!test_bit(WDM_DISCONNECTING, &desc->flags))
 767				schedule_work(&desc->rxwork);
 768			spin_unlock_irqrestore(&desc->iuspin, flags);
 769		}
 770	}
 771}
 772
 773static void service_interrupt_work(struct work_struct *work)
 774{
 775	struct wdm_device *desc;
 776
 777	desc = container_of(work, struct wdm_device, service_outs_intr);
 778
 779	spin_lock_irq(&desc->iuspin);
 780	service_outstanding_interrupt(desc);
 781	if (!desc->resp_count) {
 782		set_bit(WDM_READ, &desc->flags);
 783		wake_up(&desc->wait);
 784	}
 785	spin_unlock_irq(&desc->iuspin);
 786}
 787
 788/* --- hotplug --- */
 789
 790static int wdm_create(struct usb_interface *intf, struct usb_endpoint_descriptor *ep,
 791		u16 bufsize, int (*manage_power)(struct usb_interface *, int))
 792{
 793	int rv = -ENOMEM;
 794	struct wdm_device *desc;
 795
 796	desc = kzalloc(sizeof(struct wdm_device), GFP_KERNEL);
 797	if (!desc)
 798		goto out;
 799	INIT_LIST_HEAD(&desc->device_list);
 800	mutex_init(&desc->rlock);
 801	mutex_init(&desc->wlock);
 802	spin_lock_init(&desc->iuspin);
 803	init_waitqueue_head(&desc->wait);
 804	desc->wMaxCommand = bufsize;
 805	/* this will be expanded and needed in hardware endianness */
 806	desc->inum = cpu_to_le16((u16)intf->cur_altsetting->desc.bInterfaceNumber);
 807	desc->intf = intf;
 808	INIT_WORK(&desc->rxwork, wdm_rxwork);
 809	INIT_WORK(&desc->service_outs_intr, service_interrupt_work);
 810
 811	rv = -EINVAL;
 812	if (!usb_endpoint_is_int_in(ep))
 813		goto err;
 814
 815	desc->wMaxPacketSize = usb_endpoint_maxp(ep);
 816
 817	desc->orq = kmalloc(sizeof(struct usb_ctrlrequest), GFP_KERNEL);
 818	if (!desc->orq)
 819		goto err;
 820	desc->irq = kmalloc(sizeof(struct usb_ctrlrequest), GFP_KERNEL);
 821	if (!desc->irq)
 822		goto err;
 823
 824	desc->validity = usb_alloc_urb(0, GFP_KERNEL);
 825	if (!desc->validity)
 826		goto err;
 827
 828	desc->response = usb_alloc_urb(0, GFP_KERNEL);
 829	if (!desc->response)
 830		goto err;
 831
 832	desc->command = usb_alloc_urb(0, GFP_KERNEL);
 833	if (!desc->command)
 834		goto err;
 835
 836	desc->ubuf = kmalloc(desc->wMaxCommand, GFP_KERNEL);
 837	if (!desc->ubuf)
 838		goto err;
 839
 840	desc->sbuf = kmalloc(desc->wMaxPacketSize, GFP_KERNEL);
 841	if (!desc->sbuf)
 842		goto err;
 843
 844	desc->inbuf = kmalloc(desc->wMaxCommand, GFP_KERNEL);
 845	if (!desc->inbuf)
 846		goto err;
 847
 848	usb_fill_int_urb(
 849		desc->validity,
 850		interface_to_usbdev(intf),
 851		usb_rcvintpipe(interface_to_usbdev(intf), ep->bEndpointAddress),
 852		desc->sbuf,
 853		desc->wMaxPacketSize,
 854		wdm_int_callback,
 855		desc,
 856		ep->bInterval
 857	);
 858
 859	desc->irq->bRequestType = (USB_DIR_IN | USB_TYPE_CLASS | USB_RECIP_INTERFACE);
 860	desc->irq->bRequest = USB_CDC_GET_ENCAPSULATED_RESPONSE;
 861	desc->irq->wValue = 0;
 862	desc->irq->wIndex = desc->inum; /* already converted */
 863	desc->irq->wLength = cpu_to_le16(desc->wMaxCommand);
 864
 865	usb_fill_control_urb(
 866		desc->response,
 867		interface_to_usbdev(intf),
 868		/* using common endpoint 0 */
 869		usb_rcvctrlpipe(interface_to_usbdev(desc->intf), 0),
 870		(unsigned char *)desc->irq,
 871		desc->inbuf,
 872		desc->wMaxCommand,
 873		wdm_in_callback,
 874		desc
 875	);
 876
 877	desc->manage_power = manage_power;
 878
 879	spin_lock(&wdm_device_list_lock);
 880	list_add(&desc->device_list, &wdm_device_list);
 881	spin_unlock(&wdm_device_list_lock);
 882
 883	rv = usb_register_dev(intf, &wdm_class);
 884	if (rv < 0)
 885		goto err;
 886	else
 887		dev_info(&intf->dev, "%s: USB WDM device\n", dev_name(intf->usb_dev));
 888out:
 889	return rv;
 890err:
 891	spin_lock(&wdm_device_list_lock);
 892	list_del(&desc->device_list);
 893	spin_unlock(&wdm_device_list_lock);
 894	cleanup(desc);
 895	return rv;
 896}
 897
 898static int wdm_manage_power(struct usb_interface *intf, int on)
 899{
 900	/* need autopm_get/put here to ensure the usbcore sees the new value */
 901	int rv = usb_autopm_get_interface(intf);
 902
 903	intf->needs_remote_wakeup = on;
 904	if (!rv)
 905		usb_autopm_put_interface(intf);
 906	return 0;
 907}
 908
 909static int wdm_probe(struct usb_interface *intf, const struct usb_device_id *id)
 910{
 911	int rv = -EINVAL;
 912	struct usb_host_interface *iface;
 913	struct usb_endpoint_descriptor *ep;
 914	struct usb_cdc_parsed_header hdr;
 915	u8 *buffer = intf->altsetting->extra;
 916	int buflen = intf->altsetting->extralen;
 917	u16 maxcom = WDM_DEFAULT_BUFSIZE;
 918
 919	if (!buffer)
 920		goto err;
 
 
 
 
 
 921
 922	cdc_parse_cdc_header(&hdr, intf, buffer, buflen);
 923
 924	if (hdr.usb_cdc_dmm_desc)
 925		maxcom = le16_to_cpu(hdr.usb_cdc_dmm_desc->wMaxCommand);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 926
 927	iface = intf->cur_altsetting;
 928	if (iface->desc.bNumEndpoints != 1)
 929		goto err;
 930	ep = &iface->endpoint[0].desc;
 931
 932	rv = wdm_create(intf, ep, maxcom, &wdm_manage_power);
 933
 934err:
 935	return rv;
 936}
 937
 938/**
 939 * usb_cdc_wdm_register - register a WDM subdriver
 940 * @intf: usb interface the subdriver will associate with
 941 * @ep: interrupt endpoint to monitor for notifications
 942 * @bufsize: maximum message size to support for read/write
 943 * @manage_power: call-back invoked during open and release to
 944 *                manage the device's power
 945 * Create WDM usb class character device and associate it with intf
 946 * without binding, allowing another driver to manage the interface.
 947 *
 948 * The subdriver will manage the given interrupt endpoint exclusively
 949 * and will issue control requests referring to the given intf. It
 950 * will otherwise avoid interferring, and in particular not do
 951 * usb_set_intfdata/usb_get_intfdata on intf.
 952 *
 953 * The return value is a pointer to the subdriver's struct usb_driver.
 954 * The registering driver is responsible for calling this subdriver's
 955 * disconnect, suspend, resume, pre_reset and post_reset methods from
 956 * its own.
 957 */
 958struct usb_driver *usb_cdc_wdm_register(struct usb_interface *intf,
 959					struct usb_endpoint_descriptor *ep,
 960					int bufsize,
 961					int (*manage_power)(struct usb_interface *, int))
 962{
 963	int rv;
 964
 965	rv = wdm_create(intf, ep, bufsize, manage_power);
 966	if (rv < 0)
 967		goto err;
 968
 969	return &wdm_driver;
 970err:
 971	return ERR_PTR(rv);
 972}
 973EXPORT_SYMBOL(usb_cdc_wdm_register);
 974
 975static void wdm_disconnect(struct usb_interface *intf)
 976{
 977	struct wdm_device *desc;
 978	unsigned long flags;
 979
 980	usb_deregister_dev(intf, &wdm_class);
 981	desc = wdm_find_device(intf);
 982	mutex_lock(&wdm_mutex);
 983
 984	/* the spinlock makes sure no new urbs are generated in the callbacks */
 985	spin_lock_irqsave(&desc->iuspin, flags);
 986	set_bit(WDM_DISCONNECTING, &desc->flags);
 987	set_bit(WDM_READ, &desc->flags);
 
 
 988	spin_unlock_irqrestore(&desc->iuspin, flags);
 989	wake_up_all(&desc->wait);
 990	mutex_lock(&desc->rlock);
 991	mutex_lock(&desc->wlock);
 992	kill_urbs(desc);
 993	cancel_work_sync(&desc->rxwork);
 994	cancel_work_sync(&desc->service_outs_intr);
 995	mutex_unlock(&desc->wlock);
 996	mutex_unlock(&desc->rlock);
 997
 998	/* the desc->intf pointer used as list key is now invalid */
 999	spin_lock(&wdm_device_list_lock);
1000	list_del(&desc->device_list);
1001	spin_unlock(&wdm_device_list_lock);
1002
1003	if (!desc->count)
1004		cleanup(desc);
1005	else
1006		dev_dbg(&intf->dev, "%d open files - postponing cleanup\n", desc->count);
1007	mutex_unlock(&wdm_mutex);
1008}
1009
1010#ifdef CONFIG_PM
1011static int wdm_suspend(struct usb_interface *intf, pm_message_t message)
1012{
1013	struct wdm_device *desc = wdm_find_device(intf);
1014	int rv = 0;
1015
1016	dev_dbg(&desc->intf->dev, "wdm%d_suspend\n", intf->minor);
1017
1018	/* if this is an autosuspend the caller does the locking */
1019	if (!PMSG_IS_AUTO(message)) {
1020		mutex_lock(&desc->rlock);
1021		mutex_lock(&desc->wlock);
1022	}
1023	spin_lock_irq(&desc->iuspin);
1024
1025	if (PMSG_IS_AUTO(message) &&
1026			(test_bit(WDM_IN_USE, &desc->flags)
1027			|| test_bit(WDM_RESPONDING, &desc->flags))) {
1028		spin_unlock_irq(&desc->iuspin);
1029		rv = -EBUSY;
1030	} else {
1031
1032		set_bit(WDM_SUSPENDING, &desc->flags);
1033		spin_unlock_irq(&desc->iuspin);
1034		/* callback submits work - order is essential */
1035		kill_urbs(desc);
1036		cancel_work_sync(&desc->rxwork);
1037		cancel_work_sync(&desc->service_outs_intr);
1038	}
1039	if (!PMSG_IS_AUTO(message)) {
1040		mutex_unlock(&desc->wlock);
1041		mutex_unlock(&desc->rlock);
1042	}
1043
1044	return rv;
1045}
1046#endif
1047
1048static int recover_from_urb_loss(struct wdm_device *desc)
1049{
1050	int rv = 0;
1051
1052	if (desc->count) {
1053		rv = usb_submit_urb(desc->validity, GFP_NOIO);
1054		if (rv < 0)
1055			dev_err(&desc->intf->dev,
1056				"Error resume submitting int urb - %d\n", rv);
1057	}
1058	return rv;
1059}
1060
1061#ifdef CONFIG_PM
1062static int wdm_resume(struct usb_interface *intf)
1063{
1064	struct wdm_device *desc = wdm_find_device(intf);
1065	int rv;
1066
1067	dev_dbg(&desc->intf->dev, "wdm%d_resume\n", intf->minor);
1068
1069	clear_bit(WDM_SUSPENDING, &desc->flags);
1070	rv = recover_from_urb_loss(desc);
1071
1072	return rv;
1073}
1074#endif
1075
1076static int wdm_pre_reset(struct usb_interface *intf)
1077{
1078	struct wdm_device *desc = wdm_find_device(intf);
1079
1080	/*
1081	 * we notify everybody using poll of
1082	 * an exceptional situation
1083	 * must be done before recovery lest a spontaneous
1084	 * message from the device is lost
1085	 */
1086	spin_lock_irq(&desc->iuspin);
1087	set_bit(WDM_RESETTING, &desc->flags);	/* inform read/write */
1088	set_bit(WDM_READ, &desc->flags);	/* unblock read */
1089	clear_bit(WDM_IN_USE, &desc->flags);	/* unblock write */
1090	desc->rerr = -EINTR;
1091	spin_unlock_irq(&desc->iuspin);
1092	wake_up_all(&desc->wait);
1093	mutex_lock(&desc->rlock);
1094	mutex_lock(&desc->wlock);
1095	kill_urbs(desc);
1096	cancel_work_sync(&desc->rxwork);
1097	cancel_work_sync(&desc->service_outs_intr);
1098	return 0;
1099}
1100
1101static int wdm_post_reset(struct usb_interface *intf)
1102{
1103	struct wdm_device *desc = wdm_find_device(intf);
1104	int rv;
1105
1106	clear_bit(WDM_OVERFLOW, &desc->flags);
1107	clear_bit(WDM_RESETTING, &desc->flags);
1108	rv = recover_from_urb_loss(desc);
1109	mutex_unlock(&desc->wlock);
1110	mutex_unlock(&desc->rlock);
1111	return rv;
1112}
1113
1114static struct usb_driver wdm_driver = {
1115	.name =		"cdc_wdm",
1116	.probe =	wdm_probe,
1117	.disconnect =	wdm_disconnect,
1118#ifdef CONFIG_PM
1119	.suspend =	wdm_suspend,
1120	.resume =	wdm_resume,
1121	.reset_resume =	wdm_resume,
1122#endif
1123	.pre_reset =	wdm_pre_reset,
1124	.post_reset =	wdm_post_reset,
1125	.id_table =	wdm_ids,
1126	.supports_autosuspend = 1,
1127	.disable_hub_initiated_lpm = 1,
1128};
1129
1130module_usb_driver(wdm_driver);
1131
1132MODULE_AUTHOR(DRIVER_AUTHOR);
1133MODULE_DESCRIPTION(DRIVER_DESC);
1134MODULE_LICENSE("GPL");
v3.15
 
   1/*
   2 * cdc-wdm.c
   3 *
   4 * This driver supports USB CDC WCM Device Management.
   5 *
   6 * Copyright (c) 2007-2009 Oliver Neukum
   7 *
   8 * Some code taken from cdc-acm.c
   9 *
  10 * Released under the GPLv2.
  11 *
  12 * Many thanks to Carl Nordbeck
  13 */
  14#include <linux/kernel.h>
  15#include <linux/errno.h>
  16#include <linux/ioctl.h>
  17#include <linux/slab.h>
  18#include <linux/module.h>
  19#include <linux/mutex.h>
  20#include <linux/uaccess.h>
  21#include <linux/bitops.h>
  22#include <linux/poll.h>
  23#include <linux/usb.h>
  24#include <linux/usb/cdc.h>
  25#include <asm/byteorder.h>
  26#include <asm/unaligned.h>
  27#include <linux/usb/cdc-wdm.h>
  28
  29/*
  30 * Version Information
  31 */
  32#define DRIVER_VERSION "v0.03"
  33#define DRIVER_AUTHOR "Oliver Neukum"
  34#define DRIVER_DESC "USB Abstract Control Model driver for USB WCM Device Management"
  35
  36static const struct usb_device_id wdm_ids[] = {
  37	{
  38		.match_flags = USB_DEVICE_ID_MATCH_INT_CLASS |
  39				 USB_DEVICE_ID_MATCH_INT_SUBCLASS,
  40		.bInterfaceClass = USB_CLASS_COMM,
  41		.bInterfaceSubClass = USB_CDC_SUBCLASS_DMM
  42	},
  43	{ }
  44};
  45
  46MODULE_DEVICE_TABLE (usb, wdm_ids);
  47
  48#define WDM_MINOR_BASE	176
  49
  50
  51#define WDM_IN_USE		1
  52#define WDM_DISCONNECTING	2
  53#define WDM_RESULT		3
  54#define WDM_READ		4
  55#define WDM_INT_STALL		5
  56#define WDM_POLL_RUNNING	6
  57#define WDM_RESPONDING		7
  58#define WDM_SUSPENDING		8
  59#define WDM_RESETTING		9
  60#define WDM_OVERFLOW		10
  61
  62#define WDM_MAX			16
  63
  64/* CDC-WMC r1.1 requires wMaxCommand to be "at least 256 decimal (0x100)" */
  65#define WDM_DEFAULT_BUFSIZE	256
  66
  67static DEFINE_MUTEX(wdm_mutex);
  68static DEFINE_SPINLOCK(wdm_device_list_lock);
  69static LIST_HEAD(wdm_device_list);
  70
  71/* --- method tables --- */
  72
  73struct wdm_device {
  74	u8			*inbuf; /* buffer for response */
  75	u8			*outbuf; /* buffer for command */
  76	u8			*sbuf; /* buffer for status */
  77	u8			*ubuf; /* buffer for copy to user space */
  78
  79	struct urb		*command;
  80	struct urb		*response;
  81	struct urb		*validity;
  82	struct usb_interface	*intf;
  83	struct usb_ctrlrequest	*orq;
  84	struct usb_ctrlrequest	*irq;
  85	spinlock_t		iuspin;
  86
  87	unsigned long		flags;
  88	u16			bufsize;
  89	u16			wMaxCommand;
  90	u16			wMaxPacketSize;
  91	__le16			inum;
  92	int			reslength;
  93	int			length;
  94	int			read;
  95	int			count;
  96	dma_addr_t		shandle;
  97	dma_addr_t		ihandle;
  98	struct mutex		wlock;
  99	struct mutex		rlock;
 100	wait_queue_head_t	wait;
 101	struct work_struct	rxwork;
 
 102	int			werr;
 103	int			rerr;
 104	int                     resp_count;
 105
 106	struct list_head	device_list;
 107	int			(*manage_power)(struct usb_interface *, int);
 108};
 109
 110static struct usb_driver wdm_driver;
 111
 112/* return intfdata if we own the interface, else look up intf in the list */
 113static struct wdm_device *wdm_find_device(struct usb_interface *intf)
 114{
 115	struct wdm_device *desc;
 116
 117	spin_lock(&wdm_device_list_lock);
 118	list_for_each_entry(desc, &wdm_device_list, device_list)
 119		if (desc->intf == intf)
 120			goto found;
 121	desc = NULL;
 122found:
 123	spin_unlock(&wdm_device_list_lock);
 124
 125	return desc;
 126}
 127
 128static struct wdm_device *wdm_find_device_by_minor(int minor)
 129{
 130	struct wdm_device *desc;
 131
 132	spin_lock(&wdm_device_list_lock);
 133	list_for_each_entry(desc, &wdm_device_list, device_list)
 134		if (desc->intf->minor == minor)
 135			goto found;
 136	desc = NULL;
 137found:
 138	spin_unlock(&wdm_device_list_lock);
 139
 140	return desc;
 141}
 142
 143/* --- callbacks --- */
 144static void wdm_out_callback(struct urb *urb)
 145{
 146	struct wdm_device *desc;
 
 
 147	desc = urb->context;
 148	spin_lock(&desc->iuspin);
 149	desc->werr = urb->status;
 150	spin_unlock(&desc->iuspin);
 151	kfree(desc->outbuf);
 152	desc->outbuf = NULL;
 153	clear_bit(WDM_IN_USE, &desc->flags);
 154	wake_up(&desc->wait);
 155}
 156
 157static void wdm_in_callback(struct urb *urb)
 158{
 
 159	struct wdm_device *desc = urb->context;
 160	int status = urb->status;
 161	int length = urb->actual_length;
 162
 163	spin_lock(&desc->iuspin);
 164	clear_bit(WDM_RESPONDING, &desc->flags);
 165
 166	if (status) {
 167		switch (status) {
 168		case -ENOENT:
 169			dev_dbg(&desc->intf->dev,
 170				"nonzero urb status received: -ENOENT");
 171			goto skip_error;
 172		case -ECONNRESET:
 173			dev_dbg(&desc->intf->dev,
 174				"nonzero urb status received: -ECONNRESET");
 175			goto skip_error;
 176		case -ESHUTDOWN:
 177			dev_dbg(&desc->intf->dev,
 178				"nonzero urb status received: -ESHUTDOWN");
 179			goto skip_error;
 180		case -EPIPE:
 181			dev_err(&desc->intf->dev,
 182				"nonzero urb status received: -EPIPE\n");
 183			break;
 184		default:
 185			dev_err(&desc->intf->dev,
 186				"Unexpected error %d\n", status);
 187			break;
 188		}
 189	}
 190
 191	desc->rerr = status;
 
 
 
 
 
 
 
 
 192	if (length + desc->length > desc->wMaxCommand) {
 193		/* The buffer would overflow */
 194		set_bit(WDM_OVERFLOW, &desc->flags);
 195	} else {
 196		/* we may already be in overflow */
 197		if (!test_bit(WDM_OVERFLOW, &desc->flags)) {
 198			memmove(desc->ubuf + desc->length, desc->inbuf, length);
 199			desc->length += length;
 200			desc->reslength = length;
 201		}
 202	}
 203skip_error:
 204	wake_up(&desc->wait);
 205
 206	set_bit(WDM_READ, &desc->flags);
 207	spin_unlock(&desc->iuspin);
 
 
 
 
 
 
 
 
 
 
 
 208}
 209
 210static void wdm_int_callback(struct urb *urb)
 211{
 
 212	int rv = 0;
 213	int responding;
 214	int status = urb->status;
 215	struct wdm_device *desc;
 216	struct usb_cdc_notification *dr;
 217
 218	desc = urb->context;
 219	dr = (struct usb_cdc_notification *)desc->sbuf;
 220
 221	if (status) {
 222		switch (status) {
 223		case -ESHUTDOWN:
 224		case -ENOENT:
 225		case -ECONNRESET:
 226			return; /* unplug */
 227		case -EPIPE:
 228			set_bit(WDM_INT_STALL, &desc->flags);
 229			dev_err(&desc->intf->dev, "Stall on int endpoint\n");
 230			goto sw; /* halt is cleared in work */
 231		default:
 232			dev_err(&desc->intf->dev,
 233				"nonzero urb status received: %d\n", status);
 234			break;
 235		}
 236	}
 237
 238	if (urb->actual_length < sizeof(struct usb_cdc_notification)) {
 239		dev_err(&desc->intf->dev, "wdm_int_callback - %d bytes\n",
 240			urb->actual_length);
 241		goto exit;
 242	}
 243
 244	switch (dr->bNotificationType) {
 245	case USB_CDC_NOTIFY_RESPONSE_AVAILABLE:
 246		dev_dbg(&desc->intf->dev,
 247			"NOTIFY_RESPONSE_AVAILABLE received: index %d len %d",
 248			dr->wIndex, dr->wLength);
 249		break;
 250
 251	case USB_CDC_NOTIFY_NETWORK_CONNECTION:
 252
 253		dev_dbg(&desc->intf->dev,
 254			"NOTIFY_NETWORK_CONNECTION %s network",
 255			dr->wValue ? "connected to" : "disconnected from");
 256		goto exit;
 257	case USB_CDC_NOTIFY_SPEED_CHANGE:
 258		dev_dbg(&desc->intf->dev, "SPEED_CHANGE received (len %u)",
 259			urb->actual_length);
 260		goto exit;
 261	default:
 262		clear_bit(WDM_POLL_RUNNING, &desc->flags);
 263		dev_err(&desc->intf->dev,
 264			"unknown notification %d received: index %d len %d\n",
 265			dr->bNotificationType, dr->wIndex, dr->wLength);
 
 
 266		goto exit;
 267	}
 268
 269	spin_lock(&desc->iuspin);
 270	responding = test_and_set_bit(WDM_RESPONDING, &desc->flags);
 271	if (!desc->resp_count++ && !responding
 272		&& !test_bit(WDM_DISCONNECTING, &desc->flags)
 273		&& !test_bit(WDM_SUSPENDING, &desc->flags)) {
 274		rv = usb_submit_urb(desc->response, GFP_ATOMIC);
 275		dev_dbg(&desc->intf->dev, "%s: usb_submit_urb %d",
 276			__func__, rv);
 277	}
 278	spin_unlock(&desc->iuspin);
 279	if (rv < 0) {
 280		clear_bit(WDM_RESPONDING, &desc->flags);
 281		if (rv == -EPERM)
 282			return;
 283		if (rv == -ENOMEM) {
 284sw:
 285			rv = schedule_work(&desc->rxwork);
 286			if (rv)
 287				dev_err(&desc->intf->dev,
 288					"Cannot schedule work\n");
 289		}
 290	}
 291exit:
 292	rv = usb_submit_urb(urb, GFP_ATOMIC);
 293	if (rv)
 294		dev_err(&desc->intf->dev,
 295			"%s - usb_submit_urb failed with result %d\n",
 296			__func__, rv);
 297
 298}
 299
 300static void kill_urbs(struct wdm_device *desc)
 301{
 302	/* the order here is essential */
 303	usb_kill_urb(desc->command);
 304	usb_kill_urb(desc->validity);
 305	usb_kill_urb(desc->response);
 306}
 307
 308static void free_urbs(struct wdm_device *desc)
 309{
 310	usb_free_urb(desc->validity);
 311	usb_free_urb(desc->response);
 312	usb_free_urb(desc->command);
 313}
 314
 315static void cleanup(struct wdm_device *desc)
 316{
 317	kfree(desc->sbuf);
 318	kfree(desc->inbuf);
 319	kfree(desc->orq);
 320	kfree(desc->irq);
 321	kfree(desc->ubuf);
 322	free_urbs(desc);
 323	kfree(desc);
 324}
 325
 326static ssize_t wdm_write
 327(struct file *file, const char __user *buffer, size_t count, loff_t *ppos)
 328{
 329	u8 *buf;
 330	int rv = -EMSGSIZE, r, we;
 331	struct wdm_device *desc = file->private_data;
 332	struct usb_ctrlrequest *req;
 333
 334	if (count > desc->wMaxCommand)
 335		count = desc->wMaxCommand;
 336
 337	spin_lock_irq(&desc->iuspin);
 338	we = desc->werr;
 339	desc->werr = 0;
 340	spin_unlock_irq(&desc->iuspin);
 341	if (we < 0)
 342		return -EIO;
 343
 344	buf = kmalloc(count, GFP_KERNEL);
 345	if (!buf) {
 346		rv = -ENOMEM;
 347		goto outnl;
 348	}
 349
 350	r = copy_from_user(buf, buffer, count);
 351	if (r > 0) {
 352		kfree(buf);
 353		rv = -EFAULT;
 354		goto outnl;
 355	}
 356
 357	/* concurrent writes and disconnect */
 358	r = mutex_lock_interruptible(&desc->wlock);
 359	rv = -ERESTARTSYS;
 360	if (r) {
 361		kfree(buf);
 362		goto outnl;
 363	}
 364
 365	if (test_bit(WDM_DISCONNECTING, &desc->flags)) {
 366		kfree(buf);
 367		rv = -ENODEV;
 368		goto outnp;
 369	}
 370
 371	r = usb_autopm_get_interface(desc->intf);
 372	if (r < 0) {
 373		kfree(buf);
 374		rv = usb_translate_errors(r);
 375		goto outnp;
 376	}
 377
 378	if (!(file->f_flags & O_NONBLOCK))
 379		r = wait_event_interruptible(desc->wait, !test_bit(WDM_IN_USE,
 380								&desc->flags));
 381	else
 382		if (test_bit(WDM_IN_USE, &desc->flags))
 383			r = -EAGAIN;
 384
 385	if (test_bit(WDM_RESETTING, &desc->flags))
 386		r = -EIO;
 387
 388	if (r < 0) {
 389		kfree(buf);
 390		rv = r;
 391		goto out;
 392	}
 393
 394	req = desc->orq;
 395	usb_fill_control_urb(
 396		desc->command,
 397		interface_to_usbdev(desc->intf),
 398		/* using common endpoint 0 */
 399		usb_sndctrlpipe(interface_to_usbdev(desc->intf), 0),
 400		(unsigned char *)req,
 401		buf,
 402		count,
 403		wdm_out_callback,
 404		desc
 405	);
 406
 407	req->bRequestType = (USB_DIR_OUT | USB_TYPE_CLASS |
 408			     USB_RECIP_INTERFACE);
 409	req->bRequest = USB_CDC_SEND_ENCAPSULATED_COMMAND;
 410	req->wValue = 0;
 411	req->wIndex = desc->inum;
 412	req->wLength = cpu_to_le16(count);
 413	set_bit(WDM_IN_USE, &desc->flags);
 414	desc->outbuf = buf;
 415
 416	rv = usb_submit_urb(desc->command, GFP_KERNEL);
 417	if (rv < 0) {
 418		kfree(buf);
 419		desc->outbuf = NULL;
 420		clear_bit(WDM_IN_USE, &desc->flags);
 421		dev_err(&desc->intf->dev, "Tx URB error: %d\n", rv);
 422		rv = usb_translate_errors(rv);
 
 423	} else {
 424		dev_dbg(&desc->intf->dev, "Tx URB has been submitted index=%d",
 425			req->wIndex);
 426	}
 427out:
 
 
 
 
 
 428	usb_autopm_put_interface(desc->intf);
 429outnp:
 430	mutex_unlock(&desc->wlock);
 431outnl:
 432	return rv < 0 ? rv : count;
 
 433}
 434
 435/*
 436 * clear WDM_READ flag and possibly submit the read urb if resp_count
 437 * is non-zero.
 438 *
 439 * Called with desc->iuspin locked
 440 */
 441static int clear_wdm_read_flag(struct wdm_device *desc)
 442{
 443	int rv = 0;
 444
 445	clear_bit(WDM_READ, &desc->flags);
 446
 447	/* submit read urb only if the device is waiting for it */
 448	if (!desc->resp_count || !--desc->resp_count)
 449		goto out;
 450
 451	set_bit(WDM_RESPONDING, &desc->flags);
 452	spin_unlock_irq(&desc->iuspin);
 453	rv = usb_submit_urb(desc->response, GFP_KERNEL);
 454	spin_lock_irq(&desc->iuspin);
 455	if (rv) {
 456		dev_err(&desc->intf->dev,
 457			"usb_submit_urb failed with result %d\n", rv);
 458
 459		/* make sure the next notification trigger a submit */
 460		clear_bit(WDM_RESPONDING, &desc->flags);
 461		desc->resp_count = 0;
 462	}
 463out:
 464	return rv;
 465}
 466
 467static ssize_t wdm_read
 468(struct file *file, char __user *buffer, size_t count, loff_t *ppos)
 469{
 470	int rv, cntr;
 471	int i = 0;
 472	struct wdm_device *desc = file->private_data;
 473
 474
 475	rv = mutex_lock_interruptible(&desc->rlock); /*concurrent reads */
 476	if (rv < 0)
 477		return -ERESTARTSYS;
 478
 479	cntr = ACCESS_ONCE(desc->length);
 480	if (cntr == 0) {
 481		desc->read = 0;
 482retry:
 483		if (test_bit(WDM_DISCONNECTING, &desc->flags)) {
 484			rv = -ENODEV;
 485			goto err;
 486		}
 487		if (test_bit(WDM_OVERFLOW, &desc->flags)) {
 488			clear_bit(WDM_OVERFLOW, &desc->flags);
 489			rv = -ENOBUFS;
 490			goto err;
 491		}
 492		i++;
 493		if (file->f_flags & O_NONBLOCK) {
 494			if (!test_bit(WDM_READ, &desc->flags)) {
 495				rv = cntr ? cntr : -EAGAIN;
 496				goto err;
 497			}
 498			rv = 0;
 499		} else {
 500			rv = wait_event_interruptible(desc->wait,
 501				test_bit(WDM_READ, &desc->flags));
 502		}
 503
 504		/* may have happened while we slept */
 505		if (test_bit(WDM_DISCONNECTING, &desc->flags)) {
 506			rv = -ENODEV;
 507			goto err;
 508		}
 509		if (test_bit(WDM_RESETTING, &desc->flags)) {
 510			rv = -EIO;
 511			goto err;
 512		}
 513		usb_mark_last_busy(interface_to_usbdev(desc->intf));
 514		if (rv < 0) {
 515			rv = -ERESTARTSYS;
 516			goto err;
 517		}
 518
 519		spin_lock_irq(&desc->iuspin);
 520
 521		if (desc->rerr) { /* read completed, error happened */
 
 522			desc->rerr = 0;
 523			spin_unlock_irq(&desc->iuspin);
 524			rv = -EIO;
 525			goto err;
 526		}
 527		/*
 528		 * recheck whether we've lost the race
 529		 * against the completion handler
 530		 */
 531		if (!test_bit(WDM_READ, &desc->flags)) { /* lost race */
 532			spin_unlock_irq(&desc->iuspin);
 533			goto retry;
 534		}
 535
 536		if (!desc->reslength) { /* zero length read */
 537			dev_dbg(&desc->intf->dev, "%s: zero length - clearing WDM_READ\n", __func__);
 538			rv = clear_wdm_read_flag(desc);
 
 539			spin_unlock_irq(&desc->iuspin);
 540			if (rv < 0)
 541				goto err;
 542			goto retry;
 543		}
 544		cntr = desc->length;
 545		spin_unlock_irq(&desc->iuspin);
 546	}
 547
 548	if (cntr > count)
 549		cntr = count;
 550	rv = copy_to_user(buffer, desc->ubuf, cntr);
 551	if (rv > 0) {
 552		rv = -EFAULT;
 553		goto err;
 554	}
 555
 556	spin_lock_irq(&desc->iuspin);
 557
 558	for (i = 0; i < desc->length - cntr; i++)
 559		desc->ubuf[i] = desc->ubuf[i + cntr];
 560
 561	desc->length -= cntr;
 562	/* in case we had outstanding data */
 563	if (!desc->length)
 564		clear_wdm_read_flag(desc);
 
 
 565	spin_unlock_irq(&desc->iuspin);
 566	rv = cntr;
 567
 568err:
 569	mutex_unlock(&desc->rlock);
 570	return rv;
 571}
 572
 573static int wdm_flush(struct file *file, fl_owner_t id)
 574{
 575	struct wdm_device *desc = file->private_data;
 576
 577	wait_event(desc->wait, !test_bit(WDM_IN_USE, &desc->flags));
 
 
 
 
 
 
 
 
 578
 579	/* cannot dereference desc->intf if WDM_DISCONNECTING */
 580	if (desc->werr < 0 && !test_bit(WDM_DISCONNECTING, &desc->flags))
 
 
 581		dev_err(&desc->intf->dev, "Error in flush path: %d\n",
 582			desc->werr);
 583
 584	return usb_translate_errors(desc->werr);
 585}
 586
 587static unsigned int wdm_poll(struct file *file, struct poll_table_struct *wait)
 588{
 589	struct wdm_device *desc = file->private_data;
 590	unsigned long flags;
 591	unsigned int mask = 0;
 592
 593	spin_lock_irqsave(&desc->iuspin, flags);
 594	if (test_bit(WDM_DISCONNECTING, &desc->flags)) {
 595		mask = POLLHUP | POLLERR;
 596		spin_unlock_irqrestore(&desc->iuspin, flags);
 597		goto desc_out;
 598	}
 599	if (test_bit(WDM_READ, &desc->flags))
 600		mask = POLLIN | POLLRDNORM;
 601	if (desc->rerr || desc->werr)
 602		mask |= POLLERR;
 603	if (!test_bit(WDM_IN_USE, &desc->flags))
 604		mask |= POLLOUT | POLLWRNORM;
 605	spin_unlock_irqrestore(&desc->iuspin, flags);
 606
 607	poll_wait(file, &desc->wait, wait);
 608
 609desc_out:
 610	return mask;
 611}
 612
 613static int wdm_open(struct inode *inode, struct file *file)
 614{
 615	int minor = iminor(inode);
 616	int rv = -ENODEV;
 617	struct usb_interface *intf;
 618	struct wdm_device *desc;
 619
 620	mutex_lock(&wdm_mutex);
 621	desc = wdm_find_device_by_minor(minor);
 622	if (!desc)
 623		goto out;
 624
 625	intf = desc->intf;
 626	if (test_bit(WDM_DISCONNECTING, &desc->flags))
 627		goto out;
 628	file->private_data = desc;
 629
 630	rv = usb_autopm_get_interface(desc->intf);
 631	if (rv < 0) {
 632		dev_err(&desc->intf->dev, "Error autopm - %d\n", rv);
 633		goto out;
 634	}
 635
 636	/* using write lock to protect desc->count */
 637	mutex_lock(&desc->wlock);
 638	if (!desc->count++) {
 639		desc->werr = 0;
 640		desc->rerr = 0;
 641		rv = usb_submit_urb(desc->validity, GFP_KERNEL);
 642		if (rv < 0) {
 643			desc->count--;
 644			dev_err(&desc->intf->dev,
 645				"Error submitting int urb - %d\n", rv);
 646			rv = usb_translate_errors(rv);
 647		}
 648	} else {
 649		rv = 0;
 650	}
 651	mutex_unlock(&desc->wlock);
 652	if (desc->count == 1)
 653		desc->manage_power(intf, 1);
 654	usb_autopm_put_interface(desc->intf);
 655out:
 656	mutex_unlock(&wdm_mutex);
 657	return rv;
 658}
 659
 660static int wdm_release(struct inode *inode, struct file *file)
 661{
 662	struct wdm_device *desc = file->private_data;
 663
 664	mutex_lock(&wdm_mutex);
 665
 666	/* using write lock to protect desc->count */
 667	mutex_lock(&desc->wlock);
 668	desc->count--;
 669	mutex_unlock(&desc->wlock);
 670
 671	if (!desc->count) {
 672		if (!test_bit(WDM_DISCONNECTING, &desc->flags)) {
 673			dev_dbg(&desc->intf->dev, "wdm_release: cleanup");
 674			kill_urbs(desc);
 675			spin_lock_irq(&desc->iuspin);
 676			desc->resp_count = 0;
 677			spin_unlock_irq(&desc->iuspin);
 678			desc->manage_power(desc->intf, 0);
 679		} else {
 680			/* must avoid dev_printk here as desc->intf is invalid */
 681			pr_debug(KBUILD_MODNAME " %s: device gone - cleaning up\n", __func__);
 682			cleanup(desc);
 683		}
 684	}
 685	mutex_unlock(&wdm_mutex);
 686	return 0;
 687}
 688
 689static long wdm_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
 690{
 691	struct wdm_device *desc = file->private_data;
 692	int rv = 0;
 693
 694	switch (cmd) {
 695	case IOCTL_WDM_MAX_COMMAND:
 696		if (copy_to_user((void __user *)arg, &desc->wMaxCommand, sizeof(desc->wMaxCommand)))
 697			rv = -EFAULT;
 698		break;
 699	default:
 700		rv = -ENOTTY;
 701	}
 702	return rv;
 703}
 704
 705static const struct file_operations wdm_fops = {
 706	.owner =	THIS_MODULE,
 707	.read =		wdm_read,
 708	.write =	wdm_write,
 709	.open =		wdm_open,
 710	.flush =	wdm_flush,
 711	.release =	wdm_release,
 712	.poll =		wdm_poll,
 713	.unlocked_ioctl = wdm_ioctl,
 714	.compat_ioctl = wdm_ioctl,
 715	.llseek =	noop_llseek,
 716};
 717
 718static struct usb_class_driver wdm_class = {
 719	.name =		"cdc-wdm%d",
 720	.fops =		&wdm_fops,
 721	.minor_base =	WDM_MINOR_BASE,
 722};
 723
 724/* --- error handling --- */
 725static void wdm_rxwork(struct work_struct *work)
 726{
 727	struct wdm_device *desc = container_of(work, struct wdm_device, rxwork);
 728	unsigned long flags;
 729	int rv = 0;
 730	int responding;
 731
 732	spin_lock_irqsave(&desc->iuspin, flags);
 733	if (test_bit(WDM_DISCONNECTING, &desc->flags)) {
 734		spin_unlock_irqrestore(&desc->iuspin, flags);
 735	} else {
 736		responding = test_and_set_bit(WDM_RESPONDING, &desc->flags);
 737		spin_unlock_irqrestore(&desc->iuspin, flags);
 738		if (!responding)
 739			rv = usb_submit_urb(desc->response, GFP_KERNEL);
 740		if (rv < 0 && rv != -EPERM) {
 741			spin_lock_irqsave(&desc->iuspin, flags);
 742			clear_bit(WDM_RESPONDING, &desc->flags);
 743			if (!test_bit(WDM_DISCONNECTING, &desc->flags))
 744				schedule_work(&desc->rxwork);
 745			spin_unlock_irqrestore(&desc->iuspin, flags);
 746		}
 747	}
 748}
 749
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 750/* --- hotplug --- */
 751
 752static int wdm_create(struct usb_interface *intf, struct usb_endpoint_descriptor *ep,
 753		u16 bufsize, int (*manage_power)(struct usb_interface *, int))
 754{
 755	int rv = -ENOMEM;
 756	struct wdm_device *desc;
 757
 758	desc = kzalloc(sizeof(struct wdm_device), GFP_KERNEL);
 759	if (!desc)
 760		goto out;
 761	INIT_LIST_HEAD(&desc->device_list);
 762	mutex_init(&desc->rlock);
 763	mutex_init(&desc->wlock);
 764	spin_lock_init(&desc->iuspin);
 765	init_waitqueue_head(&desc->wait);
 766	desc->wMaxCommand = bufsize;
 767	/* this will be expanded and needed in hardware endianness */
 768	desc->inum = cpu_to_le16((u16)intf->cur_altsetting->desc.bInterfaceNumber);
 769	desc->intf = intf;
 770	INIT_WORK(&desc->rxwork, wdm_rxwork);
 
 771
 772	rv = -EINVAL;
 773	if (!usb_endpoint_is_int_in(ep))
 774		goto err;
 775
 776	desc->wMaxPacketSize = usb_endpoint_maxp(ep);
 777
 778	desc->orq = kmalloc(sizeof(struct usb_ctrlrequest), GFP_KERNEL);
 779	if (!desc->orq)
 780		goto err;
 781	desc->irq = kmalloc(sizeof(struct usb_ctrlrequest), GFP_KERNEL);
 782	if (!desc->irq)
 783		goto err;
 784
 785	desc->validity = usb_alloc_urb(0, GFP_KERNEL);
 786	if (!desc->validity)
 787		goto err;
 788
 789	desc->response = usb_alloc_urb(0, GFP_KERNEL);
 790	if (!desc->response)
 791		goto err;
 792
 793	desc->command = usb_alloc_urb(0, GFP_KERNEL);
 794	if (!desc->command)
 795		goto err;
 796
 797	desc->ubuf = kmalloc(desc->wMaxCommand, GFP_KERNEL);
 798	if (!desc->ubuf)
 799		goto err;
 800
 801	desc->sbuf = kmalloc(desc->wMaxPacketSize, GFP_KERNEL);
 802	if (!desc->sbuf)
 803		goto err;
 804
 805	desc->inbuf = kmalloc(desc->wMaxCommand, GFP_KERNEL);
 806	if (!desc->inbuf)
 807		goto err;
 808
 809	usb_fill_int_urb(
 810		desc->validity,
 811		interface_to_usbdev(intf),
 812		usb_rcvintpipe(interface_to_usbdev(intf), ep->bEndpointAddress),
 813		desc->sbuf,
 814		desc->wMaxPacketSize,
 815		wdm_int_callback,
 816		desc,
 817		ep->bInterval
 818	);
 819
 820	desc->irq->bRequestType = (USB_DIR_IN | USB_TYPE_CLASS | USB_RECIP_INTERFACE);
 821	desc->irq->bRequest = USB_CDC_GET_ENCAPSULATED_RESPONSE;
 822	desc->irq->wValue = 0;
 823	desc->irq->wIndex = desc->inum;
 824	desc->irq->wLength = cpu_to_le16(desc->wMaxCommand);
 825
 826	usb_fill_control_urb(
 827		desc->response,
 828		interface_to_usbdev(intf),
 829		/* using common endpoint 0 */
 830		usb_rcvctrlpipe(interface_to_usbdev(desc->intf), 0),
 831		(unsigned char *)desc->irq,
 832		desc->inbuf,
 833		desc->wMaxCommand,
 834		wdm_in_callback,
 835		desc
 836	);
 837
 838	desc->manage_power = manage_power;
 839
 840	spin_lock(&wdm_device_list_lock);
 841	list_add(&desc->device_list, &wdm_device_list);
 842	spin_unlock(&wdm_device_list_lock);
 843
 844	rv = usb_register_dev(intf, &wdm_class);
 845	if (rv < 0)
 846		goto err;
 847	else
 848		dev_info(&intf->dev, "%s: USB WDM device\n", dev_name(intf->usb_dev));
 849out:
 850	return rv;
 851err:
 852	spin_lock(&wdm_device_list_lock);
 853	list_del(&desc->device_list);
 854	spin_unlock(&wdm_device_list_lock);
 855	cleanup(desc);
 856	return rv;
 857}
 858
 859static int wdm_manage_power(struct usb_interface *intf, int on)
 860{
 861	/* need autopm_get/put here to ensure the usbcore sees the new value */
 862	int rv = usb_autopm_get_interface(intf);
 863
 864	intf->needs_remote_wakeup = on;
 865	if (!rv)
 866		usb_autopm_put_interface(intf);
 867	return 0;
 868}
 869
 870static int wdm_probe(struct usb_interface *intf, const struct usb_device_id *id)
 871{
 872	int rv = -EINVAL;
 873	struct usb_host_interface *iface;
 874	struct usb_endpoint_descriptor *ep;
 875	struct usb_cdc_dmm_desc *dmhd;
 876	u8 *buffer = intf->altsetting->extra;
 877	int buflen = intf->altsetting->extralen;
 878	u16 maxcom = WDM_DEFAULT_BUFSIZE;
 879
 880	if (!buffer)
 881		goto err;
 882	while (buflen > 2) {
 883		if (buffer[1] != USB_DT_CS_INTERFACE) {
 884			dev_err(&intf->dev, "skipping garbage\n");
 885			goto next_desc;
 886		}
 887
 888		switch (buffer[2]) {
 889		case USB_CDC_HEADER_TYPE:
 890			break;
 891		case USB_CDC_DMM_TYPE:
 892			dmhd = (struct usb_cdc_dmm_desc *)buffer;
 893			maxcom = le16_to_cpu(dmhd->wMaxCommand);
 894			dev_dbg(&intf->dev,
 895				"Finding maximum buffer length: %d", maxcom);
 896			break;
 897		default:
 898			dev_err(&intf->dev,
 899				"Ignoring extra header, type %d, length %d\n",
 900				buffer[2], buffer[0]);
 901			break;
 902		}
 903next_desc:
 904		buflen -= buffer[0];
 905		buffer += buffer[0];
 906	}
 907
 908	iface = intf->cur_altsetting;
 909	if (iface->desc.bNumEndpoints != 1)
 910		goto err;
 911	ep = &iface->endpoint[0].desc;
 912
 913	rv = wdm_create(intf, ep, maxcom, &wdm_manage_power);
 914
 915err:
 916	return rv;
 917}
 918
 919/**
 920 * usb_cdc_wdm_register - register a WDM subdriver
 921 * @intf: usb interface the subdriver will associate with
 922 * @ep: interrupt endpoint to monitor for notifications
 923 * @bufsize: maximum message size to support for read/write
 924 *
 
 925 * Create WDM usb class character device and associate it with intf
 926 * without binding, allowing another driver to manage the interface.
 927 *
 928 * The subdriver will manage the given interrupt endpoint exclusively
 929 * and will issue control requests referring to the given intf. It
 930 * will otherwise avoid interferring, and in particular not do
 931 * usb_set_intfdata/usb_get_intfdata on intf.
 932 *
 933 * The return value is a pointer to the subdriver's struct usb_driver.
 934 * The registering driver is responsible for calling this subdriver's
 935 * disconnect, suspend, resume, pre_reset and post_reset methods from
 936 * its own.
 937 */
 938struct usb_driver *usb_cdc_wdm_register(struct usb_interface *intf,
 939					struct usb_endpoint_descriptor *ep,
 940					int bufsize,
 941					int (*manage_power)(struct usb_interface *, int))
 942{
 943	int rv = -EINVAL;
 944
 945	rv = wdm_create(intf, ep, bufsize, manage_power);
 946	if (rv < 0)
 947		goto err;
 948
 949	return &wdm_driver;
 950err:
 951	return ERR_PTR(rv);
 952}
 953EXPORT_SYMBOL(usb_cdc_wdm_register);
 954
 955static void wdm_disconnect(struct usb_interface *intf)
 956{
 957	struct wdm_device *desc;
 958	unsigned long flags;
 959
 960	usb_deregister_dev(intf, &wdm_class);
 961	desc = wdm_find_device(intf);
 962	mutex_lock(&wdm_mutex);
 963
 964	/* the spinlock makes sure no new urbs are generated in the callbacks */
 965	spin_lock_irqsave(&desc->iuspin, flags);
 966	set_bit(WDM_DISCONNECTING, &desc->flags);
 967	set_bit(WDM_READ, &desc->flags);
 968	/* to terminate pending flushes */
 969	clear_bit(WDM_IN_USE, &desc->flags);
 970	spin_unlock_irqrestore(&desc->iuspin, flags);
 971	wake_up_all(&desc->wait);
 972	mutex_lock(&desc->rlock);
 973	mutex_lock(&desc->wlock);
 974	kill_urbs(desc);
 975	cancel_work_sync(&desc->rxwork);
 
 976	mutex_unlock(&desc->wlock);
 977	mutex_unlock(&desc->rlock);
 978
 979	/* the desc->intf pointer used as list key is now invalid */
 980	spin_lock(&wdm_device_list_lock);
 981	list_del(&desc->device_list);
 982	spin_unlock(&wdm_device_list_lock);
 983
 984	if (!desc->count)
 985		cleanup(desc);
 986	else
 987		dev_dbg(&intf->dev, "%s: %d open files - postponing cleanup\n", __func__, desc->count);
 988	mutex_unlock(&wdm_mutex);
 989}
 990
 991#ifdef CONFIG_PM
 992static int wdm_suspend(struct usb_interface *intf, pm_message_t message)
 993{
 994	struct wdm_device *desc = wdm_find_device(intf);
 995	int rv = 0;
 996
 997	dev_dbg(&desc->intf->dev, "wdm%d_suspend\n", intf->minor);
 998
 999	/* if this is an autosuspend the caller does the locking */
1000	if (!PMSG_IS_AUTO(message)) {
1001		mutex_lock(&desc->rlock);
1002		mutex_lock(&desc->wlock);
1003	}
1004	spin_lock_irq(&desc->iuspin);
1005
1006	if (PMSG_IS_AUTO(message) &&
1007			(test_bit(WDM_IN_USE, &desc->flags)
1008			|| test_bit(WDM_RESPONDING, &desc->flags))) {
1009		spin_unlock_irq(&desc->iuspin);
1010		rv = -EBUSY;
1011	} else {
1012
1013		set_bit(WDM_SUSPENDING, &desc->flags);
1014		spin_unlock_irq(&desc->iuspin);
1015		/* callback submits work - order is essential */
1016		kill_urbs(desc);
1017		cancel_work_sync(&desc->rxwork);
 
1018	}
1019	if (!PMSG_IS_AUTO(message)) {
1020		mutex_unlock(&desc->wlock);
1021		mutex_unlock(&desc->rlock);
1022	}
1023
1024	return rv;
1025}
1026#endif
1027
1028static int recover_from_urb_loss(struct wdm_device *desc)
1029{
1030	int rv = 0;
1031
1032	if (desc->count) {
1033		rv = usb_submit_urb(desc->validity, GFP_NOIO);
1034		if (rv < 0)
1035			dev_err(&desc->intf->dev,
1036				"Error resume submitting int urb - %d\n", rv);
1037	}
1038	return rv;
1039}
1040
1041#ifdef CONFIG_PM
1042static int wdm_resume(struct usb_interface *intf)
1043{
1044	struct wdm_device *desc = wdm_find_device(intf);
1045	int rv;
1046
1047	dev_dbg(&desc->intf->dev, "wdm%d_resume\n", intf->minor);
1048
1049	clear_bit(WDM_SUSPENDING, &desc->flags);
1050	rv = recover_from_urb_loss(desc);
1051
1052	return rv;
1053}
1054#endif
1055
1056static int wdm_pre_reset(struct usb_interface *intf)
1057{
1058	struct wdm_device *desc = wdm_find_device(intf);
1059
1060	/*
1061	 * we notify everybody using poll of
1062	 * an exceptional situation
1063	 * must be done before recovery lest a spontaneous
1064	 * message from the device is lost
1065	 */
1066	spin_lock_irq(&desc->iuspin);
1067	set_bit(WDM_RESETTING, &desc->flags);	/* inform read/write */
1068	set_bit(WDM_READ, &desc->flags);	/* unblock read */
1069	clear_bit(WDM_IN_USE, &desc->flags);	/* unblock write */
1070	desc->rerr = -EINTR;
1071	spin_unlock_irq(&desc->iuspin);
1072	wake_up_all(&desc->wait);
1073	mutex_lock(&desc->rlock);
1074	mutex_lock(&desc->wlock);
1075	kill_urbs(desc);
1076	cancel_work_sync(&desc->rxwork);
 
1077	return 0;
1078}
1079
1080static int wdm_post_reset(struct usb_interface *intf)
1081{
1082	struct wdm_device *desc = wdm_find_device(intf);
1083	int rv;
1084
1085	clear_bit(WDM_OVERFLOW, &desc->flags);
1086	clear_bit(WDM_RESETTING, &desc->flags);
1087	rv = recover_from_urb_loss(desc);
1088	mutex_unlock(&desc->wlock);
1089	mutex_unlock(&desc->rlock);
1090	return 0;
1091}
1092
1093static struct usb_driver wdm_driver = {
1094	.name =		"cdc_wdm",
1095	.probe =	wdm_probe,
1096	.disconnect =	wdm_disconnect,
1097#ifdef CONFIG_PM
1098	.suspend =	wdm_suspend,
1099	.resume =	wdm_resume,
1100	.reset_resume =	wdm_resume,
1101#endif
1102	.pre_reset =	wdm_pre_reset,
1103	.post_reset =	wdm_post_reset,
1104	.id_table =	wdm_ids,
1105	.supports_autosuspend = 1,
1106	.disable_hub_initiated_lpm = 1,
1107};
1108
1109module_usb_driver(wdm_driver);
1110
1111MODULE_AUTHOR(DRIVER_AUTHOR);
1112MODULE_DESCRIPTION(DRIVER_DESC);
1113MODULE_LICENSE("GPL");