Linux Audio

Check our new training course

Loading...
v6.13.7
  1// SPDX-License-Identifier: GPL-2.0-or-later
  2/*
  3 *
  4 *  Bluetooth support for Broadcom devices
  5 *
  6 *  Copyright (C) 2015  Intel Corporation
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
  7 */
  8
  9#include <linux/efi.h>
 10#include <linux/module.h>
 11#include <linux/firmware.h>
 12#include <linux/dmi.h>
 13#include <linux/of.h>
 14#include <linux/string.h>
 15#include <linux/unaligned.h>
 16
 17#include <net/bluetooth/bluetooth.h>
 18#include <net/bluetooth/hci_core.h>
 19
 20#include "btbcm.h"
 21
 22#define VERSION "0.1"
 23
 24#define BDADDR_BCM20702A0 (&(bdaddr_t) {{0x00, 0xa0, 0x02, 0x70, 0x20, 0x00}})
 25#define BDADDR_BCM20702A1 (&(bdaddr_t) {{0x00, 0x00, 0xa0, 0x02, 0x70, 0x20}})
 26#define BDADDR_BCM2076B1 (&(bdaddr_t) {{0x79, 0x56, 0x00, 0xa0, 0x76, 0x20}})
 27#define BDADDR_BCM43430A0 (&(bdaddr_t) {{0xac, 0x1f, 0x12, 0xa0, 0x43, 0x43}})
 28#define BDADDR_BCM43430A1 (&(bdaddr_t) {{0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa}})
 29#define BDADDR_BCM4324B3 (&(bdaddr_t) {{0x00, 0x00, 0x00, 0xb3, 0x24, 0x43}})
 30#define BDADDR_BCM4330B1 (&(bdaddr_t) {{0x00, 0x00, 0x00, 0xb1, 0x30, 0x43}})
 31#define BDADDR_BCM4334B0 (&(bdaddr_t) {{0x00, 0x00, 0x00, 0xb0, 0x34, 0x43}})
 32#define BDADDR_BCM4345C5 (&(bdaddr_t) {{0xac, 0x1f, 0x00, 0xc5, 0x45, 0x43}})
 33#define BDADDR_BCM43341B (&(bdaddr_t) {{0xac, 0x1f, 0x00, 0x1b, 0x34, 0x43}})
 34
 35#define BCM_FW_NAME_LEN			64
 36#define BCM_FW_NAME_COUNT_MAX		4
 37/* For kmalloc-ing the fw-name array instead of putting it on the stack */
 38typedef char bcm_fw_name[BCM_FW_NAME_LEN];
 39
 40#ifdef CONFIG_EFI
 41static int btbcm_set_bdaddr_from_efi(struct hci_dev *hdev)
 42{
 43	efi_guid_t guid = EFI_GUID(0x74b00bd9, 0x805a, 0x4d61, 0xb5, 0x1f,
 44				   0x43, 0x26, 0x81, 0x23, 0xd1, 0x13);
 45	bdaddr_t efi_bdaddr, bdaddr;
 46	efi_status_t status;
 47	unsigned long len;
 48	int ret;
 49
 50	if (!efi_rt_services_supported(EFI_RT_SUPPORTED_GET_VARIABLE))
 51		return -EOPNOTSUPP;
 52
 53	len = sizeof(efi_bdaddr);
 54	status = efi.get_variable(L"BDADDR", &guid, NULL, &len, &efi_bdaddr);
 55	if (status != EFI_SUCCESS)
 56		return -ENXIO;
 57
 58	if (len != sizeof(efi_bdaddr))
 59		return -EIO;
 60
 61	baswap(&bdaddr, &efi_bdaddr);
 62
 63	ret = btbcm_set_bdaddr(hdev, &bdaddr);
 64	if (ret)
 65		return ret;
 66
 67	bt_dev_info(hdev, "BCM: Using EFI device address (%pMR)", &bdaddr);
 68	return 0;
 69}
 70#else
 71static int btbcm_set_bdaddr_from_efi(struct hci_dev *hdev)
 72{
 73	return -EOPNOTSUPP;
 74}
 75#endif
 76
 77int btbcm_check_bdaddr(struct hci_dev *hdev)
 78{
 79	struct hci_rp_read_bd_addr *bda;
 80	struct sk_buff *skb;
 81
 82	skb = __hci_cmd_sync(hdev, HCI_OP_READ_BD_ADDR, 0, NULL,
 83			     HCI_INIT_TIMEOUT);
 84	if (IS_ERR(skb)) {
 85		int err = PTR_ERR(skb);
 86
 87		bt_dev_err(hdev, "BCM: Reading device address failed (%d)", err);
 88		return err;
 89	}
 90
 91	if (skb->len != sizeof(*bda)) {
 92		bt_dev_err(hdev, "BCM: Device address length mismatch");
 93		kfree_skb(skb);
 94		return -EIO;
 95	}
 96
 97	bda = (struct hci_rp_read_bd_addr *)skb->data;
 98
 99	/* Check if the address indicates a controller with either an
100	 * invalid or default address. In both cases the device needs
101	 * to be marked as not having a valid address.
102	 *
103	 * The address 00:20:70:02:A0:00 indicates a BCM20702A0 controller
104	 * with no configured address.
105	 *
106	 * The address 20:70:02:A0:00:00 indicates a BCM20702A1 controller
107	 * with no configured address.
108	 *
109	 * The address 20:76:A0:00:56:79 indicates a BCM2076B1 controller
110	 * with no configured address.
111	 *
112	 * The address 43:24:B3:00:00:00 indicates a BCM4324B3 controller
113	 * with waiting for configuration state.
114	 *
115	 * The address 43:30:B1:00:00:00 indicates a BCM4330B1 controller
116	 * with waiting for configuration state.
117	 *
118	 * The address 43:43:A0:12:1F:AC indicates a BCM43430A0 controller
119	 * with no configured address.
120	 *
121	 * The address AA:AA:AA:AA:AA:AA indicates a BCM43430A1 controller
122	 * with no configured address.
123	 */
124	if (!bacmp(&bda->bdaddr, BDADDR_BCM20702A0) ||
125	    !bacmp(&bda->bdaddr, BDADDR_BCM20702A1) ||
126	    !bacmp(&bda->bdaddr, BDADDR_BCM2076B1) ||
127	    !bacmp(&bda->bdaddr, BDADDR_BCM4324B3) ||
128	    !bacmp(&bda->bdaddr, BDADDR_BCM4330B1) ||
129	    !bacmp(&bda->bdaddr, BDADDR_BCM4334B0) ||
130	    !bacmp(&bda->bdaddr, BDADDR_BCM4345C5) ||
131	    !bacmp(&bda->bdaddr, BDADDR_BCM43430A0) ||
132	    !bacmp(&bda->bdaddr, BDADDR_BCM43430A1) ||
133	    !bacmp(&bda->bdaddr, BDADDR_BCM43341B)) {
134		/* Try falling back to BDADDR EFI variable */
135		if (btbcm_set_bdaddr_from_efi(hdev) != 0) {
136			bt_dev_info(hdev, "BCM: Using default device address (%pMR)",
137				    &bda->bdaddr);
138			set_bit(HCI_QUIRK_INVALID_BDADDR, &hdev->quirks);
139		}
140	}
141
142	kfree_skb(skb);
143
144	return 0;
145}
146EXPORT_SYMBOL_GPL(btbcm_check_bdaddr);
147
148int btbcm_set_bdaddr(struct hci_dev *hdev, const bdaddr_t *bdaddr)
149{
150	struct sk_buff *skb;
151	int err;
152
153	skb = __hci_cmd_sync(hdev, 0xfc01, 6, bdaddr, HCI_INIT_TIMEOUT);
154	if (IS_ERR(skb)) {
155		err = PTR_ERR(skb);
156		bt_dev_err(hdev, "BCM: Change address command failed (%d)", err);
157		return err;
158	}
159	kfree_skb(skb);
160
161	return 0;
162}
163EXPORT_SYMBOL_GPL(btbcm_set_bdaddr);
164
165int btbcm_read_pcm_int_params(struct hci_dev *hdev,
166			      struct bcm_set_pcm_int_params *params)
167{
168	struct sk_buff *skb;
169	int err = 0;
170
171	skb = __hci_cmd_sync(hdev, 0xfc1d, 0, NULL, HCI_INIT_TIMEOUT);
172	if (IS_ERR(skb)) {
173		err = PTR_ERR(skb);
174		bt_dev_err(hdev, "BCM: Read PCM int params failed (%d)", err);
175		return err;
176	}
177
178	if (skb->len != 6 || skb->data[0]) {
179		bt_dev_err(hdev, "BCM: Read PCM int params length mismatch");
180		kfree_skb(skb);
181		return -EIO;
182	}
183
184	if (params)
185		memcpy(params, skb->data + 1, 5);
186
187	kfree_skb(skb);
188
189	return 0;
190}
191EXPORT_SYMBOL_GPL(btbcm_read_pcm_int_params);
192
193int btbcm_write_pcm_int_params(struct hci_dev *hdev,
194			       const struct bcm_set_pcm_int_params *params)
195{
196	struct sk_buff *skb;
197	int err;
198
199	skb = __hci_cmd_sync(hdev, 0xfc1c, 5, params, HCI_INIT_TIMEOUT);
200	if (IS_ERR(skb)) {
201		err = PTR_ERR(skb);
202		bt_dev_err(hdev, "BCM: Write PCM int params failed (%d)", err);
203		return err;
204	}
205	kfree_skb(skb);
206
207	return 0;
208}
209EXPORT_SYMBOL_GPL(btbcm_write_pcm_int_params);
210
211int btbcm_patchram(struct hci_dev *hdev, const struct firmware *fw)
212{
213	const struct hci_command_hdr *cmd;
214	const u8 *fw_ptr;
215	size_t fw_size;
216	struct sk_buff *skb;
217	u16 opcode;
218	int err = 0;
219
220	/* Start Download */
221	skb = __hci_cmd_sync(hdev, 0xfc2e, 0, NULL, HCI_INIT_TIMEOUT);
222	if (IS_ERR(skb)) {
223		err = PTR_ERR(skb);
224		bt_dev_err(hdev, "BCM: Download Minidrv command failed (%d)",
225			   err);
226		goto done;
227	}
228	kfree_skb(skb);
229
230	/* 50 msec delay after Download Minidrv completes */
231	msleep(50);
232
233	fw_ptr = fw->data;
234	fw_size = fw->size;
235
236	while (fw_size >= sizeof(*cmd)) {
237		const u8 *cmd_param;
238
239		cmd = (struct hci_command_hdr *)fw_ptr;
240		fw_ptr += sizeof(*cmd);
241		fw_size -= sizeof(*cmd);
242
243		if (fw_size < cmd->plen) {
244			bt_dev_err(hdev, "BCM: Patch is corrupted");
245			err = -EINVAL;
246			goto done;
247		}
248
249		cmd_param = fw_ptr;
250		fw_ptr += cmd->plen;
251		fw_size -= cmd->plen;
252
253		opcode = le16_to_cpu(cmd->opcode);
254
255		skb = __hci_cmd_sync(hdev, opcode, cmd->plen, cmd_param,
256				     HCI_INIT_TIMEOUT);
257		if (IS_ERR(skb)) {
258			err = PTR_ERR(skb);
259			bt_dev_err(hdev, "BCM: Patch command %04x failed (%d)",
260				   opcode, err);
261			goto done;
262		}
263		kfree_skb(skb);
264	}
265
266	/* 250 msec delay after Launch Ram completes */
267	msleep(250);
268
269done:
270	return err;
271}
272EXPORT_SYMBOL(btbcm_patchram);
273
274static int btbcm_reset(struct hci_dev *hdev)
275{
276	struct sk_buff *skb;
277
278	skb = __hci_cmd_sync(hdev, HCI_OP_RESET, 0, NULL, HCI_INIT_TIMEOUT);
279	if (IS_ERR(skb)) {
280		int err = PTR_ERR(skb);
281
282		bt_dev_err(hdev, "BCM: Reset failed (%d)", err);
283		return err;
284	}
285	kfree_skb(skb);
286
287	/* 100 msec delay for module to complete reset process */
288	msleep(100);
289
290	return 0;
291}
292
293static struct sk_buff *btbcm_read_local_name(struct hci_dev *hdev)
294{
295	struct sk_buff *skb;
296
297	skb = __hci_cmd_sync(hdev, HCI_OP_READ_LOCAL_NAME, 0, NULL,
298			     HCI_INIT_TIMEOUT);
299	if (IS_ERR(skb)) {
300		bt_dev_err(hdev, "BCM: Reading local name failed (%ld)",
301			   PTR_ERR(skb));
302		return skb;
303	}
304
305	if (skb->len != sizeof(struct hci_rp_read_local_name)) {
306		bt_dev_err(hdev, "BCM: Local name length mismatch");
307		kfree_skb(skb);
308		return ERR_PTR(-EIO);
309	}
310
311	return skb;
312}
313
314static struct sk_buff *btbcm_read_local_version(struct hci_dev *hdev)
315{
316	struct sk_buff *skb;
317
318	skb = __hci_cmd_sync(hdev, HCI_OP_READ_LOCAL_VERSION, 0, NULL,
319			     HCI_INIT_TIMEOUT);
320	if (IS_ERR(skb)) {
321		bt_dev_err(hdev, "BCM: Reading local version info failed (%ld)",
322			   PTR_ERR(skb));
323		return skb;
324	}
325
326	if (skb->len != sizeof(struct hci_rp_read_local_version)) {
327		bt_dev_err(hdev, "BCM: Local version length mismatch");
328		kfree_skb(skb);
329		return ERR_PTR(-EIO);
330	}
331
332	return skb;
333}
334
335static struct sk_buff *btbcm_read_verbose_config(struct hci_dev *hdev)
336{
337	struct sk_buff *skb;
338
339	skb = __hci_cmd_sync(hdev, 0xfc79, 0, NULL, HCI_INIT_TIMEOUT);
340	if (IS_ERR(skb)) {
341		bt_dev_err(hdev, "BCM: Read verbose config info failed (%ld)",
342			   PTR_ERR(skb));
343		return skb;
344	}
345
346	if (skb->len != 7) {
347		bt_dev_err(hdev, "BCM: Verbose config length mismatch");
348		kfree_skb(skb);
349		return ERR_PTR(-EIO);
350	}
351
352	return skb;
353}
354
355static struct sk_buff *btbcm_read_controller_features(struct hci_dev *hdev)
356{
357	struct sk_buff *skb;
358
359	skb = __hci_cmd_sync(hdev, 0xfc6e, 0, NULL, HCI_INIT_TIMEOUT);
360	if (IS_ERR(skb)) {
361		bt_dev_err(hdev, "BCM: Read controller features failed (%ld)",
362			   PTR_ERR(skb));
363		return skb;
364	}
365
366	if (skb->len != 9) {
367		bt_dev_err(hdev, "BCM: Controller features length mismatch");
368		kfree_skb(skb);
369		return ERR_PTR(-EIO);
370	}
371
372	return skb;
373}
374
375static struct sk_buff *btbcm_read_usb_product(struct hci_dev *hdev)
376{
377	struct sk_buff *skb;
378
379	skb = __hci_cmd_sync(hdev, 0xfc5a, 0, NULL, HCI_INIT_TIMEOUT);
380	if (IS_ERR(skb)) {
381		bt_dev_err(hdev, "BCM: Read USB product info failed (%ld)",
382			   PTR_ERR(skb));
383		return skb;
384	}
385
386	if (skb->len != 5) {
387		bt_dev_err(hdev, "BCM: USB product length mismatch");
388		kfree_skb(skb);
389		return ERR_PTR(-EIO);
390	}
391
392	return skb;
393}
394
395static const struct dmi_system_id disable_broken_read_transmit_power[] = {
396	{
397		 .matches = {
398			DMI_MATCH(DMI_BOARD_VENDOR, "Apple Inc."),
399			DMI_MATCH(DMI_PRODUCT_NAME, "MacBookPro16,1"),
400		},
401	},
402	{
403		 .matches = {
404			DMI_MATCH(DMI_BOARD_VENDOR, "Apple Inc."),
405			DMI_MATCH(DMI_PRODUCT_NAME, "MacBookPro16,2"),
406		},
407	},
408	{
409		 .matches = {
410			DMI_MATCH(DMI_BOARD_VENDOR, "Apple Inc."),
411			DMI_MATCH(DMI_PRODUCT_NAME, "MacBookPro16,4"),
412		},
413	},
414	{
415		 .matches = {
416			DMI_MATCH(DMI_BOARD_VENDOR, "Apple Inc."),
417			DMI_MATCH(DMI_PRODUCT_NAME, "MacBookAir8,1"),
418		},
419	},
420	{
421		 .matches = {
422			DMI_MATCH(DMI_BOARD_VENDOR, "Apple Inc."),
423			DMI_MATCH(DMI_PRODUCT_NAME, "MacBookAir8,2"),
424		},
425	},
426	{
427		 .matches = {
428			DMI_MATCH(DMI_BOARD_VENDOR, "Apple Inc."),
429			DMI_MATCH(DMI_PRODUCT_NAME, "iMac20,1"),
430		},
431	},
432	{
433		 .matches = {
434			DMI_MATCH(DMI_BOARD_VENDOR, "Apple Inc."),
435			DMI_MATCH(DMI_PRODUCT_NAME, "iMac20,2"),
436		},
437	},
438	{ }
439};
440
441static int btbcm_read_info(struct hci_dev *hdev)
442{
443	struct sk_buff *skb;
444
445	/* Read Verbose Config Version Info */
446	skb = btbcm_read_verbose_config(hdev);
447	if (IS_ERR(skb))
448		return PTR_ERR(skb);
449
450	bt_dev_info(hdev, "BCM: chip id %u", skb->data[1]);
451	kfree_skb(skb);
452
453	return 0;
454}
455
456static int btbcm_print_controller_features(struct hci_dev *hdev)
457{
458	struct sk_buff *skb;
459
460	/* Read Controller Features */
461	skb = btbcm_read_controller_features(hdev);
462	if (IS_ERR(skb))
463		return PTR_ERR(skb);
464
465	bt_dev_info(hdev, "BCM: features 0x%2.2x", skb->data[1]);
466	kfree_skb(skb);
467
468	/* Read DMI and disable broken Read LE Min/Max Tx Power */
469	if (dmi_first_match(disable_broken_read_transmit_power))
470		set_bit(HCI_QUIRK_BROKEN_READ_TRANSMIT_POWER, &hdev->quirks);
471
472	return 0;
473}
474
475static int btbcm_print_local_name(struct hci_dev *hdev)
476{
477	struct sk_buff *skb;
478
479	/* Read Local Name */
480	skb = btbcm_read_local_name(hdev);
481	if (IS_ERR(skb))
482		return PTR_ERR(skb);
483
484	bt_dev_info(hdev, "%s", (char *)(skb->data + 1));
485	kfree_skb(skb);
486
487	return 0;
488}
489
490struct bcm_subver_table {
491	u16 subver;
492	const char *name;
493};
494
495static const struct bcm_subver_table bcm_uart_subver_table[] = {
496	{ 0x1111, "BCM4362A2"	},	/* 000.017.017 */
497	{ 0x4103, "BCM4330B1"	},	/* 002.001.003 */
498	{ 0x410d, "BCM4334B0"	},	/* 002.001.013 */
499	{ 0x410e, "BCM43341B0"	},	/* 002.001.014 */
500	{ 0x4204, "BCM2076B1"	},	/* 002.002.004 */
501	{ 0x4406, "BCM4324B3"	},	/* 002.004.006 */
502	{ 0x4606, "BCM4324B5"	},	/* 002.006.006 */
503	{ 0x6109, "BCM4335C0"	},	/* 003.001.009 */
504	{ 0x610c, "BCM4354"	},	/* 003.001.012 */
505	{ 0x2122, "BCM4343A0"	},	/* 001.001.034 */
506	{ 0x2209, "BCM43430A1"  },	/* 001.002.009 */
507	{ 0x6119, "BCM4345C0"	},	/* 003.001.025 */
508	{ 0x6606, "BCM4345C5"	},	/* 003.006.006 */
509	{ 0x230f, "BCM4356A2"	},	/* 001.003.015 */
510	{ 0x220e, "BCM20702A1"  },	/* 001.002.014 */
511	{ 0x420d, "BCM4349B1"	},	/* 002.002.013 */
512	{ 0x420e, "BCM4349B1"	},	/* 002.002.014 */
513	{ 0x4217, "BCM4329B1"   },	/* 002.002.023 */
514	{ 0x6106, "BCM4359C0"	},	/* 003.001.006 */
515	{ 0x4106, "BCM4335A0"	},	/* 002.001.006 */
516	{ 0x410c, "BCM43430B0"	},	/* 002.001.012 */
517	{ 0x2119, "BCM4373A0"	},	/* 001.001.025 */
518	{ }
519};
520
521static const struct bcm_subver_table bcm_usb_subver_table[] = {
522	{ 0x2105, "BCM20703A1"	},	/* 001.001.005 */
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
523	{ 0x210b, "BCM43142A0"	},	/* 001.001.011 */
524	{ 0x2112, "BCM4314A0"	},	/* 001.001.018 */
525	{ 0x2118, "BCM20702A0"	},	/* 001.001.024 */
526	{ 0x2126, "BCM4335A0"	},	/* 001.001.038 */
527	{ 0x220e, "BCM20702A1"	},	/* 001.002.014 */
528	{ 0x230f, "BCM4356A2"	},	/* 001.003.015 */
529	{ 0x4106, "BCM4335B0"	},	/* 002.001.006 */
530	{ 0x410e, "BCM20702B0"	},	/* 002.001.014 */
531	{ 0x6109, "BCM4335C0"	},	/* 003.001.009 */
532	{ 0x610c, "BCM4354"	},	/* 003.001.012 */
533	{ 0x6607, "BCM4350C5"	},	/* 003.006.007 */
534	{ }
535};
536
537/*
538 * This currently only looks up the device tree board appendix,
539 * but can be expanded to other mechanisms.
540 */
541static const char *btbcm_get_board_name(struct device *dev)
542{
543#ifdef CONFIG_OF
544	struct device_node *root __free(device_node) = of_find_node_by_path("/");
545	char *board_type;
546	const char *tmp;
547
548	if (!root)
549		return NULL;
550
551	if (of_property_read_string_index(root, "compatible", 0, &tmp))
552		return NULL;
553
554	/* get rid of any '/' in the compatible string */
555	board_type = devm_kstrdup(dev, tmp, GFP_KERNEL);
556	if (!board_type)
557		return NULL;
558
559	strreplace(board_type, '/', '-');
560
561	return board_type;
562#else
563	return NULL;
564#endif
565}
566
567int btbcm_initialize(struct hci_dev *hdev, bool *fw_load_done, bool use_autobaud_mode)
568{
 
 
569	u16 subver, rev, pid, vid;
 
570	struct sk_buff *skb;
571	struct hci_rp_read_local_version *ver;
572	const struct bcm_subver_table *bcm_subver_table;
573	const char *hw_name = NULL;
574	const char *board_name;
575	char postfix[16] = "";
576	int fw_name_count = 0;
577	bcm_fw_name *fw_name;
578	const struct firmware *fw;
579	int i, err;
580
581	board_name = btbcm_get_board_name(&hdev->dev);
582
583	/* Reset */
584	err = btbcm_reset(hdev);
585	if (err)
586		return err;
587
588	/* Read Local Version Info */
589	skb = btbcm_read_local_version(hdev);
590	if (IS_ERR(skb))
591		return PTR_ERR(skb);
592
593	ver = (struct hci_rp_read_local_version *)skb->data;
594	rev = le16_to_cpu(ver->hci_rev);
595	subver = le16_to_cpu(ver->lmp_subver);
596	kfree_skb(skb);
597
598	/* Read controller information */
599	if (!(*fw_load_done)) {
600		err = btbcm_read_info(hdev);
601		if (err)
602			return err;
603	}
604
605	if (!use_autobaud_mode) {
606		err = btbcm_print_controller_features(hdev);
607		if (err)
608			return err;
609
610		err = btbcm_print_local_name(hdev);
611		if (err)
612			return err;
613	}
614
615	bcm_subver_table = (hdev->bus == HCI_USB) ? bcm_usb_subver_table :
616						    bcm_uart_subver_table;
617
618	for (i = 0; bcm_subver_table[i].name; i++) {
619		if (subver == bcm_subver_table[i].subver) {
620			hw_name = bcm_subver_table[i].name;
621			break;
 
 
 
 
622		}
623	}
624
625	bt_dev_info(hdev, "%s (%3.3u.%3.3u.%3.3u) build %4.4u",
626		    hw_name ? hw_name : "BCM", (subver & 0xe000) >> 13,
627		    (subver & 0x1f00) >> 8, (subver & 0x00ff), rev & 0x0fff);
628
629	if (*fw_load_done)
630		return 0;
631
632	if (hdev->bus == HCI_USB) {
633		/* Read USB Product Info */
634		skb = btbcm_read_usb_product(hdev);
635		if (IS_ERR(skb))
636			return PTR_ERR(skb);
637
638		vid = get_unaligned_le16(skb->data + 1);
639		pid = get_unaligned_le16(skb->data + 3);
640		kfree_skb(skb);
641
642		snprintf(postfix, sizeof(postfix), "-%4.4x-%4.4x", vid, pid);
643	}
644
645	fw_name = kmalloc(BCM_FW_NAME_COUNT_MAX * BCM_FW_NAME_LEN, GFP_KERNEL);
646	if (!fw_name)
647		return -ENOMEM;
648
649	if (hw_name) {
650		if (board_name) {
651			snprintf(fw_name[fw_name_count], BCM_FW_NAME_LEN,
652				 "brcm/%s%s.%s.hcd", hw_name, postfix, board_name);
653			fw_name_count++;
654		}
655		snprintf(fw_name[fw_name_count], BCM_FW_NAME_LEN,
656			 "brcm/%s%s.hcd", hw_name, postfix);
657		fw_name_count++;
658	}
659
660	if (board_name) {
661		snprintf(fw_name[fw_name_count], BCM_FW_NAME_LEN,
662			 "brcm/BCM%s.%s.hcd", postfix, board_name);
663		fw_name_count++;
664	}
665	snprintf(fw_name[fw_name_count], BCM_FW_NAME_LEN,
666		 "brcm/BCM%s.hcd", postfix);
667	fw_name_count++;
668
669	for (i = 0; i < fw_name_count; i++) {
670		err = firmware_request_nowarn(&fw, fw_name[i], &hdev->dev);
671		if (err == 0) {
672			bt_dev_info(hdev, "%s '%s' Patch",
673				    hw_name ? hw_name : "BCM", fw_name[i]);
674			*fw_load_done = true;
675			break;
676		}
 
 
 
 
 
 
677	}
678
679	if (*fw_load_done) {
680		err = btbcm_patchram(hdev, fw);
681		if (err)
682			bt_dev_info(hdev, "BCM: Patch failed (%d)", err);
683
684		release_firmware(fw);
685	} else {
686		bt_dev_err(hdev, "BCM: firmware Patch file not found, tried:");
687		for (i = 0; i < fw_name_count; i++)
688			bt_dev_err(hdev, "BCM: '%s'", fw_name[i]);
689	}
690
691	kfree(fw_name);
692	return 0;
693}
694EXPORT_SYMBOL_GPL(btbcm_initialize);
695
696int btbcm_finalize(struct hci_dev *hdev, bool *fw_load_done, bool use_autobaud_mode)
697{
698	int err;
699
700	/* Re-initialize if necessary */
701	if (*fw_load_done) {
702		err = btbcm_initialize(hdev, fw_load_done, use_autobaud_mode);
703		if (err)
704			return err;
705	}
706
707	btbcm_check_bdaddr(hdev);
 
 
 
708
709	set_bit(HCI_QUIRK_STRICT_DUPLICATE_FILTER, &hdev->quirks);
 
 
 
710
711	return 0;
712}
713EXPORT_SYMBOL_GPL(btbcm_finalize);
714
715int btbcm_setup_patchram(struct hci_dev *hdev)
716{
717	bool fw_load_done = false;
718	bool use_autobaud_mode = false;
719	int err;
720
721	/* Initialize */
722	err = btbcm_initialize(hdev, &fw_load_done, use_autobaud_mode);
723	if (err)
724		return err;
 
725
726	/* Re-initialize after loading Patch */
727	return btbcm_finalize(hdev, &fw_load_done, use_autobaud_mode);
 
728}
729EXPORT_SYMBOL_GPL(btbcm_setup_patchram);
730
731int btbcm_setup_apple(struct hci_dev *hdev)
732{
733	struct sk_buff *skb;
734	int err;
735
736	/* Reset */
737	err = btbcm_reset(hdev);
738	if (err)
739		return err;
740
741	/* Read Verbose Config Version Info */
742	skb = btbcm_read_verbose_config(hdev);
743	if (!IS_ERR(skb)) {
744		bt_dev_info(hdev, "BCM: chip id %u build %4.4u",
745			    skb->data[1], get_unaligned_le16(skb->data + 5));
746		kfree_skb(skb);
747	}
748
749	/* Read USB Product Info */
750	skb = btbcm_read_usb_product(hdev);
751	if (!IS_ERR(skb)) {
752		bt_dev_info(hdev, "BCM: product %4.4x:%4.4x",
753			    get_unaligned_le16(skb->data + 1),
754			    get_unaligned_le16(skb->data + 3));
755		kfree_skb(skb);
756	}
757
758	/* Read Controller Features */
759	skb = btbcm_read_controller_features(hdev);
760	if (!IS_ERR(skb)) {
761		bt_dev_info(hdev, "BCM: features 0x%2.2x", skb->data[1]);
762		kfree_skb(skb);
763	}
764
765	/* Read Local Name */
766	skb = btbcm_read_local_name(hdev);
767	if (!IS_ERR(skb)) {
768		bt_dev_info(hdev, "%s", (char *)(skb->data + 1));
769		kfree_skb(skb);
770	}
771
772	set_bit(HCI_QUIRK_STRICT_DUPLICATE_FILTER, &hdev->quirks);
773
774	return 0;
775}
776EXPORT_SYMBOL_GPL(btbcm_setup_apple);
777
778MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
779MODULE_DESCRIPTION("Bluetooth support for Broadcom devices ver " VERSION);
780MODULE_VERSION(VERSION);
781MODULE_LICENSE("GPL");
v4.17
 
  1/*
  2 *
  3 *  Bluetooth support for Broadcom devices
  4 *
  5 *  Copyright (C) 2015  Intel Corporation
  6 *
  7 *
  8 *  This program is free software; you can redistribute it and/or modify
  9 *  it under the terms of the GNU General Public License as published by
 10 *  the Free Software Foundation; either version 2 of the License, or
 11 *  (at your option) any later version.
 12 *
 13 *  This program is distributed in the hope that it will be useful,
 14 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 15 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 16 *  GNU General Public License for more details.
 17 *
 18 *  You should have received a copy of the GNU General Public License
 19 *  along with this program; if not, write to the Free Software
 20 *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 21 *
 22 */
 23
 
 24#include <linux/module.h>
 25#include <linux/firmware.h>
 26#include <asm/unaligned.h>
 
 
 
 27
 28#include <net/bluetooth/bluetooth.h>
 29#include <net/bluetooth/hci_core.h>
 30
 31#include "btbcm.h"
 32
 33#define VERSION "0.1"
 34
 35#define BDADDR_BCM20702A0 (&(bdaddr_t) {{0x00, 0xa0, 0x02, 0x70, 0x20, 0x00}})
 
 
 
 
 36#define BDADDR_BCM4324B3 (&(bdaddr_t) {{0x00, 0x00, 0x00, 0xb3, 0x24, 0x43}})
 37#define BDADDR_BCM4330B1 (&(bdaddr_t) {{0x00, 0x00, 0x00, 0xb1, 0x30, 0x43}})
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 38
 39int btbcm_check_bdaddr(struct hci_dev *hdev)
 40{
 41	struct hci_rp_read_bd_addr *bda;
 42	struct sk_buff *skb;
 43
 44	skb = __hci_cmd_sync(hdev, HCI_OP_READ_BD_ADDR, 0, NULL,
 45			     HCI_INIT_TIMEOUT);
 46	if (IS_ERR(skb)) {
 47		int err = PTR_ERR(skb);
 
 48		bt_dev_err(hdev, "BCM: Reading device address failed (%d)", err);
 49		return err;
 50	}
 51
 52	if (skb->len != sizeof(*bda)) {
 53		bt_dev_err(hdev, "BCM: Device address length mismatch");
 54		kfree_skb(skb);
 55		return -EIO;
 56	}
 57
 58	bda = (struct hci_rp_read_bd_addr *)skb->data;
 59
 60	/* Check if the address indicates a controller with either an
 61	 * invalid or default address. In both cases the device needs
 62	 * to be marked as not having a valid address.
 63	 *
 64	 * The address 00:20:70:02:A0:00 indicates a BCM20702A0 controller
 65	 * with no configured address.
 66	 *
 
 
 
 
 
 
 67	 * The address 43:24:B3:00:00:00 indicates a BCM4324B3 controller
 68	 * with waiting for configuration state.
 69	 *
 70	 * The address 43:30:B1:00:00:00 indicates a BCM4330B1 controller
 71	 * with waiting for configuration state.
 
 
 
 
 
 
 72	 */
 73	if (!bacmp(&bda->bdaddr, BDADDR_BCM20702A0) ||
 
 
 74	    !bacmp(&bda->bdaddr, BDADDR_BCM4324B3) ||
 75	    !bacmp(&bda->bdaddr, BDADDR_BCM4330B1)) {
 76		bt_dev_info(hdev, "BCM: Using default device address (%pMR)",
 77			    &bda->bdaddr);
 78		set_bit(HCI_QUIRK_INVALID_BDADDR, &hdev->quirks);
 
 
 
 
 
 
 
 
 79	}
 80
 81	kfree_skb(skb);
 82
 83	return 0;
 84}
 85EXPORT_SYMBOL_GPL(btbcm_check_bdaddr);
 86
 87int btbcm_set_bdaddr(struct hci_dev *hdev, const bdaddr_t *bdaddr)
 88{
 89	struct sk_buff *skb;
 90	int err;
 91
 92	skb = __hci_cmd_sync(hdev, 0xfc01, 6, bdaddr, HCI_INIT_TIMEOUT);
 93	if (IS_ERR(skb)) {
 94		err = PTR_ERR(skb);
 95		bt_dev_err(hdev, "BCM: Change address command failed (%d)", err);
 96		return err;
 97	}
 98	kfree_skb(skb);
 99
100	return 0;
101}
102EXPORT_SYMBOL_GPL(btbcm_set_bdaddr);
103
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
104int btbcm_patchram(struct hci_dev *hdev, const struct firmware *fw)
105{
106	const struct hci_command_hdr *cmd;
107	const u8 *fw_ptr;
108	size_t fw_size;
109	struct sk_buff *skb;
110	u16 opcode;
111	int err = 0;
112
113	/* Start Download */
114	skb = __hci_cmd_sync(hdev, 0xfc2e, 0, NULL, HCI_INIT_TIMEOUT);
115	if (IS_ERR(skb)) {
116		err = PTR_ERR(skb);
117		bt_dev_err(hdev, "BCM: Download Minidrv command failed (%d)",
118			   err);
119		goto done;
120	}
121	kfree_skb(skb);
122
123	/* 50 msec delay after Download Minidrv completes */
124	msleep(50);
125
126	fw_ptr = fw->data;
127	fw_size = fw->size;
128
129	while (fw_size >= sizeof(*cmd)) {
130		const u8 *cmd_param;
131
132		cmd = (struct hci_command_hdr *)fw_ptr;
133		fw_ptr += sizeof(*cmd);
134		fw_size -= sizeof(*cmd);
135
136		if (fw_size < cmd->plen) {
137			bt_dev_err(hdev, "BCM: Patch is corrupted");
138			err = -EINVAL;
139			goto done;
140		}
141
142		cmd_param = fw_ptr;
143		fw_ptr += cmd->plen;
144		fw_size -= cmd->plen;
145
146		opcode = le16_to_cpu(cmd->opcode);
147
148		skb = __hci_cmd_sync(hdev, opcode, cmd->plen, cmd_param,
149				     HCI_INIT_TIMEOUT);
150		if (IS_ERR(skb)) {
151			err = PTR_ERR(skb);
152			bt_dev_err(hdev, "BCM: Patch command %04x failed (%d)",
153				   opcode, err);
154			goto done;
155		}
156		kfree_skb(skb);
157	}
158
159	/* 250 msec delay after Launch Ram completes */
160	msleep(250);
161
162done:
163	return err;
164}
165EXPORT_SYMBOL(btbcm_patchram);
166
167static int btbcm_reset(struct hci_dev *hdev)
168{
169	struct sk_buff *skb;
170
171	skb = __hci_cmd_sync(hdev, HCI_OP_RESET, 0, NULL, HCI_INIT_TIMEOUT);
172	if (IS_ERR(skb)) {
173		int err = PTR_ERR(skb);
 
174		bt_dev_err(hdev, "BCM: Reset failed (%d)", err);
175		return err;
176	}
177	kfree_skb(skb);
178
179	/* 100 msec delay for module to complete reset process */
180	msleep(100);
181
182	return 0;
183}
184
185static struct sk_buff *btbcm_read_local_name(struct hci_dev *hdev)
186{
187	struct sk_buff *skb;
188
189	skb = __hci_cmd_sync(hdev, HCI_OP_READ_LOCAL_NAME, 0, NULL,
190			     HCI_INIT_TIMEOUT);
191	if (IS_ERR(skb)) {
192		bt_dev_err(hdev, "BCM: Reading local name failed (%ld)",
193			   PTR_ERR(skb));
194		return skb;
195	}
196
197	if (skb->len != sizeof(struct hci_rp_read_local_name)) {
198		bt_dev_err(hdev, "BCM: Local name length mismatch");
199		kfree_skb(skb);
200		return ERR_PTR(-EIO);
201	}
202
203	return skb;
204}
205
206static struct sk_buff *btbcm_read_local_version(struct hci_dev *hdev)
207{
208	struct sk_buff *skb;
209
210	skb = __hci_cmd_sync(hdev, HCI_OP_READ_LOCAL_VERSION, 0, NULL,
211			     HCI_INIT_TIMEOUT);
212	if (IS_ERR(skb)) {
213		bt_dev_err(hdev, "BCM: Reading local version info failed (%ld)",
214			   PTR_ERR(skb));
215		return skb;
216	}
217
218	if (skb->len != sizeof(struct hci_rp_read_local_version)) {
219		bt_dev_err(hdev, "BCM: Local version length mismatch");
220		kfree_skb(skb);
221		return ERR_PTR(-EIO);
222	}
223
224	return skb;
225}
226
227static struct sk_buff *btbcm_read_verbose_config(struct hci_dev *hdev)
228{
229	struct sk_buff *skb;
230
231	skb = __hci_cmd_sync(hdev, 0xfc79, 0, NULL, HCI_INIT_TIMEOUT);
232	if (IS_ERR(skb)) {
233		bt_dev_err(hdev, "BCM: Read verbose config info failed (%ld)",
234			   PTR_ERR(skb));
235		return skb;
236	}
237
238	if (skb->len != 7) {
239		bt_dev_err(hdev, "BCM: Verbose config length mismatch");
240		kfree_skb(skb);
241		return ERR_PTR(-EIO);
242	}
243
244	return skb;
245}
246
247static struct sk_buff *btbcm_read_controller_features(struct hci_dev *hdev)
248{
249	struct sk_buff *skb;
250
251	skb = __hci_cmd_sync(hdev, 0xfc6e, 0, NULL, HCI_INIT_TIMEOUT);
252	if (IS_ERR(skb)) {
253		bt_dev_err(hdev, "BCM: Read controller features failed (%ld)",
254			   PTR_ERR(skb));
255		return skb;
256	}
257
258	if (skb->len != 9) {
259		bt_dev_err(hdev, "BCM: Controller features length mismatch");
260		kfree_skb(skb);
261		return ERR_PTR(-EIO);
262	}
263
264	return skb;
265}
266
267static struct sk_buff *btbcm_read_usb_product(struct hci_dev *hdev)
268{
269	struct sk_buff *skb;
270
271	skb = __hci_cmd_sync(hdev, 0xfc5a, 0, NULL, HCI_INIT_TIMEOUT);
272	if (IS_ERR(skb)) {
273		bt_dev_err(hdev, "BCM: Read USB product info failed (%ld)",
274			   PTR_ERR(skb));
275		return skb;
276	}
277
278	if (skb->len != 5) {
279		bt_dev_err(hdev, "BCM: USB product length mismatch");
280		kfree_skb(skb);
281		return ERR_PTR(-EIO);
282	}
283
284	return skb;
285}
286
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
287static int btbcm_read_info(struct hci_dev *hdev)
288{
289	struct sk_buff *skb;
290
291	/* Read Verbose Config Version Info */
292	skb = btbcm_read_verbose_config(hdev);
293	if (IS_ERR(skb))
294		return PTR_ERR(skb);
295
296	bt_dev_info(hdev, "BCM: chip id %u", skb->data[1]);
297	kfree_skb(skb);
298
 
 
 
 
 
 
 
299	/* Read Controller Features */
300	skb = btbcm_read_controller_features(hdev);
301	if (IS_ERR(skb))
302		return PTR_ERR(skb);
303
304	bt_dev_info(hdev, "BCM: features 0x%2.2x", skb->data[1]);
305	kfree_skb(skb);
306
 
 
 
 
 
 
 
 
 
 
 
307	/* Read Local Name */
308	skb = btbcm_read_local_name(hdev);
309	if (IS_ERR(skb))
310		return PTR_ERR(skb);
311
312	bt_dev_info(hdev, "%s", (char *)(skb->data + 1));
313	kfree_skb(skb);
314
315	return 0;
316}
317
318static const struct {
319	u16 subver;
320	const char *name;
321} bcm_uart_subver_table[] = {
 
 
 
322	{ 0x4103, "BCM4330B1"	},	/* 002.001.003 */
 
323	{ 0x410e, "BCM43341B0"	},	/* 002.001.014 */
 
324	{ 0x4406, "BCM4324B3"	},	/* 002.004.006 */
 
 
325	{ 0x610c, "BCM4354"	},	/* 003.001.012 */
326	{ 0x2122, "BCM4343A0"	},	/* 001.001.034 */
327	{ 0x2209, "BCM43430A1"  },	/* 001.002.009 */
328	{ 0x6119, "BCM4345C0"	},	/* 003.001.025 */
 
329	{ 0x230f, "BCM4356A2"	},	/* 001.003.015 */
 
 
 
 
 
 
 
 
330	{ }
331};
332
333int btbcm_initialize(struct hci_dev *hdev, char *fw_name, size_t len)
334{
335	u16 subver, rev;
336	const char *hw_name = NULL;
337	struct sk_buff *skb;
338	struct hci_rp_read_local_version *ver;
339	int i, err;
340
341	/* Reset */
342	err = btbcm_reset(hdev);
343	if (err)
344		return err;
345
346	/* Read Local Version Info */
347	skb = btbcm_read_local_version(hdev);
348	if (IS_ERR(skb))
349		return PTR_ERR(skb);
350
351	ver = (struct hci_rp_read_local_version *)skb->data;
352	rev = le16_to_cpu(ver->hci_rev);
353	subver = le16_to_cpu(ver->lmp_subver);
354	kfree_skb(skb);
355
356	/* Read controller information */
357	err = btbcm_read_info(hdev);
358	if (err)
359		return err;
360
361	switch ((rev & 0xf000) >> 12) {
362	case 0:
363	case 1:
364	case 2:
365	case 3:
366		for (i = 0; bcm_uart_subver_table[i].name; i++) {
367			if (subver == bcm_uart_subver_table[i].subver) {
368				hw_name = bcm_uart_subver_table[i].name;
369				break;
370			}
371		}
372
373		snprintf(fw_name, len, "brcm/%s.hcd", hw_name ? : "BCM");
374		break;
375	default:
376		return 0;
377	}
378
379	bt_dev_info(hdev, "%s (%3.3u.%3.3u.%3.3u) build %4.4u",
380		    hw_name ? : "BCM", (subver & 0xe000) >> 13,
381		    (subver & 0x1f00) >> 8, (subver & 0x00ff), rev & 0x0fff);
382
383	return 0;
384}
385EXPORT_SYMBOL_GPL(btbcm_initialize);
386
387int btbcm_finalize(struct hci_dev *hdev)
388{
389	struct sk_buff *skb;
390	struct hci_rp_read_local_version *ver;
391	u16 subver, rev;
392	int err;
393
394	/* Reset */
395	err = btbcm_reset(hdev);
396	if (err)
397		return err;
398
399	/* Read Local Version Info */
400	skb = btbcm_read_local_version(hdev);
401	if (IS_ERR(skb))
402		return PTR_ERR(skb);
403
404	ver = (struct hci_rp_read_local_version *)skb->data;
405	rev = le16_to_cpu(ver->hci_rev);
406	subver = le16_to_cpu(ver->lmp_subver);
407	kfree_skb(skb);
408
409	bt_dev_info(hdev, "BCM (%3.3u.%3.3u.%3.3u) build %4.4u",
410		    (subver & 0xe000) >> 13, (subver & 0x1f00) >> 8,
411		    (subver & 0x00ff), rev & 0x0fff);
412
413	btbcm_check_bdaddr(hdev);
414
415	set_bit(HCI_QUIRK_STRICT_DUPLICATE_FILTER, &hdev->quirks);
416
417	return 0;
418}
419EXPORT_SYMBOL_GPL(btbcm_finalize);
420
421static const struct {
422	u16 subver;
423	const char *name;
424} bcm_usb_subver_table[] = {
425	{ 0x210b, "BCM43142A0"	},	/* 001.001.011 */
426	{ 0x2112, "BCM4314A0"	},	/* 001.001.018 */
427	{ 0x2118, "BCM20702A0"	},	/* 001.001.024 */
428	{ 0x2126, "BCM4335A0"	},	/* 001.001.038 */
429	{ 0x220e, "BCM20702A1"	},	/* 001.002.014 */
430	{ 0x230f, "BCM4354A2"	},	/* 001.003.015 */
431	{ 0x4106, "BCM4335B0"	},	/* 002.001.006 */
432	{ 0x410e, "BCM20702B0"	},	/* 002.001.014 */
433	{ 0x6109, "BCM4335C0"	},	/* 003.001.009 */
434	{ 0x610c, "BCM4354"	},	/* 003.001.012 */
 
435	{ }
436};
437
438int btbcm_setup_patchram(struct hci_dev *hdev)
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
439{
440	char fw_name[64];
441	const struct firmware *fw;
442	u16 subver, rev, pid, vid;
443	const char *hw_name = NULL;
444	struct sk_buff *skb;
445	struct hci_rp_read_local_version *ver;
 
 
 
 
 
 
 
446	int i, err;
447
 
 
448	/* Reset */
449	err = btbcm_reset(hdev);
450	if (err)
451		return err;
452
453	/* Read Local Version Info */
454	skb = btbcm_read_local_version(hdev);
455	if (IS_ERR(skb))
456		return PTR_ERR(skb);
457
458	ver = (struct hci_rp_read_local_version *)skb->data;
459	rev = le16_to_cpu(ver->hci_rev);
460	subver = le16_to_cpu(ver->lmp_subver);
461	kfree_skb(skb);
462
463	/* Read controller information */
464	err = btbcm_read_info(hdev);
465	if (err)
466		return err;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
467
468	switch ((rev & 0xf000) >> 12) {
469	case 0:
470	case 3:
471		for (i = 0; bcm_uart_subver_table[i].name; i++) {
472			if (subver == bcm_uart_subver_table[i].subver) {
473				hw_name = bcm_uart_subver_table[i].name;
474				break;
475			}
476		}
 
477
478		snprintf(fw_name, sizeof(fw_name), "brcm/%s.hcd",
479			 hw_name ? : "BCM");
480		break;
481	case 1:
482	case 2:
 
 
 
483		/* Read USB Product Info */
484		skb = btbcm_read_usb_product(hdev);
485		if (IS_ERR(skb))
486			return PTR_ERR(skb);
487
488		vid = get_unaligned_le16(skb->data + 1);
489		pid = get_unaligned_le16(skb->data + 3);
490		kfree_skb(skb);
491
492		for (i = 0; bcm_usb_subver_table[i].name; i++) {
493			if (subver == bcm_usb_subver_table[i].subver) {
494				hw_name = bcm_usb_subver_table[i].name;
495				break;
496			}
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
497		}
498
499		snprintf(fw_name, sizeof(fw_name), "brcm/%s-%4.4x-%4.4x.hcd",
500			 hw_name ? : "BCM", vid, pid);
501		break;
502	default:
503		return 0;
504	}
505
506	bt_dev_info(hdev, "%s (%3.3u.%3.3u.%3.3u) build %4.4u",
507		    hw_name ? : "BCM", (subver & 0xe000) >> 13,
508		    (subver & 0x1f00) >> 8, (subver & 0x00ff), rev & 0x0fff);
509
510	err = request_firmware(&fw, fw_name, &hdev->dev);
511	if (err < 0) {
512		bt_dev_info(hdev, "BCM: Patch %s not found", fw_name);
513		goto done;
 
 
514	}
515
516	btbcm_patchram(hdev, fw);
 
 
 
517
518	release_firmware(fw);
 
 
519
520	/* Reset */
521	err = btbcm_reset(hdev);
522	if (err)
523		return err;
 
 
524
525	/* Read Local Version Info */
526	skb = btbcm_read_local_version(hdev);
527	if (IS_ERR(skb))
528		return PTR_ERR(skb);
529
530	ver = (struct hci_rp_read_local_version *)skb->data;
531	rev = le16_to_cpu(ver->hci_rev);
532	subver = le16_to_cpu(ver->lmp_subver);
533	kfree_skb(skb);
534
535	bt_dev_info(hdev, "%s (%3.3u.%3.3u.%3.3u) build %4.4u",
536		    hw_name ? : "BCM", (subver & 0xe000) >> 13,
537		    (subver & 0x1f00) >> 8, (subver & 0x00ff), rev & 0x0fff);
538
539	/* Read Local Name */
540	skb = btbcm_read_local_name(hdev);
541	if (IS_ERR(skb))
542		return PTR_ERR(skb);
 
543
544	bt_dev_info(hdev, "%s", (char *)(skb->data + 1));
545	kfree_skb(skb);
546
547done:
548	btbcm_check_bdaddr(hdev);
549
550	set_bit(HCI_QUIRK_STRICT_DUPLICATE_FILTER, &hdev->quirks);
551
552	return 0;
553}
554EXPORT_SYMBOL_GPL(btbcm_setup_patchram);
555
556int btbcm_setup_apple(struct hci_dev *hdev)
557{
558	struct sk_buff *skb;
559	int err;
560
561	/* Reset */
562	err = btbcm_reset(hdev);
563	if (err)
564		return err;
565
566	/* Read Verbose Config Version Info */
567	skb = btbcm_read_verbose_config(hdev);
568	if (!IS_ERR(skb)) {
569		bt_dev_info(hdev, "BCM: chip id %u build %4.4u",
570			    skb->data[1], get_unaligned_le16(skb->data + 5));
571		kfree_skb(skb);
572	}
573
574	/* Read USB Product Info */
575	skb = btbcm_read_usb_product(hdev);
576	if (!IS_ERR(skb)) {
577		bt_dev_info(hdev, "BCM: product %4.4x:%4.4x",
578			    get_unaligned_le16(skb->data + 1),
579			    get_unaligned_le16(skb->data + 3));
580		kfree_skb(skb);
581	}
582
583	/* Read Controller Features */
584	skb = btbcm_read_controller_features(hdev);
585	if (!IS_ERR(skb)) {
586		bt_dev_info(hdev, "BCM: features 0x%2.2x", skb->data[1]);
587		kfree_skb(skb);
588	}
589
590	/* Read Local Name */
591	skb = btbcm_read_local_name(hdev);
592	if (!IS_ERR(skb)) {
593		bt_dev_info(hdev, "%s", (char *)(skb->data + 1));
594		kfree_skb(skb);
595	}
596
597	set_bit(HCI_QUIRK_STRICT_DUPLICATE_FILTER, &hdev->quirks);
598
599	return 0;
600}
601EXPORT_SYMBOL_GPL(btbcm_setup_apple);
602
603MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
604MODULE_DESCRIPTION("Bluetooth support for Broadcom devices ver " VERSION);
605MODULE_VERSION(VERSION);
606MODULE_LICENSE("GPL");