xref: /openbmc/linux/drivers/usb/misc/iowarrior.c (revision ecc23d0a422a3118fcf6e4f0a46e17a6c2047b02)
1 // SPDX-License-Identifier: GPL-2.0
2 /*
3  *  Native support for the I/O-Warrior USB devices
4  *
5  *  Copyright (c) 2003-2005, 2020  Code Mercenaries GmbH
6  *  written by Christian Lucht <lucht@codemercs.com> and
7  *  Christoph Jung <jung@codemercs.com>
8  *
9  *  based on
10 
11  *  usb-skeleton.c by Greg Kroah-Hartman  <greg@kroah.com>
12  *  brlvger.c by Stephane Dalton  <sdalton@videotron.ca>
13  *           and Stephane Doyon   <s.doyon@videotron.ca>
14  *
15  *  Released under the GPLv2.
16  */
17 
18 #include <linux/module.h>
19 #include <linux/usb.h>
20 #include <linux/slab.h>
21 #include <linux/sched.h>
22 #include <linux/mutex.h>
23 #include <linux/poll.h>
24 #include <linux/usb/iowarrior.h>
25 
26 #define DRIVER_AUTHOR "Christian Lucht <lucht@codemercs.com>"
27 #define DRIVER_DESC "USB IO-Warrior driver"
28 
29 #define USB_VENDOR_ID_CODEMERCS		1984
30 /* low speed iowarrior */
31 #define USB_DEVICE_ID_CODEMERCS_IOW40	0x1500
32 #define USB_DEVICE_ID_CODEMERCS_IOW24	0x1501
33 #define USB_DEVICE_ID_CODEMERCS_IOWPV1	0x1511
34 #define USB_DEVICE_ID_CODEMERCS_IOWPV2	0x1512
35 /* full speed iowarrior */
36 #define USB_DEVICE_ID_CODEMERCS_IOW56	0x1503
37 /* fuller speed iowarrior */
38 #define USB_DEVICE_ID_CODEMERCS_IOW28	0x1504
39 #define USB_DEVICE_ID_CODEMERCS_IOW28L	0x1505
40 #define USB_DEVICE_ID_CODEMERCS_IOW100	0x1506
41 
42 /* OEMed devices */
43 #define USB_DEVICE_ID_CODEMERCS_IOW24SAG	0x158a
44 #define USB_DEVICE_ID_CODEMERCS_IOW56AM		0x158b
45 
46 /* Get a minor range for your devices from the usb maintainer */
47 #ifdef CONFIG_USB_DYNAMIC_MINORS
48 #define IOWARRIOR_MINOR_BASE	0
49 #else
50 #define IOWARRIOR_MINOR_BASE	208	// SKELETON_MINOR_BASE 192 + 16, not official yet
51 #endif
52 
53 /* interrupt input queue size */
54 #define MAX_INTERRUPT_BUFFER 16
55 /*
56    maximum number of urbs that are submitted for writes at the same time,
57    this applies to the IOWarrior56 only!
58    IOWarrior24 and IOWarrior40 use synchronous usb_control_msg calls.
59 */
60 #define MAX_WRITES_IN_FLIGHT 4
61 
62 MODULE_AUTHOR(DRIVER_AUTHOR);
63 MODULE_DESCRIPTION(DRIVER_DESC);
64 MODULE_LICENSE("GPL");
65 
66 static struct usb_driver iowarrior_driver;
67 
68 /*--------------*/
69 /*     data     */
70 /*--------------*/
71 
72 /* Structure to hold all of our device specific stuff */
73 struct iowarrior {
74 	struct mutex mutex;			/* locks this structure */
75 	struct usb_device *udev;		/* save off the usb device pointer */
76 	struct usb_interface *interface;	/* the interface for this device */
77 	unsigned char minor;			/* the starting minor number for this device */
78 	struct usb_endpoint_descriptor *int_out_endpoint;	/* endpoint for reading (needed for IOW56 only) */
79 	struct usb_endpoint_descriptor *int_in_endpoint;	/* endpoint for reading */
80 	struct urb *int_in_urb;		/* the urb for reading data */
81 	unsigned char *int_in_buffer;	/* buffer for data to be read */
82 	unsigned char serial_number;	/* to detect lost packages */
83 	unsigned char *read_queue;	/* size is MAX_INTERRUPT_BUFFER * packet size */
84 	wait_queue_head_t read_wait;
85 	wait_queue_head_t write_wait;	/* wait-queue for writing to the device */
86 	atomic_t write_busy;		/* number of write-urbs submitted */
87 	atomic_t read_idx;
88 	atomic_t intr_idx;
89 	atomic_t overflow_flag;		/* signals an index 'rollover' */
90 	int present;			/* this is 1 as long as the device is connected */
91 	int opened;			/* this is 1 if the device is currently open */
92 	char chip_serial[9];		/* the serial number string of the chip connected */
93 	int report_size;		/* number of bytes in a report */
94 	u16 product_id;
95 	struct usb_anchor submitted;
96 };
97 
98 /*--------------*/
99 /*    globals   */
100 /*--------------*/
101 
102 #define USB_REQ_GET_REPORT  0x01
103 //#if 0
usb_get_report(struct usb_device * dev,struct usb_host_interface * inter,unsigned char type,unsigned char id,void * buf,int size)104 static int usb_get_report(struct usb_device *dev,
105 			  struct usb_host_interface *inter, unsigned char type,
106 			  unsigned char id, void *buf, int size)
107 {
108 	return usb_control_msg(dev, usb_rcvctrlpipe(dev, 0),
109 			       USB_REQ_GET_REPORT,
110 			       USB_DIR_IN | USB_TYPE_CLASS |
111 			       USB_RECIP_INTERFACE, (type << 8) + id,
112 			       inter->desc.bInterfaceNumber, buf, size,
113 			       USB_CTRL_GET_TIMEOUT);
114 }
115 //#endif
116 
117 #define USB_REQ_SET_REPORT 0x09
118 
usb_set_report(struct usb_interface * intf,unsigned char type,unsigned char id,void * buf,int size)119 static int usb_set_report(struct usb_interface *intf, unsigned char type,
120 			  unsigned char id, void *buf, int size)
121 {
122 	return usb_control_msg(interface_to_usbdev(intf),
123 			       usb_sndctrlpipe(interface_to_usbdev(intf), 0),
124 			       USB_REQ_SET_REPORT,
125 			       USB_TYPE_CLASS | USB_RECIP_INTERFACE,
126 			       (type << 8) + id,
127 			       intf->cur_altsetting->desc.bInterfaceNumber, buf,
128 			       size, 1000);
129 }
130 
131 /*---------------------*/
132 /* driver registration */
133 /*---------------------*/
134 /* table of devices that work with this driver */
135 static const struct usb_device_id iowarrior_ids[] = {
136 	{USB_DEVICE(USB_VENDOR_ID_CODEMERCS, USB_DEVICE_ID_CODEMERCS_IOW40)},
137 	{USB_DEVICE(USB_VENDOR_ID_CODEMERCS, USB_DEVICE_ID_CODEMERCS_IOW24)},
138 	{USB_DEVICE(USB_VENDOR_ID_CODEMERCS, USB_DEVICE_ID_CODEMERCS_IOWPV1)},
139 	{USB_DEVICE(USB_VENDOR_ID_CODEMERCS, USB_DEVICE_ID_CODEMERCS_IOWPV2)},
140 	{USB_DEVICE(USB_VENDOR_ID_CODEMERCS, USB_DEVICE_ID_CODEMERCS_IOW56)},
141 	{USB_DEVICE(USB_VENDOR_ID_CODEMERCS, USB_DEVICE_ID_CODEMERCS_IOW24SAG)},
142 	{USB_DEVICE(USB_VENDOR_ID_CODEMERCS, USB_DEVICE_ID_CODEMERCS_IOW56AM)},
143 	{USB_DEVICE(USB_VENDOR_ID_CODEMERCS, USB_DEVICE_ID_CODEMERCS_IOW28)},
144 	{USB_DEVICE(USB_VENDOR_ID_CODEMERCS, USB_DEVICE_ID_CODEMERCS_IOW28L)},
145 	{USB_DEVICE(USB_VENDOR_ID_CODEMERCS, USB_DEVICE_ID_CODEMERCS_IOW100)},
146 	{}			/* Terminating entry */
147 };
148 MODULE_DEVICE_TABLE(usb, iowarrior_ids);
149 
150 /*
151  * USB callback handler for reading data
152  */
iowarrior_callback(struct urb * urb)153 static void iowarrior_callback(struct urb *urb)
154 {
155 	struct iowarrior *dev = urb->context;
156 	int intr_idx;
157 	int read_idx;
158 	int aux_idx;
159 	int offset;
160 	int status = urb->status;
161 	int retval;
162 
163 	switch (status) {
164 	case 0:
165 		/* success */
166 		break;
167 	case -ECONNRESET:
168 	case -ENOENT:
169 	case -ESHUTDOWN:
170 		return;
171 	default:
172 		goto exit;
173 	}
174 
175 	intr_idx = atomic_read(&dev->intr_idx);
176 	/* aux_idx become previous intr_idx */
177 	aux_idx = (intr_idx == 0) ? (MAX_INTERRUPT_BUFFER - 1) : (intr_idx - 1);
178 	read_idx = atomic_read(&dev->read_idx);
179 
180 	/* queue is not empty and it's interface 0 */
181 	if ((intr_idx != read_idx)
182 	    && (dev->interface->cur_altsetting->desc.bInterfaceNumber == 0)) {
183 		/* + 1 for serial number */
184 		offset = aux_idx * (dev->report_size + 1);
185 		if (!memcmp
186 		    (dev->read_queue + offset, urb->transfer_buffer,
187 		     dev->report_size)) {
188 			/* equal values on interface 0 will be ignored */
189 			goto exit;
190 		}
191 	}
192 
193 	/* aux_idx become next intr_idx */
194 	aux_idx = (intr_idx == (MAX_INTERRUPT_BUFFER - 1)) ? 0 : (intr_idx + 1);
195 	if (read_idx == aux_idx) {
196 		/* queue full, dropping oldest input */
197 		read_idx = (++read_idx == MAX_INTERRUPT_BUFFER) ? 0 : read_idx;
198 		atomic_set(&dev->read_idx, read_idx);
199 		atomic_set(&dev->overflow_flag, 1);
200 	}
201 
202 	/* +1 for serial number */
203 	offset = intr_idx * (dev->report_size + 1);
204 	memcpy(dev->read_queue + offset, urb->transfer_buffer,
205 	       dev->report_size);
206 	*(dev->read_queue + offset + (dev->report_size)) = dev->serial_number++;
207 
208 	atomic_set(&dev->intr_idx, aux_idx);
209 	/* tell the blocking read about the new data */
210 	wake_up_interruptible(&dev->read_wait);
211 
212 exit:
213 	retval = usb_submit_urb(urb, GFP_ATOMIC);
214 	if (retval)
215 		dev_err(&dev->interface->dev, "%s - usb_submit_urb failed with result %d\n",
216 			__func__, retval);
217 
218 }
219 
220 /*
221  * USB Callback handler for write-ops
222  */
iowarrior_write_callback(struct urb * urb)223 static void iowarrior_write_callback(struct urb *urb)
224 {
225 	struct iowarrior *dev;
226 	int status = urb->status;
227 
228 	dev = urb->context;
229 	/* sync/async unlink faults aren't errors */
230 	if (status &&
231 	    !(status == -ENOENT ||
232 	      status == -ECONNRESET || status == -ESHUTDOWN)) {
233 		dev_dbg(&dev->interface->dev,
234 			"nonzero write bulk status received: %d\n", status);
235 	}
236 	/* free up our allocated buffer */
237 	usb_free_coherent(urb->dev, urb->transfer_buffer_length,
238 			  urb->transfer_buffer, urb->transfer_dma);
239 	/* tell a waiting writer the interrupt-out-pipe is available again */
240 	atomic_dec(&dev->write_busy);
241 	wake_up_interruptible(&dev->write_wait);
242 }
243 
244 /*
245  *	iowarrior_delete
246  */
iowarrior_delete(struct iowarrior * dev)247 static inline void iowarrior_delete(struct iowarrior *dev)
248 {
249 	dev_dbg(&dev->interface->dev, "minor %d\n", dev->minor);
250 	kfree(dev->int_in_buffer);
251 	usb_free_urb(dev->int_in_urb);
252 	kfree(dev->read_queue);
253 	usb_put_intf(dev->interface);
254 	kfree(dev);
255 }
256 
257 /*---------------------*/
258 /* fops implementation */
259 /*---------------------*/
260 
read_index(struct iowarrior * dev)261 static int read_index(struct iowarrior *dev)
262 {
263 	int intr_idx, read_idx;
264 
265 	read_idx = atomic_read(&dev->read_idx);
266 	intr_idx = atomic_read(&dev->intr_idx);
267 
268 	return (read_idx == intr_idx ? -1 : read_idx);
269 }
270 
271 /*
272  *  iowarrior_read
273  */
iowarrior_read(struct file * file,char __user * buffer,size_t count,loff_t * ppos)274 static ssize_t iowarrior_read(struct file *file, char __user *buffer,
275 			      size_t count, loff_t *ppos)
276 {
277 	struct iowarrior *dev;
278 	int read_idx;
279 	int offset;
280 	int retval;
281 
282 	dev = file->private_data;
283 
284 	if (file->f_flags & O_NONBLOCK) {
285 		retval = mutex_trylock(&dev->mutex);
286 		if (!retval)
287 			return -EAGAIN;
288 	} else {
289 		retval = mutex_lock_interruptible(&dev->mutex);
290 		if (retval)
291 			return -ERESTARTSYS;
292 	}
293 
294 	/* verify that the device wasn't unplugged */
295 	if (!dev->present) {
296 		retval = -ENODEV;
297 		goto exit;
298 	}
299 
300 	dev_dbg(&dev->interface->dev, "minor %d, count = %zd\n",
301 		dev->minor, count);
302 
303 	/* read count must be packet size (+ time stamp) */
304 	if ((count != dev->report_size)
305 	    && (count != (dev->report_size + 1))) {
306 		retval = -EINVAL;
307 		goto exit;
308 	}
309 
310 	/* repeat until no buffer overrun in callback handler occur */
311 	do {
312 		atomic_set(&dev->overflow_flag, 0);
313 		if ((read_idx = read_index(dev)) == -1) {
314 			/* queue empty */
315 			if (file->f_flags & O_NONBLOCK) {
316 				retval = -EAGAIN;
317 				goto exit;
318 			}
319 			else {
320 				//next line will return when there is either new data, or the device is unplugged
321 				int r = wait_event_interruptible(dev->read_wait,
322 								 (!dev->present
323 								  || (read_idx =
324 								      read_index
325 								      (dev)) !=
326 								  -1));
327 				if (r) {
328 					//we were interrupted by a signal
329 					retval = -ERESTART;
330 					goto exit;
331 				}
332 				if (!dev->present) {
333 					//The device was unplugged
334 					retval = -ENODEV;
335 					goto exit;
336 				}
337 				if (read_idx == -1) {
338 					// Can this happen ???
339 					retval = 0;
340 					goto exit;
341 				}
342 			}
343 		}
344 
345 		offset = read_idx * (dev->report_size + 1);
346 		if (copy_to_user(buffer, dev->read_queue + offset, count)) {
347 			retval = -EFAULT;
348 			goto exit;
349 		}
350 	} while (atomic_read(&dev->overflow_flag));
351 
352 	read_idx = ++read_idx == MAX_INTERRUPT_BUFFER ? 0 : read_idx;
353 	atomic_set(&dev->read_idx, read_idx);
354 	mutex_unlock(&dev->mutex);
355 	return count;
356 
357 exit:
358 	mutex_unlock(&dev->mutex);
359 	return retval;
360 }
361 
362 /*
363  * iowarrior_write
364  */
iowarrior_write(struct file * file,const char __user * user_buffer,size_t count,loff_t * ppos)365 static ssize_t iowarrior_write(struct file *file,
366 			       const char __user *user_buffer,
367 			       size_t count, loff_t *ppos)
368 {
369 	struct iowarrior *dev;
370 	int retval = 0;
371 	char *buf = NULL;	/* for IOW24 and IOW56 we need a buffer */
372 	struct urb *int_out_urb = NULL;
373 
374 	dev = file->private_data;
375 
376 	mutex_lock(&dev->mutex);
377 	/* verify that the device wasn't unplugged */
378 	if (!dev->present) {
379 		retval = -ENODEV;
380 		goto exit;
381 	}
382 	dev_dbg(&dev->interface->dev, "minor %d, count = %zd\n",
383 		dev->minor, count);
384 	/* if count is 0 we're already done */
385 	if (count == 0) {
386 		retval = 0;
387 		goto exit;
388 	}
389 	/* We only accept full reports */
390 	if (count != dev->report_size) {
391 		retval = -EINVAL;
392 		goto exit;
393 	}
394 	switch (dev->product_id) {
395 	case USB_DEVICE_ID_CODEMERCS_IOW24:
396 	case USB_DEVICE_ID_CODEMERCS_IOW24SAG:
397 	case USB_DEVICE_ID_CODEMERCS_IOWPV1:
398 	case USB_DEVICE_ID_CODEMERCS_IOWPV2:
399 	case USB_DEVICE_ID_CODEMERCS_IOW40:
400 		/* IOW24 and IOW40 use a synchronous call */
401 		buf = memdup_user(user_buffer, count);
402 		if (IS_ERR(buf)) {
403 			retval = PTR_ERR(buf);
404 			goto exit;
405 		}
406 		retval = usb_set_report(dev->interface, 2, 0, buf, count);
407 		kfree(buf);
408 		goto exit;
409 	case USB_DEVICE_ID_CODEMERCS_IOW56:
410 	case USB_DEVICE_ID_CODEMERCS_IOW56AM:
411 	case USB_DEVICE_ID_CODEMERCS_IOW28:
412 	case USB_DEVICE_ID_CODEMERCS_IOW28L:
413 	case USB_DEVICE_ID_CODEMERCS_IOW100:
414 		/* The IOW56 uses asynchronous IO and more urbs */
415 		if (atomic_read(&dev->write_busy) == MAX_WRITES_IN_FLIGHT) {
416 			/* Wait until we are below the limit for submitted urbs */
417 			if (file->f_flags & O_NONBLOCK) {
418 				retval = -EAGAIN;
419 				goto exit;
420 			} else {
421 				retval = wait_event_interruptible(dev->write_wait,
422 								  (!dev->present || (atomic_read (&dev-> write_busy) < MAX_WRITES_IN_FLIGHT)));
423 				if (retval) {
424 					/* we were interrupted by a signal */
425 					retval = -ERESTART;
426 					goto exit;
427 				}
428 				if (!dev->present) {
429 					/* The device was unplugged */
430 					retval = -ENODEV;
431 					goto exit;
432 				}
433 				if (!dev->opened) {
434 					/* We were closed while waiting for an URB */
435 					retval = -ENODEV;
436 					goto exit;
437 				}
438 			}
439 		}
440 		atomic_inc(&dev->write_busy);
441 		int_out_urb = usb_alloc_urb(0, GFP_KERNEL);
442 		if (!int_out_urb) {
443 			retval = -ENOMEM;
444 			goto error_no_urb;
445 		}
446 		buf = usb_alloc_coherent(dev->udev, dev->report_size,
447 					 GFP_KERNEL, &int_out_urb->transfer_dma);
448 		if (!buf) {
449 			retval = -ENOMEM;
450 			dev_dbg(&dev->interface->dev,
451 				"Unable to allocate buffer\n");
452 			goto error_no_buffer;
453 		}
454 		usb_fill_int_urb(int_out_urb, dev->udev,
455 				 usb_sndintpipe(dev->udev,
456 						dev->int_out_endpoint->bEndpointAddress),
457 				 buf, dev->report_size,
458 				 iowarrior_write_callback, dev,
459 				 dev->int_out_endpoint->bInterval);
460 		int_out_urb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
461 		if (copy_from_user(buf, user_buffer, count)) {
462 			retval = -EFAULT;
463 			goto error;
464 		}
465 		usb_anchor_urb(int_out_urb, &dev->submitted);
466 		retval = usb_submit_urb(int_out_urb, GFP_KERNEL);
467 		if (retval) {
468 			dev_dbg(&dev->interface->dev,
469 				"submit error %d for urb nr.%d\n",
470 				retval, atomic_read(&dev->write_busy));
471 			usb_unanchor_urb(int_out_urb);
472 			goto error;
473 		}
474 		/* submit was ok */
475 		retval = count;
476 		usb_free_urb(int_out_urb);
477 		goto exit;
478 	default:
479 		/* what do we have here ? An unsupported Product-ID ? */
480 		dev_err(&dev->interface->dev, "%s - not supported for product=0x%x\n",
481 			__func__, dev->product_id);
482 		retval = -EFAULT;
483 		goto exit;
484 	}
485 error:
486 	usb_free_coherent(dev->udev, dev->report_size, buf,
487 			  int_out_urb->transfer_dma);
488 error_no_buffer:
489 	usb_free_urb(int_out_urb);
490 error_no_urb:
491 	atomic_dec(&dev->write_busy);
492 	wake_up_interruptible(&dev->write_wait);
493 exit:
494 	mutex_unlock(&dev->mutex);
495 	return retval;
496 }
497 
498 /*
499  *	iowarrior_ioctl
500  */
iowarrior_ioctl(struct file * file,unsigned int cmd,unsigned long arg)501 static long iowarrior_ioctl(struct file *file, unsigned int cmd,
502 							unsigned long arg)
503 {
504 	struct iowarrior *dev = NULL;
505 	__u8 *buffer;
506 	__u8 __user *user_buffer;
507 	int retval;
508 	int io_res;		/* checks for bytes read/written and copy_to/from_user results */
509 
510 	dev = file->private_data;
511 	if (!dev)
512 		return -ENODEV;
513 
514 	buffer = kzalloc(dev->report_size, GFP_KERNEL);
515 	if (!buffer)
516 		return -ENOMEM;
517 
518 	mutex_lock(&dev->mutex);
519 
520 	/* verify that the device wasn't unplugged */
521 	if (!dev->present) {
522 		retval = -ENODEV;
523 		goto error_out;
524 	}
525 
526 	dev_dbg(&dev->interface->dev, "minor %d, cmd 0x%.4x, arg %ld\n",
527 		dev->minor, cmd, arg);
528 
529 	retval = 0;
530 	io_res = 0;
531 	switch (cmd) {
532 	case IOW_WRITE:
533 		if (dev->product_id == USB_DEVICE_ID_CODEMERCS_IOW24 ||
534 		    dev->product_id == USB_DEVICE_ID_CODEMERCS_IOW24SAG ||
535 		    dev->product_id == USB_DEVICE_ID_CODEMERCS_IOWPV1 ||
536 		    dev->product_id == USB_DEVICE_ID_CODEMERCS_IOWPV2 ||
537 		    dev->product_id == USB_DEVICE_ID_CODEMERCS_IOW40) {
538 			user_buffer = (__u8 __user *)arg;
539 			io_res = copy_from_user(buffer, user_buffer,
540 						dev->report_size);
541 			if (io_res) {
542 				retval = -EFAULT;
543 			} else {
544 				io_res = usb_set_report(dev->interface, 2, 0,
545 							buffer,
546 							dev->report_size);
547 				if (io_res < 0)
548 					retval = io_res;
549 			}
550 		} else {
551 			retval = -EINVAL;
552 			dev_err(&dev->interface->dev,
553 				"ioctl 'IOW_WRITE' is not supported for product=0x%x.\n",
554 				dev->product_id);
555 		}
556 		break;
557 	case IOW_READ:
558 		user_buffer = (__u8 __user *)arg;
559 		io_res = usb_get_report(dev->udev,
560 					dev->interface->cur_altsetting, 1, 0,
561 					buffer, dev->report_size);
562 		if (io_res < 0)
563 			retval = io_res;
564 		else {
565 			io_res = copy_to_user(user_buffer, buffer, dev->report_size);
566 			if (io_res)
567 				retval = -EFAULT;
568 		}
569 		break;
570 	case IOW_GETINFO:
571 		{
572 			/* Report available information for the device */
573 			struct iowarrior_info info;
574 			/* needed for power consumption */
575 			struct usb_config_descriptor *cfg_descriptor = &dev->udev->actconfig->desc;
576 
577 			memset(&info, 0, sizeof(info));
578 			/* directly from the descriptor */
579 			info.vendor = le16_to_cpu(dev->udev->descriptor.idVendor);
580 			info.product = dev->product_id;
581 			info.revision = le16_to_cpu(dev->udev->descriptor.bcdDevice);
582 
583 			/* 0==UNKNOWN, 1==LOW(usb1.1) ,2=FULL(usb1.1), 3=HIGH(usb2.0) */
584 			info.speed = dev->udev->speed;
585 			info.if_num = dev->interface->cur_altsetting->desc.bInterfaceNumber;
586 			info.report_size = dev->report_size;
587 
588 			/* serial number string has been read earlier 8 chars or empty string */
589 			memcpy(info.serial, dev->chip_serial,
590 			       sizeof(dev->chip_serial));
591 			if (cfg_descriptor == NULL) {
592 				info.power = -1;	/* no information available */
593 			} else {
594 				/* the MaxPower is stored in units of 2mA to make it fit into a byte-value */
595 				info.power = cfg_descriptor->bMaxPower * 2;
596 			}
597 			io_res = copy_to_user((struct iowarrior_info __user *)arg, &info,
598 					 sizeof(struct iowarrior_info));
599 			if (io_res)
600 				retval = -EFAULT;
601 			break;
602 		}
603 	default:
604 		/* return that we did not understand this ioctl call */
605 		retval = -ENOTTY;
606 		break;
607 	}
608 error_out:
609 	/* unlock the device */
610 	mutex_unlock(&dev->mutex);
611 	kfree(buffer);
612 	return retval;
613 }
614 
615 /*
616  *	iowarrior_open
617  */
iowarrior_open(struct inode * inode,struct file * file)618 static int iowarrior_open(struct inode *inode, struct file *file)
619 {
620 	struct iowarrior *dev = NULL;
621 	struct usb_interface *interface;
622 	int subminor;
623 	int retval = 0;
624 
625 	subminor = iminor(inode);
626 
627 	interface = usb_find_interface(&iowarrior_driver, subminor);
628 	if (!interface) {
629 		pr_err("%s - error, can't find device for minor %d\n",
630 		       __func__, subminor);
631 		return -ENODEV;
632 	}
633 
634 	dev = usb_get_intfdata(interface);
635 	if (!dev)
636 		return -ENODEV;
637 
638 	mutex_lock(&dev->mutex);
639 
640 	/* Only one process can open each device, no sharing. */
641 	if (dev->opened) {
642 		retval = -EBUSY;
643 		goto out;
644 	}
645 
646 	/* setup interrupt handler for receiving values */
647 	if ((retval = usb_submit_urb(dev->int_in_urb, GFP_KERNEL)) < 0) {
648 		dev_err(&interface->dev, "Error %d while submitting URB\n", retval);
649 		retval = -EFAULT;
650 		goto out;
651 	}
652 	/* increment our usage count for the driver */
653 	++dev->opened;
654 	/* save our object in the file's private structure */
655 	file->private_data = dev;
656 	retval = 0;
657 
658 out:
659 	mutex_unlock(&dev->mutex);
660 	return retval;
661 }
662 
663 /*
664  *	iowarrior_release
665  */
iowarrior_release(struct inode * inode,struct file * file)666 static int iowarrior_release(struct inode *inode, struct file *file)
667 {
668 	struct iowarrior *dev;
669 	int retval = 0;
670 
671 	dev = file->private_data;
672 	if (!dev)
673 		return -ENODEV;
674 
675 	dev_dbg(&dev->interface->dev, "minor %d\n", dev->minor);
676 
677 	/* lock our device */
678 	mutex_lock(&dev->mutex);
679 
680 	if (dev->opened <= 0) {
681 		retval = -ENODEV;	/* close called more than once */
682 		mutex_unlock(&dev->mutex);
683 	} else {
684 		dev->opened = 0;	/* we're closing now */
685 		retval = 0;
686 		if (dev->present) {
687 			/*
688 			   The device is still connected so we only shutdown
689 			   pending read-/write-ops.
690 			 */
691 			usb_kill_urb(dev->int_in_urb);
692 			wake_up_interruptible(&dev->read_wait);
693 			wake_up_interruptible(&dev->write_wait);
694 			mutex_unlock(&dev->mutex);
695 		} else {
696 			/* The device was unplugged, cleanup resources */
697 			mutex_unlock(&dev->mutex);
698 			iowarrior_delete(dev);
699 		}
700 	}
701 	return retval;
702 }
703 
iowarrior_poll(struct file * file,poll_table * wait)704 static __poll_t iowarrior_poll(struct file *file, poll_table * wait)
705 {
706 	struct iowarrior *dev = file->private_data;
707 	__poll_t mask = 0;
708 
709 	if (!dev->present)
710 		return EPOLLERR | EPOLLHUP;
711 
712 	poll_wait(file, &dev->read_wait, wait);
713 	poll_wait(file, &dev->write_wait, wait);
714 
715 	if (!dev->present)
716 		return EPOLLERR | EPOLLHUP;
717 
718 	if (read_index(dev) != -1)
719 		mask |= EPOLLIN | EPOLLRDNORM;
720 
721 	if (atomic_read(&dev->write_busy) < MAX_WRITES_IN_FLIGHT)
722 		mask |= EPOLLOUT | EPOLLWRNORM;
723 	return mask;
724 }
725 
726 /*
727  * File operations needed when we register this driver.
728  * This assumes that this driver NEEDS file operations,
729  * of course, which means that the driver is expected
730  * to have a node in the /dev directory. If the USB
731  * device were for a network interface then the driver
732  * would use "struct net_driver" instead, and a serial
733  * device would use "struct tty_driver".
734  */
735 static const struct file_operations iowarrior_fops = {
736 	.owner = THIS_MODULE,
737 	.write = iowarrior_write,
738 	.read = iowarrior_read,
739 	.unlocked_ioctl = iowarrior_ioctl,
740 	.open = iowarrior_open,
741 	.release = iowarrior_release,
742 	.poll = iowarrior_poll,
743 	.llseek = noop_llseek,
744 };
745 
iowarrior_devnode(const struct device * dev,umode_t * mode)746 static char *iowarrior_devnode(const struct device *dev, umode_t *mode)
747 {
748 	return kasprintf(GFP_KERNEL, "usb/%s", dev_name(dev));
749 }
750 
751 /*
752  * usb class driver info in order to get a minor number from the usb core,
753  * and to have the device registered with devfs and the driver core
754  */
755 static struct usb_class_driver iowarrior_class = {
756 	.name = "iowarrior%d",
757 	.devnode = iowarrior_devnode,
758 	.fops = &iowarrior_fops,
759 	.minor_base = IOWARRIOR_MINOR_BASE,
760 };
761 
762 /*---------------------------------*/
763 /*  probe and disconnect functions */
764 /*---------------------------------*/
765 /*
766  *	iowarrior_probe
767  *
768  *	Called by the usb core when a new device is connected that it thinks
769  *	this driver might be interested in.
770  */
iowarrior_probe(struct usb_interface * interface,const struct usb_device_id * id)771 static int iowarrior_probe(struct usb_interface *interface,
772 			   const struct usb_device_id *id)
773 {
774 	struct usb_device *udev = interface_to_usbdev(interface);
775 	struct iowarrior *dev = NULL;
776 	struct usb_host_interface *iface_desc;
777 	int retval = -ENOMEM;
778 	int res;
779 
780 	/* allocate memory for our device state and initialize it */
781 	dev = kzalloc(sizeof(struct iowarrior), GFP_KERNEL);
782 	if (!dev)
783 		return retval;
784 
785 	mutex_init(&dev->mutex);
786 
787 	atomic_set(&dev->intr_idx, 0);
788 	atomic_set(&dev->read_idx, 0);
789 	atomic_set(&dev->overflow_flag, 0);
790 	init_waitqueue_head(&dev->read_wait);
791 	atomic_set(&dev->write_busy, 0);
792 	init_waitqueue_head(&dev->write_wait);
793 
794 	dev->udev = udev;
795 	dev->interface = usb_get_intf(interface);
796 
797 	iface_desc = interface->cur_altsetting;
798 	dev->product_id = le16_to_cpu(udev->descriptor.idProduct);
799 
800 	init_usb_anchor(&dev->submitted);
801 
802 	res = usb_find_last_int_in_endpoint(iface_desc, &dev->int_in_endpoint);
803 	if (res) {
804 		dev_err(&interface->dev, "no interrupt-in endpoint found\n");
805 		retval = res;
806 		goto error;
807 	}
808 
809 	if ((dev->product_id == USB_DEVICE_ID_CODEMERCS_IOW56) ||
810 	    (dev->product_id == USB_DEVICE_ID_CODEMERCS_IOW56AM) ||
811 	    (dev->product_id == USB_DEVICE_ID_CODEMERCS_IOW28) ||
812 	    (dev->product_id == USB_DEVICE_ID_CODEMERCS_IOW28L) ||
813 	    (dev->product_id == USB_DEVICE_ID_CODEMERCS_IOW100)) {
814 		res = usb_find_last_int_out_endpoint(iface_desc,
815 				&dev->int_out_endpoint);
816 		if (res) {
817 			dev_err(&interface->dev, "no interrupt-out endpoint found\n");
818 			retval = res;
819 			goto error;
820 		}
821 	}
822 
823 	/* we have to check the report_size often, so remember it in the endianness suitable for our machine */
824 	dev->report_size = usb_endpoint_maxp(dev->int_in_endpoint);
825 
826 	/*
827 	 * Some devices need the report size to be different than the
828 	 * endpoint size.
829 	 */
830 	if (dev->interface->cur_altsetting->desc.bInterfaceNumber == 0) {
831 		switch (dev->product_id) {
832 		case USB_DEVICE_ID_CODEMERCS_IOW56:
833 		case USB_DEVICE_ID_CODEMERCS_IOW56AM:
834 			dev->report_size = 7;
835 			break;
836 
837 		case USB_DEVICE_ID_CODEMERCS_IOW28:
838 		case USB_DEVICE_ID_CODEMERCS_IOW28L:
839 			dev->report_size = 4;
840 			break;
841 
842 		case USB_DEVICE_ID_CODEMERCS_IOW100:
843 			dev->report_size = 12;
844 			break;
845 		}
846 	}
847 
848 	/* create the urb and buffer for reading */
849 	dev->int_in_urb = usb_alloc_urb(0, GFP_KERNEL);
850 	if (!dev->int_in_urb)
851 		goto error;
852 	dev->int_in_buffer = kmalloc(dev->report_size, GFP_KERNEL);
853 	if (!dev->int_in_buffer)
854 		goto error;
855 	usb_fill_int_urb(dev->int_in_urb, dev->udev,
856 			 usb_rcvintpipe(dev->udev,
857 					dev->int_in_endpoint->bEndpointAddress),
858 			 dev->int_in_buffer, dev->report_size,
859 			 iowarrior_callback, dev,
860 			 dev->int_in_endpoint->bInterval);
861 	/* create an internal buffer for interrupt data from the device */
862 	dev->read_queue =
863 	    kmalloc_array(dev->report_size + 1, MAX_INTERRUPT_BUFFER,
864 			  GFP_KERNEL);
865 	if (!dev->read_queue)
866 		goto error;
867 	/* Get the serial-number of the chip */
868 	memset(dev->chip_serial, 0x00, sizeof(dev->chip_serial));
869 	usb_string(udev, udev->descriptor.iSerialNumber, dev->chip_serial,
870 		   sizeof(dev->chip_serial));
871 	if (strlen(dev->chip_serial) != 8)
872 		memset(dev->chip_serial, 0x00, sizeof(dev->chip_serial));
873 
874 	/* Set the idle timeout to 0, if this is interface 0 */
875 	if (dev->interface->cur_altsetting->desc.bInterfaceNumber == 0) {
876 	    usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
877 			    0x0A,
878 			    USB_TYPE_CLASS | USB_RECIP_INTERFACE, 0,
879 			    0, NULL, 0, USB_CTRL_SET_TIMEOUT);
880 	}
881 	/* allow device read and ioctl */
882 	dev->present = 1;
883 
884 	/* we can register the device now, as it is ready */
885 	usb_set_intfdata(interface, dev);
886 
887 	retval = usb_register_dev(interface, &iowarrior_class);
888 	if (retval) {
889 		/* something prevented us from registering this driver */
890 		dev_err(&interface->dev, "Not able to get a minor for this device.\n");
891 		goto error;
892 	}
893 
894 	dev->minor = interface->minor;
895 
896 	/* let the user know what node this device is now attached to */
897 	dev_info(&interface->dev, "IOWarrior product=0x%x, serial=%s interface=%d "
898 		 "now attached to iowarrior%d\n", dev->product_id, dev->chip_serial,
899 		 iface_desc->desc.bInterfaceNumber, dev->minor - IOWARRIOR_MINOR_BASE);
900 	return retval;
901 
902 error:
903 	iowarrior_delete(dev);
904 	return retval;
905 }
906 
907 /*
908  *	iowarrior_disconnect
909  *
910  *	Called by the usb core when the device is removed from the system.
911  */
iowarrior_disconnect(struct usb_interface * interface)912 static void iowarrior_disconnect(struct usb_interface *interface)
913 {
914 	struct iowarrior *dev = usb_get_intfdata(interface);
915 
916 	usb_deregister_dev(interface, &iowarrior_class);
917 
918 	mutex_lock(&dev->mutex);
919 
920 	/* prevent device read, write and ioctl */
921 	dev->present = 0;
922 
923 	if (dev->opened) {
924 		/* There is a process that holds a filedescriptor to the device ,
925 		   so we only shutdown read-/write-ops going on.
926 		   Deleting the device is postponed until close() was called.
927 		 */
928 		usb_kill_urb(dev->int_in_urb);
929 		usb_kill_anchored_urbs(&dev->submitted);
930 		wake_up_interruptible(&dev->read_wait);
931 		wake_up_interruptible(&dev->write_wait);
932 		mutex_unlock(&dev->mutex);
933 	} else {
934 		/* no process is using the device, cleanup now */
935 		mutex_unlock(&dev->mutex);
936 		iowarrior_delete(dev);
937 	}
938 }
939 
940 /* usb specific object needed to register this driver with the usb subsystem */
941 static struct usb_driver iowarrior_driver = {
942 	.name = "iowarrior",
943 	.probe = iowarrior_probe,
944 	.disconnect = iowarrior_disconnect,
945 	.id_table = iowarrior_ids,
946 };
947 
948 module_usb_driver(iowarrior_driver);
949