1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3 *
4 * Digianswer Bluetooth USB driver
5 *
6 * Copyright (C) 2004-2007 Marcel Holtmann <marcel@holtmann.org>
7 */
8
9 #include <linux/kernel.h>
10 #include <linux/module.h>
11 #include <linux/init.h>
12 #include <linux/slab.h>
13 #include <linux/types.h>
14 #include <linux/sched.h>
15 #include <linux/errno.h>
16 #include <linux/skbuff.h>
17
18 #include <linux/usb.h>
19
20 #include <net/bluetooth/bluetooth.h>
21 #include <net/bluetooth/hci_core.h>
22
23 #include "h4_recv.h"
24
25 #define VERSION "0.11"
26
27 static const struct usb_device_id bpa10x_table[] = {
28 /* Tektronix BPA 100/105 (Digianswer) */
29 { USB_DEVICE(0x08fd, 0x0002) },
30
31 { } /* Terminating entry */
32 };
33
34 MODULE_DEVICE_TABLE(usb, bpa10x_table);
35
36 struct bpa10x_data {
37 struct hci_dev *hdev;
38 struct usb_device *udev;
39
40 struct usb_anchor tx_anchor;
41 struct usb_anchor rx_anchor;
42
43 struct sk_buff *rx_skb[2];
44 };
45
bpa10x_tx_complete(struct urb * urb)46 static void bpa10x_tx_complete(struct urb *urb)
47 {
48 struct sk_buff *skb = urb->context;
49 struct hci_dev *hdev = (struct hci_dev *) skb->dev;
50
51 BT_DBG("%s urb %p status %d count %d", hdev->name,
52 urb, urb->status, urb->actual_length);
53
54 if (!test_bit(HCI_RUNNING, &hdev->flags))
55 goto done;
56
57 if (!urb->status)
58 hdev->stat.byte_tx += urb->transfer_buffer_length;
59 else
60 hdev->stat.err_tx++;
61
62 done:
63 kfree(urb->setup_packet);
64
65 kfree_skb(skb);
66 }
67
68 #define HCI_VENDOR_HDR_SIZE 5
69
70 #define HCI_RECV_VENDOR \
71 .type = HCI_VENDOR_PKT, \
72 .hlen = HCI_VENDOR_HDR_SIZE, \
73 .loff = 3, \
74 .lsize = 2, \
75 .maxlen = HCI_MAX_FRAME_SIZE
76
77 static const struct h4_recv_pkt bpa10x_recv_pkts[] = {
78 { H4_RECV_ACL, .recv = hci_recv_frame },
79 { H4_RECV_SCO, .recv = hci_recv_frame },
80 { H4_RECV_EVENT, .recv = hci_recv_frame },
81 { HCI_RECV_VENDOR, .recv = hci_recv_diag },
82 };
83
bpa10x_rx_complete(struct urb * urb)84 static void bpa10x_rx_complete(struct urb *urb)
85 {
86 struct hci_dev *hdev = urb->context;
87 struct bpa10x_data *data = hci_get_drvdata(hdev);
88 int err;
89
90 BT_DBG("%s urb %p status %d count %d", hdev->name,
91 urb, urb->status, urb->actual_length);
92
93 if (!test_bit(HCI_RUNNING, &hdev->flags))
94 return;
95
96 if (urb->status == 0) {
97 bool idx = usb_pipebulk(urb->pipe);
98
99 data->rx_skb[idx] = h4_recv_buf(hdev, data->rx_skb[idx],
100 urb->transfer_buffer,
101 urb->actual_length,
102 bpa10x_recv_pkts,
103 ARRAY_SIZE(bpa10x_recv_pkts));
104 if (IS_ERR(data->rx_skb[idx])) {
105 bt_dev_err(hdev, "corrupted event packet");
106 hdev->stat.err_rx++;
107 data->rx_skb[idx] = NULL;
108 }
109 }
110
111 usb_anchor_urb(urb, &data->rx_anchor);
112
113 err = usb_submit_urb(urb, GFP_ATOMIC);
114 if (err < 0) {
115 bt_dev_err(hdev, "urb %p failed to resubmit (%d)", urb, -err);
116 usb_unanchor_urb(urb);
117 }
118 }
119
bpa10x_submit_intr_urb(struct hci_dev * hdev)120 static inline int bpa10x_submit_intr_urb(struct hci_dev *hdev)
121 {
122 struct bpa10x_data *data = hci_get_drvdata(hdev);
123 struct urb *urb;
124 unsigned char *buf;
125 unsigned int pipe;
126 int err, size = 16;
127
128 BT_DBG("%s", hdev->name);
129
130 urb = usb_alloc_urb(0, GFP_KERNEL);
131 if (!urb)
132 return -ENOMEM;
133
134 buf = kmalloc(size, GFP_KERNEL);
135 if (!buf) {
136 usb_free_urb(urb);
137 return -ENOMEM;
138 }
139
140 pipe = usb_rcvintpipe(data->udev, 0x81);
141
142 usb_fill_int_urb(urb, data->udev, pipe, buf, size,
143 bpa10x_rx_complete, hdev, 1);
144
145 urb->transfer_flags |= URB_FREE_BUFFER;
146
147 usb_anchor_urb(urb, &data->rx_anchor);
148
149 err = usb_submit_urb(urb, GFP_KERNEL);
150 if (err < 0) {
151 bt_dev_err(hdev, "urb %p submission failed (%d)", urb, -err);
152 usb_unanchor_urb(urb);
153 }
154
155 usb_free_urb(urb);
156
157 return err;
158 }
159
bpa10x_submit_bulk_urb(struct hci_dev * hdev)160 static inline int bpa10x_submit_bulk_urb(struct hci_dev *hdev)
161 {
162 struct bpa10x_data *data = hci_get_drvdata(hdev);
163 struct urb *urb;
164 unsigned char *buf;
165 unsigned int pipe;
166 int err, size = 64;
167
168 BT_DBG("%s", hdev->name);
169
170 urb = usb_alloc_urb(0, GFP_KERNEL);
171 if (!urb)
172 return -ENOMEM;
173
174 buf = kmalloc(size, GFP_KERNEL);
175 if (!buf) {
176 usb_free_urb(urb);
177 return -ENOMEM;
178 }
179
180 pipe = usb_rcvbulkpipe(data->udev, 0x82);
181
182 usb_fill_bulk_urb(urb, data->udev, pipe,
183 buf, size, bpa10x_rx_complete, hdev);
184
185 urb->transfer_flags |= URB_FREE_BUFFER;
186
187 usb_anchor_urb(urb, &data->rx_anchor);
188
189 err = usb_submit_urb(urb, GFP_KERNEL);
190 if (err < 0) {
191 bt_dev_err(hdev, "urb %p submission failed (%d)", urb, -err);
192 usb_unanchor_urb(urb);
193 }
194
195 usb_free_urb(urb);
196
197 return err;
198 }
199
bpa10x_open(struct hci_dev * hdev)200 static int bpa10x_open(struct hci_dev *hdev)
201 {
202 struct bpa10x_data *data = hci_get_drvdata(hdev);
203 int err;
204
205 BT_DBG("%s", hdev->name);
206
207 err = bpa10x_submit_intr_urb(hdev);
208 if (err < 0)
209 goto error;
210
211 err = bpa10x_submit_bulk_urb(hdev);
212 if (err < 0)
213 goto error;
214
215 return 0;
216
217 error:
218 usb_kill_anchored_urbs(&data->rx_anchor);
219
220 return err;
221 }
222
bpa10x_close(struct hci_dev * hdev)223 static int bpa10x_close(struct hci_dev *hdev)
224 {
225 struct bpa10x_data *data = hci_get_drvdata(hdev);
226
227 BT_DBG("%s", hdev->name);
228
229 usb_kill_anchored_urbs(&data->rx_anchor);
230
231 return 0;
232 }
233
bpa10x_flush(struct hci_dev * hdev)234 static int bpa10x_flush(struct hci_dev *hdev)
235 {
236 struct bpa10x_data *data = hci_get_drvdata(hdev);
237
238 BT_DBG("%s", hdev->name);
239
240 usb_kill_anchored_urbs(&data->tx_anchor);
241
242 return 0;
243 }
244
bpa10x_setup(struct hci_dev * hdev)245 static int bpa10x_setup(struct hci_dev *hdev)
246 {
247 static const u8 req[] = { 0x07 };
248 struct sk_buff *skb;
249
250 BT_DBG("%s", hdev->name);
251
252 /* Read revision string */
253 skb = __hci_cmd_sync(hdev, 0xfc0e, sizeof(req), req, HCI_INIT_TIMEOUT);
254 if (IS_ERR(skb))
255 return PTR_ERR(skb);
256
257 bt_dev_info(hdev, "%s", (char *)(skb->data + 1));
258
259 hci_set_fw_info(hdev, "%s", skb->data + 1);
260
261 kfree_skb(skb);
262 return 0;
263 }
264
bpa10x_send_frame(struct hci_dev * hdev,struct sk_buff * skb)265 static int bpa10x_send_frame(struct hci_dev *hdev, struct sk_buff *skb)
266 {
267 struct bpa10x_data *data = hci_get_drvdata(hdev);
268 struct usb_ctrlrequest *dr;
269 struct urb *urb;
270 unsigned int pipe;
271 int err;
272
273 BT_DBG("%s", hdev->name);
274
275 skb->dev = (void *) hdev;
276
277 urb = usb_alloc_urb(0, GFP_KERNEL);
278 if (!urb)
279 return -ENOMEM;
280
281 /* Prepend skb with frame type */
282 *(u8 *)skb_push(skb, 1) = hci_skb_pkt_type(skb);
283
284 switch (hci_skb_pkt_type(skb)) {
285 case HCI_COMMAND_PKT:
286 dr = kmalloc(sizeof(*dr), GFP_KERNEL);
287 if (!dr) {
288 usb_free_urb(urb);
289 return -ENOMEM;
290 }
291
292 dr->bRequestType = USB_TYPE_VENDOR;
293 dr->bRequest = 0;
294 dr->wIndex = 0;
295 dr->wValue = 0;
296 dr->wLength = __cpu_to_le16(skb->len);
297
298 pipe = usb_sndctrlpipe(data->udev, 0x00);
299
300 usb_fill_control_urb(urb, data->udev, pipe, (void *) dr,
301 skb->data, skb->len, bpa10x_tx_complete, skb);
302
303 hdev->stat.cmd_tx++;
304 break;
305
306 case HCI_ACLDATA_PKT:
307 pipe = usb_sndbulkpipe(data->udev, 0x02);
308
309 usb_fill_bulk_urb(urb, data->udev, pipe,
310 skb->data, skb->len, bpa10x_tx_complete, skb);
311
312 hdev->stat.acl_tx++;
313 break;
314
315 case HCI_SCODATA_PKT:
316 pipe = usb_sndbulkpipe(data->udev, 0x02);
317
318 usb_fill_bulk_urb(urb, data->udev, pipe,
319 skb->data, skb->len, bpa10x_tx_complete, skb);
320
321 hdev->stat.sco_tx++;
322 break;
323
324 default:
325 usb_free_urb(urb);
326 return -EILSEQ;
327 }
328
329 usb_anchor_urb(urb, &data->tx_anchor);
330
331 err = usb_submit_urb(urb, GFP_KERNEL);
332 if (err < 0) {
333 bt_dev_err(hdev, "urb %p submission failed", urb);
334 kfree(urb->setup_packet);
335 usb_unanchor_urb(urb);
336 }
337
338 usb_free_urb(urb);
339
340 return err;
341 }
342
bpa10x_set_diag(struct hci_dev * hdev,bool enable)343 static int bpa10x_set_diag(struct hci_dev *hdev, bool enable)
344 {
345 const u8 req[] = { 0x00, enable };
346 struct sk_buff *skb;
347
348 BT_DBG("%s", hdev->name);
349
350 if (!test_bit(HCI_RUNNING, &hdev->flags))
351 return -ENETDOWN;
352
353 /* Enable sniffer operation */
354 skb = __hci_cmd_sync(hdev, 0xfc0e, sizeof(req), req, HCI_INIT_TIMEOUT);
355 if (IS_ERR(skb))
356 return PTR_ERR(skb);
357
358 kfree_skb(skb);
359 return 0;
360 }
361
bpa10x_probe(struct usb_interface * intf,const struct usb_device_id * id)362 static int bpa10x_probe(struct usb_interface *intf,
363 const struct usb_device_id *id)
364 {
365 struct bpa10x_data *data;
366 struct hci_dev *hdev;
367 int err;
368
369 BT_DBG("intf %p id %p", intf, id);
370
371 if (intf->cur_altsetting->desc.bInterfaceNumber != 0)
372 return -ENODEV;
373
374 data = devm_kzalloc(&intf->dev, sizeof(*data), GFP_KERNEL);
375 if (!data)
376 return -ENOMEM;
377
378 data->udev = interface_to_usbdev(intf);
379
380 init_usb_anchor(&data->tx_anchor);
381 init_usb_anchor(&data->rx_anchor);
382
383 hdev = hci_alloc_dev();
384 if (!hdev)
385 return -ENOMEM;
386
387 hdev->bus = HCI_USB;
388 hci_set_drvdata(hdev, data);
389
390 data->hdev = hdev;
391
392 SET_HCIDEV_DEV(hdev, &intf->dev);
393
394 hdev->open = bpa10x_open;
395 hdev->close = bpa10x_close;
396 hdev->flush = bpa10x_flush;
397 hdev->setup = bpa10x_setup;
398 hdev->send = bpa10x_send_frame;
399 hdev->set_diag = bpa10x_set_diag;
400
401 set_bit(HCI_QUIRK_RESET_ON_CLOSE, &hdev->quirks);
402
403 err = hci_register_dev(hdev);
404 if (err < 0) {
405 hci_free_dev(hdev);
406 return err;
407 }
408
409 usb_set_intfdata(intf, data);
410
411 return 0;
412 }
413
bpa10x_disconnect(struct usb_interface * intf)414 static void bpa10x_disconnect(struct usb_interface *intf)
415 {
416 struct bpa10x_data *data = usb_get_intfdata(intf);
417
418 BT_DBG("intf %p", intf);
419
420 if (!data)
421 return;
422
423 usb_set_intfdata(intf, NULL);
424
425 hci_unregister_dev(data->hdev);
426
427 hci_free_dev(data->hdev);
428 kfree_skb(data->rx_skb[0]);
429 kfree_skb(data->rx_skb[1]);
430 }
431
432 static struct usb_driver bpa10x_driver = {
433 .name = "bpa10x",
434 .probe = bpa10x_probe,
435 .disconnect = bpa10x_disconnect,
436 .id_table = bpa10x_table,
437 .disable_hub_initiated_lpm = 1,
438 };
439
440 module_usb_driver(bpa10x_driver);
441
442 MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
443 MODULE_DESCRIPTION("Digianswer Bluetooth USB driver ver " VERSION);
444 MODULE_VERSION(VERSION);
445 MODULE_LICENSE("GPL");
446