1 // SPDX-License-Identifier: GPL-2.0-or-later 2 /* 3 * 4 * Digianswer Bluetooth USB driver 5 * 6 * Copyright (C) 2004-2007 Marcel Holtmann <marcel@holtmann.org> 7 */ 8 9 #include <linux/kernel.h> 10 #include <linux/module.h> 11 #include <linux/init.h> 12 #include <linux/slab.h> 13 #include <linux/types.h> 14 #include <linux/sched.h> 15 #include <linux/errno.h> 16 #include <linux/skbuff.h> 17 18 #include <linux/usb.h> 19 20 #include <net/bluetooth/bluetooth.h> 21 #include <net/bluetooth/hci_core.h> 22 23 #include "h4_recv.h" 24 25 #define VERSION "0.11" 26 27 static const struct usb_device_id bpa10x_table[] = { 28 /* Tektronix BPA 100/105 (Digianswer) */ 29 { USB_DEVICE(0x08fd, 0x0002) }, 30 31 { } /* Terminating entry */ 32 }; 33 34 MODULE_DEVICE_TABLE(usb, bpa10x_table); 35 36 struct bpa10x_data { 37 struct hci_dev *hdev; 38 struct usb_device *udev; 39 40 struct usb_anchor tx_anchor; 41 struct usb_anchor rx_anchor; 42 43 struct sk_buff *rx_skb[2]; 44 }; 45 46 static void bpa10x_tx_complete(struct urb *urb) 47 { 48 struct sk_buff *skb = urb->context; 49 struct hci_dev *hdev = (struct hci_dev *) skb->dev; 50 51 BT_DBG("%s urb %p status %d count %d", hdev->name, 52 urb, urb->status, urb->actual_length); 53 54 if (!test_bit(HCI_RUNNING, &hdev->flags)) 55 goto done; 56 57 if (!urb->status) 58 hdev->stat.byte_tx += urb->transfer_buffer_length; 59 else 60 hdev->stat.err_tx++; 61 62 done: 63 kfree(urb->setup_packet); 64 65 kfree_skb(skb); 66 } 67 68 #define HCI_VENDOR_HDR_SIZE 5 69 70 #define HCI_RECV_VENDOR \ 71 .type = HCI_VENDOR_PKT, \ 72 .hlen = HCI_VENDOR_HDR_SIZE, \ 73 .loff = 3, \ 74 .lsize = 2, \ 75 .maxlen = HCI_MAX_FRAME_SIZE 76 77 static const struct h4_recv_pkt bpa10x_recv_pkts[] = { 78 { H4_RECV_ACL, .recv = hci_recv_frame }, 79 { H4_RECV_SCO, .recv = hci_recv_frame }, 80 { H4_RECV_EVENT, .recv = hci_recv_frame }, 81 { HCI_RECV_VENDOR, .recv = hci_recv_diag }, 82 }; 83 84 static void bpa10x_rx_complete(struct urb *urb) 85 { 86 struct hci_dev *hdev = urb->context; 87 struct bpa10x_data *data = hci_get_drvdata(hdev); 88 int err; 89 90 BT_DBG("%s urb %p status %d count %d", hdev->name, 91 urb, urb->status, urb->actual_length); 92 93 if (!test_bit(HCI_RUNNING, &hdev->flags)) 94 return; 95 96 if (urb->status == 0) { 97 bool idx = usb_pipebulk(urb->pipe); 98 99 data->rx_skb[idx] = h4_recv_buf(hdev, data->rx_skb[idx], 100 urb->transfer_buffer, 101 urb->actual_length, 102 bpa10x_recv_pkts, 103 ARRAY_SIZE(bpa10x_recv_pkts)); 104 if (IS_ERR(data->rx_skb[idx])) { 105 bt_dev_err(hdev, "corrupted event packet"); 106 hdev->stat.err_rx++; 107 data->rx_skb[idx] = NULL; 108 } 109 } 110 111 usb_anchor_urb(urb, &data->rx_anchor); 112 113 err = usb_submit_urb(urb, GFP_ATOMIC); 114 if (err < 0) { 115 bt_dev_err(hdev, "urb %p failed to resubmit (%d)", urb, -err); 116 usb_unanchor_urb(urb); 117 } 118 } 119 120 static inline int bpa10x_submit_intr_urb(struct hci_dev *hdev) 121 { 122 struct bpa10x_data *data = hci_get_drvdata(hdev); 123 struct urb *urb; 124 unsigned char *buf; 125 unsigned int pipe; 126 int err, size = 16; 127 128 BT_DBG("%s", hdev->name); 129 130 urb = usb_alloc_urb(0, GFP_KERNEL); 131 if (!urb) 132 return -ENOMEM; 133 134 buf = kmalloc(size, GFP_KERNEL); 135 if (!buf) { 136 usb_free_urb(urb); 137 return -ENOMEM; 138 } 139 140 pipe = usb_rcvintpipe(data->udev, 0x81); 141 142 usb_fill_int_urb(urb, data->udev, pipe, buf, size, 143 bpa10x_rx_complete, hdev, 1); 144 145 urb->transfer_flags |= URB_FREE_BUFFER; 146 147 usb_anchor_urb(urb, &data->rx_anchor); 148 149 err = usb_submit_urb(urb, GFP_KERNEL); 150 if (err < 0) { 151 bt_dev_err(hdev, "urb %p submission failed (%d)", urb, -err); 152 usb_unanchor_urb(urb); 153 } 154 155 usb_free_urb(urb); 156 157 return err; 158 } 159 160 static inline int bpa10x_submit_bulk_urb(struct hci_dev *hdev) 161 { 162 struct bpa10x_data *data = hci_get_drvdata(hdev); 163 struct urb *urb; 164 unsigned char *buf; 165 unsigned int pipe; 166 int err, size = 64; 167 168 BT_DBG("%s", hdev->name); 169 170 urb = usb_alloc_urb(0, GFP_KERNEL); 171 if (!urb) 172 return -ENOMEM; 173 174 buf = kmalloc(size, GFP_KERNEL); 175 if (!buf) { 176 usb_free_urb(urb); 177 return -ENOMEM; 178 } 179 180 pipe = usb_rcvbulkpipe(data->udev, 0x82); 181 182 usb_fill_bulk_urb(urb, data->udev, pipe, 183 buf, size, bpa10x_rx_complete, hdev); 184 185 urb->transfer_flags |= URB_FREE_BUFFER; 186 187 usb_anchor_urb(urb, &data->rx_anchor); 188 189 err = usb_submit_urb(urb, GFP_KERNEL); 190 if (err < 0) { 191 bt_dev_err(hdev, "urb %p submission failed (%d)", urb, -err); 192 usb_unanchor_urb(urb); 193 } 194 195 usb_free_urb(urb); 196 197 return err; 198 } 199 200 static int bpa10x_open(struct hci_dev *hdev) 201 { 202 struct bpa10x_data *data = hci_get_drvdata(hdev); 203 int err; 204 205 BT_DBG("%s", hdev->name); 206 207 err = bpa10x_submit_intr_urb(hdev); 208 if (err < 0) 209 goto error; 210 211 err = bpa10x_submit_bulk_urb(hdev); 212 if (err < 0) 213 goto error; 214 215 return 0; 216 217 error: 218 usb_kill_anchored_urbs(&data->rx_anchor); 219 220 return err; 221 } 222 223 static int bpa10x_close(struct hci_dev *hdev) 224 { 225 struct bpa10x_data *data = hci_get_drvdata(hdev); 226 227 BT_DBG("%s", hdev->name); 228 229 usb_kill_anchored_urbs(&data->rx_anchor); 230 231 return 0; 232 } 233 234 static int bpa10x_flush(struct hci_dev *hdev) 235 { 236 struct bpa10x_data *data = hci_get_drvdata(hdev); 237 238 BT_DBG("%s", hdev->name); 239 240 usb_kill_anchored_urbs(&data->tx_anchor); 241 242 return 0; 243 } 244 245 static int bpa10x_setup(struct hci_dev *hdev) 246 { 247 static const u8 req[] = { 0x07 }; 248 struct sk_buff *skb; 249 250 BT_DBG("%s", hdev->name); 251 252 /* Read revision string */ 253 skb = __hci_cmd_sync(hdev, 0xfc0e, sizeof(req), req, HCI_INIT_TIMEOUT); 254 if (IS_ERR(skb)) 255 return PTR_ERR(skb); 256 257 bt_dev_info(hdev, "%s", (char *)(skb->data + 1)); 258 259 hci_set_fw_info(hdev, "%s", skb->data + 1); 260 261 kfree_skb(skb); 262 return 0; 263 } 264 265 static int bpa10x_send_frame(struct hci_dev *hdev, struct sk_buff *skb) 266 { 267 struct bpa10x_data *data = hci_get_drvdata(hdev); 268 struct usb_ctrlrequest *dr; 269 struct urb *urb; 270 unsigned int pipe; 271 int err; 272 273 BT_DBG("%s", hdev->name); 274 275 skb->dev = (void *) hdev; 276 277 urb = usb_alloc_urb(0, GFP_KERNEL); 278 if (!urb) 279 return -ENOMEM; 280 281 /* Prepend skb with frame type */ 282 *(u8 *)skb_push(skb, 1) = hci_skb_pkt_type(skb); 283 284 switch (hci_skb_pkt_type(skb)) { 285 case HCI_COMMAND_PKT: 286 dr = kmalloc(sizeof(*dr), GFP_KERNEL); 287 if (!dr) { 288 usb_free_urb(urb); 289 return -ENOMEM; 290 } 291 292 dr->bRequestType = USB_TYPE_VENDOR; 293 dr->bRequest = 0; 294 dr->wIndex = 0; 295 dr->wValue = 0; 296 dr->wLength = __cpu_to_le16(skb->len); 297 298 pipe = usb_sndctrlpipe(data->udev, 0x00); 299 300 usb_fill_control_urb(urb, data->udev, pipe, (void *) dr, 301 skb->data, skb->len, bpa10x_tx_complete, skb); 302 303 hdev->stat.cmd_tx++; 304 break; 305 306 case HCI_ACLDATA_PKT: 307 pipe = usb_sndbulkpipe(data->udev, 0x02); 308 309 usb_fill_bulk_urb(urb, data->udev, pipe, 310 skb->data, skb->len, bpa10x_tx_complete, skb); 311 312 hdev->stat.acl_tx++; 313 break; 314 315 case HCI_SCODATA_PKT: 316 pipe = usb_sndbulkpipe(data->udev, 0x02); 317 318 usb_fill_bulk_urb(urb, data->udev, pipe, 319 skb->data, skb->len, bpa10x_tx_complete, skb); 320 321 hdev->stat.sco_tx++; 322 break; 323 324 default: 325 usb_free_urb(urb); 326 return -EILSEQ; 327 } 328 329 usb_anchor_urb(urb, &data->tx_anchor); 330 331 err = usb_submit_urb(urb, GFP_KERNEL); 332 if (err < 0) { 333 bt_dev_err(hdev, "urb %p submission failed", urb); 334 kfree(urb->setup_packet); 335 usb_unanchor_urb(urb); 336 } 337 338 usb_free_urb(urb); 339 340 return err; 341 } 342 343 static int bpa10x_set_diag(struct hci_dev *hdev, bool enable) 344 { 345 const u8 req[] = { 0x00, enable }; 346 struct sk_buff *skb; 347 348 BT_DBG("%s", hdev->name); 349 350 if (!test_bit(HCI_RUNNING, &hdev->flags)) 351 return -ENETDOWN; 352 353 /* Enable sniffer operation */ 354 skb = __hci_cmd_sync(hdev, 0xfc0e, sizeof(req), req, HCI_INIT_TIMEOUT); 355 if (IS_ERR(skb)) 356 return PTR_ERR(skb); 357 358 kfree_skb(skb); 359 return 0; 360 } 361 362 static int bpa10x_probe(struct usb_interface *intf, 363 const struct usb_device_id *id) 364 { 365 struct bpa10x_data *data; 366 struct hci_dev *hdev; 367 int err; 368 369 BT_DBG("intf %p id %p", intf, id); 370 371 if (intf->cur_altsetting->desc.bInterfaceNumber != 0) 372 return -ENODEV; 373 374 data = devm_kzalloc(&intf->dev, sizeof(*data), GFP_KERNEL); 375 if (!data) 376 return -ENOMEM; 377 378 data->udev = interface_to_usbdev(intf); 379 380 init_usb_anchor(&data->tx_anchor); 381 init_usb_anchor(&data->rx_anchor); 382 383 hdev = hci_alloc_dev(); 384 if (!hdev) 385 return -ENOMEM; 386 387 hdev->bus = HCI_USB; 388 hci_set_drvdata(hdev, data); 389 390 data->hdev = hdev; 391 392 SET_HCIDEV_DEV(hdev, &intf->dev); 393 394 hdev->open = bpa10x_open; 395 hdev->close = bpa10x_close; 396 hdev->flush = bpa10x_flush; 397 hdev->setup = bpa10x_setup; 398 hdev->send = bpa10x_send_frame; 399 hdev->set_diag = bpa10x_set_diag; 400 401 set_bit(HCI_QUIRK_RESET_ON_CLOSE, &hdev->quirks); 402 403 err = hci_register_dev(hdev); 404 if (err < 0) { 405 hci_free_dev(hdev); 406 return err; 407 } 408 409 usb_set_intfdata(intf, data); 410 411 return 0; 412 } 413 414 static void bpa10x_disconnect(struct usb_interface *intf) 415 { 416 struct bpa10x_data *data = usb_get_intfdata(intf); 417 418 BT_DBG("intf %p", intf); 419 420 if (!data) 421 return; 422 423 usb_set_intfdata(intf, NULL); 424 425 hci_unregister_dev(data->hdev); 426 427 hci_free_dev(data->hdev); 428 kfree_skb(data->rx_skb[0]); 429 kfree_skb(data->rx_skb[1]); 430 } 431 432 static struct usb_driver bpa10x_driver = { 433 .name = "bpa10x", 434 .probe = bpa10x_probe, 435 .disconnect = bpa10x_disconnect, 436 .id_table = bpa10x_table, 437 .disable_hub_initiated_lpm = 1, 438 }; 439 440 module_usb_driver(bpa10x_driver); 441 442 MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>"); 443 MODULE_DESCRIPTION("Digianswer Bluetooth USB driver ver " VERSION); 444 MODULE_VERSION(VERSION); 445 MODULE_LICENSE("GPL"); 446