1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3  * HID driver for Nintendo Wii / Wii U peripherals
4  * Copyright (c) 2011-2013 David Herrmann <dh.herrmann@gmail.com>
5  */
6 
7 /*
8  */
9 
10 #include <linux/completion.h>
11 #include <linux/device.h>
12 #include <linux/hid.h>
13 #include <linux/input.h>
14 #include <linux/module.h>
15 #include <linux/mutex.h>
16 #include <linux/spinlock.h>
17 #include "hid-ids.h"
18 #include "hid-wiimote.h"
19 
20 /* output queue handling */
21 
22 static int wiimote_hid_send(struct hid_device *hdev, __u8 *buffer,
23 			    size_t count)
24 {
25 	__u8 *buf;
26 	int ret;
27 
28 	if (!hdev->ll_driver->output_report)
29 		return -ENODEV;
30 
31 	buf = kmemdup(buffer, count, GFP_KERNEL);
32 	if (!buf)
33 		return -ENOMEM;
34 
35 	ret = hid_hw_output_report(hdev, buf, count);
36 
37 	kfree(buf);
38 	return ret;
39 }
40 
41 static void wiimote_queue_worker(struct work_struct *work)
42 {
43 	struct wiimote_queue *queue = container_of(work, struct wiimote_queue,
44 						   worker);
45 	struct wiimote_data *wdata = container_of(queue, struct wiimote_data,
46 						  queue);
47 	unsigned long flags;
48 	int ret;
49 
50 	spin_lock_irqsave(&wdata->queue.lock, flags);
51 
52 	while (wdata->queue.head != wdata->queue.tail) {
53 		spin_unlock_irqrestore(&wdata->queue.lock, flags);
54 		ret = wiimote_hid_send(wdata->hdev,
55 				 wdata->queue.outq[wdata->queue.tail].data,
56 				 wdata->queue.outq[wdata->queue.tail].size);
57 		if (ret < 0) {
58 			spin_lock_irqsave(&wdata->state.lock, flags);
59 			wiimote_cmd_abort(wdata);
60 			spin_unlock_irqrestore(&wdata->state.lock, flags);
61 		}
62 		spin_lock_irqsave(&wdata->queue.lock, flags);
63 
64 		wdata->queue.tail = (wdata->queue.tail + 1) % WIIMOTE_BUFSIZE;
65 	}
66 
67 	spin_unlock_irqrestore(&wdata->queue.lock, flags);
68 }
69 
70 static void wiimote_queue(struct wiimote_data *wdata, const __u8 *buffer,
71 								size_t count)
72 {
73 	unsigned long flags;
74 	__u8 newhead;
75 
76 	if (count > HID_MAX_BUFFER_SIZE) {
77 		hid_warn(wdata->hdev, "Sending too large output report\n");
78 
79 		spin_lock_irqsave(&wdata->queue.lock, flags);
80 		goto out_error;
81 	}
82 
83 	/*
84 	 * Copy new request into our output queue and check whether the
85 	 * queue is full. If it is full, discard this request.
86 	 * If it is empty we need to start a new worker that will
87 	 * send out the buffer to the hid device.
88 	 * If the queue is not empty, then there must be a worker
89 	 * that is currently sending out our buffer and this worker
90 	 * will reschedule itself until the queue is empty.
91 	 */
92 
93 	spin_lock_irqsave(&wdata->queue.lock, flags);
94 
95 	memcpy(wdata->queue.outq[wdata->queue.head].data, buffer, count);
96 	wdata->queue.outq[wdata->queue.head].size = count;
97 	newhead = (wdata->queue.head + 1) % WIIMOTE_BUFSIZE;
98 
99 	if (wdata->queue.head == wdata->queue.tail) {
100 		wdata->queue.head = newhead;
101 		schedule_work(&wdata->queue.worker);
102 	} else if (newhead != wdata->queue.tail) {
103 		wdata->queue.head = newhead;
104 	} else {
105 		hid_warn(wdata->hdev, "Output queue is full");
106 		goto out_error;
107 	}
108 
109 	goto out_unlock;
110 
111 out_error:
112 	wiimote_cmd_abort(wdata);
113 out_unlock:
114 	spin_unlock_irqrestore(&wdata->queue.lock, flags);
115 }
116 
117 /*
118  * This sets the rumble bit on the given output report if rumble is
119  * currently enabled.
120  * \cmd1 must point to the second byte in the output report => &cmd[1]
121  * This must be called on nearly every output report before passing it
122  * into the output queue!
123  */
124 static inline void wiiproto_keep_rumble(struct wiimote_data *wdata, __u8 *cmd1)
125 {
126 	if (wdata->state.flags & WIIPROTO_FLAG_RUMBLE)
127 		*cmd1 |= 0x01;
128 }
129 
130 void wiiproto_req_rumble(struct wiimote_data *wdata, __u8 rumble)
131 {
132 	__u8 cmd[2];
133 
134 	rumble = !!rumble;
135 	if (rumble == !!(wdata->state.flags & WIIPROTO_FLAG_RUMBLE))
136 		return;
137 
138 	if (rumble)
139 		wdata->state.flags |= WIIPROTO_FLAG_RUMBLE;
140 	else
141 		wdata->state.flags &= ~WIIPROTO_FLAG_RUMBLE;
142 
143 	cmd[0] = WIIPROTO_REQ_RUMBLE;
144 	cmd[1] = 0;
145 
146 	wiiproto_keep_rumble(wdata, &cmd[1]);
147 	wiimote_queue(wdata, cmd, sizeof(cmd));
148 }
149 
150 void wiiproto_req_leds(struct wiimote_data *wdata, int leds)
151 {
152 	__u8 cmd[2];
153 
154 	leds &= WIIPROTO_FLAGS_LEDS;
155 	if ((wdata->state.flags & WIIPROTO_FLAGS_LEDS) == leds)
156 		return;
157 	wdata->state.flags = (wdata->state.flags & ~WIIPROTO_FLAGS_LEDS) | leds;
158 
159 	cmd[0] = WIIPROTO_REQ_LED;
160 	cmd[1] = 0;
161 
162 	if (leds & WIIPROTO_FLAG_LED1)
163 		cmd[1] |= 0x10;
164 	if (leds & WIIPROTO_FLAG_LED2)
165 		cmd[1] |= 0x20;
166 	if (leds & WIIPROTO_FLAG_LED3)
167 		cmd[1] |= 0x40;
168 	if (leds & WIIPROTO_FLAG_LED4)
169 		cmd[1] |= 0x80;
170 
171 	wiiproto_keep_rumble(wdata, &cmd[1]);
172 	wiimote_queue(wdata, cmd, sizeof(cmd));
173 }
174 
175 /*
176  * Check what peripherals of the wiimote are currently
177  * active and select a proper DRM that supports all of
178  * the requested data inputs.
179  *
180  * Not all combinations are actually supported. The following
181  * combinations work only with limitations:
182  *  - IR cam in extended or full mode disables any data transmission
183  *    of extension controllers. There is no DRM mode that supports
184  *    extension bytes plus extended/full IR.
185  *  - IR cam with accelerometer and extension *_EXT8 is not supported.
186  *    However, all extensions that need *_EXT8 are devices that don't
187  *    support IR cameras. Hence, this shouldn't happen under normal
188  *    operation.
189  *  - *_EXT16 is only supported in combination with buttons and
190  *    accelerometer. No IR or similar can be active simultaneously. As
191  *    above, all modules that require it are mutually exclusive with
192  *    IR/etc. so this doesn't matter.
193  */
194 static __u8 select_drm(struct wiimote_data *wdata)
195 {
196 	__u8 ir = wdata->state.flags & WIIPROTO_FLAGS_IR;
197 	bool ext;
198 
199 	ext = (wdata->state.flags & WIIPROTO_FLAG_EXT_USED) ||
200 	      (wdata->state.flags & WIIPROTO_FLAG_MP_USED);
201 
202 	/* some 3rd-party balance-boards are hard-coded to KEE, *sigh* */
203 	if (wdata->state.devtype == WIIMOTE_DEV_BALANCE_BOARD) {
204 		if (ext)
205 			return WIIPROTO_REQ_DRM_KEE;
206 		else
207 			return WIIPROTO_REQ_DRM_K;
208 	}
209 
210 	if (ir == WIIPROTO_FLAG_IR_BASIC) {
211 		if (wdata->state.flags & WIIPROTO_FLAG_ACCEL) {
212 			/* GEN10 and ealier devices bind IR formats to DRMs.
213 			 * Hence, we cannot use DRM_KAI here as it might be
214 			 * bound to IR_EXT. Use DRM_KAIE unconditionally so we
215 			 * work with all devices and our parsers can use the
216 			 * fixed formats, too. */
217 			return WIIPROTO_REQ_DRM_KAIE;
218 		} else {
219 			return WIIPROTO_REQ_DRM_KIE;
220 		}
221 	} else if (ir == WIIPROTO_FLAG_IR_EXT) {
222 		return WIIPROTO_REQ_DRM_KAI;
223 	} else if (ir == WIIPROTO_FLAG_IR_FULL) {
224 		return WIIPROTO_REQ_DRM_SKAI1;
225 	} else {
226 		if (wdata->state.flags & WIIPROTO_FLAG_ACCEL) {
227 			if (ext)
228 				return WIIPROTO_REQ_DRM_KAE;
229 			else
230 				return WIIPROTO_REQ_DRM_KA;
231 		} else {
232 			if (ext)
233 				return WIIPROTO_REQ_DRM_KEE;
234 			else
235 				return WIIPROTO_REQ_DRM_K;
236 		}
237 	}
238 }
239 
240 void wiiproto_req_drm(struct wiimote_data *wdata, __u8 drm)
241 {
242 	__u8 cmd[3];
243 
244 	if (wdata->state.flags & WIIPROTO_FLAG_DRM_LOCKED)
245 		drm = wdata->state.drm;
246 	else if (drm == WIIPROTO_REQ_NULL)
247 		drm = select_drm(wdata);
248 
249 	cmd[0] = WIIPROTO_REQ_DRM;
250 	cmd[1] = 0;
251 	cmd[2] = drm;
252 
253 	wdata->state.drm = drm;
254 	wiiproto_keep_rumble(wdata, &cmd[1]);
255 	wiimote_queue(wdata, cmd, sizeof(cmd));
256 }
257 
258 void wiiproto_req_status(struct wiimote_data *wdata)
259 {
260 	__u8 cmd[2];
261 
262 	cmd[0] = WIIPROTO_REQ_SREQ;
263 	cmd[1] = 0;
264 
265 	wiiproto_keep_rumble(wdata, &cmd[1]);
266 	wiimote_queue(wdata, cmd, sizeof(cmd));
267 }
268 
269 void wiiproto_req_accel(struct wiimote_data *wdata, __u8 accel)
270 {
271 	accel = !!accel;
272 	if (accel == !!(wdata->state.flags & WIIPROTO_FLAG_ACCEL))
273 		return;
274 
275 	if (accel)
276 		wdata->state.flags |= WIIPROTO_FLAG_ACCEL;
277 	else
278 		wdata->state.flags &= ~WIIPROTO_FLAG_ACCEL;
279 
280 	wiiproto_req_drm(wdata, WIIPROTO_REQ_NULL);
281 }
282 
283 void wiiproto_req_ir1(struct wiimote_data *wdata, __u8 flags)
284 {
285 	__u8 cmd[2];
286 
287 	cmd[0] = WIIPROTO_REQ_IR1;
288 	cmd[1] = flags;
289 
290 	wiiproto_keep_rumble(wdata, &cmd[1]);
291 	wiimote_queue(wdata, cmd, sizeof(cmd));
292 }
293 
294 void wiiproto_req_ir2(struct wiimote_data *wdata, __u8 flags)
295 {
296 	__u8 cmd[2];
297 
298 	cmd[0] = WIIPROTO_REQ_IR2;
299 	cmd[1] = flags;
300 
301 	wiiproto_keep_rumble(wdata, &cmd[1]);
302 	wiimote_queue(wdata, cmd, sizeof(cmd));
303 }
304 
305 #define wiiproto_req_wreg(wdata, os, buf, sz) \
306 			wiiproto_req_wmem((wdata), false, (os), (buf), (sz))
307 
308 #define wiiproto_req_weeprom(wdata, os, buf, sz) \
309 			wiiproto_req_wmem((wdata), true, (os), (buf), (sz))
310 
311 static void wiiproto_req_wmem(struct wiimote_data *wdata, bool eeprom,
312 				__u32 offset, const __u8 *buf, __u8 size)
313 {
314 	__u8 cmd[22];
315 
316 	if (size > 16 || size == 0) {
317 		hid_warn(wdata->hdev, "Invalid length %d wmem request\n", size);
318 		return;
319 	}
320 
321 	memset(cmd, 0, sizeof(cmd));
322 	cmd[0] = WIIPROTO_REQ_WMEM;
323 	cmd[2] = (offset >> 16) & 0xff;
324 	cmd[3] = (offset >> 8) & 0xff;
325 	cmd[4] = offset & 0xff;
326 	cmd[5] = size;
327 	memcpy(&cmd[6], buf, size);
328 
329 	if (!eeprom)
330 		cmd[1] |= 0x04;
331 
332 	wiiproto_keep_rumble(wdata, &cmd[1]);
333 	wiimote_queue(wdata, cmd, sizeof(cmd));
334 }
335 
336 void wiiproto_req_rmem(struct wiimote_data *wdata, bool eeprom, __u32 offset,
337 								__u16 size)
338 {
339 	__u8 cmd[7];
340 
341 	if (size == 0) {
342 		hid_warn(wdata->hdev, "Invalid length %d rmem request\n", size);
343 		return;
344 	}
345 
346 	cmd[0] = WIIPROTO_REQ_RMEM;
347 	cmd[1] = 0;
348 	cmd[2] = (offset >> 16) & 0xff;
349 	cmd[3] = (offset >> 8) & 0xff;
350 	cmd[4] = offset & 0xff;
351 	cmd[5] = (size >> 8) & 0xff;
352 	cmd[6] = size & 0xff;
353 
354 	if (!eeprom)
355 		cmd[1] |= 0x04;
356 
357 	wiiproto_keep_rumble(wdata, &cmd[1]);
358 	wiimote_queue(wdata, cmd, sizeof(cmd));
359 }
360 
361 /* requries the cmd-mutex to be held */
362 int wiimote_cmd_write(struct wiimote_data *wdata, __u32 offset,
363 						const __u8 *wmem, __u8 size)
364 {
365 	unsigned long flags;
366 	int ret;
367 
368 	spin_lock_irqsave(&wdata->state.lock, flags);
369 	wiimote_cmd_set(wdata, WIIPROTO_REQ_WMEM, 0);
370 	wiiproto_req_wreg(wdata, offset, wmem, size);
371 	spin_unlock_irqrestore(&wdata->state.lock, flags);
372 
373 	ret = wiimote_cmd_wait(wdata);
374 	if (!ret && wdata->state.cmd_err)
375 		ret = -EIO;
376 
377 	return ret;
378 }
379 
380 /* requries the cmd-mutex to be held */
381 ssize_t wiimote_cmd_read(struct wiimote_data *wdata, __u32 offset, __u8 *rmem,
382 								__u8 size)
383 {
384 	unsigned long flags;
385 	ssize_t ret;
386 
387 	spin_lock_irqsave(&wdata->state.lock, flags);
388 	wdata->state.cmd_read_size = size;
389 	wdata->state.cmd_read_buf = rmem;
390 	wiimote_cmd_set(wdata, WIIPROTO_REQ_RMEM, offset & 0xffff);
391 	wiiproto_req_rreg(wdata, offset, size);
392 	spin_unlock_irqrestore(&wdata->state.lock, flags);
393 
394 	ret = wiimote_cmd_wait(wdata);
395 
396 	spin_lock_irqsave(&wdata->state.lock, flags);
397 	wdata->state.cmd_read_buf = NULL;
398 	spin_unlock_irqrestore(&wdata->state.lock, flags);
399 
400 	if (!ret) {
401 		if (wdata->state.cmd_read_size == 0)
402 			ret = -EIO;
403 		else
404 			ret = wdata->state.cmd_read_size;
405 	}
406 
407 	return ret;
408 }
409 
410 /* requires the cmd-mutex to be held */
411 static int wiimote_cmd_init_ext(struct wiimote_data *wdata)
412 {
413 	__u8 wmem;
414 	int ret;
415 
416 	/* initialize extension */
417 	wmem = 0x55;
418 	ret = wiimote_cmd_write(wdata, 0xa400f0, &wmem, sizeof(wmem));
419 	if (ret)
420 		return ret;
421 
422 	/* disable default encryption */
423 	wmem = 0x0;
424 	ret = wiimote_cmd_write(wdata, 0xa400fb, &wmem, sizeof(wmem));
425 	if (ret)
426 		return ret;
427 
428 	return 0;
429 }
430 
431 /* requires the cmd-mutex to be held */
432 static __u8 wiimote_cmd_read_ext(struct wiimote_data *wdata, __u8 *rmem)
433 {
434 	int ret;
435 
436 	/* read extension ID */
437 	ret = wiimote_cmd_read(wdata, 0xa400fa, rmem, 6);
438 	if (ret != 6)
439 		return WIIMOTE_EXT_NONE;
440 
441 	hid_dbg(wdata->hdev, "extension ID: %6phC\n", rmem);
442 
443 	if (rmem[0] == 0xff && rmem[1] == 0xff && rmem[2] == 0xff &&
444 	    rmem[3] == 0xff && rmem[4] == 0xff && rmem[5] == 0xff)
445 		return WIIMOTE_EXT_NONE;
446 
447 	if (rmem[4] == 0x00 && rmem[5] == 0x00)
448 		return WIIMOTE_EXT_NUNCHUK;
449 	if (rmem[4] == 0x01 && rmem[5] == 0x01)
450 		return WIIMOTE_EXT_CLASSIC_CONTROLLER;
451 	if (rmem[4] == 0x04 && rmem[5] == 0x02)
452 		return WIIMOTE_EXT_BALANCE_BOARD;
453 	if (rmem[4] == 0x01 && rmem[5] == 0x20)
454 		return WIIMOTE_EXT_PRO_CONTROLLER;
455 	if (rmem[0] == 0x01 && rmem[1] == 0x00 &&
456 	    rmem[4] == 0x01 && rmem[5] == 0x03)
457 		return WIIMOTE_EXT_DRUMS;
458 	if (rmem[0] == 0x00 && rmem[1] == 0x00 &&
459 	    rmem[4] == 0x01 && rmem[5] == 0x03)
460 		return WIIMOTE_EXT_GUITAR;
461 	if (rmem[0] == 0x03 && rmem[1] == 0x00 &&
462 	    rmem[4] == 0x01 && rmem[5] == 0x03)
463 		return WIIMOTE_EXT_TURNTABLE;
464 
465 	return WIIMOTE_EXT_UNKNOWN;
466 }
467 
468 /* requires the cmd-mutex to be held */
469 static int wiimote_cmd_init_mp(struct wiimote_data *wdata)
470 {
471 	__u8 wmem;
472 	int ret;
473 
474 	/* initialize MP */
475 	wmem = 0x55;
476 	ret = wiimote_cmd_write(wdata, 0xa600f0, &wmem, sizeof(wmem));
477 	if (ret)
478 		return ret;
479 
480 	/* disable default encryption */
481 	wmem = 0x0;
482 	ret = wiimote_cmd_write(wdata, 0xa600fb, &wmem, sizeof(wmem));
483 	if (ret)
484 		return ret;
485 
486 	return 0;
487 }
488 
489 /* requires the cmd-mutex to be held */
490 static bool wiimote_cmd_map_mp(struct wiimote_data *wdata, __u8 exttype)
491 {
492 	__u8 wmem;
493 
494 	/* map MP with correct pass-through mode */
495 	switch (exttype) {
496 	case WIIMOTE_EXT_CLASSIC_CONTROLLER:
497 	case WIIMOTE_EXT_DRUMS:
498 	case WIIMOTE_EXT_GUITAR:
499 		wmem = 0x07;
500 		break;
501 	case WIIMOTE_EXT_TURNTABLE:
502 	case WIIMOTE_EXT_NUNCHUK:
503 		wmem = 0x05;
504 		break;
505 	default:
506 		wmem = 0x04;
507 		break;
508 	}
509 
510 	return wiimote_cmd_write(wdata, 0xa600fe, &wmem, sizeof(wmem));
511 }
512 
513 /* requires the cmd-mutex to be held */
514 static bool wiimote_cmd_read_mp(struct wiimote_data *wdata, __u8 *rmem)
515 {
516 	int ret;
517 
518 	/* read motion plus ID */
519 	ret = wiimote_cmd_read(wdata, 0xa600fa, rmem, 6);
520 	if (ret != 6)
521 		return false;
522 
523 	hid_dbg(wdata->hdev, "motion plus ID: %6phC\n", rmem);
524 
525 	if (rmem[5] == 0x05)
526 		return true;
527 
528 	hid_info(wdata->hdev, "unknown motion plus ID: %6phC\n", rmem);
529 
530 	return false;
531 }
532 
533 /* requires the cmd-mutex to be held */
534 static __u8 wiimote_cmd_read_mp_mapped(struct wiimote_data *wdata)
535 {
536 	int ret;
537 	__u8 rmem[6];
538 
539 	/* read motion plus ID */
540 	ret = wiimote_cmd_read(wdata, 0xa400fa, rmem, 6);
541 	if (ret != 6)
542 		return WIIMOTE_MP_NONE;
543 
544 	hid_dbg(wdata->hdev, "mapped motion plus ID: %6phC\n", rmem);
545 
546 	if (rmem[0] == 0xff && rmem[1] == 0xff && rmem[2] == 0xff &&
547 	    rmem[3] == 0xff && rmem[4] == 0xff && rmem[5] == 0xff)
548 		return WIIMOTE_MP_NONE;
549 
550 	if (rmem[4] == 0x04 && rmem[5] == 0x05)
551 		return WIIMOTE_MP_SINGLE;
552 	else if (rmem[4] == 0x05 && rmem[5] == 0x05)
553 		return WIIMOTE_MP_PASSTHROUGH_NUNCHUK;
554 	else if (rmem[4] == 0x07 && rmem[5] == 0x05)
555 		return WIIMOTE_MP_PASSTHROUGH_CLASSIC;
556 
557 	return WIIMOTE_MP_UNKNOWN;
558 }
559 
560 /* device module handling */
561 
562 static const __u8 * const wiimote_devtype_mods[WIIMOTE_DEV_NUM] = {
563 	[WIIMOTE_DEV_PENDING] = (const __u8[]){
564 		WIIMOD_NULL,
565 	},
566 	[WIIMOTE_DEV_UNKNOWN] = (const __u8[]){
567 		WIIMOD_NO_MP,
568 		WIIMOD_NULL,
569 	},
570 	[WIIMOTE_DEV_GENERIC] = (const __u8[]){
571 		WIIMOD_KEYS,
572 		WIIMOD_RUMBLE,
573 		WIIMOD_BATTERY,
574 		WIIMOD_LED1,
575 		WIIMOD_LED2,
576 		WIIMOD_LED3,
577 		WIIMOD_LED4,
578 		WIIMOD_ACCEL,
579 		WIIMOD_IR,
580 		WIIMOD_NULL,
581 	},
582 	[WIIMOTE_DEV_GEN10] = (const __u8[]){
583 		WIIMOD_KEYS,
584 		WIIMOD_RUMBLE,
585 		WIIMOD_BATTERY,
586 		WIIMOD_LED1,
587 		WIIMOD_LED2,
588 		WIIMOD_LED3,
589 		WIIMOD_LED4,
590 		WIIMOD_ACCEL,
591 		WIIMOD_IR,
592 		WIIMOD_NULL,
593 	},
594 	[WIIMOTE_DEV_GEN20] = (const __u8[]){
595 		WIIMOD_KEYS,
596 		WIIMOD_RUMBLE,
597 		WIIMOD_BATTERY,
598 		WIIMOD_LED1,
599 		WIIMOD_LED2,
600 		WIIMOD_LED3,
601 		WIIMOD_LED4,
602 		WIIMOD_ACCEL,
603 		WIIMOD_IR,
604 		WIIMOD_BUILTIN_MP,
605 		WIIMOD_NULL,
606 	},
607 	[WIIMOTE_DEV_BALANCE_BOARD] = (const __u8[]) {
608 		WIIMOD_BATTERY,
609 		WIIMOD_LED1,
610 		WIIMOD_NO_MP,
611 		WIIMOD_NULL,
612 	},
613 	[WIIMOTE_DEV_PRO_CONTROLLER] = (const __u8[]) {
614 		WIIMOD_BATTERY,
615 		WIIMOD_LED1,
616 		WIIMOD_LED2,
617 		WIIMOD_LED3,
618 		WIIMOD_LED4,
619 		WIIMOD_NO_MP,
620 		WIIMOD_NULL,
621 	},
622 };
623 
624 static void wiimote_modules_load(struct wiimote_data *wdata,
625 				 unsigned int devtype)
626 {
627 	bool need_input = false;
628 	const __u8 *mods, *iter;
629 	const struct wiimod_ops *ops;
630 	int ret;
631 
632 	mods = wiimote_devtype_mods[devtype];
633 
634 	for (iter = mods; *iter != WIIMOD_NULL; ++iter) {
635 		if (wiimod_table[*iter]->flags & WIIMOD_FLAG_INPUT) {
636 			need_input = true;
637 			break;
638 		}
639 	}
640 
641 	if (need_input) {
642 		wdata->input = input_allocate_device();
643 		if (!wdata->input)
644 			return;
645 
646 		input_set_drvdata(wdata->input, wdata);
647 		wdata->input->dev.parent = &wdata->hdev->dev;
648 		wdata->input->id.bustype = wdata->hdev->bus;
649 		wdata->input->id.vendor = wdata->hdev->vendor;
650 		wdata->input->id.product = wdata->hdev->product;
651 		wdata->input->id.version = wdata->hdev->version;
652 		wdata->input->name = WIIMOTE_NAME;
653 	}
654 
655 	for (iter = mods; *iter != WIIMOD_NULL; ++iter) {
656 		ops = wiimod_table[*iter];
657 		if (!ops->probe)
658 			continue;
659 
660 		ret = ops->probe(ops, wdata);
661 		if (ret)
662 			goto error;
663 	}
664 
665 	if (wdata->input) {
666 		ret = input_register_device(wdata->input);
667 		if (ret)
668 			goto error;
669 	}
670 
671 	spin_lock_irq(&wdata->state.lock);
672 	wdata->state.devtype = devtype;
673 	spin_unlock_irq(&wdata->state.lock);
674 	return;
675 
676 error:
677 	for ( ; iter-- != mods; ) {
678 		ops = wiimod_table[*iter];
679 		if (ops->remove)
680 			ops->remove(ops, wdata);
681 	}
682 
683 	if (wdata->input) {
684 		input_free_device(wdata->input);
685 		wdata->input = NULL;
686 	}
687 }
688 
689 static void wiimote_modules_unload(struct wiimote_data *wdata)
690 {
691 	const __u8 *mods, *iter;
692 	const struct wiimod_ops *ops;
693 	unsigned long flags;
694 
695 	mods = wiimote_devtype_mods[wdata->state.devtype];
696 
697 	spin_lock_irqsave(&wdata->state.lock, flags);
698 	wdata->state.devtype = WIIMOTE_DEV_UNKNOWN;
699 	spin_unlock_irqrestore(&wdata->state.lock, flags);
700 
701 	/* find end of list */
702 	for (iter = mods; *iter != WIIMOD_NULL; ++iter)
703 		/* empty */ ;
704 
705 	if (wdata->input) {
706 		input_get_device(wdata->input);
707 		input_unregister_device(wdata->input);
708 	}
709 
710 	for ( ; iter-- != mods; ) {
711 		ops = wiimod_table[*iter];
712 		if (ops->remove)
713 			ops->remove(ops, wdata);
714 	}
715 
716 	if (wdata->input) {
717 		input_put_device(wdata->input);
718 		wdata->input = NULL;
719 	}
720 }
721 
722 /* device extension handling */
723 
724 static void wiimote_ext_load(struct wiimote_data *wdata, unsigned int ext)
725 {
726 	unsigned long flags;
727 	const struct wiimod_ops *ops;
728 	int ret;
729 
730 	ops = wiimod_ext_table[ext];
731 
732 	if (ops->probe) {
733 		ret = ops->probe(ops, wdata);
734 		if (ret)
735 			ext = WIIMOTE_EXT_UNKNOWN;
736 	}
737 
738 	spin_lock_irqsave(&wdata->state.lock, flags);
739 	wdata->state.exttype = ext;
740 	spin_unlock_irqrestore(&wdata->state.lock, flags);
741 }
742 
743 static void wiimote_ext_unload(struct wiimote_data *wdata)
744 {
745 	unsigned long flags;
746 	const struct wiimod_ops *ops;
747 
748 	ops = wiimod_ext_table[wdata->state.exttype];
749 
750 	spin_lock_irqsave(&wdata->state.lock, flags);
751 	wdata->state.exttype = WIIMOTE_EXT_UNKNOWN;
752 	wdata->state.flags &= ~WIIPROTO_FLAG_EXT_USED;
753 	spin_unlock_irqrestore(&wdata->state.lock, flags);
754 
755 	if (ops->remove)
756 		ops->remove(ops, wdata);
757 }
758 
759 static void wiimote_mp_load(struct wiimote_data *wdata)
760 {
761 	unsigned long flags;
762 	const struct wiimod_ops *ops;
763 	int ret;
764 	__u8 mode = 2;
765 
766 	ops = &wiimod_mp;
767 	if (ops->probe) {
768 		ret = ops->probe(ops, wdata);
769 		if (ret)
770 			mode = 1;
771 	}
772 
773 	spin_lock_irqsave(&wdata->state.lock, flags);
774 	wdata->state.mp = mode;
775 	spin_unlock_irqrestore(&wdata->state.lock, flags);
776 }
777 
778 static void wiimote_mp_unload(struct wiimote_data *wdata)
779 {
780 	unsigned long flags;
781 	const struct wiimod_ops *ops;
782 
783 	if (wdata->state.mp < 2)
784 		return;
785 
786 	ops = &wiimod_mp;
787 
788 	spin_lock_irqsave(&wdata->state.lock, flags);
789 	wdata->state.mp = 0;
790 	wdata->state.flags &= ~WIIPROTO_FLAG_MP_USED;
791 	spin_unlock_irqrestore(&wdata->state.lock, flags);
792 
793 	if (ops->remove)
794 		ops->remove(ops, wdata);
795 }
796 
797 /* device (re-)initialization and detection */
798 
799 static const char *wiimote_devtype_names[WIIMOTE_DEV_NUM] = {
800 	[WIIMOTE_DEV_PENDING] = "Pending",
801 	[WIIMOTE_DEV_UNKNOWN] = "Unknown",
802 	[WIIMOTE_DEV_GENERIC] = "Generic",
803 	[WIIMOTE_DEV_GEN10] = "Nintendo Wii Remote (Gen 1)",
804 	[WIIMOTE_DEV_GEN20] = "Nintendo Wii Remote Plus (Gen 2)",
805 	[WIIMOTE_DEV_BALANCE_BOARD] = "Nintendo Wii Balance Board",
806 	[WIIMOTE_DEV_PRO_CONTROLLER] = "Nintendo Wii U Pro Controller",
807 };
808 
809 /* Try to guess the device type based on all collected information. We
810  * first try to detect by static extension types, then VID/PID and the
811  * device name. If we cannot detect the device, we use
812  * WIIMOTE_DEV_GENERIC so all modules will get probed on the device. */
813 static void wiimote_init_set_type(struct wiimote_data *wdata,
814 				  __u8 exttype)
815 {
816 	__u8 devtype = WIIMOTE_DEV_GENERIC;
817 	__u16 vendor, product;
818 	const char *name;
819 
820 	vendor = wdata->hdev->vendor;
821 	product = wdata->hdev->product;
822 	name = wdata->hdev->name;
823 
824 	if (exttype == WIIMOTE_EXT_BALANCE_BOARD) {
825 		devtype = WIIMOTE_DEV_BALANCE_BOARD;
826 		goto done;
827 	} else if (exttype == WIIMOTE_EXT_PRO_CONTROLLER) {
828 		devtype = WIIMOTE_DEV_PRO_CONTROLLER;
829 		goto done;
830 	}
831 
832 	if (!strcmp(name, "Nintendo RVL-CNT-01")) {
833 		devtype = WIIMOTE_DEV_GEN10;
834 		goto done;
835 	} else if (!strcmp(name, "Nintendo RVL-CNT-01-TR")) {
836 		devtype = WIIMOTE_DEV_GEN20;
837 		goto done;
838 	} else if (!strcmp(name, "Nintendo RVL-WBC-01")) {
839 		devtype = WIIMOTE_DEV_BALANCE_BOARD;
840 		goto done;
841 	} else if (!strcmp(name, "Nintendo RVL-CNT-01-UC")) {
842 		devtype = WIIMOTE_DEV_PRO_CONTROLLER;
843 		goto done;
844 	}
845 
846 	if (vendor == USB_VENDOR_ID_NINTENDO) {
847 		if (product == USB_DEVICE_ID_NINTENDO_WIIMOTE) {
848 			devtype = WIIMOTE_DEV_GEN10;
849 			goto done;
850 		} else if (product == USB_DEVICE_ID_NINTENDO_WIIMOTE2) {
851 			devtype = WIIMOTE_DEV_GEN20;
852 			goto done;
853 		}
854 	}
855 
856 done:
857 	if (devtype == WIIMOTE_DEV_GENERIC)
858 		hid_info(wdata->hdev, "cannot detect device; NAME: %s VID: %04x PID: %04x EXT: %04x\n",
859 			name, vendor, product, exttype);
860 	else
861 		hid_info(wdata->hdev, "detected device: %s\n",
862 			 wiimote_devtype_names[devtype]);
863 
864 	wiimote_modules_load(wdata, devtype);
865 }
866 
867 static void wiimote_init_detect(struct wiimote_data *wdata)
868 {
869 	__u8 exttype = WIIMOTE_EXT_NONE, extdata[6];
870 	bool ext;
871 	int ret;
872 
873 	wiimote_cmd_acquire_noint(wdata);
874 
875 	spin_lock_irq(&wdata->state.lock);
876 	wdata->state.devtype = WIIMOTE_DEV_UNKNOWN;
877 	wiimote_cmd_set(wdata, WIIPROTO_REQ_SREQ, 0);
878 	wiiproto_req_status(wdata);
879 	spin_unlock_irq(&wdata->state.lock);
880 
881 	ret = wiimote_cmd_wait_noint(wdata);
882 	if (ret)
883 		goto out_release;
884 
885 	spin_lock_irq(&wdata->state.lock);
886 	ext = wdata->state.flags & WIIPROTO_FLAG_EXT_PLUGGED;
887 	spin_unlock_irq(&wdata->state.lock);
888 
889 	if (!ext)
890 		goto out_release;
891 
892 	wiimote_cmd_init_ext(wdata);
893 	exttype = wiimote_cmd_read_ext(wdata, extdata);
894 
895 out_release:
896 	wiimote_cmd_release(wdata);
897 	wiimote_init_set_type(wdata, exttype);
898 
899 	/* schedule MP timer */
900 	spin_lock_irq(&wdata->state.lock);
901 	if (!(wdata->state.flags & WIIPROTO_FLAG_BUILTIN_MP) &&
902 	    !(wdata->state.flags & WIIPROTO_FLAG_NO_MP))
903 		mod_timer(&wdata->timer, jiffies + HZ * 4);
904 	spin_unlock_irq(&wdata->state.lock);
905 }
906 
907 /*
908  * MP hotplug events are not generated by the wiimote. Therefore, we need
909  * polling to detect it. We use a 4s interval for polling MP registers. This
910  * seems reasonable considering applications can trigger it manually via
911  * sysfs requests.
912  */
913 static void wiimote_init_poll_mp(struct wiimote_data *wdata)
914 {
915 	bool mp;
916 	__u8 mpdata[6];
917 
918 	wiimote_cmd_acquire_noint(wdata);
919 	wiimote_cmd_init_mp(wdata);
920 	mp = wiimote_cmd_read_mp(wdata, mpdata);
921 	wiimote_cmd_release(wdata);
922 
923 	/* load/unload MP module if it changed */
924 	if (mp) {
925 		if (!wdata->state.mp) {
926 			hid_info(wdata->hdev, "detected extension: Nintendo Wii Motion Plus\n");
927 			wiimote_mp_load(wdata);
928 		}
929 	} else if (wdata->state.mp) {
930 		wiimote_mp_unload(wdata);
931 	}
932 
933 	mod_timer(&wdata->timer, jiffies + HZ * 4);
934 }
935 
936 /*
937  * Check whether the wiimote is in the expected state. The extension registers
938  * may change during hotplug and initialization so we might get hotplug events
939  * that we caused by remapping some memory.
940  * We use some heuristics here to check known states. If the wiimote is in the
941  * expected state, we can ignore the hotplug event.
942  *
943  * Returns "true" if the device is in expected state, "false" if we should
944  * redo hotplug handling and extension initialization.
945  */
946 static bool wiimote_init_check(struct wiimote_data *wdata)
947 {
948 	__u32 flags;
949 	__u8 type, data[6];
950 	bool ret, poll_mp;
951 
952 	spin_lock_irq(&wdata->state.lock);
953 	flags = wdata->state.flags;
954 	spin_unlock_irq(&wdata->state.lock);
955 
956 	wiimote_cmd_acquire_noint(wdata);
957 
958 	/* If MP is used and active, but the extension is not, we expect:
959 	 *   read_mp_mapped() == WIIMOTE_MP_SINGLE
960 	 *   state.flags == !EXT_ACTIVE && !MP_PLUGGED && MP_ACTIVE
961 	 * We do not check EXT_PLUGGED because it might change during
962 	 * initialization of MP without extensions.
963 	 *  - If MP is unplugged/replugged, read_mp_mapped() fails
964 	 *  - If EXT is plugged, MP_PLUGGED will get set */
965 	if (wdata->state.exttype == WIIMOTE_EXT_NONE &&
966 	    wdata->state.mp > 0 && (flags & WIIPROTO_FLAG_MP_USED)) {
967 		type = wiimote_cmd_read_mp_mapped(wdata);
968 		ret = type == WIIMOTE_MP_SINGLE;
969 
970 		spin_lock_irq(&wdata->state.lock);
971 		ret = ret && !(wdata->state.flags & WIIPROTO_FLAG_EXT_ACTIVE);
972 		ret = ret && !(wdata->state.flags & WIIPROTO_FLAG_MP_PLUGGED);
973 		ret = ret && (wdata->state.flags & WIIPROTO_FLAG_MP_ACTIVE);
974 		spin_unlock_irq(&wdata->state.lock);
975 
976 		if (!ret)
977 			hid_dbg(wdata->hdev, "state left: !EXT && MP\n");
978 
979 		/* while MP is mapped, we get EXT_PLUGGED events */
980 		poll_mp = false;
981 
982 		goto out_release;
983 	}
984 
985 	/* If MP is unused, but the extension port is used, we expect:
986 	 *   read_ext == state.exttype
987 	 *   state.flags == !MP_ACTIVE && EXT_ACTIVE
988 	 * - If MP is plugged/unplugged, our timer detects it
989 	 * - If EXT is unplugged/replugged, EXT_ACTIVE will become unset */
990 	if (!(flags & WIIPROTO_FLAG_MP_USED) &&
991 	    wdata->state.exttype != WIIMOTE_EXT_NONE) {
992 		type = wiimote_cmd_read_ext(wdata, data);
993 		ret = type == wdata->state.exttype;
994 
995 		spin_lock_irq(&wdata->state.lock);
996 		ret = ret && !(wdata->state.flags & WIIPROTO_FLAG_MP_ACTIVE);
997 		ret = ret && (wdata->state.flags & WIIPROTO_FLAG_EXT_ACTIVE);
998 		spin_unlock_irq(&wdata->state.lock);
999 
1000 		if (!ret)
1001 			hid_dbg(wdata->hdev, "state left: EXT && !MP\n");
1002 
1003 		/* poll MP for hotplug events */
1004 		poll_mp = true;
1005 
1006 		goto out_release;
1007 	}
1008 
1009 	/* If neither MP nor an extension are used, we expect:
1010 	 *   read_ext() == WIIMOTE_EXT_NONE
1011 	 *   state.flags == !MP_ACTIVE && !EXT_ACTIVE && !EXT_PLUGGED
1012 	 * No need to perform any action in this case as everything is
1013 	 * disabled already.
1014 	 * - If MP is plugged/unplugged, our timer detects it
1015 	 * - If EXT is plugged, EXT_PLUGGED will be set */
1016 	if (!(flags & WIIPROTO_FLAG_MP_USED) &&
1017 	    wdata->state.exttype == WIIMOTE_EXT_NONE) {
1018 		type = wiimote_cmd_read_ext(wdata, data);
1019 		ret = type == wdata->state.exttype;
1020 
1021 		spin_lock_irq(&wdata->state.lock);
1022 		ret = ret && !(wdata->state.flags & WIIPROTO_FLAG_EXT_ACTIVE);
1023 		ret = ret && !(wdata->state.flags & WIIPROTO_FLAG_MP_ACTIVE);
1024 		ret = ret && !(wdata->state.flags & WIIPROTO_FLAG_EXT_PLUGGED);
1025 		spin_unlock_irq(&wdata->state.lock);
1026 
1027 		if (!ret)
1028 			hid_dbg(wdata->hdev, "state left: !EXT && !MP\n");
1029 
1030 		/* poll MP for hotplug events */
1031 		poll_mp = true;
1032 
1033 		goto out_release;
1034 	}
1035 
1036 	/* The trickiest part is if both EXT and MP are active. We cannot read
1037 	 * the EXT ID, anymore, because MP is mapped over it. However, we use
1038 	 * a handy trick here:
1039 	 *   - EXT_ACTIVE is unset whenever !MP_PLUGGED is sent
1040 	 * MP_PLUGGED might be re-sent again before we are scheduled, but
1041 	 * EXT_ACTIVE will stay unset.
1042 	 * So it is enough to check for mp_mapped() and MP_ACTIVE and
1043 	 * EXT_ACTIVE. EXT_PLUGGED is a sanity check. */
1044 	if (wdata->state.exttype != WIIMOTE_EXT_NONE &&
1045 	    wdata->state.mp > 0 && (flags & WIIPROTO_FLAG_MP_USED)) {
1046 		type = wiimote_cmd_read_mp_mapped(wdata);
1047 		ret = type != WIIMOTE_MP_NONE;
1048 		ret = ret && type != WIIMOTE_MP_UNKNOWN;
1049 		ret = ret && type != WIIMOTE_MP_SINGLE;
1050 
1051 		spin_lock_irq(&wdata->state.lock);
1052 		ret = ret && (wdata->state.flags & WIIPROTO_FLAG_EXT_PLUGGED);
1053 		ret = ret && (wdata->state.flags & WIIPROTO_FLAG_EXT_ACTIVE);
1054 		ret = ret && (wdata->state.flags & WIIPROTO_FLAG_MP_ACTIVE);
1055 		spin_unlock_irq(&wdata->state.lock);
1056 
1057 		if (!ret)
1058 			hid_dbg(wdata->hdev, "state left: EXT && MP\n");
1059 
1060 		/* while MP is mapped, we get EXT_PLUGGED events */
1061 		poll_mp = false;
1062 
1063 		goto out_release;
1064 	}
1065 
1066 	/* unknown state */
1067 	ret = false;
1068 
1069 out_release:
1070 	wiimote_cmd_release(wdata);
1071 
1072 	/* only poll for MP if requested and if state didn't change */
1073 	if (ret && poll_mp && !(flags & WIIPROTO_FLAG_BUILTIN_MP) &&
1074 	    !(flags & WIIPROTO_FLAG_NO_MP))
1075 		wiimote_init_poll_mp(wdata);
1076 
1077 	return ret;
1078 }
1079 
1080 static const char *wiimote_exttype_names[WIIMOTE_EXT_NUM] = {
1081 	[WIIMOTE_EXT_NONE] = "None",
1082 	[WIIMOTE_EXT_UNKNOWN] = "Unknown",
1083 	[WIIMOTE_EXT_NUNCHUK] = "Nintendo Wii Nunchuk",
1084 	[WIIMOTE_EXT_CLASSIC_CONTROLLER] = "Nintendo Wii Classic Controller",
1085 	[WIIMOTE_EXT_BALANCE_BOARD] = "Nintendo Wii Balance Board",
1086 	[WIIMOTE_EXT_PRO_CONTROLLER] = "Nintendo Wii U Pro Controller",
1087 	[WIIMOTE_EXT_DRUMS] = "Nintendo Wii Drums",
1088 	[WIIMOTE_EXT_GUITAR] = "Nintendo Wii Guitar",
1089 	[WIIMOTE_EXT_TURNTABLE] = "Nintendo Wii Turntable"
1090 };
1091 
1092 /*
1093  * Handle hotplug events
1094  * If we receive an hotplug event and the device-check failed, we deinitialize
1095  * the extension ports, re-read all extension IDs and set the device into
1096  * the desired state. This involves mapping MP into the main extension
1097  * registers, setting up extension passthrough modes and initializing the
1098  * requested extensions.
1099  */
1100 static void wiimote_init_hotplug(struct wiimote_data *wdata)
1101 {
1102 	__u8 exttype, extdata[6], mpdata[6];
1103 	__u32 flags;
1104 	bool mp;
1105 
1106 	hid_dbg(wdata->hdev, "detect extensions..\n");
1107 
1108 	wiimote_cmd_acquire_noint(wdata);
1109 
1110 	spin_lock_irq(&wdata->state.lock);
1111 
1112 	/* get state snapshot that we will then work on */
1113 	flags = wdata->state.flags;
1114 
1115 	/* disable event forwarding temporarily */
1116 	wdata->state.flags &= ~WIIPROTO_FLAG_EXT_ACTIVE;
1117 	wdata->state.flags &= ~WIIPROTO_FLAG_MP_ACTIVE;
1118 
1119 	spin_unlock_irq(&wdata->state.lock);
1120 
1121 	/* init extension and MP (deactivates current extension or MP) */
1122 	wiimote_cmd_init_ext(wdata);
1123 	if (flags & WIIPROTO_FLAG_NO_MP) {
1124 		mp = false;
1125 	} else {
1126 		wiimote_cmd_init_mp(wdata);
1127 		mp = wiimote_cmd_read_mp(wdata, mpdata);
1128 	}
1129 	exttype = wiimote_cmd_read_ext(wdata, extdata);
1130 
1131 	wiimote_cmd_release(wdata);
1132 
1133 	/* load/unload extension module if it changed */
1134 	if (exttype != wdata->state.exttype) {
1135 		/* unload previous extension */
1136 		wiimote_ext_unload(wdata);
1137 
1138 		if (exttype == WIIMOTE_EXT_UNKNOWN) {
1139 			hid_info(wdata->hdev, "cannot detect extension; %6phC\n",
1140 				 extdata);
1141 		} else if (exttype == WIIMOTE_EXT_NONE) {
1142 			spin_lock_irq(&wdata->state.lock);
1143 			wdata->state.exttype = WIIMOTE_EXT_NONE;
1144 			spin_unlock_irq(&wdata->state.lock);
1145 		} else {
1146 			hid_info(wdata->hdev, "detected extension: %s\n",
1147 				 wiimote_exttype_names[exttype]);
1148 			/* try loading new extension */
1149 			wiimote_ext_load(wdata, exttype);
1150 		}
1151 	}
1152 
1153 	/* load/unload MP module if it changed */
1154 	if (mp) {
1155 		if (!wdata->state.mp) {
1156 			hid_info(wdata->hdev, "detected extension: Nintendo Wii Motion Plus\n");
1157 			wiimote_mp_load(wdata);
1158 		}
1159 	} else if (wdata->state.mp) {
1160 		wiimote_mp_unload(wdata);
1161 	}
1162 
1163 	/* if MP is not used, do not map or activate it */
1164 	if (!(flags & WIIPROTO_FLAG_MP_USED))
1165 		mp = false;
1166 
1167 	/* map MP into main extension registers if used */
1168 	if (mp) {
1169 		wiimote_cmd_acquire_noint(wdata);
1170 		wiimote_cmd_map_mp(wdata, exttype);
1171 		wiimote_cmd_release(wdata);
1172 
1173 		/* delete MP hotplug timer */
1174 		del_timer_sync(&wdata->timer);
1175 	} else {
1176 		/* reschedule MP hotplug timer */
1177 		if (!(flags & WIIPROTO_FLAG_BUILTIN_MP) &&
1178 		    !(flags & WIIPROTO_FLAG_NO_MP))
1179 			mod_timer(&wdata->timer, jiffies + HZ * 4);
1180 	}
1181 
1182 	spin_lock_irq(&wdata->state.lock);
1183 
1184 	/* enable data forwarding again and set expected hotplug state */
1185 	if (mp) {
1186 		wdata->state.flags |= WIIPROTO_FLAG_MP_ACTIVE;
1187 		if (wdata->state.exttype == WIIMOTE_EXT_NONE) {
1188 			wdata->state.flags &= ~WIIPROTO_FLAG_EXT_PLUGGED;
1189 			wdata->state.flags &= ~WIIPROTO_FLAG_MP_PLUGGED;
1190 		} else {
1191 			wdata->state.flags &= ~WIIPROTO_FLAG_EXT_PLUGGED;
1192 			wdata->state.flags |= WIIPROTO_FLAG_MP_PLUGGED;
1193 			wdata->state.flags |= WIIPROTO_FLAG_EXT_ACTIVE;
1194 		}
1195 	} else if (wdata->state.exttype != WIIMOTE_EXT_NONE) {
1196 		wdata->state.flags |= WIIPROTO_FLAG_EXT_ACTIVE;
1197 	}
1198 
1199 	/* request status report for hotplug state updates */
1200 	wiiproto_req_status(wdata);
1201 
1202 	spin_unlock_irq(&wdata->state.lock);
1203 
1204 	hid_dbg(wdata->hdev, "detected extensions: MP: %d EXT: %d\n",
1205 		wdata->state.mp, wdata->state.exttype);
1206 }
1207 
1208 static void wiimote_init_worker(struct work_struct *work)
1209 {
1210 	struct wiimote_data *wdata = container_of(work, struct wiimote_data,
1211 						  init_worker);
1212 	bool changed = false;
1213 
1214 	if (wdata->state.devtype == WIIMOTE_DEV_PENDING) {
1215 		wiimote_init_detect(wdata);
1216 		changed = true;
1217 	}
1218 
1219 	if (changed || !wiimote_init_check(wdata))
1220 		wiimote_init_hotplug(wdata);
1221 
1222 	if (changed)
1223 		kobject_uevent(&wdata->hdev->dev.kobj, KOBJ_CHANGE);
1224 }
1225 
1226 void __wiimote_schedule(struct wiimote_data *wdata)
1227 {
1228 	if (!(wdata->state.flags & WIIPROTO_FLAG_EXITING))
1229 		schedule_work(&wdata->init_worker);
1230 }
1231 
1232 static void wiimote_schedule(struct wiimote_data *wdata)
1233 {
1234 	unsigned long flags;
1235 
1236 	spin_lock_irqsave(&wdata->state.lock, flags);
1237 	__wiimote_schedule(wdata);
1238 	spin_unlock_irqrestore(&wdata->state.lock, flags);
1239 }
1240 
1241 static void wiimote_init_timeout(struct timer_list *t)
1242 {
1243 	struct wiimote_data *wdata = from_timer(wdata, t, timer);
1244 
1245 	wiimote_schedule(wdata);
1246 }
1247 
1248 /* protocol handlers */
1249 
1250 static void handler_keys(struct wiimote_data *wdata, const __u8 *payload)
1251 {
1252 	const __u8 *iter, *mods;
1253 	const struct wiimod_ops *ops;
1254 
1255 	ops = wiimod_ext_table[wdata->state.exttype];
1256 	if (ops->in_keys) {
1257 		ops->in_keys(wdata, payload);
1258 		return;
1259 	}
1260 
1261 	mods = wiimote_devtype_mods[wdata->state.devtype];
1262 	for (iter = mods; *iter != WIIMOD_NULL; ++iter) {
1263 		ops = wiimod_table[*iter];
1264 		if (ops->in_keys) {
1265 			ops->in_keys(wdata, payload);
1266 			break;
1267 		}
1268 	}
1269 }
1270 
1271 static void handler_accel(struct wiimote_data *wdata, const __u8 *payload)
1272 {
1273 	const __u8 *iter, *mods;
1274 	const struct wiimod_ops *ops;
1275 
1276 	ops = wiimod_ext_table[wdata->state.exttype];
1277 	if (ops->in_accel) {
1278 		ops->in_accel(wdata, payload);
1279 		return;
1280 	}
1281 
1282 	mods = wiimote_devtype_mods[wdata->state.devtype];
1283 	for (iter = mods; *iter != WIIMOD_NULL; ++iter) {
1284 		ops = wiimod_table[*iter];
1285 		if (ops->in_accel) {
1286 			ops->in_accel(wdata, payload);
1287 			break;
1288 		}
1289 	}
1290 }
1291 
1292 static bool valid_ext_handler(const struct wiimod_ops *ops, size_t len)
1293 {
1294 	if (!ops->in_ext)
1295 		return false;
1296 	if ((ops->flags & WIIMOD_FLAG_EXT8) && len < 8)
1297 		return false;
1298 	if ((ops->flags & WIIMOD_FLAG_EXT16) && len < 16)
1299 		return false;
1300 
1301 	return true;
1302 }
1303 
1304 static void handler_ext(struct wiimote_data *wdata, const __u8 *payload,
1305 			size_t len)
1306 {
1307 	static const __u8 invalid[21] = { 0xff, 0xff, 0xff, 0xff,
1308 					  0xff, 0xff, 0xff, 0xff,
1309 					  0xff, 0xff, 0xff, 0xff,
1310 					  0xff, 0xff, 0xff, 0xff,
1311 					  0xff, 0xff, 0xff, 0xff,
1312 					  0xff };
1313 	const __u8 *iter, *mods;
1314 	const struct wiimod_ops *ops;
1315 	bool is_mp;
1316 
1317 	if (len > 21)
1318 		len = 21;
1319 	if (len < 6 || !memcmp(payload, invalid, len))
1320 		return;
1321 
1322 	/* if MP is active, track MP slot hotplugging */
1323 	if (wdata->state.flags & WIIPROTO_FLAG_MP_ACTIVE) {
1324 		/* this bit is set for invalid events (eg. during hotplug) */
1325 		if (payload[5] & 0x01)
1326 			return;
1327 
1328 		if (payload[4] & 0x01) {
1329 			if (!(wdata->state.flags & WIIPROTO_FLAG_MP_PLUGGED)) {
1330 				hid_dbg(wdata->hdev, "MP hotplug: 1\n");
1331 				wdata->state.flags |= WIIPROTO_FLAG_MP_PLUGGED;
1332 				__wiimote_schedule(wdata);
1333 			}
1334 		} else {
1335 			if (wdata->state.flags & WIIPROTO_FLAG_MP_PLUGGED) {
1336 				hid_dbg(wdata->hdev, "MP hotplug: 0\n");
1337 				wdata->state.flags &= ~WIIPROTO_FLAG_MP_PLUGGED;
1338 				wdata->state.flags &= ~WIIPROTO_FLAG_EXT_ACTIVE;
1339 				__wiimote_schedule(wdata);
1340 			}
1341 		}
1342 
1343 		/* detect MP data that is sent interleaved with EXT data */
1344 		is_mp = payload[5] & 0x02;
1345 	} else {
1346 		is_mp = false;
1347 	}
1348 
1349 	/* ignore EXT events if no extension is active */
1350 	if (!(wdata->state.flags & WIIPROTO_FLAG_EXT_ACTIVE) && !is_mp)
1351 		return;
1352 
1353 	/* try forwarding to extension handler, first */
1354 	ops = wiimod_ext_table[wdata->state.exttype];
1355 	if (is_mp && ops->in_mp) {
1356 		ops->in_mp(wdata, payload);
1357 		return;
1358 	} else if (!is_mp && valid_ext_handler(ops, len)) {
1359 		ops->in_ext(wdata, payload);
1360 		return;
1361 	}
1362 
1363 	/* try forwarding to MP handler */
1364 	ops = &wiimod_mp;
1365 	if (is_mp && ops->in_mp) {
1366 		ops->in_mp(wdata, payload);
1367 		return;
1368 	} else if (!is_mp && valid_ext_handler(ops, len)) {
1369 		ops->in_ext(wdata, payload);
1370 		return;
1371 	}
1372 
1373 	/* try forwarding to loaded modules */
1374 	mods = wiimote_devtype_mods[wdata->state.devtype];
1375 	for (iter = mods; *iter != WIIMOD_NULL; ++iter) {
1376 		ops = wiimod_table[*iter];
1377 		if (is_mp && ops->in_mp) {
1378 			ops->in_mp(wdata, payload);
1379 			return;
1380 		} else if (!is_mp && valid_ext_handler(ops, len)) {
1381 			ops->in_ext(wdata, payload);
1382 			return;
1383 		}
1384 	}
1385 }
1386 
1387 #define ir_to_input0(wdata, ir, packed) handler_ir((wdata), (ir), (packed), 0)
1388 #define ir_to_input1(wdata, ir, packed) handler_ir((wdata), (ir), (packed), 1)
1389 #define ir_to_input2(wdata, ir, packed) handler_ir((wdata), (ir), (packed), 2)
1390 #define ir_to_input3(wdata, ir, packed) handler_ir((wdata), (ir), (packed), 3)
1391 
1392 static void handler_ir(struct wiimote_data *wdata, const __u8 *payload,
1393 		       bool packed, unsigned int id)
1394 {
1395 	const __u8 *iter, *mods;
1396 	const struct wiimod_ops *ops;
1397 
1398 	ops = wiimod_ext_table[wdata->state.exttype];
1399 	if (ops->in_ir) {
1400 		ops->in_ir(wdata, payload, packed, id);
1401 		return;
1402 	}
1403 
1404 	mods = wiimote_devtype_mods[wdata->state.devtype];
1405 	for (iter = mods; *iter != WIIMOD_NULL; ++iter) {
1406 		ops = wiimod_table[*iter];
1407 		if (ops->in_ir) {
1408 			ops->in_ir(wdata, payload, packed, id);
1409 			break;
1410 		}
1411 	}
1412 }
1413 
1414 /* reduced status report with "BB BB" key data only */
1415 static void handler_status_K(struct wiimote_data *wdata,
1416 			     const __u8 *payload)
1417 {
1418 	handler_keys(wdata, payload);
1419 
1420 	/* on status reports the drm is reset so we need to resend the drm */
1421 	wiiproto_req_drm(wdata, WIIPROTO_REQ_NULL);
1422 }
1423 
1424 /* extended status report with "BB BB LF 00 00 VV" data */
1425 static void handler_status(struct wiimote_data *wdata, const __u8 *payload)
1426 {
1427 	handler_status_K(wdata, payload);
1428 
1429 	/* update extension status */
1430 	if (payload[2] & 0x02) {
1431 		if (!(wdata->state.flags & WIIPROTO_FLAG_EXT_PLUGGED)) {
1432 			hid_dbg(wdata->hdev, "EXT hotplug: 1\n");
1433 			wdata->state.flags |= WIIPROTO_FLAG_EXT_PLUGGED;
1434 			__wiimote_schedule(wdata);
1435 		}
1436 	} else {
1437 		if (wdata->state.flags & WIIPROTO_FLAG_EXT_PLUGGED) {
1438 			hid_dbg(wdata->hdev, "EXT hotplug: 0\n");
1439 			wdata->state.flags &= ~WIIPROTO_FLAG_EXT_PLUGGED;
1440 			wdata->state.flags &= ~WIIPROTO_FLAG_MP_PLUGGED;
1441 			wdata->state.flags &= ~WIIPROTO_FLAG_EXT_ACTIVE;
1442 			wdata->state.flags &= ~WIIPROTO_FLAG_MP_ACTIVE;
1443 			__wiimote_schedule(wdata);
1444 		}
1445 	}
1446 
1447 	wdata->state.cmd_battery = payload[5];
1448 	if (wiimote_cmd_pending(wdata, WIIPROTO_REQ_SREQ, 0))
1449 		wiimote_cmd_complete(wdata);
1450 }
1451 
1452 /* reduced generic report with "BB BB" key data only */
1453 static void handler_generic_K(struct wiimote_data *wdata, const __u8 *payload)
1454 {
1455 	handler_keys(wdata, payload);
1456 }
1457 
1458 static void handler_data(struct wiimote_data *wdata, const __u8 *payload)
1459 {
1460 	__u16 offset = payload[3] << 8 | payload[4];
1461 	__u8 size = (payload[2] >> 4) + 1;
1462 	__u8 err = payload[2] & 0x0f;
1463 
1464 	handler_keys(wdata, payload);
1465 
1466 	if (wiimote_cmd_pending(wdata, WIIPROTO_REQ_RMEM, offset)) {
1467 		if (err)
1468 			size = 0;
1469 		else if (size > wdata->state.cmd_read_size)
1470 			size = wdata->state.cmd_read_size;
1471 
1472 		wdata->state.cmd_read_size = size;
1473 		if (wdata->state.cmd_read_buf)
1474 			memcpy(wdata->state.cmd_read_buf, &payload[5], size);
1475 		wiimote_cmd_complete(wdata);
1476 	}
1477 }
1478 
1479 static void handler_return(struct wiimote_data *wdata, const __u8 *payload)
1480 {
1481 	__u8 err = payload[3];
1482 	__u8 cmd = payload[2];
1483 
1484 	handler_keys(wdata, payload);
1485 
1486 	if (wiimote_cmd_pending(wdata, cmd, 0)) {
1487 		wdata->state.cmd_err = err;
1488 		wiimote_cmd_complete(wdata);
1489 	} else if (err) {
1490 		hid_warn(wdata->hdev, "Remote error %u on req %u\n", err,
1491 									cmd);
1492 	}
1493 }
1494 
1495 static void handler_drm_KA(struct wiimote_data *wdata, const __u8 *payload)
1496 {
1497 	handler_keys(wdata, payload);
1498 	handler_accel(wdata, payload);
1499 }
1500 
1501 static void handler_drm_KE(struct wiimote_data *wdata, const __u8 *payload)
1502 {
1503 	handler_keys(wdata, payload);
1504 	handler_ext(wdata, &payload[2], 8);
1505 }
1506 
1507 static void handler_drm_KAI(struct wiimote_data *wdata, const __u8 *payload)
1508 {
1509 	handler_keys(wdata, payload);
1510 	handler_accel(wdata, payload);
1511 	ir_to_input0(wdata, &payload[5], false);
1512 	ir_to_input1(wdata, &payload[8], false);
1513 	ir_to_input2(wdata, &payload[11], false);
1514 	ir_to_input3(wdata, &payload[14], false);
1515 }
1516 
1517 static void handler_drm_KEE(struct wiimote_data *wdata, const __u8 *payload)
1518 {
1519 	handler_keys(wdata, payload);
1520 	handler_ext(wdata, &payload[2], 19);
1521 }
1522 
1523 static void handler_drm_KIE(struct wiimote_data *wdata, const __u8 *payload)
1524 {
1525 	handler_keys(wdata, payload);
1526 	ir_to_input0(wdata, &payload[2], false);
1527 	ir_to_input1(wdata, &payload[4], true);
1528 	ir_to_input2(wdata, &payload[7], false);
1529 	ir_to_input3(wdata, &payload[9], true);
1530 	handler_ext(wdata, &payload[12], 9);
1531 }
1532 
1533 static void handler_drm_KAE(struct wiimote_data *wdata, const __u8 *payload)
1534 {
1535 	handler_keys(wdata, payload);
1536 	handler_accel(wdata, payload);
1537 	handler_ext(wdata, &payload[5], 16);
1538 }
1539 
1540 static void handler_drm_KAIE(struct wiimote_data *wdata, const __u8 *payload)
1541 {
1542 	handler_keys(wdata, payload);
1543 	handler_accel(wdata, payload);
1544 	ir_to_input0(wdata, &payload[5], false);
1545 	ir_to_input1(wdata, &payload[7], true);
1546 	ir_to_input2(wdata, &payload[10], false);
1547 	ir_to_input3(wdata, &payload[12], true);
1548 	handler_ext(wdata, &payload[15], 6);
1549 }
1550 
1551 static void handler_drm_E(struct wiimote_data *wdata, const __u8 *payload)
1552 {
1553 	handler_ext(wdata, payload, 21);
1554 }
1555 
1556 static void handler_drm_SKAI1(struct wiimote_data *wdata, const __u8 *payload)
1557 {
1558 	handler_keys(wdata, payload);
1559 
1560 	wdata->state.accel_split[0] = payload[2];
1561 	wdata->state.accel_split[1] = (payload[0] >> 1) & (0x10 | 0x20);
1562 	wdata->state.accel_split[1] |= (payload[1] << 1) & (0x40 | 0x80);
1563 
1564 	ir_to_input0(wdata, &payload[3], false);
1565 	ir_to_input1(wdata, &payload[12], false);
1566 }
1567 
1568 static void handler_drm_SKAI2(struct wiimote_data *wdata, const __u8 *payload)
1569 {
1570 	__u8 buf[5];
1571 
1572 	handler_keys(wdata, payload);
1573 
1574 	wdata->state.accel_split[1] |= (payload[0] >> 5) & (0x01 | 0x02);
1575 	wdata->state.accel_split[1] |= (payload[1] >> 3) & (0x04 | 0x08);
1576 
1577 	buf[0] = 0;
1578 	buf[1] = 0;
1579 	buf[2] = wdata->state.accel_split[0];
1580 	buf[3] = payload[2];
1581 	buf[4] = wdata->state.accel_split[1];
1582 	handler_accel(wdata, buf);
1583 
1584 	ir_to_input2(wdata, &payload[3], false);
1585 	ir_to_input3(wdata, &payload[12], false);
1586 }
1587 
1588 struct wiiproto_handler {
1589 	__u8 id;
1590 	size_t size;
1591 	void (*func)(struct wiimote_data *wdata, const __u8 *payload);
1592 };
1593 
1594 static const struct wiiproto_handler handlers[] = {
1595 	{ .id = WIIPROTO_REQ_STATUS, .size = 6, .func = handler_status },
1596 	{ .id = WIIPROTO_REQ_STATUS, .size = 2, .func = handler_status_K },
1597 	{ .id = WIIPROTO_REQ_DATA, .size = 21, .func = handler_data },
1598 	{ .id = WIIPROTO_REQ_DATA, .size = 2, .func = handler_generic_K },
1599 	{ .id = WIIPROTO_REQ_RETURN, .size = 4, .func = handler_return },
1600 	{ .id = WIIPROTO_REQ_RETURN, .size = 2, .func = handler_generic_K },
1601 	{ .id = WIIPROTO_REQ_DRM_K, .size = 2, .func = handler_keys },
1602 	{ .id = WIIPROTO_REQ_DRM_KA, .size = 5, .func = handler_drm_KA },
1603 	{ .id = WIIPROTO_REQ_DRM_KA, .size = 2, .func = handler_generic_K },
1604 	{ .id = WIIPROTO_REQ_DRM_KE, .size = 10, .func = handler_drm_KE },
1605 	{ .id = WIIPROTO_REQ_DRM_KE, .size = 2, .func = handler_generic_K },
1606 	{ .id = WIIPROTO_REQ_DRM_KAI, .size = 17, .func = handler_drm_KAI },
1607 	{ .id = WIIPROTO_REQ_DRM_KAI, .size = 2, .func = handler_generic_K },
1608 	{ .id = WIIPROTO_REQ_DRM_KEE, .size = 21, .func = handler_drm_KEE },
1609 	{ .id = WIIPROTO_REQ_DRM_KEE, .size = 2, .func = handler_generic_K },
1610 	{ .id = WIIPROTO_REQ_DRM_KAE, .size = 21, .func = handler_drm_KAE },
1611 	{ .id = WIIPROTO_REQ_DRM_KAE, .size = 2, .func = handler_generic_K },
1612 	{ .id = WIIPROTO_REQ_DRM_KIE, .size = 21, .func = handler_drm_KIE },
1613 	{ .id = WIIPROTO_REQ_DRM_KIE, .size = 2, .func = handler_generic_K },
1614 	{ .id = WIIPROTO_REQ_DRM_KAIE, .size = 21, .func = handler_drm_KAIE },
1615 	{ .id = WIIPROTO_REQ_DRM_KAIE, .size = 2, .func = handler_generic_K },
1616 	{ .id = WIIPROTO_REQ_DRM_E, .size = 21, .func = handler_drm_E },
1617 	{ .id = WIIPROTO_REQ_DRM_SKAI1, .size = 21, .func = handler_drm_SKAI1 },
1618 	{ .id = WIIPROTO_REQ_DRM_SKAI2, .size = 21, .func = handler_drm_SKAI2 },
1619 	{ .id = 0 }
1620 };
1621 
1622 static int wiimote_hid_event(struct hid_device *hdev, struct hid_report *report,
1623 							u8 *raw_data, int size)
1624 {
1625 	struct wiimote_data *wdata = hid_get_drvdata(hdev);
1626 	const struct wiiproto_handler *h;
1627 	int i;
1628 	unsigned long flags;
1629 
1630 	if (size < 1)
1631 		return -EINVAL;
1632 
1633 	for (i = 0; handlers[i].id; ++i) {
1634 		h = &handlers[i];
1635 		if (h->id == raw_data[0] && h->size < size) {
1636 			spin_lock_irqsave(&wdata->state.lock, flags);
1637 			h->func(wdata, &raw_data[1]);
1638 			spin_unlock_irqrestore(&wdata->state.lock, flags);
1639 			break;
1640 		}
1641 	}
1642 
1643 	if (!handlers[i].id)
1644 		hid_warn(hdev, "Unhandled report %hhu size %d\n", raw_data[0],
1645 									size);
1646 
1647 	return 0;
1648 }
1649 
1650 static ssize_t wiimote_ext_show(struct device *dev,
1651 				struct device_attribute *attr,
1652 				char *buf)
1653 {
1654 	struct wiimote_data *wdata = dev_to_wii(dev);
1655 	__u8 type;
1656 	unsigned long flags;
1657 
1658 	spin_lock_irqsave(&wdata->state.lock, flags);
1659 	type = wdata->state.exttype;
1660 	spin_unlock_irqrestore(&wdata->state.lock, flags);
1661 
1662 	switch (type) {
1663 	case WIIMOTE_EXT_NONE:
1664 		return sprintf(buf, "none\n");
1665 	case WIIMOTE_EXT_NUNCHUK:
1666 		return sprintf(buf, "nunchuk\n");
1667 	case WIIMOTE_EXT_CLASSIC_CONTROLLER:
1668 		return sprintf(buf, "classic\n");
1669 	case WIIMOTE_EXT_BALANCE_BOARD:
1670 		return sprintf(buf, "balanceboard\n");
1671 	case WIIMOTE_EXT_PRO_CONTROLLER:
1672 		return sprintf(buf, "procontroller\n");
1673 	case WIIMOTE_EXT_DRUMS:
1674 		return sprintf(buf, "drums\n");
1675 	case WIIMOTE_EXT_GUITAR:
1676 		return sprintf(buf, "guitar\n");
1677 	case WIIMOTE_EXT_TURNTABLE:
1678 		return sprintf(buf, "turntable\n");
1679 	case WIIMOTE_EXT_UNKNOWN:
1680 	default:
1681 		return sprintf(buf, "unknown\n");
1682 	}
1683 }
1684 
1685 static ssize_t wiimote_ext_store(struct device *dev,
1686 				 struct device_attribute *attr,
1687 				 const char *buf, size_t count)
1688 {
1689 	struct wiimote_data *wdata = dev_to_wii(dev);
1690 
1691 	if (!strcmp(buf, "scan")) {
1692 		wiimote_schedule(wdata);
1693 	} else {
1694 		return -EINVAL;
1695 	}
1696 
1697 	return strnlen(buf, PAGE_SIZE);
1698 }
1699 
1700 static DEVICE_ATTR(extension, S_IRUGO | S_IWUSR | S_IWGRP, wiimote_ext_show,
1701 		   wiimote_ext_store);
1702 
1703 static ssize_t wiimote_dev_show(struct device *dev,
1704 				struct device_attribute *attr,
1705 				char *buf)
1706 {
1707 	struct wiimote_data *wdata = dev_to_wii(dev);
1708 	__u8 type;
1709 	unsigned long flags;
1710 
1711 	spin_lock_irqsave(&wdata->state.lock, flags);
1712 	type = wdata->state.devtype;
1713 	spin_unlock_irqrestore(&wdata->state.lock, flags);
1714 
1715 	switch (type) {
1716 	case WIIMOTE_DEV_GENERIC:
1717 		return sprintf(buf, "generic\n");
1718 	case WIIMOTE_DEV_GEN10:
1719 		return sprintf(buf, "gen10\n");
1720 	case WIIMOTE_DEV_GEN20:
1721 		return sprintf(buf, "gen20\n");
1722 	case WIIMOTE_DEV_BALANCE_BOARD:
1723 		return sprintf(buf, "balanceboard\n");
1724 	case WIIMOTE_DEV_PRO_CONTROLLER:
1725 		return sprintf(buf, "procontroller\n");
1726 	case WIIMOTE_DEV_PENDING:
1727 		return sprintf(buf, "pending\n");
1728 	case WIIMOTE_DEV_UNKNOWN:
1729 	default:
1730 		return sprintf(buf, "unknown\n");
1731 	}
1732 }
1733 
1734 static DEVICE_ATTR(devtype, S_IRUGO, wiimote_dev_show, NULL);
1735 
1736 static struct wiimote_data *wiimote_create(struct hid_device *hdev)
1737 {
1738 	struct wiimote_data *wdata;
1739 
1740 	wdata = kzalloc(sizeof(*wdata), GFP_KERNEL);
1741 	if (!wdata)
1742 		return NULL;
1743 
1744 	wdata->hdev = hdev;
1745 	hid_set_drvdata(hdev, wdata);
1746 
1747 	spin_lock_init(&wdata->queue.lock);
1748 	INIT_WORK(&wdata->queue.worker, wiimote_queue_worker);
1749 
1750 	spin_lock_init(&wdata->state.lock);
1751 	init_completion(&wdata->state.ready);
1752 	mutex_init(&wdata->state.sync);
1753 	wdata->state.drm = WIIPROTO_REQ_DRM_K;
1754 	wdata->state.cmd_battery = 0xff;
1755 
1756 	INIT_WORK(&wdata->init_worker, wiimote_init_worker);
1757 	timer_setup(&wdata->timer, wiimote_init_timeout, 0);
1758 
1759 	return wdata;
1760 }
1761 
1762 static void wiimote_destroy(struct wiimote_data *wdata)
1763 {
1764 	unsigned long flags;
1765 
1766 	wiidebug_deinit(wdata);
1767 
1768 	/* prevent init_worker from being scheduled again */
1769 	spin_lock_irqsave(&wdata->state.lock, flags);
1770 	wdata->state.flags |= WIIPROTO_FLAG_EXITING;
1771 	spin_unlock_irqrestore(&wdata->state.lock, flags);
1772 
1773 	cancel_work_sync(&wdata->init_worker);
1774 	timer_shutdown_sync(&wdata->timer);
1775 
1776 	device_remove_file(&wdata->hdev->dev, &dev_attr_devtype);
1777 	device_remove_file(&wdata->hdev->dev, &dev_attr_extension);
1778 
1779 	wiimote_mp_unload(wdata);
1780 	wiimote_ext_unload(wdata);
1781 	wiimote_modules_unload(wdata);
1782 	cancel_work_sync(&wdata->queue.worker);
1783 	hid_hw_close(wdata->hdev);
1784 	hid_hw_stop(wdata->hdev);
1785 
1786 	kfree(wdata);
1787 }
1788 
1789 static int wiimote_hid_probe(struct hid_device *hdev,
1790 				const struct hid_device_id *id)
1791 {
1792 	struct wiimote_data *wdata;
1793 	int ret;
1794 
1795 	hdev->quirks |= HID_QUIRK_NO_INIT_REPORTS;
1796 
1797 	wdata = wiimote_create(hdev);
1798 	if (!wdata) {
1799 		hid_err(hdev, "Can't alloc device\n");
1800 		return -ENOMEM;
1801 	}
1802 
1803 	ret = hid_parse(hdev);
1804 	if (ret) {
1805 		hid_err(hdev, "HID parse failed\n");
1806 		goto err;
1807 	}
1808 
1809 	ret = hid_hw_start(hdev, HID_CONNECT_HIDRAW);
1810 	if (ret) {
1811 		hid_err(hdev, "HW start failed\n");
1812 		goto err;
1813 	}
1814 
1815 	ret = hid_hw_open(hdev);
1816 	if (ret) {
1817 		hid_err(hdev, "cannot start hardware I/O\n");
1818 		goto err_stop;
1819 	}
1820 
1821 	ret = device_create_file(&hdev->dev, &dev_attr_extension);
1822 	if (ret) {
1823 		hid_err(hdev, "cannot create sysfs attribute\n");
1824 		goto err_close;
1825 	}
1826 
1827 	ret = device_create_file(&hdev->dev, &dev_attr_devtype);
1828 	if (ret) {
1829 		hid_err(hdev, "cannot create sysfs attribute\n");
1830 		goto err_ext;
1831 	}
1832 
1833 	ret = wiidebug_init(wdata);
1834 	if (ret)
1835 		goto err_free;
1836 
1837 	hid_info(hdev, "New device registered\n");
1838 
1839 	/* schedule device detection */
1840 	wiimote_schedule(wdata);
1841 
1842 	return 0;
1843 
1844 err_free:
1845 	wiimote_destroy(wdata);
1846 	return ret;
1847 
1848 err_ext:
1849 	device_remove_file(&wdata->hdev->dev, &dev_attr_extension);
1850 err_close:
1851 	hid_hw_close(hdev);
1852 err_stop:
1853 	hid_hw_stop(hdev);
1854 err:
1855 	input_free_device(wdata->ir);
1856 	input_free_device(wdata->accel);
1857 	kfree(wdata);
1858 	return ret;
1859 }
1860 
1861 static void wiimote_hid_remove(struct hid_device *hdev)
1862 {
1863 	struct wiimote_data *wdata = hid_get_drvdata(hdev);
1864 
1865 	hid_info(hdev, "Device removed\n");
1866 	wiimote_destroy(wdata);
1867 }
1868 
1869 static const struct hid_device_id wiimote_hid_devices[] = {
1870 	{ HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_NINTENDO,
1871 				USB_DEVICE_ID_NINTENDO_WIIMOTE) },
1872 	{ HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_NINTENDO,
1873 				USB_DEVICE_ID_NINTENDO_WIIMOTE2) },
1874 	{ }
1875 };
1876 
1877 bool wiimote_dpad_as_analog = false;
1878 module_param_named(dpad_as_analog, wiimote_dpad_as_analog, bool, 0644);
1879 MODULE_PARM_DESC(dpad_as_analog, "Use D-Pad as main analog input");
1880 
1881 MODULE_DEVICE_TABLE(hid, wiimote_hid_devices);
1882 
1883 static struct hid_driver wiimote_hid_driver = {
1884 	.name = "wiimote",
1885 	.id_table = wiimote_hid_devices,
1886 	.probe = wiimote_hid_probe,
1887 	.remove = wiimote_hid_remove,
1888 	.raw_event = wiimote_hid_event,
1889 };
1890 module_hid_driver(wiimote_hid_driver);
1891 
1892 MODULE_LICENSE("GPL");
1893 MODULE_AUTHOR("David Herrmann <dh.herrmann@gmail.com>");
1894 MODULE_DESCRIPTION("Driver for Nintendo Wii / Wii U peripherals");
1895