1 /* 2 * f_hid.c -- USB HID function driver 3 * 4 * Copyright (C) 2010 Fabien Chouteau <fabien.chouteau@barco.com> 5 * 6 * This program is free software; you can redistribute it and/or modify 7 * it under the terms of the GNU General Public License as published by 8 * the Free Software Foundation; either version 2 of the License, or 9 * (at your option) any later version. 10 */ 11 12 #include <linux/kernel.h> 13 #include <linux/module.h> 14 #include <linux/hid.h> 15 #include <linux/idr.h> 16 #include <linux/cdev.h> 17 #include <linux/mutex.h> 18 #include <linux/poll.h> 19 #include <linux/uaccess.h> 20 #include <linux/wait.h> 21 #include <linux/sched.h> 22 #include <linux/usb/g_hid.h> 23 24 #include "u_f.h" 25 #include "u_hid.h" 26 27 #define HIDG_MINORS 4 28 29 static int major, minors; 30 static struct class *hidg_class; 31 static DEFINE_IDA(hidg_ida); 32 static DEFINE_MUTEX(hidg_ida_lock); /* protects access to hidg_ida */ 33 34 /*-------------------------------------------------------------------------*/ 35 /* HID gadget struct */ 36 37 struct f_hidg_req_list { 38 struct usb_request *req; 39 unsigned int pos; 40 struct list_head list; 41 }; 42 43 struct f_hidg { 44 /* configuration */ 45 unsigned char bInterfaceSubClass; 46 unsigned char bInterfaceProtocol; 47 unsigned short report_desc_length; 48 char *report_desc; 49 unsigned short report_length; 50 51 /* recv report */ 52 struct list_head completed_out_req; 53 spinlock_t spinlock; 54 wait_queue_head_t read_queue; 55 unsigned int qlen; 56 57 /* send report */ 58 struct mutex lock; 59 bool write_pending; 60 wait_queue_head_t write_queue; 61 struct usb_request *req; 62 63 int minor; 64 struct cdev cdev; 65 struct usb_function func; 66 67 struct usb_ep *in_ep; 68 struct usb_ep *out_ep; 69 }; 70 71 static inline struct f_hidg *func_to_hidg(struct usb_function *f) 72 { 73 return container_of(f, struct f_hidg, func); 74 } 75 76 /*-------------------------------------------------------------------------*/ 77 /* Static descriptors */ 78 79 static struct usb_interface_descriptor hidg_interface_desc = { 80 .bLength = sizeof hidg_interface_desc, 81 .bDescriptorType = USB_DT_INTERFACE, 82 /* .bInterfaceNumber = DYNAMIC */ 83 .bAlternateSetting = 0, 84 .bNumEndpoints = 2, 85 .bInterfaceClass = USB_CLASS_HID, 86 /* .bInterfaceSubClass = DYNAMIC */ 87 /* .bInterfaceProtocol = DYNAMIC */ 88 /* .iInterface = DYNAMIC */ 89 }; 90 91 static struct hid_descriptor hidg_desc = { 92 .bLength = sizeof hidg_desc, 93 .bDescriptorType = HID_DT_HID, 94 .bcdHID = 0x0101, 95 .bCountryCode = 0x00, 96 .bNumDescriptors = 0x1, 97 /*.desc[0].bDescriptorType = DYNAMIC */ 98 /*.desc[0].wDescriptorLenght = DYNAMIC */ 99 }; 100 101 /* High-Speed Support */ 102 103 static struct usb_endpoint_descriptor hidg_hs_in_ep_desc = { 104 .bLength = USB_DT_ENDPOINT_SIZE, 105 .bDescriptorType = USB_DT_ENDPOINT, 106 .bEndpointAddress = USB_DIR_IN, 107 .bmAttributes = USB_ENDPOINT_XFER_INT, 108 /*.wMaxPacketSize = DYNAMIC */ 109 .bInterval = 4, /* FIXME: Add this field in the 110 * HID gadget configuration? 111 * (struct hidg_func_descriptor) 112 */ 113 }; 114 115 static struct usb_endpoint_descriptor hidg_hs_out_ep_desc = { 116 .bLength = USB_DT_ENDPOINT_SIZE, 117 .bDescriptorType = USB_DT_ENDPOINT, 118 .bEndpointAddress = USB_DIR_OUT, 119 .bmAttributes = USB_ENDPOINT_XFER_INT, 120 /*.wMaxPacketSize = DYNAMIC */ 121 .bInterval = 4, /* FIXME: Add this field in the 122 * HID gadget configuration? 123 * (struct hidg_func_descriptor) 124 */ 125 }; 126 127 static struct usb_descriptor_header *hidg_hs_descriptors[] = { 128 (struct usb_descriptor_header *)&hidg_interface_desc, 129 (struct usb_descriptor_header *)&hidg_desc, 130 (struct usb_descriptor_header *)&hidg_hs_in_ep_desc, 131 (struct usb_descriptor_header *)&hidg_hs_out_ep_desc, 132 NULL, 133 }; 134 135 /* Full-Speed Support */ 136 137 static struct usb_endpoint_descriptor hidg_fs_in_ep_desc = { 138 .bLength = USB_DT_ENDPOINT_SIZE, 139 .bDescriptorType = USB_DT_ENDPOINT, 140 .bEndpointAddress = USB_DIR_IN, 141 .bmAttributes = USB_ENDPOINT_XFER_INT, 142 /*.wMaxPacketSize = DYNAMIC */ 143 .bInterval = 10, /* FIXME: Add this field in the 144 * HID gadget configuration? 145 * (struct hidg_func_descriptor) 146 */ 147 }; 148 149 static struct usb_endpoint_descriptor hidg_fs_out_ep_desc = { 150 .bLength = USB_DT_ENDPOINT_SIZE, 151 .bDescriptorType = USB_DT_ENDPOINT, 152 .bEndpointAddress = USB_DIR_OUT, 153 .bmAttributes = USB_ENDPOINT_XFER_INT, 154 /*.wMaxPacketSize = DYNAMIC */ 155 .bInterval = 10, /* FIXME: Add this field in the 156 * HID gadget configuration? 157 * (struct hidg_func_descriptor) 158 */ 159 }; 160 161 static struct usb_descriptor_header *hidg_fs_descriptors[] = { 162 (struct usb_descriptor_header *)&hidg_interface_desc, 163 (struct usb_descriptor_header *)&hidg_desc, 164 (struct usb_descriptor_header *)&hidg_fs_in_ep_desc, 165 (struct usb_descriptor_header *)&hidg_fs_out_ep_desc, 166 NULL, 167 }; 168 169 /*-------------------------------------------------------------------------*/ 170 /* Strings */ 171 172 #define CT_FUNC_HID_IDX 0 173 174 static struct usb_string ct_func_string_defs[] = { 175 [CT_FUNC_HID_IDX].s = "HID Interface", 176 {}, /* end of list */ 177 }; 178 179 static struct usb_gadget_strings ct_func_string_table = { 180 .language = 0x0409, /* en-US */ 181 .strings = ct_func_string_defs, 182 }; 183 184 static struct usb_gadget_strings *ct_func_strings[] = { 185 &ct_func_string_table, 186 NULL, 187 }; 188 189 /*-------------------------------------------------------------------------*/ 190 /* Char Device */ 191 192 static ssize_t f_hidg_read(struct file *file, char __user *buffer, 193 size_t count, loff_t *ptr) 194 { 195 struct f_hidg *hidg = file->private_data; 196 struct f_hidg_req_list *list; 197 struct usb_request *req; 198 unsigned long flags; 199 int ret; 200 201 if (!count) 202 return 0; 203 204 if (!access_ok(VERIFY_WRITE, buffer, count)) 205 return -EFAULT; 206 207 spin_lock_irqsave(&hidg->spinlock, flags); 208 209 #define READ_COND (!list_empty(&hidg->completed_out_req)) 210 211 /* wait for at least one buffer to complete */ 212 while (!READ_COND) { 213 spin_unlock_irqrestore(&hidg->spinlock, flags); 214 if (file->f_flags & O_NONBLOCK) 215 return -EAGAIN; 216 217 if (wait_event_interruptible(hidg->read_queue, READ_COND)) 218 return -ERESTARTSYS; 219 220 spin_lock_irqsave(&hidg->spinlock, flags); 221 } 222 223 /* pick the first one */ 224 list = list_first_entry(&hidg->completed_out_req, 225 struct f_hidg_req_list, list); 226 req = list->req; 227 count = min_t(unsigned int, count, req->actual - list->pos); 228 spin_unlock_irqrestore(&hidg->spinlock, flags); 229 230 /* copy to user outside spinlock */ 231 count -= copy_to_user(buffer, req->buf + list->pos, count); 232 list->pos += count; 233 234 /* 235 * if this request is completely handled and transfered to 236 * userspace, remove its entry from the list and requeue it 237 * again. Otherwise, we will revisit it again upon the next 238 * call, taking into account its current read position. 239 */ 240 if (list->pos == req->actual) { 241 spin_lock_irqsave(&hidg->spinlock, flags); 242 list_del(&list->list); 243 kfree(list); 244 spin_unlock_irqrestore(&hidg->spinlock, flags); 245 246 req->length = hidg->report_length; 247 ret = usb_ep_queue(hidg->out_ep, req, GFP_KERNEL); 248 if (ret < 0) 249 return ret; 250 } 251 252 return count; 253 } 254 255 static void f_hidg_req_complete(struct usb_ep *ep, struct usb_request *req) 256 { 257 struct f_hidg *hidg = (struct f_hidg *)ep->driver_data; 258 259 if (req->status != 0) { 260 ERROR(hidg->func.config->cdev, 261 "End Point Request ERROR: %d\n", req->status); 262 } 263 264 hidg->write_pending = 0; 265 wake_up(&hidg->write_queue); 266 } 267 268 static ssize_t f_hidg_write(struct file *file, const char __user *buffer, 269 size_t count, loff_t *offp) 270 { 271 struct f_hidg *hidg = file->private_data; 272 ssize_t status = -ENOMEM; 273 274 if (!access_ok(VERIFY_READ, buffer, count)) 275 return -EFAULT; 276 277 mutex_lock(&hidg->lock); 278 279 #define WRITE_COND (!hidg->write_pending) 280 281 /* write queue */ 282 while (!WRITE_COND) { 283 mutex_unlock(&hidg->lock); 284 if (file->f_flags & O_NONBLOCK) 285 return -EAGAIN; 286 287 if (wait_event_interruptible_exclusive( 288 hidg->write_queue, WRITE_COND)) 289 return -ERESTARTSYS; 290 291 mutex_lock(&hidg->lock); 292 } 293 294 count = min_t(unsigned, count, hidg->report_length); 295 status = copy_from_user(hidg->req->buf, buffer, count); 296 297 if (status != 0) { 298 ERROR(hidg->func.config->cdev, 299 "copy_from_user error\n"); 300 mutex_unlock(&hidg->lock); 301 return -EINVAL; 302 } 303 304 hidg->req->status = 0; 305 hidg->req->zero = 0; 306 hidg->req->length = count; 307 hidg->req->complete = f_hidg_req_complete; 308 hidg->req->context = hidg; 309 hidg->write_pending = 1; 310 311 status = usb_ep_queue(hidg->in_ep, hidg->req, GFP_ATOMIC); 312 if (status < 0) { 313 ERROR(hidg->func.config->cdev, 314 "usb_ep_queue error on int endpoint %zd\n", status); 315 hidg->write_pending = 0; 316 wake_up(&hidg->write_queue); 317 } else { 318 status = count; 319 } 320 321 mutex_unlock(&hidg->lock); 322 323 return status; 324 } 325 326 static unsigned int f_hidg_poll(struct file *file, poll_table *wait) 327 { 328 struct f_hidg *hidg = file->private_data; 329 unsigned int ret = 0; 330 331 poll_wait(file, &hidg->read_queue, wait); 332 poll_wait(file, &hidg->write_queue, wait); 333 334 if (WRITE_COND) 335 ret |= POLLOUT | POLLWRNORM; 336 337 if (READ_COND) 338 ret |= POLLIN | POLLRDNORM; 339 340 return ret; 341 } 342 343 #undef WRITE_COND 344 #undef READ_COND 345 346 static int f_hidg_release(struct inode *inode, struct file *fd) 347 { 348 fd->private_data = NULL; 349 return 0; 350 } 351 352 static int f_hidg_open(struct inode *inode, struct file *fd) 353 { 354 struct f_hidg *hidg = 355 container_of(inode->i_cdev, struct f_hidg, cdev); 356 357 fd->private_data = hidg; 358 359 return 0; 360 } 361 362 /*-------------------------------------------------------------------------*/ 363 /* usb_function */ 364 365 static inline struct usb_request *hidg_alloc_ep_req(struct usb_ep *ep, 366 unsigned length) 367 { 368 return alloc_ep_req(ep, length, length); 369 } 370 371 static void hidg_set_report_complete(struct usb_ep *ep, struct usb_request *req) 372 { 373 struct f_hidg *hidg = (struct f_hidg *) req->context; 374 struct f_hidg_req_list *req_list; 375 unsigned long flags; 376 377 req_list = kzalloc(sizeof(*req_list), GFP_ATOMIC); 378 if (!req_list) 379 return; 380 381 req_list->req = req; 382 383 spin_lock_irqsave(&hidg->spinlock, flags); 384 list_add_tail(&req_list->list, &hidg->completed_out_req); 385 spin_unlock_irqrestore(&hidg->spinlock, flags); 386 387 wake_up(&hidg->read_queue); 388 } 389 390 static int hidg_setup(struct usb_function *f, 391 const struct usb_ctrlrequest *ctrl) 392 { 393 struct f_hidg *hidg = func_to_hidg(f); 394 struct usb_composite_dev *cdev = f->config->cdev; 395 struct usb_request *req = cdev->req; 396 int status = 0; 397 __u16 value, length; 398 399 value = __le16_to_cpu(ctrl->wValue); 400 length = __le16_to_cpu(ctrl->wLength); 401 402 VDBG(cdev, 403 "%s crtl_request : bRequestType:0x%x bRequest:0x%x Value:0x%x\n", 404 __func__, ctrl->bRequestType, ctrl->bRequest, value); 405 406 switch ((ctrl->bRequestType << 8) | ctrl->bRequest) { 407 case ((USB_DIR_IN | USB_TYPE_CLASS | USB_RECIP_INTERFACE) << 8 408 | HID_REQ_GET_REPORT): 409 VDBG(cdev, "get_report\n"); 410 411 /* send an empty report */ 412 length = min_t(unsigned, length, hidg->report_length); 413 memset(req->buf, 0x0, length); 414 415 goto respond; 416 break; 417 418 case ((USB_DIR_IN | USB_TYPE_CLASS | USB_RECIP_INTERFACE) << 8 419 | HID_REQ_GET_PROTOCOL): 420 VDBG(cdev, "get_protocol\n"); 421 goto stall; 422 break; 423 424 case ((USB_DIR_OUT | USB_TYPE_CLASS | USB_RECIP_INTERFACE) << 8 425 | HID_REQ_SET_REPORT): 426 VDBG(cdev, "set_report | wLength=%d\n", ctrl->wLength); 427 goto stall; 428 break; 429 430 case ((USB_DIR_OUT | USB_TYPE_CLASS | USB_RECIP_INTERFACE) << 8 431 | HID_REQ_SET_PROTOCOL): 432 VDBG(cdev, "set_protocol\n"); 433 goto stall; 434 break; 435 436 case ((USB_DIR_IN | USB_TYPE_STANDARD | USB_RECIP_INTERFACE) << 8 437 | USB_REQ_GET_DESCRIPTOR): 438 switch (value >> 8) { 439 case HID_DT_HID: 440 { 441 struct hid_descriptor hidg_desc_copy = hidg_desc; 442 443 VDBG(cdev, "USB_REQ_GET_DESCRIPTOR: HID\n"); 444 hidg_desc_copy.desc[0].bDescriptorType = HID_DT_REPORT; 445 hidg_desc_copy.desc[0].wDescriptorLength = 446 cpu_to_le16(hidg->report_desc_length); 447 448 length = min_t(unsigned short, length, 449 hidg_desc_copy.bLength); 450 memcpy(req->buf, &hidg_desc_copy, length); 451 goto respond; 452 break; 453 } 454 case HID_DT_REPORT: 455 VDBG(cdev, "USB_REQ_GET_DESCRIPTOR: REPORT\n"); 456 length = min_t(unsigned short, length, 457 hidg->report_desc_length); 458 memcpy(req->buf, hidg->report_desc, length); 459 goto respond; 460 break; 461 462 default: 463 VDBG(cdev, "Unknown descriptor request 0x%x\n", 464 value >> 8); 465 goto stall; 466 break; 467 } 468 break; 469 470 default: 471 VDBG(cdev, "Unknown request 0x%x\n", 472 ctrl->bRequest); 473 goto stall; 474 break; 475 } 476 477 stall: 478 return -EOPNOTSUPP; 479 480 respond: 481 req->zero = 0; 482 req->length = length; 483 status = usb_ep_queue(cdev->gadget->ep0, req, GFP_ATOMIC); 484 if (status < 0) 485 ERROR(cdev, "usb_ep_queue error on ep0 %d\n", value); 486 return status; 487 } 488 489 static void hidg_disable(struct usb_function *f) 490 { 491 struct f_hidg *hidg = func_to_hidg(f); 492 struct f_hidg_req_list *list, *next; 493 494 usb_ep_disable(hidg->in_ep); 495 hidg->in_ep->driver_data = NULL; 496 497 usb_ep_disable(hidg->out_ep); 498 hidg->out_ep->driver_data = NULL; 499 500 list_for_each_entry_safe(list, next, &hidg->completed_out_req, list) { 501 list_del(&list->list); 502 kfree(list); 503 } 504 } 505 506 static int hidg_set_alt(struct usb_function *f, unsigned intf, unsigned alt) 507 { 508 struct usb_composite_dev *cdev = f->config->cdev; 509 struct f_hidg *hidg = func_to_hidg(f); 510 int i, status = 0; 511 512 VDBG(cdev, "hidg_set_alt intf:%d alt:%d\n", intf, alt); 513 514 if (hidg->in_ep != NULL) { 515 /* restart endpoint */ 516 if (hidg->in_ep->driver_data != NULL) 517 usb_ep_disable(hidg->in_ep); 518 519 status = config_ep_by_speed(f->config->cdev->gadget, f, 520 hidg->in_ep); 521 if (status) { 522 ERROR(cdev, "config_ep_by_speed FAILED!\n"); 523 goto fail; 524 } 525 status = usb_ep_enable(hidg->in_ep); 526 if (status < 0) { 527 ERROR(cdev, "Enable IN endpoint FAILED!\n"); 528 goto fail; 529 } 530 hidg->in_ep->driver_data = hidg; 531 } 532 533 534 if (hidg->out_ep != NULL) { 535 /* restart endpoint */ 536 if (hidg->out_ep->driver_data != NULL) 537 usb_ep_disable(hidg->out_ep); 538 539 status = config_ep_by_speed(f->config->cdev->gadget, f, 540 hidg->out_ep); 541 if (status) { 542 ERROR(cdev, "config_ep_by_speed FAILED!\n"); 543 goto fail; 544 } 545 status = usb_ep_enable(hidg->out_ep); 546 if (status < 0) { 547 ERROR(cdev, "Enable IN endpoint FAILED!\n"); 548 goto fail; 549 } 550 hidg->out_ep->driver_data = hidg; 551 552 /* 553 * allocate a bunch of read buffers and queue them all at once. 554 */ 555 for (i = 0; i < hidg->qlen && status == 0; i++) { 556 struct usb_request *req = 557 hidg_alloc_ep_req(hidg->out_ep, 558 hidg->report_length); 559 if (req) { 560 req->complete = hidg_set_report_complete; 561 req->context = hidg; 562 status = usb_ep_queue(hidg->out_ep, req, 563 GFP_ATOMIC); 564 if (status) 565 ERROR(cdev, "%s queue req --> %d\n", 566 hidg->out_ep->name, status); 567 } else { 568 usb_ep_disable(hidg->out_ep); 569 hidg->out_ep->driver_data = NULL; 570 status = -ENOMEM; 571 goto fail; 572 } 573 } 574 } 575 576 fail: 577 return status; 578 } 579 580 static const struct file_operations f_hidg_fops = { 581 .owner = THIS_MODULE, 582 .open = f_hidg_open, 583 .release = f_hidg_release, 584 .write = f_hidg_write, 585 .read = f_hidg_read, 586 .poll = f_hidg_poll, 587 .llseek = noop_llseek, 588 }; 589 590 static int hidg_bind(struct usb_configuration *c, struct usb_function *f) 591 { 592 struct usb_ep *ep; 593 struct f_hidg *hidg = func_to_hidg(f); 594 struct usb_string *us; 595 struct device *device; 596 int status; 597 dev_t dev; 598 599 /* maybe allocate device-global string IDs, and patch descriptors */ 600 us = usb_gstrings_attach(c->cdev, ct_func_strings, 601 ARRAY_SIZE(ct_func_string_defs)); 602 if (IS_ERR(us)) 603 return PTR_ERR(us); 604 hidg_interface_desc.iInterface = us[CT_FUNC_HID_IDX].id; 605 606 /* allocate instance-specific interface IDs, and patch descriptors */ 607 status = usb_interface_id(c, f); 608 if (status < 0) 609 goto fail; 610 hidg_interface_desc.bInterfaceNumber = status; 611 612 /* allocate instance-specific endpoints */ 613 status = -ENODEV; 614 ep = usb_ep_autoconfig(c->cdev->gadget, &hidg_fs_in_ep_desc); 615 if (!ep) 616 goto fail; 617 ep->driver_data = c->cdev; /* claim */ 618 hidg->in_ep = ep; 619 620 ep = usb_ep_autoconfig(c->cdev->gadget, &hidg_fs_out_ep_desc); 621 if (!ep) 622 goto fail; 623 ep->driver_data = c->cdev; /* claim */ 624 hidg->out_ep = ep; 625 626 /* preallocate request and buffer */ 627 status = -ENOMEM; 628 hidg->req = usb_ep_alloc_request(hidg->in_ep, GFP_KERNEL); 629 if (!hidg->req) 630 goto fail; 631 632 hidg->req->buf = kmalloc(hidg->report_length, GFP_KERNEL); 633 if (!hidg->req->buf) 634 goto fail; 635 636 /* set descriptor dynamic values */ 637 hidg_interface_desc.bInterfaceSubClass = hidg->bInterfaceSubClass; 638 hidg_interface_desc.bInterfaceProtocol = hidg->bInterfaceProtocol; 639 hidg_hs_in_ep_desc.wMaxPacketSize = cpu_to_le16(hidg->report_length); 640 hidg_fs_in_ep_desc.wMaxPacketSize = cpu_to_le16(hidg->report_length); 641 hidg_hs_out_ep_desc.wMaxPacketSize = cpu_to_le16(hidg->report_length); 642 hidg_fs_out_ep_desc.wMaxPacketSize = cpu_to_le16(hidg->report_length); 643 /* 644 * We can use hidg_desc struct here but we should not relay 645 * that its content won't change after returning from this function. 646 */ 647 hidg_desc.desc[0].bDescriptorType = HID_DT_REPORT; 648 hidg_desc.desc[0].wDescriptorLength = 649 cpu_to_le16(hidg->report_desc_length); 650 651 hidg_hs_in_ep_desc.bEndpointAddress = 652 hidg_fs_in_ep_desc.bEndpointAddress; 653 hidg_hs_out_ep_desc.bEndpointAddress = 654 hidg_fs_out_ep_desc.bEndpointAddress; 655 656 status = usb_assign_descriptors(f, hidg_fs_descriptors, 657 hidg_hs_descriptors, NULL); 658 if (status) 659 goto fail; 660 661 mutex_init(&hidg->lock); 662 spin_lock_init(&hidg->spinlock); 663 init_waitqueue_head(&hidg->write_queue); 664 init_waitqueue_head(&hidg->read_queue); 665 INIT_LIST_HEAD(&hidg->completed_out_req); 666 667 /* create char device */ 668 cdev_init(&hidg->cdev, &f_hidg_fops); 669 dev = MKDEV(major, hidg->minor); 670 status = cdev_add(&hidg->cdev, dev, 1); 671 if (status) 672 goto fail_free_descs; 673 674 device = device_create(hidg_class, NULL, dev, NULL, 675 "%s%d", "hidg", hidg->minor); 676 if (IS_ERR(device)) { 677 status = PTR_ERR(device); 678 goto del; 679 } 680 681 return 0; 682 del: 683 cdev_del(&hidg->cdev); 684 fail_free_descs: 685 usb_free_all_descriptors(f); 686 fail: 687 ERROR(f->config->cdev, "hidg_bind FAILED\n"); 688 if (hidg->req != NULL) { 689 kfree(hidg->req->buf); 690 if (hidg->in_ep != NULL) 691 usb_ep_free_request(hidg->in_ep, hidg->req); 692 } 693 694 return status; 695 } 696 697 static inline int hidg_get_minor(void) 698 { 699 int ret; 700 701 ret = ida_simple_get(&hidg_ida, 0, 0, GFP_KERNEL); 702 if (ret >= HIDG_MINORS) { 703 ida_simple_remove(&hidg_ida, ret); 704 ret = -ENODEV; 705 } 706 707 return ret; 708 } 709 710 static inline struct f_hid_opts *to_f_hid_opts(struct config_item *item) 711 { 712 return container_of(to_config_group(item), struct f_hid_opts, 713 func_inst.group); 714 } 715 716 CONFIGFS_ATTR_STRUCT(f_hid_opts); 717 CONFIGFS_ATTR_OPS(f_hid_opts); 718 719 static void hid_attr_release(struct config_item *item) 720 { 721 struct f_hid_opts *opts = to_f_hid_opts(item); 722 723 usb_put_function_instance(&opts->func_inst); 724 } 725 726 static struct configfs_item_operations hidg_item_ops = { 727 .release = hid_attr_release, 728 .show_attribute = f_hid_opts_attr_show, 729 .store_attribute = f_hid_opts_attr_store, 730 }; 731 732 #define F_HID_OPT(name, prec, limit) \ 733 static ssize_t f_hid_opts_##name##_show(struct f_hid_opts *opts, char *page)\ 734 { \ 735 int result; \ 736 \ 737 mutex_lock(&opts->lock); \ 738 result = sprintf(page, "%d\n", opts->name); \ 739 mutex_unlock(&opts->lock); \ 740 \ 741 return result; \ 742 } \ 743 \ 744 static ssize_t f_hid_opts_##name##_store(struct f_hid_opts *opts, \ 745 const char *page, size_t len) \ 746 { \ 747 int ret; \ 748 u##prec num; \ 749 \ 750 mutex_lock(&opts->lock); \ 751 if (opts->refcnt) { \ 752 ret = -EBUSY; \ 753 goto end; \ 754 } \ 755 \ 756 ret = kstrtou##prec(page, 0, &num); \ 757 if (ret) \ 758 goto end; \ 759 \ 760 if (num > limit) { \ 761 ret = -EINVAL; \ 762 goto end; \ 763 } \ 764 opts->name = num; \ 765 ret = len; \ 766 \ 767 end: \ 768 mutex_unlock(&opts->lock); \ 769 return ret; \ 770 } \ 771 \ 772 static struct f_hid_opts_attribute f_hid_opts_##name = \ 773 __CONFIGFS_ATTR(name, S_IRUGO | S_IWUSR, f_hid_opts_##name##_show,\ 774 f_hid_opts_##name##_store) 775 776 F_HID_OPT(subclass, 8, 255); 777 F_HID_OPT(protocol, 8, 255); 778 F_HID_OPT(report_length, 16, 65535); 779 780 static ssize_t f_hid_opts_report_desc_show(struct f_hid_opts *opts, char *page) 781 { 782 int result; 783 784 mutex_lock(&opts->lock); 785 result = opts->report_desc_length; 786 memcpy(page, opts->report_desc, opts->report_desc_length); 787 mutex_unlock(&opts->lock); 788 789 return result; 790 } 791 792 static ssize_t f_hid_opts_report_desc_store(struct f_hid_opts *opts, 793 const char *page, size_t len) 794 { 795 int ret = -EBUSY; 796 char *d; 797 798 mutex_lock(&opts->lock); 799 800 if (opts->refcnt) 801 goto end; 802 if (len > PAGE_SIZE) { 803 ret = -ENOSPC; 804 goto end; 805 } 806 d = kmemdup(page, len, GFP_KERNEL); 807 if (!d) { 808 ret = -ENOMEM; 809 goto end; 810 } 811 kfree(opts->report_desc); 812 opts->report_desc = d; 813 opts->report_desc_length = len; 814 opts->report_desc_alloc = true; 815 ret = len; 816 end: 817 mutex_unlock(&opts->lock); 818 return ret; 819 } 820 821 static struct f_hid_opts_attribute f_hid_opts_report_desc = 822 __CONFIGFS_ATTR(report_desc, S_IRUGO | S_IWUSR, 823 f_hid_opts_report_desc_show, 824 f_hid_opts_report_desc_store); 825 826 static struct configfs_attribute *hid_attrs[] = { 827 &f_hid_opts_subclass.attr, 828 &f_hid_opts_protocol.attr, 829 &f_hid_opts_report_length.attr, 830 &f_hid_opts_report_desc.attr, 831 NULL, 832 }; 833 834 static struct config_item_type hid_func_type = { 835 .ct_item_ops = &hidg_item_ops, 836 .ct_attrs = hid_attrs, 837 .ct_owner = THIS_MODULE, 838 }; 839 840 static inline void hidg_put_minor(int minor) 841 { 842 ida_simple_remove(&hidg_ida, minor); 843 } 844 845 static void hidg_free_inst(struct usb_function_instance *f) 846 { 847 struct f_hid_opts *opts; 848 849 opts = container_of(f, struct f_hid_opts, func_inst); 850 851 mutex_lock(&hidg_ida_lock); 852 853 hidg_put_minor(opts->minor); 854 if (idr_is_empty(&hidg_ida.idr)) 855 ghid_cleanup(); 856 857 mutex_unlock(&hidg_ida_lock); 858 859 if (opts->report_desc_alloc) 860 kfree(opts->report_desc); 861 862 kfree(opts); 863 } 864 865 static struct usb_function_instance *hidg_alloc_inst(void) 866 { 867 struct f_hid_opts *opts; 868 struct usb_function_instance *ret; 869 int status = 0; 870 871 opts = kzalloc(sizeof(*opts), GFP_KERNEL); 872 if (!opts) 873 return ERR_PTR(-ENOMEM); 874 mutex_init(&opts->lock); 875 opts->func_inst.free_func_inst = hidg_free_inst; 876 ret = &opts->func_inst; 877 878 mutex_lock(&hidg_ida_lock); 879 880 if (idr_is_empty(&hidg_ida.idr)) { 881 status = ghid_setup(NULL, HIDG_MINORS); 882 if (status) { 883 ret = ERR_PTR(status); 884 kfree(opts); 885 goto unlock; 886 } 887 } 888 889 opts->minor = hidg_get_minor(); 890 if (opts->minor < 0) { 891 ret = ERR_PTR(opts->minor); 892 kfree(opts); 893 if (idr_is_empty(&hidg_ida.idr)) 894 ghid_cleanup(); 895 goto unlock; 896 } 897 config_group_init_type_name(&opts->func_inst.group, "", &hid_func_type); 898 899 unlock: 900 mutex_unlock(&hidg_ida_lock); 901 return ret; 902 } 903 904 static void hidg_free(struct usb_function *f) 905 { 906 struct f_hidg *hidg; 907 struct f_hid_opts *opts; 908 909 hidg = func_to_hidg(f); 910 opts = container_of(f->fi, struct f_hid_opts, func_inst); 911 kfree(hidg->report_desc); 912 kfree(hidg); 913 mutex_lock(&opts->lock); 914 --opts->refcnt; 915 mutex_unlock(&opts->lock); 916 } 917 918 static void hidg_unbind(struct usb_configuration *c, struct usb_function *f) 919 { 920 struct f_hidg *hidg = func_to_hidg(f); 921 922 device_destroy(hidg_class, MKDEV(major, hidg->minor)); 923 cdev_del(&hidg->cdev); 924 925 /* disable/free request and end point */ 926 usb_ep_disable(hidg->in_ep); 927 kfree(hidg->req->buf); 928 usb_ep_free_request(hidg->in_ep, hidg->req); 929 930 usb_free_all_descriptors(f); 931 } 932 933 static struct usb_function *hidg_alloc(struct usb_function_instance *fi) 934 { 935 struct f_hidg *hidg; 936 struct f_hid_opts *opts; 937 938 /* allocate and initialize one new instance */ 939 hidg = kzalloc(sizeof(*hidg), GFP_KERNEL); 940 if (!hidg) 941 return ERR_PTR(-ENOMEM); 942 943 opts = container_of(fi, struct f_hid_opts, func_inst); 944 945 mutex_lock(&opts->lock); 946 ++opts->refcnt; 947 948 hidg->minor = opts->minor; 949 hidg->bInterfaceSubClass = opts->subclass; 950 hidg->bInterfaceProtocol = opts->protocol; 951 hidg->report_length = opts->report_length; 952 hidg->report_desc_length = opts->report_desc_length; 953 if (opts->report_desc) { 954 hidg->report_desc = kmemdup(opts->report_desc, 955 opts->report_desc_length, 956 GFP_KERNEL); 957 if (!hidg->report_desc) { 958 kfree(hidg); 959 mutex_unlock(&opts->lock); 960 return ERR_PTR(-ENOMEM); 961 } 962 } 963 964 mutex_unlock(&opts->lock); 965 966 hidg->func.name = "hid"; 967 hidg->func.bind = hidg_bind; 968 hidg->func.unbind = hidg_unbind; 969 hidg->func.set_alt = hidg_set_alt; 970 hidg->func.disable = hidg_disable; 971 hidg->func.setup = hidg_setup; 972 hidg->func.free_func = hidg_free; 973 974 /* this could me made configurable at some point */ 975 hidg->qlen = 4; 976 977 return &hidg->func; 978 } 979 980 DECLARE_USB_FUNCTION_INIT(hid, hidg_alloc_inst, hidg_alloc); 981 MODULE_LICENSE("GPL"); 982 MODULE_AUTHOR("Fabien Chouteau"); 983 984 int ghid_setup(struct usb_gadget *g, int count) 985 { 986 int status; 987 dev_t dev; 988 989 hidg_class = class_create(THIS_MODULE, "hidg"); 990 if (IS_ERR(hidg_class)) { 991 status = PTR_ERR(hidg_class); 992 hidg_class = NULL; 993 return status; 994 } 995 996 status = alloc_chrdev_region(&dev, 0, count, "hidg"); 997 if (status) { 998 class_destroy(hidg_class); 999 hidg_class = NULL; 1000 return status; 1001 } 1002 1003 major = MAJOR(dev); 1004 minors = count; 1005 1006 return 0; 1007 } 1008 1009 void ghid_cleanup(void) 1010 { 1011 if (major) { 1012 unregister_chrdev_region(MKDEV(major, 0), minors); 1013 major = minors = 0; 1014 } 1015 1016 class_destroy(hidg_class); 1017 hidg_class = NULL; 1018 } 1019