1 /*
2  * f_phonet.c -- USB CDC Phonet function
3  *
4  * Copyright (C) 2007-2008 Nokia Corporation. All rights reserved.
5  *
6  * Author: Rémi Denis-Courmont
7  *
8  * This program is free software; you can redistribute it and/or
9  * modify it under the terms of the GNU General Public License
10  * version 2 as published by the Free Software Foundation.
11  */
12 
13 #include <linux/mm.h>
14 #include <linux/slab.h>
15 #include <linux/kernel.h>
16 #include <linux/module.h>
17 #include <linux/device.h>
18 
19 #include <linux/netdevice.h>
20 #include <linux/if_ether.h>
21 #include <linux/if_phonet.h>
22 #include <linux/if_arp.h>
23 
24 #include <linux/usb/ch9.h>
25 #include <linux/usb/cdc.h>
26 #include <linux/usb/composite.h>
27 
28 #include "u_phonet.h"
29 #include "u_ether.h"
30 
31 #define PN_MEDIA_USB	0x1B
32 #define MAXPACKET	512
33 #if (PAGE_SIZE % MAXPACKET)
34 #error MAXPACKET must divide PAGE_SIZE!
35 #endif
36 
37 /*-------------------------------------------------------------------------*/
38 
39 struct phonet_port {
40 	struct f_phonet			*usb;
41 	spinlock_t			lock;
42 };
43 
44 struct f_phonet {
45 	struct usb_function		function;
46 	struct {
47 		struct sk_buff		*skb;
48 		spinlock_t		lock;
49 	} rx;
50 	struct net_device		*dev;
51 	struct usb_ep			*in_ep, *out_ep;
52 
53 	struct usb_request		*in_req;
54 	struct usb_request		*out_reqv[0];
55 };
56 
57 static int phonet_rxq_size = 17;
58 
59 static inline struct f_phonet *func_to_pn(struct usb_function *f)
60 {
61 	return container_of(f, struct f_phonet, function);
62 }
63 
64 /*-------------------------------------------------------------------------*/
65 
66 #define USB_CDC_SUBCLASS_PHONET	0xfe
67 #define USB_CDC_PHONET_TYPE	0xab
68 
69 static struct usb_interface_descriptor
70 pn_control_intf_desc = {
71 	.bLength =		sizeof pn_control_intf_desc,
72 	.bDescriptorType =	USB_DT_INTERFACE,
73 
74 	/* .bInterfaceNumber =	DYNAMIC, */
75 	.bInterfaceClass =	USB_CLASS_COMM,
76 	.bInterfaceSubClass =	USB_CDC_SUBCLASS_PHONET,
77 };
78 
79 static const struct usb_cdc_header_desc
80 pn_header_desc = {
81 	.bLength =		sizeof pn_header_desc,
82 	.bDescriptorType =	USB_DT_CS_INTERFACE,
83 	.bDescriptorSubType =	USB_CDC_HEADER_TYPE,
84 	.bcdCDC =		cpu_to_le16(0x0110),
85 };
86 
87 static const struct usb_cdc_header_desc
88 pn_phonet_desc = {
89 	.bLength =		sizeof pn_phonet_desc,
90 	.bDescriptorType =	USB_DT_CS_INTERFACE,
91 	.bDescriptorSubType =	USB_CDC_PHONET_TYPE,
92 	.bcdCDC =		cpu_to_le16(0x1505), /* ??? */
93 };
94 
95 static struct usb_cdc_union_desc
96 pn_union_desc = {
97 	.bLength =		sizeof pn_union_desc,
98 	.bDescriptorType =	USB_DT_CS_INTERFACE,
99 	.bDescriptorSubType =	USB_CDC_UNION_TYPE,
100 
101 	/* .bMasterInterface0 =	DYNAMIC, */
102 	/* .bSlaveInterface0 =	DYNAMIC, */
103 };
104 
105 static struct usb_interface_descriptor
106 pn_data_nop_intf_desc = {
107 	.bLength =		sizeof pn_data_nop_intf_desc,
108 	.bDescriptorType =	USB_DT_INTERFACE,
109 
110 	/* .bInterfaceNumber =	DYNAMIC, */
111 	.bAlternateSetting =	0,
112 	.bNumEndpoints =	0,
113 	.bInterfaceClass =	USB_CLASS_CDC_DATA,
114 };
115 
116 static struct usb_interface_descriptor
117 pn_data_intf_desc = {
118 	.bLength =		sizeof pn_data_intf_desc,
119 	.bDescriptorType =	USB_DT_INTERFACE,
120 
121 	/* .bInterfaceNumber =	DYNAMIC, */
122 	.bAlternateSetting =	1,
123 	.bNumEndpoints =	2,
124 	.bInterfaceClass =	USB_CLASS_CDC_DATA,
125 };
126 
127 static struct usb_endpoint_descriptor
128 pn_fs_sink_desc = {
129 	.bLength =		USB_DT_ENDPOINT_SIZE,
130 	.bDescriptorType =	USB_DT_ENDPOINT,
131 
132 	.bEndpointAddress =	USB_DIR_OUT,
133 	.bmAttributes =		USB_ENDPOINT_XFER_BULK,
134 };
135 
136 static struct usb_endpoint_descriptor
137 pn_hs_sink_desc = {
138 	.bLength =		USB_DT_ENDPOINT_SIZE,
139 	.bDescriptorType =	USB_DT_ENDPOINT,
140 
141 	.bEndpointAddress =	USB_DIR_OUT,
142 	.bmAttributes =		USB_ENDPOINT_XFER_BULK,
143 	.wMaxPacketSize =	cpu_to_le16(MAXPACKET),
144 };
145 
146 static struct usb_endpoint_descriptor
147 pn_fs_source_desc = {
148 	.bLength =		USB_DT_ENDPOINT_SIZE,
149 	.bDescriptorType =	USB_DT_ENDPOINT,
150 
151 	.bEndpointAddress =	USB_DIR_IN,
152 	.bmAttributes =		USB_ENDPOINT_XFER_BULK,
153 };
154 
155 static struct usb_endpoint_descriptor
156 pn_hs_source_desc = {
157 	.bLength =		USB_DT_ENDPOINT_SIZE,
158 	.bDescriptorType =	USB_DT_ENDPOINT,
159 
160 	.bEndpointAddress =	USB_DIR_IN,
161 	.bmAttributes =		USB_ENDPOINT_XFER_BULK,
162 	.wMaxPacketSize =	cpu_to_le16(512),
163 };
164 
165 static struct usb_descriptor_header *fs_pn_function[] = {
166 	(struct usb_descriptor_header *) &pn_control_intf_desc,
167 	(struct usb_descriptor_header *) &pn_header_desc,
168 	(struct usb_descriptor_header *) &pn_phonet_desc,
169 	(struct usb_descriptor_header *) &pn_union_desc,
170 	(struct usb_descriptor_header *) &pn_data_nop_intf_desc,
171 	(struct usb_descriptor_header *) &pn_data_intf_desc,
172 	(struct usb_descriptor_header *) &pn_fs_sink_desc,
173 	(struct usb_descriptor_header *) &pn_fs_source_desc,
174 	NULL,
175 };
176 
177 static struct usb_descriptor_header *hs_pn_function[] = {
178 	(struct usb_descriptor_header *) &pn_control_intf_desc,
179 	(struct usb_descriptor_header *) &pn_header_desc,
180 	(struct usb_descriptor_header *) &pn_phonet_desc,
181 	(struct usb_descriptor_header *) &pn_union_desc,
182 	(struct usb_descriptor_header *) &pn_data_nop_intf_desc,
183 	(struct usb_descriptor_header *) &pn_data_intf_desc,
184 	(struct usb_descriptor_header *) &pn_hs_sink_desc,
185 	(struct usb_descriptor_header *) &pn_hs_source_desc,
186 	NULL,
187 };
188 
189 /*-------------------------------------------------------------------------*/
190 
191 static int pn_net_open(struct net_device *dev)
192 {
193 	netif_wake_queue(dev);
194 	return 0;
195 }
196 
197 static int pn_net_close(struct net_device *dev)
198 {
199 	netif_stop_queue(dev);
200 	return 0;
201 }
202 
203 static void pn_tx_complete(struct usb_ep *ep, struct usb_request *req)
204 {
205 	struct f_phonet *fp = ep->driver_data;
206 	struct net_device *dev = fp->dev;
207 	struct sk_buff *skb = req->context;
208 
209 	switch (req->status) {
210 	case 0:
211 		dev->stats.tx_packets++;
212 		dev->stats.tx_bytes += skb->len;
213 		break;
214 
215 	case -ESHUTDOWN: /* disconnected */
216 	case -ECONNRESET: /* disabled */
217 		dev->stats.tx_aborted_errors++;
218 	default:
219 		dev->stats.tx_errors++;
220 	}
221 
222 	dev_kfree_skb_any(skb);
223 	netif_wake_queue(dev);
224 }
225 
226 static int pn_net_xmit(struct sk_buff *skb, struct net_device *dev)
227 {
228 	struct phonet_port *port = netdev_priv(dev);
229 	struct f_phonet *fp;
230 	struct usb_request *req;
231 	unsigned long flags;
232 
233 	if (skb->protocol != htons(ETH_P_PHONET))
234 		goto out;
235 
236 	spin_lock_irqsave(&port->lock, flags);
237 	fp = port->usb;
238 	if (unlikely(!fp)) /* race with carrier loss */
239 		goto out_unlock;
240 
241 	req = fp->in_req;
242 	req->buf = skb->data;
243 	req->length = skb->len;
244 	req->complete = pn_tx_complete;
245 	req->zero = 1;
246 	req->context = skb;
247 
248 	if (unlikely(usb_ep_queue(fp->in_ep, req, GFP_ATOMIC)))
249 		goto out_unlock;
250 
251 	netif_stop_queue(dev);
252 	skb = NULL;
253 
254 out_unlock:
255 	spin_unlock_irqrestore(&port->lock, flags);
256 out:
257 	if (unlikely(skb)) {
258 		dev_kfree_skb(skb);
259 		dev->stats.tx_dropped++;
260 	}
261 	return NETDEV_TX_OK;
262 }
263 
264 static int pn_net_mtu(struct net_device *dev, int new_mtu)
265 {
266 	if ((new_mtu < PHONET_MIN_MTU) || (new_mtu > PHONET_MAX_MTU))
267 		return -EINVAL;
268 	dev->mtu = new_mtu;
269 	return 0;
270 }
271 
272 static const struct net_device_ops pn_netdev_ops = {
273 	.ndo_open	= pn_net_open,
274 	.ndo_stop	= pn_net_close,
275 	.ndo_start_xmit	= pn_net_xmit,
276 	.ndo_change_mtu	= pn_net_mtu,
277 };
278 
279 static void pn_net_setup(struct net_device *dev)
280 {
281 	dev->features		= 0;
282 	dev->type		= ARPHRD_PHONET;
283 	dev->flags		= IFF_POINTOPOINT | IFF_NOARP;
284 	dev->mtu		= PHONET_DEV_MTU;
285 	dev->hard_header_len	= 1;
286 	dev->dev_addr[0]	= PN_MEDIA_USB;
287 	dev->addr_len		= 1;
288 	dev->tx_queue_len	= 1;
289 
290 	dev->netdev_ops		= &pn_netdev_ops;
291 	dev->destructor		= free_netdev;
292 	dev->header_ops		= &phonet_header_ops;
293 }
294 
295 /*-------------------------------------------------------------------------*/
296 
297 /*
298  * Queue buffer for data from the host
299  */
300 static int
301 pn_rx_submit(struct f_phonet *fp, struct usb_request *req, gfp_t gfp_flags)
302 {
303 	struct page *page;
304 	int err;
305 
306 	page = __skb_alloc_page(gfp_flags | __GFP_NOMEMALLOC, NULL);
307 	if (!page)
308 		return -ENOMEM;
309 
310 	req->buf = page_address(page);
311 	req->length = PAGE_SIZE;
312 	req->context = page;
313 
314 	err = usb_ep_queue(fp->out_ep, req, gfp_flags);
315 	if (unlikely(err))
316 		put_page(page);
317 	return err;
318 }
319 
320 static void pn_rx_complete(struct usb_ep *ep, struct usb_request *req)
321 {
322 	struct f_phonet *fp = ep->driver_data;
323 	struct net_device *dev = fp->dev;
324 	struct page *page = req->context;
325 	struct sk_buff *skb;
326 	unsigned long flags;
327 	int status = req->status;
328 
329 	switch (status) {
330 	case 0:
331 		spin_lock_irqsave(&fp->rx.lock, flags);
332 		skb = fp->rx.skb;
333 		if (!skb)
334 			skb = fp->rx.skb = netdev_alloc_skb(dev, 12);
335 		if (req->actual < req->length) /* Last fragment */
336 			fp->rx.skb = NULL;
337 		spin_unlock_irqrestore(&fp->rx.lock, flags);
338 
339 		if (unlikely(!skb))
340 			break;
341 
342 		if (skb->len == 0) { /* First fragment */
343 			skb->protocol = htons(ETH_P_PHONET);
344 			skb_reset_mac_header(skb);
345 			/* Can't use pskb_pull() on page in IRQ */
346 			memcpy(skb_put(skb, 1), page_address(page), 1);
347 		}
348 
349 		skb_add_rx_frag(skb, skb_shinfo(skb)->nr_frags, page,
350 				skb->len <= 1, req->actual, PAGE_SIZE);
351 		page = NULL;
352 
353 		if (req->actual < req->length) { /* Last fragment */
354 			skb->dev = dev;
355 			dev->stats.rx_packets++;
356 			dev->stats.rx_bytes += skb->len;
357 
358 			netif_rx(skb);
359 		}
360 		break;
361 
362 	/* Do not resubmit in these cases: */
363 	case -ESHUTDOWN: /* disconnect */
364 	case -ECONNABORTED: /* hw reset */
365 	case -ECONNRESET: /* dequeued (unlink or netif down) */
366 		req = NULL;
367 		break;
368 
369 	/* Do resubmit in these cases: */
370 	case -EOVERFLOW: /* request buffer overflow */
371 		dev->stats.rx_over_errors++;
372 	default:
373 		dev->stats.rx_errors++;
374 		break;
375 	}
376 
377 	if (page)
378 		put_page(page);
379 	if (req)
380 		pn_rx_submit(fp, req, GFP_ATOMIC | __GFP_COLD);
381 }
382 
383 /*-------------------------------------------------------------------------*/
384 
385 static void __pn_reset(struct usb_function *f)
386 {
387 	struct f_phonet *fp = func_to_pn(f);
388 	struct net_device *dev = fp->dev;
389 	struct phonet_port *port = netdev_priv(dev);
390 
391 	netif_carrier_off(dev);
392 	port->usb = NULL;
393 
394 	usb_ep_disable(fp->out_ep);
395 	usb_ep_disable(fp->in_ep);
396 	if (fp->rx.skb) {
397 		dev_kfree_skb_irq(fp->rx.skb);
398 		fp->rx.skb = NULL;
399 	}
400 }
401 
402 static int pn_set_alt(struct usb_function *f, unsigned intf, unsigned alt)
403 {
404 	struct f_phonet *fp = func_to_pn(f);
405 	struct usb_gadget *gadget = fp->function.config->cdev->gadget;
406 
407 	if (intf == pn_control_intf_desc.bInterfaceNumber)
408 		/* control interface, no altsetting */
409 		return (alt > 0) ? -EINVAL : 0;
410 
411 	if (intf == pn_data_intf_desc.bInterfaceNumber) {
412 		struct net_device *dev = fp->dev;
413 		struct phonet_port *port = netdev_priv(dev);
414 
415 		/* data intf (0: inactive, 1: active) */
416 		if (alt > 1)
417 			return -EINVAL;
418 
419 		spin_lock(&port->lock);
420 		__pn_reset(f);
421 		if (alt == 1) {
422 			int i;
423 
424 			if (config_ep_by_speed(gadget, f, fp->in_ep) ||
425 			    config_ep_by_speed(gadget, f, fp->out_ep)) {
426 				fp->in_ep->desc = NULL;
427 				fp->out_ep->desc = NULL;
428 				spin_unlock(&port->lock);
429 				return -EINVAL;
430 			}
431 			usb_ep_enable(fp->out_ep);
432 			usb_ep_enable(fp->in_ep);
433 
434 			port->usb = fp;
435 			fp->out_ep->driver_data = fp;
436 			fp->in_ep->driver_data = fp;
437 
438 			netif_carrier_on(dev);
439 			for (i = 0; i < phonet_rxq_size; i++)
440 				pn_rx_submit(fp, fp->out_reqv[i], GFP_ATOMIC | __GFP_COLD);
441 		}
442 		spin_unlock(&port->lock);
443 		return 0;
444 	}
445 
446 	return -EINVAL;
447 }
448 
449 static int pn_get_alt(struct usb_function *f, unsigned intf)
450 {
451 	struct f_phonet *fp = func_to_pn(f);
452 
453 	if (intf == pn_control_intf_desc.bInterfaceNumber)
454 		return 0;
455 
456 	if (intf == pn_data_intf_desc.bInterfaceNumber) {
457 		struct phonet_port *port = netdev_priv(fp->dev);
458 		u8 alt;
459 
460 		spin_lock(&port->lock);
461 		alt = port->usb != NULL;
462 		spin_unlock(&port->lock);
463 		return alt;
464 	}
465 
466 	return -EINVAL;
467 }
468 
469 static void pn_disconnect(struct usb_function *f)
470 {
471 	struct f_phonet *fp = func_to_pn(f);
472 	struct phonet_port *port = netdev_priv(fp->dev);
473 	unsigned long flags;
474 
475 	/* remain disabled until set_alt */
476 	spin_lock_irqsave(&port->lock, flags);
477 	__pn_reset(f);
478 	spin_unlock_irqrestore(&port->lock, flags);
479 }
480 
481 /*-------------------------------------------------------------------------*/
482 
483 static int pn_bind(struct usb_configuration *c, struct usb_function *f)
484 {
485 	struct usb_composite_dev *cdev = c->cdev;
486 	struct usb_gadget *gadget = cdev->gadget;
487 	struct f_phonet *fp = func_to_pn(f);
488 	struct usb_ep *ep;
489 	int status, i;
490 
491 	struct f_phonet_opts *phonet_opts;
492 
493 	phonet_opts = container_of(f->fi, struct f_phonet_opts, func_inst);
494 
495 	/*
496 	 * in drivers/usb/gadget/configfs.c:configfs_composite_bind()
497 	 * configurations are bound in sequence with list_for_each_entry,
498 	 * in each configuration its functions are bound in sequence
499 	 * with list_for_each_entry, so we assume no race condition
500 	 * with regard to phonet_opts->bound access
501 	 */
502 	if (!phonet_opts->bound) {
503 		gphonet_set_gadget(phonet_opts->net, gadget);
504 		status = gphonet_register_netdev(phonet_opts->net);
505 		if (status)
506 			return status;
507 		phonet_opts->bound = true;
508 	}
509 
510 	/* Reserve interface IDs */
511 	status = usb_interface_id(c, f);
512 	if (status < 0)
513 		goto err;
514 	pn_control_intf_desc.bInterfaceNumber = status;
515 	pn_union_desc.bMasterInterface0 = status;
516 
517 	status = usb_interface_id(c, f);
518 	if (status < 0)
519 		goto err;
520 	pn_data_nop_intf_desc.bInterfaceNumber = status;
521 	pn_data_intf_desc.bInterfaceNumber = status;
522 	pn_union_desc.bSlaveInterface0 = status;
523 
524 	/* Reserve endpoints */
525 	status = -ENODEV;
526 	ep = usb_ep_autoconfig(gadget, &pn_fs_sink_desc);
527 	if (!ep)
528 		goto err;
529 	fp->out_ep = ep;
530 	ep->driver_data = fp; /* Claim */
531 
532 	ep = usb_ep_autoconfig(gadget, &pn_fs_source_desc);
533 	if (!ep)
534 		goto err;
535 	fp->in_ep = ep;
536 	ep->driver_data = fp; /* Claim */
537 
538 	pn_hs_sink_desc.bEndpointAddress = pn_fs_sink_desc.bEndpointAddress;
539 	pn_hs_source_desc.bEndpointAddress = pn_fs_source_desc.bEndpointAddress;
540 
541 	/* Do not try to bind Phonet twice... */
542 	status = usb_assign_descriptors(f, fs_pn_function, hs_pn_function,
543 			NULL);
544 	if (status)
545 		goto err;
546 
547 	/* Incoming USB requests */
548 	status = -ENOMEM;
549 	for (i = 0; i < phonet_rxq_size; i++) {
550 		struct usb_request *req;
551 
552 		req = usb_ep_alloc_request(fp->out_ep, GFP_KERNEL);
553 		if (!req)
554 			goto err_req;
555 
556 		req->complete = pn_rx_complete;
557 		fp->out_reqv[i] = req;
558 	}
559 
560 	/* Outgoing USB requests */
561 	fp->in_req = usb_ep_alloc_request(fp->in_ep, GFP_KERNEL);
562 	if (!fp->in_req)
563 		goto err_req;
564 
565 	INFO(cdev, "USB CDC Phonet function\n");
566 	INFO(cdev, "using %s, OUT %s, IN %s\n", cdev->gadget->name,
567 		fp->out_ep->name, fp->in_ep->name);
568 	return 0;
569 
570 err_req:
571 	for (i = 0; i < phonet_rxq_size && fp->out_reqv[i]; i++)
572 		usb_ep_free_request(fp->out_ep, fp->out_reqv[i]);
573 err:
574 	usb_free_all_descriptors(f);
575 	if (fp->out_ep)
576 		fp->out_ep->driver_data = NULL;
577 	if (fp->in_ep)
578 		fp->in_ep->driver_data = NULL;
579 	ERROR(cdev, "USB CDC Phonet: cannot autoconfigure\n");
580 	return status;
581 }
582 
583 static inline struct f_phonet_opts *to_f_phonet_opts(struct config_item *item)
584 {
585 	return container_of(to_config_group(item), struct f_phonet_opts,
586 			func_inst.group);
587 }
588 
589 CONFIGFS_ATTR_STRUCT(f_phonet_opts);
590 static ssize_t f_phonet_attr_show(struct config_item *item,
591 				struct configfs_attribute *attr,
592 				char *page)
593 {
594 	struct f_phonet_opts *opts = to_f_phonet_opts(item);
595 	struct f_phonet_opts_attribute *f_phonet_opts_attr =
596 		container_of(attr, struct f_phonet_opts_attribute, attr);
597 	ssize_t ret = 0;
598 
599 	if (f_phonet_opts_attr->show)
600 		ret = f_phonet_opts_attr->show(opts, page);
601 	return ret;
602 }
603 
604 static void phonet_attr_release(struct config_item *item)
605 {
606 	struct f_phonet_opts *opts = to_f_phonet_opts(item);
607 
608 	usb_put_function_instance(&opts->func_inst);
609 }
610 
611 static struct configfs_item_operations phonet_item_ops = {
612 	.release		= phonet_attr_release,
613 	.show_attribute		= f_phonet_attr_show,
614 };
615 
616 static ssize_t f_phonet_ifname_show(struct f_phonet_opts *opts, char *page)
617 {
618 	return gether_get_ifname(opts->net, page, PAGE_SIZE);
619 }
620 
621 static struct f_phonet_opts_attribute f_phonet_ifname =
622 	__CONFIGFS_ATTR_RO(ifname, f_phonet_ifname_show);
623 
624 static struct configfs_attribute *phonet_attrs[] = {
625 	&f_phonet_ifname.attr,
626 	NULL,
627 };
628 
629 static struct config_item_type phonet_func_type = {
630 	.ct_item_ops	= &phonet_item_ops,
631 	.ct_attrs	= phonet_attrs,
632 	.ct_owner	= THIS_MODULE,
633 };
634 
635 static void phonet_free_inst(struct usb_function_instance *f)
636 {
637 	struct f_phonet_opts *opts;
638 
639 	opts = container_of(f, struct f_phonet_opts, func_inst);
640 	if (opts->bound)
641 		gphonet_cleanup(opts->net);
642 	else
643 		free_netdev(opts->net);
644 	kfree(opts);
645 }
646 
647 static struct usb_function_instance *phonet_alloc_inst(void)
648 {
649 	struct f_phonet_opts *opts;
650 
651 	opts = kzalloc(sizeof(*opts), GFP_KERNEL);
652 	if (!opts)
653 		return ERR_PTR(-ENOMEM);
654 
655 	opts->func_inst.free_func_inst = phonet_free_inst;
656 	opts->net = gphonet_setup_default();
657 	if (IS_ERR(opts->net)) {
658 		struct net_device *net = opts->net;
659 		kfree(opts);
660 		return ERR_CAST(net);
661 	}
662 
663 	config_group_init_type_name(&opts->func_inst.group, "",
664 			&phonet_func_type);
665 
666 	return &opts->func_inst;
667 }
668 
669 static void phonet_free(struct usb_function *f)
670 {
671 	struct f_phonet *phonet;
672 
673 	phonet = func_to_pn(f);
674 	kfree(phonet);
675 }
676 
677 static void pn_unbind(struct usb_configuration *c, struct usb_function *f)
678 {
679 	struct f_phonet *fp = func_to_pn(f);
680 	int i;
681 
682 	/* We are already disconnected */
683 	if (fp->in_req)
684 		usb_ep_free_request(fp->in_ep, fp->in_req);
685 	for (i = 0; i < phonet_rxq_size; i++)
686 		if (fp->out_reqv[i])
687 			usb_ep_free_request(fp->out_ep, fp->out_reqv[i]);
688 
689 	usb_free_all_descriptors(f);
690 }
691 
692 static struct usb_function *phonet_alloc(struct usb_function_instance *fi)
693 {
694 	struct f_phonet *fp;
695 	struct f_phonet_opts *opts;
696 	int size;
697 
698 	size = sizeof(*fp) + (phonet_rxq_size * sizeof(struct usb_request *));
699 	fp = kzalloc(size, GFP_KERNEL);
700 	if (!fp)
701 		return ERR_PTR(-ENOMEM);
702 
703 	opts = container_of(fi, struct f_phonet_opts, func_inst);
704 
705 	fp->dev = opts->net;
706 	fp->function.name = "phonet";
707 	fp->function.bind = pn_bind;
708 	fp->function.unbind = pn_unbind;
709 	fp->function.set_alt = pn_set_alt;
710 	fp->function.get_alt = pn_get_alt;
711 	fp->function.disable = pn_disconnect;
712 	fp->function.free_func = phonet_free;
713 	spin_lock_init(&fp->rx.lock);
714 
715 	return &fp->function;
716 }
717 
718 struct net_device *gphonet_setup_default(void)
719 {
720 	struct net_device *dev;
721 	struct phonet_port *port;
722 
723 	/* Create net device */
724 	dev = alloc_netdev(sizeof(*port), "upnlink%d", NET_NAME_UNKNOWN,
725 			   pn_net_setup);
726 	if (!dev)
727 		return ERR_PTR(-ENOMEM);
728 
729 	port = netdev_priv(dev);
730 	spin_lock_init(&port->lock);
731 	netif_carrier_off(dev);
732 
733 	return dev;
734 }
735 
736 void gphonet_set_gadget(struct net_device *net, struct usb_gadget *g)
737 {
738 	SET_NETDEV_DEV(net, &g->dev);
739 }
740 
741 int gphonet_register_netdev(struct net_device *net)
742 {
743 	int status;
744 
745 	status = register_netdev(net);
746 	if (status)
747 		free_netdev(net);
748 
749 	return status;
750 }
751 
752 void gphonet_cleanup(struct net_device *dev)
753 {
754 	unregister_netdev(dev);
755 }
756 
757 DECLARE_USB_FUNCTION_INIT(phonet, phonet_alloc_inst, phonet_alloc);
758 MODULE_AUTHOR("Rémi Denis-Courmont");
759 MODULE_LICENSE("GPL");
760