xref: /freebsd/sys/dev/usb/serial/u3g.c (revision eacf4f50bfb19aa0278db5e8982d73c6d77ca24c)
1 /*
2  * Copyright (c) 2008 AnyWi Technologies
3  * Author: Andrea Guzzo <aguzzo@anywi.com>
4  * * based on uark.c 1.1 2006/08/14 08:30:22 jsg *
5  * * parts from ubsa.c 183348 2008-09-25 12:00:56Z phk *
6  *
7  * Permission to use, copy, modify, and distribute this software for any
8  * purpose with or without fee is hereby granted, provided that the above
9  * copyright notice and this permission notice appear in all copies.
10  *
11  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
12  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
13  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
14  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
15  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
16  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
17  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
18  */
19 
20 /*
21  * NOTE:
22  *
23  * - The detour through the tty layer is ridiculously expensive wrt
24  *   buffering due to the high speeds.
25  *
26  *   We should consider adding a simple r/w device which allows
27  *   attaching of PPP in a more efficient way.
28  *
29  */
30 
31 #include <sys/param.h>
32 #include <sys/eventhandler.h>
33 #include <sys/stdint.h>
34 #include <sys/stddef.h>
35 #include <sys/queue.h>
36 #include <sys/systm.h>
37 #include <sys/kernel.h>
38 #include <sys/bus.h>
39 #include <sys/module.h>
40 #include <sys/lock.h>
41 #include <sys/mutex.h>
42 #include <sys/condvar.h>
43 #include <sys/sysctl.h>
44 #include <sys/sx.h>
45 #include <sys/unistd.h>
46 #include <sys/callout.h>
47 #include <sys/malloc.h>
48 #include <sys/priv.h>
49 
50 #include <dev/usb/usb.h>
51 #include <dev/usb/usbdi.h>
52 #include <dev/usb/usbdi_util.h>
53 #include <dev/usb/usb_cdc.h>
54 #include "usbdevs.h"
55 
56 #define	USB_DEBUG_VAR u3g_debug
57 #include <dev/usb/usb_debug.h>
58 #include <dev/usb/usb_process.h>
59 #include <dev/usb/usb_msctest.h>
60 
61 #include <dev/usb/serial/usb_serial.h>
62 #include <dev/usb/quirk/usb_quirk.h>
63 
64 #ifdef USB_DEBUG
65 static int u3g_debug = 0;
66 
67 static SYSCTL_NODE(_hw_usb, OID_AUTO, u3g, CTLFLAG_RW | CTLFLAG_MPSAFE, 0,
68     "USB 3g");
69 SYSCTL_INT(_hw_usb_u3g, OID_AUTO, debug, CTLFLAG_RWTUN,
70     &u3g_debug, 0, "Debug level");
71 #endif
72 
73 #define	U3G_MAXPORTS		12
74 #define	U3G_CONFIG_INDEX	0
75 #define	U3G_BSIZE		2048
76 #define	U3G_TXSIZE		(U3G_BSIZE / U3G_TXFRAMES)
77 #define	U3G_TXFRAMES		4
78 
79 /* Eject methods; See also usb_quirks.h:UQ_MSC_EJECT_* */
80 #define	U3GINIT_HUAWEI		1	/* Requires Huawei init command */
81 #define	U3GINIT_SIERRA		2	/* Requires Sierra init command */
82 #define	U3GINIT_SCSIEJECT	3	/* Requires SCSI eject command */
83 #define	U3GINIT_REZERO		4	/* Requires SCSI rezero command */
84 #define	U3GINIT_ZTESTOR		5	/* Requires ZTE SCSI command */
85 #define	U3GINIT_CMOTECH		6	/* Requires CMOTECH SCSI command */
86 #define	U3GINIT_WAIT		7	/* Device reappears after a delay */
87 #define	U3GINIT_SAEL_M460	8	/* Requires vendor init */
88 #define	U3GINIT_HUAWEISCSI	9	/* Requires Huawei SCSI init command */
89 #define	U3GINIT_HUAWEISCSI2	10	/* Requires Huawei SCSI init command (2) */
90 #define	U3GINIT_HUAWEISCSI3	11	/* Requires Huawei SCSI init command (3) */
91 #define	U3GINIT_HUAWEISCSI4	12	/* Requires Huawei SCSI init command (4) */
92 #define	U3GINIT_TCT		13	/* Requires TCT Mobile init command */
93 
94 enum {
95 	U3G_BULK_WR,
96 	U3G_BULK_RD,
97 	U3G_INTR,
98 	U3G_N_TRANSFER,
99 };
100 
101 struct u3g_softc {
102 	struct ucom_super_softc sc_super_ucom;
103 	struct ucom_softc sc_ucom[U3G_MAXPORTS];
104 
105 	struct usb_xfer *sc_xfer[U3G_MAXPORTS][U3G_N_TRANSFER];
106 	uint8_t sc_iface[U3G_MAXPORTS];			/* local status register */
107 	uint8_t sc_lsr[U3G_MAXPORTS];			/* local status register */
108 	uint8_t sc_msr[U3G_MAXPORTS];			/* u3g status register */
109 	uint16_t sc_line[U3G_MAXPORTS];			/* line status */
110 
111 	struct usb_device *sc_udev;
112 	struct mtx sc_mtx;
113 
114 	uint8_t sc_numports;
115 };
116 
117 static device_probe_t u3g_probe;
118 static device_attach_t u3g_attach;
119 static device_detach_t u3g_detach;
120 static void u3g_free_softc(struct u3g_softc *);
121 
122 static usb_callback_t u3g_write_callback;
123 static usb_callback_t u3g_read_callback;
124 static usb_callback_t u3g_intr_callback;
125 
126 static void u3g_cfg_get_status(struct ucom_softc *, uint8_t *, uint8_t *);
127 static void u3g_cfg_set_dtr(struct ucom_softc *, uint8_t);
128 static void u3g_cfg_set_rts(struct ucom_softc *, uint8_t);
129 static void u3g_start_read(struct ucom_softc *ucom);
130 static void u3g_stop_read(struct ucom_softc *ucom);
131 static void u3g_start_write(struct ucom_softc *ucom);
132 static void u3g_stop_write(struct ucom_softc *ucom);
133 static void u3g_poll(struct ucom_softc *ucom);
134 static void u3g_free(struct ucom_softc *ucom);
135 
136 static void u3g_test_autoinst(void *, struct usb_device *,
137 		struct usb_attach_arg *);
138 static int u3g_driver_loaded(struct module *mod, int what, void *arg);
139 
140 static eventhandler_tag u3g_etag;
141 
142 static const struct usb_config u3g_config[U3G_N_TRANSFER] = {
143 	[U3G_BULK_WR] = {
144 		.type = UE_BULK,
145 		.endpoint = UE_ADDR_ANY,
146 		.direction = UE_DIR_OUT,
147 		.bufsize = U3G_BSIZE,/* bytes */
148 		.frames = U3G_TXFRAMES,
149 		.flags = {.pipe_bof = 1,.force_short_xfer = 1,},
150 		.callback = &u3g_write_callback,
151 	},
152 
153 	[U3G_BULK_RD] = {
154 		.type = UE_BULK,
155 		.endpoint = UE_ADDR_ANY,
156 		.direction = UE_DIR_IN,
157 		.bufsize = U3G_BSIZE,/* bytes */
158 		.flags = {.pipe_bof = 1,.short_xfer_ok = 1,},
159 		.callback = &u3g_read_callback,
160 	},
161 
162 	[U3G_INTR] = {
163 		.type = UE_INTERRUPT,
164 		.endpoint = UE_ADDR_ANY,
165 		.direction = UE_DIR_IN,
166 		.flags = {.pipe_bof = 1,.short_xfer_ok = 1,.no_pipe_ok = 1,},
167 		.bufsize = 0,	/* use wMaxPacketSize */
168 		.callback = &u3g_intr_callback,
169 	},
170 };
171 
172 static const struct ucom_callback u3g_callback = {
173 	.ucom_cfg_get_status = &u3g_cfg_get_status,
174 	.ucom_cfg_set_dtr = &u3g_cfg_set_dtr,
175 	.ucom_cfg_set_rts = &u3g_cfg_set_rts,
176 	.ucom_start_read = &u3g_start_read,
177 	.ucom_stop_read = &u3g_stop_read,
178 	.ucom_start_write = &u3g_start_write,
179 	.ucom_stop_write = &u3g_stop_write,
180 	.ucom_poll = &u3g_poll,
181 	.ucom_free = &u3g_free,
182 };
183 
184 static device_method_t u3g_methods[] = {
185 	DEVMETHOD(device_probe, u3g_probe),
186 	DEVMETHOD(device_attach, u3g_attach),
187 	DEVMETHOD(device_detach, u3g_detach),
188 	DEVMETHOD_END
189 };
190 
191 static driver_t u3g_driver = {
192 	.name = "u3g",
193 	.methods = u3g_methods,
194 	.size = sizeof(struct u3g_softc),
195 };
196 
197 static const STRUCT_USB_HOST_ID u3g_devs[] = {
198 #define	U3G_DEV(v,p,i) { USB_VPI(USB_VENDOR_##v, USB_PRODUCT_##v##_##p, i) }
199 	U3G_DEV(ABIT, AK_020, 0),
200 	U3G_DEV(ACERP, H10, 0),
201 	U3G_DEV(AIRPLUS, MCD650, 0),
202 	U3G_DEV(AIRPRIME, PC5220, 0),
203 	U3G_DEV(AIRPRIME, AC313U, 0),
204 	U3G_DEV(ALINK, 3G, 0),
205 	U3G_DEV(ALINK, 3GU, 0),
206 	U3G_DEV(ALINK, DWM652U5, 0),
207 	U3G_DEV(ALINK, SIM7600E, 0),
208 	U3G_DEV(ALINK, SIM7600G, 0),
209 	U3G_DEV(AMOI, H01, 0),
210 	U3G_DEV(AMOI, H01A, 0),
211 	U3G_DEV(AMOI, H02, 0),
212 	U3G_DEV(ANYDATA, ADU_500A, 0),
213 	U3G_DEV(ANYDATA, ADU_620UW, 0),
214 	U3G_DEV(ANYDATA, ADU_E100X, 0),
215 	U3G_DEV(AXESSTEL, DATAMODEM, 0),
216 	U3G_DEV(CMOTECH, CDMA_MODEM1, 0),
217 	U3G_DEV(CMOTECH, CGU628, U3GINIT_CMOTECH),
218 	U3G_DEV(DELL, U5500, 0),
219 	U3G_DEV(DELL, U5505, 0),
220 	U3G_DEV(DELL, U5510, 0),
221 	U3G_DEV(DELL, U5520, 0),
222 	U3G_DEV(DELL, U5520_2, 0),
223 	U3G_DEV(DELL, U5520_3, 0),
224 	U3G_DEV(DELL, U5700, 0),
225 	U3G_DEV(DELL, U5700_2, 0),
226 	U3G_DEV(DELL, U5700_3, 0),
227 	U3G_DEV(DELL, U5700_4, 0),
228 	U3G_DEV(DELL, U5720, 0),
229 	U3G_DEV(DELL, U5720_2, 0),
230 	U3G_DEV(DELL, U5730, 0),
231 	U3G_DEV(DELL, U5730_2, 0),
232 	U3G_DEV(DELL, U5730_3, 0),
233 	U3G_DEV(DELL, U740, 0),
234 	U3G_DEV(DELL, DW5809, 0),
235 	U3G_DEV(DELL, DW5809_2, 0),
236 	U3G_DEV(DELL, DW5811, 0),
237 	U3G_DEV(DELL, DW5811_2, 0),
238 	U3G_DEV(DELL, DW5816, 0),
239 	U3G_DEV(DELL, DW5816_2, 0),
240 	U3G_DEV(DELL, DW5818, 0),
241 	U3G_DEV(DELL, DW5818_2, 0),
242 	U3G_DEV(DLINK, DWR510_CD, U3GINIT_SCSIEJECT),
243 	U3G_DEV(DLINK, DWR510, 0),
244 	U3G_DEV(DLINK, DWM157_CD, U3GINIT_SCSIEJECT),
245 	U3G_DEV(DLINK, DWM157, 0),
246 	U3G_DEV(DLINK, DWM157_CD_2, U3GINIT_SCSIEJECT),
247 	U3G_DEV(DLINK, DWM157_2, 0),
248 	U3G_DEV(DLINK, DWM222_CD, U3GINIT_SCSIEJECT),
249 	U3G_DEV(DLINK, DWM222, 0),
250 	U3G_DEV(DLINK, DWM222_CD_2, U3GINIT_SCSIEJECT),
251 	U3G_DEV(DLINK, DWM222_2, 0),
252 	U3G_DEV(DLINK3, DWM652, 0),
253 	U3G_DEV(HP, EV2200, 0),
254 	U3G_DEV(HP, HS2300, 0),
255 	U3G_DEV(HP, UN2420_QDL, 0),
256 	U3G_DEV(HP, UN2420, 0),
257 	U3G_DEV(HP, LT4132, U3GINIT_HUAWEISCSI2),
258 	U3G_DEV(HUAWEI, E1401, U3GINIT_HUAWEI),
259 	U3G_DEV(HUAWEI, E1402, U3GINIT_HUAWEI),
260 	U3G_DEV(HUAWEI, E1403, U3GINIT_HUAWEI),
261 	U3G_DEV(HUAWEI, E1404, U3GINIT_HUAWEI),
262 	U3G_DEV(HUAWEI, E1405, U3GINIT_HUAWEI),
263 	U3G_DEV(HUAWEI, E1406, U3GINIT_HUAWEI),
264 	U3G_DEV(HUAWEI, E1407, U3GINIT_HUAWEI),
265 	U3G_DEV(HUAWEI, E1408, U3GINIT_HUAWEI),
266 	U3G_DEV(HUAWEI, E1409, U3GINIT_HUAWEI),
267 	U3G_DEV(HUAWEI, E140A, U3GINIT_HUAWEI),
268 	U3G_DEV(HUAWEI, E140B, U3GINIT_HUAWEI),
269 	U3G_DEV(HUAWEI, E140D, U3GINIT_HUAWEI),
270 	U3G_DEV(HUAWEI, E140E, U3GINIT_HUAWEI),
271 	U3G_DEV(HUAWEI, E140F, U3GINIT_HUAWEI),
272 	U3G_DEV(HUAWEI, E1410, U3GINIT_HUAWEI),
273 	U3G_DEV(HUAWEI, E1411, U3GINIT_HUAWEI),
274 	U3G_DEV(HUAWEI, E1412, U3GINIT_HUAWEI),
275 	U3G_DEV(HUAWEI, E1413, U3GINIT_HUAWEI),
276 	U3G_DEV(HUAWEI, E1414, U3GINIT_HUAWEI),
277 	U3G_DEV(HUAWEI, E1415, U3GINIT_HUAWEI),
278 	U3G_DEV(HUAWEI, E1416, U3GINIT_HUAWEI),
279 	U3G_DEV(HUAWEI, E1417, U3GINIT_HUAWEI),
280 	U3G_DEV(HUAWEI, E1418, U3GINIT_HUAWEI),
281 	U3G_DEV(HUAWEI, E1419, U3GINIT_HUAWEI),
282 	U3G_DEV(HUAWEI, E141A, U3GINIT_HUAWEI),
283 	U3G_DEV(HUAWEI, E141B, U3GINIT_HUAWEI),
284 	U3G_DEV(HUAWEI, E141C, U3GINIT_HUAWEI),
285 	U3G_DEV(HUAWEI, E141D, U3GINIT_HUAWEI),
286 	U3G_DEV(HUAWEI, E141E, U3GINIT_HUAWEI),
287 	U3G_DEV(HUAWEI, E141F, U3GINIT_HUAWEI),
288 	U3G_DEV(HUAWEI, E1420, U3GINIT_HUAWEI),
289 	U3G_DEV(HUAWEI, E1421, U3GINIT_HUAWEI),
290 	U3G_DEV(HUAWEI, E1422, U3GINIT_HUAWEI),
291 	U3G_DEV(HUAWEI, E1423, U3GINIT_HUAWEI),
292 	U3G_DEV(HUAWEI, E1424, U3GINIT_HUAWEI),
293 	U3G_DEV(HUAWEI, E1425, U3GINIT_HUAWEI),
294 	U3G_DEV(HUAWEI, E1426, U3GINIT_HUAWEI),
295 	U3G_DEV(HUAWEI, E1427, U3GINIT_HUAWEI),
296 	U3G_DEV(HUAWEI, E1428, U3GINIT_HUAWEI),
297 	U3G_DEV(HUAWEI, E1429, U3GINIT_HUAWEI),
298 	U3G_DEV(HUAWEI, E142A, U3GINIT_HUAWEI),
299 	U3G_DEV(HUAWEI, E142B, U3GINIT_HUAWEI),
300 	U3G_DEV(HUAWEI, E142C, U3GINIT_HUAWEI),
301 	U3G_DEV(HUAWEI, E142D, U3GINIT_HUAWEI),
302 	U3G_DEV(HUAWEI, E142E, U3GINIT_HUAWEI),
303 	U3G_DEV(HUAWEI, E142F, U3GINIT_HUAWEI),
304 	U3G_DEV(HUAWEI, E1430, U3GINIT_HUAWEI),
305 	U3G_DEV(HUAWEI, E1431, U3GINIT_HUAWEI),
306 	U3G_DEV(HUAWEI, E1432, U3GINIT_HUAWEI),
307 	U3G_DEV(HUAWEI, E1433, U3GINIT_HUAWEI),
308 	U3G_DEV(HUAWEI, E1434, U3GINIT_HUAWEI),
309 	U3G_DEV(HUAWEI, E1435, U3GINIT_HUAWEI),
310 	U3G_DEV(HUAWEI, E1436, U3GINIT_HUAWEI),
311 	U3G_DEV(HUAWEI, E1437, U3GINIT_HUAWEI),
312 	U3G_DEV(HUAWEI, E1438, U3GINIT_HUAWEI),
313 	U3G_DEV(HUAWEI, E1439, U3GINIT_HUAWEI),
314 	U3G_DEV(HUAWEI, E143A, U3GINIT_HUAWEI),
315 	U3G_DEV(HUAWEI, E143B, U3GINIT_HUAWEI),
316 	U3G_DEV(HUAWEI, E143C, U3GINIT_HUAWEI),
317 	U3G_DEV(HUAWEI, E143D, U3GINIT_HUAWEI),
318 	U3G_DEV(HUAWEI, E143E, U3GINIT_HUAWEI),
319 	U3G_DEV(HUAWEI, E143F, U3GINIT_HUAWEI),
320 	U3G_DEV(HUAWEI, E173, 0),
321 	U3G_DEV(HUAWEI, E173_INIT, U3GINIT_HUAWEISCSI),
322 	U3G_DEV(HUAWEI, E180V, U3GINIT_HUAWEI),
323 	U3G_DEV(HUAWEI, E220, U3GINIT_HUAWEI),
324 	U3G_DEV(HUAWEI, E220BIS, U3GINIT_HUAWEI),
325 	U3G_DEV(HUAWEI, E392, U3GINIT_HUAWEISCSI),
326 	U3G_DEV(HUAWEI, ME909U, U3GINIT_HUAWEISCSI2),
327 	U3G_DEV(HUAWEI, ME909S, U3GINIT_HUAWEISCSI2),
328 	U3G_DEV(HUAWEI, MOBILE, U3GINIT_HUAWEI),
329 	U3G_DEV(HUAWEI, E1752, U3GINIT_HUAWEISCSI),
330 	U3G_DEV(HUAWEI, E1820, U3GINIT_HUAWEISCSI),
331 	U3G_DEV(HUAWEI, K3771, U3GINIT_HUAWEI),
332 	U3G_DEV(HUAWEI, K3771_INIT, U3GINIT_HUAWEISCSI2),
333 	U3G_DEV(HUAWEI, K3772, U3GINIT_HUAWEI),
334 	U3G_DEV(HUAWEI, K3772_INIT, U3GINIT_HUAWEISCSI2),
335 	U3G_DEV(HUAWEI, K3765, U3GINIT_HUAWEI),
336 	U3G_DEV(HUAWEI, K3765_INIT, U3GINIT_HUAWEISCSI),
337 	U3G_DEV(HUAWEI, K3770, U3GINIT_HUAWEI),
338 	U3G_DEV(HUAWEI, K3770_INIT, U3GINIT_HUAWEISCSI),
339 	U3G_DEV(HUAWEI, K4505, U3GINIT_HUAWEI),
340 	U3G_DEV(HUAWEI, K4505_INIT, U3GINIT_HUAWEISCSI),
341 	U3G_DEV(HUAWEI, ETS2055, U3GINIT_HUAWEI),
342 	U3G_DEV(HUAWEI, E3272_INIT, U3GINIT_HUAWEISCSI2),
343 	U3G_DEV(HUAWEI, E3272, 0),
344 	U3G_DEV(HUAWEI, E3372_NCM, 0),
345 	U3G_DEV(HUAWEI, E3372_INIT, U3GINIT_HUAWEISCSI3),
346 	U3G_DEV(HUAWEI, E3372v153_INIT, U3GINIT_HUAWEISCSI2),
347 	U3G_DEV(HUAWEI, E3372v153_NCM, 0),
348 	U3G_DEV(HUAWEI, E5573Cs322_NCM, 0),
349 	U3G_DEV(HUAWEI, E5573Cs322_ECM, 0),
350 	U3G_DEV(HUAWEI, E5573Cs322_ACM, 0),
351 	U3G_DEV(KYOCERA2, CDMA_MSM_K, 0),
352 	U3G_DEV(KYOCERA2, KPC680, 0),
353 	U3G_DEV(LONGCHEER, WM66, U3GINIT_HUAWEI),
354 	U3G_DEV(LONGCHEER, DISK, U3GINIT_TCT),
355 	U3G_DEV(LONGCHEER, W14, 0),
356 	U3G_DEV(LONGCHEER, XSSTICK, 0),
357 	U3G_DEV(MERLIN, V620, 0),
358 	U3G_DEV(NEOTEL, PRIME, 0),
359 	U3G_DEV(NOVATEL, E725, 0),
360 	U3G_DEV(NOVATEL, ES620, 0),
361 	U3G_DEV(NOVATEL, ES620_2, 0),
362 	U3G_DEV(NOVATEL, EU730, 0),
363 	U3G_DEV(NOVATEL, EU740, 0),
364 	U3G_DEV(NOVATEL, EU870D, 0),
365 	U3G_DEV(NOVATEL, MC760, 0),
366 	U3G_DEV(NOVATEL, MC547, 0),
367 	U3G_DEV(NOVATEL, MC679, 0),
368 	U3G_DEV(NOVATEL, MC950D, 0),
369 	U3G_DEV(NOVATEL, MC990D, 0),
370 	U3G_DEV(NOVATEL, MIFI2200, U3GINIT_SCSIEJECT),
371 	U3G_DEV(NOVATEL, MIFI2200V, U3GINIT_SCSIEJECT),
372 	U3G_DEV(NOVATEL, U720, 0),
373 	U3G_DEV(NOVATEL, U727, 0),
374 	U3G_DEV(NOVATEL, U727_2, 0),
375 	U3G_DEV(NOVATEL, U740, 0),
376 	U3G_DEV(NOVATEL, U740_2, 0),
377 	U3G_DEV(NOVATEL, U760, U3GINIT_SCSIEJECT),
378 	U3G_DEV(NOVATEL, U870, 0),
379 	U3G_DEV(NOVATEL, V620, 0),
380 	U3G_DEV(NOVATEL, V640, 0),
381 	U3G_DEV(NOVATEL, V720, 0),
382 	U3G_DEV(NOVATEL, V740, 0),
383 	U3G_DEV(NOVATEL, X950D, 0),
384 	U3G_DEV(NOVATEL, XU870, 0),
385 	U3G_DEV(MOTOROLA2, MB886, U3GINIT_SCSIEJECT),
386 	U3G_DEV(OPTION, E6500, 0),
387 	U3G_DEV(OPTION, E6501, 0),
388 	U3G_DEV(OPTION, E6601, 0),
389 	U3G_DEV(OPTION, E6721, 0),
390 	U3G_DEV(OPTION, E6741, 0),
391 	U3G_DEV(OPTION, E6761, 0),
392 	U3G_DEV(OPTION, E6800, 0),
393 	U3G_DEV(OPTION, E7021, 0),
394 	U3G_DEV(OPTION, E7041, 0),
395 	U3G_DEV(OPTION, E7061, 0),
396 	U3G_DEV(OPTION, E7100, 0),
397 	U3G_DEV(OPTION, GE40X, 0),
398 	U3G_DEV(OPTION, GT3G, 0),
399 	U3G_DEV(OPTION, GT3GPLUS, 0),
400 	U3G_DEV(OPTION, GT3GQUAD, 0),
401 	U3G_DEV(OPTION, GT3G_1, 0),
402 	U3G_DEV(OPTION, GT3G_2, 0),
403 	U3G_DEV(OPTION, GT3G_3, 0),
404 	U3G_DEV(OPTION, GT3G_4, 0),
405 	U3G_DEV(OPTION, GT3G_5, 0),
406 	U3G_DEV(OPTION, GT3G_6, 0),
407 	U3G_DEV(OPTION, GTHSDPA, 0),
408 	U3G_DEV(OPTION, GTM380, 0),
409 	U3G_DEV(OPTION, GTMAX36, 0),
410 	U3G_DEV(OPTION, GTMAX380HSUPAE, 0),
411 	U3G_DEV(OPTION, GTMAXHSUPA, 0),
412 	U3G_DEV(OPTION, GTMAXHSUPAE, 0),
413 	U3G_DEV(OPTION, VODAFONEMC3G, 0),
414 	U3G_DEV(PANASONIC, CFF9_3G_QDL, 0),
415 	U3G_DEV(PANASONIC, CFF9_3G, 0),
416 	U3G_DEV(QISDA, H20_1, 0),
417 	U3G_DEV(QISDA, H20_2, 0),
418 	U3G_DEV(QISDA, H21_1, 0),
419 	U3G_DEV(QISDA, H21_2, 0),
420 	U3G_DEV(QUALCOMM, NTT_L02C_MODEM, U3GINIT_SCSIEJECT),
421 	U3G_DEV(QUALCOMM2, AC8700, 0),
422 	U3G_DEV(QUALCOMM2, MF330, 0),
423 	U3G_DEV(QUALCOMM2, SIM5218, 0),
424 	U3G_DEV(QUALCOMM2, WM620, 0),
425 	U3G_DEV(QUALCOMM2, VW110L, U3GINIT_SCSIEJECT),
426 	U3G_DEV(QUALCOMM2, GOBI2000_QDL, 0),
427 	U3G_DEV(QUALCOMM2, GOBI2000, 0),
428 	U3G_DEV(QUALCOMM2, VT80N, 0),
429 	U3G_DEV(QUALCOMM3, VFAST2, 0),
430 	U3G_DEV(QUALCOMMINC, AC2726, 0),
431 	U3G_DEV(QUALCOMMINC, AC682_INIT, U3GINIT_SCSIEJECT),
432 	U3G_DEV(QUALCOMMINC, AC682, 0),
433 	U3G_DEV(QUALCOMMINC, AC8700, 0),
434 	U3G_DEV(QUALCOMMINC, AC8710, 0),
435 	U3G_DEV(QUALCOMMINC, CDMA_MSM, U3GINIT_SCSIEJECT),
436 	U3G_DEV(QUALCOMMINC, E0002, 0),
437 	U3G_DEV(QUALCOMMINC, E0003, 0),
438 	U3G_DEV(QUALCOMMINC, E0004, 0),
439 	U3G_DEV(QUALCOMMINC, E0005, 0),
440 	U3G_DEV(QUALCOMMINC, E0006, 0),
441 	U3G_DEV(QUALCOMMINC, E0007, 0),
442 	U3G_DEV(QUALCOMMINC, E0008, 0),
443 	U3G_DEV(QUALCOMMINC, E0009, 0),
444 	U3G_DEV(QUALCOMMINC, E000A, 0),
445 	U3G_DEV(QUALCOMMINC, E000B, 0),
446 	U3G_DEV(QUALCOMMINC, E000C, 0),
447 	U3G_DEV(QUALCOMMINC, E000D, 0),
448 	U3G_DEV(QUALCOMMINC, E000E, 0),
449 	U3G_DEV(QUALCOMMINC, E000F, 0),
450 	U3G_DEV(QUALCOMMINC, E0010, 0),
451 	U3G_DEV(QUALCOMMINC, E0011, 0),
452 	U3G_DEV(QUALCOMMINC, E0012, 0),
453 	U3G_DEV(QUALCOMMINC, E0013, 0),
454 	U3G_DEV(QUALCOMMINC, E0014, 0),
455 	U3G_DEV(QUALCOMMINC, E0017, 0),
456 	U3G_DEV(QUALCOMMINC, E0018, 0),
457 	U3G_DEV(QUALCOMMINC, E0019, 0),
458 	U3G_DEV(QUALCOMMINC, E0020, 0),
459 	U3G_DEV(QUALCOMMINC, E0021, 0),
460 	U3G_DEV(QUALCOMMINC, E0022, 0),
461 	U3G_DEV(QUALCOMMINC, E0023, 0),
462 	U3G_DEV(QUALCOMMINC, E0024, 0),
463 	U3G_DEV(QUALCOMMINC, E0025, 0),
464 	U3G_DEV(QUALCOMMINC, E0026, 0),
465 	U3G_DEV(QUALCOMMINC, E0027, 0),
466 	U3G_DEV(QUALCOMMINC, E0028, 0),
467 	U3G_DEV(QUALCOMMINC, E0029, 0),
468 	U3G_DEV(QUALCOMMINC, E0030, 0),
469 	U3G_DEV(QUALCOMMINC, E0032, 0),
470 	U3G_DEV(QUALCOMMINC, E0033, 0),
471 	U3G_DEV(QUALCOMMINC, E0037, 0),
472 	U3G_DEV(QUALCOMMINC, E0039, 0),
473 	U3G_DEV(QUALCOMMINC, E0042, 0),
474 	U3G_DEV(QUALCOMMINC, E0043, 0),
475 	U3G_DEV(QUALCOMMINC, E0048, 0),
476 	U3G_DEV(QUALCOMMINC, E0049, 0),
477 	U3G_DEV(QUALCOMMINC, E0051, 0),
478 	U3G_DEV(QUALCOMMINC, E0052, 0),
479 	U3G_DEV(QUALCOMMINC, E0054, 0),
480 	U3G_DEV(QUALCOMMINC, E0055, 0),
481 	U3G_DEV(QUALCOMMINC, E0057, 0),
482 	U3G_DEV(QUALCOMMINC, E0058, 0),
483 	U3G_DEV(QUALCOMMINC, E0059, 0),
484 	U3G_DEV(QUALCOMMINC, E0060, 0),
485 	U3G_DEV(QUALCOMMINC, E0061, 0),
486 	U3G_DEV(QUALCOMMINC, E0062, 0),
487 	U3G_DEV(QUALCOMMINC, E0063, 0),
488 	U3G_DEV(QUALCOMMINC, E0064, 0),
489 	U3G_DEV(QUALCOMMINC, E0066, 0),
490 	U3G_DEV(QUALCOMMINC, E0069, 0),
491 	U3G_DEV(QUALCOMMINC, E0070, 0),
492 	U3G_DEV(QUALCOMMINC, E0073, 0),
493 	U3G_DEV(QUALCOMMINC, E0076, 0),
494 	U3G_DEV(QUALCOMMINC, E0078, 0),
495 	U3G_DEV(QUALCOMMINC, E0082, 0),
496 	U3G_DEV(QUALCOMMINC, E0086, 0),
497 	U3G_DEV(QUALCOMMINC, SURFSTICK, 0),
498 	U3G_DEV(QUALCOMMINC, E2002, 0),
499 	U3G_DEV(QUALCOMMINC, E2003, 0),
500 	U3G_DEV(QUALCOMMINC, K3772_Z, 0),
501 	U3G_DEV(QUALCOMMINC, K3772_Z_INIT, U3GINIT_SCSIEJECT),
502 	U3G_DEV(QUALCOMMINC, MF112, U3GINIT_ZTESTOR),
503 	U3G_DEV(QUALCOMMINC, MF195E, 0),
504 	U3G_DEV(QUALCOMMINC, MF195E_INIT, U3GINIT_SCSIEJECT),
505 	U3G_DEV(QUALCOMMINC, MF626, 0),
506 	U3G_DEV(QUALCOMMINC, MF628, 0),
507 	U3G_DEV(QUALCOMMINC, MF633R, 0),
508 	/* the following is a RNDIS device, no modem features */
509 	U3G_DEV(QUALCOMMINC, ZTE_MF730M, U3GINIT_SCSIEJECT),
510 	U3G_DEV(QUANTA, GKE, 0),
511 	U3G_DEV(QUANTA, GLE, 0),
512 	U3G_DEV(QUANTA, GLX, 0),
513 	U3G_DEV(QUANTA, Q101, 0),
514 	U3G_DEV(QUANTA, Q111, 0),
515 	U3G_DEV(QUECTEL, EC21, 0),
516 	U3G_DEV(QUECTEL, EC25, 0),
517 	U3G_DEV(QUECTEL, EM05, 0),
518 	U3G_DEV(QUECTEL, EG91, 0),
519 	U3G_DEV(QUECTEL, EG95, 0),
520 	U3G_DEV(QUECTEL, BG96, 0),
521 	U3G_DEV(QUECTEL, EP06, 0),
522 	U3G_DEV(QUECTEL, EG065K, 0),
523 	U3G_DEV(QUECTEL, AG15, 0),
524 	U3G_DEV(QUECTEL, AG35, 0),
525 	U3G_DEV(QUECTEL, AG520, 0),
526 	U3G_DEV(QUECTEL, AG550, 0),
527 	U3G_DEV(QUECTEL, EM12, 0),
528 	U3G_DEV(QUECTEL, EM160R, 0),
529 	U3G_DEV(QUECTEL, BG95, 0),
530 	U3G_DEV(QUECTEL, RG500, 0),
531 	U3G_DEV(QUECTEL, RG520, 0),
532 	U3G_DEV(QUECTEL, EC200, 0),
533 	U3G_DEV(QUECTEL, EC200S, 0),
534 	U3G_DEV(QUECTEL, EM060K, 0),
535 	U3G_DEV(QUECTEL, EC200T, 0),
536 	U3G_DEV(QUECTEL, UC200, 0),
537 	U3G_DEV(SIERRA, AC402, 0),
538 	U3G_DEV(SIERRA, AC595U, 0),
539 	U3G_DEV(SIERRA, AC313U, 0),
540 	U3G_DEV(SIERRA, AC597E, 0),
541 	U3G_DEV(SIERRA, AC875, 0),
542 	U3G_DEV(SIERRA, AC875E, 0),
543 	U3G_DEV(SIERRA, AC875U, 0),
544 	U3G_DEV(SIERRA, AC875U_2, 0),
545 	U3G_DEV(SIERRA, AC880, 0),
546 	U3G_DEV(SIERRA, AC880E, 0),
547 	U3G_DEV(SIERRA, AC880U, 0),
548 	U3G_DEV(SIERRA, AC881, 0),
549 	U3G_DEV(SIERRA, AC881E, 0),
550 	U3G_DEV(SIERRA, AC881U, 0),
551 	U3G_DEV(SIERRA, AC885E, 0),
552 	U3G_DEV(SIERRA, AC885E_2, 0),
553 	U3G_DEV(SIERRA, AC885U, 0),
554 	U3G_DEV(SIERRA, AIRCARD580, 0),
555 	U3G_DEV(SIERRA, AIRCARD595, 0),
556 	U3G_DEV(SIERRA, C22, 0),
557 	U3G_DEV(SIERRA, C597, 0),
558 	U3G_DEV(SIERRA, C888, 0),
559 	U3G_DEV(SIERRA, E0029, 0),
560 	U3G_DEV(SIERRA, E6892, 0),
561 	U3G_DEV(SIERRA, E6893, 0),
562 	U3G_DEV(SIERRA, EM5625, 0),
563 	U3G_DEV(SIERRA, EM5725, 0),
564 	U3G_DEV(SIERRA, MC5720, 0),
565 	U3G_DEV(SIERRA, MC5720_2, 0),
566 	U3G_DEV(SIERRA, MC5725, 0),
567 	U3G_DEV(SIERRA, MC5727, 0),
568 	U3G_DEV(SIERRA, MC5727_2, 0),
569 	U3G_DEV(SIERRA, MC5728, 0),
570 	U3G_DEV(SIERRA, MC7354, 0),
571 	U3G_DEV(SIERRA, MC7355, 0),
572 	U3G_DEV(SIERRA, AC340U, 0),
573 	U3G_DEV(SIERRA, MC7430, 0),
574 	U3G_DEV(SIERRA, MC8700, 0),
575 	U3G_DEV(SIERRA, MC8755, 0),
576 	U3G_DEV(SIERRA, MC8755_2, 0),
577 	U3G_DEV(SIERRA, MC8755_3, 0),
578 	U3G_DEV(SIERRA, MC8755_4, 0),
579 	U3G_DEV(SIERRA, MC8765, 0),
580 	U3G_DEV(SIERRA, MC8765_2, 0),
581 	U3G_DEV(SIERRA, MC8765_3, 0),
582 	U3G_DEV(SIERRA, MC8775, 0),
583 	U3G_DEV(SIERRA, MC8775_2, 0),
584 	U3G_DEV(SIERRA, MC8780, 0),
585 	U3G_DEV(SIERRA, MC8780_2, 0),
586 	U3G_DEV(SIERRA, MC8780_3, 0),
587 	U3G_DEV(SIERRA, MC8781, 0),
588 	U3G_DEV(SIERRA, MC8781_2, 0),
589 	U3G_DEV(SIERRA, MC8781_3, 0),
590 	U3G_DEV(SIERRA, MC8785, 0),
591 	U3G_DEV(SIERRA, MC8785_2, 0),
592 	U3G_DEV(SIERRA, MC8790, 0),
593 	U3G_DEV(SIERRA, MC8791, 0),
594 	U3G_DEV(SIERRA, MC8792, 0),
595 	U3G_DEV(SIERRA, MINI5725, 0),
596 	U3G_DEV(SIERRA, T11, 0),
597 	U3G_DEV(SIERRA, T598, 0),
598 	U3G_DEV(SIERRA, EM7430, 0),
599 	U3G_DEV(SIERRA, EM7430_2, 0),
600 	U3G_DEV(SIERRA, EM7455, 0),
601 	U3G_DEV(SIERRA, EM7455_2, 0),
602 	U3G_DEV(SIERRA, EM7565, 0),
603 	U3G_DEV(SIERRA, EM7565_2, 0),
604 	U3G_DEV(SIERRA, EM7590, 0),
605 	U3G_DEV(SILABS, SAEL, U3GINIT_SAEL_M460),
606 	U3G_DEV(STELERA, C105, 0),
607 	U3G_DEV(STELERA, E1003, 0),
608 	U3G_DEV(STELERA, E1004, 0),
609 	U3G_DEV(STELERA, E1005, 0),
610 	U3G_DEV(STELERA, E1006, 0),
611 	U3G_DEV(STELERA, E1007, 0),
612 	U3G_DEV(STELERA, E1008, 0),
613 	U3G_DEV(STELERA, E1009, 0),
614 	U3G_DEV(STELERA, E100A, 0),
615 	U3G_DEV(STELERA, E100B, 0),
616 	U3G_DEV(STELERA, E100C, 0),
617 	U3G_DEV(STELERA, E100D, 0),
618 	U3G_DEV(STELERA, E100E, 0),
619 	U3G_DEV(STELERA, E100F, 0),
620 	U3G_DEV(STELERA, E1010, 0),
621 	U3G_DEV(STELERA, E1011, 0),
622 	U3G_DEV(STELERA, E1012, 0),
623 	U3G_DEV(TCTMOBILE, X060S, 0),
624 	U3G_DEV(TCTMOBILE, X080S, U3GINIT_TCT),
625 	U3G_DEV(TELIT, UC864E, 0),
626 	U3G_DEV(TELIT, UC864G, 0),
627 	U3G_DEV(TELIT, LM960, 0),
628 	U3G_DEV(TELIT, LM960_ECM, 0),
629 	U3G_DEV(TLAYTECH, TEU800, 0),
630 	U3G_DEV(TOSHIBA, G450, 0),
631 	U3G_DEV(TOSHIBA, HSDPA, 0),
632 	U3G_DEV(YISO, C893, 0),
633 	U3G_DEV(WETELECOM, WM_D200, 0),
634 	/* Autoinstallers */
635 	U3G_DEV(NOVATEL, ZEROCD, U3GINIT_SCSIEJECT),
636 	U3G_DEV(OPTION, GTICON322, U3GINIT_REZERO),
637 	U3G_DEV(QUALCOMMINC, ZTE_STOR, U3GINIT_ZTESTOR),
638 	U3G_DEV(QUALCOMMINC, ZTE_STOR2, U3GINIT_SCSIEJECT),
639 	U3G_DEV(QUANTA, Q101_STOR, U3GINIT_SCSIEJECT),
640 	U3G_DEV(SIERRA, TRUINSTALL, U3GINIT_SIERRA),
641 #undef	U3G_DEV
642 };
643 
644 DRIVER_MODULE(u3g, uhub, u3g_driver, u3g_driver_loaded, NULL);
645 MODULE_DEPEND(u3g, ucom, 1, 1, 1);
646 MODULE_DEPEND(u3g, usb, 1, 1, 1);
647 MODULE_VERSION(u3g, 1);
648 USB_PNP_HOST_INFO(u3g_devs);
649 
650 static int
u3g_sierra_init(struct usb_device * udev)651 u3g_sierra_init(struct usb_device *udev)
652 {
653 	struct usb_device_request req;
654 
655 	req.bmRequestType = UT_VENDOR;
656 	req.bRequest = UR_SET_INTERFACE;
657 	USETW(req.wValue, UF_DEVICE_REMOTE_WAKEUP);
658 	USETW(req.wIndex, UHF_PORT_CONNECTION);
659 	USETW(req.wLength, 0);
660 
661 	if (usbd_do_request_flags(udev, NULL, &req,
662 	    NULL, 0, NULL, USB_MS_HZ)) {
663 		/* ignore any errors */
664 	}
665 	return (0);
666 }
667 
668 static int
u3g_huawei_init(struct usb_device * udev)669 u3g_huawei_init(struct usb_device *udev)
670 {
671 	struct usb_device_request req;
672 
673 	req.bmRequestType = UT_WRITE_DEVICE;
674 	req.bRequest = UR_SET_FEATURE;
675 	USETW(req.wValue, UF_DEVICE_REMOTE_WAKEUP);
676 	USETW(req.wIndex, UHF_PORT_SUSPEND);
677 	USETW(req.wLength, 0);
678 
679 	if (usbd_do_request_flags(udev, NULL, &req,
680 	    NULL, 0, NULL, USB_MS_HZ)) {
681 		/* ignore any errors */
682 	}
683 	return (0);
684 }
685 
686 static int
u3g_huawei_is_cdce(uint16_t idVendor,uint8_t bInterfaceSubClass,uint8_t bInterfaceProtocol)687 u3g_huawei_is_cdce(uint16_t idVendor, uint8_t bInterfaceSubClass,
688     uint8_t bInterfaceProtocol)
689 {
690 	/*
691 	 * This function returns non-zero if the interface being
692 	 * probed is of type CDC ethernet, which the U3G driver should
693 	 * not attach to. See sys/dev/usb/net/if_cdce.c for matching
694 	 * entries.
695 	 */
696 	if (idVendor != USB_VENDOR_HUAWEI)
697 		goto done;
698 
699 	switch (bInterfaceSubClass) {
700 	case 0x02:
701 		switch (bInterfaceProtocol) {
702 		case 0x16:
703 		case 0x46:
704 		case 0x76:
705 			return (1);
706 		default:
707 			break;
708 		}
709 		break;
710 	case 0x03:
711 		switch (bInterfaceProtocol) {
712 		case 0x16:
713 			return (1);
714 		default:
715 			break;
716 		}
717 		break;
718 	default:
719 		break;
720 	}
721 done:
722 	return (0);
723 }
724 
725 static void
u3g_sael_m460_init(struct usb_device * udev)726 u3g_sael_m460_init(struct usb_device *udev)
727 {
728 	static const uint8_t setup[][24] = {
729 	     { 0x41, 0x11, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
730 	     { 0x41, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00, 0x00 },
731 	     { 0x41, 0x13, 0x00, 0x00, 0x00, 0x00, 0x10, 0x00,
732 	       0x01, 0x00, 0x00, 0x00, 0x40, 0x00, 0x00, 0x00,
733 	       0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
734 	     { 0xc1, 0x0f, 0x00, 0x00, 0x00, 0x00, 0x40, 0x02 },
735 	     { 0xc1, 0x08, 0x00, 0x00, 0x00, 0x00, 0x01, 0x00 },
736 	     { 0x41, 0x07, 0x01, 0x01, 0x00, 0x00, 0x00, 0x00 },
737 	     { 0xc1, 0x0f, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02 },
738 	     { 0x41, 0x01, 0x08, 0x00, 0x00, 0x00, 0x00, 0x00 },
739 	     { 0x41, 0x07, 0x01, 0x01, 0x00, 0x00, 0x00, 0x00 },
740 	     { 0x41, 0x03, 0x00, 0x08, 0x00, 0x00, 0x00, 0x00 },
741 	     { 0x41, 0x19, 0x00, 0x00, 0x00, 0x00, 0x06, 0x00,
742 	       0x00, 0x00, 0x00, 0x00, 0x11, 0x13 },
743 	     { 0x41, 0x13, 0x00, 0x00, 0x00, 0x00, 0x10, 0x00,
744 	       0x09, 0x00, 0x00, 0x00, 0x80, 0x00, 0x00, 0x00,
745 	       0x0a, 0x00, 0x00, 0x00, 0x0a, 0x00, 0x00, 0x00 },
746 	     { 0x41, 0x12, 0x03, 0x00, 0x00, 0x00, 0x00, 0x00 },
747 	     { 0x41, 0x01, 0x08, 0x00, 0x00, 0x00, 0x00, 0x00 },
748 	     { 0x41, 0x07, 0x01, 0x01, 0x00, 0x00, 0x00, 0x00 },
749 	     { 0x41, 0x03, 0x00, 0x08, 0x00, 0x00, 0x00, 0x00 },
750 	     { 0x41, 0x19, 0x00, 0x00, 0x00, 0x00, 0x06, 0x00,
751 	       0x00, 0x00, 0x00, 0x00, 0x11, 0x13 },
752 	     { 0x41, 0x13, 0x00, 0x00, 0x00, 0x00, 0x10, 0x00,
753 	       0x09, 0x00, 0x00, 0x00, 0x80, 0x00, 0x00, 0x00,
754 	       0x0a, 0x00, 0x00, 0x00, 0x0a, 0x00, 0x00, 0x00 },
755 	     { 0x41, 0x07, 0x01, 0x01, 0x00, 0x00, 0x00, 0x00 },
756 	};
757 
758 	struct usb_device_request req;
759 	usb_error_t err;
760 	uint16_t len;
761 	uint8_t buf[0x300];
762 	uint8_t n;
763 
764 	DPRINTFN(1, "\n");
765 
766 	if (usbd_req_set_alt_interface_no(udev, NULL, 0, 0)) {
767 		DPRINTFN(0, "Alt setting 0 failed\n");
768 		return;
769 	}
770 
771 	for (n = 0; n != nitems(setup); n++) {
772 		memcpy(&req, setup[n], sizeof(req));
773 
774 		len = UGETW(req.wLength);
775 		if (req.bmRequestType & UE_DIR_IN) {
776 			if (len > sizeof(buf)) {
777 				DPRINTFN(0, "too small buffer\n");
778 				continue;
779 			}
780 			err = usbd_do_request(udev, NULL, &req, buf);
781 		} else {
782 			if (len > (sizeof(setup[0]) - 8)) {
783 				DPRINTFN(0, "too small buffer\n");
784 				continue;
785 			}
786 			err = usbd_do_request(udev, NULL, &req,
787 			    __DECONST(uint8_t *, &setup[n][8]));
788 		}
789 		if (err) {
790 			DPRINTFN(1, "request %u failed\n",
791 			    (unsigned)n);
792 			/*
793 			 * Some of the requests will fail. Stop doing
794 			 * requests when we are getting timeouts so
795 			 * that we don't block the explore/attach
796 			 * thread forever.
797 			 */
798 			if (err == USB_ERR_TIMEOUT)
799 				break;
800 		}
801 	}
802 }
803 
804 /*
805  * The following function handles 3G modem devices (E220, Mobile,
806  * etc.) with auto-install flash disks for Windows/MacOSX on the first
807  * interface.  After some command or some delay they change appearance
808  * to a modem.
809  */
810 static void
u3g_test_autoinst(void * arg,struct usb_device * udev,struct usb_attach_arg * uaa)811 u3g_test_autoinst(void *arg, struct usb_device *udev,
812     struct usb_attach_arg *uaa)
813 {
814 	struct usb_interface *iface;
815 	struct usb_interface_descriptor *id;
816 	int error;
817 	unsigned long method;
818 
819 	if (uaa->dev_state != UAA_DEV_READY)
820 		return;
821 
822 	iface = usbd_get_iface(udev, 0);
823 	if (iface == NULL)
824 		return;
825 	id = iface->idesc;
826 	if (id == NULL || id->bInterfaceClass != UICLASS_MASS)
827 		return;
828 
829 	if (usb_test_quirk(uaa, UQ_MSC_EJECT_HUAWEI))
830 		method = U3GINIT_HUAWEI;
831 	else if (usb_test_quirk(uaa, UQ_MSC_EJECT_SIERRA))
832 		method = U3GINIT_SIERRA;
833 	else if (usb_test_quirk(uaa, UQ_MSC_EJECT_SCSIEJECT))
834 		method = U3GINIT_SCSIEJECT;
835 	else if (usb_test_quirk(uaa, UQ_MSC_EJECT_REZERO))
836 		method = U3GINIT_REZERO;
837 	else if (usb_test_quirk(uaa, UQ_MSC_EJECT_ZTESTOR))
838 		method = U3GINIT_ZTESTOR;
839 	else if (usb_test_quirk(uaa, UQ_MSC_EJECT_CMOTECH))
840 		method = U3GINIT_CMOTECH;
841 	else if (usb_test_quirk(uaa, UQ_MSC_EJECT_WAIT))
842 		method = U3GINIT_WAIT;
843 	else if (usb_test_quirk(uaa, UQ_MSC_EJECT_HUAWEISCSI))
844 		method = U3GINIT_HUAWEISCSI;
845 	else if (usb_test_quirk(uaa, UQ_MSC_EJECT_HUAWEISCSI2))
846 		method = U3GINIT_HUAWEISCSI2;
847 	else if (usb_test_quirk(uaa, UQ_MSC_EJECT_HUAWEISCSI3))
848 		method = U3GINIT_HUAWEISCSI3;
849 	else if (usb_test_quirk(uaa, UQ_MSC_EJECT_HUAWEISCSI4))
850 		method = U3GINIT_HUAWEISCSI4;
851 	else if (usb_test_quirk(uaa, UQ_MSC_EJECT_TCT))
852 		method = U3GINIT_TCT;
853 	else if (usbd_lookup_id_by_uaa(u3g_devs, sizeof(u3g_devs), uaa) == 0)
854 		method = USB_GET_DRIVER_INFO(uaa);
855 	else
856 		return;		/* no device match */
857 
858 	if (bootverbose) {
859 		printf("Ejecting %s %s using method %ld\n",
860 		       usb_get_manufacturer(udev),
861 		       usb_get_product(udev), method);
862 	}
863 
864 	switch (method) {
865 		case U3GINIT_HUAWEI:
866 			error = u3g_huawei_init(udev);
867 			break;
868 		case U3GINIT_HUAWEISCSI:
869 			error = usb_msc_eject(udev, 0, MSC_EJECT_HUAWEI);
870 			break;
871 		case U3GINIT_HUAWEISCSI2:
872 			error = usb_msc_eject(udev, 0, MSC_EJECT_HUAWEI2);
873 			break;
874 		case U3GINIT_HUAWEISCSI3:
875 			error = usb_msc_eject(udev, 0, MSC_EJECT_HUAWEI3);
876 			break;
877 		case U3GINIT_HUAWEISCSI4:
878 			error = usb_msc_eject(udev, 0, MSC_EJECT_HUAWEI4);
879 			break;
880 		case U3GINIT_SCSIEJECT:
881 			error = usb_msc_eject(udev, 0, MSC_EJECT_STOPUNIT);
882 			break;
883 		case U3GINIT_REZERO:
884 			error = usb_msc_eject(udev, 0, MSC_EJECT_REZERO);
885 			break;
886 		case U3GINIT_ZTESTOR:
887 			error = usb_msc_eject(udev, 0, MSC_EJECT_STOPUNIT);
888 			if (error == 0)
889 			    error = usb_msc_eject(udev, 0, MSC_EJECT_ZTESTOR);
890 			break;
891 		case U3GINIT_CMOTECH:
892 			error = usb_msc_eject(udev, 0, MSC_EJECT_CMOTECH);
893 			break;
894 		case U3GINIT_TCT:
895 			error = usb_msc_eject(udev, 0, MSC_EJECT_TCT);
896 			break;
897 		case U3GINIT_SIERRA:
898 			error = u3g_sierra_init(udev);
899 			break;
900 		case U3GINIT_WAIT:
901 			/* Just pretend we ejected, the card will timeout */
902 			error = 0;
903 			break;
904 		default:
905 			/* no 3G eject quirks */
906 			error = EOPNOTSUPP;
907 			break;
908 	}
909 	if (error == 0) {
910 		/* success, mark the udev as disappearing */
911 		uaa->dev_state = UAA_DEV_EJECTING;
912 	}
913 }
914 
915 static int
u3g_driver_loaded(struct module * mod,int what,void * arg)916 u3g_driver_loaded(struct module *mod, int what, void *arg)
917 {
918 	switch (what) {
919 	case MOD_LOAD:
920 		/* register our autoinstall handler */
921 		u3g_etag = EVENTHANDLER_REGISTER(usb_dev_configured,
922 		    u3g_test_autoinst, NULL, EVENTHANDLER_PRI_ANY);
923 		break;
924 	case MOD_UNLOAD:
925 		EVENTHANDLER_DEREGISTER(usb_dev_configured, u3g_etag);
926 		break;
927 	default:
928 		return (EOPNOTSUPP);
929 	}
930 	return (0);
931 }
932 
933 static int
u3g_probe(device_t self)934 u3g_probe(device_t self)
935 {
936 	struct usb_attach_arg *uaa = device_get_ivars(self);
937 
938 	if (uaa->usb_mode != USB_MODE_HOST) {
939 		return (ENXIO);
940 	}
941 	if (uaa->info.bConfigIndex != U3G_CONFIG_INDEX) {
942 		return (ENXIO);
943 	}
944 	if (uaa->info.bInterfaceClass != UICLASS_VENDOR) {
945 		return (ENXIO);
946 	}
947 	if (u3g_huawei_is_cdce(uaa->info.idVendor, uaa->info.bInterfaceSubClass,
948 	    uaa->info.bInterfaceProtocol)) {
949 		return (ENXIO);
950 	}
951 	return (usbd_lookup_id_by_uaa(u3g_devs, sizeof(u3g_devs), uaa));
952 }
953 
954 static int
u3g_attach(device_t dev)955 u3g_attach(device_t dev)
956 {
957 	struct usb_config u3g_config_tmp[U3G_N_TRANSFER];
958 	struct usb_attach_arg *uaa = device_get_ivars(dev);
959 	struct u3g_softc *sc = device_get_softc(dev);
960 	struct usb_interface *iface;
961 	struct usb_interface_descriptor *id;
962 	uint32_t iface_valid;
963 	int error, type, nports;
964 	int ep, n;
965 	uint8_t i;
966 
967 	DPRINTF("sc=%p\n", sc);
968 
969 	type = USB_GET_DRIVER_INFO(uaa);
970 	if (type == U3GINIT_SAEL_M460
971 	    || usb_test_quirk(uaa, UQ_MSC_EJECT_SAEL_M460)) {
972 		u3g_sael_m460_init(uaa->device);
973 	}
974 
975 	/* copy in USB config */
976 	for (n = 0; n != U3G_N_TRANSFER; n++)
977 		u3g_config_tmp[n] = u3g_config[n];
978 
979 	device_set_usb_desc(dev);
980 	mtx_init(&sc->sc_mtx, "u3g", NULL, MTX_DEF);
981 	ucom_ref(&sc->sc_super_ucom);
982 
983 	sc->sc_udev = uaa->device;
984 
985 	/* Claim all interfaces on the device */
986 	iface_valid = 0;
987 	for (i = uaa->info.bIfaceIndex; i < USB_IFACE_MAX; i++) {
988 		iface = usbd_get_iface(uaa->device, i);
989 		if (iface == NULL)
990 			break;
991 		id = usbd_get_interface_descriptor(iface);
992 		if (id == NULL || id->bInterfaceClass != UICLASS_VENDOR)
993 			continue;
994 		if (u3g_huawei_is_cdce(uaa->info.idVendor,
995 		    id->bInterfaceSubClass, id->bInterfaceProtocol))
996 			continue;
997 		usbd_set_parent_iface(uaa->device, i, uaa->info.bIfaceIndex);
998 		iface_valid |= (1<<i);
999 	}
1000 
1001 	i = 0;		/* interface index */
1002 	ep = 0;		/* endpoint index */
1003 	nports = 0;	/* number of ports */
1004 	while (i < USB_IFACE_MAX) {
1005 		if ((iface_valid & (1<<i)) == 0) {
1006 			i++;
1007 			continue;
1008 		}
1009 
1010 		/* update BULK endpoint index */
1011 		for (n = 0; n < U3G_N_TRANSFER; n++)
1012 			u3g_config_tmp[n].ep_index = ep;
1013 
1014 		/* try to allocate a set of BULK endpoints */
1015 		error = usbd_transfer_setup(uaa->device, &i,
1016 		    sc->sc_xfer[nports], u3g_config_tmp, U3G_N_TRANSFER,
1017 		    &sc->sc_ucom[nports], &sc->sc_mtx);
1018 		if (error) {
1019 			/* next interface */
1020 			i++;
1021 			ep = 0;
1022 			continue;
1023 		}
1024 
1025 		iface = usbd_get_iface(uaa->device, i);
1026 		id = usbd_get_interface_descriptor(iface);
1027 		sc->sc_iface[nports] = id->bInterfaceNumber;
1028 
1029 		if (bootverbose && sc->sc_xfer[nports][U3G_INTR]) {
1030 			device_printf(dev, "port %d supports modem control\n",
1031 				      nports);
1032 		}
1033 
1034 		/* set stall by default */
1035 		mtx_lock(&sc->sc_mtx);
1036 		usbd_xfer_set_stall(sc->sc_xfer[nports][U3G_BULK_WR]);
1037 		usbd_xfer_set_stall(sc->sc_xfer[nports][U3G_BULK_RD]);
1038 		mtx_unlock(&sc->sc_mtx);
1039 
1040 		nports++;	/* found one port */
1041 		ep++;
1042 		if (nports == U3G_MAXPORTS)
1043 			break;
1044 	}
1045 	if (nports == 0) {
1046 		device_printf(dev, "no ports found\n");
1047 		goto detach;
1048 	}
1049 	sc->sc_numports = nports;
1050 
1051 	error = ucom_attach(&sc->sc_super_ucom, sc->sc_ucom,
1052 	    sc->sc_numports, sc, &u3g_callback, &sc->sc_mtx);
1053 	if (error) {
1054 		DPRINTF("ucom_attach failed\n");
1055 		goto detach;
1056 	}
1057 	ucom_set_pnpinfo_usb(&sc->sc_super_ucom, dev);
1058 	device_printf(dev, "Found %u port%s.\n", sc->sc_numports,
1059 	    sc->sc_numports > 1 ? "s":"");
1060 
1061 	return (0);
1062 
1063 detach:
1064 	u3g_detach(dev);
1065 	return (ENXIO);
1066 }
1067 
1068 static int
u3g_detach(device_t dev)1069 u3g_detach(device_t dev)
1070 {
1071 	struct u3g_softc *sc = device_get_softc(dev);
1072 	uint8_t subunit;
1073 
1074 	DPRINTF("sc=%p\n", sc);
1075 
1076 	/* NOTE: It is not dangerous to detach more ports than attached! */
1077 	ucom_detach(&sc->sc_super_ucom, sc->sc_ucom);
1078 
1079 	for (subunit = 0; subunit != U3G_MAXPORTS; subunit++)
1080 		usbd_transfer_unsetup(sc->sc_xfer[subunit], U3G_N_TRANSFER);
1081 
1082 	device_claim_softc(dev);
1083 
1084 	u3g_free_softc(sc);
1085 
1086 	return (0);
1087 }
1088 
1089 UCOM_UNLOAD_DRAIN(u3g);
1090 
1091 static void
u3g_free_softc(struct u3g_softc * sc)1092 u3g_free_softc(struct u3g_softc *sc)
1093 {
1094 	if (ucom_unref(&sc->sc_super_ucom)) {
1095 		mtx_destroy(&sc->sc_mtx);
1096 		device_free_softc(sc);
1097 	}
1098 }
1099 
1100 static void
u3g_free(struct ucom_softc * ucom)1101 u3g_free(struct ucom_softc *ucom)
1102 {
1103 	u3g_free_softc(ucom->sc_parent);
1104 }
1105 
1106 static void
u3g_start_read(struct ucom_softc * ucom)1107 u3g_start_read(struct ucom_softc *ucom)
1108 {
1109 	struct u3g_softc *sc = ucom->sc_parent;
1110 
1111 	/* start interrupt endpoint (if configured) */
1112 	usbd_transfer_start(sc->sc_xfer[ucom->sc_subunit][U3G_INTR]);
1113 
1114 	/* start read endpoint */
1115 	usbd_transfer_start(sc->sc_xfer[ucom->sc_subunit][U3G_BULK_RD]);
1116 }
1117 
1118 static void
u3g_stop_read(struct ucom_softc * ucom)1119 u3g_stop_read(struct ucom_softc *ucom)
1120 {
1121 	struct u3g_softc *sc = ucom->sc_parent;
1122 
1123 	/* stop interrupt endpoint (if configured) */
1124 	usbd_transfer_stop(sc->sc_xfer[ucom->sc_subunit][U3G_INTR]);
1125 
1126 	/* stop read endpoint */
1127 	usbd_transfer_stop(sc->sc_xfer[ucom->sc_subunit][U3G_BULK_RD]);
1128 }
1129 
1130 static void
u3g_start_write(struct ucom_softc * ucom)1131 u3g_start_write(struct ucom_softc *ucom)
1132 {
1133 	struct u3g_softc *sc = ucom->sc_parent;
1134 
1135 	usbd_transfer_start(sc->sc_xfer[ucom->sc_subunit][U3G_BULK_WR]);
1136 }
1137 
1138 static void
u3g_stop_write(struct ucom_softc * ucom)1139 u3g_stop_write(struct ucom_softc *ucom)
1140 {
1141 	struct u3g_softc *sc = ucom->sc_parent;
1142 
1143 	usbd_transfer_stop(sc->sc_xfer[ucom->sc_subunit][U3G_BULK_WR]);
1144 }
1145 
1146 static void
u3g_write_callback(struct usb_xfer * xfer,usb_error_t error)1147 u3g_write_callback(struct usb_xfer *xfer, usb_error_t error)
1148 {
1149 	struct ucom_softc *ucom = usbd_xfer_softc(xfer);
1150 	struct usb_page_cache *pc;
1151 	uint32_t actlen;
1152 	uint32_t frame;
1153 
1154 	switch (USB_GET_STATE(xfer)) {
1155 	case USB_ST_TRANSFERRED:
1156 	case USB_ST_SETUP:
1157 tr_setup:
1158 		for (frame = 0; frame != U3G_TXFRAMES; frame++) {
1159 			usbd_xfer_set_frame_offset(xfer, frame * U3G_TXSIZE, frame);
1160 
1161 			pc = usbd_xfer_get_frame(xfer, frame);
1162 			if (ucom_get_data(ucom, pc, 0, U3G_TXSIZE, &actlen) == 0)
1163 				break;
1164 			usbd_xfer_set_frame_len(xfer, frame, actlen);
1165 		}
1166 		if (frame != 0) {
1167 			usbd_xfer_set_frames(xfer, frame);
1168 			usbd_transfer_submit(xfer);
1169 		}
1170 		break;
1171 
1172 	default:			/* Error */
1173 		if (error != USB_ERR_CANCELLED) {
1174 			/* do a builtin clear-stall */
1175 			usbd_xfer_set_stall(xfer);
1176 			goto tr_setup;
1177 		}
1178 		break;
1179 	}
1180 }
1181 
1182 static void
u3g_read_callback(struct usb_xfer * xfer,usb_error_t error)1183 u3g_read_callback(struct usb_xfer *xfer, usb_error_t error)
1184 {
1185 	struct ucom_softc *ucom = usbd_xfer_softc(xfer);
1186 	struct usb_page_cache *pc;
1187 	int actlen;
1188 
1189 	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1190 
1191 	switch (USB_GET_STATE(xfer)) {
1192 	case USB_ST_TRANSFERRED:
1193 		pc = usbd_xfer_get_frame(xfer, 0);
1194 		ucom_put_data(ucom, pc, 0, actlen);
1195 
1196 	case USB_ST_SETUP:
1197 tr_setup:
1198 		usbd_xfer_set_frame_len(xfer, 0, usbd_xfer_max_len(xfer));
1199 		usbd_transfer_submit(xfer);
1200 		break;
1201 
1202 	default:			/* Error */
1203 		if (error != USB_ERR_CANCELLED) {
1204 			/* do a builtin clear-stall */
1205 			usbd_xfer_set_stall(xfer);
1206 			goto tr_setup;
1207 		}
1208 		break;
1209 	}
1210 }
1211 
1212 static void
u3g_cfg_get_status(struct ucom_softc * ucom,uint8_t * lsr,uint8_t * msr)1213 u3g_cfg_get_status(struct ucom_softc *ucom, uint8_t *lsr, uint8_t *msr)
1214 {
1215 	struct u3g_softc *sc = ucom->sc_parent;
1216 
1217 	/* XXX Note: sc_lsr is always zero */
1218 	*lsr = sc->sc_lsr[ucom->sc_subunit];
1219 	*msr = sc->sc_msr[ucom->sc_subunit];
1220 }
1221 
1222 static void
u3g_cfg_set_line(struct ucom_softc * ucom)1223 u3g_cfg_set_line(struct ucom_softc *ucom)
1224 {
1225 	struct u3g_softc *sc = ucom->sc_parent;
1226 	struct usb_device_request req;
1227 
1228 	req.bmRequestType = UT_WRITE_CLASS_INTERFACE;
1229 	req.bRequest = UCDC_SET_CONTROL_LINE_STATE;
1230 	USETW(req.wValue, sc->sc_line[ucom->sc_subunit]);
1231 	req.wIndex[0] = sc->sc_iface[ucom->sc_subunit];
1232 	req.wIndex[1] = 0;
1233 	USETW(req.wLength, 0);
1234 
1235 	ucom_cfg_do_request(sc->sc_udev, ucom,
1236 	    &req, NULL, 0, 1000);
1237 }
1238 
1239 static void
u3g_cfg_set_dtr(struct ucom_softc * ucom,uint8_t onoff)1240 u3g_cfg_set_dtr(struct ucom_softc *ucom, uint8_t onoff)
1241 {
1242 	struct u3g_softc *sc = ucom->sc_parent;
1243 
1244 	DPRINTF("onoff = %d\n", onoff);
1245 
1246 	if (onoff)
1247 		sc->sc_line[ucom->sc_subunit] |= UCDC_LINE_DTR;
1248 	else
1249 		sc->sc_line[ucom->sc_subunit] &= ~UCDC_LINE_DTR;
1250 
1251 	u3g_cfg_set_line(ucom);
1252 }
1253 
1254 static void
u3g_cfg_set_rts(struct ucom_softc * ucom,uint8_t onoff)1255 u3g_cfg_set_rts(struct ucom_softc *ucom, uint8_t onoff)
1256 {
1257 	struct u3g_softc *sc = ucom->sc_parent;
1258 
1259 	DPRINTF("onoff = %d\n", onoff);
1260 
1261 	if (onoff)
1262 		sc->sc_line[ucom->sc_subunit] |= UCDC_LINE_RTS;
1263 	else
1264 		sc->sc_line[ucom->sc_subunit] &= ~UCDC_LINE_RTS;
1265 
1266 	u3g_cfg_set_line(ucom);
1267 }
1268 
1269 static void
u3g_intr_callback(struct usb_xfer * xfer,usb_error_t error)1270 u3g_intr_callback(struct usb_xfer *xfer, usb_error_t error)
1271 {
1272 	struct ucom_softc *ucom = usbd_xfer_softc(xfer);
1273 	struct u3g_softc *sc = ucom->sc_parent;
1274 	struct usb_page_cache *pc;
1275 	struct usb_cdc_notification pkt;
1276 	int actlen;
1277 	uint16_t wLen;
1278 	uint8_t mstatus;
1279 
1280 	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1281 
1282 	switch (USB_GET_STATE(xfer)) {
1283 	case USB_ST_TRANSFERRED:
1284 		if (actlen < 8) {	/* usb_cdc_notification with 2 data bytes */
1285 			DPRINTF("message too short (expected 8, received %d)\n", actlen);
1286 			goto tr_setup;
1287 		}
1288 		pc = usbd_xfer_get_frame(xfer, 0);
1289 		usbd_copy_out(pc, 0, &pkt, actlen);
1290 
1291 		wLen = UGETW(pkt.wLength);
1292 		if (wLen < 2) {
1293 			DPRINTF("message too short (expected 2 data bytes, received %d)\n", wLen);
1294 			goto tr_setup;
1295 		}
1296 
1297 		if (pkt.bmRequestType == UCDC_NOTIFICATION
1298 		    && pkt.bNotification == UCDC_N_SERIAL_STATE) {
1299 			/*
1300 		         * Set the serial state in ucom driver based on
1301 		         * the bits from the notify message
1302 		         */
1303 			DPRINTF("notify bytes = 0x%02x, 0x%02x\n",
1304 			    pkt.data[0], pkt.data[1]);
1305 
1306 			/* currently, lsr is always zero. */
1307 			sc->sc_lsr[ucom->sc_subunit] = 0;
1308 			sc->sc_msr[ucom->sc_subunit] = 0;
1309 
1310 			mstatus = pkt.data[0];
1311 
1312 			if (mstatus & UCDC_N_SERIAL_RI)
1313 				sc->sc_msr[ucom->sc_subunit] |= SER_RI;
1314 			if (mstatus & UCDC_N_SERIAL_DSR)
1315 				sc->sc_msr[ucom->sc_subunit] |= SER_DSR;
1316 			if (mstatus & UCDC_N_SERIAL_DCD)
1317 				sc->sc_msr[ucom->sc_subunit] |= SER_DCD;
1318 			ucom_status_change(ucom);
1319 		}
1320 
1321 	case USB_ST_SETUP:
1322 tr_setup:
1323 		usbd_xfer_set_frame_len(xfer, 0, usbd_xfer_max_len(xfer));
1324 		usbd_transfer_submit(xfer);
1325 		return;
1326 
1327 	default:			/* Error */
1328 		if (error != USB_ERR_CANCELLED) {
1329 			/* try to clear stall first */
1330 			usbd_xfer_set_stall(xfer);
1331 			goto tr_setup;
1332 		}
1333 		return;
1334 	}
1335 }
1336 
1337 static void
u3g_poll(struct ucom_softc * ucom)1338 u3g_poll(struct ucom_softc *ucom)
1339 {
1340 	struct u3g_softc *sc = ucom->sc_parent;
1341 	usbd_transfer_poll(sc->sc_xfer[ucom->sc_subunit], U3G_N_TRANSFER);
1342 }
1343