xref: /freebsd/sys/dev/usb/usb_msctest.c (revision 3ef51c5fb9163f2aafb1c14729e06a8bf0c4d113)
1 /* $FreeBSD$ */
2 /*-
3  * Copyright (c) 2008,2011 Hans Petter Selasky. All rights reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  * 1. Redistributions of source code must retain the above copyright
9  *    notice, this list of conditions and the following disclaimer.
10  * 2. Redistributions in binary form must reproduce the above copyright
11  *    notice, this list of conditions and the following disclaimer in the
12  *    documentation and/or other materials provided with the distribution.
13  *
14  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
15  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
16  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
17  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
18  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
19  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
20  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
21  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
22  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
23  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
24  * SUCH DAMAGE.
25  */
26 
27 /*
28  * The following file contains code that will detect USB autoinstall
29  * disks.
30  *
31  * TODO: Potentially we could add code to automatically detect USB
32  * mass storage quirks for not supported SCSI commands!
33  */
34 
35 #include <sys/stdint.h>
36 #include <sys/stddef.h>
37 #include <sys/param.h>
38 #include <sys/queue.h>
39 #include <sys/types.h>
40 #include <sys/systm.h>
41 #include <sys/kernel.h>
42 #include <sys/bus.h>
43 #include <sys/module.h>
44 #include <sys/lock.h>
45 #include <sys/mutex.h>
46 #include <sys/condvar.h>
47 #include <sys/sysctl.h>
48 #include <sys/sx.h>
49 #include <sys/unistd.h>
50 #include <sys/callout.h>
51 #include <sys/malloc.h>
52 #include <sys/priv.h>
53 
54 #include <dev/usb/usb.h>
55 #include <dev/usb/usbdi.h>
56 #include <dev/usb/usbdi_util.h>
57 
58 #define	USB_DEBUG_VAR usb_debug
59 
60 #include <dev/usb/usb_busdma.h>
61 #include <dev/usb/usb_process.h>
62 #include <dev/usb/usb_transfer.h>
63 #include <dev/usb/usb_msctest.h>
64 #include <dev/usb/usb_debug.h>
65 #include <dev/usb/usb_device.h>
66 #include <dev/usb/usb_request.h>
67 #include <dev/usb/usb_util.h>
68 #include <dev/usb/quirk/usb_quirk.h>
69 
70 enum {
71 	ST_COMMAND,
72 	ST_DATA_RD,
73 	ST_DATA_RD_CS,
74 	ST_DATA_WR,
75 	ST_DATA_WR_CS,
76 	ST_STATUS,
77 	ST_MAX,
78 };
79 
80 enum {
81 	DIR_IN,
82 	DIR_OUT,
83 	DIR_NONE,
84 };
85 
86 #define	SCSI_MAX_LEN	0x100
87 #define	SCSI_INQ_LEN	0x24
88 #define	SCSI_SENSE_LEN	0xFF
89 
90 static uint8_t scsi_test_unit_ready[] = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
91 static uint8_t scsi_inquiry[] = { 0x12, 0x00, 0x00, 0x00, SCSI_INQ_LEN, 0x00 };
92 static uint8_t scsi_rezero_init[] =     { 0x01, 0x00, 0x00, 0x00, 0x00, 0x00 };
93 static uint8_t scsi_start_stop_unit[] = { 0x1b, 0x00, 0x00, 0x00, 0x02, 0x00 };
94 static uint8_t scsi_ztestor_eject[] =   { 0x85, 0x01, 0x01, 0x01, 0x18, 0x01,
95 					  0x01, 0x01, 0x01, 0x01, 0x00, 0x00 };
96 static uint8_t scsi_cmotech_eject[] =   { 0xff, 0x52, 0x44, 0x45, 0x56, 0x43,
97 					  0x48, 0x47 };
98 static uint8_t scsi_huawei_eject[] =	{ 0x11, 0x06, 0x00, 0x00, 0x00, 0x00,
99 					  0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
100 					  0x00, 0x00, 0x00, 0x00 };
101 static uint8_t scsi_tct_eject[] =	{ 0x06, 0xf5, 0x04, 0x02, 0x52, 0x70 };
102 static uint8_t scsi_sync_cache[] =	{ 0x35, 0x00, 0x00, 0x00, 0x00, 0x00,
103 					  0x00, 0x00, 0x00, 0x00 };
104 static uint8_t scsi_request_sense[] =	{ 0x03, 0x00, 0x00, 0x00, 0x12, 0x00,
105 					  0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
106 
107 #define	BULK_SIZE		64	/* dummy */
108 #define	ERR_CSW_FAILED		-1
109 
110 /* Command Block Wrapper */
111 struct bbb_cbw {
112 	uDWord	dCBWSignature;
113 #define	CBWSIGNATURE	0x43425355
114 	uDWord	dCBWTag;
115 	uDWord	dCBWDataTransferLength;
116 	uByte	bCBWFlags;
117 #define	CBWFLAGS_OUT	0x00
118 #define	CBWFLAGS_IN	0x80
119 	uByte	bCBWLUN;
120 	uByte	bCDBLength;
121 #define	CBWCDBLENGTH	16
122 	uByte	CBWCDB[CBWCDBLENGTH];
123 } __packed;
124 
125 /* Command Status Wrapper */
126 struct bbb_csw {
127 	uDWord	dCSWSignature;
128 #define	CSWSIGNATURE	0x53425355
129 	uDWord	dCSWTag;
130 	uDWord	dCSWDataResidue;
131 	uByte	bCSWStatus;
132 #define	CSWSTATUS_GOOD	0x0
133 #define	CSWSTATUS_FAILED	0x1
134 #define	CSWSTATUS_PHASE	0x2
135 } __packed;
136 
137 struct bbb_transfer {
138 	struct mtx mtx;
139 	struct cv cv;
140 	struct bbb_cbw cbw;
141 	struct bbb_csw csw;
142 
143 	struct usb_xfer *xfer[ST_MAX];
144 
145 	uint8_t *data_ptr;
146 
147 	usb_size_t data_len;		/* bytes */
148 	usb_size_t data_rem;		/* bytes */
149 	usb_timeout_t data_timeout;	/* ms */
150 	usb_frlength_t actlen;		/* bytes */
151 
152 	uint8_t	cmd_len;		/* bytes */
153 	uint8_t	dir;
154 	uint8_t	lun;
155 	uint8_t	state;
156 	uint8_t	status_try;
157 	int	error;
158 
159 	uint8_t	buffer[SCSI_MAX_LEN] __aligned(4);
160 };
161 
162 static usb_callback_t bbb_command_callback;
163 static usb_callback_t bbb_data_read_callback;
164 static usb_callback_t bbb_data_rd_cs_callback;
165 static usb_callback_t bbb_data_write_callback;
166 static usb_callback_t bbb_data_wr_cs_callback;
167 static usb_callback_t bbb_status_callback;
168 
169 static void	bbb_done(struct bbb_transfer *, int);
170 static void	bbb_transfer_start(struct bbb_transfer *, uint8_t);
171 static void	bbb_data_clear_stall_callback(struct usb_xfer *, uint8_t,
172 		    uint8_t);
173 static int	bbb_command_start(struct bbb_transfer *, uint8_t, uint8_t,
174 		    void *, size_t, void *, size_t, usb_timeout_t);
175 static struct bbb_transfer *bbb_attach(struct usb_device *, uint8_t);
176 static void	bbb_detach(struct bbb_transfer *);
177 
178 static const struct usb_config bbb_config[ST_MAX] = {
179 
180 	[ST_COMMAND] = {
181 		.type = UE_BULK,
182 		.endpoint = UE_ADDR_ANY,
183 		.direction = UE_DIR_OUT,
184 		.bufsize = sizeof(struct bbb_cbw),
185 		.flags = {.ext_buffer = 1,},
186 		.callback = &bbb_command_callback,
187 		.timeout = 4 * USB_MS_HZ,	/* 4 seconds */
188 	},
189 
190 	[ST_DATA_RD] = {
191 		.type = UE_BULK,
192 		.endpoint = UE_ADDR_ANY,
193 		.direction = UE_DIR_IN,
194 		.bufsize = BULK_SIZE,
195 		.flags = {.ext_buffer = 1,.proxy_buffer = 1,.short_xfer_ok = 1,},
196 		.callback = &bbb_data_read_callback,
197 		.timeout = 4 * USB_MS_HZ,	/* 4 seconds */
198 	},
199 
200 	[ST_DATA_RD_CS] = {
201 		.type = UE_CONTROL,
202 		.endpoint = 0x00,	/* Control pipe */
203 		.direction = UE_DIR_ANY,
204 		.bufsize = sizeof(struct usb_device_request),
205 		.callback = &bbb_data_rd_cs_callback,
206 		.timeout = 1 * USB_MS_HZ,	/* 1 second  */
207 	},
208 
209 	[ST_DATA_WR] = {
210 		.type = UE_BULK,
211 		.endpoint = UE_ADDR_ANY,
212 		.direction = UE_DIR_OUT,
213 		.bufsize = BULK_SIZE,
214 		.flags = {.ext_buffer = 1,.proxy_buffer = 1,},
215 		.callback = &bbb_data_write_callback,
216 		.timeout = 4 * USB_MS_HZ,	/* 4 seconds */
217 	},
218 
219 	[ST_DATA_WR_CS] = {
220 		.type = UE_CONTROL,
221 		.endpoint = 0x00,	/* Control pipe */
222 		.direction = UE_DIR_ANY,
223 		.bufsize = sizeof(struct usb_device_request),
224 		.callback = &bbb_data_wr_cs_callback,
225 		.timeout = 1 * USB_MS_HZ,	/* 1 second  */
226 	},
227 
228 	[ST_STATUS] = {
229 		.type = UE_BULK,
230 		.endpoint = UE_ADDR_ANY,
231 		.direction = UE_DIR_IN,
232 		.bufsize = sizeof(struct bbb_csw),
233 		.flags = {.ext_buffer = 1,.short_xfer_ok = 1,},
234 		.callback = &bbb_status_callback,
235 		.timeout = 1 * USB_MS_HZ,	/* 1 second  */
236 	},
237 };
238 
239 static void
240 bbb_done(struct bbb_transfer *sc, int error)
241 {
242 
243 	sc->error = error;
244 	sc->state = ST_COMMAND;
245 	sc->status_try = 1;
246 	cv_signal(&sc->cv);
247 }
248 
249 static void
250 bbb_transfer_start(struct bbb_transfer *sc, uint8_t xfer_index)
251 {
252 	sc->state = xfer_index;
253 	usbd_transfer_start(sc->xfer[xfer_index]);
254 }
255 
256 static void
257 bbb_data_clear_stall_callback(struct usb_xfer *xfer,
258     uint8_t next_xfer, uint8_t stall_xfer)
259 {
260 	struct bbb_transfer *sc = usbd_xfer_softc(xfer);
261 
262 	if (usbd_clear_stall_callback(xfer, sc->xfer[stall_xfer])) {
263 		switch (USB_GET_STATE(xfer)) {
264 		case USB_ST_SETUP:
265 		case USB_ST_TRANSFERRED:
266 			bbb_transfer_start(sc, next_xfer);
267 			break;
268 		default:
269 			bbb_done(sc, USB_ERR_STALLED);
270 			break;
271 		}
272 	}
273 }
274 
275 static void
276 bbb_command_callback(struct usb_xfer *xfer, usb_error_t error)
277 {
278 	struct bbb_transfer *sc = usbd_xfer_softc(xfer);
279 	uint32_t tag;
280 
281 	switch (USB_GET_STATE(xfer)) {
282 	case USB_ST_TRANSFERRED:
283 		bbb_transfer_start
284 		    (sc, ((sc->dir == DIR_IN) ? ST_DATA_RD :
285 		    (sc->dir == DIR_OUT) ? ST_DATA_WR :
286 		    ST_STATUS));
287 		break;
288 
289 	case USB_ST_SETUP:
290 		sc->status_try = 0;
291 		tag = UGETDW(sc->cbw.dCBWTag) + 1;
292 		USETDW(sc->cbw.dCBWSignature, CBWSIGNATURE);
293 		USETDW(sc->cbw.dCBWTag, tag);
294 		USETDW(sc->cbw.dCBWDataTransferLength, (uint32_t)sc->data_len);
295 		sc->cbw.bCBWFlags = ((sc->dir == DIR_IN) ? CBWFLAGS_IN : CBWFLAGS_OUT);
296 		sc->cbw.bCBWLUN = sc->lun;
297 		sc->cbw.bCDBLength = sc->cmd_len;
298 		if (sc->cbw.bCDBLength > sizeof(sc->cbw.CBWCDB)) {
299 			sc->cbw.bCDBLength = sizeof(sc->cbw.CBWCDB);
300 			DPRINTFN(0, "Truncating long command\n");
301 		}
302 		usbd_xfer_set_frame_data(xfer, 0, &sc->cbw, sizeof(sc->cbw));
303 		usbd_transfer_submit(xfer);
304 		break;
305 
306 	default:			/* Error */
307 		bbb_done(sc, error);
308 		break;
309 	}
310 }
311 
312 static void
313 bbb_data_read_callback(struct usb_xfer *xfer, usb_error_t error)
314 {
315 	struct bbb_transfer *sc = usbd_xfer_softc(xfer);
316 	usb_frlength_t max_bulk = usbd_xfer_max_len(xfer);
317 	int actlen, sumlen;
318 
319 	usbd_xfer_status(xfer, &actlen, &sumlen, NULL, NULL);
320 
321 	switch (USB_GET_STATE(xfer)) {
322 	case USB_ST_TRANSFERRED:
323 		sc->data_rem -= actlen;
324 		sc->data_ptr += actlen;
325 		sc->actlen += actlen;
326 
327 		if (actlen < sumlen) {
328 			/* short transfer */
329 			sc->data_rem = 0;
330 		}
331 	case USB_ST_SETUP:
332 		DPRINTF("max_bulk=%d, data_rem=%d\n",
333 		    max_bulk, sc->data_rem);
334 
335 		if (sc->data_rem == 0) {
336 			bbb_transfer_start(sc, ST_STATUS);
337 			break;
338 		}
339 		if (max_bulk > sc->data_rem) {
340 			max_bulk = sc->data_rem;
341 		}
342 		usbd_xfer_set_timeout(xfer, sc->data_timeout);
343 		usbd_xfer_set_frame_data(xfer, 0, sc->data_ptr, max_bulk);
344 		usbd_transfer_submit(xfer);
345 		break;
346 
347 	default:			/* Error */
348 		if (error == USB_ERR_CANCELLED) {
349 			bbb_done(sc, error);
350 		} else {
351 			bbb_transfer_start(sc, ST_DATA_RD_CS);
352 		}
353 		break;
354 	}
355 }
356 
357 static void
358 bbb_data_rd_cs_callback(struct usb_xfer *xfer, usb_error_t error)
359 {
360 	bbb_data_clear_stall_callback(xfer, ST_STATUS,
361 	    ST_DATA_RD);
362 }
363 
364 static void
365 bbb_data_write_callback(struct usb_xfer *xfer, usb_error_t error)
366 {
367 	struct bbb_transfer *sc = usbd_xfer_softc(xfer);
368 	usb_frlength_t max_bulk = usbd_xfer_max_len(xfer);
369 	int actlen, sumlen;
370 
371 	usbd_xfer_status(xfer, &actlen, &sumlen, NULL, NULL);
372 
373 	switch (USB_GET_STATE(xfer)) {
374 	case USB_ST_TRANSFERRED:
375 		sc->data_rem -= actlen;
376 		sc->data_ptr += actlen;
377 		sc->actlen += actlen;
378 
379 		if (actlen < sumlen) {
380 			/* short transfer */
381 			sc->data_rem = 0;
382 		}
383 	case USB_ST_SETUP:
384 		DPRINTF("max_bulk=%d, data_rem=%d\n",
385 		    max_bulk, sc->data_rem);
386 
387 		if (sc->data_rem == 0) {
388 			bbb_transfer_start(sc, ST_STATUS);
389 			return;
390 		}
391 		if (max_bulk > sc->data_rem) {
392 			max_bulk = sc->data_rem;
393 		}
394 		usbd_xfer_set_timeout(xfer, sc->data_timeout);
395 		usbd_xfer_set_frame_data(xfer, 0, sc->data_ptr, max_bulk);
396 		usbd_transfer_submit(xfer);
397 		return;
398 
399 	default:			/* Error */
400 		if (error == USB_ERR_CANCELLED) {
401 			bbb_done(sc, error);
402 		} else {
403 			bbb_transfer_start(sc, ST_DATA_WR_CS);
404 		}
405 		return;
406 
407 	}
408 }
409 
410 static void
411 bbb_data_wr_cs_callback(struct usb_xfer *xfer, usb_error_t error)
412 {
413 	bbb_data_clear_stall_callback(xfer, ST_STATUS,
414 	    ST_DATA_WR);
415 }
416 
417 static void
418 bbb_status_callback(struct usb_xfer *xfer, usb_error_t error)
419 {
420 	struct bbb_transfer *sc = usbd_xfer_softc(xfer);
421 	int actlen;
422 	int sumlen;
423 
424 	usbd_xfer_status(xfer, &actlen, &sumlen, NULL, NULL);
425 
426 	switch (USB_GET_STATE(xfer)) {
427 	case USB_ST_TRANSFERRED:
428 
429 		/* very simple status check */
430 
431 		if (actlen < (int)sizeof(sc->csw)) {
432 			bbb_done(sc, USB_ERR_SHORT_XFER);
433 		} else if (sc->csw.bCSWStatus == CSWSTATUS_GOOD) {
434 			bbb_done(sc, 0);	/* success */
435 		} else {
436 			bbb_done(sc, ERR_CSW_FAILED);	/* error */
437 		}
438 		break;
439 
440 	case USB_ST_SETUP:
441 		usbd_xfer_set_frame_data(xfer, 0, &sc->csw, sizeof(sc->csw));
442 		usbd_transfer_submit(xfer);
443 		break;
444 
445 	default:
446 		DPRINTF("Failed to read CSW: %s, try %d\n",
447 		    usbd_errstr(error), sc->status_try);
448 
449 		if (error == USB_ERR_CANCELLED || sc->status_try) {
450 			bbb_done(sc, error);
451 		} else {
452 			sc->status_try = 1;
453 			bbb_transfer_start(sc, ST_DATA_RD_CS);
454 		}
455 		break;
456 	}
457 }
458 
459 /*------------------------------------------------------------------------*
460  *	bbb_command_start - execute a SCSI command synchronously
461  *
462  * Return values
463  * 0: Success
464  * Else: Failure
465  *------------------------------------------------------------------------*/
466 static int
467 bbb_command_start(struct bbb_transfer *sc, uint8_t dir, uint8_t lun,
468     void *data_ptr, size_t data_len, void *cmd_ptr, size_t cmd_len,
469     usb_timeout_t data_timeout)
470 {
471 	sc->lun = lun;
472 	sc->dir = data_len ? dir : DIR_NONE;
473 	sc->data_ptr = data_ptr;
474 	sc->data_len = data_len;
475 	sc->data_rem = data_len;
476 	sc->data_timeout = (data_timeout + USB_MS_HZ);
477 	sc->actlen = 0;
478 	sc->cmd_len = cmd_len;
479 	memset(&sc->cbw.CBWCDB, 0, sizeof(sc->cbw.CBWCDB));
480 	memcpy(&sc->cbw.CBWCDB, cmd_ptr, cmd_len);
481 	DPRINTFN(1, "SCSI cmd = %*D\n", (int)cmd_len, (char *)sc->cbw.CBWCDB, ":");
482 
483 	mtx_lock(&sc->mtx);
484 	usbd_transfer_start(sc->xfer[sc->state]);
485 
486 	while (usbd_transfer_pending(sc->xfer[sc->state])) {
487 		cv_wait(&sc->cv, &sc->mtx);
488 	}
489 	mtx_unlock(&sc->mtx);
490 	return (sc->error);
491 }
492 
493 static struct bbb_transfer *
494 bbb_attach(struct usb_device *udev, uint8_t iface_index)
495 {
496 	struct usb_interface *iface;
497 	struct usb_interface_descriptor *id;
498 	struct bbb_transfer *sc;
499 	usb_error_t err;
500 	uint8_t do_unlock;
501 
502 	/* automatic locking */
503 	if (usbd_enum_is_locked(udev)) {
504 		do_unlock = 0;
505 	} else {
506 		do_unlock = 1;
507 		usbd_enum_lock(udev);
508 	}
509 
510 	/*
511 	 * Make sure any driver which is hooked up to this interface,
512 	 * like umass is gone:
513 	 */
514 	usb_detach_device(udev, iface_index, 0);
515 
516 	if (do_unlock)
517 		usbd_enum_unlock(udev);
518 
519 	iface = usbd_get_iface(udev, iface_index);
520 	if (iface == NULL)
521 		return (NULL);
522 
523 	id = iface->idesc;
524 	if (id == NULL || id->bInterfaceClass != UICLASS_MASS)
525 		return (NULL);
526 
527 	switch (id->bInterfaceSubClass) {
528 	case UISUBCLASS_SCSI:
529 	case UISUBCLASS_UFI:
530 	case UISUBCLASS_SFF8020I:
531 	case UISUBCLASS_SFF8070I:
532 		break;
533 	default:
534 		return (NULL);
535 	}
536 
537 	switch (id->bInterfaceProtocol) {
538 	case UIPROTO_MASS_BBB_OLD:
539 	case UIPROTO_MASS_BBB:
540 		break;
541 	default:
542 		return (NULL);
543 	}
544 
545 	sc = malloc(sizeof(*sc), M_USB, M_WAITOK | M_ZERO);
546 	mtx_init(&sc->mtx, "USB autoinstall", NULL, MTX_DEF);
547 	cv_init(&sc->cv, "WBBB");
548 
549 	err = usbd_transfer_setup(udev, &iface_index, sc->xfer, bbb_config,
550 	    ST_MAX, sc, &sc->mtx);
551 	if (err) {
552 		bbb_detach(sc);
553 		return (NULL);
554 	}
555 	return (sc);
556 }
557 
558 static void
559 bbb_detach(struct bbb_transfer *sc)
560 {
561 	usbd_transfer_unsetup(sc->xfer, ST_MAX);
562 	mtx_destroy(&sc->mtx);
563 	cv_destroy(&sc->cv);
564 	free(sc, M_USB);
565 }
566 
567 /*------------------------------------------------------------------------*
568  *	usb_iface_is_cdrom
569  *
570  * Return values:
571  * 1: This interface is an auto install disk (CD-ROM)
572  * 0: Not an auto install disk.
573  *------------------------------------------------------------------------*/
574 int
575 usb_iface_is_cdrom(struct usb_device *udev, uint8_t iface_index)
576 {
577 	struct bbb_transfer *sc;
578 	uint8_t timeout;
579 	uint8_t is_cdrom;
580 	uint8_t sid_type;
581 	int err;
582 
583 	sc = bbb_attach(udev, iface_index);
584 	if (sc == NULL)
585 		return (0);
586 
587 	is_cdrom = 0;
588 	timeout = 4;	/* tries */
589 	while (--timeout) {
590 		err = bbb_command_start(sc, DIR_IN, 0, sc->buffer,
591 		    SCSI_INQ_LEN, &scsi_inquiry, sizeof(scsi_inquiry),
592 		    USB_MS_HZ);
593 
594 		if (err == 0 && sc->actlen > 0) {
595 			sid_type = sc->buffer[0] & 0x1F;
596 			if (sid_type == 0x05)
597 				is_cdrom = 1;
598 			break;
599 		} else if (err != ERR_CSW_FAILED)
600 			break;	/* non retryable error */
601 		usb_pause_mtx(NULL, hz);
602 	}
603 	bbb_detach(sc);
604 	return (is_cdrom);
605 }
606 
607 static uint8_t
608 usb_msc_get_max_lun(struct usb_device *udev, uint8_t iface_index)
609 {
610 	struct usb_device_request req;
611 	usb_error_t err;
612 	uint8_t buf = 0;
613 
614 
615 	/* The Get Max Lun command is a class-specific request. */
616 	req.bmRequestType = UT_READ_CLASS_INTERFACE;
617 	req.bRequest = 0xFE;		/* GET_MAX_LUN */
618 	USETW(req.wValue, 0);
619 	req.wIndex[0] = iface_index;
620 	req.wIndex[1] = 0;
621 	USETW(req.wLength, 1);
622 
623 	err = usbd_do_request(udev, NULL, &req, &buf);
624 	if (err)
625 		buf = 0;
626 
627 	return (buf);
628 }
629 
630 usb_error_t
631 usb_msc_auto_quirk(struct usb_device *udev, uint8_t iface_index)
632 {
633 	struct bbb_transfer *sc;
634 	uint8_t timeout;
635 	uint8_t is_no_direct;
636 	uint8_t sid_type;
637 	int err;
638 
639 	sc = bbb_attach(udev, iface_index);
640 	if (sc == NULL)
641 		return (0);
642 
643 	/*
644 	 * Some devices need a delay after that the configuration
645 	 * value is set to function properly:
646 	 */
647 	usb_pause_mtx(NULL, hz);
648 
649 	if (usb_msc_get_max_lun(udev, iface_index) == 0) {
650 		DPRINTF("Device has only got one LUN.\n");
651 		usbd_add_dynamic_quirk(udev, UQ_MSC_NO_GETMAXLUN);
652 	}
653 
654 	is_no_direct = 1;
655 	for (timeout = 4; timeout; timeout--) {
656 		err = bbb_command_start(sc, DIR_IN, 0, sc->buffer,
657 		    SCSI_INQ_LEN, &scsi_inquiry, sizeof(scsi_inquiry),
658 		    USB_MS_HZ);
659 
660 		if (err == 0 && sc->actlen > 0) {
661 			sid_type = sc->buffer[0] & 0x1F;
662 			if (sid_type == 0x00)
663 				is_no_direct = 0;
664 			break;
665 		} else if (err != ERR_CSW_FAILED)
666 			break;	/* non retryable error */
667 		usb_pause_mtx(NULL, hz);
668 	}
669 
670 	if (is_no_direct) {
671 		DPRINTF("Device is not direct access.\n");
672 		goto done;
673 	}
674 
675 	err = bbb_command_start(sc, DIR_IN, 0, NULL, 0,
676 	    &scsi_test_unit_ready, sizeof(scsi_test_unit_ready),
677 	    USB_MS_HZ);
678 
679 	if (err != 0) {
680 
681 		if (err != ERR_CSW_FAILED)
682 			goto error;
683 	}
684 
685 	err = bbb_command_start(sc, DIR_IN, 0, NULL, 0,
686 	    &scsi_sync_cache, sizeof(scsi_sync_cache),
687 	    USB_MS_HZ);
688 
689 	if (err != 0) {
690 
691 		if (err != ERR_CSW_FAILED)
692 			goto error;
693 
694 		DPRINTF("Device doesn't handle synchronize cache\n");
695 
696 		usbd_add_dynamic_quirk(udev, UQ_MSC_NO_SYNC_CACHE);
697 	}
698 
699 	/* clear sense status of any failed commands on the device */
700 
701 	err = bbb_command_start(sc, DIR_IN, 0, sc->buffer,
702 	    SCSI_INQ_LEN, &scsi_inquiry, sizeof(scsi_inquiry),
703 	    USB_MS_HZ);
704 
705 	DPRINTF("Inquiry = %d\n", err);
706 
707 	if (err != 0) {
708 
709 		if (err != ERR_CSW_FAILED)
710 			goto error;
711 	}
712 
713 	err = bbb_command_start(sc, DIR_IN, 0, sc->buffer,
714 	    SCSI_SENSE_LEN, &scsi_request_sense,
715 	    sizeof(scsi_request_sense), USB_MS_HZ);
716 
717 	DPRINTF("Request sense = %d\n", err);
718 
719 	if (err != 0) {
720 
721 		if (err != ERR_CSW_FAILED)
722 			goto error;
723 	}
724 
725 done:
726 	bbb_detach(sc);
727 	return (0);
728 
729 error:
730  	bbb_detach(sc);
731 
732 	DPRINTF("Device did not respond, enabling all quirks\n");
733 
734 	usbd_add_dynamic_quirk(udev, UQ_MSC_NO_SYNC_CACHE);
735 	usbd_add_dynamic_quirk(udev, UQ_MSC_NO_TEST_UNIT_READY);
736 
737 	/* Need to re-enumerate the device */
738 	usbd_req_re_enumerate(udev, NULL);
739 
740 	return (USB_ERR_STALLED);
741 }
742 
743 usb_error_t
744 usb_msc_eject(struct usb_device *udev, uint8_t iface_index, int method)
745 {
746 	struct bbb_transfer *sc;
747 	usb_error_t err;
748 
749 	sc = bbb_attach(udev, iface_index);
750 	if (sc == NULL)
751 		return (USB_ERR_INVAL);
752 
753 	err = 0;
754 	switch (method) {
755 	case MSC_EJECT_STOPUNIT:
756 		err = bbb_command_start(sc, DIR_IN, 0, NULL, 0,
757 		    &scsi_test_unit_ready, sizeof(scsi_test_unit_ready),
758 		    USB_MS_HZ);
759 		DPRINTF("Test unit ready status: %s\n", usbd_errstr(err));
760 		err = bbb_command_start(sc, DIR_IN, 0, NULL, 0,
761 		    &scsi_start_stop_unit, sizeof(scsi_start_stop_unit),
762 		    USB_MS_HZ);
763 		break;
764 	case MSC_EJECT_REZERO:
765 		err = bbb_command_start(sc, DIR_IN, 0, NULL, 0,
766 		    &scsi_rezero_init, sizeof(scsi_rezero_init),
767 		    USB_MS_HZ);
768 		break;
769 	case MSC_EJECT_ZTESTOR:
770 		err = bbb_command_start(sc, DIR_IN, 0, NULL, 0,
771 		    &scsi_ztestor_eject, sizeof(scsi_ztestor_eject),
772 		    USB_MS_HZ);
773 		break;
774 	case MSC_EJECT_CMOTECH:
775 		err = bbb_command_start(sc, DIR_IN, 0, NULL, 0,
776 		    &scsi_cmotech_eject, sizeof(scsi_cmotech_eject),
777 		    USB_MS_HZ);
778 		break;
779 	case MSC_EJECT_HUAWEI:
780 		err = bbb_command_start(sc, DIR_IN, 0, NULL, 0,
781 		    &scsi_huawei_eject, sizeof(scsi_huawei_eject),
782 		    USB_MS_HZ);
783 		break;
784 	case MSC_EJECT_TCT:
785 		/*
786 		 * TCTMobile needs DIR_IN flag. To get it, we
787 		 * supply a dummy data with the command.
788 		 */
789 		err = bbb_command_start(sc, DIR_IN, 0, &sc->buffer,
790 		    sizeof(sc->buffer), &scsi_tct_eject,
791 		    sizeof(scsi_tct_eject), USB_MS_HZ);
792 		break;
793 	default:
794 		printf("usb_msc_eject: unknown eject method (%d)\n", method);
795 		break;
796 	}
797 	DPRINTF("Eject CD command status: %s\n", usbd_errstr(err));
798 
799 	bbb_detach(sc);
800 	return (0);
801 }
802