1 /* 2 * ng_ubt.c 3 */ 4 5 /*- 6 * SPDX-License-Identifier: BSD-2-Clause-FreeBSD 7 * 8 * Copyright (c) 2001-2009 Maksim Yevmenkin <m_evmenkin@yahoo.com> 9 * All rights reserved. 10 * 11 * Redistribution and use in source and binary forms, with or without 12 * modification, are permitted provided that the following conditions 13 * are met: 14 * 1. Redistributions of source code must retain the above copyright 15 * notice, this list of conditions and the following disclaimer. 16 * 2. Redistributions in binary form must reproduce the above copyright 17 * notice, this list of conditions and the following disclaimer in the 18 * documentation and/or other materials provided with the distribution. 19 * 20 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 21 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 22 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 23 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 24 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 25 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 26 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 27 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 28 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 29 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 30 * SUCH DAMAGE. 31 * 32 * $Id: ng_ubt.c,v 1.16 2003/10/10 19:15:06 max Exp $ 33 * $FreeBSD$ 34 */ 35 36 /* 37 * NOTE: ng_ubt2 driver has a split personality. On one side it is 38 * a USB device driver and on the other it is a Netgraph node. This 39 * driver will *NOT* create traditional /dev/ enties, only Netgraph 40 * node. 41 * 42 * NOTE ON LOCKS USED: ng_ubt2 drives uses 2 locks (mutexes) 43 * 44 * 1) sc_if_mtx - lock for device's interface #0 and #1. This lock is used 45 * by USB for any USB request going over device's interface #0 and #1, 46 * i.e. interrupt, control, bulk and isoc. transfers. 47 * 48 * 2) sc_ng_mtx - this lock is used to protect shared (between USB, Netgraph 49 * and Taskqueue) data, such as outgoing mbuf queues, task flags and hook 50 * pointer. This lock *SHOULD NOT* be grabbed for a long time. In fact, 51 * think of it as a spin lock. 52 * 53 * NOTE ON LOCKING STRATEGY: ng_ubt2 driver operates in 3 different contexts. 54 * 55 * 1) USB context. This is where all the USB related stuff happens. All 56 * callbacks run in this context. All callbacks are called (by USB) with 57 * appropriate interface lock held. It is (generally) allowed to grab 58 * any additional locks. 59 * 60 * 2) Netgraph context. This is where all the Netgraph related stuff happens. 61 * Since we mark node as WRITER, the Netgraph node will be "locked" (from 62 * Netgraph point of view). Any variable that is only modified from the 63 * Netgraph context does not require any additional locking. It is generally 64 * *NOT* allowed to grab *ANY* additional locks. Whatever you do, *DO NOT* 65 * grab any lock in the Netgraph context that could cause de-scheduling of 66 * the Netgraph thread for significant amount of time. In fact, the only 67 * lock that is allowed in the Netgraph context is the sc_ng_mtx lock. 68 * Also make sure that any code that is called from the Netgraph context 69 * follows the rule above. 70 * 71 * 3) Taskqueue context. This is where ubt_task runs. Since we are generally 72 * NOT allowed to grab any lock that could cause de-scheduling in the 73 * Netgraph context, and, USB requires us to grab interface lock before 74 * doing things with transfers, it is safer to transition from the Netgraph 75 * context to the Taskqueue context before we can call into USB subsystem. 76 * 77 * So, to put everything together, the rules are as follows. 78 * It is OK to call from the USB context or the Taskqueue context into 79 * the Netgraph context (i.e. call NG_SEND_xxx functions). In other words 80 * it is allowed to call into the Netgraph context with locks held. 81 * Is it *NOT* OK to call from the Netgraph context into the USB context, 82 * because USB requires us to grab interface locks, and, it is safer to 83 * avoid it. So, to make things safer we set task flags to indicate which 84 * actions we want to perform and schedule ubt_task which would run in the 85 * Taskqueue context. 86 * Is is OK to call from the Taskqueue context into the USB context, 87 * and, ubt_task does just that (i.e. grabs appropriate interface locks 88 * before calling into USB). 89 * Access to the outgoing queues, task flags and hook pointer is 90 * controlled by the sc_ng_mtx lock. It is an unavoidable evil. Again, 91 * sc_ng_mtx should really be a spin lock (and it is very likely to an 92 * equivalent of spin lock due to adaptive nature of FreeBSD mutexes). 93 * All USB callbacks accept softc pointer as a private data. USB ensures 94 * that this pointer is valid. 95 */ 96 97 #include <sys/stdint.h> 98 #include <sys/stddef.h> 99 #include <sys/param.h> 100 #include <sys/queue.h> 101 #include <sys/types.h> 102 #include <sys/systm.h> 103 #include <sys/kernel.h> 104 #include <sys/bus.h> 105 #include <sys/module.h> 106 #include <sys/lock.h> 107 #include <sys/mutex.h> 108 #include <sys/condvar.h> 109 #include <sys/sysctl.h> 110 #include <sys/sx.h> 111 #include <sys/unistd.h> 112 #include <sys/callout.h> 113 #include <sys/malloc.h> 114 #include <sys/priv.h> 115 116 #include "usbdevs.h" 117 #include <dev/usb/usb.h> 118 #include <dev/usb/usbdi.h> 119 #include <dev/usb/usbdi_util.h> 120 121 #define USB_DEBUG_VAR usb_debug 122 #include <dev/usb/usb_debug.h> 123 #include <dev/usb/usb_busdma.h> 124 125 #include <sys/mbuf.h> 126 #include <sys/taskqueue.h> 127 128 #include <netgraph/ng_message.h> 129 #include <netgraph/netgraph.h> 130 #include <netgraph/ng_parse.h> 131 #include <netgraph/bluetooth/include/ng_bluetooth.h> 132 #include <netgraph/bluetooth/include/ng_hci.h> 133 #include <netgraph/bluetooth/include/ng_ubt.h> 134 #include <netgraph/bluetooth/drivers/ubt/ng_ubt_var.h> 135 136 static int ubt_modevent(module_t, int, void *); 137 static device_probe_t ubt_probe; 138 static device_attach_t ubt_attach; 139 static device_detach_t ubt_detach; 140 141 static void ubt_task_schedule(ubt_softc_p, int); 142 static task_fn_t ubt_task; 143 144 #define ubt_xfer_start(sc, i) usbd_transfer_start((sc)->sc_xfer[(i)]) 145 146 /* Netgraph methods */ 147 static ng_constructor_t ng_ubt_constructor; 148 static ng_shutdown_t ng_ubt_shutdown; 149 static ng_newhook_t ng_ubt_newhook; 150 static ng_connect_t ng_ubt_connect; 151 static ng_disconnect_t ng_ubt_disconnect; 152 static ng_rcvmsg_t ng_ubt_rcvmsg; 153 static ng_rcvdata_t ng_ubt_rcvdata; 154 155 static int ng_usb_isoc_enable = 1; 156 157 SYSCTL_INT(_net_bluetooth, OID_AUTO, usb_isoc_enable, CTLFLAG_RWTUN | CTLFLAG_MPSAFE, 158 &ng_usb_isoc_enable, 0, "enable isochronous transfers"); 159 160 /* Queue length */ 161 static const struct ng_parse_struct_field ng_ubt_node_qlen_type_fields[] = 162 { 163 { "queue", &ng_parse_int32_type, }, 164 { "qlen", &ng_parse_int32_type, }, 165 { NULL, } 166 }; 167 static const struct ng_parse_type ng_ubt_node_qlen_type = 168 { 169 &ng_parse_struct_type, 170 &ng_ubt_node_qlen_type_fields 171 }; 172 173 /* Stat info */ 174 static const struct ng_parse_struct_field ng_ubt_node_stat_type_fields[] = 175 { 176 { "pckts_recv", &ng_parse_uint32_type, }, 177 { "bytes_recv", &ng_parse_uint32_type, }, 178 { "pckts_sent", &ng_parse_uint32_type, }, 179 { "bytes_sent", &ng_parse_uint32_type, }, 180 { "oerrors", &ng_parse_uint32_type, }, 181 { "ierrors", &ng_parse_uint32_type, }, 182 { NULL, } 183 }; 184 static const struct ng_parse_type ng_ubt_node_stat_type = 185 { 186 &ng_parse_struct_type, 187 &ng_ubt_node_stat_type_fields 188 }; 189 190 /* Netgraph node command list */ 191 static const struct ng_cmdlist ng_ubt_cmdlist[] = 192 { 193 { 194 NGM_UBT_COOKIE, 195 NGM_UBT_NODE_SET_DEBUG, 196 "set_debug", 197 &ng_parse_uint16_type, 198 NULL 199 }, 200 { 201 NGM_UBT_COOKIE, 202 NGM_UBT_NODE_GET_DEBUG, 203 "get_debug", 204 NULL, 205 &ng_parse_uint16_type 206 }, 207 { 208 NGM_UBT_COOKIE, 209 NGM_UBT_NODE_SET_QLEN, 210 "set_qlen", 211 &ng_ubt_node_qlen_type, 212 NULL 213 }, 214 { 215 NGM_UBT_COOKIE, 216 NGM_UBT_NODE_GET_QLEN, 217 "get_qlen", 218 &ng_ubt_node_qlen_type, 219 &ng_ubt_node_qlen_type 220 }, 221 { 222 NGM_UBT_COOKIE, 223 NGM_UBT_NODE_GET_STAT, 224 "get_stat", 225 NULL, 226 &ng_ubt_node_stat_type 227 }, 228 { 229 NGM_UBT_COOKIE, 230 NGM_UBT_NODE_RESET_STAT, 231 "reset_stat", 232 NULL, 233 NULL 234 }, 235 { 0, } 236 }; 237 238 /* Netgraph node type */ 239 static struct ng_type typestruct = 240 { 241 .version = NG_ABI_VERSION, 242 .name = NG_UBT_NODE_TYPE, 243 .constructor = ng_ubt_constructor, 244 .rcvmsg = ng_ubt_rcvmsg, 245 .shutdown = ng_ubt_shutdown, 246 .newhook = ng_ubt_newhook, 247 .connect = ng_ubt_connect, 248 .rcvdata = ng_ubt_rcvdata, 249 .disconnect = ng_ubt_disconnect, 250 .cmdlist = ng_ubt_cmdlist 251 }; 252 253 /**************************************************************************** 254 **************************************************************************** 255 ** USB specific 256 **************************************************************************** 257 ****************************************************************************/ 258 259 /* USB methods */ 260 static usb_callback_t ubt_probe_intr_callback; 261 static usb_callback_t ubt_ctrl_write_callback; 262 static usb_callback_t ubt_intr_read_callback; 263 static usb_callback_t ubt_bulk_read_callback; 264 static usb_callback_t ubt_bulk_write_callback; 265 static usb_callback_t ubt_isoc_read_callback; 266 static usb_callback_t ubt_isoc_write_callback; 267 268 static int ubt_fwd_mbuf_up(ubt_softc_p, struct mbuf **); 269 static int ubt_isoc_read_one_frame(struct usb_xfer *, int); 270 271 /* 272 * USB config 273 * 274 * The following desribes usb transfers that could be submitted on USB device. 275 * 276 * Interface 0 on the USB device must present the following endpoints 277 * 1) Interrupt endpoint to receive HCI events 278 * 2) Bulk IN endpoint to receive ACL data 279 * 3) Bulk OUT endpoint to send ACL data 280 * 281 * Interface 1 on the USB device must present the following endpoints 282 * 1) Isochronous IN endpoint to receive SCO data 283 * 2) Isochronous OUT endpoint to send SCO data 284 */ 285 286 static const struct usb_config ubt_config[UBT_N_TRANSFER] = 287 { 288 /* 289 * Interface #0 290 */ 291 292 /* Outgoing bulk transfer - ACL packets */ 293 [UBT_IF_0_BULK_DT_WR] = { 294 .type = UE_BULK, 295 .endpoint = UE_ADDR_ANY, 296 .direction = UE_DIR_OUT, 297 .if_index = 0, 298 .bufsize = UBT_BULK_WRITE_BUFFER_SIZE, 299 .flags = { .pipe_bof = 1, .force_short_xfer = 1, }, 300 .callback = &ubt_bulk_write_callback, 301 }, 302 /* Incoming bulk transfer - ACL packets */ 303 [UBT_IF_0_BULK_DT_RD] = { 304 .type = UE_BULK, 305 .endpoint = UE_ADDR_ANY, 306 .direction = UE_DIR_IN, 307 .if_index = 0, 308 .bufsize = UBT_BULK_READ_BUFFER_SIZE, 309 .flags = { .pipe_bof = 1, .short_xfer_ok = 1, }, 310 .callback = &ubt_bulk_read_callback, 311 }, 312 /* Incoming interrupt transfer - HCI events */ 313 [UBT_IF_0_INTR_DT_RD] = { 314 .type = UE_INTERRUPT, 315 .endpoint = UE_ADDR_ANY, 316 .direction = UE_DIR_IN, 317 .if_index = 0, 318 .flags = { .pipe_bof = 1, .short_xfer_ok = 1, }, 319 .bufsize = UBT_INTR_BUFFER_SIZE, 320 .callback = &ubt_intr_read_callback, 321 }, 322 /* Outgoing control transfer - HCI commands */ 323 [UBT_IF_0_CTRL_DT_WR] = { 324 .type = UE_CONTROL, 325 .endpoint = 0x00, /* control pipe */ 326 .direction = UE_DIR_ANY, 327 .if_index = 0, 328 .bufsize = UBT_CTRL_BUFFER_SIZE, 329 .callback = &ubt_ctrl_write_callback, 330 .timeout = 5000, /* 5 seconds */ 331 }, 332 333 /* 334 * Interface #1 335 */ 336 337 /* Incoming isochronous transfer #1 - SCO packets */ 338 [UBT_IF_1_ISOC_DT_RD1] = { 339 .type = UE_ISOCHRONOUS, 340 .endpoint = UE_ADDR_ANY, 341 .direction = UE_DIR_IN, 342 .if_index = 1, 343 .bufsize = 0, /* use "wMaxPacketSize * frames" */ 344 .frames = UBT_ISOC_NFRAMES, 345 .flags = { .short_xfer_ok = 1, }, 346 .callback = &ubt_isoc_read_callback, 347 }, 348 /* Incoming isochronous transfer #2 - SCO packets */ 349 [UBT_IF_1_ISOC_DT_RD2] = { 350 .type = UE_ISOCHRONOUS, 351 .endpoint = UE_ADDR_ANY, 352 .direction = UE_DIR_IN, 353 .if_index = 1, 354 .bufsize = 0, /* use "wMaxPacketSize * frames" */ 355 .frames = UBT_ISOC_NFRAMES, 356 .flags = { .short_xfer_ok = 1, }, 357 .callback = &ubt_isoc_read_callback, 358 }, 359 /* Outgoing isochronous transfer #1 - SCO packets */ 360 [UBT_IF_1_ISOC_DT_WR1] = { 361 .type = UE_ISOCHRONOUS, 362 .endpoint = UE_ADDR_ANY, 363 .direction = UE_DIR_OUT, 364 .if_index = 1, 365 .bufsize = 0, /* use "wMaxPacketSize * frames" */ 366 .frames = UBT_ISOC_NFRAMES, 367 .flags = { .short_xfer_ok = 1, }, 368 .callback = &ubt_isoc_write_callback, 369 }, 370 /* Outgoing isochronous transfer #2 - SCO packets */ 371 [UBT_IF_1_ISOC_DT_WR2] = { 372 .type = UE_ISOCHRONOUS, 373 .endpoint = UE_ADDR_ANY, 374 .direction = UE_DIR_OUT, 375 .if_index = 1, 376 .bufsize = 0, /* use "wMaxPacketSize * frames" */ 377 .frames = UBT_ISOC_NFRAMES, 378 .flags = { .short_xfer_ok = 1, }, 379 .callback = &ubt_isoc_write_callback, 380 }, 381 }; 382 383 /* 384 * If for some reason device should not be attached then put 385 * VendorID/ProductID pair into the list below. The format is 386 * as follows: 387 * 388 * { USB_VPI(VENDOR_ID, PRODUCT_ID, 0) }, 389 * 390 * where VENDOR_ID and PRODUCT_ID are hex numbers. 391 */ 392 393 static const STRUCT_USB_HOST_ID ubt_ignore_devs[] = 394 { 395 /* AVM USB Bluetooth-Adapter BlueFritz! v1.0 */ 396 { USB_VPI(USB_VENDOR_AVM, 0x2200, 0) }, 397 398 /* Atheros 3011 with sflash firmware */ 399 { USB_VPI(0x0cf3, 0x3002, 0) }, 400 { USB_VPI(0x0cf3, 0xe019, 0) }, 401 { USB_VPI(0x13d3, 0x3304, 0) }, 402 { USB_VPI(0x0930, 0x0215, 0) }, 403 { USB_VPI(0x0489, 0xe03d, 0) }, 404 { USB_VPI(0x0489, 0xe027, 0) }, 405 406 /* Atheros AR9285 Malbec with sflash firmware */ 407 { USB_VPI(0x03f0, 0x311d, 0) }, 408 409 /* Atheros 3012 with sflash firmware */ 410 { USB_VPI(0x0cf3, 0x3004, 0), USB_DEV_BCD_LTEQ(1) }, 411 { USB_VPI(0x0cf3, 0x311d, 0), USB_DEV_BCD_LTEQ(1) }, 412 { USB_VPI(0x13d3, 0x3375, 0), USB_DEV_BCD_LTEQ(1) }, 413 { USB_VPI(0x04ca, 0x3005, 0), USB_DEV_BCD_LTEQ(1) }, 414 { USB_VPI(0x04ca, 0x3006, 0), USB_DEV_BCD_LTEQ(1) }, 415 { USB_VPI(0x04ca, 0x3008, 0), USB_DEV_BCD_LTEQ(1) }, 416 { USB_VPI(0x13d3, 0x3362, 0), USB_DEV_BCD_LTEQ(1) }, 417 { USB_VPI(0x0cf3, 0xe004, 0), USB_DEV_BCD_LTEQ(1) }, 418 { USB_VPI(0x0930, 0x0219, 0), USB_DEV_BCD_LTEQ(1) }, 419 { USB_VPI(0x0489, 0xe057, 0), USB_DEV_BCD_LTEQ(1) }, 420 { USB_VPI(0x13d3, 0x3393, 0), USB_DEV_BCD_LTEQ(1) }, 421 { USB_VPI(0x0489, 0xe04e, 0), USB_DEV_BCD_LTEQ(1) }, 422 { USB_VPI(0x0489, 0xe056, 0), USB_DEV_BCD_LTEQ(1) }, 423 424 /* Atheros AR5BBU12 with sflash firmware */ 425 { USB_VPI(0x0489, 0xe02c, 0), USB_DEV_BCD_LTEQ(1) }, 426 427 /* Atheros AR5BBU12 with sflash firmware */ 428 { USB_VPI(0x0489, 0xe03c, 0), USB_DEV_BCD_LTEQ(1) }, 429 { USB_VPI(0x0489, 0xe036, 0), USB_DEV_BCD_LTEQ(1) }, 430 431 /* Intel Wireless controllers are handled in ng_ubt_intel.c */ 432 { USB_VPI(USB_VENDOR_INTEL2, 0x07dc, 0) }, 433 { USB_VPI(USB_VENDOR_INTEL2, 0x0a2a, 0) }, 434 { USB_VPI(USB_VENDOR_INTEL2, 0x0aa7, 0) }, 435 { USB_VPI(USB_VENDOR_INTEL2, 0x0a2b, 0) }, 436 { USB_VPI(USB_VENDOR_INTEL2, 0x0aaa, 0) }, 437 { USB_VPI(USB_VENDOR_INTEL2, 0x0025, 0) }, 438 { USB_VPI(USB_VENDOR_INTEL2, 0x0026, 0) }, 439 { USB_VPI(USB_VENDOR_INTEL2, 0x0029, 0) }, 440 441 /* 442 * Some Intel controllers are not yet supported by ng_ubt_intel and 443 * should be ignored. 444 */ 445 { USB_VPI(USB_VENDOR_INTEL2, 0x0032, 0) }, 446 { USB_VPI(USB_VENDOR_INTEL2, 0x0033, 0) }, 447 }; 448 449 /* List of supported bluetooth devices */ 450 static const STRUCT_USB_HOST_ID ubt_devs[] = 451 { 452 /* Generic Bluetooth class devices */ 453 { USB_IFACE_CLASS(UDCLASS_WIRELESS), 454 USB_IFACE_SUBCLASS(UDSUBCLASS_RF), 455 USB_IFACE_PROTOCOL(UDPROTO_BLUETOOTH) }, 456 457 /* AVM USB Bluetooth-Adapter BlueFritz! v2.0 */ 458 { USB_VPI(USB_VENDOR_AVM, 0x3800, 0) }, 459 460 /* Broadcom USB dongles, mostly BCM20702 and BCM20702A0 */ 461 { USB_VENDOR(USB_VENDOR_BROADCOM), 462 USB_IFACE_CLASS(UICLASS_VENDOR), 463 USB_IFACE_SUBCLASS(UDSUBCLASS_RF), 464 USB_IFACE_PROTOCOL(UDPROTO_BLUETOOTH) }, 465 466 /* Apple-specific (Broadcom) devices */ 467 { USB_VENDOR(USB_VENDOR_APPLE), 468 USB_IFACE_CLASS(UICLASS_VENDOR), 469 USB_IFACE_SUBCLASS(UDSUBCLASS_RF), 470 USB_IFACE_PROTOCOL(UDPROTO_BLUETOOTH) }, 471 472 /* Foxconn - Hon Hai */ 473 { USB_VENDOR(USB_VENDOR_FOXCONN), 474 USB_IFACE_CLASS(UICLASS_VENDOR), 475 USB_IFACE_SUBCLASS(UDSUBCLASS_RF), 476 USB_IFACE_PROTOCOL(UDPROTO_BLUETOOTH) }, 477 478 /* MediaTek MT76x0E */ 479 { USB_VPI(USB_VENDOR_MEDIATEK, 0x763f, 0) }, 480 481 /* Broadcom SoftSailing reporting vendor specific */ 482 { USB_VPI(USB_VENDOR_BROADCOM, 0x21e1, 0) }, 483 484 /* Apple MacBookPro 7,1 */ 485 { USB_VPI(USB_VENDOR_APPLE, 0x8213, 0) }, 486 487 /* Apple iMac11,1 */ 488 { USB_VPI(USB_VENDOR_APPLE, 0x8215, 0) }, 489 490 /* Apple MacBookPro6,2 */ 491 { USB_VPI(USB_VENDOR_APPLE, 0x8218, 0) }, 492 493 /* Apple MacBookAir3,1, MacBookAir3,2 */ 494 { USB_VPI(USB_VENDOR_APPLE, 0x821b, 0) }, 495 496 /* Apple MacBookAir4,1 */ 497 { USB_VPI(USB_VENDOR_APPLE, 0x821f, 0) }, 498 499 /* MacBookAir6,1 */ 500 { USB_VPI(USB_VENDOR_APPLE, 0x828f, 0) }, 501 502 /* Apple MacBookPro8,2 */ 503 { USB_VPI(USB_VENDOR_APPLE, 0x821a, 0) }, 504 505 /* Apple MacMini5,1 */ 506 { USB_VPI(USB_VENDOR_APPLE, 0x8281, 0) }, 507 508 /* Bluetooth Ultraport Module from IBM */ 509 { USB_VPI(USB_VENDOR_TDK, 0x030a, 0) }, 510 511 /* ALPS Modules with non-standard ID */ 512 { USB_VPI(USB_VENDOR_ALPS, 0x3001, 0) }, 513 { USB_VPI(USB_VENDOR_ALPS, 0x3002, 0) }, 514 515 { USB_VPI(USB_VENDOR_ERICSSON2, 0x1002, 0) }, 516 517 /* Canyon CN-BTU1 with HID interfaces */ 518 { USB_VPI(USB_VENDOR_CANYON, 0x0000, 0) }, 519 520 /* Broadcom BCM20702A0 */ 521 { USB_VPI(USB_VENDOR_ASUS, 0x17b5, 0) }, 522 { USB_VPI(USB_VENDOR_ASUS, 0x17cb, 0) }, 523 { USB_VPI(USB_VENDOR_LITEON, 0x2003, 0) }, 524 { USB_VPI(USB_VENDOR_FOXCONN, 0xe042, 0) }, 525 { USB_VPI(USB_VENDOR_DELL, 0x8197, 0) }, 526 { USB_VPI(USB_VENDOR_BELKIN, 0x065a, 0) }, 527 }; 528 529 /* 530 * Does a synchronous (waits for completion event) execution of HCI command. 531 * Size of both command and response buffers are passed in length field of 532 * corresponding structures in "Parameter Total Length" format i.e. 533 * not including HCI packet headers. 534 * 535 * Must not be used after USB transfers have been configured in attach routine. 536 */ 537 538 usb_error_t 539 ubt_do_hci_request(struct usb_device *udev, struct ubt_hci_cmd *cmd, 540 void *evt, usb_timeout_t timeout) 541 { 542 static const struct usb_config ubt_probe_config = { 543 .type = UE_INTERRUPT, 544 .endpoint = UE_ADDR_ANY, 545 .direction = UE_DIR_IN, 546 .flags = { .pipe_bof = 1, .short_xfer_ok = 1 }, 547 .bufsize = UBT_INTR_BUFFER_SIZE, 548 .callback = &ubt_probe_intr_callback, 549 }; 550 struct usb_device_request req; 551 struct usb_xfer *xfer[1]; 552 struct mtx mtx; 553 usb_error_t error = USB_ERR_NORMAL_COMPLETION; 554 uint8_t iface_index = 0; 555 556 /* Initialize a USB control request and then do it */ 557 bzero(&req, sizeof(req)); 558 req.bmRequestType = UBT_HCI_REQUEST; 559 req.wIndex[0] = iface_index; 560 USETW(req.wLength, UBT_HCI_CMD_SIZE(cmd)); 561 562 error = usbd_do_request(udev, NULL, &req, cmd); 563 if (error != USB_ERR_NORMAL_COMPLETION) { 564 printf("ng_ubt: usbd_do_request error=%s\n", 565 usbd_errstr(error)); 566 return (error); 567 } 568 569 if (evt == NULL) 570 return (USB_ERR_NORMAL_COMPLETION); 571 572 /* Initialize INTR endpoint xfer and wait for response */ 573 mtx_init(&mtx, "ubt pb", NULL, MTX_DEF | MTX_NEW); 574 575 error = usbd_transfer_setup(udev, &iface_index, xfer, 576 &ubt_probe_config, 1, evt, &mtx); 577 if (error == USB_ERR_NORMAL_COMPLETION) { 578 mtx_lock(&mtx); 579 usbd_transfer_start(*xfer); 580 581 if (msleep_sbt(evt, &mtx, 0, "ubt pb", SBT_1MS * timeout, 582 0, C_HARDCLOCK) == EWOULDBLOCK) { 583 printf("ng_ubt: HCI command 0x%04x timed out\n", 584 le16toh(cmd->opcode)); 585 error = USB_ERR_TIMEOUT; 586 } 587 588 usbd_transfer_stop(*xfer); 589 mtx_unlock(&mtx); 590 591 usbd_transfer_unsetup(xfer, 1); 592 } else 593 printf("ng_ubt: usbd_transfer_setup error=%s\n", 594 usbd_errstr(error)); 595 596 mtx_destroy(&mtx); 597 598 return (error); 599 } 600 601 /* 602 * Probe for a USB Bluetooth device. 603 * USB context. 604 */ 605 606 static int 607 ubt_probe(device_t dev) 608 { 609 struct usb_attach_arg *uaa = device_get_ivars(dev); 610 const struct usb_device_id *id; 611 612 if (uaa->usb_mode != USB_MODE_HOST) 613 return (ENXIO); 614 615 if (usbd_lookup_id_by_uaa(ubt_ignore_devs, 616 sizeof(ubt_ignore_devs), uaa) == 0) 617 return (ENXIO); 618 619 id = usbd_lookup_id_by_info(ubt_devs, 620 sizeof(ubt_devs), &uaa->info); 621 if (id == NULL) 622 return (ENXIO); 623 624 if (uaa->info.bIfaceIndex != 0) { 625 /* make sure we are matching the interface */ 626 if (id->match_flag_int_class && 627 id->match_flag_int_subclass && 628 id->match_flag_int_protocol) 629 return (BUS_PROBE_GENERIC); 630 else 631 return (ENXIO); 632 } else { 633 return (BUS_PROBE_GENERIC); 634 } 635 } /* ubt_probe */ 636 637 /* 638 * Attach the device. 639 * USB context. 640 */ 641 642 static int 643 ubt_attach(device_t dev) 644 { 645 struct usb_attach_arg *uaa = device_get_ivars(dev); 646 struct ubt_softc *sc = device_get_softc(dev); 647 struct usb_endpoint_descriptor *ed; 648 struct usb_interface_descriptor *id; 649 struct usb_interface *iface[2]; 650 uint32_t wMaxPacketSize; 651 uint8_t alt_index, i, j; 652 uint8_t iface_index[2]; 653 654 device_set_usb_desc(dev); 655 656 iface_index[0] = uaa->info.bIfaceIndex; 657 iface_index[1] = uaa->info.bIfaceIndex + 1; 658 659 iface[0] = usbd_get_iface(uaa->device, iface_index[0]); 660 iface[1] = usbd_get_iface(uaa->device, iface_index[1]); 661 662 sc->sc_dev = dev; 663 sc->sc_debug = NG_UBT_WARN_LEVEL; 664 665 /* 666 * Sanity checks. 667 */ 668 669 if (iface[0] == NULL || iface[1] == NULL || 670 iface[0]->idesc == NULL || iface[1]->idesc == NULL) { 671 UBT_ALERT(sc, "could not get two interfaces\n"); 672 return (ENXIO); 673 } 674 675 /* 676 * Create Netgraph node 677 */ 678 679 if (ng_make_node_common(&typestruct, &sc->sc_node) != 0) { 680 UBT_ALERT(sc, "could not create Netgraph node\n"); 681 return (ENXIO); 682 } 683 684 /* Name Netgraph node */ 685 if (ng_name_node(sc->sc_node, device_get_nameunit(dev)) != 0) { 686 UBT_ALERT(sc, "could not name Netgraph node\n"); 687 NG_NODE_UNREF(sc->sc_node); 688 return (ENXIO); 689 } 690 NG_NODE_SET_PRIVATE(sc->sc_node, sc); 691 NG_NODE_FORCE_WRITER(sc->sc_node); 692 693 /* 694 * Initialize device softc structure 695 */ 696 697 /* initialize locks */ 698 mtx_init(&sc->sc_ng_mtx, "ubt ng", NULL, MTX_DEF); 699 mtx_init(&sc->sc_if_mtx, "ubt if", NULL, MTX_DEF | MTX_RECURSE); 700 701 /* initialize packet queues */ 702 NG_BT_MBUFQ_INIT(&sc->sc_cmdq, UBT_DEFAULT_QLEN); 703 NG_BT_MBUFQ_INIT(&sc->sc_aclq, UBT_DEFAULT_QLEN); 704 NG_BT_MBUFQ_INIT(&sc->sc_scoq, UBT_DEFAULT_QLEN); 705 706 /* initialize glue task */ 707 TASK_INIT(&sc->sc_task, 0, ubt_task, sc); 708 709 /* 710 * Configure Bluetooth USB device. Discover all required USB 711 * interfaces and endpoints. 712 * 713 * USB device must present two interfaces: 714 * 1) Interface 0 that has 3 endpoints 715 * 1) Interrupt endpoint to receive HCI events 716 * 2) Bulk IN endpoint to receive ACL data 717 * 3) Bulk OUT endpoint to send ACL data 718 * 719 * 2) Interface 1 then has 2 endpoints 720 * 1) Isochronous IN endpoint to receive SCO data 721 * 2) Isochronous OUT endpoint to send SCO data 722 * 723 * Interface 1 (with isochronous endpoints) has several alternate 724 * configurations with different packet size. 725 */ 726 727 /* 728 * For interface #1 search alternate settings, and find 729 * the descriptor with the largest wMaxPacketSize 730 */ 731 732 wMaxPacketSize = 0; 733 alt_index = 0; 734 i = 0; 735 j = 0; 736 ed = NULL; 737 738 /* 739 * Search through all the descriptors looking for the largest 740 * packet size: 741 */ 742 while ((ed = (struct usb_endpoint_descriptor *)usb_desc_foreach( 743 usbd_get_config_descriptor(uaa->device), 744 (struct usb_descriptor *)ed))) { 745 if ((ed->bDescriptorType == UDESC_INTERFACE) && 746 (ed->bLength >= sizeof(*id))) { 747 id = (struct usb_interface_descriptor *)ed; 748 i = (id->bInterfaceNumber == iface[1]->idesc->bInterfaceNumber); 749 j = id->bAlternateSetting; 750 } 751 752 if ((ed->bDescriptorType == UDESC_ENDPOINT) && 753 (ed->bLength >= sizeof(*ed)) && 754 (i != 0)) { 755 uint32_t temp; 756 757 temp = usbd_get_max_frame_length( 758 ed, NULL, usbd_get_speed(uaa->device)); 759 if (temp > wMaxPacketSize) { 760 wMaxPacketSize = temp; 761 alt_index = j; 762 } 763 } 764 } 765 766 /* Set alt configuration on interface #1 only if we found it */ 767 if (wMaxPacketSize > 0 && 768 usbd_set_alt_interface_index(uaa->device, iface_index[1], alt_index)) { 769 UBT_ALERT(sc, "could not set alternate setting %d " \ 770 "for interface 1!\n", alt_index); 771 goto detach; 772 } 773 774 /* Setup transfers for both interfaces */ 775 if (usbd_transfer_setup(uaa->device, iface_index, sc->sc_xfer, ubt_config, 776 ng_usb_isoc_enable ? UBT_N_TRANSFER : UBT_IF_1_ISOC_DT_RD1, 777 sc, &sc->sc_if_mtx)) { 778 UBT_ALERT(sc, "could not allocate transfers\n"); 779 goto detach; 780 } 781 782 /* Claim second interface belonging to the Bluetooth part */ 783 usbd_set_parent_iface(uaa->device, iface_index[1], uaa->info.bIfaceIndex); 784 785 return (0); /* success */ 786 787 detach: 788 ubt_detach(dev); 789 790 return (ENXIO); 791 } /* ubt_attach */ 792 793 /* 794 * Detach the device. 795 * USB context. 796 */ 797 798 int 799 ubt_detach(device_t dev) 800 { 801 struct ubt_softc *sc = device_get_softc(dev); 802 node_p node = sc->sc_node; 803 804 /* Destroy Netgraph node */ 805 if (node != NULL) { 806 sc->sc_node = NULL; 807 NG_NODE_REALLY_DIE(node); 808 ng_rmnode_self(node); 809 } 810 811 /* Make sure ubt_task in gone */ 812 taskqueue_drain(taskqueue_swi, &sc->sc_task); 813 814 /* Free USB transfers, if any */ 815 usbd_transfer_unsetup(sc->sc_xfer, UBT_N_TRANSFER); 816 817 /* Destroy queues */ 818 UBT_NG_LOCK(sc); 819 NG_BT_MBUFQ_DESTROY(&sc->sc_cmdq); 820 NG_BT_MBUFQ_DESTROY(&sc->sc_aclq); 821 NG_BT_MBUFQ_DESTROY(&sc->sc_scoq); 822 UBT_NG_UNLOCK(sc); 823 824 mtx_destroy(&sc->sc_if_mtx); 825 mtx_destroy(&sc->sc_ng_mtx); 826 827 return (0); 828 } /* ubt_detach */ 829 830 /* 831 * Called when incoming interrupt transfer (HCI event) has completed, i.e. 832 * HCI event was received from the device during device probe stage. 833 * USB context. 834 */ 835 836 static void 837 ubt_probe_intr_callback(struct usb_xfer *xfer, usb_error_t error) 838 { 839 struct ubt_hci_event *evt = usbd_xfer_softc(xfer); 840 struct usb_page_cache *pc; 841 int actlen; 842 843 usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL); 844 845 switch (USB_GET_STATE(xfer)) { 846 case USB_ST_TRANSFERRED: 847 if (actlen > UBT_HCI_EVENT_SIZE(evt)) 848 actlen = UBT_HCI_EVENT_SIZE(evt); 849 pc = usbd_xfer_get_frame(xfer, 0); 850 usbd_copy_out(pc, 0, evt, actlen); 851 /* OneShot mode */ 852 wakeup(evt); 853 break; 854 855 case USB_ST_SETUP: 856 submit_next: 857 usbd_xfer_set_frame_len(xfer, 0, usbd_xfer_max_len(xfer)); 858 usbd_transfer_submit(xfer); 859 break; 860 861 default: 862 if (error != USB_ERR_CANCELLED) { 863 printf("ng_ubt: interrupt transfer failed: %s\n", 864 usbd_errstr(error)); 865 /* Try clear stall first */ 866 usbd_xfer_set_stall(xfer); 867 goto submit_next; 868 } 869 break; 870 } 871 } /* ubt_probe_intr_callback */ 872 873 /* 874 * Called when outgoing control request (HCI command) has completed, i.e. 875 * HCI command was sent to the device. 876 * USB context. 877 */ 878 879 static void 880 ubt_ctrl_write_callback(struct usb_xfer *xfer, usb_error_t error) 881 { 882 struct ubt_softc *sc = usbd_xfer_softc(xfer); 883 struct usb_device_request req; 884 struct mbuf *m; 885 struct usb_page_cache *pc; 886 int actlen; 887 888 usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL); 889 890 switch (USB_GET_STATE(xfer)) { 891 case USB_ST_TRANSFERRED: 892 UBT_INFO(sc, "sent %d bytes to control pipe\n", actlen); 893 UBT_STAT_BYTES_SENT(sc, actlen); 894 UBT_STAT_PCKTS_SENT(sc); 895 /* FALLTHROUGH */ 896 897 case USB_ST_SETUP: 898 send_next: 899 /* Get next command mbuf, if any */ 900 UBT_NG_LOCK(sc); 901 NG_BT_MBUFQ_DEQUEUE(&sc->sc_cmdq, m); 902 UBT_NG_UNLOCK(sc); 903 904 if (m == NULL) { 905 UBT_INFO(sc, "HCI command queue is empty\n"); 906 break; /* transfer complete */ 907 } 908 909 /* Initialize a USB control request and then schedule it */ 910 bzero(&req, sizeof(req)); 911 req.bmRequestType = UBT_HCI_REQUEST; 912 USETW(req.wLength, m->m_pkthdr.len); 913 914 UBT_INFO(sc, "Sending control request, " \ 915 "bmRequestType=0x%02x, wLength=%d\n", 916 req.bmRequestType, UGETW(req.wLength)); 917 918 pc = usbd_xfer_get_frame(xfer, 0); 919 usbd_copy_in(pc, 0, &req, sizeof(req)); 920 pc = usbd_xfer_get_frame(xfer, 1); 921 usbd_m_copy_in(pc, 0, m, 0, m->m_pkthdr.len); 922 923 usbd_xfer_set_frame_len(xfer, 0, sizeof(req)); 924 usbd_xfer_set_frame_len(xfer, 1, m->m_pkthdr.len); 925 usbd_xfer_set_frames(xfer, 2); 926 927 NG_FREE_M(m); 928 929 usbd_transfer_submit(xfer); 930 break; 931 932 default: /* Error */ 933 if (error != USB_ERR_CANCELLED) { 934 UBT_WARN(sc, "control transfer failed: %s\n", 935 usbd_errstr(error)); 936 937 UBT_STAT_OERROR(sc); 938 goto send_next; 939 } 940 941 /* transfer cancelled */ 942 break; 943 } 944 } /* ubt_ctrl_write_callback */ 945 946 /* 947 * Called when incoming interrupt transfer (HCI event) has completed, i.e. 948 * HCI event was received from the device. 949 * USB context. 950 */ 951 952 static void 953 ubt_intr_read_callback(struct usb_xfer *xfer, usb_error_t error) 954 { 955 struct ubt_softc *sc = usbd_xfer_softc(xfer); 956 struct mbuf *m; 957 ng_hci_event_pkt_t *hdr; 958 struct usb_page_cache *pc; 959 int actlen; 960 961 usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL); 962 963 m = NULL; 964 965 switch (USB_GET_STATE(xfer)) { 966 case USB_ST_TRANSFERRED: 967 /* Allocate a new mbuf */ 968 MGETHDR(m, M_NOWAIT, MT_DATA); 969 if (m == NULL) { 970 UBT_STAT_IERROR(sc); 971 goto submit_next; 972 } 973 974 if (!(MCLGET(m, M_NOWAIT))) { 975 UBT_STAT_IERROR(sc); 976 goto submit_next; 977 } 978 979 /* Add HCI packet type */ 980 *mtod(m, uint8_t *)= NG_HCI_EVENT_PKT; 981 m->m_pkthdr.len = m->m_len = 1; 982 983 if (actlen > MCLBYTES - 1) 984 actlen = MCLBYTES - 1; 985 986 pc = usbd_xfer_get_frame(xfer, 0); 987 usbd_copy_out(pc, 0, mtod(m, uint8_t *) + 1, actlen); 988 m->m_pkthdr.len += actlen; 989 m->m_len += actlen; 990 991 UBT_INFO(sc, "got %d bytes from interrupt pipe\n", 992 actlen); 993 994 /* Validate packet and send it up the stack */ 995 if (m->m_pkthdr.len < (int)sizeof(*hdr)) { 996 UBT_INFO(sc, "HCI event packet is too short\n"); 997 998 UBT_STAT_IERROR(sc); 999 goto submit_next; 1000 } 1001 1002 hdr = mtod(m, ng_hci_event_pkt_t *); 1003 if (hdr->length != (m->m_pkthdr.len - sizeof(*hdr))) { 1004 UBT_ERR(sc, "Invalid HCI event packet size, " \ 1005 "length=%d, pktlen=%d\n", 1006 hdr->length, m->m_pkthdr.len); 1007 1008 UBT_STAT_IERROR(sc); 1009 goto submit_next; 1010 } 1011 1012 UBT_INFO(sc, "got complete HCI event frame, pktlen=%d, " \ 1013 "length=%d\n", m->m_pkthdr.len, hdr->length); 1014 1015 UBT_STAT_PCKTS_RECV(sc); 1016 UBT_STAT_BYTES_RECV(sc, m->m_pkthdr.len); 1017 1018 ubt_fwd_mbuf_up(sc, &m); 1019 /* m == NULL at this point */ 1020 /* FALLTHROUGH */ 1021 1022 case USB_ST_SETUP: 1023 submit_next: 1024 NG_FREE_M(m); /* checks for m != NULL */ 1025 1026 usbd_xfer_set_frame_len(xfer, 0, usbd_xfer_max_len(xfer)); 1027 usbd_transfer_submit(xfer); 1028 break; 1029 1030 default: /* Error */ 1031 if (error != USB_ERR_CANCELLED) { 1032 UBT_WARN(sc, "interrupt transfer failed: %s\n", 1033 usbd_errstr(error)); 1034 1035 /* Try to clear stall first */ 1036 usbd_xfer_set_stall(xfer); 1037 goto submit_next; 1038 } 1039 /* transfer cancelled */ 1040 break; 1041 } 1042 } /* ubt_intr_read_callback */ 1043 1044 /* 1045 * Called when incoming bulk transfer (ACL packet) has completed, i.e. 1046 * ACL packet was received from the device. 1047 * USB context. 1048 */ 1049 1050 static void 1051 ubt_bulk_read_callback(struct usb_xfer *xfer, usb_error_t error) 1052 { 1053 struct ubt_softc *sc = usbd_xfer_softc(xfer); 1054 struct mbuf *m; 1055 ng_hci_acldata_pkt_t *hdr; 1056 struct usb_page_cache *pc; 1057 int len; 1058 int actlen; 1059 1060 usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL); 1061 1062 m = NULL; 1063 1064 switch (USB_GET_STATE(xfer)) { 1065 case USB_ST_TRANSFERRED: 1066 /* Allocate new mbuf */ 1067 MGETHDR(m, M_NOWAIT, MT_DATA); 1068 if (m == NULL) { 1069 UBT_STAT_IERROR(sc); 1070 goto submit_next; 1071 } 1072 1073 if (!(MCLGET(m, M_NOWAIT))) { 1074 UBT_STAT_IERROR(sc); 1075 goto submit_next; 1076 } 1077 1078 /* Add HCI packet type */ 1079 *mtod(m, uint8_t *)= NG_HCI_ACL_DATA_PKT; 1080 m->m_pkthdr.len = m->m_len = 1; 1081 1082 if (actlen > MCLBYTES - 1) 1083 actlen = MCLBYTES - 1; 1084 1085 pc = usbd_xfer_get_frame(xfer, 0); 1086 usbd_copy_out(pc, 0, mtod(m, uint8_t *) + 1, actlen); 1087 m->m_pkthdr.len += actlen; 1088 m->m_len += actlen; 1089 1090 UBT_INFO(sc, "got %d bytes from bulk-in pipe\n", 1091 actlen); 1092 1093 /* Validate packet and send it up the stack */ 1094 if (m->m_pkthdr.len < (int)sizeof(*hdr)) { 1095 UBT_INFO(sc, "HCI ACL packet is too short\n"); 1096 1097 UBT_STAT_IERROR(sc); 1098 goto submit_next; 1099 } 1100 1101 hdr = mtod(m, ng_hci_acldata_pkt_t *); 1102 len = le16toh(hdr->length); 1103 if (len != (int)(m->m_pkthdr.len - sizeof(*hdr))) { 1104 UBT_ERR(sc, "Invalid ACL packet size, length=%d, " \ 1105 "pktlen=%d\n", len, m->m_pkthdr.len); 1106 1107 UBT_STAT_IERROR(sc); 1108 goto submit_next; 1109 } 1110 1111 UBT_INFO(sc, "got complete ACL data packet, pktlen=%d, " \ 1112 "length=%d\n", m->m_pkthdr.len, len); 1113 1114 UBT_STAT_PCKTS_RECV(sc); 1115 UBT_STAT_BYTES_RECV(sc, m->m_pkthdr.len); 1116 1117 ubt_fwd_mbuf_up(sc, &m); 1118 /* m == NULL at this point */ 1119 /* FALLTHOUGH */ 1120 1121 case USB_ST_SETUP: 1122 submit_next: 1123 NG_FREE_M(m); /* checks for m != NULL */ 1124 1125 usbd_xfer_set_frame_len(xfer, 0, usbd_xfer_max_len(xfer)); 1126 usbd_transfer_submit(xfer); 1127 break; 1128 1129 default: /* Error */ 1130 if (error != USB_ERR_CANCELLED) { 1131 UBT_WARN(sc, "bulk-in transfer failed: %s\n", 1132 usbd_errstr(error)); 1133 1134 /* Try to clear stall first */ 1135 usbd_xfer_set_stall(xfer); 1136 goto submit_next; 1137 } 1138 /* transfer cancelled */ 1139 break; 1140 } 1141 } /* ubt_bulk_read_callback */ 1142 1143 /* 1144 * Called when outgoing bulk transfer (ACL packet) has completed, i.e. 1145 * ACL packet was sent to the device. 1146 * USB context. 1147 */ 1148 1149 static void 1150 ubt_bulk_write_callback(struct usb_xfer *xfer, usb_error_t error) 1151 { 1152 struct ubt_softc *sc = usbd_xfer_softc(xfer); 1153 struct mbuf *m; 1154 struct usb_page_cache *pc; 1155 int actlen; 1156 1157 usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL); 1158 1159 switch (USB_GET_STATE(xfer)) { 1160 case USB_ST_TRANSFERRED: 1161 UBT_INFO(sc, "sent %d bytes to bulk-out pipe\n", actlen); 1162 UBT_STAT_BYTES_SENT(sc, actlen); 1163 UBT_STAT_PCKTS_SENT(sc); 1164 /* FALLTHROUGH */ 1165 1166 case USB_ST_SETUP: 1167 send_next: 1168 /* Get next mbuf, if any */ 1169 UBT_NG_LOCK(sc); 1170 NG_BT_MBUFQ_DEQUEUE(&sc->sc_aclq, m); 1171 UBT_NG_UNLOCK(sc); 1172 1173 if (m == NULL) { 1174 UBT_INFO(sc, "ACL data queue is empty\n"); 1175 break; /* transfer completed */ 1176 } 1177 1178 /* 1179 * Copy ACL data frame back to a linear USB transfer buffer 1180 * and schedule transfer 1181 */ 1182 1183 pc = usbd_xfer_get_frame(xfer, 0); 1184 usbd_m_copy_in(pc, 0, m, 0, m->m_pkthdr.len); 1185 usbd_xfer_set_frame_len(xfer, 0, m->m_pkthdr.len); 1186 1187 UBT_INFO(sc, "bulk-out transfer has been started, len=%d\n", 1188 m->m_pkthdr.len); 1189 1190 NG_FREE_M(m); 1191 1192 usbd_transfer_submit(xfer); 1193 break; 1194 1195 default: /* Error */ 1196 if (error != USB_ERR_CANCELLED) { 1197 UBT_WARN(sc, "bulk-out transfer failed: %s\n", 1198 usbd_errstr(error)); 1199 1200 UBT_STAT_OERROR(sc); 1201 1202 /* try to clear stall first */ 1203 usbd_xfer_set_stall(xfer); 1204 goto send_next; 1205 } 1206 /* transfer cancelled */ 1207 break; 1208 } 1209 } /* ubt_bulk_write_callback */ 1210 1211 /* 1212 * Called when incoming isoc transfer (SCO packet) has completed, i.e. 1213 * SCO packet was received from the device. 1214 * USB context. 1215 */ 1216 1217 static void 1218 ubt_isoc_read_callback(struct usb_xfer *xfer, usb_error_t error) 1219 { 1220 struct ubt_softc *sc = usbd_xfer_softc(xfer); 1221 int n; 1222 int actlen, nframes; 1223 1224 usbd_xfer_status(xfer, &actlen, NULL, NULL, &nframes); 1225 1226 switch (USB_GET_STATE(xfer)) { 1227 case USB_ST_TRANSFERRED: 1228 for (n = 0; n < nframes; n ++) 1229 if (ubt_isoc_read_one_frame(xfer, n) < 0) 1230 break; 1231 /* FALLTHROUGH */ 1232 1233 case USB_ST_SETUP: 1234 read_next: 1235 for (n = 0; n < nframes; n ++) 1236 usbd_xfer_set_frame_len(xfer, n, 1237 usbd_xfer_max_framelen(xfer)); 1238 1239 usbd_transfer_submit(xfer); 1240 break; 1241 1242 default: /* Error */ 1243 if (error != USB_ERR_CANCELLED) { 1244 UBT_STAT_IERROR(sc); 1245 goto read_next; 1246 } 1247 1248 /* transfer cancelled */ 1249 break; 1250 } 1251 } /* ubt_isoc_read_callback */ 1252 1253 /* 1254 * Helper function. Called from ubt_isoc_read_callback() to read 1255 * SCO data from one frame. 1256 * USB context. 1257 */ 1258 1259 static int 1260 ubt_isoc_read_one_frame(struct usb_xfer *xfer, int frame_no) 1261 { 1262 struct ubt_softc *sc = usbd_xfer_softc(xfer); 1263 struct usb_page_cache *pc; 1264 struct mbuf *m; 1265 int len, want, got, total; 1266 1267 /* Get existing SCO reassembly buffer */ 1268 pc = usbd_xfer_get_frame(xfer, 0); 1269 m = sc->sc_isoc_in_buffer; 1270 total = usbd_xfer_frame_len(xfer, frame_no); 1271 1272 /* While we have data in the frame */ 1273 while (total > 0) { 1274 if (m == NULL) { 1275 /* Start new reassembly buffer */ 1276 MGETHDR(m, M_NOWAIT, MT_DATA); 1277 if (m == NULL) { 1278 UBT_STAT_IERROR(sc); 1279 return (-1); /* XXX out of sync! */ 1280 } 1281 1282 if (!(MCLGET(m, M_NOWAIT))) { 1283 UBT_STAT_IERROR(sc); 1284 NG_FREE_M(m); 1285 return (-1); /* XXX out of sync! */ 1286 } 1287 1288 /* Expect SCO header */ 1289 *mtod(m, uint8_t *) = NG_HCI_SCO_DATA_PKT; 1290 m->m_pkthdr.len = m->m_len = got = 1; 1291 want = sizeof(ng_hci_scodata_pkt_t); 1292 } else { 1293 /* 1294 * Check if we have SCO header and if so 1295 * adjust amount of data we want 1296 */ 1297 got = m->m_pkthdr.len; 1298 want = sizeof(ng_hci_scodata_pkt_t); 1299 1300 if (got >= want) 1301 want += mtod(m, ng_hci_scodata_pkt_t *)->length; 1302 } 1303 1304 /* Append frame data to the SCO reassembly buffer */ 1305 len = total; 1306 if (got + len > want) 1307 len = want - got; 1308 1309 usbd_copy_out(pc, frame_no * usbd_xfer_max_framelen(xfer), 1310 mtod(m, uint8_t *) + m->m_pkthdr.len, len); 1311 1312 m->m_pkthdr.len += len; 1313 m->m_len += len; 1314 total -= len; 1315 1316 /* Check if we got everything we wanted, if not - continue */ 1317 if (got != want) 1318 continue; 1319 1320 /* If we got here then we got complete SCO frame */ 1321 UBT_INFO(sc, "got complete SCO data frame, pktlen=%d, " \ 1322 "length=%d\n", m->m_pkthdr.len, 1323 mtod(m, ng_hci_scodata_pkt_t *)->length); 1324 1325 UBT_STAT_PCKTS_RECV(sc); 1326 UBT_STAT_BYTES_RECV(sc, m->m_pkthdr.len); 1327 1328 ubt_fwd_mbuf_up(sc, &m); 1329 /* m == NULL at this point */ 1330 } 1331 1332 /* Put SCO reassembly buffer back */ 1333 sc->sc_isoc_in_buffer = m; 1334 1335 return (0); 1336 } /* ubt_isoc_read_one_frame */ 1337 1338 /* 1339 * Called when outgoing isoc transfer (SCO packet) has completed, i.e. 1340 * SCO packet was sent to the device. 1341 * USB context. 1342 */ 1343 1344 static void 1345 ubt_isoc_write_callback(struct usb_xfer *xfer, usb_error_t error) 1346 { 1347 struct ubt_softc *sc = usbd_xfer_softc(xfer); 1348 struct usb_page_cache *pc; 1349 struct mbuf *m; 1350 int n, space, offset; 1351 int actlen, nframes; 1352 1353 usbd_xfer_status(xfer, &actlen, NULL, NULL, &nframes); 1354 pc = usbd_xfer_get_frame(xfer, 0); 1355 1356 switch (USB_GET_STATE(xfer)) { 1357 case USB_ST_TRANSFERRED: 1358 UBT_INFO(sc, "sent %d bytes to isoc-out pipe\n", actlen); 1359 UBT_STAT_BYTES_SENT(sc, actlen); 1360 UBT_STAT_PCKTS_SENT(sc); 1361 /* FALLTHROUGH */ 1362 1363 case USB_ST_SETUP: 1364 send_next: 1365 offset = 0; 1366 space = usbd_xfer_max_framelen(xfer) * nframes; 1367 m = NULL; 1368 1369 while (space > 0) { 1370 if (m == NULL) { 1371 UBT_NG_LOCK(sc); 1372 NG_BT_MBUFQ_DEQUEUE(&sc->sc_scoq, m); 1373 UBT_NG_UNLOCK(sc); 1374 1375 if (m == NULL) 1376 break; 1377 } 1378 1379 n = min(space, m->m_pkthdr.len); 1380 if (n > 0) { 1381 usbd_m_copy_in(pc, offset, m,0, n); 1382 m_adj(m, n); 1383 1384 offset += n; 1385 space -= n; 1386 } 1387 1388 if (m->m_pkthdr.len == 0) 1389 NG_FREE_M(m); /* sets m = NULL */ 1390 } 1391 1392 /* Put whatever is left from mbuf back on queue */ 1393 if (m != NULL) { 1394 UBT_NG_LOCK(sc); 1395 NG_BT_MBUFQ_PREPEND(&sc->sc_scoq, m); 1396 UBT_NG_UNLOCK(sc); 1397 } 1398 1399 /* 1400 * Calculate sizes for isoc frames. 1401 * Note that offset could be 0 at this point (i.e. we have 1402 * nothing to send). That is fine, as we have isoc. transfers 1403 * going in both directions all the time. In this case it 1404 * would be just empty isoc. transfer. 1405 */ 1406 1407 for (n = 0; n < nframes; n ++) { 1408 usbd_xfer_set_frame_len(xfer, n, 1409 min(offset, usbd_xfer_max_framelen(xfer))); 1410 offset -= usbd_xfer_frame_len(xfer, n); 1411 } 1412 1413 usbd_transfer_submit(xfer); 1414 break; 1415 1416 default: /* Error */ 1417 if (error != USB_ERR_CANCELLED) { 1418 UBT_STAT_OERROR(sc); 1419 goto send_next; 1420 } 1421 1422 /* transfer cancelled */ 1423 break; 1424 } 1425 } 1426 1427 /* 1428 * Utility function to forward provided mbuf upstream (i.e. up the stack). 1429 * Modifies value of the mbuf pointer (sets it to NULL). 1430 * Save to call from any context. 1431 */ 1432 1433 static int 1434 ubt_fwd_mbuf_up(ubt_softc_p sc, struct mbuf **m) 1435 { 1436 hook_p hook; 1437 int error; 1438 1439 /* 1440 * Close the race with Netgraph hook newhook/disconnect methods. 1441 * Save the hook pointer atomically. Two cases are possible: 1442 * 1443 * 1) The hook pointer is NULL. It means disconnect method got 1444 * there first. In this case we are done. 1445 * 1446 * 2) The hook pointer is not NULL. It means that hook pointer 1447 * could be either in valid or invalid (i.e. in the process 1448 * of disconnect) state. In any case grab an extra reference 1449 * to protect the hook pointer. 1450 * 1451 * It is ok to pass hook in invalid state to NG_SEND_DATA_ONLY() as 1452 * it checks for it. Drop extra reference after NG_SEND_DATA_ONLY(). 1453 */ 1454 1455 UBT_NG_LOCK(sc); 1456 if ((hook = sc->sc_hook) != NULL) 1457 NG_HOOK_REF(hook); 1458 UBT_NG_UNLOCK(sc); 1459 1460 if (hook == NULL) { 1461 NG_FREE_M(*m); 1462 return (ENETDOWN); 1463 } 1464 1465 NG_SEND_DATA_ONLY(error, hook, *m); 1466 NG_HOOK_UNREF(hook); 1467 1468 if (error != 0) 1469 UBT_STAT_IERROR(sc); 1470 1471 return (error); 1472 } /* ubt_fwd_mbuf_up */ 1473 1474 /**************************************************************************** 1475 **************************************************************************** 1476 ** Glue 1477 **************************************************************************** 1478 ****************************************************************************/ 1479 1480 /* 1481 * Schedule glue task. Should be called with sc_ng_mtx held. 1482 * Netgraph context. 1483 */ 1484 1485 static void 1486 ubt_task_schedule(ubt_softc_p sc, int action) 1487 { 1488 mtx_assert(&sc->sc_ng_mtx, MA_OWNED); 1489 1490 /* 1491 * Try to handle corner case when "start all" and "stop all" 1492 * actions can both be set before task is executed. 1493 * 1494 * The rules are 1495 * 1496 * sc_task_flags action new sc_task_flags 1497 * ------------------------------------------------------ 1498 * 0 start start 1499 * 0 stop stop 1500 * start start start 1501 * start stop stop 1502 * stop start stop|start 1503 * stop stop stop 1504 * stop|start start stop|start 1505 * stop|start stop stop 1506 */ 1507 1508 if (action != 0) { 1509 if ((action & UBT_FLAG_T_STOP_ALL) != 0) 1510 sc->sc_task_flags &= ~UBT_FLAG_T_START_ALL; 1511 1512 sc->sc_task_flags |= action; 1513 } 1514 1515 if (sc->sc_task_flags & UBT_FLAG_T_PENDING) 1516 return; 1517 1518 if (taskqueue_enqueue(taskqueue_swi, &sc->sc_task) == 0) { 1519 sc->sc_task_flags |= UBT_FLAG_T_PENDING; 1520 return; 1521 } 1522 1523 /* XXX: i think this should never happen */ 1524 } /* ubt_task_schedule */ 1525 1526 /* 1527 * Glue task. Examines sc_task_flags and does things depending on it. 1528 * Taskqueue context. 1529 */ 1530 1531 static void 1532 ubt_task(void *context, int pending) 1533 { 1534 ubt_softc_p sc = context; 1535 int task_flags, i; 1536 1537 UBT_NG_LOCK(sc); 1538 task_flags = sc->sc_task_flags; 1539 sc->sc_task_flags = 0; 1540 UBT_NG_UNLOCK(sc); 1541 1542 /* 1543 * Stop all USB transfers synchronously. 1544 * Stop interface #0 and #1 transfers at the same time and in the 1545 * same loop. usbd_transfer_drain() will do appropriate locking. 1546 */ 1547 1548 if (task_flags & UBT_FLAG_T_STOP_ALL) 1549 for (i = 0; i < UBT_N_TRANSFER; i ++) 1550 usbd_transfer_drain(sc->sc_xfer[i]); 1551 1552 /* Start incoming interrupt and bulk, and all isoc. USB transfers */ 1553 if (task_flags & UBT_FLAG_T_START_ALL) { 1554 /* 1555 * Interface #0 1556 */ 1557 1558 mtx_lock(&sc->sc_if_mtx); 1559 1560 ubt_xfer_start(sc, UBT_IF_0_INTR_DT_RD); 1561 ubt_xfer_start(sc, UBT_IF_0_BULK_DT_RD); 1562 1563 /* 1564 * Interface #1 1565 * Start both read and write isoc. transfers by default. 1566 * Get them going all the time even if we have nothing 1567 * to send to avoid any delays. 1568 */ 1569 1570 ubt_xfer_start(sc, UBT_IF_1_ISOC_DT_RD1); 1571 ubt_xfer_start(sc, UBT_IF_1_ISOC_DT_RD2); 1572 ubt_xfer_start(sc, UBT_IF_1_ISOC_DT_WR1); 1573 ubt_xfer_start(sc, UBT_IF_1_ISOC_DT_WR2); 1574 1575 mtx_unlock(&sc->sc_if_mtx); 1576 } 1577 1578 /* Start outgoing control transfer */ 1579 if (task_flags & UBT_FLAG_T_START_CTRL) { 1580 mtx_lock(&sc->sc_if_mtx); 1581 ubt_xfer_start(sc, UBT_IF_0_CTRL_DT_WR); 1582 mtx_unlock(&sc->sc_if_mtx); 1583 } 1584 1585 /* Start outgoing bulk transfer */ 1586 if (task_flags & UBT_FLAG_T_START_BULK) { 1587 mtx_lock(&sc->sc_if_mtx); 1588 ubt_xfer_start(sc, UBT_IF_0_BULK_DT_WR); 1589 mtx_unlock(&sc->sc_if_mtx); 1590 } 1591 } /* ubt_task */ 1592 1593 /**************************************************************************** 1594 **************************************************************************** 1595 ** Netgraph specific 1596 **************************************************************************** 1597 ****************************************************************************/ 1598 1599 /* 1600 * Netgraph node constructor. Do not allow to create node of this type. 1601 * Netgraph context. 1602 */ 1603 1604 static int 1605 ng_ubt_constructor(node_p node) 1606 { 1607 return (EINVAL); 1608 } /* ng_ubt_constructor */ 1609 1610 /* 1611 * Netgraph node destructor. Destroy node only when device has been detached. 1612 * Netgraph context. 1613 */ 1614 1615 static int 1616 ng_ubt_shutdown(node_p node) 1617 { 1618 if (node->nd_flags & NGF_REALLY_DIE) { 1619 /* 1620 * We came here because the USB device is being 1621 * detached, so stop being persistent. 1622 */ 1623 NG_NODE_SET_PRIVATE(node, NULL); 1624 NG_NODE_UNREF(node); 1625 } else 1626 NG_NODE_REVIVE(node); /* tell ng_rmnode we are persisant */ 1627 1628 return (0); 1629 } /* ng_ubt_shutdown */ 1630 1631 /* 1632 * Create new hook. There can only be one. 1633 * Netgraph context. 1634 */ 1635 1636 static int 1637 ng_ubt_newhook(node_p node, hook_p hook, char const *name) 1638 { 1639 struct ubt_softc *sc = NG_NODE_PRIVATE(node); 1640 1641 if (strcmp(name, NG_UBT_HOOK) != 0) 1642 return (EINVAL); 1643 1644 UBT_NG_LOCK(sc); 1645 if (sc->sc_hook != NULL) { 1646 UBT_NG_UNLOCK(sc); 1647 1648 return (EISCONN); 1649 } 1650 1651 sc->sc_hook = hook; 1652 UBT_NG_UNLOCK(sc); 1653 1654 return (0); 1655 } /* ng_ubt_newhook */ 1656 1657 /* 1658 * Connect hook. Start incoming USB transfers. 1659 * Netgraph context. 1660 */ 1661 1662 static int 1663 ng_ubt_connect(hook_p hook) 1664 { 1665 struct ubt_softc *sc = NG_NODE_PRIVATE(NG_HOOK_NODE(hook)); 1666 1667 NG_HOOK_FORCE_QUEUE(NG_HOOK_PEER(hook)); 1668 1669 UBT_NG_LOCK(sc); 1670 ubt_task_schedule(sc, UBT_FLAG_T_START_ALL); 1671 UBT_NG_UNLOCK(sc); 1672 1673 return (0); 1674 } /* ng_ubt_connect */ 1675 1676 /* 1677 * Disconnect hook. 1678 * Netgraph context. 1679 */ 1680 1681 static int 1682 ng_ubt_disconnect(hook_p hook) 1683 { 1684 struct ubt_softc *sc = NG_NODE_PRIVATE(NG_HOOK_NODE(hook)); 1685 1686 UBT_NG_LOCK(sc); 1687 1688 if (hook != sc->sc_hook) { 1689 UBT_NG_UNLOCK(sc); 1690 1691 return (EINVAL); 1692 } 1693 1694 sc->sc_hook = NULL; 1695 1696 /* Kick off task to stop all USB xfers */ 1697 ubt_task_schedule(sc, UBT_FLAG_T_STOP_ALL); 1698 1699 /* Drain queues */ 1700 NG_BT_MBUFQ_DRAIN(&sc->sc_cmdq); 1701 NG_BT_MBUFQ_DRAIN(&sc->sc_aclq); 1702 NG_BT_MBUFQ_DRAIN(&sc->sc_scoq); 1703 1704 UBT_NG_UNLOCK(sc); 1705 1706 return (0); 1707 } /* ng_ubt_disconnect */ 1708 1709 /* 1710 * Process control message. 1711 * Netgraph context. 1712 */ 1713 1714 static int 1715 ng_ubt_rcvmsg(node_p node, item_p item, hook_p lasthook) 1716 { 1717 struct ubt_softc *sc = NG_NODE_PRIVATE(node); 1718 struct ng_mesg *msg, *rsp = NULL; 1719 struct ng_bt_mbufq *q; 1720 int error = 0, queue, qlen; 1721 1722 NGI_GET_MSG(item, msg); 1723 1724 switch (msg->header.typecookie) { 1725 case NGM_GENERIC_COOKIE: 1726 switch (msg->header.cmd) { 1727 case NGM_TEXT_STATUS: 1728 NG_MKRESPONSE(rsp, msg, NG_TEXTRESPONSE, M_NOWAIT); 1729 if (rsp == NULL) { 1730 error = ENOMEM; 1731 break; 1732 } 1733 1734 snprintf(rsp->data, NG_TEXTRESPONSE, 1735 "Hook: %s\n" \ 1736 "Task flags: %#x\n" \ 1737 "Debug: %d\n" \ 1738 "CMD queue: [have:%d,max:%d]\n" \ 1739 "ACL queue: [have:%d,max:%d]\n" \ 1740 "SCO queue: [have:%d,max:%d]", 1741 (sc->sc_hook != NULL) ? NG_UBT_HOOK : "", 1742 sc->sc_task_flags, 1743 sc->sc_debug, 1744 sc->sc_cmdq.len, 1745 sc->sc_cmdq.maxlen, 1746 sc->sc_aclq.len, 1747 sc->sc_aclq.maxlen, 1748 sc->sc_scoq.len, 1749 sc->sc_scoq.maxlen); 1750 break; 1751 1752 default: 1753 error = EINVAL; 1754 break; 1755 } 1756 break; 1757 1758 case NGM_UBT_COOKIE: 1759 switch (msg->header.cmd) { 1760 case NGM_UBT_NODE_SET_DEBUG: 1761 if (msg->header.arglen != sizeof(ng_ubt_node_debug_ep)){ 1762 error = EMSGSIZE; 1763 break; 1764 } 1765 1766 sc->sc_debug = *((ng_ubt_node_debug_ep *) (msg->data)); 1767 break; 1768 1769 case NGM_UBT_NODE_GET_DEBUG: 1770 NG_MKRESPONSE(rsp, msg, sizeof(ng_ubt_node_debug_ep), 1771 M_NOWAIT); 1772 if (rsp == NULL) { 1773 error = ENOMEM; 1774 break; 1775 } 1776 1777 *((ng_ubt_node_debug_ep *) (rsp->data)) = sc->sc_debug; 1778 break; 1779 1780 case NGM_UBT_NODE_SET_QLEN: 1781 if (msg->header.arglen != sizeof(ng_ubt_node_qlen_ep)) { 1782 error = EMSGSIZE; 1783 break; 1784 } 1785 1786 queue = ((ng_ubt_node_qlen_ep *) (msg->data))->queue; 1787 qlen = ((ng_ubt_node_qlen_ep *) (msg->data))->qlen; 1788 1789 switch (queue) { 1790 case NGM_UBT_NODE_QUEUE_CMD: 1791 q = &sc->sc_cmdq; 1792 break; 1793 1794 case NGM_UBT_NODE_QUEUE_ACL: 1795 q = &sc->sc_aclq; 1796 break; 1797 1798 case NGM_UBT_NODE_QUEUE_SCO: 1799 q = &sc->sc_scoq; 1800 break; 1801 1802 default: 1803 error = EINVAL; 1804 goto done; 1805 /* NOT REACHED */ 1806 } 1807 1808 q->maxlen = qlen; 1809 break; 1810 1811 case NGM_UBT_NODE_GET_QLEN: 1812 if (msg->header.arglen != sizeof(ng_ubt_node_qlen_ep)) { 1813 error = EMSGSIZE; 1814 break; 1815 } 1816 1817 queue = ((ng_ubt_node_qlen_ep *) (msg->data))->queue; 1818 1819 switch (queue) { 1820 case NGM_UBT_NODE_QUEUE_CMD: 1821 q = &sc->sc_cmdq; 1822 break; 1823 1824 case NGM_UBT_NODE_QUEUE_ACL: 1825 q = &sc->sc_aclq; 1826 break; 1827 1828 case NGM_UBT_NODE_QUEUE_SCO: 1829 q = &sc->sc_scoq; 1830 break; 1831 1832 default: 1833 error = EINVAL; 1834 goto done; 1835 /* NOT REACHED */ 1836 } 1837 1838 NG_MKRESPONSE(rsp, msg, sizeof(ng_ubt_node_qlen_ep), 1839 M_NOWAIT); 1840 if (rsp == NULL) { 1841 error = ENOMEM; 1842 break; 1843 } 1844 1845 ((ng_ubt_node_qlen_ep *) (rsp->data))->queue = queue; 1846 ((ng_ubt_node_qlen_ep *) (rsp->data))->qlen = q->maxlen; 1847 break; 1848 1849 case NGM_UBT_NODE_GET_STAT: 1850 NG_MKRESPONSE(rsp, msg, sizeof(ng_ubt_node_stat_ep), 1851 M_NOWAIT); 1852 if (rsp == NULL) { 1853 error = ENOMEM; 1854 break; 1855 } 1856 1857 bcopy(&sc->sc_stat, rsp->data, 1858 sizeof(ng_ubt_node_stat_ep)); 1859 break; 1860 1861 case NGM_UBT_NODE_RESET_STAT: 1862 UBT_STAT_RESET(sc); 1863 break; 1864 1865 default: 1866 error = EINVAL; 1867 break; 1868 } 1869 break; 1870 1871 default: 1872 error = EINVAL; 1873 break; 1874 } 1875 done: 1876 NG_RESPOND_MSG(error, node, item, rsp); 1877 NG_FREE_MSG(msg); 1878 1879 return (error); 1880 } /* ng_ubt_rcvmsg */ 1881 1882 /* 1883 * Process data. 1884 * Netgraph context. 1885 */ 1886 1887 static int 1888 ng_ubt_rcvdata(hook_p hook, item_p item) 1889 { 1890 struct ubt_softc *sc = NG_NODE_PRIVATE(NG_HOOK_NODE(hook)); 1891 struct mbuf *m; 1892 struct ng_bt_mbufq *q; 1893 int action, error = 0; 1894 1895 if (hook != sc->sc_hook) { 1896 error = EINVAL; 1897 goto done; 1898 } 1899 1900 /* Deatch mbuf and get HCI frame type */ 1901 NGI_GET_M(item, m); 1902 1903 /* 1904 * Minimal size of the HCI frame is 4 bytes: 1 byte frame type, 1905 * 2 bytes connection handle and at least 1 byte of length. 1906 * Panic on data frame that has size smaller than 4 bytes (it 1907 * should not happen) 1908 */ 1909 1910 if (m->m_pkthdr.len < 4) 1911 panic("HCI frame size is too small! pktlen=%d\n", 1912 m->m_pkthdr.len); 1913 1914 /* Process HCI frame */ 1915 switch (*mtod(m, uint8_t *)) { /* XXX call m_pullup ? */ 1916 case NG_HCI_CMD_PKT: 1917 if (m->m_pkthdr.len - 1 > (int)UBT_CTRL_BUFFER_SIZE) 1918 panic("HCI command frame size is too big! " \ 1919 "buffer size=%zd, packet len=%d\n", 1920 UBT_CTRL_BUFFER_SIZE, m->m_pkthdr.len); 1921 1922 q = &sc->sc_cmdq; 1923 action = UBT_FLAG_T_START_CTRL; 1924 break; 1925 1926 case NG_HCI_ACL_DATA_PKT: 1927 if (m->m_pkthdr.len - 1 > UBT_BULK_WRITE_BUFFER_SIZE) 1928 panic("ACL data frame size is too big! " \ 1929 "buffer size=%d, packet len=%d\n", 1930 UBT_BULK_WRITE_BUFFER_SIZE, m->m_pkthdr.len); 1931 1932 q = &sc->sc_aclq; 1933 action = UBT_FLAG_T_START_BULK; 1934 break; 1935 1936 case NG_HCI_SCO_DATA_PKT: 1937 q = &sc->sc_scoq; 1938 action = 0; 1939 break; 1940 1941 default: 1942 UBT_ERR(sc, "Dropping unsupported HCI frame, type=0x%02x, " \ 1943 "pktlen=%d\n", *mtod(m, uint8_t *), m->m_pkthdr.len); 1944 1945 NG_FREE_M(m); 1946 error = EINVAL; 1947 goto done; 1948 /* NOT REACHED */ 1949 } 1950 1951 UBT_NG_LOCK(sc); 1952 if (NG_BT_MBUFQ_FULL(q)) { 1953 NG_BT_MBUFQ_DROP(q); 1954 UBT_NG_UNLOCK(sc); 1955 1956 UBT_ERR(sc, "Dropping HCI frame 0x%02x, len=%d. Queue full\n", 1957 *mtod(m, uint8_t *), m->m_pkthdr.len); 1958 1959 NG_FREE_M(m); 1960 } else { 1961 /* Loose HCI packet type, enqueue mbuf and kick off task */ 1962 m_adj(m, sizeof(uint8_t)); 1963 NG_BT_MBUFQ_ENQUEUE(q, m); 1964 ubt_task_schedule(sc, action); 1965 UBT_NG_UNLOCK(sc); 1966 } 1967 done: 1968 NG_FREE_ITEM(item); 1969 1970 return (error); 1971 } /* ng_ubt_rcvdata */ 1972 1973 /**************************************************************************** 1974 **************************************************************************** 1975 ** Module 1976 **************************************************************************** 1977 ****************************************************************************/ 1978 1979 /* 1980 * Load/Unload the driver module 1981 */ 1982 1983 static int 1984 ubt_modevent(module_t mod, int event, void *data) 1985 { 1986 int error; 1987 1988 switch (event) { 1989 case MOD_LOAD: 1990 error = ng_newtype(&typestruct); 1991 if (error != 0) 1992 printf("%s: Could not register Netgraph node type, " \ 1993 "error=%d\n", NG_UBT_NODE_TYPE, error); 1994 break; 1995 1996 case MOD_UNLOAD: 1997 error = ng_rmtype(&typestruct); 1998 break; 1999 2000 default: 2001 error = EOPNOTSUPP; 2002 break; 2003 } 2004 2005 return (error); 2006 } /* ubt_modevent */ 2007 2008 static device_method_t ubt_methods[] = 2009 { 2010 DEVMETHOD(device_probe, ubt_probe), 2011 DEVMETHOD(device_attach, ubt_attach), 2012 DEVMETHOD(device_detach, ubt_detach), 2013 DEVMETHOD_END 2014 }; 2015 2016 driver_t ubt_driver = 2017 { 2018 .name = "ubt", 2019 .methods = ubt_methods, 2020 .size = sizeof(struct ubt_softc), 2021 }; 2022 2023 DRIVER_MODULE(ng_ubt, uhub, ubt_driver, ubt_modevent, 0); 2024 MODULE_VERSION(ng_ubt, NG_BLUETOOTH_VERSION); 2025 MODULE_DEPEND(ng_ubt, netgraph, NG_ABI_VERSION, NG_ABI_VERSION, NG_ABI_VERSION); 2026 MODULE_DEPEND(ng_ubt, ng_hci, NG_BLUETOOTH_VERSION, NG_BLUETOOTH_VERSION, NG_BLUETOOTH_VERSION); 2027 MODULE_DEPEND(ng_ubt, ng_bluetooth, NG_BLUETOOTH_VERSION, NG_BLUETOOTH_VERSION, NG_BLUETOOTH_VERSION); 2028 MODULE_DEPEND(ng_ubt, usb, 1, 1, 1); 2029 USB_PNP_HOST_INFO(ubt_devs); 2030