2 HCI USB driver for Linux Bluetooth protocol stack (BlueZ)
3 Copyright (C) 2000-2001 Qualcomm Incorporated
4 Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
6 Copyright (C) 2003 Maxim Krasnyansky <maxk@qualcomm.com>
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License version 2 as
10 published by the Free Software Foundation;
12 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
13 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
14 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
15 IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
16 CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
17 WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
18 ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
19 OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
21 ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
22 COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
23 SOFTWARE IS DISCLAIMED.
27 * Bluetooth HCI USB driver.
28 * Based on original USB Bluetooth driver for Linux kernel
29 * Copyright (c) 2000 Greg Kroah-Hartman <greg@kroah.com>
30 * Copyright (c) 2000 Mark Douglas Corner <mcorner@umich.edu>
34 #include <linux/module.h>
36 #include <linux/kernel.h>
37 #include <linux/init.h>
38 #include <linux/unistd.h>
39 #include <linux/types.h>
40 #include <linux/interrupt.h>
41 #include <linux/moduleparam.h>
43 #include <linux/slab.h>
44 #include <linux/errno.h>
45 #include <linux/string.h>
46 #include <linux/skbuff.h>
48 #include <linux/usb.h>
50 #include <net/bluetooth/bluetooth.h>
51 #include <net/bluetooth/hci_core.h>
55 #ifndef CONFIG_BT_HCIUSB_DEBUG
60 #ifndef CONFIG_BT_HCIUSB_ZERO_PACKET
61 #undef URB_ZERO_PACKET
62 #define URB_ZERO_PACKET 0
65 static int ignore = 0;
66 static int ignore_dga = 0;
67 static int ignore_csr = 0;
68 static int ignore_sniffer = 0;
69 static int disable_scofix = 0;
70 static int force_scofix = 0;
73 #ifdef CONFIG_BT_HCIUSB_SCO
79 static struct usb_driver hci_usb_driver;
81 static struct usb_device_id bluetooth_ids[] = {
82 /* Generic Bluetooth USB device */
83 { USB_DEVICE_INFO(HCI_DEV_CLASS, HCI_DEV_SUBCLASS, HCI_DEV_PROTOCOL) },
85 /* AVM BlueFRITZ! USB v2.0 */
86 { USB_DEVICE(0x057c, 0x3800) },
88 /* Bluetooth Ultraport Module from IBM */
89 { USB_DEVICE(0x04bf, 0x030a) },
91 /* ALPS Modules with non-standard id */
92 { USB_DEVICE(0x044e, 0x3001) },
93 { USB_DEVICE(0x044e, 0x3002) },
95 /* Ericsson with non-standard id */
96 { USB_DEVICE(0x0bdb, 0x1002) },
98 /* Canyon CN-BTU1 with HID interfaces */
99 { USB_DEVICE(0x0c10, 0x0000), .driver_info = HCI_RESET },
101 { } /* Terminating entry */
104 MODULE_DEVICE_TABLE (usb, bluetooth_ids);
106 static struct usb_device_id blacklist_ids[] = {
107 /* CSR BlueCore devices */
108 { USB_DEVICE(0x0a12, 0x0001), .driver_info = HCI_CSR },
110 /* Broadcom BCM2033 without firmware */
111 { USB_DEVICE(0x0a5c, 0x2033), .driver_info = HCI_IGNORE },
113 /* Broadcom BCM2035 */
114 { USB_DEVICE(0x0a5c, 0x200a), .driver_info = HCI_RESET | HCI_WRONG_SCO_MTU },
115 { USB_DEVICE(0x0a5c, 0x2009), .driver_info = HCI_BCM92035 },
117 /* Broadcom BCM2045 */
118 { USB_DEVICE(0x0a5c, 0x2101), .driver_info = HCI_WRONG_SCO_MTU },
120 /* IBM/Lenovo ThinkPad with Broadcom chip */
121 { USB_DEVICE(0x0a5c, 0x201e), .driver_info = HCI_WRONG_SCO_MTU },
122 { USB_DEVICE(0x0a5c, 0x2110), .driver_info = HCI_WRONG_SCO_MTU },
125 { USB_DEVICE(0x0a5c, 0x2100), .driver_info = HCI_RESET },
127 /* ANYCOM Bluetooth USB-200 and USB-250 */
128 { USB_DEVICE(0x0a5c, 0x2111), .driver_info = HCI_RESET },
130 /* HP laptop with Broadcom chip */
131 { USB_DEVICE(0x03f0, 0x171d), .driver_info = HCI_WRONG_SCO_MTU },
133 /* Dell laptop with Broadcom chip */
134 { USB_DEVICE(0x413c, 0x8126), .driver_info = HCI_WRONG_SCO_MTU },
136 /* Microsoft Wireless Transceiver for Bluetooth 2.0 */
137 { USB_DEVICE(0x045e, 0x009c), .driver_info = HCI_RESET },
139 /* Kensington Bluetooth USB adapter */
140 { USB_DEVICE(0x047d, 0x105d), .driver_info = HCI_RESET },
141 { USB_DEVICE(0x047d, 0x105e), .driver_info = HCI_WRONG_SCO_MTU },
143 /* ISSC Bluetooth Adapter v3.1 */
144 { USB_DEVICE(0x1131, 0x1001), .driver_info = HCI_RESET },
146 /* RTX Telecom based adapters with buggy SCO support */
147 { USB_DEVICE(0x0400, 0x0807), .driver_info = HCI_BROKEN_ISOC },
148 { USB_DEVICE(0x0400, 0x080a), .driver_info = HCI_BROKEN_ISOC },
150 /* Belkin F8T012 and F8T013 devices */
151 { USB_DEVICE(0x050d, 0x0012), .driver_info = HCI_WRONG_SCO_MTU },
152 { USB_DEVICE(0x050d, 0x0013), .driver_info = HCI_WRONG_SCO_MTU },
154 /* Digianswer devices */
155 { USB_DEVICE(0x08fd, 0x0001), .driver_info = HCI_DIGIANSWER },
156 { USB_DEVICE(0x08fd, 0x0002), .driver_info = HCI_IGNORE },
158 /* CSR BlueCore Bluetooth Sniffer */
159 { USB_DEVICE(0x0a12, 0x0002), .driver_info = HCI_SNIFFER },
161 /* Frontline ComProbe Bluetooth Sniffer */
162 { USB_DEVICE(0x16d3, 0x0002), .driver_info = HCI_SNIFFER },
164 { } /* Terminating entry */
167 static struct _urb *_urb_alloc(int isoc, gfp_t gfp)
169 struct _urb *_urb = kmalloc(sizeof(struct _urb) +
170 sizeof(struct usb_iso_packet_descriptor) * isoc, gfp);
172 memset(_urb, 0, sizeof(*_urb));
173 usb_init_urb(&_urb->urb);
178 static struct _urb *_urb_dequeue(struct _urb_queue *q)
180 struct _urb *_urb = NULL;
182 spin_lock_irqsave(&q->lock, flags);
184 struct list_head *head = &q->head;
185 struct list_head *next = head->next;
187 _urb = list_entry(next, struct _urb, list);
188 list_del(next); _urb->queue = NULL;
191 spin_unlock_irqrestore(&q->lock, flags);
195 static void hci_usb_rx_complete(struct urb *urb);
196 static void hci_usb_tx_complete(struct urb *urb);
198 #define __pending_tx(husb, type) (&husb->pending_tx[type-1])
199 #define __pending_q(husb, type) (&husb->pending_q[type-1])
200 #define __completed_q(husb, type) (&husb->completed_q[type-1])
201 #define __transmit_q(husb, type) (&husb->transmit_q[type-1])
202 #define __reassembly(husb, type) (husb->reassembly[type-1])
204 static inline struct _urb *__get_completed(struct hci_usb *husb, int type)
206 return _urb_dequeue(__completed_q(husb, type));
209 #ifdef CONFIG_BT_HCIUSB_SCO
210 static void __fill_isoc_desc(struct urb *urb, int len, int mtu)
214 BT_DBG("len %d mtu %d", len, mtu);
216 for (i=0; i < HCI_MAX_ISOC_FRAMES && len >= mtu; i++, offset += mtu, len -= mtu) {
217 urb->iso_frame_desc[i].offset = offset;
218 urb->iso_frame_desc[i].length = mtu;
219 BT_DBG("desc %d offset %d len %d", i, offset, mtu);
221 if (len && i < HCI_MAX_ISOC_FRAMES) {
222 urb->iso_frame_desc[i].offset = offset;
223 urb->iso_frame_desc[i].length = len;
224 BT_DBG("desc %d offset %d len %d", i, offset, len);
227 urb->number_of_packets = i;
231 static int hci_usb_intr_rx_submit(struct hci_usb *husb)
235 int err, pipe, interval, size;
238 BT_DBG("%s", husb->hdev->name);
240 size = le16_to_cpu(husb->intr_in_ep->desc.wMaxPacketSize);
242 buf = kmalloc(size, GFP_ATOMIC);
246 _urb = _urb_alloc(0, GFP_ATOMIC);
251 _urb->type = HCI_EVENT_PKT;
252 _urb_queue_tail(__pending_q(husb, _urb->type), _urb);
255 pipe = usb_rcvintpipe(husb->udev, husb->intr_in_ep->desc.bEndpointAddress);
256 interval = husb->intr_in_ep->desc.bInterval;
257 usb_fill_int_urb(urb, husb->udev, pipe, buf, size, hci_usb_rx_complete, husb, interval);
259 err = usb_submit_urb(urb, GFP_ATOMIC);
261 BT_ERR("%s intr rx submit failed urb %p err %d",
262 husb->hdev->name, urb, err);
270 static int hci_usb_bulk_rx_submit(struct hci_usb *husb)
274 int err, pipe, size = HCI_MAX_FRAME_SIZE;
277 buf = kmalloc(size, GFP_ATOMIC);
281 _urb = _urb_alloc(0, GFP_ATOMIC);
286 _urb->type = HCI_ACLDATA_PKT;
287 _urb_queue_tail(__pending_q(husb, _urb->type), _urb);
290 pipe = usb_rcvbulkpipe(husb->udev, husb->bulk_in_ep->desc.bEndpointAddress);
291 usb_fill_bulk_urb(urb, husb->udev, pipe, buf, size, hci_usb_rx_complete, husb);
292 urb->transfer_flags = 0;
294 BT_DBG("%s urb %p", husb->hdev->name, urb);
296 err = usb_submit_urb(urb, GFP_ATOMIC);
298 BT_ERR("%s bulk rx submit failed urb %p err %d",
299 husb->hdev->name, urb, err);
307 #ifdef CONFIG_BT_HCIUSB_SCO
308 static int hci_usb_isoc_rx_submit(struct hci_usb *husb)
315 mtu = le16_to_cpu(husb->isoc_in_ep->desc.wMaxPacketSize);
316 size = mtu * HCI_MAX_ISOC_FRAMES;
318 buf = kmalloc(size, GFP_ATOMIC);
322 _urb = _urb_alloc(HCI_MAX_ISOC_FRAMES, GFP_ATOMIC);
327 _urb->type = HCI_SCODATA_PKT;
328 _urb_queue_tail(__pending_q(husb, _urb->type), _urb);
333 urb->dev = husb->udev;
334 urb->pipe = usb_rcvisocpipe(husb->udev, husb->isoc_in_ep->desc.bEndpointAddress);
335 urb->complete = hci_usb_rx_complete;
337 urb->interval = husb->isoc_in_ep->desc.bInterval;
339 urb->transfer_buffer_length = size;
340 urb->transfer_buffer = buf;
341 urb->transfer_flags = URB_ISO_ASAP;
343 __fill_isoc_desc(urb, size, mtu);
345 BT_DBG("%s urb %p", husb->hdev->name, urb);
347 err = usb_submit_urb(urb, GFP_ATOMIC);
349 BT_ERR("%s isoc rx submit failed urb %p err %d",
350 husb->hdev->name, urb, err);
359 /* Initialize device */
360 static int hci_usb_open(struct hci_dev *hdev)
362 struct hci_usb *husb = (struct hci_usb *) hdev->driver_data;
366 BT_DBG("%s", hdev->name);
368 if (test_and_set_bit(HCI_RUNNING, &hdev->flags))
371 write_lock_irqsave(&husb->completion_lock, flags);
373 err = hci_usb_intr_rx_submit(husb);
375 for (i = 0; i < HCI_MAX_BULK_RX; i++)
376 hci_usb_bulk_rx_submit(husb);
378 #ifdef CONFIG_BT_HCIUSB_SCO
379 if (husb->isoc_iface)
380 for (i = 0; i < HCI_MAX_ISOC_RX; i++)
381 hci_usb_isoc_rx_submit(husb);
384 clear_bit(HCI_RUNNING, &hdev->flags);
387 write_unlock_irqrestore(&husb->completion_lock, flags);
392 static int hci_usb_flush(struct hci_dev *hdev)
394 struct hci_usb *husb = (struct hci_usb *) hdev->driver_data;
397 BT_DBG("%s", hdev->name);
399 for (i = 0; i < 4; i++)
400 skb_queue_purge(&husb->transmit_q[i]);
404 static void hci_usb_unlink_urbs(struct hci_usb *husb)
408 BT_DBG("%s", husb->hdev->name);
410 for (i = 0; i < 4; i++) {
414 /* Kill pending requests */
415 while ((_urb = _urb_dequeue(&husb->pending_q[i]))) {
417 BT_DBG("%s unlinking _urb %p type %d urb %p",
418 husb->hdev->name, _urb, _urb->type, urb);
420 _urb_queue_tail(__completed_q(husb, _urb->type), _urb);
423 /* Release completed requests */
424 while ((_urb = _urb_dequeue(&husb->completed_q[i]))) {
426 BT_DBG("%s freeing _urb %p type %d urb %p",
427 husb->hdev->name, _urb, _urb->type, urb);
428 kfree(urb->setup_packet);
429 kfree(urb->transfer_buffer);
433 /* Release reassembly buffers */
434 if (husb->reassembly[i]) {
435 kfree_skb(husb->reassembly[i]);
436 husb->reassembly[i] = NULL;
442 static int hci_usb_close(struct hci_dev *hdev)
444 struct hci_usb *husb = (struct hci_usb *) hdev->driver_data;
447 if (!test_and_clear_bit(HCI_RUNNING, &hdev->flags))
450 BT_DBG("%s", hdev->name);
452 /* Synchronize with completion handlers */
453 write_lock_irqsave(&husb->completion_lock, flags);
454 write_unlock_irqrestore(&husb->completion_lock, flags);
456 hci_usb_unlink_urbs(husb);
461 static int __tx_submit(struct hci_usb *husb, struct _urb *_urb)
463 struct urb *urb = &_urb->urb;
466 BT_DBG("%s urb %p type %d", husb->hdev->name, urb, _urb->type);
468 _urb_queue_tail(__pending_q(husb, _urb->type), _urb);
469 err = usb_submit_urb(urb, GFP_ATOMIC);
471 BT_ERR("%s tx submit failed urb %p type %d err %d",
472 husb->hdev->name, urb, _urb->type, err);
474 _urb_queue_tail(__completed_q(husb, _urb->type), _urb);
476 atomic_inc(__pending_tx(husb, _urb->type));
481 static inline int hci_usb_send_ctrl(struct hci_usb *husb, struct sk_buff *skb)
483 struct _urb *_urb = __get_completed(husb, bt_cb(skb)->pkt_type);
484 struct usb_ctrlrequest *dr;
488 _urb = _urb_alloc(0, GFP_ATOMIC);
491 _urb->type = bt_cb(skb)->pkt_type;
493 dr = kmalloc(sizeof(*dr), GFP_ATOMIC);
499 dr = (void *) _urb->urb.setup_packet;
501 dr->bRequestType = husb->ctrl_req;
505 dr->wLength = __cpu_to_le16(skb->len);
508 usb_fill_control_urb(urb, husb->udev, usb_sndctrlpipe(husb->udev, 0),
509 (void *) dr, skb->data, skb->len, hci_usb_tx_complete, husb);
511 BT_DBG("%s skb %p len %d", husb->hdev->name, skb, skb->len);
514 return __tx_submit(husb, _urb);
517 static inline int hci_usb_send_bulk(struct hci_usb *husb, struct sk_buff *skb)
519 struct _urb *_urb = __get_completed(husb, bt_cb(skb)->pkt_type);
524 _urb = _urb_alloc(0, GFP_ATOMIC);
527 _urb->type = bt_cb(skb)->pkt_type;
531 pipe = usb_sndbulkpipe(husb->udev, husb->bulk_out_ep->desc.bEndpointAddress);
532 usb_fill_bulk_urb(urb, husb->udev, pipe, skb->data, skb->len,
533 hci_usb_tx_complete, husb);
534 urb->transfer_flags = URB_ZERO_PACKET;
536 BT_DBG("%s skb %p len %d", husb->hdev->name, skb, skb->len);
539 return __tx_submit(husb, _urb);
542 #ifdef CONFIG_BT_HCIUSB_SCO
543 static inline int hci_usb_send_isoc(struct hci_usb *husb, struct sk_buff *skb)
545 struct _urb *_urb = __get_completed(husb, bt_cb(skb)->pkt_type);
549 _urb = _urb_alloc(HCI_MAX_ISOC_FRAMES, GFP_ATOMIC);
552 _urb->type = bt_cb(skb)->pkt_type;
555 BT_DBG("%s skb %p len %d", husb->hdev->name, skb, skb->len);
560 urb->dev = husb->udev;
561 urb->pipe = usb_sndisocpipe(husb->udev, husb->isoc_out_ep->desc.bEndpointAddress);
562 urb->complete = hci_usb_tx_complete;
563 urb->transfer_flags = URB_ISO_ASAP;
565 urb->interval = husb->isoc_out_ep->desc.bInterval;
567 urb->transfer_buffer = skb->data;
568 urb->transfer_buffer_length = skb->len;
570 __fill_isoc_desc(urb, skb->len, le16_to_cpu(husb->isoc_out_ep->desc.wMaxPacketSize));
573 return __tx_submit(husb, _urb);
577 static void hci_usb_tx_process(struct hci_usb *husb)
579 struct sk_buff_head *q;
582 BT_DBG("%s", husb->hdev->name);
585 clear_bit(HCI_USB_TX_WAKEUP, &husb->state);
587 /* Process command queue */
588 q = __transmit_q(husb, HCI_COMMAND_PKT);
589 if (!atomic_read(__pending_tx(husb, HCI_COMMAND_PKT)) &&
590 (skb = skb_dequeue(q))) {
591 if (hci_usb_send_ctrl(husb, skb) < 0)
592 skb_queue_head(q, skb);
595 #ifdef CONFIG_BT_HCIUSB_SCO
596 /* Process SCO queue */
597 q = __transmit_q(husb, HCI_SCODATA_PKT);
598 if (atomic_read(__pending_tx(husb, HCI_SCODATA_PKT)) < HCI_MAX_ISOC_TX &&
599 (skb = skb_dequeue(q))) {
600 if (hci_usb_send_isoc(husb, skb) < 0)
601 skb_queue_head(q, skb);
605 /* Process ACL queue */
606 q = __transmit_q(husb, HCI_ACLDATA_PKT);
607 while (atomic_read(__pending_tx(husb, HCI_ACLDATA_PKT)) < HCI_MAX_BULK_TX &&
608 (skb = skb_dequeue(q))) {
609 if (hci_usb_send_bulk(husb, skb) < 0) {
610 skb_queue_head(q, skb);
614 } while(test_bit(HCI_USB_TX_WAKEUP, &husb->state));
617 static inline void hci_usb_tx_wakeup(struct hci_usb *husb)
619 /* Serialize TX queue processing to avoid data reordering */
620 if (!test_and_set_bit(HCI_USB_TX_PROCESS, &husb->state)) {
621 hci_usb_tx_process(husb);
622 clear_bit(HCI_USB_TX_PROCESS, &husb->state);
624 set_bit(HCI_USB_TX_WAKEUP, &husb->state);
627 /* Send frames from HCI layer */
628 static int hci_usb_send_frame(struct sk_buff *skb)
630 struct hci_dev *hdev = (struct hci_dev *) skb->dev;
631 struct hci_usb *husb;
634 BT_ERR("frame for uknown device (hdev=NULL)");
638 if (!test_bit(HCI_RUNNING, &hdev->flags))
641 BT_DBG("%s type %d len %d", hdev->name, bt_cb(skb)->pkt_type, skb->len);
643 husb = (struct hci_usb *) hdev->driver_data;
645 switch (bt_cb(skb)->pkt_type) {
646 case HCI_COMMAND_PKT:
650 case HCI_ACLDATA_PKT:
654 #ifdef CONFIG_BT_HCIUSB_SCO
655 case HCI_SCODATA_PKT:
665 read_lock(&husb->completion_lock);
667 skb_queue_tail(__transmit_q(husb, bt_cb(skb)->pkt_type), skb);
668 hci_usb_tx_wakeup(husb);
670 read_unlock(&husb->completion_lock);
674 static inline int __recv_frame(struct hci_usb *husb, int type, void *data, int count)
676 BT_DBG("%s type %d data %p count %d", husb->hdev->name, type, data, count);
678 husb->hdev->stat.byte_rx += count;
681 struct sk_buff *skb = __reassembly(husb, type);
682 struct { int expect; } *scb;
686 /* Start of the frame */
690 if (count >= HCI_EVENT_HDR_SIZE) {
691 struct hci_event_hdr *h = data;
692 len = HCI_EVENT_HDR_SIZE + h->plen;
697 case HCI_ACLDATA_PKT:
698 if (count >= HCI_ACL_HDR_SIZE) {
699 struct hci_acl_hdr *h = data;
700 len = HCI_ACL_HDR_SIZE + __le16_to_cpu(h->dlen);
704 #ifdef CONFIG_BT_HCIUSB_SCO
705 case HCI_SCODATA_PKT:
706 if (count >= HCI_SCO_HDR_SIZE) {
707 struct hci_sco_hdr *h = data;
708 len = HCI_SCO_HDR_SIZE + h->dlen;
714 BT_DBG("new packet len %d", len);
716 skb = bt_skb_alloc(len, GFP_ATOMIC);
718 BT_ERR("%s no memory for the packet", husb->hdev->name);
721 skb->dev = (void *) husb->hdev;
722 bt_cb(skb)->pkt_type = type;
724 __reassembly(husb, type) = skb;
726 scb = (void *) skb->cb;
730 scb = (void *) skb->cb;
734 len = min(len, count);
736 memcpy(skb_put(skb, len), data, len);
741 __reassembly(husb, type) = NULL;
742 bt_cb(skb)->pkt_type = type;
746 count -= len; data += len;
751 static void hci_usb_rx_complete(struct urb *urb)
753 struct _urb *_urb = container_of(urb, struct _urb, urb);
754 struct hci_usb *husb = (void *) urb->context;
755 struct hci_dev *hdev = husb->hdev;
756 int err, count = urb->actual_length;
758 BT_DBG("%s urb %p type %d status %d count %d flags %x", hdev->name, urb,
759 _urb->type, urb->status, count, urb->transfer_flags);
761 read_lock(&husb->completion_lock);
763 if (!test_bit(HCI_RUNNING, &hdev->flags))
766 if (urb->status || !count)
769 if (_urb->type == HCI_SCODATA_PKT) {
770 #ifdef CONFIG_BT_HCIUSB_SCO
772 for (i=0; i < urb->number_of_packets; i++) {
773 BT_DBG("desc %d status %d offset %d len %d", i,
774 urb->iso_frame_desc[i].status,
775 urb->iso_frame_desc[i].offset,
776 urb->iso_frame_desc[i].actual_length);
778 if (!urb->iso_frame_desc[i].status)
779 __recv_frame(husb, _urb->type,
780 urb->transfer_buffer + urb->iso_frame_desc[i].offset,
781 urb->iso_frame_desc[i].actual_length);
787 err = __recv_frame(husb, _urb->type, urb->transfer_buffer, count);
789 BT_ERR("%s corrupted packet: type %d count %d",
790 husb->hdev->name, _urb->type, count);
796 urb->dev = husb->udev;
797 err = usb_submit_urb(urb, GFP_ATOMIC);
798 BT_DBG("%s urb %p type %d resubmit status %d", hdev->name, urb,
802 read_unlock(&husb->completion_lock);
805 static void hci_usb_tx_complete(struct urb *urb)
807 struct _urb *_urb = container_of(urb, struct _urb, urb);
808 struct hci_usb *husb = (void *) urb->context;
809 struct hci_dev *hdev = husb->hdev;
811 BT_DBG("%s urb %p status %d flags %x", hdev->name, urb,
812 urb->status, urb->transfer_flags);
814 atomic_dec(__pending_tx(husb, _urb->type));
816 urb->transfer_buffer = NULL;
817 kfree_skb((struct sk_buff *) _urb->priv);
819 if (!test_bit(HCI_RUNNING, &hdev->flags))
823 hdev->stat.byte_tx += urb->transfer_buffer_length;
827 read_lock(&husb->completion_lock);
830 _urb_queue_tail(__completed_q(husb, _urb->type), _urb);
832 hci_usb_tx_wakeup(husb);
834 read_unlock(&husb->completion_lock);
837 static void hci_usb_destruct(struct hci_dev *hdev)
839 struct hci_usb *husb = (struct hci_usb *) hdev->driver_data;
841 BT_DBG("%s", hdev->name);
846 static void hci_usb_notify(struct hci_dev *hdev, unsigned int evt)
848 BT_DBG("%s evt %d", hdev->name, evt);
851 static int hci_usb_probe(struct usb_interface *intf, const struct usb_device_id *id)
853 struct usb_device *udev = interface_to_usbdev(intf);
854 struct usb_host_endpoint *bulk_out_ep = NULL;
855 struct usb_host_endpoint *bulk_in_ep = NULL;
856 struct usb_host_endpoint *intr_in_ep = NULL;
857 struct usb_host_endpoint *ep;
858 struct usb_host_interface *uif;
859 struct usb_interface *isoc_iface;
860 struct hci_usb *husb;
861 struct hci_dev *hdev;
862 int i, e, size, isoc_ifnum, isoc_alts;
864 BT_DBG("udev %p intf %p", udev, intf);
866 if (!id->driver_info) {
867 const struct usb_device_id *match;
868 match = usb_match_id(intf, blacklist_ids);
873 if (ignore || id->driver_info & HCI_IGNORE)
876 if (ignore_dga && id->driver_info & HCI_DIGIANSWER)
879 if (ignore_csr && id->driver_info & HCI_CSR)
882 if (ignore_sniffer && id->driver_info & HCI_SNIFFER)
885 if (intf->cur_altsetting->desc.bInterfaceNumber > 0)
888 /* Find endpoints that we need */
889 uif = intf->cur_altsetting;
890 for (e = 0; e < uif->desc.bNumEndpoints; e++) {
891 ep = &uif->endpoint[e];
893 switch (ep->desc.bmAttributes & USB_ENDPOINT_XFERTYPE_MASK) {
894 case USB_ENDPOINT_XFER_INT:
895 if (ep->desc.bEndpointAddress & USB_DIR_IN)
899 case USB_ENDPOINT_XFER_BULK:
900 if (ep->desc.bEndpointAddress & USB_DIR_IN)
908 if (!bulk_in_ep || !bulk_out_ep || !intr_in_ep) {
909 BT_DBG("Bulk endpoints not found");
913 if (!(husb = kzalloc(sizeof(struct hci_usb), GFP_KERNEL))) {
914 BT_ERR("Can't allocate: control structure");
919 husb->bulk_out_ep = bulk_out_ep;
920 husb->bulk_in_ep = bulk_in_ep;
921 husb->intr_in_ep = intr_in_ep;
923 if (id->driver_info & HCI_DIGIANSWER)
924 husb->ctrl_req = USB_TYPE_VENDOR;
926 husb->ctrl_req = USB_TYPE_CLASS;
928 /* Find isochronous endpoints that we can use */
934 #ifdef CONFIG_BT_HCIUSB_SCO
935 if (isoc && !(id->driver_info & (HCI_BROKEN_ISOC | HCI_SNIFFER)))
936 isoc_iface = usb_ifnum_to_if(udev, isoc_ifnum);
940 struct usb_host_endpoint *isoc_out_ep = NULL;
941 struct usb_host_endpoint *isoc_in_ep = NULL;
943 for (a = 0; a < isoc_iface->num_altsetting; a++) {
944 uif = &isoc_iface->altsetting[a];
945 for (e = 0; e < uif->desc.bNumEndpoints; e++) {
946 ep = &uif->endpoint[e];
948 switch (ep->desc.bmAttributes & USB_ENDPOINT_XFERTYPE_MASK) {
949 case USB_ENDPOINT_XFER_ISOC:
950 if (le16_to_cpu(ep->desc.wMaxPacketSize) < size ||
951 uif->desc.bAlternateSetting != isoc)
953 size = le16_to_cpu(ep->desc.wMaxPacketSize);
955 isoc_alts = uif->desc.bAlternateSetting;
957 if (ep->desc.bEndpointAddress & USB_DIR_IN)
966 if (!isoc_in_ep || !isoc_out_ep)
967 BT_DBG("Isoc endpoints not found");
969 BT_DBG("isoc ifnum %d alts %d", isoc_ifnum, isoc_alts);
970 if (usb_driver_claim_interface(&hci_usb_driver, isoc_iface, husb) != 0)
971 BT_ERR("Can't claim isoc interface");
972 else if (usb_set_interface(udev, isoc_ifnum, isoc_alts)) {
973 BT_ERR("Can't set isoc interface settings");
974 husb->isoc_iface = isoc_iface;
975 usb_driver_release_interface(&hci_usb_driver, isoc_iface);
976 husb->isoc_iface = NULL;
978 husb->isoc_iface = isoc_iface;
979 husb->isoc_in_ep = isoc_in_ep;
980 husb->isoc_out_ep = isoc_out_ep;
986 rwlock_init(&husb->completion_lock);
988 for (i = 0; i < 4; i++) {
989 skb_queue_head_init(&husb->transmit_q[i]);
990 _urb_queue_init(&husb->pending_q[i]);
991 _urb_queue_init(&husb->completed_q[i]);
994 /* Initialize and register HCI device */
995 hdev = hci_alloc_dev();
997 BT_ERR("Can't allocate HCI device");
1003 hdev->type = HCI_USB;
1004 hdev->driver_data = husb;
1005 SET_HCIDEV_DEV(hdev, &intf->dev);
1007 hdev->open = hci_usb_open;
1008 hdev->close = hci_usb_close;
1009 hdev->flush = hci_usb_flush;
1010 hdev->send = hci_usb_send_frame;
1011 hdev->destruct = hci_usb_destruct;
1012 hdev->notify = hci_usb_notify;
1014 hdev->owner = THIS_MODULE;
1016 if (reset || id->driver_info & HCI_RESET)
1017 set_bit(HCI_QUIRK_RESET_ON_INIT, &hdev->quirks);
1019 if (force_scofix || id->driver_info & HCI_WRONG_SCO_MTU) {
1020 if (!disable_scofix)
1021 set_bit(HCI_QUIRK_FIXUP_BUFFER_SIZE, &hdev->quirks);
1024 if (id->driver_info & HCI_SNIFFER) {
1025 if (le16_to_cpu(udev->descriptor.bcdDevice) > 0x997)
1026 set_bit(HCI_QUIRK_RAW_DEVICE, &hdev->quirks);
1029 if (id->driver_info & HCI_BCM92035) {
1030 unsigned char cmd[] = { 0x3b, 0xfc, 0x01, 0x00 };
1031 struct sk_buff *skb;
1033 skb = bt_skb_alloc(sizeof(cmd), GFP_KERNEL);
1035 memcpy(skb_put(skb, sizeof(cmd)), cmd, sizeof(cmd));
1036 skb_queue_tail(&hdev->driver_init, skb);
1040 if (hci_register_dev(hdev) < 0) {
1041 BT_ERR("Can't register HCI device");
1046 usb_set_intfdata(intf, husb);
1050 if (husb->isoc_iface)
1051 usb_driver_release_interface(&hci_usb_driver, husb->isoc_iface);
1058 static void hci_usb_disconnect(struct usb_interface *intf)
1060 struct hci_usb *husb = usb_get_intfdata(intf);
1061 struct hci_dev *hdev;
1063 if (!husb || intf == husb->isoc_iface)
1066 usb_set_intfdata(intf, NULL);
1069 BT_DBG("%s", hdev->name);
1071 hci_usb_close(hdev);
1073 if (husb->isoc_iface)
1074 usb_driver_release_interface(&hci_usb_driver, husb->isoc_iface);
1076 if (hci_unregister_dev(hdev) < 0)
1077 BT_ERR("Can't unregister HCI device %s", hdev->name);
1082 static int hci_usb_suspend(struct usb_interface *intf, pm_message_t message)
1084 struct hci_usb *husb = usb_get_intfdata(intf);
1085 struct list_head killed;
1086 unsigned long flags;
1089 if (!husb || intf == husb->isoc_iface)
1092 hci_suspend_dev(husb->hdev);
1094 INIT_LIST_HEAD(&killed);
1096 for (i = 0; i < 4; i++) {
1097 struct _urb_queue *q = &husb->pending_q[i];
1098 struct _urb *_urb, *_tmp;
1100 while ((_urb = _urb_dequeue(q))) {
1101 /* reset queue since _urb_dequeue sets it to NULL */
1103 usb_kill_urb(&_urb->urb);
1104 list_add(&_urb->list, &killed);
1107 spin_lock_irqsave(&q->lock, flags);
1109 list_for_each_entry_safe(_urb, _tmp, &killed, list) {
1110 list_move_tail(&_urb->list, &q->head);
1113 spin_unlock_irqrestore(&q->lock, flags);
1119 static int hci_usb_resume(struct usb_interface *intf)
1121 struct hci_usb *husb = usb_get_intfdata(intf);
1122 unsigned long flags;
1125 if (!husb || intf == husb->isoc_iface)
1128 for (i = 0; i < 4; i++) {
1129 struct _urb_queue *q = &husb->pending_q[i];
1132 spin_lock_irqsave(&q->lock, flags);
1134 list_for_each_entry(_urb, &q->head, list) {
1135 err = usb_submit_urb(&_urb->urb, GFP_ATOMIC);
1140 spin_unlock_irqrestore(&q->lock, flags);
1146 hci_resume_dev(husb->hdev);
1151 static struct usb_driver hci_usb_driver = {
1153 .probe = hci_usb_probe,
1154 .disconnect = hci_usb_disconnect,
1155 .suspend = hci_usb_suspend,
1156 .resume = hci_usb_resume,
1157 .id_table = bluetooth_ids,
1160 static int __init hci_usb_init(void)
1164 BT_INFO("HCI USB driver ver %s", VERSION);
1166 if ((err = usb_register(&hci_usb_driver)) < 0)
1167 BT_ERR("Failed to register HCI USB driver");
1172 static void __exit hci_usb_exit(void)
1174 usb_deregister(&hci_usb_driver);
1177 module_init(hci_usb_init);
1178 module_exit(hci_usb_exit);
1180 module_param(ignore, bool, 0644);
1181 MODULE_PARM_DESC(ignore, "Ignore devices from the matching table");
1183 module_param(ignore_dga, bool, 0644);
1184 MODULE_PARM_DESC(ignore_dga, "Ignore devices with id 08fd:0001");
1186 module_param(ignore_csr, bool, 0644);
1187 MODULE_PARM_DESC(ignore_csr, "Ignore devices with id 0a12:0001");
1189 module_param(ignore_sniffer, bool, 0644);
1190 MODULE_PARM_DESC(ignore_sniffer, "Ignore devices with id 0a12:0002");
1192 module_param(disable_scofix, bool, 0644);
1193 MODULE_PARM_DESC(disable_scofix, "Disable fixup of wrong SCO buffer size");
1195 module_param(force_scofix, bool, 0644);
1196 MODULE_PARM_DESC(force_scofix, "Force fixup of wrong SCO buffers size");
1198 module_param(reset, bool, 0644);
1199 MODULE_PARM_DESC(reset, "Send HCI reset command on initialization");
1201 #ifdef CONFIG_BT_HCIUSB_SCO
1202 module_param(isoc, int, 0644);
1203 MODULE_PARM_DESC(isoc, "Set isochronous transfers for SCO over HCI support");
1206 MODULE_AUTHOR("Maxim Krasnyansky <maxk@qualcomm.com>, Marcel Holtmann <marcel@holtmann.org>");
1207 MODULE_DESCRIPTION("Bluetooth HCI USB driver ver " VERSION);
1208 MODULE_VERSION(VERSION);
1209 MODULE_LICENSE("GPL");