2 * IPWireless 3G UMTS TDD Modem driver (USB connected)
4 * Copyright (C) 2004 Roelf Diedericks <roelfd@inet.co.za>
5 * Copyright (C) 2004 Greg Kroah-Hartman <greg@kroah.com>
7 * This program is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU General Public License as published by
9 * the Free Software Foundation; either version 2 of the License, or
10 * (at your option) any later version.
12 * All information about the device was acquired using SnoopyPro
13 * on MSFT's O/S, and examing the MSFT drivers' debug output
14 * (insanely left _on_ in the enduser version)
16 * It was written out of frustration with the IPWireless USB modem
17 * supplied by Axity3G/Sentech South Africa not supporting
20 * Nobody provided any proprietary information that was not already
21 * available for this device.
23 * The modem adheres to the "3GPP TS 27.007 AT command set for 3G
24 * User Equipment (UE)" standard, available from
25 * http://www.3gpp.org/ftp/Specs/html-info/27007.htm
27 * The code was only tested the IPWireless handheld modem distributed
28 * in South Africa by Sentech.
30 * It may work for Woosh Inc in .nz too, as it appears they use the
33 * There is still some work to be done in terms of handling
34 * DCD, DTR, RTS, CTS which are currently faked.
35 * It's good enough for PPP at this point. It's based off all kinds of
36 * code found in usb/serial and usb/class
40 #include <linux/kernel.h>
41 #include <linux/errno.h>
42 #include <linux/init.h>
43 #include <linux/slab.h>
44 #include <linux/tty.h>
45 #include <linux/tty_flip.h>
46 #include <linux/module.h>
47 #include <linux/spinlock.h>
48 #include <linux/usb.h>
49 #include <linux/usb/serial.h>
50 #include <linux/uaccess.h>
55 #define DRIVER_VERSION "v0.3"
56 #define DRIVER_AUTHOR "Roelf Diedericks"
57 #define DRIVER_DESC "IPWireless tty driver"
59 #define IPW_TTY_MAJOR 240 /* real device node major id, experimental range */
60 #define IPW_TTY_MINORS 256 /* we support 256 devices, dunno why, it'd be insane :) */
62 #define USB_IPW_MAGIC 0x6d02 /* magic number for ipw struct */
66 #define EVENT_BUFFER_SIZE 0xFF
67 #define CHAR2INT16(c1, c0) (((u32)((c1) & 0xff) << 8) + (u32)((c0) & 0xff))
68 #define NUM_BULK_URBS 24
69 #define NUM_CONTROL_URBS 16
71 /* vendor/product pairs that are known work with this driver*/
72 #define IPW_VID 0x0bc3
73 #define IPW_PID 0x0001
76 /* Vendor commands: */
80 ipw_sio_b256000 = 0x000e,
81 ipw_sio_b128000 = 0x001d,
82 ipw_sio_b115200 = 0x0020,
83 ipw_sio_b57600 = 0x0040,
84 ipw_sio_b56000 = 0x0042,
85 ipw_sio_b38400 = 0x0060,
86 ipw_sio_b19200 = 0x00c0,
87 ipw_sio_b14400 = 0x0100,
88 ipw_sio_b9600 = 0x0180,
89 ipw_sio_b4800 = 0x0300,
90 ipw_sio_b2400 = 0x0600,
91 ipw_sio_b1200 = 0x0c00,
96 #define ipw_dtb_7 0x700
97 #define ipw_dtb_8 0x810 /* ok so the define is misleading, I know, but forces 8,n,1 */
98 /* I mean, is there a point to any other setting these days? :) */
100 /* usb control request types : */
101 #define IPW_SIO_RXCTL 0x00 /* control bulk rx channel transmissions, value=1/0 (on/off) */
102 #define IPW_SIO_SET_BAUD 0x01 /* set baud, value=requested ipw_sio_bxxxx */
103 #define IPW_SIO_SET_LINE 0x03 /* set databits, parity. value=ipw_dtb_x */
104 #define IPW_SIO_SET_PIN 0x03 /* set/clear dtr/rts value=ipw_pin_xxx */
105 #define IPW_SIO_POLL 0x08 /* get serial port status byte, call with value=0 */
106 #define IPW_SIO_INIT 0x11 /* initializes ? value=0 (appears as first thing todo on open) */
107 #define IPW_SIO_PURGE 0x12 /* purge all transmissions?, call with value=numchar_to_purge */
108 #define IPW_SIO_HANDFLOW 0x13 /* set xon/xoff limits value=0, and a buffer of 0x10 bytes */
109 #define IPW_SIO_SETCHARS 0x13 /* set the flowcontrol special chars, value=0, buf=6 bytes, */
110 /* last 2 bytes contain flowcontrol chars e.g. 00 00 00 00 11 13 */
112 /* values used for request IPW_SIO_SET_PIN */
113 #define IPW_PIN_SETDTR 0x101
114 #define IPW_PIN_SETRTS 0x202
115 #define IPW_PIN_CLRDTR 0x100
116 #define IPW_PIN_CLRRTS 0x200 /* unconfirmed */
118 /* values used for request IPW_SIO_RXCTL */
119 #define IPW_RXBULK_ON 1
120 #define IPW_RXBULK_OFF 0
122 /* various 16 byte hardcoded transferbuffers used by flow control */
123 #define IPW_BYTES_FLOWINIT { 0x01, 0, 0, 0, 0x40, 0, 0, 0, \
124 0, 0, 0, 0, 0, 0, 0, 0 }
126 /* Interpretation of modem status lines */
127 /* These need sorting out by individually connecting pins and checking
129 * When data is being sent we see 0x30 in the lower byte; this must
130 * contain DSR and CTS ...
132 #define IPW_DSR ((1<<4) | (1<<5))
133 #define IPW_CTS ((1<<5) | (1<<4))
135 #define IPW_WANTS_TO_SEND 0x30
137 static struct usb_device_id usb_ipw_ids[] = {
138 { USB_DEVICE(IPW_VID, IPW_PID) },
142 MODULE_DEVICE_TABLE(usb, usb_ipw_ids);
144 static struct usb_driver usb_ipw_driver = {
146 .probe = usb_serial_probe,
147 .disconnect = usb_serial_disconnect,
148 .id_table = usb_ipw_ids,
154 static void ipw_read_bulk_callback(struct urb *urb)
156 struct usb_serial_port *port = urb->context;
157 unsigned char *data = urb->transfer_buffer;
158 struct tty_struct *tty;
160 int status = urb->status;
162 dbg("%s - port %d", __func__, port->number);
165 dbg("%s - nonzero read bulk status received: %d",
170 usb_serial_debug_data(debug, &port->dev, __func__,
171 urb->actual_length, data);
173 tty = tty_port_tty_get(&port->port);
174 if (tty && urb->actual_length) {
175 tty_buffer_request_room(tty, urb->actual_length);
176 tty_insert_flip_string(tty, data, urb->actual_length);
177 tty_flip_buffer_push(tty);
181 /* Continue trying to always read */
182 usb_fill_bulk_urb(port->read_urb, port->serial->dev,
183 usb_rcvbulkpipe(port->serial->dev,
184 port->bulk_in_endpointAddress),
185 port->read_urb->transfer_buffer,
186 port->read_urb->transfer_buffer_length,
187 ipw_read_bulk_callback, port);
188 result = usb_submit_urb(port->read_urb, GFP_ATOMIC);
191 "%s - failed resubmitting read urb, error %d\n",
196 static int ipw_open(struct tty_struct *tty,
197 struct usb_serial_port *port, struct file *filp)
199 struct usb_device *dev = port->serial->dev;
200 u8 buf_flow_static[16] = IPW_BYTES_FLOWINIT;
206 buf_flow_init = kmemdup(buf_flow_static, 16, GFP_KERNEL);
211 tty->low_latency = 1;
213 /* --1: Tell the modem to initialize (we think) From sniffs this is
214 * always the first thing that gets sent to the modem during
215 * opening of the device */
216 dbg("%s: Sending SIO_INIT (we guess)", __func__);
217 result = usb_control_msg(dev, usb_sndctrlpipe(dev, 0),
219 USB_TYPE_VENDOR | USB_RECIP_INTERFACE | USB_DIR_OUT,
227 "Init of modem failed (error = %d)\n", result);
229 /* reset the bulk pipes */
231 usb_rcvbulkpipe(dev, port->bulk_in_endpointAddress));
233 usb_sndbulkpipe(dev, port->bulk_out_endpointAddress));
235 /*--2: Start reading from the device */
236 dbg("%s: setting up bulk read callback", __func__);
237 usb_fill_bulk_urb(port->read_urb, dev,
238 usb_rcvbulkpipe(dev, port->bulk_in_endpointAddress),
239 port->bulk_in_buffer,
241 ipw_read_bulk_callback, port);
242 result = usb_submit_urb(port->read_urb, GFP_KERNEL);
244 dbg("%s - usb_submit_urb(read bulk) failed with status %d",
247 /*--3: Tell the modem to open the floodgates on the rx bulk channel */
248 dbg("%s:asking modem for RxRead (RXBULK_ON)", __func__);
249 result = usb_control_msg(dev, usb_sndctrlpipe(dev, 0),
251 USB_TYPE_VENDOR | USB_RECIP_INTERFACE | USB_DIR_OUT,
259 "Enabling bulk RxRead failed (error = %d)\n", result);
261 /*--4: setup the initial flowcontrol */
262 dbg("%s:setting init flowcontrol (%s)", __func__, buf_flow_init);
263 result = usb_control_msg(dev, usb_sndctrlpipe(dev, 0),
265 USB_TYPE_VENDOR | USB_RECIP_INTERFACE | USB_DIR_OUT,
273 "initial flowcontrol failed (error = %d)\n", result);
276 /*--5: raise the dtr */
277 dbg("%s:raising dtr", __func__);
278 result = usb_control_msg(dev, usb_sndctrlpipe(dev, 0),
280 USB_TYPE_VENDOR | USB_RECIP_INTERFACE | USB_DIR_OUT,
288 "setting dtr failed (error = %d)\n", result);
290 /*--6: raise the rts */
291 dbg("%s:raising rts", __func__);
292 result = usb_control_msg(dev, usb_sndctrlpipe(dev, 0),
294 USB_TYPE_VENDOR | USB_RECIP_INTERFACE | USB_DIR_OUT,
302 "setting dtr failed (error = %d)\n", result);
304 kfree(buf_flow_init);
308 static void ipw_close(struct tty_struct *tty,
309 struct usb_serial_port *port, struct file *filp)
311 struct usb_device *dev = port->serial->dev;
314 if (tty_hung_up_p(filp)) {
315 dbg("%s: tty_hung_up_p ...", __func__);
319 /*--1: drop the dtr */
320 dbg("%s:dropping dtr", __func__);
321 result = usb_control_msg(dev, usb_sndctrlpipe(dev, 0),
323 USB_TYPE_VENDOR | USB_RECIP_INTERFACE | USB_DIR_OUT,
330 dev_err(&port->dev, "dropping dtr failed (error = %d)\n",
333 /*--2: drop the rts */
334 dbg("%s:dropping rts", __func__);
335 result = usb_control_msg(dev, usb_sndctrlpipe(dev, 0),
336 IPW_SIO_SET_PIN, USB_TYPE_VENDOR |
337 USB_RECIP_INTERFACE | USB_DIR_OUT,
345 "dropping rts failed (error = %d)\n", result);
349 dbg("%s:sending purge", __func__);
350 result = usb_control_msg(dev, usb_sndctrlpipe(dev, 0),
351 IPW_SIO_PURGE, USB_TYPE_VENDOR |
352 USB_RECIP_INTERFACE | USB_DIR_OUT,
359 dev_err(&port->dev, "purge failed (error = %d)\n", result);
362 /* send RXBULK_off (tell modem to stop transmitting bulk data on
364 result = usb_control_msg(dev, usb_sndctrlpipe(dev, 0),
366 USB_TYPE_VENDOR | USB_RECIP_INTERFACE | USB_DIR_OUT,
375 "Disabling bulk RxRead failed (error = %d)\n", result);
377 /* shutdown any in-flight urbs that we know about */
378 usb_kill_urb(port->read_urb);
379 usb_kill_urb(port->write_urb);
382 static void ipw_write_bulk_callback(struct urb *urb)
384 struct usb_serial_port *port = urb->context;
385 int status = urb->status;
389 port->write_urb_busy = 0;
392 dbg("%s - nonzero write bulk status received: %d",
395 usb_serial_port_softint(port);
398 static int ipw_write(struct tty_struct *tty, struct usb_serial_port *port,
399 const unsigned char *buf, int count)
401 struct usb_device *dev = port->serial->dev;
404 dbg("%s: TOP: count=%d, in_interrupt=%ld", __func__,
405 count, in_interrupt());
408 dbg("%s - write request of 0 bytes", __func__);
412 spin_lock_bh(&port->lock);
413 if (port->write_urb_busy) {
414 spin_unlock_bh(&port->lock);
415 dbg("%s - already writing", __func__);
418 port->write_urb_busy = 1;
419 spin_unlock_bh(&port->lock);
421 count = min(count, port->bulk_out_size);
422 memcpy(port->bulk_out_buffer, buf, count);
424 dbg("%s count now:%d", __func__, count);
426 usb_fill_bulk_urb(port->write_urb, dev,
427 usb_sndbulkpipe(dev, port->bulk_out_endpointAddress),
428 port->write_urb->transfer_buffer,
430 ipw_write_bulk_callback,
433 ret = usb_submit_urb(port->write_urb, GFP_ATOMIC);
435 port->write_urb_busy = 0;
436 dbg("%s - usb_submit_urb(write bulk) failed with error = %d",
441 dbg("%s returning %d", __func__, count);
445 static int ipw_probe(struct usb_serial_port *port)
450 static int ipw_disconnect(struct usb_serial_port *port)
452 usb_set_serial_port_data(port, NULL);
456 static struct usb_serial_driver ipw_device = {
458 .owner = THIS_MODULE,
461 .description = "IPWireless converter",
462 .usb_driver = &usb_ipw_driver,
463 .id_table = usb_ipw_ids,
467 .port_probe = ipw_probe,
468 .port_remove = ipw_disconnect,
470 .write_bulk_callback = ipw_write_bulk_callback,
471 .read_bulk_callback = ipw_read_bulk_callback,
476 static int usb_ipw_init(void)
480 retval = usb_serial_register(&ipw_device);
483 retval = usb_register(&usb_ipw_driver);
485 usb_serial_deregister(&ipw_device);
488 printk(KERN_INFO KBUILD_MODNAME ": " DRIVER_VERSION ":"
493 static void usb_ipw_exit(void)
495 usb_deregister(&usb_ipw_driver);
496 usb_serial_deregister(&ipw_device);
499 module_init(usb_ipw_init);
500 module_exit(usb_ipw_exit);
502 /* Module information */
503 MODULE_AUTHOR(DRIVER_AUTHOR);
504 MODULE_DESCRIPTION(DRIVER_DESC);
505 MODULE_LICENSE("GPL");
507 module_param(debug, bool, S_IRUGO | S_IWUSR);
508 MODULE_PARM_DESC(debug, "Debug enabled or not");