[linux-2.6-block.git] / drivers / bluetooth / bfusb.c

/*
 *
 *  AVM BlueFRITZ! USB driver
 *
 *  Copyright (C) 2003-2006  Marcel Holtmann <marcel@holtmann.org>
 *
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
 *  the Free Software Foundation; either version 2 of the License, or
 *  (at your option) any later version.
 *
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License
 *  along with this program; if not, write to the Free Software
 *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 *
 */

#include <linux/module.h>

#include <linux/kernel.h>
#include <linux/init.h>
#include <linux/slab.h>
#include <linux/types.h>
#include <linux/errno.h>
#include <linux/skbuff.h>

#include <linux/device.h>
#include <linux/firmware.h>

#include <linux/usb.h>

#include <net/bluetooth/bluetooth.h>
#include <net/bluetooth/hci_core.h>

#define VERSION "1.2"

static struct usb_driver bfusb_driver;

static const struct usb_device_id bfusb_table[] = {
	/* AVM BlueFRITZ! USB */
	{ USB_DEVICE(0x057c, 0x2200) },

	{ }	/* Terminating entry */
};

MODULE_DEVICE_TABLE(usb, bfusb_table);

#define BFUSB_MAX_BLOCK_SIZE	256

#define BFUSB_BLOCK_TIMEOUT	3000

#define BFUSB_TX_PROCESS	1
#define BFUSB_TX_WAKEUP		2

#define BFUSB_MAX_BULK_TX	2
#define BFUSB_MAX_BULK_RX	2

struct bfusb_data {
	struct hci_dev		*hdev;

	unsigned long		state;

	struct usb_device	*udev;

	unsigned int		bulk_in_ep;
	unsigned int		bulk_out_ep;
	unsigned int		bulk_pkt_size;

	rwlock_t		lock;

	struct sk_buff_head	transmit_q;

	struct sk_buff		*reassembly;

	atomic_t		pending_tx;
	struct sk_buff_head	pending_q;
	struct sk_buff_head	completed_q;
};

struct bfusb_data_scb {
	struct urb *urb;
};

static void bfusb_tx_complete(struct urb *urb);
static void bfusb_rx_complete(struct urb *urb);

static struct urb *bfusb_get_completed(struct bfusb_data *data)
{
	struct sk_buff *skb;
	struct urb *urb = NULL;

	BT_DBG("bfusb %p", data);

	skb = skb_dequeue(&data->completed_q);
	if (skb) {
		urb = ((struct bfusb_data_scb *) skb->cb)->urb;
		kfree_skb(skb);
	}

	return urb;
}

static void bfusb_unlink_urbs(struct bfusb_data *data)
{
	struct sk_buff *skb;
	struct urb *urb;

	BT_DBG("bfusb %p", data);

	while ((skb = skb_dequeue(&data->pending_q))) {
		urb = ((struct bfusb_data_scb *) skb->cb)->urb;
		usb_kill_urb(urb);
		skb_queue_tail(&data->completed_q, skb);
	}

	while ((urb = bfusb_get_completed(data)))
		usb_free_urb(urb);
}

static int bfusb_send_bulk(struct bfusb_data *data, struct sk_buff *skb)
{
	struct bfusb_data_scb *scb = (void *) skb->cb;
	struct urb *urb = bfusb_get_completed(data);
	int err, pipe;

	BT_DBG("bfusb %p skb %p len %d", data, skb, skb->len);

	if (!urb && !(urb = usb_alloc_urb(0, GFP_ATOMIC)))
		return -ENOMEM;

	pipe = usb_sndbulkpipe(data->udev, data->bulk_out_ep);

	usb_fill_bulk_urb(urb, data->udev, pipe, skb->data, skb->len,
			bfusb_tx_complete, skb);

	scb->urb = urb;

	skb_queue_tail(&data->pending_q, skb);

	err = usb_submit_urb(urb, GFP_ATOMIC);
	if (err) {
		BT_ERR("%s bulk tx submit failed urb %p err %d", 
					data->hdev->name, urb, err);
		skb_unlink(skb, &data->pending_q);
		usb_free_urb(urb);
	} else
		atomic_inc(&data->pending_tx);

	return err;
}

static void bfusb_tx_wakeup(struct bfusb_data *data)
{
	struct sk_buff *skb;

	BT_DBG("bfusb %p", data);

	if (test_and_set_bit(BFUSB_TX_PROCESS, &data->state)) {
		set_bit(BFUSB_TX_WAKEUP, &data->state);
		return;
	}

	do {
		clear_bit(BFUSB_TX_WAKEUP, &data->state);

		while ((atomic_read(&data->pending_tx) < BFUSB_MAX_BULK_TX) &&
				(skb = skb_dequeue(&data->transmit_q))) {
			if (bfusb_send_bulk(data, skb) < 0) {
				skb_queue_head(&data->transmit_q, skb);
				break;
			}
		}

	} while (test_bit(BFUSB_TX_WAKEUP, &data->state));

	clear_bit(BFUSB_TX_PROCESS, &data->state);
}

static void bfusb_tx_complete(struct urb *urb)
{
	struct sk_buff *skb = (struct sk_buff *) urb->context;
	struct bfusb_data *data = (struct bfusb_data *) skb->dev;

	BT_DBG("bfusb %p urb %p skb %p len %d", data, urb, skb, skb->len);

	atomic_dec(&data->pending_tx);

	if (!test_bit(HCI_RUNNING, &data->hdev->flags))
		return;

	if (!urb->status)
		data->hdev->stat.byte_tx += skb->len;
	else
		data->hdev->stat.err_tx++;

	read_lock(&data->lock);

	skb_unlink(skb, &data->pending_q);
	skb_queue_tail(&data->completed_q, skb);

	bfusb_tx_wakeup(data);

	read_unlock(&data->lock);
}


static int bfusb_rx_submit(struct bfusb_data *data, struct urb *urb)
{
	struct bfusb_data_scb *scb;
	struct sk_buff *skb;
	int err, pipe, size = HCI_MAX_FRAME_SIZE + 32;

	BT_DBG("bfusb %p urb %p", data, urb);

	if (!urb && !(urb = usb_alloc_urb(0, GFP_ATOMIC)))
		return -ENOMEM;

	skb = bt_skb_alloc(size, GFP_ATOMIC);
	if (!skb) {
		usb_free_urb(urb);
		return -ENOMEM;
	}

	skb->dev = (void *) data;

	scb = (struct bfusb_data_scb *) skb->cb;
	scb->urb = urb;

	pipe = usb_rcvbulkpipe(data->udev, data->bulk_in_ep);

	usb_fill_bulk_urb(urb, data->udev, pipe, skb->data, size,
			bfusb_rx_complete, skb);

	skb_queue_tail(&data->pending_q, skb);

	err = usb_submit_urb(urb, GFP_ATOMIC);
	if (err) {
		BT_ERR("%s bulk rx submit failed urb %p err %d",
					data->hdev->name, urb, err);
		skb_unlink(skb, &data->pending_q);
		kfree_skb(skb);
		usb_free_urb(urb);
	}

	return err;
}

static inline int bfusb_recv_block(struct bfusb_data *data, int hdr, unsigned char *buf, int len)
{
	BT_DBG("bfusb %p hdr 0x%02x data %p len %d", data, hdr, buf, len);

	if (hdr & 0x10) {
		BT_ERR("%s error in block", data->hdev->name);
		kfree_skb(data->reassembly);
		data->reassembly = NULL;
		return -EIO;
	}

	if (hdr & 0x04) {
		struct sk_buff *skb;
		unsigned char pkt_type;
		int pkt_len = 0;

		if (data->reassembly) {
			BT_ERR("%s unexpected start block", data->hdev->name);
			kfree_skb(data->reassembly);
			data->reassembly = NULL;
		}

		if (len < 1) {
			BT_ERR("%s no packet type found", data->hdev->name);
			return -EPROTO;
		}

		pkt_type = *buf++; len--;

		switch (pkt_type) {
		case HCI_EVENT_PKT:
			if (len >= HCI_EVENT_HDR_SIZE) {
				struct hci_event_hdr *hdr = (struct hci_event_hdr *) buf;
				pkt_len = HCI_EVENT_HDR_SIZE + hdr->plen;
			} else {
				BT_ERR("%s event block is too short", data->hdev->name);
				return -EILSEQ;
			}
			break;

		case HCI_ACLDATA_PKT:
			if (len >= HCI_ACL_HDR_SIZE) {
				struct hci_acl_hdr *hdr = (struct hci_acl_hdr *) buf;
				pkt_len = HCI_ACL_HDR_SIZE + __le16_to_cpu(hdr->dlen);
			} else {
				BT_ERR("%s data block is too short", data->hdev->name);
				return -EILSEQ;
			}
			break;

		case HCI_SCODATA_PKT:
			if (len >= HCI_SCO_HDR_SIZE) {
				struct hci_sco_hdr *hdr = (struct hci_sco_hdr *) buf;
				pkt_len = HCI_SCO_HDR_SIZE + hdr->dlen;
			} else {
				BT_ERR("%s audio block is too short", data->hdev->name);
				return -EILSEQ;
			}
			break;
		}

		skb = bt_skb_alloc(pkt_len, GFP_ATOMIC);
		if (!skb) {
			BT_ERR("%s no memory for the packet", data->hdev->name);
			return -ENOMEM;
		}

		bt_cb(skb)->pkt_type = pkt_type;

		data->reassembly = skb;
	} else {
		if (!data->reassembly) {
			BT_ERR("%s unexpected continuation block", data->hdev->name);
			return -EIO;
		}
	}

	if (len > 0)
		memcpy(skb_put(data->reassembly, len), buf, len);

	if (hdr & 0x08) {
		hci_recv_frame(data->hdev, data->reassembly);
		data->reassembly = NULL;
	}

	return 0;
}

static void bfusb_rx_complete(struct urb *urb)
{
	struct sk_buff *skb = (struct sk_buff *) urb->context;
	struct bfusb_data *data = (struct bfusb_data *) skb->dev;
	unsigned char *buf = urb->transfer_buffer;
	int count = urb->actual_length;
	int err, hdr, len;

	BT_DBG("bfusb %p urb %p skb %p len %d", data, urb, skb, skb->len);

	read_lock(&data->lock);

	if (!test_bit(HCI_RUNNING, &data->hdev->flags))
		goto unlock;

	if (urb->status || !count)
		goto resubmit;

	data->hdev->stat.byte_rx += count;

	skb_put(skb, count);

	while (count) {
		hdr = buf[0] | (buf[1] << 8);

		if (hdr & 0x4000) {
			len = 0;
			count -= 2;
			buf   += 2;
		} else {
			len = (buf[2] == 0) ? 256 : buf[2];
			count -= 3;
			buf   += 3;
		}

		if (count < len) {
			BT_ERR("%s block extends over URB buffer ranges",
					data->hdev->name);
		}

		if ((hdr & 0xe1) == 0xc1)
			bfusb_recv_block(data, hdr, buf, len);

		count -= len;
		buf   += len;
	}

	skb_unlink(skb, &data->pending_q);
	kfree_skb(skb);

	bfusb_rx_submit(data, urb);

	read_unlock(&data->lock);

	return;

resubmit:
	urb->dev = data->udev;

	err = usb_submit_urb(urb, GFP_ATOMIC);
	if (err) {
		BT_ERR("%s bulk resubmit failed urb %p err %d",
					data->hdev->name, urb, err);
	}

unlock:
	read_unlock(&data->lock);
}

static int bfusb_open(struct hci_dev *hdev)
{
	struct bfusb_data *data = hci_get_drvdata(hdev);
	unsigned long flags;
	int i, err;

	BT_DBG("hdev %p bfusb %p", hdev, data);

	if (test_and_set_bit(HCI_RUNNING, &hdev->flags))
		return 0;

	write_lock_irqsave(&data->lock, flags);

	err = bfusb_rx_submit(data, NULL);
	if (!err) {
		for (i = 1; i < BFUSB_MAX_BULK_RX; i++)
			bfusb_rx_submit(data, NULL);
	} else {
		clear_bit(HCI_RUNNING, &hdev->flags);
	}

	write_unlock_irqrestore(&data->lock, flags);

	return err;
}

static int bfusb_flush(struct hci_dev *hdev)
{
	struct bfusb_data *data = hci_get_drvdata(hdev);

	BT_DBG("hdev %p bfusb %p", hdev, data);

	skb_queue_purge(&data->transmit_q);

	return 0;
}

static int bfusb_close(struct hci_dev *hdev)
{
	struct bfusb_data *data = hci_get_drvdata(hdev);
	unsigned long flags;

	BT_DBG("hdev %p bfusb %p", hdev, data);

	if (!test_and_clear_bit(HCI_RUNNING, &hdev->flags))
		return 0;

	write_lock_irqsave(&data->lock, flags);
	write_unlock_irqrestore(&data->lock, flags);

	bfusb_unlink_urbs(data);
	bfusb_flush(hdev);

	return 0;
}

static int bfusb_send_frame(struct hci_dev *hdev, struct sk_buff *skb)
{
	struct bfusb_data *data = hci_get_drvdata(hdev);
	struct sk_buff *nskb;
	unsigned char buf[3];
	int sent = 0, size, count;

	BT_DBG("hdev %p skb %p type %d len %d", hdev, skb, bt_cb(skb)->pkt_type, skb->len);

	if (!test_bit(HCI_RUNNING, &hdev->flags))
		return -EBUSY;

	switch (bt_cb(skb)->pkt_type) {
	case HCI_COMMAND_PKT:
		hdev->stat.cmd_tx++;
		break;
	case HCI_ACLDATA_PKT:
		hdev->stat.acl_tx++;
		break;
	case HCI_SCODATA_PKT:
		hdev->stat.sco_tx++;
		break;
	};

	/* Prepend skb with frame type */
	memcpy(skb_push(skb, 1), &bt_cb(skb)->pkt_type, 1);

	count = skb->len;

	/* Max HCI frame size seems to be 1511 + 1 */
	nskb = bt_skb_alloc(count + 32, GFP_ATOMIC);
	if (!nskb) {
		BT_ERR("Can't allocate memory for new packet");
		return -ENOMEM;
	}

	nskb->dev = (void *) data;

	while (count) {
		size = min_t(uint, count, BFUSB_MAX_BLOCK_SIZE);

		buf[0] = 0xc1 | ((sent == 0) ? 0x04 : 0) | ((count == size) ? 0x08 : 0);
		buf[1] = 0x00;
		buf[2] = (size == BFUSB_MAX_BLOCK_SIZE) ? 0 : size;

		memcpy(skb_put(nskb, 3), buf, 3);
		skb_copy_from_linear_data_offset(skb, sent, skb_put(nskb, size), size);

		sent  += size;
		count -= size;
	}

	/* Don't send frame with multiple size of bulk max packet */
	if ((nskb->len % data->bulk_pkt_size) == 0) {
		buf[0] = 0xdd;
		buf[1] = 0x00;
		memcpy(skb_put(nskb, 2), buf, 2);
	}

	read_lock(&data->lock);

	skb_queue_tail(&data->transmit_q, nskb);
	bfusb_tx_wakeup(data);

	read_unlock(&data->lock);

	kfree_skb(skb);

	return 0;
}

static int bfusb_load_firmware(struct bfusb_data *data,
			       const unsigned char *firmware, int count)
{
	unsigned char *buf;
	int err, pipe, len, size, sent = 0;

	BT_DBG("bfusb %p udev %p", data, data->udev);

	BT_INFO("BlueFRITZ! USB loading firmware");

	buf = kmalloc(BFUSB_MAX_BLOCK_SIZE + 3, GFP_KERNEL);
	if (!buf) {
		BT_ERR("Can't allocate memory chunk for firmware");
		return -ENOMEM;
	}

	pipe = usb_sndctrlpipe(data->udev, 0);

	if (usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
				0, 1, 0, NULL, 0, USB_CTRL_SET_TIMEOUT) < 0) {
		BT_ERR("Can't change to loading configuration");
		kfree(buf);
		return -EBUSY;
	}

	data->udev->toggle[0] = data->udev->toggle[1] = 0;

	pipe = usb_sndbulkpipe(data->udev, data->bulk_out_ep);

	while (count) {
		size = min_t(uint, count, BFUSB_MAX_BLOCK_SIZE + 3);

		memcpy(buf, firmware + sent, size);

		err = usb_bulk_msg(data->udev, pipe, buf, size,
					&len, BFUSB_BLOCK_TIMEOUT);

		if (err || (len != size)) {
			BT_ERR("Error in firmware loading");
			goto error;
		}

		sent  += size;
		count -= size;
	}

	err = usb_bulk_msg(data->udev, pipe, NULL, 0,
					&len, BFUSB_BLOCK_TIMEOUT);
	if (err < 0) {
		BT_ERR("Error in null packet request");
		goto error;
	}

	pipe = usb_sndctrlpipe(data->udev, 0);

	err = usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
				0, 2, 0, NULL, 0, USB_CTRL_SET_TIMEOUT);
	if (err < 0) {
		BT_ERR("Can't change to running configuration");
		goto error;
	}

	data->udev->toggle[0] = data->udev->toggle[1] = 0;

	BT_INFO("BlueFRITZ! USB device ready");

	kfree(buf);
	return 0;

error:
	kfree(buf);

	pipe = usb_sndctrlpipe(data->udev, 0);

	usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
				0, 0, 0, NULL, 0, USB_CTRL_SET_TIMEOUT);

	return err;
}

static int bfusb_probe(struct usb_interface *intf, const struct usb_device_id *id)
{
	const struct firmware *firmware;
	struct usb_device *udev = interface_to_usbdev(intf);
	struct usb_host_endpoint *bulk_out_ep;
	struct usb_host_endpoint *bulk_in_ep;
	struct hci_dev *hdev;
	struct bfusb_data *data;

	BT_DBG("intf %p id %p", intf, id);

	/* Check number of endpoints */
	if (intf->cur_altsetting->desc.bNumEndpoints < 2)
		return -EIO;

	bulk_out_ep = &intf->cur_altsetting->endpoint[0];
	bulk_in_ep  = &intf->cur_altsetting->endpoint[1];

	if (!bulk_out_ep || !bulk_in_ep) {
		BT_ERR("Bulk endpoints not found");
		goto done;
	}

	/* Initialize control structure and load firmware */
	data = devm_kzalloc(&intf->dev, sizeof(struct bfusb_data), GFP_KERNEL);
	if (!data) {
		BT_ERR("Can't allocate memory for control structure");
		goto done;
	}

	data->udev = udev;
	data->bulk_in_ep    = bulk_in_ep->desc.bEndpointAddress;
	data->bulk_out_ep   = bulk_out_ep->desc.bEndpointAddress;
	data->bulk_pkt_size = le16_to_cpu(bulk_out_ep->desc.wMaxPacketSize);

	rwlock_init(&data->lock);

	data->reassembly = NULL;

	skb_queue_head_init(&data->transmit_q);
	skb_queue_head_init(&data->pending_q);
	skb_queue_head_init(&data->completed_q);

	if (request_firmware(&firmware, "bfubase.frm", &udev->dev) < 0) {
		BT_ERR("Firmware request failed");
		goto done;
	}

	BT_DBG("firmware data %p size %zu", firmware->data, firmware->size);

	if (bfusb_load_firmware(data, firmware->data, firmware->size) < 0) {
		BT_ERR("Firmware loading failed");
		goto release;
	}

	release_firmware(firmware);

	/* Initialize and register HCI device */
	hdev = hci_alloc_dev();
	if (!hdev) {
		BT_ERR("Can't allocate HCI device");
		goto done;
	}

	data->hdev = hdev;

	hdev->bus = HCI_USB;
	hci_set_drvdata(hdev, data);
	SET_HCIDEV_DEV(hdev, &intf->dev);

	hdev->open  = bfusb_open;
	hdev->close = bfusb_close;
	hdev->flush = bfusb_flush;
	hdev->send  = bfusb_send_frame;

	if (hci_register_dev(hdev) < 0) {
		BT_ERR("Can't register HCI device");
		hci_free_dev(hdev);
		goto done;
	}

	usb_set_intfdata(intf, data);

	return 0;

release:
	release_firmware(firmware);

done:
	return -EIO;
}

static void bfusb_disconnect(struct usb_interface *intf)
{
	struct bfusb_data *data = usb_get_intfdata(intf);
	struct hci_dev *hdev = data->hdev;

	BT_DBG("intf %p", intf);

	if (!hdev)
		return;

	usb_set_intfdata(intf, NULL);

	bfusb_close(hdev);

	hci_unregister_dev(hdev);
	hci_free_dev(hdev);
}

static struct usb_driver bfusb_driver = {
	.name		= "bfusb",
	.probe		= bfusb_probe,
	.disconnect	= bfusb_disconnect,
	.id_table	= bfusb_table,
	.disable_hub_initiated_lpm = 1,
};

module_usb_driver(bfusb_driver);

MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
MODULE_DESCRIPTION("BlueFRITZ! USB driver ver " VERSION);
MODULE_VERSION(VERSION);
MODULE_LICENSE("GPL");
MODULE_FIRMWARE("bfubase.frm");
Commit	Line	Data
1da177e4 LT	1	/*
	2	*
	3	* AVM BlueFRITZ! USB driver
	4	*
9c724357	5	* Copyright (C) 2003-2006 Marcel Holtmann <marcel@holtmann.org>
1da177e4 LT	6	*
	7	*
	8	* This program is free software; you can redistribute it and/or modify
	9	* it under the terms of the GNU General Public License as published by
	10	* the Free Software Foundation; either version 2 of the License, or
	11	* (at your option) any later version.
	12	*
	13	* This program is distributed in the hope that it will be useful,
	14	* but WITHOUT ANY WARRANTY; without even the implied warranty of
	15	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	16	* GNU General Public License for more details.
	17	*
	18	* You should have received a copy of the GNU General Public License
	19	* along with this program; if not, write to the Free Software
	20	* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
	21	*
	22	*/
	23
1da177e4 LT	24	#include <linux/module.h>
	25
	26	#include <linux/kernel.h>
	27	#include <linux/init.h>
	28	#include <linux/slab.h>
	29	#include <linux/types.h>
1da177e4 LT	30	#include <linux/errno.h>
	31	#include <linux/skbuff.h>
	32
	33	#include <linux/device.h>
	34	#include <linux/firmware.h>
	35
	36	#include <linux/usb.h>
	37
	38	#include <net/bluetooth/bluetooth.h>
	39	#include <net/bluetooth/hci_core.h>
	40
943d56b0	41	#define VERSION "1.2"
1da177e4 LT	42
	43	static struct usb_driver bfusb_driver;
	44
9712d59a	45	static const struct usb_device_id bfusb_table[] = {
1da177e4 LT	46	/* AVM BlueFRITZ! USB */
	47	{ USB_DEVICE(0x057c, 0x2200) },
	48
	49	{ } /* Terminating entry */
	50	};
	51
	52	MODULE_DEVICE_TABLE(usb, bfusb_table);
	53
1da177e4 LT	54	#define BFUSB_MAX_BLOCK_SIZE 256
	55
	56	#define BFUSB_BLOCK_TIMEOUT 3000
	57
	58	#define BFUSB_TX_PROCESS 1
	59	#define BFUSB_TX_WAKEUP 2
	60
	61	#define BFUSB_MAX_BULK_TX 2
	62	#define BFUSB_MAX_BULK_RX 2
	63
9c724357	64	struct bfusb_data {
1da177e4 LT	65	struct hci_dev *hdev;
	66
	67	unsigned long state;
	68
	69	struct usb_device *udev;
	70
	71	unsigned int bulk_in_ep;
	72	unsigned int bulk_out_ep;
	73	unsigned int bulk_pkt_size;
	74
	75	rwlock_t lock;
	76
	77	struct sk_buff_head transmit_q;
	78
	79	struct sk_buff *reassembly;
	80
	81	atomic_t pending_tx;
	82	struct sk_buff_head pending_q;
	83	struct sk_buff_head completed_q;
	84	};
	85
9c724357	86	struct bfusb_data_scb {
1da177e4 LT	87	struct urb *urb;
	88	};
	89
7d12e780 DH	90	static void bfusb_tx_complete(struct urb *urb);
7d12e780 DH	91	static void bfusb_rx_complete(struct urb *urb);
1da177e4	92
9c724357	93	static struct urb bfusb_get_completed(struct bfusb_data data)
1da177e4 LT	94	{
	95	struct sk_buff *skb;
	96	struct urb *urb = NULL;
	97
9c724357	98	BT_DBG("bfusb %p", data);
1da177e4	99
9c724357	100	skb = skb_dequeue(&data->completed_q);
1da177e4	101	if (skb) {
9c724357	102	urb = ((struct bfusb_data_scb *) skb->cb)->urb;
1da177e4 LT	103	kfree_skb(skb);
	104	}
	105
	106	return urb;
	107	}
	108
9c724357	109	static void bfusb_unlink_urbs(struct bfusb_data *data)
1da177e4 LT	110	{
	111	struct sk_buff *skb;
	112	struct urb *urb;
	113
9c724357	114	BT_DBG("bfusb %p", data);
1da177e4	115
9c724357 MH	116	while ((skb = skb_dequeue(&data->pending_q))) {
9c724357 MH	117	urb = ((struct bfusb_data_scb *) skb->cb)->urb;
1da177e4	118	usb_kill_urb(urb);
9c724357	119	skb_queue_tail(&data->completed_q, skb);
1da177e4 LT	120	}
1da177e4 LT	121
9c724357	122	while ((urb = bfusb_get_completed(data)))
1da177e4 LT	123	usb_free_urb(urb);
	124	}
	125
9c724357	126	static int bfusb_send_bulk(struct bfusb_data data, struct sk_buff skb)
1da177e4	127	{
9c724357 MH	128	struct bfusb_data_scb scb = (void ) skb->cb;
9c724357 MH	129	struct urb *urb = bfusb_get_completed(data);
1da177e4 LT	130	int err, pipe;
1da177e4 LT	131
9c724357	132	BT_DBG("bfusb %p skb %p len %d", data, skb, skb->len);
1da177e4 LT	133
	134	if (!urb && !(urb = usb_alloc_urb(0, GFP_ATOMIC)))
	135	return -ENOMEM;
	136
9c724357	137	pipe = usb_sndbulkpipe(data->udev, data->bulk_out_ep);
1da177e4	138
9c724357	139	usb_fill_bulk_urb(urb, data->udev, pipe, skb->data, skb->len,
1da177e4 LT	140	bfusb_tx_complete, skb);
	141
	142	scb->urb = urb;
	143
9c724357	144	skb_queue_tail(&data->pending_q, skb);
1da177e4 LT	145
	146	err = usb_submit_urb(urb, GFP_ATOMIC);
	147	if (err) {
	148	BT_ERR("%s bulk tx submit failed urb %p err %d",
9c724357 MH	149	data->hdev->name, urb, err);
9c724357 MH	150	skb_unlink(skb, &data->pending_q);
1da177e4 LT	151	usb_free_urb(urb);
1da177e4 LT	152	} else
9c724357	153	atomic_inc(&data->pending_tx);
1da177e4 LT	154
	155	return err;
	156	}
	157
9c724357	158	static void bfusb_tx_wakeup(struct bfusb_data *data)
1da177e4 LT	159	{
	160	struct sk_buff *skb;
	161
9c724357	162	BT_DBG("bfusb %p", data);
1da177e4	163
9c724357 MH	164	if (test_and_set_bit(BFUSB_TX_PROCESS, &data->state)) {
9c724357 MH	165	set_bit(BFUSB_TX_WAKEUP, &data->state);
1da177e4 LT	166	return;
	167	}
	168
	169	do {
9c724357	170	clear_bit(BFUSB_TX_WAKEUP, &data->state);
1da177e4	171
9c724357 MH	172	while ((atomic_read(&data->pending_tx) < BFUSB_MAX_BULK_TX) &&
	173	(skb = skb_dequeue(&data->transmit_q))) {
	174	if (bfusb_send_bulk(data, skb) < 0) {
	175	skb_queue_head(&data->transmit_q, skb);
1da177e4 LT	176	break;
	177	}
	178	}
	179
9c724357	180	} while (test_bit(BFUSB_TX_WAKEUP, &data->state));
1da177e4	181
9c724357	182	clear_bit(BFUSB_TX_PROCESS, &data->state);
1da177e4 LT	183	}
1da177e4 LT	184
7d12e780	185	static void bfusb_tx_complete(struct urb *urb)
1da177e4 LT	186	{
1da177e4 LT	187	struct sk_buff skb = (struct sk_buff ) urb->context;
9c724357	188	struct bfusb_data data = (struct bfusb_data ) skb->dev;
1da177e4	189
9c724357	190	BT_DBG("bfusb %p urb %p skb %p len %d", data, urb, skb, skb->len);
1da177e4	191
9c724357	192	atomic_dec(&data->pending_tx);
1da177e4	193
9c724357	194	if (!test_bit(HCI_RUNNING, &data->hdev->flags))
1da177e4 LT	195	return;
	196
	197	if (!urb->status)
9c724357	198	data->hdev->stat.byte_tx += skb->len;
1da177e4	199	else
9c724357	200	data->hdev->stat.err_tx++;
1da177e4	201
9c724357	202	read_lock(&data->lock);
1da177e4	203
9c724357 MH	204	skb_unlink(skb, &data->pending_q);
9c724357 MH	205	skb_queue_tail(&data->completed_q, skb);
1da177e4	206
9c724357	207	bfusb_tx_wakeup(data);
1da177e4	208
9c724357	209	read_unlock(&data->lock);
1da177e4 LT	210	}
	211
	212
9c724357	213	static int bfusb_rx_submit(struct bfusb_data data, struct urb urb)
1da177e4	214	{
9c724357	215	struct bfusb_data_scb *scb;
1da177e4 LT	216	struct sk_buff *skb;
	217	int err, pipe, size = HCI_MAX_FRAME_SIZE + 32;
	218
a418b893	219	BT_DBG("bfusb %p urb %p", data, urb);
1da177e4 LT	220
	221	if (!urb && !(urb = usb_alloc_urb(0, GFP_ATOMIC)))
	222	return -ENOMEM;
	223
9c724357 MH	224	skb = bt_skb_alloc(size, GFP_ATOMIC);
9c724357 MH	225	if (!skb) {
1da177e4 LT	226	usb_free_urb(urb);
	227	return -ENOMEM;
	228	}
	229
9c724357	230	skb->dev = (void *) data;
1da177e4	231
9c724357	232	scb = (struct bfusb_data_scb *) skb->cb;
1da177e4 LT	233	scb->urb = urb;
1da177e4 LT	234
9c724357	235	pipe = usb_rcvbulkpipe(data->udev, data->bulk_in_ep);
1da177e4	236
9c724357	237	usb_fill_bulk_urb(urb, data->udev, pipe, skb->data, size,
1da177e4 LT	238	bfusb_rx_complete, skb);
1da177e4 LT	239
9c724357	240	skb_queue_tail(&data->pending_q, skb);
1da177e4 LT	241
	242	err = usb_submit_urb(urb, GFP_ATOMIC);
	243	if (err) {
	244	BT_ERR("%s bulk rx submit failed urb %p err %d",
9c724357 MH	245	data->hdev->name, urb, err);
9c724357 MH	246	skb_unlink(skb, &data->pending_q);
1da177e4 LT	247	kfree_skb(skb);
	248	usb_free_urb(urb);
	249	}
	250
	251	return err;
	252	}
	253
9c724357	254	static inline int bfusb_recv_block(struct bfusb_data data, int hdr, unsigned char buf, int len)
1da177e4	255	{
9c724357	256	BT_DBG("bfusb %p hdr 0x%02x data %p len %d", data, hdr, buf, len);
1da177e4 LT	257
1da177e4 LT	258	if (hdr & 0x10) {
9c724357	259	BT_ERR("%s error in block", data->hdev->name);
b1fb0683	260	kfree_skb(data->reassembly);
9c724357	261	data->reassembly = NULL;
1da177e4 LT	262	return -EIO;
	263	}
	264
	265	if (hdr & 0x04) {
	266	struct sk_buff *skb;
	267	unsigned char pkt_type;
	268	int pkt_len = 0;
	269
9c724357 MH	270	if (data->reassembly) {
	271	BT_ERR("%s unexpected start block", data->hdev->name);
	272	kfree_skb(data->reassembly);
	273	data->reassembly = NULL;
1da177e4 LT	274	}
	275
	276	if (len < 1) {
9c724357	277	BT_ERR("%s no packet type found", data->hdev->name);
1da177e4 LT	278	return -EPROTO;
	279	}
	280
9c724357	281	pkt_type = *buf++; len--;
1da177e4 LT	282
	283	switch (pkt_type) {
	284	case HCI_EVENT_PKT:
	285	if (len >= HCI_EVENT_HDR_SIZE) {
9c724357	286	struct hci_event_hdr hdr = (struct hci_event_hdr ) buf;
1da177e4 LT	287	pkt_len = HCI_EVENT_HDR_SIZE + hdr->plen;
1da177e4 LT	288	} else {
9c724357	289	BT_ERR("%s event block is too short", data->hdev->name);
1da177e4 LT	290	return -EILSEQ;
	291	}
	292	break;
	293
	294	case HCI_ACLDATA_PKT:
	295	if (len >= HCI_ACL_HDR_SIZE) {
9c724357	296	struct hci_acl_hdr hdr = (struct hci_acl_hdr ) buf;
1da177e4 LT	297	pkt_len = HCI_ACL_HDR_SIZE + __le16_to_cpu(hdr->dlen);
1da177e4 LT	298	} else {
9c724357	299	BT_ERR("%s data block is too short", data->hdev->name);
1da177e4 LT	300	return -EILSEQ;
	301	}
	302	break;
	303
	304	case HCI_SCODATA_PKT:
	305	if (len >= HCI_SCO_HDR_SIZE) {
9c724357	306	struct hci_sco_hdr hdr = (struct hci_sco_hdr ) buf;
1da177e4 LT	307	pkt_len = HCI_SCO_HDR_SIZE + hdr->dlen;
1da177e4 LT	308	} else {
9c724357	309	BT_ERR("%s audio block is too short", data->hdev->name);
1da177e4 LT	310	return -EILSEQ;
	311	}
	312	break;
	313	}
	314
	315	skb = bt_skb_alloc(pkt_len, GFP_ATOMIC);
	316	if (!skb) {
9c724357	317	BT_ERR("%s no memory for the packet", data->hdev->name);
1da177e4 LT	318	return -ENOMEM;
	319	}
	320
0d48d939	321	bt_cb(skb)->pkt_type = pkt_type;
1da177e4	322
9c724357	323	data->reassembly = skb;
1da177e4	324	} else {
9c724357 MH	325	if (!data->reassembly) {
9c724357 MH	326	BT_ERR("%s unexpected continuation block", data->hdev->name);
1da177e4 LT	327	return -EIO;
	328	}
	329	}
	330
	331	if (len > 0)
9c724357	332	memcpy(skb_put(data->reassembly, len), buf, len);
1da177e4 LT	333
1da177e4 LT	334	if (hdr & 0x08) {
e1a26170	335	hci_recv_frame(data->hdev, data->reassembly);
9c724357	336	data->reassembly = NULL;
1da177e4 LT	337	}
	338
	339	return 0;
	340	}
	341
7d12e780	342	static void bfusb_rx_complete(struct urb *urb)
1da177e4 LT	343	{
1da177e4 LT	344	struct sk_buff skb = (struct sk_buff ) urb->context;
9c724357	345	struct bfusb_data data = (struct bfusb_data ) skb->dev;
1da177e4 LT	346	unsigned char *buf = urb->transfer_buffer;
	347	int count = urb->actual_length;
	348	int err, hdr, len;
	349
a418b893	350	BT_DBG("bfusb %p urb %p skb %p len %d", data, urb, skb, skb->len);
1da177e4	351
9c724357	352	read_lock(&data->lock);
1da177e4	353
9c724357	354	if (!test_bit(HCI_RUNNING, &data->hdev->flags))
1da177e4 LT	355	goto unlock;
	356
	357	if (urb->status \|\| !count)
	358	goto resubmit;
	359
9c724357	360	data->hdev->stat.byte_rx += count;
1da177e4 LT	361
	362	skb_put(skb, count);
	363
	364	while (count) {
	365	hdr = buf[0] \| (buf[1] << 8);
	366
	367	if (hdr & 0x4000) {
	368	len = 0;
	369	count -= 2;
	370	buf += 2;
	371	} else {
	372	len = (buf[2] == 0) ? 256 : buf[2];
	373	count -= 3;
	374	buf += 3;
	375	}
	376
	377	if (count < len) {
	378	BT_ERR("%s block extends over URB buffer ranges",
9c724357	379	data->hdev->name);
1da177e4 LT	380	}
	381
	382	if ((hdr & 0xe1) == 0xc1)
9c724357	383	bfusb_recv_block(data, hdr, buf, len);
1da177e4 LT	384
	385	count -= len;
	386	buf += len;
	387	}
	388
9c724357	389	skb_unlink(skb, &data->pending_q);
1da177e4 LT	390	kfree_skb(skb);
1da177e4 LT	391
9c724357	392	bfusb_rx_submit(data, urb);
1da177e4	393
9c724357	394	read_unlock(&data->lock);
1da177e4 LT	395
	396	return;
	397
	398	resubmit:
9c724357	399	urb->dev = data->udev;
1da177e4 LT	400
	401	err = usb_submit_urb(urb, GFP_ATOMIC);
	402	if (err) {
	403	BT_ERR("%s bulk resubmit failed urb %p err %d",
9c724357	404	data->hdev->name, urb, err);
1da177e4 LT	405	}
	406
	407	unlock:
9c724357	408	read_unlock(&data->lock);
1da177e4 LT	409	}
1da177e4 LT	410
1da177e4 LT	411	static int bfusb_open(struct hci_dev *hdev)
1da177e4 LT	412	{
155961e8	413	struct bfusb_data *data = hci_get_drvdata(hdev);
1da177e4 LT	414	unsigned long flags;
	415	int i, err;
	416
9c724357	417	BT_DBG("hdev %p bfusb %p", hdev, data);
1da177e4 LT	418
	419	if (test_and_set_bit(HCI_RUNNING, &hdev->flags))
	420	return 0;
	421
9c724357	422	write_lock_irqsave(&data->lock, flags);
1da177e4	423
9c724357	424	err = bfusb_rx_submit(data, NULL);
1da177e4 LT	425	if (!err) {
1da177e4 LT	426	for (i = 1; i < BFUSB_MAX_BULK_RX; i++)
9c724357	427	bfusb_rx_submit(data, NULL);
1da177e4 LT	428	} else {
	429	clear_bit(HCI_RUNNING, &hdev->flags);
	430	}
	431
9c724357	432	write_unlock_irqrestore(&data->lock, flags);
1da177e4 LT	433
	434	return err;
	435	}
	436
	437	static int bfusb_flush(struct hci_dev *hdev)
	438	{
155961e8	439	struct bfusb_data *data = hci_get_drvdata(hdev);
1da177e4	440
9c724357	441	BT_DBG("hdev %p bfusb %p", hdev, data);
1da177e4	442
9c724357	443	skb_queue_purge(&data->transmit_q);
1da177e4 LT	444
	445	return 0;
	446	}
	447
	448	static int bfusb_close(struct hci_dev *hdev)
	449	{
155961e8	450	struct bfusb_data *data = hci_get_drvdata(hdev);
1da177e4 LT	451	unsigned long flags;
1da177e4 LT	452
9c724357	453	BT_DBG("hdev %p bfusb %p", hdev, data);
1da177e4 LT	454
	455	if (!test_and_clear_bit(HCI_RUNNING, &hdev->flags))
	456	return 0;
	457
9c724357 MH	458	write_lock_irqsave(&data->lock, flags);
9c724357 MH	459	write_unlock_irqrestore(&data->lock, flags);
1da177e4	460
9c724357	461	bfusb_unlink_urbs(data);
1da177e4 LT	462	bfusb_flush(hdev);
	463
	464	return 0;
	465	}
	466
7bd8f09f	467	static int bfusb_send_frame(struct hci_dev hdev, struct sk_buff skb)
1da177e4	468	{
aae26277	469	struct bfusb_data *data = hci_get_drvdata(hdev);
1da177e4 LT	470	struct sk_buff *nskb;
	471	unsigned char buf[3];
	472	int sent = 0, size, count;
	473
0d48d939	474	BT_DBG("hdev %p skb %p type %d len %d", hdev, skb, bt_cb(skb)->pkt_type, skb->len);
1da177e4	475
1da177e4 LT	476	if (!test_bit(HCI_RUNNING, &hdev->flags))
	477	return -EBUSY;
	478
0d48d939	479	switch (bt_cb(skb)->pkt_type) {
1da177e4 LT	480	case HCI_COMMAND_PKT:
	481	hdev->stat.cmd_tx++;
	482	break;
	483	case HCI_ACLDATA_PKT:
	484	hdev->stat.acl_tx++;
	485	break;
	486	case HCI_SCODATA_PKT:
	487	hdev->stat.sco_tx++;
	488	break;
	489	};
	490
	491	/* Prepend skb with frame type */
0d48d939	492	memcpy(skb_push(skb, 1), &bt_cb(skb)->pkt_type, 1);
1da177e4 LT	493
	494	count = skb->len;
	495
	496	/* Max HCI frame size seems to be 1511 + 1 */
9c724357 MH	497	nskb = bt_skb_alloc(count + 32, GFP_ATOMIC);
9c724357 MH	498	if (!nskb) {
1da177e4 LT	499	BT_ERR("Can't allocate memory for new packet");
	500	return -ENOMEM;
	501	}
	502
9c724357	503	nskb->dev = (void *) data;
1da177e4 LT	504
	505	while (count) {
	506	size = min_t(uint, count, BFUSB_MAX_BLOCK_SIZE);
	507
	508	buf[0] = 0xc1 \| ((sent == 0) ? 0x04 : 0) \| ((count == size) ? 0x08 : 0);
	509	buf[1] = 0x00;
	510	buf[2] = (size == BFUSB_MAX_BLOCK_SIZE) ? 0 : size;
	511
	512	memcpy(skb_put(nskb, 3), buf, 3);
d626f62b	513	skb_copy_from_linear_data_offset(skb, sent, skb_put(nskb, size), size);
1da177e4 LT	514
	515	sent += size;
	516	count -= size;
	517	}
	518
	519	/* Don't send frame with multiple size of bulk max packet */
9c724357	520	if ((nskb->len % data->bulk_pkt_size) == 0) {
1da177e4 LT	521	buf[0] = 0xdd;
	522	buf[1] = 0x00;
	523	memcpy(skb_put(nskb, 2), buf, 2);
	524	}
	525
9c724357	526	read_lock(&data->lock);
1da177e4	527
9c724357 MH	528	skb_queue_tail(&data->transmit_q, nskb);
9c724357 MH	529	bfusb_tx_wakeup(data);
1da177e4	530
9c724357	531	read_unlock(&data->lock);
1da177e4 LT	532
	533	kfree_skb(skb);
	534
	535	return 0;
	536	}
	537
8187b4fb DW	538	static int bfusb_load_firmware(struct bfusb_data *data,
8187b4fb DW	539	const unsigned char *firmware, int count)
1da177e4 LT	540	{
	541	unsigned char *buf;
	542	int err, pipe, len, size, sent = 0;
	543
9c724357	544	BT_DBG("bfusb %p udev %p", data, data->udev);
1da177e4 LT	545
	546	BT_INFO("BlueFRITZ! USB loading firmware");
	547
7f103a0d DH	548	buf = kmalloc(BFUSB_MAX_BLOCK_SIZE + 3, GFP_KERNEL);
	549	if (!buf) {
	550	BT_ERR("Can't allocate memory chunk for firmware");
	551	return -ENOMEM;
	552	}
	553
9c724357	554	pipe = usb_sndctrlpipe(data->udev, 0);
1da177e4	555
9c724357	556	if (usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
1da177e4 LT	557	0, 1, 0, NULL, 0, USB_CTRL_SET_TIMEOUT) < 0) {
1da177e4 LT	558	BT_ERR("Can't change to loading configuration");
7f103a0d	559	kfree(buf);
1da177e4 LT	560	return -EBUSY;
	561	}
	562
9c724357	563	data->udev->toggle[0] = data->udev->toggle[1] = 0;
1da177e4	564
9c724357	565	pipe = usb_sndbulkpipe(data->udev, data->bulk_out_ep);
1da177e4 LT	566
	567	while (count) {
	568	size = min_t(uint, count, BFUSB_MAX_BLOCK_SIZE + 3);
	569
	570	memcpy(buf, firmware + sent, size);
	571
9c724357	572	err = usb_bulk_msg(data->udev, pipe, buf, size,
1da177e4 LT	573	&len, BFUSB_BLOCK_TIMEOUT);
	574
	575	if (err \|\| (len != size)) {
	576	BT_ERR("Error in firmware loading");
	577	goto error;
	578	}
	579
	580	sent += size;
	581	count -= size;
	582	}
	583
9c724357 MH	584	err = usb_bulk_msg(data->udev, pipe, NULL, 0,
	585	&len, BFUSB_BLOCK_TIMEOUT);
	586	if (err < 0) {
1da177e4 LT	587	BT_ERR("Error in null packet request");
	588	goto error;
	589	}
	590
9c724357	591	pipe = usb_sndctrlpipe(data->udev, 0);
1da177e4	592
9c724357 MH	593	err = usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
	594	0, 2, 0, NULL, 0, USB_CTRL_SET_TIMEOUT);
	595	if (err < 0) {
1da177e4 LT	596	BT_ERR("Can't change to running configuration");
	597	goto error;
	598	}
	599
9c724357	600	data->udev->toggle[0] = data->udev->toggle[1] = 0;
1da177e4 LT	601
	602	BT_INFO("BlueFRITZ! USB device ready");
	603
	604	kfree(buf);
	605	return 0;
	606
	607	error:
	608	kfree(buf);
	609
9c724357	610	pipe = usb_sndctrlpipe(data->udev, 0);
1da177e4	611
9c724357	612	usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
1da177e4 LT	613	0, 0, 0, NULL, 0, USB_CTRL_SET_TIMEOUT);
	614
	615	return err;
	616	}
	617
	618	static int bfusb_probe(struct usb_interface intf, const struct usb_device_id id)
	619	{
	620	const struct firmware *firmware;
	621	struct usb_device *udev = interface_to_usbdev(intf);
	622	struct usb_host_endpoint *bulk_out_ep;
	623	struct usb_host_endpoint *bulk_in_ep;
	624	struct hci_dev *hdev;
9c724357	625	struct bfusb_data *data;
1da177e4 LT	626
	627	BT_DBG("intf %p id %p", intf, id);
	628
1da177e4 LT	629	/* Check number of endpoints */
	630	if (intf->cur_altsetting->desc.bNumEndpoints < 2)
	631	return -EIO;
	632
	633	bulk_out_ep = &intf->cur_altsetting->endpoint[0];
	634	bulk_in_ep = &intf->cur_altsetting->endpoint[1];
	635
	636	if (!bulk_out_ep \|\| !bulk_in_ep) {
	637	BT_ERR("Bulk endpoints not found");
	638	goto done;
	639	}
	640
	641	/* Initialize control structure and load firmware */
0213cd8d	642	data = devm_kzalloc(&intf->dev, sizeof(struct bfusb_data), GFP_KERNEL);
9c724357	643	if (!data) {
1da177e4 LT	644	BT_ERR("Can't allocate memory for control structure");
	645	goto done;
	646	}
	647
9c724357 MH	648	data->udev = udev;
	649	data->bulk_in_ep = bulk_in_ep->desc.bEndpointAddress;
	650	data->bulk_out_ep = bulk_out_ep->desc.bEndpointAddress;
	651	data->bulk_pkt_size = le16_to_cpu(bulk_out_ep->desc.wMaxPacketSize);
1da177e4	652
9c724357	653	rwlock_init(&data->lock);
1da177e4	654
9c724357	655	data->reassembly = NULL;
1da177e4	656
9c724357 MH	657	skb_queue_head_init(&data->transmit_q);
	658	skb_queue_head_init(&data->pending_q);
	659	skb_queue_head_init(&data->completed_q);
1da177e4 LT	660
	661	if (request_firmware(&firmware, "bfubase.frm", &udev->dev) < 0) {
	662	BT_ERR("Firmware request failed");
0213cd8d	663	goto done;
1da177e4 LT	664	}
1da177e4 LT	665
a418b893	666	BT_DBG("firmware data %p size %zu", firmware->data, firmware->size);
1da177e4	667
9c724357	668	if (bfusb_load_firmware(data, firmware->data, firmware->size) < 0) {
1da177e4 LT	669	BT_ERR("Firmware loading failed");
	670	goto release;
	671	}
	672
	673	release_firmware(firmware);
	674
	675	/* Initialize and register HCI device */
	676	hdev = hci_alloc_dev();
	677	if (!hdev) {
	678	BT_ERR("Can't allocate HCI device");
0213cd8d	679	goto done;
1da177e4 LT	680	}
1da177e4 LT	681
9c724357	682	data->hdev = hdev;
1da177e4	683
c13854ce	684	hdev->bus = HCI_USB;
155961e8	685	hci_set_drvdata(hdev, data);
1da177e4 LT	686	SET_HCIDEV_DEV(hdev, &intf->dev);
1da177e4 LT	687
19cf55a2 MH	688	hdev->open = bfusb_open;
	689	hdev->close = bfusb_close;
	690	hdev->flush = bfusb_flush;
	691	hdev->send = bfusb_send_frame;
1da177e4	692
1da177e4 LT	693	if (hci_register_dev(hdev) < 0) {
	694	BT_ERR("Can't register HCI device");
	695	hci_free_dev(hdev);
0213cd8d	696	goto done;
1da177e4 LT	697	}
1da177e4 LT	698
9c724357	699	usb_set_intfdata(intf, data);
1da177e4 LT	700
	701	return 0;
	702
	703	release:
	704	release_firmware(firmware);
	705
1da177e4 LT	706	done:
	707	return -EIO;
	708	}
	709
	710	static void bfusb_disconnect(struct usb_interface *intf)
	711	{
9c724357 MH	712	struct bfusb_data *data = usb_get_intfdata(intf);
9c724357 MH	713	struct hci_dev *hdev = data->hdev;
1da177e4 LT	714
	715	BT_DBG("intf %p", intf);
	716
	717	if (!hdev)
	718	return;
	719
	720	usb_set_intfdata(intf, NULL);
	721
	722	bfusb_close(hdev);
	723
13ea4015	724	hci_unregister_dev(hdev);
1da177e4 LT	725	hci_free_dev(hdev);
	726	}
	727
	728	static struct usb_driver bfusb_driver = {
1da177e4 LT	729	.name = "bfusb",
	730	.probe = bfusb_probe,
	731	.disconnect = bfusb_disconnect,
	732	.id_table = bfusb_table,
e1f12eb6	733	.disable_hub_initiated_lpm = 1,
1da177e4 LT	734	};
1da177e4 LT	735
93f1508c	736	module_usb_driver(bfusb_driver);
1da177e4	737
1da177e4 LT	738	MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
	739	MODULE_DESCRIPTION("BlueFRITZ! USB driver ver " VERSION);
	740	MODULE_VERSION(VERSION);
	741	MODULE_LICENSE("GPL");
2312119a	742	MODULE_FIRMWARE("bfubase.frm");