[linux-block.git] / drivers / bluetooth / bfusb.c

// SPDX-License-Identifier: GPL-2.0-or-later
/*
 *
 *  AVM BlueFRITZ! USB driver
 *
 *  Copyright (C) 2003-2006  Marcel Holtmann <marcel@holtmann.org>
 */

#include <linux/module.h>

#include <linux/kernel.h>
#include <linux/init.h>
#include <linux/slab.h>
#include <linux/types.h>
#include <linux/errno.h>
#include <linux/skbuff.h>

#include <linux/device.h>
#include <linux/firmware.h>

#include <linux/usb.h>

#include <net/bluetooth/bluetooth.h>
#include <net/bluetooth/hci_core.h>

#define VERSION "1.2"

static struct usb_driver bfusb_driver;

static const struct usb_device_id bfusb_table[] = {
	/* AVM BlueFRITZ! USB */
	{ USB_DEVICE(0x057c, 0x2200) },

	{ }	/* Terminating entry */
};

MODULE_DEVICE_TABLE(usb, bfusb_table);

#define BFUSB_MAX_BLOCK_SIZE	256

#define BFUSB_BLOCK_TIMEOUT	3000

#define BFUSB_TX_PROCESS	1
#define BFUSB_TX_WAKEUP		2

#define BFUSB_MAX_BULK_TX	2
#define BFUSB_MAX_BULK_RX	2

struct bfusb_data {
	struct hci_dev		*hdev;

	unsigned long		state;

	struct usb_device	*udev;

	unsigned int		bulk_in_ep;
	unsigned int		bulk_out_ep;
	unsigned int		bulk_pkt_size;

	rwlock_t		lock;

	struct sk_buff_head	transmit_q;

	struct sk_buff		*reassembly;

	atomic_t		pending_tx;
	struct sk_buff_head	pending_q;
	struct sk_buff_head	completed_q;
};

struct bfusb_data_scb {
	struct urb *urb;
};

static void bfusb_tx_complete(struct urb *urb);
static void bfusb_rx_complete(struct urb *urb);

static struct urb *bfusb_get_completed(struct bfusb_data *data)
{
	struct sk_buff *skb;
	struct urb *urb = NULL;

	BT_DBG("bfusb %p", data);

	skb = skb_dequeue(&data->completed_q);
	if (skb) {
		urb = ((struct bfusb_data_scb *) skb->cb)->urb;
		kfree_skb(skb);
	}

	return urb;
}

static void bfusb_unlink_urbs(struct bfusb_data *data)
{
	struct sk_buff *skb;
	struct urb *urb;

	BT_DBG("bfusb %p", data);

	while ((skb = skb_dequeue(&data->pending_q))) {
		urb = ((struct bfusb_data_scb *) skb->cb)->urb;
		usb_kill_urb(urb);
		skb_queue_tail(&data->completed_q, skb);
	}

	while ((urb = bfusb_get_completed(data)))
		usb_free_urb(urb);
}

static int bfusb_send_bulk(struct bfusb_data *data, struct sk_buff *skb)
{
	struct bfusb_data_scb *scb = (void *) skb->cb;
	struct urb *urb = bfusb_get_completed(data);
	int err, pipe;

	BT_DBG("bfusb %p skb %p len %d", data, skb, skb->len);

	if (!urb) {
		urb = usb_alloc_urb(0, GFP_ATOMIC);
		if (!urb)
			return -ENOMEM;
	}

	pipe = usb_sndbulkpipe(data->udev, data->bulk_out_ep);

	usb_fill_bulk_urb(urb, data->udev, pipe, skb->data, skb->len,
			bfusb_tx_complete, skb);

	scb->urb = urb;

	skb_queue_tail(&data->pending_q, skb);

	err = usb_submit_urb(urb, GFP_ATOMIC);
	if (err) {
		bt_dev_err(data->hdev, "bulk tx submit failed urb %p err %d",
			   urb, err);
		skb_unlink(skb, &data->pending_q);
		usb_free_urb(urb);
	} else
		atomic_inc(&data->pending_tx);

	return err;
}

static void bfusb_tx_wakeup(struct bfusb_data *data)
{
	struct sk_buff *skb;

	BT_DBG("bfusb %p", data);

	if (test_and_set_bit(BFUSB_TX_PROCESS, &data->state)) {
		set_bit(BFUSB_TX_WAKEUP, &data->state);
		return;
	}

	do {
		clear_bit(BFUSB_TX_WAKEUP, &data->state);

		while ((atomic_read(&data->pending_tx) < BFUSB_MAX_BULK_TX) &&
				(skb = skb_dequeue(&data->transmit_q))) {
			if (bfusb_send_bulk(data, skb) < 0) {
				skb_queue_head(&data->transmit_q, skb);
				break;
			}
		}

	} while (test_bit(BFUSB_TX_WAKEUP, &data->state));

	clear_bit(BFUSB_TX_PROCESS, &data->state);
}

static void bfusb_tx_complete(struct urb *urb)
{
	struct sk_buff *skb = (struct sk_buff *) urb->context;
	struct bfusb_data *data = (struct bfusb_data *) skb->dev;

	BT_DBG("bfusb %p urb %p skb %p len %d", data, urb, skb, skb->len);

	atomic_dec(&data->pending_tx);

	if (!test_bit(HCI_RUNNING, &data->hdev->flags))
		return;

	if (!urb->status)
		data->hdev->stat.byte_tx += skb->len;
	else
		data->hdev->stat.err_tx++;

	read_lock(&data->lock);

	skb_unlink(skb, &data->pending_q);
	skb_queue_tail(&data->completed_q, skb);

	bfusb_tx_wakeup(data);

	read_unlock(&data->lock);
}


static int bfusb_rx_submit(struct bfusb_data *data, struct urb *urb)
{
	struct bfusb_data_scb *scb;
	struct sk_buff *skb;
	int err, pipe, size = HCI_MAX_FRAME_SIZE + 32;

	BT_DBG("bfusb %p urb %p", data, urb);

	if (!urb) {
		urb = usb_alloc_urb(0, GFP_ATOMIC);
		if (!urb)
			return -ENOMEM;
	}

	skb = bt_skb_alloc(size, GFP_ATOMIC);
	if (!skb) {
		usb_free_urb(urb);
		return -ENOMEM;
	}

	skb->dev = (void *) data;

	scb = (struct bfusb_data_scb *) skb->cb;
	scb->urb = urb;

	pipe = usb_rcvbulkpipe(data->udev, data->bulk_in_ep);

	usb_fill_bulk_urb(urb, data->udev, pipe, skb->data, size,
			bfusb_rx_complete, skb);

	skb_queue_tail(&data->pending_q, skb);

	err = usb_submit_urb(urb, GFP_ATOMIC);
	if (err) {
		bt_dev_err(data->hdev, "bulk rx submit failed urb %p err %d",
			   urb, err);
		skb_unlink(skb, &data->pending_q);
		kfree_skb(skb);
		usb_free_urb(urb);
	}

	return err;
}

static inline int bfusb_recv_block(struct bfusb_data *data, int hdr, unsigned char *buf, int len)
{
	BT_DBG("bfusb %p hdr 0x%02x data %p len %d", data, hdr, buf, len);

	if (hdr & 0x10) {
		bt_dev_err(data->hdev, "error in block");
		kfree_skb(data->reassembly);
		data->reassembly = NULL;
		return -EIO;
	}

	if (hdr & 0x04) {
		struct sk_buff *skb;
		unsigned char pkt_type;
		int pkt_len = 0;

		if (data->reassembly) {
			bt_dev_err(data->hdev, "unexpected start block");
			kfree_skb(data->reassembly);
			data->reassembly = NULL;
		}

		if (len < 1) {
			bt_dev_err(data->hdev, "no packet type found");
			return -EPROTO;
		}

		pkt_type = *buf++; len--;

		switch (pkt_type) {
		case HCI_EVENT_PKT:
			if (len >= HCI_EVENT_HDR_SIZE) {
				struct hci_event_hdr *hdr = (struct hci_event_hdr *) buf;
				pkt_len = HCI_EVENT_HDR_SIZE + hdr->plen;
			} else {
				bt_dev_err(data->hdev, "event block is too short");
				return -EILSEQ;
			}
			break;

		case HCI_ACLDATA_PKT:
			if (len >= HCI_ACL_HDR_SIZE) {
				struct hci_acl_hdr *hdr = (struct hci_acl_hdr *) buf;
				pkt_len = HCI_ACL_HDR_SIZE + __le16_to_cpu(hdr->dlen);
			} else {
				bt_dev_err(data->hdev, "data block is too short");
				return -EILSEQ;
			}
			break;

		case HCI_SCODATA_PKT:
			if (len >= HCI_SCO_HDR_SIZE) {
				struct hci_sco_hdr *hdr = (struct hci_sco_hdr *) buf;
				pkt_len = HCI_SCO_HDR_SIZE + hdr->dlen;
			} else {
				bt_dev_err(data->hdev, "audio block is too short");
				return -EILSEQ;
			}
			break;
		}

		skb = bt_skb_alloc(pkt_len, GFP_ATOMIC);
		if (!skb) {
			bt_dev_err(data->hdev, "no memory for the packet");
			return -ENOMEM;
		}

		hci_skb_pkt_type(skb) = pkt_type;

		data->reassembly = skb;
	} else {
		if (!data->reassembly) {
			bt_dev_err(data->hdev, "unexpected continuation block");
			return -EIO;
		}
	}

	if (len > 0)
		skb_put_data(data->reassembly, buf, len);

	if (hdr & 0x08) {
		hci_recv_frame(data->hdev, data->reassembly);
		data->reassembly = NULL;
	}

	return 0;
}

static void bfusb_rx_complete(struct urb *urb)
{
	struct sk_buff *skb = (struct sk_buff *) urb->context;
	struct bfusb_data *data = (struct bfusb_data *) skb->dev;
	unsigned char *buf = urb->transfer_buffer;
	int count = urb->actual_length;
	int err, hdr, len;

	BT_DBG("bfusb %p urb %p skb %p len %d", data, urb, skb, skb->len);

	read_lock(&data->lock);

	if (!test_bit(HCI_RUNNING, &data->hdev->flags))
		goto unlock;

	if (urb->status || !count)
		goto resubmit;

	data->hdev->stat.byte_rx += count;

	skb_put(skb, count);

	while (count) {
		hdr = buf[0] | (buf[1] << 8);

		if (hdr & 0x4000) {
			len = 0;
			count -= 2;
			buf   += 2;
		} else {
			len = (buf[2] == 0) ? 256 : buf[2];
			count -= 3;
			buf   += 3;
		}

		if (count < len) {
			bt_dev_err(data->hdev, "block extends over URB buffer ranges");
		}

		if ((hdr & 0xe1) == 0xc1)
			bfusb_recv_block(data, hdr, buf, len);

		count -= len;
		buf   += len;
	}

	skb_unlink(skb, &data->pending_q);
	kfree_skb(skb);

	bfusb_rx_submit(data, urb);

	read_unlock(&data->lock);

	return;

resubmit:
	urb->dev = data->udev;

	err = usb_submit_urb(urb, GFP_ATOMIC);
	if (err) {
		bt_dev_err(data->hdev, "bulk resubmit failed urb %p err %d",
			   urb, err);
	}

unlock:
	read_unlock(&data->lock);
}

static int bfusb_open(struct hci_dev *hdev)
{
	struct bfusb_data *data = hci_get_drvdata(hdev);
	unsigned long flags;
	int i, err;

	BT_DBG("hdev %p bfusb %p", hdev, data);

	write_lock_irqsave(&data->lock, flags);

	err = bfusb_rx_submit(data, NULL);
	if (!err) {
		for (i = 1; i < BFUSB_MAX_BULK_RX; i++)
			bfusb_rx_submit(data, NULL);
	}

	write_unlock_irqrestore(&data->lock, flags);

	return err;
}

static int bfusb_flush(struct hci_dev *hdev)
{
	struct bfusb_data *data = hci_get_drvdata(hdev);

	BT_DBG("hdev %p bfusb %p", hdev, data);

	skb_queue_purge(&data->transmit_q);

	return 0;
}

static int bfusb_close(struct hci_dev *hdev)
{
	struct bfusb_data *data = hci_get_drvdata(hdev);
	unsigned long flags;

	BT_DBG("hdev %p bfusb %p", hdev, data);

	write_lock_irqsave(&data->lock, flags);
	write_unlock_irqrestore(&data->lock, flags);

	bfusb_unlink_urbs(data);
	bfusb_flush(hdev);

	return 0;
}

static int bfusb_send_frame(struct hci_dev *hdev, struct sk_buff *skb)
{
	struct bfusb_data *data = hci_get_drvdata(hdev);
	struct sk_buff *nskb;
	unsigned char buf[3];
	int sent = 0, size, count;

	BT_DBG("hdev %p skb %p type %d len %d", hdev, skb,
	       hci_skb_pkt_type(skb), skb->len);

	switch (hci_skb_pkt_type(skb)) {
	case HCI_COMMAND_PKT:
		hdev->stat.cmd_tx++;
		break;
	case HCI_ACLDATA_PKT:
		hdev->stat.acl_tx++;
		break;
	case HCI_SCODATA_PKT:
		hdev->stat.sco_tx++;
		break;
	}

	/* Prepend skb with frame type */
	memcpy(skb_push(skb, 1), &hci_skb_pkt_type(skb), 1);

	count = skb->len;

	/* Max HCI frame size seems to be 1511 + 1 */
	nskb = bt_skb_alloc(count + 32, GFP_KERNEL);
	if (!nskb) {
		bt_dev_err(hdev, "Can't allocate memory for new packet");
		return -ENOMEM;
	}

	nskb->dev = (void *) data;

	while (count) {
		size = min_t(uint, count, BFUSB_MAX_BLOCK_SIZE);

		buf[0] = 0xc1 | ((sent == 0) ? 0x04 : 0) | ((count == size) ? 0x08 : 0);
		buf[1] = 0x00;
		buf[2] = (size == BFUSB_MAX_BLOCK_SIZE) ? 0 : size;

		skb_put_data(nskb, buf, 3);
		skb_copy_from_linear_data_offset(skb, sent, skb_put(nskb, size), size);

		sent  += size;
		count -= size;
	}

	/* Don't send frame with multiple size of bulk max packet */
	if ((nskb->len % data->bulk_pkt_size) == 0) {
		buf[0] = 0xdd;
		buf[1] = 0x00;
		skb_put_data(nskb, buf, 2);
	}

	read_lock(&data->lock);

	skb_queue_tail(&data->transmit_q, nskb);
	bfusb_tx_wakeup(data);

	read_unlock(&data->lock);

	kfree_skb(skb);

	return 0;
}

static int bfusb_load_firmware(struct bfusb_data *data,
			       const unsigned char *firmware, int count)
{
	unsigned char *buf;
	int err, pipe, len, size, sent = 0;

	BT_DBG("bfusb %p udev %p", data, data->udev);

	BT_INFO("BlueFRITZ! USB loading firmware");

	buf = kmalloc(BFUSB_MAX_BLOCK_SIZE + 3, GFP_KERNEL);
	if (!buf) {
		BT_ERR("Can't allocate memory chunk for firmware");
		return -ENOMEM;
	}

	pipe = usb_sndctrlpipe(data->udev, 0);

	if (usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
				0, 1, 0, NULL, 0, USB_CTRL_SET_TIMEOUT) < 0) {
		BT_ERR("Can't change to loading configuration");
		kfree(buf);
		return -EBUSY;
	}

	data->udev->toggle[0] = data->udev->toggle[1] = 0;

	pipe = usb_sndbulkpipe(data->udev, data->bulk_out_ep);

	while (count) {
		size = min_t(uint, count, BFUSB_MAX_BLOCK_SIZE + 3);

		memcpy(buf, firmware + sent, size);

		err = usb_bulk_msg(data->udev, pipe, buf, size,
					&len, BFUSB_BLOCK_TIMEOUT);

		if (err || (len != size)) {
			BT_ERR("Error in firmware loading");
			goto error;
		}

		sent  += size;
		count -= size;
	}

	err = usb_bulk_msg(data->udev, pipe, NULL, 0,
					&len, BFUSB_BLOCK_TIMEOUT);
	if (err < 0) {
		BT_ERR("Error in null packet request");
		goto error;
	}

	pipe = usb_sndctrlpipe(data->udev, 0);

	err = usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
				0, 2, 0, NULL, 0, USB_CTRL_SET_TIMEOUT);
	if (err < 0) {
		BT_ERR("Can't change to running configuration");
		goto error;
	}

	data->udev->toggle[0] = data->udev->toggle[1] = 0;

	BT_INFO("BlueFRITZ! USB device ready");

	kfree(buf);
	return 0;

error:
	kfree(buf);

	pipe = usb_sndctrlpipe(data->udev, 0);

	usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
				0, 0, 0, NULL, 0, USB_CTRL_SET_TIMEOUT);

	return err;
}

static int bfusb_probe(struct usb_interface *intf, const struct usb_device_id *id)
{
	const struct firmware *firmware;
	struct usb_device *udev = interface_to_usbdev(intf);
	struct usb_host_endpoint *bulk_out_ep;
	struct usb_host_endpoint *bulk_in_ep;
	struct hci_dev *hdev;
	struct bfusb_data *data;

	BT_DBG("intf %p id %p", intf, id);

	/* Check number of endpoints */
	if (intf->cur_altsetting->desc.bNumEndpoints < 2)
		return -EIO;

	bulk_out_ep = &intf->cur_altsetting->endpoint[0];
	bulk_in_ep  = &intf->cur_altsetting->endpoint[1];

	if (!bulk_out_ep || !bulk_in_ep) {
		BT_ERR("Bulk endpoints not found");
		goto done;
	}

	/* Initialize control structure and load firmware */
	data = devm_kzalloc(&intf->dev, sizeof(struct bfusb_data), GFP_KERNEL);
	if (!data)
		return -ENOMEM;

	data->udev = udev;
	data->bulk_in_ep    = bulk_in_ep->desc.bEndpointAddress;
	data->bulk_out_ep   = bulk_out_ep->desc.bEndpointAddress;
	data->bulk_pkt_size = le16_to_cpu(bulk_out_ep->desc.wMaxPacketSize);

	if (!data->bulk_pkt_size)
		goto done;

	rwlock_init(&data->lock);

	data->reassembly = NULL;

	skb_queue_head_init(&data->transmit_q);
	skb_queue_head_init(&data->pending_q);
	skb_queue_head_init(&data->completed_q);

	if (request_firmware(&firmware, "bfubase.frm", &udev->dev) < 0) {
		BT_ERR("Firmware request failed");
		goto done;
	}

	BT_DBG("firmware data %p size %zu", firmware->data, firmware->size);

	if (bfusb_load_firmware(data, firmware->data, firmware->size) < 0) {
		BT_ERR("Firmware loading failed");
		goto release;
	}

	release_firmware(firmware);

	/* Initialize and register HCI device */
	hdev = hci_alloc_dev();
	if (!hdev) {
		BT_ERR("Can't allocate HCI device");
		goto done;
	}

	data->hdev = hdev;

	hdev->bus = HCI_USB;
	hci_set_drvdata(hdev, data);
	SET_HCIDEV_DEV(hdev, &intf->dev);

	hdev->open  = bfusb_open;
	hdev->close = bfusb_close;
	hdev->flush = bfusb_flush;
	hdev->send  = bfusb_send_frame;

	set_bit(HCI_QUIRK_BROKEN_LOCAL_COMMANDS, &hdev->quirks);

	if (hci_register_dev(hdev) < 0) {
		BT_ERR("Can't register HCI device");
		hci_free_dev(hdev);
		goto done;
	}

	usb_set_intfdata(intf, data);

	return 0;

release:
	release_firmware(firmware);

done:
	return -EIO;
}

static void bfusb_disconnect(struct usb_interface *intf)
{
	struct bfusb_data *data = usb_get_intfdata(intf);
	struct hci_dev *hdev = data->hdev;

	BT_DBG("intf %p", intf);

	if (!hdev)
		return;

	usb_set_intfdata(intf, NULL);

	bfusb_close(hdev);

	hci_unregister_dev(hdev);
	hci_free_dev(hdev);
}

static struct usb_driver bfusb_driver = {
	.name		= "bfusb",
	.probe		= bfusb_probe,
	.disconnect	= bfusb_disconnect,
	.id_table	= bfusb_table,
	.disable_hub_initiated_lpm = 1,
};

module_usb_driver(bfusb_driver);

MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
MODULE_DESCRIPTION("BlueFRITZ! USB driver ver " VERSION);
MODULE_VERSION(VERSION);
MODULE_LICENSE("GPL");
MODULE_FIRMWARE("bfubase.frm");
Commit	Line	Data
1a59d1b8	1	// SPDX-License-Identifier: GPL-2.0-or-later
1da177e4 LT	2	/*
	3	*
	4	* AVM BlueFRITZ! USB driver
	5	*
9c724357	6	* Copyright (C) 2003-2006 Marcel Holtmann <marcel@holtmann.org>
1da177e4 LT	7	*/
1da177e4 LT	8
1da177e4 LT	9	#include <linux/module.h>
	10
	11	#include <linux/kernel.h>
	12	#include <linux/init.h>
	13	#include <linux/slab.h>
	14	#include <linux/types.h>
1da177e4 LT	15	#include <linux/errno.h>
	16	#include <linux/skbuff.h>
	17
	18	#include <linux/device.h>
	19	#include <linux/firmware.h>
	20
	21	#include <linux/usb.h>
	22
	23	#include <net/bluetooth/bluetooth.h>
	24	#include <net/bluetooth/hci_core.h>
	25
943d56b0	26	#define VERSION "1.2"
1da177e4 LT	27
	28	static struct usb_driver bfusb_driver;
	29
9712d59a	30	static const struct usb_device_id bfusb_table[] = {
1da177e4 LT	31	/* AVM BlueFRITZ! USB */
	32	{ USB_DEVICE(0x057c, 0x2200) },
	33
	34	{ } /* Terminating entry */
	35	};
	36
	37	MODULE_DEVICE_TABLE(usb, bfusb_table);
	38
1da177e4 LT	39	#define BFUSB_MAX_BLOCK_SIZE 256
	40
	41	#define BFUSB_BLOCK_TIMEOUT 3000
	42
	43	#define BFUSB_TX_PROCESS 1
	44	#define BFUSB_TX_WAKEUP 2
	45
	46	#define BFUSB_MAX_BULK_TX 2
	47	#define BFUSB_MAX_BULK_RX 2
	48
9c724357	49	struct bfusb_data {
1da177e4 LT	50	struct hci_dev *hdev;
	51
	52	unsigned long state;
	53
	54	struct usb_device *udev;
	55
	56	unsigned int bulk_in_ep;
	57	unsigned int bulk_out_ep;
	58	unsigned int bulk_pkt_size;
	59
	60	rwlock_t lock;
	61
	62	struct sk_buff_head transmit_q;
	63
	64	struct sk_buff *reassembly;
	65
	66	atomic_t pending_tx;
	67	struct sk_buff_head pending_q;
	68	struct sk_buff_head completed_q;
	69	};
	70
9c724357	71	struct bfusb_data_scb {
1da177e4 LT	72	struct urb *urb;
	73	};
	74
7d12e780 DH	75	static void bfusb_tx_complete(struct urb *urb);
7d12e780 DH	76	static void bfusb_rx_complete(struct urb *urb);
1da177e4	77
9c724357	78	static struct urb bfusb_get_completed(struct bfusb_data data)
1da177e4 LT	79	{
	80	struct sk_buff *skb;
	81	struct urb *urb = NULL;
	82
9c724357	83	BT_DBG("bfusb %p", data);
1da177e4	84
9c724357	85	skb = skb_dequeue(&data->completed_q);
1da177e4	86	if (skb) {
9c724357	87	urb = ((struct bfusb_data_scb *) skb->cb)->urb;
1da177e4 LT	88	kfree_skb(skb);
	89	}
	90
	91	return urb;
	92	}
	93
9c724357	94	static void bfusb_unlink_urbs(struct bfusb_data *data)
1da177e4 LT	95	{
	96	struct sk_buff *skb;
	97	struct urb *urb;
	98
9c724357	99	BT_DBG("bfusb %p", data);
1da177e4	100
9c724357 MH	101	while ((skb = skb_dequeue(&data->pending_q))) {
9c724357 MH	102	urb = ((struct bfusb_data_scb *) skb->cb)->urb;
1da177e4	103	usb_kill_urb(urb);
9c724357	104	skb_queue_tail(&data->completed_q, skb);
1da177e4 LT	105	}
1da177e4 LT	106
9c724357	107	while ((urb = bfusb_get_completed(data)))
1da177e4 LT	108	usb_free_urb(urb);
	109	}
	110
9c724357	111	static int bfusb_send_bulk(struct bfusb_data data, struct sk_buff skb)
1da177e4	112	{
9c724357 MH	113	struct bfusb_data_scb scb = (void ) skb->cb;
9c724357 MH	114	struct urb *urb = bfusb_get_completed(data);
1da177e4 LT	115	int err, pipe;
1da177e4 LT	116
9c724357	117	BT_DBG("bfusb %p skb %p len %d", data, skb, skb->len);
1da177e4	118
a08b15e6 VI	119	if (!urb) {
	120	urb = usb_alloc_urb(0, GFP_ATOMIC);
	121	if (!urb)
	122	return -ENOMEM;
	123	}
1da177e4	124
9c724357	125	pipe = usb_sndbulkpipe(data->udev, data->bulk_out_ep);
1da177e4	126
9c724357	127	usb_fill_bulk_urb(urb, data->udev, pipe, skb->data, skb->len,
1da177e4 LT	128	bfusb_tx_complete, skb);
	129
	130	scb->urb = urb;
	131
9c724357	132	skb_queue_tail(&data->pending_q, skb);
1da177e4 LT	133
	134	err = usb_submit_urb(urb, GFP_ATOMIC);
	135	if (err) {
2a4f3909 MH	136	bt_dev_err(data->hdev, "bulk tx submit failed urb %p err %d",
2a4f3909 MH	137	urb, err);
9c724357	138	skb_unlink(skb, &data->pending_q);
1da177e4 LT	139	usb_free_urb(urb);
1da177e4 LT	140	} else
9c724357	141	atomic_inc(&data->pending_tx);
1da177e4 LT	142
	143	return err;
	144	}
	145
9c724357	146	static void bfusb_tx_wakeup(struct bfusb_data *data)
1da177e4 LT	147	{
	148	struct sk_buff *skb;
	149
9c724357	150	BT_DBG("bfusb %p", data);
1da177e4	151
9c724357 MH	152	if (test_and_set_bit(BFUSB_TX_PROCESS, &data->state)) {
9c724357 MH	153	set_bit(BFUSB_TX_WAKEUP, &data->state);
1da177e4 LT	154	return;
	155	}
	156
	157	do {
9c724357	158	clear_bit(BFUSB_TX_WAKEUP, &data->state);
1da177e4	159
9c724357 MH	160	while ((atomic_read(&data->pending_tx) < BFUSB_MAX_BULK_TX) &&
	161	(skb = skb_dequeue(&data->transmit_q))) {
	162	if (bfusb_send_bulk(data, skb) < 0) {
	163	skb_queue_head(&data->transmit_q, skb);
1da177e4 LT	164	break;
	165	}
	166	}
	167
9c724357	168	} while (test_bit(BFUSB_TX_WAKEUP, &data->state));
1da177e4	169
9c724357	170	clear_bit(BFUSB_TX_PROCESS, &data->state);
1da177e4 LT	171	}
1da177e4 LT	172
7d12e780	173	static void bfusb_tx_complete(struct urb *urb)
1da177e4 LT	174	{
1da177e4 LT	175	struct sk_buff skb = (struct sk_buff ) urb->context;
9c724357	176	struct bfusb_data data = (struct bfusb_data ) skb->dev;
1da177e4	177
9c724357	178	BT_DBG("bfusb %p urb %p skb %p len %d", data, urb, skb, skb->len);
1da177e4	179
9c724357	180	atomic_dec(&data->pending_tx);
1da177e4	181
9c724357	182	if (!test_bit(HCI_RUNNING, &data->hdev->flags))
1da177e4 LT	183	return;
	184
	185	if (!urb->status)
9c724357	186	data->hdev->stat.byte_tx += skb->len;
1da177e4	187	else
9c724357	188	data->hdev->stat.err_tx++;
1da177e4	189
9c724357	190	read_lock(&data->lock);
1da177e4	191
9c724357 MH	192	skb_unlink(skb, &data->pending_q);
9c724357 MH	193	skb_queue_tail(&data->completed_q, skb);
1da177e4	194
9c724357	195	bfusb_tx_wakeup(data);
1da177e4	196
9c724357	197	read_unlock(&data->lock);
1da177e4 LT	198	}
	199
	200
9c724357	201	static int bfusb_rx_submit(struct bfusb_data data, struct urb urb)
1da177e4	202	{
9c724357	203	struct bfusb_data_scb *scb;
1da177e4 LT	204	struct sk_buff *skb;
	205	int err, pipe, size = HCI_MAX_FRAME_SIZE + 32;
	206
a418b893	207	BT_DBG("bfusb %p urb %p", data, urb);
1da177e4	208
a08b15e6 VI	209	if (!urb) {
	210	urb = usb_alloc_urb(0, GFP_ATOMIC);
	211	if (!urb)
	212	return -ENOMEM;
	213	}
1da177e4	214
9c724357 MH	215	skb = bt_skb_alloc(size, GFP_ATOMIC);
9c724357 MH	216	if (!skb) {
1da177e4 LT	217	usb_free_urb(urb);
	218	return -ENOMEM;
	219	}
	220
9c724357	221	skb->dev = (void *) data;
1da177e4	222
9c724357	223	scb = (struct bfusb_data_scb *) skb->cb;
1da177e4 LT	224	scb->urb = urb;
1da177e4 LT	225
9c724357	226	pipe = usb_rcvbulkpipe(data->udev, data->bulk_in_ep);
1da177e4	227
9c724357	228	usb_fill_bulk_urb(urb, data->udev, pipe, skb->data, size,
1da177e4 LT	229	bfusb_rx_complete, skb);
1da177e4 LT	230
9c724357	231	skb_queue_tail(&data->pending_q, skb);
1da177e4 LT	232
	233	err = usb_submit_urb(urb, GFP_ATOMIC);
	234	if (err) {
2a4f3909 MH	235	bt_dev_err(data->hdev, "bulk rx submit failed urb %p err %d",
2a4f3909 MH	236	urb, err);
9c724357	237	skb_unlink(skb, &data->pending_q);
1da177e4 LT	238	kfree_skb(skb);
	239	usb_free_urb(urb);
	240	}
	241
	242	return err;
	243	}
	244
9c724357	245	static inline int bfusb_recv_block(struct bfusb_data data, int hdr, unsigned char buf, int len)
1da177e4	246	{
9c724357	247	BT_DBG("bfusb %p hdr 0x%02x data %p len %d", data, hdr, buf, len);
1da177e4 LT	248
1da177e4 LT	249	if (hdr & 0x10) {
2a4f3909	250	bt_dev_err(data->hdev, "error in block");
b1fb0683	251	kfree_skb(data->reassembly);
9c724357	252	data->reassembly = NULL;
1da177e4 LT	253	return -EIO;
	254	}
	255
	256	if (hdr & 0x04) {
	257	struct sk_buff *skb;
	258	unsigned char pkt_type;
	259	int pkt_len = 0;
	260
9c724357	261	if (data->reassembly) {
2a4f3909	262	bt_dev_err(data->hdev, "unexpected start block");
9c724357 MH	263	kfree_skb(data->reassembly);
9c724357 MH	264	data->reassembly = NULL;
1da177e4 LT	265	}
	266
	267	if (len < 1) {
2a4f3909	268	bt_dev_err(data->hdev, "no packet type found");
1da177e4 LT	269	return -EPROTO;
	270	}
	271
9c724357	272	pkt_type = *buf++; len--;
1da177e4 LT	273
	274	switch (pkt_type) {
	275	case HCI_EVENT_PKT:
	276	if (len >= HCI_EVENT_HDR_SIZE) {
9c724357	277	struct hci_event_hdr hdr = (struct hci_event_hdr ) buf;
1da177e4 LT	278	pkt_len = HCI_EVENT_HDR_SIZE + hdr->plen;
1da177e4 LT	279	} else {
2a4f3909	280	bt_dev_err(data->hdev, "event block is too short");
1da177e4 LT	281	return -EILSEQ;
	282	}
	283	break;
	284
	285	case HCI_ACLDATA_PKT:
	286	if (len >= HCI_ACL_HDR_SIZE) {
9c724357	287	struct hci_acl_hdr hdr = (struct hci_acl_hdr ) buf;
1da177e4 LT	288	pkt_len = HCI_ACL_HDR_SIZE + __le16_to_cpu(hdr->dlen);
1da177e4 LT	289	} else {
2a4f3909	290	bt_dev_err(data->hdev, "data block is too short");
1da177e4 LT	291	return -EILSEQ;
	292	}
	293	break;
	294
	295	case HCI_SCODATA_PKT:
	296	if (len >= HCI_SCO_HDR_SIZE) {
9c724357	297	struct hci_sco_hdr hdr = (struct hci_sco_hdr ) buf;
1da177e4 LT	298	pkt_len = HCI_SCO_HDR_SIZE + hdr->dlen;
1da177e4 LT	299	} else {
2a4f3909	300	bt_dev_err(data->hdev, "audio block is too short");
1da177e4 LT	301	return -EILSEQ;
	302	}
	303	break;
	304	}
	305
	306	skb = bt_skb_alloc(pkt_len, GFP_ATOMIC);
	307	if (!skb) {
2a4f3909	308	bt_dev_err(data->hdev, "no memory for the packet");
1da177e4 LT	309	return -ENOMEM;
	310	}
	311
618e8bc2	312	hci_skb_pkt_type(skb) = pkt_type;
1da177e4	313
9c724357	314	data->reassembly = skb;
1da177e4	315	} else {
9c724357	316	if (!data->reassembly) {
2a4f3909	317	bt_dev_err(data->hdev, "unexpected continuation block");
1da177e4 LT	318	return -EIO;
	319	}
	320	}
	321
	322	if (len > 0)
59ae1d12	323	skb_put_data(data->reassembly, buf, len);
1da177e4 LT	324
1da177e4 LT	325	if (hdr & 0x08) {
e1a26170	326	hci_recv_frame(data->hdev, data->reassembly);
9c724357	327	data->reassembly = NULL;
1da177e4 LT	328	}
	329
	330	return 0;
	331	}
	332
7d12e780	333	static void bfusb_rx_complete(struct urb *urb)
1da177e4 LT	334	{
1da177e4 LT	335	struct sk_buff skb = (struct sk_buff ) urb->context;
9c724357	336	struct bfusb_data data = (struct bfusb_data ) skb->dev;
1da177e4 LT	337	unsigned char *buf = urb->transfer_buffer;
	338	int count = urb->actual_length;
	339	int err, hdr, len;
	340
a418b893	341	BT_DBG("bfusb %p urb %p skb %p len %d", data, urb, skb, skb->len);
1da177e4	342
9c724357	343	read_lock(&data->lock);
1da177e4	344
9c724357	345	if (!test_bit(HCI_RUNNING, &data->hdev->flags))
1da177e4 LT	346	goto unlock;
	347
	348	if (urb->status \|\| !count)
	349	goto resubmit;
	350
9c724357	351	data->hdev->stat.byte_rx += count;
1da177e4 LT	352
	353	skb_put(skb, count);
	354
	355	while (count) {
	356	hdr = buf[0] \| (buf[1] << 8);
	357
	358	if (hdr & 0x4000) {
	359	len = 0;
	360	count -= 2;
	361	buf += 2;
	362	} else {
	363	len = (buf[2] == 0) ? 256 : buf[2];
	364	count -= 3;
	365	buf += 3;
	366	}
	367
	368	if (count < len) {
2a4f3909	369	bt_dev_err(data->hdev, "block extends over URB buffer ranges");
1da177e4 LT	370	}
	371
	372	if ((hdr & 0xe1) == 0xc1)
9c724357	373	bfusb_recv_block(data, hdr, buf, len);
1da177e4 LT	374
	375	count -= len;
	376	buf += len;
	377	}
	378
9c724357	379	skb_unlink(skb, &data->pending_q);
1da177e4 LT	380	kfree_skb(skb);
1da177e4 LT	381
9c724357	382	bfusb_rx_submit(data, urb);
1da177e4	383
9c724357	384	read_unlock(&data->lock);
1da177e4 LT	385
	386	return;
	387
	388	resubmit:
9c724357	389	urb->dev = data->udev;
1da177e4 LT	390
	391	err = usb_submit_urb(urb, GFP_ATOMIC);
	392	if (err) {
2a4f3909 MH	393	bt_dev_err(data->hdev, "bulk resubmit failed urb %p err %d",
2a4f3909 MH	394	urb, err);
1da177e4 LT	395	}
	396
	397	unlock:
9c724357	398	read_unlock(&data->lock);
1da177e4 LT	399	}
1da177e4 LT	400
1da177e4 LT	401	static int bfusb_open(struct hci_dev *hdev)
1da177e4 LT	402	{
155961e8	403	struct bfusb_data *data = hci_get_drvdata(hdev);
1da177e4 LT	404	unsigned long flags;
	405	int i, err;
	406
9c724357	407	BT_DBG("hdev %p bfusb %p", hdev, data);
1da177e4	408
9c724357	409	write_lock_irqsave(&data->lock, flags);
1da177e4	410
9c724357	411	err = bfusb_rx_submit(data, NULL);
1da177e4 LT	412	if (!err) {
1da177e4 LT	413	for (i = 1; i < BFUSB_MAX_BULK_RX; i++)
9c724357	414	bfusb_rx_submit(data, NULL);
1da177e4 LT	415	}
1da177e4 LT	416
9c724357	417	write_unlock_irqrestore(&data->lock, flags);
1da177e4 LT	418
	419	return err;
	420	}
	421
	422	static int bfusb_flush(struct hci_dev *hdev)
	423	{
155961e8	424	struct bfusb_data *data = hci_get_drvdata(hdev);
1da177e4	425
9c724357	426	BT_DBG("hdev %p bfusb %p", hdev, data);
1da177e4	427
9c724357	428	skb_queue_purge(&data->transmit_q);
1da177e4 LT	429
	430	return 0;
	431	}
	432
	433	static int bfusb_close(struct hci_dev *hdev)
	434	{
155961e8	435	struct bfusb_data *data = hci_get_drvdata(hdev);
1da177e4 LT	436	unsigned long flags;
1da177e4 LT	437
9c724357	438	BT_DBG("hdev %p bfusb %p", hdev, data);
1da177e4	439
9c724357 MH	440	write_lock_irqsave(&data->lock, flags);
9c724357 MH	441	write_unlock_irqrestore(&data->lock, flags);
1da177e4	442
9c724357	443	bfusb_unlink_urbs(data);
1da177e4 LT	444	bfusb_flush(hdev);
	445
	446	return 0;
	447	}
	448
7bd8f09f	449	static int bfusb_send_frame(struct hci_dev hdev, struct sk_buff skb)
1da177e4	450	{
aae26277	451	struct bfusb_data *data = hci_get_drvdata(hdev);
1da177e4 LT	452	struct sk_buff *nskb;
	453	unsigned char buf[3];
	454	int sent = 0, size, count;
	455
618e8bc2 MH	456	BT_DBG("hdev %p skb %p type %d len %d", hdev, skb,
618e8bc2 MH	457	hci_skb_pkt_type(skb), skb->len);
1da177e4	458
618e8bc2	459	switch (hci_skb_pkt_type(skb)) {
1da177e4 LT	460	case HCI_COMMAND_PKT:
	461	hdev->stat.cmd_tx++;
	462	break;
	463	case HCI_ACLDATA_PKT:
	464	hdev->stat.acl_tx++;
	465	break;
	466	case HCI_SCODATA_PKT:
	467	hdev->stat.sco_tx++;
	468	break;
a03e33da	469	}
1da177e4 LT	470
1da177e4 LT	471	/* Prepend skb with frame type */
618e8bc2	472	memcpy(skb_push(skb, 1), &hci_skb_pkt_type(skb), 1);
1da177e4 LT	473
	474	count = skb->len;
	475
	476	/* Max HCI frame size seems to be 1511 + 1 */
6709514f	477	nskb = bt_skb_alloc(count + 32, GFP_KERNEL);
9c724357	478	if (!nskb) {
2a4f3909	479	bt_dev_err(hdev, "Can't allocate memory for new packet");
1da177e4 LT	480	return -ENOMEM;
	481	}
	482
9c724357	483	nskb->dev = (void *) data;
1da177e4 LT	484
	485	while (count) {
	486	size = min_t(uint, count, BFUSB_MAX_BLOCK_SIZE);
	487
	488	buf[0] = 0xc1 \| ((sent == 0) ? 0x04 : 0) \| ((count == size) ? 0x08 : 0);
	489	buf[1] = 0x00;
	490	buf[2] = (size == BFUSB_MAX_BLOCK_SIZE) ? 0 : size;
	491
59ae1d12	492	skb_put_data(nskb, buf, 3);
d626f62b	493	skb_copy_from_linear_data_offset(skb, sent, skb_put(nskb, size), size);
1da177e4 LT	494
	495	sent += size;
	496	count -= size;
	497	}
	498
	499	/* Don't send frame with multiple size of bulk max packet */
9c724357	500	if ((nskb->len % data->bulk_pkt_size) == 0) {
1da177e4 LT	501	buf[0] = 0xdd;
1da177e4 LT	502	buf[1] = 0x00;
59ae1d12	503	skb_put_data(nskb, buf, 2);
1da177e4 LT	504	}
1da177e4 LT	505
9c724357	506	read_lock(&data->lock);
1da177e4	507
9c724357 MH	508	skb_queue_tail(&data->transmit_q, nskb);
9c724357 MH	509	bfusb_tx_wakeup(data);
1da177e4	510
9c724357	511	read_unlock(&data->lock);
1da177e4 LT	512
	513	kfree_skb(skb);
	514
	515	return 0;
	516	}
	517
8187b4fb DW	518	static int bfusb_load_firmware(struct bfusb_data *data,
8187b4fb DW	519	const unsigned char *firmware, int count)
1da177e4 LT	520	{
	521	unsigned char *buf;
	522	int err, pipe, len, size, sent = 0;
	523
9c724357	524	BT_DBG("bfusb %p udev %p", data, data->udev);
1da177e4 LT	525
	526	BT_INFO("BlueFRITZ! USB loading firmware");
	527
7f103a0d DH	528	buf = kmalloc(BFUSB_MAX_BLOCK_SIZE + 3, GFP_KERNEL);
	529	if (!buf) {
	530	BT_ERR("Can't allocate memory chunk for firmware");
	531	return -ENOMEM;
	532	}
	533
9c724357	534	pipe = usb_sndctrlpipe(data->udev, 0);
1da177e4	535
9c724357	536	if (usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
1da177e4 LT	537	0, 1, 0, NULL, 0, USB_CTRL_SET_TIMEOUT) < 0) {
1da177e4 LT	538	BT_ERR("Can't change to loading configuration");
7f103a0d	539	kfree(buf);
1da177e4 LT	540	return -EBUSY;
	541	}
	542
9c724357	543	data->udev->toggle[0] = data->udev->toggle[1] = 0;
1da177e4	544
9c724357	545	pipe = usb_sndbulkpipe(data->udev, data->bulk_out_ep);
1da177e4 LT	546
	547	while (count) {
	548	size = min_t(uint, count, BFUSB_MAX_BLOCK_SIZE + 3);
	549
	550	memcpy(buf, firmware + sent, size);
	551
9c724357	552	err = usb_bulk_msg(data->udev, pipe, buf, size,
1da177e4 LT	553	&len, BFUSB_BLOCK_TIMEOUT);
	554
	555	if (err \|\| (len != size)) {
	556	BT_ERR("Error in firmware loading");
	557	goto error;
	558	}
	559
	560	sent += size;
	561	count -= size;
	562	}
	563
9c724357 MH	564	err = usb_bulk_msg(data->udev, pipe, NULL, 0,
	565	&len, BFUSB_BLOCK_TIMEOUT);
	566	if (err < 0) {
1da177e4 LT	567	BT_ERR("Error in null packet request");
	568	goto error;
	569	}
	570
9c724357	571	pipe = usb_sndctrlpipe(data->udev, 0);
1da177e4	572
9c724357 MH	573	err = usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
	574	0, 2, 0, NULL, 0, USB_CTRL_SET_TIMEOUT);
	575	if (err < 0) {
1da177e4 LT	576	BT_ERR("Can't change to running configuration");
	577	goto error;
	578	}
	579
9c724357	580	data->udev->toggle[0] = data->udev->toggle[1] = 0;
1da177e4 LT	581
	582	BT_INFO("BlueFRITZ! USB device ready");
	583
	584	kfree(buf);
	585	return 0;
	586
	587	error:
	588	kfree(buf);
	589
9c724357	590	pipe = usb_sndctrlpipe(data->udev, 0);
1da177e4	591
9c724357	592	usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
1da177e4 LT	593	0, 0, 0, NULL, 0, USB_CTRL_SET_TIMEOUT);
	594
	595	return err;
	596	}
	597
	598	static int bfusb_probe(struct usb_interface intf, const struct usb_device_id id)
	599	{
	600	const struct firmware *firmware;
	601	struct usb_device *udev = interface_to_usbdev(intf);
	602	struct usb_host_endpoint *bulk_out_ep;
	603	struct usb_host_endpoint *bulk_in_ep;
	604	struct hci_dev *hdev;
9c724357	605	struct bfusb_data *data;
1da177e4 LT	606
	607	BT_DBG("intf %p id %p", intf, id);
	608
1da177e4 LT	609	/* Check number of endpoints */
	610	if (intf->cur_altsetting->desc.bNumEndpoints < 2)
	611	return -EIO;
	612
	613	bulk_out_ep = &intf->cur_altsetting->endpoint[0];
	614	bulk_in_ep = &intf->cur_altsetting->endpoint[1];
	615
	616	if (!bulk_out_ep \|\| !bulk_in_ep) {
	617	BT_ERR("Bulk endpoints not found");
	618	goto done;
	619	}
	620
	621	/* Initialize control structure and load firmware */
0213cd8d	622	data = devm_kzalloc(&intf->dev, sizeof(struct bfusb_data), GFP_KERNEL);
f71e823b	623	if (!data)
7ddb6922	624	return -ENOMEM;
1da177e4	625
9c724357 MH	626	data->udev = udev;
	627	data->bulk_in_ep = bulk_in_ep->desc.bEndpointAddress;
	628	data->bulk_out_ep = bulk_out_ep->desc.bEndpointAddress;
	629	data->bulk_pkt_size = le16_to_cpu(bulk_out_ep->desc.wMaxPacketSize);
1da177e4	630
b5e6fa7a JH	631	if (!data->bulk_pkt_size)
	632	goto done;
	633
9c724357	634	rwlock_init(&data->lock);
1da177e4	635
9c724357	636	data->reassembly = NULL;
1da177e4	637
9c724357 MH	638	skb_queue_head_init(&data->transmit_q);
	639	skb_queue_head_init(&data->pending_q);
	640	skb_queue_head_init(&data->completed_q);
1da177e4 LT	641
	642	if (request_firmware(&firmware, "bfubase.frm", &udev->dev) < 0) {
	643	BT_ERR("Firmware request failed");
0213cd8d	644	goto done;
1da177e4 LT	645	}
1da177e4 LT	646
a418b893	647	BT_DBG("firmware data %p size %zu", firmware->data, firmware->size);
1da177e4	648
9c724357	649	if (bfusb_load_firmware(data, firmware->data, firmware->size) < 0) {
1da177e4 LT	650	BT_ERR("Firmware loading failed");
	651	goto release;
	652	}
	653
	654	release_firmware(firmware);
	655
	656	/* Initialize and register HCI device */
	657	hdev = hci_alloc_dev();
	658	if (!hdev) {
	659	BT_ERR("Can't allocate HCI device");
0213cd8d	660	goto done;
1da177e4 LT	661	}
1da177e4 LT	662
9c724357	663	data->hdev = hdev;
1da177e4	664
c13854ce	665	hdev->bus = HCI_USB;
155961e8	666	hci_set_drvdata(hdev, data);
1da177e4 LT	667	SET_HCIDEV_DEV(hdev, &intf->dev);
1da177e4 LT	668
19cf55a2 MH	669	hdev->open = bfusb_open;
	670	hdev->close = bfusb_close;
	671	hdev->flush = bfusb_flush;
	672	hdev->send = bfusb_send_frame;
1da177e4	673
9ef80d40 MH	674	set_bit(HCI_QUIRK_BROKEN_LOCAL_COMMANDS, &hdev->quirks);
9ef80d40 MH	675
1da177e4 LT	676	if (hci_register_dev(hdev) < 0) {
	677	BT_ERR("Can't register HCI device");
	678	hci_free_dev(hdev);
0213cd8d	679	goto done;
1da177e4 LT	680	}
1da177e4 LT	681
9c724357	682	usb_set_intfdata(intf, data);
1da177e4 LT	683
	684	return 0;
	685
	686	release:
	687	release_firmware(firmware);
	688
1da177e4 LT	689	done:
	690	return -EIO;
	691	}
	692
	693	static void bfusb_disconnect(struct usb_interface *intf)
	694	{
9c724357 MH	695	struct bfusb_data *data = usb_get_intfdata(intf);
9c724357 MH	696	struct hci_dev *hdev = data->hdev;
1da177e4 LT	697
	698	BT_DBG("intf %p", intf);
	699
	700	if (!hdev)
	701	return;
	702
	703	usb_set_intfdata(intf, NULL);
	704
	705	bfusb_close(hdev);
	706
13ea4015	707	hci_unregister_dev(hdev);
1da177e4 LT	708	hci_free_dev(hdev);
	709	}
	710
	711	static struct usb_driver bfusb_driver = {
1da177e4 LT	712	.name = "bfusb",
	713	.probe = bfusb_probe,
	714	.disconnect = bfusb_disconnect,
	715	.id_table = bfusb_table,
e1f12eb6	716	.disable_hub_initiated_lpm = 1,
1da177e4 LT	717	};
1da177e4 LT	718
93f1508c	719	module_usb_driver(bfusb_driver);
1da177e4	720
1da177e4 LT	721	MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
	722	MODULE_DESCRIPTION("BlueFRITZ! USB driver ver " VERSION);
	723	MODULE_VERSION(VERSION);
	724	MODULE_LICENSE("GPL");
2312119a	725	MODULE_FIRMWARE("bfubase.frm");