3 * Generic Bluetooth USB driver
5 * Copyright (C) 2005-2008 Marcel Holtmann <marcel@holtmann.org>
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License as published by
10 * the Free Software Foundation; either version 2 of the License, or
11 * (at your option) any later version.
13 * This program is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 * GNU General Public License for more details.
18 * You should have received a copy of the GNU General Public License
19 * along with this program; if not, write to the Free Software
20 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
24 #include <linux/kernel.h>
25 #include <linux/module.h>
26 #include <linux/init.h>
27 #include <linux/slab.h>
28 #include <linux/types.h>
29 #include <linux/sched.h>
30 #include <linux/errno.h>
31 #include <linux/skbuff.h>
33 #include <linux/usb.h>
35 #include <net/bluetooth/bluetooth.h>
36 #include <net/bluetooth/hci_core.h>
40 static int ignore_dga;
41 static int ignore_csr;
42 static int ignore_sniffer;
43 static int disable_scofix;
44 static int force_scofix;
48 static struct usb_driver btusb_driver;
50 #define BTUSB_IGNORE 0x01
51 #define BTUSB_DIGIANSWER 0x02
52 #define BTUSB_CSR 0x04
53 #define BTUSB_SNIFFER 0x08
54 #define BTUSB_BCM92035 0x10
55 #define BTUSB_BROKEN_ISOC 0x20
56 #define BTUSB_WRONG_SCO_MTU 0x40
57 #define BTUSB_ATH3012 0x80
58 #define BTUSB_INTEL_BOOT 0x200
60 static struct usb_device_id btusb_table[] = {
61 /* Generic Bluetooth USB device */
62 { USB_DEVICE_INFO(0xe0, 0x01, 0x01) },
64 /* Apple-specific (Broadcom) devices */
65 { USB_VENDOR_AND_INTERFACE_INFO(0x05ac, 0xff, 0x01, 0x01) },
67 /* MediaTek MT76x0E */
68 { USB_DEVICE(0x0e8d, 0x763f) },
70 /* Broadcom SoftSailing reporting vendor specific */
71 { USB_DEVICE(0x0a5c, 0x21e1) },
73 /* Apple MacBookPro 7,1 */
74 { USB_DEVICE(0x05ac, 0x8213) },
77 { USB_DEVICE(0x05ac, 0x8215) },
79 /* Apple MacBookPro6,2 */
80 { USB_DEVICE(0x05ac, 0x8218) },
82 /* Apple MacBookAir3,1, MacBookAir3,2 */
83 { USB_DEVICE(0x05ac, 0x821b) },
85 /* Apple MacBookAir4,1 */
86 { USB_DEVICE(0x05ac, 0x821f) },
88 /* Apple MacBookPro8,2 */
89 { USB_DEVICE(0x05ac, 0x821a) },
91 /* Apple MacMini5,1 */
92 { USB_DEVICE(0x05ac, 0x8281) },
94 /* AVM BlueFRITZ! USB v2.0 */
95 { USB_DEVICE(0x057c, 0x3800) },
97 /* Bluetooth Ultraport Module from IBM */
98 { USB_DEVICE(0x04bf, 0x030a) },
100 /* ALPS Modules with non-standard id */
101 { USB_DEVICE(0x044e, 0x3001) },
102 { USB_DEVICE(0x044e, 0x3002) },
104 /* Ericsson with non-standard id */
105 { USB_DEVICE(0x0bdb, 0x1002) },
107 /* Canyon CN-BTU1 with HID interfaces */
108 { USB_DEVICE(0x0c10, 0x0000) },
110 /* Broadcom BCM20702A0 */
111 { USB_DEVICE(0x0489, 0xe042) },
112 { USB_DEVICE(0x04ca, 0x2003) },
113 { USB_DEVICE(0x0b05, 0x17b5) },
114 { USB_DEVICE(0x0b05, 0x17cb) },
115 { USB_DEVICE(0x413c, 0x8197) },
117 /* Foxconn - Hon Hai */
118 { USB_VENDOR_AND_INTERFACE_INFO(0x0489, 0xff, 0x01, 0x01) },
120 /* Broadcom devices with vendor specific id */
121 { USB_VENDOR_AND_INTERFACE_INFO(0x0a5c, 0xff, 0x01, 0x01) },
123 /* ASUSTek Computer - Broadcom based */
124 { USB_VENDOR_AND_INTERFACE_INFO(0x0b05, 0xff, 0x01, 0x01) },
126 /* Belkin F8065bf - Broadcom based */
127 { USB_VENDOR_AND_INTERFACE_INFO(0x050d, 0xff, 0x01, 0x01) },
129 /* IMC Networks - Broadcom based */
130 { USB_VENDOR_AND_INTERFACE_INFO(0x13d3, 0xff, 0x01, 0x01) },
132 /* Intel Bluetooth USB Bootloader (RAM module) */
133 { USB_DEVICE(0x8087, 0x0a5a),
134 .driver_info = BTUSB_INTEL_BOOT | BTUSB_BROKEN_ISOC },
136 { } /* Terminating entry */
139 MODULE_DEVICE_TABLE(usb, btusb_table);
141 static struct usb_device_id blacklist_table[] = {
142 /* CSR BlueCore devices */
143 { USB_DEVICE(0x0a12, 0x0001), .driver_info = BTUSB_CSR },
145 /* Broadcom BCM2033 without firmware */
146 { USB_DEVICE(0x0a5c, 0x2033), .driver_info = BTUSB_IGNORE },
148 /* Atheros 3011 with sflash firmware */
149 { USB_DEVICE(0x0489, 0xe027), .driver_info = BTUSB_IGNORE },
150 { USB_DEVICE(0x0489, 0xe03d), .driver_info = BTUSB_IGNORE },
151 { USB_DEVICE(0x04f2, 0xaff1), .driver_info = BTUSB_IGNORE },
152 { USB_DEVICE(0x0930, 0x0215), .driver_info = BTUSB_IGNORE },
153 { USB_DEVICE(0x0cf3, 0x3002), .driver_info = BTUSB_IGNORE },
154 { USB_DEVICE(0x0cf3, 0xe019), .driver_info = BTUSB_IGNORE },
155 { USB_DEVICE(0x13d3, 0x3304), .driver_info = BTUSB_IGNORE },
157 /* Atheros AR9285 Malbec with sflash firmware */
158 { USB_DEVICE(0x03f0, 0x311d), .driver_info = BTUSB_IGNORE },
160 /* Atheros 3012 with sflash firmware */
161 { USB_DEVICE(0x0489, 0xe04d), .driver_info = BTUSB_ATH3012 },
162 { USB_DEVICE(0x0489, 0xe04e), .driver_info = BTUSB_ATH3012 },
163 { USB_DEVICE(0x0489, 0xe056), .driver_info = BTUSB_ATH3012 },
164 { USB_DEVICE(0x0489, 0xe057), .driver_info = BTUSB_ATH3012 },
165 { USB_DEVICE(0x0489, 0xe05f), .driver_info = BTUSB_ATH3012 },
166 { USB_DEVICE(0x0489, 0xe076), .driver_info = BTUSB_ATH3012 },
167 { USB_DEVICE(0x0489, 0xe078), .driver_info = BTUSB_ATH3012 },
168 { USB_DEVICE(0x04c5, 0x1330), .driver_info = BTUSB_ATH3012 },
169 { USB_DEVICE(0x04ca, 0x3004), .driver_info = BTUSB_ATH3012 },
170 { USB_DEVICE(0x04ca, 0x3005), .driver_info = BTUSB_ATH3012 },
171 { USB_DEVICE(0x04ca, 0x3006), .driver_info = BTUSB_ATH3012 },
172 { USB_DEVICE(0x04ca, 0x3007), .driver_info = BTUSB_ATH3012 },
173 { USB_DEVICE(0x04ca, 0x3008), .driver_info = BTUSB_ATH3012 },
174 { USB_DEVICE(0x04ca, 0x300b), .driver_info = BTUSB_ATH3012 },
175 { USB_DEVICE(0x04ca, 0x3010), .driver_info = BTUSB_ATH3012 },
176 { USB_DEVICE(0x0930, 0x0219), .driver_info = BTUSB_ATH3012 },
177 { USB_DEVICE(0x0930, 0x0220), .driver_info = BTUSB_ATH3012 },
178 { USB_DEVICE(0x0930, 0x0227), .driver_info = BTUSB_ATH3012 },
179 { USB_DEVICE(0x0b05, 0x17d0), .driver_info = BTUSB_ATH3012 },
180 { USB_DEVICE(0x0cf3, 0x0036), .driver_info = BTUSB_ATH3012 },
181 { USB_DEVICE(0x0cf3, 0x3004), .driver_info = BTUSB_ATH3012 },
182 { USB_DEVICE(0x0cf3, 0x3008), .driver_info = BTUSB_ATH3012 },
183 { USB_DEVICE(0x0cf3, 0x311d), .driver_info = BTUSB_ATH3012 },
184 { USB_DEVICE(0x0cf3, 0x311e), .driver_info = BTUSB_ATH3012 },
185 { USB_DEVICE(0x0cf3, 0x311f), .driver_info = BTUSB_ATH3012 },
186 { USB_DEVICE(0x0cf3, 0x3121), .driver_info = BTUSB_ATH3012 },
187 { USB_DEVICE(0x0cf3, 0x817a), .driver_info = BTUSB_ATH3012 },
188 { USB_DEVICE(0x0cf3, 0xe003), .driver_info = BTUSB_ATH3012 },
189 { USB_DEVICE(0x0cf3, 0xe004), .driver_info = BTUSB_ATH3012 },
190 { USB_DEVICE(0x0cf3, 0xe005), .driver_info = BTUSB_ATH3012 },
191 { USB_DEVICE(0x13d3, 0x3362), .driver_info = BTUSB_ATH3012 },
192 { USB_DEVICE(0x13d3, 0x3375), .driver_info = BTUSB_ATH3012 },
193 { USB_DEVICE(0x13d3, 0x3393), .driver_info = BTUSB_ATH3012 },
194 { USB_DEVICE(0x13d3, 0x3402), .driver_info = BTUSB_ATH3012 },
195 { USB_DEVICE(0x13d3, 0x3408), .driver_info = BTUSB_ATH3012 },
196 { USB_DEVICE(0x13d3, 0x3423), .driver_info = BTUSB_ATH3012 },
197 { USB_DEVICE(0x13d3, 0x3432), .driver_info = BTUSB_ATH3012 },
198 { USB_DEVICE(0x13d3, 0x3474), .driver_info = BTUSB_ATH3012 },
200 /* Atheros AR5BBU12 with sflash firmware */
201 { USB_DEVICE(0x0489, 0xe02c), .driver_info = BTUSB_IGNORE },
203 /* Atheros AR5BBU12 with sflash firmware */
204 { USB_DEVICE(0x0489, 0xe036), .driver_info = BTUSB_ATH3012 },
205 { USB_DEVICE(0x0489, 0xe03c), .driver_info = BTUSB_ATH3012 },
207 /* Broadcom BCM2035 */
208 { USB_DEVICE(0x0a5c, 0x2009), .driver_info = BTUSB_BCM92035 },
209 { USB_DEVICE(0x0a5c, 0x200a), .driver_info = BTUSB_WRONG_SCO_MTU },
210 { USB_DEVICE(0x0a5c, 0x2035), .driver_info = BTUSB_WRONG_SCO_MTU },
212 /* Broadcom BCM2045 */
213 { USB_DEVICE(0x0a5c, 0x2039), .driver_info = BTUSB_WRONG_SCO_MTU },
214 { USB_DEVICE(0x0a5c, 0x2101), .driver_info = BTUSB_WRONG_SCO_MTU },
216 /* IBM/Lenovo ThinkPad with Broadcom chip */
217 { USB_DEVICE(0x0a5c, 0x201e), .driver_info = BTUSB_WRONG_SCO_MTU },
218 { USB_DEVICE(0x0a5c, 0x2110), .driver_info = BTUSB_WRONG_SCO_MTU },
220 /* HP laptop with Broadcom chip */
221 { USB_DEVICE(0x03f0, 0x171d), .driver_info = BTUSB_WRONG_SCO_MTU },
223 /* Dell laptop with Broadcom chip */
224 { USB_DEVICE(0x413c, 0x8126), .driver_info = BTUSB_WRONG_SCO_MTU },
226 /* Dell Wireless 370 and 410 devices */
227 { USB_DEVICE(0x413c, 0x8152), .driver_info = BTUSB_WRONG_SCO_MTU },
228 { USB_DEVICE(0x413c, 0x8156), .driver_info = BTUSB_WRONG_SCO_MTU },
230 /* Belkin F8T012 and F8T013 devices */
231 { USB_DEVICE(0x050d, 0x0012), .driver_info = BTUSB_WRONG_SCO_MTU },
232 { USB_DEVICE(0x050d, 0x0013), .driver_info = BTUSB_WRONG_SCO_MTU },
234 /* Asus WL-BTD202 device */
235 { USB_DEVICE(0x0b05, 0x1715), .driver_info = BTUSB_WRONG_SCO_MTU },
237 /* Kensington Bluetooth USB adapter */
238 { USB_DEVICE(0x047d, 0x105e), .driver_info = BTUSB_WRONG_SCO_MTU },
240 /* RTX Telecom based adapters with buggy SCO support */
241 { USB_DEVICE(0x0400, 0x0807), .driver_info = BTUSB_BROKEN_ISOC },
242 { USB_DEVICE(0x0400, 0x080a), .driver_info = BTUSB_BROKEN_ISOC },
244 /* CONWISE Technology based adapters with buggy SCO support */
245 { USB_DEVICE(0x0e5e, 0x6622), .driver_info = BTUSB_BROKEN_ISOC },
247 /* Digianswer devices */
248 { USB_DEVICE(0x08fd, 0x0001), .driver_info = BTUSB_DIGIANSWER },
249 { USB_DEVICE(0x08fd, 0x0002), .driver_info = BTUSB_IGNORE },
251 /* CSR BlueCore Bluetooth Sniffer */
252 { USB_DEVICE(0x0a12, 0x0002), .driver_info = BTUSB_SNIFFER },
254 /* Frontline ComProbe Bluetooth Sniffer */
255 { USB_DEVICE(0x16d3, 0x0002), .driver_info = BTUSB_SNIFFER },
257 { } /* Terminating entry */
260 #define BTUSB_MAX_ISOC_FRAMES 10
262 #define BTUSB_INTR_RUNNING 0
263 #define BTUSB_BULK_RUNNING 1
264 #define BTUSB_ISOC_RUNNING 2
265 #define BTUSB_SUSPENDING 3
266 #define BTUSB_DID_ISO_RESUME 4
269 struct hci_dev *hdev;
270 struct usb_device *udev;
271 struct usb_interface *intf;
272 struct usb_interface *isoc;
278 struct work_struct work;
279 struct work_struct waker;
281 struct usb_anchor tx_anchor;
282 struct usb_anchor intr_anchor;
283 struct usb_anchor bulk_anchor;
284 struct usb_anchor isoc_anchor;
285 struct usb_anchor deferred;
289 struct usb_endpoint_descriptor *intr_ep;
290 struct usb_endpoint_descriptor *bulk_tx_ep;
291 struct usb_endpoint_descriptor *bulk_rx_ep;
292 struct usb_endpoint_descriptor *isoc_tx_ep;
293 struct usb_endpoint_descriptor *isoc_rx_ep;
297 unsigned int sco_num;
302 static int inc_tx(struct btusb_data *data)
307 spin_lock_irqsave(&data->txlock, flags);
308 rv = test_bit(BTUSB_SUSPENDING, &data->flags);
310 data->tx_in_flight++;
311 spin_unlock_irqrestore(&data->txlock, flags);
316 static void btusb_intr_complete(struct urb *urb)
318 struct hci_dev *hdev = urb->context;
319 struct btusb_data *data = hdev->driver_data;
322 BT_DBG("%s urb %p status %d count %d", hdev->name,
323 urb, urb->status, urb->actual_length);
325 if (!test_bit(HCI_RUNNING, &hdev->flags))
328 if (urb->status == 0) {
329 hdev->stat.byte_rx += urb->actual_length;
331 if (hci_recv_fragment(hdev, HCI_EVENT_PKT,
332 urb->transfer_buffer,
333 urb->actual_length) < 0) {
334 BT_ERR("%s corrupted event packet", hdev->name);
337 } else if (urb->status == -ENOENT) {
338 /* Avoid suspend failed when usb_kill_urb */
342 if (!test_bit(BTUSB_INTR_RUNNING, &data->flags))
345 usb_mark_last_busy(data->udev);
346 usb_anchor_urb(urb, &data->intr_anchor);
348 err = usb_submit_urb(urb, GFP_ATOMIC);
350 /* -EPERM: urb is being killed;
351 * -ENODEV: device got disconnected */
352 if (err != -EPERM && err != -ENODEV)
353 BT_ERR("%s urb %p failed to resubmit (%d)",
354 hdev->name, urb, -err);
355 usb_unanchor_urb(urb);
359 static int btusb_submit_intr_urb(struct hci_dev *hdev, gfp_t mem_flags)
361 struct btusb_data *data = hdev->driver_data;
367 BT_DBG("%s", hdev->name);
372 urb = usb_alloc_urb(0, mem_flags);
376 size = le16_to_cpu(data->intr_ep->wMaxPacketSize);
378 buf = kmalloc(size, mem_flags);
384 pipe = usb_rcvintpipe(data->udev, data->intr_ep->bEndpointAddress);
386 usb_fill_int_urb(urb, data->udev, pipe, buf, size,
387 btusb_intr_complete, hdev,
388 data->intr_ep->bInterval);
390 urb->transfer_flags |= URB_FREE_BUFFER;
392 usb_anchor_urb(urb, &data->intr_anchor);
394 err = usb_submit_urb(urb, mem_flags);
396 BT_ERR("%s urb %p submission failed (%d)",
397 hdev->name, urb, -err);
398 usb_unanchor_urb(urb);
406 static void btusb_bulk_complete(struct urb *urb)
408 struct hci_dev *hdev = urb->context;
409 struct btusb_data *data = hdev->driver_data;
412 BT_DBG("%s urb %p status %d count %d", hdev->name,
413 urb, urb->status, urb->actual_length);
415 if (!test_bit(HCI_RUNNING, &hdev->flags))
418 if (urb->status == 0) {
419 hdev->stat.byte_rx += urb->actual_length;
421 if (hci_recv_fragment(hdev, HCI_ACLDATA_PKT,
422 urb->transfer_buffer,
423 urb->actual_length) < 0) {
424 BT_ERR("%s corrupted ACL packet", hdev->name);
427 } else if (urb->status == -ENOENT) {
428 /* Avoid suspend failed when usb_kill_urb */
432 if (!test_bit(BTUSB_BULK_RUNNING, &data->flags))
435 usb_anchor_urb(urb, &data->bulk_anchor);
436 usb_mark_last_busy(data->udev);
438 err = usb_submit_urb(urb, GFP_ATOMIC);
440 /* -EPERM: urb is being killed;
441 * -ENODEV: device got disconnected */
442 if (err != -EPERM && err != -ENODEV)
443 BT_ERR("%s urb %p failed to resubmit (%d)",
444 hdev->name, urb, -err);
445 usb_unanchor_urb(urb);
449 static int btusb_submit_bulk_urb(struct hci_dev *hdev, gfp_t mem_flags)
451 struct btusb_data *data = hdev->driver_data;
455 int err, size = HCI_MAX_FRAME_SIZE;
457 BT_DBG("%s", hdev->name);
459 if (!data->bulk_rx_ep)
462 urb = usb_alloc_urb(0, mem_flags);
466 buf = kmalloc(size, mem_flags);
472 pipe = usb_rcvbulkpipe(data->udev, data->bulk_rx_ep->bEndpointAddress);
474 usb_fill_bulk_urb(urb, data->udev, pipe,
475 buf, size, btusb_bulk_complete, hdev);
477 urb->transfer_flags |= URB_FREE_BUFFER;
479 usb_mark_last_busy(data->udev);
480 usb_anchor_urb(urb, &data->bulk_anchor);
482 err = usb_submit_urb(urb, mem_flags);
484 BT_ERR("%s urb %p submission failed (%d)",
485 hdev->name, urb, -err);
486 usb_unanchor_urb(urb);
494 static void btusb_isoc_complete(struct urb *urb)
496 struct hci_dev *hdev = urb->context;
497 struct btusb_data *data = hdev->driver_data;
500 BT_DBG("%s urb %p status %d count %d", hdev->name,
501 urb, urb->status, urb->actual_length);
503 if (!test_bit(HCI_RUNNING, &hdev->flags))
506 if (urb->status == 0) {
507 for (i = 0; i < urb->number_of_packets; i++) {
508 unsigned int offset = urb->iso_frame_desc[i].offset;
509 unsigned int length = urb->iso_frame_desc[i].actual_length;
511 if (urb->iso_frame_desc[i].status)
514 hdev->stat.byte_rx += length;
516 if (hci_recv_fragment(hdev, HCI_SCODATA_PKT,
517 urb->transfer_buffer + offset,
519 BT_ERR("%s corrupted SCO packet", hdev->name);
523 } else if (urb->status == -ENOENT) {
524 /* Avoid suspend failed when usb_kill_urb */
528 if (!test_bit(BTUSB_ISOC_RUNNING, &data->flags))
531 usb_anchor_urb(urb, &data->isoc_anchor);
533 err = usb_submit_urb(urb, GFP_ATOMIC);
535 /* -EPERM: urb is being killed;
536 * -ENODEV: device got disconnected */
537 if (err != -EPERM && err != -ENODEV)
538 BT_ERR("%s urb %p failed to resubmit (%d)",
539 hdev->name, urb, -err);
540 usb_unanchor_urb(urb);
544 static inline void __fill_isoc_descriptor(struct urb *urb, int len, int mtu)
548 BT_DBG("len %d mtu %d", len, mtu);
550 for (i = 0; i < BTUSB_MAX_ISOC_FRAMES && len >= mtu;
551 i++, offset += mtu, len -= mtu) {
552 urb->iso_frame_desc[i].offset = offset;
553 urb->iso_frame_desc[i].length = mtu;
556 if (len && i < BTUSB_MAX_ISOC_FRAMES) {
557 urb->iso_frame_desc[i].offset = offset;
558 urb->iso_frame_desc[i].length = len;
562 urb->number_of_packets = i;
565 static int btusb_submit_isoc_urb(struct hci_dev *hdev, gfp_t mem_flags)
567 struct btusb_data *data = hdev->driver_data;
573 BT_DBG("%s", hdev->name);
575 if (!data->isoc_rx_ep)
578 urb = usb_alloc_urb(BTUSB_MAX_ISOC_FRAMES, mem_flags);
582 size = le16_to_cpu(data->isoc_rx_ep->wMaxPacketSize) *
583 BTUSB_MAX_ISOC_FRAMES;
585 buf = kmalloc(size, mem_flags);
591 pipe = usb_rcvisocpipe(data->udev, data->isoc_rx_ep->bEndpointAddress);
593 usb_fill_int_urb(urb, data->udev, pipe, buf, size, btusb_isoc_complete,
594 hdev, data->isoc_rx_ep->bInterval);
596 urb->transfer_flags = URB_FREE_BUFFER | URB_ISO_ASAP;
598 __fill_isoc_descriptor(urb, size,
599 le16_to_cpu(data->isoc_rx_ep->wMaxPacketSize));
601 usb_anchor_urb(urb, &data->isoc_anchor);
603 err = usb_submit_urb(urb, mem_flags);
605 BT_ERR("%s urb %p submission failed (%d)",
606 hdev->name, urb, -err);
607 usb_unanchor_urb(urb);
615 static void btusb_tx_complete(struct urb *urb)
617 struct sk_buff *skb = urb->context;
618 struct hci_dev *hdev = (struct hci_dev *) skb->dev;
619 struct btusb_data *data = hdev->driver_data;
621 BT_DBG("%s urb %p status %d count %d", hdev->name,
622 urb, urb->status, urb->actual_length);
624 if (!test_bit(HCI_RUNNING, &hdev->flags))
628 hdev->stat.byte_tx += urb->transfer_buffer_length;
633 spin_lock(&data->txlock);
634 data->tx_in_flight--;
635 spin_unlock(&data->txlock);
637 kfree(urb->setup_packet);
642 static void btusb_isoc_tx_complete(struct urb *urb)
644 struct sk_buff *skb = urb->context;
645 struct hci_dev *hdev = (struct hci_dev *) skb->dev;
647 BT_DBG("%s urb %p status %d count %d", hdev->name,
648 urb, urb->status, urb->actual_length);
650 if (!test_bit(HCI_RUNNING, &hdev->flags))
654 hdev->stat.byte_tx += urb->transfer_buffer_length;
659 kfree(urb->setup_packet);
664 static int btusb_open(struct hci_dev *hdev)
666 struct btusb_data *data = hdev->driver_data;
669 BT_DBG("%s", hdev->name);
671 err = usb_autopm_get_interface(data->intf);
675 data->intf->needs_remote_wakeup = 1;
677 if (test_and_set_bit(HCI_RUNNING, &hdev->flags))
680 if (test_and_set_bit(BTUSB_INTR_RUNNING, &data->flags))
683 err = btusb_submit_intr_urb(hdev, GFP_KERNEL);
687 err = btusb_submit_bulk_urb(hdev, GFP_KERNEL);
689 usb_kill_anchored_urbs(&data->intr_anchor);
693 set_bit(BTUSB_BULK_RUNNING, &data->flags);
694 btusb_submit_bulk_urb(hdev, GFP_KERNEL);
697 usb_autopm_put_interface(data->intf);
701 clear_bit(BTUSB_INTR_RUNNING, &data->flags);
702 clear_bit(HCI_RUNNING, &hdev->flags);
703 usb_autopm_put_interface(data->intf);
707 static void btusb_stop_traffic(struct btusb_data *data)
709 usb_kill_anchored_urbs(&data->intr_anchor);
710 usb_kill_anchored_urbs(&data->bulk_anchor);
711 usb_kill_anchored_urbs(&data->isoc_anchor);
714 static int btusb_close(struct hci_dev *hdev)
716 struct btusb_data *data = hdev->driver_data;
719 BT_DBG("%s", hdev->name);
721 if (!test_and_clear_bit(HCI_RUNNING, &hdev->flags))
724 cancel_work_sync(&data->work);
725 cancel_work_sync(&data->waker);
727 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
728 clear_bit(BTUSB_BULK_RUNNING, &data->flags);
729 clear_bit(BTUSB_INTR_RUNNING, &data->flags);
731 btusb_stop_traffic(data);
732 err = usb_autopm_get_interface(data->intf);
736 data->intf->needs_remote_wakeup = 0;
737 usb_autopm_put_interface(data->intf);
740 usb_scuttle_anchored_urbs(&data->deferred);
744 static int btusb_flush(struct hci_dev *hdev)
746 struct btusb_data *data = hdev->driver_data;
748 BT_DBG("%s", hdev->name);
750 usb_kill_anchored_urbs(&data->tx_anchor);
755 static int btusb_send_frame(struct sk_buff *skb)
757 struct hci_dev *hdev = (struct hci_dev *) skb->dev;
758 struct btusb_data *data = hdev->driver_data;
759 struct usb_ctrlrequest *dr;
764 BT_DBG("%s", hdev->name);
766 if (!test_bit(HCI_RUNNING, &hdev->flags))
769 switch (bt_cb(skb)->pkt_type) {
770 case HCI_COMMAND_PKT:
771 urb = usb_alloc_urb(0, GFP_ATOMIC);
775 dr = kmalloc(sizeof(*dr), GFP_ATOMIC);
781 dr->bRequestType = data->cmdreq_type;
785 dr->wLength = __cpu_to_le16(skb->len);
787 pipe = usb_sndctrlpipe(data->udev, 0x00);
789 usb_fill_control_urb(urb, data->udev, pipe, (void *) dr,
790 skb->data, skb->len, btusb_tx_complete, skb);
795 case HCI_ACLDATA_PKT:
796 if (!data->bulk_tx_ep)
799 urb = usb_alloc_urb(0, GFP_ATOMIC);
803 pipe = usb_sndbulkpipe(data->udev,
804 data->bulk_tx_ep->bEndpointAddress);
806 usb_fill_bulk_urb(urb, data->udev, pipe,
807 skb->data, skb->len, btusb_tx_complete, skb);
812 case HCI_SCODATA_PKT:
813 if (!data->isoc_tx_ep || hdev->conn_hash.sco_num < 1)
816 urb = usb_alloc_urb(BTUSB_MAX_ISOC_FRAMES, GFP_ATOMIC);
820 pipe = usb_sndisocpipe(data->udev,
821 data->isoc_tx_ep->bEndpointAddress);
823 usb_fill_int_urb(urb, data->udev, pipe,
824 skb->data, skb->len, btusb_isoc_tx_complete,
825 skb, data->isoc_tx_ep->bInterval);
827 urb->transfer_flags = URB_ISO_ASAP;
829 __fill_isoc_descriptor(urb, skb->len,
830 le16_to_cpu(data->isoc_tx_ep->wMaxPacketSize));
841 usb_anchor_urb(urb, &data->deferred);
842 schedule_work(&data->waker);
848 usb_anchor_urb(urb, &data->tx_anchor);
850 err = usb_submit_urb(urb, GFP_ATOMIC);
852 BT_ERR("%s urb %p submission failed", hdev->name, urb);
853 kfree(urb->setup_packet);
854 usb_unanchor_urb(urb);
856 usb_mark_last_busy(data->udev);
864 static void btusb_destruct(struct hci_dev *hdev)
866 struct btusb_data *data = hdev->driver_data;
868 BT_DBG("%s", hdev->name);
873 static void btusb_notify(struct hci_dev *hdev, unsigned int evt)
875 struct btusb_data *data = hdev->driver_data;
877 BT_DBG("%s evt %d", hdev->name, evt);
879 if (hdev->conn_hash.sco_num != data->sco_num) {
880 data->sco_num = hdev->conn_hash.sco_num;
881 schedule_work(&data->work);
885 static inline int __set_isoc_interface(struct hci_dev *hdev, int altsetting)
887 struct btusb_data *data = hdev->driver_data;
888 struct usb_interface *intf = data->isoc;
889 struct usb_endpoint_descriptor *ep_desc;
895 err = usb_set_interface(data->udev, 1, altsetting);
897 BT_ERR("%s setting interface failed (%d)", hdev->name, -err);
901 data->isoc_altsetting = altsetting;
903 data->isoc_tx_ep = NULL;
904 data->isoc_rx_ep = NULL;
906 for (i = 0; i < intf->cur_altsetting->desc.bNumEndpoints; i++) {
907 ep_desc = &intf->cur_altsetting->endpoint[i].desc;
909 if (!data->isoc_tx_ep && usb_endpoint_is_isoc_out(ep_desc)) {
910 data->isoc_tx_ep = ep_desc;
914 if (!data->isoc_rx_ep && usb_endpoint_is_isoc_in(ep_desc)) {
915 data->isoc_rx_ep = ep_desc;
920 if (!data->isoc_tx_ep || !data->isoc_rx_ep) {
921 BT_ERR("%s invalid SCO descriptors", hdev->name);
928 static void btusb_work(struct work_struct *work)
930 struct btusb_data *data = container_of(work, struct btusb_data, work);
931 struct hci_dev *hdev = data->hdev;
934 if (hdev->conn_hash.sco_num > 0) {
935 if (!test_bit(BTUSB_DID_ISO_RESUME, &data->flags)) {
936 err = usb_autopm_get_interface(data->isoc ? data->isoc : data->intf);
938 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
939 usb_kill_anchored_urbs(&data->isoc_anchor);
943 set_bit(BTUSB_DID_ISO_RESUME, &data->flags);
945 if (data->isoc_altsetting != 2) {
946 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
947 usb_kill_anchored_urbs(&data->isoc_anchor);
949 if (__set_isoc_interface(hdev, 2) < 0)
953 if (!test_and_set_bit(BTUSB_ISOC_RUNNING, &data->flags)) {
954 if (btusb_submit_isoc_urb(hdev, GFP_KERNEL) < 0)
955 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
957 btusb_submit_isoc_urb(hdev, GFP_KERNEL);
960 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
961 usb_kill_anchored_urbs(&data->isoc_anchor);
963 __set_isoc_interface(hdev, 0);
964 if (test_and_clear_bit(BTUSB_DID_ISO_RESUME, &data->flags))
965 usb_autopm_put_interface(data->isoc ? data->isoc : data->intf);
969 static void btusb_waker(struct work_struct *work)
971 struct btusb_data *data = container_of(work, struct btusb_data, waker);
974 err = usb_autopm_get_interface(data->intf);
978 usb_autopm_put_interface(data->intf);
981 static int btusb_probe(struct usb_interface *intf,
982 const struct usb_device_id *id)
984 struct usb_endpoint_descriptor *ep_desc;
985 struct btusb_data *data;
986 struct hci_dev *hdev;
989 BT_DBG("intf %p id %p", intf, id);
991 /* interface numbers are hardcoded in the spec */
992 if (intf->cur_altsetting->desc.bInterfaceNumber != 0)
995 if (!id->driver_info) {
996 const struct usb_device_id *match;
997 match = usb_match_id(intf, blacklist_table);
1002 if (id->driver_info == BTUSB_IGNORE)
1005 if (ignore_dga && id->driver_info & BTUSB_DIGIANSWER)
1008 if (ignore_csr && id->driver_info & BTUSB_CSR)
1011 if (ignore_sniffer && id->driver_info & BTUSB_SNIFFER)
1014 if (id->driver_info & BTUSB_ATH3012) {
1015 struct usb_device *udev = interface_to_usbdev(intf);
1017 /* Old firmware would otherwise let ath3k driver load
1018 * patch and sysconfig files */
1019 if (le16_to_cpu(udev->descriptor.bcdDevice) <= 0x0001)
1023 data = kzalloc(sizeof(*data), GFP_KERNEL);
1027 for (i = 0; i < intf->cur_altsetting->desc.bNumEndpoints; i++) {
1028 ep_desc = &intf->cur_altsetting->endpoint[i].desc;
1030 if (!data->intr_ep && usb_endpoint_is_int_in(ep_desc)) {
1031 data->intr_ep = ep_desc;
1035 if (!data->bulk_tx_ep && usb_endpoint_is_bulk_out(ep_desc)) {
1036 data->bulk_tx_ep = ep_desc;
1040 if (!data->bulk_rx_ep && usb_endpoint_is_bulk_in(ep_desc)) {
1041 data->bulk_rx_ep = ep_desc;
1046 if (!data->intr_ep || !data->bulk_tx_ep || !data->bulk_rx_ep) {
1051 data->cmdreq_type = USB_TYPE_CLASS;
1053 data->udev = interface_to_usbdev(intf);
1056 spin_lock_init(&data->lock);
1058 INIT_WORK(&data->work, btusb_work);
1059 INIT_WORK(&data->waker, btusb_waker);
1060 spin_lock_init(&data->txlock);
1062 init_usb_anchor(&data->tx_anchor);
1063 init_usb_anchor(&data->intr_anchor);
1064 init_usb_anchor(&data->bulk_anchor);
1065 init_usb_anchor(&data->isoc_anchor);
1066 init_usb_anchor(&data->deferred);
1068 hdev = hci_alloc_dev();
1074 hdev->bus = HCI_USB;
1075 hdev->driver_data = data;
1079 SET_HCIDEV_DEV(hdev, &intf->dev);
1081 hdev->open = btusb_open;
1082 hdev->close = btusb_close;
1083 hdev->flush = btusb_flush;
1084 hdev->send = btusb_send_frame;
1085 hdev->destruct = btusb_destruct;
1086 hdev->notify = btusb_notify;
1088 hdev->owner = THIS_MODULE;
1090 if (id->driver_info & BTUSB_INTEL_BOOT)
1091 set_bit(HCI_QUIRK_RAW_DEVICE, &hdev->quirks);
1093 /* Interface numbers are hardcoded in the specification */
1094 data->isoc = usb_ifnum_to_if(data->udev, 1);
1097 set_bit(HCI_QUIRK_NO_RESET, &hdev->quirks);
1099 if (force_scofix || id->driver_info & BTUSB_WRONG_SCO_MTU) {
1100 if (!disable_scofix)
1101 set_bit(HCI_QUIRK_FIXUP_BUFFER_SIZE, &hdev->quirks);
1104 if (id->driver_info & BTUSB_BROKEN_ISOC)
1107 if (id->driver_info & BTUSB_DIGIANSWER) {
1108 data->cmdreq_type = USB_TYPE_VENDOR;
1109 set_bit(HCI_QUIRK_NO_RESET, &hdev->quirks);
1112 if (id->driver_info & BTUSB_CSR) {
1113 struct usb_device *udev = data->udev;
1115 /* Old firmware would otherwise execute USB reset */
1116 if (le16_to_cpu(udev->descriptor.bcdDevice) < 0x117)
1117 set_bit(HCI_QUIRK_NO_RESET, &hdev->quirks);
1120 if (id->driver_info & BTUSB_SNIFFER) {
1121 struct usb_device *udev = data->udev;
1123 /* New sniffer firmware has crippled HCI interface */
1124 if (le16_to_cpu(udev->descriptor.bcdDevice) > 0x997)
1125 set_bit(HCI_QUIRK_RAW_DEVICE, &hdev->quirks);
1130 if (id->driver_info & BTUSB_BCM92035) {
1131 unsigned char cmd[] = { 0x3b, 0xfc, 0x01, 0x00 };
1132 struct sk_buff *skb;
1134 skb = bt_skb_alloc(sizeof(cmd), GFP_KERNEL);
1136 memcpy(skb_put(skb, sizeof(cmd)), cmd, sizeof(cmd));
1137 skb_queue_tail(&hdev->driver_init, skb);
1142 err = usb_driver_claim_interface(&btusb_driver,
1151 err = hci_register_dev(hdev);
1158 usb_set_intfdata(intf, data);
1163 static void btusb_disconnect(struct usb_interface *intf)
1165 struct btusb_data *data = usb_get_intfdata(intf);
1166 struct hci_dev *hdev;
1168 BT_DBG("intf %p", intf);
1175 __hci_dev_hold(hdev);
1177 usb_set_intfdata(data->intf, NULL);
1180 usb_set_intfdata(data->isoc, NULL);
1182 hci_unregister_dev(hdev);
1184 if (intf == data->isoc)
1185 usb_driver_release_interface(&btusb_driver, data->intf);
1186 else if (data->isoc)
1187 usb_driver_release_interface(&btusb_driver, data->isoc);
1189 __hci_dev_put(hdev);
1195 static int btusb_suspend(struct usb_interface *intf, pm_message_t message)
1197 struct btusb_data *data = usb_get_intfdata(intf);
1199 BT_DBG("intf %p", intf);
1201 if (data->suspend_count++)
1204 spin_lock_irq(&data->txlock);
1205 if (!(PMSG_IS_AUTO(message) && data->tx_in_flight)) {
1206 set_bit(BTUSB_SUSPENDING, &data->flags);
1207 spin_unlock_irq(&data->txlock);
1209 spin_unlock_irq(&data->txlock);
1210 data->suspend_count--;
1214 cancel_work_sync(&data->work);
1216 btusb_stop_traffic(data);
1217 usb_kill_anchored_urbs(&data->tx_anchor);
1222 static void play_deferred(struct btusb_data *data)
1227 while ((urb = usb_get_from_anchor(&data->deferred))) {
1228 err = usb_submit_urb(urb, GFP_ATOMIC);
1232 data->tx_in_flight++;
1234 usb_scuttle_anchored_urbs(&data->deferred);
1237 static int btusb_resume(struct usb_interface *intf)
1239 struct btusb_data *data = usb_get_intfdata(intf);
1240 struct hci_dev *hdev = data->hdev;
1243 BT_DBG("intf %p", intf);
1245 if (--data->suspend_count)
1248 if (!test_bit(HCI_RUNNING, &hdev->flags))
1251 if (test_bit(BTUSB_INTR_RUNNING, &data->flags)) {
1252 err = btusb_submit_intr_urb(hdev, GFP_NOIO);
1254 clear_bit(BTUSB_INTR_RUNNING, &data->flags);
1259 if (test_bit(BTUSB_BULK_RUNNING, &data->flags)) {
1260 err = btusb_submit_bulk_urb(hdev, GFP_NOIO);
1262 clear_bit(BTUSB_BULK_RUNNING, &data->flags);
1266 btusb_submit_bulk_urb(hdev, GFP_NOIO);
1269 if (test_bit(BTUSB_ISOC_RUNNING, &data->flags)) {
1270 if (btusb_submit_isoc_urb(hdev, GFP_NOIO) < 0)
1271 clear_bit(BTUSB_ISOC_RUNNING, &data->flags);
1273 btusb_submit_isoc_urb(hdev, GFP_NOIO);
1276 spin_lock_irq(&data->txlock);
1277 play_deferred(data);
1278 clear_bit(BTUSB_SUSPENDING, &data->flags);
1279 spin_unlock_irq(&data->txlock);
1280 schedule_work(&data->work);
1285 usb_scuttle_anchored_urbs(&data->deferred);
1287 spin_lock_irq(&data->txlock);
1288 clear_bit(BTUSB_SUSPENDING, &data->flags);
1289 spin_unlock_irq(&data->txlock);
1295 static struct usb_driver btusb_driver = {
1297 .probe = btusb_probe,
1298 .disconnect = btusb_disconnect,
1300 .suspend = btusb_suspend,
1301 .resume = btusb_resume,
1303 .id_table = btusb_table,
1304 .supports_autosuspend = 1,
1307 static int __init btusb_init(void)
1309 BT_INFO("Generic Bluetooth USB driver ver %s", VERSION);
1311 return usb_register(&btusb_driver);
1314 static void __exit btusb_exit(void)
1316 usb_deregister(&btusb_driver);
1319 module_init(btusb_init);
1320 module_exit(btusb_exit);
1322 module_param(ignore_dga, bool, 0644);
1323 MODULE_PARM_DESC(ignore_dga, "Ignore devices with id 08fd:0001");
1325 module_param(ignore_csr, bool, 0644);
1326 MODULE_PARM_DESC(ignore_csr, "Ignore devices with id 0a12:0001");
1328 module_param(ignore_sniffer, bool, 0644);
1329 MODULE_PARM_DESC(ignore_sniffer, "Ignore devices with id 0a12:0002");
1331 module_param(disable_scofix, bool, 0644);
1332 MODULE_PARM_DESC(disable_scofix, "Disable fixup of wrong SCO buffer size");
1334 module_param(force_scofix, bool, 0644);
1335 MODULE_PARM_DESC(force_scofix, "Force fixup of wrong SCO buffers size");
1337 module_param(reset, bool, 0644);
1338 MODULE_PARM_DESC(reset, "Send HCI reset command on initialization");
1340 MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
1341 MODULE_DESCRIPTION("Generic Bluetooth USB driver ver " VERSION);
1342 MODULE_VERSION(VERSION);
1343 MODULE_LICENSE("GPL");