mirror of
https://github.com/S3NEO/android_kernel_samsung_msm8226.git
synced 2024-11-07 03:47:13 +00:00
0943bd6d54
usb: gadget: f_fs: HACK: Round reads up to 512 bytes to work with dwc3 Signed-off-by: Arve Hjønnevåg <arve@android.com> USB: f_fs: Fix epfile crash during composition switch epfile's ep pointer may be NULL during adb transfer and composition switch happening in parallel. As part of composition switch, first it is set to NONE. Setting sys.usb.config to NONE stops adb and disables the composition. stop adb is not blocking call and adb still might be doing epfile read/write for some time when function unbind is ongoing making the data structures NULL. To fix this crash, call usb_ep_dequeue only if ep->ep is valid. Similarly in success case, return ep->status only if ep->ep is valid otherwise return -ENODEV. CRs-Fixed: 643663 Change-Id: Ic152fc1db31cad6f97b8d16d91350dad857a4bf9 Signed-off-by: Sujeet Kumar <ksujeet@codeaurora.org> USB: gadget: f_fs: Release endpoint upon disable Endpoints are claimed using usb_ep_autoconfig function, It will choose an unclaimed usb_ep and prevent the endpoint from being returned by a later autoconfig calls. We can mark the driver_data pointer once ep_enable is done in bind. If we cannot mark to null upon function disable the corresponding endpoint is not allocated by a later autoconfig call. The current code does not make the ep->driver_data to null upon function disable. This is leading to unclaimed endpoints for later autoconfig calls. Claim the endpoints by assigning ep->driver_data to NULL. CRs-Fixed: 633673 Change-Id: I221b98ef36cc2a60d27507a2442061a30ed410f4 Signed-off-by: ChandanaKishori Chiluveru <cchilu@codeaurora.org> USB: gagget: f_fs: Return error if TX req is queued during device offline when USB cable is disconnected during TX data transfers, endpoints will be disabled during function disable. If userspace client tries to queue requests on disabled endpoints, driver will wait till endpoints are enabled and then queues previous session requests. This results in kernel driver and userspace driver out of sync and due to this, stall will be seen. Hence fix this issue by returning error value if client tries to queue requests on TX endpoint during device offline. CRs-Fixed: 633497 Change-Id: I3e43b8a704367aff7fe8dd88159315aef811c51c Signed-off-by: Vijayavardhan Vennapusa <vvreddy@codeaurora.org> USB: f_fs: Fail stale read IOs after disconnect After a USB disconnect, endpoints for adb are disabled. After this no IO is allowed on the endpoints. Since, adbd is not aware of this disconnect, it may still perform read/writes IO. For adb writes, IOs are failed, but for adb reads kernel waits untill endpoints are enabled. When a USB disconnect and adb read still queued a buffer to kernel, ffs_epfile_io simply waits for endpoint to be enabled. A next connect happens and endpoints are enabled after set_alt, the adb read stale buffer from previous session continues and queues to endpoint. All this time, adb did not close the epfile because it did not get return status on the IOs which it queued. This is an issue, because a new session is not established and both userspace and kernel goes out of sync. To fix this issue, when endpoints are disbled set epfile error. This epfile error is only cleared in epfile open. This will ensure that after a USB disconnect and connect, new session is established. Also, return ENODEV if endpoints not enabled rather than EINTR as EINTR case, and simply retries the request. Incase usb_ep_queue failed, return -EIO inspite of depend on return status from usb_ep_queue. CRs-Fixed: 633497 Change-Id: I6e677e98ec28e5462b372ed290acdde251286f48 Signed-off-by: Sujeet Kumar <ksujeet@codeaurora.org> USB: f_fs: Cutoff epfile IO before epfile could get freed epfile may get freed and accessing epfile's error flag to cut off IOs may lead to use after free. Move the epfile error flag setting above in the order so that it guaranteed to be valid. CRs-Fixed: 668046 Change-Id: I0017513393ddb4fd288cd4e1c2adf9d5ee3bc660 Signed-off-by: Sujeet Kumar <ksujeet@codeaurora.org> USB: f_fs: Check error status before doing epfile I/O Set error status before disabling endpoint during function disable and also check error status before handling I/O. If error status is set, return error status to read/write calls made by userspace. Also set file's private data to NULL during epfile release. CRs-Fixed: 671880 Change-Id: I14b5ee541dfc18a7802ef4a8033878a7729d9adb Signed-off-by: Vijayavardhan Vennapusa <vvreddy@codeaurora.org> USB: f_fs: Fix disconnect check during ongoing IO F_FS function driver allocated ffs_eps and updates ffs_ep->ep to corresponding usb_ep during func->bind and never clears it. On bind it also saves ffs_ep context in epfile->ep. During func->disable, it clears only ffs_ep context in epfile->ep and on func->unbind it frees ffs_eps memory. ffs_epfile_io routine currently relies on ffs_ep->ep (which is never cleared and ffs_ep could be freed on unbind) to detect any disconnect during active IO. This can result in various issues e.g. use after free use of ffs_ep if unbind finished before epfile_io could resume or "stop adbd" trying to dequeue a freed USB request when epfile_io could execute only after F_FS got disabled as 'if (ep->ep)' check would be TRUE. Fix this by checking stored ffs_ep context against latest epfile->ep to figure out if endpoint got disabled or changed before acquiring spin_lock. Change-Id: I6bdcdf0dff0813ed7b2af8c24f544a22796b0369 Signed-off-by: Manu Gautam <mgautam@codeaurora.org> USB: f_fs: Move ep completion out of stack Allocating completion on the stack may lead to invalid access when udc irq tries to complete the request but interrupted completion returns immediately. This happens because request is not held to be dequeued anymore making the completion invalid. Move the completions in ffs data like it is for ep0. CRs-Fixed: 653761 Change-Id: I15102538d1b5bee14dfa3c7b3fa1f8e3f767cf71 Signed-off-by: Sujeet Kumar <ksujeet@codeaurora.org> usb: dwc3: gadget: Release gadget lock when handling suspend/resume gadget_driver suspend/resume operations might require some dwc3-gadget operations, such as enabling and disabling endpoints. If the lock is not released, this can cause a deadlock scenario. Change-Id: I1e12de65e40492b115ab35de78c2352730649db5 Signed-off-by: Bar Weiner <bweiner@codeaurora.org> usb: dwc3: gadget: Iterate only over valid endpoints Make dwc3_gadget_resize_tx_fifos() iterate only over IN endpoints that are actually present, based on the num_in_eps parameter. This terminates the loop so as to prevent dereferencing a potential NULL dwc->eps[i] where i >= (num_in_eps + num_out_eps). Change-Id: I07f711bfd380dce212e86b59cf417f84ca7eb006 Signed-off-by: Jack Pham <jackp@codeaurora.org> usb: dwc3: gadget: Protect against ep disabling during completion In dwc3_cleanup_done_reqs(), a potential race condition could arise when dwc3_gadget_giveback() temporarily releases the main spinlock. If during this window the very endpoint being handled becomes disabled, it would lead to a NULL pointer dereference in the code that follows. Guard against this by making sure the endpoint is still enabled after returning from the giveback call. CRs-fixed: 628972 Change-Id: Ifdb823fff12747f699217d871a5959c85b5340f7 Signed-off-by: Jack Pham <jackp@codeaurora.org> usb: dwc3: calculate the number of endpoints hwparams2 holds the number of endpoints which were selected during RTL generation, we can use that on our driver. Signed-off-by: Felipe Balbi <balbi@ti.com> usb: dwc3: gadget: use num_(in|out)_eps from HW params that way we will only tell gadget framework about the endpoints we actually have. Change-Id: Iabc6a5712b640a9f5b0310984650a4ac44e5f579 Signed-off-by: Felipe Balbi <balbi@ti.com> usb: gadget: always update HS/SS descriptors and create a copy of them HS and SS descriptors are staticaly created. They are updated during the bind process with the endpoint address, string id or interface numbers. After that, the descriptor chain is linked to struct usb_function which is used by composite in order to serve the GET_DESCRIPTOR requests, number of available configs and so on. There is no need to assign the HS descriptor only if the UDC supports HS speed because composite won't report those to the host if HS support has not been reached. The same reasoning is valid for SS. This patch makes sure each function updates HS/SS descriptors unconditionally and uses the newly introduced helper function to create a copy the descriptors for the speed which is supported by the UDC. While at that, also rename f->descriptors to f->fs_descriptors in order to make it more explicit what that means. Change-Id: Id670fcc25b0a1cb3020722cfc6eda2e1b08441f1 Cc: Laurent Pinchart <laurent.pinchart@ideasonboard.com> Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de> Signed-off-by: Felipe Balbi <balbi@ti.com> USB: Add super speed descriptors for android functions Update android function drivers like diag, adb, modem, rmnet, mtp and accessory to operate in super speed. The burst capability is not enabled for now. Change-Id: Ie95cbfc9444c56c8268b70e2916713190699c71a Signed-off-by: Pavankumar Kondeti <pkondeti@codeaurora.org> usb: gadget: Finish conversion to fs_descriptor change Change-Id: Iaf72d66bb5cd6b84f14c5aaeb01ffb286568c97b usb: gadget: f_fs: Add support for SuperSpeed Mode Allow userspace to pass SuperSpeed descriptors and handle them in the driver accordingly. This change doesn't modify existing desc_header and thereby keeps the ABI changes backward compatible i.e. existing userspace drivers compiled with old header (functionfs.h) would continue to work with the updated kernel. Change-Id: Ic27035fdef2a83828024348d75be1518e9f8c5c6 Signed-off-by: Manu Gautam <mgautam@codeaurora.org> USB: f_fs: Set ffs->func to NULL after disabling endpoint in set_alt() When adb root is performed, userspace will close and open ffs_epsfile. Closing this file will call ffs_functionfs_callback() which does call remove_config(). This will call ffs_function_eps_disable to disable endpoints and then calls ffs_func_unbind(). Unbind() will also call endpoint disable which might lead to disabling endpoint which is already disabled. Hence set ffs->func to NULL after disabling endpoints in set_alt(). CRs-Fixed: 557532 Change-Id: I3052bdee74a1793d4e003de4b991d353e5d699b0 Signed-off-by: Vijayavardhan Vennapusa <vvreddy@codeaurora.org> usb: gadget: throttle IRQ rate for SuperSpeed There was a merge error from commit 6e0c86d12 "USB: gadget: u_ether: Fix data stall issue in RNDIS tethering mode" that resulted in the accidental removal of checking if the gadget is connected at SuperSpeed. Re-introduce this check so that IRQs on the downlink path are throttled, decreasing the load on the CPU. Change-Id: Ic2aa1d433e0fded95c6e825a760e89f726360522 Signed-off-by: Jack Pham <jackp@codeaurora.org> USB: mbim: Add super speed descriptors for MBIM function This change adds super speed descriptors which is required to get MBIM function to work with SSUSB mode. The burst capability is not enabled for now. CRs-Fixed: 626744 Change-Id: I2a492182c94265ab58014cac470448f61782625c Signed-off-by: Mayank Rana <mrana@codeaurora.org> usb: gadget: ECM: Add super speed descriptors for qc_ecm function This change adds super speed descriptors which is required to get ECM function to work with SSUSB mode. CRs-Fixed: 627063 Change-Id: I275a32f6cb957b59bfdf1c5b5377ba6e189efb6d Signed-off-by: Mayank Rana <mrana@codeaurora.org> usb: gadget: Add file for USB HID function This file the same as f_hid.c. Change-Id: I951b3067f477c3cb502c8320693ab11df90150d2 Signed-off-by: muluhe <muluhe@codeaurora.org> Signed-off-by: Aravind Asam <aasam@codeaurora.org> Signed-off-by: Ameya Thakur <ameyat@codeaurora.org> usb: gadget: Enable HID function for charging mode Provide HID function for only charging mode, in this mode device enumerated as one input device. Change-Id: I769adf76807b8a28adcc298de0536fa779176016 Signed-off-by: Mulu He <muluhe@codeaurora.org> usb: gadget: composite: Fix USB version number for L1 When usb version number is greater than 2.01 USB-CV expects to find a Super Speed USB Device Capability descriptor. When we want to enable BOS descriptor capabilities for a high-speed device the USB version number should be 2.01. CRs-Fixed: 521752 Change-Id: Ic75b5e570b3c2df8e67370389dfddc8de6fb72d4 Signed-off-by: Shimrit Malichi <smalichi@codeaurora.org> usb: gadget: Fix compilation of f_mbim driver after SS updates Change-Id: I72e7dfa5c8f3905bbe57e227ebb7e7035d8b671c [haggertk: port to samsung_msm8974, don't pick this for your own use] Signed-off-by: Kevin F. Haggerty <haggertk@lineageos.org>
571 lines
14 KiB
C
571 lines
14 KiB
C
/*
|
|
* f_eem.c -- USB CDC Ethernet (EEM) link function driver
|
|
*
|
|
* Copyright (C) 2003-2005,2008 David Brownell
|
|
* Copyright (C) 2008 Nokia Corporation
|
|
* Copyright (C) 2009 EF Johnson Technologies
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*/
|
|
|
|
#include <linux/kernel.h>
|
|
#include <linux/device.h>
|
|
#include <linux/etherdevice.h>
|
|
#include <linux/crc32.h>
|
|
#include <linux/slab.h>
|
|
|
|
#include "u_ether.h"
|
|
|
|
#define EEM_HLEN 2
|
|
|
|
/*
|
|
* This function is a "CDC Ethernet Emulation Model" (CDC EEM)
|
|
* Ethernet link.
|
|
*/
|
|
|
|
struct f_eem {
|
|
struct gether port;
|
|
u8 ctrl_id;
|
|
};
|
|
|
|
static inline struct f_eem *func_to_eem(struct usb_function *f)
|
|
{
|
|
return container_of(f, struct f_eem, port.func);
|
|
}
|
|
|
|
/*-------------------------------------------------------------------------*/
|
|
|
|
/* interface descriptor: */
|
|
|
|
static struct usb_interface_descriptor eem_intf __initdata = {
|
|
.bLength = sizeof eem_intf,
|
|
.bDescriptorType = USB_DT_INTERFACE,
|
|
|
|
/* .bInterfaceNumber = DYNAMIC */
|
|
.bNumEndpoints = 2,
|
|
.bInterfaceClass = USB_CLASS_COMM,
|
|
.bInterfaceSubClass = USB_CDC_SUBCLASS_EEM,
|
|
.bInterfaceProtocol = USB_CDC_PROTO_EEM,
|
|
/* .iInterface = DYNAMIC */
|
|
};
|
|
|
|
/* full speed support: */
|
|
|
|
static struct usb_endpoint_descriptor eem_fs_in_desc __initdata = {
|
|
.bLength = USB_DT_ENDPOINT_SIZE,
|
|
.bDescriptorType = USB_DT_ENDPOINT,
|
|
|
|
.bEndpointAddress = USB_DIR_IN,
|
|
.bmAttributes = USB_ENDPOINT_XFER_BULK,
|
|
};
|
|
|
|
static struct usb_endpoint_descriptor eem_fs_out_desc __initdata = {
|
|
.bLength = USB_DT_ENDPOINT_SIZE,
|
|
.bDescriptorType = USB_DT_ENDPOINT,
|
|
|
|
.bEndpointAddress = USB_DIR_OUT,
|
|
.bmAttributes = USB_ENDPOINT_XFER_BULK,
|
|
};
|
|
|
|
static struct usb_descriptor_header *eem_fs_function[] __initdata = {
|
|
/* CDC EEM control descriptors */
|
|
(struct usb_descriptor_header *) &eem_intf,
|
|
(struct usb_descriptor_header *) &eem_fs_in_desc,
|
|
(struct usb_descriptor_header *) &eem_fs_out_desc,
|
|
NULL,
|
|
};
|
|
|
|
/* high speed support: */
|
|
|
|
static struct usb_endpoint_descriptor eem_hs_in_desc __initdata = {
|
|
.bLength = USB_DT_ENDPOINT_SIZE,
|
|
.bDescriptorType = USB_DT_ENDPOINT,
|
|
|
|
.bEndpointAddress = USB_DIR_IN,
|
|
.bmAttributes = USB_ENDPOINT_XFER_BULK,
|
|
.wMaxPacketSize = cpu_to_le16(512),
|
|
};
|
|
|
|
static struct usb_endpoint_descriptor eem_hs_out_desc __initdata = {
|
|
.bLength = USB_DT_ENDPOINT_SIZE,
|
|
.bDescriptorType = USB_DT_ENDPOINT,
|
|
|
|
.bEndpointAddress = USB_DIR_OUT,
|
|
.bmAttributes = USB_ENDPOINT_XFER_BULK,
|
|
.wMaxPacketSize = cpu_to_le16(512),
|
|
};
|
|
|
|
static struct usb_descriptor_header *eem_hs_function[] __initdata = {
|
|
/* CDC EEM control descriptors */
|
|
(struct usb_descriptor_header *) &eem_intf,
|
|
(struct usb_descriptor_header *) &eem_hs_in_desc,
|
|
(struct usb_descriptor_header *) &eem_hs_out_desc,
|
|
NULL,
|
|
};
|
|
|
|
/* super speed support: */
|
|
|
|
static struct usb_endpoint_descriptor eem_ss_in_desc __initdata = {
|
|
.bLength = USB_DT_ENDPOINT_SIZE,
|
|
.bDescriptorType = USB_DT_ENDPOINT,
|
|
|
|
.bEndpointAddress = USB_DIR_IN,
|
|
.bmAttributes = USB_ENDPOINT_XFER_BULK,
|
|
.wMaxPacketSize = cpu_to_le16(1024),
|
|
};
|
|
|
|
static struct usb_endpoint_descriptor eem_ss_out_desc __initdata = {
|
|
.bLength = USB_DT_ENDPOINT_SIZE,
|
|
.bDescriptorType = USB_DT_ENDPOINT,
|
|
|
|
.bEndpointAddress = USB_DIR_OUT,
|
|
.bmAttributes = USB_ENDPOINT_XFER_BULK,
|
|
.wMaxPacketSize = cpu_to_le16(1024),
|
|
};
|
|
|
|
static struct usb_ss_ep_comp_descriptor eem_ss_bulk_comp_desc __initdata = {
|
|
.bLength = sizeof eem_ss_bulk_comp_desc,
|
|
.bDescriptorType = USB_DT_SS_ENDPOINT_COMP,
|
|
|
|
/* the following 2 values can be tweaked if necessary */
|
|
/* .bMaxBurst = 0, */
|
|
/* .bmAttributes = 0, */
|
|
};
|
|
|
|
static struct usb_descriptor_header *eem_ss_function[] __initdata = {
|
|
/* CDC EEM control descriptors */
|
|
(struct usb_descriptor_header *) &eem_intf,
|
|
(struct usb_descriptor_header *) &eem_ss_in_desc,
|
|
(struct usb_descriptor_header *) &eem_ss_bulk_comp_desc,
|
|
(struct usb_descriptor_header *) &eem_ss_out_desc,
|
|
(struct usb_descriptor_header *) &eem_ss_bulk_comp_desc,
|
|
NULL,
|
|
};
|
|
|
|
/* string descriptors: */
|
|
|
|
static struct usb_string eem_string_defs[] = {
|
|
[0].s = "CDC Ethernet Emulation Model (EEM)",
|
|
{ } /* end of list */
|
|
};
|
|
|
|
static struct usb_gadget_strings eem_string_table = {
|
|
.language = 0x0409, /* en-us */
|
|
.strings = eem_string_defs,
|
|
};
|
|
|
|
static struct usb_gadget_strings *eem_strings[] = {
|
|
&eem_string_table,
|
|
NULL,
|
|
};
|
|
|
|
/*-------------------------------------------------------------------------*/
|
|
|
|
static int eem_setup(struct usb_function *f, const struct usb_ctrlrequest *ctrl)
|
|
{
|
|
struct usb_composite_dev *cdev = f->config->cdev;
|
|
int value = -EOPNOTSUPP;
|
|
u16 w_index = le16_to_cpu(ctrl->wIndex);
|
|
u16 w_value = le16_to_cpu(ctrl->wValue);
|
|
u16 w_length = le16_to_cpu(ctrl->wLength);
|
|
|
|
DBG(cdev, "invalid control req%02x.%02x v%04x i%04x l%d\n",
|
|
ctrl->bRequestType, ctrl->bRequest,
|
|
w_value, w_index, w_length);
|
|
|
|
/* device either stalls (value < 0) or reports success */
|
|
return value;
|
|
}
|
|
|
|
|
|
static int eem_set_alt(struct usb_function *f, unsigned intf, unsigned alt)
|
|
{
|
|
struct f_eem *eem = func_to_eem(f);
|
|
struct usb_composite_dev *cdev = f->config->cdev;
|
|
struct net_device *net;
|
|
|
|
/* we know alt == 0, so this is an activation or a reset */
|
|
if (alt != 0)
|
|
goto fail;
|
|
|
|
if (intf == eem->ctrl_id) {
|
|
|
|
if (eem->port.in_ep->driver_data) {
|
|
DBG(cdev, "reset eem\n");
|
|
gether_disconnect(&eem->port);
|
|
}
|
|
|
|
if (!eem->port.in_ep->desc || !eem->port.out_ep->desc) {
|
|
DBG(cdev, "init eem\n");
|
|
if (config_ep_by_speed(cdev->gadget, f,
|
|
eem->port.in_ep) ||
|
|
config_ep_by_speed(cdev->gadget, f,
|
|
eem->port.out_ep)) {
|
|
eem->port.in_ep->desc = NULL;
|
|
eem->port.out_ep->desc = NULL;
|
|
goto fail;
|
|
}
|
|
}
|
|
|
|
/* zlps should not occur because zero-length EEM packets
|
|
* will be inserted in those cases where they would occur
|
|
*/
|
|
eem->port.is_zlp_ok = 1;
|
|
eem->port.cdc_filter = DEFAULT_FILTER;
|
|
DBG(cdev, "activate eem\n");
|
|
net = gether_connect(&eem->port);
|
|
if (IS_ERR(net))
|
|
return PTR_ERR(net);
|
|
} else
|
|
goto fail;
|
|
|
|
return 0;
|
|
fail:
|
|
return -EINVAL;
|
|
}
|
|
|
|
static void eem_disable(struct usb_function *f)
|
|
{
|
|
struct f_eem *eem = func_to_eem(f);
|
|
struct usb_composite_dev *cdev = f->config->cdev;
|
|
|
|
DBG(cdev, "eem deactivated\n");
|
|
|
|
if (eem->port.in_ep->driver_data)
|
|
gether_disconnect(&eem->port);
|
|
}
|
|
|
|
/*-------------------------------------------------------------------------*/
|
|
|
|
/* EEM function driver setup/binding */
|
|
|
|
static int __init
|
|
eem_bind(struct usb_configuration *c, struct usb_function *f)
|
|
{
|
|
struct usb_composite_dev *cdev = c->cdev;
|
|
struct f_eem *eem = func_to_eem(f);
|
|
int status;
|
|
struct usb_ep *ep;
|
|
|
|
/* allocate instance-specific interface IDs */
|
|
status = usb_interface_id(c, f);
|
|
if (status < 0)
|
|
goto fail;
|
|
eem->ctrl_id = status;
|
|
eem_intf.bInterfaceNumber = status;
|
|
|
|
status = -ENODEV;
|
|
|
|
/* allocate instance-specific endpoints */
|
|
ep = usb_ep_autoconfig(cdev->gadget, &eem_fs_in_desc);
|
|
if (!ep)
|
|
goto fail;
|
|
eem->port.in_ep = ep;
|
|
ep->driver_data = cdev; /* claim */
|
|
|
|
ep = usb_ep_autoconfig(cdev->gadget, &eem_fs_out_desc);
|
|
if (!ep)
|
|
goto fail;
|
|
eem->port.out_ep = ep;
|
|
ep->driver_data = cdev; /* claim */
|
|
|
|
status = -ENOMEM;
|
|
|
|
/* support all relevant hardware speeds... we expect that when
|
|
* hardware is dual speed, all bulk-capable endpoints work at
|
|
* both speeds
|
|
*/
|
|
eem_hs_in_desc.bEndpointAddress = eem_fs_in_desc.bEndpointAddress;
|
|
eem_hs_out_desc.bEndpointAddress = eem_fs_out_desc.bEndpointAddress;
|
|
|
|
eem_ss_in_desc.bEndpointAddress = eem_fs_in_desc.bEndpointAddress;
|
|
eem_ss_out_desc.bEndpointAddress = eem_fs_out_desc.bEndpointAddress;
|
|
|
|
status = usb_assign_descriptors(f, eem_fs_function, eem_hs_function,
|
|
eem_ss_function);
|
|
if (status)
|
|
goto fail;
|
|
|
|
DBG(cdev, "CDC Ethernet (EEM): %s speed IN/%s OUT/%s\n",
|
|
gadget_is_superspeed(c->cdev->gadget) ? "super" :
|
|
gadget_is_dualspeed(c->cdev->gadget) ? "dual" : "full",
|
|
eem->port.in_ep->name, eem->port.out_ep->name);
|
|
return 0;
|
|
|
|
fail:
|
|
usb_free_all_descriptors(f);
|
|
if (eem->port.out_ep)
|
|
eem->port.out_ep->driver_data = NULL;
|
|
if (eem->port.in_ep)
|
|
eem->port.in_ep->driver_data = NULL;
|
|
|
|
ERROR(cdev, "%s: can't bind, err %d\n", f->name, status);
|
|
|
|
return status;
|
|
}
|
|
|
|
static void
|
|
eem_unbind(struct usb_configuration *c, struct usb_function *f)
|
|
{
|
|
struct f_eem *eem = func_to_eem(f);
|
|
|
|
DBG(c->cdev, "eem unbind\n");
|
|
|
|
usb_free_all_descriptors(f);
|
|
kfree(eem);
|
|
}
|
|
|
|
static void eem_cmd_complete(struct usb_ep *ep, struct usb_request *req)
|
|
{
|
|
struct sk_buff *skb = (struct sk_buff *)req->context;
|
|
|
|
dev_kfree_skb_any(skb);
|
|
}
|
|
|
|
/*
|
|
* Add the EEM header and ethernet checksum.
|
|
* We currently do not attempt to put multiple ethernet frames
|
|
* into a single USB transfer
|
|
*/
|
|
static struct sk_buff *eem_wrap(struct gether *port, struct sk_buff *skb)
|
|
{
|
|
struct sk_buff *skb2 = NULL;
|
|
struct usb_ep *in = port->in_ep;
|
|
int padlen = 0;
|
|
u16 len = skb->len;
|
|
|
|
if (!skb_cloned(skb)) {
|
|
int headroom = skb_headroom(skb);
|
|
int tailroom = skb_tailroom(skb);
|
|
|
|
/* When (len + EEM_HLEN + ETH_FCS_LEN) % in->maxpacket) is 0,
|
|
* stick two bytes of zero-length EEM packet on the end.
|
|
*/
|
|
if (((len + EEM_HLEN + ETH_FCS_LEN) % in->maxpacket) == 0)
|
|
padlen += 2;
|
|
|
|
if ((tailroom >= (ETH_FCS_LEN + padlen)) &&
|
|
(headroom >= EEM_HLEN))
|
|
goto done;
|
|
}
|
|
|
|
skb2 = skb_copy_expand(skb, EEM_HLEN, ETH_FCS_LEN + padlen, GFP_ATOMIC);
|
|
dev_kfree_skb_any(skb);
|
|
skb = skb2;
|
|
if (!skb)
|
|
return skb;
|
|
|
|
done:
|
|
/* use the "no CRC" option */
|
|
put_unaligned_be32(0xdeadbeef, skb_put(skb, 4));
|
|
|
|
/* EEM packet header format:
|
|
* b0..13: length of ethernet frame
|
|
* b14: bmCRC (0 == sentinel CRC)
|
|
* b15: bmType (0 == data)
|
|
*/
|
|
len = skb->len;
|
|
put_unaligned_le16(len & 0x3FFF, skb_push(skb, 2));
|
|
|
|
/* add a zero-length EEM packet, if needed */
|
|
if (padlen)
|
|
put_unaligned_le16(0, skb_put(skb, 2));
|
|
|
|
return skb;
|
|
}
|
|
|
|
/*
|
|
* Remove the EEM header. Note that there can be many EEM packets in a single
|
|
* USB transfer, so we need to break them out and handle them independently.
|
|
*/
|
|
static int eem_unwrap(struct gether *port,
|
|
struct sk_buff *skb,
|
|
struct sk_buff_head *list)
|
|
{
|
|
struct usb_composite_dev *cdev = port->func.config->cdev;
|
|
int status = 0;
|
|
|
|
do {
|
|
struct sk_buff *skb2;
|
|
u16 header;
|
|
u16 len = 0;
|
|
|
|
if (skb->len < EEM_HLEN) {
|
|
status = -EINVAL;
|
|
DBG(cdev, "invalid EEM header\n");
|
|
goto error;
|
|
}
|
|
|
|
/* remove the EEM header */
|
|
header = get_unaligned_le16(skb->data);
|
|
skb_pull(skb, EEM_HLEN);
|
|
|
|
/* EEM packet header format:
|
|
* b0..14: EEM type dependent (data or command)
|
|
* b15: bmType (0 == data, 1 == command)
|
|
*/
|
|
if (header & BIT(15)) {
|
|
struct usb_request *req = cdev->req;
|
|
u16 bmEEMCmd;
|
|
|
|
/* EEM command packet format:
|
|
* b0..10: bmEEMCmdParam
|
|
* b11..13: bmEEMCmd
|
|
* b14: reserved (must be zero)
|
|
* b15: bmType (1 == command)
|
|
*/
|
|
if (header & BIT(14))
|
|
continue;
|
|
|
|
bmEEMCmd = (header >> 11) & 0x7;
|
|
switch (bmEEMCmd) {
|
|
case 0: /* echo */
|
|
len = header & 0x7FF;
|
|
if (skb->len < len) {
|
|
status = -EOVERFLOW;
|
|
goto error;
|
|
}
|
|
|
|
skb2 = skb_clone(skb, GFP_ATOMIC);
|
|
if (unlikely(!skb2)) {
|
|
DBG(cdev, "EEM echo response error\n");
|
|
goto next;
|
|
}
|
|
skb_trim(skb2, len);
|
|
put_unaligned_le16(BIT(15) | BIT(11) | len,
|
|
skb_push(skb2, 2));
|
|
skb_copy_bits(skb2, 0, req->buf, skb2->len);
|
|
req->length = skb2->len;
|
|
req->complete = eem_cmd_complete;
|
|
req->zero = 1;
|
|
req->context = skb2;
|
|
if (usb_ep_queue(port->in_ep, req, GFP_ATOMIC))
|
|
DBG(cdev, "echo response queue fail\n");
|
|
break;
|
|
|
|
case 1: /* echo response */
|
|
case 2: /* suspend hint */
|
|
case 3: /* response hint */
|
|
case 4: /* response complete hint */
|
|
case 5: /* tickle */
|
|
default: /* reserved */
|
|
continue;
|
|
}
|
|
} else {
|
|
u32 crc, crc2;
|
|
struct sk_buff *skb3;
|
|
|
|
/* check for zero-length EEM packet */
|
|
if (header == 0)
|
|
continue;
|
|
|
|
/* EEM data packet format:
|
|
* b0..13: length of ethernet frame
|
|
* b14: bmCRC (0 == sentinel, 1 == calculated)
|
|
* b15: bmType (0 == data)
|
|
*/
|
|
len = header & 0x3FFF;
|
|
if ((skb->len < len)
|
|
|| (len < (ETH_HLEN + ETH_FCS_LEN))) {
|
|
status = -EINVAL;
|
|
goto error;
|
|
}
|
|
|
|
/* validate CRC */
|
|
if (header & BIT(14)) {
|
|
crc = get_unaligned_le32(skb->data + len
|
|
- ETH_FCS_LEN);
|
|
crc2 = ~crc32_le(~0,
|
|
skb->data, len - ETH_FCS_LEN);
|
|
} else {
|
|
crc = get_unaligned_be32(skb->data + len
|
|
- ETH_FCS_LEN);
|
|
crc2 = 0xdeadbeef;
|
|
}
|
|
if (crc != crc2) {
|
|
DBG(cdev, "invalid EEM CRC\n");
|
|
goto next;
|
|
}
|
|
|
|
skb2 = skb_clone(skb, GFP_ATOMIC);
|
|
if (unlikely(!skb2)) {
|
|
DBG(cdev, "unable to unframe EEM packet\n");
|
|
continue;
|
|
}
|
|
skb_trim(skb2, len - ETH_FCS_LEN);
|
|
|
|
skb3 = skb_copy_expand(skb2,
|
|
NET_IP_ALIGN,
|
|
0,
|
|
GFP_ATOMIC);
|
|
if (unlikely(!skb3)) {
|
|
DBG(cdev, "unable to realign EEM packet\n");
|
|
dev_kfree_skb_any(skb2);
|
|
continue;
|
|
}
|
|
dev_kfree_skb_any(skb2);
|
|
skb_queue_tail(list, skb3);
|
|
}
|
|
next:
|
|
skb_pull(skb, len);
|
|
} while (skb->len);
|
|
|
|
error:
|
|
dev_kfree_skb_any(skb);
|
|
return status;
|
|
}
|
|
|
|
/**
|
|
* eem_bind_config - add CDC Ethernet (EEM) network link to a configuration
|
|
* @c: the configuration to support the network link
|
|
* Context: single threaded during gadget setup
|
|
*
|
|
* Returns zero on success, else negative errno.
|
|
*
|
|
* Caller must have called @gether_setup(). Caller is also responsible
|
|
* for calling @gether_cleanup() before module unload.
|
|
*/
|
|
int __init eem_bind_config(struct usb_configuration *c)
|
|
{
|
|
struct f_eem *eem;
|
|
int status;
|
|
|
|
/* maybe allocate device-global string IDs */
|
|
if (eem_string_defs[0].id == 0) {
|
|
|
|
/* control interface label */
|
|
status = usb_string_id(c->cdev);
|
|
if (status < 0)
|
|
return status;
|
|
eem_string_defs[0].id = status;
|
|
eem_intf.iInterface = status;
|
|
}
|
|
|
|
/* allocate and initialize one new instance */
|
|
eem = kzalloc(sizeof *eem, GFP_KERNEL);
|
|
if (!eem)
|
|
return -ENOMEM;
|
|
|
|
eem->port.cdc_filter = DEFAULT_FILTER;
|
|
|
|
eem->port.func.name = "cdc_eem";
|
|
eem->port.func.strings = eem_strings;
|
|
/* descriptors are per-instance copies */
|
|
eem->port.func.bind = eem_bind;
|
|
eem->port.func.unbind = eem_unbind;
|
|
eem->port.func.set_alt = eem_set_alt;
|
|
eem->port.func.setup = eem_setup;
|
|
eem->port.func.disable = eem_disable;
|
|
eem->port.wrap = eem_wrap;
|
|
eem->port.unwrap = eem_unwrap;
|
|
eem->port.header_len = EEM_HLEN;
|
|
|
|
status = usb_add_function(c, &eem->port.func);
|
|
if (status)
|
|
kfree(eem);
|
|
return status;
|
|
}
|
|
|