drivers/hid/hid-wiimote-core.c

   1 /*
   2  * HID driver for Nintendo Wii / Wii U peripherals
   3  * Copyright (c) 2011-2013 David Herrmann <dh.herrmann@gmail.com>
   4  */
   5
   6 /*
   7  * This program is free software; you can redistribute it and/or modify it
   8  * under the terms of the GNU General Public License as published by the Free
   9  * Software Foundation; either version 2 of the License, or (at your option)
  10  * any later version.
  11  */
  12
  13 #include <linux/completion.h>
  14 #include <linux/device.h>
  15 #include <linux/hid.h>
  16 #include <linux/input.h>
  17 #include <linux/module.h>
  18 #include <linux/mutex.h>
  19 #include <linux/spinlock.h>
  20 #include "hid-ids.h"
  21 #include "hid-wiimote.h"
  22
  23 /* output queue handling */
  24
  25 static int wiimote_hid_send(struct hid_device *hdev, __u8 *buffer,
  26                             size_t count)
  27 {
  28         __u8 *buf;
  29         int ret;
  30
  31         if (!hdev->ll_driver->output_report)
  32                 return -ENODEV;
  33
  34         buf = kmemdup(buffer, count, GFP_KERNEL);
  35         if (!buf)
  36                 return -ENOMEM;
  37
  38         ret = hid_hw_output_report(hdev, buf, count);
  39
  40         kfree(buf);
  41         return ret;
  42 }
  43
  44 static void wiimote_queue_worker(struct work_struct *work)
  45 {
  46         struct wiimote_queue *queue = container_of(work, struct wiimote_queue,
  47                                                    worker);
  48         struct wiimote_data *wdata = container_of(queue, struct wiimote_data,
  49                                                   queue);
  50         unsigned long flags;
  51         int ret;
  52
  53         spin_lock_irqsave(&wdata->queue.lock, flags);
  54
  55         while (wdata->queue.head != wdata->queue.tail) {
  56                 spin_unlock_irqrestore(&wdata->queue.lock, flags);
  57                 ret = wiimote_hid_send(wdata->hdev,
  58                                  wdata->queue.outq[wdata->queue.tail].data,
  59                                  wdata->queue.outq[wdata->queue.tail].size);
  60                 if (ret < 0) {
  61                         spin_lock_irqsave(&wdata->state.lock, flags);
  62                         wiimote_cmd_abort(wdata);
  63                         spin_unlock_irqrestore(&wdata->state.lock, flags);
  64                 }
  65                 spin_lock_irqsave(&wdata->queue.lock, flags);
  66
  67                 wdata->queue.tail = (wdata->queue.tail + 1) % WIIMOTE_BUFSIZE;
  68         }
  69
  70         spin_unlock_irqrestore(&wdata->queue.lock, flags);
  71 }
  72
  73 static void wiimote_queue(struct wiimote_data *wdata, const __u8 *buffer,
  74                                                                 size_t count)
  75 {
  76         unsigned long flags;
  77         __u8 newhead;
  78
  79         if (count > HID_MAX_BUFFER_SIZE) {
  80                 hid_warn(wdata->hdev, "Sending too large output report\n");
  81
  82                 spin_lock_irqsave(&wdata->queue.lock, flags);
  83                 goto out_error;
  84         }
  85
  86         /*
  87          * Copy new request into our output queue and check whether the
  88          * queue is full. If it is full, discard this request.
  89          * If it is empty we need to start a new worker that will
  90          * send out the buffer to the hid device.
  91          * If the queue is not empty, then there must be a worker
  92          * that is currently sending out our buffer and this worker
  93          * will reschedule itself until the queue is empty.
  94          */
  95
  96         spin_lock_irqsave(&wdata->queue.lock, flags);
  97
  98         memcpy(wdata->queue.outq[wdata->queue.head].data, buffer, count);
  99         wdata->queue.outq[wdata->queue.head].size = count;
 100         newhead = (wdata->queue.head + 1) % WIIMOTE_BUFSIZE;
 101
 102         if (wdata->queue.head == wdata->queue.tail) {
 103                 wdata->queue.head = newhead;
 104                 schedule_work(&wdata->queue.worker);
 105         } else if (newhead != wdata->queue.tail) {
 106                 wdata->queue.head = newhead;
 107         } else {
 108                 hid_warn(wdata->hdev, "Output queue is full");
 109                 goto out_error;
 110         }
 111
 112         goto out_unlock;
 113
 114 out_error:
 115         wiimote_cmd_abort(wdata);
 116 out_unlock:
 117         spin_unlock_irqrestore(&wdata->queue.lock, flags);
 118 }
 119
 120 /*
 121  * This sets the rumble bit on the given output report if rumble is
 122  * currently enabled.
 123  * \cmd1 must point to the second byte in the output report => &cmd[1]
 124  * This must be called on nearly every output report before passing it
 125  * into the output queue!
 126  */
 127 static inline void wiiproto_keep_rumble(struct wiimote_data *wdata, __u8 *cmd1)
 128 {
 129         if (wdata->state.flags & WIIPROTO_FLAG_RUMBLE)
 130                 *cmd1 |= 0x01;
 131 }
 132
 133 void wiiproto_req_rumble(struct wiimote_data *wdata, __u8 rumble)
 134 {
 135         __u8 cmd[2];
 136
 137         rumble = !!rumble;
 138         if (rumble == !!(wdata->state.flags & WIIPROTO_FLAG_RUMBLE))
 139                 return;
 140
 141         if (rumble)
 142                 wdata->state.flags |= WIIPROTO_FLAG_RUMBLE;
 143         else
 144                 wdata->state.flags &= ~WIIPROTO_FLAG_RUMBLE;
 145
 146         cmd[0] = WIIPROTO_REQ_RUMBLE;
 147         cmd[1] = 0;
 148
 149         wiiproto_keep_rumble(wdata, &cmd[1]);
 150         wiimote_queue(wdata, cmd, sizeof(cmd));
 151 }
 152
 153 void wiiproto_req_leds(struct wiimote_data *wdata, int leds)
 154 {
 155         __u8 cmd[2];
 156
 157         leds &= WIIPROTO_FLAGS_LEDS;
 158         if ((wdata->state.flags & WIIPROTO_FLAGS_LEDS) == leds)
 159                 return;
 160         wdata->state.flags = (wdata->state.flags & ~WIIPROTO_FLAGS_LEDS) | leds;
 161
 162         cmd[0] = WIIPROTO_REQ_LED;
 163         cmd[1] = 0;
 164
 165         if (leds & WIIPROTO_FLAG_LED1)
 166                 cmd[1] |= 0x10;
 167         if (leds & WIIPROTO_FLAG_LED2)
 168                 cmd[1] |= 0x20;
 169         if (leds & WIIPROTO_FLAG_LED3)
 170                 cmd[1] |= 0x40;
 171         if (leds & WIIPROTO_FLAG_LED4)
 172                 cmd[1] |= 0x80;
 173
 174         wiiproto_keep_rumble(wdata, &cmd[1]);
 175         wiimote_queue(wdata, cmd, sizeof(cmd));
 176 }
 177
 178 /*
 179  * Check what peripherals of the wiimote are currently
 180  * active and select a proper DRM that supports all of
 181  * the requested data inputs.
 182  *
 183  * Not all combinations are actually supported. The following
 184  * combinations work only with limitations:
 185  *  - IR cam in extended or full mode disables any data transmission
 186  *    of extension controllers. There is no DRM mode that supports
 187  *    extension bytes plus extended/full IR.
 188  *  - IR cam with accelerometer and extension *_EXT8 is not supported.
 189  *    However, all extensions that need *_EXT8 are devices that don't
 190  *    support IR cameras. Hence, this shouldn't happen under normal
 191  *    operation.
 192  *  - *_EXT16 is only supported in combination with buttons and
 193  *    accelerometer. No IR or similar can be active simultaneously. As
 194  *    above, all modules that require it are mutually exclusive with
 195  *    IR/etc. so this doesn't matter.
 196  */
 197 static __u8 select_drm(struct wiimote_data *wdata)
 198 {
 199         __u8 ir = wdata->state.flags & WIIPROTO_FLAGS_IR;
 200         bool ext;
 201
 202         ext = (wdata->state.flags & WIIPROTO_FLAG_EXT_USED) ||
 203               (wdata->state.flags & WIIPROTO_FLAG_MP_USED);
 204
 205         /* some 3rd-party balance-boards are hard-coded to KEE, *sigh* */
 206         if (wdata->state.devtype == WIIMOTE_DEV_BALANCE_BOARD) {
 207                 if (ext)
 208                         return WIIPROTO_REQ_DRM_KEE;
 209                 else
 210                         return WIIPROTO_REQ_DRM_K;
 211         }
 212
 213         if (ir == WIIPROTO_FLAG_IR_BASIC) {
 214                 if (wdata->state.flags & WIIPROTO_FLAG_ACCEL) {
 215                         /* GEN10 and ealier devices bind IR formats to DRMs.
 216                          * Hence, we cannot use DRM_KAI here as it might be
 217                          * bound to IR_EXT. Use DRM_KAIE unconditionally so we
 218                          * work with all devices and our parsers can use the
 219                          * fixed formats, too. */
 220                         return WIIPROTO_REQ_DRM_KAIE;
 221                 } else {
 222                         return WIIPROTO_REQ_DRM_KIE;
 223                 }
 224         } else if (ir == WIIPROTO_FLAG_IR_EXT) {
 225                 return WIIPROTO_REQ_DRM_KAI;
 226         } else if (ir == WIIPROTO_FLAG_IR_FULL) {
 227                 return WIIPROTO_REQ_DRM_SKAI1;
 228         } else {
 229                 if (wdata->state.flags & WIIPROTO_FLAG_ACCEL) {
 230                         if (ext)
 231                                 return WIIPROTO_REQ_DRM_KAE;
 232                         else
 233                                 return WIIPROTO_REQ_DRM_KA;
 234                 } else {
 235                         if (ext)
 236                                 return WIIPROTO_REQ_DRM_KEE;
 237                         else
 238                                 return WIIPROTO_REQ_DRM_K;
 239                 }
 240         }
 241 }
 242
 243 void wiiproto_req_drm(struct wiimote_data *wdata, __u8 drm)
 244 {
 245         __u8 cmd[3];
 246
 247         if (wdata->state.flags & WIIPROTO_FLAG_DRM_LOCKED)
 248                 drm = wdata->state.drm;
 249         else if (drm == WIIPROTO_REQ_NULL)
 250                 drm = select_drm(wdata);
 251
 252         cmd[0] = WIIPROTO_REQ_DRM;
 253         cmd[1] = 0;
 254         cmd[2] = drm;
 255
 256         wdata->state.drm = drm;
 257         wiiproto_keep_rumble(wdata, &cmd[1]);
 258         wiimote_queue(wdata, cmd, sizeof(cmd));
 259 }
 260
 261 void wiiproto_req_status(struct wiimote_data *wdata)
 262 {
 263         __u8 cmd[2];
 264
 265         cmd[0] = WIIPROTO_REQ_SREQ;
 266         cmd[1] = 0;
 267
 268         wiiproto_keep_rumble(wdata, &cmd[1]);
 269         wiimote_queue(wdata, cmd, sizeof(cmd));
 270 }
 271
 272 void wiiproto_req_accel(struct wiimote_data *wdata, __u8 accel)
 273 {
 274         accel = !!accel;
 275         if (accel == !!(wdata->state.flags & WIIPROTO_FLAG_ACCEL))
 276                 return;
 277
 278         if (accel)
 279                 wdata->state.flags |= WIIPROTO_FLAG_ACCEL;
 280         else
 281                 wdata->state.flags &= ~WIIPROTO_FLAG_ACCEL;
 282
 283         wiiproto_req_drm(wdata, WIIPROTO_REQ_NULL);
 284 }
 285
 286 void wiiproto_req_ir1(struct wiimote_data *wdata, __u8 flags)
 287 {
 288         __u8 cmd[2];
 289
 290         cmd[0] = WIIPROTO_REQ_IR1;
 291         cmd[1] = flags;
 292
 293         wiiproto_keep_rumble(wdata, &cmd[1]);
 294         wiimote_queue(wdata, cmd, sizeof(cmd));
 295 }
 296
 297 void wiiproto_req_ir2(struct wiimote_data *wdata, __u8 flags)
 298 {
 299         __u8 cmd[2];
 300
 301         cmd[0] = WIIPROTO_REQ_IR2;
 302         cmd[1] = flags;
 303
 304         wiiproto_keep_rumble(wdata, &cmd[1]);
 305         wiimote_queue(wdata, cmd, sizeof(cmd));
 306 }
 307
 308 #define wiiproto_req_wreg(wdata, os, buf, sz) \
 309                         wiiproto_req_wmem((wdata), false, (os), (buf), (sz))
 310
 311 #define wiiproto_req_weeprom(wdata, os, buf, sz) \
 312                         wiiproto_req_wmem((wdata), true, (os), (buf), (sz))
 313
 314 static void wiiproto_req_wmem(struct wiimote_data *wdata, bool eeprom,
 315                                 __u32 offset, const __u8 *buf, __u8 size)
 316 {
 317         __u8 cmd[22];
 318
 319         if (size > 16 || size == 0) {
 320                 hid_warn(wdata->hdev, "Invalid length %d wmem request\n", size);
 321                 return;
 322         }
 323
 324         memset(cmd, 0, sizeof(cmd));
 325         cmd[0] = WIIPROTO_REQ_WMEM;
 326         cmd[2] = (offset >> 16) & 0xff;
 327         cmd[3] = (offset >> 8) & 0xff;
 328         cmd[4] = offset & 0xff;
 329         cmd[5] = size;
 330         memcpy(&cmd[6], buf, size);
 331
 332         if (!eeprom)
 333                 cmd[1] |= 0x04;
 334
 335         wiiproto_keep_rumble(wdata, &cmd[1]);
 336         wiimote_queue(wdata, cmd, sizeof(cmd));
 337 }
 338
 339 void wiiproto_req_rmem(struct wiimote_data *wdata, bool eeprom, __u32 offset,
 340                                                                 __u16 size)
 341 {
 342         __u8 cmd[7];
 343
 344         if (size == 0) {
 345                 hid_warn(wdata->hdev, "Invalid length %d rmem request\n", size);
 346                 return;
 347         }
 348
 349         cmd[0] = WIIPROTO_REQ_RMEM;
 350         cmd[1] = 0;
 351         cmd[2] = (offset >> 16) & 0xff;
 352         cmd[3] = (offset >> 8) & 0xff;
 353         cmd[4] = offset & 0xff;
 354         cmd[5] = (size >> 8) & 0xff;
 355         cmd[6] = size & 0xff;
 356
 357         if (!eeprom)
 358                 cmd[1] |= 0x04;
 359
 360         wiiproto_keep_rumble(wdata, &cmd[1]);
 361         wiimote_queue(wdata, cmd, sizeof(cmd));
 362 }
 363
 364 /* requries the cmd-mutex to be held */
 365 int wiimote_cmd_write(struct wiimote_data *wdata, __u32 offset,
 366                                                 const __u8 *wmem, __u8 size)
 367 {
 368         unsigned long flags;
 369         int ret;
 370
 371         spin_lock_irqsave(&wdata->state.lock, flags);
 372         wiimote_cmd_set(wdata, WIIPROTO_REQ_WMEM, 0);
 373         wiiproto_req_wreg(wdata, offset, wmem, size);
 374         spin_unlock_irqrestore(&wdata->state.lock, flags);
 375
 376         ret = wiimote_cmd_wait(wdata);
 377         if (!ret && wdata->state.cmd_err)
 378                 ret = -EIO;
 379
 380         return ret;
 381 }
 382
 383 /* requries the cmd-mutex to be held */
 384 ssize_t wiimote_cmd_read(struct wiimote_data *wdata, __u32 offset, __u8 *rmem,
 385                                                                 __u8 size)
 386 {
 387         unsigned long flags;
 388         ssize_t ret;
 389
 390         spin_lock_irqsave(&wdata->state.lock, flags);
 391         wdata->state.cmd_read_size = size;
 392         wdata->state.cmd_read_buf = rmem;
 393         wiimote_cmd_set(wdata, WIIPROTO_REQ_RMEM, offset & 0xffff);
 394         wiiproto_req_rreg(wdata, offset, size);
 395         spin_unlock_irqrestore(&wdata->state.lock, flags);
 396
 397         ret = wiimote_cmd_wait(wdata);
 398
 399         spin_lock_irqsave(&wdata->state.lock, flags);
 400         wdata->state.cmd_read_buf = NULL;
 401         spin_unlock_irqrestore(&wdata->state.lock, flags);
 402
 403         if (!ret) {
 404                 if (wdata->state.cmd_read_size == 0)
 405                         ret = -EIO;
 406                 else
 407                         ret = wdata->state.cmd_read_size;
 408         }
 409
 410         return ret;
 411 }
 412
 413 /* requires the cmd-mutex to be held */
 414 static int wiimote_cmd_init_ext(struct wiimote_data *wdata)
 415 {
 416         __u8 wmem;
 417         int ret;
 418
 419         /* initialize extension */
 420         wmem = 0x55;
 421         ret = wiimote_cmd_write(wdata, 0xa400f0, &wmem, sizeof(wmem));
 422         if (ret)
 423                 return ret;
 424
 425         /* disable default encryption */
 426         wmem = 0x0;
 427         ret = wiimote_cmd_write(wdata, 0xa400fb, &wmem, sizeof(wmem));
 428         if (ret)
 429                 return ret;
 430
 431         return 0;
 432 }
 433
 434 /* requires the cmd-mutex to be held */
 435 static __u8 wiimote_cmd_read_ext(struct wiimote_data *wdata, __u8 *rmem)
 436 {
 437         int ret;
 438
 439         /* read extension ID */
 440         ret = wiimote_cmd_read(wdata, 0xa400fa, rmem, 6);
 441         if (ret != 6)
 442                 return WIIMOTE_EXT_NONE;
 443
 444         hid_dbg(wdata->hdev, "extension ID: %6phC\n", rmem);
 445
 446         if (rmem[0] == 0xff && rmem[1] == 0xff && rmem[2] == 0xff &&
 447             rmem[3] == 0xff && rmem[4] == 0xff && rmem[5] == 0xff)
 448                 return WIIMOTE_EXT_NONE;
 449
 450         if (rmem[4] == 0x00 && rmem[5] == 0x00)
 451                 return WIIMOTE_EXT_NUNCHUK;
 452         if (rmem[4] == 0x01 && rmem[5] == 0x01)
 453                 return WIIMOTE_EXT_CLASSIC_CONTROLLER;
 454         if (rmem[4] == 0x04 && rmem[5] == 0x02)
 455                 return WIIMOTE_EXT_BALANCE_BOARD;
 456         if (rmem[4] == 0x01 && rmem[5] == 0x20)
 457                 return WIIMOTE_EXT_PRO_CONTROLLER;
 458         if (rmem[0] == 0x01 && rmem[1] == 0x00 &&
 459             rmem[4] == 0x01 && rmem[5] == 0x03)
 460                 return WIIMOTE_EXT_DRUMS;
 461         if (rmem[0] == 0x00 && rmem[1] == 0x00 &&
 462             rmem[4] == 0x01 && rmem[5] == 0x03)
 463                 return WIIMOTE_EXT_GUITAR;
 464
 465         return WIIMOTE_EXT_UNKNOWN;
 466 }
 467
 468 /* requires the cmd-mutex to be held */
 469 static int wiimote_cmd_init_mp(struct wiimote_data *wdata)
 470 {
 471         __u8 wmem;
 472         int ret;
 473
 474         /* initialize MP */
 475         wmem = 0x55;
 476         ret = wiimote_cmd_write(wdata, 0xa600f0, &wmem, sizeof(wmem));
 477         if (ret)
 478                 return ret;
 479
 480         /* disable default encryption */
 481         wmem = 0x0;
 482         ret = wiimote_cmd_write(wdata, 0xa600fb, &wmem, sizeof(wmem));
 483         if (ret)
 484                 return ret;
 485
 486         return 0;
 487 }
 488
 489 /* requires the cmd-mutex to be held */
 490 static bool wiimote_cmd_map_mp(struct wiimote_data *wdata, __u8 exttype)
 491 {
 492         __u8 wmem;
 493
 494         /* map MP with correct pass-through mode */
 495         switch (exttype) {
 496         case WIIMOTE_EXT_CLASSIC_CONTROLLER:
 497         case WIIMOTE_EXT_DRUMS:
 498         case WIIMOTE_EXT_GUITAR:
 499                 wmem = 0x07;
 500                 break;
 501         case WIIMOTE_EXT_NUNCHUK:
 502                 wmem = 0x05;
 503                 break;
 504         default:
 505                 wmem = 0x04;
 506                 break;
 507         }
 508
 509         return wiimote_cmd_write(wdata, 0xa600fe, &wmem, sizeof(wmem));
 510 }
 511
 512 /* requires the cmd-mutex to be held */
 513 static bool wiimote_cmd_read_mp(struct wiimote_data *wdata, __u8 *rmem)
 514 {
 515         int ret;
 516
 517         /* read motion plus ID */
 518         ret = wiimote_cmd_read(wdata, 0xa600fa, rmem, 6);
 519         if (ret != 6)
 520                 return false;
 521
 522         hid_dbg(wdata->hdev, "motion plus ID: %6phC\n", rmem);
 523
 524         if (rmem[5] == 0x05)
 525                 return true;
 526
 527         hid_info(wdata->hdev, "unknown motion plus ID: %6phC\n", rmem);
 528
 529         return false;
 530 }
 531
 532 /* requires the cmd-mutex to be held */
 533 static __u8 wiimote_cmd_read_mp_mapped(struct wiimote_data *wdata)
 534 {
 535         int ret;
 536         __u8 rmem[6];
 537
 538         /* read motion plus ID */
 539         ret = wiimote_cmd_read(wdata, 0xa400fa, rmem, 6);
 540         if (ret != 6)
 541                 return WIIMOTE_MP_NONE;
 542
 543         hid_dbg(wdata->hdev, "mapped motion plus ID: %6phC\n", rmem);
 544
 545         if (rmem[0] == 0xff && rmem[1] == 0xff && rmem[2] == 0xff &&
 546             rmem[3] == 0xff && rmem[4] == 0xff && rmem[5] == 0xff)
 547                 return WIIMOTE_MP_NONE;
 548
 549         if (rmem[4] == 0x04 && rmem[5] == 0x05)
 550                 return WIIMOTE_MP_SINGLE;
 551         else if (rmem[4] == 0x05 && rmem[5] == 0x05)
 552                 return WIIMOTE_MP_PASSTHROUGH_NUNCHUK;
 553         else if (rmem[4] == 0x07 && rmem[5] == 0x05)
 554                 return WIIMOTE_MP_PASSTHROUGH_CLASSIC;
 555
 556         return WIIMOTE_MP_UNKNOWN;
 557 }
 558
 559 /* device module handling */
 560
 561 static const __u8 * const wiimote_devtype_mods[WIIMOTE_DEV_NUM] = {
 562         [WIIMOTE_DEV_PENDING] = (const __u8[]){
 563                 WIIMOD_NULL,
 564         },
 565         [WIIMOTE_DEV_UNKNOWN] = (const __u8[]){
 566                 WIIMOD_NO_MP,
 567                 WIIMOD_NULL,
 568         },
 569         [WIIMOTE_DEV_GENERIC] = (const __u8[]){
 570                 WIIMOD_KEYS,
 571                 WIIMOD_RUMBLE,
 572                 WIIMOD_BATTERY,
 573                 WIIMOD_LED1,
 574                 WIIMOD_LED2,
 575                 WIIMOD_LED3,
 576                 WIIMOD_LED4,
 577                 WIIMOD_ACCEL,
 578                 WIIMOD_IR,
 579                 WIIMOD_NULL,
 580         },
 581         [WIIMOTE_DEV_GEN10] = (const __u8[]){
 582                 WIIMOD_KEYS,
 583                 WIIMOD_RUMBLE,
 584                 WIIMOD_BATTERY,
 585                 WIIMOD_LED1,
 586                 WIIMOD_LED2,
 587                 WIIMOD_LED3,
 588                 WIIMOD_LED4,
 589                 WIIMOD_ACCEL,
 590                 WIIMOD_IR,
 591                 WIIMOD_NULL,
 592         },
 593         [WIIMOTE_DEV_GEN20] = (const __u8[]){
 594                 WIIMOD_KEYS,
 595                 WIIMOD_RUMBLE,
 596                 WIIMOD_BATTERY,
 597                 WIIMOD_LED1,
 598                 WIIMOD_LED2,
 599                 WIIMOD_LED3,
 600                 WIIMOD_LED4,
 601                 WIIMOD_ACCEL,
 602                 WIIMOD_IR,
 603                 WIIMOD_BUILTIN_MP,
 604                 WIIMOD_NULL,
 605         },
 606         [WIIMOTE_DEV_BALANCE_BOARD] = (const __u8[]) {
 607                 WIIMOD_BATTERY,
 608                 WIIMOD_LED1,
 609                 WIIMOD_NO_MP,
 610                 WIIMOD_NULL,
 611         },
 612         [WIIMOTE_DEV_PRO_CONTROLLER] = (const __u8[]) {
 613                 WIIMOD_BATTERY,
 614                 WIIMOD_LED1,
 615                 WIIMOD_LED2,
 616                 WIIMOD_LED3,
 617                 WIIMOD_LED4,
 618                 WIIMOD_NO_MP,
 619                 WIIMOD_NULL,
 620         },
 621 };
 622
 623 static void wiimote_modules_load(struct wiimote_data *wdata,
 624                                  unsigned int devtype)
 625 {
 626         bool need_input = false;
 627         const __u8 *mods, *iter;
 628         const struct wiimod_ops *ops;
 629         int ret;
 630
 631         mods = wiimote_devtype_mods[devtype];
 632
 633         for (iter = mods; *iter != WIIMOD_NULL; ++iter) {
 634                 if (wiimod_table[*iter]->flags & WIIMOD_FLAG_INPUT) {
 635                         need_input = true;
 636                         break;
 637                 }
 638         }
 639
 640         if (need_input) {
 641                 wdata->input = input_allocate_device();
 642                 if (!wdata->input)
 643                         return;
 644
 645                 input_set_drvdata(wdata->input, wdata);
 646                 wdata->input->dev.parent = &wdata->hdev->dev;
 647                 wdata->input->id.bustype = wdata->hdev->bus;
 648                 wdata->input->id.vendor = wdata->hdev->vendor;
 649                 wdata->input->id.product = wdata->hdev->product;
 650                 wdata->input->id.version = wdata->hdev->version;
 651                 wdata->input->name = WIIMOTE_NAME;
 652         }
 653
 654         for (iter = mods; *iter != WIIMOD_NULL; ++iter) {
 655                 ops = wiimod_table[*iter];
 656                 if (!ops->probe)
 657                         continue;
 658
 659                 ret = ops->probe(ops, wdata);
 660                 if (ret)
 661                         goto error;
 662         }
 663
 664         if (wdata->input) {
 665                 ret = input_register_device(wdata->input);
 666                 if (ret)
 667                         goto error;
 668         }
 669
 670         spin_lock_irq(&wdata->state.lock);
 671         wdata->state.devtype = devtype;
 672         spin_unlock_irq(&wdata->state.lock);
 673         return;
 674
 675 error:
 676         for ( ; iter-- != mods; ) {
 677                 ops = wiimod_table[*iter];
 678                 if (ops->remove)
 679                         ops->remove(ops, wdata);
 680         }
 681
 682         if (wdata->input) {
 683                 input_free_device(wdata->input);
 684                 wdata->input = NULL;
 685         }
 686 }
 687
 688 static void wiimote_modules_unload(struct wiimote_data *wdata)
 689 {
 690         const __u8 *mods, *iter;
 691         const struct wiimod_ops *ops;
 692         unsigned long flags;
 693
 694         mods = wiimote_devtype_mods[wdata->state.devtype];
 695
 696         spin_lock_irqsave(&wdata->state.lock, flags);
 697         wdata->state.devtype = WIIMOTE_DEV_UNKNOWN;
 698         spin_unlock_irqrestore(&wdata->state.lock, flags);
 699
 700         /* find end of list */
 701         for (iter = mods; *iter != WIIMOD_NULL; ++iter)
 702                 /* empty */ ;
 703
 704         if (wdata->input) {
 705                 input_get_device(wdata->input);
 706                 input_unregister_device(wdata->input);
 707         }
 708
 709         for ( ; iter-- != mods; ) {
 710                 ops = wiimod_table[*iter];
 711                 if (ops->remove)
 712                         ops->remove(ops, wdata);
 713         }
 714
 715         if (wdata->input) {
 716                 input_put_device(wdata->input);
 717                 wdata->input = NULL;
 718         }
 719 }
 720
 721 /* device extension handling */
 722
 723 static void wiimote_ext_load(struct wiimote_data *wdata, unsigned int ext)
 724 {
 725         unsigned long flags;
 726         const struct wiimod_ops *ops;
 727         int ret;
 728
 729         ops = wiimod_ext_table[ext];
 730
 731         if (ops->probe) {
 732                 ret = ops->probe(ops, wdata);
 733                 if (ret)
 734                         ext = WIIMOTE_EXT_UNKNOWN;
 735         }
 736
 737         spin_lock_irqsave(&wdata->state.lock, flags);
 738         wdata->state.exttype = ext;
 739         spin_unlock_irqrestore(&wdata->state.lock, flags);
 740 }
 741
 742 static void wiimote_ext_unload(struct wiimote_data *wdata)
 743 {
 744         unsigned long flags;
 745         const struct wiimod_ops *ops;
 746
 747         ops = wiimod_ext_table[wdata->state.exttype];
 748
 749         spin_lock_irqsave(&wdata->state.lock, flags);
 750         wdata->state.exttype = WIIMOTE_EXT_UNKNOWN;
 751         wdata->state.flags &= ~WIIPROTO_FLAG_EXT_USED;
 752         spin_unlock_irqrestore(&wdata->state.lock, flags);
 753
 754         if (ops->remove)
 755                 ops->remove(ops, wdata);
 756 }
 757
 758 static void wiimote_mp_load(struct wiimote_data *wdata)
 759 {
 760         unsigned long flags;
 761         const struct wiimod_ops *ops;
 762         int ret;
 763         __u8 mode = 2;
 764
 765         ops = &wiimod_mp;
 766         if (ops->probe) {
 767                 ret = ops->probe(ops, wdata);
 768                 if (ret)
 769                         mode = 1;
 770         }
 771
 772         spin_lock_irqsave(&wdata->state.lock, flags);
 773         wdata->state.mp = mode;
 774         spin_unlock_irqrestore(&wdata->state.lock, flags);
 775 }
 776
 777 static void wiimote_mp_unload(struct wiimote_data *wdata)
 778 {
 779         unsigned long flags;
 780         const struct wiimod_ops *ops;
 781
 782         if (wdata->state.mp < 2)
 783                 return;
 784
 785         ops = &wiimod_mp;
 786
 787         spin_lock_irqsave(&wdata->state.lock, flags);
 788         wdata->state.mp = 0;
 789         wdata->state.flags &= ~WIIPROTO_FLAG_MP_USED;
 790         spin_unlock_irqrestore(&wdata->state.lock, flags);
 791
 792         if (ops->remove)
 793                 ops->remove(ops, wdata);
 794 }
 795
 796 /* device (re-)initialization and detection */
 797
 798 static const char *wiimote_devtype_names[WIIMOTE_DEV_NUM] = {
 799         [WIIMOTE_DEV_PENDING] = "Pending",
 800         [WIIMOTE_DEV_UNKNOWN] = "Unknown",
 801         [WIIMOTE_DEV_GENERIC] = "Generic",
 802         [WIIMOTE_DEV_GEN10] = "Nintendo Wii Remote (Gen 1)",
 803         [WIIMOTE_DEV_GEN20] = "Nintendo Wii Remote Plus (Gen 2)",
 804         [WIIMOTE_DEV_BALANCE_BOARD] = "Nintendo Wii Balance Board",
 805         [WIIMOTE_DEV_PRO_CONTROLLER] = "Nintendo Wii U Pro Controller",
 806 };
 807
 808 /* Try to guess the device type based on all collected information. We
 809  * first try to detect by static extension types, then VID/PID and the
 810  * device name. If we cannot detect the device, we use
 811  * WIIMOTE_DEV_GENERIC so all modules will get probed on the device. */
 812 static void wiimote_init_set_type(struct wiimote_data *wdata,
 813                                   __u8 exttype)
 814 {
 815         __u8 devtype = WIIMOTE_DEV_GENERIC;
 816         __u16 vendor, product;
 817         const char *name;
 818
 819         vendor = wdata->hdev->vendor;
 820         product = wdata->hdev->product;
 821         name = wdata->hdev->name;
 822
 823         if (exttype == WIIMOTE_EXT_BALANCE_BOARD) {
 824                 devtype = WIIMOTE_DEV_BALANCE_BOARD;
 825                 goto done;
 826         } else if (exttype == WIIMOTE_EXT_PRO_CONTROLLER) {
 827                 devtype = WIIMOTE_DEV_PRO_CONTROLLER;
 828                 goto done;
 829         }
 830
 831         if (!strcmp(name, "Nintendo RVL-CNT-01")) {
 832                 devtype = WIIMOTE_DEV_GEN10;
 833                 goto done;
 834         } else if (!strcmp(name, "Nintendo RVL-CNT-01-TR")) {
 835                 devtype = WIIMOTE_DEV_GEN20;
 836                 goto done;
 837         } else if (!strcmp(name, "Nintendo RVL-WBC-01")) {
 838                 devtype = WIIMOTE_DEV_BALANCE_BOARD;
 839                 goto done;
 840         } else if (!strcmp(name, "Nintendo RVL-CNT-01-UC")) {
 841                 devtype = WIIMOTE_DEV_PRO_CONTROLLER;
 842                 goto done;
 843         }
 844
 845         if (vendor == USB_VENDOR_ID_NINTENDO) {
 846                 if (product == USB_DEVICE_ID_NINTENDO_WIIMOTE) {
 847                         devtype = WIIMOTE_DEV_GEN10;
 848                         goto done;
 849                 } else if (product == USB_DEVICE_ID_NINTENDO_WIIMOTE2) {
 850                         devtype = WIIMOTE_DEV_GEN20;
 851                         goto done;
 852                 }
 853         }
 854
 855 done:
 856         if (devtype == WIIMOTE_DEV_GENERIC)
 857                 hid_info(wdata->hdev, "cannot detect device; NAME: %s VID: %04x PID: %04x EXT: %04x\n",
 858                         name, vendor, product, exttype);
 859         else
 860                 hid_info(wdata->hdev, "detected device: %s\n",
 861                          wiimote_devtype_names[devtype]);
 862
 863         wiimote_modules_load(wdata, devtype);
 864 }
 865
 866 static void wiimote_init_detect(struct wiimote_data *wdata)
 867 {
 868         __u8 exttype = WIIMOTE_EXT_NONE, extdata[6];
 869         bool ext;
 870         int ret;
 871
 872         wiimote_cmd_acquire_noint(wdata);
 873
 874         spin_lock_irq(&wdata->state.lock);
 875         wdata->state.devtype = WIIMOTE_DEV_UNKNOWN;
 876         wiimote_cmd_set(wdata, WIIPROTO_REQ_SREQ, 0);
 877         wiiproto_req_status(wdata);
 878         spin_unlock_irq(&wdata->state.lock);
 879
 880         ret = wiimote_cmd_wait_noint(wdata);
 881         if (ret)
 882                 goto out_release;
 883
 884         spin_lock_irq(&wdata->state.lock);
 885         ext = wdata->state.flags & WIIPROTO_FLAG_EXT_PLUGGED;
 886         spin_unlock_irq(&wdata->state.lock);
 887
 888         if (!ext)
 889                 goto out_release;
 890
 891         wiimote_cmd_init_ext(wdata);
 892         exttype = wiimote_cmd_read_ext(wdata, extdata);
 893
 894 out_release:
 895         wiimote_cmd_release(wdata);
 896         wiimote_init_set_type(wdata, exttype);
 897
 898         /* schedule MP timer */
 899         spin_lock_irq(&wdata->state.lock);
 900         if (!(wdata->state.flags & WIIPROTO_FLAG_BUILTIN_MP) &&
 901             !(wdata->state.flags & WIIPROTO_FLAG_NO_MP))
 902                 mod_timer(&wdata->timer, jiffies + HZ * 4);
 903         spin_unlock_irq(&wdata->state.lock);
 904 }
 905
 906 /*
 907  * MP hotplug events are not generated by the wiimote. Therefore, we need
 908  * polling to detect it. We use a 4s interval for polling MP registers. This
 909  * seems reasonable considering applications can trigger it manually via
 910  * sysfs requests.
 911  */
 912 static void wiimote_init_poll_mp(struct wiimote_data *wdata)
 913 {
 914         bool mp;
 915         __u8 mpdata[6];
 916
 917         wiimote_cmd_acquire_noint(wdata);
 918         wiimote_cmd_init_mp(wdata);
 919         mp = wiimote_cmd_read_mp(wdata, mpdata);
 920         wiimote_cmd_release(wdata);
 921
 922         /* load/unload MP module if it changed */
 923         if (mp) {
 924                 if (!wdata->state.mp) {
 925                         hid_info(wdata->hdev, "detected extension: Nintendo Wii Motion Plus\n");
 926                         wiimote_mp_load(wdata);
 927                 }
 928         } else if (wdata->state.mp) {
 929                 wiimote_mp_unload(wdata);
 930         }
 931
 932         mod_timer(&wdata->timer, jiffies + HZ * 4);
 933 }
 934
 935 /*
 936  * Check whether the wiimote is in the expected state. The extension registers
 937  * may change during hotplug and initialization so we might get hotplug events
 938  * that we caused by remapping some memory.
 939  * We use some heuristics here to check known states. If the wiimote is in the
 940  * expected state, we can ignore the hotplug event.
 941  *
 942  * Returns "true" if the device is in expected state, "false" if we should
 943  * redo hotplug handling and extension initialization.
 944  */
 945 static bool wiimote_init_check(struct wiimote_data *wdata)
 946 {
 947         __u32 flags;
 948         __u8 type, data[6];
 949         bool ret, poll_mp;
 950
 951         spin_lock_irq(&wdata->state.lock);
 952         flags = wdata->state.flags;
 953         spin_unlock_irq(&wdata->state.lock);
 954
 955         wiimote_cmd_acquire_noint(wdata);
 956
 957         /* If MP is used and active, but the extension is not, we expect:
 958          *   read_mp_mapped() == WIIMOTE_MP_SINGLE
 959          *   state.flags == !EXT_ACTIVE && !MP_PLUGGED && MP_ACTIVE
 960          * We do not check EXT_PLUGGED because it might change during
 961          * initialization of MP without extensions.
 962          *  - If MP is unplugged/replugged, read_mp_mapped() fails
 963          *  - If EXT is plugged, MP_PLUGGED will get set */
 964         if (wdata->state.exttype == WIIMOTE_EXT_NONE &&
 965             wdata->state.mp > 0 && (flags & WIIPROTO_FLAG_MP_USED)) {
 966                 type = wiimote_cmd_read_mp_mapped(wdata);
 967                 ret = type == WIIMOTE_MP_SINGLE;
 968
 969                 spin_lock_irq(&wdata->state.lock);
 970                 ret = ret && !(wdata->state.flags & WIIPROTO_FLAG_EXT_ACTIVE);
 971                 ret = ret && !(wdata->state.flags & WIIPROTO_FLAG_MP_PLUGGED);
 972                 ret = ret && (wdata->state.flags & WIIPROTO_FLAG_MP_ACTIVE);
 973                 spin_unlock_irq(&wdata->state.lock);
 974
 975                 if (!ret)
 976                         hid_dbg(wdata->hdev, "state left: !EXT && MP\n");
 977
 978                 /* while MP is mapped, we get EXT_PLUGGED events */
 979                 poll_mp = false;
 980
 981                 goto out_release;
 982         }
 983
 984         /* If MP is unused, but the extension port is used, we expect:
 985          *   read_ext == state.exttype
 986          *   state.flags == !MP_ACTIVE && EXT_ACTIVE
 987          * - If MP is plugged/unplugged, our timer detects it
 988          * - If EXT is unplugged/replugged, EXT_ACTIVE will become unset */
 989         if (!(flags & WIIPROTO_FLAG_MP_USED) &&
 990             wdata->state.exttype != WIIMOTE_EXT_NONE) {
 991                 type = wiimote_cmd_read_ext(wdata, data);
 992                 ret = type == wdata->state.exttype;
 993
 994                 spin_lock_irq(&wdata->state.lock);
 995                 ret = ret && !(wdata->state.flags & WIIPROTO_FLAG_MP_ACTIVE);
 996                 ret = ret && (wdata->state.flags & WIIPROTO_FLAG_EXT_ACTIVE);
 997                 spin_unlock_irq(&wdata->state.lock);
 998
 999                 if (!ret)
1000                         hid_dbg(wdata->hdev, "state left: EXT && !MP\n");
1001
1002                 /* poll MP for hotplug events */
1003                 poll_mp = true;
1004
1005                 goto out_release;
1006         }
1007
1008         /* If neither MP nor an extension are used, we expect:
1009          *   read_ext() == WIIMOTE_EXT_NONE
1010          *   state.flags == !MP_ACTIVE && !EXT_ACTIVE && !EXT_PLUGGED
1011          * No need to perform any action in this case as everything is
1012          * disabled already.
1013          * - If MP is plugged/unplugged, our timer detects it
1014          * - If EXT is plugged, EXT_PLUGGED will be set */
1015         if (!(flags & WIIPROTO_FLAG_MP_USED) &&
1016             wdata->state.exttype == WIIMOTE_EXT_NONE) {
1017                 type = wiimote_cmd_read_ext(wdata, data);
1018                 ret = type == wdata->state.exttype;
1019
1020                 spin_lock_irq(&wdata->state.lock);
1021                 ret = ret && !(wdata->state.flags & WIIPROTO_FLAG_EXT_ACTIVE);
1022                 ret = ret && !(wdata->state.flags & WIIPROTO_FLAG_MP_ACTIVE);
1023                 ret = ret && !(wdata->state.flags & WIIPROTO_FLAG_EXT_PLUGGED);
1024                 spin_unlock_irq(&wdata->state.lock);
1025
1026                 if (!ret)
1027                         hid_dbg(wdata->hdev, "state left: !EXT && !MP\n");
1028
1029                 /* poll MP for hotplug events */
1030                 poll_mp = true;
1031
1032                 goto out_release;
1033         }
1034
1035         /* The trickiest part is if both EXT and MP are active. We cannot read
1036          * the EXT ID, anymore, because MP is mapped over it. However, we use
1037          * a handy trick here:
1038          *   - EXT_ACTIVE is unset whenever !MP_PLUGGED is sent
1039          * MP_PLUGGED might be re-sent again before we are scheduled, but
1040          * EXT_ACTIVE will stay unset.
1041          * So it is enough to check for mp_mapped() and MP_ACTIVE and
1042          * EXT_ACTIVE. EXT_PLUGGED is a sanity check. */
1043         if (wdata->state.exttype != WIIMOTE_EXT_NONE &&
1044             wdata->state.mp > 0 && (flags & WIIPROTO_FLAG_MP_USED)) {
1045                 type = wiimote_cmd_read_mp_mapped(wdata);
1046                 ret = type != WIIMOTE_MP_NONE;
1047                 ret = ret && type != WIIMOTE_MP_UNKNOWN;
1048                 ret = ret && type != WIIMOTE_MP_SINGLE;
1049
1050                 spin_lock_irq(&wdata->state.lock);
1051                 ret = ret && (wdata->state.flags & WIIPROTO_FLAG_EXT_PLUGGED);
1052                 ret = ret && (wdata->state.flags & WIIPROTO_FLAG_EXT_ACTIVE);
1053                 ret = ret && (wdata->state.flags & WIIPROTO_FLAG_MP_ACTIVE);
1054                 spin_unlock_irq(&wdata->state.lock);
1055
1056                 if (!ret)
1057                         hid_dbg(wdata->hdev, "state left: EXT && MP\n");
1058
1059                 /* while MP is mapped, we get EXT_PLUGGED events */
1060                 poll_mp = false;
1061
1062                 goto out_release;
1063         }
1064
1065         /* unknown state */
1066         ret = false;
1067
1068 out_release:
1069         wiimote_cmd_release(wdata);
1070
1071         /* only poll for MP if requested and if state didn't change */
1072         if (ret && poll_mp && !(flags & WIIPROTO_FLAG_BUILTIN_MP) &&
1073             !(flags & WIIPROTO_FLAG_NO_MP))
1074                 wiimote_init_poll_mp(wdata);
1075
1076         return ret;
1077 }
1078
1079 static const char *wiimote_exttype_names[WIIMOTE_EXT_NUM] = {
1080         [WIIMOTE_EXT_NONE] = "None",
1081         [WIIMOTE_EXT_UNKNOWN] = "Unknown",
1082         [WIIMOTE_EXT_NUNCHUK] = "Nintendo Wii Nunchuk",
1083         [WIIMOTE_EXT_CLASSIC_CONTROLLER] = "Nintendo Wii Classic Controller",
1084         [WIIMOTE_EXT_BALANCE_BOARD] = "Nintendo Wii Balance Board",
1085         [WIIMOTE_EXT_PRO_CONTROLLER] = "Nintendo Wii U Pro Controller",
1086         [WIIMOTE_EXT_DRUMS] = "Nintendo Wii Drums",
1087         [WIIMOTE_EXT_GUITAR] = "Nintendo Wii Guitar",
1088 };
1089
1090 /*
1091  * Handle hotplug events
1092  * If we receive an hotplug event and the device-check failed, we deinitialize
1093  * the extension ports, re-read all extension IDs and set the device into
1094  * the desired state. This involves mapping MP into the main extension
1095  * registers, setting up extension passthrough modes and initializing the
1096  * requested extensions.
1097  */
1098 static void wiimote_init_hotplug(struct wiimote_data *wdata)
1099 {
1100         __u8 exttype, extdata[6], mpdata[6];
1101         __u32 flags;
1102         bool mp;
1103
1104         hid_dbg(wdata->hdev, "detect extensions..\n");
1105
1106         wiimote_cmd_acquire_noint(wdata);
1107
1108         spin_lock_irq(&wdata->state.lock);
1109
1110         /* get state snapshot that we will then work on */
1111         flags = wdata->state.flags;
1112
1113         /* disable event forwarding temporarily */
1114         wdata->state.flags &= ~WIIPROTO_FLAG_EXT_ACTIVE;
1115         wdata->state.flags &= ~WIIPROTO_FLAG_MP_ACTIVE;
1116
1117         spin_unlock_irq(&wdata->state.lock);
1118
1119         /* init extension and MP (deactivates current extension or MP) */
1120         wiimote_cmd_init_ext(wdata);
1121         if (flags & WIIPROTO_FLAG_NO_MP) {
1122                 mp = false;
1123         } else {
1124                 wiimote_cmd_init_mp(wdata);
1125                 mp = wiimote_cmd_read_mp(wdata, mpdata);
1126         }
1127         exttype = wiimote_cmd_read_ext(wdata, extdata);
1128
1129         wiimote_cmd_release(wdata);
1130
1131         /* load/unload extension module if it changed */
1132         if (exttype != wdata->state.exttype) {
1133                 /* unload previous extension */
1134                 wiimote_ext_unload(wdata);
1135
1136                 if (exttype == WIIMOTE_EXT_UNKNOWN) {
1137                         hid_info(wdata->hdev, "cannot detect extension; %6phC\n",
1138                                  extdata);
1139                 } else if (exttype == WIIMOTE_EXT_NONE) {
1140                         spin_lock_irq(&wdata->state.lock);
1141                         wdata->state.exttype = WIIMOTE_EXT_NONE;
1142                         spin_unlock_irq(&wdata->state.lock);
1143                 } else {
1144                         hid_info(wdata->hdev, "detected extension: %s\n",
1145                                  wiimote_exttype_names[exttype]);
1146                         /* try loading new extension */
1147                         wiimote_ext_load(wdata, exttype);
1148                 }
1149         }
1150
1151         /* load/unload MP module if it changed */
1152         if (mp) {
1153                 if (!wdata->state.mp) {
1154                         hid_info(wdata->hdev, "detected extension: Nintendo Wii Motion Plus\n");
1155                         wiimote_mp_load(wdata);
1156                 }
1157         } else if (wdata->state.mp) {
1158                 wiimote_mp_unload(wdata);
1159         }
1160
1161         /* if MP is not used, do not map or activate it */
1162         if (!(flags & WIIPROTO_FLAG_MP_USED))
1163                 mp = false;
1164
1165         /* map MP into main extension registers if used */
1166         if (mp) {
1167                 wiimote_cmd_acquire_noint(wdata);
1168                 wiimote_cmd_map_mp(wdata, exttype);
1169                 wiimote_cmd_release(wdata);
1170
1171                 /* delete MP hotplug timer */
1172                 del_timer_sync(&wdata->timer);
1173         } else {
1174                 /* reschedule MP hotplug timer */
1175                 if (!(flags & WIIPROTO_FLAG_BUILTIN_MP) &&
1176                     !(flags & WIIPROTO_FLAG_NO_MP))
1177                         mod_timer(&wdata->timer, jiffies + HZ * 4);
1178         }
1179
1180         spin_lock_irq(&wdata->state.lock);
1181
1182         /* enable data forwarding again and set expected hotplug state */
1183         if (mp) {
1184                 wdata->state.flags |= WIIPROTO_FLAG_MP_ACTIVE;
1185                 if (wdata->state.exttype == WIIMOTE_EXT_NONE) {
1186                         wdata->state.flags &= ~WIIPROTO_FLAG_EXT_PLUGGED;
1187                         wdata->state.flags &= ~WIIPROTO_FLAG_MP_PLUGGED;
1188                 } else {
1189                         wdata->state.flags &= ~WIIPROTO_FLAG_EXT_PLUGGED;
1190                         wdata->state.flags |= WIIPROTO_FLAG_MP_PLUGGED;
1191                         wdata->state.flags |= WIIPROTO_FLAG_EXT_ACTIVE;
1192                 }
1193         } else if (wdata->state.exttype != WIIMOTE_EXT_NONE) {
1194                 wdata->state.flags |= WIIPROTO_FLAG_EXT_ACTIVE;
1195         }
1196
1197         /* request status report for hotplug state updates */
1198         wiiproto_req_status(wdata);
1199
1200         spin_unlock_irq(&wdata->state.lock);
1201
1202         hid_dbg(wdata->hdev, "detected extensions: MP: %d EXT: %d\n",
1203                 wdata->state.mp, wdata->state.exttype);
1204 }
1205
1206 static void wiimote_init_worker(struct work_struct *work)
1207 {
1208         struct wiimote_data *wdata = container_of(work, struct wiimote_data,
1209                                                   init_worker);
1210         bool changed = false;
1211
1212         if (wdata->state.devtype == WIIMOTE_DEV_PENDING) {
1213                 wiimote_init_detect(wdata);
1214                 changed = true;
1215         }
1216
1217         if (changed || !wiimote_init_check(wdata))
1218                 wiimote_init_hotplug(wdata);
1219
1220         if (changed)
1221                 kobject_uevent(&wdata->hdev->dev.kobj, KOBJ_CHANGE);
1222 }
1223
1224 void __wiimote_schedule(struct wiimote_data *wdata)
1225 {
1226         if (!(wdata->state.flags & WIIPROTO_FLAG_EXITING))
1227                 schedule_work(&wdata->init_worker);
1228 }
1229
1230 static void wiimote_schedule(struct wiimote_data *wdata)
1231 {
1232         unsigned long flags;
1233
1234         spin_lock_irqsave(&wdata->state.lock, flags);
1235         __wiimote_schedule(wdata);
1236         spin_unlock_irqrestore(&wdata->state.lock, flags);
1237 }
1238
1239 static void wiimote_init_timeout(struct timer_list *t)
1240 {
1241         struct wiimote_data *wdata = from_timer(wdata, t, timer);
1242
1243         wiimote_schedule(wdata);
1244 }
1245
1246 /* protocol handlers */
1247
1248 static void handler_keys(struct wiimote_data *wdata, const __u8 *payload)
1249 {
1250         const __u8 *iter, *mods;
1251         const struct wiimod_ops *ops;
1252
1253         ops = wiimod_ext_table[wdata->state.exttype];
1254         if (ops->in_keys) {
1255                 ops->in_keys(wdata, payload);
1256                 return;
1257         }
1258
1259         mods = wiimote_devtype_mods[wdata->state.devtype];
1260         for (iter = mods; *iter != WIIMOD_NULL; ++iter) {
1261                 ops = wiimod_table[*iter];
1262                 if (ops->in_keys) {
1263                         ops->in_keys(wdata, payload);
1264                         break;
1265                 }
1266         }
1267 }
1268
1269 static void handler_accel(struct wiimote_data *wdata, const __u8 *payload)
1270 {
1271         const __u8 *iter, *mods;
1272         const struct wiimod_ops *ops;
1273
1274         ops = wiimod_ext_table[wdata->state.exttype];
1275         if (ops->in_accel) {
1276                 ops->in_accel(wdata, payload);
1277                 return;
1278         }
1279
1280         mods = wiimote_devtype_mods[wdata->state.devtype];
1281         for (iter = mods; *iter != WIIMOD_NULL; ++iter) {
1282                 ops = wiimod_table[*iter];
1283                 if (ops->in_accel) {
1284                         ops->in_accel(wdata, payload);
1285                         break;
1286                 }
1287         }
1288 }
1289
1290 static bool valid_ext_handler(const struct wiimod_ops *ops, size_t len)
1291 {
1292         if (!ops->in_ext)
1293                 return false;
1294         if ((ops->flags & WIIMOD_FLAG_EXT8) && len < 8)
1295                 return false;
1296         if ((ops->flags & WIIMOD_FLAG_EXT16) && len < 16)
1297                 return false;
1298
1299         return true;
1300 }
1301
1302 static void handler_ext(struct wiimote_data *wdata, const __u8 *payload,
1303                         size_t len)
1304 {
1305         static const __u8 invalid[21] = { 0xff, 0xff, 0xff, 0xff,
1306                                           0xff, 0xff, 0xff, 0xff,
1307                                           0xff, 0xff, 0xff, 0xff,
1308                                           0xff, 0xff, 0xff, 0xff,
1309                                           0xff, 0xff, 0xff, 0xff,
1310                                           0xff };
1311         const __u8 *iter, *mods;
1312         const struct wiimod_ops *ops;
1313         bool is_mp;
1314
1315         if (len > 21)
1316                 len = 21;
1317         if (len < 6 || !memcmp(payload, invalid, len))
1318                 return;
1319
1320         /* if MP is active, track MP slot hotplugging */
1321         if (wdata->state.flags & WIIPROTO_FLAG_MP_ACTIVE) {
1322                 /* this bit is set for invalid events (eg. during hotplug) */
1323                 if (payload[5] & 0x01)
1324                         return;
1325
1326                 if (payload[4] & 0x01) {
1327                         if (!(wdata->state.flags & WIIPROTO_FLAG_MP_PLUGGED)) {
1328                                 hid_dbg(wdata->hdev, "MP hotplug: 1\n");
1329                                 wdata->state.flags |= WIIPROTO_FLAG_MP_PLUGGED;
1330                                 __wiimote_schedule(wdata);
1331                         }
1332                 } else {
1333                         if (wdata->state.flags & WIIPROTO_FLAG_MP_PLUGGED) {
1334                                 hid_dbg(wdata->hdev, "MP hotplug: 0\n");
1335                                 wdata->state.flags &= ~WIIPROTO_FLAG_MP_PLUGGED;
1336                                 wdata->state.flags &= ~WIIPROTO_FLAG_EXT_ACTIVE;
1337                                 __wiimote_schedule(wdata);
1338                         }
1339                 }
1340
1341                 /* detect MP data that is sent interleaved with EXT data */
1342                 is_mp = payload[5] & 0x02;
1343         } else {
1344                 is_mp = false;
1345         }
1346
1347         /* ignore EXT events if no extension is active */
1348         if (!(wdata->state.flags & WIIPROTO_FLAG_EXT_ACTIVE) && !is_mp)
1349                 return;
1350
1351         /* try forwarding to extension handler, first */
1352         ops = wiimod_ext_table[wdata->state.exttype];
1353         if (is_mp && ops->in_mp) {
1354                 ops->in_mp(wdata, payload);
1355                 return;
1356         } else if (!is_mp && valid_ext_handler(ops, len)) {
1357                 ops->in_ext(wdata, payload);
1358                 return;
1359         }
1360
1361         /* try forwarding to MP handler */
1362         ops = &wiimod_mp;
1363         if (is_mp && ops->in_mp) {
1364                 ops->in_mp(wdata, payload);
1365                 return;
1366         } else if (!is_mp && valid_ext_handler(ops, len)) {
1367                 ops->in_ext(wdata, payload);
1368                 return;
1369         }
1370
1371         /* try forwarding to loaded modules */
1372         mods = wiimote_devtype_mods[wdata->state.devtype];
1373         for (iter = mods; *iter != WIIMOD_NULL; ++iter) {
1374                 ops = wiimod_table[*iter];
1375                 if (is_mp && ops->in_mp) {
1376                         ops->in_mp(wdata, payload);
1377                         return;
1378                 } else if (!is_mp && valid_ext_handler(ops, len)) {
1379                         ops->in_ext(wdata, payload);
1380                         return;
1381                 }
1382         }
1383 }
1384
1385 #define ir_to_input0(wdata, ir, packed) handler_ir((wdata), (ir), (packed), 0)
1386 #define ir_to_input1(wdata, ir, packed) handler_ir((wdata), (ir), (packed), 1)
1387 #define ir_to_input2(wdata, ir, packed) handler_ir((wdata), (ir), (packed), 2)
1388 #define ir_to_input3(wdata, ir, packed) handler_ir((wdata), (ir), (packed), 3)
1389
1390 static void handler_ir(struct wiimote_data *wdata, const __u8 *payload,
1391                        bool packed, unsigned int id)
1392 {
1393         const __u8 *iter, *mods;
1394         const struct wiimod_ops *ops;
1395
1396         ops = wiimod_ext_table[wdata->state.exttype];
1397         if (ops->in_ir) {
1398                 ops->in_ir(wdata, payload, packed, id);
1399                 return;
1400         }
1401
1402         mods = wiimote_devtype_mods[wdata->state.devtype];
1403         for (iter = mods; *iter != WIIMOD_NULL; ++iter) {
1404                 ops = wiimod_table[*iter];
1405                 if (ops->in_ir) {
1406                         ops->in_ir(wdata, payload, packed, id);
1407                         break;
1408                 }
1409         }
1410 }
1411
1412 /* reduced status report with "BB BB" key data only */
1413 static void handler_status_K(struct wiimote_data *wdata,
1414                              const __u8 *payload)
1415 {
1416         handler_keys(wdata, payload);
1417
1418         /* on status reports the drm is reset so we need to resend the drm */
1419         wiiproto_req_drm(wdata, WIIPROTO_REQ_NULL);
1420 }
1421
1422 /* extended status report with "BB BB LF 00 00 VV" data */
1423 static void handler_status(struct wiimote_data *wdata, const __u8 *payload)
1424 {
1425         handler_status_K(wdata, payload);
1426
1427         /* update extension status */
1428         if (payload[2] & 0x02) {
1429                 if (!(wdata->state.flags & WIIPROTO_FLAG_EXT_PLUGGED)) {
1430                         hid_dbg(wdata->hdev, "EXT hotplug: 1\n");
1431                         wdata->state.flags |= WIIPROTO_FLAG_EXT_PLUGGED;
1432                         __wiimote_schedule(wdata);
1433                 }
1434         } else {
1435                 if (wdata->state.flags & WIIPROTO_FLAG_EXT_PLUGGED) {
1436                         hid_dbg(wdata->hdev, "EXT hotplug: 0\n");
1437                         wdata->state.flags &= ~WIIPROTO_FLAG_EXT_PLUGGED;
1438                         wdata->state.flags &= ~WIIPROTO_FLAG_MP_PLUGGED;
1439                         wdata->state.flags &= ~WIIPROTO_FLAG_EXT_ACTIVE;
1440                         wdata->state.flags &= ~WIIPROTO_FLAG_MP_ACTIVE;
1441                         __wiimote_schedule(wdata);
1442                 }
1443         }
1444
1445         wdata->state.cmd_battery = payload[5];
1446         if (wiimote_cmd_pending(wdata, WIIPROTO_REQ_SREQ, 0))
1447                 wiimote_cmd_complete(wdata);
1448 }
1449
1450 /* reduced generic report with "BB BB" key data only */
1451 static void handler_generic_K(struct wiimote_data *wdata, const __u8 *payload)
1452 {
1453         handler_keys(wdata, payload);
1454 }
1455
1456 static void handler_data(struct wiimote_data *wdata, const __u8 *payload)
1457 {
1458         __u16 offset = payload[3] << 8 | payload[4];
1459         __u8 size = (payload[2] >> 4) + 1;
1460         __u8 err = payload[2] & 0x0f;
1461
1462         handler_keys(wdata, payload);
1463
1464         if (wiimote_cmd_pending(wdata, WIIPROTO_REQ_RMEM, offset)) {
1465                 if (err)
1466                         size = 0;
1467                 else if (size > wdata->state.cmd_read_size)
1468                         size = wdata->state.cmd_read_size;
1469
1470                 wdata->state.cmd_read_size = size;
1471                 if (wdata->state.cmd_read_buf)
1472                         memcpy(wdata->state.cmd_read_buf, &payload[5], size);
1473                 wiimote_cmd_complete(wdata);
1474         }
1475 }
1476
1477 static void handler_return(struct wiimote_data *wdata, const __u8 *payload)
1478 {
1479         __u8 err = payload[3];
1480         __u8 cmd = payload[2];
1481
1482         handler_keys(wdata, payload);
1483
1484         if (wiimote_cmd_pending(wdata, cmd, 0)) {
1485                 wdata->state.cmd_err = err;
1486                 wiimote_cmd_complete(wdata);
1487         } else if (err) {
1488                 hid_warn(wdata->hdev, "Remote error %hhu on req %hhu\n", err,
1489                                                                         cmd);
1490         }
1491 }
1492
1493 static void handler_drm_KA(struct wiimote_data *wdata, const __u8 *payload)
1494 {
1495         handler_keys(wdata, payload);
1496         handler_accel(wdata, payload);
1497 }
1498
1499 static void handler_drm_KE(struct wiimote_data *wdata, const __u8 *payload)
1500 {
1501         handler_keys(wdata, payload);
1502         handler_ext(wdata, &payload[2], 8);
1503 }
1504
1505 static void handler_drm_KAI(struct wiimote_data *wdata, const __u8 *payload)
1506 {
1507         handler_keys(wdata, payload);
1508         handler_accel(wdata, payload);
1509         ir_to_input0(wdata, &payload[5], false);
1510         ir_to_input1(wdata, &payload[8], false);
1511         ir_to_input2(wdata, &payload[11], false);
1512         ir_to_input3(wdata, &payload[14], false);
1513 }
1514
1515 static void handler_drm_KEE(struct wiimote_data *wdata, const __u8 *payload)
1516 {
1517         handler_keys(wdata, payload);
1518         handler_ext(wdata, &payload[2], 19);
1519 }
1520
1521 static void handler_drm_KIE(struct wiimote_data *wdata, const __u8 *payload)
1522 {
1523         handler_keys(wdata, payload);
1524         ir_to_input0(wdata, &payload[2], false);
1525         ir_to_input1(wdata, &payload[4], true);
1526         ir_to_input2(wdata, &payload[7], false);
1527         ir_to_input3(wdata, &payload[9], true);
1528         handler_ext(wdata, &payload[12], 9);
1529 }
1530
1531 static void handler_drm_KAE(struct wiimote_data *wdata, const __u8 *payload)
1532 {
1533         handler_keys(wdata, payload);
1534         handler_accel(wdata, payload);
1535         handler_ext(wdata, &payload[5], 16);
1536 }
1537
1538 static void handler_drm_KAIE(struct wiimote_data *wdata, const __u8 *payload)
1539 {
1540         handler_keys(wdata, payload);
1541         handler_accel(wdata, payload);
1542         ir_to_input0(wdata, &payload[5], false);
1543         ir_to_input1(wdata, &payload[7], true);
1544         ir_to_input2(wdata, &payload[10], false);
1545         ir_to_input3(wdata, &payload[12], true);
1546         handler_ext(wdata, &payload[15], 6);
1547 }
1548
1549 static void handler_drm_E(struct wiimote_data *wdata, const __u8 *payload)
1550 {
1551         handler_ext(wdata, payload, 21);
1552 }
1553
1554 static void handler_drm_SKAI1(struct wiimote_data *wdata, const __u8 *payload)
1555 {
1556         handler_keys(wdata, payload);
1557
1558         wdata->state.accel_split[0] = payload[2];
1559         wdata->state.accel_split[1] = (payload[0] >> 1) & (0x10 | 0x20);
1560         wdata->state.accel_split[1] |= (payload[1] << 1) & (0x40 | 0x80);
1561
1562         ir_to_input0(wdata, &payload[3], false);
1563         ir_to_input1(wdata, &payload[12], false);
1564 }
1565
1566 static void handler_drm_SKAI2(struct wiimote_data *wdata, const __u8 *payload)
1567 {
1568         __u8 buf[5];
1569
1570         handler_keys(wdata, payload);
1571
1572         wdata->state.accel_split[1] |= (payload[0] >> 5) & (0x01 | 0x02);
1573         wdata->state.accel_split[1] |= (payload[1] >> 3) & (0x04 | 0x08);
1574
1575         buf[0] = 0;
1576         buf[1] = 0;
1577         buf[2] = wdata->state.accel_split[0];
1578         buf[3] = payload[2];
1579         buf[4] = wdata->state.accel_split[1];
1580         handler_accel(wdata, buf);
1581
1582         ir_to_input2(wdata, &payload[3], false);
1583         ir_to_input3(wdata, &payload[12], false);
1584 }
1585
1586 struct wiiproto_handler {
1587         __u8 id;
1588         size_t size;
1589         void (*func)(struct wiimote_data *wdata, const __u8 *payload);
1590 };
1591
1592 static struct wiiproto_handler handlers[] = {
1593         { .id = WIIPROTO_REQ_STATUS, .size = 6, .func = handler_status },
1594         { .id = WIIPROTO_REQ_STATUS, .size = 2, .func = handler_status_K },
1595         { .id = WIIPROTO_REQ_DATA, .size = 21, .func = handler_data },
1596         { .id = WIIPROTO_REQ_DATA, .size = 2, .func = handler_generic_K },
1597         { .id = WIIPROTO_REQ_RETURN, .size = 4, .func = handler_return },
1598         { .id = WIIPROTO_REQ_RETURN, .size = 2, .func = handler_generic_K },
1599         { .id = WIIPROTO_REQ_DRM_K, .size = 2, .func = handler_keys },
1600         { .id = WIIPROTO_REQ_DRM_KA, .size = 5, .func = handler_drm_KA },
1601         { .id = WIIPROTO_REQ_DRM_KA, .size = 2, .func = handler_generic_K },
1602         { .id = WIIPROTO_REQ_DRM_KE, .size = 10, .func = handler_drm_KE },
1603         { .id = WIIPROTO_REQ_DRM_KE, .size = 2, .func = handler_generic_K },
1604         { .id = WIIPROTO_REQ_DRM_KAI, .size = 17, .func = handler_drm_KAI },
1605         { .id = WIIPROTO_REQ_DRM_KAI, .size = 2, .func = handler_generic_K },
1606         { .id = WIIPROTO_REQ_DRM_KEE, .size = 21, .func = handler_drm_KEE },
1607         { .id = WIIPROTO_REQ_DRM_KEE, .size = 2, .func = handler_generic_K },
1608         { .id = WIIPROTO_REQ_DRM_KAE, .size = 21, .func = handler_drm_KAE },
1609         { .id = WIIPROTO_REQ_DRM_KAE, .size = 2, .func = handler_generic_K },
1610         { .id = WIIPROTO_REQ_DRM_KIE, .size = 21, .func = handler_drm_KIE },
1611         { .id = WIIPROTO_REQ_DRM_KIE, .size = 2, .func = handler_generic_K },
1612         { .id = WIIPROTO_REQ_DRM_KAIE, .size = 21, .func = handler_drm_KAIE },
1613         { .id = WIIPROTO_REQ_DRM_KAIE, .size = 2, .func = handler_generic_K },
1614         { .id = WIIPROTO_REQ_DRM_E, .size = 21, .func = handler_drm_E },
1615         { .id = WIIPROTO_REQ_DRM_SKAI1, .size = 21, .func = handler_drm_SKAI1 },
1616         { .id = WIIPROTO_REQ_DRM_SKAI2, .size = 21, .func = handler_drm_SKAI2 },
1617         { .id = 0 }
1618 };
1619
1620 static int wiimote_hid_event(struct hid_device *hdev, struct hid_report *report,
1621                                                         u8 *raw_data, int size)
1622 {
1623         struct wiimote_data *wdata = hid_get_drvdata(hdev);
1624         struct wiiproto_handler *h;
1625         int i;
1626         unsigned long flags;
1627
1628         if (size < 1)
1629                 return -EINVAL;
1630
1631         spin_lock_irqsave(&wdata->state.lock, flags);
1632
1633         for (i = 0; handlers[i].id; ++i) {
1634                 h = &handlers[i];
1635                 if (h->id == raw_data[0] && h->size < size) {
1636                         h->func(wdata, &raw_data[1]);
1637                         break;
1638                 }
1639         }
1640
1641         if (!handlers[i].id)
1642                 hid_warn(hdev, "Unhandled report %hhu size %d\n", raw_data[0],
1643                                                                         size);
1644
1645         spin_unlock_irqrestore(&wdata->state.lock, flags);
1646
1647         return 0;
1648 }
1649
1650 static ssize_t wiimote_ext_show(struct device *dev,
1651                                 struct device_attribute *attr,
1652                                 char *buf)
1653 {
1654         struct wiimote_data *wdata = dev_to_wii(dev);
1655         __u8 type;
1656         unsigned long flags;
1657
1658         spin_lock_irqsave(&wdata->state.lock, flags);
1659         type = wdata->state.exttype;
1660         spin_unlock_irqrestore(&wdata->state.lock, flags);
1661
1662         switch (type) {
1663         case WIIMOTE_EXT_NONE:
1664                 return sprintf(buf, "none\n");
1665         case WIIMOTE_EXT_NUNCHUK:
1666                 return sprintf(buf, "nunchuk\n");
1667         case WIIMOTE_EXT_CLASSIC_CONTROLLER:
1668                 return sprintf(buf, "classic\n");
1669         case WIIMOTE_EXT_BALANCE_BOARD:
1670                 return sprintf(buf, "balanceboard\n");
1671         case WIIMOTE_EXT_PRO_CONTROLLER:
1672                 return sprintf(buf, "procontroller\n");
1673         case WIIMOTE_EXT_DRUMS:
1674                 return sprintf(buf, "drums\n");
1675         case WIIMOTE_EXT_GUITAR:
1676                 return sprintf(buf, "guitar\n");
1677         case WIIMOTE_EXT_UNKNOWN:
1678                 /* fallthrough */
1679         default:
1680                 return sprintf(buf, "unknown\n");
1681         }
1682 }
1683
1684 static ssize_t wiimote_ext_store(struct device *dev,
1685                                  struct device_attribute *attr,
1686                                  const char *buf, size_t count)
1687 {
1688         struct wiimote_data *wdata = dev_to_wii(dev);
1689
1690         if (!strcmp(buf, "scan")) {
1691                 wiimote_schedule(wdata);
1692         } else {
1693                 return -EINVAL;
1694         }
1695
1696         return strnlen(buf, PAGE_SIZE);
1697 }
1698
1699 static DEVICE_ATTR(extension, S_IRUGO | S_IWUSR | S_IWGRP, wiimote_ext_show,
1700                    wiimote_ext_store);
1701
1702 static ssize_t wiimote_dev_show(struct device *dev,
1703                                 struct device_attribute *attr,
1704                                 char *buf)
1705 {
1706         struct wiimote_data *wdata = dev_to_wii(dev);
1707         __u8 type;
1708         unsigned long flags;
1709
1710         spin_lock_irqsave(&wdata->state.lock, flags);
1711         type = wdata->state.devtype;
1712         spin_unlock_irqrestore(&wdata->state.lock, flags);
1713
1714         switch (type) {
1715         case WIIMOTE_DEV_GENERIC:
1716                 return sprintf(buf, "generic\n");
1717         case WIIMOTE_DEV_GEN10:
1718                 return sprintf(buf, "gen10\n");
1719         case WIIMOTE_DEV_GEN20:
1720                 return sprintf(buf, "gen20\n");
1721         case WIIMOTE_DEV_BALANCE_BOARD:
1722                 return sprintf(buf, "balanceboard\n");
1723         case WIIMOTE_DEV_PRO_CONTROLLER:
1724                 return sprintf(buf, "procontroller\n");
1725         case WIIMOTE_DEV_PENDING:
1726                 return sprintf(buf, "pending\n");
1727         case WIIMOTE_DEV_UNKNOWN:
1728                 /* fallthrough */
1729         default:
1730                 return sprintf(buf, "unknown\n");
1731         }
1732 }
1733
1734 static DEVICE_ATTR(devtype, S_IRUGO, wiimote_dev_show, NULL);
1735
1736 static struct wiimote_data *wiimote_create(struct hid_device *hdev)
1737 {
1738         struct wiimote_data *wdata;
1739
1740         wdata = kzalloc(sizeof(*wdata), GFP_KERNEL);
1741         if (!wdata)
1742                 return NULL;
1743
1744         wdata->hdev = hdev;
1745         hid_set_drvdata(hdev, wdata);
1746
1747         spin_lock_init(&wdata->queue.lock);
1748         INIT_WORK(&wdata->queue.worker, wiimote_queue_worker);
1749
1750         spin_lock_init(&wdata->state.lock);
1751         init_completion(&wdata->state.ready);
1752         mutex_init(&wdata->state.sync);
1753         wdata->state.drm = WIIPROTO_REQ_DRM_K;
1754         wdata->state.cmd_battery = 0xff;
1755
1756         INIT_WORK(&wdata->init_worker, wiimote_init_worker);
1757         timer_setup(&wdata->timer, wiimote_init_timeout, 0);
1758
1759         return wdata;
1760 }
1761
1762 static void wiimote_destroy(struct wiimote_data *wdata)
1763 {
1764         unsigned long flags;
1765
1766         wiidebug_deinit(wdata);
1767
1768         /* prevent init_worker from being scheduled again */
1769         spin_lock_irqsave(&wdata->state.lock, flags);
1770         wdata->state.flags |= WIIPROTO_FLAG_EXITING;
1771         spin_unlock_irqrestore(&wdata->state.lock, flags);
1772
1773         cancel_work_sync(&wdata->init_worker);
1774         del_timer_sync(&wdata->timer);
1775
1776         device_remove_file(&wdata->hdev->dev, &dev_attr_devtype);
1777         device_remove_file(&wdata->hdev->dev, &dev_attr_extension);
1778
1779         wiimote_mp_unload(wdata);
1780         wiimote_ext_unload(wdata);
1781         wiimote_modules_unload(wdata);
1782         cancel_work_sync(&wdata->queue.worker);
1783         hid_hw_close(wdata->hdev);
1784         hid_hw_stop(wdata->hdev);
1785
1786         kfree(wdata);
1787 }
1788
1789 static int wiimote_hid_probe(struct hid_device *hdev,
1790                                 const struct hid_device_id *id)
1791 {
1792         struct wiimote_data *wdata;
1793         int ret;
1794
1795         hdev->quirks |= HID_QUIRK_NO_INIT_REPORTS;
1796
1797         wdata = wiimote_create(hdev);
1798         if (!wdata) {
1799                 hid_err(hdev, "Can't alloc device\n");
1800                 return -ENOMEM;
1801         }
1802
1803         ret = hid_parse(hdev);
1804         if (ret) {
1805                 hid_err(hdev, "HID parse failed\n");
1806                 goto err;
1807         }
1808
1809         ret = hid_hw_start(hdev, HID_CONNECT_HIDRAW);
1810         if (ret) {
1811                 hid_err(hdev, "HW start failed\n");
1812                 goto err;
1813         }
1814
1815         ret = hid_hw_open(hdev);
1816         if (ret) {
1817                 hid_err(hdev, "cannot start hardware I/O\n");
1818                 goto err_stop;
1819         }
1820
1821         ret = device_create_file(&hdev->dev, &dev_attr_extension);
1822         if (ret) {
1823                 hid_err(hdev, "cannot create sysfs attribute\n");
1824                 goto err_close;
1825         }
1826
1827         ret = device_create_file(&hdev->dev, &dev_attr_devtype);
1828         if (ret) {
1829                 hid_err(hdev, "cannot create sysfs attribute\n");
1830                 goto err_ext;
1831         }
1832
1833         ret = wiidebug_init(wdata);
1834         if (ret)
1835                 goto err_free;
1836
1837         hid_info(hdev, "New device registered\n");
1838
1839         /* schedule device detection */
1840         wiimote_schedule(wdata);
1841
1842         return 0;
1843
1844 err_free:
1845         wiimote_destroy(wdata);
1846         return ret;
1847
1848 err_ext:
1849         device_remove_file(&wdata->hdev->dev, &dev_attr_extension);
1850 err_close:
1851         hid_hw_close(hdev);
1852 err_stop:
1853         hid_hw_stop(hdev);
1854 err:
1855         input_free_device(wdata->ir);
1856         input_free_device(wdata->accel);
1857         kfree(wdata);
1858         return ret;
1859 }
1860
1861 static void wiimote_hid_remove(struct hid_device *hdev)
1862 {
1863         struct wiimote_data *wdata = hid_get_drvdata(hdev);
1864
1865         hid_info(hdev, "Device removed\n");
1866         wiimote_destroy(wdata);
1867 }
1868
1869 static const struct hid_device_id wiimote_hid_devices[] = {
1870         { HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_NINTENDO,
1871                                 USB_DEVICE_ID_NINTENDO_WIIMOTE) },
1872         { HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_NINTENDO,
1873                                 USB_DEVICE_ID_NINTENDO_WIIMOTE2) },
1874         { }
1875 };
1876 MODULE_DEVICE_TABLE(hid, wiimote_hid_devices);
1877
1878 static struct hid_driver wiimote_hid_driver = {
1879         .name = "wiimote",
1880         .id_table = wiimote_hid_devices,
1881         .probe = wiimote_hid_probe,
1882         .remove = wiimote_hid_remove,
1883         .raw_event = wiimote_hid_event,
1884 };
1885 module_hid_driver(wiimote_hid_driver);
1886
1887 MODULE_LICENSE("GPL");
1888 MODULE_AUTHOR("David Herrmann <dh.herrmann@gmail.com>");
1889 MODULE_DESCRIPTION("Driver for Nintendo Wii / Wii U peripherals");