1 // SPDX-License-Identifier: GPL-2.0
5 * This driver supports USB CDC WCM Device Management.
7 * Copyright (c) 2007-2009 Oliver Neukum
9 * Some code taken from cdc-acm.c
11 * Released under the GPLv2.
13 * Many thanks to Carl Nordbeck
15 #include <linux/kernel.h>
16 #include <linux/errno.h>
17 #include <linux/ioctl.h>
18 #include <linux/slab.h>
19 #include <linux/module.h>
20 #include <linux/mutex.h>
21 #include <linux/uaccess.h>
22 #include <linux/bitops.h>
23 #include <linux/poll.h>
24 #include <linux/skbuff.h>
25 #include <linux/usb.h>
26 #include <linux/usb/cdc.h>
27 #include <linux/wwan.h>
28 #include <asm/byteorder.h>
29 #include <asm/unaligned.h>
30 #include <linux/usb/cdc-wdm.h>
32 #define DRIVER_AUTHOR "Oliver Neukum"
33 #define DRIVER_DESC "USB Abstract Control Model driver for USB WCM Device Management"
35 static const struct usb_device_id wdm_ids[] = {
37 .match_flags = USB_DEVICE_ID_MATCH_INT_CLASS |
38 USB_DEVICE_ID_MATCH_INT_SUBCLASS,
39 .bInterfaceClass = USB_CLASS_COMM,
40 .bInterfaceSubClass = USB_CDC_SUBCLASS_DMM
45 MODULE_DEVICE_TABLE (usb, wdm_ids);
47 #define WDM_MINOR_BASE 176
51 #define WDM_DISCONNECTING 2
54 #define WDM_INT_STALL 5
55 #define WDM_POLL_RUNNING 6
56 #define WDM_RESPONDING 7
57 #define WDM_SUSPENDING 8
58 #define WDM_RESETTING 9
59 #define WDM_OVERFLOW 10
60 #define WDM_WWAN_IN_USE 11
64 /* we cannot wait forever at flush() */
65 #define WDM_FLUSH_TIMEOUT (30 * HZ)
67 /* CDC-WMC r1.1 requires wMaxCommand to be "at least 256 decimal (0x100)" */
68 #define WDM_DEFAULT_BUFSIZE 256
70 static DEFINE_MUTEX(wdm_mutex);
71 static DEFINE_SPINLOCK(wdm_device_list_lock);
72 static LIST_HEAD(wdm_device_list);
74 /* --- method tables --- */
77 u8 *inbuf; /* buffer for response */
78 u8 *outbuf; /* buffer for command */
79 u8 *sbuf; /* buffer for status */
80 u8 *ubuf; /* buffer for copy to user space */
85 struct usb_interface *intf;
86 struct usb_ctrlrequest *orq;
87 struct usb_ctrlrequest *irq;
103 wait_queue_head_t wait;
104 struct work_struct rxwork;
105 struct work_struct service_outs_intr;
110 struct list_head device_list;
111 int (*manage_power)(struct usb_interface *, int);
113 enum wwan_port_type wwanp_type;
114 struct wwan_port *wwanp;
117 static struct usb_driver wdm_driver;
119 /* return intfdata if we own the interface, else look up intf in the list */
120 static struct wdm_device *wdm_find_device(struct usb_interface *intf)
122 struct wdm_device *desc;
124 spin_lock(&wdm_device_list_lock);
125 list_for_each_entry(desc, &wdm_device_list, device_list)
126 if (desc->intf == intf)
130 spin_unlock(&wdm_device_list_lock);
135 static struct wdm_device *wdm_find_device_by_minor(int minor)
137 struct wdm_device *desc;
139 spin_lock(&wdm_device_list_lock);
140 list_for_each_entry(desc, &wdm_device_list, device_list)
141 if (desc->intf->minor == minor)
145 spin_unlock(&wdm_device_list_lock);
150 /* --- callbacks --- */
151 static void wdm_out_callback(struct urb *urb)
153 struct wdm_device *desc;
157 spin_lock_irqsave(&desc->iuspin, flags);
158 desc->werr = urb->status;
159 spin_unlock_irqrestore(&desc->iuspin, flags);
162 clear_bit(WDM_IN_USE, &desc->flags);
163 wake_up_all(&desc->wait);
166 static void wdm_wwan_rx(struct wdm_device *desc, int length);
168 static void wdm_in_callback(struct urb *urb)
171 struct wdm_device *desc = urb->context;
172 int status = urb->status;
173 int length = urb->actual_length;
175 spin_lock_irqsave(&desc->iuspin, flags);
176 clear_bit(WDM_RESPONDING, &desc->flags);
181 dev_dbg(&desc->intf->dev,
182 "nonzero urb status received: -ENOENT\n");
185 dev_dbg(&desc->intf->dev,
186 "nonzero urb status received: -ECONNRESET\n");
189 dev_dbg(&desc->intf->dev,
190 "nonzero urb status received: -ESHUTDOWN\n");
193 dev_err(&desc->intf->dev,
194 "nonzero urb status received: -EPIPE\n");
197 dev_err(&desc->intf->dev,
198 "Unexpected error %d\n", status);
203 if (test_bit(WDM_WWAN_IN_USE, &desc->flags)) {
204 wdm_wwan_rx(desc, length);
209 * only set a new error if there is no previous error.
210 * Errors are only cleared during read/open
211 * Avoid propagating -EPIPE (stall) to userspace since it is
212 * better handled as an empty read
214 if (desc->rerr == 0 && status != -EPIPE)
217 if (length + desc->length > desc->wMaxCommand) {
218 /* The buffer would overflow */
219 set_bit(WDM_OVERFLOW, &desc->flags);
221 /* we may already be in overflow */
222 if (!test_bit(WDM_OVERFLOW, &desc->flags)) {
223 memmove(desc->ubuf + desc->length, desc->inbuf, length);
224 desc->length += length;
225 desc->reslength = length;
232 * Since there was an error, userspace may decide to not read
233 * any data after poll'ing.
234 * We should respond to further attempts from the device to send
235 * data, so that we can get unstuck.
237 schedule_work(&desc->service_outs_intr);
239 set_bit(WDM_READ, &desc->flags);
240 wake_up(&desc->wait);
243 spin_unlock_irqrestore(&desc->iuspin, flags);
246 static void wdm_int_callback(struct urb *urb)
251 int status = urb->status;
252 struct wdm_device *desc;
253 struct usb_cdc_notification *dr;
256 dr = (struct usb_cdc_notification *)desc->sbuf;
265 set_bit(WDM_INT_STALL, &desc->flags);
266 dev_err(&desc->intf->dev, "Stall on int endpoint\n");
267 goto sw; /* halt is cleared in work */
269 dev_err(&desc->intf->dev,
270 "nonzero urb status received: %d\n", status);
275 if (urb->actual_length < sizeof(struct usb_cdc_notification)) {
276 dev_err(&desc->intf->dev, "wdm_int_callback - %d bytes\n",
281 switch (dr->bNotificationType) {
282 case USB_CDC_NOTIFY_RESPONSE_AVAILABLE:
283 dev_dbg(&desc->intf->dev,
284 "NOTIFY_RESPONSE_AVAILABLE received: index %d len %d\n",
285 le16_to_cpu(dr->wIndex), le16_to_cpu(dr->wLength));
288 case USB_CDC_NOTIFY_NETWORK_CONNECTION:
290 dev_dbg(&desc->intf->dev,
291 "NOTIFY_NETWORK_CONNECTION %s network\n",
292 dr->wValue ? "connected to" : "disconnected from");
294 case USB_CDC_NOTIFY_SPEED_CHANGE:
295 dev_dbg(&desc->intf->dev, "SPEED_CHANGE received (len %u)\n",
299 clear_bit(WDM_POLL_RUNNING, &desc->flags);
300 dev_err(&desc->intf->dev,
301 "unknown notification %d received: index %d len %d\n",
302 dr->bNotificationType,
303 le16_to_cpu(dr->wIndex),
304 le16_to_cpu(dr->wLength));
308 spin_lock_irqsave(&desc->iuspin, flags);
309 responding = test_and_set_bit(WDM_RESPONDING, &desc->flags);
310 if (!desc->resp_count++ && !responding
311 && !test_bit(WDM_DISCONNECTING, &desc->flags)
312 && !test_bit(WDM_SUSPENDING, &desc->flags)) {
313 rv = usb_submit_urb(desc->response, GFP_ATOMIC);
314 dev_dbg(&desc->intf->dev, "submit response URB %d\n", rv);
316 spin_unlock_irqrestore(&desc->iuspin, flags);
318 clear_bit(WDM_RESPONDING, &desc->flags);
323 rv = schedule_work(&desc->rxwork);
325 dev_err(&desc->intf->dev,
326 "Cannot schedule work\n");
330 rv = usb_submit_urb(urb, GFP_ATOMIC);
332 dev_err(&desc->intf->dev,
333 "%s - usb_submit_urb failed with result %d\n",
338 static void poison_urbs(struct wdm_device *desc)
340 /* the order here is essential */
341 usb_poison_urb(desc->command);
342 usb_poison_urb(desc->validity);
343 usb_poison_urb(desc->response);
346 static void unpoison_urbs(struct wdm_device *desc)
349 * the order here is not essential
350 * it is symmetrical just to be nice
352 usb_unpoison_urb(desc->response);
353 usb_unpoison_urb(desc->validity);
354 usb_unpoison_urb(desc->command);
357 static void free_urbs(struct wdm_device *desc)
359 usb_free_urb(desc->validity);
360 usb_free_urb(desc->response);
361 usb_free_urb(desc->command);
364 static void cleanup(struct wdm_device *desc)
375 static ssize_t wdm_write
376 (struct file *file, const char __user *buffer, size_t count, loff_t *ppos)
379 int rv = -EMSGSIZE, r, we;
380 struct wdm_device *desc = file->private_data;
381 struct usb_ctrlrequest *req;
383 if (count > desc->wMaxCommand)
384 count = desc->wMaxCommand;
386 spin_lock_irq(&desc->iuspin);
389 spin_unlock_irq(&desc->iuspin);
391 return usb_translate_errors(we);
393 buf = memdup_user(buffer, count);
397 /* concurrent writes and disconnect */
398 r = mutex_lock_interruptible(&desc->wlock);
403 if (test_bit(WDM_DISCONNECTING, &desc->flags)) {
405 goto out_free_mem_lock;
408 r = usb_autopm_get_interface(desc->intf);
410 rv = usb_translate_errors(r);
411 goto out_free_mem_lock;
414 if (!(file->f_flags & O_NONBLOCK))
415 r = wait_event_interruptible(desc->wait, !test_bit(WDM_IN_USE,
418 if (test_bit(WDM_IN_USE, &desc->flags))
421 if (test_bit(WDM_RESETTING, &desc->flags))
424 if (test_bit(WDM_DISCONNECTING, &desc->flags))
429 goto out_free_mem_pm;
433 usb_fill_control_urb(
435 interface_to_usbdev(desc->intf),
436 /* using common endpoint 0 */
437 usb_sndctrlpipe(interface_to_usbdev(desc->intf), 0),
438 (unsigned char *)req,
445 req->bRequestType = (USB_DIR_OUT | USB_TYPE_CLASS |
446 USB_RECIP_INTERFACE);
447 req->bRequest = USB_CDC_SEND_ENCAPSULATED_COMMAND;
449 req->wIndex = desc->inum; /* already converted */
450 req->wLength = cpu_to_le16(count);
451 set_bit(WDM_IN_USE, &desc->flags);
454 rv = usb_submit_urb(desc->command, GFP_KERNEL);
457 clear_bit(WDM_IN_USE, &desc->flags);
458 wake_up_all(&desc->wait); /* for wdm_wait_for_response() */
459 dev_err(&desc->intf->dev, "Tx URB error: %d\n", rv);
460 rv = usb_translate_errors(rv);
461 goto out_free_mem_pm;
463 dev_dbg(&desc->intf->dev, "Tx URB has been submitted index=%d\n",
464 le16_to_cpu(req->wIndex));
467 usb_autopm_put_interface(desc->intf);
468 mutex_unlock(&desc->wlock);
472 usb_autopm_put_interface(desc->intf);
474 mutex_unlock(&desc->wlock);
481 * Submit the read urb if resp_count is non-zero.
483 * Called with desc->iuspin locked
485 static int service_outstanding_interrupt(struct wdm_device *desc)
490 /* submit read urb only if the device is waiting for it */
491 if (!desc->resp_count || !--desc->resp_count)
494 if (test_bit(WDM_DISCONNECTING, &desc->flags)) {
498 if (test_bit(WDM_RESETTING, &desc->flags)) {
503 used = test_and_set_bit(WDM_RESPONDING, &desc->flags);
507 spin_unlock_irq(&desc->iuspin);
508 rv = usb_submit_urb(desc->response, GFP_KERNEL);
509 spin_lock_irq(&desc->iuspin);
511 if (!test_bit(WDM_DISCONNECTING, &desc->flags))
512 dev_err(&desc->intf->dev,
513 "usb_submit_urb failed with result %d\n", rv);
515 /* make sure the next notification trigger a submit */
516 clear_bit(WDM_RESPONDING, &desc->flags);
517 desc->resp_count = 0;
523 static ssize_t wdm_read
524 (struct file *file, char __user *buffer, size_t count, loff_t *ppos)
528 struct wdm_device *desc = file->private_data;
531 rv = mutex_lock_interruptible(&desc->rlock); /*concurrent reads */
535 cntr = READ_ONCE(desc->length);
539 if (test_bit(WDM_DISCONNECTING, &desc->flags)) {
543 if (test_bit(WDM_OVERFLOW, &desc->flags)) {
544 clear_bit(WDM_OVERFLOW, &desc->flags);
549 if (file->f_flags & O_NONBLOCK) {
550 if (!test_bit(WDM_READ, &desc->flags)) {
556 rv = wait_event_interruptible(desc->wait,
557 test_bit(WDM_READ, &desc->flags));
560 /* may have happened while we slept */
561 if (test_bit(WDM_DISCONNECTING, &desc->flags)) {
565 if (test_bit(WDM_RESETTING, &desc->flags)) {
569 usb_mark_last_busy(interface_to_usbdev(desc->intf));
575 spin_lock_irq(&desc->iuspin);
577 if (desc->rerr) { /* read completed, error happened */
578 rv = usb_translate_errors(desc->rerr);
580 spin_unlock_irq(&desc->iuspin);
584 * recheck whether we've lost the race
585 * against the completion handler
587 if (!test_bit(WDM_READ, &desc->flags)) { /* lost race */
588 spin_unlock_irq(&desc->iuspin);
592 if (!desc->reslength) { /* zero length read */
593 dev_dbg(&desc->intf->dev, "zero length - clearing WDM_READ\n");
594 clear_bit(WDM_READ, &desc->flags);
595 rv = service_outstanding_interrupt(desc);
596 spin_unlock_irq(&desc->iuspin);
602 spin_unlock_irq(&desc->iuspin);
607 rv = copy_to_user(buffer, desc->ubuf, cntr);
613 spin_lock_irq(&desc->iuspin);
615 for (i = 0; i < desc->length - cntr; i++)
616 desc->ubuf[i] = desc->ubuf[i + cntr];
618 desc->length -= cntr;
619 /* in case we had outstanding data */
621 clear_bit(WDM_READ, &desc->flags);
622 service_outstanding_interrupt(desc);
624 spin_unlock_irq(&desc->iuspin);
628 mutex_unlock(&desc->rlock);
632 static int wdm_wait_for_response(struct file *file, long timeout)
634 struct wdm_device *desc = file->private_data;
635 long rv; /* Use long here because (int) MAX_SCHEDULE_TIMEOUT < 0. */
638 * Needs both flags. We cannot do with one because resetting it would
639 * cause a race with write() yet we need to signal a disconnect.
641 rv = wait_event_interruptible_timeout(desc->wait,
642 !test_bit(WDM_IN_USE, &desc->flags) ||
643 test_bit(WDM_DISCONNECTING, &desc->flags),
647 * To report the correct error. This is best effort.
648 * We are inevitably racing with the hardware.
650 if (test_bit(WDM_DISCONNECTING, &desc->flags))
657 spin_lock_irq(&desc->iuspin);
660 spin_unlock_irq(&desc->iuspin);
662 return usb_translate_errors(rv);
667 * You need to send a signal when you react to malicious or defective hardware.
668 * Also, don't abort when fsync() returned -EINVAL, for older kernels which do
669 * not implement wdm_flush() will return -EINVAL.
671 static int wdm_fsync(struct file *file, loff_t start, loff_t end, int datasync)
673 return wdm_wait_for_response(file, MAX_SCHEDULE_TIMEOUT);
677 * Same with wdm_fsync(), except it uses finite timeout in order to react to
678 * malicious or defective hardware which ceased communication after close() was
679 * implicitly called due to process termination.
681 static int wdm_flush(struct file *file, fl_owner_t id)
683 return wdm_wait_for_response(file, WDM_FLUSH_TIMEOUT);
686 static __poll_t wdm_poll(struct file *file, struct poll_table_struct *wait)
688 struct wdm_device *desc = file->private_data;
692 spin_lock_irqsave(&desc->iuspin, flags);
693 if (test_bit(WDM_DISCONNECTING, &desc->flags)) {
694 mask = EPOLLHUP | EPOLLERR;
695 spin_unlock_irqrestore(&desc->iuspin, flags);
698 if (test_bit(WDM_READ, &desc->flags))
699 mask = EPOLLIN | EPOLLRDNORM;
700 if (desc->rerr || desc->werr)
702 if (!test_bit(WDM_IN_USE, &desc->flags))
703 mask |= EPOLLOUT | EPOLLWRNORM;
704 spin_unlock_irqrestore(&desc->iuspin, flags);
706 poll_wait(file, &desc->wait, wait);
712 static int wdm_open(struct inode *inode, struct file *file)
714 int minor = iminor(inode);
716 struct usb_interface *intf;
717 struct wdm_device *desc;
719 mutex_lock(&wdm_mutex);
720 desc = wdm_find_device_by_minor(minor);
725 if (test_bit(WDM_DISCONNECTING, &desc->flags))
727 file->private_data = desc;
729 if (test_bit(WDM_WWAN_IN_USE, &desc->flags)) {
734 rv = usb_autopm_get_interface(desc->intf);
736 dev_err(&desc->intf->dev, "Error autopm - %d\n", rv);
740 /* using write lock to protect desc->count */
741 mutex_lock(&desc->wlock);
742 if (!desc->count++) {
745 rv = usb_submit_urb(desc->validity, GFP_KERNEL);
748 dev_err(&desc->intf->dev,
749 "Error submitting int urb - %d\n", rv);
750 rv = usb_translate_errors(rv);
755 mutex_unlock(&desc->wlock);
756 if (desc->count == 1)
757 desc->manage_power(intf, 1);
758 usb_autopm_put_interface(desc->intf);
760 mutex_unlock(&wdm_mutex);
764 static int wdm_release(struct inode *inode, struct file *file)
766 struct wdm_device *desc = file->private_data;
768 mutex_lock(&wdm_mutex);
770 /* using write lock to protect desc->count */
771 mutex_lock(&desc->wlock);
773 mutex_unlock(&desc->wlock);
776 if (!test_bit(WDM_DISCONNECTING, &desc->flags)) {
777 dev_dbg(&desc->intf->dev, "wdm_release: cleanup\n");
779 spin_lock_irq(&desc->iuspin);
780 desc->resp_count = 0;
781 clear_bit(WDM_RESPONDING, &desc->flags);
782 spin_unlock_irq(&desc->iuspin);
783 desc->manage_power(desc->intf, 0);
786 /* must avoid dev_printk here as desc->intf is invalid */
787 pr_debug(KBUILD_MODNAME " %s: device gone - cleaning up\n", __func__);
791 mutex_unlock(&wdm_mutex);
795 static long wdm_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
797 struct wdm_device *desc = file->private_data;
801 case IOCTL_WDM_MAX_COMMAND:
802 if (copy_to_user((void __user *)arg, &desc->wMaxCommand, sizeof(desc->wMaxCommand)))
811 static const struct file_operations wdm_fops = {
812 .owner = THIS_MODULE,
818 .release = wdm_release,
820 .unlocked_ioctl = wdm_ioctl,
821 .compat_ioctl = compat_ptr_ioctl,
822 .llseek = noop_llseek,
825 static struct usb_class_driver wdm_class = {
828 .minor_base = WDM_MINOR_BASE,
831 /* --- WWAN framework integration --- */
833 static int wdm_wwan_port_start(struct wwan_port *port)
835 struct wdm_device *desc = wwan_port_get_drvdata(port);
837 /* The interface is both exposed via the WWAN framework and as a
838 * legacy usbmisc chardev. If chardev is already open, just fail
839 * to prevent concurrent usage. Otherwise, switch to WWAN mode.
841 mutex_lock(&wdm_mutex);
843 mutex_unlock(&wdm_mutex);
846 set_bit(WDM_WWAN_IN_USE, &desc->flags);
847 mutex_unlock(&wdm_mutex);
849 desc->manage_power(desc->intf, 1);
852 wwan_port_txon(port);
854 /* Start getting events */
855 return usb_submit_urb(desc->validity, GFP_KERNEL);
858 static void wdm_wwan_port_stop(struct wwan_port *port)
860 struct wdm_device *desc = wwan_port_get_drvdata(port);
862 /* Stop all transfers and disable WWAN mode */
864 desc->manage_power(desc->intf, 0);
865 clear_bit(WDM_READ, &desc->flags);
866 clear_bit(WDM_WWAN_IN_USE, &desc->flags);
870 static void wdm_wwan_port_tx_complete(struct urb *urb)
872 struct sk_buff *skb = urb->context;
873 struct wdm_device *desc = skb_shinfo(skb)->destructor_arg;
875 usb_autopm_put_interface(desc->intf);
876 wwan_port_txon(desc->wwanp);
880 static int wdm_wwan_port_tx(struct wwan_port *port, struct sk_buff *skb)
882 struct wdm_device *desc = wwan_port_get_drvdata(port);
883 struct usb_interface *intf = desc->intf;
884 struct usb_ctrlrequest *req = desc->orq;
887 rv = usb_autopm_get_interface(intf);
891 usb_fill_control_urb(
893 interface_to_usbdev(intf),
894 usb_sndctrlpipe(interface_to_usbdev(intf), 0),
895 (unsigned char *)req,
898 wdm_wwan_port_tx_complete,
902 req->bRequestType = (USB_DIR_OUT | USB_TYPE_CLASS | USB_RECIP_INTERFACE);
903 req->bRequest = USB_CDC_SEND_ENCAPSULATED_COMMAND;
905 req->wIndex = desc->inum;
906 req->wLength = cpu_to_le16(skb->len);
908 skb_shinfo(skb)->destructor_arg = desc;
910 rv = usb_submit_urb(desc->command, GFP_KERNEL);
912 usb_autopm_put_interface(intf);
913 else /* One transfer at a time, stop TX until URB completion */
914 wwan_port_txoff(port);
919 static const struct wwan_port_ops wdm_wwan_port_ops = {
920 .start = wdm_wwan_port_start,
921 .stop = wdm_wwan_port_stop,
922 .tx = wdm_wwan_port_tx,
925 static void wdm_wwan_init(struct wdm_device *desc)
927 struct usb_interface *intf = desc->intf;
928 struct wwan_port *port;
930 /* Only register to WWAN core if protocol/type is known */
931 if (desc->wwanp_type == WWAN_PORT_UNKNOWN) {
932 dev_info(&intf->dev, "Unknown control protocol\n");
936 port = wwan_create_port(&intf->dev, desc->wwanp_type, &wdm_wwan_port_ops,
939 dev_err(&intf->dev, "%s: Unable to create WWAN port\n",
940 dev_name(intf->usb_dev));
947 static void wdm_wwan_deinit(struct wdm_device *desc)
952 wwan_remove_port(desc->wwanp);
956 static void wdm_wwan_rx(struct wdm_device *desc, int length)
958 struct wwan_port *port = desc->wwanp;
961 /* Forward data to WWAN port */
962 skb = alloc_skb(length, GFP_ATOMIC);
966 skb_put_data(skb, desc->inbuf, length);
967 wwan_port_rx(port, skb);
969 /* inbuf has been copied, it is safe to check for outstanding data */
970 schedule_work(&desc->service_outs_intr);
972 #else /* CONFIG_WWAN */
973 static void wdm_wwan_init(struct wdm_device *desc) {}
974 static void wdm_wwan_deinit(struct wdm_device *desc) {}
975 static void wdm_wwan_rx(struct wdm_device *desc, int length) {}
976 #endif /* CONFIG_WWAN */
978 /* --- error handling --- */
979 static void wdm_rxwork(struct work_struct *work)
981 struct wdm_device *desc = container_of(work, struct wdm_device, rxwork);
986 spin_lock_irqsave(&desc->iuspin, flags);
987 if (test_bit(WDM_DISCONNECTING, &desc->flags)) {
988 spin_unlock_irqrestore(&desc->iuspin, flags);
990 responding = test_and_set_bit(WDM_RESPONDING, &desc->flags);
991 spin_unlock_irqrestore(&desc->iuspin, flags);
993 rv = usb_submit_urb(desc->response, GFP_KERNEL);
994 if (rv < 0 && rv != -EPERM) {
995 spin_lock_irqsave(&desc->iuspin, flags);
996 clear_bit(WDM_RESPONDING, &desc->flags);
997 if (!test_bit(WDM_DISCONNECTING, &desc->flags))
998 schedule_work(&desc->rxwork);
999 spin_unlock_irqrestore(&desc->iuspin, flags);
1004 static void service_interrupt_work(struct work_struct *work)
1006 struct wdm_device *desc;
1008 desc = container_of(work, struct wdm_device, service_outs_intr);
1010 spin_lock_irq(&desc->iuspin);
1011 service_outstanding_interrupt(desc);
1012 if (!desc->resp_count) {
1013 set_bit(WDM_READ, &desc->flags);
1014 wake_up(&desc->wait);
1016 spin_unlock_irq(&desc->iuspin);
1019 /* --- hotplug --- */
1021 static int wdm_create(struct usb_interface *intf, struct usb_endpoint_descriptor *ep,
1022 u16 bufsize, enum wwan_port_type type,
1023 int (*manage_power)(struct usb_interface *, int))
1026 struct wdm_device *desc;
1028 desc = kzalloc(sizeof(struct wdm_device), GFP_KERNEL);
1031 INIT_LIST_HEAD(&desc->device_list);
1032 mutex_init(&desc->rlock);
1033 mutex_init(&desc->wlock);
1034 spin_lock_init(&desc->iuspin);
1035 init_waitqueue_head(&desc->wait);
1036 desc->wMaxCommand = bufsize;
1037 /* this will be expanded and needed in hardware endianness */
1038 desc->inum = cpu_to_le16((u16)intf->cur_altsetting->desc.bInterfaceNumber);
1040 desc->wwanp_type = type;
1041 INIT_WORK(&desc->rxwork, wdm_rxwork);
1042 INIT_WORK(&desc->service_outs_intr, service_interrupt_work);
1044 if (!usb_endpoint_is_int_in(ep)) {
1049 desc->wMaxPacketSize = usb_endpoint_maxp(ep);
1051 desc->orq = kmalloc(sizeof(struct usb_ctrlrequest), GFP_KERNEL);
1054 desc->irq = kmalloc(sizeof(struct usb_ctrlrequest), GFP_KERNEL);
1058 desc->validity = usb_alloc_urb(0, GFP_KERNEL);
1059 if (!desc->validity)
1062 desc->response = usb_alloc_urb(0, GFP_KERNEL);
1063 if (!desc->response)
1066 desc->command = usb_alloc_urb(0, GFP_KERNEL);
1070 desc->ubuf = kmalloc(desc->wMaxCommand, GFP_KERNEL);
1074 desc->sbuf = kmalloc(desc->wMaxPacketSize, GFP_KERNEL);
1078 desc->inbuf = kmalloc(desc->wMaxCommand, GFP_KERNEL);
1084 interface_to_usbdev(intf),
1085 usb_rcvintpipe(interface_to_usbdev(intf), ep->bEndpointAddress),
1087 desc->wMaxPacketSize,
1093 desc->irq->bRequestType = (USB_DIR_IN | USB_TYPE_CLASS | USB_RECIP_INTERFACE);
1094 desc->irq->bRequest = USB_CDC_GET_ENCAPSULATED_RESPONSE;
1095 desc->irq->wValue = 0;
1096 desc->irq->wIndex = desc->inum; /* already converted */
1097 desc->irq->wLength = cpu_to_le16(desc->wMaxCommand);
1099 usb_fill_control_urb(
1101 interface_to_usbdev(intf),
1102 /* using common endpoint 0 */
1103 usb_rcvctrlpipe(interface_to_usbdev(desc->intf), 0),
1104 (unsigned char *)desc->irq,
1111 desc->manage_power = manage_power;
1113 spin_lock(&wdm_device_list_lock);
1114 list_add(&desc->device_list, &wdm_device_list);
1115 spin_unlock(&wdm_device_list_lock);
1117 rv = usb_register_dev(intf, &wdm_class);
1121 dev_info(&intf->dev, "%s: USB WDM device\n", dev_name(intf->usb_dev));
1123 wdm_wwan_init(desc);
1128 spin_lock(&wdm_device_list_lock);
1129 list_del(&desc->device_list);
1130 spin_unlock(&wdm_device_list_lock);
1135 static int wdm_manage_power(struct usb_interface *intf, int on)
1137 /* need autopm_get/put here to ensure the usbcore sees the new value */
1138 int rv = usb_autopm_get_interface(intf);
1140 intf->needs_remote_wakeup = on;
1142 usb_autopm_put_interface(intf);
1146 static int wdm_probe(struct usb_interface *intf, const struct usb_device_id *id)
1149 struct usb_host_interface *iface;
1150 struct usb_endpoint_descriptor *ep;
1151 struct usb_cdc_parsed_header hdr;
1152 u8 *buffer = intf->altsetting->extra;
1153 int buflen = intf->altsetting->extralen;
1154 u16 maxcom = WDM_DEFAULT_BUFSIZE;
1159 cdc_parse_cdc_header(&hdr, intf, buffer, buflen);
1161 if (hdr.usb_cdc_dmm_desc)
1162 maxcom = le16_to_cpu(hdr.usb_cdc_dmm_desc->wMaxCommand);
1164 iface = intf->cur_altsetting;
1165 if (iface->desc.bNumEndpoints != 1)
1167 ep = &iface->endpoint[0].desc;
1169 rv = wdm_create(intf, ep, maxcom, WWAN_PORT_UNKNOWN, &wdm_manage_power);
1176 * usb_cdc_wdm_register - register a WDM subdriver
1177 * @intf: usb interface the subdriver will associate with
1178 * @ep: interrupt endpoint to monitor for notifications
1179 * @bufsize: maximum message size to support for read/write
1180 * @type: Type/protocol of the transported data (MBIM, QMI...)
1181 * @manage_power: call-back invoked during open and release to
1182 * manage the device's power
1183 * Create WDM usb class character device and associate it with intf
1184 * without binding, allowing another driver to manage the interface.
1186 * The subdriver will manage the given interrupt endpoint exclusively
1187 * and will issue control requests referring to the given intf. It
1188 * will otherwise avoid interferring, and in particular not do
1189 * usb_set_intfdata/usb_get_intfdata on intf.
1191 * The return value is a pointer to the subdriver's struct usb_driver.
1192 * The registering driver is responsible for calling this subdriver's
1193 * disconnect, suspend, resume, pre_reset and post_reset methods from
1196 struct usb_driver *usb_cdc_wdm_register(struct usb_interface *intf,
1197 struct usb_endpoint_descriptor *ep,
1198 int bufsize, enum wwan_port_type type,
1199 int (*manage_power)(struct usb_interface *, int))
1203 rv = wdm_create(intf, ep, bufsize, type, manage_power);
1211 EXPORT_SYMBOL(usb_cdc_wdm_register);
1213 static void wdm_disconnect(struct usb_interface *intf)
1215 struct wdm_device *desc;
1216 unsigned long flags;
1218 usb_deregister_dev(intf, &wdm_class);
1219 desc = wdm_find_device(intf);
1220 mutex_lock(&wdm_mutex);
1222 wdm_wwan_deinit(desc);
1224 /* the spinlock makes sure no new urbs are generated in the callbacks */
1225 spin_lock_irqsave(&desc->iuspin, flags);
1226 set_bit(WDM_DISCONNECTING, &desc->flags);
1227 set_bit(WDM_READ, &desc->flags);
1228 spin_unlock_irqrestore(&desc->iuspin, flags);
1229 wake_up_all(&desc->wait);
1230 mutex_lock(&desc->rlock);
1231 mutex_lock(&desc->wlock);
1233 cancel_work_sync(&desc->rxwork);
1234 cancel_work_sync(&desc->service_outs_intr);
1235 mutex_unlock(&desc->wlock);
1236 mutex_unlock(&desc->rlock);
1238 /* the desc->intf pointer used as list key is now invalid */
1239 spin_lock(&wdm_device_list_lock);
1240 list_del(&desc->device_list);
1241 spin_unlock(&wdm_device_list_lock);
1246 dev_dbg(&intf->dev, "%d open files - postponing cleanup\n", desc->count);
1247 mutex_unlock(&wdm_mutex);
1251 static int wdm_suspend(struct usb_interface *intf, pm_message_t message)
1253 struct wdm_device *desc = wdm_find_device(intf);
1256 dev_dbg(&desc->intf->dev, "wdm%d_suspend\n", intf->minor);
1258 /* if this is an autosuspend the caller does the locking */
1259 if (!PMSG_IS_AUTO(message)) {
1260 mutex_lock(&desc->rlock);
1261 mutex_lock(&desc->wlock);
1263 spin_lock_irq(&desc->iuspin);
1265 if (PMSG_IS_AUTO(message) &&
1266 (test_bit(WDM_IN_USE, &desc->flags)
1267 || test_bit(WDM_RESPONDING, &desc->flags))) {
1268 spin_unlock_irq(&desc->iuspin);
1272 set_bit(WDM_SUSPENDING, &desc->flags);
1273 spin_unlock_irq(&desc->iuspin);
1274 /* callback submits work - order is essential */
1276 cancel_work_sync(&desc->rxwork);
1277 cancel_work_sync(&desc->service_outs_intr);
1278 unpoison_urbs(desc);
1280 if (!PMSG_IS_AUTO(message)) {
1281 mutex_unlock(&desc->wlock);
1282 mutex_unlock(&desc->rlock);
1289 static int recover_from_urb_loss(struct wdm_device *desc)
1294 rv = usb_submit_urb(desc->validity, GFP_NOIO);
1296 dev_err(&desc->intf->dev,
1297 "Error resume submitting int urb - %d\n", rv);
1303 static int wdm_resume(struct usb_interface *intf)
1305 struct wdm_device *desc = wdm_find_device(intf);
1308 dev_dbg(&desc->intf->dev, "wdm%d_resume\n", intf->minor);
1310 clear_bit(WDM_SUSPENDING, &desc->flags);
1311 rv = recover_from_urb_loss(desc);
1317 static int wdm_pre_reset(struct usb_interface *intf)
1319 struct wdm_device *desc = wdm_find_device(intf);
1322 * we notify everybody using poll of
1323 * an exceptional situation
1324 * must be done before recovery lest a spontaneous
1325 * message from the device is lost
1327 spin_lock_irq(&desc->iuspin);
1328 set_bit(WDM_RESETTING, &desc->flags); /* inform read/write */
1329 set_bit(WDM_READ, &desc->flags); /* unblock read */
1330 clear_bit(WDM_IN_USE, &desc->flags); /* unblock write */
1331 desc->rerr = -EINTR;
1332 spin_unlock_irq(&desc->iuspin);
1333 wake_up_all(&desc->wait);
1334 mutex_lock(&desc->rlock);
1335 mutex_lock(&desc->wlock);
1337 cancel_work_sync(&desc->rxwork);
1338 cancel_work_sync(&desc->service_outs_intr);
1342 static int wdm_post_reset(struct usb_interface *intf)
1344 struct wdm_device *desc = wdm_find_device(intf);
1347 unpoison_urbs(desc);
1348 clear_bit(WDM_OVERFLOW, &desc->flags);
1349 clear_bit(WDM_RESETTING, &desc->flags);
1350 rv = recover_from_urb_loss(desc);
1351 mutex_unlock(&desc->wlock);
1352 mutex_unlock(&desc->rlock);
1356 static struct usb_driver wdm_driver = {
1359 .disconnect = wdm_disconnect,
1361 .suspend = wdm_suspend,
1362 .resume = wdm_resume,
1363 .reset_resume = wdm_resume,
1365 .pre_reset = wdm_pre_reset,
1366 .post_reset = wdm_post_reset,
1367 .id_table = wdm_ids,
1368 .supports_autosuspend = 1,
1369 .disable_hub_initiated_lpm = 1,
1372 module_usb_driver(wdm_driver);
1374 MODULE_AUTHOR(DRIVER_AUTHOR);
1375 MODULE_DESCRIPTION(DRIVER_DESC);
1376 MODULE_LICENSE("GPL");