[deliverable/linux.git] / drivers / bluetooth / bfusb.c

/*
 *
 *  AVM BlueFRITZ! USB driver
 *
 *  Copyright (C) 2003-2006  Marcel Holtmann <marcel@holtmann.org>
 *
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
 *  the Free Software Foundation; either version 2 of the License, or
 *  (at your option) any later version.
 *
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License
 *  along with this program; if not, write to the Free Software
 *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 *
 */

#include <linux/module.h>

#include <linux/kernel.h>
#include <linux/init.h>
#include <linux/slab.h>
#include <linux/types.h>
#include <linux/errno.h>
#include <linux/skbuff.h>

#include <linux/device.h>
#include <linux/firmware.h>

#include <linux/usb.h>

#include <net/bluetooth/bluetooth.h>
#include <net/bluetooth/hci_core.h>

#define VERSION "1.2"

static struct usb_driver bfusb_driver;

static const struct usb_device_id bfusb_table[] = {
	/* AVM BlueFRITZ! USB */
	{ USB_DEVICE(0x057c, 0x2200) },

	{ }	/* Terminating entry */
};

MODULE_DEVICE_TABLE(usb, bfusb_table);

#define BFUSB_MAX_BLOCK_SIZE	256

#define BFUSB_BLOCK_TIMEOUT	3000

#define BFUSB_TX_PROCESS	1
#define BFUSB_TX_WAKEUP		2

#define BFUSB_MAX_BULK_TX	2
#define BFUSB_MAX_BULK_RX	2

struct bfusb_data {
	struct hci_dev		*hdev;

	unsigned long		state;

	struct usb_device	*udev;

	unsigned int		bulk_in_ep;
	unsigned int		bulk_out_ep;
	unsigned int		bulk_pkt_size;

	rwlock_t		lock;

	struct sk_buff_head	transmit_q;

	struct sk_buff		*reassembly;

	atomic_t		pending_tx;
	struct sk_buff_head	pending_q;
	struct sk_buff_head	completed_q;
};

struct bfusb_data_scb {
	struct urb *urb;
};

static void bfusb_tx_complete(struct urb *urb);
static void bfusb_rx_complete(struct urb *urb);

static struct urb *bfusb_get_completed(struct bfusb_data *data)
{
	struct sk_buff *skb;
	struct urb *urb = NULL;

	BT_DBG("bfusb %p", data);

	skb = skb_dequeue(&data->completed_q);
	if (skb) {
		urb = ((struct bfusb_data_scb *) skb->cb)->urb;
		kfree_skb(skb);
	}

	return urb;
}

static void bfusb_unlink_urbs(struct bfusb_data *data)
{
	struct sk_buff *skb;
	struct urb *urb;

	BT_DBG("bfusb %p", data);

	while ((skb = skb_dequeue(&data->pending_q))) {
		urb = ((struct bfusb_data_scb *) skb->cb)->urb;
		usb_kill_urb(urb);
		skb_queue_tail(&data->completed_q, skb);
	}

	while ((urb = bfusb_get_completed(data)))
		usb_free_urb(urb);
}

static int bfusb_send_bulk(struct bfusb_data *data, struct sk_buff *skb)
{
	struct bfusb_data_scb *scb = (void *) skb->cb;
	struct urb *urb = bfusb_get_completed(data);
	int err, pipe;

	BT_DBG("bfusb %p skb %p len %d", data, skb, skb->len);

	if (!urb) {
		urb = usb_alloc_urb(0, GFP_ATOMIC);
		if (!urb)
			return -ENOMEM;
	}

	pipe = usb_sndbulkpipe(data->udev, data->bulk_out_ep);

	usb_fill_bulk_urb(urb, data->udev, pipe, skb->data, skb->len,
			bfusb_tx_complete, skb);

	scb->urb = urb;

	skb_queue_tail(&data->pending_q, skb);

	err = usb_submit_urb(urb, GFP_ATOMIC);
	if (err) {
		BT_ERR("%s bulk tx submit failed urb %p err %d", 
					data->hdev->name, urb, err);
		skb_unlink(skb, &data->pending_q);
		usb_free_urb(urb);
	} else
		atomic_inc(&data->pending_tx);

	return err;
}

static void bfusb_tx_wakeup(struct bfusb_data *data)
{
	struct sk_buff *skb;

	BT_DBG("bfusb %p", data);

	if (test_and_set_bit(BFUSB_TX_PROCESS, &data->state)) {
		set_bit(BFUSB_TX_WAKEUP, &data->state);
		return;
	}

	do {
		clear_bit(BFUSB_TX_WAKEUP, &data->state);

		while ((atomic_read(&data->pending_tx) < BFUSB_MAX_BULK_TX) &&
				(skb = skb_dequeue(&data->transmit_q))) {
			if (bfusb_send_bulk(data, skb) < 0) {
				skb_queue_head(&data->transmit_q, skb);
				break;
			}
		}

	} while (test_bit(BFUSB_TX_WAKEUP, &data->state));

	clear_bit(BFUSB_TX_PROCESS, &data->state);
}

static void bfusb_tx_complete(struct urb *urb)
{
	struct sk_buff *skb = (struct sk_buff *) urb->context;
	struct bfusb_data *data = (struct bfusb_data *) skb->dev;

	BT_DBG("bfusb %p urb %p skb %p len %d", data, urb, skb, skb->len);

	atomic_dec(&data->pending_tx);

	if (!test_bit(HCI_RUNNING, &data->hdev->flags))
		return;

	if (!urb->status)
		data->hdev->stat.byte_tx += skb->len;
	else
		data->hdev->stat.err_tx++;

	read_lock(&data->lock);

	skb_unlink(skb, &data->pending_q);
	skb_queue_tail(&data->completed_q, skb);

	bfusb_tx_wakeup(data);

	read_unlock(&data->lock);
}


static int bfusb_rx_submit(struct bfusb_data *data, struct urb *urb)
{
	struct bfusb_data_scb *scb;
	struct sk_buff *skb;
	int err, pipe, size = HCI_MAX_FRAME_SIZE + 32;

	BT_DBG("bfusb %p urb %p", data, urb);

	if (!urb) {
		urb = usb_alloc_urb(0, GFP_ATOMIC);
		if (!urb)
			return -ENOMEM;
	}

	skb = bt_skb_alloc(size, GFP_ATOMIC);
	if (!skb) {
		usb_free_urb(urb);
		return -ENOMEM;
	}

	skb->dev = (void *) data;

	scb = (struct bfusb_data_scb *) skb->cb;
	scb->urb = urb;

	pipe = usb_rcvbulkpipe(data->udev, data->bulk_in_ep);

	usb_fill_bulk_urb(urb, data->udev, pipe, skb->data, size,
			bfusb_rx_complete, skb);

	skb_queue_tail(&data->pending_q, skb);

	err = usb_submit_urb(urb, GFP_ATOMIC);
	if (err) {
		BT_ERR("%s bulk rx submit failed urb %p err %d",
					data->hdev->name, urb, err);
		skb_unlink(skb, &data->pending_q);
		kfree_skb(skb);
		usb_free_urb(urb);
	}

	return err;
}

static inline int bfusb_recv_block(struct bfusb_data *data, int hdr, unsigned char *buf, int len)
{
	BT_DBG("bfusb %p hdr 0x%02x data %p len %d", data, hdr, buf, len);

	if (hdr & 0x10) {
		BT_ERR("%s error in block", data->hdev->name);
		kfree_skb(data->reassembly);
		data->reassembly = NULL;
		return -EIO;
	}

	if (hdr & 0x04) {
		struct sk_buff *skb;
		unsigned char pkt_type;
		int pkt_len = 0;

		if (data->reassembly) {
			BT_ERR("%s unexpected start block", data->hdev->name);
			kfree_skb(data->reassembly);
			data->reassembly = NULL;
		}

		if (len < 1) {
			BT_ERR("%s no packet type found", data->hdev->name);
			return -EPROTO;
		}

		pkt_type = *buf++; len--;

		switch (pkt_type) {
		case HCI_EVENT_PKT:
			if (len >= HCI_EVENT_HDR_SIZE) {
				struct hci_event_hdr *hdr = (struct hci_event_hdr *) buf;
				pkt_len = HCI_EVENT_HDR_SIZE + hdr->plen;
			} else {
				BT_ERR("%s event block is too short", data->hdev->name);
				return -EILSEQ;
			}
			break;

		case HCI_ACLDATA_PKT:
			if (len >= HCI_ACL_HDR_SIZE) {
				struct hci_acl_hdr *hdr = (struct hci_acl_hdr *) buf;
				pkt_len = HCI_ACL_HDR_SIZE + __le16_to_cpu(hdr->dlen);
			} else {
				BT_ERR("%s data block is too short", data->hdev->name);
				return -EILSEQ;
			}
			break;

		case HCI_SCODATA_PKT:
			if (len >= HCI_SCO_HDR_SIZE) {
				struct hci_sco_hdr *hdr = (struct hci_sco_hdr *) buf;
				pkt_len = HCI_SCO_HDR_SIZE + hdr->dlen;
			} else {
				BT_ERR("%s audio block is too short", data->hdev->name);
				return -EILSEQ;
			}
			break;
		}

		skb = bt_skb_alloc(pkt_len, GFP_ATOMIC);
		if (!skb) {
			BT_ERR("%s no memory for the packet", data->hdev->name);
			return -ENOMEM;
		}

		bt_cb(skb)->pkt_type = pkt_type;

		data->reassembly = skb;
	} else {
		if (!data->reassembly) {
			BT_ERR("%s unexpected continuation block", data->hdev->name);
			return -EIO;
		}
	}

	if (len > 0)
		memcpy(skb_put(data->reassembly, len), buf, len);

	if (hdr & 0x08) {
		hci_recv_frame(data->hdev, data->reassembly);
		data->reassembly = NULL;
	}

	return 0;
}

static void bfusb_rx_complete(struct urb *urb)
{
	struct sk_buff *skb = (struct sk_buff *) urb->context;
	struct bfusb_data *data = (struct bfusb_data *) skb->dev;
	unsigned char *buf = urb->transfer_buffer;
	int count = urb->actual_length;
	int err, hdr, len;

	BT_DBG("bfusb %p urb %p skb %p len %d", data, urb, skb, skb->len);

	read_lock(&data->lock);

	if (!test_bit(HCI_RUNNING, &data->hdev->flags))
		goto unlock;

	if (urb->status || !count)
		goto resubmit;

	data->hdev->stat.byte_rx += count;

	skb_put(skb, count);

	while (count) {
		hdr = buf[0] | (buf[1] << 8);

		if (hdr & 0x4000) {
			len = 0;
			count -= 2;
			buf   += 2;
		} else {
			len = (buf[2] == 0) ? 256 : buf[2];
			count -= 3;
			buf   += 3;
		}

		if (count < len) {
			BT_ERR("%s block extends over URB buffer ranges",
					data->hdev->name);
		}

		if ((hdr & 0xe1) == 0xc1)
			bfusb_recv_block(data, hdr, buf, len);

		count -= len;
		buf   += len;
	}

	skb_unlink(skb, &data->pending_q);
	kfree_skb(skb);

	bfusb_rx_submit(data, urb);

	read_unlock(&data->lock);

	return;

resubmit:
	urb->dev = data->udev;

	err = usb_submit_urb(urb, GFP_ATOMIC);
	if (err) {
		BT_ERR("%s bulk resubmit failed urb %p err %d",
					data->hdev->name, urb, err);
	}

unlock:
	read_unlock(&data->lock);
}

static int bfusb_open(struct hci_dev *hdev)
{
	struct bfusb_data *data = hci_get_drvdata(hdev);
	unsigned long flags;
	int i, err;

	BT_DBG("hdev %p bfusb %p", hdev, data);

	write_lock_irqsave(&data->lock, flags);

	err = bfusb_rx_submit(data, NULL);
	if (!err) {
		for (i = 1; i < BFUSB_MAX_BULK_RX; i++)
			bfusb_rx_submit(data, NULL);
	}

	write_unlock_irqrestore(&data->lock, flags);

	return err;
}

static int bfusb_flush(struct hci_dev *hdev)
{
	struct bfusb_data *data = hci_get_drvdata(hdev);

	BT_DBG("hdev %p bfusb %p", hdev, data);

	skb_queue_purge(&data->transmit_q);

	return 0;
}

static int bfusb_close(struct hci_dev *hdev)
{
	struct bfusb_data *data = hci_get_drvdata(hdev);
	unsigned long flags;

	BT_DBG("hdev %p bfusb %p", hdev, data);

	write_lock_irqsave(&data->lock, flags);
	write_unlock_irqrestore(&data->lock, flags);

	bfusb_unlink_urbs(data);
	bfusb_flush(hdev);

	return 0;
}

static int bfusb_send_frame(struct hci_dev *hdev, struct sk_buff *skb)
{
	struct bfusb_data *data = hci_get_drvdata(hdev);
	struct sk_buff *nskb;
	unsigned char buf[3];
	int sent = 0, size, count;

	BT_DBG("hdev %p skb %p type %d len %d", hdev, skb, bt_cb(skb)->pkt_type, skb->len);

	switch (bt_cb(skb)->pkt_type) {
	case HCI_COMMAND_PKT:
		hdev->stat.cmd_tx++;
		break;
	case HCI_ACLDATA_PKT:
		hdev->stat.acl_tx++;
		break;
	case HCI_SCODATA_PKT:
		hdev->stat.sco_tx++;
		break;
	}

	/* Prepend skb with frame type */
	memcpy(skb_push(skb, 1), &bt_cb(skb)->pkt_type, 1);

	count = skb->len;

	/* Max HCI frame size seems to be 1511 + 1 */
	nskb = bt_skb_alloc(count + 32, GFP_ATOMIC);
	if (!nskb) {
		BT_ERR("Can't allocate memory for new packet");
		return -ENOMEM;
	}

	nskb->dev = (void *) data;

	while (count) {
		size = min_t(uint, count, BFUSB_MAX_BLOCK_SIZE);

		buf[0] = 0xc1 | ((sent == 0) ? 0x04 : 0) | ((count == size) ? 0x08 : 0);
		buf[1] = 0x00;
		buf[2] = (size == BFUSB_MAX_BLOCK_SIZE) ? 0 : size;

		memcpy(skb_put(nskb, 3), buf, 3);
		skb_copy_from_linear_data_offset(skb, sent, skb_put(nskb, size), size);

		sent  += size;
		count -= size;
	}

	/* Don't send frame with multiple size of bulk max packet */
	if ((nskb->len % data->bulk_pkt_size) == 0) {
		buf[0] = 0xdd;
		buf[1] = 0x00;
		memcpy(skb_put(nskb, 2), buf, 2);
	}

	read_lock(&data->lock);

	skb_queue_tail(&data->transmit_q, nskb);
	bfusb_tx_wakeup(data);

	read_unlock(&data->lock);

	kfree_skb(skb);

	return 0;
}

static int bfusb_load_firmware(struct bfusb_data *data,
			       const unsigned char *firmware, int count)
{
	unsigned char *buf;
	int err, pipe, len, size, sent = 0;

	BT_DBG("bfusb %p udev %p", data, data->udev);

	BT_INFO("BlueFRITZ! USB loading firmware");

	buf = kmalloc(BFUSB_MAX_BLOCK_SIZE + 3, GFP_KERNEL);
	if (!buf) {
		BT_ERR("Can't allocate memory chunk for firmware");
		return -ENOMEM;
	}

	pipe = usb_sndctrlpipe(data->udev, 0);

	if (usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
				0, 1, 0, NULL, 0, USB_CTRL_SET_TIMEOUT) < 0) {
		BT_ERR("Can't change to loading configuration");
		kfree(buf);
		return -EBUSY;
	}

	data->udev->toggle[0] = data->udev->toggle[1] = 0;

	pipe = usb_sndbulkpipe(data->udev, data->bulk_out_ep);

	while (count) {
		size = min_t(uint, count, BFUSB_MAX_BLOCK_SIZE + 3);

		memcpy(buf, firmware + sent, size);

		err = usb_bulk_msg(data->udev, pipe, buf, size,
					&len, BFUSB_BLOCK_TIMEOUT);

		if (err || (len != size)) {
			BT_ERR("Error in firmware loading");
			goto error;
		}

		sent  += size;
		count -= size;
	}

	err = usb_bulk_msg(data->udev, pipe, NULL, 0,
					&len, BFUSB_BLOCK_TIMEOUT);
	if (err < 0) {
		BT_ERR("Error in null packet request");
		goto error;
	}

	pipe = usb_sndctrlpipe(data->udev, 0);

	err = usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
				0, 2, 0, NULL, 0, USB_CTRL_SET_TIMEOUT);
	if (err < 0) {
		BT_ERR("Can't change to running configuration");
		goto error;
	}

	data->udev->toggle[0] = data->udev->toggle[1] = 0;

	BT_INFO("BlueFRITZ! USB device ready");

	kfree(buf);
	return 0;

error:
	kfree(buf);

	pipe = usb_sndctrlpipe(data->udev, 0);

	usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
				0, 0, 0, NULL, 0, USB_CTRL_SET_TIMEOUT);

	return err;
}

static int bfusb_probe(struct usb_interface *intf, const struct usb_device_id *id)
{
	const struct firmware *firmware;
	struct usb_device *udev = interface_to_usbdev(intf);
	struct usb_host_endpoint *bulk_out_ep;
	struct usb_host_endpoint *bulk_in_ep;
	struct hci_dev *hdev;
	struct bfusb_data *data;

	BT_DBG("intf %p id %p", intf, id);

	/* Check number of endpoints */
	if (intf->cur_altsetting->desc.bNumEndpoints < 2)
		return -EIO;

	bulk_out_ep = &intf->cur_altsetting->endpoint[0];
	bulk_in_ep  = &intf->cur_altsetting->endpoint[1];

	if (!bulk_out_ep || !bulk_in_ep) {
		BT_ERR("Bulk endpoints not found");
		goto done;
	}

	/* Initialize control structure and load firmware */
	data = devm_kzalloc(&intf->dev, sizeof(struct bfusb_data), GFP_KERNEL);
	if (!data) {
		BT_ERR("Can't allocate memory for control structure");
		goto done;
	}

	data->udev = udev;
	data->bulk_in_ep    = bulk_in_ep->desc.bEndpointAddress;
	data->bulk_out_ep   = bulk_out_ep->desc.bEndpointAddress;
	data->bulk_pkt_size = le16_to_cpu(bulk_out_ep->desc.wMaxPacketSize);

	rwlock_init(&data->lock);

	data->reassembly = NULL;

	skb_queue_head_init(&data->transmit_q);
	skb_queue_head_init(&data->pending_q);
	skb_queue_head_init(&data->completed_q);

	if (request_firmware(&firmware, "bfubase.frm", &udev->dev) < 0) {
		BT_ERR("Firmware request failed");
		goto done;
	}

	BT_DBG("firmware data %p size %zu", firmware->data, firmware->size);

	if (bfusb_load_firmware(data, firmware->data, firmware->size) < 0) {
		BT_ERR("Firmware loading failed");
		goto release;
	}

	release_firmware(firmware);

	/* Initialize and register HCI device */
	hdev = hci_alloc_dev();
	if (!hdev) {
		BT_ERR("Can't allocate HCI device");
		goto done;
	}

	data->hdev = hdev;

	hdev->bus = HCI_USB;
	hci_set_drvdata(hdev, data);
	SET_HCIDEV_DEV(hdev, &intf->dev);

	hdev->open  = bfusb_open;
	hdev->close = bfusb_close;
	hdev->flush = bfusb_flush;
	hdev->send  = bfusb_send_frame;

	set_bit(HCI_QUIRK_BROKEN_LOCAL_COMMANDS, &hdev->quirks);

	if (hci_register_dev(hdev) < 0) {
		BT_ERR("Can't register HCI device");
		hci_free_dev(hdev);
		goto done;
	}

	usb_set_intfdata(intf, data);

	return 0;

release:
	release_firmware(firmware);

done:
	return -EIO;
}

static void bfusb_disconnect(struct usb_interface *intf)
{
	struct bfusb_data *data = usb_get_intfdata(intf);
	struct hci_dev *hdev = data->hdev;

	BT_DBG("intf %p", intf);

	if (!hdev)
		return;

	usb_set_intfdata(intf, NULL);

	bfusb_close(hdev);

	hci_unregister_dev(hdev);
	hci_free_dev(hdev);
}

static struct usb_driver bfusb_driver = {
	.name		= "bfusb",
	.probe		= bfusb_probe,
	.disconnect	= bfusb_disconnect,
	.id_table	= bfusb_table,
	.disable_hub_initiated_lpm = 1,
};

module_usb_driver(bfusb_driver);

MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
MODULE_DESCRIPTION("BlueFRITZ! USB driver ver " VERSION);
MODULE_VERSION(VERSION);
MODULE_LICENSE("GPL");
MODULE_FIRMWARE("bfubase.frm");
Commit	Line	Data
1da177e4 LT	1	/*
	2	*
	3	* AVM BlueFRITZ! USB driver
	4	*
9c724357	5	* Copyright (C) 2003-2006 Marcel Holtmann <marcel@holtmann.org>
1da177e4 LT	6	*
	7	*
	8	* This program is free software; you can redistribute it and/or modify
	9	* it under the terms of the GNU General Public License as published by
	10	* the Free Software Foundation; either version 2 of the License, or
	11	* (at your option) any later version.
	12	*
	13	* This program is distributed in the hope that it will be useful,
	14	* but WITHOUT ANY WARRANTY; without even the implied warranty of
	15	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	16	* GNU General Public License for more details.
	17	*
	18	* You should have received a copy of the GNU General Public License
	19	* along with this program; if not, write to the Free Software
	20	* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
	21	*
	22	*/
	23
1da177e4 LT	24	#include <linux/module.h>
	25
	26	#include <linux/kernel.h>
	27	#include <linux/init.h>
	28	#include <linux/slab.h>
	29	#include <linux/types.h>
1da177e4 LT	30	#include <linux/errno.h>
	31	#include <linux/skbuff.h>
	32
	33	#include <linux/device.h>
	34	#include <linux/firmware.h>
	35
	36	#include <linux/usb.h>
	37
	38	#include <net/bluetooth/bluetooth.h>
	39	#include <net/bluetooth/hci_core.h>
	40
943d56b0	41	#define VERSION "1.2"
1da177e4 LT	42
	43	static struct usb_driver bfusb_driver;
	44
9712d59a	45	static const struct usb_device_id bfusb_table[] = {
1da177e4 LT	46	/* AVM BlueFRITZ! USB */
	47	{ USB_DEVICE(0x057c, 0x2200) },
	48
	49	{ } /* Terminating entry */
	50	};
	51
	52	MODULE_DEVICE_TABLE(usb, bfusb_table);
	53
1da177e4 LT	54	#define BFUSB_MAX_BLOCK_SIZE 256
	55
	56	#define BFUSB_BLOCK_TIMEOUT 3000
	57
	58	#define BFUSB_TX_PROCESS 1
	59	#define BFUSB_TX_WAKEUP 2
	60
	61	#define BFUSB_MAX_BULK_TX 2
	62	#define BFUSB_MAX_BULK_RX 2
	63
9c724357	64	struct bfusb_data {
1da177e4 LT	65	struct hci_dev *hdev;
	66
	67	unsigned long state;
	68
	69	struct usb_device *udev;
	70
	71	unsigned int bulk_in_ep;
	72	unsigned int bulk_out_ep;
	73	unsigned int bulk_pkt_size;
	74
	75	rwlock_t lock;
	76
	77	struct sk_buff_head transmit_q;
	78
	79	struct sk_buff *reassembly;
	80
	81	atomic_t pending_tx;
	82	struct sk_buff_head pending_q;
	83	struct sk_buff_head completed_q;
	84	};
	85
9c724357	86	struct bfusb_data_scb {
1da177e4 LT	87	struct urb *urb;
	88	};
	89
7d12e780 DH	90	static void bfusb_tx_complete(struct urb *urb);
7d12e780 DH	91	static void bfusb_rx_complete(struct urb *urb);
1da177e4	92
9c724357	93	static struct urb bfusb_get_completed(struct bfusb_data data)
1da177e4 LT	94	{
	95	struct sk_buff *skb;
	96	struct urb *urb = NULL;
	97
9c724357	98	BT_DBG("bfusb %p", data);
1da177e4	99
9c724357	100	skb = skb_dequeue(&data->completed_q);
1da177e4	101	if (skb) {
9c724357	102	urb = ((struct bfusb_data_scb *) skb->cb)->urb;
1da177e4 LT	103	kfree_skb(skb);
	104	}
	105
	106	return urb;
	107	}
	108
9c724357	109	static void bfusb_unlink_urbs(struct bfusb_data *data)
1da177e4 LT	110	{
	111	struct sk_buff *skb;
	112	struct urb *urb;
	113
9c724357	114	BT_DBG("bfusb %p", data);
1da177e4	115
9c724357 MH	116	while ((skb = skb_dequeue(&data->pending_q))) {
9c724357 MH	117	urb = ((struct bfusb_data_scb *) skb->cb)->urb;
1da177e4	118	usb_kill_urb(urb);
9c724357	119	skb_queue_tail(&data->completed_q, skb);
1da177e4 LT	120	}
1da177e4 LT	121
9c724357	122	while ((urb = bfusb_get_completed(data)))
1da177e4 LT	123	usb_free_urb(urb);
	124	}
	125
9c724357	126	static int bfusb_send_bulk(struct bfusb_data data, struct sk_buff skb)
1da177e4	127	{
9c724357 MH	128	struct bfusb_data_scb scb = (void ) skb->cb;
9c724357 MH	129	struct urb *urb = bfusb_get_completed(data);
1da177e4 LT	130	int err, pipe;
1da177e4 LT	131
9c724357	132	BT_DBG("bfusb %p skb %p len %d", data, skb, skb->len);
1da177e4	133
a08b15e6 VI	134	if (!urb) {
	135	urb = usb_alloc_urb(0, GFP_ATOMIC);
	136	if (!urb)
	137	return -ENOMEM;
	138	}
1da177e4	139
9c724357	140	pipe = usb_sndbulkpipe(data->udev, data->bulk_out_ep);
1da177e4	141
9c724357	142	usb_fill_bulk_urb(urb, data->udev, pipe, skb->data, skb->len,
1da177e4 LT	143	bfusb_tx_complete, skb);
	144
	145	scb->urb = urb;
	146
9c724357	147	skb_queue_tail(&data->pending_q, skb);
1da177e4 LT	148
	149	err = usb_submit_urb(urb, GFP_ATOMIC);
	150	if (err) {
	151	BT_ERR("%s bulk tx submit failed urb %p err %d",
9c724357 MH	152	data->hdev->name, urb, err);
9c724357 MH	153	skb_unlink(skb, &data->pending_q);
1da177e4 LT	154	usb_free_urb(urb);
1da177e4 LT	155	} else
9c724357	156	atomic_inc(&data->pending_tx);
1da177e4 LT	157
	158	return err;
	159	}
	160
9c724357	161	static void bfusb_tx_wakeup(struct bfusb_data *data)
1da177e4 LT	162	{
	163	struct sk_buff *skb;
	164
9c724357	165	BT_DBG("bfusb %p", data);
1da177e4	166
9c724357 MH	167	if (test_and_set_bit(BFUSB_TX_PROCESS, &data->state)) {
9c724357 MH	168	set_bit(BFUSB_TX_WAKEUP, &data->state);
1da177e4 LT	169	return;
	170	}
	171
	172	do {
9c724357	173	clear_bit(BFUSB_TX_WAKEUP, &data->state);
1da177e4	174
9c724357 MH	175	while ((atomic_read(&data->pending_tx) < BFUSB_MAX_BULK_TX) &&
	176	(skb = skb_dequeue(&data->transmit_q))) {
	177	if (bfusb_send_bulk(data, skb) < 0) {
	178	skb_queue_head(&data->transmit_q, skb);
1da177e4 LT	179	break;
	180	}
	181	}
	182
9c724357	183	} while (test_bit(BFUSB_TX_WAKEUP, &data->state));
1da177e4	184
9c724357	185	clear_bit(BFUSB_TX_PROCESS, &data->state);
1da177e4 LT	186	}
1da177e4 LT	187
7d12e780	188	static void bfusb_tx_complete(struct urb *urb)
1da177e4 LT	189	{
1da177e4 LT	190	struct sk_buff skb = (struct sk_buff ) urb->context;
9c724357	191	struct bfusb_data data = (struct bfusb_data ) skb->dev;
1da177e4	192
9c724357	193	BT_DBG("bfusb %p urb %p skb %p len %d", data, urb, skb, skb->len);
1da177e4	194
9c724357	195	atomic_dec(&data->pending_tx);
1da177e4	196
9c724357	197	if (!test_bit(HCI_RUNNING, &data->hdev->flags))
1da177e4 LT	198	return;
	199
	200	if (!urb->status)
9c724357	201	data->hdev->stat.byte_tx += skb->len;
1da177e4	202	else
9c724357	203	data->hdev->stat.err_tx++;
1da177e4	204
9c724357	205	read_lock(&data->lock);
1da177e4	206
9c724357 MH	207	skb_unlink(skb, &data->pending_q);
9c724357 MH	208	skb_queue_tail(&data->completed_q, skb);
1da177e4	209
9c724357	210	bfusb_tx_wakeup(data);
1da177e4	211
9c724357	212	read_unlock(&data->lock);
1da177e4 LT	213	}
	214
	215
9c724357	216	static int bfusb_rx_submit(struct bfusb_data data, struct urb urb)
1da177e4	217	{
9c724357	218	struct bfusb_data_scb *scb;
1da177e4 LT	219	struct sk_buff *skb;
	220	int err, pipe, size = HCI_MAX_FRAME_SIZE + 32;
	221
a418b893	222	BT_DBG("bfusb %p urb %p", data, urb);
1da177e4	223
a08b15e6 VI	224	if (!urb) {
	225	urb = usb_alloc_urb(0, GFP_ATOMIC);
	226	if (!urb)
	227	return -ENOMEM;
	228	}
1da177e4	229
9c724357 MH	230	skb = bt_skb_alloc(size, GFP_ATOMIC);
9c724357 MH	231	if (!skb) {
1da177e4 LT	232	usb_free_urb(urb);
	233	return -ENOMEM;
	234	}
	235
9c724357	236	skb->dev = (void *) data;
1da177e4	237
9c724357	238	scb = (struct bfusb_data_scb *) skb->cb;
1da177e4 LT	239	scb->urb = urb;
1da177e4 LT	240
9c724357	241	pipe = usb_rcvbulkpipe(data->udev, data->bulk_in_ep);
1da177e4	242
9c724357	243	usb_fill_bulk_urb(urb, data->udev, pipe, skb->data, size,
1da177e4 LT	244	bfusb_rx_complete, skb);
1da177e4 LT	245
9c724357	246	skb_queue_tail(&data->pending_q, skb);
1da177e4 LT	247
	248	err = usb_submit_urb(urb, GFP_ATOMIC);
	249	if (err) {
	250	BT_ERR("%s bulk rx submit failed urb %p err %d",
9c724357 MH	251	data->hdev->name, urb, err);
9c724357 MH	252	skb_unlink(skb, &data->pending_q);
1da177e4 LT	253	kfree_skb(skb);
	254	usb_free_urb(urb);
	255	}
	256
	257	return err;
	258	}
	259
9c724357	260	static inline int bfusb_recv_block(struct bfusb_data data, int hdr, unsigned char buf, int len)
1da177e4	261	{
9c724357	262	BT_DBG("bfusb %p hdr 0x%02x data %p len %d", data, hdr, buf, len);
1da177e4 LT	263
1da177e4 LT	264	if (hdr & 0x10) {
9c724357	265	BT_ERR("%s error in block", data->hdev->name);
b1fb0683	266	kfree_skb(data->reassembly);
9c724357	267	data->reassembly = NULL;
1da177e4 LT	268	return -EIO;
	269	}
	270
	271	if (hdr & 0x04) {
	272	struct sk_buff *skb;
	273	unsigned char pkt_type;
	274	int pkt_len = 0;
	275
9c724357 MH	276	if (data->reassembly) {
	277	BT_ERR("%s unexpected start block", data->hdev->name);
	278	kfree_skb(data->reassembly);
	279	data->reassembly = NULL;
1da177e4 LT	280	}
	281
	282	if (len < 1) {
9c724357	283	BT_ERR("%s no packet type found", data->hdev->name);
1da177e4 LT	284	return -EPROTO;
	285	}
	286
9c724357	287	pkt_type = *buf++; len--;
1da177e4 LT	288
	289	switch (pkt_type) {
	290	case HCI_EVENT_PKT:
	291	if (len >= HCI_EVENT_HDR_SIZE) {
9c724357	292	struct hci_event_hdr hdr = (struct hci_event_hdr ) buf;
1da177e4 LT	293	pkt_len = HCI_EVENT_HDR_SIZE + hdr->plen;
1da177e4 LT	294	} else {
9c724357	295	BT_ERR("%s event block is too short", data->hdev->name);
1da177e4 LT	296	return -EILSEQ;
	297	}
	298	break;
	299
	300	case HCI_ACLDATA_PKT:
	301	if (len >= HCI_ACL_HDR_SIZE) {
9c724357	302	struct hci_acl_hdr hdr = (struct hci_acl_hdr ) buf;
1da177e4 LT	303	pkt_len = HCI_ACL_HDR_SIZE + __le16_to_cpu(hdr->dlen);
1da177e4 LT	304	} else {
9c724357	305	BT_ERR("%s data block is too short", data->hdev->name);
1da177e4 LT	306	return -EILSEQ;
	307	}
	308	break;
	309
	310	case HCI_SCODATA_PKT:
	311	if (len >= HCI_SCO_HDR_SIZE) {
9c724357	312	struct hci_sco_hdr hdr = (struct hci_sco_hdr ) buf;
1da177e4 LT	313	pkt_len = HCI_SCO_HDR_SIZE + hdr->dlen;
1da177e4 LT	314	} else {
9c724357	315	BT_ERR("%s audio block is too short", data->hdev->name);
1da177e4 LT	316	return -EILSEQ;
	317	}
	318	break;
	319	}
	320
	321	skb = bt_skb_alloc(pkt_len, GFP_ATOMIC);
	322	if (!skb) {
9c724357	323	BT_ERR("%s no memory for the packet", data->hdev->name);
1da177e4 LT	324	return -ENOMEM;
	325	}
	326
0d48d939	327	bt_cb(skb)->pkt_type = pkt_type;
1da177e4	328
9c724357	329	data->reassembly = skb;
1da177e4	330	} else {
9c724357 MH	331	if (!data->reassembly) {
9c724357 MH	332	BT_ERR("%s unexpected continuation block", data->hdev->name);
1da177e4 LT	333	return -EIO;
	334	}
	335	}
	336
	337	if (len > 0)
9c724357	338	memcpy(skb_put(data->reassembly, len), buf, len);
1da177e4 LT	339
1da177e4 LT	340	if (hdr & 0x08) {
e1a26170	341	hci_recv_frame(data->hdev, data->reassembly);
9c724357	342	data->reassembly = NULL;
1da177e4 LT	343	}
	344
	345	return 0;
	346	}
	347
7d12e780	348	static void bfusb_rx_complete(struct urb *urb)
1da177e4 LT	349	{
1da177e4 LT	350	struct sk_buff skb = (struct sk_buff ) urb->context;
9c724357	351	struct bfusb_data data = (struct bfusb_data ) skb->dev;
1da177e4 LT	352	unsigned char *buf = urb->transfer_buffer;
	353	int count = urb->actual_length;
	354	int err, hdr, len;
	355
a418b893	356	BT_DBG("bfusb %p urb %p skb %p len %d", data, urb, skb, skb->len);
1da177e4	357
9c724357	358	read_lock(&data->lock);
1da177e4	359
9c724357	360	if (!test_bit(HCI_RUNNING, &data->hdev->flags))
1da177e4 LT	361	goto unlock;
	362
	363	if (urb->status \|\| !count)
	364	goto resubmit;
	365
9c724357	366	data->hdev->stat.byte_rx += count;
1da177e4 LT	367
	368	skb_put(skb, count);
	369
	370	while (count) {
	371	hdr = buf[0] \| (buf[1] << 8);
	372
	373	if (hdr & 0x4000) {
	374	len = 0;
	375	count -= 2;
	376	buf += 2;
	377	} else {
	378	len = (buf[2] == 0) ? 256 : buf[2];
	379	count -= 3;
	380	buf += 3;
	381	}
	382
	383	if (count < len) {
	384	BT_ERR("%s block extends over URB buffer ranges",
9c724357	385	data->hdev->name);
1da177e4 LT	386	}
	387
	388	if ((hdr & 0xe1) == 0xc1)
9c724357	389	bfusb_recv_block(data, hdr, buf, len);
1da177e4 LT	390
	391	count -= len;
	392	buf += len;
	393	}
	394
9c724357	395	skb_unlink(skb, &data->pending_q);
1da177e4 LT	396	kfree_skb(skb);
1da177e4 LT	397
9c724357	398	bfusb_rx_submit(data, urb);
1da177e4	399
9c724357	400	read_unlock(&data->lock);
1da177e4 LT	401
	402	return;
	403
	404	resubmit:
9c724357	405	urb->dev = data->udev;
1da177e4 LT	406
	407	err = usb_submit_urb(urb, GFP_ATOMIC);
	408	if (err) {
	409	BT_ERR("%s bulk resubmit failed urb %p err %d",
9c724357	410	data->hdev->name, urb, err);
1da177e4 LT	411	}
	412
	413	unlock:
9c724357	414	read_unlock(&data->lock);
1da177e4 LT	415	}
1da177e4 LT	416
1da177e4 LT	417	static int bfusb_open(struct hci_dev *hdev)
1da177e4 LT	418	{
155961e8	419	struct bfusb_data *data = hci_get_drvdata(hdev);
1da177e4 LT	420	unsigned long flags;
	421	int i, err;
	422
9c724357	423	BT_DBG("hdev %p bfusb %p", hdev, data);
1da177e4	424
9c724357	425	write_lock_irqsave(&data->lock, flags);
1da177e4	426
9c724357	427	err = bfusb_rx_submit(data, NULL);
1da177e4 LT	428	if (!err) {
1da177e4 LT	429	for (i = 1; i < BFUSB_MAX_BULK_RX; i++)
9c724357	430	bfusb_rx_submit(data, NULL);
1da177e4 LT	431	}
1da177e4 LT	432
9c724357	433	write_unlock_irqrestore(&data->lock, flags);
1da177e4 LT	434
	435	return err;
	436	}
	437
	438	static int bfusb_flush(struct hci_dev *hdev)
	439	{
155961e8	440	struct bfusb_data *data = hci_get_drvdata(hdev);
1da177e4	441
9c724357	442	BT_DBG("hdev %p bfusb %p", hdev, data);
1da177e4	443
9c724357	444	skb_queue_purge(&data->transmit_q);
1da177e4 LT	445
	446	return 0;
	447	}
	448
	449	static int bfusb_close(struct hci_dev *hdev)
	450	{
155961e8	451	struct bfusb_data *data = hci_get_drvdata(hdev);
1da177e4 LT	452	unsigned long flags;
1da177e4 LT	453
9c724357	454	BT_DBG("hdev %p bfusb %p", hdev, data);
1da177e4	455
9c724357 MH	456	write_lock_irqsave(&data->lock, flags);
9c724357 MH	457	write_unlock_irqrestore(&data->lock, flags);
1da177e4	458
9c724357	459	bfusb_unlink_urbs(data);
1da177e4 LT	460	bfusb_flush(hdev);
	461
	462	return 0;
	463	}
	464
7bd8f09f	465	static int bfusb_send_frame(struct hci_dev hdev, struct sk_buff skb)
1da177e4	466	{
aae26277	467	struct bfusb_data *data = hci_get_drvdata(hdev);
1da177e4 LT	468	struct sk_buff *nskb;
	469	unsigned char buf[3];
	470	int sent = 0, size, count;
	471
0d48d939	472	BT_DBG("hdev %p skb %p type %d len %d", hdev, skb, bt_cb(skb)->pkt_type, skb->len);
1da177e4	473
0d48d939	474	switch (bt_cb(skb)->pkt_type) {
1da177e4 LT	475	case HCI_COMMAND_PKT:
	476	hdev->stat.cmd_tx++;
	477	break;
	478	case HCI_ACLDATA_PKT:
	479	hdev->stat.acl_tx++;
	480	break;
	481	case HCI_SCODATA_PKT:
	482	hdev->stat.sco_tx++;
	483	break;
a03e33da	484	}
1da177e4 LT	485
1da177e4 LT	486	/* Prepend skb with frame type */
0d48d939	487	memcpy(skb_push(skb, 1), &bt_cb(skb)->pkt_type, 1);
1da177e4 LT	488
	489	count = skb->len;
	490
	491	/* Max HCI frame size seems to be 1511 + 1 */
9c724357 MH	492	nskb = bt_skb_alloc(count + 32, GFP_ATOMIC);
9c724357 MH	493	if (!nskb) {
1da177e4 LT	494	BT_ERR("Can't allocate memory for new packet");
	495	return -ENOMEM;
	496	}
	497
9c724357	498	nskb->dev = (void *) data;
1da177e4 LT	499
	500	while (count) {
	501	size = min_t(uint, count, BFUSB_MAX_BLOCK_SIZE);
	502
	503	buf[0] = 0xc1 \| ((sent == 0) ? 0x04 : 0) \| ((count == size) ? 0x08 : 0);
	504	buf[1] = 0x00;
	505	buf[2] = (size == BFUSB_MAX_BLOCK_SIZE) ? 0 : size;
	506
	507	memcpy(skb_put(nskb, 3), buf, 3);
d626f62b	508	skb_copy_from_linear_data_offset(skb, sent, skb_put(nskb, size), size);
1da177e4 LT	509
	510	sent += size;
	511	count -= size;
	512	}
	513
	514	/* Don't send frame with multiple size of bulk max packet */
9c724357	515	if ((nskb->len % data->bulk_pkt_size) == 0) {
1da177e4 LT	516	buf[0] = 0xdd;
	517	buf[1] = 0x00;
	518	memcpy(skb_put(nskb, 2), buf, 2);
	519	}
	520
9c724357	521	read_lock(&data->lock);
1da177e4	522
9c724357 MH	523	skb_queue_tail(&data->transmit_q, nskb);
9c724357 MH	524	bfusb_tx_wakeup(data);
1da177e4	525
9c724357	526	read_unlock(&data->lock);
1da177e4 LT	527
	528	kfree_skb(skb);
	529
	530	return 0;
	531	}
	532
8187b4fb DW	533	static int bfusb_load_firmware(struct bfusb_data *data,
8187b4fb DW	534	const unsigned char *firmware, int count)
1da177e4 LT	535	{
	536	unsigned char *buf;
	537	int err, pipe, len, size, sent = 0;
	538
9c724357	539	BT_DBG("bfusb %p udev %p", data, data->udev);
1da177e4 LT	540
	541	BT_INFO("BlueFRITZ! USB loading firmware");
	542
7f103a0d DH	543	buf = kmalloc(BFUSB_MAX_BLOCK_SIZE + 3, GFP_KERNEL);
	544	if (!buf) {
	545	BT_ERR("Can't allocate memory chunk for firmware");
	546	return -ENOMEM;
	547	}
	548
9c724357	549	pipe = usb_sndctrlpipe(data->udev, 0);
1da177e4	550
9c724357	551	if (usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
1da177e4 LT	552	0, 1, 0, NULL, 0, USB_CTRL_SET_TIMEOUT) < 0) {
1da177e4 LT	553	BT_ERR("Can't change to loading configuration");
7f103a0d	554	kfree(buf);
1da177e4 LT	555	return -EBUSY;
	556	}
	557
9c724357	558	data->udev->toggle[0] = data->udev->toggle[1] = 0;
1da177e4	559
9c724357	560	pipe = usb_sndbulkpipe(data->udev, data->bulk_out_ep);
1da177e4 LT	561
	562	while (count) {
	563	size = min_t(uint, count, BFUSB_MAX_BLOCK_SIZE + 3);
	564
	565	memcpy(buf, firmware + sent, size);
	566
9c724357	567	err = usb_bulk_msg(data->udev, pipe, buf, size,
1da177e4 LT	568	&len, BFUSB_BLOCK_TIMEOUT);
	569
	570	if (err \|\| (len != size)) {
	571	BT_ERR("Error in firmware loading");
	572	goto error;
	573	}
	574
	575	sent += size;
	576	count -= size;
	577	}
	578
9c724357 MH	579	err = usb_bulk_msg(data->udev, pipe, NULL, 0,
	580	&len, BFUSB_BLOCK_TIMEOUT);
	581	if (err < 0) {
1da177e4 LT	582	BT_ERR("Error in null packet request");
	583	goto error;
	584	}
	585
9c724357	586	pipe = usb_sndctrlpipe(data->udev, 0);
1da177e4	587
9c724357 MH	588	err = usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
	589	0, 2, 0, NULL, 0, USB_CTRL_SET_TIMEOUT);
	590	if (err < 0) {
1da177e4 LT	591	BT_ERR("Can't change to running configuration");
	592	goto error;
	593	}
	594
9c724357	595	data->udev->toggle[0] = data->udev->toggle[1] = 0;
1da177e4 LT	596
	597	BT_INFO("BlueFRITZ! USB device ready");
	598
	599	kfree(buf);
	600	return 0;
	601
	602	error:
	603	kfree(buf);
	604
9c724357	605	pipe = usb_sndctrlpipe(data->udev, 0);
1da177e4	606
9c724357	607	usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
1da177e4 LT	608	0, 0, 0, NULL, 0, USB_CTRL_SET_TIMEOUT);
	609
	610	return err;
	611	}
	612
	613	static int bfusb_probe(struct usb_interface intf, const struct usb_device_id id)
	614	{
	615	const struct firmware *firmware;
	616	struct usb_device *udev = interface_to_usbdev(intf);
	617	struct usb_host_endpoint *bulk_out_ep;
	618	struct usb_host_endpoint *bulk_in_ep;
	619	struct hci_dev *hdev;
9c724357	620	struct bfusb_data *data;
1da177e4 LT	621
	622	BT_DBG("intf %p id %p", intf, id);
	623
1da177e4 LT	624	/* Check number of endpoints */
	625	if (intf->cur_altsetting->desc.bNumEndpoints < 2)
	626	return -EIO;
	627
	628	bulk_out_ep = &intf->cur_altsetting->endpoint[0];
	629	bulk_in_ep = &intf->cur_altsetting->endpoint[1];
	630
	631	if (!bulk_out_ep \|\| !bulk_in_ep) {
	632	BT_ERR("Bulk endpoints not found");
	633	goto done;
	634	}
	635
	636	/* Initialize control structure and load firmware */
0213cd8d	637	data = devm_kzalloc(&intf->dev, sizeof(struct bfusb_data), GFP_KERNEL);
9c724357	638	if (!data) {
1da177e4 LT	639	BT_ERR("Can't allocate memory for control structure");
	640	goto done;
	641	}
	642
9c724357 MH	643	data->udev = udev;
	644	data->bulk_in_ep = bulk_in_ep->desc.bEndpointAddress;
	645	data->bulk_out_ep = bulk_out_ep->desc.bEndpointAddress;
	646	data->bulk_pkt_size = le16_to_cpu(bulk_out_ep->desc.wMaxPacketSize);
1da177e4	647
9c724357	648	rwlock_init(&data->lock);
1da177e4	649
9c724357	650	data->reassembly = NULL;
1da177e4	651
9c724357 MH	652	skb_queue_head_init(&data->transmit_q);
	653	skb_queue_head_init(&data->pending_q);
	654	skb_queue_head_init(&data->completed_q);
1da177e4 LT	655
	656	if (request_firmware(&firmware, "bfubase.frm", &udev->dev) < 0) {
	657	BT_ERR("Firmware request failed");
0213cd8d	658	goto done;
1da177e4 LT	659	}
1da177e4 LT	660
a418b893	661	BT_DBG("firmware data %p size %zu", firmware->data, firmware->size);
1da177e4	662
9c724357	663	if (bfusb_load_firmware(data, firmware->data, firmware->size) < 0) {
1da177e4 LT	664	BT_ERR("Firmware loading failed");
	665	goto release;
	666	}
	667
	668	release_firmware(firmware);
	669
	670	/* Initialize and register HCI device */
	671	hdev = hci_alloc_dev();
	672	if (!hdev) {
	673	BT_ERR("Can't allocate HCI device");
0213cd8d	674	goto done;
1da177e4 LT	675	}
1da177e4 LT	676
9c724357	677	data->hdev = hdev;
1da177e4	678
c13854ce	679	hdev->bus = HCI_USB;
155961e8	680	hci_set_drvdata(hdev, data);
1da177e4 LT	681	SET_HCIDEV_DEV(hdev, &intf->dev);
1da177e4 LT	682
19cf55a2 MH	683	hdev->open = bfusb_open;
	684	hdev->close = bfusb_close;
	685	hdev->flush = bfusb_flush;
	686	hdev->send = bfusb_send_frame;
1da177e4	687
9ef80d40 MH	688	set_bit(HCI_QUIRK_BROKEN_LOCAL_COMMANDS, &hdev->quirks);
9ef80d40 MH	689
1da177e4 LT	690	if (hci_register_dev(hdev) < 0) {
	691	BT_ERR("Can't register HCI device");
	692	hci_free_dev(hdev);
0213cd8d	693	goto done;
1da177e4 LT	694	}
1da177e4 LT	695
9c724357	696	usb_set_intfdata(intf, data);
1da177e4 LT	697
	698	return 0;
	699
	700	release:
	701	release_firmware(firmware);
	702
1da177e4 LT	703	done:
	704	return -EIO;
	705	}
	706
	707	static void bfusb_disconnect(struct usb_interface *intf)
	708	{
9c724357 MH	709	struct bfusb_data *data = usb_get_intfdata(intf);
9c724357 MH	710	struct hci_dev *hdev = data->hdev;
1da177e4 LT	711
	712	BT_DBG("intf %p", intf);
	713
	714	if (!hdev)
	715	return;
	716
	717	usb_set_intfdata(intf, NULL);
	718
	719	bfusb_close(hdev);
	720
13ea4015	721	hci_unregister_dev(hdev);
1da177e4 LT	722	hci_free_dev(hdev);
	723	}
	724
	725	static struct usb_driver bfusb_driver = {
1da177e4 LT	726	.name = "bfusb",
	727	.probe = bfusb_probe,
	728	.disconnect = bfusb_disconnect,
	729	.id_table = bfusb_table,
e1f12eb6	730	.disable_hub_initiated_lpm = 1,
1da177e4 LT	731	};
1da177e4 LT	732
93f1508c	733	module_usb_driver(bfusb_driver);
1da177e4	734
1da177e4 LT	735	MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
	736	MODULE_DESCRIPTION("BlueFRITZ! USB driver ver " VERSION);
	737	MODULE_VERSION(VERSION);
	738	MODULE_LICENSE("GPL");
2312119a	739	MODULE_FIRMWARE("bfubase.frm");