4 * This driver supports USB CDC WCM Device Management.
6 * Copyright (c) 2007-2009 Oliver Neukum
8 * Some code taken from cdc-acm.c
10 * Released under the GPLv2.
12 * Many thanks to Carl Nordbeck
14 #include <linux/kernel.h>
15 #include <linux/errno.h>
16 #include <linux/slab.h>
17 #include <linux/module.h>
18 #include <linux/mutex.h>
19 #include <linux/uaccess.h>
20 #include <linux/bitops.h>
21 #include <linux/poll.h>
22 #include <linux/usb.h>
23 #include <linux/usb/cdc.h>
24 #include <asm/byteorder.h>
25 #include <asm/unaligned.h>
30 #define DRIVER_VERSION "v0.03"
31 #define DRIVER_AUTHOR "Oliver Neukum"
32 #define DRIVER_DESC "USB Abstract Control Model driver for USB WCM Device Management"
34 #define HUAWEI_VENDOR_ID 0x12D1
36 static const struct usb_device_id wdm_ids[] = {
38 .match_flags = USB_DEVICE_ID_MATCH_INT_CLASS |
39 USB_DEVICE_ID_MATCH_INT_SUBCLASS,
40 .bInterfaceClass = USB_CLASS_COMM,
41 .bInterfaceSubClass = USB_CDC_SUBCLASS_DMM
45 * Huawei E392, E398 and possibly other Qualcomm based modems
46 * embed the Qualcomm QMI protocol inside CDC on CDC ECM like
47 * control interfaces. Userspace access to this is required
48 * to configure the accompanying data interface
50 .match_flags = USB_DEVICE_ID_MATCH_VENDOR |
51 USB_DEVICE_ID_MATCH_INT_INFO,
52 .idVendor = HUAWEI_VENDOR_ID,
53 .bInterfaceClass = USB_CLASS_VENDOR_SPEC,
54 .bInterfaceSubClass = 1,
55 .bInterfaceProtocol = 9, /* NOTE: CDC ECM control interface! */
60 MODULE_DEVICE_TABLE (usb, wdm_ids);
62 #define WDM_MINOR_BASE 176
66 #define WDM_DISCONNECTING 2
69 #define WDM_INT_STALL 5
70 #define WDM_POLL_RUNNING 6
71 #define WDM_RESPONDING 7
72 #define WDM_SUSPENDING 8
73 #define WDM_RESETTING 9
77 /* CDC-WMC r1.1 requires wMaxCommand to be "at least 256 decimal (0x100)" */
78 #define WDM_DEFAULT_BUFSIZE 256
80 static DEFINE_MUTEX(wdm_mutex);
82 /* --- method tables --- */
85 u8 *inbuf; /* buffer for response */
86 u8 *outbuf; /* buffer for command */
87 u8 *sbuf; /* buffer for status */
88 u8 *ubuf; /* buffer for copy to user space */
93 struct usb_interface *intf;
94 struct usb_ctrlrequest *orq;
95 struct usb_ctrlrequest *irq;
111 wait_queue_head_t wait;
112 struct work_struct rxwork;
117 static struct usb_driver wdm_driver;
119 /* --- callbacks --- */
120 static void wdm_out_callback(struct urb *urb)
122 struct wdm_device *desc;
124 spin_lock(&desc->iuspin);
125 desc->werr = urb->status;
126 spin_unlock(&desc->iuspin);
127 clear_bit(WDM_IN_USE, &desc->flags);
129 wake_up(&desc->wait);
132 static void wdm_in_callback(struct urb *urb)
134 struct wdm_device *desc = urb->context;
135 int status = urb->status;
137 spin_lock(&desc->iuspin);
138 clear_bit(WDM_RESPONDING, &desc->flags);
143 dev_dbg(&desc->intf->dev,
144 "nonzero urb status received: -ENOENT");
147 dev_dbg(&desc->intf->dev,
148 "nonzero urb status received: -ECONNRESET");
151 dev_dbg(&desc->intf->dev,
152 "nonzero urb status received: -ESHUTDOWN");
155 dev_err(&desc->intf->dev,
156 "nonzero urb status received: -EPIPE\n");
159 dev_err(&desc->intf->dev,
160 "Unexpected error %d\n", status);
166 desc->reslength = urb->actual_length;
167 memmove(desc->ubuf + desc->length, desc->inbuf, desc->reslength);
168 desc->length += desc->reslength;
170 wake_up(&desc->wait);
172 set_bit(WDM_READ, &desc->flags);
173 spin_unlock(&desc->iuspin);
176 static void wdm_int_callback(struct urb *urb)
179 int status = urb->status;
180 struct wdm_device *desc;
181 struct usb_cdc_notification *dr;
184 dr = (struct usb_cdc_notification *)desc->sbuf;
193 set_bit(WDM_INT_STALL, &desc->flags);
194 dev_err(&desc->intf->dev, "Stall on int endpoint\n");
195 goto sw; /* halt is cleared in work */
197 dev_err(&desc->intf->dev,
198 "nonzero urb status received: %d\n", status);
203 if (urb->actual_length < sizeof(struct usb_cdc_notification)) {
204 dev_err(&desc->intf->dev, "wdm_int_callback - %d bytes\n",
209 switch (dr->bNotificationType) {
210 case USB_CDC_NOTIFY_RESPONSE_AVAILABLE:
211 dev_dbg(&desc->intf->dev,
212 "NOTIFY_RESPONSE_AVAILABLE received: index %d len %d",
213 dr->wIndex, dr->wLength);
216 case USB_CDC_NOTIFY_NETWORK_CONNECTION:
218 dev_dbg(&desc->intf->dev,
219 "NOTIFY_NETWORK_CONNECTION %s network",
220 dr->wValue ? "connected to" : "disconnected from");
223 clear_bit(WDM_POLL_RUNNING, &desc->flags);
224 dev_err(&desc->intf->dev,
225 "unknown notification %d received: index %d len %d\n",
226 dr->bNotificationType, dr->wIndex, dr->wLength);
230 spin_lock(&desc->iuspin);
231 clear_bit(WDM_READ, &desc->flags);
232 set_bit(WDM_RESPONDING, &desc->flags);
233 if (!test_bit(WDM_DISCONNECTING, &desc->flags)
234 && !test_bit(WDM_SUSPENDING, &desc->flags)) {
235 rv = usb_submit_urb(desc->response, GFP_ATOMIC);
236 dev_dbg(&desc->intf->dev, "%s: usb_submit_urb %d",
239 spin_unlock(&desc->iuspin);
241 clear_bit(WDM_RESPONDING, &desc->flags);
246 rv = schedule_work(&desc->rxwork);
248 dev_err(&desc->intf->dev,
249 "Cannot schedule work\n");
253 rv = usb_submit_urb(urb, GFP_ATOMIC);
255 dev_err(&desc->intf->dev,
256 "%s - usb_submit_urb failed with result %d\n",
261 static void kill_urbs(struct wdm_device *desc)
263 /* the order here is essential */
264 usb_kill_urb(desc->command);
265 usb_kill_urb(desc->validity);
266 usb_kill_urb(desc->response);
269 static void free_urbs(struct wdm_device *desc)
271 usb_free_urb(desc->validity);
272 usb_free_urb(desc->response);
273 usb_free_urb(desc->command);
276 static void cleanup(struct wdm_device *desc)
287 static ssize_t wdm_write
288 (struct file *file, const char __user *buffer, size_t count, loff_t *ppos)
291 int rv = -EMSGSIZE, r, we;
292 struct wdm_device *desc = file->private_data;
293 struct usb_ctrlrequest *req;
295 if (count > desc->wMaxCommand)
296 count = desc->wMaxCommand;
298 spin_lock_irq(&desc->iuspin);
301 spin_unlock_irq(&desc->iuspin);
305 desc->outbuf = buf = kmalloc(count, GFP_KERNEL);
311 r = copy_from_user(buf, buffer, count);
318 /* concurrent writes and disconnect */
319 r = mutex_lock_interruptible(&desc->wlock);
326 if (test_bit(WDM_DISCONNECTING, &desc->flags)) {
332 r = usb_autopm_get_interface(desc->intf);
338 if (!(file->f_flags & O_NONBLOCK))
339 r = wait_event_interruptible(desc->wait, !test_bit(WDM_IN_USE,
342 if (test_bit(WDM_IN_USE, &desc->flags))
345 if (test_bit(WDM_RESETTING, &desc->flags))
354 usb_fill_control_urb(
356 interface_to_usbdev(desc->intf),
357 /* using common endpoint 0 */
358 usb_sndctrlpipe(interface_to_usbdev(desc->intf), 0),
359 (unsigned char *)req,
366 req->bRequestType = (USB_DIR_OUT | USB_TYPE_CLASS |
367 USB_RECIP_INTERFACE);
368 req->bRequest = USB_CDC_SEND_ENCAPSULATED_COMMAND;
370 req->wIndex = desc->inum;
371 req->wLength = cpu_to_le16(count);
372 set_bit(WDM_IN_USE, &desc->flags);
374 rv = usb_submit_urb(desc->command, GFP_KERNEL);
377 clear_bit(WDM_IN_USE, &desc->flags);
378 dev_err(&desc->intf->dev, "Tx URB error: %d\n", rv);
380 dev_dbg(&desc->intf->dev, "Tx URB has been submitted index=%d",
384 usb_autopm_put_interface(desc->intf);
386 mutex_unlock(&desc->wlock);
388 return rv < 0 ? rv : count;
391 static ssize_t wdm_read
392 (struct file *file, char __user *buffer, size_t count, loff_t *ppos)
396 struct wdm_device *desc = file->private_data;
399 rv = mutex_lock_interruptible(&desc->rlock); /*concurrent reads */
403 cntr = ACCESS_ONCE(desc->length);
407 if (test_bit(WDM_DISCONNECTING, &desc->flags)) {
412 if (file->f_flags & O_NONBLOCK) {
413 if (!test_bit(WDM_READ, &desc->flags)) {
414 rv = cntr ? cntr : -EAGAIN;
419 rv = wait_event_interruptible(desc->wait,
420 test_bit(WDM_READ, &desc->flags));
423 /* may have happened while we slept */
424 if (test_bit(WDM_DISCONNECTING, &desc->flags)) {
428 if (test_bit(WDM_RESETTING, &desc->flags)) {
432 usb_mark_last_busy(interface_to_usbdev(desc->intf));
438 spin_lock_irq(&desc->iuspin);
440 if (desc->rerr) { /* read completed, error happened */
442 spin_unlock_irq(&desc->iuspin);
447 * recheck whether we've lost the race
448 * against the completion handler
450 if (!test_bit(WDM_READ, &desc->flags)) { /* lost race */
451 spin_unlock_irq(&desc->iuspin);
454 if (!desc->reslength) { /* zero length read */
455 spin_unlock_irq(&desc->iuspin);
458 clear_bit(WDM_READ, &desc->flags);
460 spin_unlock_irq(&desc->iuspin);
465 rv = copy_to_user(buffer, desc->ubuf, cntr);
471 spin_lock_irq(&desc->iuspin);
473 for (i = 0; i < desc->length - cntr; i++)
474 desc->ubuf[i] = desc->ubuf[i + cntr];
476 desc->length -= cntr;
477 /* in case we had outstanding data */
479 clear_bit(WDM_READ, &desc->flags);
481 spin_unlock_irq(&desc->iuspin);
486 mutex_unlock(&desc->rlock);
490 static int wdm_flush(struct file *file, fl_owner_t id)
492 struct wdm_device *desc = file->private_data;
494 wait_event(desc->wait, !test_bit(WDM_IN_USE, &desc->flags));
496 dev_err(&desc->intf->dev, "Error in flush path: %d\n",
502 static unsigned int wdm_poll(struct file *file, struct poll_table_struct *wait)
504 struct wdm_device *desc = file->private_data;
506 unsigned int mask = 0;
508 spin_lock_irqsave(&desc->iuspin, flags);
509 if (test_bit(WDM_DISCONNECTING, &desc->flags)) {
511 spin_unlock_irqrestore(&desc->iuspin, flags);
514 if (test_bit(WDM_READ, &desc->flags))
515 mask = POLLIN | POLLRDNORM;
516 if (desc->rerr || desc->werr)
518 if (!test_bit(WDM_IN_USE, &desc->flags))
519 mask |= POLLOUT | POLLWRNORM;
520 spin_unlock_irqrestore(&desc->iuspin, flags);
522 poll_wait(file, &desc->wait, wait);
528 static int wdm_open(struct inode *inode, struct file *file)
530 int minor = iminor(inode);
532 struct usb_interface *intf;
533 struct wdm_device *desc;
535 mutex_lock(&wdm_mutex);
536 intf = usb_find_interface(&wdm_driver, minor);
540 desc = usb_get_intfdata(intf);
541 if (test_bit(WDM_DISCONNECTING, &desc->flags))
543 file->private_data = desc;
545 rv = usb_autopm_get_interface(desc->intf);
547 dev_err(&desc->intf->dev, "Error autopm - %d\n", rv);
550 intf->needs_remote_wakeup = 1;
552 /* using write lock to protect desc->count */
553 mutex_lock(&desc->wlock);
554 if (!desc->count++) {
557 rv = usb_submit_urb(desc->validity, GFP_KERNEL);
560 dev_err(&desc->intf->dev,
561 "Error submitting int urb - %d\n", rv);
566 mutex_unlock(&desc->wlock);
567 usb_autopm_put_interface(desc->intf);
569 mutex_unlock(&wdm_mutex);
573 static int wdm_release(struct inode *inode, struct file *file)
575 struct wdm_device *desc = file->private_data;
577 mutex_lock(&wdm_mutex);
579 /* using write lock to protect desc->count */
580 mutex_lock(&desc->wlock);
582 mutex_unlock(&desc->wlock);
585 dev_dbg(&desc->intf->dev, "wdm_release: cleanup");
587 if (!test_bit(WDM_DISCONNECTING, &desc->flags))
588 desc->intf->needs_remote_wakeup = 0;
590 mutex_unlock(&wdm_mutex);
594 static const struct file_operations wdm_fops = {
595 .owner = THIS_MODULE,
600 .release = wdm_release,
602 .llseek = noop_llseek,
605 static struct usb_class_driver wdm_class = {
608 .minor_base = WDM_MINOR_BASE,
611 /* --- error handling --- */
612 static void wdm_rxwork(struct work_struct *work)
614 struct wdm_device *desc = container_of(work, struct wdm_device, rxwork);
618 spin_lock_irqsave(&desc->iuspin, flags);
619 if (test_bit(WDM_DISCONNECTING, &desc->flags)) {
620 spin_unlock_irqrestore(&desc->iuspin, flags);
622 spin_unlock_irqrestore(&desc->iuspin, flags);
623 rv = usb_submit_urb(desc->response, GFP_KERNEL);
624 if (rv < 0 && rv != -EPERM) {
625 spin_lock_irqsave(&desc->iuspin, flags);
626 if (!test_bit(WDM_DISCONNECTING, &desc->flags))
627 schedule_work(&desc->rxwork);
628 spin_unlock_irqrestore(&desc->iuspin, flags);
633 /* --- hotplug --- */
635 static int wdm_probe(struct usb_interface *intf, const struct usb_device_id *id)
638 struct wdm_device *desc;
639 struct usb_host_interface *iface;
640 struct usb_endpoint_descriptor *ep;
641 struct usb_cdc_dmm_desc *dmhd;
642 u8 *buffer = intf->altsetting->extra;
643 int buflen = intf->altsetting->extralen;
644 u16 maxcom = WDM_DEFAULT_BUFSIZE;
650 if (buffer [1] != USB_DT_CS_INTERFACE) {
651 dev_err(&intf->dev, "skipping garbage\n");
655 switch (buffer [2]) {
656 case USB_CDC_HEADER_TYPE:
658 case USB_CDC_DMM_TYPE:
659 dmhd = (struct usb_cdc_dmm_desc *)buffer;
660 maxcom = le16_to_cpu(dmhd->wMaxCommand);
662 "Finding maximum buffer length: %d", maxcom);
666 "Ignoring extra header, type %d, length %d\n",
667 buffer[2], buffer[0]);
676 desc = kzalloc(sizeof(struct wdm_device), GFP_KERNEL);
679 mutex_init(&desc->rlock);
680 mutex_init(&desc->wlock);
681 spin_lock_init(&desc->iuspin);
682 init_waitqueue_head(&desc->wait);
683 desc->wMaxCommand = maxcom;
684 /* this will be expanded and needed in hardware endianness */
685 desc->inum = cpu_to_le16((u16)intf->cur_altsetting->desc.bInterfaceNumber);
687 INIT_WORK(&desc->rxwork, wdm_rxwork);
690 iface = intf->cur_altsetting;
691 if (iface->desc.bNumEndpoints != 1)
693 ep = &iface->endpoint[0].desc;
694 if (!ep || !usb_endpoint_is_int_in(ep))
697 desc->wMaxPacketSize = usb_endpoint_maxp(ep);
699 desc->orq = kmalloc(sizeof(struct usb_ctrlrequest), GFP_KERNEL);
702 desc->irq = kmalloc(sizeof(struct usb_ctrlrequest), GFP_KERNEL);
706 desc->validity = usb_alloc_urb(0, GFP_KERNEL);
710 desc->response = usb_alloc_urb(0, GFP_KERNEL);
714 desc->command = usb_alloc_urb(0, GFP_KERNEL);
718 desc->ubuf = kmalloc(desc->wMaxCommand, GFP_KERNEL);
722 desc->sbuf = kmalloc(desc->wMaxPacketSize, GFP_KERNEL);
726 desc->inbuf = kmalloc(desc->wMaxCommand, GFP_KERNEL);
732 interface_to_usbdev(intf),
733 usb_rcvintpipe(interface_to_usbdev(intf), ep->bEndpointAddress),
735 desc->wMaxPacketSize,
741 desc->irq->bRequestType = (USB_DIR_IN | USB_TYPE_CLASS | USB_RECIP_INTERFACE);
742 desc->irq->bRequest = USB_CDC_GET_ENCAPSULATED_RESPONSE;
743 desc->irq->wValue = 0;
744 desc->irq->wIndex = desc->inum;
745 desc->irq->wLength = cpu_to_le16(desc->wMaxCommand);
747 usb_fill_control_urb(
749 interface_to_usbdev(intf),
750 /* using common endpoint 0 */
751 usb_rcvctrlpipe(interface_to_usbdev(desc->intf), 0),
752 (unsigned char *)desc->irq,
759 usb_set_intfdata(intf, desc);
760 rv = usb_register_dev(intf, &wdm_class);
764 dev_info(&intf->dev, "%s: USB WDM device\n", dev_name(intf->usb_dev));
768 usb_set_intfdata(intf, NULL);
780 static void wdm_disconnect(struct usb_interface *intf)
782 struct wdm_device *desc;
785 usb_deregister_dev(intf, &wdm_class);
786 mutex_lock(&wdm_mutex);
787 desc = usb_get_intfdata(intf);
789 /* the spinlock makes sure no new urbs are generated in the callbacks */
790 spin_lock_irqsave(&desc->iuspin, flags);
791 set_bit(WDM_DISCONNECTING, &desc->flags);
792 set_bit(WDM_READ, &desc->flags);
793 /* to terminate pending flushes */
794 clear_bit(WDM_IN_USE, &desc->flags);
795 spin_unlock_irqrestore(&desc->iuspin, flags);
796 wake_up_all(&desc->wait);
797 mutex_lock(&desc->rlock);
798 mutex_lock(&desc->wlock);
800 cancel_work_sync(&desc->rxwork);
801 mutex_unlock(&desc->wlock);
802 mutex_unlock(&desc->rlock);
805 mutex_unlock(&wdm_mutex);
809 static int wdm_suspend(struct usb_interface *intf, pm_message_t message)
811 struct wdm_device *desc = usb_get_intfdata(intf);
814 dev_dbg(&desc->intf->dev, "wdm%d_suspend\n", intf->minor);
816 /* if this is an autosuspend the caller does the locking */
817 if (!PMSG_IS_AUTO(message)) {
818 mutex_lock(&desc->rlock);
819 mutex_lock(&desc->wlock);
821 spin_lock_irq(&desc->iuspin);
823 if (PMSG_IS_AUTO(message) &&
824 (test_bit(WDM_IN_USE, &desc->flags)
825 || test_bit(WDM_RESPONDING, &desc->flags))) {
826 spin_unlock_irq(&desc->iuspin);
830 set_bit(WDM_SUSPENDING, &desc->flags);
831 spin_unlock_irq(&desc->iuspin);
832 /* callback submits work - order is essential */
834 cancel_work_sync(&desc->rxwork);
836 if (!PMSG_IS_AUTO(message)) {
837 mutex_unlock(&desc->wlock);
838 mutex_unlock(&desc->rlock);
845 static int recover_from_urb_loss(struct wdm_device *desc)
850 rv = usb_submit_urb(desc->validity, GFP_NOIO);
852 dev_err(&desc->intf->dev,
853 "Error resume submitting int urb - %d\n", rv);
859 static int wdm_resume(struct usb_interface *intf)
861 struct wdm_device *desc = usb_get_intfdata(intf);
864 dev_dbg(&desc->intf->dev, "wdm%d_resume\n", intf->minor);
866 clear_bit(WDM_SUSPENDING, &desc->flags);
867 rv = recover_from_urb_loss(desc);
873 static int wdm_pre_reset(struct usb_interface *intf)
875 struct wdm_device *desc = usb_get_intfdata(intf);
878 * we notify everybody using poll of
879 * an exceptional situation
880 * must be done before recovery lest a spontaneous
881 * message from the device is lost
883 spin_lock_irq(&desc->iuspin);
884 set_bit(WDM_RESETTING, &desc->flags); /* inform read/write */
885 set_bit(WDM_READ, &desc->flags); /* unblock read */
886 clear_bit(WDM_IN_USE, &desc->flags); /* unblock write */
888 spin_unlock_irq(&desc->iuspin);
889 wake_up_all(&desc->wait);
890 mutex_lock(&desc->rlock);
891 mutex_lock(&desc->wlock);
893 cancel_work_sync(&desc->rxwork);
897 static int wdm_post_reset(struct usb_interface *intf)
899 struct wdm_device *desc = usb_get_intfdata(intf);
902 clear_bit(WDM_RESETTING, &desc->flags);
903 rv = recover_from_urb_loss(desc);
904 mutex_unlock(&desc->wlock);
905 mutex_unlock(&desc->rlock);
909 static struct usb_driver wdm_driver = {
912 .disconnect = wdm_disconnect,
914 .suspend = wdm_suspend,
915 .resume = wdm_resume,
916 .reset_resume = wdm_resume,
918 .pre_reset = wdm_pre_reset,
919 .post_reset = wdm_post_reset,
921 .supports_autosuspend = 1,
924 module_usb_driver(wdm_driver);
926 MODULE_AUTHOR(DRIVER_AUTHOR);
927 MODULE_DESCRIPTION(DRIVER_DESC);
928 MODULE_LICENSE("GPL");