1/*-
2 * Copyright (c) 2010 Hans Petter Selasky. All rights reserved.
3 *
4 * Redistribution and use in source and binary forms, with or without
5 * modification, are permitted provided that the following conditions
6 * are met:
7 * 1. Redistributions of source code must retain the above copyright
8 *    notice, this list of conditions and the following disclaimer.
9 * 2. Redistributions in binary form must reproduce the above copyright
10 *    notice, this list of conditions and the following disclaimer in the
11 *    documentation and/or other materials provided with the distribution.
12 *
13 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
14 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
15 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
16 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
17 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
18 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
19 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
20 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
21 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
22 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
23 * SUCH DAMAGE.
24 */
25
26/*
27 * HID spec: http://www.usb.org/developers/devclass_docs/HID1_11.pdf
28 */
29
30#include <sys/param.h>
31__FBSDID("$FreeBSD$");
32
33#include <sys/stdint.h>
34#include <sys/stddef.h>
35#include <sys/queue.h>
36#include <sys/systm.h>
37#include <sys/kernel.h>
38#include <sys/bus.h>
39#include <sys/linker_set.h>
40#include <sys/module.h>
41#include <sys/lock.h>
42#include <sys/mutex.h>
43#include <sys/condvar.h>
44#include <sys/sysctl.h>
45#include <sys/sx.h>
46#include <sys/unistd.h>
47#include <sys/callout.h>
48#include <sys/malloc.h>
49#include <sys/priv.h>
50
51#include <dev/usb/usb.h>
52#include <dev/usb/usbdi.h>
53#include <dev/usb/usbdi_util.h>
54#include <dev/usb/usbhid.h>
55#include "usb_if.h"
56
57#define	USB_DEBUG_VAR g_keyboard_debug
58#include <dev/usb/usb_debug.h>
59
60#include <dev/usb/gadget/g_keyboard.h>
61
62static SYSCTL_NODE(_hw_usb, OID_AUTO, g_keyboard, CTLFLAG_RW, 0, "USB keyboard gadget");
63
64#ifdef USB_DEBUG
65static int g_keyboard_debug = 0;
66
67SYSCTL_INT(_hw_usb_g_keyboard, OID_AUTO, debug, CTLFLAG_RWTUN,
68    &g_keyboard_debug, 0, "Debug level");
69#endif
70
71static int g_keyboard_mode = 0;
72
73SYSCTL_INT(_hw_usb_g_keyboard, OID_AUTO, mode, CTLFLAG_RWTUN,
74    &g_keyboard_mode, 0, "Mode selection");
75
76static int g_keyboard_key_press_interval = 1000;
77
78SYSCTL_INT(_hw_usb_g_keyboard, OID_AUTO, key_press_interval, CTLFLAG_RWTUN,
79    &g_keyboard_key_press_interval, 0, "Key Press Interval in milliseconds");
80
81static char g_keyboard_key_press_pattern[G_KEYBOARD_MAX_STRLEN];
82
83SYSCTL_STRING(_hw_usb_g_keyboard, OID_AUTO, key_press_pattern, CTLFLAG_RW,
84    g_keyboard_key_press_pattern, sizeof(g_keyboard_key_press_pattern),
85    "Key Press Patterns");
86
87#define	UPROTO_BOOT_KEYBOARD 1
88
89#define	G_KEYBOARD_NMOD                     8	/* units */
90#define	G_KEYBOARD_NKEYCODE                 6	/* units */
91
92struct g_keyboard_data {
93	uint8_t	modifiers;
94#define	MOD_CONTROL_L	0x01
95#define	MOD_CONTROL_R	0x10
96#define	MOD_SHIFT_L	0x02
97#define	MOD_SHIFT_R	0x20
98#define	MOD_ALT_L	0x04
99#define	MOD_ALT_R	0x40
100#define	MOD_WIN_L	0x08
101#define	MOD_WIN_R	0x80
102	uint8_t	reserved;
103	uint8_t	keycode[G_KEYBOARD_NKEYCODE];
104};
105
106enum {
107	G_KEYBOARD_INTR_DT,
108	G_KEYBOARD_N_TRANSFER,
109};
110
111struct g_keyboard_softc {
112	struct mtx sc_mtx;
113	struct usb_callout sc_callout;
114	struct g_keyboard_data sc_data[2];
115	struct usb_xfer *sc_xfer[G_KEYBOARD_N_TRANSFER];
116
117	int	sc_mode;
118	int	sc_state;
119	int	sc_pattern_len;
120
121	char	sc_pattern[G_KEYBOARD_MAX_STRLEN];
122
123	uint8_t	sc_led_state[4];
124};
125
126static device_probe_t g_keyboard_probe;
127static device_attach_t g_keyboard_attach;
128static device_detach_t g_keyboard_detach;
129static usb_handle_request_t g_keyboard_handle_request;
130static usb_callback_t g_keyboard_intr_callback;
131
132static devclass_t g_keyboard_devclass;
133
134static device_method_t g_keyboard_methods[] = {
135	/* USB interface */
136	DEVMETHOD(usb_handle_request, g_keyboard_handle_request),
137
138	/* Device interface */
139	DEVMETHOD(device_probe, g_keyboard_probe),
140	DEVMETHOD(device_attach, g_keyboard_attach),
141	DEVMETHOD(device_detach, g_keyboard_detach),
142
143	DEVMETHOD_END
144};
145
146static driver_t g_keyboard_driver = {
147	.name = "g_keyboard",
148	.methods = g_keyboard_methods,
149	.size = sizeof(struct g_keyboard_softc),
150};
151
152DRIVER_MODULE(g_keyboard, uhub, g_keyboard_driver, g_keyboard_devclass, 0, 0);
153MODULE_DEPEND(g_keyboard, usb, 1, 1, 1);
154
155static const struct usb_config g_keyboard_config[G_KEYBOARD_N_TRANSFER] = {
156	[G_KEYBOARD_INTR_DT] = {
157		.type = UE_INTERRUPT,
158		.endpoint = UE_ADDR_ANY,
159		.direction = UE_DIR_IN,
160		.flags = {.ext_buffer = 1,.pipe_bof = 1,},
161		.bufsize = sizeof(struct g_keyboard_data),
162		.callback = &g_keyboard_intr_callback,
163		.frames = 2,
164		.usb_mode = USB_MODE_DEVICE,
165	},
166};
167
168static void g_keyboard_timeout(void *arg);
169
170static void
171g_keyboard_timeout_reset(struct g_keyboard_softc *sc)
172{
173	int i = g_keyboard_key_press_interval;
174
175	if (i <= 0)
176		i = 1;
177	else if (i > 1023)
178		i = 1023;
179
180	i = USB_MS_TO_TICKS(i);
181
182	usb_callout_reset(&sc->sc_callout, i, &g_keyboard_timeout, sc);
183}
184
185static void
186g_keyboard_timeout(void *arg)
187{
188	struct g_keyboard_softc *sc = arg;
189
190	sc->sc_mode = g_keyboard_mode;
191
192	memcpy(sc->sc_pattern, g_keyboard_key_press_pattern, sizeof(sc->sc_pattern));
193
194	sc->sc_pattern[G_KEYBOARD_MAX_STRLEN - 1] = 0;
195
196	sc->sc_pattern_len = strlen(sc->sc_pattern);
197
198	DPRINTFN(11, "Timeout %p\n", sc->sc_xfer[G_KEYBOARD_INTR_DT]);
199
200	usbd_transfer_start(sc->sc_xfer[G_KEYBOARD_INTR_DT]);
201
202	g_keyboard_timeout_reset(sc);
203}
204
205static int
206g_keyboard_probe(device_t dev)
207{
208	struct usb_attach_arg *uaa = device_get_ivars(dev);
209
210	DPRINTFN(11, "\n");
211
212	if (uaa->usb_mode != USB_MODE_DEVICE)
213		return (ENXIO);
214
215	if ((uaa->info.bInterfaceClass == UICLASS_HID) &&
216	    (uaa->info.bInterfaceSubClass == UISUBCLASS_BOOT) &&
217	    (uaa->info.bInterfaceProtocol == UPROTO_BOOT_KEYBOARD))
218		return (0);
219
220	return (ENXIO);
221}
222
223static int
224g_keyboard_attach(device_t dev)
225{
226	struct g_keyboard_softc *sc = device_get_softc(dev);
227	struct usb_attach_arg *uaa = device_get_ivars(dev);
228	int error;
229
230	DPRINTFN(11, "\n");
231
232	device_set_usb_desc(dev);
233
234	mtx_init(&sc->sc_mtx, "g_keyboard", NULL, MTX_DEF);
235
236	usb_callout_init_mtx(&sc->sc_callout, &sc->sc_mtx, 0);
237
238	sc->sc_mode = G_KEYBOARD_MODE_SILENT;
239
240	error = usbd_transfer_setup(uaa->device,
241	    &uaa->info.bIfaceIndex, sc->sc_xfer, g_keyboard_config,
242	    G_KEYBOARD_N_TRANSFER, sc, &sc->sc_mtx);
243
244	if (error) {
245		DPRINTF("error=%s\n", usbd_errstr(error));
246		goto detach;
247	}
248	mtx_lock(&sc->sc_mtx);
249	g_keyboard_timeout_reset(sc);
250	mtx_unlock(&sc->sc_mtx);
251
252	return (0);			/* success */
253
254detach:
255	g_keyboard_detach(dev);
256
257	return (ENXIO);			/* error */
258}
259
260static int
261g_keyboard_detach(device_t dev)
262{
263	struct g_keyboard_softc *sc = device_get_softc(dev);
264
265	DPRINTF("\n");
266
267	mtx_lock(&sc->sc_mtx);
268	usb_callout_stop(&sc->sc_callout);
269	mtx_unlock(&sc->sc_mtx);
270
271	usbd_transfer_unsetup(sc->sc_xfer, G_KEYBOARD_N_TRANSFER);
272
273	usb_callout_drain(&sc->sc_callout);
274
275	mtx_destroy(&sc->sc_mtx);
276
277	return (0);
278}
279
280static uint8_t
281g_keyboard_get_keycode(struct g_keyboard_softc *sc, int index)
282{
283	int key;
284	int mod = sc->sc_pattern_len;
285
286	if (mod == 0)
287		index = 0;
288	else
289		index %= mod;
290
291	if ((index >= 0) && (index < sc->sc_pattern_len))
292		key = sc->sc_pattern[index];
293	else
294		key = 'a';
295
296	if (key >= 'a' && key <= 'z')
297		return (key - 'a' + 0x04);
298	else
299		return (0x04);
300}
301
302static void
303g_keyboard_intr_callback(struct usb_xfer *xfer, usb_error_t error)
304{
305	struct g_keyboard_softc *sc = usbd_xfer_softc(xfer);
306	int actlen;
307	int aframes;
308
309	usbd_xfer_status(xfer, &actlen, NULL, &aframes, NULL);
310
311	DPRINTF("st=%d aframes=%d actlen=%d bytes\n",
312	    USB_GET_STATE(xfer), aframes, actlen);
313
314	switch (USB_GET_STATE(xfer)) {
315	case USB_ST_TRANSFERRED:
316		break;
317
318	case USB_ST_SETUP:
319tr_setup:
320		if (sc->sc_mode == G_KEYBOARD_MODE_SILENT) {
321			memset(&sc->sc_data, 0, sizeof(sc->sc_data));
322			usbd_xfer_set_frame_data(xfer, 0, &sc->sc_data[0], sizeof(sc->sc_data[0]));
323			usbd_xfer_set_frame_data(xfer, 1, &sc->sc_data[1], sizeof(sc->sc_data[1]));
324			usbd_xfer_set_frames(xfer, 2);
325			usbd_transfer_submit(xfer);
326
327		} else if (sc->sc_mode == G_KEYBOARD_MODE_PATTERN) {
328
329			memset(&sc->sc_data, 0, sizeof(sc->sc_data));
330
331			if ((sc->sc_state < 0) || (sc->sc_state >= G_KEYBOARD_MAX_STRLEN))
332				sc->sc_state = 0;
333
334			switch (sc->sc_state % 6) {
335			case 0:
336				sc->sc_data[0].keycode[0] =
337				    g_keyboard_get_keycode(sc, sc->sc_state + 0);
338			case 1:
339				sc->sc_data[0].keycode[1] =
340				    g_keyboard_get_keycode(sc, sc->sc_state + 1);
341			case 2:
342				sc->sc_data[0].keycode[2] =
343				    g_keyboard_get_keycode(sc, sc->sc_state + 2);
344			case 3:
345				sc->sc_data[0].keycode[3] =
346				    g_keyboard_get_keycode(sc, sc->sc_state + 3);
347			case 4:
348				sc->sc_data[0].keycode[4] =
349				    g_keyboard_get_keycode(sc, sc->sc_state + 4);
350			default:
351				sc->sc_data[0].keycode[5] =
352				    g_keyboard_get_keycode(sc, sc->sc_state + 5);
353			}
354
355			sc->sc_state++;
356
357			usbd_xfer_set_frame_data(xfer, 0, &sc->sc_data[0], sizeof(sc->sc_data[0]));
358			usbd_xfer_set_frame_data(xfer, 1, &sc->sc_data[1], sizeof(sc->sc_data[1]));
359			usbd_xfer_set_frames(xfer, 2);
360			usbd_transfer_submit(xfer);
361		}
362		break;
363
364	default:			/* Error */
365		DPRINTF("error=%s\n", usbd_errstr(error));
366
367		if (error != USB_ERR_CANCELLED) {
368			/* try to clear stall first */
369			usbd_xfer_set_stall(xfer);
370			goto tr_setup;
371		}
372		break;
373	}
374}
375
376static int
377g_keyboard_handle_request(device_t dev,
378    const void *preq, void **pptr, uint16_t *plen,
379    uint16_t offset, uint8_t *pstate)
380{
381	struct g_keyboard_softc *sc = device_get_softc(dev);
382	const struct usb_device_request *req = preq;
383	uint8_t is_complete = *pstate;
384
385	if (!is_complete) {
386		if ((req->bmRequestType == UT_WRITE_CLASS_INTERFACE) &&
387		    (req->bRequest == UR_SET_REPORT) &&
388		    (req->wValue[0] == 0x00) &&
389		    (req->wValue[1] == 0x02)) {
390
391			if (offset == 0) {
392				*plen = sizeof(sc->sc_led_state);
393				*pptr = &sc->sc_led_state;
394			} else {
395				*plen = 0;
396			}
397			return (0);
398		} else if ((req->bmRequestType == UT_WRITE_CLASS_INTERFACE) &&
399			    (req->bRequest == UR_SET_PROTOCOL) &&
400			    (req->wValue[0] == 0x00) &&
401		    (req->wValue[1] == 0x00)) {
402			*plen = 0;
403			return (0);
404		} else if ((req->bmRequestType == UT_WRITE_CLASS_INTERFACE) &&
405		    (req->bRequest == UR_SET_IDLE)) {
406			*plen = 0;
407			return (0);
408		}
409	}
410	return (ENXIO);			/* use builtin handler */
411}
412