1/*-
2 * Copyright (c) 2011 Anybots Inc
3 * written by Akinori Furukoshi <moonlightakkiy@yahoo.ca>
4 *  - ucom part is based on u3g.c
5 *
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
8 * are met:
9 * 1. Redistributions of source code must retain the above copyright
10 *    notice, this list of conditions and the following disclaimer.
11 * 2. Redistributions in binary form must reproduce the above copyright
12 *    notice, this list of conditions and the following disclaimer in the
13 *    documentation and/or other materials provided with the distribution.
14 *
15 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
16 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
17 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
18 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
19 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
20 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
21 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
22 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
23 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
24 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
25 * SUCH DAMAGE.
26 */
27
28#include <sys/cdefs.h>
29__FBSDID("$FreeBSD$");
30
31#include <sys/param.h>
32#include <sys/systm.h>
33#include <sys/queue.h>
34#include <sys/systm.h>
35#include <sys/socket.h>
36#include <sys/kernel.h>
37#include <sys/bus.h>
38#include <sys/module.h>
39#include <sys/sockio.h>
40#include <sys/socket.h>
41#include <sys/lock.h>
42#include <sys/mutex.h>
43#include <sys/condvar.h>
44#include <sys/sysctl.h>
45#include <sys/malloc.h>
46#include <sys/taskqueue.h>
47
48#include <net/if.h>
49#include <net/if_var.h>
50
51#include <machine/bus.h>
52
53#include <net/if.h>
54#include <net/if_types.h>
55#include <net/netisr.h>
56#include <net/bpf.h>
57#include <net/ethernet.h>
58
59#include <netinet/in.h>
60#include <netinet/ip.h>
61#include <netinet/ip6.h>
62#include <netinet/udp.h>
63
64#include <net80211/ieee80211_ioctl.h>
65
66#include <dev/usb/usb.h>
67#include <dev/usb/usbdi.h>
68#include <dev/usb/usbdi_util.h>
69#include <dev/usb/usb_cdc.h>
70#include "usbdevs.h"
71
72#define	USB_DEBUG_VAR usie_debug
73#include <dev/usb/usb_debug.h>
74#include <dev/usb/usb_process.h>
75#include <dev/usb/usb_msctest.h>
76
77#include <dev/usb/serial/usb_serial.h>
78
79#include <dev/usb/net/if_usievar.h>
80
81#ifdef	USB_DEBUG
82static int usie_debug = 0;
83
84static SYSCTL_NODE(_hw_usb, OID_AUTO, usie, CTLFLAG_RW, 0, "sierra USB modem");
85SYSCTL_INT(_hw_usb_usie, OID_AUTO, debug, CTLFLAG_RWTUN, &usie_debug, 0,
86    "usie debug level");
87#endif
88
89/* Sierra Wireless Direct IP modems */
90static const STRUCT_USB_HOST_ID usie_devs[] = {
91#define	USIE_DEV(v, d) {				\
92    USB_VP(USB_VENDOR_##v, USB_PRODUCT_##v##_##d) }
93	USIE_DEV(SIERRA, MC8700),
94	USIE_DEV(SIERRA, TRUINSTALL),
95	USIE_DEV(AIRPRIME, USB308),
96#undef	USIE_DEV
97};
98
99static device_probe_t usie_probe;
100static device_attach_t usie_attach;
101static device_detach_t usie_detach;
102static void usie_free_softc(struct usie_softc *);
103
104static void usie_free(struct ucom_softc *);
105static void usie_uc_update_line_state(struct ucom_softc *, uint8_t);
106static void usie_uc_cfg_get_status(struct ucom_softc *, uint8_t *, uint8_t *);
107static void usie_uc_cfg_set_dtr(struct ucom_softc *, uint8_t);
108static void usie_uc_cfg_set_rts(struct ucom_softc *, uint8_t);
109static void usie_uc_cfg_open(struct ucom_softc *);
110static void usie_uc_cfg_close(struct ucom_softc *);
111static void usie_uc_start_read(struct ucom_softc *);
112static void usie_uc_stop_read(struct ucom_softc *);
113static void usie_uc_start_write(struct ucom_softc *);
114static void usie_uc_stop_write(struct ucom_softc *);
115
116static usb_callback_t usie_uc_tx_callback;
117static usb_callback_t usie_uc_rx_callback;
118static usb_callback_t usie_uc_status_callback;
119static usb_callback_t usie_if_tx_callback;
120static usb_callback_t usie_if_rx_callback;
121static usb_callback_t usie_if_status_callback;
122
123static void usie_if_sync_to(void *);
124static void usie_if_sync_cb(void *, int);
125static void usie_if_status_cb(void *, int);
126
127static void usie_if_start(struct ifnet *);
128static int usie_if_output(struct ifnet *, struct mbuf *,
129	const struct sockaddr *, struct route *);
130static void usie_if_init(void *);
131static void usie_if_stop(struct usie_softc *);
132static int usie_if_ioctl(struct ifnet *, u_long, caddr_t);
133
134static int usie_do_request(struct usie_softc *, struct usb_device_request *, void *);
135static int usie_if_cmd(struct usie_softc *, uint8_t);
136static void usie_cns_req(struct usie_softc *, uint32_t, uint16_t);
137static void usie_cns_rsp(struct usie_softc *, struct usie_cns *);
138static void usie_hip_rsp(struct usie_softc *, uint8_t *, uint32_t);
139static int usie_driver_loaded(struct module *, int, void *);
140
141static const struct usb_config usie_uc_config[USIE_UC_N_XFER] = {
142	[USIE_UC_STATUS] = {
143		.type = UE_INTERRUPT,
144		.endpoint = UE_ADDR_ANY,
145		.direction = UE_DIR_IN,
146		.bufsize = 0,		/* use wMaxPacketSize */
147		.flags = {.pipe_bof = 1,.short_xfer_ok = 1,},
148		.callback = &usie_uc_status_callback,
149	},
150	[USIE_UC_RX] = {
151		.type = UE_BULK,
152		.endpoint = UE_ADDR_ANY,
153		.direction = UE_DIR_IN,
154		.bufsize = USIE_BUFSIZE,
155		.flags = {.pipe_bof = 1,.short_xfer_ok = 1,.proxy_buffer = 1,},
156		.callback = &usie_uc_rx_callback,
157	},
158	[USIE_UC_TX] = {
159		.type = UE_BULK,
160		.endpoint = UE_ADDR_ANY,
161		.direction = UE_DIR_OUT,
162		.bufsize = USIE_BUFSIZE,
163		.flags = {.pipe_bof = 1,.force_short_xfer = 1,},
164		.callback = &usie_uc_tx_callback,
165	}
166};
167
168static const struct usb_config usie_if_config[USIE_IF_N_XFER] = {
169	[USIE_IF_STATUS] = {
170		.type = UE_INTERRUPT,
171		.endpoint = UE_ADDR_ANY,
172		.direction = UE_DIR_IN,
173		.bufsize = 0,		/* use wMaxPacketSize */
174		.flags = {.pipe_bof = 1,.short_xfer_ok = 1,},
175		.callback = &usie_if_status_callback,
176	},
177	[USIE_IF_RX] = {
178		.type = UE_BULK,
179		.endpoint = UE_ADDR_ANY,
180		.direction = UE_DIR_IN,
181		.bufsize = USIE_BUFSIZE,
182		.flags = {.pipe_bof = 1,.short_xfer_ok = 1,},
183		.callback = &usie_if_rx_callback,
184	},
185	[USIE_IF_TX] = {
186		.type = UE_BULK,
187		.endpoint = UE_ADDR_ANY,
188		.direction = UE_DIR_OUT,
189		.bufsize = MAX(USIE_BUFSIZE, MCLBYTES),
190		.flags = {.pipe_bof = 1,.force_short_xfer = 1,},
191		.callback = &usie_if_tx_callback,
192	}
193};
194
195static device_method_t usie_methods[] = {
196	DEVMETHOD(device_probe, usie_probe),
197	DEVMETHOD(device_attach, usie_attach),
198	DEVMETHOD(device_detach, usie_detach),
199	DEVMETHOD_END
200};
201
202static driver_t usie_driver = {
203	.name = "usie",
204	.methods = usie_methods,
205	.size = sizeof(struct usie_softc),
206};
207
208static devclass_t usie_devclass;
209static eventhandler_tag usie_etag;
210
211DRIVER_MODULE(usie, uhub, usie_driver, usie_devclass, usie_driver_loaded, 0);
212MODULE_DEPEND(usie, ucom, 1, 1, 1);
213MODULE_DEPEND(usie, usb, 1, 1, 1);
214MODULE_VERSION(usie, 1);
215USB_PNP_HOST_INFO(usie_devs);
216
217static const struct ucom_callback usie_uc_callback = {
218	.ucom_cfg_get_status = &usie_uc_cfg_get_status,
219	.ucom_cfg_set_dtr = &usie_uc_cfg_set_dtr,
220	.ucom_cfg_set_rts = &usie_uc_cfg_set_rts,
221	.ucom_cfg_open = &usie_uc_cfg_open,
222	.ucom_cfg_close = &usie_uc_cfg_close,
223	.ucom_start_read = &usie_uc_start_read,
224	.ucom_stop_read = &usie_uc_stop_read,
225	.ucom_start_write = &usie_uc_start_write,
226	.ucom_stop_write = &usie_uc_stop_write,
227	.ucom_free = &usie_free,
228};
229
230static void
231usie_autoinst(void *arg, struct usb_device *udev,
232    struct usb_attach_arg *uaa)
233{
234	struct usb_interface *iface;
235	struct usb_interface_descriptor *id;
236	struct usb_device_request req;
237	int err;
238
239	if (uaa->dev_state != UAA_DEV_READY)
240		return;
241
242	iface = usbd_get_iface(udev, 0);
243	if (iface == NULL)
244		return;
245
246	id = iface->idesc;
247	if (id == NULL || id->bInterfaceClass != UICLASS_MASS)
248		return;
249
250	if (usbd_lookup_id_by_uaa(usie_devs, sizeof(usie_devs), uaa) != 0)
251		return;			/* no device match */
252
253	if (bootverbose) {
254		DPRINTF("Ejecting %s %s\n",
255		    usb_get_manufacturer(udev),
256		    usb_get_product(udev));
257	}
258	req.bmRequestType = UT_VENDOR;
259	req.bRequest = UR_SET_INTERFACE;
260	USETW(req.wValue, UF_DEVICE_REMOTE_WAKEUP);
261	USETW(req.wIndex, UHF_PORT_CONNECTION);
262	USETW(req.wLength, 0);
263
264	/* at this moment there is no mutex */
265	err = usbd_do_request_flags(udev, NULL, &req,
266	    NULL, 0, NULL, 250 /* ms */ );
267
268	/* success, mark the udev as disappearing */
269	if (err == 0)
270		uaa->dev_state = UAA_DEV_EJECTING;
271}
272
273static int
274usie_probe(device_t self)
275{
276	struct usb_attach_arg *uaa = device_get_ivars(self);
277
278	if (uaa->usb_mode != USB_MODE_HOST)
279		return (ENXIO);
280	if (uaa->info.bConfigIndex != USIE_CNFG_INDEX)
281		return (ENXIO);
282	if (uaa->info.bIfaceIndex != USIE_IFACE_INDEX)
283		return (ENXIO);
284	if (uaa->info.bInterfaceClass != UICLASS_VENDOR)
285		return (ENXIO);
286
287	return (usbd_lookup_id_by_uaa(usie_devs, sizeof(usie_devs), uaa));
288}
289
290static int
291usie_attach(device_t self)
292{
293	struct usie_softc *sc = device_get_softc(self);
294	struct usb_attach_arg *uaa = device_get_ivars(self);
295	struct ifnet *ifp;
296	struct usb_interface *iface;
297	struct usb_interface_descriptor *id;
298	struct usb_device_request req;
299	int err;
300	uint16_t fwattr;
301	uint8_t iface_index;
302	uint8_t ifidx;
303	uint8_t start;
304
305	device_set_usb_desc(self);
306	sc->sc_udev = uaa->device;
307	sc->sc_dev = self;
308
309	mtx_init(&sc->sc_mtx, "usie", MTX_NETWORK_LOCK, MTX_DEF);
310	ucom_ref(&sc->sc_super_ucom);
311
312	TASK_INIT(&sc->sc_if_status_task, 0, usie_if_status_cb, sc);
313	TASK_INIT(&sc->sc_if_sync_task, 0, usie_if_sync_cb, sc);
314
315	usb_callout_init_mtx(&sc->sc_if_sync_ch, &sc->sc_mtx, 0);
316
317	mtx_lock(&sc->sc_mtx);
318
319	/* set power mode to D0 */
320	req.bmRequestType = UT_WRITE_VENDOR_DEVICE;
321	req.bRequest = USIE_POWER;
322	USETW(req.wValue, 0);
323	USETW(req.wIndex, 0);
324	USETW(req.wLength, 0);
325	if (usie_do_request(sc, &req, NULL)) {
326		mtx_unlock(&sc->sc_mtx);
327		goto detach;
328	}
329	/* read fw attr */
330	fwattr = 0;
331	req.bmRequestType = UT_READ_VENDOR_DEVICE;
332	req.bRequest = USIE_FW_ATTR;
333	USETW(req.wValue, 0);
334	USETW(req.wIndex, 0);
335	USETW(req.wLength, sizeof(fwattr));
336	if (usie_do_request(sc, &req, &fwattr)) {
337		mtx_unlock(&sc->sc_mtx);
338		goto detach;
339	}
340	mtx_unlock(&sc->sc_mtx);
341
342	/* check DHCP supports */
343	DPRINTF("fwattr=%x\n", fwattr);
344	if (!(fwattr & USIE_FW_DHCP)) {
345		device_printf(self, "DHCP is not supported. A firmware upgrade might be needed.\n");
346	}
347
348	/* find available interfaces */
349	sc->sc_nucom = 0;
350	for (ifidx = 0; ifidx < USIE_IFACE_MAX; ifidx++) {
351		iface = usbd_get_iface(uaa->device, ifidx);
352		if (iface == NULL)
353			break;
354
355		id = usbd_get_interface_descriptor(iface);
356		if ((id == NULL) || (id->bInterfaceClass != UICLASS_VENDOR))
357			continue;
358
359		/* setup Direct IP transfer */
360		if (id->bInterfaceNumber >= 7 && id->bNumEndpoints == 3) {
361			sc->sc_if_ifnum = id->bInterfaceNumber;
362			iface_index = ifidx;
363
364			DPRINTF("ifnum=%d, ifidx=%d\n",
365			    sc->sc_if_ifnum, ifidx);
366
367			err = usbd_transfer_setup(uaa->device,
368			    &iface_index, sc->sc_if_xfer, usie_if_config,
369			    USIE_IF_N_XFER, sc, &sc->sc_mtx);
370
371			if (err == 0)
372				continue;
373
374			device_printf(self,
375			    "could not allocate USB transfers on "
376			    "iface_index=%d, err=%s\n",
377			    iface_index, usbd_errstr(err));
378			goto detach;
379		}
380
381		/* setup ucom */
382		if (sc->sc_nucom >= USIE_UCOM_MAX)
383			continue;
384
385		usbd_set_parent_iface(uaa->device, ifidx,
386		    uaa->info.bIfaceIndex);
387
388		DPRINTF("NumEndpoints=%d bInterfaceNumber=%d\n",
389		    id->bNumEndpoints, id->bInterfaceNumber);
390
391		if (id->bNumEndpoints == 2) {
392			sc->sc_uc_xfer[sc->sc_nucom][0] = NULL;
393			start = 1;
394		} else
395			start = 0;
396
397		err = usbd_transfer_setup(uaa->device, &ifidx,
398		    sc->sc_uc_xfer[sc->sc_nucom] + start,
399		    usie_uc_config + start, USIE_UC_N_XFER - start,
400		    &sc->sc_ucom[sc->sc_nucom], &sc->sc_mtx);
401
402		if (err != 0) {
403			DPRINTF("usbd_transfer_setup error=%s\n", usbd_errstr(err));
404			continue;
405		}
406
407		mtx_lock(&sc->sc_mtx);
408		for (; start < USIE_UC_N_XFER; start++)
409			usbd_xfer_set_stall(sc->sc_uc_xfer[sc->sc_nucom][start]);
410		mtx_unlock(&sc->sc_mtx);
411
412		sc->sc_uc_ifnum[sc->sc_nucom] = id->bInterfaceNumber;
413
414		sc->sc_nucom++;		/* found a port */
415	}
416
417	if (sc->sc_nucom == 0) {
418		device_printf(self, "no comports found\n");
419		goto detach;
420	}
421
422	err = ucom_attach(&sc->sc_super_ucom, sc->sc_ucom,
423	    sc->sc_nucom, sc, &usie_uc_callback, &sc->sc_mtx);
424
425	if (err != 0) {
426		DPRINTF("ucom_attach failed\n");
427		goto detach;
428	}
429	DPRINTF("Found %d interfaces.\n", sc->sc_nucom);
430
431	/* setup ifnet (Direct IP) */
432	sc->sc_ifp = ifp = if_alloc(IFT_OTHER);
433
434	if (ifp == NULL) {
435		device_printf(self, "Could not allocate a network interface\n");
436		goto detach;
437	}
438	if_initname(ifp, "usie", device_get_unit(self));
439
440	ifp->if_softc = sc;
441	ifp->if_mtu = USIE_MTU_MAX;
442	ifp->if_flags |= IFF_NOARP;
443	ifp->if_init = usie_if_init;
444	ifp->if_ioctl = usie_if_ioctl;
445	ifp->if_start = usie_if_start;
446	ifp->if_output = usie_if_output;
447	IFQ_SET_MAXLEN(&ifp->if_snd, ifqmaxlen);
448	ifp->if_snd.ifq_drv_maxlen = ifqmaxlen;
449	IFQ_SET_READY(&ifp->if_snd);
450
451	if_attach(ifp);
452	bpfattach(ifp, DLT_RAW, 0);
453
454	if (fwattr & USIE_PM_AUTO) {
455		usbd_set_power_mode(uaa->device, USB_POWER_MODE_SAVE);
456		DPRINTF("enabling automatic suspend and resume\n");
457	} else {
458		usbd_set_power_mode(uaa->device, USB_POWER_MODE_ON);
459		DPRINTF("USB power is always ON\n");
460	}
461
462	DPRINTF("device attached\n");
463	return (0);
464
465detach:
466	usie_detach(self);
467	return (ENOMEM);
468}
469
470static int
471usie_detach(device_t self)
472{
473	struct usie_softc *sc = device_get_softc(self);
474	uint8_t x;
475
476	/* detach ifnet */
477	if (sc->sc_ifp != NULL) {
478		usie_if_stop(sc);
479		usbd_transfer_unsetup(sc->sc_if_xfer, USIE_IF_N_XFER);
480		bpfdetach(sc->sc_ifp);
481		if_detach(sc->sc_ifp);
482		if_free(sc->sc_ifp);
483		sc->sc_ifp = NULL;
484	}
485	/* detach ucom */
486	if (sc->sc_nucom > 0)
487		ucom_detach(&sc->sc_super_ucom, sc->sc_ucom);
488
489	/* stop all USB transfers */
490	usbd_transfer_unsetup(sc->sc_if_xfer, USIE_IF_N_XFER);
491
492	for (x = 0; x != USIE_UCOM_MAX; x++)
493		usbd_transfer_unsetup(sc->sc_uc_xfer[x], USIE_UC_N_XFER);
494
495
496	device_claim_softc(self);
497
498	usie_free_softc(sc);
499
500	return (0);
501}
502
503UCOM_UNLOAD_DRAIN(usie);
504
505static void
506usie_free_softc(struct usie_softc *sc)
507{
508	if (ucom_unref(&sc->sc_super_ucom)) {
509		mtx_destroy(&sc->sc_mtx);
510		device_free_softc(sc);
511	}
512}
513
514static void
515usie_free(struct ucom_softc *ucom)
516{
517	usie_free_softc(ucom->sc_parent);
518}
519
520static void
521usie_uc_update_line_state(struct ucom_softc *ucom, uint8_t ls)
522{
523	struct usie_softc *sc = ucom->sc_parent;
524	struct usb_device_request req;
525
526	if (sc->sc_uc_xfer[ucom->sc_subunit][USIE_UC_STATUS] == NULL)
527		return;
528
529	req.bmRequestType = UT_WRITE_CLASS_INTERFACE;
530	req.bRequest = USIE_LINK_STATE;
531	USETW(req.wValue, ls);
532	USETW(req.wIndex, sc->sc_uc_ifnum[ucom->sc_subunit]);
533	USETW(req.wLength, 0);
534
535	DPRINTF("sc_uc_ifnum=%d\n", sc->sc_uc_ifnum[ucom->sc_subunit]);
536
537	usie_do_request(sc, &req, NULL);
538}
539
540static void
541usie_uc_cfg_get_status(struct ucom_softc *ucom, uint8_t *lsr, uint8_t *msr)
542{
543	struct usie_softc *sc = ucom->sc_parent;
544
545	*msr = sc->sc_msr;
546	*lsr = sc->sc_lsr;
547}
548
549static void
550usie_uc_cfg_set_dtr(struct ucom_softc *ucom, uint8_t flag)
551{
552	uint8_t dtr;
553
554	dtr = flag ? USIE_LS_DTR : 0;
555	usie_uc_update_line_state(ucom, dtr);
556}
557
558static void
559usie_uc_cfg_set_rts(struct ucom_softc *ucom, uint8_t flag)
560{
561	uint8_t rts;
562
563	rts = flag ? USIE_LS_RTS : 0;
564	usie_uc_update_line_state(ucom, rts);
565}
566
567static void
568usie_uc_cfg_open(struct ucom_softc *ucom)
569{
570	struct usie_softc *sc = ucom->sc_parent;
571
572	/* usbd_transfer_start() is NULL safe */
573
574	usbd_transfer_start(sc->sc_uc_xfer[ucom->sc_subunit][USIE_UC_STATUS]);
575}
576
577static void
578usie_uc_cfg_close(struct ucom_softc *ucom)
579{
580	struct usie_softc *sc = ucom->sc_parent;
581
582	usbd_transfer_stop(sc->sc_uc_xfer[ucom->sc_subunit][USIE_UC_STATUS]);
583}
584
585static void
586usie_uc_start_read(struct ucom_softc *ucom)
587{
588	struct usie_softc *sc = ucom->sc_parent;
589
590	usbd_transfer_start(sc->sc_uc_xfer[ucom->sc_subunit][USIE_UC_RX]);
591}
592
593static void
594usie_uc_stop_read(struct ucom_softc *ucom)
595{
596	struct usie_softc *sc = ucom->sc_parent;
597
598	usbd_transfer_stop(sc->sc_uc_xfer[ucom->sc_subunit][USIE_UC_RX]);
599}
600
601static void
602usie_uc_start_write(struct ucom_softc *ucom)
603{
604	struct usie_softc *sc = ucom->sc_parent;
605
606	usbd_transfer_start(sc->sc_uc_xfer[ucom->sc_subunit][USIE_UC_TX]);
607}
608
609static void
610usie_uc_stop_write(struct ucom_softc *ucom)
611{
612	struct usie_softc *sc = ucom->sc_parent;
613
614	usbd_transfer_stop(sc->sc_uc_xfer[ucom->sc_subunit][USIE_UC_TX]);
615}
616
617static void
618usie_uc_rx_callback(struct usb_xfer *xfer, usb_error_t error)
619{
620	struct ucom_softc *ucom = usbd_xfer_softc(xfer);
621	struct usie_softc *sc = ucom->sc_parent;
622	struct usb_page_cache *pc;
623	uint32_t actlen;
624
625	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
626
627	switch (USB_GET_STATE(xfer)) {
628	case USB_ST_TRANSFERRED:
629		pc = usbd_xfer_get_frame(xfer, 0);
630
631		/* handle CnS response */
632		if (ucom == sc->sc_ucom && actlen >= USIE_HIPCNS_MIN) {
633
634			DPRINTF("transferred=%u\n", actlen);
635
636			/* check if it is really CnS reply */
637			usbd_copy_out(pc, 0, sc->sc_resp_temp, 1);
638
639			if (sc->sc_resp_temp[0] == USIE_HIP_FRM_CHR) {
640
641				/* verify actlen */
642				if (actlen > USIE_BUFSIZE)
643					actlen = USIE_BUFSIZE;
644
645				/* get complete message */
646				usbd_copy_out(pc, 0, sc->sc_resp_temp, actlen);
647				usie_hip_rsp(sc, sc->sc_resp_temp, actlen);
648
649				/* need to fall though */
650				goto tr_setup;
651			}
652			/* else call ucom_put_data() */
653		}
654		/* standard ucom transfer */
655		ucom_put_data(ucom, pc, 0, actlen);
656
657		/* fall though */
658	case USB_ST_SETUP:
659tr_setup:
660		usbd_xfer_set_frame_len(xfer, 0, usbd_xfer_max_len(xfer));
661		usbd_transfer_submit(xfer);
662		break;
663
664	default:			/* Error */
665		if (error != USB_ERR_CANCELLED) {
666			usbd_xfer_set_stall(xfer);
667			goto tr_setup;
668		}
669		break;
670	}
671}
672
673static void
674usie_uc_tx_callback(struct usb_xfer *xfer, usb_error_t error)
675{
676	struct ucom_softc *ucom = usbd_xfer_softc(xfer);
677	struct usb_page_cache *pc;
678	uint32_t actlen;
679
680	switch (USB_GET_STATE(xfer)) {
681	case USB_ST_TRANSFERRED:
682	case USB_ST_SETUP:
683tr_setup:
684		pc = usbd_xfer_get_frame(xfer, 0);
685
686		/* handle CnS request */
687		struct mbuf *m = usbd_xfer_get_priv(xfer);
688
689		if (m != NULL) {
690			usbd_m_copy_in(pc, 0, m, 0, m->m_pkthdr.len);
691			usbd_xfer_set_frame_len(xfer, 0, m->m_pkthdr.len);
692			usbd_xfer_set_priv(xfer, NULL);
693			usbd_transfer_submit(xfer);
694			m_freem(m);
695			break;
696		}
697		/* standard ucom transfer */
698		if (ucom_get_data(ucom, pc, 0, USIE_BUFSIZE, &actlen)) {
699			usbd_xfer_set_frame_len(xfer, 0, actlen);
700			usbd_transfer_submit(xfer);
701		}
702		break;
703
704	default:			/* Error */
705		if (error != USB_ERR_CANCELLED) {
706			usbd_xfer_set_stall(xfer);
707			goto tr_setup;
708		}
709		break;
710	}
711}
712
713static void
714usie_uc_status_callback(struct usb_xfer *xfer, usb_error_t error)
715{
716	struct usb_page_cache *pc;
717	struct {
718		struct usb_device_request req;
719		uint16_t param;
720	}      st;
721	uint32_t actlen;
722	uint16_t param;
723
724	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
725
726	switch (USB_GET_STATE(xfer)) {
727	case USB_ST_TRANSFERRED:
728		DPRINTFN(4, "info received, actlen=%u\n", actlen);
729
730		if (actlen < sizeof(st)) {
731			DPRINTF("data too short actlen=%u\n", actlen);
732			goto tr_setup;
733		}
734		pc = usbd_xfer_get_frame(xfer, 0);
735		usbd_copy_out(pc, 0, &st, sizeof(st));
736
737		if (st.req.bmRequestType == 0xa1 && st.req.bRequest == 0x20) {
738			struct ucom_softc *ucom = usbd_xfer_softc(xfer);
739			struct usie_softc *sc = ucom->sc_parent;
740
741			param = le16toh(st.param);
742			DPRINTF("param=%x\n", param);
743			sc->sc_msr = sc->sc_lsr = 0;
744			sc->sc_msr |= (param & USIE_DCD) ? SER_DCD : 0;
745			sc->sc_msr |= (param & USIE_DSR) ? SER_DSR : 0;
746			sc->sc_msr |= (param & USIE_RI) ? SER_RI : 0;
747			sc->sc_msr |= (param & USIE_CTS) ? 0 : SER_CTS;
748			sc->sc_msr |= (param & USIE_RTS) ? SER_RTS : 0;
749			sc->sc_msr |= (param & USIE_DTR) ? SER_DTR : 0;
750		}
751		/* fall though */
752	case USB_ST_SETUP:
753tr_setup:
754		usbd_xfer_set_frame_len(xfer, 0, usbd_xfer_max_len(xfer));
755		usbd_transfer_submit(xfer);
756		break;
757
758	default:			/* Error */
759		DPRINTF("USB transfer error, %s\n",
760		    usbd_errstr(error));
761
762		if (error != USB_ERR_CANCELLED) {
763			usbd_xfer_set_stall(xfer);
764			goto tr_setup;
765		}
766		break;
767	}
768}
769
770static void
771usie_if_rx_callback(struct usb_xfer *xfer, usb_error_t error)
772{
773	struct usie_softc *sc = usbd_xfer_softc(xfer);
774	struct ifnet *ifp = sc->sc_ifp;
775	struct mbuf *m0;
776	struct mbuf *m = NULL;
777	struct usie_desc *rxd;
778	uint32_t actlen;
779	uint16_t err;
780	uint16_t pkt;
781	uint16_t ipl;
782	uint16_t len;
783	uint16_t diff;
784	uint8_t pad;
785	uint8_t ipv;
786
787	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
788
789	switch (USB_GET_STATE(xfer)) {
790	case USB_ST_TRANSFERRED:
791		DPRINTFN(15, "rx done, actlen=%u\n", actlen);
792
793		if (actlen < sizeof(struct usie_hip)) {
794			DPRINTF("data too short %u\n", actlen);
795			goto tr_setup;
796		}
797		m = sc->sc_rxm;
798		sc->sc_rxm = NULL;
799
800		/* fall though */
801	case USB_ST_SETUP:
802tr_setup:
803
804		if (sc->sc_rxm == NULL) {
805			sc->sc_rxm = m_getjcl(M_NOWAIT, MT_DATA, M_PKTHDR,
806			    MJUMPAGESIZE /* could be bigger than MCLBYTES */ );
807		}
808		if (sc->sc_rxm == NULL) {
809			DPRINTF("could not allocate Rx mbuf\n");
810			if_inc_counter(ifp, IFCOUNTER_IERRORS, 1);
811			usbd_xfer_set_stall(xfer);
812			usbd_xfer_set_frames(xfer, 0);
813		} else {
814			/*
815			 * Directly loading a mbuf cluster into DMA to
816			 * save some data copying. This works because
817			 * there is only one cluster.
818			 */
819			usbd_xfer_set_frame_data(xfer, 0,
820			    mtod(sc->sc_rxm, caddr_t), MIN(MJUMPAGESIZE, USIE_RXSZ_MAX));
821			usbd_xfer_set_frames(xfer, 1);
822		}
823		usbd_transfer_submit(xfer);
824		break;
825
826	default:			/* Error */
827		DPRINTF("USB transfer error, %s\n", usbd_errstr(error));
828
829		if (error != USB_ERR_CANCELLED) {
830			/* try to clear stall first */
831			usbd_xfer_set_stall(xfer);
832			if_inc_counter(ifp, IFCOUNTER_IERRORS, 1);
833			goto tr_setup;
834		}
835		if (sc->sc_rxm != NULL) {
836			m_freem(sc->sc_rxm);
837			sc->sc_rxm = NULL;
838		}
839		break;
840	}
841
842	if (m == NULL)
843		return;
844
845	mtx_unlock(&sc->sc_mtx);
846
847	m->m_pkthdr.len = m->m_len = actlen;
848
849	err = pkt = 0;
850
851	/* HW can aggregate multiple frames in a single USB xfer */
852	for (;;) {
853		rxd = mtod(m, struct usie_desc *);
854
855		len = be16toh(rxd->hip.len) & USIE_HIP_IP_LEN_MASK;
856		pad = (rxd->hip.id & USIE_HIP_PAD) ? 1 : 0;
857		ipl = (len - pad - ETHER_HDR_LEN);
858		if (ipl >= len) {
859			DPRINTF("Corrupt frame\n");
860			m_freem(m);
861			break;
862		}
863		diff = sizeof(struct usie_desc) + ipl + pad;
864
865		if (((rxd->hip.id & USIE_HIP_MASK) != USIE_HIP_IP) ||
866		    (be16toh(rxd->desc_type) & USIE_TYPE_MASK) != USIE_IP_RX) {
867			DPRINTF("received wrong type of packet\n");
868			m->m_data += diff;
869			m->m_pkthdr.len = (m->m_len -= diff);
870			err++;
871			if (m->m_pkthdr.len > 0)
872				continue;
873			m_freem(m);
874			break;
875		}
876		switch (be16toh(rxd->ethhdr.ether_type)) {
877		case ETHERTYPE_IP:
878			ipv = NETISR_IP;
879			break;
880#ifdef INET6
881		case ETHERTYPE_IPV6:
882			ipv = NETISR_IPV6;
883			break;
884#endif
885		default:
886			DPRINTF("unsupported ether type\n");
887			err++;
888			break;
889		}
890
891		/* the last packet */
892		if (m->m_pkthdr.len <= diff) {
893			m->m_data += (sizeof(struct usie_desc) + pad);
894			m->m_pkthdr.len = m->m_len = ipl;
895			m->m_pkthdr.rcvif = ifp;
896			BPF_MTAP(sc->sc_ifp, m);
897			netisr_dispatch(ipv, m);
898			break;
899		}
900		/* copy aggregated frames to another mbuf */
901		m0 = m_getcl(M_NOWAIT, MT_DATA, M_PKTHDR);
902		if (__predict_false(m0 == NULL)) {
903			DPRINTF("could not allocate mbuf\n");
904			err++;
905			m_freem(m);
906			break;
907		}
908		m_copydata(m, sizeof(struct usie_desc) + pad, ipl, mtod(m0, caddr_t));
909		m0->m_pkthdr.rcvif = ifp;
910		m0->m_pkthdr.len = m0->m_len = ipl;
911
912		BPF_MTAP(sc->sc_ifp, m0);
913		netisr_dispatch(ipv, m0);
914
915		m->m_data += diff;
916		m->m_pkthdr.len = (m->m_len -= diff);
917	}
918
919	mtx_lock(&sc->sc_mtx);
920
921	if_inc_counter(ifp, IFCOUNTER_IERRORS, err);
922	if_inc_counter(ifp, IFCOUNTER_IPACKETS, pkt);
923}
924
925static void
926usie_if_tx_callback(struct usb_xfer *xfer, usb_error_t error)
927{
928	struct usie_softc *sc = usbd_xfer_softc(xfer);
929	struct usb_page_cache *pc;
930	struct ifnet *ifp = sc->sc_ifp;
931	struct mbuf *m;
932	uint16_t size;
933
934	switch (USB_GET_STATE(xfer)) {
935	case USB_ST_TRANSFERRED:
936		DPRINTFN(11, "transfer complete\n");
937		ifp->if_drv_flags &= ~IFF_DRV_OACTIVE;
938		if_inc_counter(ifp, IFCOUNTER_OPACKETS, 1);
939
940		/* fall though */
941	case USB_ST_SETUP:
942tr_setup:
943
944		if ((ifp->if_drv_flags & IFF_DRV_RUNNING) == 0)
945			break;
946
947		IFQ_DRV_DEQUEUE(&ifp->if_snd, m);
948		if (m == NULL)
949			break;
950
951		if (m->m_pkthdr.len > (int)(MCLBYTES - ETHER_HDR_LEN +
952		    ETHER_CRC_LEN - sizeof(sc->sc_txd))) {
953			DPRINTF("packet len is too big: %d\n",
954			    m->m_pkthdr.len);
955			break;
956		}
957		pc = usbd_xfer_get_frame(xfer, 0);
958
959		sc->sc_txd.hip.len = htobe16(m->m_pkthdr.len +
960		    ETHER_HDR_LEN + ETHER_CRC_LEN);
961		size = sizeof(sc->sc_txd);
962
963		usbd_copy_in(pc, 0, &sc->sc_txd, size);
964		usbd_m_copy_in(pc, size, m, 0, m->m_pkthdr.len);
965		usbd_xfer_set_frame_len(xfer, 0, m->m_pkthdr.len +
966		    size + ETHER_CRC_LEN);
967
968		BPF_MTAP(ifp, m);
969
970		m_freem(m);
971
972		usbd_transfer_submit(xfer);
973		break;
974
975	default:			/* Error */
976		DPRINTF("USB transfer error, %s\n",
977		    usbd_errstr(error));
978		if_inc_counter(ifp, IFCOUNTER_OERRORS, 1);
979
980		if (error != USB_ERR_CANCELLED) {
981			usbd_xfer_set_stall(xfer);
982			if_inc_counter(ifp, IFCOUNTER_IERRORS, 1);
983			goto tr_setup;
984		}
985		break;
986	}
987}
988
989static void
990usie_if_status_callback(struct usb_xfer *xfer, usb_error_t error)
991{
992	struct usie_softc *sc = usbd_xfer_softc(xfer);
993	struct usb_page_cache *pc;
994	struct usb_cdc_notification cdc;
995	uint32_t actlen;
996
997	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
998
999	switch (USB_GET_STATE(xfer)) {
1000	case USB_ST_TRANSFERRED:
1001		DPRINTFN(4, "info received, actlen=%d\n", actlen);
1002
1003		/* usb_cdc_notification - .data[16] */
1004		if (actlen < (sizeof(cdc) - 16)) {
1005			DPRINTF("data too short %d\n", actlen);
1006			goto tr_setup;
1007		}
1008		pc = usbd_xfer_get_frame(xfer, 0);
1009		usbd_copy_out(pc, 0, &cdc, (sizeof(cdc) - 16));
1010
1011		DPRINTFN(4, "bNotification=%x\n", cdc.bNotification);
1012
1013		if (cdc.bNotification & UCDC_N_RESPONSE_AVAILABLE) {
1014			taskqueue_enqueue(taskqueue_thread,
1015			    &sc->sc_if_status_task);
1016		}
1017		/* fall though */
1018	case USB_ST_SETUP:
1019tr_setup:
1020		usbd_xfer_set_frame_len(xfer, 0, usbd_xfer_max_len(xfer));
1021		usbd_transfer_submit(xfer);
1022		break;
1023
1024	default:			/* Error */
1025		DPRINTF("USB transfer error, %s\n",
1026		    usbd_errstr(error));
1027
1028		if (error != USB_ERR_CANCELLED) {
1029			usbd_xfer_set_stall(xfer);
1030			goto tr_setup;
1031		}
1032		break;
1033	}
1034}
1035
1036static void
1037usie_if_sync_to(void *arg)
1038{
1039	struct usie_softc *sc = arg;
1040
1041	taskqueue_enqueue(taskqueue_thread, &sc->sc_if_sync_task);
1042}
1043
1044static void
1045usie_if_sync_cb(void *arg, int pending)
1046{
1047	struct usie_softc *sc = arg;
1048
1049	mtx_lock(&sc->sc_mtx);
1050
1051	/* call twice */
1052	usie_if_cmd(sc, USIE_HIP_SYNC2M);
1053	usie_if_cmd(sc, USIE_HIP_SYNC2M);
1054
1055	usb_callout_reset(&sc->sc_if_sync_ch, 2 * hz, usie_if_sync_to, sc);
1056
1057	mtx_unlock(&sc->sc_mtx);
1058}
1059
1060static void
1061usie_if_status_cb(void *arg, int pending)
1062{
1063	struct usie_softc *sc = arg;
1064	struct ifnet *ifp = sc->sc_ifp;
1065	struct usb_device_request req;
1066	struct usie_hip *hip;
1067	struct usie_lsi *lsi;
1068	uint16_t actlen;
1069	uint8_t ntries;
1070	uint8_t pad;
1071
1072	mtx_lock(&sc->sc_mtx);
1073
1074	req.bmRequestType = UT_READ_CLASS_INTERFACE;
1075	req.bRequest = UCDC_GET_ENCAPSULATED_RESPONSE;
1076	USETW(req.wValue, 0);
1077	USETW(req.wIndex, sc->sc_if_ifnum);
1078	USETW(req.wLength, sizeof(sc->sc_status_temp));
1079
1080	for (ntries = 0; ntries != 10; ntries++) {
1081		int err;
1082
1083		err = usbd_do_request_flags(sc->sc_udev,
1084		    &sc->sc_mtx, &req, sc->sc_status_temp, USB_SHORT_XFER_OK,
1085		    &actlen, USB_DEFAULT_TIMEOUT);
1086
1087		if (err == 0)
1088			break;
1089
1090		DPRINTF("Control request failed: %s %d/10\n",
1091		    usbd_errstr(err), ntries);
1092
1093		usb_pause_mtx(&sc->sc_mtx, USB_MS_TO_TICKS(10));
1094	}
1095
1096	if (ntries == 10) {
1097		mtx_unlock(&sc->sc_mtx);
1098		DPRINTF("Timeout\n");
1099		return;
1100	}
1101
1102	hip = (struct usie_hip *)sc->sc_status_temp;
1103
1104	pad = (hip->id & USIE_HIP_PAD) ? 1 : 0;
1105
1106	DPRINTF("hip.id=%x hip.len=%d actlen=%u pad=%d\n",
1107	    hip->id, be16toh(hip->len), actlen, pad);
1108
1109	switch (hip->id & USIE_HIP_MASK) {
1110	case USIE_HIP_SYNC2H:
1111		usie_if_cmd(sc, USIE_HIP_SYNC2M);
1112		break;
1113	case USIE_HIP_RESTR:
1114		usb_callout_stop(&sc->sc_if_sync_ch);
1115		break;
1116	case USIE_HIP_UMTS:
1117		lsi = (struct usie_lsi *)(
1118		    sc->sc_status_temp + sizeof(struct usie_hip) + pad);
1119
1120		DPRINTF("lsi.proto=%x lsi.len=%d\n", lsi->proto,
1121		    be16toh(lsi->len));
1122
1123		if (lsi->proto != USIE_LSI_UMTS)
1124			break;
1125
1126		if (lsi->area == USIE_LSI_AREA_NO ||
1127		    lsi->area == USIE_LSI_AREA_NODATA) {
1128			device_printf(sc->sc_dev, "no service available\n");
1129			break;
1130		}
1131		if (lsi->state == USIE_LSI_STATE_IDLE) {
1132			DPRINTF("lsi.state=%x\n", lsi->state);
1133			break;
1134		}
1135		DPRINTF("ctx=%x\n", hip->param);
1136		sc->sc_txd.hip.param = hip->param;
1137
1138		sc->sc_net.addr_len = lsi->pdp_addr_len;
1139		memcpy(&sc->sc_net.dns1_addr, &lsi->dns1_addr, 16);
1140		memcpy(&sc->sc_net.dns2_addr, &lsi->dns2_addr, 16);
1141		memcpy(sc->sc_net.pdp_addr, lsi->pdp_addr, 16);
1142		memcpy(sc->sc_net.gw_addr, lsi->gw_addr, 16);
1143		ifp->if_flags |= IFF_UP;
1144		ifp->if_drv_flags |= IFF_DRV_RUNNING;
1145
1146		device_printf(sc->sc_dev, "IP Addr=%d.%d.%d.%d\n",
1147		    *lsi->pdp_addr, *(lsi->pdp_addr + 1),
1148		    *(lsi->pdp_addr + 2), *(lsi->pdp_addr + 3));
1149		device_printf(sc->sc_dev, "Gateway Addr=%d.%d.%d.%d\n",
1150		    *lsi->gw_addr, *(lsi->gw_addr + 1),
1151		    *(lsi->gw_addr + 2), *(lsi->gw_addr + 3));
1152		device_printf(sc->sc_dev, "Prim NS Addr=%d.%d.%d.%d\n",
1153		    *lsi->dns1_addr, *(lsi->dns1_addr + 1),
1154		    *(lsi->dns1_addr + 2), *(lsi->dns1_addr + 3));
1155		device_printf(sc->sc_dev, "Scnd NS Addr=%d.%d.%d.%d\n",
1156		    *lsi->dns2_addr, *(lsi->dns2_addr + 1),
1157		    *(lsi->dns2_addr + 2), *(lsi->dns2_addr + 3));
1158
1159		usie_cns_req(sc, USIE_CNS_ID_RSSI, USIE_CNS_OB_RSSI);
1160		break;
1161
1162	case USIE_HIP_RCGI:
1163		/* ignore, workaround for sloppy windows */
1164		break;
1165	default:
1166		DPRINTF("undefined msgid: %x\n", hip->id);
1167		break;
1168	}
1169
1170	mtx_unlock(&sc->sc_mtx);
1171}
1172
1173static void
1174usie_if_start(struct ifnet *ifp)
1175{
1176	struct usie_softc *sc = ifp->if_softc;
1177
1178	if (!(ifp->if_drv_flags & IFF_DRV_RUNNING)) {
1179		DPRINTF("Not running\n");
1180		return;
1181	}
1182	mtx_lock(&sc->sc_mtx);
1183	usbd_transfer_start(sc->sc_if_xfer[USIE_IF_TX]);
1184	mtx_unlock(&sc->sc_mtx);
1185
1186	DPRINTFN(3, "interface started\n");
1187}
1188
1189static int
1190usie_if_output(struct ifnet *ifp, struct mbuf *m, const struct sockaddr *dst,
1191    struct route *ro)
1192{
1193	int err;
1194
1195	DPRINTF("proto=%x\n", dst->sa_family);
1196
1197	switch (dst->sa_family) {
1198#ifdef INET6
1199	case AF_INET6;
1200	/* fall though */
1201#endif
1202	case AF_INET:
1203		break;
1204
1205		/* silently drop dhclient packets */
1206	case AF_UNSPEC:
1207		m_freem(m);
1208		return (0);
1209
1210		/* drop other packet types */
1211	default:
1212		m_freem(m);
1213		return (EAFNOSUPPORT);
1214	}
1215
1216	err = (ifp->if_transmit)(ifp, m);
1217	if (err) {
1218		if_inc_counter(ifp, IFCOUNTER_OERRORS, 1);
1219		return (ENOBUFS);
1220	}
1221	if_inc_counter(ifp, IFCOUNTER_OPACKETS, 1);
1222
1223	return (0);
1224}
1225
1226static void
1227usie_if_init(void *arg)
1228{
1229	struct usie_softc *sc = arg;
1230	struct ifnet *ifp = sc->sc_ifp;
1231	uint8_t i;
1232
1233	mtx_lock(&sc->sc_mtx);
1234
1235	/* write tx descriptor */
1236	sc->sc_txd.hip.id = USIE_HIP_CTX;
1237	sc->sc_txd.hip.param = 0;	/* init value */
1238	sc->sc_txd.desc_type = htobe16(USIE_IP_TX);
1239
1240	for (i = 0; i != USIE_IF_N_XFER; i++)
1241		usbd_xfer_set_stall(sc->sc_if_xfer[i]);
1242
1243	usbd_transfer_start(sc->sc_uc_xfer[USIE_HIP_IF][USIE_UC_RX]);
1244	usbd_transfer_start(sc->sc_if_xfer[USIE_IF_STATUS]);
1245	usbd_transfer_start(sc->sc_if_xfer[USIE_IF_RX]);
1246
1247	/* if not running, initiate the modem */
1248	if (!(ifp->if_drv_flags & IFF_DRV_RUNNING))
1249		usie_cns_req(sc, USIE_CNS_ID_INIT, USIE_CNS_OB_LINK_UPDATE);
1250
1251	mtx_unlock(&sc->sc_mtx);
1252
1253	DPRINTF("ifnet initialized\n");
1254}
1255
1256static void
1257usie_if_stop(struct usie_softc *sc)
1258{
1259	usb_callout_drain(&sc->sc_if_sync_ch);
1260
1261	mtx_lock(&sc->sc_mtx);
1262
1263	/* usie_cns_req() clears IFF_* flags */
1264	usie_cns_req(sc, USIE_CNS_ID_STOP, USIE_CNS_OB_LINK_UPDATE);
1265
1266	usbd_transfer_stop(sc->sc_if_xfer[USIE_IF_TX]);
1267	usbd_transfer_stop(sc->sc_if_xfer[USIE_IF_RX]);
1268	usbd_transfer_stop(sc->sc_if_xfer[USIE_IF_STATUS]);
1269
1270	/* shutdown device */
1271	usie_if_cmd(sc, USIE_HIP_DOWN);
1272
1273	mtx_unlock(&sc->sc_mtx);
1274}
1275
1276static int
1277usie_if_ioctl(struct ifnet *ifp, u_long cmd, caddr_t data)
1278{
1279	struct usie_softc *sc = ifp->if_softc;
1280	struct ieee80211req *ireq;
1281	struct ieee80211req_sta_info si;
1282	struct ifmediareq *ifmr;
1283
1284	switch (cmd) {
1285	case SIOCSIFFLAGS:
1286		if (ifp->if_flags & IFF_UP) {
1287			if (!(ifp->if_drv_flags & IFF_DRV_RUNNING))
1288				usie_if_init(sc);
1289		} else {
1290			if (ifp->if_drv_flags & IFF_DRV_RUNNING)
1291				usie_if_stop(sc);
1292		}
1293		break;
1294
1295	case SIOCSIFCAP:
1296		if (!(ifp->if_drv_flags & IFF_DRV_RUNNING)) {
1297			device_printf(sc->sc_dev,
1298			    "Connect to the network first.\n");
1299			break;
1300		}
1301		mtx_lock(&sc->sc_mtx);
1302		usie_cns_req(sc, USIE_CNS_ID_RSSI, USIE_CNS_OB_RSSI);
1303		mtx_unlock(&sc->sc_mtx);
1304		break;
1305
1306	case SIOCG80211:
1307		ireq = (struct ieee80211req *)data;
1308
1309		if (ireq->i_type != IEEE80211_IOC_STA_INFO)
1310			break;
1311
1312		memset(&si, 0, sizeof(si));
1313		si.isi_len = sizeof(si);
1314		/*
1315		 * ifconfig expects RSSI in 0.5dBm units
1316		 * relative to the noise floor.
1317		 */
1318		si.isi_rssi = 2 * sc->sc_rssi;
1319		if (copyout(&si, (uint8_t *)ireq->i_data + 8,
1320		    sizeof(struct ieee80211req_sta_info)))
1321			DPRINTF("copyout failed\n");
1322		DPRINTF("80211\n");
1323		break;
1324
1325	case SIOCGIFMEDIA:		/* to fool ifconfig */
1326		ifmr = (struct ifmediareq *)data;
1327		ifmr->ifm_count = 1;
1328		DPRINTF("media\n");
1329		break;
1330
1331	case SIOCSIFADDR:
1332		break;
1333
1334	default:
1335		return (EINVAL);
1336	}
1337	return (0);
1338}
1339
1340static int
1341usie_do_request(struct usie_softc *sc, struct usb_device_request *req,
1342    void *data)
1343{
1344	int err = 0;
1345	int ntries;
1346
1347	mtx_assert(&sc->sc_mtx, MA_OWNED);
1348
1349	for (ntries = 0; ntries != 10; ntries++) {
1350		err = usbd_do_request(sc->sc_udev,
1351		    &sc->sc_mtx, req, data);
1352		if (err == 0)
1353			break;
1354
1355		DPRINTF("Control request failed: %s %d/10\n",
1356		    usbd_errstr(err), ntries);
1357
1358		usb_pause_mtx(&sc->sc_mtx, USB_MS_TO_TICKS(10));
1359	}
1360	return (err);
1361}
1362
1363static int
1364usie_if_cmd(struct usie_softc *sc, uint8_t cmd)
1365{
1366	struct usb_device_request req;
1367	struct usie_hip msg;
1368
1369	msg.len = 0;
1370	msg.id = cmd;
1371	msg.param = 0;
1372
1373	req.bmRequestType = UT_WRITE_CLASS_INTERFACE;
1374	req.bRequest = UCDC_SEND_ENCAPSULATED_COMMAND;
1375	USETW(req.wValue, 0);
1376	USETW(req.wIndex, sc->sc_if_ifnum);
1377	USETW(req.wLength, sizeof(msg));
1378
1379	DPRINTF("cmd=%x\n", cmd);
1380
1381	return (usie_do_request(sc, &req, &msg));
1382}
1383
1384static void
1385usie_cns_req(struct usie_softc *sc, uint32_t id, uint16_t obj)
1386{
1387	struct ifnet *ifp = sc->sc_ifp;
1388	struct mbuf *m;
1389	struct usb_xfer *xfer;
1390	struct usie_hip *hip;
1391	struct usie_cns *cns;
1392	uint8_t *param;
1393	uint8_t *tmp;
1394	uint8_t cns_len;
1395
1396	m = m_getcl(M_NOWAIT, MT_DATA, M_PKTHDR);
1397	if (__predict_false(m == NULL)) {
1398		DPRINTF("could not allocate mbuf\n");
1399		if_inc_counter(ifp, IFCOUNTER_IERRORS, 1);
1400		return;
1401	}
1402	/* to align usie_hip{} on 32 bit */
1403	m->m_data += 3;
1404	param = mtod(m, uint8_t *);
1405	*param++ = USIE_HIP_FRM_CHR;
1406	hip = (struct usie_hip *)param;
1407	cns = (struct usie_cns *)(hip + 1);
1408
1409	tmp = param + USIE_HIPCNS_MIN - 2;
1410
1411	switch (obj) {
1412	case USIE_CNS_OB_LINK_UPDATE:
1413		cns_len = 2;
1414		cns->op = USIE_CNS_OP_SET;
1415		*tmp++ = 1;		/* profile ID, always use 1 for now */
1416		*tmp++ = id == USIE_CNS_ID_INIT ? 1 : 0;
1417		break;
1418
1419	case USIE_CNS_OB_PROF_WRITE:
1420		cns_len = 245;
1421		cns->op = USIE_CNS_OP_SET;
1422		*tmp++ = 1;		/* profile ID, always use 1 for now */
1423		*tmp++ = 2;
1424		memcpy(tmp, &sc->sc_net, 34);
1425		memset(tmp + 35, 0, 245 - 36);
1426		tmp += 243;
1427		break;
1428
1429	case USIE_CNS_OB_RSSI:
1430		cns_len = 0;
1431		cns->op = USIE_CNS_OP_REQ;
1432		break;
1433
1434	default:
1435		DPRINTF("unsupported CnS object type\n");
1436		return;
1437	}
1438	*tmp = USIE_HIP_FRM_CHR;
1439
1440	hip->len = htobe16(sizeof(struct usie_cns) + cns_len);
1441	hip->id = USIE_HIP_CNS2M;
1442	hip->param = 0;			/* none for CnS */
1443
1444	cns->obj = htobe16(obj);
1445	cns->id = htobe32(id);
1446	cns->len = cns_len;
1447	cns->rsv0 = cns->rsv1 = 0;	/* always '0' */
1448
1449	param = (uint8_t *)(cns + 1);
1450
1451	DPRINTF("param: %16D\n", param, ":");
1452
1453	m->m_pkthdr.len = m->m_len = USIE_HIPCNS_MIN + cns_len + 2;
1454
1455	xfer = sc->sc_uc_xfer[USIE_HIP_IF][USIE_UC_TX];
1456
1457	if (usbd_xfer_get_priv(xfer) == NULL) {
1458		usbd_xfer_set_priv(xfer, m);
1459		usbd_transfer_start(xfer);
1460	} else {
1461		DPRINTF("Dropped CNS event\n");
1462		m_freem(m);
1463	}
1464}
1465
1466static void
1467usie_cns_rsp(struct usie_softc *sc, struct usie_cns *cns)
1468{
1469	struct ifnet *ifp = sc->sc_ifp;
1470
1471	DPRINTF("received CnS\n");
1472
1473	switch (be16toh(cns->obj)) {
1474	case USIE_CNS_OB_LINK_UPDATE:
1475		if (be32toh(cns->id) & USIE_CNS_ID_INIT)
1476			usie_if_sync_to(sc);
1477		else if (be32toh(cns->id) & USIE_CNS_ID_STOP) {
1478			ifp->if_flags &= ~IFF_UP;
1479			ifp->if_drv_flags &=
1480			    ~(IFF_DRV_RUNNING | IFF_DRV_OACTIVE);
1481		} else
1482			DPRINTF("undefined link update\n");
1483		break;
1484
1485	case USIE_CNS_OB_RSSI:
1486		sc->sc_rssi = be16toh(*(int16_t *)(cns + 1));
1487		if (sc->sc_rssi <= 0)
1488			device_printf(sc->sc_dev, "No signal\n");
1489		else {
1490			device_printf(sc->sc_dev, "RSSI=%ddBm\n",
1491			    sc->sc_rssi - 110);
1492		}
1493		break;
1494
1495	case USIE_CNS_OB_PROF_WRITE:
1496		break;
1497
1498	case USIE_CNS_OB_PDP_READ:
1499		break;
1500
1501	default:
1502		DPRINTF("undefined CnS\n");
1503		break;
1504	}
1505}
1506
1507static void
1508usie_hip_rsp(struct usie_softc *sc, uint8_t *rsp, uint32_t len)
1509{
1510	struct usie_hip *hip;
1511	struct usie_cns *cns;
1512	uint32_t i;
1513	uint32_t j;
1514	uint32_t off;
1515	uint8_t tmp[USIE_HIPCNS_MAX] __aligned(4);
1516
1517	for (off = 0; (off + USIE_HIPCNS_MIN) <= len; off++) {
1518
1519		uint8_t pad;
1520
1521		while ((off < len) && (rsp[off] == USIE_HIP_FRM_CHR))
1522			off++;
1523
1524		/* Unstuff the bytes */
1525		for (i = j = 0; ((i + off) < len) &&
1526		    (j < USIE_HIPCNS_MAX); i++) {
1527
1528			if (rsp[i + off] == USIE_HIP_FRM_CHR)
1529				break;
1530
1531			if (rsp[i + off] == USIE_HIP_ESC_CHR) {
1532				if ((i + off + 1) >= len)
1533					break;
1534				tmp[j++] = rsp[i++ + off + 1] ^ 0x20;
1535			} else {
1536				tmp[j++] = rsp[i + off];
1537			}
1538		}
1539
1540		off += i;
1541
1542		DPRINTF("frame len=%d\n", j);
1543
1544		if (j < sizeof(struct usie_hip)) {
1545			DPRINTF("too little data\n");
1546			break;
1547		}
1548		/*
1549		 * Make sure we are not reading the stack if something
1550		 * is wrong.
1551		 */
1552		memset(tmp + j, 0, sizeof(tmp) - j);
1553
1554		hip = (struct usie_hip *)tmp;
1555
1556		DPRINTF("hip: len=%d msgID=%02x, param=%02x\n",
1557		    be16toh(hip->len), hip->id, hip->param);
1558
1559		pad = (hip->id & USIE_HIP_PAD) ? 1 : 0;
1560
1561		if ((hip->id & USIE_HIP_MASK) == USIE_HIP_CNS2H) {
1562			cns = (struct usie_cns *)(((uint8_t *)(hip + 1)) + pad);
1563
1564			if (j < (sizeof(struct usie_cns) +
1565			    sizeof(struct usie_hip) + pad)) {
1566				DPRINTF("too little data\n");
1567				break;
1568			}
1569			DPRINTF("cns: obj=%04x, op=%02x, rsv0=%02x, "
1570			    "app=%08x, rsv1=%02x, len=%d\n",
1571			    be16toh(cns->obj), cns->op, cns->rsv0,
1572			    be32toh(cns->id), cns->rsv1, cns->len);
1573
1574			if (cns->op & USIE_CNS_OP_ERR)
1575				DPRINTF("CnS error response\n");
1576			else
1577				usie_cns_rsp(sc, cns);
1578
1579			i = sizeof(struct usie_hip) + pad + sizeof(struct usie_cns);
1580			j = cns->len;
1581		} else {
1582			i = sizeof(struct usie_hip) + pad;
1583			j = be16toh(hip->len);
1584		}
1585#ifdef	USB_DEBUG
1586		if (usie_debug == 0)
1587			continue;
1588
1589		while (i < USIE_HIPCNS_MAX && j > 0) {
1590			DPRINTF("param[0x%02x] = 0x%02x\n", i, tmp[i]);
1591			i++;
1592			j--;
1593		}
1594#endif
1595	}
1596}
1597
1598static int
1599usie_driver_loaded(struct module *mod, int what, void *arg)
1600{
1601	switch (what) {
1602	case MOD_LOAD:
1603		/* register autoinstall handler */
1604		usie_etag = EVENTHANDLER_REGISTER(usb_dev_configured,
1605		    usie_autoinst, NULL, EVENTHANDLER_PRI_ANY);
1606		break;
1607	case MOD_UNLOAD:
1608		EVENTHANDLER_DEREGISTER(usb_dev_configured, usie_etag);
1609		break;
1610	default:
1611		return (EOPNOTSUPP);
1612	}
1613	return (0);
1614}
1615
1616