[thirdparty/linux.git] / drivers / bluetooth / bfusb.c

// SPDX-License-Identifier: GPL-2.0-or-later
/*
 *
 *  AVM BlueFRITZ! USB driver
 *
 *  Copyright (C) 2003-2006  Marcel Holtmann <marcel@holtmann.org>
 */

#include <linux/module.h>

#include <linux/kernel.h>
#include <linux/init.h>
#include <linux/slab.h>
#include <linux/types.h>
#include <linux/errno.h>
#include <linux/skbuff.h>

#include <linux/device.h>
#include <linux/firmware.h>

#include <linux/usb.h>

#include <net/bluetooth/bluetooth.h>
#include <net/bluetooth/hci_core.h>

#define VERSION "1.2"

static struct usb_driver bfusb_driver;

static const struct usb_device_id bfusb_table[] = {
	/* AVM BlueFRITZ! USB */
	{ USB_DEVICE(0x057c, 0x2200) },

	{ }	/* Terminating entry */
};

MODULE_DEVICE_TABLE(usb, bfusb_table);

#define BFUSB_MAX_BLOCK_SIZE	256

#define BFUSB_BLOCK_TIMEOUT	3000

#define BFUSB_TX_PROCESS	1
#define BFUSB_TX_WAKEUP		2

#define BFUSB_MAX_BULK_TX	2
#define BFUSB_MAX_BULK_RX	2

struct bfusb_data {
	struct hci_dev		*hdev;

	unsigned long		state;

	struct usb_device	*udev;

	unsigned int		bulk_in_ep;
	unsigned int		bulk_out_ep;
	unsigned int		bulk_pkt_size;

	rwlock_t		lock;

	struct sk_buff_head	transmit_q;

	struct sk_buff		*reassembly;

	atomic_t		pending_tx;
	struct sk_buff_head	pending_q;
	struct sk_buff_head	completed_q;
};

struct bfusb_data_scb {
	struct urb *urb;
};

static void bfusb_tx_complete(struct urb *urb);
static void bfusb_rx_complete(struct urb *urb);

static struct urb *bfusb_get_completed(struct bfusb_data *data)
{
	struct sk_buff *skb;
	struct urb *urb = NULL;

	BT_DBG("bfusb %p", data);

	skb = skb_dequeue(&data->completed_q);
	if (skb) {
		urb = ((struct bfusb_data_scb *) skb->cb)->urb;
		kfree_skb(skb);
	}

	return urb;
}

static void bfusb_unlink_urbs(struct bfusb_data *data)
{
	struct sk_buff *skb;
	struct urb *urb;

	BT_DBG("bfusb %p", data);

	while ((skb = skb_dequeue(&data->pending_q))) {
		urb = ((struct bfusb_data_scb *) skb->cb)->urb;
		usb_kill_urb(urb);
		skb_queue_tail(&data->completed_q, skb);
	}

	while ((urb = bfusb_get_completed(data)))
		usb_free_urb(urb);
}

static int bfusb_send_bulk(struct bfusb_data *data, struct sk_buff *skb)
{
	struct bfusb_data_scb *scb = (void *) skb->cb;
	struct urb *urb = bfusb_get_completed(data);
	int err, pipe;

	BT_DBG("bfusb %p skb %p len %d", data, skb, skb->len);

	if (!urb) {
		urb = usb_alloc_urb(0, GFP_ATOMIC);
		if (!urb)
			return -ENOMEM;
	}

	pipe = usb_sndbulkpipe(data->udev, data->bulk_out_ep);

	usb_fill_bulk_urb(urb, data->udev, pipe, skb->data, skb->len,
			bfusb_tx_complete, skb);

	scb->urb = urb;

	skb_queue_tail(&data->pending_q, skb);

	err = usb_submit_urb(urb, GFP_ATOMIC);
	if (err) {
		BT_ERR("%s bulk tx submit failed urb %p err %d", 
					data->hdev->name, urb, err);
		skb_unlink(skb, &data->pending_q);
		usb_free_urb(urb);
	} else
		atomic_inc(&data->pending_tx);

	return err;
}

static void bfusb_tx_wakeup(struct bfusb_data *data)
{
	struct sk_buff *skb;

	BT_DBG("bfusb %p", data);

	if (test_and_set_bit(BFUSB_TX_PROCESS, &data->state)) {
		set_bit(BFUSB_TX_WAKEUP, &data->state);
		return;
	}

	do {
		clear_bit(BFUSB_TX_WAKEUP, &data->state);

		while ((atomic_read(&data->pending_tx) < BFUSB_MAX_BULK_TX) &&
				(skb = skb_dequeue(&data->transmit_q))) {
			if (bfusb_send_bulk(data, skb) < 0) {
				skb_queue_head(&data->transmit_q, skb);
				break;
			}
		}

	} while (test_bit(BFUSB_TX_WAKEUP, &data->state));

	clear_bit(BFUSB_TX_PROCESS, &data->state);
}

static void bfusb_tx_complete(struct urb *urb)
{
	struct sk_buff *skb = (struct sk_buff *) urb->context;
	struct bfusb_data *data = (struct bfusb_data *) skb->dev;

	BT_DBG("bfusb %p urb %p skb %p len %d", data, urb, skb, skb->len);

	atomic_dec(&data->pending_tx);

	if (!test_bit(HCI_RUNNING, &data->hdev->flags))
		return;

	if (!urb->status)
		data->hdev->stat.byte_tx += skb->len;
	else
		data->hdev->stat.err_tx++;

	read_lock(&data->lock);

	skb_unlink(skb, &data->pending_q);
	skb_queue_tail(&data->completed_q, skb);

	bfusb_tx_wakeup(data);

	read_unlock(&data->lock);
}


static int bfusb_rx_submit(struct bfusb_data *data, struct urb *urb)
{
	struct bfusb_data_scb *scb;
	struct sk_buff *skb;
	int err, pipe, size = HCI_MAX_FRAME_SIZE + 32;

	BT_DBG("bfusb %p urb %p", data, urb);

	if (!urb) {
		urb = usb_alloc_urb(0, GFP_ATOMIC);
		if (!urb)
			return -ENOMEM;
	}

	skb = bt_skb_alloc(size, GFP_ATOMIC);
	if (!skb) {
		usb_free_urb(urb);
		return -ENOMEM;
	}

	skb->dev = (void *) data;

	scb = (struct bfusb_data_scb *) skb->cb;
	scb->urb = urb;

	pipe = usb_rcvbulkpipe(data->udev, data->bulk_in_ep);

	usb_fill_bulk_urb(urb, data->udev, pipe, skb->data, size,
			bfusb_rx_complete, skb);

	skb_queue_tail(&data->pending_q, skb);

	err = usb_submit_urb(urb, GFP_ATOMIC);
	if (err) {
		BT_ERR("%s bulk rx submit failed urb %p err %d",
					data->hdev->name, urb, err);
		skb_unlink(skb, &data->pending_q);
		kfree_skb(skb);
		usb_free_urb(urb);
	}

	return err;
}

static inline int bfusb_recv_block(struct bfusb_data *data, int hdr, unsigned char *buf, int len)
{
	BT_DBG("bfusb %p hdr 0x%02x data %p len %d", data, hdr, buf, len);

	if (hdr & 0x10) {
		BT_ERR("%s error in block", data->hdev->name);
		kfree_skb(data->reassembly);
		data->reassembly = NULL;
		return -EIO;
	}

	if (hdr & 0x04) {
		struct sk_buff *skb;
		unsigned char pkt_type;
		int pkt_len = 0;

		if (data->reassembly) {
			BT_ERR("%s unexpected start block", data->hdev->name);
			kfree_skb(data->reassembly);
			data->reassembly = NULL;
		}

		if (len < 1) {
			BT_ERR("%s no packet type found", data->hdev->name);
			return -EPROTO;
		}

		pkt_type = *buf++; len--;

		switch (pkt_type) {
		case HCI_EVENT_PKT:
			if (len >= HCI_EVENT_HDR_SIZE) {
				struct hci_event_hdr *hdr = (struct hci_event_hdr *) buf;
				pkt_len = HCI_EVENT_HDR_SIZE + hdr->plen;
			} else {
				BT_ERR("%s event block is too short", data->hdev->name);
				return -EILSEQ;
			}
			break;

		case HCI_ACLDATA_PKT:
			if (len >= HCI_ACL_HDR_SIZE) {
				struct hci_acl_hdr *hdr = (struct hci_acl_hdr *) buf;
				pkt_len = HCI_ACL_HDR_SIZE + __le16_to_cpu(hdr->dlen);
			} else {
				BT_ERR("%s data block is too short", data->hdev->name);
				return -EILSEQ;
			}
			break;

		case HCI_SCODATA_PKT:
			if (len >= HCI_SCO_HDR_SIZE) {
				struct hci_sco_hdr *hdr = (struct hci_sco_hdr *) buf;
				pkt_len = HCI_SCO_HDR_SIZE + hdr->dlen;
			} else {
				BT_ERR("%s audio block is too short", data->hdev->name);
				return -EILSEQ;
			}
			break;
		}

		skb = bt_skb_alloc(pkt_len, GFP_ATOMIC);
		if (!skb) {
			BT_ERR("%s no memory for the packet", data->hdev->name);
			return -ENOMEM;
		}

		hci_skb_pkt_type(skb) = pkt_type;

		data->reassembly = skb;
	} else {
		if (!data->reassembly) {
			BT_ERR("%s unexpected continuation block", data->hdev->name);
			return -EIO;
		}
	}

	if (len > 0)
		skb_put_data(data->reassembly, buf, len);

	if (hdr & 0x08) {
		hci_recv_frame(data->hdev, data->reassembly);
		data->reassembly = NULL;
	}

	return 0;
}

static void bfusb_rx_complete(struct urb *urb)
{
	struct sk_buff *skb = (struct sk_buff *) urb->context;
	struct bfusb_data *data = (struct bfusb_data *) skb->dev;
	unsigned char *buf = urb->transfer_buffer;
	int count = urb->actual_length;
	int err, hdr, len;

	BT_DBG("bfusb %p urb %p skb %p len %d", data, urb, skb, skb->len);

	read_lock(&data->lock);

	if (!test_bit(HCI_RUNNING, &data->hdev->flags))
		goto unlock;

	if (urb->status || !count)
		goto resubmit;

	data->hdev->stat.byte_rx += count;

	skb_put(skb, count);

	while (count) {
		hdr = buf[0] | (buf[1] << 8);

		if (hdr & 0x4000) {
			len = 0;
			count -= 2;
			buf   += 2;
		} else {
			len = (buf[2] == 0) ? 256 : buf[2];
			count -= 3;
			buf   += 3;
		}

		if (count < len) {
			BT_ERR("%s block extends over URB buffer ranges",
					data->hdev->name);
		}

		if ((hdr & 0xe1) == 0xc1)
			bfusb_recv_block(data, hdr, buf, len);

		count -= len;
		buf   += len;
	}

	skb_unlink(skb, &data->pending_q);
	kfree_skb(skb);

	bfusb_rx_submit(data, urb);

	read_unlock(&data->lock);

	return;

resubmit:
	urb->dev = data->udev;

	err = usb_submit_urb(urb, GFP_ATOMIC);
	if (err) {
		BT_ERR("%s bulk resubmit failed urb %p err %d",
					data->hdev->name, urb, err);
	}

unlock:
	read_unlock(&data->lock);
}

static int bfusb_open(struct hci_dev *hdev)
{
	struct bfusb_data *data = hci_get_drvdata(hdev);
	unsigned long flags;
	int i, err;

	BT_DBG("hdev %p bfusb %p", hdev, data);

	write_lock_irqsave(&data->lock, flags);

	err = bfusb_rx_submit(data, NULL);
	if (!err) {
		for (i = 1; i < BFUSB_MAX_BULK_RX; i++)
			bfusb_rx_submit(data, NULL);
	}

	write_unlock_irqrestore(&data->lock, flags);

	return err;
}

static int bfusb_flush(struct hci_dev *hdev)
{
	struct bfusb_data *data = hci_get_drvdata(hdev);

	BT_DBG("hdev %p bfusb %p", hdev, data);

	skb_queue_purge(&data->transmit_q);

	return 0;
}

static int bfusb_close(struct hci_dev *hdev)
{
	struct bfusb_data *data = hci_get_drvdata(hdev);
	unsigned long flags;

	BT_DBG("hdev %p bfusb %p", hdev, data);

	write_lock_irqsave(&data->lock, flags);
	write_unlock_irqrestore(&data->lock, flags);

	bfusb_unlink_urbs(data);
	bfusb_flush(hdev);

	return 0;
}

static int bfusb_send_frame(struct hci_dev *hdev, struct sk_buff *skb)
{
	struct bfusb_data *data = hci_get_drvdata(hdev);
	struct sk_buff *nskb;
	unsigned char buf[3];
	int sent = 0, size, count;

	BT_DBG("hdev %p skb %p type %d len %d", hdev, skb,
	       hci_skb_pkt_type(skb), skb->len);

	switch (hci_skb_pkt_type(skb)) {
	case HCI_COMMAND_PKT:
		hdev->stat.cmd_tx++;
		break;
	case HCI_ACLDATA_PKT:
		hdev->stat.acl_tx++;
		break;
	case HCI_SCODATA_PKT:
		hdev->stat.sco_tx++;
		break;
	}

	/* Prepend skb with frame type */
	memcpy(skb_push(skb, 1), &hci_skb_pkt_type(skb), 1);

	count = skb->len;

	/* Max HCI frame size seems to be 1511 + 1 */
	nskb = bt_skb_alloc(count + 32, GFP_KERNEL);
	if (!nskb) {
		BT_ERR("Can't allocate memory for new packet");
		return -ENOMEM;
	}

	nskb->dev = (void *) data;

	while (count) {
		size = min_t(uint, count, BFUSB_MAX_BLOCK_SIZE);

		buf[0] = 0xc1 | ((sent == 0) ? 0x04 : 0) | ((count == size) ? 0x08 : 0);
		buf[1] = 0x00;
		buf[2] = (size == BFUSB_MAX_BLOCK_SIZE) ? 0 : size;

		skb_put_data(nskb, buf, 3);
		skb_copy_from_linear_data_offset(skb, sent, skb_put(nskb, size), size);

		sent  += size;
		count -= size;
	}

	/* Don't send frame with multiple size of bulk max packet */
	if ((nskb->len % data->bulk_pkt_size) == 0) {
		buf[0] = 0xdd;
		buf[1] = 0x00;
		skb_put_data(nskb, buf, 2);
	}

	read_lock(&data->lock);

	skb_queue_tail(&data->transmit_q, nskb);
	bfusb_tx_wakeup(data);

	read_unlock(&data->lock);

	kfree_skb(skb);

	return 0;
}

static int bfusb_load_firmware(struct bfusb_data *data,
			       const unsigned char *firmware, int count)
{
	unsigned char *buf;
	int err, pipe, len, size, sent = 0;

	BT_DBG("bfusb %p udev %p", data, data->udev);

	BT_INFO("BlueFRITZ! USB loading firmware");

	buf = kmalloc(BFUSB_MAX_BLOCK_SIZE + 3, GFP_KERNEL);
	if (!buf) {
		BT_ERR("Can't allocate memory chunk for firmware");
		return -ENOMEM;
	}

	pipe = usb_sndctrlpipe(data->udev, 0);

	if (usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
				0, 1, 0, NULL, 0, USB_CTRL_SET_TIMEOUT) < 0) {
		BT_ERR("Can't change to loading configuration");
		kfree(buf);
		return -EBUSY;
	}

	data->udev->toggle[0] = data->udev->toggle[1] = 0;

	pipe = usb_sndbulkpipe(data->udev, data->bulk_out_ep);

	while (count) {
		size = min_t(uint, count, BFUSB_MAX_BLOCK_SIZE + 3);

		memcpy(buf, firmware + sent, size);

		err = usb_bulk_msg(data->udev, pipe, buf, size,
					&len, BFUSB_BLOCK_TIMEOUT);

		if (err || (len != size)) {
			BT_ERR("Error in firmware loading");
			goto error;
		}

		sent  += size;
		count -= size;
	}

	err = usb_bulk_msg(data->udev, pipe, NULL, 0,
					&len, BFUSB_BLOCK_TIMEOUT);
	if (err < 0) {
		BT_ERR("Error in null packet request");
		goto error;
	}

	pipe = usb_sndctrlpipe(data->udev, 0);

	err = usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
				0, 2, 0, NULL, 0, USB_CTRL_SET_TIMEOUT);
	if (err < 0) {
		BT_ERR("Can't change to running configuration");
		goto error;
	}

	data->udev->toggle[0] = data->udev->toggle[1] = 0;

	BT_INFO("BlueFRITZ! USB device ready");

	kfree(buf);
	return 0;

error:
	kfree(buf);

	pipe = usb_sndctrlpipe(data->udev, 0);

	usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
				0, 0, 0, NULL, 0, USB_CTRL_SET_TIMEOUT);

	return err;
}

static int bfusb_probe(struct usb_interface *intf, const struct usb_device_id *id)
{
	const struct firmware *firmware;
	struct usb_device *udev = interface_to_usbdev(intf);
	struct usb_host_endpoint *bulk_out_ep;
	struct usb_host_endpoint *bulk_in_ep;
	struct hci_dev *hdev;
	struct bfusb_data *data;

	BT_DBG("intf %p id %p", intf, id);

	/* Check number of endpoints */
	if (intf->cur_altsetting->desc.bNumEndpoints < 2)
		return -EIO;

	bulk_out_ep = &intf->cur_altsetting->endpoint[0];
	bulk_in_ep  = &intf->cur_altsetting->endpoint[1];

	if (!bulk_out_ep || !bulk_in_ep) {
		BT_ERR("Bulk endpoints not found");
		goto done;
	}

	/* Initialize control structure and load firmware */
	data = devm_kzalloc(&intf->dev, sizeof(struct bfusb_data), GFP_KERNEL);
	if (!data)
		return -ENOMEM;

	data->udev = udev;
	data->bulk_in_ep    = bulk_in_ep->desc.bEndpointAddress;
	data->bulk_out_ep   = bulk_out_ep->desc.bEndpointAddress;
	data->bulk_pkt_size = le16_to_cpu(bulk_out_ep->desc.wMaxPacketSize);

	rwlock_init(&data->lock);

	data->reassembly = NULL;

	skb_queue_head_init(&data->transmit_q);
	skb_queue_head_init(&data->pending_q);
	skb_queue_head_init(&data->completed_q);

	if (request_firmware(&firmware, "bfubase.frm", &udev->dev) < 0) {
		BT_ERR("Firmware request failed");
		goto done;
	}

	BT_DBG("firmware data %p size %zu", firmware->data, firmware->size);

	if (bfusb_load_firmware(data, firmware->data, firmware->size) < 0) {
		BT_ERR("Firmware loading failed");
		goto release;
	}

	release_firmware(firmware);

	/* Initialize and register HCI device */
	hdev = hci_alloc_dev();
	if (!hdev) {
		BT_ERR("Can't allocate HCI device");
		goto done;
	}

	data->hdev = hdev;

	hdev->bus = HCI_USB;
	hci_set_drvdata(hdev, data);
	SET_HCIDEV_DEV(hdev, &intf->dev);

	hdev->open  = bfusb_open;
	hdev->close = bfusb_close;
	hdev->flush = bfusb_flush;
	hdev->send  = bfusb_send_frame;

	set_bit(HCI_QUIRK_BROKEN_LOCAL_COMMANDS, &hdev->quirks);

	if (hci_register_dev(hdev) < 0) {
		BT_ERR("Can't register HCI device");
		hci_free_dev(hdev);
		goto done;
	}

	usb_set_intfdata(intf, data);

	return 0;

release:
	release_firmware(firmware);

done:
	return -EIO;
}

static void bfusb_disconnect(struct usb_interface *intf)
{
	struct bfusb_data *data = usb_get_intfdata(intf);
	struct hci_dev *hdev = data->hdev;

	BT_DBG("intf %p", intf);

	if (!hdev)
		return;

	usb_set_intfdata(intf, NULL);

	bfusb_close(hdev);

	hci_unregister_dev(hdev);
	hci_free_dev(hdev);
}

static struct usb_driver bfusb_driver = {
	.name		= "bfusb",
	.probe		= bfusb_probe,
	.disconnect	= bfusb_disconnect,
	.id_table	= bfusb_table,
	.disable_hub_initiated_lpm = 1,
};

module_usb_driver(bfusb_driver);

MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
MODULE_DESCRIPTION("BlueFRITZ! USB driver ver " VERSION);
MODULE_VERSION(VERSION);
MODULE_LICENSE("GPL");
MODULE_FIRMWARE("bfubase.frm");
Commit	Line	Data
1a59d1b8	1	// SPDX-License-Identifier: GPL-2.0-or-later
1da177e4 LT	2	/*
	3	*
	4	* AVM BlueFRITZ! USB driver
	5	*
9c724357	6	* Copyright (C) 2003-2006 Marcel Holtmann <marcel@holtmann.org>
1da177e4 LT	7	*/
1da177e4 LT	8
1da177e4 LT	9	#include <linux/module.h>
	10
	11	#include <linux/kernel.h>
	12	#include <linux/init.h>
	13	#include <linux/slab.h>
	14	#include <linux/types.h>
1da177e4 LT	15	#include <linux/errno.h>
	16	#include <linux/skbuff.h>
	17
	18	#include <linux/device.h>
	19	#include <linux/firmware.h>
	20
	21	#include <linux/usb.h>
	22
	23	#include <net/bluetooth/bluetooth.h>
	24	#include <net/bluetooth/hci_core.h>
	25
943d56b0	26	#define VERSION "1.2"
1da177e4 LT	27
	28	static struct usb_driver bfusb_driver;
	29
9712d59a	30	static const struct usb_device_id bfusb_table[] = {
1da177e4 LT	31	/* AVM BlueFRITZ! USB */
	32	{ USB_DEVICE(0x057c, 0x2200) },
	33
	34	{ } /* Terminating entry */
	35	};
	36
	37	MODULE_DEVICE_TABLE(usb, bfusb_table);
	38
1da177e4 LT	39	#define BFUSB_MAX_BLOCK_SIZE 256
	40
	41	#define BFUSB_BLOCK_TIMEOUT 3000
	42
	43	#define BFUSB_TX_PROCESS 1
	44	#define BFUSB_TX_WAKEUP 2
	45
	46	#define BFUSB_MAX_BULK_TX 2
	47	#define BFUSB_MAX_BULK_RX 2
	48
9c724357	49	struct bfusb_data {
1da177e4 LT	50	struct hci_dev *hdev;
	51
	52	unsigned long state;
	53
	54	struct usb_device *udev;
	55
	56	unsigned int bulk_in_ep;
	57	unsigned int bulk_out_ep;
	58	unsigned int bulk_pkt_size;
	59
	60	rwlock_t lock;
	61
	62	struct sk_buff_head transmit_q;
	63
	64	struct sk_buff *reassembly;
	65
	66	atomic_t pending_tx;
	67	struct sk_buff_head pending_q;
	68	struct sk_buff_head completed_q;
	69	};
	70
9c724357	71	struct bfusb_data_scb {
1da177e4 LT	72	struct urb *urb;
	73	};
	74
7d12e780 DH	75	static void bfusb_tx_complete(struct urb *urb);
7d12e780 DH	76	static void bfusb_rx_complete(struct urb *urb);
1da177e4	77
9c724357	78	static struct urb bfusb_get_completed(struct bfusb_data data)
1da177e4 LT	79	{
	80	struct sk_buff *skb;
	81	struct urb *urb = NULL;
	82
9c724357	83	BT_DBG("bfusb %p", data);
1da177e4	84
9c724357	85	skb = skb_dequeue(&data->completed_q);
1da177e4	86	if (skb) {
9c724357	87	urb = ((struct bfusb_data_scb *) skb->cb)->urb;
1da177e4 LT	88	kfree_skb(skb);
	89	}
	90
	91	return urb;
	92	}
	93
9c724357	94	static void bfusb_unlink_urbs(struct bfusb_data *data)
1da177e4 LT	95	{
	96	struct sk_buff *skb;
	97	struct urb *urb;
	98
9c724357	99	BT_DBG("bfusb %p", data);
1da177e4	100
9c724357 MH	101	while ((skb = skb_dequeue(&data->pending_q))) {
9c724357 MH	102	urb = ((struct bfusb_data_scb *) skb->cb)->urb;
1da177e4	103	usb_kill_urb(urb);
9c724357	104	skb_queue_tail(&data->completed_q, skb);
1da177e4 LT	105	}
1da177e4 LT	106
9c724357	107	while ((urb = bfusb_get_completed(data)))
1da177e4 LT	108	usb_free_urb(urb);
	109	}
	110
9c724357	111	static int bfusb_send_bulk(struct bfusb_data data, struct sk_buff skb)
1da177e4	112	{
9c724357 MH	113	struct bfusb_data_scb scb = (void ) skb->cb;
9c724357 MH	114	struct urb *urb = bfusb_get_completed(data);
1da177e4 LT	115	int err, pipe;
1da177e4 LT	116
9c724357	117	BT_DBG("bfusb %p skb %p len %d", data, skb, skb->len);
1da177e4	118
a08b15e6 VI	119	if (!urb) {
	120	urb = usb_alloc_urb(0, GFP_ATOMIC);
	121	if (!urb)
	122	return -ENOMEM;
	123	}
1da177e4	124
9c724357	125	pipe = usb_sndbulkpipe(data->udev, data->bulk_out_ep);
1da177e4	126
9c724357	127	usb_fill_bulk_urb(urb, data->udev, pipe, skb->data, skb->len,
1da177e4 LT	128	bfusb_tx_complete, skb);
	129
	130	scb->urb = urb;
	131
9c724357	132	skb_queue_tail(&data->pending_q, skb);
1da177e4 LT	133
	134	err = usb_submit_urb(urb, GFP_ATOMIC);
	135	if (err) {
	136	BT_ERR("%s bulk tx submit failed urb %p err %d",
9c724357 MH	137	data->hdev->name, urb, err);
9c724357 MH	138	skb_unlink(skb, &data->pending_q);
1da177e4 LT	139	usb_free_urb(urb);
1da177e4 LT	140	} else
9c724357	141	atomic_inc(&data->pending_tx);
1da177e4 LT	142
	143	return err;
	144	}
	145
9c724357	146	static void bfusb_tx_wakeup(struct bfusb_data *data)
1da177e4 LT	147	{
	148	struct sk_buff *skb;
	149
9c724357	150	BT_DBG("bfusb %p", data);
1da177e4	151
9c724357 MH	152	if (test_and_set_bit(BFUSB_TX_PROCESS, &data->state)) {
9c724357 MH	153	set_bit(BFUSB_TX_WAKEUP, &data->state);
1da177e4 LT	154	return;
	155	}
	156
	157	do {
9c724357	158	clear_bit(BFUSB_TX_WAKEUP, &data->state);
1da177e4	159
9c724357 MH	160	while ((atomic_read(&data->pending_tx) < BFUSB_MAX_BULK_TX) &&
	161	(skb = skb_dequeue(&data->transmit_q))) {
	162	if (bfusb_send_bulk(data, skb) < 0) {
	163	skb_queue_head(&data->transmit_q, skb);
1da177e4 LT	164	break;
	165	}
	166	}
	167
9c724357	168	} while (test_bit(BFUSB_TX_WAKEUP, &data->state));
1da177e4	169
9c724357	170	clear_bit(BFUSB_TX_PROCESS, &data->state);
1da177e4 LT	171	}
1da177e4 LT	172
7d12e780	173	static void bfusb_tx_complete(struct urb *urb)
1da177e4 LT	174	{
1da177e4 LT	175	struct sk_buff skb = (struct sk_buff ) urb->context;
9c724357	176	struct bfusb_data data = (struct bfusb_data ) skb->dev;
1da177e4	177
9c724357	178	BT_DBG("bfusb %p urb %p skb %p len %d", data, urb, skb, skb->len);
1da177e4	179
9c724357	180	atomic_dec(&data->pending_tx);
1da177e4	181
9c724357	182	if (!test_bit(HCI_RUNNING, &data->hdev->flags))
1da177e4 LT	183	return;
	184
	185	if (!urb->status)
9c724357	186	data->hdev->stat.byte_tx += skb->len;
1da177e4	187	else
9c724357	188	data->hdev->stat.err_tx++;
1da177e4	189
9c724357	190	read_lock(&data->lock);
1da177e4	191
9c724357 MH	192	skb_unlink(skb, &data->pending_q);
9c724357 MH	193	skb_queue_tail(&data->completed_q, skb);
1da177e4	194
9c724357	195	bfusb_tx_wakeup(data);
1da177e4	196
9c724357	197	read_unlock(&data->lock);
1da177e4 LT	198	}
	199
	200
9c724357	201	static int bfusb_rx_submit(struct bfusb_data data, struct urb urb)
1da177e4	202	{
9c724357	203	struct bfusb_data_scb *scb;
1da177e4 LT	204	struct sk_buff *skb;
	205	int err, pipe, size = HCI_MAX_FRAME_SIZE + 32;
	206
a418b893	207	BT_DBG("bfusb %p urb %p", data, urb);
1da177e4	208
a08b15e6 VI	209	if (!urb) {
	210	urb = usb_alloc_urb(0, GFP_ATOMIC);
	211	if (!urb)
	212	return -ENOMEM;
	213	}
1da177e4	214
9c724357 MH	215	skb = bt_skb_alloc(size, GFP_ATOMIC);
9c724357 MH	216	if (!skb) {
1da177e4 LT	217	usb_free_urb(urb);
	218	return -ENOMEM;
	219	}
	220
9c724357	221	skb->dev = (void *) data;
1da177e4	222
9c724357	223	scb = (struct bfusb_data_scb *) skb->cb;
1da177e4 LT	224	scb->urb = urb;
1da177e4 LT	225
9c724357	226	pipe = usb_rcvbulkpipe(data->udev, data->bulk_in_ep);
1da177e4	227
9c724357	228	usb_fill_bulk_urb(urb, data->udev, pipe, skb->data, size,
1da177e4 LT	229	bfusb_rx_complete, skb);
1da177e4 LT	230
9c724357	231	skb_queue_tail(&data->pending_q, skb);
1da177e4 LT	232
	233	err = usb_submit_urb(urb, GFP_ATOMIC);
	234	if (err) {
	235	BT_ERR("%s bulk rx submit failed urb %p err %d",
9c724357 MH	236	data->hdev->name, urb, err);
9c724357 MH	237	skb_unlink(skb, &data->pending_q);
1da177e4 LT	238	kfree_skb(skb);
	239	usb_free_urb(urb);
	240	}
	241
	242	return err;
	243	}
	244
9c724357	245	static inline int bfusb_recv_block(struct bfusb_data data, int hdr, unsigned char buf, int len)
1da177e4	246	{
9c724357	247	BT_DBG("bfusb %p hdr 0x%02x data %p len %d", data, hdr, buf, len);
1da177e4 LT	248
1da177e4 LT	249	if (hdr & 0x10) {
9c724357	250	BT_ERR("%s error in block", data->hdev->name);
b1fb0683	251	kfree_skb(data->reassembly);
9c724357	252	data->reassembly = NULL;
1da177e4 LT	253	return -EIO;
	254	}
	255
	256	if (hdr & 0x04) {
	257	struct sk_buff *skb;
	258	unsigned char pkt_type;
	259	int pkt_len = 0;
	260
9c724357 MH	261	if (data->reassembly) {
	262	BT_ERR("%s unexpected start block", data->hdev->name);
	263	kfree_skb(data->reassembly);
	264	data->reassembly = NULL;
1da177e4 LT	265	}
	266
	267	if (len < 1) {
9c724357	268	BT_ERR("%s no packet type found", data->hdev->name);
1da177e4 LT	269	return -EPROTO;
	270	}
	271
9c724357	272	pkt_type = *buf++; len--;
1da177e4 LT	273
	274	switch (pkt_type) {
	275	case HCI_EVENT_PKT:
	276	if (len >= HCI_EVENT_HDR_SIZE) {
9c724357	277	struct hci_event_hdr hdr = (struct hci_event_hdr ) buf;
1da177e4 LT	278	pkt_len = HCI_EVENT_HDR_SIZE + hdr->plen;
1da177e4 LT	279	} else {
9c724357	280	BT_ERR("%s event block is too short", data->hdev->name);
1da177e4 LT	281	return -EILSEQ;
	282	}
	283	break;
	284
	285	case HCI_ACLDATA_PKT:
	286	if (len >= HCI_ACL_HDR_SIZE) {
9c724357	287	struct hci_acl_hdr hdr = (struct hci_acl_hdr ) buf;
1da177e4 LT	288	pkt_len = HCI_ACL_HDR_SIZE + __le16_to_cpu(hdr->dlen);
1da177e4 LT	289	} else {
9c724357	290	BT_ERR("%s data block is too short", data->hdev->name);
1da177e4 LT	291	return -EILSEQ;
	292	}
	293	break;
	294
	295	case HCI_SCODATA_PKT:
	296	if (len >= HCI_SCO_HDR_SIZE) {
9c724357	297	struct hci_sco_hdr hdr = (struct hci_sco_hdr ) buf;
1da177e4 LT	298	pkt_len = HCI_SCO_HDR_SIZE + hdr->dlen;
1da177e4 LT	299	} else {
9c724357	300	BT_ERR("%s audio block is too short", data->hdev->name);
1da177e4 LT	301	return -EILSEQ;
	302	}
	303	break;
	304	}
	305
	306	skb = bt_skb_alloc(pkt_len, GFP_ATOMIC);
	307	if (!skb) {
9c724357	308	BT_ERR("%s no memory for the packet", data->hdev->name);
1da177e4 LT	309	return -ENOMEM;
	310	}
	311
618e8bc2	312	hci_skb_pkt_type(skb) = pkt_type;
1da177e4	313
9c724357	314	data->reassembly = skb;
1da177e4	315	} else {
9c724357 MH	316	if (!data->reassembly) {
9c724357 MH	317	BT_ERR("%s unexpected continuation block", data->hdev->name);
1da177e4 LT	318	return -EIO;
	319	}
	320	}
	321
	322	if (len > 0)
59ae1d12	323	skb_put_data(data->reassembly, buf, len);
1da177e4 LT	324
1da177e4 LT	325	if (hdr & 0x08) {
e1a26170	326	hci_recv_frame(data->hdev, data->reassembly);
9c724357	327	data->reassembly = NULL;
1da177e4 LT	328	}
	329
	330	return 0;
	331	}
	332
7d12e780	333	static void bfusb_rx_complete(struct urb *urb)
1da177e4 LT	334	{
1da177e4 LT	335	struct sk_buff skb = (struct sk_buff ) urb->context;
9c724357	336	struct bfusb_data data = (struct bfusb_data ) skb->dev;
1da177e4 LT	337	unsigned char *buf = urb->transfer_buffer;
	338	int count = urb->actual_length;
	339	int err, hdr, len;
	340
a418b893	341	BT_DBG("bfusb %p urb %p skb %p len %d", data, urb, skb, skb->len);
1da177e4	342
9c724357	343	read_lock(&data->lock);
1da177e4	344
9c724357	345	if (!test_bit(HCI_RUNNING, &data->hdev->flags))
1da177e4 LT	346	goto unlock;
	347
	348	if (urb->status \|\| !count)
	349	goto resubmit;
	350
9c724357	351	data->hdev->stat.byte_rx += count;
1da177e4 LT	352
	353	skb_put(skb, count);
	354
	355	while (count) {
	356	hdr = buf[0] \| (buf[1] << 8);
	357
	358	if (hdr & 0x4000) {
	359	len = 0;
	360	count -= 2;
	361	buf += 2;
	362	} else {
	363	len = (buf[2] == 0) ? 256 : buf[2];
	364	count -= 3;
	365	buf += 3;
	366	}
	367
	368	if (count < len) {
	369	BT_ERR("%s block extends over URB buffer ranges",
9c724357	370	data->hdev->name);
1da177e4 LT	371	}
	372
	373	if ((hdr & 0xe1) == 0xc1)
9c724357	374	bfusb_recv_block(data, hdr, buf, len);
1da177e4 LT	375
	376	count -= len;
	377	buf += len;
	378	}
	379
9c724357	380	skb_unlink(skb, &data->pending_q);
1da177e4 LT	381	kfree_skb(skb);
1da177e4 LT	382
9c724357	383	bfusb_rx_submit(data, urb);
1da177e4	384
9c724357	385	read_unlock(&data->lock);
1da177e4 LT	386
	387	return;
	388
	389	resubmit:
9c724357	390	urb->dev = data->udev;
1da177e4 LT	391
	392	err = usb_submit_urb(urb, GFP_ATOMIC);
	393	if (err) {
	394	BT_ERR("%s bulk resubmit failed urb %p err %d",
9c724357	395	data->hdev->name, urb, err);
1da177e4 LT	396	}
	397
	398	unlock:
9c724357	399	read_unlock(&data->lock);
1da177e4 LT	400	}
1da177e4 LT	401
1da177e4 LT	402	static int bfusb_open(struct hci_dev *hdev)
1da177e4 LT	403	{
155961e8	404	struct bfusb_data *data = hci_get_drvdata(hdev);
1da177e4 LT	405	unsigned long flags;
	406	int i, err;
	407
9c724357	408	BT_DBG("hdev %p bfusb %p", hdev, data);
1da177e4	409
9c724357	410	write_lock_irqsave(&data->lock, flags);
1da177e4	411
9c724357	412	err = bfusb_rx_submit(data, NULL);
1da177e4 LT	413	if (!err) {
1da177e4 LT	414	for (i = 1; i < BFUSB_MAX_BULK_RX; i++)
9c724357	415	bfusb_rx_submit(data, NULL);
1da177e4 LT	416	}
1da177e4 LT	417
9c724357	418	write_unlock_irqrestore(&data->lock, flags);
1da177e4 LT	419
	420	return err;
	421	}
	422
	423	static int bfusb_flush(struct hci_dev *hdev)
	424	{
155961e8	425	struct bfusb_data *data = hci_get_drvdata(hdev);
1da177e4	426
9c724357	427	BT_DBG("hdev %p bfusb %p", hdev, data);
1da177e4	428
9c724357	429	skb_queue_purge(&data->transmit_q);
1da177e4 LT	430
	431	return 0;
	432	}
	433
	434	static int bfusb_close(struct hci_dev *hdev)
	435	{
155961e8	436	struct bfusb_data *data = hci_get_drvdata(hdev);
1da177e4 LT	437	unsigned long flags;
1da177e4 LT	438
9c724357	439	BT_DBG("hdev %p bfusb %p", hdev, data);
1da177e4	440
9c724357 MH	441	write_lock_irqsave(&data->lock, flags);
9c724357 MH	442	write_unlock_irqrestore(&data->lock, flags);
1da177e4	443
9c724357	444	bfusb_unlink_urbs(data);
1da177e4 LT	445	bfusb_flush(hdev);
	446
	447	return 0;
	448	}
	449
7bd8f09f	450	static int bfusb_send_frame(struct hci_dev hdev, struct sk_buff skb)
1da177e4	451	{
aae26277	452	struct bfusb_data *data = hci_get_drvdata(hdev);
1da177e4 LT	453	struct sk_buff *nskb;
	454	unsigned char buf[3];
	455	int sent = 0, size, count;
	456
618e8bc2 MH	457	BT_DBG("hdev %p skb %p type %d len %d", hdev, skb,
618e8bc2 MH	458	hci_skb_pkt_type(skb), skb->len);
1da177e4	459
618e8bc2	460	switch (hci_skb_pkt_type(skb)) {
1da177e4 LT	461	case HCI_COMMAND_PKT:
	462	hdev->stat.cmd_tx++;
	463	break;
	464	case HCI_ACLDATA_PKT:
	465	hdev->stat.acl_tx++;
	466	break;
	467	case HCI_SCODATA_PKT:
	468	hdev->stat.sco_tx++;
	469	break;
a03e33da	470	}
1da177e4 LT	471
1da177e4 LT	472	/* Prepend skb with frame type */
618e8bc2	473	memcpy(skb_push(skb, 1), &hci_skb_pkt_type(skb), 1);
1da177e4 LT	474
	475	count = skb->len;
	476
	477	/* Max HCI frame size seems to be 1511 + 1 */
6709514f	478	nskb = bt_skb_alloc(count + 32, GFP_KERNEL);
9c724357	479	if (!nskb) {
1da177e4 LT	480	BT_ERR("Can't allocate memory for new packet");
	481	return -ENOMEM;
	482	}
	483
9c724357	484	nskb->dev = (void *) data;
1da177e4 LT	485
	486	while (count) {
	487	size = min_t(uint, count, BFUSB_MAX_BLOCK_SIZE);
	488
	489	buf[0] = 0xc1 \| ((sent == 0) ? 0x04 : 0) \| ((count == size) ? 0x08 : 0);
	490	buf[1] = 0x00;
	491	buf[2] = (size == BFUSB_MAX_BLOCK_SIZE) ? 0 : size;
	492
59ae1d12	493	skb_put_data(nskb, buf, 3);
d626f62b	494	skb_copy_from_linear_data_offset(skb, sent, skb_put(nskb, size), size);
1da177e4 LT	495
	496	sent += size;
	497	count -= size;
	498	}
	499
	500	/* Don't send frame with multiple size of bulk max packet */
9c724357	501	if ((nskb->len % data->bulk_pkt_size) == 0) {
1da177e4 LT	502	buf[0] = 0xdd;
1da177e4 LT	503	buf[1] = 0x00;
59ae1d12	504	skb_put_data(nskb, buf, 2);
1da177e4 LT	505	}
1da177e4 LT	506
9c724357	507	read_lock(&data->lock);
1da177e4	508
9c724357 MH	509	skb_queue_tail(&data->transmit_q, nskb);
9c724357 MH	510	bfusb_tx_wakeup(data);
1da177e4	511
9c724357	512	read_unlock(&data->lock);
1da177e4 LT	513
	514	kfree_skb(skb);
	515
	516	return 0;
	517	}
	518
8187b4fb DW	519	static int bfusb_load_firmware(struct bfusb_data *data,
8187b4fb DW	520	const unsigned char *firmware, int count)
1da177e4 LT	521	{
	522	unsigned char *buf;
	523	int err, pipe, len, size, sent = 0;
	524
9c724357	525	BT_DBG("bfusb %p udev %p", data, data->udev);
1da177e4 LT	526
	527	BT_INFO("BlueFRITZ! USB loading firmware");
	528
7f103a0d DR	529	buf = kmalloc(BFUSB_MAX_BLOCK_SIZE + 3, GFP_KERNEL);
	530	if (!buf) {
	531	BT_ERR("Can't allocate memory chunk for firmware");
	532	return -ENOMEM;
	533	}
	534
9c724357	535	pipe = usb_sndctrlpipe(data->udev, 0);
1da177e4	536
9c724357	537	if (usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
1da177e4 LT	538	0, 1, 0, NULL, 0, USB_CTRL_SET_TIMEOUT) < 0) {
1da177e4 LT	539	BT_ERR("Can't change to loading configuration");
7f103a0d	540	kfree(buf);
1da177e4 LT	541	return -EBUSY;
	542	}
	543
9c724357	544	data->udev->toggle[0] = data->udev->toggle[1] = 0;
1da177e4	545
9c724357	546	pipe = usb_sndbulkpipe(data->udev, data->bulk_out_ep);
1da177e4 LT	547
	548	while (count) {
	549	size = min_t(uint, count, BFUSB_MAX_BLOCK_SIZE + 3);
	550
	551	memcpy(buf, firmware + sent, size);
	552
9c724357	553	err = usb_bulk_msg(data->udev, pipe, buf, size,
1da177e4 LT	554	&len, BFUSB_BLOCK_TIMEOUT);
	555
	556	if (err \|\| (len != size)) {
	557	BT_ERR("Error in firmware loading");
	558	goto error;
	559	}
	560
	561	sent += size;
	562	count -= size;
	563	}
	564
9c724357 MH	565	err = usb_bulk_msg(data->udev, pipe, NULL, 0,
	566	&len, BFUSB_BLOCK_TIMEOUT);
	567	if (err < 0) {
1da177e4 LT	568	BT_ERR("Error in null packet request");
	569	goto error;
	570	}
	571
9c724357	572	pipe = usb_sndctrlpipe(data->udev, 0);
1da177e4	573
9c724357 MH	574	err = usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
	575	0, 2, 0, NULL, 0, USB_CTRL_SET_TIMEOUT);
	576	if (err < 0) {
1da177e4 LT	577	BT_ERR("Can't change to running configuration");
	578	goto error;
	579	}
	580
9c724357	581	data->udev->toggle[0] = data->udev->toggle[1] = 0;
1da177e4 LT	582
	583	BT_INFO("BlueFRITZ! USB device ready");
	584
	585	kfree(buf);
	586	return 0;
	587
	588	error:
	589	kfree(buf);
	590
9c724357	591	pipe = usb_sndctrlpipe(data->udev, 0);
1da177e4	592
9c724357	593	usb_control_msg(data->udev, pipe, USB_REQ_SET_CONFIGURATION,
1da177e4 LT	594	0, 0, 0, NULL, 0, USB_CTRL_SET_TIMEOUT);
	595
	596	return err;
	597	}
	598
	599	static int bfusb_probe(struct usb_interface intf, const struct usb_device_id id)
	600	{
	601	const struct firmware *firmware;
	602	struct usb_device *udev = interface_to_usbdev(intf);
	603	struct usb_host_endpoint *bulk_out_ep;
	604	struct usb_host_endpoint *bulk_in_ep;
	605	struct hci_dev *hdev;
9c724357	606	struct bfusb_data *data;
1da177e4 LT	607
	608	BT_DBG("intf %p id %p", intf, id);
	609
1da177e4 LT	610	/* Check number of endpoints */
	611	if (intf->cur_altsetting->desc.bNumEndpoints < 2)
	612	return -EIO;
	613
	614	bulk_out_ep = &intf->cur_altsetting->endpoint[0];
	615	bulk_in_ep = &intf->cur_altsetting->endpoint[1];
	616
	617	if (!bulk_out_ep \|\| !bulk_in_ep) {
	618	BT_ERR("Bulk endpoints not found");
	619	goto done;
	620	}
	621
	622	/* Initialize control structure and load firmware */
0213cd8d	623	data = devm_kzalloc(&intf->dev, sizeof(struct bfusb_data), GFP_KERNEL);
f71e823b	624	if (!data)
7ddb6922	625	return -ENOMEM;
1da177e4	626
9c724357 MH	627	data->udev = udev;
	628	data->bulk_in_ep = bulk_in_ep->desc.bEndpointAddress;
	629	data->bulk_out_ep = bulk_out_ep->desc.bEndpointAddress;
	630	data->bulk_pkt_size = le16_to_cpu(bulk_out_ep->desc.wMaxPacketSize);
1da177e4	631
9c724357	632	rwlock_init(&data->lock);
1da177e4	633
9c724357	634	data->reassembly = NULL;
1da177e4	635
9c724357 MH	636	skb_queue_head_init(&data->transmit_q);
	637	skb_queue_head_init(&data->pending_q);
	638	skb_queue_head_init(&data->completed_q);
1da177e4 LT	639
	640	if (request_firmware(&firmware, "bfubase.frm", &udev->dev) < 0) {
	641	BT_ERR("Firmware request failed");
0213cd8d	642	goto done;
1da177e4 LT	643	}
1da177e4 LT	644
a418b893	645	BT_DBG("firmware data %p size %zu", firmware->data, firmware->size);
1da177e4	646
9c724357	647	if (bfusb_load_firmware(data, firmware->data, firmware->size) < 0) {
1da177e4 LT	648	BT_ERR("Firmware loading failed");
	649	goto release;
	650	}
	651
	652	release_firmware(firmware);
	653
	654	/* Initialize and register HCI device */
	655	hdev = hci_alloc_dev();
	656	if (!hdev) {
	657	BT_ERR("Can't allocate HCI device");
0213cd8d	658	goto done;
1da177e4 LT	659	}
1da177e4 LT	660
9c724357	661	data->hdev = hdev;
1da177e4	662
c13854ce	663	hdev->bus = HCI_USB;
155961e8	664	hci_set_drvdata(hdev, data);
1da177e4 LT	665	SET_HCIDEV_DEV(hdev, &intf->dev);
1da177e4 LT	666
19cf55a2 MH	667	hdev->open = bfusb_open;
	668	hdev->close = bfusb_close;
	669	hdev->flush = bfusb_flush;
	670	hdev->send = bfusb_send_frame;
1da177e4	671
9ef80d40 MH	672	set_bit(HCI_QUIRK_BROKEN_LOCAL_COMMANDS, &hdev->quirks);
9ef80d40 MH	673
1da177e4 LT	674	if (hci_register_dev(hdev) < 0) {
	675	BT_ERR("Can't register HCI device");
	676	hci_free_dev(hdev);
0213cd8d	677	goto done;
1da177e4 LT	678	}
1da177e4 LT	679
9c724357	680	usb_set_intfdata(intf, data);
1da177e4 LT	681
	682	return 0;
	683
	684	release:
	685	release_firmware(firmware);
	686
1da177e4 LT	687	done:
	688	return -EIO;
	689	}
	690
	691	static void bfusb_disconnect(struct usb_interface *intf)
	692	{
9c724357 MH	693	struct bfusb_data *data = usb_get_intfdata(intf);
9c724357 MH	694	struct hci_dev *hdev = data->hdev;
1da177e4 LT	695
	696	BT_DBG("intf %p", intf);
	697
	698	if (!hdev)
	699	return;
	700
	701	usb_set_intfdata(intf, NULL);
	702
	703	bfusb_close(hdev);
	704
13ea4015	705	hci_unregister_dev(hdev);
1da177e4 LT	706	hci_free_dev(hdev);
	707	}
	708
	709	static struct usb_driver bfusb_driver = {
1da177e4 LT	710	.name = "bfusb",
	711	.probe = bfusb_probe,
	712	.disconnect = bfusb_disconnect,
	713	.id_table = bfusb_table,
e1f12eb6	714	.disable_hub_initiated_lpm = 1,
1da177e4 LT	715	};
1da177e4 LT	716
93f1508c	717	module_usb_driver(bfusb_driver);
1da177e4	718
1da177e4 LT	719	MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
	720	MODULE_DESCRIPTION("BlueFRITZ! USB driver ver " VERSION);
	721	MODULE_VERSION(VERSION);
	722	MODULE_LICENSE("GPL");
2312119a	723	MODULE_FIRMWARE("bfubase.frm");