2
* QEMU Bluetooth HCI USB Transport Layer v1.0
4
* Copyright (C) 2007 OpenMoko, Inc.
5
* Copyright (C) 2008 Andrzej Zaborowski <balrog@zabor.org>
7
* This program is free software; you can redistribute it and/or
8
* modify it under the terms of the GNU General Public License as
9
* published by the Free Software Foundation; either version 2 or
10
* (at your option) version 3 of the License.
12
* This program is distributed in the hope that it will be useful,
13
* but WITHOUT ANY WARRANTY; without even the implied warranty of
14
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15
* GNU General Public License for more details.
17
* You should have received a copy of the GNU General Public License along
18
* with this program; if not, see <http://www.gnu.org/licenses/>.
21
#include "qemu-common.h"
34
#define CFIFO_LEN_MASK 255
35
#define DFIFO_LEN_MASK 4095
36
struct usb_hci_in_fifo_s {
37
uint8_t data[(DFIFO_LEN_MASK + 1) * 2];
41
} fifo[CFIFO_LEN_MASK + 1];
42
int dstart, dlen, dsize, start, len;
45
struct usb_hci_out_fifo_s {
48
} outcmd, outacl, outsco;
60
static const USBDescStrings desc_strings = {
61
[STR_MANUFACTURER] = "QEMU " QEMU_VERSION,
62
[STR_SERIALNUMBER] = "1",
65
static const USBDescIface desc_iface_bluetooth[] = {
67
.bInterfaceNumber = 0,
69
.bInterfaceClass = 0xe0, /* Wireless */
70
.bInterfaceSubClass = 0x01, /* Radio Frequency */
71
.bInterfaceProtocol = 0x01, /* Bluetooth */
72
.eps = (USBDescEndpoint[]) {
74
.bEndpointAddress = USB_DIR_IN | USB_EVT_EP,
75
.bmAttributes = USB_ENDPOINT_XFER_INT,
76
.wMaxPacketSize = 0x10,
80
.bEndpointAddress = USB_DIR_OUT | USB_ACL_EP,
81
.bmAttributes = USB_ENDPOINT_XFER_BULK,
82
.wMaxPacketSize = 0x40,
86
.bEndpointAddress = USB_DIR_IN | USB_ACL_EP,
87
.bmAttributes = USB_ENDPOINT_XFER_BULK,
88
.wMaxPacketSize = 0x40,
93
.bInterfaceNumber = 1,
94
.bAlternateSetting = 0,
96
.bInterfaceClass = 0xe0, /* Wireless */
97
.bInterfaceSubClass = 0x01, /* Radio Frequency */
98
.bInterfaceProtocol = 0x01, /* Bluetooth */
99
.eps = (USBDescEndpoint[]) {
101
.bEndpointAddress = USB_DIR_OUT | USB_SCO_EP,
102
.bmAttributes = USB_ENDPOINT_XFER_ISOC,
107
.bEndpointAddress = USB_DIR_IN | USB_SCO_EP,
108
.bmAttributes = USB_ENDPOINT_XFER_ISOC,
114
.bInterfaceNumber = 1,
115
.bAlternateSetting = 1,
117
.bInterfaceClass = 0xe0, /* Wireless */
118
.bInterfaceSubClass = 0x01, /* Radio Frequency */
119
.bInterfaceProtocol = 0x01, /* Bluetooth */
120
.eps = (USBDescEndpoint[]) {
122
.bEndpointAddress = USB_DIR_OUT | USB_SCO_EP,
123
.bmAttributes = USB_ENDPOINT_XFER_ISOC,
124
.wMaxPacketSize = 0x09,
128
.bEndpointAddress = USB_DIR_IN | USB_SCO_EP,
129
.bmAttributes = USB_ENDPOINT_XFER_ISOC,
130
.wMaxPacketSize = 0x09,
135
.bInterfaceNumber = 1,
136
.bAlternateSetting = 2,
138
.bInterfaceClass = 0xe0, /* Wireless */
139
.bInterfaceSubClass = 0x01, /* Radio Frequency */
140
.bInterfaceProtocol = 0x01, /* Bluetooth */
141
.eps = (USBDescEndpoint[]) {
143
.bEndpointAddress = USB_DIR_OUT | USB_SCO_EP,
144
.bmAttributes = USB_ENDPOINT_XFER_ISOC,
145
.wMaxPacketSize = 0x11,
149
.bEndpointAddress = USB_DIR_IN | USB_SCO_EP,
150
.bmAttributes = USB_ENDPOINT_XFER_ISOC,
151
.wMaxPacketSize = 0x11,
156
.bInterfaceNumber = 1,
157
.bAlternateSetting = 3,
159
.bInterfaceClass = 0xe0, /* Wireless */
160
.bInterfaceSubClass = 0x01, /* Radio Frequency */
161
.bInterfaceProtocol = 0x01, /* Bluetooth */
162
.eps = (USBDescEndpoint[]) {
164
.bEndpointAddress = USB_DIR_OUT | USB_SCO_EP,
165
.bmAttributes = USB_ENDPOINT_XFER_ISOC,
166
.wMaxPacketSize = 0x19,
170
.bEndpointAddress = USB_DIR_IN | USB_SCO_EP,
171
.bmAttributes = USB_ENDPOINT_XFER_ISOC,
172
.wMaxPacketSize = 0x19,
177
.bInterfaceNumber = 1,
178
.bAlternateSetting = 4,
180
.bInterfaceClass = 0xe0, /* Wireless */
181
.bInterfaceSubClass = 0x01, /* Radio Frequency */
182
.bInterfaceProtocol = 0x01, /* Bluetooth */
183
.eps = (USBDescEndpoint[]) {
185
.bEndpointAddress = USB_DIR_OUT | USB_SCO_EP,
186
.bmAttributes = USB_ENDPOINT_XFER_ISOC,
187
.wMaxPacketSize = 0x21,
191
.bEndpointAddress = USB_DIR_IN | USB_SCO_EP,
192
.bmAttributes = USB_ENDPOINT_XFER_ISOC,
193
.wMaxPacketSize = 0x21,
198
.bInterfaceNumber = 1,
199
.bAlternateSetting = 5,
201
.bInterfaceClass = 0xe0, /* Wireless */
202
.bInterfaceSubClass = 0x01, /* Radio Frequency */
203
.bInterfaceProtocol = 0x01, /* Bluetooth */
204
.eps = (USBDescEndpoint[]) {
206
.bEndpointAddress = USB_DIR_OUT | USB_SCO_EP,
207
.bmAttributes = USB_ENDPOINT_XFER_ISOC,
208
.wMaxPacketSize = 0x31,
212
.bEndpointAddress = USB_DIR_IN | USB_SCO_EP,
213
.bmAttributes = USB_ENDPOINT_XFER_ISOC,
214
.wMaxPacketSize = 0x31,
221
static const USBDescDevice desc_device_bluetooth = {
223
.bDeviceClass = 0xe0, /* Wireless */
224
.bDeviceSubClass = 0x01, /* Radio Frequency */
225
.bDeviceProtocol = 0x01, /* Bluetooth */
226
.bMaxPacketSize0 = 64,
227
.bNumConfigurations = 1,
228
.confs = (USBDescConfig[]) {
231
.bConfigurationValue = 1,
232
.bmAttributes = 0xc0,
234
.nif = ARRAY_SIZE(desc_iface_bluetooth),
235
.ifs = desc_iface_bluetooth,
240
static const USBDesc desc_bluetooth = {
245
.iManufacturer = STR_MANUFACTURER,
247
.iSerialNumber = STR_SERIALNUMBER,
249
.full = &desc_device_bluetooth,
253
static void usb_bt_fifo_reset(struct usb_hci_in_fifo_s *fifo)
257
fifo->dsize = DFIFO_LEN_MASK + 1;
262
static void usb_bt_fifo_enqueue(struct usb_hci_in_fifo_s *fifo,
263
const uint8_t *data, int len)
265
int off = fifo->dstart + fifo->dlen;
269
if (off <= DFIFO_LEN_MASK) {
270
if (off + len > DFIFO_LEN_MASK + 1 &&
271
(fifo->dsize = off + len) > (DFIFO_LEN_MASK + 1) * 2) {
272
fprintf(stderr, "%s: can't alloc %i bytes\n", __FUNCTION__, len);
275
buf = fifo->data + off;
277
if (fifo->dlen > fifo->dsize) {
278
fprintf(stderr, "%s: can't alloc %i bytes\n", __FUNCTION__, len);
281
buf = fifo->data + off - fifo->dsize;
284
off = (fifo->start + fifo->len ++) & CFIFO_LEN_MASK;
285
fifo->fifo[off].data = memcpy(buf, data, len);
286
fifo->fifo[off].len = len;
289
static inline int usb_bt_fifo_dequeue(struct usb_hci_in_fifo_s *fifo,
294
if (likely(!fifo->len))
295
return USB_RET_STALL;
297
len = MIN(p->len, fifo->fifo[fifo->start].len);
298
memcpy(p->data, fifo->fifo[fifo->start].data, len);
300
fifo->fifo[fifo->start].len -= len;
301
fifo->fifo[fifo->start].data += len;
304
fifo->start &= CFIFO_LEN_MASK;
310
if (fifo->dstart >= fifo->dsize) {
312
fifo->dsize = DFIFO_LEN_MASK + 1;
318
static inline void usb_bt_fifo_out_enqueue(struct USBBtState *s,
319
struct usb_hci_out_fifo_s *fifo,
320
void (*send)(struct HCIInfo *, const uint8_t *, int),
321
int (*complete)(const uint8_t *, int),
322
const uint8_t *data, int len)
325
memcpy(fifo->data + fifo->len, data, len);
327
if (complete(fifo->data, fifo->len)) {
328
send(s->hci, fifo->data, fifo->len);
331
} else if (complete(data, len))
332
send(s->hci, data, len);
334
memcpy(fifo->data, data, len);
338
/* TODO: do we need to loop? */
341
static int usb_bt_hci_cmd_complete(const uint8_t *data, int len)
343
len -= HCI_COMMAND_HDR_SIZE;
345
len >= ((struct hci_command_hdr *) data)->plen;
348
static int usb_bt_hci_acl_complete(const uint8_t *data, int len)
350
len -= HCI_ACL_HDR_SIZE;
352
len >= le16_to_cpu(((struct hci_acl_hdr *) data)->dlen);
355
static int usb_bt_hci_sco_complete(const uint8_t *data, int len)
357
len -= HCI_SCO_HDR_SIZE;
359
len >= ((struct hci_sco_hdr *) data)->dlen;
362
static void usb_bt_handle_reset(USBDevice *dev)
364
struct USBBtState *s = (struct USBBtState *) dev->opaque;
366
usb_bt_fifo_reset(&s->evt);
367
usb_bt_fifo_reset(&s->acl);
368
usb_bt_fifo_reset(&s->sco);
375
static int usb_bt_handle_control(USBDevice *dev, USBPacket *p,
376
int request, int value, int index, int length, uint8_t *data)
378
struct USBBtState *s = (struct USBBtState *) dev->opaque;
381
ret = usb_desc_handle_control(dev, p, request, value, index, length, data);
384
case DeviceRequest | USB_REQ_GET_CONFIGURATION:
387
case DeviceOutRequest | USB_REQ_SET_CONFIGURATION:
389
usb_bt_fifo_reset(&s->evt);
390
usb_bt_fifo_reset(&s->acl);
391
usb_bt_fifo_reset(&s->sco);
399
case InterfaceRequest | USB_REQ_GET_STATUS:
400
case EndpointRequest | USB_REQ_GET_STATUS:
405
case InterfaceOutRequest | USB_REQ_CLEAR_FEATURE:
406
case EndpointOutRequest | USB_REQ_CLEAR_FEATURE:
408
case InterfaceOutRequest | USB_REQ_SET_FEATURE:
409
case EndpointOutRequest | USB_REQ_SET_FEATURE:
412
case InterfaceRequest | USB_REQ_GET_INTERFACE:
413
if (value != 0 || (index & ~1) || length != 1)
416
data[0] = s->altsetting;
421
case InterfaceOutRequest | USB_REQ_SET_INTERFACE:
422
if ((index & ~1) || length != 0 ||
423
(index == 1 && (value < 0 || value > 4)) ||
424
(index == 0 && value != 0)) {
425
printf("%s: Wrong SET_INTERFACE request (%i, %i)\n",
426
__FUNCTION__, index, value);
429
s->altsetting = value;
432
case ((USB_DIR_OUT | USB_TYPE_CLASS | USB_RECIP_DEVICE) << 8):
434
usb_bt_fifo_out_enqueue(s, &s->outcmd, s->hci->cmd_send,
435
usb_bt_hci_cmd_complete, data, length);
445
static int usb_bt_handle_data(USBDevice *dev, USBPacket *p)
447
struct USBBtState *s = (struct USBBtState *) dev->opaque;
455
switch (p->devep & 0xf) {
457
ret = usb_bt_fifo_dequeue(&s->evt, p);
461
ret = usb_bt_fifo_dequeue(&s->acl, p);
465
ret = usb_bt_fifo_dequeue(&s->sco, p);
474
switch (p->devep & 0xf) {
476
usb_bt_fifo_out_enqueue(s, &s->outacl, s->hci->acl_send,
477
usb_bt_hci_acl_complete, p->data, p->len);
481
usb_bt_fifo_out_enqueue(s, &s->outsco, s->hci->sco_send,
482
usb_bt_hci_sco_complete, p->data, p->len);
499
static void usb_bt_out_hci_packet_event(void *opaque,
500
const uint8_t *data, int len)
502
struct USBBtState *s = (struct USBBtState *) opaque;
504
usb_bt_fifo_enqueue(&s->evt, data, len);
507
static void usb_bt_out_hci_packet_acl(void *opaque,
508
const uint8_t *data, int len)
510
struct USBBtState *s = (struct USBBtState *) opaque;
512
usb_bt_fifo_enqueue(&s->acl, data, len);
515
static void usb_bt_handle_destroy(USBDevice *dev)
517
struct USBBtState *s = (struct USBBtState *) dev->opaque;
519
s->hci->opaque = NULL;
520
s->hci->evt_recv = NULL;
521
s->hci->acl_recv = NULL;
524
static int usb_bt_initfn(USBDevice *dev)
530
USBDevice *usb_bt_init(HCIInfo *hci)
533
struct USBBtState *s;
537
dev = usb_create_simple(NULL /* FIXME */, "usb-bt-dongle");
538
s = DO_UPCAST(struct USBBtState, dev, dev);
543
s->hci->evt_recv = usb_bt_out_hci_packet_event;
544
s->hci->acl_recv = usb_bt_out_hci_packet_acl;
546
usb_bt_handle_reset(&s->dev);
551
static struct USBDeviceInfo bt_info = {
552
.product_desc = "QEMU BT dongle",
553
.qdev.name = "usb-bt-dongle",
554
.qdev.size = sizeof(struct USBBtState),
555
.usb_desc = &desc_bluetooth,
556
.init = usb_bt_initfn,
557
.handle_packet = usb_generic_handle_packet,
558
.handle_reset = usb_bt_handle_reset,
559
.handle_control = usb_bt_handle_control,
560
.handle_data = usb_bt_handle_data,
561
.handle_destroy = usb_bt_handle_destroy,
564
static void usb_bt_register_devices(void)
566
usb_qdev_register(&bt_info);
568
device_init(usb_bt_register_devices)