Home | History | Annotate | Line # | Download | only in i2c
ihidev.c revision 1.29
      1 /* $NetBSD: ihidev.c,v 1.29 2023/08/01 19:36:45 riastradh Exp $ */
      2 /* $OpenBSD ihidev.c,v 1.13 2017/04/08 02:57:23 deraadt Exp $ */
      3 
      4 /*-
      5  * Copyright (c) 2017 The NetBSD Foundation, Inc.
      6  * All rights reserved.
      7  *
      8  * This code is derived from software contributed to The NetBSD Foundation
      9  * by Manuel Bouyer.
     10  *
     11  * Redistribution and use in source and binary forms, with or without
     12  * modification, are permitted provided that the following conditions
     13  * are met:
     14  * 1. Redistributions of source code must retain the above copyright
     15  *    notice, this list of conditions and the following disclaimer.
     16  * 2. Redistributions in binary form must reproduce the above copyright
     17  *    notice, this list of conditions and the following disclaimer in the
     18  *    documentation and/or other materials provided with the distribution.
     19  *
     20  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
     21  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
     22  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
     23  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
     24  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
     25  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
     26  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
     27  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
     28  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
     29  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
     30  * POSSIBILITY OF SUCH DAMAGE.
     31  */
     32 
     33 /*
     34  * Copyright (c) 2015, 2016 joshua stein <jcs (at) openbsd.org>
     35  *
     36  * Permission to use, copy, modify, and distribute this software for any
     37  * purpose with or without fee is hereby granted, provided that the above
     38  * copyright notice and this permission notice appear in all copies.
     39  *
     40  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
     41  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
     42  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
     43  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
     44  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
     45  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
     46  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
     47  */
     48 
     49 /*
     50  * HID-over-i2c driver
     51  *
     52  * https://msdn.microsoft.com/en-us/library/windows/hardware/dn642101%28v=vs.85%29.aspx
     53  *
     54  */
     55 
     56 #include <sys/cdefs.h>
     57 __KERNEL_RCSID(0, "$NetBSD: ihidev.c,v 1.29 2023/08/01 19:36:45 riastradh Exp $");
     58 
     59 #include <sys/param.h>
     60 #include <sys/systm.h>
     61 #include <sys/device.h>
     62 #include <sys/kmem.h>
     63 #include <sys/workqueue.h>
     64 
     65 #include <dev/i2c/i2cvar.h>
     66 #include <dev/i2c/ihidev.h>
     67 
     68 #include <dev/hid/hid.h>
     69 
     70 #if defined(__i386__) || defined(__amd64__)
     71 #  include "acpica.h"
     72 #endif
     73 #if NACPICA > 0
     74 #include <dev/acpi/acpivar.h>
     75 #include <dev/acpi/acpi_intr.h>
     76 #endif
     77 
     78 #include "locators.h"
     79 
     80 /* #define IHIDEV_DEBUG */
     81 
     82 #ifdef IHIDEV_DEBUG
     83 #define DPRINTF(x) printf x
     84 #else
     85 #define DPRINTF(x)
     86 #endif
     87 
     88 /* 7.2 */
     89 enum {
     90 	I2C_HID_CMD_DESCR	= 0x0,
     91 	I2C_HID_CMD_RESET	= 0x1,
     92 	I2C_HID_CMD_GET_REPORT	= 0x2,
     93 	I2C_HID_CMD_SET_REPORT	= 0x3,
     94 	I2C_HID_CMD_GET_IDLE	= 0x4,
     95 	I2C_HID_CMD_SET_IDLE	= 0x5,
     96 	I2C_HID_CMD_GET_PROTO	= 0x6,
     97 	I2C_HID_CMD_SET_PROTO	= 0x7,
     98 	I2C_HID_CMD_SET_POWER	= 0x8,
     99 
    100 	/* pseudo commands */
    101 	I2C_HID_REPORT_DESCR	= 0x100,
    102 };
    103 
    104 static int I2C_HID_POWER_ON	= 0x0;
    105 static int I2C_HID_POWER_OFF	= 0x1;
    106 
    107 static int	ihidev_match(device_t, cfdata_t, void *);
    108 static void	ihidev_attach(device_t, device_t, void *);
    109 static int	ihidev_detach(device_t, int);
    110 CFATTACH_DECL_NEW(ihidev, sizeof(struct ihidev_softc),
    111     ihidev_match, ihidev_attach, ihidev_detach, NULL);
    112 
    113 static bool	ihidev_intr_init(struct ihidev_softc *);
    114 static void	ihidev_intr_fini(struct ihidev_softc *);
    115 
    116 static bool	ihidev_suspend(device_t, const pmf_qual_t *);
    117 static bool	ihidev_resume(device_t, const pmf_qual_t *);
    118 static int	ihidev_hid_command(struct ihidev_softc *, int, void *, bool);
    119 static int	ihidev_intr(void *);
    120 static void	ihidev_work(struct work *, void *);
    121 static int	ihidev_reset(struct ihidev_softc *, bool);
    122 static int	ihidev_hid_desc_parse(struct ihidev_softc *);
    123 
    124 static int	ihidev_maxrepid(void *, int);
    125 static int	ihidev_print(void *, const char *);
    126 static int	ihidev_submatch(device_t, cfdata_t, const int *, void *);
    127 
    128 static bool	ihidev_acpi_get_info(struct ihidev_softc *);
    129 
    130 static const struct device_compatible_entry compat_data[] = {
    131 	{ .compat = "PNP0C50" },
    132 	{ .compat = "ACPI0C50" },
    133 	{ .compat = "hid-over-i2c" },
    134 	DEVICE_COMPAT_EOL
    135 };
    136 
    137 static int
    138 ihidev_match(device_t parent, cfdata_t match, void *aux)
    139 {
    140 	struct i2c_attach_args * const ia = aux;
    141 	int match_result;
    142 
    143 	if (iic_use_direct_match(ia, match, compat_data, &match_result))
    144 		return match_result;
    145 
    146 	return 0;
    147 }
    148 
    149 static void
    150 ihidev_attach(device_t parent, device_t self, void *aux)
    151 {
    152 	struct ihidev_softc *sc = device_private(self);
    153 	struct i2c_attach_args *ia = aux;
    154 	struct ihidev_attach_arg iha;
    155 	device_t dev;
    156 	int repid, repsz;
    157 	int isize;
    158 	int locs[IHIDBUSCF_NLOCS];
    159 
    160 	sc->sc_dev = self;
    161 	sc->sc_tag = ia->ia_tag;
    162 	sc->sc_addr = ia->ia_addr;
    163 	mutex_init(&sc->sc_lock, MUTEX_DEFAULT, IPL_NONE);
    164 
    165 	sc->sc_phandle = ia->ia_cookie;
    166 	if (ia->ia_cookietype != I2C_COOKIE_ACPI) {
    167 		aprint_error(": unsupported device tree type\n");
    168 		return;
    169 	}
    170 	if (!ihidev_acpi_get_info(sc)) {
    171 		return;
    172 	}
    173 
    174 	if (ihidev_hid_command(sc, I2C_HID_CMD_DESCR, NULL, false) ||
    175 	    ihidev_hid_desc_parse(sc)) {
    176 		aprint_error(": failed fetching initial HID descriptor\n");
    177 		return;
    178 	}
    179 
    180 	aprint_naive("\n");
    181 	aprint_normal(": vendor 0x%x product 0x%x, %s\n",
    182 	    le16toh(sc->hid_desc.wVendorID), le16toh(sc->hid_desc.wProductID),
    183 	    ia->ia_name);
    184 
    185 	sc->sc_nrepid = ihidev_maxrepid(sc->sc_report, sc->sc_reportlen);
    186 	if (sc->sc_nrepid < 0)
    187 		return;
    188 
    189 	aprint_normal_dev(self, "%d report id%s\n", sc->sc_nrepid,
    190 	    sc->sc_nrepid > 1 ? "s" : "");
    191 
    192 	sc->sc_nrepid++;
    193 	sc->sc_subdevs = kmem_zalloc(sc->sc_nrepid * sizeof(struct ihidev *),
    194 	    KM_SLEEP);
    195 
    196 	/* find largest report size and allocate memory for input buffer */
    197 	sc->sc_isize = le16toh(sc->hid_desc.wMaxInputLength);
    198 	for (repid = 0; repid < sc->sc_nrepid; repid++) {
    199 		repsz = hid_report_size(sc->sc_report, sc->sc_reportlen,
    200 		    hid_input, repid);
    201 
    202 		isize = repsz + 2; /* two bytes for the length */
    203 		isize += (sc->sc_nrepid != 1); /* one byte for the report ID */
    204 		if (isize > sc->sc_isize)
    205 			sc->sc_isize = isize;
    206 
    207 		DPRINTF(("%s: repid %d size %d\n",
    208 		    device_xname(sc->sc_dev), repid, repsz));
    209 	}
    210 	sc->sc_ibuf = kmem_zalloc(sc->sc_isize, KM_SLEEP);
    211 	if (!ihidev_intr_init(sc)) {
    212 		return;
    213 	}
    214 
    215 	iha.iaa = ia;
    216 	iha.parent = sc;
    217 
    218 	/* Look for a driver claiming all report IDs first. */
    219 	iha.reportid = IHIDEV_CLAIM_ALLREPORTID;
    220 	locs[IHIDBUSCF_REPORTID] = IHIDEV_CLAIM_ALLREPORTID;
    221 	dev = config_found(self, &iha, ihidev_print,
    222 	    CFARGS(.submatch = ihidev_submatch,
    223 		   .locators = locs));
    224 	if (dev != NULL) {
    225 		for (repid = 0; repid < sc->sc_nrepid; repid++)
    226 			sc->sc_subdevs[repid] = device_private(dev);
    227 		return;
    228 	}
    229 
    230 	for (repid = 0; repid < sc->sc_nrepid; repid++) {
    231 		if (hid_report_size(sc->sc_report, sc->sc_reportlen, hid_input,
    232 		    repid) == 0 &&
    233 		    hid_report_size(sc->sc_report, sc->sc_reportlen,
    234 		    hid_output, repid) == 0 &&
    235 		    hid_report_size(sc->sc_report, sc->sc_reportlen,
    236 		    hid_feature, repid) == 0)
    237 			continue;
    238 
    239 		iha.reportid = repid;
    240 		locs[IHIDBUSCF_REPORTID] = repid;
    241 		dev = config_found(self, &iha, ihidev_print,
    242 		    CFARGS(.submatch = ihidev_submatch,
    243 			   .locators = locs));
    244 		sc->sc_subdevs[repid] = device_private(dev);
    245 	}
    246 
    247 	/* power down until we're opened */
    248 	if (ihidev_hid_command(sc, I2C_HID_CMD_SET_POWER, &I2C_HID_POWER_OFF,
    249 		false)) {
    250 		aprint_error_dev(sc->sc_dev, "failed to power down\n");
    251 		return;
    252 	}
    253 	if (!pmf_device_register(self, ihidev_suspend, ihidev_resume))
    254 		aprint_error_dev(self, "couldn't establish power handler\n");
    255 }
    256 
    257 static int
    258 ihidev_detach(device_t self, int flags)
    259 {
    260 	struct ihidev_softc *sc = device_private(self);
    261 	int error;
    262 
    263 	error = config_detach_children(self, flags);
    264 	if (error)
    265 		return error;
    266 
    267 	pmf_device_deregister(self);
    268 	ihidev_intr_fini(sc);
    269 
    270 	if (ihidev_hid_command(sc, I2C_HID_CMD_SET_POWER, &I2C_HID_POWER_OFF,
    271 		true))
    272 		aprint_error_dev(sc->sc_dev, "failed to power down\n");
    273 
    274 	if (sc->sc_ibuf != NULL) {
    275 		kmem_free(sc->sc_ibuf, sc->sc_isize);
    276 		sc->sc_ibuf = NULL;
    277 	}
    278 
    279 	if (sc->sc_report != NULL)
    280 		kmem_free(sc->sc_report, sc->sc_reportlen);
    281 
    282 	mutex_destroy(&sc->sc_lock);
    283 
    284 	return 0;
    285 }
    286 
    287 static bool
    288 ihidev_suspend(device_t self, const pmf_qual_t *q)
    289 {
    290 	struct ihidev_softc *sc = device_private(self);
    291 
    292 	mutex_enter(&sc->sc_lock);
    293 	if (sc->sc_refcnt > 0) {
    294 		printf("ihidev power off\n");
    295 		if (ihidev_hid_command(sc, I2C_HID_CMD_SET_POWER,
    296 		    &I2C_HID_POWER_OFF, true))
    297 		aprint_error_dev(sc->sc_dev, "failed to power down\n");
    298 	}
    299 	mutex_exit(&sc->sc_lock);
    300 	return true;
    301 }
    302 
    303 static bool
    304 ihidev_resume(device_t self, const pmf_qual_t *q)
    305 {
    306 	struct ihidev_softc *sc = device_private(self);
    307 
    308 	mutex_enter(&sc->sc_lock);
    309 	if (sc->sc_refcnt > 0) {
    310 		printf("ihidev power reset\n");
    311 		ihidev_reset(sc, true);
    312 	}
    313 	mutex_exit(&sc->sc_lock);
    314 	return true;
    315 }
    316 
    317 static int
    318 ihidev_hid_command(struct ihidev_softc *sc, int hidcmd, void *arg, bool poll)
    319 {
    320 	int i, res = 1;
    321 	int flags = poll ? I2C_F_POLL : 0;
    322 
    323 	iic_acquire_bus(sc->sc_tag, flags);
    324 
    325 	switch (hidcmd) {
    326 	case I2C_HID_CMD_DESCR: {
    327 		/*
    328 		 * 5.2.2 - HID Descriptor Retrieval
    329 		 * register is passed from the controller
    330 		 */
    331 		uint8_t cmd[] = {
    332 			htole16(sc->sc_hid_desc_addr) & 0xff,
    333 			htole16(sc->sc_hid_desc_addr) >> 8,
    334 		};
    335 
    336 		DPRINTF(("%s: HID command I2C_HID_CMD_DESCR at 0x%x\n",
    337 		    device_xname(sc->sc_dev), htole16(sc->sc_hid_desc_addr)));
    338 
    339 		/* 20 00 */
    340 		res = iic_exec(sc->sc_tag, I2C_OP_READ_WITH_STOP, sc->sc_addr,
    341 		    &cmd, sizeof(cmd), &sc->hid_desc_buf,
    342 		    sizeof(struct i2c_hid_desc), flags);
    343 
    344 		DPRINTF(("%s: HID descriptor:", device_xname(sc->sc_dev)));
    345 		for (i = 0; i < sizeof(struct i2c_hid_desc); i++)
    346 			DPRINTF((" %.2x", sc->hid_desc_buf[i]));
    347 		DPRINTF(("\n"));
    348 
    349 		break;
    350 	}
    351 	case I2C_HID_CMD_RESET: {
    352 		uint8_t cmd[] = {
    353 			htole16(sc->hid_desc.wCommandRegister) & 0xff,
    354 			htole16(sc->hid_desc.wCommandRegister) >> 8,
    355 			0,
    356 			I2C_HID_CMD_RESET,
    357 		};
    358 
    359 		DPRINTF(("%s: HID command I2C_HID_CMD_RESET\n",
    360 		    device_xname(sc->sc_dev)));
    361 
    362 		/* 22 00 00 01 */
    363 		res = iic_exec(sc->sc_tag, I2C_OP_WRITE_WITH_STOP, sc->sc_addr,
    364 		    &cmd, sizeof(cmd), NULL, 0, flags);
    365 
    366 		break;
    367 	}
    368 	case I2C_HID_CMD_GET_REPORT: {
    369 		struct i2c_hid_report_request *rreq =
    370 		    (struct i2c_hid_report_request *)arg;
    371 
    372 		uint8_t cmd[] = {
    373 			htole16(sc->hid_desc.wCommandRegister) & 0xff,
    374 			htole16(sc->hid_desc.wCommandRegister) >> 8,
    375 			0,
    376 			I2C_HID_CMD_GET_REPORT,
    377 			0, 0, 0,
    378 		};
    379 		int cmdlen = 7;
    380 		int dataoff = 4;
    381 		int report_id = rreq->id;
    382 		int report_id_len = 1;
    383 		int report_len = rreq->len + 2;
    384 		int d;
    385 		uint8_t *tmprep;
    386 
    387 		DPRINTF(("%s: HID command I2C_HID_CMD_GET_REPORT %d "
    388 		    "(type %d, len %d)\n", device_xname(sc->sc_dev), report_id,
    389 		    rreq->type, rreq->len));
    390 
    391 		/*
    392 		 * 7.2.2.4 - "The protocol is optimized for Report < 15.  If a
    393 		 * report ID >= 15 is necessary, then the Report ID in the Low
    394 		 * Byte must be set to 1111 and a Third Byte is appended to the
    395 		 * protocol.  This Third Byte contains the entire/actual report
    396 		 * ID."
    397 		 */
    398 		if (report_id >= 15) {
    399 			cmd[dataoff++] = report_id;
    400 			report_id = 15;
    401 			report_id_len = 2;
    402 		} else
    403 			cmdlen--;
    404 
    405 		cmd[2] = report_id | rreq->type << 4;
    406 
    407 		cmd[dataoff++] = sc->hid_desc.wDataRegister & 0xff;
    408 		cmd[dataoff] = sc->hid_desc.wDataRegister >> 8;
    409 
    410 		/*
    411 		 * 7.2.2.2 - Response will be a 2-byte length value, the report
    412 		 * id with length determined above, and then the report.
    413 		 * Allocate rreq->len + 2 + 2 bytes, read into that temporary
    414 		 * buffer, and then copy only the report back out to
    415 		 * rreq->data.
    416 		 */
    417 		report_len += report_id_len;
    418 		tmprep = kmem_zalloc(report_len, KM_NOSLEEP);
    419 		if (tmprep == NULL) {
    420 			/* XXX pool or preallocate? */
    421 			DPRINTF(("%s: out of memory\n",
    422 				device_xname(sc->sc_dev)));
    423 			res = ENOMEM;
    424 			break;
    425 		}
    426 
    427 		/* type 3 id 8: 22 00 38 02 23 00 */
    428 		res = iic_exec(sc->sc_tag, I2C_OP_READ_WITH_STOP, sc->sc_addr,
    429 		    &cmd, cmdlen, tmprep, report_len, flags);
    430 
    431 		d = tmprep[0] | tmprep[1] << 8;
    432 		if (d != report_len) {
    433 			DPRINTF(("%s: response size %d != expected length %d\n",
    434 			    device_xname(sc->sc_dev), d, report_len));
    435 		}
    436 
    437 		if (report_id_len == 2)
    438 			d = tmprep[2] | tmprep[3] << 8;
    439 		else
    440 			d = tmprep[2];
    441 
    442 		if (d != rreq->id) {
    443 			DPRINTF(("%s: response report id %d != %d\n",
    444 			    device_xname(sc->sc_dev), d, rreq->id));
    445 			iic_release_bus(sc->sc_tag, 0);
    446 			kmem_free(tmprep, report_len);
    447 			return (1);
    448 		}
    449 
    450 		DPRINTF(("%s: response:", device_xname(sc->sc_dev)));
    451 		for (i = 0; i < report_len; i++)
    452 			DPRINTF((" %.2x", tmprep[i]));
    453 		DPRINTF(("\n"));
    454 
    455 		memcpy(rreq->data, tmprep + 2 + report_id_len, rreq->len);
    456 		kmem_free(tmprep, report_len);
    457 
    458 		break;
    459 	}
    460 	case I2C_HID_CMD_SET_REPORT: {
    461 		struct i2c_hid_report_request *rreq =
    462 		    (struct i2c_hid_report_request *)arg;
    463 
    464 		uint8_t cmd[] = {
    465 			htole16(sc->hid_desc.wCommandRegister) & 0xff,
    466 			htole16(sc->hid_desc.wCommandRegister) >> 8,
    467 			0,
    468 			I2C_HID_CMD_SET_REPORT,
    469 			0, 0, 0, 0, 0, 0,
    470 		};
    471 		int cmdlen = 10;
    472 		int report_id = rreq->id;
    473 		int report_len = 2 + (report_id ? 1 : 0) + rreq->len;
    474 		int dataoff;
    475 		uint8_t *finalcmd;
    476 
    477 		DPRINTF(("%s: HID command I2C_HID_CMD_SET_REPORT %d "
    478 		    "(type %d, len %d):", device_xname(sc->sc_dev), report_id,
    479 		    rreq->type, rreq->len));
    480 		for (i = 0; i < rreq->len; i++)
    481 			DPRINTF((" %.2x", ((uint8_t *)rreq->data)[i]));
    482 		DPRINTF(("\n"));
    483 
    484 		/*
    485 		 * 7.2.2.4 - "The protocol is optimized for Report < 15.  If a
    486 		 * report ID >= 15 is necessary, then the Report ID in the Low
    487 		 * Byte must be set to 1111 and a Third Byte is appended to the
    488 		 * protocol.  This Third Byte contains the entire/actual report
    489 		 * ID."
    490 		 */
    491 		dataoff = 4;
    492 		if (report_id >= 15) {
    493 			cmd[dataoff++] = report_id;
    494 			report_id = 15;
    495 		} else
    496 			cmdlen--;
    497 
    498 		cmd[2] = report_id | rreq->type << 4;
    499 
    500 		if (rreq->type == I2C_HID_REPORT_TYPE_FEATURE) {
    501 			cmd[dataoff++] = htole16(sc->hid_desc.wDataRegister)
    502 			    & 0xff;
    503 			cmd[dataoff++] = htole16(sc->hid_desc.wDataRegister)
    504 			    >> 8;
    505 		} else {
    506 			cmd[dataoff++] = htole16(sc->hid_desc.wOutputRegister)
    507 			    & 0xff;
    508 			cmd[dataoff++] = htole16(sc->hid_desc.wOutputRegister)
    509 			    >> 8;
    510 		}
    511 
    512 		cmd[dataoff++] = report_len & 0xff;
    513 		cmd[dataoff++] = report_len >> 8;
    514 		cmd[dataoff] = rreq->id;
    515 
    516 		finalcmd = kmem_zalloc(cmdlen + rreq->len, KM_NOSLEEP);
    517 		if (finalcmd == NULL) {
    518 			res = ENOMEM;
    519 			break;
    520 		}
    521 
    522 		memcpy(finalcmd, cmd, cmdlen);
    523 		memcpy(finalcmd + cmdlen, rreq->data, rreq->len);
    524 
    525 		/* type 3 id 4: 22 00 34 03 23 00 04 00 04 03 */
    526 		res = iic_exec(sc->sc_tag, I2C_OP_WRITE_WITH_STOP, sc->sc_addr,
    527 		    finalcmd, cmdlen + rreq->len, NULL, 0, flags);
    528 		kmem_free(finalcmd, cmdlen + rreq->len);
    529 
    530  		break;
    531  	}
    532 
    533 	case I2C_HID_CMD_SET_POWER: {
    534 		int power = *(int *)arg;
    535 		uint8_t cmd[] = {
    536 			htole16(sc->hid_desc.wCommandRegister) & 0xff,
    537 			htole16(sc->hid_desc.wCommandRegister) >> 8,
    538 			power,
    539 			I2C_HID_CMD_SET_POWER,
    540 		};
    541 
    542 		DPRINTF(("%s: HID command I2C_HID_CMD_SET_POWER(%d)\n",
    543 		    device_xname(sc->sc_dev), power));
    544 
    545 		/* 22 00 00 08 */
    546 		res = iic_exec(sc->sc_tag, I2C_OP_WRITE_WITH_STOP, sc->sc_addr,
    547 		    &cmd, sizeof(cmd), NULL, 0, flags);
    548 
    549 		break;
    550 	}
    551 	case I2C_HID_REPORT_DESCR: {
    552 		uint8_t cmd[] = {
    553 			htole16(sc->hid_desc.wReportDescRegister) & 0xff,
    554 			htole16(sc->hid_desc.wReportDescRegister) >> 8,
    555 		};
    556 
    557 		DPRINTF(("%s: HID command I2C_HID_REPORT_DESCR at 0x%x with "
    558 		    "size %d\n", device_xname(sc->sc_dev), cmd[0],
    559 		    sc->sc_reportlen));
    560 
    561 		/* 20 00 */
    562 		res = iic_exec(sc->sc_tag, I2C_OP_READ_WITH_STOP, sc->sc_addr,
    563 		    &cmd, sizeof(cmd), sc->sc_report, sc->sc_reportlen, flags);
    564 
    565 		DPRINTF(("%s: HID report descriptor:",
    566 		    device_xname(sc->sc_dev)));
    567 		for (i = 0; i < sc->sc_reportlen; i++)
    568 			DPRINTF((" %.2x", sc->sc_report[i]));
    569 		DPRINTF(("\n"));
    570 
    571 		break;
    572 	}
    573 	default:
    574 		aprint_error_dev(sc->sc_dev, "unknown command %d\n",
    575 		    hidcmd);
    576 	}
    577 
    578 	iic_release_bus(sc->sc_tag, flags);
    579 
    580 	return (res);
    581 }
    582 
    583 static int
    584 ihidev_reset(struct ihidev_softc *sc, bool poll)
    585 {
    586 	DPRINTF(("%s: resetting\n", device_xname(sc->sc_dev)));
    587 
    588 	if (ihidev_hid_command(sc, I2C_HID_CMD_SET_POWER,
    589 	    &I2C_HID_POWER_ON, poll)) {
    590 		aprint_error_dev(sc->sc_dev, "failed to power on\n");
    591 		return (1);
    592 	}
    593 
    594 	DELAY(1000);
    595 
    596 	if (ihidev_hid_command(sc, I2C_HID_CMD_RESET, 0, poll)) {
    597 		aprint_error_dev(sc->sc_dev, "failed to reset hardware\n");
    598 
    599 		ihidev_hid_command(sc, I2C_HID_CMD_SET_POWER,
    600 		    &I2C_HID_POWER_OFF, poll);
    601 
    602 		return (1);
    603 	}
    604 
    605 	DELAY(1000);
    606 
    607 	return (0);
    608 }
    609 
    610 /*
    611  * 5.2.2 - HID Descriptor Retrieval
    612  *
    613  * parse HID Descriptor that has already been read into hid_desc with
    614  * I2C_HID_CMD_DESCR
    615  */
    616 static int
    617 ihidev_hid_desc_parse(struct ihidev_softc *sc)
    618 {
    619 	int retries = 3;
    620 
    621 	/* must be v01.00 */
    622 	if (le16toh(sc->hid_desc.bcdVersion) != 0x0100) {
    623 		aprint_error_dev(sc->sc_dev,
    624 		    "bad HID descriptor bcdVersion (0x%x)\n",
    625 		    le16toh(sc->hid_desc.bcdVersion));
    626 		return (1);
    627 	}
    628 
    629 	/* must be 30 bytes for v1.00 */
    630 	if (le16toh(sc->hid_desc.wHIDDescLength !=
    631 	    sizeof(struct i2c_hid_desc))) {
    632 		aprint_error_dev(sc->sc_dev,
    633 		    "bad HID descriptor size (%d != %zu)\n",
    634 		    le16toh(sc->hid_desc.wHIDDescLength),
    635 		    sizeof(struct i2c_hid_desc));
    636 		return (1);
    637 	}
    638 
    639 	if (le16toh(sc->hid_desc.wReportDescLength) <= 0) {
    640 		aprint_error_dev(sc->sc_dev,
    641 		    "bad HID report descriptor size (%d)\n",
    642 		    le16toh(sc->hid_desc.wReportDescLength));
    643 		return (1);
    644 	}
    645 
    646 	while (retries-- > 0) {
    647 		if (ihidev_reset(sc, false)) {
    648 			if (retries == 0)
    649 				return(1);
    650 
    651 			DELAY(1000);
    652 		}
    653 		else
    654 			break;
    655 	}
    656 
    657 	sc->sc_reportlen = le16toh(sc->hid_desc.wReportDescLength);
    658 	sc->sc_report = kmem_zalloc(sc->sc_reportlen, KM_SLEEP);
    659 
    660 	if (ihidev_hid_command(sc, I2C_HID_REPORT_DESCR, 0, false)) {
    661 		aprint_error_dev(sc->sc_dev, "failed fetching HID report\n");
    662 		return (1);
    663 	}
    664 
    665 	return (0);
    666 }
    667 
    668 static bool
    669 ihidev_intr_init(struct ihidev_softc *sc)
    670 {
    671 #if NACPICA > 0
    672 	ACPI_HANDLE hdl = (void *)(uintptr_t)sc->sc_phandle;
    673 	struct acpi_resources res;
    674 	ACPI_STATUS rv;
    675 	char buf[100];
    676 
    677 	rv = acpi_resource_parse(sc->sc_dev, hdl, "_CRS", &res,
    678 	    &acpi_resource_parse_ops_quiet);
    679 	if (ACPI_FAILURE(rv)) {
    680 		aprint_error_dev(sc->sc_dev, "can't parse '_CRS'\n");
    681 		return false;
    682 	}
    683 
    684 	const struct acpi_irq * const irq = acpi_res_irq(&res, 0);
    685 	if (irq == NULL) {
    686 		aprint_error_dev(sc->sc_dev, "no IRQ resource\n");
    687 		acpi_resource_cleanup(&res);
    688 		return false;
    689 	}
    690 
    691 	sc->sc_intr_type =
    692 	    irq->ar_type == ACPI_EDGE_SENSITIVE ? IST_EDGE : IST_LEVEL;
    693 
    694 	acpi_resource_cleanup(&res);
    695 
    696 	sc->sc_ih = acpi_intr_establish(sc->sc_dev, sc->sc_phandle, IPL_TTY,
    697 	    false, ihidev_intr, sc, device_xname(sc->sc_dev));
    698 	if (sc->sc_ih == NULL) {
    699 		aprint_error_dev(sc->sc_dev, "can't establish interrupt\n");
    700 		return false;
    701 	}
    702 	aprint_normal_dev(sc->sc_dev, "interrupting at %s\n",
    703 	    acpi_intr_string(sc->sc_ih, buf, sizeof(buf)));
    704 
    705 	if (workqueue_create(&sc->sc_wq, device_xname(sc->sc_dev), ihidev_work,
    706 		sc, PRI_NONE, IPL_TTY, WQ_MPSAFE)) {
    707 		aprint_error_dev(sc->sc_dev,
    708 		    "can't establish workqueue\n");
    709 		return false;
    710 	}
    711 	sc->sc_work_pending = 0;
    712 
    713 	return true;
    714 #else
    715 	aprint_error_dev(sc->sc_dev, "can't establish interrupt\n");
    716 	return false;
    717 #endif
    718 }
    719 
    720 static void
    721 ihidev_intr_fini(struct ihidev_softc *sc)
    722 {
    723 #if NACPICA > 0
    724 	if (sc->sc_ih != NULL) {
    725 		acpi_intr_disestablish(sc->sc_ih);
    726 	}
    727 	if (sc->sc_wq != NULL) {
    728 		workqueue_destroy(sc->sc_wq);
    729 	}
    730 #endif
    731 }
    732 
    733 static void
    734 ihidev_intr_mask(struct ihidev_softc * const sc)
    735 {
    736 
    737 	if (sc->sc_intr_type == IST_LEVEL) {
    738 #if NACPICA > 0
    739 		acpi_intr_mask(sc->sc_ih);
    740 #endif
    741 	}
    742 }
    743 
    744 static void
    745 ihidev_intr_unmask(struct ihidev_softc * const sc)
    746 {
    747 
    748 	if (sc->sc_intr_type == IST_LEVEL) {
    749 #if NACPICA > 0
    750 		acpi_intr_unmask(sc->sc_ih);
    751 #endif
    752 	}
    753 }
    754 
    755 static int
    756 ihidev_intr(void *arg)
    757 {
    758 	struct ihidev_softc * const sc = arg;
    759 
    760 	/*
    761 	 * Schedule our work.  If we're using a level-triggered
    762 	 * interrupt, we have to mask it off while we wait for service.
    763 	 */
    764 	if (atomic_swap_uint(&sc->sc_work_pending, 1) == 0)
    765 		workqueue_enqueue(sc->sc_wq, &sc->sc_work, NULL);
    766 	ihidev_intr_mask(sc);
    767 
    768 	return 1;
    769 }
    770 
    771 static void
    772 ihidev_work(struct work *wk, void *arg)
    773 {
    774 	struct ihidev_softc * const sc = arg;
    775 	struct ihidev *scd;
    776 	u_int psize;
    777 	int res, i;
    778 	u_char *p;
    779 	u_int rep = 0;
    780 
    781 	atomic_store_relaxed(&sc->sc_work_pending, 0);
    782 
    783 	mutex_enter(&sc->sc_lock);
    784 
    785 	iic_acquire_bus(sc->sc_tag, 0);
    786 	res = iic_exec(sc->sc_tag, I2C_OP_READ_WITH_STOP, sc->sc_addr, NULL, 0,
    787 	    sc->sc_ibuf, sc->sc_isize, 0);
    788 	iic_release_bus(sc->sc_tag, 0);
    789 	if (res != 0)
    790 		goto out;
    791 
    792 	/*
    793 	 * 6.1.1 - First two bytes are the packet length, which must be less
    794 	 * than or equal to wMaxInputLength
    795 	 */
    796 	psize = sc->sc_ibuf[0] | sc->sc_ibuf[1] << 8;
    797 	if (!psize || psize > sc->sc_isize) {
    798 		DPRINTF(("%s: %s: invalid packet size (%d vs. %d)\n",
    799 		    device_xname(sc->sc_dev), __func__, psize, sc->sc_isize));
    800 		goto out;
    801 	}
    802 
    803 	/* 3rd byte is the report id */
    804 	p = sc->sc_ibuf + 2;
    805 	psize -= 2;
    806 	if (sc->sc_nrepid != 1)
    807 		rep = *p++, psize--;
    808 
    809 	if (rep >= sc->sc_nrepid) {
    810 		aprint_error_dev(sc->sc_dev, "%s: bad report id %d\n",
    811 		    __func__, rep);
    812 		goto out;
    813 	}
    814 
    815 	DPRINTF(("%s: %s: hid input (rep %d):", device_xname(sc->sc_dev),
    816 	    __func__, rep));
    817 	for (i = 0; i < sc->sc_isize; i++)
    818 		DPRINTF((" %.2x", sc->sc_ibuf[i]));
    819 	DPRINTF(("\n"));
    820 
    821 	scd = sc->sc_subdevs[rep];
    822 	if (scd == NULL || !(scd->sc_state & IHIDEV_OPEN))
    823 		goto out;
    824 
    825 	scd->sc_intr(scd, p, psize);
    826 
    827  out:
    828 	mutex_exit(&sc->sc_lock);
    829 
    830 	/*
    831 	 * If our interrupt is level-triggered, re-enable it now.
    832 	 */
    833 	ihidev_intr_unmask(sc);
    834 }
    835 
    836 static int
    837 ihidev_maxrepid(void *buf, int len)
    838 {
    839 	struct hid_data *d;
    840 	struct hid_item h;
    841 	int maxid;
    842 
    843 	maxid = -1;
    844 	h.report_ID = 0;
    845 	for (d = hid_start_parse(buf, len, hid_none); hid_get_item(d, &h); )
    846 		if ((int)h.report_ID > maxid)
    847 			maxid = h.report_ID;
    848 	hid_end_parse(d);
    849 
    850 	return (maxid);
    851 }
    852 
    853 static int
    854 ihidev_print(void *aux, const char *pnp)
    855 {
    856 	struct ihidev_attach_arg *iha = aux;
    857 
    858 	if (iha->reportid == IHIDEV_CLAIM_ALLREPORTID)
    859 		return (QUIET);
    860 
    861 	if (pnp)
    862 		aprint_normal("hid at %s", pnp);
    863 
    864 	if (iha->reportid != 0)
    865 		aprint_normal(" reportid %d", iha->reportid);
    866 
    867 	return (UNCONF);
    868 }
    869 
    870 static int
    871 ihidev_submatch(device_t parent, cfdata_t cf, const int *locs, void *aux)
    872 {
    873 	struct ihidev_attach_arg *iha = aux;
    874 
    875 	if (cf->ihidevcf_reportid != IHIDEV_UNK_REPORTID &&
    876 	    cf->ihidevcf_reportid != iha->reportid)
    877 		return (0);
    878 
    879 	return config_match(parent, cf, aux);
    880 }
    881 
    882 int
    883 ihidev_open(struct ihidev *scd)
    884 {
    885 	struct ihidev_softc *sc = scd->sc_parent;
    886 	int error;
    887 
    888 	DPRINTF(("%s: %s: state=%d refcnt=%d\n", device_xname(sc->sc_dev),
    889 	    __func__, scd->sc_state, sc->sc_refcnt));
    890 
    891 	mutex_enter(&sc->sc_lock);
    892 
    893 	if (scd->sc_state & IHIDEV_OPEN || sc->sc_refcnt == INT_MAX) {
    894 		error = EBUSY;
    895 		goto out;
    896 	}
    897 
    898 	scd->sc_state |= IHIDEV_OPEN;
    899 
    900 	if (sc->sc_refcnt++ || sc->sc_isize == 0) {
    901 		error = 0;
    902 		goto out;
    903 	}
    904 
    905 	/* power on */
    906 	ihidev_reset(sc, false);
    907 	error = 0;
    908 
    909 out:	mutex_exit(&sc->sc_lock);
    910 	return error;
    911 }
    912 
    913 void
    914 ihidev_close(struct ihidev *scd)
    915 {
    916 	struct ihidev_softc *sc = scd->sc_parent;
    917 
    918 	DPRINTF(("%s: %s: state=%d refcnt=%d\n", device_xname(sc->sc_dev),
    919 	    __func__, scd->sc_state, sc->sc_refcnt));
    920 
    921 	mutex_enter(&sc->sc_lock);
    922 
    923 	KASSERTMSG(scd->sc_state & IHIDEV_OPEN,
    924 	    "%s: closing %s when not open",
    925 	    device_xname(scd->sc_idev),
    926 	    device_xname(sc->sc_dev));
    927 	scd->sc_state &= ~IHIDEV_OPEN;
    928 
    929 	if (--sc->sc_refcnt)
    930 		goto out;
    931 
    932 	if (ihidev_hid_command(sc, I2C_HID_CMD_SET_POWER,
    933 	    &I2C_HID_POWER_OFF, false))
    934 		aprint_error_dev(sc->sc_dev, "failed to power down\n");
    935 
    936 out:	mutex_exit(&sc->sc_lock);
    937 }
    938 
    939 void
    940 ihidev_get_report_desc(struct ihidev_softc *sc, void **desc, int *size)
    941 {
    942 	*desc = sc->sc_report;
    943 	*size = sc->sc_reportlen;
    944 }
    945 
    946 /* convert hid_* constants used throughout HID code to i2c HID equivalents */
    947 int
    948 ihidev_report_type_conv(int hid_type_id)
    949 {
    950 	switch (hid_type_id) {
    951 	case hid_input:
    952 		return I2C_HID_REPORT_TYPE_INPUT;
    953 	case hid_output:
    954 		return I2C_HID_REPORT_TYPE_OUTPUT;
    955 	case hid_feature:
    956 		return I2C_HID_REPORT_TYPE_FEATURE;
    957 	default:
    958 		return -1;
    959 	}
    960 }
    961 
    962 int
    963 ihidev_get_report(struct device *dev, int type, int id, void *data, int len)
    964 {
    965 	struct ihidev_softc *sc = (struct ihidev_softc *)dev;
    966 	struct i2c_hid_report_request rreq;
    967 	int ctype;
    968 
    969 	if ((ctype = ihidev_report_type_conv(type)) < 0)
    970 		return (1);
    971 
    972 	rreq.type = ctype;
    973 	rreq.id = id;
    974 	rreq.data = data;
    975 	rreq.len = len;
    976 
    977 	if (ihidev_hid_command(sc, I2C_HID_CMD_GET_REPORT, &rreq, false)) {
    978 		aprint_error_dev(sc->sc_dev, "failed fetching report\n");
    979 		return (1);
    980 	}
    981 
    982 	return 0;
    983 }
    984 
    985 int
    986 ihidev_set_report(struct device *dev, int type, int id, void *data,
    987     int len)
    988 {
    989 	struct ihidev_softc *sc = (struct ihidev_softc *)dev;
    990 	struct i2c_hid_report_request rreq;
    991 	int ctype;
    992 
    993 	if ((ctype = ihidev_report_type_conv(type)) < 0)
    994 		return (1);
    995 
    996 	rreq.type = ctype;
    997 	rreq.id = id;
    998 	rreq.data = data;
    999 	rreq.len = len;
   1000 
   1001 	if (ihidev_hid_command(sc, I2C_HID_CMD_SET_REPORT, &rreq, false)) {
   1002 		aprint_error_dev(sc->sc_dev, "failed setting report\n");
   1003 		return (1);
   1004 	}
   1005 
   1006 	return 0;
   1007 }
   1008 
   1009 static bool
   1010 ihidev_acpi_get_info(struct ihidev_softc *sc)
   1011 {
   1012 	ACPI_HANDLE hdl = (void *)(uintptr_t)sc->sc_phandle;
   1013 	ACPI_STATUS status;
   1014 	ACPI_INTEGER val;
   1015 
   1016 	/* 3cdff6f7-4267-4555-ad05-b30a3d8938de */
   1017 	uint8_t i2c_hid_guid[] = {
   1018 		0xF7, 0xF6, 0xDF, 0x3C,
   1019 		0x67, 0x42,
   1020 		0x55, 0x45,
   1021 		0xAD, 0x05,
   1022 		0xB3, 0x0A, 0x3D, 0x89, 0x38, 0xDE,
   1023 	};
   1024 
   1025 	status = acpi_dsm_integer(hdl, i2c_hid_guid, 1, 1, NULL, &val);
   1026 	if (ACPI_FAILURE(status)) {
   1027 		aprint_error_dev(sc->sc_dev,
   1028 		    "failed to get HidDescriptorAddress: %s\n",
   1029 		    AcpiFormatException(status));
   1030 		return false;
   1031 	}
   1032 
   1033 	sc->sc_hid_desc_addr = (u_int)val;
   1034 
   1035 	return true;
   1036 }
   1037