Home | History | Annotate | Line # | Download | only in usb
if_kue.c revision 1.57
      1 /*	$NetBSD: if_kue.c,v 1.57 2006/10/12 01:31:59 christos Exp $	*/
      2 /*
      3  * Copyright (c) 1997, 1998, 1999, 2000
      4  *	Bill Paul <wpaul (at) ee.columbia.edu>.  All rights reserved.
      5  *
      6  * Redistribution and use in source and binary forms, with or without
      7  * modification, are permitted provided that the following conditions
      8  * are met:
      9  * 1. Redistributions of source code must retain the above copyright
     10  *    notice, this list of conditions and the following disclaimer.
     11  * 2. Redistributions in binary form must reproduce the above copyright
     12  *    notice, this list of conditions and the following disclaimer in the
     13  *    documentation and/or other materials provided with the distribution.
     14  * 3. All advertising materials mentioning features or use of this software
     15  *    must display the following acknowledgement:
     16  *	This product includes software developed by Bill Paul.
     17  * 4. Neither the name of the author nor the names of any co-contributors
     18  *    may be used to endorse or promote products derived from this software
     19  *    without specific prior written permission.
     20  *
     21  * THIS SOFTWARE IS PROVIDED BY Bill Paul AND CONTRIBUTORS ``AS IS'' AND
     22  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     23  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     24  * ARE DISCLAIMED.  IN NO EVENT SHALL Bill Paul OR THE VOICES IN HIS HEAD
     25  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
     26  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
     27  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
     28  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
     29  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
     30  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
     31  * THE POSSIBILITY OF SUCH DAMAGE.
     32  *
     33  * $FreeBSD: src/sys/dev/usb/if_kue.c,v 1.14 2000/01/14 01:36:15 wpaul Exp $
     34  */
     35 
     36 /*
     37  * Kawasaki LSI KL5KUSB101B USB to ethernet adapter driver.
     38  *
     39  * Written by Bill Paul <wpaul (at) ee.columbia.edu>
     40  * Electrical Engineering Department
     41  * Columbia University, New York City
     42  */
     43 
     44 /*
     45  * The KLSI USB to ethernet adapter chip contains an USB serial interface,
     46  * ethernet MAC and embedded microcontroller (called the QT Engine).
     47  * The chip must have firmware loaded into it before it will operate.
     48  * Packets are passed between the chip and host via bulk transfers.
     49  * There is an interrupt endpoint mentioned in the software spec, however
     50  * it's currently unused. This device is 10Mbps half-duplex only, hence
     51  * there is no media selection logic. The MAC supports a 128 entry
     52  * multicast filter, though the exact size of the filter can depend
     53  * on the firmware. Curiously, while the software spec describes various
     54  * ethernet statistics counters, my sample adapter and firmware combination
     55  * claims not to support any statistics counters at all.
     56  *
     57  * Note that once we load the firmware in the device, we have to be
     58  * careful not to load it again: if you restart your computer but
     59  * leave the adapter attached to the USB controller, it may remain
     60  * powered on and retain its firmware. In this case, we don't need
     61  * to load the firmware a second time.
     62  *
     63  * Special thanks to Rob Furr for providing an ADS Technologies
     64  * adapter for development and testing. No monkeys were harmed during
     65  * the development of this driver.
     66  */
     67 
     68 /*
     69  * Ported to NetBSD and somewhat rewritten by Lennart Augustsson.
     70  */
     71 
     72 #include <sys/cdefs.h>
     73 __KERNEL_RCSID(0, "$NetBSD: if_kue.c,v 1.57 2006/10/12 01:31:59 christos Exp $");
     74 
     75 #if defined(__NetBSD__)
     76 #include "opt_inet.h"
     77 #include "bpfilter.h"
     78 #include "rnd.h"
     79 #elif defined(__OpenBSD__)
     80 #include "bpfilter.h"
     81 #endif
     82 
     83 #include <sys/param.h>
     84 #include <sys/systm.h>
     85 #include <sys/sockio.h>
     86 #include <sys/mbuf.h>
     87 #include <sys/malloc.h>
     88 #include <sys/kernel.h>
     89 #include <sys/socket.h>
     90 #include <sys/device.h>
     91 #include <sys/proc.h>
     92 
     93 #if NRND > 0
     94 #include <sys/rnd.h>
     95 #endif
     96 
     97 #include <net/if.h>
     98 #if defined(__NetBSD__)
     99 #include <net/if_arp.h>
    100 #endif
    101 #include <net/if_dl.h>
    102 
    103 #if NBPFILTER > 0
    104 #include <net/bpf.h>
    105 #endif
    106 
    107 #if defined(__NetBSD__)
    108 #include <net/if_ether.h>
    109 #ifdef INET
    110 #include <netinet/in.h>
    111 #include <netinet/if_inarp.h>
    112 #endif
    113 #endif /* defined (__NetBSD__) */
    114 
    115 #if defined(__OpenBSD__)
    116 #ifdef INET
    117 #include <netinet/in.h>
    118 #include <netinet/in_systm.h>
    119 #include <netinet/in_var.h>
    120 #include <netinet/ip.h>
    121 #include <netinet/if_ether.h>
    122 #endif
    123 #endif /* defined (__OpenBSD__) */
    124 
    125 
    126 #include <dev/usb/usb.h>
    127 #include <dev/usb/usbdi.h>
    128 #include <dev/usb/usbdi_util.h>
    129 #include <dev/usb/usbdevs.h>
    130 
    131 #include <dev/usb/if_kuereg.h>
    132 #include <dev/usb/kue_fw.h>
    133 
    134 #ifdef KUE_DEBUG
    135 #define DPRINTF(x)	if (kuedebug) logprintf x
    136 #define DPRINTFN(n,x)	if (kuedebug >= (n)) logprintf x
    137 int	kuedebug = 0;
    138 #else
    139 #define DPRINTF(x)
    140 #define DPRINTFN(n,x)
    141 #endif
    142 
    143 /*
    144  * Various supported device vendors/products.
    145  */
    146 Static const struct usb_devno kue_devs[] = {
    147 	{ USB_VENDOR_3COM, USB_PRODUCT_3COM_3C19250 },
    148 	{ USB_VENDOR_3COM, USB_PRODUCT_3COM_3C460 },
    149 	{ USB_VENDOR_ABOCOM, USB_PRODUCT_ABOCOM_URE450 },
    150 	{ USB_VENDOR_ADS, USB_PRODUCT_ADS_UBS10BT },
    151 	{ USB_VENDOR_ADS, USB_PRODUCT_ADS_UBS10BTX },
    152 	{ USB_VENDOR_AOX, USB_PRODUCT_AOX_USB101 },
    153 	{ USB_VENDOR_ASANTE, USB_PRODUCT_ASANTE_EA },
    154 	{ USB_VENDOR_ATEN, USB_PRODUCT_ATEN_UC10T },
    155 	{ USB_VENDOR_ATEN, USB_PRODUCT_ATEN_DSB650C },
    156 	{ USB_VENDOR_COREGA, USB_PRODUCT_COREGA_ETHER_USB_T },
    157 	{ USB_VENDOR_DLINK, USB_PRODUCT_DLINK_DSB650C },
    158 	{ USB_VENDOR_ENTREGA, USB_PRODUCT_ENTREGA_E45 },
    159 	{ USB_VENDOR_ENTREGA, USB_PRODUCT_ENTREGA_XX1 },
    160 	{ USB_VENDOR_ENTREGA, USB_PRODUCT_ENTREGA_XX2 },
    161 	{ USB_VENDOR_IODATA, USB_PRODUCT_IODATA_USBETT },
    162 	{ USB_VENDOR_JATON, USB_PRODUCT_JATON_EDA },
    163 	{ USB_VENDOR_KINGSTON, USB_PRODUCT_KINGSTON_XX1 },
    164 	{ USB_VENDOR_KLSI, USB_PRODUCT_KLSI_DUH3E10BT },
    165 	{ USB_VENDOR_KLSI, USB_PRODUCT_KLSI_DUH3E10BTN },
    166 	{ USB_VENDOR_LINKSYS, USB_PRODUCT_LINKSYS_USB10T },
    167 	{ USB_VENDOR_MOBILITY, USB_PRODUCT_MOBILITY_EA },
    168 	{ USB_VENDOR_NETGEAR, USB_PRODUCT_NETGEAR_EA101 },
    169 	{ USB_VENDOR_NETGEAR, USB_PRODUCT_NETGEAR_EA101X },
    170 	{ USB_VENDOR_PERACOM, USB_PRODUCT_PERACOM_ENET },
    171 	{ USB_VENDOR_PERACOM, USB_PRODUCT_PERACOM_ENET2 },
    172 	{ USB_VENDOR_PERACOM, USB_PRODUCT_PERACOM_ENET3 },
    173 	{ USB_VENDOR_PORTGEAR, USB_PRODUCT_PORTGEAR_EA8 },
    174 	{ USB_VENDOR_PORTGEAR, USB_PRODUCT_PORTGEAR_EA9 },
    175 	{ USB_VENDOR_PORTSMITH, USB_PRODUCT_PORTSMITH_EEA },
    176 	{ USB_VENDOR_SHARK, USB_PRODUCT_SHARK_PA },
    177 	{ USB_VENDOR_SILICOM, USB_PRODUCT_SILICOM_U2E },
    178 	{ USB_VENDOR_SMC, USB_PRODUCT_SMC_2102USB },
    179 };
    180 #define kue_lookup(v, p) (usb_lookup(kue_devs, v, p))
    181 
    182 USB_DECLARE_DRIVER(kue);
    183 
    184 Static int kue_tx_list_init(struct kue_softc *);
    185 Static int kue_rx_list_init(struct kue_softc *);
    186 Static int kue_newbuf(struct kue_softc *, struct kue_chain *,struct mbuf *);
    187 Static int kue_send(struct kue_softc *, struct mbuf *, int);
    188 Static int kue_open_pipes(struct kue_softc *);
    189 Static void kue_rxeof(usbd_xfer_handle, usbd_private_handle, usbd_status);
    190 Static void kue_txeof(usbd_xfer_handle, usbd_private_handle, usbd_status);
    191 Static void kue_start(struct ifnet *);
    192 Static int kue_ioctl(struct ifnet *, u_long, caddr_t);
    193 Static void kue_init(void *);
    194 Static void kue_stop(struct kue_softc *);
    195 Static void kue_watchdog(struct ifnet *);
    196 
    197 Static void kue_setmulti(struct kue_softc *);
    198 Static void kue_reset(struct kue_softc *);
    199 
    200 Static usbd_status kue_ctl(struct kue_softc *, int, u_int8_t,
    201 			   u_int16_t, void *, u_int32_t);
    202 Static usbd_status kue_setword(struct kue_softc *, u_int8_t, u_int16_t);
    203 Static int kue_load_fw(struct kue_softc *);
    204 
    205 Static usbd_status
    206 kue_setword(struct kue_softc *sc, u_int8_t breq, u_int16_t word)
    207 {
    208 	usb_device_request_t	req;
    209 
    210 	DPRINTFN(10,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev),__func__));
    211 
    212 	req.bmRequestType = UT_WRITE_VENDOR_DEVICE;
    213 	req.bRequest = breq;
    214 	USETW(req.wValue, word);
    215 	USETW(req.wIndex, 0);
    216 	USETW(req.wLength, 0);
    217 
    218 	return (usbd_do_request(sc->kue_udev, &req, NULL));
    219 }
    220 
    221 Static usbd_status
    222 kue_ctl(struct kue_softc *sc, int rw, u_int8_t breq, u_int16_t val,
    223 	void *data, u_int32_t len)
    224 {
    225 	usb_device_request_t	req;
    226 
    227 	DPRINTFN(10,("%s: %s: enter, len=%d\n", USBDEVNAME(sc->kue_dev),
    228 		     __func__, len));
    229 
    230 	if (rw == KUE_CTL_WRITE)
    231 		req.bmRequestType = UT_WRITE_VENDOR_DEVICE;
    232 	else
    233 		req.bmRequestType = UT_READ_VENDOR_DEVICE;
    234 
    235 	req.bRequest = breq;
    236 	USETW(req.wValue, val);
    237 	USETW(req.wIndex, 0);
    238 	USETW(req.wLength, len);
    239 
    240 	return (usbd_do_request(sc->kue_udev, &req, data));
    241 }
    242 
    243 Static int
    244 kue_load_fw(struct kue_softc *sc)
    245 {
    246 	usb_device_descriptor_t dd;
    247 	usbd_status		err;
    248 
    249 	DPRINTFN(1,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev), __func__));
    250 
    251 	/*
    252 	 * First, check if we even need to load the firmware.
    253 	 * If the device was still attached when the system was
    254 	 * rebooted, it may already have firmware loaded in it.
    255 	 * If this is the case, we don't need to do it again.
    256 	 * And in fact, if we try to load it again, we'll hang,
    257 	 * so we have to avoid this condition if we don't want
    258 	 * to look stupid.
    259 	 *
    260          * We can test this quickly by checking the bcdRevision
    261          * code. The NIC will return a different revision code if
    262          * it's probed while the firmware is still loaded and
    263          * running.
    264          */
    265 	if (usbd_get_device_desc(sc->kue_udev, &dd))
    266 		return (EIO);
    267         if (UGETW(dd.bcdDevice) == KUE_WARM_REV) {
    268 		printf("%s: warm boot, no firmware download\n",
    269 		       USBDEVNAME(sc->kue_dev));
    270 		return (0);
    271 	}
    272 
    273 	printf("%s: cold boot, downloading firmware\n",
    274 	       USBDEVNAME(sc->kue_dev));
    275 
    276 	/* Load code segment */
    277 	DPRINTFN(1,("%s: kue_load_fw: download code_seg\n",
    278 		    USBDEVNAME(sc->kue_dev)));
    279 	/*XXXUNCONST*/
    280 	err = kue_ctl(sc, KUE_CTL_WRITE, KUE_CMD_SEND_SCAN,
    281 	    0, __UNCONST(kue_code_seg), sizeof(kue_code_seg));
    282 	if (err) {
    283 		printf("%s: failed to load code segment: %s\n",
    284 		    USBDEVNAME(sc->kue_dev), usbd_errstr(err));
    285 			return (EIO);
    286 	}
    287 
    288 	/* Load fixup segment */
    289 	DPRINTFN(1,("%s: kue_load_fw: download fix_seg\n",
    290 		    USBDEVNAME(sc->kue_dev)));
    291 	/*XXXUNCONST*/
    292 	err = kue_ctl(sc, KUE_CTL_WRITE, KUE_CMD_SEND_SCAN,
    293 	    0, __UNCONST(kue_fix_seg), sizeof(kue_fix_seg));
    294 	if (err) {
    295 		printf("%s: failed to load fixup segment: %s\n",
    296 		    USBDEVNAME(sc->kue_dev), usbd_errstr(err));
    297 			return (EIO);
    298 	}
    299 
    300 	/* Send trigger command. */
    301 	DPRINTFN(1,("%s: kue_load_fw: download trig_seg\n",
    302 		    USBDEVNAME(sc->kue_dev)));
    303 	/*XXXUNCONST*/
    304 	err = kue_ctl(sc, KUE_CTL_WRITE, KUE_CMD_SEND_SCAN,
    305 	    0, __UNCONST(kue_trig_seg), sizeof(kue_trig_seg));
    306 	if (err) {
    307 		printf("%s: failed to load trigger segment: %s\n",
    308 		    USBDEVNAME(sc->kue_dev), usbd_errstr(err));
    309 			return (EIO);
    310 	}
    311 
    312 	usbd_delay_ms(sc->kue_udev, 10);
    313 
    314 	/*
    315 	 * Reload device descriptor.
    316 	 * Why? The chip without the firmware loaded returns
    317 	 * one revision code. The chip with the firmware
    318 	 * loaded and running returns a *different* revision
    319 	 * code. This confuses the quirk mechanism, which is
    320 	 * dependent on the revision data.
    321 	 */
    322 	(void)usbd_reload_device_desc(sc->kue_udev);
    323 
    324 	DPRINTFN(1,("%s: %s: done\n", USBDEVNAME(sc->kue_dev), __func__));
    325 
    326 	/* Reset the adapter. */
    327 	kue_reset(sc);
    328 
    329 	return (0);
    330 }
    331 
    332 Static void
    333 kue_setmulti(struct kue_softc *sc)
    334 {
    335 	struct ifnet		*ifp = GET_IFP(sc);
    336 	struct ether_multi	*enm;
    337 	struct ether_multistep	step;
    338 	int			i;
    339 
    340 	DPRINTFN(5,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev), __func__));
    341 
    342 	if (ifp->if_flags & IFF_PROMISC) {
    343 allmulti:
    344 		ifp->if_flags |= IFF_ALLMULTI;
    345 		sc->kue_rxfilt |= KUE_RXFILT_ALLMULTI;
    346 		sc->kue_rxfilt &= ~KUE_RXFILT_MULTICAST;
    347 		kue_setword(sc, KUE_CMD_SET_PKT_FILTER, sc->kue_rxfilt);
    348 		return;
    349 	}
    350 
    351 	sc->kue_rxfilt &= ~KUE_RXFILT_ALLMULTI;
    352 
    353 	i = 0;
    354 #if defined (__NetBSD__)
    355 	ETHER_FIRST_MULTI(step, &sc->kue_ec, enm);
    356 #else
    357 	ETHER_FIRST_MULTI(step, &sc->arpcom, enm);
    358 #endif
    359 	while (enm != NULL) {
    360 		if (i == KUE_MCFILTCNT(sc) ||
    361 		    memcmp(enm->enm_addrlo, enm->enm_addrhi,
    362 			ETHER_ADDR_LEN) != 0)
    363 			goto allmulti;
    364 
    365 		memcpy(KUE_MCFILT(sc, i), enm->enm_addrlo, ETHER_ADDR_LEN);
    366 		ETHER_NEXT_MULTI(step, enm);
    367 		i++;
    368 	}
    369 
    370 	ifp->if_flags &= ~IFF_ALLMULTI;
    371 
    372 	sc->kue_rxfilt |= KUE_RXFILT_MULTICAST;
    373 	kue_ctl(sc, KUE_CTL_WRITE, KUE_CMD_SET_MCAST_FILTERS,
    374 	    i, sc->kue_mcfilters, i * ETHER_ADDR_LEN);
    375 
    376 	kue_setword(sc, KUE_CMD_SET_PKT_FILTER, sc->kue_rxfilt);
    377 }
    378 
    379 /*
    380  * Issue a SET_CONFIGURATION command to reset the MAC. This should be
    381  * done after the firmware is loaded into the adapter in order to
    382  * bring it into proper operation.
    383  */
    384 Static void
    385 kue_reset(struct kue_softc *sc)
    386 {
    387 	DPRINTFN(5,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev), __func__));
    388 
    389 	if (usbd_set_config_no(sc->kue_udev, KUE_CONFIG_NO, 1) ||
    390 	    usbd_device2interface_handle(sc->kue_udev, KUE_IFACE_IDX,
    391 					 &sc->kue_iface))
    392 		printf("%s: reset failed\n", USBDEVNAME(sc->kue_dev));
    393 
    394 	/* Wait a little while for the chip to get its brains in order. */
    395 	usbd_delay_ms(sc->kue_udev, 10);
    396 }
    397 
    398 /*
    399  * Probe for a KLSI chip.
    400  */
    401 USB_MATCH(kue)
    402 {
    403 	USB_MATCH_START(kue, uaa);
    404 
    405 	DPRINTFN(25,("kue_match: enter\n"));
    406 
    407 	if (uaa->iface != NULL)
    408 		return (UMATCH_NONE);
    409 
    410 	return (kue_lookup(uaa->vendor, uaa->product) != NULL ?
    411 		UMATCH_VENDOR_PRODUCT : UMATCH_NONE);
    412 }
    413 
    414 /*
    415  * Attach the interface. Allocate softc structures, do
    416  * setup and ethernet/BPF attach.
    417  */
    418 USB_ATTACH(kue)
    419 {
    420 	USB_ATTACH_START(kue, sc, uaa);
    421 	char			*devinfop;
    422 	int			s;
    423 	struct ifnet		*ifp;
    424 	usbd_device_handle	dev = uaa->device;
    425 	usbd_interface_handle	iface;
    426 	usbd_status		err;
    427 	usb_interface_descriptor_t	*id;
    428 	usb_endpoint_descriptor_t	*ed;
    429 	int			i;
    430 
    431 	DPRINTFN(5,(" : kue_attach: sc=%p, dev=%p", sc, dev));
    432 
    433 	devinfop = usbd_devinfo_alloc(dev, 0);
    434 	USB_ATTACH_SETUP;
    435 	printf("%s: %s\n", USBDEVNAME(sc->kue_dev), devinfop);
    436 	usbd_devinfo_free(devinfop);
    437 
    438 	err = usbd_set_config_no(dev, KUE_CONFIG_NO, 1);
    439 	if (err) {
    440 		printf("%s: setting config no failed\n",
    441 		    USBDEVNAME(sc->kue_dev));
    442 		USB_ATTACH_ERROR_RETURN;
    443 	}
    444 
    445 	sc->kue_udev = dev;
    446 	sc->kue_product = uaa->product;
    447 	sc->kue_vendor = uaa->vendor;
    448 
    449 	/* Load the firmware into the NIC. */
    450 	if (kue_load_fw(sc)) {
    451 		printf("%s: loading firmware failed\n",
    452 		    USBDEVNAME(sc->kue_dev));
    453 		USB_ATTACH_ERROR_RETURN;
    454 	}
    455 
    456 	err = usbd_device2interface_handle(dev, KUE_IFACE_IDX, &iface);
    457 	if (err) {
    458 		printf("%s: getting interface handle failed\n",
    459 		    USBDEVNAME(sc->kue_dev));
    460 		USB_ATTACH_ERROR_RETURN;
    461 	}
    462 
    463 	sc->kue_iface = iface;
    464 	id = usbd_get_interface_descriptor(iface);
    465 
    466 	/* Find endpoints. */
    467 	for (i = 0; i < id->bNumEndpoints; i++) {
    468 		ed = usbd_interface2endpoint_descriptor(iface, i);
    469 		if (ed == NULL) {
    470 			printf("%s: couldn't get ep %d\n",
    471 			    USBDEVNAME(sc->kue_dev), i);
    472 			USB_ATTACH_ERROR_RETURN;
    473 		}
    474 		if (UE_GET_DIR(ed->bEndpointAddress) == UE_DIR_IN &&
    475 		    UE_GET_XFERTYPE(ed->bmAttributes) == UE_BULK) {
    476 			sc->kue_ed[KUE_ENDPT_RX] = ed->bEndpointAddress;
    477 		} else if (UE_GET_DIR(ed->bEndpointAddress) == UE_DIR_OUT &&
    478 			   UE_GET_XFERTYPE(ed->bmAttributes) == UE_BULK) {
    479 			sc->kue_ed[KUE_ENDPT_TX] = ed->bEndpointAddress;
    480 		} else if (UE_GET_DIR(ed->bEndpointAddress) == UE_DIR_IN &&
    481 			   UE_GET_XFERTYPE(ed->bmAttributes) == UE_INTERRUPT) {
    482 			sc->kue_ed[KUE_ENDPT_INTR] = ed->bEndpointAddress;
    483 		}
    484 	}
    485 
    486 	if (sc->kue_ed[KUE_ENDPT_RX] == 0 || sc->kue_ed[KUE_ENDPT_TX] == 0) {
    487 		printf("%s: missing endpoint\n", USBDEVNAME(sc->kue_dev));
    488 		USB_ATTACH_ERROR_RETURN;
    489 	}
    490 
    491 	/* Read ethernet descriptor */
    492 	err = kue_ctl(sc, KUE_CTL_READ, KUE_CMD_GET_ETHER_DESCRIPTOR,
    493 	    0, &sc->kue_desc, sizeof(sc->kue_desc));
    494 	if (err) {
    495 		printf("%s: could not read Ethernet descriptor\n",
    496 		    USBDEVNAME(sc->kue_dev));
    497 		USB_ATTACH_ERROR_RETURN;
    498 	}
    499 
    500 	sc->kue_mcfilters = malloc(KUE_MCFILTCNT(sc) * ETHER_ADDR_LEN,
    501 	    M_USBDEV, M_NOWAIT);
    502 	if (sc->kue_mcfilters == NULL) {
    503 		printf("%s: no memory for multicast filter buffer\n",
    504 		    USBDEVNAME(sc->kue_dev));
    505 		USB_ATTACH_ERROR_RETURN;
    506 	}
    507 
    508 	s = splnet();
    509 
    510 	/*
    511 	 * A KLSI chip was detected. Inform the world.
    512 	 */
    513 	printf("%s: Ethernet address %s\n", USBDEVNAME(sc->kue_dev),
    514 	    ether_sprintf(sc->kue_desc.kue_macaddr));
    515 
    516 	/* Initialize interface info.*/
    517 	ifp = GET_IFP(sc);
    518 	ifp->if_softc = sc;
    519 	ifp->if_mtu = ETHERMTU;
    520 	ifp->if_flags = IFF_BROADCAST | IFF_SIMPLEX | IFF_MULTICAST;
    521 	ifp->if_ioctl = kue_ioctl;
    522 	ifp->if_start = kue_start;
    523 	ifp->if_watchdog = kue_watchdog;
    524 #if defined(__OpenBSD__)
    525 	ifp->if_snd.ifq_maxlen = IFQ_MAXLEN;
    526 #endif
    527 	strncpy(ifp->if_xname, USBDEVNAME(sc->kue_dev), IFNAMSIZ);
    528 
    529 	IFQ_SET_READY(&ifp->if_snd);
    530 
    531 	/* Attach the interface. */
    532 	if_attach(ifp);
    533 	Ether_ifattach(ifp, sc->kue_desc.kue_macaddr);
    534 #if NRND > 0
    535 	rnd_attach_source(&sc->rnd_source, USBDEVNAME(sc->kue_dev),
    536 	    RND_TYPE_NET, 0);
    537 #endif
    538 
    539 	sc->kue_attached = 1;
    540 	splx(s);
    541 
    542 	usbd_add_drv_event(USB_EVENT_DRIVER_ATTACH, sc->kue_udev,
    543 			   USBDEV(sc->kue_dev));
    544 
    545 	USB_ATTACH_SUCCESS_RETURN;
    546 }
    547 
    548 USB_DETACH(kue)
    549 {
    550 	USB_DETACH_START(kue, sc);
    551 	struct ifnet		*ifp = GET_IFP(sc);
    552 	int			s;
    553 
    554 	s = splusb();		/* XXX why? */
    555 
    556 	if (sc->kue_mcfilters != NULL) {
    557 		free(sc->kue_mcfilters, M_USBDEV);
    558 		sc->kue_mcfilters = NULL;
    559 	}
    560 
    561 	if (!sc->kue_attached) {
    562 		/* Detached before attached finished, so just bail out. */
    563 		splx(s);
    564 		return (0);
    565 	}
    566 
    567 	if (ifp->if_flags & IFF_RUNNING)
    568 		kue_stop(sc);
    569 
    570 #if defined(__NetBSD__)
    571 #if NRND > 0
    572 	rnd_detach_source(&sc->rnd_source);
    573 #endif
    574 	ether_ifdetach(ifp);
    575 #endif /* __NetBSD__ */
    576 
    577 	if_detach(ifp);
    578 
    579 #ifdef DIAGNOSTIC
    580 	if (sc->kue_ep[KUE_ENDPT_TX] != NULL ||
    581 	    sc->kue_ep[KUE_ENDPT_RX] != NULL ||
    582 	    sc->kue_ep[KUE_ENDPT_INTR] != NULL)
    583 		printf("%s: detach has active endpoints\n",
    584 		       USBDEVNAME(sc->kue_dev));
    585 #endif
    586 
    587 	sc->kue_attached = 0;
    588 	splx(s);
    589 
    590 	return (0);
    591 }
    592 
    593 int
    594 kue_activate(device_ptr_t self, enum devact act)
    595 {
    596 	struct kue_softc *sc = (struct kue_softc *)self;
    597 
    598 	DPRINTFN(2,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev), __func__));
    599 
    600 	switch (act) {
    601 	case DVACT_ACTIVATE:
    602 		return (EOPNOTSUPP);
    603 		break;
    604 
    605 	case DVACT_DEACTIVATE:
    606 #if defined(__NetBSD__)
    607 		/* Deactivate the interface. */
    608 		if_deactivate(&sc->kue_ec.ec_if);
    609 #endif
    610 		sc->kue_dying = 1;
    611 		break;
    612 	}
    613 	return (0);
    614 }
    615 
    616 /*
    617  * Initialize an RX descriptor and attach an MBUF cluster.
    618  */
    619 Static int
    620 kue_newbuf(struct kue_softc *sc, struct kue_chain *c, struct mbuf *m)
    621 {
    622 	struct mbuf		*m_new = NULL;
    623 
    624 	DPRINTFN(10,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev),__func__));
    625 
    626 	if (m == NULL) {
    627 		MGETHDR(m_new, M_DONTWAIT, MT_DATA);
    628 		if (m_new == NULL) {
    629 			printf("%s: no memory for rx list "
    630 			    "-- packet dropped!\n", USBDEVNAME(sc->kue_dev));
    631 			return (ENOBUFS);
    632 		}
    633 
    634 		MCLGET(m_new, M_DONTWAIT);
    635 		if (!(m_new->m_flags & M_EXT)) {
    636 			printf("%s: no memory for rx list "
    637 			    "-- packet dropped!\n", USBDEVNAME(sc->kue_dev));
    638 			m_freem(m_new);
    639 			return (ENOBUFS);
    640 		}
    641 		m_new->m_len = m_new->m_pkthdr.len = MCLBYTES;
    642 	} else {
    643 		m_new = m;
    644 		m_new->m_len = m_new->m_pkthdr.len = MCLBYTES;
    645 		m_new->m_data = m_new->m_ext.ext_buf;
    646 	}
    647 
    648 	c->kue_mbuf = m_new;
    649 
    650 	return (0);
    651 }
    652 
    653 Static int
    654 kue_rx_list_init(struct kue_softc *sc)
    655 {
    656 	struct kue_cdata	*cd;
    657 	struct kue_chain	*c;
    658 	int			i;
    659 
    660 	DPRINTFN(5,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev), __func__));
    661 
    662 	cd = &sc->kue_cdata;
    663 	for (i = 0; i < KUE_RX_LIST_CNT; i++) {
    664 		c = &cd->kue_rx_chain[i];
    665 		c->kue_sc = sc;
    666 		c->kue_idx = i;
    667 		if (kue_newbuf(sc, c, NULL) == ENOBUFS)
    668 			return (ENOBUFS);
    669 		if (c->kue_xfer == NULL) {
    670 			c->kue_xfer = usbd_alloc_xfer(sc->kue_udev);
    671 			if (c->kue_xfer == NULL)
    672 				return (ENOBUFS);
    673 			c->kue_buf = usbd_alloc_buffer(c->kue_xfer, KUE_BUFSZ);
    674 			if (c->kue_buf == NULL)
    675 				return (ENOBUFS); /* XXX free xfer */
    676 		}
    677 	}
    678 
    679 	return (0);
    680 }
    681 
    682 Static int
    683 kue_tx_list_init(struct kue_softc *sc)
    684 {
    685 	struct kue_cdata	*cd;
    686 	struct kue_chain	*c;
    687 	int			i;
    688 
    689 	DPRINTFN(5,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev), __func__));
    690 
    691 	cd = &sc->kue_cdata;
    692 	for (i = 0; i < KUE_TX_LIST_CNT; i++) {
    693 		c = &cd->kue_tx_chain[i];
    694 		c->kue_sc = sc;
    695 		c->kue_idx = i;
    696 		c->kue_mbuf = NULL;
    697 		if (c->kue_xfer == NULL) {
    698 			c->kue_xfer = usbd_alloc_xfer(sc->kue_udev);
    699 			if (c->kue_xfer == NULL)
    700 				return (ENOBUFS);
    701 			c->kue_buf = usbd_alloc_buffer(c->kue_xfer, KUE_BUFSZ);
    702 			if (c->kue_buf == NULL)
    703 				return (ENOBUFS);
    704 		}
    705 	}
    706 
    707 	return (0);
    708 }
    709 
    710 /*
    711  * A frame has been uploaded: pass the resulting mbuf chain up to
    712  * the higher level protocols.
    713  */
    714 Static void
    715 kue_rxeof(usbd_xfer_handle xfer, usbd_private_handle priv, usbd_status status)
    716 {
    717 	struct kue_chain	*c = priv;
    718 	struct kue_softc	*sc = c->kue_sc;
    719 	struct ifnet		*ifp = GET_IFP(sc);
    720 	struct mbuf		*m;
    721 	int			total_len = 0;
    722 	int			s;
    723 
    724 	DPRINTFN(10,("%s: %s: enter status=%d\n", USBDEVNAME(sc->kue_dev),
    725 		     __func__, status));
    726 
    727 	if (sc->kue_dying)
    728 		return;
    729 
    730 	if (!(ifp->if_flags & IFF_RUNNING))
    731 		return;
    732 
    733 	if (status != USBD_NORMAL_COMPLETION) {
    734 		if (status == USBD_NOT_STARTED || status == USBD_CANCELLED)
    735 			return;
    736 		sc->kue_rx_errs++;
    737 		if (usbd_ratecheck(&sc->kue_rx_notice)) {
    738 			printf("%s: %u usb errors on rx: %s\n",
    739 			    USBDEVNAME(sc->kue_dev), sc->kue_rx_errs,
    740 			    usbd_errstr(status));
    741 			sc->kue_rx_errs = 0;
    742 		}
    743 		if (status == USBD_STALLED)
    744 			usbd_clear_endpoint_stall_async(sc->kue_ep[KUE_ENDPT_RX]);
    745 		goto done;
    746 	}
    747 
    748 	usbd_get_xfer_status(xfer, NULL, NULL, &total_len, NULL);
    749 
    750 	DPRINTFN(10,("%s: %s: total_len=%d len=%d\n", USBDEVNAME(sc->kue_dev),
    751 		     __func__, total_len,
    752 		     UGETW(mtod(c->kue_mbuf, u_int8_t *))));
    753 
    754 	if (total_len <= 1)
    755 		goto done;
    756 
    757 	m = c->kue_mbuf;
    758 	/* copy data to mbuf */
    759 	memcpy(mtod(m, char *), c->kue_buf, total_len);
    760 
    761 	/* No errors; receive the packet. */
    762 	total_len = UGETW(mtod(m, u_int8_t *));
    763 	m_adj(m, sizeof(u_int16_t));
    764 
    765 	if (total_len < sizeof(struct ether_header)) {
    766 		ifp->if_ierrors++;
    767 		goto done;
    768 	}
    769 
    770 	ifp->if_ipackets++;
    771 	m->m_pkthdr.len = m->m_len = total_len;
    772 
    773 	m->m_pkthdr.rcvif = ifp;
    774 
    775 	s = splnet();
    776 
    777 	/* XXX ugly */
    778 	if (kue_newbuf(sc, c, NULL) == ENOBUFS) {
    779 		ifp->if_ierrors++;
    780 		goto done1;
    781 	}
    782 
    783 #if NBPFILTER > 0
    784 	/*
    785 	 * Handle BPF listeners. Let the BPF user see the packet, but
    786 	 * don't pass it up to the ether_input() layer unless it's
    787 	 * a broadcast packet, multicast packet, matches our ethernet
    788 	 * address or the interface is in promiscuous mode.
    789 	 */
    790 	if (ifp->if_bpf)
    791 		bpf_mtap(ifp->if_bpf, m);
    792 #endif
    793 
    794 	DPRINTFN(10,("%s: %s: deliver %d\n", USBDEVNAME(sc->kue_dev),
    795 		    __func__, m->m_len));
    796 	IF_INPUT(ifp, m);
    797  done1:
    798 	splx(s);
    799 
    800  done:
    801 
    802 	/* Setup new transfer. */
    803 	usbd_setup_xfer(c->kue_xfer, sc->kue_ep[KUE_ENDPT_RX],
    804 	    c, c->kue_buf, KUE_BUFSZ, USBD_SHORT_XFER_OK | USBD_NO_COPY,
    805 	    USBD_NO_TIMEOUT, kue_rxeof);
    806 	usbd_transfer(c->kue_xfer);
    807 
    808 	DPRINTFN(10,("%s: %s: start rx\n", USBDEVNAME(sc->kue_dev),
    809 		    __func__));
    810 }
    811 
    812 /*
    813  * A frame was downloaded to the chip. It's safe for us to clean up
    814  * the list buffers.
    815  */
    816 
    817 Static void
    818 kue_txeof(usbd_xfer_handle xfer __unused, usbd_private_handle priv,
    819     usbd_status status)
    820 {
    821 	struct kue_chain	*c = priv;
    822 	struct kue_softc	*sc = c->kue_sc;
    823 	struct ifnet		*ifp = GET_IFP(sc);
    824 	int			s;
    825 
    826 	if (sc->kue_dying)
    827 		return;
    828 
    829 	s = splnet();
    830 
    831 	DPRINTFN(10,("%s: %s: enter status=%d\n", USBDEVNAME(sc->kue_dev),
    832 		    __func__, status));
    833 
    834 	ifp->if_timer = 0;
    835 	ifp->if_flags &= ~IFF_OACTIVE;
    836 
    837 	if (status != USBD_NORMAL_COMPLETION) {
    838 		if (status == USBD_NOT_STARTED || status == USBD_CANCELLED) {
    839 			splx(s);
    840 			return;
    841 		}
    842 		ifp->if_oerrors++;
    843 		printf("%s: usb error on tx: %s\n", USBDEVNAME(sc->kue_dev),
    844 		    usbd_errstr(status));
    845 		if (status == USBD_STALLED)
    846 			usbd_clear_endpoint_stall_async(sc->kue_ep[KUE_ENDPT_TX]);
    847 		splx(s);
    848 		return;
    849 	}
    850 
    851 	ifp->if_opackets++;
    852 
    853 	m_freem(c->kue_mbuf);
    854 	c->kue_mbuf = NULL;
    855 
    856 	if (IFQ_IS_EMPTY(&ifp->if_snd) == 0)
    857 		kue_start(ifp);
    858 
    859 	splx(s);
    860 }
    861 
    862 Static int
    863 kue_send(struct kue_softc *sc, struct mbuf *m, int idx)
    864 {
    865 	int			total_len;
    866 	struct kue_chain	*c;
    867 	usbd_status		err;
    868 
    869 	DPRINTFN(10,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev),__func__));
    870 
    871 	c = &sc->kue_cdata.kue_tx_chain[idx];
    872 
    873 	/*
    874 	 * Copy the mbuf data into a contiguous buffer, leaving two
    875 	 * bytes at the beginning to hold the frame length.
    876 	 */
    877 	m_copydata(m, 0, m->m_pkthdr.len, c->kue_buf + 2);
    878 	c->kue_mbuf = m;
    879 
    880 	total_len = m->m_pkthdr.len + 2;
    881 	/* XXX what's this? */
    882 	total_len += 64 - (total_len % 64);
    883 
    884 	/* Frame length is specified in the first 2 bytes of the buffer. */
    885 	c->kue_buf[0] = (u_int8_t)m->m_pkthdr.len;
    886 	c->kue_buf[1] = (u_int8_t)(m->m_pkthdr.len >> 8);
    887 
    888 	usbd_setup_xfer(c->kue_xfer, sc->kue_ep[KUE_ENDPT_TX],
    889 	    c, c->kue_buf, total_len, USBD_NO_COPY, USBD_DEFAULT_TIMEOUT,
    890 	    kue_txeof);
    891 
    892 	/* Transmit */
    893 	err = usbd_transfer(c->kue_xfer);
    894 	if (err != USBD_IN_PROGRESS) {
    895 		printf("%s: kue_send error=%s\n", USBDEVNAME(sc->kue_dev),
    896 		       usbd_errstr(err));
    897 		kue_stop(sc);
    898 		return (EIO);
    899 	}
    900 
    901 	sc->kue_cdata.kue_tx_cnt++;
    902 
    903 	return (0);
    904 }
    905 
    906 Static void
    907 kue_start(struct ifnet *ifp)
    908 {
    909 	struct kue_softc	*sc = ifp->if_softc;
    910 	struct mbuf		*m_head = NULL;
    911 
    912 	DPRINTFN(10,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev),__func__));
    913 
    914 	if (sc->kue_dying)
    915 		return;
    916 
    917 	if (ifp->if_flags & IFF_OACTIVE)
    918 		return;
    919 
    920 	IFQ_POLL(&ifp->if_snd, m_head);
    921 	if (m_head == NULL)
    922 		return;
    923 
    924 	if (kue_send(sc, m_head, 0)) {
    925 		ifp->if_flags |= IFF_OACTIVE;
    926 		return;
    927 	}
    928 
    929 	IFQ_DEQUEUE(&ifp->if_snd, m_head);
    930 
    931 #if NBPFILTER > 0
    932 	/*
    933 	 * If there's a BPF listener, bounce a copy of this frame
    934 	 * to him.
    935 	 */
    936 	if (ifp->if_bpf)
    937 		bpf_mtap(ifp->if_bpf, m_head);
    938 #endif
    939 
    940 	ifp->if_flags |= IFF_OACTIVE;
    941 
    942 	/*
    943 	 * Set a timeout in case the chip goes out to lunch.
    944 	 */
    945 	ifp->if_timer = 6;
    946 }
    947 
    948 Static void
    949 kue_init(void *xsc)
    950 {
    951 	struct kue_softc	*sc = xsc;
    952 	struct ifnet		*ifp = GET_IFP(sc);
    953 	int			s;
    954 	u_char			*eaddr;
    955 
    956 	DPRINTFN(5,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev),__func__));
    957 
    958 	if (ifp->if_flags & IFF_RUNNING)
    959 		return;
    960 
    961 	s = splnet();
    962 
    963 #if defined(__NetBSD__)
    964 	eaddr = LLADDR(ifp->if_sadl);
    965 #else
    966 	eaddr = sc->arpcom.ac_enaddr;
    967 #endif /* defined(__NetBSD__) */
    968 	/* Set MAC address */
    969 	kue_ctl(sc, KUE_CTL_WRITE, KUE_CMD_SET_MAC, 0, eaddr, ETHER_ADDR_LEN);
    970 
    971 	sc->kue_rxfilt = KUE_RXFILT_UNICAST | KUE_RXFILT_BROADCAST;
    972 
    973 	 /* If we want promiscuous mode, set the allframes bit. */
    974 	if (ifp->if_flags & IFF_PROMISC)
    975 		sc->kue_rxfilt |= KUE_RXFILT_PROMISC;
    976 
    977 	kue_setword(sc, KUE_CMD_SET_PKT_FILTER, sc->kue_rxfilt);
    978 
    979 	/* I'm not sure how to tune these. */
    980 #if 0
    981 	/*
    982 	 * Leave this one alone for now; setting it
    983 	 * wrong causes lockups on some machines/controllers.
    984 	 */
    985 	kue_setword(sc, KUE_CMD_SET_SOFS, 1);
    986 #endif
    987 	kue_setword(sc, KUE_CMD_SET_URB_SIZE, 64);
    988 
    989 	/* Init TX ring. */
    990 	if (kue_tx_list_init(sc) == ENOBUFS) {
    991 		printf("%s: tx list init failed\n", USBDEVNAME(sc->kue_dev));
    992 		splx(s);
    993 		return;
    994 	}
    995 
    996 	/* Init RX ring. */
    997 	if (kue_rx_list_init(sc) == ENOBUFS) {
    998 		printf("%s: rx list init failed\n", USBDEVNAME(sc->kue_dev));
    999 		splx(s);
   1000 		return;
   1001 	}
   1002 
   1003 	/* Load the multicast filter. */
   1004 	kue_setmulti(sc);
   1005 
   1006 	if (sc->kue_ep[KUE_ENDPT_RX] == NULL) {
   1007 		if (kue_open_pipes(sc)) {
   1008 			splx(s);
   1009 			return;
   1010 		}
   1011 	}
   1012 
   1013 	ifp->if_flags |= IFF_RUNNING;
   1014 	ifp->if_flags &= ~IFF_OACTIVE;
   1015 
   1016 	splx(s);
   1017 }
   1018 
   1019 Static int
   1020 kue_open_pipes(struct kue_softc *sc)
   1021 {
   1022 	usbd_status		err;
   1023 	struct kue_chain	*c;
   1024 	int			i;
   1025 
   1026 	DPRINTFN(5,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev),__func__));
   1027 
   1028 	/* Open RX and TX pipes. */
   1029 	err = usbd_open_pipe(sc->kue_iface, sc->kue_ed[KUE_ENDPT_RX],
   1030 	    USBD_EXCLUSIVE_USE, &sc->kue_ep[KUE_ENDPT_RX]);
   1031 	if (err) {
   1032 		printf("%s: open rx pipe failed: %s\n",
   1033 		    USBDEVNAME(sc->kue_dev), usbd_errstr(err));
   1034 		return (EIO);
   1035 	}
   1036 
   1037 	err = usbd_open_pipe(sc->kue_iface, sc->kue_ed[KUE_ENDPT_TX],
   1038 	    USBD_EXCLUSIVE_USE, &sc->kue_ep[KUE_ENDPT_TX]);
   1039 	if (err) {
   1040 		printf("%s: open tx pipe failed: %s\n",
   1041 		    USBDEVNAME(sc->kue_dev), usbd_errstr(err));
   1042 		return (EIO);
   1043 	}
   1044 
   1045 	/* Start up the receive pipe. */
   1046 	for (i = 0; i < KUE_RX_LIST_CNT; i++) {
   1047 		c = &sc->kue_cdata.kue_rx_chain[i];
   1048 		usbd_setup_xfer(c->kue_xfer, sc->kue_ep[KUE_ENDPT_RX],
   1049 		    c, c->kue_buf, KUE_BUFSZ,
   1050 		    USBD_SHORT_XFER_OK | USBD_NO_COPY, USBD_NO_TIMEOUT,
   1051 		    kue_rxeof);
   1052 		DPRINTFN(5,("%s: %s: start read\n", USBDEVNAME(sc->kue_dev),
   1053 			    __func__));
   1054 		usbd_transfer(c->kue_xfer);
   1055 	}
   1056 
   1057 	return (0);
   1058 }
   1059 
   1060 Static int
   1061 kue_ioctl(struct ifnet *ifp, u_long command, caddr_t data)
   1062 {
   1063 	struct kue_softc	*sc = ifp->if_softc;
   1064 	struct ifaddr 		*ifa = (struct ifaddr *)data;
   1065 	struct ifreq		*ifr = (struct ifreq *)data;
   1066 	int			s, error = 0;
   1067 
   1068 	DPRINTFN(5,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev),__func__));
   1069 
   1070 	if (sc->kue_dying)
   1071 		return (EIO);
   1072 
   1073 #ifdef DIAGNOSTIC
   1074 	if (!curproc) {
   1075 		printf("%s: no proc!!\n", USBDEVNAME(sc->kue_dev));
   1076 		return EIO;
   1077 	}
   1078 #endif
   1079 
   1080 	s = splnet();
   1081 
   1082 	switch(command) {
   1083 	case SIOCSIFADDR:
   1084 		ifp->if_flags |= IFF_UP;
   1085 		kue_init(sc);
   1086 
   1087 		switch (ifa->ifa_addr->sa_family) {
   1088 #ifdef INET
   1089 		case AF_INET:
   1090 #if defined(__NetBSD__)
   1091 			arp_ifinit(ifp, ifa);
   1092 #else
   1093 			arp_ifinit(&sc->arpcom, ifa);
   1094 #endif
   1095 			break;
   1096 #endif /* INET */
   1097 		}
   1098 		break;
   1099 
   1100 	case SIOCSIFMTU:
   1101 		if (ifr->ifr_mtu > ETHERMTU)
   1102 			error = EINVAL;
   1103 		else
   1104 			ifp->if_mtu = ifr->ifr_mtu;
   1105 		break;
   1106 
   1107 	case SIOCSIFFLAGS:
   1108 		if (ifp->if_flags & IFF_UP) {
   1109 			if (ifp->if_flags & IFF_RUNNING &&
   1110 			    ifp->if_flags & IFF_PROMISC &&
   1111 			    !(sc->kue_if_flags & IFF_PROMISC)) {
   1112 				sc->kue_rxfilt |= KUE_RXFILT_PROMISC;
   1113 				kue_setword(sc, KUE_CMD_SET_PKT_FILTER,
   1114 				    sc->kue_rxfilt);
   1115 			} else if (ifp->if_flags & IFF_RUNNING &&
   1116 			    !(ifp->if_flags & IFF_PROMISC) &&
   1117 			    sc->kue_if_flags & IFF_PROMISC) {
   1118 				sc->kue_rxfilt &= ~KUE_RXFILT_PROMISC;
   1119 				kue_setword(sc, KUE_CMD_SET_PKT_FILTER,
   1120 				    sc->kue_rxfilt);
   1121 			} else if (!(ifp->if_flags & IFF_RUNNING))
   1122 				kue_init(sc);
   1123 		} else {
   1124 			if (ifp->if_flags & IFF_RUNNING)
   1125 				kue_stop(sc);
   1126 		}
   1127 		sc->kue_if_flags = ifp->if_flags;
   1128 		error = 0;
   1129 		break;
   1130 	case SIOCADDMULTI:
   1131 	case SIOCDELMULTI:
   1132 		kue_setmulti(sc);
   1133 		error = 0;
   1134 		break;
   1135 	default:
   1136 		error = EINVAL;
   1137 		break;
   1138 	}
   1139 
   1140 	splx(s);
   1141 
   1142 	return (error);
   1143 }
   1144 
   1145 Static void
   1146 kue_watchdog(struct ifnet *ifp)
   1147 {
   1148 	struct kue_softc	*sc = ifp->if_softc;
   1149 	struct kue_chain	*c;
   1150 	usbd_status		stat;
   1151 	int			s;
   1152 
   1153 	DPRINTFN(5,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev),__func__));
   1154 
   1155 	if (sc->kue_dying)
   1156 		return;
   1157 
   1158 	ifp->if_oerrors++;
   1159 	printf("%s: watchdog timeout\n", USBDEVNAME(sc->kue_dev));
   1160 
   1161 	s = splusb();
   1162 	c = &sc->kue_cdata.kue_tx_chain[0];
   1163 	usbd_get_xfer_status(c->kue_xfer, NULL, NULL, NULL, &stat);
   1164 	kue_txeof(c->kue_xfer, c, stat);
   1165 
   1166 	if (IFQ_IS_EMPTY(&ifp->if_snd) == 0)
   1167 		kue_start(ifp);
   1168 	splx(s);
   1169 }
   1170 
   1171 /*
   1172  * Stop the adapter and free any mbufs allocated to the
   1173  * RX and TX lists.
   1174  */
   1175 Static void
   1176 kue_stop(struct kue_softc *sc)
   1177 {
   1178 	usbd_status		err;
   1179 	struct ifnet		*ifp;
   1180 	int			i;
   1181 
   1182 	DPRINTFN(5,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev),__func__));
   1183 
   1184 	ifp = GET_IFP(sc);
   1185 	ifp->if_timer = 0;
   1186 
   1187 	/* Stop transfers. */
   1188 	if (sc->kue_ep[KUE_ENDPT_RX] != NULL) {
   1189 		err = usbd_abort_pipe(sc->kue_ep[KUE_ENDPT_RX]);
   1190 		if (err) {
   1191 			printf("%s: abort rx pipe failed: %s\n",
   1192 			    USBDEVNAME(sc->kue_dev), usbd_errstr(err));
   1193 		}
   1194 		err = usbd_close_pipe(sc->kue_ep[KUE_ENDPT_RX]);
   1195 		if (err) {
   1196 			printf("%s: close rx pipe failed: %s\n",
   1197 			    USBDEVNAME(sc->kue_dev), usbd_errstr(err));
   1198 		}
   1199 		sc->kue_ep[KUE_ENDPT_RX] = NULL;
   1200 	}
   1201 
   1202 	if (sc->kue_ep[KUE_ENDPT_TX] != NULL) {
   1203 		err = usbd_abort_pipe(sc->kue_ep[KUE_ENDPT_TX]);
   1204 		if (err) {
   1205 			printf("%s: abort tx pipe failed: %s\n",
   1206 			    USBDEVNAME(sc->kue_dev), usbd_errstr(err));
   1207 		}
   1208 		err = usbd_close_pipe(sc->kue_ep[KUE_ENDPT_TX]);
   1209 		if (err) {
   1210 			printf("%s: close tx pipe failed: %s\n",
   1211 			    USBDEVNAME(sc->kue_dev), usbd_errstr(err));
   1212 		}
   1213 		sc->kue_ep[KUE_ENDPT_TX] = NULL;
   1214 	}
   1215 
   1216 	if (sc->kue_ep[KUE_ENDPT_INTR] != NULL) {
   1217 		err = usbd_abort_pipe(sc->kue_ep[KUE_ENDPT_INTR]);
   1218 		if (err) {
   1219 			printf("%s: abort intr pipe failed: %s\n",
   1220 			    USBDEVNAME(sc->kue_dev), usbd_errstr(err));
   1221 		}
   1222 		err = usbd_close_pipe(sc->kue_ep[KUE_ENDPT_INTR]);
   1223 		if (err) {
   1224 			printf("%s: close intr pipe failed: %s\n",
   1225 			    USBDEVNAME(sc->kue_dev), usbd_errstr(err));
   1226 		}
   1227 		sc->kue_ep[KUE_ENDPT_INTR] = NULL;
   1228 	}
   1229 
   1230 	/* Free RX resources. */
   1231 	for (i = 0; i < KUE_RX_LIST_CNT; i++) {
   1232 		if (sc->kue_cdata.kue_rx_chain[i].kue_mbuf != NULL) {
   1233 			m_freem(sc->kue_cdata.kue_rx_chain[i].kue_mbuf);
   1234 			sc->kue_cdata.kue_rx_chain[i].kue_mbuf = NULL;
   1235 		}
   1236 		if (sc->kue_cdata.kue_rx_chain[i].kue_xfer != NULL) {
   1237 			usbd_free_xfer(sc->kue_cdata.kue_rx_chain[i].kue_xfer);
   1238 			sc->kue_cdata.kue_rx_chain[i].kue_xfer = NULL;
   1239 		}
   1240 	}
   1241 
   1242 	/* Free TX resources. */
   1243 	for (i = 0; i < KUE_TX_LIST_CNT; i++) {
   1244 		if (sc->kue_cdata.kue_tx_chain[i].kue_mbuf != NULL) {
   1245 			m_freem(sc->kue_cdata.kue_tx_chain[i].kue_mbuf);
   1246 			sc->kue_cdata.kue_tx_chain[i].kue_mbuf = NULL;
   1247 		}
   1248 		if (sc->kue_cdata.kue_tx_chain[i].kue_xfer != NULL) {
   1249 			usbd_free_xfer(sc->kue_cdata.kue_tx_chain[i].kue_xfer);
   1250 			sc->kue_cdata.kue_tx_chain[i].kue_xfer = NULL;
   1251 		}
   1252 	}
   1253 
   1254 	ifp->if_flags &= ~(IFF_RUNNING | IFF_OACTIVE);
   1255 }
   1256