if_urndis.c revision 1.12
1 /* $NetBSD: if_urndis.c,v 1.12 2016/06/10 13:27:15 ozaki-r Exp $ */ 2 /* $OpenBSD: if_urndis.c,v 1.31 2011/07/03 15:47:17 matthew Exp $ */ 3 4 /* 5 * Copyright (c) 2010 Jonathan Armani <armani (at) openbsd.org> 6 * Copyright (c) 2010 Fabien Romano <fabien (at) openbsd.org> 7 * Copyright (c) 2010 Michael Knudsen <mk (at) openbsd.org> 8 * All rights reserved. 9 * 10 * Permission to use, copy, modify, and distribute this software for any 11 * purpose with or without fee is hereby granted, provided that the above 12 * copyright notice and this permission notice appear in all copies. 13 * 14 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES 15 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF 16 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR 17 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES 18 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 19 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 20 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 21 */ 22 23 #include <sys/cdefs.h> 24 __KERNEL_RCSID(0, "$NetBSD: if_urndis.c,v 1.12 2016/06/10 13:27:15 ozaki-r Exp $"); 25 26 #include <sys/param.h> 27 #include <sys/systm.h> 28 #include <sys/sockio.h> 29 #include <sys/rwlock.h> 30 #include <sys/mbuf.h> 31 #include <sys/kmem.h> 32 #include <sys/kernel.h> 33 #include <sys/proc.h> 34 #include <sys/socket.h> 35 #include <sys/device.h> 36 37 #include <net/if.h> 38 #include <net/if_dl.h> 39 #include <net/if_media.h> 40 #include <net/if_ether.h> 41 42 #include <net/bpf.h> 43 44 #include <sys/bus.h> 45 #include <dev/usb/usb.h> 46 #include <dev/usb/usbdi.h> 47 #include <dev/usb/usbdi_util.h> 48 #include <dev/usb/usbdivar.h> 49 #include <dev/usb/usbdevs.h> 50 #include <dev/usb/usbcdc.h> 51 52 #include <dev/usb/if_urndisreg.h> 53 54 #ifdef URNDIS_DEBUG 55 #define DPRINTF(x) do { printf x; } while (0) 56 #else 57 #define DPRINTF(x) 58 #endif 59 60 #define DEVNAME(sc) (device_xname(sc->sc_dev)) 61 62 #define ETHER_ALIGN 2 63 #define URNDIS_RESPONSE_LEN 0x400 64 65 66 static int urndis_newbuf(struct urndis_softc *, struct urndis_chain *); 67 68 static int urndis_ioctl(struct ifnet *, unsigned long, void *); 69 #if 0 70 static void urndis_watchdog(struct ifnet *); 71 #endif 72 73 static void urndis_start(struct ifnet *); 74 static void urndis_rxeof(struct usbd_xfer *, void *, usbd_status); 75 static void urndis_txeof(struct usbd_xfer *, void *, usbd_status); 76 static int urndis_rx_list_init(struct urndis_softc *); 77 static int urndis_tx_list_init(struct urndis_softc *); 78 79 static int urndis_init(struct ifnet *); 80 static void urndis_stop(struct ifnet *); 81 82 static usbd_status urndis_ctrl_msg(struct urndis_softc *, uint8_t, uint8_t, 83 uint16_t, uint16_t, void *, size_t); 84 static usbd_status urndis_ctrl_send(struct urndis_softc *, void *, size_t); 85 static struct urndis_comp_hdr *urndis_ctrl_recv(struct urndis_softc *); 86 87 static uint32_t urndis_ctrl_handle(struct urndis_softc *, 88 struct urndis_comp_hdr *, void **, size_t *); 89 static uint32_t urndis_ctrl_handle_init(struct urndis_softc *, 90 const struct urndis_comp_hdr *); 91 static uint32_t urndis_ctrl_handle_query(struct urndis_softc *, 92 const struct urndis_comp_hdr *, void **, size_t *); 93 static uint32_t urndis_ctrl_handle_reset(struct urndis_softc *, 94 const struct urndis_comp_hdr *); 95 96 static uint32_t urndis_ctrl_init(struct urndis_softc *); 97 #if 0 98 static uint32_t urndis_ctrl_halt(struct urndis_softc *); 99 #endif 100 static uint32_t urndis_ctrl_query(struct urndis_softc *, uint32_t, void *, 101 size_t, void **, size_t *); 102 static uint32_t urndis_ctrl_set(struct urndis_softc *, uint32_t, void *, size_t); 103 #if 0 104 static uint32_t urndis_ctrl_set_param(struct urndis_softc *, const char *, 105 uint32_t, void *, size_t); 106 static uint32_t urndis_ctrl_reset(struct urndis_softc *); 107 static uint32_t urndis_ctrl_keepalive(struct urndis_softc *); 108 #endif 109 110 static int urndis_encap(struct urndis_softc *, struct mbuf *, int); 111 static void urndis_decap(struct urndis_softc *, struct urndis_chain *, uint32_t); 112 113 static int urndis_match(device_t, cfdata_t, void *); 114 static void urndis_attach(device_t, device_t, void *); 115 static int urndis_detach(device_t, int); 116 static int urndis_activate(device_t, enum devact); 117 118 CFATTACH_DECL_NEW(urndis, sizeof(struct urndis_softc), 119 urndis_match, urndis_attach, urndis_detach, urndis_activate); 120 121 /* 122 * Supported devices that we can't match by class IDs. 123 */ 124 static const struct usb_devno urndis_devs[] = { 125 { USB_VENDOR_HTC, USB_PRODUCT_HTC_ANDROID }, 126 { USB_VENDOR_SAMSUNG, USB_PRODUCT_SAMSUNG_ANDROID2 }, 127 }; 128 129 static usbd_status 130 urndis_ctrl_msg(struct urndis_softc *sc, uint8_t rt, uint8_t r, 131 uint16_t index, uint16_t value, void *buf, size_t buflen) 132 { 133 usb_device_request_t req; 134 135 req.bmRequestType = rt; 136 req.bRequest = r; 137 USETW(req.wValue, value); 138 USETW(req.wIndex, index); 139 USETW(req.wLength, buflen); 140 141 return usbd_do_request(sc->sc_udev, &req, buf); 142 } 143 144 static usbd_status 145 urndis_ctrl_send(struct urndis_softc *sc, void *buf, size_t len) 146 { 147 usbd_status err; 148 149 if (sc->sc_dying) 150 return(0); 151 152 err = urndis_ctrl_msg(sc, UT_WRITE_CLASS_INTERFACE, UR_GET_STATUS, 153 sc->sc_ifaceno_ctl, 0, buf, len); 154 155 if (err != USBD_NORMAL_COMPLETION) 156 printf("%s: %s\n", DEVNAME(sc), usbd_errstr(err)); 157 158 return err; 159 } 160 161 static struct urndis_comp_hdr * 162 urndis_ctrl_recv(struct urndis_softc *sc) 163 { 164 struct urndis_comp_hdr *hdr; 165 char *buf; 166 usbd_status err; 167 168 buf = kmem_alloc(URNDIS_RESPONSE_LEN, KM_SLEEP); 169 if (buf == NULL) { 170 printf("%s: out of memory\n", DEVNAME(sc)); 171 return NULL; 172 } 173 174 err = urndis_ctrl_msg(sc, UT_READ_CLASS_INTERFACE, UR_CLEAR_FEATURE, 175 sc->sc_ifaceno_ctl, 0, buf, URNDIS_RESPONSE_LEN); 176 177 if (err != USBD_NORMAL_COMPLETION && err != USBD_SHORT_XFER) { 178 printf("%s: %s\n", DEVNAME(sc), usbd_errstr(err)); 179 kmem_free(buf, URNDIS_RESPONSE_LEN); 180 return NULL; 181 } 182 183 hdr = (struct urndis_comp_hdr *)buf; 184 DPRINTF(("%s: urndis_ctrl_recv: type 0x%x len %u\n", 185 DEVNAME(sc), 186 le32toh(hdr->rm_type), 187 le32toh(hdr->rm_len))); 188 189 if (le32toh(hdr->rm_len) > URNDIS_RESPONSE_LEN) { 190 printf("%s: ctrl message error: wrong size %u > %u\n", 191 DEVNAME(sc), 192 le32toh(hdr->rm_len), 193 URNDIS_RESPONSE_LEN); 194 kmem_free(buf, URNDIS_RESPONSE_LEN); 195 return NULL; 196 } 197 198 return hdr; 199 } 200 201 static uint32_t 202 urndis_ctrl_handle(struct urndis_softc *sc, struct urndis_comp_hdr *hdr, 203 void **buf, size_t *bufsz) 204 { 205 uint32_t rval; 206 207 DPRINTF(("%s: urndis_ctrl_handle\n", DEVNAME(sc))); 208 209 if (buf && bufsz) { 210 *buf = NULL; 211 *bufsz = 0; 212 } 213 214 switch (le32toh(hdr->rm_type)) { 215 case REMOTE_NDIS_INITIALIZE_CMPLT: 216 rval = urndis_ctrl_handle_init(sc, hdr); 217 break; 218 219 case REMOTE_NDIS_QUERY_CMPLT: 220 rval = urndis_ctrl_handle_query(sc, hdr, buf, bufsz); 221 break; 222 223 case REMOTE_NDIS_RESET_CMPLT: 224 rval = urndis_ctrl_handle_reset(sc, hdr); 225 break; 226 227 case REMOTE_NDIS_KEEPALIVE_CMPLT: 228 case REMOTE_NDIS_SET_CMPLT: 229 rval = le32toh(hdr->rm_status); 230 break; 231 232 default: 233 printf("%s: ctrl message error: unknown event 0x%x\n", 234 DEVNAME(sc), le32toh(hdr->rm_type)); 235 rval = RNDIS_STATUS_FAILURE; 236 } 237 238 kmem_free(hdr, URNDIS_RESPONSE_LEN); 239 240 return rval; 241 } 242 243 static uint32_t 244 urndis_ctrl_handle_init(struct urndis_softc *sc, 245 const struct urndis_comp_hdr *hdr) 246 { 247 const struct urndis_init_comp *msg; 248 249 msg = (const struct urndis_init_comp *) hdr; 250 251 DPRINTF(("%s: urndis_ctrl_handle_init: len %u rid %u status 0x%x " 252 "ver_major %u ver_minor %u devflags 0x%x medium 0x%x pktmaxcnt %u " 253 "pktmaxsz %u align %u aflistoffset %u aflistsz %u\n", 254 DEVNAME(sc), 255 le32toh(msg->rm_len), 256 le32toh(msg->rm_rid), 257 le32toh(msg->rm_status), 258 le32toh(msg->rm_ver_major), 259 le32toh(msg->rm_ver_minor), 260 le32toh(msg->rm_devflags), 261 le32toh(msg->rm_medium), 262 le32toh(msg->rm_pktmaxcnt), 263 le32toh(msg->rm_pktmaxsz), 264 le32toh(msg->rm_align), 265 le32toh(msg->rm_aflistoffset), 266 le32toh(msg->rm_aflistsz))); 267 268 if (le32toh(msg->rm_status) != RNDIS_STATUS_SUCCESS) { 269 printf("%s: init failed 0x%x\n", 270 DEVNAME(sc), 271 le32toh(msg->rm_status)); 272 273 return le32toh(msg->rm_status); 274 } 275 276 if (le32toh(msg->rm_devflags) != RNDIS_DF_CONNECTIONLESS) { 277 printf("%s: wrong device type (current type: 0x%x)\n", 278 DEVNAME(sc), 279 le32toh(msg->rm_devflags)); 280 281 return RNDIS_STATUS_FAILURE; 282 } 283 284 if (le32toh(msg->rm_medium) != RNDIS_MEDIUM_802_3) { 285 printf("%s: medium not 802.3 (current medium: 0x%x)\n", 286 DEVNAME(sc), le32toh(msg->rm_medium)); 287 288 return RNDIS_STATUS_FAILURE; 289 } 290 291 sc->sc_lim_pktsz = le32toh(msg->rm_pktmaxsz); 292 293 return le32toh(msg->rm_status); 294 } 295 296 static uint32_t 297 urndis_ctrl_handle_query(struct urndis_softc *sc, 298 const struct urndis_comp_hdr *hdr, void **buf, size_t *bufsz) 299 { 300 const struct urndis_query_comp *msg; 301 302 msg = (const struct urndis_query_comp *) hdr; 303 304 DPRINTF(("%s: urndis_ctrl_handle_query: len %u rid %u status 0x%x " 305 "buflen %u bufoff %u\n", 306 DEVNAME(sc), 307 le32toh(msg->rm_len), 308 le32toh(msg->rm_rid), 309 le32toh(msg->rm_status), 310 le32toh(msg->rm_infobuflen), 311 le32toh(msg->rm_infobufoffset))); 312 313 if (buf && bufsz) { 314 *buf = NULL; 315 *bufsz = 0; 316 } 317 318 if (le32toh(msg->rm_status) != RNDIS_STATUS_SUCCESS) { 319 printf("%s: query failed 0x%x\n", 320 DEVNAME(sc), 321 le32toh(msg->rm_status)); 322 323 return le32toh(msg->rm_status); 324 } 325 326 if (le32toh(msg->rm_infobuflen) + le32toh(msg->rm_infobufoffset) + 327 RNDIS_HEADER_OFFSET > le32toh(msg->rm_len)) { 328 printf("%s: ctrl message error: invalid query info " 329 "len/offset/end_position(%u/%u/%u) -> " 330 "go out of buffer limit %u\n", 331 DEVNAME(sc), 332 le32toh(msg->rm_infobuflen), 333 le32toh(msg->rm_infobufoffset), 334 le32toh(msg->rm_infobuflen) + 335 le32toh(msg->rm_infobufoffset) + (uint32_t)RNDIS_HEADER_OFFSET, 336 le32toh(msg->rm_len)); 337 return RNDIS_STATUS_FAILURE; 338 } 339 340 if (buf && bufsz) { 341 *buf = kmem_alloc(le32toh(msg->rm_infobuflen), KM_SLEEP); 342 if (*buf == NULL) { 343 printf("%s: out of memory\n", DEVNAME(sc)); 344 return RNDIS_STATUS_FAILURE; 345 } else { 346 const char *p; 347 *bufsz = le32toh(msg->rm_infobuflen); 348 349 p = (const char *)&msg->rm_rid; 350 p += le32toh(msg->rm_infobufoffset); 351 memcpy(*buf, p, le32toh(msg->rm_infobuflen)); 352 } 353 } 354 355 return le32toh(msg->rm_status); 356 } 357 358 static uint32_t 359 urndis_ctrl_handle_reset(struct urndis_softc *sc, 360 const struct urndis_comp_hdr *hdr) 361 { 362 const struct urndis_reset_comp *msg; 363 uint32_t rval; 364 365 msg = (const struct urndis_reset_comp *) hdr; 366 367 rval = le32toh(msg->rm_status); 368 369 DPRINTF(("%s: urndis_ctrl_handle_reset: len %u status 0x%x " 370 "adrreset %u\n", 371 DEVNAME(sc), 372 le32toh(msg->rm_len), 373 rval, 374 le32toh(msg->rm_adrreset))); 375 376 if (rval != RNDIS_STATUS_SUCCESS) { 377 printf("%s: reset failed 0x%x\n", DEVNAME(sc), rval); 378 return rval; 379 } 380 381 if (le32toh(msg->rm_adrreset) != 0) { 382 uint32_t filter; 383 384 filter = htole32(sc->sc_filter); 385 rval = urndis_ctrl_set(sc, OID_GEN_CURRENT_PACKET_FILTER, 386 &filter, sizeof(filter)); 387 if (rval != RNDIS_STATUS_SUCCESS) { 388 printf("%s: unable to reset data filters\n", 389 DEVNAME(sc)); 390 return rval; 391 } 392 } 393 394 return rval; 395 } 396 397 static uint32_t 398 urndis_ctrl_init(struct urndis_softc *sc) 399 { 400 struct urndis_init_req *msg; 401 uint32_t rval; 402 struct urndis_comp_hdr *hdr; 403 404 msg = kmem_alloc(sizeof(*msg), KM_SLEEP); 405 if (msg == NULL) { 406 printf("%s: out of memory\n", DEVNAME(sc)); 407 return RNDIS_STATUS_FAILURE; 408 } 409 410 msg->rm_type = htole32(REMOTE_NDIS_INITIALIZE_MSG); 411 msg->rm_len = htole32(sizeof(*msg)); 412 msg->rm_rid = htole32(0); 413 msg->rm_ver_major = htole32(1); 414 msg->rm_ver_minor = htole32(1); 415 msg->rm_max_xfersz = htole32(RNDIS_BUFSZ); 416 417 DPRINTF(("%s: urndis_ctrl_init send: type %u len %u rid %u ver_major %u " 418 "ver_minor %u max_xfersz %u\n", 419 DEVNAME(sc), 420 le32toh(msg->rm_type), 421 le32toh(msg->rm_len), 422 le32toh(msg->rm_rid), 423 le32toh(msg->rm_ver_major), 424 le32toh(msg->rm_ver_minor), 425 le32toh(msg->rm_max_xfersz))); 426 427 rval = urndis_ctrl_send(sc, msg, sizeof(*msg)); 428 kmem_free(msg, sizeof(*msg)); 429 430 if (rval != RNDIS_STATUS_SUCCESS) { 431 printf("%s: init failed\n", DEVNAME(sc)); 432 return rval; 433 } 434 435 if ((hdr = urndis_ctrl_recv(sc)) == NULL) { 436 printf("%s: unable to get init response\n", DEVNAME(sc)); 437 return RNDIS_STATUS_FAILURE; 438 } 439 rval = urndis_ctrl_handle(sc, hdr, NULL, NULL); 440 441 return rval; 442 } 443 444 #if 0 445 static uint32_t 446 urndis_ctrl_halt(struct urndis_softc *sc) 447 { 448 struct urndis_halt_req *msg; 449 uint32_t rval; 450 451 msg = kmem_alloc(sizeof(*msg), KM_SLEEP); 452 if (msg == NULL) { 453 printf("%s: out of memory\n", DEVNAME(sc)); 454 return RNDIS_STATUS_FAILURE; 455 } 456 457 msg->rm_type = htole32(REMOTE_NDIS_HALT_MSG); 458 msg->rm_len = htole32(sizeof(*msg)); 459 msg->rm_rid = 0; 460 461 DPRINTF(("%s: urndis_ctrl_halt send: type %u len %u rid %u\n", 462 DEVNAME(sc), 463 le32toh(msg->rm_type), 464 le32toh(msg->rm_len), 465 le32toh(msg->rm_rid))); 466 467 rval = urndis_ctrl_send(sc, msg, sizeof(*msg)); 468 kmem_free(msg, sizeof(*msg)); 469 470 if (rval != RNDIS_STATUS_SUCCESS) 471 printf("%s: halt failed\n", DEVNAME(sc)); 472 473 return rval; 474 } 475 #endif 476 477 static uint32_t 478 urndis_ctrl_query(struct urndis_softc *sc, uint32_t oid, 479 void *qbuf, size_t qlen, 480 void **rbuf, size_t *rbufsz) 481 { 482 struct urndis_query_req *msg; 483 uint32_t rval; 484 struct urndis_comp_hdr *hdr; 485 486 msg = kmem_alloc(sizeof(*msg) + qlen, KM_SLEEP); 487 if (msg == NULL) { 488 printf("%s: out of memory\n", DEVNAME(sc)); 489 return RNDIS_STATUS_FAILURE; 490 } 491 492 msg->rm_type = htole32(REMOTE_NDIS_QUERY_MSG); 493 msg->rm_len = htole32(sizeof(*msg) + qlen); 494 msg->rm_rid = 0; /* XXX */ 495 msg->rm_oid = htole32(oid); 496 msg->rm_infobuflen = htole32(qlen); 497 if (qlen != 0) { 498 msg->rm_infobufoffset = htole32(20); 499 memcpy((char*)msg + 20, qbuf, qlen); 500 } else 501 msg->rm_infobufoffset = 0; 502 msg->rm_devicevchdl = 0; 503 504 DPRINTF(("%s: urndis_ctrl_query send: type %u len %u rid %u oid 0x%x " 505 "infobuflen %u infobufoffset %u devicevchdl %u\n", 506 DEVNAME(sc), 507 le32toh(msg->rm_type), 508 le32toh(msg->rm_len), 509 le32toh(msg->rm_rid), 510 le32toh(msg->rm_oid), 511 le32toh(msg->rm_infobuflen), 512 le32toh(msg->rm_infobufoffset), 513 le32toh(msg->rm_devicevchdl))); 514 515 rval = urndis_ctrl_send(sc, msg, sizeof(*msg)); 516 kmem_free(msg, sizeof(*msg) + qlen); 517 518 if (rval != RNDIS_STATUS_SUCCESS) { 519 printf("%s: query failed\n", DEVNAME(sc)); 520 return rval; 521 } 522 523 if ((hdr = urndis_ctrl_recv(sc)) == NULL) { 524 printf("%s: unable to get query response\n", DEVNAME(sc)); 525 return RNDIS_STATUS_FAILURE; 526 } 527 rval = urndis_ctrl_handle(sc, hdr, rbuf, rbufsz); 528 529 return rval; 530 } 531 532 static uint32_t 533 urndis_ctrl_set(struct urndis_softc *sc, uint32_t oid, void *buf, size_t len) 534 { 535 struct urndis_set_req *msg; 536 uint32_t rval; 537 struct urndis_comp_hdr *hdr; 538 539 msg = kmem_alloc(sizeof(*msg) + len, KM_SLEEP); 540 if (msg == NULL) { 541 printf("%s: out of memory\n", DEVNAME(sc)); 542 return RNDIS_STATUS_FAILURE; 543 } 544 545 msg->rm_type = htole32(REMOTE_NDIS_SET_MSG); 546 msg->rm_len = htole32(sizeof(*msg) + len); 547 msg->rm_rid = 0; /* XXX */ 548 msg->rm_oid = htole32(oid); 549 msg->rm_infobuflen = htole32(len); 550 if (len != 0) { 551 msg->rm_infobufoffset = htole32(20); 552 memcpy((char*)msg + 20, buf, len); 553 } else 554 msg->rm_infobufoffset = 0; 555 msg->rm_devicevchdl = 0; 556 557 DPRINTF(("%s: urndis_ctrl_set send: type %u len %u rid %u oid 0x%x " 558 "infobuflen %u infobufoffset %u devicevchdl %u\n", 559 DEVNAME(sc), 560 le32toh(msg->rm_type), 561 le32toh(msg->rm_len), 562 le32toh(msg->rm_rid), 563 le32toh(msg->rm_oid), 564 le32toh(msg->rm_infobuflen), 565 le32toh(msg->rm_infobufoffset), 566 le32toh(msg->rm_devicevchdl))); 567 568 rval = urndis_ctrl_send(sc, msg, sizeof(*msg)); 569 kmem_free(msg, sizeof(*msg) + len); 570 571 if (rval != RNDIS_STATUS_SUCCESS) { 572 printf("%s: set failed\n", DEVNAME(sc)); 573 return rval; 574 } 575 576 if ((hdr = urndis_ctrl_recv(sc)) == NULL) { 577 printf("%s: unable to get set response\n", DEVNAME(sc)); 578 return RNDIS_STATUS_FAILURE; 579 } 580 rval = urndis_ctrl_handle(sc, hdr, NULL, NULL); 581 if (rval != RNDIS_STATUS_SUCCESS) 582 printf("%s: set failed 0x%x\n", DEVNAME(sc), rval); 583 584 return rval; 585 } 586 587 #if 0 588 static uint32_t 589 urndis_ctrl_set_param(struct urndis_softc *sc, 590 const char *name, 591 uint32_t type, 592 void *buf, 593 size_t len) 594 { 595 struct urndis_set_parameter *param; 596 uint32_t rval; 597 size_t namelen, tlen; 598 599 if (name) 600 namelen = strlen(name); 601 else 602 namelen = 0; 603 tlen = sizeof(*param) + len + namelen; 604 param = kmem_alloc(tlen, KM_SLEEP); 605 if (param == NULL) { 606 printf("%s: out of memory\n", DEVNAME(sc)); 607 return RNDIS_STATUS_FAILURE; 608 } 609 610 param->rm_namelen = htole32(namelen); 611 param->rm_valuelen = htole32(len); 612 param->rm_type = htole32(type); 613 if (namelen != 0) { 614 param->rm_nameoffset = htole32(20); 615 memcpy(param + 20, name, namelen); 616 } else 617 param->rm_nameoffset = 0; 618 if (len != 0) { 619 param->rm_valueoffset = htole32(20 + namelen); 620 memcpy(param + 20 + namelen, buf, len); 621 } else 622 param->rm_valueoffset = 0; 623 624 DPRINTF(("%s: urndis_ctrl_set_param send: nameoffset %u namelen %u " 625 "type 0x%x valueoffset %u valuelen %u\n", 626 DEVNAME(sc), 627 le32toh(param->rm_nameoffset), 628 le32toh(param->rm_namelen), 629 le32toh(param->rm_type), 630 le32toh(param->rm_valueoffset), 631 le32toh(param->rm_valuelen))); 632 633 rval = urndis_ctrl_set(sc, OID_GEN_RNDIS_CONFIG_PARAMETER, param, tlen); 634 kmem_free(param, tlen); 635 if (rval != RNDIS_STATUS_SUCCESS) 636 printf("%s: set param failed 0x%x\n", DEVNAME(sc), rval); 637 638 return rval; 639 } 640 641 /* XXX : adrreset, get it from response */ 642 static uint32_t 643 urndis_ctrl_reset(struct urndis_softc *sc) 644 { 645 struct urndis_reset_req *reset; 646 uint32_t rval; 647 struct urndis_comp_hdr *hdr; 648 649 reset = kmem_alloc(sizeof(*reset), KM_SLEEP); 650 if (reset == NULL) { 651 printf("%s: out of memory\n", DEVNAME(sc)); 652 return RNDIS_STATUS_FAILURE; 653 } 654 655 reset->rm_type = htole32(REMOTE_NDIS_RESET_MSG); 656 reset->rm_len = htole32(sizeof(*reset)); 657 reset->rm_rid = 0; /* XXX rm_rid == reserved ... remove ? */ 658 659 DPRINTF(("%s: urndis_ctrl_reset send: type %u len %u rid %u\n", 660 DEVNAME(sc), 661 le32toh(reset->rm_type), 662 le32toh(reset->rm_len), 663 le32toh(reset->rm_rid))); 664 665 rval = urndis_ctrl_send(sc, reset, sizeof(*reset)); 666 kmem_free(reset, sizeof(*reset)); 667 668 if (rval != RNDIS_STATUS_SUCCESS) { 669 printf("%s: reset failed\n", DEVNAME(sc)); 670 return rval; 671 } 672 673 if ((hdr = urndis_ctrl_recv(sc)) == NULL) { 674 printf("%s: unable to get reset response\n", DEVNAME(sc)); 675 return RNDIS_STATUS_FAILURE; 676 } 677 rval = urndis_ctrl_handle(sc, hdr, NULL, NULL); 678 679 return rval; 680 } 681 682 static uint32_t 683 urndis_ctrl_keepalive(struct urndis_softc *sc) 684 { 685 struct urndis_keepalive_req *keep; 686 uint32_t rval; 687 struct urndis_comp_hdr *hdr; 688 689 keep = kmem_alloc(sizeof(*keep), KM_SLEEP); 690 if (keep == NULL) { 691 printf("%s: out of memory\n", DEVNAME(sc)); 692 return RNDIS_STATUS_FAILURE; 693 } 694 695 keep->rm_type = htole32(REMOTE_NDIS_KEEPALIVE_MSG); 696 keep->rm_len = htole32(sizeof(*keep)); 697 keep->rm_rid = 0; /* XXX rm_rid == reserved ... remove ? */ 698 699 DPRINTF(("%s: urndis_ctrl_keepalive: type %u len %u rid %u\n", 700 DEVNAME(sc), 701 le32toh(keep->rm_type), 702 le32toh(keep->rm_len), 703 le32toh(keep->rm_rid))); 704 705 rval = urndis_ctrl_send(sc, keep, sizeof(*keep)); 706 kmem_free(keep, sizeof(*keep)); 707 708 if (rval != RNDIS_STATUS_SUCCESS) { 709 printf("%s: keepalive failed\n", DEVNAME(sc)); 710 return rval; 711 } 712 713 if ((hdr = urndis_ctrl_recv(sc)) == NULL) { 714 printf("%s: unable to get keepalive response\n", DEVNAME(sc)); 715 return RNDIS_STATUS_FAILURE; 716 } 717 rval = urndis_ctrl_handle(sc, hdr, NULL, NULL); 718 if (rval != RNDIS_STATUS_SUCCESS) { 719 printf("%s: keepalive failed 0x%x\n", DEVNAME(sc), rval); 720 urndis_ctrl_reset(sc); 721 } 722 723 return rval; 724 } 725 #endif 726 727 static int 728 urndis_encap(struct urndis_softc *sc, struct mbuf *m, int idx) 729 { 730 struct urndis_chain *c; 731 usbd_status err; 732 struct urndis_packet_msg *msg; 733 734 c = &sc->sc_data.sc_tx_chain[idx]; 735 736 msg = (struct urndis_packet_msg *)c->sc_buf; 737 738 memset(msg, 0, sizeof(*msg)); 739 msg->rm_type = htole32(REMOTE_NDIS_PACKET_MSG); 740 msg->rm_len = htole32(sizeof(*msg) + m->m_pkthdr.len); 741 742 msg->rm_dataoffset = htole32(RNDIS_DATA_OFFSET); 743 msg->rm_datalen = htole32(m->m_pkthdr.len); 744 745 m_copydata(m, 0, m->m_pkthdr.len, 746 ((char*)msg + RNDIS_DATA_OFFSET + RNDIS_HEADER_OFFSET)); 747 748 DPRINTF(("%s: urndis_encap type 0x%x len %u data(off %u len %u)\n", 749 DEVNAME(sc), 750 le32toh(msg->rm_type), 751 le32toh(msg->rm_len), 752 le32toh(msg->rm_dataoffset), 753 le32toh(msg->rm_datalen))); 754 755 c->sc_mbuf = m; 756 757 usbd_setup_xfer(c->sc_xfer, c, c->sc_buf, le32toh(msg->rm_len), 758 USBD_FORCE_SHORT_XFER, 10000, urndis_txeof); 759 760 /* Transmit */ 761 err = usbd_transfer(c->sc_xfer); 762 if (err != USBD_IN_PROGRESS) { 763 urndis_stop(GET_IFP(sc)); 764 return(EIO); 765 } 766 767 sc->sc_data.sc_tx_cnt++; 768 769 return(0); 770 } 771 772 static void 773 urndis_decap(struct urndis_softc *sc, struct urndis_chain *c, uint32_t len) 774 { 775 struct mbuf *m; 776 struct urndis_packet_msg *msg; 777 struct ifnet *ifp; 778 int s; 779 int offset; 780 781 ifp = GET_IFP(sc); 782 offset = 0; 783 784 while (len > 0) { 785 msg = (struct urndis_packet_msg *)((char*)c->sc_buf + offset); 786 m = c->sc_mbuf; 787 788 DPRINTF(("%s: urndis_decap buffer size left %u\n", DEVNAME(sc), 789 len)); 790 791 if (len < sizeof(*msg)) { 792 printf("%s: urndis_decap invalid buffer len %u < " 793 "minimum header %zu\n", 794 DEVNAME(sc), 795 len, 796 sizeof(*msg)); 797 return; 798 } 799 800 DPRINTF(("%s: urndis_decap len %u data(off:%u len:%u) " 801 "oobdata(off:%u len:%u nb:%u) perpacket(off:%u len:%u)\n", 802 DEVNAME(sc), 803 le32toh(msg->rm_len), 804 le32toh(msg->rm_dataoffset), 805 le32toh(msg->rm_datalen), 806 le32toh(msg->rm_oobdataoffset), 807 le32toh(msg->rm_oobdatalen), 808 le32toh(msg->rm_oobdataelements), 809 le32toh(msg->rm_pktinfooffset), 810 le32toh(msg->rm_pktinfooffset))); 811 812 if (le32toh(msg->rm_type) != REMOTE_NDIS_PACKET_MSG) { 813 printf("%s: urndis_decap invalid type 0x%x != 0x%x\n", 814 DEVNAME(sc), 815 le32toh(msg->rm_type), 816 REMOTE_NDIS_PACKET_MSG); 817 return; 818 } 819 if (le32toh(msg->rm_len) < sizeof(*msg)) { 820 printf("%s: urndis_decap invalid msg len %u < %zu\n", 821 DEVNAME(sc), 822 le32toh(msg->rm_len), 823 sizeof(*msg)); 824 return; 825 } 826 if (le32toh(msg->rm_len) > len) { 827 printf("%s: urndis_decap invalid msg len %u > buffer " 828 "len %u\n", 829 DEVNAME(sc), 830 le32toh(msg->rm_len), 831 len); 832 return; 833 } 834 835 if (le32toh(msg->rm_dataoffset) + 836 le32toh(msg->rm_datalen) + RNDIS_HEADER_OFFSET 837 > le32toh(msg->rm_len)) { 838 printf("%s: urndis_decap invalid data " 839 "len/offset/end_position(%u/%u/%u) -> " 840 "go out of receive buffer limit %u\n", 841 DEVNAME(sc), 842 le32toh(msg->rm_datalen), 843 le32toh(msg->rm_dataoffset), 844 le32toh(msg->rm_dataoffset) + 845 le32toh(msg->rm_datalen) + (uint32_t)RNDIS_HEADER_OFFSET, 846 le32toh(msg->rm_len)); 847 return; 848 } 849 850 if (le32toh(msg->rm_datalen) < sizeof(struct ether_header)) { 851 ifp->if_ierrors++; 852 printf("%s: urndis_decap invalid ethernet size " 853 "%d < %zu\n", 854 DEVNAME(sc), 855 le32toh(msg->rm_datalen), 856 sizeof(struct ether_header)); 857 return; 858 } 859 860 memcpy(mtod(m, char*), 861 ((char*)&msg->rm_dataoffset + le32toh(msg->rm_dataoffset)), 862 le32toh(msg->rm_datalen)); 863 m->m_pkthdr.len = m->m_len = le32toh(msg->rm_datalen); 864 865 ifp->if_ipackets++; 866 m_set_rcvif(m, ifp); 867 868 s = splnet(); 869 870 if (urndis_newbuf(sc, c) == ENOBUFS) { 871 ifp->if_ierrors++; 872 } else { 873 874 bpf_mtap(ifp, m); 875 876 if_percpuq_enqueue(ifp->if_percpuq, m); 877 } 878 splx(s); 879 880 offset += le32toh(msg->rm_len); 881 len -= le32toh(msg->rm_len); 882 } 883 } 884 885 static int 886 urndis_newbuf(struct urndis_softc *sc, struct urndis_chain *c) 887 { 888 struct mbuf *m_new = NULL; 889 890 MGETHDR(m_new, M_DONTWAIT, MT_DATA); 891 if (m_new == NULL) { 892 printf("%s: no memory for rx list -- packet dropped!\n", 893 DEVNAME(sc)); 894 return ENOBUFS; 895 } 896 MCLGET(m_new, M_DONTWAIT); 897 if (!(m_new->m_flags & M_EXT)) { 898 printf("%s: no memory for rx list -- packet dropped!\n", 899 DEVNAME(sc)); 900 m_freem(m_new); 901 return ENOBUFS; 902 } 903 m_new->m_len = m_new->m_pkthdr.len = MCLBYTES; 904 905 m_adj(m_new, ETHER_ALIGN); 906 c->sc_mbuf = m_new; 907 return 0; 908 } 909 910 static int 911 urndis_rx_list_init(struct urndis_softc *sc) 912 { 913 struct urndis_cdata *cd; 914 struct urndis_chain *c; 915 int i; 916 917 cd = &sc->sc_data; 918 for (i = 0; i < RNDIS_RX_LIST_CNT; i++) { 919 c = &cd->sc_rx_chain[i]; 920 c->sc_softc = sc; 921 c->sc_idx = i; 922 923 if (urndis_newbuf(sc, c) == ENOBUFS) 924 return ENOBUFS; 925 926 if (c->sc_xfer == NULL) { 927 int err = usbd_create_xfer(sc->sc_bulkin_pipe, 928 RNDIS_BUFSZ, USBD_SHORT_XFER_OK, 0, &c->sc_xfer); 929 if (err) 930 return err; 931 c->sc_buf = usbd_get_buffer(c->sc_xfer); 932 } 933 } 934 935 return 0; 936 } 937 938 static int 939 urndis_tx_list_init(struct urndis_softc *sc) 940 { 941 struct urndis_cdata *cd; 942 struct urndis_chain *c; 943 int i; 944 945 cd = &sc->sc_data; 946 for (i = 0; i < RNDIS_TX_LIST_CNT; i++) { 947 c = &cd->sc_tx_chain[i]; 948 c->sc_softc = sc; 949 c->sc_idx = i; 950 c->sc_mbuf = NULL; 951 if (c->sc_xfer == NULL) { 952 int err = usbd_create_xfer(sc->sc_bulkout_pipe, 953 RNDIS_BUFSZ, USBD_FORCE_SHORT_XFER, 0, &c->sc_xfer); 954 if (err) 955 return err; 956 c->sc_buf = usbd_get_buffer(c->sc_xfer); 957 } 958 } 959 return 0; 960 } 961 962 static int 963 urndis_ioctl(struct ifnet *ifp, unsigned long command, void *data) 964 { 965 struct urndis_softc *sc; 966 int s, error; 967 968 sc = ifp->if_softc; 969 error = 0; 970 971 if (sc->sc_dying) 972 return EIO; 973 974 s = splnet(); 975 976 switch(command) { 977 case SIOCSIFFLAGS: 978 if ((error = ifioctl_common(ifp, command, data)) != 0) 979 break; 980 if (ifp->if_flags & IFF_UP) { 981 if (!(ifp->if_flags & IFF_RUNNING)) 982 urndis_init(ifp); 983 } else { 984 if (ifp->if_flags & IFF_RUNNING) 985 urndis_stop(ifp); 986 } 987 error = 0; 988 break; 989 990 default: 991 error = ether_ioctl(ifp, command, data); 992 break; 993 } 994 995 if (error == ENETRESET) 996 error = 0; 997 998 splx(s); 999 return error; 1000 } 1001 1002 #if 0 1003 static void 1004 urndis_watchdog(struct ifnet *ifp) 1005 { 1006 struct urndis_softc *sc; 1007 1008 sc = ifp->if_softc; 1009 1010 if (sc->sc_dying) 1011 return; 1012 1013 ifp->if_oerrors++; 1014 printf("%s: watchdog timeout\n", DEVNAME(sc)); 1015 1016 urndis_ctrl_keepalive(sc); 1017 } 1018 #endif 1019 1020 static int 1021 urndis_init(struct ifnet *ifp) 1022 { 1023 struct urndis_softc *sc; 1024 int i, s; 1025 int err; 1026 usbd_status usberr; 1027 1028 sc = ifp->if_softc; 1029 1030 if (ifp->if_flags & IFF_RUNNING) 1031 return 0; 1032 1033 err = urndis_ctrl_init(sc); 1034 if (err != RNDIS_STATUS_SUCCESS) 1035 return EIO; 1036 1037 s = splnet(); 1038 1039 usberr = usbd_open_pipe(sc->sc_iface_data, sc->sc_bulkin_no, 1040 USBD_EXCLUSIVE_USE, &sc->sc_bulkin_pipe); 1041 if (usberr) { 1042 printf("%s: open rx pipe failed: %s\n", DEVNAME(sc), 1043 usbd_errstr(err)); 1044 splx(s); 1045 return EIO; 1046 } 1047 1048 usberr = usbd_open_pipe(sc->sc_iface_data, sc->sc_bulkout_no, 1049 USBD_EXCLUSIVE_USE, &sc->sc_bulkout_pipe); 1050 if (usberr) { 1051 printf("%s: open tx pipe failed: %s\n", DEVNAME(sc), 1052 usbd_errstr(err)); 1053 splx(s); 1054 return EIO; 1055 } 1056 1057 err = urndis_tx_list_init(sc); 1058 if (err) { 1059 printf("%s: tx list init failed\n", 1060 DEVNAME(sc)); 1061 splx(s); 1062 return err; 1063 } 1064 1065 err = urndis_rx_list_init(sc); 1066 if (err) { 1067 printf("%s: rx list init failed\n", 1068 DEVNAME(sc)); 1069 splx(s); 1070 return err; 1071 } 1072 1073 for (i = 0; i < RNDIS_RX_LIST_CNT; i++) { 1074 struct urndis_chain *c; 1075 1076 c = &sc->sc_data.sc_rx_chain[i]; 1077 1078 usbd_setup_xfer(c->sc_xfer, c, c->sc_buf, RNDIS_BUFSZ, 1079 USBD_SHORT_XFER_OK, USBD_NO_TIMEOUT, urndis_rxeof); 1080 usbd_transfer(c->sc_xfer); 1081 } 1082 1083 ifp->if_flags |= IFF_RUNNING; 1084 ifp->if_flags &= ~IFF_OACTIVE; 1085 1086 splx(s); 1087 return 0; 1088 } 1089 1090 static void 1091 urndis_stop(struct ifnet *ifp) 1092 { 1093 struct urndis_softc *sc; 1094 usbd_status err; 1095 int i; 1096 1097 sc = ifp->if_softc; 1098 1099 ifp->if_timer = 0; 1100 ifp->if_flags &= ~(IFF_RUNNING | IFF_OACTIVE); 1101 1102 if (sc->sc_bulkin_pipe != NULL) { 1103 err = usbd_abort_pipe(sc->sc_bulkin_pipe); 1104 if (err) 1105 printf("%s: abort rx pipe failed: %s\n", 1106 DEVNAME(sc), usbd_errstr(err)); 1107 } 1108 1109 if (sc->sc_bulkout_pipe != NULL) { 1110 err = usbd_abort_pipe(sc->sc_bulkout_pipe); 1111 if (err) 1112 printf("%s: abort tx pipe failed: %s\n", 1113 DEVNAME(sc), usbd_errstr(err)); 1114 } 1115 1116 for (i = 0; i < RNDIS_RX_LIST_CNT; i++) { 1117 if (sc->sc_data.sc_rx_chain[i].sc_mbuf != NULL) { 1118 m_freem(sc->sc_data.sc_rx_chain[i].sc_mbuf); 1119 sc->sc_data.sc_rx_chain[i].sc_mbuf = NULL; 1120 } 1121 if (sc->sc_data.sc_rx_chain[i].sc_xfer != NULL) { 1122 usbd_destroy_xfer(sc->sc_data.sc_rx_chain[i].sc_xfer); 1123 sc->sc_data.sc_rx_chain[i].sc_xfer = NULL; 1124 } 1125 } 1126 1127 for (i = 0; i < RNDIS_TX_LIST_CNT; i++) { 1128 if (sc->sc_data.sc_tx_chain[i].sc_mbuf != NULL) { 1129 m_freem(sc->sc_data.sc_tx_chain[i].sc_mbuf); 1130 sc->sc_data.sc_tx_chain[i].sc_mbuf = NULL; 1131 } 1132 if (sc->sc_data.sc_tx_chain[i].sc_xfer != NULL) { 1133 usbd_destroy_xfer(sc->sc_data.sc_tx_chain[i].sc_xfer); 1134 sc->sc_data.sc_tx_chain[i].sc_xfer = NULL; 1135 } 1136 } 1137 1138 /* Close pipes. */ 1139 if (sc->sc_bulkin_pipe != NULL) { 1140 err = usbd_close_pipe(sc->sc_bulkin_pipe); 1141 if (err) 1142 printf("%s: close rx pipe failed: %s\n", 1143 DEVNAME(sc), usbd_errstr(err)); 1144 sc->sc_bulkin_pipe = NULL; 1145 } 1146 1147 if (sc->sc_bulkout_pipe != NULL) { 1148 err = usbd_close_pipe(sc->sc_bulkout_pipe); 1149 if (err) 1150 printf("%s: close tx pipe failed: %s\n", 1151 DEVNAME(sc), usbd_errstr(err)); 1152 sc->sc_bulkout_pipe = NULL; 1153 } 1154 } 1155 1156 static void 1157 urndis_start(struct ifnet *ifp) 1158 { 1159 struct urndis_softc *sc; 1160 struct mbuf *m_head = NULL; 1161 1162 sc = ifp->if_softc; 1163 1164 if (sc->sc_dying || (ifp->if_flags & IFF_OACTIVE)) 1165 return; 1166 1167 IFQ_POLL(&ifp->if_snd, m_head); 1168 if (m_head == NULL) 1169 return; 1170 1171 if (urndis_encap(sc, m_head, 0)) { 1172 ifp->if_flags |= IFF_OACTIVE; 1173 return; 1174 } 1175 IFQ_DEQUEUE(&ifp->if_snd, m_head); 1176 1177 /* 1178 * If there's a BPF listener, bounce a copy of this frame 1179 * to him. 1180 */ 1181 bpf_mtap(ifp, m_head); 1182 1183 ifp->if_flags |= IFF_OACTIVE; 1184 1185 /* 1186 * Set a timeout in case the chip goes out to lunch. 1187 */ 1188 ifp->if_timer = 5; 1189 1190 return; 1191 } 1192 1193 static void 1194 urndis_rxeof(struct usbd_xfer *xfer, 1195 void *priv, 1196 usbd_status status) 1197 { 1198 struct urndis_chain *c; 1199 struct urndis_softc *sc; 1200 struct ifnet *ifp; 1201 uint32_t total_len; 1202 1203 c = priv; 1204 sc = c->sc_softc; 1205 ifp = GET_IFP(sc); 1206 total_len = 0; 1207 1208 if (sc->sc_dying || !(ifp->if_flags & IFF_RUNNING)) 1209 return; 1210 1211 if (status != USBD_NORMAL_COMPLETION) { 1212 if (status == USBD_NOT_STARTED || status == USBD_CANCELLED) 1213 return; 1214 if (usbd_ratecheck(&sc->sc_rx_notice)) { 1215 printf("%s: usb errors on rx: %s\n", 1216 DEVNAME(sc), usbd_errstr(status)); 1217 } 1218 if (status == USBD_STALLED) 1219 usbd_clear_endpoint_stall_async(sc->sc_bulkin_pipe); 1220 1221 goto done; 1222 } 1223 1224 usbd_get_xfer_status(xfer, NULL, NULL, &total_len, NULL); 1225 urndis_decap(sc, c, total_len); 1226 1227 done: 1228 /* Setup new transfer. */ 1229 usbd_setup_xfer(c->sc_xfer, c, c->sc_buf, RNDIS_BUFSZ, 1230 USBD_SHORT_XFER_OK, USBD_NO_TIMEOUT, urndis_rxeof); 1231 usbd_transfer(c->sc_xfer); 1232 } 1233 1234 static void 1235 urndis_txeof(struct usbd_xfer *xfer, 1236 void *priv, 1237 usbd_status status) 1238 { 1239 struct urndis_chain *c; 1240 struct urndis_softc *sc; 1241 struct ifnet *ifp; 1242 usbd_status err; 1243 int s; 1244 1245 c = priv; 1246 sc = c->sc_softc; 1247 ifp = GET_IFP(sc); 1248 1249 DPRINTF(("%s: urndis_txeof\n", DEVNAME(sc))); 1250 1251 if (sc->sc_dying) 1252 return; 1253 1254 s = splnet(); 1255 1256 ifp->if_timer = 0; 1257 ifp->if_flags &= ~IFF_OACTIVE; 1258 1259 if (status != USBD_NORMAL_COMPLETION) { 1260 if (status == USBD_NOT_STARTED || status == USBD_CANCELLED) { 1261 splx(s); 1262 return; 1263 } 1264 ifp->if_oerrors++; 1265 printf("%s: usb error on tx: %s\n", DEVNAME(sc), 1266 usbd_errstr(status)); 1267 if (status == USBD_STALLED) 1268 usbd_clear_endpoint_stall_async(sc->sc_bulkout_pipe); 1269 splx(s); 1270 return; 1271 } 1272 1273 usbd_get_xfer_status(c->sc_xfer, NULL, NULL, NULL, &err); 1274 1275 if (c->sc_mbuf != NULL) { 1276 m_freem(c->sc_mbuf); 1277 c->sc_mbuf = NULL; 1278 } 1279 1280 if (err) 1281 ifp->if_oerrors++; 1282 else 1283 ifp->if_opackets++; 1284 1285 if (IFQ_IS_EMPTY(&ifp->if_snd) == 0) 1286 urndis_start(ifp); 1287 1288 splx(s); 1289 } 1290 1291 static int 1292 urndis_match(device_t parent, cfdata_t match, void *aux) 1293 { 1294 struct usbif_attach_arg *uiaa = aux; 1295 usb_interface_descriptor_t *id; 1296 1297 if (!uiaa->uiaa_iface) 1298 return UMATCH_NONE; 1299 1300 id = usbd_get_interface_descriptor(uiaa->uiaa_iface); 1301 if (id == NULL) 1302 return UMATCH_NONE; 1303 1304 if (id->bInterfaceClass == UICLASS_WIRELESS && 1305 id->bInterfaceSubClass == UISUBCLASS_RF && 1306 id->bInterfaceProtocol == UIPROTO_RNDIS) 1307 return UMATCH_IFACECLASS_IFACESUBCLASS_IFACEPROTO; 1308 1309 return usb_lookup(urndis_devs, uiaa->uiaa_vendor, uiaa->uiaa_product) != NULL ? 1310 UMATCH_VENDOR_PRODUCT : UMATCH_NONE; 1311 } 1312 1313 static void 1314 urndis_attach(device_t parent, device_t self, void *aux) 1315 { 1316 struct urndis_softc *sc; 1317 struct usbif_attach_arg *uiaa; 1318 struct ifnet *ifp; 1319 usb_interface_descriptor_t *id; 1320 usb_endpoint_descriptor_t *ed; 1321 usb_config_descriptor_t *cd; 1322 const usb_cdc_union_descriptor_t *ud; 1323 const usb_cdc_header_descriptor_t *desc; 1324 usbd_desc_iter_t iter; 1325 int if_ctl, if_data; 1326 int i, j, altcnt; 1327 int s; 1328 u_char eaddr[ETHER_ADDR_LEN]; 1329 void *buf; 1330 size_t bufsz; 1331 uint32_t filter; 1332 char *devinfop; 1333 1334 sc = device_private(self); 1335 uiaa = aux; 1336 sc->sc_dev = self; 1337 sc->sc_udev = uiaa->uiaa_device; 1338 1339 aprint_naive("\n"); 1340 aprint_normal("\n"); 1341 1342 devinfop = usbd_devinfo_alloc(uiaa->uiaa_device, 0); 1343 aprint_normal_dev(self, "%s\n", devinfop); 1344 usbd_devinfo_free(devinfop); 1345 1346 sc->sc_iface_ctl = uiaa->uiaa_iface; 1347 id = usbd_get_interface_descriptor(sc->sc_iface_ctl); 1348 if_ctl = id->bInterfaceNumber; 1349 sc->sc_ifaceno_ctl = if_ctl; 1350 if_data = -1; 1351 1352 usb_desc_iter_init(sc->sc_udev, &iter); 1353 while ((desc = (const void *)usb_desc_iter_next(&iter)) != NULL) { 1354 1355 if (desc->bDescriptorType != UDESC_CS_INTERFACE) { 1356 continue; 1357 } 1358 switch (desc->bDescriptorSubtype) { 1359 case UDESCSUB_CDC_UNION: 1360 /* XXX bail out when found first? */ 1361 ud = (const usb_cdc_union_descriptor_t *)desc; 1362 if (if_data == -1) 1363 if_data = ud->bSlaveInterface[0]; 1364 break; 1365 } 1366 } 1367 1368 if (if_data == -1) { 1369 DPRINTF(("urndis_attach: no union interface\n")); 1370 sc->sc_iface_data = sc->sc_iface_ctl; 1371 } else { 1372 DPRINTF(("urndis_attach: union interface: ctl %u, data %u\n", 1373 if_ctl, if_data)); 1374 for (i = 0; i < uiaa->uiaa_nifaces; i++) { 1375 if (uiaa->uiaa_ifaces[i] != NULL) { 1376 id = usbd_get_interface_descriptor( 1377 uiaa->uiaa_ifaces[i]); 1378 if (id != NULL && id->bInterfaceNumber == 1379 if_data) { 1380 sc->sc_iface_data = uiaa->uiaa_ifaces[i]; 1381 uiaa->uiaa_ifaces[i] = NULL; 1382 } 1383 } 1384 } 1385 } 1386 1387 if (sc->sc_iface_data == NULL) { 1388 printf("%s: no data interface\n", DEVNAME(sc)); 1389 return; 1390 } 1391 1392 id = usbd_get_interface_descriptor(sc->sc_iface_data); 1393 cd = usbd_get_config_descriptor(sc->sc_udev); 1394 altcnt = usbd_get_no_alts(cd, id->bInterfaceNumber); 1395 1396 for (j = 0; j < altcnt; j++) { 1397 if (usbd_set_interface(sc->sc_iface_data, j)) { 1398 printf("%s: interface alternate setting %u failed\n", 1399 DEVNAME(sc), j); 1400 return; 1401 } 1402 /* Find endpoints. */ 1403 id = usbd_get_interface_descriptor(sc->sc_iface_data); 1404 sc->sc_bulkin_no = sc->sc_bulkout_no = -1; 1405 for (i = 0; i < id->bNumEndpoints; i++) { 1406 ed = usbd_interface2endpoint_descriptor( 1407 sc->sc_iface_data, i); 1408 if (!ed) { 1409 printf("%s: no descriptor for bulk endpoint " 1410 "%u\n", DEVNAME(sc), i); 1411 return; 1412 } 1413 if (UE_GET_DIR(ed->bEndpointAddress) == UE_DIR_IN && 1414 UE_GET_XFERTYPE(ed->bmAttributes) == UE_BULK) { 1415 sc->sc_bulkin_no = ed->bEndpointAddress; 1416 } 1417 else if ( 1418 UE_GET_DIR(ed->bEndpointAddress) == UE_DIR_OUT && 1419 UE_GET_XFERTYPE(ed->bmAttributes) == UE_BULK) { 1420 sc->sc_bulkout_no = ed->bEndpointAddress; 1421 } 1422 } 1423 1424 if (sc->sc_bulkin_no != -1 && sc->sc_bulkout_no != -1) { 1425 DPRINTF(("%s: in=0x%x, out=0x%x\n", 1426 DEVNAME(sc), 1427 sc->sc_bulkin_no, 1428 sc->sc_bulkout_no)); 1429 goto found; 1430 } 1431 } 1432 1433 if (sc->sc_bulkin_no == -1) 1434 printf("%s: could not find data bulk in\n", DEVNAME(sc)); 1435 if (sc->sc_bulkout_no == -1 ) 1436 printf("%s: could not find data bulk out\n", DEVNAME(sc)); 1437 return; 1438 1439 found: 1440 1441 ifp = GET_IFP(sc); 1442 ifp->if_softc = sc; 1443 ifp->if_flags = IFF_BROADCAST | IFF_SIMPLEX | IFF_MULTICAST; 1444 ifp->if_start = urndis_start; 1445 ifp->if_ioctl = urndis_ioctl; 1446 ifp->if_init = urndis_init; 1447 #if 0 1448 ifp->if_watchdog = urndis_watchdog; 1449 #endif 1450 1451 strlcpy(ifp->if_xname, DEVNAME(sc), IFNAMSIZ); 1452 1453 IFQ_SET_READY(&ifp->if_snd); 1454 1455 urndis_init(ifp); 1456 1457 s = splnet(); 1458 1459 if (urndis_ctrl_query(sc, OID_802_3_PERMANENT_ADDRESS, NULL, 0, 1460 &buf, &bufsz) != RNDIS_STATUS_SUCCESS) { 1461 printf("%s: unable to get hardware address\n", DEVNAME(sc)); 1462 urndis_stop(ifp); 1463 splx(s); 1464 return; 1465 } 1466 1467 if (bufsz == ETHER_ADDR_LEN) { 1468 memcpy(eaddr, buf, ETHER_ADDR_LEN); 1469 printf("%s: address %s\n", DEVNAME(sc), ether_sprintf(eaddr)); 1470 kmem_free(buf, bufsz); 1471 } else { 1472 printf("%s: invalid address\n", DEVNAME(sc)); 1473 kmem_free(buf, bufsz); 1474 urndis_stop(ifp); 1475 splx(s); 1476 return; 1477 } 1478 1479 /* Initialize packet filter */ 1480 sc->sc_filter = RNDIS_PACKET_TYPE_BROADCAST; 1481 sc->sc_filter |= RNDIS_PACKET_TYPE_ALL_MULTICAST; 1482 filter = htole32(sc->sc_filter); 1483 if (urndis_ctrl_set(sc, OID_GEN_CURRENT_PACKET_FILTER, &filter, 1484 sizeof(filter)) != RNDIS_STATUS_SUCCESS) { 1485 printf("%s: unable to set data filters\n", DEVNAME(sc)); 1486 urndis_stop(ifp); 1487 splx(s); 1488 return; 1489 } 1490 1491 if_attach(ifp); 1492 ether_ifattach(ifp, eaddr); 1493 sc->sc_attached = 1; 1494 1495 splx(s); 1496 } 1497 1498 static int 1499 urndis_detach(device_t self, int flags) 1500 { 1501 struct urndis_softc *sc; 1502 struct ifnet *ifp; 1503 int s; 1504 1505 sc = device_private(self); 1506 1507 DPRINTF(("urndis_detach: %s flags %u\n", DEVNAME(sc), 1508 flags)); 1509 1510 if (!sc->sc_attached) 1511 return 0; 1512 1513 s = splusb(); 1514 1515 ifp = GET_IFP(sc); 1516 1517 if (ifp->if_softc != NULL) { 1518 ether_ifdetach(ifp); 1519 if_detach(ifp); 1520 } 1521 1522 urndis_stop(ifp); 1523 sc->sc_attached = 0; 1524 1525 splx(s); 1526 1527 return 0; 1528 } 1529 1530 static int 1531 urndis_activate(device_t self, enum devact act) 1532 { 1533 struct urndis_softc *sc; 1534 1535 sc = device_private(self); 1536 1537 switch (act) { 1538 case DVACT_DEACTIVATE: 1539 sc->sc_dying = 1; 1540 return 0; 1541 } 1542 1543 return EOPNOTSUPP; 1544 } 1545 1546
Indexes created Tue Sep 30 11:09:46 GMT 2025