if_urndis.c revision 1.9.4.6 1 /* $NetBSD: if_urndis.c,v 1.9.4.6 2015/10/06 21:32:15 skrll Exp $ */
2 /* $OpenBSD: if_urndis.c,v 1.31 2011/07/03 15:47:17 matthew Exp $ */
3
4 /*
5 * Copyright (c) 2010 Jonathan Armani <armani (at) openbsd.org>
6 * Copyright (c) 2010 Fabien Romano <fabien (at) openbsd.org>
7 * Copyright (c) 2010 Michael Knudsen <mk (at) openbsd.org>
8 * All rights reserved.
9 *
10 * Permission to use, copy, modify, and distribute this software for any
11 * purpose with or without fee is hereby granted, provided that the above
12 * copyright notice and this permission notice appear in all copies.
13 *
14 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
15 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
16 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
17 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
18 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
19 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
20 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
21 */
22
23 #include <sys/cdefs.h>
24 __KERNEL_RCSID(0, "$NetBSD: if_urndis.c,v 1.9.4.6 2015/10/06 21:32:15 skrll Exp $");
25
26 #include <sys/param.h>
27 #include <sys/systm.h>
28 #include <sys/sockio.h>
29 #include <sys/rwlock.h>
30 #include <sys/mbuf.h>
31 #include <sys/kmem.h>
32 #include <sys/kernel.h>
33 #include <sys/proc.h>
34 #include <sys/socket.h>
35 #include <sys/device.h>
36
37 #include <net/if.h>
38 #include <net/if_dl.h>
39 #include <net/if_media.h>
40 #include <net/if_ether.h>
41
42 #include <net/bpf.h>
43
44 #include <sys/bus.h>
45 #include <dev/usb/usb.h>
46 #include <dev/usb/usbdi.h>
47 #include <dev/usb/usbdi_util.h>
48 #include <dev/usb/usbdivar.h>
49 #include <dev/usb/usbdevs.h>
50 #include <dev/usb/usbcdc.h>
51
52 #include <dev/usb/if_urndisreg.h>
53
54 #ifdef URNDIS_DEBUG
55 #define DPRINTF(x) do { printf x; } while (0)
56 #else
57 #define DPRINTF(x)
58 #endif
59
60 #define DEVNAME(sc) (device_xname(sc->sc_dev))
61
62 #define ETHER_ALIGN 2
63 #define URNDIS_RESPONSE_LEN 0x400
64
65
66 static int urndis_newbuf(struct urndis_softc *, struct urndis_chain *);
67
68 static int urndis_ioctl(struct ifnet *, unsigned long, void *);
69 #if 0
70 static void urndis_watchdog(struct ifnet *);
71 #endif
72
73 static void urndis_start(struct ifnet *);
74 static void urndis_rxeof(struct usbd_xfer *, void *, usbd_status);
75 static void urndis_txeof(struct usbd_xfer *, void *, usbd_status);
76 static int urndis_rx_list_init(struct urndis_softc *);
77 static int urndis_tx_list_init(struct urndis_softc *);
78
79 static int urndis_init(struct ifnet *);
80 static void urndis_stop(struct ifnet *);
81
82 static usbd_status urndis_ctrl_msg(struct urndis_softc *, uint8_t, uint8_t,
83 uint16_t, uint16_t, void *, size_t);
84 static usbd_status urndis_ctrl_send(struct urndis_softc *, void *, size_t);
85 static struct urndis_comp_hdr *urndis_ctrl_recv(struct urndis_softc *);
86
87 static uint32_t urndis_ctrl_handle(struct urndis_softc *,
88 struct urndis_comp_hdr *, void **, size_t *);
89 static uint32_t urndis_ctrl_handle_init(struct urndis_softc *,
90 const struct urndis_comp_hdr *);
91 static uint32_t urndis_ctrl_handle_query(struct urndis_softc *,
92 const struct urndis_comp_hdr *, void **, size_t *);
93 static uint32_t urndis_ctrl_handle_reset(struct urndis_softc *,
94 const struct urndis_comp_hdr *);
95
96 static uint32_t urndis_ctrl_init(struct urndis_softc *);
97 #if 0
98 static uint32_t urndis_ctrl_halt(struct urndis_softc *);
99 #endif
100 static uint32_t urndis_ctrl_query(struct urndis_softc *, uint32_t, void *,
101 size_t, void **, size_t *);
102 static uint32_t urndis_ctrl_set(struct urndis_softc *, uint32_t, void *, size_t);
103 #if 0
104 static uint32_t urndis_ctrl_set_param(struct urndis_softc *, const char *,
105 uint32_t, void *, size_t);
106 static uint32_t urndis_ctrl_reset(struct urndis_softc *);
107 static uint32_t urndis_ctrl_keepalive(struct urndis_softc *);
108 #endif
109
110 static int urndis_encap(struct urndis_softc *, struct mbuf *, int);
111 static void urndis_decap(struct urndis_softc *, struct urndis_chain *, uint32_t);
112
113 static int urndis_match(device_t, cfdata_t, void *);
114 static void urndis_attach(device_t, device_t, void *);
115 static int urndis_detach(device_t, int);
116 static int urndis_activate(device_t, enum devact);
117
118 CFATTACH_DECL_NEW(urndis, sizeof(struct urndis_softc),
119 urndis_match, urndis_attach, urndis_detach, urndis_activate);
120
121 /*
122 * Supported devices that we can't match by class IDs.
123 */
124 static const struct usb_devno urndis_devs[] = {
125 { USB_VENDOR_HTC, USB_PRODUCT_HTC_ANDROID },
126 { USB_VENDOR_SAMSUNG, USB_PRODUCT_SAMSUNG_ANDROID2 },
127 };
128
129 static usbd_status
130 urndis_ctrl_msg(struct urndis_softc *sc, uint8_t rt, uint8_t r,
131 uint16_t index, uint16_t value, void *buf, size_t buflen)
132 {
133 usb_device_request_t req;
134
135 req.bmRequestType = rt;
136 req.bRequest = r;
137 USETW(req.wValue, value);
138 USETW(req.wIndex, index);
139 USETW(req.wLength, buflen);
140
141 return usbd_do_request(sc->sc_udev, &req, buf);
142 }
143
144 static usbd_status
145 urndis_ctrl_send(struct urndis_softc *sc, void *buf, size_t len)
146 {
147 usbd_status err;
148
149 if (sc->sc_dying)
150 return(0);
151
152 err = urndis_ctrl_msg(sc, UT_WRITE_CLASS_INTERFACE, UR_GET_STATUS,
153 sc->sc_ifaceno_ctl, 0, buf, len);
154
155 if (err != USBD_NORMAL_COMPLETION)
156 printf("%s: %s\n", DEVNAME(sc), usbd_errstr(err));
157
158 return err;
159 }
160
161 static struct urndis_comp_hdr *
162 urndis_ctrl_recv(struct urndis_softc *sc)
163 {
164 struct urndis_comp_hdr *hdr;
165 char *buf;
166 usbd_status err;
167
168 buf = kmem_alloc(URNDIS_RESPONSE_LEN, KM_SLEEP);
169 if (buf == NULL) {
170 printf("%s: out of memory\n", DEVNAME(sc));
171 return NULL;
172 }
173
174 err = urndis_ctrl_msg(sc, UT_READ_CLASS_INTERFACE, UR_CLEAR_FEATURE,
175 sc->sc_ifaceno_ctl, 0, buf, URNDIS_RESPONSE_LEN);
176
177 if (err != USBD_NORMAL_COMPLETION && err != USBD_SHORT_XFER) {
178 printf("%s: %s\n", DEVNAME(sc), usbd_errstr(err));
179 kmem_free(buf, URNDIS_RESPONSE_LEN);
180 return NULL;
181 }
182
183 hdr = (struct urndis_comp_hdr *)buf;
184 DPRINTF(("%s: urndis_ctrl_recv: type 0x%x len %u\n",
185 DEVNAME(sc),
186 le32toh(hdr->rm_type),
187 le32toh(hdr->rm_len)));
188
189 if (le32toh(hdr->rm_len) > URNDIS_RESPONSE_LEN) {
190 printf("%s: ctrl message error: wrong size %u > %u\n",
191 DEVNAME(sc),
192 le32toh(hdr->rm_len),
193 URNDIS_RESPONSE_LEN);
194 kmem_free(buf, URNDIS_RESPONSE_LEN);
195 return NULL;
196 }
197
198 return hdr;
199 }
200
201 static uint32_t
202 urndis_ctrl_handle(struct urndis_softc *sc, struct urndis_comp_hdr *hdr,
203 void **buf, size_t *bufsz)
204 {
205 uint32_t rval;
206
207 DPRINTF(("%s: urndis_ctrl_handle\n", DEVNAME(sc)));
208
209 if (buf && bufsz) {
210 *buf = NULL;
211 *bufsz = 0;
212 }
213
214 switch (le32toh(hdr->rm_type)) {
215 case REMOTE_NDIS_INITIALIZE_CMPLT:
216 rval = urndis_ctrl_handle_init(sc, hdr);
217 break;
218
219 case REMOTE_NDIS_QUERY_CMPLT:
220 rval = urndis_ctrl_handle_query(sc, hdr, buf, bufsz);
221 break;
222
223 case REMOTE_NDIS_RESET_CMPLT:
224 rval = urndis_ctrl_handle_reset(sc, hdr);
225 break;
226
227 case REMOTE_NDIS_KEEPALIVE_CMPLT:
228 case REMOTE_NDIS_SET_CMPLT:
229 rval = le32toh(hdr->rm_status);
230 break;
231
232 default:
233 printf("%s: ctrl message error: unknown event 0x%x\n",
234 DEVNAME(sc), le32toh(hdr->rm_type));
235 rval = RNDIS_STATUS_FAILURE;
236 }
237
238 kmem_free(hdr, URNDIS_RESPONSE_LEN);
239
240 return rval;
241 }
242
243 static uint32_t
244 urndis_ctrl_handle_init(struct urndis_softc *sc,
245 const struct urndis_comp_hdr *hdr)
246 {
247 const struct urndis_init_comp *msg;
248
249 msg = (const struct urndis_init_comp *) hdr;
250
251 DPRINTF(("%s: urndis_ctrl_handle_init: len %u rid %u status 0x%x "
252 "ver_major %u ver_minor %u devflags 0x%x medium 0x%x pktmaxcnt %u "
253 "pktmaxsz %u align %u aflistoffset %u aflistsz %u\n",
254 DEVNAME(sc),
255 le32toh(msg->rm_len),
256 le32toh(msg->rm_rid),
257 le32toh(msg->rm_status),
258 le32toh(msg->rm_ver_major),
259 le32toh(msg->rm_ver_minor),
260 le32toh(msg->rm_devflags),
261 le32toh(msg->rm_medium),
262 le32toh(msg->rm_pktmaxcnt),
263 le32toh(msg->rm_pktmaxsz),
264 le32toh(msg->rm_align),
265 le32toh(msg->rm_aflistoffset),
266 le32toh(msg->rm_aflistsz)));
267
268 if (le32toh(msg->rm_status) != RNDIS_STATUS_SUCCESS) {
269 printf("%s: init failed 0x%x\n",
270 DEVNAME(sc),
271 le32toh(msg->rm_status));
272
273 return le32toh(msg->rm_status);
274 }
275
276 if (le32toh(msg->rm_devflags) != RNDIS_DF_CONNECTIONLESS) {
277 printf("%s: wrong device type (current type: 0x%x)\n",
278 DEVNAME(sc),
279 le32toh(msg->rm_devflags));
280
281 return RNDIS_STATUS_FAILURE;
282 }
283
284 if (le32toh(msg->rm_medium) != RNDIS_MEDIUM_802_3) {
285 printf("%s: medium not 802.3 (current medium: 0x%x)\n",
286 DEVNAME(sc), le32toh(msg->rm_medium));
287
288 return RNDIS_STATUS_FAILURE;
289 }
290
291 sc->sc_lim_pktsz = le32toh(msg->rm_pktmaxsz);
292
293 return le32toh(msg->rm_status);
294 }
295
296 static uint32_t
297 urndis_ctrl_handle_query(struct urndis_softc *sc,
298 const struct urndis_comp_hdr *hdr, void **buf, size_t *bufsz)
299 {
300 const struct urndis_query_comp *msg;
301
302 msg = (const struct urndis_query_comp *) hdr;
303
304 DPRINTF(("%s: urndis_ctrl_handle_query: len %u rid %u status 0x%x "
305 "buflen %u bufoff %u\n",
306 DEVNAME(sc),
307 le32toh(msg->rm_len),
308 le32toh(msg->rm_rid),
309 le32toh(msg->rm_status),
310 le32toh(msg->rm_infobuflen),
311 le32toh(msg->rm_infobufoffset)));
312
313 if (buf && bufsz) {
314 *buf = NULL;
315 *bufsz = 0;
316 }
317
318 if (le32toh(msg->rm_status) != RNDIS_STATUS_SUCCESS) {
319 printf("%s: query failed 0x%x\n",
320 DEVNAME(sc),
321 le32toh(msg->rm_status));
322
323 return le32toh(msg->rm_status);
324 }
325
326 if (le32toh(msg->rm_infobuflen) + le32toh(msg->rm_infobufoffset) +
327 RNDIS_HEADER_OFFSET > le32toh(msg->rm_len)) {
328 printf("%s: ctrl message error: invalid query info "
329 "len/offset/end_position(%u/%u/%u) -> "
330 "go out of buffer limit %u\n",
331 DEVNAME(sc),
332 le32toh(msg->rm_infobuflen),
333 le32toh(msg->rm_infobufoffset),
334 le32toh(msg->rm_infobuflen) +
335 le32toh(msg->rm_infobufoffset) + (uint32_t)RNDIS_HEADER_OFFSET,
336 le32toh(msg->rm_len));
337 return RNDIS_STATUS_FAILURE;
338 }
339
340 if (buf && bufsz) {
341 *buf = kmem_alloc(le32toh(msg->rm_infobuflen), KM_SLEEP);
342 if (*buf == NULL) {
343 printf("%s: out of memory\n", DEVNAME(sc));
344 return RNDIS_STATUS_FAILURE;
345 } else {
346 const char *p;
347 *bufsz = le32toh(msg->rm_infobuflen);
348
349 p = (const char *)&msg->rm_rid;
350 p += le32toh(msg->rm_infobufoffset);
351 memcpy(*buf, p, le32toh(msg->rm_infobuflen));
352 }
353 }
354
355 return le32toh(msg->rm_status);
356 }
357
358 static uint32_t
359 urndis_ctrl_handle_reset(struct urndis_softc *sc,
360 const struct urndis_comp_hdr *hdr)
361 {
362 const struct urndis_reset_comp *msg;
363 uint32_t rval;
364
365 msg = (const struct urndis_reset_comp *) hdr;
366
367 rval = le32toh(msg->rm_status);
368
369 DPRINTF(("%s: urndis_ctrl_handle_reset: len %u status 0x%x "
370 "adrreset %u\n",
371 DEVNAME(sc),
372 le32toh(msg->rm_len),
373 rval,
374 le32toh(msg->rm_adrreset)));
375
376 if (rval != RNDIS_STATUS_SUCCESS) {
377 printf("%s: reset failed 0x%x\n", DEVNAME(sc), rval);
378 return rval;
379 }
380
381 if (le32toh(msg->rm_adrreset) != 0) {
382 uint32_t filter;
383
384 filter = htole32(sc->sc_filter);
385 rval = urndis_ctrl_set(sc, OID_GEN_CURRENT_PACKET_FILTER,
386 &filter, sizeof(filter));
387 if (rval != RNDIS_STATUS_SUCCESS) {
388 printf("%s: unable to reset data filters\n",
389 DEVNAME(sc));
390 return rval;
391 }
392 }
393
394 return rval;
395 }
396
397 static uint32_t
398 urndis_ctrl_init(struct urndis_softc *sc)
399 {
400 struct urndis_init_req *msg;
401 uint32_t rval;
402 struct urndis_comp_hdr *hdr;
403
404 msg = kmem_alloc(sizeof(*msg), KM_SLEEP);
405 if (msg == NULL) {
406 printf("%s: out of memory\n", DEVNAME(sc));
407 return RNDIS_STATUS_FAILURE;
408 }
409
410 msg->rm_type = htole32(REMOTE_NDIS_INITIALIZE_MSG);
411 msg->rm_len = htole32(sizeof(*msg));
412 msg->rm_rid = htole32(0);
413 msg->rm_ver_major = htole32(1);
414 msg->rm_ver_minor = htole32(1);
415 msg->rm_max_xfersz = htole32(RNDIS_BUFSZ);
416
417 DPRINTF(("%s: urndis_ctrl_init send: type %u len %u rid %u ver_major %u "
418 "ver_minor %u max_xfersz %u\n",
419 DEVNAME(sc),
420 le32toh(msg->rm_type),
421 le32toh(msg->rm_len),
422 le32toh(msg->rm_rid),
423 le32toh(msg->rm_ver_major),
424 le32toh(msg->rm_ver_minor),
425 le32toh(msg->rm_max_xfersz)));
426
427 rval = urndis_ctrl_send(sc, msg, sizeof(*msg));
428 kmem_free(msg, sizeof(*msg));
429
430 if (rval != RNDIS_STATUS_SUCCESS) {
431 printf("%s: init failed\n", DEVNAME(sc));
432 return rval;
433 }
434
435 if ((hdr = urndis_ctrl_recv(sc)) == NULL) {
436 printf("%s: unable to get init response\n", DEVNAME(sc));
437 return RNDIS_STATUS_FAILURE;
438 }
439 rval = urndis_ctrl_handle(sc, hdr, NULL, NULL);
440
441 return rval;
442 }
443
444 #if 0
445 static uint32_t
446 urndis_ctrl_halt(struct urndis_softc *sc)
447 {
448 struct urndis_halt_req *msg;
449 uint32_t rval;
450
451 msg = kmem_alloc(sizeof(*msg), KM_SLEEP);
452 if (msg == NULL) {
453 printf("%s: out of memory\n", DEVNAME(sc));
454 return RNDIS_STATUS_FAILURE;
455 }
456
457 msg->rm_type = htole32(REMOTE_NDIS_HALT_MSG);
458 msg->rm_len = htole32(sizeof(*msg));
459 msg->rm_rid = 0;
460
461 DPRINTF(("%s: urndis_ctrl_halt send: type %u len %u rid %u\n",
462 DEVNAME(sc),
463 le32toh(msg->rm_type),
464 le32toh(msg->rm_len),
465 le32toh(msg->rm_rid)));
466
467 rval = urndis_ctrl_send(sc, msg, sizeof(*msg));
468 kmem_free(msg, sizeof(*msg));
469
470 if (rval != RNDIS_STATUS_SUCCESS)
471 printf("%s: halt failed\n", DEVNAME(sc));
472
473 return rval;
474 }
475 #endif
476
477 static uint32_t
478 urndis_ctrl_query(struct urndis_softc *sc, uint32_t oid,
479 void *qbuf, size_t qlen,
480 void **rbuf, size_t *rbufsz)
481 {
482 struct urndis_query_req *msg;
483 uint32_t rval;
484 struct urndis_comp_hdr *hdr;
485
486 msg = kmem_alloc(sizeof(*msg) + qlen, KM_SLEEP);
487 if (msg == NULL) {
488 printf("%s: out of memory\n", DEVNAME(sc));
489 return RNDIS_STATUS_FAILURE;
490 }
491
492 msg->rm_type = htole32(REMOTE_NDIS_QUERY_MSG);
493 msg->rm_len = htole32(sizeof(*msg) + qlen);
494 msg->rm_rid = 0; /* XXX */
495 msg->rm_oid = htole32(oid);
496 msg->rm_infobuflen = htole32(qlen);
497 if (qlen != 0) {
498 msg->rm_infobufoffset = htole32(20);
499 memcpy((char*)msg + 20, qbuf, qlen);
500 } else
501 msg->rm_infobufoffset = 0;
502 msg->rm_devicevchdl = 0;
503
504 DPRINTF(("%s: urndis_ctrl_query send: type %u len %u rid %u oid 0x%x "
505 "infobuflen %u infobufoffset %u devicevchdl %u\n",
506 DEVNAME(sc),
507 le32toh(msg->rm_type),
508 le32toh(msg->rm_len),
509 le32toh(msg->rm_rid),
510 le32toh(msg->rm_oid),
511 le32toh(msg->rm_infobuflen),
512 le32toh(msg->rm_infobufoffset),
513 le32toh(msg->rm_devicevchdl)));
514
515 rval = urndis_ctrl_send(sc, msg, sizeof(*msg));
516 kmem_free(msg, sizeof(*msg) + qlen);
517
518 if (rval != RNDIS_STATUS_SUCCESS) {
519 printf("%s: query failed\n", DEVNAME(sc));
520 return rval;
521 }
522
523 if ((hdr = urndis_ctrl_recv(sc)) == NULL) {
524 printf("%s: unable to get query response\n", DEVNAME(sc));
525 return RNDIS_STATUS_FAILURE;
526 }
527 rval = urndis_ctrl_handle(sc, hdr, rbuf, rbufsz);
528
529 return rval;
530 }
531
532 static uint32_t
533 urndis_ctrl_set(struct urndis_softc *sc, uint32_t oid, void *buf, size_t len)
534 {
535 struct urndis_set_req *msg;
536 uint32_t rval;
537 struct urndis_comp_hdr *hdr;
538
539 msg = kmem_alloc(sizeof(*msg) + len, KM_SLEEP);
540 if (msg == NULL) {
541 printf("%s: out of memory\n", DEVNAME(sc));
542 return RNDIS_STATUS_FAILURE;
543 }
544
545 msg->rm_type = htole32(REMOTE_NDIS_SET_MSG);
546 msg->rm_len = htole32(sizeof(*msg) + len);
547 msg->rm_rid = 0; /* XXX */
548 msg->rm_oid = htole32(oid);
549 msg->rm_infobuflen = htole32(len);
550 if (len != 0) {
551 msg->rm_infobufoffset = htole32(20);
552 memcpy((char*)msg + 20, buf, len);
553 } else
554 msg->rm_infobufoffset = 0;
555 msg->rm_devicevchdl = 0;
556
557 DPRINTF(("%s: urndis_ctrl_set send: type %u len %u rid %u oid 0x%x "
558 "infobuflen %u infobufoffset %u devicevchdl %u\n",
559 DEVNAME(sc),
560 le32toh(msg->rm_type),
561 le32toh(msg->rm_len),
562 le32toh(msg->rm_rid),
563 le32toh(msg->rm_oid),
564 le32toh(msg->rm_infobuflen),
565 le32toh(msg->rm_infobufoffset),
566 le32toh(msg->rm_devicevchdl)));
567
568 rval = urndis_ctrl_send(sc, msg, sizeof(*msg));
569 kmem_free(msg, sizeof(*msg) + len);
570
571 if (rval != RNDIS_STATUS_SUCCESS) {
572 printf("%s: set failed\n", DEVNAME(sc));
573 return rval;
574 }
575
576 if ((hdr = urndis_ctrl_recv(sc)) == NULL) {
577 printf("%s: unable to get set response\n", DEVNAME(sc));
578 return RNDIS_STATUS_FAILURE;
579 }
580 rval = urndis_ctrl_handle(sc, hdr, NULL, NULL);
581 if (rval != RNDIS_STATUS_SUCCESS)
582 printf("%s: set failed 0x%x\n", DEVNAME(sc), rval);
583
584 return rval;
585 }
586
587 #if 0
588 static uint32_t
589 urndis_ctrl_set_param(struct urndis_softc *sc,
590 const char *name,
591 uint32_t type,
592 void *buf,
593 size_t len)
594 {
595 struct urndis_set_parameter *param;
596 uint32_t rval;
597 size_t namelen, tlen;
598
599 if (name)
600 namelen = strlen(name);
601 else
602 namelen = 0;
603 tlen = sizeof(*param) + len + namelen;
604 param = kmem_alloc(tlen, KM_SLEEP);
605 if (param == NULL) {
606 printf("%s: out of memory\n", DEVNAME(sc));
607 return RNDIS_STATUS_FAILURE;
608 }
609
610 param->rm_namelen = htole32(namelen);
611 param->rm_valuelen = htole32(len);
612 param->rm_type = htole32(type);
613 if (namelen != 0) {
614 param->rm_nameoffset = htole32(20);
615 memcpy(param + 20, name, namelen);
616 } else
617 param->rm_nameoffset = 0;
618 if (len != 0) {
619 param->rm_valueoffset = htole32(20 + namelen);
620 memcpy(param + 20 + namelen, buf, len);
621 } else
622 param->rm_valueoffset = 0;
623
624 DPRINTF(("%s: urndis_ctrl_set_param send: nameoffset %u namelen %u "
625 "type 0x%x valueoffset %u valuelen %u\n",
626 DEVNAME(sc),
627 le32toh(param->rm_nameoffset),
628 le32toh(param->rm_namelen),
629 le32toh(param->rm_type),
630 le32toh(param->rm_valueoffset),
631 le32toh(param->rm_valuelen)));
632
633 rval = urndis_ctrl_set(sc, OID_GEN_RNDIS_CONFIG_PARAMETER, param, tlen);
634 kmem_free(param, tlen);
635 if (rval != RNDIS_STATUS_SUCCESS)
636 printf("%s: set param failed 0x%x\n", DEVNAME(sc), rval);
637
638 return rval;
639 }
640
641 /* XXX : adrreset, get it from response */
642 static uint32_t
643 urndis_ctrl_reset(struct urndis_softc *sc)
644 {
645 struct urndis_reset_req *reset;
646 uint32_t rval;
647 struct urndis_comp_hdr *hdr;
648
649 reset = kmem_alloc(sizeof(*reset), KM_SLEEP);
650 if (reset == NULL) {
651 printf("%s: out of memory\n", DEVNAME(sc));
652 return RNDIS_STATUS_FAILURE;
653 }
654
655 reset->rm_type = htole32(REMOTE_NDIS_RESET_MSG);
656 reset->rm_len = htole32(sizeof(*reset));
657 reset->rm_rid = 0; /* XXX rm_rid == reserved ... remove ? */
658
659 DPRINTF(("%s: urndis_ctrl_reset send: type %u len %u rid %u\n",
660 DEVNAME(sc),
661 le32toh(reset->rm_type),
662 le32toh(reset->rm_len),
663 le32toh(reset->rm_rid)));
664
665 rval = urndis_ctrl_send(sc, reset, sizeof(*reset));
666 kmem_free(reset, sizeof(*reset));
667
668 if (rval != RNDIS_STATUS_SUCCESS) {
669 printf("%s: reset failed\n", DEVNAME(sc));
670 return rval;
671 }
672
673 if ((hdr = urndis_ctrl_recv(sc)) == NULL) {
674 printf("%s: unable to get reset response\n", DEVNAME(sc));
675 return RNDIS_STATUS_FAILURE;
676 }
677 rval = urndis_ctrl_handle(sc, hdr, NULL, NULL);
678
679 return rval;
680 }
681
682 static uint32_t
683 urndis_ctrl_keepalive(struct urndis_softc *sc)
684 {
685 struct urndis_keepalive_req *keep;
686 uint32_t rval;
687 struct urndis_comp_hdr *hdr;
688
689 keep = kmem_alloc(sizeof(*keep), KM_SLEEP);
690 if (keep == NULL) {
691 printf("%s: out of memory\n", DEVNAME(sc));
692 return RNDIS_STATUS_FAILURE;
693 }
694
695 keep->rm_type = htole32(REMOTE_NDIS_KEEPALIVE_MSG);
696 keep->rm_len = htole32(sizeof(*keep));
697 keep->rm_rid = 0; /* XXX rm_rid == reserved ... remove ? */
698
699 DPRINTF(("%s: urndis_ctrl_keepalive: type %u len %u rid %u\n",
700 DEVNAME(sc),
701 le32toh(keep->rm_type),
702 le32toh(keep->rm_len),
703 le32toh(keep->rm_rid)));
704
705 rval = urndis_ctrl_send(sc, keep, sizeof(*keep));
706 kmem_free(keep, sizeof(*keep));
707
708 if (rval != RNDIS_STATUS_SUCCESS) {
709 printf("%s: keepalive failed\n", DEVNAME(sc));
710 return rval;
711 }
712
713 if ((hdr = urndis_ctrl_recv(sc)) == NULL) {
714 printf("%s: unable to get keepalive response\n", DEVNAME(sc));
715 return RNDIS_STATUS_FAILURE;
716 }
717 rval = urndis_ctrl_handle(sc, hdr, NULL, NULL);
718 if (rval != RNDIS_STATUS_SUCCESS) {
719 printf("%s: keepalive failed 0x%x\n", DEVNAME(sc), rval);
720 urndis_ctrl_reset(sc);
721 }
722
723 return rval;
724 }
725 #endif
726
727 static int
728 urndis_encap(struct urndis_softc *sc, struct mbuf *m, int idx)
729 {
730 struct urndis_chain *c;
731 usbd_status err;
732 struct urndis_packet_msg *msg;
733
734 c = &sc->sc_data.sc_tx_chain[idx];
735
736 msg = (struct urndis_packet_msg *)c->sc_buf;
737
738 memset(msg, 0, sizeof(*msg));
739 msg->rm_type = htole32(REMOTE_NDIS_PACKET_MSG);
740 msg->rm_len = htole32(sizeof(*msg) + m->m_pkthdr.len);
741
742 msg->rm_dataoffset = htole32(RNDIS_DATA_OFFSET);
743 msg->rm_datalen = htole32(m->m_pkthdr.len);
744
745 m_copydata(m, 0, m->m_pkthdr.len,
746 ((char*)msg + RNDIS_DATA_OFFSET + RNDIS_HEADER_OFFSET));
747
748 DPRINTF(("%s: urndis_encap type 0x%x len %u data(off %u len %u)\n",
749 DEVNAME(sc),
750 le32toh(msg->rm_type),
751 le32toh(msg->rm_len),
752 le32toh(msg->rm_dataoffset),
753 le32toh(msg->rm_datalen)));
754
755 c->sc_mbuf = m;
756
757 usbd_setup_xfer(c->sc_xfer, c, c->sc_buf, le32toh(msg->rm_len),
758 USBD_FORCE_SHORT_XFER, 10000, urndis_txeof);
759
760 /* Transmit */
761 err = usbd_transfer(c->sc_xfer);
762 if (err != USBD_IN_PROGRESS) {
763 urndis_stop(GET_IFP(sc));
764 return(EIO);
765 }
766
767 sc->sc_data.sc_tx_cnt++;
768
769 return(0);
770 }
771
772 static void
773 urndis_decap(struct urndis_softc *sc, struct urndis_chain *c, uint32_t len)
774 {
775 struct mbuf *m;
776 struct urndis_packet_msg *msg;
777 struct ifnet *ifp;
778 int s;
779 int offset;
780
781 ifp = GET_IFP(sc);
782 offset = 0;
783
784 while (len > 0) {
785 msg = (struct urndis_packet_msg *)((char*)c->sc_buf + offset);
786 m = c->sc_mbuf;
787
788 DPRINTF(("%s: urndis_decap buffer size left %u\n", DEVNAME(sc),
789 len));
790
791 if (len < sizeof(*msg)) {
792 printf("%s: urndis_decap invalid buffer len %u < "
793 "minimum header %zu\n",
794 DEVNAME(sc),
795 len,
796 sizeof(*msg));
797 return;
798 }
799
800 DPRINTF(("%s: urndis_decap len %u data(off:%u len:%u) "
801 "oobdata(off:%u len:%u nb:%u) perpacket(off:%u len:%u)\n",
802 DEVNAME(sc),
803 le32toh(msg->rm_len),
804 le32toh(msg->rm_dataoffset),
805 le32toh(msg->rm_datalen),
806 le32toh(msg->rm_oobdataoffset),
807 le32toh(msg->rm_oobdatalen),
808 le32toh(msg->rm_oobdataelements),
809 le32toh(msg->rm_pktinfooffset),
810 le32toh(msg->rm_pktinfooffset)));
811
812 if (le32toh(msg->rm_type) != REMOTE_NDIS_PACKET_MSG) {
813 printf("%s: urndis_decap invalid type 0x%x != 0x%x\n",
814 DEVNAME(sc),
815 le32toh(msg->rm_type),
816 REMOTE_NDIS_PACKET_MSG);
817 return;
818 }
819 if (le32toh(msg->rm_len) < sizeof(*msg)) {
820 printf("%s: urndis_decap invalid msg len %u < %zu\n",
821 DEVNAME(sc),
822 le32toh(msg->rm_len),
823 sizeof(*msg));
824 return;
825 }
826 if (le32toh(msg->rm_len) > len) {
827 printf("%s: urndis_decap invalid msg len %u > buffer "
828 "len %u\n",
829 DEVNAME(sc),
830 le32toh(msg->rm_len),
831 len);
832 return;
833 }
834
835 if (le32toh(msg->rm_dataoffset) +
836 le32toh(msg->rm_datalen) + RNDIS_HEADER_OFFSET
837 > le32toh(msg->rm_len)) {
838 printf("%s: urndis_decap invalid data "
839 "len/offset/end_position(%u/%u/%u) -> "
840 "go out of receive buffer limit %u\n",
841 DEVNAME(sc),
842 le32toh(msg->rm_datalen),
843 le32toh(msg->rm_dataoffset),
844 le32toh(msg->rm_dataoffset) +
845 le32toh(msg->rm_datalen) + (uint32_t)RNDIS_HEADER_OFFSET,
846 le32toh(msg->rm_len));
847 return;
848 }
849
850 if (le32toh(msg->rm_datalen) < sizeof(struct ether_header)) {
851 ifp->if_ierrors++;
852 printf("%s: urndis_decap invalid ethernet size "
853 "%d < %zu\n",
854 DEVNAME(sc),
855 le32toh(msg->rm_datalen),
856 sizeof(struct ether_header));
857 return;
858 }
859
860 memcpy(mtod(m, char*),
861 ((char*)&msg->rm_dataoffset + le32toh(msg->rm_dataoffset)),
862 le32toh(msg->rm_datalen));
863 m->m_pkthdr.len = m->m_len = le32toh(msg->rm_datalen);
864
865 ifp->if_ipackets++;
866 m->m_pkthdr.rcvif = ifp;
867
868 s = splnet();
869
870 if (urndis_newbuf(sc, c) == ENOBUFS) {
871 ifp->if_ierrors++;
872 } else {
873
874 bpf_mtap(ifp, m);
875
876 (*(ifp)->if_input)((ifp), (m));
877 }
878 splx(s);
879
880 offset += le32toh(msg->rm_len);
881 len -= le32toh(msg->rm_len);
882 }
883 }
884
885 static int
886 urndis_newbuf(struct urndis_softc *sc, struct urndis_chain *c)
887 {
888 struct mbuf *m_new = NULL;
889
890 MGETHDR(m_new, M_DONTWAIT, MT_DATA);
891 if (m_new == NULL) {
892 printf("%s: no memory for rx list -- packet dropped!\n",
893 DEVNAME(sc));
894 return ENOBUFS;
895 }
896 MCLGET(m_new, M_DONTWAIT);
897 if (!(m_new->m_flags & M_EXT)) {
898 printf("%s: no memory for rx list -- packet dropped!\n",
899 DEVNAME(sc));
900 m_freem(m_new);
901 return ENOBUFS;
902 }
903 m_new->m_len = m_new->m_pkthdr.len = MCLBYTES;
904
905 m_adj(m_new, ETHER_ALIGN);
906 c->sc_mbuf = m_new;
907 return 0;
908 }
909
910 static int
911 urndis_rx_list_init(struct urndis_softc *sc)
912 {
913 struct urndis_cdata *cd;
914 struct urndis_chain *c;
915 int i;
916
917 cd = &sc->sc_data;
918 for (i = 0; i < RNDIS_RX_LIST_CNT; i++) {
919 c = &cd->sc_rx_chain[i];
920 c->sc_softc = sc;
921 c->sc_idx = i;
922
923 if (urndis_newbuf(sc, c) == ENOBUFS)
924 return ENOBUFS;
925
926 if (c->sc_xfer == NULL) {
927 int err = usbd_create_xfer(sc->sc_bulkin_pipe,
928 RNDIS_BUFSZ, USBD_SHORT_XFER_OK, 0, &c->sc_xfer);
929 if (err)
930 return err;
931 c->sc_buf = usbd_get_buffer(c->sc_xfer);
932 }
933 }
934
935 return 0;
936 }
937
938 static int
939 urndis_tx_list_init(struct urndis_softc *sc)
940 {
941 struct urndis_cdata *cd;
942 struct urndis_chain *c;
943 int i;
944
945 cd = &sc->sc_data;
946 for (i = 0; i < RNDIS_TX_LIST_CNT; i++) {
947 c = &cd->sc_tx_chain[i];
948 c->sc_softc = sc;
949 c->sc_idx = i;
950 c->sc_mbuf = NULL;
951 if (c->sc_xfer == NULL) {
952 int err = usbd_create_xfer(sc->sc_bulkout_pipe,
953 RNDIS_BUFSZ, USBD_FORCE_SHORT_XFER, 0, &c->sc_xfer);
954 if (err)
955 return err;
956 c->sc_buf = usbd_get_buffer(c->sc_xfer);
957 }
958 }
959 return 0;
960 }
961
962 static int
963 urndis_ioctl(struct ifnet *ifp, unsigned long command, void *data)
964 {
965 struct urndis_softc *sc;
966 int s, error;
967
968 sc = ifp->if_softc;
969 error = 0;
970
971 if (sc->sc_dying)
972 return EIO;
973
974 s = splnet();
975
976 switch(command) {
977 case SIOCSIFFLAGS:
978 if ((error = ifioctl_common(ifp, command, data)) != 0)
979 break;
980 if (ifp->if_flags & IFF_UP) {
981 if (!(ifp->if_flags & IFF_RUNNING))
982 urndis_init(ifp);
983 } else {
984 if (ifp->if_flags & IFF_RUNNING)
985 urndis_stop(ifp);
986 }
987 error = 0;
988 break;
989
990 default:
991 error = ether_ioctl(ifp, command, data);
992 break;
993 }
994
995 if (error == ENETRESET)
996 error = 0;
997
998 splx(s);
999 return error;
1000 }
1001
1002 #if 0
1003 static void
1004 urndis_watchdog(struct ifnet *ifp)
1005 {
1006 struct urndis_softc *sc;
1007
1008 sc = ifp->if_softc;
1009
1010 if (sc->sc_dying)
1011 return;
1012
1013 ifp->if_oerrors++;
1014 printf("%s: watchdog timeout\n", DEVNAME(sc));
1015
1016 urndis_ctrl_keepalive(sc);
1017 }
1018 #endif
1019
1020 static int
1021 urndis_init(struct ifnet *ifp)
1022 {
1023 struct urndis_softc *sc;
1024 int i, s;
1025 int err;
1026 usbd_status usberr;
1027
1028 sc = ifp->if_softc;
1029
1030 if (ifp->if_flags & IFF_RUNNING)
1031 return 0;
1032
1033 err = urndis_ctrl_init(sc);
1034 if (err != RNDIS_STATUS_SUCCESS)
1035 return EIO;
1036
1037 s = splnet();
1038
1039 usberr = usbd_open_pipe(sc->sc_iface_data, sc->sc_bulkin_no,
1040 USBD_EXCLUSIVE_USE, &sc->sc_bulkin_pipe);
1041 if (usberr) {
1042 printf("%s: open rx pipe failed: %s\n", DEVNAME(sc),
1043 usbd_errstr(err));
1044 splx(s);
1045 return EIO;
1046 }
1047
1048 usberr = usbd_open_pipe(sc->sc_iface_data, sc->sc_bulkout_no,
1049 USBD_EXCLUSIVE_USE, &sc->sc_bulkout_pipe);
1050 if (usberr) {
1051 printf("%s: open tx pipe failed: %s\n", DEVNAME(sc),
1052 usbd_errstr(err));
1053 splx(s);
1054 return EIO;
1055 }
1056
1057 err = urndis_tx_list_init(sc);
1058 if (err) {
1059 printf("%s: tx list init failed\n",
1060 DEVNAME(sc));
1061 splx(s);
1062 return err;
1063 }
1064
1065 err = urndis_rx_list_init(sc);
1066 if (err) {
1067 printf("%s: rx list init failed\n",
1068 DEVNAME(sc));
1069 splx(s);
1070 return err;
1071 }
1072
1073 for (i = 0; i < RNDIS_RX_LIST_CNT; i++) {
1074 struct urndis_chain *c;
1075
1076 c = &sc->sc_data.sc_rx_chain[i];
1077
1078 usbd_setup_xfer(c->sc_xfer, c, c->sc_buf, RNDIS_BUFSZ,
1079 USBD_SHORT_XFER_OK, USBD_NO_TIMEOUT, urndis_rxeof);
1080 usbd_transfer(c->sc_xfer);
1081 }
1082
1083 ifp->if_flags |= IFF_RUNNING;
1084 ifp->if_flags &= ~IFF_OACTIVE;
1085
1086 splx(s);
1087 return 0;
1088 }
1089
1090 static void
1091 urndis_stop(struct ifnet *ifp)
1092 {
1093 struct urndis_softc *sc;
1094 usbd_status err;
1095 int i;
1096
1097 sc = ifp->if_softc;
1098
1099 ifp->if_timer = 0;
1100 ifp->if_flags &= ~(IFF_RUNNING | IFF_OACTIVE);
1101
1102 if (sc->sc_bulkin_pipe != NULL) {
1103 err = usbd_abort_pipe(sc->sc_bulkin_pipe);
1104 if (err)
1105 printf("%s: abort rx pipe failed: %s\n",
1106 DEVNAME(sc), usbd_errstr(err));
1107 err = usbd_close_pipe(sc->sc_bulkin_pipe);
1108 if (err)
1109 printf("%s: close rx pipe failed: %s\n",
1110 DEVNAME(sc), usbd_errstr(err));
1111 sc->sc_bulkin_pipe = NULL;
1112 }
1113
1114 if (sc->sc_bulkout_pipe != NULL) {
1115 err = usbd_abort_pipe(sc->sc_bulkout_pipe);
1116 if (err)
1117 printf("%s: abort tx pipe failed: %s\n",
1118 DEVNAME(sc), usbd_errstr(err));
1119 err = usbd_close_pipe(sc->sc_bulkout_pipe);
1120 if (err)
1121 printf("%s: close tx pipe failed: %s\n",
1122 DEVNAME(sc), usbd_errstr(err));
1123 sc->sc_bulkout_pipe = NULL;
1124 }
1125
1126 for (i = 0; i < RNDIS_RX_LIST_CNT; i++) {
1127 if (sc->sc_data.sc_rx_chain[i].sc_mbuf != NULL) {
1128 m_freem(sc->sc_data.sc_rx_chain[i].sc_mbuf);
1129 sc->sc_data.sc_rx_chain[i].sc_mbuf = NULL;
1130 }
1131 if (sc->sc_data.sc_rx_chain[i].sc_xfer != NULL) {
1132 usbd_destroy_xfer(sc->sc_data.sc_rx_chain[i].sc_xfer);
1133 sc->sc_data.sc_rx_chain[i].sc_xfer = NULL;
1134 }
1135 }
1136
1137 for (i = 0; i < RNDIS_TX_LIST_CNT; i++) {
1138 if (sc->sc_data.sc_tx_chain[i].sc_mbuf != NULL) {
1139 m_freem(sc->sc_data.sc_tx_chain[i].sc_mbuf);
1140 sc->sc_data.sc_tx_chain[i].sc_mbuf = NULL;
1141 }
1142 if (sc->sc_data.sc_tx_chain[i].sc_xfer != NULL) {
1143 usbd_destroy_xfer(sc->sc_data.sc_tx_chain[i].sc_xfer);
1144 sc->sc_data.sc_tx_chain[i].sc_xfer = NULL;
1145 }
1146 }
1147 }
1148
1149 static void
1150 urndis_start(struct ifnet *ifp)
1151 {
1152 struct urndis_softc *sc;
1153 struct mbuf *m_head = NULL;
1154
1155 sc = ifp->if_softc;
1156
1157 if (sc->sc_dying || (ifp->if_flags & IFF_OACTIVE))
1158 return;
1159
1160 IFQ_POLL(&ifp->if_snd, m_head);
1161 if (m_head == NULL)
1162 return;
1163
1164 if (urndis_encap(sc, m_head, 0)) {
1165 ifp->if_flags |= IFF_OACTIVE;
1166 return;
1167 }
1168 IFQ_DEQUEUE(&ifp->if_snd, m_head);
1169
1170 /*
1171 * If there's a BPF listener, bounce a copy of this frame
1172 * to him.
1173 */
1174 bpf_mtap(ifp, m_head);
1175
1176 ifp->if_flags |= IFF_OACTIVE;
1177
1178 /*
1179 * Set a timeout in case the chip goes out to lunch.
1180 */
1181 ifp->if_timer = 5;
1182
1183 return;
1184 }
1185
1186 static void
1187 urndis_rxeof(struct usbd_xfer *xfer,
1188 void *priv,
1189 usbd_status status)
1190 {
1191 struct urndis_chain *c;
1192 struct urndis_softc *sc;
1193 struct ifnet *ifp;
1194 uint32_t total_len;
1195
1196 c = priv;
1197 sc = c->sc_softc;
1198 ifp = GET_IFP(sc);
1199 total_len = 0;
1200
1201 if (sc->sc_dying || !(ifp->if_flags & IFF_RUNNING))
1202 return;
1203
1204 if (status != USBD_NORMAL_COMPLETION) {
1205 if (status == USBD_NOT_STARTED || status == USBD_CANCELLED)
1206 return;
1207 if (usbd_ratecheck(&sc->sc_rx_notice)) {
1208 printf("%s: usb errors on rx: %s\n",
1209 DEVNAME(sc), usbd_errstr(status));
1210 }
1211 if (status == USBD_STALLED)
1212 usbd_clear_endpoint_stall_async(sc->sc_bulkin_pipe);
1213
1214 goto done;
1215 }
1216
1217 usbd_get_xfer_status(xfer, NULL, NULL, &total_len, NULL);
1218 urndis_decap(sc, c, total_len);
1219
1220 done:
1221 /* Setup new transfer. */
1222 usbd_setup_xfer(c->sc_xfer, c, c->sc_buf, RNDIS_BUFSZ,
1223 USBD_SHORT_XFER_OK, USBD_NO_TIMEOUT, urndis_rxeof);
1224 usbd_transfer(c->sc_xfer);
1225 }
1226
1227 static void
1228 urndis_txeof(struct usbd_xfer *xfer,
1229 void *priv,
1230 usbd_status status)
1231 {
1232 struct urndis_chain *c;
1233 struct urndis_softc *sc;
1234 struct ifnet *ifp;
1235 usbd_status err;
1236 int s;
1237
1238 c = priv;
1239 sc = c->sc_softc;
1240 ifp = GET_IFP(sc);
1241
1242 DPRINTF(("%s: urndis_txeof\n", DEVNAME(sc)));
1243
1244 if (sc->sc_dying)
1245 return;
1246
1247 s = splnet();
1248
1249 ifp->if_timer = 0;
1250 ifp->if_flags &= ~IFF_OACTIVE;
1251
1252 if (status != USBD_NORMAL_COMPLETION) {
1253 if (status == USBD_NOT_STARTED || status == USBD_CANCELLED) {
1254 splx(s);
1255 return;
1256 }
1257 ifp->if_oerrors++;
1258 printf("%s: usb error on tx: %s\n", DEVNAME(sc),
1259 usbd_errstr(status));
1260 if (status == USBD_STALLED)
1261 usbd_clear_endpoint_stall_async(sc->sc_bulkout_pipe);
1262 splx(s);
1263 return;
1264 }
1265
1266 usbd_get_xfer_status(c->sc_xfer, NULL, NULL, NULL, &err);
1267
1268 if (c->sc_mbuf != NULL) {
1269 m_freem(c->sc_mbuf);
1270 c->sc_mbuf = NULL;
1271 }
1272
1273 if (err)
1274 ifp->if_oerrors++;
1275 else
1276 ifp->if_opackets++;
1277
1278 if (IFQ_IS_EMPTY(&ifp->if_snd) == 0)
1279 urndis_start(ifp);
1280
1281 splx(s);
1282 }
1283
1284 static int
1285 urndis_match(device_t parent, cfdata_t match, void *aux)
1286 {
1287 struct usbif_attach_arg *uiaa = aux;
1288 usb_interface_descriptor_t *id;
1289
1290 if (!uiaa->uiaa_iface)
1291 return UMATCH_NONE;
1292
1293 id = usbd_get_interface_descriptor(uiaa->uiaa_iface);
1294 if (id == NULL)
1295 return UMATCH_NONE;
1296
1297 if (id->bInterfaceClass == UICLASS_WIRELESS &&
1298 id->bInterfaceSubClass == UISUBCLASS_RF &&
1299 id->bInterfaceProtocol == UIPROTO_RNDIS)
1300 return UMATCH_IFACECLASS_IFACESUBCLASS_IFACEPROTO;
1301
1302 return usb_lookup(urndis_devs, uiaa->uiaa_vendor, uiaa->uiaa_product) != NULL ?
1303 UMATCH_VENDOR_PRODUCT : UMATCH_NONE;
1304 }
1305
1306 static void
1307 urndis_attach(device_t parent, device_t self, void *aux)
1308 {
1309 struct urndis_softc *sc;
1310 struct usbif_attach_arg *uiaa;
1311 struct ifnet *ifp;
1312 usb_interface_descriptor_t *id;
1313 usb_endpoint_descriptor_t *ed;
1314 usb_config_descriptor_t *cd;
1315 const usb_cdc_union_descriptor_t *ud;
1316 const usb_cdc_header_descriptor_t *desc;
1317 usbd_desc_iter_t iter;
1318 int if_ctl, if_data;
1319 int i, j, altcnt;
1320 int s;
1321 u_char eaddr[ETHER_ADDR_LEN];
1322 void *buf;
1323 size_t bufsz;
1324 uint32_t filter;
1325 char *devinfop;
1326
1327 sc = device_private(self);
1328 uiaa = aux;
1329 sc->sc_dev = self;
1330 sc->sc_udev = uiaa->uiaa_device;
1331
1332 aprint_naive("\n");
1333 aprint_normal("\n");
1334
1335 devinfop = usbd_devinfo_alloc(uiaa->uiaa_device, 0);
1336 aprint_normal_dev(self, "%s\n", devinfop);
1337 usbd_devinfo_free(devinfop);
1338
1339 sc->sc_iface_ctl = uiaa->uiaa_iface;
1340 id = usbd_get_interface_descriptor(sc->sc_iface_ctl);
1341 if_ctl = id->bInterfaceNumber;
1342 sc->sc_ifaceno_ctl = if_ctl;
1343 if_data = -1;
1344
1345 usb_desc_iter_init(sc->sc_udev, &iter);
1346 while ((desc = (const void *)usb_desc_iter_next(&iter)) != NULL) {
1347
1348 if (desc->bDescriptorType != UDESC_CS_INTERFACE) {
1349 continue;
1350 }
1351 switch (desc->bDescriptorSubtype) {
1352 case UDESCSUB_CDC_UNION:
1353 /* XXX bail out when found first? */
1354 ud = (const usb_cdc_union_descriptor_t *)desc;
1355 if (if_data == -1)
1356 if_data = ud->bSlaveInterface[0];
1357 break;
1358 }
1359 }
1360
1361 if (if_data == -1) {
1362 DPRINTF(("urndis_attach: no union interface\n"));
1363 sc->sc_iface_data = sc->sc_iface_ctl;
1364 } else {
1365 DPRINTF(("urndis_attach: union interface: ctl %u, data %u\n",
1366 if_ctl, if_data));
1367 for (i = 0; i < uiaa->uiaa_nifaces; i++) {
1368 if (uiaa->uiaa_ifaces[i] != NULL) {
1369 id = usbd_get_interface_descriptor(
1370 uiaa->uiaa_ifaces[i]);
1371 if (id != NULL && id->bInterfaceNumber ==
1372 if_data) {
1373 sc->sc_iface_data = uiaa->uiaa_ifaces[i];
1374 uiaa->uiaa_ifaces[i] = NULL;
1375 }
1376 }
1377 }
1378 }
1379
1380 if (sc->sc_iface_data == NULL) {
1381 printf("%s: no data interface\n", DEVNAME(sc));
1382 return;
1383 }
1384
1385 id = usbd_get_interface_descriptor(sc->sc_iface_data);
1386 cd = usbd_get_config_descriptor(sc->sc_udev);
1387 altcnt = usbd_get_no_alts(cd, id->bInterfaceNumber);
1388
1389 for (j = 0; j < altcnt; j++) {
1390 if (usbd_set_interface(sc->sc_iface_data, j)) {
1391 printf("%s: interface alternate setting %u failed\n",
1392 DEVNAME(sc), j);
1393 return;
1394 }
1395 /* Find endpoints. */
1396 id = usbd_get_interface_descriptor(sc->sc_iface_data);
1397 sc->sc_bulkin_no = sc->sc_bulkout_no = -1;
1398 for (i = 0; i < id->bNumEndpoints; i++) {
1399 ed = usbd_interface2endpoint_descriptor(
1400 sc->sc_iface_data, i);
1401 if (!ed) {
1402 printf("%s: no descriptor for bulk endpoint "
1403 "%u\n", DEVNAME(sc), i);
1404 return;
1405 }
1406 if (UE_GET_DIR(ed->bEndpointAddress) == UE_DIR_IN &&
1407 UE_GET_XFERTYPE(ed->bmAttributes) == UE_BULK) {
1408 sc->sc_bulkin_no = ed->bEndpointAddress;
1409 }
1410 else if (
1411 UE_GET_DIR(ed->bEndpointAddress) == UE_DIR_OUT &&
1412 UE_GET_XFERTYPE(ed->bmAttributes) == UE_BULK) {
1413 sc->sc_bulkout_no = ed->bEndpointAddress;
1414 }
1415 }
1416
1417 if (sc->sc_bulkin_no != -1 && sc->sc_bulkout_no != -1) {
1418 DPRINTF(("%s: in=0x%x, out=0x%x\n",
1419 DEVNAME(sc),
1420 sc->sc_bulkin_no,
1421 sc->sc_bulkout_no));
1422 goto found;
1423 }
1424 }
1425
1426 if (sc->sc_bulkin_no == -1)
1427 printf("%s: could not find data bulk in\n", DEVNAME(sc));
1428 if (sc->sc_bulkout_no == -1 )
1429 printf("%s: could not find data bulk out\n", DEVNAME(sc));
1430 return;
1431
1432 found:
1433
1434 ifp = GET_IFP(sc);
1435 ifp->if_softc = sc;
1436 ifp->if_flags = IFF_BROADCAST | IFF_SIMPLEX | IFF_MULTICAST;
1437 ifp->if_start = urndis_start;
1438 ifp->if_ioctl = urndis_ioctl;
1439 ifp->if_init = urndis_init;
1440 #if 0
1441 ifp->if_watchdog = urndis_watchdog;
1442 #endif
1443
1444 strlcpy(ifp->if_xname, DEVNAME(sc), IFNAMSIZ);
1445
1446 IFQ_SET_READY(&ifp->if_snd);
1447
1448 urndis_init(ifp);
1449
1450 s = splnet();
1451
1452 if (urndis_ctrl_query(sc, OID_802_3_PERMANENT_ADDRESS, NULL, 0,
1453 &buf, &bufsz) != RNDIS_STATUS_SUCCESS) {
1454 printf("%s: unable to get hardware address\n", DEVNAME(sc));
1455 urndis_stop(ifp);
1456 splx(s);
1457 return;
1458 }
1459
1460 if (bufsz == ETHER_ADDR_LEN) {
1461 memcpy(eaddr, buf, ETHER_ADDR_LEN);
1462 printf("%s: address %s\n", DEVNAME(sc), ether_sprintf(eaddr));
1463 kmem_free(buf, bufsz);
1464 } else {
1465 printf("%s: invalid address\n", DEVNAME(sc));
1466 kmem_free(buf, bufsz);
1467 urndis_stop(ifp);
1468 splx(s);
1469 return;
1470 }
1471
1472 /* Initialize packet filter */
1473 sc->sc_filter = RNDIS_PACKET_TYPE_BROADCAST;
1474 sc->sc_filter |= RNDIS_PACKET_TYPE_ALL_MULTICAST;
1475 filter = htole32(sc->sc_filter);
1476 if (urndis_ctrl_set(sc, OID_GEN_CURRENT_PACKET_FILTER, &filter,
1477 sizeof(filter)) != RNDIS_STATUS_SUCCESS) {
1478 printf("%s: unable to set data filters\n", DEVNAME(sc));
1479 urndis_stop(ifp);
1480 splx(s);
1481 return;
1482 }
1483
1484 if_attach(ifp);
1485 ether_ifattach(ifp, eaddr);
1486 sc->sc_attached = 1;
1487
1488 splx(s);
1489 }
1490
1491 static int
1492 urndis_detach(device_t self, int flags)
1493 {
1494 struct urndis_softc *sc;
1495 struct ifnet *ifp;
1496 int s;
1497
1498 sc = device_private(self);
1499
1500 DPRINTF(("urndis_detach: %s flags %u\n", DEVNAME(sc),
1501 flags));
1502
1503 if (!sc->sc_attached)
1504 return 0;
1505
1506 s = splusb();
1507
1508 ifp = GET_IFP(sc);
1509
1510 if (ifp->if_softc != NULL) {
1511 ether_ifdetach(ifp);
1512 if_detach(ifp);
1513 }
1514
1515 urndis_stop(ifp);
1516 sc->sc_attached = 0;
1517
1518 splx(s);
1519
1520 return 0;
1521 }
1522
1523 static int
1524 urndis_activate(device_t self, enum devact act)
1525 {
1526 struct urndis_softc *sc;
1527
1528 sc = device_private(self);
1529
1530 switch (act) {
1531 case DVACT_DEACTIVATE:
1532 sc->sc_dying = 1;
1533 return 0;
1534 }
1535
1536 return EOPNOTSUPP;
1537 }
1538
1539