2 * QEMU Bluetooth HCI USB Transport Layer v1.0
4 * Copyright (C) 2007 OpenMoko, Inc.
7 * This program is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU General Public License as
9 * published by the Free Software Foundation; either version 2 or
10 * (at your option) version 3 of the License.
12 * This program is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 * GNU General Public License for more details.
17 * You should have received a copy of the GNU General Public License along
18 * with this program; if not, see <http://www.gnu.org/licenses/>.
21 #include "qemu-common.h"
22 #include "qemu/error-report.h"
24 #include "hw/usb/desc.h"
25 #include "sysemu/bt.h"
35 #define CFIFO_LEN_MASK 255
36 #define DFIFO_LEN_MASK 4095
37 struct usb_hci_in_fifo_s {
38 uint8_t data[(DFIFO_LEN_MASK + 1) * 2];
42 } fifo[CFIFO_LEN_MASK + 1];
43 int dstart, dlen, dsize, start, len;
46 struct usb_hci_out_fifo_s {
49 } outcmd, outacl, outsco;
61 static const USBDescStrings desc_strings = {
62 [STR_MANUFACTURER] = "QEMU",
63 [STR_SERIALNUMBER] = "1",
66 static const USBDescIface desc_iface_bluetooth[] = {
68 .bInterfaceNumber = 0,
70 .bInterfaceClass = 0xe0, /* Wireless */
71 .bInterfaceSubClass = 0x01, /* Radio Frequency */
72 .bInterfaceProtocol = 0x01, /* Bluetooth */
73 .eps = (USBDescEndpoint[]) {
75 .bEndpointAddress = USB_DIR_IN | USB_EVT_EP,
76 .bmAttributes = USB_ENDPOINT_XFER_INT,
77 .wMaxPacketSize = 0x10,
81 .bEndpointAddress = USB_DIR_OUT | USB_ACL_EP,
82 .bmAttributes = USB_ENDPOINT_XFER_BULK,
83 .wMaxPacketSize = 0x40,
87 .bEndpointAddress = USB_DIR_IN | USB_ACL_EP,
88 .bmAttributes = USB_ENDPOINT_XFER_BULK,
89 .wMaxPacketSize = 0x40,
94 .bInterfaceNumber = 1,
95 .bAlternateSetting = 0,
97 .bInterfaceClass = 0xe0, /* Wireless */
98 .bInterfaceSubClass = 0x01, /* Radio Frequency */
99 .bInterfaceProtocol = 0x01, /* Bluetooth */
100 .eps = (USBDescEndpoint[]) {
102 .bEndpointAddress = USB_DIR_OUT | USB_SCO_EP,
103 .bmAttributes = USB_ENDPOINT_XFER_ISOC,
108 .bEndpointAddress = USB_DIR_IN | USB_SCO_EP,
109 .bmAttributes = USB_ENDPOINT_XFER_ISOC,
115 .bInterfaceNumber = 1,
116 .bAlternateSetting = 1,
118 .bInterfaceClass = 0xe0, /* Wireless */
119 .bInterfaceSubClass = 0x01, /* Radio Frequency */
120 .bInterfaceProtocol = 0x01, /* Bluetooth */
121 .eps = (USBDescEndpoint[]) {
123 .bEndpointAddress = USB_DIR_OUT | USB_SCO_EP,
124 .bmAttributes = USB_ENDPOINT_XFER_ISOC,
125 .wMaxPacketSize = 0x09,
129 .bEndpointAddress = USB_DIR_IN | USB_SCO_EP,
130 .bmAttributes = USB_ENDPOINT_XFER_ISOC,
131 .wMaxPacketSize = 0x09,
136 .bInterfaceNumber = 1,
137 .bAlternateSetting = 2,
139 .bInterfaceClass = 0xe0, /* Wireless */
140 .bInterfaceSubClass = 0x01, /* Radio Frequency */
141 .bInterfaceProtocol = 0x01, /* Bluetooth */
142 .eps = (USBDescEndpoint[]) {
144 .bEndpointAddress = USB_DIR_OUT | USB_SCO_EP,
145 .bmAttributes = USB_ENDPOINT_XFER_ISOC,
146 .wMaxPacketSize = 0x11,
150 .bEndpointAddress = USB_DIR_IN | USB_SCO_EP,
151 .bmAttributes = USB_ENDPOINT_XFER_ISOC,
152 .wMaxPacketSize = 0x11,
157 .bInterfaceNumber = 1,
158 .bAlternateSetting = 3,
160 .bInterfaceClass = 0xe0, /* Wireless */
161 .bInterfaceSubClass = 0x01, /* Radio Frequency */
162 .bInterfaceProtocol = 0x01, /* Bluetooth */
163 .eps = (USBDescEndpoint[]) {
165 .bEndpointAddress = USB_DIR_OUT | USB_SCO_EP,
166 .bmAttributes = USB_ENDPOINT_XFER_ISOC,
167 .wMaxPacketSize = 0x19,
171 .bEndpointAddress = USB_DIR_IN | USB_SCO_EP,
172 .bmAttributes = USB_ENDPOINT_XFER_ISOC,
173 .wMaxPacketSize = 0x19,
178 .bInterfaceNumber = 1,
179 .bAlternateSetting = 4,
181 .bInterfaceClass = 0xe0, /* Wireless */
182 .bInterfaceSubClass = 0x01, /* Radio Frequency */
183 .bInterfaceProtocol = 0x01, /* Bluetooth */
184 .eps = (USBDescEndpoint[]) {
186 .bEndpointAddress = USB_DIR_OUT | USB_SCO_EP,
187 .bmAttributes = USB_ENDPOINT_XFER_ISOC,
188 .wMaxPacketSize = 0x21,
192 .bEndpointAddress = USB_DIR_IN | USB_SCO_EP,
193 .bmAttributes = USB_ENDPOINT_XFER_ISOC,
194 .wMaxPacketSize = 0x21,
199 .bInterfaceNumber = 1,
200 .bAlternateSetting = 5,
202 .bInterfaceClass = 0xe0, /* Wireless */
203 .bInterfaceSubClass = 0x01, /* Radio Frequency */
204 .bInterfaceProtocol = 0x01, /* Bluetooth */
205 .eps = (USBDescEndpoint[]) {
207 .bEndpointAddress = USB_DIR_OUT | USB_SCO_EP,
208 .bmAttributes = USB_ENDPOINT_XFER_ISOC,
209 .wMaxPacketSize = 0x31,
213 .bEndpointAddress = USB_DIR_IN | USB_SCO_EP,
214 .bmAttributes = USB_ENDPOINT_XFER_ISOC,
215 .wMaxPacketSize = 0x31,
222 static const USBDescDevice desc_device_bluetooth = {
224 .bDeviceClass = 0xe0, /* Wireless */
225 .bDeviceSubClass = 0x01, /* Radio Frequency */
226 .bDeviceProtocol = 0x01, /* Bluetooth */
227 .bMaxPacketSize0 = 64,
228 .bNumConfigurations = 1,
229 .confs = (USBDescConfig[]) {
232 .bConfigurationValue = 1,
233 .bmAttributes = USB_CFG_ATT_ONE | USB_CFG_ATT_SELFPOWER,
235 .nif = ARRAY_SIZE(desc_iface_bluetooth),
236 .ifs = desc_iface_bluetooth,
241 static const USBDesc desc_bluetooth = {
246 .iManufacturer = STR_MANUFACTURER,
248 .iSerialNumber = STR_SERIALNUMBER,
250 .full = &desc_device_bluetooth,
254 static void usb_bt_fifo_reset(struct usb_hci_in_fifo_s *fifo)
258 fifo->dsize = DFIFO_LEN_MASK + 1;
263 static void usb_bt_fifo_enqueue(struct usb_hci_in_fifo_s *fifo,
264 const uint8_t *data, int len)
266 int off = fifo->dstart + fifo->dlen;
270 if (off <= DFIFO_LEN_MASK) {
271 if (off + len > DFIFO_LEN_MASK + 1 &&
272 (fifo->dsize = off + len) > (DFIFO_LEN_MASK + 1) * 2) {
273 fprintf(stderr, "%s: can't alloc %i bytes\n", __FUNCTION__, len);
276 buf = fifo->data + off;
278 if (fifo->dlen > fifo->dsize) {
279 fprintf(stderr, "%s: can't alloc %i bytes\n", __FUNCTION__, len);
282 buf = fifo->data + off - fifo->dsize;
285 off = (fifo->start + fifo->len ++) & CFIFO_LEN_MASK;
286 fifo->fifo[off].data = memcpy(buf, data, len);
287 fifo->fifo[off].len = len;
290 static inline void usb_bt_fifo_dequeue(struct usb_hci_in_fifo_s *fifo,
295 assert(fifo->len != 0);
297 len = MIN(p->iov.size, fifo->fifo[fifo->start].len);
298 usb_packet_copy(p, fifo->fifo[fifo->start].data, len);
299 if (len == p->iov.size) {
300 fifo->fifo[fifo->start].len -= len;
301 fifo->fifo[fifo->start].data += len;
304 fifo->start &= CFIFO_LEN_MASK;
310 if (fifo->dstart >= fifo->dsize) {
312 fifo->dsize = DFIFO_LEN_MASK + 1;
316 static inline void usb_bt_fifo_out_enqueue(struct USBBtState *s,
317 struct usb_hci_out_fifo_s *fifo,
318 void (*send)(struct HCIInfo *, const uint8_t *, int),
319 int (*complete)(const uint8_t *, int),
322 usb_packet_copy(p, fifo->data + fifo->len, p->iov.size);
323 fifo->len += p->iov.size;
324 if (complete(fifo->data, fifo->len)) {
325 send(s->hci, fifo->data, fifo->len);
329 /* TODO: do we need to loop? */
332 static int usb_bt_hci_cmd_complete(const uint8_t *data, int len)
334 len -= HCI_COMMAND_HDR_SIZE;
336 len >= ((struct hci_command_hdr *) data)->plen;
339 static int usb_bt_hci_acl_complete(const uint8_t *data, int len)
341 len -= HCI_ACL_HDR_SIZE;
343 len >= le16_to_cpu(((struct hci_acl_hdr *) data)->dlen);
346 static int usb_bt_hci_sco_complete(const uint8_t *data, int len)
348 len -= HCI_SCO_HDR_SIZE;
350 len >= ((struct hci_sco_hdr *) data)->dlen;
353 static void usb_bt_handle_reset(USBDevice *dev)
355 struct USBBtState *s = (struct USBBtState *) dev->opaque;
357 usb_bt_fifo_reset(&s->evt);
358 usb_bt_fifo_reset(&s->acl);
359 usb_bt_fifo_reset(&s->sco);
365 static void usb_bt_handle_control(USBDevice *dev, USBPacket *p,
366 int request, int value, int index, int length, uint8_t *data)
368 struct USBBtState *s = (struct USBBtState *) dev->opaque;
371 ret = usb_desc_handle_control(dev, p, request, value, index, length, data);
374 case DeviceRequest | USB_REQ_GET_CONFIGURATION:
377 case DeviceOutRequest | USB_REQ_SET_CONFIGURATION:
379 usb_bt_fifo_reset(&s->evt);
380 usb_bt_fifo_reset(&s->acl);
381 usb_bt_fifo_reset(&s->sco);
388 case InterfaceRequest | USB_REQ_GET_STATUS:
389 case EndpointRequest | USB_REQ_GET_STATUS:
392 p->actual_length = 2;
394 case InterfaceOutRequest | USB_REQ_CLEAR_FEATURE:
395 case EndpointOutRequest | USB_REQ_CLEAR_FEATURE:
397 case InterfaceOutRequest | USB_REQ_SET_FEATURE:
398 case EndpointOutRequest | USB_REQ_SET_FEATURE:
401 case ((USB_DIR_OUT | USB_TYPE_CLASS | USB_RECIP_DEVICE) << 8):
403 usb_bt_fifo_out_enqueue(s, &s->outcmd, s->hci->cmd_send,
404 usb_bt_hci_cmd_complete, p);
408 p->status = USB_RET_STALL;
413 static void usb_bt_handle_data(USBDevice *dev, USBPacket *p)
415 struct USBBtState *s = (struct USBBtState *) dev->opaque;
424 if (s->evt.len == 0) {
425 p->status = USB_RET_NAK;
428 usb_bt_fifo_dequeue(&s->evt, p);
432 if (s->evt.len == 0) {
433 p->status = USB_RET_STALL;
436 usb_bt_fifo_dequeue(&s->acl, p);
440 if (s->evt.len == 0) {
441 p->status = USB_RET_STALL;
444 usb_bt_fifo_dequeue(&s->sco, p);
455 usb_bt_fifo_out_enqueue(s, &s->outacl, s->hci->acl_send,
456 usb_bt_hci_acl_complete, p);
460 usb_bt_fifo_out_enqueue(s, &s->outsco, s->hci->sco_send,
461 usb_bt_hci_sco_complete, p);
471 p->status = USB_RET_STALL;
476 static void usb_bt_out_hci_packet_event(void *opaque,
477 const uint8_t *data, int len)
479 struct USBBtState *s = (struct USBBtState *) opaque;
481 if (s->evt.len == 0) {
482 usb_wakeup(s->intr, 0);
484 usb_bt_fifo_enqueue(&s->evt, data, len);
487 static void usb_bt_out_hci_packet_acl(void *opaque,
488 const uint8_t *data, int len)
490 struct USBBtState *s = (struct USBBtState *) opaque;
492 usb_bt_fifo_enqueue(&s->acl, data, len);
495 static void usb_bt_handle_destroy(USBDevice *dev)
497 struct USBBtState *s = (struct USBBtState *) dev->opaque;
499 s->hci->opaque = NULL;
500 s->hci->evt_recv = NULL;
501 s->hci->acl_recv = NULL;
504 static int usb_bt_initfn(USBDevice *dev)
506 struct USBBtState *s = DO_UPCAST(struct USBBtState, dev, dev);
508 usb_desc_create_serial(dev);
512 s->hci = bt_new_hci(qemu_find_bt_vlan(0));
515 s->hci->evt_recv = usb_bt_out_hci_packet_event;
516 s->hci->acl_recv = usb_bt_out_hci_packet_acl;
517 usb_bt_handle_reset(&s->dev);
518 s->intr = usb_ep_get(dev, USB_TOKEN_IN, USB_EVT_EP);
523 static USBDevice *usb_bt_init(USBBus *bus, const char *cmdline)
526 struct USBBtState *s;
528 const char *name = "usb-bt-dongle";
531 hci = hci_init(cmdline);
533 hci = bt_new_hci(qemu_find_bt_vlan(0));
538 dev = usb_create(bus, name);
540 error_report("Failed to create USB device '%s'", name);
543 s = DO_UPCAST(struct USBBtState, dev, dev);
545 if (qdev_init(&dev->qdev) < 0) {
546 error_report("Failed to initialize USB device '%s'", name);
553 static const VMStateDescription vmstate_usb_bt = {
558 static void usb_bt_class_initfn(ObjectClass *klass, void *data)
560 DeviceClass *dc = DEVICE_CLASS(klass);
561 USBDeviceClass *uc = USB_DEVICE_CLASS(klass);
563 uc->init = usb_bt_initfn;
564 uc->product_desc = "QEMU BT dongle";
565 uc->usb_desc = &desc_bluetooth;
566 uc->handle_reset = usb_bt_handle_reset;
567 uc->handle_control = usb_bt_handle_control;
568 uc->handle_data = usb_bt_handle_data;
569 uc->handle_destroy = usb_bt_handle_destroy;
570 dc->vmsd = &vmstate_usb_bt;
571 set_bit(DEVICE_CATEGORY_NETWORK, dc->categories);
574 static const TypeInfo bt_info = {
575 .name = "usb-bt-dongle",
576 .parent = TYPE_USB_DEVICE,
577 .instance_size = sizeof(struct USBBtState),
578 .class_init = usb_bt_class_initfn,
581 static void usb_bt_register_types(void)
583 type_register_static(&bt_info);
584 usb_legacy_register("usb-bt-dongle", "bt", usb_bt_init);
587 type_init(usb_bt_register_types)