1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0
2*4882a593Smuzhiyun /*
3*4882a593Smuzhiyun * Driver for loading USB isight firmware
4*4882a593Smuzhiyun *
5*4882a593Smuzhiyun * Copyright (C) 2008 Matthew Garrett <mjg@redhat.com>
6*4882a593Smuzhiyun *
7*4882a593Smuzhiyun * The USB isight cameras in recent Apples are roughly compatible with the USB
8*4882a593Smuzhiyun * video class specification, and can be driven by uvcvideo. However, they
9*4882a593Smuzhiyun * need firmware to be loaded beforehand. After firmware loading, the device
10*4882a593Smuzhiyun * detaches from the USB bus and reattaches with a new device ID. It can then
11*4882a593Smuzhiyun * be claimed by the uvc driver.
12*4882a593Smuzhiyun *
13*4882a593Smuzhiyun * The firmware is non-free and must be extracted by the user. Tools to do this
14*4882a593Smuzhiyun * are available at http://bersace03.free.fr/ift/
15*4882a593Smuzhiyun *
16*4882a593Smuzhiyun * The isight firmware loading was reverse engineered by Johannes Berg
17*4882a593Smuzhiyun * <johannes@sipsolutions.de>, and this driver is based on code by Ronald
18*4882a593Smuzhiyun * Bultje <rbultje@ronald.bitfreak.net>
19*4882a593Smuzhiyun */
20*4882a593Smuzhiyun
21*4882a593Smuzhiyun #include <linux/usb.h>
22*4882a593Smuzhiyun #include <linux/firmware.h>
23*4882a593Smuzhiyun #include <linux/errno.h>
24*4882a593Smuzhiyun #include <linux/module.h>
25*4882a593Smuzhiyun #include <linux/slab.h>
26*4882a593Smuzhiyun
27*4882a593Smuzhiyun static const struct usb_device_id id_table[] = {
28*4882a593Smuzhiyun {USB_DEVICE(0x05ac, 0x8300)},
29*4882a593Smuzhiyun {},
30*4882a593Smuzhiyun };
31*4882a593Smuzhiyun
32*4882a593Smuzhiyun MODULE_DEVICE_TABLE(usb, id_table);
33*4882a593Smuzhiyun
isight_firmware_load(struct usb_interface * intf,const struct usb_device_id * id)34*4882a593Smuzhiyun static int isight_firmware_load(struct usb_interface *intf,
35*4882a593Smuzhiyun const struct usb_device_id *id)
36*4882a593Smuzhiyun {
37*4882a593Smuzhiyun struct usb_device *dev = interface_to_usbdev(intf);
38*4882a593Smuzhiyun int llen, len, req, ret = 0;
39*4882a593Smuzhiyun const struct firmware *firmware;
40*4882a593Smuzhiyun unsigned char *buf = kmalloc(50, GFP_KERNEL);
41*4882a593Smuzhiyun unsigned char data[4];
42*4882a593Smuzhiyun const u8 *ptr;
43*4882a593Smuzhiyun
44*4882a593Smuzhiyun if (!buf)
45*4882a593Smuzhiyun return -ENOMEM;
46*4882a593Smuzhiyun
47*4882a593Smuzhiyun if (request_firmware(&firmware, "isight.fw", &dev->dev) != 0) {
48*4882a593Smuzhiyun printk(KERN_ERR "Unable to load isight firmware\n");
49*4882a593Smuzhiyun ret = -ENODEV;
50*4882a593Smuzhiyun goto out;
51*4882a593Smuzhiyun }
52*4882a593Smuzhiyun
53*4882a593Smuzhiyun ptr = firmware->data;
54*4882a593Smuzhiyun
55*4882a593Smuzhiyun buf[0] = 0x01;
56*4882a593Smuzhiyun if (usb_control_msg
57*4882a593Smuzhiyun (dev, usb_sndctrlpipe(dev, 0), 0xa0, 0x40, 0xe600, 0, buf, 1,
58*4882a593Smuzhiyun 300) != 1) {
59*4882a593Smuzhiyun printk(KERN_ERR
60*4882a593Smuzhiyun "Failed to initialise isight firmware loader\n");
61*4882a593Smuzhiyun ret = -ENODEV;
62*4882a593Smuzhiyun goto out;
63*4882a593Smuzhiyun }
64*4882a593Smuzhiyun
65*4882a593Smuzhiyun while (ptr+4 <= firmware->data+firmware->size) {
66*4882a593Smuzhiyun memcpy(data, ptr, 4);
67*4882a593Smuzhiyun len = (data[0] << 8 | data[1]);
68*4882a593Smuzhiyun req = (data[2] << 8 | data[3]);
69*4882a593Smuzhiyun ptr += 4;
70*4882a593Smuzhiyun
71*4882a593Smuzhiyun if (len == 0x8001)
72*4882a593Smuzhiyun break; /* success */
73*4882a593Smuzhiyun else if (len == 0)
74*4882a593Smuzhiyun continue;
75*4882a593Smuzhiyun
76*4882a593Smuzhiyun for (; len > 0; req += 50) {
77*4882a593Smuzhiyun llen = min(len, 50);
78*4882a593Smuzhiyun len -= llen;
79*4882a593Smuzhiyun if (ptr+llen > firmware->data+firmware->size) {
80*4882a593Smuzhiyun printk(KERN_ERR
81*4882a593Smuzhiyun "Malformed isight firmware");
82*4882a593Smuzhiyun ret = -ENODEV;
83*4882a593Smuzhiyun goto out;
84*4882a593Smuzhiyun }
85*4882a593Smuzhiyun memcpy(buf, ptr, llen);
86*4882a593Smuzhiyun
87*4882a593Smuzhiyun ptr += llen;
88*4882a593Smuzhiyun
89*4882a593Smuzhiyun if (usb_control_msg
90*4882a593Smuzhiyun (dev, usb_sndctrlpipe(dev, 0), 0xa0, 0x40, req, 0,
91*4882a593Smuzhiyun buf, llen, 300) != llen) {
92*4882a593Smuzhiyun printk(KERN_ERR
93*4882a593Smuzhiyun "Failed to load isight firmware\n");
94*4882a593Smuzhiyun ret = -ENODEV;
95*4882a593Smuzhiyun goto out;
96*4882a593Smuzhiyun }
97*4882a593Smuzhiyun
98*4882a593Smuzhiyun }
99*4882a593Smuzhiyun }
100*4882a593Smuzhiyun
101*4882a593Smuzhiyun buf[0] = 0x00;
102*4882a593Smuzhiyun if (usb_control_msg
103*4882a593Smuzhiyun (dev, usb_sndctrlpipe(dev, 0), 0xa0, 0x40, 0xe600, 0, buf, 1,
104*4882a593Smuzhiyun 300) != 1) {
105*4882a593Smuzhiyun printk(KERN_ERR "isight firmware loading completion failed\n");
106*4882a593Smuzhiyun ret = -ENODEV;
107*4882a593Smuzhiyun }
108*4882a593Smuzhiyun
109*4882a593Smuzhiyun out:
110*4882a593Smuzhiyun kfree(buf);
111*4882a593Smuzhiyun release_firmware(firmware);
112*4882a593Smuzhiyun return ret;
113*4882a593Smuzhiyun }
114*4882a593Smuzhiyun
115*4882a593Smuzhiyun MODULE_FIRMWARE("isight.fw");
116*4882a593Smuzhiyun
isight_firmware_disconnect(struct usb_interface * intf)117*4882a593Smuzhiyun static void isight_firmware_disconnect(struct usb_interface *intf)
118*4882a593Smuzhiyun {
119*4882a593Smuzhiyun }
120*4882a593Smuzhiyun
121*4882a593Smuzhiyun static struct usb_driver isight_firmware_driver = {
122*4882a593Smuzhiyun .name = "isight_firmware",
123*4882a593Smuzhiyun .probe = isight_firmware_load,
124*4882a593Smuzhiyun .disconnect = isight_firmware_disconnect,
125*4882a593Smuzhiyun .id_table = id_table,
126*4882a593Smuzhiyun };
127*4882a593Smuzhiyun
128*4882a593Smuzhiyun module_usb_driver(isight_firmware_driver);
129*4882a593Smuzhiyun
130*4882a593Smuzhiyun MODULE_LICENSE("GPL");
131*4882a593Smuzhiyun MODULE_AUTHOR("Matthew Garrett <mjg@redhat.com>");
132