1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0+
2*4882a593Smuzhiyun /*
3*4882a593Smuzhiyun * Copyright (C) 2015 Karol Kosik <karo9@interia.eu>
4*4882a593Smuzhiyun * Copyright (C) 2015-2016 Samsung Electronics
5*4882a593Smuzhiyun * Igor Kotrasinski <i.kotrasinsk@samsung.com>
6*4882a593Smuzhiyun * Krzysztof Opasiak <k.opasiak@samsung.com>
7*4882a593Smuzhiyun */
8*4882a593Smuzhiyun
9*4882a593Smuzhiyun #include <linux/device.h>
10*4882a593Smuzhiyun #include <linux/list.h>
11*4882a593Smuzhiyun #include <linux/usb/gadget.h>
12*4882a593Smuzhiyun #include <linux/usb/ch9.h>
13*4882a593Smuzhiyun #include <linux/sysfs.h>
14*4882a593Smuzhiyun #include <linux/kthread.h>
15*4882a593Smuzhiyun #include <linux/byteorder/generic.h>
16*4882a593Smuzhiyun
17*4882a593Smuzhiyun #include "usbip_common.h"
18*4882a593Smuzhiyun #include "vudc.h"
19*4882a593Smuzhiyun
20*4882a593Smuzhiyun #include <net/sock.h>
21*4882a593Smuzhiyun
22*4882a593Smuzhiyun /* called with udc->lock held */
get_gadget_descs(struct vudc * udc)23*4882a593Smuzhiyun int get_gadget_descs(struct vudc *udc)
24*4882a593Smuzhiyun {
25*4882a593Smuzhiyun struct vrequest *usb_req;
26*4882a593Smuzhiyun struct vep *ep0 = to_vep(udc->gadget.ep0);
27*4882a593Smuzhiyun struct usb_device_descriptor *ddesc = &udc->dev_desc;
28*4882a593Smuzhiyun struct usb_ctrlrequest req;
29*4882a593Smuzhiyun int ret;
30*4882a593Smuzhiyun
31*4882a593Smuzhiyun if (!udc->driver || !udc->pullup)
32*4882a593Smuzhiyun return -EINVAL;
33*4882a593Smuzhiyun
34*4882a593Smuzhiyun req.bRequestType = USB_DIR_IN | USB_TYPE_STANDARD | USB_RECIP_DEVICE;
35*4882a593Smuzhiyun req.bRequest = USB_REQ_GET_DESCRIPTOR;
36*4882a593Smuzhiyun req.wValue = cpu_to_le16(USB_DT_DEVICE << 8);
37*4882a593Smuzhiyun req.wIndex = cpu_to_le16(0);
38*4882a593Smuzhiyun req.wLength = cpu_to_le16(sizeof(*ddesc));
39*4882a593Smuzhiyun
40*4882a593Smuzhiyun spin_unlock(&udc->lock);
41*4882a593Smuzhiyun ret = udc->driver->setup(&(udc->gadget), &req);
42*4882a593Smuzhiyun spin_lock(&udc->lock);
43*4882a593Smuzhiyun if (ret < 0)
44*4882a593Smuzhiyun goto out;
45*4882a593Smuzhiyun
46*4882a593Smuzhiyun /* assuming request queue is empty; request is now on top */
47*4882a593Smuzhiyun usb_req = list_last_entry(&ep0->req_queue, struct vrequest, req_entry);
48*4882a593Smuzhiyun list_del(&usb_req->req_entry);
49*4882a593Smuzhiyun
50*4882a593Smuzhiyun if (usb_req->req.length > sizeof(*ddesc)) {
51*4882a593Smuzhiyun ret = -EOVERFLOW;
52*4882a593Smuzhiyun goto giveback_req;
53*4882a593Smuzhiyun }
54*4882a593Smuzhiyun
55*4882a593Smuzhiyun memcpy(ddesc, usb_req->req.buf, sizeof(*ddesc));
56*4882a593Smuzhiyun udc->desc_cached = 1;
57*4882a593Smuzhiyun ret = 0;
58*4882a593Smuzhiyun giveback_req:
59*4882a593Smuzhiyun usb_req->req.status = 0;
60*4882a593Smuzhiyun usb_req->req.actual = usb_req->req.length;
61*4882a593Smuzhiyun usb_gadget_giveback_request(&(ep0->ep), &(usb_req->req));
62*4882a593Smuzhiyun out:
63*4882a593Smuzhiyun return ret;
64*4882a593Smuzhiyun }
65*4882a593Smuzhiyun
66*4882a593Smuzhiyun /*
67*4882a593Smuzhiyun * Exposes device descriptor from the gadget driver.
68*4882a593Smuzhiyun */
dev_desc_read(struct file * file,struct kobject * kobj,struct bin_attribute * attr,char * out,loff_t off,size_t count)69*4882a593Smuzhiyun static ssize_t dev_desc_read(struct file *file, struct kobject *kobj,
70*4882a593Smuzhiyun struct bin_attribute *attr, char *out,
71*4882a593Smuzhiyun loff_t off, size_t count)
72*4882a593Smuzhiyun {
73*4882a593Smuzhiyun struct device *dev = kobj_to_dev(kobj);
74*4882a593Smuzhiyun struct vudc *udc = (struct vudc *)dev_get_drvdata(dev);
75*4882a593Smuzhiyun char *desc_ptr = (char *) &udc->dev_desc;
76*4882a593Smuzhiyun unsigned long flags;
77*4882a593Smuzhiyun int ret;
78*4882a593Smuzhiyun
79*4882a593Smuzhiyun spin_lock_irqsave(&udc->lock, flags);
80*4882a593Smuzhiyun if (!udc->desc_cached) {
81*4882a593Smuzhiyun ret = -ENODEV;
82*4882a593Smuzhiyun goto unlock;
83*4882a593Smuzhiyun }
84*4882a593Smuzhiyun
85*4882a593Smuzhiyun memcpy(out, desc_ptr + off, count);
86*4882a593Smuzhiyun ret = count;
87*4882a593Smuzhiyun unlock:
88*4882a593Smuzhiyun spin_unlock_irqrestore(&udc->lock, flags);
89*4882a593Smuzhiyun return ret;
90*4882a593Smuzhiyun }
91*4882a593Smuzhiyun static BIN_ATTR_RO(dev_desc, sizeof(struct usb_device_descriptor));
92*4882a593Smuzhiyun
usbip_sockfd_store(struct device * dev,struct device_attribute * attr,const char * in,size_t count)93*4882a593Smuzhiyun static ssize_t usbip_sockfd_store(struct device *dev,
94*4882a593Smuzhiyun struct device_attribute *attr,
95*4882a593Smuzhiyun const char *in, size_t count)
96*4882a593Smuzhiyun {
97*4882a593Smuzhiyun struct vudc *udc = (struct vudc *) dev_get_drvdata(dev);
98*4882a593Smuzhiyun int rv;
99*4882a593Smuzhiyun int sockfd = 0;
100*4882a593Smuzhiyun int err;
101*4882a593Smuzhiyun struct socket *socket;
102*4882a593Smuzhiyun unsigned long flags;
103*4882a593Smuzhiyun int ret;
104*4882a593Smuzhiyun struct task_struct *tcp_rx = NULL;
105*4882a593Smuzhiyun struct task_struct *tcp_tx = NULL;
106*4882a593Smuzhiyun
107*4882a593Smuzhiyun rv = kstrtoint(in, 0, &sockfd);
108*4882a593Smuzhiyun if (rv != 0)
109*4882a593Smuzhiyun return -EINVAL;
110*4882a593Smuzhiyun
111*4882a593Smuzhiyun if (!udc) {
112*4882a593Smuzhiyun dev_err(dev, "no device");
113*4882a593Smuzhiyun return -ENODEV;
114*4882a593Smuzhiyun }
115*4882a593Smuzhiyun mutex_lock(&udc->ud.sysfs_lock);
116*4882a593Smuzhiyun spin_lock_irqsave(&udc->lock, flags);
117*4882a593Smuzhiyun /* Don't export what we don't have */
118*4882a593Smuzhiyun if (!udc->driver || !udc->pullup) {
119*4882a593Smuzhiyun dev_err(dev, "gadget not bound");
120*4882a593Smuzhiyun ret = -ENODEV;
121*4882a593Smuzhiyun goto unlock;
122*4882a593Smuzhiyun }
123*4882a593Smuzhiyun
124*4882a593Smuzhiyun if (sockfd != -1) {
125*4882a593Smuzhiyun if (udc->connected) {
126*4882a593Smuzhiyun dev_err(dev, "Device already connected");
127*4882a593Smuzhiyun ret = -EBUSY;
128*4882a593Smuzhiyun goto unlock;
129*4882a593Smuzhiyun }
130*4882a593Smuzhiyun
131*4882a593Smuzhiyun spin_lock_irq(&udc->ud.lock);
132*4882a593Smuzhiyun
133*4882a593Smuzhiyun if (udc->ud.status != SDEV_ST_AVAILABLE) {
134*4882a593Smuzhiyun ret = -EINVAL;
135*4882a593Smuzhiyun goto unlock_ud;
136*4882a593Smuzhiyun }
137*4882a593Smuzhiyun
138*4882a593Smuzhiyun socket = sockfd_lookup(sockfd, &err);
139*4882a593Smuzhiyun if (!socket) {
140*4882a593Smuzhiyun dev_err(dev, "failed to lookup sock");
141*4882a593Smuzhiyun ret = -EINVAL;
142*4882a593Smuzhiyun goto unlock_ud;
143*4882a593Smuzhiyun }
144*4882a593Smuzhiyun
145*4882a593Smuzhiyun if (socket->type != SOCK_STREAM) {
146*4882a593Smuzhiyun dev_err(dev, "Expecting SOCK_STREAM - found %d",
147*4882a593Smuzhiyun socket->type);
148*4882a593Smuzhiyun ret = -EINVAL;
149*4882a593Smuzhiyun goto sock_err;
150*4882a593Smuzhiyun }
151*4882a593Smuzhiyun
152*4882a593Smuzhiyun /* unlock and create threads and get tasks */
153*4882a593Smuzhiyun spin_unlock_irq(&udc->ud.lock);
154*4882a593Smuzhiyun spin_unlock_irqrestore(&udc->lock, flags);
155*4882a593Smuzhiyun
156*4882a593Smuzhiyun tcp_rx = kthread_create(&v_rx_loop, &udc->ud, "vudc_rx");
157*4882a593Smuzhiyun if (IS_ERR(tcp_rx)) {
158*4882a593Smuzhiyun sockfd_put(socket);
159*4882a593Smuzhiyun mutex_unlock(&udc->ud.sysfs_lock);
160*4882a593Smuzhiyun return -EINVAL;
161*4882a593Smuzhiyun }
162*4882a593Smuzhiyun tcp_tx = kthread_create(&v_tx_loop, &udc->ud, "vudc_tx");
163*4882a593Smuzhiyun if (IS_ERR(tcp_tx)) {
164*4882a593Smuzhiyun kthread_stop(tcp_rx);
165*4882a593Smuzhiyun sockfd_put(socket);
166*4882a593Smuzhiyun mutex_unlock(&udc->ud.sysfs_lock);
167*4882a593Smuzhiyun return -EINVAL;
168*4882a593Smuzhiyun }
169*4882a593Smuzhiyun
170*4882a593Smuzhiyun /* get task structs now */
171*4882a593Smuzhiyun get_task_struct(tcp_rx);
172*4882a593Smuzhiyun get_task_struct(tcp_tx);
173*4882a593Smuzhiyun
174*4882a593Smuzhiyun /* lock and update udc->ud state */
175*4882a593Smuzhiyun spin_lock_irqsave(&udc->lock, flags);
176*4882a593Smuzhiyun spin_lock_irq(&udc->ud.lock);
177*4882a593Smuzhiyun
178*4882a593Smuzhiyun udc->ud.tcp_socket = socket;
179*4882a593Smuzhiyun udc->ud.tcp_rx = tcp_rx;
180*4882a593Smuzhiyun udc->ud.tcp_tx = tcp_tx;
181*4882a593Smuzhiyun udc->ud.status = SDEV_ST_USED;
182*4882a593Smuzhiyun
183*4882a593Smuzhiyun spin_unlock_irq(&udc->ud.lock);
184*4882a593Smuzhiyun
185*4882a593Smuzhiyun ktime_get_ts64(&udc->start_time);
186*4882a593Smuzhiyun v_start_timer(udc);
187*4882a593Smuzhiyun udc->connected = 1;
188*4882a593Smuzhiyun
189*4882a593Smuzhiyun spin_unlock_irqrestore(&udc->lock, flags);
190*4882a593Smuzhiyun
191*4882a593Smuzhiyun wake_up_process(udc->ud.tcp_rx);
192*4882a593Smuzhiyun wake_up_process(udc->ud.tcp_tx);
193*4882a593Smuzhiyun
194*4882a593Smuzhiyun mutex_unlock(&udc->ud.sysfs_lock);
195*4882a593Smuzhiyun return count;
196*4882a593Smuzhiyun
197*4882a593Smuzhiyun } else {
198*4882a593Smuzhiyun if (!udc->connected) {
199*4882a593Smuzhiyun dev_err(dev, "Device not connected");
200*4882a593Smuzhiyun ret = -EINVAL;
201*4882a593Smuzhiyun goto unlock;
202*4882a593Smuzhiyun }
203*4882a593Smuzhiyun
204*4882a593Smuzhiyun spin_lock_irq(&udc->ud.lock);
205*4882a593Smuzhiyun if (udc->ud.status != SDEV_ST_USED) {
206*4882a593Smuzhiyun ret = -EINVAL;
207*4882a593Smuzhiyun goto unlock_ud;
208*4882a593Smuzhiyun }
209*4882a593Smuzhiyun spin_unlock_irq(&udc->ud.lock);
210*4882a593Smuzhiyun
211*4882a593Smuzhiyun usbip_event_add(&udc->ud, VUDC_EVENT_DOWN);
212*4882a593Smuzhiyun }
213*4882a593Smuzhiyun
214*4882a593Smuzhiyun spin_unlock_irqrestore(&udc->lock, flags);
215*4882a593Smuzhiyun mutex_unlock(&udc->ud.sysfs_lock);
216*4882a593Smuzhiyun
217*4882a593Smuzhiyun return count;
218*4882a593Smuzhiyun
219*4882a593Smuzhiyun sock_err:
220*4882a593Smuzhiyun sockfd_put(socket);
221*4882a593Smuzhiyun unlock_ud:
222*4882a593Smuzhiyun spin_unlock_irq(&udc->ud.lock);
223*4882a593Smuzhiyun unlock:
224*4882a593Smuzhiyun spin_unlock_irqrestore(&udc->lock, flags);
225*4882a593Smuzhiyun mutex_unlock(&udc->ud.sysfs_lock);
226*4882a593Smuzhiyun
227*4882a593Smuzhiyun return ret;
228*4882a593Smuzhiyun }
229*4882a593Smuzhiyun static DEVICE_ATTR_WO(usbip_sockfd);
230*4882a593Smuzhiyun
usbip_status_show(struct device * dev,struct device_attribute * attr,char * out)231*4882a593Smuzhiyun static ssize_t usbip_status_show(struct device *dev,
232*4882a593Smuzhiyun struct device_attribute *attr, char *out)
233*4882a593Smuzhiyun {
234*4882a593Smuzhiyun struct vudc *udc = (struct vudc *) dev_get_drvdata(dev);
235*4882a593Smuzhiyun int status;
236*4882a593Smuzhiyun
237*4882a593Smuzhiyun if (!udc) {
238*4882a593Smuzhiyun dev_err(dev, "no device");
239*4882a593Smuzhiyun return -ENODEV;
240*4882a593Smuzhiyun }
241*4882a593Smuzhiyun spin_lock_irq(&udc->ud.lock);
242*4882a593Smuzhiyun status = udc->ud.status;
243*4882a593Smuzhiyun spin_unlock_irq(&udc->ud.lock);
244*4882a593Smuzhiyun
245*4882a593Smuzhiyun return snprintf(out, PAGE_SIZE, "%d\n", status);
246*4882a593Smuzhiyun }
247*4882a593Smuzhiyun static DEVICE_ATTR_RO(usbip_status);
248*4882a593Smuzhiyun
249*4882a593Smuzhiyun static struct attribute *dev_attrs[] = {
250*4882a593Smuzhiyun &dev_attr_usbip_sockfd.attr,
251*4882a593Smuzhiyun &dev_attr_usbip_status.attr,
252*4882a593Smuzhiyun NULL,
253*4882a593Smuzhiyun };
254*4882a593Smuzhiyun
255*4882a593Smuzhiyun static struct bin_attribute *dev_bin_attrs[] = {
256*4882a593Smuzhiyun &bin_attr_dev_desc,
257*4882a593Smuzhiyun NULL,
258*4882a593Smuzhiyun };
259*4882a593Smuzhiyun
260*4882a593Smuzhiyun static const struct attribute_group vudc_attr_group = {
261*4882a593Smuzhiyun .attrs = dev_attrs,
262*4882a593Smuzhiyun .bin_attrs = dev_bin_attrs,
263*4882a593Smuzhiyun };
264*4882a593Smuzhiyun
265*4882a593Smuzhiyun const struct attribute_group *vudc_groups[] = {
266*4882a593Smuzhiyun &vudc_attr_group,
267*4882a593Smuzhiyun NULL,
268*4882a593Smuzhiyun };
269