• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 // SPDX-License-Identifier: GPL-2.0+
2 /*
3  * cdc-acm.c
4  *
5  * Copyright (c) 1999 Armin Fuerst	<fuerst@in.tum.de>
6  * Copyright (c) 1999 Pavel Machek	<pavel@ucw.cz>
7  * Copyright (c) 1999 Johannes Erdfelt	<johannes@erdfelt.com>
8  * Copyright (c) 2000 Vojtech Pavlik	<vojtech@suse.cz>
9  * Copyright (c) 2004 Oliver Neukum	<oliver@neukum.name>
10  * Copyright (c) 2005 David Kubicek	<dave@awk.cz>
11  * Copyright (c) 2011 Johan Hovold	<jhovold@gmail.com>
12  *
13  * USB Abstract Control Model driver for USB modems and ISDN adapters
14  *
15  * Sponsored by SuSE
16  */
17 
18 #undef DEBUG
19 #undef VERBOSE_DEBUG
20 
21 #include <linux/kernel.h>
22 #include <linux/sched/signal.h>
23 #include <linux/errno.h>
24 #include <linux/init.h>
25 #include <linux/slab.h>
26 #include <linux/log2.h>
27 #include <linux/tty.h>
28 #include <linux/serial.h>
29 #include <linux/tty_driver.h>
30 #include <linux/tty_flip.h>
31 #include <linux/module.h>
32 #include <linux/mutex.h>
33 #include <linux/uaccess.h>
34 #include <linux/usb.h>
35 #include <linux/usb/cdc.h>
36 #include <asm/byteorder.h>
37 #include <asm/unaligned.h>
38 #include <linux/idr.h>
39 #include <linux/list.h>
40 
41 #include "cdc-acm.h"
42 
43 
44 #define DRIVER_AUTHOR "Armin Fuerst, Pavel Machek, Johannes Erdfelt, Vojtech Pavlik, David Kubicek, Johan Hovold"
45 #define DRIVER_DESC "USB Abstract Control Model driver for USB modems and ISDN adapters"
46 
47 static struct usb_driver acm_driver;
48 static struct tty_driver *acm_tty_driver;
49 
50 static DEFINE_IDR(acm_minors);
51 static DEFINE_MUTEX(acm_minors_lock);
52 
53 static void acm_tty_set_termios(struct tty_struct *tty,
54 				struct ktermios *termios_old);
55 
56 /*
57  * acm_minors accessors
58  */
59 
60 /*
61  * Look up an ACM structure by minor. If found and not disconnected, increment
62  * its refcount and return it with its mutex held.
63  */
acm_get_by_minor(unsigned int minor)64 static struct acm *acm_get_by_minor(unsigned int minor)
65 {
66 	struct acm *acm;
67 
68 	mutex_lock(&acm_minors_lock);
69 	acm = idr_find(&acm_minors, minor);
70 	if (acm) {
71 		mutex_lock(&acm->mutex);
72 		if (acm->disconnected) {
73 			mutex_unlock(&acm->mutex);
74 			acm = NULL;
75 		} else {
76 			tty_port_get(&acm->port);
77 			mutex_unlock(&acm->mutex);
78 		}
79 	}
80 	mutex_unlock(&acm_minors_lock);
81 	return acm;
82 }
83 
84 /*
85  * Try to find an available minor number and if found, associate it with 'acm'.
86  */
acm_alloc_minor(struct acm * acm)87 static int acm_alloc_minor(struct acm *acm)
88 {
89 	int minor;
90 
91 	mutex_lock(&acm_minors_lock);
92 	minor = idr_alloc(&acm_minors, acm, 0, ACM_TTY_MINORS, GFP_KERNEL);
93 	mutex_unlock(&acm_minors_lock);
94 
95 	return minor;
96 }
97 
98 /* Release the minor number associated with 'acm'.  */
acm_release_minor(struct acm * acm)99 static void acm_release_minor(struct acm *acm)
100 {
101 	mutex_lock(&acm_minors_lock);
102 	idr_remove(&acm_minors, acm->minor);
103 	mutex_unlock(&acm_minors_lock);
104 }
105 
106 /*
107  * Functions for ACM control messages.
108  */
109 
acm_ctrl_msg(struct acm * acm,int request,int value,void * buf,int len)110 static int acm_ctrl_msg(struct acm *acm, int request, int value,
111 							void *buf, int len)
112 {
113 	int retval;
114 
115 	retval = usb_autopm_get_interface(acm->control);
116 	if (retval)
117 		return retval;
118 
119 	retval = usb_control_msg(acm->dev, usb_sndctrlpipe(acm->dev, 0),
120 		request, USB_RT_ACM, value,
121 		acm->control->altsetting[0].desc.bInterfaceNumber,
122 		buf, len, 5000);
123 
124 	dev_dbg(&acm->control->dev,
125 		"%s - rq 0x%02x, val %#x, len %#x, result %d\n",
126 		__func__, request, value, len, retval);
127 
128 	usb_autopm_put_interface(acm->control);
129 
130 	return retval < 0 ? retval : 0;
131 }
132 
133 /* devices aren't required to support these requests.
134  * the cdc acm descriptor tells whether they do...
135  */
acm_set_control(struct acm * acm,int control)136 static inline int acm_set_control(struct acm *acm, int control)
137 {
138 	if (acm->quirks & QUIRK_CONTROL_LINE_STATE)
139 		return -EOPNOTSUPP;
140 
141 	return acm_ctrl_msg(acm, USB_CDC_REQ_SET_CONTROL_LINE_STATE,
142 			control, NULL, 0);
143 }
144 
145 #define acm_set_line(acm, line) \
146 	acm_ctrl_msg(acm, USB_CDC_REQ_SET_LINE_CODING, 0, line, sizeof *(line))
147 #define acm_send_break(acm, ms) \
148 	acm_ctrl_msg(acm, USB_CDC_REQ_SEND_BREAK, ms, NULL, 0)
149 
acm_poison_urbs(struct acm * acm)150 static void acm_poison_urbs(struct acm *acm)
151 {
152 	int i;
153 
154 	usb_poison_urb(acm->ctrlurb);
155 	for (i = 0; i < ACM_NW; i++)
156 		usb_poison_urb(acm->wb[i].urb);
157 	for (i = 0; i < acm->rx_buflimit; i++)
158 		usb_poison_urb(acm->read_urbs[i]);
159 }
160 
acm_unpoison_urbs(struct acm * acm)161 static void acm_unpoison_urbs(struct acm *acm)
162 {
163 	int i;
164 
165 	for (i = 0; i < acm->rx_buflimit; i++)
166 		usb_unpoison_urb(acm->read_urbs[i]);
167 	for (i = 0; i < ACM_NW; i++)
168 		usb_unpoison_urb(acm->wb[i].urb);
169 	usb_unpoison_urb(acm->ctrlurb);
170 }
171 
172 
173 /*
174  * Write buffer management.
175  * All of these assume proper locks taken by the caller.
176  */
177 
acm_wb_alloc(struct acm * acm)178 static int acm_wb_alloc(struct acm *acm)
179 {
180 	int i, wbn;
181 	struct acm_wb *wb;
182 
183 	wbn = 0;
184 	i = 0;
185 	for (;;) {
186 		wb = &acm->wb[wbn];
187 		if (!wb->use) {
188 			wb->use = true;
189 			wb->len = 0;
190 			return wbn;
191 		}
192 		wbn = (wbn + 1) % ACM_NW;
193 		if (++i >= ACM_NW)
194 			return -1;
195 	}
196 }
197 
acm_wb_is_avail(struct acm * acm)198 static int acm_wb_is_avail(struct acm *acm)
199 {
200 	int i, n;
201 	unsigned long flags;
202 
203 	n = ACM_NW;
204 	spin_lock_irqsave(&acm->write_lock, flags);
205 	for (i = 0; i < ACM_NW; i++)
206 		if(acm->wb[i].use)
207 			n--;
208 	spin_unlock_irqrestore(&acm->write_lock, flags);
209 	return n;
210 }
211 
212 /*
213  * Finish write. Caller must hold acm->write_lock
214  */
acm_write_done(struct acm * acm,struct acm_wb * wb)215 static void acm_write_done(struct acm *acm, struct acm_wb *wb)
216 {
217 	wb->use = false;
218 	acm->transmitting--;
219 	usb_autopm_put_interface_async(acm->control);
220 }
221 
222 /*
223  * Poke write.
224  *
225  * the caller is responsible for locking
226  */
227 
acm_start_wb(struct acm * acm,struct acm_wb * wb)228 static int acm_start_wb(struct acm *acm, struct acm_wb *wb)
229 {
230 	int rc;
231 
232 	acm->transmitting++;
233 
234 	wb->urb->transfer_buffer = wb->buf;
235 	wb->urb->transfer_dma = wb->dmah;
236 	wb->urb->transfer_buffer_length = wb->len;
237 	wb->urb->dev = acm->dev;
238 
239 	rc = usb_submit_urb(wb->urb, GFP_ATOMIC);
240 	if (rc < 0) {
241 		if (rc != -EPERM)
242 			dev_err(&acm->data->dev,
243 				"%s - usb_submit_urb(write bulk) failed: %d\n",
244 				__func__, rc);
245 		acm_write_done(acm, wb);
246 	}
247 	return rc;
248 }
249 
250 /*
251  * attributes exported through sysfs
252  */
bmCapabilities_show(struct device * dev,struct device_attribute * attr,char * buf)253 static ssize_t bmCapabilities_show
254 (struct device *dev, struct device_attribute *attr, char *buf)
255 {
256 	struct usb_interface *intf = to_usb_interface(dev);
257 	struct acm *acm = usb_get_intfdata(intf);
258 
259 	return sprintf(buf, "%d", acm->ctrl_caps);
260 }
261 static DEVICE_ATTR_RO(bmCapabilities);
262 
wCountryCodes_show(struct device * dev,struct device_attribute * attr,char * buf)263 static ssize_t wCountryCodes_show
264 (struct device *dev, struct device_attribute *attr, char *buf)
265 {
266 	struct usb_interface *intf = to_usb_interface(dev);
267 	struct acm *acm = usb_get_intfdata(intf);
268 
269 	memcpy(buf, acm->country_codes, acm->country_code_size);
270 	return acm->country_code_size;
271 }
272 
273 static DEVICE_ATTR_RO(wCountryCodes);
274 
iCountryCodeRelDate_show(struct device * dev,struct device_attribute * attr,char * buf)275 static ssize_t iCountryCodeRelDate_show
276 (struct device *dev, struct device_attribute *attr, char *buf)
277 {
278 	struct usb_interface *intf = to_usb_interface(dev);
279 	struct acm *acm = usb_get_intfdata(intf);
280 
281 	return sprintf(buf, "%d", acm->country_rel_date);
282 }
283 
284 static DEVICE_ATTR_RO(iCountryCodeRelDate);
285 /*
286  * Interrupt handlers for various ACM device responses
287  */
288 
acm_process_notification(struct acm * acm,unsigned char * buf)289 static void acm_process_notification(struct acm *acm, unsigned char *buf)
290 {
291 	int newctrl;
292 	int difference;
293 	unsigned long flags;
294 	struct usb_cdc_notification *dr = (struct usb_cdc_notification *)buf;
295 	unsigned char *data = buf + sizeof(struct usb_cdc_notification);
296 
297 	switch (dr->bNotificationType) {
298 	case USB_CDC_NOTIFY_NETWORK_CONNECTION:
299 		dev_dbg(&acm->control->dev,
300 			"%s - network connection: %d\n", __func__, dr->wValue);
301 		break;
302 
303 	case USB_CDC_NOTIFY_SERIAL_STATE:
304 		if (le16_to_cpu(dr->wLength) != 2) {
305 			dev_dbg(&acm->control->dev,
306 				"%s - malformed serial state\n", __func__);
307 			break;
308 		}
309 
310 		newctrl = get_unaligned_le16(data);
311 		dev_dbg(&acm->control->dev,
312 			"%s - serial state: 0x%x\n", __func__, newctrl);
313 
314 		if (!acm->clocal && (acm->ctrlin & ~newctrl & ACM_CTRL_DCD)) {
315 			dev_dbg(&acm->control->dev,
316 				"%s - calling hangup\n", __func__);
317 			tty_port_tty_hangup(&acm->port, false);
318 		}
319 
320 		difference = acm->ctrlin ^ newctrl;
321 		spin_lock_irqsave(&acm->read_lock, flags);
322 		acm->ctrlin = newctrl;
323 		acm->oldcount = acm->iocount;
324 
325 		if (difference & ACM_CTRL_DSR)
326 			acm->iocount.dsr++;
327 		if (difference & ACM_CTRL_DCD)
328 			acm->iocount.dcd++;
329 		if (newctrl & ACM_CTRL_BRK) {
330 			acm->iocount.brk++;
331 			tty_insert_flip_char(&acm->port, 0, TTY_BREAK);
332 		}
333 		if (newctrl & ACM_CTRL_RI)
334 			acm->iocount.rng++;
335 		if (newctrl & ACM_CTRL_FRAMING)
336 			acm->iocount.frame++;
337 		if (newctrl & ACM_CTRL_PARITY)
338 			acm->iocount.parity++;
339 		if (newctrl & ACM_CTRL_OVERRUN)
340 			acm->iocount.overrun++;
341 		spin_unlock_irqrestore(&acm->read_lock, flags);
342 
343 		if (newctrl & ACM_CTRL_BRK)
344 			tty_flip_buffer_push(&acm->port);
345 
346 		if (difference)
347 			wake_up_all(&acm->wioctl);
348 
349 		break;
350 
351 	default:
352 		dev_dbg(&acm->control->dev,
353 			"%s - unknown notification %d received: index %d len %d\n",
354 			__func__,
355 			dr->bNotificationType, dr->wIndex, dr->wLength);
356 	}
357 }
358 
359 /* control interface reports status changes with "interrupt" transfers */
acm_ctrl_irq(struct urb * urb)360 static void acm_ctrl_irq(struct urb *urb)
361 {
362 	struct acm *acm = urb->context;
363 	struct usb_cdc_notification *dr = urb->transfer_buffer;
364 	unsigned int current_size = urb->actual_length;
365 	unsigned int expected_size, copy_size, alloc_size;
366 	int retval;
367 	int status = urb->status;
368 
369 	switch (status) {
370 	case 0:
371 		/* success */
372 		break;
373 	case -ECONNRESET:
374 	case -ENOENT:
375 	case -ESHUTDOWN:
376 		/* this urb is terminated, clean up */
377 		dev_dbg(&acm->control->dev,
378 			"%s - urb shutting down with status: %d\n",
379 			__func__, status);
380 		return;
381 	default:
382 		dev_dbg(&acm->control->dev,
383 			"%s - nonzero urb status received: %d\n",
384 			__func__, status);
385 		goto exit;
386 	}
387 
388 	usb_mark_last_busy(acm->dev);
389 
390 	if (acm->nb_index)
391 		dr = (struct usb_cdc_notification *)acm->notification_buffer;
392 
393 	/* size = notification-header + (optional) data */
394 	expected_size = sizeof(struct usb_cdc_notification) +
395 					le16_to_cpu(dr->wLength);
396 
397 	if (current_size < expected_size) {
398 		/* notification is transmitted fragmented, reassemble */
399 		if (acm->nb_size < expected_size) {
400 			u8 *new_buffer;
401 			alloc_size = roundup_pow_of_two(expected_size);
402 			/* Final freeing is done on disconnect. */
403 			new_buffer = krealloc(acm->notification_buffer,
404 					      alloc_size, GFP_ATOMIC);
405 			if (!new_buffer) {
406 				acm->nb_index = 0;
407 				goto exit;
408 			}
409 
410 			acm->notification_buffer = new_buffer;
411 			acm->nb_size = alloc_size;
412 			dr = (struct usb_cdc_notification *)acm->notification_buffer;
413 		}
414 
415 		copy_size = min(current_size,
416 				expected_size - acm->nb_index);
417 
418 		memcpy(&acm->notification_buffer[acm->nb_index],
419 		       urb->transfer_buffer, copy_size);
420 		acm->nb_index += copy_size;
421 		current_size = acm->nb_index;
422 	}
423 
424 	if (current_size >= expected_size) {
425 		/* notification complete */
426 		acm_process_notification(acm, (unsigned char *)dr);
427 		acm->nb_index = 0;
428 	}
429 
430 exit:
431 	retval = usb_submit_urb(urb, GFP_ATOMIC);
432 	if (retval && retval != -EPERM && retval != -ENODEV)
433 		dev_err(&acm->control->dev,
434 			"%s - usb_submit_urb failed: %d\n", __func__, retval);
435 	else
436 		dev_vdbg(&acm->control->dev,
437 			"control resubmission terminated %d\n", retval);
438 }
439 
acm_submit_read_urb(struct acm * acm,int index,gfp_t mem_flags)440 static int acm_submit_read_urb(struct acm *acm, int index, gfp_t mem_flags)
441 {
442 	int res;
443 
444 	if (!test_and_clear_bit(index, &acm->read_urbs_free))
445 		return 0;
446 
447 	res = usb_submit_urb(acm->read_urbs[index], mem_flags);
448 	if (res) {
449 		if (res != -EPERM && res != -ENODEV) {
450 			dev_err(&acm->data->dev,
451 				"urb %d failed submission with %d\n",
452 				index, res);
453 		} else {
454 			dev_vdbg(&acm->data->dev, "intended failure %d\n", res);
455 		}
456 		set_bit(index, &acm->read_urbs_free);
457 		return res;
458 	} else {
459 		dev_vdbg(&acm->data->dev, "submitted urb %d\n", index);
460 	}
461 
462 	return 0;
463 }
464 
acm_submit_read_urbs(struct acm * acm,gfp_t mem_flags)465 static int acm_submit_read_urbs(struct acm *acm, gfp_t mem_flags)
466 {
467 	int res;
468 	int i;
469 
470 	for (i = 0; i < acm->rx_buflimit; ++i) {
471 		res = acm_submit_read_urb(acm, i, mem_flags);
472 		if (res)
473 			return res;
474 	}
475 
476 	return 0;
477 }
478 
acm_process_read_urb(struct acm * acm,struct urb * urb)479 static void acm_process_read_urb(struct acm *acm, struct urb *urb)
480 {
481 	unsigned long flags;
482 
483 	if (!urb->actual_length)
484 		return;
485 
486 	spin_lock_irqsave(&acm->read_lock, flags);
487 	tty_insert_flip_string(&acm->port, urb->transfer_buffer,
488 			urb->actual_length);
489 	spin_unlock_irqrestore(&acm->read_lock, flags);
490 
491 	tty_flip_buffer_push(&acm->port);
492 }
493 
acm_read_bulk_callback(struct urb * urb)494 static void acm_read_bulk_callback(struct urb *urb)
495 {
496 	struct acm_rb *rb = urb->context;
497 	struct acm *acm = rb->instance;
498 	int status = urb->status;
499 	bool stopped = false;
500 	bool stalled = false;
501 	bool cooldown = false;
502 
503 	dev_vdbg(&acm->data->dev, "got urb %d, len %d, status %d\n",
504 		rb->index, urb->actual_length, status);
505 
506 	switch (status) {
507 	case 0:
508 		usb_mark_last_busy(acm->dev);
509 		acm_process_read_urb(acm, urb);
510 		break;
511 	case -EPIPE:
512 		set_bit(EVENT_RX_STALL, &acm->flags);
513 		stalled = true;
514 		break;
515 	case -ENOENT:
516 	case -ECONNRESET:
517 	case -ESHUTDOWN:
518 		dev_dbg(&acm->data->dev,
519 			"%s - urb shutting down with status: %d\n",
520 			__func__, status);
521 		stopped = true;
522 		break;
523 	case -EOVERFLOW:
524 	case -EPROTO:
525 		dev_dbg(&acm->data->dev,
526 			"%s - cooling babbling device\n", __func__);
527 		usb_mark_last_busy(acm->dev);
528 		set_bit(rb->index, &acm->urbs_in_error_delay);
529 		set_bit(ACM_ERROR_DELAY, &acm->flags);
530 		cooldown = true;
531 		break;
532 	default:
533 		dev_dbg(&acm->data->dev,
534 			"%s - nonzero urb status received: %d\n",
535 			__func__, status);
536 		break;
537 	}
538 
539 	/*
540 	 * Make sure URB processing is done before marking as free to avoid
541 	 * racing with unthrottle() on another CPU. Matches the barriers
542 	 * implied by the test_and_clear_bit() in acm_submit_read_urb().
543 	 */
544 	smp_mb__before_atomic();
545 	set_bit(rb->index, &acm->read_urbs_free);
546 	/*
547 	 * Make sure URB is marked as free before checking the throttled flag
548 	 * to avoid racing with unthrottle() on another CPU. Matches the
549 	 * smp_mb() in unthrottle().
550 	 */
551 	smp_mb__after_atomic();
552 
553 	if (stopped || stalled || cooldown) {
554 		if (stalled)
555 			schedule_delayed_work(&acm->dwork, 0);
556 		else if (cooldown)
557 			schedule_delayed_work(&acm->dwork, HZ / 2);
558 		return;
559 	}
560 
561 	if (test_bit(ACM_THROTTLED, &acm->flags))
562 		return;
563 
564 	acm_submit_read_urb(acm, rb->index, GFP_ATOMIC);
565 }
566 
567 /* data interface wrote those outgoing bytes */
acm_write_bulk(struct urb * urb)568 static void acm_write_bulk(struct urb *urb)
569 {
570 	struct acm_wb *wb = urb->context;
571 	struct acm *acm = wb->instance;
572 	unsigned long flags;
573 	int status = urb->status;
574 
575 	if (status || (urb->actual_length != urb->transfer_buffer_length))
576 		dev_vdbg(&acm->data->dev, "wrote len %d/%d, status %d\n",
577 			urb->actual_length,
578 			urb->transfer_buffer_length,
579 			status);
580 
581 	spin_lock_irqsave(&acm->write_lock, flags);
582 	acm_write_done(acm, wb);
583 	spin_unlock_irqrestore(&acm->write_lock, flags);
584 	set_bit(EVENT_TTY_WAKEUP, &acm->flags);
585 	schedule_delayed_work(&acm->dwork, 0);
586 }
587 
acm_softint(struct work_struct * work)588 static void acm_softint(struct work_struct *work)
589 {
590 	int i;
591 	struct acm *acm = container_of(work, struct acm, dwork.work);
592 
593 	if (test_bit(EVENT_RX_STALL, &acm->flags)) {
594 		smp_mb(); /* against acm_suspend() */
595 		if (!acm->susp_count) {
596 			for (i = 0; i < acm->rx_buflimit; i++)
597 				usb_kill_urb(acm->read_urbs[i]);
598 			usb_clear_halt(acm->dev, acm->in);
599 			acm_submit_read_urbs(acm, GFP_KERNEL);
600 			clear_bit(EVENT_RX_STALL, &acm->flags);
601 		}
602 	}
603 
604 	if (test_and_clear_bit(ACM_ERROR_DELAY, &acm->flags)) {
605 		for (i = 0; i < acm->rx_buflimit; i++)
606 			if (test_and_clear_bit(i, &acm->urbs_in_error_delay))
607 				acm_submit_read_urb(acm, i, GFP_KERNEL);
608 	}
609 
610 	if (test_and_clear_bit(EVENT_TTY_WAKEUP, &acm->flags))
611 		tty_port_tty_wakeup(&acm->port);
612 }
613 
614 /*
615  * TTY handlers
616  */
617 
acm_tty_install(struct tty_driver * driver,struct tty_struct * tty)618 static int acm_tty_install(struct tty_driver *driver, struct tty_struct *tty)
619 {
620 	struct acm *acm;
621 	int retval;
622 
623 	acm = acm_get_by_minor(tty->index);
624 	if (!acm)
625 		return -ENODEV;
626 
627 	retval = tty_standard_install(driver, tty);
628 	if (retval)
629 		goto error_init_termios;
630 
631 	/*
632 	 * Suppress initial echoing for some devices which might send data
633 	 * immediately after acm driver has been installed.
634 	 */
635 	if (acm->quirks & DISABLE_ECHO)
636 		tty->termios.c_lflag &= ~ECHO;
637 
638 	tty->driver_data = acm;
639 
640 	return 0;
641 
642 error_init_termios:
643 	tty_port_put(&acm->port);
644 	return retval;
645 }
646 
acm_tty_open(struct tty_struct * tty,struct file * filp)647 static int acm_tty_open(struct tty_struct *tty, struct file *filp)
648 {
649 	struct acm *acm = tty->driver_data;
650 
651 	return tty_port_open(&acm->port, tty, filp);
652 }
653 
acm_port_dtr_rts(struct tty_port * port,int raise)654 static void acm_port_dtr_rts(struct tty_port *port, int raise)
655 {
656 	struct acm *acm = container_of(port, struct acm, port);
657 	int val;
658 	int res;
659 
660 	if (raise)
661 		val = ACM_CTRL_DTR | ACM_CTRL_RTS;
662 	else
663 		val = 0;
664 
665 	/* FIXME: add missing ctrlout locking throughout driver */
666 	acm->ctrlout = val;
667 
668 	res = acm_set_control(acm, val);
669 	if (res && (acm->ctrl_caps & USB_CDC_CAP_LINE))
670 		/* This is broken in too many devices to spam the logs */
671 		dev_dbg(&acm->control->dev, "failed to set dtr/rts\n");
672 }
673 
acm_port_activate(struct tty_port * port,struct tty_struct * tty)674 static int acm_port_activate(struct tty_port *port, struct tty_struct *tty)
675 {
676 	struct acm *acm = container_of(port, struct acm, port);
677 	int retval = -ENODEV;
678 	int i;
679 
680 	mutex_lock(&acm->mutex);
681 	if (acm->disconnected)
682 		goto disconnected;
683 
684 	retval = usb_autopm_get_interface(acm->control);
685 	if (retval)
686 		goto error_get_interface;
687 
688 	/*
689 	 * FIXME: Why do we need this? Allocating 64K of physically contiguous
690 	 * memory is really nasty...
691 	 */
692 	set_bit(TTY_NO_WRITE_SPLIT, &tty->flags);
693 	acm->control->needs_remote_wakeup = 1;
694 
695 	acm->ctrlurb->dev = acm->dev;
696 	retval = usb_submit_urb(acm->ctrlurb, GFP_KERNEL);
697 	if (retval) {
698 		dev_err(&acm->control->dev,
699 			"%s - usb_submit_urb(ctrl irq) failed\n", __func__);
700 		goto error_submit_urb;
701 	}
702 
703 	acm_tty_set_termios(tty, NULL);
704 
705 	/*
706 	 * Unthrottle device in case the TTY was closed while throttled.
707 	 */
708 	clear_bit(ACM_THROTTLED, &acm->flags);
709 
710 	retval = acm_submit_read_urbs(acm, GFP_KERNEL);
711 	if (retval)
712 		goto error_submit_read_urbs;
713 
714 	usb_autopm_put_interface(acm->control);
715 
716 	mutex_unlock(&acm->mutex);
717 
718 	return 0;
719 
720 error_submit_read_urbs:
721 	for (i = 0; i < acm->rx_buflimit; i++)
722 		usb_kill_urb(acm->read_urbs[i]);
723 	usb_kill_urb(acm->ctrlurb);
724 error_submit_urb:
725 	usb_autopm_put_interface(acm->control);
726 error_get_interface:
727 disconnected:
728 	mutex_unlock(&acm->mutex);
729 
730 	return usb_translate_errors(retval);
731 }
732 
acm_port_destruct(struct tty_port * port)733 static void acm_port_destruct(struct tty_port *port)
734 {
735 	struct acm *acm = container_of(port, struct acm, port);
736 
737 	if (acm->minor != ACM_MINOR_INVALID)
738 		acm_release_minor(acm);
739 	usb_put_intf(acm->control);
740 	kfree(acm->country_codes);
741 	kfree(acm);
742 }
743 
acm_port_shutdown(struct tty_port * port)744 static void acm_port_shutdown(struct tty_port *port)
745 {
746 	struct acm *acm = container_of(port, struct acm, port);
747 	struct urb *urb;
748 	struct acm_wb *wb;
749 
750 	/*
751 	 * Need to grab write_lock to prevent race with resume, but no need to
752 	 * hold it due to the tty-port initialised flag.
753 	 */
754 	acm_poison_urbs(acm);
755 	spin_lock_irq(&acm->write_lock);
756 	spin_unlock_irq(&acm->write_lock);
757 
758 	usb_autopm_get_interface_no_resume(acm->control);
759 	acm->control->needs_remote_wakeup = 0;
760 	usb_autopm_put_interface(acm->control);
761 
762 	for (;;) {
763 		urb = usb_get_from_anchor(&acm->delayed);
764 		if (!urb)
765 			break;
766 		wb = urb->context;
767 		wb->use = false;
768 		usb_autopm_put_interface_async(acm->control);
769 	}
770 
771 	acm_unpoison_urbs(acm);
772 
773 }
774 
acm_tty_cleanup(struct tty_struct * tty)775 static void acm_tty_cleanup(struct tty_struct *tty)
776 {
777 	struct acm *acm = tty->driver_data;
778 
779 	tty_port_put(&acm->port);
780 }
781 
acm_tty_hangup(struct tty_struct * tty)782 static void acm_tty_hangup(struct tty_struct *tty)
783 {
784 	struct acm *acm = tty->driver_data;
785 
786 	tty_port_hangup(&acm->port);
787 }
788 
acm_tty_close(struct tty_struct * tty,struct file * filp)789 static void acm_tty_close(struct tty_struct *tty, struct file *filp)
790 {
791 	struct acm *acm = tty->driver_data;
792 
793 	tty_port_close(&acm->port, tty, filp);
794 }
795 
acm_tty_write(struct tty_struct * tty,const unsigned char * buf,int count)796 static int acm_tty_write(struct tty_struct *tty,
797 					const unsigned char *buf, int count)
798 {
799 	struct acm *acm = tty->driver_data;
800 	int stat;
801 	unsigned long flags;
802 	int wbn;
803 	struct acm_wb *wb;
804 
805 	if (!count)
806 		return 0;
807 
808 	dev_vdbg(&acm->data->dev, "%d bytes from tty layer\n", count);
809 
810 	spin_lock_irqsave(&acm->write_lock, flags);
811 	wbn = acm_wb_alloc(acm);
812 	if (wbn < 0) {
813 		spin_unlock_irqrestore(&acm->write_lock, flags);
814 		return 0;
815 	}
816 	wb = &acm->wb[wbn];
817 
818 	if (!acm->dev) {
819 		wb->use = false;
820 		spin_unlock_irqrestore(&acm->write_lock, flags);
821 		return -ENODEV;
822 	}
823 
824 	count = (count > acm->writesize) ? acm->writesize : count;
825 	dev_vdbg(&acm->data->dev, "writing %d bytes\n", count);
826 	memcpy(wb->buf, buf, count);
827 	wb->len = count;
828 
829 	stat = usb_autopm_get_interface_async(acm->control);
830 	if (stat) {
831 		wb->use = false;
832 		spin_unlock_irqrestore(&acm->write_lock, flags);
833 		return stat;
834 	}
835 
836 	if (acm->susp_count) {
837 		usb_anchor_urb(wb->urb, &acm->delayed);
838 		spin_unlock_irqrestore(&acm->write_lock, flags);
839 		return count;
840 	}
841 
842 	stat = acm_start_wb(acm, wb);
843 	spin_unlock_irqrestore(&acm->write_lock, flags);
844 
845 	if (stat < 0)
846 		return stat;
847 	return count;
848 }
849 
acm_tty_write_room(struct tty_struct * tty)850 static unsigned int acm_tty_write_room(struct tty_struct *tty)
851 {
852 	struct acm *acm = tty->driver_data;
853 	/*
854 	 * Do not let the line discipline to know that we have a reserve,
855 	 * or it might get too enthusiastic.
856 	 */
857 	return acm_wb_is_avail(acm) ? acm->writesize : 0;
858 }
859 
acm_tty_chars_in_buffer(struct tty_struct * tty)860 static unsigned int acm_tty_chars_in_buffer(struct tty_struct *tty)
861 {
862 	struct acm *acm = tty->driver_data;
863 	/*
864 	 * if the device was unplugged then any remaining characters fell out
865 	 * of the connector ;)
866 	 */
867 	if (acm->disconnected)
868 		return 0;
869 	/*
870 	 * This is inaccurate (overcounts), but it works.
871 	 */
872 	return (ACM_NW - acm_wb_is_avail(acm)) * acm->writesize;
873 }
874 
acm_tty_throttle(struct tty_struct * tty)875 static void acm_tty_throttle(struct tty_struct *tty)
876 {
877 	struct acm *acm = tty->driver_data;
878 
879 	set_bit(ACM_THROTTLED, &acm->flags);
880 }
881 
acm_tty_unthrottle(struct tty_struct * tty)882 static void acm_tty_unthrottle(struct tty_struct *tty)
883 {
884 	struct acm *acm = tty->driver_data;
885 
886 	clear_bit(ACM_THROTTLED, &acm->flags);
887 
888 	/* Matches the smp_mb__after_atomic() in acm_read_bulk_callback(). */
889 	smp_mb();
890 
891 	acm_submit_read_urbs(acm, GFP_KERNEL);
892 }
893 
acm_tty_break_ctl(struct tty_struct * tty,int state)894 static int acm_tty_break_ctl(struct tty_struct *tty, int state)
895 {
896 	struct acm *acm = tty->driver_data;
897 	int retval;
898 
899 	if (!(acm->ctrl_caps & USB_CDC_CAP_BRK))
900 		return -EOPNOTSUPP;
901 
902 	retval = acm_send_break(acm, state ? 0xffff : 0);
903 	if (retval < 0)
904 		dev_dbg(&acm->control->dev,
905 			"%s - send break failed\n", __func__);
906 	return retval;
907 }
908 
acm_tty_tiocmget(struct tty_struct * tty)909 static int acm_tty_tiocmget(struct tty_struct *tty)
910 {
911 	struct acm *acm = tty->driver_data;
912 
913 	return (acm->ctrlout & ACM_CTRL_DTR ? TIOCM_DTR : 0) |
914 	       (acm->ctrlout & ACM_CTRL_RTS ? TIOCM_RTS : 0) |
915 	       (acm->ctrlin  & ACM_CTRL_DSR ? TIOCM_DSR : 0) |
916 	       (acm->ctrlin  & ACM_CTRL_RI  ? TIOCM_RI  : 0) |
917 	       (acm->ctrlin  & ACM_CTRL_DCD ? TIOCM_CD  : 0) |
918 	       TIOCM_CTS;
919 }
920 
acm_tty_tiocmset(struct tty_struct * tty,unsigned int set,unsigned int clear)921 static int acm_tty_tiocmset(struct tty_struct *tty,
922 			    unsigned int set, unsigned int clear)
923 {
924 	struct acm *acm = tty->driver_data;
925 	unsigned int newctrl;
926 
927 	newctrl = acm->ctrlout;
928 	set = (set & TIOCM_DTR ? ACM_CTRL_DTR : 0) |
929 					(set & TIOCM_RTS ? ACM_CTRL_RTS : 0);
930 	clear = (clear & TIOCM_DTR ? ACM_CTRL_DTR : 0) |
931 					(clear & TIOCM_RTS ? ACM_CTRL_RTS : 0);
932 
933 	newctrl = (newctrl & ~clear) | set;
934 
935 	if (acm->ctrlout == newctrl)
936 		return 0;
937 	return acm_set_control(acm, acm->ctrlout = newctrl);
938 }
939 
get_serial_info(struct tty_struct * tty,struct serial_struct * ss)940 static int get_serial_info(struct tty_struct *tty, struct serial_struct *ss)
941 {
942 	struct acm *acm = tty->driver_data;
943 
944 	ss->line = acm->minor;
945 	ss->close_delay	= jiffies_to_msecs(acm->port.close_delay) / 10;
946 	ss->closing_wait = acm->port.closing_wait == ASYNC_CLOSING_WAIT_NONE ?
947 				ASYNC_CLOSING_WAIT_NONE :
948 				jiffies_to_msecs(acm->port.closing_wait) / 10;
949 	return 0;
950 }
951 
set_serial_info(struct tty_struct * tty,struct serial_struct * ss)952 static int set_serial_info(struct tty_struct *tty, struct serial_struct *ss)
953 {
954 	struct acm *acm = tty->driver_data;
955 	unsigned int closing_wait, close_delay;
956 	int retval = 0;
957 
958 	close_delay = msecs_to_jiffies(ss->close_delay * 10);
959 	closing_wait = ss->closing_wait == ASYNC_CLOSING_WAIT_NONE ?
960 			ASYNC_CLOSING_WAIT_NONE :
961 			msecs_to_jiffies(ss->closing_wait * 10);
962 
963 	mutex_lock(&acm->port.mutex);
964 
965 	if (!capable(CAP_SYS_ADMIN)) {
966 		if ((close_delay != acm->port.close_delay) ||
967 		    (closing_wait != acm->port.closing_wait))
968 			retval = -EPERM;
969 	} else {
970 		acm->port.close_delay  = close_delay;
971 		acm->port.closing_wait = closing_wait;
972 	}
973 
974 	mutex_unlock(&acm->port.mutex);
975 	return retval;
976 }
977 
wait_serial_change(struct acm * acm,unsigned long arg)978 static int wait_serial_change(struct acm *acm, unsigned long arg)
979 {
980 	int rv = 0;
981 	DECLARE_WAITQUEUE(wait, current);
982 	struct async_icount old, new;
983 
984 	do {
985 		spin_lock_irq(&acm->read_lock);
986 		old = acm->oldcount;
987 		new = acm->iocount;
988 		acm->oldcount = new;
989 		spin_unlock_irq(&acm->read_lock);
990 
991 		if ((arg & TIOCM_DSR) &&
992 			old.dsr != new.dsr)
993 			break;
994 		if ((arg & TIOCM_CD)  &&
995 			old.dcd != new.dcd)
996 			break;
997 		if ((arg & TIOCM_RI) &&
998 			old.rng != new.rng)
999 			break;
1000 
1001 		add_wait_queue(&acm->wioctl, &wait);
1002 		set_current_state(TASK_INTERRUPTIBLE);
1003 		schedule();
1004 		remove_wait_queue(&acm->wioctl, &wait);
1005 		if (acm->disconnected) {
1006 			if (arg & TIOCM_CD)
1007 				break;
1008 			else
1009 				rv = -ENODEV;
1010 		} else {
1011 			if (signal_pending(current))
1012 				rv = -ERESTARTSYS;
1013 		}
1014 	} while (!rv);
1015 
1016 
1017 
1018 	return rv;
1019 }
1020 
acm_tty_get_icount(struct tty_struct * tty,struct serial_icounter_struct * icount)1021 static int acm_tty_get_icount(struct tty_struct *tty,
1022 					struct serial_icounter_struct *icount)
1023 {
1024 	struct acm *acm = tty->driver_data;
1025 
1026 	icount->dsr = acm->iocount.dsr;
1027 	icount->rng = acm->iocount.rng;
1028 	icount->dcd = acm->iocount.dcd;
1029 	icount->frame = acm->iocount.frame;
1030 	icount->overrun = acm->iocount.overrun;
1031 	icount->parity = acm->iocount.parity;
1032 	icount->brk = acm->iocount.brk;
1033 
1034 	return 0;
1035 }
1036 
acm_tty_ioctl(struct tty_struct * tty,unsigned int cmd,unsigned long arg)1037 static int acm_tty_ioctl(struct tty_struct *tty,
1038 					unsigned int cmd, unsigned long arg)
1039 {
1040 	struct acm *acm = tty->driver_data;
1041 	int rv = -ENOIOCTLCMD;
1042 
1043 	switch (cmd) {
1044 	case TIOCMIWAIT:
1045 		rv = usb_autopm_get_interface(acm->control);
1046 		if (rv < 0) {
1047 			rv = -EIO;
1048 			break;
1049 		}
1050 		rv = wait_serial_change(acm, arg);
1051 		usb_autopm_put_interface(acm->control);
1052 		break;
1053 	}
1054 
1055 	return rv;
1056 }
1057 
acm_tty_set_termios(struct tty_struct * tty,struct ktermios * termios_old)1058 static void acm_tty_set_termios(struct tty_struct *tty,
1059 						struct ktermios *termios_old)
1060 {
1061 	struct acm *acm = tty->driver_data;
1062 	struct ktermios *termios = &tty->termios;
1063 	struct usb_cdc_line_coding newline;
1064 	int newctrl = acm->ctrlout;
1065 
1066 	newline.dwDTERate = cpu_to_le32(tty_get_baud_rate(tty));
1067 	newline.bCharFormat = termios->c_cflag & CSTOPB ? 2 : 0;
1068 	newline.bParityType = termios->c_cflag & PARENB ?
1069 				(termios->c_cflag & PARODD ? 1 : 2) +
1070 				(termios->c_cflag & CMSPAR ? 2 : 0) : 0;
1071 	newline.bDataBits = tty_get_char_size(termios->c_cflag);
1072 
1073 	/* FIXME: Needs to clear unsupported bits in the termios */
1074 	acm->clocal = ((termios->c_cflag & CLOCAL) != 0);
1075 
1076 	if (C_BAUD(tty) == B0) {
1077 		newline.dwDTERate = acm->line.dwDTERate;
1078 		newctrl &= ~ACM_CTRL_DTR;
1079 	} else if (termios_old && (termios_old->c_cflag & CBAUD) == B0) {
1080 		newctrl |=  ACM_CTRL_DTR;
1081 	}
1082 
1083 	if (newctrl != acm->ctrlout)
1084 		acm_set_control(acm, acm->ctrlout = newctrl);
1085 
1086 	if (memcmp(&acm->line, &newline, sizeof newline)) {
1087 		memcpy(&acm->line, &newline, sizeof newline);
1088 		dev_dbg(&acm->control->dev, "%s - set line: %d %d %d %d\n",
1089 			__func__,
1090 			le32_to_cpu(newline.dwDTERate),
1091 			newline.bCharFormat, newline.bParityType,
1092 			newline.bDataBits);
1093 		acm_set_line(acm, &acm->line);
1094 	}
1095 }
1096 
1097 static const struct tty_port_operations acm_port_ops = {
1098 	.dtr_rts = acm_port_dtr_rts,
1099 	.shutdown = acm_port_shutdown,
1100 	.activate = acm_port_activate,
1101 	.destruct = acm_port_destruct,
1102 };
1103 
1104 /*
1105  * USB probe and disconnect routines.
1106  */
1107 
1108 /* Little helpers: write/read buffers free */
acm_write_buffers_free(struct acm * acm)1109 static void acm_write_buffers_free(struct acm *acm)
1110 {
1111 	int i;
1112 	struct acm_wb *wb;
1113 
1114 	for (wb = &acm->wb[0], i = 0; i < ACM_NW; i++, wb++)
1115 		usb_free_coherent(acm->dev, acm->writesize, wb->buf, wb->dmah);
1116 }
1117 
acm_read_buffers_free(struct acm * acm)1118 static void acm_read_buffers_free(struct acm *acm)
1119 {
1120 	int i;
1121 
1122 	for (i = 0; i < acm->rx_buflimit; i++)
1123 		usb_free_coherent(acm->dev, acm->readsize,
1124 			  acm->read_buffers[i].base, acm->read_buffers[i].dma);
1125 }
1126 
1127 /* Little helper: write buffers allocate */
acm_write_buffers_alloc(struct acm * acm)1128 static int acm_write_buffers_alloc(struct acm *acm)
1129 {
1130 	int i;
1131 	struct acm_wb *wb;
1132 
1133 	for (wb = &acm->wb[0], i = 0; i < ACM_NW; i++, wb++) {
1134 		wb->buf = usb_alloc_coherent(acm->dev, acm->writesize, GFP_KERNEL,
1135 		    &wb->dmah);
1136 		if (!wb->buf) {
1137 			while (i != 0) {
1138 				--i;
1139 				--wb;
1140 				usb_free_coherent(acm->dev, acm->writesize,
1141 				    wb->buf, wb->dmah);
1142 			}
1143 			return -ENOMEM;
1144 		}
1145 	}
1146 	return 0;
1147 }
1148 
acm_probe(struct usb_interface * intf,const struct usb_device_id * id)1149 static int acm_probe(struct usb_interface *intf,
1150 		     const struct usb_device_id *id)
1151 {
1152 	struct usb_cdc_union_desc *union_header = NULL;
1153 	struct usb_cdc_call_mgmt_descriptor *cmgmd = NULL;
1154 	unsigned char *buffer = intf->altsetting->extra;
1155 	int buflen = intf->altsetting->extralen;
1156 	struct usb_interface *control_interface;
1157 	struct usb_interface *data_interface;
1158 	struct usb_endpoint_descriptor *epctrl = NULL;
1159 	struct usb_endpoint_descriptor *epread = NULL;
1160 	struct usb_endpoint_descriptor *epwrite = NULL;
1161 	struct usb_device *usb_dev = interface_to_usbdev(intf);
1162 	struct usb_cdc_parsed_header h;
1163 	struct acm *acm;
1164 	int minor;
1165 	int ctrlsize, readsize;
1166 	u8 *buf;
1167 	int call_intf_num = -1;
1168 	int data_intf_num = -1;
1169 	unsigned long quirks;
1170 	int num_rx_buf;
1171 	int i;
1172 	int combined_interfaces = 0;
1173 	struct device *tty_dev;
1174 	int rv = -ENOMEM;
1175 	int res;
1176 
1177 	/* normal quirks */
1178 	quirks = (unsigned long)id->driver_info;
1179 
1180 	if (quirks == IGNORE_DEVICE)
1181 		return -ENODEV;
1182 
1183 	memset(&h, 0x00, sizeof(struct usb_cdc_parsed_header));
1184 
1185 	num_rx_buf = (quirks == SINGLE_RX_URB) ? 1 : ACM_NR;
1186 
1187 	/* handle quirks deadly to normal probing*/
1188 	if (quirks == NO_UNION_NORMAL) {
1189 		data_interface = usb_ifnum_to_if(usb_dev, 1);
1190 		control_interface = usb_ifnum_to_if(usb_dev, 0);
1191 		/* we would crash */
1192 		if (!data_interface || !control_interface)
1193 			return -ENODEV;
1194 		goto skip_normal_probe;
1195 	}
1196 
1197 	/* normal probing*/
1198 	if (!buffer) {
1199 		dev_err(&intf->dev, "Weird descriptor references\n");
1200 		return -EINVAL;
1201 	}
1202 
1203 	if (!buflen) {
1204 		if (intf->cur_altsetting->endpoint &&
1205 				intf->cur_altsetting->endpoint->extralen &&
1206 				intf->cur_altsetting->endpoint->extra) {
1207 			dev_dbg(&intf->dev,
1208 				"Seeking extra descriptors on endpoint\n");
1209 			buflen = intf->cur_altsetting->endpoint->extralen;
1210 			buffer = intf->cur_altsetting->endpoint->extra;
1211 		} else {
1212 			dev_err(&intf->dev,
1213 				"Zero length descriptor references\n");
1214 			return -EINVAL;
1215 		}
1216 	}
1217 
1218 	cdc_parse_cdc_header(&h, intf, buffer, buflen);
1219 	union_header = h.usb_cdc_union_desc;
1220 	cmgmd = h.usb_cdc_call_mgmt_descriptor;
1221 	if (cmgmd)
1222 		call_intf_num = cmgmd->bDataInterface;
1223 
1224 	if (!union_header) {
1225 		if (intf->cur_altsetting->desc.bNumEndpoints == 3) {
1226 			dev_dbg(&intf->dev, "No union descriptor, assuming single interface\n");
1227 			combined_interfaces = 1;
1228 			control_interface = data_interface = intf;
1229 			goto look_for_collapsed_interface;
1230 		} else if (call_intf_num > 0) {
1231 			dev_dbg(&intf->dev, "No union descriptor, using call management descriptor\n");
1232 			data_intf_num = call_intf_num;
1233 			data_interface = usb_ifnum_to_if(usb_dev, data_intf_num);
1234 			control_interface = intf;
1235 		} else {
1236 			dev_dbg(&intf->dev, "No union descriptor, giving up\n");
1237 			return -ENODEV;
1238 		}
1239 	} else {
1240 		int class = -1;
1241 
1242 		data_intf_num = union_header->bSlaveInterface0;
1243 		control_interface = usb_ifnum_to_if(usb_dev, union_header->bMasterInterface0);
1244 		data_interface = usb_ifnum_to_if(usb_dev, data_intf_num);
1245 
1246 		if (control_interface)
1247 			class = control_interface->cur_altsetting->desc.bInterfaceClass;
1248 
1249 		if (class != USB_CLASS_COMM && class != USB_CLASS_CDC_DATA) {
1250 			dev_dbg(&intf->dev, "Broken union descriptor, assuming single interface\n");
1251 			combined_interfaces = 1;
1252 			control_interface = data_interface = intf;
1253 			goto look_for_collapsed_interface;
1254 		}
1255 	}
1256 
1257 	if (!control_interface || !data_interface) {
1258 		dev_dbg(&intf->dev, "no interfaces\n");
1259 		return -ENODEV;
1260 	}
1261 
1262 	if (data_intf_num != call_intf_num)
1263 		dev_dbg(&intf->dev, "Separate call control interface. That is not fully supported.\n");
1264 
1265 	if (control_interface == data_interface) {
1266 		/* some broken devices designed for windows work this way */
1267 		dev_warn(&intf->dev,"Control and data interfaces are not separated!\n");
1268 		combined_interfaces = 1;
1269 		/* a popular other OS doesn't use it */
1270 		quirks |= NO_CAP_LINE;
1271 		if (data_interface->cur_altsetting->desc.bNumEndpoints != 3) {
1272 			dev_err(&intf->dev, "This needs exactly 3 endpoints\n");
1273 			return -EINVAL;
1274 		}
1275 look_for_collapsed_interface:
1276 		res = usb_find_common_endpoints(data_interface->cur_altsetting,
1277 				&epread, &epwrite, &epctrl, NULL);
1278 		if (res)
1279 			return res;
1280 
1281 		goto made_compressed_probe;
1282 	}
1283 
1284 skip_normal_probe:
1285 
1286 	/*workaround for switched interfaces */
1287 	if (data_interface->cur_altsetting->desc.bInterfaceClass != USB_CLASS_CDC_DATA) {
1288 		if (control_interface->cur_altsetting->desc.bInterfaceClass == USB_CLASS_CDC_DATA) {
1289 			dev_dbg(&intf->dev,
1290 				"Your device has switched interfaces.\n");
1291 			swap(control_interface, data_interface);
1292 		} else {
1293 			return -EINVAL;
1294 		}
1295 	}
1296 
1297 	/* Accept probe requests only for the control interface */
1298 	if (!combined_interfaces && intf != control_interface)
1299 		return -ENODEV;
1300 
1301 	if (data_interface->cur_altsetting->desc.bNumEndpoints < 2 ||
1302 	    control_interface->cur_altsetting->desc.bNumEndpoints == 0)
1303 		return -EINVAL;
1304 
1305 	epctrl = &control_interface->cur_altsetting->endpoint[0].desc;
1306 	epread = &data_interface->cur_altsetting->endpoint[0].desc;
1307 	epwrite = &data_interface->cur_altsetting->endpoint[1].desc;
1308 
1309 
1310 	/* workaround for switched endpoints */
1311 	if (!usb_endpoint_dir_in(epread)) {
1312 		/* descriptors are swapped */
1313 		dev_dbg(&intf->dev,
1314 			"The data interface has switched endpoints\n");
1315 		swap(epread, epwrite);
1316 	}
1317 made_compressed_probe:
1318 	dev_dbg(&intf->dev, "interfaces are valid\n");
1319 
1320 	acm = kzalloc(sizeof(struct acm), GFP_KERNEL);
1321 	if (!acm)
1322 		return -ENOMEM;
1323 
1324 	tty_port_init(&acm->port);
1325 	acm->port.ops = &acm_port_ops;
1326 
1327 	ctrlsize = usb_endpoint_maxp(epctrl);
1328 	readsize = usb_endpoint_maxp(epread) *
1329 				(quirks == SINGLE_RX_URB ? 1 : 2);
1330 	acm->combined_interfaces = combined_interfaces;
1331 	acm->writesize = usb_endpoint_maxp(epwrite) * 20;
1332 	acm->control = control_interface;
1333 	acm->data = data_interface;
1334 
1335 	usb_get_intf(acm->control); /* undone in destruct() */
1336 
1337 	minor = acm_alloc_minor(acm);
1338 	if (minor < 0) {
1339 		acm->minor = ACM_MINOR_INVALID;
1340 		goto err_put_port;
1341 	}
1342 
1343 	acm->minor = minor;
1344 	acm->dev = usb_dev;
1345 	if (h.usb_cdc_acm_descriptor)
1346 		acm->ctrl_caps = h.usb_cdc_acm_descriptor->bmCapabilities;
1347 	if (quirks & NO_CAP_LINE)
1348 		acm->ctrl_caps &= ~USB_CDC_CAP_LINE;
1349 	acm->ctrlsize = ctrlsize;
1350 	acm->readsize = readsize;
1351 	acm->rx_buflimit = num_rx_buf;
1352 	INIT_DELAYED_WORK(&acm->dwork, acm_softint);
1353 	init_waitqueue_head(&acm->wioctl);
1354 	spin_lock_init(&acm->write_lock);
1355 	spin_lock_init(&acm->read_lock);
1356 	mutex_init(&acm->mutex);
1357 	if (usb_endpoint_xfer_int(epread)) {
1358 		acm->bInterval = epread->bInterval;
1359 		acm->in = usb_rcvintpipe(usb_dev, epread->bEndpointAddress);
1360 	} else {
1361 		acm->in = usb_rcvbulkpipe(usb_dev, epread->bEndpointAddress);
1362 	}
1363 	if (usb_endpoint_xfer_int(epwrite))
1364 		acm->out = usb_sndintpipe(usb_dev, epwrite->bEndpointAddress);
1365 	else
1366 		acm->out = usb_sndbulkpipe(usb_dev, epwrite->bEndpointAddress);
1367 	init_usb_anchor(&acm->delayed);
1368 	acm->quirks = quirks;
1369 
1370 	buf = usb_alloc_coherent(usb_dev, ctrlsize, GFP_KERNEL, &acm->ctrl_dma);
1371 	if (!buf)
1372 		goto err_put_port;
1373 	acm->ctrl_buffer = buf;
1374 
1375 	if (acm_write_buffers_alloc(acm) < 0)
1376 		goto err_free_ctrl_buffer;
1377 
1378 	acm->ctrlurb = usb_alloc_urb(0, GFP_KERNEL);
1379 	if (!acm->ctrlurb)
1380 		goto err_free_write_buffers;
1381 
1382 	for (i = 0; i < num_rx_buf; i++) {
1383 		struct acm_rb *rb = &(acm->read_buffers[i]);
1384 		struct urb *urb;
1385 
1386 		rb->base = usb_alloc_coherent(acm->dev, readsize, GFP_KERNEL,
1387 								&rb->dma);
1388 		if (!rb->base)
1389 			goto err_free_read_urbs;
1390 		rb->index = i;
1391 		rb->instance = acm;
1392 
1393 		urb = usb_alloc_urb(0, GFP_KERNEL);
1394 		if (!urb)
1395 			goto err_free_read_urbs;
1396 
1397 		urb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
1398 		urb->transfer_dma = rb->dma;
1399 		if (usb_endpoint_xfer_int(epread))
1400 			usb_fill_int_urb(urb, acm->dev, acm->in, rb->base,
1401 					 acm->readsize,
1402 					 acm_read_bulk_callback, rb,
1403 					 acm->bInterval);
1404 		else
1405 			usb_fill_bulk_urb(urb, acm->dev, acm->in, rb->base,
1406 					  acm->readsize,
1407 					  acm_read_bulk_callback, rb);
1408 
1409 		acm->read_urbs[i] = urb;
1410 		__set_bit(i, &acm->read_urbs_free);
1411 	}
1412 	for (i = 0; i < ACM_NW; i++) {
1413 		struct acm_wb *snd = &(acm->wb[i]);
1414 
1415 		snd->urb = usb_alloc_urb(0, GFP_KERNEL);
1416 		if (!snd->urb)
1417 			goto err_free_write_urbs;
1418 
1419 		if (usb_endpoint_xfer_int(epwrite))
1420 			usb_fill_int_urb(snd->urb, usb_dev, acm->out,
1421 				NULL, acm->writesize, acm_write_bulk, snd, epwrite->bInterval);
1422 		else
1423 			usb_fill_bulk_urb(snd->urb, usb_dev, acm->out,
1424 				NULL, acm->writesize, acm_write_bulk, snd);
1425 		snd->urb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
1426 		if (quirks & SEND_ZERO_PACKET)
1427 			snd->urb->transfer_flags |= URB_ZERO_PACKET;
1428 		snd->instance = acm;
1429 	}
1430 
1431 	usb_set_intfdata(intf, acm);
1432 
1433 	i = device_create_file(&intf->dev, &dev_attr_bmCapabilities);
1434 	if (i < 0)
1435 		goto err_free_write_urbs;
1436 
1437 	if (h.usb_cdc_country_functional_desc) { /* export the country data */
1438 		struct usb_cdc_country_functional_desc * cfd =
1439 					h.usb_cdc_country_functional_desc;
1440 
1441 		acm->country_codes = kmalloc(cfd->bLength - 4, GFP_KERNEL);
1442 		if (!acm->country_codes)
1443 			goto skip_countries;
1444 		acm->country_code_size = cfd->bLength - 4;
1445 		memcpy(acm->country_codes, (u8 *)&cfd->wCountyCode0,
1446 							cfd->bLength - 4);
1447 		acm->country_rel_date = cfd->iCountryCodeRelDate;
1448 
1449 		i = device_create_file(&intf->dev, &dev_attr_wCountryCodes);
1450 		if (i < 0) {
1451 			kfree(acm->country_codes);
1452 			acm->country_codes = NULL;
1453 			acm->country_code_size = 0;
1454 			goto skip_countries;
1455 		}
1456 
1457 		i = device_create_file(&intf->dev,
1458 						&dev_attr_iCountryCodeRelDate);
1459 		if (i < 0) {
1460 			device_remove_file(&intf->dev, &dev_attr_wCountryCodes);
1461 			kfree(acm->country_codes);
1462 			acm->country_codes = NULL;
1463 			acm->country_code_size = 0;
1464 			goto skip_countries;
1465 		}
1466 	}
1467 
1468 skip_countries:
1469 	usb_fill_int_urb(acm->ctrlurb, usb_dev,
1470 			 usb_rcvintpipe(usb_dev, epctrl->bEndpointAddress),
1471 			 acm->ctrl_buffer, ctrlsize, acm_ctrl_irq, acm,
1472 			 /* works around buggy devices */
1473 			 epctrl->bInterval ? epctrl->bInterval : 16);
1474 	acm->ctrlurb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
1475 	acm->ctrlurb->transfer_dma = acm->ctrl_dma;
1476 	acm->notification_buffer = NULL;
1477 	acm->nb_index = 0;
1478 	acm->nb_size = 0;
1479 
1480 	acm->line.dwDTERate = cpu_to_le32(9600);
1481 	acm->line.bDataBits = 8;
1482 	acm_set_line(acm, &acm->line);
1483 
1484 	if (!acm->combined_interfaces) {
1485 		rv = usb_driver_claim_interface(&acm_driver, data_interface, acm);
1486 		if (rv)
1487 			goto err_remove_files;
1488 	}
1489 
1490 	tty_dev = tty_port_register_device(&acm->port, acm_tty_driver, minor,
1491 			&control_interface->dev);
1492 	if (IS_ERR(tty_dev)) {
1493 		rv = PTR_ERR(tty_dev);
1494 		goto err_release_data_interface;
1495 	}
1496 
1497 	if (quirks & CLEAR_HALT_CONDITIONS) {
1498 		usb_clear_halt(usb_dev, acm->in);
1499 		usb_clear_halt(usb_dev, acm->out);
1500 	}
1501 
1502 	dev_info(&intf->dev, "ttyACM%d: USB ACM device\n", minor);
1503 
1504 	return 0;
1505 
1506 err_release_data_interface:
1507 	if (!acm->combined_interfaces) {
1508 		/* Clear driver data so that disconnect() returns early. */
1509 		usb_set_intfdata(data_interface, NULL);
1510 		usb_driver_release_interface(&acm_driver, data_interface);
1511 	}
1512 err_remove_files:
1513 	if (acm->country_codes) {
1514 		device_remove_file(&acm->control->dev,
1515 				&dev_attr_wCountryCodes);
1516 		device_remove_file(&acm->control->dev,
1517 				&dev_attr_iCountryCodeRelDate);
1518 	}
1519 	device_remove_file(&acm->control->dev, &dev_attr_bmCapabilities);
1520 err_free_write_urbs:
1521 	for (i = 0; i < ACM_NW; i++)
1522 		usb_free_urb(acm->wb[i].urb);
1523 err_free_read_urbs:
1524 	for (i = 0; i < num_rx_buf; i++)
1525 		usb_free_urb(acm->read_urbs[i]);
1526 	acm_read_buffers_free(acm);
1527 	usb_free_urb(acm->ctrlurb);
1528 err_free_write_buffers:
1529 	acm_write_buffers_free(acm);
1530 err_free_ctrl_buffer:
1531 	usb_free_coherent(usb_dev, ctrlsize, acm->ctrl_buffer, acm->ctrl_dma);
1532 err_put_port:
1533 	tty_port_put(&acm->port);
1534 
1535 	return rv;
1536 }
1537 
acm_disconnect(struct usb_interface * intf)1538 static void acm_disconnect(struct usb_interface *intf)
1539 {
1540 	struct acm *acm = usb_get_intfdata(intf);
1541 	struct tty_struct *tty;
1542 	int i;
1543 
1544 	/* sibling interface is already cleaning up */
1545 	if (!acm)
1546 		return;
1547 
1548 	acm->disconnected = true;
1549 	/*
1550 	 * there is a circular dependency. acm_softint() can resubmit
1551 	 * the URBs in error handling so we need to block any
1552 	 * submission right away
1553 	 */
1554 	acm_poison_urbs(acm);
1555 	mutex_lock(&acm->mutex);
1556 	if (acm->country_codes) {
1557 		device_remove_file(&acm->control->dev,
1558 				&dev_attr_wCountryCodes);
1559 		device_remove_file(&acm->control->dev,
1560 				&dev_attr_iCountryCodeRelDate);
1561 	}
1562 	wake_up_all(&acm->wioctl);
1563 	device_remove_file(&acm->control->dev, &dev_attr_bmCapabilities);
1564 	usb_set_intfdata(acm->control, NULL);
1565 	usb_set_intfdata(acm->data, NULL);
1566 	mutex_unlock(&acm->mutex);
1567 
1568 	tty = tty_port_tty_get(&acm->port);
1569 	if (tty) {
1570 		tty_vhangup(tty);
1571 		tty_kref_put(tty);
1572 	}
1573 
1574 	cancel_delayed_work_sync(&acm->dwork);
1575 
1576 	tty_unregister_device(acm_tty_driver, acm->minor);
1577 
1578 	usb_free_urb(acm->ctrlurb);
1579 	for (i = 0; i < ACM_NW; i++)
1580 		usb_free_urb(acm->wb[i].urb);
1581 	for (i = 0; i < acm->rx_buflimit; i++)
1582 		usb_free_urb(acm->read_urbs[i]);
1583 	acm_write_buffers_free(acm);
1584 	usb_free_coherent(acm->dev, acm->ctrlsize, acm->ctrl_buffer, acm->ctrl_dma);
1585 	acm_read_buffers_free(acm);
1586 
1587 	kfree(acm->notification_buffer);
1588 
1589 	if (!acm->combined_interfaces)
1590 		usb_driver_release_interface(&acm_driver, intf == acm->control ?
1591 					acm->data : acm->control);
1592 
1593 	tty_port_put(&acm->port);
1594 }
1595 
1596 #ifdef CONFIG_PM
acm_suspend(struct usb_interface * intf,pm_message_t message)1597 static int acm_suspend(struct usb_interface *intf, pm_message_t message)
1598 {
1599 	struct acm *acm = usb_get_intfdata(intf);
1600 	int cnt;
1601 
1602 	spin_lock_irq(&acm->write_lock);
1603 	if (PMSG_IS_AUTO(message)) {
1604 		if (acm->transmitting) {
1605 			spin_unlock_irq(&acm->write_lock);
1606 			return -EBUSY;
1607 		}
1608 	}
1609 	cnt = acm->susp_count++;
1610 	spin_unlock_irq(&acm->write_lock);
1611 
1612 	if (cnt)
1613 		return 0;
1614 
1615 	acm_poison_urbs(acm);
1616 	cancel_delayed_work_sync(&acm->dwork);
1617 	acm->urbs_in_error_delay = 0;
1618 
1619 	return 0;
1620 }
1621 
acm_resume(struct usb_interface * intf)1622 static int acm_resume(struct usb_interface *intf)
1623 {
1624 	struct acm *acm = usb_get_intfdata(intf);
1625 	struct urb *urb;
1626 	int rv = 0;
1627 
1628 	spin_lock_irq(&acm->write_lock);
1629 
1630 	if (--acm->susp_count)
1631 		goto out;
1632 
1633 	acm_unpoison_urbs(acm);
1634 
1635 	if (tty_port_initialized(&acm->port)) {
1636 		rv = usb_submit_urb(acm->ctrlurb, GFP_ATOMIC);
1637 
1638 		for (;;) {
1639 			urb = usb_get_from_anchor(&acm->delayed);
1640 			if (!urb)
1641 				break;
1642 
1643 			acm_start_wb(acm, urb->context);
1644 		}
1645 
1646 		/*
1647 		 * delayed error checking because we must
1648 		 * do the write path at all cost
1649 		 */
1650 		if (rv < 0)
1651 			goto out;
1652 
1653 		rv = acm_submit_read_urbs(acm, GFP_ATOMIC);
1654 	}
1655 out:
1656 	spin_unlock_irq(&acm->write_lock);
1657 
1658 	return rv;
1659 }
1660 
acm_reset_resume(struct usb_interface * intf)1661 static int acm_reset_resume(struct usb_interface *intf)
1662 {
1663 	struct acm *acm = usb_get_intfdata(intf);
1664 
1665 	if (tty_port_initialized(&acm->port))
1666 		tty_port_tty_hangup(&acm->port, false);
1667 
1668 	return acm_resume(intf);
1669 }
1670 
1671 #endif /* CONFIG_PM */
1672 
acm_pre_reset(struct usb_interface * intf)1673 static int acm_pre_reset(struct usb_interface *intf)
1674 {
1675 	struct acm *acm = usb_get_intfdata(intf);
1676 
1677 	clear_bit(EVENT_RX_STALL, &acm->flags);
1678 	acm->nb_index = 0; /* pending control transfers are lost */
1679 
1680 	return 0;
1681 }
1682 
1683 #define NOKIA_PCSUITE_ACM_INFO(x) \
1684 		USB_DEVICE_AND_INTERFACE_INFO(0x0421, x, \
1685 		USB_CLASS_COMM, USB_CDC_SUBCLASS_ACM, \
1686 		USB_CDC_ACM_PROTO_VENDOR)
1687 
1688 #define SAMSUNG_PCSUITE_ACM_INFO(x) \
1689 		USB_DEVICE_AND_INTERFACE_INFO(0x04e7, x, \
1690 		USB_CLASS_COMM, USB_CDC_SUBCLASS_ACM, \
1691 		USB_CDC_ACM_PROTO_VENDOR)
1692 
1693 /*
1694  * USB driver structure.
1695  */
1696 
1697 static const struct usb_device_id acm_ids[] = {
1698 	/* quirky and broken devices */
1699 	{ USB_DEVICE(0x0424, 0x274e), /* Microchip Technology, Inc. (formerly SMSC) */
1700 	  .driver_info = DISABLE_ECHO, }, /* DISABLE ECHO in termios flag */
1701 	{ USB_DEVICE(0x076d, 0x0006), /* Denso Cradle CU-321 */
1702 	.driver_info = NO_UNION_NORMAL, },/* has no union descriptor */
1703 	{ USB_DEVICE(0x17ef, 0x7000), /* Lenovo USB modem */
1704 	.driver_info = NO_UNION_NORMAL, },/* has no union descriptor */
1705 	{ USB_DEVICE(0x0870, 0x0001), /* Metricom GS Modem */
1706 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
1707 	},
1708 	{ USB_DEVICE(0x045b, 0x023c),	/* Renesas USB Download mode */
1709 	.driver_info = DISABLE_ECHO,	/* Don't echo banner */
1710 	},
1711 	{ USB_DEVICE(0x045b, 0x0248),	/* Renesas USB Download mode */
1712 	.driver_info = DISABLE_ECHO,	/* Don't echo banner */
1713 	},
1714 	{ USB_DEVICE(0x045b, 0x024D),	/* Renesas USB Download mode */
1715 	.driver_info = DISABLE_ECHO,	/* Don't echo banner */
1716 	},
1717 	{ USB_DEVICE(0x0e8d, 0x0003), /* FIREFLY, MediaTek Inc; andrey.arapov@gmail.com */
1718 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
1719 	},
1720 	{ USB_DEVICE(0x0e8d, 0x2000), /* MediaTek Inc Preloader */
1721 	.driver_info = DISABLE_ECHO, /* DISABLE ECHO in termios flag */
1722 	},
1723 	{ USB_DEVICE(0x0e8d, 0x3329), /* MediaTek Inc GPS */
1724 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
1725 	},
1726 	{ USB_DEVICE(0x0482, 0x0203), /* KYOCERA AH-K3001V */
1727 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
1728 	},
1729 	{ USB_DEVICE(0x079b, 0x000f), /* BT On-Air USB MODEM */
1730 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
1731 	},
1732 	{ USB_DEVICE(0x0ace, 0x1602), /* ZyDAS 56K USB MODEM */
1733 	.driver_info = SINGLE_RX_URB,
1734 	},
1735 	{ USB_DEVICE(0x0ace, 0x1608), /* ZyDAS 56K USB MODEM */
1736 	.driver_info = SINGLE_RX_URB, /* firmware bug */
1737 	},
1738 	{ USB_DEVICE(0x0ace, 0x1611), /* ZyDAS 56K USB MODEM - new version */
1739 	.driver_info = SINGLE_RX_URB, /* firmware bug */
1740 	},
1741 	{ USB_DEVICE(0x11ca, 0x0201), /* VeriFone Mx870 Gadget Serial */
1742 	.driver_info = SINGLE_RX_URB,
1743 	},
1744 	{ USB_DEVICE(0x1965, 0x0018), /* Uniden UBC125XLT */
1745 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
1746 	},
1747 	{ USB_DEVICE(0x22b8, 0x7000), /* Motorola Q Phone */
1748 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
1749 	},
1750 	{ USB_DEVICE(0x0803, 0x3095), /* Zoom Telephonics Model 3095F USB MODEM */
1751 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
1752 	},
1753 	{ USB_DEVICE(0x0572, 0x1321), /* Conexant USB MODEM CX93010 */
1754 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
1755 	},
1756 	{ USB_DEVICE(0x0572, 0x1324), /* Conexant USB MODEM RD02-D400 */
1757 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
1758 	},
1759 	{ USB_DEVICE(0x0572, 0x1328), /* Shiro / Aztech USB MODEM UM-3100 */
1760 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
1761 	},
1762 	{ USB_DEVICE(0x0572, 0x1349), /* Hiro (Conexant) USB MODEM H50228 */
1763 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
1764 	},
1765 	{ USB_DEVICE(0x20df, 0x0001), /* Simtec Electronics Entropy Key */
1766 	.driver_info = QUIRK_CONTROL_LINE_STATE, },
1767 	{ USB_DEVICE(0x2184, 0x001c) },	/* GW Instek AFG-2225 */
1768 	{ USB_DEVICE(0x2184, 0x0036) },	/* GW Instek AFG-125 */
1769 	{ USB_DEVICE(0x22b8, 0x6425), /* Motorola MOTOMAGX phones */
1770 	},
1771 	/* Motorola H24 HSPA module: */
1772 	{ USB_DEVICE(0x22b8, 0x2d91) }, /* modem                                */
1773 	{ USB_DEVICE(0x22b8, 0x2d92),   /* modem           + diagnostics        */
1774 	.driver_info = NO_UNION_NORMAL, /* handle only modem interface          */
1775 	},
1776 	{ USB_DEVICE(0x22b8, 0x2d93),   /* modem + AT port                      */
1777 	.driver_info = NO_UNION_NORMAL, /* handle only modem interface          */
1778 	},
1779 	{ USB_DEVICE(0x22b8, 0x2d95),   /* modem + AT port + diagnostics        */
1780 	.driver_info = NO_UNION_NORMAL, /* handle only modem interface          */
1781 	},
1782 	{ USB_DEVICE(0x22b8, 0x2d96),   /* modem                         + NMEA */
1783 	.driver_info = NO_UNION_NORMAL, /* handle only modem interface          */
1784 	},
1785 	{ USB_DEVICE(0x22b8, 0x2d97),   /* modem           + diagnostics + NMEA */
1786 	.driver_info = NO_UNION_NORMAL, /* handle only modem interface          */
1787 	},
1788 	{ USB_DEVICE(0x22b8, 0x2d99),   /* modem + AT port               + NMEA */
1789 	.driver_info = NO_UNION_NORMAL, /* handle only modem interface          */
1790 	},
1791 	{ USB_DEVICE(0x22b8, 0x2d9a),   /* modem + AT port + diagnostics + NMEA */
1792 	.driver_info = NO_UNION_NORMAL, /* handle only modem interface          */
1793 	},
1794 
1795 	{ USB_DEVICE(0x0572, 0x1329), /* Hummingbird huc56s (Conexant) */
1796 	.driver_info = NO_UNION_NORMAL, /* union descriptor misplaced on
1797 					   data interface instead of
1798 					   communications interface.
1799 					   Maybe we should define a new
1800 					   quirk for this. */
1801 	},
1802 	{ USB_DEVICE(0x0572, 0x1340), /* Conexant CX93010-2x UCMxx */
1803 	.driver_info = NO_UNION_NORMAL,
1804 	},
1805 	{ USB_DEVICE(0x05f9, 0x4002), /* PSC Scanning, Magellan 800i */
1806 	.driver_info = NO_UNION_NORMAL,
1807 	},
1808 	{ USB_DEVICE(0x1bbb, 0x0003), /* Alcatel OT-I650 */
1809 	.driver_info = NO_UNION_NORMAL, /* reports zero length descriptor */
1810 	},
1811 	{ USB_DEVICE(0x1576, 0x03b1), /* Maretron USB100 */
1812 	.driver_info = NO_UNION_NORMAL, /* reports zero length descriptor */
1813 	},
1814 	{ USB_DEVICE(0xfff0, 0x0100), /* DATECS FP-2000 */
1815 	.driver_info = NO_UNION_NORMAL, /* reports zero length descriptor */
1816 	},
1817 	{ USB_DEVICE(0x09d8, 0x0320), /* Elatec GmbH TWN3 */
1818 	.driver_info = NO_UNION_NORMAL, /* has misplaced union descriptor */
1819 	},
1820 	{ USB_DEVICE(0x0c26, 0x0020), /* Icom ICF3400 Serie */
1821 	.driver_info = NO_UNION_NORMAL, /* reports zero length descriptor */
1822 	},
1823 	{ USB_DEVICE(0x0ca6, 0xa050), /* Castles VEGA3000 */
1824 	.driver_info = NO_UNION_NORMAL, /* reports zero length descriptor */
1825 	},
1826 
1827 	{ USB_DEVICE(0x2912, 0x0001), /* ATOL FPrint */
1828 	.driver_info = CLEAR_HALT_CONDITIONS,
1829 	},
1830 
1831 	/* Nokia S60 phones expose two ACM channels. The first is
1832 	 * a modem and is picked up by the standard AT-command
1833 	 * information below. The second is 'vendor-specific' but
1834 	 * is treated as a serial device at the S60 end, so we want
1835 	 * to expose it on Linux too. */
1836 	{ NOKIA_PCSUITE_ACM_INFO(0x042D), }, /* Nokia 3250 */
1837 	{ NOKIA_PCSUITE_ACM_INFO(0x04D8), }, /* Nokia 5500 Sport */
1838 	{ NOKIA_PCSUITE_ACM_INFO(0x04C9), }, /* Nokia E50 */
1839 	{ NOKIA_PCSUITE_ACM_INFO(0x0419), }, /* Nokia E60 */
1840 	{ NOKIA_PCSUITE_ACM_INFO(0x044D), }, /* Nokia E61 */
1841 	{ NOKIA_PCSUITE_ACM_INFO(0x0001), }, /* Nokia E61i */
1842 	{ NOKIA_PCSUITE_ACM_INFO(0x0475), }, /* Nokia E62 */
1843 	{ NOKIA_PCSUITE_ACM_INFO(0x0508), }, /* Nokia E65 */
1844 	{ NOKIA_PCSUITE_ACM_INFO(0x0418), }, /* Nokia E70 */
1845 	{ NOKIA_PCSUITE_ACM_INFO(0x0425), }, /* Nokia N71 */
1846 	{ NOKIA_PCSUITE_ACM_INFO(0x0486), }, /* Nokia N73 */
1847 	{ NOKIA_PCSUITE_ACM_INFO(0x04DF), }, /* Nokia N75 */
1848 	{ NOKIA_PCSUITE_ACM_INFO(0x000e), }, /* Nokia N77 */
1849 	{ NOKIA_PCSUITE_ACM_INFO(0x0445), }, /* Nokia N80 */
1850 	{ NOKIA_PCSUITE_ACM_INFO(0x042F), }, /* Nokia N91 & N91 8GB */
1851 	{ NOKIA_PCSUITE_ACM_INFO(0x048E), }, /* Nokia N92 */
1852 	{ NOKIA_PCSUITE_ACM_INFO(0x0420), }, /* Nokia N93 */
1853 	{ NOKIA_PCSUITE_ACM_INFO(0x04E6), }, /* Nokia N93i  */
1854 	{ NOKIA_PCSUITE_ACM_INFO(0x04B2), }, /* Nokia 5700 XpressMusic */
1855 	{ NOKIA_PCSUITE_ACM_INFO(0x0134), }, /* Nokia 6110 Navigator (China) */
1856 	{ NOKIA_PCSUITE_ACM_INFO(0x046E), }, /* Nokia 6110 Navigator */
1857 	{ NOKIA_PCSUITE_ACM_INFO(0x002f), }, /* Nokia 6120 classic &  */
1858 	{ NOKIA_PCSUITE_ACM_INFO(0x0088), }, /* Nokia 6121 classic */
1859 	{ NOKIA_PCSUITE_ACM_INFO(0x00fc), }, /* Nokia 6124 classic */
1860 	{ NOKIA_PCSUITE_ACM_INFO(0x0042), }, /* Nokia E51 */
1861 	{ NOKIA_PCSUITE_ACM_INFO(0x00b0), }, /* Nokia E66 */
1862 	{ NOKIA_PCSUITE_ACM_INFO(0x00ab), }, /* Nokia E71 */
1863 	{ NOKIA_PCSUITE_ACM_INFO(0x0481), }, /* Nokia N76 */
1864 	{ NOKIA_PCSUITE_ACM_INFO(0x0007), }, /* Nokia N81 & N81 8GB */
1865 	{ NOKIA_PCSUITE_ACM_INFO(0x0071), }, /* Nokia N82 */
1866 	{ NOKIA_PCSUITE_ACM_INFO(0x04F0), }, /* Nokia N95 & N95-3 NAM */
1867 	{ NOKIA_PCSUITE_ACM_INFO(0x0070), }, /* Nokia N95 8GB  */
1868 	{ NOKIA_PCSUITE_ACM_INFO(0x00e9), }, /* Nokia 5320 XpressMusic */
1869 	{ NOKIA_PCSUITE_ACM_INFO(0x0099), }, /* Nokia 6210 Navigator, RM-367 */
1870 	{ NOKIA_PCSUITE_ACM_INFO(0x0128), }, /* Nokia 6210 Navigator, RM-419 */
1871 	{ NOKIA_PCSUITE_ACM_INFO(0x008f), }, /* Nokia 6220 Classic */
1872 	{ NOKIA_PCSUITE_ACM_INFO(0x00a0), }, /* Nokia 6650 */
1873 	{ NOKIA_PCSUITE_ACM_INFO(0x007b), }, /* Nokia N78 */
1874 	{ NOKIA_PCSUITE_ACM_INFO(0x0094), }, /* Nokia N85 */
1875 	{ NOKIA_PCSUITE_ACM_INFO(0x003a), }, /* Nokia N96 & N96-3  */
1876 	{ NOKIA_PCSUITE_ACM_INFO(0x00e9), }, /* Nokia 5320 XpressMusic */
1877 	{ NOKIA_PCSUITE_ACM_INFO(0x0108), }, /* Nokia 5320 XpressMusic 2G */
1878 	{ NOKIA_PCSUITE_ACM_INFO(0x01f5), }, /* Nokia N97, RM-505 */
1879 	{ NOKIA_PCSUITE_ACM_INFO(0x02e3), }, /* Nokia 5230, RM-588 */
1880 	{ NOKIA_PCSUITE_ACM_INFO(0x0178), }, /* Nokia E63 */
1881 	{ NOKIA_PCSUITE_ACM_INFO(0x010e), }, /* Nokia E75 */
1882 	{ NOKIA_PCSUITE_ACM_INFO(0x02d9), }, /* Nokia 6760 Slide */
1883 	{ NOKIA_PCSUITE_ACM_INFO(0x01d0), }, /* Nokia E52 */
1884 	{ NOKIA_PCSUITE_ACM_INFO(0x0223), }, /* Nokia E72 */
1885 	{ NOKIA_PCSUITE_ACM_INFO(0x0275), }, /* Nokia X6 */
1886 	{ NOKIA_PCSUITE_ACM_INFO(0x026c), }, /* Nokia N97 Mini */
1887 	{ NOKIA_PCSUITE_ACM_INFO(0x0154), }, /* Nokia 5800 XpressMusic */
1888 	{ NOKIA_PCSUITE_ACM_INFO(0x04ce), }, /* Nokia E90 */
1889 	{ NOKIA_PCSUITE_ACM_INFO(0x01d4), }, /* Nokia E55 */
1890 	{ NOKIA_PCSUITE_ACM_INFO(0x0302), }, /* Nokia N8 */
1891 	{ NOKIA_PCSUITE_ACM_INFO(0x0335), }, /* Nokia E7 */
1892 	{ NOKIA_PCSUITE_ACM_INFO(0x03cd), }, /* Nokia C7 */
1893 	{ SAMSUNG_PCSUITE_ACM_INFO(0x6651), }, /* Samsung GTi8510 (INNOV8) */
1894 
1895 	/* Support for Owen devices */
1896 	{ USB_DEVICE(0x03eb, 0x0030), }, /* Owen SI30 */
1897 
1898 	/* NOTE: non-Nokia COMM/ACM/0xff is likely MSFT RNDIS... NOT a modem! */
1899 
1900 #if IS_ENABLED(CONFIG_INPUT_IMS_PCU)
1901 	{ USB_DEVICE(0x04d8, 0x0082),	/* Application mode */
1902 	.driver_info = IGNORE_DEVICE,
1903 	},
1904 	{ USB_DEVICE(0x04d8, 0x0083),	/* Bootloader mode */
1905 	.driver_info = IGNORE_DEVICE,
1906 	},
1907 #endif
1908 
1909 #if IS_ENABLED(CONFIG_IR_TOY)
1910 	{ USB_DEVICE(0x04d8, 0xfd08),
1911 	.driver_info = IGNORE_DEVICE,
1912 	},
1913 
1914 	{ USB_DEVICE(0x04d8, 0xf58b),
1915 	.driver_info = IGNORE_DEVICE,
1916 	},
1917 #endif
1918 
1919 #if IS_ENABLED(CONFIG_USB_SERIAL_XR)
1920 	{ USB_DEVICE(0x04e2, 0x1400), .driver_info = IGNORE_DEVICE },
1921 	{ USB_DEVICE(0x04e2, 0x1401), .driver_info = IGNORE_DEVICE },
1922 	{ USB_DEVICE(0x04e2, 0x1402), .driver_info = IGNORE_DEVICE },
1923 	{ USB_DEVICE(0x04e2, 0x1403), .driver_info = IGNORE_DEVICE },
1924 	{ USB_DEVICE(0x04e2, 0x1410), .driver_info = IGNORE_DEVICE },
1925 	{ USB_DEVICE(0x04e2, 0x1411), .driver_info = IGNORE_DEVICE },
1926 	{ USB_DEVICE(0x04e2, 0x1412), .driver_info = IGNORE_DEVICE },
1927 	{ USB_DEVICE(0x04e2, 0x1414), .driver_info = IGNORE_DEVICE },
1928 	{ USB_DEVICE(0x04e2, 0x1420), .driver_info = IGNORE_DEVICE },
1929 	{ USB_DEVICE(0x04e2, 0x1422), .driver_info = IGNORE_DEVICE },
1930 	{ USB_DEVICE(0x04e2, 0x1424), .driver_info = IGNORE_DEVICE },
1931 #endif
1932 
1933 	/*Samsung phone in firmware update mode */
1934 	{ USB_DEVICE(0x04e8, 0x685d),
1935 	.driver_info = IGNORE_DEVICE,
1936 	},
1937 
1938 	/* Exclude Infineon Flash Loader utility */
1939 	{ USB_DEVICE(0x058b, 0x0041),
1940 	.driver_info = IGNORE_DEVICE,
1941 	},
1942 
1943 	/* Exclude ETAS ES58x */
1944 	{ USB_DEVICE(0x108c, 0x0159), /* ES581.4 */
1945 	.driver_info = IGNORE_DEVICE,
1946 	},
1947 	{ USB_DEVICE(0x108c, 0x0168), /* ES582.1 */
1948 	.driver_info = IGNORE_DEVICE,
1949 	},
1950 	{ USB_DEVICE(0x108c, 0x0169), /* ES584.1 */
1951 	.driver_info = IGNORE_DEVICE,
1952 	},
1953 
1954 	{ USB_DEVICE(0x1bc7, 0x0021), /* Telit 3G ACM only composition */
1955 	.driver_info = SEND_ZERO_PACKET,
1956 	},
1957 	{ USB_DEVICE(0x1bc7, 0x0023), /* Telit 3G ACM + ECM composition */
1958 	.driver_info = SEND_ZERO_PACKET,
1959 	},
1960 
1961 	/* Exclude Goodix Fingerprint Reader */
1962 	{ USB_DEVICE(0x27c6, 0x5395),
1963 	.driver_info = IGNORE_DEVICE,
1964 	},
1965 
1966 	/* Exclude Heimann Sensor GmbH USB appset demo */
1967 	{ USB_DEVICE(0x32a7, 0x0000),
1968 	.driver_info = IGNORE_DEVICE,
1969 	},
1970 
1971 	/* control interfaces without any protocol set */
1972 	{ USB_INTERFACE_INFO(USB_CLASS_COMM, USB_CDC_SUBCLASS_ACM,
1973 		USB_CDC_PROTO_NONE) },
1974 
1975 	/* control interfaces with various AT-command sets */
1976 	{ USB_INTERFACE_INFO(USB_CLASS_COMM, USB_CDC_SUBCLASS_ACM,
1977 		USB_CDC_ACM_PROTO_AT_V25TER) },
1978 	{ USB_INTERFACE_INFO(USB_CLASS_COMM, USB_CDC_SUBCLASS_ACM,
1979 		USB_CDC_ACM_PROTO_AT_PCCA101) },
1980 	{ USB_INTERFACE_INFO(USB_CLASS_COMM, USB_CDC_SUBCLASS_ACM,
1981 		USB_CDC_ACM_PROTO_AT_PCCA101_WAKE) },
1982 	{ USB_INTERFACE_INFO(USB_CLASS_COMM, USB_CDC_SUBCLASS_ACM,
1983 		USB_CDC_ACM_PROTO_AT_GSM) },
1984 	{ USB_INTERFACE_INFO(USB_CLASS_COMM, USB_CDC_SUBCLASS_ACM,
1985 		USB_CDC_ACM_PROTO_AT_3G) },
1986 	{ USB_INTERFACE_INFO(USB_CLASS_COMM, USB_CDC_SUBCLASS_ACM,
1987 		USB_CDC_ACM_PROTO_AT_CDMA) },
1988 
1989 	{ USB_DEVICE(0x1519, 0x0452), /* Intel 7260 modem */
1990 	.driver_info = SEND_ZERO_PACKET,
1991 	},
1992 
1993 	{ }
1994 };
1995 
1996 MODULE_DEVICE_TABLE(usb, acm_ids);
1997 
1998 static struct usb_driver acm_driver = {
1999 	.name =		"cdc_acm",
2000 	.probe =	acm_probe,
2001 	.disconnect =	acm_disconnect,
2002 #ifdef CONFIG_PM
2003 	.suspend =	acm_suspend,
2004 	.resume =	acm_resume,
2005 	.reset_resume =	acm_reset_resume,
2006 #endif
2007 	.pre_reset =	acm_pre_reset,
2008 	.id_table =	acm_ids,
2009 #ifdef CONFIG_PM
2010 	.supports_autosuspend = 1,
2011 #endif
2012 	.disable_hub_initiated_lpm = 1,
2013 };
2014 
2015 /*
2016  * TTY driver structures.
2017  */
2018 
2019 static const struct tty_operations acm_ops = {
2020 	.install =		acm_tty_install,
2021 	.open =			acm_tty_open,
2022 	.close =		acm_tty_close,
2023 	.cleanup =		acm_tty_cleanup,
2024 	.hangup =		acm_tty_hangup,
2025 	.write =		acm_tty_write,
2026 	.write_room =		acm_tty_write_room,
2027 	.ioctl =		acm_tty_ioctl,
2028 	.throttle =		acm_tty_throttle,
2029 	.unthrottle =		acm_tty_unthrottle,
2030 	.chars_in_buffer =	acm_tty_chars_in_buffer,
2031 	.break_ctl =		acm_tty_break_ctl,
2032 	.set_termios =		acm_tty_set_termios,
2033 	.tiocmget =		acm_tty_tiocmget,
2034 	.tiocmset =		acm_tty_tiocmset,
2035 	.get_serial =		get_serial_info,
2036 	.set_serial =		set_serial_info,
2037 	.get_icount =		acm_tty_get_icount,
2038 };
2039 
2040 /*
2041  * Init / exit.
2042  */
2043 
acm_init(void)2044 static int __init acm_init(void)
2045 {
2046 	int retval;
2047 	acm_tty_driver = tty_alloc_driver(ACM_TTY_MINORS, TTY_DRIVER_REAL_RAW |
2048 			TTY_DRIVER_DYNAMIC_DEV);
2049 	if (IS_ERR(acm_tty_driver))
2050 		return PTR_ERR(acm_tty_driver);
2051 	acm_tty_driver->driver_name = "acm",
2052 	acm_tty_driver->name = "ttyACM",
2053 	acm_tty_driver->major = ACM_TTY_MAJOR,
2054 	acm_tty_driver->minor_start = 0,
2055 	acm_tty_driver->type = TTY_DRIVER_TYPE_SERIAL,
2056 	acm_tty_driver->subtype = SERIAL_TYPE_NORMAL,
2057 	acm_tty_driver->init_termios = tty_std_termios;
2058 	acm_tty_driver->init_termios.c_cflag = B9600 | CS8 | CREAD |
2059 								HUPCL | CLOCAL;
2060 	tty_set_operations(acm_tty_driver, &acm_ops);
2061 
2062 	retval = tty_register_driver(acm_tty_driver);
2063 	if (retval) {
2064 		tty_driver_kref_put(acm_tty_driver);
2065 		return retval;
2066 	}
2067 
2068 	retval = usb_register(&acm_driver);
2069 	if (retval) {
2070 		tty_unregister_driver(acm_tty_driver);
2071 		tty_driver_kref_put(acm_tty_driver);
2072 		return retval;
2073 	}
2074 
2075 	printk(KERN_INFO KBUILD_MODNAME ": " DRIVER_DESC "\n");
2076 
2077 	return 0;
2078 }
2079 
acm_exit(void)2080 static void __exit acm_exit(void)
2081 {
2082 	usb_deregister(&acm_driver);
2083 	tty_unregister_driver(acm_tty_driver);
2084 	tty_driver_kref_put(acm_tty_driver);
2085 	idr_destroy(&acm_minors);
2086 }
2087 
2088 module_init(acm_init);
2089 module_exit(acm_exit);
2090 
2091 MODULE_AUTHOR(DRIVER_AUTHOR);
2092 MODULE_DESCRIPTION(DRIVER_DESC);
2093 MODULE_LICENSE("GPL");
2094 MODULE_ALIAS_CHARDEV_MAJOR(ACM_TTY_MAJOR);
2095