1 // SPDX-License-Identifier: GPL-2.0+
2 /*
3  * cdc-acm.c
4  *
5  * Copyright (c) 1999 Armin Fuerst	<fuerst@in.tum.de>
6  * Copyright (c) 1999 Pavel Machek	<pavel@ucw.cz>
7  * Copyright (c) 1999 Johannes Erdfelt	<johannes@erdfelt.com>
8  * Copyright (c) 2000 Vojtech Pavlik	<vojtech@suse.cz>
9  * Copyright (c) 2004 Oliver Neukum	<oliver@neukum.name>
10  * Copyright (c) 2005 David Kubicek	<dave@awk.cz>
11  * Copyright (c) 2011 Johan Hovold	<jhovold@gmail.com>
12  *
13  * USB Abstract Control Model driver for USB modems and ISDN adapters
14  *
15  * Sponsored by SuSE
16  */
17 
18 #undef DEBUG
19 #undef VERBOSE_DEBUG
20 
21 #include <linux/kernel.h>
22 #include <linux/sched/signal.h>
23 #include <linux/errno.h>
24 #include <linux/init.h>
25 #include <linux/slab.h>
26 #include <linux/log2.h>
27 #include <linux/tty.h>
28 #include <linux/serial.h>
29 #include <linux/tty_driver.h>
30 #include <linux/tty_flip.h>
31 #include <linux/module.h>
32 #include <linux/mutex.h>
33 #include <linux/uaccess.h>
34 #include <linux/usb.h>
35 #include <linux/usb/cdc.h>
36 #include <asm/byteorder.h>
37 #include <asm/unaligned.h>
38 #include <linux/idr.h>
39 #include <linux/list.h>
40 
41 #include "cdc-acm.h"
42 
43 
44 #define DRIVER_AUTHOR "Armin Fuerst, Pavel Machek, Johannes Erdfelt, Vojtech Pavlik, David Kubicek, Johan Hovold"
45 #define DRIVER_DESC "USB Abstract Control Model driver for USB modems and ISDN adapters"
46 
47 static struct usb_driver acm_driver;
48 static struct tty_driver *acm_tty_driver;
49 
50 static DEFINE_IDR(acm_minors);
51 static DEFINE_MUTEX(acm_minors_lock);
52 
53 static void acm_tty_set_termios(struct tty_struct *tty,
54 				struct ktermios *termios_old);
55 
56 /*
57  * acm_minors accessors
58  */
59 
60 /*
61  * Look up an ACM structure by minor. If found and not disconnected, increment
62  * its refcount and return it with its mutex held.
63  */
acm_get_by_minor(unsigned int minor)64 static struct acm *acm_get_by_minor(unsigned int minor)
65 {
66 	struct acm *acm;
67 
68 	mutex_lock(&acm_minors_lock);
69 	acm = idr_find(&acm_minors, minor);
70 	if (acm) {
71 		mutex_lock(&acm->mutex);
72 		if (acm->disconnected) {
73 			mutex_unlock(&acm->mutex);
74 			acm = NULL;
75 		} else {
76 			tty_port_get(&acm->port);
77 			mutex_unlock(&acm->mutex);
78 		}
79 	}
80 	mutex_unlock(&acm_minors_lock);
81 	return acm;
82 }
83 
84 /*
85  * Try to find an available minor number and if found, associate it with 'acm'.
86  */
acm_alloc_minor(struct acm * acm)87 static int acm_alloc_minor(struct acm *acm)
88 {
89 	int minor;
90 
91 	mutex_lock(&acm_minors_lock);
92 	minor = idr_alloc(&acm_minors, acm, 0, ACM_TTY_MINORS, GFP_KERNEL);
93 	mutex_unlock(&acm_minors_lock);
94 
95 	return minor;
96 }
97 
98 /* Release the minor number associated with 'acm'.  */
acm_release_minor(struct acm * acm)99 static void acm_release_minor(struct acm *acm)
100 {
101 	mutex_lock(&acm_minors_lock);
102 	idr_remove(&acm_minors, acm->minor);
103 	mutex_unlock(&acm_minors_lock);
104 }
105 
106 /*
107  * Functions for ACM control messages.
108  */
109 
acm_ctrl_msg(struct acm * acm,int request,int value,void * buf,int len)110 static int acm_ctrl_msg(struct acm *acm, int request, int value,
111 							void *buf, int len)
112 {
113 	int retval;
114 
115 	retval = usb_autopm_get_interface(acm->control);
116 	if (retval)
117 		return retval;
118 
119 	retval = usb_control_msg(acm->dev, usb_sndctrlpipe(acm->dev, 0),
120 		request, USB_RT_ACM, value,
121 		acm->control->altsetting[0].desc.bInterfaceNumber,
122 		buf, len, 5000);
123 
124 	dev_dbg(&acm->control->dev,
125 		"%s - rq 0x%02x, val %#x, len %#x, result %d\n",
126 		__func__, request, value, len, retval);
127 
128 	usb_autopm_put_interface(acm->control);
129 
130 	return retval < 0 ? retval : 0;
131 }
132 
133 /* devices aren't required to support these requests.
134  * the cdc acm descriptor tells whether they do...
135  */
acm_set_control(struct acm * acm,int control)136 static inline int acm_set_control(struct acm *acm, int control)
137 {
138 	if (acm->quirks & QUIRK_CONTROL_LINE_STATE)
139 		return -EOPNOTSUPP;
140 
141 	return acm_ctrl_msg(acm, USB_CDC_REQ_SET_CONTROL_LINE_STATE,
142 			control, NULL, 0);
143 }
144 
145 #define acm_set_line(acm, line) \
146 	acm_ctrl_msg(acm, USB_CDC_REQ_SET_LINE_CODING, 0, line, sizeof *(line))
147 #define acm_send_break(acm, ms) \
148 	acm_ctrl_msg(acm, USB_CDC_REQ_SEND_BREAK, ms, NULL, 0)
149 
acm_kill_urbs(struct acm * acm)150 static void acm_kill_urbs(struct acm *acm)
151 {
152 	int i;
153 
154 	usb_kill_urb(acm->ctrlurb);
155 	for (i = 0; i < ACM_NW; i++)
156 		usb_kill_urb(acm->wb[i].urb);
157 	for (i = 0; i < acm->rx_buflimit; i++)
158 		usb_kill_urb(acm->read_urbs[i]);
159 }
160 
161 /*
162  * Write buffer management.
163  * All of these assume proper locks taken by the caller.
164  */
165 
acm_wb_alloc(struct acm * acm)166 static int acm_wb_alloc(struct acm *acm)
167 {
168 	int i, wbn;
169 	struct acm_wb *wb;
170 
171 	wbn = 0;
172 	i = 0;
173 	for (;;) {
174 		wb = &acm->wb[wbn];
175 		if (!wb->use) {
176 			wb->use = 1;
177 			wb->len = 0;
178 			return wbn;
179 		}
180 		wbn = (wbn + 1) % ACM_NW;
181 		if (++i >= ACM_NW)
182 			return -1;
183 	}
184 }
185 
acm_wb_is_avail(struct acm * acm)186 static int acm_wb_is_avail(struct acm *acm)
187 {
188 	int i, n;
189 	unsigned long flags;
190 
191 	n = ACM_NW;
192 	spin_lock_irqsave(&acm->write_lock, flags);
193 	for (i = 0; i < ACM_NW; i++)
194 		n -= acm->wb[i].use;
195 	spin_unlock_irqrestore(&acm->write_lock, flags);
196 	return n;
197 }
198 
199 /*
200  * Finish write. Caller must hold acm->write_lock
201  */
acm_write_done(struct acm * acm,struct acm_wb * wb)202 static void acm_write_done(struct acm *acm, struct acm_wb *wb)
203 {
204 	wb->use = 0;
205 	acm->transmitting--;
206 	usb_autopm_put_interface_async(acm->control);
207 }
208 
209 /*
210  * Poke write.
211  *
212  * the caller is responsible for locking
213  */
214 
acm_start_wb(struct acm * acm,struct acm_wb * wb)215 static int acm_start_wb(struct acm *acm, struct acm_wb *wb)
216 {
217 	int rc;
218 
219 	acm->transmitting++;
220 
221 	wb->urb->transfer_buffer = wb->buf;
222 	wb->urb->transfer_dma = wb->dmah;
223 	wb->urb->transfer_buffer_length = wb->len;
224 	wb->urb->dev = acm->dev;
225 
226 	rc = usb_submit_urb(wb->urb, GFP_ATOMIC);
227 	if (rc < 0) {
228 		dev_err(&acm->data->dev,
229 			"%s - usb_submit_urb(write bulk) failed: %d\n",
230 			__func__, rc);
231 		acm_write_done(acm, wb);
232 	}
233 	return rc;
234 }
235 
236 /*
237  * attributes exported through sysfs
238  */
bmCapabilities_show(struct device * dev,struct device_attribute * attr,char * buf)239 static ssize_t bmCapabilities_show
240 (struct device *dev, struct device_attribute *attr, char *buf)
241 {
242 	struct usb_interface *intf = to_usb_interface(dev);
243 	struct acm *acm = usb_get_intfdata(intf);
244 
245 	return sprintf(buf, "%d", acm->ctrl_caps);
246 }
247 static DEVICE_ATTR_RO(bmCapabilities);
248 
wCountryCodes_show(struct device * dev,struct device_attribute * attr,char * buf)249 static ssize_t wCountryCodes_show
250 (struct device *dev, struct device_attribute *attr, char *buf)
251 {
252 	struct usb_interface *intf = to_usb_interface(dev);
253 	struct acm *acm = usb_get_intfdata(intf);
254 
255 	memcpy(buf, acm->country_codes, acm->country_code_size);
256 	return acm->country_code_size;
257 }
258 
259 static DEVICE_ATTR_RO(wCountryCodes);
260 
iCountryCodeRelDate_show(struct device * dev,struct device_attribute * attr,char * buf)261 static ssize_t iCountryCodeRelDate_show
262 (struct device *dev, struct device_attribute *attr, char *buf)
263 {
264 	struct usb_interface *intf = to_usb_interface(dev);
265 	struct acm *acm = usb_get_intfdata(intf);
266 
267 	return sprintf(buf, "%d", acm->country_rel_date);
268 }
269 
270 static DEVICE_ATTR_RO(iCountryCodeRelDate);
271 /*
272  * Interrupt handlers for various ACM device responses
273  */
274 
acm_process_notification(struct acm * acm,unsigned char * buf)275 static void acm_process_notification(struct acm *acm, unsigned char *buf)
276 {
277 	int newctrl;
278 	int difference;
279 	unsigned long flags;
280 	struct usb_cdc_notification *dr = (struct usb_cdc_notification *)buf;
281 	unsigned char *data = buf + sizeof(struct usb_cdc_notification);
282 
283 	switch (dr->bNotificationType) {
284 	case USB_CDC_NOTIFY_NETWORK_CONNECTION:
285 		dev_dbg(&acm->control->dev,
286 			"%s - network connection: %d\n", __func__, dr->wValue);
287 		break;
288 
289 	case USB_CDC_NOTIFY_SERIAL_STATE:
290 		if (le16_to_cpu(dr->wLength) != 2) {
291 			dev_dbg(&acm->control->dev,
292 				"%s - malformed serial state\n", __func__);
293 			break;
294 		}
295 
296 		newctrl = get_unaligned_le16(data);
297 		dev_dbg(&acm->control->dev,
298 			"%s - serial state: 0x%x\n", __func__, newctrl);
299 
300 		if (!acm->clocal && (acm->ctrlin & ~newctrl & ACM_CTRL_DCD)) {
301 			dev_dbg(&acm->control->dev,
302 				"%s - calling hangup\n", __func__);
303 			tty_port_tty_hangup(&acm->port, false);
304 		}
305 
306 		difference = acm->ctrlin ^ newctrl;
307 		spin_lock_irqsave(&acm->read_lock, flags);
308 		acm->ctrlin = newctrl;
309 		acm->oldcount = acm->iocount;
310 
311 		if (difference & ACM_CTRL_DSR)
312 			acm->iocount.dsr++;
313 		if (difference & ACM_CTRL_DCD)
314 			acm->iocount.dcd++;
315 		if (newctrl & ACM_CTRL_BRK)
316 			acm->iocount.brk++;
317 		if (newctrl & ACM_CTRL_RI)
318 			acm->iocount.rng++;
319 		if (newctrl & ACM_CTRL_FRAMING)
320 			acm->iocount.frame++;
321 		if (newctrl & ACM_CTRL_PARITY)
322 			acm->iocount.parity++;
323 		if (newctrl & ACM_CTRL_OVERRUN)
324 			acm->iocount.overrun++;
325 		spin_unlock_irqrestore(&acm->read_lock, flags);
326 
327 		if (difference)
328 			wake_up_all(&acm->wioctl);
329 
330 		break;
331 
332 	default:
333 		dev_dbg(&acm->control->dev,
334 			"%s - unknown notification %d received: index %d len %d\n",
335 			__func__,
336 			dr->bNotificationType, dr->wIndex, dr->wLength);
337 	}
338 }
339 
340 /* control interface reports status changes with "interrupt" transfers */
acm_ctrl_irq(struct urb * urb)341 static void acm_ctrl_irq(struct urb *urb)
342 {
343 	struct acm *acm = urb->context;
344 	struct usb_cdc_notification *dr = urb->transfer_buffer;
345 	unsigned int current_size = urb->actual_length;
346 	unsigned int expected_size, copy_size, alloc_size;
347 	int retval;
348 	int status = urb->status;
349 
350 	switch (status) {
351 	case 0:
352 		/* success */
353 		break;
354 	case -ECONNRESET:
355 	case -ENOENT:
356 	case -ESHUTDOWN:
357 		/* this urb is terminated, clean up */
358 		dev_dbg(&acm->control->dev,
359 			"%s - urb shutting down with status: %d\n",
360 			__func__, status);
361 		return;
362 	default:
363 		dev_dbg(&acm->control->dev,
364 			"%s - nonzero urb status received: %d\n",
365 			__func__, status);
366 		goto exit;
367 	}
368 
369 	usb_mark_last_busy(acm->dev);
370 
371 	if (acm->nb_index)
372 		dr = (struct usb_cdc_notification *)acm->notification_buffer;
373 
374 	/* size = notification-header + (optional) data */
375 	expected_size = sizeof(struct usb_cdc_notification) +
376 					le16_to_cpu(dr->wLength);
377 
378 	if (current_size < expected_size) {
379 		/* notification is transmitted fragmented, reassemble */
380 		if (acm->nb_size < expected_size) {
381 			if (acm->nb_size) {
382 				kfree(acm->notification_buffer);
383 				acm->nb_size = 0;
384 			}
385 			alloc_size = roundup_pow_of_two(expected_size);
386 			/*
387 			 * kmalloc ensures a valid notification_buffer after a
388 			 * use of kfree in case the previous allocation was too
389 			 * small. Final freeing is done on disconnect.
390 			 */
391 			acm->notification_buffer =
392 				kmalloc(alloc_size, GFP_ATOMIC);
393 			if (!acm->notification_buffer)
394 				goto exit;
395 			acm->nb_size = alloc_size;
396 		}
397 
398 		copy_size = min(current_size,
399 				expected_size - acm->nb_index);
400 
401 		memcpy(&acm->notification_buffer[acm->nb_index],
402 		       urb->transfer_buffer, copy_size);
403 		acm->nb_index += copy_size;
404 		current_size = acm->nb_index;
405 	}
406 
407 	if (current_size >= expected_size) {
408 		/* notification complete */
409 		acm_process_notification(acm, (unsigned char *)dr);
410 		acm->nb_index = 0;
411 	}
412 
413 exit:
414 	retval = usb_submit_urb(urb, GFP_ATOMIC);
415 	if (retval && retval != -EPERM)
416 		dev_err(&acm->control->dev,
417 			"%s - usb_submit_urb failed: %d\n", __func__, retval);
418 }
419 
acm_submit_read_urb(struct acm * acm,int index,gfp_t mem_flags)420 static int acm_submit_read_urb(struct acm *acm, int index, gfp_t mem_flags)
421 {
422 	int res;
423 
424 	if (!test_and_clear_bit(index, &acm->read_urbs_free))
425 		return 0;
426 
427 	res = usb_submit_urb(acm->read_urbs[index], mem_flags);
428 	if (res) {
429 		if (res != -EPERM && res != -ENODEV) {
430 			dev_err(&acm->data->dev,
431 				"urb %d failed submission with %d\n",
432 				index, res);
433 		}
434 		set_bit(index, &acm->read_urbs_free);
435 		return res;
436 	} else {
437 		dev_vdbg(&acm->data->dev, "submitted urb %d\n", index);
438 	}
439 
440 	return 0;
441 }
442 
acm_submit_read_urbs(struct acm * acm,gfp_t mem_flags)443 static int acm_submit_read_urbs(struct acm *acm, gfp_t mem_flags)
444 {
445 	int res;
446 	int i;
447 
448 	for (i = 0; i < acm->rx_buflimit; ++i) {
449 		res = acm_submit_read_urb(acm, i, mem_flags);
450 		if (res)
451 			return res;
452 	}
453 
454 	return 0;
455 }
456 
acm_process_read_urb(struct acm * acm,struct urb * urb)457 static void acm_process_read_urb(struct acm *acm, struct urb *urb)
458 {
459 	if (!urb->actual_length)
460 		return;
461 
462 	tty_insert_flip_string(&acm->port, urb->transfer_buffer,
463 			urb->actual_length);
464 	tty_flip_buffer_push(&acm->port);
465 }
466 
acm_read_bulk_callback(struct urb * urb)467 static void acm_read_bulk_callback(struct urb *urb)
468 {
469 	struct acm_rb *rb = urb->context;
470 	struct acm *acm = rb->instance;
471 	unsigned long flags;
472 	int status = urb->status;
473 
474 	dev_vdbg(&acm->data->dev, "got urb %d, len %d, status %d\n",
475 		rb->index, urb->actual_length, status);
476 
477 	set_bit(rb->index, &acm->read_urbs_free);
478 
479 	if (!acm->dev) {
480 		dev_dbg(&acm->data->dev, "%s - disconnected\n", __func__);
481 		return;
482 	}
483 
484 	switch (status) {
485 	case 0:
486 		usb_mark_last_busy(acm->dev);
487 		acm_process_read_urb(acm, urb);
488 		break;
489 	case -EPIPE:
490 		set_bit(EVENT_RX_STALL, &acm->flags);
491 		schedule_work(&acm->work);
492 		return;
493 	case -ENOENT:
494 	case -ECONNRESET:
495 	case -ESHUTDOWN:
496 		dev_dbg(&acm->data->dev,
497 			"%s - urb shutting down with status: %d\n",
498 			__func__, status);
499 		return;
500 	default:
501 		dev_dbg(&acm->data->dev,
502 			"%s - nonzero urb status received: %d\n",
503 			__func__, status);
504 		break;
505 	}
506 
507 	/*
508 	 * Unthrottle may run on another CPU which needs to see events
509 	 * in the same order. Submission has an implict barrier
510 	 */
511 	smp_mb__before_atomic();
512 
513 	/* throttle device if requested by tty */
514 	spin_lock_irqsave(&acm->read_lock, flags);
515 	acm->throttled = acm->throttle_req;
516 	if (!acm->throttled) {
517 		spin_unlock_irqrestore(&acm->read_lock, flags);
518 		acm_submit_read_urb(acm, rb->index, GFP_ATOMIC);
519 	} else {
520 		spin_unlock_irqrestore(&acm->read_lock, flags);
521 	}
522 }
523 
524 /* data interface wrote those outgoing bytes */
acm_write_bulk(struct urb * urb)525 static void acm_write_bulk(struct urb *urb)
526 {
527 	struct acm_wb *wb = urb->context;
528 	struct acm *acm = wb->instance;
529 	unsigned long flags;
530 	int status = urb->status;
531 
532 	if (status || (urb->actual_length != urb->transfer_buffer_length))
533 		dev_vdbg(&acm->data->dev, "wrote len %d/%d, status %d\n",
534 			urb->actual_length,
535 			urb->transfer_buffer_length,
536 			status);
537 
538 	spin_lock_irqsave(&acm->write_lock, flags);
539 	acm_write_done(acm, wb);
540 	spin_unlock_irqrestore(&acm->write_lock, flags);
541 	set_bit(EVENT_TTY_WAKEUP, &acm->flags);
542 	schedule_work(&acm->work);
543 }
544 
acm_softint(struct work_struct * work)545 static void acm_softint(struct work_struct *work)
546 {
547 	int i;
548 	struct acm *acm = container_of(work, struct acm, work);
549 
550 	if (test_bit(EVENT_RX_STALL, &acm->flags)) {
551 		if (!(usb_autopm_get_interface(acm->data))) {
552 			for (i = 0; i < acm->rx_buflimit; i++)
553 				usb_kill_urb(acm->read_urbs[i]);
554 			usb_clear_halt(acm->dev, acm->in);
555 			acm_submit_read_urbs(acm, GFP_KERNEL);
556 			usb_autopm_put_interface(acm->data);
557 		}
558 		clear_bit(EVENT_RX_STALL, &acm->flags);
559 	}
560 
561 	if (test_bit(EVENT_TTY_WAKEUP, &acm->flags)) {
562 		tty_port_tty_wakeup(&acm->port);
563 		clear_bit(EVENT_TTY_WAKEUP, &acm->flags);
564 	}
565 }
566 
567 /*
568  * TTY handlers
569  */
570 
acm_tty_install(struct tty_driver * driver,struct tty_struct * tty)571 static int acm_tty_install(struct tty_driver *driver, struct tty_struct *tty)
572 {
573 	struct acm *acm;
574 	int retval;
575 
576 	acm = acm_get_by_minor(tty->index);
577 	if (!acm)
578 		return -ENODEV;
579 
580 	retval = tty_standard_install(driver, tty);
581 	if (retval)
582 		goto error_init_termios;
583 
584 	tty->driver_data = acm;
585 
586 	return 0;
587 
588 error_init_termios:
589 	tty_port_put(&acm->port);
590 	return retval;
591 }
592 
acm_tty_open(struct tty_struct * tty,struct file * filp)593 static int acm_tty_open(struct tty_struct *tty, struct file *filp)
594 {
595 	struct acm *acm = tty->driver_data;
596 
597 	return tty_port_open(&acm->port, tty, filp);
598 }
599 
acm_port_dtr_rts(struct tty_port * port,int raise)600 static void acm_port_dtr_rts(struct tty_port *port, int raise)
601 {
602 	struct acm *acm = container_of(port, struct acm, port);
603 	int val;
604 	int res;
605 
606 	if (raise)
607 		val = ACM_CTRL_DTR | ACM_CTRL_RTS;
608 	else
609 		val = 0;
610 
611 	/* FIXME: add missing ctrlout locking throughout driver */
612 	acm->ctrlout = val;
613 
614 	res = acm_set_control(acm, val);
615 	if (res && (acm->ctrl_caps & USB_CDC_CAP_LINE))
616 		dev_err(&acm->control->dev, "failed to set dtr/rts\n");
617 }
618 
acm_port_activate(struct tty_port * port,struct tty_struct * tty)619 static int acm_port_activate(struct tty_port *port, struct tty_struct *tty)
620 {
621 	struct acm *acm = container_of(port, struct acm, port);
622 	int retval = -ENODEV;
623 	int i;
624 
625 	mutex_lock(&acm->mutex);
626 	if (acm->disconnected)
627 		goto disconnected;
628 
629 	retval = usb_autopm_get_interface(acm->control);
630 	if (retval)
631 		goto error_get_interface;
632 
633 	/*
634 	 * FIXME: Why do we need this? Allocating 64K of physically contiguous
635 	 * memory is really nasty...
636 	 */
637 	set_bit(TTY_NO_WRITE_SPLIT, &tty->flags);
638 	acm->control->needs_remote_wakeup = 1;
639 
640 	acm->ctrlurb->dev = acm->dev;
641 	retval = usb_submit_urb(acm->ctrlurb, GFP_KERNEL);
642 	if (retval) {
643 		dev_err(&acm->control->dev,
644 			"%s - usb_submit_urb(ctrl irq) failed\n", __func__);
645 		goto error_submit_urb;
646 	}
647 
648 	acm_tty_set_termios(tty, NULL);
649 
650 	/*
651 	 * Unthrottle device in case the TTY was closed while throttled.
652 	 */
653 	spin_lock_irq(&acm->read_lock);
654 	acm->throttled = 0;
655 	acm->throttle_req = 0;
656 	spin_unlock_irq(&acm->read_lock);
657 
658 	retval = acm_submit_read_urbs(acm, GFP_KERNEL);
659 	if (retval)
660 		goto error_submit_read_urbs;
661 
662 	usb_autopm_put_interface(acm->control);
663 
664 	mutex_unlock(&acm->mutex);
665 
666 	return 0;
667 
668 error_submit_read_urbs:
669 	for (i = 0; i < acm->rx_buflimit; i++)
670 		usb_kill_urb(acm->read_urbs[i]);
671 	usb_kill_urb(acm->ctrlurb);
672 error_submit_urb:
673 	usb_autopm_put_interface(acm->control);
674 error_get_interface:
675 disconnected:
676 	mutex_unlock(&acm->mutex);
677 
678 	return usb_translate_errors(retval);
679 }
680 
acm_port_destruct(struct tty_port * port)681 static void acm_port_destruct(struct tty_port *port)
682 {
683 	struct acm *acm = container_of(port, struct acm, port);
684 
685 	acm_release_minor(acm);
686 	usb_put_intf(acm->control);
687 	kfree(acm->country_codes);
688 	kfree(acm);
689 }
690 
acm_port_shutdown(struct tty_port * port)691 static void acm_port_shutdown(struct tty_port *port)
692 {
693 	struct acm *acm = container_of(port, struct acm, port);
694 	struct urb *urb;
695 	struct acm_wb *wb;
696 
697 	/*
698 	 * Need to grab write_lock to prevent race with resume, but no need to
699 	 * hold it due to the tty-port initialised flag.
700 	 */
701 	spin_lock_irq(&acm->write_lock);
702 	spin_unlock_irq(&acm->write_lock);
703 
704 	usb_autopm_get_interface_no_resume(acm->control);
705 	acm->control->needs_remote_wakeup = 0;
706 	usb_autopm_put_interface(acm->control);
707 
708 	for (;;) {
709 		urb = usb_get_from_anchor(&acm->delayed);
710 		if (!urb)
711 			break;
712 		wb = urb->context;
713 		wb->use = 0;
714 		usb_autopm_put_interface_async(acm->control);
715 	}
716 
717 	acm_kill_urbs(acm);
718 }
719 
acm_tty_cleanup(struct tty_struct * tty)720 static void acm_tty_cleanup(struct tty_struct *tty)
721 {
722 	struct acm *acm = tty->driver_data;
723 
724 	tty_port_put(&acm->port);
725 }
726 
acm_tty_hangup(struct tty_struct * tty)727 static void acm_tty_hangup(struct tty_struct *tty)
728 {
729 	struct acm *acm = tty->driver_data;
730 
731 	tty_port_hangup(&acm->port);
732 }
733 
acm_tty_close(struct tty_struct * tty,struct file * filp)734 static void acm_tty_close(struct tty_struct *tty, struct file *filp)
735 {
736 	struct acm *acm = tty->driver_data;
737 
738 	tty_port_close(&acm->port, tty, filp);
739 }
740 
acm_tty_write(struct tty_struct * tty,const unsigned char * buf,int count)741 static int acm_tty_write(struct tty_struct *tty,
742 					const unsigned char *buf, int count)
743 {
744 	struct acm *acm = tty->driver_data;
745 	int stat;
746 	unsigned long flags;
747 	int wbn;
748 	struct acm_wb *wb;
749 
750 	if (!count)
751 		return 0;
752 
753 	dev_vdbg(&acm->data->dev, "%d bytes from tty layer\n", count);
754 
755 	spin_lock_irqsave(&acm->write_lock, flags);
756 	wbn = acm_wb_alloc(acm);
757 	if (wbn < 0) {
758 		spin_unlock_irqrestore(&acm->write_lock, flags);
759 		return 0;
760 	}
761 	wb = &acm->wb[wbn];
762 
763 	if (!acm->dev) {
764 		wb->use = 0;
765 		spin_unlock_irqrestore(&acm->write_lock, flags);
766 		return -ENODEV;
767 	}
768 
769 	count = (count > acm->writesize) ? acm->writesize : count;
770 	dev_vdbg(&acm->data->dev, "writing %d bytes\n", count);
771 	memcpy(wb->buf, buf, count);
772 	wb->len = count;
773 
774 	stat = usb_autopm_get_interface_async(acm->control);
775 	if (stat) {
776 		wb->use = 0;
777 		spin_unlock_irqrestore(&acm->write_lock, flags);
778 		return stat;
779 	}
780 
781 	if (acm->susp_count) {
782 		usb_anchor_urb(wb->urb, &acm->delayed);
783 		spin_unlock_irqrestore(&acm->write_lock, flags);
784 		return count;
785 	}
786 
787 	stat = acm_start_wb(acm, wb);
788 	spin_unlock_irqrestore(&acm->write_lock, flags);
789 
790 	if (stat < 0)
791 		return stat;
792 	return count;
793 }
794 
acm_tty_write_room(struct tty_struct * tty)795 static int acm_tty_write_room(struct tty_struct *tty)
796 {
797 	struct acm *acm = tty->driver_data;
798 	/*
799 	 * Do not let the line discipline to know that we have a reserve,
800 	 * or it might get too enthusiastic.
801 	 */
802 	return acm_wb_is_avail(acm) ? acm->writesize : 0;
803 }
804 
acm_tty_chars_in_buffer(struct tty_struct * tty)805 static int acm_tty_chars_in_buffer(struct tty_struct *tty)
806 {
807 	struct acm *acm = tty->driver_data;
808 	/*
809 	 * if the device was unplugged then any remaining characters fell out
810 	 * of the connector ;)
811 	 */
812 	if (acm->disconnected)
813 		return 0;
814 	/*
815 	 * This is inaccurate (overcounts), but it works.
816 	 */
817 	return (ACM_NW - acm_wb_is_avail(acm)) * acm->writesize;
818 }
819 
acm_tty_throttle(struct tty_struct * tty)820 static void acm_tty_throttle(struct tty_struct *tty)
821 {
822 	struct acm *acm = tty->driver_data;
823 
824 	spin_lock_irq(&acm->read_lock);
825 	acm->throttle_req = 1;
826 	spin_unlock_irq(&acm->read_lock);
827 }
828 
acm_tty_unthrottle(struct tty_struct * tty)829 static void acm_tty_unthrottle(struct tty_struct *tty)
830 {
831 	struct acm *acm = tty->driver_data;
832 	unsigned int was_throttled;
833 
834 	spin_lock_irq(&acm->read_lock);
835 	was_throttled = acm->throttled;
836 	acm->throttled = 0;
837 	acm->throttle_req = 0;
838 	spin_unlock_irq(&acm->read_lock);
839 
840 	if (was_throttled)
841 		acm_submit_read_urbs(acm, GFP_KERNEL);
842 }
843 
acm_tty_break_ctl(struct tty_struct * tty,int state)844 static int acm_tty_break_ctl(struct tty_struct *tty, int state)
845 {
846 	struct acm *acm = tty->driver_data;
847 	int retval;
848 
849 	retval = acm_send_break(acm, state ? 0xffff : 0);
850 	if (retval < 0)
851 		dev_dbg(&acm->control->dev,
852 			"%s - send break failed\n", __func__);
853 	return retval;
854 }
855 
acm_tty_tiocmget(struct tty_struct * tty)856 static int acm_tty_tiocmget(struct tty_struct *tty)
857 {
858 	struct acm *acm = tty->driver_data;
859 
860 	return (acm->ctrlout & ACM_CTRL_DTR ? TIOCM_DTR : 0) |
861 	       (acm->ctrlout & ACM_CTRL_RTS ? TIOCM_RTS : 0) |
862 	       (acm->ctrlin  & ACM_CTRL_DSR ? TIOCM_DSR : 0) |
863 	       (acm->ctrlin  & ACM_CTRL_RI  ? TIOCM_RI  : 0) |
864 	       (acm->ctrlin  & ACM_CTRL_DCD ? TIOCM_CD  : 0) |
865 	       TIOCM_CTS;
866 }
867 
acm_tty_tiocmset(struct tty_struct * tty,unsigned int set,unsigned int clear)868 static int acm_tty_tiocmset(struct tty_struct *tty,
869 			    unsigned int set, unsigned int clear)
870 {
871 	struct acm *acm = tty->driver_data;
872 	unsigned int newctrl;
873 
874 	newctrl = acm->ctrlout;
875 	set = (set & TIOCM_DTR ? ACM_CTRL_DTR : 0) |
876 					(set & TIOCM_RTS ? ACM_CTRL_RTS : 0);
877 	clear = (clear & TIOCM_DTR ? ACM_CTRL_DTR : 0) |
878 					(clear & TIOCM_RTS ? ACM_CTRL_RTS : 0);
879 
880 	newctrl = (newctrl & ~clear) | set;
881 
882 	if (acm->ctrlout == newctrl)
883 		return 0;
884 	return acm_set_control(acm, acm->ctrlout = newctrl);
885 }
886 
get_serial_info(struct acm * acm,struct serial_struct __user * info)887 static int get_serial_info(struct acm *acm, struct serial_struct __user *info)
888 {
889 	struct serial_struct tmp;
890 
891 	memset(&tmp, 0, sizeof(tmp));
892 	tmp.xmit_fifo_size = acm->writesize;
893 	tmp.baud_base = le32_to_cpu(acm->line.dwDTERate);
894 	tmp.close_delay	= acm->port.close_delay / 10;
895 	tmp.closing_wait = acm->port.closing_wait == ASYNC_CLOSING_WAIT_NONE ?
896 				ASYNC_CLOSING_WAIT_NONE :
897 				acm->port.closing_wait / 10;
898 
899 	if (copy_to_user(info, &tmp, sizeof(tmp)))
900 		return -EFAULT;
901 	else
902 		return 0;
903 }
904 
set_serial_info(struct acm * acm,struct serial_struct __user * newinfo)905 static int set_serial_info(struct acm *acm,
906 				struct serial_struct __user *newinfo)
907 {
908 	struct serial_struct new_serial;
909 	unsigned int closing_wait, close_delay;
910 	int retval = 0;
911 
912 	if (copy_from_user(&new_serial, newinfo, sizeof(new_serial)))
913 		return -EFAULT;
914 
915 	close_delay = new_serial.close_delay * 10;
916 	closing_wait = new_serial.closing_wait == ASYNC_CLOSING_WAIT_NONE ?
917 			ASYNC_CLOSING_WAIT_NONE : new_serial.closing_wait * 10;
918 
919 	mutex_lock(&acm->port.mutex);
920 
921 	if (!capable(CAP_SYS_ADMIN)) {
922 		if ((close_delay != acm->port.close_delay) ||
923 		    (closing_wait != acm->port.closing_wait))
924 			retval = -EPERM;
925 		else
926 			retval = -EOPNOTSUPP;
927 	} else {
928 		acm->port.close_delay  = close_delay;
929 		acm->port.closing_wait = closing_wait;
930 	}
931 
932 	mutex_unlock(&acm->port.mutex);
933 	return retval;
934 }
935 
wait_serial_change(struct acm * acm,unsigned long arg)936 static int wait_serial_change(struct acm *acm, unsigned long arg)
937 {
938 	int rv = 0;
939 	DECLARE_WAITQUEUE(wait, current);
940 	struct async_icount old, new;
941 
942 	do {
943 		spin_lock_irq(&acm->read_lock);
944 		old = acm->oldcount;
945 		new = acm->iocount;
946 		acm->oldcount = new;
947 		spin_unlock_irq(&acm->read_lock);
948 
949 		if ((arg & TIOCM_DSR) &&
950 			old.dsr != new.dsr)
951 			break;
952 		if ((arg & TIOCM_CD)  &&
953 			old.dcd != new.dcd)
954 			break;
955 		if ((arg & TIOCM_RI) &&
956 			old.rng != new.rng)
957 			break;
958 
959 		add_wait_queue(&acm->wioctl, &wait);
960 		set_current_state(TASK_INTERRUPTIBLE);
961 		schedule();
962 		remove_wait_queue(&acm->wioctl, &wait);
963 		if (acm->disconnected) {
964 			if (arg & TIOCM_CD)
965 				break;
966 			else
967 				rv = -ENODEV;
968 		} else {
969 			if (signal_pending(current))
970 				rv = -ERESTARTSYS;
971 		}
972 	} while (!rv);
973 
974 
975 
976 	return rv;
977 }
978 
acm_tty_get_icount(struct tty_struct * tty,struct serial_icounter_struct * icount)979 static int acm_tty_get_icount(struct tty_struct *tty,
980 					struct serial_icounter_struct *icount)
981 {
982 	struct acm *acm = tty->driver_data;
983 
984 	icount->dsr = acm->iocount.dsr;
985 	icount->rng = acm->iocount.rng;
986 	icount->dcd = acm->iocount.dcd;
987 	icount->frame = acm->iocount.frame;
988 	icount->overrun = acm->iocount.overrun;
989 	icount->parity = acm->iocount.parity;
990 	icount->brk = acm->iocount.brk;
991 
992 	return 0;
993 }
994 
acm_tty_ioctl(struct tty_struct * tty,unsigned int cmd,unsigned long arg)995 static int acm_tty_ioctl(struct tty_struct *tty,
996 					unsigned int cmd, unsigned long arg)
997 {
998 	struct acm *acm = tty->driver_data;
999 	int rv = -ENOIOCTLCMD;
1000 
1001 	switch (cmd) {
1002 	case TIOCGSERIAL: /* gets serial port data */
1003 		rv = get_serial_info(acm, (struct serial_struct __user *) arg);
1004 		break;
1005 	case TIOCSSERIAL:
1006 		rv = set_serial_info(acm, (struct serial_struct __user *) arg);
1007 		break;
1008 	case TIOCMIWAIT:
1009 		rv = usb_autopm_get_interface(acm->control);
1010 		if (rv < 0) {
1011 			rv = -EIO;
1012 			break;
1013 		}
1014 		rv = wait_serial_change(acm, arg);
1015 		usb_autopm_put_interface(acm->control);
1016 		break;
1017 	}
1018 
1019 	return rv;
1020 }
1021 
acm_tty_set_termios(struct tty_struct * tty,struct ktermios * termios_old)1022 static void acm_tty_set_termios(struct tty_struct *tty,
1023 						struct ktermios *termios_old)
1024 {
1025 	struct acm *acm = tty->driver_data;
1026 	struct ktermios *termios = &tty->termios;
1027 	struct usb_cdc_line_coding newline;
1028 	int newctrl = acm->ctrlout;
1029 
1030 	newline.dwDTERate = cpu_to_le32(tty_get_baud_rate(tty));
1031 	newline.bCharFormat = termios->c_cflag & CSTOPB ? 2 : 0;
1032 	newline.bParityType = termios->c_cflag & PARENB ?
1033 				(termios->c_cflag & PARODD ? 1 : 2) +
1034 				(termios->c_cflag & CMSPAR ? 2 : 0) : 0;
1035 	switch (termios->c_cflag & CSIZE) {
1036 	case CS5:
1037 		newline.bDataBits = 5;
1038 		break;
1039 	case CS6:
1040 		newline.bDataBits = 6;
1041 		break;
1042 	case CS7:
1043 		newline.bDataBits = 7;
1044 		break;
1045 	case CS8:
1046 	default:
1047 		newline.bDataBits = 8;
1048 		break;
1049 	}
1050 	/* FIXME: Needs to clear unsupported bits in the termios */
1051 	acm->clocal = ((termios->c_cflag & CLOCAL) != 0);
1052 
1053 	if (C_BAUD(tty) == B0) {
1054 		newline.dwDTERate = acm->line.dwDTERate;
1055 		newctrl &= ~ACM_CTRL_DTR;
1056 	} else if (termios_old && (termios_old->c_cflag & CBAUD) == B0) {
1057 		newctrl |=  ACM_CTRL_DTR;
1058 	}
1059 
1060 	if (newctrl != acm->ctrlout)
1061 		acm_set_control(acm, acm->ctrlout = newctrl);
1062 
1063 	if (memcmp(&acm->line, &newline, sizeof newline)) {
1064 		memcpy(&acm->line, &newline, sizeof newline);
1065 		dev_dbg(&acm->control->dev, "%s - set line: %d %d %d %d\n",
1066 			__func__,
1067 			le32_to_cpu(newline.dwDTERate),
1068 			newline.bCharFormat, newline.bParityType,
1069 			newline.bDataBits);
1070 		acm_set_line(acm, &acm->line);
1071 	}
1072 }
1073 
1074 static const struct tty_port_operations acm_port_ops = {
1075 	.dtr_rts = acm_port_dtr_rts,
1076 	.shutdown = acm_port_shutdown,
1077 	.activate = acm_port_activate,
1078 	.destruct = acm_port_destruct,
1079 };
1080 
1081 /*
1082  * USB probe and disconnect routines.
1083  */
1084 
1085 /* Little helpers: write/read buffers free */
acm_write_buffers_free(struct acm * acm)1086 static void acm_write_buffers_free(struct acm *acm)
1087 {
1088 	int i;
1089 	struct acm_wb *wb;
1090 
1091 	for (wb = &acm->wb[0], i = 0; i < ACM_NW; i++, wb++)
1092 		usb_free_coherent(acm->dev, acm->writesize, wb->buf, wb->dmah);
1093 }
1094 
acm_read_buffers_free(struct acm * acm)1095 static void acm_read_buffers_free(struct acm *acm)
1096 {
1097 	int i;
1098 
1099 	for (i = 0; i < acm->rx_buflimit; i++)
1100 		usb_free_coherent(acm->dev, acm->readsize,
1101 			  acm->read_buffers[i].base, acm->read_buffers[i].dma);
1102 }
1103 
1104 /* Little helper: write buffers allocate */
acm_write_buffers_alloc(struct acm * acm)1105 static int acm_write_buffers_alloc(struct acm *acm)
1106 {
1107 	int i;
1108 	struct acm_wb *wb;
1109 
1110 	for (wb = &acm->wb[0], i = 0; i < ACM_NW; i++, wb++) {
1111 		wb->buf = usb_alloc_coherent(acm->dev, acm->writesize, GFP_KERNEL,
1112 		    &wb->dmah);
1113 		if (!wb->buf) {
1114 			while (i != 0) {
1115 				--i;
1116 				--wb;
1117 				usb_free_coherent(acm->dev, acm->writesize,
1118 				    wb->buf, wb->dmah);
1119 			}
1120 			return -ENOMEM;
1121 		}
1122 	}
1123 	return 0;
1124 }
1125 
acm_probe(struct usb_interface * intf,const struct usb_device_id * id)1126 static int acm_probe(struct usb_interface *intf,
1127 		     const struct usb_device_id *id)
1128 {
1129 	struct usb_cdc_union_desc *union_header = NULL;
1130 	struct usb_cdc_call_mgmt_descriptor *cmgmd = NULL;
1131 	unsigned char *buffer = intf->altsetting->extra;
1132 	int buflen = intf->altsetting->extralen;
1133 	struct usb_interface *control_interface;
1134 	struct usb_interface *data_interface;
1135 	struct usb_endpoint_descriptor *epctrl = NULL;
1136 	struct usb_endpoint_descriptor *epread = NULL;
1137 	struct usb_endpoint_descriptor *epwrite = NULL;
1138 	struct usb_device *usb_dev = interface_to_usbdev(intf);
1139 	struct usb_cdc_parsed_header h;
1140 	struct acm *acm;
1141 	int minor;
1142 	int ctrlsize, readsize;
1143 	u8 *buf;
1144 	int call_intf_num = -1;
1145 	int data_intf_num = -1;
1146 	unsigned long quirks;
1147 	int num_rx_buf;
1148 	int i;
1149 	int combined_interfaces = 0;
1150 	struct device *tty_dev;
1151 	int rv = -ENOMEM;
1152 	int res;
1153 
1154 	/* normal quirks */
1155 	quirks = (unsigned long)id->driver_info;
1156 
1157 	if (quirks == IGNORE_DEVICE)
1158 		return -ENODEV;
1159 
1160 	memset(&h, 0x00, sizeof(struct usb_cdc_parsed_header));
1161 
1162 	num_rx_buf = (quirks == SINGLE_RX_URB) ? 1 : ACM_NR;
1163 
1164 	/* handle quirks deadly to normal probing*/
1165 	if (quirks == NO_UNION_NORMAL) {
1166 		data_interface = usb_ifnum_to_if(usb_dev, 1);
1167 		control_interface = usb_ifnum_to_if(usb_dev, 0);
1168 		/* we would crash */
1169 		if (!data_interface || !control_interface)
1170 			return -ENODEV;
1171 		goto skip_normal_probe;
1172 	}
1173 
1174 	/* normal probing*/
1175 	if (!buffer) {
1176 		dev_err(&intf->dev, "Weird descriptor references\n");
1177 		return -EINVAL;
1178 	}
1179 
1180 	if (!intf->cur_altsetting)
1181 		return -EINVAL;
1182 
1183 	if (!buflen) {
1184 		if (intf->cur_altsetting->endpoint &&
1185 				intf->cur_altsetting->endpoint->extralen &&
1186 				intf->cur_altsetting->endpoint->extra) {
1187 			dev_dbg(&intf->dev,
1188 				"Seeking extra descriptors on endpoint\n");
1189 			buflen = intf->cur_altsetting->endpoint->extralen;
1190 			buffer = intf->cur_altsetting->endpoint->extra;
1191 		} else {
1192 			dev_err(&intf->dev,
1193 				"Zero length descriptor references\n");
1194 			return -EINVAL;
1195 		}
1196 	}
1197 
1198 	cdc_parse_cdc_header(&h, intf, buffer, buflen);
1199 	union_header = h.usb_cdc_union_desc;
1200 	cmgmd = h.usb_cdc_call_mgmt_descriptor;
1201 	if (cmgmd)
1202 		call_intf_num = cmgmd->bDataInterface;
1203 
1204 	if (!union_header) {
1205 		if (call_intf_num > 0) {
1206 			dev_dbg(&intf->dev, "No union descriptor, using call management descriptor\n");
1207 			/* quirks for Droids MuIn LCD */
1208 			if (quirks & NO_DATA_INTERFACE) {
1209 				data_interface = usb_ifnum_to_if(usb_dev, 0);
1210 			} else {
1211 				data_intf_num = call_intf_num;
1212 				data_interface = usb_ifnum_to_if(usb_dev, data_intf_num);
1213 			}
1214 			control_interface = intf;
1215 		} else {
1216 			if (intf->cur_altsetting->desc.bNumEndpoints != 3) {
1217 				dev_dbg(&intf->dev,"No union descriptor, giving up\n");
1218 				return -ENODEV;
1219 			} else {
1220 				dev_warn(&intf->dev,"No union descriptor, testing for castrated device\n");
1221 				combined_interfaces = 1;
1222 				control_interface = data_interface = intf;
1223 				goto look_for_collapsed_interface;
1224 			}
1225 		}
1226 	} else {
1227 		data_intf_num = union_header->bSlaveInterface0;
1228 		control_interface = usb_ifnum_to_if(usb_dev, union_header->bMasterInterface0);
1229 		data_interface = usb_ifnum_to_if(usb_dev, data_intf_num);
1230 	}
1231 
1232 	if (!control_interface || !data_interface) {
1233 		dev_dbg(&intf->dev, "no interfaces\n");
1234 		return -ENODEV;
1235 	}
1236 	if (!data_interface->cur_altsetting || !control_interface->cur_altsetting)
1237 		return -ENODEV;
1238 
1239 	if (data_intf_num != call_intf_num)
1240 		dev_dbg(&intf->dev, "Separate call control interface. That is not fully supported.\n");
1241 
1242 	if (control_interface == data_interface) {
1243 		/* some broken devices designed for windows work this way */
1244 		dev_warn(&intf->dev,"Control and data interfaces are not separated!\n");
1245 		combined_interfaces = 1;
1246 		/* a popular other OS doesn't use it */
1247 		quirks |= NO_CAP_LINE;
1248 		if (data_interface->cur_altsetting->desc.bNumEndpoints != 3) {
1249 			dev_err(&intf->dev, "This needs exactly 3 endpoints\n");
1250 			return -EINVAL;
1251 		}
1252 look_for_collapsed_interface:
1253 		res = usb_find_common_endpoints(data_interface->cur_altsetting,
1254 				&epread, &epwrite, &epctrl, NULL);
1255 		if (res)
1256 			return res;
1257 
1258 		goto made_compressed_probe;
1259 	}
1260 
1261 skip_normal_probe:
1262 
1263 	/*workaround for switched interfaces */
1264 	if (data_interface->cur_altsetting->desc.bInterfaceClass
1265 						!= CDC_DATA_INTERFACE_TYPE) {
1266 		if (control_interface->cur_altsetting->desc.bInterfaceClass
1267 						== CDC_DATA_INTERFACE_TYPE) {
1268 			dev_dbg(&intf->dev,
1269 				"Your device has switched interfaces.\n");
1270 			swap(control_interface, data_interface);
1271 		} else {
1272 			return -EINVAL;
1273 		}
1274 	}
1275 
1276 	/* Accept probe requests only for the control interface */
1277 	if (!combined_interfaces && intf != control_interface)
1278 		return -ENODEV;
1279 
1280 	if (!combined_interfaces && usb_interface_claimed(data_interface)) {
1281 		/* valid in this context */
1282 		dev_dbg(&intf->dev, "The data interface isn't available\n");
1283 		return -EBUSY;
1284 	}
1285 
1286 
1287 	if (data_interface->cur_altsetting->desc.bNumEndpoints < 2 ||
1288 	    control_interface->cur_altsetting->desc.bNumEndpoints == 0)
1289 		return -EINVAL;
1290 
1291 	epctrl = &control_interface->cur_altsetting->endpoint[0].desc;
1292 	epread = &data_interface->cur_altsetting->endpoint[0].desc;
1293 	epwrite = &data_interface->cur_altsetting->endpoint[1].desc;
1294 
1295 
1296 	/* workaround for switched endpoints */
1297 	if (!usb_endpoint_dir_in(epread)) {
1298 		/* descriptors are swapped */
1299 		dev_dbg(&intf->dev,
1300 			"The data interface has switched endpoints\n");
1301 		swap(epread, epwrite);
1302 	}
1303 made_compressed_probe:
1304 	dev_dbg(&intf->dev, "interfaces are valid\n");
1305 
1306 	acm = kzalloc(sizeof(struct acm), GFP_KERNEL);
1307 	if (acm == NULL)
1308 		goto alloc_fail;
1309 
1310 	tty_port_init(&acm->port);
1311 	acm->port.ops = &acm_port_ops;
1312 
1313 	minor = acm_alloc_minor(acm);
1314 	if (minor < 0)
1315 		goto alloc_fail1;
1316 
1317 	ctrlsize = usb_endpoint_maxp(epctrl);
1318 	readsize = usb_endpoint_maxp(epread) *
1319 				(quirks == SINGLE_RX_URB ? 1 : 2);
1320 	acm->combined_interfaces = combined_interfaces;
1321 	acm->writesize = usb_endpoint_maxp(epwrite) * 20;
1322 	acm->control = control_interface;
1323 	acm->data = data_interface;
1324 	acm->minor = minor;
1325 	acm->dev = usb_dev;
1326 	if (h.usb_cdc_acm_descriptor)
1327 		acm->ctrl_caps = h.usb_cdc_acm_descriptor->bmCapabilities;
1328 	if (quirks & NO_CAP_LINE)
1329 		acm->ctrl_caps &= ~USB_CDC_CAP_LINE;
1330 	acm->ctrlsize = ctrlsize;
1331 	acm->readsize = readsize;
1332 	acm->rx_buflimit = num_rx_buf;
1333 	INIT_WORK(&acm->work, acm_softint);
1334 	init_waitqueue_head(&acm->wioctl);
1335 	spin_lock_init(&acm->write_lock);
1336 	spin_lock_init(&acm->read_lock);
1337 	mutex_init(&acm->mutex);
1338 	if (usb_endpoint_xfer_int(epread)) {
1339 		acm->bInterval = epread->bInterval;
1340 		acm->in = usb_rcvintpipe(usb_dev, epread->bEndpointAddress);
1341 	} else {
1342 		acm->in = usb_rcvbulkpipe(usb_dev, epread->bEndpointAddress);
1343 	}
1344 	if (usb_endpoint_xfer_int(epwrite))
1345 		acm->out = usb_sndintpipe(usb_dev, epwrite->bEndpointAddress);
1346 	else
1347 		acm->out = usb_sndbulkpipe(usb_dev, epwrite->bEndpointAddress);
1348 	init_usb_anchor(&acm->delayed);
1349 	acm->quirks = quirks;
1350 
1351 	buf = usb_alloc_coherent(usb_dev, ctrlsize, GFP_KERNEL, &acm->ctrl_dma);
1352 	if (!buf)
1353 		goto alloc_fail1;
1354 	acm->ctrl_buffer = buf;
1355 
1356 	if (acm_write_buffers_alloc(acm) < 0)
1357 		goto alloc_fail2;
1358 
1359 	acm->ctrlurb = usb_alloc_urb(0, GFP_KERNEL);
1360 	if (!acm->ctrlurb)
1361 		goto alloc_fail3;
1362 
1363 	for (i = 0; i < num_rx_buf; i++) {
1364 		struct acm_rb *rb = &(acm->read_buffers[i]);
1365 		struct urb *urb;
1366 
1367 		rb->base = usb_alloc_coherent(acm->dev, readsize, GFP_KERNEL,
1368 								&rb->dma);
1369 		if (!rb->base)
1370 			goto alloc_fail4;
1371 		rb->index = i;
1372 		rb->instance = acm;
1373 
1374 		urb = usb_alloc_urb(0, GFP_KERNEL);
1375 		if (!urb)
1376 			goto alloc_fail4;
1377 
1378 		urb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
1379 		urb->transfer_dma = rb->dma;
1380 		if (usb_endpoint_xfer_int(epread))
1381 			usb_fill_int_urb(urb, acm->dev, acm->in, rb->base,
1382 					 acm->readsize,
1383 					 acm_read_bulk_callback, rb,
1384 					 acm->bInterval);
1385 		else
1386 			usb_fill_bulk_urb(urb, acm->dev, acm->in, rb->base,
1387 					  acm->readsize,
1388 					  acm_read_bulk_callback, rb);
1389 
1390 		acm->read_urbs[i] = urb;
1391 		__set_bit(i, &acm->read_urbs_free);
1392 	}
1393 	for (i = 0; i < ACM_NW; i++) {
1394 		struct acm_wb *snd = &(acm->wb[i]);
1395 
1396 		snd->urb = usb_alloc_urb(0, GFP_KERNEL);
1397 		if (snd->urb == NULL)
1398 			goto alloc_fail5;
1399 
1400 		if (usb_endpoint_xfer_int(epwrite))
1401 			usb_fill_int_urb(snd->urb, usb_dev, acm->out,
1402 				NULL, acm->writesize, acm_write_bulk, snd, epwrite->bInterval);
1403 		else
1404 			usb_fill_bulk_urb(snd->urb, usb_dev, acm->out,
1405 				NULL, acm->writesize, acm_write_bulk, snd);
1406 		snd->urb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
1407 		if (quirks & SEND_ZERO_PACKET)
1408 			snd->urb->transfer_flags |= URB_ZERO_PACKET;
1409 		snd->instance = acm;
1410 	}
1411 
1412 	usb_set_intfdata(intf, acm);
1413 
1414 	i = device_create_file(&intf->dev, &dev_attr_bmCapabilities);
1415 	if (i < 0)
1416 		goto alloc_fail5;
1417 
1418 	if (h.usb_cdc_country_functional_desc) { /* export the country data */
1419 		struct usb_cdc_country_functional_desc * cfd =
1420 					h.usb_cdc_country_functional_desc;
1421 
1422 		acm->country_codes = kmalloc(cfd->bLength - 4, GFP_KERNEL);
1423 		if (!acm->country_codes)
1424 			goto skip_countries;
1425 		acm->country_code_size = cfd->bLength - 4;
1426 		memcpy(acm->country_codes, (u8 *)&cfd->wCountyCode0,
1427 							cfd->bLength - 4);
1428 		acm->country_rel_date = cfd->iCountryCodeRelDate;
1429 
1430 		i = device_create_file(&intf->dev, &dev_attr_wCountryCodes);
1431 		if (i < 0) {
1432 			kfree(acm->country_codes);
1433 			acm->country_codes = NULL;
1434 			acm->country_code_size = 0;
1435 			goto skip_countries;
1436 		}
1437 
1438 		i = device_create_file(&intf->dev,
1439 						&dev_attr_iCountryCodeRelDate);
1440 		if (i < 0) {
1441 			device_remove_file(&intf->dev, &dev_attr_wCountryCodes);
1442 			kfree(acm->country_codes);
1443 			acm->country_codes = NULL;
1444 			acm->country_code_size = 0;
1445 			goto skip_countries;
1446 		}
1447 	}
1448 
1449 skip_countries:
1450 	usb_fill_int_urb(acm->ctrlurb, usb_dev,
1451 			 usb_rcvintpipe(usb_dev, epctrl->bEndpointAddress),
1452 			 acm->ctrl_buffer, ctrlsize, acm_ctrl_irq, acm,
1453 			 /* works around buggy devices */
1454 			 epctrl->bInterval ? epctrl->bInterval : 16);
1455 	acm->ctrlurb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
1456 	acm->ctrlurb->transfer_dma = acm->ctrl_dma;
1457 	acm->notification_buffer = NULL;
1458 	acm->nb_index = 0;
1459 	acm->nb_size = 0;
1460 
1461 	dev_info(&intf->dev, "ttyACM%d: USB ACM device\n", minor);
1462 
1463 	acm->line.dwDTERate = cpu_to_le32(9600);
1464 	acm->line.bDataBits = 8;
1465 	acm_set_line(acm, &acm->line);
1466 
1467 	usb_driver_claim_interface(&acm_driver, data_interface, acm);
1468 	usb_set_intfdata(data_interface, acm);
1469 
1470 	usb_get_intf(control_interface);
1471 	tty_dev = tty_port_register_device(&acm->port, acm_tty_driver, minor,
1472 			&control_interface->dev);
1473 	if (IS_ERR(tty_dev)) {
1474 		rv = PTR_ERR(tty_dev);
1475 		goto alloc_fail6;
1476 	}
1477 
1478 	if (quirks & CLEAR_HALT_CONDITIONS) {
1479 		usb_clear_halt(usb_dev, acm->in);
1480 		usb_clear_halt(usb_dev, acm->out);
1481 	}
1482 
1483 	return 0;
1484 alloc_fail6:
1485 	if (acm->country_codes) {
1486 		device_remove_file(&acm->control->dev,
1487 				&dev_attr_wCountryCodes);
1488 		device_remove_file(&acm->control->dev,
1489 				&dev_attr_iCountryCodeRelDate);
1490 		kfree(acm->country_codes);
1491 	}
1492 	device_remove_file(&acm->control->dev, &dev_attr_bmCapabilities);
1493 alloc_fail5:
1494 	usb_set_intfdata(intf, NULL);
1495 	for (i = 0; i < ACM_NW; i++)
1496 		usb_free_urb(acm->wb[i].urb);
1497 alloc_fail4:
1498 	for (i = 0; i < num_rx_buf; i++)
1499 		usb_free_urb(acm->read_urbs[i]);
1500 	acm_read_buffers_free(acm);
1501 	usb_free_urb(acm->ctrlurb);
1502 alloc_fail3:
1503 	acm_write_buffers_free(acm);
1504 alloc_fail2:
1505 	usb_free_coherent(usb_dev, ctrlsize, acm->ctrl_buffer, acm->ctrl_dma);
1506 alloc_fail1:
1507 	tty_port_put(&acm->port);
1508 alloc_fail:
1509 	return rv;
1510 }
1511 
acm_disconnect(struct usb_interface * intf)1512 static void acm_disconnect(struct usb_interface *intf)
1513 {
1514 	struct acm *acm = usb_get_intfdata(intf);
1515 	struct tty_struct *tty;
1516 	int i;
1517 
1518 	/* sibling interface is already cleaning up */
1519 	if (!acm)
1520 		return;
1521 
1522 	mutex_lock(&acm->mutex);
1523 	acm->disconnected = true;
1524 	if (acm->country_codes) {
1525 		device_remove_file(&acm->control->dev,
1526 				&dev_attr_wCountryCodes);
1527 		device_remove_file(&acm->control->dev,
1528 				&dev_attr_iCountryCodeRelDate);
1529 	}
1530 	wake_up_all(&acm->wioctl);
1531 	device_remove_file(&acm->control->dev, &dev_attr_bmCapabilities);
1532 	usb_set_intfdata(acm->control, NULL);
1533 	usb_set_intfdata(acm->data, NULL);
1534 	mutex_unlock(&acm->mutex);
1535 
1536 	tty = tty_port_tty_get(&acm->port);
1537 	if (tty) {
1538 		tty_vhangup(tty);
1539 		tty_kref_put(tty);
1540 	}
1541 
1542 	acm_kill_urbs(acm);
1543 	cancel_work_sync(&acm->work);
1544 
1545 	tty_unregister_device(acm_tty_driver, acm->minor);
1546 
1547 	usb_free_urb(acm->ctrlurb);
1548 	for (i = 0; i < ACM_NW; i++)
1549 		usb_free_urb(acm->wb[i].urb);
1550 	for (i = 0; i < acm->rx_buflimit; i++)
1551 		usb_free_urb(acm->read_urbs[i]);
1552 	acm_write_buffers_free(acm);
1553 	usb_free_coherent(acm->dev, acm->ctrlsize, acm->ctrl_buffer, acm->ctrl_dma);
1554 	acm_read_buffers_free(acm);
1555 
1556 	kfree(acm->notification_buffer);
1557 
1558 	if (!acm->combined_interfaces)
1559 		usb_driver_release_interface(&acm_driver, intf == acm->control ?
1560 					acm->data : acm->control);
1561 
1562 	tty_port_put(&acm->port);
1563 }
1564 
1565 #ifdef CONFIG_PM
acm_suspend(struct usb_interface * intf,pm_message_t message)1566 static int acm_suspend(struct usb_interface *intf, pm_message_t message)
1567 {
1568 	struct acm *acm = usb_get_intfdata(intf);
1569 	int cnt;
1570 
1571 	spin_lock_irq(&acm->write_lock);
1572 	if (PMSG_IS_AUTO(message)) {
1573 		if (acm->transmitting) {
1574 			spin_unlock_irq(&acm->write_lock);
1575 			return -EBUSY;
1576 		}
1577 	}
1578 	cnt = acm->susp_count++;
1579 	spin_unlock_irq(&acm->write_lock);
1580 
1581 	if (cnt)
1582 		return 0;
1583 
1584 	acm_kill_urbs(acm);
1585 	cancel_work_sync(&acm->work);
1586 
1587 	return 0;
1588 }
1589 
acm_resume(struct usb_interface * intf)1590 static int acm_resume(struct usb_interface *intf)
1591 {
1592 	struct acm *acm = usb_get_intfdata(intf);
1593 	struct urb *urb;
1594 	int rv = 0;
1595 
1596 	spin_lock_irq(&acm->write_lock);
1597 
1598 	if (--acm->susp_count)
1599 		goto out;
1600 
1601 	if (tty_port_initialized(&acm->port)) {
1602 		rv = usb_submit_urb(acm->ctrlurb, GFP_ATOMIC);
1603 
1604 		for (;;) {
1605 			urb = usb_get_from_anchor(&acm->delayed);
1606 			if (!urb)
1607 				break;
1608 
1609 			acm_start_wb(acm, urb->context);
1610 		}
1611 
1612 		/*
1613 		 * delayed error checking because we must
1614 		 * do the write path at all cost
1615 		 */
1616 		if (rv < 0)
1617 			goto out;
1618 
1619 		rv = acm_submit_read_urbs(acm, GFP_ATOMIC);
1620 	}
1621 out:
1622 	spin_unlock_irq(&acm->write_lock);
1623 
1624 	return rv;
1625 }
1626 
acm_reset_resume(struct usb_interface * intf)1627 static int acm_reset_resume(struct usb_interface *intf)
1628 {
1629 	struct acm *acm = usb_get_intfdata(intf);
1630 
1631 	if (tty_port_initialized(&acm->port))
1632 		tty_port_tty_hangup(&acm->port, false);
1633 
1634 	return acm_resume(intf);
1635 }
1636 
1637 #endif /* CONFIG_PM */
1638 
acm_pre_reset(struct usb_interface * intf)1639 static int acm_pre_reset(struct usb_interface *intf)
1640 {
1641 	struct acm *acm = usb_get_intfdata(intf);
1642 
1643 	clear_bit(EVENT_RX_STALL, &acm->flags);
1644 	acm->nb_index = 0; /* pending control transfers are lost */
1645 
1646 	return 0;
1647 }
1648 
1649 #define NOKIA_PCSUITE_ACM_INFO(x) \
1650 		USB_DEVICE_AND_INTERFACE_INFO(0x0421, x, \
1651 		USB_CLASS_COMM, USB_CDC_SUBCLASS_ACM, \
1652 		USB_CDC_ACM_PROTO_VENDOR)
1653 
1654 #define SAMSUNG_PCSUITE_ACM_INFO(x) \
1655 		USB_DEVICE_AND_INTERFACE_INFO(0x04e7, x, \
1656 		USB_CLASS_COMM, USB_CDC_SUBCLASS_ACM, \
1657 		USB_CDC_ACM_PROTO_VENDOR)
1658 
1659 /*
1660  * USB driver structure.
1661  */
1662 
1663 static const struct usb_device_id acm_ids[] = {
1664 	/* quirky and broken devices */
1665 	{ USB_DEVICE(0x076d, 0x0006), /* Denso Cradle CU-321 */
1666 	.driver_info = NO_UNION_NORMAL, },/* has no union descriptor */
1667 	{ USB_DEVICE(0x17ef, 0x7000), /* Lenovo USB modem */
1668 	.driver_info = NO_UNION_NORMAL, },/* has no union descriptor */
1669 	{ USB_DEVICE(0x0870, 0x0001), /* Metricom GS Modem */
1670 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
1671 	},
1672 	{ USB_DEVICE(0x0e8d, 0x0003), /* FIREFLY, MediaTek Inc; andrey.arapov@gmail.com */
1673 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
1674 	},
1675 	{ USB_DEVICE(0x0e8d, 0x3329), /* MediaTek Inc GPS */
1676 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
1677 	},
1678 	{ USB_DEVICE(0x0482, 0x0203), /* KYOCERA AH-K3001V */
1679 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
1680 	},
1681 	{ USB_DEVICE(0x079b, 0x000f), /* BT On-Air USB MODEM */
1682 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
1683 	},
1684 	{ USB_DEVICE(0x0ace, 0x1602), /* ZyDAS 56K USB MODEM */
1685 	.driver_info = SINGLE_RX_URB,
1686 	},
1687 	{ USB_DEVICE(0x0ace, 0x1608), /* ZyDAS 56K USB MODEM */
1688 	.driver_info = SINGLE_RX_URB, /* firmware bug */
1689 	},
1690 	{ USB_DEVICE(0x0ace, 0x1611), /* ZyDAS 56K USB MODEM - new version */
1691 	.driver_info = SINGLE_RX_URB, /* firmware bug */
1692 	},
1693 	{ USB_DEVICE(0x11ca, 0x0201), /* VeriFone Mx870 Gadget Serial */
1694 	.driver_info = SINGLE_RX_URB,
1695 	},
1696 	{ USB_DEVICE(0x1965, 0x0018), /* Uniden UBC125XLT */
1697 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
1698 	},
1699 	{ USB_DEVICE(0x22b8, 0x7000), /* Motorola Q Phone */
1700 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
1701 	},
1702 	{ USB_DEVICE(0x0803, 0x3095), /* Zoom Telephonics Model 3095F USB MODEM */
1703 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
1704 	},
1705 	{ USB_DEVICE(0x0572, 0x1321), /* Conexant USB MODEM CX93010 */
1706 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
1707 	},
1708 	{ USB_DEVICE(0x0572, 0x1324), /* Conexant USB MODEM RD02-D400 */
1709 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
1710 	},
1711 	{ USB_DEVICE(0x0572, 0x1328), /* Shiro / Aztech USB MODEM UM-3100 */
1712 	.driver_info = NO_UNION_NORMAL, /* has no union descriptor */
1713 	},
1714 	{ USB_DEVICE(0x20df, 0x0001), /* Simtec Electronics Entropy Key */
1715 	.driver_info = QUIRK_CONTROL_LINE_STATE, },
1716 	{ USB_DEVICE(0x2184, 0x001c) },	/* GW Instek AFG-2225 */
1717 	{ USB_DEVICE(0x2184, 0x0036) },	/* GW Instek AFG-125 */
1718 	{ USB_DEVICE(0x22b8, 0x6425), /* Motorola MOTOMAGX phones */
1719 	},
1720 	/* Motorola H24 HSPA module: */
1721 	{ USB_DEVICE(0x22b8, 0x2d91) }, /* modem                                */
1722 	{ USB_DEVICE(0x22b8, 0x2d92),   /* modem           + diagnostics        */
1723 	.driver_info = NO_UNION_NORMAL, /* handle only modem interface          */
1724 	},
1725 	{ USB_DEVICE(0x22b8, 0x2d93),   /* modem + AT port                      */
1726 	.driver_info = NO_UNION_NORMAL, /* handle only modem interface          */
1727 	},
1728 	{ USB_DEVICE(0x22b8, 0x2d95),   /* modem + AT port + diagnostics        */
1729 	.driver_info = NO_UNION_NORMAL, /* handle only modem interface          */
1730 	},
1731 	{ USB_DEVICE(0x22b8, 0x2d96),   /* modem                         + NMEA */
1732 	.driver_info = NO_UNION_NORMAL, /* handle only modem interface          */
1733 	},
1734 	{ USB_DEVICE(0x22b8, 0x2d97),   /* modem           + diagnostics + NMEA */
1735 	.driver_info = NO_UNION_NORMAL, /* handle only modem interface          */
1736 	},
1737 	{ USB_DEVICE(0x22b8, 0x2d99),   /* modem + AT port               + NMEA */
1738 	.driver_info = NO_UNION_NORMAL, /* handle only modem interface          */
1739 	},
1740 	{ USB_DEVICE(0x22b8, 0x2d9a),   /* modem + AT port + diagnostics + NMEA */
1741 	.driver_info = NO_UNION_NORMAL, /* handle only modem interface          */
1742 	},
1743 
1744 	{ USB_DEVICE(0x0572, 0x1329), /* Hummingbird huc56s (Conexant) */
1745 	.driver_info = NO_UNION_NORMAL, /* union descriptor misplaced on
1746 					   data interface instead of
1747 					   communications interface.
1748 					   Maybe we should define a new
1749 					   quirk for this. */
1750 	},
1751 	{ USB_DEVICE(0x0572, 0x1340), /* Conexant CX93010-2x UCMxx */
1752 	.driver_info = NO_UNION_NORMAL,
1753 	},
1754 	{ USB_DEVICE(0x05f9, 0x4002), /* PSC Scanning, Magellan 800i */
1755 	.driver_info = NO_UNION_NORMAL,
1756 	},
1757 	{ USB_DEVICE(0x1bbb, 0x0003), /* Alcatel OT-I650 */
1758 	.driver_info = NO_UNION_NORMAL, /* reports zero length descriptor */
1759 	},
1760 	{ USB_DEVICE(0x1576, 0x03b1), /* Maretron USB100 */
1761 	.driver_info = NO_UNION_NORMAL, /* reports zero length descriptor */
1762 	},
1763 	{ USB_DEVICE(0xfff0, 0x0100), /* DATECS FP-2000 */
1764 	.driver_info = NO_UNION_NORMAL, /* reports zero length descriptor */
1765 	},
1766 	{ USB_DEVICE(0x09d8, 0x0320), /* Elatec GmbH TWN3 */
1767 	.driver_info = NO_UNION_NORMAL, /* has misplaced union descriptor */
1768 	},
1769 	{ USB_DEVICE(0x0ca6, 0xa050), /* Castles VEGA3000 */
1770 	.driver_info = NO_UNION_NORMAL, /* reports zero length descriptor */
1771 	},
1772 
1773 	{ USB_DEVICE(0x2912, 0x0001), /* ATOL FPrint */
1774 	.driver_info = CLEAR_HALT_CONDITIONS,
1775 	},
1776 
1777 	/* Nokia S60 phones expose two ACM channels. The first is
1778 	 * a modem and is picked up by the standard AT-command
1779 	 * information below. The second is 'vendor-specific' but
1780 	 * is treated as a serial device at the S60 end, so we want
1781 	 * to expose it on Linux too. */
1782 	{ NOKIA_PCSUITE_ACM_INFO(0x042D), }, /* Nokia 3250 */
1783 	{ NOKIA_PCSUITE_ACM_INFO(0x04D8), }, /* Nokia 5500 Sport */
1784 	{ NOKIA_PCSUITE_ACM_INFO(0x04C9), }, /* Nokia E50 */
1785 	{ NOKIA_PCSUITE_ACM_INFO(0x0419), }, /* Nokia E60 */
1786 	{ NOKIA_PCSUITE_ACM_INFO(0x044D), }, /* Nokia E61 */
1787 	{ NOKIA_PCSUITE_ACM_INFO(0x0001), }, /* Nokia E61i */
1788 	{ NOKIA_PCSUITE_ACM_INFO(0x0475), }, /* Nokia E62 */
1789 	{ NOKIA_PCSUITE_ACM_INFO(0x0508), }, /* Nokia E65 */
1790 	{ NOKIA_PCSUITE_ACM_INFO(0x0418), }, /* Nokia E70 */
1791 	{ NOKIA_PCSUITE_ACM_INFO(0x0425), }, /* Nokia N71 */
1792 	{ NOKIA_PCSUITE_ACM_INFO(0x0486), }, /* Nokia N73 */
1793 	{ NOKIA_PCSUITE_ACM_INFO(0x04DF), }, /* Nokia N75 */
1794 	{ NOKIA_PCSUITE_ACM_INFO(0x000e), }, /* Nokia N77 */
1795 	{ NOKIA_PCSUITE_ACM_INFO(0x0445), }, /* Nokia N80 */
1796 	{ NOKIA_PCSUITE_ACM_INFO(0x042F), }, /* Nokia N91 & N91 8GB */
1797 	{ NOKIA_PCSUITE_ACM_INFO(0x048E), }, /* Nokia N92 */
1798 	{ NOKIA_PCSUITE_ACM_INFO(0x0420), }, /* Nokia N93 */
1799 	{ NOKIA_PCSUITE_ACM_INFO(0x04E6), }, /* Nokia N93i  */
1800 	{ NOKIA_PCSUITE_ACM_INFO(0x04B2), }, /* Nokia 5700 XpressMusic */
1801 	{ NOKIA_PCSUITE_ACM_INFO(0x0134), }, /* Nokia 6110 Navigator (China) */
1802 	{ NOKIA_PCSUITE_ACM_INFO(0x046E), }, /* Nokia 6110 Navigator */
1803 	{ NOKIA_PCSUITE_ACM_INFO(0x002f), }, /* Nokia 6120 classic &  */
1804 	{ NOKIA_PCSUITE_ACM_INFO(0x0088), }, /* Nokia 6121 classic */
1805 	{ NOKIA_PCSUITE_ACM_INFO(0x00fc), }, /* Nokia 6124 classic */
1806 	{ NOKIA_PCSUITE_ACM_INFO(0x0042), }, /* Nokia E51 */
1807 	{ NOKIA_PCSUITE_ACM_INFO(0x00b0), }, /* Nokia E66 */
1808 	{ NOKIA_PCSUITE_ACM_INFO(0x00ab), }, /* Nokia E71 */
1809 	{ NOKIA_PCSUITE_ACM_INFO(0x0481), }, /* Nokia N76 */
1810 	{ NOKIA_PCSUITE_ACM_INFO(0x0007), }, /* Nokia N81 & N81 8GB */
1811 	{ NOKIA_PCSUITE_ACM_INFO(0x0071), }, /* Nokia N82 */
1812 	{ NOKIA_PCSUITE_ACM_INFO(0x04F0), }, /* Nokia N95 & N95-3 NAM */
1813 	{ NOKIA_PCSUITE_ACM_INFO(0x0070), }, /* Nokia N95 8GB  */
1814 	{ NOKIA_PCSUITE_ACM_INFO(0x00e9), }, /* Nokia 5320 XpressMusic */
1815 	{ NOKIA_PCSUITE_ACM_INFO(0x0099), }, /* Nokia 6210 Navigator, RM-367 */
1816 	{ NOKIA_PCSUITE_ACM_INFO(0x0128), }, /* Nokia 6210 Navigator, RM-419 */
1817 	{ NOKIA_PCSUITE_ACM_INFO(0x008f), }, /* Nokia 6220 Classic */
1818 	{ NOKIA_PCSUITE_ACM_INFO(0x00a0), }, /* Nokia 6650 */
1819 	{ NOKIA_PCSUITE_ACM_INFO(0x007b), }, /* Nokia N78 */
1820 	{ NOKIA_PCSUITE_ACM_INFO(0x0094), }, /* Nokia N85 */
1821 	{ NOKIA_PCSUITE_ACM_INFO(0x003a), }, /* Nokia N96 & N96-3  */
1822 	{ NOKIA_PCSUITE_ACM_INFO(0x00e9), }, /* Nokia 5320 XpressMusic */
1823 	{ NOKIA_PCSUITE_ACM_INFO(0x0108), }, /* Nokia 5320 XpressMusic 2G */
1824 	{ NOKIA_PCSUITE_ACM_INFO(0x01f5), }, /* Nokia N97, RM-505 */
1825 	{ NOKIA_PCSUITE_ACM_INFO(0x02e3), }, /* Nokia 5230, RM-588 */
1826 	{ NOKIA_PCSUITE_ACM_INFO(0x0178), }, /* Nokia E63 */
1827 	{ NOKIA_PCSUITE_ACM_INFO(0x010e), }, /* Nokia E75 */
1828 	{ NOKIA_PCSUITE_ACM_INFO(0x02d9), }, /* Nokia 6760 Slide */
1829 	{ NOKIA_PCSUITE_ACM_INFO(0x01d0), }, /* Nokia E52 */
1830 	{ NOKIA_PCSUITE_ACM_INFO(0x0223), }, /* Nokia E72 */
1831 	{ NOKIA_PCSUITE_ACM_INFO(0x0275), }, /* Nokia X6 */
1832 	{ NOKIA_PCSUITE_ACM_INFO(0x026c), }, /* Nokia N97 Mini */
1833 	{ NOKIA_PCSUITE_ACM_INFO(0x0154), }, /* Nokia 5800 XpressMusic */
1834 	{ NOKIA_PCSUITE_ACM_INFO(0x04ce), }, /* Nokia E90 */
1835 	{ NOKIA_PCSUITE_ACM_INFO(0x01d4), }, /* Nokia E55 */
1836 	{ NOKIA_PCSUITE_ACM_INFO(0x0302), }, /* Nokia N8 */
1837 	{ NOKIA_PCSUITE_ACM_INFO(0x0335), }, /* Nokia E7 */
1838 	{ NOKIA_PCSUITE_ACM_INFO(0x03cd), }, /* Nokia C7 */
1839 	{ SAMSUNG_PCSUITE_ACM_INFO(0x6651), }, /* Samsung GTi8510 (INNOV8) */
1840 
1841 	/* Support for Owen devices */
1842 	{ USB_DEVICE(0x03eb, 0x0030), }, /* Owen SI30 */
1843 
1844 	/* NOTE: non-Nokia COMM/ACM/0xff is likely MSFT RNDIS... NOT a modem! */
1845 
1846 	/* Support for Droids MuIn LCD */
1847 	{ USB_DEVICE(0x04d8, 0x000b),
1848 	.driver_info = NO_DATA_INTERFACE,
1849 	},
1850 
1851 #if IS_ENABLED(CONFIG_INPUT_IMS_PCU)
1852 	{ USB_DEVICE(0x04d8, 0x0082),	/* Application mode */
1853 	.driver_info = IGNORE_DEVICE,
1854 	},
1855 	{ USB_DEVICE(0x04d8, 0x0083),	/* Bootloader mode */
1856 	.driver_info = IGNORE_DEVICE,
1857 	},
1858 #endif
1859 
1860 	/*Samsung phone in firmware update mode */
1861 	{ USB_DEVICE(0x04e8, 0x685d),
1862 	.driver_info = IGNORE_DEVICE,
1863 	},
1864 
1865 	/* Exclude Infineon Flash Loader utility */
1866 	{ USB_DEVICE(0x058b, 0x0041),
1867 	.driver_info = IGNORE_DEVICE,
1868 	},
1869 
1870 	/* control interfaces without any protocol set */
1871 	{ USB_INTERFACE_INFO(USB_CLASS_COMM, USB_CDC_SUBCLASS_ACM,
1872 		USB_CDC_PROTO_NONE) },
1873 
1874 	/* control interfaces with various AT-command sets */
1875 	{ USB_INTERFACE_INFO(USB_CLASS_COMM, USB_CDC_SUBCLASS_ACM,
1876 		USB_CDC_ACM_PROTO_AT_V25TER) },
1877 	{ USB_INTERFACE_INFO(USB_CLASS_COMM, USB_CDC_SUBCLASS_ACM,
1878 		USB_CDC_ACM_PROTO_AT_PCCA101) },
1879 	{ USB_INTERFACE_INFO(USB_CLASS_COMM, USB_CDC_SUBCLASS_ACM,
1880 		USB_CDC_ACM_PROTO_AT_PCCA101_WAKE) },
1881 	{ USB_INTERFACE_INFO(USB_CLASS_COMM, USB_CDC_SUBCLASS_ACM,
1882 		USB_CDC_ACM_PROTO_AT_GSM) },
1883 	{ USB_INTERFACE_INFO(USB_CLASS_COMM, USB_CDC_SUBCLASS_ACM,
1884 		USB_CDC_ACM_PROTO_AT_3G) },
1885 	{ USB_INTERFACE_INFO(USB_CLASS_COMM, USB_CDC_SUBCLASS_ACM,
1886 		USB_CDC_ACM_PROTO_AT_CDMA) },
1887 
1888 	{ USB_DEVICE(0x1519, 0x0452), /* Intel 7260 modem */
1889 	.driver_info = SEND_ZERO_PACKET,
1890 	},
1891 
1892 	{ }
1893 };
1894 
1895 MODULE_DEVICE_TABLE(usb, acm_ids);
1896 
1897 static struct usb_driver acm_driver = {
1898 	.name =		"cdc_acm",
1899 	.probe =	acm_probe,
1900 	.disconnect =	acm_disconnect,
1901 #ifdef CONFIG_PM
1902 	.suspend =	acm_suspend,
1903 	.resume =	acm_resume,
1904 	.reset_resume =	acm_reset_resume,
1905 #endif
1906 	.pre_reset =	acm_pre_reset,
1907 	.id_table =	acm_ids,
1908 #ifdef CONFIG_PM
1909 	.supports_autosuspend = 1,
1910 #endif
1911 	.disable_hub_initiated_lpm = 1,
1912 };
1913 
1914 /*
1915  * TTY driver structures.
1916  */
1917 
1918 static const struct tty_operations acm_ops = {
1919 	.install =		acm_tty_install,
1920 	.open =			acm_tty_open,
1921 	.close =		acm_tty_close,
1922 	.cleanup =		acm_tty_cleanup,
1923 	.hangup =		acm_tty_hangup,
1924 	.write =		acm_tty_write,
1925 	.write_room =		acm_tty_write_room,
1926 	.ioctl =		acm_tty_ioctl,
1927 	.throttle =		acm_tty_throttle,
1928 	.unthrottle =		acm_tty_unthrottle,
1929 	.chars_in_buffer =	acm_tty_chars_in_buffer,
1930 	.break_ctl =		acm_tty_break_ctl,
1931 	.set_termios =		acm_tty_set_termios,
1932 	.tiocmget =		acm_tty_tiocmget,
1933 	.tiocmset =		acm_tty_tiocmset,
1934 	.get_icount =		acm_tty_get_icount,
1935 };
1936 
1937 /*
1938  * Init / exit.
1939  */
1940 
acm_init(void)1941 static int __init acm_init(void)
1942 {
1943 	int retval;
1944 	acm_tty_driver = alloc_tty_driver(ACM_TTY_MINORS);
1945 	if (!acm_tty_driver)
1946 		return -ENOMEM;
1947 	acm_tty_driver->driver_name = "acm",
1948 	acm_tty_driver->name = "ttyACM",
1949 	acm_tty_driver->major = ACM_TTY_MAJOR,
1950 	acm_tty_driver->minor_start = 0,
1951 	acm_tty_driver->type = TTY_DRIVER_TYPE_SERIAL,
1952 	acm_tty_driver->subtype = SERIAL_TYPE_NORMAL,
1953 	acm_tty_driver->flags = TTY_DRIVER_REAL_RAW | TTY_DRIVER_DYNAMIC_DEV;
1954 	acm_tty_driver->init_termios = tty_std_termios;
1955 	acm_tty_driver->init_termios.c_cflag = B9600 | CS8 | CREAD |
1956 								HUPCL | CLOCAL;
1957 	tty_set_operations(acm_tty_driver, &acm_ops);
1958 
1959 	retval = tty_register_driver(acm_tty_driver);
1960 	if (retval) {
1961 		put_tty_driver(acm_tty_driver);
1962 		return retval;
1963 	}
1964 
1965 	retval = usb_register(&acm_driver);
1966 	if (retval) {
1967 		tty_unregister_driver(acm_tty_driver);
1968 		put_tty_driver(acm_tty_driver);
1969 		return retval;
1970 	}
1971 
1972 	printk(KERN_INFO KBUILD_MODNAME ": " DRIVER_DESC "\n");
1973 
1974 	return 0;
1975 }
1976 
acm_exit(void)1977 static void __exit acm_exit(void)
1978 {
1979 	usb_deregister(&acm_driver);
1980 	tty_unregister_driver(acm_tty_driver);
1981 	put_tty_driver(acm_tty_driver);
1982 	idr_destroy(&acm_minors);
1983 }
1984 
1985 module_init(acm_init);
1986 module_exit(acm_exit);
1987 
1988 MODULE_AUTHOR(DRIVER_AUTHOR);
1989 MODULE_DESCRIPTION(DRIVER_DESC);
1990 MODULE_LICENSE("GPL");
1991 MODULE_ALIAS_CHARDEV_MAJOR(ACM_TTY_MAJOR);
1992