11539Srgrimes/*-
21539Srgrimes * Copyright (c) 2010 Fredrik Lindberg <fli@shapeshifter.se>
31539Srgrimes * All rights reserved.
41539Srgrimes *
51539Srgrimes * Redistribution and use in source and binary forms, with or without
61539Srgrimes * modification, are permitted provided that the following conditions
71539Srgrimes * are met:
81539Srgrimes * 1. Redistributions of source code must retain the above copyright
91539Srgrimes *    notice, this list of conditions and the following disclaimer.
101539Srgrimes * 2. Redistributions in binary form must reproduce the above copyright
111539Srgrimes *    notice, this list of conditions and the following disclaimer in the
121539Srgrimes *    documentation and/or other materials provided with the distribution.
131539Srgrimes *
141539Srgrimes * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
151539Srgrimes * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
161539Srgrimes * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
171539Srgrimes * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
181539Srgrimes * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
191539Srgrimes * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
201539Srgrimes * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
211539Srgrimes * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
221539Srgrimes * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
231539Srgrimes * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
241539Srgrimes *
251539Srgrimes */
261539Srgrimes#include <sys/cdefs.h>
271539Srgrimes__FBSDID("$FreeBSD$");
281539Srgrimes
291539Srgrimes#include <sys/param.h>
301539Srgrimes#include <sys/types.h>
311539Srgrimes#include <sys/sockio.h>
321539Srgrimes#include <sys/mbuf.h>
331539Srgrimes#include <sys/malloc.h>
341539Srgrimes#include <sys/kernel.h>
351539Srgrimes#include <sys/module.h>
362163Spaul#include <sys/socket.h>
372163Spaul#include <sys/tty.h>
381539Srgrimes#include <sys/sysctl.h>
391539Srgrimes#include <sys/condvar.h>
401539Srgrimes#include <sys/sx.h>
411539Srgrimes#include <sys/proc.h>
421539Srgrimes#include <sys/conf.h>
431539Srgrimes#include <sys/bus.h>
441539Srgrimes#include <sys/systm.h>
451539Srgrimes#include <sys/limits.h>
461539Srgrimes
471539Srgrimes#include <machine/bus.h>
481539Srgrimes
491539Srgrimes#include <net/if.h>
501539Srgrimes#include <net/if_types.h>
511539Srgrimes#include <net/netisr.h>
521539Srgrimes#include <net/bpf.h>
531539Srgrimes#include <netinet/in.h>
541539Srgrimes#include <netinet/ip.h>
551539Srgrimes#include <netinet/ip6.h>
561539Srgrimes
571539Srgrimes#include <dev/usb/usb.h>
581539Srgrimes#include <dev/usb/usbdi.h>
591539Srgrimes#include <dev/usb/usbdi_util.h>
601539Srgrimes#include <dev/usb/usb_cdc.h>
611539Srgrimes#include "usbdevs.h"
621539Srgrimes#define USB_DEBUG_VAR uhso_debug
631539Srgrimes#include <dev/usb/usb_debug.h>
641539Srgrimes#include <dev/usb/usb_process.h>
651539Srgrimes#include <dev/usb/usb_busdma.h>
661539Srgrimes#include <dev/usb/usb_msctest.h>
671539Srgrimes
681539Srgrimes#include <dev/usb/serial/usb_serial.h>
69
70struct uhso_tty {
71	struct uhso_softc *ht_sc;
72	struct usb_xfer	*ht_xfer[3];
73	int		ht_muxport; /* Mux. port no */
74	int		ht_open;
75	char		ht_name[32];
76};
77
78struct uhso_softc {
79	device_t		sc_dev;
80	struct usb_device	*sc_udev;
81	struct mtx		sc_mtx;
82	uint32_t		sc_type;	/* Interface definition */
83	int			sc_radio;
84
85	struct usb_xfer		*sc_xfer[3];
86	uint8_t			sc_iface_no;
87	uint8_t			sc_iface_index;
88
89	/* Control pipe */
90	struct usb_xfer	*	sc_ctrl_xfer[2];
91	uint8_t			sc_ctrl_iface_no;
92
93	/* Network */
94	struct usb_xfer		*sc_if_xfer[2];
95	struct ifnet		*sc_ifp;
96	struct mbuf		*sc_mwait;	/* Partial packet */
97	size_t			sc_waitlen;	/* No. of outstanding bytes */
98	struct ifqueue		sc_rxq;
99	struct callout		sc_c;
100
101	/* TTY related structures */
102	struct ucom_super_softc sc_super_ucom;
103	int			sc_ttys;
104	struct uhso_tty		*sc_tty;
105	struct ucom_softc	*sc_ucom;
106	int			sc_msr;
107	int			sc_lsr;
108	int			sc_line;
109};
110
111#define UHSO_MAX_MTU		2048
112
113/*
114 * There are mainly two type of cards floating around.
115 * The first one has 2,3 or 4 interfaces with a multiplexed serial port
116 * and packet interface on the first interface and bulk serial ports
117 * on the others.
118 * The second type of card has several other interfaces, their purpose
119 * can be detected during run-time.
120 */
121#define UHSO_IFACE_SPEC(usb_type, port, port_type) \
122	(((usb_type) << 24) | ((port) << 16) | (port_type))
123
124#define UHSO_IFACE_USB_TYPE(x) ((x >> 24) & 0xff)
125#define UHSO_IFACE_PORT(x) ((x >> 16) & 0xff)
126#define UHSO_IFACE_PORT_TYPE(x) (x & 0xff)
127
128/*
129 * USB interface types
130 */
131#define UHSO_IF_NET		0x01	/* Network packet interface */
132#define UHSO_IF_MUX		0x02	/* Multiplexed serial port */
133#define UHSO_IF_BULK		0x04	/* Bulk interface */
134
135/*
136 * Port types
137 */
138#define UHSO_PORT_UNKNOWN	0x00
139#define UHSO_PORT_SERIAL	0x01	/* Serial port */
140#define UHSO_PORT_NETWORK	0x02	/* Network packet interface */
141
142/*
143 * Multiplexed serial port destination sub-port names
144 */
145#define UHSO_MPORT_TYPE_CTL	0x00	/* Control port */
146#define UHSO_MPORT_TYPE_APP	0x01	/* Application */
147#define UHSO_MPORT_TYPE_PCSC	0x02
148#define UHSO_MPORT_TYPE_GPS	0x03
149#define UHSO_MPORT_TYPE_APP2	0x04	/* Secondary application */
150#define UHSO_MPORT_TYPE_MAX	UHSO_MPORT_TYPE_APP2
151#define UHSO_MPORT_TYPE_NOMAX	8	/* Max number of mux ports */
152
153/*
154 * Port definitions
155 * Note that these definitions are arbitrary and do not match the values
156 * returned by the auto config descriptor.
157 */
158#define UHSO_PORT_TYPE_UNKNOWN	0x00
159#define UHSO_PORT_TYPE_CTL	0x01
160#define UHSO_PORT_TYPE_APP	0x02
161#define UHSO_PORT_TYPE_APP2	0x03
162#define UHSO_PORT_TYPE_MODEM	0x04
163#define UHSO_PORT_TYPE_NETWORK	0x05
164#define UHSO_PORT_TYPE_DIAG	0x06
165#define UHSO_PORT_TYPE_DIAG2	0x07
166#define UHSO_PORT_TYPE_GPS	0x08
167#define UHSO_PORT_TYPE_GPSCTL	0x09
168#define UHSO_PORT_TYPE_PCSC	0x0a
169#define UHSO_PORT_TYPE_MSD	0x0b
170#define UHSO_PORT_TYPE_VOICE	0x0c
171#define UHSO_PORT_TYPE_MAX	0x0c
172
173static eventhandler_tag uhso_etag;
174
175/* Overall port type */
176static char *uhso_port[] = {
177	"Unknown",
178	"Serial",
179	"Network",
180	"Network/Serial"
181};
182
183/*
184 * Map between interface port type read from device and description type.
185 * The position in this array is a direct map to the auto config
186 * descriptor values.
187 */
188static unsigned char uhso_port_map[] = {
189	UHSO_PORT_TYPE_UNKNOWN,
190	UHSO_PORT_TYPE_DIAG,
191	UHSO_PORT_TYPE_GPS,
192	UHSO_PORT_TYPE_GPSCTL,
193	UHSO_PORT_TYPE_APP,
194	UHSO_PORT_TYPE_APP2,
195	UHSO_PORT_TYPE_CTL,
196	UHSO_PORT_TYPE_NETWORK,
197	UHSO_PORT_TYPE_MODEM,
198	UHSO_PORT_TYPE_MSD,
199	UHSO_PORT_TYPE_PCSC,
200	UHSO_PORT_TYPE_VOICE
201};
202static char uhso_port_map_max = sizeof(uhso_port_map) / sizeof(char);
203
204static unsigned char uhso_mux_port_map[] = {
205	UHSO_PORT_TYPE_CTL,
206	UHSO_PORT_TYPE_APP,
207	UHSO_PORT_TYPE_PCSC,
208	UHSO_PORT_TYPE_GPS,
209	UHSO_PORT_TYPE_APP2
210};
211
212static char *uhso_port_type[] = {
213	"Unknown",  /* Not a valid port */
214	"Control",
215	"Application",
216	"Application (Secondary)",
217	"Modem",
218	"Network",
219	"Diagnostic",
220	"Diagnostic (Secondary)",
221	"GPS",
222	"GPS Control",
223	"PC Smartcard",
224	"MSD",
225	"Voice",
226};
227
228static char *uhso_port_type_sysctl[] = {
229	"unknown",
230	"control",
231	"application",
232	"application",
233	"modem",
234	"network",
235	"diagnostic",
236	"diagnostic",
237	"gps",
238	"gps_control",
239	"pcsc",
240	"msd",
241	"voice",
242};
243
244#define UHSO_STATIC_IFACE	0x01
245#define UHSO_AUTO_IFACE		0x02
246
247/* ifnet device unit allocations */
248static struct unrhdr *uhso_ifnet_unit = NULL;
249
250static const STRUCT_USB_HOST_ID uhso_devs[] = {
251#define	UHSO_DEV(v,p,i) { USB_VPI(USB_VENDOR_##v, USB_PRODUCT_##v##_##p, i) }
252	/* Option GlobeTrotter MAX 7.2 with upgraded firmware */
253	UHSO_DEV(OPTION, GTMAX72, UHSO_STATIC_IFACE),
254	/* Option GlobeSurfer iCON 7.2 */
255	UHSO_DEV(OPTION, GSICON72, UHSO_STATIC_IFACE),
256	/* Option iCON 225 */
257	UHSO_DEV(OPTION, GTHSDPA, UHSO_STATIC_IFACE),
258	/* Option GlobeSurfer iCON HSUPA */
259	UHSO_DEV(OPTION, GSICONHSUPA, UHSO_STATIC_IFACE),
260	/* Option GlobeTrotter HSUPA */
261	UHSO_DEV(OPTION, GTHSUPA, UHSO_STATIC_IFACE),
262	/* GE40x */
263	UHSO_DEV(OPTION, GE40X, UHSO_AUTO_IFACE),
264	UHSO_DEV(OPTION, GE40X_1, UHSO_AUTO_IFACE),
265	UHSO_DEV(OPTION, GE40X_2, UHSO_AUTO_IFACE),
266	UHSO_DEV(OPTION, GE40X_3, UHSO_AUTO_IFACE),
267	/* Option GlobeSurfer iCON 401 */
268	UHSO_DEV(OPTION, ICON401, UHSO_AUTO_IFACE),
269	/* Option GlobeTrotter Module 382 */
270	UHSO_DEV(OPTION, GMT382, UHSO_AUTO_IFACE),
271	/* Option iCON EDGE */
272	UHSO_DEV(OPTION, ICONEDGE, UHSO_STATIC_IFACE),
273	/* Option Module HSxPA */
274	UHSO_DEV(OPTION, MODHSXPA, UHSO_STATIC_IFACE),
275	/* Option iCON 321 */
276	UHSO_DEV(OPTION, ICON321, UHSO_STATIC_IFACE),
277	/* Option iCON 322 */
278	UHSO_DEV(OPTION, GTICON322, UHSO_STATIC_IFACE),
279	/* Option iCON 505 */
280	UHSO_DEV(OPTION, ICON505, UHSO_AUTO_IFACE),
281	/* Option iCON 452 */
282	UHSO_DEV(OPTION, ICON505, UHSO_AUTO_IFACE),
283#undef UHSO_DEV
284};
285
286static SYSCTL_NODE(_hw_usb, OID_AUTO, uhso, CTLFLAG_RW, 0, "USB uhso");
287static int uhso_autoswitch = 1;
288SYSCTL_INT(_hw_usb_uhso, OID_AUTO, auto_switch, CTLFLAG_RW,
289    &uhso_autoswitch, 0, "Automatically switch to modem mode");
290
291#ifdef USB_DEBUG
292#ifdef UHSO_DEBUG
293static int uhso_debug = UHSO_DEBUG;
294#else
295static int uhso_debug = -1;
296#endif
297
298SYSCTL_INT(_hw_usb_uhso, OID_AUTO, debug, CTLFLAG_RW,
299    &uhso_debug, 0, "Debug level");
300
301#define UHSO_DPRINTF(n, x, ...) {\
302	if (uhso_debug >= n) {\
303		printf("%s: " x, __func__, ##__VA_ARGS__);\
304	}\
305}
306#else
307#define UHSO_DPRINTF(n, x, ...)
308#endif
309
310#ifdef UHSO_DEBUG_HEXDUMP
311# define UHSO_HEXDUMP(_buf, _len) do { \
312  { \
313        size_t __tmp; \
314        const char *__buf = (const char *)_buf; \
315        for (__tmp = 0; __tmp < _len; __tmp++) \
316                printf("%02hhx ", *__buf++); \
317    printf("\n"); \
318  } \
319} while(0)
320#else
321# define UHSO_HEXDUMP(_buf, _len)
322#endif
323
324enum {
325	UHSO_MUX_ENDPT_INTR = 0,
326	UHSO_MUX_ENDPT_MAX
327};
328
329enum {
330	UHSO_CTRL_READ = 0,
331	UHSO_CTRL_WRITE,
332	UHSO_CTRL_MAX
333};
334
335enum {
336	UHSO_IFNET_READ = 0,
337	UHSO_IFNET_WRITE,
338	UHSO_IFNET_MAX
339};
340
341enum {
342	UHSO_BULK_ENDPT_READ = 0,
343	UHSO_BULK_ENDPT_WRITE,
344	UHSO_BULK_ENDPT_INTR,
345	UHSO_BULK_ENDPT_MAX
346};
347
348static usb_callback_t uhso_mux_intr_callback;
349static usb_callback_t uhso_mux_read_callback;
350static usb_callback_t uhso_mux_write_callback;
351static usb_callback_t uhso_bs_read_callback;
352static usb_callback_t uhso_bs_write_callback;
353static usb_callback_t uhso_bs_intr_callback;
354static usb_callback_t uhso_ifnet_read_callback;
355static usb_callback_t uhso_ifnet_write_callback;
356
357/* Config used for the default control pipes */
358static const struct usb_config uhso_ctrl_config[UHSO_CTRL_MAX] = {
359	[UHSO_CTRL_READ] = {
360		.type = UE_CONTROL,
361		.endpoint = 0x00,
362		.direction = UE_DIR_ANY,
363		.flags = { .pipe_bof = 1, .short_xfer_ok = 1 },
364		.bufsize = sizeof(struct usb_device_request) + 1024,
365		.callback = &uhso_mux_read_callback
366	},
367
368	[UHSO_CTRL_WRITE] = {
369		.type = UE_CONTROL,
370		.endpoint = 0x00,
371		.direction = UE_DIR_ANY,
372		.flags = { .pipe_bof = 1, .force_short_xfer = 1 },
373		.bufsize = sizeof(struct usb_device_request) + 1024,
374		.timeout = 1000,
375		.callback = &uhso_mux_write_callback
376	}
377};
378
379/* Config for the multiplexed serial ports */
380static const struct usb_config uhso_mux_config[UHSO_MUX_ENDPT_MAX] = {
381	[UHSO_MUX_ENDPT_INTR] = {
382		.type = UE_INTERRUPT,
383		.endpoint = UE_ADDR_ANY,
384		.direction = UE_DIR_IN,
385		.flags = { .short_xfer_ok = 1 },
386		.bufsize = 0,
387		.callback = &uhso_mux_intr_callback,
388	}
389};
390
391/* Config for the raw IP-packet interface */
392static const struct usb_config uhso_ifnet_config[UHSO_IFNET_MAX] = {
393	[UHSO_IFNET_READ] = {
394		.type = UE_BULK,
395		.endpoint = UE_ADDR_ANY,
396		.direction = UE_DIR_IN,
397		.flags = { .pipe_bof = 1, .short_xfer_ok = 1 },
398		.bufsize = MCLBYTES,
399		.callback = &uhso_ifnet_read_callback
400	},
401	[UHSO_IFNET_WRITE] = {
402		.type = UE_BULK,
403		.endpoint = UE_ADDR_ANY,
404		.direction = UE_DIR_OUT,
405		.flags = { .pipe_bof = 1, .force_short_xfer = 1 },
406		.bufsize = MCLBYTES,
407		.timeout = 5 * USB_MS_HZ,
408		.callback = &uhso_ifnet_write_callback
409	}
410};
411
412/* Config for interfaces with normal bulk serial ports */
413static const struct usb_config uhso_bs_config[UHSO_BULK_ENDPT_MAX] = {
414	[UHSO_BULK_ENDPT_READ] = {
415		.type = UE_BULK,
416		.endpoint = UE_ADDR_ANY,
417		.direction = UE_DIR_IN,
418		.flags = { .pipe_bof = 1, .short_xfer_ok = 1 },
419		.bufsize = 4096,
420		.callback = &uhso_bs_read_callback
421	},
422
423	[UHSO_BULK_ENDPT_WRITE] = {
424		.type = UE_BULK,
425		.endpoint = UE_ADDR_ANY,
426		.direction = UE_DIR_OUT,
427		.flags = { .pipe_bof = 1, .force_short_xfer = 1 },
428		.bufsize = 8192,
429		.callback = &uhso_bs_write_callback
430	},
431
432	[UHSO_BULK_ENDPT_INTR] = {
433		.type = UE_INTERRUPT,
434		.endpoint = UE_ADDR_ANY,
435		.direction = UE_DIR_IN,
436		.flags = { .short_xfer_ok = 1 },
437		.bufsize = 0,
438		.callback = &uhso_bs_intr_callback,
439	}
440};
441
442static int  uhso_probe_iface(struct uhso_softc *, int,
443    int (*probe)(struct usb_device *, int));
444static int  uhso_probe_iface_auto(struct usb_device *, int);
445static int  uhso_probe_iface_static(struct usb_device *, int);
446static int  uhso_attach_muxserial(struct uhso_softc *, struct usb_interface *,
447    int type);
448static int  uhso_attach_bulkserial(struct uhso_softc *, struct usb_interface *,
449    int type);
450static int  uhso_attach_ifnet(struct uhso_softc *, struct usb_interface *,
451    int type);
452static void uhso_test_autoinst(void *, struct usb_device *,
453		struct usb_attach_arg *);
454static int  uhso_driver_loaded(struct module *, int, void *);
455static int uhso_radio_sysctl(SYSCTL_HANDLER_ARGS);
456static int uhso_radio_ctrl(struct uhso_softc *, int);
457
458static void uhso_free(struct ucom_softc *);
459static void uhso_ucom_start_read(struct ucom_softc *);
460static void uhso_ucom_stop_read(struct ucom_softc *);
461static void uhso_ucom_start_write(struct ucom_softc *);
462static void uhso_ucom_stop_write(struct ucom_softc *);
463static void uhso_ucom_cfg_get_status(struct ucom_softc *, uint8_t *, uint8_t *);
464static void uhso_ucom_cfg_set_dtr(struct ucom_softc *, uint8_t);
465static void uhso_ucom_cfg_set_rts(struct ucom_softc *, uint8_t);
466static void uhso_if_init(void *);
467static void uhso_if_start(struct ifnet *);
468static void uhso_if_stop(struct uhso_softc *);
469static int  uhso_if_ioctl(struct ifnet *, u_long, caddr_t);
470static int  uhso_if_output(struct ifnet *, struct mbuf *,
471    const struct sockaddr *, struct route *);
472static void uhso_if_rxflush(void *);
473
474static device_probe_t uhso_probe;
475static device_attach_t uhso_attach;
476static device_detach_t uhso_detach;
477static void uhso_free_softc(struct uhso_softc *);
478
479static device_method_t uhso_methods[] = {
480	DEVMETHOD(device_probe,		uhso_probe),
481	DEVMETHOD(device_attach,	uhso_attach),
482	DEVMETHOD(device_detach,	uhso_detach),
483	{ 0, 0 }
484};
485
486static driver_t uhso_driver = {
487	.name = "uhso",
488	.methods = uhso_methods,
489	.size = sizeof(struct uhso_softc)
490};
491
492static devclass_t uhso_devclass;
493DRIVER_MODULE(uhso, uhub, uhso_driver, uhso_devclass, uhso_driver_loaded, 0);
494MODULE_DEPEND(uhso, ucom, 1, 1, 1);
495MODULE_DEPEND(uhso, usb, 1, 1, 1);
496MODULE_VERSION(uhso, 1);
497
498static struct ucom_callback uhso_ucom_callback = {
499	.ucom_cfg_get_status = &uhso_ucom_cfg_get_status,
500	.ucom_cfg_set_dtr = &uhso_ucom_cfg_set_dtr,
501	.ucom_cfg_set_rts = &uhso_ucom_cfg_set_rts,
502	.ucom_start_read = uhso_ucom_start_read,
503	.ucom_stop_read = uhso_ucom_stop_read,
504	.ucom_start_write = uhso_ucom_start_write,
505	.ucom_stop_write = uhso_ucom_stop_write,
506	.ucom_free = &uhso_free,
507};
508
509static int
510uhso_probe(device_t self)
511{
512	struct usb_attach_arg *uaa = device_get_ivars(self);
513	int error;
514
515	if (uaa->usb_mode != USB_MODE_HOST)
516		return (ENXIO);
517	if (uaa->info.bConfigIndex != 0)
518		return (ENXIO);
519	if (uaa->info.bDeviceClass != 0xff)
520		return (ENXIO);
521
522	error = usbd_lookup_id_by_uaa(uhso_devs, sizeof(uhso_devs), uaa);
523	if (error != 0)
524		return (error);
525
526	/*
527	 * Probe device to see if we are able to attach
528	 * to this interface or not.
529	 */
530	if (USB_GET_DRIVER_INFO(uaa) == UHSO_AUTO_IFACE) {
531		if (uhso_probe_iface_auto(uaa->device,
532		    uaa->info.bIfaceNum) == 0)
533			return (ENXIO);
534	}
535	return (error);
536}
537
538static int
539uhso_attach(device_t self)
540{
541	struct uhso_softc *sc = device_get_softc(self);
542	struct usb_attach_arg *uaa = device_get_ivars(self);
543	struct usb_interface_descriptor *id;
544	struct sysctl_ctx_list *sctx;
545	struct sysctl_oid *soid;
546	struct sysctl_oid *tree = NULL, *tty_node;
547	struct ucom_softc *ucom;
548	struct uhso_tty *ht;
549	int i, error, port;
550	void *probe_f;
551	usb_error_t uerr;
552	char *desc;
553
554	sc->sc_dev = self;
555	sc->sc_udev = uaa->device;
556	mtx_init(&sc->sc_mtx, "uhso", NULL, MTX_DEF);
557	ucom_ref(&sc->sc_super_ucom);
558
559	sc->sc_ucom = NULL;
560	sc->sc_ttys = 0;
561	sc->sc_radio = 1;
562
563	id = usbd_get_interface_descriptor(uaa->iface);
564	sc->sc_ctrl_iface_no = id->bInterfaceNumber;
565
566	sc->sc_iface_no = uaa->info.bIfaceNum;
567	sc->sc_iface_index = uaa->info.bIfaceIndex;
568
569	/* Setup control pipe */
570	uerr = usbd_transfer_setup(uaa->device,
571	    &sc->sc_iface_index, sc->sc_ctrl_xfer,
572	    uhso_ctrl_config, UHSO_CTRL_MAX, sc, &sc->sc_mtx);
573	if (uerr) {
574		device_printf(self, "Failed to setup control pipe: %s\n",
575		    usbd_errstr(uerr));
576		goto out;
577	}
578
579	if (USB_GET_DRIVER_INFO(uaa) == UHSO_STATIC_IFACE)
580		probe_f = uhso_probe_iface_static;
581	else if (USB_GET_DRIVER_INFO(uaa) == UHSO_AUTO_IFACE)
582		probe_f = uhso_probe_iface_auto;
583	else
584		goto out;
585
586	error = uhso_probe_iface(sc, uaa->info.bIfaceNum, probe_f);
587	if (error != 0)
588		goto out;
589
590	sctx = device_get_sysctl_ctx(sc->sc_dev);
591	soid = device_get_sysctl_tree(sc->sc_dev);
592
593	SYSCTL_ADD_STRING(sctx, SYSCTL_CHILDREN(soid), OID_AUTO, "type",
594	    CTLFLAG_RD, uhso_port[UHSO_IFACE_PORT(sc->sc_type)], 0,
595	    "Port available at this interface");
596	SYSCTL_ADD_PROC(sctx, SYSCTL_CHILDREN(soid), OID_AUTO, "radio",
597	    CTLTYPE_INT | CTLFLAG_RW, sc, 0, uhso_radio_sysctl, "I", "Enable radio");
598
599	/*
600	 * The default interface description on most Option devices isn't
601	 * very helpful. So we skip device_set_usb_desc and set the
602	 * device description manually.
603	 */
604	device_set_desc_copy(self, uhso_port_type[UHSO_IFACE_PORT_TYPE(sc->sc_type)]);
605	/* Announce device */
606	device_printf(self, "<%s port> at <%s %s> on %s\n",
607	    uhso_port_type[UHSO_IFACE_PORT_TYPE(sc->sc_type)],
608	    usb_get_manufacturer(uaa->device),
609	    usb_get_product(uaa->device),
610	    device_get_nameunit(device_get_parent(self)));
611
612	if (sc->sc_ttys > 0) {
613		SYSCTL_ADD_INT(sctx, SYSCTL_CHILDREN(soid), OID_AUTO, "ports",
614		    CTLFLAG_RD, &sc->sc_ttys, 0, "Number of attached serial ports");
615
616		tree = SYSCTL_ADD_NODE(sctx, SYSCTL_CHILDREN(soid), OID_AUTO,
617		    "port", CTLFLAG_RD, NULL, "Serial ports");
618	}
619
620	/*
621	 * Loop through the number of found TTYs and create sysctl
622	 * nodes for them.
623	 */
624	for (i = 0; i < sc->sc_ttys; i++) {
625		ht = &sc->sc_tty[i];
626		ucom = &sc->sc_ucom[i];
627
628		if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_MUX)
629			port = uhso_mux_port_map[ht->ht_muxport];
630		else
631			port = UHSO_IFACE_PORT_TYPE(sc->sc_type);
632
633		desc = uhso_port_type_sysctl[port];
634
635		tty_node = SYSCTL_ADD_NODE(sctx, SYSCTL_CHILDREN(tree), OID_AUTO,
636		    desc, CTLFLAG_RD, NULL, "");
637
638		ht->ht_name[0] = 0;
639		if (sc->sc_ttys == 1)
640			snprintf(ht->ht_name, 32, "cuaU%d", ucom->sc_super->sc_unit);
641		else {
642			snprintf(ht->ht_name, 32, "cuaU%d.%d",
643			    ucom->sc_super->sc_unit, ucom->sc_subunit);
644		}
645
646		desc = uhso_port_type[port];
647		SYSCTL_ADD_STRING(sctx, SYSCTL_CHILDREN(tty_node), OID_AUTO,
648		    "tty", CTLFLAG_RD, ht->ht_name, 0, "");
649		SYSCTL_ADD_STRING(sctx, SYSCTL_CHILDREN(tty_node), OID_AUTO,
650		    "desc", CTLFLAG_RD, desc, 0, "");
651
652		if (bootverbose)
653			device_printf(sc->sc_dev,
654			    "\"%s\" port at %s\n", desc, ht->ht_name);
655	}
656
657	return (0);
658out:
659	uhso_detach(sc->sc_dev);
660	return (ENXIO);
661}
662
663static int
664uhso_detach(device_t self)
665{
666	struct uhso_softc *sc = device_get_softc(self);
667	int i;
668
669	usbd_transfer_unsetup(sc->sc_xfer, 3);
670	usbd_transfer_unsetup(sc->sc_ctrl_xfer, UHSO_CTRL_MAX);
671	if (sc->sc_ttys > 0) {
672		ucom_detach(&sc->sc_super_ucom, sc->sc_ucom);
673
674		for (i = 0; i < sc->sc_ttys; i++) {
675			if (sc->sc_tty[i].ht_muxport != -1) {
676				usbd_transfer_unsetup(sc->sc_tty[i].ht_xfer,
677				    UHSO_CTRL_MAX);
678			}
679		}
680
681		free(sc->sc_tty, M_USBDEV);
682		free(sc->sc_ucom, M_USBDEV);
683	}
684
685	if (sc->sc_ifp != NULL) {
686		callout_drain(&sc->sc_c);
687		free_unr(uhso_ifnet_unit, sc->sc_ifp->if_dunit);
688		mtx_lock(&sc->sc_mtx);
689		uhso_if_stop(sc);
690		bpfdetach(sc->sc_ifp);
691		if_detach(sc->sc_ifp);
692		if_free(sc->sc_ifp);
693		mtx_unlock(&sc->sc_mtx);
694		usbd_transfer_unsetup(sc->sc_if_xfer, UHSO_IFNET_MAX);
695	}
696
697	device_claim_softc(self);
698
699	uhso_free_softc(sc);
700
701	return (0);
702}
703
704UCOM_UNLOAD_DRAIN(uhso);
705
706static void
707uhso_free_softc(struct uhso_softc *sc)
708{
709	if (ucom_unref(&sc->sc_super_ucom)) {
710		mtx_destroy(&sc->sc_mtx);
711		device_free_softc(sc);
712	}
713}
714
715static void
716uhso_free(struct ucom_softc *ucom)
717{
718	uhso_free_softc(ucom->sc_parent);
719}
720
721static void
722uhso_test_autoinst(void *arg, struct usb_device *udev,
723    struct usb_attach_arg *uaa)
724{
725	struct usb_interface *iface;
726	struct usb_interface_descriptor *id;
727
728	if (uaa->dev_state != UAA_DEV_READY || !uhso_autoswitch)
729		return;
730
731	iface = usbd_get_iface(udev, 0);
732	if (iface == NULL)
733		return;
734	id = iface->idesc;
735	if (id == NULL || id->bInterfaceClass != UICLASS_MASS)
736		return;
737	if (usbd_lookup_id_by_uaa(uhso_devs, sizeof(uhso_devs), uaa))
738		return;		/* no device match */
739
740	if (usb_msc_eject(udev, 0, MSC_EJECT_REZERO) == 0) {
741		/* success, mark the udev as disappearing */
742		uaa->dev_state = UAA_DEV_EJECTING;
743	}
744}
745
746static int
747uhso_driver_loaded(struct module *mod, int what, void *arg)
748{
749	switch (what) {
750	case MOD_LOAD:
751		/* register our autoinstall handler */
752		uhso_etag = EVENTHANDLER_REGISTER(usb_dev_configured,
753		    uhso_test_autoinst, NULL, EVENTHANDLER_PRI_ANY);
754		/* create our unit allocator for inet devs */
755		uhso_ifnet_unit = new_unrhdr(0, INT_MAX, NULL);
756		break;
757	case MOD_UNLOAD:
758		EVENTHANDLER_DEREGISTER(usb_dev_configured, uhso_etag);
759		delete_unrhdr(uhso_ifnet_unit);
760		break;
761	default:
762		return (EOPNOTSUPP);
763	}
764	return (0);
765}
766
767/*
768 * Probe the interface type by querying the device. The elements
769 * of an array indicates the capabilities of a particular interface.
770 * Returns a bit mask with the interface capabilities.
771 */
772static int
773uhso_probe_iface_auto(struct usb_device *udev, int index)
774{
775	struct usb_device_request req;
776	usb_error_t uerr;
777	uint16_t actlen = 0;
778	char port;
779	char buf[17] = {0};
780
781	req.bmRequestType = UT_READ_VENDOR_DEVICE;
782	req.bRequest = 0x86;
783	USETW(req.wValue, 0);
784	USETW(req.wIndex, 0);
785	USETW(req.wLength, 17);
786
787	uerr = usbd_do_request_flags(udev, NULL, &req, buf,
788	    0, &actlen, USB_MS_HZ);
789	if (uerr != 0) {
790		printf("%s: usbd_do_request_flags failed, %s\n",
791		    __func__, usbd_errstr(uerr));
792		return (0);
793	}
794
795	UHSO_DPRINTF(1, "actlen=%d\n", actlen);
796	UHSO_HEXDUMP(buf, 17);
797
798	if (index < 0 || index > 16) {
799		UHSO_DPRINTF(0, "Index %d out of range\n", index);
800		return (0);
801	}
802
803	UHSO_DPRINTF(1, "index=%d, type=%x[%s]\n", index, buf[index],
804	    uhso_port_type[(int)uhso_port_map[(int)buf[index]]]);
805
806	if (buf[index] >= uhso_port_map_max)
807		port = 0;
808	else
809		port = uhso_port_map[(int)buf[index]];
810
811	switch (port) {
812	case UHSO_PORT_TYPE_NETWORK:
813		return (UHSO_IFACE_SPEC(UHSO_IF_NET | UHSO_IF_MUX,
814		    UHSO_PORT_SERIAL | UHSO_PORT_NETWORK, port));
815	case UHSO_PORT_TYPE_DIAG:
816	case UHSO_PORT_TYPE_DIAG2:
817	case UHSO_PORT_TYPE_CTL:
818	case UHSO_PORT_TYPE_APP:
819	case UHSO_PORT_TYPE_APP2:
820	case UHSO_PORT_TYPE_MODEM:
821		return (UHSO_IFACE_SPEC(UHSO_IF_BULK,
822		    UHSO_PORT_SERIAL, port));
823	case UHSO_PORT_TYPE_MSD:
824		return (0);
825	case UHSO_PORT_TYPE_UNKNOWN:
826	default:
827		return (0);
828	}
829
830	return (0);
831}
832
833/*
834 * Returns the capabilities of interfaces for devices that don't
835 * support the automatic query.
836 * Returns a bit mask with the interface capabilities.
837 */
838static int
839uhso_probe_iface_static(struct usb_device *udev, int index)
840{
841	struct usb_config_descriptor *cd;
842
843	cd = usbd_get_config_descriptor(udev);
844	if (cd->bNumInterface <= 3) {
845		/* Cards with 3 or less interfaces */
846		switch (index) {
847		case 0:
848			return UHSO_IFACE_SPEC(UHSO_IF_NET | UHSO_IF_MUX,
849			    UHSO_PORT_SERIAL | UHSO_PORT_NETWORK,
850			    UHSO_PORT_TYPE_NETWORK);
851		case 1:
852			return UHSO_IFACE_SPEC(UHSO_IF_BULK,
853			    UHSO_PORT_SERIAL, UHSO_PORT_TYPE_DIAG);
854		case 2:
855			return UHSO_IFACE_SPEC(UHSO_IF_BULK,
856			    UHSO_PORT_SERIAL, UHSO_PORT_TYPE_MODEM);
857		}
858	} else {
859		/* Cards with 4 interfaces */
860		switch (index) {
861		case 0:
862			return UHSO_IFACE_SPEC(UHSO_IF_NET | UHSO_IF_MUX,
863			    UHSO_PORT_SERIAL | UHSO_PORT_NETWORK,
864			    UHSO_PORT_TYPE_NETWORK);
865		case 1:
866			return UHSO_IFACE_SPEC(UHSO_IF_BULK,
867			    UHSO_PORT_SERIAL, UHSO_PORT_TYPE_DIAG2);
868		case 2:
869			return UHSO_IFACE_SPEC(UHSO_IF_BULK,
870			    UHSO_PORT_SERIAL, UHSO_PORT_TYPE_MODEM);
871		case 3:
872			return UHSO_IFACE_SPEC(UHSO_IF_BULK,
873			    UHSO_PORT_SERIAL, UHSO_PORT_TYPE_DIAG);
874		}
875	}
876	return (0);
877}
878
879/*
880 * Probes an interface for its particular capabilities and attaches if
881 * it's a supported interface.
882 */
883static int
884uhso_probe_iface(struct uhso_softc *sc, int index,
885    int (*probe)(struct usb_device *, int))
886{
887	struct usb_interface *iface;
888	int type, error;
889
890	UHSO_DPRINTF(1, "Probing for interface %d, probe_func=%p\n", index, probe);
891
892	type = probe(sc->sc_udev, index);
893	UHSO_DPRINTF(1, "Probe result %x\n", type);
894	if (type <= 0)
895		return (ENXIO);
896
897	sc->sc_type = type;
898	iface = usbd_get_iface(sc->sc_udev, index);
899
900	if (UHSO_IFACE_PORT_TYPE(type) == UHSO_PORT_TYPE_NETWORK) {
901		error = uhso_attach_ifnet(sc, iface, type);
902		if (error) {
903			UHSO_DPRINTF(1, "uhso_attach_ifnet failed");
904			return (ENXIO);
905		}
906
907		/*
908		 * If there is an additional interrupt endpoint on this
909		 * interface then we most likely have a multiplexed serial port
910		 * available.
911		 */
912		if (iface->idesc->bNumEndpoints < 3) {
913			sc->sc_type = UHSO_IFACE_SPEC(
914			    UHSO_IFACE_USB_TYPE(type) & ~UHSO_IF_MUX,
915			    UHSO_IFACE_PORT(type) & ~UHSO_PORT_SERIAL,
916			    UHSO_IFACE_PORT_TYPE(type));
917			return (0);
918		}
919
920		UHSO_DPRINTF(1, "Trying to attach mux. serial\n");
921		error = uhso_attach_muxserial(sc, iface, type);
922		if (error == 0 && sc->sc_ttys > 0) {
923			error = ucom_attach(&sc->sc_super_ucom, sc->sc_ucom,
924			    sc->sc_ttys, sc, &uhso_ucom_callback, &sc->sc_mtx);
925			if (error) {
926				device_printf(sc->sc_dev, "ucom_attach failed\n");
927				return (ENXIO);
928			}
929			ucom_set_pnpinfo_usb(&sc->sc_super_ucom, sc->sc_dev);
930
931			mtx_lock(&sc->sc_mtx);
932			usbd_transfer_start(sc->sc_xfer[UHSO_MUX_ENDPT_INTR]);
933			mtx_unlock(&sc->sc_mtx);
934		}
935	} else if ((UHSO_IFACE_USB_TYPE(type) & UHSO_IF_BULK) &&
936	    UHSO_IFACE_PORT(type) & UHSO_PORT_SERIAL) {
937
938		error = uhso_attach_bulkserial(sc, iface, type);
939		if (error)
940			return (ENXIO);
941
942		error = ucom_attach(&sc->sc_super_ucom, sc->sc_ucom,
943		    sc->sc_ttys, sc, &uhso_ucom_callback, &sc->sc_mtx);
944		if (error) {
945			device_printf(sc->sc_dev, "ucom_attach failed\n");
946			return (ENXIO);
947		}
948		ucom_set_pnpinfo_usb(&sc->sc_super_ucom, sc->sc_dev);
949	}
950	else {
951		UHSO_DPRINTF(0, "Unknown type %x\n", type);
952		return (ENXIO);
953	}
954
955	return (0);
956}
957
958static int
959uhso_radio_ctrl(struct uhso_softc *sc, int onoff)
960{
961	struct usb_device_request req;
962	usb_error_t uerr;
963
964	req.bmRequestType = UT_VENDOR;
965	req.bRequest = onoff ? 0x82 : 0x81;
966	USETW(req.wValue, 0);
967	USETW(req.wIndex, 0);
968	USETW(req.wLength, 0);
969
970	uerr = usbd_do_request(sc->sc_udev, NULL, &req, NULL);
971	if (uerr != 0) {
972		device_printf(sc->sc_dev, "usbd_do_request_flags failed: %s\n",
973		    usbd_errstr(uerr));
974		return (-1);
975	}
976	return (onoff);
977}
978
979static int
980uhso_radio_sysctl(SYSCTL_HANDLER_ARGS)
981{
982	struct uhso_softc *sc = arg1;
983	int error, radio;
984
985	radio = sc->sc_radio;
986	error = sysctl_handle_int(oidp, &radio, 0, req);
987	if (error)
988		return (error);
989	if (radio != sc->sc_radio) {
990		radio = radio != 0 ? 1 : 0;
991		error = uhso_radio_ctrl(sc, radio);
992		if (error != -1)
993			sc->sc_radio = radio;
994
995	}
996	return (0);
997}
998
999/*
1000 * Expands allocated memory to fit an additional TTY.
1001 * Two arrays are kept with matching indexes, one for ucom and one
1002 * for our private data.
1003 */
1004static int
1005uhso_alloc_tty(struct uhso_softc *sc)
1006{
1007
1008	sc->sc_ttys++;
1009	sc->sc_tty = reallocf(sc->sc_tty, sizeof(struct uhso_tty) * sc->sc_ttys,
1010	    M_USBDEV, M_WAITOK | M_ZERO);
1011	if (sc->sc_tty == NULL)
1012		return (-1);
1013
1014	sc->sc_ucom = reallocf(sc->sc_ucom,
1015	    sizeof(struct ucom_softc) * sc->sc_ttys, M_USBDEV, M_WAITOK | M_ZERO);
1016	if (sc->sc_ucom == NULL)
1017		return (-1);
1018
1019	sc->sc_tty[sc->sc_ttys - 1].ht_sc = sc;
1020
1021	UHSO_DPRINTF(1, "Allocated TTY %d\n", sc->sc_ttys - 1);
1022	return (sc->sc_ttys - 1);
1023}
1024
1025/*
1026 * Attach a multiplexed serial port
1027 * Data is read/written with requests on the default control pipe. An interrupt
1028 * endpoint returns when there is new data to be read.
1029 */
1030static int
1031uhso_attach_muxserial(struct uhso_softc *sc, struct usb_interface *iface,
1032    int type)
1033{
1034	struct usb_descriptor *desc;
1035	int i, port, tty;
1036	usb_error_t uerr;
1037
1038	/*
1039	 * The class specific interface (type 0x24) descriptor subtype field
1040	 * contains a bitmask that specifies which (and how many) ports that
1041	 * are available through this multiplexed serial port.
1042 	 */
1043	desc = usbd_find_descriptor(sc->sc_udev, NULL,
1044	    iface->idesc->bInterfaceNumber, UDESC_CS_INTERFACE, 0xff, 0, 0);
1045	if (desc == NULL) {
1046		UHSO_DPRINTF(0, "Failed to find UDESC_CS_INTERFACE\n");
1047		return (ENXIO);
1048	}
1049
1050	UHSO_DPRINTF(1, "Mux port mask %x\n", desc->bDescriptorSubtype);
1051	if (desc->bDescriptorSubtype == 0)
1052		return (ENXIO);
1053
1054	/*
1055	 * The bitmask is one octet, loop through the number of
1056	 * bits that are set and create a TTY for each.
1057	 */
1058	for (i = 0; i < 8; i++) {
1059		port = (1 << i);
1060		if ((port & desc->bDescriptorSubtype) == port) {
1061			UHSO_DPRINTF(2, "Found mux port %x (%d)\n", port, i);
1062			tty = uhso_alloc_tty(sc);
1063			if (tty < 0)
1064				return (ENOMEM);
1065			sc->sc_tty[tty].ht_muxport = i;
1066			uerr = usbd_transfer_setup(sc->sc_udev,
1067			    &sc->sc_iface_index, sc->sc_tty[tty].ht_xfer,
1068			    uhso_ctrl_config, UHSO_CTRL_MAX, sc, &sc->sc_mtx);
1069			if (uerr) {
1070				device_printf(sc->sc_dev,
1071				    "Failed to setup control pipe: %s\n",
1072				    usbd_errstr(uerr));
1073				return (ENXIO);
1074			}
1075		}
1076	}
1077
1078	/* Setup the intr. endpoint */
1079	uerr = usbd_transfer_setup(sc->sc_udev,
1080	    &iface->idesc->bInterfaceNumber, sc->sc_xfer,
1081	    uhso_mux_config, 1, sc, &sc->sc_mtx);
1082	if (uerr)
1083		return (ENXIO);
1084
1085	return (0);
1086}
1087
1088/*
1089 * Interrupt callback for the multiplexed serial port. Indicates
1090 * which serial port has data waiting.
1091 */
1092static void
1093uhso_mux_intr_callback(struct usb_xfer *xfer, usb_error_t error)
1094{
1095	struct usb_page_cache *pc;
1096	struct usb_page_search res;
1097	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1098	unsigned int i, mux;
1099
1100	UHSO_DPRINTF(3, "status %d\n", USB_GET_STATE(xfer));
1101
1102	switch (USB_GET_STATE(xfer)) {
1103	case USB_ST_TRANSFERRED:
1104		/*
1105		 * The multiplexed port number can be found at the first byte.
1106		 * It contains a bit mask, we transform this in to an integer.
1107		 */
1108		pc = usbd_xfer_get_frame(xfer, 0);
1109		usbd_get_page(pc, 0, &res);
1110
1111		i = *((unsigned char *)res.buffer);
1112		mux = 0;
1113		while (i >>= 1) {
1114			mux++;
1115		}
1116
1117		UHSO_DPRINTF(3, "mux port %d (%d)\n", mux, i);
1118		if (mux > UHSO_MPORT_TYPE_NOMAX)
1119			break;
1120
1121		/* Issue a read for this serial port */
1122		usbd_xfer_set_priv(
1123		    sc->sc_tty[mux].ht_xfer[UHSO_CTRL_READ],
1124		    &sc->sc_tty[mux]);
1125		usbd_transfer_start(sc->sc_tty[mux].ht_xfer[UHSO_CTRL_READ]);
1126
1127		break;
1128	case USB_ST_SETUP:
1129tr_setup:
1130		usbd_xfer_set_frame_len(xfer, 0, usbd_xfer_max_len(xfer));
1131		usbd_transfer_submit(xfer);
1132		break;
1133	default:
1134		UHSO_DPRINTF(0, "error: %s\n", usbd_errstr(error));
1135		if (error == USB_ERR_CANCELLED)
1136			break;
1137
1138		usbd_xfer_set_stall(xfer);
1139		goto tr_setup;
1140	}
1141}
1142
1143static void
1144uhso_mux_read_callback(struct usb_xfer *xfer, usb_error_t error)
1145{
1146	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1147	struct usb_page_cache *pc;
1148	struct usb_device_request req;
1149	struct uhso_tty *ht;
1150	int actlen, len;
1151
1152	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1153
1154	UHSO_DPRINTF(3, "status %d\n", USB_GET_STATE(xfer));
1155
1156	ht = usbd_xfer_get_priv(xfer);
1157	UHSO_DPRINTF(3, "ht=%p open=%d\n", ht, ht->ht_open);
1158
1159	switch (USB_GET_STATE(xfer)) {
1160	case USB_ST_TRANSFERRED:
1161		/* Got data, send to ucom */
1162		pc = usbd_xfer_get_frame(xfer, 1);
1163		len = usbd_xfer_frame_len(xfer, 1);
1164
1165		UHSO_DPRINTF(3, "got %d bytes on mux port %d\n", len,
1166		    ht->ht_muxport);
1167		if (len <= 0) {
1168			usbd_transfer_start(sc->sc_xfer[UHSO_MUX_ENDPT_INTR]);
1169			break;
1170		}
1171
1172		/* Deliver data if the TTY is open, discard otherwise */
1173		if (ht->ht_open)
1174			ucom_put_data(&sc->sc_ucom[ht->ht_muxport], pc, 0, len);
1175		/* FALLTHROUGH */
1176	case USB_ST_SETUP:
1177tr_setup:
1178		memset(&req, 0, sizeof(struct usb_device_request));
1179		req.bmRequestType = UT_READ_CLASS_INTERFACE;
1180		req.bRequest = UCDC_GET_ENCAPSULATED_RESPONSE;
1181		USETW(req.wValue, 0);
1182		USETW(req.wIndex, ht->ht_muxport);
1183		USETW(req.wLength, 1024);
1184
1185		pc = usbd_xfer_get_frame(xfer, 0);
1186		usbd_copy_in(pc, 0, &req, sizeof(req));
1187
1188		usbd_xfer_set_frame_len(xfer, 0, sizeof(req));
1189		usbd_xfer_set_frame_len(xfer, 1, 1024);
1190		usbd_xfer_set_frames(xfer, 2);
1191		usbd_transfer_submit(xfer);
1192		break;
1193	default:
1194		UHSO_DPRINTF(0, "error: %s\n", usbd_errstr(error));
1195		if (error == USB_ERR_CANCELLED)
1196			break;
1197		usbd_xfer_set_stall(xfer);
1198		goto tr_setup;
1199	}
1200}
1201
1202static void
1203uhso_mux_write_callback(struct usb_xfer *xfer, usb_error_t error)
1204{
1205	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1206	struct uhso_tty *ht;
1207	struct usb_page_cache *pc;
1208	struct usb_device_request req;
1209	int actlen;
1210	struct usb_page_search res;
1211
1212	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1213
1214	ht = usbd_xfer_get_priv(xfer);
1215	UHSO_DPRINTF(3, "status=%d, using mux port %d\n",
1216	    USB_GET_STATE(xfer), ht->ht_muxport);
1217
1218	switch (USB_GET_STATE(xfer)) {
1219	case USB_ST_TRANSFERRED:
1220		UHSO_DPRINTF(3, "wrote %zd data bytes to muxport %d\n",
1221		    actlen - sizeof(struct usb_device_request) ,
1222		    ht->ht_muxport);
1223		/* FALLTHROUGH */
1224	case USB_ST_SETUP:
1225		pc = usbd_xfer_get_frame(xfer, 1);
1226		if (ucom_get_data(&sc->sc_ucom[ht->ht_muxport], pc,
1227		    0, 32, &actlen)) {
1228
1229			usbd_get_page(pc, 0, &res);
1230
1231			memset(&req, 0, sizeof(struct usb_device_request));
1232			req.bmRequestType = UT_WRITE_CLASS_INTERFACE;
1233			req.bRequest = UCDC_SEND_ENCAPSULATED_COMMAND;
1234			USETW(req.wValue, 0);
1235			USETW(req.wIndex, ht->ht_muxport);
1236			USETW(req.wLength, actlen);
1237
1238			pc = usbd_xfer_get_frame(xfer, 0);
1239			usbd_copy_in(pc, 0, &req, sizeof(req));
1240
1241			usbd_xfer_set_frame_len(xfer, 0, sizeof(req));
1242			usbd_xfer_set_frame_len(xfer, 1, actlen);
1243			usbd_xfer_set_frames(xfer, 2);
1244
1245			UHSO_DPRINTF(3, "Prepared %d bytes for transmit "
1246			    "on muxport %d\n", actlen, ht->ht_muxport);
1247
1248			usbd_transfer_submit(xfer);
1249		}
1250		break;
1251	default:
1252		UHSO_DPRINTF(0, "error: %s\n", usbd_errstr(error));
1253		if (error == USB_ERR_CANCELLED)
1254			break;
1255		break;
1256	}
1257}
1258
1259static int
1260uhso_attach_bulkserial(struct uhso_softc *sc, struct usb_interface *iface,
1261    int type)
1262{
1263	usb_error_t uerr;
1264	int tty;
1265
1266	/* Try attaching RD/WR/INTR first */
1267	uerr = usbd_transfer_setup(sc->sc_udev,
1268	    &iface->idesc->bInterfaceNumber, sc->sc_xfer,
1269	    uhso_bs_config, UHSO_BULK_ENDPT_MAX, sc, &sc->sc_mtx);
1270	if (uerr) {
1271		/* Try only RD/WR */
1272		uerr = usbd_transfer_setup(sc->sc_udev,
1273		    &iface->idesc->bInterfaceNumber, sc->sc_xfer,
1274		    uhso_bs_config, UHSO_BULK_ENDPT_MAX - 1, sc, &sc->sc_mtx);
1275	}
1276	if (uerr) {
1277		UHSO_DPRINTF(0, "usbd_transfer_setup failed");
1278		return (-1);
1279	}
1280
1281	tty = uhso_alloc_tty(sc);
1282	if (tty < 0) {
1283		usbd_transfer_unsetup(sc->sc_xfer, UHSO_BULK_ENDPT_MAX);
1284		return (ENOMEM);
1285	}
1286
1287	sc->sc_tty[tty].ht_muxport = -1;
1288	return (0);
1289}
1290
1291static void
1292uhso_bs_read_callback(struct usb_xfer *xfer, usb_error_t error)
1293{
1294	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1295	struct usb_page_cache *pc;
1296	int actlen;
1297
1298	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1299
1300	UHSO_DPRINTF(3, "status %d, actlen=%d\n", USB_GET_STATE(xfer), actlen);
1301
1302	switch (USB_GET_STATE(xfer)) {
1303	case USB_ST_TRANSFERRED:
1304		pc = usbd_xfer_get_frame(xfer, 0);
1305		ucom_put_data(&sc->sc_ucom[0], pc, 0, actlen);
1306		/* FALLTHROUGH */
1307	case USB_ST_SETUP:
1308tr_setup:
1309		usbd_xfer_set_frame_len(xfer, 0, usbd_xfer_max_len(xfer));
1310		usbd_transfer_submit(xfer);
1311	break;
1312	default:
1313		UHSO_DPRINTF(0, "error: %s\n", usbd_errstr(error));
1314		if (error == USB_ERR_CANCELLED)
1315			break;
1316		usbd_xfer_set_stall(xfer);
1317		goto tr_setup;
1318	}
1319}
1320
1321static void
1322uhso_bs_write_callback(struct usb_xfer *xfer, usb_error_t error)
1323{
1324	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1325	struct usb_page_cache *pc;
1326	int actlen;
1327
1328	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1329
1330	UHSO_DPRINTF(3, "status %d, actlen=%d\n", USB_GET_STATE(xfer), actlen);
1331
1332	switch (USB_GET_STATE(xfer)) {
1333	case USB_ST_TRANSFERRED:
1334	case USB_ST_SETUP:
1335tr_setup:
1336		pc = usbd_xfer_get_frame(xfer, 0);
1337		if (ucom_get_data(&sc->sc_ucom[0], pc, 0, 8192, &actlen)) {
1338			usbd_xfer_set_frame_len(xfer, 0, actlen);
1339			usbd_transfer_submit(xfer);
1340		}
1341		break;
1342	break;
1343	default:
1344		UHSO_DPRINTF(0, "error: %s\n", usbd_errstr(error));
1345		if (error == USB_ERR_CANCELLED)
1346			break;
1347		usbd_xfer_set_stall(xfer);
1348		goto tr_setup;
1349	}
1350}
1351
1352static void
1353uhso_bs_cfg(struct uhso_softc *sc)
1354{
1355	struct usb_device_request req;
1356	usb_error_t uerr;
1357
1358	if (!(UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_BULK))
1359		return;
1360
1361	req.bmRequestType = UT_WRITE_CLASS_INTERFACE;
1362	req.bRequest = UCDC_SET_CONTROL_LINE_STATE;
1363	USETW(req.wValue, sc->sc_line);
1364	USETW(req.wIndex, sc->sc_iface_no);
1365	USETW(req.wLength, 0);
1366
1367	uerr = ucom_cfg_do_request(sc->sc_udev, &sc->sc_ucom[0], &req, NULL, 0, 1000);
1368	if (uerr != 0) {
1369		device_printf(sc->sc_dev, "failed to set ctrl line state to "
1370		    "0x%02x: %s\n", sc->sc_line, usbd_errstr(uerr));
1371	}
1372}
1373
1374static void
1375uhso_bs_intr_callback(struct usb_xfer *xfer, usb_error_t error)
1376{
1377	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1378	struct usb_page_cache *pc;
1379	int actlen;
1380	struct usb_cdc_notification cdc;
1381
1382	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1383	UHSO_DPRINTF(3, "status %d, actlen=%d\n", USB_GET_STATE(xfer), actlen);
1384
1385	switch (USB_GET_STATE(xfer)) {
1386	case USB_ST_TRANSFERRED:
1387		if (actlen < UCDC_NOTIFICATION_LENGTH) {
1388			UHSO_DPRINTF(0, "UCDC notification too short: %d\n", actlen);
1389			goto tr_setup;
1390		}
1391		else if (actlen > (int)sizeof(struct usb_cdc_notification)) {
1392			UHSO_DPRINTF(0, "UCDC notification too large: %d\n", actlen);
1393			actlen = sizeof(struct usb_cdc_notification);
1394		}
1395
1396		pc = usbd_xfer_get_frame(xfer, 0);
1397		usbd_copy_out(pc, 0, &cdc, actlen);
1398
1399		if (UGETW(cdc.wIndex) != sc->sc_iface_no) {
1400			UHSO_DPRINTF(0, "Interface mismatch, got %d expected %d\n",
1401			    UGETW(cdc.wIndex), sc->sc_iface_no);
1402			goto tr_setup;
1403		}
1404
1405		if (cdc.bmRequestType == UCDC_NOTIFICATION &&
1406		    cdc.bNotification == UCDC_N_SERIAL_STATE) {
1407			UHSO_DPRINTF(2, "notify = 0x%02x\n", cdc.data[0]);
1408
1409			sc->sc_msr = 0;
1410			sc->sc_lsr = 0;
1411			if (cdc.data[0] & UCDC_N_SERIAL_RI)
1412				sc->sc_msr |= SER_RI;
1413			if (cdc.data[0] & UCDC_N_SERIAL_DSR)
1414				sc->sc_msr |= SER_DSR;
1415			if (cdc.data[0] & UCDC_N_SERIAL_DCD)
1416				sc->sc_msr |= SER_DCD;
1417
1418			ucom_status_change(&sc->sc_ucom[0]);
1419		}
1420	case USB_ST_SETUP:
1421tr_setup:
1422	default:
1423		if (error == USB_ERR_CANCELLED)
1424			break;
1425		usbd_xfer_set_stall(xfer);
1426		goto tr_setup;
1427	}
1428}
1429
1430static void
1431uhso_ucom_cfg_get_status(struct ucom_softc *ucom, uint8_t *lsr, uint8_t *msr)
1432{
1433	struct uhso_softc *sc = ucom->sc_parent;
1434
1435	*lsr = sc->sc_lsr;
1436	*msr = sc->sc_msr;
1437}
1438
1439static void
1440uhso_ucom_cfg_set_dtr(struct ucom_softc *ucom, uint8_t onoff)
1441{
1442	struct uhso_softc *sc = ucom->sc_parent;
1443
1444	if (!(UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_BULK))
1445		return;
1446
1447	if (onoff)
1448		sc->sc_line |= UCDC_LINE_DTR;
1449	else
1450		sc->sc_line &= ~UCDC_LINE_DTR;
1451
1452	uhso_bs_cfg(sc);
1453}
1454
1455static void
1456uhso_ucom_cfg_set_rts(struct ucom_softc *ucom, uint8_t onoff)
1457{
1458	struct uhso_softc *sc = ucom->sc_parent;
1459
1460	if (!(UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_BULK))
1461		return;
1462
1463	if (onoff)
1464		sc->sc_line |= UCDC_LINE_RTS;
1465	else
1466		sc->sc_line &= ~UCDC_LINE_RTS;
1467
1468	uhso_bs_cfg(sc);
1469}
1470
1471static void
1472uhso_ucom_start_read(struct ucom_softc *ucom)
1473{
1474	struct uhso_softc *sc = ucom->sc_parent;
1475
1476	UHSO_DPRINTF(3, "unit=%d, subunit=%d\n",
1477	    ucom->sc_super->sc_unit, ucom->sc_subunit);
1478
1479	if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_MUX) {
1480		sc->sc_tty[ucom->sc_subunit].ht_open = 1;
1481		usbd_transfer_start(sc->sc_xfer[UHSO_MUX_ENDPT_INTR]);
1482	}
1483	else if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_BULK) {
1484		sc->sc_tty[0].ht_open = 1;
1485		usbd_transfer_start(sc->sc_xfer[UHSO_BULK_ENDPT_READ]);
1486		if (sc->sc_xfer[UHSO_BULK_ENDPT_INTR] != NULL)
1487			usbd_transfer_start(sc->sc_xfer[UHSO_BULK_ENDPT_INTR]);
1488	}
1489}
1490
1491static void
1492uhso_ucom_stop_read(struct ucom_softc *ucom)
1493{
1494
1495	struct uhso_softc *sc = ucom->sc_parent;
1496
1497	if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_MUX) {
1498		sc->sc_tty[ucom->sc_subunit].ht_open = 0;
1499		usbd_transfer_stop(
1500		    sc->sc_tty[ucom->sc_subunit].ht_xfer[UHSO_CTRL_READ]);
1501	}
1502	else if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_BULK) {
1503		sc->sc_tty[0].ht_open = 0;
1504		usbd_transfer_start(sc->sc_xfer[UHSO_BULK_ENDPT_READ]);
1505		if (sc->sc_xfer[UHSO_BULK_ENDPT_INTR] != NULL)
1506			usbd_transfer_stop(sc->sc_xfer[UHSO_BULK_ENDPT_INTR]);
1507	}
1508}
1509
1510static void
1511uhso_ucom_start_write(struct ucom_softc *ucom)
1512{
1513	struct uhso_softc *sc = ucom->sc_parent;
1514
1515	if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_MUX) {
1516		UHSO_DPRINTF(3, "local unit %d\n", ucom->sc_subunit);
1517
1518		usbd_transfer_start(sc->sc_xfer[UHSO_MUX_ENDPT_INTR]);
1519
1520		usbd_xfer_set_priv(
1521		    sc->sc_tty[ucom->sc_subunit].ht_xfer[UHSO_CTRL_WRITE],
1522		    &sc->sc_tty[ucom->sc_subunit]);
1523		usbd_transfer_start(
1524		    sc->sc_tty[ucom->sc_subunit].ht_xfer[UHSO_CTRL_WRITE]);
1525
1526	}
1527	else if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_BULK) {
1528		usbd_transfer_start(sc->sc_xfer[UHSO_BULK_ENDPT_WRITE]);
1529	}
1530}
1531
1532static void
1533uhso_ucom_stop_write(struct ucom_softc *ucom)
1534{
1535	struct uhso_softc *sc = ucom->sc_parent;
1536
1537	if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_MUX) {
1538		usbd_transfer_stop(
1539		    sc->sc_tty[ucom->sc_subunit].ht_xfer[UHSO_CTRL_WRITE]);
1540	}
1541	else if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_BULK) {
1542		usbd_transfer_stop(sc->sc_xfer[UHSO_BULK_ENDPT_WRITE]);
1543	}
1544}
1545
1546static int
1547uhso_attach_ifnet(struct uhso_softc *sc, struct usb_interface *iface, int type)
1548{
1549	struct ifnet *ifp;
1550	usb_error_t uerr;
1551	struct sysctl_ctx_list *sctx;
1552	struct sysctl_oid *soid;
1553	unsigned int devunit;
1554
1555	uerr = usbd_transfer_setup(sc->sc_udev,
1556	    &iface->idesc->bInterfaceNumber, sc->sc_if_xfer,
1557	    uhso_ifnet_config, UHSO_IFNET_MAX, sc, &sc->sc_mtx);
1558	if (uerr) {
1559		UHSO_DPRINTF(0, "usbd_transfer_setup failed: %s\n",
1560		    usbd_errstr(uerr));
1561		return (-1);
1562	}
1563
1564	sc->sc_ifp = ifp = if_alloc(IFT_OTHER);
1565	if (sc->sc_ifp == NULL) {
1566		device_printf(sc->sc_dev, "if_alloc() failed\n");
1567		return (-1);
1568	}
1569
1570	callout_init_mtx(&sc->sc_c, &sc->sc_mtx, 0);
1571	mtx_lock(&sc->sc_mtx);
1572	callout_reset(&sc->sc_c, 1, uhso_if_rxflush, sc);
1573	mtx_unlock(&sc->sc_mtx);
1574
1575	/*
1576	 * We create our own unit numbers for ifnet devices because the
1577	 * USB interface unit numbers can be at arbitrary positions yielding
1578	 * odd looking device names.
1579	 */
1580	devunit = alloc_unr(uhso_ifnet_unit);
1581
1582	if_initname(ifp, device_get_name(sc->sc_dev), devunit);
1583	ifp->if_mtu = UHSO_MAX_MTU;
1584	ifp->if_ioctl = uhso_if_ioctl;
1585	ifp->if_init = uhso_if_init;
1586	ifp->if_start = uhso_if_start;
1587	ifp->if_output = uhso_if_output;
1588	ifp->if_flags = IFF_BROADCAST | IFF_MULTICAST | IFF_NOARP;
1589	ifp->if_softc = sc;
1590	IFQ_SET_MAXLEN(&ifp->if_snd, ifqmaxlen);
1591	ifp->if_snd.ifq_drv_maxlen = ifqmaxlen;
1592	IFQ_SET_READY(&ifp->if_snd);
1593
1594	if_attach(ifp);
1595	bpfattach(ifp, DLT_RAW, 0);
1596
1597	sctx = device_get_sysctl_ctx(sc->sc_dev);
1598	soid = device_get_sysctl_tree(sc->sc_dev);
1599	/* Unlocked read... */
1600	SYSCTL_ADD_STRING(sctx, SYSCTL_CHILDREN(soid), OID_AUTO, "netif",
1601	    CTLFLAG_RD, ifp->if_xname, 0, "Attached network interface");
1602
1603	return (0);
1604}
1605
1606static void
1607uhso_ifnet_read_callback(struct usb_xfer *xfer, usb_error_t error)
1608{
1609	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1610	struct mbuf *m;
1611	struct usb_page_cache *pc;
1612	int actlen;
1613
1614	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1615
1616	UHSO_DPRINTF(3, "status=%d, actlen=%d\n", USB_GET_STATE(xfer), actlen);
1617
1618	switch (USB_GET_STATE(xfer)) {
1619	case USB_ST_TRANSFERRED:
1620		if (actlen > 0 && (sc->sc_ifp->if_drv_flags & IFF_DRV_RUNNING)) {
1621			pc = usbd_xfer_get_frame(xfer, 0);
1622			m = m_getcl(M_NOWAIT, MT_DATA, M_PKTHDR);
1623			usbd_copy_out(pc, 0, mtod(m, uint8_t *), actlen);
1624			m->m_pkthdr.len = m->m_len = actlen;
1625			/* Enqueue frame for further processing */
1626			_IF_ENQUEUE(&sc->sc_rxq, m);
1627			if (!callout_pending(&sc->sc_c) ||
1628			    !callout_active(&sc->sc_c)) {
1629				callout_schedule(&sc->sc_c, 1);
1630			}
1631		}
1632	/* FALLTHROUGH */
1633	case USB_ST_SETUP:
1634tr_setup:
1635		usbd_xfer_set_frame_len(xfer, 0, usbd_xfer_max_len(xfer));
1636		usbd_transfer_submit(xfer);
1637		break;
1638	default:
1639		UHSO_DPRINTF(0, "error: %s\n", usbd_errstr(error));
1640		if (error == USB_ERR_CANCELLED)
1641			break;
1642		usbd_xfer_set_stall(xfer);
1643		goto tr_setup;
1644	}
1645}
1646
1647/*
1648 * Deferred RX processing, called with mutex locked.
1649 *
1650 * Each frame we receive might contain several small ip-packets as well
1651 * as partial ip-packets. We need to separate/assemble them into individual
1652 * packets before sending them to the ip-layer.
1653 */
1654static void
1655uhso_if_rxflush(void *arg)
1656{
1657	struct uhso_softc *sc = arg;
1658	struct ifnet *ifp = sc->sc_ifp;
1659	uint8_t *cp;
1660	struct mbuf *m, *m0, *mwait;
1661	struct ip *ip;
1662#ifdef INET6
1663	struct ip6_hdr *ip6;
1664#endif
1665	uint16_t iplen;
1666	int len, isr;
1667
1668	m = NULL;
1669	mwait = sc->sc_mwait;
1670	for (;;) {
1671		if (m == NULL) {
1672			_IF_DEQUEUE(&sc->sc_rxq, m);
1673			if (m == NULL)
1674				break;
1675			UHSO_DPRINTF(3, "dequeue m=%p, len=%d\n", m, m->m_len);
1676		}
1677		mtx_unlock(&sc->sc_mtx);
1678
1679		/* Do we have a partial packet waiting? */
1680		if (mwait != NULL) {
1681			m0 = mwait;
1682			mwait = NULL;
1683
1684			UHSO_DPRINTF(3, "partial m0=%p(%d), concat w/ m=%p(%d)\n",
1685			    m0, m0->m_len, m, m->m_len);
1686			len = m->m_len + m0->m_len;
1687
1688			/* Concat mbufs and fix headers */
1689			m_cat(m0, m);
1690			m0->m_pkthdr.len = len;
1691			m->m_flags &= ~M_PKTHDR;
1692
1693			m = m_pullup(m0, sizeof(struct ip));
1694			if (m == NULL) {
1695				ifp->if_ierrors++;
1696				UHSO_DPRINTF(0, "m_pullup failed\n");
1697				mtx_lock(&sc->sc_mtx);
1698				continue;
1699			}
1700			UHSO_DPRINTF(3, "Constructed mbuf=%p, len=%d\n",
1701			    m, m->m_pkthdr.len);
1702		}
1703
1704		cp = mtod(m, uint8_t *);
1705		ip = (struct ip *)cp;
1706#ifdef INET6
1707		ip6 = (struct ip6_hdr *)cp;
1708#endif
1709
1710		/* Check for IPv4 */
1711		if (ip->ip_v == IPVERSION) {
1712			iplen = htons(ip->ip_len);
1713			isr = NETISR_IP;
1714		}
1715#ifdef INET6
1716		/* Check for IPv6 */
1717		else if ((ip6->ip6_vfc & IPV6_VERSION_MASK) == IPV6_VERSION) {
1718			iplen = htons(ip6->ip6_plen);
1719			isr = NETISR_IPV6;
1720		}
1721#endif
1722		else {
1723			UHSO_DPRINTF(0, "got unexpected ip version %d, "
1724			    "m=%p, len=%d\n", (*cp & 0xf0) >> 4, m, m->m_len);
1725			ifp->if_ierrors++;
1726			UHSO_HEXDUMP(cp, 4);
1727			m_freem(m);
1728			m = NULL;
1729			mtx_lock(&sc->sc_mtx);
1730			continue;
1731		}
1732
1733		if (iplen == 0) {
1734			UHSO_DPRINTF(0, "Zero IP length\n");
1735			ifp->if_ierrors++;
1736			m_freem(m);
1737			m = NULL;
1738			mtx_lock(&sc->sc_mtx);
1739			continue;
1740		}
1741
1742		UHSO_DPRINTF(3, "m=%p, len=%d, cp=%p, iplen=%d\n",
1743		    m, m->m_pkthdr.len, cp, iplen);
1744
1745		m0 = NULL;
1746
1747		/* More IP packets in this mbuf */
1748		if (iplen < m->m_pkthdr.len) {
1749			m0 = m;
1750
1751			/*
1752			 * Allocate a new mbuf for this IP packet and
1753			 * copy the IP-packet into it.
1754			 */
1755			m = m_getcl(M_NOWAIT, MT_DATA, M_PKTHDR);
1756			memcpy(mtod(m, uint8_t *), mtod(m0, uint8_t *), iplen);
1757			m->m_pkthdr.len = m->m_len = iplen;
1758
1759			/* Adjust the size of the original mbuf */
1760			m_adj(m0, iplen);
1761			m0 = m_defrag(m0, M_WAITOK);
1762
1763			UHSO_DPRINTF(3, "New mbuf=%p, len=%d/%d, m0=%p, "
1764			    "m0_len=%d/%d\n", m, m->m_pkthdr.len, m->m_len,
1765			    m0, m0->m_pkthdr.len, m0->m_len);
1766		}
1767		else if (iplen > m->m_pkthdr.len) {
1768			UHSO_DPRINTF(3, "Deferred mbuf=%p, len=%d\n",
1769			    m, m->m_pkthdr.len);
1770			mwait = m;
1771			m = NULL;
1772			mtx_lock(&sc->sc_mtx);
1773			continue;
1774		}
1775
1776		ifp->if_ipackets++;
1777		m->m_pkthdr.rcvif = ifp;
1778
1779		/* Dispatch to IP layer */
1780		BPF_MTAP(sc->sc_ifp, m);
1781		M_SETFIB(m, ifp->if_fib);
1782		netisr_dispatch(isr, m);
1783		m = m0 != NULL ? m0 : NULL;
1784		mtx_lock(&sc->sc_mtx);
1785	}
1786	sc->sc_mwait = mwait;
1787}
1788
1789static void
1790uhso_ifnet_write_callback(struct usb_xfer *xfer, usb_error_t error)
1791{
1792	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1793	struct ifnet *ifp = sc->sc_ifp;
1794	struct usb_page_cache *pc;
1795	struct mbuf *m;
1796	int actlen;
1797
1798	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1799
1800	UHSO_DPRINTF(3, "status %d, actlen=%d\n", USB_GET_STATE(xfer), actlen);
1801
1802	switch (USB_GET_STATE(xfer)) {
1803	case USB_ST_TRANSFERRED:
1804		ifp->if_opackets++;
1805		ifp->if_drv_flags &= ~IFF_DRV_OACTIVE;
1806	case USB_ST_SETUP:
1807tr_setup:
1808		IFQ_DRV_DEQUEUE(&ifp->if_snd, m);
1809		if (m == NULL)
1810			break;
1811
1812		ifp->if_drv_flags |= IFF_DRV_OACTIVE;
1813
1814		if (m->m_pkthdr.len > MCLBYTES)
1815			m->m_pkthdr.len = MCLBYTES;
1816
1817		usbd_xfer_set_frame_len(xfer, 0, m->m_pkthdr.len);
1818		pc = usbd_xfer_get_frame(xfer, 0);
1819		usbd_m_copy_in(pc, 0, m, 0, m->m_pkthdr.len);
1820		usbd_transfer_submit(xfer);
1821
1822		BPF_MTAP(ifp, m);
1823		m_freem(m);
1824		break;
1825	default:
1826		UHSO_DPRINTF(0, "error: %s\n", usbd_errstr(error));
1827		if (error == USB_ERR_CANCELLED)
1828			break;
1829		usbd_xfer_set_stall(xfer);
1830		goto tr_setup;
1831	}
1832}
1833
1834static int
1835uhso_if_ioctl(struct ifnet *ifp, u_long cmd, caddr_t data)
1836{
1837	struct uhso_softc *sc;
1838
1839	sc = ifp->if_softc;
1840
1841	switch (cmd) {
1842	case SIOCSIFFLAGS:
1843		if (ifp->if_flags & IFF_UP) {
1844			if (!(ifp->if_drv_flags & IFF_DRV_RUNNING)) {
1845				uhso_if_init(sc);
1846			}
1847		}
1848		else {
1849			if (ifp->if_drv_flags & IFF_DRV_RUNNING) {
1850				mtx_lock(&sc->sc_mtx);
1851				uhso_if_stop(sc);
1852				mtx_unlock(&sc->sc_mtx);
1853			}
1854		}
1855		break;
1856	case SIOCSIFADDR:
1857	case SIOCADDMULTI:
1858	case SIOCDELMULTI:
1859		break;
1860	default:
1861		return (EINVAL);
1862	}
1863	return (0);
1864}
1865
1866static void
1867uhso_if_init(void *priv)
1868{
1869	struct uhso_softc *sc = priv;
1870	struct ifnet *ifp = sc->sc_ifp;
1871
1872	mtx_lock(&sc->sc_mtx);
1873	uhso_if_stop(sc);
1874	ifp = sc->sc_ifp;
1875	ifp->if_flags |= IFF_UP;
1876	ifp->if_drv_flags |= IFF_DRV_RUNNING;
1877	mtx_unlock(&sc->sc_mtx);
1878
1879	UHSO_DPRINTF(2, "ifnet initialized\n");
1880}
1881
1882static int
1883uhso_if_output(struct ifnet *ifp, struct mbuf *m0, const struct sockaddr *dst,
1884    struct route *ro)
1885{
1886	int error;
1887
1888	/* Only IPv4/6 support */
1889	if (dst->sa_family != AF_INET
1890#ifdef INET6
1891	   && dst->sa_family != AF_INET6
1892#endif
1893	 ) {
1894		return (EAFNOSUPPORT);
1895	}
1896
1897	error = (ifp->if_transmit)(ifp, m0);
1898	if (error) {
1899		ifp->if_oerrors++;
1900		return (ENOBUFS);
1901	}
1902	ifp->if_opackets++;
1903	return (0);
1904}
1905
1906static void
1907uhso_if_start(struct ifnet *ifp)
1908{
1909	struct uhso_softc *sc = ifp->if_softc;
1910
1911	if ((ifp->if_drv_flags & IFF_DRV_RUNNING) == 0) {
1912		UHSO_DPRINTF(1, "Not running\n");
1913		return;
1914	}
1915
1916	mtx_lock(&sc->sc_mtx);
1917	usbd_transfer_start(sc->sc_if_xfer[UHSO_IFNET_READ]);
1918	usbd_transfer_start(sc->sc_if_xfer[UHSO_IFNET_WRITE]);
1919	mtx_unlock(&sc->sc_mtx);
1920	UHSO_DPRINTF(3, "interface started\n");
1921}
1922
1923static void
1924uhso_if_stop(struct uhso_softc *sc)
1925{
1926
1927	usbd_transfer_stop(sc->sc_if_xfer[UHSO_IFNET_READ]);
1928	usbd_transfer_stop(sc->sc_if_xfer[UHSO_IFNET_WRITE]);
1929	sc->sc_ifp->if_drv_flags &= ~(IFF_DRV_RUNNING | IFF_DRV_OACTIVE);
1930}
1931