1/*-
2 * Copyright (c) 2010 Fredrik Lindberg <fli@shapeshifter.se>
3 * All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * 1. Redistributions of source code must retain the above copyright
9 *    notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 *    notice, this list of conditions and the following disclaimer in the
12 *    documentation and/or other materials provided with the distribution.
13 *
14 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
15 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
16 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
17 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
18 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
19 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
20 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
21 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
22 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
23 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
24 *
25 */
26#include <sys/cdefs.h>
27__FBSDID("$FreeBSD$");
28
29#include <sys/param.h>
30#include <sys/types.h>
31#include <sys/sockio.h>
32#include <sys/mbuf.h>
33#include <sys/malloc.h>
34#include <sys/kernel.h>
35#include <sys/module.h>
36#include <sys/socket.h>
37#include <sys/tty.h>
38#include <sys/sysctl.h>
39#include <sys/condvar.h>
40#include <sys/sx.h>
41#include <sys/proc.h>
42#include <sys/conf.h>
43#include <sys/bus.h>
44#include <sys/systm.h>
45#include <sys/limits.h>
46
47#include <machine/bus.h>
48
49#include <net/if.h>
50#include <net/if_types.h>
51#include <net/netisr.h>
52#include <net/bpf.h>
53#include <netinet/in.h>
54#include <netinet/ip.h>
55#include <netinet/ip6.h>
56
57#include <dev/usb/usb.h>
58#include <dev/usb/usbdi.h>
59#include <dev/usb/usbdi_util.h>
60#include <dev/usb/usb_cdc.h>
61#include "usbdevs.h"
62#define USB_DEBUG_VAR uhso_debug
63#include <dev/usb/usb_debug.h>
64#include <dev/usb/usb_process.h>
65#include <dev/usb/usb_busdma.h>
66#include <dev/usb/usb_msctest.h>
67
68#include <dev/usb/serial/usb_serial.h>
69
70struct uhso_tty {
71	struct uhso_softc *ht_sc;
72	struct usb_xfer	*ht_xfer[3];
73	int		ht_muxport; /* Mux. port no */
74	int		ht_open;
75	char		ht_name[32];
76};
77
78struct uhso_softc {
79	device_t		sc_dev;
80	struct usb_device	*sc_udev;
81	struct mtx		sc_mtx;
82	uint32_t		sc_type;	/* Interface definition */
83	int			sc_radio;
84
85	struct usb_xfer		*sc_xfer[3];
86	uint8_t			sc_iface_no;
87	uint8_t			sc_iface_index;
88
89	/* Control pipe */
90	struct usb_xfer	*	sc_ctrl_xfer[2];
91	uint8_t			sc_ctrl_iface_no;
92
93	/* Network */
94	struct usb_xfer		*sc_if_xfer[2];
95	struct ifnet		*sc_ifp;
96	struct mbuf		*sc_mwait;	/* Partial packet */
97	size_t			sc_waitlen;	/* No. of outstanding bytes */
98	struct ifqueue		sc_rxq;
99	struct callout		sc_c;
100
101	/* TTY related structures */
102	struct ucom_super_softc sc_super_ucom;
103	int			sc_ttys;
104	struct uhso_tty		*sc_tty;
105	struct ucom_softc	*sc_ucom;
106	int			sc_msr;
107	int			sc_lsr;
108	int			sc_line;
109};
110
111#define UHSO_MAX_MTU		2048
112
113/*
114 * There are mainly two type of cards floating around.
115 * The first one has 2,3 or 4 interfaces with a multiplexed serial port
116 * and packet interface on the first interface and bulk serial ports
117 * on the others.
118 * The second type of card has several other interfaces, their purpose
119 * can be detected during run-time.
120 */
121#define UHSO_IFACE_SPEC(usb_type, port, port_type) \
122	(((usb_type) << 24) | ((port) << 16) | (port_type))
123
124#define UHSO_IFACE_USB_TYPE(x) ((x >> 24) & 0xff)
125#define UHSO_IFACE_PORT(x) ((x >> 16) & 0xff)
126#define UHSO_IFACE_PORT_TYPE(x) (x & 0xff)
127
128/*
129 * USB interface types
130 */
131#define UHSO_IF_NET		0x01	/* Network packet interface */
132#define UHSO_IF_MUX		0x02	/* Multiplexed serial port */
133#define UHSO_IF_BULK		0x04	/* Bulk interface */
134
135/*
136 * Port types
137 */
138#define UHSO_PORT_UNKNOWN	0x00
139#define UHSO_PORT_SERIAL	0x01	/* Serial port */
140#define UHSO_PORT_NETWORK	0x02	/* Network packet interface */
141
142/*
143 * Multiplexed serial port destination sub-port names
144 */
145#define UHSO_MPORT_TYPE_CTL	0x00	/* Control port */
146#define UHSO_MPORT_TYPE_APP	0x01	/* Application */
147#define UHSO_MPORT_TYPE_PCSC	0x02
148#define UHSO_MPORT_TYPE_GPS	0x03
149#define UHSO_MPORT_TYPE_APP2	0x04	/* Secondary application */
150#define UHSO_MPORT_TYPE_MAX	UHSO_MPORT_TYPE_APP2
151#define UHSO_MPORT_TYPE_NOMAX	8	/* Max number of mux ports */
152
153/*
154 * Port definitions
155 * Note that these definitions are arbitrary and do not match the values
156 * returned by the auto config descriptor.
157 */
158#define UHSO_PORT_TYPE_UNKNOWN	0x00
159#define UHSO_PORT_TYPE_CTL	0x01
160#define UHSO_PORT_TYPE_APP	0x02
161#define UHSO_PORT_TYPE_APP2	0x03
162#define UHSO_PORT_TYPE_MODEM	0x04
163#define UHSO_PORT_TYPE_NETWORK	0x05
164#define UHSO_PORT_TYPE_DIAG	0x06
165#define UHSO_PORT_TYPE_DIAG2	0x07
166#define UHSO_PORT_TYPE_GPS	0x08
167#define UHSO_PORT_TYPE_GPSCTL	0x09
168#define UHSO_PORT_TYPE_PCSC	0x0a
169#define UHSO_PORT_TYPE_MSD	0x0b
170#define UHSO_PORT_TYPE_VOICE	0x0c
171#define UHSO_PORT_TYPE_MAX	0x0c
172
173static eventhandler_tag uhso_etag;
174
175/* Overall port type */
176static char *uhso_port[] = {
177	"Unknown",
178	"Serial",
179	"Network",
180	"Network/Serial"
181};
182
183/*
184 * Map between interface port type read from device and description type.
185 * The position in this array is a direct map to the auto config
186 * descriptor values.
187 */
188static unsigned char uhso_port_map[] = {
189	UHSO_PORT_TYPE_UNKNOWN,
190	UHSO_PORT_TYPE_DIAG,
191	UHSO_PORT_TYPE_GPS,
192	UHSO_PORT_TYPE_GPSCTL,
193	UHSO_PORT_TYPE_APP,
194	UHSO_PORT_TYPE_APP2,
195	UHSO_PORT_TYPE_CTL,
196	UHSO_PORT_TYPE_NETWORK,
197	UHSO_PORT_TYPE_MODEM,
198	UHSO_PORT_TYPE_MSD,
199	UHSO_PORT_TYPE_PCSC,
200	UHSO_PORT_TYPE_VOICE
201};
202static char uhso_port_map_max = sizeof(uhso_port_map) / sizeof(char);
203
204static unsigned char uhso_mux_port_map[] = {
205	UHSO_PORT_TYPE_CTL,
206	UHSO_PORT_TYPE_APP,
207	UHSO_PORT_TYPE_PCSC,
208	UHSO_PORT_TYPE_GPS,
209	UHSO_PORT_TYPE_APP2
210};
211
212static char *uhso_port_type[] = {
213	"Unknown",  /* Not a valid port */
214	"Control",
215	"Application",
216	"Application (Secondary)",
217	"Modem",
218	"Network",
219	"Diagnostic",
220	"Diagnostic (Secondary)",
221	"GPS",
222	"GPS Control",
223	"PC Smartcard",
224	"MSD",
225	"Voice",
226};
227
228static char *uhso_port_type_sysctl[] = {
229	"unknown",
230	"control",
231	"application",
232	"application",
233	"modem",
234	"network",
235	"diagnostic",
236	"diagnostic",
237	"gps",
238	"gps_control",
239	"pcsc",
240	"msd",
241	"voice",
242};
243
244#define UHSO_STATIC_IFACE	0x01
245#define UHSO_AUTO_IFACE		0x02
246
247/* ifnet device unit allocations */
248static struct unrhdr *uhso_ifnet_unit = NULL;
249
250static const STRUCT_USB_HOST_ID uhso_devs[] = {
251#define	UHSO_DEV(v,p,i) { USB_VPI(USB_VENDOR_##v, USB_PRODUCT_##v##_##p, i) }
252	/* Option GlobeTrotter MAX 7.2 with upgraded firmware */
253	UHSO_DEV(OPTION, GTMAX72, UHSO_STATIC_IFACE),
254	/* Option GlobeSurfer iCON 7.2 */
255	UHSO_DEV(OPTION, GSICON72, UHSO_STATIC_IFACE),
256	/* Option iCON 225 */
257	UHSO_DEV(OPTION, GTHSDPA, UHSO_STATIC_IFACE),
258	/* Option GlobeSurfer iCON HSUPA */
259	UHSO_DEV(OPTION, GSICONHSUPA, UHSO_STATIC_IFACE),
260	/* Option GlobeTrotter HSUPA */
261	UHSO_DEV(OPTION, GTHSUPA, UHSO_STATIC_IFACE),
262	/* GE40x */
263	UHSO_DEV(OPTION, GE40X, UHSO_AUTO_IFACE),
264	UHSO_DEV(OPTION, GE40X_1, UHSO_AUTO_IFACE),
265	UHSO_DEV(OPTION, GE40X_2, UHSO_AUTO_IFACE),
266	UHSO_DEV(OPTION, GE40X_3, UHSO_AUTO_IFACE),
267	/* Option GlobeSurfer iCON 401 */
268	UHSO_DEV(OPTION, ICON401, UHSO_AUTO_IFACE),
269	/* Option GlobeTrotter Module 382 */
270	UHSO_DEV(OPTION, GMT382, UHSO_AUTO_IFACE),
271	/* Option GTM661W */
272	UHSO_DEV(OPTION, GTM661W, UHSO_AUTO_IFACE),
273	/* Option iCON EDGE */
274	UHSO_DEV(OPTION, ICONEDGE, UHSO_STATIC_IFACE),
275	/* Option Module HSxPA */
276	UHSO_DEV(OPTION, MODHSXPA, UHSO_STATIC_IFACE),
277	/* Option iCON 321 */
278	UHSO_DEV(OPTION, ICON321, UHSO_STATIC_IFACE),
279	/* Option iCON 322 */
280	UHSO_DEV(OPTION, GTICON322, UHSO_STATIC_IFACE),
281	/* Option iCON 505 */
282	UHSO_DEV(OPTION, ICON505, UHSO_AUTO_IFACE),
283	/* Option iCON 452 */
284	UHSO_DEV(OPTION, ICON505, UHSO_AUTO_IFACE),
285#undef UHSO_DEV
286};
287
288static SYSCTL_NODE(_hw_usb, OID_AUTO, uhso, CTLFLAG_RW, 0, "USB uhso");
289static int uhso_autoswitch = 1;
290SYSCTL_INT(_hw_usb_uhso, OID_AUTO, auto_switch, CTLFLAG_RW,
291    &uhso_autoswitch, 0, "Automatically switch to modem mode");
292
293#ifdef USB_DEBUG
294#ifdef UHSO_DEBUG
295static int uhso_debug = UHSO_DEBUG;
296#else
297static int uhso_debug = -1;
298#endif
299
300SYSCTL_INT(_hw_usb_uhso, OID_AUTO, debug, CTLFLAG_RW,
301    &uhso_debug, 0, "Debug level");
302
303#define UHSO_DPRINTF(n, x, ...) {\
304	if (uhso_debug >= n) {\
305		printf("%s: " x, __func__, ##__VA_ARGS__);\
306	}\
307}
308#else
309#define UHSO_DPRINTF(n, x, ...)
310#endif
311
312#ifdef UHSO_DEBUG_HEXDUMP
313# define UHSO_HEXDUMP(_buf, _len) do { \
314  { \
315        size_t __tmp; \
316        const char *__buf = (const char *)_buf; \
317        for (__tmp = 0; __tmp < _len; __tmp++) \
318                printf("%02hhx ", *__buf++); \
319    printf("\n"); \
320  } \
321} while(0)
322#else
323# define UHSO_HEXDUMP(_buf, _len)
324#endif
325
326enum {
327	UHSO_MUX_ENDPT_INTR = 0,
328	UHSO_MUX_ENDPT_MAX
329};
330
331enum {
332	UHSO_CTRL_READ = 0,
333	UHSO_CTRL_WRITE,
334	UHSO_CTRL_MAX
335};
336
337enum {
338	UHSO_IFNET_READ = 0,
339	UHSO_IFNET_WRITE,
340	UHSO_IFNET_MAX
341};
342
343enum {
344	UHSO_BULK_ENDPT_READ = 0,
345	UHSO_BULK_ENDPT_WRITE,
346	UHSO_BULK_ENDPT_INTR,
347	UHSO_BULK_ENDPT_MAX
348};
349
350static usb_callback_t uhso_mux_intr_callback;
351static usb_callback_t uhso_mux_read_callback;
352static usb_callback_t uhso_mux_write_callback;
353static usb_callback_t uhso_bs_read_callback;
354static usb_callback_t uhso_bs_write_callback;
355static usb_callback_t uhso_bs_intr_callback;
356static usb_callback_t uhso_ifnet_read_callback;
357static usb_callback_t uhso_ifnet_write_callback;
358
359/* Config used for the default control pipes */
360static const struct usb_config uhso_ctrl_config[UHSO_CTRL_MAX] = {
361	[UHSO_CTRL_READ] = {
362		.type = UE_CONTROL,
363		.endpoint = 0x00,
364		.direction = UE_DIR_ANY,
365		.flags = { .pipe_bof = 1, .short_xfer_ok = 1 },
366		.bufsize = sizeof(struct usb_device_request) + 1024,
367		.callback = &uhso_mux_read_callback
368	},
369
370	[UHSO_CTRL_WRITE] = {
371		.type = UE_CONTROL,
372		.endpoint = 0x00,
373		.direction = UE_DIR_ANY,
374		.flags = { .pipe_bof = 1, .force_short_xfer = 1 },
375		.bufsize = sizeof(struct usb_device_request) + 1024,
376		.timeout = 1000,
377		.callback = &uhso_mux_write_callback
378	}
379};
380
381/* Config for the multiplexed serial ports */
382static const struct usb_config uhso_mux_config[UHSO_MUX_ENDPT_MAX] = {
383	[UHSO_MUX_ENDPT_INTR] = {
384		.type = UE_INTERRUPT,
385		.endpoint = UE_ADDR_ANY,
386		.direction = UE_DIR_IN,
387		.flags = { .short_xfer_ok = 1 },
388		.bufsize = 0,
389		.callback = &uhso_mux_intr_callback,
390	}
391};
392
393/* Config for the raw IP-packet interface */
394static const struct usb_config uhso_ifnet_config[UHSO_IFNET_MAX] = {
395	[UHSO_IFNET_READ] = {
396		.type = UE_BULK,
397		.endpoint = UE_ADDR_ANY,
398		.direction = UE_DIR_IN,
399		.flags = { .pipe_bof = 1, .short_xfer_ok = 1 },
400		.bufsize = MCLBYTES,
401		.callback = &uhso_ifnet_read_callback
402	},
403	[UHSO_IFNET_WRITE] = {
404		.type = UE_BULK,
405		.endpoint = UE_ADDR_ANY,
406		.direction = UE_DIR_OUT,
407		.flags = { .pipe_bof = 1, .force_short_xfer = 1 },
408		.bufsize = MCLBYTES,
409		.timeout = 5 * USB_MS_HZ,
410		.callback = &uhso_ifnet_write_callback
411	}
412};
413
414/* Config for interfaces with normal bulk serial ports */
415static const struct usb_config uhso_bs_config[UHSO_BULK_ENDPT_MAX] = {
416	[UHSO_BULK_ENDPT_READ] = {
417		.type = UE_BULK,
418		.endpoint = UE_ADDR_ANY,
419		.direction = UE_DIR_IN,
420		.flags = { .pipe_bof = 1, .short_xfer_ok = 1 },
421		.bufsize = 4096,
422		.callback = &uhso_bs_read_callback
423	},
424
425	[UHSO_BULK_ENDPT_WRITE] = {
426		.type = UE_BULK,
427		.endpoint = UE_ADDR_ANY,
428		.direction = UE_DIR_OUT,
429		.flags = { .pipe_bof = 1, .force_short_xfer = 1 },
430		.bufsize = 8192,
431		.callback = &uhso_bs_write_callback
432	},
433
434	[UHSO_BULK_ENDPT_INTR] = {
435		.type = UE_INTERRUPT,
436		.endpoint = UE_ADDR_ANY,
437		.direction = UE_DIR_IN,
438		.flags = { .short_xfer_ok = 1 },
439		.bufsize = 0,
440		.callback = &uhso_bs_intr_callback,
441	}
442};
443
444static int  uhso_probe_iface(struct uhso_softc *, int,
445    int (*probe)(struct usb_device *, int));
446static int  uhso_probe_iface_auto(struct usb_device *, int);
447static int  uhso_probe_iface_static(struct usb_device *, int);
448static int  uhso_attach_muxserial(struct uhso_softc *, struct usb_interface *,
449    int type);
450static int  uhso_attach_bulkserial(struct uhso_softc *, struct usb_interface *,
451    int type);
452static int  uhso_attach_ifnet(struct uhso_softc *, struct usb_interface *,
453    int type);
454static void uhso_test_autoinst(void *, struct usb_device *,
455		struct usb_attach_arg *);
456static int  uhso_driver_loaded(struct module *, int, void *);
457static int uhso_radio_sysctl(SYSCTL_HANDLER_ARGS);
458static int uhso_radio_ctrl(struct uhso_softc *, int);
459
460static void uhso_free(struct ucom_softc *);
461static void uhso_ucom_start_read(struct ucom_softc *);
462static void uhso_ucom_stop_read(struct ucom_softc *);
463static void uhso_ucom_start_write(struct ucom_softc *);
464static void uhso_ucom_stop_write(struct ucom_softc *);
465static void uhso_ucom_cfg_get_status(struct ucom_softc *, uint8_t *, uint8_t *);
466static void uhso_ucom_cfg_set_dtr(struct ucom_softc *, uint8_t);
467static void uhso_ucom_cfg_set_rts(struct ucom_softc *, uint8_t);
468static void uhso_if_init(void *);
469static void uhso_if_start(struct ifnet *);
470static void uhso_if_stop(struct uhso_softc *);
471static int  uhso_if_ioctl(struct ifnet *, u_long, caddr_t);
472static int  uhso_if_output(struct ifnet *, struct mbuf *,
473    const struct sockaddr *, struct route *);
474static void uhso_if_rxflush(void *);
475
476static device_probe_t uhso_probe;
477static device_attach_t uhso_attach;
478static device_detach_t uhso_detach;
479static void uhso_free_softc(struct uhso_softc *);
480
481static device_method_t uhso_methods[] = {
482	DEVMETHOD(device_probe,		uhso_probe),
483	DEVMETHOD(device_attach,	uhso_attach),
484	DEVMETHOD(device_detach,	uhso_detach),
485	{ 0, 0 }
486};
487
488static driver_t uhso_driver = {
489	.name = "uhso",
490	.methods = uhso_methods,
491	.size = sizeof(struct uhso_softc)
492};
493
494static devclass_t uhso_devclass;
495DRIVER_MODULE(uhso, uhub, uhso_driver, uhso_devclass, uhso_driver_loaded, 0);
496MODULE_DEPEND(uhso, ucom, 1, 1, 1);
497MODULE_DEPEND(uhso, usb, 1, 1, 1);
498MODULE_VERSION(uhso, 1);
499
500static struct ucom_callback uhso_ucom_callback = {
501	.ucom_cfg_get_status = &uhso_ucom_cfg_get_status,
502	.ucom_cfg_set_dtr = &uhso_ucom_cfg_set_dtr,
503	.ucom_cfg_set_rts = &uhso_ucom_cfg_set_rts,
504	.ucom_start_read = uhso_ucom_start_read,
505	.ucom_stop_read = uhso_ucom_stop_read,
506	.ucom_start_write = uhso_ucom_start_write,
507	.ucom_stop_write = uhso_ucom_stop_write,
508	.ucom_free = &uhso_free,
509};
510
511static int
512uhso_probe(device_t self)
513{
514	struct usb_attach_arg *uaa = device_get_ivars(self);
515	int error;
516
517	if (uaa->usb_mode != USB_MODE_HOST)
518		return (ENXIO);
519	if (uaa->info.bConfigIndex != 0)
520		return (ENXIO);
521	if (uaa->info.bDeviceClass != 0xff)
522		return (ENXIO);
523
524	error = usbd_lookup_id_by_uaa(uhso_devs, sizeof(uhso_devs), uaa);
525	if (error != 0)
526		return (error);
527
528	/*
529	 * Probe device to see if we are able to attach
530	 * to this interface or not.
531	 */
532	if (USB_GET_DRIVER_INFO(uaa) == UHSO_AUTO_IFACE) {
533		if (uhso_probe_iface_auto(uaa->device,
534		    uaa->info.bIfaceNum) == 0)
535			return (ENXIO);
536	}
537	return (error);
538}
539
540static int
541uhso_attach(device_t self)
542{
543	struct uhso_softc *sc = device_get_softc(self);
544	struct usb_attach_arg *uaa = device_get_ivars(self);
545	struct usb_interface_descriptor *id;
546	struct sysctl_ctx_list *sctx;
547	struct sysctl_oid *soid;
548	struct sysctl_oid *tree = NULL, *tty_node;
549	struct ucom_softc *ucom;
550	struct uhso_tty *ht;
551	int i, error, port;
552	void *probe_f;
553	usb_error_t uerr;
554	char *desc;
555
556	sc->sc_dev = self;
557	sc->sc_udev = uaa->device;
558	mtx_init(&sc->sc_mtx, "uhso", NULL, MTX_DEF);
559	ucom_ref(&sc->sc_super_ucom);
560
561	sc->sc_radio = 1;
562
563	id = usbd_get_interface_descriptor(uaa->iface);
564	sc->sc_ctrl_iface_no = id->bInterfaceNumber;
565
566	sc->sc_iface_no = uaa->info.bIfaceNum;
567	sc->sc_iface_index = uaa->info.bIfaceIndex;
568
569	/* Setup control pipe */
570	uerr = usbd_transfer_setup(uaa->device,
571	    &sc->sc_iface_index, sc->sc_ctrl_xfer,
572	    uhso_ctrl_config, UHSO_CTRL_MAX, sc, &sc->sc_mtx);
573	if (uerr) {
574		device_printf(self, "Failed to setup control pipe: %s\n",
575		    usbd_errstr(uerr));
576		goto out;
577	}
578
579	if (USB_GET_DRIVER_INFO(uaa) == UHSO_STATIC_IFACE)
580		probe_f = uhso_probe_iface_static;
581	else if (USB_GET_DRIVER_INFO(uaa) == UHSO_AUTO_IFACE)
582		probe_f = uhso_probe_iface_auto;
583	else
584		goto out;
585
586	error = uhso_probe_iface(sc, uaa->info.bIfaceNum, probe_f);
587	if (error != 0)
588		goto out;
589
590	sctx = device_get_sysctl_ctx(sc->sc_dev);
591	soid = device_get_sysctl_tree(sc->sc_dev);
592
593	SYSCTL_ADD_STRING(sctx, SYSCTL_CHILDREN(soid), OID_AUTO, "type",
594	    CTLFLAG_RD, uhso_port[UHSO_IFACE_PORT(sc->sc_type)], 0,
595	    "Port available at this interface");
596	SYSCTL_ADD_PROC(sctx, SYSCTL_CHILDREN(soid), OID_AUTO, "radio",
597	    CTLTYPE_INT | CTLFLAG_RW, sc, 0, uhso_radio_sysctl, "I", "Enable radio");
598
599	/*
600	 * The default interface description on most Option devices isn't
601	 * very helpful. So we skip device_set_usb_desc and set the
602	 * device description manually.
603	 */
604	device_set_desc_copy(self, uhso_port_type[UHSO_IFACE_PORT_TYPE(sc->sc_type)]);
605	/* Announce device */
606	device_printf(self, "<%s port> at <%s %s> on %s\n",
607	    uhso_port_type[UHSO_IFACE_PORT_TYPE(sc->sc_type)],
608	    usb_get_manufacturer(uaa->device),
609	    usb_get_product(uaa->device),
610	    device_get_nameunit(device_get_parent(self)));
611
612	if (sc->sc_ttys > 0) {
613		SYSCTL_ADD_INT(sctx, SYSCTL_CHILDREN(soid), OID_AUTO, "ports",
614		    CTLFLAG_RD, &sc->sc_ttys, 0, "Number of attached serial ports");
615
616		tree = SYSCTL_ADD_NODE(sctx, SYSCTL_CHILDREN(soid), OID_AUTO,
617		    "port", CTLFLAG_RD, NULL, "Serial ports");
618	}
619
620	/*
621	 * Loop through the number of found TTYs and create sysctl
622	 * nodes for them.
623	 */
624	for (i = 0; i < sc->sc_ttys; i++) {
625		ht = &sc->sc_tty[i];
626		ucom = &sc->sc_ucom[i];
627
628		if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_MUX)
629			port = uhso_mux_port_map[ht->ht_muxport];
630		else
631			port = UHSO_IFACE_PORT_TYPE(sc->sc_type);
632
633		desc = uhso_port_type_sysctl[port];
634
635		tty_node = SYSCTL_ADD_NODE(sctx, SYSCTL_CHILDREN(tree), OID_AUTO,
636		    desc, CTLFLAG_RD, NULL, "");
637
638		ht->ht_name[0] = 0;
639		if (sc->sc_ttys == 1)
640			snprintf(ht->ht_name, 32, "cuaU%d", ucom->sc_super->sc_unit);
641		else {
642			snprintf(ht->ht_name, 32, "cuaU%d.%d",
643			    ucom->sc_super->sc_unit, ucom->sc_subunit);
644		}
645
646		desc = uhso_port_type[port];
647		SYSCTL_ADD_STRING(sctx, SYSCTL_CHILDREN(tty_node), OID_AUTO,
648		    "tty", CTLFLAG_RD, ht->ht_name, 0, "");
649		SYSCTL_ADD_STRING(sctx, SYSCTL_CHILDREN(tty_node), OID_AUTO,
650		    "desc", CTLFLAG_RD, desc, 0, "");
651
652		if (bootverbose)
653			device_printf(sc->sc_dev,
654			    "\"%s\" port at %s\n", desc, ht->ht_name);
655	}
656
657	return (0);
658out:
659	uhso_detach(sc->sc_dev);
660	return (ENXIO);
661}
662
663static int
664uhso_detach(device_t self)
665{
666	struct uhso_softc *sc = device_get_softc(self);
667	int i;
668
669	usbd_transfer_unsetup(sc->sc_xfer, 3);
670	usbd_transfer_unsetup(sc->sc_ctrl_xfer, UHSO_CTRL_MAX);
671	if (sc->sc_ttys > 0) {
672		ucom_detach(&sc->sc_super_ucom, sc->sc_ucom);
673
674		for (i = 0; i < sc->sc_ttys; i++) {
675			if (sc->sc_tty[i].ht_muxport != -1) {
676				usbd_transfer_unsetup(sc->sc_tty[i].ht_xfer,
677				    UHSO_CTRL_MAX);
678			}
679		}
680	}
681
682	if (sc->sc_ifp != NULL) {
683		callout_drain(&sc->sc_c);
684		free_unr(uhso_ifnet_unit, sc->sc_ifp->if_dunit);
685		mtx_lock(&sc->sc_mtx);
686		uhso_if_stop(sc);
687		bpfdetach(sc->sc_ifp);
688		if_detach(sc->sc_ifp);
689		if_free(sc->sc_ifp);
690		mtx_unlock(&sc->sc_mtx);
691		usbd_transfer_unsetup(sc->sc_if_xfer, UHSO_IFNET_MAX);
692	}
693
694	device_claim_softc(self);
695
696	uhso_free_softc(sc);
697
698	return (0);
699}
700
701UCOM_UNLOAD_DRAIN(uhso);
702
703static void
704uhso_free_softc(struct uhso_softc *sc)
705{
706	if (ucom_unref(&sc->sc_super_ucom)) {
707		free(sc->sc_tty, M_USBDEV);
708		free(sc->sc_ucom, M_USBDEV);
709		mtx_destroy(&sc->sc_mtx);
710		device_free_softc(sc);
711	}
712}
713
714static void
715uhso_free(struct ucom_softc *ucom)
716{
717	uhso_free_softc(ucom->sc_parent);
718}
719
720static void
721uhso_test_autoinst(void *arg, struct usb_device *udev,
722    struct usb_attach_arg *uaa)
723{
724	struct usb_interface *iface;
725	struct usb_interface_descriptor *id;
726
727	if (uaa->dev_state != UAA_DEV_READY || !uhso_autoswitch)
728		return;
729
730	iface = usbd_get_iface(udev, 0);
731	if (iface == NULL)
732		return;
733	id = iface->idesc;
734	if (id == NULL || id->bInterfaceClass != UICLASS_MASS)
735		return;
736	if (usbd_lookup_id_by_uaa(uhso_devs, sizeof(uhso_devs), uaa))
737		return;		/* no device match */
738
739	if (usb_msc_eject(udev, 0, MSC_EJECT_REZERO) == 0) {
740		/* success, mark the udev as disappearing */
741		uaa->dev_state = UAA_DEV_EJECTING;
742	}
743}
744
745static int
746uhso_driver_loaded(struct module *mod, int what, void *arg)
747{
748	switch (what) {
749	case MOD_LOAD:
750		/* register our autoinstall handler */
751		uhso_etag = EVENTHANDLER_REGISTER(usb_dev_configured,
752		    uhso_test_autoinst, NULL, EVENTHANDLER_PRI_ANY);
753		/* create our unit allocator for inet devs */
754		uhso_ifnet_unit = new_unrhdr(0, INT_MAX, NULL);
755		break;
756	case MOD_UNLOAD:
757		EVENTHANDLER_DEREGISTER(usb_dev_configured, uhso_etag);
758		delete_unrhdr(uhso_ifnet_unit);
759		break;
760	default:
761		return (EOPNOTSUPP);
762	}
763	return (0);
764}
765
766/*
767 * Probe the interface type by querying the device. The elements
768 * of an array indicates the capabilities of a particular interface.
769 * Returns a bit mask with the interface capabilities.
770 */
771static int
772uhso_probe_iface_auto(struct usb_device *udev, int index)
773{
774	struct usb_device_request req;
775	usb_error_t uerr;
776	uint16_t actlen = 0;
777	char port;
778	char buf[17] = {0};
779
780	req.bmRequestType = UT_READ_VENDOR_DEVICE;
781	req.bRequest = 0x86;
782	USETW(req.wValue, 0);
783	USETW(req.wIndex, 0);
784	USETW(req.wLength, 17);
785
786	uerr = usbd_do_request_flags(udev, NULL, &req, buf,
787	    0, &actlen, USB_MS_HZ);
788	if (uerr != 0) {
789		printf("%s: usbd_do_request_flags failed, %s\n",
790		    __func__, usbd_errstr(uerr));
791		return (0);
792	}
793
794	UHSO_DPRINTF(1, "actlen=%d\n", actlen);
795	UHSO_HEXDUMP(buf, 17);
796
797	if (index < 0 || index > 16) {
798		UHSO_DPRINTF(0, "Index %d out of range\n", index);
799		return (0);
800	}
801
802	UHSO_DPRINTF(1, "index=%d, type=%x[%s]\n", index, buf[index],
803	    uhso_port_type[(int)uhso_port_map[(int)buf[index]]]);
804
805	if (buf[index] >= uhso_port_map_max)
806		port = 0;
807	else
808		port = uhso_port_map[(int)buf[index]];
809
810	switch (port) {
811	case UHSO_PORT_TYPE_NETWORK:
812		return (UHSO_IFACE_SPEC(UHSO_IF_NET | UHSO_IF_MUX,
813		    UHSO_PORT_SERIAL | UHSO_PORT_NETWORK, port));
814	case UHSO_PORT_TYPE_DIAG:
815	case UHSO_PORT_TYPE_DIAG2:
816	case UHSO_PORT_TYPE_GPS:
817	case UHSO_PORT_TYPE_GPSCTL:
818	case UHSO_PORT_TYPE_CTL:
819	case UHSO_PORT_TYPE_APP:
820	case UHSO_PORT_TYPE_APP2:
821	case UHSO_PORT_TYPE_MODEM:
822		return (UHSO_IFACE_SPEC(UHSO_IF_BULK,
823		    UHSO_PORT_SERIAL, port));
824	case UHSO_PORT_TYPE_MSD:
825		return (0);
826	case UHSO_PORT_TYPE_UNKNOWN:
827	default:
828		return (0);
829	}
830
831	return (0);
832}
833
834/*
835 * Returns the capabilities of interfaces for devices that don't
836 * support the automatic query.
837 * Returns a bit mask with the interface capabilities.
838 */
839static int
840uhso_probe_iface_static(struct usb_device *udev, int index)
841{
842	struct usb_config_descriptor *cd;
843
844	cd = usbd_get_config_descriptor(udev);
845	if (cd->bNumInterface <= 3) {
846		/* Cards with 3 or less interfaces */
847		switch (index) {
848		case 0:
849			return UHSO_IFACE_SPEC(UHSO_IF_NET | UHSO_IF_MUX,
850			    UHSO_PORT_SERIAL | UHSO_PORT_NETWORK,
851			    UHSO_PORT_TYPE_NETWORK);
852		case 1:
853			return UHSO_IFACE_SPEC(UHSO_IF_BULK,
854			    UHSO_PORT_SERIAL, UHSO_PORT_TYPE_DIAG);
855		case 2:
856			return UHSO_IFACE_SPEC(UHSO_IF_BULK,
857			    UHSO_PORT_SERIAL, UHSO_PORT_TYPE_MODEM);
858		}
859	} else {
860		/* Cards with 4 interfaces */
861		switch (index) {
862		case 0:
863			return UHSO_IFACE_SPEC(UHSO_IF_NET | UHSO_IF_MUX,
864			    UHSO_PORT_SERIAL | UHSO_PORT_NETWORK,
865			    UHSO_PORT_TYPE_NETWORK);
866		case 1:
867			return UHSO_IFACE_SPEC(UHSO_IF_BULK,
868			    UHSO_PORT_SERIAL, UHSO_PORT_TYPE_DIAG2);
869		case 2:
870			return UHSO_IFACE_SPEC(UHSO_IF_BULK,
871			    UHSO_PORT_SERIAL, UHSO_PORT_TYPE_MODEM);
872		case 3:
873			return UHSO_IFACE_SPEC(UHSO_IF_BULK,
874			    UHSO_PORT_SERIAL, UHSO_PORT_TYPE_DIAG);
875		}
876	}
877	return (0);
878}
879
880/*
881 * Probes an interface for its particular capabilities and attaches if
882 * it's a supported interface.
883 */
884static int
885uhso_probe_iface(struct uhso_softc *sc, int index,
886    int (*probe)(struct usb_device *, int))
887{
888	struct usb_interface *iface;
889	int type, error;
890
891	UHSO_DPRINTF(1, "Probing for interface %d, probe_func=%p\n", index, probe);
892
893	type = probe(sc->sc_udev, index);
894	UHSO_DPRINTF(1, "Probe result %x\n", type);
895	if (type <= 0)
896		return (ENXIO);
897
898	sc->sc_type = type;
899	iface = usbd_get_iface(sc->sc_udev, index);
900
901	if (UHSO_IFACE_PORT_TYPE(type) == UHSO_PORT_TYPE_NETWORK) {
902		error = uhso_attach_ifnet(sc, iface, type);
903		if (error) {
904			UHSO_DPRINTF(1, "uhso_attach_ifnet failed");
905			return (ENXIO);
906		}
907
908		/*
909		 * If there is an additional interrupt endpoint on this
910		 * interface then we most likely have a multiplexed serial port
911		 * available.
912		 */
913		if (iface->idesc->bNumEndpoints < 3) {
914			sc->sc_type = UHSO_IFACE_SPEC(
915			    UHSO_IFACE_USB_TYPE(type) & ~UHSO_IF_MUX,
916			    UHSO_IFACE_PORT(type) & ~UHSO_PORT_SERIAL,
917			    UHSO_IFACE_PORT_TYPE(type));
918			return (0);
919		}
920
921		UHSO_DPRINTF(1, "Trying to attach mux. serial\n");
922		error = uhso_attach_muxserial(sc, iface, type);
923		if (error == 0 && sc->sc_ttys > 0) {
924			error = ucom_attach(&sc->sc_super_ucom, sc->sc_ucom,
925			    sc->sc_ttys, sc, &uhso_ucom_callback, &sc->sc_mtx);
926			if (error) {
927				device_printf(sc->sc_dev, "ucom_attach failed\n");
928				return (ENXIO);
929			}
930			ucom_set_pnpinfo_usb(&sc->sc_super_ucom, sc->sc_dev);
931
932			mtx_lock(&sc->sc_mtx);
933			usbd_transfer_start(sc->sc_xfer[UHSO_MUX_ENDPT_INTR]);
934			mtx_unlock(&sc->sc_mtx);
935		}
936	} else if ((UHSO_IFACE_USB_TYPE(type) & UHSO_IF_BULK) &&
937	    UHSO_IFACE_PORT(type) & UHSO_PORT_SERIAL) {
938
939		error = uhso_attach_bulkserial(sc, iface, type);
940		if (error)
941			return (ENXIO);
942
943		error = ucom_attach(&sc->sc_super_ucom, sc->sc_ucom,
944		    sc->sc_ttys, sc, &uhso_ucom_callback, &sc->sc_mtx);
945		if (error) {
946			device_printf(sc->sc_dev, "ucom_attach failed\n");
947			return (ENXIO);
948		}
949		ucom_set_pnpinfo_usb(&sc->sc_super_ucom, sc->sc_dev);
950	}
951	else {
952		UHSO_DPRINTF(0, "Unknown type %x\n", type);
953		return (ENXIO);
954	}
955
956	return (0);
957}
958
959static int
960uhso_radio_ctrl(struct uhso_softc *sc, int onoff)
961{
962	struct usb_device_request req;
963	usb_error_t uerr;
964
965	req.bmRequestType = UT_VENDOR;
966	req.bRequest = onoff ? 0x82 : 0x81;
967	USETW(req.wValue, 0);
968	USETW(req.wIndex, 0);
969	USETW(req.wLength, 0);
970
971	uerr = usbd_do_request(sc->sc_udev, NULL, &req, NULL);
972	if (uerr != 0) {
973		device_printf(sc->sc_dev, "usbd_do_request_flags failed: %s\n",
974		    usbd_errstr(uerr));
975		return (-1);
976	}
977	return (onoff);
978}
979
980static int
981uhso_radio_sysctl(SYSCTL_HANDLER_ARGS)
982{
983	struct uhso_softc *sc = arg1;
984	int error, radio;
985
986	radio = sc->sc_radio;
987	error = sysctl_handle_int(oidp, &radio, 0, req);
988	if (error)
989		return (error);
990	if (radio != sc->sc_radio) {
991		radio = radio != 0 ? 1 : 0;
992		error = uhso_radio_ctrl(sc, radio);
993		if (error != -1)
994			sc->sc_radio = radio;
995
996	}
997	return (0);
998}
999
1000/*
1001 * Expands allocated memory to fit an additional TTY.
1002 * Two arrays are kept with matching indexes, one for ucom and one
1003 * for our private data.
1004 */
1005static int
1006uhso_alloc_tty(struct uhso_softc *sc)
1007{
1008
1009	sc->sc_ttys++;
1010	sc->sc_tty = reallocf(sc->sc_tty, sizeof(struct uhso_tty) * sc->sc_ttys,
1011	    M_USBDEV, M_WAITOK | M_ZERO);
1012	if (sc->sc_tty == NULL)
1013		return (-1);
1014
1015	sc->sc_ucom = reallocf(sc->sc_ucom,
1016	    sizeof(struct ucom_softc) * sc->sc_ttys, M_USBDEV, M_WAITOK | M_ZERO);
1017	if (sc->sc_ucom == NULL)
1018		return (-1);
1019
1020	sc->sc_tty[sc->sc_ttys - 1].ht_sc = sc;
1021
1022	UHSO_DPRINTF(1, "Allocated TTY %d\n", sc->sc_ttys - 1);
1023	return (sc->sc_ttys - 1);
1024}
1025
1026/*
1027 * Attach a multiplexed serial port
1028 * Data is read/written with requests on the default control pipe. An interrupt
1029 * endpoint returns when there is new data to be read.
1030 */
1031static int
1032uhso_attach_muxserial(struct uhso_softc *sc, struct usb_interface *iface,
1033    int type)
1034{
1035	struct usb_descriptor *desc;
1036	int i, port, tty;
1037	usb_error_t uerr;
1038
1039	/*
1040	 * The class specific interface (type 0x24) descriptor subtype field
1041	 * contains a bitmask that specifies which (and how many) ports that
1042	 * are available through this multiplexed serial port.
1043 	 */
1044	desc = usbd_find_descriptor(sc->sc_udev, NULL,
1045	    iface->idesc->bInterfaceNumber, UDESC_CS_INTERFACE, 0xff, 0, 0);
1046	if (desc == NULL) {
1047		UHSO_DPRINTF(0, "Failed to find UDESC_CS_INTERFACE\n");
1048		return (ENXIO);
1049	}
1050
1051	UHSO_DPRINTF(1, "Mux port mask %x\n", desc->bDescriptorSubtype);
1052	if (desc->bDescriptorSubtype == 0)
1053		return (ENXIO);
1054
1055	/*
1056	 * The bitmask is one octet, loop through the number of
1057	 * bits that are set and create a TTY for each.
1058	 */
1059	for (i = 0; i < 8; i++) {
1060		port = (1 << i);
1061		if ((port & desc->bDescriptorSubtype) == port) {
1062			UHSO_DPRINTF(2, "Found mux port %x (%d)\n", port, i);
1063			tty = uhso_alloc_tty(sc);
1064			if (tty < 0)
1065				return (ENOMEM);
1066			sc->sc_tty[tty].ht_muxport = i;
1067			uerr = usbd_transfer_setup(sc->sc_udev,
1068			    &sc->sc_iface_index, sc->sc_tty[tty].ht_xfer,
1069			    uhso_ctrl_config, UHSO_CTRL_MAX, sc, &sc->sc_mtx);
1070			if (uerr) {
1071				device_printf(sc->sc_dev,
1072				    "Failed to setup control pipe: %s\n",
1073				    usbd_errstr(uerr));
1074				return (ENXIO);
1075			}
1076		}
1077	}
1078
1079	/* Setup the intr. endpoint */
1080	uerr = usbd_transfer_setup(sc->sc_udev,
1081	    &iface->idesc->bInterfaceNumber, sc->sc_xfer,
1082	    uhso_mux_config, 1, sc, &sc->sc_mtx);
1083	if (uerr)
1084		return (ENXIO);
1085
1086	return (0);
1087}
1088
1089/*
1090 * Interrupt callback for the multiplexed serial port. Indicates
1091 * which serial port has data waiting.
1092 */
1093static void
1094uhso_mux_intr_callback(struct usb_xfer *xfer, usb_error_t error)
1095{
1096	struct usb_page_cache *pc;
1097	struct usb_page_search res;
1098	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1099	unsigned int i, mux;
1100
1101	UHSO_DPRINTF(3, "status %d\n", USB_GET_STATE(xfer));
1102
1103	switch (USB_GET_STATE(xfer)) {
1104	case USB_ST_TRANSFERRED:
1105		/*
1106		 * The multiplexed port number can be found at the first byte.
1107		 * It contains a bit mask, we transform this in to an integer.
1108		 */
1109		pc = usbd_xfer_get_frame(xfer, 0);
1110		usbd_get_page(pc, 0, &res);
1111
1112		i = *((unsigned char *)res.buffer);
1113		mux = 0;
1114		while (i >>= 1) {
1115			mux++;
1116		}
1117
1118		UHSO_DPRINTF(3, "mux port %d (%d)\n", mux, i);
1119		if (mux > UHSO_MPORT_TYPE_NOMAX)
1120			break;
1121
1122		/* Issue a read for this serial port */
1123		usbd_xfer_set_priv(
1124		    sc->sc_tty[mux].ht_xfer[UHSO_CTRL_READ],
1125		    &sc->sc_tty[mux]);
1126		usbd_transfer_start(sc->sc_tty[mux].ht_xfer[UHSO_CTRL_READ]);
1127
1128		break;
1129	case USB_ST_SETUP:
1130tr_setup:
1131		usbd_xfer_set_frame_len(xfer, 0, usbd_xfer_max_len(xfer));
1132		usbd_transfer_submit(xfer);
1133		break;
1134	default:
1135		UHSO_DPRINTF(0, "error: %s\n", usbd_errstr(error));
1136		if (error == USB_ERR_CANCELLED)
1137			break;
1138
1139		usbd_xfer_set_stall(xfer);
1140		goto tr_setup;
1141	}
1142}
1143
1144static void
1145uhso_mux_read_callback(struct usb_xfer *xfer, usb_error_t error)
1146{
1147	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1148	struct usb_page_cache *pc;
1149	struct usb_device_request req;
1150	struct uhso_tty *ht;
1151	int actlen, len;
1152
1153	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1154
1155	UHSO_DPRINTF(3, "status %d\n", USB_GET_STATE(xfer));
1156
1157	ht = usbd_xfer_get_priv(xfer);
1158	UHSO_DPRINTF(3, "ht=%p open=%d\n", ht, ht->ht_open);
1159
1160	switch (USB_GET_STATE(xfer)) {
1161	case USB_ST_TRANSFERRED:
1162		/* Got data, send to ucom */
1163		pc = usbd_xfer_get_frame(xfer, 1);
1164		len = usbd_xfer_frame_len(xfer, 1);
1165
1166		UHSO_DPRINTF(3, "got %d bytes on mux port %d\n", len,
1167		    ht->ht_muxport);
1168		if (len <= 0) {
1169			usbd_transfer_start(sc->sc_xfer[UHSO_MUX_ENDPT_INTR]);
1170			break;
1171		}
1172
1173		/* Deliver data if the TTY is open, discard otherwise */
1174		if (ht->ht_open)
1175			ucom_put_data(&sc->sc_ucom[ht->ht_muxport], pc, 0, len);
1176		/* FALLTHROUGH */
1177	case USB_ST_SETUP:
1178tr_setup:
1179		memset(&req, 0, sizeof(struct usb_device_request));
1180		req.bmRequestType = UT_READ_CLASS_INTERFACE;
1181		req.bRequest = UCDC_GET_ENCAPSULATED_RESPONSE;
1182		USETW(req.wValue, 0);
1183		USETW(req.wIndex, ht->ht_muxport);
1184		USETW(req.wLength, 1024);
1185
1186		pc = usbd_xfer_get_frame(xfer, 0);
1187		usbd_copy_in(pc, 0, &req, sizeof(req));
1188
1189		usbd_xfer_set_frame_len(xfer, 0, sizeof(req));
1190		usbd_xfer_set_frame_len(xfer, 1, 1024);
1191		usbd_xfer_set_frames(xfer, 2);
1192		usbd_transfer_submit(xfer);
1193		break;
1194	default:
1195		UHSO_DPRINTF(0, "error: %s\n", usbd_errstr(error));
1196		if (error == USB_ERR_CANCELLED)
1197			break;
1198		usbd_xfer_set_stall(xfer);
1199		goto tr_setup;
1200	}
1201}
1202
1203static void
1204uhso_mux_write_callback(struct usb_xfer *xfer, usb_error_t error)
1205{
1206	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1207	struct uhso_tty *ht;
1208	struct usb_page_cache *pc;
1209	struct usb_device_request req;
1210	int actlen;
1211	struct usb_page_search res;
1212
1213	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1214
1215	ht = usbd_xfer_get_priv(xfer);
1216	UHSO_DPRINTF(3, "status=%d, using mux port %d\n",
1217	    USB_GET_STATE(xfer), ht->ht_muxport);
1218
1219	switch (USB_GET_STATE(xfer)) {
1220	case USB_ST_TRANSFERRED:
1221		UHSO_DPRINTF(3, "wrote %zd data bytes to muxport %d\n",
1222		    actlen - sizeof(struct usb_device_request) ,
1223		    ht->ht_muxport);
1224		/* FALLTHROUGH */
1225	case USB_ST_SETUP:
1226		pc = usbd_xfer_get_frame(xfer, 1);
1227		if (ucom_get_data(&sc->sc_ucom[ht->ht_muxport], pc,
1228		    0, 32, &actlen)) {
1229
1230			usbd_get_page(pc, 0, &res);
1231
1232			memset(&req, 0, sizeof(struct usb_device_request));
1233			req.bmRequestType = UT_WRITE_CLASS_INTERFACE;
1234			req.bRequest = UCDC_SEND_ENCAPSULATED_COMMAND;
1235			USETW(req.wValue, 0);
1236			USETW(req.wIndex, ht->ht_muxport);
1237			USETW(req.wLength, actlen);
1238
1239			pc = usbd_xfer_get_frame(xfer, 0);
1240			usbd_copy_in(pc, 0, &req, sizeof(req));
1241
1242			usbd_xfer_set_frame_len(xfer, 0, sizeof(req));
1243			usbd_xfer_set_frame_len(xfer, 1, actlen);
1244			usbd_xfer_set_frames(xfer, 2);
1245
1246			UHSO_DPRINTF(3, "Prepared %d bytes for transmit "
1247			    "on muxport %d\n", actlen, ht->ht_muxport);
1248
1249			usbd_transfer_submit(xfer);
1250		}
1251		break;
1252	default:
1253		UHSO_DPRINTF(0, "error: %s\n", usbd_errstr(error));
1254		if (error == USB_ERR_CANCELLED)
1255			break;
1256		break;
1257	}
1258}
1259
1260static int
1261uhso_attach_bulkserial(struct uhso_softc *sc, struct usb_interface *iface,
1262    int type)
1263{
1264	usb_error_t uerr;
1265	int tty;
1266
1267	/* Try attaching RD/WR/INTR first */
1268	uerr = usbd_transfer_setup(sc->sc_udev,
1269	    &iface->idesc->bInterfaceNumber, sc->sc_xfer,
1270	    uhso_bs_config, UHSO_BULK_ENDPT_MAX, sc, &sc->sc_mtx);
1271	if (uerr) {
1272		/* Try only RD/WR */
1273		uerr = usbd_transfer_setup(sc->sc_udev,
1274		    &iface->idesc->bInterfaceNumber, sc->sc_xfer,
1275		    uhso_bs_config, UHSO_BULK_ENDPT_MAX - 1, sc, &sc->sc_mtx);
1276	}
1277	if (uerr) {
1278		UHSO_DPRINTF(0, "usbd_transfer_setup failed");
1279		return (-1);
1280	}
1281
1282	tty = uhso_alloc_tty(sc);
1283	if (tty < 0) {
1284		usbd_transfer_unsetup(sc->sc_xfer, UHSO_BULK_ENDPT_MAX);
1285		return (ENOMEM);
1286	}
1287
1288	sc->sc_tty[tty].ht_muxport = -1;
1289	return (0);
1290}
1291
1292static void
1293uhso_bs_read_callback(struct usb_xfer *xfer, usb_error_t error)
1294{
1295	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1296	struct usb_page_cache *pc;
1297	int actlen;
1298
1299	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1300
1301	UHSO_DPRINTF(3, "status %d, actlen=%d\n", USB_GET_STATE(xfer), actlen);
1302
1303	switch (USB_GET_STATE(xfer)) {
1304	case USB_ST_TRANSFERRED:
1305		pc = usbd_xfer_get_frame(xfer, 0);
1306		ucom_put_data(&sc->sc_ucom[0], pc, 0, actlen);
1307		/* FALLTHROUGH */
1308	case USB_ST_SETUP:
1309tr_setup:
1310		usbd_xfer_set_frame_len(xfer, 0, usbd_xfer_max_len(xfer));
1311		usbd_transfer_submit(xfer);
1312	break;
1313	default:
1314		UHSO_DPRINTF(0, "error: %s\n", usbd_errstr(error));
1315		if (error == USB_ERR_CANCELLED)
1316			break;
1317		usbd_xfer_set_stall(xfer);
1318		goto tr_setup;
1319	}
1320}
1321
1322static void
1323uhso_bs_write_callback(struct usb_xfer *xfer, usb_error_t error)
1324{
1325	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1326	struct usb_page_cache *pc;
1327	int actlen;
1328
1329	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1330
1331	UHSO_DPRINTF(3, "status %d, actlen=%d\n", USB_GET_STATE(xfer), actlen);
1332
1333	switch (USB_GET_STATE(xfer)) {
1334	case USB_ST_TRANSFERRED:
1335	case USB_ST_SETUP:
1336tr_setup:
1337		pc = usbd_xfer_get_frame(xfer, 0);
1338		if (ucom_get_data(&sc->sc_ucom[0], pc, 0, 8192, &actlen)) {
1339			usbd_xfer_set_frame_len(xfer, 0, actlen);
1340			usbd_transfer_submit(xfer);
1341		}
1342		break;
1343	break;
1344	default:
1345		UHSO_DPRINTF(0, "error: %s\n", usbd_errstr(error));
1346		if (error == USB_ERR_CANCELLED)
1347			break;
1348		usbd_xfer_set_stall(xfer);
1349		goto tr_setup;
1350	}
1351}
1352
1353static void
1354uhso_bs_cfg(struct uhso_softc *sc)
1355{
1356	struct usb_device_request req;
1357	usb_error_t uerr;
1358
1359	if (!(UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_BULK))
1360		return;
1361
1362	req.bmRequestType = UT_WRITE_CLASS_INTERFACE;
1363	req.bRequest = UCDC_SET_CONTROL_LINE_STATE;
1364	USETW(req.wValue, sc->sc_line);
1365	USETW(req.wIndex, sc->sc_iface_no);
1366	USETW(req.wLength, 0);
1367
1368	uerr = ucom_cfg_do_request(sc->sc_udev, &sc->sc_ucom[0], &req, NULL, 0, 1000);
1369	if (uerr != 0) {
1370		device_printf(sc->sc_dev, "failed to set ctrl line state to "
1371		    "0x%02x: %s\n", sc->sc_line, usbd_errstr(uerr));
1372	}
1373}
1374
1375static void
1376uhso_bs_intr_callback(struct usb_xfer *xfer, usb_error_t error)
1377{
1378	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1379	struct usb_page_cache *pc;
1380	int actlen;
1381	struct usb_cdc_notification cdc;
1382
1383	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1384	UHSO_DPRINTF(3, "status %d, actlen=%d\n", USB_GET_STATE(xfer), actlen);
1385
1386	switch (USB_GET_STATE(xfer)) {
1387	case USB_ST_TRANSFERRED:
1388		if (actlen < UCDC_NOTIFICATION_LENGTH) {
1389			UHSO_DPRINTF(0, "UCDC notification too short: %d\n", actlen);
1390			goto tr_setup;
1391		}
1392		else if (actlen > (int)sizeof(struct usb_cdc_notification)) {
1393			UHSO_DPRINTF(0, "UCDC notification too large: %d\n", actlen);
1394			actlen = sizeof(struct usb_cdc_notification);
1395		}
1396
1397		pc = usbd_xfer_get_frame(xfer, 0);
1398		usbd_copy_out(pc, 0, &cdc, actlen);
1399
1400		if (UGETW(cdc.wIndex) != sc->sc_iface_no) {
1401			UHSO_DPRINTF(0, "Interface mismatch, got %d expected %d\n",
1402			    UGETW(cdc.wIndex), sc->sc_iface_no);
1403			goto tr_setup;
1404		}
1405
1406		if (cdc.bmRequestType == UCDC_NOTIFICATION &&
1407		    cdc.bNotification == UCDC_N_SERIAL_STATE) {
1408			UHSO_DPRINTF(2, "notify = 0x%02x\n", cdc.data[0]);
1409
1410			sc->sc_msr = 0;
1411			sc->sc_lsr = 0;
1412			if (cdc.data[0] & UCDC_N_SERIAL_RI)
1413				sc->sc_msr |= SER_RI;
1414			if (cdc.data[0] & UCDC_N_SERIAL_DSR)
1415				sc->sc_msr |= SER_DSR;
1416			if (cdc.data[0] & UCDC_N_SERIAL_DCD)
1417				sc->sc_msr |= SER_DCD;
1418
1419			ucom_status_change(&sc->sc_ucom[0]);
1420		}
1421	case USB_ST_SETUP:
1422tr_setup:
1423	default:
1424		if (error == USB_ERR_CANCELLED)
1425			break;
1426		usbd_xfer_set_stall(xfer);
1427		goto tr_setup;
1428	}
1429}
1430
1431static void
1432uhso_ucom_cfg_get_status(struct ucom_softc *ucom, uint8_t *lsr, uint8_t *msr)
1433{
1434	struct uhso_softc *sc = ucom->sc_parent;
1435
1436	*lsr = sc->sc_lsr;
1437	*msr = sc->sc_msr;
1438}
1439
1440static void
1441uhso_ucom_cfg_set_dtr(struct ucom_softc *ucom, uint8_t onoff)
1442{
1443	struct uhso_softc *sc = ucom->sc_parent;
1444
1445	if (!(UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_BULK))
1446		return;
1447
1448	if (onoff)
1449		sc->sc_line |= UCDC_LINE_DTR;
1450	else
1451		sc->sc_line &= ~UCDC_LINE_DTR;
1452
1453	uhso_bs_cfg(sc);
1454}
1455
1456static void
1457uhso_ucom_cfg_set_rts(struct ucom_softc *ucom, uint8_t onoff)
1458{
1459	struct uhso_softc *sc = ucom->sc_parent;
1460
1461	if (!(UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_BULK))
1462		return;
1463
1464	if (onoff)
1465		sc->sc_line |= UCDC_LINE_RTS;
1466	else
1467		sc->sc_line &= ~UCDC_LINE_RTS;
1468
1469	uhso_bs_cfg(sc);
1470}
1471
1472static void
1473uhso_ucom_start_read(struct ucom_softc *ucom)
1474{
1475	struct uhso_softc *sc = ucom->sc_parent;
1476
1477	UHSO_DPRINTF(3, "unit=%d, subunit=%d\n",
1478	    ucom->sc_super->sc_unit, ucom->sc_subunit);
1479
1480	if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_MUX) {
1481		sc->sc_tty[ucom->sc_subunit].ht_open = 1;
1482		usbd_transfer_start(sc->sc_xfer[UHSO_MUX_ENDPT_INTR]);
1483	}
1484	else if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_BULK) {
1485		sc->sc_tty[0].ht_open = 1;
1486		usbd_transfer_start(sc->sc_xfer[UHSO_BULK_ENDPT_READ]);
1487		if (sc->sc_xfer[UHSO_BULK_ENDPT_INTR] != NULL)
1488			usbd_transfer_start(sc->sc_xfer[UHSO_BULK_ENDPT_INTR]);
1489	}
1490}
1491
1492static void
1493uhso_ucom_stop_read(struct ucom_softc *ucom)
1494{
1495
1496	struct uhso_softc *sc = ucom->sc_parent;
1497
1498	if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_MUX) {
1499		sc->sc_tty[ucom->sc_subunit].ht_open = 0;
1500		usbd_transfer_stop(
1501		    sc->sc_tty[ucom->sc_subunit].ht_xfer[UHSO_CTRL_READ]);
1502	}
1503	else if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_BULK) {
1504		sc->sc_tty[0].ht_open = 0;
1505		usbd_transfer_start(sc->sc_xfer[UHSO_BULK_ENDPT_READ]);
1506		if (sc->sc_xfer[UHSO_BULK_ENDPT_INTR] != NULL)
1507			usbd_transfer_stop(sc->sc_xfer[UHSO_BULK_ENDPT_INTR]);
1508	}
1509}
1510
1511static void
1512uhso_ucom_start_write(struct ucom_softc *ucom)
1513{
1514	struct uhso_softc *sc = ucom->sc_parent;
1515
1516	if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_MUX) {
1517		UHSO_DPRINTF(3, "local unit %d\n", ucom->sc_subunit);
1518
1519		usbd_transfer_start(sc->sc_xfer[UHSO_MUX_ENDPT_INTR]);
1520
1521		usbd_xfer_set_priv(
1522		    sc->sc_tty[ucom->sc_subunit].ht_xfer[UHSO_CTRL_WRITE],
1523		    &sc->sc_tty[ucom->sc_subunit]);
1524		usbd_transfer_start(
1525		    sc->sc_tty[ucom->sc_subunit].ht_xfer[UHSO_CTRL_WRITE]);
1526
1527	}
1528	else if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_BULK) {
1529		usbd_transfer_start(sc->sc_xfer[UHSO_BULK_ENDPT_WRITE]);
1530	}
1531}
1532
1533static void
1534uhso_ucom_stop_write(struct ucom_softc *ucom)
1535{
1536	struct uhso_softc *sc = ucom->sc_parent;
1537
1538	if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_MUX) {
1539		usbd_transfer_stop(
1540		    sc->sc_tty[ucom->sc_subunit].ht_xfer[UHSO_CTRL_WRITE]);
1541	}
1542	else if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_BULK) {
1543		usbd_transfer_stop(sc->sc_xfer[UHSO_BULK_ENDPT_WRITE]);
1544	}
1545}
1546
1547static int
1548uhso_attach_ifnet(struct uhso_softc *sc, struct usb_interface *iface, int type)
1549{
1550	struct ifnet *ifp;
1551	usb_error_t uerr;
1552	struct sysctl_ctx_list *sctx;
1553	struct sysctl_oid *soid;
1554	unsigned int devunit;
1555
1556	uerr = usbd_transfer_setup(sc->sc_udev,
1557	    &iface->idesc->bInterfaceNumber, sc->sc_if_xfer,
1558	    uhso_ifnet_config, UHSO_IFNET_MAX, sc, &sc->sc_mtx);
1559	if (uerr) {
1560		UHSO_DPRINTF(0, "usbd_transfer_setup failed: %s\n",
1561		    usbd_errstr(uerr));
1562		return (-1);
1563	}
1564
1565	sc->sc_ifp = ifp = if_alloc(IFT_OTHER);
1566	if (sc->sc_ifp == NULL) {
1567		device_printf(sc->sc_dev, "if_alloc() failed\n");
1568		return (-1);
1569	}
1570
1571	callout_init_mtx(&sc->sc_c, &sc->sc_mtx, 0);
1572	mtx_lock(&sc->sc_mtx);
1573	callout_reset(&sc->sc_c, 1, uhso_if_rxflush, sc);
1574	mtx_unlock(&sc->sc_mtx);
1575
1576	/*
1577	 * We create our own unit numbers for ifnet devices because the
1578	 * USB interface unit numbers can be at arbitrary positions yielding
1579	 * odd looking device names.
1580	 */
1581	devunit = alloc_unr(uhso_ifnet_unit);
1582
1583	if_initname(ifp, device_get_name(sc->sc_dev), devunit);
1584	ifp->if_mtu = UHSO_MAX_MTU;
1585	ifp->if_ioctl = uhso_if_ioctl;
1586	ifp->if_init = uhso_if_init;
1587	ifp->if_start = uhso_if_start;
1588	ifp->if_output = uhso_if_output;
1589	ifp->if_flags = IFF_BROADCAST | IFF_MULTICAST | IFF_NOARP;
1590	ifp->if_softc = sc;
1591	IFQ_SET_MAXLEN(&ifp->if_snd, ifqmaxlen);
1592	ifp->if_snd.ifq_drv_maxlen = ifqmaxlen;
1593	IFQ_SET_READY(&ifp->if_snd);
1594
1595	if_attach(ifp);
1596	bpfattach(ifp, DLT_RAW, 0);
1597
1598	sctx = device_get_sysctl_ctx(sc->sc_dev);
1599	soid = device_get_sysctl_tree(sc->sc_dev);
1600	/* Unlocked read... */
1601	SYSCTL_ADD_STRING(sctx, SYSCTL_CHILDREN(soid), OID_AUTO, "netif",
1602	    CTLFLAG_RD, ifp->if_xname, 0, "Attached network interface");
1603
1604	return (0);
1605}
1606
1607static void
1608uhso_ifnet_read_callback(struct usb_xfer *xfer, usb_error_t error)
1609{
1610	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1611	struct mbuf *m;
1612	struct usb_page_cache *pc;
1613	int actlen;
1614
1615	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1616
1617	UHSO_DPRINTF(3, "status=%d, actlen=%d\n", USB_GET_STATE(xfer), actlen);
1618
1619	switch (USB_GET_STATE(xfer)) {
1620	case USB_ST_TRANSFERRED:
1621		if (actlen > 0 && (sc->sc_ifp->if_drv_flags & IFF_DRV_RUNNING)) {
1622			pc = usbd_xfer_get_frame(xfer, 0);
1623			m = m_getcl(M_NOWAIT, MT_DATA, M_PKTHDR);
1624			usbd_copy_out(pc, 0, mtod(m, uint8_t *), actlen);
1625			m->m_pkthdr.len = m->m_len = actlen;
1626			/* Enqueue frame for further processing */
1627			_IF_ENQUEUE(&sc->sc_rxq, m);
1628			if (!callout_pending(&sc->sc_c) ||
1629			    !callout_active(&sc->sc_c)) {
1630				callout_schedule(&sc->sc_c, 1);
1631			}
1632		}
1633	/* FALLTHROUGH */
1634	case USB_ST_SETUP:
1635tr_setup:
1636		usbd_xfer_set_frame_len(xfer, 0, usbd_xfer_max_len(xfer));
1637		usbd_transfer_submit(xfer);
1638		break;
1639	default:
1640		UHSO_DPRINTF(0, "error: %s\n", usbd_errstr(error));
1641		if (error == USB_ERR_CANCELLED)
1642			break;
1643		usbd_xfer_set_stall(xfer);
1644		goto tr_setup;
1645	}
1646}
1647
1648/*
1649 * Deferred RX processing, called with mutex locked.
1650 *
1651 * Each frame we receive might contain several small ip-packets as well
1652 * as partial ip-packets. We need to separate/assemble them into individual
1653 * packets before sending them to the ip-layer.
1654 */
1655static void
1656uhso_if_rxflush(void *arg)
1657{
1658	struct uhso_softc *sc = arg;
1659	struct ifnet *ifp = sc->sc_ifp;
1660	uint8_t *cp;
1661	struct mbuf *m, *m0, *mwait;
1662	struct ip *ip;
1663#ifdef INET6
1664	struct ip6_hdr *ip6;
1665#endif
1666	uint16_t iplen;
1667	int len, isr;
1668
1669	m = NULL;
1670	mwait = sc->sc_mwait;
1671	for (;;) {
1672		if (m == NULL) {
1673			_IF_DEQUEUE(&sc->sc_rxq, m);
1674			if (m == NULL)
1675				break;
1676			UHSO_DPRINTF(3, "dequeue m=%p, len=%d\n", m, m->m_len);
1677		}
1678		mtx_unlock(&sc->sc_mtx);
1679
1680		/* Do we have a partial packet waiting? */
1681		if (mwait != NULL) {
1682			m0 = mwait;
1683			mwait = NULL;
1684
1685			UHSO_DPRINTF(3, "partial m0=%p(%d), concat w/ m=%p(%d)\n",
1686			    m0, m0->m_len, m, m->m_len);
1687			len = m->m_len + m0->m_len;
1688
1689			/* Concat mbufs and fix headers */
1690			m_cat(m0, m);
1691			m0->m_pkthdr.len = len;
1692			m->m_flags &= ~M_PKTHDR;
1693
1694			m = m_pullup(m0, sizeof(struct ip));
1695			if (m == NULL) {
1696				ifp->if_ierrors++;
1697				UHSO_DPRINTF(0, "m_pullup failed\n");
1698				mtx_lock(&sc->sc_mtx);
1699				continue;
1700			}
1701			UHSO_DPRINTF(3, "Constructed mbuf=%p, len=%d\n",
1702			    m, m->m_pkthdr.len);
1703		}
1704
1705		cp = mtod(m, uint8_t *);
1706		ip = (struct ip *)cp;
1707#ifdef INET6
1708		ip6 = (struct ip6_hdr *)cp;
1709#endif
1710
1711		/* Check for IPv4 */
1712		if (ip->ip_v == IPVERSION) {
1713			iplen = htons(ip->ip_len);
1714			isr = NETISR_IP;
1715		}
1716#ifdef INET6
1717		/* Check for IPv6 */
1718		else if ((ip6->ip6_vfc & IPV6_VERSION_MASK) == IPV6_VERSION) {
1719			iplen = htons(ip6->ip6_plen);
1720			isr = NETISR_IPV6;
1721		}
1722#endif
1723		else {
1724			UHSO_DPRINTF(0, "got unexpected ip version %d, "
1725			    "m=%p, len=%d\n", (*cp & 0xf0) >> 4, m, m->m_len);
1726			ifp->if_ierrors++;
1727			UHSO_HEXDUMP(cp, 4);
1728			m_freem(m);
1729			m = NULL;
1730			mtx_lock(&sc->sc_mtx);
1731			continue;
1732		}
1733
1734		if (iplen == 0) {
1735			UHSO_DPRINTF(0, "Zero IP length\n");
1736			ifp->if_ierrors++;
1737			m_freem(m);
1738			m = NULL;
1739			mtx_lock(&sc->sc_mtx);
1740			continue;
1741		}
1742
1743		UHSO_DPRINTF(3, "m=%p, len=%d, cp=%p, iplen=%d\n",
1744		    m, m->m_pkthdr.len, cp, iplen);
1745
1746		m0 = NULL;
1747
1748		/* More IP packets in this mbuf */
1749		if (iplen < m->m_pkthdr.len) {
1750			m0 = m;
1751
1752			/*
1753			 * Allocate a new mbuf for this IP packet and
1754			 * copy the IP-packet into it.
1755			 */
1756			m = m_getcl(M_NOWAIT, MT_DATA, M_PKTHDR);
1757			memcpy(mtod(m, uint8_t *), mtod(m0, uint8_t *), iplen);
1758			m->m_pkthdr.len = m->m_len = iplen;
1759
1760			/* Adjust the size of the original mbuf */
1761			m_adj(m0, iplen);
1762			m0 = m_defrag(m0, M_WAITOK);
1763
1764			UHSO_DPRINTF(3, "New mbuf=%p, len=%d/%d, m0=%p, "
1765			    "m0_len=%d/%d\n", m, m->m_pkthdr.len, m->m_len,
1766			    m0, m0->m_pkthdr.len, m0->m_len);
1767		}
1768		else if (iplen > m->m_pkthdr.len) {
1769			UHSO_DPRINTF(3, "Deferred mbuf=%p, len=%d\n",
1770			    m, m->m_pkthdr.len);
1771			mwait = m;
1772			m = NULL;
1773			mtx_lock(&sc->sc_mtx);
1774			continue;
1775		}
1776
1777		ifp->if_ipackets++;
1778		m->m_pkthdr.rcvif = ifp;
1779
1780		/* Dispatch to IP layer */
1781		BPF_MTAP(sc->sc_ifp, m);
1782		M_SETFIB(m, ifp->if_fib);
1783		netisr_dispatch(isr, m);
1784		m = m0 != NULL ? m0 : NULL;
1785		mtx_lock(&sc->sc_mtx);
1786	}
1787	sc->sc_mwait = mwait;
1788}
1789
1790static void
1791uhso_ifnet_write_callback(struct usb_xfer *xfer, usb_error_t error)
1792{
1793	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1794	struct ifnet *ifp = sc->sc_ifp;
1795	struct usb_page_cache *pc;
1796	struct mbuf *m;
1797	int actlen;
1798
1799	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1800
1801	UHSO_DPRINTF(3, "status %d, actlen=%d\n", USB_GET_STATE(xfer), actlen);
1802
1803	switch (USB_GET_STATE(xfer)) {
1804	case USB_ST_TRANSFERRED:
1805		ifp->if_opackets++;
1806		ifp->if_drv_flags &= ~IFF_DRV_OACTIVE;
1807	case USB_ST_SETUP:
1808tr_setup:
1809		IFQ_DRV_DEQUEUE(&ifp->if_snd, m);
1810		if (m == NULL)
1811			break;
1812
1813		ifp->if_drv_flags |= IFF_DRV_OACTIVE;
1814
1815		if (m->m_pkthdr.len > MCLBYTES)
1816			m->m_pkthdr.len = MCLBYTES;
1817
1818		usbd_xfer_set_frame_len(xfer, 0, m->m_pkthdr.len);
1819		pc = usbd_xfer_get_frame(xfer, 0);
1820		usbd_m_copy_in(pc, 0, m, 0, m->m_pkthdr.len);
1821		usbd_transfer_submit(xfer);
1822
1823		BPF_MTAP(ifp, m);
1824		m_freem(m);
1825		break;
1826	default:
1827		UHSO_DPRINTF(0, "error: %s\n", usbd_errstr(error));
1828		if (error == USB_ERR_CANCELLED)
1829			break;
1830		usbd_xfer_set_stall(xfer);
1831		goto tr_setup;
1832	}
1833}
1834
1835static int
1836uhso_if_ioctl(struct ifnet *ifp, u_long cmd, caddr_t data)
1837{
1838	struct uhso_softc *sc;
1839
1840	sc = ifp->if_softc;
1841
1842	switch (cmd) {
1843	case SIOCSIFFLAGS:
1844		if (ifp->if_flags & IFF_UP) {
1845			if (!(ifp->if_drv_flags & IFF_DRV_RUNNING)) {
1846				uhso_if_init(sc);
1847			}
1848		}
1849		else {
1850			if (ifp->if_drv_flags & IFF_DRV_RUNNING) {
1851				mtx_lock(&sc->sc_mtx);
1852				uhso_if_stop(sc);
1853				mtx_unlock(&sc->sc_mtx);
1854			}
1855		}
1856		break;
1857	case SIOCSIFADDR:
1858	case SIOCADDMULTI:
1859	case SIOCDELMULTI:
1860		break;
1861	default:
1862		return (EINVAL);
1863	}
1864	return (0);
1865}
1866
1867static void
1868uhso_if_init(void *priv)
1869{
1870	struct uhso_softc *sc = priv;
1871	struct ifnet *ifp = sc->sc_ifp;
1872
1873	mtx_lock(&sc->sc_mtx);
1874	uhso_if_stop(sc);
1875	ifp = sc->sc_ifp;
1876	ifp->if_flags |= IFF_UP;
1877	ifp->if_drv_flags |= IFF_DRV_RUNNING;
1878	mtx_unlock(&sc->sc_mtx);
1879
1880	UHSO_DPRINTF(2, "ifnet initialized\n");
1881}
1882
1883static int
1884uhso_if_output(struct ifnet *ifp, struct mbuf *m0, const struct sockaddr *dst,
1885    struct route *ro)
1886{
1887	int error;
1888
1889	/* Only IPv4/6 support */
1890	if (dst->sa_family != AF_INET
1891#ifdef INET6
1892	   && dst->sa_family != AF_INET6
1893#endif
1894	 ) {
1895		return (EAFNOSUPPORT);
1896	}
1897
1898	error = (ifp->if_transmit)(ifp, m0);
1899	if (error) {
1900		ifp->if_oerrors++;
1901		return (ENOBUFS);
1902	}
1903	ifp->if_opackets++;
1904	return (0);
1905}
1906
1907static void
1908uhso_if_start(struct ifnet *ifp)
1909{
1910	struct uhso_softc *sc = ifp->if_softc;
1911
1912	if ((ifp->if_drv_flags & IFF_DRV_RUNNING) == 0) {
1913		UHSO_DPRINTF(1, "Not running\n");
1914		return;
1915	}
1916
1917	mtx_lock(&sc->sc_mtx);
1918	usbd_transfer_start(sc->sc_if_xfer[UHSO_IFNET_READ]);
1919	usbd_transfer_start(sc->sc_if_xfer[UHSO_IFNET_WRITE]);
1920	mtx_unlock(&sc->sc_mtx);
1921	UHSO_DPRINTF(3, "interface started\n");
1922}
1923
1924static void
1925uhso_if_stop(struct uhso_softc *sc)
1926{
1927
1928	usbd_transfer_stop(sc->sc_if_xfer[UHSO_IFNET_READ]);
1929	usbd_transfer_stop(sc->sc_if_xfer[UHSO_IFNET_WRITE]);
1930	sc->sc_ifp->if_drv_flags &= ~(IFF_DRV_RUNNING | IFF_DRV_OACTIVE);
1931}
1932