1/*-
2 * Copyright (c) 2010 Fredrik Lindberg <fli@shapeshifter.se>
3 * All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * 1. Redistributions of source code must retain the above copyright
9 *    notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 *    notice, this list of conditions and the following disclaimer in the
12 *    documentation and/or other materials provided with the distribution.
13 *
14 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
15 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
16 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
17 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
18 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
19 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
20 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
21 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
22 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
23 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
24 *
25 */
26#include <sys/cdefs.h>
27__FBSDID("$FreeBSD$");
28
29#include <sys/param.h>
30#include <sys/types.h>
31#include <sys/sockio.h>
32#include <sys/mbuf.h>
33#include <sys/malloc.h>
34#include <sys/kernel.h>
35#include <sys/module.h>
36#include <sys/socket.h>
37#include <sys/tty.h>
38#include <sys/sysctl.h>
39#include <sys/condvar.h>
40#include <sys/sx.h>
41#include <sys/proc.h>
42#include <sys/conf.h>
43#include <sys/bus.h>
44#include <sys/systm.h>
45#include <sys/limits.h>
46
47#include <machine/bus.h>
48
49#include <net/if.h>
50#include <net/if_var.h>
51#include <net/if_types.h>
52#include <net/netisr.h>
53#include <net/bpf.h>
54#include <netinet/in.h>
55#include <netinet/ip.h>
56#include <netinet/ip6.h>
57
58#include <dev/usb/usb.h>
59#include <dev/usb/usbdi.h>
60#include <dev/usb/usbdi_util.h>
61#include <dev/usb/usb_cdc.h>
62#include "usbdevs.h"
63#define USB_DEBUG_VAR uhso_debug
64#include <dev/usb/usb_debug.h>
65#include <dev/usb/usb_process.h>
66#include <dev/usb/usb_busdma.h>
67#include <dev/usb/usb_msctest.h>
68
69#include <dev/usb/serial/usb_serial.h>
70
71struct uhso_tty {
72	struct uhso_softc *ht_sc;
73	struct usb_xfer	*ht_xfer[3];
74	int		ht_muxport; /* Mux. port no */
75	int		ht_open;
76	char		ht_name[32];
77};
78
79struct uhso_softc {
80	device_t		sc_dev;
81	struct usb_device	*sc_udev;
82	struct mtx		sc_mtx;
83	uint32_t		sc_type;	/* Interface definition */
84	int			sc_radio;
85
86	struct usb_xfer		*sc_xfer[3];
87	uint8_t			sc_iface_no;
88	uint8_t			sc_iface_index;
89
90	/* Control pipe */
91	struct usb_xfer	*	sc_ctrl_xfer[2];
92	uint8_t			sc_ctrl_iface_no;
93
94	/* Network */
95	struct usb_xfer		*sc_if_xfer[2];
96	struct ifnet		*sc_ifp;
97	struct mbuf		*sc_mwait;	/* Partial packet */
98	size_t			sc_waitlen;	/* No. of outstanding bytes */
99	struct ifqueue		sc_rxq;
100	struct callout		sc_c;
101
102	/* TTY related structures */
103	struct ucom_super_softc sc_super_ucom;
104	int			sc_ttys;
105	struct uhso_tty		*sc_tty;
106	struct ucom_softc	*sc_ucom;
107	int			sc_msr;
108	int			sc_lsr;
109	int			sc_line;
110};
111
112#define UHSO_MAX_MTU		2048
113
114/*
115 * There are mainly two type of cards floating around.
116 * The first one has 2,3 or 4 interfaces with a multiplexed serial port
117 * and packet interface on the first interface and bulk serial ports
118 * on the others.
119 * The second type of card has several other interfaces, their purpose
120 * can be detected during run-time.
121 */
122#define UHSO_IFACE_SPEC(usb_type, port, port_type) \
123	(((usb_type) << 24) | ((port) << 16) | (port_type))
124
125#define UHSO_IFACE_USB_TYPE(x) ((x >> 24) & 0xff)
126#define UHSO_IFACE_PORT(x) ((x >> 16) & 0xff)
127#define UHSO_IFACE_PORT_TYPE(x) (x & 0xff)
128
129/*
130 * USB interface types
131 */
132#define UHSO_IF_NET		0x01	/* Network packet interface */
133#define UHSO_IF_MUX		0x02	/* Multiplexed serial port */
134#define UHSO_IF_BULK		0x04	/* Bulk interface */
135
136/*
137 * Port types
138 */
139#define UHSO_PORT_UNKNOWN	0x00
140#define UHSO_PORT_SERIAL	0x01	/* Serial port */
141#define UHSO_PORT_NETWORK	0x02	/* Network packet interface */
142
143/*
144 * Multiplexed serial port destination sub-port names
145 */
146#define UHSO_MPORT_TYPE_CTL	0x00	/* Control port */
147#define UHSO_MPORT_TYPE_APP	0x01	/* Application */
148#define UHSO_MPORT_TYPE_PCSC	0x02
149#define UHSO_MPORT_TYPE_GPS	0x03
150#define UHSO_MPORT_TYPE_APP2	0x04	/* Secondary application */
151#define UHSO_MPORT_TYPE_MAX	UHSO_MPORT_TYPE_APP2
152#define UHSO_MPORT_TYPE_NOMAX	8	/* Max number of mux ports */
153
154/*
155 * Port definitions
156 * Note that these definitions are arbitrary and do not match the values
157 * returned by the auto config descriptor.
158 */
159#define UHSO_PORT_TYPE_UNKNOWN	0x00
160#define UHSO_PORT_TYPE_CTL	0x01
161#define UHSO_PORT_TYPE_APP	0x02
162#define UHSO_PORT_TYPE_APP2	0x03
163#define UHSO_PORT_TYPE_MODEM	0x04
164#define UHSO_PORT_TYPE_NETWORK	0x05
165#define UHSO_PORT_TYPE_DIAG	0x06
166#define UHSO_PORT_TYPE_DIAG2	0x07
167#define UHSO_PORT_TYPE_GPS	0x08
168#define UHSO_PORT_TYPE_GPSCTL	0x09
169#define UHSO_PORT_TYPE_PCSC	0x0a
170#define UHSO_PORT_TYPE_MSD	0x0b
171#define UHSO_PORT_TYPE_VOICE	0x0c
172#define UHSO_PORT_TYPE_MAX	0x0c
173
174static eventhandler_tag uhso_etag;
175
176/* Overall port type */
177static char *uhso_port[] = {
178	"Unknown",
179	"Serial",
180	"Network",
181	"Network/Serial"
182};
183
184/*
185 * Map between interface port type read from device and description type.
186 * The position in this array is a direct map to the auto config
187 * descriptor values.
188 */
189static unsigned char uhso_port_map[] = {
190	UHSO_PORT_TYPE_UNKNOWN,
191	UHSO_PORT_TYPE_DIAG,
192	UHSO_PORT_TYPE_GPS,
193	UHSO_PORT_TYPE_GPSCTL,
194	UHSO_PORT_TYPE_APP,
195	UHSO_PORT_TYPE_APP2,
196	UHSO_PORT_TYPE_CTL,
197	UHSO_PORT_TYPE_NETWORK,
198	UHSO_PORT_TYPE_MODEM,
199	UHSO_PORT_TYPE_MSD,
200	UHSO_PORT_TYPE_PCSC,
201	UHSO_PORT_TYPE_VOICE
202};
203static char uhso_port_map_max = sizeof(uhso_port_map) / sizeof(char);
204
205static unsigned char uhso_mux_port_map[] = {
206	UHSO_PORT_TYPE_CTL,
207	UHSO_PORT_TYPE_APP,
208	UHSO_PORT_TYPE_PCSC,
209	UHSO_PORT_TYPE_GPS,
210	UHSO_PORT_TYPE_APP2
211};
212
213static char *uhso_port_type[] = {
214	"Unknown",  /* Not a valid port */
215	"Control",
216	"Application",
217	"Application (Secondary)",
218	"Modem",
219	"Network",
220	"Diagnostic",
221	"Diagnostic (Secondary)",
222	"GPS",
223	"GPS Control",
224	"PC Smartcard",
225	"MSD",
226	"Voice",
227};
228
229static char *uhso_port_type_sysctl[] = {
230	"unknown",
231	"control",
232	"application",
233	"application",
234	"modem",
235	"network",
236	"diagnostic",
237	"diagnostic",
238	"gps",
239	"gps_control",
240	"pcsc",
241	"msd",
242	"voice",
243};
244
245#define UHSO_STATIC_IFACE	0x01
246#define UHSO_AUTO_IFACE		0x02
247
248/* ifnet device unit allocations */
249static struct unrhdr *uhso_ifnet_unit = NULL;
250
251static const STRUCT_USB_HOST_ID uhso_devs[] = {
252#define	UHSO_DEV(v,p,i) { USB_VPI(USB_VENDOR_##v, USB_PRODUCT_##v##_##p, i) }
253	/* Option GlobeTrotter MAX 7.2 with upgraded firmware */
254	UHSO_DEV(OPTION, GTMAX72, UHSO_STATIC_IFACE),
255	/* Option GlobeSurfer iCON 7.2 */
256	UHSO_DEV(OPTION, GSICON72, UHSO_STATIC_IFACE),
257	/* Option iCON 225 */
258	UHSO_DEV(OPTION, GTHSDPA, UHSO_STATIC_IFACE),
259	/* Option GlobeSurfer iCON HSUPA */
260	UHSO_DEV(OPTION, GSICONHSUPA, UHSO_STATIC_IFACE),
261	/* Option GlobeTrotter HSUPA */
262	UHSO_DEV(OPTION, GTHSUPA, UHSO_STATIC_IFACE),
263	/* GE40x */
264	UHSO_DEV(OPTION, GE40X, UHSO_AUTO_IFACE),
265	UHSO_DEV(OPTION, GE40X_1, UHSO_AUTO_IFACE),
266	UHSO_DEV(OPTION, GE40X_2, UHSO_AUTO_IFACE),
267	UHSO_DEV(OPTION, GE40X_3, UHSO_AUTO_IFACE),
268	/* Option GlobeSurfer iCON 401 */
269	UHSO_DEV(OPTION, ICON401, UHSO_AUTO_IFACE),
270	/* Option GlobeTrotter Module 382 */
271	UHSO_DEV(OPTION, GMT382, UHSO_AUTO_IFACE),
272	/* Option GTM661W */
273	UHSO_DEV(OPTION, GTM661W, UHSO_AUTO_IFACE),
274	/* Option iCON EDGE */
275	UHSO_DEV(OPTION, ICONEDGE, UHSO_STATIC_IFACE),
276	/* Option Module HSxPA */
277	UHSO_DEV(OPTION, MODHSXPA, UHSO_STATIC_IFACE),
278	/* Option iCON 321 */
279	UHSO_DEV(OPTION, ICON321, UHSO_STATIC_IFACE),
280	/* Option iCON 322 */
281	UHSO_DEV(OPTION, GTICON322, UHSO_STATIC_IFACE),
282	/* Option iCON 505 */
283	UHSO_DEV(OPTION, ICON505, UHSO_AUTO_IFACE),
284	/* Option iCON 452 */
285	UHSO_DEV(OPTION, ICON505, UHSO_AUTO_IFACE),
286#undef UHSO_DEV
287};
288
289static SYSCTL_NODE(_hw_usb, OID_AUTO, uhso, CTLFLAG_RW, 0, "USB uhso");
290static int uhso_autoswitch = 1;
291SYSCTL_INT(_hw_usb_uhso, OID_AUTO, auto_switch, CTLFLAG_RWTUN,
292    &uhso_autoswitch, 0, "Automatically switch to modem mode");
293
294#ifdef USB_DEBUG
295#ifdef UHSO_DEBUG
296static int uhso_debug = UHSO_DEBUG;
297#else
298static int uhso_debug = -1;
299#endif
300
301SYSCTL_INT(_hw_usb_uhso, OID_AUTO, debug, CTLFLAG_RWTUN,
302    &uhso_debug, 0, "Debug level");
303
304#define UHSO_DPRINTF(n, x, ...) {\
305	if (uhso_debug >= n) {\
306		printf("%s: " x, __func__, ##__VA_ARGS__);\
307	}\
308}
309#else
310#define UHSO_DPRINTF(n, x, ...)
311#endif
312
313#ifdef UHSO_DEBUG_HEXDUMP
314# define UHSO_HEXDUMP(_buf, _len) do { \
315  { \
316        size_t __tmp; \
317        const char *__buf = (const char *)_buf; \
318        for (__tmp = 0; __tmp < _len; __tmp++) \
319                printf("%02hhx ", *__buf++); \
320    printf("\n"); \
321  } \
322} while(0)
323#else
324# define UHSO_HEXDUMP(_buf, _len)
325#endif
326
327enum {
328	UHSO_MUX_ENDPT_INTR = 0,
329	UHSO_MUX_ENDPT_MAX
330};
331
332enum {
333	UHSO_CTRL_READ = 0,
334	UHSO_CTRL_WRITE,
335	UHSO_CTRL_MAX
336};
337
338enum {
339	UHSO_IFNET_READ = 0,
340	UHSO_IFNET_WRITE,
341	UHSO_IFNET_MAX
342};
343
344enum {
345	UHSO_BULK_ENDPT_READ = 0,
346	UHSO_BULK_ENDPT_WRITE,
347	UHSO_BULK_ENDPT_INTR,
348	UHSO_BULK_ENDPT_MAX
349};
350
351static usb_callback_t uhso_mux_intr_callback;
352static usb_callback_t uhso_mux_read_callback;
353static usb_callback_t uhso_mux_write_callback;
354static usb_callback_t uhso_bs_read_callback;
355static usb_callback_t uhso_bs_write_callback;
356static usb_callback_t uhso_bs_intr_callback;
357static usb_callback_t uhso_ifnet_read_callback;
358static usb_callback_t uhso_ifnet_write_callback;
359
360/* Config used for the default control pipes */
361static const struct usb_config uhso_ctrl_config[UHSO_CTRL_MAX] = {
362	[UHSO_CTRL_READ] = {
363		.type = UE_CONTROL,
364		.endpoint = 0x00,
365		.direction = UE_DIR_ANY,
366		.flags = { .pipe_bof = 1, .short_xfer_ok = 1 },
367		.bufsize = sizeof(struct usb_device_request) + 1024,
368		.callback = &uhso_mux_read_callback
369	},
370
371	[UHSO_CTRL_WRITE] = {
372		.type = UE_CONTROL,
373		.endpoint = 0x00,
374		.direction = UE_DIR_ANY,
375		.flags = { .pipe_bof = 1, .force_short_xfer = 1 },
376		.bufsize = sizeof(struct usb_device_request) + 1024,
377		.timeout = 1000,
378		.callback = &uhso_mux_write_callback
379	}
380};
381
382/* Config for the multiplexed serial ports */
383static const struct usb_config uhso_mux_config[UHSO_MUX_ENDPT_MAX] = {
384	[UHSO_MUX_ENDPT_INTR] = {
385		.type = UE_INTERRUPT,
386		.endpoint = UE_ADDR_ANY,
387		.direction = UE_DIR_IN,
388		.flags = { .short_xfer_ok = 1 },
389		.bufsize = 0,
390		.callback = &uhso_mux_intr_callback,
391	}
392};
393
394/* Config for the raw IP-packet interface */
395static const struct usb_config uhso_ifnet_config[UHSO_IFNET_MAX] = {
396	[UHSO_IFNET_READ] = {
397		.type = UE_BULK,
398		.endpoint = UE_ADDR_ANY,
399		.direction = UE_DIR_IN,
400		.flags = { .pipe_bof = 1, .short_xfer_ok = 1 },
401		.bufsize = MCLBYTES,
402		.callback = &uhso_ifnet_read_callback
403	},
404	[UHSO_IFNET_WRITE] = {
405		.type = UE_BULK,
406		.endpoint = UE_ADDR_ANY,
407		.direction = UE_DIR_OUT,
408		.flags = { .pipe_bof = 1, .force_short_xfer = 1 },
409		.bufsize = MCLBYTES,
410		.timeout = 5 * USB_MS_HZ,
411		.callback = &uhso_ifnet_write_callback
412	}
413};
414
415/* Config for interfaces with normal bulk serial ports */
416static const struct usb_config uhso_bs_config[UHSO_BULK_ENDPT_MAX] = {
417	[UHSO_BULK_ENDPT_READ] = {
418		.type = UE_BULK,
419		.endpoint = UE_ADDR_ANY,
420		.direction = UE_DIR_IN,
421		.flags = { .pipe_bof = 1, .short_xfer_ok = 1 },
422		.bufsize = 4096,
423		.callback = &uhso_bs_read_callback
424	},
425
426	[UHSO_BULK_ENDPT_WRITE] = {
427		.type = UE_BULK,
428		.endpoint = UE_ADDR_ANY,
429		.direction = UE_DIR_OUT,
430		.flags = { .pipe_bof = 1, .force_short_xfer = 1 },
431		.bufsize = 8192,
432		.callback = &uhso_bs_write_callback
433	},
434
435	[UHSO_BULK_ENDPT_INTR] = {
436		.type = UE_INTERRUPT,
437		.endpoint = UE_ADDR_ANY,
438		.direction = UE_DIR_IN,
439		.flags = { .short_xfer_ok = 1 },
440		.bufsize = 0,
441		.callback = &uhso_bs_intr_callback,
442	}
443};
444
445static int  uhso_probe_iface(struct uhso_softc *, int,
446    int (*probe)(struct usb_device *, int));
447static int  uhso_probe_iface_auto(struct usb_device *, int);
448static int  uhso_probe_iface_static(struct usb_device *, int);
449static int  uhso_attach_muxserial(struct uhso_softc *, struct usb_interface *,
450    int type);
451static int  uhso_attach_bulkserial(struct uhso_softc *, struct usb_interface *,
452    int type);
453static int  uhso_attach_ifnet(struct uhso_softc *, struct usb_interface *,
454    int type);
455static void uhso_test_autoinst(void *, struct usb_device *,
456		struct usb_attach_arg *);
457static int  uhso_driver_loaded(struct module *, int, void *);
458static int uhso_radio_sysctl(SYSCTL_HANDLER_ARGS);
459static int uhso_radio_ctrl(struct uhso_softc *, int);
460
461static void uhso_free(struct ucom_softc *);
462static void uhso_ucom_start_read(struct ucom_softc *);
463static void uhso_ucom_stop_read(struct ucom_softc *);
464static void uhso_ucom_start_write(struct ucom_softc *);
465static void uhso_ucom_stop_write(struct ucom_softc *);
466static void uhso_ucom_cfg_get_status(struct ucom_softc *, uint8_t *, uint8_t *);
467static void uhso_ucom_cfg_set_dtr(struct ucom_softc *, uint8_t);
468static void uhso_ucom_cfg_set_rts(struct ucom_softc *, uint8_t);
469static void uhso_if_init(void *);
470static void uhso_if_start(struct ifnet *);
471static void uhso_if_stop(struct uhso_softc *);
472static int  uhso_if_ioctl(struct ifnet *, u_long, caddr_t);
473static int  uhso_if_output(struct ifnet *, struct mbuf *,
474    const struct sockaddr *, struct route *);
475static void uhso_if_rxflush(void *);
476
477static device_probe_t uhso_probe;
478static device_attach_t uhso_attach;
479static device_detach_t uhso_detach;
480static void uhso_free_softc(struct uhso_softc *);
481
482static device_method_t uhso_methods[] = {
483	DEVMETHOD(device_probe,		uhso_probe),
484	DEVMETHOD(device_attach,	uhso_attach),
485	DEVMETHOD(device_detach,	uhso_detach),
486	{ 0, 0 }
487};
488
489static driver_t uhso_driver = {
490	.name = "uhso",
491	.methods = uhso_methods,
492	.size = sizeof(struct uhso_softc)
493};
494
495static devclass_t uhso_devclass;
496DRIVER_MODULE(uhso, uhub, uhso_driver, uhso_devclass, uhso_driver_loaded, 0);
497MODULE_DEPEND(uhso, ucom, 1, 1, 1);
498MODULE_DEPEND(uhso, usb, 1, 1, 1);
499MODULE_VERSION(uhso, 1);
500USB_PNP_HOST_INFO(uhso_devs);
501
502static struct ucom_callback uhso_ucom_callback = {
503	.ucom_cfg_get_status = &uhso_ucom_cfg_get_status,
504	.ucom_cfg_set_dtr = &uhso_ucom_cfg_set_dtr,
505	.ucom_cfg_set_rts = &uhso_ucom_cfg_set_rts,
506	.ucom_start_read = uhso_ucom_start_read,
507	.ucom_stop_read = uhso_ucom_stop_read,
508	.ucom_start_write = uhso_ucom_start_write,
509	.ucom_stop_write = uhso_ucom_stop_write,
510	.ucom_free = &uhso_free,
511};
512
513static int
514uhso_probe(device_t self)
515{
516	struct usb_attach_arg *uaa = device_get_ivars(self);
517	int error;
518
519	if (uaa->usb_mode != USB_MODE_HOST)
520		return (ENXIO);
521	if (uaa->info.bConfigIndex != 0)
522		return (ENXIO);
523	if (uaa->info.bDeviceClass != 0xff)
524		return (ENXIO);
525
526	error = usbd_lookup_id_by_uaa(uhso_devs, sizeof(uhso_devs), uaa);
527	if (error != 0)
528		return (error);
529
530	/*
531	 * Probe device to see if we are able to attach
532	 * to this interface or not.
533	 */
534	if (USB_GET_DRIVER_INFO(uaa) == UHSO_AUTO_IFACE) {
535		if (uhso_probe_iface_auto(uaa->device,
536		    uaa->info.bIfaceNum) == 0)
537			return (ENXIO);
538	}
539	return (error);
540}
541
542static int
543uhso_attach(device_t self)
544{
545	struct uhso_softc *sc = device_get_softc(self);
546	struct usb_attach_arg *uaa = device_get_ivars(self);
547	struct usb_interface_descriptor *id;
548	struct sysctl_ctx_list *sctx;
549	struct sysctl_oid *soid;
550	struct sysctl_oid *tree = NULL, *tty_node;
551	struct ucom_softc *ucom;
552	struct uhso_tty *ht;
553	int i, error, port;
554	void *probe_f;
555	usb_error_t uerr;
556	char *desc;
557
558	sc->sc_dev = self;
559	sc->sc_udev = uaa->device;
560	mtx_init(&sc->sc_mtx, "uhso", NULL, MTX_DEF);
561	ucom_ref(&sc->sc_super_ucom);
562
563	sc->sc_radio = 1;
564
565	id = usbd_get_interface_descriptor(uaa->iface);
566	sc->sc_ctrl_iface_no = id->bInterfaceNumber;
567
568	sc->sc_iface_no = uaa->info.bIfaceNum;
569	sc->sc_iface_index = uaa->info.bIfaceIndex;
570
571	/* Setup control pipe */
572	uerr = usbd_transfer_setup(uaa->device,
573	    &sc->sc_iface_index, sc->sc_ctrl_xfer,
574	    uhso_ctrl_config, UHSO_CTRL_MAX, sc, &sc->sc_mtx);
575	if (uerr) {
576		device_printf(self, "Failed to setup control pipe: %s\n",
577		    usbd_errstr(uerr));
578		goto out;
579	}
580
581	if (USB_GET_DRIVER_INFO(uaa) == UHSO_STATIC_IFACE)
582		probe_f = uhso_probe_iface_static;
583	else if (USB_GET_DRIVER_INFO(uaa) == UHSO_AUTO_IFACE)
584		probe_f = uhso_probe_iface_auto;
585	else
586		goto out;
587
588	error = uhso_probe_iface(sc, uaa->info.bIfaceNum, probe_f);
589	if (error != 0)
590		goto out;
591
592	sctx = device_get_sysctl_ctx(sc->sc_dev);
593	soid = device_get_sysctl_tree(sc->sc_dev);
594
595	SYSCTL_ADD_STRING(sctx, SYSCTL_CHILDREN(soid), OID_AUTO, "type",
596	    CTLFLAG_RD, uhso_port[UHSO_IFACE_PORT(sc->sc_type)], 0,
597	    "Port available at this interface");
598	SYSCTL_ADD_PROC(sctx, SYSCTL_CHILDREN(soid), OID_AUTO, "radio",
599	    CTLTYPE_INT | CTLFLAG_RWTUN, sc, 0, uhso_radio_sysctl, "I", "Enable radio");
600
601	/*
602	 * The default interface description on most Option devices isn't
603	 * very helpful. So we skip device_set_usb_desc and set the
604	 * device description manually.
605	 */
606	device_set_desc_copy(self, uhso_port_type[UHSO_IFACE_PORT_TYPE(sc->sc_type)]);
607	/* Announce device */
608	device_printf(self, "<%s port> at <%s %s> on %s\n",
609	    uhso_port_type[UHSO_IFACE_PORT_TYPE(sc->sc_type)],
610	    usb_get_manufacturer(uaa->device),
611	    usb_get_product(uaa->device),
612	    device_get_nameunit(device_get_parent(self)));
613
614	if (sc->sc_ttys > 0) {
615		SYSCTL_ADD_INT(sctx, SYSCTL_CHILDREN(soid), OID_AUTO, "ports",
616		    CTLFLAG_RD, &sc->sc_ttys, 0, "Number of attached serial ports");
617
618		tree = SYSCTL_ADD_NODE(sctx, SYSCTL_CHILDREN(soid), OID_AUTO,
619		    "port", CTLFLAG_RD, NULL, "Serial ports");
620	}
621
622	/*
623	 * Loop through the number of found TTYs and create sysctl
624	 * nodes for them.
625	 */
626	for (i = 0; i < sc->sc_ttys; i++) {
627		ht = &sc->sc_tty[i];
628		ucom = &sc->sc_ucom[i];
629
630		if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_MUX)
631			port = uhso_mux_port_map[ht->ht_muxport];
632		else
633			port = UHSO_IFACE_PORT_TYPE(sc->sc_type);
634
635		desc = uhso_port_type_sysctl[port];
636
637		tty_node = SYSCTL_ADD_NODE(sctx, SYSCTL_CHILDREN(tree), OID_AUTO,
638		    desc, CTLFLAG_RD, NULL, "");
639
640		ht->ht_name[0] = 0;
641		if (sc->sc_ttys == 1)
642			snprintf(ht->ht_name, 32, "cuaU%d", ucom->sc_super->sc_unit);
643		else {
644			snprintf(ht->ht_name, 32, "cuaU%d.%d",
645			    ucom->sc_super->sc_unit, ucom->sc_subunit);
646		}
647
648		desc = uhso_port_type[port];
649		SYSCTL_ADD_STRING(sctx, SYSCTL_CHILDREN(tty_node), OID_AUTO,
650		    "tty", CTLFLAG_RD, ht->ht_name, 0, "");
651		SYSCTL_ADD_STRING(sctx, SYSCTL_CHILDREN(tty_node), OID_AUTO,
652		    "desc", CTLFLAG_RD, desc, 0, "");
653
654		if (bootverbose)
655			device_printf(sc->sc_dev,
656			    "\"%s\" port at %s\n", desc, ht->ht_name);
657	}
658
659	return (0);
660out:
661	uhso_detach(sc->sc_dev);
662	return (ENXIO);
663}
664
665static int
666uhso_detach(device_t self)
667{
668	struct uhso_softc *sc = device_get_softc(self);
669	int i;
670
671	usbd_transfer_unsetup(sc->sc_xfer, 3);
672	usbd_transfer_unsetup(sc->sc_ctrl_xfer, UHSO_CTRL_MAX);
673	if (sc->sc_ttys > 0) {
674		ucom_detach(&sc->sc_super_ucom, sc->sc_ucom);
675
676		for (i = 0; i < sc->sc_ttys; i++) {
677			if (sc->sc_tty[i].ht_muxport != -1) {
678				usbd_transfer_unsetup(sc->sc_tty[i].ht_xfer,
679				    UHSO_CTRL_MAX);
680			}
681		}
682	}
683
684	if (sc->sc_ifp != NULL) {
685		callout_drain(&sc->sc_c);
686		free_unr(uhso_ifnet_unit, sc->sc_ifp->if_dunit);
687		mtx_lock(&sc->sc_mtx);
688		uhso_if_stop(sc);
689		bpfdetach(sc->sc_ifp);
690		if_detach(sc->sc_ifp);
691		if_free(sc->sc_ifp);
692		mtx_unlock(&sc->sc_mtx);
693		usbd_transfer_unsetup(sc->sc_if_xfer, UHSO_IFNET_MAX);
694	}
695
696	device_claim_softc(self);
697
698	uhso_free_softc(sc);
699
700	return (0);
701}
702
703UCOM_UNLOAD_DRAIN(uhso);
704
705static void
706uhso_free_softc(struct uhso_softc *sc)
707{
708	if (ucom_unref(&sc->sc_super_ucom)) {
709		free(sc->sc_tty, M_USBDEV);
710		free(sc->sc_ucom, M_USBDEV);
711		mtx_destroy(&sc->sc_mtx);
712		device_free_softc(sc);
713	}
714}
715
716static void
717uhso_free(struct ucom_softc *ucom)
718{
719	uhso_free_softc(ucom->sc_parent);
720}
721
722static void
723uhso_test_autoinst(void *arg, struct usb_device *udev,
724    struct usb_attach_arg *uaa)
725{
726	struct usb_interface *iface;
727	struct usb_interface_descriptor *id;
728
729	if (uaa->dev_state != UAA_DEV_READY || !uhso_autoswitch)
730		return;
731
732	iface = usbd_get_iface(udev, 0);
733	if (iface == NULL)
734		return;
735	id = iface->idesc;
736	if (id == NULL || id->bInterfaceClass != UICLASS_MASS)
737		return;
738	if (usbd_lookup_id_by_uaa(uhso_devs, sizeof(uhso_devs), uaa))
739		return;		/* no device match */
740
741	if (usb_msc_eject(udev, 0, MSC_EJECT_REZERO) == 0) {
742		/* success, mark the udev as disappearing */
743		uaa->dev_state = UAA_DEV_EJECTING;
744	}
745}
746
747static int
748uhso_driver_loaded(struct module *mod, int what, void *arg)
749{
750	switch (what) {
751	case MOD_LOAD:
752		/* register our autoinstall handler */
753		uhso_etag = EVENTHANDLER_REGISTER(usb_dev_configured,
754		    uhso_test_autoinst, NULL, EVENTHANDLER_PRI_ANY);
755		/* create our unit allocator for inet devs */
756		uhso_ifnet_unit = new_unrhdr(0, INT_MAX, NULL);
757		break;
758	case MOD_UNLOAD:
759		EVENTHANDLER_DEREGISTER(usb_dev_configured, uhso_etag);
760		delete_unrhdr(uhso_ifnet_unit);
761		break;
762	default:
763		return (EOPNOTSUPP);
764	}
765	return (0);
766}
767
768/*
769 * Probe the interface type by querying the device. The elements
770 * of an array indicates the capabilities of a particular interface.
771 * Returns a bit mask with the interface capabilities.
772 */
773static int
774uhso_probe_iface_auto(struct usb_device *udev, int index)
775{
776	struct usb_device_request req;
777	usb_error_t uerr;
778	uint16_t actlen = 0;
779	char port;
780	char buf[17] = {0};
781
782	req.bmRequestType = UT_READ_VENDOR_DEVICE;
783	req.bRequest = 0x86;
784	USETW(req.wValue, 0);
785	USETW(req.wIndex, 0);
786	USETW(req.wLength, 17);
787
788	uerr = usbd_do_request_flags(udev, NULL, &req, buf,
789	    0, &actlen, USB_MS_HZ);
790	if (uerr != 0) {
791		printf("%s: usbd_do_request_flags failed, %s\n",
792		    __func__, usbd_errstr(uerr));
793		return (0);
794	}
795
796	UHSO_DPRINTF(1, "actlen=%d\n", actlen);
797	UHSO_HEXDUMP(buf, 17);
798
799	if (index < 0 || index > 16) {
800		UHSO_DPRINTF(0, "Index %d out of range\n", index);
801		return (0);
802	}
803
804	UHSO_DPRINTF(1, "index=%d, type=%x[%s]\n", index, buf[index],
805	    uhso_port_type[(int)uhso_port_map[(int)buf[index]]]);
806
807	if (buf[index] >= uhso_port_map_max)
808		port = 0;
809	else
810		port = uhso_port_map[(int)buf[index]];
811
812	switch (port) {
813	case UHSO_PORT_TYPE_NETWORK:
814		return (UHSO_IFACE_SPEC(UHSO_IF_NET | UHSO_IF_MUX,
815		    UHSO_PORT_SERIAL | UHSO_PORT_NETWORK, port));
816	case UHSO_PORT_TYPE_DIAG:
817	case UHSO_PORT_TYPE_DIAG2:
818	case UHSO_PORT_TYPE_GPS:
819	case UHSO_PORT_TYPE_GPSCTL:
820	case UHSO_PORT_TYPE_CTL:
821	case UHSO_PORT_TYPE_APP:
822	case UHSO_PORT_TYPE_APP2:
823	case UHSO_PORT_TYPE_MODEM:
824		return (UHSO_IFACE_SPEC(UHSO_IF_BULK,
825		    UHSO_PORT_SERIAL, port));
826	case UHSO_PORT_TYPE_MSD:
827		return (0);
828	case UHSO_PORT_TYPE_UNKNOWN:
829	default:
830		return (0);
831	}
832
833	return (0);
834}
835
836/*
837 * Returns the capabilities of interfaces for devices that don't
838 * support the automatic query.
839 * Returns a bit mask with the interface capabilities.
840 */
841static int
842uhso_probe_iface_static(struct usb_device *udev, int index)
843{
844	struct usb_config_descriptor *cd;
845
846	cd = usbd_get_config_descriptor(udev);
847	if (cd->bNumInterface <= 3) {
848		/* Cards with 3 or less interfaces */
849		switch (index) {
850		case 0:
851			return UHSO_IFACE_SPEC(UHSO_IF_NET | UHSO_IF_MUX,
852			    UHSO_PORT_SERIAL | UHSO_PORT_NETWORK,
853			    UHSO_PORT_TYPE_NETWORK);
854		case 1:
855			return UHSO_IFACE_SPEC(UHSO_IF_BULK,
856			    UHSO_PORT_SERIAL, UHSO_PORT_TYPE_DIAG);
857		case 2:
858			return UHSO_IFACE_SPEC(UHSO_IF_BULK,
859			    UHSO_PORT_SERIAL, UHSO_PORT_TYPE_MODEM);
860		}
861	} else {
862		/* Cards with 4 interfaces */
863		switch (index) {
864		case 0:
865			return UHSO_IFACE_SPEC(UHSO_IF_NET | UHSO_IF_MUX,
866			    UHSO_PORT_SERIAL | UHSO_PORT_NETWORK,
867			    UHSO_PORT_TYPE_NETWORK);
868		case 1:
869			return UHSO_IFACE_SPEC(UHSO_IF_BULK,
870			    UHSO_PORT_SERIAL, UHSO_PORT_TYPE_DIAG2);
871		case 2:
872			return UHSO_IFACE_SPEC(UHSO_IF_BULK,
873			    UHSO_PORT_SERIAL, UHSO_PORT_TYPE_MODEM);
874		case 3:
875			return UHSO_IFACE_SPEC(UHSO_IF_BULK,
876			    UHSO_PORT_SERIAL, UHSO_PORT_TYPE_DIAG);
877		}
878	}
879	return (0);
880}
881
882/*
883 * Probes an interface for its particular capabilities and attaches if
884 * it's a supported interface.
885 */
886static int
887uhso_probe_iface(struct uhso_softc *sc, int index,
888    int (*probe)(struct usb_device *, int))
889{
890	struct usb_interface *iface;
891	int type, error;
892
893	UHSO_DPRINTF(1, "Probing for interface %d, probe_func=%p\n", index, probe);
894
895	type = probe(sc->sc_udev, index);
896	UHSO_DPRINTF(1, "Probe result %x\n", type);
897	if (type <= 0)
898		return (ENXIO);
899
900	sc->sc_type = type;
901	iface = usbd_get_iface(sc->sc_udev, index);
902
903	if (UHSO_IFACE_PORT_TYPE(type) == UHSO_PORT_TYPE_NETWORK) {
904		error = uhso_attach_ifnet(sc, iface, type);
905		if (error) {
906			UHSO_DPRINTF(1, "uhso_attach_ifnet failed");
907			return (ENXIO);
908		}
909
910		/*
911		 * If there is an additional interrupt endpoint on this
912		 * interface then we most likely have a multiplexed serial port
913		 * available.
914		 */
915		if (iface->idesc->bNumEndpoints < 3) {
916			sc->sc_type = UHSO_IFACE_SPEC(
917			    UHSO_IFACE_USB_TYPE(type) & ~UHSO_IF_MUX,
918			    UHSO_IFACE_PORT(type) & ~UHSO_PORT_SERIAL,
919			    UHSO_IFACE_PORT_TYPE(type));
920			return (0);
921		}
922
923		UHSO_DPRINTF(1, "Trying to attach mux. serial\n");
924		error = uhso_attach_muxserial(sc, iface, type);
925		if (error == 0 && sc->sc_ttys > 0) {
926			error = ucom_attach(&sc->sc_super_ucom, sc->sc_ucom,
927			    sc->sc_ttys, sc, &uhso_ucom_callback, &sc->sc_mtx);
928			if (error) {
929				device_printf(sc->sc_dev, "ucom_attach failed\n");
930				return (ENXIO);
931			}
932			ucom_set_pnpinfo_usb(&sc->sc_super_ucom, sc->sc_dev);
933
934			mtx_lock(&sc->sc_mtx);
935			usbd_transfer_start(sc->sc_xfer[UHSO_MUX_ENDPT_INTR]);
936			mtx_unlock(&sc->sc_mtx);
937		}
938	} else if ((UHSO_IFACE_USB_TYPE(type) & UHSO_IF_BULK) &&
939	    UHSO_IFACE_PORT(type) & UHSO_PORT_SERIAL) {
940
941		error = uhso_attach_bulkserial(sc, iface, type);
942		if (error)
943			return (ENXIO);
944
945		error = ucom_attach(&sc->sc_super_ucom, sc->sc_ucom,
946		    sc->sc_ttys, sc, &uhso_ucom_callback, &sc->sc_mtx);
947		if (error) {
948			device_printf(sc->sc_dev, "ucom_attach failed\n");
949			return (ENXIO);
950		}
951		ucom_set_pnpinfo_usb(&sc->sc_super_ucom, sc->sc_dev);
952	}
953	else {
954		UHSO_DPRINTF(0, "Unknown type %x\n", type);
955		return (ENXIO);
956	}
957
958	return (0);
959}
960
961static int
962uhso_radio_ctrl(struct uhso_softc *sc, int onoff)
963{
964	struct usb_device_request req;
965	usb_error_t uerr;
966
967	req.bmRequestType = UT_VENDOR;
968	req.bRequest = onoff ? 0x82 : 0x81;
969	USETW(req.wValue, 0);
970	USETW(req.wIndex, 0);
971	USETW(req.wLength, 0);
972
973	uerr = usbd_do_request(sc->sc_udev, NULL, &req, NULL);
974	if (uerr != 0) {
975		device_printf(sc->sc_dev, "usbd_do_request_flags failed: %s\n",
976		    usbd_errstr(uerr));
977		return (-1);
978	}
979	return (onoff);
980}
981
982static int
983uhso_radio_sysctl(SYSCTL_HANDLER_ARGS)
984{
985	struct uhso_softc *sc = arg1;
986	int error, radio;
987
988	radio = sc->sc_radio;
989	error = sysctl_handle_int(oidp, &radio, 0, req);
990	if (error)
991		return (error);
992	if (radio != sc->sc_radio) {
993		radio = radio != 0 ? 1 : 0;
994		error = uhso_radio_ctrl(sc, radio);
995		if (error != -1)
996			sc->sc_radio = radio;
997
998	}
999	return (0);
1000}
1001
1002/*
1003 * Expands allocated memory to fit an additional TTY.
1004 * Two arrays are kept with matching indexes, one for ucom and one
1005 * for our private data.
1006 */
1007static int
1008uhso_alloc_tty(struct uhso_softc *sc)
1009{
1010
1011	sc->sc_ttys++;
1012	sc->sc_tty = reallocf(sc->sc_tty, sizeof(struct uhso_tty) * sc->sc_ttys,
1013	    M_USBDEV, M_WAITOK | M_ZERO);
1014	if (sc->sc_tty == NULL)
1015		return (-1);
1016
1017	sc->sc_ucom = reallocf(sc->sc_ucom,
1018	    sizeof(struct ucom_softc) * sc->sc_ttys, M_USBDEV, M_WAITOK | M_ZERO);
1019	if (sc->sc_ucom == NULL)
1020		return (-1);
1021
1022	sc->sc_tty[sc->sc_ttys - 1].ht_sc = sc;
1023
1024	UHSO_DPRINTF(1, "Allocated TTY %d\n", sc->sc_ttys - 1);
1025	return (sc->sc_ttys - 1);
1026}
1027
1028/*
1029 * Attach a multiplexed serial port
1030 * Data is read/written with requests on the default control pipe. An interrupt
1031 * endpoint returns when there is new data to be read.
1032 */
1033static int
1034uhso_attach_muxserial(struct uhso_softc *sc, struct usb_interface *iface,
1035    int type)
1036{
1037	struct usb_descriptor *desc;
1038	int i, port, tty;
1039	usb_error_t uerr;
1040
1041	/*
1042	 * The class specific interface (type 0x24) descriptor subtype field
1043	 * contains a bitmask that specifies which (and how many) ports that
1044	 * are available through this multiplexed serial port.
1045 	 */
1046	desc = usbd_find_descriptor(sc->sc_udev, NULL,
1047	    iface->idesc->bInterfaceNumber, UDESC_CS_INTERFACE, 0xff, 0, 0);
1048	if (desc == NULL) {
1049		UHSO_DPRINTF(0, "Failed to find UDESC_CS_INTERFACE\n");
1050		return (ENXIO);
1051	}
1052
1053	UHSO_DPRINTF(1, "Mux port mask %x\n", desc->bDescriptorSubtype);
1054	if (desc->bDescriptorSubtype == 0)
1055		return (ENXIO);
1056
1057	/*
1058	 * The bitmask is one octet, loop through the number of
1059	 * bits that are set and create a TTY for each.
1060	 */
1061	for (i = 0; i < 8; i++) {
1062		port = (1 << i);
1063		if ((port & desc->bDescriptorSubtype) == port) {
1064			UHSO_DPRINTF(2, "Found mux port %x (%d)\n", port, i);
1065			tty = uhso_alloc_tty(sc);
1066			if (tty < 0)
1067				return (ENOMEM);
1068			sc->sc_tty[tty].ht_muxport = i;
1069			uerr = usbd_transfer_setup(sc->sc_udev,
1070			    &sc->sc_iface_index, sc->sc_tty[tty].ht_xfer,
1071			    uhso_ctrl_config, UHSO_CTRL_MAX, sc, &sc->sc_mtx);
1072			if (uerr) {
1073				device_printf(sc->sc_dev,
1074				    "Failed to setup control pipe: %s\n",
1075				    usbd_errstr(uerr));
1076				return (ENXIO);
1077			}
1078		}
1079	}
1080
1081	/* Setup the intr. endpoint */
1082	uerr = usbd_transfer_setup(sc->sc_udev,
1083	    &iface->idesc->bInterfaceNumber, sc->sc_xfer,
1084	    uhso_mux_config, 1, sc, &sc->sc_mtx);
1085	if (uerr)
1086		return (ENXIO);
1087
1088	return (0);
1089}
1090
1091/*
1092 * Interrupt callback for the multiplexed serial port. Indicates
1093 * which serial port has data waiting.
1094 */
1095static void
1096uhso_mux_intr_callback(struct usb_xfer *xfer, usb_error_t error)
1097{
1098	struct usb_page_cache *pc;
1099	struct usb_page_search res;
1100	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1101	unsigned int i, mux;
1102
1103	UHSO_DPRINTF(3, "status %d\n", USB_GET_STATE(xfer));
1104
1105	switch (USB_GET_STATE(xfer)) {
1106	case USB_ST_TRANSFERRED:
1107		/*
1108		 * The multiplexed port number can be found at the first byte.
1109		 * It contains a bit mask, we transform this in to an integer.
1110		 */
1111		pc = usbd_xfer_get_frame(xfer, 0);
1112		usbd_get_page(pc, 0, &res);
1113
1114		i = *((unsigned char *)res.buffer);
1115		mux = 0;
1116		while (i >>= 1) {
1117			mux++;
1118		}
1119
1120		UHSO_DPRINTF(3, "mux port %d (%d)\n", mux, i);
1121		if (mux > UHSO_MPORT_TYPE_NOMAX)
1122			break;
1123
1124		/* Issue a read for this serial port */
1125		usbd_xfer_set_priv(
1126		    sc->sc_tty[mux].ht_xfer[UHSO_CTRL_READ],
1127		    &sc->sc_tty[mux]);
1128		usbd_transfer_start(sc->sc_tty[mux].ht_xfer[UHSO_CTRL_READ]);
1129
1130		break;
1131	case USB_ST_SETUP:
1132tr_setup:
1133		usbd_xfer_set_frame_len(xfer, 0, usbd_xfer_max_len(xfer));
1134		usbd_transfer_submit(xfer);
1135		break;
1136	default:
1137		UHSO_DPRINTF(0, "error: %s\n", usbd_errstr(error));
1138		if (error == USB_ERR_CANCELLED)
1139			break;
1140
1141		usbd_xfer_set_stall(xfer);
1142		goto tr_setup;
1143	}
1144}
1145
1146static void
1147uhso_mux_read_callback(struct usb_xfer *xfer, usb_error_t error)
1148{
1149	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1150	struct usb_page_cache *pc;
1151	struct usb_device_request req;
1152	struct uhso_tty *ht;
1153	int actlen, len;
1154
1155	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1156
1157	UHSO_DPRINTF(3, "status %d\n", USB_GET_STATE(xfer));
1158
1159	ht = usbd_xfer_get_priv(xfer);
1160	UHSO_DPRINTF(3, "ht=%p open=%d\n", ht, ht->ht_open);
1161
1162	switch (USB_GET_STATE(xfer)) {
1163	case USB_ST_TRANSFERRED:
1164		/* Got data, send to ucom */
1165		pc = usbd_xfer_get_frame(xfer, 1);
1166		len = usbd_xfer_frame_len(xfer, 1);
1167
1168		UHSO_DPRINTF(3, "got %d bytes on mux port %d\n", len,
1169		    ht->ht_muxport);
1170		if (len <= 0) {
1171			usbd_transfer_start(sc->sc_xfer[UHSO_MUX_ENDPT_INTR]);
1172			break;
1173		}
1174
1175		/* Deliver data if the TTY is open, discard otherwise */
1176		if (ht->ht_open)
1177			ucom_put_data(&sc->sc_ucom[ht->ht_muxport], pc, 0, len);
1178		/* FALLTHROUGH */
1179	case USB_ST_SETUP:
1180tr_setup:
1181		memset(&req, 0, sizeof(struct usb_device_request));
1182		req.bmRequestType = UT_READ_CLASS_INTERFACE;
1183		req.bRequest = UCDC_GET_ENCAPSULATED_RESPONSE;
1184		USETW(req.wValue, 0);
1185		USETW(req.wIndex, ht->ht_muxport);
1186		USETW(req.wLength, 1024);
1187
1188		pc = usbd_xfer_get_frame(xfer, 0);
1189		usbd_copy_in(pc, 0, &req, sizeof(req));
1190
1191		usbd_xfer_set_frame_len(xfer, 0, sizeof(req));
1192		usbd_xfer_set_frame_len(xfer, 1, 1024);
1193		usbd_xfer_set_frames(xfer, 2);
1194		usbd_transfer_submit(xfer);
1195		break;
1196	default:
1197		UHSO_DPRINTF(0, "error: %s\n", usbd_errstr(error));
1198		if (error == USB_ERR_CANCELLED)
1199			break;
1200		usbd_xfer_set_stall(xfer);
1201		goto tr_setup;
1202	}
1203}
1204
1205static void
1206uhso_mux_write_callback(struct usb_xfer *xfer, usb_error_t error)
1207{
1208	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1209	struct uhso_tty *ht;
1210	struct usb_page_cache *pc;
1211	struct usb_device_request req;
1212	int actlen;
1213	struct usb_page_search res;
1214
1215	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1216
1217	ht = usbd_xfer_get_priv(xfer);
1218	UHSO_DPRINTF(3, "status=%d, using mux port %d\n",
1219	    USB_GET_STATE(xfer), ht->ht_muxport);
1220
1221	switch (USB_GET_STATE(xfer)) {
1222	case USB_ST_TRANSFERRED:
1223		UHSO_DPRINTF(3, "wrote %zd data bytes to muxport %d\n",
1224		    actlen - sizeof(struct usb_device_request) ,
1225		    ht->ht_muxport);
1226		/* FALLTHROUGH */
1227	case USB_ST_SETUP:
1228tr_setup:
1229		pc = usbd_xfer_get_frame(xfer, 1);
1230		if (ucom_get_data(&sc->sc_ucom[ht->ht_muxport], pc,
1231		    0, 32, &actlen)) {
1232
1233			usbd_get_page(pc, 0, &res);
1234
1235			memset(&req, 0, sizeof(struct usb_device_request));
1236			req.bmRequestType = UT_WRITE_CLASS_INTERFACE;
1237			req.bRequest = UCDC_SEND_ENCAPSULATED_COMMAND;
1238			USETW(req.wValue, 0);
1239			USETW(req.wIndex, ht->ht_muxport);
1240			USETW(req.wLength, actlen);
1241
1242			pc = usbd_xfer_get_frame(xfer, 0);
1243			usbd_copy_in(pc, 0, &req, sizeof(req));
1244
1245			usbd_xfer_set_frame_len(xfer, 0, sizeof(req));
1246			usbd_xfer_set_frame_len(xfer, 1, actlen);
1247			usbd_xfer_set_frames(xfer, 2);
1248
1249			UHSO_DPRINTF(3, "Prepared %d bytes for transmit "
1250			    "on muxport %d\n", actlen, ht->ht_muxport);
1251
1252			usbd_transfer_submit(xfer);
1253		}
1254		break;
1255	default:
1256		UHSO_DPRINTF(0, "error: %s\n", usbd_errstr(error));
1257		if (error == USB_ERR_CANCELLED)
1258			break;
1259		usbd_xfer_set_stall(xfer);
1260		goto tr_setup;
1261	}
1262}
1263
1264static int
1265uhso_attach_bulkserial(struct uhso_softc *sc, struct usb_interface *iface,
1266    int type)
1267{
1268	usb_error_t uerr;
1269	int tty;
1270
1271	/* Try attaching RD/WR/INTR first */
1272	uerr = usbd_transfer_setup(sc->sc_udev,
1273	    &iface->idesc->bInterfaceNumber, sc->sc_xfer,
1274	    uhso_bs_config, UHSO_BULK_ENDPT_MAX, sc, &sc->sc_mtx);
1275	if (uerr) {
1276		/* Try only RD/WR */
1277		uerr = usbd_transfer_setup(sc->sc_udev,
1278		    &iface->idesc->bInterfaceNumber, sc->sc_xfer,
1279		    uhso_bs_config, UHSO_BULK_ENDPT_MAX - 1, sc, &sc->sc_mtx);
1280	}
1281	if (uerr) {
1282		UHSO_DPRINTF(0, "usbd_transfer_setup failed");
1283		return (-1);
1284	}
1285
1286	tty = uhso_alloc_tty(sc);
1287	if (tty < 0) {
1288		usbd_transfer_unsetup(sc->sc_xfer, UHSO_BULK_ENDPT_MAX);
1289		return (ENOMEM);
1290	}
1291
1292	sc->sc_tty[tty].ht_muxport = -1;
1293	return (0);
1294}
1295
1296static void
1297uhso_bs_read_callback(struct usb_xfer *xfer, usb_error_t error)
1298{
1299	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1300	struct usb_page_cache *pc;
1301	int actlen;
1302
1303	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1304
1305	UHSO_DPRINTF(3, "status %d, actlen=%d\n", USB_GET_STATE(xfer), actlen);
1306
1307	switch (USB_GET_STATE(xfer)) {
1308	case USB_ST_TRANSFERRED:
1309		pc = usbd_xfer_get_frame(xfer, 0);
1310		ucom_put_data(&sc->sc_ucom[0], pc, 0, actlen);
1311		/* FALLTHROUGH */
1312	case USB_ST_SETUP:
1313tr_setup:
1314		usbd_xfer_set_frame_len(xfer, 0, usbd_xfer_max_len(xfer));
1315		usbd_transfer_submit(xfer);
1316	break;
1317	default:
1318		UHSO_DPRINTF(0, "error: %s\n", usbd_errstr(error));
1319		if (error == USB_ERR_CANCELLED)
1320			break;
1321		usbd_xfer_set_stall(xfer);
1322		goto tr_setup;
1323	}
1324}
1325
1326static void
1327uhso_bs_write_callback(struct usb_xfer *xfer, usb_error_t error)
1328{
1329	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1330	struct usb_page_cache *pc;
1331	int actlen;
1332
1333	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1334
1335	UHSO_DPRINTF(3, "status %d, actlen=%d\n", USB_GET_STATE(xfer), actlen);
1336
1337	switch (USB_GET_STATE(xfer)) {
1338	case USB_ST_TRANSFERRED:
1339	case USB_ST_SETUP:
1340tr_setup:
1341		pc = usbd_xfer_get_frame(xfer, 0);
1342		if (ucom_get_data(&sc->sc_ucom[0], pc, 0, 8192, &actlen)) {
1343			usbd_xfer_set_frame_len(xfer, 0, actlen);
1344			usbd_transfer_submit(xfer);
1345		}
1346		break;
1347	break;
1348	default:
1349		UHSO_DPRINTF(0, "error: %s\n", usbd_errstr(error));
1350		if (error == USB_ERR_CANCELLED)
1351			break;
1352		usbd_xfer_set_stall(xfer);
1353		goto tr_setup;
1354	}
1355}
1356
1357static void
1358uhso_bs_cfg(struct uhso_softc *sc)
1359{
1360	struct usb_device_request req;
1361	usb_error_t uerr;
1362
1363	if (!(UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_BULK))
1364		return;
1365
1366	req.bmRequestType = UT_WRITE_CLASS_INTERFACE;
1367	req.bRequest = UCDC_SET_CONTROL_LINE_STATE;
1368	USETW(req.wValue, sc->sc_line);
1369	USETW(req.wIndex, sc->sc_iface_no);
1370	USETW(req.wLength, 0);
1371
1372	uerr = ucom_cfg_do_request(sc->sc_udev, &sc->sc_ucom[0], &req, NULL, 0, 1000);
1373	if (uerr != 0) {
1374		device_printf(sc->sc_dev, "failed to set ctrl line state to "
1375		    "0x%02x: %s\n", sc->sc_line, usbd_errstr(uerr));
1376	}
1377}
1378
1379static void
1380uhso_bs_intr_callback(struct usb_xfer *xfer, usb_error_t error)
1381{
1382	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1383	struct usb_page_cache *pc;
1384	int actlen;
1385	struct usb_cdc_notification cdc;
1386
1387	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1388	UHSO_DPRINTF(3, "status %d, actlen=%d\n", USB_GET_STATE(xfer), actlen);
1389
1390	switch (USB_GET_STATE(xfer)) {
1391	case USB_ST_TRANSFERRED:
1392		if (actlen < UCDC_NOTIFICATION_LENGTH) {
1393			UHSO_DPRINTF(0, "UCDC notification too short: %d\n", actlen);
1394			goto tr_setup;
1395		}
1396		else if (actlen > (int)sizeof(struct usb_cdc_notification)) {
1397			UHSO_DPRINTF(0, "UCDC notification too large: %d\n", actlen);
1398			actlen = sizeof(struct usb_cdc_notification);
1399		}
1400
1401		pc = usbd_xfer_get_frame(xfer, 0);
1402		usbd_copy_out(pc, 0, &cdc, actlen);
1403
1404		if (UGETW(cdc.wIndex) != sc->sc_iface_no) {
1405			UHSO_DPRINTF(0, "Interface mismatch, got %d expected %d\n",
1406			    UGETW(cdc.wIndex), sc->sc_iface_no);
1407			goto tr_setup;
1408		}
1409
1410		if (cdc.bmRequestType == UCDC_NOTIFICATION &&
1411		    cdc.bNotification == UCDC_N_SERIAL_STATE) {
1412			UHSO_DPRINTF(2, "notify = 0x%02x\n", cdc.data[0]);
1413
1414			sc->sc_msr = 0;
1415			sc->sc_lsr = 0;
1416			if (cdc.data[0] & UCDC_N_SERIAL_RI)
1417				sc->sc_msr |= SER_RI;
1418			if (cdc.data[0] & UCDC_N_SERIAL_DSR)
1419				sc->sc_msr |= SER_DSR;
1420			if (cdc.data[0] & UCDC_N_SERIAL_DCD)
1421				sc->sc_msr |= SER_DCD;
1422
1423			ucom_status_change(&sc->sc_ucom[0]);
1424		}
1425	case USB_ST_SETUP:
1426tr_setup:
1427	default:
1428		if (error == USB_ERR_CANCELLED)
1429			break;
1430		usbd_xfer_set_stall(xfer);
1431		goto tr_setup;
1432	}
1433}
1434
1435static void
1436uhso_ucom_cfg_get_status(struct ucom_softc *ucom, uint8_t *lsr, uint8_t *msr)
1437{
1438	struct uhso_softc *sc = ucom->sc_parent;
1439
1440	*lsr = sc->sc_lsr;
1441	*msr = sc->sc_msr;
1442}
1443
1444static void
1445uhso_ucom_cfg_set_dtr(struct ucom_softc *ucom, uint8_t onoff)
1446{
1447	struct uhso_softc *sc = ucom->sc_parent;
1448
1449	if (!(UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_BULK))
1450		return;
1451
1452	if (onoff)
1453		sc->sc_line |= UCDC_LINE_DTR;
1454	else
1455		sc->sc_line &= ~UCDC_LINE_DTR;
1456
1457	uhso_bs_cfg(sc);
1458}
1459
1460static void
1461uhso_ucom_cfg_set_rts(struct ucom_softc *ucom, uint8_t onoff)
1462{
1463	struct uhso_softc *sc = ucom->sc_parent;
1464
1465	if (!(UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_BULK))
1466		return;
1467
1468	if (onoff)
1469		sc->sc_line |= UCDC_LINE_RTS;
1470	else
1471		sc->sc_line &= ~UCDC_LINE_RTS;
1472
1473	uhso_bs_cfg(sc);
1474}
1475
1476static void
1477uhso_ucom_start_read(struct ucom_softc *ucom)
1478{
1479	struct uhso_softc *sc = ucom->sc_parent;
1480
1481	UHSO_DPRINTF(3, "unit=%d, subunit=%d\n",
1482	    ucom->sc_super->sc_unit, ucom->sc_subunit);
1483
1484	if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_MUX) {
1485		sc->sc_tty[ucom->sc_subunit].ht_open = 1;
1486		usbd_transfer_start(sc->sc_xfer[UHSO_MUX_ENDPT_INTR]);
1487	}
1488	else if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_BULK) {
1489		sc->sc_tty[0].ht_open = 1;
1490		usbd_transfer_start(sc->sc_xfer[UHSO_BULK_ENDPT_READ]);
1491		if (sc->sc_xfer[UHSO_BULK_ENDPT_INTR] != NULL)
1492			usbd_transfer_start(sc->sc_xfer[UHSO_BULK_ENDPT_INTR]);
1493	}
1494}
1495
1496static void
1497uhso_ucom_stop_read(struct ucom_softc *ucom)
1498{
1499
1500	struct uhso_softc *sc = ucom->sc_parent;
1501
1502	if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_MUX) {
1503		sc->sc_tty[ucom->sc_subunit].ht_open = 0;
1504		usbd_transfer_stop(
1505		    sc->sc_tty[ucom->sc_subunit].ht_xfer[UHSO_CTRL_READ]);
1506	}
1507	else if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_BULK) {
1508		sc->sc_tty[0].ht_open = 0;
1509		usbd_transfer_start(sc->sc_xfer[UHSO_BULK_ENDPT_READ]);
1510		if (sc->sc_xfer[UHSO_BULK_ENDPT_INTR] != NULL)
1511			usbd_transfer_stop(sc->sc_xfer[UHSO_BULK_ENDPT_INTR]);
1512	}
1513}
1514
1515static void
1516uhso_ucom_start_write(struct ucom_softc *ucom)
1517{
1518	struct uhso_softc *sc = ucom->sc_parent;
1519
1520	if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_MUX) {
1521		UHSO_DPRINTF(3, "local unit %d\n", ucom->sc_subunit);
1522
1523		usbd_transfer_start(sc->sc_xfer[UHSO_MUX_ENDPT_INTR]);
1524
1525		usbd_xfer_set_priv(
1526		    sc->sc_tty[ucom->sc_subunit].ht_xfer[UHSO_CTRL_WRITE],
1527		    &sc->sc_tty[ucom->sc_subunit]);
1528		usbd_transfer_start(
1529		    sc->sc_tty[ucom->sc_subunit].ht_xfer[UHSO_CTRL_WRITE]);
1530
1531	}
1532	else if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_BULK) {
1533		usbd_transfer_start(sc->sc_xfer[UHSO_BULK_ENDPT_WRITE]);
1534	}
1535}
1536
1537static void
1538uhso_ucom_stop_write(struct ucom_softc *ucom)
1539{
1540	struct uhso_softc *sc = ucom->sc_parent;
1541
1542	if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_MUX) {
1543		usbd_transfer_stop(
1544		    sc->sc_tty[ucom->sc_subunit].ht_xfer[UHSO_CTRL_WRITE]);
1545	}
1546	else if (UHSO_IFACE_USB_TYPE(sc->sc_type) & UHSO_IF_BULK) {
1547		usbd_transfer_stop(sc->sc_xfer[UHSO_BULK_ENDPT_WRITE]);
1548	}
1549}
1550
1551static int
1552uhso_attach_ifnet(struct uhso_softc *sc, struct usb_interface *iface, int type)
1553{
1554	struct ifnet *ifp;
1555	usb_error_t uerr;
1556	struct sysctl_ctx_list *sctx;
1557	struct sysctl_oid *soid;
1558	unsigned int devunit;
1559
1560	uerr = usbd_transfer_setup(sc->sc_udev,
1561	    &iface->idesc->bInterfaceNumber, sc->sc_if_xfer,
1562	    uhso_ifnet_config, UHSO_IFNET_MAX, sc, &sc->sc_mtx);
1563	if (uerr) {
1564		UHSO_DPRINTF(0, "usbd_transfer_setup failed: %s\n",
1565		    usbd_errstr(uerr));
1566		return (-1);
1567	}
1568
1569	sc->sc_ifp = ifp = if_alloc(IFT_OTHER);
1570	if (sc->sc_ifp == NULL) {
1571		device_printf(sc->sc_dev, "if_alloc() failed\n");
1572		return (-1);
1573	}
1574
1575	callout_init_mtx(&sc->sc_c, &sc->sc_mtx, 0);
1576	mtx_lock(&sc->sc_mtx);
1577	callout_reset(&sc->sc_c, 1, uhso_if_rxflush, sc);
1578	mtx_unlock(&sc->sc_mtx);
1579
1580	/*
1581	 * We create our own unit numbers for ifnet devices because the
1582	 * USB interface unit numbers can be at arbitrary positions yielding
1583	 * odd looking device names.
1584	 */
1585	devunit = alloc_unr(uhso_ifnet_unit);
1586
1587	if_initname(ifp, device_get_name(sc->sc_dev), devunit);
1588	ifp->if_mtu = UHSO_MAX_MTU;
1589	ifp->if_ioctl = uhso_if_ioctl;
1590	ifp->if_init = uhso_if_init;
1591	ifp->if_start = uhso_if_start;
1592	ifp->if_output = uhso_if_output;
1593	ifp->if_flags = IFF_BROADCAST | IFF_MULTICAST | IFF_NOARP;
1594	ifp->if_softc = sc;
1595	IFQ_SET_MAXLEN(&ifp->if_snd, ifqmaxlen);
1596	ifp->if_snd.ifq_drv_maxlen = ifqmaxlen;
1597	IFQ_SET_READY(&ifp->if_snd);
1598
1599	if_attach(ifp);
1600	bpfattach(ifp, DLT_RAW, 0);
1601
1602	sctx = device_get_sysctl_ctx(sc->sc_dev);
1603	soid = device_get_sysctl_tree(sc->sc_dev);
1604	/* Unlocked read... */
1605	SYSCTL_ADD_STRING(sctx, SYSCTL_CHILDREN(soid), OID_AUTO, "netif",
1606	    CTLFLAG_RD, ifp->if_xname, 0, "Attached network interface");
1607
1608	return (0);
1609}
1610
1611static void
1612uhso_ifnet_read_callback(struct usb_xfer *xfer, usb_error_t error)
1613{
1614	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1615	struct mbuf *m;
1616	struct usb_page_cache *pc;
1617	int actlen;
1618
1619	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1620
1621	UHSO_DPRINTF(3, "status=%d, actlen=%d\n", USB_GET_STATE(xfer), actlen);
1622
1623	switch (USB_GET_STATE(xfer)) {
1624	case USB_ST_TRANSFERRED:
1625		if (actlen > 0 && (sc->sc_ifp->if_drv_flags & IFF_DRV_RUNNING)) {
1626			pc = usbd_xfer_get_frame(xfer, 0);
1627			m = m_getcl(M_NOWAIT, MT_DATA, M_PKTHDR);
1628			usbd_copy_out(pc, 0, mtod(m, uint8_t *), actlen);
1629			m->m_pkthdr.len = m->m_len = actlen;
1630			/* Enqueue frame for further processing */
1631			_IF_ENQUEUE(&sc->sc_rxq, m);
1632			if (!callout_pending(&sc->sc_c) ||
1633			    !callout_active(&sc->sc_c)) {
1634				callout_schedule(&sc->sc_c, 1);
1635			}
1636		}
1637	/* FALLTHROUGH */
1638	case USB_ST_SETUP:
1639tr_setup:
1640		usbd_xfer_set_frame_len(xfer, 0, usbd_xfer_max_len(xfer));
1641		usbd_transfer_submit(xfer);
1642		break;
1643	default:
1644		UHSO_DPRINTF(0, "error: %s\n", usbd_errstr(error));
1645		if (error == USB_ERR_CANCELLED)
1646			break;
1647		usbd_xfer_set_stall(xfer);
1648		goto tr_setup;
1649	}
1650}
1651
1652/*
1653 * Deferred RX processing, called with mutex locked.
1654 *
1655 * Each frame we receive might contain several small ip-packets as well
1656 * as partial ip-packets. We need to separate/assemble them into individual
1657 * packets before sending them to the ip-layer.
1658 */
1659static void
1660uhso_if_rxflush(void *arg)
1661{
1662	struct uhso_softc *sc = arg;
1663	struct ifnet *ifp = sc->sc_ifp;
1664	uint8_t *cp;
1665	struct mbuf *m, *m0, *mwait;
1666	struct ip *ip;
1667#ifdef INET6
1668	struct ip6_hdr *ip6;
1669#endif
1670	uint16_t iplen;
1671	int isr;
1672
1673	m = NULL;
1674	mwait = sc->sc_mwait;
1675	for (;;) {
1676		if (m == NULL) {
1677			_IF_DEQUEUE(&sc->sc_rxq, m);
1678			if (m == NULL)
1679				break;
1680			UHSO_DPRINTF(3, "dequeue m=%p, len=%d\n", m, m->m_len);
1681		}
1682		mtx_unlock(&sc->sc_mtx);
1683
1684		/* Do we have a partial packet waiting? */
1685		if (mwait != NULL) {
1686			m0 = mwait;
1687			mwait = NULL;
1688
1689			UHSO_DPRINTF(3, "partial m0=%p(%d), concat w/ m=%p(%d)\n",
1690			    m0, m0->m_len, m, m->m_len);
1691
1692			m_catpkt(m0, m);
1693			m = m_pullup(m0, sizeof(struct ip));
1694			if (m == NULL) {
1695				if_inc_counter(ifp, IFCOUNTER_IERRORS, 1);
1696				UHSO_DPRINTF(0, "m_pullup failed\n");
1697				mtx_lock(&sc->sc_mtx);
1698				continue;
1699			}
1700			UHSO_DPRINTF(3, "Constructed mbuf=%p, len=%d\n",
1701			    m, m->m_pkthdr.len);
1702		}
1703
1704		cp = mtod(m, uint8_t *);
1705		ip = (struct ip *)cp;
1706#ifdef INET6
1707		ip6 = (struct ip6_hdr *)cp;
1708#endif
1709
1710		/* Check for IPv4 */
1711		if (ip->ip_v == IPVERSION) {
1712			iplen = htons(ip->ip_len);
1713			isr = NETISR_IP;
1714		}
1715#ifdef INET6
1716		/* Check for IPv6 */
1717		else if ((ip6->ip6_vfc & IPV6_VERSION_MASK) == IPV6_VERSION) {
1718			iplen = htons(ip6->ip6_plen);
1719			isr = NETISR_IPV6;
1720		}
1721#endif
1722		else {
1723			UHSO_DPRINTF(0, "got unexpected ip version %d, "
1724			    "m=%p, len=%d\n", (*cp & 0xf0) >> 4, m, m->m_len);
1725			if_inc_counter(ifp, IFCOUNTER_IERRORS, 1);
1726			UHSO_HEXDUMP(cp, 4);
1727			m_freem(m);
1728			m = NULL;
1729			mtx_lock(&sc->sc_mtx);
1730			continue;
1731		}
1732
1733		if (iplen == 0) {
1734			UHSO_DPRINTF(0, "Zero IP length\n");
1735			if_inc_counter(ifp, IFCOUNTER_IERRORS, 1);
1736			m_freem(m);
1737			m = NULL;
1738			mtx_lock(&sc->sc_mtx);
1739			continue;
1740		}
1741
1742		UHSO_DPRINTF(3, "m=%p, len=%d, cp=%p, iplen=%d\n",
1743		    m, m->m_pkthdr.len, cp, iplen);
1744
1745		m0 = NULL;
1746
1747		/* More IP packets in this mbuf */
1748		if (iplen < m->m_pkthdr.len) {
1749			m0 = m;
1750
1751			/*
1752			 * Allocate a new mbuf for this IP packet and
1753			 * copy the IP-packet into it.
1754			 */
1755			m = m_getcl(M_NOWAIT, MT_DATA, M_PKTHDR);
1756			memcpy(mtod(m, uint8_t *), mtod(m0, uint8_t *), iplen);
1757			m->m_pkthdr.len = m->m_len = iplen;
1758
1759			/* Adjust the size of the original mbuf */
1760			m_adj(m0, iplen);
1761			m0 = m_defrag(m0, M_WAITOK);
1762
1763			UHSO_DPRINTF(3, "New mbuf=%p, len=%d/%d, m0=%p, "
1764			    "m0_len=%d/%d\n", m, m->m_pkthdr.len, m->m_len,
1765			    m0, m0->m_pkthdr.len, m0->m_len);
1766		}
1767		else if (iplen > m->m_pkthdr.len) {
1768			UHSO_DPRINTF(3, "Deferred mbuf=%p, len=%d\n",
1769			    m, m->m_pkthdr.len);
1770			mwait = m;
1771			m = NULL;
1772			mtx_lock(&sc->sc_mtx);
1773			continue;
1774		}
1775
1776		if_inc_counter(ifp, IFCOUNTER_IPACKETS, 1);
1777		m->m_pkthdr.rcvif = ifp;
1778
1779		/* Dispatch to IP layer */
1780		BPF_MTAP(sc->sc_ifp, m);
1781		M_SETFIB(m, ifp->if_fib);
1782		netisr_dispatch(isr, m);
1783		m = m0 != NULL ? m0 : NULL;
1784		mtx_lock(&sc->sc_mtx);
1785	}
1786	sc->sc_mwait = mwait;
1787}
1788
1789static void
1790uhso_ifnet_write_callback(struct usb_xfer *xfer, usb_error_t error)
1791{
1792	struct uhso_softc *sc = usbd_xfer_softc(xfer);
1793	struct ifnet *ifp = sc->sc_ifp;
1794	struct usb_page_cache *pc;
1795	struct mbuf *m;
1796	int actlen;
1797
1798	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
1799
1800	UHSO_DPRINTF(3, "status %d, actlen=%d\n", USB_GET_STATE(xfer), actlen);
1801
1802	switch (USB_GET_STATE(xfer)) {
1803	case USB_ST_TRANSFERRED:
1804		if_inc_counter(ifp, IFCOUNTER_OPACKETS, 1);
1805		ifp->if_drv_flags &= ~IFF_DRV_OACTIVE;
1806	case USB_ST_SETUP:
1807tr_setup:
1808		IFQ_DRV_DEQUEUE(&ifp->if_snd, m);
1809		if (m == NULL)
1810			break;
1811
1812		ifp->if_drv_flags |= IFF_DRV_OACTIVE;
1813
1814		if (m->m_pkthdr.len > MCLBYTES)
1815			m->m_pkthdr.len = MCLBYTES;
1816
1817		usbd_xfer_set_frame_len(xfer, 0, m->m_pkthdr.len);
1818		pc = usbd_xfer_get_frame(xfer, 0);
1819		usbd_m_copy_in(pc, 0, m, 0, m->m_pkthdr.len);
1820		usbd_transfer_submit(xfer);
1821
1822		BPF_MTAP(ifp, m);
1823		m_freem(m);
1824		break;
1825	default:
1826		UHSO_DPRINTF(0, "error: %s\n", usbd_errstr(error));
1827		if (error == USB_ERR_CANCELLED)
1828			break;
1829		usbd_xfer_set_stall(xfer);
1830		goto tr_setup;
1831	}
1832}
1833
1834static int
1835uhso_if_ioctl(struct ifnet *ifp, u_long cmd, caddr_t data)
1836{
1837	struct uhso_softc *sc;
1838
1839	sc = ifp->if_softc;
1840
1841	switch (cmd) {
1842	case SIOCSIFFLAGS:
1843		if (ifp->if_flags & IFF_UP) {
1844			if (!(ifp->if_drv_flags & IFF_DRV_RUNNING)) {
1845				uhso_if_init(sc);
1846			}
1847		}
1848		else {
1849			if (ifp->if_drv_flags & IFF_DRV_RUNNING) {
1850				mtx_lock(&sc->sc_mtx);
1851				uhso_if_stop(sc);
1852				mtx_unlock(&sc->sc_mtx);
1853			}
1854		}
1855		break;
1856	case SIOCSIFADDR:
1857	case SIOCADDMULTI:
1858	case SIOCDELMULTI:
1859		break;
1860	default:
1861		return (EINVAL);
1862	}
1863	return (0);
1864}
1865
1866static void
1867uhso_if_init(void *priv)
1868{
1869	struct uhso_softc *sc = priv;
1870	struct ifnet *ifp = sc->sc_ifp;
1871
1872	mtx_lock(&sc->sc_mtx);
1873	uhso_if_stop(sc);
1874	ifp = sc->sc_ifp;
1875	ifp->if_flags |= IFF_UP;
1876	ifp->if_drv_flags |= IFF_DRV_RUNNING;
1877	mtx_unlock(&sc->sc_mtx);
1878
1879	UHSO_DPRINTF(2, "ifnet initialized\n");
1880}
1881
1882static int
1883uhso_if_output(struct ifnet *ifp, struct mbuf *m0, const struct sockaddr *dst,
1884    struct route *ro)
1885{
1886	int error;
1887
1888	/* Only IPv4/6 support */
1889	if (dst->sa_family != AF_INET
1890#ifdef INET6
1891	   && dst->sa_family != AF_INET6
1892#endif
1893	 ) {
1894		return (EAFNOSUPPORT);
1895	}
1896
1897	error = (ifp->if_transmit)(ifp, m0);
1898	if (error) {
1899		if_inc_counter(ifp, IFCOUNTER_OERRORS, 1);
1900		return (ENOBUFS);
1901	}
1902	if_inc_counter(ifp, IFCOUNTER_OPACKETS, 1);
1903	return (0);
1904}
1905
1906static void
1907uhso_if_start(struct ifnet *ifp)
1908{
1909	struct uhso_softc *sc = ifp->if_softc;
1910
1911	if ((ifp->if_drv_flags & IFF_DRV_RUNNING) == 0) {
1912		UHSO_DPRINTF(1, "Not running\n");
1913		return;
1914	}
1915
1916	mtx_lock(&sc->sc_mtx);
1917	usbd_transfer_start(sc->sc_if_xfer[UHSO_IFNET_READ]);
1918	usbd_transfer_start(sc->sc_if_xfer[UHSO_IFNET_WRITE]);
1919	mtx_unlock(&sc->sc_mtx);
1920	UHSO_DPRINTF(3, "interface started\n");
1921}
1922
1923static void
1924uhso_if_stop(struct uhso_softc *sc)
1925{
1926
1927	usbd_transfer_stop(sc->sc_if_xfer[UHSO_IFNET_READ]);
1928	usbd_transfer_stop(sc->sc_if_xfer[UHSO_IFNET_WRITE]);
1929	sc->sc_ifp->if_drv_flags &= ~(IFF_DRV_RUNNING | IFF_DRV_OACTIVE);
1930}
1931