usb-linux.c

   1 /*
   2  * Linux host USB redirector
   3  *
   4  * Copyright (c) 2005 Fabrice Bellard
   5  *
   6  * Copyright (c) 2008 Max Krasnyansky
   7  *      Support for host device auto connect & disconnect
   8  *      Major rewrite to support fully async operation
   9  *
  10  * Copyright 2008 TJ <linux@tjworld.net>
  11  *      Added flexible support for /dev/bus/usb /sys/bus/usb/devices in addition
  12  *      to the legacy /proc/bus/usb USB device discovery and handling
  13  *
  14  * Permission is hereby granted, free of charge, to any person obtaining a copy
  15  * of this software and associated documentation files (the "Software"), to deal
  16  * in the Software without restriction, including without limitation the rights
  17  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  18  * copies of the Software, and to permit persons to whom the Software is
  19  * furnished to do so, subject to the following conditions:
  20  *
  21  * The above copyright notice and this permission notice shall be included in
  22  * all copies or substantial portions of the Software.
  23  *
  24  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  25  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  26  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
  27  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  28  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
  29  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  30  * THE SOFTWARE.
  31  */
  32
  33 #include "qemu-common.h"
  34 #include "qemu-timer.h"
  35 #include "console.h"
  36
  37 #if defined(__linux__)
  38 #define __user
  39 #endif
  40
  41 #include <dirent.h>
  42 #include <sys/ioctl.h>
  43 #include <signal.h>
  44
  45 #include <linux/usbdevice_fs.h>
  46 #include <linux/version.h>
  47 #include "hw/usb.h"
  48
  49 /* We redefine it to avoid version problems */
  50 struct usb_ctrltransfer {
  51     uint8_t  bRequestType;
  52     uint8_t  bRequest;
  53     uint16_t wValue;
  54     uint16_t wIndex;
  55     uint16_t wLength;
  56     uint32_t timeout;
  57     void *data;
  58 };
  59
  60 struct usb_ctrlrequest {
  61     uint8_t bRequestType;
  62     uint8_t bRequest;
  63     uint16_t wValue;
  64     uint16_t wIndex;
  65     uint16_t wLength;
  66 };
  67
  68 typedef int USBScanFunc(void *opaque, int bus_num, int addr, int class_id,
  69                         int vendor_id, int product_id,
  70                         const char *product_name, int speed);
  71 static int usb_host_find_device(int *pbus_num, int *paddr,
  72                                 char *product_name, int product_name_size,
  73                                 const char *devname);
  74 //#define DEBUG
  75
  76 #ifdef DEBUG
  77 #define dprintf printf
  78 #else
  79 #define dprintf(...)
  80 #endif
  81
  82 #define USBDBG_DEVOPENED "husb: opened %s/devices\n"
  83
  84 #define USBPROCBUS_PATH "/proc/bus/usb"
  85 #define PRODUCT_NAME_SZ 32
  86 #define MAX_ENDPOINTS 16
  87 #define USBDEVBUS_PATH "/dev/bus/usb"
  88 #define USBSYSBUS_PATH "/sys/bus/usb"
  89
  90 static char *usb_host_device_path;
  91
  92 #define USB_FS_NONE 0
  93 #define USB_FS_PROC 1
  94 #define USB_FS_DEV 2
  95 #define USB_FS_SYS 3
  96
  97 static int usb_fs_type;
  98
  99 /* endpoint association data */
 100 struct endp_data {
 101     uint8_t type;
 102     uint8_t halted;
 103 };
 104
 105 enum {
 106     CTRL_STATE_IDLE = 0,
 107     CTRL_STATE_SETUP,
 108     CTRL_STATE_DATA,
 109     CTRL_STATE_ACK
 110 };
 111
 112 /*
 113  * Control transfer state.
 114  * Note that 'buffer' _must_ follow 'req' field because
 115  * we need contigious buffer when we submit control URB.
 116  */
 117 struct ctrl_struct {
 118     uint16_t len;
 119     uint16_t offset;
 120     uint8_t  state;
 121     struct   usb_ctrlrequest req;
 122     uint8_t  buffer[1024];
 123 };
 124
 125 typedef struct USBHostDevice {
 126     USBDevice dev;
 127     int       fd;
 128
 129     uint8_t   descr[1024];
 130     int       descr_len;
 131     int       configuration;
 132     int       ninterfaces;
 133     int       closing;
 134
 135     struct ctrl_struct ctrl;
 136     struct endp_data endp_table[MAX_ENDPOINTS];
 137
 138     /* Host side address */
 139     int bus_num;
 140     int addr;
 141
 142     struct USBHostDevice *next;
 143 } USBHostDevice;
 144
 145 static int is_isoc(USBHostDevice *s, int ep)
 146 {
 147     return s->endp_table[ep - 1].type == USBDEVFS_URB_TYPE_ISO;
 148 }
 149
 150 static int is_halted(USBHostDevice *s, int ep)
 151 {
 152     return s->endp_table[ep - 1].halted;
 153 }
 154
 155 static void clear_halt(USBHostDevice *s, int ep)
 156 {
 157     s->endp_table[ep - 1].halted = 0;
 158 }
 159
 160 static void set_halt(USBHostDevice *s, int ep)
 161 {
 162     s->endp_table[ep - 1].halted = 1;
 163 }
 164
 165 static USBHostDevice *hostdev_list;
 166
 167 static void hostdev_link(USBHostDevice *dev)
 168 {
 169     dev->next = hostdev_list;
 170     hostdev_list = dev;
 171 }
 172
 173 static void hostdev_unlink(USBHostDevice *dev)
 174 {
 175     USBHostDevice *pdev = hostdev_list;
 176     USBHostDevice **prev = &hostdev_list;
 177
 178     while (pdev) {
 179         if (pdev == dev) {
 180             *prev = dev->next;
 181             return;
 182         }
 183
 184         prev = &pdev->next;
 185         pdev = pdev->next;
 186     }
 187 }
 188
 189 static USBHostDevice *hostdev_find(int bus_num, int addr)
 190 {
 191     USBHostDevice *s = hostdev_list;
 192     while (s) {
 193         if (s->bus_num == bus_num && s->addr == addr)
 194             return s;
 195         s = s->next;
 196     }
 197     return NULL;
 198 }
 199
 200 /*
 201  * Async URB state.
 202  * We always allocate one isoc descriptor even for bulk transfers
 203  * to simplify allocation and casts.
 204  */
 205 typedef struct AsyncURB
 206 {
 207     struct usbdevfs_urb urb;
 208     struct usbdevfs_iso_packet_desc isocpd;
 209
 210     USBPacket     *packet;
 211     USBHostDevice *hdev;
 212 } AsyncURB;
 213
 214 static AsyncURB *async_alloc(void)
 215 {
 216     return (AsyncURB *) qemu_mallocz(sizeof(AsyncURB));
 217 }
 218
 219 static void async_free(AsyncURB *aurb)
 220 {
 221     qemu_free(aurb);
 222 }
 223
 224 static void async_complete_ctrl(USBHostDevice *s, USBPacket *p)
 225 {
 226     switch(s->ctrl.state) {
 227     case CTRL_STATE_SETUP:
 228         if (p->len < s->ctrl.len)
 229             s->ctrl.len = p->len;
 230         s->ctrl.state = CTRL_STATE_DATA;
 231         p->len = 8;
 232         break;
 233
 234     case CTRL_STATE_ACK:
 235         s->ctrl.state = CTRL_STATE_IDLE;
 236         p->len = 0;
 237         break;
 238
 239     default:
 240         break;
 241     }
 242 }
 243
 244 static void async_complete(void *opaque)
 245 {
 246     USBHostDevice *s = opaque;
 247     AsyncURB *aurb;
 248
 249     while (1) {
 250         USBPacket *p;
 251
 252         int r = ioctl(s->fd, USBDEVFS_REAPURBNDELAY, &aurb);
 253         if (r < 0) {
 254             if (errno == EAGAIN)
 255                 return;
 256
 257             if (errno == ENODEV && !s->closing) {
 258                 printf("husb: device %d.%d disconnected\n", s->bus_num, s->addr);
 259                 usb_device_del_addr(0, s->dev.addr);
 260                 return;
 261             }
 262
 263             dprintf("husb: async. reap urb failed errno %d\n", errno);
 264             return;
 265         }
 266
 267         p = aurb->packet;
 268
 269         dprintf("husb: async completed. aurb %p status %d alen %d\n",
 270                 aurb, aurb->urb.status, aurb->urb.actual_length);
 271
 272         if (p) {
 273             switch (aurb->urb.status) {
 274             case 0:
 275                 p->len = aurb->urb.actual_length;
 276                 if (aurb->urb.type == USBDEVFS_URB_TYPE_CONTROL)
 277                     async_complete_ctrl(s, p);
 278                 break;
 279
 280             case -EPIPE:
 281                 set_halt(s, p->devep);
 282                 /* fall through */
 283             default:
 284                 p->len = USB_RET_NAK;
 285                 break;
 286             }
 287
 288             usb_packet_complete(p);
 289         }
 290
 291         async_free(aurb);
 292     }
 293 }
 294
 295 static void async_cancel(USBPacket *unused, void *opaque)
 296 {
 297     AsyncURB *aurb = opaque;
 298     USBHostDevice *s = aurb->hdev;
 299
 300     dprintf("husb: async cancel. aurb %p\n", aurb);
 301
 302     /* Mark it as dead (see async_complete above) */
 303     aurb->packet = NULL;
 304
 305     int r = ioctl(s->fd, USBDEVFS_DISCARDURB, aurb);
 306     if (r < 0) {
 307         dprintf("husb: async. discard urb failed errno %d\n", errno);
 308     }
 309 }
 310
 311 static int usb_host_claim_interfaces(USBHostDevice *dev, int configuration)
 312 {
 313     int dev_descr_len, config_descr_len;
 314     int interface, nb_interfaces, nb_configurations;
 315     int ret, i;
 316
 317     if (configuration == 0) /* address state - ignore */
 318         return 1;
 319
 320     dprintf("husb: claiming interfaces. config %d\n", configuration);
 321
 322     i = 0;
 323     dev_descr_len = dev->descr[0];
 324     if (dev_descr_len > dev->descr_len)
 325         goto fail;
 326     nb_configurations = dev->descr[17];
 327
 328     i += dev_descr_len;
 329     while (i < dev->descr_len) {
 330         dprintf("husb: i is %d, descr_len is %d, dl %d, dt %d\n", i, dev->descr_len,
 331                dev->descr[i], dev->descr[i+1]);
 332
 333         if (dev->descr[i+1] != USB_DT_CONFIG) {
 334             i += dev->descr[i];
 335             continue;
 336         }
 337         config_descr_len = dev->descr[i];
 338
 339         printf("husb: config #%d need %d\n", dev->descr[i + 5], configuration);
 340
 341         if (configuration < 0 || configuration == dev->descr[i + 5]) {
 342             configuration = dev->descr[i + 5];
 343             break;
 344         }
 345
 346         i += config_descr_len;
 347     }
 348
 349     if (i >= dev->descr_len) {
 350         fprintf(stderr, "husb: update iface failed. no matching configuration\n");
 351         goto fail;
 352     }
 353     nb_interfaces = dev->descr[i + 4];
 354
 355 #ifdef USBDEVFS_DISCONNECT
 356     /* earlier Linux 2.4 do not support that */
 357     {
 358         struct usbdevfs_ioctl ctrl;
 359         for (interface = 0; interface < nb_interfaces; interface++) {
 360             ctrl.ioctl_code = USBDEVFS_DISCONNECT;
 361             ctrl.ifno = interface;
 362             ret = ioctl(dev->fd, USBDEVFS_IOCTL, &ctrl);
 363             if (ret < 0 && errno != ENODATA) {
 364                 perror("USBDEVFS_DISCONNECT");
 365                 goto fail;
 366             }
 367         }
 368     }
 369 #endif
 370
 371     /* XXX: only grab if all interfaces are free */
 372     for (interface = 0; interface < nb_interfaces; interface++) {
 373         ret = ioctl(dev->fd, USBDEVFS_CLAIMINTERFACE, &interface);
 374         if (ret < 0) {
 375             if (errno == EBUSY) {
 376                 printf("husb: update iface. device already grabbed\n");
 377             } else {
 378                 perror("husb: failed to claim interface");
 379             }
 380         fail:
 381             return 0;
 382         }
 383     }
 384
 385     printf("husb: %d interfaces claimed for configuration %d\n",
 386            nb_interfaces, configuration);
 387
 388     dev->ninterfaces   = nb_interfaces;
 389     dev->configuration = configuration;
 390     return 1;
 391 }
 392
 393 static int usb_host_release_interfaces(USBHostDevice *s)
 394 {
 395     int ret, i;
 396
 397     dprintf("husb: releasing interfaces\n");
 398
 399     for (i = 0; i < s->ninterfaces; i++) {
 400         ret = ioctl(s->fd, USBDEVFS_RELEASEINTERFACE, &i);
 401         if (ret < 0) {
 402             perror("husb: failed to release interface");
 403             return 0;
 404         }
 405     }
 406
 407     return 1;
 408 }
 409
 410 static void usb_host_handle_reset(USBDevice *dev)
 411 {
 412     USBHostDevice *s = (USBHostDevice *) dev;
 413
 414     dprintf("husb: reset device %u.%u\n", s->bus_num, s->addr);
 415
 416     ioctl(s->fd, USBDEVFS_RESET);
 417
 418     usb_host_claim_interfaces(s, s->configuration);
 419 }
 420
 421 static void usb_host_handle_destroy(USBDevice *dev)
 422 {
 423     USBHostDevice *s = (USBHostDevice *)dev;
 424
 425     s->closing = 1;
 426
 427     qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
 428
 429     hostdev_unlink(s);
 430
 431     async_complete(s);
 432
 433     if (s->fd >= 0)
 434         close(s->fd);
 435
 436     qemu_free(s);
 437 }
 438
 439 static int usb_linux_update_endp_table(USBHostDevice *s);
 440
 441 static int usb_host_handle_data(USBHostDevice *s, USBPacket *p)
 442 {
 443     struct usbdevfs_urb *urb;
 444     AsyncURB *aurb;
 445     int ret;
 446
 447     aurb = async_alloc();
 448     if (!aurb) {
 449         dprintf("husb: async malloc failed\n");
 450         return USB_RET_NAK;
 451     }
 452     aurb->hdev   = s;
 453     aurb->packet = p;
 454
 455     urb = &aurb->urb;
 456
 457     if (p->pid == USB_TOKEN_IN)
 458         urb->endpoint = p->devep | 0x80;
 459     else
 460         urb->endpoint = p->devep;
 461
 462     if (is_halted(s, p->devep)) {
 463         ret = ioctl(s->fd, USBDEVFS_CLEAR_HALT, &urb->endpoint);
 464         if (ret < 0) {
 465             dprintf("husb: failed to clear halt. ep 0x%x errno %d\n",
 466                    urb->endpoint, errno);
 467             return USB_RET_NAK;
 468         }
 469         clear_halt(s, p->devep);
 470     }
 471
 472     urb->buffer        = p->data;
 473     urb->buffer_length = p->len;
 474
 475     if (is_isoc(s, p->devep)) {
 476         /* Setup ISOC transfer */
 477         urb->type     = USBDEVFS_URB_TYPE_ISO;
 478         urb->flags    = USBDEVFS_URB_ISO_ASAP;
 479         urb->number_of_packets = 1;
 480         urb->iso_frame_desc[0].length = p->len;
 481     } else {
 482         /* Setup bulk transfer */
 483         urb->type     = USBDEVFS_URB_TYPE_BULK;
 484     }
 485
 486     urb->usercontext = s;
 487
 488     ret = ioctl(s->fd, USBDEVFS_SUBMITURB, urb);
 489
 490     dprintf("husb: data submit. ep 0x%x len %u aurb %p\n", urb->endpoint, p->len, aurb);
 491
 492     if (ret < 0) {
 493         dprintf("husb: submit failed. errno %d\n", errno);
 494         async_free(aurb);
 495
 496         switch(errno) {
 497         case ETIMEDOUT:
 498             return USB_RET_NAK;
 499         case EPIPE:
 500         default:
 501             return USB_RET_STALL;
 502         }
 503     }
 504
 505     usb_defer_packet(p, async_cancel, aurb);
 506     return USB_RET_ASYNC;
 507 }
 508
 509 static int ctrl_error(void)
 510 {
 511     if (errno == ETIMEDOUT)
 512         return USB_RET_NAK;
 513     else
 514         return USB_RET_STALL;
 515 }
 516
 517 static int usb_host_set_address(USBHostDevice *s, int addr)
 518 {
 519     dprintf("husb: ctrl set addr %u\n", addr);
 520     s->dev.addr = addr;
 521     return 0;
 522 }
 523
 524 static int usb_host_set_config(USBHostDevice *s, int config)
 525 {
 526     usb_host_release_interfaces(s);
 527
 528     int ret = ioctl(s->fd, USBDEVFS_SETCONFIGURATION, &config);
 529
 530     dprintf("husb: ctrl set config %d ret %d errno %d\n", config, ret, errno);
 531
 532     if (ret < 0)
 533         return ctrl_error();
 534
 535     usb_host_claim_interfaces(s, config);
 536     return 0;
 537 }
 538
 539 static int usb_host_set_interface(USBHostDevice *s, int iface, int alt)
 540 {
 541     struct usbdevfs_setinterface si;
 542     int ret;
 543
 544     si.interface  = iface;
 545     si.altsetting = alt;
 546     ret = ioctl(s->fd, USBDEVFS_SETINTERFACE, &si);
 547
 548     dprintf("husb: ctrl set iface %d altset %d ret %d errno %d\n",
 549         iface, alt, ret, errno);
 550
 551     if (ret < 0)
 552         return ctrl_error();
 553
 554     usb_linux_update_endp_table(s);
 555     return 0;
 556 }
 557
 558 static int usb_host_handle_control(USBHostDevice *s, USBPacket *p)
 559 {
 560     struct usbdevfs_urb *urb;
 561     AsyncURB *aurb;
 562     int ret, value, index;
 563
 564     /*
 565      * Process certain standard device requests.
 566      * These are infrequent and are processed synchronously.
 567      */
 568     value = le16_to_cpu(s->ctrl.req.wValue);
 569     index = le16_to_cpu(s->ctrl.req.wIndex);
 570
 571     dprintf("husb: ctrl type 0x%x req 0x%x val 0x%x index %u len %u\n",
 572         s->ctrl.req.bRequestType, s->ctrl.req.bRequest, value, index,
 573         s->ctrl.len);
 574
 575     if (s->ctrl.req.bRequestType == 0) {
 576         switch (s->ctrl.req.bRequest) {
 577         case USB_REQ_SET_ADDRESS:
 578             return usb_host_set_address(s, value);
 579
 580         case USB_REQ_SET_CONFIGURATION:
 581             return usb_host_set_config(s, value & 0xff);
 582         }
 583     }
 584
 585     if (s->ctrl.req.bRequestType == 1 &&
 586                   s->ctrl.req.bRequest == USB_REQ_SET_INTERFACE)
 587         return usb_host_set_interface(s, index, value);
 588
 589     /* The rest are asynchronous */
 590
 591     aurb = async_alloc();
 592     if (!aurb) {
 593         dprintf("husb: async malloc failed\n");
 594         return USB_RET_NAK;
 595     }
 596     aurb->hdev   = s;
 597     aurb->packet = p;
 598
 599     /*
 600      * Setup ctrl transfer.
 601      *
 602      * s->ctrl is layed out such that data buffer immediately follows
 603      * 'req' struct which is exactly what usbdevfs expects.
 604      */
 605     urb = &aurb->urb;
 606
 607     urb->type     = USBDEVFS_URB_TYPE_CONTROL;
 608     urb->endpoint = p->devep;
 609
 610     urb->buffer        = &s->ctrl.req;
 611     urb->buffer_length = 8 + s->ctrl.len;
 612
 613     urb->usercontext = s;
 614
 615     ret = ioctl(s->fd, USBDEVFS_SUBMITURB, urb);
 616
 617     dprintf("husb: submit ctrl. len %u aurb %p\n", urb->buffer_length, aurb);
 618
 619     if (ret < 0) {
 620         dprintf("husb: submit failed. errno %d\n", errno);
 621         async_free(aurb);
 622
 623         switch(errno) {
 624         case ETIMEDOUT:
 625             return USB_RET_NAK;
 626         case EPIPE:
 627         default:
 628             return USB_RET_STALL;
 629         }
 630     }
 631
 632     usb_defer_packet(p, async_cancel, aurb);
 633     return USB_RET_ASYNC;
 634 }
 635
 636 static int do_token_setup(USBDevice *dev, USBPacket *p)
 637 {
 638     USBHostDevice *s = (USBHostDevice *) dev;
 639     int ret = 0;
 640
 641     if (p->len != 8)
 642         return USB_RET_STALL;
 643
 644     memcpy(&s->ctrl.req, p->data, 8);
 645     s->ctrl.len    = le16_to_cpu(s->ctrl.req.wLength);
 646     s->ctrl.offset = 0;
 647     s->ctrl.state  = CTRL_STATE_SETUP;
 648
 649     if (s->ctrl.req.bRequestType & USB_DIR_IN) {
 650         ret = usb_host_handle_control(s, p);
 651         if (ret < 0)
 652             return ret;
 653
 654         if (ret < s->ctrl.len)
 655             s->ctrl.len = ret;
 656         s->ctrl.state = CTRL_STATE_DATA;
 657     } else {
 658         if (s->ctrl.len == 0)
 659             s->ctrl.state = CTRL_STATE_ACK;
 660         else
 661             s->ctrl.state = CTRL_STATE_DATA;
 662     }
 663
 664     return ret;
 665 }
 666
 667 static int do_token_in(USBDevice *dev, USBPacket *p)
 668 {
 669     USBHostDevice *s = (USBHostDevice *) dev;
 670     int ret = 0;
 671
 672     if (p->devep != 0)
 673         return usb_host_handle_data(s, p);
 674
 675     switch(s->ctrl.state) {
 676     case CTRL_STATE_ACK:
 677         if (!(s->ctrl.req.bRequestType & USB_DIR_IN)) {
 678             ret = usb_host_handle_control(s, p);
 679             if (ret == USB_RET_ASYNC)
 680                 return USB_RET_ASYNC;
 681
 682             s->ctrl.state = CTRL_STATE_IDLE;
 683             return ret > 0 ? 0 : ret;
 684         }
 685
 686         return 0;
 687
 688     case CTRL_STATE_DATA:
 689         if (s->ctrl.req.bRequestType & USB_DIR_IN) {
 690             int len = s->ctrl.len - s->ctrl.offset;
 691             if (len > p->len)
 692                 len = p->len;
 693             memcpy(p->data, s->ctrl.buffer + s->ctrl.offset, len);
 694             s->ctrl.offset += len;
 695             if (s->ctrl.offset >= s->ctrl.len)
 696                 s->ctrl.state = CTRL_STATE_ACK;
 697             return len;
 698         }
 699
 700         s->ctrl.state = CTRL_STATE_IDLE;
 701         return USB_RET_STALL;
 702
 703     default:
 704         return USB_RET_STALL;
 705     }
 706 }
 707
 708 static int do_token_out(USBDevice *dev, USBPacket *p)
 709 {
 710     USBHostDevice *s = (USBHostDevice *) dev;
 711
 712     if (p->devep != 0)
 713         return usb_host_handle_data(s, p);
 714
 715     switch(s->ctrl.state) {
 716     case CTRL_STATE_ACK:
 717         if (s->ctrl.req.bRequestType & USB_DIR_IN) {
 718             s->ctrl.state = CTRL_STATE_IDLE;
 719             /* transfer OK */
 720         } else {
 721             /* ignore additional output */
 722         }
 723         return 0;
 724
 725     case CTRL_STATE_DATA:
 726         if (!(s->ctrl.req.bRequestType & USB_DIR_IN)) {
 727             int len = s->ctrl.len - s->ctrl.offset;
 728             if (len > p->len)
 729                 len = p->len;
 730             memcpy(s->ctrl.buffer + s->ctrl.offset, p->data, len);
 731             s->ctrl.offset += len;
 732             if (s->ctrl.offset >= s->ctrl.len)
 733                 s->ctrl.state = CTRL_STATE_ACK;
 734             return len;
 735         }
 736
 737         s->ctrl.state = CTRL_STATE_IDLE;
 738         return USB_RET_STALL;
 739
 740     default:
 741         return USB_RET_STALL;
 742     }
 743 }
 744
 745 /*
 746  * Packet handler.
 747  * Called by the HC (host controller).
 748  *
 749  * Returns length of the transaction or one of the USB_RET_XXX codes.
 750  */
 751 static int usb_host_handle_packet(USBDevice *s, USBPacket *p)
 752 {
 753     switch(p->pid) {
 754     case USB_MSG_ATTACH:
 755         s->state = USB_STATE_ATTACHED;
 756         return 0;
 757
 758     case USB_MSG_DETACH:
 759         s->state = USB_STATE_NOTATTACHED;
 760         return 0;
 761
 762     case USB_MSG_RESET:
 763         s->remote_wakeup = 0;
 764         s->addr = 0;
 765         s->state = USB_STATE_DEFAULT;
 766         s->handle_reset(s);
 767         return 0;
 768     }
 769
 770     /* Rest of the PIDs must match our address */
 771     if (s->state < USB_STATE_DEFAULT || p->devaddr != s->addr)
 772         return USB_RET_NODEV;
 773
 774     switch (p->pid) {
 775     case USB_TOKEN_SETUP:
 776         return do_token_setup(s, p);
 777
 778     case USB_TOKEN_IN:
 779         return do_token_in(s, p);
 780
 781     case USB_TOKEN_OUT:
 782         return do_token_out(s, p);
 783
 784     default:
 785         return USB_RET_STALL;
 786     }
 787 }
 788
 789 /* returns 1 on problem encountered or 0 for success */
 790 static int usb_linux_update_endp_table(USBHostDevice *s)
 791 {
 792     uint8_t *descriptors;
 793     uint8_t devep, type, configuration, alt_interface;
 794     struct usb_ctrltransfer ct;
 795     int interface, ret, length, i;
 796
 797     ct.bRequestType = USB_DIR_IN;
 798     ct.bRequest = USB_REQ_GET_CONFIGURATION;
 799     ct.wValue = 0;
 800     ct.wIndex = 0;
 801     ct.wLength = 1;
 802     ct.data = &configuration;
 803     ct.timeout = 50;
 804
 805     ret = ioctl(s->fd, USBDEVFS_CONTROL, &ct);
 806     if (ret < 0) {
 807         perror("usb_linux_update_endp_table");
 808         return 1;
 809     }
 810
 811     /* in address state */
 812     if (configuration == 0)
 813         return 1;
 814
 815     /* get the desired configuration, interface, and endpoint descriptors
 816      * from device description */
 817     descriptors = &s->descr[18];
 818     length = s->descr_len - 18;
 819     i = 0;
 820
 821     if (descriptors[i + 1] != USB_DT_CONFIG ||
 822         descriptors[i + 5] != configuration) {
 823         dprintf("invalid descriptor data - configuration\n");
 824         return 1;
 825     }
 826     i += descriptors[i];
 827
 828     while (i < length) {
 829         if (descriptors[i + 1] != USB_DT_INTERFACE ||
 830             (descriptors[i + 1] == USB_DT_INTERFACE &&
 831              descriptors[i + 4] == 0)) {
 832             i += descriptors[i];
 833             continue;
 834         }
 835
 836         interface = descriptors[i + 2];
 837
 838         ct.bRequestType = USB_DIR_IN | USB_RECIP_INTERFACE;
 839         ct.bRequest = USB_REQ_GET_INTERFACE;
 840         ct.wValue = 0;
 841         ct.wIndex = interface;
 842         ct.wLength = 1;
 843         ct.data = &alt_interface;
 844         ct.timeout = 50;
 845
 846         ret = ioctl(s->fd, USBDEVFS_CONTROL, &ct);
 847         if (ret < 0) {
 848             perror("usb_linux_update_endp_table");
 849             return 1;
 850         }
 851
 852         /* the current interface descriptor is the active interface
 853          * and has endpoints */
 854         if (descriptors[i + 3] != alt_interface) {
 855             i += descriptors[i];
 856             continue;
 857         }
 858
 859         /* advance to the endpoints */
 860         while (i < length && descriptors[i +1] != USB_DT_ENDPOINT)
 861             i += descriptors[i];
 862
 863         if (i >= length)
 864             break;
 865
 866         while (i < length) {
 867             if (descriptors[i + 1] != USB_DT_ENDPOINT)
 868                 break;
 869
 870             devep = descriptors[i + 2];
 871             switch (descriptors[i + 3] & 0x3) {
 872             case 0x00:
 873                 type = USBDEVFS_URB_TYPE_CONTROL;
 874                 break;
 875             case 0x01:
 876                 type = USBDEVFS_URB_TYPE_ISO;
 877                 break;
 878             case 0x02:
 879                 type = USBDEVFS_URB_TYPE_BULK;
 880                 break;
 881             case 0x03:
 882                 type = USBDEVFS_URB_TYPE_INTERRUPT;
 883                 break;
 884             default:
 885                 dprintf("usb_host: malformed endpoint type\n");
 886                 type = USBDEVFS_URB_TYPE_BULK;
 887             }
 888             s->endp_table[(devep & 0xf) - 1].type = type;
 889             s->endp_table[(devep & 0xf) - 1].halted = 0;
 890
 891             i += descriptors[i];
 892         }
 893     }
 894     return 0;
 895 }
 896
 897 static USBDevice *usb_host_device_open_addr(int bus_num, int addr, const char *prod_name)
 898 {
 899     int fd = -1, ret;
 900     USBHostDevice *dev = NULL;
 901     struct usbdevfs_connectinfo ci;
 902     char buf[1024];
 903
 904     dev = qemu_mallocz(sizeof(USBHostDevice));
 905     if (!dev)
 906         goto fail;
 907
 908     dev->bus_num = bus_num;
 909     dev->addr = addr;
 910
 911     printf("husb: open device %d.%d\n", bus_num, addr);
 912
 913     if (!usb_host_device_path) {
 914         perror("husb: USB Host Device Path not set");
 915         goto fail;
 916     }
 917     snprintf(buf, sizeof(buf), "%s/%03d/%03d", usb_host_device_path,
 918              bus_num, addr);
 919     fd = open(buf, O_RDWR | O_NONBLOCK);
 920     if (fd < 0) {
 921         perror(buf);
 922         goto fail;
 923     }
 924     dprintf("husb: opened %s\n", buf);
 925
 926     /* read the device description */
 927     dev->descr_len = read(fd, dev->descr, sizeof(dev->descr));
 928     if (dev->descr_len <= 0) {
 929         perror("husb: reading device data failed");
 930         goto fail;
 931     }
 932
 933 #ifdef DEBUG
 934     {
 935         int x;
 936         printf("=== begin dumping device descriptor data ===\n");
 937         for (x = 0; x < dev->descr_len; x++)
 938             printf("%02x ", dev->descr[x]);
 939         printf("\n=== end dumping device descriptor data ===\n");
 940     }
 941 #endif
 942
 943     dev->fd = fd;
 944
 945     /*
 946      * Initial configuration is -1 which makes us claim first
 947      * available config. We used to start with 1, which does not
 948      * always work. I've seen devices where first config starts
 949      * with 2.
 950      */
 951     if (!usb_host_claim_interfaces(dev, -1))
 952         goto fail;
 953
 954     ret = ioctl(fd, USBDEVFS_CONNECTINFO, &ci);
 955     if (ret < 0) {
 956         perror("usb_host_device_open: USBDEVFS_CONNECTINFO");
 957         goto fail;
 958     }
 959
 960     printf("husb: grabbed usb device %d.%d\n", bus_num, addr);
 961
 962     ret = usb_linux_update_endp_table(dev);
 963     if (ret)
 964         goto fail;
 965
 966     if (ci.slow)
 967         dev->dev.speed = USB_SPEED_LOW;
 968     else
 969         dev->dev.speed = USB_SPEED_HIGH;
 970
 971     dev->dev.handle_packet  = usb_host_handle_packet;
 972     dev->dev.handle_reset   = usb_host_handle_reset;
 973     dev->dev.handle_destroy = usb_host_handle_destroy;
 974
 975     if (!prod_name || prod_name[0] == '\0')
 976         snprintf(dev->dev.devname, sizeof(dev->dev.devname),
 977                  "host:%d.%d", bus_num, addr);
 978     else
 979         pstrcpy(dev->dev.devname, sizeof(dev->dev.devname),
 980                 prod_name);
 981
 982     /* USB devio uses 'write' flag to check for async completions */
 983     qemu_set_fd_handler(dev->fd, NULL, async_complete, dev);
 984
 985     hostdev_link(dev);
 986
 987     return (USBDevice *) dev;
 988
 989 fail:
 990     if (dev)
 991         qemu_free(dev);
 992
 993     close(fd);
 994     return NULL;
 995 }
 996
 997 static int usb_host_auto_add(const char *spec);
 998 static int usb_host_auto_del(const char *spec);
 999
1000 USBDevice *usb_host_device_open(const char *devname)
1001 {
1002     int bus_num, addr;
1003     char product_name[PRODUCT_NAME_SZ];
1004
1005     if (strstr(devname, "auto:")) {
1006         usb_host_auto_add(devname);
1007         return NULL;
1008     }
1009
1010     if (usb_host_find_device(&bus_num, &addr, product_name, sizeof(product_name),
1011                              devname) < 0)
1012         return NULL;
1013
1014     if (hostdev_find(bus_num, addr)) {
1015        term_printf("husb: host usb device %d.%d is already open\n", bus_num, addr);
1016        return NULL;
1017     }
1018
1019     return usb_host_device_open_addr(bus_num, addr, product_name);
1020 }
1021
1022 int usb_host_device_close(const char *devname)
1023 {
1024     char product_name[PRODUCT_NAME_SZ];
1025     int bus_num, addr;
1026     USBHostDevice *s;
1027
1028     if (strstr(devname, "auto:"))
1029         return usb_host_auto_del(devname);
1030
1031     if (usb_host_find_device(&bus_num, &addr, product_name, sizeof(product_name),
1032                              devname) < 0)
1033         return -1;
1034
1035     s = hostdev_find(bus_num, addr);
1036     if (s) {
1037         usb_device_del_addr(0, s->dev.addr);
1038         return 0;
1039     }
1040
1041     return -1;
1042 }
1043
1044 static int get_tag_value(char *buf, int buf_size,
1045                          const char *str, const char *tag,
1046                          const char *stopchars)
1047 {
1048     const char *p;
1049     char *q;
1050     p = strstr(str, tag);
1051     if (!p)
1052         return -1;
1053     p += strlen(tag);
1054     while (qemu_isspace(*p))
1055         p++;
1056     q = buf;
1057     while (*p != '\0' && !strchr(stopchars, *p)) {
1058         if ((q - buf) < (buf_size - 1))
1059             *q++ = *p;
1060         p++;
1061     }
1062     *q = '\0';
1063     return q - buf;
1064 }
1065
1066 /*
1067  * Use /proc/bus/usb/devices or /dev/bus/usb/devices file to determine
1068  * host's USB devices. This is legacy support since many distributions
1069  * are moving to /sys/bus/usb
1070  */
1071 static int usb_host_scan_dev(void *opaque, USBScanFunc *func)
1072 {
1073     FILE *f = 0;
1074     char line[1024];
1075     char buf[1024];
1076     int bus_num, addr, speed, device_count, class_id, product_id, vendor_id;
1077     char product_name[512];
1078     int ret = 0;
1079
1080     if (!usb_host_device_path) {
1081         perror("husb: USB Host Device Path not set");
1082         goto the_end;
1083     }
1084     snprintf(line, sizeof(line), "%s/devices", usb_host_device_path);
1085     f = fopen(line, "r");
1086     if (!f) {
1087         perror("husb: cannot open devices file");
1088         goto the_end;
1089     }
1090
1091     device_count = 0;
1092     bus_num = addr = speed = class_id = product_id = vendor_id = 0;
1093     for(;;) {
1094         if (fgets(line, sizeof(line), f) == NULL)
1095             break;
1096         if (strlen(line) > 0)
1097             line[strlen(line) - 1] = '\0';
1098         if (line[0] == 'T' && line[1] == ':') {
1099             if (device_count && (vendor_id || product_id)) {
1100                 /* New device.  Add the previously discovered device.  */
1101                 ret = func(opaque, bus_num, addr, class_id, vendor_id,
1102                            product_id, product_name, speed);
1103                 if (ret)
1104                     goto the_end;
1105             }
1106             if (get_tag_value(buf, sizeof(buf), line, "Bus=", " ") < 0)
1107                 goto fail;
1108             bus_num = atoi(buf);
1109             if (get_tag_value(buf, sizeof(buf), line, "Dev#=", " ") < 0)
1110                 goto fail;
1111             addr = atoi(buf);
1112             if (get_tag_value(buf, sizeof(buf), line, "Spd=", " ") < 0)
1113                 goto fail;
1114             if (!strcmp(buf, "480"))
1115                 speed = USB_SPEED_HIGH;
1116             else if (!strcmp(buf, "1.5"))
1117                 speed = USB_SPEED_LOW;
1118             else
1119                 speed = USB_SPEED_FULL;
1120             product_name[0] = '\0';
1121             class_id = 0xff;
1122             device_count++;
1123             product_id = 0;
1124             vendor_id = 0;
1125         } else if (line[0] == 'P' && line[1] == ':') {
1126             if (get_tag_value(buf, sizeof(buf), line, "Vendor=", " ") < 0)
1127                 goto fail;
1128             vendor_id = strtoul(buf, NULL, 16);
1129             if (get_tag_value(buf, sizeof(buf), line, "ProdID=", " ") < 0)
1130                 goto fail;
1131             product_id = strtoul(buf, NULL, 16);
1132         } else if (line[0] == 'S' && line[1] == ':') {
1133             if (get_tag_value(buf, sizeof(buf), line, "Product=", "") < 0)
1134                 goto fail;
1135             pstrcpy(product_name, sizeof(product_name), buf);
1136         } else if (line[0] == 'D' && line[1] == ':') {
1137             if (get_tag_value(buf, sizeof(buf), line, "Cls=", " (") < 0)
1138                 goto fail;
1139             class_id = strtoul(buf, NULL, 16);
1140         }
1141     fail: ;
1142     }
1143     if (device_count && (vendor_id || product_id)) {
1144         /* Add the last device.  */
1145         ret = func(opaque, bus_num, addr, class_id, vendor_id,
1146                    product_id, product_name, speed);
1147     }
1148  the_end:
1149     if (f)
1150         fclose(f);
1151     return ret;
1152 }
1153
1154 /*
1155  * Read sys file-system device file
1156  *
1157  * @line address of buffer to put file contents in
1158  * @line_size size of line
1159  * @device_file path to device file (printf format string)
1160  * @device_name device being opened (inserted into device_file)
1161  *
1162  * @return 0 failed, 1 succeeded ('line' contains data)
1163  */
1164 static int usb_host_read_file(char *line, size_t line_size, const char *device_file, const char *device_name)
1165 {
1166     FILE *f;
1167     int ret = 0;
1168     char filename[PATH_MAX];
1169
1170     snprintf(filename, PATH_MAX, device_file, device_name);
1171     f = fopen(filename, "r");
1172     if (f) {
1173         fgets(line, line_size, f);
1174         fclose(f);
1175         ret = 1;
1176     } else {
1177         term_printf("husb: could not open %s\n", filename);
1178     }
1179
1180     return ret;
1181 }
1182
1183 /*
1184  * Use /sys/bus/usb/devices/ directory to determine host's USB
1185  * devices.
1186  *
1187  * This code is based on Robert Schiele's original patches posted to
1188  * the Novell bug-tracker https://bugzilla.novell.com/show_bug.cgi?id=241950
1189  */
1190 static int usb_host_scan_sys(void *opaque, USBScanFunc *func)
1191 {
1192     DIR *dir = 0;
1193     char line[1024];
1194     int bus_num, addr, speed, class_id, product_id, vendor_id;
1195     int ret = 0;
1196     char product_name[512];
1197     struct dirent *de;
1198
1199     dir = opendir(USBSYSBUS_PATH "/devices");
1200     if (!dir) {
1201         perror("husb: cannot open devices directory");
1202         goto the_end;
1203     }
1204
1205     while ((de = readdir(dir))) {
1206         if (de->d_name[0] != '.' && !strchr(de->d_name, ':')) {
1207             char *tmpstr = de->d_name;
1208             if (!strncmp(de->d_name, "usb", 3))
1209                 tmpstr += 3;
1210             bus_num = atoi(tmpstr);
1211
1212             if (!usb_host_read_file(line, sizeof(line), USBSYSBUS_PATH "/devices/%s/devnum", de->d_name))
1213                 goto the_end;
1214             if (sscanf(line, "%d", &addr) != 1)
1215                 goto the_end;
1216
1217             if (!usb_host_read_file(line, sizeof(line), USBSYSBUS_PATH "/devices/%s/bDeviceClass", de->d_name))
1218                 goto the_end;
1219             if (sscanf(line, "%x", &class_id) != 1)
1220                 goto the_end;
1221
1222             if (!usb_host_read_file(line, sizeof(line), USBSYSBUS_PATH "/devices/%s/idVendor", de->d_name))
1223                 goto the_end;
1224             if (sscanf(line, "%x", &vendor_id) != 1)
1225                 goto the_end;
1226
1227             if (!usb_host_read_file(line, sizeof(line), USBSYSBUS_PATH "/devices/%s/idProduct", de->d_name))
1228                 goto the_end;
1229             if (sscanf(line, "%x", &product_id) != 1)
1230                 goto the_end;
1231
1232             if (!usb_host_read_file(line, sizeof(line), USBSYSBUS_PATH "/devices/%s/product", de->d_name)) {
1233                 *product_name = 0;
1234             } else {
1235                 if (strlen(line) > 0)
1236                     line[strlen(line) - 1] = '\0';
1237                 pstrcpy(product_name, sizeof(product_name), line);
1238             }
1239
1240             if (!usb_host_read_file(line, sizeof(line), USBSYSBUS_PATH "/devices/%s/speed", de->d_name))
1241                 goto the_end;
1242             if (!strcmp(line, "480\n"))
1243                 speed = USB_SPEED_HIGH;
1244             else if (!strcmp(line, "1.5\n"))
1245                 speed = USB_SPEED_LOW;
1246             else
1247                 speed = USB_SPEED_FULL;
1248
1249             ret = func(opaque, bus_num, addr, class_id, vendor_id,
1250                        product_id, product_name, speed);
1251             if (ret)
1252                 goto the_end;
1253         }
1254     }
1255  the_end:
1256     if (dir)
1257         closedir(dir);
1258     return ret;
1259 }
1260
1261 /*
1262  * Determine how to access the host's USB devices and call the
1263  * specific support function.
1264  */
1265 static int usb_host_scan(void *opaque, USBScanFunc *func)
1266 {
1267     FILE *f = 0;
1268     DIR *dir = 0;
1269     int ret = 0;
1270     const char *fs_type[] = {"unknown", "proc", "dev", "sys"};
1271     char devpath[PATH_MAX];
1272
1273     /* only check the host once */
1274     if (!usb_fs_type) {
1275         f = fopen(USBPROCBUS_PATH "/devices", "r");
1276         if (f) {
1277             /* devices found in /proc/bus/usb/ */
1278             strcpy(devpath, USBPROCBUS_PATH);
1279             usb_fs_type = USB_FS_PROC;
1280             fclose(f);
1281             dprintf(USBDBG_DEVOPENED, USBPROCBUS_PATH);
1282             goto found_devices;
1283         }
1284         /* try additional methods if an access method hasn't been found yet */
1285         f = fopen(USBDEVBUS_PATH "/devices", "r");
1286         if (f) {
1287             /* devices found in /dev/bus/usb/ */
1288             strcpy(devpath, USBDEVBUS_PATH);
1289             usb_fs_type = USB_FS_DEV;
1290             fclose(f);
1291             dprintf(USBDBG_DEVOPENED, USBDEVBUS_PATH);
1292             goto found_devices;
1293         }
1294         dir = opendir(USBSYSBUS_PATH "/devices");
1295         if (dir) {
1296             /* devices found in /dev/bus/usb/ (yes - not a mistake!) */
1297             strcpy(devpath, USBDEVBUS_PATH);
1298             usb_fs_type = USB_FS_SYS;
1299             closedir(dir);
1300             dprintf(USBDBG_DEVOPENED, USBSYSBUS_PATH);
1301             goto found_devices;
1302         }
1303     found_devices:
1304         if (!usb_fs_type) {
1305             term_printf("husb: unable to access USB devices\n");
1306             return -ENOENT;
1307         }
1308
1309         /* the module setting (used later for opening devices) */
1310         usb_host_device_path = qemu_mallocz(strlen(devpath)+1);
1311         if (usb_host_device_path) {
1312             strcpy(usb_host_device_path, devpath);
1313             term_printf("husb: using %s file-system with %s\n", fs_type[usb_fs_type], usb_host_device_path);
1314         } else {
1315             /* out of memory? */
1316             perror("husb: unable to allocate memory for device path");
1317             return -ENOMEM;
1318         }
1319     }
1320
1321     switch (usb_fs_type) {
1322     case USB_FS_PROC:
1323     case USB_FS_DEV:
1324         ret = usb_host_scan_dev(opaque, func);
1325         break;
1326     case USB_FS_SYS:
1327         ret = usb_host_scan_sys(opaque, func);
1328         break;
1329     default:
1330         ret = -EINVAL;
1331         break;
1332     }
1333     return ret;
1334 }
1335
1336 struct USBAutoFilter {
1337     struct USBAutoFilter *next;
1338     int bus_num;
1339     int addr;
1340     int vendor_id;
1341     int product_id;
1342 };
1343
1344 static QEMUTimer *usb_auto_timer;
1345 static struct USBAutoFilter *usb_auto_filter;
1346
1347 static int usb_host_auto_scan(void *opaque, int bus_num, int addr,
1348                      int class_id, int vendor_id, int product_id,
1349                      const char *product_name, int speed)
1350 {
1351     struct USBAutoFilter *f;
1352     struct USBDevice *dev;
1353
1354     /* Ignore hubs */
1355     if (class_id == 9)
1356         return 0;
1357
1358     for (f = usb_auto_filter; f; f = f->next) {
1359         if (f->bus_num >= 0 && f->bus_num != bus_num)
1360             continue;
1361
1362         if (f->addr >= 0 && f->addr != addr)
1363             continue;
1364
1365         if (f->vendor_id >= 0 && f->vendor_id != vendor_id)
1366             continue;
1367
1368         if (f->product_id >= 0 && f->product_id != product_id)
1369             continue;
1370
1371         /* We got a match */
1372
1373         /* Allredy attached ? */
1374         if (hostdev_find(bus_num, addr))
1375             return 0;
1376
1377         dprintf("husb: auto open: bus_num %d addr %d\n", bus_num, addr);
1378
1379         dev = usb_host_device_open_addr(bus_num, addr, product_name);
1380         if (dev)
1381             usb_device_add_dev(dev);
1382     }
1383
1384     return 0;
1385 }
1386
1387 static void usb_host_auto_timer(void *unused)
1388 {
1389     usb_host_scan(NULL, usb_host_auto_scan);
1390     qemu_mod_timer(usb_auto_timer, qemu_get_clock(rt_clock) + 2000);
1391 }
1392
1393 /*
1394  * Autoconnect filter
1395  * Format:
1396  *    auto:bus:dev[:vid:pid]
1397  *    auto:bus.dev[:vid:pid]
1398  *
1399  *    bus  - bus number    (dec, * means any)
1400  *    dev  - device number (dec, * means any)
1401  *    vid  - vendor id     (hex, * means any)
1402  *    pid  - product id    (hex, * means any)
1403  *
1404  *    See 'lsusb' output.
1405  */
1406 static int parse_filter(const char *spec, struct USBAutoFilter *f)
1407 {
1408     enum { BUS, DEV, VID, PID, DONE };
1409     const char *p = spec;
1410     int i;
1411
1412     f->bus_num    = -1;
1413     f->addr       = -1;
1414     f->vendor_id  = -1;
1415     f->product_id = -1;
1416
1417     for (i = BUS; i < DONE; i++) {
1418         p = strpbrk(p, ":.");
1419         if (!p) break;
1420         p++;
1421
1422         if (*p == '*')
1423             continue;
1424
1425         switch(i) {
1426         case BUS: f->bus_num = strtol(p, NULL, 10);    break;
1427         case DEV: f->addr    = strtol(p, NULL, 10);    break;
1428         case VID: f->vendor_id  = strtol(p, NULL, 16); break;
1429         case PID: f->product_id = strtol(p, NULL, 16); break;
1430         }
1431     }
1432
1433     if (i < DEV) {
1434         fprintf(stderr, "husb: invalid auto filter spec %s\n", spec);
1435         return -1;
1436     }
1437
1438     return 0;
1439 }
1440
1441 static int match_filter(const struct USBAutoFilter *f1,
1442                         const struct USBAutoFilter *f2)
1443 {
1444     return f1->bus_num    == f2->bus_num &&
1445            f1->addr       == f2->addr &&
1446            f1->vendor_id  == f2->vendor_id &&
1447            f1->product_id == f2->product_id;
1448 }
1449
1450 static int usb_host_auto_add(const char *spec)
1451 {
1452     struct USBAutoFilter filter, *f;
1453
1454     if (parse_filter(spec, &filter) < 0)
1455         return -1;
1456
1457     f = qemu_mallocz(sizeof(*f));
1458     if (!f) {
1459         fprintf(stderr, "husb: failed to allocate auto filter\n");
1460         return -1;
1461     }
1462
1463     *f = filter;
1464
1465     if (!usb_auto_filter) {
1466         /*
1467          * First entry. Init and start the monitor.
1468          * Right now we're using timer to check for new devices.
1469          * If this turns out to be too expensive we can move that into a
1470          * separate thread.
1471          */
1472         usb_auto_timer = qemu_new_timer(rt_clock, usb_host_auto_timer, NULL);
1473         if (!usb_auto_timer) {
1474             fprintf(stderr, "husb: failed to allocate auto scan timer\n");
1475             qemu_free(f);
1476             return -1;
1477         }
1478
1479         /* Check for new devices every two seconds */
1480         qemu_mod_timer(usb_auto_timer, qemu_get_clock(rt_clock) + 2000);
1481     }
1482
1483     dprintf("husb: added auto filter: bus_num %d addr %d vid %d pid %d\n",
1484         f->bus_num, f->addr, f->vendor_id, f->product_id);
1485
1486     f->next = usb_auto_filter;
1487     usb_auto_filter = f;
1488
1489     return 0;
1490 }
1491
1492 static int usb_host_auto_del(const char *spec)
1493 {
1494     struct USBAutoFilter *pf = usb_auto_filter;
1495     struct USBAutoFilter **prev = &usb_auto_filter;
1496     struct USBAutoFilter filter;
1497
1498     if (parse_filter(spec, &filter) < 0)
1499         return -1;
1500
1501     while (pf) {
1502         if (match_filter(pf, &filter)) {
1503             dprintf("husb: removed auto filter: bus_num %d addr %d vid %d pid %d\n",
1504                      pf->bus_num, pf->addr, pf->vendor_id, pf->product_id);
1505
1506             *prev = pf->next;
1507
1508             if (!usb_auto_filter) {
1509                 /* No more filters. Stop scanning. */
1510                 qemu_del_timer(usb_auto_timer);
1511                 qemu_free_timer(usb_auto_timer);
1512             }
1513
1514             return 0;
1515         }
1516
1517         prev = &pf->next;
1518         pf   = pf->next;
1519     }
1520
1521     return -1;
1522 }
1523
1524 typedef struct FindDeviceState {
1525     int vendor_id;
1526     int product_id;
1527     int bus_num;
1528     int addr;
1529     char product_name[PRODUCT_NAME_SZ];
1530 } FindDeviceState;
1531
1532 static int usb_host_find_device_scan(void *opaque, int bus_num, int addr,
1533                                      int class_id,
1534                                      int vendor_id, int product_id,
1535                                      const char *product_name, int speed)
1536 {
1537     FindDeviceState *s = opaque;
1538     if ((vendor_id == s->vendor_id &&
1539         product_id == s->product_id) ||
1540         (bus_num == s->bus_num &&
1541         addr == s->addr)) {
1542         pstrcpy(s->product_name, PRODUCT_NAME_SZ, product_name);
1543         s->bus_num = bus_num;
1544         s->addr = addr;
1545         return 1;
1546     } else {
1547         return 0;
1548     }
1549 }
1550
1551 /* the syntax is :
1552    'bus.addr' (decimal numbers) or
1553    'vendor_id:product_id' (hexa numbers) */
1554 static int usb_host_find_device(int *pbus_num, int *paddr,
1555                                 char *product_name, int product_name_size,
1556                                 const char *devname)
1557 {
1558     const char *p;
1559     int ret;
1560     FindDeviceState fs;
1561
1562     p = strchr(devname, '.');
1563     if (p) {
1564         *pbus_num = strtoul(devname, NULL, 0);
1565         *paddr = strtoul(p + 1, NULL, 0);
1566         fs.bus_num = *pbus_num;
1567         fs.addr = *paddr;
1568         ret = usb_host_scan(&fs, usb_host_find_device_scan);
1569         if (ret)
1570             pstrcpy(product_name, product_name_size, fs.product_name);
1571         return 0;
1572     }
1573
1574     p = strchr(devname, ':');
1575     if (p) {
1576         fs.vendor_id = strtoul(devname, NULL, 16);
1577         fs.product_id = strtoul(p + 1, NULL, 16);
1578         ret = usb_host_scan(&fs, usb_host_find_device_scan);
1579         if (ret) {
1580             *pbus_num = fs.bus_num;
1581             *paddr = fs.addr;
1582             pstrcpy(product_name, product_name_size, fs.product_name);
1583             return 0;
1584         }
1585     }
1586     return -1;
1587 }
1588
1589 /**********************/
1590 /* USB host device info */
1591
1592 struct usb_class_info {
1593     int class;
1594     const char *class_name;
1595 };
1596
1597 static const struct usb_class_info usb_class_info[] = {
1598     { USB_CLASS_AUDIO, "Audio"},
1599     { USB_CLASS_COMM, "Communication"},
1600     { USB_CLASS_HID, "HID"},
1601     { USB_CLASS_HUB, "Hub" },
1602     { USB_CLASS_PHYSICAL, "Physical" },
1603     { USB_CLASS_PRINTER, "Printer" },
1604     { USB_CLASS_MASS_STORAGE, "Storage" },
1605     { USB_CLASS_CDC_DATA, "Data" },
1606     { USB_CLASS_APP_SPEC, "Application Specific" },
1607     { USB_CLASS_VENDOR_SPEC, "Vendor Specific" },
1608     { USB_CLASS_STILL_IMAGE, "Still Image" },
1609     { USB_CLASS_CSCID, "Smart Card" },
1610     { USB_CLASS_CONTENT_SEC, "Content Security" },
1611     { -1, NULL }
1612 };
1613
1614 static const char *usb_class_str(uint8_t class)
1615 {
1616     const struct usb_class_info *p;
1617     for(p = usb_class_info; p->class != -1; p++) {
1618         if (p->class == class)
1619             break;
1620     }
1621     return p->class_name;
1622 }
1623
1624 static void usb_info_device(int bus_num, int addr, int class_id,
1625                             int vendor_id, int product_id,
1626                             const char *product_name,
1627                             int speed)
1628 {
1629     const char *class_str, *speed_str;
1630
1631     switch(speed) {
1632     case USB_SPEED_LOW:
1633         speed_str = "1.5";
1634         break;
1635     case USB_SPEED_FULL:
1636         speed_str = "12";
1637         break;
1638     case USB_SPEED_HIGH:
1639         speed_str = "480";
1640         break;
1641     default:
1642         speed_str = "?";
1643         break;
1644     }
1645
1646     term_printf("  Device %d.%d, speed %s Mb/s\n",
1647                 bus_num, addr, speed_str);
1648     class_str = usb_class_str(class_id);
1649     if (class_str)
1650         term_printf("    %s:", class_str);
1651     else
1652         term_printf("    Class %02x:", class_id);
1653     term_printf(" USB device %04x:%04x", vendor_id, product_id);
1654     if (product_name[0] != '\0')
1655         term_printf(", %s", product_name);
1656     term_printf("\n");
1657 }
1658
1659 static int usb_host_info_device(void *opaque, int bus_num, int addr,
1660                                 int class_id,
1661                                 int vendor_id, int product_id,
1662                                 const char *product_name,
1663                                 int speed)
1664 {
1665     usb_info_device(bus_num, addr, class_id, vendor_id, product_id,
1666                     product_name, speed);
1667     return 0;
1668 }
1669
1670 static void dec2str(int val, char *str, size_t size)
1671 {
1672     if (val == -1)
1673         snprintf(str, size, "*");
1674     else
1675         snprintf(str, size, "%d", val);
1676 }
1677
1678 static void hex2str(int val, char *str, size_t size)
1679 {
1680     if (val == -1)
1681         snprintf(str, size, "*");
1682     else
1683         snprintf(str, size, "%x", val);
1684 }
1685
1686 void usb_host_info(void)
1687 {
1688     struct USBAutoFilter *f;
1689
1690     usb_host_scan(NULL, usb_host_info_device);
1691
1692     if (usb_auto_filter)
1693         term_printf("  Auto filters:\n");
1694     for (f = usb_auto_filter; f; f = f->next) {
1695         char bus[10], addr[10], vid[10], pid[10];
1696         dec2str(f->bus_num, bus, sizeof(bus));
1697         dec2str(f->addr, addr, sizeof(addr));
1698         hex2str(f->vendor_id, vid, sizeof(vid));
1699         hex2str(f->product_id, pid, sizeof(pid));
1700         term_printf("    Device %s.%s ID %s:%s\n", bus, addr, vid, pid);
1701     }
1702 }