[mirror_qemu.git] / hw / usb / dev-hub.c

/*
 * QEMU USB HUB emulation
 *
 * Copyright (c) 2005 Fabrice Bellard
 *
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 */
#include "qemu/osdep.h"
#include "qapi/error.h"
#include "qemu-common.h"
#include "trace.h"
#include "hw/usb.h"
#include "hw/usb/desc.h"
#include "qemu/error-report.h"

#define NUM_PORTS 8

typedef struct USBHubPort {
    USBPort port;
    uint16_t wPortStatus;
    uint16_t wPortChange;
} USBHubPort;

typedef struct USBHubState {
    USBDevice dev;
    USBEndpoint *intr;
    USBHubPort ports[NUM_PORTS];
} USBHubState;

#define TYPE_USB_HUB "usb-hub"
#define USB_HUB(obj) OBJECT_CHECK(USBHubState, (obj), TYPE_USB_HUB)

#define ClearHubFeature		(0x2000 | USB_REQ_CLEAR_FEATURE)
#define ClearPortFeature	(0x2300 | USB_REQ_CLEAR_FEATURE)
#define GetHubDescriptor	(0xa000 | USB_REQ_GET_DESCRIPTOR)
#define GetHubStatus		(0xa000 | USB_REQ_GET_STATUS)
#define GetPortStatus		(0xa300 | USB_REQ_GET_STATUS)
#define SetHubFeature		(0x2000 | USB_REQ_SET_FEATURE)
#define SetPortFeature		(0x2300 | USB_REQ_SET_FEATURE)

#define PORT_STAT_CONNECTION	0x0001
#define PORT_STAT_ENABLE	0x0002
#define PORT_STAT_SUSPEND	0x0004
#define PORT_STAT_OVERCURRENT	0x0008
#define PORT_STAT_RESET		0x0010
#define PORT_STAT_POWER		0x0100
#define PORT_STAT_LOW_SPEED	0x0200
#define PORT_STAT_HIGH_SPEED    0x0400
#define PORT_STAT_TEST          0x0800
#define PORT_STAT_INDICATOR     0x1000

#define PORT_STAT_C_CONNECTION	0x0001
#define PORT_STAT_C_ENABLE	0x0002
#define PORT_STAT_C_SUSPEND	0x0004
#define PORT_STAT_C_OVERCURRENT	0x0008
#define PORT_STAT_C_RESET	0x0010

#define PORT_CONNECTION	        0
#define PORT_ENABLE		1
#define PORT_SUSPEND		2
#define PORT_OVERCURRENT	3
#define PORT_RESET		4
#define PORT_POWER		8
#define PORT_LOWSPEED		9
#define PORT_HIGHSPEED		10
#define PORT_C_CONNECTION	16
#define PORT_C_ENABLE		17
#define PORT_C_SUSPEND		18
#define PORT_C_OVERCURRENT	19
#define PORT_C_RESET		20
#define PORT_TEST               21
#define PORT_INDICATOR          22

/* same as Linux kernel root hubs */

enum {
    STR_MANUFACTURER = 1,
    STR_PRODUCT,
    STR_SERIALNUMBER,
};

static const USBDescStrings desc_strings = {
    [STR_MANUFACTURER] = "QEMU",
    [STR_PRODUCT]      = "QEMU USB Hub",
    [STR_SERIALNUMBER] = "314159",
};

static const USBDescIface desc_iface_hub = {
    .bInterfaceNumber              = 0,
    .bNumEndpoints                 = 1,
    .bInterfaceClass               = USB_CLASS_HUB,
    .eps = (USBDescEndpoint[]) {
        {
            .bEndpointAddress      = USB_DIR_IN | 0x01,
            .bmAttributes          = USB_ENDPOINT_XFER_INT,
            .wMaxPacketSize        = 1 + (NUM_PORTS + 7) / 8,
            .bInterval             = 0xff,
        },
    }
};

static const USBDescDevice desc_device_hub = {
    .bcdUSB                        = 0x0110,
    .bDeviceClass                  = USB_CLASS_HUB,
    .bMaxPacketSize0               = 8,
    .bNumConfigurations            = 1,
    .confs = (USBDescConfig[]) {
        {
            .bNumInterfaces        = 1,
            .bConfigurationValue   = 1,
            .bmAttributes          = USB_CFG_ATT_ONE | USB_CFG_ATT_SELFPOWER |
                                     USB_CFG_ATT_WAKEUP,
            .nif = 1,
            .ifs = &desc_iface_hub,
        },
    },
};

static const USBDesc desc_hub = {
    .id = {
        .idVendor          = 0x0409,
        .idProduct         = 0x55aa,
        .bcdDevice         = 0x0101,
        .iManufacturer     = STR_MANUFACTURER,
        .iProduct          = STR_PRODUCT,
        .iSerialNumber     = STR_SERIALNUMBER,
    },
    .full = &desc_device_hub,
    .str  = desc_strings,
};

static const uint8_t qemu_hub_hub_descriptor[] =
{
	0x00,			/*  u8  bLength; patched in later */
	0x29,			/*  u8  bDescriptorType; Hub-descriptor */
	0x00,			/*  u8  bNbrPorts; (patched later) */
	0x0a,			/* u16  wHubCharacteristics; */
	0x00,			/*   (per-port OC, no power switching) */
	0x01,			/*  u8  bPwrOn2pwrGood; 2ms */
	0x00			/*  u8  bHubContrCurrent; 0 mA */

        /* DeviceRemovable and PortPwrCtrlMask patched in later */
};

static void usb_hub_attach(USBPort *port1)
{
    USBHubState *s = port1->opaque;
    USBHubPort *port = &s->ports[port1->index];

    trace_usb_hub_attach(s->dev.addr, port1->index + 1);
    port->wPortStatus |= PORT_STAT_CONNECTION;
    port->wPortChange |= PORT_STAT_C_CONNECTION;
    if (port->port.dev->speed == USB_SPEED_LOW) {
        port->wPortStatus |= PORT_STAT_LOW_SPEED;
    } else {
        port->wPortStatus &= ~PORT_STAT_LOW_SPEED;
    }
    usb_wakeup(s->intr, 0);
}

static void usb_hub_detach(USBPort *port1)
{
    USBHubState *s = port1->opaque;
    USBHubPort *port = &s->ports[port1->index];

    trace_usb_hub_detach(s->dev.addr, port1->index + 1);
    usb_wakeup(s->intr, 0);

    /* Let upstream know the device on this port is gone */
    s->dev.port->ops->child_detach(s->dev.port, port1->dev);

    port->wPortStatus &= ~PORT_STAT_CONNECTION;
    port->wPortChange |= PORT_STAT_C_CONNECTION;
    if (port->wPortStatus & PORT_STAT_ENABLE) {
        port->wPortStatus &= ~PORT_STAT_ENABLE;
        port->wPortChange |= PORT_STAT_C_ENABLE;
    }
    usb_wakeup(s->intr, 0);
}

static void usb_hub_child_detach(USBPort *port1, USBDevice *child)
{
    USBHubState *s = port1->opaque;

    /* Pass along upstream */
    s->dev.port->ops->child_detach(s->dev.port, child);
}

static void usb_hub_wakeup(USBPort *port1)
{
    USBHubState *s = port1->opaque;
    USBHubPort *port = &s->ports[port1->index];

    if (port->wPortStatus & PORT_STAT_SUSPEND) {
        port->wPortChange |= PORT_STAT_C_SUSPEND;
        usb_wakeup(s->intr, 0);
    }
}

static void usb_hub_complete(USBPort *port, USBPacket *packet)
{
    USBHubState *s = port->opaque;

    /*
     * Just pass it along upstream for now.
     *
     * If we ever implement usb 2.0 split transactions this will
     * become a little more complicated ...
     *
     * Can't use usb_packet_complete() here because packet->owner is
     * cleared already, go call the ->complete() callback directly
     * instead.
     */
    s->dev.port->ops->complete(s->dev.port, packet);
}

static USBDevice *usb_hub_find_device(USBDevice *dev, uint8_t addr)
{
    USBHubState *s = USB_HUB(dev);
    USBHubPort *port;
    USBDevice *downstream;
    int i;

    for (i = 0; i < NUM_PORTS; i++) {
        port = &s->ports[i];
        if (!(port->wPortStatus & PORT_STAT_ENABLE)) {
            continue;
        }
        downstream = usb_find_device(&port->port, addr);
        if (downstream != NULL) {
            return downstream;
        }
    }
    return NULL;
}

static void usb_hub_handle_reset(USBDevice *dev)
{
    USBHubState *s = USB_HUB(dev);
    USBHubPort *port;
    int i;

    trace_usb_hub_reset(s->dev.addr);
    for (i = 0; i < NUM_PORTS; i++) {
        port = s->ports + i;
        port->wPortStatus = PORT_STAT_POWER;
        port->wPortChange = 0;
        if (port->port.dev && port->port.dev->attached) {
            port->wPortStatus |= PORT_STAT_CONNECTION;
            port->wPortChange |= PORT_STAT_C_CONNECTION;
            if (port->port.dev->speed == USB_SPEED_LOW) {
                port->wPortStatus |= PORT_STAT_LOW_SPEED;
            }
        }
    }
}

static const char *feature_name(int feature)
{
    static const char *name[] = {
        [PORT_CONNECTION]    = "connection",
        [PORT_ENABLE]        = "enable",
        [PORT_SUSPEND]       = "suspend",
        [PORT_OVERCURRENT]   = "overcurrent",
        [PORT_RESET]         = "reset",
        [PORT_POWER]         = "power",
        [PORT_LOWSPEED]      = "lowspeed",
        [PORT_HIGHSPEED]     = "highspeed",
        [PORT_C_CONNECTION]  = "change connection",
        [PORT_C_ENABLE]      = "change enable",
        [PORT_C_SUSPEND]     = "change suspend",
        [PORT_C_OVERCURRENT] = "change overcurrent",
        [PORT_C_RESET]       = "change reset",
        [PORT_TEST]          = "test",
        [PORT_INDICATOR]     = "indicator",
    };
    if (feature < 0 || feature >= ARRAY_SIZE(name)) {
        return "?";
    }
    return name[feature] ?: "?";
}

static void usb_hub_handle_control(USBDevice *dev, USBPacket *p,
               int request, int value, int index, int length, uint8_t *data)
{
    USBHubState *s = (USBHubState *)dev;
    int ret;

    trace_usb_hub_control(s->dev.addr, request, value, index, length);

    ret = usb_desc_handle_control(dev, p, request, value, index, length, data);
    if (ret >= 0) {
        return;
    }

    switch(request) {
    case EndpointOutRequest | USB_REQ_CLEAR_FEATURE:
        if (value == 0 && index != 0x81) { /* clear ep halt */
            goto fail;
        }
        break;
        /* usb specific requests */
    case GetHubStatus:
        data[0] = 0;
        data[1] = 0;
        data[2] = 0;
        data[3] = 0;
        p->actual_length = 4;
        break;
    case GetPortStatus:
        {
            unsigned int n = index - 1;
            USBHubPort *port;
            if (n >= NUM_PORTS) {
                goto fail;
            }
            port = &s->ports[n];
            trace_usb_hub_get_port_status(s->dev.addr, index,
                                          port->wPortStatus,
                                          port->wPortChange);
            data[0] = port->wPortStatus;
            data[1] = port->wPortStatus >> 8;
            data[2] = port->wPortChange;
            data[3] = port->wPortChange >> 8;
            p->actual_length = 4;
        }
        break;
    case SetHubFeature:
    case ClearHubFeature:
        if (value != 0 && value != 1) {
            goto fail;
        }
        break;
    case SetPortFeature:
        {
            unsigned int n = index - 1;
            USBHubPort *port;
            USBDevice *dev;

            trace_usb_hub_set_port_feature(s->dev.addr, index,
                                           feature_name(value));

            if (n >= NUM_PORTS) {
                goto fail;
            }
            port = &s->ports[n];
            dev = port->port.dev;
            switch(value) {
            case PORT_SUSPEND:
                port->wPortStatus |= PORT_STAT_SUSPEND;
                break;
            case PORT_RESET:
                if (dev && dev->attached) {
                    usb_device_reset(dev);
                    port->wPortChange |= PORT_STAT_C_RESET;
                    /* set enable bit */
                    port->wPortStatus |= PORT_STAT_ENABLE;
                    usb_wakeup(s->intr, 0);
                }
                break;
            case PORT_POWER:
                break;
            default:
                goto fail;
            }
        }
        break;
    case ClearPortFeature:
        {
            unsigned int n = index - 1;
            USBHubPort *port;

            trace_usb_hub_clear_port_feature(s->dev.addr, index,
                                             feature_name(value));

            if (n >= NUM_PORTS) {
                goto fail;
            }
            port = &s->ports[n];
            switch(value) {
            case PORT_ENABLE:
                port->wPortStatus &= ~PORT_STAT_ENABLE;
                break;
            case PORT_C_ENABLE:
                port->wPortChange &= ~PORT_STAT_C_ENABLE;
                break;
            case PORT_SUSPEND:
                port->wPortStatus &= ~PORT_STAT_SUSPEND;
                break;
            case PORT_C_SUSPEND:
                port->wPortChange &= ~PORT_STAT_C_SUSPEND;
                break;
            case PORT_C_CONNECTION:
                port->wPortChange &= ~PORT_STAT_C_CONNECTION;
                break;
            case PORT_C_OVERCURRENT:
                port->wPortChange &= ~PORT_STAT_C_OVERCURRENT;
                break;
            case PORT_C_RESET:
                port->wPortChange &= ~PORT_STAT_C_RESET;
                break;
            default:
                goto fail;
            }
        }
        break;
    case GetHubDescriptor:
        {
            unsigned int n, limit, var_hub_size = 0;
            memcpy(data, qemu_hub_hub_descriptor,
                   sizeof(qemu_hub_hub_descriptor));
            data[2] = NUM_PORTS;

            /* fill DeviceRemovable bits */
            limit = ((NUM_PORTS + 1 + 7) / 8) + 7;
            for (n = 7; n < limit; n++) {
                data[n] = 0x00;
                var_hub_size++;
            }

            /* fill PortPwrCtrlMask bits */
            limit = limit + ((NUM_PORTS + 7) / 8);
            for (;n < limit; n++) {
                data[n] = 0xff;
                var_hub_size++;
            }

            p->actual_length = sizeof(qemu_hub_hub_descriptor) + var_hub_size;
            data[0] = p->actual_length;
            break;
        }
    default:
    fail:
        p->status = USB_RET_STALL;
        break;
    }
}

static void usb_hub_handle_data(USBDevice *dev, USBPacket *p)
{
    USBHubState *s = (USBHubState *)dev;

    switch(p->pid) {
    case USB_TOKEN_IN:
        if (p->ep->nr == 1) {
            USBHubPort *port;
            unsigned int status;
            uint8_t buf[4];
            int i, n;
            n = (NUM_PORTS + 1 + 7) / 8;
            if (p->iov.size == 1) { /* FreeBSD workaround */
                n = 1;
            } else if (n > p->iov.size) {
                p->status = USB_RET_BABBLE;
                return;
            }
            status = 0;
            for(i = 0; i < NUM_PORTS; i++) {
                port = &s->ports[i];
                if (port->wPortChange)
                    status |= (1 << (i + 1));
            }
            if (status != 0) {
                trace_usb_hub_status_report(s->dev.addr, status);
                for(i = 0; i < n; i++) {
                    buf[i] = status >> (8 * i);
                }
                usb_packet_copy(p, buf, n);
            } else {
                p->status = USB_RET_NAK; /* usb11 11.13.1 */
            }
        } else {
            goto fail;
        }
        break;
    case USB_TOKEN_OUT:
    default:
    fail:
        p->status = USB_RET_STALL;
        break;
    }
}

static void usb_hub_unrealize(USBDevice *dev, Error **errp)
{
    USBHubState *s = (USBHubState *)dev;
    int i;

    for (i = 0; i < NUM_PORTS; i++) {
        usb_unregister_port(usb_bus_from_device(dev),
                            &s->ports[i].port);
    }
}

static USBPortOps usb_hub_port_ops = {
    .attach = usb_hub_attach,
    .detach = usb_hub_detach,
    .child_detach = usb_hub_child_detach,
    .wakeup = usb_hub_wakeup,
    .complete = usb_hub_complete,
};

static void usb_hub_realize(USBDevice *dev, Error **errp)
{
    USBHubState *s = USB_HUB(dev);
    USBHubPort *port;
    int i;

    if (dev->port->hubcount == 5) {
        error_setg(errp, "usb hub chain too deep");
        return;
    }

    usb_desc_create_serial(dev);
    usb_desc_init(dev);
    s->intr = usb_ep_get(dev, USB_TOKEN_IN, 1);
    for (i = 0; i < NUM_PORTS; i++) {
        port = &s->ports[i];
        usb_register_port(usb_bus_from_device(dev),
                          &port->port, s, i, &usb_hub_port_ops,
                          USB_SPEED_MASK_LOW | USB_SPEED_MASK_FULL);
        usb_port_location(&port->port, dev->port, i+1);
    }
    usb_hub_handle_reset(dev);
}

static const VMStateDescription vmstate_usb_hub_port = {
    .name = "usb-hub-port",
    .version_id = 1,
    .minimum_version_id = 1,
    .fields = (VMStateField[]) {
        VMSTATE_UINT16(wPortStatus, USBHubPort),
        VMSTATE_UINT16(wPortChange, USBHubPort),
        VMSTATE_END_OF_LIST()
    }
};

static const VMStateDescription vmstate_usb_hub = {
    .name = "usb-hub",
    .version_id = 1,
    .minimum_version_id = 1,
    .fields = (VMStateField[]) {
        VMSTATE_USB_DEVICE(dev, USBHubState),
        VMSTATE_STRUCT_ARRAY(ports, USBHubState, NUM_PORTS, 0,
                             vmstate_usb_hub_port, USBHubPort),
        VMSTATE_END_OF_LIST()
    }
};

static void usb_hub_class_initfn(ObjectClass *klass, void *data)
{
    DeviceClass *dc = DEVICE_CLASS(klass);
    USBDeviceClass *uc = USB_DEVICE_CLASS(klass);

    uc->realize        = usb_hub_realize;
    uc->product_desc   = "QEMU USB Hub";
    uc->usb_desc       = &desc_hub;
    uc->find_device    = usb_hub_find_device;
    uc->handle_reset   = usb_hub_handle_reset;
    uc->handle_control = usb_hub_handle_control;
    uc->handle_data    = usb_hub_handle_data;
    uc->unrealize      = usb_hub_unrealize;
    set_bit(DEVICE_CATEGORY_BRIDGE, dc->categories);
    dc->fw_name = "hub";
    dc->vmsd = &vmstate_usb_hub;
}

static const TypeInfo hub_info = {
    .name          = TYPE_USB_HUB,
    .parent        = TYPE_USB_DEVICE,
    .instance_size = sizeof(USBHubState),
    .class_init    = usb_hub_class_initfn,
};

static void usb_hub_register_types(void)
{
    type_register_static(&hub_info);
}

type_init(usb_hub_register_types)
Commit	Line	Data
72899afc FB	1	/*
	2	* QEMU USB HUB emulation
	3	*
	4	* Copyright (c) 2005 Fabrice Bellard
5fafdf24	5	*
72899afc FB	6	* Permission is hereby granted, free of charge, to any person obtaining a copy
	7	* of this software and associated documentation files (the "Software"), to deal
	8	* in the Software without restriction, including without limitation the rights
	9	* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
	10	* copies of the Software, and to permit persons to whom the Software is
	11	* furnished to do so, subject to the following conditions:
	12	*
	13	* The above copyright notice and this permission notice shall be included in
	14	* all copies or substantial portions of the Software.
	15	*
	16	* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
	17	* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
	18	* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
	19	* THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
	20	* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
	21	* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
	22	* THE SOFTWARE.
	23	*/
e532b2e0	24	#include "qemu/osdep.h"
da34e65c	25	#include "qapi/error.h"
87ecb68b	26	#include "qemu-common.h"
529f8f9f	27	#include "trace.h"
f1ae32a1 GH	28	#include "hw/usb.h"
f1ae32a1 GH	29	#include "hw/usb/desc.h"
c24e4aac	30	#include "qemu/error-report.h"
72899afc	31
062651c7	32	#define NUM_PORTS 8
72899afc FB	33
	34	typedef struct USBHubPort {
	35	USBPort port;
	36	uint16_t wPortStatus;
	37	uint16_t wPortChange;
	38	} USBHubPort;
	39
	40	typedef struct USBHubState {
	41	USBDevice dev;
7567b51f	42	USBEndpoint *intr;
062651c7	43	USBHubPort ports[NUM_PORTS];
72899afc FB	44	} USBHubState;
72899afc FB	45
e81b13ad GA	46	#define TYPE_USB_HUB "usb-hub"
	47	#define USB_HUB(obj) OBJECT_CHECK(USBHubState, (obj), TYPE_USB_HUB)
	48
72899afc FB	49	#define ClearHubFeature (0x2000 \| USB_REQ_CLEAR_FEATURE)
	50	#define ClearPortFeature (0x2300 \| USB_REQ_CLEAR_FEATURE)
	51	#define GetHubDescriptor (0xa000 \| USB_REQ_GET_DESCRIPTOR)
	52	#define GetHubStatus (0xa000 \| USB_REQ_GET_STATUS)
	53	#define GetPortStatus (0xa300 \| USB_REQ_GET_STATUS)
	54	#define SetHubFeature (0x2000 \| USB_REQ_SET_FEATURE)
	55	#define SetPortFeature (0x2300 \| USB_REQ_SET_FEATURE)
	56
	57	#define PORT_STAT_CONNECTION 0x0001
	58	#define PORT_STAT_ENABLE 0x0002
	59	#define PORT_STAT_SUSPEND 0x0004
	60	#define PORT_STAT_OVERCURRENT 0x0008
	61	#define PORT_STAT_RESET 0x0010
	62	#define PORT_STAT_POWER 0x0100
	63	#define PORT_STAT_LOW_SPEED 0x0200
	64	#define PORT_STAT_HIGH_SPEED 0x0400
	65	#define PORT_STAT_TEST 0x0800
	66	#define PORT_STAT_INDICATOR 0x1000
	67
	68	#define PORT_STAT_C_CONNECTION 0x0001
	69	#define PORT_STAT_C_ENABLE 0x0002
	70	#define PORT_STAT_C_SUSPEND 0x0004
	71	#define PORT_STAT_C_OVERCURRENT 0x0008
	72	#define PORT_STAT_C_RESET 0x0010
	73
	74	#define PORT_CONNECTION 0
	75	#define PORT_ENABLE 1
	76	#define PORT_SUSPEND 2
	77	#define PORT_OVERCURRENT 3
	78	#define PORT_RESET 4
	79	#define PORT_POWER 8
	80	#define PORT_LOWSPEED 9
	81	#define PORT_HIGHSPEED 10
	82	#define PORT_C_CONNECTION 16
	83	#define PORT_C_ENABLE 17
	84	#define PORT_C_SUSPEND 18
	85	#define PORT_C_OVERCURRENT 19
	86	#define PORT_C_RESET 20
	87	#define PORT_TEST 21
	88	#define PORT_INDICATOR 22
	89
	90	/* same as Linux kernel root hubs */
	91
062651c7 GH	92	enum {
	93	STR_MANUFACTURER = 1,
	94	STR_PRODUCT,
	95	STR_SERIALNUMBER,
	96	};
	97
	98	static const USBDescStrings desc_strings = {
93bfef4c	99	[STR_MANUFACTURER] = "QEMU",
062651c7 GH	100	[STR_PRODUCT] = "QEMU USB Hub",
	101	[STR_SERIALNUMBER] = "314159",
	102	};
	103
	104	static const USBDescIface desc_iface_hub = {
	105	.bInterfaceNumber = 0,
	106	.bNumEndpoints = 1,
	107	.bInterfaceClass = USB_CLASS_HUB,
	108	.eps = (USBDescEndpoint[]) {
	109	{
	110	.bEndpointAddress = USB_DIR_IN \| 0x01,
	111	.bmAttributes = USB_ENDPOINT_XFER_INT,
	112	.wMaxPacketSize = 1 + (NUM_PORTS + 7) / 8,
	113	.bInterval = 0xff,
	114	},
	115	}
	116	};
	117
	118	static const USBDescDevice desc_device_hub = {
	119	.bcdUSB = 0x0110,
	120	.bDeviceClass = USB_CLASS_HUB,
	121	.bMaxPacketSize0 = 8,
	122	.bNumConfigurations = 1,
	123	.confs = (USBDescConfig[]) {
	124	{
	125	.bNumInterfaces = 1,
	126	.bConfigurationValue = 1,
bd93976a PK	127	.bmAttributes = USB_CFG_ATT_ONE \| USB_CFG_ATT_SELFPOWER \|
bd93976a PK	128	USB_CFG_ATT_WAKEUP,
add75088	129	.nif = 1,
062651c7 GH	130	.ifs = &desc_iface_hub,
	131	},
	132	},
	133	};
	134
	135	static const USBDesc desc_hub = {
	136	.id = {
db80358a RT	137	.idVendor = 0x0409,
db80358a RT	138	.idProduct = 0x55aa,
062651c7 GH	139	.bcdDevice = 0x0101,
	140	.iManufacturer = STR_MANUFACTURER,
	141	.iProduct = STR_PRODUCT,
	142	.iSerialNumber = STR_SERIALNUMBER,
	143	},
	144	.full = &desc_device_hub,
	145	.str = desc_strings,
	146	};
	147
72899afc FB	148	static const uint8_t qemu_hub_hub_descriptor[] =
72899afc FB	149	{
67f36560	150	0x00, /* u8 bLength; patched in later */
72899afc FB	151	0x29, /* u8 bDescriptorType; Hub-descriptor */
	152	0x00, /* u8 bNbrPorts; (patched later) */
	153	0x0a, /* u16 wHubCharacteristics; */
	154	0x00, /* (per-port OC, no power switching) */
	155	0x01, /* u8 bPwrOn2pwrGood; 2ms */
985d1742 FB	156	0x00 /* u8 bHubContrCurrent; 0 mA */
	157
	158	/* DeviceRemovable and PortPwrCtrlMask patched in later */
72899afc FB	159	};
72899afc FB	160
618c169b	161	static void usb_hub_attach(USBPort *port1)
72899afc FB	162	{
	163	USBHubState *s = port1->opaque;
	164	USBHubPort *port = &s->ports[port1->index];
3b46e624	165
529f8f9f	166	trace_usb_hub_attach(s->dev.addr, port1->index + 1);
618c169b GH	167	port->wPortStatus \|= PORT_STAT_CONNECTION;
	168	port->wPortChange \|= PORT_STAT_C_CONNECTION;
	169	if (port->port.dev->speed == USB_SPEED_LOW) {
	170	port->wPortStatus \|= PORT_STAT_LOW_SPEED;
72899afc	171	} else {
618c169b GH	172	port->wPortStatus &= ~PORT_STAT_LOW_SPEED;
618c169b GH	173	}
8550a02d	174	usb_wakeup(s->intr, 0);
618c169b GH	175	}
	176
	177	static void usb_hub_detach(USBPort *port1)
	178	{
	179	USBHubState *s = port1->opaque;
	180	USBHubPort *port = &s->ports[port1->index];
	181
529f8f9f	182	trace_usb_hub_detach(s->dev.addr, port1->index + 1);
8550a02d	183	usb_wakeup(s->intr, 0);
be35cbbc	184
4706ab6c HG	185	/* Let upstream know the device on this port is gone */
	186	s->dev.port->ops->child_detach(s->dev.port, port1->dev);
	187
618c169b GH	188	port->wPortStatus &= ~PORT_STAT_CONNECTION;
	189	port->wPortChange \|= PORT_STAT_C_CONNECTION;
	190	if (port->wPortStatus & PORT_STAT_ENABLE) {
	191	port->wPortStatus &= ~PORT_STAT_ENABLE;
	192	port->wPortChange \|= PORT_STAT_C_ENABLE;
72899afc	193	}
8550a02d	194	usb_wakeup(s->intr, 0);
72899afc FB	195	}
72899afc FB	196
4706ab6c HG	197	static void usb_hub_child_detach(USBPort port1, USBDevice child)
	198	{
	199	USBHubState *s = port1->opaque;
	200
	201	/* Pass along upstream */
	202	s->dev.port->ops->child_detach(s->dev.port, child);
	203	}
	204
d47e59b8	205	static void usb_hub_wakeup(USBPort *port1)
34239c7b	206	{
d47e59b8 HG	207	USBHubState *s = port1->opaque;
d47e59b8 HG	208	USBHubPort *port = &s->ports[port1->index];
34239c7b GH	209
	210	if (port->wPortStatus & PORT_STAT_SUSPEND) {
	211	port->wPortChange \|= PORT_STAT_C_SUSPEND;
8550a02d	212	usb_wakeup(s->intr, 0);
34239c7b GH	213	}
	214	}
	215
d47e59b8	216	static void usb_hub_complete(USBPort port, USBPacket packet)
13a9a0d3	217	{
d47e59b8	218	USBHubState *s = port->opaque;
13a9a0d3 GH	219
	220	/*
	221	* Just pass it along upstream for now.
	222	*
80cf7cf7	223	* If we ever implement usb 2.0 split transactions this will
13a9a0d3	224	* become a little more complicated ...
80cf7cf7 GH	225	*
	226	* Can't use usb_packet_complete() here because packet->owner is
	227	* cleared already, go call the ->complete() callback directly
	228	* instead.
13a9a0d3	229	*/
80cf7cf7	230	s->dev.port->ops->complete(s->dev.port, packet);
13a9a0d3 GH	231	}
13a9a0d3 GH	232
06c75088 GH	233	static USBDevice usb_hub_find_device(USBDevice dev, uint8_t addr)
06c75088 GH	234	{
e81b13ad	235	USBHubState *s = USB_HUB(dev);
06c75088 GH	236	USBHubPort *port;
	237	USBDevice *downstream;
	238	int i;
	239
	240	for (i = 0; i < NUM_PORTS; i++) {
	241	port = &s->ports[i];
	242	if (!(port->wPortStatus & PORT_STAT_ENABLE)) {
	243	continue;
	244	}
	245	downstream = usb_find_device(&port->port, addr);
	246	if (downstream != NULL) {
	247	return downstream;
	248	}
	249	}
	250	return NULL;
	251	}
	252
059809e4	253	static void usb_hub_handle_reset(USBDevice *dev)
72899afc	254	{
e81b13ad	255	USBHubState *s = USB_HUB(dev);
20d183b6 GH	256	USBHubPort *port;
	257	int i;
	258
529f8f9f	259	trace_usb_hub_reset(s->dev.addr);
20d183b6 GH	260	for (i = 0; i < NUM_PORTS; i++) {
	261	port = s->ports + i;
	262	port->wPortStatus = PORT_STAT_POWER;
	263	port->wPortChange = 0;
	264	if (port->port.dev && port->port.dev->attached) {
	265	port->wPortStatus \|= PORT_STAT_CONNECTION;
	266	port->wPortChange \|= PORT_STAT_C_CONNECTION;
	267	if (port->port.dev->speed == USB_SPEED_LOW) {
	268	port->wPortStatus \|= PORT_STAT_LOW_SPEED;
	269	}
	270	}
	271	}
72899afc FB	272	}
72899afc FB	273
529f8f9f GH	274	static const char *feature_name(int feature)
	275	{
	276	static const char *name[] = {
	277	[PORT_CONNECTION] = "connection",
	278	[PORT_ENABLE] = "enable",
	279	[PORT_SUSPEND] = "suspend",
	280	[PORT_OVERCURRENT] = "overcurrent",
	281	[PORT_RESET] = "reset",
	282	[PORT_POWER] = "power",
	283	[PORT_LOWSPEED] = "lowspeed",
	284	[PORT_HIGHSPEED] = "highspeed",
	285	[PORT_C_CONNECTION] = "change connection",
	286	[PORT_C_ENABLE] = "change enable",
	287	[PORT_C_SUSPEND] = "change suspend",
	288	[PORT_C_OVERCURRENT] = "change overcurrent",
	289	[PORT_C_RESET] = "change reset",
	290	[PORT_TEST] = "test",
	291	[PORT_INDICATOR] = "indicator",
	292	};
	293	if (feature < 0 \|\| feature >= ARRAY_SIZE(name)) {
	294	return "?";
	295	}
	296	return name[feature] ?: "?";
	297	}
	298
9a77a0f5	299	static void usb_hub_handle_control(USBDevice dev, USBPacket p,
007fd62f	300	int request, int value, int index, int length, uint8_t *data)
72899afc FB	301	{
	302	USBHubState s = (USBHubState )dev;
	303	int ret;
	304
529f8f9f GH	305	trace_usb_hub_control(s->dev.addr, request, value, index, length);
529f8f9f GH	306
007fd62f	307	ret = usb_desc_handle_control(dev, p, request, value, index, length, data);
062651c7	308	if (ret >= 0) {
9a77a0f5	309	return;
062651c7 GH	310	}
062651c7 GH	311
72899afc	312	switch(request) {
985d1742 FB	313	case EndpointOutRequest \| USB_REQ_CLEAR_FEATURE:
	314	if (value == 0 && index != 0x81) { /* clear ep halt */
	315	goto fail;
	316	}
985d1742	317	break;
72899afc FB	318	/* usb specific requests */
	319	case GetHubStatus:
	320	data[0] = 0;
	321	data[1] = 0;
	322	data[2] = 0;
	323	data[3] = 0;
9a77a0f5	324	p->actual_length = 4;
72899afc FB	325	break;
	326	case GetPortStatus:
	327	{
	328	unsigned int n = index - 1;
	329	USBHubPort *port;
062651c7	330	if (n >= NUM_PORTS) {
72899afc	331	goto fail;
062651c7	332	}
72899afc	333	port = &s->ports[n];
529f8f9f GH	334	trace_usb_hub_get_port_status(s->dev.addr, index,
	335	port->wPortStatus,
	336	port->wPortChange);
72899afc FB	337	data[0] = port->wPortStatus;
	338	data[1] = port->wPortStatus >> 8;
	339	data[2] = port->wPortChange;
	340	data[3] = port->wPortChange >> 8;
9a77a0f5	341	p->actual_length = 4;
72899afc FB	342	}
	343	break;
	344	case SetHubFeature:
	345	case ClearHubFeature:
9a77a0f5	346	if (value != 0 && value != 1) {
72899afc FB	347	goto fail;
72899afc FB	348	}
72899afc FB	349	break;
	350	case SetPortFeature:
	351	{
	352	unsigned int n = index - 1;
	353	USBHubPort *port;
	354	USBDevice *dev;
529f8f9f GH	355
	356	trace_usb_hub_set_port_feature(s->dev.addr, index,
	357	feature_name(value));
	358
062651c7	359	if (n >= NUM_PORTS) {
72899afc	360	goto fail;
062651c7	361	}
72899afc FB	362	port = &s->ports[n];
	363	dev = port->port.dev;
	364	switch(value) {
	365	case PORT_SUSPEND:
	366	port->wPortStatus \|= PORT_STAT_SUSPEND;
	367	break;
	368	case PORT_RESET:
3393bc10	369	if (dev && dev->attached) {
d28f4e2d	370	usb_device_reset(dev);
72899afc FB	371	port->wPortChange \|= PORT_STAT_C_RESET;
72899afc FB	372	/* set enable bit */
72899afc	373	port->wPortStatus \|= PORT_STAT_ENABLE;
8550a02d	374	usb_wakeup(s->intr, 0);
72899afc FB	375	}
	376	break;
	377	case PORT_POWER:
	378	break;
	379	default:
	380	goto fail;
	381	}
72899afc FB	382	}
	383	break;
	384	case ClearPortFeature:
	385	{
	386	unsigned int n = index - 1;
	387	USBHubPort *port;
d4c4e6fd	388
529f8f9f GH	389	trace_usb_hub_clear_port_feature(s->dev.addr, index,
	390	feature_name(value));
	391
062651c7	392	if (n >= NUM_PORTS) {
72899afc	393	goto fail;
062651c7	394	}
72899afc	395	port = &s->ports[n];
72899afc FB	396	switch(value) {
	397	case PORT_ENABLE:
	398	port->wPortStatus &= ~PORT_STAT_ENABLE;
	399	break;
	400	case PORT_C_ENABLE:
	401	port->wPortChange &= ~PORT_STAT_C_ENABLE;
	402	break;
	403	case PORT_SUSPEND:
	404	port->wPortStatus &= ~PORT_STAT_SUSPEND;
	405	break;
	406	case PORT_C_SUSPEND:
	407	port->wPortChange &= ~PORT_STAT_C_SUSPEND;
	408	break;
	409	case PORT_C_CONNECTION:
	410	port->wPortChange &= ~PORT_STAT_C_CONNECTION;
	411	break;
	412	case PORT_C_OVERCURRENT:
	413	port->wPortChange &= ~PORT_STAT_C_OVERCURRENT;
	414	break;
	415	case PORT_C_RESET:
	416	port->wPortChange &= ~PORT_STAT_C_RESET;
	417	break;
	418	default:
	419	goto fail;
	420	}
72899afc FB	421	}
	422	break;
	423	case GetHubDescriptor:
985d1742 FB	424	{
985d1742 FB	425	unsigned int n, limit, var_hub_size = 0;
5fafdf24	426	memcpy(data, qemu_hub_hub_descriptor,
985d1742	427	sizeof(qemu_hub_hub_descriptor));
062651c7	428	data[2] = NUM_PORTS;
985d1742 FB	429
985d1742 FB	430	/* fill DeviceRemovable bits */
062651c7	431	limit = ((NUM_PORTS + 1 + 7) / 8) + 7;
985d1742 FB	432	for (n = 7; n < limit; n++) {
	433	data[n] = 0x00;
	434	var_hub_size++;
	435	}
	436
	437	/* fill PortPwrCtrlMask bits */
062651c7	438	limit = limit + ((NUM_PORTS + 7) / 8);
985d1742 FB	439	for (;n < limit; n++) {
	440	data[n] = 0xff;
	441	var_hub_size++;
	442	}
	443
9a77a0f5 HG	444	p->actual_length = sizeof(qemu_hub_hub_descriptor) + var_hub_size;
9a77a0f5 HG	445	data[0] = p->actual_length;
985d1742 FB	446	break;
985d1742 FB	447	}
72899afc FB	448	default:
72899afc FB	449	fail:
9a77a0f5	450	p->status = USB_RET_STALL;
72899afc FB	451	break;
72899afc FB	452	}
72899afc FB	453	}
72899afc FB	454
9a77a0f5	455	static void usb_hub_handle_data(USBDevice dev, USBPacket p)
72899afc FB	456	{
72899afc FB	457	USBHubState s = (USBHubState )dev;
72899afc	458
4d611c9a	459	switch(p->pid) {
72899afc	460	case USB_TOKEN_IN:
079d0b7f	461	if (p->ep->nr == 1) {
72899afc FB	462	USBHubPort *port;
72899afc FB	463	unsigned int status;
4f4321c1	464	uint8_t buf[4];
72899afc	465	int i, n;
062651c7	466	n = (NUM_PORTS + 1 + 7) / 8;
4f4321c1	467	if (p->iov.size == 1) { /* FreeBSD workaround */
985d1742	468	n = 1;
4f4321c1	469	} else if (n > p->iov.size) {
9a77a0f5 HG	470	p->status = USB_RET_BABBLE;
9a77a0f5 HG	471	return;
985d1742	472	}
72899afc	473	status = 0;
062651c7	474	for(i = 0; i < NUM_PORTS; i++) {
72899afc	475	port = &s->ports[i];
bdebd6ee	476	if (port->wPortChange)
72899afc FB	477	status \|= (1 << (i + 1));
	478	}
	479	if (status != 0) {
b8cbc137	480	trace_usb_hub_status_report(s->dev.addr, status);
72899afc	481	for(i = 0; i < n; i++) {
4f4321c1	482	buf[i] = status >> (8 * i);
72899afc	483	}
4f4321c1	484	usb_packet_copy(p, buf, n);
72899afc	485	} else {
9a77a0f5	486	p->status = USB_RET_NAK; /* usb11 11.13.1 */
72899afc FB	487	}
	488	} else {
	489	goto fail;
	490	}
	491	break;
	492	case USB_TOKEN_OUT:
	493	default:
	494	fail:
9a77a0f5	495	p->status = USB_RET_STALL;
72899afc FB	496	break;
72899afc FB	497	}
72899afc FB	498	}
72899afc FB	499
c4fe9700	500	static void usb_hub_unrealize(USBDevice dev, Error *errp)
059809e4 FB	501	{
059809e4 FB	502	USBHubState s = (USBHubState )dev;
a8e662b5	503	int i;
059809e4	504
062651c7	505	for (i = 0; i < NUM_PORTS; i++) {
a8e662b5 GH	506	usb_unregister_port(usb_bus_from_device(dev),
	507	&s->ports[i].port);
	508	}
059809e4 FB	509	}
059809e4 FB	510
0d86d2be GH	511	static USBPortOps usb_hub_port_ops = {
0d86d2be GH	512	.attach = usb_hub_attach,
618c169b	513	.detach = usb_hub_detach,
4706ab6c	514	.child_detach = usb_hub_child_detach,
34239c7b	515	.wakeup = usb_hub_wakeup,
13a9a0d3	516	.complete = usb_hub_complete,
0d86d2be GH	517	};
0d86d2be GH	518
f3f8c459	519	static void usb_hub_realize(USBDevice dev, Error *errp)
72899afc	520	{
e81b13ad	521	USBHubState *s = USB_HUB(dev);
72899afc FB	522	USBHubPort *port;
	523	int i;
	524
c24e4aac	525	if (dev->port->hubcount == 5) {
f3f8c459 GA	526	error_setg(errp, "usb hub chain too deep");
f3f8c459 GA	527	return;
c24e4aac GH	528	}
c24e4aac GH	529
9d55d1ad	530	usb_desc_create_serial(dev);
a980a065	531	usb_desc_init(dev);
7567b51f	532	s->intr = usb_ep_get(dev, USB_TOKEN_IN, 1);
062651c7	533	for (i = 0; i < NUM_PORTS; i++) {
72899afc	534	port = &s->ports[i];
a5d2f727	535	usb_register_port(usb_bus_from_device(dev),
ace1318b	536	&port->port, s, i, &usb_hub_port_ops,
843d4e0c	537	USB_SPEED_MASK_LOW \| USB_SPEED_MASK_FULL);
891fb2cd	538	usb_port_location(&port->port, dev->port, i+1);
72899afc	539	}
20d183b6	540	usb_hub_handle_reset(dev);
806b6024 GH	541	}
806b6024 GH	542
d1550090 GH	543	static const VMStateDescription vmstate_usb_hub_port = {
	544	.name = "usb-hub-port",
	545	.version_id = 1,
	546	.minimum_version_id = 1,
6e3d652a	547	.fields = (VMStateField[]) {
d1550090 GH	548	VMSTATE_UINT16(wPortStatus, USBHubPort),
	549	VMSTATE_UINT16(wPortChange, USBHubPort),
	550	VMSTATE_END_OF_LIST()
	551	}
	552	};
	553
	554	static const VMStateDescription vmstate_usb_hub = {
	555	.name = "usb-hub",
	556	.version_id = 1,
	557	.minimum_version_id = 1,
6e3d652a	558	.fields = (VMStateField[]) {
d1550090 GH	559	VMSTATE_USB_DEVICE(dev, USBHubState),
	560	VMSTATE_STRUCT_ARRAY(ports, USBHubState, NUM_PORTS, 0,
	561	vmstate_usb_hub_port, USBHubPort),
	562	VMSTATE_END_OF_LIST()
	563	}
	564	};
	565
39bffca2	566	static void usb_hub_class_initfn(ObjectClass klass, void data)
62aed765	567	{
39bffca2	568	DeviceClass *dc = DEVICE_CLASS(klass);
62aed765 AL	569	USBDeviceClass *uc = USB_DEVICE_CLASS(klass);
62aed765 AL	570
f3f8c459	571	uc->realize = usb_hub_realize;
62aed765 AL	572	uc->product_desc = "QEMU USB Hub";
62aed765 AL	573	uc->usb_desc = &desc_hub;
06c75088	574	uc->find_device = usb_hub_find_device;
62aed765 AL	575	uc->handle_reset = usb_hub_handle_reset;
	576	uc->handle_control = usb_hub_handle_control;
	577	uc->handle_data = usb_hub_handle_data;
c4fe9700	578	uc->unrealize = usb_hub_unrealize;
125ee0ed	579	set_bit(DEVICE_CATEGORY_BRIDGE, dc->categories);
39bffca2 AL	580	dc->fw_name = "hub";
39bffca2 AL	581	dc->vmsd = &vmstate_usb_hub;
62aed765 AL	582	}
62aed765 AL	583
8c43a6f0	584	static const TypeInfo hub_info = {
e81b13ad	585	.name = TYPE_USB_HUB,
39bffca2 AL	586	.parent = TYPE_USB_DEVICE,
	587	.instance_size = sizeof(USBHubState),
	588	.class_init = usb_hub_class_initfn,
806b6024 GH	589	};
806b6024 GH	590
83f7d43a	591	static void usb_hub_register_types(void)
806b6024	592	{
39bffca2	593	type_register_static(&hub_info);
72899afc	594	}
83f7d43a AF	595
83f7d43a AF	596	type_init(usb_hub_register_types)