[qemu.git] / hw / usb-hub.c

/*
 * QEMU USB HUB emulation
 *
 * Copyright (c) 2005 Fabrice Bellard
 *
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 */
#include "qemu-common.h"
#include "usb.h"
#include "usb-desc.h"

//#define DEBUG

#define NUM_PORTS 8

typedef struct USBHubPort {
    USBPort port;
    uint16_t wPortStatus;
    uint16_t wPortChange;
} USBHubPort;

typedef struct USBHubState {
    USBDevice dev;
    USBHubPort ports[NUM_PORTS];
} USBHubState;

#define ClearHubFeature		(0x2000 | USB_REQ_CLEAR_FEATURE)
#define ClearPortFeature	(0x2300 | USB_REQ_CLEAR_FEATURE)
#define GetHubDescriptor	(0xa000 | USB_REQ_GET_DESCRIPTOR)
#define GetHubStatus		(0xa000 | USB_REQ_GET_STATUS)
#define GetPortStatus		(0xa300 | USB_REQ_GET_STATUS)
#define SetHubFeature		(0x2000 | USB_REQ_SET_FEATURE)
#define SetPortFeature		(0x2300 | USB_REQ_SET_FEATURE)

#define PORT_STAT_CONNECTION	0x0001
#define PORT_STAT_ENABLE	0x0002
#define PORT_STAT_SUSPEND	0x0004
#define PORT_STAT_OVERCURRENT	0x0008
#define PORT_STAT_RESET		0x0010
#define PORT_STAT_POWER		0x0100
#define PORT_STAT_LOW_SPEED	0x0200
#define PORT_STAT_HIGH_SPEED    0x0400
#define PORT_STAT_TEST          0x0800
#define PORT_STAT_INDICATOR     0x1000

#define PORT_STAT_C_CONNECTION	0x0001
#define PORT_STAT_C_ENABLE	0x0002
#define PORT_STAT_C_SUSPEND	0x0004
#define PORT_STAT_C_OVERCURRENT	0x0008
#define PORT_STAT_C_RESET	0x0010

#define PORT_CONNECTION	        0
#define PORT_ENABLE		1
#define PORT_SUSPEND		2
#define PORT_OVERCURRENT	3
#define PORT_RESET		4
#define PORT_POWER		8
#define PORT_LOWSPEED		9
#define PORT_HIGHSPEED		10
#define PORT_C_CONNECTION	16
#define PORT_C_ENABLE		17
#define PORT_C_SUSPEND		18
#define PORT_C_OVERCURRENT	19
#define PORT_C_RESET		20
#define PORT_TEST               21
#define PORT_INDICATOR          22

/* same as Linux kernel root hubs */

enum {
    STR_MANUFACTURER = 1,
    STR_PRODUCT,
    STR_SERIALNUMBER,
};

static const USBDescStrings desc_strings = {
    [STR_MANUFACTURER] = "QEMU " QEMU_VERSION,
    [STR_PRODUCT]      = "QEMU USB Hub",
    [STR_SERIALNUMBER] = "314159",
};

static const USBDescIface desc_iface_hub = {
    .bInterfaceNumber              = 0,
    .bNumEndpoints                 = 1,
    .bInterfaceClass               = USB_CLASS_HUB,
    .eps = (USBDescEndpoint[]) {
        {
            .bEndpointAddress      = USB_DIR_IN | 0x01,
            .bmAttributes          = USB_ENDPOINT_XFER_INT,
            .wMaxPacketSize        = 1 + (NUM_PORTS + 7) / 8,
            .bInterval             = 0xff,
        },
    }
};

static const USBDescDevice desc_device_hub = {
    .bcdUSB                        = 0x0110,
    .bDeviceClass                  = USB_CLASS_HUB,
    .bMaxPacketSize0               = 8,
    .bNumConfigurations            = 1,
    .confs = (USBDescConfig[]) {
        {
            .bNumInterfaces        = 1,
            .bConfigurationValue   = 1,
            .bmAttributes          = 0xe0,
            .ifs = &desc_iface_hub,
        },
    },
};

static const USBDesc desc_hub = {
    .id = {
        .idVendor          = 0,
        .idProduct         = 0,
        .bcdDevice         = 0x0101,
        .iManufacturer     = STR_MANUFACTURER,
        .iProduct          = STR_PRODUCT,
        .iSerialNumber     = STR_SERIALNUMBER,
    },
    .full = &desc_device_hub,
    .str  = desc_strings,
};

static const uint8_t qemu_hub_dev_descriptor[] = {
	0x12,       /*  u8 bLength; */
	0x01,       /*  u8 bDescriptorType; Device */
	0x10, 0x01, /*  u16 bcdUSB; v1.1 */

	0x09,	    /*  u8  bDeviceClass; HUB_CLASSCODE */
	0x00,	    /*  u8  bDeviceSubClass; */
	0x00,       /*  u8  bDeviceProtocol; [ low/full speeds only ] */
	0x08,       /*  u8  bMaxPacketSize0; 8 Bytes */

	0x00, 0x00, /*  u16 idVendor; */
 	0x00, 0x00, /*  u16 idProduct; */
	0x01, 0x01, /*  u16 bcdDevice */

	0x03,       /*  u8  iManufacturer; */
	0x02,       /*  u8  iProduct; */
	0x01,       /*  u8  iSerialNumber; */
	0x01        /*  u8  bNumConfigurations; */
};

/* XXX: patch interrupt size */
static const uint8_t qemu_hub_config_descriptor[] = {

	/* one configuration */
	0x09,       /*  u8  bLength; */
	0x02,       /*  u8  bDescriptorType; Configuration */
	0x19, 0x00, /*  u16 wTotalLength; */
	0x01,       /*  u8  bNumInterfaces; (1) */
	0x01,       /*  u8  bConfigurationValue; */
	0x00,       /*  u8  iConfiguration; */
	0xe0,       /*  u8  bmAttributes;
				 Bit 7: must be set,
				     6: Self-powered,
				     5: Remote wakeup,
				     4..0: resvd */
	0x00,       /*  u8  MaxPower; */

	/* USB 1.1:
	 * USB 2.0, single TT organization (mandatory):
	 *	one interface, protocol 0
	 *
	 * USB 2.0, multiple TT organization (optional):
	 *	two interfaces, protocols 1 (like single TT)
	 *	and 2 (multiple TT mode) ... config is
	 *	sometimes settable
	 *	NOT IMPLEMENTED
	 */

	/* one interface */
	0x09,       /*  u8  if_bLength; */
	0x04,       /*  u8  if_bDescriptorType; Interface */
	0x00,       /*  u8  if_bInterfaceNumber; */
	0x00,       /*  u8  if_bAlternateSetting; */
	0x01,       /*  u8  if_bNumEndpoints; */
	0x09,       /*  u8  if_bInterfaceClass; HUB_CLASSCODE */
	0x00,       /*  u8  if_bInterfaceSubClass; */
	0x00,       /*  u8  if_bInterfaceProtocol; [usb1.1 or single tt] */
	0x00,       /*  u8  if_iInterface; */

	/* one endpoint (status change endpoint) */
	0x07,       /*  u8  ep_bLength; */
	0x05,       /*  u8  ep_bDescriptorType; Endpoint */
	0x81,       /*  u8  ep_bEndpointAddress; IN Endpoint 1 */
 	0x03,       /*  u8  ep_bmAttributes; Interrupt */
 	0x02, 0x00, /*  u16 ep_wMaxPacketSize; 1 + (MAX_ROOT_PORTS / 8) */
	0xff        /*  u8  ep_bInterval; (255ms -- usb 2.0 spec) */
};

static const uint8_t qemu_hub_hub_descriptor[] =
{
	0x00,			/*  u8  bLength; patched in later */
	0x29,			/*  u8  bDescriptorType; Hub-descriptor */
	0x00,			/*  u8  bNbrPorts; (patched later) */
	0x0a,			/* u16  wHubCharacteristics; */
	0x00,			/*   (per-port OC, no power switching) */
	0x01,			/*  u8  bPwrOn2pwrGood; 2ms */
	0x00			/*  u8  bHubContrCurrent; 0 mA */

        /* DeviceRemovable and PortPwrCtrlMask patched in later */
};

static void usb_hub_attach(USBPort *port1)
{
    USBHubState *s = port1->opaque;
    USBHubPort *port = &s->ports[port1->index];

    port->wPortStatus |= PORT_STAT_CONNECTION;
    port->wPortChange |= PORT_STAT_C_CONNECTION;
    if (port->port.dev->speed == USB_SPEED_LOW) {
        port->wPortStatus |= PORT_STAT_LOW_SPEED;
    } else {
        port->wPortStatus &= ~PORT_STAT_LOW_SPEED;
    }
}

static void usb_hub_detach(USBPort *port1)
{
    USBHubState *s = port1->opaque;
    USBHubPort *port = &s->ports[port1->index];

    port->wPortStatus &= ~PORT_STAT_CONNECTION;
    port->wPortChange |= PORT_STAT_C_CONNECTION;
    if (port->wPortStatus & PORT_STAT_ENABLE) {
        port->wPortStatus &= ~PORT_STAT_ENABLE;
        port->wPortChange |= PORT_STAT_C_ENABLE;
    }
}

static void usb_hub_wakeup(USBDevice *dev)
{
    USBHubState *s = dev->port->opaque;
    USBHubPort *port = &s->ports[dev->port->index];

    if (port->wPortStatus & PORT_STAT_SUSPEND) {
        port->wPortChange |= PORT_STAT_C_SUSPEND;
        usb_wakeup(&s->dev);
    }
}

static void usb_hub_handle_reset(USBDevice *dev)
{
    /* XXX: do it */
}

static int usb_hub_handle_control(USBDevice *dev, int request, int value,
                                  int index, int length, uint8_t *data)
{
    USBHubState *s = (USBHubState *)dev;
    int ret;

    ret = usb_desc_handle_control(dev, request, value, index, length, data);
    if (ret >= 0) {
        return ret;
    }

    switch(request) {
    case EndpointOutRequest | USB_REQ_CLEAR_FEATURE:
        if (value == 0 && index != 0x81) { /* clear ep halt */
            goto fail;
        }
        ret = 0;
        break;
    case DeviceRequest | USB_REQ_GET_INTERFACE:
        data[0] = 0;
        ret = 1;
        break;
    case DeviceOutRequest | USB_REQ_SET_INTERFACE:
        ret = 0;
        break;
        /* usb specific requests */
    case GetHubStatus:
        data[0] = 0;
        data[1] = 0;
        data[2] = 0;
        data[3] = 0;
        ret = 4;
        break;
    case GetPortStatus:
        {
            unsigned int n = index - 1;
            USBHubPort *port;
            if (n >= NUM_PORTS) {
                goto fail;
            }
            port = &s->ports[n];
            data[0] = port->wPortStatus;
            data[1] = port->wPortStatus >> 8;
            data[2] = port->wPortChange;
            data[3] = port->wPortChange >> 8;
            ret = 4;
        }
        break;
    case SetHubFeature:
    case ClearHubFeature:
        if (value == 0 || value == 1) {
        } else {
            goto fail;
        }
        ret = 0;
        break;
    case SetPortFeature:
        {
            unsigned int n = index - 1;
            USBHubPort *port;
            USBDevice *dev;
            if (n >= NUM_PORTS) {
                goto fail;
            }
            port = &s->ports[n];
            dev = port->port.dev;
            switch(value) {
            case PORT_SUSPEND:
                port->wPortStatus |= PORT_STAT_SUSPEND;
                break;
            case PORT_RESET:
                if (dev) {
                    usb_send_msg(dev, USB_MSG_RESET);
                    port->wPortChange |= PORT_STAT_C_RESET;
                    /* set enable bit */
                    port->wPortStatus |= PORT_STAT_ENABLE;
                }
                break;
            case PORT_POWER:
                break;
            default:
                goto fail;
            }
            ret = 0;
        }
        break;
    case ClearPortFeature:
        {
            unsigned int n = index - 1;
            USBHubPort *port;

            if (n >= NUM_PORTS) {
                goto fail;
            }
            port = &s->ports[n];
            switch(value) {
            case PORT_ENABLE:
                port->wPortStatus &= ~PORT_STAT_ENABLE;
                break;
            case PORT_C_ENABLE:
                port->wPortChange &= ~PORT_STAT_C_ENABLE;
                break;
            case PORT_SUSPEND:
                port->wPortStatus &= ~PORT_STAT_SUSPEND;
                break;
            case PORT_C_SUSPEND:
                port->wPortChange &= ~PORT_STAT_C_SUSPEND;
                break;
            case PORT_C_CONNECTION:
                port->wPortChange &= ~PORT_STAT_C_CONNECTION;
                break;
            case PORT_C_OVERCURRENT:
                port->wPortChange &= ~PORT_STAT_C_OVERCURRENT;
                break;
            case PORT_C_RESET:
                port->wPortChange &= ~PORT_STAT_C_RESET;
                break;
            default:
                goto fail;
            }
            ret = 0;
        }
        break;
    case GetHubDescriptor:
        {
            unsigned int n, limit, var_hub_size = 0;
            memcpy(data, qemu_hub_hub_descriptor,
                   sizeof(qemu_hub_hub_descriptor));
            data[2] = NUM_PORTS;

            /* fill DeviceRemovable bits */
            limit = ((NUM_PORTS + 1 + 7) / 8) + 7;
            for (n = 7; n < limit; n++) {
                data[n] = 0x00;
                var_hub_size++;
            }

            /* fill PortPwrCtrlMask bits */
            limit = limit + ((NUM_PORTS + 7) / 8);
            for (;n < limit; n++) {
                data[n] = 0xff;
                var_hub_size++;
            }

            ret = sizeof(qemu_hub_hub_descriptor) + var_hub_size;
            data[0] = ret;
            break;
        }
    default:
    fail:
        ret = USB_RET_STALL;
        break;
    }
    return ret;
}

static int usb_hub_handle_data(USBDevice *dev, USBPacket *p)
{
    USBHubState *s = (USBHubState *)dev;
    int ret;

    switch(p->pid) {
    case USB_TOKEN_IN:
        if (p->devep == 1) {
            USBHubPort *port;
            unsigned int status;
            int i, n;
            n = (NUM_PORTS + 1 + 7) / 8;
            if (p->len == 1) { /* FreeBSD workaround */
                n = 1;
            } else if (n > p->len) {
                return USB_RET_BABBLE;
            }
            status = 0;
            for(i = 0; i < NUM_PORTS; i++) {
                port = &s->ports[i];
                if (port->wPortChange)
                    status |= (1 << (i + 1));
            }
            if (status != 0) {
                for(i = 0; i < n; i++) {
                    p->data[i] = status >> (8 * i);
                }
                ret = n;
            } else {
                ret = USB_RET_NAK; /* usb11 11.13.1 */
            }
        } else {
            goto fail;
        }
        break;
    case USB_TOKEN_OUT:
    default:
    fail:
        ret = USB_RET_STALL;
        break;
    }
    return ret;
}

static int usb_hub_broadcast_packet(USBHubState *s, USBPacket *p)
{
    USBHubPort *port;
    USBDevice *dev;
    int i, ret;

    for(i = 0; i < NUM_PORTS; i++) {
        port = &s->ports[i];
        dev = port->port.dev;
        if (dev && (port->wPortStatus & PORT_STAT_ENABLE)) {
            ret = dev->info->handle_packet(dev, p);
            if (ret != USB_RET_NODEV) {
                return ret;
            }
        }
    }
    return USB_RET_NODEV;
}

static int usb_hub_handle_packet(USBDevice *dev, USBPacket *p)
{
    USBHubState *s = (USBHubState *)dev;

#if defined(DEBUG) && 0
    printf("usb_hub: pid=0x%x\n", pid);
#endif
    if (dev->state == USB_STATE_DEFAULT &&
        dev->addr != 0 &&
        p->devaddr != dev->addr &&
        (p->pid == USB_TOKEN_SETUP ||
         p->pid == USB_TOKEN_OUT ||
         p->pid == USB_TOKEN_IN)) {
        /* broadcast the packet to the devices */
        return usb_hub_broadcast_packet(s, p);
    }
    return usb_generic_handle_packet(dev, p);
}

static void usb_hub_handle_destroy(USBDevice *dev)
{
    USBHubState *s = (USBHubState *)dev;
    int i;

    for (i = 0; i < NUM_PORTS; i++) {
        usb_unregister_port(usb_bus_from_device(dev),
                            &s->ports[i].port);
    }
}

static USBPortOps usb_hub_port_ops = {
    .attach = usb_hub_attach,
    .detach = usb_hub_detach,
    .wakeup = usb_hub_wakeup,
};

static int usb_hub_initfn(USBDevice *dev)
{
    USBHubState *s = DO_UPCAST(USBHubState, dev, dev);
    USBHubPort *port;
    int i;

    usb_desc_init(dev);
    for (i = 0; i < NUM_PORTS; i++) {
        port = &s->ports[i];
        usb_register_port(usb_bus_from_device(dev),
                          &port->port, s, i, &s->dev, &usb_hub_port_ops);
        port->wPortStatus = PORT_STAT_POWER;
        port->wPortChange = 0;
    }
    return 0;
}

static struct USBDeviceInfo hub_info = {
    .product_desc   = "QEMU USB Hub",
    .qdev.name      = "usb-hub",
    .qdev.fw_name    = "hub",
    .qdev.size      = sizeof(USBHubState),
    .usb_desc       = &desc_hub,
    .init           = usb_hub_initfn,
    .handle_packet  = usb_hub_handle_packet,
    .handle_reset   = usb_hub_handle_reset,
    .handle_control = usb_hub_handle_control,
    .handle_data    = usb_hub_handle_data,
    .handle_destroy = usb_hub_handle_destroy,
};

static void usb_hub_register_devices(void)
{
    usb_qdev_register(&hub_info);
}
device_init(usb_hub_register_devices)
Commit	Line	Data
72899afc FB	1	/*
	2	* QEMU USB HUB emulation
	3	*
	4	* Copyright (c) 2005 Fabrice Bellard
5fafdf24	5	*
72899afc FB	6	* Permission is hereby granted, free of charge, to any person obtaining a copy
	7	* of this software and associated documentation files (the "Software"), to deal
	8	* in the Software without restriction, including without limitation the rights
	9	* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
	10	* copies of the Software, and to permit persons to whom the Software is
	11	* furnished to do so, subject to the following conditions:
	12	*
	13	* The above copyright notice and this permission notice shall be included in
	14	* all copies or substantial portions of the Software.
	15	*
	16	* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
	17	* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
	18	* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
	19	* THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
	20	* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
	21	* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
	22	* THE SOFTWARE.
	23	*/
87ecb68b PB	24	#include "qemu-common.h"
87ecb68b PB	25	#include "usb.h"
062651c7	26	#include "usb-desc.h"
72899afc FB	27
	28	//#define DEBUG
	29
062651c7	30	#define NUM_PORTS 8
72899afc FB	31
	32	typedef struct USBHubPort {
	33	USBPort port;
	34	uint16_t wPortStatus;
	35	uint16_t wPortChange;
	36	} USBHubPort;
	37
	38	typedef struct USBHubState {
	39	USBDevice dev;
062651c7	40	USBHubPort ports[NUM_PORTS];
72899afc FB	41	} USBHubState;
	42
	43	#define ClearHubFeature (0x2000 \| USB_REQ_CLEAR_FEATURE)
	44	#define ClearPortFeature (0x2300 \| USB_REQ_CLEAR_FEATURE)
	45	#define GetHubDescriptor (0xa000 \| USB_REQ_GET_DESCRIPTOR)
	46	#define GetHubStatus (0xa000 \| USB_REQ_GET_STATUS)
	47	#define GetPortStatus (0xa300 \| USB_REQ_GET_STATUS)
	48	#define SetHubFeature (0x2000 \| USB_REQ_SET_FEATURE)
	49	#define SetPortFeature (0x2300 \| USB_REQ_SET_FEATURE)
	50
	51	#define PORT_STAT_CONNECTION 0x0001
	52	#define PORT_STAT_ENABLE 0x0002
	53	#define PORT_STAT_SUSPEND 0x0004
	54	#define PORT_STAT_OVERCURRENT 0x0008
	55	#define PORT_STAT_RESET 0x0010
	56	#define PORT_STAT_POWER 0x0100
	57	#define PORT_STAT_LOW_SPEED 0x0200
	58	#define PORT_STAT_HIGH_SPEED 0x0400
	59	#define PORT_STAT_TEST 0x0800
	60	#define PORT_STAT_INDICATOR 0x1000
	61
	62	#define PORT_STAT_C_CONNECTION 0x0001
	63	#define PORT_STAT_C_ENABLE 0x0002
	64	#define PORT_STAT_C_SUSPEND 0x0004
	65	#define PORT_STAT_C_OVERCURRENT 0x0008
	66	#define PORT_STAT_C_RESET 0x0010
	67
	68	#define PORT_CONNECTION 0
	69	#define PORT_ENABLE 1
	70	#define PORT_SUSPEND 2
	71	#define PORT_OVERCURRENT 3
	72	#define PORT_RESET 4
	73	#define PORT_POWER 8
	74	#define PORT_LOWSPEED 9
	75	#define PORT_HIGHSPEED 10
	76	#define PORT_C_CONNECTION 16
	77	#define PORT_C_ENABLE 17
	78	#define PORT_C_SUSPEND 18
	79	#define PORT_C_OVERCURRENT 19
	80	#define PORT_C_RESET 20
	81	#define PORT_TEST 21
	82	#define PORT_INDICATOR 22
	83
	84	/* same as Linux kernel root hubs */
	85
062651c7 GH	86	enum {
	87	STR_MANUFACTURER = 1,
	88	STR_PRODUCT,
	89	STR_SERIALNUMBER,
	90	};
	91
	92	static const USBDescStrings desc_strings = {
	93	[STR_MANUFACTURER] = "QEMU " QEMU_VERSION,
	94	[STR_PRODUCT] = "QEMU USB Hub",
	95	[STR_SERIALNUMBER] = "314159",
	96	};
	97
	98	static const USBDescIface desc_iface_hub = {
	99	.bInterfaceNumber = 0,
	100	.bNumEndpoints = 1,
	101	.bInterfaceClass = USB_CLASS_HUB,
	102	.eps = (USBDescEndpoint[]) {
	103	{
	104	.bEndpointAddress = USB_DIR_IN \| 0x01,
	105	.bmAttributes = USB_ENDPOINT_XFER_INT,
	106	.wMaxPacketSize = 1 + (NUM_PORTS + 7) / 8,
	107	.bInterval = 0xff,
	108	},
	109	}
	110	};
	111
	112	static const USBDescDevice desc_device_hub = {
	113	.bcdUSB = 0x0110,
	114	.bDeviceClass = USB_CLASS_HUB,
	115	.bMaxPacketSize0 = 8,
	116	.bNumConfigurations = 1,
	117	.confs = (USBDescConfig[]) {
	118	{
	119	.bNumInterfaces = 1,
	120	.bConfigurationValue = 1,
	121	.bmAttributes = 0xe0,
	122	.ifs = &desc_iface_hub,
	123	},
	124	},
	125	};
	126
	127	static const USBDesc desc_hub = {
	128	.id = {
	129	.idVendor = 0,
	130	.idProduct = 0,
	131	.bcdDevice = 0x0101,
	132	.iManufacturer = STR_MANUFACTURER,
	133	.iProduct = STR_PRODUCT,
	134	.iSerialNumber = STR_SERIALNUMBER,
	135	},
	136	.full = &desc_device_hub,
	137	.str = desc_strings,
	138	};
	139
72899afc FB	140	static const uint8_t qemu_hub_dev_descriptor[] = {
	141	0x12, /* u8 bLength; */
	142	0x01, /* u8 bDescriptorType; Device */
	143	0x10, 0x01, /* u16 bcdUSB; v1.1 */
	144
	145	0x09, /* u8 bDeviceClass; HUB_CLASSCODE */
	146	0x00, /* u8 bDeviceSubClass; */
	147	0x00, /* u8 bDeviceProtocol; [ low/full speeds only ] */
	148	0x08, /* u8 bMaxPacketSize0; 8 Bytes */
	149
	150	0x00, 0x00, /* u16 idVendor; */
	151	0x00, 0x00, /* u16 idProduct; */
	152	0x01, 0x01, /* u16 bcdDevice */
	153
	154	0x03, /* u8 iManufacturer; */
	155	0x02, /* u8 iProduct; */
	156	0x01, /* u8 iSerialNumber; */
	157	0x01 /* u8 bNumConfigurations; */
	158	};
	159
	160	/* XXX: patch interrupt size */
	161	static const uint8_t qemu_hub_config_descriptor[] = {
	162
	163	/* one configuration */
	164	0x09, /* u8 bLength; */
	165	0x02, /* u8 bDescriptorType; Configuration */
	166	0x19, 0x00, /* u16 wTotalLength; */
	167	0x01, /* u8 bNumInterfaces; (1) */
	168	0x01, /* u8 bConfigurationValue; */
	169	0x00, /* u8 iConfiguration; */
659139d7	170	0xe0, /* u8 bmAttributes;
72899afc FB	171	Bit 7: must be set,
	172	6: Self-powered,
	173	5: Remote wakeup,
	174	4..0: resvd */
	175	0x00, /* u8 MaxPower; */
3b46e624	176
72899afc FB	177	/* USB 1.1:
	178	* USB 2.0, single TT organization (mandatory):
	179	* one interface, protocol 0
	180	*
	181	* USB 2.0, multiple TT organization (optional):
	182	* two interfaces, protocols 1 (like single TT)
	183	* and 2 (multiple TT mode) ... config is
	184	* sometimes settable
	185	* NOT IMPLEMENTED
	186	*/
	187
	188	/* one interface */
	189	0x09, /* u8 if_bLength; */
	190	0x04, /* u8 if_bDescriptorType; Interface */
	191	0x00, /* u8 if_bInterfaceNumber; */
	192	0x00, /* u8 if_bAlternateSetting; */
	193	0x01, /* u8 if_bNumEndpoints; */
	194	0x09, /* u8 if_bInterfaceClass; HUB_CLASSCODE */
	195	0x00, /* u8 if_bInterfaceSubClass; */
	196	0x00, /* u8 if_bInterfaceProtocol; [usb1.1 or single tt] */
	197	0x00, /* u8 if_iInterface; */
3b46e624	198
72899afc FB	199	/* one endpoint (status change endpoint) */
	200	0x07, /* u8 ep_bLength; */
	201	0x05, /* u8 ep_bDescriptorType; Endpoint */
	202	0x81, /* u8 ep_bEndpointAddress; IN Endpoint 1 */
	203	0x03, /* u8 ep_bmAttributes; Interrupt */
	204	0x02, 0x00, /* u16 ep_wMaxPacketSize; 1 + (MAX_ROOT_PORTS / 8) */
	205	0xff /* u8 ep_bInterval; (255ms -- usb 2.0 spec) */
	206	};
	207
	208	static const uint8_t qemu_hub_hub_descriptor[] =
	209	{
67f36560	210	0x00, /* u8 bLength; patched in later */
72899afc FB	211	0x29, /* u8 bDescriptorType; Hub-descriptor */
	212	0x00, /* u8 bNbrPorts; (patched later) */
	213	0x0a, /* u16 wHubCharacteristics; */
	214	0x00, /* (per-port OC, no power switching) */
	215	0x01, /* u8 bPwrOn2pwrGood; 2ms */
985d1742 FB	216	0x00 /* u8 bHubContrCurrent; 0 mA */
	217
	218	/* DeviceRemovable and PortPwrCtrlMask patched in later */
72899afc FB	219	};
72899afc FB	220
618c169b	221	static void usb_hub_attach(USBPort *port1)
72899afc FB	222	{
	223	USBHubState *s = port1->opaque;
	224	USBHubPort *port = &s->ports[port1->index];
3b46e624	225
618c169b GH	226	port->wPortStatus \|= PORT_STAT_CONNECTION;
	227	port->wPortChange \|= PORT_STAT_C_CONNECTION;
	228	if (port->port.dev->speed == USB_SPEED_LOW) {
	229	port->wPortStatus \|= PORT_STAT_LOW_SPEED;
72899afc	230	} else {
618c169b GH	231	port->wPortStatus &= ~PORT_STAT_LOW_SPEED;
	232	}
	233	}
	234
	235	static void usb_hub_detach(USBPort *port1)
	236	{
	237	USBHubState *s = port1->opaque;
	238	USBHubPort *port = &s->ports[port1->index];
	239
	240	port->wPortStatus &= ~PORT_STAT_CONNECTION;
	241	port->wPortChange \|= PORT_STAT_C_CONNECTION;
	242	if (port->wPortStatus & PORT_STAT_ENABLE) {
	243	port->wPortStatus &= ~PORT_STAT_ENABLE;
	244	port->wPortChange \|= PORT_STAT_C_ENABLE;
72899afc FB	245	}
	246	}
	247
34239c7b GH	248	static void usb_hub_wakeup(USBDevice *dev)
	249	{
	250	USBHubState *s = dev->port->opaque;
	251	USBHubPort *port = &s->ports[dev->port->index];
	252
	253	if (port->wPortStatus & PORT_STAT_SUSPEND) {
	254	port->wPortChange \|= PORT_STAT_C_SUSPEND;
	255	usb_wakeup(&s->dev);
	256	}
	257	}
	258
059809e4	259	static void usb_hub_handle_reset(USBDevice *dev)
72899afc FB	260	{
	261	/* XXX: do it */
	262	}
	263
	264	static int usb_hub_handle_control(USBDevice *dev, int request, int value,
	265	int index, int length, uint8_t *data)
	266	{
	267	USBHubState s = (USBHubState )dev;
	268	int ret;
	269
062651c7 GH	270	ret = usb_desc_handle_control(dev, request, value, index, length, data);
	271	if (ret >= 0) {
	272	return ret;
	273	}
	274
72899afc	275	switch(request) {
985d1742 FB	276	case EndpointOutRequest \| USB_REQ_CLEAR_FEATURE:
	277	if (value == 0 && index != 0x81) { /* clear ep halt */
	278	goto fail;
	279	}
	280	ret = 0;
	281	break;
72899afc FB	282	case DeviceRequest \| USB_REQ_GET_INTERFACE:
	283	data[0] = 0;
	284	ret = 1;
	285	break;
	286	case DeviceOutRequest \| USB_REQ_SET_INTERFACE:
	287	ret = 0;
	288	break;
	289	/* usb specific requests */
	290	case GetHubStatus:
	291	data[0] = 0;
	292	data[1] = 0;
	293	data[2] = 0;
	294	data[3] = 0;
	295	ret = 4;
	296	break;
	297	case GetPortStatus:
	298	{
	299	unsigned int n = index - 1;
	300	USBHubPort *port;
062651c7	301	if (n >= NUM_PORTS) {
72899afc	302	goto fail;
062651c7	303	}
72899afc FB	304	port = &s->ports[n];
	305	data[0] = port->wPortStatus;
	306	data[1] = port->wPortStatus >> 8;
	307	data[2] = port->wPortChange;
	308	data[3] = port->wPortChange >> 8;
	309	ret = 4;
	310	}
	311	break;
	312	case SetHubFeature:
	313	case ClearHubFeature:
	314	if (value == 0 \|\| value == 1) {
	315	} else {
	316	goto fail;
	317	}
	318	ret = 0;
	319	break;
	320	case SetPortFeature:
	321	{
	322	unsigned int n = index - 1;
	323	USBHubPort *port;
	324	USBDevice *dev;
062651c7	325	if (n >= NUM_PORTS) {
72899afc	326	goto fail;
062651c7	327	}
72899afc FB	328	port = &s->ports[n];
	329	dev = port->port.dev;
	330	switch(value) {
	331	case PORT_SUSPEND:
	332	port->wPortStatus \|= PORT_STAT_SUSPEND;
	333	break;
	334	case PORT_RESET:
	335	if (dev) {
4d611c9a	336	usb_send_msg(dev, USB_MSG_RESET);
72899afc FB	337	port->wPortChange \|= PORT_STAT_C_RESET;
72899afc FB	338	/* set enable bit */
72899afc FB	339	port->wPortStatus \|= PORT_STAT_ENABLE;
	340	}
	341	break;
	342	case PORT_POWER:
	343	break;
	344	default:
	345	goto fail;
	346	}
	347	ret = 0;
	348	}
	349	break;
	350	case ClearPortFeature:
	351	{
	352	unsigned int n = index - 1;
	353	USBHubPort *port;
d4c4e6fd	354
062651c7	355	if (n >= NUM_PORTS) {
72899afc	356	goto fail;
062651c7	357	}
72899afc	358	port = &s->ports[n];
72899afc FB	359	switch(value) {
	360	case PORT_ENABLE:
	361	port->wPortStatus &= ~PORT_STAT_ENABLE;
	362	break;
	363	case PORT_C_ENABLE:
	364	port->wPortChange &= ~PORT_STAT_C_ENABLE;
	365	break;
	366	case PORT_SUSPEND:
	367	port->wPortStatus &= ~PORT_STAT_SUSPEND;
	368	break;
	369	case PORT_C_SUSPEND:
	370	port->wPortChange &= ~PORT_STAT_C_SUSPEND;
	371	break;
	372	case PORT_C_CONNECTION:
	373	port->wPortChange &= ~PORT_STAT_C_CONNECTION;
	374	break;
	375	case PORT_C_OVERCURRENT:
	376	port->wPortChange &= ~PORT_STAT_C_OVERCURRENT;
	377	break;
	378	case PORT_C_RESET:
	379	port->wPortChange &= ~PORT_STAT_C_RESET;
	380	break;
	381	default:
	382	goto fail;
	383	}
	384	ret = 0;
	385	}
	386	break;
	387	case GetHubDescriptor:
985d1742 FB	388	{
985d1742 FB	389	unsigned int n, limit, var_hub_size = 0;
5fafdf24	390	memcpy(data, qemu_hub_hub_descriptor,
985d1742	391	sizeof(qemu_hub_hub_descriptor));
062651c7	392	data[2] = NUM_PORTS;
985d1742 FB	393
985d1742 FB	394	/* fill DeviceRemovable bits */
062651c7	395	limit = ((NUM_PORTS + 1 + 7) / 8) + 7;
985d1742 FB	396	for (n = 7; n < limit; n++) {
	397	data[n] = 0x00;
	398	var_hub_size++;
	399	}
	400
	401	/* fill PortPwrCtrlMask bits */
062651c7	402	limit = limit + ((NUM_PORTS + 7) / 8);
985d1742 FB	403	for (;n < limit; n++) {
	404	data[n] = 0xff;
	405	var_hub_size++;
	406	}
	407
	408	ret = sizeof(qemu_hub_hub_descriptor) + var_hub_size;
67f36560	409	data[0] = ret;
985d1742 FB	410	break;
985d1742 FB	411	}
72899afc FB	412	default:
	413	fail:
	414	ret = USB_RET_STALL;
	415	break;
	416	}
	417	return ret;
	418	}
	419
4d611c9a	420	static int usb_hub_handle_data(USBDevice dev, USBPacket p)
72899afc FB	421	{
	422	USBHubState s = (USBHubState )dev;
	423	int ret;
	424
4d611c9a	425	switch(p->pid) {
72899afc	426	case USB_TOKEN_IN:
4d611c9a	427	if (p->devep == 1) {
72899afc FB	428	USBHubPort *port;
	429	unsigned int status;
	430	int i, n;
062651c7	431	n = (NUM_PORTS + 1 + 7) / 8;
4d611c9a	432	if (p->len == 1) { /* FreeBSD workaround */
985d1742	433	n = 1;
4d611c9a	434	} else if (n > p->len) {
72899afc	435	return USB_RET_BABBLE;
985d1742	436	}
72899afc	437	status = 0;
062651c7	438	for(i = 0; i < NUM_PORTS; i++) {
72899afc FB	439	port = &s->ports[i];
	440	if (port->wPortChange)
	441	status \|= (1 << (i + 1));
	442	}
	443	if (status != 0) {
	444	for(i = 0; i < n; i++) {
4d611c9a	445	p->data[i] = status >> (8 * i);
72899afc FB	446	}
	447	ret = n;
	448	} else {
985d1742	449	ret = USB_RET_NAK; /* usb11 11.13.1 */
72899afc FB	450	}
	451	} else {
	452	goto fail;
	453	}
	454	break;
	455	case USB_TOKEN_OUT:
	456	default:
	457	fail:
	458	ret = USB_RET_STALL;
	459	break;
	460	}
	461	return ret;
	462	}
	463
4d611c9a	464	static int usb_hub_broadcast_packet(USBHubState s, USBPacket p)
72899afc FB	465	{
	466	USBHubPort *port;
	467	USBDevice *dev;
	468	int i, ret;
	469
062651c7	470	for(i = 0; i < NUM_PORTS; i++) {
72899afc FB	471	port = &s->ports[i];
	472	dev = port->port.dev;
	473	if (dev && (port->wPortStatus & PORT_STAT_ENABLE)) {
806b6024	474	ret = dev->info->handle_packet(dev, p);
72899afc FB	475	if (ret != USB_RET_NODEV) {
	476	return ret;
	477	}
	478	}
	479	}
	480	return USB_RET_NODEV;
	481	}
	482
4d611c9a	483	static int usb_hub_handle_packet(USBDevice dev, USBPacket p)
72899afc FB	484	{
	485	USBHubState s = (USBHubState )dev;
	486
	487	#if defined(DEBUG) && 0
	488	printf("usb_hub: pid=0x%x\n", pid);
	489	#endif
	490	if (dev->state == USB_STATE_DEFAULT &&
	491	dev->addr != 0 &&
4d611c9a	492	p->devaddr != dev->addr &&
5fafdf24 TS	493	(p->pid == USB_TOKEN_SETUP \|\|
5fafdf24 TS	494	p->pid == USB_TOKEN_OUT \|\|
4d611c9a	495	p->pid == USB_TOKEN_IN)) {
72899afc	496	/* broadcast the packet to the devices */
4d611c9a	497	return usb_hub_broadcast_packet(s, p);
72899afc	498	}
4d611c9a	499	return usb_generic_handle_packet(dev, p);
72899afc FB	500	}
72899afc FB	501
059809e4 FB	502	static void usb_hub_handle_destroy(USBDevice *dev)
	503	{
	504	USBHubState s = (USBHubState )dev;
a8e662b5	505	int i;
059809e4	506
062651c7	507	for (i = 0; i < NUM_PORTS; i++) {
a8e662b5 GH	508	usb_unregister_port(usb_bus_from_device(dev),
	509	&s->ports[i].port);
	510	}
059809e4 FB	511	}
059809e4 FB	512
0d86d2be GH	513	static USBPortOps usb_hub_port_ops = {
0d86d2be GH	514	.attach = usb_hub_attach,
618c169b	515	.detach = usb_hub_detach,
34239c7b	516	.wakeup = usb_hub_wakeup,
0d86d2be GH	517	};
0d86d2be GH	518
806b6024	519	static int usb_hub_initfn(USBDevice *dev)
72899afc	520	{
806b6024	521	USBHubState *s = DO_UPCAST(USBHubState, dev, dev);
72899afc FB	522	USBHubPort *port;
	523	int i;
	524
a980a065	525	usb_desc_init(dev);
062651c7	526	for (i = 0; i < NUM_PORTS; i++) {
72899afc	527	port = &s->ports[i];
a5d2f727	528	usb_register_port(usb_bus_from_device(dev),
0d86d2be	529	&port->port, s, i, &s->dev, &usb_hub_port_ops);
72899afc FB	530	port->wPortStatus = PORT_STAT_POWER;
72899afc FB	531	port->wPortChange = 0;
72899afc	532	}
806b6024 GH	533	return 0;
	534	}
	535
806b6024	536	static struct USBDeviceInfo hub_info = {
06384698	537	.product_desc = "QEMU USB Hub",
556cd098	538	.qdev.name = "usb-hub",
779206de	539	.qdev.fw_name = "hub",
806b6024	540	.qdev.size = sizeof(USBHubState),
062651c7	541	.usb_desc = &desc_hub,
806b6024 GH	542	.init = usb_hub_initfn,
	543	.handle_packet = usb_hub_handle_packet,
	544	.handle_reset = usb_hub_handle_reset,
	545	.handle_control = usb_hub_handle_control,
	546	.handle_data = usb_hub_handle_data,
	547	.handle_destroy = usb_hub_handle_destroy,
	548	};
	549
	550	static void usb_hub_register_devices(void)
	551	{
	552	usb_qdev_register(&hub_info);
72899afc	553	}
806b6024	554	device_init(usb_hub_register_devices)