]> git.proxmox.com Git - mirror_qemu.git/blob - hw/usb/dev-mtp.c
projects / mirror_qemu.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
usb-mtp: Add one more argument when building results
[mirror_qemu.git] / hw / usb / dev-mtp.c
1 /*
2 * Media Transfer Protocol implementation, backed by host filesystem.
3 *
4 * Copyright Red Hat, Inc 2014
5 *
6 * Author:
7 * Gerd Hoffmann <kraxel@redhat.com>
8 *
9 * This code is licensed under the GPL v2 or later.
10 */
11
12 #include "qemu/osdep.h"
13 #include "qapi/error.h"
14 #include <wchar.h>
15 #include <dirent.h>
16
17 #include <sys/statvfs.h>
18 #ifdef CONFIG_INOTIFY1
19 #include <sys/inotify.h>
20 #include "qemu/main-loop.h"
21 #endif
22
23 #include "qemu-common.h"
24 #include "qemu/iov.h"
25 #include "trace.h"
26 #include "hw/usb.h"
27 #include "hw/usb/desc.h"
28
29 /* ----------------------------------------------------------------------- */
30
31 enum mtp_container_type {
32 TYPE_COMMAND = 1,
33 TYPE_DATA = 2,
34 TYPE_RESPONSE = 3,
35 TYPE_EVENT = 4,
36 };
37
38 enum mtp_code {
39 /* command codes */
40 CMD_GET_DEVICE_INFO = 0x1001,
41 CMD_OPEN_SESSION = 0x1002,
42 CMD_CLOSE_SESSION = 0x1003,
43 CMD_GET_STORAGE_IDS = 0x1004,
44 CMD_GET_STORAGE_INFO = 0x1005,
45 CMD_GET_NUM_OBJECTS = 0x1006,
46 CMD_GET_OBJECT_HANDLES = 0x1007,
47 CMD_GET_OBJECT_INFO = 0x1008,
48 CMD_GET_OBJECT = 0x1009,
49 CMD_GET_PARTIAL_OBJECT = 0x101b,
50 CMD_GET_OBJECT_PROPS_SUPPORTED = 0x9801,
51 CMD_GET_OBJECT_PROP_DESC = 0x9802,
52 CMD_GET_OBJECT_PROP_VALUE = 0x9803,
53
54 /* response codes */
55 RES_OK = 0x2001,
56 RES_GENERAL_ERROR = 0x2002,
57 RES_SESSION_NOT_OPEN = 0x2003,
58 RES_INVALID_TRANSACTION_ID = 0x2004,
59 RES_OPERATION_NOT_SUPPORTED = 0x2005,
60 RES_PARAMETER_NOT_SUPPORTED = 0x2006,
61 RES_INCOMPLETE_TRANSFER = 0x2007,
62 RES_INVALID_STORAGE_ID = 0x2008,
63 RES_INVALID_OBJECT_HANDLE = 0x2009,
64 RES_INVALID_OBJECT_FORMAT_CODE = 0x200b,
65 RES_SPEC_BY_FORMAT_UNSUPPORTED = 0x2014,
66 RES_INVALID_PARENT_OBJECT = 0x201a,
67 RES_INVALID_PARAMETER = 0x201d,
68 RES_SESSION_ALREADY_OPEN = 0x201e,
69 RES_INVALID_OBJECT_PROP_CODE = 0xA801,
70
71 /* format codes */
72 FMT_UNDEFINED_OBJECT = 0x3000,
73 FMT_ASSOCIATION = 0x3001,
74
75 /* event codes */
76 EVT_OBJ_ADDED = 0x4002,
77 EVT_OBJ_REMOVED = 0x4003,
78 EVT_OBJ_INFO_CHANGED = 0x4007,
79
80 /* object properties */
81 PROP_STORAGE_ID = 0xDC01,
82 PROP_OBJECT_FORMAT = 0xDC02,
83 PROP_OBJECT_COMPRESSED_SIZE = 0xDC04,
84 PROP_PARENT_OBJECT = 0xDC0B,
85 PROP_PERSISTENT_UNIQUE_OBJECT_IDENTIFIER = 0xDC41,
86 PROP_NAME = 0xDC44,
87 };
88
89 enum mtp_data_type {
90 DATA_TYPE_UINT16 = 0x0004,
91 DATA_TYPE_UINT32 = 0x0006,
92 DATA_TYPE_UINT64 = 0x0008,
93 DATA_TYPE_UINT128 = 0x000a,
94 DATA_TYPE_STRING = 0xffff,
95 };
96
97 typedef struct {
98 uint32_t length;
99 uint16_t type;
100 uint16_t code;
101 uint32_t trans;
102 } QEMU_PACKED mtp_container;
103
104 /* ----------------------------------------------------------------------- */
105
106 typedef struct MTPState MTPState;
107 typedef struct MTPControl MTPControl;
108 typedef struct MTPData MTPData;
109 typedef struct MTPObject MTPObject;
110
111 enum {
112 EP_DATA_IN = 1,
113 EP_DATA_OUT,
114 EP_EVENT,
115 };
116
117 #ifdef CONFIG_INOTIFY1
118 typedef struct MTPMonEntry MTPMonEntry;
119
120 struct MTPMonEntry {
121 uint32_t event;
122 uint32_t handle;
123
124 QTAILQ_ENTRY(MTPMonEntry) next;
125 };
126 #endif
127
128 struct MTPControl {
129 uint16_t code;
130 uint32_t trans;
131 int argc;
132 uint32_t argv[5];
133 };
134
135 struct MTPData {
136 uint16_t code;
137 uint32_t trans;
138 uint64_t offset;
139 uint64_t length;
140 uint32_t alloc;
141 uint8_t *data;
142 bool first;
143 int fd;
144 };
145
146 struct MTPObject {
147 uint32_t handle;
148 uint16_t format;
149 char *name;
150 char *path;
151 struct stat stat;
152 #ifdef CONFIG_INOTIFY1
153 /* inotify watch cookie */
154 int watchfd;
155 #endif
156 MTPObject *parent;
157 uint32_t nchildren;
158 QLIST_HEAD(, MTPObject) children;
159 QLIST_ENTRY(MTPObject) list;
160 bool have_children;
161 QTAILQ_ENTRY(MTPObject) next;
162 };
163
164 struct MTPState {
165 USBDevice dev;
166 char *root;
167 char *desc;
168 uint32_t flags;
169
170 MTPData *data_in;
171 MTPData *data_out;
172 MTPControl *result;
173 uint32_t session;
174 uint32_t next_handle;
175
176 QTAILQ_HEAD(, MTPObject) objects;
177 #ifdef CONFIG_INOTIFY1
178 /* inotify descriptor */
179 int inotifyfd;
180 QTAILQ_HEAD(events, MTPMonEntry) events;
181 #endif
182 };
183
184 #define TYPE_USB_MTP "usb-mtp"
185 #define USB_MTP(obj) OBJECT_CHECK(MTPState, (obj), TYPE_USB_MTP)
186
187 #define QEMU_STORAGE_ID 0x00010001
188
189 #define MTP_FLAG_WRITABLE 0
190
191 #define FLAG_SET(_mtp, _flag) ((_mtp)->flags & (1 << (_flag)))
192
193 /* ----------------------------------------------------------------------- */
194
195 #define MTP_MANUFACTURER "QEMU"
196 #define MTP_PRODUCT "QEMU filesharing"
197
198 enum {
199 STR_MANUFACTURER = 1,
200 STR_PRODUCT,
201 STR_SERIALNUMBER,
202 STR_MTP,
203 STR_CONFIG_FULL,
204 STR_CONFIG_HIGH,
205 STR_CONFIG_SUPER,
206 };
207
208 static const USBDescStrings desc_strings = {
209 [STR_MANUFACTURER] = MTP_MANUFACTURER,
210 [STR_PRODUCT] = MTP_PRODUCT,
211 [STR_SERIALNUMBER] = "34617",
212 [STR_MTP] = "MTP",
213 [STR_CONFIG_FULL] = "Full speed config (usb 1.1)",
214 [STR_CONFIG_HIGH] = "High speed config (usb 2.0)",
215 [STR_CONFIG_SUPER] = "Super speed config (usb 3.0)",
216 };
217
218 static const USBDescIface desc_iface_full = {
219 .bInterfaceNumber = 0,
220 .bNumEndpoints = 3,
221 .bInterfaceClass = USB_CLASS_STILL_IMAGE,
222 .bInterfaceSubClass = 0x01,
223 .bInterfaceProtocol = 0x01,
224 .iInterface = STR_MTP,
225 .eps = (USBDescEndpoint[]) {
226 {
227 .bEndpointAddress = USB_DIR_IN | EP_DATA_IN,
228 .bmAttributes = USB_ENDPOINT_XFER_BULK,
229 .wMaxPacketSize = 64,
230 },{
231 .bEndpointAddress = USB_DIR_OUT | EP_DATA_OUT,
232 .bmAttributes = USB_ENDPOINT_XFER_BULK,
233 .wMaxPacketSize = 64,
234 },{
235 .bEndpointAddress = USB_DIR_IN | EP_EVENT,
236 .bmAttributes = USB_ENDPOINT_XFER_INT,
237 .wMaxPacketSize = 64,
238 .bInterval = 0x0a,
239 },
240 }
241 };
242
243 static const USBDescDevice desc_device_full = {
244 .bcdUSB = 0x0200,
245 .bMaxPacketSize0 = 8,
246 .bNumConfigurations = 1,
247 .confs = (USBDescConfig[]) {
248 {
249 .bNumInterfaces = 1,
250 .bConfigurationValue = 1,
251 .iConfiguration = STR_CONFIG_FULL,
252 .bmAttributes = USB_CFG_ATT_ONE | USB_CFG_ATT_WAKEUP,
253 .bMaxPower = 2,
254 .nif = 1,
255 .ifs = &desc_iface_full,
256 },
257 },
258 };
259
260 static const USBDescIface desc_iface_high = {
261 .bInterfaceNumber = 0,
262 .bNumEndpoints = 3,
263 .bInterfaceClass = USB_CLASS_STILL_IMAGE,
264 .bInterfaceSubClass = 0x01,
265 .bInterfaceProtocol = 0x01,
266 .iInterface = STR_MTP,
267 .eps = (USBDescEndpoint[]) {
268 {
269 .bEndpointAddress = USB_DIR_IN | EP_DATA_IN,
270 .bmAttributes = USB_ENDPOINT_XFER_BULK,
271 .wMaxPacketSize = 512,
272 },{
273 .bEndpointAddress = USB_DIR_OUT | EP_DATA_OUT,
274 .bmAttributes = USB_ENDPOINT_XFER_BULK,
275 .wMaxPacketSize = 512,
276 },{
277 .bEndpointAddress = USB_DIR_IN | EP_EVENT,
278 .bmAttributes = USB_ENDPOINT_XFER_INT,
279 .wMaxPacketSize = 64,
280 .bInterval = 0x0a,
281 },
282 }
283 };
284
285 static const USBDescDevice desc_device_high = {
286 .bcdUSB = 0x0200,
287 .bMaxPacketSize0 = 64,
288 .bNumConfigurations = 1,
289 .confs = (USBDescConfig[]) {
290 {
291 .bNumInterfaces = 1,
292 .bConfigurationValue = 1,
293 .iConfiguration = STR_CONFIG_HIGH,
294 .bmAttributes = USB_CFG_ATT_ONE | USB_CFG_ATT_WAKEUP,
295 .bMaxPower = 2,
296 .nif = 1,
297 .ifs = &desc_iface_high,
298 },
299 },
300 };
301
302 static const USBDescMSOS desc_msos = {
303 .CompatibleID = "MTP",
304 .SelectiveSuspendEnabled = true,
305 };
306
307 static const USBDesc desc = {
308 .id = {
309 .idVendor = 0x46f4, /* CRC16() of "QEMU" */
310 .idProduct = 0x0004,
311 .bcdDevice = 0,
312 .iManufacturer = STR_MANUFACTURER,
313 .iProduct = STR_PRODUCT,
314 .iSerialNumber = STR_SERIALNUMBER,
315 },
316 .full = &desc_device_full,
317 .high = &desc_device_high,
318 .str = desc_strings,
319 .msos = &desc_msos,
320 };
321
322 /* ----------------------------------------------------------------------- */
323
324 static MTPObject *usb_mtp_object_alloc(MTPState *s, uint32_t handle,
325 MTPObject *parent, char *name)
326 {
327 MTPObject *o = g_new0(MTPObject, 1);
328
329 if (name[0] == '.') {
330 goto ignore;
331 }
332
333 o->handle = handle;
334 o->parent = parent;
335 o->name = g_strdup(name);
336 if (parent == NULL) {
337 o->path = g_strdup(name);
338 } else {
339 o->path = g_strdup_printf("%s/%s", parent->path, name);
340 }
341
342 if (lstat(o->path, &o->stat) != 0) {
343 goto ignore;
344 }
345 if (S_ISREG(o->stat.st_mode)) {
346 o->format = FMT_UNDEFINED_OBJECT;
347 } else if (S_ISDIR(o->stat.st_mode)) {
348 o->format = FMT_ASSOCIATION;
349 } else {
350 goto ignore;
351 }
352
353 if (access(o->path, R_OK) != 0) {
354 goto ignore;
355 }
356
357 trace_usb_mtp_object_alloc(s->dev.addr, o->handle, o->path);
358
359 QTAILQ_INSERT_TAIL(&s->objects, o, next);
360 return o;
361
362 ignore:
363 g_free(o->name);
364 g_free(o->path);
365 g_free(o);
366 return NULL;
367 }
368
369 static void usb_mtp_object_free(MTPState *s, MTPObject *o)
370 {
371 MTPObject *iter;
372
373 if (!o) {
374 return;
375 }
376
377 trace_usb_mtp_object_free(s->dev.addr, o->handle, o->path);
378
379 QTAILQ_REMOVE(&s->objects, o, next);
380 if (o->parent) {
381 QLIST_REMOVE(o, list);
382 o->parent->nchildren--;
383 }
384
385 while (!QLIST_EMPTY(&o->children)) {
386 iter = QLIST_FIRST(&o->children);
387 usb_mtp_object_free(s, iter);
388 }
389 g_free(o->name);
390 g_free(o->path);
391 g_free(o);
392 }
393
394 static MTPObject *usb_mtp_object_lookup(MTPState *s, uint32_t handle)
395 {
396 MTPObject *o;
397
398 QTAILQ_FOREACH(o, &s->objects, next) {
399 if (o->handle == handle) {
400 return o;
401 }
402 }
403 return NULL;
404 }
405
406 static MTPObject *usb_mtp_add_child(MTPState *s, MTPObject *o,
407 char *name)
408 {
409 MTPObject *child =
410 usb_mtp_object_alloc(s, s->next_handle++, o, name);
411
412 if (child) {
413 trace_usb_mtp_add_child(s->dev.addr, child->handle, child->path);
414 QLIST_INSERT_HEAD(&o->children, child, list);
415 o->nchildren++;
416
417 if (child->format == FMT_ASSOCIATION) {
418 QLIST_INIT(&child->children);
419 }
420 }
421
422 return child;
423 }
424
425 #ifdef CONFIG_INOTIFY1
426 static MTPObject *usb_mtp_object_lookup_name(MTPObject *parent,
427 char *name, int len)
428 {
429 MTPObject *iter;
430
431 QLIST_FOREACH(iter, &parent->children, list) {
432 if (strncmp(iter->name, name, len) == 0) {
433 return iter;
434 }
435 }
436
437 return NULL;
438 }
439
440 static MTPObject *usb_mtp_object_lookup_wd(MTPState *s, int wd)
441 {
442 MTPObject *iter;
443
444 QTAILQ_FOREACH(iter, &s->objects, next) {
445 if (iter->watchfd == wd) {
446 return iter;
447 }
448 }
449
450 return NULL;
451 }
452
453 static void inotify_watchfn(void *arg)
454 {
455 MTPState *s = arg;
456 ssize_t bytes;
457 /* From the man page: atleast one event can be read */
458 int pos;
459 char buf[sizeof(struct inotify_event) + NAME_MAX + 1];
460
461 for (;;) {
462 bytes = read(s->inotifyfd, buf, sizeof(buf));
463 pos = 0;
464
465 if (bytes <= 0) {
466 /* Better luck next time */
467 return;
468 }
469
470 /*
471 * TODO: Ignore initiator initiated events.
472 * For now we are good because the store is RO
473 */
474 while (bytes > 0) {
475 char *p = buf + pos;
476 struct inotify_event *event = (struct inotify_event *)p;
477 int watchfd = 0;
478 uint32_t mask = event->mask & (IN_CREATE | IN_DELETE |
479 IN_MODIFY | IN_IGNORED);
480 MTPObject *parent = usb_mtp_object_lookup_wd(s, event->wd);
481 MTPMonEntry *entry = NULL;
482 MTPObject *o;
483
484 pos = pos + sizeof(struct inotify_event) + event->len;
485 bytes = bytes - pos;
486
487 if (!parent) {
488 continue;
489 }
490
491 switch (mask) {
492 case IN_CREATE:
493 if (usb_mtp_object_lookup_name
494 (parent, event->name, event->len)) {
495 /* Duplicate create event */
496 continue;
497 }
498 entry = g_new0(MTPMonEntry, 1);
499 entry->handle = s->next_handle;
500 entry->event = EVT_OBJ_ADDED;
501 o = usb_mtp_add_child(s, parent, event->name);
502 if (!o) {
503 g_free(entry);
504 continue;
505 }
506 o->watchfd = watchfd;
507 trace_usb_mtp_inotify_event(s->dev.addr, event->name,
508 event->mask, "Obj Added");
509 break;
510
511 case IN_DELETE:
512 /*
513 * The kernel issues a IN_IGNORED event
514 * when a dir containing a watchpoint is
515 * deleted, so we don't have to delete the
516 * watchpoint
517 */
518 o = usb_mtp_object_lookup_name(parent, event->name, event->len);
519 if (!o) {
520 continue;
521 }
522 entry = g_new0(MTPMonEntry, 1);
523 entry->handle = o->handle;
524 entry->event = EVT_OBJ_REMOVED;
525 trace_usb_mtp_inotify_event(s->dev.addr, o->path,
526 event->mask, "Obj Deleted");
527 usb_mtp_object_free(s, o);
528 break;
529
530 case IN_MODIFY:
531 o = usb_mtp_object_lookup_name(parent, event->name, event->len);
532 if (!o) {
533 continue;
534 }
535 entry = g_new0(MTPMonEntry, 1);
536 entry->handle = o->handle;
537 entry->event = EVT_OBJ_INFO_CHANGED;
538 trace_usb_mtp_inotify_event(s->dev.addr, o->path,
539 event->mask, "Obj Modified");
540 break;
541
542 case IN_IGNORED:
543 o = usb_mtp_object_lookup_name(parent, event->name, event->len);
544 trace_usb_mtp_inotify_event(s->dev.addr, o->path,
545 event->mask, "Obj ignored");
546 break;
547
548 default:
549 fprintf(stderr, "usb-mtp: failed to parse inotify event\n");
550 continue;
551 }
552
553 if (entry) {
554 QTAILQ_INSERT_HEAD(&s->events, entry, next);
555 }
556 }
557 }
558 }
559
560 static int usb_mtp_inotify_init(MTPState *s)
561 {
562 int fd;
563
564 fd = inotify_init1(IN_NONBLOCK);
565 if (fd == -1) {
566 return 1;
567 }
568
569 QTAILQ_INIT(&s->events);
570 s->inotifyfd = fd;
571
572 qemu_set_fd_handler(fd, inotify_watchfn, NULL, s);
573
574 return 0;
575 }
576
577 static void usb_mtp_inotify_cleanup(MTPState *s)
578 {
579 MTPMonEntry *e, *p;
580
581 if (!s->inotifyfd) {
582 return;
583 }
584
585 qemu_set_fd_handler(s->inotifyfd, NULL, NULL, s);
586 close(s->inotifyfd);
587
588 QTAILQ_FOREACH_SAFE(e, &s->events, next, p) {
589 QTAILQ_REMOVE(&s->events, e, next);
590 g_free(e);
591 }
592 }
593
594 static int usb_mtp_add_watch(int inotifyfd, char *path)
595 {
596 uint32_t mask = IN_CREATE | IN_DELETE | IN_MODIFY |
597 IN_ISDIR;
598
599 return inotify_add_watch(inotifyfd, path, mask);
600 }
601 #endif
602
603 static void usb_mtp_object_readdir(MTPState *s, MTPObject *o)
604 {
605 struct dirent *entry;
606 DIR *dir;
607
608 if (o->have_children) {
609 return;
610 }
611 o->have_children = true;
612
613 dir = opendir(o->path);
614 if (!dir) {
615 return;
616 }
617 #ifdef CONFIG_INOTIFY1
618 int watchfd = usb_mtp_add_watch(s->inotifyfd, o->path);
619 if (watchfd == -1) {
620 fprintf(stderr, "usb-mtp: failed to add watch for %s\n", o->path);
621 } else {
622 trace_usb_mtp_inotify_event(s->dev.addr, o->path,
623 0, "Watch Added");
624 o->watchfd = watchfd;
625 }
626 #endif
627 while ((entry = readdir(dir)) != NULL) {
628 usb_mtp_add_child(s, o, entry->d_name);
629 }
630 closedir(dir);
631 }
632
633 /* ----------------------------------------------------------------------- */
634
635 static MTPData *usb_mtp_data_alloc(MTPControl *c)
636 {
637 MTPData *data = g_new0(MTPData, 1);
638
639 data->code = c->code;
640 data->trans = c->trans;
641 data->fd = -1;
642 data->first = true;
643 return data;
644 }
645
646 static void usb_mtp_data_free(MTPData *data)
647 {
648 if (data == NULL) {
649 return;
650 }
651 if (data->fd != -1) {
652 close(data->fd);
653 }
654 g_free(data->data);
655 g_free(data);
656 }
657
658 static void usb_mtp_realloc(MTPData *data, uint32_t bytes)
659 {
660 if (data->length + bytes <= data->alloc) {
661 return;
662 }
663 data->alloc = (data->length + bytes + 0xff) & ~0xff;
664 data->data = g_realloc(data->data, data->alloc);
665 }
666
667 static void usb_mtp_add_u8(MTPData *data, uint8_t val)
668 {
669 usb_mtp_realloc(data, 1);
670 data->data[data->length++] = val;
671 }
672
673 static void usb_mtp_add_u16(MTPData *data, uint16_t val)
674 {
675 usb_mtp_realloc(data, 2);
676 data->data[data->length++] = (val >> 0) & 0xff;
677 data->data[data->length++] = (val >> 8) & 0xff;
678 }
679
680 static void usb_mtp_add_u32(MTPData *data, uint32_t val)
681 {
682 usb_mtp_realloc(data, 4);
683 data->data[data->length++] = (val >> 0) & 0xff;
684 data->data[data->length++] = (val >> 8) & 0xff;
685 data->data[data->length++] = (val >> 16) & 0xff;
686 data->data[data->length++] = (val >> 24) & 0xff;
687 }
688
689 static void usb_mtp_add_u64(MTPData *data, uint64_t val)
690 {
691 usb_mtp_realloc(data, 8);
692 data->data[data->length++] = (val >> 0) & 0xff;
693 data->data[data->length++] = (val >> 8) & 0xff;
694 data->data[data->length++] = (val >> 16) & 0xff;
695 data->data[data->length++] = (val >> 24) & 0xff;
696 data->data[data->length++] = (val >> 32) & 0xff;
697 data->data[data->length++] = (val >> 40) & 0xff;
698 data->data[data->length++] = (val >> 48) & 0xff;
699 data->data[data->length++] = (val >> 56) & 0xff;
700 }
701
702 static void usb_mtp_add_u16_array(MTPData *data, uint32_t len,
703 const uint16_t *vals)
704 {
705 int i;
706
707 usb_mtp_add_u32(data, len);
708 for (i = 0; i < len; i++) {
709 usb_mtp_add_u16(data, vals[i]);
710 }
711 }
712
713 static void usb_mtp_add_u32_array(MTPData *data, uint32_t len,
714 const uint32_t *vals)
715 {
716 int i;
717
718 usb_mtp_add_u32(data, len);
719 for (i = 0; i < len; i++) {
720 usb_mtp_add_u32(data, vals[i]);
721 }
722 }
723
724 static void usb_mtp_add_wstr(MTPData *data, const wchar_t *str)
725 {
726 uint32_t len = wcslen(str);
727 int i;
728
729 if (len > 0) {
730 len++; /* include terminating L'\0' */
731 }
732
733 usb_mtp_add_u8(data, len);
734 for (i = 0; i < len; i++) {
735 usb_mtp_add_u16(data, str[i]);
736 }
737 }
738
739 static void usb_mtp_add_str(MTPData *data, const char *str)
740 {
741 uint32_t len = strlen(str)+1;
742 wchar_t *wstr = g_new(wchar_t, len);
743 size_t ret;
744
745 ret = mbstowcs(wstr, str, len);
746 if (ret == -1) {
747 usb_mtp_add_wstr(data, L"Oops");
748 } else {
749 usb_mtp_add_wstr(data, wstr);
750 }
751
752 g_free(wstr);
753 }
754
755 static void usb_mtp_add_time(MTPData *data, time_t time)
756 {
757 char buf[16];
758 struct tm tm;
759
760 gmtime_r(&time, &tm);
761 strftime(buf, sizeof(buf), "%Y%m%dT%H%M%S", &tm);
762 usb_mtp_add_str(data, buf);
763 }
764
765 /* ----------------------------------------------------------------------- */
766
767 static void usb_mtp_queue_result(MTPState *s, uint16_t code, uint32_t trans,
768 int argc, uint32_t arg0, uint32_t arg1,
769 uint32_t arg2)
770 {
771 MTPControl *c = g_new0(MTPControl, 1);
772
773 c->code = code;
774 c->trans = trans;
775 c->argc = argc;
776 if (argc > 0) {
777 c->argv[0] = arg0;
778 }
779 if (argc > 1) {
780 c->argv[1] = arg1;
781 }
782 if (argc > 2) {
783 c->argv[2] = arg2;
784 }
785
786 assert(s->result == NULL);
787 s->result = c;
788 }
789
790 /* ----------------------------------------------------------------------- */
791
792 static MTPData *usb_mtp_get_device_info(MTPState *s, MTPControl *c)
793 {
794 static const uint16_t ops[] = {
795 CMD_GET_DEVICE_INFO,
796 CMD_OPEN_SESSION,
797 CMD_CLOSE_SESSION,
798 CMD_GET_STORAGE_IDS,
799 CMD_GET_STORAGE_INFO,
800 CMD_GET_NUM_OBJECTS,
801 CMD_GET_OBJECT_HANDLES,
802 CMD_GET_OBJECT_INFO,
803 CMD_GET_OBJECT,
804 CMD_GET_PARTIAL_OBJECT,
805 CMD_GET_OBJECT_PROPS_SUPPORTED,
806 CMD_GET_OBJECT_PROP_DESC,
807 CMD_GET_OBJECT_PROP_VALUE,
808 };
809 static const uint16_t fmt[] = {
810 FMT_UNDEFINED_OBJECT,
811 FMT_ASSOCIATION,
812 };
813 MTPData *d = usb_mtp_data_alloc(c);
814
815 trace_usb_mtp_op_get_device_info(s->dev.addr);
816
817 usb_mtp_add_u16(d, 100);
818 usb_mtp_add_u32(d, 0x00000006);
819 usb_mtp_add_u16(d, 0x0064);
820 usb_mtp_add_wstr(d, L"");
821 usb_mtp_add_u16(d, 0x0000);
822
823 usb_mtp_add_u16_array(d, ARRAY_SIZE(ops), ops);
824 usb_mtp_add_u16_array(d, 0, NULL);
825 usb_mtp_add_u16_array(d, 0, NULL);
826 usb_mtp_add_u16_array(d, 0, NULL);
827 usb_mtp_add_u16_array(d, ARRAY_SIZE(fmt), fmt);
828
829 usb_mtp_add_wstr(d, L"" MTP_MANUFACTURER);
830 usb_mtp_add_wstr(d, L"" MTP_PRODUCT);
831 usb_mtp_add_wstr(d, L"0.1");
832 usb_mtp_add_wstr(d, L"0123456789abcdef0123456789abcdef");
833
834 return d;
835 }
836
837 static MTPData *usb_mtp_get_storage_ids(MTPState *s, MTPControl *c)
838 {
839 static const uint32_t ids[] = {
840 QEMU_STORAGE_ID,
841 };
842 MTPData *d = usb_mtp_data_alloc(c);
843
844 trace_usb_mtp_op_get_storage_ids(s->dev.addr);
845
846 usb_mtp_add_u32_array(d, ARRAY_SIZE(ids), ids);
847
848 return d;
849 }
850
851 static MTPData *usb_mtp_get_storage_info(MTPState *s, MTPControl *c)
852 {
853 MTPData *d = usb_mtp_data_alloc(c);
854 struct statvfs buf;
855 int rc;
856
857 trace_usb_mtp_op_get_storage_info(s->dev.addr);
858
859 if (FLAG_SET(s, MTP_FLAG_WRITABLE)) {
860 usb_mtp_add_u16(d, 0x0003);
861 usb_mtp_add_u16(d, 0x0002);
862 usb_mtp_add_u16(d, 0x0000);
863 } else {
864 usb_mtp_add_u16(d, 0x0001);
865 usb_mtp_add_u16(d, 0x0002);
866 usb_mtp_add_u16(d, 0x0001);
867 }
868
869 rc = statvfs(s->root, &buf);
870 if (rc == 0) {
871 usb_mtp_add_u64(d, (uint64_t)buf.f_frsize * buf.f_blocks);
872 usb_mtp_add_u64(d, (uint64_t)buf.f_bavail * buf.f_blocks);
873 usb_mtp_add_u32(d, buf.f_ffree);
874 } else {
875 usb_mtp_add_u64(d, 0xffffffff);
876 usb_mtp_add_u64(d, 0xffffffff);
877 usb_mtp_add_u32(d, 0xffffffff);
878 }
879
880 usb_mtp_add_str(d, s->desc);
881 usb_mtp_add_wstr(d, L"123456789abcdef");
882 return d;
883 }
884
885 static MTPData *usb_mtp_get_object_handles(MTPState *s, MTPControl *c,
886 MTPObject *o)
887 {
888 MTPData *d = usb_mtp_data_alloc(c);
889 uint32_t i = 0, handles[o->nchildren];
890 MTPObject *iter;
891
892 trace_usb_mtp_op_get_object_handles(s->dev.addr, o->handle, o->path);
893
894 QLIST_FOREACH(iter, &o->children, list) {
895 handles[i++] = iter->handle;
896 }
897 assert(i == o->nchildren);
898 usb_mtp_add_u32_array(d, o->nchildren, handles);
899
900 return d;
901 }
902
903 static MTPData *usb_mtp_get_object_info(MTPState *s, MTPControl *c,
904 MTPObject *o)
905 {
906 MTPData *d = usb_mtp_data_alloc(c);
907
908 trace_usb_mtp_op_get_object_info(s->dev.addr, o->handle, o->path);
909
910 usb_mtp_add_u32(d, QEMU_STORAGE_ID);
911 usb_mtp_add_u16(d, o->format);
912 usb_mtp_add_u16(d, 0);
913
914 if (o->stat.st_size > 0xFFFFFFFF) {
915 usb_mtp_add_u32(d, 0xFFFFFFFF);
916 } else {
917 usb_mtp_add_u32(d, o->stat.st_size);
918 }
919
920 usb_mtp_add_u16(d, 0);
921 usb_mtp_add_u32(d, 0);
922 usb_mtp_add_u32(d, 0);
923 usb_mtp_add_u32(d, 0);
924 usb_mtp_add_u32(d, 0);
925 usb_mtp_add_u32(d, 0);
926 usb_mtp_add_u32(d, 0);
927
928 if (o->parent) {
929 usb_mtp_add_u32(d, o->parent->handle);
930 } else {
931 usb_mtp_add_u32(d, 0);
932 }
933 if (o->format == FMT_ASSOCIATION) {
934 usb_mtp_add_u16(d, 0x0001);
935 usb_mtp_add_u32(d, 0x00000001);
936 usb_mtp_add_u32(d, 0);
937 } else {
938 usb_mtp_add_u16(d, 0);
939 usb_mtp_add_u32(d, 0);
940 usb_mtp_add_u32(d, 0);
941 }
942
943 usb_mtp_add_str(d, o->name);
944 usb_mtp_add_time(d, o->stat.st_ctime);
945 usb_mtp_add_time(d, o->stat.st_mtime);
946 usb_mtp_add_wstr(d, L"");
947
948 return d;
949 }
950
951 static MTPData *usb_mtp_get_object(MTPState *s, MTPControl *c,
952 MTPObject *o)
953 {
954 MTPData *d = usb_mtp_data_alloc(c);
955
956 trace_usb_mtp_op_get_object(s->dev.addr, o->handle, o->path);
957
958 d->fd = open(o->path, O_RDONLY);
959 if (d->fd == -1) {
960 usb_mtp_data_free(d);
961 return NULL;
962 }
963 d->length = o->stat.st_size;
964 d->alloc = 512;
965 d->data = g_malloc(d->alloc);
966 return d;
967 }
968
969 static MTPData *usb_mtp_get_partial_object(MTPState *s, MTPControl *c,
970 MTPObject *o)
971 {
972 MTPData *d = usb_mtp_data_alloc(c);
973 off_t offset;
974
975 trace_usb_mtp_op_get_partial_object(s->dev.addr, o->handle, o->path,
976 c->argv[1], c->argv[2]);
977
978 d->fd = open(o->path, O_RDONLY);
979 if (d->fd == -1) {
980 usb_mtp_data_free(d);
981 return NULL;
982 }
983
984 offset = c->argv[1];
985 if (offset > o->stat.st_size) {
986 offset = o->stat.st_size;
987 }
988 if (lseek(d->fd, offset, SEEK_SET) < 0) {
989 usb_mtp_data_free(d);
990 return NULL;
991 }
992
993 d->length = c->argv[2];
994 if (d->length > o->stat.st_size - offset) {
995 d->length = o->stat.st_size - offset;
996 }
997
998 return d;
999 }
1000
1001 static MTPData *usb_mtp_get_object_props_supported(MTPState *s, MTPControl *c)
1002 {
1003 static const uint16_t props[] = {
1004 PROP_STORAGE_ID,
1005 PROP_OBJECT_FORMAT,
1006 PROP_OBJECT_COMPRESSED_SIZE,
1007 PROP_PARENT_OBJECT,
1008 PROP_PERSISTENT_UNIQUE_OBJECT_IDENTIFIER,
1009 PROP_NAME,
1010 };
1011 MTPData *d = usb_mtp_data_alloc(c);
1012 usb_mtp_add_u16_array(d, ARRAY_SIZE(props), props);
1013
1014 return d;
1015 }
1016
1017 static MTPData *usb_mtp_get_object_prop_desc(MTPState *s, MTPControl *c)
1018 {
1019 MTPData *d = usb_mtp_data_alloc(c);
1020 switch (c->argv[0]) {
1021 case PROP_STORAGE_ID:
1022 usb_mtp_add_u16(d, PROP_STORAGE_ID);
1023 usb_mtp_add_u16(d, DATA_TYPE_UINT32);
1024 usb_mtp_add_u8(d, 0x00);
1025 usb_mtp_add_u32(d, 0x00000000);
1026 usb_mtp_add_u32(d, 0x00000000);
1027 usb_mtp_add_u8(d, 0x00);
1028 break;
1029 case PROP_OBJECT_FORMAT:
1030 usb_mtp_add_u16(d, PROP_OBJECT_FORMAT);
1031 usb_mtp_add_u16(d, DATA_TYPE_UINT16);
1032 usb_mtp_add_u8(d, 0x00);
1033 usb_mtp_add_u16(d, 0x0000);
1034 usb_mtp_add_u32(d, 0x00000000);
1035 usb_mtp_add_u8(d, 0x00);
1036 break;
1037 case PROP_OBJECT_COMPRESSED_SIZE:
1038 usb_mtp_add_u16(d, PROP_OBJECT_COMPRESSED_SIZE);
1039 usb_mtp_add_u16(d, DATA_TYPE_UINT64);
1040 usb_mtp_add_u8(d, 0x00);
1041 usb_mtp_add_u64(d, 0x0000000000000000);
1042 usb_mtp_add_u32(d, 0x00000000);
1043 usb_mtp_add_u8(d, 0x00);
1044 break;
1045 case PROP_PARENT_OBJECT:
1046 usb_mtp_add_u16(d, PROP_PARENT_OBJECT);
1047 usb_mtp_add_u16(d, DATA_TYPE_UINT32);
1048 usb_mtp_add_u8(d, 0x00);
1049 usb_mtp_add_u32(d, 0x00000000);
1050 usb_mtp_add_u32(d, 0x00000000);
1051 usb_mtp_add_u8(d, 0x00);
1052 break;
1053 case PROP_PERSISTENT_UNIQUE_OBJECT_IDENTIFIER:
1054 usb_mtp_add_u16(d, PROP_PERSISTENT_UNIQUE_OBJECT_IDENTIFIER);
1055 usb_mtp_add_u16(d, DATA_TYPE_UINT128);
1056 usb_mtp_add_u8(d, 0x00);
1057 usb_mtp_add_u64(d, 0x0000000000000000);
1058 usb_mtp_add_u64(d, 0x0000000000000000);
1059 usb_mtp_add_u32(d, 0x00000000);
1060 usb_mtp_add_u8(d, 0x00);
1061 break;
1062 case PROP_NAME:
1063 usb_mtp_add_u16(d, PROP_NAME);
1064 usb_mtp_add_u16(d, DATA_TYPE_STRING);
1065 usb_mtp_add_u8(d, 0x00);
1066 usb_mtp_add_u8(d, 0x00);
1067 usb_mtp_add_u32(d, 0x00000000);
1068 usb_mtp_add_u8(d, 0x00);
1069 break;
1070 default:
1071 usb_mtp_data_free(d);
1072 return NULL;
1073 }
1074
1075 return d;
1076 }
1077
1078 static MTPData *usb_mtp_get_object_prop_value(MTPState *s, MTPControl *c,
1079 MTPObject *o)
1080 {
1081 MTPData *d = usb_mtp_data_alloc(c);
1082 switch (c->argv[1]) {
1083 case PROP_STORAGE_ID:
1084 usb_mtp_add_u32(d, QEMU_STORAGE_ID);
1085 break;
1086 case PROP_OBJECT_FORMAT:
1087 usb_mtp_add_u16(d, o->format);
1088 break;
1089 case PROP_OBJECT_COMPRESSED_SIZE:
1090 usb_mtp_add_u64(d, o->stat.st_size);
1091 break;
1092 case PROP_PARENT_OBJECT:
1093 if (o->parent == NULL) {
1094 usb_mtp_add_u32(d, 0x00000000);
1095 } else {
1096 usb_mtp_add_u32(d, o->parent->handle);
1097 }
1098 break;
1099 case PROP_PERSISTENT_UNIQUE_OBJECT_IDENTIFIER:
1100 /* Should be persistent between sessions,
1101 * but using our objedt ID is "good enough"
1102 * for now */
1103 usb_mtp_add_u64(d, 0x0000000000000000);
1104 usb_mtp_add_u64(d, o->handle);
1105 break;
1106 case PROP_NAME:
1107 usb_mtp_add_str(d, o->name);
1108 break;
1109 default:
1110 usb_mtp_data_free(d);
1111 return NULL;
1112 }
1113
1114 return d;
1115 }
1116
1117 static void usb_mtp_command(MTPState *s, MTPControl *c)
1118 {
1119 MTPData *data_in = NULL;
1120 MTPObject *o;
1121 uint32_t nres = 0, res0 = 0;
1122
1123 /* sanity checks */
1124 if (c->code >= CMD_CLOSE_SESSION && s->session == 0) {
1125 usb_mtp_queue_result(s, RES_SESSION_NOT_OPEN,
1126 c->trans, 0, 0, 0, 0);
1127 return;
1128 }
1129
1130 /* process commands */
1131 switch (c->code) {
1132 case CMD_GET_DEVICE_INFO:
1133 data_in = usb_mtp_get_device_info(s, c);
1134 break;
1135 case CMD_OPEN_SESSION:
1136 if (s->session) {
1137 usb_mtp_queue_result(s, RES_SESSION_ALREADY_OPEN,
1138 c->trans, 1, s->session, 0, 0);
1139 return;
1140 }
1141 if (c->argv[0] == 0) {
1142 usb_mtp_queue_result(s, RES_INVALID_PARAMETER,
1143 c->trans, 0, 0, 0, 0);
1144 return;
1145 }
1146 trace_usb_mtp_op_open_session(s->dev.addr);
1147 s->session = c->argv[0];
1148 usb_mtp_object_alloc(s, s->next_handle++, NULL, s->root);
1149 #ifdef CONFIG_INOTIFY1
1150 if (usb_mtp_inotify_init(s)) {
1151 fprintf(stderr, "usb-mtp: file monitoring init failed\n");
1152 }
1153 #endif
1154 break;
1155 case CMD_CLOSE_SESSION:
1156 trace_usb_mtp_op_close_session(s->dev.addr);
1157 s->session = 0;
1158 s->next_handle = 0;
1159 #ifdef CONFIG_INOTIFY1
1160 usb_mtp_inotify_cleanup(s);
1161 #endif
1162 usb_mtp_object_free(s, QTAILQ_FIRST(&s->objects));
1163 assert(QTAILQ_EMPTY(&s->objects));
1164 break;
1165 case CMD_GET_STORAGE_IDS:
1166 data_in = usb_mtp_get_storage_ids(s, c);
1167 break;
1168 case CMD_GET_STORAGE_INFO:
1169 if (c->argv[0] != QEMU_STORAGE_ID &&
1170 c->argv[0] != 0xffffffff) {
1171 usb_mtp_queue_result(s, RES_INVALID_STORAGE_ID,
1172 c->trans, 0, 0, 0, 0);
1173 return;
1174 }
1175 data_in = usb_mtp_get_storage_info(s, c);
1176 break;
1177 case CMD_GET_NUM_OBJECTS:
1178 case CMD_GET_OBJECT_HANDLES:
1179 if (c->argv[0] != QEMU_STORAGE_ID &&
1180 c->argv[0] != 0xffffffff) {
1181 usb_mtp_queue_result(s, RES_INVALID_STORAGE_ID,
1182 c->trans, 0, 0, 0, 0);
1183 return;
1184 }
1185 if (c->argv[1] != 0x00000000) {
1186 usb_mtp_queue_result(s, RES_SPEC_BY_FORMAT_UNSUPPORTED,
1187 c->trans, 0, 0, 0, 0);
1188 return;
1189 }
1190 if (c->argv[2] == 0x00000000 ||
1191 c->argv[2] == 0xffffffff) {
1192 o = QTAILQ_FIRST(&s->objects);
1193 } else {
1194 o = usb_mtp_object_lookup(s, c->argv[2]);
1195 }
1196 if (o == NULL) {
1197 usb_mtp_queue_result(s, RES_INVALID_OBJECT_HANDLE,
1198 c->trans, 0, 0, 0, 0);
1199 return;
1200 }
1201 if (o->format != FMT_ASSOCIATION) {
1202 usb_mtp_queue_result(s, RES_INVALID_PARENT_OBJECT,
1203 c->trans, 0, 0, 0, 0);
1204 return;
1205 }
1206 usb_mtp_object_readdir(s, o);
1207 if (c->code == CMD_GET_NUM_OBJECTS) {
1208 trace_usb_mtp_op_get_num_objects(s->dev.addr, o->handle, o->path);
1209 nres = 1;
1210 res0 = o->nchildren;
1211 } else {
1212 data_in = usb_mtp_get_object_handles(s, c, o);
1213 }
1214 break;
1215 case CMD_GET_OBJECT_INFO:
1216 o = usb_mtp_object_lookup(s, c->argv[0]);
1217 if (o == NULL) {
1218 usb_mtp_queue_result(s, RES_INVALID_OBJECT_HANDLE,
1219 c->trans, 0, 0, 0, 0);
1220 return;
1221 }
1222 data_in = usb_mtp_get_object_info(s, c, o);
1223 break;
1224 case CMD_GET_OBJECT:
1225 o = usb_mtp_object_lookup(s, c->argv[0]);
1226 if (o == NULL) {
1227 usb_mtp_queue_result(s, RES_INVALID_OBJECT_HANDLE,
1228 c->trans, 0, 0, 0, 0);
1229 return;
1230 }
1231 if (o->format == FMT_ASSOCIATION) {
1232 usb_mtp_queue_result(s, RES_INVALID_OBJECT_HANDLE,
1233 c->trans, 0, 0, 0, 0);
1234 return;
1235 }
1236 data_in = usb_mtp_get_object(s, c, o);
1237 if (data_in == NULL) {
1238 usb_mtp_queue_result(s, RES_GENERAL_ERROR,
1239 c->trans, 0, 0, 0, 0);
1240 return;
1241 }
1242 break;
1243 case CMD_GET_PARTIAL_OBJECT:
1244 o = usb_mtp_object_lookup(s, c->argv[0]);
1245 if (o == NULL) {
1246 usb_mtp_queue_result(s, RES_INVALID_OBJECT_HANDLE,
1247 c->trans, 0, 0, 0, 0);
1248 return;
1249 }
1250 if (o->format == FMT_ASSOCIATION) {
1251 usb_mtp_queue_result(s, RES_INVALID_OBJECT_HANDLE,
1252 c->trans, 0, 0, 0, 0);
1253 return;
1254 }
1255 data_in = usb_mtp_get_partial_object(s, c, o);
1256 if (data_in == NULL) {
1257 usb_mtp_queue_result(s, RES_GENERAL_ERROR,
1258 c->trans, 0, 0, 0, 0);
1259 return;
1260 }
1261 nres = 1;
1262 res0 = data_in->length;
1263 break;
1264 case CMD_GET_OBJECT_PROPS_SUPPORTED:
1265 if (c->argv[0] != FMT_UNDEFINED_OBJECT &&
1266 c->argv[0] != FMT_ASSOCIATION) {
1267 usb_mtp_queue_result(s, RES_INVALID_OBJECT_FORMAT_CODE,
1268 c->trans, 0, 0, 0, 0);
1269 return;
1270 }
1271 data_in = usb_mtp_get_object_props_supported(s, c);
1272 break;
1273 case CMD_GET_OBJECT_PROP_DESC:
1274 if (c->argv[1] != FMT_UNDEFINED_OBJECT &&
1275 c->argv[1] != FMT_ASSOCIATION) {
1276 usb_mtp_queue_result(s, RES_INVALID_OBJECT_FORMAT_CODE,
1277 c->trans, 0, 0, 0, 0);
1278 return;
1279 }
1280 data_in = usb_mtp_get_object_prop_desc(s, c);
1281 if (data_in == NULL) {
1282 usb_mtp_queue_result(s, RES_INVALID_OBJECT_PROP_CODE,
1283 c->trans, 0, 0, 0, 0);
1284 return;
1285 }
1286 break;
1287 case CMD_GET_OBJECT_PROP_VALUE:
1288 o = usb_mtp_object_lookup(s, c->argv[0]);
1289 if (o == NULL) {
1290 usb_mtp_queue_result(s, RES_INVALID_OBJECT_HANDLE,
1291 c->trans, 0, 0, 0, 0);
1292 return;
1293 }
1294 data_in = usb_mtp_get_object_prop_value(s, c, o);
1295 if (data_in == NULL) {
1296 usb_mtp_queue_result(s, RES_INVALID_OBJECT_PROP_CODE,
1297 c->trans, 0, 0, 0, 0);
1298 return;
1299 }
1300 break;
1301 default:
1302 trace_usb_mtp_op_unknown(s->dev.addr, c->code);
1303 usb_mtp_queue_result(s, RES_OPERATION_NOT_SUPPORTED,
1304 c->trans, 0, 0, 0, 0);
1305 return;
1306 }
1307
1308 /* return results on success */
1309 if (data_in) {
1310 assert(s->data_in == NULL);
1311 s->data_in = data_in;
1312 }
1313 usb_mtp_queue_result(s, RES_OK, c->trans, nres, res0, 0, 0);
1314 }
1315
1316 /* ----------------------------------------------------------------------- */
1317
1318 static void usb_mtp_handle_reset(USBDevice *dev)
1319 {
1320 MTPState *s = USB_MTP(dev);
1321
1322 trace_usb_mtp_reset(s->dev.addr);
1323
1324 #ifdef CONFIG_INOTIFY1
1325 usb_mtp_inotify_cleanup(s);
1326 #endif
1327 usb_mtp_object_free(s, QTAILQ_FIRST(&s->objects));
1328 s->session = 0;
1329 usb_mtp_data_free(s->data_in);
1330 s->data_in = NULL;
1331 usb_mtp_data_free(s->data_out);
1332 s->data_out = NULL;
1333 g_free(s->result);
1334 s->result = NULL;
1335 }
1336
1337 static void usb_mtp_handle_control(USBDevice *dev, USBPacket *p,
1338 int request, int value, int index,
1339 int length, uint8_t *data)
1340 {
1341 int ret;
1342
1343 ret = usb_desc_handle_control(dev, p, request, value, index, length, data);
1344 if (ret >= 0) {
1345 return;
1346 }
1347
1348 trace_usb_mtp_stall(dev->addr, "unknown control request");
1349 p->status = USB_RET_STALL;
1350 }
1351
1352 static void usb_mtp_cancel_packet(USBDevice *dev, USBPacket *p)
1353 {
1354 /* we don't use async packets, so this should never be called */
1355 fprintf(stderr, "%s\n", __func__);
1356 }
1357
1358 static void usb_mtp_handle_data(USBDevice *dev, USBPacket *p)
1359 {
1360 MTPState *s = USB_MTP(dev);
1361 MTPControl cmd;
1362 mtp_container container;
1363 uint32_t params[5];
1364 int i, rc;
1365
1366 switch (p->ep->nr) {
1367 case EP_DATA_IN:
1368 if (s->data_out != NULL) {
1369 /* guest bug */
1370 trace_usb_mtp_stall(s->dev.addr, "awaiting data-out");
1371 p->status = USB_RET_STALL;
1372 return;
1373 }
1374 if (p->iov.size < sizeof(container)) {
1375 trace_usb_mtp_stall(s->dev.addr, "packet too small");
1376 p->status = USB_RET_STALL;
1377 return;
1378 }
1379 if (s->data_in != NULL) {
1380 MTPData *d = s->data_in;
1381 uint64_t dlen = d->length - d->offset;
1382 if (d->first) {
1383 trace_usb_mtp_data_in(s->dev.addr, d->trans, d->length);
1384 if (d->length + sizeof(container) > 0xFFFFFFFF) {
1385 container.length = cpu_to_le32(0xFFFFFFFF);
1386 } else {
1387 container.length =
1388 cpu_to_le32(d->length + sizeof(container));
1389 }
1390 container.type = cpu_to_le16(TYPE_DATA);
1391 container.code = cpu_to_le16(d->code);
1392 container.trans = cpu_to_le32(d->trans);
1393 usb_packet_copy(p, &container, sizeof(container));
1394 d->first = false;
1395 if (dlen > p->iov.size - sizeof(container)) {
1396 dlen = p->iov.size - sizeof(container);
1397 }
1398 } else {
1399 if (dlen > p->iov.size) {
1400 dlen = p->iov.size;
1401 }
1402 }
1403 if (d->fd == -1) {
1404 usb_packet_copy(p, d->data + d->offset, dlen);
1405 } else {
1406 if (d->alloc < p->iov.size) {
1407 d->alloc = p->iov.size;
1408 d->data = g_realloc(d->data, d->alloc);
1409 }
1410 rc = read(d->fd, d->data, dlen);
1411 if (rc != dlen) {
1412 memset(d->data, 0, dlen);
1413 s->result->code = RES_INCOMPLETE_TRANSFER;
1414 }
1415 usb_packet_copy(p, d->data, dlen);
1416 }
1417 d->offset += dlen;
1418 if (d->offset == d->length) {
1419 usb_mtp_data_free(s->data_in);
1420 s->data_in = NULL;
1421 }
1422 } else if (s->result != NULL) {
1423 MTPControl *r = s->result;
1424 int length = sizeof(container) + r->argc * sizeof(uint32_t);
1425 if (r->code == RES_OK) {
1426 trace_usb_mtp_success(s->dev.addr, r->trans,
1427 (r->argc > 0) ? r->argv[0] : 0,
1428 (r->argc > 1) ? r->argv[1] : 0);
1429 } else {
1430 trace_usb_mtp_error(s->dev.addr, r->code, r->trans,
1431 (r->argc > 0) ? r->argv[0] : 0,
1432 (r->argc > 1) ? r->argv[1] : 0);
1433 }
1434 container.length = cpu_to_le32(length);
1435 container.type = cpu_to_le16(TYPE_RESPONSE);
1436 container.code = cpu_to_le16(r->code);
1437 container.trans = cpu_to_le32(r->trans);
1438 for (i = 0; i < r->argc; i++) {
1439 params[i] = cpu_to_le32(r->argv[i]);
1440 }
1441 usb_packet_copy(p, &container, sizeof(container));
1442 usb_packet_copy(p, &params, length - sizeof(container));
1443 g_free(s->result);
1444 s->result = NULL;
1445 }
1446 break;
1447 case EP_DATA_OUT:
1448 if (p->iov.size < sizeof(container)) {
1449 trace_usb_mtp_stall(s->dev.addr, "packet too small");
1450 p->status = USB_RET_STALL;
1451 return;
1452 }
1453 usb_packet_copy(p, &container, sizeof(container));
1454 switch (le16_to_cpu(container.type)) {
1455 case TYPE_COMMAND:
1456 if (s->data_in || s->data_out || s->result) {
1457 trace_usb_mtp_stall(s->dev.addr, "transaction inflight");
1458 p->status = USB_RET_STALL;
1459 return;
1460 }
1461 cmd.code = le16_to_cpu(container.code);
1462 cmd.argc = (le32_to_cpu(container.length) - sizeof(container))
1463 / sizeof(uint32_t);
1464 cmd.trans = le32_to_cpu(container.trans);
1465 if (cmd.argc > ARRAY_SIZE(cmd.argv)) {
1466 cmd.argc = ARRAY_SIZE(cmd.argv);
1467 }
1468 if (p->iov.size < sizeof(container) + cmd.argc * sizeof(uint32_t)) {
1469 trace_usb_mtp_stall(s->dev.addr, "packet too small");
1470 p->status = USB_RET_STALL;
1471 return;
1472 }
1473 usb_packet_copy(p, &params, cmd.argc * sizeof(uint32_t));
1474 for (i = 0; i < cmd.argc; i++) {
1475 cmd.argv[i] = le32_to_cpu(params[i]);
1476 }
1477 trace_usb_mtp_command(s->dev.addr, cmd.code, cmd.trans,
1478 (cmd.argc > 0) ? cmd.argv[0] : 0,
1479 (cmd.argc > 1) ? cmd.argv[1] : 0,
1480 (cmd.argc > 2) ? cmd.argv[2] : 0,
1481 (cmd.argc > 3) ? cmd.argv[3] : 0,
1482 (cmd.argc > 4) ? cmd.argv[4] : 0);
1483 usb_mtp_command(s, &cmd);
1484 break;
1485 default:
1486 /* not needed as long as the mtp device is read-only */
1487 p->status = USB_RET_STALL;
1488 return;
1489 }
1490 break;
1491 case EP_EVENT:
1492 #ifdef CONFIG_INOTIFY1
1493 if (!QTAILQ_EMPTY(&s->events)) {
1494 struct MTPMonEntry *e = QTAILQ_LAST(&s->events, events);
1495 uint32_t handle;
1496 int len = sizeof(container) + sizeof(uint32_t);
1497
1498 if (p->iov.size < len) {
1499 trace_usb_mtp_stall(s->dev.addr,
1500 "packet too small to send event");
1501 p->status = USB_RET_STALL;
1502 return;
1503 }
1504
1505 QTAILQ_REMOVE(&s->events, e, next);
1506 container.length = cpu_to_le32(len);
1507 container.type = cpu_to_le32(TYPE_EVENT);
1508 container.code = cpu_to_le16(e->event);
1509 container.trans = 0; /* no trans specific events */
1510 handle = cpu_to_le32(e->handle);
1511 usb_packet_copy(p, &container, sizeof(container));
1512 usb_packet_copy(p, &handle, sizeof(uint32_t));
1513 g_free(e);
1514 return;
1515 }
1516 #endif
1517 p->status = USB_RET_NAK;
1518 return;
1519 default:
1520 trace_usb_mtp_stall(s->dev.addr, "invalid endpoint");
1521 p->status = USB_RET_STALL;
1522 return;
1523 }
1524
1525 if (p->actual_length == 0) {
1526 trace_usb_mtp_nak(s->dev.addr, p->ep->nr);
1527 p->status = USB_RET_NAK;
1528 return;
1529 } else {
1530 trace_usb_mtp_xfer(s->dev.addr, p->ep->nr, p->actual_length,
1531 p->iov.size);
1532 return;
1533 }
1534 }
1535
1536 static void usb_mtp_realize(USBDevice *dev, Error **errp)
1537 {
1538 MTPState *s = USB_MTP(dev);
1539
1540 usb_desc_create_serial(dev);
1541 usb_desc_init(dev);
1542 QTAILQ_INIT(&s->objects);
1543 if (s->desc == NULL) {
1544 if (s->root == NULL) {
1545 error_setg(errp, "usb-mtp: x-root property must be configured");
1546 return;
1547 }
1548 s->desc = strrchr(s->root, '/');
1549 if (s->desc && s->desc[0]) {
1550 s->desc = g_strdup(s->desc + 1);
1551 } else {
1552 s->desc = g_strdup("none");
1553 }
1554 }
1555 }
1556
1557 static const VMStateDescription vmstate_usb_mtp = {
1558 .name = "usb-mtp",
1559 .unmigratable = 1,
1560 .version_id = 1,
1561 .minimum_version_id = 1,
1562 .fields = (VMStateField[]) {
1563 VMSTATE_USB_DEVICE(dev, MTPState),
1564 VMSTATE_END_OF_LIST()
1565 }
1566 };
1567
1568 static Property mtp_properties[] = {
1569 DEFINE_PROP_STRING("x-root", MTPState, root),
1570 DEFINE_PROP_STRING("desc", MTPState, desc),
1571 DEFINE_PROP_END_OF_LIST(),
1572 };
1573
1574 static void usb_mtp_class_initfn(ObjectClass *klass, void *data)
1575 {
1576 DeviceClass *dc = DEVICE_CLASS(klass);
1577 USBDeviceClass *uc = USB_DEVICE_CLASS(klass);
1578
1579 uc->realize = usb_mtp_realize;
1580 uc->product_desc = "QEMU USB MTP";
1581 uc->usb_desc = &desc;
1582 uc->cancel_packet = usb_mtp_cancel_packet;
1583 uc->handle_attach = usb_desc_attach;
1584 uc->handle_reset = usb_mtp_handle_reset;
1585 uc->handle_control = usb_mtp_handle_control;
1586 uc->handle_data = usb_mtp_handle_data;
1587 set_bit(DEVICE_CATEGORY_STORAGE, dc->categories);
1588 dc->desc = "USB Media Transfer Protocol device";
1589 dc->fw_name = "mtp";
1590 dc->vmsd = &vmstate_usb_mtp;
1591 dc->props = mtp_properties;
1592 }
1593
1594 static TypeInfo mtp_info = {
1595 .name = TYPE_USB_MTP,
1596 .parent = TYPE_USB_DEVICE,
1597 .instance_size = sizeof(MTPState),
1598 .class_init = usb_mtp_class_initfn,
1599 };
1600
1601 static void usb_mtp_register_types(void)
1602 {
1603 type_register_static(&mtp_info);
1604 }
1605
1606 type_init(usb_mtp_register_types)
QEMU mirror