usb-linux.c

   1 /*
   2  * Linux host USB redirector
   3  *
   4  * Copyright (c) 2005 Fabrice Bellard
   5  *
   6  * Copyright (c) 2008 Max Krasnyansky
   7  *      Support for host device auto connect & disconnect
   8  *      Major rewrite to support fully async operation
   9  *
  10  * Copyright 2008 TJ <linux@tjworld.net>
  11  *      Added flexible support for /dev/bus/usb /sys/bus/usb/devices in addition
  12  *      to the legacy /proc/bus/usb USB device discovery and handling
  13  *
  14  * Permission is hereby granted, free of charge, to any person obtaining a copy
  15  * of this software and associated documentation files (the "Software"), to deal
  16  * in the Software without restriction, including without limitation the rights
  17  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  18  * copies of the Software, and to permit persons to whom the Software is
  19  * furnished to do so, subject to the following conditions:
  20  *
  21  * The above copyright notice and this permission notice shall be included in
  22  * all copies or substantial portions of the Software.
  23  *
  24  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  25  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  26  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
  27  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  28  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
  29  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  30  * THE SOFTWARE.
  31  */
  32
  33 #include "qemu-common.h"
  34 #include "qemu-timer.h"
  35 #include "monitor.h"
  36 #include "sysemu.h"
  37
  38 #include <dirent.h>
  39 #include <sys/ioctl.h>
  40 #include <signal.h>
  41
  42 #include <linux/usbdevice_fs.h>
  43 #include <linux/version.h>
  44 #include "hw/usb.h"
  45
  46 /* We redefine it to avoid version problems */
  47 struct usb_ctrltransfer {
  48     uint8_t  bRequestType;
  49     uint8_t  bRequest;
  50     uint16_t wValue;
  51     uint16_t wIndex;
  52     uint16_t wLength;
  53     uint32_t timeout;
  54     void *data;
  55 };
  56
  57 struct usb_ctrlrequest {
  58     uint8_t bRequestType;
  59     uint8_t bRequest;
  60     uint16_t wValue;
  61     uint16_t wIndex;
  62     uint16_t wLength;
  63 };
  64
  65 typedef int USBScanFunc(void *opaque, int bus_num, int addr, int devpath,
  66                         int class_id, int vendor_id, int product_id,
  67                         const char *product_name, int speed);
  68
  69 //#define DEBUG
  70
  71 #ifdef DEBUG
  72 #define DPRINTF printf
  73 #else
  74 #define DPRINTF(...)
  75 #endif
  76
  77 #define USBDBG_DEVOPENED "husb: opened %s/devices\n"
  78
  79 #define USBPROCBUS_PATH "/proc/bus/usb"
  80 #define PRODUCT_NAME_SZ 32
  81 #define MAX_ENDPOINTS 16
  82 #define USBDEVBUS_PATH "/dev/bus/usb"
  83 #define USBSYSBUS_PATH "/sys/bus/usb"
  84
  85 static char *usb_host_device_path;
  86
  87 #define USB_FS_NONE 0
  88 #define USB_FS_PROC 1
  89 #define USB_FS_DEV 2
  90 #define USB_FS_SYS 3
  91
  92 static int usb_fs_type;
  93
  94 /* endpoint association data */
  95 struct endp_data {
  96     uint8_t type;
  97     uint8_t halted;
  98 };
  99
 100 enum {
 101     CTRL_STATE_IDLE = 0,
 102     CTRL_STATE_SETUP,
 103     CTRL_STATE_DATA,
 104     CTRL_STATE_ACK
 105 };
 106
 107 /*
 108  * Control transfer state.
 109  * Note that 'buffer' _must_ follow 'req' field because
 110  * we need contiguous buffer when we submit control URB.
 111  */
 112 struct ctrl_struct {
 113     uint16_t len;
 114     uint16_t offset;
 115     uint8_t  state;
 116     struct   usb_ctrlrequest req;
 117     uint8_t  buffer[8192];
 118 };
 119
 120 struct USBAutoFilter {
 121     uint32_t bus_num;
 122     uint32_t addr;
 123     uint32_t vendor_id;
 124     uint32_t product_id;
 125 };
 126
 127 typedef struct USBHostDevice {
 128     USBDevice dev;
 129     int       fd;
 130
 131     uint8_t   descr[1024];
 132     int       descr_len;
 133     int       configuration;
 134     int       ninterfaces;
 135     int       closing;
 136     Notifier  exit;
 137
 138     struct ctrl_struct ctrl;
 139     struct endp_data endp_table[MAX_ENDPOINTS];
 140
 141     /* Host side address */
 142     int bus_num;
 143     int addr;
 144     int devpath;
 145     struct USBAutoFilter match;
 146
 147     QTAILQ_ENTRY(USBHostDevice) next;
 148 } USBHostDevice;
 149
 150 static QTAILQ_HEAD(, USBHostDevice) hostdevs = QTAILQ_HEAD_INITIALIZER(hostdevs);
 151
 152 static int usb_host_close(USBHostDevice *dev);
 153 static int parse_filter(const char *spec, struct USBAutoFilter *f);
 154 static void usb_host_auto_check(void *unused);
 155 static int usb_host_read_file(char *line, size_t line_size,
 156                             const char *device_file, const char *device_name);
 157
 158 static int is_isoc(USBHostDevice *s, int ep)
 159 {
 160     return s->endp_table[ep - 1].type == USBDEVFS_URB_TYPE_ISO;
 161 }
 162
 163 static int is_halted(USBHostDevice *s, int ep)
 164 {
 165     return s->endp_table[ep - 1].halted;
 166 }
 167
 168 static void clear_halt(USBHostDevice *s, int ep)
 169 {
 170     s->endp_table[ep - 1].halted = 0;
 171 }
 172
 173 static void set_halt(USBHostDevice *s, int ep)
 174 {
 175     s->endp_table[ep - 1].halted = 1;
 176 }
 177
 178 /*
 179  * Async URB state.
 180  * We always allocate one isoc descriptor even for bulk transfers
 181  * to simplify allocation and casts.
 182  */
 183 typedef struct AsyncURB
 184 {
 185     struct usbdevfs_urb urb;
 186     struct usbdevfs_iso_packet_desc isocpd;
 187
 188     USBPacket     *packet;
 189     USBHostDevice *hdev;
 190 } AsyncURB;
 191
 192 static AsyncURB *async_alloc(void)
 193 {
 194     return (AsyncURB *) qemu_mallocz(sizeof(AsyncURB));
 195 }
 196
 197 static void async_free(AsyncURB *aurb)
 198 {
 199     qemu_free(aurb);
 200 }
 201
 202 static void async_complete_ctrl(USBHostDevice *s, USBPacket *p)
 203 {
 204     switch(s->ctrl.state) {
 205     case CTRL_STATE_SETUP:
 206         if (p->len < s->ctrl.len)
 207             s->ctrl.len = p->len;
 208         s->ctrl.state = CTRL_STATE_DATA;
 209         p->len = 8;
 210         break;
 211
 212     case CTRL_STATE_ACK:
 213         s->ctrl.state = CTRL_STATE_IDLE;
 214         p->len = 0;
 215         break;
 216
 217     default:
 218         break;
 219     }
 220 }
 221
 222 static void async_complete(void *opaque)
 223 {
 224     USBHostDevice *s = opaque;
 225     AsyncURB *aurb;
 226
 227     while (1) {
 228         USBPacket *p;
 229
 230         int r = ioctl(s->fd, USBDEVFS_REAPURBNDELAY, &aurb);
 231         if (r < 0) {
 232             if (errno == EAGAIN) {
 233                 return;
 234             }
 235             if (errno == ENODEV && !s->closing) {
 236                 printf("husb: device %d.%d disconnected\n",
 237                        s->bus_num, s->addr);
 238                 usb_host_close(s);
 239                 usb_host_auto_check(NULL);
 240                 return;
 241             }
 242
 243             DPRINTF("husb: async. reap urb failed errno %d\n", errno);
 244             return;
 245         }
 246
 247         p = aurb->packet;
 248
 249         DPRINTF("husb: async completed. aurb %p status %d alen %d\n",
 250                 aurb, aurb->urb.status, aurb->urb.actual_length);
 251
 252         if (p) {
 253             switch (aurb->urb.status) {
 254             case 0:
 255                 p->len = aurb->urb.actual_length;
 256                 if (aurb->urb.type == USBDEVFS_URB_TYPE_CONTROL) {
 257                     async_complete_ctrl(s, p);
 258                 }
 259                 break;
 260
 261             case -EPIPE:
 262                 set_halt(s, p->devep);
 263                 p->len = USB_RET_STALL;
 264                 break;
 265
 266             default:
 267                 p->len = USB_RET_NAK;
 268                 break;
 269             }
 270
 271             usb_packet_complete(p);
 272         }
 273
 274         async_free(aurb);
 275     }
 276 }
 277
 278 static void async_cancel(USBPacket *unused, void *opaque)
 279 {
 280     AsyncURB *aurb = opaque;
 281     USBHostDevice *s = aurb->hdev;
 282
 283     DPRINTF("husb: async cancel. aurb %p\n", aurb);
 284
 285     /* Mark it as dead (see async_complete above) */
 286     aurb->packet = NULL;
 287
 288     int r = ioctl(s->fd, USBDEVFS_DISCARDURB, aurb);
 289     if (r < 0) {
 290         DPRINTF("husb: async. discard urb failed errno %d\n", errno);
 291     }
 292 }
 293
 294 static int usb_host_claim_interfaces(USBHostDevice *dev, int configuration)
 295 {
 296     int dev_descr_len, config_descr_len;
 297     int interface, nb_interfaces;
 298     int ret, i;
 299
 300     if (configuration == 0) /* address state - ignore */
 301         return 1;
 302
 303     DPRINTF("husb: claiming interfaces. config %d\n", configuration);
 304
 305     i = 0;
 306     dev_descr_len = dev->descr[0];
 307     if (dev_descr_len > dev->descr_len) {
 308         goto fail;
 309     }
 310
 311     i += dev_descr_len;
 312     while (i < dev->descr_len) {
 313         DPRINTF("husb: i is %d, descr_len is %d, dl %d, dt %d\n",
 314                 i, dev->descr_len,
 315                dev->descr[i], dev->descr[i+1]);
 316
 317         if (dev->descr[i+1] != USB_DT_CONFIG) {
 318             i += dev->descr[i];
 319             continue;
 320         }
 321         config_descr_len = dev->descr[i];
 322
 323         printf("husb: config #%d need %d\n", dev->descr[i + 5], configuration);
 324
 325         if (configuration < 0 || configuration == dev->descr[i + 5]) {
 326             configuration = dev->descr[i + 5];
 327             break;
 328         }
 329
 330         i += config_descr_len;
 331     }
 332
 333     if (i >= dev->descr_len) {
 334         fprintf(stderr,
 335                 "husb: update iface failed. no matching configuration\n");
 336         goto fail;
 337     }
 338     nb_interfaces = dev->descr[i + 4];
 339
 340 #ifdef USBDEVFS_DISCONNECT
 341     /* earlier Linux 2.4 do not support that */
 342     {
 343         struct usbdevfs_ioctl ctrl;
 344         for (interface = 0; interface < nb_interfaces; interface++) {
 345             ctrl.ioctl_code = USBDEVFS_DISCONNECT;
 346             ctrl.ifno = interface;
 347             ctrl.data = 0;
 348             ret = ioctl(dev->fd, USBDEVFS_IOCTL, &ctrl);
 349             if (ret < 0 && errno != ENODATA) {
 350                 perror("USBDEVFS_DISCONNECT");
 351                 goto fail;
 352             }
 353         }
 354     }
 355 #endif
 356
 357     /* XXX: only grab if all interfaces are free */
 358     for (interface = 0; interface < nb_interfaces; interface++) {
 359         ret = ioctl(dev->fd, USBDEVFS_CLAIMINTERFACE, &interface);
 360         if (ret < 0) {
 361             if (errno == EBUSY) {
 362                 printf("husb: update iface. device already grabbed\n");
 363             } else {
 364                 perror("husb: failed to claim interface");
 365             }
 366         fail:
 367             return 0;
 368         }
 369     }
 370
 371     printf("husb: %d interfaces claimed for configuration %d\n",
 372            nb_interfaces, configuration);
 373
 374     dev->ninterfaces   = nb_interfaces;
 375     dev->configuration = configuration;
 376     return 1;
 377 }
 378
 379 static int usb_host_release_interfaces(USBHostDevice *s)
 380 {
 381     int ret, i;
 382
 383     DPRINTF("husb: releasing interfaces\n");
 384
 385     for (i = 0; i < s->ninterfaces; i++) {
 386         ret = ioctl(s->fd, USBDEVFS_RELEASEINTERFACE, &i);
 387         if (ret < 0) {
 388             perror("husb: failed to release interface");
 389             return 0;
 390         }
 391     }
 392
 393     return 1;
 394 }
 395
 396 static void usb_host_handle_reset(USBDevice *dev)
 397 {
 398     USBHostDevice *s = DO_UPCAST(USBHostDevice, dev, dev);
 399
 400     DPRINTF("husb: reset device %u.%u\n", s->bus_num, s->addr);
 401
 402     ioctl(s->fd, USBDEVFS_RESET);
 403
 404     usb_host_claim_interfaces(s, s->configuration);
 405 }
 406
 407 static void usb_host_handle_destroy(USBDevice *dev)
 408 {
 409     USBHostDevice *s = (USBHostDevice *)dev;
 410
 411     usb_host_close(s);
 412     QTAILQ_REMOVE(&hostdevs, s, next);
 413     qemu_remove_exit_notifier(&s->exit);
 414 }
 415
 416 static int usb_linux_update_endp_table(USBHostDevice *s);
 417
 418 static int usb_host_handle_data(USBHostDevice *s, USBPacket *p)
 419 {
 420     struct usbdevfs_urb *urb;
 421     AsyncURB *aurb;
 422     int ret;
 423
 424     aurb = async_alloc();
 425     aurb->hdev   = s;
 426     aurb->packet = p;
 427
 428     urb = &aurb->urb;
 429
 430     if (p->pid == USB_TOKEN_IN) {
 431         urb->endpoint = p->devep | 0x80;
 432     } else {
 433         urb->endpoint = p->devep;
 434     }
 435
 436     if (is_halted(s, p->devep)) {
 437         ret = ioctl(s->fd, USBDEVFS_CLEAR_HALT, &urb->endpoint);
 438         if (ret < 0) {
 439             DPRINTF("husb: failed to clear halt. ep 0x%x errno %d\n",
 440                    urb->endpoint, errno);
 441             return USB_RET_NAK;
 442         }
 443         clear_halt(s, p->devep);
 444     }
 445
 446     urb->buffer        = p->data;
 447     urb->buffer_length = p->len;
 448
 449     if (is_isoc(s, p->devep)) {
 450         /* Setup ISOC transfer */
 451         urb->type     = USBDEVFS_URB_TYPE_ISO;
 452         urb->flags    = USBDEVFS_URB_ISO_ASAP;
 453         urb->number_of_packets = 1;
 454         urb->iso_frame_desc[0].length = p->len;
 455     } else {
 456         /* Setup bulk transfer */
 457         urb->type     = USBDEVFS_URB_TYPE_BULK;
 458     }
 459
 460     urb->usercontext = s;
 461
 462     ret = ioctl(s->fd, USBDEVFS_SUBMITURB, urb);
 463
 464     DPRINTF("husb: data submit. ep 0x%x len %u aurb %p\n",
 465             urb->endpoint, p->len, aurb);
 466
 467     if (ret < 0) {
 468         DPRINTF("husb: submit failed. errno %d\n", errno);
 469         async_free(aurb);
 470
 471         switch(errno) {
 472         case ETIMEDOUT:
 473             return USB_RET_NAK;
 474         case EPIPE:
 475         default:
 476             return USB_RET_STALL;
 477         }
 478     }
 479
 480     usb_defer_packet(p, async_cancel, aurb);
 481     return USB_RET_ASYNC;
 482 }
 483
 484 static int ctrl_error(void)
 485 {
 486     if (errno == ETIMEDOUT) {
 487         return USB_RET_NAK;
 488     } else {
 489         return USB_RET_STALL;
 490     }
 491 }
 492
 493 static int usb_host_set_address(USBHostDevice *s, int addr)
 494 {
 495     DPRINTF("husb: ctrl set addr %u\n", addr);
 496     s->dev.addr = addr;
 497     return 0;
 498 }
 499
 500 static int usb_host_set_config(USBHostDevice *s, int config)
 501 {
 502     usb_host_release_interfaces(s);
 503
 504     int ret = ioctl(s->fd, USBDEVFS_SETCONFIGURATION, &config);
 505
 506     DPRINTF("husb: ctrl set config %d ret %d errno %d\n", config, ret, errno);
 507
 508     if (ret < 0) {
 509         return ctrl_error();
 510     }
 511     usb_host_claim_interfaces(s, config);
 512     return 0;
 513 }
 514
 515 static int usb_host_set_interface(USBHostDevice *s, int iface, int alt)
 516 {
 517     struct usbdevfs_setinterface si;
 518     int ret;
 519
 520     si.interface  = iface;
 521     si.altsetting = alt;
 522     ret = ioctl(s->fd, USBDEVFS_SETINTERFACE, &si);
 523
 524     DPRINTF("husb: ctrl set iface %d altset %d ret %d errno %d\n",
 525             iface, alt, ret, errno);
 526
 527     if (ret < 0) {
 528         return ctrl_error();
 529     }
 530     usb_linux_update_endp_table(s);
 531     return 0;
 532 }
 533
 534 static int usb_host_handle_control(USBHostDevice *s, USBPacket *p)
 535 {
 536     struct usbdevfs_urb *urb;
 537     AsyncURB *aurb;
 538     int ret, value, index;
 539     int buffer_len;
 540
 541     /*
 542      * Process certain standard device requests.
 543      * These are infrequent and are processed synchronously.
 544      */
 545     value = le16_to_cpu(s->ctrl.req.wValue);
 546     index = le16_to_cpu(s->ctrl.req.wIndex);
 547
 548     DPRINTF("husb: ctrl type 0x%x req 0x%x val 0x%x index %u len %u\n",
 549             s->ctrl.req.bRequestType, s->ctrl.req.bRequest, value, index,
 550             s->ctrl.len);
 551
 552     if (s->ctrl.req.bRequestType == 0) {
 553         switch (s->ctrl.req.bRequest) {
 554         case USB_REQ_SET_ADDRESS:
 555             return usb_host_set_address(s, value);
 556
 557         case USB_REQ_SET_CONFIGURATION:
 558             return usb_host_set_config(s, value & 0xff);
 559         }
 560     }
 561
 562     if (s->ctrl.req.bRequestType == 1 &&
 563                   s->ctrl.req.bRequest == USB_REQ_SET_INTERFACE) {
 564         return usb_host_set_interface(s, index, value);
 565     }
 566
 567     /* The rest are asynchronous */
 568
 569     buffer_len = 8 + s->ctrl.len;
 570     if (buffer_len > sizeof(s->ctrl.buffer)) {
 571         fprintf(stderr, "husb: ctrl buffer too small (%u > %zu)\n",
 572                 buffer_len, sizeof(s->ctrl.buffer));
 573         return USB_RET_STALL;
 574     }
 575
 576     aurb = async_alloc();
 577     aurb->hdev   = s;
 578     aurb->packet = p;
 579
 580     /*
 581      * Setup ctrl transfer.
 582      *
 583      * s->ctrl is laid out such that data buffer immediately follows
 584      * 'req' struct which is exactly what usbdevfs expects.
 585      */
 586     urb = &aurb->urb;
 587
 588     urb->type     = USBDEVFS_URB_TYPE_CONTROL;
 589     urb->endpoint = p->devep;
 590
 591     urb->buffer        = &s->ctrl.req;
 592     urb->buffer_length = buffer_len;
 593
 594     urb->usercontext = s;
 595
 596     ret = ioctl(s->fd, USBDEVFS_SUBMITURB, urb);
 597
 598     DPRINTF("husb: submit ctrl. len %u aurb %p\n", urb->buffer_length, aurb);
 599
 600     if (ret < 0) {
 601         DPRINTF("husb: submit failed. errno %d\n", errno);
 602         async_free(aurb);
 603
 604         switch(errno) {
 605         case ETIMEDOUT:
 606             return USB_RET_NAK;
 607         case EPIPE:
 608         default:
 609             return USB_RET_STALL;
 610         }
 611     }
 612
 613     usb_defer_packet(p, async_cancel, aurb);
 614     return USB_RET_ASYNC;
 615 }
 616
 617 static int do_token_setup(USBDevice *dev, USBPacket *p)
 618 {
 619     USBHostDevice *s = (USBHostDevice *) dev;
 620     int ret = 0;
 621
 622     if (p->len != 8) {
 623         return USB_RET_STALL;
 624     }
 625
 626     memcpy(&s->ctrl.req, p->data, 8);
 627     s->ctrl.len    = le16_to_cpu(s->ctrl.req.wLength);
 628     s->ctrl.offset = 0;
 629     s->ctrl.state  = CTRL_STATE_SETUP;
 630
 631     if (s->ctrl.req.bRequestType & USB_DIR_IN) {
 632         ret = usb_host_handle_control(s, p);
 633         if (ret < 0) {
 634             return ret;
 635         }
 636
 637         if (ret < s->ctrl.len) {
 638             s->ctrl.len = ret;
 639         }
 640         s->ctrl.state = CTRL_STATE_DATA;
 641     } else {
 642         if (s->ctrl.len == 0) {
 643             s->ctrl.state = CTRL_STATE_ACK;
 644         } else {
 645             s->ctrl.state = CTRL_STATE_DATA;
 646         }
 647     }
 648
 649     return ret;
 650 }
 651
 652 static int do_token_in(USBDevice *dev, USBPacket *p)
 653 {
 654     USBHostDevice *s = (USBHostDevice *) dev;
 655     int ret = 0;
 656
 657     if (p->devep != 0) {
 658         return usb_host_handle_data(s, p);
 659     }
 660
 661     switch(s->ctrl.state) {
 662     case CTRL_STATE_ACK:
 663         if (!(s->ctrl.req.bRequestType & USB_DIR_IN)) {
 664             ret = usb_host_handle_control(s, p);
 665             if (ret == USB_RET_ASYNC) {
 666                 return USB_RET_ASYNC;
 667             }
 668             s->ctrl.state = CTRL_STATE_IDLE;
 669             return ret > 0 ? 0 : ret;
 670         }
 671
 672         return 0;
 673
 674     case CTRL_STATE_DATA:
 675         if (s->ctrl.req.bRequestType & USB_DIR_IN) {
 676             int len = s->ctrl.len - s->ctrl.offset;
 677             if (len > p->len) {
 678                 len = p->len;
 679             }
 680             memcpy(p->data, s->ctrl.buffer + s->ctrl.offset, len);
 681             s->ctrl.offset += len;
 682             if (s->ctrl.offset >= s->ctrl.len) {
 683                 s->ctrl.state = CTRL_STATE_ACK;
 684             }
 685             return len;
 686         }
 687
 688         s->ctrl.state = CTRL_STATE_IDLE;
 689         return USB_RET_STALL;
 690
 691     default:
 692         return USB_RET_STALL;
 693     }
 694 }
 695
 696 static int do_token_out(USBDevice *dev, USBPacket *p)
 697 {
 698     USBHostDevice *s = (USBHostDevice *) dev;
 699
 700     if (p->devep != 0) {
 701         return usb_host_handle_data(s, p);
 702     }
 703
 704     switch(s->ctrl.state) {
 705     case CTRL_STATE_ACK:
 706         if (s->ctrl.req.bRequestType & USB_DIR_IN) {
 707             s->ctrl.state = CTRL_STATE_IDLE;
 708             /* transfer OK */
 709         } else {
 710             /* ignore additional output */
 711         }
 712         return 0;
 713
 714     case CTRL_STATE_DATA:
 715         if (!(s->ctrl.req.bRequestType & USB_DIR_IN)) {
 716             int len = s->ctrl.len - s->ctrl.offset;
 717             if (len > p->len) {
 718                 len = p->len;
 719             }
 720             memcpy(s->ctrl.buffer + s->ctrl.offset, p->data, len);
 721             s->ctrl.offset += len;
 722             if (s->ctrl.offset >= s->ctrl.len) {
 723                 s->ctrl.state = CTRL_STATE_ACK;
 724             }
 725             return len;
 726         }
 727
 728         s->ctrl.state = CTRL_STATE_IDLE;
 729         return USB_RET_STALL;
 730
 731     default:
 732         return USB_RET_STALL;
 733     }
 734 }
 735
 736 /*
 737  * Packet handler.
 738  * Called by the HC (host controller).
 739  *
 740  * Returns length of the transaction or one of the USB_RET_XXX codes.
 741  */
 742 static int usb_host_handle_packet(USBDevice *s, USBPacket *p)
 743 {
 744     switch(p->pid) {
 745     case USB_MSG_ATTACH:
 746         s->state = USB_STATE_ATTACHED;
 747         return 0;
 748
 749     case USB_MSG_DETACH:
 750         s->state = USB_STATE_NOTATTACHED;
 751         return 0;
 752
 753     case USB_MSG_RESET:
 754         s->remote_wakeup = 0;
 755         s->addr = 0;
 756         s->state = USB_STATE_DEFAULT;
 757         s->info->handle_reset(s);
 758         return 0;
 759     }
 760
 761     /* Rest of the PIDs must match our address */
 762     if (s->state < USB_STATE_DEFAULT || p->devaddr != s->addr) {
 763         return USB_RET_NODEV;
 764     }
 765
 766     switch (p->pid) {
 767     case USB_TOKEN_SETUP:
 768         return do_token_setup(s, p);
 769
 770     case USB_TOKEN_IN:
 771         return do_token_in(s, p);
 772
 773     case USB_TOKEN_OUT:
 774         return do_token_out(s, p);
 775
 776     default:
 777         return USB_RET_STALL;
 778     }
 779 }
 780
 781 static int usb_linux_get_configuration(USBHostDevice *s)
 782 {
 783     uint8_t configuration;
 784     struct usb_ctrltransfer ct;
 785     int ret;
 786
 787     if (usb_fs_type == USB_FS_SYS) {
 788         char device_name[32], line[1024];
 789         int configuration;
 790
 791         sprintf(device_name, "%d-%d", s->bus_num, s->devpath);
 792
 793         if (!usb_host_read_file(line, sizeof(line), "bConfigurationValue",
 794                                 device_name)) {
 795             goto usbdevfs;
 796         }
 797         if (sscanf(line, "%d", &configuration) != 1) {
 798             goto usbdevfs;
 799         }
 800         return configuration;
 801     }
 802
 803 usbdevfs:
 804     ct.bRequestType = USB_DIR_IN;
 805     ct.bRequest = USB_REQ_GET_CONFIGURATION;
 806     ct.wValue = 0;
 807     ct.wIndex = 0;
 808     ct.wLength = 1;
 809     ct.data = &configuration;
 810     ct.timeout = 50;
 811
 812     ret = ioctl(s->fd, USBDEVFS_CONTROL, &ct);
 813     if (ret < 0) {
 814         perror("usb_linux_get_configuration");
 815         return -1;
 816     }
 817
 818     /* in address state */
 819     if (configuration == 0) {
 820         return -1;
 821     }
 822
 823     return configuration;
 824 }
 825
 826 static uint8_t usb_linux_get_alt_setting(USBHostDevice *s,
 827     uint8_t configuration, uint8_t interface)
 828 {
 829     uint8_t alt_setting;
 830     struct usb_ctrltransfer ct;
 831     int ret;
 832
 833     if (usb_fs_type == USB_FS_SYS) {
 834         char device_name[64], line[1024];
 835         int alt_setting;
 836
 837         sprintf(device_name, "%d-%d:%d.%d", s->bus_num, s->devpath,
 838                 (int)configuration, (int)interface);
 839
 840         if (!usb_host_read_file(line, sizeof(line), "bAlternateSetting",
 841                                 device_name)) {
 842             goto usbdevfs;
 843         }
 844         if (sscanf(line, "%d", &alt_setting) != 1) {
 845             goto usbdevfs;
 846         }
 847         return alt_setting;
 848     }
 849
 850 usbdevfs:
 851     ct.bRequestType = USB_DIR_IN | USB_RECIP_INTERFACE;
 852     ct.bRequest = USB_REQ_GET_INTERFACE;
 853     ct.wValue = 0;
 854     ct.wIndex = interface;
 855     ct.wLength = 1;
 856     ct.data = &alt_setting;
 857     ct.timeout = 50;
 858     ret = ioctl(s->fd, USBDEVFS_CONTROL, &ct);
 859     if (ret < 0) {
 860         /* Assume alt 0 on error */
 861         return 0;
 862     }
 863
 864     return alt_setting;
 865 }
 866
 867 /* returns 1 on problem encountered or 0 for success */
 868 static int usb_linux_update_endp_table(USBHostDevice *s)
 869 {
 870     uint8_t *descriptors;
 871     uint8_t devep, type, configuration, alt_interface;
 872     int interface, length, i;
 873
 874     i = usb_linux_get_configuration(s);
 875     if (i < 0)
 876         return 1;
 877     configuration = i;
 878
 879     /* get the desired configuration, interface, and endpoint descriptors
 880      * from device description */
 881     descriptors = &s->descr[18];
 882     length = s->descr_len - 18;
 883     i = 0;
 884
 885     if (descriptors[i + 1] != USB_DT_CONFIG ||
 886         descriptors[i + 5] != configuration) {
 887         DPRINTF("invalid descriptor data - configuration\n");
 888         return 1;
 889     }
 890     i += descriptors[i];
 891
 892     while (i < length) {
 893         if (descriptors[i + 1] != USB_DT_INTERFACE ||
 894             (descriptors[i + 1] == USB_DT_INTERFACE &&
 895              descriptors[i + 4] == 0)) {
 896             i += descriptors[i];
 897             continue;
 898         }
 899
 900         interface = descriptors[i + 2];
 901         alt_interface = usb_linux_get_alt_setting(s, configuration, interface);
 902
 903         /* the current interface descriptor is the active interface
 904          * and has endpoints */
 905         if (descriptors[i + 3] != alt_interface) {
 906             i += descriptors[i];
 907             continue;
 908         }
 909
 910         /* advance to the endpoints */
 911         while (i < length && descriptors[i +1] != USB_DT_ENDPOINT) {
 912             i += descriptors[i];
 913         }
 914
 915         if (i >= length)
 916             break;
 917
 918         while (i < length) {
 919             if (descriptors[i + 1] != USB_DT_ENDPOINT) {
 920                 break;
 921             }
 922
 923             devep = descriptors[i + 2];
 924             switch (descriptors[i + 3] & 0x3) {
 925             case 0x00:
 926                 type = USBDEVFS_URB_TYPE_CONTROL;
 927                 break;
 928             case 0x01:
 929                 type = USBDEVFS_URB_TYPE_ISO;
 930                 break;
 931             case 0x02:
 932                 type = USBDEVFS_URB_TYPE_BULK;
 933                 break;
 934             case 0x03:
 935                 type = USBDEVFS_URB_TYPE_INTERRUPT;
 936                 break;
 937             default:
 938                 DPRINTF("usb_host: malformed endpoint type\n");
 939                 type = USBDEVFS_URB_TYPE_BULK;
 940             }
 941             s->endp_table[(devep & 0xf) - 1].type = type;
 942             s->endp_table[(devep & 0xf) - 1].halted = 0;
 943
 944             i += descriptors[i];
 945         }
 946     }
 947     return 0;
 948 }
 949
 950 static int usb_host_open(USBHostDevice *dev, int bus_num,
 951                          int addr, int devpath, const char *prod_name)
 952 {
 953     int fd = -1, ret;
 954     struct usbdevfs_connectinfo ci;
 955     char buf[1024];
 956
 957     if (dev->fd != -1) {
 958         goto fail;
 959     }
 960     printf("husb: open device %d.%d\n", bus_num, addr);
 961
 962     if (!usb_host_device_path) {
 963         perror("husb: USB Host Device Path not set");
 964         goto fail;
 965     }
 966     snprintf(buf, sizeof(buf), "%s/%03d/%03d", usb_host_device_path,
 967              bus_num, addr);
 968     fd = open(buf, O_RDWR | O_NONBLOCK);
 969     if (fd < 0) {
 970         perror(buf);
 971         goto fail;
 972     }
 973     DPRINTF("husb: opened %s\n", buf);
 974
 975     dev->bus_num = bus_num;
 976     dev->addr = addr;
 977     dev->devpath = devpath;
 978     dev->fd = fd;
 979
 980     /* read the device description */
 981     dev->descr_len = read(fd, dev->descr, sizeof(dev->descr));
 982     if (dev->descr_len <= 0) {
 983         perror("husb: reading device data failed");
 984         goto fail;
 985     }
 986
 987 #ifdef DEBUG
 988     {
 989         int x;
 990         printf("=== begin dumping device descriptor data ===\n");
 991         for (x = 0; x < dev->descr_len; x++) {
 992             printf("%02x ", dev->descr[x]);
 993         }
 994         printf("\n=== end dumping device descriptor data ===\n");
 995     }
 996 #endif
 997
 998
 999     /*
1000      * Initial configuration is -1 which makes us claim first
1001      * available config. We used to start with 1, which does not
1002      * always work. I've seen devices where first config starts
1003      * with 2.
1004      */
1005     if (!usb_host_claim_interfaces(dev, -1)) {
1006         goto fail;
1007     }
1008
1009     ret = ioctl(fd, USBDEVFS_CONNECTINFO, &ci);
1010     if (ret < 0) {
1011         perror("usb_host_device_open: USBDEVFS_CONNECTINFO");
1012         goto fail;
1013     }
1014
1015     printf("husb: grabbed usb device %d.%d\n", bus_num, addr);
1016
1017     ret = usb_linux_update_endp_table(dev);
1018     if (ret) {
1019         goto fail;
1020     }
1021
1022     if (ci.slow) {
1023         dev->dev.speed = USB_SPEED_LOW;
1024     } else {
1025         dev->dev.speed = USB_SPEED_HIGH;
1026     }
1027
1028     if (!prod_name || prod_name[0] == '\0') {
1029         snprintf(dev->dev.product_desc, sizeof(dev->dev.product_desc),
1030                  "host:%d.%d", bus_num, addr);
1031     } else {
1032         pstrcpy(dev->dev.product_desc, sizeof(dev->dev.product_desc),
1033                 prod_name);
1034     }
1035
1036     /* USB devio uses 'write' flag to check for async completions */
1037     qemu_set_fd_handler(dev->fd, NULL, async_complete, dev);
1038
1039     usb_device_attach(&dev->dev);
1040     return 0;
1041
1042 fail:
1043     dev->fd = -1;
1044     if (fd != -1) {
1045         close(fd);
1046     }
1047     return -1;
1048 }
1049
1050 static int usb_host_close(USBHostDevice *dev)
1051 {
1052     if (dev->fd == -1) {
1053         return -1;
1054     }
1055
1056     qemu_set_fd_handler(dev->fd, NULL, NULL, NULL);
1057     dev->closing = 1;
1058     async_complete(dev);
1059     dev->closing = 0;
1060     usb_device_detach(&dev->dev);
1061     ioctl(dev->fd, USBDEVFS_RESET);
1062     close(dev->fd);
1063     dev->fd = -1;
1064     return 0;
1065 }
1066
1067 static void usb_host_exit_notifier(struct Notifier* n)
1068 {
1069     USBHostDevice *s = container_of(n, USBHostDevice, exit);
1070
1071     if (s->fd != -1) {
1072         ioctl(s->fd, USBDEVFS_RESET);
1073     }
1074 }
1075
1076 static int usb_host_initfn(USBDevice *dev)
1077 {
1078     USBHostDevice *s = DO_UPCAST(USBHostDevice, dev, dev);
1079
1080     dev->auto_attach = 0;
1081     s->fd = -1;
1082     QTAILQ_INSERT_TAIL(&hostdevs, s, next);
1083     s->exit.notify = usb_host_exit_notifier;
1084     qemu_add_exit_notifier(&s->exit);
1085     usb_host_auto_check(NULL);
1086     return 0;
1087 }
1088
1089 static struct USBDeviceInfo usb_host_dev_info = {
1090     .product_desc   = "USB Host Device",
1091     .qdev.name      = "usb-host",
1092     .qdev.size      = sizeof(USBHostDevice),
1093     .init           = usb_host_initfn,
1094     .handle_packet  = usb_host_handle_packet,
1095     .handle_reset   = usb_host_handle_reset,
1096     .handle_destroy = usb_host_handle_destroy,
1097     .usbdevice_name = "host",
1098     .usbdevice_init = usb_host_device_open,
1099     .qdev.props     = (Property[]) {
1100         DEFINE_PROP_UINT32("hostbus",  USBHostDevice, match.bus_num,    0),
1101         DEFINE_PROP_UINT32("hostaddr", USBHostDevice, match.addr,       0),
1102         DEFINE_PROP_HEX32("vendorid",  USBHostDevice, match.vendor_id,  0),
1103         DEFINE_PROP_HEX32("productid", USBHostDevice, match.product_id, 0),
1104         DEFINE_PROP_END_OF_LIST(),
1105     },
1106 };
1107
1108 static void usb_host_register_devices(void)
1109 {
1110     usb_qdev_register(&usb_host_dev_info);
1111 }
1112 device_init(usb_host_register_devices)
1113
1114 USBDevice *usb_host_device_open(const char *devname)
1115 {
1116     struct USBAutoFilter filter;
1117     USBDevice *dev;
1118     char *p;
1119
1120     dev = usb_create(NULL /* FIXME */, "usb-host");
1121
1122     if (strstr(devname, "auto:")) {
1123         if (parse_filter(devname, &filter) < 0) {
1124             goto fail;
1125         }
1126     } else {
1127         if ((p = strchr(devname, '.'))) {
1128             filter.bus_num    = strtoul(devname, NULL, 0);
1129             filter.addr       = strtoul(p + 1, NULL, 0);
1130             filter.vendor_id  = 0;
1131             filter.product_id = 0;
1132         } else if ((p = strchr(devname, ':'))) {
1133             filter.bus_num    = 0;
1134             filter.addr       = 0;
1135             filter.vendor_id  = strtoul(devname, NULL, 16);
1136             filter.product_id = strtoul(p + 1, NULL, 16);
1137         } else {
1138             goto fail;
1139         }
1140     }
1141
1142     qdev_prop_set_uint32(&dev->qdev, "hostbus",   filter.bus_num);
1143     qdev_prop_set_uint32(&dev->qdev, "hostaddr",  filter.addr);
1144     qdev_prop_set_uint32(&dev->qdev, "vendorid",  filter.vendor_id);
1145     qdev_prop_set_uint32(&dev->qdev, "productid", filter.product_id);
1146     qdev_init_nofail(&dev->qdev);
1147     return dev;
1148
1149 fail:
1150     qdev_free(&dev->qdev);
1151     return NULL;
1152 }
1153
1154 int usb_host_device_close(const char *devname)
1155 {
1156 #if 0
1157     char product_name[PRODUCT_NAME_SZ];
1158     int bus_num, addr;
1159     USBHostDevice *s;
1160
1161     if (strstr(devname, "auto:")) {
1162         return usb_host_auto_del(devname);
1163     }
1164     if (usb_host_find_device(&bus_num, &addr, product_name,
1165                                     sizeof(product_name), devname) < 0) {
1166         return -1;
1167     }
1168     s = hostdev_find(bus_num, addr);
1169     if (s) {
1170         usb_device_delete_addr(s->bus_num, s->dev.addr);
1171         return 0;
1172     }
1173 #endif
1174
1175     return -1;
1176 }
1177
1178 static int get_tag_value(char *buf, int buf_size,
1179                          const char *str, const char *tag,
1180                          const char *stopchars)
1181 {
1182     const char *p;
1183     char *q;
1184     p = strstr(str, tag);
1185     if (!p) {
1186         return -1;
1187     }
1188     p += strlen(tag);
1189     while (qemu_isspace(*p)) {
1190         p++;
1191     }
1192     q = buf;
1193     while (*p != '\0' && !strchr(stopchars, *p)) {
1194         if ((q - buf) < (buf_size - 1)) {
1195             *q++ = *p;
1196         }
1197         p++;
1198     }
1199     *q = '\0';
1200     return q - buf;
1201 }
1202
1203 /*
1204  * Use /proc/bus/usb/devices or /dev/bus/usb/devices file to determine
1205  * host's USB devices. This is legacy support since many distributions
1206  * are moving to /sys/bus/usb
1207  */
1208 static int usb_host_scan_dev(void *opaque, USBScanFunc *func)
1209 {
1210     FILE *f = NULL;
1211     char line[1024];
1212     char buf[1024];
1213     int bus_num, addr, speed, device_count, class_id, product_id, vendor_id;
1214     char product_name[512];
1215     int ret = 0;
1216
1217     if (!usb_host_device_path) {
1218         perror("husb: USB Host Device Path not set");
1219         goto the_end;
1220     }
1221     snprintf(line, sizeof(line), "%s/devices", usb_host_device_path);
1222     f = fopen(line, "r");
1223     if (!f) {
1224         perror("husb: cannot open devices file");
1225         goto the_end;
1226     }
1227
1228     device_count = 0;
1229     bus_num = addr = speed = class_id = product_id = vendor_id = 0;
1230     for(;;) {
1231         if (fgets(line, sizeof(line), f) == NULL) {
1232             break;
1233         }
1234         if (strlen(line) > 0) {
1235             line[strlen(line) - 1] = '\0';
1236         }
1237         if (line[0] == 'T' && line[1] == ':') {
1238             if (device_count && (vendor_id || product_id)) {
1239                 /* New device.  Add the previously discovered device.  */
1240                 ret = func(opaque, bus_num, addr, 0, class_id, vendor_id,
1241                            product_id, product_name, speed);
1242                 if (ret) {
1243                     goto the_end;
1244                 }
1245             }
1246             if (get_tag_value(buf, sizeof(buf), line, "Bus=", " ") < 0) {
1247                 goto fail;
1248             }
1249             bus_num = atoi(buf);
1250             if (get_tag_value(buf, sizeof(buf), line, "Dev#=", " ") < 0) {
1251                 goto fail;
1252             }
1253             addr = atoi(buf);
1254             if (get_tag_value(buf, sizeof(buf), line, "Spd=", " ") < 0) {
1255                 goto fail;
1256             }
1257             if (!strcmp(buf, "480")) {
1258                 speed = USB_SPEED_HIGH;
1259             } else if (!strcmp(buf, "1.5")) {
1260                 speed = USB_SPEED_LOW;
1261             } else {
1262                 speed = USB_SPEED_FULL;
1263             }
1264             product_name[0] = '\0';
1265             class_id = 0xff;
1266             device_count++;
1267             product_id = 0;
1268             vendor_id = 0;
1269         } else if (line[0] == 'P' && line[1] == ':') {
1270             if (get_tag_value(buf, sizeof(buf), line, "Vendor=", " ") < 0) {
1271                 goto fail;
1272             }
1273             vendor_id = strtoul(buf, NULL, 16);
1274             if (get_tag_value(buf, sizeof(buf), line, "ProdID=", " ") < 0) {
1275                 goto fail;
1276             }
1277             product_id = strtoul(buf, NULL, 16);
1278         } else if (line[0] == 'S' && line[1] == ':') {
1279             if (get_tag_value(buf, sizeof(buf), line, "Product=", "") < 0) {
1280                 goto fail;
1281             }
1282             pstrcpy(product_name, sizeof(product_name), buf);
1283         } else if (line[0] == 'D' && line[1] == ':') {
1284             if (get_tag_value(buf, sizeof(buf), line, "Cls=", " (") < 0) {
1285                 goto fail;
1286             }
1287             class_id = strtoul(buf, NULL, 16);
1288         }
1289     fail: ;
1290     }
1291     if (device_count && (vendor_id || product_id)) {
1292         /* Add the last device.  */
1293         ret = func(opaque, bus_num, addr, 0, class_id, vendor_id,
1294                    product_id, product_name, speed);
1295     }
1296  the_end:
1297     if (f) {
1298         fclose(f);
1299     }
1300     return ret;
1301 }
1302
1303 /*
1304  * Read sys file-system device file
1305  *
1306  * @line address of buffer to put file contents in
1307  * @line_size size of line
1308  * @device_file path to device file (printf format string)
1309  * @device_name device being opened (inserted into device_file)
1310  *
1311  * @return 0 failed, 1 succeeded ('line' contains data)
1312  */
1313 static int usb_host_read_file(char *line, size_t line_size,
1314                               const char *device_file, const char *device_name)
1315 {
1316     FILE *f;
1317     int ret = 0;
1318     char filename[PATH_MAX];
1319
1320     snprintf(filename, PATH_MAX, USBSYSBUS_PATH "/devices/%s/%s", device_name,
1321              device_file);
1322     f = fopen(filename, "r");
1323     if (f) {
1324         ret = fgets(line, line_size, f) != NULL;
1325         fclose(f);
1326     }
1327
1328     return ret;
1329 }
1330
1331 /*
1332  * Use /sys/bus/usb/devices/ directory to determine host's USB
1333  * devices.
1334  *
1335  * This code is based on Robert Schiele's original patches posted to
1336  * the Novell bug-tracker https://bugzilla.novell.com/show_bug.cgi?id=241950
1337  */
1338 static int usb_host_scan_sys(void *opaque, USBScanFunc *func)
1339 {
1340     DIR *dir = NULL;
1341     char line[1024];
1342     int bus_num, addr, devpath, speed, class_id, product_id, vendor_id;
1343     int ret = 0;
1344     char product_name[512];
1345     struct dirent *de;
1346
1347     dir = opendir(USBSYSBUS_PATH "/devices");
1348     if (!dir) {
1349         perror("husb: cannot open devices directory");
1350         goto the_end;
1351     }
1352
1353     while ((de = readdir(dir))) {
1354         if (de->d_name[0] != '.' && !strchr(de->d_name, ':')) {
1355             char *tmpstr = de->d_name;
1356             if (!strncmp(de->d_name, "usb", 3)) {
1357                 tmpstr += 3;
1358             }
1359             if (sscanf(tmpstr, "%d-%d", &bus_num, &devpath) < 1) {
1360                 goto the_end;
1361             }
1362
1363             if (!usb_host_read_file(line, sizeof(line), "devnum", de->d_name)) {
1364                 goto the_end;
1365             }
1366             if (sscanf(line, "%d", &addr) != 1) {
1367                 goto the_end;
1368             }
1369             if (!usb_host_read_file(line, sizeof(line), "bDeviceClass",
1370                                     de->d_name)) {
1371                 goto the_end;
1372             }
1373             if (sscanf(line, "%x", &class_id) != 1) {
1374                 goto the_end;
1375             }
1376
1377             if (!usb_host_read_file(line, sizeof(line), "idVendor",
1378                                     de->d_name)) {
1379                 goto the_end;
1380             }
1381             if (sscanf(line, "%x", &vendor_id) != 1) {
1382                 goto the_end;
1383             }
1384             if (!usb_host_read_file(line, sizeof(line), "idProduct",
1385                                     de->d_name)) {
1386                 goto the_end;
1387             }
1388             if (sscanf(line, "%x", &product_id) != 1) {
1389                 goto the_end;
1390             }
1391             if (!usb_host_read_file(line, sizeof(line), "product",
1392                                     de->d_name)) {
1393                 *product_name = 0;
1394             } else {
1395                 if (strlen(line) > 0) {
1396                     line[strlen(line) - 1] = '\0';
1397                 }
1398                 pstrcpy(product_name, sizeof(product_name), line);
1399             }
1400
1401             if (!usb_host_read_file(line, sizeof(line), "speed", de->d_name)) {
1402                 goto the_end;
1403             }
1404             if (!strcmp(line, "480\n")) {
1405                 speed = USB_SPEED_HIGH;
1406             } else if (!strcmp(line, "1.5\n")) {
1407                 speed = USB_SPEED_LOW;
1408             } else {
1409                 speed = USB_SPEED_FULL;
1410             }
1411
1412             ret = func(opaque, bus_num, addr, devpath, class_id, vendor_id,
1413                        product_id, product_name, speed);
1414             if (ret) {
1415                 goto the_end;
1416             }
1417         }
1418     }
1419  the_end:
1420     if (dir) {
1421         closedir(dir);
1422     }
1423     return ret;
1424 }
1425
1426 /*
1427  * Determine how to access the host's USB devices and call the
1428  * specific support function.
1429  */
1430 static int usb_host_scan(void *opaque, USBScanFunc *func)
1431 {
1432     Monitor *mon = cur_mon;
1433     FILE *f = NULL;
1434     DIR *dir = NULL;
1435     int ret = 0;
1436     const char *fs_type[] = {"unknown", "proc", "dev", "sys"};
1437     char devpath[PATH_MAX];
1438
1439     /* only check the host once */
1440     if (!usb_fs_type) {
1441         dir = opendir(USBSYSBUS_PATH "/devices");
1442         if (dir) {
1443             /* devices found in /dev/bus/usb/ (yes - not a mistake!) */
1444             strcpy(devpath, USBDEVBUS_PATH);
1445             usb_fs_type = USB_FS_SYS;
1446             closedir(dir);
1447             DPRINTF(USBDBG_DEVOPENED, USBSYSBUS_PATH);
1448             goto found_devices;
1449         }
1450         f = fopen(USBPROCBUS_PATH "/devices", "r");
1451         if (f) {
1452             /* devices found in /proc/bus/usb/ */
1453             strcpy(devpath, USBPROCBUS_PATH);
1454             usb_fs_type = USB_FS_PROC;
1455             fclose(f);
1456             DPRINTF(USBDBG_DEVOPENED, USBPROCBUS_PATH);
1457             goto found_devices;
1458         }
1459         /* try additional methods if an access method hasn't been found yet */
1460         f = fopen(USBDEVBUS_PATH "/devices", "r");
1461         if (f) {
1462             /* devices found in /dev/bus/usb/ */
1463             strcpy(devpath, USBDEVBUS_PATH);
1464             usb_fs_type = USB_FS_DEV;
1465             fclose(f);
1466             DPRINTF(USBDBG_DEVOPENED, USBDEVBUS_PATH);
1467             goto found_devices;
1468         }
1469     found_devices:
1470         if (!usb_fs_type) {
1471             if (mon) {
1472                 monitor_printf(mon, "husb: unable to access USB devices\n");
1473             }
1474             return -ENOENT;
1475         }
1476
1477         /* the module setting (used later for opening devices) */
1478         usb_host_device_path = qemu_mallocz(strlen(devpath)+1);
1479         strcpy(usb_host_device_path, devpath);
1480         if (mon) {
1481             monitor_printf(mon, "husb: using %s file-system with %s\n",
1482                            fs_type[usb_fs_type], usb_host_device_path);
1483         }
1484     }
1485
1486     switch (usb_fs_type) {
1487     case USB_FS_PROC:
1488     case USB_FS_DEV:
1489         ret = usb_host_scan_dev(opaque, func);
1490         break;
1491     case USB_FS_SYS:
1492         ret = usb_host_scan_sys(opaque, func);
1493         break;
1494     default:
1495         ret = -EINVAL;
1496         break;
1497     }
1498     return ret;
1499 }
1500
1501 static QEMUTimer *usb_auto_timer;
1502
1503 static int usb_host_auto_scan(void *opaque, int bus_num, int addr, int devpath,
1504                               int class_id, int vendor_id, int product_id,
1505                               const char *product_name, int speed)
1506 {
1507     struct USBAutoFilter *f;
1508     struct USBHostDevice *s;
1509
1510     /* Ignore hubs */
1511     if (class_id == 9)
1512         return 0;
1513
1514     QTAILQ_FOREACH(s, &hostdevs, next) {
1515         f = &s->match;
1516
1517         if (f->bus_num > 0 && f->bus_num != bus_num) {
1518             continue;
1519         }
1520         if (f->addr > 0 && f->addr != addr) {
1521             continue;
1522         }
1523
1524         if (f->vendor_id > 0 && f->vendor_id != vendor_id) {
1525             continue;
1526         }
1527
1528         if (f->product_id > 0 && f->product_id != product_id) {
1529             continue;
1530         }
1531         /* We got a match */
1532
1533         /* Already attached ? */
1534         if (s->fd != -1) {
1535             return 0;
1536         }
1537         DPRINTF("husb: auto open: bus_num %d addr %d\n", bus_num, addr);
1538
1539         usb_host_open(s, bus_num, addr, devpath, product_name);
1540     }
1541
1542     return 0;
1543 }
1544
1545 static void usb_host_auto_check(void *unused)
1546 {
1547     struct USBHostDevice *s;
1548     int unconnected = 0;
1549
1550     usb_host_scan(NULL, usb_host_auto_scan);
1551
1552     QTAILQ_FOREACH(s, &hostdevs, next) {
1553         if (s->fd == -1) {
1554             unconnected++;
1555         }
1556     }
1557
1558     if (unconnected == 0) {
1559         /* nothing to watch */
1560         if (usb_auto_timer) {
1561             qemu_del_timer(usb_auto_timer);
1562         }
1563         return;
1564     }
1565
1566     if (!usb_auto_timer) {
1567         usb_auto_timer = qemu_new_timer_ms(rt_clock, usb_host_auto_check, NULL);
1568         if (!usb_auto_timer) {
1569             return;
1570         }
1571     }
1572     qemu_mod_timer(usb_auto_timer, qemu_get_clock_ms(rt_clock) + 2000);
1573 }
1574
1575 /*
1576  * Autoconnect filter
1577  * Format:
1578  *    auto:bus:dev[:vid:pid]
1579  *    auto:bus.dev[:vid:pid]
1580  *
1581  *    bus  - bus number    (dec, * means any)
1582  *    dev  - device number (dec, * means any)
1583  *    vid  - vendor id     (hex, * means any)
1584  *    pid  - product id    (hex, * means any)
1585  *
1586  *    See 'lsusb' output.
1587  */
1588 static int parse_filter(const char *spec, struct USBAutoFilter *f)
1589 {
1590     enum { BUS, DEV, VID, PID, DONE };
1591     const char *p = spec;
1592     int i;
1593
1594     f->bus_num    = 0;
1595     f->addr       = 0;
1596     f->vendor_id  = 0;
1597     f->product_id = 0;
1598
1599     for (i = BUS; i < DONE; i++) {
1600         p = strpbrk(p, ":.");
1601         if (!p) {
1602             break;
1603         }
1604         p++;
1605
1606         if (*p == '*') {
1607             continue;
1608         }
1609         switch(i) {
1610         case BUS: f->bus_num = strtol(p, NULL, 10);    break;
1611         case DEV: f->addr    = strtol(p, NULL, 10);    break;
1612         case VID: f->vendor_id  = strtol(p, NULL, 16); break;
1613         case PID: f->product_id = strtol(p, NULL, 16); break;
1614         }
1615     }
1616
1617     if (i < DEV) {
1618         fprintf(stderr, "husb: invalid auto filter spec %s\n", spec);
1619         return -1;
1620     }
1621
1622     return 0;
1623 }
1624
1625 /**********************/
1626 /* USB host device info */
1627
1628 struct usb_class_info {
1629     int class;
1630     const char *class_name;
1631 };
1632
1633 static const struct usb_class_info usb_class_info[] = {
1634     { USB_CLASS_AUDIO, "Audio"},
1635     { USB_CLASS_COMM, "Communication"},
1636     { USB_CLASS_HID, "HID"},
1637     { USB_CLASS_HUB, "Hub" },
1638     { USB_CLASS_PHYSICAL, "Physical" },
1639     { USB_CLASS_PRINTER, "Printer" },
1640     { USB_CLASS_MASS_STORAGE, "Storage" },
1641     { USB_CLASS_CDC_DATA, "Data" },
1642     { USB_CLASS_APP_SPEC, "Application Specific" },
1643     { USB_CLASS_VENDOR_SPEC, "Vendor Specific" },
1644     { USB_CLASS_STILL_IMAGE, "Still Image" },
1645     { USB_CLASS_CSCID, "Smart Card" },
1646     { USB_CLASS_CONTENT_SEC, "Content Security" },
1647     { -1, NULL }
1648 };
1649
1650 static const char *usb_class_str(uint8_t class)
1651 {
1652     const struct usb_class_info *p;
1653     for(p = usb_class_info; p->class != -1; p++) {
1654         if (p->class == class) {
1655             break;
1656         }
1657     }
1658     return p->class_name;
1659 }
1660
1661 static void usb_info_device(Monitor *mon, int bus_num, int addr, int class_id,
1662                             int vendor_id, int product_id,
1663                             const char *product_name,
1664                             int speed)
1665 {
1666     const char *class_str, *speed_str;
1667
1668     switch(speed) {
1669     case USB_SPEED_LOW:
1670         speed_str = "1.5";
1671         break;
1672     case USB_SPEED_FULL:
1673         speed_str = "12";
1674         break;
1675     case USB_SPEED_HIGH:
1676         speed_str = "480";
1677         break;
1678     default:
1679         speed_str = "?";
1680         break;
1681     }
1682
1683     monitor_printf(mon, "  Device %d.%d, speed %s Mb/s\n",
1684                 bus_num, addr, speed_str);
1685     class_str = usb_class_str(class_id);
1686     if (class_str) {
1687         monitor_printf(mon, "    %s:", class_str);
1688     } else {
1689         monitor_printf(mon, "    Class %02x:", class_id);
1690     }
1691     monitor_printf(mon, " USB device %04x:%04x", vendor_id, product_id);
1692     if (product_name[0] != '\0') {
1693         monitor_printf(mon, ", %s", product_name);
1694     }
1695     monitor_printf(mon, "\n");
1696 }
1697
1698 static int usb_host_info_device(void *opaque, int bus_num, int addr,
1699                                 int devpath, int class_id,
1700                                 int vendor_id, int product_id,
1701                                 const char *product_name,
1702                                 int speed)
1703 {
1704     Monitor *mon = opaque;
1705
1706     usb_info_device(mon, bus_num, addr, class_id, vendor_id, product_id,
1707                     product_name, speed);
1708     return 0;
1709 }
1710
1711 static void dec2str(int val, char *str, size_t size)
1712 {
1713     if (val == 0) {
1714         snprintf(str, size, "*");
1715     } else {
1716         snprintf(str, size, "%d", val);
1717     }
1718 }
1719
1720 static void hex2str(int val, char *str, size_t size)
1721 {
1722     if (val == 0) {
1723         snprintf(str, size, "*");
1724     } else {
1725         snprintf(str, size, "%04x", val);
1726     }
1727 }
1728
1729 void usb_host_info(Monitor *mon)
1730 {
1731     struct USBAutoFilter *f;
1732     struct USBHostDevice *s;
1733
1734     usb_host_scan(mon, usb_host_info_device);
1735
1736     if (QTAILQ_EMPTY(&hostdevs)) {
1737         return;
1738     }
1739
1740     monitor_printf(mon, "  Auto filters:\n");
1741     QTAILQ_FOREACH(s, &hostdevs, next) {
1742         char bus[10], addr[10], vid[10], pid[10];
1743         f = &s->match;
1744         dec2str(f->bus_num, bus, sizeof(bus));
1745         dec2str(f->addr, addr, sizeof(addr));
1746         hex2str(f->vendor_id, vid, sizeof(vid));
1747         hex2str(f->product_id, pid, sizeof(pid));
1748         monitor_printf(mon, "    Device %s.%s ID %s:%s\n",
1749                        bus, addr, vid, pid);
1750     }
1751 }