btbcm.c 9.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389
  1. /*
  2. *
  3. * Bluetooth support for Broadcom devices
  4. *
  5. * Copyright (C) 2015 Intel Corporation
  6. *
  7. *
  8. * This program is free software; you can redistribute it and/or modify
  9. * it under the terms of the GNU General Public License as published by
  10. * the Free Software Foundation; either version 2 of the License, or
  11. * (at your option) any later version.
  12. *
  13. * This program is distributed in the hope that it will be useful,
  14. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  15. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  16. * GNU General Public License for more details.
  17. *
  18. * You should have received a copy of the GNU General Public License
  19. * along with this program; if not, write to the Free Software
  20. * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
  21. *
  22. */
  23. #include <linux/module.h>
  24. #include <linux/firmware.h>
  25. #include <asm/unaligned.h>
  26. #include <net/bluetooth/bluetooth.h>
  27. #include <net/bluetooth/hci_core.h>
  28. #include "btbcm.h"
  29. #define VERSION "0.1"
  30. #define BDADDR_BCM20702A0 (&(bdaddr_t) {{0x00, 0xa0, 0x02, 0x70, 0x20, 0x00}})
  31. int btbcm_check_bdaddr(struct hci_dev *hdev)
  32. {
  33. struct hci_rp_read_bd_addr *bda;
  34. struct sk_buff *skb;
  35. skb = __hci_cmd_sync(hdev, HCI_OP_READ_BD_ADDR, 0, NULL,
  36. HCI_INIT_TIMEOUT);
  37. if (IS_ERR(skb)) {
  38. int err = PTR_ERR(skb);
  39. BT_ERR("%s: BCM: Reading device address failed (%d)",
  40. hdev->name, err);
  41. return err;
  42. }
  43. if (skb->len != sizeof(*bda)) {
  44. BT_ERR("%s: BCM: Device address length mismatch", hdev->name);
  45. kfree_skb(skb);
  46. return -EIO;
  47. }
  48. bda = (struct hci_rp_read_bd_addr *)skb->data;
  49. /* The address 00:20:70:02:A0:00 indicates a BCM20702A0 controller
  50. * with no configured address.
  51. */
  52. if (!bacmp(&bda->bdaddr, BDADDR_BCM20702A0)) {
  53. BT_INFO("%s: BCM: Using default device address (%pMR)",
  54. hdev->name, &bda->bdaddr);
  55. set_bit(HCI_QUIRK_INVALID_BDADDR, &hdev->quirks);
  56. }
  57. kfree_skb(skb);
  58. return 0;
  59. }
  60. EXPORT_SYMBOL_GPL(btbcm_check_bdaddr);
  61. int btbcm_set_bdaddr(struct hci_dev *hdev, const bdaddr_t *bdaddr)
  62. {
  63. struct sk_buff *skb;
  64. int err;
  65. skb = __hci_cmd_sync(hdev, 0xfc01, 6, bdaddr, HCI_INIT_TIMEOUT);
  66. if (IS_ERR(skb)) {
  67. err = PTR_ERR(skb);
  68. BT_ERR("%s: BCM: Change address command failed (%d)",
  69. hdev->name, err);
  70. return err;
  71. }
  72. kfree_skb(skb);
  73. return 0;
  74. }
  75. EXPORT_SYMBOL_GPL(btbcm_set_bdaddr);
  76. int btbcm_patchram(struct hci_dev *hdev, const struct firmware *fw)
  77. {
  78. const struct hci_command_hdr *cmd;
  79. const u8 *fw_ptr;
  80. size_t fw_size;
  81. struct sk_buff *skb;
  82. u16 opcode;
  83. int err = 0;
  84. /* Start Download */
  85. skb = __hci_cmd_sync(hdev, 0xfc2e, 0, NULL, HCI_INIT_TIMEOUT);
  86. if (IS_ERR(skb)) {
  87. err = PTR_ERR(skb);
  88. BT_ERR("%s: BCM: Download Minidrv command failed (%d)",
  89. hdev->name, err);
  90. goto done;
  91. }
  92. kfree_skb(skb);
  93. /* 50 msec delay after Download Minidrv completes */
  94. msleep(50);
  95. fw_ptr = fw->data;
  96. fw_size = fw->size;
  97. while (fw_size >= sizeof(*cmd)) {
  98. const u8 *cmd_param;
  99. cmd = (struct hci_command_hdr *)fw_ptr;
  100. fw_ptr += sizeof(*cmd);
  101. fw_size -= sizeof(*cmd);
  102. if (fw_size < cmd->plen) {
  103. BT_ERR("%s: BCM: Patch is corrupted", hdev->name);
  104. err = -EINVAL;
  105. goto done;
  106. }
  107. cmd_param = fw_ptr;
  108. fw_ptr += cmd->plen;
  109. fw_size -= cmd->plen;
  110. opcode = le16_to_cpu(cmd->opcode);
  111. skb = __hci_cmd_sync(hdev, opcode, cmd->plen, cmd_param,
  112. HCI_INIT_TIMEOUT);
  113. if (IS_ERR(skb)) {
  114. err = PTR_ERR(skb);
  115. BT_ERR("%s: BCM: Patch command %04x failed (%d)",
  116. hdev->name, opcode, err);
  117. goto done;
  118. }
  119. kfree_skb(skb);
  120. }
  121. /* 250 msec delay after Launch Ram completes */
  122. msleep(250);
  123. done:
  124. return err;
  125. }
  126. EXPORT_SYMBOL(btbcm_patchram);
  127. static int btbcm_reset(struct hci_dev *hdev)
  128. {
  129. struct sk_buff *skb;
  130. skb = __hci_cmd_sync(hdev, HCI_OP_RESET, 0, NULL, HCI_INIT_TIMEOUT);
  131. if (IS_ERR(skb)) {
  132. int err = PTR_ERR(skb);
  133. BT_ERR("%s: BCM: Reset failed (%d)", hdev->name, err);
  134. return err;
  135. }
  136. kfree_skb(skb);
  137. return 0;
  138. }
  139. static struct sk_buff *btbcm_read_local_version(struct hci_dev *hdev)
  140. {
  141. struct sk_buff *skb;
  142. skb = __hci_cmd_sync(hdev, HCI_OP_READ_LOCAL_VERSION, 0, NULL,
  143. HCI_INIT_TIMEOUT);
  144. if (IS_ERR(skb)) {
  145. BT_ERR("%s: BCM: Reading local version info failed (%ld)",
  146. hdev->name, PTR_ERR(skb));
  147. return skb;
  148. }
  149. if (skb->len != sizeof(struct hci_rp_read_local_version)) {
  150. BT_ERR("%s: BCM: Local version length mismatch", hdev->name);
  151. kfree_skb(skb);
  152. return ERR_PTR(-EIO);
  153. }
  154. return skb;
  155. }
  156. static struct sk_buff *btbcm_read_verbose_config(struct hci_dev *hdev)
  157. {
  158. struct sk_buff *skb;
  159. skb = __hci_cmd_sync(hdev, 0xfc79, 0, NULL, HCI_INIT_TIMEOUT);
  160. if (IS_ERR(skb)) {
  161. BT_ERR("%s: BCM: Read verbose config info failed (%ld)",
  162. hdev->name, PTR_ERR(skb));
  163. return skb;
  164. }
  165. if (skb->len != 7) {
  166. BT_ERR("%s: BCM: Verbose config length mismatch", hdev->name);
  167. kfree_skb(skb);
  168. return ERR_PTR(-EIO);
  169. }
  170. return skb;
  171. }
  172. static struct sk_buff *btbcm_read_usb_product(struct hci_dev *hdev)
  173. {
  174. struct sk_buff *skb;
  175. skb = __hci_cmd_sync(hdev, 0xfc5a, 0, NULL, HCI_INIT_TIMEOUT);
  176. if (IS_ERR(skb)) {
  177. BT_ERR("%s: BCM: Read USB product info failed (%ld)",
  178. hdev->name, PTR_ERR(skb));
  179. return skb;
  180. }
  181. if (skb->len != 5) {
  182. BT_ERR("%s: BCM: USB product length mismatch", hdev->name);
  183. kfree_skb(skb);
  184. return ERR_PTR(-EIO);
  185. }
  186. return skb;
  187. }
  188. static const struct {
  189. u16 subver;
  190. const char *name;
  191. } bcm_uart_subver_table[] = {
  192. { 0x410e, "BCM43341B0" }, /* 002.001.014 */
  193. { }
  194. };
  195. static const struct {
  196. u16 subver;
  197. const char *name;
  198. } bcm_usb_subver_table[] = {
  199. { 0x210b, "BCM43142A0" }, /* 001.001.011 */
  200. { 0x2112, "BCM4314A0" }, /* 001.001.018 */
  201. { 0x2118, "BCM20702A0" }, /* 001.001.024 */
  202. { 0x2126, "BCM4335A0" }, /* 001.001.038 */
  203. { 0x220e, "BCM20702A1" }, /* 001.002.014 */
  204. { 0x230f, "BCM4354A2" }, /* 001.003.015 */
  205. { 0x4106, "BCM4335B0" }, /* 002.001.006 */
  206. { 0x410e, "BCM20702B0" }, /* 002.001.014 */
  207. { 0x6109, "BCM4335C0" }, /* 003.001.009 */
  208. { 0x610c, "BCM4354" }, /* 003.001.012 */
  209. { }
  210. };
  211. int btbcm_setup_patchram(struct hci_dev *hdev)
  212. {
  213. char fw_name[64];
  214. const struct firmware *fw;
  215. u16 subver, rev, pid, vid;
  216. const char *hw_name = NULL;
  217. struct sk_buff *skb;
  218. struct hci_rp_read_local_version *ver;
  219. int i, err;
  220. /* Reset */
  221. err = btbcm_reset(hdev);
  222. if (err)
  223. return err;
  224. /* Read Local Version Info */
  225. skb = btbcm_read_local_version(hdev);
  226. if (IS_ERR(skb))
  227. return PTR_ERR(skb);
  228. ver = (struct hci_rp_read_local_version *)skb->data;
  229. rev = le16_to_cpu(ver->hci_rev);
  230. subver = le16_to_cpu(ver->lmp_subver);
  231. kfree_skb(skb);
  232. /* Read Verbose Config Version Info */
  233. skb = btbcm_read_verbose_config(hdev);
  234. if (IS_ERR(skb))
  235. return PTR_ERR(skb);
  236. BT_INFO("%s: BCM: chip id %u", hdev->name, skb->data[1]);
  237. kfree_skb(skb);
  238. switch ((rev & 0xf000) >> 12) {
  239. case 0:
  240. for (i = 0; bcm_uart_subver_table[i].name; i++) {
  241. if (subver == bcm_uart_subver_table[i].subver) {
  242. hw_name = bcm_uart_subver_table[i].name;
  243. break;
  244. }
  245. }
  246. snprintf(fw_name, sizeof(fw_name), "brcm/%s.hcd",
  247. hw_name ? : "BCM");
  248. break;
  249. case 1:
  250. case 2:
  251. /* Read USB Product Info */
  252. skb = btbcm_read_usb_product(hdev);
  253. if (IS_ERR(skb))
  254. return PTR_ERR(skb);
  255. vid = get_unaligned_le16(skb->data + 1);
  256. pid = get_unaligned_le16(skb->data + 3);
  257. kfree_skb(skb);
  258. for (i = 0; bcm_usb_subver_table[i].name; i++) {
  259. if (subver == bcm_usb_subver_table[i].subver) {
  260. hw_name = bcm_usb_subver_table[i].name;
  261. break;
  262. }
  263. }
  264. snprintf(fw_name, sizeof(fw_name), "brcm/%s-%4.4x-%4.4x.hcd",
  265. hw_name ? : "BCM", vid, pid);
  266. break;
  267. default:
  268. return 0;
  269. }
  270. BT_INFO("%s: %s (%3.3u.%3.3u.%3.3u) build %4.4u", hdev->name,
  271. hw_name ? : "BCM", (subver & 0x7000) >> 13,
  272. (subver & 0x1f00) >> 8, (subver & 0x00ff), rev & 0x0fff);
  273. err = request_firmware(&fw, fw_name, &hdev->dev);
  274. if (err < 0) {
  275. BT_INFO("%s: BCM: Patch %s not found", hdev->name, fw_name);
  276. return 0;
  277. }
  278. btbcm_patchram(hdev, fw);
  279. release_firmware(fw);
  280. /* Reset */
  281. err = btbcm_reset(hdev);
  282. if (err)
  283. return err;
  284. /* Read Local Version Info */
  285. skb = btbcm_read_local_version(hdev);
  286. if (IS_ERR(skb))
  287. return PTR_ERR(skb);
  288. ver = (struct hci_rp_read_local_version *)skb->data;
  289. rev = le16_to_cpu(ver->hci_rev);
  290. subver = le16_to_cpu(ver->lmp_subver);
  291. kfree_skb(skb);
  292. BT_INFO("%s: %s (%3.3u.%3.3u.%3.3u) build %4.4u", hdev->name,
  293. hw_name ? : "BCM", (subver & 0x7000) >> 13,
  294. (subver & 0x1f00) >> 8, (subver & 0x00ff), rev & 0x0fff);
  295. btbcm_check_bdaddr(hdev);
  296. set_bit(HCI_QUIRK_STRICT_DUPLICATE_FILTER, &hdev->quirks);
  297. return 0;
  298. }
  299. EXPORT_SYMBOL_GPL(btbcm_setup_patchram);
  300. int btbcm_setup_apple(struct hci_dev *hdev)
  301. {
  302. struct sk_buff *skb;
  303. /* Read Verbose Config Version Info */
  304. skb = btbcm_read_verbose_config(hdev);
  305. if (IS_ERR(skb))
  306. return PTR_ERR(skb);
  307. BT_INFO("%s: BCM: chip id %u build %4.4u", hdev->name, skb->data[1],
  308. get_unaligned_le16(skb->data + 5));
  309. kfree_skb(skb);
  310. set_bit(HCI_QUIRK_STRICT_DUPLICATE_FILTER, &hdev->quirks);
  311. return 0;
  312. }
  313. EXPORT_SYMBOL_GPL(btbcm_setup_apple);
  314. MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
  315. MODULE_DESCRIPTION("Bluetooth support for Broadcom devices ver " VERSION);
  316. MODULE_VERSION(VERSION);
  317. MODULE_LICENSE("GPL");