1 // SPDX-License-Identifier: GPL-2.0
2 #include <linux/configfs.h>
3 #include <linux/module.h>
4 #include <linux/slab.h>
5 #include <linux/device.h>
6 #include <linux/nls.h>
7 #include <linux/usb/composite.h>
8 #include <linux/usb/gadget_configfs.h>
9 #include "configfs.h"
10 #include "u_f.h"
11 #include "u_os_desc.h"
12 
check_user_usb_string(const char *name, struct usb_gadget_strings *stringtab_dev)13 int check_user_usb_string(const char *name,
14 		struct usb_gadget_strings *stringtab_dev)
15 {
16 	u16 num;
17 	int ret;
18 
19 	ret = kstrtou16(name, 0, &num);
20 	if (ret)
21 		return ret;
22 
23 	if (!usb_validate_langid(num))
24 		return -EINVAL;
25 
26 	stringtab_dev->language = num;
27 	return 0;
28 }
29 
30 #define MAX_NAME_LEN	40
31 #define MAX_USB_STRING_LANGS 2
32 
33 static const struct usb_descriptor_header *otg_desc[2];
34 
35 struct gadget_info {
36 	struct config_group group;
37 	struct config_group functions_group;
38 	struct config_group configs_group;
39 	struct config_group strings_group;
40 	struct config_group os_desc_group;
41 
42 	struct mutex lock;
43 	struct usb_gadget_strings *gstrings[MAX_USB_STRING_LANGS + 1];
44 	struct list_head string_list;
45 	struct list_head available_func;
46 
47 	struct usb_composite_driver composite;
48 	struct usb_composite_dev cdev;
49 	bool use_os_desc;
50 	char b_vendor_code;
51 	char qw_sign[OS_STRING_QW_SIGN_LEN];
52 	spinlock_t spinlock;
53 	bool unbind;
54 };
55 
to_gadget_info(struct config_item *item)56 static inline struct gadget_info *to_gadget_info(struct config_item *item)
57 {
58 	 return container_of(to_config_group(item), struct gadget_info, group);
59 }
60 
61 struct config_usb_cfg {
62 	struct config_group group;
63 	struct config_group strings_group;
64 	struct list_head string_list;
65 	struct usb_configuration c;
66 	struct list_head func_list;
67 	struct usb_gadget_strings *gstrings[MAX_USB_STRING_LANGS + 1];
68 };
69 
to_config_usb_cfg(struct config_item *item)70 static inline struct config_usb_cfg *to_config_usb_cfg(struct config_item *item)
71 {
72 	return container_of(to_config_group(item), struct config_usb_cfg,
73 			group);
74 }
75 
76 struct gadget_strings {
77 	struct usb_gadget_strings stringtab_dev;
78 	struct usb_string strings[USB_GADGET_FIRST_AVAIL_IDX];
79 	char *manufacturer;
80 	char *product;
81 	char *serialnumber;
82 
83 	struct config_group group;
84 	struct list_head list;
85 };
86 
87 struct os_desc {
88 	struct config_group group;
89 };
90 
91 struct gadget_config_name {
92 	struct usb_gadget_strings stringtab_dev;
93 	struct usb_string strings;
94 	char *configuration;
95 
96 	struct config_group group;
97 	struct list_head list;
98 };
99 
100 #define USB_MAX_STRING_WITH_NULL_LEN	(USB_MAX_STRING_LEN+1)
101 
usb_string_copy(const char *s, char **s_copy)102 static int usb_string_copy(const char *s, char **s_copy)
103 {
104 	int ret;
105 	char *str;
106 	char *copy = *s_copy;
107 
108 	ret = strlen(s);
109 	if (ret > USB_MAX_STRING_LEN)
110 		return -EOVERFLOW;
111 	if (ret < 1)
112 		return -EINVAL;
113 
114 	if (copy) {
115 		str = copy;
116 	} else {
117 		str = kmalloc(USB_MAX_STRING_WITH_NULL_LEN, GFP_KERNEL);
118 		if (!str)
119 			return -ENOMEM;
120 	}
121 	strcpy(str, s);
122 	if (str[ret - 1] == '\n')
123 		str[ret - 1] = '\0';
124 	*s_copy = str;
125 	return 0;
126 }
127 
128 #define GI_DEVICE_DESC_SIMPLE_R_u8(__name)	\
129 static ssize_t gadget_dev_desc_##__name##_show(struct config_item *item, \
130 			char *page)	\
131 {	\
132 	return sprintf(page, "0x%02x\n", \
133 		to_gadget_info(item)->cdev.desc.__name); \
134 }
135 
136 #define GI_DEVICE_DESC_SIMPLE_R_u16(__name)	\
137 static ssize_t gadget_dev_desc_##__name##_show(struct config_item *item, \
138 			char *page)	\
139 {	\
140 	return sprintf(page, "0x%04x\n", \
141 		le16_to_cpup(&to_gadget_info(item)->cdev.desc.__name)); \
142 }
143 
144 
145 #define GI_DEVICE_DESC_SIMPLE_W_u8(_name)		\
146 static ssize_t gadget_dev_desc_##_name##_store(struct config_item *item, \
147 		const char *page, size_t len)		\
148 {							\
149 	u8 val;						\
150 	int ret;					\
151 	ret = kstrtou8(page, 0, &val);			\
152 	if (ret)					\
153 		return ret;				\
154 	to_gadget_info(item)->cdev.desc._name = val;	\
155 	return len;					\
156 }
157 
158 #define GI_DEVICE_DESC_SIMPLE_W_u16(_name)	\
159 static ssize_t gadget_dev_desc_##_name##_store(struct config_item *item, \
160 		const char *page, size_t len)		\
161 {							\
162 	u16 val;					\
163 	int ret;					\
164 	ret = kstrtou16(page, 0, &val);			\
165 	if (ret)					\
166 		return ret;				\
167 	to_gadget_info(item)->cdev.desc._name = cpu_to_le16p(&val);	\
168 	return len;					\
169 }
170 
171 #define GI_DEVICE_DESC_SIMPLE_RW(_name, _type)	\
172 	GI_DEVICE_DESC_SIMPLE_R_##_type(_name)	\
173 	GI_DEVICE_DESC_SIMPLE_W_##_type(_name)
174 
175 GI_DEVICE_DESC_SIMPLE_R_u16(bcdUSB);
176 GI_DEVICE_DESC_SIMPLE_RW(bDeviceClass, u8);
177 GI_DEVICE_DESC_SIMPLE_RW(bDeviceSubClass, u8);
178 GI_DEVICE_DESC_SIMPLE_RW(bDeviceProtocol, u8);
179 GI_DEVICE_DESC_SIMPLE_RW(bMaxPacketSize0, u8);
180 GI_DEVICE_DESC_SIMPLE_RW(idVendor, u16);
181 GI_DEVICE_DESC_SIMPLE_RW(idProduct, u16);
182 GI_DEVICE_DESC_SIMPLE_R_u16(bcdDevice);
183 
is_valid_bcd(u16 bcd_val)184 static ssize_t is_valid_bcd(u16 bcd_val)
185 {
186 	if ((bcd_val & 0xf) > 9)
187 		return -EINVAL;
188 	if (((bcd_val >> 4) & 0xf) > 9)
189 		return -EINVAL;
190 	if (((bcd_val >> 8) & 0xf) > 9)
191 		return -EINVAL;
192 	if (((bcd_val >> 12) & 0xf) > 9)
193 		return -EINVAL;
194 	return 0;
195 }
196 
gadget_dev_desc_bcdDevice_store(struct config_item *item, const char *page, size_t len)197 static ssize_t gadget_dev_desc_bcdDevice_store(struct config_item *item,
198 		const char *page, size_t len)
199 {
200 	u16 bcdDevice;
201 	int ret;
202 
203 	ret = kstrtou16(page, 0, &bcdDevice);
204 	if (ret)
205 		return ret;
206 	ret = is_valid_bcd(bcdDevice);
207 	if (ret)
208 		return ret;
209 
210 	to_gadget_info(item)->cdev.desc.bcdDevice = cpu_to_le16(bcdDevice);
211 	return len;
212 }
213 
gadget_dev_desc_bcdUSB_store(struct config_item *item, const char *page, size_t len)214 static ssize_t gadget_dev_desc_bcdUSB_store(struct config_item *item,
215 		const char *page, size_t len)
216 {
217 	u16 bcdUSB;
218 	int ret;
219 
220 	ret = kstrtou16(page, 0, &bcdUSB);
221 	if (ret)
222 		return ret;
223 	ret = is_valid_bcd(bcdUSB);
224 	if (ret)
225 		return ret;
226 
227 	to_gadget_info(item)->cdev.desc.bcdUSB = cpu_to_le16(bcdUSB);
228 	return len;
229 }
230 
gadget_dev_desc_UDC_show(struct config_item *item, char *page)231 static ssize_t gadget_dev_desc_UDC_show(struct config_item *item, char *page)
232 {
233 	struct gadget_info *gi = to_gadget_info(item);
234 	char *udc_name;
235 	int ret;
236 
237 	mutex_lock(&gi->lock);
238 	udc_name = gi->composite.gadget_driver.udc_name;
239 	ret = sprintf(page, "%s\n", udc_name ?: "");
240 	mutex_unlock(&gi->lock);
241 
242 	return ret;
243 }
244 
unregister_gadget(struct gadget_info *gi)245 static int unregister_gadget(struct gadget_info *gi)
246 {
247 	int ret;
248 
249 	if (!gi->composite.gadget_driver.udc_name)
250 		return -ENODEV;
251 
252 	ret = usb_gadget_unregister_driver(&gi->composite.gadget_driver);
253 	if (ret)
254 		return ret;
255 	kfree(gi->composite.gadget_driver.udc_name);
256 	gi->composite.gadget_driver.udc_name = NULL;
257 	return 0;
258 }
259 
gadget_dev_desc_UDC_store(struct config_item *item, const char *page, size_t len)260 static ssize_t gadget_dev_desc_UDC_store(struct config_item *item,
261 		const char *page, size_t len)
262 {
263 	struct gadget_info *gi = to_gadget_info(item);
264 	char *name;
265 	int ret;
266 
267 	if (strlen(page) < len)
268 		return -EOVERFLOW;
269 
270 	name = kstrdup(page, GFP_KERNEL);
271 	if (!name)
272 		return -ENOMEM;
273 	if (name[len - 1] == '\n')
274 		name[len - 1] = '\0';
275 
276 	mutex_lock(&gi->lock);
277 
278 	if (!strlen(name)) {
279 		ret = unregister_gadget(gi);
280 		if (ret)
281 			goto err;
282 		kfree(name);
283 	} else {
284 		if (gi->composite.gadget_driver.udc_name) {
285 			ret = -EBUSY;
286 			goto err;
287 		}
288 		gi->composite.gadget_driver.udc_name = name;
289 		ret = usb_gadget_probe_driver(&gi->composite.gadget_driver);
290 		if (ret) {
291 			gi->composite.gadget_driver.udc_name = NULL;
292 			goto err;
293 		}
294 	}
295 	mutex_unlock(&gi->lock);
296 	return len;
297 err:
298 	kfree(name);
299 	mutex_unlock(&gi->lock);
300 	return ret;
301 }
302 
gadget_dev_desc_max_speed_show(struct config_item *item, char *page)303 static ssize_t gadget_dev_desc_max_speed_show(struct config_item *item,
304 					      char *page)
305 {
306 	enum usb_device_speed speed = to_gadget_info(item)->composite.max_speed;
307 
308 	return sprintf(page, "%s\n", usb_speed_string(speed));
309 }
310 
gadget_dev_desc_max_speed_store(struct config_item *item, const char *page, size_t len)311 static ssize_t gadget_dev_desc_max_speed_store(struct config_item *item,
312 					       const char *page, size_t len)
313 {
314 	struct gadget_info *gi = to_gadget_info(item);
315 
316 	mutex_lock(&gi->lock);
317 
318 	/* Prevent changing of max_speed after the driver is binded */
319 	if (gi->composite.gadget_driver.udc_name)
320 		goto err;
321 
322 	if (strncmp(page, "super-speed-plus", 16) == 0)
323 		gi->composite.max_speed = USB_SPEED_SUPER_PLUS;
324 	else if (strncmp(page, "super-speed", 11) == 0)
325 		gi->composite.max_speed = USB_SPEED_SUPER;
326 	else if (strncmp(page, "high-speed", 10) == 0)
327 		gi->composite.max_speed = USB_SPEED_HIGH;
328 	else if (strncmp(page, "full-speed", 10) == 0)
329 		gi->composite.max_speed = USB_SPEED_FULL;
330 	else if (strncmp(page, "low-speed", 9) == 0)
331 		gi->composite.max_speed = USB_SPEED_LOW;
332 	else
333 		goto err;
334 
335 	gi->composite.gadget_driver.max_speed = gi->composite.max_speed;
336 
337 	mutex_unlock(&gi->lock);
338 	return len;
339 err:
340 	mutex_unlock(&gi->lock);
341 	return -EINVAL;
342 }
343 
344 CONFIGFS_ATTR(gadget_dev_desc_, bDeviceClass);
345 CONFIGFS_ATTR(gadget_dev_desc_, bDeviceSubClass);
346 CONFIGFS_ATTR(gadget_dev_desc_, bDeviceProtocol);
347 CONFIGFS_ATTR(gadget_dev_desc_, bMaxPacketSize0);
348 CONFIGFS_ATTR(gadget_dev_desc_, idVendor);
349 CONFIGFS_ATTR(gadget_dev_desc_, idProduct);
350 CONFIGFS_ATTR(gadget_dev_desc_, bcdDevice);
351 CONFIGFS_ATTR(gadget_dev_desc_, bcdUSB);
352 CONFIGFS_ATTR(gadget_dev_desc_, UDC);
353 CONFIGFS_ATTR(gadget_dev_desc_, max_speed);
354 
355 static struct configfs_attribute *gadget_root_attrs[] = {
356 	&gadget_dev_desc_attr_bDeviceClass,
357 	&gadget_dev_desc_attr_bDeviceSubClass,
358 	&gadget_dev_desc_attr_bDeviceProtocol,
359 	&gadget_dev_desc_attr_bMaxPacketSize0,
360 	&gadget_dev_desc_attr_idVendor,
361 	&gadget_dev_desc_attr_idProduct,
362 	&gadget_dev_desc_attr_bcdDevice,
363 	&gadget_dev_desc_attr_bcdUSB,
364 	&gadget_dev_desc_attr_UDC,
365 	&gadget_dev_desc_attr_max_speed,
366 	NULL,
367 };
368 
to_gadget_strings(struct config_item *item)369 static inline struct gadget_strings *to_gadget_strings(struct config_item *item)
370 {
371 	 return container_of(to_config_group(item), struct gadget_strings,
372 			 group);
373 }
374 
to_gadget_config_name( struct config_item *item)375 static inline struct gadget_config_name *to_gadget_config_name(
376 		struct config_item *item)
377 {
378 	 return container_of(to_config_group(item), struct gadget_config_name,
379 			 group);
380 }
381 
to_usb_function_instance( struct config_item *item)382 static inline struct usb_function_instance *to_usb_function_instance(
383 		struct config_item *item)
384 {
385 	 return container_of(to_config_group(item),
386 			 struct usb_function_instance, group);
387 }
388 
gadget_info_attr_release(struct config_item *item)389 static void gadget_info_attr_release(struct config_item *item)
390 {
391 	struct gadget_info *gi = to_gadget_info(item);
392 
393 	WARN_ON(!list_empty(&gi->cdev.configs));
394 	WARN_ON(!list_empty(&gi->string_list));
395 	WARN_ON(!list_empty(&gi->available_func));
396 	kfree(gi->composite.gadget_driver.function);
397 	kfree(gi);
398 }
399 
400 static struct configfs_item_operations gadget_root_item_ops = {
401 	.release                = gadget_info_attr_release,
402 };
403 
gadget_config_attr_release(struct config_item *item)404 static void gadget_config_attr_release(struct config_item *item)
405 {
406 	struct config_usb_cfg *cfg = to_config_usb_cfg(item);
407 
408 	WARN_ON(!list_empty(&cfg->c.functions));
409 	list_del(&cfg->c.list);
410 	kfree(cfg->c.label);
411 	kfree(cfg);
412 }
413 
config_usb_cfg_link( struct config_item *usb_cfg_ci, struct config_item *usb_func_ci)414 static int config_usb_cfg_link(
415 	struct config_item *usb_cfg_ci,
416 	struct config_item *usb_func_ci)
417 {
418 	struct config_usb_cfg *cfg = to_config_usb_cfg(usb_cfg_ci);
419 	struct usb_composite_dev *cdev = cfg->c.cdev;
420 	struct gadget_info *gi = container_of(cdev, struct gadget_info, cdev);
421 
422 	struct config_group *group = to_config_group(usb_func_ci);
423 	struct usb_function_instance *fi = container_of(group,
424 			struct usb_function_instance, group);
425 	struct usb_function_instance *a_fi;
426 	struct usb_function *f;
427 	int ret;
428 
429 	mutex_lock(&gi->lock);
430 	/*
431 	 * Make sure this function is from within our _this_ gadget and not
432 	 * from another gadget or a random directory.
433 	 * Also a function instance can only be linked once.
434 	 */
435 	list_for_each_entry(a_fi, &gi->available_func, cfs_list) {
436 		if (a_fi == fi)
437 			break;
438 	}
439 	if (a_fi != fi) {
440 		ret = -EINVAL;
441 		goto out;
442 	}
443 
444 	list_for_each_entry(f, &cfg->func_list, list) {
445 		if (f->fi == fi) {
446 			ret = -EEXIST;
447 			goto out;
448 		}
449 	}
450 
451 	f = usb_get_function(fi);
452 	if (IS_ERR(f)) {
453 		ret = PTR_ERR(f);
454 		goto out;
455 	}
456 
457 	/* stash the function until we bind it to the gadget */
458 	list_add_tail(&f->list, &cfg->func_list);
459 	ret = 0;
460 out:
461 	mutex_unlock(&gi->lock);
462 	return ret;
463 }
464 
config_usb_cfg_unlink( struct config_item *usb_cfg_ci, struct config_item *usb_func_ci)465 static void config_usb_cfg_unlink(
466 	struct config_item *usb_cfg_ci,
467 	struct config_item *usb_func_ci)
468 {
469 	struct config_usb_cfg *cfg = to_config_usb_cfg(usb_cfg_ci);
470 	struct usb_composite_dev *cdev = cfg->c.cdev;
471 	struct gadget_info *gi = container_of(cdev, struct gadget_info, cdev);
472 
473 	struct config_group *group = to_config_group(usb_func_ci);
474 	struct usb_function_instance *fi = container_of(group,
475 			struct usb_function_instance, group);
476 	struct usb_function *f;
477 
478 	/*
479 	 * ideally I would like to forbid to unlink functions while a gadget is
480 	 * bound to an UDC. Since this isn't possible at the moment, we simply
481 	 * force an unbind, the function is available here and then we can
482 	 * remove the function.
483 	 */
484 	mutex_lock(&gi->lock);
485 	if (gi->composite.gadget_driver.udc_name)
486 		unregister_gadget(gi);
487 	WARN_ON(gi->composite.gadget_driver.udc_name);
488 
489 	list_for_each_entry(f, &cfg->func_list, list) {
490 		if (f->fi == fi) {
491 			list_del(&f->list);
492 			usb_put_function(f);
493 			mutex_unlock(&gi->lock);
494 			return;
495 		}
496 	}
497 	mutex_unlock(&gi->lock);
498 	WARN(1, "Unable to locate function to unbind\n");
499 }
500 
501 static struct configfs_item_operations gadget_config_item_ops = {
502 	.release                = gadget_config_attr_release,
503 	.allow_link             = config_usb_cfg_link,
504 	.drop_link              = config_usb_cfg_unlink,
505 };
506 
507 
gadget_config_desc_MaxPower_show(struct config_item *item, char *page)508 static ssize_t gadget_config_desc_MaxPower_show(struct config_item *item,
509 		char *page)
510 {
511 	return sprintf(page, "%u\n", to_config_usb_cfg(item)->c.MaxPower);
512 }
513 
gadget_config_desc_MaxPower_store(struct config_item *item, const char *page, size_t len)514 static ssize_t gadget_config_desc_MaxPower_store(struct config_item *item,
515 		const char *page, size_t len)
516 {
517 	u16 val;
518 	int ret;
519 	ret = kstrtou16(page, 0, &val);
520 	if (ret)
521 		return ret;
522 	if (DIV_ROUND_UP(val, 8) > 0xff)
523 		return -ERANGE;
524 	to_config_usb_cfg(item)->c.MaxPower = val;
525 	return len;
526 }
527 
gadget_config_desc_bmAttributes_show(struct config_item *item, char *page)528 static ssize_t gadget_config_desc_bmAttributes_show(struct config_item *item,
529 		char *page)
530 {
531 	return sprintf(page, "0x%02x\n",
532 		to_config_usb_cfg(item)->c.bmAttributes);
533 }
534 
gadget_config_desc_bmAttributes_store(struct config_item *item, const char *page, size_t len)535 static ssize_t gadget_config_desc_bmAttributes_store(struct config_item *item,
536 		const char *page, size_t len)
537 {
538 	u8 val;
539 	int ret;
540 	ret = kstrtou8(page, 0, &val);
541 	if (ret)
542 		return ret;
543 	if (!(val & USB_CONFIG_ATT_ONE))
544 		return -EINVAL;
545 	if (val & ~(USB_CONFIG_ATT_ONE | USB_CONFIG_ATT_SELFPOWER |
546 				USB_CONFIG_ATT_WAKEUP))
547 		return -EINVAL;
548 	to_config_usb_cfg(item)->c.bmAttributes = val;
549 	return len;
550 }
551 
552 CONFIGFS_ATTR(gadget_config_desc_, MaxPower);
553 CONFIGFS_ATTR(gadget_config_desc_, bmAttributes);
554 
555 static struct configfs_attribute *gadget_config_attrs[] = {
556 	&gadget_config_desc_attr_MaxPower,
557 	&gadget_config_desc_attr_bmAttributes,
558 	NULL,
559 };
560 
561 static const struct config_item_type gadget_config_type = {
562 	.ct_item_ops	= &gadget_config_item_ops,
563 	.ct_attrs	= gadget_config_attrs,
564 	.ct_owner	= THIS_MODULE,
565 };
566 
567 static const struct config_item_type gadget_root_type = {
568 	.ct_item_ops	= &gadget_root_item_ops,
569 	.ct_attrs	= gadget_root_attrs,
570 	.ct_owner	= THIS_MODULE,
571 };
572 
composite_init_dev(struct usb_composite_dev *cdev)573 static void composite_init_dev(struct usb_composite_dev *cdev)
574 {
575 	spin_lock_init(&cdev->lock);
576 	INIT_LIST_HEAD(&cdev->configs);
577 	INIT_LIST_HEAD(&cdev->gstrings);
578 }
579 
function_make( struct config_group *group, const char *name)580 static struct config_group *function_make(
581 		struct config_group *group,
582 		const char *name)
583 {
584 	struct gadget_info *gi;
585 	struct usb_function_instance *fi;
586 	char buf[MAX_NAME_LEN];
587 	char *func_name;
588 	char *instance_name;
589 	int ret;
590 
591 	ret = snprintf(buf, MAX_NAME_LEN, "%s", name);
592 	if (ret >= MAX_NAME_LEN)
593 		return ERR_PTR(-ENAMETOOLONG);
594 
595 	func_name = buf;
596 	instance_name = strchr(func_name, '.');
597 	if (!instance_name) {
598 		pr_err("Unable to locate . in FUNC.INSTANCE\n");
599 		return ERR_PTR(-EINVAL);
600 	}
601 	*instance_name = '\0';
602 	instance_name++;
603 
604 	fi = usb_get_function_instance(func_name);
605 	if (IS_ERR(fi))
606 		return ERR_CAST(fi);
607 
608 	ret = config_item_set_name(&fi->group.cg_item, "%s", name);
609 	if (ret) {
610 		usb_put_function_instance(fi);
611 		return ERR_PTR(ret);
612 	}
613 	if (fi->set_inst_name) {
614 		ret = fi->set_inst_name(fi, instance_name);
615 		if (ret) {
616 			usb_put_function_instance(fi);
617 			return ERR_PTR(ret);
618 		}
619 	}
620 
621 	gi = container_of(group, struct gadget_info, functions_group);
622 
623 	mutex_lock(&gi->lock);
624 	list_add_tail(&fi->cfs_list, &gi->available_func);
625 	mutex_unlock(&gi->lock);
626 	return &fi->group;
627 }
628 
function_drop( struct config_group *group, struct config_item *item)629 static void function_drop(
630 		struct config_group *group,
631 		struct config_item *item)
632 {
633 	struct usb_function_instance *fi = to_usb_function_instance(item);
634 	struct gadget_info *gi;
635 
636 	gi = container_of(group, struct gadget_info, functions_group);
637 
638 	mutex_lock(&gi->lock);
639 	list_del(&fi->cfs_list);
640 	mutex_unlock(&gi->lock);
641 	config_item_put(item);
642 }
643 
644 static struct configfs_group_operations functions_ops = {
645 	.make_group     = &function_make,
646 	.drop_item      = &function_drop,
647 };
648 
649 static const struct config_item_type functions_type = {
650 	.ct_group_ops   = &functions_ops,
651 	.ct_owner       = THIS_MODULE,
652 };
653 
654 GS_STRINGS_RW(gadget_config_name, configuration);
655 
656 static struct configfs_attribute *gadget_config_name_langid_attrs[] = {
657 	&gadget_config_name_attr_configuration,
658 	NULL,
659 };
660 
gadget_config_name_attr_release(struct config_item *item)661 static void gadget_config_name_attr_release(struct config_item *item)
662 {
663 	struct gadget_config_name *cn = to_gadget_config_name(item);
664 
665 	kfree(cn->configuration);
666 
667 	list_del(&cn->list);
668 	kfree(cn);
669 }
670 
671 USB_CONFIG_STRING_RW_OPS(gadget_config_name);
672 USB_CONFIG_STRINGS_LANG(gadget_config_name, config_usb_cfg);
673 
config_desc_make( struct config_group *group, const char *name)674 static struct config_group *config_desc_make(
675 		struct config_group *group,
676 		const char *name)
677 {
678 	struct gadget_info *gi;
679 	struct config_usb_cfg *cfg;
680 	char buf[MAX_NAME_LEN];
681 	char *num_str;
682 	u8 num;
683 	int ret;
684 
685 	gi = container_of(group, struct gadget_info, configs_group);
686 	ret = snprintf(buf, MAX_NAME_LEN, "%s", name);
687 	if (ret >= MAX_NAME_LEN)
688 		return ERR_PTR(-ENAMETOOLONG);
689 
690 	num_str = strchr(buf, '.');
691 	if (!num_str) {
692 		pr_err("Unable to locate . in name.bConfigurationValue\n");
693 		return ERR_PTR(-EINVAL);
694 	}
695 
696 	*num_str = '\0';
697 	num_str++;
698 
699 	if (!strlen(buf))
700 		return ERR_PTR(-EINVAL);
701 
702 	ret = kstrtou8(num_str, 0, &num);
703 	if (ret)
704 		return ERR_PTR(ret);
705 
706 	cfg = kzalloc(sizeof(*cfg), GFP_KERNEL);
707 	if (!cfg)
708 		return ERR_PTR(-ENOMEM);
709 	cfg->c.label = kstrdup(buf, GFP_KERNEL);
710 	if (!cfg->c.label) {
711 		ret = -ENOMEM;
712 		goto err;
713 	}
714 	cfg->c.bConfigurationValue = num;
715 	cfg->c.MaxPower = CONFIG_USB_GADGET_VBUS_DRAW;
716 	cfg->c.bmAttributes = USB_CONFIG_ATT_ONE;
717 	INIT_LIST_HEAD(&cfg->string_list);
718 	INIT_LIST_HEAD(&cfg->func_list);
719 
720 	config_group_init_type_name(&cfg->group, name,
721 				&gadget_config_type);
722 
723 	config_group_init_type_name(&cfg->strings_group, "strings",
724 			&gadget_config_name_strings_type);
725 	configfs_add_default_group(&cfg->strings_group, &cfg->group);
726 
727 	ret = usb_add_config_only(&gi->cdev, &cfg->c);
728 	if (ret)
729 		goto err;
730 
731 	return &cfg->group;
732 err:
733 	kfree(cfg->c.label);
734 	kfree(cfg);
735 	return ERR_PTR(ret);
736 }
737 
config_desc_drop( struct config_group *group, struct config_item *item)738 static void config_desc_drop(
739 		struct config_group *group,
740 		struct config_item *item)
741 {
742 	config_item_put(item);
743 }
744 
745 static struct configfs_group_operations config_desc_ops = {
746 	.make_group     = &config_desc_make,
747 	.drop_item      = &config_desc_drop,
748 };
749 
750 static const struct config_item_type config_desc_type = {
751 	.ct_group_ops   = &config_desc_ops,
752 	.ct_owner       = THIS_MODULE,
753 };
754 
755 GS_STRINGS_RW(gadget_strings, manufacturer);
756 GS_STRINGS_RW(gadget_strings, product);
757 GS_STRINGS_RW(gadget_strings, serialnumber);
758 
759 static struct configfs_attribute *gadget_strings_langid_attrs[] = {
760 	&gadget_strings_attr_manufacturer,
761 	&gadget_strings_attr_product,
762 	&gadget_strings_attr_serialnumber,
763 	NULL,
764 };
765 
gadget_strings_attr_release(struct config_item *item)766 static void gadget_strings_attr_release(struct config_item *item)
767 {
768 	struct gadget_strings *gs = to_gadget_strings(item);
769 
770 	kfree(gs->manufacturer);
771 	kfree(gs->product);
772 	kfree(gs->serialnumber);
773 
774 	list_del(&gs->list);
775 	kfree(gs);
776 }
777 
778 USB_CONFIG_STRING_RW_OPS(gadget_strings);
779 USB_CONFIG_STRINGS_LANG(gadget_strings, gadget_info);
780 
to_os_desc(struct config_item *item)781 static inline struct os_desc *to_os_desc(struct config_item *item)
782 {
783 	return container_of(to_config_group(item), struct os_desc, group);
784 }
785 
os_desc_item_to_gadget_info( struct config_item *item)786 static inline struct gadget_info *os_desc_item_to_gadget_info(
787 		struct config_item *item)
788 {
789 	return to_gadget_info(to_os_desc(item)->group.cg_item.ci_parent);
790 }
791 
os_desc_use_show(struct config_item *item, char *page)792 static ssize_t os_desc_use_show(struct config_item *item, char *page)
793 {
794 	return sprintf(page, "%d\n",
795 			os_desc_item_to_gadget_info(item)->use_os_desc);
796 }
797 
os_desc_use_store(struct config_item *item, const char *page, size_t len)798 static ssize_t os_desc_use_store(struct config_item *item, const char *page,
799 				 size_t len)
800 {
801 	struct gadget_info *gi = os_desc_item_to_gadget_info(item);
802 	int ret;
803 	bool use;
804 
805 	mutex_lock(&gi->lock);
806 	ret = strtobool(page, &use);
807 	if (!ret) {
808 		gi->use_os_desc = use;
809 		ret = len;
810 	}
811 	mutex_unlock(&gi->lock);
812 
813 	return ret;
814 }
815 
os_desc_b_vendor_code_show(struct config_item *item, char *page)816 static ssize_t os_desc_b_vendor_code_show(struct config_item *item, char *page)
817 {
818 	return sprintf(page, "0x%02x\n",
819 			os_desc_item_to_gadget_info(item)->b_vendor_code);
820 }
821 
os_desc_b_vendor_code_store(struct config_item *item, const char *page, size_t len)822 static ssize_t os_desc_b_vendor_code_store(struct config_item *item,
823 					   const char *page, size_t len)
824 {
825 	struct gadget_info *gi = os_desc_item_to_gadget_info(item);
826 	int ret;
827 	u8 b_vendor_code;
828 
829 	mutex_lock(&gi->lock);
830 	ret = kstrtou8(page, 0, &b_vendor_code);
831 	if (!ret) {
832 		gi->b_vendor_code = b_vendor_code;
833 		ret = len;
834 	}
835 	mutex_unlock(&gi->lock);
836 
837 	return ret;
838 }
839 
os_desc_qw_sign_show(struct config_item *item, char *page)840 static ssize_t os_desc_qw_sign_show(struct config_item *item, char *page)
841 {
842 	struct gadget_info *gi = os_desc_item_to_gadget_info(item);
843 	int res;
844 
845 	res = utf16s_to_utf8s((wchar_t *) gi->qw_sign, OS_STRING_QW_SIGN_LEN,
846 			      UTF16_LITTLE_ENDIAN, page, PAGE_SIZE - 1);
847 	page[res++] = '\n';
848 
849 	return res;
850 }
851 
os_desc_qw_sign_store(struct config_item *item, const char *page, size_t len)852 static ssize_t os_desc_qw_sign_store(struct config_item *item, const char *page,
853 				     size_t len)
854 {
855 	struct gadget_info *gi = os_desc_item_to_gadget_info(item);
856 	int res, l;
857 
858 	l = min((int)len, OS_STRING_QW_SIGN_LEN >> 1);
859 	if (page[l - 1] == '\n')
860 		--l;
861 
862 	mutex_lock(&gi->lock);
863 	res = utf8s_to_utf16s(page, l,
864 			      UTF16_LITTLE_ENDIAN, (wchar_t *) gi->qw_sign,
865 			      OS_STRING_QW_SIGN_LEN);
866 	if (res > 0)
867 		res = len;
868 	mutex_unlock(&gi->lock);
869 
870 	return res;
871 }
872 
873 CONFIGFS_ATTR(os_desc_, use);
874 CONFIGFS_ATTR(os_desc_, b_vendor_code);
875 CONFIGFS_ATTR(os_desc_, qw_sign);
876 
877 static struct configfs_attribute *os_desc_attrs[] = {
878 	&os_desc_attr_use,
879 	&os_desc_attr_b_vendor_code,
880 	&os_desc_attr_qw_sign,
881 	NULL,
882 };
883 
os_desc_attr_release(struct config_item *item)884 static void os_desc_attr_release(struct config_item *item)
885 {
886 	struct os_desc *os_desc = to_os_desc(item);
887 	kfree(os_desc);
888 }
889 
os_desc_link(struct config_item *os_desc_ci, struct config_item *usb_cfg_ci)890 static int os_desc_link(struct config_item *os_desc_ci,
891 			struct config_item *usb_cfg_ci)
892 {
893 	struct gadget_info *gi = container_of(to_config_group(os_desc_ci),
894 					struct gadget_info, os_desc_group);
895 	struct usb_composite_dev *cdev = &gi->cdev;
896 	struct config_usb_cfg *c_target =
897 		container_of(to_config_group(usb_cfg_ci),
898 			     struct config_usb_cfg, group);
899 	struct usb_configuration *c;
900 	int ret;
901 
902 	mutex_lock(&gi->lock);
903 	list_for_each_entry(c, &cdev->configs, list) {
904 		if (c == &c_target->c)
905 			break;
906 	}
907 	if (c != &c_target->c) {
908 		ret = -EINVAL;
909 		goto out;
910 	}
911 
912 	if (cdev->os_desc_config) {
913 		ret = -EBUSY;
914 		goto out;
915 	}
916 
917 	cdev->os_desc_config = &c_target->c;
918 	ret = 0;
919 
920 out:
921 	mutex_unlock(&gi->lock);
922 	return ret;
923 }
924 
os_desc_unlink(struct config_item *os_desc_ci, struct config_item *usb_cfg_ci)925 static void os_desc_unlink(struct config_item *os_desc_ci,
926 			  struct config_item *usb_cfg_ci)
927 {
928 	struct gadget_info *gi = container_of(to_config_group(os_desc_ci),
929 					struct gadget_info, os_desc_group);
930 	struct usb_composite_dev *cdev = &gi->cdev;
931 
932 	mutex_lock(&gi->lock);
933 	if (gi->composite.gadget_driver.udc_name)
934 		unregister_gadget(gi);
935 	cdev->os_desc_config = NULL;
936 	WARN_ON(gi->composite.gadget_driver.udc_name);
937 	mutex_unlock(&gi->lock);
938 }
939 
940 static struct configfs_item_operations os_desc_ops = {
941 	.release                = os_desc_attr_release,
942 	.allow_link		= os_desc_link,
943 	.drop_link		= os_desc_unlink,
944 };
945 
946 static struct config_item_type os_desc_type = {
947 	.ct_item_ops	= &os_desc_ops,
948 	.ct_attrs	= os_desc_attrs,
949 	.ct_owner	= THIS_MODULE,
950 };
951 
952 static inline struct usb_os_desc_ext_prop
to_usb_os_desc_ext_prop(struct config_item *item)953 *to_usb_os_desc_ext_prop(struct config_item *item)
954 {
955 	return container_of(item, struct usb_os_desc_ext_prop, item);
956 }
957 
ext_prop_type_show(struct config_item *item, char *page)958 static ssize_t ext_prop_type_show(struct config_item *item, char *page)
959 {
960 	return sprintf(page, "%d\n", to_usb_os_desc_ext_prop(item)->type);
961 }
962 
ext_prop_type_store(struct config_item *item, const char *page, size_t len)963 static ssize_t ext_prop_type_store(struct config_item *item,
964 				   const char *page, size_t len)
965 {
966 	struct usb_os_desc_ext_prop *ext_prop = to_usb_os_desc_ext_prop(item);
967 	struct usb_os_desc *desc = to_usb_os_desc(ext_prop->item.ci_parent);
968 	u8 type;
969 	int ret;
970 
971 	if (desc->opts_mutex)
972 		mutex_lock(desc->opts_mutex);
973 	ret = kstrtou8(page, 0, &type);
974 	if (ret)
975 		goto end;
976 	if (type < USB_EXT_PROP_UNICODE || type > USB_EXT_PROP_UNICODE_MULTI) {
977 		ret = -EINVAL;
978 		goto end;
979 	}
980 
981 	if ((ext_prop->type == USB_EXT_PROP_BINARY ||
982 	    ext_prop->type == USB_EXT_PROP_LE32 ||
983 	    ext_prop->type == USB_EXT_PROP_BE32) &&
984 	    (type == USB_EXT_PROP_UNICODE ||
985 	    type == USB_EXT_PROP_UNICODE_ENV ||
986 	    type == USB_EXT_PROP_UNICODE_LINK))
987 		ext_prop->data_len <<= 1;
988 	else if ((ext_prop->type == USB_EXT_PROP_UNICODE ||
989 		   ext_prop->type == USB_EXT_PROP_UNICODE_ENV ||
990 		   ext_prop->type == USB_EXT_PROP_UNICODE_LINK) &&
991 		   (type == USB_EXT_PROP_BINARY ||
992 		   type == USB_EXT_PROP_LE32 ||
993 		   type == USB_EXT_PROP_BE32))
994 		ext_prop->data_len >>= 1;
995 	ext_prop->type = type;
996 	ret = len;
997 
998 end:
999 	if (desc->opts_mutex)
1000 		mutex_unlock(desc->opts_mutex);
1001 	return ret;
1002 }
1003 
ext_prop_data_show(struct config_item *item, char *page)1004 static ssize_t ext_prop_data_show(struct config_item *item, char *page)
1005 {
1006 	struct usb_os_desc_ext_prop *ext_prop = to_usb_os_desc_ext_prop(item);
1007 	int len = ext_prop->data_len;
1008 
1009 	if (ext_prop->type == USB_EXT_PROP_UNICODE ||
1010 	    ext_prop->type == USB_EXT_PROP_UNICODE_ENV ||
1011 	    ext_prop->type == USB_EXT_PROP_UNICODE_LINK)
1012 		len >>= 1;
1013 	memcpy(page, ext_prop->data, len);
1014 
1015 	return len;
1016 }
1017 
ext_prop_data_store(struct config_item *item, const char *page, size_t len)1018 static ssize_t ext_prop_data_store(struct config_item *item,
1019 				   const char *page, size_t len)
1020 {
1021 	struct usb_os_desc_ext_prop *ext_prop = to_usb_os_desc_ext_prop(item);
1022 	struct usb_os_desc *desc = to_usb_os_desc(ext_prop->item.ci_parent);
1023 	char *new_data;
1024 	size_t ret_len = len;
1025 
1026 	if (page[len - 1] == '\n' || page[len - 1] == '\0')
1027 		--len;
1028 	new_data = kmemdup(page, len, GFP_KERNEL);
1029 	if (!new_data)
1030 		return -ENOMEM;
1031 
1032 	if (desc->opts_mutex)
1033 		mutex_lock(desc->opts_mutex);
1034 	kfree(ext_prop->data);
1035 	ext_prop->data = new_data;
1036 	desc->ext_prop_len -= ext_prop->data_len;
1037 	ext_prop->data_len = len;
1038 	desc->ext_prop_len += ext_prop->data_len;
1039 	if (ext_prop->type == USB_EXT_PROP_UNICODE ||
1040 	    ext_prop->type == USB_EXT_PROP_UNICODE_ENV ||
1041 	    ext_prop->type == USB_EXT_PROP_UNICODE_LINK) {
1042 		desc->ext_prop_len -= ext_prop->data_len;
1043 		ext_prop->data_len <<= 1;
1044 		ext_prop->data_len += 2;
1045 		desc->ext_prop_len += ext_prop->data_len;
1046 	}
1047 	if (desc->opts_mutex)
1048 		mutex_unlock(desc->opts_mutex);
1049 	return ret_len;
1050 }
1051 
1052 CONFIGFS_ATTR(ext_prop_, type);
1053 CONFIGFS_ATTR(ext_prop_, data);
1054 
1055 static struct configfs_attribute *ext_prop_attrs[] = {
1056 	&ext_prop_attr_type,
1057 	&ext_prop_attr_data,
1058 	NULL,
1059 };
1060 
usb_os_desc_ext_prop_release(struct config_item *item)1061 static void usb_os_desc_ext_prop_release(struct config_item *item)
1062 {
1063 	struct usb_os_desc_ext_prop *ext_prop = to_usb_os_desc_ext_prop(item);
1064 
1065 	kfree(ext_prop); /* frees a whole chunk */
1066 }
1067 
1068 static struct configfs_item_operations ext_prop_ops = {
1069 	.release		= usb_os_desc_ext_prop_release,
1070 };
1071 
ext_prop_make( struct config_group *group, const char *name)1072 static struct config_item *ext_prop_make(
1073 		struct config_group *group,
1074 		const char *name)
1075 {
1076 	struct usb_os_desc_ext_prop *ext_prop;
1077 	struct config_item_type *ext_prop_type;
1078 	struct usb_os_desc *desc;
1079 	char *vlabuf;
1080 
1081 	vla_group(data_chunk);
1082 	vla_item(data_chunk, struct usb_os_desc_ext_prop, ext_prop, 1);
1083 	vla_item(data_chunk, struct config_item_type, ext_prop_type, 1);
1084 
1085 	vlabuf = kzalloc(vla_group_size(data_chunk), GFP_KERNEL);
1086 	if (!vlabuf)
1087 		return ERR_PTR(-ENOMEM);
1088 
1089 	ext_prop = vla_ptr(vlabuf, data_chunk, ext_prop);
1090 	ext_prop_type = vla_ptr(vlabuf, data_chunk, ext_prop_type);
1091 
1092 	desc = container_of(group, struct usb_os_desc, group);
1093 	ext_prop_type->ct_item_ops = &ext_prop_ops;
1094 	ext_prop_type->ct_attrs = ext_prop_attrs;
1095 	ext_prop_type->ct_owner = desc->owner;
1096 
1097 	config_item_init_type_name(&ext_prop->item, name, ext_prop_type);
1098 
1099 	ext_prop->name = kstrdup(name, GFP_KERNEL);
1100 	if (!ext_prop->name) {
1101 		kfree(vlabuf);
1102 		return ERR_PTR(-ENOMEM);
1103 	}
1104 	desc->ext_prop_len += 14;
1105 	ext_prop->name_len = 2 * strlen(ext_prop->name) + 2;
1106 	if (desc->opts_mutex)
1107 		mutex_lock(desc->opts_mutex);
1108 	desc->ext_prop_len += ext_prop->name_len;
1109 	list_add_tail(&ext_prop->entry, &desc->ext_prop);
1110 	++desc->ext_prop_count;
1111 	if (desc->opts_mutex)
1112 		mutex_unlock(desc->opts_mutex);
1113 
1114 	return &ext_prop->item;
1115 }
1116 
ext_prop_drop(struct config_group *group, struct config_item *item)1117 static void ext_prop_drop(struct config_group *group, struct config_item *item)
1118 {
1119 	struct usb_os_desc_ext_prop *ext_prop = to_usb_os_desc_ext_prop(item);
1120 	struct usb_os_desc *desc = to_usb_os_desc(&group->cg_item);
1121 
1122 	if (desc->opts_mutex)
1123 		mutex_lock(desc->opts_mutex);
1124 	list_del(&ext_prop->entry);
1125 	--desc->ext_prop_count;
1126 	kfree(ext_prop->name);
1127 	desc->ext_prop_len -= (ext_prop->name_len + ext_prop->data_len + 14);
1128 	if (desc->opts_mutex)
1129 		mutex_unlock(desc->opts_mutex);
1130 	config_item_put(item);
1131 }
1132 
1133 static struct configfs_group_operations interf_grp_ops = {
1134 	.make_item	= &ext_prop_make,
1135 	.drop_item	= &ext_prop_drop,
1136 };
1137 
interf_grp_compatible_id_show(struct config_item *item, char *page)1138 static ssize_t interf_grp_compatible_id_show(struct config_item *item,
1139 					     char *page)
1140 {
1141 	memcpy(page, to_usb_os_desc(item)->ext_compat_id, 8);
1142 	return 8;
1143 }
1144 
interf_grp_compatible_id_store(struct config_item *item, const char *page, size_t len)1145 static ssize_t interf_grp_compatible_id_store(struct config_item *item,
1146 					      const char *page, size_t len)
1147 {
1148 	struct usb_os_desc *desc = to_usb_os_desc(item);
1149 	int l;
1150 
1151 	l = min_t(int, 8, len);
1152 	if (page[l - 1] == '\n')
1153 		--l;
1154 	if (desc->opts_mutex)
1155 		mutex_lock(desc->opts_mutex);
1156 	memcpy(desc->ext_compat_id, page, l);
1157 
1158 	if (desc->opts_mutex)
1159 		mutex_unlock(desc->opts_mutex);
1160 
1161 	return len;
1162 }
1163 
interf_grp_sub_compatible_id_show(struct config_item *item, char *page)1164 static ssize_t interf_grp_sub_compatible_id_show(struct config_item *item,
1165 						 char *page)
1166 {
1167 	memcpy(page, to_usb_os_desc(item)->ext_compat_id + 8, 8);
1168 	return 8;
1169 }
1170 
interf_grp_sub_compatible_id_store(struct config_item *item, const char *page, size_t len)1171 static ssize_t interf_grp_sub_compatible_id_store(struct config_item *item,
1172 						  const char *page, size_t len)
1173 {
1174 	struct usb_os_desc *desc = to_usb_os_desc(item);
1175 	int l;
1176 
1177 	l = min_t(int, 8, len);
1178 	if (page[l - 1] == '\n')
1179 		--l;
1180 	if (desc->opts_mutex)
1181 		mutex_lock(desc->opts_mutex);
1182 	memcpy(desc->ext_compat_id + 8, page, l);
1183 
1184 	if (desc->opts_mutex)
1185 		mutex_unlock(desc->opts_mutex);
1186 
1187 	return len;
1188 }
1189 
1190 CONFIGFS_ATTR(interf_grp_, compatible_id);
1191 CONFIGFS_ATTR(interf_grp_, sub_compatible_id);
1192 
1193 static struct configfs_attribute *interf_grp_attrs[] = {
1194 	&interf_grp_attr_compatible_id,
1195 	&interf_grp_attr_sub_compatible_id,
1196 	NULL
1197 };
1198 
usb_os_desc_prepare_interf_dir( struct config_group *parent, int n_interf, struct usb_os_desc **desc, char **names, struct module *owner)1199 struct config_group *usb_os_desc_prepare_interf_dir(
1200 		struct config_group *parent,
1201 		int n_interf,
1202 		struct usb_os_desc **desc,
1203 		char **names,
1204 		struct module *owner)
1205 {
1206 	struct config_group *os_desc_group;
1207 	struct config_item_type *os_desc_type, *interface_type;
1208 
1209 	vla_group(data_chunk);
1210 	vla_item(data_chunk, struct config_group, os_desc_group, 1);
1211 	vla_item(data_chunk, struct config_item_type, os_desc_type, 1);
1212 	vla_item(data_chunk, struct config_item_type, interface_type, 1);
1213 
1214 	char *vlabuf = kzalloc(vla_group_size(data_chunk), GFP_KERNEL);
1215 	if (!vlabuf)
1216 		return ERR_PTR(-ENOMEM);
1217 
1218 	os_desc_group = vla_ptr(vlabuf, data_chunk, os_desc_group);
1219 	os_desc_type = vla_ptr(vlabuf, data_chunk, os_desc_type);
1220 	interface_type = vla_ptr(vlabuf, data_chunk, interface_type);
1221 
1222 	os_desc_type->ct_owner = owner;
1223 	config_group_init_type_name(os_desc_group, "os_desc", os_desc_type);
1224 	configfs_add_default_group(os_desc_group, parent);
1225 
1226 	interface_type->ct_group_ops = &interf_grp_ops;
1227 	interface_type->ct_attrs = interf_grp_attrs;
1228 	interface_type->ct_owner = owner;
1229 
1230 	while (n_interf--) {
1231 		struct usb_os_desc *d;
1232 
1233 		d = desc[n_interf];
1234 		d->owner = owner;
1235 		config_group_init_type_name(&d->group, "", interface_type);
1236 		config_item_set_name(&d->group.cg_item, "interface.%s",
1237 				     names[n_interf]);
1238 		configfs_add_default_group(&d->group, os_desc_group);
1239 	}
1240 
1241 	return os_desc_group;
1242 }
1243 EXPORT_SYMBOL(usb_os_desc_prepare_interf_dir);
1244 
configfs_do_nothing(struct usb_composite_dev *cdev)1245 static int configfs_do_nothing(struct usb_composite_dev *cdev)
1246 {
1247 	WARN_ON(1);
1248 	return -EINVAL;
1249 }
1250 
1251 int composite_dev_prepare(struct usb_composite_driver *composite,
1252 		struct usb_composite_dev *dev);
1253 
1254 int composite_os_desc_req_prepare(struct usb_composite_dev *cdev,
1255 				  struct usb_ep *ep0);
1256 
purge_configs_funcs(struct gadget_info *gi)1257 static void purge_configs_funcs(struct gadget_info *gi)
1258 {
1259 	struct usb_configuration	*c;
1260 
1261 	list_for_each_entry(c, &gi->cdev.configs, list) {
1262 		struct usb_function *f, *tmp;
1263 		struct config_usb_cfg *cfg;
1264 
1265 		cfg = container_of(c, struct config_usb_cfg, c);
1266 
1267 		list_for_each_entry_safe_reverse(f, tmp, &c->functions, list) {
1268 
1269 			list_move(&f->list, &cfg->func_list);
1270 			if (f->unbind) {
1271 				dev_dbg(&gi->cdev.gadget->dev,
1272 					"unbind function '%s'/%p\n",
1273 					f->name, f);
1274 				f->unbind(c, f);
1275 			}
1276 		}
1277 		c->next_interface_id = 0;
1278 		memset(c->interface, 0, sizeof(c->interface));
1279 		c->superspeed_plus = 0;
1280 		c->superspeed = 0;
1281 		c->highspeed = 0;
1282 		c->fullspeed = 0;
1283 	}
1284 }
1285 
configfs_composite_bind(struct usb_gadget *gadget, struct usb_gadget_driver *gdriver)1286 static int configfs_composite_bind(struct usb_gadget *gadget,
1287 		struct usb_gadget_driver *gdriver)
1288 {
1289 	struct usb_composite_driver     *composite = to_cdriver(gdriver);
1290 	struct gadget_info		*gi = container_of(composite,
1291 						struct gadget_info, composite);
1292 	struct usb_composite_dev	*cdev = &gi->cdev;
1293 	struct usb_configuration	*c;
1294 	struct usb_string		*s;
1295 	unsigned			i;
1296 	int				ret;
1297 
1298 	/* the gi->lock is hold by the caller */
1299 	gi->unbind = 0;
1300 	cdev->gadget = gadget;
1301 	set_gadget_data(gadget, cdev);
1302 	ret = composite_dev_prepare(composite, cdev);
1303 	if (ret)
1304 		return ret;
1305 	/* and now the gadget bind */
1306 	ret = -EINVAL;
1307 
1308 	if (list_empty(&gi->cdev.configs)) {
1309 		pr_err("Need at least one configuration in %s.\n",
1310 				gi->composite.name);
1311 		goto err_comp_cleanup;
1312 	}
1313 
1314 
1315 	list_for_each_entry(c, &gi->cdev.configs, list) {
1316 		struct config_usb_cfg *cfg;
1317 
1318 		cfg = container_of(c, struct config_usb_cfg, c);
1319 		if (list_empty(&cfg->func_list)) {
1320 			pr_err("Config %s/%d of %s needs at least one function.\n",
1321 			      c->label, c->bConfigurationValue,
1322 			      gi->composite.name);
1323 			goto err_comp_cleanup;
1324 		}
1325 	}
1326 
1327 	/* init all strings */
1328 	if (!list_empty(&gi->string_list)) {
1329 		struct gadget_strings *gs;
1330 
1331 		i = 0;
1332 		list_for_each_entry(gs, &gi->string_list, list) {
1333 
1334 			gi->gstrings[i] = &gs->stringtab_dev;
1335 			gs->stringtab_dev.strings = gs->strings;
1336 			gs->strings[USB_GADGET_MANUFACTURER_IDX].s =
1337 				gs->manufacturer;
1338 			gs->strings[USB_GADGET_PRODUCT_IDX].s = gs->product;
1339 			gs->strings[USB_GADGET_SERIAL_IDX].s = gs->serialnumber;
1340 			i++;
1341 		}
1342 		gi->gstrings[i] = NULL;
1343 		s = usb_gstrings_attach(&gi->cdev, gi->gstrings,
1344 				USB_GADGET_FIRST_AVAIL_IDX);
1345 		if (IS_ERR(s)) {
1346 			ret = PTR_ERR(s);
1347 			goto err_comp_cleanup;
1348 		}
1349 
1350 		gi->cdev.desc.iManufacturer = s[USB_GADGET_MANUFACTURER_IDX].id;
1351 		gi->cdev.desc.iProduct = s[USB_GADGET_PRODUCT_IDX].id;
1352 		gi->cdev.desc.iSerialNumber = s[USB_GADGET_SERIAL_IDX].id;
1353 	}
1354 
1355 	if (gi->use_os_desc) {
1356 		cdev->use_os_string = true;
1357 		cdev->b_vendor_code = gi->b_vendor_code;
1358 		memcpy(cdev->qw_sign, gi->qw_sign, OS_STRING_QW_SIGN_LEN);
1359 	}
1360 
1361 	if (gadget_is_otg(gadget) && !otg_desc[0]) {
1362 		struct usb_descriptor_header *usb_desc;
1363 
1364 		usb_desc = usb_otg_descriptor_alloc(gadget);
1365 		if (!usb_desc) {
1366 			ret = -ENOMEM;
1367 			goto err_comp_cleanup;
1368 		}
1369 		usb_otg_descriptor_init(gadget, usb_desc);
1370 		otg_desc[0] = usb_desc;
1371 		otg_desc[1] = NULL;
1372 	}
1373 
1374 	/* Go through all configs, attach all functions */
1375 	list_for_each_entry(c, &gi->cdev.configs, list) {
1376 		struct config_usb_cfg *cfg;
1377 		struct usb_function *f;
1378 		struct usb_function *tmp;
1379 		struct gadget_config_name *cn;
1380 
1381 		if (gadget_is_otg(gadget))
1382 			c->descriptors = otg_desc;
1383 
1384 		cfg = container_of(c, struct config_usb_cfg, c);
1385 		if (!list_empty(&cfg->string_list)) {
1386 			i = 0;
1387 			list_for_each_entry(cn, &cfg->string_list, list) {
1388 				cfg->gstrings[i] = &cn->stringtab_dev;
1389 				cn->stringtab_dev.strings = &cn->strings;
1390 				cn->strings.s = cn->configuration;
1391 				i++;
1392 			}
1393 			cfg->gstrings[i] = NULL;
1394 			s = usb_gstrings_attach(&gi->cdev, cfg->gstrings, 1);
1395 			if (IS_ERR(s)) {
1396 				ret = PTR_ERR(s);
1397 				goto err_comp_cleanup;
1398 			}
1399 			c->iConfiguration = s[0].id;
1400 		}
1401 
1402 		list_for_each_entry_safe(f, tmp, &cfg->func_list, list) {
1403 			list_del(&f->list);
1404 			ret = usb_add_function(c, f);
1405 			if (ret) {
1406 				list_add(&f->list, &cfg->func_list);
1407 				goto err_purge_funcs;
1408 			}
1409 		}
1410 		usb_ep_autoconfig_reset(cdev->gadget);
1411 	}
1412 	if (cdev->use_os_string) {
1413 		ret = composite_os_desc_req_prepare(cdev, gadget->ep0);
1414 		if (ret)
1415 			goto err_purge_funcs;
1416 	}
1417 
1418 	usb_ep_autoconfig_reset(cdev->gadget);
1419 	return 0;
1420 
1421 err_purge_funcs:
1422 	purge_configs_funcs(gi);
1423 err_comp_cleanup:
1424 	composite_dev_cleanup(cdev);
1425 	return ret;
1426 }
1427 
configfs_composite_unbind(struct usb_gadget *gadget)1428 static void configfs_composite_unbind(struct usb_gadget *gadget)
1429 {
1430 	struct usb_composite_dev	*cdev;
1431 	struct gadget_info		*gi;
1432 	unsigned long flags;
1433 
1434 	/* the gi->lock is hold by the caller */
1435 
1436 	cdev = get_gadget_data(gadget);
1437 	gi = container_of(cdev, struct gadget_info, cdev);
1438 	spin_lock_irqsave(&gi->spinlock, flags);
1439 	gi->unbind = 1;
1440 	spin_unlock_irqrestore(&gi->spinlock, flags);
1441 
1442 	kfree(otg_desc[0]);
1443 	otg_desc[0] = NULL;
1444 	purge_configs_funcs(gi);
1445 	composite_dev_cleanup(cdev);
1446 	usb_ep_autoconfig_reset(cdev->gadget);
1447 	spin_lock_irqsave(&gi->spinlock, flags);
1448 	cdev->gadget = NULL;
1449 	cdev->deactivations = 0;
1450 	gadget->deactivated = false;
1451 	set_gadget_data(gadget, NULL);
1452 	spin_unlock_irqrestore(&gi->spinlock, flags);
1453 }
1454 
configfs_composite_setup(struct usb_gadget *gadget, const struct usb_ctrlrequest *ctrl)1455 static int configfs_composite_setup(struct usb_gadget *gadget,
1456 		const struct usb_ctrlrequest *ctrl)
1457 {
1458 	struct usb_composite_dev *cdev;
1459 	struct gadget_info *gi;
1460 	unsigned long flags;
1461 	int ret;
1462 
1463 	cdev = get_gadget_data(gadget);
1464 	if (!cdev)
1465 		return 0;
1466 
1467 	gi = container_of(cdev, struct gadget_info, cdev);
1468 	spin_lock_irqsave(&gi->spinlock, flags);
1469 	cdev = get_gadget_data(gadget);
1470 	if (!cdev || gi->unbind) {
1471 		spin_unlock_irqrestore(&gi->spinlock, flags);
1472 		return 0;
1473 	}
1474 
1475 	ret = composite_setup(gadget, ctrl);
1476 	spin_unlock_irqrestore(&gi->spinlock, flags);
1477 	return ret;
1478 }
1479 
configfs_composite_disconnect(struct usb_gadget *gadget)1480 static void configfs_composite_disconnect(struct usb_gadget *gadget)
1481 {
1482 	struct usb_composite_dev *cdev;
1483 	struct gadget_info *gi;
1484 	unsigned long flags;
1485 
1486 	cdev = get_gadget_data(gadget);
1487 	if (!cdev)
1488 		return;
1489 
1490 	gi = container_of(cdev, struct gadget_info, cdev);
1491 	spin_lock_irqsave(&gi->spinlock, flags);
1492 	cdev = get_gadget_data(gadget);
1493 	if (!cdev || gi->unbind) {
1494 		spin_unlock_irqrestore(&gi->spinlock, flags);
1495 		return;
1496 	}
1497 
1498 	composite_disconnect(gadget);
1499 	spin_unlock_irqrestore(&gi->spinlock, flags);
1500 }
1501 
configfs_composite_suspend(struct usb_gadget *gadget)1502 static void configfs_composite_suspend(struct usb_gadget *gadget)
1503 {
1504 	struct usb_composite_dev *cdev;
1505 	struct gadget_info *gi;
1506 	unsigned long flags;
1507 
1508 	cdev = get_gadget_data(gadget);
1509 	if (!cdev)
1510 		return;
1511 
1512 	gi = container_of(cdev, struct gadget_info, cdev);
1513 	spin_lock_irqsave(&gi->spinlock, flags);
1514 	cdev = get_gadget_data(gadget);
1515 	if (!cdev || gi->unbind) {
1516 		spin_unlock_irqrestore(&gi->spinlock, flags);
1517 		return;
1518 	}
1519 
1520 	composite_suspend(gadget);
1521 	spin_unlock_irqrestore(&gi->spinlock, flags);
1522 }
1523 
configfs_composite_resume(struct usb_gadget *gadget)1524 static void configfs_composite_resume(struct usb_gadget *gadget)
1525 {
1526 	struct usb_composite_dev *cdev;
1527 	struct gadget_info *gi;
1528 	unsigned long flags;
1529 
1530 	cdev = get_gadget_data(gadget);
1531 	if (!cdev)
1532 		return;
1533 
1534 	gi = container_of(cdev, struct gadget_info, cdev);
1535 	spin_lock_irqsave(&gi->spinlock, flags);
1536 	cdev = get_gadget_data(gadget);
1537 	if (!cdev || gi->unbind) {
1538 		spin_unlock_irqrestore(&gi->spinlock, flags);
1539 		return;
1540 	}
1541 
1542 	composite_resume(gadget);
1543 	spin_unlock_irqrestore(&gi->spinlock, flags);
1544 }
1545 
1546 static const struct usb_gadget_driver configfs_driver_template = {
1547 	.bind           = configfs_composite_bind,
1548 	.unbind         = configfs_composite_unbind,
1549 
1550 	.setup          = configfs_composite_setup,
1551 	.reset          = configfs_composite_disconnect,
1552 	.disconnect     = configfs_composite_disconnect,
1553 
1554 	.suspend	= configfs_composite_suspend,
1555 	.resume		= configfs_composite_resume,
1556 
1557 	.max_speed	= USB_SPEED_SUPER_PLUS,
1558 	.driver = {
1559 		.owner          = THIS_MODULE,
1560 		.name		= "configfs-gadget",
1561 	},
1562 	.match_existing_only = 1,
1563 };
1564 
gadgets_make( struct config_group *group, const char *name)1565 static struct config_group *gadgets_make(
1566 		struct config_group *group,
1567 		const char *name)
1568 {
1569 	struct gadget_info *gi;
1570 
1571 	gi = kzalloc(sizeof(*gi), GFP_KERNEL);
1572 	if (!gi)
1573 		return ERR_PTR(-ENOMEM);
1574 
1575 	config_group_init_type_name(&gi->group, name, &gadget_root_type);
1576 
1577 	config_group_init_type_name(&gi->functions_group, "functions",
1578 			&functions_type);
1579 	configfs_add_default_group(&gi->functions_group, &gi->group);
1580 
1581 	config_group_init_type_name(&gi->configs_group, "configs",
1582 			&config_desc_type);
1583 	configfs_add_default_group(&gi->configs_group, &gi->group);
1584 
1585 	config_group_init_type_name(&gi->strings_group, "strings",
1586 			&gadget_strings_strings_type);
1587 	configfs_add_default_group(&gi->strings_group, &gi->group);
1588 
1589 	config_group_init_type_name(&gi->os_desc_group, "os_desc",
1590 			&os_desc_type);
1591 	configfs_add_default_group(&gi->os_desc_group, &gi->group);
1592 
1593 	gi->composite.bind = configfs_do_nothing;
1594 	gi->composite.unbind = configfs_do_nothing;
1595 	gi->composite.suspend = NULL;
1596 	gi->composite.resume = NULL;
1597 	gi->composite.max_speed = USB_SPEED_SUPER_PLUS;
1598 
1599 	spin_lock_init(&gi->spinlock);
1600 	mutex_init(&gi->lock);
1601 	INIT_LIST_HEAD(&gi->string_list);
1602 	INIT_LIST_HEAD(&gi->available_func);
1603 
1604 	composite_init_dev(&gi->cdev);
1605 	gi->cdev.desc.bLength = USB_DT_DEVICE_SIZE;
1606 	gi->cdev.desc.bDescriptorType = USB_DT_DEVICE;
1607 	gi->cdev.desc.bcdDevice = cpu_to_le16(get_default_bcdDevice());
1608 
1609 	gi->composite.gadget_driver = configfs_driver_template;
1610 
1611 	gi->composite.gadget_driver.function = kstrdup(name, GFP_KERNEL);
1612 	gi->composite.name = gi->composite.gadget_driver.function;
1613 
1614 	if (!gi->composite.gadget_driver.function)
1615 		goto err;
1616 
1617 	return &gi->group;
1618 err:
1619 	kfree(gi);
1620 	return ERR_PTR(-ENOMEM);
1621 }
1622 
gadgets_drop(struct config_group *group, struct config_item *item)1623 static void gadgets_drop(struct config_group *group, struct config_item *item)
1624 {
1625 	config_item_put(item);
1626 }
1627 
1628 static struct configfs_group_operations gadgets_ops = {
1629 	.make_group     = &gadgets_make,
1630 	.drop_item      = &gadgets_drop,
1631 };
1632 
1633 static const struct config_item_type gadgets_type = {
1634 	.ct_group_ops   = &gadgets_ops,
1635 	.ct_owner       = THIS_MODULE,
1636 };
1637 
1638 static struct configfs_subsystem gadget_subsys = {
1639 	.su_group = {
1640 		.cg_item = {
1641 			.ci_namebuf = "usb_gadget",
1642 			.ci_type = &gadgets_type,
1643 		},
1644 	},
1645 	.su_mutex = __MUTEX_INITIALIZER(gadget_subsys.su_mutex),
1646 };
1647 
unregister_gadget_item(struct config_item *item)1648 void unregister_gadget_item(struct config_item *item)
1649 {
1650 	struct gadget_info *gi = to_gadget_info(item);
1651 
1652 	mutex_lock(&gi->lock);
1653 	unregister_gadget(gi);
1654 	mutex_unlock(&gi->lock);
1655 }
1656 EXPORT_SYMBOL_GPL(unregister_gadget_item);
1657 
gadget_cfs_init(void)1658 static int __init gadget_cfs_init(void)
1659 {
1660 	int ret;
1661 
1662 	config_group_init(&gadget_subsys.su_group);
1663 
1664 	ret = configfs_register_subsystem(&gadget_subsys);
1665 	return ret;
1666 }
1667 module_init(gadget_cfs_init);
1668 
gadget_cfs_exit(void)1669 static void __exit gadget_cfs_exit(void)
1670 {
1671 	configfs_unregister_subsystem(&gadget_subsys);
1672 }
1673 module_exit(gadget_cfs_exit);
1674