xref: /illumos-gate/usr/src/cmd/bhyve/usb_mouse.c (revision 4c87aefe)
1 /*-
2  * SPDX-License-Identifier: BSD-2-Clause-FreeBSD
3  *
4  * Copyright (c) 2014 Leon Dang <ldang@nahannisys.com>
5  * All rights reserved.
6  *
7  * Redistribution and use in source and binary forms, with or without
8  * modification, are permitted provided that the following conditions
9  * are met:
10  * 1. Redistributions of source code must retain the above copyright
11  *    notice, this list of conditions and the following disclaimer.
12  * 2. Redistributions in binary form must reproduce the above copyright
13  *    notice, this list of conditions and the following disclaimer in the
14  *    documentation and/or other materials provided with the distribution.
15  *
16  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
17  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
18  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
19  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
20  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
24  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
25  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
26  * SUCH DAMAGE.
27  */
28 
29 #include <sys/cdefs.h>
30 __FBSDID("$FreeBSD$");
31 
32 #include <sys/time.h>
33 
34 #include <pthread.h>
35 #include <stdio.h>
36 #include <stdlib.h>
37 #include <string.h>
38 
39 #include <dev/usb/usb.h>
40 #include <dev/usb/usbdi.h>
41 
42 #include "usb_emul.h"
43 #include "console.h"
44 #include "bhyvegc.h"
45 
46 static int umouse_debug = 0;
47 #define	DPRINTF(params) if (umouse_debug) printf params
48 #define	WPRINTF(params) printf params
49 
50 /* USB endpoint context (1-15) for reporting mouse data events*/
51 #define	UMOUSE_INTR_ENDPT	1
52 
53 #define UMOUSE_REPORT_DESC_TYPE	0x22
54 
55 #define	UMOUSE_GET_REPORT	0x01
56 #define	UMOUSE_GET_IDLE		0x02
57 #define	UMOUSE_GET_PROTOCOL	0x03
58 #define	UMOUSE_SET_REPORT	0x09
59 #define	UMOUSE_SET_IDLE		0x0A
60 #define	UMOUSE_SET_PROTOCOL	0x0B
61 
62 #define HSETW(ptr, val)   ptr = { (uint8_t)(val), (uint8_t)((val) >> 8) }
63 
64 enum {
65 	UMSTR_LANG,
66 	UMSTR_MANUFACTURER,
67 	UMSTR_PRODUCT,
68 	UMSTR_SERIAL,
69 	UMSTR_CONFIG,
70 	UMSTR_MAX
71 };
72 
73 static const char *umouse_desc_strings[] = {
74 	"\x04\x09",
75 	"BHYVE",
76 	"HID Tablet",
77 	"01",
78 	"HID Tablet Device",
79 };
80 
81 struct umouse_hid_descriptor {
82 	uint8_t	bLength;
83 	uint8_t	bDescriptorType;
84 	uint8_t	bcdHID[2];
85 	uint8_t	bCountryCode;
86 	uint8_t	bNumDescriptors;
87 	uint8_t	bReportDescriptorType;
88 	uint8_t	wItemLength[2];
89 } __packed;
90 
91 struct umouse_config_desc {
92 	struct usb_config_descriptor		confd;
93 	struct usb_interface_descriptor		ifcd;
94 	struct umouse_hid_descriptor		hidd;
95 	struct usb_endpoint_descriptor		endpd;
96 	struct usb_endpoint_ss_comp_descriptor	sscompd;
97 } __packed;
98 
99 #define MOUSE_MAX_X	0x8000
100 #define MOUSE_MAX_Y	0x8000
101 
102 static const uint8_t umouse_report_desc[] = {
103 	0x05, 0x01,		/* USAGE_PAGE (Generic Desktop)		*/
104 	0x09, 0x02,		/* USAGE (Mouse)			*/
105 	0xa1, 0x01,		/* COLLECTION (Application) 		*/
106 	0x09, 0x01,		/*   USAGE (Pointer)			*/
107 	0xa1, 0x00,		/*   COLLECTION (Physical)		*/
108 	0x05, 0x09,		/*     USAGE_PAGE (Button)		*/
109 	0x19, 0x01,		/*     USAGE_MINIMUM (Button 1)		*/
110 	0x29, 0x03,		/*     USAGE_MAXIMUM (Button 3)		*/
111 	0x15, 0x00,		/*     LOGICAL_MINIMUM (0)		*/
112 	0x25, 0x01,		/*     LOGICAL_MAXIMUM (1)		*/
113 	0x75, 0x01,		/*     REPORT_SIZE (1)			*/
114 	0x95, 0x03,		/*     REPORT_COUNT (3)			*/
115 	0x81, 0x02,		/*     INPUT (Data,Var,Abs); 3 buttons	*/
116 	0x75, 0x05,		/*     REPORT_SIZE (5)			*/
117 	0x95, 0x01,		/*     REPORT_COUNT (1)			*/
118 	0x81, 0x03,		/*     INPUT (Cnst,Var,Abs); padding	*/
119 	0x05, 0x01,		/*     USAGE_PAGE (Generic Desktop)	*/
120 	0x09, 0x30,		/*     USAGE (X)			*/
121 	0x09, 0x31,		/*     USAGE (Y)			*/
122 	0x35, 0x00,		/*     PHYSICAL_MINIMUM (0)		*/
123 	0x46, 0xff, 0x7f,	/*     PHYSICAL_MAXIMUM (0x7fff)	*/
124 	0x15, 0x00,		/*     LOGICAL_MINIMUM (0)		*/
125 	0x26, 0xff, 0x7f,	/*     LOGICAL_MAXIMUM (0x7fff)		*/
126 	0x75, 0x10,		/*     REPORT_SIZE (16)			*/
127 	0x95, 0x02,		/*     REPORT_COUNT (2)			*/
128 	0x81, 0x02,		/*     INPUT (Data,Var,Abs)		*/
129 	0x05, 0x01,		/*     USAGE Page (Generic Desktop)	*/
130 	0x09, 0x38,		/*     USAGE (Wheel)			*/
131 	0x35, 0x00,		/*     PHYSICAL_MINIMUM (0)		*/
132 	0x45, 0x00,		/*     PHYSICAL_MAXIMUM (0)		*/
133 	0x15, 0x81,		/*     LOGICAL_MINIMUM (-127)		*/
134 	0x25, 0x7f,		/*     LOGICAL_MAXIMUM (127)		*/
135 	0x75, 0x08,		/*     REPORT_SIZE (8)			*/
136 	0x95, 0x01,		/*     REPORT_COUNT (1)			*/
137 	0x81, 0x06,		/*     INPUT (Data,Var,Rel)		*/
138 	0xc0,			/*   END_COLLECTION			*/
139 	0xc0			/* END_COLLECTION			*/
140 };
141 
142 struct umouse_report {
143 	uint8_t	buttons;	/* bits: 0 left, 1 right, 2 middle */
144 	int16_t	x;		/* x position */
145 	int16_t	y;		/* y position */
146 	int8_t	z;		/* z wheel position */
147 } __packed;
148 
149 
150 #define	MSETW(ptr, val)	ptr = { (uint8_t)(val), (uint8_t)((val) >> 8) }
151 
152 static struct usb_device_descriptor umouse_dev_desc = {
153 	.bLength = sizeof(umouse_dev_desc),
154 	.bDescriptorType = UDESC_DEVICE,
155 	MSETW(.bcdUSB, UD_USB_3_0),
156 	.bMaxPacketSize = 8,			/* max packet size */
157 	MSETW(.idVendor, 0xFB5D),		/* vendor */
158 	MSETW(.idProduct, 0x0001),		/* product */
159 	MSETW(.bcdDevice, 0),			/* device version */
160 	.iManufacturer = UMSTR_MANUFACTURER,
161 	.iProduct = UMSTR_PRODUCT,
162 	.iSerialNumber = UMSTR_SERIAL,
163 	.bNumConfigurations = 1,
164 };
165 
166 static struct umouse_config_desc umouse_confd = {
167 	.confd = {
168 		.bLength = sizeof(umouse_confd.confd),
169 		.bDescriptorType = UDESC_CONFIG,
170 		.wTotalLength[0] = sizeof(umouse_confd),
171 		.bNumInterface = 1,
172 		.bConfigurationValue = 1,
173 		.iConfiguration = UMSTR_CONFIG,
174 		.bmAttributes = UC_BUS_POWERED | UC_REMOTE_WAKEUP,
175 		.bMaxPower = 0,
176 	},
177 	.ifcd = {
178 		.bLength = sizeof(umouse_confd.ifcd),
179 		.bDescriptorType = UDESC_INTERFACE,
180 		.bNumEndpoints = 1,
181 		.bInterfaceClass = UICLASS_HID,
182 		.bInterfaceSubClass = UISUBCLASS_BOOT,
183 		.bInterfaceProtocol = UIPROTO_MOUSE,
184 	},
185 	.hidd = {
186 		.bLength = sizeof(umouse_confd.hidd),
187 		.bDescriptorType = 0x21,
188 		.bcdHID = { 0x01, 0x10 },
189 		.bCountryCode = 0,
190 		.bNumDescriptors = 1,
191 		.bReportDescriptorType = UMOUSE_REPORT_DESC_TYPE,
192 		.wItemLength = { sizeof(umouse_report_desc), 0 },
193 	},
194 	.endpd = {
195 		.bLength = sizeof(umouse_confd.endpd),
196 		.bDescriptorType = UDESC_ENDPOINT,
197 		.bEndpointAddress = UE_DIR_IN | UMOUSE_INTR_ENDPT,
198 		.bmAttributes = UE_INTERRUPT,
199 		.wMaxPacketSize[0] = 8,
200 		.bInterval = 0xA,
201 	},
202 	.sscompd = {
203 		.bLength = sizeof(umouse_confd.sscompd),
204 		.bDescriptorType = UDESC_ENDPOINT_SS_COMP,
205 		.bMaxBurst = 0,
206 		.bmAttributes = 0,
207 		MSETW(.wBytesPerInterval, 0),
208 	},
209 };
210 
211 
212 struct umouse_bos_desc {
213 	struct usb_bos_descriptor		bosd;
214 	struct usb_devcap_ss_descriptor		usbssd;
215 } __packed;
216 
217 
218 struct umouse_bos_desc umouse_bosd = {
219 	.bosd = {
220 		.bLength = sizeof(umouse_bosd.bosd),
221 		.bDescriptorType = UDESC_BOS,
222 		HSETW(.wTotalLength, sizeof(umouse_bosd)),
223 		.bNumDeviceCaps = 1,
224 	},
225 	.usbssd = {
226 		.bLength = sizeof(umouse_bosd.usbssd),
227 		.bDescriptorType = UDESC_DEVICE_CAPABILITY,
228 		.bDevCapabilityType = 3,
229 		.bmAttributes = 0,
230 		HSETW(.wSpeedsSupported, 0x08),
231 		.bFunctionalitySupport = 3,
232 		.bU1DevExitLat = 0xa,   /* dummy - not used */
233 		.wU2DevExitLat = { 0x20, 0x00 },
234 	}
235 };
236 
237 
238 struct umouse_softc {
239 	struct usb_hci *hci;
240 
241 	char	*opt;
242 
243 	struct umouse_report um_report;
244 	int	newdata;
245 	struct {
246 		uint8_t	idle;
247 		uint8_t	protocol;
248 		uint8_t	feature;
249 	} hid;
250 
251 	pthread_mutex_t	mtx;
252 	pthread_mutex_t	ev_mtx;
253 	int		polling;
254 	struct timeval	prev_evt;
255 };
256 
257 static void
258 umouse_event(uint8_t button, int x, int y, void *arg)
259 {
260 	struct umouse_softc *sc;
261 	struct bhyvegc_image *gc;
262 
263 	gc = console_get_image();
264 	if (gc == NULL) {
265 		/* not ready */
266 		return;
267 	}
268 
269 	sc = arg;
270 
271 	pthread_mutex_lock(&sc->mtx);
272 
273 	sc->um_report.buttons = 0;
274 	sc->um_report.z = 0;
275 
276 	if (button & 0x01)
277 		sc->um_report.buttons |= 0x01;	/* left */
278 	if (button & 0x02)
279 		sc->um_report.buttons |= 0x04;	/* middle */
280 	if (button & 0x04)
281 		sc->um_report.buttons |= 0x02;	/* right */
282 	if (button & 0x8)
283 		sc->um_report.z = 1;
284 	if (button & 0x10)
285 		sc->um_report.z = -1;
286 
287 	/* scale coords to mouse resolution */
288 	sc->um_report.x = MOUSE_MAX_X * x / gc->width;
289 	sc->um_report.y = MOUSE_MAX_Y * y / gc->height;
290 	sc->newdata = 1;
291 	pthread_mutex_unlock(&sc->mtx);
292 
293 	pthread_mutex_lock(&sc->ev_mtx);
294 	sc->hci->hci_intr(sc->hci, UE_DIR_IN | UMOUSE_INTR_ENDPT);
295 	pthread_mutex_unlock(&sc->ev_mtx);
296 }
297 
298 static void *
299 umouse_init(struct usb_hci *hci, char *opt)
300 {
301 	struct umouse_softc *sc;
302 
303 	sc = calloc(1, sizeof(struct umouse_softc));
304 	sc->hci = hci;
305 
306 	sc->hid.protocol = 1;	/* REPORT protocol */
307 	sc->opt = strdup(opt);
308 	pthread_mutex_init(&sc->mtx, NULL);
309 	pthread_mutex_init(&sc->ev_mtx, NULL);
310 
311 	console_ptr_register(umouse_event, sc, 10);
312 
313 	return (sc);
314 }
315 
316 #define	UREQ(x,y)	((x) | ((y) << 8))
317 
318 static int
319 umouse_request(void *scarg, struct usb_data_xfer *xfer)
320 {
321 	struct umouse_softc *sc;
322 	struct usb_data_xfer_block *data;
323 	const char *str;
324 	uint16_t value;
325 	uint16_t index;
326 	uint16_t len;
327 	uint16_t slen;
328 	uint8_t *udata;
329 	int	err;
330 	int	i, idx;
331 	int	eshort;
332 
333 	sc = scarg;
334 
335 	data = NULL;
336 	udata = NULL;
337 	idx = xfer->head;
338 	for (i = 0; i < xfer->ndata; i++) {
339 		xfer->data[idx].bdone = 0;
340 		if (data == NULL && USB_DATA_OK(xfer,i)) {
341 			data = &xfer->data[idx];
342 			udata = data->buf;
343 		}
344 
345 		xfer->data[idx].processed = 1;
346 		idx = (idx + 1) % USB_MAX_XFER_BLOCKS;
347 	}
348 
349 	err = USB_ERR_NORMAL_COMPLETION;
350 	eshort = 0;
351 
352 	if (!xfer->ureq) {
353 		DPRINTF(("umouse_request: port %d\r\n", sc->hci->hci_port));
354 		goto done;
355 	}
356 
357 	value = UGETW(xfer->ureq->wValue);
358 	index = UGETW(xfer->ureq->wIndex);
359 	len = UGETW(xfer->ureq->wLength);
360 
361 	DPRINTF(("umouse_request: port %d, type 0x%x, req 0x%x, val 0x%x, "
362 	         "idx 0x%x, len %u\r\n",
363 	         sc->hci->hci_port, xfer->ureq->bmRequestType,
364 	         xfer->ureq->bRequest, value, index, len));
365 
366 	switch (UREQ(xfer->ureq->bRequest, xfer->ureq->bmRequestType)) {
367 	case UREQ(UR_GET_CONFIG, UT_READ_DEVICE):
368 		DPRINTF(("umouse: (UR_GET_CONFIG, UT_READ_DEVICE)\r\n"));
369 		if (!data)
370 			break;
371 
372 		*udata = umouse_confd.confd.bConfigurationValue;
373 		data->blen = len > 0 ? len - 1 : 0;
374 		eshort = data->blen > 0;
375 		data->bdone += 1;
376 		break;
377 
378 	case UREQ(UR_GET_DESCRIPTOR, UT_READ_DEVICE):
379 		DPRINTF(("umouse: (UR_GET_DESCRIPTOR, UT_READ_DEVICE) val %x\r\n",
380 		        value >> 8));
381 		if (!data)
382 			break;
383 
384 		switch (value >> 8) {
385 		case UDESC_DEVICE:
386 			DPRINTF(("umouse: (->UDESC_DEVICE) len %u ?= "
387 			         "sizeof(umouse_dev_desc) %lu\r\n",
388 			         len, sizeof(umouse_dev_desc)));
389 			if ((value & 0xFF) != 0) {
390 				err = USB_ERR_IOERROR;
391 				goto done;
392 			}
393 			if (len > sizeof(umouse_dev_desc)) {
394 				data->blen = len - sizeof(umouse_dev_desc);
395 				len = sizeof(umouse_dev_desc);
396 			} else
397 				data->blen = 0;
398 			memcpy(data->buf, &umouse_dev_desc, len);
399 			data->bdone += len;
400 			break;
401 
402 		case UDESC_CONFIG:
403 			DPRINTF(("umouse: (->UDESC_CONFIG)\r\n"));
404 			if ((value & 0xFF) != 0) {
405 				err = USB_ERR_IOERROR;
406 				goto done;
407 			}
408 			if (len > sizeof(umouse_confd)) {
409 				data->blen = len - sizeof(umouse_confd);
410 				len = sizeof(umouse_confd);
411 			} else
412 				data->blen = 0;
413 
414 			memcpy(data->buf, &umouse_confd, len);
415 			data->bdone += len;
416 			break;
417 
418 		case UDESC_STRING:
419 			DPRINTF(("umouse: (->UDESC_STRING)\r\n"));
420 			str = NULL;
421 			if ((value & 0xFF) < UMSTR_MAX)
422 				str = umouse_desc_strings[value & 0xFF];
423 			else
424 				goto done;
425 
426 			if ((value & 0xFF) == UMSTR_LANG) {
427 				udata[0] = 4;
428 				udata[1] = UDESC_STRING;
429 				data->blen = len - 2;
430 				len -= 2;
431 				data->bdone += 2;
432 
433 				if (len >= 2) {
434 					udata[2] = str[0];
435 					udata[3] = str[1];
436 					data->blen -= 2;
437 					data->bdone += 2;
438 				} else
439 					data->blen = 0;
440 
441 				goto done;
442 			}
443 
444 			slen = 2 + strlen(str) * 2;
445 			udata[0] = slen;
446 			udata[1] = UDESC_STRING;
447 
448 			if (len > slen) {
449 				data->blen = len - slen;
450 				len = slen;
451 			} else
452 				data->blen = 0;
453 			for (i = 2; i < len; i += 2) {
454 				udata[i] = *str++;
455 				udata[i+1] = '\0';
456 			}
457 			data->bdone += slen;
458 
459 			break;
460 
461 		case UDESC_BOS:
462 			DPRINTF(("umouse: USB3 BOS\r\n"));
463 			if (len > sizeof(umouse_bosd)) {
464 				data->blen = len - sizeof(umouse_bosd);
465 				len = sizeof(umouse_bosd);
466 			} else
467 				data->blen = 0;
468 			memcpy(udata, &umouse_bosd, len);
469 			data->bdone += len;
470 			break;
471 
472 		default:
473 			DPRINTF(("umouse: unknown(%d)->ERROR\r\n", value >> 8));
474 			err = USB_ERR_IOERROR;
475 			goto done;
476 		}
477 		eshort = data->blen > 0;
478 		break;
479 
480 	case UREQ(UR_GET_DESCRIPTOR, UT_READ_INTERFACE):
481 		DPRINTF(("umouse: (UR_GET_DESCRIPTOR, UT_READ_INTERFACE) "
482 		         "0x%x\r\n", (value >> 8)));
483 		if (!data)
484 			break;
485 
486 		switch (value >> 8) {
487 		case UMOUSE_REPORT_DESC_TYPE:
488 			if (len > sizeof(umouse_report_desc)) {
489 				data->blen = len - sizeof(umouse_report_desc);
490 				len = sizeof(umouse_report_desc);
491 			} else
492 				data->blen = 0;
493 			memcpy(data->buf, umouse_report_desc, len);
494 			data->bdone += len;
495 			break;
496 		default:
497 			DPRINTF(("umouse: IO ERROR\r\n"));
498 			err = USB_ERR_IOERROR;
499 			goto done;
500 		}
501 		eshort = data->blen > 0;
502 		break;
503 
504 	case UREQ(UR_GET_INTERFACE, UT_READ_INTERFACE):
505 		DPRINTF(("umouse: (UR_GET_INTERFACE, UT_READ_INTERFACE)\r\n"));
506 		if (index != 0) {
507 			DPRINTF(("umouse get_interface, invalid index %d\r\n",
508 			        index));
509 			err = USB_ERR_IOERROR;
510 			goto done;
511 		}
512 
513 		if (!data)
514 			break;
515 
516 		if (len > 0) {
517 			*udata = 0;
518 			data->blen = len - 1;
519 		}
520 		eshort = data->blen > 0;
521 		data->bdone += 1;
522 		break;
523 
524 	case UREQ(UR_GET_STATUS, UT_READ_DEVICE):
525 		DPRINTF(("umouse: (UR_GET_STATUS, UT_READ_DEVICE)\r\n"));
526 		if (data != NULL && len > 1) {
527 			if (sc->hid.feature == UF_DEVICE_REMOTE_WAKEUP)
528 				USETW(udata, UDS_REMOTE_WAKEUP);
529 			else
530 				USETW(udata, 0);
531 			data->blen = len - 2;
532 			data->bdone += 2;
533 		}
534 
535 		eshort = data->blen > 0;
536 		break;
537 
538 	case UREQ(UR_GET_STATUS, UT_READ_INTERFACE):
539 	case UREQ(UR_GET_STATUS, UT_READ_ENDPOINT):
540 		DPRINTF(("umouse: (UR_GET_STATUS, UT_READ_INTERFACE)\r\n"));
541 		if (data != NULL && len > 1) {
542 			USETW(udata, 0);
543 			data->blen = len - 2;
544 			data->bdone += 2;
545 		}
546 		eshort = data->blen > 0;
547 		break;
548 
549 	case UREQ(UR_SET_ADDRESS, UT_WRITE_DEVICE):
550 		/* XXX Controller should've handled this */
551 		DPRINTF(("umouse set address %u\r\n", value));
552 		break;
553 
554 	case UREQ(UR_SET_CONFIG, UT_WRITE_DEVICE):
555 		DPRINTF(("umouse set config %u\r\n", value));
556 		break;
557 
558 	case UREQ(UR_SET_DESCRIPTOR, UT_WRITE_DEVICE):
559 		DPRINTF(("umouse set descriptor %u\r\n", value));
560 		break;
561 
562 
563 	case UREQ(UR_CLEAR_FEATURE, UT_WRITE_DEVICE):
564 		DPRINTF(("umouse: (UR_SET_FEATURE, UT_WRITE_DEVICE) %x\r\n", value));
565 		if (value == UF_DEVICE_REMOTE_WAKEUP)
566 			sc->hid.feature = 0;
567 		break;
568 
569 	case UREQ(UR_SET_FEATURE, UT_WRITE_DEVICE):
570 		DPRINTF(("umouse: (UR_SET_FEATURE, UT_WRITE_DEVICE) %x\r\n", value));
571 		if (value == UF_DEVICE_REMOTE_WAKEUP)
572 			sc->hid.feature = UF_DEVICE_REMOTE_WAKEUP;
573 		break;
574 
575 	case UREQ(UR_CLEAR_FEATURE, UT_WRITE_INTERFACE):
576 	case UREQ(UR_CLEAR_FEATURE, UT_WRITE_ENDPOINT):
577 	case UREQ(UR_SET_FEATURE, UT_WRITE_INTERFACE):
578 	case UREQ(UR_SET_FEATURE, UT_WRITE_ENDPOINT):
579 		DPRINTF(("umouse: (UR_CLEAR_FEATURE, UT_WRITE_INTERFACE)\r\n"));
580 		err = USB_ERR_IOERROR;
581 		goto done;
582 
583 	case UREQ(UR_SET_INTERFACE, UT_WRITE_INTERFACE):
584 		DPRINTF(("umouse set interface %u\r\n", value));
585 		break;
586 
587 	case UREQ(UR_ISOCH_DELAY, UT_WRITE_DEVICE):
588 		DPRINTF(("umouse set isoch delay %u\r\n", value));
589 		break;
590 
591 	case UREQ(UR_SET_SEL, 0):
592 		DPRINTF(("umouse set sel\r\n"));
593 		break;
594 
595 	case UREQ(UR_SYNCH_FRAME, UT_WRITE_ENDPOINT):
596 		DPRINTF(("umouse synch frame\r\n"));
597 		break;
598 
599 	/* HID device requests */
600 
601 	case UREQ(UMOUSE_GET_REPORT, UT_READ_CLASS_INTERFACE):
602 		DPRINTF(("umouse: (UMOUSE_GET_REPORT, UT_READ_CLASS_INTERFACE) "
603 		         "0x%x\r\n", (value >> 8)));
604 		if (!data)
605 			break;
606 
607 		if ((value >> 8) == 0x01 && len >= sizeof(sc->um_report)) {
608 			/* TODO read from backend */
609 
610 			if (len > sizeof(sc->um_report)) {
611 				data->blen = len - sizeof(sc->um_report);
612 				len = sizeof(sc->um_report);
613 			} else
614 				data->blen = 0;
615 
616 			memcpy(data->buf, &sc->um_report, len);
617 			data->bdone += len;
618 		} else {
619 			err = USB_ERR_IOERROR;
620 			goto done;
621 		}
622 		eshort = data->blen > 0;
623 		break;
624 
625 	case UREQ(UMOUSE_GET_IDLE, UT_READ_CLASS_INTERFACE):
626 		if (data != NULL && len > 0) {
627 			*udata = sc->hid.idle;
628 			data->blen = len - 1;
629 			data->bdone += 1;
630 		}
631 		eshort = data->blen > 0;
632 		break;
633 
634 	case UREQ(UMOUSE_GET_PROTOCOL, UT_READ_CLASS_INTERFACE):
635 		if (data != NULL && len > 0) {
636 			*udata = sc->hid.protocol;
637 			data->blen = len - 1;
638 			data->bdone += 1;
639 		}
640 		eshort = data->blen > 0;
641 		break;
642 
643 	case UREQ(UMOUSE_SET_REPORT, UT_WRITE_CLASS_INTERFACE):
644 		DPRINTF(("umouse: (UMOUSE_SET_REPORT, UT_WRITE_CLASS_INTERFACE) ignored\r\n"));
645 		break;
646 
647 	case UREQ(UMOUSE_SET_IDLE, UT_WRITE_CLASS_INTERFACE):
648 		sc->hid.idle = UGETW(xfer->ureq->wValue) >> 8;
649 		DPRINTF(("umouse: (UMOUSE_SET_IDLE, UT_WRITE_CLASS_INTERFACE) %x\r\n",
650 		        sc->hid.idle));
651 		break;
652 
653 	case UREQ(UMOUSE_SET_PROTOCOL, UT_WRITE_CLASS_INTERFACE):
654 		sc->hid.protocol = UGETW(xfer->ureq->wValue) >> 8;
655 		DPRINTF(("umouse: (UR_CLEAR_FEATURE, UT_WRITE_CLASS_INTERFACE) %x\r\n",
656 		        sc->hid.protocol));
657 		break;
658 
659 	default:
660 		DPRINTF(("**** umouse request unhandled\r\n"));
661 		err = USB_ERR_IOERROR;
662 		break;
663 	}
664 
665 done:
666 /* UT_WRITE is 0, so this is condition is never true. */
667 #ifdef __FreeBSD__
668 	if (xfer->ureq && (xfer->ureq->bmRequestType & UT_WRITE) &&
669 	    (err == USB_ERR_NORMAL_COMPLETION) && (data != NULL))
670 		data->blen = 0;
671 	else if (eshort)
672 		err = USB_ERR_SHORT_XFER;
673 #else
674 	if (eshort)
675 		err = USB_ERR_SHORT_XFER;
676 #endif
677 
678 
679 	DPRINTF(("umouse request error code %d (0=ok), blen %u txlen %u\r\n",
680 	        err, (data ? data->blen : 0), (data ? data->bdone : 0)));
681 
682 	return (err);
683 }
684 
685 static int
686 umouse_data_handler(void *scarg, struct usb_data_xfer *xfer, int dir,
687      int epctx)
688 {
689 	struct umouse_softc *sc;
690 	struct usb_data_xfer_block *data;
691 	uint8_t *udata;
692 	int len, i, idx;
693 	int err;
694 
695 	DPRINTF(("umouse handle data - DIR=%s|EP=%d, blen %d\r\n",
696 	        dir ? "IN" : "OUT", epctx, xfer->data[0].blen));
697 
698 
699 	/* find buffer to add data */
700 	udata = NULL;
701 	err = USB_ERR_NORMAL_COMPLETION;
702 
703 	/* handle xfer at first unprocessed item with buffer */
704 	data = NULL;
705 	idx = xfer->head;
706 	for (i = 0; i < xfer->ndata; i++) {
707 		data = &xfer->data[idx];
708 		if (data->buf != NULL && data->blen != 0) {
709 			break;
710 		} else {
711 			data->processed = 1;
712 			data = NULL;
713 		}
714 		idx = (idx + 1) % USB_MAX_XFER_BLOCKS;
715 	}
716 	if (!data)
717 		goto done;
718 
719 	udata = data->buf;
720 	len = data->blen;
721 
722 	if (udata == NULL) {
723 		DPRINTF(("umouse no buffer provided for input\r\n"));
724 		err = USB_ERR_NOMEM;
725 		goto done;
726 	}
727 
728 	sc = scarg;
729 
730 	if (dir) {
731 
732 		pthread_mutex_lock(&sc->mtx);
733 
734 		if (!sc->newdata) {
735 			err = USB_ERR_CANCELLED;
736 			USB_DATA_SET_ERRCODE(&xfer->data[xfer->head], USB_NAK);
737 			pthread_mutex_unlock(&sc->mtx);
738 			goto done;
739 		}
740 
741 		if (sc->polling) {
742 			err = USB_ERR_STALLED;
743 			USB_DATA_SET_ERRCODE(data, USB_STALL);
744 			pthread_mutex_unlock(&sc->mtx);
745 			goto done;
746 		}
747 		sc->polling = 1;
748 
749 		if (len > 0) {
750 			sc->newdata = 0;
751 
752 			data->processed = 1;
753 			data->bdone += 6;
754 			memcpy(udata, &sc->um_report, 6);
755 			data->blen = len - 6;
756 			if (data->blen > 0)
757 				err = USB_ERR_SHORT_XFER;
758 		}
759 
760 		sc->polling = 0;
761 		pthread_mutex_unlock(&sc->mtx);
762 	} else {
763 		USB_DATA_SET_ERRCODE(data, USB_STALL);
764 		err = USB_ERR_STALLED;
765 	}
766 
767 done:
768 	return (err);
769 }
770 
771 static int
772 umouse_reset(void *scarg)
773 {
774 	struct umouse_softc *sc;
775 
776 	sc = scarg;
777 
778 	sc->newdata = 0;
779 
780 	return (0);
781 }
782 
783 static int
784 umouse_remove(void *scarg)
785 {
786 
787 	return (0);
788 }
789 
790 static int
791 umouse_stop(void *scarg)
792 {
793 
794 	return (0);
795 }
796 
797 
798 struct usb_devemu ue_mouse = {
799 	.ue_emu =	"tablet",
800 	.ue_usbver =	3,
801 	.ue_usbspeed =	USB_SPEED_HIGH,
802 	.ue_init =	umouse_init,
803 	.ue_request =	umouse_request,
804 	.ue_data =	umouse_data_handler,
805 	.ue_reset =	umouse_reset,
806 	.ue_remove =	umouse_remove,
807 	.ue_stop =	umouse_stop
808 };
809 USB_EMUL_SET(ue_mouse);
810