1 // SPDX-License-Identifier: GPL-2.0-only
3 * keyspan_remote: USB driver for the Keyspan DMR
5 * Copyright (C) 2005 Zymeta Corporation - Michael Downey (downey@zymeta.com)
7 * This driver has been put together with the support of Innosys, Inc.
8 * and Keyspan, Inc the manufacturers of the Keyspan USB DMR product.
11 #include <linux/kernel.h>
12 #include <linux/errno.h>
13 #include <linux/slab.h>
14 #include <linux/module.h>
15 #include <linux/usb/input.h>
17 /* Parameters that can be passed to the driver. */
19 module_param(debug, int, 0444);
20 MODULE_PARM_DESC(debug, "Enable extra debug messages and information");
22 /* Vendor and product ids */
23 #define USB_KEYSPAN_VENDOR_ID 0x06CD
24 #define USB_KEYSPAN_PRODUCT_UIA11 0x0202
26 /* Defines for converting the data from the remote. */
28 #define ZERO_MASK 0x1F /* 5 bits for a 0 */
30 #define ONE_MASK 0x3F /* 6 bits for a 1 */
32 #define SYNC_MASK 0x3FFF /* 14 bits for a SYNC sequence */
34 #define STOP_MASK 0x1F /* 5 bits for the STOP sequence */
37 #define RECV_SIZE 8 /* The UIA-11 type have a 8 byte limit. */
40 * Table that maps the 31 possible keycodes to input keys.
41 * Currently there are 15 and 17 button models so RESERVED codes
42 * are blank areas in the mapping.
44 static const unsigned short keyspan_key_table[] = {
45 KEY_RESERVED, /* 0 is just a place holder. */
79 /* table of devices that work with this driver */
80 static const struct usb_device_id keyspan_table[] = {
81 { USB_DEVICE(USB_KEYSPAN_VENDOR_ID, USB_KEYSPAN_PRODUCT_UIA11) },
82 { } /* Terminating entry */
85 /* Structure to store all the real stuff that a remote sends to us. */
86 struct keyspan_message {
92 /* Structure used for all the bit testing magic needed to be done. */
101 /* Structure to hold all of our driver specific stuff */
105 unsigned short keymap[ARRAY_SIZE(keyspan_key_table)];
106 struct usb_device *udev;
107 struct input_dev *input;
108 struct usb_interface *interface;
109 struct usb_endpoint_descriptor *in_endpoint;
113 unsigned char *in_buffer;
115 /* variables used to parse messages from remote. */
116 struct bit_tester data;
121 static struct usb_driver keyspan_driver;
124 * Debug routine that prints out what we've received from the remote.
126 static void keyspan_print(struct usb_keyspan* dev) /*unsigned char* data)*/
128 char codes[4 * RECV_SIZE];
131 for (i = 0; i < RECV_SIZE; i++)
132 snprintf(codes + i * 3, 4, "%02x ", dev->in_buffer[i]);
134 dev_info(&dev->udev->dev, "%s\n", codes);
138 * Routine that manages the bit_tester structure. It makes sure that there are
139 * at least bits_needed bits loaded into the tester.
141 static int keyspan_load_tester(struct usb_keyspan* dev, int bits_needed)
143 if (dev->data.bits_left >= bits_needed)
147 * Somehow we've missed the last message. The message will be repeated
148 * though so it's not too big a deal
150 if (dev->data.pos >= dev->data.len) {
151 dev_dbg(&dev->interface->dev,
152 "%s - Error ran out of data. pos: %d, len: %d\n",
153 __func__, dev->data.pos, dev->data.len);
157 /* Load as much as we can into the tester. */
158 while ((dev->data.bits_left + 7 < (sizeof(dev->data.tester) * 8)) &&
159 (dev->data.pos < dev->data.len)) {
160 dev->data.tester += (dev->data.buffer[dev->data.pos++] << dev->data.bits_left);
161 dev->data.bits_left += 8;
167 static void keyspan_report_button(struct usb_keyspan *remote, int button, int press)
169 struct input_dev *input = remote->input;
171 input_event(input, EV_MSC, MSC_SCAN, button);
172 input_report_key(input, remote->keymap[button], press);
177 * Routine that handles all the logic needed to parse out the message from the remote.
179 static void keyspan_check_data(struct usb_keyspan *remote)
183 struct keyspan_message message;
185 switch(remote->stage) {
188 * In stage 0 we want to find the start of a message. The remote sends a 0xFF as filler.
189 * So the first byte that isn't a FF should be the start of a new message.
191 for (i = 0; i < RECV_SIZE && remote->in_buffer[i] == GAP; ++i);
194 memcpy(remote->data.buffer, remote->in_buffer, RECV_SIZE);
195 remote->data.len = RECV_SIZE;
196 remote->data.pos = 0;
197 remote->data.tester = 0;
198 remote->data.bits_left = 0;
205 * Stage 1 we should have 16 bytes and should be able to detect a
206 * SYNC. The SYNC is 14 bits, 7 0's and then 7 1's.
208 memcpy(remote->data.buffer + remote->data.len, remote->in_buffer, RECV_SIZE);
209 remote->data.len += RECV_SIZE;
212 while ((remote->data.bits_left >= 14 || remote->data.pos < remote->data.len) && !found) {
213 for (i = 0; i < 8; ++i) {
214 if (keyspan_load_tester(remote, 14) != 0) {
219 if ((remote->data.tester & SYNC_MASK) == SYNC) {
220 remote->data.tester = remote->data.tester >> 14;
221 remote->data.bits_left -= 14;
225 remote->data.tester = remote->data.tester >> 1;
226 --remote->data.bits_left;
233 remote->data.len = 0;
241 * Stage 2 we should have 24 bytes which will be enough for a full
242 * message. We need to parse out the system code, button code,
243 * toggle code, and stop.
245 memcpy(remote->data.buffer + remote->data.len, remote->in_buffer, RECV_SIZE);
246 remote->data.len += RECV_SIZE;
249 for (i = 0; i < 9; i++) {
250 keyspan_load_tester(remote, 6);
252 if ((remote->data.tester & ZERO_MASK) == ZERO) {
253 message.system = message.system << 1;
254 remote->data.tester = remote->data.tester >> 5;
255 remote->data.bits_left -= 5;
256 } else if ((remote->data.tester & ONE_MASK) == ONE) {
257 message.system = (message.system << 1) + 1;
258 remote->data.tester = remote->data.tester >> 6;
259 remote->data.bits_left -= 6;
261 dev_err(&remote->interface->dev,
262 "%s - Unknown sequence found in system data.\n",
270 for (i = 0; i < 5; i++) {
271 keyspan_load_tester(remote, 6);
273 if ((remote->data.tester & ZERO_MASK) == ZERO) {
274 message.button = message.button << 1;
275 remote->data.tester = remote->data.tester >> 5;
276 remote->data.bits_left -= 5;
277 } else if ((remote->data.tester & ONE_MASK) == ONE) {
278 message.button = (message.button << 1) + 1;
279 remote->data.tester = remote->data.tester >> 6;
280 remote->data.bits_left -= 6;
282 dev_err(&remote->interface->dev,
283 "%s - Unknown sequence found in button data.\n",
290 keyspan_load_tester(remote, 6);
291 if ((remote->data.tester & ZERO_MASK) == ZERO) {
293 remote->data.tester = remote->data.tester >> 5;
294 remote->data.bits_left -= 5;
295 } else if ((remote->data.tester & ONE_MASK) == ONE) {
297 remote->data.tester = remote->data.tester >> 6;
298 remote->data.bits_left -= 6;
300 dev_err(&remote->interface->dev,
301 "%s - Error in message, invalid toggle.\n",
307 keyspan_load_tester(remote, 5);
308 if ((remote->data.tester & STOP_MASK) == STOP) {
309 remote->data.tester = remote->data.tester >> 5;
310 remote->data.bits_left -= 5;
312 dev_err(&remote->interface->dev,
313 "Bad message received, no stop bit found.\n");
316 dev_dbg(&remote->interface->dev,
317 "%s found valid message: system: %d, button: %d, toggle: %d\n",
318 __func__, message.system, message.button, message.toggle);
320 if (message.toggle != remote->toggle) {
321 keyspan_report_button(remote, message.button, 1);
322 keyspan_report_button(remote, message.button, 0);
323 remote->toggle = message.toggle;
332 * Routine for sending all the initialization messages to the remote.
334 static int keyspan_setup(struct usb_device* dev)
338 retval = usb_control_msg(dev, usb_sndctrlpipe(dev, 0),
339 0x11, 0x40, 0x5601, 0x0, NULL, 0, 0);
341 dev_dbg(&dev->dev, "%s - failed to set bit rate due to error: %d\n",
346 retval = usb_control_msg(dev, usb_sndctrlpipe(dev, 0),
347 0x44, 0x40, 0x0, 0x0, NULL, 0, 0);
349 dev_dbg(&dev->dev, "%s - failed to set resume sensitivity due to error: %d\n",
354 retval = usb_control_msg(dev, usb_sndctrlpipe(dev, 0),
355 0x22, 0x40, 0x0, 0x0, NULL, 0, 0);
357 dev_dbg(&dev->dev, "%s - failed to turn receive on due to error: %d\n",
362 dev_dbg(&dev->dev, "%s - Setup complete.\n", __func__);
367 * Routine used to handle a new message that has come in.
369 static void keyspan_irq_recv(struct urb *urb)
371 struct usb_keyspan *dev = urb->context;
374 /* Check our status in case we need to bail out early. */
375 switch (urb->status) {
379 /* Device went away so don't keep trying to read from it. */
392 keyspan_check_data(dev);
395 retval = usb_submit_urb(urb, GFP_ATOMIC);
397 dev_err(&dev->interface->dev,
398 "%s - usb_submit_urb failed with result: %d\n",
402 static int keyspan_open(struct input_dev *dev)
404 struct usb_keyspan *remote = input_get_drvdata(dev);
406 remote->irq_urb->dev = remote->udev;
407 if (usb_submit_urb(remote->irq_urb, GFP_KERNEL))
413 static void keyspan_close(struct input_dev *dev)
415 struct usb_keyspan *remote = input_get_drvdata(dev);
417 usb_kill_urb(remote->irq_urb);
420 static struct usb_endpoint_descriptor *keyspan_get_in_endpoint(struct usb_host_interface *iface)
423 struct usb_endpoint_descriptor *endpoint;
426 for (i = 0; i < iface->desc.bNumEndpoints; ++i) {
427 endpoint = &iface->endpoint[i].desc;
429 if (usb_endpoint_is_int_in(endpoint)) {
430 /* we found our interrupt in endpoint */
439 * Routine that sets up the driver to handle a specific USB device detected on the bus.
441 static int keyspan_probe(struct usb_interface *interface, const struct usb_device_id *id)
443 struct usb_device *udev = interface_to_usbdev(interface);
444 struct usb_endpoint_descriptor *endpoint;
445 struct usb_keyspan *remote;
446 struct input_dev *input_dev;
449 endpoint = keyspan_get_in_endpoint(interface->cur_altsetting);
453 remote = kzalloc(sizeof(*remote), GFP_KERNEL);
454 input_dev = input_allocate_device();
455 if (!remote || !input_dev) {
461 remote->input = input_dev;
462 remote->interface = interface;
463 remote->in_endpoint = endpoint;
464 remote->toggle = -1; /* Set to -1 so we will always not match the toggle from the first remote message. */
466 remote->in_buffer = usb_alloc_coherent(udev, RECV_SIZE, GFP_KERNEL, &remote->in_dma);
467 if (!remote->in_buffer) {
472 remote->irq_urb = usb_alloc_urb(0, GFP_KERNEL);
473 if (!remote->irq_urb) {
478 error = keyspan_setup(udev);
484 if (udev->manufacturer)
485 strlcpy(remote->name, udev->manufacturer, sizeof(remote->name));
488 if (udev->manufacturer)
489 strlcat(remote->name, " ", sizeof(remote->name));
490 strlcat(remote->name, udev->product, sizeof(remote->name));
493 if (!strlen(remote->name))
494 snprintf(remote->name, sizeof(remote->name),
495 "USB Keyspan Remote %04x:%04x",
496 le16_to_cpu(udev->descriptor.idVendor),
497 le16_to_cpu(udev->descriptor.idProduct));
499 usb_make_path(udev, remote->phys, sizeof(remote->phys));
500 strlcat(remote->phys, "/input0", sizeof(remote->phys));
501 memcpy(remote->keymap, keyspan_key_table, sizeof(remote->keymap));
503 input_dev->name = remote->name;
504 input_dev->phys = remote->phys;
505 usb_to_input_id(udev, &input_dev->id);
506 input_dev->dev.parent = &interface->dev;
507 input_dev->keycode = remote->keymap;
508 input_dev->keycodesize = sizeof(unsigned short);
509 input_dev->keycodemax = ARRAY_SIZE(remote->keymap);
511 input_set_capability(input_dev, EV_MSC, MSC_SCAN);
512 __set_bit(EV_KEY, input_dev->evbit);
513 for (i = 0; i < ARRAY_SIZE(keyspan_key_table); i++)
514 __set_bit(keyspan_key_table[i], input_dev->keybit);
515 __clear_bit(KEY_RESERVED, input_dev->keybit);
517 input_set_drvdata(input_dev, remote);
519 input_dev->open = keyspan_open;
520 input_dev->close = keyspan_close;
523 * Initialize the URB to access the device.
524 * The urb gets sent to the device in keyspan_open()
526 usb_fill_int_urb(remote->irq_urb,
528 usb_rcvintpipe(remote->udev, endpoint->bEndpointAddress),
529 remote->in_buffer, RECV_SIZE, keyspan_irq_recv, remote,
530 endpoint->bInterval);
531 remote->irq_urb->transfer_dma = remote->in_dma;
532 remote->irq_urb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
534 /* we can register the device now, as it is ready */
535 error = input_register_device(remote->input);
539 /* save our data pointer in this interface device */
540 usb_set_intfdata(interface, remote);
544 fail3: usb_free_urb(remote->irq_urb);
545 fail2: usb_free_coherent(udev, RECV_SIZE, remote->in_buffer, remote->in_dma);
546 fail1: kfree(remote);
547 input_free_device(input_dev);
553 * Routine called when a device is disconnected from the USB.
555 static void keyspan_disconnect(struct usb_interface *interface)
557 struct usb_keyspan *remote;
559 remote = usb_get_intfdata(interface);
560 usb_set_intfdata(interface, NULL);
562 if (remote) { /* We have a valid driver structure so clean up everything we allocated. */
563 input_unregister_device(remote->input);
564 usb_kill_urb(remote->irq_urb);
565 usb_free_urb(remote->irq_urb);
566 usb_free_coherent(remote->udev, RECV_SIZE, remote->in_buffer, remote->in_dma);
572 * Standard driver set up sections
574 static struct usb_driver keyspan_driver =
576 .name = "keyspan_remote",
577 .probe = keyspan_probe,
578 .disconnect = keyspan_disconnect,
579 .id_table = keyspan_table
582 module_usb_driver(keyspan_driver);
584 MODULE_DEVICE_TABLE(usb, keyspan_table);
585 MODULE_AUTHOR("Michael Downey <downey@zymeta.com>");
586 MODULE_DESCRIPTION("Driver for the USB Keyspan remote control.");
587 MODULE_LICENSE("GPL");