Archipelago » qemu

/*

 * Linux host USB redirector

 *

 * Copyright (c) 2005 Fabrice Bellard

 *

 * Copyright (c) 2008 Max Krasnyansky

 *      Support for host device auto connect & disconnect

 *      Major rewrite to support fully async operation

 *

 * Copyright 2008 TJ <linux@tjworld.net>

 *      Added flexible support for /dev/bus/usb /sys/bus/usb/devices in addition

 *      to the legacy /proc/bus/usb USB device discovery and handling

 *

 * Permission is hereby granted, free of charge, to any person obtaining a copy

 * of this software and associated documentation files (the "Software"), to deal

 * in the Software without restriction, including without limitation the rights

 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell

 * copies of the Software, and to permit persons to whom the Software is

 * furnished to do so, subject to the following conditions:

 *

 * The above copyright notice and this permission notice shall be included in

 * all copies or substantial portions of the Software.

 *

 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR

 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,

 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL

 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER

 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,

 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN

 * THE SOFTWARE.

 */

#include "qemu-common.h"

#include "qemu-timer.h"

#include "monitor.h"

#include "sysemu.h"

#include <dirent.h>

#include <sys/ioctl.h>

#include <signal.h>

#include <linux/usbdevice_fs.h>

#include <linux/version.h>

#include "hw/usb.h"

/* We redefine it to avoid version problems */

struct usb_ctrltransfer {

    uint8_t  bRequestType;

    uint8_t  bRequest;

    uint16_t wValue;

    uint16_t wIndex;

    uint16_t wLength;

    uint32_t timeout;

    void *data;

};

struct usb_ctrlrequest {

    uint8_t bRequestType;

    uint8_t bRequest;

    uint16_t wValue;

    uint16_t wIndex;

    uint16_t wLength;

};

typedef int USBScanFunc(void *opaque, int bus_num, int addr, int devpath,

                        int class_id, int vendor_id, int product_id,

                        const char *product_name, int speed);

//#define DEBUG

#ifdef DEBUG

#define DPRINTF printf

#else

#define DPRINTF(...)

#endif

#define USBDBG_DEVOPENED "husb: opened %s/devices\n"

#define USBPROCBUS_PATH "/proc/bus/usb"

#define PRODUCT_NAME_SZ 32

#define MAX_ENDPOINTS 15

#define USBDEVBUS_PATH "/dev/bus/usb"

#define USBSYSBUS_PATH "/sys/bus/usb"

static char *usb_host_device_path;

#define USB_FS_NONE 0

#define USB_FS_PROC 1

#define USB_FS_DEV 2

#define USB_FS_SYS 3

static int usb_fs_type;

/* endpoint association data */

#define ISO_FRAME_DESC_PER_URB 32

#define ISO_URB_COUNT 3

#define INVALID_EP_TYPE 255

typedef struct AsyncURB AsyncURB;

struct endp_data {

    uint8_t type;

    uint8_t halted;

    uint8_t iso_started;

    AsyncURB *iso_urb;

    int iso_urb_idx;

    int iso_buffer_used;

    int max_packet_size;

};

enum {

    CTRL_STATE_IDLE = 0,

    CTRL_STATE_SETUP,

    CTRL_STATE_DATA,

    CTRL_STATE_ACK

};

/*

 * Control transfer state.

 * Note that 'buffer' _must_ follow 'req' field because

 * we need contiguous buffer when we submit control URB.

 */

struct ctrl_struct {

    uint16_t len;

    uint16_t offset;

    uint8_t  state;

    struct   usb_ctrlrequest req;

    uint8_t  buffer[8192];

};

struct USBAutoFilter {

    uint32_t bus_num;

    uint32_t addr;

    uint32_t vendor_id;

    uint32_t product_id;

};

typedef struct USBHostDevice {

    USBDevice dev;

    int       fd;

    uint8_t   descr[1024];

    int       descr_len;

    int       configuration;

    int       ninterfaces;

    int       closing;

    Notifier  exit;

    struct ctrl_struct ctrl;

    struct endp_data endp_table[MAX_ENDPOINTS];

    /* Host side address */

    int bus_num;

    int addr;

    int devpath;

    struct USBAutoFilter match;

    QTAILQ_ENTRY(USBHostDevice) next;

} USBHostDevice;

static QTAILQ_HEAD(, USBHostDevice) hostdevs = QTAILQ_HEAD_INITIALIZER(hostdevs);

static int usb_host_close(USBHostDevice *dev);

static int parse_filter(const char *spec, struct USBAutoFilter *f);

static void usb_host_auto_check(void *unused);

static int usb_host_read_file(char *line, size_t line_size,

                            const char *device_file, const char *device_name);

static int is_isoc(USBHostDevice *s, int ep)

{

    return s->endp_table[ep - 1].type == USBDEVFS_URB_TYPE_ISO;

}

static int is_valid(USBHostDevice *s, int ep)

{

    return s->endp_table[ep - 1].type != INVALID_EP_TYPE;

}

static int is_halted(USBHostDevice *s, int ep)

{

    return s->endp_table[ep - 1].halted;

}

static void clear_halt(USBHostDevice *s, int ep)

{

    s->endp_table[ep - 1].halted = 0;

}

static void set_halt(USBHostDevice *s, int ep)

{

    s->endp_table[ep - 1].halted = 1;

}

static int is_iso_started(USBHostDevice *s, int ep)

{

    return s->endp_table[ep - 1].iso_started;

}

static void clear_iso_started(USBHostDevice *s, int ep)

{

    s->endp_table[ep - 1].iso_started = 0;

}

static void set_iso_started(USBHostDevice *s, int ep)

{

    s->endp_table[ep - 1].iso_started = 1;

}

static void set_iso_urb(USBHostDevice *s, int ep, AsyncURB *iso_urb)

{

    s->endp_table[ep - 1].iso_urb = iso_urb;

}

static AsyncURB *get_iso_urb(USBHostDevice *s, int ep)

{

    return s->endp_table[ep - 1].iso_urb;

}

static void set_iso_urb_idx(USBHostDevice *s, int ep, int i)

{

    s->endp_table[ep - 1].iso_urb_idx = i;

}

static int get_iso_urb_idx(USBHostDevice *s, int ep)

{

    return s->endp_table[ep - 1].iso_urb_idx;

}

static void set_iso_buffer_used(USBHostDevice *s, int ep, int i)

{

    s->endp_table[ep - 1].iso_buffer_used = i;

}

static int get_iso_buffer_used(USBHostDevice *s, int ep)

{

    return s->endp_table[ep - 1].iso_buffer_used;

}

static int get_max_packet_size(USBHostDevice *s, int ep)

{

    return s->endp_table[ep - 1].max_packet_size;

}

/*

 * Async URB state.

 * We always allocate iso packet descriptors even for bulk transfers

 * to simplify allocation and casts.

 */

struct AsyncURB

{

    struct usbdevfs_urb urb;

    struct usbdevfs_iso_packet_desc isocpd[ISO_FRAME_DESC_PER_URB];

    /* For regular async urbs */

    USBPacket     *packet;

    USBHostDevice *hdev;

    /* For buffered iso handling */

    int iso_frame_idx; /* -1 means in flight */

};

static AsyncURB *async_alloc(void)

{

    return (AsyncURB *) qemu_mallocz(sizeof(AsyncURB));

}

static void async_free(AsyncURB *aurb)

{

    qemu_free(aurb);

}

static void async_complete_ctrl(USBHostDevice *s, USBPacket *p)

{

    switch(s->ctrl.state) {

    case CTRL_STATE_SETUP:

        if (p->len < s->ctrl.len)

            s->ctrl.len = p->len;

        s->ctrl.state = CTRL_STATE_DATA;

        p->len = 8;

        break;

    case CTRL_STATE_ACK:

        s->ctrl.state = CTRL_STATE_IDLE;

        p->len = 0;

        break;

    default:

        break;

    }

}

static void async_complete(void *opaque)

{

    USBHostDevice *s = opaque;

    AsyncURB *aurb;

    while (1) {

        USBPacket *p;

        int r = ioctl(s->fd, USBDEVFS_REAPURBNDELAY, &aurb);

        if (r < 0) {

            if (errno == EAGAIN) {

                return;

            }

            if (errno == ENODEV && !s->closing) {

                printf("husb: device %d.%d disconnected\n",

                       s->bus_num, s->addr);

                usb_host_close(s);

                usb_host_auto_check(NULL);

                return;

            }

            DPRINTF("husb: async. reap urb failed errno %d\n", errno);

            return;

        }

        DPRINTF("husb: async completed. aurb %p status %d alen %d\n",

                aurb, aurb->urb.status, aurb->urb.actual_length);

        /* If this is a buffered iso urb mark it as complete and don't do

           anything else (it is handled further in usb_host_handle_iso_data) */

        if (aurb->iso_frame_idx == -1) {

            if (aurb->urb.status == -EPIPE) {

                set_halt(s, aurb->urb.endpoint & 0xf);

            }

            aurb->iso_frame_idx = 0;

            continue;

        }

        p = aurb->packet;

        if (p) {

            switch (aurb->urb.status) {

            case 0:

                p->len = aurb->urb.actual_length;

                if (aurb->urb.type == USBDEVFS_URB_TYPE_CONTROL) {

                    async_complete_ctrl(s, p);

                }

                break;

            case -EPIPE:

                set_halt(s, p->devep);

                p->len = USB_RET_STALL;

                break;

            default:

                p->len = USB_RET_NAK;

                break;

            }

            usb_packet_complete(&s->dev, p);

        }

        async_free(aurb);

    }

}

static void async_cancel(USBPacket *unused, void *opaque)

{

    AsyncURB *aurb = opaque;

    USBHostDevice *s = aurb->hdev;

    DPRINTF("husb: async cancel. aurb %p\n", aurb);

    /* Mark it as dead (see async_complete above) */

    aurb->packet = NULL;

    int r = ioctl(s->fd, USBDEVFS_DISCARDURB, aurb);

    if (r < 0) {

        DPRINTF("husb: async. discard urb failed errno %d\n", errno);

    }

}

static int usb_host_claim_interfaces(USBHostDevice *dev, int configuration)

{

    int dev_descr_len, config_descr_len;

    int interface, nb_interfaces;

    int ret, i;

    if (configuration == 0) /* address state - ignore */

        return 1;

    DPRINTF("husb: claiming interfaces. config %d\n", configuration);

    i = 0;

    dev_descr_len = dev->descr[0];

    if (dev_descr_len > dev->descr_len) {

        goto fail;

    }

    i += dev_descr_len;

    while (i < dev->descr_len) {

        DPRINTF("husb: i is %d, descr_len is %d, dl %d, dt %d\n",

                i, dev->descr_len,

               dev->descr[i], dev->descr[i+1]);

        if (dev->descr[i+1] != USB_DT_CONFIG) {

            i += dev->descr[i];

            continue;

        }

        config_descr_len = dev->descr[i];

        printf("husb: config #%d need %d\n", dev->descr[i + 5], configuration);

        if (configuration < 0 || configuration == dev->descr[i + 5]) {

            configuration = dev->descr[i + 5];

            break;

        }

        i += config_descr_len;

    }

    if (i >= dev->descr_len) {

        fprintf(stderr,

                "husb: update iface failed. no matching configuration\n");

        goto fail;

    }

    nb_interfaces = dev->descr[i + 4];

#ifdef USBDEVFS_DISCONNECT

    /* earlier Linux 2.4 do not support that */

    {

        struct usbdevfs_ioctl ctrl;

        for (interface = 0; interface < nb_interfaces; interface++) {

            ctrl.ioctl_code = USBDEVFS_DISCONNECT;

            ctrl.ifno = interface;

            ctrl.data = 0;

            ret = ioctl(dev->fd, USBDEVFS_IOCTL, &ctrl);

            if (ret < 0 && errno != ENODATA) {

                perror("USBDEVFS_DISCONNECT");

                goto fail;

            }

        }

    }

#endif

    /* XXX: only grab if all interfaces are free */

    for (interface = 0; interface < nb_interfaces; interface++) {

        ret = ioctl(dev->fd, USBDEVFS_CLAIMINTERFACE, &interface);

        if (ret < 0) {

            if (errno == EBUSY) {

                printf("husb: update iface. device already grabbed\n");

            } else {

                perror("husb: failed to claim interface");

            }

        fail:

            return 0;

        }

    }

    printf("husb: %d interfaces claimed for configuration %d\n",

           nb_interfaces, configuration);

    dev->ninterfaces   = nb_interfaces;

    dev->configuration = configuration;

    return 1;

}

static int usb_host_release_interfaces(USBHostDevice *s)

{

    int ret, i;

    DPRINTF("husb: releasing interfaces\n");

    for (i = 0; i < s->ninterfaces; i++) {

        ret = ioctl(s->fd, USBDEVFS_RELEASEINTERFACE, &i);

        if (ret < 0) {

            perror("husb: failed to release interface");

            return 0;

        }

    }

    return 1;

}

static void usb_host_handle_reset(USBDevice *dev)

{

    USBHostDevice *s = DO_UPCAST(USBHostDevice, dev, dev);

    DPRINTF("husb: reset device %u.%u\n", s->bus_num, s->addr);

    ioctl(s->fd, USBDEVFS_RESET);

    usb_host_claim_interfaces(s, s->configuration);

}

static void usb_host_handle_destroy(USBDevice *dev)

{

    USBHostDevice *s = (USBHostDevice *)dev;

    usb_host_close(s);

    QTAILQ_REMOVE(&hostdevs, s, next);

    qemu_remove_exit_notifier(&s->exit);

}

static int usb_linux_update_endp_table(USBHostDevice *s);

/* iso data is special, we need to keep enough urbs in flight to make sure

   that the controller never runs out of them, otherwise the device will

   likely suffer a buffer underrun / overrun. */

static AsyncURB *usb_host_alloc_iso(USBHostDevice *s, uint8_t ep, int in)

{

    AsyncURB *aurb;

    int i, j, len = get_max_packet_size(s, ep);

    aurb = qemu_mallocz(ISO_URB_COUNT * sizeof(*aurb));

    for (i = 0; i < ISO_URB_COUNT; i++) {

        aurb[i].urb.endpoint      = ep;

        aurb[i].urb.buffer_length = ISO_FRAME_DESC_PER_URB * len;

        aurb[i].urb.buffer        = qemu_malloc(aurb[i].urb.buffer_length);

        aurb[i].urb.type          = USBDEVFS_URB_TYPE_ISO;

        aurb[i].urb.flags         = USBDEVFS_URB_ISO_ASAP;

        aurb[i].urb.number_of_packets = ISO_FRAME_DESC_PER_URB;

        for (j = 0 ; j < ISO_FRAME_DESC_PER_URB; j++)

            aurb[i].urb.iso_frame_desc[j].length = len;

        if (in) {

            aurb[i].urb.endpoint |= 0x80;

            /* Mark as fully consumed (idle) */

            aurb[i].iso_frame_idx = ISO_FRAME_DESC_PER_URB;

        }

    }

    set_iso_urb(s, ep, aurb);

    return aurb;

}

static void usb_host_stop_n_free_iso(USBHostDevice *s, uint8_t ep)

{

    AsyncURB *aurb;

    int i, ret, killed = 0, free = 1;

    aurb = get_iso_urb(s, ep);

    if (!aurb) {

        return;

    }

    for (i = 0; i < ISO_URB_COUNT; i++) {

        /* in flight? */

        if (aurb[i].iso_frame_idx == -1) {

            ret = ioctl(s->fd, USBDEVFS_DISCARDURB, &aurb[i]);

            if (ret < 0) {

                printf("husb: discard isoc in urb failed errno %d\n", errno);

                free = 0;

                continue;

            }

            killed++;

        }

    }

    /* Make sure any urbs we've killed are reaped before we free them */

    if (killed) {

        async_complete(s);

    }

    for (i = 0; i < ISO_URB_COUNT; i++) {

        qemu_free(aurb[i].urb.buffer);

    }

    if (free)

        qemu_free(aurb);

    else

        printf("husb: leaking iso urbs because of discard failure\n");

    set_iso_urb(s, ep, NULL);

    set_iso_urb_idx(s, ep, 0);

    clear_iso_started(s, ep);

}

static int urb_status_to_usb_ret(int status)

{

    switch (status) {

    case -EPIPE:

        return USB_RET_STALL;

    default:

        return USB_RET_NAK;

    }

}

static int usb_host_handle_iso_data(USBHostDevice *s, USBPacket *p, int in)

{

    AsyncURB *aurb;

    int i, j, ret, max_packet_size, offset, len = 0;

    max_packet_size = get_max_packet_size(s, p->devep);

    if (max_packet_size == 0)

        return USB_RET_NAK;

    aurb = get_iso_urb(s, p->devep);

    if (!aurb) {

        aurb = usb_host_alloc_iso(s, p->devep, in);

    }

    i = get_iso_urb_idx(s, p->devep);

    j = aurb[i].iso_frame_idx;

    if (j >= 0 && j < ISO_FRAME_DESC_PER_URB) {

        if (in) {

            /* Check urb status  */

            if (aurb[i].urb.status) {

                len = urb_status_to_usb_ret(aurb[i].urb.status);

                /* Move to the next urb */

                aurb[i].iso_frame_idx = ISO_FRAME_DESC_PER_URB - 1;

            /* Check frame status */

            } else if (aurb[i].urb.iso_frame_desc[j].status) {

                len = urb_status_to_usb_ret(

                                        aurb[i].urb.iso_frame_desc[j].status);

            /* Check the frame fits */

            } else if (aurb[i].urb.iso_frame_desc[j].actual_length > p->len) {

                printf("husb: received iso data is larger then packet\n");

                len = USB_RET_NAK;

            /* All good copy data over */

            } else {

                len = aurb[i].urb.iso_frame_desc[j].actual_length;

                memcpy(p->data,

                       aurb[i].urb.buffer +

                           j * aurb[i].urb.iso_frame_desc[0].length,

                       len);

            }

        } else {

            len = p->len;

            offset = (j == 0) ? 0 : get_iso_buffer_used(s, p->devep);

            /* Check the frame fits */

            if (len > max_packet_size) {

                printf("husb: send iso data is larger then max packet size\n");

                return USB_RET_NAK;

            }

            /* All good copy data over */

            memcpy(aurb[i].urb.buffer + offset, p->data, len);

            aurb[i].urb.iso_frame_desc[j].length = len;

            offset += len;

            set_iso_buffer_used(s, p->devep, offset);

            /* Start the stream once we have buffered enough data */

            if (!is_iso_started(s, p->devep) && i == 1 && j == 8) {

                set_iso_started(s, p->devep);

            }

        }

        aurb[i].iso_frame_idx++;

        if (aurb[i].iso_frame_idx == ISO_FRAME_DESC_PER_URB) {

            i = (i + 1) % ISO_URB_COUNT;

            set_iso_urb_idx(s, p->devep, i);

        }

    } else {

        if (in) {

            set_iso_started(s, p->devep);

        } else {

            DPRINTF("hubs: iso out error no free buffer, dropping packet\n");

        }

    }

    if (is_iso_started(s, p->devep)) {

        /* (Re)-submit all fully consumed / filled urbs */

        for (i = 0; i < ISO_URB_COUNT; i++) {

            if (aurb[i].iso_frame_idx == ISO_FRAME_DESC_PER_URB) {

                ret = ioctl(s->fd, USBDEVFS_SUBMITURB, &aurb[i]);

                if (ret < 0) {

                    printf("husb error submitting iso urb %d: %d\n", i, errno);

                    if (!in || len == 0) {

                        switch(errno) {

                        case ETIMEDOUT:

                            len = USB_RET_NAK;

                            break;

                        case EPIPE:

                        default:

                            len = USB_RET_STALL;

                        }

                    }

                    break;

                }

                aurb[i].iso_frame_idx = -1;

            }

        }

    }

    return len;

}

static int usb_host_handle_data(USBHostDevice *s, USBPacket *p)

{

    struct usbdevfs_urb *urb;

    AsyncURB *aurb;

    int ret;

    uint8_t ep;

    if (!is_valid(s, p->devep)) {

        return USB_RET_NAK;

    }

    if (p->pid == USB_TOKEN_IN) {

        ep = p->devep | 0x80;

    } else {

        ep = p->devep;

    }

    if (is_halted(s, p->devep)) {

        ret = ioctl(s->fd, USBDEVFS_CLEAR_HALT, &ep);

        if (ret < 0) {

            DPRINTF("husb: failed to clear halt. ep 0x%x errno %d\n",

                   ep, errno);

            return USB_RET_NAK;

        }

        clear_halt(s, p->devep);

    }

    if (is_isoc(s, p->devep)) {

        return usb_host_handle_iso_data(s, p, p->pid == USB_TOKEN_IN);

    }

    aurb = async_alloc();

    aurb->hdev   = s;

    aurb->packet = p;

    urb = &aurb->urb;

    urb->endpoint      = ep;

    urb->buffer        = p->data;

    urb->buffer_length = p->len;

    urb->type          = USBDEVFS_URB_TYPE_BULK;

    urb->usercontext   = s;

    ret = ioctl(s->fd, USBDEVFS_SUBMITURB, urb);

    DPRINTF("husb: data submit. ep 0x%x len %u aurb %p\n",

            urb->endpoint, p->len, aurb);

    if (ret < 0) {

        DPRINTF("husb: submit failed. errno %d\n", errno);

        async_free(aurb);

        switch(errno) {

        case ETIMEDOUT:

            return USB_RET_NAK;

        case EPIPE:

        default:

            return USB_RET_STALL;

        }

    }

    usb_defer_packet(p, async_cancel, aurb);

    return USB_RET_ASYNC;

}

static int ctrl_error(void)

{

    if (errno == ETIMEDOUT) {

        return USB_RET_NAK;

    } else {

        return USB_RET_STALL;

    }

}

static int usb_host_set_address(USBHostDevice *s, int addr)

{

    DPRINTF("husb: ctrl set addr %u\n", addr);

    s->dev.addr = addr;

    return 0;

}

static int usb_host_set_config(USBHostDevice *s, int config)

{

    usb_host_release_interfaces(s);

    int ret = ioctl(s->fd, USBDEVFS_SETCONFIGURATION, &config);

    DPRINTF("husb: ctrl set config %d ret %d errno %d\n", config, ret, errno);

    if (ret < 0) {

        return ctrl_error();

    }

    usb_host_claim_interfaces(s, config);

    return 0;

}

static int usb_host_set_interface(USBHostDevice *s, int iface, int alt)

{

    struct usbdevfs_setinterface si;

    int i, ret;

    for (i = 1; i <= MAX_ENDPOINTS; i++) {

        if (is_isoc(s, i)) {

            usb_host_stop_n_free_iso(s, i);

        }

    }

    si.interface  = iface;

    si.altsetting = alt;

    ret = ioctl(s->fd, USBDEVFS_SETINTERFACE, &si);

    DPRINTF("husb: ctrl set iface %d altset %d ret %d errno %d\n",

            iface, alt, ret, errno);

    if (ret < 0) {

        return ctrl_error();

    }

    usb_linux_update_endp_table(s);

    return 0;

}

static int usb_host_handle_control(USBHostDevice *s, USBPacket *p)

{

    struct usbdevfs_urb *urb;

    AsyncURB *aurb;

    int ret, value, index;

    int buffer_len;

    /*

     * Process certain standard device requests.

     * These are infrequent and are processed synchronously.

     */

    value = le16_to_cpu(s->ctrl.req.wValue);

    index = le16_to_cpu(s->ctrl.req.wIndex);

    DPRINTF("husb: ctrl type 0x%x req 0x%x val 0x%x index %u len %u\n",

            s->ctrl.req.bRequestType, s->ctrl.req.bRequest, value, index,

            s->ctrl.len);

    if (s->ctrl.req.bRequestType == 0) {

        switch (s->ctrl.req.bRequest) {

        case USB_REQ_SET_ADDRESS:

            return usb_host_set_address(s, value);

        case USB_REQ_SET_CONFIGURATION:

            return usb_host_set_config(s, value & 0xff);

        }

    }

    if (s->ctrl.req.bRequestType == 1 &&

                  s->ctrl.req.bRequest == USB_REQ_SET_INTERFACE) {

        return usb_host_set_interface(s, index, value);

    }

    /* The rest are asynchronous */

    buffer_len = 8 + s->ctrl.len;

    if (buffer_len > sizeof(s->ctrl.buffer)) {

        fprintf(stderr, "husb: ctrl buffer too small (%u > %zu)\n",

                buffer_len, sizeof(s->ctrl.buffer));

        return USB_RET_STALL;

    }

    aurb = async_alloc();

    aurb->hdev   = s;

    aurb->packet = p;

    /*

     * Setup ctrl transfer.

     *

     * s->ctrl is laid out such that data buffer immediately follows

     * 'req' struct which is exactly what usbdevfs expects.

     */

    urb = &aurb->urb;

    urb->type     = USBDEVFS_URB_TYPE_CONTROL;

    urb->endpoint = p->devep;

    urb->buffer        = &s->ctrl.req;

    urb->buffer_length = buffer_len;

    urb->usercontext = s;

    ret = ioctl(s->fd, USBDEVFS_SUBMITURB, urb);

    DPRINTF("husb: submit ctrl. len %u aurb %p\n", urb->buffer_length, aurb);

    if (ret < 0) {

        DPRINTF("husb: submit failed. errno %d\n", errno);

        async_free(aurb);

        switch(errno) {

        case ETIMEDOUT:

            return USB_RET_NAK;

        case EPIPE:

        default:

            return USB_RET_STALL;

        }

    }

    usb_defer_packet(p, async_cancel, aurb);

    return USB_RET_ASYNC;

}

static int do_token_setup(USBDevice *dev, USBPacket *p)

{

    USBHostDevice *s = (USBHostDevice *) dev;

    int ret = 0;

    if (p->len != 8) {

        return USB_RET_STALL;

    }

    memcpy(&s->ctrl.req, p->data, 8);

    s->ctrl.len    = le16_to_cpu(s->ctrl.req.wLength);

    s->ctrl.offset = 0;

    s->ctrl.state  = CTRL_STATE_SETUP;

    if (s->ctrl.req.bRequestType & USB_DIR_IN) {

        ret = usb_host_handle_control(s, p);