drivers/hid/hid-wiimote-core.c

   1 /*
   2  * HID driver for Nintendo Wii / Wii U peripherals
   3  * Copyright (c) 2011-2013 David Herrmann <dh.herrmann@gmail.com>
   4  */
   5
   6 /*
   7  * This program is free software; you can redistribute it and/or modify it
   8  * under the terms of the GNU General Public License as published by the Free
   9  * Software Foundation; either version 2 of the License, or (at your option)
  10  * any later version.
  11  */
  12
  13 #include <linux/completion.h>
  14 #include <linux/device.h>
  15 #include <linux/hid.h>
  16 #include <linux/input.h>
  17 #include <linux/module.h>
  18 #include <linux/mutex.h>
  19 #include <linux/spinlock.h>
  20 #include "hid-ids.h"
  21 #include "hid-wiimote.h"
  22
  23 /* output queue handling */
  24
  25 static int wiimote_hid_send(struct hid_device *hdev, __u8 *buffer,
  26                             size_t count)
  27 {
  28         __u8 *buf;
  29         int ret;
  30
  31         if (!hdev->hid_output_raw_report)
  32                 return -ENODEV;
  33
  34         buf = kmemdup(buffer, count, GFP_KERNEL);
  35         if (!buf)
  36                 return -ENOMEM;
  37
  38         ret = hdev->hid_output_raw_report(hdev, buf, count, HID_OUTPUT_REPORT);
  39
  40         kfree(buf);
  41         return ret;
  42 }
  43
  44 static void wiimote_queue_worker(struct work_struct *work)
  45 {
  46         struct wiimote_queue *queue = container_of(work, struct wiimote_queue,
  47                                                    worker);
  48         struct wiimote_data *wdata = container_of(queue, struct wiimote_data,
  49                                                   queue);
  50         unsigned long flags;
  51         int ret;
  52
  53         spin_lock_irqsave(&wdata->queue.lock, flags);
  54
  55         while (wdata->queue.head != wdata->queue.tail) {
  56                 spin_unlock_irqrestore(&wdata->queue.lock, flags);
  57                 ret = wiimote_hid_send(wdata->hdev,
  58                                  wdata->queue.outq[wdata->queue.tail].data,
  59                                  wdata->queue.outq[wdata->queue.tail].size);
  60                 if (ret < 0) {
  61                         spin_lock_irqsave(&wdata->state.lock, flags);
  62                         wiimote_cmd_abort(wdata);
  63                         spin_unlock_irqrestore(&wdata->state.lock, flags);
  64                 }
  65                 spin_lock_irqsave(&wdata->queue.lock, flags);
  66
  67                 wdata->queue.tail = (wdata->queue.tail + 1) % WIIMOTE_BUFSIZE;
  68         }
  69
  70         spin_unlock_irqrestore(&wdata->queue.lock, flags);
  71 }
  72
  73 static void wiimote_queue(struct wiimote_data *wdata, const __u8 *buffer,
  74                                                                 size_t count)
  75 {
  76         unsigned long flags;
  77         __u8 newhead;
  78
  79         if (count > HID_MAX_BUFFER_SIZE) {
  80                 hid_warn(wdata->hdev, "Sending too large output report\n");
  81
  82                 spin_lock_irqsave(&wdata->queue.lock, flags);
  83                 goto out_error;
  84         }
  85
  86         /*
  87          * Copy new request into our output queue and check whether the
  88          * queue is full. If it is full, discard this request.
  89          * If it is empty we need to start a new worker that will
  90          * send out the buffer to the hid device.
  91          * If the queue is not empty, then there must be a worker
  92          * that is currently sending out our buffer and this worker
  93          * will reschedule itself until the queue is empty.
  94          */
  95
  96         spin_lock_irqsave(&wdata->queue.lock, flags);
  97
  98         memcpy(wdata->queue.outq[wdata->queue.head].data, buffer, count);
  99         wdata->queue.outq[wdata->queue.head].size = count;
 100         newhead = (wdata->queue.head + 1) % WIIMOTE_BUFSIZE;
 101
 102         if (wdata->queue.head == wdata->queue.tail) {
 103                 wdata->queue.head = newhead;
 104                 schedule_work(&wdata->queue.worker);
 105         } else if (newhead != wdata->queue.tail) {
 106                 wdata->queue.head = newhead;
 107         } else {
 108                 hid_warn(wdata->hdev, "Output queue is full");
 109                 goto out_error;
 110         }
 111
 112         goto out_unlock;
 113
 114 out_error:
 115         wiimote_cmd_abort(wdata);
 116 out_unlock:
 117         spin_unlock_irqrestore(&wdata->queue.lock, flags);
 118 }
 119
 120 /*
 121  * This sets the rumble bit on the given output report if rumble is
 122  * currently enabled.
 123  * \cmd1 must point to the second byte in the output report => &cmd[1]
 124  * This must be called on nearly every output report before passing it
 125  * into the output queue!
 126  */
 127 static inline void wiiproto_keep_rumble(struct wiimote_data *wdata, __u8 *cmd1)
 128 {
 129         if (wdata->state.flags & WIIPROTO_FLAG_RUMBLE)
 130                 *cmd1 |= 0x01;
 131 }
 132
 133 void wiiproto_req_rumble(struct wiimote_data *wdata, __u8 rumble)
 134 {
 135         __u8 cmd[2];
 136
 137         rumble = !!rumble;
 138         if (rumble == !!(wdata->state.flags & WIIPROTO_FLAG_RUMBLE))
 139                 return;
 140
 141         if (rumble)
 142                 wdata->state.flags |= WIIPROTO_FLAG_RUMBLE;
 143         else
 144                 wdata->state.flags &= ~WIIPROTO_FLAG_RUMBLE;
 145
 146         cmd[0] = WIIPROTO_REQ_RUMBLE;
 147         cmd[1] = 0;
 148
 149         wiiproto_keep_rumble(wdata, &cmd[1]);
 150         wiimote_queue(wdata, cmd, sizeof(cmd));
 151 }
 152
 153 void wiiproto_req_leds(struct wiimote_data *wdata, int leds)
 154 {
 155         __u8 cmd[2];
 156
 157         leds &= WIIPROTO_FLAGS_LEDS;
 158         if ((wdata->state.flags & WIIPROTO_FLAGS_LEDS) == leds)
 159                 return;
 160         wdata->state.flags = (wdata->state.flags & ~WIIPROTO_FLAGS_LEDS) | leds;
 161
 162         cmd[0] = WIIPROTO_REQ_LED;
 163         cmd[1] = 0;
 164
 165         if (leds & WIIPROTO_FLAG_LED1)
 166                 cmd[1] |= 0x10;
 167         if (leds & WIIPROTO_FLAG_LED2)
 168                 cmd[1] |= 0x20;
 169         if (leds & WIIPROTO_FLAG_LED3)
 170                 cmd[1] |= 0x40;
 171         if (leds & WIIPROTO_FLAG_LED4)
 172                 cmd[1] |= 0x80;
 173
 174         wiiproto_keep_rumble(wdata, &cmd[1]);
 175         wiimote_queue(wdata, cmd, sizeof(cmd));
 176 }
 177
 178 /*
 179  * Check what peripherals of the wiimote are currently
 180  * active and select a proper DRM that supports all of
 181  * the requested data inputs.
 182  *
 183  * Not all combinations are actually supported. The following
 184  * combinations work only with limitations:
 185  *  - IR cam in extended or full mode disables any data transmission
 186  *    of extension controllers. There is no DRM mode that supports
 187  *    extension bytes plus extended/full IR.
 188  *  - IR cam with accelerometer and extension *_EXT8 is not supported.
 189  *    However, all extensions that need *_EXT8 are devices that don't
 190  *    support IR cameras. Hence, this shouldn't happen under normal
 191  *    operation.
 192  *  - *_EXT16 is only supported in combination with buttons and
 193  *    accelerometer. No IR or similar can be active simultaneously. As
 194  *    above, all modules that require it are mutually exclusive with
 195  *    IR/etc. so this doesn't matter.
 196  */
 197 static __u8 select_drm(struct wiimote_data *wdata)
 198 {
 199         __u8 ir = wdata->state.flags & WIIPROTO_FLAGS_IR;
 200         bool ext;
 201
 202         ext = (wdata->state.flags & WIIPROTO_FLAG_EXT_USED) ||
 203               (wdata->state.flags & WIIPROTO_FLAG_MP_USED);
 204
 205         /* some 3rd-party balance-boards are hard-coded to KEE, *sigh* */
 206         if (wdata->state.devtype == WIIMOTE_DEV_BALANCE_BOARD) {
 207                 if (ext)
 208                         return WIIPROTO_REQ_DRM_KEE;
 209                 else
 210                         return WIIPROTO_REQ_DRM_K;
 211         }
 212
 213         if (ir == WIIPROTO_FLAG_IR_BASIC) {
 214                 if (wdata->state.flags & WIIPROTO_FLAG_ACCEL) {
 215                         if (ext)
 216                                 return WIIPROTO_REQ_DRM_KAIE;
 217                         else
 218                                 return WIIPROTO_REQ_DRM_KAI;
 219                 } else {
 220                         return WIIPROTO_REQ_DRM_KIE;
 221                 }
 222         } else if (ir == WIIPROTO_FLAG_IR_EXT) {
 223                 return WIIPROTO_REQ_DRM_KAI;
 224         } else if (ir == WIIPROTO_FLAG_IR_FULL) {
 225                 return WIIPROTO_REQ_DRM_SKAI1;
 226         } else {
 227                 if (wdata->state.flags & WIIPROTO_FLAG_ACCEL) {
 228                         if (ext)
 229                                 return WIIPROTO_REQ_DRM_KAE;
 230                         else
 231                                 return WIIPROTO_REQ_DRM_KA;
 232                 } else {
 233                         if (ext)
 234                                 return WIIPROTO_REQ_DRM_KEE;
 235                         else
 236                                 return WIIPROTO_REQ_DRM_K;
 237                 }
 238         }
 239 }
 240
 241 void wiiproto_req_drm(struct wiimote_data *wdata, __u8 drm)
 242 {
 243         __u8 cmd[3];
 244
 245         if (wdata->state.flags & WIIPROTO_FLAG_DRM_LOCKED)
 246                 drm = wdata->state.drm;
 247         else if (drm == WIIPROTO_REQ_NULL)
 248                 drm = select_drm(wdata);
 249
 250         cmd[0] = WIIPROTO_REQ_DRM;
 251         cmd[1] = 0;
 252         cmd[2] = drm;
 253
 254         wdata->state.drm = drm;
 255         wiiproto_keep_rumble(wdata, &cmd[1]);
 256         wiimote_queue(wdata, cmd, sizeof(cmd));
 257 }
 258
 259 void wiiproto_req_status(struct wiimote_data *wdata)
 260 {
 261         __u8 cmd[2];
 262
 263         cmd[0] = WIIPROTO_REQ_SREQ;
 264         cmd[1] = 0;
 265
 266         wiiproto_keep_rumble(wdata, &cmd[1]);
 267         wiimote_queue(wdata, cmd, sizeof(cmd));
 268 }
 269
 270 void wiiproto_req_accel(struct wiimote_data *wdata, __u8 accel)
 271 {
 272         accel = !!accel;
 273         if (accel == !!(wdata->state.flags & WIIPROTO_FLAG_ACCEL))
 274                 return;
 275
 276         if (accel)
 277                 wdata->state.flags |= WIIPROTO_FLAG_ACCEL;
 278         else
 279                 wdata->state.flags &= ~WIIPROTO_FLAG_ACCEL;
 280
 281         wiiproto_req_drm(wdata, WIIPROTO_REQ_NULL);
 282 }
 283
 284 void wiiproto_req_ir1(struct wiimote_data *wdata, __u8 flags)
 285 {
 286         __u8 cmd[2];
 287
 288         cmd[0] = WIIPROTO_REQ_IR1;
 289         cmd[1] = flags;
 290
 291         wiiproto_keep_rumble(wdata, &cmd[1]);
 292         wiimote_queue(wdata, cmd, sizeof(cmd));
 293 }
 294
 295 void wiiproto_req_ir2(struct wiimote_data *wdata, __u8 flags)
 296 {
 297         __u8 cmd[2];
 298
 299         cmd[0] = WIIPROTO_REQ_IR2;
 300         cmd[1] = flags;
 301
 302         wiiproto_keep_rumble(wdata, &cmd[1]);
 303         wiimote_queue(wdata, cmd, sizeof(cmd));
 304 }
 305
 306 #define wiiproto_req_wreg(wdata, os, buf, sz) \
 307                         wiiproto_req_wmem((wdata), false, (os), (buf), (sz))
 308
 309 #define wiiproto_req_weeprom(wdata, os, buf, sz) \
 310                         wiiproto_req_wmem((wdata), true, (os), (buf), (sz))
 311
 312 static void wiiproto_req_wmem(struct wiimote_data *wdata, bool eeprom,
 313                                 __u32 offset, const __u8 *buf, __u8 size)
 314 {
 315         __u8 cmd[22];
 316
 317         if (size > 16 || size == 0) {
 318                 hid_warn(wdata->hdev, "Invalid length %d wmem request\n", size);
 319                 return;
 320         }
 321
 322         memset(cmd, 0, sizeof(cmd));
 323         cmd[0] = WIIPROTO_REQ_WMEM;
 324         cmd[2] = (offset >> 16) & 0xff;
 325         cmd[3] = (offset >> 8) & 0xff;
 326         cmd[4] = offset & 0xff;
 327         cmd[5] = size;
 328         memcpy(&cmd[6], buf, size);
 329
 330         if (!eeprom)
 331                 cmd[1] |= 0x04;
 332
 333         wiiproto_keep_rumble(wdata, &cmd[1]);
 334         wiimote_queue(wdata, cmd, sizeof(cmd));
 335 }
 336
 337 void wiiproto_req_rmem(struct wiimote_data *wdata, bool eeprom, __u32 offset,
 338                                                                 __u16 size)
 339 {
 340         __u8 cmd[7];
 341
 342         if (size == 0) {
 343                 hid_warn(wdata->hdev, "Invalid length %d rmem request\n", size);
 344                 return;
 345         }
 346
 347         cmd[0] = WIIPROTO_REQ_RMEM;
 348         cmd[1] = 0;
 349         cmd[2] = (offset >> 16) & 0xff;
 350         cmd[3] = (offset >> 8) & 0xff;
 351         cmd[4] = offset & 0xff;
 352         cmd[5] = (size >> 8) & 0xff;
 353         cmd[6] = size & 0xff;
 354
 355         if (!eeprom)
 356                 cmd[1] |= 0x04;
 357
 358         wiiproto_keep_rumble(wdata, &cmd[1]);
 359         wiimote_queue(wdata, cmd, sizeof(cmd));
 360 }
 361
 362 /* requries the cmd-mutex to be held */
 363 int wiimote_cmd_write(struct wiimote_data *wdata, __u32 offset,
 364                                                 const __u8 *wmem, __u8 size)
 365 {
 366         unsigned long flags;
 367         int ret;
 368
 369         spin_lock_irqsave(&wdata->state.lock, flags);
 370         wiimote_cmd_set(wdata, WIIPROTO_REQ_WMEM, 0);
 371         wiiproto_req_wreg(wdata, offset, wmem, size);
 372         spin_unlock_irqrestore(&wdata->state.lock, flags);
 373
 374         ret = wiimote_cmd_wait(wdata);
 375         if (!ret && wdata->state.cmd_err)
 376                 ret = -EIO;
 377
 378         return ret;
 379 }
 380
 381 /* requries the cmd-mutex to be held */
 382 ssize_t wiimote_cmd_read(struct wiimote_data *wdata, __u32 offset, __u8 *rmem,
 383                                                                 __u8 size)
 384 {
 385         unsigned long flags;
 386         ssize_t ret;
 387
 388         spin_lock_irqsave(&wdata->state.lock, flags);
 389         wdata->state.cmd_read_size = size;
 390         wdata->state.cmd_read_buf = rmem;
 391         wiimote_cmd_set(wdata, WIIPROTO_REQ_RMEM, offset & 0xffff);
 392         wiiproto_req_rreg(wdata, offset, size);
 393         spin_unlock_irqrestore(&wdata->state.lock, flags);
 394
 395         ret = wiimote_cmd_wait(wdata);
 396
 397         spin_lock_irqsave(&wdata->state.lock, flags);
 398         wdata->state.cmd_read_buf = NULL;
 399         spin_unlock_irqrestore(&wdata->state.lock, flags);
 400
 401         if (!ret) {
 402                 if (wdata->state.cmd_read_size == 0)
 403                         ret = -EIO;
 404                 else
 405                         ret = wdata->state.cmd_read_size;
 406         }
 407
 408         return ret;
 409 }
 410
 411 /* requires the cmd-mutex to be held */
 412 static int wiimote_cmd_init_ext(struct wiimote_data *wdata)
 413 {
 414         __u8 wmem;
 415         int ret;
 416
 417         /* initialize extension */
 418         wmem = 0x55;
 419         ret = wiimote_cmd_write(wdata, 0xa400f0, &wmem, sizeof(wmem));
 420         if (ret)
 421                 return ret;
 422
 423         /* disable default encryption */
 424         wmem = 0x0;
 425         ret = wiimote_cmd_write(wdata, 0xa400fb, &wmem, sizeof(wmem));
 426         if (ret)
 427                 return ret;
 428
 429         return 0;
 430 }
 431
 432 /* requires the cmd-mutex to be held */
 433 static __u8 wiimote_cmd_read_ext(struct wiimote_data *wdata, __u8 *rmem)
 434 {
 435         int ret;
 436
 437         /* read extension ID */
 438         ret = wiimote_cmd_read(wdata, 0xa400fa, rmem, 6);
 439         if (ret != 6)
 440                 return WIIMOTE_EXT_NONE;
 441
 442         hid_dbg(wdata->hdev, "extension ID: %02x:%02x %02x:%02x %02x:%02x\n",
 443                 rmem[0], rmem[1], rmem[2], rmem[3], rmem[4], rmem[5]);
 444
 445         if (rmem[0] == 0xff && rmem[1] == 0xff && rmem[2] == 0xff &&
 446             rmem[3] == 0xff && rmem[4] == 0xff && rmem[5] == 0xff)
 447                 return WIIMOTE_EXT_NONE;
 448
 449         if (rmem[4] == 0x00 && rmem[5] == 0x00)
 450                 return WIIMOTE_EXT_NUNCHUK;
 451         if (rmem[4] == 0x01 && rmem[5] == 0x01)
 452                 return WIIMOTE_EXT_CLASSIC_CONTROLLER;
 453         if (rmem[4] == 0x04 && rmem[5] == 0x02)
 454                 return WIIMOTE_EXT_BALANCE_BOARD;
 455         if (rmem[4] == 0x01 && rmem[5] == 0x20)
 456                 return WIIMOTE_EXT_PRO_CONTROLLER;
 457
 458         return WIIMOTE_EXT_UNKNOWN;
 459 }
 460
 461 /* requires the cmd-mutex to be held */
 462 static int wiimote_cmd_init_mp(struct wiimote_data *wdata)
 463 {
 464         __u8 wmem;
 465         int ret;
 466
 467         /* initialize MP */
 468         wmem = 0x55;
 469         ret = wiimote_cmd_write(wdata, 0xa600f0, &wmem, sizeof(wmem));
 470         if (ret)
 471                 return ret;
 472
 473         /* disable default encryption */
 474         wmem = 0x0;
 475         ret = wiimote_cmd_write(wdata, 0xa600fb, &wmem, sizeof(wmem));
 476         if (ret)
 477                 return ret;
 478
 479         return 0;
 480 }
 481
 482 /* requires the cmd-mutex to be held */
 483 static bool wiimote_cmd_map_mp(struct wiimote_data *wdata, __u8 exttype)
 484 {
 485         __u8 wmem;
 486
 487         /* map MP with correct pass-through mode */
 488         switch (exttype) {
 489         case WIIMOTE_EXT_CLASSIC_CONTROLLER:
 490                 wmem = 0x07;
 491                 break;
 492         case WIIMOTE_EXT_NUNCHUK:
 493                 wmem = 0x05;
 494                 break;
 495         default:
 496                 wmem = 0x04;
 497                 break;
 498         }
 499
 500         return wiimote_cmd_write(wdata, 0xa600fe, &wmem, sizeof(wmem));
 501 }
 502
 503 /* requires the cmd-mutex to be held */
 504 static bool wiimote_cmd_read_mp(struct wiimote_data *wdata, __u8 *rmem)
 505 {
 506         int ret;
 507
 508         /* read motion plus ID */
 509         ret = wiimote_cmd_read(wdata, 0xa600fa, rmem, 6);
 510         if (ret != 6)
 511                 return false;
 512
 513         hid_dbg(wdata->hdev, "motion plus ID: %02x:%02x %02x:%02x %02x:%02x\n",
 514                 rmem[0], rmem[1], rmem[2], rmem[3], rmem[4], rmem[5]);
 515
 516         if (rmem[5] == 0x05)
 517                 return true;
 518
 519         hid_info(wdata->hdev, "unknown motion plus ID: %02x:%02x %02x:%02x %02x:%02x\n",
 520                  rmem[0], rmem[1], rmem[2], rmem[3], rmem[4], rmem[5]);
 521
 522         return false;
 523 }
 524
 525 /* requires the cmd-mutex to be held */
 526 static __u8 wiimote_cmd_read_mp_mapped(struct wiimote_data *wdata)
 527 {
 528         int ret;
 529         __u8 rmem[6];
 530
 531         /* read motion plus ID */
 532         ret = wiimote_cmd_read(wdata, 0xa400fa, rmem, 6);
 533         if (ret != 6)
 534                 return WIIMOTE_MP_NONE;
 535
 536         hid_dbg(wdata->hdev, "mapped motion plus ID: %02x:%02x %02x:%02x %02x:%02x\n",
 537                 rmem[0], rmem[1], rmem[2], rmem[3], rmem[4], rmem[5]);
 538
 539         if (rmem[0] == 0xff && rmem[1] == 0xff && rmem[2] == 0xff &&
 540             rmem[3] == 0xff && rmem[4] == 0xff && rmem[5] == 0xff)
 541                 return WIIMOTE_MP_NONE;
 542
 543         if (rmem[4] == 0x04 && rmem[5] == 0x05)
 544                 return WIIMOTE_MP_SINGLE;
 545         else if (rmem[4] == 0x05 && rmem[5] == 0x05)
 546                 return WIIMOTE_MP_PASSTHROUGH_NUNCHUK;
 547         else if (rmem[4] == 0x07 && rmem[5] == 0x05)
 548                 return WIIMOTE_MP_PASSTHROUGH_CLASSIC;
 549
 550         return WIIMOTE_MP_UNKNOWN;
 551 }
 552
 553 /* device module handling */
 554
 555 static const __u8 * const wiimote_devtype_mods[WIIMOTE_DEV_NUM] = {
 556         [WIIMOTE_DEV_PENDING] = (const __u8[]){
 557                 WIIMOD_NULL,
 558         },
 559         [WIIMOTE_DEV_UNKNOWN] = (const __u8[]){
 560                 WIIMOD_NO_MP,
 561                 WIIMOD_NULL,
 562         },
 563         [WIIMOTE_DEV_GENERIC] = (const __u8[]){
 564                 WIIMOD_KEYS,
 565                 WIIMOD_RUMBLE,
 566                 WIIMOD_BATTERY,
 567                 WIIMOD_LED1,
 568                 WIIMOD_LED2,
 569                 WIIMOD_LED3,
 570                 WIIMOD_LED4,
 571                 WIIMOD_ACCEL,
 572                 WIIMOD_IR,
 573                 WIIMOD_NULL,
 574         },
 575         [WIIMOTE_DEV_GEN10] = (const __u8[]){
 576                 WIIMOD_KEYS,
 577                 WIIMOD_RUMBLE,
 578                 WIIMOD_BATTERY,
 579                 WIIMOD_LED1,
 580                 WIIMOD_LED2,
 581                 WIIMOD_LED3,
 582                 WIIMOD_LED4,
 583                 WIIMOD_ACCEL,
 584                 WIIMOD_IR,
 585                 WIIMOD_NULL,
 586         },
 587         [WIIMOTE_DEV_GEN20] = (const __u8[]){
 588                 WIIMOD_KEYS,
 589                 WIIMOD_RUMBLE,
 590                 WIIMOD_BATTERY,
 591                 WIIMOD_LED1,
 592                 WIIMOD_LED2,
 593                 WIIMOD_LED3,
 594                 WIIMOD_LED4,
 595                 WIIMOD_ACCEL,
 596                 WIIMOD_IR,
 597                 WIIMOD_BUILTIN_MP,
 598                 WIIMOD_NULL,
 599         },
 600         [WIIMOTE_DEV_BALANCE_BOARD] = (const __u8[]) {
 601                 WIIMOD_BATTERY,
 602                 WIIMOD_LED1,
 603                 WIIMOD_NO_MP,
 604                 WIIMOD_NULL,
 605         },
 606         [WIIMOTE_DEV_PRO_CONTROLLER] = (const __u8[]) {
 607                 WIIMOD_BATTERY,
 608                 WIIMOD_LED1,
 609                 WIIMOD_LED2,
 610                 WIIMOD_LED3,
 611                 WIIMOD_LED4,
 612                 WIIMOD_NO_MP,
 613                 WIIMOD_NULL,
 614         },
 615 };
 616
 617 static void wiimote_modules_load(struct wiimote_data *wdata,
 618                                  unsigned int devtype)
 619 {
 620         bool need_input = false;
 621         const __u8 *mods, *iter;
 622         const struct wiimod_ops *ops;
 623         int ret;
 624
 625         mods = wiimote_devtype_mods[devtype];
 626
 627         for (iter = mods; *iter != WIIMOD_NULL; ++iter) {
 628                 if (wiimod_table[*iter]->flags & WIIMOD_FLAG_INPUT) {
 629                         need_input = true;
 630                         break;
 631                 }
 632         }
 633
 634         if (need_input) {
 635                 wdata->input = input_allocate_device();
 636                 if (!wdata->input)
 637                         return;
 638
 639                 input_set_drvdata(wdata->input, wdata);
 640                 wdata->input->dev.parent = &wdata->hdev->dev;
 641                 wdata->input->id.bustype = wdata->hdev->bus;
 642                 wdata->input->id.vendor = wdata->hdev->vendor;
 643                 wdata->input->id.product = wdata->hdev->product;
 644                 wdata->input->id.version = wdata->hdev->version;
 645                 wdata->input->name = WIIMOTE_NAME;
 646         }
 647
 648         for (iter = mods; *iter != WIIMOD_NULL; ++iter) {
 649                 ops = wiimod_table[*iter];
 650                 if (!ops->probe)
 651                         continue;
 652
 653                 ret = ops->probe(ops, wdata);
 654                 if (ret)
 655                         goto error;
 656         }
 657
 658         if (wdata->input) {
 659                 ret = input_register_device(wdata->input);
 660                 if (ret)
 661                         goto error;
 662         }
 663
 664         spin_lock_irq(&wdata->state.lock);
 665         wdata->state.devtype = devtype;
 666         spin_unlock_irq(&wdata->state.lock);
 667         return;
 668
 669 error:
 670         for ( ; iter-- != mods; ) {
 671                 ops = wiimod_table[*iter];
 672                 if (ops->remove)
 673                         ops->remove(ops, wdata);
 674         }
 675
 676         if (wdata->input) {
 677                 input_free_device(wdata->input);
 678                 wdata->input = NULL;
 679         }
 680 }
 681
 682 static void wiimote_modules_unload(struct wiimote_data *wdata)
 683 {
 684         const __u8 *mods, *iter;
 685         const struct wiimod_ops *ops;
 686         unsigned long flags;
 687
 688         mods = wiimote_devtype_mods[wdata->state.devtype];
 689
 690         spin_lock_irqsave(&wdata->state.lock, flags);
 691         wdata->state.devtype = WIIMOTE_DEV_UNKNOWN;
 692         spin_unlock_irqrestore(&wdata->state.lock, flags);
 693
 694         /* find end of list */
 695         for (iter = mods; *iter != WIIMOD_NULL; ++iter)
 696                 /* empty */ ;
 697
 698         if (wdata->input) {
 699                 input_get_device(wdata->input);
 700                 input_unregister_device(wdata->input);
 701         }
 702
 703         for ( ; iter-- != mods; ) {
 704                 ops = wiimod_table[*iter];
 705                 if (ops->remove)
 706                         ops->remove(ops, wdata);
 707         }
 708
 709         if (wdata->input) {
 710                 input_put_device(wdata->input);
 711                 wdata->input = NULL;
 712         }
 713 }
 714
 715 /* device extension handling */
 716
 717 static void wiimote_ext_load(struct wiimote_data *wdata, unsigned int ext)
 718 {
 719         unsigned long flags;
 720         const struct wiimod_ops *ops;
 721         int ret;
 722
 723         ops = wiimod_ext_table[ext];
 724
 725         if (ops->probe) {
 726                 ret = ops->probe(ops, wdata);
 727                 if (ret)
 728                         ext = WIIMOTE_EXT_UNKNOWN;
 729         }
 730
 731         spin_lock_irqsave(&wdata->state.lock, flags);
 732         wdata->state.exttype = ext;
 733         spin_unlock_irqrestore(&wdata->state.lock, flags);
 734 }
 735
 736 static void wiimote_ext_unload(struct wiimote_data *wdata)
 737 {
 738         unsigned long flags;
 739         const struct wiimod_ops *ops;
 740
 741         ops = wiimod_ext_table[wdata->state.exttype];
 742
 743         spin_lock_irqsave(&wdata->state.lock, flags);
 744         wdata->state.exttype = WIIMOTE_EXT_UNKNOWN;
 745         wdata->state.flags &= ~WIIPROTO_FLAG_EXT_USED;
 746         spin_unlock_irqrestore(&wdata->state.lock, flags);
 747
 748         if (ops->remove)
 749                 ops->remove(ops, wdata);
 750 }
 751
 752 static void wiimote_mp_load(struct wiimote_data *wdata)
 753 {
 754         unsigned long flags;
 755         const struct wiimod_ops *ops;
 756         int ret;
 757         __u8 mode = 2;
 758
 759         ops = &wiimod_mp;
 760         if (ops->probe) {
 761                 ret = ops->probe(ops, wdata);
 762                 if (ret)
 763                         mode = 1;
 764         }
 765
 766         spin_lock_irqsave(&wdata->state.lock, flags);
 767         wdata->state.mp = mode;
 768         spin_unlock_irqrestore(&wdata->state.lock, flags);
 769 }
 770
 771 static void wiimote_mp_unload(struct wiimote_data *wdata)
 772 {
 773         unsigned long flags;
 774         const struct wiimod_ops *ops;
 775
 776         if (wdata->state.mp < 2)
 777                 return;
 778
 779         ops = &wiimod_mp;
 780
 781         spin_lock_irqsave(&wdata->state.lock, flags);
 782         wdata->state.mp = 0;
 783         wdata->state.flags &= ~WIIPROTO_FLAG_MP_USED;
 784         spin_unlock_irqrestore(&wdata->state.lock, flags);
 785
 786         if (ops->remove)
 787                 ops->remove(ops, wdata);
 788 }
 789
 790 /* device (re-)initialization and detection */
 791
 792 static const char *wiimote_devtype_names[WIIMOTE_DEV_NUM] = {
 793         [WIIMOTE_DEV_PENDING] = "Pending",
 794         [WIIMOTE_DEV_UNKNOWN] = "Unknown",
 795         [WIIMOTE_DEV_GENERIC] = "Generic",
 796         [WIIMOTE_DEV_GEN10] = "Nintendo Wii Remote (Gen 1)",
 797         [WIIMOTE_DEV_GEN20] = "Nintendo Wii Remote Plus (Gen 2)",
 798         [WIIMOTE_DEV_BALANCE_BOARD] = "Nintendo Wii Balance Board",
 799         [WIIMOTE_DEV_PRO_CONTROLLER] = "Nintendo Wii U Pro Controller",
 800 };
 801
 802 /* Try to guess the device type based on all collected information. We
 803  * first try to detect by static extension types, then VID/PID and the
 804  * device name. If we cannot detect the device, we use
 805  * WIIMOTE_DEV_GENERIC so all modules will get probed on the device. */
 806 static void wiimote_init_set_type(struct wiimote_data *wdata,
 807                                   __u8 exttype)
 808 {
 809         __u8 devtype = WIIMOTE_DEV_GENERIC;
 810         __u16 vendor, product;
 811         const char *name;
 812
 813         vendor = wdata->hdev->vendor;
 814         product = wdata->hdev->product;
 815         name = wdata->hdev->name;
 816
 817         if (exttype == WIIMOTE_EXT_BALANCE_BOARD) {
 818                 devtype = WIIMOTE_DEV_BALANCE_BOARD;
 819                 goto done;
 820         } else if (exttype == WIIMOTE_EXT_PRO_CONTROLLER) {
 821                 devtype = WIIMOTE_DEV_PRO_CONTROLLER;
 822                 goto done;
 823         }
 824
 825         if (!strcmp(name, "Nintendo RVL-CNT-01")) {
 826                 devtype = WIIMOTE_DEV_GEN10;
 827                 goto done;
 828         } else if (!strcmp(name, "Nintendo RVL-CNT-01-TR")) {
 829                 devtype = WIIMOTE_DEV_GEN20;
 830                 goto done;
 831         } else if (!strcmp(name, "Nintendo RVL-WBC-01")) {
 832                 devtype = WIIMOTE_DEV_BALANCE_BOARD;
 833                 goto done;
 834         } else if (!strcmp(name, "Nintendo RVL-CNT-01-UC")) {
 835                 devtype = WIIMOTE_DEV_PRO_CONTROLLER;
 836                 goto done;
 837         }
 838
 839         if (vendor == USB_VENDOR_ID_NINTENDO) {
 840                 if (product == USB_DEVICE_ID_NINTENDO_WIIMOTE) {
 841                         devtype = WIIMOTE_DEV_GEN10;
 842                         goto done;
 843                 } else if (product == USB_DEVICE_ID_NINTENDO_WIIMOTE2) {
 844                         devtype = WIIMOTE_DEV_GEN20;
 845                         goto done;
 846                 }
 847         }
 848
 849 done:
 850         if (devtype == WIIMOTE_DEV_GENERIC)
 851                 hid_info(wdata->hdev, "cannot detect device; NAME: %s VID: %04x PID: %04x EXT: %04x\n",
 852                         name, vendor, product, exttype);
 853         else
 854                 hid_info(wdata->hdev, "detected device: %s\n",
 855                          wiimote_devtype_names[devtype]);
 856
 857         wiimote_modules_load(wdata, devtype);
 858 }
 859
 860 static void wiimote_init_detect(struct wiimote_data *wdata)
 861 {
 862         __u8 exttype = WIIMOTE_EXT_NONE, extdata[6];
 863         bool ext;
 864         int ret;
 865
 866         wiimote_cmd_acquire_noint(wdata);
 867
 868         spin_lock_irq(&wdata->state.lock);
 869         wdata->state.devtype = WIIMOTE_DEV_UNKNOWN;
 870         wiimote_cmd_set(wdata, WIIPROTO_REQ_SREQ, 0);
 871         wiiproto_req_status(wdata);
 872         spin_unlock_irq(&wdata->state.lock);
 873
 874         ret = wiimote_cmd_wait_noint(wdata);
 875         if (ret)
 876                 goto out_release;
 877
 878         spin_lock_irq(&wdata->state.lock);
 879         ext = wdata->state.flags & WIIPROTO_FLAG_EXT_PLUGGED;
 880         spin_unlock_irq(&wdata->state.lock);
 881
 882         if (!ext)
 883                 goto out_release;
 884
 885         wiimote_cmd_init_ext(wdata);
 886         exttype = wiimote_cmd_read_ext(wdata, extdata);
 887
 888 out_release:
 889         wiimote_cmd_release(wdata);
 890         wiimote_init_set_type(wdata, exttype);
 891
 892         /* schedule MP timer */
 893         spin_lock_irq(&wdata->state.lock);
 894         if (!(wdata->state.flags & WIIPROTO_FLAG_BUILTIN_MP) &&
 895             !(wdata->state.flags & WIIPROTO_FLAG_NO_MP))
 896                 mod_timer(&wdata->timer, jiffies + HZ * 4);
 897         spin_unlock_irq(&wdata->state.lock);
 898 }
 899
 900 /*
 901  * MP hotplug events are not generated by the wiimote. Therefore, we need
 902  * polling to detect it. We use a 4s interval for polling MP registers. This
 903  * seems reasonable considering applications can trigger it manually via
 904  * sysfs requests.
 905  */
 906 static void wiimote_init_poll_mp(struct wiimote_data *wdata)
 907 {
 908         bool mp;
 909         __u8 mpdata[6];
 910
 911         wiimote_cmd_acquire_noint(wdata);
 912         wiimote_cmd_init_mp(wdata);
 913         mp = wiimote_cmd_read_mp(wdata, mpdata);
 914         wiimote_cmd_release(wdata);
 915
 916         /* load/unload MP module if it changed */
 917         if (mp) {
 918                 if (!wdata->state.mp) {
 919                         hid_info(wdata->hdev, "detected extension: Nintendo Wii Motion Plus\n");
 920                         wiimote_mp_load(wdata);
 921                 }
 922         } else if (wdata->state.mp) {
 923                 wiimote_mp_unload(wdata);
 924         }
 925
 926         mod_timer(&wdata->timer, jiffies + HZ * 4);
 927 }
 928
 929 /*
 930  * Check whether the wiimote is in the expected state. The extension registers
 931  * may change during hotplug and initialization so we might get hotplug events
 932  * that we caused by remapping some memory.
 933  * We use some heuristics here to check known states. If the wiimote is in the
 934  * expected state, we can ignore the hotplug event.
 935  *
 936  * Returns "true" if the device is in expected state, "false" if we should
 937  * redo hotplug handling and extension initialization.
 938  */
 939 static bool wiimote_init_check(struct wiimote_data *wdata)
 940 {
 941         __u32 flags;
 942         __u8 type, data[6];
 943         bool ret, poll_mp;
 944
 945         spin_lock_irq(&wdata->state.lock);
 946         flags = wdata->state.flags;
 947         spin_unlock_irq(&wdata->state.lock);
 948
 949         wiimote_cmd_acquire_noint(wdata);
 950
 951         /* If MP is used and active, but the extension is not, we expect:
 952          *   read_mp_mapped() == WIIMOTE_MP_SINGLE
 953          *   state.flags == !EXT_ACTIVE && !MP_PLUGGED && MP_ACTIVE
 954          * We do not check EXT_PLUGGED because it might change during
 955          * initialization of MP without extensions.
 956          *  - If MP is unplugged/replugged, read_mp_mapped() fails
 957          *  - If EXT is plugged, MP_PLUGGED will get set */
 958         if (wdata->state.exttype == WIIMOTE_EXT_NONE &&
 959             wdata->state.mp > 0 && (flags & WIIPROTO_FLAG_MP_USED)) {
 960                 type = wiimote_cmd_read_mp_mapped(wdata);
 961                 ret = type == WIIMOTE_MP_SINGLE;
 962
 963                 spin_lock_irq(&wdata->state.lock);
 964                 ret = ret && !(wdata->state.flags & WIIPROTO_FLAG_EXT_ACTIVE);
 965                 ret = ret && !(wdata->state.flags & WIIPROTO_FLAG_MP_PLUGGED);
 966                 ret = ret && (wdata->state.flags & WIIPROTO_FLAG_MP_ACTIVE);
 967                 spin_unlock_irq(&wdata->state.lock);
 968
 969                 if (!ret)
 970                         hid_dbg(wdata->hdev, "state left: !EXT && MP\n");
 971
 972                 /* while MP is mapped, we get EXT_PLUGGED events */
 973                 poll_mp = false;
 974
 975                 goto out_release;
 976         }
 977
 978         /* If MP is unused, but the extension port is used, we expect:
 979          *   read_ext == state.exttype
 980          *   state.flags == !MP_ACTIVE && EXT_ACTIVE
 981          * - If MP is plugged/unplugged, our timer detects it
 982          * - If EXT is unplugged/replugged, EXT_ACTIVE will become unset */
 983         if (!(flags & WIIPROTO_FLAG_MP_USED) &&
 984             wdata->state.exttype != WIIMOTE_EXT_NONE) {
 985                 type = wiimote_cmd_read_ext(wdata, data);
 986                 ret = type == wdata->state.exttype;
 987
 988                 spin_lock_irq(&wdata->state.lock);
 989                 ret = ret && !(wdata->state.flags & WIIPROTO_FLAG_MP_ACTIVE);
 990                 ret = ret && (wdata->state.flags & WIIPROTO_FLAG_EXT_ACTIVE);
 991                 spin_unlock_irq(&wdata->state.lock);
 992
 993                 if (!ret)
 994                         hid_dbg(wdata->hdev, "state left: EXT && !MP\n");
 995
 996                 /* poll MP for hotplug events */
 997                 poll_mp = true;
 998
 999                 goto out_release;
1000         }
1001
1002         /* If neither MP nor an extension are used, we expect:
1003          *   read_ext() == WIIMOTE_EXT_NONE
1004          *   state.flags == !MP_ACTIVE && !EXT_ACTIVE && !EXT_PLUGGED
1005          * No need to perform any action in this case as everything is
1006          * disabled already.
1007          * - If MP is plugged/unplugged, our timer detects it
1008          * - If EXT is plugged, EXT_PLUGGED will be set */
1009         if (!(flags & WIIPROTO_FLAG_MP_USED) &&
1010             wdata->state.exttype == WIIMOTE_EXT_NONE) {
1011                 type = wiimote_cmd_read_ext(wdata, data);
1012                 ret = type == wdata->state.exttype;
1013
1014                 spin_lock_irq(&wdata->state.lock);
1015                 ret = ret && !(wdata->state.flags & WIIPROTO_FLAG_EXT_ACTIVE);
1016                 ret = ret && !(wdata->state.flags & WIIPROTO_FLAG_MP_ACTIVE);
1017                 ret = ret && !(wdata->state.flags & WIIPROTO_FLAG_EXT_PLUGGED);
1018                 spin_unlock_irq(&wdata->state.lock);
1019
1020                 if (!ret)
1021                         hid_dbg(wdata->hdev, "state left: !EXT && !MP\n");
1022
1023                 /* poll MP for hotplug events */
1024                 poll_mp = true;
1025
1026                 goto out_release;
1027         }
1028
1029         /* The trickiest part is if both EXT and MP are active. We cannot read
1030          * the EXT ID, anymore, because MP is mapped over it. However, we use
1031          * a handy trick here:
1032          *   - EXT_ACTIVE is unset whenever !MP_PLUGGED is sent
1033          * MP_PLUGGED might be re-sent again before we are scheduled, but
1034          * EXT_ACTIVE will stay unset.
1035          * So it is enough to check for mp_mapped() and MP_ACTIVE and
1036          * EXT_ACTIVE. EXT_PLUGGED is a sanity check. */
1037         if (wdata->state.exttype != WIIMOTE_EXT_NONE &&
1038             wdata->state.mp > 0 && (flags & WIIPROTO_FLAG_MP_USED)) {
1039                 type = wiimote_cmd_read_mp_mapped(wdata);
1040                 ret = type != WIIMOTE_MP_NONE;
1041                 ret = ret && type != WIIMOTE_MP_UNKNOWN;
1042                 ret = ret && type != WIIMOTE_MP_SINGLE;
1043
1044                 spin_lock_irq(&wdata->state.lock);
1045                 ret = ret && (wdata->state.flags & WIIPROTO_FLAG_EXT_PLUGGED);
1046                 ret = ret && (wdata->state.flags & WIIPROTO_FLAG_EXT_ACTIVE);
1047                 ret = ret && (wdata->state.flags & WIIPROTO_FLAG_MP_ACTIVE);
1048                 spin_unlock_irq(&wdata->state.lock);
1049
1050                 if (!ret)
1051                         hid_dbg(wdata->hdev, "state left: EXT && MP\n");
1052
1053                 /* while MP is mapped, we get EXT_PLUGGED events */
1054                 poll_mp = false;
1055
1056                 goto out_release;
1057         }
1058
1059         /* unknown state */
1060         ret = false;
1061
1062 out_release:
1063         wiimote_cmd_release(wdata);
1064
1065         /* only poll for MP if requested and if state didn't change */
1066         if (ret && poll_mp && !(flags & WIIPROTO_FLAG_BUILTIN_MP) &&
1067             !(flags & WIIPROTO_FLAG_NO_MP))
1068                 wiimote_init_poll_mp(wdata);
1069
1070         return ret;
1071 }
1072
1073 static const char *wiimote_exttype_names[WIIMOTE_EXT_NUM] = {
1074         [WIIMOTE_EXT_NONE] = "None",
1075         [WIIMOTE_EXT_UNKNOWN] = "Unknown",
1076         [WIIMOTE_EXT_NUNCHUK] = "Nintendo Wii Nunchuk",
1077         [WIIMOTE_EXT_CLASSIC_CONTROLLER] = "Nintendo Wii Classic Controller",
1078         [WIIMOTE_EXT_BALANCE_BOARD] = "Nintendo Wii Balance Board",
1079         [WIIMOTE_EXT_PRO_CONTROLLER] = "Nintendo Wii U Pro Controller",
1080 };
1081
1082 /*
1083  * Handle hotplug events
1084  * If we receive an hotplug event and the device-check failed, we deinitialize
1085  * the extension ports, re-read all extension IDs and set the device into
1086  * the desired state. This involves mapping MP into the main extension
1087  * registers, setting up extension passthrough modes and initializing the
1088  * requested extensions.
1089  */
1090 static void wiimote_init_hotplug(struct wiimote_data *wdata)
1091 {
1092         __u8 exttype, extdata[6], mpdata[6];
1093         __u32 flags;
1094         bool mp;
1095
1096         hid_dbg(wdata->hdev, "detect extensions..\n");
1097
1098         wiimote_cmd_acquire_noint(wdata);
1099
1100         spin_lock_irq(&wdata->state.lock);
1101
1102         /* get state snapshot that we will then work on */
1103         flags = wdata->state.flags;
1104
1105         /* disable event forwarding temporarily */
1106         wdata->state.flags &= ~WIIPROTO_FLAG_EXT_ACTIVE;
1107         wdata->state.flags &= ~WIIPROTO_FLAG_MP_ACTIVE;
1108
1109         spin_unlock_irq(&wdata->state.lock);
1110
1111         /* init extension and MP (deactivates current extension or MP) */
1112         wiimote_cmd_init_ext(wdata);
1113         if (flags & WIIPROTO_FLAG_NO_MP) {
1114                 mp = false;
1115         } else {
1116                 wiimote_cmd_init_mp(wdata);
1117                 mp = wiimote_cmd_read_mp(wdata, mpdata);
1118         }
1119         exttype = wiimote_cmd_read_ext(wdata, extdata);
1120
1121         wiimote_cmd_release(wdata);
1122
1123         /* load/unload extension module if it changed */
1124         if (exttype != wdata->state.exttype) {
1125                 /* unload previous extension */
1126                 wiimote_ext_unload(wdata);
1127
1128                 if (exttype == WIIMOTE_EXT_UNKNOWN) {
1129                         hid_info(wdata->hdev, "cannot detect extension; %02x:%02x %02x:%02x %02x:%02x\n",
1130                                  extdata[0], extdata[1], extdata[2],
1131                                  extdata[3], extdata[4], extdata[5]);
1132                 } else if (exttype == WIIMOTE_EXT_NONE) {
1133                         spin_lock_irq(&wdata->state.lock);
1134                         wdata->state.exttype = WIIMOTE_EXT_NONE;
1135                         spin_unlock_irq(&wdata->state.lock);
1136                 } else {
1137                         hid_info(wdata->hdev, "detected extension: %s\n",
1138                                  wiimote_exttype_names[exttype]);
1139                         /* try loading new extension */
1140                         wiimote_ext_load(wdata, exttype);
1141                 }
1142         }
1143
1144         /* load/unload MP module if it changed */
1145         if (mp) {
1146                 if (!wdata->state.mp) {
1147                         hid_info(wdata->hdev, "detected extension: Nintendo Wii Motion Plus\n");
1148                         wiimote_mp_load(wdata);
1149                 }
1150         } else if (wdata->state.mp) {
1151                 wiimote_mp_unload(wdata);
1152         }
1153
1154         /* if MP is not used, do not map or activate it */
1155         if (!(flags & WIIPROTO_FLAG_MP_USED))
1156                 mp = false;
1157
1158         /* map MP into main extension registers if used */
1159         if (mp) {
1160                 wiimote_cmd_acquire_noint(wdata);
1161                 wiimote_cmd_map_mp(wdata, exttype);
1162                 wiimote_cmd_release(wdata);
1163
1164                 /* delete MP hotplug timer */
1165                 del_timer_sync(&wdata->timer);
1166         } else {
1167                 /* reschedule MP hotplug timer */
1168                 if (!(flags & WIIPROTO_FLAG_BUILTIN_MP) &&
1169                     !(flags & WIIPROTO_FLAG_NO_MP))
1170                         mod_timer(&wdata->timer, jiffies + HZ * 4);
1171         }
1172
1173         spin_lock_irq(&wdata->state.lock);
1174
1175         /* enable data forwarding again and set expected hotplug state */
1176         if (mp) {
1177                 wdata->state.flags |= WIIPROTO_FLAG_MP_ACTIVE;
1178                 if (wdata->state.exttype == WIIMOTE_EXT_NONE) {
1179                         wdata->state.flags &= ~WIIPROTO_FLAG_EXT_PLUGGED;
1180                         wdata->state.flags &= ~WIIPROTO_FLAG_MP_PLUGGED;
1181                 } else {
1182                         wdata->state.flags &= ~WIIPROTO_FLAG_EXT_PLUGGED;
1183                         wdata->state.flags |= WIIPROTO_FLAG_MP_PLUGGED;
1184                         wdata->state.flags |= WIIPROTO_FLAG_EXT_ACTIVE;
1185                 }
1186         } else if (wdata->state.exttype != WIIMOTE_EXT_NONE) {
1187                 wdata->state.flags |= WIIPROTO_FLAG_EXT_ACTIVE;
1188         }
1189
1190         /* request status report for hotplug state updates */
1191         wiiproto_req_status(wdata);
1192
1193         spin_unlock_irq(&wdata->state.lock);
1194
1195         hid_dbg(wdata->hdev, "detected extensions: MP: %d EXT: %d\n",
1196                 wdata->state.mp, wdata->state.exttype);
1197 }
1198
1199 static void wiimote_init_worker(struct work_struct *work)
1200 {
1201         struct wiimote_data *wdata = container_of(work, struct wiimote_data,
1202                                                   init_worker);
1203         bool changed = false;
1204
1205         if (wdata->state.devtype == WIIMOTE_DEV_PENDING) {
1206                 wiimote_init_detect(wdata);
1207                 changed = true;
1208         }
1209
1210         if (changed || !wiimote_init_check(wdata))
1211                 wiimote_init_hotplug(wdata);
1212
1213         if (changed)
1214                 kobject_uevent(&wdata->hdev->dev.kobj, KOBJ_CHANGE);
1215 }
1216
1217 void __wiimote_schedule(struct wiimote_data *wdata)
1218 {
1219         if (!(wdata->state.flags & WIIPROTO_FLAG_EXITING))
1220                 schedule_work(&wdata->init_worker);
1221 }
1222
1223 static void wiimote_schedule(struct wiimote_data *wdata)
1224 {
1225         unsigned long flags;
1226
1227         spin_lock_irqsave(&wdata->state.lock, flags);
1228         __wiimote_schedule(wdata);
1229         spin_unlock_irqrestore(&wdata->state.lock, flags);
1230 }
1231
1232 static void wiimote_init_timeout(unsigned long arg)
1233 {
1234         struct wiimote_data *wdata = (void*)arg;
1235
1236         wiimote_schedule(wdata);
1237 }
1238
1239 /* protocol handlers */
1240
1241 static void handler_keys(struct wiimote_data *wdata, const __u8 *payload)
1242 {
1243         const __u8 *iter, *mods;
1244         const struct wiimod_ops *ops;
1245
1246         ops = wiimod_ext_table[wdata->state.exttype];
1247         if (ops->in_keys) {
1248                 ops->in_keys(wdata, payload);
1249                 return;
1250         }
1251
1252         mods = wiimote_devtype_mods[wdata->state.devtype];
1253         for (iter = mods; *iter != WIIMOD_NULL; ++iter) {
1254                 ops = wiimod_table[*iter];
1255                 if (ops->in_keys) {
1256                         ops->in_keys(wdata, payload);
1257                         break;
1258                 }
1259         }
1260 }
1261
1262 static void handler_accel(struct wiimote_data *wdata, const __u8 *payload)
1263 {
1264         const __u8 *iter, *mods;
1265         const struct wiimod_ops *ops;
1266
1267         ops = wiimod_ext_table[wdata->state.exttype];
1268         if (ops->in_accel) {
1269                 ops->in_accel(wdata, payload);
1270                 return;
1271         }
1272
1273         mods = wiimote_devtype_mods[wdata->state.devtype];
1274         for (iter = mods; *iter != WIIMOD_NULL; ++iter) {
1275                 ops = wiimod_table[*iter];
1276                 if (ops->in_accel) {
1277                         ops->in_accel(wdata, payload);
1278                         break;
1279                 }
1280         }
1281 }
1282
1283 static bool valid_ext_handler(const struct wiimod_ops *ops, size_t len)
1284 {
1285         if (!ops->in_ext)
1286                 return false;
1287         if ((ops->flags & WIIMOD_FLAG_EXT8) && len < 8)
1288                 return false;
1289         if ((ops->flags & WIIMOD_FLAG_EXT16) && len < 16)
1290                 return false;
1291
1292         return true;
1293 }
1294
1295 static void handler_ext(struct wiimote_data *wdata, const __u8 *payload,
1296                         size_t len)
1297 {
1298         static const __u8 invalid[21] = { 0xff, 0xff, 0xff, 0xff,
1299                                           0xff, 0xff, 0xff, 0xff,
1300                                           0xff, 0xff, 0xff, 0xff,
1301                                           0xff, 0xff, 0xff, 0xff,
1302                                           0xff, 0xff, 0xff, 0xff,
1303                                           0xff };
1304         const __u8 *iter, *mods;
1305         const struct wiimod_ops *ops;
1306         bool is_mp;
1307
1308         if (len > 21)
1309                 len = 21;
1310         if (len < 6 || !memcmp(payload, invalid, len))
1311                 return;
1312
1313         /* if MP is active, track MP slot hotplugging */
1314         if (wdata->state.flags & WIIPROTO_FLAG_MP_ACTIVE) {
1315                 /* this bit is set for invalid events (eg. during hotplug) */
1316                 if (payload[5] & 0x01)
1317                         return;
1318
1319                 if (payload[4] & 0x01) {
1320                         if (!(wdata->state.flags & WIIPROTO_FLAG_MP_PLUGGED)) {
1321                                 hid_dbg(wdata->hdev, "MP hotplug: 1\n");
1322                                 wdata->state.flags |= WIIPROTO_FLAG_MP_PLUGGED;
1323                                 __wiimote_schedule(wdata);
1324                         }
1325                 } else {
1326                         if (wdata->state.flags & WIIPROTO_FLAG_MP_PLUGGED) {
1327                                 hid_dbg(wdata->hdev, "MP hotplug: 0\n");
1328                                 wdata->state.flags &= ~WIIPROTO_FLAG_MP_PLUGGED;
1329                                 wdata->state.flags &= ~WIIPROTO_FLAG_EXT_ACTIVE;
1330                                 __wiimote_schedule(wdata);
1331                         }
1332                 }
1333
1334                 /* detect MP data that is sent interleaved with EXT data */
1335                 is_mp = payload[5] & 0x02;
1336         } else {
1337                 is_mp = false;
1338         }
1339
1340         /* ignore EXT events if no extension is active */
1341         if (!(wdata->state.flags & WIIPROTO_FLAG_EXT_ACTIVE) && !is_mp)
1342                 return;
1343
1344         /* try forwarding to extension handler, first */
1345         ops = wiimod_ext_table[wdata->state.exttype];
1346         if (is_mp && ops->in_mp) {
1347                 ops->in_mp(wdata, payload);
1348                 return;
1349         } else if (!is_mp && valid_ext_handler(ops, len)) {
1350                 ops->in_ext(wdata, payload);
1351                 return;
1352         }
1353
1354         /* try forwarding to MP handler */
1355         ops = &wiimod_mp;
1356         if (is_mp && ops->in_mp) {
1357                 ops->in_mp(wdata, payload);
1358                 return;
1359         } else if (!is_mp && valid_ext_handler(ops, len)) {
1360                 ops->in_ext(wdata, payload);
1361                 return;
1362         }
1363
1364         /* try forwarding to loaded modules */
1365         mods = wiimote_devtype_mods[wdata->state.devtype];
1366         for (iter = mods; *iter != WIIMOD_NULL; ++iter) {
1367                 ops = wiimod_table[*iter];
1368                 if (is_mp && ops->in_mp) {
1369                         ops->in_mp(wdata, payload);
1370                         return;
1371                 } else if (!is_mp && valid_ext_handler(ops, len)) {
1372                         ops->in_ext(wdata, payload);
1373                         return;
1374                 }
1375         }
1376 }
1377
1378 #define ir_to_input0(wdata, ir, packed) handler_ir((wdata), (ir), (packed), 0)
1379 #define ir_to_input1(wdata, ir, packed) handler_ir((wdata), (ir), (packed), 1)
1380 #define ir_to_input2(wdata, ir, packed) handler_ir((wdata), (ir), (packed), 2)
1381 #define ir_to_input3(wdata, ir, packed) handler_ir((wdata), (ir), (packed), 3)
1382
1383 static void handler_ir(struct wiimote_data *wdata, const __u8 *payload,
1384                        bool packed, unsigned int id)
1385 {
1386         const __u8 *iter, *mods;
1387         const struct wiimod_ops *ops;
1388
1389         ops = wiimod_ext_table[wdata->state.exttype];
1390         if (ops->in_ir) {
1391                 ops->in_ir(wdata, payload, packed, id);
1392                 return;
1393         }
1394
1395         mods = wiimote_devtype_mods[wdata->state.devtype];
1396         for (iter = mods; *iter != WIIMOD_NULL; ++iter) {
1397                 ops = wiimod_table[*iter];
1398                 if (ops->in_ir) {
1399                         ops->in_ir(wdata, payload, packed, id);
1400                         break;
1401                 }
1402         }
1403 }
1404
1405 /* reduced status report with "BB BB" key data only */
1406 static void handler_status_K(struct wiimote_data *wdata,
1407                              const __u8 *payload)
1408 {
1409         handler_keys(wdata, payload);
1410
1411         /* on status reports the drm is reset so we need to resend the drm */
1412         wiiproto_req_drm(wdata, WIIPROTO_REQ_NULL);
1413 }
1414
1415 /* extended status report with "BB BB LF 00 00 VV" data */
1416 static void handler_status(struct wiimote_data *wdata, const __u8 *payload)
1417 {
1418         handler_status_K(wdata, payload);
1419
1420         /* update extension status */
1421         if (payload[2] & 0x02) {
1422                 if (!(wdata->state.flags & WIIPROTO_FLAG_EXT_PLUGGED)) {
1423                         hid_dbg(wdata->hdev, "EXT hotplug: 1\n");
1424                         wdata->state.flags |= WIIPROTO_FLAG_EXT_PLUGGED;
1425                         __wiimote_schedule(wdata);
1426                 }
1427         } else {
1428                 if (wdata->state.flags & WIIPROTO_FLAG_EXT_PLUGGED) {
1429                         hid_dbg(wdata->hdev, "EXT hotplug: 0\n");
1430                         wdata->state.flags &= ~WIIPROTO_FLAG_EXT_PLUGGED;
1431                         wdata->state.flags &= ~WIIPROTO_FLAG_MP_PLUGGED;
1432                         wdata->state.flags &= ~WIIPROTO_FLAG_EXT_ACTIVE;
1433                         wdata->state.flags &= ~WIIPROTO_FLAG_MP_ACTIVE;
1434                         __wiimote_schedule(wdata);
1435                 }
1436         }
1437
1438         wdata->state.cmd_battery = payload[5];
1439         if (wiimote_cmd_pending(wdata, WIIPROTO_REQ_SREQ, 0))
1440                 wiimote_cmd_complete(wdata);
1441 }
1442
1443 /* reduced generic report with "BB BB" key data only */
1444 static void handler_generic_K(struct wiimote_data *wdata, const __u8 *payload)
1445 {
1446         handler_keys(wdata, payload);
1447 }
1448
1449 static void handler_data(struct wiimote_data *wdata, const __u8 *payload)
1450 {
1451         __u16 offset = payload[3] << 8 | payload[4];
1452         __u8 size = (payload[2] >> 4) + 1;
1453         __u8 err = payload[2] & 0x0f;
1454
1455         handler_keys(wdata, payload);
1456
1457         if (wiimote_cmd_pending(wdata, WIIPROTO_REQ_RMEM, offset)) {
1458                 if (err)
1459                         size = 0;
1460                 else if (size > wdata->state.cmd_read_size)
1461                         size = wdata->state.cmd_read_size;
1462
1463                 wdata->state.cmd_read_size = size;
1464                 if (wdata->state.cmd_read_buf)
1465                         memcpy(wdata->state.cmd_read_buf, &payload[5], size);
1466                 wiimote_cmd_complete(wdata);
1467         }
1468 }
1469
1470 static void handler_return(struct wiimote_data *wdata, const __u8 *payload)
1471 {
1472         __u8 err = payload[3];
1473         __u8 cmd = payload[2];
1474
1475         handler_keys(wdata, payload);
1476
1477         if (wiimote_cmd_pending(wdata, cmd, 0)) {
1478                 wdata->state.cmd_err = err;
1479                 wiimote_cmd_complete(wdata);
1480         } else if (err) {
1481                 hid_warn(wdata->hdev, "Remote error %hhu on req %hhu\n", err,
1482                                                                         cmd);
1483         }
1484 }
1485
1486 static void handler_drm_KA(struct wiimote_data *wdata, const __u8 *payload)
1487 {
1488         handler_keys(wdata, payload);
1489         handler_accel(wdata, payload);
1490 }
1491
1492 static void handler_drm_KE(struct wiimote_data *wdata, const __u8 *payload)
1493 {
1494         handler_keys(wdata, payload);
1495         handler_ext(wdata, &payload[2], 8);
1496 }
1497
1498 static void handler_drm_KAI(struct wiimote_data *wdata, const __u8 *payload)
1499 {
1500         handler_keys(wdata, payload);
1501         handler_accel(wdata, payload);
1502         ir_to_input0(wdata, &payload[5], false);
1503         ir_to_input1(wdata, &payload[8], false);
1504         ir_to_input2(wdata, &payload[11], false);
1505         ir_to_input3(wdata, &payload[14], false);
1506 }
1507
1508 static void handler_drm_KEE(struct wiimote_data *wdata, const __u8 *payload)
1509 {
1510         handler_keys(wdata, payload);
1511         handler_ext(wdata, &payload[2], 19);
1512 }
1513
1514 static void handler_drm_KIE(struct wiimote_data *wdata, const __u8 *payload)
1515 {
1516         handler_keys(wdata, payload);
1517         ir_to_input0(wdata, &payload[2], false);
1518         ir_to_input1(wdata, &payload[4], true);
1519         ir_to_input2(wdata, &payload[7], false);
1520         ir_to_input3(wdata, &payload[9], true);
1521         handler_ext(wdata, &payload[12], 9);
1522 }
1523
1524 static void handler_drm_KAE(struct wiimote_data *wdata, const __u8 *payload)
1525 {
1526         handler_keys(wdata, payload);
1527         handler_accel(wdata, payload);
1528         handler_ext(wdata, &payload[5], 16);
1529 }
1530
1531 static void handler_drm_KAIE(struct wiimote_data *wdata, const __u8 *payload)
1532 {
1533         handler_keys(wdata, payload);
1534         handler_accel(wdata, payload);
1535         ir_to_input0(wdata, &payload[5], false);
1536         ir_to_input1(wdata, &payload[7], true);
1537         ir_to_input2(wdata, &payload[10], false);
1538         ir_to_input3(wdata, &payload[12], true);
1539         handler_ext(wdata, &payload[15], 6);
1540 }
1541
1542 static void handler_drm_E(struct wiimote_data *wdata, const __u8 *payload)
1543 {
1544         handler_ext(wdata, payload, 21);
1545 }
1546
1547 static void handler_drm_SKAI1(struct wiimote_data *wdata, const __u8 *payload)
1548 {
1549         handler_keys(wdata, payload);
1550
1551         wdata->state.accel_split[0] = payload[2];
1552         wdata->state.accel_split[1] = (payload[0] >> 1) & (0x10 | 0x20);
1553         wdata->state.accel_split[1] |= (payload[1] << 1) & (0x40 | 0x80);
1554
1555         ir_to_input0(wdata, &payload[3], false);
1556         ir_to_input1(wdata, &payload[12], false);
1557 }
1558
1559 static void handler_drm_SKAI2(struct wiimote_data *wdata, const __u8 *payload)
1560 {
1561         __u8 buf[5];
1562
1563         handler_keys(wdata, payload);
1564
1565         wdata->state.accel_split[1] |= (payload[0] >> 5) & (0x01 | 0x02);
1566         wdata->state.accel_split[1] |= (payload[1] >> 3) & (0x04 | 0x08);
1567
1568         buf[0] = 0;
1569         buf[1] = 0;
1570         buf[2] = wdata->state.accel_split[0];
1571         buf[3] = payload[2];
1572         buf[4] = wdata->state.accel_split[1];
1573         handler_accel(wdata, buf);
1574
1575         ir_to_input2(wdata, &payload[3], false);
1576         ir_to_input3(wdata, &payload[12], false);
1577 }
1578
1579 struct wiiproto_handler {
1580         __u8 id;
1581         size_t size;
1582         void (*func)(struct wiimote_data *wdata, const __u8 *payload);
1583 };
1584
1585 static struct wiiproto_handler handlers[] = {
1586         { .id = WIIPROTO_REQ_STATUS, .size = 6, .func = handler_status },
1587         { .id = WIIPROTO_REQ_STATUS, .size = 2, .func = handler_status_K },
1588         { .id = WIIPROTO_REQ_DATA, .size = 21, .func = handler_data },
1589         { .id = WIIPROTO_REQ_DATA, .size = 2, .func = handler_generic_K },
1590         { .id = WIIPROTO_REQ_RETURN, .size = 4, .func = handler_return },
1591         { .id = WIIPROTO_REQ_RETURN, .size = 2, .func = handler_generic_K },
1592         { .id = WIIPROTO_REQ_DRM_K, .size = 2, .func = handler_keys },
1593         { .id = WIIPROTO_REQ_DRM_KA, .size = 5, .func = handler_drm_KA },
1594         { .id = WIIPROTO_REQ_DRM_KA, .size = 2, .func = handler_generic_K },
1595         { .id = WIIPROTO_REQ_DRM_KE, .size = 10, .func = handler_drm_KE },
1596         { .id = WIIPROTO_REQ_DRM_KE, .size = 2, .func = handler_generic_K },
1597         { .id = WIIPROTO_REQ_DRM_KAI, .size = 17, .func = handler_drm_KAI },
1598         { .id = WIIPROTO_REQ_DRM_KAI, .size = 2, .func = handler_generic_K },
1599         { .id = WIIPROTO_REQ_DRM_KEE, .size = 21, .func = handler_drm_KEE },
1600         { .id = WIIPROTO_REQ_DRM_KEE, .size = 2, .func = handler_generic_K },
1601         { .id = WIIPROTO_REQ_DRM_KAE, .size = 21, .func = handler_drm_KAE },
1602         { .id = WIIPROTO_REQ_DRM_KAE, .size = 2, .func = handler_generic_K },
1603         { .id = WIIPROTO_REQ_DRM_KIE, .size = 21, .func = handler_drm_KIE },
1604         { .id = WIIPROTO_REQ_DRM_KIE, .size = 2, .func = handler_generic_K },
1605         { .id = WIIPROTO_REQ_DRM_KAIE, .size = 21, .func = handler_drm_KAIE },
1606         { .id = WIIPROTO_REQ_DRM_KAIE, .size = 2, .func = handler_generic_K },
1607         { .id = WIIPROTO_REQ_DRM_E, .size = 21, .func = handler_drm_E },
1608         { .id = WIIPROTO_REQ_DRM_SKAI1, .size = 21, .func = handler_drm_SKAI1 },
1609         { .id = WIIPROTO_REQ_DRM_SKAI2, .size = 21, .func = handler_drm_SKAI2 },
1610         { .id = 0 }
1611 };
1612
1613 static int wiimote_hid_event(struct hid_device *hdev, struct hid_report *report,
1614                                                         u8 *raw_data, int size)
1615 {
1616         struct wiimote_data *wdata = hid_get_drvdata(hdev);
1617         struct wiiproto_handler *h;
1618         int i;
1619         unsigned long flags;
1620
1621         if (size < 1)
1622                 return -EINVAL;
1623
1624         spin_lock_irqsave(&wdata->state.lock, flags);
1625
1626         for (i = 0; handlers[i].id; ++i) {
1627                 h = &handlers[i];
1628                 if (h->id == raw_data[0] && h->size < size) {
1629                         h->func(wdata, &raw_data[1]);
1630                         break;
1631                 }
1632         }
1633
1634         if (!handlers[i].id)
1635                 hid_warn(hdev, "Unhandled report %hhu size %d\n", raw_data[0],
1636                                                                         size);
1637
1638         spin_unlock_irqrestore(&wdata->state.lock, flags);
1639
1640         return 0;
1641 }
1642
1643 static ssize_t wiimote_ext_show(struct device *dev,
1644                                 struct device_attribute *attr,
1645                                 char *buf)
1646 {
1647         struct wiimote_data *wdata = dev_to_wii(dev);
1648         __u8 type;
1649         unsigned long flags;
1650
1651         spin_lock_irqsave(&wdata->state.lock, flags);
1652         type = wdata->state.exttype;
1653         spin_unlock_irqrestore(&wdata->state.lock, flags);
1654
1655         switch (type) {
1656         case WIIMOTE_EXT_NONE:
1657                 return sprintf(buf, "none\n");
1658         case WIIMOTE_EXT_NUNCHUK:
1659                 return sprintf(buf, "nunchuk\n");
1660         case WIIMOTE_EXT_CLASSIC_CONTROLLER:
1661                 return sprintf(buf, "classic\n");
1662         case WIIMOTE_EXT_BALANCE_BOARD:
1663                 return sprintf(buf, "balanceboard\n");
1664         case WIIMOTE_EXT_PRO_CONTROLLER:
1665                 return sprintf(buf, "procontroller\n");
1666         case WIIMOTE_EXT_UNKNOWN:
1667                 /* fallthrough */
1668         default:
1669                 return sprintf(buf, "unknown\n");
1670         }
1671 }
1672
1673 static ssize_t wiimote_ext_store(struct device *dev,
1674                                  struct device_attribute *attr,
1675                                  const char *buf, size_t count)
1676 {
1677         struct wiimote_data *wdata = dev_to_wii(dev);
1678
1679         if (!strcmp(buf, "scan")) {
1680                 wiimote_schedule(wdata);
1681         } else {
1682                 return -EINVAL;
1683         }
1684
1685         return strnlen(buf, PAGE_SIZE);
1686 }
1687
1688 static DEVICE_ATTR(extension, S_IRUGO | S_IWUSR | S_IWGRP, wiimote_ext_show,
1689                    wiimote_ext_store);
1690
1691 static ssize_t wiimote_dev_show(struct device *dev,
1692                                 struct device_attribute *attr,
1693                                 char *buf)
1694 {
1695         struct wiimote_data *wdata = dev_to_wii(dev);
1696         __u8 type;
1697         unsigned long flags;
1698
1699         spin_lock_irqsave(&wdata->state.lock, flags);
1700         type = wdata->state.devtype;
1701         spin_unlock_irqrestore(&wdata->state.lock, flags);
1702
1703         switch (type) {
1704         case WIIMOTE_DEV_GENERIC:
1705                 return sprintf(buf, "generic\n");
1706         case WIIMOTE_DEV_GEN10:
1707                 return sprintf(buf, "gen10\n");
1708         case WIIMOTE_DEV_GEN20:
1709                 return sprintf(buf, "gen20\n");
1710         case WIIMOTE_DEV_BALANCE_BOARD:
1711                 return sprintf(buf, "balanceboard\n");
1712         case WIIMOTE_DEV_PRO_CONTROLLER:
1713                 return sprintf(buf, "procontroller\n");
1714         case WIIMOTE_DEV_PENDING:
1715                 return sprintf(buf, "pending\n");
1716         case WIIMOTE_DEV_UNKNOWN:
1717                 /* fallthrough */
1718         default:
1719                 return sprintf(buf, "unknown\n");
1720         }
1721 }
1722
1723 static DEVICE_ATTR(devtype, S_IRUGO, wiimote_dev_show, NULL);
1724
1725 static struct wiimote_data *wiimote_create(struct hid_device *hdev)
1726 {
1727         struct wiimote_data *wdata;
1728
1729         wdata = kzalloc(sizeof(*wdata), GFP_KERNEL);
1730         if (!wdata)
1731                 return NULL;
1732
1733         wdata->hdev = hdev;
1734         hid_set_drvdata(hdev, wdata);
1735
1736         spin_lock_init(&wdata->queue.lock);
1737         INIT_WORK(&wdata->queue.worker, wiimote_queue_worker);
1738
1739         spin_lock_init(&wdata->state.lock);
1740         init_completion(&wdata->state.ready);
1741         mutex_init(&wdata->state.sync);
1742         wdata->state.drm = WIIPROTO_REQ_DRM_K;
1743         wdata->state.cmd_battery = 0xff;
1744
1745         INIT_WORK(&wdata->init_worker, wiimote_init_worker);
1746         setup_timer(&wdata->timer, wiimote_init_timeout, (long)wdata);
1747
1748         return wdata;
1749 }
1750
1751 static void wiimote_destroy(struct wiimote_data *wdata)
1752 {
1753         unsigned long flags;
1754
1755         wiidebug_deinit(wdata);
1756
1757         /* prevent init_worker from being scheduled again */
1758         spin_lock_irqsave(&wdata->state.lock, flags);
1759         wdata->state.flags |= WIIPROTO_FLAG_EXITING;
1760         spin_unlock_irqrestore(&wdata->state.lock, flags);
1761
1762         cancel_work_sync(&wdata->init_worker);
1763         del_timer_sync(&wdata->timer);
1764
1765         device_remove_file(&wdata->hdev->dev, &dev_attr_devtype);
1766         device_remove_file(&wdata->hdev->dev, &dev_attr_extension);
1767
1768         wiimote_mp_unload(wdata);
1769         wiimote_ext_unload(wdata);
1770         wiimote_modules_unload(wdata);
1771         cancel_work_sync(&wdata->queue.worker);
1772         hid_hw_close(wdata->hdev);
1773         hid_hw_stop(wdata->hdev);
1774
1775         kfree(wdata);
1776 }
1777
1778 static int wiimote_hid_probe(struct hid_device *hdev,
1779                                 const struct hid_device_id *id)
1780 {
1781         struct wiimote_data *wdata;
1782         int ret;
1783
1784         hdev->quirks |= HID_QUIRK_NO_INIT_REPORTS;
1785
1786         wdata = wiimote_create(hdev);
1787         if (!wdata) {
1788                 hid_err(hdev, "Can't alloc device\n");
1789                 return -ENOMEM;
1790         }
1791
1792         ret = hid_parse(hdev);
1793         if (ret) {
1794                 hid_err(hdev, "HID parse failed\n");
1795                 goto err;
1796         }
1797
1798         ret = hid_hw_start(hdev, HID_CONNECT_HIDRAW);
1799         if (ret) {
1800                 hid_err(hdev, "HW start failed\n");
1801                 goto err;
1802         }
1803
1804         ret = hid_hw_open(hdev);
1805         if (ret) {
1806                 hid_err(hdev, "cannot start hardware I/O\n");
1807                 goto err_stop;
1808         }
1809
1810         ret = device_create_file(&hdev->dev, &dev_attr_extension);
1811         if (ret) {
1812                 hid_err(hdev, "cannot create sysfs attribute\n");
1813                 goto err_close;
1814         }
1815
1816         ret = device_create_file(&hdev->dev, &dev_attr_devtype);
1817         if (ret) {
1818                 hid_err(hdev, "cannot create sysfs attribute\n");
1819                 goto err_ext;
1820         }
1821
1822         ret = wiidebug_init(wdata);
1823         if (ret)
1824                 goto err_free;
1825
1826         hid_info(hdev, "New device registered\n");
1827
1828         /* schedule device detection */
1829         wiimote_schedule(wdata);
1830
1831         return 0;
1832
1833 err_free:
1834         wiimote_destroy(wdata);
1835         return ret;
1836
1837 err_ext:
1838         device_remove_file(&wdata->hdev->dev, &dev_attr_extension);
1839 err_close:
1840         hid_hw_close(hdev);
1841 err_stop:
1842         hid_hw_stop(hdev);
1843 err:
1844         input_free_device(wdata->ir);
1845         input_free_device(wdata->accel);
1846         kfree(wdata);
1847         return ret;
1848 }
1849
1850 static void wiimote_hid_remove(struct hid_device *hdev)
1851 {
1852         struct wiimote_data *wdata = hid_get_drvdata(hdev);
1853
1854         hid_info(hdev, "Device removed\n");
1855         wiimote_destroy(wdata);
1856 }
1857
1858 static const struct hid_device_id wiimote_hid_devices[] = {
1859         { HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_NINTENDO,
1860                                 USB_DEVICE_ID_NINTENDO_WIIMOTE) },
1861         { HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_NINTENDO,
1862                                 USB_DEVICE_ID_NINTENDO_WIIMOTE2) },
1863         { }
1864 };
1865 MODULE_DEVICE_TABLE(hid, wiimote_hid_devices);
1866
1867 static struct hid_driver wiimote_hid_driver = {
1868         .name = "wiimote",
1869         .id_table = wiimote_hid_devices,
1870         .probe = wiimote_hid_probe,
1871         .remove = wiimote_hid_remove,
1872         .raw_event = wiimote_hid_event,
1873 };
1874 module_hid_driver(wiimote_hid_driver);
1875
1876 MODULE_LICENSE("GPL");
1877 MODULE_AUTHOR("David Herrmann <dh.herrmann@gmail.com>");
1878 MODULE_DESCRIPTION("Driver for Nintendo Wii / Wii U peripherals");