]> CyberLeo.Net >> Repos - FreeBSD/stable/9.git/blob - sys/dev/usb/usb_hid.c
MFC r361827:
[FreeBSD/stable/9.git] / sys / dev / usb / usb_hid.c
1 /*      $NetBSD: hid.c,v 1.17 2001/11/13 06:24:53 lukem Exp $   */
2
3
4 #include <sys/cdefs.h>
5 __FBSDID("$FreeBSD$");
6 /*-
7  * Copyright (c) 1998 The NetBSD Foundation, Inc.
8  * All rights reserved.
9  *
10  * This code is derived from software contributed to The NetBSD Foundation
11  * by Lennart Augustsson (lennart@augustsson.net) at
12  * Carlstedt Research & Technology.
13  *
14  * Redistribution and use in source and binary forms, with or without
15  * modification, are permitted provided that the following conditions
16  * are met:
17  * 1. Redistributions of source code must retain the above copyright
18  *    notice, this list of conditions and the following disclaimer.
19  * 2. Redistributions in binary form must reproduce the above copyright
20  *    notice, this list of conditions and the following disclaimer in the
21  *    documentation and/or other materials provided with the distribution.
22  *
23  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
24  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
25  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
26  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
27  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
28  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
29  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
30  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
31  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
32  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
33  * POSSIBILITY OF SUCH DAMAGE.
34  */
35
36 #include <sys/stdint.h>
37 #include <sys/stddef.h>
38 #include <sys/param.h>
39 #include <sys/queue.h>
40 #include <sys/types.h>
41 #include <sys/systm.h>
42 #include <sys/kernel.h>
43 #include <sys/bus.h>
44 #include <sys/module.h>
45 #include <sys/lock.h>
46 #include <sys/mutex.h>
47 #include <sys/condvar.h>
48 #include <sys/sysctl.h>
49 #include <sys/sx.h>
50 #include <sys/unistd.h>
51 #include <sys/callout.h>
52 #include <sys/malloc.h>
53 #include <sys/priv.h>
54
55 #include <dev/usb/usb.h>
56 #include <dev/usb/usbdi.h>
57 #include <dev/usb/usbdi_util.h>
58 #include <dev/usb/usbhid.h>
59
60 #define USB_DEBUG_VAR usb_debug
61
62 #include <dev/usb/usb_core.h>
63 #include <dev/usb/usb_debug.h>
64 #include <dev/usb/usb_process.h>
65 #include <dev/usb/usb_device.h>
66 #include <dev/usb/usb_request.h>
67
68 static void hid_clear_local(struct hid_item *);
69 static uint8_t hid_get_byte(struct hid_data *s, const uint16_t wSize);
70
71 #define MAXUSAGE 64
72 #define MAXPUSH 4
73 #define MAXID 16
74
75 struct hid_pos_data {
76         int32_t rid;
77         uint32_t pos;
78 };
79
80 struct hid_data {
81         const uint8_t *start;
82         const uint8_t *end;
83         const uint8_t *p;
84         struct hid_item cur[MAXPUSH];
85         struct hid_pos_data last_pos[MAXID];
86         int32_t usages_min[MAXUSAGE];
87         int32_t usages_max[MAXUSAGE];
88         int32_t usage_last;     /* last seen usage */
89         uint32_t loc_size;      /* last seen size */
90         uint32_t loc_count;     /* last seen count */
91         uint8_t kindset;        /* we have 5 kinds so 8 bits are enough */
92         uint8_t pushlevel;      /* current pushlevel */
93         uint8_t ncount;         /* end usage item count */
94         uint8_t icount;         /* current usage item count */
95         uint8_t nusage;         /* end "usages_min/max" index */
96         uint8_t iusage;         /* current "usages_min/max" index */
97         uint8_t ousage;         /* current "usages_min/max" offset */
98         uint8_t susage;         /* usage set flags */
99 };
100
101 /*------------------------------------------------------------------------*
102  *      hid_clear_local
103  *------------------------------------------------------------------------*/
104 static void
105 hid_clear_local(struct hid_item *c)
106 {
107
108         c->loc.count = 0;
109         c->loc.size = 0;
110         c->usage = 0;
111         c->usage_minimum = 0;
112         c->usage_maximum = 0;
113         c->designator_index = 0;
114         c->designator_minimum = 0;
115         c->designator_maximum = 0;
116         c->string_index = 0;
117         c->string_minimum = 0;
118         c->string_maximum = 0;
119         c->set_delimiter = 0;
120 }
121
122 static void
123 hid_switch_rid(struct hid_data *s, struct hid_item *c, int32_t next_rID)
124 {
125         uint8_t i;
126
127         /* check for same report ID - optimise */
128
129         if (c->report_ID == next_rID)
130                 return;
131
132         /* save current position for current rID */
133
134         if (c->report_ID == 0) {
135                 i = 0;
136         } else {
137                 for (i = 1; i != MAXID; i++) {
138                         if (s->last_pos[i].rid == c->report_ID)
139                                 break;
140                         if (s->last_pos[i].rid == 0)
141                                 break;
142                 }
143         }
144         if (i != MAXID) {
145                 s->last_pos[i].rid = c->report_ID;
146                 s->last_pos[i].pos = c->loc.pos;
147         }
148
149         /* store next report ID */
150
151         c->report_ID = next_rID;
152
153         /* lookup last position for next rID */
154
155         if (next_rID == 0) {
156                 i = 0;
157         } else {
158                 for (i = 1; i != MAXID; i++) {
159                         if (s->last_pos[i].rid == next_rID)
160                                 break;
161                         if (s->last_pos[i].rid == 0)
162                                 break;
163                 }
164         }
165         if (i != MAXID) {
166                 s->last_pos[i].rid = next_rID;
167                 c->loc.pos = s->last_pos[i].pos;
168         } else {
169                 DPRINTF("Out of RID entries, position is set to zero!\n");
170                 c->loc.pos = 0;
171         }
172 }
173
174 /*------------------------------------------------------------------------*
175  *      hid_start_parse
176  *------------------------------------------------------------------------*/
177 struct hid_data *
178 hid_start_parse(const void *d, usb_size_t len, int kindset)
179 {
180         struct hid_data *s;
181
182         if ((kindset-1) & kindset) {
183                 DPRINTFN(0, "Only one bit can be "
184                     "set in the kindset\n");
185                 return (NULL);
186         }
187
188         s = malloc(sizeof *s, M_TEMP, M_WAITOK | M_ZERO);
189         s->start = s->p = d;
190         s->end = ((const uint8_t *)d) + len;
191         s->kindset = kindset;
192         return (s);
193 }
194
195 /*------------------------------------------------------------------------*
196  *      hid_end_parse
197  *------------------------------------------------------------------------*/
198 void
199 hid_end_parse(struct hid_data *s)
200 {
201         if (s == NULL)
202                 return;
203
204         free(s, M_TEMP);
205 }
206
207 /*------------------------------------------------------------------------*
208  *      get byte from HID descriptor
209  *------------------------------------------------------------------------*/
210 static uint8_t
211 hid_get_byte(struct hid_data *s, const uint16_t wSize)
212 {
213         const uint8_t *ptr;
214         uint8_t retval;
215
216         ptr = s->p;
217
218         /* check if end is reached */
219         if (ptr == s->end)
220                 return (0);
221
222         /* read out a byte */
223         retval = *ptr;
224
225         /* check if data pointer can be advanced by "wSize" bytes */
226         if ((s->end - ptr) < wSize)
227                 ptr = s->end;
228         else
229                 ptr += wSize;
230
231         /* update pointer */
232         s->p = ptr;
233
234         return (retval);
235 }
236
237 /*------------------------------------------------------------------------*
238  *      hid_get_item
239  *------------------------------------------------------------------------*/
240 int
241 hid_get_item(struct hid_data *s, struct hid_item *h)
242 {
243         struct hid_item *c;
244         unsigned int bTag, bType, bSize;
245         uint32_t oldpos;
246         int32_t mask;
247         int32_t dval;
248
249         if (s == NULL)
250                 return (0);
251
252         c = &s->cur[s->pushlevel];
253
254  top:
255         /* check if there is an array of items */
256         if (s->icount < s->ncount) {
257                 /* get current usage */
258                 if (s->iusage < s->nusage) {
259                         dval = s->usages_min[s->iusage] + s->ousage;
260                         c->usage = dval;
261                         s->usage_last = dval;
262                         if (dval == s->usages_max[s->iusage]) {
263                                 s->iusage ++;
264                                 s->ousage = 0;
265                         } else {
266                                 s->ousage ++;
267                         }
268                 } else {
269                         DPRINTFN(1, "Using last usage\n");
270                         dval = s->usage_last;
271                 }
272                 s->icount ++;
273                 /* 
274                  * Only copy HID item, increment position and return
275                  * if correct kindset!
276                  */
277                 if (s->kindset & (1 << c->kind)) {
278                         *h = *c;
279                         DPRINTFN(1, "%u,%u,%u\n", h->loc.pos,
280                             h->loc.size, h->loc.count);
281                         c->loc.pos += c->loc.size * c->loc.count;
282                         return (1);
283                 }
284         }
285
286         /* reset state variables */
287         s->icount = 0;
288         s->ncount = 0;
289         s->iusage = 0;
290         s->nusage = 0;
291         s->susage = 0;
292         s->ousage = 0;
293         hid_clear_local(c);
294
295         /* get next item */
296         while (s->p != s->end) {
297
298                 bSize = hid_get_byte(s, 1);
299                 if (bSize == 0xfe) {
300                         /* long item */
301                         bSize = hid_get_byte(s, 1);
302                         bSize |= hid_get_byte(s, 1) << 8;
303                         bTag = hid_get_byte(s, 1);
304                         bType = 0xff;   /* XXX what should it be */
305                 } else {
306                         /* short item */
307                         bTag = bSize >> 4;
308                         bType = (bSize >> 2) & 3;
309                         bSize &= 3;
310                         if (bSize == 3)
311                                 bSize = 4;
312                 }
313                 switch (bSize) {
314                 case 0:
315                         dval = 0;
316                         mask = 0;
317                         break;
318                 case 1:
319                         dval = (int8_t)hid_get_byte(s, 1);
320                         mask = 0xFF;
321                         break;
322                 case 2:
323                         dval = hid_get_byte(s, 1);
324                         dval |= hid_get_byte(s, 1) << 8;
325                         dval = (int16_t)dval;
326                         mask = 0xFFFF;
327                         break;
328                 case 4:
329                         dval = hid_get_byte(s, 1);
330                         dval |= hid_get_byte(s, 1) << 8;
331                         dval |= hid_get_byte(s, 1) << 16;
332                         dval |= hid_get_byte(s, 1) << 24;
333                         mask = 0xFFFFFFFF;
334                         break;
335                 default:
336                         dval = hid_get_byte(s, bSize);
337                         DPRINTFN(0, "bad length %u (data=0x%02x)\n",
338                             bSize, dval);
339                         continue;
340                 }
341
342                 switch (bType) {
343                 case 0:         /* Main */
344                         switch (bTag) {
345                         case 8: /* Input */
346                                 c->kind = hid_input;
347                                 c->flags = dval;
348                 ret:
349                                 c->loc.count = s->loc_count;
350                                 c->loc.size = s->loc_size;
351
352                                 if (c->flags & HIO_VARIABLE) {
353                                         /* range check usage count */
354                                         if (c->loc.count > 255) {
355                                                 DPRINTFN(0, "Number of "
356                                                     "items(%u) truncated to 255\n",
357                                                     (unsigned)(c->loc.count));
358                                                 s->ncount = 255;
359                                         } else
360                                                 s->ncount = c->loc.count;
361
362                                         /* 
363                                          * The "top" loop will return
364                                          * one and one item:
365                                          */
366                                         c->loc.count = 1;
367                                 } else {
368                                         s->ncount = 1;
369                                 }
370                                 goto top;
371
372                         case 9: /* Output */
373                                 c->kind = hid_output;
374                                 c->flags = dval;
375                                 goto ret;
376                         case 10:        /* Collection */
377                                 c->kind = hid_collection;
378                                 c->collection = dval;
379                                 c->collevel++;
380                                 c->usage = s->usage_last;
381                                 *h = *c;
382                                 return (1);
383                         case 11:        /* Feature */
384                                 c->kind = hid_feature;
385                                 c->flags = dval;
386                                 goto ret;
387                         case 12:        /* End collection */
388                                 c->kind = hid_endcollection;
389                                 if (c->collevel == 0) {
390                                         DPRINTFN(0, "invalid end collection\n");
391                                         return (0);
392                                 }
393                                 c->collevel--;
394                                 *h = *c;
395                                 return (1);
396                         default:
397                                 DPRINTFN(0, "Main bTag=%d\n", bTag);
398                                 break;
399                         }
400                         break;
401                 case 1:         /* Global */
402                         switch (bTag) {
403                         case 0:
404                                 c->_usage_page = dval << 16;
405                                 break;
406                         case 1:
407                                 c->logical_minimum = dval;
408                                 break;
409                         case 2:
410                                 c->logical_maximum = dval;
411                                 break;
412                         case 3:
413                                 c->physical_minimum = dval;
414                                 break;
415                         case 4:
416                                 c->physical_maximum = dval;
417                                 break;
418                         case 5:
419                                 c->unit_exponent = dval;
420                                 break;
421                         case 6:
422                                 c->unit = dval;
423                                 break;
424                         case 7:
425                                 /* mask because value is unsigned */
426                                 s->loc_size = dval & mask;
427                                 break;
428                         case 8:
429                                 hid_switch_rid(s, c, dval & mask);
430                                 break;
431                         case 9:
432                                 /* mask because value is unsigned */
433                                 s->loc_count = dval & mask;
434                                 break;
435                         case 10:        /* Push */
436                                 /* stop parsing, if invalid push level */
437                                 if ((s->pushlevel + 1) >= MAXPUSH) {
438                                         DPRINTFN(0, "Cannot push item @ %d\n", s->pushlevel);
439                                         return (0);
440                                 }
441                                 s->pushlevel ++;
442                                 s->cur[s->pushlevel] = *c;
443                                 /* store size and count */
444                                 c->loc.size = s->loc_size;
445                                 c->loc.count = s->loc_count;
446                                 /* update current item pointer */
447                                 c = &s->cur[s->pushlevel];
448                                 break;
449                         case 11:        /* Pop */
450                                 /* stop parsing, if invalid push level */
451                                 if (s->pushlevel == 0) {
452                                         DPRINTFN(0, "Cannot pop item @ 0\n");
453                                         return (0);
454                                 }
455                                 s->pushlevel --;
456                                 /* preserve position */
457                                 oldpos = c->loc.pos;
458                                 c = &s->cur[s->pushlevel];
459                                 /* restore size and count */
460                                 s->loc_size = c->loc.size;
461                                 s->loc_count = c->loc.count;
462                                 /* set default item location */
463                                 c->loc.pos = oldpos;
464                                 c->loc.size = 0;
465                                 c->loc.count = 0;
466                                 break;
467                         default:
468                                 DPRINTFN(0, "Global bTag=%d\n", bTag);
469                                 break;
470                         }
471                         break;
472                 case 2:         /* Local */
473                         switch (bTag) {
474                         case 0:
475                                 if (bSize != 4)
476                                         dval = (dval & mask) | c->_usage_page;
477
478                                 /* set last usage, in case of a collection */
479                                 s->usage_last = dval;
480
481                                 if (s->nusage < MAXUSAGE) {
482                                         s->usages_min[s->nusage] = dval;
483                                         s->usages_max[s->nusage] = dval;
484                                         s->nusage ++;
485                                 } else {
486                                         DPRINTFN(0, "max usage reached\n");
487                                 }
488
489                                 /* clear any pending usage sets */
490                                 s->susage = 0;
491                                 break;
492                         case 1:
493                                 s->susage |= 1;
494
495                                 if (bSize != 4)
496                                         dval = (dval & mask) | c->_usage_page;
497                                 c->usage_minimum = dval;
498
499                                 goto check_set;
500                         case 2:
501                                 s->susage |= 2;
502
503                                 if (bSize != 4)
504                                         dval = (dval & mask) | c->_usage_page;
505                                 c->usage_maximum = dval;
506
507                         check_set:
508                                 if (s->susage != 3)
509                                         break;
510
511                                 /* sanity check */
512                                 if ((s->nusage < MAXUSAGE) &&
513                                     (c->usage_minimum <= c->usage_maximum)) {
514                                         /* add usage range */
515                                         s->usages_min[s->nusage] = 
516                                             c->usage_minimum;
517                                         s->usages_max[s->nusage] = 
518                                             c->usage_maximum;
519                                         s->nusage ++;
520                                 } else {
521                                         DPRINTFN(0, "Usage set dropped\n");
522                                 }
523                                 s->susage = 0;
524                                 break;
525                         case 3:
526                                 c->designator_index = dval;
527                                 break;
528                         case 4:
529                                 c->designator_minimum = dval;
530                                 break;
531                         case 5:
532                                 c->designator_maximum = dval;
533                                 break;
534                         case 7:
535                                 c->string_index = dval;
536                                 break;
537                         case 8:
538                                 c->string_minimum = dval;
539                                 break;
540                         case 9:
541                                 c->string_maximum = dval;
542                                 break;
543                         case 10:
544                                 c->set_delimiter = dval;
545                                 break;
546                         default:
547                                 DPRINTFN(0, "Local bTag=%d\n", bTag);
548                                 break;
549                         }
550                         break;
551                 default:
552                         DPRINTFN(0, "default bType=%d\n", bType);
553                         break;
554                 }
555         }
556         return (0);
557 }
558
559 /*------------------------------------------------------------------------*
560  *      hid_report_size
561  *------------------------------------------------------------------------*/
562 int
563 hid_report_size(const void *buf, usb_size_t len, enum hid_kind k, uint8_t *id)
564 {
565         struct hid_data *d;
566         struct hid_item h;
567         uint32_t temp;
568         uint32_t hpos;
569         uint32_t lpos;
570         uint8_t any_id;
571
572         any_id = 0;
573         hpos = 0;
574         lpos = 0xFFFFFFFF;
575
576         for (d = hid_start_parse(buf, len, 1 << k); hid_get_item(d, &h);) {
577                 if (h.kind == k) {
578                         /* check for ID-byte presense */
579                         if ((h.report_ID != 0) && !any_id) {
580                                 if (id != NULL)
581                                         *id = h.report_ID;
582                                 any_id = 1;
583                         }
584                         /* compute minimum */
585                         if (lpos > h.loc.pos)
586                                 lpos = h.loc.pos;
587                         /* compute end position */
588                         temp = h.loc.pos + (h.loc.size * h.loc.count);
589                         /* compute maximum */
590                         if (hpos < temp)
591                                 hpos = temp;
592                 }
593         }
594         hid_end_parse(d);
595
596         /* safety check - can happen in case of currupt descriptors */
597         if (lpos > hpos)
598                 temp = 0;
599         else
600                 temp = hpos - lpos;
601
602         /* check for ID byte */
603         if (any_id)
604                 temp += 8;
605         else if (id != NULL)
606                 *id = 0;
607
608         /* return length in bytes rounded up */
609         return ((temp + 7) / 8);
610 }
611
612 /*------------------------------------------------------------------------*
613  *      hid_locate
614  *------------------------------------------------------------------------*/
615 int
616 hid_locate(const void *desc, usb_size_t size, int32_t u, enum hid_kind k,
617     uint8_t index, struct hid_location *loc, uint32_t *flags, uint8_t *id)
618 {
619         struct hid_data *d;
620         struct hid_item h;
621
622         for (d = hid_start_parse(desc, size, 1 << k); hid_get_item(d, &h);) {
623                 if (h.kind == k && !(h.flags & HIO_CONST) && h.usage == u) {
624                         if (index--)
625                                 continue;
626                         if (loc != NULL)
627                                 *loc = h.loc;
628                         if (flags != NULL)
629                                 *flags = h.flags;
630                         if (id != NULL)
631                                 *id = h.report_ID;
632                         hid_end_parse(d);
633                         return (1);
634                 }
635         }
636         if (loc != NULL)
637                 loc->size = 0;
638         if (flags != NULL)
639                 *flags = 0;
640         if (id != NULL)
641                 *id = 0;
642         hid_end_parse(d);
643         return (0);
644 }
645
646 /*------------------------------------------------------------------------*
647  *      hid_get_data
648  *------------------------------------------------------------------------*/
649 static uint32_t
650 hid_get_data_sub(const uint8_t *buf, usb_size_t len, struct hid_location *loc,
651     int is_signed)
652 {
653         uint32_t hpos = loc->pos;
654         uint32_t hsize = loc->size;
655         uint32_t data;
656         uint32_t rpos;
657         uint8_t n;
658
659         DPRINTFN(11, "hid_get_data: loc %d/%d\n", hpos, hsize);
660
661         /* Range check and limit */
662         if (hsize == 0)
663                 return (0);
664         if (hsize > 32)
665                 hsize = 32;
666
667         /* Get data in a safe way */    
668         data = 0;
669         rpos = (hpos / 8);
670         n = (hsize + 7) / 8;
671         rpos += n;
672         while (n--) {
673                 rpos--;
674                 if (rpos < len)
675                         data |= buf[rpos] << (8 * n);
676         }
677
678         /* Correctly shift down data */
679         data = (data >> (hpos % 8));
680         n = 32 - hsize;
681
682         /* Mask and sign extend in one */
683         if (is_signed != 0)
684                 data = (int32_t)((int32_t)data << n) >> n;
685         else
686                 data = (uint32_t)((uint32_t)data << n) >> n;
687
688         DPRINTFN(11, "hid_get_data: loc %d/%d = %lu\n",
689             loc->pos, loc->size, (long)data);
690         return (data);
691 }
692
693 int32_t
694 hid_get_data(const uint8_t *buf, usb_size_t len, struct hid_location *loc)
695 {
696         return (hid_get_data_sub(buf, len, loc, 1));
697 }
698
699 uint32_t
700 hid_get_data_unsigned(const uint8_t *buf, usb_size_t len, struct hid_location *loc)
701 {
702         return (hid_get_data_sub(buf, len, loc, 0));
703 }
704
705 /*------------------------------------------------------------------------*
706  *      hid_put_data
707  *------------------------------------------------------------------------*/
708 void
709 hid_put_data_unsigned(uint8_t *buf, usb_size_t len,
710     struct hid_location *loc, unsigned int value)
711 {
712         uint32_t hpos = loc->pos;
713         uint32_t hsize = loc->size;
714         uint64_t data;
715         uint64_t mask;
716         uint32_t rpos;
717         uint8_t n;
718
719         DPRINTFN(11, "hid_put_data: loc %d/%d = %u\n", hpos, hsize, value);
720
721         /* Range check and limit */
722         if (hsize == 0)
723                 return;
724         if (hsize > 32)
725                 hsize = 32;
726
727         /* Put data in a safe way */    
728         rpos = (hpos / 8);
729         n = (hsize + 7) / 8;
730         data = ((uint64_t)value) << (hpos % 8);
731         mask = ((1ULL << hsize) - 1ULL) << (hpos % 8);
732         rpos += n;
733         while (n--) {
734                 rpos--;
735                 if (rpos < len) {
736                         buf[rpos] &= ~(mask >> (8 * n));
737                         buf[rpos] |= (data >> (8 * n));
738                 }
739         }
740 }
741
742 /*------------------------------------------------------------------------*
743  *      hid_is_collection
744  *------------------------------------------------------------------------*/
745 int
746 hid_is_collection(const void *desc, usb_size_t size, int32_t usage)
747 {
748         struct hid_data *hd;
749         struct hid_item hi;
750         int err;
751
752         hd = hid_start_parse(desc, size, hid_input);
753         if (hd == NULL)
754                 return (0);
755
756         while ((err = hid_get_item(hd, &hi))) {
757                  if (hi.kind == hid_collection &&
758                      hi.usage == usage)
759                         break;
760         }
761         hid_end_parse(hd);
762         return (err);
763 }
764
765 /*------------------------------------------------------------------------*
766  *      hid_get_descriptor_from_usb
767  *
768  * This function will search for a HID descriptor between two USB
769  * interface descriptors.
770  *
771  * Return values:
772  * NULL: No more HID descriptors.
773  * Else: Pointer to HID descriptor.
774  *------------------------------------------------------------------------*/
775 struct usb_hid_descriptor *
776 hid_get_descriptor_from_usb(struct usb_config_descriptor *cd,
777     struct usb_interface_descriptor *id)
778 {
779         struct usb_descriptor *desc = (void *)id;
780
781         if (desc == NULL) {
782                 return (NULL);
783         }
784         while ((desc = usb_desc_foreach(cd, desc))) {
785                 if ((desc->bDescriptorType == UDESC_HID) &&
786                     (desc->bLength >= USB_HID_DESCRIPTOR_SIZE(0))) {
787                         return (void *)desc;
788                 }
789                 if (desc->bDescriptorType == UDESC_INTERFACE) {
790                         break;
791                 }
792         }
793         return (NULL);
794 }
795
796 /*------------------------------------------------------------------------*
797  *      usbd_req_get_hid_desc
798  *
799  * This function will read out an USB report descriptor from the USB
800  * device.
801  *
802  * Return values:
803  * NULL: Failure.
804  * Else: Success. The pointer should eventually be passed to free().
805  *------------------------------------------------------------------------*/
806 usb_error_t
807 usbd_req_get_hid_desc(struct usb_device *udev, struct mtx *mtx,
808     void **descp, uint16_t *sizep,
809     struct malloc_type *mem, uint8_t iface_index)
810 {
811         struct usb_interface *iface = usbd_get_iface(udev, iface_index);
812         struct usb_hid_descriptor *hid;
813         usb_error_t err;
814
815         if ((iface == NULL) || (iface->idesc == NULL)) {
816                 return (USB_ERR_INVAL);
817         }
818         hid = hid_get_descriptor_from_usb
819             (usbd_get_config_descriptor(udev), iface->idesc);
820
821         if (hid == NULL) {
822                 return (USB_ERR_IOERROR);
823         }
824         *sizep = UGETW(hid->descrs[0].wDescriptorLength);
825         if (*sizep == 0) {
826                 return (USB_ERR_IOERROR);
827         }
828         if (mtx)
829                 mtx_unlock(mtx);
830
831         *descp = malloc(*sizep, mem, M_ZERO | M_WAITOK);
832
833         if (mtx)
834                 mtx_lock(mtx);
835
836         if (*descp == NULL) {
837                 return (USB_ERR_NOMEM);
838         }
839         err = usbd_req_get_report_descriptor
840             (udev, mtx, *descp, *sizep, iface_index);
841
842         if (err) {
843                 free(*descp, mem);
844                 *descp = NULL;
845                 return (err);
846         }
847         return (USB_ERR_NORMAL_COMPLETION);
848 }
849
850 /*------------------------------------------------------------------------*
851  *      hid_is_mouse
852  *
853  * This function will decide if a USB descriptor belongs to a USB mouse.
854  *
855  * Return values:
856  * Zero: Not a USB mouse.
857  * Else: Is a USB mouse.
858  *------------------------------------------------------------------------*/
859 int
860 hid_is_mouse(const void *d_ptr, uint16_t d_len)
861 {
862         struct hid_data *hd;
863         struct hid_item hi;
864         int mdepth;
865         int found;
866
867         hd = hid_start_parse(d_ptr, d_len, 1 << hid_input);
868         if (hd == NULL)
869                 return (0);
870
871         mdepth = 0;
872         found = 0;
873
874         while (hid_get_item(hd, &hi)) {
875                 switch (hi.kind) {
876                 case hid_collection:
877                         if (mdepth != 0)
878                                 mdepth++;
879                         else if (hi.collection == 1 &&
880                              hi.usage ==
881                               HID_USAGE2(HUP_GENERIC_DESKTOP, HUG_MOUSE))
882                                 mdepth++;
883                         break;
884                 case hid_endcollection:
885                         if (mdepth != 0)
886                                 mdepth--;
887                         break;
888                 case hid_input:
889                         if (mdepth == 0)
890                                 break;
891                         if (hi.usage ==
892                              HID_USAGE2(HUP_GENERIC_DESKTOP, HUG_X) &&
893                             (hi.flags & (HIO_CONST|HIO_RELATIVE)) == HIO_RELATIVE)
894                                 found++;
895                         if (hi.usage ==
896                              HID_USAGE2(HUP_GENERIC_DESKTOP, HUG_Y) &&
897                             (hi.flags & (HIO_CONST|HIO_RELATIVE)) == HIO_RELATIVE)
898                                 found++;
899                         break;
900                 default:
901                         break;
902                 }
903         }
904         hid_end_parse(hd);
905         return (found);
906 }
907
908 /*------------------------------------------------------------------------*
909  *      hid_is_keyboard
910  *
911  * This function will decide if a USB descriptor belongs to a USB keyboard.
912  *
913  * Return values:
914  * Zero: Not a USB keyboard.
915  * Else: Is a USB keyboard.
916  *------------------------------------------------------------------------*/
917 int
918 hid_is_keyboard(const void *d_ptr, uint16_t d_len)
919 {
920         if (hid_is_collection(d_ptr, d_len,
921             HID_USAGE2(HUP_GENERIC_DESKTOP, HUG_KEYBOARD)))
922                 return (1);
923         return (0);
924 }