1/* -*- Mode: C; indent-tabs-mode:t ; c-basic-offset:8 -*- */
2/*
3 * I/O functions for libusb
4 * Copyright © 2007-2009 Daniel Drake <dsd@gentoo.org>
5 * Copyright © 2001 Johannes Erdfelt <johannes@erdfelt.com>
6 *
7 * This library is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU Lesser General Public
9 * License as published by the Free Software Foundation; either
10 * version 2.1 of the License, or (at your option) any later version.
11 *
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
15 * Lesser General Public License for more details.
16 *
17 * You should have received a copy of the GNU Lesser General Public
18 * License along with this library; if not, write to the Free Software
19 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20 */
21
22#include <config.h>
23
24#include <assert.h>
25#include <errno.h>
26#include <stdint.h>
27#include <stdlib.h>
28#include <string.h>
29#include <time.h>
30#ifdef HAVE_SIGNAL_H
31#include <signal.h>
32#endif
33#ifdef HAVE_SYS_TIME_H
34#include <sys/time.h>
35#endif
36#ifdef USBI_TIMERFD_AVAILABLE
37#include <sys/timerfd.h>
38#endif
39
40#include "libusbi.h"
41#include "hotplug.h"
42
43/**
44 * \page libusb_io Synchronous and asynchronous device I/O
45 *
46 * \section io_intro Introduction
47 *
48 * If you're using libusb in your application, you're probably wanting to
49 * perform I/O with devices - you want to perform USB data transfers.
50 *
51 * libusb offers two separate interfaces for device I/O. This page aims to
52 * introduce the two in order to help you decide which one is more suitable
53 * for your application. You can also choose to use both interfaces in your
54 * application by considering each transfer on a case-by-case basis.
55 *
56 * Once you have read through the following discussion, you should consult the
57 * detailed API documentation pages for the details:
58 * - \ref libusb_syncio
59 * - \ref libusb_asyncio
60 *
61 * \section theory Transfers at a logical level
62 *
63 * At a logical level, USB transfers typically happen in two parts. For
64 * example, when reading data from a endpoint:
65 * -# A request for data is sent to the device
66 * -# Some time later, the incoming data is received by the host
67 *
68 * or when writing data to an endpoint:
69 *
70 * -# The data is sent to the device
71 * -# Some time later, the host receives acknowledgement from the device that
72 *    the data has been transferred.
73 *
74 * There may be an indefinite delay between the two steps. Consider a
75 * fictional USB input device with a button that the user can press. In order
76 * to determine when the button is pressed, you would likely submit a request
77 * to read data on a bulk or interrupt endpoint and wait for data to arrive.
78 * Data will arrive when the button is pressed by the user, which is
79 * potentially hours later.
80 *
81 * libusb offers both a synchronous and an asynchronous interface to performing
82 * USB transfers. The main difference is that the synchronous interface
83 * combines both steps indicated above into a single function call, whereas
84 * the asynchronous interface separates them.
85 *
86 * \section sync The synchronous interface
87 *
88 * The synchronous I/O interface allows you to perform a USB transfer with
89 * a single function call. When the function call returns, the transfer has
90 * completed and you can parse the results.
91 *
92 * If you have used the libusb-0.1 before, this I/O style will seem familar to
93 * you. libusb-0.1 only offered a synchronous interface.
94 *
95 * In our input device example, to read button presses you might write code
96 * in the following style:
97\code
98unsigned char data[4];
99int actual_length;
100int r = libusb_bulk_transfer(dev_handle, LIBUSB_ENDPOINT_IN, data, sizeof(data), &actual_length, 0);
101if (r == 0 && actual_length == sizeof(data)) {
102	// results of the transaction can now be found in the data buffer
103	// parse them here and report button press
104} else {
105	error();
106}
107\endcode
108 *
109 * The main advantage of this model is simplicity: you did everything with
110 * a single simple function call.
111 *
112 * However, this interface has its limitations. Your application will sleep
113 * inside libusb_bulk_transfer() until the transaction has completed. If it
114 * takes the user 3 hours to press the button, your application will be
115 * sleeping for that long. Execution will be tied up inside the library -
116 * the entire thread will be useless for that duration.
117 *
118 * Another issue is that by tieing up the thread with that single transaction
119 * there is no possibility of performing I/O with multiple endpoints and/or
120 * multiple devices simultaneously, unless you resort to creating one thread
121 * per transaction.
122 *
123 * Additionally, there is no opportunity to cancel the transfer after the
124 * request has been submitted.
125 *
126 * For details on how to use the synchronous API, see the
127 * \ref libusb_syncio "synchronous I/O API documentation" pages.
128 *
129 * \section async The asynchronous interface
130 *
131 * Asynchronous I/O is the most significant new feature in libusb-1.0.
132 * Although it is a more complex interface, it solves all the issues detailed
133 * above.
134 *
135 * Instead of providing which functions that block until the I/O has complete,
136 * libusb's asynchronous interface presents non-blocking functions which
137 * begin a transfer and then return immediately. Your application passes a
138 * callback function pointer to this non-blocking function, which libusb will
139 * call with the results of the transaction when it has completed.
140 *
141 * Transfers which have been submitted through the non-blocking functions
142 * can be cancelled with a separate function call.
143 *
144 * The non-blocking nature of this interface allows you to be simultaneously
145 * performing I/O to multiple endpoints on multiple devices, without having
146 * to use threads.
147 *
148 * This added flexibility does come with some complications though:
149 * - In the interest of being a lightweight library, libusb does not create
150 * threads and can only operate when your application is calling into it. Your
151 * application must call into libusb from it's main loop when events are ready
152 * to be handled, or you must use some other scheme to allow libusb to
153 * undertake whatever work needs to be done.
154 * - libusb also needs to be called into at certain fixed points in time in
155 * order to accurately handle transfer timeouts.
156 * - Memory handling becomes more complex. You cannot use stack memory unless
157 * the function with that stack is guaranteed not to return until the transfer
158 * callback has finished executing.
159 * - You generally lose some linearity from your code flow because submitting
160 * the transfer request is done in a separate function from where the transfer
161 * results are handled. This becomes particularly obvious when you want to
162 * submit a second transfer based on the results of an earlier transfer.
163 *
164 * Internally, libusb's synchronous interface is expressed in terms of function
165 * calls to the asynchronous interface.
166 *
167 * For details on how to use the asynchronous API, see the
168 * \ref libusb_asyncio "asynchronous I/O API" documentation pages.
169 */
170
171
172/**
173 * \page libusb_packetoverflow Packets and overflows
174 *
175 * \section packets Packet abstraction
176 *
177 * The USB specifications describe how data is transmitted in packets, with
178 * constraints on packet size defined by endpoint descriptors. The host must
179 * not send data payloads larger than the endpoint's maximum packet size.
180 *
181 * libusb and the underlying OS abstract out the packet concept, allowing you
182 * to request transfers of any size. Internally, the request will be divided
183 * up into correctly-sized packets. You do not have to be concerned with
184 * packet sizes, but there is one exception when considering overflows.
185 *
186 * \section overflow Bulk/interrupt transfer overflows
187 *
188 * When requesting data on a bulk endpoint, libusb requires you to supply a
189 * buffer and the maximum number of bytes of data that libusb can put in that
190 * buffer. However, the size of the buffer is not communicated to the device -
191 * the device is just asked to send any amount of data.
192 *
193 * There is no problem if the device sends an amount of data that is less than
194 * or equal to the buffer size. libusb reports this condition to you through
195 * the \ref libusb_transfer::actual_length "libusb_transfer.actual_length"
196 * field.
197 *
198 * Problems may occur if the device attempts to send more data than can fit in
199 * the buffer. libusb reports LIBUSB_TRANSFER_OVERFLOW for this condition but
200 * other behaviour is largely undefined: actual_length may or may not be
201 * accurate, the chunk of data that can fit in the buffer (before overflow)
202 * may or may not have been transferred.
203 *
204 * Overflows are nasty, but can be avoided. Even though you were told to
205 * ignore packets above, think about the lower level details: each transfer is
206 * split into packets (typically small, with a maximum size of 512 bytes).
207 * Overflows can only happen if the final packet in an incoming data transfer
208 * is smaller than the actual packet that the device wants to transfer.
209 * Therefore, you will never see an overflow if your transfer buffer size is a
210 * multiple of the endpoint's packet size: the final packet will either
211 * fill up completely or will be only partially filled.
212 */
213
214/**
215 * @defgroup libusb_asyncio Asynchronous device I/O
216 *
217 * This page details libusb's asynchronous (non-blocking) API for USB device
218 * I/O. This interface is very powerful but is also quite complex - you will
219 * need to read this page carefully to understand the necessary considerations
220 * and issues surrounding use of this interface. Simplistic applications
221 * may wish to consider the \ref libusb_syncio "synchronous I/O API" instead.
222 *
223 * The asynchronous interface is built around the idea of separating transfer
224 * submission and handling of transfer completion (the synchronous model
225 * combines both of these into one). There may be a long delay between
226 * submission and completion, however the asynchronous submission function
227 * is non-blocking so will return control to your application during that
228 * potentially long delay.
229 *
230 * \section asyncabstraction Transfer abstraction
231 *
232 * For the asynchronous I/O, libusb implements the concept of a generic
233 * transfer entity for all types of I/O (control, bulk, interrupt,
234 * isochronous). The generic transfer object must be treated slightly
235 * differently depending on which type of I/O you are performing with it.
236 *
237 * This is represented by the public libusb_transfer structure type.
238 *
239 * \section asynctrf Asynchronous transfers
240 *
241 * We can view asynchronous I/O as a 5 step process:
242 * -# <b>Allocation</b>: allocate a libusb_transfer
243 * -# <b>Filling</b>: populate the libusb_transfer instance with information
244 *    about the transfer you wish to perform
245 * -# <b>Submission</b>: ask libusb to submit the transfer
246 * -# <b>Completion handling</b>: examine transfer results in the
247 *    libusb_transfer structure
248 * -# <b>Deallocation</b>: clean up resources
249 *
250 *
251 * \subsection asyncalloc Allocation
252 *
253 * This step involves allocating memory for a USB transfer. This is the
254 * generic transfer object mentioned above. At this stage, the transfer
255 * is "blank" with no details about what type of I/O it will be used for.
256 *
257 * Allocation is done with the libusb_alloc_transfer() function. You must use
258 * this function rather than allocating your own transfers.
259 *
260 * \subsection asyncfill Filling
261 *
262 * This step is where you take a previously allocated transfer and fill it
263 * with information to determine the message type and direction, data buffer,
264 * callback function, etc.
265 *
266 * You can either fill the required fields yourself or you can use the
267 * helper functions: libusb_fill_control_transfer(), libusb_fill_bulk_transfer()
268 * and libusb_fill_interrupt_transfer().
269 *
270 * \subsection asyncsubmit Submission
271 *
272 * When you have allocated a transfer and filled it, you can submit it using
273 * libusb_submit_transfer(). This function returns immediately but can be
274 * regarded as firing off the I/O request in the background.
275 *
276 * \subsection asynccomplete Completion handling
277 *
278 * After a transfer has been submitted, one of four things can happen to it:
279 *
280 * - The transfer completes (i.e. some data was transferred)
281 * - The transfer has a timeout and the timeout expires before all data is
282 * transferred
283 * - The transfer fails due to an error
284 * - The transfer is cancelled
285 *
286 * Each of these will cause the user-specified transfer callback function to
287 * be invoked. It is up to the callback function to determine which of the
288 * above actually happened and to act accordingly.
289 *
290 * The user-specified callback is passed a pointer to the libusb_transfer
291 * structure which was used to setup and submit the transfer. At completion
292 * time, libusb has populated this structure with results of the transfer:
293 * success or failure reason, number of bytes of data transferred, etc. See
294 * the libusb_transfer structure documentation for more information.
295 *
296 * <b>Important Note</b>: The user-specified callback is called from an event
297 * handling context. It is therefore important that no calls are made into
298 * libusb that will attempt to perform any event handling. Examples of such
299 * functions are any listed in the \ref libusb_syncio "synchronous API" and any of
300 * the blocking functions that retrieve \ref libusb_desc "USB descriptors".
301 *
302 * \subsection Deallocation
303 *
304 * When a transfer has completed (i.e. the callback function has been invoked),
305 * you are advised to free the transfer (unless you wish to resubmit it, see
306 * below). Transfers are deallocated with libusb_free_transfer().
307 *
308 * It is undefined behaviour to free a transfer which has not completed.
309 *
310 * \section asyncresubmit Resubmission
311 *
312 * You may be wondering why allocation, filling, and submission are all
313 * separated above where they could reasonably be combined into a single
314 * operation.
315 *
316 * The reason for separation is to allow you to resubmit transfers without
317 * having to allocate new ones every time. This is especially useful for
318 * common situations dealing with interrupt endpoints - you allocate one
319 * transfer, fill and submit it, and when it returns with results you just
320 * resubmit it for the next interrupt.
321 *
322 * \section asynccancel Cancellation
323 *
324 * Another advantage of using the asynchronous interface is that you have
325 * the ability to cancel transfers which have not yet completed. This is
326 * done by calling the libusb_cancel_transfer() function.
327 *
328 * libusb_cancel_transfer() is asynchronous/non-blocking in itself. When the
329 * cancellation actually completes, the transfer's callback function will
330 * be invoked, and the callback function should check the transfer status to
331 * determine that it was cancelled.
332 *
333 * Freeing the transfer after it has been cancelled but before cancellation
334 * has completed will result in undefined behaviour.
335 *
336 * When a transfer is cancelled, some of the data may have been transferred.
337 * libusb will communicate this to you in the transfer callback. Do not assume
338 * that no data was transferred.
339 *
340 * \section bulk_overflows Overflows on device-to-host bulk/interrupt endpoints
341 *
342 * If your device does not have predictable transfer sizes (or it misbehaves),
343 * your application may submit a request for data on an IN endpoint which is
344 * smaller than the data that the device wishes to send. In some circumstances
345 * this will cause an overflow, which is a nasty condition to deal with. See
346 * the \ref libusb_packetoverflow page for discussion.
347 *
348 * \section asyncctrl Considerations for control transfers
349 *
350 * The <tt>libusb_transfer</tt> structure is generic and hence does not
351 * include specific fields for the control-specific setup packet structure.
352 *
353 * In order to perform a control transfer, you must place the 8-byte setup
354 * packet at the start of the data buffer. To simplify this, you could
355 * cast the buffer pointer to type struct libusb_control_setup, or you can
356 * use the helper function libusb_fill_control_setup().
357 *
358 * The wLength field placed in the setup packet must be the length you would
359 * expect to be sent in the setup packet: the length of the payload that
360 * follows (or the expected maximum number of bytes to receive). However,
361 * the length field of the libusb_transfer object must be the length of
362 * the data buffer - i.e. it should be wLength <em>plus</em> the size of
363 * the setup packet (LIBUSB_CONTROL_SETUP_SIZE).
364 *
365 * If you use the helper functions, this is simplified for you:
366 * -# Allocate a buffer of size LIBUSB_CONTROL_SETUP_SIZE plus the size of the
367 * data you are sending/requesting.
368 * -# Call libusb_fill_control_setup() on the data buffer, using the transfer
369 * request size as the wLength value (i.e. do not include the extra space you
370 * allocated for the control setup).
371 * -# If this is a host-to-device transfer, place the data to be transferred
372 * in the data buffer, starting at offset LIBUSB_CONTROL_SETUP_SIZE.
373 * -# Call libusb_fill_control_transfer() to associate the data buffer with
374 * the transfer (and to set the remaining details such as callback and timeout).
375 *   - Note that there is no parameter to set the length field of the transfer.
376 *     The length is automatically inferred from the wLength field of the setup
377 *     packet.
378 * -# Submit the transfer.
379 *
380 * The multi-byte control setup fields (wValue, wIndex and wLength) must
381 * be given in little-endian byte order (the endianness of the USB bus).
382 * Endianness conversion is transparently handled by
383 * libusb_fill_control_setup() which is documented to accept host-endian
384 * values.
385 *
386 * Further considerations are needed when handling transfer completion in
387 * your callback function:
388 * - As you might expect, the setup packet will still be sitting at the start
389 * of the data buffer.
390 * - If this was a device-to-host transfer, the received data will be sitting
391 * at offset LIBUSB_CONTROL_SETUP_SIZE into the buffer.
392 * - The actual_length field of the transfer structure is relative to the
393 * wLength of the setup packet, rather than the size of the data buffer. So,
394 * if your wLength was 4, your transfer's <tt>length</tt> was 12, then you
395 * should expect an <tt>actual_length</tt> of 4 to indicate that the data was
396 * transferred in entirity.
397 *
398 * To simplify parsing of setup packets and obtaining the data from the
399 * correct offset, you may wish to use the libusb_control_transfer_get_data()
400 * and libusb_control_transfer_get_setup() functions within your transfer
401 * callback.
402 *
403 * Even though control endpoints do not halt, a completed control transfer
404 * may have a LIBUSB_TRANSFER_STALL status code. This indicates the control
405 * request was not supported.
406 *
407 * \section asyncintr Considerations for interrupt transfers
408 *
409 * All interrupt transfers are performed using the polling interval presented
410 * by the bInterval value of the endpoint descriptor.
411 *
412 * \section asynciso Considerations for isochronous transfers
413 *
414 * Isochronous transfers are more complicated than transfers to
415 * non-isochronous endpoints.
416 *
417 * To perform I/O to an isochronous endpoint, allocate the transfer by calling
418 * libusb_alloc_transfer() with an appropriate number of isochronous packets.
419 *
420 * During filling, set \ref libusb_transfer::type "type" to
421 * \ref libusb_transfer_type::LIBUSB_TRANSFER_TYPE_ISOCHRONOUS
422 * "LIBUSB_TRANSFER_TYPE_ISOCHRONOUS", and set
423 * \ref libusb_transfer::num_iso_packets "num_iso_packets" to a value less than
424 * or equal to the number of packets you requested during allocation.
425 * libusb_alloc_transfer() does not set either of these fields for you, given
426 * that you might not even use the transfer on an isochronous endpoint.
427 *
428 * Next, populate the length field for the first num_iso_packets entries in
429 * the \ref libusb_transfer::iso_packet_desc "iso_packet_desc" array. Section
430 * 5.6.3 of the USB2 specifications describe how the maximum isochronous
431 * packet length is determined by the wMaxPacketSize field in the endpoint
432 * descriptor.
433 * Two functions can help you here:
434 *
435 * - libusb_get_max_iso_packet_size() is an easy way to determine the max
436 *   packet size for an isochronous endpoint. Note that the maximum packet
437 *   size is actually the maximum number of bytes that can be transmitted in
438 *   a single microframe, therefore this function multiplies the maximum number
439 *   of bytes per transaction by the number of transaction opportunities per
440 *   microframe.
441 * - libusb_set_iso_packet_lengths() assigns the same length to all packets
442 *   within a transfer, which is usually what you want.
443 *
444 * For outgoing transfers, you'll obviously fill the buffer and populate the
445 * packet descriptors in hope that all the data gets transferred. For incoming
446 * transfers, you must ensure the buffer has sufficient capacity for
447 * the situation where all packets transfer the full amount of requested data.
448 *
449 * Completion handling requires some extra consideration. The
450 * \ref libusb_transfer::actual_length "actual_length" field of the transfer
451 * is meaningless and should not be examined; instead you must refer to the
452 * \ref libusb_iso_packet_descriptor::actual_length "actual_length" field of
453 * each individual packet.
454 *
455 * The \ref libusb_transfer::status "status" field of the transfer is also a
456 * little misleading:
457 *  - If the packets were submitted and the isochronous data microframes
458 *    completed normally, status will have value
459 *    \ref libusb_transfer_status::LIBUSB_TRANSFER_COMPLETED
460 *    "LIBUSB_TRANSFER_COMPLETED". Note that bus errors and software-incurred
461 *    delays are not counted as transfer errors; the transfer.status field may
462 *    indicate COMPLETED even if some or all of the packets failed. Refer to
463 *    the \ref libusb_iso_packet_descriptor::status "status" field of each
464 *    individual packet to determine packet failures.
465 *  - The status field will have value
466 *    \ref libusb_transfer_status::LIBUSB_TRANSFER_ERROR
467 *    "LIBUSB_TRANSFER_ERROR" only when serious errors were encountered.
468 *  - Other transfer status codes occur with normal behaviour.
469 *
470 * The data for each packet will be found at an offset into the buffer that
471 * can be calculated as if each prior packet completed in full. The
472 * libusb_get_iso_packet_buffer() and libusb_get_iso_packet_buffer_simple()
473 * functions may help you here.
474 *
475 * <b>Note</b>: Some operating systems (e.g. Linux) may impose limits on the
476 * length of individual isochronous packets and/or the total length of the
477 * isochronous transfer. Such limits can be difficult for libusb to detect,
478 * so the library will simply try and submit the transfer as set up by you.
479 * If the transfer fails to submit because it is too large,
480 * libusb_submit_transfer() will return
481 * \ref libusb_error::LIBUSB_ERROR_INVALID_PARAM "LIBUSB_ERROR_INVALID_PARAM".
482 *
483 * \section asyncmem Memory caveats
484 *
485 * In most circumstances, it is not safe to use stack memory for transfer
486 * buffers. This is because the function that fired off the asynchronous
487 * transfer may return before libusb has finished using the buffer, and when
488 * the function returns it's stack gets destroyed. This is true for both
489 * host-to-device and device-to-host transfers.
490 *
491 * The only case in which it is safe to use stack memory is where you can
492 * guarantee that the function owning the stack space for the buffer does not
493 * return until after the transfer's callback function has completed. In every
494 * other case, you need to use heap memory instead.
495 *
496 * \section asyncflags Fine control
497 *
498 * Through using this asynchronous interface, you may find yourself repeating
499 * a few simple operations many times. You can apply a bitwise OR of certain
500 * flags to a transfer to simplify certain things:
501 * - \ref libusb_transfer_flags::LIBUSB_TRANSFER_SHORT_NOT_OK
502 *   "LIBUSB_TRANSFER_SHORT_NOT_OK" results in transfers which transferred
503 *   less than the requested amount of data being marked with status
504 *   \ref libusb_transfer_status::LIBUSB_TRANSFER_ERROR "LIBUSB_TRANSFER_ERROR"
505 *   (they would normally be regarded as COMPLETED)
506 * - \ref libusb_transfer_flags::LIBUSB_TRANSFER_FREE_BUFFER
507 *   "LIBUSB_TRANSFER_FREE_BUFFER" allows you to ask libusb to free the transfer
508 *   buffer when freeing the transfer.
509 * - \ref libusb_transfer_flags::LIBUSB_TRANSFER_FREE_TRANSFER
510 *   "LIBUSB_TRANSFER_FREE_TRANSFER" causes libusb to automatically free the
511 *   transfer after the transfer callback returns.
512 *
513 * \section asyncevent Event handling
514 *
515 * An asynchronous model requires that libusb perform work at various
516 * points in time - namely processing the results of previously-submitted
517 * transfers and invoking the user-supplied callback function.
518 *
519 * This gives rise to the libusb_handle_events() function which your
520 * application must call into when libusb has work do to. This gives libusb
521 * the opportunity to reap pending transfers, invoke callbacks, etc.
522 *
523 * There are 2 different approaches to dealing with libusb_handle_events:
524 *
525 * -# Repeatedly call libusb_handle_events() in blocking mode from a dedicated
526 *    thread.
527 * -# Integrate libusb with your application's main event loop. libusb
528 *    exposes a set of file descriptors which allow you to do this.
529 *
530 * The first approach has the big advantage that it will also work on Windows
531 * were libusb' poll API for select / poll integration is not available. So
532 * if you want to support Windows and use the async API, you must use this
533 * approach, see the \ref eventthread "Using an event handling thread" section
534 * below for details.
535 *
536 * If you prefer a single threaded approach with a single central event loop,
537 * see the \ref libusb_poll "polling and timing" section for how to integrate libusb
538 * into your application's main event loop.
539 *
540 * \section eventthread Using an event handling thread
541 *
542 * Lets begin with stating the obvious: If you're going to use a separate
543 * thread for libusb event handling, your callback functions MUST be
544 * threadsafe.
545 *
546 * Other then that doing event handling from a separate thread, is mostly
547 * simple. You can use an event thread function as follows:
548\code
549void *event_thread_func(void *ctx)
550{
551    while (event_thread_run)
552        libusb_handle_events(ctx);
553
554    return NULL;
555}
556\endcode
557 *
558 * There is one caveat though, stopping this thread requires setting the
559 * event_thread_run variable to 0, and after that libusb_handle_events() needs
560 * to return control to event_thread_func. But unless some event happens,
561 * libusb_handle_events() will not return.
562 *
563 * There are 2 different ways of dealing with this, depending on if your
564 * application uses libusb' \ref libusb_hotplug "hotplug" support or not.
565 *
566 * Applications which do not use hotplug support, should not start the event
567 * thread until after their first call to libusb_open(), and should stop the
568 * thread when closing the last open device as follows:
569\code
570void my_close_handle(libusb_device_handle *dev_handle)
571{
572    if (open_devs == 1)
573        event_thread_run = 0;
574
575    libusb_close(dev_handle); // This wakes up libusb_handle_events()
576
577    if (open_devs == 1)
578        pthread_join(event_thread);
579
580    open_devs--;
581}
582\endcode
583 *
584 * Applications using hotplug support should start the thread at program init,
585 * after having successfully called libusb_hotplug_register_callback(), and
586 * should stop the thread at program exit as follows:
587\code
588void my_libusb_exit(void)
589{
590    event_thread_run = 0;
591    libusb_hotplug_deregister_callback(ctx, hotplug_cb_handle); // This wakes up libusb_handle_events()
592    pthread_join(event_thread);
593    libusb_exit(ctx);
594}
595\endcode
596 */
597
598/**
599 * @defgroup libusb_poll Polling and timing
600 *
601 * This page documents libusb's functions for polling events and timing.
602 * These functions are only necessary for users of the
603 * \ref libusb_asyncio "asynchronous API". If you are only using the simpler
604 * \ref libusb_syncio "synchronous API" then you do not need to ever call these
605 * functions.
606 *
607 * The justification for the functionality described here has already been
608 * discussed in the \ref asyncevent "event handling" section of the
609 * asynchronous API documentation. In summary, libusb does not create internal
610 * threads for event processing and hence relies on your application calling
611 * into libusb at certain points in time so that pending events can be handled.
612 *
613 * Your main loop is probably already calling poll() or select() or a
614 * variant on a set of file descriptors for other event sources (e.g. keyboard
615 * button presses, mouse movements, network sockets, etc). You then add
616 * libusb's file descriptors to your poll()/select() calls, and when activity
617 * is detected on such descriptors you know it is time to call
618 * libusb_handle_events().
619 *
620 * There is one final event handling complication. libusb supports
621 * asynchronous transfers which time out after a specified time period.
622 *
623 * On some platforms a timerfd is used, so the timeout handling is just another
624 * fd, on other platforms this requires that libusb is called into at or after
625 * the timeout to handle it. So, in addition to considering libusb's file
626 * descriptors in your main event loop, you must also consider that libusb
627 * sometimes needs to be called into at fixed points in time even when there
628 * is no file descriptor activity, see \ref polltime details.
629 *
630 * In order to know precisely when libusb needs to be called into, libusb
631 * offers you a set of pollable file descriptors and information about when
632 * the next timeout expires.
633 *
634 * If you are using the asynchronous I/O API, you must take one of the two
635 * following options, otherwise your I/O will not complete.
636 *
637 * \section pollsimple The simple option
638 *
639 * If your application revolves solely around libusb and does not need to
640 * handle other event sources, you can have a program structure as follows:
641\code
642// initialize libusb
643// find and open device
644// maybe fire off some initial async I/O
645
646while (user_has_not_requested_exit)
647	libusb_handle_events(ctx);
648
649// clean up and exit
650\endcode
651 *
652 * With such a simple main loop, you do not have to worry about managing
653 * sets of file descriptors or handling timeouts. libusb_handle_events() will
654 * handle those details internally.
655 *
656 * \section libusb_pollmain The more advanced option
657 *
658 * \note This functionality is currently only available on Unix-like platforms.
659 * On Windows, libusb_get_pollfds() simply returns NULL. Applications which
660 * want to support Windows are advised to use an \ref eventthread
661 * "event handling thread" instead.
662 *
663 * In more advanced applications, you will already have a main loop which
664 * is monitoring other event sources: network sockets, X11 events, mouse
665 * movements, etc. Through exposing a set of file descriptors, libusb is
666 * designed to cleanly integrate into such main loops.
667 *
668 * In addition to polling file descriptors for the other event sources, you
669 * take a set of file descriptors from libusb and monitor those too. When you
670 * detect activity on libusb's file descriptors, you call
671 * libusb_handle_events_timeout() in non-blocking mode.
672 *
673 * What's more, libusb may also need to handle events at specific moments in
674 * time. No file descriptor activity is generated at these times, so your
675 * own application needs to be continually aware of when the next one of these
676 * moments occurs (through calling libusb_get_next_timeout()), and then it
677 * needs to call libusb_handle_events_timeout() in non-blocking mode when
678 * these moments occur. This means that you need to adjust your
679 * poll()/select() timeout accordingly.
680 *
681 * libusb provides you with a set of file descriptors to poll and expects you
682 * to poll all of them, treating them as a single entity. The meaning of each
683 * file descriptor in the set is an internal implementation detail,
684 * platform-dependent and may vary from release to release. Don't try and
685 * interpret the meaning of the file descriptors, just do as libusb indicates,
686 * polling all of them at once.
687 *
688 * In pseudo-code, you want something that looks like:
689\code
690// initialise libusb
691
692libusb_get_pollfds(ctx)
693while (user has not requested application exit) {
694	libusb_get_next_timeout(ctx);
695	poll(on libusb file descriptors plus any other event sources of interest,
696		using a timeout no larger than the value libusb just suggested)
697	if (poll() indicated activity on libusb file descriptors)
698		libusb_handle_events_timeout(ctx, &zero_tv);
699	if (time has elapsed to or beyond the libusb timeout)
700		libusb_handle_events_timeout(ctx, &zero_tv);
701	// handle events from other sources here
702}
703
704// clean up and exit
705\endcode
706 *
707 * \subsection polltime Notes on time-based events
708 *
709 * The above complication with having to track time and call into libusb at
710 * specific moments is a bit of a headache. For maximum compatibility, you do
711 * need to write your main loop as above, but you may decide that you can
712 * restrict the supported platforms of your application and get away with
713 * a more simplistic scheme.
714 *
715 * These time-based event complications are \b not required on the following
716 * platforms:
717 *  - Darwin
718 *  - Linux, provided that the following version requirements are satisfied:
719 *   - Linux v2.6.27 or newer, compiled with timerfd support
720 *   - glibc v2.9 or newer
721 *   - libusb v1.0.5 or newer
722 *
723 * Under these configurations, libusb_get_next_timeout() will \em always return
724 * 0, so your main loop can be simplified to:
725\code
726// initialise libusb
727
728libusb_get_pollfds(ctx)
729while (user has not requested application exit) {
730	poll(on libusb file descriptors plus any other event sources of interest,
731		using any timeout that you like)
732	if (poll() indicated activity on libusb file descriptors)
733		libusb_handle_events_timeout(ctx, &zero_tv);
734	// handle events from other sources here
735}
736
737// clean up and exit
738\endcode
739 *
740 * Do remember that if you simplify your main loop to the above, you will
741 * lose compatibility with some platforms (including legacy Linux platforms,
742 * and <em>any future platforms supported by libusb which may have time-based
743 * event requirements</em>). The resultant problems will likely appear as
744 * strange bugs in your application.
745 *
746 * You can use the libusb_pollfds_handle_timeouts() function to do a runtime
747 * check to see if it is safe to ignore the time-based event complications.
748 * If your application has taken the shortcut of ignoring libusb's next timeout
749 * in your main loop, then you are advised to check the return value of
750 * libusb_pollfds_handle_timeouts() during application startup, and to abort
751 * if the platform does suffer from these timing complications.
752 *
753 * \subsection fdsetchange Changes in the file descriptor set
754 *
755 * The set of file descriptors that libusb uses as event sources may change
756 * during the life of your application. Rather than having to repeatedly
757 * call libusb_get_pollfds(), you can set up notification functions for when
758 * the file descriptor set changes using libusb_set_pollfd_notifiers().
759 *
760 * \subsection mtissues Multi-threaded considerations
761 *
762 * Unfortunately, the situation is complicated further when multiple threads
763 * come into play. If two threads are monitoring the same file descriptors,
764 * the fact that only one thread will be woken up when an event occurs causes
765 * some headaches.
766 *
767 * The events lock, event waiters lock, and libusb_handle_events_locked()
768 * entities are added to solve these problems. You do not need to be concerned
769 * with these entities otherwise.
770 *
771 * See the extra documentation: \ref libusb_mtasync
772 */
773
774/** \page libusb_mtasync Multi-threaded applications and asynchronous I/O
775 *
776 * libusb is a thread-safe library, but extra considerations must be applied
777 * to applications which interact with libusb from multiple threads.
778 *
779 * The underlying issue that must be addressed is that all libusb I/O
780 * revolves around monitoring file descriptors through the poll()/select()
781 * system calls. This is directly exposed at the
782 * \ref libusb_asyncio "asynchronous interface" but it is important to note that the
783 * \ref libusb_syncio "synchronous interface" is implemented on top of the
784 * asynchonrous interface, therefore the same considerations apply.
785 *
786 * The issue is that if two or more threads are concurrently calling poll()
787 * or select() on libusb's file descriptors then only one of those threads
788 * will be woken up when an event arrives. The others will be completely
789 * oblivious that anything has happened.
790 *
791 * Consider the following pseudo-code, which submits an asynchronous transfer
792 * then waits for its completion. This style is one way you could implement a
793 * synchronous interface on top of the asynchronous interface (and libusb
794 * does something similar, albeit more advanced due to the complications
795 * explained on this page).
796 *
797\code
798void cb(struct libusb_transfer *transfer)
799{
800	int *completed = transfer->user_data;
801	*completed = 1;
802}
803
804void myfunc() {
805	struct libusb_transfer *transfer;
806	unsigned char buffer[LIBUSB_CONTROL_SETUP_SIZE] __attribute__ ((aligned (2)));
807	int completed = 0;
808
809	transfer = libusb_alloc_transfer(0);
810	libusb_fill_control_setup(buffer,
811		LIBUSB_REQUEST_TYPE_VENDOR | LIBUSB_ENDPOINT_OUT, 0x04, 0x01, 0, 0);
812	libusb_fill_control_transfer(transfer, dev, buffer, cb, &completed, 1000);
813	libusb_submit_transfer(transfer);
814
815	while (!completed) {
816		poll(libusb file descriptors, 120*1000);
817		if (poll indicates activity)
818			libusb_handle_events_timeout(ctx, &zero_tv);
819	}
820	printf("completed!");
821	// other code here
822}
823\endcode
824 *
825 * Here we are <em>serializing</em> completion of an asynchronous event
826 * against a condition - the condition being completion of a specific transfer.
827 * The poll() loop has a long timeout to minimize CPU usage during situations
828 * when nothing is happening (it could reasonably be unlimited).
829 *
830 * If this is the only thread that is polling libusb's file descriptors, there
831 * is no problem: there is no danger that another thread will swallow up the
832 * event that we are interested in. On the other hand, if there is another
833 * thread polling the same descriptors, there is a chance that it will receive
834 * the event that we were interested in. In this situation, <tt>myfunc()</tt>
835 * will only realise that the transfer has completed on the next iteration of
836 * the loop, <em>up to 120 seconds later.</em> Clearly a two-minute delay is
837 * undesirable, and don't even think about using short timeouts to circumvent
838 * this issue!
839 *
840 * The solution here is to ensure that no two threads are ever polling the
841 * file descriptors at the same time. A naive implementation of this would
842 * impact the capabilities of the library, so libusb offers the scheme
843 * documented below to ensure no loss of functionality.
844 *
845 * Before we go any further, it is worth mentioning that all libusb-wrapped
846 * event handling procedures fully adhere to the scheme documented below.
847 * This includes libusb_handle_events() and its variants, and all the
848 * synchronous I/O functions - libusb hides this headache from you.
849 *
850 * \section Using libusb_handle_events() from multiple threads
851 *
852 * Even when only using libusb_handle_events() and synchronous I/O functions,
853 * you can still have a race condition. You might be tempted to solve the
854 * above with libusb_handle_events() like so:
855 *
856\code
857	libusb_submit_transfer(transfer);
858
859	while (!completed) {
860		libusb_handle_events(ctx);
861	}
862	printf("completed!");
863\endcode
864 *
865 * This however has a race between the checking of completed and
866 * libusb_handle_events() acquiring the events lock, so another thread
867 * could have completed the transfer, resulting in this thread hanging
868 * until either a timeout or another event occurs. See also commit
869 * 6696512aade99bb15d6792af90ae329af270eba6 which fixes this in the
870 * synchronous API implementation of libusb.
871 *
872 * Fixing this race requires checking the variable completed only after
873 * taking the event lock, which defeats the concept of just calling
874 * libusb_handle_events() without worrying about locking. This is why
875 * libusb-1.0.9 introduces the new libusb_handle_events_timeout_completed()
876 * and libusb_handle_events_completed() functions, which handles doing the
877 * completion check for you after they have acquired the lock:
878 *
879\code
880	libusb_submit_transfer(transfer);
881
882	while (!completed) {
883		libusb_handle_events_completed(ctx, &completed);
884	}
885	printf("completed!");
886\endcode
887 *
888 * This nicely fixes the race in our example. Note that if all you want to
889 * do is submit a single transfer and wait for its completion, then using
890 * one of the synchronous I/O functions is much easier.
891 *
892 * \section eventlock The events lock
893 *
894 * The problem is when we consider the fact that libusb exposes file
895 * descriptors to allow for you to integrate asynchronous USB I/O into
896 * existing main loops, effectively allowing you to do some work behind
897 * libusb's back. If you do take libusb's file descriptors and pass them to
898 * poll()/select() yourself, you need to be aware of the associated issues.
899 *
900 * The first concept to be introduced is the events lock. The events lock
901 * is used to serialize threads that want to handle events, such that only
902 * one thread is handling events at any one time.
903 *
904 * You must take the events lock before polling libusb file descriptors,
905 * using libusb_lock_events(). You must release the lock as soon as you have
906 * aborted your poll()/select() loop, using libusb_unlock_events().
907 *
908 * \section threadwait Letting other threads do the work for you
909 *
910 * Although the events lock is a critical part of the solution, it is not
911 * enough on it's own. You might wonder if the following is sufficient...
912\code
913	libusb_lock_events(ctx);
914	while (!completed) {
915		poll(libusb file descriptors, 120*1000);
916		if (poll indicates activity)
917			libusb_handle_events_timeout(ctx, &zero_tv);
918	}
919	libusb_unlock_events(ctx);
920\endcode
921 * ...and the answer is that it is not. This is because the transfer in the
922 * code shown above may take a long time (say 30 seconds) to complete, and
923 * the lock is not released until the transfer is completed.
924 *
925 * Another thread with similar code that wants to do event handling may be
926 * working with a transfer that completes after a few milliseconds. Despite
927 * having such a quick completion time, the other thread cannot check that
928 * status of its transfer until the code above has finished (30 seconds later)
929 * due to contention on the lock.
930 *
931 * To solve this, libusb offers you a mechanism to determine when another
932 * thread is handling events. It also offers a mechanism to block your thread
933 * until the event handling thread has completed an event (and this mechanism
934 * does not involve polling of file descriptors).
935 *
936 * After determining that another thread is currently handling events, you
937 * obtain the <em>event waiters</em> lock using libusb_lock_event_waiters().
938 * You then re-check that some other thread is still handling events, and if
939 * so, you call libusb_wait_for_event().
940 *
941 * libusb_wait_for_event() puts your application to sleep until an event
942 * occurs, or until a thread releases the events lock. When either of these
943 * things happen, your thread is woken up, and should re-check the condition
944 * it was waiting on. It should also re-check that another thread is handling
945 * events, and if not, it should start handling events itself.
946 *
947 * This looks like the following, as pseudo-code:
948\code
949retry:
950if (libusb_try_lock_events(ctx) == 0) {
951	// we obtained the event lock: do our own event handling
952	while (!completed) {
953		if (!libusb_event_handling_ok(ctx)) {
954			libusb_unlock_events(ctx);
955			goto retry;
956		}
957		poll(libusb file descriptors, 120*1000);
958		if (poll indicates activity)
959			libusb_handle_events_locked(ctx, 0);
960	}
961	libusb_unlock_events(ctx);
962} else {
963	// another thread is doing event handling. wait for it to signal us that
964	// an event has completed
965	libusb_lock_event_waiters(ctx);
966
967	while (!completed) {
968		// now that we have the event waiters lock, double check that another
969		// thread is still handling events for us. (it may have ceased handling
970		// events in the time it took us to reach this point)
971		if (!libusb_event_handler_active(ctx)) {
972			// whoever was handling events is no longer doing so, try again
973			libusb_unlock_event_waiters(ctx);
974			goto retry;
975		}
976
977		libusb_wait_for_event(ctx, NULL);
978	}
979	libusb_unlock_event_waiters(ctx);
980}
981printf("completed!\n");
982\endcode
983 *
984 * A naive look at the above code may suggest that this can only support
985 * one event waiter (hence a total of 2 competing threads, the other doing
986 * event handling), because the event waiter seems to have taken the event
987 * waiters lock while waiting for an event. However, the system does support
988 * multiple event waiters, because libusb_wait_for_event() actually drops
989 * the lock while waiting, and reaquires it before continuing.
990 *
991 * We have now implemented code which can dynamically handle situations where
992 * nobody is handling events (so we should do it ourselves), and it can also
993 * handle situations where another thread is doing event handling (so we can
994 * piggyback onto them). It is also equipped to handle a combination of
995 * the two, for example, another thread is doing event handling, but for
996 * whatever reason it stops doing so before our condition is met, so we take
997 * over the event handling.
998 *
999 * Four functions were introduced in the above pseudo-code. Their importance
1000 * should be apparent from the code shown above.
1001 * -# libusb_try_lock_events() is a non-blocking function which attempts
1002 *    to acquire the events lock but returns a failure code if it is contended.
1003 * -# libusb_event_handling_ok() checks that libusb is still happy for your
1004 *    thread to be performing event handling. Sometimes, libusb needs to
1005 *    interrupt the event handler, and this is how you can check if you have
1006 *    been interrupted. If this function returns 0, the correct behaviour is
1007 *    for you to give up the event handling lock, and then to repeat the cycle.
1008 *    The following libusb_try_lock_events() will fail, so you will become an
1009 *    events waiter. For more information on this, read \ref fullstory below.
1010 * -# libusb_handle_events_locked() is a variant of
1011 *    libusb_handle_events_timeout() that you can call while holding the
1012 *    events lock. libusb_handle_events_timeout() itself implements similar
1013 *    logic to the above, so be sure not to call it when you are
1014 *    "working behind libusb's back", as is the case here.
1015 * -# libusb_event_handler_active() determines if someone is currently
1016 *    holding the events lock
1017 *
1018 * You might be wondering why there is no function to wake up all threads
1019 * blocked on libusb_wait_for_event(). This is because libusb can do this
1020 * internally: it will wake up all such threads when someone calls
1021 * libusb_unlock_events() or when a transfer completes (at the point after its
1022 * callback has returned).
1023 *
1024 * \subsection fullstory The full story
1025 *
1026 * The above explanation should be enough to get you going, but if you're
1027 * really thinking through the issues then you may be left with some more
1028 * questions regarding libusb's internals. If you're curious, read on, and if
1029 * not, skip to the next section to avoid confusing yourself!
1030 *
1031 * The immediate question that may spring to mind is: what if one thread
1032 * modifies the set of file descriptors that need to be polled while another
1033 * thread is doing event handling?
1034 *
1035 * There are 2 situations in which this may happen.
1036 * -# libusb_open() will add another file descriptor to the poll set,
1037 *    therefore it is desirable to interrupt the event handler so that it
1038 *    restarts, picking up the new descriptor.
1039 * -# libusb_close() will remove a file descriptor from the poll set. There
1040 *    are all kinds of race conditions that could arise here, so it is
1041 *    important that nobody is doing event handling at this time.
1042 *
1043 * libusb handles these issues internally, so application developers do not
1044 * have to stop their event handlers while opening/closing devices. Here's how
1045 * it works, focusing on the libusb_close() situation first:
1046 *
1047 * -# During initialization, libusb opens an internal pipe, and it adds the read
1048 *    end of this pipe to the set of file descriptors to be polled.
1049 * -# During libusb_close(), libusb writes some dummy data on this event pipe.
1050 *    This immediately interrupts the event handler. libusb also records
1051 *    internally that it is trying to interrupt event handlers for this
1052 *    high-priority event.
1053 * -# At this point, some of the functions described above start behaving
1054 *    differently:
1055 *   - libusb_event_handling_ok() starts returning 1, indicating that it is NOT
1056 *     OK for event handling to continue.
1057 *   - libusb_try_lock_events() starts returning 1, indicating that another
1058 *     thread holds the event handling lock, even if the lock is uncontended.
1059 *   - libusb_event_handler_active() starts returning 1, indicating that
1060 *     another thread is doing event handling, even if that is not true.
1061 * -# The above changes in behaviour result in the event handler stopping and
1062 *    giving up the events lock very quickly, giving the high-priority
1063 *    libusb_close() operation a "free ride" to acquire the events lock. All
1064 *    threads that are competing to do event handling become event waiters.
1065 * -# With the events lock held inside libusb_close(), libusb can safely remove
1066 *    a file descriptor from the poll set, in the safety of knowledge that
1067 *    nobody is polling those descriptors or trying to access the poll set.
1068 * -# After obtaining the events lock, the close operation completes very
1069 *    quickly (usually a matter of milliseconds) and then immediately releases
1070 *    the events lock.
1071 * -# At the same time, the behaviour of libusb_event_handling_ok() and friends
1072 *    reverts to the original, documented behaviour.
1073 * -# The release of the events lock causes the threads that are waiting for
1074 *    events to be woken up and to start competing to become event handlers
1075 *    again. One of them will succeed; it will then re-obtain the list of poll
1076 *    descriptors, and USB I/O will then continue as normal.
1077 *
1078 * libusb_open() is similar, and is actually a more simplistic case. Upon a
1079 * call to libusb_open():
1080 *
1081 * -# The device is opened and a file descriptor is added to the poll set.
1082 * -# libusb sends some dummy data on the event pipe, and records that it
1083 *    is trying to modify the poll descriptor set.
1084 * -# The event handler is interrupted, and the same behaviour change as for
1085 *    libusb_close() takes effect, causing all event handling threads to become
1086 *    event waiters.
1087 * -# The libusb_open() implementation takes its free ride to the events lock.
1088 * -# Happy that it has successfully paused the events handler, libusb_open()
1089 *    releases the events lock.
1090 * -# The event waiter threads are all woken up and compete to become event
1091 *    handlers again. The one that succeeds will obtain the list of poll
1092 *    descriptors again, which will include the addition of the new device.
1093 *
1094 * \subsection concl Closing remarks
1095 *
1096 * The above may seem a little complicated, but hopefully I have made it clear
1097 * why such complications are necessary. Also, do not forget that this only
1098 * applies to applications that take libusb's file descriptors and integrate
1099 * them into their own polling loops.
1100 *
1101 * You may decide that it is OK for your multi-threaded application to ignore
1102 * some of the rules and locks detailed above, because you don't think that
1103 * two threads can ever be polling the descriptors at the same time. If that
1104 * is the case, then that's good news for you because you don't have to worry.
1105 * But be careful here; remember that the synchronous I/O functions do event
1106 * handling internally. If you have one thread doing event handling in a loop
1107 * (without implementing the rules and locking semantics documented above)
1108 * and another trying to send a synchronous USB transfer, you will end up with
1109 * two threads monitoring the same descriptors, and the above-described
1110 * undesirable behaviour occurring. The solution is for your polling thread to
1111 * play by the rules; the synchronous I/O functions do so, and this will result
1112 * in them getting along in perfect harmony.
1113 *
1114 * If you do have a dedicated thread doing event handling, it is perfectly
1115 * legal for it to take the event handling lock for long periods of time. Any
1116 * synchronous I/O functions you call from other threads will transparently
1117 * fall back to the "event waiters" mechanism detailed above. The only
1118 * consideration that your event handling thread must apply is the one related
1119 * to libusb_event_handling_ok(): you must call this before every poll(), and
1120 * give up the events lock if instructed.
1121 */
1122
1123int usbi_io_init(struct libusb_context *ctx)
1124{
1125	int r;
1126
1127	usbi_mutex_init(&ctx->flying_transfers_lock);
1128	usbi_mutex_init(&ctx->events_lock);
1129	usbi_mutex_init(&ctx->event_waiters_lock);
1130	usbi_cond_init(&ctx->event_waiters_cond);
1131	usbi_mutex_init(&ctx->event_data_lock);
1132	usbi_tls_key_create(&ctx->event_handling_key);
1133	list_init(&ctx->flying_transfers);
1134	list_init(&ctx->ipollfds);
1135	list_init(&ctx->hotplug_msgs);
1136	list_init(&ctx->completed_transfers);
1137
1138	/* FIXME should use an eventfd on kernels that support it */
1139	r = usbi_pipe(ctx->event_pipe);
1140	if (r < 0) {
1141		r = LIBUSB_ERROR_OTHER;
1142		goto err;
1143	}
1144
1145	r = usbi_add_pollfd(ctx, ctx->event_pipe[0], POLLIN);
1146	if (r < 0)
1147		goto err_close_pipe;
1148
1149#ifdef USBI_TIMERFD_AVAILABLE
1150	ctx->timerfd = timerfd_create(usbi_backend->get_timerfd_clockid(),
1151		TFD_NONBLOCK);
1152	if (ctx->timerfd >= 0) {
1153		usbi_dbg("using timerfd for timeouts");
1154		r = usbi_add_pollfd(ctx, ctx->timerfd, POLLIN);
1155		if (r < 0)
1156			goto err_close_timerfd;
1157	} else {
1158		usbi_dbg("timerfd not available (code %d error %d)", ctx->timerfd, errno);
1159		ctx->timerfd = -1;
1160	}
1161#endif
1162
1163	return 0;
1164
1165#ifdef USBI_TIMERFD_AVAILABLE
1166err_close_timerfd:
1167	close(ctx->timerfd);
1168	usbi_remove_pollfd(ctx, ctx->event_pipe[0]);
1169#endif
1170err_close_pipe:
1171	usbi_close(ctx->event_pipe[0]);
1172	usbi_close(ctx->event_pipe[1]);
1173err:
1174	usbi_mutex_destroy(&ctx->flying_transfers_lock);
1175	usbi_mutex_destroy(&ctx->events_lock);
1176	usbi_mutex_destroy(&ctx->event_waiters_lock);
1177	usbi_cond_destroy(&ctx->event_waiters_cond);
1178	usbi_mutex_destroy(&ctx->event_data_lock);
1179	usbi_tls_key_delete(ctx->event_handling_key);
1180	return r;
1181}
1182
1183void usbi_io_exit(struct libusb_context *ctx)
1184{
1185	usbi_remove_pollfd(ctx, ctx->event_pipe[0]);
1186	usbi_close(ctx->event_pipe[0]);
1187	usbi_close(ctx->event_pipe[1]);
1188#ifdef USBI_TIMERFD_AVAILABLE
1189	if (usbi_using_timerfd(ctx)) {
1190		usbi_remove_pollfd(ctx, ctx->timerfd);
1191		close(ctx->timerfd);
1192	}
1193#endif
1194	usbi_mutex_destroy(&ctx->flying_transfers_lock);
1195	usbi_mutex_destroy(&ctx->events_lock);
1196	usbi_mutex_destroy(&ctx->event_waiters_lock);
1197	usbi_cond_destroy(&ctx->event_waiters_cond);
1198	usbi_mutex_destroy(&ctx->event_data_lock);
1199	usbi_tls_key_delete(ctx->event_handling_key);
1200	if (ctx->pollfds)
1201		free(ctx->pollfds);
1202}
1203
1204static int calculate_timeout(struct usbi_transfer *transfer)
1205{
1206	int r;
1207	struct timespec current_time;
1208	unsigned int timeout =
1209		USBI_TRANSFER_TO_LIBUSB_TRANSFER(transfer)->timeout;
1210
1211	if (!timeout)
1212		return 0;
1213
1214	r = usbi_backend->clock_gettime(USBI_CLOCK_MONOTONIC, &current_time);
1215	if (r < 0) {
1216		usbi_err(ITRANSFER_CTX(transfer),
1217			"failed to read monotonic clock, errno=%d", errno);
1218		return r;
1219	}
1220
1221	current_time.tv_sec += timeout / 1000;
1222	current_time.tv_nsec += (timeout % 1000) * 1000000;
1223
1224	while (current_time.tv_nsec >= 1000000000) {
1225		current_time.tv_nsec -= 1000000000;
1226		current_time.tv_sec++;
1227	}
1228
1229	TIMESPEC_TO_TIMEVAL(&transfer->timeout, &current_time);
1230	return 0;
1231}
1232
1233/** \ingroup libusb_asyncio
1234 * Allocate a libusb transfer with a specified number of isochronous packet
1235 * descriptors. The returned transfer is pre-initialized for you. When the new
1236 * transfer is no longer needed, it should be freed with
1237 * libusb_free_transfer().
1238 *
1239 * Transfers intended for non-isochronous endpoints (e.g. control, bulk,
1240 * interrupt) should specify an iso_packets count of zero.
1241 *
1242 * For transfers intended for isochronous endpoints, specify an appropriate
1243 * number of packet descriptors to be allocated as part of the transfer.
1244 * The returned transfer is not specially initialized for isochronous I/O;
1245 * you are still required to set the
1246 * \ref libusb_transfer::num_iso_packets "num_iso_packets" and
1247 * \ref libusb_transfer::type "type" fields accordingly.
1248 *
1249 * It is safe to allocate a transfer with some isochronous packets and then
1250 * use it on a non-isochronous endpoint. If you do this, ensure that at time
1251 * of submission, num_iso_packets is 0 and that type is set appropriately.
1252 *
1253 * \param iso_packets number of isochronous packet descriptors to allocate
1254 * \returns a newly allocated transfer, or NULL on error
1255 */
1256DEFAULT_VISIBILITY
1257struct libusb_transfer * LIBUSB_CALL libusb_alloc_transfer(
1258	int iso_packets)
1259{
1260	struct libusb_transfer *transfer;
1261	size_t os_alloc_size = usbi_backend->transfer_priv_size;
1262	size_t alloc_size = sizeof(struct usbi_transfer)
1263		+ sizeof(struct libusb_transfer)
1264		+ (sizeof(struct libusb_iso_packet_descriptor) * iso_packets)
1265		+ os_alloc_size;
1266	struct usbi_transfer *itransfer = calloc(1, alloc_size);
1267	if (!itransfer)
1268		return NULL;
1269
1270	itransfer->num_iso_packets = iso_packets;
1271	usbi_mutex_init(&itransfer->lock);
1272	transfer = USBI_TRANSFER_TO_LIBUSB_TRANSFER(itransfer);
1273	usbi_dbg("transfer %p", transfer);
1274	return transfer;
1275}
1276
1277/** \ingroup libusb_asyncio
1278 * Free a transfer structure. This should be called for all transfers
1279 * allocated with libusb_alloc_transfer().
1280 *
1281 * If the \ref libusb_transfer_flags::LIBUSB_TRANSFER_FREE_BUFFER
1282 * "LIBUSB_TRANSFER_FREE_BUFFER" flag is set and the transfer buffer is
1283 * non-NULL, this function will also free the transfer buffer using the
1284 * standard system memory allocator (e.g. free()).
1285 *
1286 * It is legal to call this function with a NULL transfer. In this case,
1287 * the function will simply return safely.
1288 *
1289 * It is not legal to free an active transfer (one which has been submitted
1290 * and has not yet completed).
1291 *
1292 * \param transfer the transfer to free
1293 */
1294void API_EXPORTED libusb_free_transfer(struct libusb_transfer *transfer)
1295{
1296	struct usbi_transfer *itransfer;
1297	if (!transfer)
1298		return;
1299
1300	usbi_dbg("transfer %p", transfer);
1301	if (transfer->flags & LIBUSB_TRANSFER_FREE_BUFFER && transfer->buffer)
1302		free(transfer->buffer);
1303
1304	itransfer = LIBUSB_TRANSFER_TO_USBI_TRANSFER(transfer);
1305	usbi_mutex_destroy(&itransfer->lock);
1306	free(itransfer);
1307}
1308
1309#ifdef USBI_TIMERFD_AVAILABLE
1310static int disarm_timerfd(struct libusb_context *ctx)
1311{
1312	const struct itimerspec disarm_timer = { { 0, 0 }, { 0, 0 } };
1313	int r;
1314
1315	usbi_dbg("");
1316	r = timerfd_settime(ctx->timerfd, 0, &disarm_timer, NULL);
1317	if (r < 0)
1318		return LIBUSB_ERROR_OTHER;
1319	else
1320		return 0;
1321}
1322
1323/* iterates through the flying transfers, and rearms the timerfd based on the
1324 * next upcoming timeout.
1325 * must be called with flying_list locked.
1326 * returns 0 on success or a LIBUSB_ERROR code on failure.
1327 */
1328static int arm_timerfd_for_next_timeout(struct libusb_context *ctx)
1329{
1330	struct usbi_transfer *transfer;
1331
1332	list_for_each_entry(transfer, &ctx->flying_transfers, list, struct usbi_transfer) {
1333		struct timeval *cur_tv = &transfer->timeout;
1334
1335		/* if we've reached transfers of infinite timeout, then we have no
1336		 * arming to do */
1337		if (!timerisset(cur_tv))
1338			goto disarm;
1339
1340		/* act on first transfer that has not already been handled */
1341		if (!(transfer->timeout_flags & (USBI_TRANSFER_TIMEOUT_HANDLED | USBI_TRANSFER_OS_HANDLES_TIMEOUT))) {
1342			int r;
1343			const struct itimerspec it = { {0, 0},
1344				{ cur_tv->tv_sec, cur_tv->tv_usec * 1000 } };
1345			usbi_dbg("next timeout originally %dms", USBI_TRANSFER_TO_LIBUSB_TRANSFER(transfer)->timeout);
1346			r = timerfd_settime(ctx->timerfd, TFD_TIMER_ABSTIME, &it, NULL);
1347			if (r < 0)
1348				return LIBUSB_ERROR_OTHER;
1349			return 0;
1350		}
1351	}
1352
1353disarm:
1354	return disarm_timerfd(ctx);
1355}
1356#else
1357static int arm_timerfd_for_next_timeout(struct libusb_context *ctx)
1358{
1359	UNUSED(ctx);
1360	return 0;
1361}
1362#endif
1363
1364/* add a transfer to the (timeout-sorted) active transfers list.
1365 * This function will return non 0 if fails to update the timer,
1366 * in which case the transfer is *not* on the flying_transfers list. */
1367static int add_to_flying_list(struct usbi_transfer *transfer)
1368{
1369	struct usbi_transfer *cur;
1370	struct timeval *timeout = &transfer->timeout;
1371	struct libusb_context *ctx = ITRANSFER_CTX(transfer);
1372	int r;
1373	int first = 1;
1374
1375	r = calculate_timeout(transfer);
1376	if (r)
1377		return r;
1378
1379	/* if we have no other flying transfers, start the list with this one */
1380	if (list_empty(&ctx->flying_transfers)) {
1381		list_add(&transfer->list, &ctx->flying_transfers);
1382		goto out;
1383	}
1384
1385	/* if we have infinite timeout, append to end of list */
1386	if (!timerisset(timeout)) {
1387		list_add_tail(&transfer->list, &ctx->flying_transfers);
1388		/* first is irrelevant in this case */
1389		goto out;
1390	}
1391
1392	/* otherwise, find appropriate place in list */
1393	list_for_each_entry(cur, &ctx->flying_transfers, list, struct usbi_transfer) {
1394		/* find first timeout that occurs after the transfer in question */
1395		struct timeval *cur_tv = &cur->timeout;
1396
1397		if (!timerisset(cur_tv) || (cur_tv->tv_sec > timeout->tv_sec) ||
1398				(cur_tv->tv_sec == timeout->tv_sec &&
1399					cur_tv->tv_usec > timeout->tv_usec)) {
1400			list_add_tail(&transfer->list, &cur->list);
1401			goto out;
1402		}
1403		first = 0;
1404	}
1405	/* first is 0 at this stage (list not empty) */
1406
1407	/* otherwise we need to be inserted at the end */
1408	list_add_tail(&transfer->list, &ctx->flying_transfers);
1409out:
1410#ifdef USBI_TIMERFD_AVAILABLE
1411	if (first && usbi_using_timerfd(ctx) && timerisset(timeout)) {
1412		/* if this transfer has the lowest timeout of all active transfers,
1413		 * rearm the timerfd with this transfer's timeout */
1414		const struct itimerspec it = { {0, 0},
1415			{ timeout->tv_sec, timeout->tv_usec * 1000 } };
1416		usbi_dbg("arm timerfd for timeout in %dms (first in line)",
1417			USBI_TRANSFER_TO_LIBUSB_TRANSFER(transfer)->timeout);
1418		r = timerfd_settime(ctx->timerfd, TFD_TIMER_ABSTIME, &it, NULL);
1419		if (r < 0) {
1420			usbi_warn(ctx, "failed to arm first timerfd (errno %d)", errno);
1421			r = LIBUSB_ERROR_OTHER;
1422		}
1423	}
1424#else
1425	UNUSED(first);
1426#endif
1427
1428	if (r)
1429		list_del(&transfer->list);
1430
1431	return r;
1432}
1433
1434/* remove a transfer from the active transfers list.
1435 * This function will *always* remove the transfer from the
1436 * flying_transfers list. It will return a LIBUSB_ERROR code
1437 * if it fails to update the timer for the next timeout. */
1438static int remove_from_flying_list(struct usbi_transfer *transfer)
1439{
1440	struct libusb_context *ctx = ITRANSFER_CTX(transfer);
1441	int rearm_timerfd;
1442	int r = 0;
1443
1444	usbi_mutex_lock(&ctx->flying_transfers_lock);
1445	rearm_timerfd = (timerisset(&transfer->timeout) &&
1446		list_first_entry(&ctx->flying_transfers, struct usbi_transfer, list) == transfer);
1447	list_del(&transfer->list);
1448	if (usbi_using_timerfd(ctx) && rearm_timerfd)
1449		r = arm_timerfd_for_next_timeout(ctx);
1450	usbi_mutex_unlock(&ctx->flying_transfers_lock);
1451
1452	return r;
1453}
1454
1455/** \ingroup libusb_asyncio
1456 * Submit a transfer. This function will fire off the USB transfer and then
1457 * return immediately.
1458 *
1459 * \param transfer the transfer to submit
1460 * \returns 0 on success
1461 * \returns LIBUSB_ERROR_NO_DEVICE if the device has been disconnected
1462 * \returns LIBUSB_ERROR_BUSY if the transfer has already been submitted.
1463 * \returns LIBUSB_ERROR_NOT_SUPPORTED if the transfer flags are not supported
1464 * by the operating system.
1465 * \returns LIBUSB_ERROR_INVALID_PARAM if the transfer size is larger than
1466 * the operating system and/or hardware can support
1467 * \returns another LIBUSB_ERROR code on other failure
1468 */
1469int API_EXPORTED libusb_submit_transfer(struct libusb_transfer *transfer)
1470{
1471	struct usbi_transfer *itransfer =
1472		LIBUSB_TRANSFER_TO_USBI_TRANSFER(transfer);
1473	struct libusb_context *ctx = TRANSFER_CTX(transfer);
1474	int r;
1475
1476	usbi_dbg("transfer %p", transfer);
1477
1478	/*
1479	 * Important note on locking, this function takes / releases locks
1480	 * in the following order:
1481	 *  take flying_transfers_lock
1482	 *  take itransfer->lock
1483	 *  clear transfer
1484	 *  add to flying_transfers list
1485	 *  release flying_transfers_lock
1486	 *  submit transfer
1487	 *  release itransfer->lock
1488	 *  if submit failed:
1489	 *   take flying_transfers_lock
1490	 *   remove from flying_transfers list
1491	 *   release flying_transfers_lock
1492	 *
1493	 * Note that it takes locks in the order a-b and then releases them
1494	 * in the same order a-b. This is somewhat unusual but not wrong,
1495	 * release order is not important as long as *all* locks are released
1496	 * before re-acquiring any locks.
1497	 *
1498	 * This means that the ordering of first releasing itransfer->lock
1499	 * and then re-acquiring the flying_transfers_list on error is
1500	 * important and must not be changed!
1501	 *
1502	 * This is done this way because when we take both locks we must always
1503	 * take flying_transfers_lock first to avoid ab-ba style deadlocks with
1504	 * the timeout handling and usbi_handle_disconnect paths.
1505	 *
1506	 * And we cannot release itransfer->lock before the submission is
1507	 * complete otherwise timeout handling for transfers with short
1508	 * timeouts may run before submission.
1509	 */
1510	usbi_mutex_lock(&ctx->flying_transfers_lock);
1511	usbi_mutex_lock(&itransfer->lock);
1512	if (itransfer->state_flags & USBI_TRANSFER_IN_FLIGHT) {
1513		usbi_mutex_unlock(&ctx->flying_transfers_lock);
1514		usbi_mutex_unlock(&itransfer->lock);
1515		return LIBUSB_ERROR_BUSY;
1516	}
1517	itransfer->transferred = 0;
1518	itransfer->state_flags = 0;
1519	itransfer->timeout_flags = 0;
1520	r = add_to_flying_list(itransfer);
1521	if (r) {
1522		usbi_mutex_unlock(&ctx->flying_transfers_lock);
1523		usbi_mutex_unlock(&itransfer->lock);
1524		return r;
1525	}
1526	/*
1527	 * We must release the flying transfers lock here, because with
1528	 * some backends the submit_transfer method is synchroneous.
1529	 */
1530	usbi_mutex_unlock(&ctx->flying_transfers_lock);
1531
1532	r = usbi_backend->submit_transfer(itransfer);
1533	if (r == LIBUSB_SUCCESS) {
1534		itransfer->state_flags |= USBI_TRANSFER_IN_FLIGHT;
1535		/* keep a reference to this device */
1536		libusb_ref_device(transfer->dev_handle->dev);
1537	}
1538	usbi_mutex_unlock(&itransfer->lock);
1539
1540	if (r != LIBUSB_SUCCESS)
1541		remove_from_flying_list(itransfer);
1542
1543	return r;
1544}
1545
1546/** \ingroup libusb_asyncio
1547 * Asynchronously cancel a previously submitted transfer.
1548 * This function returns immediately, but this does not indicate cancellation
1549 * is complete. Your callback function will be invoked at some later time
1550 * with a transfer status of
1551 * \ref libusb_transfer_status::LIBUSB_TRANSFER_CANCELLED
1552 * "LIBUSB_TRANSFER_CANCELLED."
1553 *
1554 * \param transfer the transfer to cancel
1555 * \returns 0 on success
1556 * \returns LIBUSB_ERROR_NOT_FOUND if the transfer is not in progress,
1557 * already complete, or already cancelled.
1558 * \returns a LIBUSB_ERROR code on failure
1559 */
1560int API_EXPORTED libusb_cancel_transfer(struct libusb_transfer *transfer)
1561{
1562	struct usbi_transfer *itransfer =
1563		LIBUSB_TRANSFER_TO_USBI_TRANSFER(transfer);
1564	int r;
1565
1566	usbi_dbg("transfer %p", transfer );
1567	usbi_mutex_lock(&itransfer->lock);
1568	if (!(itransfer->state_flags & USBI_TRANSFER_IN_FLIGHT)
1569			|| (itransfer->state_flags & USBI_TRANSFER_CANCELLING)) {
1570		r = LIBUSB_ERROR_NOT_FOUND;
1571		goto out;
1572	}
1573	r = usbi_backend->cancel_transfer(itransfer);
1574	if (r < 0) {
1575		if (r != LIBUSB_ERROR_NOT_FOUND &&
1576		    r != LIBUSB_ERROR_NO_DEVICE)
1577			usbi_err(TRANSFER_CTX(transfer),
1578				"cancel transfer failed error %d", r);
1579		else
1580			usbi_dbg("cancel transfer failed error %d", r);
1581
1582		if (r == LIBUSB_ERROR_NO_DEVICE)
1583			itransfer->state_flags |= USBI_TRANSFER_DEVICE_DISAPPEARED;
1584	}
1585
1586	itransfer->state_flags |= USBI_TRANSFER_CANCELLING;
1587
1588out:
1589	usbi_mutex_unlock(&itransfer->lock);
1590	return r;
1591}
1592
1593/** \ingroup libusb_asyncio
1594 * Set a transfers bulk stream id. Note users are advised to use
1595 * libusb_fill_bulk_stream_transfer() instead of calling this function
1596 * directly.
1597 *
1598 * Since version 1.0.19, \ref LIBUSB_API_VERSION >= 0x01000103
1599 *
1600 * \param transfer the transfer to set the stream id for
1601 * \param stream_id the stream id to set
1602 * \see libusb_alloc_streams()
1603 */
1604void API_EXPORTED libusb_transfer_set_stream_id(
1605	struct libusb_transfer *transfer, uint32_t stream_id)
1606{
1607	struct usbi_transfer *itransfer =
1608		LIBUSB_TRANSFER_TO_USBI_TRANSFER(transfer);
1609
1610	itransfer->stream_id = stream_id;
1611}
1612
1613/** \ingroup libusb_asyncio
1614 * Get a transfers bulk stream id.
1615 *
1616 * Since version 1.0.19, \ref LIBUSB_API_VERSION >= 0x01000103
1617 *
1618 * \param transfer the transfer to get the stream id for
1619 * \returns the stream id for the transfer
1620 */
1621uint32_t API_EXPORTED libusb_transfer_get_stream_id(
1622	struct libusb_transfer *transfer)
1623{
1624	struct usbi_transfer *itransfer =
1625		LIBUSB_TRANSFER_TO_USBI_TRANSFER(transfer);
1626
1627	return itransfer->stream_id;
1628}
1629
1630/* Handle completion of a transfer (completion might be an error condition).
1631 * This will invoke the user-supplied callback function, which may end up
1632 * freeing the transfer. Therefore you cannot use the transfer structure
1633 * after calling this function, and you should free all backend-specific
1634 * data before calling it.
1635 * Do not call this function with the usbi_transfer lock held. User-specified
1636 * callback functions may attempt to directly resubmit the transfer, which
1637 * will attempt to take the lock. */
1638int usbi_handle_transfer_completion(struct usbi_transfer *itransfer,
1639	enum libusb_transfer_status status)
1640{
1641	struct libusb_transfer *transfer =
1642		USBI_TRANSFER_TO_LIBUSB_TRANSFER(itransfer);
1643	struct libusb_device_handle *dev_handle = transfer->dev_handle;
1644	uint8_t flags;
1645	int r;
1646
1647	r = remove_from_flying_list(itransfer);
1648	if (r < 0)
1649		usbi_err(ITRANSFER_CTX(itransfer), "failed to set timer for next timeout, errno=%d", errno);
1650
1651	usbi_mutex_lock(&itransfer->lock);
1652	itransfer->state_flags &= ~USBI_TRANSFER_IN_FLIGHT;
1653	usbi_mutex_unlock(&itransfer->lock);
1654
1655	if (status == LIBUSB_TRANSFER_COMPLETED
1656			&& transfer->flags & LIBUSB_TRANSFER_SHORT_NOT_OK) {
1657		int rqlen = transfer->length;
1658		if (transfer->type == LIBUSB_TRANSFER_TYPE_CONTROL)
1659			rqlen -= LIBUSB_CONTROL_SETUP_SIZE;
1660		if (rqlen != itransfer->transferred) {
1661			usbi_dbg("interpreting short transfer as error");
1662			status = LIBUSB_TRANSFER_ERROR;
1663		}
1664	}
1665
1666	flags = transfer->flags;
1667	transfer->status = status;
1668	transfer->actual_length = itransfer->transferred;
1669	usbi_dbg("transfer %p has callback %p", transfer, transfer->callback);
1670	if (transfer->callback)
1671		transfer->callback(transfer);
1672	/* transfer might have been freed by the above call, do not use from
1673	 * this point. */
1674	if (flags & LIBUSB_TRANSFER_FREE_TRANSFER)
1675		libusb_free_transfer(transfer);
1676	libusb_unref_device(dev_handle->dev);
1677	return r;
1678}
1679
1680/* Similar to usbi_handle_transfer_completion() but exclusively for transfers
1681 * that were asynchronously cancelled. The same concerns w.r.t. freeing of
1682 * transfers exist here.
1683 * Do not call this function with the usbi_transfer lock held. User-specified
1684 * callback functions may attempt to directly resubmit the transfer, which
1685 * will attempt to take the lock. */
1686int usbi_handle_transfer_cancellation(struct usbi_transfer *transfer)
1687{
1688	struct libusb_context *ctx = ITRANSFER_CTX(transfer);
1689	uint8_t timed_out;
1690
1691	usbi_mutex_lock(&ctx->flying_transfers_lock);
1692	timed_out = transfer->timeout_flags & USBI_TRANSFER_TIMED_OUT;
1693	usbi_mutex_unlock(&ctx->flying_transfers_lock);
1694
1695	/* if the URB was cancelled due to timeout, report timeout to the user */
1696	if (timed_out) {
1697		usbi_dbg("detected timeout cancellation");
1698		return usbi_handle_transfer_completion(transfer, LIBUSB_TRANSFER_TIMED_OUT);
1699	}
1700
1701	/* otherwise its a normal async cancel */
1702	return usbi_handle_transfer_completion(transfer, LIBUSB_TRANSFER_CANCELLED);
1703}
1704
1705/* Add a completed transfer to the completed_transfers list of the
1706 * context and signal the event. The backend's handle_transfer_completion()
1707 * function will be called the next time an event handler runs. */
1708void usbi_signal_transfer_completion(struct usbi_transfer *transfer)
1709{
1710	struct libusb_context *ctx = ITRANSFER_CTX(transfer);
1711	int pending_events;
1712
1713	usbi_mutex_lock(&ctx->event_data_lock);
1714	pending_events = usbi_pending_events(ctx);
1715	list_add_tail(&transfer->completed_list, &ctx->completed_transfers);
1716	if (!pending_events)
1717		usbi_signal_event(ctx);
1718	usbi_mutex_unlock(&ctx->event_data_lock);
1719}
1720
1721/** \ingroup libusb_poll
1722 * Attempt to acquire the event handling lock. This lock is used to ensure that
1723 * only one thread is monitoring libusb event sources at any one time.
1724 *
1725 * You only need to use this lock if you are developing an application
1726 * which calls poll() or select() on libusb's file descriptors directly.
1727 * If you stick to libusb's event handling loop functions (e.g.
1728 * libusb_handle_events()) then you do not need to be concerned with this
1729 * locking.
1730 *
1731 * While holding this lock, you are trusted to actually be handling events.
1732 * If you are no longer handling events, you must call libusb_unlock_events()
1733 * as soon as possible.
1734 *
1735 * \param ctx the context to operate on, or NULL for the default context
1736 * \returns 0 if the lock was obtained successfully
1737 * \returns 1 if the lock was not obtained (i.e. another thread holds the lock)
1738 * \ref libusb_mtasync
1739 */
1740int API_EXPORTED libusb_try_lock_events(libusb_context *ctx)
1741{
1742	int r;
1743	unsigned int ru;
1744	USBI_GET_CONTEXT(ctx);
1745
1746	/* is someone else waiting to close a device? if so, don't let this thread
1747	 * start event handling */
1748	usbi_mutex_lock(&ctx->event_data_lock);
1749	ru = ctx->device_close;
1750	usbi_mutex_unlock(&ctx->event_data_lock);
1751	if (ru) {
1752		usbi_dbg("someone else is closing a device");
1753		return 1;
1754	}
1755
1756	r = usbi_mutex_trylock(&ctx->events_lock);
1757	if (r)
1758		return 1;
1759
1760	ctx->event_handler_active = 1;
1761	return 0;
1762}
1763
1764/** \ingroup libusb_poll
1765 * Acquire the event handling lock, blocking until successful acquisition if
1766 * it is contended. This lock is used to ensure that only one thread is
1767 * monitoring libusb event sources at any one time.
1768 *
1769 * You only need to use this lock if you are developing an application
1770 * which calls poll() or select() on libusb's file descriptors directly.
1771 * If you stick to libusb's event handling loop functions (e.g.
1772 * libusb_handle_events()) then you do not need to be concerned with this
1773 * locking.
1774 *
1775 * While holding this lock, you are trusted to actually be handling events.
1776 * If you are no longer handling events, you must call libusb_unlock_events()
1777 * as soon as possible.
1778 *
1779 * \param ctx the context to operate on, or NULL for the default context
1780 * \ref libusb_mtasync
1781 */
1782void API_EXPORTED libusb_lock_events(libusb_context *ctx)
1783{
1784	USBI_GET_CONTEXT(ctx);
1785	usbi_mutex_lock(&ctx->events_lock);
1786	ctx->event_handler_active = 1;
1787}
1788
1789/** \ingroup libusb_poll
1790 * Release the lock previously acquired with libusb_try_lock_events() or
1791 * libusb_lock_events(). Releasing this lock will wake up any threads blocked
1792 * on libusb_wait_for_event().
1793 *
1794 * \param ctx the context to operate on, or NULL for the default context
1795 * \ref libusb_mtasync
1796 */
1797void API_EXPORTED libusb_unlock_events(libusb_context *ctx)
1798{
1799	USBI_GET_CONTEXT(ctx);
1800	ctx->event_handler_active = 0;
1801	usbi_mutex_unlock(&ctx->events_lock);
1802
1803	/* FIXME: perhaps we should be a bit more efficient by not broadcasting
1804	 * the availability of the events lock when we are modifying pollfds
1805	 * (check ctx->device_close)? */
1806	usbi_mutex_lock(&ctx->event_waiters_lock);
1807	usbi_cond_broadcast(&ctx->event_waiters_cond);
1808	usbi_mutex_unlock(&ctx->event_waiters_lock);
1809}
1810
1811/** \ingroup libusb_poll
1812 * Determine if it is still OK for this thread to be doing event handling.
1813 *
1814 * Sometimes, libusb needs to temporarily pause all event handlers, and this
1815 * is the function you should use before polling file descriptors to see if
1816 * this is the case.
1817 *
1818 * If this function instructs your thread to give up the events lock, you
1819 * should just continue the usual logic that is documented in \ref libusb_mtasync.
1820 * On the next iteration, your thread will fail to obtain the events lock,
1821 * and will hence become an event waiter.
1822 *
1823 * This function should be called while the events lock is held: you don't
1824 * need to worry about the results of this function if your thread is not
1825 * the current event handler.
1826 *
1827 * \param ctx the context to operate on, or NULL for the default context
1828 * \returns 1 if event handling can start or continue
1829 * \returns 0 if this thread must give up the events lock
1830 * \ref fullstory "Multi-threaded I/O: the full story"
1831 */
1832int API_EXPORTED libusb_event_handling_ok(libusb_context *ctx)
1833{
1834	unsigned int r;
1835	USBI_GET_CONTEXT(ctx);
1836
1837	/* is someone else waiting to close a device? if so, don't let this thread
1838	 * continue event handling */
1839	usbi_mutex_lock(&ctx->event_data_lock);
1840	r = ctx->device_close;
1841	usbi_mutex_unlock(&ctx->event_data_lock);
1842	if (r) {
1843		usbi_dbg("someone else is closing a device");
1844		return 0;
1845	}
1846
1847	return 1;
1848}
1849
1850
1851/** \ingroup libusb_poll
1852 * Determine if an active thread is handling events (i.e. if anyone is holding
1853 * the event handling lock).
1854 *
1855 * \param ctx the context to operate on, or NULL for the default context
1856 * \returns 1 if a thread is handling events
1857 * \returns 0 if there are no threads currently handling events
1858 * \ref libusb_mtasync
1859 */
1860int API_EXPORTED libusb_event_handler_active(libusb_context *ctx)
1861{
1862	unsigned int r;
1863	USBI_GET_CONTEXT(ctx);
1864
1865	/* is someone else waiting to close a device? if so, don't let this thread
1866	 * start event handling -- indicate that event handling is happening */
1867	usbi_mutex_lock(&ctx->event_data_lock);
1868	r = ctx->device_close;
1869	usbi_mutex_unlock(&ctx->event_data_lock);
1870	if (r) {
1871		usbi_dbg("someone else is closing a device");
1872		return 1;
1873	}
1874
1875	return ctx->event_handler_active;
1876}
1877
1878/** \ingroup libusb_poll
1879 * Interrupt any active thread that is handling events. This is mainly useful
1880 * for interrupting a dedicated event handling thread when an application
1881 * wishes to call libusb_exit().
1882 *
1883 * Since version 1.0.21, \ref LIBUSB_API_VERSION >= 0x01000105
1884 *
1885 * \param ctx the context to operate on, or NULL for the default context
1886 * \ref libusb_mtasync
1887 */
1888void API_EXPORTED libusb_interrupt_event_handler(libusb_context *ctx)
1889{
1890	USBI_GET_CONTEXT(ctx);
1891
1892	usbi_dbg("");
1893	usbi_mutex_lock(&ctx->event_data_lock);
1894	if (!usbi_pending_events(ctx)) {
1895		ctx->event_flags |= USBI_EVENT_USER_INTERRUPT;
1896		usbi_signal_event(ctx);
1897	}
1898	usbi_mutex_unlock(&ctx->event_data_lock);
1899}
1900
1901/** \ingroup libusb_poll
1902 * Acquire the event waiters lock. This lock is designed to be obtained under
1903 * the situation where you want to be aware when events are completed, but
1904 * some other thread is event handling so calling libusb_handle_events() is not
1905 * allowed.
1906 *
1907 * You then obtain this lock, re-check that another thread is still handling
1908 * events, then call libusb_wait_for_event().
1909 *
1910 * You only need to use this lock if you are developing an application
1911 * which calls poll() or select() on libusb's file descriptors directly,
1912 * <b>and</b> may potentially be handling events from 2 threads simultaenously.
1913 * If you stick to libusb's event handling loop functions (e.g.
1914 * libusb_handle_events()) then you do not need to be concerned with this
1915 * locking.
1916 *
1917 * \param ctx the context to operate on, or NULL for the default context
1918 * \ref libusb_mtasync
1919 */
1920void API_EXPORTED libusb_lock_event_waiters(libusb_context *ctx)
1921{
1922	USBI_GET_CONTEXT(ctx);
1923	usbi_mutex_lock(&ctx->event_waiters_lock);
1924}
1925
1926/** \ingroup libusb_poll
1927 * Release the event waiters lock.
1928 * \param ctx the context to operate on, or NULL for the default context
1929 * \ref libusb_mtasync
1930 */
1931void API_EXPORTED libusb_unlock_event_waiters(libusb_context *ctx)
1932{
1933	USBI_GET_CONTEXT(ctx);
1934	usbi_mutex_unlock(&ctx->event_waiters_lock);
1935}
1936
1937/** \ingroup libusb_poll
1938 * Wait for another thread to signal completion of an event. Must be called
1939 * with the event waiters lock held, see libusb_lock_event_waiters().
1940 *
1941 * This function will block until any of the following conditions are met:
1942 * -# The timeout expires
1943 * -# A transfer completes
1944 * -# A thread releases the event handling lock through libusb_unlock_events()
1945 *
1946 * Condition 1 is obvious. Condition 2 unblocks your thread <em>after</em>
1947 * the callback for the transfer has completed. Condition 3 is important
1948 * because it means that the thread that was previously handling events is no
1949 * longer doing so, so if any events are to complete, another thread needs to
1950 * step up and start event handling.
1951 *
1952 * This function releases the event waiters lock before putting your thread
1953 * to sleep, and reacquires the lock as it is being woken up.
1954 *
1955 * \param ctx the context to operate on, or NULL for the default context
1956 * \param tv maximum timeout for this blocking function. A NULL value
1957 * indicates unlimited timeout.
1958 * \returns 0 after a transfer completes or another thread stops event handling
1959 * \returns 1 if the timeout expired
1960 * \ref libusb_mtasync
1961 */
1962int API_EXPORTED libusb_wait_for_event(libusb_context *ctx, struct timeval *tv)
1963{
1964	int r;
1965
1966	USBI_GET_CONTEXT(ctx);
1967	if (tv == NULL) {
1968		usbi_cond_wait(&ctx->event_waiters_cond, &ctx->event_waiters_lock);
1969		return 0;
1970	}
1971
1972	r = usbi_cond_timedwait(&ctx->event_waiters_cond,
1973		&ctx->event_waiters_lock, tv);
1974
1975	if (r < 0)
1976		return r;
1977	else
1978		return (r == ETIMEDOUT);
1979}
1980
1981static void handle_timeout(struct usbi_transfer *itransfer)
1982{
1983	struct libusb_transfer *transfer =
1984		USBI_TRANSFER_TO_LIBUSB_TRANSFER(itransfer);
1985	int r;
1986
1987	itransfer->timeout_flags |= USBI_TRANSFER_TIMEOUT_HANDLED;
1988	r = libusb_cancel_transfer(transfer);
1989	if (r == LIBUSB_SUCCESS)
1990		itransfer->timeout_flags |= USBI_TRANSFER_TIMED_OUT;
1991	else
1992		usbi_warn(TRANSFER_CTX(transfer),
1993			"async cancel failed %d errno=%d", r, errno);
1994}
1995
1996static int handle_timeouts_locked(struct libusb_context *ctx)
1997{
1998	int r;
1999	struct timespec systime_ts;
2000	struct timeval systime;
2001	struct usbi_transfer *transfer;
2002
2003	if (list_empty(&ctx->flying_transfers))
2004		return 0;
2005
2006	/* get current time */
2007	r = usbi_backend->clock_gettime(USBI_CLOCK_MONOTONIC, &systime_ts);
2008	if (r < 0)
2009		return r;
2010
2011	TIMESPEC_TO_TIMEVAL(&systime, &systime_ts);
2012
2013	/* iterate through flying transfers list, finding all transfers that
2014	 * have expired timeouts */
2015	list_for_each_entry(transfer, &ctx->flying_transfers, list, struct usbi_transfer) {
2016		struct timeval *cur_tv = &transfer->timeout;
2017
2018		/* if we've reached transfers of infinite timeout, we're all done */
2019		if (!timerisset(cur_tv))
2020			return 0;
2021
2022		/* ignore timeouts we've already handled */
2023		if (transfer->timeout_flags & (USBI_TRANSFER_TIMEOUT_HANDLED | USBI_TRANSFER_OS_HANDLES_TIMEOUT))
2024			continue;
2025
2026		/* if transfer has non-expired timeout, nothing more to do */
2027		if ((cur_tv->tv_sec > systime.tv_sec) ||
2028				(cur_tv->tv_sec == systime.tv_sec &&
2029					cur_tv->tv_usec > systime.tv_usec))
2030			return 0;
2031
2032		/* otherwise, we've got an expired timeout to handle */
2033		handle_timeout(transfer);
2034	}
2035	return 0;
2036}
2037
2038static int handle_timeouts(struct libusb_context *ctx)
2039{
2040	int r;
2041	USBI_GET_CONTEXT(ctx);
2042	usbi_mutex_lock(&ctx->flying_transfers_lock);
2043	r = handle_timeouts_locked(ctx);
2044	usbi_mutex_unlock(&ctx->flying_transfers_lock);
2045	return r;
2046}
2047
2048#ifdef USBI_TIMERFD_AVAILABLE
2049static int handle_timerfd_trigger(struct libusb_context *ctx)
2050{
2051	int r;
2052
2053	usbi_mutex_lock(&ctx->flying_transfers_lock);
2054
2055	/* process the timeout that just happened */
2056	r = handle_timeouts_locked(ctx);
2057	if (r < 0)
2058		goto out;
2059
2060	/* arm for next timeout*/
2061	r = arm_timerfd_for_next_timeout(ctx);
2062
2063out:
2064	usbi_mutex_unlock(&ctx->flying_transfers_lock);
2065	return r;
2066}
2067#endif
2068
2069/* do the actual event handling. assumes that no other thread is concurrently
2070 * doing the same thing. */
2071static int handle_events(struct libusb_context *ctx, struct timeval *tv)
2072{
2073	int r;
2074	struct usbi_pollfd *ipollfd;
2075	POLL_NFDS_TYPE nfds = 0;
2076	POLL_NFDS_TYPE internal_nfds;
2077	struct pollfd *fds = NULL;
2078	int i = -1;
2079	int timeout_ms;
2080	int special_event;
2081
2082	/* prevent attempts to recursively handle events (e.g. calling into
2083	 * libusb_handle_events() from within a hotplug or transfer callback) */
2084	if (usbi_handling_events(ctx))
2085		return LIBUSB_ERROR_BUSY;
2086	usbi_start_event_handling(ctx);
2087
2088	/* there are certain fds that libusb uses internally, currently:
2089	 *
2090	 *   1) event pipe
2091	 *   2) timerfd
2092	 *
2093	 * the backend will never need to attempt to handle events on these fds, so
2094	 * we determine how many fds are in use internally for this context and when
2095	 * handle_events() is called in the backend, the pollfd list and count will
2096	 * be adjusted to skip over these internal fds */
2097	if (usbi_using_timerfd(ctx))
2098		internal_nfds = 2;
2099	else
2100		internal_nfds = 1;
2101
2102	/* only reallocate the poll fds when the list of poll fds has been modified
2103	 * since the last poll, otherwise reuse them to save the additional overhead */
2104	usbi_mutex_lock(&ctx->event_data_lock);
2105	if (ctx->event_flags & USBI_EVENT_POLLFDS_MODIFIED) {
2106		usbi_dbg("poll fds modified, reallocating");
2107
2108		if (ctx->pollfds) {
2109			free(ctx->pollfds);
2110			ctx->pollfds = NULL;
2111		}
2112
2113		/* sanity check - it is invalid for a context to have fewer than the
2114		 * required internal fds (memory corruption?) */
2115		assert(ctx->pollfds_cnt >= internal_nfds);
2116
2117		ctx->pollfds = calloc(ctx->pollfds_cnt, sizeof(*ctx->pollfds));
2118		if (!ctx->pollfds) {
2119			usbi_mutex_unlock(&ctx->event_data_lock);
2120			r = LIBUSB_ERROR_NO_MEM;
2121			goto done;
2122		}
2123
2124		list_for_each_entry(ipollfd, &ctx->ipollfds, list, struct usbi_pollfd) {
2125			struct libusb_pollfd *pollfd = &ipollfd->pollfd;
2126			i++;
2127			ctx->pollfds[i].fd = pollfd->fd;
2128			ctx->pollfds[i].events = pollfd->events;
2129		}
2130
2131		/* reset the flag now that we have the updated list */
2132		ctx->event_flags &= ~USBI_EVENT_POLLFDS_MODIFIED;
2133
2134		/* if no further pending events, clear the event pipe so that we do
2135		 * not immediately return from poll */
2136		if (!usbi_pending_events(ctx))
2137			usbi_clear_event(ctx);
2138	}
2139	fds = ctx->pollfds;
2140	nfds = ctx->pollfds_cnt;
2141	usbi_mutex_unlock(&ctx->event_data_lock);
2142
2143	timeout_ms = (int)(tv->tv_sec * 1000) + (tv->tv_usec / 1000);
2144
2145	/* round up to next millisecond */
2146	if (tv->tv_usec % 1000)
2147		timeout_ms++;
2148
2149redo_poll:
2150	usbi_dbg("poll() %d fds with timeout in %dms", nfds, timeout_ms);
2151	r = usbi_poll(fds, nfds, timeout_ms);
2152	usbi_dbg("poll() returned %d", r);
2153	if (r == 0) {
2154		r = handle_timeouts(ctx);
2155		goto done;
2156	}
2157	else if (r == -1 && errno == EINTR) {
2158		r = LIBUSB_ERROR_INTERRUPTED;
2159		goto done;
2160	}
2161	else if (r < 0) {
2162		usbi_err(ctx, "poll failed %d err=%d", r, errno);
2163		r = LIBUSB_ERROR_IO;
2164		goto done;
2165	}
2166
2167	special_event = 0;
2168
2169	/* fds[0] is always the event pipe */
2170	if (fds[0].revents) {
2171		libusb_hotplug_message *message = NULL;
2172		struct usbi_transfer *itransfer;
2173		int ret = 0;
2174
2175		usbi_dbg("caught a fish on the event pipe");
2176
2177		/* take the the event data lock while processing events */
2178		usbi_mutex_lock(&ctx->event_data_lock);
2179
2180		/* check if someone added a new poll fd */
2181		if (ctx->event_flags & USBI_EVENT_POLLFDS_MODIFIED)
2182			usbi_dbg("someone updated the poll fds");
2183
2184		if (ctx->event_flags & USBI_EVENT_USER_INTERRUPT) {
2185			usbi_dbg("someone purposely interrupted");
2186			ctx->event_flags &= ~USBI_EVENT_USER_INTERRUPT;
2187		}
2188
2189		/* check if someone is closing a device */
2190		if (ctx->device_close)
2191			usbi_dbg("someone is closing a device");
2192
2193		/* check for any pending hotplug messages */
2194		if (!list_empty(&ctx->hotplug_msgs)) {
2195			usbi_dbg("hotplug message received");
2196			special_event = 1;
2197			message = list_first_entry(&ctx->hotplug_msgs, libusb_hotplug_message, list);
2198			list_del(&message->list);
2199		}
2200
2201		/* complete any pending transfers */
2202		while (ret == 0 && !list_empty(&ctx->completed_transfers)) {
2203			itransfer = list_first_entry(&ctx->completed_transfers, struct usbi_transfer, completed_list);
2204			list_del(&itransfer->completed_list);
2205			usbi_mutex_unlock(&ctx->event_data_lock);
2206			ret = usbi_backend->handle_transfer_completion(itransfer);
2207			if (ret)
2208				usbi_err(ctx, "backend handle_transfer_completion failed with error %d", ret);
2209			usbi_mutex_lock(&ctx->event_data_lock);
2210		}
2211
2212		/* if no further pending events, clear the event pipe */
2213		if (!usbi_pending_events(ctx))
2214			usbi_clear_event(ctx);
2215
2216		usbi_mutex_unlock(&ctx->event_data_lock);
2217
2218		/* process the hotplug message, if any */
2219		if (message) {
2220			usbi_hotplug_match(ctx, message->device, message->event);
2221
2222			/* the device left, dereference the device */
2223			if (LIBUSB_HOTPLUG_EVENT_DEVICE_LEFT == message->event)
2224				libusb_unref_device(message->device);
2225
2226			free(message);
2227		}
2228
2229		if (ret) {
2230			/* return error code */
2231			r = ret;
2232			goto done;
2233		}
2234
2235		if (0 == --r)
2236			goto handled;
2237	}
2238
2239#ifdef USBI_TIMERFD_AVAILABLE
2240	/* on timerfd configurations, fds[1] is the timerfd */
2241	if (usbi_using_timerfd(ctx) && fds[1].revents) {
2242		/* timerfd indicates that a timeout has expired */
2243		int ret;
2244		usbi_dbg("timerfd triggered");
2245		special_event = 1;
2246
2247		ret = handle_timerfd_trigger(ctx);
2248		if (ret < 0) {
2249			/* return error code */
2250			r = ret;
2251			goto done;
2252		}
2253
2254		if (0 == --r)
2255			goto handled;
2256	}
2257#endif
2258
2259	r = usbi_backend->handle_events(ctx, fds + internal_nfds, nfds - internal_nfds, r);
2260	if (r)
2261		usbi_err(ctx, "backend handle_events failed with error %d", r);
2262
2263handled:
2264	if (r == 0 && special_event) {
2265		timeout_ms = 0;
2266		goto redo_poll;
2267	}
2268
2269done:
2270	usbi_end_event_handling(ctx);
2271	return r;
2272}
2273
2274/* returns the smallest of:
2275 *  1. timeout of next URB
2276 *  2. user-supplied timeout
2277 * returns 1 if there is an already-expired timeout, otherwise returns 0
2278 * and populates out
2279 */
2280static int get_next_timeout(libusb_context *ctx, struct timeval *tv,
2281	struct timeval *out)
2282{
2283	struct timeval timeout;
2284	int r = libusb_get_next_timeout(ctx, &timeout);
2285	if (r) {
2286		/* timeout already expired? */
2287		if (!timerisset(&timeout))
2288			return 1;
2289
2290		/* choose the smallest of next URB timeout or user specified timeout */
2291		if (timercmp(&timeout, tv, <))
2292			*out = timeout;
2293		else
2294			*out = *tv;
2295	} else {
2296		*out = *tv;
2297	}
2298	return 0;
2299}
2300
2301/** \ingroup libusb_poll
2302 * Handle any pending events.
2303 *
2304 * libusb determines "pending events" by checking if any timeouts have expired
2305 * and by checking the set of file descriptors for activity.
2306 *
2307 * If a zero timeval is passed, this function will handle any already-pending
2308 * events and then immediately return in non-blocking style.
2309 *
2310 * If a non-zero timeval is passed and no events are currently pending, this
2311 * function will block waiting for events to handle up until the specified
2312 * timeout. If an event arrives or a signal is raised, this function will
2313 * return early.
2314 *
2315 * If the parameter completed is not NULL then <em>after obtaining the event
2316 * handling lock</em> this function will return immediately if the integer
2317 * pointed to is not 0. This allows for race free waiting for the completion
2318 * of a specific transfer.
2319 *
2320 * \param ctx the context to operate on, or NULL for the default context
2321 * \param tv the maximum time to block waiting for events, or an all zero
2322 * timeval struct for non-blocking mode
2323 * \param completed pointer to completion integer to check, or NULL
2324 * \returns 0 on success, or a LIBUSB_ERROR code on failure
2325 * \ref libusb_mtasync
2326 */
2327int API_EXPORTED libusb_handle_events_timeout_completed(libusb_context *ctx,
2328	struct timeval *tv, int *completed)
2329{
2330	int r;
2331	struct timeval poll_timeout;
2332
2333	USBI_GET_CONTEXT(ctx);
2334	r = get_next_timeout(ctx, tv, &poll_timeout);
2335	if (r) {
2336		/* timeout already expired */
2337		return handle_timeouts(ctx);
2338	}
2339
2340retry:
2341	if (libusb_try_lock_events(ctx) == 0) {
2342		if (completed == NULL || !*completed) {
2343			/* we obtained the event lock: do our own event handling */
2344			usbi_dbg("doing our own event handling");
2345			r = handle_events(ctx, &poll_timeout);
2346		}
2347		libusb_unlock_events(ctx);
2348		return r;
2349	}
2350
2351	/* another thread is doing event handling. wait for thread events that
2352	 * notify event completion. */
2353	libusb_lock_event_waiters(ctx);
2354
2355	if (completed && *completed)
2356		goto already_done;
2357
2358	if (!libusb_event_handler_active(ctx)) {
2359		/* we hit a race: whoever was event handling earlier finished in the
2360		 * time it took us to reach this point. try the cycle again. */
2361		libusb_unlock_event_waiters(ctx);
2362		usbi_dbg("event handler was active but went away, retrying");
2363		goto retry;
2364	}
2365
2366	usbi_dbg("another thread is doing event handling");
2367	r = libusb_wait_for_event(ctx, &poll_timeout);
2368
2369already_done:
2370	libusb_unlock_event_waiters(ctx);
2371
2372	if (r < 0)
2373		return r;
2374	else if (r == 1)
2375		return handle_timeouts(ctx);
2376	else
2377		return 0;
2378}
2379
2380/** \ingroup libusb_poll
2381 * Handle any pending events
2382 *
2383 * Like libusb_handle_events_timeout_completed(), but without the completed
2384 * parameter, calling this function is equivalent to calling
2385 * libusb_handle_events_timeout_completed() with a NULL completed parameter.
2386 *
2387 * This function is kept primarily for backwards compatibility.
2388 * All new code should call libusb_handle_events_completed() or
2389 * libusb_handle_events_timeout_completed() to avoid race conditions.
2390 *
2391 * \param ctx the context to operate on, or NULL for the default context
2392 * \param tv the maximum time to block waiting for events, or an all zero
2393 * timeval struct for non-blocking mode
2394 * \returns 0 on success, or a LIBUSB_ERROR code on failure
2395 */
2396int API_EXPORTED libusb_handle_events_timeout(libusb_context *ctx,
2397	struct timeval *tv)
2398{
2399	return libusb_handle_events_timeout_completed(ctx, tv, NULL);
2400}
2401
2402/** \ingroup libusb_poll
2403 * Handle any pending events in blocking mode. There is currently a timeout
2404 * hardcoded at 60 seconds but we plan to make it unlimited in future. For
2405 * finer control over whether this function is blocking or non-blocking, or
2406 * for control over the timeout, use libusb_handle_events_timeout_completed()
2407 * instead.
2408 *
2409 * This function is kept primarily for backwards compatibility.
2410 * All new code should call libusb_handle_events_completed() or
2411 * libusb_handle_events_timeout_completed() to avoid race conditions.
2412 *
2413 * \param ctx the context to operate on, or NULL for the default context
2414 * \returns 0 on success, or a LIBUSB_ERROR code on failure
2415 */
2416int API_EXPORTED libusb_handle_events(libusb_context *ctx)
2417{
2418	struct timeval tv;
2419	tv.tv_sec = 60;
2420	tv.tv_usec = 0;
2421	return libusb_handle_events_timeout_completed(ctx, &tv, NULL);
2422}
2423
2424/** \ingroup libusb_poll
2425 * Handle any pending events in blocking mode.
2426 *
2427 * Like libusb_handle_events(), with the addition of a completed parameter
2428 * to allow for race free waiting for the completion of a specific transfer.
2429 *
2430 * See libusb_handle_events_timeout_completed() for details on the completed
2431 * parameter.
2432 *
2433 * \param ctx the context to operate on, or NULL for the default context
2434 * \param completed pointer to completion integer to check, or NULL
2435 * \returns 0 on success, or a LIBUSB_ERROR code on failure
2436 * \ref libusb_mtasync
2437 */
2438int API_EXPORTED libusb_handle_events_completed(libusb_context *ctx,
2439	int *completed)
2440{
2441	struct timeval tv;
2442	tv.tv_sec = 60;
2443	tv.tv_usec = 0;
2444	return libusb_handle_events_timeout_completed(ctx, &tv, completed);
2445}
2446
2447/** \ingroup libusb_poll
2448 * Handle any pending events by polling file descriptors, without checking if
2449 * any other threads are already doing so. Must be called with the event lock
2450 * held, see libusb_lock_events().
2451 *
2452 * This function is designed to be called under the situation where you have
2453 * taken the event lock and are calling poll()/select() directly on libusb's
2454 * file descriptors (as opposed to using libusb_handle_events() or similar).
2455 * You detect events on libusb's descriptors, so you then call this function
2456 * with a zero timeout value (while still holding the event lock).
2457 *
2458 * \param ctx the context to operate on, or NULL for the default context
2459 * \param tv the maximum time to block waiting for events, or zero for
2460 * non-blocking mode
2461 * \returns 0 on success, or a LIBUSB_ERROR code on failure
2462 * \ref libusb_mtasync
2463 */
2464int API_EXPORTED libusb_handle_events_locked(libusb_context *ctx,
2465	struct timeval *tv)
2466{
2467	int r;
2468	struct timeval poll_timeout;
2469
2470	USBI_GET_CONTEXT(ctx);
2471	r = get_next_timeout(ctx, tv, &poll_timeout);
2472	if (r) {
2473		/* timeout already expired */
2474		return handle_timeouts(ctx);
2475	}
2476
2477	return handle_events(ctx, &poll_timeout);
2478}
2479
2480/** \ingroup libusb_poll
2481 * Determines whether your application must apply special timing considerations
2482 * when monitoring libusb's file descriptors.
2483 *
2484 * This function is only useful for applications which retrieve and poll
2485 * libusb's file descriptors in their own main loop (\ref libusb_pollmain).
2486 *
2487 * Ordinarily, libusb's event handler needs to be called into at specific
2488 * moments in time (in addition to times when there is activity on the file
2489 * descriptor set). The usual approach is to use libusb_get_next_timeout()
2490 * to learn about when the next timeout occurs, and to adjust your
2491 * poll()/select() timeout accordingly so that you can make a call into the
2492 * library at that time.
2493 *
2494 * Some platforms supported by libusb do not come with this baggage - any
2495 * events relevant to timing will be represented by activity on the file
2496 * descriptor set, and libusb_get_next_timeout() will always return 0.
2497 * This function allows you to detect whether you are running on such a
2498 * platform.
2499 *
2500 * Since v1.0.5.
2501 *
2502 * \param ctx the context to operate on, or NULL for the default context
2503 * \returns 0 if you must call into libusb at times determined by
2504 * libusb_get_next_timeout(), or 1 if all timeout events are handled internally
2505 * or through regular activity on the file descriptors.
2506 * \ref libusb_pollmain "Polling libusb file descriptors for event handling"
2507 */
2508int API_EXPORTED libusb_pollfds_handle_timeouts(libusb_context *ctx)
2509{
2510#if defined(USBI_TIMERFD_AVAILABLE)
2511	USBI_GET_CONTEXT(ctx);
2512	return usbi_using_timerfd(ctx);
2513#else
2514	UNUSED(ctx);
2515	return 0;
2516#endif
2517}
2518
2519/** \ingroup libusb_poll
2520 * Determine the next internal timeout that libusb needs to handle. You only
2521 * need to use this function if you are calling poll() or select() or similar
2522 * on libusb's file descriptors yourself - you do not need to use it if you
2523 * are calling libusb_handle_events() or a variant directly.
2524 *
2525 * You should call this function in your main loop in order to determine how
2526 * long to wait for select() or poll() to return results. libusb needs to be
2527 * called into at this timeout, so you should use it as an upper bound on
2528 * your select() or poll() call.
2529 *
2530 * When the timeout has expired, call into libusb_handle_events_timeout()
2531 * (perhaps in non-blocking mode) so that libusb can handle the timeout.
2532 *
2533 * This function may return 1 (success) and an all-zero timeval. If this is
2534 * the case, it indicates that libusb has a timeout that has already expired
2535 * so you should call libusb_handle_events_timeout() or similar immediately.
2536 * A return code of 0 indicates that there are no pending timeouts.
2537 *
2538 * On some platforms, this function will always returns 0 (no pending
2539 * timeouts). See \ref polltime.
2540 *
2541 * \param ctx the context to operate on, or NULL for the default context
2542 * \param tv output location for a relative time against the current
2543 * clock in which libusb must be called into in order to process timeout events
2544 * \returns 0 if there are no pending timeouts, 1 if a timeout was returned,
2545 * or LIBUSB_ERROR_OTHER on failure
2546 */
2547int API_EXPORTED libusb_get_next_timeout(libusb_context *ctx,
2548	struct timeval *tv)
2549{
2550	struct usbi_transfer *transfer;
2551	struct timespec cur_ts;
2552	struct timeval cur_tv;
2553	struct timeval next_timeout = { 0, 0 };
2554	int r;
2555
2556	USBI_GET_CONTEXT(ctx);
2557	if (usbi_using_timerfd(ctx))
2558		return 0;
2559
2560	usbi_mutex_lock(&ctx->flying_transfers_lock);
2561	if (list_empty(&ctx->flying_transfers)) {
2562		usbi_mutex_unlock(&ctx->flying_transfers_lock);
2563		usbi_dbg("no URBs, no timeout!");
2564		return 0;
2565	}
2566
2567	/* find next transfer which hasn't already been processed as timed out */
2568	list_for_each_entry(transfer, &ctx->flying_transfers, list, struct usbi_transfer) {
2569		if (transfer->timeout_flags & (USBI_TRANSFER_TIMEOUT_HANDLED | USBI_TRANSFER_OS_HANDLES_TIMEOUT))
2570			continue;
2571
2572		/* if we've reached transfers of infinte timeout, we're done looking */
2573		if (!timerisset(&transfer->timeout))
2574			break;
2575
2576		next_timeout = transfer->timeout;
2577		break;
2578	}
2579	usbi_mutex_unlock(&ctx->flying_transfers_lock);
2580
2581	if (!timerisset(&next_timeout)) {
2582		usbi_dbg("no URB with timeout or all handled by OS; no timeout!");
2583		return 0;
2584	}
2585
2586	r = usbi_backend->clock_gettime(USBI_CLOCK_MONOTONIC, &cur_ts);
2587	if (r < 0) {
2588		usbi_err(ctx, "failed to read monotonic clock, errno=%d", errno);
2589		return 0;
2590	}
2591	TIMESPEC_TO_TIMEVAL(&cur_tv, &cur_ts);
2592
2593	if (!timercmp(&cur_tv, &next_timeout, <)) {
2594		usbi_dbg("first timeout already expired");
2595		timerclear(tv);
2596	} else {
2597		timersub(&next_timeout, &cur_tv, tv);
2598		usbi_dbg("next timeout in %d.%06ds", tv->tv_sec, tv->tv_usec);
2599	}
2600
2601	return 1;
2602}
2603
2604/** \ingroup libusb_poll
2605 * Register notification functions for file descriptor additions/removals.
2606 * These functions will be invoked for every new or removed file descriptor
2607 * that libusb uses as an event source.
2608 *
2609 * To remove notifiers, pass NULL values for the function pointers.
2610 *
2611 * Note that file descriptors may have been added even before you register
2612 * these notifiers (e.g. at libusb_init() time).
2613 *
2614 * Additionally, note that the removal notifier may be called during
2615 * libusb_exit() (e.g. when it is closing file descriptors that were opened
2616 * and added to the poll set at libusb_init() time). If you don't want this,
2617 * remove the notifiers immediately before calling libusb_exit().
2618 *
2619 * \param ctx the context to operate on, or NULL for the default context
2620 * \param added_cb pointer to function for addition notifications
2621 * \param removed_cb pointer to function for removal notifications
2622 * \param user_data User data to be passed back to callbacks (useful for
2623 * passing context information)
2624 */
2625void API_EXPORTED libusb_set_pollfd_notifiers(libusb_context *ctx,
2626	libusb_pollfd_added_cb added_cb, libusb_pollfd_removed_cb removed_cb,
2627	void *user_data)
2628{
2629	USBI_GET_CONTEXT(ctx);
2630	ctx->fd_added_cb = added_cb;
2631	ctx->fd_removed_cb = removed_cb;
2632	ctx->fd_cb_user_data = user_data;
2633}
2634
2635/*
2636 * Interrupt the iteration of the event handling thread, so that it picks
2637 * up the fd change. Callers of this function must hold the event_data_lock.
2638 */
2639static void usbi_fd_notification(struct libusb_context *ctx)
2640{
2641	int pending_events;
2642
2643	/* Record that there is a new poll fd.
2644	 * Only signal an event if there are no prior pending events. */
2645	pending_events = usbi_pending_events(ctx);
2646	ctx->event_flags |= USBI_EVENT_POLLFDS_MODIFIED;
2647	if (!pending_events)
2648		usbi_signal_event(ctx);
2649}
2650
2651/* Add a file descriptor to the list of file descriptors to be monitored.
2652 * events should be specified as a bitmask of events passed to poll(), e.g.
2653 * POLLIN and/or POLLOUT. */
2654int usbi_add_pollfd(struct libusb_context *ctx, int fd, short events)
2655{
2656	struct usbi_pollfd *ipollfd = malloc(sizeof(*ipollfd));
2657	if (!ipollfd)
2658		return LIBUSB_ERROR_NO_MEM;
2659
2660	usbi_dbg("add fd %d events %d", fd, events);
2661	ipollfd->pollfd.fd = fd;
2662	ipollfd->pollfd.events = events;
2663	usbi_mutex_lock(&ctx->event_data_lock);
2664	list_add_tail(&ipollfd->list, &ctx->ipollfds);
2665	ctx->pollfds_cnt++;
2666	usbi_fd_notification(ctx);
2667	usbi_mutex_unlock(&ctx->event_data_lock);
2668
2669	if (ctx->fd_added_cb)
2670		ctx->fd_added_cb(fd, events, ctx->fd_cb_user_data);
2671	return 0;
2672}
2673
2674/* Remove a file descriptor from the list of file descriptors to be polled. */
2675void usbi_remove_pollfd(struct libusb_context *ctx, int fd)
2676{
2677	struct usbi_pollfd *ipollfd;
2678	int found = 0;
2679
2680	usbi_dbg("remove fd %d", fd);
2681	usbi_mutex_lock(&ctx->event_data_lock);
2682	list_for_each_entry(ipollfd, &ctx->ipollfds, list, struct usbi_pollfd)
2683		if (ipollfd->pollfd.fd == fd) {
2684			found = 1;
2685			break;
2686		}
2687
2688	if (!found) {
2689		usbi_dbg("couldn't find fd %d to remove", fd);
2690		usbi_mutex_unlock(&ctx->event_data_lock);
2691		return;
2692	}
2693
2694	list_del(&ipollfd->list);
2695	ctx->pollfds_cnt--;
2696	usbi_fd_notification(ctx);
2697	usbi_mutex_unlock(&ctx->event_data_lock);
2698	free(ipollfd);
2699	if (ctx->fd_removed_cb)
2700		ctx->fd_removed_cb(fd, ctx->fd_cb_user_data);
2701}
2702
2703/** \ingroup libusb_poll
2704 * Retrieve a list of file descriptors that should be polled by your main loop
2705 * as libusb event sources.
2706 *
2707 * The returned list is NULL-terminated and should be freed with libusb_free_pollfds()
2708 * when done. The actual list contents must not be touched.
2709 *
2710 * As file descriptors are a Unix-specific concept, this function is not
2711 * available on Windows and will always return NULL.
2712 *
2713 * \param ctx the context to operate on, or NULL for the default context
2714 * \returns a NULL-terminated list of libusb_pollfd structures
2715 * \returns NULL on error
2716 * \returns NULL on platforms where the functionality is not available
2717 */
2718DEFAULT_VISIBILITY
2719const struct libusb_pollfd ** LIBUSB_CALL libusb_get_pollfds(
2720	libusb_context *ctx)
2721{
2722#ifndef OS_WINDOWS
2723	struct libusb_pollfd **ret = NULL;
2724	struct usbi_pollfd *ipollfd;
2725	size_t i = 0;
2726	USBI_GET_CONTEXT(ctx);
2727
2728	usbi_mutex_lock(&ctx->event_data_lock);
2729
2730	ret = calloc(ctx->pollfds_cnt + 1, sizeof(struct libusb_pollfd *));
2731	if (!ret)
2732		goto out;
2733
2734	list_for_each_entry(ipollfd, &ctx->ipollfds, list, struct usbi_pollfd)
2735		ret[i++] = (struct libusb_pollfd *) ipollfd;
2736	ret[ctx->pollfds_cnt] = NULL;
2737
2738out:
2739	usbi_mutex_unlock(&ctx->event_data_lock);
2740	return (const struct libusb_pollfd **) ret;
2741#else
2742	usbi_err(ctx, "external polling of libusb's internal descriptors "\
2743		"is not yet supported on Windows platforms");
2744	return NULL;
2745#endif
2746}
2747
2748/** \ingroup libusb_poll
2749 * Free a list of libusb_pollfd structures. This should be called for all
2750 * pollfd lists allocated with libusb_get_pollfds().
2751 *
2752 * Since version 1.0.20, \ref LIBUSB_API_VERSION >= 0x01000104
2753 *
2754 * It is legal to call this function with a NULL pollfd list. In this case,
2755 * the function will simply return safely.
2756 *
2757 * \param pollfds the list of libusb_pollfd structures to free
2758 */
2759void API_EXPORTED libusb_free_pollfds(const struct libusb_pollfd **pollfds)
2760{
2761	if (!pollfds)
2762		return;
2763
2764	free((void *)pollfds);
2765}
2766
2767/* Backends may call this from handle_events to report disconnection of a
2768 * device. This function ensures transfers get cancelled appropriately.
2769 * Callers of this function must hold the events_lock.
2770 */
2771void usbi_handle_disconnect(struct libusb_device_handle *dev_handle)
2772{
2773	struct usbi_transfer *cur;
2774	struct usbi_transfer *to_cancel;
2775
2776	usbi_dbg("device %d.%d",
2777		dev_handle->dev->bus_number, dev_handle->dev->device_address);
2778
2779	/* terminate all pending transfers with the LIBUSB_TRANSFER_NO_DEVICE
2780	 * status code.
2781	 *
2782	 * when we find a transfer for this device on the list, there are two
2783	 * possible scenarios:
2784	 * 1. the transfer is currently in-flight, in which case we terminate the
2785	 *    transfer here
2786	 * 2. the transfer has been added to the flying transfer list by
2787	 *    libusb_submit_transfer, has failed to submit and
2788	 *    libusb_submit_transfer is waiting for us to release the
2789	 *    flying_transfers_lock to remove it, so we ignore it
2790	 */
2791
2792	while (1) {
2793		to_cancel = NULL;
2794		usbi_mutex_lock(&HANDLE_CTX(dev_handle)->flying_transfers_lock);
2795		list_for_each_entry(cur, &HANDLE_CTX(dev_handle)->flying_transfers, list, struct usbi_transfer)
2796			if (USBI_TRANSFER_TO_LIBUSB_TRANSFER(cur)->dev_handle == dev_handle) {
2797				usbi_mutex_lock(&cur->lock);
2798				if (cur->state_flags & USBI_TRANSFER_IN_FLIGHT)
2799					to_cancel = cur;
2800				usbi_mutex_unlock(&cur->lock);
2801
2802				if (to_cancel)
2803					break;
2804			}
2805		usbi_mutex_unlock(&HANDLE_CTX(dev_handle)->flying_transfers_lock);
2806
2807		if (!to_cancel)
2808			break;
2809
2810		usbi_dbg("cancelling transfer %p from disconnect",
2811			 USBI_TRANSFER_TO_LIBUSB_TRANSFER(to_cancel));
2812
2813		usbi_mutex_lock(&to_cancel->lock);
2814		usbi_backend->clear_transfer_priv(to_cancel);
2815		usbi_mutex_unlock(&to_cancel->lock);
2816		usbi_handle_transfer_completion(to_cancel, LIBUSB_TRANSFER_NO_DEVICE);
2817	}
2818
2819}
2820