xref: /netbsd-src/sys/dev/usb/if_kue.c (revision c0179c282a5968435315a82f4128c61372c68fc3)
1 /*	$NetBSD: if_kue.c,v 1.58 2006/11/16 01:33:26 christos Exp $	*/
2 /*
3  * Copyright (c) 1997, 1998, 1999, 2000
4  *	Bill Paul <wpaul@ee.columbia.edu>.  All rights reserved.
5  *
6  * Redistribution and use in source and binary forms, with or without
7  * modification, are permitted provided that the following conditions
8  * are met:
9  * 1. Redistributions of source code must retain the above copyright
10  *    notice, this list of conditions and the following disclaimer.
11  * 2. Redistributions in binary form must reproduce the above copyright
12  *    notice, this list of conditions and the following disclaimer in the
13  *    documentation and/or other materials provided with the distribution.
14  * 3. All advertising materials mentioning features or use of this software
15  *    must display the following acknowledgement:
16  *	This product includes software developed by Bill Paul.
17  * 4. Neither the name of the author nor the names of any co-contributors
18  *    may be used to endorse or promote products derived from this software
19  *    without specific prior written permission.
20  *
21  * THIS SOFTWARE IS PROVIDED BY Bill Paul AND CONTRIBUTORS ``AS IS'' AND
22  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24  * ARE DISCLAIMED.  IN NO EVENT SHALL Bill Paul OR THE VOICES IN HIS HEAD
25  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
26  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
27  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
28  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
29  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
30  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
31  * THE POSSIBILITY OF SUCH DAMAGE.
32  *
33  * $FreeBSD: src/sys/dev/usb/if_kue.c,v 1.14 2000/01/14 01:36:15 wpaul Exp $
34  */
35 
36 /*
37  * Kawasaki LSI KL5KUSB101B USB to ethernet adapter driver.
38  *
39  * Written by Bill Paul <wpaul@ee.columbia.edu>
40  * Electrical Engineering Department
41  * Columbia University, New York City
42  */
43 
44 /*
45  * The KLSI USB to ethernet adapter chip contains an USB serial interface,
46  * ethernet MAC and embedded microcontroller (called the QT Engine).
47  * The chip must have firmware loaded into it before it will operate.
48  * Packets are passed between the chip and host via bulk transfers.
49  * There is an interrupt endpoint mentioned in the software spec, however
50  * it's currently unused. This device is 10Mbps half-duplex only, hence
51  * there is no media selection logic. The MAC supports a 128 entry
52  * multicast filter, though the exact size of the filter can depend
53  * on the firmware. Curiously, while the software spec describes various
54  * ethernet statistics counters, my sample adapter and firmware combination
55  * claims not to support any statistics counters at all.
56  *
57  * Note that once we load the firmware in the device, we have to be
58  * careful not to load it again: if you restart your computer but
59  * leave the adapter attached to the USB controller, it may remain
60  * powered on and retain its firmware. In this case, we don't need
61  * to load the firmware a second time.
62  *
63  * Special thanks to Rob Furr for providing an ADS Technologies
64  * adapter for development and testing. No monkeys were harmed during
65  * the development of this driver.
66  */
67 
68 /*
69  * Ported to NetBSD and somewhat rewritten by Lennart Augustsson.
70  */
71 
72 #include <sys/cdefs.h>
73 __KERNEL_RCSID(0, "$NetBSD: if_kue.c,v 1.58 2006/11/16 01:33:26 christos Exp $");
74 
75 #if defined(__NetBSD__)
76 #include "opt_inet.h"
77 #include "bpfilter.h"
78 #include "rnd.h"
79 #elif defined(__OpenBSD__)
80 #include "bpfilter.h"
81 #endif
82 
83 #include <sys/param.h>
84 #include <sys/systm.h>
85 #include <sys/sockio.h>
86 #include <sys/mbuf.h>
87 #include <sys/malloc.h>
88 #include <sys/kernel.h>
89 #include <sys/socket.h>
90 #include <sys/device.h>
91 #include <sys/proc.h>
92 
93 #if NRND > 0
94 #include <sys/rnd.h>
95 #endif
96 
97 #include <net/if.h>
98 #if defined(__NetBSD__)
99 #include <net/if_arp.h>
100 #endif
101 #include <net/if_dl.h>
102 
103 #if NBPFILTER > 0
104 #include <net/bpf.h>
105 #endif
106 
107 #if defined(__NetBSD__)
108 #include <net/if_ether.h>
109 #ifdef INET
110 #include <netinet/in.h>
111 #include <netinet/if_inarp.h>
112 #endif
113 #endif /* defined (__NetBSD__) */
114 
115 #if defined(__OpenBSD__)
116 #ifdef INET
117 #include <netinet/in.h>
118 #include <netinet/in_systm.h>
119 #include <netinet/in_var.h>
120 #include <netinet/ip.h>
121 #include <netinet/if_ether.h>
122 #endif
123 #endif /* defined (__OpenBSD__) */
124 
125 
126 #include <dev/usb/usb.h>
127 #include <dev/usb/usbdi.h>
128 #include <dev/usb/usbdi_util.h>
129 #include <dev/usb/usbdevs.h>
130 
131 #include <dev/usb/if_kuereg.h>
132 #include <dev/usb/kue_fw.h>
133 
134 #ifdef KUE_DEBUG
135 #define DPRINTF(x)	if (kuedebug) logprintf x
136 #define DPRINTFN(n,x)	if (kuedebug >= (n)) logprintf x
137 int	kuedebug = 0;
138 #else
139 #define DPRINTF(x)
140 #define DPRINTFN(n,x)
141 #endif
142 
143 /*
144  * Various supported device vendors/products.
145  */
146 Static const struct usb_devno kue_devs[] = {
147 	{ USB_VENDOR_3COM, USB_PRODUCT_3COM_3C19250 },
148 	{ USB_VENDOR_3COM, USB_PRODUCT_3COM_3C460 },
149 	{ USB_VENDOR_ABOCOM, USB_PRODUCT_ABOCOM_URE450 },
150 	{ USB_VENDOR_ADS, USB_PRODUCT_ADS_UBS10BT },
151 	{ USB_VENDOR_ADS, USB_PRODUCT_ADS_UBS10BTX },
152 	{ USB_VENDOR_AOX, USB_PRODUCT_AOX_USB101 },
153 	{ USB_VENDOR_ASANTE, USB_PRODUCT_ASANTE_EA },
154 	{ USB_VENDOR_ATEN, USB_PRODUCT_ATEN_UC10T },
155 	{ USB_VENDOR_ATEN, USB_PRODUCT_ATEN_DSB650C },
156 	{ USB_VENDOR_COREGA, USB_PRODUCT_COREGA_ETHER_USB_T },
157 	{ USB_VENDOR_DLINK, USB_PRODUCT_DLINK_DSB650C },
158 	{ USB_VENDOR_ENTREGA, USB_PRODUCT_ENTREGA_E45 },
159 	{ USB_VENDOR_ENTREGA, USB_PRODUCT_ENTREGA_XX1 },
160 	{ USB_VENDOR_ENTREGA, USB_PRODUCT_ENTREGA_XX2 },
161 	{ USB_VENDOR_IODATA, USB_PRODUCT_IODATA_USBETT },
162 	{ USB_VENDOR_JATON, USB_PRODUCT_JATON_EDA },
163 	{ USB_VENDOR_KINGSTON, USB_PRODUCT_KINGSTON_XX1 },
164 	{ USB_VENDOR_KLSI, USB_PRODUCT_KLSI_DUH3E10BT },
165 	{ USB_VENDOR_KLSI, USB_PRODUCT_KLSI_DUH3E10BTN },
166 	{ USB_VENDOR_LINKSYS, USB_PRODUCT_LINKSYS_USB10T },
167 	{ USB_VENDOR_MOBILITY, USB_PRODUCT_MOBILITY_EA },
168 	{ USB_VENDOR_NETGEAR, USB_PRODUCT_NETGEAR_EA101 },
169 	{ USB_VENDOR_NETGEAR, USB_PRODUCT_NETGEAR_EA101X },
170 	{ USB_VENDOR_PERACOM, USB_PRODUCT_PERACOM_ENET },
171 	{ USB_VENDOR_PERACOM, USB_PRODUCT_PERACOM_ENET2 },
172 	{ USB_VENDOR_PERACOM, USB_PRODUCT_PERACOM_ENET3 },
173 	{ USB_VENDOR_PORTGEAR, USB_PRODUCT_PORTGEAR_EA8 },
174 	{ USB_VENDOR_PORTGEAR, USB_PRODUCT_PORTGEAR_EA9 },
175 	{ USB_VENDOR_PORTSMITH, USB_PRODUCT_PORTSMITH_EEA },
176 	{ USB_VENDOR_SHARK, USB_PRODUCT_SHARK_PA },
177 	{ USB_VENDOR_SILICOM, USB_PRODUCT_SILICOM_U2E },
178 	{ USB_VENDOR_SMC, USB_PRODUCT_SMC_2102USB },
179 };
180 #define kue_lookup(v, p) (usb_lookup(kue_devs, v, p))
181 
182 USB_DECLARE_DRIVER(kue);
183 
184 Static int kue_tx_list_init(struct kue_softc *);
185 Static int kue_rx_list_init(struct kue_softc *);
186 Static int kue_newbuf(struct kue_softc *, struct kue_chain *,struct mbuf *);
187 Static int kue_send(struct kue_softc *, struct mbuf *, int);
188 Static int kue_open_pipes(struct kue_softc *);
189 Static void kue_rxeof(usbd_xfer_handle, usbd_private_handle, usbd_status);
190 Static void kue_txeof(usbd_xfer_handle, usbd_private_handle, usbd_status);
191 Static void kue_start(struct ifnet *);
192 Static int kue_ioctl(struct ifnet *, u_long, caddr_t);
193 Static void kue_init(void *);
194 Static void kue_stop(struct kue_softc *);
195 Static void kue_watchdog(struct ifnet *);
196 
197 Static void kue_setmulti(struct kue_softc *);
198 Static void kue_reset(struct kue_softc *);
199 
200 Static usbd_status kue_ctl(struct kue_softc *, int, u_int8_t,
201 			   u_int16_t, void *, u_int32_t);
202 Static usbd_status kue_setword(struct kue_softc *, u_int8_t, u_int16_t);
203 Static int kue_load_fw(struct kue_softc *);
204 
205 Static usbd_status
206 kue_setword(struct kue_softc *sc, u_int8_t breq, u_int16_t word)
207 {
208 	usb_device_request_t	req;
209 
210 	DPRINTFN(10,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev),__func__));
211 
212 	req.bmRequestType = UT_WRITE_VENDOR_DEVICE;
213 	req.bRequest = breq;
214 	USETW(req.wValue, word);
215 	USETW(req.wIndex, 0);
216 	USETW(req.wLength, 0);
217 
218 	return (usbd_do_request(sc->kue_udev, &req, NULL));
219 }
220 
221 Static usbd_status
222 kue_ctl(struct kue_softc *sc, int rw, u_int8_t breq, u_int16_t val,
223 	void *data, u_int32_t len)
224 {
225 	usb_device_request_t	req;
226 
227 	DPRINTFN(10,("%s: %s: enter, len=%d\n", USBDEVNAME(sc->kue_dev),
228 		     __func__, len));
229 
230 	if (rw == KUE_CTL_WRITE)
231 		req.bmRequestType = UT_WRITE_VENDOR_DEVICE;
232 	else
233 		req.bmRequestType = UT_READ_VENDOR_DEVICE;
234 
235 	req.bRequest = breq;
236 	USETW(req.wValue, val);
237 	USETW(req.wIndex, 0);
238 	USETW(req.wLength, len);
239 
240 	return (usbd_do_request(sc->kue_udev, &req, data));
241 }
242 
243 Static int
244 kue_load_fw(struct kue_softc *sc)
245 {
246 	usb_device_descriptor_t dd;
247 	usbd_status		err;
248 
249 	DPRINTFN(1,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev), __func__));
250 
251 	/*
252 	 * First, check if we even need to load the firmware.
253 	 * If the device was still attached when the system was
254 	 * rebooted, it may already have firmware loaded in it.
255 	 * If this is the case, we don't need to do it again.
256 	 * And in fact, if we try to load it again, we'll hang,
257 	 * so we have to avoid this condition if we don't want
258 	 * to look stupid.
259 	 *
260          * We can test this quickly by checking the bcdRevision
261          * code. The NIC will return a different revision code if
262          * it's probed while the firmware is still loaded and
263          * running.
264          */
265 	if (usbd_get_device_desc(sc->kue_udev, &dd))
266 		return (EIO);
267         if (UGETW(dd.bcdDevice) == KUE_WARM_REV) {
268 		printf("%s: warm boot, no firmware download\n",
269 		       USBDEVNAME(sc->kue_dev));
270 		return (0);
271 	}
272 
273 	printf("%s: cold boot, downloading firmware\n",
274 	       USBDEVNAME(sc->kue_dev));
275 
276 	/* Load code segment */
277 	DPRINTFN(1,("%s: kue_load_fw: download code_seg\n",
278 		    USBDEVNAME(sc->kue_dev)));
279 	/*XXXUNCONST*/
280 	err = kue_ctl(sc, KUE_CTL_WRITE, KUE_CMD_SEND_SCAN,
281 	    0, __UNCONST(kue_code_seg), sizeof(kue_code_seg));
282 	if (err) {
283 		printf("%s: failed to load code segment: %s\n",
284 		    USBDEVNAME(sc->kue_dev), usbd_errstr(err));
285 			return (EIO);
286 	}
287 
288 	/* Load fixup segment */
289 	DPRINTFN(1,("%s: kue_load_fw: download fix_seg\n",
290 		    USBDEVNAME(sc->kue_dev)));
291 	/*XXXUNCONST*/
292 	err = kue_ctl(sc, KUE_CTL_WRITE, KUE_CMD_SEND_SCAN,
293 	    0, __UNCONST(kue_fix_seg), sizeof(kue_fix_seg));
294 	if (err) {
295 		printf("%s: failed to load fixup segment: %s\n",
296 		    USBDEVNAME(sc->kue_dev), usbd_errstr(err));
297 			return (EIO);
298 	}
299 
300 	/* Send trigger command. */
301 	DPRINTFN(1,("%s: kue_load_fw: download trig_seg\n",
302 		    USBDEVNAME(sc->kue_dev)));
303 	/*XXXUNCONST*/
304 	err = kue_ctl(sc, KUE_CTL_WRITE, KUE_CMD_SEND_SCAN,
305 	    0, __UNCONST(kue_trig_seg), sizeof(kue_trig_seg));
306 	if (err) {
307 		printf("%s: failed to load trigger segment: %s\n",
308 		    USBDEVNAME(sc->kue_dev), usbd_errstr(err));
309 			return (EIO);
310 	}
311 
312 	usbd_delay_ms(sc->kue_udev, 10);
313 
314 	/*
315 	 * Reload device descriptor.
316 	 * Why? The chip without the firmware loaded returns
317 	 * one revision code. The chip with the firmware
318 	 * loaded and running returns a *different* revision
319 	 * code. This confuses the quirk mechanism, which is
320 	 * dependent on the revision data.
321 	 */
322 	(void)usbd_reload_device_desc(sc->kue_udev);
323 
324 	DPRINTFN(1,("%s: %s: done\n", USBDEVNAME(sc->kue_dev), __func__));
325 
326 	/* Reset the adapter. */
327 	kue_reset(sc);
328 
329 	return (0);
330 }
331 
332 Static void
333 kue_setmulti(struct kue_softc *sc)
334 {
335 	struct ifnet		*ifp = GET_IFP(sc);
336 	struct ether_multi	*enm;
337 	struct ether_multistep	step;
338 	int			i;
339 
340 	DPRINTFN(5,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev), __func__));
341 
342 	if (ifp->if_flags & IFF_PROMISC) {
343 allmulti:
344 		ifp->if_flags |= IFF_ALLMULTI;
345 		sc->kue_rxfilt |= KUE_RXFILT_ALLMULTI;
346 		sc->kue_rxfilt &= ~KUE_RXFILT_MULTICAST;
347 		kue_setword(sc, KUE_CMD_SET_PKT_FILTER, sc->kue_rxfilt);
348 		return;
349 	}
350 
351 	sc->kue_rxfilt &= ~KUE_RXFILT_ALLMULTI;
352 
353 	i = 0;
354 #if defined (__NetBSD__)
355 	ETHER_FIRST_MULTI(step, &sc->kue_ec, enm);
356 #else
357 	ETHER_FIRST_MULTI(step, &sc->arpcom, enm);
358 #endif
359 	while (enm != NULL) {
360 		if (i == KUE_MCFILTCNT(sc) ||
361 		    memcmp(enm->enm_addrlo, enm->enm_addrhi,
362 			ETHER_ADDR_LEN) != 0)
363 			goto allmulti;
364 
365 		memcpy(KUE_MCFILT(sc, i), enm->enm_addrlo, ETHER_ADDR_LEN);
366 		ETHER_NEXT_MULTI(step, enm);
367 		i++;
368 	}
369 
370 	ifp->if_flags &= ~IFF_ALLMULTI;
371 
372 	sc->kue_rxfilt |= KUE_RXFILT_MULTICAST;
373 	kue_ctl(sc, KUE_CTL_WRITE, KUE_CMD_SET_MCAST_FILTERS,
374 	    i, sc->kue_mcfilters, i * ETHER_ADDR_LEN);
375 
376 	kue_setword(sc, KUE_CMD_SET_PKT_FILTER, sc->kue_rxfilt);
377 }
378 
379 /*
380  * Issue a SET_CONFIGURATION command to reset the MAC. This should be
381  * done after the firmware is loaded into the adapter in order to
382  * bring it into proper operation.
383  */
384 Static void
385 kue_reset(struct kue_softc *sc)
386 {
387 	DPRINTFN(5,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev), __func__));
388 
389 	if (usbd_set_config_no(sc->kue_udev, KUE_CONFIG_NO, 1) ||
390 	    usbd_device2interface_handle(sc->kue_udev, KUE_IFACE_IDX,
391 					 &sc->kue_iface))
392 		printf("%s: reset failed\n", USBDEVNAME(sc->kue_dev));
393 
394 	/* Wait a little while for the chip to get its brains in order. */
395 	usbd_delay_ms(sc->kue_udev, 10);
396 }
397 
398 /*
399  * Probe for a KLSI chip.
400  */
401 USB_MATCH(kue)
402 {
403 	USB_MATCH_START(kue, uaa);
404 
405 	DPRINTFN(25,("kue_match: enter\n"));
406 
407 	if (uaa->iface != NULL)
408 		return (UMATCH_NONE);
409 
410 	return (kue_lookup(uaa->vendor, uaa->product) != NULL ?
411 		UMATCH_VENDOR_PRODUCT : UMATCH_NONE);
412 }
413 
414 /*
415  * Attach the interface. Allocate softc structures, do
416  * setup and ethernet/BPF attach.
417  */
418 USB_ATTACH(kue)
419 {
420 	USB_ATTACH_START(kue, sc, uaa);
421 	char			*devinfop;
422 	int			s;
423 	struct ifnet		*ifp;
424 	usbd_device_handle	dev = uaa->device;
425 	usbd_interface_handle	iface;
426 	usbd_status		err;
427 	usb_interface_descriptor_t	*id;
428 	usb_endpoint_descriptor_t	*ed;
429 	int			i;
430 
431 	DPRINTFN(5,(" : kue_attach: sc=%p, dev=%p", sc, dev));
432 
433 	devinfop = usbd_devinfo_alloc(dev, 0);
434 	USB_ATTACH_SETUP;
435 	printf("%s: %s\n", USBDEVNAME(sc->kue_dev), devinfop);
436 	usbd_devinfo_free(devinfop);
437 
438 	err = usbd_set_config_no(dev, KUE_CONFIG_NO, 1);
439 	if (err) {
440 		printf("%s: setting config no failed\n",
441 		    USBDEVNAME(sc->kue_dev));
442 		USB_ATTACH_ERROR_RETURN;
443 	}
444 
445 	sc->kue_udev = dev;
446 	sc->kue_product = uaa->product;
447 	sc->kue_vendor = uaa->vendor;
448 
449 	/* Load the firmware into the NIC. */
450 	if (kue_load_fw(sc)) {
451 		printf("%s: loading firmware failed\n",
452 		    USBDEVNAME(sc->kue_dev));
453 		USB_ATTACH_ERROR_RETURN;
454 	}
455 
456 	err = usbd_device2interface_handle(dev, KUE_IFACE_IDX, &iface);
457 	if (err) {
458 		printf("%s: getting interface handle failed\n",
459 		    USBDEVNAME(sc->kue_dev));
460 		USB_ATTACH_ERROR_RETURN;
461 	}
462 
463 	sc->kue_iface = iface;
464 	id = usbd_get_interface_descriptor(iface);
465 
466 	/* Find endpoints. */
467 	for (i = 0; i < id->bNumEndpoints; i++) {
468 		ed = usbd_interface2endpoint_descriptor(iface, i);
469 		if (ed == NULL) {
470 			printf("%s: couldn't get ep %d\n",
471 			    USBDEVNAME(sc->kue_dev), i);
472 			USB_ATTACH_ERROR_RETURN;
473 		}
474 		if (UE_GET_DIR(ed->bEndpointAddress) == UE_DIR_IN &&
475 		    UE_GET_XFERTYPE(ed->bmAttributes) == UE_BULK) {
476 			sc->kue_ed[KUE_ENDPT_RX] = ed->bEndpointAddress;
477 		} else if (UE_GET_DIR(ed->bEndpointAddress) == UE_DIR_OUT &&
478 			   UE_GET_XFERTYPE(ed->bmAttributes) == UE_BULK) {
479 			sc->kue_ed[KUE_ENDPT_TX] = ed->bEndpointAddress;
480 		} else if (UE_GET_DIR(ed->bEndpointAddress) == UE_DIR_IN &&
481 			   UE_GET_XFERTYPE(ed->bmAttributes) == UE_INTERRUPT) {
482 			sc->kue_ed[KUE_ENDPT_INTR] = ed->bEndpointAddress;
483 		}
484 	}
485 
486 	if (sc->kue_ed[KUE_ENDPT_RX] == 0 || sc->kue_ed[KUE_ENDPT_TX] == 0) {
487 		printf("%s: missing endpoint\n", USBDEVNAME(sc->kue_dev));
488 		USB_ATTACH_ERROR_RETURN;
489 	}
490 
491 	/* Read ethernet descriptor */
492 	err = kue_ctl(sc, KUE_CTL_READ, KUE_CMD_GET_ETHER_DESCRIPTOR,
493 	    0, &sc->kue_desc, sizeof(sc->kue_desc));
494 	if (err) {
495 		printf("%s: could not read Ethernet descriptor\n",
496 		    USBDEVNAME(sc->kue_dev));
497 		USB_ATTACH_ERROR_RETURN;
498 	}
499 
500 	sc->kue_mcfilters = malloc(KUE_MCFILTCNT(sc) * ETHER_ADDR_LEN,
501 	    M_USBDEV, M_NOWAIT);
502 	if (sc->kue_mcfilters == NULL) {
503 		printf("%s: no memory for multicast filter buffer\n",
504 		    USBDEVNAME(sc->kue_dev));
505 		USB_ATTACH_ERROR_RETURN;
506 	}
507 
508 	s = splnet();
509 
510 	/*
511 	 * A KLSI chip was detected. Inform the world.
512 	 */
513 	printf("%s: Ethernet address %s\n", USBDEVNAME(sc->kue_dev),
514 	    ether_sprintf(sc->kue_desc.kue_macaddr));
515 
516 	/* Initialize interface info.*/
517 	ifp = GET_IFP(sc);
518 	ifp->if_softc = sc;
519 	ifp->if_mtu = ETHERMTU;
520 	ifp->if_flags = IFF_BROADCAST | IFF_SIMPLEX | IFF_MULTICAST;
521 	ifp->if_ioctl = kue_ioctl;
522 	ifp->if_start = kue_start;
523 	ifp->if_watchdog = kue_watchdog;
524 #if defined(__OpenBSD__)
525 	ifp->if_snd.ifq_maxlen = IFQ_MAXLEN;
526 #endif
527 	strncpy(ifp->if_xname, USBDEVNAME(sc->kue_dev), IFNAMSIZ);
528 
529 	IFQ_SET_READY(&ifp->if_snd);
530 
531 	/* Attach the interface. */
532 	if_attach(ifp);
533 	Ether_ifattach(ifp, sc->kue_desc.kue_macaddr);
534 #if NRND > 0
535 	rnd_attach_source(&sc->rnd_source, USBDEVNAME(sc->kue_dev),
536 	    RND_TYPE_NET, 0);
537 #endif
538 
539 	sc->kue_attached = 1;
540 	splx(s);
541 
542 	usbd_add_drv_event(USB_EVENT_DRIVER_ATTACH, sc->kue_udev,
543 			   USBDEV(sc->kue_dev));
544 
545 	USB_ATTACH_SUCCESS_RETURN;
546 }
547 
548 USB_DETACH(kue)
549 {
550 	USB_DETACH_START(kue, sc);
551 	struct ifnet		*ifp = GET_IFP(sc);
552 	int			s;
553 
554 	s = splusb();		/* XXX why? */
555 
556 	if (sc->kue_mcfilters != NULL) {
557 		free(sc->kue_mcfilters, M_USBDEV);
558 		sc->kue_mcfilters = NULL;
559 	}
560 
561 	if (!sc->kue_attached) {
562 		/* Detached before attached finished, so just bail out. */
563 		splx(s);
564 		return (0);
565 	}
566 
567 	if (ifp->if_flags & IFF_RUNNING)
568 		kue_stop(sc);
569 
570 #if defined(__NetBSD__)
571 #if NRND > 0
572 	rnd_detach_source(&sc->rnd_source);
573 #endif
574 	ether_ifdetach(ifp);
575 #endif /* __NetBSD__ */
576 
577 	if_detach(ifp);
578 
579 #ifdef DIAGNOSTIC
580 	if (sc->kue_ep[KUE_ENDPT_TX] != NULL ||
581 	    sc->kue_ep[KUE_ENDPT_RX] != NULL ||
582 	    sc->kue_ep[KUE_ENDPT_INTR] != NULL)
583 		printf("%s: detach has active endpoints\n",
584 		       USBDEVNAME(sc->kue_dev));
585 #endif
586 
587 	sc->kue_attached = 0;
588 	splx(s);
589 
590 	return (0);
591 }
592 
593 int
594 kue_activate(device_ptr_t self, enum devact act)
595 {
596 	struct kue_softc *sc = (struct kue_softc *)self;
597 
598 	DPRINTFN(2,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev), __func__));
599 
600 	switch (act) {
601 	case DVACT_ACTIVATE:
602 		return (EOPNOTSUPP);
603 		break;
604 
605 	case DVACT_DEACTIVATE:
606 #if defined(__NetBSD__)
607 		/* Deactivate the interface. */
608 		if_deactivate(&sc->kue_ec.ec_if);
609 #endif
610 		sc->kue_dying = 1;
611 		break;
612 	}
613 	return (0);
614 }
615 
616 /*
617  * Initialize an RX descriptor and attach an MBUF cluster.
618  */
619 Static int
620 kue_newbuf(struct kue_softc *sc, struct kue_chain *c, struct mbuf *m)
621 {
622 	struct mbuf		*m_new = NULL;
623 
624 	DPRINTFN(10,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev),__func__));
625 
626 	if (m == NULL) {
627 		MGETHDR(m_new, M_DONTWAIT, MT_DATA);
628 		if (m_new == NULL) {
629 			printf("%s: no memory for rx list "
630 			    "-- packet dropped!\n", USBDEVNAME(sc->kue_dev));
631 			return (ENOBUFS);
632 		}
633 
634 		MCLGET(m_new, M_DONTWAIT);
635 		if (!(m_new->m_flags & M_EXT)) {
636 			printf("%s: no memory for rx list "
637 			    "-- packet dropped!\n", USBDEVNAME(sc->kue_dev));
638 			m_freem(m_new);
639 			return (ENOBUFS);
640 		}
641 		m_new->m_len = m_new->m_pkthdr.len = MCLBYTES;
642 	} else {
643 		m_new = m;
644 		m_new->m_len = m_new->m_pkthdr.len = MCLBYTES;
645 		m_new->m_data = m_new->m_ext.ext_buf;
646 	}
647 
648 	c->kue_mbuf = m_new;
649 
650 	return (0);
651 }
652 
653 Static int
654 kue_rx_list_init(struct kue_softc *sc)
655 {
656 	struct kue_cdata	*cd;
657 	struct kue_chain	*c;
658 	int			i;
659 
660 	DPRINTFN(5,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev), __func__));
661 
662 	cd = &sc->kue_cdata;
663 	for (i = 0; i < KUE_RX_LIST_CNT; i++) {
664 		c = &cd->kue_rx_chain[i];
665 		c->kue_sc = sc;
666 		c->kue_idx = i;
667 		if (kue_newbuf(sc, c, NULL) == ENOBUFS)
668 			return (ENOBUFS);
669 		if (c->kue_xfer == NULL) {
670 			c->kue_xfer = usbd_alloc_xfer(sc->kue_udev);
671 			if (c->kue_xfer == NULL)
672 				return (ENOBUFS);
673 			c->kue_buf = usbd_alloc_buffer(c->kue_xfer, KUE_BUFSZ);
674 			if (c->kue_buf == NULL)
675 				return (ENOBUFS); /* XXX free xfer */
676 		}
677 	}
678 
679 	return (0);
680 }
681 
682 Static int
683 kue_tx_list_init(struct kue_softc *sc)
684 {
685 	struct kue_cdata	*cd;
686 	struct kue_chain	*c;
687 	int			i;
688 
689 	DPRINTFN(5,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev), __func__));
690 
691 	cd = &sc->kue_cdata;
692 	for (i = 0; i < KUE_TX_LIST_CNT; i++) {
693 		c = &cd->kue_tx_chain[i];
694 		c->kue_sc = sc;
695 		c->kue_idx = i;
696 		c->kue_mbuf = NULL;
697 		if (c->kue_xfer == NULL) {
698 			c->kue_xfer = usbd_alloc_xfer(sc->kue_udev);
699 			if (c->kue_xfer == NULL)
700 				return (ENOBUFS);
701 			c->kue_buf = usbd_alloc_buffer(c->kue_xfer, KUE_BUFSZ);
702 			if (c->kue_buf == NULL)
703 				return (ENOBUFS);
704 		}
705 	}
706 
707 	return (0);
708 }
709 
710 /*
711  * A frame has been uploaded: pass the resulting mbuf chain up to
712  * the higher level protocols.
713  */
714 Static void
715 kue_rxeof(usbd_xfer_handle xfer, usbd_private_handle priv, usbd_status status)
716 {
717 	struct kue_chain	*c = priv;
718 	struct kue_softc	*sc = c->kue_sc;
719 	struct ifnet		*ifp = GET_IFP(sc);
720 	struct mbuf		*m;
721 	int			total_len = 0;
722 	int			s;
723 
724 	DPRINTFN(10,("%s: %s: enter status=%d\n", USBDEVNAME(sc->kue_dev),
725 		     __func__, status));
726 
727 	if (sc->kue_dying)
728 		return;
729 
730 	if (!(ifp->if_flags & IFF_RUNNING))
731 		return;
732 
733 	if (status != USBD_NORMAL_COMPLETION) {
734 		if (status == USBD_NOT_STARTED || status == USBD_CANCELLED)
735 			return;
736 		sc->kue_rx_errs++;
737 		if (usbd_ratecheck(&sc->kue_rx_notice)) {
738 			printf("%s: %u usb errors on rx: %s\n",
739 			    USBDEVNAME(sc->kue_dev), sc->kue_rx_errs,
740 			    usbd_errstr(status));
741 			sc->kue_rx_errs = 0;
742 		}
743 		if (status == USBD_STALLED)
744 			usbd_clear_endpoint_stall_async(sc->kue_ep[KUE_ENDPT_RX]);
745 		goto done;
746 	}
747 
748 	usbd_get_xfer_status(xfer, NULL, NULL, &total_len, NULL);
749 
750 	DPRINTFN(10,("%s: %s: total_len=%d len=%d\n", USBDEVNAME(sc->kue_dev),
751 		     __func__, total_len,
752 		     UGETW(mtod(c->kue_mbuf, u_int8_t *))));
753 
754 	if (total_len <= 1)
755 		goto done;
756 
757 	m = c->kue_mbuf;
758 	/* copy data to mbuf */
759 	memcpy(mtod(m, char *), c->kue_buf, total_len);
760 
761 	/* No errors; receive the packet. */
762 	total_len = UGETW(mtod(m, u_int8_t *));
763 	m_adj(m, sizeof(u_int16_t));
764 
765 	if (total_len < sizeof(struct ether_header)) {
766 		ifp->if_ierrors++;
767 		goto done;
768 	}
769 
770 	ifp->if_ipackets++;
771 	m->m_pkthdr.len = m->m_len = total_len;
772 
773 	m->m_pkthdr.rcvif = ifp;
774 
775 	s = splnet();
776 
777 	/* XXX ugly */
778 	if (kue_newbuf(sc, c, NULL) == ENOBUFS) {
779 		ifp->if_ierrors++;
780 		goto done1;
781 	}
782 
783 #if NBPFILTER > 0
784 	/*
785 	 * Handle BPF listeners. Let the BPF user see the packet, but
786 	 * don't pass it up to the ether_input() layer unless it's
787 	 * a broadcast packet, multicast packet, matches our ethernet
788 	 * address or the interface is in promiscuous mode.
789 	 */
790 	if (ifp->if_bpf)
791 		bpf_mtap(ifp->if_bpf, m);
792 #endif
793 
794 	DPRINTFN(10,("%s: %s: deliver %d\n", USBDEVNAME(sc->kue_dev),
795 		    __func__, m->m_len));
796 	IF_INPUT(ifp, m);
797  done1:
798 	splx(s);
799 
800  done:
801 
802 	/* Setup new transfer. */
803 	usbd_setup_xfer(c->kue_xfer, sc->kue_ep[KUE_ENDPT_RX],
804 	    c, c->kue_buf, KUE_BUFSZ, USBD_SHORT_XFER_OK | USBD_NO_COPY,
805 	    USBD_NO_TIMEOUT, kue_rxeof);
806 	usbd_transfer(c->kue_xfer);
807 
808 	DPRINTFN(10,("%s: %s: start rx\n", USBDEVNAME(sc->kue_dev),
809 		    __func__));
810 }
811 
812 /*
813  * A frame was downloaded to the chip. It's safe for us to clean up
814  * the list buffers.
815  */
816 
817 Static void
818 kue_txeof(usbd_xfer_handle xfer, usbd_private_handle priv,
819     usbd_status status)
820 {
821 	struct kue_chain	*c = priv;
822 	struct kue_softc	*sc = c->kue_sc;
823 	struct ifnet		*ifp = GET_IFP(sc);
824 	int			s;
825 
826 	if (sc->kue_dying)
827 		return;
828 
829 	s = splnet();
830 
831 	DPRINTFN(10,("%s: %s: enter status=%d\n", USBDEVNAME(sc->kue_dev),
832 		    __func__, status));
833 
834 	ifp->if_timer = 0;
835 	ifp->if_flags &= ~IFF_OACTIVE;
836 
837 	if (status != USBD_NORMAL_COMPLETION) {
838 		if (status == USBD_NOT_STARTED || status == USBD_CANCELLED) {
839 			splx(s);
840 			return;
841 		}
842 		ifp->if_oerrors++;
843 		printf("%s: usb error on tx: %s\n", USBDEVNAME(sc->kue_dev),
844 		    usbd_errstr(status));
845 		if (status == USBD_STALLED)
846 			usbd_clear_endpoint_stall_async(sc->kue_ep[KUE_ENDPT_TX]);
847 		splx(s);
848 		return;
849 	}
850 
851 	ifp->if_opackets++;
852 
853 	m_freem(c->kue_mbuf);
854 	c->kue_mbuf = NULL;
855 
856 	if (IFQ_IS_EMPTY(&ifp->if_snd) == 0)
857 		kue_start(ifp);
858 
859 	splx(s);
860 }
861 
862 Static int
863 kue_send(struct kue_softc *sc, struct mbuf *m, int idx)
864 {
865 	int			total_len;
866 	struct kue_chain	*c;
867 	usbd_status		err;
868 
869 	DPRINTFN(10,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev),__func__));
870 
871 	c = &sc->kue_cdata.kue_tx_chain[idx];
872 
873 	/*
874 	 * Copy the mbuf data into a contiguous buffer, leaving two
875 	 * bytes at the beginning to hold the frame length.
876 	 */
877 	m_copydata(m, 0, m->m_pkthdr.len, c->kue_buf + 2);
878 	c->kue_mbuf = m;
879 
880 	total_len = m->m_pkthdr.len + 2;
881 	/* XXX what's this? */
882 	total_len += 64 - (total_len % 64);
883 
884 	/* Frame length is specified in the first 2 bytes of the buffer. */
885 	c->kue_buf[0] = (u_int8_t)m->m_pkthdr.len;
886 	c->kue_buf[1] = (u_int8_t)(m->m_pkthdr.len >> 8);
887 
888 	usbd_setup_xfer(c->kue_xfer, sc->kue_ep[KUE_ENDPT_TX],
889 	    c, c->kue_buf, total_len, USBD_NO_COPY, USBD_DEFAULT_TIMEOUT,
890 	    kue_txeof);
891 
892 	/* Transmit */
893 	err = usbd_transfer(c->kue_xfer);
894 	if (err != USBD_IN_PROGRESS) {
895 		printf("%s: kue_send error=%s\n", USBDEVNAME(sc->kue_dev),
896 		       usbd_errstr(err));
897 		kue_stop(sc);
898 		return (EIO);
899 	}
900 
901 	sc->kue_cdata.kue_tx_cnt++;
902 
903 	return (0);
904 }
905 
906 Static void
907 kue_start(struct ifnet *ifp)
908 {
909 	struct kue_softc	*sc = ifp->if_softc;
910 	struct mbuf		*m_head = NULL;
911 
912 	DPRINTFN(10,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev),__func__));
913 
914 	if (sc->kue_dying)
915 		return;
916 
917 	if (ifp->if_flags & IFF_OACTIVE)
918 		return;
919 
920 	IFQ_POLL(&ifp->if_snd, m_head);
921 	if (m_head == NULL)
922 		return;
923 
924 	if (kue_send(sc, m_head, 0)) {
925 		ifp->if_flags |= IFF_OACTIVE;
926 		return;
927 	}
928 
929 	IFQ_DEQUEUE(&ifp->if_snd, m_head);
930 
931 #if NBPFILTER > 0
932 	/*
933 	 * If there's a BPF listener, bounce a copy of this frame
934 	 * to him.
935 	 */
936 	if (ifp->if_bpf)
937 		bpf_mtap(ifp->if_bpf, m_head);
938 #endif
939 
940 	ifp->if_flags |= IFF_OACTIVE;
941 
942 	/*
943 	 * Set a timeout in case the chip goes out to lunch.
944 	 */
945 	ifp->if_timer = 6;
946 }
947 
948 Static void
949 kue_init(void *xsc)
950 {
951 	struct kue_softc	*sc = xsc;
952 	struct ifnet		*ifp = GET_IFP(sc);
953 	int			s;
954 	u_char			*eaddr;
955 
956 	DPRINTFN(5,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev),__func__));
957 
958 	if (ifp->if_flags & IFF_RUNNING)
959 		return;
960 
961 	s = splnet();
962 
963 #if defined(__NetBSD__)
964 	eaddr = LLADDR(ifp->if_sadl);
965 #else
966 	eaddr = sc->arpcom.ac_enaddr;
967 #endif /* defined(__NetBSD__) */
968 	/* Set MAC address */
969 	kue_ctl(sc, KUE_CTL_WRITE, KUE_CMD_SET_MAC, 0, eaddr, ETHER_ADDR_LEN);
970 
971 	sc->kue_rxfilt = KUE_RXFILT_UNICAST | KUE_RXFILT_BROADCAST;
972 
973 	 /* If we want promiscuous mode, set the allframes bit. */
974 	if (ifp->if_flags & IFF_PROMISC)
975 		sc->kue_rxfilt |= KUE_RXFILT_PROMISC;
976 
977 	kue_setword(sc, KUE_CMD_SET_PKT_FILTER, sc->kue_rxfilt);
978 
979 	/* I'm not sure how to tune these. */
980 #if 0
981 	/*
982 	 * Leave this one alone for now; setting it
983 	 * wrong causes lockups on some machines/controllers.
984 	 */
985 	kue_setword(sc, KUE_CMD_SET_SOFS, 1);
986 #endif
987 	kue_setword(sc, KUE_CMD_SET_URB_SIZE, 64);
988 
989 	/* Init TX ring. */
990 	if (kue_tx_list_init(sc) == ENOBUFS) {
991 		printf("%s: tx list init failed\n", USBDEVNAME(sc->kue_dev));
992 		splx(s);
993 		return;
994 	}
995 
996 	/* Init RX ring. */
997 	if (kue_rx_list_init(sc) == ENOBUFS) {
998 		printf("%s: rx list init failed\n", USBDEVNAME(sc->kue_dev));
999 		splx(s);
1000 		return;
1001 	}
1002 
1003 	/* Load the multicast filter. */
1004 	kue_setmulti(sc);
1005 
1006 	if (sc->kue_ep[KUE_ENDPT_RX] == NULL) {
1007 		if (kue_open_pipes(sc)) {
1008 			splx(s);
1009 			return;
1010 		}
1011 	}
1012 
1013 	ifp->if_flags |= IFF_RUNNING;
1014 	ifp->if_flags &= ~IFF_OACTIVE;
1015 
1016 	splx(s);
1017 }
1018 
1019 Static int
1020 kue_open_pipes(struct kue_softc *sc)
1021 {
1022 	usbd_status		err;
1023 	struct kue_chain	*c;
1024 	int			i;
1025 
1026 	DPRINTFN(5,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev),__func__));
1027 
1028 	/* Open RX and TX pipes. */
1029 	err = usbd_open_pipe(sc->kue_iface, sc->kue_ed[KUE_ENDPT_RX],
1030 	    USBD_EXCLUSIVE_USE, &sc->kue_ep[KUE_ENDPT_RX]);
1031 	if (err) {
1032 		printf("%s: open rx pipe failed: %s\n",
1033 		    USBDEVNAME(sc->kue_dev), usbd_errstr(err));
1034 		return (EIO);
1035 	}
1036 
1037 	err = usbd_open_pipe(sc->kue_iface, sc->kue_ed[KUE_ENDPT_TX],
1038 	    USBD_EXCLUSIVE_USE, &sc->kue_ep[KUE_ENDPT_TX]);
1039 	if (err) {
1040 		printf("%s: open tx pipe failed: %s\n",
1041 		    USBDEVNAME(sc->kue_dev), usbd_errstr(err));
1042 		return (EIO);
1043 	}
1044 
1045 	/* Start up the receive pipe. */
1046 	for (i = 0; i < KUE_RX_LIST_CNT; i++) {
1047 		c = &sc->kue_cdata.kue_rx_chain[i];
1048 		usbd_setup_xfer(c->kue_xfer, sc->kue_ep[KUE_ENDPT_RX],
1049 		    c, c->kue_buf, KUE_BUFSZ,
1050 		    USBD_SHORT_XFER_OK | USBD_NO_COPY, USBD_NO_TIMEOUT,
1051 		    kue_rxeof);
1052 		DPRINTFN(5,("%s: %s: start read\n", USBDEVNAME(sc->kue_dev),
1053 			    __func__));
1054 		usbd_transfer(c->kue_xfer);
1055 	}
1056 
1057 	return (0);
1058 }
1059 
1060 Static int
1061 kue_ioctl(struct ifnet *ifp, u_long command, caddr_t data)
1062 {
1063 	struct kue_softc	*sc = ifp->if_softc;
1064 	struct ifaddr 		*ifa = (struct ifaddr *)data;
1065 	struct ifreq		*ifr = (struct ifreq *)data;
1066 	int			s, error = 0;
1067 
1068 	DPRINTFN(5,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev),__func__));
1069 
1070 	if (sc->kue_dying)
1071 		return (EIO);
1072 
1073 #ifdef DIAGNOSTIC
1074 	if (!curproc) {
1075 		printf("%s: no proc!!\n", USBDEVNAME(sc->kue_dev));
1076 		return EIO;
1077 	}
1078 #endif
1079 
1080 	s = splnet();
1081 
1082 	switch(command) {
1083 	case SIOCSIFADDR:
1084 		ifp->if_flags |= IFF_UP;
1085 		kue_init(sc);
1086 
1087 		switch (ifa->ifa_addr->sa_family) {
1088 #ifdef INET
1089 		case AF_INET:
1090 #if defined(__NetBSD__)
1091 			arp_ifinit(ifp, ifa);
1092 #else
1093 			arp_ifinit(&sc->arpcom, ifa);
1094 #endif
1095 			break;
1096 #endif /* INET */
1097 		}
1098 		break;
1099 
1100 	case SIOCSIFMTU:
1101 		if (ifr->ifr_mtu > ETHERMTU)
1102 			error = EINVAL;
1103 		else
1104 			ifp->if_mtu = ifr->ifr_mtu;
1105 		break;
1106 
1107 	case SIOCSIFFLAGS:
1108 		if (ifp->if_flags & IFF_UP) {
1109 			if (ifp->if_flags & IFF_RUNNING &&
1110 			    ifp->if_flags & IFF_PROMISC &&
1111 			    !(sc->kue_if_flags & IFF_PROMISC)) {
1112 				sc->kue_rxfilt |= KUE_RXFILT_PROMISC;
1113 				kue_setword(sc, KUE_CMD_SET_PKT_FILTER,
1114 				    sc->kue_rxfilt);
1115 			} else if (ifp->if_flags & IFF_RUNNING &&
1116 			    !(ifp->if_flags & IFF_PROMISC) &&
1117 			    sc->kue_if_flags & IFF_PROMISC) {
1118 				sc->kue_rxfilt &= ~KUE_RXFILT_PROMISC;
1119 				kue_setword(sc, KUE_CMD_SET_PKT_FILTER,
1120 				    sc->kue_rxfilt);
1121 			} else if (!(ifp->if_flags & IFF_RUNNING))
1122 				kue_init(sc);
1123 		} else {
1124 			if (ifp->if_flags & IFF_RUNNING)
1125 				kue_stop(sc);
1126 		}
1127 		sc->kue_if_flags = ifp->if_flags;
1128 		error = 0;
1129 		break;
1130 	case SIOCADDMULTI:
1131 	case SIOCDELMULTI:
1132 		kue_setmulti(sc);
1133 		error = 0;
1134 		break;
1135 	default:
1136 		error = EINVAL;
1137 		break;
1138 	}
1139 
1140 	splx(s);
1141 
1142 	return (error);
1143 }
1144 
1145 Static void
1146 kue_watchdog(struct ifnet *ifp)
1147 {
1148 	struct kue_softc	*sc = ifp->if_softc;
1149 	struct kue_chain	*c;
1150 	usbd_status		stat;
1151 	int			s;
1152 
1153 	DPRINTFN(5,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev),__func__));
1154 
1155 	if (sc->kue_dying)
1156 		return;
1157 
1158 	ifp->if_oerrors++;
1159 	printf("%s: watchdog timeout\n", USBDEVNAME(sc->kue_dev));
1160 
1161 	s = splusb();
1162 	c = &sc->kue_cdata.kue_tx_chain[0];
1163 	usbd_get_xfer_status(c->kue_xfer, NULL, NULL, NULL, &stat);
1164 	kue_txeof(c->kue_xfer, c, stat);
1165 
1166 	if (IFQ_IS_EMPTY(&ifp->if_snd) == 0)
1167 		kue_start(ifp);
1168 	splx(s);
1169 }
1170 
1171 /*
1172  * Stop the adapter and free any mbufs allocated to the
1173  * RX and TX lists.
1174  */
1175 Static void
1176 kue_stop(struct kue_softc *sc)
1177 {
1178 	usbd_status		err;
1179 	struct ifnet		*ifp;
1180 	int			i;
1181 
1182 	DPRINTFN(5,("%s: %s: enter\n", USBDEVNAME(sc->kue_dev),__func__));
1183 
1184 	ifp = GET_IFP(sc);
1185 	ifp->if_timer = 0;
1186 
1187 	/* Stop transfers. */
1188 	if (sc->kue_ep[KUE_ENDPT_RX] != NULL) {
1189 		err = usbd_abort_pipe(sc->kue_ep[KUE_ENDPT_RX]);
1190 		if (err) {
1191 			printf("%s: abort rx pipe failed: %s\n",
1192 			    USBDEVNAME(sc->kue_dev), usbd_errstr(err));
1193 		}
1194 		err = usbd_close_pipe(sc->kue_ep[KUE_ENDPT_RX]);
1195 		if (err) {
1196 			printf("%s: close rx pipe failed: %s\n",
1197 			    USBDEVNAME(sc->kue_dev), usbd_errstr(err));
1198 		}
1199 		sc->kue_ep[KUE_ENDPT_RX] = NULL;
1200 	}
1201 
1202 	if (sc->kue_ep[KUE_ENDPT_TX] != NULL) {
1203 		err = usbd_abort_pipe(sc->kue_ep[KUE_ENDPT_TX]);
1204 		if (err) {
1205 			printf("%s: abort tx pipe failed: %s\n",
1206 			    USBDEVNAME(sc->kue_dev), usbd_errstr(err));
1207 		}
1208 		err = usbd_close_pipe(sc->kue_ep[KUE_ENDPT_TX]);
1209 		if (err) {
1210 			printf("%s: close tx pipe failed: %s\n",
1211 			    USBDEVNAME(sc->kue_dev), usbd_errstr(err));
1212 		}
1213 		sc->kue_ep[KUE_ENDPT_TX] = NULL;
1214 	}
1215 
1216 	if (sc->kue_ep[KUE_ENDPT_INTR] != NULL) {
1217 		err = usbd_abort_pipe(sc->kue_ep[KUE_ENDPT_INTR]);
1218 		if (err) {
1219 			printf("%s: abort intr pipe failed: %s\n",
1220 			    USBDEVNAME(sc->kue_dev), usbd_errstr(err));
1221 		}
1222 		err = usbd_close_pipe(sc->kue_ep[KUE_ENDPT_INTR]);
1223 		if (err) {
1224 			printf("%s: close intr pipe failed: %s\n",
1225 			    USBDEVNAME(sc->kue_dev), usbd_errstr(err));
1226 		}
1227 		sc->kue_ep[KUE_ENDPT_INTR] = NULL;
1228 	}
1229 
1230 	/* Free RX resources. */
1231 	for (i = 0; i < KUE_RX_LIST_CNT; i++) {
1232 		if (sc->kue_cdata.kue_rx_chain[i].kue_mbuf != NULL) {
1233 			m_freem(sc->kue_cdata.kue_rx_chain[i].kue_mbuf);
1234 			sc->kue_cdata.kue_rx_chain[i].kue_mbuf = NULL;
1235 		}
1236 		if (sc->kue_cdata.kue_rx_chain[i].kue_xfer != NULL) {
1237 			usbd_free_xfer(sc->kue_cdata.kue_rx_chain[i].kue_xfer);
1238 			sc->kue_cdata.kue_rx_chain[i].kue_xfer = NULL;
1239 		}
1240 	}
1241 
1242 	/* Free TX resources. */
1243 	for (i = 0; i < KUE_TX_LIST_CNT; i++) {
1244 		if (sc->kue_cdata.kue_tx_chain[i].kue_mbuf != NULL) {
1245 			m_freem(sc->kue_cdata.kue_tx_chain[i].kue_mbuf);
1246 			sc->kue_cdata.kue_tx_chain[i].kue_mbuf = NULL;
1247 		}
1248 		if (sc->kue_cdata.kue_tx_chain[i].kue_xfer != NULL) {
1249 			usbd_free_xfer(sc->kue_cdata.kue_tx_chain[i].kue_xfer);
1250 			sc->kue_cdata.kue_tx_chain[i].kue_xfer = NULL;
1251 		}
1252 	}
1253 
1254 	ifp->if_flags &= ~(IFF_RUNNING | IFF_OACTIVE);
1255 }
1256