OpenE2K
/
qemu-e2k
13
4
Fork 0
Code Issues 4 Pull Requests Projects 2 Releases Activity

hw/usb/dev-smartcard-reader: Handle 64 B USB packets 

The current code was not correctly handling 64 B (Max USB 1.1 payload size)
packets and therefore preventing some of the messages from smart card to
pass through to the guest.

If the smart card in host responded with 34 B of data in APDU layer, the
CCID headers added up to 64 B. The packet was send, but not correctly
committed per USB specification (8.5.3.2  Variable-length Data Stage):

>   When all of the data structure is returned to the host, the function
> should indicate that the Data stage is ended by returning a packet
> that is shorter than the MaxPacketSize for the pipe.  If the data
> structure is an exact multiple of wMaxPacketSize for the pipe, the
> function will return a zero-length packet to indicate the end of the
> Data stage.

This lead the guest applications to timeout while waiting for the rest
of data (the emulation layer is answering with NAK until the timeout).

This patch is checking the current maximum packet size and if the
payload of this size is detected, the message buffer is not yet released.
With the next call, the empty buffer is sent and the message buffer
is finally released.

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Message-id: 20180516115544.3897-2-jjelen@redhat.com
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
This commit is contained in:
Jakub Jelen 2018-05-16 13:55:44 +02:00 committed by Gerd Hoffmann
parent e58d64a16a
commit 8030dca376
1 changed files with 9 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
hw/usb/dev-smartcard-reader.c
View File

@ -1064,7 +1064,8 @@ err:
return;
}
static void ccid_bulk_in_copy_to_guest(USBCCIDState *s, USBPacket *p)
static void ccid_bulk_in_copy_to_guest(USBCCIDState *s, USBPacket *p,
unsigned int max_packet_size)
{
int len = 0;
@ -1072,10 +1073,13 @@ static void ccid_bulk_in_copy_to_guest(USBCCIDState *s, USBPacket *p)
if (s->current_bulk_in != NULL) {
len = MIN(s->current_bulk_in->len - s->current_bulk_in->pos,
p->iov.size);
usb_packet_copy(p, s->current_bulk_in->data +
s->current_bulk_in->pos, len);
if (len) {
usb_packet_copy(p, s->current_bulk_in->data +
s->current_bulk_in->pos, len);
}
s->current_bulk_in->pos += len;
if (s->current_bulk_in->pos == s->current_bulk_in->len) {
if (s->current_bulk_in->pos == s->current_bulk_in->len
&& len != max_packet_size) {
ccid_bulk_in_release(s);
}
} else {
@ -1107,7 +1111,7 @@ static void ccid_handle_data(USBDevice *dev, USBPacket *p)
case USB_TOKEN_IN:
switch (p->ep->nr) {
case CCID_BULK_IN_EP:
ccid_bulk_in_copy_to_guest(s, p);
ccid_bulk_in_copy_to_guest(s, p, dev->ep_ctl.max_packet_size);
break;
case CCID_INT_IN_EP:
if (s->notify_slot_change) {