Linux Audio

Check our new training course

Yocto / OpenEmbedded training

Feb 10-13, 2025
Register
Loading...
v3.1
   1/*
   2 * Copyright (c) 2010-2011 Atheros Communications Inc.
   3 *
   4 * Permission to use, copy, modify, and/or distribute this software for any
   5 * purpose with or without fee is hereby granted, provided that the above
   6 * copyright notice and this permission notice appear in all copies.
   7 *
   8 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
   9 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
  10 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
  11 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
  12 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  13 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  14 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  15 */
  16
  17#include <asm/unaligned.h>
  18#include "htc.h"
  19
  20/* identify firmware images */
  21#define FIRMWARE_AR7010_1_1     "htc_7010.fw"
  22#define FIRMWARE_AR9271         "htc_9271.fw"
  23
  24MODULE_FIRMWARE(FIRMWARE_AR7010_1_1);
  25MODULE_FIRMWARE(FIRMWARE_AR9271);
  26
  27static struct usb_device_id ath9k_hif_usb_ids[] = {
  28	{ USB_DEVICE(0x0cf3, 0x9271) }, /* Atheros */
  29	{ USB_DEVICE(0x0cf3, 0x1006) }, /* Atheros */
  30	{ USB_DEVICE(0x0846, 0x9030) }, /* Netgear N150 */
 
  31	{ USB_DEVICE(0x07D1, 0x3A10) }, /* Dlink Wireless 150 */
  32	{ USB_DEVICE(0x13D3, 0x3327) }, /* Azurewave */
  33	{ USB_DEVICE(0x13D3, 0x3328) }, /* Azurewave */
  34	{ USB_DEVICE(0x13D3, 0x3346) }, /* IMC Networks */
  35	{ USB_DEVICE(0x13D3, 0x3348) }, /* Azurewave */
  36	{ USB_DEVICE(0x13D3, 0x3349) }, /* Azurewave */
  37	{ USB_DEVICE(0x13D3, 0x3350) }, /* Azurewave */
  38	{ USB_DEVICE(0x04CA, 0x4605) }, /* Liteon */
  39	{ USB_DEVICE(0x040D, 0x3801) }, /* VIA */
  40	{ USB_DEVICE(0x0cf3, 0xb003) }, /* Ubiquiti WifiStation Ext */
 
 
 
 
  41
  42	{ USB_DEVICE(0x0cf3, 0x7015),
  43	  .driver_info = AR9287_USB },  /* Atheros */
  44	{ USB_DEVICE(0x1668, 0x1200),
  45	  .driver_info = AR9287_USB },  /* Verizon */
  46
  47	{ USB_DEVICE(0x0cf3, 0x7010),
  48	  .driver_info = AR9280_USB },  /* Atheros */
  49	{ USB_DEVICE(0x0846, 0x9018),
  50	  .driver_info = AR9280_USB },  /* Netgear WNDA3200 */
  51	{ USB_DEVICE(0x083A, 0xA704),
  52	  .driver_info = AR9280_USB },  /* SMC Networks */
  53	{ USB_DEVICE(0x0411, 0x017f),
  54	  .driver_info = AR9280_USB },  /* Sony UWA-BR100 */
 
 
 
 
 
 
  55
  56	{ USB_DEVICE(0x0cf3, 0x20ff),
  57	  .driver_info = STORAGE_DEVICE },
  58
  59	{ },
  60};
  61
  62MODULE_DEVICE_TABLE(usb, ath9k_hif_usb_ids);
  63
  64static int __hif_usb_tx(struct hif_device_usb *hif_dev);
  65
  66static void hif_usb_regout_cb(struct urb *urb)
  67{
  68	struct cmd_buf *cmd = (struct cmd_buf *)urb->context;
  69
  70	switch (urb->status) {
  71	case 0:
  72		break;
  73	case -ENOENT:
  74	case -ECONNRESET:
  75	case -ENODEV:
  76	case -ESHUTDOWN:
  77		goto free;
  78	default:
  79		break;
  80	}
  81
  82	if (cmd) {
  83		ath9k_htc_txcompletion_cb(cmd->hif_dev->htc_handle,
  84					  cmd->skb, true);
  85		kfree(cmd);
  86	}
  87
  88	return;
  89free:
  90	kfree_skb(cmd->skb);
  91	kfree(cmd);
  92}
  93
  94static int hif_usb_send_regout(struct hif_device_usb *hif_dev,
  95			       struct sk_buff *skb)
  96{
  97	struct urb *urb;
  98	struct cmd_buf *cmd;
  99	int ret = 0;
 100
 101	urb = usb_alloc_urb(0, GFP_KERNEL);
 102	if (urb == NULL)
 103		return -ENOMEM;
 104
 105	cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
 106	if (cmd == NULL) {
 107		usb_free_urb(urb);
 108		return -ENOMEM;
 109	}
 110
 111	cmd->skb = skb;
 112	cmd->hif_dev = hif_dev;
 113
 114	usb_fill_bulk_urb(urb, hif_dev->udev,
 115			 usb_sndbulkpipe(hif_dev->udev, USB_REG_OUT_PIPE),
 116			 skb->data, skb->len,
 117			 hif_usb_regout_cb, cmd);
 118
 119	usb_anchor_urb(urb, &hif_dev->regout_submitted);
 120	ret = usb_submit_urb(urb, GFP_KERNEL);
 121	if (ret) {
 122		usb_unanchor_urb(urb);
 123		kfree(cmd);
 124	}
 125	usb_free_urb(urb);
 126
 127	return ret;
 128}
 129
 130static void hif_usb_mgmt_cb(struct urb *urb)
 131{
 132	struct cmd_buf *cmd = (struct cmd_buf *)urb->context;
 133	struct hif_device_usb *hif_dev;
 
 134	bool txok = true;
 135
 136	if (!cmd || !cmd->skb || !cmd->hif_dev)
 137		return;
 138
 139	hif_dev = cmd->hif_dev;
 140
 141	switch (urb->status) {
 142	case 0:
 143		break;
 144	case -ENOENT:
 145	case -ECONNRESET:
 146	case -ENODEV:
 147	case -ESHUTDOWN:
 148		txok = false;
 149
 150		/*
 151		 * If the URBs are being flushed, no need to complete
 152		 * this packet.
 153		 */
 154		spin_lock(&hif_dev->tx.tx_lock);
 155		if (hif_dev->tx.flags & HIF_USB_TX_FLUSH) {
 156			spin_unlock(&hif_dev->tx.tx_lock);
 157			dev_kfree_skb_any(cmd->skb);
 158			kfree(cmd);
 159			return;
 160		}
 161		spin_unlock(&hif_dev->tx.tx_lock);
 162
 163		break;
 164	default:
 165		txok = false;
 166		break;
 167	}
 168
 169	skb_pull(cmd->skb, 4);
 170	ath9k_htc_txcompletion_cb(cmd->hif_dev->htc_handle,
 171				  cmd->skb, txok);
 172	kfree(cmd);
 173}
 174
 175static int hif_usb_send_mgmt(struct hif_device_usb *hif_dev,
 176			     struct sk_buff *skb)
 177{
 178	struct urb *urb;
 179	struct cmd_buf *cmd;
 180	int ret = 0;
 181	__le16 *hdr;
 182
 183	urb = usb_alloc_urb(0, GFP_ATOMIC);
 184	if (urb == NULL)
 185		return -ENOMEM;
 186
 187	cmd = kzalloc(sizeof(*cmd), GFP_ATOMIC);
 188	if (cmd == NULL) {
 189		usb_free_urb(urb);
 190		return -ENOMEM;
 191	}
 192
 193	cmd->skb = skb;
 194	cmd->hif_dev = hif_dev;
 195
 196	hdr = (__le16 *) skb_push(skb, 4);
 197	*hdr++ = cpu_to_le16(skb->len - 4);
 198	*hdr++ = cpu_to_le16(ATH_USB_TX_STREAM_MODE_TAG);
 199
 200	usb_fill_bulk_urb(urb, hif_dev->udev,
 201			 usb_sndbulkpipe(hif_dev->udev, USB_WLAN_TX_PIPE),
 202			 skb->data, skb->len,
 203			 hif_usb_mgmt_cb, cmd);
 204
 205	usb_anchor_urb(urb, &hif_dev->mgmt_submitted);
 206	ret = usb_submit_urb(urb, GFP_ATOMIC);
 207	if (ret) {
 208		usb_unanchor_urb(urb);
 209		kfree(cmd);
 210	}
 211	usb_free_urb(urb);
 212
 213	return ret;
 214}
 215
 216static inline void ath9k_skb_queue_purge(struct hif_device_usb *hif_dev,
 217					 struct sk_buff_head *list)
 218{
 219	struct sk_buff *skb;
 220
 221	while ((skb = __skb_dequeue(list)) != NULL) {
 222		dev_kfree_skb_any(skb);
 223	}
 224}
 225
 226static inline void ath9k_skb_queue_complete(struct hif_device_usb *hif_dev,
 227					    struct sk_buff_head *queue,
 228					    bool txok)
 229{
 230	struct sk_buff *skb;
 231
 232	while ((skb = __skb_dequeue(queue)) != NULL) {
 
 
 
 233		ath9k_htc_txcompletion_cb(hif_dev->htc_handle,
 234					  skb, txok);
 235		if (txok)
 236			TX_STAT_INC(skb_success);
 
 
 237		else
 238			TX_STAT_INC(skb_failed);
 239	}
 240}
 241
 242static void hif_usb_tx_cb(struct urb *urb)
 243{
 244	struct tx_buf *tx_buf = (struct tx_buf *) urb->context;
 245	struct hif_device_usb *hif_dev;
 246	bool txok = true;
 247
 248	if (!tx_buf || !tx_buf->hif_dev)
 249		return;
 250
 251	hif_dev = tx_buf->hif_dev;
 252
 253	switch (urb->status) {
 254	case 0:
 255		break;
 256	case -ENOENT:
 257	case -ECONNRESET:
 258	case -ENODEV:
 259	case -ESHUTDOWN:
 260		txok = false;
 261
 262		/*
 263		 * If the URBs are being flushed, no need to add this
 264		 * URB to the free list.
 265		 */
 266		spin_lock(&hif_dev->tx.tx_lock);
 267		if (hif_dev->tx.flags & HIF_USB_TX_FLUSH) {
 268			spin_unlock(&hif_dev->tx.tx_lock);
 269			ath9k_skb_queue_purge(hif_dev, &tx_buf->skb_queue);
 270			return;
 271		}
 272		spin_unlock(&hif_dev->tx.tx_lock);
 273
 274		break;
 275	default:
 276		txok = false;
 277		break;
 278	}
 279
 280	ath9k_skb_queue_complete(hif_dev, &tx_buf->skb_queue, txok);
 281
 282	/* Re-initialize the SKB queue */
 283	tx_buf->len = tx_buf->offset = 0;
 284	__skb_queue_head_init(&tx_buf->skb_queue);
 285
 286	/* Add this TX buffer to the free list */
 287	spin_lock(&hif_dev->tx.tx_lock);
 288	list_move_tail(&tx_buf->list, &hif_dev->tx.tx_buf);
 289	hif_dev->tx.tx_buf_cnt++;
 290	if (!(hif_dev->tx.flags & HIF_USB_TX_STOP))
 291		__hif_usb_tx(hif_dev); /* Check for pending SKBs */
 292	TX_STAT_INC(buf_completed);
 293	spin_unlock(&hif_dev->tx.tx_lock);
 294}
 295
 296/* TX lock has to be taken */
 297static int __hif_usb_tx(struct hif_device_usb *hif_dev)
 298{
 299	struct tx_buf *tx_buf = NULL;
 300	struct sk_buff *nskb = NULL;
 301	int ret = 0, i;
 302	u16 tx_skb_cnt = 0;
 303	u8 *buf;
 304	__le16 *hdr;
 305
 306	if (hif_dev->tx.tx_skb_cnt == 0)
 307		return 0;
 308
 309	/* Check if a free TX buffer is available */
 310	if (list_empty(&hif_dev->tx.tx_buf))
 311		return 0;
 312
 313	tx_buf = list_first_entry(&hif_dev->tx.tx_buf, struct tx_buf, list);
 314	list_move_tail(&tx_buf->list, &hif_dev->tx.tx_pending);
 315	hif_dev->tx.tx_buf_cnt--;
 316
 317	tx_skb_cnt = min_t(u16, hif_dev->tx.tx_skb_cnt, MAX_TX_AGGR_NUM);
 318
 319	for (i = 0; i < tx_skb_cnt; i++) {
 320		nskb = __skb_dequeue(&hif_dev->tx.tx_skb_queue);
 321
 322		/* Should never be NULL */
 323		BUG_ON(!nskb);
 324
 325		hif_dev->tx.tx_skb_cnt--;
 326
 327		buf = tx_buf->buf;
 328		buf += tx_buf->offset;
 329		hdr = (__le16 *)buf;
 330		*hdr++ = cpu_to_le16(nskb->len);
 331		*hdr++ = cpu_to_le16(ATH_USB_TX_STREAM_MODE_TAG);
 332		buf += 4;
 333		memcpy(buf, nskb->data, nskb->len);
 334		tx_buf->len = nskb->len + 4;
 335
 336		if (i < (tx_skb_cnt - 1))
 337			tx_buf->offset += (((tx_buf->len - 1) / 4) + 1) * 4;
 338
 339		if (i == (tx_skb_cnt - 1))
 340			tx_buf->len += tx_buf->offset;
 341
 342		__skb_queue_tail(&tx_buf->skb_queue, nskb);
 343		TX_STAT_INC(skb_queued);
 344	}
 345
 346	usb_fill_bulk_urb(tx_buf->urb, hif_dev->udev,
 347			  usb_sndbulkpipe(hif_dev->udev, USB_WLAN_TX_PIPE),
 348			  tx_buf->buf, tx_buf->len,
 349			  hif_usb_tx_cb, tx_buf);
 350
 351	ret = usb_submit_urb(tx_buf->urb, GFP_ATOMIC);
 352	if (ret) {
 353		tx_buf->len = tx_buf->offset = 0;
 354		ath9k_skb_queue_complete(hif_dev, &tx_buf->skb_queue, false);
 355		__skb_queue_head_init(&tx_buf->skb_queue);
 356		list_move_tail(&tx_buf->list, &hif_dev->tx.tx_buf);
 357		hif_dev->tx.tx_buf_cnt++;
 358	}
 359
 360	if (!ret)
 361		TX_STAT_INC(buf_queued);
 362
 363	return ret;
 364}
 365
 366static int hif_usb_send_tx(struct hif_device_usb *hif_dev, struct sk_buff *skb)
 367{
 368	struct ath9k_htc_tx_ctl *tx_ctl;
 369	unsigned long flags;
 370	int ret = 0;
 371
 372	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
 373
 374	if (hif_dev->tx.flags & HIF_USB_TX_STOP) {
 375		spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 376		return -ENODEV;
 377	}
 378
 379	/* Check if the max queue count has been reached */
 380	if (hif_dev->tx.tx_skb_cnt > MAX_TX_BUF_NUM) {
 381		spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 382		return -ENOMEM;
 383	}
 384
 385	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 386
 387	tx_ctl = HTC_SKB_CB(skb);
 388
 389	/* Mgmt/Beacon frames don't use the TX buffer pool */
 390	if ((tx_ctl->type == ATH9K_HTC_MGMT) ||
 391	    (tx_ctl->type == ATH9K_HTC_BEACON)) {
 392		ret = hif_usb_send_mgmt(hif_dev, skb);
 393	}
 394
 395	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
 396
 397	if ((tx_ctl->type == ATH9K_HTC_NORMAL) ||
 398	    (tx_ctl->type == ATH9K_HTC_AMPDU)) {
 399		__skb_queue_tail(&hif_dev->tx.tx_skb_queue, skb);
 400		hif_dev->tx.tx_skb_cnt++;
 401	}
 402
 403	/* Check if AMPDUs have to be sent immediately */
 404	if ((hif_dev->tx.tx_buf_cnt == MAX_TX_URB_NUM) &&
 405	    (hif_dev->tx.tx_skb_cnt < 2)) {
 406		__hif_usb_tx(hif_dev);
 407	}
 408
 409	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 410
 411	return ret;
 412}
 413
 414static void hif_usb_start(void *hif_handle)
 415{
 416	struct hif_device_usb *hif_dev = (struct hif_device_usb *)hif_handle;
 417	unsigned long flags;
 418
 419	hif_dev->flags |= HIF_USB_START;
 420
 421	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
 422	hif_dev->tx.flags &= ~HIF_USB_TX_STOP;
 423	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 424}
 425
 426static void hif_usb_stop(void *hif_handle)
 427{
 428	struct hif_device_usb *hif_dev = (struct hif_device_usb *)hif_handle;
 429	struct tx_buf *tx_buf = NULL, *tx_buf_tmp = NULL;
 430	unsigned long flags;
 431
 432	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
 433	ath9k_skb_queue_complete(hif_dev, &hif_dev->tx.tx_skb_queue, false);
 434	hif_dev->tx.tx_skb_cnt = 0;
 435	hif_dev->tx.flags |= HIF_USB_TX_STOP;
 436	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 437
 438	/* The pending URBs have to be canceled. */
 
 439	list_for_each_entry_safe(tx_buf, tx_buf_tmp,
 440				 &hif_dev->tx.tx_pending, list) {
 
 
 441		usb_kill_urb(tx_buf->urb);
 
 
 
 
 
 442	}
 
 443
 444	usb_kill_anchored_urbs(&hif_dev->mgmt_submitted);
 445}
 446
 447static int hif_usb_send(void *hif_handle, u8 pipe_id, struct sk_buff *skb)
 448{
 449	struct hif_device_usb *hif_dev = (struct hif_device_usb *)hif_handle;
 450	int ret = 0;
 451
 452	switch (pipe_id) {
 453	case USB_WLAN_TX_PIPE:
 454		ret = hif_usb_send_tx(hif_dev, skb);
 455		break;
 456	case USB_REG_OUT_PIPE:
 457		ret = hif_usb_send_regout(hif_dev, skb);
 458		break;
 459	default:
 460		dev_err(&hif_dev->udev->dev,
 461			"ath9k_htc: Invalid TX pipe: %d\n", pipe_id);
 462		ret = -EINVAL;
 463		break;
 464	}
 465
 466	return ret;
 467}
 468
 469static inline bool check_index(struct sk_buff *skb, u8 idx)
 470{
 471	struct ath9k_htc_tx_ctl *tx_ctl;
 472
 473	tx_ctl = HTC_SKB_CB(skb);
 474
 475	if ((tx_ctl->type == ATH9K_HTC_AMPDU) &&
 476	    (tx_ctl->sta_idx == idx))
 477		return true;
 478
 479	return false;
 480}
 481
 482static void hif_usb_sta_drain(void *hif_handle, u8 idx)
 483{
 484	struct hif_device_usb *hif_dev = (struct hif_device_usb *)hif_handle;
 485	struct sk_buff *skb, *tmp;
 486	unsigned long flags;
 487
 488	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
 489
 490	skb_queue_walk_safe(&hif_dev->tx.tx_skb_queue, skb, tmp) {
 491		if (check_index(skb, idx)) {
 492			__skb_unlink(skb, &hif_dev->tx.tx_skb_queue);
 493			ath9k_htc_txcompletion_cb(hif_dev->htc_handle,
 494						  skb, false);
 495			hif_dev->tx.tx_skb_cnt--;
 496			TX_STAT_INC(skb_failed);
 497		}
 498	}
 499
 500	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 501}
 502
 503static struct ath9k_htc_hif hif_usb = {
 504	.transport = ATH9K_HIF_USB,
 505	.name = "ath9k_hif_usb",
 506
 507	.control_ul_pipe = USB_REG_OUT_PIPE,
 508	.control_dl_pipe = USB_REG_IN_PIPE,
 509
 510	.start = hif_usb_start,
 511	.stop = hif_usb_stop,
 512	.sta_drain = hif_usb_sta_drain,
 513	.send = hif_usb_send,
 514};
 515
 516static void ath9k_hif_usb_rx_stream(struct hif_device_usb *hif_dev,
 517				    struct sk_buff *skb)
 518{
 519	struct sk_buff *nskb, *skb_pool[MAX_PKT_NUM_IN_TRANSFER];
 520	int index = 0, i = 0, len = skb->len;
 521	int rx_remain_len, rx_pkt_len;
 522	u16 pool_index = 0;
 523	u8 *ptr;
 524
 525	spin_lock(&hif_dev->rx_lock);
 526
 527	rx_remain_len = hif_dev->rx_remain_len;
 528	rx_pkt_len = hif_dev->rx_transfer_len;
 529
 530	if (rx_remain_len != 0) {
 531		struct sk_buff *remain_skb = hif_dev->remain_skb;
 532
 533		if (remain_skb) {
 534			ptr = (u8 *) remain_skb->data;
 535
 536			index = rx_remain_len;
 537			rx_remain_len -= hif_dev->rx_pad_len;
 538			ptr += rx_pkt_len;
 539
 540			memcpy(ptr, skb->data, rx_remain_len);
 541
 542			rx_pkt_len += rx_remain_len;
 543			hif_dev->rx_remain_len = 0;
 544			skb_put(remain_skb, rx_pkt_len);
 545
 546			skb_pool[pool_index++] = remain_skb;
 547
 548		} else {
 549			index = rx_remain_len;
 550		}
 551	}
 552
 553	spin_unlock(&hif_dev->rx_lock);
 554
 555	while (index < len) {
 556		u16 pkt_len;
 557		u16 pkt_tag;
 558		u16 pad_len;
 559		int chk_idx;
 560
 561		ptr = (u8 *) skb->data;
 562
 563		pkt_len = get_unaligned_le16(ptr + index);
 564		pkt_tag = get_unaligned_le16(ptr + index + 2);
 565
 566		if (pkt_tag != ATH_USB_RX_STREAM_MODE_TAG) {
 567			RX_STAT_INC(skb_dropped);
 568			return;
 569		}
 570
 571		pad_len = 4 - (pkt_len & 0x3);
 572		if (pad_len == 4)
 573			pad_len = 0;
 574
 575		chk_idx = index;
 576		index = index + 4 + pkt_len + pad_len;
 577
 578		if (index > MAX_RX_BUF_SIZE) {
 579			spin_lock(&hif_dev->rx_lock);
 580			hif_dev->rx_remain_len = index - MAX_RX_BUF_SIZE;
 581			hif_dev->rx_transfer_len =
 582				MAX_RX_BUF_SIZE - chk_idx - 4;
 583			hif_dev->rx_pad_len = pad_len;
 584
 585			nskb = __dev_alloc_skb(pkt_len + 32, GFP_ATOMIC);
 586			if (!nskb) {
 587				dev_err(&hif_dev->udev->dev,
 588					"ath9k_htc: RX memory allocation error\n");
 589				spin_unlock(&hif_dev->rx_lock);
 590				goto err;
 591			}
 592			skb_reserve(nskb, 32);
 593			RX_STAT_INC(skb_allocated);
 594
 595			memcpy(nskb->data, &(skb->data[chk_idx+4]),
 596			       hif_dev->rx_transfer_len);
 597
 598			/* Record the buffer pointer */
 599			hif_dev->remain_skb = nskb;
 600			spin_unlock(&hif_dev->rx_lock);
 601		} else {
 
 
 
 
 
 602			nskb = __dev_alloc_skb(pkt_len + 32, GFP_ATOMIC);
 603			if (!nskb) {
 604				dev_err(&hif_dev->udev->dev,
 605					"ath9k_htc: RX memory allocation error\n");
 606				goto err;
 607			}
 608			skb_reserve(nskb, 32);
 609			RX_STAT_INC(skb_allocated);
 610
 611			memcpy(nskb->data, &(skb->data[chk_idx+4]), pkt_len);
 612			skb_put(nskb, pkt_len);
 613			skb_pool[pool_index++] = nskb;
 614		}
 615	}
 616
 617err:
 618	for (i = 0; i < pool_index; i++) {
 
 619		ath9k_htc_rx_msg(hif_dev->htc_handle, skb_pool[i],
 620				 skb_pool[i]->len, USB_WLAN_RX_PIPE);
 621		RX_STAT_INC(skb_completed);
 622	}
 623}
 624
 625static void ath9k_hif_usb_rx_cb(struct urb *urb)
 626{
 627	struct sk_buff *skb = (struct sk_buff *) urb->context;
 628	struct hif_device_usb *hif_dev =
 629		usb_get_intfdata(usb_ifnum_to_if(urb->dev, 0));
 630	int ret;
 631
 632	if (!skb)
 633		return;
 634
 635	if (!hif_dev)
 636		goto free;
 637
 638	switch (urb->status) {
 639	case 0:
 640		break;
 641	case -ENOENT:
 642	case -ECONNRESET:
 643	case -ENODEV:
 644	case -ESHUTDOWN:
 645		goto free;
 646	default:
 647		goto resubmit;
 648	}
 649
 650	if (likely(urb->actual_length != 0)) {
 651		skb_put(skb, urb->actual_length);
 652		ath9k_hif_usb_rx_stream(hif_dev, skb);
 653	}
 654
 655resubmit:
 656	skb_reset_tail_pointer(skb);
 657	skb_trim(skb, 0);
 658
 659	usb_anchor_urb(urb, &hif_dev->rx_submitted);
 660	ret = usb_submit_urb(urb, GFP_ATOMIC);
 661	if (ret) {
 662		usb_unanchor_urb(urb);
 663		goto free;
 664	}
 665
 666	return;
 667free:
 668	kfree_skb(skb);
 
 669}
 670
 671static void ath9k_hif_usb_reg_in_cb(struct urb *urb)
 672{
 673	struct sk_buff *skb = (struct sk_buff *) urb->context;
 
 
 674	struct sk_buff *nskb;
 675	struct hif_device_usb *hif_dev =
 676		usb_get_intfdata(usb_ifnum_to_if(urb->dev, 0));
 677	int ret;
 678
 679	if (!skb)
 680		return;
 681
 682	if (!hif_dev)
 683		goto free;
 684
 685	switch (urb->status) {
 686	case 0:
 687		break;
 688	case -ENOENT:
 689	case -ECONNRESET:
 690	case -ENODEV:
 691	case -ESHUTDOWN:
 692		goto free;
 693	default:
 694		skb_reset_tail_pointer(skb);
 695		skb_trim(skb, 0);
 696
 697		goto resubmit;
 698	}
 699
 700	if (likely(urb->actual_length != 0)) {
 701		skb_put(skb, urb->actual_length);
 702
 703		/* Process the command first */
 704		ath9k_htc_rx_msg(hif_dev->htc_handle, skb,
 705				 skb->len, USB_REG_IN_PIPE);
 706
 707
 708		nskb = alloc_skb(MAX_REG_IN_BUF_SIZE, GFP_ATOMIC);
 709		if (!nskb) {
 710			dev_err(&hif_dev->udev->dev,
 711				"ath9k_htc: REG_IN memory allocation failure\n");
 712			urb->context = NULL;
 713			return;
 714		}
 715
 716		usb_fill_bulk_urb(urb, hif_dev->udev,
 717				 usb_rcvbulkpipe(hif_dev->udev,
 
 
 718						 USB_REG_IN_PIPE),
 719				 nskb->data, MAX_REG_IN_BUF_SIZE,
 720				 ath9k_hif_usb_reg_in_cb, nskb);
 721	}
 722
 723resubmit:
 724	usb_anchor_urb(urb, &hif_dev->reg_in_submitted);
 725	ret = usb_submit_urb(urb, GFP_ATOMIC);
 726	if (ret) {
 727		usb_unanchor_urb(urb);
 728		goto free;
 729	}
 730
 731	return;
 732free:
 733	kfree_skb(skb);
 
 734	urb->context = NULL;
 735}
 736
 737static void ath9k_hif_usb_dealloc_tx_urbs(struct hif_device_usb *hif_dev)
 738{
 739	struct tx_buf *tx_buf = NULL, *tx_buf_tmp = NULL;
 740	unsigned long flags;
 741
 
 742	list_for_each_entry_safe(tx_buf, tx_buf_tmp,
 743				 &hif_dev->tx.tx_buf, list) {
 
 
 744		usb_kill_urb(tx_buf->urb);
 745		list_del(&tx_buf->list);
 746		usb_free_urb(tx_buf->urb);
 747		kfree(tx_buf->buf);
 748		kfree(tx_buf);
 
 749	}
 
 750
 751	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
 752	hif_dev->tx.flags |= HIF_USB_TX_FLUSH;
 753	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 754
 
 755	list_for_each_entry_safe(tx_buf, tx_buf_tmp,
 756				 &hif_dev->tx.tx_pending, list) {
 
 
 757		usb_kill_urb(tx_buf->urb);
 758		list_del(&tx_buf->list);
 759		usb_free_urb(tx_buf->urb);
 760		kfree(tx_buf->buf);
 761		kfree(tx_buf);
 
 762	}
 
 763
 764	usb_kill_anchored_urbs(&hif_dev->mgmt_submitted);
 765}
 766
 767static int ath9k_hif_usb_alloc_tx_urbs(struct hif_device_usb *hif_dev)
 768{
 769	struct tx_buf *tx_buf;
 770	int i;
 771
 772	INIT_LIST_HEAD(&hif_dev->tx.tx_buf);
 773	INIT_LIST_HEAD(&hif_dev->tx.tx_pending);
 774	spin_lock_init(&hif_dev->tx.tx_lock);
 775	__skb_queue_head_init(&hif_dev->tx.tx_skb_queue);
 776	init_usb_anchor(&hif_dev->mgmt_submitted);
 777
 778	for (i = 0; i < MAX_TX_URB_NUM; i++) {
 779		tx_buf = kzalloc(sizeof(struct tx_buf), GFP_KERNEL);
 780		if (!tx_buf)
 781			goto err;
 782
 783		tx_buf->buf = kzalloc(MAX_TX_BUF_SIZE, GFP_KERNEL);
 784		if (!tx_buf->buf)
 785			goto err;
 786
 787		tx_buf->urb = usb_alloc_urb(0, GFP_KERNEL);
 788		if (!tx_buf->urb)
 789			goto err;
 790
 791		tx_buf->hif_dev = hif_dev;
 792		__skb_queue_head_init(&tx_buf->skb_queue);
 793
 794		list_add_tail(&tx_buf->list, &hif_dev->tx.tx_buf);
 795	}
 796
 797	hif_dev->tx.tx_buf_cnt = MAX_TX_URB_NUM;
 798
 799	return 0;
 800err:
 801	if (tx_buf) {
 802		kfree(tx_buf->buf);
 803		kfree(tx_buf);
 804	}
 805	ath9k_hif_usb_dealloc_tx_urbs(hif_dev);
 806	return -ENOMEM;
 807}
 808
 809static void ath9k_hif_usb_dealloc_rx_urbs(struct hif_device_usb *hif_dev)
 810{
 811	usb_kill_anchored_urbs(&hif_dev->rx_submitted);
 812}
 813
 814static int ath9k_hif_usb_alloc_rx_urbs(struct hif_device_usb *hif_dev)
 815{
 816	struct urb *urb = NULL;
 817	struct sk_buff *skb = NULL;
 
 818	int i, ret;
 819
 820	init_usb_anchor(&hif_dev->rx_submitted);
 821	spin_lock_init(&hif_dev->rx_lock);
 822
 823	for (i = 0; i < MAX_RX_URB_NUM; i++) {
 824
 
 
 
 
 
 
 825		/* Allocate URB */
 826		urb = usb_alloc_urb(0, GFP_KERNEL);
 827		if (urb == NULL) {
 828			ret = -ENOMEM;
 829			goto err_urb;
 830		}
 831
 832		/* Allocate buffer */
 833		skb = alloc_skb(MAX_RX_BUF_SIZE, GFP_KERNEL);
 834		if (!skb) {
 835			ret = -ENOMEM;
 836			goto err_skb;
 837		}
 838
 
 
 
 839		usb_fill_bulk_urb(urb, hif_dev->udev,
 840				  usb_rcvbulkpipe(hif_dev->udev,
 841						  USB_WLAN_RX_PIPE),
 842				  skb->data, MAX_RX_BUF_SIZE,
 843				  ath9k_hif_usb_rx_cb, skb);
 844
 845		/* Anchor URB */
 846		usb_anchor_urb(urb, &hif_dev->rx_submitted);
 847
 848		/* Submit URB */
 849		ret = usb_submit_urb(urb, GFP_KERNEL);
 850		if (ret) {
 851			usb_unanchor_urb(urb);
 852			goto err_submit;
 853		}
 854
 855		/*
 856		 * Drop reference count.
 857		 * This ensures that the URB is freed when killing them.
 858		 */
 859		usb_free_urb(urb);
 860	}
 861
 862	return 0;
 863
 864err_submit:
 865	kfree_skb(skb);
 866err_skb:
 867	usb_free_urb(urb);
 868err_urb:
 
 
 869	ath9k_hif_usb_dealloc_rx_urbs(hif_dev);
 870	return ret;
 871}
 872
 873static void ath9k_hif_usb_dealloc_reg_in_urbs(struct hif_device_usb *hif_dev)
 874{
 875	usb_kill_anchored_urbs(&hif_dev->reg_in_submitted);
 876}
 877
 878static int ath9k_hif_usb_alloc_reg_in_urbs(struct hif_device_usb *hif_dev)
 879{
 880	struct urb *urb = NULL;
 881	struct sk_buff *skb = NULL;
 
 882	int i, ret;
 883
 884	init_usb_anchor(&hif_dev->reg_in_submitted);
 885
 886	for (i = 0; i < MAX_REG_IN_URB_NUM; i++) {
 887
 
 
 
 
 
 
 888		/* Allocate URB */
 889		urb = usb_alloc_urb(0, GFP_KERNEL);
 890		if (urb == NULL) {
 891			ret = -ENOMEM;
 892			goto err_urb;
 893		}
 894
 895		/* Allocate buffer */
 896		skb = alloc_skb(MAX_REG_IN_BUF_SIZE, GFP_KERNEL);
 897		if (!skb) {
 898			ret = -ENOMEM;
 899			goto err_skb;
 900		}
 901
 902		usb_fill_bulk_urb(urb, hif_dev->udev,
 903				  usb_rcvbulkpipe(hif_dev->udev,
 
 
 
 904						  USB_REG_IN_PIPE),
 905				  skb->data, MAX_REG_IN_BUF_SIZE,
 906				  ath9k_hif_usb_reg_in_cb, skb);
 907
 908		/* Anchor URB */
 909		usb_anchor_urb(urb, &hif_dev->reg_in_submitted);
 910
 911		/* Submit URB */
 912		ret = usb_submit_urb(urb, GFP_KERNEL);
 913		if (ret) {
 914			usb_unanchor_urb(urb);
 915			goto err_submit;
 916		}
 917
 918		/*
 919		 * Drop reference count.
 920		 * This ensures that the URB is freed when killing them.
 921		 */
 922		usb_free_urb(urb);
 923	}
 924
 925	return 0;
 926
 927err_submit:
 928	kfree_skb(skb);
 929err_skb:
 930	usb_free_urb(urb);
 931err_urb:
 
 
 932	ath9k_hif_usb_dealloc_reg_in_urbs(hif_dev);
 933	return ret;
 934}
 935
 936static int ath9k_hif_usb_alloc_urbs(struct hif_device_usb *hif_dev)
 937{
 938	/* Register Write */
 939	init_usb_anchor(&hif_dev->regout_submitted);
 940
 941	/* TX */
 942	if (ath9k_hif_usb_alloc_tx_urbs(hif_dev) < 0)
 943		goto err;
 944
 945	/* RX */
 946	if (ath9k_hif_usb_alloc_rx_urbs(hif_dev) < 0)
 947		goto err_rx;
 948
 949	/* Register Read */
 950	if (ath9k_hif_usb_alloc_reg_in_urbs(hif_dev) < 0)
 951		goto err_reg;
 952
 953	return 0;
 954err_reg:
 955	ath9k_hif_usb_dealloc_rx_urbs(hif_dev);
 956err_rx:
 957	ath9k_hif_usb_dealloc_tx_urbs(hif_dev);
 958err:
 959	return -ENOMEM;
 960}
 961
 962static void ath9k_hif_usb_dealloc_urbs(struct hif_device_usb *hif_dev)
 963{
 964	usb_kill_anchored_urbs(&hif_dev->regout_submitted);
 965	ath9k_hif_usb_dealloc_reg_in_urbs(hif_dev);
 966	ath9k_hif_usb_dealloc_tx_urbs(hif_dev);
 967	ath9k_hif_usb_dealloc_rx_urbs(hif_dev);
 968}
 969
 970static int ath9k_hif_usb_download_fw(struct hif_device_usb *hif_dev,
 971				     u32 drv_info)
 972{
 973	int transfer, err;
 974	const void *data = hif_dev->firmware->data;
 975	size_t len = hif_dev->firmware->size;
 976	u32 addr = AR9271_FIRMWARE;
 977	u8 *buf = kzalloc(4096, GFP_KERNEL);
 978	u32 firm_offset;
 979
 980	if (!buf)
 981		return -ENOMEM;
 982
 983	while (len) {
 984		transfer = min_t(int, len, 4096);
 985		memcpy(buf, data, transfer);
 986
 987		err = usb_control_msg(hif_dev->udev,
 988				      usb_sndctrlpipe(hif_dev->udev, 0),
 989				      FIRMWARE_DOWNLOAD, 0x40 | USB_DIR_OUT,
 990				      addr >> 8, 0, buf, transfer, HZ);
 
 991		if (err < 0) {
 992			kfree(buf);
 993			return err;
 994		}
 995
 996		len -= transfer;
 997		data += transfer;
 998		addr += transfer;
 999	}
1000	kfree(buf);
1001
1002	if (IS_AR7010_DEVICE(drv_info))
1003		firm_offset = AR7010_FIRMWARE_TEXT;
1004	else
1005		firm_offset = AR9271_FIRMWARE_TEXT;
1006
1007	/*
1008	 * Issue FW download complete command to firmware.
1009	 */
1010	err = usb_control_msg(hif_dev->udev, usb_sndctrlpipe(hif_dev->udev, 0),
1011			      FIRMWARE_DOWNLOAD_COMP,
1012			      0x40 | USB_DIR_OUT,
1013			      firm_offset >> 8, 0, NULL, 0, HZ);
1014	if (err)
1015		return -EIO;
1016
1017	dev_info(&hif_dev->udev->dev, "ath9k_htc: Transferred FW: %s, size: %ld\n",
1018		 hif_dev->fw_name, (unsigned long) hif_dev->firmware->size);
1019
1020	return 0;
1021}
1022
1023static int ath9k_hif_usb_dev_init(struct hif_device_usb *hif_dev, u32 drv_info)
1024{
1025	int ret, idx;
1026	struct usb_host_interface *alt = &hif_dev->interface->altsetting[0];
1027	struct usb_endpoint_descriptor *endp;
1028
1029	/* Request firmware */
1030	ret = request_firmware(&hif_dev->firmware, hif_dev->fw_name,
1031			       &hif_dev->udev->dev);
1032	if (ret) {
1033		dev_err(&hif_dev->udev->dev,
1034			"ath9k_htc: Firmware - %s not found\n", hif_dev->fw_name);
1035		goto err_fw_req;
1036	}
1037
1038	/* Download firmware */
1039	ret = ath9k_hif_usb_download_fw(hif_dev, drv_info);
1040	if (ret) {
1041		dev_err(&hif_dev->udev->dev,
1042			"ath9k_htc: Firmware - %s download failed\n",
1043			hif_dev->fw_name);
1044		goto err_fw_download;
1045	}
1046
1047	/* On downloading the firmware to the target, the USB descriptor of EP4
1048	 * is 'patched' to change the type of the endpoint to Bulk. This will
1049	 * bring down CPU usage during the scan period.
1050	 */
1051	for (idx = 0; idx < alt->desc.bNumEndpoints; idx++) {
1052		endp = &alt->endpoint[idx].desc;
1053		if ((endp->bmAttributes & USB_ENDPOINT_XFERTYPE_MASK)
1054				== USB_ENDPOINT_XFER_INT) {
1055			endp->bmAttributes &= ~USB_ENDPOINT_XFERTYPE_MASK;
1056			endp->bmAttributes |= USB_ENDPOINT_XFER_BULK;
1057			endp->bInterval = 0;
1058		}
1059	}
1060
1061	/* Alloc URBs */
1062	ret = ath9k_hif_usb_alloc_urbs(hif_dev);
1063	if (ret) {
1064		dev_err(&hif_dev->udev->dev,
1065			"ath9k_htc: Unable to allocate URBs\n");
1066		goto err_fw_download;
1067	}
1068
1069	return 0;
1070
1071err_fw_download:
1072	release_firmware(hif_dev->firmware);
1073err_fw_req:
1074	hif_dev->firmware = NULL;
1075	return ret;
1076}
1077
1078static void ath9k_hif_usb_dev_deinit(struct hif_device_usb *hif_dev)
1079{
1080	ath9k_hif_usb_dealloc_urbs(hif_dev);
1081	if (hif_dev->firmware)
1082		release_firmware(hif_dev->firmware);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1083}
1084
1085/*
1086 * An exact copy of the function from zd1211rw.
1087 */
1088static int send_eject_command(struct usb_interface *interface)
1089{
1090	struct usb_device *udev = interface_to_usbdev(interface);
1091	struct usb_host_interface *iface_desc = &interface->altsetting[0];
1092	struct usb_endpoint_descriptor *endpoint;
1093	unsigned char *cmd;
1094	u8 bulk_out_ep;
1095	int r;
1096
 
 
 
1097	/* Find bulk out endpoint */
1098	for (r = 1; r >= 0; r--) {
1099		endpoint = &iface_desc->endpoint[r].desc;
1100		if (usb_endpoint_dir_out(endpoint) &&
1101		    usb_endpoint_xfer_bulk(endpoint)) {
1102			bulk_out_ep = endpoint->bEndpointAddress;
1103			break;
1104		}
1105	}
1106	if (r == -1) {
1107		dev_err(&udev->dev,
1108			"ath9k_htc: Could not find bulk out endpoint\n");
1109		return -ENODEV;
1110	}
1111
1112	cmd = kzalloc(31, GFP_KERNEL);
1113	if (cmd == NULL)
1114		return -ENODEV;
1115
1116	/* USB bulk command block */
1117	cmd[0] = 0x55;	/* bulk command signature */
1118	cmd[1] = 0x53;	/* bulk command signature */
1119	cmd[2] = 0x42;	/* bulk command signature */
1120	cmd[3] = 0x43;	/* bulk command signature */
1121	cmd[14] = 6;	/* command length */
1122
1123	cmd[15] = 0x1b;	/* SCSI command: START STOP UNIT */
1124	cmd[19] = 0x2;	/* eject disc */
1125
1126	dev_info(&udev->dev, "Ejecting storage device...\n");
1127	r = usb_bulk_msg(udev, usb_sndbulkpipe(udev, bulk_out_ep),
1128		cmd, 31, NULL, 2000);
1129	kfree(cmd);
1130	if (r)
1131		return r;
1132
1133	/* At this point, the device disconnects and reconnects with the real
1134	 * ID numbers. */
1135
1136	usb_set_intfdata(interface, NULL);
1137	return 0;
1138}
1139
1140static int ath9k_hif_usb_probe(struct usb_interface *interface,
1141			       const struct usb_device_id *id)
1142{
1143	struct usb_device *udev = interface_to_usbdev(interface);
1144	struct hif_device_usb *hif_dev;
1145	int ret = 0;
1146
1147	if (id->driver_info == STORAGE_DEVICE)
1148		return send_eject_command(interface);
1149
1150	hif_dev = kzalloc(sizeof(struct hif_device_usb), GFP_KERNEL);
1151	if (!hif_dev) {
1152		ret = -ENOMEM;
1153		goto err_alloc;
1154	}
1155
1156	usb_get_dev(udev);
 
1157	hif_dev->udev = udev;
1158	hif_dev->interface = interface;
1159	hif_dev->device_id = id->idProduct;
1160#ifdef CONFIG_PM
1161	udev->reset_resume = 1;
1162#endif
1163	usb_set_intfdata(interface, hif_dev);
1164
1165	hif_dev->htc_handle = ath9k_htc_hw_alloc(hif_dev, &hif_usb,
1166						 &hif_dev->udev->dev);
1167	if (hif_dev->htc_handle == NULL) {
1168		ret = -ENOMEM;
1169		goto err_htc_hw_alloc;
1170	}
1171
1172	/* Find out which firmware to load */
1173
1174	if (IS_AR7010_DEVICE(id->driver_info))
1175		hif_dev->fw_name = FIRMWARE_AR7010_1_1;
1176	else
1177		hif_dev->fw_name = FIRMWARE_AR9271;
1178
1179	ret = ath9k_hif_usb_dev_init(hif_dev, id->driver_info);
1180	if (ret) {
1181		ret = -EINVAL;
1182		goto err_hif_init_usb;
1183	}
1184
1185	ret = ath9k_htc_hw_init(hif_dev->htc_handle,
1186				&interface->dev, hif_dev->device_id,
1187				hif_dev->udev->product, id->driver_info);
1188	if (ret) {
1189		ret = -EINVAL;
1190		goto err_htc_hw_init;
1191	}
1192
1193	dev_info(&hif_dev->udev->dev, "ath9k_htc: USB layer initialized\n");
1194
1195	return 0;
1196
1197err_htc_hw_init:
1198	ath9k_hif_usb_dev_deinit(hif_dev);
1199err_hif_init_usb:
1200	ath9k_htc_hw_free(hif_dev->htc_handle);
1201err_htc_hw_alloc:
1202	usb_set_intfdata(interface, NULL);
1203	kfree(hif_dev);
1204	usb_put_dev(udev);
1205err_alloc:
1206	return ret;
1207}
1208
1209static void ath9k_hif_usb_reboot(struct usb_device *udev)
1210{
1211	u32 reboot_cmd = 0xffffffff;
1212	void *buf;
1213	int ret;
1214
1215	buf = kmemdup(&reboot_cmd, 4, GFP_KERNEL);
1216	if (!buf)
1217		return;
1218
1219	ret = usb_bulk_msg(udev, usb_sndbulkpipe(udev, USB_REG_OUT_PIPE),
1220			   buf, 4, NULL, HZ);
1221	if (ret)
1222		dev_err(&udev->dev, "ath9k_htc: USB reboot failed\n");
1223
1224	kfree(buf);
1225}
1226
1227static void ath9k_hif_usb_disconnect(struct usb_interface *interface)
1228{
1229	struct usb_device *udev = interface_to_usbdev(interface);
1230	struct hif_device_usb *hif_dev = usb_get_intfdata(interface);
1231	bool unplugged = (udev->state == USB_STATE_NOTATTACHED) ? true : false;
1232
1233	if (!hif_dev)
1234		return;
1235
1236	ath9k_htc_hw_deinit(hif_dev->htc_handle, unplugged);
1237	ath9k_htc_hw_free(hif_dev->htc_handle);
1238	ath9k_hif_usb_dev_deinit(hif_dev);
 
 
 
 
 
 
1239	usb_set_intfdata(interface, NULL);
1240
1241	if (!unplugged && (hif_dev->flags & HIF_USB_START))
 
 
1242		ath9k_hif_usb_reboot(udev);
1243
1244	kfree(hif_dev);
1245	dev_info(&udev->dev, "ath9k_htc: USB layer deinitialized\n");
1246	usb_put_dev(udev);
1247}
1248
1249#ifdef CONFIG_PM
1250static int ath9k_hif_usb_suspend(struct usb_interface *interface,
1251				 pm_message_t message)
1252{
1253	struct hif_device_usb *hif_dev = usb_get_intfdata(interface);
1254
1255	/*
1256	 * The device has to be set to FULLSLEEP mode in case no
1257	 * interface is up.
1258	 */
1259	if (!(hif_dev->flags & HIF_USB_START))
1260		ath9k_htc_suspend(hif_dev->htc_handle);
1261
1262	ath9k_hif_usb_dealloc_urbs(hif_dev);
 
 
 
1263
1264	return 0;
1265}
1266
1267static int ath9k_hif_usb_resume(struct usb_interface *interface)
1268{
1269	struct hif_device_usb *hif_dev = usb_get_intfdata(interface);
1270	struct htc_target *htc_handle = hif_dev->htc_handle;
1271	int ret;
 
1272
1273	ret = ath9k_hif_usb_alloc_urbs(hif_dev);
1274	if (ret)
1275		return ret;
1276
1277	if (hif_dev->firmware) {
1278		ret = ath9k_hif_usb_download_fw(hif_dev,
1279				htc_handle->drv_priv->ah->hw_version.usbdev);
 
 
 
 
 
 
 
 
1280		if (ret)
1281			goto fail_resume;
1282	} else {
1283		ath9k_hif_usb_dealloc_urbs(hif_dev);
1284		return -EIO;
1285	}
1286
1287	mdelay(100);
1288
1289	ret = ath9k_htc_resume(htc_handle);
1290
1291	if (ret)
1292		goto fail_resume;
1293
1294	return 0;
1295
1296fail_resume:
1297	ath9k_hif_usb_dealloc_urbs(hif_dev);
1298
1299	return ret;
1300}
1301#endif
1302
1303static struct usb_driver ath9k_hif_usb_driver = {
1304	.name = KBUILD_MODNAME,
1305	.probe = ath9k_hif_usb_probe,
1306	.disconnect = ath9k_hif_usb_disconnect,
1307#ifdef CONFIG_PM
1308	.suspend = ath9k_hif_usb_suspend,
1309	.resume = ath9k_hif_usb_resume,
1310	.reset_resume = ath9k_hif_usb_resume,
1311#endif
1312	.id_table = ath9k_hif_usb_ids,
1313	.soft_unbind = 1,
 
1314};
1315
1316int ath9k_hif_usb_init(void)
1317{
1318	return usb_register(&ath9k_hif_usb_driver);
1319}
1320
1321void ath9k_hif_usb_exit(void)
1322{
1323	usb_deregister(&ath9k_hif_usb_driver);
1324}
v5.14.15
   1/*
   2 * Copyright (c) 2010-2011 Atheros Communications Inc.
   3 *
   4 * Permission to use, copy, modify, and/or distribute this software for any
   5 * purpose with or without fee is hereby granted, provided that the above
   6 * copyright notice and this permission notice appear in all copies.
   7 *
   8 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
   9 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
  10 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
  11 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
  12 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  13 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  14 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  15 */
  16
  17#include <asm/unaligned.h>
  18#include "htc.h"
  19
  20MODULE_FIRMWARE(HTC_7010_MODULE_FW);
  21MODULE_FIRMWARE(HTC_9271_MODULE_FW);
 
  22
  23static const struct usb_device_id ath9k_hif_usb_ids[] = {
 
 
 
  24	{ USB_DEVICE(0x0cf3, 0x9271) }, /* Atheros */
  25	{ USB_DEVICE(0x0cf3, 0x1006) }, /* Atheros */
  26	{ USB_DEVICE(0x0846, 0x9030) }, /* Netgear N150 */
  27	{ USB_DEVICE(0x07b8, 0x9271) }, /* Altai WA1011N-GU */
  28	{ USB_DEVICE(0x07D1, 0x3A10) }, /* Dlink Wireless 150 */
  29	{ USB_DEVICE(0x13D3, 0x3327) }, /* Azurewave */
  30	{ USB_DEVICE(0x13D3, 0x3328) }, /* Azurewave */
  31	{ USB_DEVICE(0x13D3, 0x3346) }, /* IMC Networks */
  32	{ USB_DEVICE(0x13D3, 0x3348) }, /* Azurewave */
  33	{ USB_DEVICE(0x13D3, 0x3349) }, /* Azurewave */
  34	{ USB_DEVICE(0x13D3, 0x3350) }, /* Azurewave */
  35	{ USB_DEVICE(0x04CA, 0x4605) }, /* Liteon */
  36	{ USB_DEVICE(0x040D, 0x3801) }, /* VIA */
  37	{ USB_DEVICE(0x0cf3, 0xb003) }, /* Ubiquiti WifiStation Ext */
  38	{ USB_DEVICE(0x0cf3, 0xb002) }, /* Ubiquiti WifiStation */
  39	{ USB_DEVICE(0x057c, 0x8403) }, /* AVM FRITZ!WLAN 11N v2 USB */
  40	{ USB_DEVICE(0x0471, 0x209e) }, /* Philips (or NXP) PTA01 */
  41	{ USB_DEVICE(0x1eda, 0x2315) }, /* AirTies */
  42
  43	{ USB_DEVICE(0x0cf3, 0x7015),
  44	  .driver_info = AR9287_USB },  /* Atheros */
  45	{ USB_DEVICE(0x1668, 0x1200),
  46	  .driver_info = AR9287_USB },  /* Verizon */
  47
  48	{ USB_DEVICE(0x0cf3, 0x7010),
  49	  .driver_info = AR9280_USB },  /* Atheros */
  50	{ USB_DEVICE(0x0846, 0x9018),
  51	  .driver_info = AR9280_USB },  /* Netgear WNDA3200 */
  52	{ USB_DEVICE(0x083A, 0xA704),
  53	  .driver_info = AR9280_USB },  /* SMC Networks */
  54	{ USB_DEVICE(0x0411, 0x017f),
  55	  .driver_info = AR9280_USB },  /* Sony UWA-BR100 */
  56	{ USB_DEVICE(0x0411, 0x0197),
  57	  .driver_info = AR9280_USB },  /* Buffalo WLI-UV-AG300P */
  58	{ USB_DEVICE(0x04da, 0x3904),
  59	  .driver_info = AR9280_USB },
  60	{ USB_DEVICE(0x0930, 0x0a08),
  61	  .driver_info = AR9280_USB },  /* Toshiba WLM-20U2 and GN-1080 */
  62
  63	{ USB_DEVICE(0x0cf3, 0x20ff),
  64	  .driver_info = STORAGE_DEVICE },
  65
  66	{ },
  67};
  68
  69MODULE_DEVICE_TABLE(usb, ath9k_hif_usb_ids);
  70
  71static int __hif_usb_tx(struct hif_device_usb *hif_dev);
  72
  73static void hif_usb_regout_cb(struct urb *urb)
  74{
  75	struct cmd_buf *cmd = (struct cmd_buf *)urb->context;
  76
  77	switch (urb->status) {
  78	case 0:
  79		break;
  80	case -ENOENT:
  81	case -ECONNRESET:
  82	case -ENODEV:
  83	case -ESHUTDOWN:
  84		goto free;
  85	default:
  86		break;
  87	}
  88
  89	if (cmd) {
  90		ath9k_htc_txcompletion_cb(cmd->hif_dev->htc_handle,
  91					  cmd->skb, true);
  92		kfree(cmd);
  93	}
  94
  95	return;
  96free:
  97	kfree_skb(cmd->skb);
  98	kfree(cmd);
  99}
 100
 101static int hif_usb_send_regout(struct hif_device_usb *hif_dev,
 102			       struct sk_buff *skb)
 103{
 104	struct urb *urb;
 105	struct cmd_buf *cmd;
 106	int ret = 0;
 107
 108	urb = usb_alloc_urb(0, GFP_KERNEL);
 109	if (urb == NULL)
 110		return -ENOMEM;
 111
 112	cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
 113	if (cmd == NULL) {
 114		usb_free_urb(urb);
 115		return -ENOMEM;
 116	}
 117
 118	cmd->skb = skb;
 119	cmd->hif_dev = hif_dev;
 120
 121	usb_fill_int_urb(urb, hif_dev->udev,
 122			 usb_sndintpipe(hif_dev->udev, USB_REG_OUT_PIPE),
 123			 skb->data, skb->len,
 124			 hif_usb_regout_cb, cmd, 1);
 125
 126	usb_anchor_urb(urb, &hif_dev->regout_submitted);
 127	ret = usb_submit_urb(urb, GFP_KERNEL);
 128	if (ret) {
 129		usb_unanchor_urb(urb);
 130		kfree(cmd);
 131	}
 132	usb_free_urb(urb);
 133
 134	return ret;
 135}
 136
 137static void hif_usb_mgmt_cb(struct urb *urb)
 138{
 139	struct cmd_buf *cmd = (struct cmd_buf *)urb->context;
 140	struct hif_device_usb *hif_dev;
 141	unsigned long flags;
 142	bool txok = true;
 143
 144	if (!cmd || !cmd->skb || !cmd->hif_dev)
 145		return;
 146
 147	hif_dev = cmd->hif_dev;
 148
 149	switch (urb->status) {
 150	case 0:
 151		break;
 152	case -ENOENT:
 153	case -ECONNRESET:
 154	case -ENODEV:
 155	case -ESHUTDOWN:
 156		txok = false;
 157
 158		/*
 159		 * If the URBs are being flushed, no need to complete
 160		 * this packet.
 161		 */
 162		spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
 163		if (hif_dev->tx.flags & HIF_USB_TX_FLUSH) {
 164			spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 165			dev_kfree_skb_any(cmd->skb);
 166			kfree(cmd);
 167			return;
 168		}
 169		spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 170
 171		break;
 172	default:
 173		txok = false;
 174		break;
 175	}
 176
 177	skb_pull(cmd->skb, 4);
 178	ath9k_htc_txcompletion_cb(cmd->hif_dev->htc_handle,
 179				  cmd->skb, txok);
 180	kfree(cmd);
 181}
 182
 183static int hif_usb_send_mgmt(struct hif_device_usb *hif_dev,
 184			     struct sk_buff *skb)
 185{
 186	struct urb *urb;
 187	struct cmd_buf *cmd;
 188	int ret = 0;
 189	__le16 *hdr;
 190
 191	urb = usb_alloc_urb(0, GFP_ATOMIC);
 192	if (urb == NULL)
 193		return -ENOMEM;
 194
 195	cmd = kzalloc(sizeof(*cmd), GFP_ATOMIC);
 196	if (cmd == NULL) {
 197		usb_free_urb(urb);
 198		return -ENOMEM;
 199	}
 200
 201	cmd->skb = skb;
 202	cmd->hif_dev = hif_dev;
 203
 204	hdr = skb_push(skb, 4);
 205	*hdr++ = cpu_to_le16(skb->len - 4);
 206	*hdr++ = cpu_to_le16(ATH_USB_TX_STREAM_MODE_TAG);
 207
 208	usb_fill_bulk_urb(urb, hif_dev->udev,
 209			 usb_sndbulkpipe(hif_dev->udev, USB_WLAN_TX_PIPE),
 210			 skb->data, skb->len,
 211			 hif_usb_mgmt_cb, cmd);
 212
 213	usb_anchor_urb(urb, &hif_dev->mgmt_submitted);
 214	ret = usb_submit_urb(urb, GFP_ATOMIC);
 215	if (ret) {
 216		usb_unanchor_urb(urb);
 217		kfree(cmd);
 218	}
 219	usb_free_urb(urb);
 220
 221	return ret;
 222}
 223
 224static inline void ath9k_skb_queue_purge(struct hif_device_usb *hif_dev,
 225					 struct sk_buff_head *list)
 226{
 227	struct sk_buff *skb;
 228
 229	while ((skb = __skb_dequeue(list)) != NULL) {
 230		dev_kfree_skb_any(skb);
 231	}
 232}
 233
 234static inline void ath9k_skb_queue_complete(struct hif_device_usb *hif_dev,
 235					    struct sk_buff_head *queue,
 236					    bool txok)
 237{
 238	struct sk_buff *skb;
 239
 240	while ((skb = __skb_dequeue(queue)) != NULL) {
 241#ifdef CONFIG_ATH9K_HTC_DEBUGFS
 242		int ln = skb->len;
 243#endif
 244		ath9k_htc_txcompletion_cb(hif_dev->htc_handle,
 245					  skb, txok);
 246		if (txok) {
 247			TX_STAT_INC(skb_success);
 248			TX_STAT_ADD(skb_success_bytes, ln);
 249		}
 250		else
 251			TX_STAT_INC(skb_failed);
 252	}
 253}
 254
 255static void hif_usb_tx_cb(struct urb *urb)
 256{
 257	struct tx_buf *tx_buf = (struct tx_buf *) urb->context;
 258	struct hif_device_usb *hif_dev;
 259	bool txok = true;
 260
 261	if (!tx_buf || !tx_buf->hif_dev)
 262		return;
 263
 264	hif_dev = tx_buf->hif_dev;
 265
 266	switch (urb->status) {
 267	case 0:
 268		break;
 269	case -ENOENT:
 270	case -ECONNRESET:
 271	case -ENODEV:
 272	case -ESHUTDOWN:
 273		txok = false;
 274
 275		/*
 276		 * If the URBs are being flushed, no need to add this
 277		 * URB to the free list.
 278		 */
 279		spin_lock(&hif_dev->tx.tx_lock);
 280		if (hif_dev->tx.flags & HIF_USB_TX_FLUSH) {
 281			spin_unlock(&hif_dev->tx.tx_lock);
 282			ath9k_skb_queue_purge(hif_dev, &tx_buf->skb_queue);
 283			return;
 284		}
 285		spin_unlock(&hif_dev->tx.tx_lock);
 286
 287		break;
 288	default:
 289		txok = false;
 290		break;
 291	}
 292
 293	ath9k_skb_queue_complete(hif_dev, &tx_buf->skb_queue, txok);
 294
 295	/* Re-initialize the SKB queue */
 296	tx_buf->len = tx_buf->offset = 0;
 297	__skb_queue_head_init(&tx_buf->skb_queue);
 298
 299	/* Add this TX buffer to the free list */
 300	spin_lock(&hif_dev->tx.tx_lock);
 301	list_move_tail(&tx_buf->list, &hif_dev->tx.tx_buf);
 302	hif_dev->tx.tx_buf_cnt++;
 303	if (!(hif_dev->tx.flags & HIF_USB_TX_STOP))
 304		__hif_usb_tx(hif_dev); /* Check for pending SKBs */
 305	TX_STAT_INC(buf_completed);
 306	spin_unlock(&hif_dev->tx.tx_lock);
 307}
 308
 309/* TX lock has to be taken */
 310static int __hif_usb_tx(struct hif_device_usb *hif_dev)
 311{
 312	struct tx_buf *tx_buf = NULL;
 313	struct sk_buff *nskb = NULL;
 314	int ret = 0, i;
 315	u16 tx_skb_cnt = 0;
 316	u8 *buf;
 317	__le16 *hdr;
 318
 319	if (hif_dev->tx.tx_skb_cnt == 0)
 320		return 0;
 321
 322	/* Check if a free TX buffer is available */
 323	if (list_empty(&hif_dev->tx.tx_buf))
 324		return 0;
 325
 326	tx_buf = list_first_entry(&hif_dev->tx.tx_buf, struct tx_buf, list);
 327	list_move_tail(&tx_buf->list, &hif_dev->tx.tx_pending);
 328	hif_dev->tx.tx_buf_cnt--;
 329
 330	tx_skb_cnt = min_t(u16, hif_dev->tx.tx_skb_cnt, MAX_TX_AGGR_NUM);
 331
 332	for (i = 0; i < tx_skb_cnt; i++) {
 333		nskb = __skb_dequeue(&hif_dev->tx.tx_skb_queue);
 334
 335		/* Should never be NULL */
 336		BUG_ON(!nskb);
 337
 338		hif_dev->tx.tx_skb_cnt--;
 339
 340		buf = tx_buf->buf;
 341		buf += tx_buf->offset;
 342		hdr = (__le16 *)buf;
 343		*hdr++ = cpu_to_le16(nskb->len);
 344		*hdr++ = cpu_to_le16(ATH_USB_TX_STREAM_MODE_TAG);
 345		buf += 4;
 346		memcpy(buf, nskb->data, nskb->len);
 347		tx_buf->len = nskb->len + 4;
 348
 349		if (i < (tx_skb_cnt - 1))
 350			tx_buf->offset += (((tx_buf->len - 1) / 4) + 1) * 4;
 351
 352		if (i == (tx_skb_cnt - 1))
 353			tx_buf->len += tx_buf->offset;
 354
 355		__skb_queue_tail(&tx_buf->skb_queue, nskb);
 356		TX_STAT_INC(skb_queued);
 357	}
 358
 359	usb_fill_bulk_urb(tx_buf->urb, hif_dev->udev,
 360			  usb_sndbulkpipe(hif_dev->udev, USB_WLAN_TX_PIPE),
 361			  tx_buf->buf, tx_buf->len,
 362			  hif_usb_tx_cb, tx_buf);
 363
 364	ret = usb_submit_urb(tx_buf->urb, GFP_ATOMIC);
 365	if (ret) {
 366		tx_buf->len = tx_buf->offset = 0;
 367		ath9k_skb_queue_complete(hif_dev, &tx_buf->skb_queue, false);
 368		__skb_queue_head_init(&tx_buf->skb_queue);
 369		list_move_tail(&tx_buf->list, &hif_dev->tx.tx_buf);
 370		hif_dev->tx.tx_buf_cnt++;
 371	}
 372
 373	if (!ret)
 374		TX_STAT_INC(buf_queued);
 375
 376	return ret;
 377}
 378
 379static int hif_usb_send_tx(struct hif_device_usb *hif_dev, struct sk_buff *skb)
 380{
 381	struct ath9k_htc_tx_ctl *tx_ctl;
 382	unsigned long flags;
 383	int ret = 0;
 384
 385	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
 386
 387	if (hif_dev->tx.flags & HIF_USB_TX_STOP) {
 388		spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 389		return -ENODEV;
 390	}
 391
 392	/* Check if the max queue count has been reached */
 393	if (hif_dev->tx.tx_skb_cnt > MAX_TX_BUF_NUM) {
 394		spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 395		return -ENOMEM;
 396	}
 397
 398	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 399
 400	tx_ctl = HTC_SKB_CB(skb);
 401
 402	/* Mgmt/Beacon frames don't use the TX buffer pool */
 403	if ((tx_ctl->type == ATH9K_HTC_MGMT) ||
 404	    (tx_ctl->type == ATH9K_HTC_BEACON)) {
 405		ret = hif_usb_send_mgmt(hif_dev, skb);
 406	}
 407
 408	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
 409
 410	if ((tx_ctl->type == ATH9K_HTC_NORMAL) ||
 411	    (tx_ctl->type == ATH9K_HTC_AMPDU)) {
 412		__skb_queue_tail(&hif_dev->tx.tx_skb_queue, skb);
 413		hif_dev->tx.tx_skb_cnt++;
 414	}
 415
 416	/* Check if AMPDUs have to be sent immediately */
 417	if ((hif_dev->tx.tx_buf_cnt == MAX_TX_URB_NUM) &&
 418	    (hif_dev->tx.tx_skb_cnt < 2)) {
 419		__hif_usb_tx(hif_dev);
 420	}
 421
 422	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 423
 424	return ret;
 425}
 426
 427static void hif_usb_start(void *hif_handle)
 428{
 429	struct hif_device_usb *hif_dev = hif_handle;
 430	unsigned long flags;
 431
 432	hif_dev->flags |= HIF_USB_START;
 433
 434	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
 435	hif_dev->tx.flags &= ~HIF_USB_TX_STOP;
 436	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 437}
 438
 439static void hif_usb_stop(void *hif_handle)
 440{
 441	struct hif_device_usb *hif_dev = hif_handle;
 442	struct tx_buf *tx_buf = NULL, *tx_buf_tmp = NULL;
 443	unsigned long flags;
 444
 445	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
 446	ath9k_skb_queue_complete(hif_dev, &hif_dev->tx.tx_skb_queue, false);
 447	hif_dev->tx.tx_skb_cnt = 0;
 448	hif_dev->tx.flags |= HIF_USB_TX_STOP;
 449	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 450
 451	/* The pending URBs have to be canceled. */
 452	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
 453	list_for_each_entry_safe(tx_buf, tx_buf_tmp,
 454				 &hif_dev->tx.tx_pending, list) {
 455		usb_get_urb(tx_buf->urb);
 456		spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 457		usb_kill_urb(tx_buf->urb);
 458		list_del(&tx_buf->list);
 459		usb_free_urb(tx_buf->urb);
 460		kfree(tx_buf->buf);
 461		kfree(tx_buf);
 462		spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
 463	}
 464	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 465
 466	usb_kill_anchored_urbs(&hif_dev->mgmt_submitted);
 467}
 468
 469static int hif_usb_send(void *hif_handle, u8 pipe_id, struct sk_buff *skb)
 470{
 471	struct hif_device_usb *hif_dev = hif_handle;
 472	int ret = 0;
 473
 474	switch (pipe_id) {
 475	case USB_WLAN_TX_PIPE:
 476		ret = hif_usb_send_tx(hif_dev, skb);
 477		break;
 478	case USB_REG_OUT_PIPE:
 479		ret = hif_usb_send_regout(hif_dev, skb);
 480		break;
 481	default:
 482		dev_err(&hif_dev->udev->dev,
 483			"ath9k_htc: Invalid TX pipe: %d\n", pipe_id);
 484		ret = -EINVAL;
 485		break;
 486	}
 487
 488	return ret;
 489}
 490
 491static inline bool check_index(struct sk_buff *skb, u8 idx)
 492{
 493	struct ath9k_htc_tx_ctl *tx_ctl;
 494
 495	tx_ctl = HTC_SKB_CB(skb);
 496
 497	if ((tx_ctl->type == ATH9K_HTC_AMPDU) &&
 498	    (tx_ctl->sta_idx == idx))
 499		return true;
 500
 501	return false;
 502}
 503
 504static void hif_usb_sta_drain(void *hif_handle, u8 idx)
 505{
 506	struct hif_device_usb *hif_dev = hif_handle;
 507	struct sk_buff *skb, *tmp;
 508	unsigned long flags;
 509
 510	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
 511
 512	skb_queue_walk_safe(&hif_dev->tx.tx_skb_queue, skb, tmp) {
 513		if (check_index(skb, idx)) {
 514			__skb_unlink(skb, &hif_dev->tx.tx_skb_queue);
 515			ath9k_htc_txcompletion_cb(hif_dev->htc_handle,
 516						  skb, false);
 517			hif_dev->tx.tx_skb_cnt--;
 518			TX_STAT_INC(skb_failed);
 519		}
 520	}
 521
 522	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 523}
 524
 525static struct ath9k_htc_hif hif_usb = {
 526	.transport = ATH9K_HIF_USB,
 527	.name = "ath9k_hif_usb",
 528
 529	.control_ul_pipe = USB_REG_OUT_PIPE,
 530	.control_dl_pipe = USB_REG_IN_PIPE,
 531
 532	.start = hif_usb_start,
 533	.stop = hif_usb_stop,
 534	.sta_drain = hif_usb_sta_drain,
 535	.send = hif_usb_send,
 536};
 537
 538static void ath9k_hif_usb_rx_stream(struct hif_device_usb *hif_dev,
 539				    struct sk_buff *skb)
 540{
 541	struct sk_buff *nskb, *skb_pool[MAX_PKT_NUM_IN_TRANSFER];
 542	int index = 0, i, len = skb->len;
 543	int rx_remain_len, rx_pkt_len;
 544	u16 pool_index = 0;
 545	u8 *ptr;
 546
 547	spin_lock(&hif_dev->rx_lock);
 548
 549	rx_remain_len = hif_dev->rx_remain_len;
 550	rx_pkt_len = hif_dev->rx_transfer_len;
 551
 552	if (rx_remain_len != 0) {
 553		struct sk_buff *remain_skb = hif_dev->remain_skb;
 554
 555		if (remain_skb) {
 556			ptr = (u8 *) remain_skb->data;
 557
 558			index = rx_remain_len;
 559			rx_remain_len -= hif_dev->rx_pad_len;
 560			ptr += rx_pkt_len;
 561
 562			memcpy(ptr, skb->data, rx_remain_len);
 563
 564			rx_pkt_len += rx_remain_len;
 565			hif_dev->rx_remain_len = 0;
 566			skb_put(remain_skb, rx_pkt_len);
 567
 568			skb_pool[pool_index++] = remain_skb;
 569
 570		} else {
 571			index = rx_remain_len;
 572		}
 573	}
 574
 575	spin_unlock(&hif_dev->rx_lock);
 576
 577	while (index < len) {
 578		u16 pkt_len;
 579		u16 pkt_tag;
 580		u16 pad_len;
 581		int chk_idx;
 582
 583		ptr = (u8 *) skb->data;
 584
 585		pkt_len = get_unaligned_le16(ptr + index);
 586		pkt_tag = get_unaligned_le16(ptr + index + 2);
 587
 588		if (pkt_tag != ATH_USB_RX_STREAM_MODE_TAG) {
 589			RX_STAT_INC(skb_dropped);
 590			return;
 591		}
 592
 593		pad_len = 4 - (pkt_len & 0x3);
 594		if (pad_len == 4)
 595			pad_len = 0;
 596
 597		chk_idx = index;
 598		index = index + 4 + pkt_len + pad_len;
 599
 600		if (index > MAX_RX_BUF_SIZE) {
 601			spin_lock(&hif_dev->rx_lock);
 602			hif_dev->rx_remain_len = index - MAX_RX_BUF_SIZE;
 603			hif_dev->rx_transfer_len =
 604				MAX_RX_BUF_SIZE - chk_idx - 4;
 605			hif_dev->rx_pad_len = pad_len;
 606
 607			nskb = __dev_alloc_skb(pkt_len + 32, GFP_ATOMIC);
 608			if (!nskb) {
 609				dev_err(&hif_dev->udev->dev,
 610					"ath9k_htc: RX memory allocation error\n");
 611				spin_unlock(&hif_dev->rx_lock);
 612				goto err;
 613			}
 614			skb_reserve(nskb, 32);
 615			RX_STAT_INC(skb_allocated);
 616
 617			memcpy(nskb->data, &(skb->data[chk_idx+4]),
 618			       hif_dev->rx_transfer_len);
 619
 620			/* Record the buffer pointer */
 621			hif_dev->remain_skb = nskb;
 622			spin_unlock(&hif_dev->rx_lock);
 623		} else {
 624			if (pool_index == MAX_PKT_NUM_IN_TRANSFER) {
 625				dev_err(&hif_dev->udev->dev,
 626					"ath9k_htc: over RX MAX_PKT_NUM\n");
 627				goto err;
 628			}
 629			nskb = __dev_alloc_skb(pkt_len + 32, GFP_ATOMIC);
 630			if (!nskb) {
 631				dev_err(&hif_dev->udev->dev,
 632					"ath9k_htc: RX memory allocation error\n");
 633				goto err;
 634			}
 635			skb_reserve(nskb, 32);
 636			RX_STAT_INC(skb_allocated);
 637
 638			memcpy(nskb->data, &(skb->data[chk_idx+4]), pkt_len);
 639			skb_put(nskb, pkt_len);
 640			skb_pool[pool_index++] = nskb;
 641		}
 642	}
 643
 644err:
 645	for (i = 0; i < pool_index; i++) {
 646		RX_STAT_ADD(skb_completed_bytes, skb_pool[i]->len);
 647		ath9k_htc_rx_msg(hif_dev->htc_handle, skb_pool[i],
 648				 skb_pool[i]->len, USB_WLAN_RX_PIPE);
 649		RX_STAT_INC(skb_completed);
 650	}
 651}
 652
 653static void ath9k_hif_usb_rx_cb(struct urb *urb)
 654{
 655	struct rx_buf *rx_buf = (struct rx_buf *)urb->context;
 656	struct hif_device_usb *hif_dev = rx_buf->hif_dev;
 657	struct sk_buff *skb = rx_buf->skb;
 658	int ret;
 659
 660	if (!skb)
 661		return;
 662
 663	if (!hif_dev)
 664		goto free;
 665
 666	switch (urb->status) {
 667	case 0:
 668		break;
 669	case -ENOENT:
 670	case -ECONNRESET:
 671	case -ENODEV:
 672	case -ESHUTDOWN:
 673		goto free;
 674	default:
 675		goto resubmit;
 676	}
 677
 678	if (likely(urb->actual_length != 0)) {
 679		skb_put(skb, urb->actual_length);
 680		ath9k_hif_usb_rx_stream(hif_dev, skb);
 681	}
 682
 683resubmit:
 684	skb_reset_tail_pointer(skb);
 685	skb_trim(skb, 0);
 686
 687	usb_anchor_urb(urb, &hif_dev->rx_submitted);
 688	ret = usb_submit_urb(urb, GFP_ATOMIC);
 689	if (ret) {
 690		usb_unanchor_urb(urb);
 691		goto free;
 692	}
 693
 694	return;
 695free:
 696	kfree_skb(skb);
 697	kfree(rx_buf);
 698}
 699
 700static void ath9k_hif_usb_reg_in_cb(struct urb *urb)
 701{
 702	struct rx_buf *rx_buf = (struct rx_buf *)urb->context;
 703	struct hif_device_usb *hif_dev = rx_buf->hif_dev;
 704	struct sk_buff *skb = rx_buf->skb;
 705	struct sk_buff *nskb;
 
 
 706	int ret;
 707
 708	if (!skb)
 709		return;
 710
 711	if (!hif_dev)
 712		goto free;
 713
 714	switch (urb->status) {
 715	case 0:
 716		break;
 717	case -ENOENT:
 718	case -ECONNRESET:
 719	case -ENODEV:
 720	case -ESHUTDOWN:
 721		goto free;
 722	default:
 723		skb_reset_tail_pointer(skb);
 724		skb_trim(skb, 0);
 725
 726		goto resubmit;
 727	}
 728
 729	if (likely(urb->actual_length != 0)) {
 730		skb_put(skb, urb->actual_length);
 731
 732		/* Process the command first */
 733		ath9k_htc_rx_msg(hif_dev->htc_handle, skb,
 734				 skb->len, USB_REG_IN_PIPE);
 735
 736
 737		nskb = alloc_skb(MAX_REG_IN_BUF_SIZE, GFP_ATOMIC);
 738		if (!nskb) {
 739			dev_err(&hif_dev->udev->dev,
 740				"ath9k_htc: REG_IN memory allocation failure\n");
 741			urb->context = NULL;
 742			return;
 743		}
 744
 745		rx_buf->skb = nskb;
 746
 747		usb_fill_int_urb(urb, hif_dev->udev,
 748				 usb_rcvintpipe(hif_dev->udev,
 749						 USB_REG_IN_PIPE),
 750				 nskb->data, MAX_REG_IN_BUF_SIZE,
 751				 ath9k_hif_usb_reg_in_cb, rx_buf, 1);
 752	}
 753
 754resubmit:
 755	usb_anchor_urb(urb, &hif_dev->reg_in_submitted);
 756	ret = usb_submit_urb(urb, GFP_ATOMIC);
 757	if (ret) {
 758		usb_unanchor_urb(urb);
 759		goto free;
 760	}
 761
 762	return;
 763free:
 764	kfree_skb(skb);
 765	kfree(rx_buf);
 766	urb->context = NULL;
 767}
 768
 769static void ath9k_hif_usb_dealloc_tx_urbs(struct hif_device_usb *hif_dev)
 770{
 771	struct tx_buf *tx_buf = NULL, *tx_buf_tmp = NULL;
 772	unsigned long flags;
 773
 774	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
 775	list_for_each_entry_safe(tx_buf, tx_buf_tmp,
 776				 &hif_dev->tx.tx_buf, list) {
 777		usb_get_urb(tx_buf->urb);
 778		spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 779		usb_kill_urb(tx_buf->urb);
 780		list_del(&tx_buf->list);
 781		usb_free_urb(tx_buf->urb);
 782		kfree(tx_buf->buf);
 783		kfree(tx_buf);
 784		spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
 785	}
 786	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 787
 788	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
 789	hif_dev->tx.flags |= HIF_USB_TX_FLUSH;
 790	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 791
 792	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
 793	list_for_each_entry_safe(tx_buf, tx_buf_tmp,
 794				 &hif_dev->tx.tx_pending, list) {
 795		usb_get_urb(tx_buf->urb);
 796		spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 797		usb_kill_urb(tx_buf->urb);
 798		list_del(&tx_buf->list);
 799		usb_free_urb(tx_buf->urb);
 800		kfree(tx_buf->buf);
 801		kfree(tx_buf);
 802		spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
 803	}
 804	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
 805
 806	usb_kill_anchored_urbs(&hif_dev->mgmt_submitted);
 807}
 808
 809static int ath9k_hif_usb_alloc_tx_urbs(struct hif_device_usb *hif_dev)
 810{
 811	struct tx_buf *tx_buf;
 812	int i;
 813
 814	INIT_LIST_HEAD(&hif_dev->tx.tx_buf);
 815	INIT_LIST_HEAD(&hif_dev->tx.tx_pending);
 816	spin_lock_init(&hif_dev->tx.tx_lock);
 817	__skb_queue_head_init(&hif_dev->tx.tx_skb_queue);
 818	init_usb_anchor(&hif_dev->mgmt_submitted);
 819
 820	for (i = 0; i < MAX_TX_URB_NUM; i++) {
 821		tx_buf = kzalloc(sizeof(*tx_buf), GFP_KERNEL);
 822		if (!tx_buf)
 823			goto err;
 824
 825		tx_buf->buf = kzalloc(MAX_TX_BUF_SIZE, GFP_KERNEL);
 826		if (!tx_buf->buf)
 827			goto err;
 828
 829		tx_buf->urb = usb_alloc_urb(0, GFP_KERNEL);
 830		if (!tx_buf->urb)
 831			goto err;
 832
 833		tx_buf->hif_dev = hif_dev;
 834		__skb_queue_head_init(&tx_buf->skb_queue);
 835
 836		list_add_tail(&tx_buf->list, &hif_dev->tx.tx_buf);
 837	}
 838
 839	hif_dev->tx.tx_buf_cnt = MAX_TX_URB_NUM;
 840
 841	return 0;
 842err:
 843	if (tx_buf) {
 844		kfree(tx_buf->buf);
 845		kfree(tx_buf);
 846	}
 847	ath9k_hif_usb_dealloc_tx_urbs(hif_dev);
 848	return -ENOMEM;
 849}
 850
 851static void ath9k_hif_usb_dealloc_rx_urbs(struct hif_device_usb *hif_dev)
 852{
 853	usb_kill_anchored_urbs(&hif_dev->rx_submitted);
 854}
 855
 856static int ath9k_hif_usb_alloc_rx_urbs(struct hif_device_usb *hif_dev)
 857{
 858	struct rx_buf *rx_buf = NULL;
 859	struct sk_buff *skb = NULL;
 860	struct urb *urb = NULL;
 861	int i, ret;
 862
 863	init_usb_anchor(&hif_dev->rx_submitted);
 864	spin_lock_init(&hif_dev->rx_lock);
 865
 866	for (i = 0; i < MAX_RX_URB_NUM; i++) {
 867
 868		rx_buf = kzalloc(sizeof(*rx_buf), GFP_KERNEL);
 869		if (!rx_buf) {
 870			ret = -ENOMEM;
 871			goto err_rxb;
 872		}
 873
 874		/* Allocate URB */
 875		urb = usb_alloc_urb(0, GFP_KERNEL);
 876		if (urb == NULL) {
 877			ret = -ENOMEM;
 878			goto err_urb;
 879		}
 880
 881		/* Allocate buffer */
 882		skb = alloc_skb(MAX_RX_BUF_SIZE, GFP_KERNEL);
 883		if (!skb) {
 884			ret = -ENOMEM;
 885			goto err_skb;
 886		}
 887
 888		rx_buf->hif_dev = hif_dev;
 889		rx_buf->skb = skb;
 890
 891		usb_fill_bulk_urb(urb, hif_dev->udev,
 892				  usb_rcvbulkpipe(hif_dev->udev,
 893						  USB_WLAN_RX_PIPE),
 894				  skb->data, MAX_RX_BUF_SIZE,
 895				  ath9k_hif_usb_rx_cb, rx_buf);
 896
 897		/* Anchor URB */
 898		usb_anchor_urb(urb, &hif_dev->rx_submitted);
 899
 900		/* Submit URB */
 901		ret = usb_submit_urb(urb, GFP_KERNEL);
 902		if (ret) {
 903			usb_unanchor_urb(urb);
 904			goto err_submit;
 905		}
 906
 907		/*
 908		 * Drop reference count.
 909		 * This ensures that the URB is freed when killing them.
 910		 */
 911		usb_free_urb(urb);
 912	}
 913
 914	return 0;
 915
 916err_submit:
 917	kfree_skb(skb);
 918err_skb:
 919	usb_free_urb(urb);
 920err_urb:
 921	kfree(rx_buf);
 922err_rxb:
 923	ath9k_hif_usb_dealloc_rx_urbs(hif_dev);
 924	return ret;
 925}
 926
 927static void ath9k_hif_usb_dealloc_reg_in_urbs(struct hif_device_usb *hif_dev)
 928{
 929	usb_kill_anchored_urbs(&hif_dev->reg_in_submitted);
 930}
 931
 932static int ath9k_hif_usb_alloc_reg_in_urbs(struct hif_device_usb *hif_dev)
 933{
 934	struct rx_buf *rx_buf = NULL;
 935	struct sk_buff *skb = NULL;
 936	struct urb *urb = NULL;
 937	int i, ret;
 938
 939	init_usb_anchor(&hif_dev->reg_in_submitted);
 940
 941	for (i = 0; i < MAX_REG_IN_URB_NUM; i++) {
 942
 943		rx_buf = kzalloc(sizeof(*rx_buf), GFP_KERNEL);
 944		if (!rx_buf) {
 945			ret = -ENOMEM;
 946			goto err_rxb;
 947		}
 948
 949		/* Allocate URB */
 950		urb = usb_alloc_urb(0, GFP_KERNEL);
 951		if (urb == NULL) {
 952			ret = -ENOMEM;
 953			goto err_urb;
 954		}
 955
 956		/* Allocate buffer */
 957		skb = alloc_skb(MAX_REG_IN_BUF_SIZE, GFP_KERNEL);
 958		if (!skb) {
 959			ret = -ENOMEM;
 960			goto err_skb;
 961		}
 962
 963		rx_buf->hif_dev = hif_dev;
 964		rx_buf->skb = skb;
 965
 966		usb_fill_int_urb(urb, hif_dev->udev,
 967				  usb_rcvintpipe(hif_dev->udev,
 968						  USB_REG_IN_PIPE),
 969				  skb->data, MAX_REG_IN_BUF_SIZE,
 970				  ath9k_hif_usb_reg_in_cb, rx_buf, 1);
 971
 972		/* Anchor URB */
 973		usb_anchor_urb(urb, &hif_dev->reg_in_submitted);
 974
 975		/* Submit URB */
 976		ret = usb_submit_urb(urb, GFP_KERNEL);
 977		if (ret) {
 978			usb_unanchor_urb(urb);
 979			goto err_submit;
 980		}
 981
 982		/*
 983		 * Drop reference count.
 984		 * This ensures that the URB is freed when killing them.
 985		 */
 986		usb_free_urb(urb);
 987	}
 988
 989	return 0;
 990
 991err_submit:
 992	kfree_skb(skb);
 993err_skb:
 994	usb_free_urb(urb);
 995err_urb:
 996	kfree(rx_buf);
 997err_rxb:
 998	ath9k_hif_usb_dealloc_reg_in_urbs(hif_dev);
 999	return ret;
1000}
1001
1002static int ath9k_hif_usb_alloc_urbs(struct hif_device_usb *hif_dev)
1003{
1004	/* Register Write */
1005	init_usb_anchor(&hif_dev->regout_submitted);
1006
1007	/* TX */
1008	if (ath9k_hif_usb_alloc_tx_urbs(hif_dev) < 0)
1009		goto err;
1010
1011	/* RX */
1012	if (ath9k_hif_usb_alloc_rx_urbs(hif_dev) < 0)
1013		goto err_rx;
1014
1015	/* Register Read */
1016	if (ath9k_hif_usb_alloc_reg_in_urbs(hif_dev) < 0)
1017		goto err_reg;
1018
1019	return 0;
1020err_reg:
1021	ath9k_hif_usb_dealloc_rx_urbs(hif_dev);
1022err_rx:
1023	ath9k_hif_usb_dealloc_tx_urbs(hif_dev);
1024err:
1025	return -ENOMEM;
1026}
1027
1028void ath9k_hif_usb_dealloc_urbs(struct hif_device_usb *hif_dev)
1029{
1030	usb_kill_anchored_urbs(&hif_dev->regout_submitted);
1031	ath9k_hif_usb_dealloc_reg_in_urbs(hif_dev);
1032	ath9k_hif_usb_dealloc_tx_urbs(hif_dev);
1033	ath9k_hif_usb_dealloc_rx_urbs(hif_dev);
1034}
1035
1036static int ath9k_hif_usb_download_fw(struct hif_device_usb *hif_dev)
 
1037{
1038	int transfer, err;
1039	const void *data = hif_dev->fw_data;
1040	size_t len = hif_dev->fw_size;
1041	u32 addr = AR9271_FIRMWARE;
1042	u8 *buf = kzalloc(4096, GFP_KERNEL);
1043	u32 firm_offset;
1044
1045	if (!buf)
1046		return -ENOMEM;
1047
1048	while (len) {
1049		transfer = min_t(size_t, len, 4096);
1050		memcpy(buf, data, transfer);
1051
1052		err = usb_control_msg(hif_dev->udev,
1053				      usb_sndctrlpipe(hif_dev->udev, 0),
1054				      FIRMWARE_DOWNLOAD, 0x40 | USB_DIR_OUT,
1055				      addr >> 8, 0, buf, transfer,
1056				      USB_MSG_TIMEOUT);
1057		if (err < 0) {
1058			kfree(buf);
1059			return err;
1060		}
1061
1062		len -= transfer;
1063		data += transfer;
1064		addr += transfer;
1065	}
1066	kfree(buf);
1067
1068	if (IS_AR7010_DEVICE(hif_dev->usb_device_id->driver_info))
1069		firm_offset = AR7010_FIRMWARE_TEXT;
1070	else
1071		firm_offset = AR9271_FIRMWARE_TEXT;
1072
1073	/*
1074	 * Issue FW download complete command to firmware.
1075	 */
1076	err = usb_control_msg(hif_dev->udev, usb_sndctrlpipe(hif_dev->udev, 0),
1077			      FIRMWARE_DOWNLOAD_COMP,
1078			      0x40 | USB_DIR_OUT,
1079			      firm_offset >> 8, 0, NULL, 0, USB_MSG_TIMEOUT);
1080	if (err)
1081		return -EIO;
1082
1083	dev_info(&hif_dev->udev->dev, "ath9k_htc: Transferred FW: %s, size: %ld\n",
1084		 hif_dev->fw_name, (unsigned long) hif_dev->fw_size);
1085
1086	return 0;
1087}
1088
1089static int ath9k_hif_usb_dev_init(struct hif_device_usb *hif_dev)
1090{
1091	int ret;
 
 
 
 
 
 
 
 
 
 
 
1092
1093	ret = ath9k_hif_usb_download_fw(hif_dev);
 
1094	if (ret) {
1095		dev_err(&hif_dev->udev->dev,
1096			"ath9k_htc: Firmware - %s download failed\n",
1097			hif_dev->fw_name);
1098		return ret;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1099	}
1100
1101	/* Alloc URBs */
1102	ret = ath9k_hif_usb_alloc_urbs(hif_dev);
1103	if (ret) {
1104		dev_err(&hif_dev->udev->dev,
1105			"ath9k_htc: Unable to allocate URBs\n");
1106		return ret;
1107	}
1108
1109	return 0;
 
 
 
 
 
 
1110}
1111
1112static void ath9k_hif_usb_dev_deinit(struct hif_device_usb *hif_dev)
1113{
1114	ath9k_hif_usb_dealloc_urbs(hif_dev);
1115}
1116
1117/*
1118 * If initialization fails or the FW cannot be retrieved,
1119 * detach the device.
1120 */
1121static void ath9k_hif_usb_firmware_fail(struct hif_device_usb *hif_dev)
1122{
1123	struct device *dev = &hif_dev->udev->dev;
1124	struct device *parent = dev->parent;
1125
1126	complete_all(&hif_dev->fw_done);
1127
1128	if (parent)
1129		device_lock(parent);
1130
1131	device_release_driver(dev);
1132
1133	if (parent)
1134		device_unlock(parent);
1135}
1136
1137static void ath9k_hif_usb_firmware_cb(const struct firmware *fw, void *context);
1138
1139/* taken from iwlwifi */
1140static int ath9k_hif_request_firmware(struct hif_device_usb *hif_dev,
1141				      bool first)
1142{
1143	char index[8], *chip;
1144	int ret;
1145
1146	if (first) {
1147		if (htc_use_dev_fw) {
1148			hif_dev->fw_minor_index = FIRMWARE_MINOR_IDX_MAX + 1;
1149			sprintf(index, "%s", "dev");
1150		} else {
1151			hif_dev->fw_minor_index = FIRMWARE_MINOR_IDX_MAX;
1152			sprintf(index, "%d", hif_dev->fw_minor_index);
1153		}
1154	} else {
1155		hif_dev->fw_minor_index--;
1156		sprintf(index, "%d", hif_dev->fw_minor_index);
1157	}
1158
1159	/* test for FW 1.3 */
1160	if (MAJOR_VERSION_REQ == 1 && hif_dev->fw_minor_index == 3) {
1161		const char *filename;
1162
1163		if (IS_AR7010_DEVICE(hif_dev->usb_device_id->driver_info))
1164			filename = FIRMWARE_AR7010_1_1;
1165		else
1166			filename = FIRMWARE_AR9271;
1167
1168		/* expected fw locations:
1169		 * - htc_9271.fw   (stable version 1.3, depricated)
1170		 */
1171		snprintf(hif_dev->fw_name, sizeof(hif_dev->fw_name),
1172			 "%s", filename);
1173
1174	} else if (hif_dev->fw_minor_index < FIRMWARE_MINOR_IDX_MIN) {
1175		dev_err(&hif_dev->udev->dev, "no suitable firmware found!\n");
1176
1177		return -ENOENT;
1178	} else {
1179		if (IS_AR7010_DEVICE(hif_dev->usb_device_id->driver_info))
1180			chip = "7010";
1181		else
1182			chip = "9271";
1183
1184		/* expected fw locations:
1185		 * - ath9k_htc/htc_9271-1.dev.0.fw (development version)
1186		 * - ath9k_htc/htc_9271-1.4.0.fw   (stable version)
1187		 */
1188		snprintf(hif_dev->fw_name, sizeof(hif_dev->fw_name),
1189			 "%s/htc_%s-%d.%s.0.fw", HTC_FW_PATH,
1190			 chip, MAJOR_VERSION_REQ, index);
1191	}
1192
1193	ret = request_firmware_nowait(THIS_MODULE, true, hif_dev->fw_name,
1194				      &hif_dev->udev->dev, GFP_KERNEL,
1195				      hif_dev, ath9k_hif_usb_firmware_cb);
1196	if (ret) {
1197		dev_err(&hif_dev->udev->dev,
1198			"ath9k_htc: Async request for firmware %s failed\n",
1199			hif_dev->fw_name);
1200		return ret;
1201	}
1202
1203	dev_info(&hif_dev->udev->dev, "ath9k_htc: Firmware %s requested\n",
1204		 hif_dev->fw_name);
1205
1206	return ret;
1207}
1208
1209static void ath9k_hif_usb_firmware_cb(const struct firmware *fw, void *context)
1210{
1211	struct hif_device_usb *hif_dev = context;
1212	int ret;
1213
1214	if (!fw) {
1215		ret = ath9k_hif_request_firmware(hif_dev, false);
1216		if (!ret)
1217			return;
1218
1219		dev_err(&hif_dev->udev->dev,
1220			"ath9k_htc: Failed to get firmware %s\n",
1221			hif_dev->fw_name);
1222		goto err_fw;
1223	}
1224
1225	hif_dev->htc_handle = ath9k_htc_hw_alloc(hif_dev, &hif_usb,
1226						 &hif_dev->udev->dev);
1227	if (hif_dev->htc_handle == NULL)
1228		goto err_dev_alloc;
1229
1230	hif_dev->fw_data = fw->data;
1231	hif_dev->fw_size = fw->size;
1232
1233	/* Proceed with initialization */
1234
1235	ret = ath9k_hif_usb_dev_init(hif_dev);
1236	if (ret)
1237		goto err_dev_init;
1238
1239	ret = ath9k_htc_hw_init(hif_dev->htc_handle,
1240				&hif_dev->interface->dev,
1241				hif_dev->usb_device_id->idProduct,
1242				hif_dev->udev->product,
1243				hif_dev->usb_device_id->driver_info);
1244	if (ret) {
1245		ret = -EINVAL;
1246		goto err_htc_hw_init;
1247	}
1248
1249	release_firmware(fw);
1250	hif_dev->flags |= HIF_USB_READY;
1251	complete_all(&hif_dev->fw_done);
1252
1253	return;
1254
1255err_htc_hw_init:
1256	ath9k_hif_usb_dev_deinit(hif_dev);
1257err_dev_init:
1258	ath9k_htc_hw_free(hif_dev->htc_handle);
1259err_dev_alloc:
1260	release_firmware(fw);
1261err_fw:
1262	ath9k_hif_usb_firmware_fail(hif_dev);
1263}
1264
1265/*
1266 * An exact copy of the function from zd1211rw.
1267 */
1268static int send_eject_command(struct usb_interface *interface)
1269{
1270	struct usb_device *udev = interface_to_usbdev(interface);
1271	struct usb_host_interface *iface_desc = interface->cur_altsetting;
1272	struct usb_endpoint_descriptor *endpoint;
1273	unsigned char *cmd;
1274	u8 bulk_out_ep;
1275	int r;
1276
1277	if (iface_desc->desc.bNumEndpoints < 2)
1278		return -ENODEV;
1279
1280	/* Find bulk out endpoint */
1281	for (r = 1; r >= 0; r--) {
1282		endpoint = &iface_desc->endpoint[r].desc;
1283		if (usb_endpoint_dir_out(endpoint) &&
1284		    usb_endpoint_xfer_bulk(endpoint)) {
1285			bulk_out_ep = endpoint->bEndpointAddress;
1286			break;
1287		}
1288	}
1289	if (r == -1) {
1290		dev_err(&udev->dev,
1291			"ath9k_htc: Could not find bulk out endpoint\n");
1292		return -ENODEV;
1293	}
1294
1295	cmd = kzalloc(31, GFP_KERNEL);
1296	if (cmd == NULL)
1297		return -ENODEV;
1298
1299	/* USB bulk command block */
1300	cmd[0] = 0x55;	/* bulk command signature */
1301	cmd[1] = 0x53;	/* bulk command signature */
1302	cmd[2] = 0x42;	/* bulk command signature */
1303	cmd[3] = 0x43;	/* bulk command signature */
1304	cmd[14] = 6;	/* command length */
1305
1306	cmd[15] = 0x1b;	/* SCSI command: START STOP UNIT */
1307	cmd[19] = 0x2;	/* eject disc */
1308
1309	dev_info(&udev->dev, "Ejecting storage device...\n");
1310	r = usb_bulk_msg(udev, usb_sndbulkpipe(udev, bulk_out_ep),
1311		cmd, 31, NULL, 2 * USB_MSG_TIMEOUT);
1312	kfree(cmd);
1313	if (r)
1314		return r;
1315
1316	/* At this point, the device disconnects and reconnects with the real
1317	 * ID numbers. */
1318
1319	usb_set_intfdata(interface, NULL);
1320	return 0;
1321}
1322
1323static int ath9k_hif_usb_probe(struct usb_interface *interface,
1324			       const struct usb_device_id *id)
1325{
1326	struct usb_device *udev = interface_to_usbdev(interface);
1327	struct hif_device_usb *hif_dev;
1328	int ret = 0;
1329
1330	if (id->driver_info == STORAGE_DEVICE)
1331		return send_eject_command(interface);
1332
1333	hif_dev = kzalloc(sizeof(struct hif_device_usb), GFP_KERNEL);
1334	if (!hif_dev) {
1335		ret = -ENOMEM;
1336		goto err_alloc;
1337	}
1338
1339	usb_get_dev(udev);
1340
1341	hif_dev->udev = udev;
1342	hif_dev->interface = interface;
1343	hif_dev->usb_device_id = id;
1344#ifdef CONFIG_PM
1345	udev->reset_resume = 1;
1346#endif
1347	usb_set_intfdata(interface, hif_dev);
1348
1349	init_completion(&hif_dev->fw_done);
 
 
 
 
 
1350
1351	ret = ath9k_hif_request_firmware(hif_dev, true);
1352	if (ret)
1353		goto err_fw_req;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1354
1355	return ret;
1356
1357err_fw_req:
 
 
 
 
1358	usb_set_intfdata(interface, NULL);
1359	kfree(hif_dev);
1360	usb_put_dev(udev);
1361err_alloc:
1362	return ret;
1363}
1364
1365static void ath9k_hif_usb_reboot(struct usb_device *udev)
1366{
1367	u32 reboot_cmd = 0xffffffff;
1368	void *buf;
1369	int ret;
1370
1371	buf = kmemdup(&reboot_cmd, 4, GFP_KERNEL);
1372	if (!buf)
1373		return;
1374
1375	ret = usb_interrupt_msg(udev, usb_sndintpipe(udev, USB_REG_OUT_PIPE),
1376			   buf, 4, NULL, USB_MSG_TIMEOUT);
1377	if (ret)
1378		dev_err(&udev->dev, "ath9k_htc: USB reboot failed\n");
1379
1380	kfree(buf);
1381}
1382
1383static void ath9k_hif_usb_disconnect(struct usb_interface *interface)
1384{
1385	struct usb_device *udev = interface_to_usbdev(interface);
1386	struct hif_device_usb *hif_dev = usb_get_intfdata(interface);
1387	bool unplugged = (udev->state == USB_STATE_NOTATTACHED) ? true : false;
1388
1389	if (!hif_dev)
1390		return;
1391
1392	wait_for_completion(&hif_dev->fw_done);
1393
1394	if (hif_dev->flags & HIF_USB_READY) {
1395		ath9k_htc_hw_deinit(hif_dev->htc_handle, unplugged);
1396		ath9k_hif_usb_dev_deinit(hif_dev);
1397		ath9k_destroy_wmi(hif_dev->htc_handle->drv_priv);
1398		ath9k_htc_hw_free(hif_dev->htc_handle);
1399	}
1400
1401	usb_set_intfdata(interface, NULL);
1402
1403	/* If firmware was loaded we should drop it
1404	 * go back to first stage bootloader. */
1405	if (!unplugged && (hif_dev->flags & HIF_USB_READY))
1406		ath9k_hif_usb_reboot(udev);
1407
1408	kfree(hif_dev);
1409	dev_info(&udev->dev, "ath9k_htc: USB layer deinitialized\n");
1410	usb_put_dev(udev);
1411}
1412
1413#ifdef CONFIG_PM
1414static int ath9k_hif_usb_suspend(struct usb_interface *interface,
1415				 pm_message_t message)
1416{
1417	struct hif_device_usb *hif_dev = usb_get_intfdata(interface);
1418
1419	/*
1420	 * The device has to be set to FULLSLEEP mode in case no
1421	 * interface is up.
1422	 */
1423	if (!(hif_dev->flags & HIF_USB_START))
1424		ath9k_htc_suspend(hif_dev->htc_handle);
1425
1426	wait_for_completion(&hif_dev->fw_done);
1427
1428	if (hif_dev->flags & HIF_USB_READY)
1429		ath9k_hif_usb_dealloc_urbs(hif_dev);
1430
1431	return 0;
1432}
1433
1434static int ath9k_hif_usb_resume(struct usb_interface *interface)
1435{
1436	struct hif_device_usb *hif_dev = usb_get_intfdata(interface);
1437	struct htc_target *htc_handle = hif_dev->htc_handle;
1438	int ret;
1439	const struct firmware *fw;
1440
1441	ret = ath9k_hif_usb_alloc_urbs(hif_dev);
1442	if (ret)
1443		return ret;
1444
1445	if (hif_dev->flags & HIF_USB_READY) {
1446		/* request cached firmware during suspend/resume cycle */
1447		ret = request_firmware(&fw, hif_dev->fw_name,
1448				       &hif_dev->udev->dev);
1449		if (ret)
1450			goto fail_resume;
1451
1452		hif_dev->fw_data = fw->data;
1453		hif_dev->fw_size = fw->size;
1454		ret = ath9k_hif_usb_download_fw(hif_dev);
1455		release_firmware(fw);
1456		if (ret)
1457			goto fail_resume;
1458	} else {
1459		ath9k_hif_usb_dealloc_urbs(hif_dev);
1460		return -EIO;
1461	}
1462
1463	mdelay(100);
1464
1465	ret = ath9k_htc_resume(htc_handle);
1466
1467	if (ret)
1468		goto fail_resume;
1469
1470	return 0;
1471
1472fail_resume:
1473	ath9k_hif_usb_dealloc_urbs(hif_dev);
1474
1475	return ret;
1476}
1477#endif
1478
1479static struct usb_driver ath9k_hif_usb_driver = {
1480	.name = KBUILD_MODNAME,
1481	.probe = ath9k_hif_usb_probe,
1482	.disconnect = ath9k_hif_usb_disconnect,
1483#ifdef CONFIG_PM
1484	.suspend = ath9k_hif_usb_suspend,
1485	.resume = ath9k_hif_usb_resume,
1486	.reset_resume = ath9k_hif_usb_resume,
1487#endif
1488	.id_table = ath9k_hif_usb_ids,
1489	.soft_unbind = 1,
1490	.disable_hub_initiated_lpm = 1,
1491};
1492
1493int ath9k_hif_usb_init(void)
1494{
1495	return usb_register(&ath9k_hif_usb_driver);
1496}
1497
1498void ath9k_hif_usb_exit(void)
1499{
1500	usb_deregister(&ath9k_hif_usb_driver);
1501}