Linux Audio

Check our new training course

Yocto / OpenEmbedded training

Mar 24-27, 2025, special US time zones
Register
Loading...
v3.1
  1/*
  2 * Copyright (c) 2010-2011 Atheros Communications Inc.
  3 *
  4 * Permission to use, copy, modify, and/or distribute this software for any
  5 * purpose with or without fee is hereby granted, provided that the above
  6 * copyright notice and this permission notice appear in all copies.
  7 *
  8 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
  9 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 10 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 11 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 12 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 13 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 14 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 15 */
 16
 
 
 17#include "htc.h"
 18
 19static int htc_issue_send(struct htc_target *target, struct sk_buff* skb,
 20			  u16 len, u8 flags, u8 epid)
 21
 22{
 23	struct htc_frame_hdr *hdr;
 24	struct htc_endpoint *endpoint = &target->endpoint[epid];
 25	int status;
 26
 27	hdr = (struct htc_frame_hdr *)
 28		skb_push(skb, sizeof(struct htc_frame_hdr));
 29	hdr->endpoint_id = epid;
 30	hdr->flags = flags;
 31	hdr->payload_len = cpu_to_be16(len);
 
 32
 33	status = target->hif->send(target->hif_dev, endpoint->ul_pipeid, skb);
 34
 35	return status;
 36}
 37
 38static struct htc_endpoint *get_next_avail_ep(struct htc_endpoint *endpoint)
 39{
 40	enum htc_endpoint_id avail_epid;
 41
 42	for (avail_epid = (ENDPOINT_MAX - 1); avail_epid > ENDPOINT0; avail_epid--)
 43		if (endpoint[avail_epid].service_id == 0)
 44			return &endpoint[avail_epid];
 45	return NULL;
 46}
 47
 48static u8 service_to_ulpipe(u16 service_id)
 49{
 50	switch (service_id) {
 51	case WMI_CONTROL_SVC:
 52		return 4;
 53	case WMI_BEACON_SVC:
 54	case WMI_CAB_SVC:
 55	case WMI_UAPSD_SVC:
 56	case WMI_MGMT_SVC:
 57	case WMI_DATA_VO_SVC:
 58	case WMI_DATA_VI_SVC:
 59	case WMI_DATA_BE_SVC:
 60	case WMI_DATA_BK_SVC:
 61		return 1;
 62	default:
 63		return 0;
 64	}
 65}
 66
 67static u8 service_to_dlpipe(u16 service_id)
 68{
 69	switch (service_id) {
 70	case WMI_CONTROL_SVC:
 71		return 3;
 72	case WMI_BEACON_SVC:
 73	case WMI_CAB_SVC:
 74	case WMI_UAPSD_SVC:
 75	case WMI_MGMT_SVC:
 76	case WMI_DATA_VO_SVC:
 77	case WMI_DATA_VI_SVC:
 78	case WMI_DATA_BE_SVC:
 79	case WMI_DATA_BK_SVC:
 80		return 2;
 81	default:
 82		return 0;
 83	}
 84}
 85
 86static void htc_process_target_rdy(struct htc_target *target,
 87				   void *buf)
 88{
 89	struct htc_endpoint *endpoint;
 90	struct htc_ready_msg *htc_ready_msg = (struct htc_ready_msg *) buf;
 91
 92	target->credit_size = be16_to_cpu(htc_ready_msg->credit_size);
 93
 94	endpoint = &target->endpoint[ENDPOINT0];
 95	endpoint->service_id = HTC_CTRL_RSVD_SVC;
 96	endpoint->max_msglen = HTC_MAX_CONTROL_MESSAGE_LENGTH;
 97	atomic_inc(&target->tgt_ready);
 98	complete(&target->target_wait);
 99}
100
101static void htc_process_conn_rsp(struct htc_target *target,
102				 struct htc_frame_hdr *htc_hdr)
103{
104	struct htc_conn_svc_rspmsg *svc_rspmsg;
105	struct htc_endpoint *endpoint, *tmp_endpoint = NULL;
106	u16 service_id;
107	u16 max_msglen;
108	enum htc_endpoint_id epid, tepid;
109
110	svc_rspmsg = (struct htc_conn_svc_rspmsg *)
111		((void *) htc_hdr + sizeof(struct htc_frame_hdr));
112
113	if (svc_rspmsg->status == HTC_SERVICE_SUCCESS) {
114		epid = svc_rspmsg->endpoint_id;
 
 
 
115		service_id = be16_to_cpu(svc_rspmsg->service_id);
116		max_msglen = be16_to_cpu(svc_rspmsg->max_msg_len);
117		endpoint = &target->endpoint[epid];
118
119		for (tepid = (ENDPOINT_MAX - 1); tepid > ENDPOINT0; tepid--) {
120			tmp_endpoint = &target->endpoint[tepid];
121			if (tmp_endpoint->service_id == service_id) {
122				tmp_endpoint->service_id = 0;
123				break;
124			}
125		}
126
127		if (tepid == ENDPOINT0)
128			return;
129
130		endpoint->service_id = service_id;
131		endpoint->max_txqdepth = tmp_endpoint->max_txqdepth;
132		endpoint->ep_callbacks = tmp_endpoint->ep_callbacks;
133		endpoint->ul_pipeid = tmp_endpoint->ul_pipeid;
134		endpoint->dl_pipeid = tmp_endpoint->dl_pipeid;
135		endpoint->max_msglen = max_msglen;
136		target->conn_rsp_epid = epid;
137		complete(&target->cmd_wait);
138	} else {
139		target->conn_rsp_epid = ENDPOINT_UNUSED;
140	}
141}
142
143static int htc_config_pipe_credits(struct htc_target *target)
144{
145	struct sk_buff *skb;
146	struct htc_config_pipe_msg *cp_msg;
147	int ret, time_left;
 
148
149	skb = alloc_skb(50 + sizeof(struct htc_frame_hdr), GFP_ATOMIC);
150	if (!skb) {
151		dev_err(target->dev, "failed to allocate send buffer\n");
152		return -ENOMEM;
153	}
154	skb_reserve(skb, sizeof(struct htc_frame_hdr));
155
156	cp_msg = (struct htc_config_pipe_msg *)
157		skb_put(skb, sizeof(struct htc_config_pipe_msg));
158
159	cp_msg->message_id = cpu_to_be16(HTC_MSG_CONFIG_PIPE_ID);
160	cp_msg->pipe_id = USB_WLAN_TX_PIPE;
161	cp_msg->credits = target->credits;
162
163	target->htc_flags |= HTC_OP_CONFIG_PIPE_CREDITS;
164
165	ret = htc_issue_send(target, skb, skb->len, 0, ENDPOINT0);
166	if (ret)
167		goto err;
168
169	time_left = wait_for_completion_timeout(&target->cmd_wait, HZ);
170	if (!time_left) {
171		dev_err(target->dev, "HTC credit config timeout\n");
172		return -ETIMEDOUT;
173	}
174
175	return 0;
176err:
177	kfree_skb(skb);
178	return -EINVAL;
179}
180
181static int htc_setup_complete(struct htc_target *target)
182{
183	struct sk_buff *skb;
184	struct htc_comp_msg *comp_msg;
185	int ret = 0, time_left;
 
186
187	skb = alloc_skb(50 + sizeof(struct htc_frame_hdr), GFP_ATOMIC);
188	if (!skb) {
189		dev_err(target->dev, "failed to allocate send buffer\n");
190		return -ENOMEM;
191	}
192	skb_reserve(skb, sizeof(struct htc_frame_hdr));
193
194	comp_msg = (struct htc_comp_msg *)
195		skb_put(skb, sizeof(struct htc_comp_msg));
196	comp_msg->msg_id = cpu_to_be16(HTC_MSG_SETUP_COMPLETE_ID);
197
198	target->htc_flags |= HTC_OP_START_WAIT;
199
200	ret = htc_issue_send(target, skb, skb->len, 0, ENDPOINT0);
201	if (ret)
202		goto err;
203
204	time_left = wait_for_completion_timeout(&target->cmd_wait, HZ);
205	if (!time_left) {
206		dev_err(target->dev, "HTC start timeout\n");
207		return -ETIMEDOUT;
208	}
209
210	return 0;
211
212err:
213	kfree_skb(skb);
214	return -EINVAL;
215}
216
217/* HTC APIs */
218
219int htc_init(struct htc_target *target)
220{
221	int ret;
222
223	ret = htc_config_pipe_credits(target);
224	if (ret)
225		return ret;
226
227	return htc_setup_complete(target);
228}
229
230int htc_connect_service(struct htc_target *target,
231		     struct htc_service_connreq *service_connreq,
232		     enum htc_endpoint_id *conn_rsp_epid)
233{
234	struct sk_buff *skb;
235	struct htc_endpoint *endpoint;
236	struct htc_conn_svc_msg *conn_msg;
237	int ret, time_left;
 
238
239	/* Find an available endpoint */
240	endpoint = get_next_avail_ep(target->endpoint);
241	if (!endpoint) {
242		dev_err(target->dev, "Endpoint is not available for"
243			"service %d\n", service_connreq->service_id);
244		return -EINVAL;
245	}
246
247	endpoint->service_id = service_connreq->service_id;
248	endpoint->max_txqdepth = service_connreq->max_send_qdepth;
249	endpoint->ul_pipeid = service_to_ulpipe(service_connreq->service_id);
250	endpoint->dl_pipeid = service_to_dlpipe(service_connreq->service_id);
251	endpoint->ep_callbacks = service_connreq->ep_callbacks;
252
253	skb = alloc_skb(sizeof(struct htc_conn_svc_msg) +
254			    sizeof(struct htc_frame_hdr), GFP_ATOMIC);
255	if (!skb) {
256		dev_err(target->dev, "Failed to allocate buf to send"
257			"service connect req\n");
258		return -ENOMEM;
259	}
260
261	skb_reserve(skb, sizeof(struct htc_frame_hdr));
262
263	conn_msg = (struct htc_conn_svc_msg *)
264			skb_put(skb, sizeof(struct htc_conn_svc_msg));
265	conn_msg->service_id = cpu_to_be16(service_connreq->service_id);
266	conn_msg->msg_id = cpu_to_be16(HTC_MSG_CONNECT_SERVICE_ID);
267	conn_msg->con_flags = cpu_to_be16(service_connreq->con_flags);
268	conn_msg->dl_pipeid = endpoint->dl_pipeid;
269	conn_msg->ul_pipeid = endpoint->ul_pipeid;
270
 
 
 
 
271	ret = htc_issue_send(target, skb, skb->len, 0, ENDPOINT0);
272	if (ret)
273		goto err;
274
275	time_left = wait_for_completion_timeout(&target->cmd_wait, HZ);
276	if (!time_left) {
277		dev_err(target->dev, "Service connection timeout for: %d\n",
278			service_connreq->service_id);
279		return -ETIMEDOUT;
280	}
281
282	*conn_rsp_epid = target->conn_rsp_epid;
283	return 0;
284err:
285	kfree_skb(skb);
286	return ret;
287}
288
289int htc_send(struct htc_target *target, struct sk_buff *skb)
290{
291	struct ath9k_htc_tx_ctl *tx_ctl;
292
293	tx_ctl = HTC_SKB_CB(skb);
294	return htc_issue_send(target, skb, skb->len, 0, tx_ctl->epid);
295}
296
297int htc_send_epid(struct htc_target *target, struct sk_buff *skb,
298		  enum htc_endpoint_id epid)
299{
300	return htc_issue_send(target, skb, skb->len, 0, epid);
301}
302
303void htc_stop(struct htc_target *target)
304{
305	target->hif->stop(target->hif_dev);
306}
307
308void htc_start(struct htc_target *target)
309{
310	target->hif->start(target->hif_dev);
311}
312
313void htc_sta_drain(struct htc_target *target, u8 idx)
314{
315	target->hif->sta_drain(target->hif_dev, idx);
316}
317
318void ath9k_htc_txcompletion_cb(struct htc_target *htc_handle,
319			       struct sk_buff *skb, bool txok)
320{
321	struct htc_endpoint *endpoint;
322	struct htc_frame_hdr *htc_hdr = NULL;
323
324	if (htc_handle->htc_flags & HTC_OP_CONFIG_PIPE_CREDITS) {
325		complete(&htc_handle->cmd_wait);
326		htc_handle->htc_flags &= ~HTC_OP_CONFIG_PIPE_CREDITS;
327		goto ret;
328	}
329
330	if (htc_handle->htc_flags & HTC_OP_START_WAIT) {
331		complete(&htc_handle->cmd_wait);
332		htc_handle->htc_flags &= ~HTC_OP_START_WAIT;
333		goto ret;
334	}
335
336	if (skb) {
337		htc_hdr = (struct htc_frame_hdr *) skb->data;
 
 
338		endpoint = &htc_handle->endpoint[htc_hdr->endpoint_id];
339		skb_pull(skb, sizeof(struct htc_frame_hdr));
340
341		if (endpoint->ep_callbacks.tx) {
342			endpoint->ep_callbacks.tx(endpoint->ep_callbacks.priv,
343						  skb, htc_hdr->endpoint_id,
344						  txok);
 
 
345		}
346	}
347
348	return;
349ret:
350	/* HTC-generated packets are freed here. */
351	if (htc_hdr && htc_hdr->endpoint_id != ENDPOINT0)
352		dev_kfree_skb_any(skb);
353	else
354		kfree_skb(skb);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
355}
356
357/*
358 * HTC Messages are handled directly here and the obtained SKB
359 * is freed.
360 *
361 * Service messages (Data, WMI) passed to the corresponding
362 * endpoint RX handlers, which have to free the SKB.
363 */
364void ath9k_htc_rx_msg(struct htc_target *htc_handle,
365		      struct sk_buff *skb, u32 len, u8 pipe_id)
366{
367	struct htc_frame_hdr *htc_hdr;
368	enum htc_endpoint_id epid;
369	struct htc_endpoint *endpoint;
370	__be16 *msg_id;
371
372	if (!htc_handle || !skb)
373		return;
374
 
 
 
 
 
 
 
 
 
375	htc_hdr = (struct htc_frame_hdr *) skb->data;
376	epid = htc_hdr->endpoint_id;
377
378	if (epid >= ENDPOINT_MAX) {
 
 
 
 
 
 
 
379		if (pipe_id != USB_REG_IN_PIPE)
380			dev_kfree_skb_any(skb);
381		else
382			kfree_skb(skb);
383		return;
384	}
385
386	if (epid == ENDPOINT0) {
387
388		/* Handle trailer */
389		if (htc_hdr->flags & HTC_FLAGS_RECV_TRAILER) {
390			if (be32_to_cpu(*(__be32 *) skb->data) == 0x00C60000)
391				/* Move past the Watchdog pattern */
392				htc_hdr = (struct htc_frame_hdr *)(skb->data + 4);
 
 
393		}
394
395		/* Get the message ID */
 
 
396		msg_id = (__be16 *) ((void *) htc_hdr +
397				     sizeof(struct htc_frame_hdr));
398
399		/* Now process HTC messages */
400		switch (be16_to_cpu(*msg_id)) {
401		case HTC_MSG_READY_ID:
 
 
402			htc_process_target_rdy(htc_handle, htc_hdr);
403			break;
404		case HTC_MSG_CONNECT_SERVICE_RESPONSE_ID:
 
 
 
405			htc_process_conn_rsp(htc_handle, htc_hdr);
406			break;
407		default:
408			break;
409		}
410
411		kfree_skb(skb);
412
413	} else {
414		if (htc_hdr->flags & HTC_FLAGS_RECV_TRAILER)
415			skb_trim(skb, len - htc_hdr->control[0]);
416
417		skb_pull(skb, sizeof(struct htc_frame_hdr));
418
419		endpoint = &htc_handle->endpoint[epid];
420		if (endpoint->ep_callbacks.rx)
421			endpoint->ep_callbacks.rx(endpoint->ep_callbacks.priv,
422						  skb, epid);
423	}
424}
425
426struct htc_target *ath9k_htc_hw_alloc(void *hif_handle,
427				      struct ath9k_htc_hif *hif,
428				      struct device *dev)
429{
430	struct htc_endpoint *endpoint;
431	struct htc_target *target;
432
433	target = kzalloc(sizeof(struct htc_target), GFP_KERNEL);
434	if (!target) {
435		printk(KERN_ERR "Unable to allocate memory for"
436			"target device\n");
437		return NULL;
438	}
439
440	init_completion(&target->target_wait);
441	init_completion(&target->cmd_wait);
442
443	target->hif = hif;
444	target->hif_dev = hif_handle;
445	target->dev = dev;
446
447	/* Assign control endpoint pipe IDs */
448	endpoint = &target->endpoint[ENDPOINT0];
449	endpoint->ul_pipeid = hif->control_ul_pipe;
450	endpoint->dl_pipeid = hif->control_dl_pipe;
451
452	atomic_set(&target->tgt_ready, 0);
453
454	return target;
455}
456
457void ath9k_htc_hw_free(struct htc_target *htc)
458{
459	kfree(htc);
460}
461
462int ath9k_htc_hw_init(struct htc_target *target,
463		      struct device *dev, u16 devid,
464		      char *product, u32 drv_info)
465{
466	if (ath9k_htc_probe_device(target, dev, devid, product, drv_info)) {
467		printk(KERN_ERR "Failed to initialize the device\n");
468		return -ENODEV;
469	}
470
471	return 0;
472}
473
474void ath9k_htc_hw_deinit(struct htc_target *target, bool hot_unplug)
475{
476	if (target)
477		ath9k_htc_disconnect_device(target, hot_unplug);
478}
v6.2
  1/*
  2 * Copyright (c) 2010-2011 Atheros Communications Inc.
  3 *
  4 * Permission to use, copy, modify, and/or distribute this software for any
  5 * purpose with or without fee is hereby granted, provided that the above
  6 * copyright notice and this permission notice appear in all copies.
  7 *
  8 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
  9 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 10 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 11 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 12 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 13 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 14 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 15 */
 16
 17#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
 18
 19#include "htc.h"
 20
 21static int htc_issue_send(struct htc_target *target, struct sk_buff* skb,
 22			  u16 len, u8 flags, u8 epid)
 23
 24{
 25	struct htc_frame_hdr *hdr;
 26	struct htc_endpoint *endpoint = &target->endpoint[epid];
 27	int status;
 28
 29	hdr = skb_push(skb, sizeof(struct htc_frame_hdr));
 
 30	hdr->endpoint_id = epid;
 31	hdr->flags = flags;
 32	hdr->payload_len = cpu_to_be16(len);
 33	memset(hdr->control, 0, sizeof(hdr->control));
 34
 35	status = target->hif->send(target->hif_dev, endpoint->ul_pipeid, skb);
 36
 37	return status;
 38}
 39
 40static struct htc_endpoint *get_next_avail_ep(struct htc_endpoint *endpoint)
 41{
 42	enum htc_endpoint_id avail_epid;
 43
 44	for (avail_epid = (ENDPOINT_MAX - 1); avail_epid > ENDPOINT0; avail_epid--)
 45		if (endpoint[avail_epid].service_id == 0)
 46			return &endpoint[avail_epid];
 47	return NULL;
 48}
 49
 50static u8 service_to_ulpipe(u16 service_id)
 51{
 52	switch (service_id) {
 53	case WMI_CONTROL_SVC:
 54		return 4;
 55	case WMI_BEACON_SVC:
 56	case WMI_CAB_SVC:
 57	case WMI_UAPSD_SVC:
 58	case WMI_MGMT_SVC:
 59	case WMI_DATA_VO_SVC:
 60	case WMI_DATA_VI_SVC:
 61	case WMI_DATA_BE_SVC:
 62	case WMI_DATA_BK_SVC:
 63		return 1;
 64	default:
 65		return 0;
 66	}
 67}
 68
 69static u8 service_to_dlpipe(u16 service_id)
 70{
 71	switch (service_id) {
 72	case WMI_CONTROL_SVC:
 73		return 3;
 74	case WMI_BEACON_SVC:
 75	case WMI_CAB_SVC:
 76	case WMI_UAPSD_SVC:
 77	case WMI_MGMT_SVC:
 78	case WMI_DATA_VO_SVC:
 79	case WMI_DATA_VI_SVC:
 80	case WMI_DATA_BE_SVC:
 81	case WMI_DATA_BK_SVC:
 82		return 2;
 83	default:
 84		return 0;
 85	}
 86}
 87
 88static void htc_process_target_rdy(struct htc_target *target,
 89				   void *buf)
 90{
 91	struct htc_endpoint *endpoint;
 92	struct htc_ready_msg *htc_ready_msg = (struct htc_ready_msg *) buf;
 93
 94	target->credit_size = be16_to_cpu(htc_ready_msg->credit_size);
 95
 96	endpoint = &target->endpoint[ENDPOINT0];
 97	endpoint->service_id = HTC_CTRL_RSVD_SVC;
 98	endpoint->max_msglen = HTC_MAX_CONTROL_MESSAGE_LENGTH;
 99	atomic_inc(&target->tgt_ready);
100	complete(&target->target_wait);
101}
102
103static void htc_process_conn_rsp(struct htc_target *target,
104				 struct htc_frame_hdr *htc_hdr)
105{
106	struct htc_conn_svc_rspmsg *svc_rspmsg;
107	struct htc_endpoint *endpoint, *tmp_endpoint = NULL;
108	u16 service_id;
109	u16 max_msglen;
110	enum htc_endpoint_id epid, tepid;
111
112	svc_rspmsg = (struct htc_conn_svc_rspmsg *)
113		((void *) htc_hdr + sizeof(struct htc_frame_hdr));
114
115	if (svc_rspmsg->status == HTC_SERVICE_SUCCESS) {
116		epid = svc_rspmsg->endpoint_id;
117		if (epid < 0 || epid >= ENDPOINT_MAX)
118			return;
119
120		service_id = be16_to_cpu(svc_rspmsg->service_id);
121		max_msglen = be16_to_cpu(svc_rspmsg->max_msg_len);
122		endpoint = &target->endpoint[epid];
123
124		for (tepid = (ENDPOINT_MAX - 1); tepid > ENDPOINT0; tepid--) {
125			tmp_endpoint = &target->endpoint[tepid];
126			if (tmp_endpoint->service_id == service_id) {
127				tmp_endpoint->service_id = 0;
128				break;
129			}
130		}
131
132		if (tepid == ENDPOINT0)
133			return;
134
135		endpoint->service_id = service_id;
136		endpoint->max_txqdepth = tmp_endpoint->max_txqdepth;
137		endpoint->ep_callbacks = tmp_endpoint->ep_callbacks;
138		endpoint->ul_pipeid = tmp_endpoint->ul_pipeid;
139		endpoint->dl_pipeid = tmp_endpoint->dl_pipeid;
140		endpoint->max_msglen = max_msglen;
141		target->conn_rsp_epid = epid;
142		complete(&target->cmd_wait);
143	} else {
144		target->conn_rsp_epid = ENDPOINT_UNUSED;
145	}
146}
147
148static int htc_config_pipe_credits(struct htc_target *target)
149{
150	struct sk_buff *skb;
151	struct htc_config_pipe_msg *cp_msg;
152	int ret;
153	unsigned long time_left;
154
155	skb = alloc_skb(50 + sizeof(struct htc_frame_hdr), GFP_ATOMIC);
156	if (!skb) {
157		dev_err(target->dev, "failed to allocate send buffer\n");
158		return -ENOMEM;
159	}
160	skb_reserve(skb, sizeof(struct htc_frame_hdr));
161
162	cp_msg = skb_put(skb, sizeof(struct htc_config_pipe_msg));
 
163
164	cp_msg->message_id = cpu_to_be16(HTC_MSG_CONFIG_PIPE_ID);
165	cp_msg->pipe_id = USB_WLAN_TX_PIPE;
166	cp_msg->credits = target->credits;
167
168	target->htc_flags |= HTC_OP_CONFIG_PIPE_CREDITS;
169
170	ret = htc_issue_send(target, skb, skb->len, 0, ENDPOINT0);
171	if (ret)
172		goto err;
173
174	time_left = wait_for_completion_timeout(&target->cmd_wait, HZ);
175	if (!time_left) {
176		dev_err(target->dev, "HTC credit config timeout\n");
177		return -ETIMEDOUT;
178	}
179
180	return 0;
181err:
182	kfree_skb(skb);
183	return -EINVAL;
184}
185
186static int htc_setup_complete(struct htc_target *target)
187{
188	struct sk_buff *skb;
189	struct htc_comp_msg *comp_msg;
190	int ret = 0;
191	unsigned long time_left;
192
193	skb = alloc_skb(50 + sizeof(struct htc_frame_hdr), GFP_ATOMIC);
194	if (!skb) {
195		dev_err(target->dev, "failed to allocate send buffer\n");
196		return -ENOMEM;
197	}
198	skb_reserve(skb, sizeof(struct htc_frame_hdr));
199
200	comp_msg = skb_put(skb, sizeof(struct htc_comp_msg));
 
201	comp_msg->msg_id = cpu_to_be16(HTC_MSG_SETUP_COMPLETE_ID);
202
203	target->htc_flags |= HTC_OP_START_WAIT;
204
205	ret = htc_issue_send(target, skb, skb->len, 0, ENDPOINT0);
206	if (ret)
207		goto err;
208
209	time_left = wait_for_completion_timeout(&target->cmd_wait, HZ);
210	if (!time_left) {
211		dev_err(target->dev, "HTC start timeout\n");
212		return -ETIMEDOUT;
213	}
214
215	return 0;
216
217err:
218	kfree_skb(skb);
219	return -EINVAL;
220}
221
222/* HTC APIs */
223
224int htc_init(struct htc_target *target)
225{
226	int ret;
227
228	ret = htc_config_pipe_credits(target);
229	if (ret)
230		return ret;
231
232	return htc_setup_complete(target);
233}
234
235int htc_connect_service(struct htc_target *target,
236		     struct htc_service_connreq *service_connreq,
237		     enum htc_endpoint_id *conn_rsp_epid)
238{
239	struct sk_buff *skb;
240	struct htc_endpoint *endpoint;
241	struct htc_conn_svc_msg *conn_msg;
242	int ret;
243	unsigned long time_left;
244
245	/* Find an available endpoint */
246	endpoint = get_next_avail_ep(target->endpoint);
247	if (!endpoint) {
248		dev_err(target->dev, "Endpoint is not available for service %d\n",
249			service_connreq->service_id);
250		return -EINVAL;
251	}
252
253	endpoint->service_id = service_connreq->service_id;
254	endpoint->max_txqdepth = service_connreq->max_send_qdepth;
255	endpoint->ul_pipeid = service_to_ulpipe(service_connreq->service_id);
256	endpoint->dl_pipeid = service_to_dlpipe(service_connreq->service_id);
257	endpoint->ep_callbacks = service_connreq->ep_callbacks;
258
259	skb = alloc_skb(sizeof(struct htc_conn_svc_msg) +
260			    sizeof(struct htc_frame_hdr), GFP_ATOMIC);
261	if (!skb) {
262		dev_err(target->dev, "Failed to allocate buf to send"
263			"service connect req\n");
264		return -ENOMEM;
265	}
266
267	skb_reserve(skb, sizeof(struct htc_frame_hdr));
268
269	conn_msg = skb_put(skb, sizeof(struct htc_conn_svc_msg));
 
270	conn_msg->service_id = cpu_to_be16(service_connreq->service_id);
271	conn_msg->msg_id = cpu_to_be16(HTC_MSG_CONNECT_SERVICE_ID);
272	conn_msg->con_flags = cpu_to_be16(service_connreq->con_flags);
273	conn_msg->dl_pipeid = endpoint->dl_pipeid;
274	conn_msg->ul_pipeid = endpoint->ul_pipeid;
275
276	/* To prevent infoleak */
277	conn_msg->svc_meta_len = 0;
278	conn_msg->pad = 0;
279
280	ret = htc_issue_send(target, skb, skb->len, 0, ENDPOINT0);
281	if (ret)
282		goto err;
283
284	time_left = wait_for_completion_timeout(&target->cmd_wait, HZ);
285	if (!time_left) {
286		dev_err(target->dev, "Service connection timeout for: %d\n",
287			service_connreq->service_id);
288		return -ETIMEDOUT;
289	}
290
291	*conn_rsp_epid = target->conn_rsp_epid;
292	return 0;
293err:
294	kfree_skb(skb);
295	return ret;
296}
297
298int htc_send(struct htc_target *target, struct sk_buff *skb)
299{
300	struct ath9k_htc_tx_ctl *tx_ctl;
301
302	tx_ctl = HTC_SKB_CB(skb);
303	return htc_issue_send(target, skb, skb->len, 0, tx_ctl->epid);
304}
305
306int htc_send_epid(struct htc_target *target, struct sk_buff *skb,
307		  enum htc_endpoint_id epid)
308{
309	return htc_issue_send(target, skb, skb->len, 0, epid);
310}
311
312void htc_stop(struct htc_target *target)
313{
314	target->hif->stop(target->hif_dev);
315}
316
317void htc_start(struct htc_target *target)
318{
319	target->hif->start(target->hif_dev);
320}
321
322void htc_sta_drain(struct htc_target *target, u8 idx)
323{
324	target->hif->sta_drain(target->hif_dev, idx);
325}
326
327void ath9k_htc_txcompletion_cb(struct htc_target *htc_handle,
328			       struct sk_buff *skb, bool txok)
329{
330	struct htc_endpoint *endpoint;
331	struct htc_frame_hdr *htc_hdr = NULL;
332
333	if (htc_handle->htc_flags & HTC_OP_CONFIG_PIPE_CREDITS) {
334		complete(&htc_handle->cmd_wait);
335		htc_handle->htc_flags &= ~HTC_OP_CONFIG_PIPE_CREDITS;
336		goto ret;
337	}
338
339	if (htc_handle->htc_flags & HTC_OP_START_WAIT) {
340		complete(&htc_handle->cmd_wait);
341		htc_handle->htc_flags &= ~HTC_OP_START_WAIT;
342		goto ret;
343	}
344
345	if (skb) {
346		htc_hdr = (struct htc_frame_hdr *) skb->data;
347		if (htc_hdr->endpoint_id >= ARRAY_SIZE(htc_handle->endpoint))
348			goto ret;
349		endpoint = &htc_handle->endpoint[htc_hdr->endpoint_id];
350		skb_pull(skb, sizeof(struct htc_frame_hdr));
351
352		if (endpoint->ep_callbacks.tx) {
353			endpoint->ep_callbacks.tx(endpoint->ep_callbacks.priv,
354						  skb, htc_hdr->endpoint_id,
355						  txok);
356		} else {
357			kfree_skb(skb);
358		}
359	}
360
361	return;
362ret:
363	kfree_skb(skb);
364}
365
366static void ath9k_htc_fw_panic_report(struct htc_target *htc_handle,
367				      struct sk_buff *skb, u32 len)
368{
369	uint32_t *pattern = (uint32_t *)skb->data;
370
371	if (*pattern == 0x33221199 && len >= sizeof(struct htc_panic_bad_vaddr)) {
372		struct htc_panic_bad_vaddr *htc_panic;
373		htc_panic = (struct htc_panic_bad_vaddr *) skb->data;
374		dev_err(htc_handle->dev, "ath: firmware panic! "
375			"exccause: 0x%08x; pc: 0x%08x; badvaddr: 0x%08x.\n",
376			htc_panic->exccause, htc_panic->pc,
377			htc_panic->badvaddr);
378		return;
379	}
380	if (*pattern == 0x33221299) {
381		struct htc_panic_bad_epid *htc_panic;
382		htc_panic = (struct htc_panic_bad_epid *) skb->data;
383		dev_err(htc_handle->dev, "ath: firmware panic! "
384			"bad epid: 0x%08x\n", htc_panic->epid);
385		return;
386	}
387	dev_err(htc_handle->dev, "ath: unknown panic pattern!\n");
388}
389
390/*
391 * HTC Messages are handled directly here and the obtained SKB
392 * is freed.
393 *
394 * Service messages (Data, WMI) passed to the corresponding
395 * endpoint RX handlers, which have to free the SKB.
396 */
397void ath9k_htc_rx_msg(struct htc_target *htc_handle,
398		      struct sk_buff *skb, u32 len, u8 pipe_id)
399{
400	struct htc_frame_hdr *htc_hdr;
401	enum htc_endpoint_id epid;
402	struct htc_endpoint *endpoint;
403	__be16 *msg_id;
404
405	if (!htc_handle || !skb)
406		return;
407
408	/* A valid message requires len >= 8.
409	 *
410	 *   sizeof(struct htc_frame_hdr) == 8
411	 *   sizeof(struct htc_ready_msg) == 8
412	 *   sizeof(struct htc_panic_bad_vaddr) == 16
413	 *   sizeof(struct htc_panic_bad_epid) == 8
414	 */
415	if (unlikely(len < sizeof(struct htc_frame_hdr)))
416		goto invalid;
417	htc_hdr = (struct htc_frame_hdr *) skb->data;
418	epid = htc_hdr->endpoint_id;
419
420	if (epid == 0x99) {
421		ath9k_htc_fw_panic_report(htc_handle, skb, len);
422		kfree_skb(skb);
423		return;
424	}
425
426	if (epid < 0 || epid >= ENDPOINT_MAX) {
427invalid:
428		if (pipe_id != USB_REG_IN_PIPE)
429			dev_kfree_skb_any(skb);
430		else
431			kfree_skb(skb);
432		return;
433	}
434
435	if (epid == ENDPOINT0) {
436
437		/* Handle trailer */
438		if (htc_hdr->flags & HTC_FLAGS_RECV_TRAILER) {
439			if (be32_to_cpu(*(__be32 *) skb->data) == 0x00C60000) {
440				/* Move past the Watchdog pattern */
441				htc_hdr = (struct htc_frame_hdr *)(skb->data + 4);
442				len -= 4;
443			}
444		}
445
446		/* Get the message ID */
447		if (unlikely(len < sizeof(struct htc_frame_hdr) + sizeof(__be16)))
448			goto invalid;
449		msg_id = (__be16 *) ((void *) htc_hdr +
450				     sizeof(struct htc_frame_hdr));
451
452		/* Now process HTC messages */
453		switch (be16_to_cpu(*msg_id)) {
454		case HTC_MSG_READY_ID:
455			if (unlikely(len < sizeof(struct htc_ready_msg)))
456				goto invalid;
457			htc_process_target_rdy(htc_handle, htc_hdr);
458			break;
459		case HTC_MSG_CONNECT_SERVICE_RESPONSE_ID:
460			if (unlikely(len < sizeof(struct htc_frame_hdr) +
461				     sizeof(struct htc_conn_svc_rspmsg)))
462				goto invalid;
463			htc_process_conn_rsp(htc_handle, htc_hdr);
464			break;
465		default:
466			break;
467		}
468
469		kfree_skb(skb);
470
471	} else {
472		if (htc_hdr->flags & HTC_FLAGS_RECV_TRAILER)
473			skb_trim(skb, len - htc_hdr->control[0]);
474
475		skb_pull(skb, sizeof(struct htc_frame_hdr));
476
477		endpoint = &htc_handle->endpoint[epid];
478		if (endpoint->ep_callbacks.rx)
479			endpoint->ep_callbacks.rx(endpoint->ep_callbacks.priv,
480						  skb, epid);
481	}
482}
483
484struct htc_target *ath9k_htc_hw_alloc(void *hif_handle,
485				      struct ath9k_htc_hif *hif,
486				      struct device *dev)
487{
488	struct htc_endpoint *endpoint;
489	struct htc_target *target;
490
491	target = kzalloc(sizeof(struct htc_target), GFP_KERNEL);
492	if (!target)
 
 
493		return NULL;
 
494
495	init_completion(&target->target_wait);
496	init_completion(&target->cmd_wait);
497
498	target->hif = hif;
499	target->hif_dev = hif_handle;
500	target->dev = dev;
501
502	/* Assign control endpoint pipe IDs */
503	endpoint = &target->endpoint[ENDPOINT0];
504	endpoint->ul_pipeid = hif->control_ul_pipe;
505	endpoint->dl_pipeid = hif->control_dl_pipe;
506
507	atomic_set(&target->tgt_ready, 0);
508
509	return target;
510}
511
512void ath9k_htc_hw_free(struct htc_target *htc)
513{
514	kfree(htc);
515}
516
517int ath9k_htc_hw_init(struct htc_target *target,
518		      struct device *dev, u16 devid,
519		      char *product, u32 drv_info)
520{
521	if (ath9k_htc_probe_device(target, dev, devid, product, drv_info)) {
522		pr_err("Failed to initialize the device\n");
523		return -ENODEV;
524	}
525
526	return 0;
527}
528
529void ath9k_htc_hw_deinit(struct htc_target *target, bool hot_unplug)
530{
531	if (target)
532		ath9k_htc_disconnect_device(target, hot_unplug);
533}