Loading...
Note: File does not exist in v6.8.
1/*
2 * Marvell Wireless LAN device driver: commands and events
3 *
4 * Copyright (C) 2011, Marvell International Ltd.
5 *
6 * This software file (the "File") is distributed by Marvell International
7 * Ltd. under the terms of the GNU General Public License Version 2, June 1991
8 * (the "License"). You may use, redistribute and/or modify this File in
9 * accordance with the terms and conditions of the License, a copy of which
10 * is available by writing to the Free Software Foundation, Inc.,
11 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
12 * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
13 *
14 * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
15 * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
16 * ARE EXPRESSLY DISCLAIMED. The License provides additional details about
17 * this warranty disclaimer.
18 */
19
20#include "decl.h"
21#include "ioctl.h"
22#include "util.h"
23#include "fw.h"
24#include "main.h"
25#include "wmm.h"
26#include "11n.h"
27#include "11ac.h"
28
29/*
30 * This function initializes a command node.
31 *
32 * The actual allocation of the node is not done by this function. It only
33 * initiates a node by filling it with default parameters. Similarly,
34 * allocation of the different buffers used (IOCTL buffer, data buffer) are
35 * not done by this function either.
36 */
37static void
38mwifiex_init_cmd_node(struct mwifiex_private *priv,
39 struct cmd_ctrl_node *cmd_node,
40 u32 cmd_oid, void *data_buf, bool sync)
41{
42 cmd_node->priv = priv;
43 cmd_node->cmd_oid = cmd_oid;
44 if (sync) {
45 cmd_node->wait_q_enabled = true;
46 cmd_node->cmd_wait_q_woken = false;
47 cmd_node->condition = &cmd_node->cmd_wait_q_woken;
48 }
49 cmd_node->data_buf = data_buf;
50 cmd_node->cmd_skb = cmd_node->skb;
51}
52
53/*
54 * This function returns a command node from the free queue depending upon
55 * availability.
56 */
57static struct cmd_ctrl_node *
58mwifiex_get_cmd_node(struct mwifiex_adapter *adapter)
59{
60 struct cmd_ctrl_node *cmd_node;
61 unsigned long flags;
62
63 spin_lock_irqsave(&adapter->cmd_free_q_lock, flags);
64 if (list_empty(&adapter->cmd_free_q)) {
65 dev_err(adapter->dev, "GET_CMD_NODE: cmd node not available\n");
66 spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
67 return NULL;
68 }
69 cmd_node = list_first_entry(&adapter->cmd_free_q,
70 struct cmd_ctrl_node, list);
71 list_del(&cmd_node->list);
72 spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
73
74 return cmd_node;
75}
76
77/*
78 * This function cleans up a command node.
79 *
80 * The function resets the fields including the buffer pointers.
81 * This function does not try to free the buffers. They must be
82 * freed before calling this function.
83 *
84 * This function will however call the receive completion callback
85 * in case a response buffer is still available before resetting
86 * the pointer.
87 */
88static void
89mwifiex_clean_cmd_node(struct mwifiex_adapter *adapter,
90 struct cmd_ctrl_node *cmd_node)
91{
92 cmd_node->cmd_oid = 0;
93 cmd_node->cmd_flag = 0;
94 cmd_node->data_buf = NULL;
95 cmd_node->wait_q_enabled = false;
96
97 if (cmd_node->cmd_skb)
98 skb_trim(cmd_node->cmd_skb, 0);
99
100 if (cmd_node->resp_skb) {
101 adapter->if_ops.cmdrsp_complete(adapter, cmd_node->resp_skb);
102 cmd_node->resp_skb = NULL;
103 }
104}
105
106/*
107 * This function sends a host command to the firmware.
108 *
109 * The function copies the host command into the driver command
110 * buffer, which will be transferred to the firmware later by the
111 * main thread.
112 */
113static int mwifiex_cmd_host_cmd(struct mwifiex_private *priv,
114 struct host_cmd_ds_command *cmd,
115 struct mwifiex_ds_misc_cmd *pcmd_ptr)
116{
117 /* Copy the HOST command to command buffer */
118 memcpy(cmd, pcmd_ptr->cmd, pcmd_ptr->len);
119 dev_dbg(priv->adapter->dev, "cmd: host cmd size = %d\n", pcmd_ptr->len);
120 return 0;
121}
122
123/*
124 * This function downloads a command to the firmware.
125 *
126 * The function performs sanity tests, sets the command sequence
127 * number and size, converts the header fields to CPU format before
128 * sending. Afterwards, it logs the command ID and action for debugging
129 * and sets up the command timeout timer.
130 */
131static int mwifiex_dnld_cmd_to_fw(struct mwifiex_private *priv,
132 struct cmd_ctrl_node *cmd_node)
133{
134
135 struct mwifiex_adapter *adapter = priv->adapter;
136 int ret;
137 struct host_cmd_ds_command *host_cmd;
138 uint16_t cmd_code;
139 uint16_t cmd_size;
140 struct timeval tstamp;
141 unsigned long flags;
142 __le32 tmp;
143
144 if (!adapter || !cmd_node)
145 return -1;
146
147 host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
148
149 /* Sanity test */
150 if (host_cmd == NULL || host_cmd->size == 0) {
151 dev_err(adapter->dev, "DNLD_CMD: host_cmd is null"
152 " or cmd size is 0, not sending\n");
153 if (cmd_node->wait_q_enabled)
154 adapter->cmd_wait_q.status = -1;
155 mwifiex_recycle_cmd_node(adapter, cmd_node);
156 return -1;
157 }
158
159 cmd_code = le16_to_cpu(host_cmd->command);
160 cmd_size = le16_to_cpu(host_cmd->size);
161
162 if (adapter->hw_status == MWIFIEX_HW_STATUS_RESET &&
163 cmd_code != HostCmd_CMD_FUNC_SHUTDOWN &&
164 cmd_code != HostCmd_CMD_FUNC_INIT) {
165 dev_err(adapter->dev,
166 "DNLD_CMD: FW in reset state, ignore cmd %#x\n",
167 cmd_code);
168 if (cmd_node->wait_q_enabled)
169 mwifiex_complete_cmd(adapter, cmd_node);
170 mwifiex_recycle_cmd_node(adapter, cmd_node);
171 queue_work(adapter->workqueue, &adapter->main_work);
172 return -1;
173 }
174
175 /* Set command sequence number */
176 adapter->seq_num++;
177 host_cmd->seq_num = cpu_to_le16(HostCmd_SET_SEQ_NO_BSS_INFO
178 (adapter->seq_num,
179 cmd_node->priv->bss_num,
180 cmd_node->priv->bss_type));
181
182 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
183 adapter->curr_cmd = cmd_node;
184 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
185
186 /* Adjust skb length */
187 if (cmd_node->cmd_skb->len > cmd_size)
188 /*
189 * cmd_size is less than sizeof(struct host_cmd_ds_command).
190 * Trim off the unused portion.
191 */
192 skb_trim(cmd_node->cmd_skb, cmd_size);
193 else if (cmd_node->cmd_skb->len < cmd_size)
194 /*
195 * cmd_size is larger than sizeof(struct host_cmd_ds_command)
196 * because we have appended custom IE TLV. Increase skb length
197 * accordingly.
198 */
199 skb_put(cmd_node->cmd_skb, cmd_size - cmd_node->cmd_skb->len);
200
201 do_gettimeofday(&tstamp);
202 dev_dbg(adapter->dev, "cmd: DNLD_CMD: (%lu.%lu): %#x, act %#x, len %d,"
203 " seqno %#x\n",
204 tstamp.tv_sec, tstamp.tv_usec, cmd_code,
205 le16_to_cpu(*(__le16 *) ((u8 *) host_cmd + S_DS_GEN)), cmd_size,
206 le16_to_cpu(host_cmd->seq_num));
207
208 if (adapter->iface_type == MWIFIEX_USB) {
209 tmp = cpu_to_le32(MWIFIEX_USB_TYPE_CMD);
210 skb_push(cmd_node->cmd_skb, MWIFIEX_TYPE_LEN);
211 memcpy(cmd_node->cmd_skb->data, &tmp, MWIFIEX_TYPE_LEN);
212 adapter->cmd_sent = true;
213 ret = adapter->if_ops.host_to_card(adapter,
214 MWIFIEX_USB_EP_CMD_EVENT,
215 cmd_node->cmd_skb, NULL);
216 skb_pull(cmd_node->cmd_skb, MWIFIEX_TYPE_LEN);
217 if (ret == -EBUSY)
218 cmd_node->cmd_skb = NULL;
219 } else {
220 skb_push(cmd_node->cmd_skb, INTF_HEADER_LEN);
221 ret = adapter->if_ops.host_to_card(adapter, MWIFIEX_TYPE_CMD,
222 cmd_node->cmd_skb, NULL);
223 skb_pull(cmd_node->cmd_skb, INTF_HEADER_LEN);
224 }
225
226 if (ret == -1) {
227 dev_err(adapter->dev, "DNLD_CMD: host to card failed\n");
228 if (adapter->iface_type == MWIFIEX_USB)
229 adapter->cmd_sent = false;
230 if (cmd_node->wait_q_enabled)
231 adapter->cmd_wait_q.status = -1;
232 mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd);
233
234 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
235 adapter->curr_cmd = NULL;
236 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
237
238 adapter->dbg.num_cmd_host_to_card_failure++;
239 return -1;
240 }
241
242 /* Save the last command id and action to debug log */
243 adapter->dbg.last_cmd_index =
244 (adapter->dbg.last_cmd_index + 1) % DBG_CMD_NUM;
245 adapter->dbg.last_cmd_id[adapter->dbg.last_cmd_index] = cmd_code;
246 adapter->dbg.last_cmd_act[adapter->dbg.last_cmd_index] =
247 le16_to_cpu(*(__le16 *) ((u8 *) host_cmd + S_DS_GEN));
248
249 /* Clear BSS_NO_BITS from HostCmd */
250 cmd_code &= HostCmd_CMD_ID_MASK;
251
252 /* Setup the timer after transmit command */
253 mod_timer(&adapter->cmd_timer,
254 jiffies + msecs_to_jiffies(MWIFIEX_TIMER_10S));
255
256 return 0;
257}
258
259/*
260 * This function downloads a sleep confirm command to the firmware.
261 *
262 * The function performs sanity tests, sets the command sequence
263 * number and size, converts the header fields to CPU format before
264 * sending.
265 *
266 * No responses are needed for sleep confirm command.
267 */
268static int mwifiex_dnld_sleep_confirm_cmd(struct mwifiex_adapter *adapter)
269{
270 int ret;
271 struct mwifiex_private *priv;
272 struct mwifiex_opt_sleep_confirm *sleep_cfm_buf =
273 (struct mwifiex_opt_sleep_confirm *)
274 adapter->sleep_cfm->data;
275 struct sk_buff *sleep_cfm_tmp;
276 __le32 tmp;
277
278 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
279
280 adapter->seq_num++;
281 sleep_cfm_buf->seq_num =
282 cpu_to_le16((HostCmd_SET_SEQ_NO_BSS_INFO
283 (adapter->seq_num, priv->bss_num,
284 priv->bss_type)));
285
286 if (adapter->iface_type == MWIFIEX_USB) {
287 sleep_cfm_tmp =
288 dev_alloc_skb(sizeof(struct mwifiex_opt_sleep_confirm)
289 + MWIFIEX_TYPE_LEN);
290 skb_put(sleep_cfm_tmp, sizeof(struct mwifiex_opt_sleep_confirm)
291 + MWIFIEX_TYPE_LEN);
292 tmp = cpu_to_le32(MWIFIEX_USB_TYPE_CMD);
293 memcpy(sleep_cfm_tmp->data, &tmp, MWIFIEX_TYPE_LEN);
294 memcpy(sleep_cfm_tmp->data + MWIFIEX_TYPE_LEN,
295 adapter->sleep_cfm->data,
296 sizeof(struct mwifiex_opt_sleep_confirm));
297 ret = adapter->if_ops.host_to_card(adapter,
298 MWIFIEX_USB_EP_CMD_EVENT,
299 sleep_cfm_tmp, NULL);
300 if (ret != -EBUSY)
301 dev_kfree_skb_any(sleep_cfm_tmp);
302 } else {
303 skb_push(adapter->sleep_cfm, INTF_HEADER_LEN);
304 ret = adapter->if_ops.host_to_card(adapter, MWIFIEX_TYPE_CMD,
305 adapter->sleep_cfm, NULL);
306 skb_pull(adapter->sleep_cfm, INTF_HEADER_LEN);
307 }
308
309 if (ret == -1) {
310 dev_err(adapter->dev, "SLEEP_CFM: failed\n");
311 adapter->dbg.num_cmd_sleep_cfm_host_to_card_failure++;
312 return -1;
313 }
314 if (GET_BSS_ROLE(mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY))
315 == MWIFIEX_BSS_ROLE_STA) {
316 if (!le16_to_cpu(sleep_cfm_buf->resp_ctrl))
317 /* Response is not needed for sleep
318 confirm command */
319 adapter->ps_state = PS_STATE_SLEEP;
320 else
321 adapter->ps_state = PS_STATE_SLEEP_CFM;
322
323 if (!le16_to_cpu(sleep_cfm_buf->resp_ctrl) &&
324 (adapter->is_hs_configured &&
325 !adapter->sleep_period.period)) {
326 adapter->pm_wakeup_card_req = true;
327 mwifiex_hs_activated_event(mwifiex_get_priv
328 (adapter, MWIFIEX_BSS_ROLE_STA), true);
329 }
330 }
331
332 return ret;
333}
334
335/*
336 * This function allocates the command buffers and links them to
337 * the command free queue.
338 *
339 * The driver uses a pre allocated number of command buffers, which
340 * are created at driver initializations and freed at driver cleanup.
341 * Every command needs to obtain a command buffer from this pool before
342 * it can be issued. The command free queue lists the command buffers
343 * currently free to use, while the command pending queue lists the
344 * command buffers already in use and awaiting handling. Command buffers
345 * are returned to the free queue after use.
346 */
347int mwifiex_alloc_cmd_buffer(struct mwifiex_adapter *adapter)
348{
349 struct cmd_ctrl_node *cmd_array;
350 u32 i;
351
352 /* Allocate and initialize struct cmd_ctrl_node */
353 cmd_array = kcalloc(MWIFIEX_NUM_OF_CMD_BUFFER,
354 sizeof(struct cmd_ctrl_node), GFP_KERNEL);
355 if (!cmd_array)
356 return -ENOMEM;
357
358 adapter->cmd_pool = cmd_array;
359
360 /* Allocate and initialize command buffers */
361 for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++) {
362 cmd_array[i].skb = dev_alloc_skb(MWIFIEX_SIZE_OF_CMD_BUFFER);
363 if (!cmd_array[i].skb) {
364 dev_err(adapter->dev, "ALLOC_CMD_BUF: out of memory\n");
365 return -1;
366 }
367 }
368
369 for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++)
370 mwifiex_insert_cmd_to_free_q(adapter, &cmd_array[i]);
371
372 return 0;
373}
374
375/*
376 * This function frees the command buffers.
377 *
378 * The function calls the completion callback for all the command
379 * buffers that still have response buffers associated with them.
380 */
381int mwifiex_free_cmd_buffer(struct mwifiex_adapter *adapter)
382{
383 struct cmd_ctrl_node *cmd_array;
384 u32 i;
385
386 /* Need to check if cmd pool is allocated or not */
387 if (!adapter->cmd_pool) {
388 dev_dbg(adapter->dev, "info: FREE_CMD_BUF: cmd_pool is null\n");
389 return 0;
390 }
391
392 cmd_array = adapter->cmd_pool;
393
394 /* Release shared memory buffers */
395 for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++) {
396 if (cmd_array[i].skb) {
397 dev_dbg(adapter->dev, "cmd: free cmd buffer %d\n", i);
398 dev_kfree_skb_any(cmd_array[i].skb);
399 }
400 if (!cmd_array[i].resp_skb)
401 continue;
402
403 if (adapter->iface_type == MWIFIEX_USB)
404 adapter->if_ops.cmdrsp_complete(adapter,
405 cmd_array[i].resp_skb);
406 else
407 dev_kfree_skb_any(cmd_array[i].resp_skb);
408 }
409 /* Release struct cmd_ctrl_node */
410 if (adapter->cmd_pool) {
411 dev_dbg(adapter->dev, "cmd: free cmd pool\n");
412 kfree(adapter->cmd_pool);
413 adapter->cmd_pool = NULL;
414 }
415
416 return 0;
417}
418
419/*
420 * This function handles events generated by firmware.
421 *
422 * Event body of events received from firmware are not used (though they are
423 * saved), only the event ID is used. Some events are re-invoked by
424 * the driver, with a new event body.
425 *
426 * After processing, the function calls the completion callback
427 * for cleanup.
428 */
429int mwifiex_process_event(struct mwifiex_adapter *adapter)
430{
431 int ret;
432 struct mwifiex_private *priv =
433 mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
434 struct sk_buff *skb = adapter->event_skb;
435 u32 eventcause = adapter->event_cause;
436 struct timeval tstamp;
437 struct mwifiex_rxinfo *rx_info;
438
439 /* Save the last event to debug log */
440 adapter->dbg.last_event_index =
441 (adapter->dbg.last_event_index + 1) % DBG_CMD_NUM;
442 adapter->dbg.last_event[adapter->dbg.last_event_index] =
443 (u16) eventcause;
444
445 /* Get BSS number and corresponding priv */
446 priv = mwifiex_get_priv_by_id(adapter, EVENT_GET_BSS_NUM(eventcause),
447 EVENT_GET_BSS_TYPE(eventcause));
448 if (!priv)
449 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
450 /* Clear BSS_NO_BITS from event */
451 eventcause &= EVENT_ID_MASK;
452 adapter->event_cause = eventcause;
453
454 if (skb) {
455 rx_info = MWIFIEX_SKB_RXCB(skb);
456 rx_info->bss_num = priv->bss_num;
457 rx_info->bss_type = priv->bss_type;
458 }
459
460 if (eventcause != EVENT_PS_SLEEP && eventcause != EVENT_PS_AWAKE) {
461 do_gettimeofday(&tstamp);
462 dev_dbg(adapter->dev, "event: %lu.%lu: cause: %#x\n",
463 tstamp.tv_sec, tstamp.tv_usec, eventcause);
464 } else {
465 /* Handle PS_SLEEP/AWAKE events on STA */
466 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_STA);
467 if (!priv)
468 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
469 }
470
471 if (priv->bss_role == MWIFIEX_BSS_ROLE_UAP)
472 ret = mwifiex_process_uap_event(priv);
473 else
474 ret = mwifiex_process_sta_event(priv);
475
476 adapter->event_cause = 0;
477 adapter->event_skb = NULL;
478 adapter->if_ops.event_complete(adapter, skb);
479
480 return ret;
481}
482
483/*
484 * This function prepares a command and send it to the firmware.
485 *
486 * Preparation includes -
487 * - Sanity tests to make sure the card is still present or the FW
488 * is not reset
489 * - Getting a new command node from the command free queue
490 * - Initializing the command node for default parameters
491 * - Fill up the non-default parameters and buffer pointers
492 * - Add the command to pending queue
493 */
494int mwifiex_send_cmd(struct mwifiex_private *priv, u16 cmd_no,
495 u16 cmd_action, u32 cmd_oid, void *data_buf, bool sync)
496{
497 int ret;
498 struct mwifiex_adapter *adapter = priv->adapter;
499 struct cmd_ctrl_node *cmd_node;
500 struct host_cmd_ds_command *cmd_ptr;
501
502 if (!adapter) {
503 pr_err("PREP_CMD: adapter is NULL\n");
504 return -1;
505 }
506
507 if (adapter->is_suspended) {
508 dev_err(adapter->dev, "PREP_CMD: device in suspended state\n");
509 return -1;
510 }
511
512 if (adapter->hs_enabling && cmd_no != HostCmd_CMD_802_11_HS_CFG_ENH) {
513 dev_err(adapter->dev, "PREP_CMD: host entering sleep state\n");
514 return -1;
515 }
516
517 if (adapter->surprise_removed) {
518 dev_err(adapter->dev, "PREP_CMD: card is removed\n");
519 return -1;
520 }
521
522 if (adapter->is_cmd_timedout) {
523 dev_err(adapter->dev, "PREP_CMD: FW is in bad state\n");
524 return -1;
525 }
526
527 if (adapter->hw_status == MWIFIEX_HW_STATUS_RESET) {
528 if (cmd_no != HostCmd_CMD_FUNC_INIT) {
529 dev_err(adapter->dev, "PREP_CMD: FW in reset state\n");
530 return -1;
531 }
532 }
533
534 /* Get a new command node */
535 cmd_node = mwifiex_get_cmd_node(adapter);
536
537 if (!cmd_node) {
538 dev_err(adapter->dev, "PREP_CMD: no free cmd node\n");
539 return -1;
540 }
541
542 /* Initialize the command node */
543 mwifiex_init_cmd_node(priv, cmd_node, cmd_oid, data_buf, sync);
544
545 if (!cmd_node->cmd_skb) {
546 dev_err(adapter->dev, "PREP_CMD: no free cmd buf\n");
547 return -1;
548 }
549
550 memset(skb_put(cmd_node->cmd_skb, sizeof(struct host_cmd_ds_command)),
551 0, sizeof(struct host_cmd_ds_command));
552
553 cmd_ptr = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
554 cmd_ptr->command = cpu_to_le16(cmd_no);
555 cmd_ptr->result = 0;
556
557 /* Prepare command */
558 if (cmd_no) {
559 switch (cmd_no) {
560 case HostCmd_CMD_UAP_SYS_CONFIG:
561 case HostCmd_CMD_UAP_BSS_START:
562 case HostCmd_CMD_UAP_BSS_STOP:
563 case HostCmd_CMD_UAP_STA_DEAUTH:
564 ret = mwifiex_uap_prepare_cmd(priv, cmd_no, cmd_action,
565 cmd_oid, data_buf,
566 cmd_ptr);
567 break;
568 default:
569 ret = mwifiex_sta_prepare_cmd(priv, cmd_no, cmd_action,
570 cmd_oid, data_buf,
571 cmd_ptr);
572 break;
573 }
574 } else {
575 ret = mwifiex_cmd_host_cmd(priv, cmd_ptr, data_buf);
576 cmd_node->cmd_flag |= CMD_F_HOSTCMD;
577 }
578
579 /* Return error, since the command preparation failed */
580 if (ret) {
581 dev_err(adapter->dev, "PREP_CMD: cmd %#x preparation failed\n",
582 cmd_no);
583 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
584 return -1;
585 }
586
587 /* Send command */
588 if (cmd_no == HostCmd_CMD_802_11_SCAN ||
589 cmd_no == HostCmd_CMD_802_11_SCAN_EXT) {
590 mwifiex_queue_scan_cmd(priv, cmd_node);
591 } else {
592 mwifiex_insert_cmd_to_pending_q(adapter, cmd_node, true);
593 queue_work(adapter->workqueue, &adapter->main_work);
594 if (cmd_node->wait_q_enabled)
595 ret = mwifiex_wait_queue_complete(adapter, cmd_node);
596 }
597
598 return ret;
599}
600
601/*
602 * This function returns a command to the command free queue.
603 *
604 * The function also calls the completion callback if required, before
605 * cleaning the command node and re-inserting it into the free queue.
606 */
607void
608mwifiex_insert_cmd_to_free_q(struct mwifiex_adapter *adapter,
609 struct cmd_ctrl_node *cmd_node)
610{
611 unsigned long flags;
612
613 if (!cmd_node)
614 return;
615
616 if (cmd_node->wait_q_enabled)
617 mwifiex_complete_cmd(adapter, cmd_node);
618 /* Clean the node */
619 mwifiex_clean_cmd_node(adapter, cmd_node);
620
621 /* Insert node into cmd_free_q */
622 spin_lock_irqsave(&adapter->cmd_free_q_lock, flags);
623 list_add_tail(&cmd_node->list, &adapter->cmd_free_q);
624 spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
625}
626
627/* This function reuses a command node. */
628void mwifiex_recycle_cmd_node(struct mwifiex_adapter *adapter,
629 struct cmd_ctrl_node *cmd_node)
630{
631 struct host_cmd_ds_command *host_cmd = (void *)cmd_node->cmd_skb->data;
632
633 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
634
635 atomic_dec(&adapter->cmd_pending);
636 dev_dbg(adapter->dev, "cmd: FREE_CMD: cmd=%#x, cmd_pending=%d\n",
637 le16_to_cpu(host_cmd->command),
638 atomic_read(&adapter->cmd_pending));
639}
640
641/*
642 * This function queues a command to the command pending queue.
643 *
644 * This in effect adds the command to the command list to be executed.
645 * Exit PS command is handled specially, by placing it always to the
646 * front of the command queue.
647 */
648void
649mwifiex_insert_cmd_to_pending_q(struct mwifiex_adapter *adapter,
650 struct cmd_ctrl_node *cmd_node, u32 add_tail)
651{
652 struct host_cmd_ds_command *host_cmd = NULL;
653 u16 command;
654 unsigned long flags;
655
656 host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
657 if (!host_cmd) {
658 dev_err(adapter->dev, "QUEUE_CMD: host_cmd is NULL\n");
659 return;
660 }
661
662 command = le16_to_cpu(host_cmd->command);
663
664 /* Exit_PS command needs to be queued in the header always. */
665 if (command == HostCmd_CMD_802_11_PS_MODE_ENH) {
666 struct host_cmd_ds_802_11_ps_mode_enh *pm =
667 &host_cmd->params.psmode_enh;
668 if ((le16_to_cpu(pm->action) == DIS_PS) ||
669 (le16_to_cpu(pm->action) == DIS_AUTO_PS)) {
670 if (adapter->ps_state != PS_STATE_AWAKE)
671 add_tail = false;
672 }
673 }
674
675 spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
676 if (add_tail)
677 list_add_tail(&cmd_node->list, &adapter->cmd_pending_q);
678 else
679 list_add(&cmd_node->list, &adapter->cmd_pending_q);
680 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
681
682 atomic_inc(&adapter->cmd_pending);
683 dev_dbg(adapter->dev, "cmd: QUEUE_CMD: cmd=%#x, cmd_pending=%d\n",
684 command, atomic_read(&adapter->cmd_pending));
685}
686
687/*
688 * This function executes the next command in command pending queue.
689 *
690 * This function will fail if a command is already in processing stage,
691 * otherwise it will dequeue the first command from the command pending
692 * queue and send to the firmware.
693 *
694 * If the device is currently in host sleep mode, any commands, except the
695 * host sleep configuration command will de-activate the host sleep. For PS
696 * mode, the function will put the firmware back to sleep if applicable.
697 */
698int mwifiex_exec_next_cmd(struct mwifiex_adapter *adapter)
699{
700 struct mwifiex_private *priv;
701 struct cmd_ctrl_node *cmd_node;
702 int ret = 0;
703 struct host_cmd_ds_command *host_cmd;
704 unsigned long cmd_flags;
705 unsigned long cmd_pending_q_flags;
706
707 /* Check if already in processing */
708 if (adapter->curr_cmd) {
709 dev_err(adapter->dev, "EXEC_NEXT_CMD: cmd in processing\n");
710 return -1;
711 }
712
713 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
714 /* Check if any command is pending */
715 spin_lock_irqsave(&adapter->cmd_pending_q_lock, cmd_pending_q_flags);
716 if (list_empty(&adapter->cmd_pending_q)) {
717 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
718 cmd_pending_q_flags);
719 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
720 return 0;
721 }
722 cmd_node = list_first_entry(&adapter->cmd_pending_q,
723 struct cmd_ctrl_node, list);
724 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
725 cmd_pending_q_flags);
726
727 host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
728 priv = cmd_node->priv;
729
730 if (adapter->ps_state != PS_STATE_AWAKE) {
731 dev_err(adapter->dev, "%s: cannot send cmd in sleep state,"
732 " this should not happen\n", __func__);
733 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
734 return ret;
735 }
736
737 spin_lock_irqsave(&adapter->cmd_pending_q_lock, cmd_pending_q_flags);
738 list_del(&cmd_node->list);
739 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
740 cmd_pending_q_flags);
741
742 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
743 ret = mwifiex_dnld_cmd_to_fw(priv, cmd_node);
744 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
745 /* Any command sent to the firmware when host is in sleep
746 * mode should de-configure host sleep. We should skip the
747 * host sleep configuration command itself though
748 */
749 if (priv && (host_cmd->command !=
750 cpu_to_le16(HostCmd_CMD_802_11_HS_CFG_ENH))) {
751 if (adapter->hs_activated) {
752 adapter->is_hs_configured = false;
753 mwifiex_hs_activated_event(priv, false);
754 }
755 }
756
757 return ret;
758}
759
760/*
761 * This function handles the command response.
762 *
763 * After processing, the function cleans the command node and puts
764 * it back to the command free queue.
765 */
766int mwifiex_process_cmdresp(struct mwifiex_adapter *adapter)
767{
768 struct host_cmd_ds_command *resp;
769 struct mwifiex_private *priv =
770 mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
771 int ret = 0;
772 uint16_t orig_cmdresp_no;
773 uint16_t cmdresp_no;
774 uint16_t cmdresp_result;
775 struct timeval tstamp;
776 unsigned long flags;
777
778 /* Now we got response from FW, cancel the command timer */
779 del_timer_sync(&adapter->cmd_timer);
780
781 if (!adapter->curr_cmd || !adapter->curr_cmd->resp_skb) {
782 resp = (struct host_cmd_ds_command *) adapter->upld_buf;
783 dev_err(adapter->dev, "CMD_RESP: NULL curr_cmd, %#x\n",
784 le16_to_cpu(resp->command));
785 return -1;
786 }
787
788 adapter->is_cmd_timedout = 0;
789
790 resp = (struct host_cmd_ds_command *) adapter->curr_cmd->resp_skb->data;
791 if (adapter->curr_cmd->cmd_flag & CMD_F_CANCELED) {
792 dev_err(adapter->dev, "CMD_RESP: %#x been canceled\n",
793 le16_to_cpu(resp->command));
794 mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd);
795 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
796 adapter->curr_cmd = NULL;
797 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
798 return -1;
799 }
800
801 if (adapter->curr_cmd->cmd_flag & CMD_F_HOSTCMD) {
802 /* Copy original response back to response buffer */
803 struct mwifiex_ds_misc_cmd *hostcmd;
804 uint16_t size = le16_to_cpu(resp->size);
805 dev_dbg(adapter->dev, "info: host cmd resp size = %d\n", size);
806 size = min_t(u16, size, MWIFIEX_SIZE_OF_CMD_BUFFER);
807 if (adapter->curr_cmd->data_buf) {
808 hostcmd = adapter->curr_cmd->data_buf;
809 hostcmd->len = size;
810 memcpy(hostcmd->cmd, resp, size);
811 }
812 }
813 orig_cmdresp_no = le16_to_cpu(resp->command);
814
815 /* Get BSS number and corresponding priv */
816 priv = mwifiex_get_priv_by_id(adapter,
817 HostCmd_GET_BSS_NO(le16_to_cpu(resp->seq_num)),
818 HostCmd_GET_BSS_TYPE(le16_to_cpu(resp->seq_num)));
819 if (!priv)
820 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
821 /* Clear RET_BIT from HostCmd */
822 resp->command = cpu_to_le16(orig_cmdresp_no & HostCmd_CMD_ID_MASK);
823
824 cmdresp_no = le16_to_cpu(resp->command);
825 cmdresp_result = le16_to_cpu(resp->result);
826
827 /* Save the last command response to debug log */
828 adapter->dbg.last_cmd_resp_index =
829 (adapter->dbg.last_cmd_resp_index + 1) % DBG_CMD_NUM;
830 adapter->dbg.last_cmd_resp_id[adapter->dbg.last_cmd_resp_index] =
831 orig_cmdresp_no;
832
833 do_gettimeofday(&tstamp);
834 dev_dbg(adapter->dev, "cmd: CMD_RESP: (%lu.%lu): 0x%x, result %d,"
835 " len %d, seqno 0x%x\n",
836 tstamp.tv_sec, tstamp.tv_usec, orig_cmdresp_no, cmdresp_result,
837 le16_to_cpu(resp->size), le16_to_cpu(resp->seq_num));
838
839 if (!(orig_cmdresp_no & HostCmd_RET_BIT)) {
840 dev_err(adapter->dev, "CMD_RESP: invalid cmd resp\n");
841 if (adapter->curr_cmd->wait_q_enabled)
842 adapter->cmd_wait_q.status = -1;
843
844 mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd);
845 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
846 adapter->curr_cmd = NULL;
847 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
848 return -1;
849 }
850
851 if (adapter->curr_cmd->cmd_flag & CMD_F_HOSTCMD) {
852 adapter->curr_cmd->cmd_flag &= ~CMD_F_HOSTCMD;
853 if ((cmdresp_result == HostCmd_RESULT_OK) &&
854 (cmdresp_no == HostCmd_CMD_802_11_HS_CFG_ENH))
855 ret = mwifiex_ret_802_11_hs_cfg(priv, resp);
856 } else {
857 /* handle response */
858 ret = mwifiex_process_sta_cmdresp(priv, cmdresp_no, resp);
859 }
860
861 /* Check init command response */
862 if (adapter->hw_status == MWIFIEX_HW_STATUS_INITIALIZING) {
863 if (ret) {
864 dev_err(adapter->dev, "%s: cmd %#x failed during "
865 "initialization\n", __func__, cmdresp_no);
866 mwifiex_init_fw_complete(adapter);
867 return -1;
868 } else if (adapter->last_init_cmd == cmdresp_no)
869 adapter->hw_status = MWIFIEX_HW_STATUS_INIT_DONE;
870 }
871
872 if (adapter->curr_cmd) {
873 if (adapter->curr_cmd->wait_q_enabled)
874 adapter->cmd_wait_q.status = ret;
875
876 mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd);
877
878 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
879 adapter->curr_cmd = NULL;
880 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
881 }
882
883 return ret;
884}
885
886/*
887 * This function handles the timeout of command sending.
888 *
889 * It will re-send the same command again.
890 */
891void
892mwifiex_cmd_timeout_func(unsigned long function_context)
893{
894 struct mwifiex_adapter *adapter =
895 (struct mwifiex_adapter *) function_context;
896 struct cmd_ctrl_node *cmd_node;
897 struct timeval tstamp;
898
899 adapter->is_cmd_timedout = 1;
900 if (!adapter->curr_cmd) {
901 dev_dbg(adapter->dev, "cmd: empty curr_cmd\n");
902 return;
903 }
904 cmd_node = adapter->curr_cmd;
905 if (cmd_node) {
906 adapter->dbg.timeout_cmd_id =
907 adapter->dbg.last_cmd_id[adapter->dbg.last_cmd_index];
908 adapter->dbg.timeout_cmd_act =
909 adapter->dbg.last_cmd_act[adapter->dbg.last_cmd_index];
910 do_gettimeofday(&tstamp);
911 dev_err(adapter->dev,
912 "%s: Timeout cmd id (%lu.%lu) = %#x, act = %#x\n",
913 __func__, tstamp.tv_sec, tstamp.tv_usec,
914 adapter->dbg.timeout_cmd_id,
915 adapter->dbg.timeout_cmd_act);
916
917 dev_err(adapter->dev, "num_data_h2c_failure = %d\n",
918 adapter->dbg.num_tx_host_to_card_failure);
919 dev_err(adapter->dev, "num_cmd_h2c_failure = %d\n",
920 adapter->dbg.num_cmd_host_to_card_failure);
921
922 dev_err(adapter->dev, "is_cmd_timedout = %d\n",
923 adapter->is_cmd_timedout);
924 dev_err(adapter->dev, "num_tx_timeout = %d\n",
925 adapter->dbg.num_tx_timeout);
926
927 dev_err(adapter->dev, "last_cmd_index = %d\n",
928 adapter->dbg.last_cmd_index);
929 dev_err(adapter->dev, "last_cmd_id: %*ph\n",
930 (int)sizeof(adapter->dbg.last_cmd_id),
931 adapter->dbg.last_cmd_id);
932 dev_err(adapter->dev, "last_cmd_act: %*ph\n",
933 (int)sizeof(adapter->dbg.last_cmd_act),
934 adapter->dbg.last_cmd_act);
935
936 dev_err(adapter->dev, "last_cmd_resp_index = %d\n",
937 adapter->dbg.last_cmd_resp_index);
938 dev_err(adapter->dev, "last_cmd_resp_id: %*ph\n",
939 (int)sizeof(adapter->dbg.last_cmd_resp_id),
940 adapter->dbg.last_cmd_resp_id);
941
942 dev_err(adapter->dev, "last_event_index = %d\n",
943 adapter->dbg.last_event_index);
944 dev_err(adapter->dev, "last_event: %*ph\n",
945 (int)sizeof(adapter->dbg.last_event),
946 adapter->dbg.last_event);
947
948 dev_err(adapter->dev, "data_sent=%d cmd_sent=%d\n",
949 adapter->data_sent, adapter->cmd_sent);
950
951 dev_err(adapter->dev, "ps_mode=%d ps_state=%d\n",
952 adapter->ps_mode, adapter->ps_state);
953
954 if (cmd_node->wait_q_enabled) {
955 adapter->cmd_wait_q.status = -ETIMEDOUT;
956 wake_up_interruptible(&adapter->cmd_wait_q.wait);
957 mwifiex_cancel_pending_ioctl(adapter);
958 /* reset cmd_sent flag to unblock new commands */
959 adapter->cmd_sent = false;
960 }
961 }
962 if (adapter->hw_status == MWIFIEX_HW_STATUS_INITIALIZING)
963 mwifiex_init_fw_complete(adapter);
964
965 if (adapter->if_ops.card_reset)
966 adapter->if_ops.card_reset(adapter);
967}
968
969/*
970 * This function cancels all the pending commands.
971 *
972 * The current command, all commands in command pending queue and all scan
973 * commands in scan pending queue are cancelled. All the completion callbacks
974 * are called with failure status to ensure cleanup.
975 */
976void
977mwifiex_cancel_all_pending_cmd(struct mwifiex_adapter *adapter)
978{
979 struct cmd_ctrl_node *cmd_node = NULL, *tmp_node;
980 unsigned long flags, cmd_flags;
981 struct mwifiex_private *priv;
982 int i;
983
984 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
985 /* Cancel current cmd */
986 if ((adapter->curr_cmd) && (adapter->curr_cmd->wait_q_enabled)) {
987 adapter->curr_cmd->wait_q_enabled = false;
988 adapter->cmd_wait_q.status = -1;
989 mwifiex_complete_cmd(adapter, adapter->curr_cmd);
990 }
991 /* Cancel all pending command */
992 spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
993 list_for_each_entry_safe(cmd_node, tmp_node,
994 &adapter->cmd_pending_q, list) {
995 list_del(&cmd_node->list);
996 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
997
998 if (cmd_node->wait_q_enabled) {
999 adapter->cmd_wait_q.status = -1;
1000 mwifiex_complete_cmd(adapter, cmd_node);
1001 cmd_node->wait_q_enabled = false;
1002 }
1003 mwifiex_recycle_cmd_node(adapter, cmd_node);
1004 spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
1005 }
1006 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
1007 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
1008
1009 /* Cancel all pending scan command */
1010 spin_lock_irqsave(&adapter->scan_pending_q_lock, flags);
1011 list_for_each_entry_safe(cmd_node, tmp_node,
1012 &adapter->scan_pending_q, list) {
1013 list_del(&cmd_node->list);
1014 spin_unlock_irqrestore(&adapter->scan_pending_q_lock, flags);
1015
1016 cmd_node->wait_q_enabled = false;
1017 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
1018 spin_lock_irqsave(&adapter->scan_pending_q_lock, flags);
1019 }
1020 spin_unlock_irqrestore(&adapter->scan_pending_q_lock, flags);
1021
1022 if (adapter->scan_processing) {
1023 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
1024 adapter->scan_processing = false;
1025 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
1026 for (i = 0; i < adapter->priv_num; i++) {
1027 priv = adapter->priv[i];
1028 if (!priv)
1029 continue;
1030 if (priv->scan_request) {
1031 dev_dbg(adapter->dev, "info: aborting scan\n");
1032 cfg80211_scan_done(priv->scan_request, 1);
1033 priv->scan_request = NULL;
1034 }
1035 }
1036 }
1037}
1038
1039/*
1040 * This function cancels all pending commands that matches with
1041 * the given IOCTL request.
1042 *
1043 * Both the current command buffer and the pending command queue are
1044 * searched for matching IOCTL request. The completion callback of
1045 * the matched command is called with failure status to ensure cleanup.
1046 * In case of scan commands, all pending commands in scan pending queue
1047 * are cancelled.
1048 */
1049void
1050mwifiex_cancel_pending_ioctl(struct mwifiex_adapter *adapter)
1051{
1052 struct cmd_ctrl_node *cmd_node = NULL, *tmp_node = NULL;
1053 unsigned long cmd_flags;
1054 unsigned long scan_pending_q_flags;
1055 struct mwifiex_private *priv;
1056 int i;
1057
1058 if ((adapter->curr_cmd) &&
1059 (adapter->curr_cmd->wait_q_enabled)) {
1060 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
1061 cmd_node = adapter->curr_cmd;
1062 cmd_node->wait_q_enabled = false;
1063 cmd_node->cmd_flag |= CMD_F_CANCELED;
1064 mwifiex_recycle_cmd_node(adapter, cmd_node);
1065 mwifiex_complete_cmd(adapter, adapter->curr_cmd);
1066 adapter->curr_cmd = NULL;
1067 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
1068 }
1069
1070 /* Cancel all pending scan command */
1071 spin_lock_irqsave(&adapter->scan_pending_q_lock,
1072 scan_pending_q_flags);
1073 list_for_each_entry_safe(cmd_node, tmp_node,
1074 &adapter->scan_pending_q, list) {
1075 list_del(&cmd_node->list);
1076 spin_unlock_irqrestore(&adapter->scan_pending_q_lock,
1077 scan_pending_q_flags);
1078 cmd_node->wait_q_enabled = false;
1079 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
1080 spin_lock_irqsave(&adapter->scan_pending_q_lock,
1081 scan_pending_q_flags);
1082 }
1083 spin_unlock_irqrestore(&adapter->scan_pending_q_lock,
1084 scan_pending_q_flags);
1085
1086 if (adapter->scan_processing) {
1087 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
1088 adapter->scan_processing = false;
1089 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
1090 for (i = 0; i < adapter->priv_num; i++) {
1091 priv = adapter->priv[i];
1092 if (!priv)
1093 continue;
1094 if (priv->scan_request) {
1095 dev_dbg(adapter->dev, "info: aborting scan\n");
1096 cfg80211_scan_done(priv->scan_request, 1);
1097 priv->scan_request = NULL;
1098 }
1099 }
1100 }
1101 adapter->cmd_wait_q.status = -1;
1102}
1103
1104/*
1105 * This function sends the sleep confirm command to firmware, if
1106 * possible.
1107 *
1108 * The sleep confirm command cannot be issued if command response,
1109 * data response or event response is awaiting handling, or if we
1110 * are in the middle of sending a command, or expecting a command
1111 * response.
1112 */
1113void
1114mwifiex_check_ps_cond(struct mwifiex_adapter *adapter)
1115{
1116 if (!adapter->cmd_sent &&
1117 !adapter->curr_cmd && !IS_CARD_RX_RCVD(adapter))
1118 mwifiex_dnld_sleep_confirm_cmd(adapter);
1119 else
1120 dev_dbg(adapter->dev,
1121 "cmd: Delay Sleep Confirm (%s%s%s)\n",
1122 (adapter->cmd_sent) ? "D" : "",
1123 (adapter->curr_cmd) ? "C" : "",
1124 (IS_CARD_RX_RCVD(adapter)) ? "R" : "");
1125}
1126
1127/*
1128 * This function sends a Host Sleep activated event to applications.
1129 *
1130 * This event is generated by the driver, with a blank event body.
1131 */
1132void
1133mwifiex_hs_activated_event(struct mwifiex_private *priv, u8 activated)
1134{
1135 if (activated) {
1136 if (priv->adapter->is_hs_configured) {
1137 priv->adapter->hs_activated = true;
1138 mwifiex_update_rxreor_flags(priv->adapter,
1139 RXREOR_FORCE_NO_DROP);
1140 dev_dbg(priv->adapter->dev, "event: hs_activated\n");
1141 priv->adapter->hs_activate_wait_q_woken = true;
1142 wake_up_interruptible(
1143 &priv->adapter->hs_activate_wait_q);
1144 } else {
1145 dev_dbg(priv->adapter->dev, "event: HS not configured\n");
1146 }
1147 } else {
1148 dev_dbg(priv->adapter->dev, "event: hs_deactivated\n");
1149 priv->adapter->hs_activated = false;
1150 }
1151}
1152
1153/*
1154 * This function handles the command response of a Host Sleep configuration
1155 * command.
1156 *
1157 * Handling includes changing the header fields into CPU format
1158 * and setting the current host sleep activation status in driver.
1159 *
1160 * In case host sleep status change, the function generates an event to
1161 * notify the applications.
1162 */
1163int mwifiex_ret_802_11_hs_cfg(struct mwifiex_private *priv,
1164 struct host_cmd_ds_command *resp)
1165{
1166 struct mwifiex_adapter *adapter = priv->adapter;
1167 struct host_cmd_ds_802_11_hs_cfg_enh *phs_cfg =
1168 &resp->params.opt_hs_cfg;
1169 uint32_t conditions = le32_to_cpu(phs_cfg->params.hs_config.conditions);
1170
1171 if (phs_cfg->action == cpu_to_le16(HS_ACTIVATE) &&
1172 adapter->iface_type != MWIFIEX_USB) {
1173 mwifiex_hs_activated_event(priv, true);
1174 return 0;
1175 } else {
1176 dev_dbg(adapter->dev, "cmd: CMD_RESP: HS_CFG cmd reply"
1177 " result=%#x, conditions=0x%x gpio=0x%x gap=0x%x\n",
1178 resp->result, conditions,
1179 phs_cfg->params.hs_config.gpio,
1180 phs_cfg->params.hs_config.gap);
1181 }
1182 if (conditions != HS_CFG_CANCEL) {
1183 adapter->is_hs_configured = true;
1184 if (adapter->iface_type == MWIFIEX_USB)
1185 mwifiex_hs_activated_event(priv, true);
1186 } else {
1187 adapter->is_hs_configured = false;
1188 if (adapter->hs_activated)
1189 mwifiex_hs_activated_event(priv, false);
1190 }
1191
1192 return 0;
1193}
1194
1195/*
1196 * This function wakes up the adapter and generates a Host Sleep
1197 * cancel event on receiving the power up interrupt.
1198 */
1199void
1200mwifiex_process_hs_config(struct mwifiex_adapter *adapter)
1201{
1202 dev_dbg(adapter->dev, "info: %s: auto cancelling host sleep"
1203 " since there is interrupt from the firmware\n", __func__);
1204
1205 adapter->if_ops.wakeup(adapter);
1206 adapter->hs_activated = false;
1207 adapter->is_hs_configured = false;
1208 adapter->is_suspended = false;
1209 mwifiex_hs_activated_event(mwifiex_get_priv(adapter,
1210 MWIFIEX_BSS_ROLE_ANY),
1211 false);
1212}
1213EXPORT_SYMBOL_GPL(mwifiex_process_hs_config);
1214
1215/*
1216 * This function handles the command response of a sleep confirm command.
1217 *
1218 * The function sets the card state to SLEEP if the response indicates success.
1219 */
1220void
1221mwifiex_process_sleep_confirm_resp(struct mwifiex_adapter *adapter,
1222 u8 *pbuf, u32 upld_len)
1223{
1224 struct host_cmd_ds_command *cmd = (struct host_cmd_ds_command *) pbuf;
1225 struct mwifiex_private *priv =
1226 mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
1227 uint16_t result = le16_to_cpu(cmd->result);
1228 uint16_t command = le16_to_cpu(cmd->command);
1229 uint16_t seq_num = le16_to_cpu(cmd->seq_num);
1230
1231 if (!upld_len) {
1232 dev_err(adapter->dev, "%s: cmd size is 0\n", __func__);
1233 return;
1234 }
1235
1236 /* Get BSS number and corresponding priv */
1237 priv = mwifiex_get_priv_by_id(adapter, HostCmd_GET_BSS_NO(seq_num),
1238 HostCmd_GET_BSS_TYPE(seq_num));
1239 if (!priv)
1240 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
1241
1242 /* Update sequence number */
1243 seq_num = HostCmd_GET_SEQ_NO(seq_num);
1244 /* Clear RET_BIT from HostCmd */
1245 command &= HostCmd_CMD_ID_MASK;
1246
1247 if (command != HostCmd_CMD_802_11_PS_MODE_ENH) {
1248 dev_err(adapter->dev,
1249 "%s: rcvd unexpected resp for cmd %#x, result = %x\n",
1250 __func__, command, result);
1251 return;
1252 }
1253
1254 if (result) {
1255 dev_err(adapter->dev, "%s: sleep confirm cmd failed\n",
1256 __func__);
1257 adapter->pm_wakeup_card_req = false;
1258 adapter->ps_state = PS_STATE_AWAKE;
1259 return;
1260 }
1261 adapter->pm_wakeup_card_req = true;
1262 if (adapter->is_hs_configured)
1263 mwifiex_hs_activated_event(mwifiex_get_priv
1264 (adapter, MWIFIEX_BSS_ROLE_ANY),
1265 true);
1266 adapter->ps_state = PS_STATE_SLEEP;
1267 cmd->command = cpu_to_le16(command);
1268 cmd->seq_num = cpu_to_le16(seq_num);
1269}
1270EXPORT_SYMBOL_GPL(mwifiex_process_sleep_confirm_resp);
1271
1272/*
1273 * This function prepares an enhanced power mode command.
1274 *
1275 * This function can be used to disable power save or to configure
1276 * power save with auto PS or STA PS or auto deep sleep.
1277 *
1278 * Preparation includes -
1279 * - Setting command ID, action and proper size
1280 * - Setting Power Save bitmap, PS parameters TLV, PS mode TLV,
1281 * auto deep sleep TLV (as required)
1282 * - Ensuring correct endian-ness
1283 */
1284int mwifiex_cmd_enh_power_mode(struct mwifiex_private *priv,
1285 struct host_cmd_ds_command *cmd,
1286 u16 cmd_action, uint16_t ps_bitmap,
1287 struct mwifiex_ds_auto_ds *auto_ds)
1288{
1289 struct host_cmd_ds_802_11_ps_mode_enh *psmode_enh =
1290 &cmd->params.psmode_enh;
1291 u8 *tlv;
1292 u16 cmd_size = 0;
1293
1294 cmd->command = cpu_to_le16(HostCmd_CMD_802_11_PS_MODE_ENH);
1295 if (cmd_action == DIS_AUTO_PS) {
1296 psmode_enh->action = cpu_to_le16(DIS_AUTO_PS);
1297 psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1298 cmd->size = cpu_to_le16(S_DS_GEN + sizeof(psmode_enh->action) +
1299 sizeof(psmode_enh->params.ps_bitmap));
1300 } else if (cmd_action == GET_PS) {
1301 psmode_enh->action = cpu_to_le16(GET_PS);
1302 psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1303 cmd->size = cpu_to_le16(S_DS_GEN + sizeof(psmode_enh->action) +
1304 sizeof(psmode_enh->params.ps_bitmap));
1305 } else if (cmd_action == EN_AUTO_PS) {
1306 psmode_enh->action = cpu_to_le16(EN_AUTO_PS);
1307 psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1308 cmd_size = S_DS_GEN + sizeof(psmode_enh->action) +
1309 sizeof(psmode_enh->params.ps_bitmap);
1310 tlv = (u8 *) cmd + cmd_size;
1311 if (ps_bitmap & BITMAP_STA_PS) {
1312 struct mwifiex_adapter *adapter = priv->adapter;
1313 struct mwifiex_ie_types_ps_param *ps_tlv =
1314 (struct mwifiex_ie_types_ps_param *) tlv;
1315 struct mwifiex_ps_param *ps_mode = &ps_tlv->param;
1316 ps_tlv->header.type = cpu_to_le16(TLV_TYPE_PS_PARAM);
1317 ps_tlv->header.len = cpu_to_le16(sizeof(*ps_tlv) -
1318 sizeof(struct mwifiex_ie_types_header));
1319 cmd_size += sizeof(*ps_tlv);
1320 tlv += sizeof(*ps_tlv);
1321 dev_dbg(adapter->dev, "cmd: PS Command: Enter PS\n");
1322 ps_mode->null_pkt_interval =
1323 cpu_to_le16(adapter->null_pkt_interval);
1324 ps_mode->multiple_dtims =
1325 cpu_to_le16(adapter->multiple_dtim);
1326 ps_mode->bcn_miss_timeout =
1327 cpu_to_le16(adapter->bcn_miss_time_out);
1328 ps_mode->local_listen_interval =
1329 cpu_to_le16(adapter->local_listen_interval);
1330 ps_mode->adhoc_wake_period =
1331 cpu_to_le16(adapter->adhoc_awake_period);
1332 ps_mode->delay_to_ps =
1333 cpu_to_le16(adapter->delay_to_ps);
1334 ps_mode->mode = cpu_to_le16(adapter->enhanced_ps_mode);
1335
1336 }
1337 if (ps_bitmap & BITMAP_AUTO_DS) {
1338 struct mwifiex_ie_types_auto_ds_param *auto_ds_tlv =
1339 (struct mwifiex_ie_types_auto_ds_param *) tlv;
1340 u16 idletime = 0;
1341
1342 auto_ds_tlv->header.type =
1343 cpu_to_le16(TLV_TYPE_AUTO_DS_PARAM);
1344 auto_ds_tlv->header.len =
1345 cpu_to_le16(sizeof(*auto_ds_tlv) -
1346 sizeof(struct mwifiex_ie_types_header));
1347 cmd_size += sizeof(*auto_ds_tlv);
1348 tlv += sizeof(*auto_ds_tlv);
1349 if (auto_ds)
1350 idletime = auto_ds->idle_time;
1351 dev_dbg(priv->adapter->dev,
1352 "cmd: PS Command: Enter Auto Deep Sleep\n");
1353 auto_ds_tlv->deep_sleep_timeout = cpu_to_le16(idletime);
1354 }
1355 cmd->size = cpu_to_le16(cmd_size);
1356 }
1357 return 0;
1358}
1359
1360/*
1361 * This function handles the command response of an enhanced power mode
1362 * command.
1363 *
1364 * Handling includes changing the header fields into CPU format
1365 * and setting the current enhanced power mode in driver.
1366 */
1367int mwifiex_ret_enh_power_mode(struct mwifiex_private *priv,
1368 struct host_cmd_ds_command *resp,
1369 struct mwifiex_ds_pm_cfg *pm_cfg)
1370{
1371 struct mwifiex_adapter *adapter = priv->adapter;
1372 struct host_cmd_ds_802_11_ps_mode_enh *ps_mode =
1373 &resp->params.psmode_enh;
1374 uint16_t action = le16_to_cpu(ps_mode->action);
1375 uint16_t ps_bitmap = le16_to_cpu(ps_mode->params.ps_bitmap);
1376 uint16_t auto_ps_bitmap =
1377 le16_to_cpu(ps_mode->params.ps_bitmap);
1378
1379 dev_dbg(adapter->dev,
1380 "info: %s: PS_MODE cmd reply result=%#x action=%#X\n",
1381 __func__, resp->result, action);
1382 if (action == EN_AUTO_PS) {
1383 if (auto_ps_bitmap & BITMAP_AUTO_DS) {
1384 dev_dbg(adapter->dev, "cmd: Enabled auto deep sleep\n");
1385 priv->adapter->is_deep_sleep = true;
1386 }
1387 if (auto_ps_bitmap & BITMAP_STA_PS) {
1388 dev_dbg(adapter->dev, "cmd: Enabled STA power save\n");
1389 if (adapter->sleep_period.period)
1390 dev_dbg(adapter->dev,
1391 "cmd: set to uapsd/pps mode\n");
1392 }
1393 } else if (action == DIS_AUTO_PS) {
1394 if (ps_bitmap & BITMAP_AUTO_DS) {
1395 priv->adapter->is_deep_sleep = false;
1396 dev_dbg(adapter->dev, "cmd: Disabled auto deep sleep\n");
1397 }
1398 if (ps_bitmap & BITMAP_STA_PS) {
1399 dev_dbg(adapter->dev, "cmd: Disabled STA power save\n");
1400 if (adapter->sleep_period.period) {
1401 adapter->delay_null_pkt = false;
1402 adapter->tx_lock_flag = false;
1403 adapter->pps_uapsd_mode = false;
1404 }
1405 }
1406 } else if (action == GET_PS) {
1407 if (ps_bitmap & BITMAP_STA_PS)
1408 adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_PSP;
1409 else
1410 adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_CAM;
1411
1412 dev_dbg(adapter->dev, "cmd: ps_bitmap=%#x\n", ps_bitmap);
1413
1414 if (pm_cfg) {
1415 /* This section is for get power save mode */
1416 if (ps_bitmap & BITMAP_STA_PS)
1417 pm_cfg->param.ps_mode = 1;
1418 else
1419 pm_cfg->param.ps_mode = 0;
1420 }
1421 }
1422 return 0;
1423}
1424
1425/*
1426 * This function prepares command to get hardware specifications.
1427 *
1428 * Preparation includes -
1429 * - Setting command ID, action and proper size
1430 * - Setting permanent address parameter
1431 * - Ensuring correct endian-ness
1432 */
1433int mwifiex_cmd_get_hw_spec(struct mwifiex_private *priv,
1434 struct host_cmd_ds_command *cmd)
1435{
1436 struct host_cmd_ds_get_hw_spec *hw_spec = &cmd->params.hw_spec;
1437
1438 cmd->command = cpu_to_le16(HostCmd_CMD_GET_HW_SPEC);
1439 cmd->size =
1440 cpu_to_le16(sizeof(struct host_cmd_ds_get_hw_spec) + S_DS_GEN);
1441 memcpy(hw_spec->permanent_addr, priv->curr_addr, ETH_ALEN);
1442
1443 return 0;
1444}
1445
1446/*
1447 * This function handles the command response of get hardware
1448 * specifications.
1449 *
1450 * Handling includes changing the header fields into CPU format
1451 * and saving/updating the following parameters in driver -
1452 * - Firmware capability information
1453 * - Firmware band settings
1454 * - Ad-hoc start band and channel
1455 * - Ad-hoc 11n activation status
1456 * - Firmware release number
1457 * - Number of antennas
1458 * - Hardware address
1459 * - Hardware interface version
1460 * - Firmware version
1461 * - Region code
1462 * - 11n capabilities
1463 * - MCS support fields
1464 * - MP end port
1465 */
1466int mwifiex_ret_get_hw_spec(struct mwifiex_private *priv,
1467 struct host_cmd_ds_command *resp)
1468{
1469 struct host_cmd_ds_get_hw_spec *hw_spec = &resp->params.hw_spec;
1470 struct mwifiex_adapter *adapter = priv->adapter;
1471 struct mwifiex_ie_types_header *tlv;
1472 struct hw_spec_fw_api_rev *api_rev;
1473 u16 resp_size, api_id;
1474 int i, left_len, parsed_len = 0;
1475
1476 adapter->fw_cap_info = le32_to_cpu(hw_spec->fw_cap_info);
1477
1478 if (IS_SUPPORT_MULTI_BANDS(adapter))
1479 adapter->fw_bands = (u8) GET_FW_DEFAULT_BANDS(adapter);
1480 else
1481 adapter->fw_bands = BAND_B;
1482
1483 adapter->config_bands = adapter->fw_bands;
1484
1485 if (adapter->fw_bands & BAND_A) {
1486 if (adapter->fw_bands & BAND_GN) {
1487 adapter->config_bands |= BAND_AN;
1488 adapter->fw_bands |= BAND_AN;
1489 }
1490 if (adapter->fw_bands & BAND_AN) {
1491 adapter->adhoc_start_band = BAND_A | BAND_AN;
1492 adapter->adhoc_11n_enabled = true;
1493 } else {
1494 adapter->adhoc_start_band = BAND_A;
1495 }
1496 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL_A;
1497 } else if (adapter->fw_bands & BAND_GN) {
1498 adapter->adhoc_start_band = BAND_G | BAND_B | BAND_GN;
1499 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1500 adapter->adhoc_11n_enabled = true;
1501 } else if (adapter->fw_bands & BAND_G) {
1502 adapter->adhoc_start_band = BAND_G | BAND_B;
1503 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1504 } else if (adapter->fw_bands & BAND_B) {
1505 adapter->adhoc_start_band = BAND_B;
1506 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1507 }
1508
1509 adapter->fw_release_number = le32_to_cpu(hw_spec->fw_release_number);
1510 adapter->fw_api_ver = (adapter->fw_release_number >> 16) & 0xff;
1511 adapter->number_of_antenna = le16_to_cpu(hw_spec->number_of_antenna);
1512
1513 if (le32_to_cpu(hw_spec->dot_11ac_dev_cap)) {
1514 adapter->is_hw_11ac_capable = true;
1515
1516 /* Copy 11AC cap */
1517 adapter->hw_dot_11ac_dev_cap =
1518 le32_to_cpu(hw_spec->dot_11ac_dev_cap);
1519 adapter->usr_dot_11ac_dev_cap_bg = adapter->hw_dot_11ac_dev_cap
1520 & ~MWIFIEX_DEF_11AC_CAP_BF_RESET_MASK;
1521 adapter->usr_dot_11ac_dev_cap_a = adapter->hw_dot_11ac_dev_cap
1522 & ~MWIFIEX_DEF_11AC_CAP_BF_RESET_MASK;
1523
1524 /* Copy 11AC mcs */
1525 adapter->hw_dot_11ac_mcs_support =
1526 le32_to_cpu(hw_spec->dot_11ac_mcs_support);
1527 adapter->usr_dot_11ac_mcs_support =
1528 adapter->hw_dot_11ac_mcs_support;
1529 } else {
1530 adapter->is_hw_11ac_capable = false;
1531 }
1532
1533 resp_size = le16_to_cpu(resp->size) - S_DS_GEN;
1534 if (resp_size > sizeof(struct host_cmd_ds_get_hw_spec)) {
1535 /* we have variable HW SPEC information */
1536 left_len = resp_size - sizeof(struct host_cmd_ds_get_hw_spec);
1537 while (left_len > sizeof(struct mwifiex_ie_types_header)) {
1538 tlv = (void *)&hw_spec->tlvs + parsed_len;
1539 switch (le16_to_cpu(tlv->type)) {
1540 case TLV_TYPE_FW_API_REV:
1541 api_rev = (struct hw_spec_fw_api_rev *)tlv;
1542 api_id = le16_to_cpu(api_rev->api_id);
1543 switch (api_id) {
1544 case KEY_API_VER_ID:
1545 adapter->fw_key_api_major_ver =
1546 api_rev->major_ver;
1547 adapter->fw_key_api_minor_ver =
1548 api_rev->minor_ver;
1549 dev_dbg(adapter->dev,
1550 "fw_key_api v%d.%d\n",
1551 adapter->fw_key_api_major_ver,
1552 adapter->fw_key_api_minor_ver);
1553 break;
1554 default:
1555 dev_warn(adapter->dev,
1556 "Unknown FW api_id: %d\n",
1557 api_id);
1558 break;
1559 }
1560 break;
1561 default:
1562 dev_warn(adapter->dev,
1563 "Unknown GET_HW_SPEC TLV type: %#x\n",
1564 le16_to_cpu(tlv->type));
1565 break;
1566 }
1567 parsed_len += le16_to_cpu(tlv->len) +
1568 sizeof(struct mwifiex_ie_types_header);
1569 left_len -= parsed_len;
1570 }
1571 }
1572
1573 dev_dbg(adapter->dev, "info: GET_HW_SPEC: fw_release_number- %#x\n",
1574 adapter->fw_release_number);
1575 dev_dbg(adapter->dev, "info: GET_HW_SPEC: permanent addr: %pM\n",
1576 hw_spec->permanent_addr);
1577 dev_dbg(adapter->dev,
1578 "info: GET_HW_SPEC: hw_if_version=%#x version=%#x\n",
1579 le16_to_cpu(hw_spec->hw_if_version),
1580 le16_to_cpu(hw_spec->version));
1581
1582 if (priv->curr_addr[0] == 0xff)
1583 memmove(priv->curr_addr, hw_spec->permanent_addr, ETH_ALEN);
1584
1585 adapter->region_code = le16_to_cpu(hw_spec->region_code);
1586
1587 for (i = 0; i < MWIFIEX_MAX_REGION_CODE; i++)
1588 /* Use the region code to search for the index */
1589 if (adapter->region_code == region_code_index[i])
1590 break;
1591
1592 /* If it's unidentified region code, use the default (USA) */
1593 if (i >= MWIFIEX_MAX_REGION_CODE) {
1594 adapter->region_code = 0x10;
1595 dev_dbg(adapter->dev,
1596 "cmd: unknown region code, use default (USA)\n");
1597 }
1598
1599 adapter->hw_dot_11n_dev_cap = le32_to_cpu(hw_spec->dot_11n_dev_cap);
1600 adapter->hw_dev_mcs_support = hw_spec->dev_mcs_support;
1601 adapter->user_dev_mcs_support = adapter->hw_dev_mcs_support;
1602
1603 if (adapter->if_ops.update_mp_end_port)
1604 adapter->if_ops.update_mp_end_port(adapter,
1605 le16_to_cpu(hw_spec->mp_end_port));
1606
1607 return 0;
1608}