Loading...
1/*
2 * Copyright (c) 2010-2011 Atheros Communications Inc.
3 *
4 * Permission to use, copy, modify, and/or distribute this software for any
5 * purpose with or without fee is hereby granted, provided that the above
6 * copyright notice and this permission notice appear in all copies.
7 *
8 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
15 */
16
17#include <asm/unaligned.h>
18#include "htc.h"
19
20MODULE_FIRMWARE(HTC_7010_MODULE_FW);
21MODULE_FIRMWARE(HTC_9271_MODULE_FW);
22
23static const struct usb_device_id ath9k_hif_usb_ids[] = {
24 { USB_DEVICE(0x0cf3, 0x9271) }, /* Atheros */
25 { USB_DEVICE(0x0cf3, 0x1006) }, /* Atheros */
26 { USB_DEVICE(0x0846, 0x9030) }, /* Netgear N150 */
27 { USB_DEVICE(0x07b8, 0x9271) }, /* Altai WA1011N-GU */
28 { USB_DEVICE(0x07D1, 0x3A10) }, /* Dlink Wireless 150 */
29 { USB_DEVICE(0x13D3, 0x3327) }, /* Azurewave */
30 { USB_DEVICE(0x13D3, 0x3328) }, /* Azurewave */
31 { USB_DEVICE(0x13D3, 0x3346) }, /* IMC Networks */
32 { USB_DEVICE(0x13D3, 0x3348) }, /* Azurewave */
33 { USB_DEVICE(0x13D3, 0x3349) }, /* Azurewave */
34 { USB_DEVICE(0x13D3, 0x3350) }, /* Azurewave */
35 { USB_DEVICE(0x04CA, 0x4605) }, /* Liteon */
36 { USB_DEVICE(0x040D, 0x3801) }, /* VIA */
37 { USB_DEVICE(0x0cf3, 0xb003) }, /* Ubiquiti WifiStation Ext */
38 { USB_DEVICE(0x0cf3, 0xb002) }, /* Ubiquiti WifiStation */
39 { USB_DEVICE(0x057c, 0x8403) }, /* AVM FRITZ!WLAN 11N v2 USB */
40 { USB_DEVICE(0x0471, 0x209e) }, /* Philips (or NXP) PTA01 */
41 { USB_DEVICE(0x1eda, 0x2315) }, /* AirTies */
42
43 { USB_DEVICE(0x0cf3, 0x7015),
44 .driver_info = AR9287_USB }, /* Atheros */
45
46 { USB_DEVICE(0x0cf3, 0x7010),
47 .driver_info = AR9280_USB }, /* Atheros */
48 { USB_DEVICE(0x0846, 0x9018),
49 .driver_info = AR9280_USB }, /* Netgear WNDA3200 */
50 { USB_DEVICE(0x083A, 0xA704),
51 .driver_info = AR9280_USB }, /* SMC Networks */
52 { USB_DEVICE(0x0411, 0x017f),
53 .driver_info = AR9280_USB }, /* Sony UWA-BR100 */
54 { USB_DEVICE(0x0411, 0x0197),
55 .driver_info = AR9280_USB }, /* Buffalo WLI-UV-AG300P */
56 { USB_DEVICE(0x04da, 0x3904),
57 .driver_info = AR9280_USB },
58 { USB_DEVICE(0x0930, 0x0a08),
59 .driver_info = AR9280_USB }, /* Toshiba WLM-20U2 and GN-1080 */
60
61 { USB_DEVICE(0x0cf3, 0x20ff),
62 .driver_info = STORAGE_DEVICE },
63
64 { },
65};
66
67MODULE_DEVICE_TABLE(usb, ath9k_hif_usb_ids);
68
69static int __hif_usb_tx(struct hif_device_usb *hif_dev);
70
71static void hif_usb_regout_cb(struct urb *urb)
72{
73 struct cmd_buf *cmd = urb->context;
74
75 switch (urb->status) {
76 case 0:
77 break;
78 case -ENOENT:
79 case -ECONNRESET:
80 case -ENODEV:
81 case -ESHUTDOWN:
82 goto free;
83 default:
84 break;
85 }
86
87 if (cmd) {
88 ath9k_htc_txcompletion_cb(cmd->hif_dev->htc_handle,
89 cmd->skb, true);
90 kfree(cmd);
91 }
92
93 return;
94free:
95 kfree_skb(cmd->skb);
96 kfree(cmd);
97}
98
99static int hif_usb_send_regout(struct hif_device_usb *hif_dev,
100 struct sk_buff *skb)
101{
102 struct urb *urb;
103 struct cmd_buf *cmd;
104 int ret = 0;
105
106 urb = usb_alloc_urb(0, GFP_KERNEL);
107 if (urb == NULL)
108 return -ENOMEM;
109
110 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
111 if (cmd == NULL) {
112 usb_free_urb(urb);
113 return -ENOMEM;
114 }
115
116 cmd->skb = skb;
117 cmd->hif_dev = hif_dev;
118
119 usb_fill_int_urb(urb, hif_dev->udev,
120 usb_sndintpipe(hif_dev->udev, USB_REG_OUT_PIPE),
121 skb->data, skb->len,
122 hif_usb_regout_cb, cmd, 1);
123
124 usb_anchor_urb(urb, &hif_dev->regout_submitted);
125 ret = usb_submit_urb(urb, GFP_KERNEL);
126 if (ret) {
127 usb_unanchor_urb(urb);
128 kfree(cmd);
129 }
130 usb_free_urb(urb);
131
132 return ret;
133}
134
135static void hif_usb_mgmt_cb(struct urb *urb)
136{
137 struct cmd_buf *cmd = urb->context;
138 struct hif_device_usb *hif_dev;
139 unsigned long flags;
140 bool txok = true;
141
142 if (!cmd || !cmd->skb || !cmd->hif_dev)
143 return;
144
145 hif_dev = cmd->hif_dev;
146
147 switch (urb->status) {
148 case 0:
149 break;
150 case -ENOENT:
151 case -ECONNRESET:
152 case -ENODEV:
153 case -ESHUTDOWN:
154 txok = false;
155
156 /*
157 * If the URBs are being flushed, no need to complete
158 * this packet.
159 */
160 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
161 if (hif_dev->tx.flags & HIF_USB_TX_FLUSH) {
162 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
163 dev_kfree_skb_any(cmd->skb);
164 kfree(cmd);
165 return;
166 }
167 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
168
169 break;
170 default:
171 txok = false;
172 break;
173 }
174
175 skb_pull(cmd->skb, 4);
176 ath9k_htc_txcompletion_cb(cmd->hif_dev->htc_handle,
177 cmd->skb, txok);
178 kfree(cmd);
179}
180
181static int hif_usb_send_mgmt(struct hif_device_usb *hif_dev,
182 struct sk_buff *skb)
183{
184 struct urb *urb;
185 struct cmd_buf *cmd;
186 int ret = 0;
187 __le16 *hdr;
188
189 urb = usb_alloc_urb(0, GFP_ATOMIC);
190 if (urb == NULL)
191 return -ENOMEM;
192
193 cmd = kzalloc(sizeof(*cmd), GFP_ATOMIC);
194 if (cmd == NULL) {
195 usb_free_urb(urb);
196 return -ENOMEM;
197 }
198
199 cmd->skb = skb;
200 cmd->hif_dev = hif_dev;
201
202 hdr = skb_push(skb, 4);
203 *hdr++ = cpu_to_le16(skb->len - 4);
204 *hdr++ = cpu_to_le16(ATH_USB_TX_STREAM_MODE_TAG);
205
206 usb_fill_bulk_urb(urb, hif_dev->udev,
207 usb_sndbulkpipe(hif_dev->udev, USB_WLAN_TX_PIPE),
208 skb->data, skb->len,
209 hif_usb_mgmt_cb, cmd);
210
211 usb_anchor_urb(urb, &hif_dev->mgmt_submitted);
212 ret = usb_submit_urb(urb, GFP_ATOMIC);
213 if (ret) {
214 usb_unanchor_urb(urb);
215 kfree(cmd);
216 }
217 usb_free_urb(urb);
218
219 return ret;
220}
221
222static inline void ath9k_skb_queue_purge(struct hif_device_usb *hif_dev,
223 struct sk_buff_head *list)
224{
225 struct sk_buff *skb;
226
227 while ((skb = __skb_dequeue(list)) != NULL) {
228 dev_kfree_skb_any(skb);
229 }
230}
231
232static inline void ath9k_skb_queue_complete(struct hif_device_usb *hif_dev,
233 struct sk_buff_head *queue,
234 bool txok)
235{
236 struct sk_buff *skb;
237
238 while ((skb = __skb_dequeue(queue)) != NULL) {
239#ifdef CONFIG_ATH9K_HTC_DEBUGFS
240 int ln = skb->len;
241#endif
242 ath9k_htc_txcompletion_cb(hif_dev->htc_handle,
243 skb, txok);
244 if (txok) {
245 TX_STAT_INC(hif_dev, skb_success);
246 TX_STAT_ADD(hif_dev, skb_success_bytes, ln);
247 }
248 else
249 TX_STAT_INC(hif_dev, skb_failed);
250 }
251}
252
253static void hif_usb_tx_cb(struct urb *urb)
254{
255 struct tx_buf *tx_buf = urb->context;
256 struct hif_device_usb *hif_dev;
257 bool txok = true;
258
259 if (!tx_buf || !tx_buf->hif_dev)
260 return;
261
262 hif_dev = tx_buf->hif_dev;
263
264 switch (urb->status) {
265 case 0:
266 break;
267 case -ENOENT:
268 case -ECONNRESET:
269 case -ENODEV:
270 case -ESHUTDOWN:
271 txok = false;
272
273 /*
274 * If the URBs are being flushed, no need to add this
275 * URB to the free list.
276 */
277 spin_lock(&hif_dev->tx.tx_lock);
278 if (hif_dev->tx.flags & HIF_USB_TX_FLUSH) {
279 spin_unlock(&hif_dev->tx.tx_lock);
280 ath9k_skb_queue_purge(hif_dev, &tx_buf->skb_queue);
281 return;
282 }
283 spin_unlock(&hif_dev->tx.tx_lock);
284
285 break;
286 default:
287 txok = false;
288 break;
289 }
290
291 ath9k_skb_queue_complete(hif_dev, &tx_buf->skb_queue, txok);
292
293 /* Re-initialize the SKB queue */
294 tx_buf->len = tx_buf->offset = 0;
295 __skb_queue_head_init(&tx_buf->skb_queue);
296
297 /* Add this TX buffer to the free list */
298 spin_lock(&hif_dev->tx.tx_lock);
299 list_move_tail(&tx_buf->list, &hif_dev->tx.tx_buf);
300 hif_dev->tx.tx_buf_cnt++;
301 if (!(hif_dev->tx.flags & HIF_USB_TX_STOP))
302 __hif_usb_tx(hif_dev); /* Check for pending SKBs */
303 TX_STAT_INC(hif_dev, buf_completed);
304 spin_unlock(&hif_dev->tx.tx_lock);
305}
306
307/* TX lock has to be taken */
308static int __hif_usb_tx(struct hif_device_usb *hif_dev)
309{
310 struct tx_buf *tx_buf = NULL;
311 struct sk_buff *nskb = NULL;
312 int ret = 0, i;
313 u16 tx_skb_cnt = 0;
314 u8 *buf;
315 __le16 *hdr;
316
317 if (hif_dev->tx.tx_skb_cnt == 0)
318 return 0;
319
320 /* Check if a free TX buffer is available */
321 if (list_empty(&hif_dev->tx.tx_buf))
322 return 0;
323
324 tx_buf = list_first_entry(&hif_dev->tx.tx_buf, struct tx_buf, list);
325 list_move_tail(&tx_buf->list, &hif_dev->tx.tx_pending);
326 hif_dev->tx.tx_buf_cnt--;
327
328 tx_skb_cnt = min_t(u16, hif_dev->tx.tx_skb_cnt, MAX_TX_AGGR_NUM);
329
330 for (i = 0; i < tx_skb_cnt; i++) {
331 nskb = __skb_dequeue(&hif_dev->tx.tx_skb_queue);
332
333 /* Should never be NULL */
334 BUG_ON(!nskb);
335
336 hif_dev->tx.tx_skb_cnt--;
337
338 buf = tx_buf->buf;
339 buf += tx_buf->offset;
340 hdr = (__le16 *)buf;
341 *hdr++ = cpu_to_le16(nskb->len);
342 *hdr++ = cpu_to_le16(ATH_USB_TX_STREAM_MODE_TAG);
343 buf += 4;
344 memcpy(buf, nskb->data, nskb->len);
345 tx_buf->len = nskb->len + 4;
346
347 if (i < (tx_skb_cnt - 1))
348 tx_buf->offset += (((tx_buf->len - 1) / 4) + 1) * 4;
349
350 if (i == (tx_skb_cnt - 1))
351 tx_buf->len += tx_buf->offset;
352
353 __skb_queue_tail(&tx_buf->skb_queue, nskb);
354 TX_STAT_INC(hif_dev, skb_queued);
355 }
356
357 usb_fill_bulk_urb(tx_buf->urb, hif_dev->udev,
358 usb_sndbulkpipe(hif_dev->udev, USB_WLAN_TX_PIPE),
359 tx_buf->buf, tx_buf->len,
360 hif_usb_tx_cb, tx_buf);
361
362 ret = usb_submit_urb(tx_buf->urb, GFP_ATOMIC);
363 if (ret) {
364 tx_buf->len = tx_buf->offset = 0;
365 ath9k_skb_queue_complete(hif_dev, &tx_buf->skb_queue, false);
366 __skb_queue_head_init(&tx_buf->skb_queue);
367 list_move_tail(&tx_buf->list, &hif_dev->tx.tx_buf);
368 hif_dev->tx.tx_buf_cnt++;
369 } else {
370 TX_STAT_INC(hif_dev, buf_queued);
371 }
372
373 return ret;
374}
375
376static int hif_usb_send_tx(struct hif_device_usb *hif_dev, struct sk_buff *skb)
377{
378 struct ath9k_htc_tx_ctl *tx_ctl;
379 unsigned long flags;
380 int ret = 0;
381
382 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
383
384 if (hif_dev->tx.flags & HIF_USB_TX_STOP) {
385 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
386 return -ENODEV;
387 }
388
389 /* Check if the max queue count has been reached */
390 if (hif_dev->tx.tx_skb_cnt > MAX_TX_BUF_NUM) {
391 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
392 return -ENOMEM;
393 }
394
395 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
396
397 tx_ctl = HTC_SKB_CB(skb);
398
399 /* Mgmt/Beacon frames don't use the TX buffer pool */
400 if ((tx_ctl->type == ATH9K_HTC_MGMT) ||
401 (tx_ctl->type == ATH9K_HTC_BEACON)) {
402 ret = hif_usb_send_mgmt(hif_dev, skb);
403 }
404
405 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
406
407 if ((tx_ctl->type == ATH9K_HTC_NORMAL) ||
408 (tx_ctl->type == ATH9K_HTC_AMPDU)) {
409 __skb_queue_tail(&hif_dev->tx.tx_skb_queue, skb);
410 hif_dev->tx.tx_skb_cnt++;
411 }
412
413 /* Check if AMPDUs have to be sent immediately */
414 if ((hif_dev->tx.tx_buf_cnt == MAX_TX_URB_NUM) &&
415 (hif_dev->tx.tx_skb_cnt < 2)) {
416 __hif_usb_tx(hif_dev);
417 }
418
419 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
420
421 return ret;
422}
423
424static void hif_usb_start(void *hif_handle)
425{
426 struct hif_device_usb *hif_dev = hif_handle;
427 unsigned long flags;
428
429 hif_dev->flags |= HIF_USB_START;
430
431 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
432 hif_dev->tx.flags &= ~HIF_USB_TX_STOP;
433 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
434}
435
436static void hif_usb_stop(void *hif_handle)
437{
438 struct hif_device_usb *hif_dev = hif_handle;
439 struct tx_buf *tx_buf = NULL, *tx_buf_tmp = NULL;
440 unsigned long flags;
441
442 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
443 ath9k_skb_queue_complete(hif_dev, &hif_dev->tx.tx_skb_queue, false);
444 hif_dev->tx.tx_skb_cnt = 0;
445 hif_dev->tx.flags |= HIF_USB_TX_STOP;
446 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
447
448 /* The pending URBs have to be canceled. */
449 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
450 list_for_each_entry_safe(tx_buf, tx_buf_tmp,
451 &hif_dev->tx.tx_pending, list) {
452 usb_get_urb(tx_buf->urb);
453 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
454 usb_kill_urb(tx_buf->urb);
455 list_del(&tx_buf->list);
456 usb_free_urb(tx_buf->urb);
457 kfree(tx_buf->buf);
458 kfree(tx_buf);
459 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
460 }
461 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
462
463 usb_kill_anchored_urbs(&hif_dev->mgmt_submitted);
464}
465
466static int hif_usb_send(void *hif_handle, u8 pipe_id, struct sk_buff *skb)
467{
468 struct hif_device_usb *hif_dev = hif_handle;
469 int ret = 0;
470
471 switch (pipe_id) {
472 case USB_WLAN_TX_PIPE:
473 ret = hif_usb_send_tx(hif_dev, skb);
474 break;
475 case USB_REG_OUT_PIPE:
476 ret = hif_usb_send_regout(hif_dev, skb);
477 break;
478 default:
479 dev_err(&hif_dev->udev->dev,
480 "ath9k_htc: Invalid TX pipe: %d\n", pipe_id);
481 ret = -EINVAL;
482 break;
483 }
484
485 return ret;
486}
487
488static inline bool check_index(struct sk_buff *skb, u8 idx)
489{
490 struct ath9k_htc_tx_ctl *tx_ctl;
491
492 tx_ctl = HTC_SKB_CB(skb);
493
494 if ((tx_ctl->type == ATH9K_HTC_AMPDU) &&
495 (tx_ctl->sta_idx == idx))
496 return true;
497
498 return false;
499}
500
501static void hif_usb_sta_drain(void *hif_handle, u8 idx)
502{
503 struct hif_device_usb *hif_dev = hif_handle;
504 struct sk_buff *skb, *tmp;
505 unsigned long flags;
506
507 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
508
509 skb_queue_walk_safe(&hif_dev->tx.tx_skb_queue, skb, tmp) {
510 if (check_index(skb, idx)) {
511 __skb_unlink(skb, &hif_dev->tx.tx_skb_queue);
512 ath9k_htc_txcompletion_cb(hif_dev->htc_handle,
513 skb, false);
514 hif_dev->tx.tx_skb_cnt--;
515 TX_STAT_INC(hif_dev, skb_failed);
516 }
517 }
518
519 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
520}
521
522static struct ath9k_htc_hif hif_usb = {
523 .transport = ATH9K_HIF_USB,
524 .name = "ath9k_hif_usb",
525
526 .control_ul_pipe = USB_REG_OUT_PIPE,
527 .control_dl_pipe = USB_REG_IN_PIPE,
528
529 .start = hif_usb_start,
530 .stop = hif_usb_stop,
531 .sta_drain = hif_usb_sta_drain,
532 .send = hif_usb_send,
533};
534
535/* Need to free remain_skb allocated in ath9k_hif_usb_rx_stream
536 * in case ath9k_hif_usb_rx_stream wasn't called next time to
537 * process the buffer and subsequently free it.
538 */
539static void ath9k_hif_usb_free_rx_remain_skb(struct hif_device_usb *hif_dev)
540{
541 unsigned long flags;
542
543 spin_lock_irqsave(&hif_dev->rx_lock, flags);
544 if (hif_dev->remain_skb) {
545 dev_kfree_skb_any(hif_dev->remain_skb);
546 hif_dev->remain_skb = NULL;
547 hif_dev->rx_remain_len = 0;
548 RX_STAT_INC(hif_dev, skb_dropped);
549 }
550 spin_unlock_irqrestore(&hif_dev->rx_lock, flags);
551}
552
553static void ath9k_hif_usb_rx_stream(struct hif_device_usb *hif_dev,
554 struct sk_buff *skb)
555{
556 struct sk_buff *nskb, *skb_pool[MAX_PKT_NUM_IN_TRANSFER];
557 int index = 0, i, len = skb->len;
558 int rx_remain_len, rx_pkt_len;
559 u16 pool_index = 0;
560 u8 *ptr;
561
562 spin_lock(&hif_dev->rx_lock);
563
564 rx_remain_len = hif_dev->rx_remain_len;
565 rx_pkt_len = hif_dev->rx_transfer_len;
566
567 if (rx_remain_len != 0) {
568 struct sk_buff *remain_skb = hif_dev->remain_skb;
569
570 if (remain_skb) {
571 ptr = (u8 *) remain_skb->data;
572
573 index = rx_remain_len;
574 rx_remain_len -= hif_dev->rx_pad_len;
575 ptr += rx_pkt_len;
576
577 memcpy(ptr, skb->data, rx_remain_len);
578
579 rx_pkt_len += rx_remain_len;
580 skb_put(remain_skb, rx_pkt_len);
581
582 skb_pool[pool_index++] = remain_skb;
583 hif_dev->remain_skb = NULL;
584 hif_dev->rx_remain_len = 0;
585 } else {
586 index = rx_remain_len;
587 }
588 }
589
590 spin_unlock(&hif_dev->rx_lock);
591
592 while (index < len) {
593 u16 pkt_len;
594 u16 pkt_tag;
595 u16 pad_len;
596 int chk_idx;
597
598 ptr = (u8 *) skb->data;
599
600 pkt_len = get_unaligned_le16(ptr + index);
601 pkt_tag = get_unaligned_le16(ptr + index + 2);
602
603 /* It is supposed that if we have an invalid pkt_tag or
604 * pkt_len then the whole input SKB is considered invalid
605 * and dropped; the associated packets already in skb_pool
606 * are dropped, too.
607 */
608 if (pkt_tag != ATH_USB_RX_STREAM_MODE_TAG) {
609 RX_STAT_INC(hif_dev, skb_dropped);
610 goto invalid_pkt;
611 }
612
613 if (pkt_len > 2 * MAX_RX_BUF_SIZE) {
614 dev_err(&hif_dev->udev->dev,
615 "ath9k_htc: invalid pkt_len (%x)\n", pkt_len);
616 RX_STAT_INC(hif_dev, skb_dropped);
617 goto invalid_pkt;
618 }
619
620 pad_len = 4 - (pkt_len & 0x3);
621 if (pad_len == 4)
622 pad_len = 0;
623
624 chk_idx = index;
625 index = index + 4 + pkt_len + pad_len;
626
627 if (index > MAX_RX_BUF_SIZE) {
628 spin_lock(&hif_dev->rx_lock);
629 nskb = __dev_alloc_skb(pkt_len + 32, GFP_ATOMIC);
630 if (!nskb) {
631 dev_err(&hif_dev->udev->dev,
632 "ath9k_htc: RX memory allocation error\n");
633 spin_unlock(&hif_dev->rx_lock);
634 goto err;
635 }
636
637 hif_dev->rx_remain_len = index - MAX_RX_BUF_SIZE;
638 hif_dev->rx_transfer_len =
639 MAX_RX_BUF_SIZE - chk_idx - 4;
640 hif_dev->rx_pad_len = pad_len;
641
642 skb_reserve(nskb, 32);
643 RX_STAT_INC(hif_dev, skb_allocated);
644
645 memcpy(nskb->data, &(skb->data[chk_idx+4]),
646 hif_dev->rx_transfer_len);
647
648 /* Record the buffer pointer */
649 hif_dev->remain_skb = nskb;
650 spin_unlock(&hif_dev->rx_lock);
651 } else {
652 if (pool_index == MAX_PKT_NUM_IN_TRANSFER) {
653 dev_err(&hif_dev->udev->dev,
654 "ath9k_htc: over RX MAX_PKT_NUM\n");
655 goto err;
656 }
657 nskb = __dev_alloc_skb(pkt_len + 32, GFP_ATOMIC);
658 if (!nskb) {
659 dev_err(&hif_dev->udev->dev,
660 "ath9k_htc: RX memory allocation error\n");
661 goto err;
662 }
663 skb_reserve(nskb, 32);
664 RX_STAT_INC(hif_dev, skb_allocated);
665
666 memcpy(nskb->data, &(skb->data[chk_idx+4]), pkt_len);
667 skb_put(nskb, pkt_len);
668 skb_pool[pool_index++] = nskb;
669 }
670 }
671
672err:
673 for (i = 0; i < pool_index; i++) {
674 RX_STAT_ADD(hif_dev, skb_completed_bytes, skb_pool[i]->len);
675 ath9k_htc_rx_msg(hif_dev->htc_handle, skb_pool[i],
676 skb_pool[i]->len, USB_WLAN_RX_PIPE);
677 RX_STAT_INC(hif_dev, skb_completed);
678 }
679 return;
680invalid_pkt:
681 for (i = 0; i < pool_index; i++) {
682 dev_kfree_skb_any(skb_pool[i]);
683 RX_STAT_INC(hif_dev, skb_dropped);
684 }
685 return;
686}
687
688static void ath9k_hif_usb_rx_cb(struct urb *urb)
689{
690 struct rx_buf *rx_buf = urb->context;
691 struct hif_device_usb *hif_dev = rx_buf->hif_dev;
692 struct sk_buff *skb = rx_buf->skb;
693 int ret;
694
695 if (!skb)
696 return;
697
698 if (!hif_dev)
699 goto free;
700
701 switch (urb->status) {
702 case 0:
703 break;
704 case -ENOENT:
705 case -ECONNRESET:
706 case -ENODEV:
707 case -ESHUTDOWN:
708 goto free;
709 default:
710 goto resubmit;
711 }
712
713 if (likely(urb->actual_length != 0)) {
714 skb_put(skb, urb->actual_length);
715 ath9k_hif_usb_rx_stream(hif_dev, skb);
716 }
717
718resubmit:
719 skb_reset_tail_pointer(skb);
720 skb_trim(skb, 0);
721
722 usb_anchor_urb(urb, &hif_dev->rx_submitted);
723 ret = usb_submit_urb(urb, GFP_ATOMIC);
724 if (ret) {
725 usb_unanchor_urb(urb);
726 goto free;
727 }
728
729 return;
730free:
731 kfree_skb(skb);
732 kfree(rx_buf);
733}
734
735static void ath9k_hif_usb_reg_in_cb(struct urb *urb)
736{
737 struct rx_buf *rx_buf = urb->context;
738 struct hif_device_usb *hif_dev = rx_buf->hif_dev;
739 struct sk_buff *skb = rx_buf->skb;
740 int ret;
741
742 if (!skb)
743 return;
744
745 if (!hif_dev)
746 goto free_skb;
747
748 switch (urb->status) {
749 case 0:
750 break;
751 case -ENOENT:
752 case -ECONNRESET:
753 case -ENODEV:
754 case -ESHUTDOWN:
755 goto free_skb;
756 default:
757 skb_reset_tail_pointer(skb);
758 skb_trim(skb, 0);
759
760 goto resubmit;
761 }
762
763 if (likely(urb->actual_length != 0)) {
764 skb_put(skb, urb->actual_length);
765
766 /*
767 * Process the command first.
768 * skb is either freed here or passed to be
769 * managed to another callback function.
770 */
771 ath9k_htc_rx_msg(hif_dev->htc_handle, skb,
772 skb->len, USB_REG_IN_PIPE);
773
774 skb = alloc_skb(MAX_REG_IN_BUF_SIZE, GFP_ATOMIC);
775 if (!skb) {
776 dev_err(&hif_dev->udev->dev,
777 "ath9k_htc: REG_IN memory allocation failure\n");
778 goto free_rx_buf;
779 }
780
781 rx_buf->skb = skb;
782
783 usb_fill_int_urb(urb, hif_dev->udev,
784 usb_rcvintpipe(hif_dev->udev,
785 USB_REG_IN_PIPE),
786 skb->data, MAX_REG_IN_BUF_SIZE,
787 ath9k_hif_usb_reg_in_cb, rx_buf, 1);
788 }
789
790resubmit:
791 usb_anchor_urb(urb, &hif_dev->reg_in_submitted);
792 ret = usb_submit_urb(urb, GFP_ATOMIC);
793 if (ret) {
794 usb_unanchor_urb(urb);
795 goto free_skb;
796 }
797
798 return;
799free_skb:
800 kfree_skb(skb);
801free_rx_buf:
802 kfree(rx_buf);
803 urb->context = NULL;
804}
805
806static void ath9k_hif_usb_dealloc_tx_urbs(struct hif_device_usb *hif_dev)
807{
808 struct tx_buf *tx_buf = NULL, *tx_buf_tmp = NULL;
809 unsigned long flags;
810
811 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
812 list_for_each_entry_safe(tx_buf, tx_buf_tmp,
813 &hif_dev->tx.tx_buf, list) {
814 list_del(&tx_buf->list);
815 usb_free_urb(tx_buf->urb);
816 kfree(tx_buf->buf);
817 kfree(tx_buf);
818 }
819 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
820
821 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
822 hif_dev->tx.flags |= HIF_USB_TX_FLUSH;
823 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
824
825 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
826 list_for_each_entry_safe(tx_buf, tx_buf_tmp,
827 &hif_dev->tx.tx_pending, list) {
828 usb_get_urb(tx_buf->urb);
829 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
830 usb_kill_urb(tx_buf->urb);
831 list_del(&tx_buf->list);
832 usb_free_urb(tx_buf->urb);
833 kfree(tx_buf->buf);
834 kfree(tx_buf);
835 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
836 }
837 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
838
839 usb_kill_anchored_urbs(&hif_dev->mgmt_submitted);
840}
841
842static int ath9k_hif_usb_alloc_tx_urbs(struct hif_device_usb *hif_dev)
843{
844 struct tx_buf *tx_buf;
845 int i;
846
847 INIT_LIST_HEAD(&hif_dev->tx.tx_buf);
848 INIT_LIST_HEAD(&hif_dev->tx.tx_pending);
849 spin_lock_init(&hif_dev->tx.tx_lock);
850 __skb_queue_head_init(&hif_dev->tx.tx_skb_queue);
851 init_usb_anchor(&hif_dev->mgmt_submitted);
852
853 for (i = 0; i < MAX_TX_URB_NUM; i++) {
854 tx_buf = kzalloc(sizeof(*tx_buf), GFP_KERNEL);
855 if (!tx_buf)
856 goto err;
857
858 tx_buf->buf = kzalloc(MAX_TX_BUF_SIZE, GFP_KERNEL);
859 if (!tx_buf->buf)
860 goto err;
861
862 tx_buf->urb = usb_alloc_urb(0, GFP_KERNEL);
863 if (!tx_buf->urb)
864 goto err;
865
866 tx_buf->hif_dev = hif_dev;
867 __skb_queue_head_init(&tx_buf->skb_queue);
868
869 list_add_tail(&tx_buf->list, &hif_dev->tx.tx_buf);
870 }
871
872 hif_dev->tx.tx_buf_cnt = MAX_TX_URB_NUM;
873
874 return 0;
875err:
876 if (tx_buf) {
877 kfree(tx_buf->buf);
878 kfree(tx_buf);
879 }
880 ath9k_hif_usb_dealloc_tx_urbs(hif_dev);
881 return -ENOMEM;
882}
883
884static void ath9k_hif_usb_dealloc_rx_urbs(struct hif_device_usb *hif_dev)
885{
886 usb_kill_anchored_urbs(&hif_dev->rx_submitted);
887 ath9k_hif_usb_free_rx_remain_skb(hif_dev);
888}
889
890static int ath9k_hif_usb_alloc_rx_urbs(struct hif_device_usb *hif_dev)
891{
892 struct rx_buf *rx_buf = NULL;
893 struct sk_buff *skb = NULL;
894 struct urb *urb = NULL;
895 int i, ret;
896
897 init_usb_anchor(&hif_dev->rx_submitted);
898 spin_lock_init(&hif_dev->rx_lock);
899
900 for (i = 0; i < MAX_RX_URB_NUM; i++) {
901
902 rx_buf = kzalloc(sizeof(*rx_buf), GFP_KERNEL);
903 if (!rx_buf) {
904 ret = -ENOMEM;
905 goto err_rxb;
906 }
907
908 /* Allocate URB */
909 urb = usb_alloc_urb(0, GFP_KERNEL);
910 if (urb == NULL) {
911 ret = -ENOMEM;
912 goto err_urb;
913 }
914
915 /* Allocate buffer */
916 skb = alloc_skb(MAX_RX_BUF_SIZE, GFP_KERNEL);
917 if (!skb) {
918 ret = -ENOMEM;
919 goto err_skb;
920 }
921
922 rx_buf->hif_dev = hif_dev;
923 rx_buf->skb = skb;
924
925 usb_fill_bulk_urb(urb, hif_dev->udev,
926 usb_rcvbulkpipe(hif_dev->udev,
927 USB_WLAN_RX_PIPE),
928 skb->data, MAX_RX_BUF_SIZE,
929 ath9k_hif_usb_rx_cb, rx_buf);
930
931 /* Anchor URB */
932 usb_anchor_urb(urb, &hif_dev->rx_submitted);
933
934 /* Submit URB */
935 ret = usb_submit_urb(urb, GFP_KERNEL);
936 if (ret) {
937 usb_unanchor_urb(urb);
938 goto err_submit;
939 }
940
941 /*
942 * Drop reference count.
943 * This ensures that the URB is freed when killing them.
944 */
945 usb_free_urb(urb);
946 }
947
948 return 0;
949
950err_submit:
951 kfree_skb(skb);
952err_skb:
953 usb_free_urb(urb);
954err_urb:
955 kfree(rx_buf);
956err_rxb:
957 ath9k_hif_usb_dealloc_rx_urbs(hif_dev);
958 return ret;
959}
960
961static void ath9k_hif_usb_dealloc_reg_in_urbs(struct hif_device_usb *hif_dev)
962{
963 usb_kill_anchored_urbs(&hif_dev->reg_in_submitted);
964}
965
966static int ath9k_hif_usb_alloc_reg_in_urbs(struct hif_device_usb *hif_dev)
967{
968 struct rx_buf *rx_buf = NULL;
969 struct sk_buff *skb = NULL;
970 struct urb *urb = NULL;
971 int i, ret;
972
973 init_usb_anchor(&hif_dev->reg_in_submitted);
974
975 for (i = 0; i < MAX_REG_IN_URB_NUM; i++) {
976
977 rx_buf = kzalloc(sizeof(*rx_buf), GFP_KERNEL);
978 if (!rx_buf) {
979 ret = -ENOMEM;
980 goto err_rxb;
981 }
982
983 /* Allocate URB */
984 urb = usb_alloc_urb(0, GFP_KERNEL);
985 if (urb == NULL) {
986 ret = -ENOMEM;
987 goto err_urb;
988 }
989
990 /* Allocate buffer */
991 skb = alloc_skb(MAX_REG_IN_BUF_SIZE, GFP_KERNEL);
992 if (!skb) {
993 ret = -ENOMEM;
994 goto err_skb;
995 }
996
997 rx_buf->hif_dev = hif_dev;
998 rx_buf->skb = skb;
999
1000 usb_fill_int_urb(urb, hif_dev->udev,
1001 usb_rcvintpipe(hif_dev->udev,
1002 USB_REG_IN_PIPE),
1003 skb->data, MAX_REG_IN_BUF_SIZE,
1004 ath9k_hif_usb_reg_in_cb, rx_buf, 1);
1005
1006 /* Anchor URB */
1007 usb_anchor_urb(urb, &hif_dev->reg_in_submitted);
1008
1009 /* Submit URB */
1010 ret = usb_submit_urb(urb, GFP_KERNEL);
1011 if (ret) {
1012 usb_unanchor_urb(urb);
1013 goto err_submit;
1014 }
1015
1016 /*
1017 * Drop reference count.
1018 * This ensures that the URB is freed when killing them.
1019 */
1020 usb_free_urb(urb);
1021 }
1022
1023 return 0;
1024
1025err_submit:
1026 kfree_skb(skb);
1027err_skb:
1028 usb_free_urb(urb);
1029err_urb:
1030 kfree(rx_buf);
1031err_rxb:
1032 ath9k_hif_usb_dealloc_reg_in_urbs(hif_dev);
1033 return ret;
1034}
1035
1036static int ath9k_hif_usb_alloc_urbs(struct hif_device_usb *hif_dev)
1037{
1038 /* Register Write */
1039 init_usb_anchor(&hif_dev->regout_submitted);
1040
1041 /* TX */
1042 if (ath9k_hif_usb_alloc_tx_urbs(hif_dev) < 0)
1043 goto err;
1044
1045 /* RX */
1046 if (ath9k_hif_usb_alloc_rx_urbs(hif_dev) < 0)
1047 goto err_rx;
1048
1049 /* Register Read */
1050 if (ath9k_hif_usb_alloc_reg_in_urbs(hif_dev) < 0)
1051 goto err_reg;
1052
1053 return 0;
1054err_reg:
1055 ath9k_hif_usb_dealloc_rx_urbs(hif_dev);
1056err_rx:
1057 ath9k_hif_usb_dealloc_tx_urbs(hif_dev);
1058err:
1059 return -ENOMEM;
1060}
1061
1062void ath9k_hif_usb_dealloc_urbs(struct hif_device_usb *hif_dev)
1063{
1064 usb_kill_anchored_urbs(&hif_dev->regout_submitted);
1065 ath9k_hif_usb_dealloc_reg_in_urbs(hif_dev);
1066 ath9k_hif_usb_dealloc_tx_urbs(hif_dev);
1067 ath9k_hif_usb_dealloc_rx_urbs(hif_dev);
1068}
1069
1070static int ath9k_hif_usb_download_fw(struct hif_device_usb *hif_dev)
1071{
1072 int transfer, err;
1073 const void *data = hif_dev->fw_data;
1074 size_t len = hif_dev->fw_size;
1075 u32 addr = AR9271_FIRMWARE;
1076 u8 *buf = kzalloc(4096, GFP_KERNEL);
1077 u32 firm_offset;
1078
1079 if (!buf)
1080 return -ENOMEM;
1081
1082 while (len) {
1083 transfer = min_t(size_t, len, 4096);
1084 memcpy(buf, data, transfer);
1085
1086 err = usb_control_msg(hif_dev->udev,
1087 usb_sndctrlpipe(hif_dev->udev, 0),
1088 FIRMWARE_DOWNLOAD, 0x40 | USB_DIR_OUT,
1089 addr >> 8, 0, buf, transfer,
1090 USB_MSG_TIMEOUT);
1091 if (err < 0) {
1092 kfree(buf);
1093 return err;
1094 }
1095
1096 len -= transfer;
1097 data += transfer;
1098 addr += transfer;
1099 }
1100 kfree(buf);
1101
1102 if (IS_AR7010_DEVICE(hif_dev->usb_device_id->driver_info))
1103 firm_offset = AR7010_FIRMWARE_TEXT;
1104 else
1105 firm_offset = AR9271_FIRMWARE_TEXT;
1106
1107 /*
1108 * Issue FW download complete command to firmware.
1109 */
1110 err = usb_control_msg(hif_dev->udev, usb_sndctrlpipe(hif_dev->udev, 0),
1111 FIRMWARE_DOWNLOAD_COMP,
1112 0x40 | USB_DIR_OUT,
1113 firm_offset >> 8, 0, NULL, 0, USB_MSG_TIMEOUT);
1114 if (err)
1115 return -EIO;
1116
1117 dev_info(&hif_dev->udev->dev, "ath9k_htc: Transferred FW: %s, size: %ld\n",
1118 hif_dev->fw_name, (unsigned long) hif_dev->fw_size);
1119
1120 return 0;
1121}
1122
1123static int ath9k_hif_usb_dev_init(struct hif_device_usb *hif_dev)
1124{
1125 int ret;
1126
1127 ret = ath9k_hif_usb_download_fw(hif_dev);
1128 if (ret) {
1129 dev_err(&hif_dev->udev->dev,
1130 "ath9k_htc: Firmware - %s download failed\n",
1131 hif_dev->fw_name);
1132 return ret;
1133 }
1134
1135 /* Alloc URBs */
1136 ret = ath9k_hif_usb_alloc_urbs(hif_dev);
1137 if (ret) {
1138 dev_err(&hif_dev->udev->dev,
1139 "ath9k_htc: Unable to allocate URBs\n");
1140 return ret;
1141 }
1142
1143 return 0;
1144}
1145
1146static void ath9k_hif_usb_dev_deinit(struct hif_device_usb *hif_dev)
1147{
1148 ath9k_hif_usb_dealloc_urbs(hif_dev);
1149}
1150
1151/*
1152 * If initialization fails or the FW cannot be retrieved,
1153 * detach the device.
1154 */
1155static void ath9k_hif_usb_firmware_fail(struct hif_device_usb *hif_dev)
1156{
1157 struct device *dev = &hif_dev->udev->dev;
1158 struct device *parent = dev->parent;
1159
1160 complete_all(&hif_dev->fw_done);
1161
1162 if (parent)
1163 device_lock(parent);
1164
1165 device_release_driver(dev);
1166
1167 if (parent)
1168 device_unlock(parent);
1169}
1170
1171static void ath9k_hif_usb_firmware_cb(const struct firmware *fw, void *context);
1172
1173/* taken from iwlwifi */
1174static int ath9k_hif_request_firmware(struct hif_device_usb *hif_dev,
1175 bool first)
1176{
1177 char index[8], *chip;
1178 int ret;
1179
1180 if (first) {
1181 if (htc_use_dev_fw) {
1182 hif_dev->fw_minor_index = FIRMWARE_MINOR_IDX_MAX + 1;
1183 sprintf(index, "%s", "dev");
1184 } else {
1185 hif_dev->fw_minor_index = FIRMWARE_MINOR_IDX_MAX;
1186 sprintf(index, "%d", hif_dev->fw_minor_index);
1187 }
1188 } else {
1189 hif_dev->fw_minor_index--;
1190 sprintf(index, "%d", hif_dev->fw_minor_index);
1191 }
1192
1193 /* test for FW 1.3 */
1194 if (MAJOR_VERSION_REQ == 1 && hif_dev->fw_minor_index == 3) {
1195 const char *filename;
1196
1197 if (IS_AR7010_DEVICE(hif_dev->usb_device_id->driver_info))
1198 filename = FIRMWARE_AR7010_1_1;
1199 else
1200 filename = FIRMWARE_AR9271;
1201
1202 /* expected fw locations:
1203 * - htc_9271.fw (stable version 1.3, depricated)
1204 */
1205 snprintf(hif_dev->fw_name, sizeof(hif_dev->fw_name),
1206 "%s", filename);
1207
1208 } else if (hif_dev->fw_minor_index < FIRMWARE_MINOR_IDX_MIN) {
1209 dev_err(&hif_dev->udev->dev, "no suitable firmware found!\n");
1210
1211 return -ENOENT;
1212 } else {
1213 if (IS_AR7010_DEVICE(hif_dev->usb_device_id->driver_info))
1214 chip = "7010";
1215 else
1216 chip = "9271";
1217
1218 /* expected fw locations:
1219 * - ath9k_htc/htc_9271-1.dev.0.fw (development version)
1220 * - ath9k_htc/htc_9271-1.4.0.fw (stable version)
1221 */
1222 snprintf(hif_dev->fw_name, sizeof(hif_dev->fw_name),
1223 "%s/htc_%s-%d.%s.0.fw", HTC_FW_PATH,
1224 chip, MAJOR_VERSION_REQ, index);
1225 }
1226
1227 ret = request_firmware_nowait(THIS_MODULE, true, hif_dev->fw_name,
1228 &hif_dev->udev->dev, GFP_KERNEL,
1229 hif_dev, ath9k_hif_usb_firmware_cb);
1230 if (ret) {
1231 dev_err(&hif_dev->udev->dev,
1232 "ath9k_htc: Async request for firmware %s failed\n",
1233 hif_dev->fw_name);
1234 return ret;
1235 }
1236
1237 dev_info(&hif_dev->udev->dev, "ath9k_htc: Firmware %s requested\n",
1238 hif_dev->fw_name);
1239
1240 return ret;
1241}
1242
1243static void ath9k_hif_usb_firmware_cb(const struct firmware *fw, void *context)
1244{
1245 struct hif_device_usb *hif_dev = context;
1246 int ret;
1247
1248 if (!fw) {
1249 ret = ath9k_hif_request_firmware(hif_dev, false);
1250 if (!ret)
1251 return;
1252
1253 dev_err(&hif_dev->udev->dev,
1254 "ath9k_htc: Failed to get firmware %s\n",
1255 hif_dev->fw_name);
1256 goto err_fw;
1257 }
1258
1259 hif_dev->htc_handle = ath9k_htc_hw_alloc(hif_dev, &hif_usb,
1260 &hif_dev->udev->dev);
1261 if (hif_dev->htc_handle == NULL)
1262 goto err_dev_alloc;
1263
1264 hif_dev->fw_data = fw->data;
1265 hif_dev->fw_size = fw->size;
1266
1267 /* Proceed with initialization */
1268
1269 ret = ath9k_hif_usb_dev_init(hif_dev);
1270 if (ret)
1271 goto err_dev_init;
1272
1273 ret = ath9k_htc_hw_init(hif_dev->htc_handle,
1274 &hif_dev->interface->dev,
1275 hif_dev->usb_device_id->idProduct,
1276 hif_dev->udev->product,
1277 hif_dev->usb_device_id->driver_info);
1278 if (ret) {
1279 ret = -EINVAL;
1280 goto err_htc_hw_init;
1281 }
1282
1283 release_firmware(fw);
1284 hif_dev->flags |= HIF_USB_READY;
1285 complete_all(&hif_dev->fw_done);
1286
1287 return;
1288
1289err_htc_hw_init:
1290 ath9k_hif_usb_dev_deinit(hif_dev);
1291err_dev_init:
1292 ath9k_htc_hw_free(hif_dev->htc_handle);
1293err_dev_alloc:
1294 release_firmware(fw);
1295err_fw:
1296 ath9k_hif_usb_firmware_fail(hif_dev);
1297}
1298
1299/*
1300 * An exact copy of the function from zd1211rw.
1301 */
1302static int send_eject_command(struct usb_interface *interface)
1303{
1304 struct usb_device *udev = interface_to_usbdev(interface);
1305 struct usb_host_interface *iface_desc = interface->cur_altsetting;
1306 struct usb_endpoint_descriptor *endpoint;
1307 unsigned char *cmd;
1308 u8 bulk_out_ep;
1309 int r;
1310
1311 if (iface_desc->desc.bNumEndpoints < 2)
1312 return -ENODEV;
1313
1314 /* Find bulk out endpoint */
1315 for (r = 1; r >= 0; r--) {
1316 endpoint = &iface_desc->endpoint[r].desc;
1317 if (usb_endpoint_dir_out(endpoint) &&
1318 usb_endpoint_xfer_bulk(endpoint)) {
1319 bulk_out_ep = endpoint->bEndpointAddress;
1320 break;
1321 }
1322 }
1323 if (r == -1) {
1324 dev_err(&udev->dev,
1325 "ath9k_htc: Could not find bulk out endpoint\n");
1326 return -ENODEV;
1327 }
1328
1329 cmd = kzalloc(31, GFP_KERNEL);
1330 if (cmd == NULL)
1331 return -ENODEV;
1332
1333 /* USB bulk command block */
1334 cmd[0] = 0x55; /* bulk command signature */
1335 cmd[1] = 0x53; /* bulk command signature */
1336 cmd[2] = 0x42; /* bulk command signature */
1337 cmd[3] = 0x43; /* bulk command signature */
1338 cmd[14] = 6; /* command length */
1339
1340 cmd[15] = 0x1b; /* SCSI command: START STOP UNIT */
1341 cmd[19] = 0x2; /* eject disc */
1342
1343 dev_info(&udev->dev, "Ejecting storage device...\n");
1344 r = usb_bulk_msg(udev, usb_sndbulkpipe(udev, bulk_out_ep),
1345 cmd, 31, NULL, 2 * USB_MSG_TIMEOUT);
1346 kfree(cmd);
1347 if (r)
1348 return r;
1349
1350 /* At this point, the device disconnects and reconnects with the real
1351 * ID numbers. */
1352
1353 usb_set_intfdata(interface, NULL);
1354 return 0;
1355}
1356
1357static int ath9k_hif_usb_probe(struct usb_interface *interface,
1358 const struct usb_device_id *id)
1359{
1360 struct usb_endpoint_descriptor *bulk_in, *bulk_out, *int_in, *int_out;
1361 struct usb_device *udev = interface_to_usbdev(interface);
1362 struct usb_host_interface *alt;
1363 struct hif_device_usb *hif_dev;
1364 int ret = 0;
1365
1366 /* Verify the expected endpoints are present */
1367 alt = interface->cur_altsetting;
1368 if (usb_find_common_endpoints(alt, &bulk_in, &bulk_out, &int_in, &int_out) < 0 ||
1369 usb_endpoint_num(bulk_in) != USB_WLAN_RX_PIPE ||
1370 usb_endpoint_num(bulk_out) != USB_WLAN_TX_PIPE ||
1371 usb_endpoint_num(int_in) != USB_REG_IN_PIPE ||
1372 usb_endpoint_num(int_out) != USB_REG_OUT_PIPE) {
1373 dev_err(&udev->dev,
1374 "ath9k_htc: Device endpoint numbers are not the expected ones\n");
1375 return -ENODEV;
1376 }
1377
1378 if (id->driver_info == STORAGE_DEVICE)
1379 return send_eject_command(interface);
1380
1381 hif_dev = kzalloc(sizeof(struct hif_device_usb), GFP_KERNEL);
1382 if (!hif_dev) {
1383 ret = -ENOMEM;
1384 goto err_alloc;
1385 }
1386
1387 usb_get_dev(udev);
1388
1389 hif_dev->udev = udev;
1390 hif_dev->interface = interface;
1391 hif_dev->usb_device_id = id;
1392#ifdef CONFIG_PM
1393 udev->reset_resume = 1;
1394#endif
1395 usb_set_intfdata(interface, hif_dev);
1396
1397 init_completion(&hif_dev->fw_done);
1398
1399 ret = ath9k_hif_request_firmware(hif_dev, true);
1400 if (ret)
1401 goto err_fw_req;
1402
1403 return ret;
1404
1405err_fw_req:
1406 usb_set_intfdata(interface, NULL);
1407 kfree(hif_dev);
1408 usb_put_dev(udev);
1409err_alloc:
1410 return ret;
1411}
1412
1413static void ath9k_hif_usb_reboot(struct usb_device *udev)
1414{
1415 u32 reboot_cmd = 0xffffffff;
1416 void *buf;
1417 int ret;
1418
1419 buf = kmemdup(&reboot_cmd, 4, GFP_KERNEL);
1420 if (!buf)
1421 return;
1422
1423 ret = usb_interrupt_msg(udev, usb_sndintpipe(udev, USB_REG_OUT_PIPE),
1424 buf, 4, NULL, USB_MSG_TIMEOUT);
1425 if (ret)
1426 dev_err(&udev->dev, "ath9k_htc: USB reboot failed\n");
1427
1428 kfree(buf);
1429}
1430
1431static void ath9k_hif_usb_disconnect(struct usb_interface *interface)
1432{
1433 struct usb_device *udev = interface_to_usbdev(interface);
1434 struct hif_device_usb *hif_dev = usb_get_intfdata(interface);
1435 bool unplugged = udev->state == USB_STATE_NOTATTACHED;
1436
1437 if (!hif_dev)
1438 return;
1439
1440 wait_for_completion(&hif_dev->fw_done);
1441
1442 if (hif_dev->flags & HIF_USB_READY) {
1443 ath9k_htc_hw_deinit(hif_dev->htc_handle, unplugged);
1444 ath9k_htc_hw_free(hif_dev->htc_handle);
1445 }
1446
1447 usb_set_intfdata(interface, NULL);
1448
1449 /* If firmware was loaded we should drop it
1450 * go back to first stage bootloader. */
1451 if (!unplugged && (hif_dev->flags & HIF_USB_READY))
1452 ath9k_hif_usb_reboot(udev);
1453
1454 kfree(hif_dev);
1455 dev_info(&udev->dev, "ath9k_htc: USB layer deinitialized\n");
1456 usb_put_dev(udev);
1457}
1458
1459#ifdef CONFIG_PM
1460static int ath9k_hif_usb_suspend(struct usb_interface *interface,
1461 pm_message_t message)
1462{
1463 struct hif_device_usb *hif_dev = usb_get_intfdata(interface);
1464
1465 /*
1466 * The device has to be set to FULLSLEEP mode in case no
1467 * interface is up.
1468 */
1469 if (!(hif_dev->flags & HIF_USB_START))
1470 ath9k_htc_suspend(hif_dev->htc_handle);
1471
1472 wait_for_completion(&hif_dev->fw_done);
1473
1474 if (hif_dev->flags & HIF_USB_READY)
1475 ath9k_hif_usb_dealloc_urbs(hif_dev);
1476
1477 return 0;
1478}
1479
1480static int ath9k_hif_usb_resume(struct usb_interface *interface)
1481{
1482 struct hif_device_usb *hif_dev = usb_get_intfdata(interface);
1483 struct htc_target *htc_handle = hif_dev->htc_handle;
1484 const struct firmware *fw;
1485 int ret;
1486
1487 ret = ath9k_hif_usb_alloc_urbs(hif_dev);
1488 if (ret)
1489 return ret;
1490
1491 if (!(hif_dev->flags & HIF_USB_READY)) {
1492 ret = -EIO;
1493 goto fail_resume;
1494 }
1495
1496 /* request cached firmware during suspend/resume cycle */
1497 ret = request_firmware(&fw, hif_dev->fw_name,
1498 &hif_dev->udev->dev);
1499 if (ret)
1500 goto fail_resume;
1501
1502 hif_dev->fw_data = fw->data;
1503 hif_dev->fw_size = fw->size;
1504 ret = ath9k_hif_usb_download_fw(hif_dev);
1505 release_firmware(fw);
1506 if (ret)
1507 goto fail_resume;
1508
1509 mdelay(100);
1510
1511 ret = ath9k_htc_resume(htc_handle);
1512
1513 if (ret)
1514 goto fail_resume;
1515
1516 return 0;
1517
1518fail_resume:
1519 ath9k_hif_usb_dealloc_urbs(hif_dev);
1520
1521 return ret;
1522}
1523#endif
1524
1525static struct usb_driver ath9k_hif_usb_driver = {
1526 .name = KBUILD_MODNAME,
1527 .probe = ath9k_hif_usb_probe,
1528 .disconnect = ath9k_hif_usb_disconnect,
1529#ifdef CONFIG_PM
1530 .suspend = ath9k_hif_usb_suspend,
1531 .resume = ath9k_hif_usb_resume,
1532 .reset_resume = ath9k_hif_usb_resume,
1533#endif
1534 .id_table = ath9k_hif_usb_ids,
1535 .soft_unbind = 1,
1536 .disable_hub_initiated_lpm = 1,
1537};
1538
1539int ath9k_hif_usb_init(void)
1540{
1541 return usb_register(&ath9k_hif_usb_driver);
1542}
1543
1544void ath9k_hif_usb_exit(void)
1545{
1546 usb_deregister(&ath9k_hif_usb_driver);
1547}
1/*
2 * Copyright (c) 2010-2011 Atheros Communications Inc.
3 *
4 * Permission to use, copy, modify, and/or distribute this software for any
5 * purpose with or without fee is hereby granted, provided that the above
6 * copyright notice and this permission notice appear in all copies.
7 *
8 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
15 */
16
17#include <asm/unaligned.h>
18#include "htc.h"
19
20MODULE_FIRMWARE(HTC_7010_MODULE_FW);
21MODULE_FIRMWARE(HTC_9271_MODULE_FW);
22
23static const struct usb_device_id ath9k_hif_usb_ids[] = {
24 { USB_DEVICE(0x0cf3, 0x9271) }, /* Atheros */
25 { USB_DEVICE(0x0cf3, 0x1006) }, /* Atheros */
26 { USB_DEVICE(0x0846, 0x9030) }, /* Netgear N150 */
27 { USB_DEVICE(0x07b8, 0x9271) }, /* Altai WA1011N-GU */
28 { USB_DEVICE(0x07D1, 0x3A10) }, /* Dlink Wireless 150 */
29 { USB_DEVICE(0x13D3, 0x3327) }, /* Azurewave */
30 { USB_DEVICE(0x13D3, 0x3328) }, /* Azurewave */
31 { USB_DEVICE(0x13D3, 0x3346) }, /* IMC Networks */
32 { USB_DEVICE(0x13D3, 0x3348) }, /* Azurewave */
33 { USB_DEVICE(0x13D3, 0x3349) }, /* Azurewave */
34 { USB_DEVICE(0x13D3, 0x3350) }, /* Azurewave */
35 { USB_DEVICE(0x04CA, 0x4605) }, /* Liteon */
36 { USB_DEVICE(0x040D, 0x3801) }, /* VIA */
37 { USB_DEVICE(0x0cf3, 0xb003) }, /* Ubiquiti WifiStation Ext */
38 { USB_DEVICE(0x0cf3, 0xb002) }, /* Ubiquiti WifiStation */
39 { USB_DEVICE(0x057c, 0x8403) }, /* AVM FRITZ!WLAN 11N v2 USB */
40 { USB_DEVICE(0x0471, 0x209e) }, /* Philips (or NXP) PTA01 */
41 { USB_DEVICE(0x1eda, 0x2315) }, /* AirTies */
42
43 { USB_DEVICE(0x0cf3, 0x7015),
44 .driver_info = AR9287_USB }, /* Atheros */
45 { USB_DEVICE(0x1668, 0x1200),
46 .driver_info = AR9287_USB }, /* Verizon */
47
48 { USB_DEVICE(0x0cf3, 0x7010),
49 .driver_info = AR9280_USB }, /* Atheros */
50 { USB_DEVICE(0x0846, 0x9018),
51 .driver_info = AR9280_USB }, /* Netgear WNDA3200 */
52 { USB_DEVICE(0x083A, 0xA704),
53 .driver_info = AR9280_USB }, /* SMC Networks */
54 { USB_DEVICE(0x0411, 0x017f),
55 .driver_info = AR9280_USB }, /* Sony UWA-BR100 */
56 { USB_DEVICE(0x0411, 0x0197),
57 .driver_info = AR9280_USB }, /* Buffalo WLI-UV-AG300P */
58 { USB_DEVICE(0x04da, 0x3904),
59 .driver_info = AR9280_USB },
60 { USB_DEVICE(0x0930, 0x0a08),
61 .driver_info = AR9280_USB }, /* Toshiba WLM-20U2 and GN-1080 */
62
63 { USB_DEVICE(0x0cf3, 0x20ff),
64 .driver_info = STORAGE_DEVICE },
65
66 { },
67};
68
69MODULE_DEVICE_TABLE(usb, ath9k_hif_usb_ids);
70
71static int __hif_usb_tx(struct hif_device_usb *hif_dev);
72
73static void hif_usb_regout_cb(struct urb *urb)
74{
75 struct cmd_buf *cmd = (struct cmd_buf *)urb->context;
76
77 switch (urb->status) {
78 case 0:
79 break;
80 case -ENOENT:
81 case -ECONNRESET:
82 case -ENODEV:
83 case -ESHUTDOWN:
84 goto free;
85 default:
86 break;
87 }
88
89 if (cmd) {
90 ath9k_htc_txcompletion_cb(cmd->hif_dev->htc_handle,
91 cmd->skb, true);
92 kfree(cmd);
93 }
94
95 return;
96free:
97 kfree_skb(cmd->skb);
98 kfree(cmd);
99}
100
101static int hif_usb_send_regout(struct hif_device_usb *hif_dev,
102 struct sk_buff *skb)
103{
104 struct urb *urb;
105 struct cmd_buf *cmd;
106 int ret = 0;
107
108 urb = usb_alloc_urb(0, GFP_KERNEL);
109 if (urb == NULL)
110 return -ENOMEM;
111
112 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
113 if (cmd == NULL) {
114 usb_free_urb(urb);
115 return -ENOMEM;
116 }
117
118 cmd->skb = skb;
119 cmd->hif_dev = hif_dev;
120
121 usb_fill_int_urb(urb, hif_dev->udev,
122 usb_sndintpipe(hif_dev->udev, USB_REG_OUT_PIPE),
123 skb->data, skb->len,
124 hif_usb_regout_cb, cmd, 1);
125
126 usb_anchor_urb(urb, &hif_dev->regout_submitted);
127 ret = usb_submit_urb(urb, GFP_KERNEL);
128 if (ret) {
129 usb_unanchor_urb(urb);
130 kfree(cmd);
131 }
132 usb_free_urb(urb);
133
134 return ret;
135}
136
137static void hif_usb_mgmt_cb(struct urb *urb)
138{
139 struct cmd_buf *cmd = (struct cmd_buf *)urb->context;
140 struct hif_device_usb *hif_dev;
141 bool txok = true;
142
143 if (!cmd || !cmd->skb || !cmd->hif_dev)
144 return;
145
146 hif_dev = cmd->hif_dev;
147
148 switch (urb->status) {
149 case 0:
150 break;
151 case -ENOENT:
152 case -ECONNRESET:
153 case -ENODEV:
154 case -ESHUTDOWN:
155 txok = false;
156
157 /*
158 * If the URBs are being flushed, no need to complete
159 * this packet.
160 */
161 spin_lock(&hif_dev->tx.tx_lock);
162 if (hif_dev->tx.flags & HIF_USB_TX_FLUSH) {
163 spin_unlock(&hif_dev->tx.tx_lock);
164 dev_kfree_skb_any(cmd->skb);
165 kfree(cmd);
166 return;
167 }
168 spin_unlock(&hif_dev->tx.tx_lock);
169
170 break;
171 default:
172 txok = false;
173 break;
174 }
175
176 skb_pull(cmd->skb, 4);
177 ath9k_htc_txcompletion_cb(cmd->hif_dev->htc_handle,
178 cmd->skb, txok);
179 kfree(cmd);
180}
181
182static int hif_usb_send_mgmt(struct hif_device_usb *hif_dev,
183 struct sk_buff *skb)
184{
185 struct urb *urb;
186 struct cmd_buf *cmd;
187 int ret = 0;
188 __le16 *hdr;
189
190 urb = usb_alloc_urb(0, GFP_ATOMIC);
191 if (urb == NULL)
192 return -ENOMEM;
193
194 cmd = kzalloc(sizeof(*cmd), GFP_ATOMIC);
195 if (cmd == NULL) {
196 usb_free_urb(urb);
197 return -ENOMEM;
198 }
199
200 cmd->skb = skb;
201 cmd->hif_dev = hif_dev;
202
203 hdr = skb_push(skb, 4);
204 *hdr++ = cpu_to_le16(skb->len - 4);
205 *hdr++ = cpu_to_le16(ATH_USB_TX_STREAM_MODE_TAG);
206
207 usb_fill_bulk_urb(urb, hif_dev->udev,
208 usb_sndbulkpipe(hif_dev->udev, USB_WLAN_TX_PIPE),
209 skb->data, skb->len,
210 hif_usb_mgmt_cb, cmd);
211
212 usb_anchor_urb(urb, &hif_dev->mgmt_submitted);
213 ret = usb_submit_urb(urb, GFP_ATOMIC);
214 if (ret) {
215 usb_unanchor_urb(urb);
216 kfree(cmd);
217 }
218 usb_free_urb(urb);
219
220 return ret;
221}
222
223static inline void ath9k_skb_queue_purge(struct hif_device_usb *hif_dev,
224 struct sk_buff_head *list)
225{
226 struct sk_buff *skb;
227
228 while ((skb = __skb_dequeue(list)) != NULL) {
229 dev_kfree_skb_any(skb);
230 }
231}
232
233static inline void ath9k_skb_queue_complete(struct hif_device_usb *hif_dev,
234 struct sk_buff_head *queue,
235 bool txok)
236{
237 struct sk_buff *skb;
238
239 while ((skb = __skb_dequeue(queue)) != NULL) {
240#ifdef CONFIG_ATH9K_HTC_DEBUGFS
241 int ln = skb->len;
242#endif
243 ath9k_htc_txcompletion_cb(hif_dev->htc_handle,
244 skb, txok);
245 if (txok) {
246 TX_STAT_INC(skb_success);
247 TX_STAT_ADD(skb_success_bytes, ln);
248 }
249 else
250 TX_STAT_INC(skb_failed);
251 }
252}
253
254static void hif_usb_tx_cb(struct urb *urb)
255{
256 struct tx_buf *tx_buf = (struct tx_buf *) urb->context;
257 struct hif_device_usb *hif_dev;
258 bool txok = true;
259
260 if (!tx_buf || !tx_buf->hif_dev)
261 return;
262
263 hif_dev = tx_buf->hif_dev;
264
265 switch (urb->status) {
266 case 0:
267 break;
268 case -ENOENT:
269 case -ECONNRESET:
270 case -ENODEV:
271 case -ESHUTDOWN:
272 txok = false;
273
274 /*
275 * If the URBs are being flushed, no need to add this
276 * URB to the free list.
277 */
278 spin_lock(&hif_dev->tx.tx_lock);
279 if (hif_dev->tx.flags & HIF_USB_TX_FLUSH) {
280 spin_unlock(&hif_dev->tx.tx_lock);
281 ath9k_skb_queue_purge(hif_dev, &tx_buf->skb_queue);
282 return;
283 }
284 spin_unlock(&hif_dev->tx.tx_lock);
285
286 break;
287 default:
288 txok = false;
289 break;
290 }
291
292 ath9k_skb_queue_complete(hif_dev, &tx_buf->skb_queue, txok);
293
294 /* Re-initialize the SKB queue */
295 tx_buf->len = tx_buf->offset = 0;
296 __skb_queue_head_init(&tx_buf->skb_queue);
297
298 /* Add this TX buffer to the free list */
299 spin_lock(&hif_dev->tx.tx_lock);
300 list_move_tail(&tx_buf->list, &hif_dev->tx.tx_buf);
301 hif_dev->tx.tx_buf_cnt++;
302 if (!(hif_dev->tx.flags & HIF_USB_TX_STOP))
303 __hif_usb_tx(hif_dev); /* Check for pending SKBs */
304 TX_STAT_INC(buf_completed);
305 spin_unlock(&hif_dev->tx.tx_lock);
306}
307
308/* TX lock has to be taken */
309static int __hif_usb_tx(struct hif_device_usb *hif_dev)
310{
311 struct tx_buf *tx_buf = NULL;
312 struct sk_buff *nskb = NULL;
313 int ret = 0, i;
314 u16 tx_skb_cnt = 0;
315 u8 *buf;
316 __le16 *hdr;
317
318 if (hif_dev->tx.tx_skb_cnt == 0)
319 return 0;
320
321 /* Check if a free TX buffer is available */
322 if (list_empty(&hif_dev->tx.tx_buf))
323 return 0;
324
325 tx_buf = list_first_entry(&hif_dev->tx.tx_buf, struct tx_buf, list);
326 list_move_tail(&tx_buf->list, &hif_dev->tx.tx_pending);
327 hif_dev->tx.tx_buf_cnt--;
328
329 tx_skb_cnt = min_t(u16, hif_dev->tx.tx_skb_cnt, MAX_TX_AGGR_NUM);
330
331 for (i = 0; i < tx_skb_cnt; i++) {
332 nskb = __skb_dequeue(&hif_dev->tx.tx_skb_queue);
333
334 /* Should never be NULL */
335 BUG_ON(!nskb);
336
337 hif_dev->tx.tx_skb_cnt--;
338
339 buf = tx_buf->buf;
340 buf += tx_buf->offset;
341 hdr = (__le16 *)buf;
342 *hdr++ = cpu_to_le16(nskb->len);
343 *hdr++ = cpu_to_le16(ATH_USB_TX_STREAM_MODE_TAG);
344 buf += 4;
345 memcpy(buf, nskb->data, nskb->len);
346 tx_buf->len = nskb->len + 4;
347
348 if (i < (tx_skb_cnt - 1))
349 tx_buf->offset += (((tx_buf->len - 1) / 4) + 1) * 4;
350
351 if (i == (tx_skb_cnt - 1))
352 tx_buf->len += tx_buf->offset;
353
354 __skb_queue_tail(&tx_buf->skb_queue, nskb);
355 TX_STAT_INC(skb_queued);
356 }
357
358 usb_fill_bulk_urb(tx_buf->urb, hif_dev->udev,
359 usb_sndbulkpipe(hif_dev->udev, USB_WLAN_TX_PIPE),
360 tx_buf->buf, tx_buf->len,
361 hif_usb_tx_cb, tx_buf);
362
363 ret = usb_submit_urb(tx_buf->urb, GFP_ATOMIC);
364 if (ret) {
365 tx_buf->len = tx_buf->offset = 0;
366 ath9k_skb_queue_complete(hif_dev, &tx_buf->skb_queue, false);
367 __skb_queue_head_init(&tx_buf->skb_queue);
368 list_move_tail(&tx_buf->list, &hif_dev->tx.tx_buf);
369 hif_dev->tx.tx_buf_cnt++;
370 }
371
372 if (!ret)
373 TX_STAT_INC(buf_queued);
374
375 return ret;
376}
377
378static int hif_usb_send_tx(struct hif_device_usb *hif_dev, struct sk_buff *skb)
379{
380 struct ath9k_htc_tx_ctl *tx_ctl;
381 unsigned long flags;
382 int ret = 0;
383
384 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
385
386 if (hif_dev->tx.flags & HIF_USB_TX_STOP) {
387 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
388 return -ENODEV;
389 }
390
391 /* Check if the max queue count has been reached */
392 if (hif_dev->tx.tx_skb_cnt > MAX_TX_BUF_NUM) {
393 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
394 return -ENOMEM;
395 }
396
397 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
398
399 tx_ctl = HTC_SKB_CB(skb);
400
401 /* Mgmt/Beacon frames don't use the TX buffer pool */
402 if ((tx_ctl->type == ATH9K_HTC_MGMT) ||
403 (tx_ctl->type == ATH9K_HTC_BEACON)) {
404 ret = hif_usb_send_mgmt(hif_dev, skb);
405 }
406
407 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
408
409 if ((tx_ctl->type == ATH9K_HTC_NORMAL) ||
410 (tx_ctl->type == ATH9K_HTC_AMPDU)) {
411 __skb_queue_tail(&hif_dev->tx.tx_skb_queue, skb);
412 hif_dev->tx.tx_skb_cnt++;
413 }
414
415 /* Check if AMPDUs have to be sent immediately */
416 if ((hif_dev->tx.tx_buf_cnt == MAX_TX_URB_NUM) &&
417 (hif_dev->tx.tx_skb_cnt < 2)) {
418 __hif_usb_tx(hif_dev);
419 }
420
421 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
422
423 return ret;
424}
425
426static void hif_usb_start(void *hif_handle)
427{
428 struct hif_device_usb *hif_dev = hif_handle;
429 unsigned long flags;
430
431 hif_dev->flags |= HIF_USB_START;
432
433 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
434 hif_dev->tx.flags &= ~HIF_USB_TX_STOP;
435 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
436}
437
438static void hif_usb_stop(void *hif_handle)
439{
440 struct hif_device_usb *hif_dev = hif_handle;
441 struct tx_buf *tx_buf = NULL, *tx_buf_tmp = NULL;
442 unsigned long flags;
443
444 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
445 ath9k_skb_queue_complete(hif_dev, &hif_dev->tx.tx_skb_queue, false);
446 hif_dev->tx.tx_skb_cnt = 0;
447 hif_dev->tx.flags |= HIF_USB_TX_STOP;
448 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
449
450 /* The pending URBs have to be canceled. */
451 list_for_each_entry_safe(tx_buf, tx_buf_tmp,
452 &hif_dev->tx.tx_pending, list) {
453 usb_kill_urb(tx_buf->urb);
454 }
455
456 usb_kill_anchored_urbs(&hif_dev->mgmt_submitted);
457}
458
459static int hif_usb_send(void *hif_handle, u8 pipe_id, struct sk_buff *skb)
460{
461 struct hif_device_usb *hif_dev = hif_handle;
462 int ret = 0;
463
464 switch (pipe_id) {
465 case USB_WLAN_TX_PIPE:
466 ret = hif_usb_send_tx(hif_dev, skb);
467 break;
468 case USB_REG_OUT_PIPE:
469 ret = hif_usb_send_regout(hif_dev, skb);
470 break;
471 default:
472 dev_err(&hif_dev->udev->dev,
473 "ath9k_htc: Invalid TX pipe: %d\n", pipe_id);
474 ret = -EINVAL;
475 break;
476 }
477
478 return ret;
479}
480
481static inline bool check_index(struct sk_buff *skb, u8 idx)
482{
483 struct ath9k_htc_tx_ctl *tx_ctl;
484
485 tx_ctl = HTC_SKB_CB(skb);
486
487 if ((tx_ctl->type == ATH9K_HTC_AMPDU) &&
488 (tx_ctl->sta_idx == idx))
489 return true;
490
491 return false;
492}
493
494static void hif_usb_sta_drain(void *hif_handle, u8 idx)
495{
496 struct hif_device_usb *hif_dev = hif_handle;
497 struct sk_buff *skb, *tmp;
498 unsigned long flags;
499
500 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
501
502 skb_queue_walk_safe(&hif_dev->tx.tx_skb_queue, skb, tmp) {
503 if (check_index(skb, idx)) {
504 __skb_unlink(skb, &hif_dev->tx.tx_skb_queue);
505 ath9k_htc_txcompletion_cb(hif_dev->htc_handle,
506 skb, false);
507 hif_dev->tx.tx_skb_cnt--;
508 TX_STAT_INC(skb_failed);
509 }
510 }
511
512 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
513}
514
515static struct ath9k_htc_hif hif_usb = {
516 .transport = ATH9K_HIF_USB,
517 .name = "ath9k_hif_usb",
518
519 .control_ul_pipe = USB_REG_OUT_PIPE,
520 .control_dl_pipe = USB_REG_IN_PIPE,
521
522 .start = hif_usb_start,
523 .stop = hif_usb_stop,
524 .sta_drain = hif_usb_sta_drain,
525 .send = hif_usb_send,
526};
527
528static void ath9k_hif_usb_rx_stream(struct hif_device_usb *hif_dev,
529 struct sk_buff *skb)
530{
531 struct sk_buff *nskb, *skb_pool[MAX_PKT_NUM_IN_TRANSFER];
532 int index = 0, i, len = skb->len;
533 int rx_remain_len, rx_pkt_len;
534 u16 pool_index = 0;
535 u8 *ptr;
536
537 spin_lock(&hif_dev->rx_lock);
538
539 rx_remain_len = hif_dev->rx_remain_len;
540 rx_pkt_len = hif_dev->rx_transfer_len;
541
542 if (rx_remain_len != 0) {
543 struct sk_buff *remain_skb = hif_dev->remain_skb;
544
545 if (remain_skb) {
546 ptr = (u8 *) remain_skb->data;
547
548 index = rx_remain_len;
549 rx_remain_len -= hif_dev->rx_pad_len;
550 ptr += rx_pkt_len;
551
552 memcpy(ptr, skb->data, rx_remain_len);
553
554 rx_pkt_len += rx_remain_len;
555 hif_dev->rx_remain_len = 0;
556 skb_put(remain_skb, rx_pkt_len);
557
558 skb_pool[pool_index++] = remain_skb;
559
560 } else {
561 index = rx_remain_len;
562 }
563 }
564
565 spin_unlock(&hif_dev->rx_lock);
566
567 while (index < len) {
568 u16 pkt_len;
569 u16 pkt_tag;
570 u16 pad_len;
571 int chk_idx;
572
573 ptr = (u8 *) skb->data;
574
575 pkt_len = get_unaligned_le16(ptr + index);
576 pkt_tag = get_unaligned_le16(ptr + index + 2);
577
578 if (pkt_tag != ATH_USB_RX_STREAM_MODE_TAG) {
579 RX_STAT_INC(skb_dropped);
580 return;
581 }
582
583 pad_len = 4 - (pkt_len & 0x3);
584 if (pad_len == 4)
585 pad_len = 0;
586
587 chk_idx = index;
588 index = index + 4 + pkt_len + pad_len;
589
590 if (index > MAX_RX_BUF_SIZE) {
591 spin_lock(&hif_dev->rx_lock);
592 hif_dev->rx_remain_len = index - MAX_RX_BUF_SIZE;
593 hif_dev->rx_transfer_len =
594 MAX_RX_BUF_SIZE - chk_idx - 4;
595 hif_dev->rx_pad_len = pad_len;
596
597 nskb = __dev_alloc_skb(pkt_len + 32, GFP_ATOMIC);
598 if (!nskb) {
599 dev_err(&hif_dev->udev->dev,
600 "ath9k_htc: RX memory allocation error\n");
601 spin_unlock(&hif_dev->rx_lock);
602 goto err;
603 }
604 skb_reserve(nskb, 32);
605 RX_STAT_INC(skb_allocated);
606
607 memcpy(nskb->data, &(skb->data[chk_idx+4]),
608 hif_dev->rx_transfer_len);
609
610 /* Record the buffer pointer */
611 hif_dev->remain_skb = nskb;
612 spin_unlock(&hif_dev->rx_lock);
613 } else {
614 nskb = __dev_alloc_skb(pkt_len + 32, GFP_ATOMIC);
615 if (!nskb) {
616 dev_err(&hif_dev->udev->dev,
617 "ath9k_htc: RX memory allocation error\n");
618 goto err;
619 }
620 skb_reserve(nskb, 32);
621 RX_STAT_INC(skb_allocated);
622
623 memcpy(nskb->data, &(skb->data[chk_idx+4]), pkt_len);
624 skb_put(nskb, pkt_len);
625 skb_pool[pool_index++] = nskb;
626 }
627 }
628
629err:
630 for (i = 0; i < pool_index; i++) {
631 RX_STAT_ADD(skb_completed_bytes, skb_pool[i]->len);
632 ath9k_htc_rx_msg(hif_dev->htc_handle, skb_pool[i],
633 skb_pool[i]->len, USB_WLAN_RX_PIPE);
634 RX_STAT_INC(skb_completed);
635 }
636}
637
638static void ath9k_hif_usb_rx_cb(struct urb *urb)
639{
640 struct sk_buff *skb = (struct sk_buff *) urb->context;
641 struct hif_device_usb *hif_dev =
642 usb_get_intfdata(usb_ifnum_to_if(urb->dev, 0));
643 int ret;
644
645 if (!skb)
646 return;
647
648 if (!hif_dev)
649 goto free;
650
651 switch (urb->status) {
652 case 0:
653 break;
654 case -ENOENT:
655 case -ECONNRESET:
656 case -ENODEV:
657 case -ESHUTDOWN:
658 goto free;
659 default:
660 goto resubmit;
661 }
662
663 if (likely(urb->actual_length != 0)) {
664 skb_put(skb, urb->actual_length);
665 ath9k_hif_usb_rx_stream(hif_dev, skb);
666 }
667
668resubmit:
669 skb_reset_tail_pointer(skb);
670 skb_trim(skb, 0);
671
672 usb_anchor_urb(urb, &hif_dev->rx_submitted);
673 ret = usb_submit_urb(urb, GFP_ATOMIC);
674 if (ret) {
675 usb_unanchor_urb(urb);
676 goto free;
677 }
678
679 return;
680free:
681 kfree_skb(skb);
682}
683
684static void ath9k_hif_usb_reg_in_cb(struct urb *urb)
685{
686 struct sk_buff *skb = (struct sk_buff *) urb->context;
687 struct sk_buff *nskb;
688 struct hif_device_usb *hif_dev =
689 usb_get_intfdata(usb_ifnum_to_if(urb->dev, 0));
690 int ret;
691
692 if (!skb)
693 return;
694
695 if (!hif_dev)
696 goto free;
697
698 switch (urb->status) {
699 case 0:
700 break;
701 case -ENOENT:
702 case -ECONNRESET:
703 case -ENODEV:
704 case -ESHUTDOWN:
705 goto free;
706 default:
707 skb_reset_tail_pointer(skb);
708 skb_trim(skb, 0);
709
710 goto resubmit;
711 }
712
713 if (likely(urb->actual_length != 0)) {
714 skb_put(skb, urb->actual_length);
715
716 /* Process the command first */
717 ath9k_htc_rx_msg(hif_dev->htc_handle, skb,
718 skb->len, USB_REG_IN_PIPE);
719
720
721 nskb = alloc_skb(MAX_REG_IN_BUF_SIZE, GFP_ATOMIC);
722 if (!nskb) {
723 dev_err(&hif_dev->udev->dev,
724 "ath9k_htc: REG_IN memory allocation failure\n");
725 urb->context = NULL;
726 return;
727 }
728
729 usb_fill_int_urb(urb, hif_dev->udev,
730 usb_rcvintpipe(hif_dev->udev,
731 USB_REG_IN_PIPE),
732 nskb->data, MAX_REG_IN_BUF_SIZE,
733 ath9k_hif_usb_reg_in_cb, nskb, 1);
734 }
735
736resubmit:
737 usb_anchor_urb(urb, &hif_dev->reg_in_submitted);
738 ret = usb_submit_urb(urb, GFP_ATOMIC);
739 if (ret) {
740 usb_unanchor_urb(urb);
741 goto free;
742 }
743
744 return;
745free:
746 kfree_skb(skb);
747 urb->context = NULL;
748}
749
750static void ath9k_hif_usb_dealloc_tx_urbs(struct hif_device_usb *hif_dev)
751{
752 struct tx_buf *tx_buf = NULL, *tx_buf_tmp = NULL;
753 unsigned long flags;
754
755 list_for_each_entry_safe(tx_buf, tx_buf_tmp,
756 &hif_dev->tx.tx_buf, list) {
757 usb_kill_urb(tx_buf->urb);
758 list_del(&tx_buf->list);
759 usb_free_urb(tx_buf->urb);
760 kfree(tx_buf->buf);
761 kfree(tx_buf);
762 }
763
764 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
765 hif_dev->tx.flags |= HIF_USB_TX_FLUSH;
766 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
767
768 list_for_each_entry_safe(tx_buf, tx_buf_tmp,
769 &hif_dev->tx.tx_pending, list) {
770 usb_kill_urb(tx_buf->urb);
771 list_del(&tx_buf->list);
772 usb_free_urb(tx_buf->urb);
773 kfree(tx_buf->buf);
774 kfree(tx_buf);
775 }
776
777 usb_kill_anchored_urbs(&hif_dev->mgmt_submitted);
778}
779
780static int ath9k_hif_usb_alloc_tx_urbs(struct hif_device_usb *hif_dev)
781{
782 struct tx_buf *tx_buf;
783 int i;
784
785 INIT_LIST_HEAD(&hif_dev->tx.tx_buf);
786 INIT_LIST_HEAD(&hif_dev->tx.tx_pending);
787 spin_lock_init(&hif_dev->tx.tx_lock);
788 __skb_queue_head_init(&hif_dev->tx.tx_skb_queue);
789 init_usb_anchor(&hif_dev->mgmt_submitted);
790
791 for (i = 0; i < MAX_TX_URB_NUM; i++) {
792 tx_buf = kzalloc(sizeof(struct tx_buf), GFP_KERNEL);
793 if (!tx_buf)
794 goto err;
795
796 tx_buf->buf = kzalloc(MAX_TX_BUF_SIZE, GFP_KERNEL);
797 if (!tx_buf->buf)
798 goto err;
799
800 tx_buf->urb = usb_alloc_urb(0, GFP_KERNEL);
801 if (!tx_buf->urb)
802 goto err;
803
804 tx_buf->hif_dev = hif_dev;
805 __skb_queue_head_init(&tx_buf->skb_queue);
806
807 list_add_tail(&tx_buf->list, &hif_dev->tx.tx_buf);
808 }
809
810 hif_dev->tx.tx_buf_cnt = MAX_TX_URB_NUM;
811
812 return 0;
813err:
814 if (tx_buf) {
815 kfree(tx_buf->buf);
816 kfree(tx_buf);
817 }
818 ath9k_hif_usb_dealloc_tx_urbs(hif_dev);
819 return -ENOMEM;
820}
821
822static void ath9k_hif_usb_dealloc_rx_urbs(struct hif_device_usb *hif_dev)
823{
824 usb_kill_anchored_urbs(&hif_dev->rx_submitted);
825}
826
827static int ath9k_hif_usb_alloc_rx_urbs(struct hif_device_usb *hif_dev)
828{
829 struct urb *urb = NULL;
830 struct sk_buff *skb = NULL;
831 int i, ret;
832
833 init_usb_anchor(&hif_dev->rx_submitted);
834 spin_lock_init(&hif_dev->rx_lock);
835
836 for (i = 0; i < MAX_RX_URB_NUM; i++) {
837
838 /* Allocate URB */
839 urb = usb_alloc_urb(0, GFP_KERNEL);
840 if (urb == NULL) {
841 ret = -ENOMEM;
842 goto err_urb;
843 }
844
845 /* Allocate buffer */
846 skb = alloc_skb(MAX_RX_BUF_SIZE, GFP_KERNEL);
847 if (!skb) {
848 ret = -ENOMEM;
849 goto err_skb;
850 }
851
852 usb_fill_bulk_urb(urb, hif_dev->udev,
853 usb_rcvbulkpipe(hif_dev->udev,
854 USB_WLAN_RX_PIPE),
855 skb->data, MAX_RX_BUF_SIZE,
856 ath9k_hif_usb_rx_cb, skb);
857
858 /* Anchor URB */
859 usb_anchor_urb(urb, &hif_dev->rx_submitted);
860
861 /* Submit URB */
862 ret = usb_submit_urb(urb, GFP_KERNEL);
863 if (ret) {
864 usb_unanchor_urb(urb);
865 goto err_submit;
866 }
867
868 /*
869 * Drop reference count.
870 * This ensures that the URB is freed when killing them.
871 */
872 usb_free_urb(urb);
873 }
874
875 return 0;
876
877err_submit:
878 kfree_skb(skb);
879err_skb:
880 usb_free_urb(urb);
881err_urb:
882 ath9k_hif_usb_dealloc_rx_urbs(hif_dev);
883 return ret;
884}
885
886static void ath9k_hif_usb_dealloc_reg_in_urbs(struct hif_device_usb *hif_dev)
887{
888 usb_kill_anchored_urbs(&hif_dev->reg_in_submitted);
889}
890
891static int ath9k_hif_usb_alloc_reg_in_urbs(struct hif_device_usb *hif_dev)
892{
893 struct urb *urb = NULL;
894 struct sk_buff *skb = NULL;
895 int i, ret;
896
897 init_usb_anchor(&hif_dev->reg_in_submitted);
898
899 for (i = 0; i < MAX_REG_IN_URB_NUM; i++) {
900
901 /* Allocate URB */
902 urb = usb_alloc_urb(0, GFP_KERNEL);
903 if (urb == NULL) {
904 ret = -ENOMEM;
905 goto err_urb;
906 }
907
908 /* Allocate buffer */
909 skb = alloc_skb(MAX_REG_IN_BUF_SIZE, GFP_KERNEL);
910 if (!skb) {
911 ret = -ENOMEM;
912 goto err_skb;
913 }
914
915 usb_fill_int_urb(urb, hif_dev->udev,
916 usb_rcvintpipe(hif_dev->udev,
917 USB_REG_IN_PIPE),
918 skb->data, MAX_REG_IN_BUF_SIZE,
919 ath9k_hif_usb_reg_in_cb, skb, 1);
920
921 /* Anchor URB */
922 usb_anchor_urb(urb, &hif_dev->reg_in_submitted);
923
924 /* Submit URB */
925 ret = usb_submit_urb(urb, GFP_KERNEL);
926 if (ret) {
927 usb_unanchor_urb(urb);
928 goto err_submit;
929 }
930
931 /*
932 * Drop reference count.
933 * This ensures that the URB is freed when killing them.
934 */
935 usb_free_urb(urb);
936 }
937
938 return 0;
939
940err_submit:
941 kfree_skb(skb);
942err_skb:
943 usb_free_urb(urb);
944err_urb:
945 ath9k_hif_usb_dealloc_reg_in_urbs(hif_dev);
946 return ret;
947}
948
949static int ath9k_hif_usb_alloc_urbs(struct hif_device_usb *hif_dev)
950{
951 /* Register Write */
952 init_usb_anchor(&hif_dev->regout_submitted);
953
954 /* TX */
955 if (ath9k_hif_usb_alloc_tx_urbs(hif_dev) < 0)
956 goto err;
957
958 /* RX */
959 if (ath9k_hif_usb_alloc_rx_urbs(hif_dev) < 0)
960 goto err_rx;
961
962 /* Register Read */
963 if (ath9k_hif_usb_alloc_reg_in_urbs(hif_dev) < 0)
964 goto err_reg;
965
966 return 0;
967err_reg:
968 ath9k_hif_usb_dealloc_rx_urbs(hif_dev);
969err_rx:
970 ath9k_hif_usb_dealloc_tx_urbs(hif_dev);
971err:
972 return -ENOMEM;
973}
974
975static void ath9k_hif_usb_dealloc_urbs(struct hif_device_usb *hif_dev)
976{
977 usb_kill_anchored_urbs(&hif_dev->regout_submitted);
978 ath9k_hif_usb_dealloc_reg_in_urbs(hif_dev);
979 ath9k_hif_usb_dealloc_tx_urbs(hif_dev);
980 ath9k_hif_usb_dealloc_rx_urbs(hif_dev);
981}
982
983static int ath9k_hif_usb_download_fw(struct hif_device_usb *hif_dev)
984{
985 int transfer, err;
986 const void *data = hif_dev->fw_data;
987 size_t len = hif_dev->fw_size;
988 u32 addr = AR9271_FIRMWARE;
989 u8 *buf = kzalloc(4096, GFP_KERNEL);
990 u32 firm_offset;
991
992 if (!buf)
993 return -ENOMEM;
994
995 while (len) {
996 transfer = min_t(size_t, len, 4096);
997 memcpy(buf, data, transfer);
998
999 err = usb_control_msg(hif_dev->udev,
1000 usb_sndctrlpipe(hif_dev->udev, 0),
1001 FIRMWARE_DOWNLOAD, 0x40 | USB_DIR_OUT,
1002 addr >> 8, 0, buf, transfer,
1003 USB_MSG_TIMEOUT);
1004 if (err < 0) {
1005 kfree(buf);
1006 return err;
1007 }
1008
1009 len -= transfer;
1010 data += transfer;
1011 addr += transfer;
1012 }
1013 kfree(buf);
1014
1015 if (IS_AR7010_DEVICE(hif_dev->usb_device_id->driver_info))
1016 firm_offset = AR7010_FIRMWARE_TEXT;
1017 else
1018 firm_offset = AR9271_FIRMWARE_TEXT;
1019
1020 /*
1021 * Issue FW download complete command to firmware.
1022 */
1023 err = usb_control_msg(hif_dev->udev, usb_sndctrlpipe(hif_dev->udev, 0),
1024 FIRMWARE_DOWNLOAD_COMP,
1025 0x40 | USB_DIR_OUT,
1026 firm_offset >> 8, 0, NULL, 0, USB_MSG_TIMEOUT);
1027 if (err)
1028 return -EIO;
1029
1030 dev_info(&hif_dev->udev->dev, "ath9k_htc: Transferred FW: %s, size: %ld\n",
1031 hif_dev->fw_name, (unsigned long) hif_dev->fw_size);
1032
1033 return 0;
1034}
1035
1036static int ath9k_hif_usb_dev_init(struct hif_device_usb *hif_dev)
1037{
1038 int ret;
1039
1040 ret = ath9k_hif_usb_download_fw(hif_dev);
1041 if (ret) {
1042 dev_err(&hif_dev->udev->dev,
1043 "ath9k_htc: Firmware - %s download failed\n",
1044 hif_dev->fw_name);
1045 return ret;
1046 }
1047
1048 /* Alloc URBs */
1049 ret = ath9k_hif_usb_alloc_urbs(hif_dev);
1050 if (ret) {
1051 dev_err(&hif_dev->udev->dev,
1052 "ath9k_htc: Unable to allocate URBs\n");
1053 return ret;
1054 }
1055
1056 return 0;
1057}
1058
1059static void ath9k_hif_usb_dev_deinit(struct hif_device_usb *hif_dev)
1060{
1061 ath9k_hif_usb_dealloc_urbs(hif_dev);
1062}
1063
1064/*
1065 * If initialization fails or the FW cannot be retrieved,
1066 * detach the device.
1067 */
1068static void ath9k_hif_usb_firmware_fail(struct hif_device_usb *hif_dev)
1069{
1070 struct device *dev = &hif_dev->udev->dev;
1071 struct device *parent = dev->parent;
1072
1073 complete_all(&hif_dev->fw_done);
1074
1075 if (parent)
1076 device_lock(parent);
1077
1078 device_release_driver(dev);
1079
1080 if (parent)
1081 device_unlock(parent);
1082}
1083
1084static void ath9k_hif_usb_firmware_cb(const struct firmware *fw, void *context);
1085
1086/* taken from iwlwifi */
1087static int ath9k_hif_request_firmware(struct hif_device_usb *hif_dev,
1088 bool first)
1089{
1090 char index[8], *chip;
1091 int ret;
1092
1093 if (first) {
1094 if (htc_use_dev_fw) {
1095 hif_dev->fw_minor_index = FIRMWARE_MINOR_IDX_MAX + 1;
1096 sprintf(index, "%s", "dev");
1097 } else {
1098 hif_dev->fw_minor_index = FIRMWARE_MINOR_IDX_MAX;
1099 sprintf(index, "%d", hif_dev->fw_minor_index);
1100 }
1101 } else {
1102 hif_dev->fw_minor_index--;
1103 sprintf(index, "%d", hif_dev->fw_minor_index);
1104 }
1105
1106 /* test for FW 1.3 */
1107 if (MAJOR_VERSION_REQ == 1 && hif_dev->fw_minor_index == 3) {
1108 const char *filename;
1109
1110 if (IS_AR7010_DEVICE(hif_dev->usb_device_id->driver_info))
1111 filename = FIRMWARE_AR7010_1_1;
1112 else
1113 filename = FIRMWARE_AR9271;
1114
1115 /* expected fw locations:
1116 * - htc_9271.fw (stable version 1.3, depricated)
1117 */
1118 snprintf(hif_dev->fw_name, sizeof(hif_dev->fw_name),
1119 "%s", filename);
1120
1121 } else if (hif_dev->fw_minor_index < FIRMWARE_MINOR_IDX_MIN) {
1122 dev_err(&hif_dev->udev->dev, "no suitable firmware found!\n");
1123
1124 return -ENOENT;
1125 } else {
1126 if (IS_AR7010_DEVICE(hif_dev->usb_device_id->driver_info))
1127 chip = "7010";
1128 else
1129 chip = "9271";
1130
1131 /* expected fw locations:
1132 * - ath9k_htc/htc_9271-1.dev.0.fw (development version)
1133 * - ath9k_htc/htc_9271-1.4.0.fw (stable version)
1134 */
1135 snprintf(hif_dev->fw_name, sizeof(hif_dev->fw_name),
1136 "%s/htc_%s-%d.%s.0.fw", HTC_FW_PATH,
1137 chip, MAJOR_VERSION_REQ, index);
1138 }
1139
1140 ret = request_firmware_nowait(THIS_MODULE, true, hif_dev->fw_name,
1141 &hif_dev->udev->dev, GFP_KERNEL,
1142 hif_dev, ath9k_hif_usb_firmware_cb);
1143 if (ret) {
1144 dev_err(&hif_dev->udev->dev,
1145 "ath9k_htc: Async request for firmware %s failed\n",
1146 hif_dev->fw_name);
1147 return ret;
1148 }
1149
1150 dev_info(&hif_dev->udev->dev, "ath9k_htc: Firmware %s requested\n",
1151 hif_dev->fw_name);
1152
1153 return ret;
1154}
1155
1156static void ath9k_hif_usb_firmware_cb(const struct firmware *fw, void *context)
1157{
1158 struct hif_device_usb *hif_dev = context;
1159 int ret;
1160
1161 if (!fw) {
1162 ret = ath9k_hif_request_firmware(hif_dev, false);
1163 if (!ret)
1164 return;
1165
1166 dev_err(&hif_dev->udev->dev,
1167 "ath9k_htc: Failed to get firmware %s\n",
1168 hif_dev->fw_name);
1169 goto err_fw;
1170 }
1171
1172 hif_dev->htc_handle = ath9k_htc_hw_alloc(hif_dev, &hif_usb,
1173 &hif_dev->udev->dev);
1174 if (hif_dev->htc_handle == NULL)
1175 goto err_dev_alloc;
1176
1177 hif_dev->fw_data = fw->data;
1178 hif_dev->fw_size = fw->size;
1179
1180 /* Proceed with initialization */
1181
1182 ret = ath9k_hif_usb_dev_init(hif_dev);
1183 if (ret)
1184 goto err_dev_init;
1185
1186 ret = ath9k_htc_hw_init(hif_dev->htc_handle,
1187 &hif_dev->interface->dev,
1188 hif_dev->usb_device_id->idProduct,
1189 hif_dev->udev->product,
1190 hif_dev->usb_device_id->driver_info);
1191 if (ret) {
1192 ret = -EINVAL;
1193 goto err_htc_hw_init;
1194 }
1195
1196 release_firmware(fw);
1197 hif_dev->flags |= HIF_USB_READY;
1198 complete_all(&hif_dev->fw_done);
1199
1200 return;
1201
1202err_htc_hw_init:
1203 ath9k_hif_usb_dev_deinit(hif_dev);
1204err_dev_init:
1205 ath9k_htc_hw_free(hif_dev->htc_handle);
1206err_dev_alloc:
1207 release_firmware(fw);
1208err_fw:
1209 ath9k_hif_usb_firmware_fail(hif_dev);
1210}
1211
1212/*
1213 * An exact copy of the function from zd1211rw.
1214 */
1215static int send_eject_command(struct usb_interface *interface)
1216{
1217 struct usb_device *udev = interface_to_usbdev(interface);
1218 struct usb_host_interface *iface_desc = &interface->altsetting[0];
1219 struct usb_endpoint_descriptor *endpoint;
1220 unsigned char *cmd;
1221 u8 bulk_out_ep;
1222 int r;
1223
1224 if (iface_desc->desc.bNumEndpoints < 2)
1225 return -ENODEV;
1226
1227 /* Find bulk out endpoint */
1228 for (r = 1; r >= 0; r--) {
1229 endpoint = &iface_desc->endpoint[r].desc;
1230 if (usb_endpoint_dir_out(endpoint) &&
1231 usb_endpoint_xfer_bulk(endpoint)) {
1232 bulk_out_ep = endpoint->bEndpointAddress;
1233 break;
1234 }
1235 }
1236 if (r == -1) {
1237 dev_err(&udev->dev,
1238 "ath9k_htc: Could not find bulk out endpoint\n");
1239 return -ENODEV;
1240 }
1241
1242 cmd = kzalloc(31, GFP_KERNEL);
1243 if (cmd == NULL)
1244 return -ENODEV;
1245
1246 /* USB bulk command block */
1247 cmd[0] = 0x55; /* bulk command signature */
1248 cmd[1] = 0x53; /* bulk command signature */
1249 cmd[2] = 0x42; /* bulk command signature */
1250 cmd[3] = 0x43; /* bulk command signature */
1251 cmd[14] = 6; /* command length */
1252
1253 cmd[15] = 0x1b; /* SCSI command: START STOP UNIT */
1254 cmd[19] = 0x2; /* eject disc */
1255
1256 dev_info(&udev->dev, "Ejecting storage device...\n");
1257 r = usb_bulk_msg(udev, usb_sndbulkpipe(udev, bulk_out_ep),
1258 cmd, 31, NULL, 2 * USB_MSG_TIMEOUT);
1259 kfree(cmd);
1260 if (r)
1261 return r;
1262
1263 /* At this point, the device disconnects and reconnects with the real
1264 * ID numbers. */
1265
1266 usb_set_intfdata(interface, NULL);
1267 return 0;
1268}
1269
1270static int ath9k_hif_usb_probe(struct usb_interface *interface,
1271 const struct usb_device_id *id)
1272{
1273 struct usb_device *udev = interface_to_usbdev(interface);
1274 struct hif_device_usb *hif_dev;
1275 int ret = 0;
1276
1277 if (id->driver_info == STORAGE_DEVICE)
1278 return send_eject_command(interface);
1279
1280 hif_dev = kzalloc(sizeof(struct hif_device_usb), GFP_KERNEL);
1281 if (!hif_dev) {
1282 ret = -ENOMEM;
1283 goto err_alloc;
1284 }
1285
1286 usb_get_dev(udev);
1287
1288 hif_dev->udev = udev;
1289 hif_dev->interface = interface;
1290 hif_dev->usb_device_id = id;
1291#ifdef CONFIG_PM
1292 udev->reset_resume = 1;
1293#endif
1294 usb_set_intfdata(interface, hif_dev);
1295
1296 init_completion(&hif_dev->fw_done);
1297
1298 ret = ath9k_hif_request_firmware(hif_dev, true);
1299 if (ret)
1300 goto err_fw_req;
1301
1302 return ret;
1303
1304err_fw_req:
1305 usb_set_intfdata(interface, NULL);
1306 kfree(hif_dev);
1307 usb_put_dev(udev);
1308err_alloc:
1309 return ret;
1310}
1311
1312static void ath9k_hif_usb_reboot(struct usb_device *udev)
1313{
1314 u32 reboot_cmd = 0xffffffff;
1315 void *buf;
1316 int ret;
1317
1318 buf = kmemdup(&reboot_cmd, 4, GFP_KERNEL);
1319 if (!buf)
1320 return;
1321
1322 ret = usb_interrupt_msg(udev, usb_sndintpipe(udev, USB_REG_OUT_PIPE),
1323 buf, 4, NULL, USB_MSG_TIMEOUT);
1324 if (ret)
1325 dev_err(&udev->dev, "ath9k_htc: USB reboot failed\n");
1326
1327 kfree(buf);
1328}
1329
1330static void ath9k_hif_usb_disconnect(struct usb_interface *interface)
1331{
1332 struct usb_device *udev = interface_to_usbdev(interface);
1333 struct hif_device_usb *hif_dev = usb_get_intfdata(interface);
1334 bool unplugged = (udev->state == USB_STATE_NOTATTACHED) ? true : false;
1335
1336 if (!hif_dev)
1337 return;
1338
1339 wait_for_completion(&hif_dev->fw_done);
1340
1341 if (hif_dev->flags & HIF_USB_READY) {
1342 ath9k_htc_hw_deinit(hif_dev->htc_handle, unplugged);
1343 ath9k_htc_hw_free(hif_dev->htc_handle);
1344 ath9k_hif_usb_dev_deinit(hif_dev);
1345 }
1346
1347 usb_set_intfdata(interface, NULL);
1348
1349 /* If firmware was loaded we should drop it
1350 * go back to first stage bootloader. */
1351 if (!unplugged && (hif_dev->flags & HIF_USB_READY))
1352 ath9k_hif_usb_reboot(udev);
1353
1354 kfree(hif_dev);
1355 dev_info(&udev->dev, "ath9k_htc: USB layer deinitialized\n");
1356 usb_put_dev(udev);
1357}
1358
1359#ifdef CONFIG_PM
1360static int ath9k_hif_usb_suspend(struct usb_interface *interface,
1361 pm_message_t message)
1362{
1363 struct hif_device_usb *hif_dev = usb_get_intfdata(interface);
1364
1365 /*
1366 * The device has to be set to FULLSLEEP mode in case no
1367 * interface is up.
1368 */
1369 if (!(hif_dev->flags & HIF_USB_START))
1370 ath9k_htc_suspend(hif_dev->htc_handle);
1371
1372 wait_for_completion(&hif_dev->fw_done);
1373
1374 if (hif_dev->flags & HIF_USB_READY)
1375 ath9k_hif_usb_dealloc_urbs(hif_dev);
1376
1377 return 0;
1378}
1379
1380static int ath9k_hif_usb_resume(struct usb_interface *interface)
1381{
1382 struct hif_device_usb *hif_dev = usb_get_intfdata(interface);
1383 struct htc_target *htc_handle = hif_dev->htc_handle;
1384 int ret;
1385 const struct firmware *fw;
1386
1387 ret = ath9k_hif_usb_alloc_urbs(hif_dev);
1388 if (ret)
1389 return ret;
1390
1391 if (hif_dev->flags & HIF_USB_READY) {
1392 /* request cached firmware during suspend/resume cycle */
1393 ret = request_firmware(&fw, hif_dev->fw_name,
1394 &hif_dev->udev->dev);
1395 if (ret)
1396 goto fail_resume;
1397
1398 hif_dev->fw_data = fw->data;
1399 hif_dev->fw_size = fw->size;
1400 ret = ath9k_hif_usb_download_fw(hif_dev);
1401 release_firmware(fw);
1402 if (ret)
1403 goto fail_resume;
1404 } else {
1405 ath9k_hif_usb_dealloc_urbs(hif_dev);
1406 return -EIO;
1407 }
1408
1409 mdelay(100);
1410
1411 ret = ath9k_htc_resume(htc_handle);
1412
1413 if (ret)
1414 goto fail_resume;
1415
1416 return 0;
1417
1418fail_resume:
1419 ath9k_hif_usb_dealloc_urbs(hif_dev);
1420
1421 return ret;
1422}
1423#endif
1424
1425static struct usb_driver ath9k_hif_usb_driver = {
1426 .name = KBUILD_MODNAME,
1427 .probe = ath9k_hif_usb_probe,
1428 .disconnect = ath9k_hif_usb_disconnect,
1429#ifdef CONFIG_PM
1430 .suspend = ath9k_hif_usb_suspend,
1431 .resume = ath9k_hif_usb_resume,
1432 .reset_resume = ath9k_hif_usb_resume,
1433#endif
1434 .id_table = ath9k_hif_usb_ids,
1435 .soft_unbind = 1,
1436 .disable_hub_initiated_lpm = 1,
1437};
1438
1439int ath9k_hif_usb_init(void)
1440{
1441 return usb_register(&ath9k_hif_usb_driver);
1442}
1443
1444void ath9k_hif_usb_exit(void)
1445{
1446 usb_deregister(&ath9k_hif_usb_driver);
1447}