1 /* 2 * Copyright (c) 2010-2011 Atheros Communications Inc. 3 * 4 * Permission to use, copy, modify, and/or distribute this software for any 5 * purpose with or without fee is hereby granted, provided that the above 6 * copyright notice and this permission notice appear in all copies. 7 * 8 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES 9 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF 10 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR 11 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES 12 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 13 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 14 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 15 */ 16 17 #include <asm/unaligned.h> 18 #include "htc.h" 19 20 MODULE_FIRMWARE(HTC_7010_MODULE_FW); 21 MODULE_FIRMWARE(HTC_9271_MODULE_FW); 22 23 static const struct usb_device_id ath9k_hif_usb_ids[] = { 24 { USB_DEVICE(0x0cf3, 0x9271) }, /* Atheros */ 25 { USB_DEVICE(0x0cf3, 0x1006) }, /* Atheros */ 26 { USB_DEVICE(0x0846, 0x9030) }, /* Netgear N150 */ 27 { USB_DEVICE(0x07b8, 0x9271) }, /* Altai WA1011N-GU */ 28 { USB_DEVICE(0x07D1, 0x3A10) }, /* Dlink Wireless 150 */ 29 { USB_DEVICE(0x13D3, 0x3327) }, /* Azurewave */ 30 { USB_DEVICE(0x13D3, 0x3328) }, /* Azurewave */ 31 { USB_DEVICE(0x13D3, 0x3346) }, /* IMC Networks */ 32 { USB_DEVICE(0x13D3, 0x3348) }, /* Azurewave */ 33 { USB_DEVICE(0x13D3, 0x3349) }, /* Azurewave */ 34 { USB_DEVICE(0x13D3, 0x3350) }, /* Azurewave */ 35 { USB_DEVICE(0x04CA, 0x4605) }, /* Liteon */ 36 { USB_DEVICE(0x040D, 0x3801) }, /* VIA */ 37 { USB_DEVICE(0x0cf3, 0xb003) }, /* Ubiquiti WifiStation Ext */ 38 { USB_DEVICE(0x0cf3, 0xb002) }, /* Ubiquiti WifiStation */ 39 { USB_DEVICE(0x057c, 0x8403) }, /* AVM FRITZ!WLAN 11N v2 USB */ 40 { USB_DEVICE(0x0471, 0x209e) }, /* Philips (or NXP) PTA01 */ 41 { USB_DEVICE(0x1eda, 0x2315) }, /* AirTies */ 42 43 { USB_DEVICE(0x0cf3, 0x7015), 44 .driver_info = AR9287_USB }, /* Atheros */ 45 { USB_DEVICE(0x1668, 0x1200), 46 .driver_info = AR9287_USB }, /* Verizon */ 47 48 { USB_DEVICE(0x0cf3, 0x7010), 49 .driver_info = AR9280_USB }, /* Atheros */ 50 { USB_DEVICE(0x0846, 0x9018), 51 .driver_info = AR9280_USB }, /* Netgear WNDA3200 */ 52 { USB_DEVICE(0x083A, 0xA704), 53 .driver_info = AR9280_USB }, /* SMC Networks */ 54 { USB_DEVICE(0x0411, 0x017f), 55 .driver_info = AR9280_USB }, /* Sony UWA-BR100 */ 56 { USB_DEVICE(0x0411, 0x0197), 57 .driver_info = AR9280_USB }, /* Buffalo WLI-UV-AG300P */ 58 { USB_DEVICE(0x04da, 0x3904), 59 .driver_info = AR9280_USB }, 60 { USB_DEVICE(0x0930, 0x0a08), 61 .driver_info = AR9280_USB }, /* Toshiba WLM-20U2 and GN-1080 */ 62 63 { USB_DEVICE(0x0cf3, 0x20ff), 64 .driver_info = STORAGE_DEVICE }, 65 66 { }, 67 }; 68 69 MODULE_DEVICE_TABLE(usb, ath9k_hif_usb_ids); 70 71 static int __hif_usb_tx(struct hif_device_usb *hif_dev); 72 73 static void hif_usb_regout_cb(struct urb *urb) 74 { 75 struct cmd_buf *cmd = (struct cmd_buf *)urb->context; 76 77 switch (urb->status) { 78 case 0: 79 break; 80 case -ENOENT: 81 case -ECONNRESET: 82 case -ENODEV: 83 case -ESHUTDOWN: 84 goto free; 85 default: 86 break; 87 } 88 89 if (cmd) { 90 ath9k_htc_txcompletion_cb(cmd->hif_dev->htc_handle, 91 cmd->skb, true); 92 kfree(cmd); 93 } 94 95 return; 96 free: 97 kfree_skb(cmd->skb); 98 kfree(cmd); 99 } 100 101 static int hif_usb_send_regout(struct hif_device_usb *hif_dev, 102 struct sk_buff *skb) 103 { 104 struct urb *urb; 105 struct cmd_buf *cmd; 106 int ret = 0; 107 108 urb = usb_alloc_urb(0, GFP_KERNEL); 109 if (urb == NULL) 110 return -ENOMEM; 111 112 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL); 113 if (cmd == NULL) { 114 usb_free_urb(urb); 115 return -ENOMEM; 116 } 117 118 cmd->skb = skb; 119 cmd->hif_dev = hif_dev; 120 121 usb_fill_int_urb(urb, hif_dev->udev, 122 usb_sndintpipe(hif_dev->udev, USB_REG_OUT_PIPE), 123 skb->data, skb->len, 124 hif_usb_regout_cb, cmd, 1); 125 126 usb_anchor_urb(urb, &hif_dev->regout_submitted); 127 ret = usb_submit_urb(urb, GFP_KERNEL); 128 if (ret) { 129 usb_unanchor_urb(urb); 130 kfree(cmd); 131 } 132 usb_free_urb(urb); 133 134 return ret; 135 } 136 137 static void hif_usb_mgmt_cb(struct urb *urb) 138 { 139 struct cmd_buf *cmd = (struct cmd_buf *)urb->context; 140 struct hif_device_usb *hif_dev; 141 unsigned long flags; 142 bool txok = true; 143 144 if (!cmd || !cmd->skb || !cmd->hif_dev) 145 return; 146 147 hif_dev = cmd->hif_dev; 148 149 switch (urb->status) { 150 case 0: 151 break; 152 case -ENOENT: 153 case -ECONNRESET: 154 case -ENODEV: 155 case -ESHUTDOWN: 156 txok = false; 157 158 /* 159 * If the URBs are being flushed, no need to complete 160 * this packet. 161 */ 162 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags); 163 if (hif_dev->tx.flags & HIF_USB_TX_FLUSH) { 164 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags); 165 dev_kfree_skb_any(cmd->skb); 166 kfree(cmd); 167 return; 168 } 169 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags); 170 171 break; 172 default: 173 txok = false; 174 break; 175 } 176 177 skb_pull(cmd->skb, 4); 178 ath9k_htc_txcompletion_cb(cmd->hif_dev->htc_handle, 179 cmd->skb, txok); 180 kfree(cmd); 181 } 182 183 static int hif_usb_send_mgmt(struct hif_device_usb *hif_dev, 184 struct sk_buff *skb) 185 { 186 struct urb *urb; 187 struct cmd_buf *cmd; 188 int ret = 0; 189 __le16 *hdr; 190 191 urb = usb_alloc_urb(0, GFP_ATOMIC); 192 if (urb == NULL) 193 return -ENOMEM; 194 195 cmd = kzalloc(sizeof(*cmd), GFP_ATOMIC); 196 if (cmd == NULL) { 197 usb_free_urb(urb); 198 return -ENOMEM; 199 } 200 201 cmd->skb = skb; 202 cmd->hif_dev = hif_dev; 203 204 hdr = skb_push(skb, 4); 205 *hdr++ = cpu_to_le16(skb->len - 4); 206 *hdr++ = cpu_to_le16(ATH_USB_TX_STREAM_MODE_TAG); 207 208 usb_fill_bulk_urb(urb, hif_dev->udev, 209 usb_sndbulkpipe(hif_dev->udev, USB_WLAN_TX_PIPE), 210 skb->data, skb->len, 211 hif_usb_mgmt_cb, cmd); 212 213 usb_anchor_urb(urb, &hif_dev->mgmt_submitted); 214 ret = usb_submit_urb(urb, GFP_ATOMIC); 215 if (ret) { 216 usb_unanchor_urb(urb); 217 kfree(cmd); 218 } 219 usb_free_urb(urb); 220 221 return ret; 222 } 223 224 static inline void ath9k_skb_queue_purge(struct hif_device_usb *hif_dev, 225 struct sk_buff_head *list) 226 { 227 struct sk_buff *skb; 228 229 while ((skb = __skb_dequeue(list)) != NULL) { 230 dev_kfree_skb_any(skb); 231 } 232 } 233 234 static inline void ath9k_skb_queue_complete(struct hif_device_usb *hif_dev, 235 struct sk_buff_head *queue, 236 bool txok) 237 { 238 struct sk_buff *skb; 239 240 while ((skb = __skb_dequeue(queue)) != NULL) { 241 #ifdef CONFIG_ATH9K_HTC_DEBUGFS 242 int ln = skb->len; 243 #endif 244 ath9k_htc_txcompletion_cb(hif_dev->htc_handle, 245 skb, txok); 246 if (txok) { 247 TX_STAT_INC(hif_dev, skb_success); 248 TX_STAT_ADD(hif_dev, skb_success_bytes, ln); 249 } 250 else 251 TX_STAT_INC(hif_dev, skb_failed); 252 } 253 } 254 255 static void hif_usb_tx_cb(struct urb *urb) 256 { 257 struct tx_buf *tx_buf = (struct tx_buf *) urb->context; 258 struct hif_device_usb *hif_dev; 259 bool txok = true; 260 261 if (!tx_buf || !tx_buf->hif_dev) 262 return; 263 264 hif_dev = tx_buf->hif_dev; 265 266 switch (urb->status) { 267 case 0: 268 break; 269 case -ENOENT: 270 case -ECONNRESET: 271 case -ENODEV: 272 case -ESHUTDOWN: 273 txok = false; 274 275 /* 276 * If the URBs are being flushed, no need to add this 277 * URB to the free list. 278 */ 279 spin_lock(&hif_dev->tx.tx_lock); 280 if (hif_dev->tx.flags & HIF_USB_TX_FLUSH) { 281 spin_unlock(&hif_dev->tx.tx_lock); 282 ath9k_skb_queue_purge(hif_dev, &tx_buf->skb_queue); 283 return; 284 } 285 spin_unlock(&hif_dev->tx.tx_lock); 286 287 break; 288 default: 289 txok = false; 290 break; 291 } 292 293 ath9k_skb_queue_complete(hif_dev, &tx_buf->skb_queue, txok); 294 295 /* Re-initialize the SKB queue */ 296 tx_buf->len = tx_buf->offset = 0; 297 __skb_queue_head_init(&tx_buf->skb_queue); 298 299 /* Add this TX buffer to the free list */ 300 spin_lock(&hif_dev->tx.tx_lock); 301 list_move_tail(&tx_buf->list, &hif_dev->tx.tx_buf); 302 hif_dev->tx.tx_buf_cnt++; 303 if (!(hif_dev->tx.flags & HIF_USB_TX_STOP)) 304 __hif_usb_tx(hif_dev); /* Check for pending SKBs */ 305 TX_STAT_INC(hif_dev, buf_completed); 306 spin_unlock(&hif_dev->tx.tx_lock); 307 } 308 309 /* TX lock has to be taken */ 310 static int __hif_usb_tx(struct hif_device_usb *hif_dev) 311 { 312 struct tx_buf *tx_buf = NULL; 313 struct sk_buff *nskb = NULL; 314 int ret = 0, i; 315 u16 tx_skb_cnt = 0; 316 u8 *buf; 317 __le16 *hdr; 318 319 if (hif_dev->tx.tx_skb_cnt == 0) 320 return 0; 321 322 /* Check if a free TX buffer is available */ 323 if (list_empty(&hif_dev->tx.tx_buf)) 324 return 0; 325 326 tx_buf = list_first_entry(&hif_dev->tx.tx_buf, struct tx_buf, list); 327 list_move_tail(&tx_buf->list, &hif_dev->tx.tx_pending); 328 hif_dev->tx.tx_buf_cnt--; 329 330 tx_skb_cnt = min_t(u16, hif_dev->tx.tx_skb_cnt, MAX_TX_AGGR_NUM); 331 332 for (i = 0; i < tx_skb_cnt; i++) { 333 nskb = __skb_dequeue(&hif_dev->tx.tx_skb_queue); 334 335 /* Should never be NULL */ 336 BUG_ON(!nskb); 337 338 hif_dev->tx.tx_skb_cnt--; 339 340 buf = tx_buf->buf; 341 buf += tx_buf->offset; 342 hdr = (__le16 *)buf; 343 *hdr++ = cpu_to_le16(nskb->len); 344 *hdr++ = cpu_to_le16(ATH_USB_TX_STREAM_MODE_TAG); 345 buf += 4; 346 memcpy(buf, nskb->data, nskb->len); 347 tx_buf->len = nskb->len + 4; 348 349 if (i < (tx_skb_cnt - 1)) 350 tx_buf->offset += (((tx_buf->len - 1) / 4) + 1) * 4; 351 352 if (i == (tx_skb_cnt - 1)) 353 tx_buf->len += tx_buf->offset; 354 355 __skb_queue_tail(&tx_buf->skb_queue, nskb); 356 TX_STAT_INC(hif_dev, skb_queued); 357 } 358 359 usb_fill_bulk_urb(tx_buf->urb, hif_dev->udev, 360 usb_sndbulkpipe(hif_dev->udev, USB_WLAN_TX_PIPE), 361 tx_buf->buf, tx_buf->len, 362 hif_usb_tx_cb, tx_buf); 363 364 ret = usb_submit_urb(tx_buf->urb, GFP_ATOMIC); 365 if (ret) { 366 tx_buf->len = tx_buf->offset = 0; 367 ath9k_skb_queue_complete(hif_dev, &tx_buf->skb_queue, false); 368 __skb_queue_head_init(&tx_buf->skb_queue); 369 list_move_tail(&tx_buf->list, &hif_dev->tx.tx_buf); 370 hif_dev->tx.tx_buf_cnt++; 371 } else { 372 TX_STAT_INC(hif_dev, buf_queued); 373 } 374 375 return ret; 376 } 377 378 static int hif_usb_send_tx(struct hif_device_usb *hif_dev, struct sk_buff *skb) 379 { 380 struct ath9k_htc_tx_ctl *tx_ctl; 381 unsigned long flags; 382 int ret = 0; 383 384 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags); 385 386 if (hif_dev->tx.flags & HIF_USB_TX_STOP) { 387 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags); 388 return -ENODEV; 389 } 390 391 /* Check if the max queue count has been reached */ 392 if (hif_dev->tx.tx_skb_cnt > MAX_TX_BUF_NUM) { 393 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags); 394 return -ENOMEM; 395 } 396 397 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags); 398 399 tx_ctl = HTC_SKB_CB(skb); 400 401 /* Mgmt/Beacon frames don't use the TX buffer pool */ 402 if ((tx_ctl->type == ATH9K_HTC_MGMT) || 403 (tx_ctl->type == ATH9K_HTC_BEACON)) { 404 ret = hif_usb_send_mgmt(hif_dev, skb); 405 } 406 407 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags); 408 409 if ((tx_ctl->type == ATH9K_HTC_NORMAL) || 410 (tx_ctl->type == ATH9K_HTC_AMPDU)) { 411 __skb_queue_tail(&hif_dev->tx.tx_skb_queue, skb); 412 hif_dev->tx.tx_skb_cnt++; 413 } 414 415 /* Check if AMPDUs have to be sent immediately */ 416 if ((hif_dev->tx.tx_buf_cnt == MAX_TX_URB_NUM) && 417 (hif_dev->tx.tx_skb_cnt < 2)) { 418 __hif_usb_tx(hif_dev); 419 } 420 421 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags); 422 423 return ret; 424 } 425 426 static void hif_usb_start(void *hif_handle) 427 { 428 struct hif_device_usb *hif_dev = hif_handle; 429 unsigned long flags; 430 431 hif_dev->flags |= HIF_USB_START; 432 433 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags); 434 hif_dev->tx.flags &= ~HIF_USB_TX_STOP; 435 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags); 436 } 437 438 static void hif_usb_stop(void *hif_handle) 439 { 440 struct hif_device_usb *hif_dev = hif_handle; 441 struct tx_buf *tx_buf = NULL, *tx_buf_tmp = NULL; 442 unsigned long flags; 443 444 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags); 445 ath9k_skb_queue_complete(hif_dev, &hif_dev->tx.tx_skb_queue, false); 446 hif_dev->tx.tx_skb_cnt = 0; 447 hif_dev->tx.flags |= HIF_USB_TX_STOP; 448 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags); 449 450 /* The pending URBs have to be canceled. */ 451 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags); 452 list_for_each_entry_safe(tx_buf, tx_buf_tmp, 453 &hif_dev->tx.tx_pending, list) { 454 usb_get_urb(tx_buf->urb); 455 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags); 456 usb_kill_urb(tx_buf->urb); 457 list_del(&tx_buf->list); 458 usb_free_urb(tx_buf->urb); 459 kfree(tx_buf->buf); 460 kfree(tx_buf); 461 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags); 462 } 463 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags); 464 465 usb_kill_anchored_urbs(&hif_dev->mgmt_submitted); 466 } 467 468 static int hif_usb_send(void *hif_handle, u8 pipe_id, struct sk_buff *skb) 469 { 470 struct hif_device_usb *hif_dev = hif_handle; 471 int ret = 0; 472 473 switch (pipe_id) { 474 case USB_WLAN_TX_PIPE: 475 ret = hif_usb_send_tx(hif_dev, skb); 476 break; 477 case USB_REG_OUT_PIPE: 478 ret = hif_usb_send_regout(hif_dev, skb); 479 break; 480 default: 481 dev_err(&hif_dev->udev->dev, 482 "ath9k_htc: Invalid TX pipe: %d\n", pipe_id); 483 ret = -EINVAL; 484 break; 485 } 486 487 return ret; 488 } 489 490 static inline bool check_index(struct sk_buff *skb, u8 idx) 491 { 492 struct ath9k_htc_tx_ctl *tx_ctl; 493 494 tx_ctl = HTC_SKB_CB(skb); 495 496 if ((tx_ctl->type == ATH9K_HTC_AMPDU) && 497 (tx_ctl->sta_idx == idx)) 498 return true; 499 500 return false; 501 } 502 503 static void hif_usb_sta_drain(void *hif_handle, u8 idx) 504 { 505 struct hif_device_usb *hif_dev = hif_handle; 506 struct sk_buff *skb, *tmp; 507 unsigned long flags; 508 509 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags); 510 511 skb_queue_walk_safe(&hif_dev->tx.tx_skb_queue, skb, tmp) { 512 if (check_index(skb, idx)) { 513 __skb_unlink(skb, &hif_dev->tx.tx_skb_queue); 514 ath9k_htc_txcompletion_cb(hif_dev->htc_handle, 515 skb, false); 516 hif_dev->tx.tx_skb_cnt--; 517 TX_STAT_INC(hif_dev, skb_failed); 518 } 519 } 520 521 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags); 522 } 523 524 static struct ath9k_htc_hif hif_usb = { 525 .transport = ATH9K_HIF_USB, 526 .name = "ath9k_hif_usb", 527 528 .control_ul_pipe = USB_REG_OUT_PIPE, 529 .control_dl_pipe = USB_REG_IN_PIPE, 530 531 .start = hif_usb_start, 532 .stop = hif_usb_stop, 533 .sta_drain = hif_usb_sta_drain, 534 .send = hif_usb_send, 535 }; 536 537 static void ath9k_hif_usb_rx_stream(struct hif_device_usb *hif_dev, 538 struct sk_buff *skb) 539 { 540 struct sk_buff *nskb, *skb_pool[MAX_PKT_NUM_IN_TRANSFER]; 541 int index = 0, i, len = skb->len; 542 int rx_remain_len, rx_pkt_len; 543 u16 pool_index = 0; 544 u8 *ptr; 545 546 spin_lock(&hif_dev->rx_lock); 547 548 rx_remain_len = hif_dev->rx_remain_len; 549 rx_pkt_len = hif_dev->rx_transfer_len; 550 551 if (rx_remain_len != 0) { 552 struct sk_buff *remain_skb = hif_dev->remain_skb; 553 554 if (remain_skb) { 555 ptr = (u8 *) remain_skb->data; 556 557 index = rx_remain_len; 558 rx_remain_len -= hif_dev->rx_pad_len; 559 ptr += rx_pkt_len; 560 561 memcpy(ptr, skb->data, rx_remain_len); 562 563 rx_pkt_len += rx_remain_len; 564 skb_put(remain_skb, rx_pkt_len); 565 566 skb_pool[pool_index++] = remain_skb; 567 hif_dev->remain_skb = NULL; 568 hif_dev->rx_remain_len = 0; 569 } else { 570 index = rx_remain_len; 571 } 572 } 573 574 spin_unlock(&hif_dev->rx_lock); 575 576 while (index < len) { 577 u16 pkt_len; 578 u16 pkt_tag; 579 u16 pad_len; 580 int chk_idx; 581 582 ptr = (u8 *) skb->data; 583 584 pkt_len = get_unaligned_le16(ptr + index); 585 pkt_tag = get_unaligned_le16(ptr + index + 2); 586 587 /* It is supposed that if we have an invalid pkt_tag or 588 * pkt_len then the whole input SKB is considered invalid 589 * and dropped; the associated packets already in skb_pool 590 * are dropped, too. 591 */ 592 if (pkt_tag != ATH_USB_RX_STREAM_MODE_TAG) { 593 RX_STAT_INC(hif_dev, skb_dropped); 594 goto invalid_pkt; 595 } 596 597 if (pkt_len > 2 * MAX_RX_BUF_SIZE) { 598 dev_err(&hif_dev->udev->dev, 599 "ath9k_htc: invalid pkt_len (%x)\n", pkt_len); 600 RX_STAT_INC(hif_dev, skb_dropped); 601 goto invalid_pkt; 602 } 603 604 pad_len = 4 - (pkt_len & 0x3); 605 if (pad_len == 4) 606 pad_len = 0; 607 608 chk_idx = index; 609 index = index + 4 + pkt_len + pad_len; 610 611 if (index > MAX_RX_BUF_SIZE) { 612 spin_lock(&hif_dev->rx_lock); 613 nskb = __dev_alloc_skb(pkt_len + 32, GFP_ATOMIC); 614 if (!nskb) { 615 dev_err(&hif_dev->udev->dev, 616 "ath9k_htc: RX memory allocation error\n"); 617 spin_unlock(&hif_dev->rx_lock); 618 goto err; 619 } 620 621 hif_dev->rx_remain_len = index - MAX_RX_BUF_SIZE; 622 hif_dev->rx_transfer_len = 623 MAX_RX_BUF_SIZE - chk_idx - 4; 624 hif_dev->rx_pad_len = pad_len; 625 626 skb_reserve(nskb, 32); 627 RX_STAT_INC(hif_dev, skb_allocated); 628 629 memcpy(nskb->data, &(skb->data[chk_idx+4]), 630 hif_dev->rx_transfer_len); 631 632 /* Record the buffer pointer */ 633 hif_dev->remain_skb = nskb; 634 spin_unlock(&hif_dev->rx_lock); 635 } else { 636 if (pool_index == MAX_PKT_NUM_IN_TRANSFER) { 637 dev_err(&hif_dev->udev->dev, 638 "ath9k_htc: over RX MAX_PKT_NUM\n"); 639 goto err; 640 } 641 nskb = __dev_alloc_skb(pkt_len + 32, GFP_ATOMIC); 642 if (!nskb) { 643 dev_err(&hif_dev->udev->dev, 644 "ath9k_htc: RX memory allocation error\n"); 645 goto err; 646 } 647 skb_reserve(nskb, 32); 648 RX_STAT_INC(hif_dev, skb_allocated); 649 650 memcpy(nskb->data, &(skb->data[chk_idx+4]), pkt_len); 651 skb_put(nskb, pkt_len); 652 skb_pool[pool_index++] = nskb; 653 } 654 } 655 656 err: 657 for (i = 0; i < pool_index; i++) { 658 RX_STAT_ADD(hif_dev, skb_completed_bytes, skb_pool[i]->len); 659 ath9k_htc_rx_msg(hif_dev->htc_handle, skb_pool[i], 660 skb_pool[i]->len, USB_WLAN_RX_PIPE); 661 RX_STAT_INC(hif_dev, skb_completed); 662 } 663 return; 664 invalid_pkt: 665 for (i = 0; i < pool_index; i++) { 666 dev_kfree_skb_any(skb_pool[i]); 667 RX_STAT_INC(hif_dev, skb_dropped); 668 } 669 return; 670 } 671 672 static void ath9k_hif_usb_rx_cb(struct urb *urb) 673 { 674 struct rx_buf *rx_buf = (struct rx_buf *)urb->context; 675 struct hif_device_usb *hif_dev = rx_buf->hif_dev; 676 struct sk_buff *skb = rx_buf->skb; 677 int ret; 678 679 if (!skb) 680 return; 681 682 if (!hif_dev) 683 goto free; 684 685 switch (urb->status) { 686 case 0: 687 break; 688 case -ENOENT: 689 case -ECONNRESET: 690 case -ENODEV: 691 case -ESHUTDOWN: 692 goto free; 693 default: 694 goto resubmit; 695 } 696 697 if (likely(urb->actual_length != 0)) { 698 skb_put(skb, urb->actual_length); 699 ath9k_hif_usb_rx_stream(hif_dev, skb); 700 } 701 702 resubmit: 703 skb_reset_tail_pointer(skb); 704 skb_trim(skb, 0); 705 706 usb_anchor_urb(urb, &hif_dev->rx_submitted); 707 ret = usb_submit_urb(urb, GFP_ATOMIC); 708 if (ret) { 709 usb_unanchor_urb(urb); 710 goto free; 711 } 712 713 return; 714 free: 715 kfree_skb(skb); 716 kfree(rx_buf); 717 } 718 719 static void ath9k_hif_usb_reg_in_cb(struct urb *urb) 720 { 721 struct rx_buf *rx_buf = (struct rx_buf *)urb->context; 722 struct hif_device_usb *hif_dev = rx_buf->hif_dev; 723 struct sk_buff *skb = rx_buf->skb; 724 int ret; 725 726 if (!skb) 727 return; 728 729 if (!hif_dev) 730 goto free_skb; 731 732 switch (urb->status) { 733 case 0: 734 break; 735 case -ENOENT: 736 case -ECONNRESET: 737 case -ENODEV: 738 case -ESHUTDOWN: 739 goto free_skb; 740 default: 741 skb_reset_tail_pointer(skb); 742 skb_trim(skb, 0); 743 744 goto resubmit; 745 } 746 747 if (likely(urb->actual_length != 0)) { 748 skb_put(skb, urb->actual_length); 749 750 /* 751 * Process the command first. 752 * skb is either freed here or passed to be 753 * managed to another callback function. 754 */ 755 ath9k_htc_rx_msg(hif_dev->htc_handle, skb, 756 skb->len, USB_REG_IN_PIPE); 757 758 skb = alloc_skb(MAX_REG_IN_BUF_SIZE, GFP_ATOMIC); 759 if (!skb) { 760 dev_err(&hif_dev->udev->dev, 761 "ath9k_htc: REG_IN memory allocation failure\n"); 762 goto free_rx_buf; 763 } 764 765 rx_buf->skb = skb; 766 767 usb_fill_int_urb(urb, hif_dev->udev, 768 usb_rcvintpipe(hif_dev->udev, 769 USB_REG_IN_PIPE), 770 skb->data, MAX_REG_IN_BUF_SIZE, 771 ath9k_hif_usb_reg_in_cb, rx_buf, 1); 772 } 773 774 resubmit: 775 usb_anchor_urb(urb, &hif_dev->reg_in_submitted); 776 ret = usb_submit_urb(urb, GFP_ATOMIC); 777 if (ret) { 778 usb_unanchor_urb(urb); 779 goto free_skb; 780 } 781 782 return; 783 free_skb: 784 kfree_skb(skb); 785 free_rx_buf: 786 kfree(rx_buf); 787 urb->context = NULL; 788 } 789 790 static void ath9k_hif_usb_dealloc_tx_urbs(struct hif_device_usb *hif_dev) 791 { 792 struct tx_buf *tx_buf = NULL, *tx_buf_tmp = NULL; 793 unsigned long flags; 794 795 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags); 796 list_for_each_entry_safe(tx_buf, tx_buf_tmp, 797 &hif_dev->tx.tx_buf, list) { 798 list_del(&tx_buf->list); 799 usb_free_urb(tx_buf->urb); 800 kfree(tx_buf->buf); 801 kfree(tx_buf); 802 } 803 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags); 804 805 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags); 806 hif_dev->tx.flags |= HIF_USB_TX_FLUSH; 807 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags); 808 809 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags); 810 list_for_each_entry_safe(tx_buf, tx_buf_tmp, 811 &hif_dev->tx.tx_pending, list) { 812 usb_get_urb(tx_buf->urb); 813 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags); 814 usb_kill_urb(tx_buf->urb); 815 list_del(&tx_buf->list); 816 usb_free_urb(tx_buf->urb); 817 kfree(tx_buf->buf); 818 kfree(tx_buf); 819 spin_lock_irqsave(&hif_dev->tx.tx_lock, flags); 820 } 821 spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags); 822 823 usb_kill_anchored_urbs(&hif_dev->mgmt_submitted); 824 } 825 826 static int ath9k_hif_usb_alloc_tx_urbs(struct hif_device_usb *hif_dev) 827 { 828 struct tx_buf *tx_buf; 829 int i; 830 831 INIT_LIST_HEAD(&hif_dev->tx.tx_buf); 832 INIT_LIST_HEAD(&hif_dev->tx.tx_pending); 833 spin_lock_init(&hif_dev->tx.tx_lock); 834 __skb_queue_head_init(&hif_dev->tx.tx_skb_queue); 835 init_usb_anchor(&hif_dev->mgmt_submitted); 836 837 for (i = 0; i < MAX_TX_URB_NUM; i++) { 838 tx_buf = kzalloc(sizeof(*tx_buf), GFP_KERNEL); 839 if (!tx_buf) 840 goto err; 841 842 tx_buf->buf = kzalloc(MAX_TX_BUF_SIZE, GFP_KERNEL); 843 if (!tx_buf->buf) 844 goto err; 845 846 tx_buf->urb = usb_alloc_urb(0, GFP_KERNEL); 847 if (!tx_buf->urb) 848 goto err; 849 850 tx_buf->hif_dev = hif_dev; 851 __skb_queue_head_init(&tx_buf->skb_queue); 852 853 list_add_tail(&tx_buf->list, &hif_dev->tx.tx_buf); 854 } 855 856 hif_dev->tx.tx_buf_cnt = MAX_TX_URB_NUM; 857 858 return 0; 859 err: 860 if (tx_buf) { 861 kfree(tx_buf->buf); 862 kfree(tx_buf); 863 } 864 ath9k_hif_usb_dealloc_tx_urbs(hif_dev); 865 return -ENOMEM; 866 } 867 868 static void ath9k_hif_usb_dealloc_rx_urbs(struct hif_device_usb *hif_dev) 869 { 870 usb_kill_anchored_urbs(&hif_dev->rx_submitted); 871 } 872 873 static int ath9k_hif_usb_alloc_rx_urbs(struct hif_device_usb *hif_dev) 874 { 875 struct rx_buf *rx_buf = NULL; 876 struct sk_buff *skb = NULL; 877 struct urb *urb = NULL; 878 int i, ret; 879 880 init_usb_anchor(&hif_dev->rx_submitted); 881 spin_lock_init(&hif_dev->rx_lock); 882 883 for (i = 0; i < MAX_RX_URB_NUM; i++) { 884 885 rx_buf = kzalloc(sizeof(*rx_buf), GFP_KERNEL); 886 if (!rx_buf) { 887 ret = -ENOMEM; 888 goto err_rxb; 889 } 890 891 /* Allocate URB */ 892 urb = usb_alloc_urb(0, GFP_KERNEL); 893 if (urb == NULL) { 894 ret = -ENOMEM; 895 goto err_urb; 896 } 897 898 /* Allocate buffer */ 899 skb = alloc_skb(MAX_RX_BUF_SIZE, GFP_KERNEL); 900 if (!skb) { 901 ret = -ENOMEM; 902 goto err_skb; 903 } 904 905 rx_buf->hif_dev = hif_dev; 906 rx_buf->skb = skb; 907 908 usb_fill_bulk_urb(urb, hif_dev->udev, 909 usb_rcvbulkpipe(hif_dev->udev, 910 USB_WLAN_RX_PIPE), 911 skb->data, MAX_RX_BUF_SIZE, 912 ath9k_hif_usb_rx_cb, rx_buf); 913 914 /* Anchor URB */ 915 usb_anchor_urb(urb, &hif_dev->rx_submitted); 916 917 /* Submit URB */ 918 ret = usb_submit_urb(urb, GFP_KERNEL); 919 if (ret) { 920 usb_unanchor_urb(urb); 921 goto err_submit; 922 } 923 924 /* 925 * Drop reference count. 926 * This ensures that the URB is freed when killing them. 927 */ 928 usb_free_urb(urb); 929 } 930 931 return 0; 932 933 err_submit: 934 kfree_skb(skb); 935 err_skb: 936 usb_free_urb(urb); 937 err_urb: 938 kfree(rx_buf); 939 err_rxb: 940 ath9k_hif_usb_dealloc_rx_urbs(hif_dev); 941 return ret; 942 } 943 944 static void ath9k_hif_usb_dealloc_reg_in_urbs(struct hif_device_usb *hif_dev) 945 { 946 usb_kill_anchored_urbs(&hif_dev->reg_in_submitted); 947 } 948 949 static int ath9k_hif_usb_alloc_reg_in_urbs(struct hif_device_usb *hif_dev) 950 { 951 struct rx_buf *rx_buf = NULL; 952 struct sk_buff *skb = NULL; 953 struct urb *urb = NULL; 954 int i, ret; 955 956 init_usb_anchor(&hif_dev->reg_in_submitted); 957 958 for (i = 0; i < MAX_REG_IN_URB_NUM; i++) { 959 960 rx_buf = kzalloc(sizeof(*rx_buf), GFP_KERNEL); 961 if (!rx_buf) { 962 ret = -ENOMEM; 963 goto err_rxb; 964 } 965 966 /* Allocate URB */ 967 urb = usb_alloc_urb(0, GFP_KERNEL); 968 if (urb == NULL) { 969 ret = -ENOMEM; 970 goto err_urb; 971 } 972 973 /* Allocate buffer */ 974 skb = alloc_skb(MAX_REG_IN_BUF_SIZE, GFP_KERNEL); 975 if (!skb) { 976 ret = -ENOMEM; 977 goto err_skb; 978 } 979 980 rx_buf->hif_dev = hif_dev; 981 rx_buf->skb = skb; 982 983 usb_fill_int_urb(urb, hif_dev->udev, 984 usb_rcvintpipe(hif_dev->udev, 985 USB_REG_IN_PIPE), 986 skb->data, MAX_REG_IN_BUF_SIZE, 987 ath9k_hif_usb_reg_in_cb, rx_buf, 1); 988 989 /* Anchor URB */ 990 usb_anchor_urb(urb, &hif_dev->reg_in_submitted); 991 992 /* Submit URB */ 993 ret = usb_submit_urb(urb, GFP_KERNEL); 994 if (ret) { 995 usb_unanchor_urb(urb); 996 goto err_submit; 997 } 998 999 /* 1000 * Drop reference count. 1001 * This ensures that the URB is freed when killing them. 1002 */ 1003 usb_free_urb(urb); 1004 } 1005 1006 return 0; 1007 1008 err_submit: 1009 kfree_skb(skb); 1010 err_skb: 1011 usb_free_urb(urb); 1012 err_urb: 1013 kfree(rx_buf); 1014 err_rxb: 1015 ath9k_hif_usb_dealloc_reg_in_urbs(hif_dev); 1016 return ret; 1017 } 1018 1019 static int ath9k_hif_usb_alloc_urbs(struct hif_device_usb *hif_dev) 1020 { 1021 /* Register Write */ 1022 init_usb_anchor(&hif_dev->regout_submitted); 1023 1024 /* TX */ 1025 if (ath9k_hif_usb_alloc_tx_urbs(hif_dev) < 0) 1026 goto err; 1027 1028 /* RX */ 1029 if (ath9k_hif_usb_alloc_rx_urbs(hif_dev) < 0) 1030 goto err_rx; 1031 1032 /* Register Read */ 1033 if (ath9k_hif_usb_alloc_reg_in_urbs(hif_dev) < 0) 1034 goto err_reg; 1035 1036 return 0; 1037 err_reg: 1038 ath9k_hif_usb_dealloc_rx_urbs(hif_dev); 1039 err_rx: 1040 ath9k_hif_usb_dealloc_tx_urbs(hif_dev); 1041 err: 1042 return -ENOMEM; 1043 } 1044 1045 void ath9k_hif_usb_dealloc_urbs(struct hif_device_usb *hif_dev) 1046 { 1047 usb_kill_anchored_urbs(&hif_dev->regout_submitted); 1048 ath9k_hif_usb_dealloc_reg_in_urbs(hif_dev); 1049 ath9k_hif_usb_dealloc_tx_urbs(hif_dev); 1050 ath9k_hif_usb_dealloc_rx_urbs(hif_dev); 1051 } 1052 1053 static int ath9k_hif_usb_download_fw(struct hif_device_usb *hif_dev) 1054 { 1055 int transfer, err; 1056 const void *data = hif_dev->fw_data; 1057 size_t len = hif_dev->fw_size; 1058 u32 addr = AR9271_FIRMWARE; 1059 u8 *buf = kzalloc(4096, GFP_KERNEL); 1060 u32 firm_offset; 1061 1062 if (!buf) 1063 return -ENOMEM; 1064 1065 while (len) { 1066 transfer = min_t(size_t, len, 4096); 1067 memcpy(buf, data, transfer); 1068 1069 err = usb_control_msg(hif_dev->udev, 1070 usb_sndctrlpipe(hif_dev->udev, 0), 1071 FIRMWARE_DOWNLOAD, 0x40 | USB_DIR_OUT, 1072 addr >> 8, 0, buf, transfer, 1073 USB_MSG_TIMEOUT); 1074 if (err < 0) { 1075 kfree(buf); 1076 return err; 1077 } 1078 1079 len -= transfer; 1080 data += transfer; 1081 addr += transfer; 1082 } 1083 kfree(buf); 1084 1085 if (IS_AR7010_DEVICE(hif_dev->usb_device_id->driver_info)) 1086 firm_offset = AR7010_FIRMWARE_TEXT; 1087 else 1088 firm_offset = AR9271_FIRMWARE_TEXT; 1089 1090 /* 1091 * Issue FW download complete command to firmware. 1092 */ 1093 err = usb_control_msg(hif_dev->udev, usb_sndctrlpipe(hif_dev->udev, 0), 1094 FIRMWARE_DOWNLOAD_COMP, 1095 0x40 | USB_DIR_OUT, 1096 firm_offset >> 8, 0, NULL, 0, USB_MSG_TIMEOUT); 1097 if (err) 1098 return -EIO; 1099 1100 dev_info(&hif_dev->udev->dev, "ath9k_htc: Transferred FW: %s, size: %ld\n", 1101 hif_dev->fw_name, (unsigned long) hif_dev->fw_size); 1102 1103 return 0; 1104 } 1105 1106 static int ath9k_hif_usb_dev_init(struct hif_device_usb *hif_dev) 1107 { 1108 int ret; 1109 1110 ret = ath9k_hif_usb_download_fw(hif_dev); 1111 if (ret) { 1112 dev_err(&hif_dev->udev->dev, 1113 "ath9k_htc: Firmware - %s download failed\n", 1114 hif_dev->fw_name); 1115 return ret; 1116 } 1117 1118 /* Alloc URBs */ 1119 ret = ath9k_hif_usb_alloc_urbs(hif_dev); 1120 if (ret) { 1121 dev_err(&hif_dev->udev->dev, 1122 "ath9k_htc: Unable to allocate URBs\n"); 1123 return ret; 1124 } 1125 1126 return 0; 1127 } 1128 1129 static void ath9k_hif_usb_dev_deinit(struct hif_device_usb *hif_dev) 1130 { 1131 ath9k_hif_usb_dealloc_urbs(hif_dev); 1132 } 1133 1134 /* 1135 * If initialization fails or the FW cannot be retrieved, 1136 * detach the device. 1137 */ 1138 static void ath9k_hif_usb_firmware_fail(struct hif_device_usb *hif_dev) 1139 { 1140 struct device *dev = &hif_dev->udev->dev; 1141 struct device *parent = dev->parent; 1142 1143 complete_all(&hif_dev->fw_done); 1144 1145 if (parent) 1146 device_lock(parent); 1147 1148 device_release_driver(dev); 1149 1150 if (parent) 1151 device_unlock(parent); 1152 } 1153 1154 static void ath9k_hif_usb_firmware_cb(const struct firmware *fw, void *context); 1155 1156 /* taken from iwlwifi */ 1157 static int ath9k_hif_request_firmware(struct hif_device_usb *hif_dev, 1158 bool first) 1159 { 1160 char index[8], *chip; 1161 int ret; 1162 1163 if (first) { 1164 if (htc_use_dev_fw) { 1165 hif_dev->fw_minor_index = FIRMWARE_MINOR_IDX_MAX + 1; 1166 sprintf(index, "%s", "dev"); 1167 } else { 1168 hif_dev->fw_minor_index = FIRMWARE_MINOR_IDX_MAX; 1169 sprintf(index, "%d", hif_dev->fw_minor_index); 1170 } 1171 } else { 1172 hif_dev->fw_minor_index--; 1173 sprintf(index, "%d", hif_dev->fw_minor_index); 1174 } 1175 1176 /* test for FW 1.3 */ 1177 if (MAJOR_VERSION_REQ == 1 && hif_dev->fw_minor_index == 3) { 1178 const char *filename; 1179 1180 if (IS_AR7010_DEVICE(hif_dev->usb_device_id->driver_info)) 1181 filename = FIRMWARE_AR7010_1_1; 1182 else 1183 filename = FIRMWARE_AR9271; 1184 1185 /* expected fw locations: 1186 * - htc_9271.fw (stable version 1.3, depricated) 1187 */ 1188 snprintf(hif_dev->fw_name, sizeof(hif_dev->fw_name), 1189 "%s", filename); 1190 1191 } else if (hif_dev->fw_minor_index < FIRMWARE_MINOR_IDX_MIN) { 1192 dev_err(&hif_dev->udev->dev, "no suitable firmware found!\n"); 1193 1194 return -ENOENT; 1195 } else { 1196 if (IS_AR7010_DEVICE(hif_dev->usb_device_id->driver_info)) 1197 chip = "7010"; 1198 else 1199 chip = "9271"; 1200 1201 /* expected fw locations: 1202 * - ath9k_htc/htc_9271-1.dev.0.fw (development version) 1203 * - ath9k_htc/htc_9271-1.4.0.fw (stable version) 1204 */ 1205 snprintf(hif_dev->fw_name, sizeof(hif_dev->fw_name), 1206 "%s/htc_%s-%d.%s.0.fw", HTC_FW_PATH, 1207 chip, MAJOR_VERSION_REQ, index); 1208 } 1209 1210 ret = request_firmware_nowait(THIS_MODULE, true, hif_dev->fw_name, 1211 &hif_dev->udev->dev, GFP_KERNEL, 1212 hif_dev, ath9k_hif_usb_firmware_cb); 1213 if (ret) { 1214 dev_err(&hif_dev->udev->dev, 1215 "ath9k_htc: Async request for firmware %s failed\n", 1216 hif_dev->fw_name); 1217 return ret; 1218 } 1219 1220 dev_info(&hif_dev->udev->dev, "ath9k_htc: Firmware %s requested\n", 1221 hif_dev->fw_name); 1222 1223 return ret; 1224 } 1225 1226 static void ath9k_hif_usb_firmware_cb(const struct firmware *fw, void *context) 1227 { 1228 struct hif_device_usb *hif_dev = context; 1229 int ret; 1230 1231 if (!fw) { 1232 ret = ath9k_hif_request_firmware(hif_dev, false); 1233 if (!ret) 1234 return; 1235 1236 dev_err(&hif_dev->udev->dev, 1237 "ath9k_htc: Failed to get firmware %s\n", 1238 hif_dev->fw_name); 1239 goto err_fw; 1240 } 1241 1242 hif_dev->htc_handle = ath9k_htc_hw_alloc(hif_dev, &hif_usb, 1243 &hif_dev->udev->dev); 1244 if (hif_dev->htc_handle == NULL) 1245 goto err_dev_alloc; 1246 1247 hif_dev->fw_data = fw->data; 1248 hif_dev->fw_size = fw->size; 1249 1250 /* Proceed with initialization */ 1251 1252 ret = ath9k_hif_usb_dev_init(hif_dev); 1253 if (ret) 1254 goto err_dev_init; 1255 1256 ret = ath9k_htc_hw_init(hif_dev->htc_handle, 1257 &hif_dev->interface->dev, 1258 hif_dev->usb_device_id->idProduct, 1259 hif_dev->udev->product, 1260 hif_dev->usb_device_id->driver_info); 1261 if (ret) { 1262 ret = -EINVAL; 1263 goto err_htc_hw_init; 1264 } 1265 1266 release_firmware(fw); 1267 hif_dev->flags |= HIF_USB_READY; 1268 complete_all(&hif_dev->fw_done); 1269 1270 return; 1271 1272 err_htc_hw_init: 1273 ath9k_hif_usb_dev_deinit(hif_dev); 1274 err_dev_init: 1275 ath9k_htc_hw_free(hif_dev->htc_handle); 1276 err_dev_alloc: 1277 release_firmware(fw); 1278 err_fw: 1279 ath9k_hif_usb_firmware_fail(hif_dev); 1280 } 1281 1282 /* 1283 * An exact copy of the function from zd1211rw. 1284 */ 1285 static int send_eject_command(struct usb_interface *interface) 1286 { 1287 struct usb_device *udev = interface_to_usbdev(interface); 1288 struct usb_host_interface *iface_desc = interface->cur_altsetting; 1289 struct usb_endpoint_descriptor *endpoint; 1290 unsigned char *cmd; 1291 u8 bulk_out_ep; 1292 int r; 1293 1294 if (iface_desc->desc.bNumEndpoints < 2) 1295 return -ENODEV; 1296 1297 /* Find bulk out endpoint */ 1298 for (r = 1; r >= 0; r--) { 1299 endpoint = &iface_desc->endpoint[r].desc; 1300 if (usb_endpoint_dir_out(endpoint) && 1301 usb_endpoint_xfer_bulk(endpoint)) { 1302 bulk_out_ep = endpoint->bEndpointAddress; 1303 break; 1304 } 1305 } 1306 if (r == -1) { 1307 dev_err(&udev->dev, 1308 "ath9k_htc: Could not find bulk out endpoint\n"); 1309 return -ENODEV; 1310 } 1311 1312 cmd = kzalloc(31, GFP_KERNEL); 1313 if (cmd == NULL) 1314 return -ENODEV; 1315 1316 /* USB bulk command block */ 1317 cmd[0] = 0x55; /* bulk command signature */ 1318 cmd[1] = 0x53; /* bulk command signature */ 1319 cmd[2] = 0x42; /* bulk command signature */ 1320 cmd[3] = 0x43; /* bulk command signature */ 1321 cmd[14] = 6; /* command length */ 1322 1323 cmd[15] = 0x1b; /* SCSI command: START STOP UNIT */ 1324 cmd[19] = 0x2; /* eject disc */ 1325 1326 dev_info(&udev->dev, "Ejecting storage device...\n"); 1327 r = usb_bulk_msg(udev, usb_sndbulkpipe(udev, bulk_out_ep), 1328 cmd, 31, NULL, 2 * USB_MSG_TIMEOUT); 1329 kfree(cmd); 1330 if (r) 1331 return r; 1332 1333 /* At this point, the device disconnects and reconnects with the real 1334 * ID numbers. */ 1335 1336 usb_set_intfdata(interface, NULL); 1337 return 0; 1338 } 1339 1340 static int ath9k_hif_usb_probe(struct usb_interface *interface, 1341 const struct usb_device_id *id) 1342 { 1343 struct usb_endpoint_descriptor *bulk_in, *bulk_out, *int_in, *int_out; 1344 struct usb_device *udev = interface_to_usbdev(interface); 1345 struct usb_host_interface *alt; 1346 struct hif_device_usb *hif_dev; 1347 int ret = 0; 1348 1349 /* Verify the expected endpoints are present */ 1350 alt = interface->cur_altsetting; 1351 if (usb_find_common_endpoints(alt, &bulk_in, &bulk_out, &int_in, &int_out) < 0 || 1352 usb_endpoint_num(bulk_in) != USB_WLAN_RX_PIPE || 1353 usb_endpoint_num(bulk_out) != USB_WLAN_TX_PIPE || 1354 usb_endpoint_num(int_in) != USB_REG_IN_PIPE || 1355 usb_endpoint_num(int_out) != USB_REG_OUT_PIPE) { 1356 dev_err(&udev->dev, 1357 "ath9k_htc: Device endpoint numbers are not the expected ones\n"); 1358 return -ENODEV; 1359 } 1360 1361 if (id->driver_info == STORAGE_DEVICE) 1362 return send_eject_command(interface); 1363 1364 hif_dev = kzalloc(sizeof(struct hif_device_usb), GFP_KERNEL); 1365 if (!hif_dev) { 1366 ret = -ENOMEM; 1367 goto err_alloc; 1368 } 1369 1370 usb_get_dev(udev); 1371 1372 hif_dev->udev = udev; 1373 hif_dev->interface = interface; 1374 hif_dev->usb_device_id = id; 1375 #ifdef CONFIG_PM 1376 udev->reset_resume = 1; 1377 #endif 1378 usb_set_intfdata(interface, hif_dev); 1379 1380 init_completion(&hif_dev->fw_done); 1381 1382 ret = ath9k_hif_request_firmware(hif_dev, true); 1383 if (ret) 1384 goto err_fw_req; 1385 1386 return ret; 1387 1388 err_fw_req: 1389 usb_set_intfdata(interface, NULL); 1390 kfree(hif_dev); 1391 usb_put_dev(udev); 1392 err_alloc: 1393 return ret; 1394 } 1395 1396 static void ath9k_hif_usb_reboot(struct usb_device *udev) 1397 { 1398 u32 reboot_cmd = 0xffffffff; 1399 void *buf; 1400 int ret; 1401 1402 buf = kmemdup(&reboot_cmd, 4, GFP_KERNEL); 1403 if (!buf) 1404 return; 1405 1406 ret = usb_interrupt_msg(udev, usb_sndintpipe(udev, USB_REG_OUT_PIPE), 1407 buf, 4, NULL, USB_MSG_TIMEOUT); 1408 if (ret) 1409 dev_err(&udev->dev, "ath9k_htc: USB reboot failed\n"); 1410 1411 kfree(buf); 1412 } 1413 1414 static void ath9k_hif_usb_disconnect(struct usb_interface *interface) 1415 { 1416 struct usb_device *udev = interface_to_usbdev(interface); 1417 struct hif_device_usb *hif_dev = usb_get_intfdata(interface); 1418 bool unplugged = (udev->state == USB_STATE_NOTATTACHED) ? true : false; 1419 1420 if (!hif_dev) 1421 return; 1422 1423 wait_for_completion(&hif_dev->fw_done); 1424 1425 if (hif_dev->flags & HIF_USB_READY) { 1426 ath9k_htc_hw_deinit(hif_dev->htc_handle, unplugged); 1427 ath9k_htc_hw_free(hif_dev->htc_handle); 1428 } 1429 1430 usb_set_intfdata(interface, NULL); 1431 1432 /* If firmware was loaded we should drop it 1433 * go back to first stage bootloader. */ 1434 if (!unplugged && (hif_dev->flags & HIF_USB_READY)) 1435 ath9k_hif_usb_reboot(udev); 1436 1437 kfree(hif_dev); 1438 dev_info(&udev->dev, "ath9k_htc: USB layer deinitialized\n"); 1439 usb_put_dev(udev); 1440 } 1441 1442 #ifdef CONFIG_PM 1443 static int ath9k_hif_usb_suspend(struct usb_interface *interface, 1444 pm_message_t message) 1445 { 1446 struct hif_device_usb *hif_dev = usb_get_intfdata(interface); 1447 1448 /* 1449 * The device has to be set to FULLSLEEP mode in case no 1450 * interface is up. 1451 */ 1452 if (!(hif_dev->flags & HIF_USB_START)) 1453 ath9k_htc_suspend(hif_dev->htc_handle); 1454 1455 wait_for_completion(&hif_dev->fw_done); 1456 1457 if (hif_dev->flags & HIF_USB_READY) 1458 ath9k_hif_usb_dealloc_urbs(hif_dev); 1459 1460 return 0; 1461 } 1462 1463 static int ath9k_hif_usb_resume(struct usb_interface *interface) 1464 { 1465 struct hif_device_usb *hif_dev = usb_get_intfdata(interface); 1466 struct htc_target *htc_handle = hif_dev->htc_handle; 1467 int ret; 1468 const struct firmware *fw; 1469 1470 ret = ath9k_hif_usb_alloc_urbs(hif_dev); 1471 if (ret) 1472 return ret; 1473 1474 if (hif_dev->flags & HIF_USB_READY) { 1475 /* request cached firmware during suspend/resume cycle */ 1476 ret = request_firmware(&fw, hif_dev->fw_name, 1477 &hif_dev->udev->dev); 1478 if (ret) 1479 goto fail_resume; 1480 1481 hif_dev->fw_data = fw->data; 1482 hif_dev->fw_size = fw->size; 1483 ret = ath9k_hif_usb_download_fw(hif_dev); 1484 release_firmware(fw); 1485 if (ret) 1486 goto fail_resume; 1487 } else { 1488 ath9k_hif_usb_dealloc_urbs(hif_dev); 1489 return -EIO; 1490 } 1491 1492 mdelay(100); 1493 1494 ret = ath9k_htc_resume(htc_handle); 1495 1496 if (ret) 1497 goto fail_resume; 1498 1499 return 0; 1500 1501 fail_resume: 1502 ath9k_hif_usb_dealloc_urbs(hif_dev); 1503 1504 return ret; 1505 } 1506 #endif 1507 1508 static struct usb_driver ath9k_hif_usb_driver = { 1509 .name = KBUILD_MODNAME, 1510 .probe = ath9k_hif_usb_probe, 1511 .disconnect = ath9k_hif_usb_disconnect, 1512 #ifdef CONFIG_PM 1513 .suspend = ath9k_hif_usb_suspend, 1514 .resume = ath9k_hif_usb_resume, 1515 .reset_resume = ath9k_hif_usb_resume, 1516 #endif 1517 .id_table = ath9k_hif_usb_ids, 1518 .soft_unbind = 1, 1519 .disable_hub_initiated_lpm = 1, 1520 }; 1521 1522 int ath9k_hif_usb_init(void) 1523 { 1524 return usb_register(&ath9k_hif_usb_driver); 1525 } 1526 1527 void ath9k_hif_usb_exit(void) 1528 { 1529 usb_deregister(&ath9k_hif_usb_driver); 1530 } 1531