1 /*
2  * Copyright (c) 2010 Broadcom Corporation
3  *
4  * Permission to use, copy, modify, and/or distribute this software for any
5  * purpose with or without fee is hereby granted, provided that the above
6  * copyright notice and this permission notice appear in all copies.
7  *
8  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
11  * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
13  * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
14  * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
15  */
16 
17 #include <linux/kernel.h>
18 #include <linux/etherdevice.h>
19 #include <linux/module.h>
20 #include <linux/inetdevice.h>
21 #include <net/cfg80211.h>
22 #include <net/rtnetlink.h>
23 #include <net/addrconf.h>
24 #include <net/ipv6.h>
25 #include <brcmu_utils.h>
26 #include <brcmu_wifi.h>
27 
28 #include "core.h"
29 #include "bus.h"
30 #include "debug.h"
31 #include "fwil_types.h"
32 #include "p2p.h"
33 #include "pno.h"
34 #include "cfg80211.h"
35 #include "fwil.h"
36 #include "feature.h"
37 #include "proto.h"
38 #include "pcie.h"
39 #include "common.h"
40 
41 #define MAX_WAIT_FOR_8021X_TX			msecs_to_jiffies(950)
42 
43 #define BRCMF_BSSIDX_INVALID			-1
44 
45 char *brcmf_ifname(struct brcmf_if *ifp)
46 {
47 	if (!ifp)
48 		return "<if_null>";
49 
50 	if (ifp->ndev)
51 		return ifp->ndev->name;
52 
53 	return "<if_none>";
54 }
55 
56 struct brcmf_if *brcmf_get_ifp(struct brcmf_pub *drvr, int ifidx)
57 {
58 	struct brcmf_if *ifp;
59 	s32 bsscfgidx;
60 
61 	if (ifidx < 0 || ifidx >= BRCMF_MAX_IFS) {
62 		brcmf_err("ifidx %d out of range\n", ifidx);
63 		return NULL;
64 	}
65 
66 	ifp = NULL;
67 	bsscfgidx = drvr->if2bss[ifidx];
68 	if (bsscfgidx >= 0)
69 		ifp = drvr->iflist[bsscfgidx];
70 
71 	return ifp;
72 }
73 
74 void brcmf_configure_arp_nd_offload(struct brcmf_if *ifp, bool enable)
75 {
76 	s32 err;
77 	u32 mode;
78 
79 	if (enable)
80 		mode = BRCMF_ARP_OL_AGENT | BRCMF_ARP_OL_PEER_AUTO_REPLY;
81 	else
82 		mode = 0;
83 
84 	/* Try to set and enable ARP offload feature, this may fail, then it  */
85 	/* is simply not supported and err 0 will be returned                 */
86 	err = brcmf_fil_iovar_int_set(ifp, "arp_ol", mode);
87 	if (err) {
88 		brcmf_dbg(TRACE, "failed to set ARP offload mode to 0x%x, err = %d\n",
89 			  mode, err);
90 	} else {
91 		err = brcmf_fil_iovar_int_set(ifp, "arpoe", enable);
92 		if (err) {
93 			brcmf_dbg(TRACE, "failed to configure (%d) ARP offload err = %d\n",
94 				  enable, err);
95 		} else {
96 			brcmf_dbg(TRACE, "successfully configured (%d) ARP offload to 0x%x\n",
97 				  enable, mode);
98 		}
99 	}
100 
101 	err = brcmf_fil_iovar_int_set(ifp, "ndoe", enable);
102 	if (err) {
103 		brcmf_dbg(TRACE, "failed to configure (%d) ND offload err = %d\n",
104 			  enable, err);
105 	} else {
106 		brcmf_dbg(TRACE, "successfully configured (%d) ND offload to 0x%x\n",
107 			  enable, mode);
108 	}
109 }
110 
111 static void _brcmf_set_multicast_list(struct work_struct *work)
112 {
113 	struct brcmf_if *ifp;
114 	struct net_device *ndev;
115 	struct netdev_hw_addr *ha;
116 	u32 cmd_value, cnt;
117 	__le32 cnt_le;
118 	char *buf, *bufp;
119 	u32 buflen;
120 	s32 err;
121 
122 	ifp = container_of(work, struct brcmf_if, multicast_work);
123 
124 	brcmf_dbg(TRACE, "Enter, bsscfgidx=%d\n", ifp->bsscfgidx);
125 
126 	ndev = ifp->ndev;
127 
128 	/* Determine initial value of allmulti flag */
129 	cmd_value = (ndev->flags & IFF_ALLMULTI) ? true : false;
130 
131 	/* Send down the multicast list first. */
132 	cnt = netdev_mc_count(ndev);
133 	buflen = sizeof(cnt) + (cnt * ETH_ALEN);
134 	buf = kmalloc(buflen, GFP_ATOMIC);
135 	if (!buf)
136 		return;
137 	bufp = buf;
138 
139 	cnt_le = cpu_to_le32(cnt);
140 	memcpy(bufp, &cnt_le, sizeof(cnt_le));
141 	bufp += sizeof(cnt_le);
142 
143 	netdev_for_each_mc_addr(ha, ndev) {
144 		if (!cnt)
145 			break;
146 		memcpy(bufp, ha->addr, ETH_ALEN);
147 		bufp += ETH_ALEN;
148 		cnt--;
149 	}
150 
151 	err = brcmf_fil_iovar_data_set(ifp, "mcast_list", buf, buflen);
152 	if (err < 0) {
153 		brcmf_err("Setting mcast_list failed, %d\n", err);
154 		cmd_value = cnt ? true : cmd_value;
155 	}
156 
157 	kfree(buf);
158 
159 	/*
160 	 * Now send the allmulti setting.  This is based on the setting in the
161 	 * net_device flags, but might be modified above to be turned on if we
162 	 * were trying to set some addresses and dongle rejected it...
163 	 */
164 	err = brcmf_fil_iovar_int_set(ifp, "allmulti", cmd_value);
165 	if (err < 0)
166 		brcmf_err("Setting allmulti failed, %d\n", err);
167 
168 	/*Finally, pick up the PROMISC flag */
169 	cmd_value = (ndev->flags & IFF_PROMISC) ? true : false;
170 	err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_SET_PROMISC, cmd_value);
171 	if (err < 0)
172 		brcmf_err("Setting BRCMF_C_SET_PROMISC failed, %d\n",
173 			  err);
174 	brcmf_configure_arp_nd_offload(ifp, !cmd_value);
175 }
176 
177 #if IS_ENABLED(CONFIG_IPV6)
178 static void _brcmf_update_ndtable(struct work_struct *work)
179 {
180 	struct brcmf_if *ifp;
181 	int i, ret;
182 
183 	ifp = container_of(work, struct brcmf_if, ndoffload_work);
184 
185 	/* clear the table in firmware */
186 	ret = brcmf_fil_iovar_data_set(ifp, "nd_hostip_clear", NULL, 0);
187 	if (ret) {
188 		brcmf_dbg(TRACE, "fail to clear nd ip table err:%d\n", ret);
189 		return;
190 	}
191 
192 	for (i = 0; i < ifp->ipv6addr_idx; i++) {
193 		ret = brcmf_fil_iovar_data_set(ifp, "nd_hostip",
194 					       &ifp->ipv6_addr_tbl[i],
195 					       sizeof(struct in6_addr));
196 		if (ret)
197 			brcmf_err("add nd ip err %d\n", ret);
198 	}
199 }
200 #else
201 static void _brcmf_update_ndtable(struct work_struct *work)
202 {
203 }
204 #endif
205 
206 static int brcmf_netdev_set_mac_address(struct net_device *ndev, void *addr)
207 {
208 	struct brcmf_if *ifp = netdev_priv(ndev);
209 	struct sockaddr *sa = (struct sockaddr *)addr;
210 	int err;
211 
212 	brcmf_dbg(TRACE, "Enter, bsscfgidx=%d\n", ifp->bsscfgidx);
213 
214 	err = brcmf_fil_iovar_data_set(ifp, "cur_etheraddr", sa->sa_data,
215 				       ETH_ALEN);
216 	if (err < 0) {
217 		brcmf_err("Setting cur_etheraddr failed, %d\n", err);
218 	} else {
219 		brcmf_dbg(TRACE, "updated to %pM\n", sa->sa_data);
220 		memcpy(ifp->mac_addr, sa->sa_data, ETH_ALEN);
221 		memcpy(ifp->ndev->dev_addr, ifp->mac_addr, ETH_ALEN);
222 	}
223 	return err;
224 }
225 
226 static void brcmf_netdev_set_multicast_list(struct net_device *ndev)
227 {
228 	struct brcmf_if *ifp = netdev_priv(ndev);
229 
230 	schedule_work(&ifp->multicast_work);
231 }
232 
233 /**
234  * brcmf_skb_is_iapp - checks if skb is an IAPP packet
235  *
236  * @skb: skb to check
237  */
238 static bool brcmf_skb_is_iapp(struct sk_buff *skb)
239 {
240 	static const u8 iapp_l2_update_packet[6] __aligned(2) = {
241 		0x00, 0x01, 0xaf, 0x81, 0x01, 0x00,
242 	};
243 	unsigned char *eth_data;
244 #if !defined(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS)
245 	const u16 *a, *b;
246 #endif
247 
248 	if (skb->len - skb->mac_len != 6 ||
249 	    !is_multicast_ether_addr(eth_hdr(skb)->h_dest))
250 		return false;
251 
252 	eth_data = skb_mac_header(skb) + ETH_HLEN;
253 #if defined(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS)
254 	return !(((*(const u32 *)eth_data) ^ (*(const u32 *)iapp_l2_update_packet)) |
255 		 ((*(const u16 *)(eth_data + 4)) ^ (*(const u16 *)(iapp_l2_update_packet + 4))));
256 #else
257 	a = (const u16 *)eth_data;
258 	b = (const u16 *)iapp_l2_update_packet;
259 
260 	return !((a[0] ^ b[0]) | (a[1] ^ b[1]) | (a[2] ^ b[2]));
261 #endif
262 }
263 
264 static netdev_tx_t brcmf_netdev_start_xmit(struct sk_buff *skb,
265 					   struct net_device *ndev)
266 {
267 	int ret;
268 	struct brcmf_if *ifp = netdev_priv(ndev);
269 	struct brcmf_pub *drvr = ifp->drvr;
270 	struct ethhdr *eh;
271 	int head_delta;
272 
273 	brcmf_dbg(DATA, "Enter, bsscfgidx=%d\n", ifp->bsscfgidx);
274 
275 	/* Can the device send data? */
276 	if (drvr->bus_if->state != BRCMF_BUS_UP) {
277 		brcmf_err("xmit rejected state=%d\n", drvr->bus_if->state);
278 		netif_stop_queue(ndev);
279 		dev_kfree_skb(skb);
280 		ret = -ENODEV;
281 		goto done;
282 	}
283 
284 	/* Some recent Broadcom's firmwares disassociate STA when they receive
285 	 * an 802.11f ADD frame. This behavior can lead to a local DoS security
286 	 * issue. Attacker may trigger disassociation of any STA by sending a
287 	 * proper Ethernet frame to the wireless interface.
288 	 *
289 	 * Moreover this feature may break AP interfaces in some specific
290 	 * setups. This applies e.g. to the bridge with hairpin mode enabled and
291 	 * IFLA_BRPORT_MCAST_TO_UCAST set. IAPP packet generated by a firmware
292 	 * will get passed back to the wireless interface and cause immediate
293 	 * disassociation of a just-connected STA.
294 	 */
295 	if (!drvr->settings->iapp && brcmf_skb_is_iapp(skb)) {
296 		dev_kfree_skb(skb);
297 		ret = -EINVAL;
298 		goto done;
299 	}
300 
301 	/* Make sure there's enough writeable headroom */
302 	if (skb_headroom(skb) < drvr->hdrlen || skb_header_cloned(skb)) {
303 		head_delta = max_t(int, drvr->hdrlen - skb_headroom(skb), 0);
304 
305 		brcmf_dbg(INFO, "%s: insufficient headroom (%d)\n",
306 			  brcmf_ifname(ifp), head_delta);
307 		atomic_inc(&drvr->bus_if->stats.pktcowed);
308 		ret = pskb_expand_head(skb, ALIGN(head_delta, NET_SKB_PAD), 0,
309 				       GFP_ATOMIC);
310 		if (ret < 0) {
311 			brcmf_err("%s: failed to expand headroom\n",
312 				  brcmf_ifname(ifp));
313 			atomic_inc(&drvr->bus_if->stats.pktcow_failed);
314 			goto done;
315 		}
316 	}
317 
318 	/* validate length for ether packet */
319 	if (skb->len < sizeof(*eh)) {
320 		ret = -EINVAL;
321 		dev_kfree_skb(skb);
322 		goto done;
323 	}
324 
325 	eh = (struct ethhdr *)(skb->data);
326 
327 	if (eh->h_proto == htons(ETH_P_PAE))
328 		atomic_inc(&ifp->pend_8021x_cnt);
329 
330 	/* determine the priority */
331 	if ((skb->priority == 0) || (skb->priority > 7))
332 		skb->priority = cfg80211_classify8021d(skb, NULL);
333 
334 	ret = brcmf_proto_tx_queue_data(drvr, ifp->ifidx, skb);
335 	if (ret < 0)
336 		brcmf_txfinalize(ifp, skb, false);
337 
338 done:
339 	if (ret) {
340 		ndev->stats.tx_dropped++;
341 	} else {
342 		ndev->stats.tx_packets++;
343 		ndev->stats.tx_bytes += skb->len;
344 	}
345 
346 	/* Return ok: we always eat the packet */
347 	return NETDEV_TX_OK;
348 }
349 
350 void brcmf_txflowblock_if(struct brcmf_if *ifp,
351 			  enum brcmf_netif_stop_reason reason, bool state)
352 {
353 	unsigned long flags;
354 
355 	if (!ifp || !ifp->ndev)
356 		return;
357 
358 	brcmf_dbg(TRACE, "enter: bsscfgidx=%d stop=0x%X reason=%d state=%d\n",
359 		  ifp->bsscfgidx, ifp->netif_stop, reason, state);
360 
361 	spin_lock_irqsave(&ifp->netif_stop_lock, flags);
362 	if (state) {
363 		if (!ifp->netif_stop)
364 			netif_stop_queue(ifp->ndev);
365 		ifp->netif_stop |= reason;
366 	} else {
367 		ifp->netif_stop &= ~reason;
368 		if (!ifp->netif_stop)
369 			netif_wake_queue(ifp->ndev);
370 	}
371 	spin_unlock_irqrestore(&ifp->netif_stop_lock, flags);
372 }
373 
374 void brcmf_netif_rx(struct brcmf_if *ifp, struct sk_buff *skb)
375 {
376 	/* Most of Broadcom's firmwares send 802.11f ADD frame every time a new
377 	 * STA connects to the AP interface. This is an obsoleted standard most
378 	 * users don't use, so don't pass these frames up unless requested.
379 	 */
380 	if (!ifp->drvr->settings->iapp && brcmf_skb_is_iapp(skb)) {
381 		brcmu_pkt_buf_free_skb(skb);
382 		return;
383 	}
384 
385 	if (skb->pkt_type == PACKET_MULTICAST)
386 		ifp->ndev->stats.multicast++;
387 
388 	if (!(ifp->ndev->flags & IFF_UP)) {
389 		brcmu_pkt_buf_free_skb(skb);
390 		return;
391 	}
392 
393 	ifp->ndev->stats.rx_bytes += skb->len;
394 	ifp->ndev->stats.rx_packets++;
395 
396 	brcmf_dbg(DATA, "rx proto=0x%X\n", ntohs(skb->protocol));
397 	if (in_interrupt())
398 		netif_rx(skb);
399 	else
400 		/* If the receive is not processed inside an ISR,
401 		 * the softirqd must be woken explicitly to service
402 		 * the NET_RX_SOFTIRQ.  This is handled by netif_rx_ni().
403 		 */
404 		netif_rx_ni(skb);
405 }
406 
407 static int brcmf_rx_hdrpull(struct brcmf_pub *drvr, struct sk_buff *skb,
408 			    struct brcmf_if **ifp)
409 {
410 	int ret;
411 
412 	/* process and remove protocol-specific header */
413 	ret = brcmf_proto_hdrpull(drvr, true, skb, ifp);
414 
415 	if (ret || !(*ifp) || !(*ifp)->ndev) {
416 		if (ret != -ENODATA && *ifp)
417 			(*ifp)->ndev->stats.rx_errors++;
418 		brcmu_pkt_buf_free_skb(skb);
419 		return -ENODATA;
420 	}
421 
422 	skb->protocol = eth_type_trans(skb, (*ifp)->ndev);
423 	return 0;
424 }
425 
426 void brcmf_rx_frame(struct device *dev, struct sk_buff *skb, bool handle_event)
427 {
428 	struct brcmf_if *ifp;
429 	struct brcmf_bus *bus_if = dev_get_drvdata(dev);
430 	struct brcmf_pub *drvr = bus_if->drvr;
431 
432 	brcmf_dbg(DATA, "Enter: %s: rxp=%p\n", dev_name(dev), skb);
433 
434 	if (brcmf_rx_hdrpull(drvr, skb, &ifp))
435 		return;
436 
437 	if (brcmf_proto_is_reorder_skb(skb)) {
438 		brcmf_proto_rxreorder(ifp, skb);
439 	} else {
440 		/* Process special event packets */
441 		if (handle_event)
442 			brcmf_fweh_process_skb(ifp->drvr, skb);
443 
444 		brcmf_netif_rx(ifp, skb);
445 	}
446 }
447 
448 void brcmf_rx_event(struct device *dev, struct sk_buff *skb)
449 {
450 	struct brcmf_if *ifp;
451 	struct brcmf_bus *bus_if = dev_get_drvdata(dev);
452 	struct brcmf_pub *drvr = bus_if->drvr;
453 
454 	brcmf_dbg(EVENT, "Enter: %s: rxp=%p\n", dev_name(dev), skb);
455 
456 	if (brcmf_rx_hdrpull(drvr, skb, &ifp))
457 		return;
458 
459 	brcmf_fweh_process_skb(ifp->drvr, skb);
460 	brcmu_pkt_buf_free_skb(skb);
461 }
462 
463 void brcmf_txfinalize(struct brcmf_if *ifp, struct sk_buff *txp, bool success)
464 {
465 	struct ethhdr *eh;
466 	u16 type;
467 
468 	eh = (struct ethhdr *)(txp->data);
469 	type = ntohs(eh->h_proto);
470 
471 	if (type == ETH_P_PAE) {
472 		atomic_dec(&ifp->pend_8021x_cnt);
473 		if (waitqueue_active(&ifp->pend_8021x_wait))
474 			wake_up(&ifp->pend_8021x_wait);
475 	}
476 
477 	if (!success)
478 		ifp->ndev->stats.tx_errors++;
479 
480 	brcmu_pkt_buf_free_skb(txp);
481 }
482 
483 static void brcmf_ethtool_get_drvinfo(struct net_device *ndev,
484 				    struct ethtool_drvinfo *info)
485 {
486 	struct brcmf_if *ifp = netdev_priv(ndev);
487 	struct brcmf_pub *drvr = ifp->drvr;
488 	char drev[BRCMU_DOTREV_LEN] = "n/a";
489 
490 	if (drvr->revinfo.result == 0)
491 		brcmu_dotrev_str(drvr->revinfo.driverrev, drev);
492 	strlcpy(info->driver, KBUILD_MODNAME, sizeof(info->driver));
493 	strlcpy(info->version, drev, sizeof(info->version));
494 	strlcpy(info->fw_version, drvr->fwver, sizeof(info->fw_version));
495 	strlcpy(info->bus_info, dev_name(drvr->bus_if->dev),
496 		sizeof(info->bus_info));
497 }
498 
499 static const struct ethtool_ops brcmf_ethtool_ops = {
500 	.get_drvinfo = brcmf_ethtool_get_drvinfo,
501 };
502 
503 static int brcmf_netdev_stop(struct net_device *ndev)
504 {
505 	struct brcmf_if *ifp = netdev_priv(ndev);
506 
507 	brcmf_dbg(TRACE, "Enter, bsscfgidx=%d\n", ifp->bsscfgidx);
508 
509 	brcmf_cfg80211_down(ndev);
510 
511 	brcmf_fil_iovar_data_set(ifp, "arp_hostip_clear", NULL, 0);
512 
513 	brcmf_net_setcarrier(ifp, false);
514 
515 	return 0;
516 }
517 
518 static int brcmf_netdev_open(struct net_device *ndev)
519 {
520 	struct brcmf_if *ifp = netdev_priv(ndev);
521 	struct brcmf_pub *drvr = ifp->drvr;
522 	struct brcmf_bus *bus_if = drvr->bus_if;
523 	u32 toe_ol;
524 
525 	brcmf_dbg(TRACE, "Enter, bsscfgidx=%d\n", ifp->bsscfgidx);
526 
527 	/* If bus is not ready, can't continue */
528 	if (bus_if->state != BRCMF_BUS_UP) {
529 		brcmf_err("failed bus is not ready\n");
530 		return -EAGAIN;
531 	}
532 
533 	atomic_set(&ifp->pend_8021x_cnt, 0);
534 
535 	/* Get current TOE mode from dongle */
536 	if (brcmf_fil_iovar_int_get(ifp, "toe_ol", &toe_ol) >= 0
537 	    && (toe_ol & TOE_TX_CSUM_OL) != 0)
538 		ndev->features |= NETIF_F_IP_CSUM;
539 	else
540 		ndev->features &= ~NETIF_F_IP_CSUM;
541 
542 	if (brcmf_cfg80211_up(ndev)) {
543 		brcmf_err("failed to bring up cfg80211\n");
544 		return -EIO;
545 	}
546 
547 	/* Clear, carrier, set when connected or AP mode. */
548 	netif_carrier_off(ndev);
549 	return 0;
550 }
551 
552 static const struct net_device_ops brcmf_netdev_ops_pri = {
553 	.ndo_open = brcmf_netdev_open,
554 	.ndo_stop = brcmf_netdev_stop,
555 	.ndo_start_xmit = brcmf_netdev_start_xmit,
556 	.ndo_set_mac_address = brcmf_netdev_set_mac_address,
557 	.ndo_set_rx_mode = brcmf_netdev_set_multicast_list
558 };
559 
560 int brcmf_net_attach(struct brcmf_if *ifp, bool rtnl_locked)
561 {
562 	struct brcmf_pub *drvr = ifp->drvr;
563 	struct net_device *ndev;
564 	s32 err;
565 
566 	brcmf_dbg(TRACE, "Enter, bsscfgidx=%d mac=%pM\n", ifp->bsscfgidx,
567 		  ifp->mac_addr);
568 	ndev = ifp->ndev;
569 
570 	/* set appropriate operations */
571 	ndev->netdev_ops = &brcmf_netdev_ops_pri;
572 
573 	ndev->needed_headroom += drvr->hdrlen;
574 	ndev->ethtool_ops = &brcmf_ethtool_ops;
575 
576 	/* set the mac address & netns */
577 	memcpy(ndev->dev_addr, ifp->mac_addr, ETH_ALEN);
578 	dev_net_set(ndev, wiphy_net(cfg_to_wiphy(drvr->config)));
579 
580 	INIT_WORK(&ifp->multicast_work, _brcmf_set_multicast_list);
581 	INIT_WORK(&ifp->ndoffload_work, _brcmf_update_ndtable);
582 
583 	if (rtnl_locked)
584 		err = register_netdevice(ndev);
585 	else
586 		err = register_netdev(ndev);
587 	if (err != 0) {
588 		brcmf_err("couldn't register the net device\n");
589 		goto fail;
590 	}
591 
592 	ndev->priv_destructor = brcmf_cfg80211_free_netdev;
593 	brcmf_dbg(INFO, "%s: Broadcom Dongle Host Driver\n", ndev->name);
594 	return 0;
595 
596 fail:
597 	drvr->iflist[ifp->bsscfgidx] = NULL;
598 	ndev->netdev_ops = NULL;
599 	return -EBADE;
600 }
601 
602 static void brcmf_net_detach(struct net_device *ndev, bool rtnl_locked)
603 {
604 	if (ndev->reg_state == NETREG_REGISTERED) {
605 		if (rtnl_locked)
606 			unregister_netdevice(ndev);
607 		else
608 			unregister_netdev(ndev);
609 	} else {
610 		brcmf_cfg80211_free_netdev(ndev);
611 		free_netdev(ndev);
612 	}
613 }
614 
615 void brcmf_net_setcarrier(struct brcmf_if *ifp, bool on)
616 {
617 	struct net_device *ndev;
618 
619 	brcmf_dbg(TRACE, "Enter, bsscfgidx=%d carrier=%d\n", ifp->bsscfgidx,
620 		  on);
621 
622 	ndev = ifp->ndev;
623 	brcmf_txflowblock_if(ifp, BRCMF_NETIF_STOP_REASON_DISCONNECTED, !on);
624 	if (on) {
625 		if (!netif_carrier_ok(ndev))
626 			netif_carrier_on(ndev);
627 
628 	} else {
629 		if (netif_carrier_ok(ndev))
630 			netif_carrier_off(ndev);
631 	}
632 }
633 
634 static int brcmf_net_p2p_open(struct net_device *ndev)
635 {
636 	brcmf_dbg(TRACE, "Enter\n");
637 
638 	return brcmf_cfg80211_up(ndev);
639 }
640 
641 static int brcmf_net_p2p_stop(struct net_device *ndev)
642 {
643 	brcmf_dbg(TRACE, "Enter\n");
644 
645 	return brcmf_cfg80211_down(ndev);
646 }
647 
648 static netdev_tx_t brcmf_net_p2p_start_xmit(struct sk_buff *skb,
649 					    struct net_device *ndev)
650 {
651 	if (skb)
652 		dev_kfree_skb_any(skb);
653 
654 	return NETDEV_TX_OK;
655 }
656 
657 static const struct net_device_ops brcmf_netdev_ops_p2p = {
658 	.ndo_open = brcmf_net_p2p_open,
659 	.ndo_stop = brcmf_net_p2p_stop,
660 	.ndo_start_xmit = brcmf_net_p2p_start_xmit
661 };
662 
663 static int brcmf_net_p2p_attach(struct brcmf_if *ifp)
664 {
665 	struct net_device *ndev;
666 
667 	brcmf_dbg(TRACE, "Enter, bsscfgidx=%d mac=%pM\n", ifp->bsscfgidx,
668 		  ifp->mac_addr);
669 	ndev = ifp->ndev;
670 
671 	ndev->netdev_ops = &brcmf_netdev_ops_p2p;
672 
673 	/* set the mac address */
674 	memcpy(ndev->dev_addr, ifp->mac_addr, ETH_ALEN);
675 
676 	if (register_netdev(ndev) != 0) {
677 		brcmf_err("couldn't register the p2p net device\n");
678 		goto fail;
679 	}
680 
681 	brcmf_dbg(INFO, "%s: Broadcom Dongle Host Driver\n", ndev->name);
682 
683 	return 0;
684 
685 fail:
686 	ifp->drvr->iflist[ifp->bsscfgidx] = NULL;
687 	ndev->netdev_ops = NULL;
688 	return -EBADE;
689 }
690 
691 struct brcmf_if *brcmf_add_if(struct brcmf_pub *drvr, s32 bsscfgidx, s32 ifidx,
692 			      bool is_p2pdev, const char *name, u8 *mac_addr)
693 {
694 	struct brcmf_if *ifp;
695 	struct net_device *ndev;
696 
697 	brcmf_dbg(TRACE, "Enter, bsscfgidx=%d, ifidx=%d\n", bsscfgidx, ifidx);
698 
699 	ifp = drvr->iflist[bsscfgidx];
700 	/*
701 	 * Delete the existing interface before overwriting it
702 	 * in case we missed the BRCMF_E_IF_DEL event.
703 	 */
704 	if (ifp) {
705 		if (ifidx) {
706 			brcmf_err("ERROR: netdev:%s already exists\n",
707 				  ifp->ndev->name);
708 			netif_stop_queue(ifp->ndev);
709 			brcmf_net_detach(ifp->ndev, false);
710 			drvr->iflist[bsscfgidx] = NULL;
711 		} else {
712 			brcmf_dbg(INFO, "netdev:%s ignore IF event\n",
713 				  ifp->ndev->name);
714 			return ERR_PTR(-EINVAL);
715 		}
716 	}
717 
718 	if (!drvr->settings->p2p_enable && is_p2pdev) {
719 		/* this is P2P_DEVICE interface */
720 		brcmf_dbg(INFO, "allocate non-netdev interface\n");
721 		ifp = kzalloc(sizeof(*ifp), GFP_KERNEL);
722 		if (!ifp)
723 			return ERR_PTR(-ENOMEM);
724 	} else {
725 		brcmf_dbg(INFO, "allocate netdev interface\n");
726 		/* Allocate netdev, including space for private structure */
727 		ndev = alloc_netdev(sizeof(*ifp), is_p2pdev ? "p2p%d" : name,
728 				    NET_NAME_UNKNOWN, ether_setup);
729 		if (!ndev)
730 			return ERR_PTR(-ENOMEM);
731 
732 		ndev->needs_free_netdev = true;
733 		ifp = netdev_priv(ndev);
734 		ifp->ndev = ndev;
735 		/* store mapping ifidx to bsscfgidx */
736 		if (drvr->if2bss[ifidx] == BRCMF_BSSIDX_INVALID)
737 			drvr->if2bss[ifidx] = bsscfgidx;
738 	}
739 
740 	ifp->drvr = drvr;
741 	drvr->iflist[bsscfgidx] = ifp;
742 	ifp->ifidx = ifidx;
743 	ifp->bsscfgidx = bsscfgidx;
744 
745 	init_waitqueue_head(&ifp->pend_8021x_wait);
746 	spin_lock_init(&ifp->netif_stop_lock);
747 
748 	if (mac_addr != NULL)
749 		memcpy(ifp->mac_addr, mac_addr, ETH_ALEN);
750 
751 	brcmf_dbg(TRACE, " ==== pid:%x, if:%s (%pM) created ===\n",
752 		  current->pid, name, ifp->mac_addr);
753 
754 	return ifp;
755 }
756 
757 static void brcmf_del_if(struct brcmf_pub *drvr, s32 bsscfgidx,
758 			 bool rtnl_locked)
759 {
760 	struct brcmf_if *ifp;
761 
762 	ifp = drvr->iflist[bsscfgidx];
763 	drvr->iflist[bsscfgidx] = NULL;
764 	if (!ifp) {
765 		brcmf_err("Null interface, bsscfgidx=%d\n", bsscfgidx);
766 		return;
767 	}
768 	brcmf_dbg(TRACE, "Enter, bsscfgidx=%d, ifidx=%d\n", bsscfgidx,
769 		  ifp->ifidx);
770 	if (drvr->if2bss[ifp->ifidx] == bsscfgidx)
771 		drvr->if2bss[ifp->ifidx] = BRCMF_BSSIDX_INVALID;
772 	if (ifp->ndev) {
773 		if (bsscfgidx == 0) {
774 			if (ifp->ndev->netdev_ops == &brcmf_netdev_ops_pri) {
775 				rtnl_lock();
776 				brcmf_netdev_stop(ifp->ndev);
777 				rtnl_unlock();
778 			}
779 		} else {
780 			netif_stop_queue(ifp->ndev);
781 		}
782 
783 		if (ifp->ndev->netdev_ops == &brcmf_netdev_ops_pri) {
784 			cancel_work_sync(&ifp->multicast_work);
785 			cancel_work_sync(&ifp->ndoffload_work);
786 		}
787 		brcmf_net_detach(ifp->ndev, rtnl_locked);
788 	} else {
789 		/* Only p2p device interfaces which get dynamically created
790 		 * end up here. In this case the p2p module should be informed
791 		 * about the removal of the interface within the firmware. If
792 		 * not then p2p commands towards the firmware will cause some
793 		 * serious troublesome side effects. The p2p module will clean
794 		 * up the ifp if needed.
795 		 */
796 		brcmf_p2p_ifp_removed(ifp, rtnl_locked);
797 		kfree(ifp);
798 	}
799 }
800 
801 void brcmf_remove_interface(struct brcmf_if *ifp, bool rtnl_locked)
802 {
803 	if (!ifp || WARN_ON(ifp->drvr->iflist[ifp->bsscfgidx] != ifp))
804 		return;
805 	brcmf_dbg(TRACE, "Enter, bsscfgidx=%d, ifidx=%d\n", ifp->bsscfgidx,
806 		  ifp->ifidx);
807 	brcmf_proto_del_if(ifp->drvr, ifp);
808 	brcmf_del_if(ifp->drvr, ifp->bsscfgidx, rtnl_locked);
809 }
810 
811 static int brcmf_psm_watchdog_notify(struct brcmf_if *ifp,
812 				     const struct brcmf_event_msg *evtmsg,
813 				     void *data)
814 {
815 	int err;
816 
817 	brcmf_dbg(TRACE, "enter: bsscfgidx=%d\n", ifp->bsscfgidx);
818 
819 	brcmf_err("PSM's watchdog has fired!\n");
820 
821 	err = brcmf_debug_create_memdump(ifp->drvr->bus_if, data,
822 					 evtmsg->datalen);
823 	if (err)
824 		brcmf_err("Failed to get memory dump, %d\n", err);
825 
826 	return err;
827 }
828 
829 #ifdef CONFIG_INET
830 #define ARPOL_MAX_ENTRIES	8
831 static int brcmf_inetaddr_changed(struct notifier_block *nb,
832 				  unsigned long action, void *data)
833 {
834 	struct brcmf_pub *drvr = container_of(nb, struct brcmf_pub,
835 					      inetaddr_notifier);
836 	struct in_ifaddr *ifa = data;
837 	struct net_device *ndev = ifa->ifa_dev->dev;
838 	struct brcmf_if *ifp;
839 	int idx, i, ret;
840 	u32 val;
841 	__be32 addr_table[ARPOL_MAX_ENTRIES] = {0};
842 
843 	/* Find out if the notification is meant for us */
844 	for (idx = 0; idx < BRCMF_MAX_IFS; idx++) {
845 		ifp = drvr->iflist[idx];
846 		if (ifp && ifp->ndev == ndev)
847 			break;
848 		if (idx == BRCMF_MAX_IFS - 1)
849 			return NOTIFY_DONE;
850 	}
851 
852 	/* check if arp offload is supported */
853 	ret = brcmf_fil_iovar_int_get(ifp, "arpoe", &val);
854 	if (ret)
855 		return NOTIFY_OK;
856 
857 	/* old version only support primary index */
858 	ret = brcmf_fil_iovar_int_get(ifp, "arp_version", &val);
859 	if (ret)
860 		val = 1;
861 	if (val == 1)
862 		ifp = drvr->iflist[0];
863 
864 	/* retrieve the table from firmware */
865 	ret = brcmf_fil_iovar_data_get(ifp, "arp_hostip", addr_table,
866 				       sizeof(addr_table));
867 	if (ret) {
868 		brcmf_err("fail to get arp ip table err:%d\n", ret);
869 		return NOTIFY_OK;
870 	}
871 
872 	for (i = 0; i < ARPOL_MAX_ENTRIES; i++)
873 		if (ifa->ifa_address == addr_table[i])
874 			break;
875 
876 	switch (action) {
877 	case NETDEV_UP:
878 		if (i == ARPOL_MAX_ENTRIES) {
879 			brcmf_dbg(TRACE, "add %pI4 to arp table\n",
880 				  &ifa->ifa_address);
881 			/* set it directly */
882 			ret = brcmf_fil_iovar_data_set(ifp, "arp_hostip",
883 				&ifa->ifa_address, sizeof(ifa->ifa_address));
884 			if (ret)
885 				brcmf_err("add arp ip err %d\n", ret);
886 		}
887 		break;
888 	case NETDEV_DOWN:
889 		if (i < ARPOL_MAX_ENTRIES) {
890 			addr_table[i] = 0;
891 			brcmf_dbg(TRACE, "remove %pI4 from arp table\n",
892 				  &ifa->ifa_address);
893 			/* clear the table in firmware */
894 			ret = brcmf_fil_iovar_data_set(ifp, "arp_hostip_clear",
895 						       NULL, 0);
896 			if (ret) {
897 				brcmf_err("fail to clear arp ip table err:%d\n",
898 					  ret);
899 				return NOTIFY_OK;
900 			}
901 			for (i = 0; i < ARPOL_MAX_ENTRIES; i++) {
902 				if (addr_table[i] == 0)
903 					continue;
904 				ret = brcmf_fil_iovar_data_set(ifp, "arp_hostip",
905 							       &addr_table[i],
906 							       sizeof(addr_table[i]));
907 				if (ret)
908 					brcmf_err("add arp ip err %d\n",
909 						  ret);
910 			}
911 		}
912 		break;
913 	default:
914 		break;
915 	}
916 
917 	return NOTIFY_OK;
918 }
919 #endif
920 
921 #if IS_ENABLED(CONFIG_IPV6)
922 static int brcmf_inet6addr_changed(struct notifier_block *nb,
923 				   unsigned long action, void *data)
924 {
925 	struct brcmf_pub *drvr = container_of(nb, struct brcmf_pub,
926 					      inet6addr_notifier);
927 	struct inet6_ifaddr *ifa = data;
928 	struct brcmf_if *ifp;
929 	int i;
930 	struct in6_addr *table;
931 
932 	/* Only handle primary interface */
933 	ifp = drvr->iflist[0];
934 	if (!ifp)
935 		return NOTIFY_DONE;
936 	if (ifp->ndev != ifa->idev->dev)
937 		return NOTIFY_DONE;
938 
939 	table = ifp->ipv6_addr_tbl;
940 	for (i = 0; i < NDOL_MAX_ENTRIES; i++)
941 		if (ipv6_addr_equal(&ifa->addr, &table[i]))
942 			break;
943 
944 	switch (action) {
945 	case NETDEV_UP:
946 		if (i == NDOL_MAX_ENTRIES) {
947 			if (ifp->ipv6addr_idx < NDOL_MAX_ENTRIES) {
948 				table[ifp->ipv6addr_idx++] = ifa->addr;
949 			} else {
950 				for (i = 0; i < NDOL_MAX_ENTRIES - 1; i++)
951 					table[i] = table[i + 1];
952 				table[NDOL_MAX_ENTRIES - 1] = ifa->addr;
953 			}
954 		}
955 		break;
956 	case NETDEV_DOWN:
957 		if (i < NDOL_MAX_ENTRIES) {
958 			for (; i < ifp->ipv6addr_idx - 1; i++)
959 				table[i] = table[i + 1];
960 			memset(&table[i], 0, sizeof(table[i]));
961 			ifp->ipv6addr_idx--;
962 		}
963 		break;
964 	default:
965 		break;
966 	}
967 
968 	schedule_work(&ifp->ndoffload_work);
969 
970 	return NOTIFY_OK;
971 }
972 #endif
973 
974 static int brcmf_revinfo_read(struct seq_file *s, void *data)
975 {
976 	struct brcmf_bus *bus_if = dev_get_drvdata(s->private);
977 	struct brcmf_rev_info *ri = &bus_if->drvr->revinfo;
978 	char drev[BRCMU_DOTREV_LEN];
979 	char brev[BRCMU_BOARDREV_LEN];
980 
981 	seq_printf(s, "vendorid: 0x%04x\n", ri->vendorid);
982 	seq_printf(s, "deviceid: 0x%04x\n", ri->deviceid);
983 	seq_printf(s, "radiorev: %s\n", brcmu_dotrev_str(ri->radiorev, drev));
984 	seq_printf(s, "chip: %s\n", ri->chipname);
985 	seq_printf(s, "chippkg: %u\n", ri->chippkg);
986 	seq_printf(s, "corerev: %u\n", ri->corerev);
987 	seq_printf(s, "boardid: 0x%04x\n", ri->boardid);
988 	seq_printf(s, "boardvendor: 0x%04x\n", ri->boardvendor);
989 	seq_printf(s, "boardrev: %s\n", brcmu_boardrev_str(ri->boardrev, brev));
990 	seq_printf(s, "driverrev: %s\n", brcmu_dotrev_str(ri->driverrev, drev));
991 	seq_printf(s, "ucoderev: %u\n", ri->ucoderev);
992 	seq_printf(s, "bus: %u\n", ri->bus);
993 	seq_printf(s, "phytype: %u\n", ri->phytype);
994 	seq_printf(s, "phyrev: %u\n", ri->phyrev);
995 	seq_printf(s, "anarev: %u\n", ri->anarev);
996 	seq_printf(s, "nvramrev: %08x\n", ri->nvramrev);
997 
998 	seq_printf(s, "clmver: %s\n", bus_if->drvr->clmver);
999 
1000 	return 0;
1001 }
1002 
1003 static int brcmf_bus_started(struct brcmf_pub *drvr, struct cfg80211_ops *ops)
1004 {
1005 	int ret = -1;
1006 	struct brcmf_bus *bus_if = drvr->bus_if;
1007 	struct brcmf_if *ifp;
1008 	struct brcmf_if *p2p_ifp;
1009 
1010 	brcmf_dbg(TRACE, "\n");
1011 
1012 	/* add primary networking interface */
1013 	ifp = brcmf_add_if(drvr, 0, 0, false, "wlan%d", NULL);
1014 	if (IS_ERR(ifp))
1015 		return PTR_ERR(ifp);
1016 
1017 	p2p_ifp = NULL;
1018 
1019 	/* signal bus ready */
1020 	brcmf_bus_change_state(bus_if, BRCMF_BUS_UP);
1021 
1022 	/* do bus specific preinit here */
1023 	ret = brcmf_bus_preinit(bus_if);
1024 	if (ret < 0)
1025 		goto fail;
1026 
1027 	/* Bus is ready, do any initialization */
1028 	ret = brcmf_c_preinit_dcmds(ifp);
1029 	if (ret < 0)
1030 		goto fail;
1031 
1032 	brcmf_feat_attach(drvr);
1033 
1034 	ret = brcmf_proto_init_done(drvr);
1035 	if (ret < 0)
1036 		goto fail;
1037 
1038 	brcmf_proto_add_if(drvr, ifp);
1039 
1040 	drvr->config = brcmf_cfg80211_attach(drvr, ops,
1041 					     drvr->settings->p2p_enable);
1042 	if (drvr->config == NULL) {
1043 		ret = -ENOMEM;
1044 		goto fail;
1045 	}
1046 
1047 	ret = brcmf_net_attach(ifp, false);
1048 
1049 	if ((!ret) && (drvr->settings->p2p_enable)) {
1050 		p2p_ifp = drvr->iflist[1];
1051 		if (p2p_ifp)
1052 			ret = brcmf_net_p2p_attach(p2p_ifp);
1053 	}
1054 
1055 	if (ret)
1056 		goto fail;
1057 
1058 #ifdef CONFIG_INET
1059 	drvr->inetaddr_notifier.notifier_call = brcmf_inetaddr_changed;
1060 	ret = register_inetaddr_notifier(&drvr->inetaddr_notifier);
1061 	if (ret)
1062 		goto fail;
1063 
1064 #if IS_ENABLED(CONFIG_IPV6)
1065 	drvr->inet6addr_notifier.notifier_call = brcmf_inet6addr_changed;
1066 	ret = register_inet6addr_notifier(&drvr->inet6addr_notifier);
1067 	if (ret) {
1068 		unregister_inetaddr_notifier(&drvr->inetaddr_notifier);
1069 		goto fail;
1070 	}
1071 #endif
1072 #endif /* CONFIG_INET */
1073 
1074 	/* populate debugfs */
1075 	brcmf_debugfs_add_entry(drvr, "revinfo", brcmf_revinfo_read);
1076 	brcmf_feat_debugfs_create(drvr);
1077 	brcmf_proto_debugfs_create(drvr);
1078 
1079 	return 0;
1080 
1081 fail:
1082 	brcmf_err("failed: %d\n", ret);
1083 	if (drvr->config) {
1084 		brcmf_cfg80211_detach(drvr->config);
1085 		drvr->config = NULL;
1086 	}
1087 	brcmf_net_detach(ifp->ndev, false);
1088 	if (p2p_ifp)
1089 		brcmf_net_detach(p2p_ifp->ndev, false);
1090 	drvr->iflist[0] = NULL;
1091 	drvr->iflist[1] = NULL;
1092 	if (drvr->settings->ignore_probe_fail)
1093 		ret = 0;
1094 
1095 	return ret;
1096 }
1097 
1098 int brcmf_attach(struct device *dev, struct brcmf_mp_device *settings)
1099 {
1100 	struct wiphy *wiphy;
1101 	struct cfg80211_ops *ops;
1102 	struct brcmf_pub *drvr = NULL;
1103 	int ret = 0;
1104 	int i;
1105 
1106 	brcmf_dbg(TRACE, "Enter\n");
1107 
1108 	ops = brcmf_cfg80211_get_ops();
1109 	if (!ops)
1110 		return -ENOMEM;
1111 
1112 	wiphy = wiphy_new(ops, sizeof(*drvr));
1113 	if (!wiphy)
1114 		return -ENOMEM;
1115 
1116 	set_wiphy_dev(wiphy, dev);
1117 	drvr = wiphy_priv(wiphy);
1118 	drvr->wiphy = wiphy;
1119 
1120 	for (i = 0; i < ARRAY_SIZE(drvr->if2bss); i++)
1121 		drvr->if2bss[i] = BRCMF_BSSIDX_INVALID;
1122 
1123 	mutex_init(&drvr->proto_block);
1124 
1125 	/* Link to bus module */
1126 	drvr->hdrlen = 0;
1127 	drvr->bus_if = dev_get_drvdata(dev);
1128 	drvr->bus_if->drvr = drvr;
1129 	drvr->settings = settings;
1130 
1131 	/* Attach and link in the protocol */
1132 	ret = brcmf_proto_attach(drvr);
1133 	if (ret != 0) {
1134 		brcmf_err("brcmf_prot_attach failed\n");
1135 		goto fail;
1136 	}
1137 
1138 	/* Attach to events important for core code */
1139 	brcmf_fweh_register(drvr, BRCMF_E_PSM_WATCHDOG,
1140 			    brcmf_psm_watchdog_notify);
1141 
1142 	/* attach firmware event handler */
1143 	brcmf_fweh_attach(drvr);
1144 
1145 	ret = brcmf_bus_started(drvr, ops);
1146 	if (ret != 0) {
1147 		brcmf_err("dongle is not responding: err=%d\n", ret);
1148 		goto fail;
1149 	}
1150 
1151 	drvr->config->ops = ops;
1152 	return 0;
1153 
1154 fail:
1155 	brcmf_detach(dev);
1156 	kfree(ops);
1157 
1158 	return ret;
1159 }
1160 
1161 void brcmf_bus_add_txhdrlen(struct device *dev, uint len)
1162 {
1163 	struct brcmf_bus *bus_if = dev_get_drvdata(dev);
1164 	struct brcmf_pub *drvr = bus_if->drvr;
1165 
1166 	if (drvr) {
1167 		drvr->hdrlen += len;
1168 	}
1169 }
1170 
1171 void brcmf_dev_reset(struct device *dev)
1172 {
1173 	struct brcmf_bus *bus_if = dev_get_drvdata(dev);
1174 	struct brcmf_pub *drvr = bus_if->drvr;
1175 
1176 	if (drvr == NULL)
1177 		return;
1178 
1179 	if (drvr->iflist[0])
1180 		brcmf_fil_cmd_int_set(drvr->iflist[0], BRCMF_C_TERMINATED, 1);
1181 }
1182 
1183 void brcmf_dev_coredump(struct device *dev)
1184 {
1185 	struct brcmf_bus *bus_if = dev_get_drvdata(dev);
1186 
1187 	if (brcmf_debug_create_memdump(bus_if, NULL, 0) < 0)
1188 		brcmf_dbg(TRACE, "failed to create coredump\n");
1189 }
1190 
1191 void brcmf_detach(struct device *dev)
1192 {
1193 	s32 i;
1194 	struct brcmf_bus *bus_if = dev_get_drvdata(dev);
1195 	struct brcmf_pub *drvr = bus_if->drvr;
1196 
1197 	brcmf_dbg(TRACE, "Enter\n");
1198 
1199 	if (drvr == NULL)
1200 		return;
1201 
1202 #ifdef CONFIG_INET
1203 	unregister_inetaddr_notifier(&drvr->inetaddr_notifier);
1204 #endif
1205 
1206 #if IS_ENABLED(CONFIG_IPV6)
1207 	unregister_inet6addr_notifier(&drvr->inet6addr_notifier);
1208 #endif
1209 
1210 	/* stop firmware event handling */
1211 	brcmf_fweh_detach(drvr);
1212 	if (drvr->config)
1213 		brcmf_p2p_detach(&drvr->config->p2p);
1214 
1215 	brcmf_bus_change_state(bus_if, BRCMF_BUS_DOWN);
1216 
1217 	/* make sure primary interface removed last */
1218 	for (i = BRCMF_MAX_IFS-1; i > -1; i--)
1219 		brcmf_remove_interface(drvr->iflist[i], false);
1220 
1221 	brcmf_cfg80211_detach(drvr->config);
1222 	drvr->config = NULL;
1223 
1224 	brcmf_bus_stop(drvr->bus_if);
1225 
1226 	brcmf_proto_detach(drvr);
1227 
1228 	bus_if->drvr = NULL;
1229 	wiphy_free(drvr->wiphy);
1230 }
1231 
1232 s32 brcmf_iovar_data_set(struct device *dev, char *name, void *data, u32 len)
1233 {
1234 	struct brcmf_bus *bus_if = dev_get_drvdata(dev);
1235 	struct brcmf_if *ifp = bus_if->drvr->iflist[0];
1236 
1237 	return brcmf_fil_iovar_data_set(ifp, name, data, len);
1238 }
1239 
1240 static int brcmf_get_pend_8021x_cnt(struct brcmf_if *ifp)
1241 {
1242 	return atomic_read(&ifp->pend_8021x_cnt);
1243 }
1244 
1245 int brcmf_netdev_wait_pend8021x(struct brcmf_if *ifp)
1246 {
1247 	int err;
1248 
1249 	err = wait_event_timeout(ifp->pend_8021x_wait,
1250 				 !brcmf_get_pend_8021x_cnt(ifp),
1251 				 MAX_WAIT_FOR_8021X_TX);
1252 
1253 	if (!err)
1254 		brcmf_err("Timed out waiting for no pending 802.1x packets\n");
1255 
1256 	return !err;
1257 }
1258 
1259 void brcmf_bus_change_state(struct brcmf_bus *bus, enum brcmf_bus_state state)
1260 {
1261 	struct brcmf_pub *drvr = bus->drvr;
1262 	struct net_device *ndev;
1263 	int ifidx;
1264 
1265 	brcmf_dbg(TRACE, "%d -> %d\n", bus->state, state);
1266 
1267 	if (!drvr) {
1268 		brcmf_dbg(INFO, "ignoring transition, bus not attached yet\n");
1269 		return;
1270 	}
1271 
1272 	bus->state = state;
1273 
1274 	if (state == BRCMF_BUS_UP) {
1275 		for (ifidx = 0; ifidx < BRCMF_MAX_IFS; ifidx++) {
1276 			if ((drvr->iflist[ifidx]) &&
1277 			    (drvr->iflist[ifidx]->ndev)) {
1278 				ndev = drvr->iflist[ifidx]->ndev;
1279 				if (netif_queue_stopped(ndev))
1280 					netif_wake_queue(ndev);
1281 			}
1282 		}
1283 	}
1284 }
1285 
1286 static void brcmf_driver_register(struct work_struct *work)
1287 {
1288 #ifdef CONFIG_BRCMFMAC_SDIO
1289 	brcmf_sdio_register();
1290 #endif
1291 #ifdef CONFIG_BRCMFMAC_USB
1292 	brcmf_usb_register();
1293 #endif
1294 #ifdef CONFIG_BRCMFMAC_PCIE
1295 	brcmf_pcie_register();
1296 #endif
1297 }
1298 static DECLARE_WORK(brcmf_driver_work, brcmf_driver_register);
1299 
1300 int __init brcmf_core_init(void)
1301 {
1302 	if (!schedule_work(&brcmf_driver_work))
1303 		return -EBUSY;
1304 
1305 	return 0;
1306 }
1307 
1308 void __exit brcmf_core_exit(void)
1309 {
1310 	cancel_work_sync(&brcmf_driver_work);
1311 
1312 #ifdef CONFIG_BRCMFMAC_SDIO
1313 	brcmf_sdio_exit();
1314 #endif
1315 #ifdef CONFIG_BRCMFMAC_USB
1316 	brcmf_usb_exit();
1317 #endif
1318 #ifdef CONFIG_BRCMFMAC_PCIE
1319 	brcmf_pcie_exit();
1320 #endif
1321 }
1322 
1323