1 /* 2 * Marvell Wireless LAN device driver: commands and events 3 * 4 * Copyright (C) 2011-2014, Marvell International Ltd. 5 * 6 * This software file (the "File") is distributed by Marvell International 7 * Ltd. under the terms of the GNU General Public License Version 2, June 1991 8 * (the "License"). You may use, redistribute and/or modify this File in 9 * accordance with the terms and conditions of the License, a copy of which 10 * is available by writing to the Free Software Foundation, Inc., 11 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the 12 * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt. 13 * 14 * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE 15 * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE 16 * ARE EXPRESSLY DISCLAIMED. The License provides additional details about 17 * this warranty disclaimer. 18 */ 19 20 #include "decl.h" 21 #include "ioctl.h" 22 #include "util.h" 23 #include "fw.h" 24 #include "main.h" 25 #include "wmm.h" 26 #include "11n.h" 27 #include "11ac.h" 28 29 /* 30 * This function initializes a command node. 31 * 32 * The actual allocation of the node is not done by this function. It only 33 * initiates a node by filling it with default parameters. Similarly, 34 * allocation of the different buffers used (IOCTL buffer, data buffer) are 35 * not done by this function either. 36 */ 37 static void 38 mwifiex_init_cmd_node(struct mwifiex_private *priv, 39 struct cmd_ctrl_node *cmd_node, 40 u32 cmd_oid, void *data_buf, bool sync) 41 { 42 cmd_node->priv = priv; 43 cmd_node->cmd_oid = cmd_oid; 44 if (sync) { 45 cmd_node->wait_q_enabled = true; 46 cmd_node->cmd_wait_q_woken = false; 47 cmd_node->condition = &cmd_node->cmd_wait_q_woken; 48 } 49 cmd_node->data_buf = data_buf; 50 cmd_node->cmd_skb = cmd_node->skb; 51 } 52 53 /* 54 * This function returns a command node from the free queue depending upon 55 * availability. 56 */ 57 static struct cmd_ctrl_node * 58 mwifiex_get_cmd_node(struct mwifiex_adapter *adapter) 59 { 60 struct cmd_ctrl_node *cmd_node; 61 unsigned long flags; 62 63 spin_lock_irqsave(&adapter->cmd_free_q_lock, flags); 64 if (list_empty(&adapter->cmd_free_q)) { 65 mwifiex_dbg(adapter, ERROR, 66 "GET_CMD_NODE: cmd node not available\n"); 67 spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags); 68 return NULL; 69 } 70 cmd_node = list_first_entry(&adapter->cmd_free_q, 71 struct cmd_ctrl_node, list); 72 list_del(&cmd_node->list); 73 spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags); 74 75 return cmd_node; 76 } 77 78 /* 79 * This function cleans up a command node. 80 * 81 * The function resets the fields including the buffer pointers. 82 * This function does not try to free the buffers. They must be 83 * freed before calling this function. 84 * 85 * This function will however call the receive completion callback 86 * in case a response buffer is still available before resetting 87 * the pointer. 88 */ 89 static void 90 mwifiex_clean_cmd_node(struct mwifiex_adapter *adapter, 91 struct cmd_ctrl_node *cmd_node) 92 { 93 cmd_node->cmd_oid = 0; 94 cmd_node->cmd_flag = 0; 95 cmd_node->data_buf = NULL; 96 cmd_node->wait_q_enabled = false; 97 98 if (cmd_node->cmd_skb) 99 skb_trim(cmd_node->cmd_skb, 0); 100 101 if (cmd_node->resp_skb) { 102 adapter->if_ops.cmdrsp_complete(adapter, cmd_node->resp_skb); 103 cmd_node->resp_skb = NULL; 104 } 105 } 106 107 /* 108 * This function returns a command to the command free queue. 109 * 110 * The function also calls the completion callback if required, before 111 * cleaning the command node and re-inserting it into the free queue. 112 */ 113 static void 114 mwifiex_insert_cmd_to_free_q(struct mwifiex_adapter *adapter, 115 struct cmd_ctrl_node *cmd_node) 116 { 117 unsigned long flags; 118 119 if (!cmd_node) 120 return; 121 122 if (cmd_node->wait_q_enabled) 123 mwifiex_complete_cmd(adapter, cmd_node); 124 /* Clean the node */ 125 mwifiex_clean_cmd_node(adapter, cmd_node); 126 127 /* Insert node into cmd_free_q */ 128 spin_lock_irqsave(&adapter->cmd_free_q_lock, flags); 129 list_add_tail(&cmd_node->list, &adapter->cmd_free_q); 130 spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags); 131 } 132 133 /* This function reuses a command node. */ 134 void mwifiex_recycle_cmd_node(struct mwifiex_adapter *adapter, 135 struct cmd_ctrl_node *cmd_node) 136 { 137 struct host_cmd_ds_command *host_cmd = (void *)cmd_node->cmd_skb->data; 138 139 mwifiex_insert_cmd_to_free_q(adapter, cmd_node); 140 141 atomic_dec(&adapter->cmd_pending); 142 mwifiex_dbg(adapter, CMD, 143 "cmd: FREE_CMD: cmd=%#x, cmd_pending=%d\n", 144 le16_to_cpu(host_cmd->command), 145 atomic_read(&adapter->cmd_pending)); 146 } 147 148 /* 149 * This function sends a host command to the firmware. 150 * 151 * The function copies the host command into the driver command 152 * buffer, which will be transferred to the firmware later by the 153 * main thread. 154 */ 155 static int mwifiex_cmd_host_cmd(struct mwifiex_private *priv, 156 struct host_cmd_ds_command *cmd, 157 struct mwifiex_ds_misc_cmd *pcmd_ptr) 158 { 159 /* Copy the HOST command to command buffer */ 160 memcpy(cmd, pcmd_ptr->cmd, pcmd_ptr->len); 161 mwifiex_dbg(priv->adapter, CMD, 162 "cmd: host cmd size = %d\n", pcmd_ptr->len); 163 return 0; 164 } 165 166 /* 167 * This function downloads a command to the firmware. 168 * 169 * The function performs sanity tests, sets the command sequence 170 * number and size, converts the header fields to CPU format before 171 * sending. Afterwards, it logs the command ID and action for debugging 172 * and sets up the command timeout timer. 173 */ 174 static int mwifiex_dnld_cmd_to_fw(struct mwifiex_private *priv, 175 struct cmd_ctrl_node *cmd_node) 176 { 177 178 struct mwifiex_adapter *adapter = priv->adapter; 179 int ret; 180 struct host_cmd_ds_command *host_cmd; 181 uint16_t cmd_code; 182 uint16_t cmd_size; 183 unsigned long flags; 184 __le32 tmp; 185 186 if (!adapter || !cmd_node) 187 return -1; 188 189 host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data); 190 191 /* Sanity test */ 192 if (host_cmd == NULL || host_cmd->size == 0) { 193 mwifiex_dbg(adapter, ERROR, 194 "DNLD_CMD: host_cmd is null\t" 195 "or cmd size is 0, not sending\n"); 196 if (cmd_node->wait_q_enabled) 197 adapter->cmd_wait_q.status = -1; 198 mwifiex_recycle_cmd_node(adapter, cmd_node); 199 return -1; 200 } 201 202 cmd_code = le16_to_cpu(host_cmd->command); 203 cmd_size = le16_to_cpu(host_cmd->size); 204 205 if (adapter->hw_status == MWIFIEX_HW_STATUS_RESET && 206 cmd_code != HostCmd_CMD_FUNC_SHUTDOWN && 207 cmd_code != HostCmd_CMD_FUNC_INIT) { 208 mwifiex_dbg(adapter, ERROR, 209 "DNLD_CMD: FW in reset state, ignore cmd %#x\n", 210 cmd_code); 211 mwifiex_recycle_cmd_node(adapter, cmd_node); 212 queue_work(adapter->workqueue, &adapter->main_work); 213 return -1; 214 } 215 216 /* Set command sequence number */ 217 adapter->seq_num++; 218 host_cmd->seq_num = cpu_to_le16(HostCmd_SET_SEQ_NO_BSS_INFO 219 (adapter->seq_num, 220 cmd_node->priv->bss_num, 221 cmd_node->priv->bss_type)); 222 223 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags); 224 adapter->curr_cmd = cmd_node; 225 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags); 226 227 /* Adjust skb length */ 228 if (cmd_node->cmd_skb->len > cmd_size) 229 /* 230 * cmd_size is less than sizeof(struct host_cmd_ds_command). 231 * Trim off the unused portion. 232 */ 233 skb_trim(cmd_node->cmd_skb, cmd_size); 234 else if (cmd_node->cmd_skb->len < cmd_size) 235 /* 236 * cmd_size is larger than sizeof(struct host_cmd_ds_command) 237 * because we have appended custom IE TLV. Increase skb length 238 * accordingly. 239 */ 240 skb_put(cmd_node->cmd_skb, cmd_size - cmd_node->cmd_skb->len); 241 242 mwifiex_dbg(adapter, CMD, 243 "cmd: DNLD_CMD: %#x, act %#x, len %d, seqno %#x\n", 244 cmd_code, 245 le16_to_cpu(*(__le16 *)((u8 *)host_cmd + S_DS_GEN)), 246 cmd_size, le16_to_cpu(host_cmd->seq_num)); 247 mwifiex_dbg_dump(adapter, CMD_D, "cmd buffer:", host_cmd, cmd_size); 248 249 if (adapter->iface_type == MWIFIEX_USB) { 250 tmp = cpu_to_le32(MWIFIEX_USB_TYPE_CMD); 251 skb_push(cmd_node->cmd_skb, MWIFIEX_TYPE_LEN); 252 memcpy(cmd_node->cmd_skb->data, &tmp, MWIFIEX_TYPE_LEN); 253 adapter->cmd_sent = true; 254 ret = adapter->if_ops.host_to_card(adapter, 255 MWIFIEX_USB_EP_CMD_EVENT, 256 cmd_node->cmd_skb, NULL); 257 skb_pull(cmd_node->cmd_skb, MWIFIEX_TYPE_LEN); 258 if (ret == -EBUSY) 259 cmd_node->cmd_skb = NULL; 260 } else { 261 skb_push(cmd_node->cmd_skb, INTF_HEADER_LEN); 262 ret = adapter->if_ops.host_to_card(adapter, MWIFIEX_TYPE_CMD, 263 cmd_node->cmd_skb, NULL); 264 skb_pull(cmd_node->cmd_skb, INTF_HEADER_LEN); 265 } 266 267 if (ret == -1) { 268 mwifiex_dbg(adapter, ERROR, 269 "DNLD_CMD: host to card failed\n"); 270 if (adapter->iface_type == MWIFIEX_USB) 271 adapter->cmd_sent = false; 272 if (cmd_node->wait_q_enabled) 273 adapter->cmd_wait_q.status = -1; 274 mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd); 275 276 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags); 277 adapter->curr_cmd = NULL; 278 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags); 279 280 adapter->dbg.num_cmd_host_to_card_failure++; 281 return -1; 282 } 283 284 /* Save the last command id and action to debug log */ 285 adapter->dbg.last_cmd_index = 286 (adapter->dbg.last_cmd_index + 1) % DBG_CMD_NUM; 287 adapter->dbg.last_cmd_id[adapter->dbg.last_cmd_index] = cmd_code; 288 adapter->dbg.last_cmd_act[adapter->dbg.last_cmd_index] = 289 le16_to_cpu(*(__le16 *) ((u8 *) host_cmd + S_DS_GEN)); 290 291 /* Clear BSS_NO_BITS from HostCmd */ 292 cmd_code &= HostCmd_CMD_ID_MASK; 293 294 /* Setup the timer after transmit command */ 295 mod_timer(&adapter->cmd_timer, 296 jiffies + msecs_to_jiffies(MWIFIEX_TIMER_10S)); 297 298 return 0; 299 } 300 301 /* 302 * This function downloads a sleep confirm command to the firmware. 303 * 304 * The function performs sanity tests, sets the command sequence 305 * number and size, converts the header fields to CPU format before 306 * sending. 307 * 308 * No responses are needed for sleep confirm command. 309 */ 310 static int mwifiex_dnld_sleep_confirm_cmd(struct mwifiex_adapter *adapter) 311 { 312 int ret; 313 struct mwifiex_private *priv; 314 struct mwifiex_opt_sleep_confirm *sleep_cfm_buf = 315 (struct mwifiex_opt_sleep_confirm *) 316 adapter->sleep_cfm->data; 317 struct sk_buff *sleep_cfm_tmp; 318 __le32 tmp; 319 320 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY); 321 322 adapter->seq_num++; 323 sleep_cfm_buf->seq_num = 324 cpu_to_le16((HostCmd_SET_SEQ_NO_BSS_INFO 325 (adapter->seq_num, priv->bss_num, 326 priv->bss_type))); 327 328 mwifiex_dbg(adapter, CMD, 329 "cmd: DNLD_CMD: %#x, act %#x, len %d, seqno %#x\n", 330 le16_to_cpu(sleep_cfm_buf->command), 331 le16_to_cpu(sleep_cfm_buf->action), 332 le16_to_cpu(sleep_cfm_buf->size), 333 le16_to_cpu(sleep_cfm_buf->seq_num)); 334 mwifiex_dbg_dump(adapter, CMD_D, "SLEEP_CFM buffer: ", sleep_cfm_buf, 335 le16_to_cpu(sleep_cfm_buf->size)); 336 337 if (adapter->iface_type == MWIFIEX_USB) { 338 sleep_cfm_tmp = 339 dev_alloc_skb(sizeof(struct mwifiex_opt_sleep_confirm) 340 + MWIFIEX_TYPE_LEN); 341 skb_put(sleep_cfm_tmp, sizeof(struct mwifiex_opt_sleep_confirm) 342 + MWIFIEX_TYPE_LEN); 343 tmp = cpu_to_le32(MWIFIEX_USB_TYPE_CMD); 344 memcpy(sleep_cfm_tmp->data, &tmp, MWIFIEX_TYPE_LEN); 345 memcpy(sleep_cfm_tmp->data + MWIFIEX_TYPE_LEN, 346 adapter->sleep_cfm->data, 347 sizeof(struct mwifiex_opt_sleep_confirm)); 348 ret = adapter->if_ops.host_to_card(adapter, 349 MWIFIEX_USB_EP_CMD_EVENT, 350 sleep_cfm_tmp, NULL); 351 if (ret != -EBUSY) 352 dev_kfree_skb_any(sleep_cfm_tmp); 353 } else { 354 skb_push(adapter->sleep_cfm, INTF_HEADER_LEN); 355 ret = adapter->if_ops.host_to_card(adapter, MWIFIEX_TYPE_CMD, 356 adapter->sleep_cfm, NULL); 357 skb_pull(adapter->sleep_cfm, INTF_HEADER_LEN); 358 } 359 360 if (ret == -1) { 361 mwifiex_dbg(adapter, ERROR, "SLEEP_CFM: failed\n"); 362 adapter->dbg.num_cmd_sleep_cfm_host_to_card_failure++; 363 return -1; 364 } 365 366 if (!le16_to_cpu(sleep_cfm_buf->resp_ctrl)) 367 /* Response is not needed for sleep confirm command */ 368 adapter->ps_state = PS_STATE_SLEEP; 369 else 370 adapter->ps_state = PS_STATE_SLEEP_CFM; 371 372 if (!le16_to_cpu(sleep_cfm_buf->resp_ctrl) && 373 (adapter->is_hs_configured && 374 !adapter->sleep_period.period)) { 375 adapter->pm_wakeup_card_req = true; 376 mwifiex_hs_activated_event(mwifiex_get_priv 377 (adapter, MWIFIEX_BSS_ROLE_ANY), true); 378 } 379 380 return ret; 381 } 382 383 /* 384 * This function allocates the command buffers and links them to 385 * the command free queue. 386 * 387 * The driver uses a pre allocated number of command buffers, which 388 * are created at driver initializations and freed at driver cleanup. 389 * Every command needs to obtain a command buffer from this pool before 390 * it can be issued. The command free queue lists the command buffers 391 * currently free to use, while the command pending queue lists the 392 * command buffers already in use and awaiting handling. Command buffers 393 * are returned to the free queue after use. 394 */ 395 int mwifiex_alloc_cmd_buffer(struct mwifiex_adapter *adapter) 396 { 397 struct cmd_ctrl_node *cmd_array; 398 u32 i; 399 400 /* Allocate and initialize struct cmd_ctrl_node */ 401 cmd_array = kcalloc(MWIFIEX_NUM_OF_CMD_BUFFER, 402 sizeof(struct cmd_ctrl_node), GFP_KERNEL); 403 if (!cmd_array) 404 return -ENOMEM; 405 406 adapter->cmd_pool = cmd_array; 407 408 /* Allocate and initialize command buffers */ 409 for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++) { 410 cmd_array[i].skb = dev_alloc_skb(MWIFIEX_SIZE_OF_CMD_BUFFER); 411 if (!cmd_array[i].skb) { 412 mwifiex_dbg(adapter, ERROR, 413 "unable to allocate command buffer\n"); 414 return -ENOMEM; 415 } 416 } 417 418 for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++) 419 mwifiex_insert_cmd_to_free_q(adapter, &cmd_array[i]); 420 421 return 0; 422 } 423 424 /* 425 * This function frees the command buffers. 426 * 427 * The function calls the completion callback for all the command 428 * buffers that still have response buffers associated with them. 429 */ 430 int mwifiex_free_cmd_buffer(struct mwifiex_adapter *adapter) 431 { 432 struct cmd_ctrl_node *cmd_array; 433 u32 i; 434 435 /* Need to check if cmd pool is allocated or not */ 436 if (!adapter->cmd_pool) { 437 mwifiex_dbg(adapter, FATAL, 438 "info: FREE_CMD_BUF: cmd_pool is null\n"); 439 return 0; 440 } 441 442 cmd_array = adapter->cmd_pool; 443 444 /* Release shared memory buffers */ 445 for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++) { 446 if (cmd_array[i].skb) { 447 mwifiex_dbg(adapter, CMD, 448 "cmd: free cmd buffer %d\n", i); 449 dev_kfree_skb_any(cmd_array[i].skb); 450 } 451 if (!cmd_array[i].resp_skb) 452 continue; 453 454 if (adapter->iface_type == MWIFIEX_USB) 455 adapter->if_ops.cmdrsp_complete(adapter, 456 cmd_array[i].resp_skb); 457 else 458 dev_kfree_skb_any(cmd_array[i].resp_skb); 459 } 460 /* Release struct cmd_ctrl_node */ 461 if (adapter->cmd_pool) { 462 mwifiex_dbg(adapter, CMD, 463 "cmd: free cmd pool\n"); 464 kfree(adapter->cmd_pool); 465 adapter->cmd_pool = NULL; 466 } 467 468 return 0; 469 } 470 471 /* 472 * This function handles events generated by firmware. 473 * 474 * Event body of events received from firmware are not used (though they are 475 * saved), only the event ID is used. Some events are re-invoked by 476 * the driver, with a new event body. 477 * 478 * After processing, the function calls the completion callback 479 * for cleanup. 480 */ 481 int mwifiex_process_event(struct mwifiex_adapter *adapter) 482 { 483 int ret; 484 struct mwifiex_private *priv = 485 mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY); 486 struct sk_buff *skb = adapter->event_skb; 487 u32 eventcause = adapter->event_cause; 488 struct mwifiex_rxinfo *rx_info; 489 490 /* Save the last event to debug log */ 491 adapter->dbg.last_event_index = 492 (adapter->dbg.last_event_index + 1) % DBG_CMD_NUM; 493 adapter->dbg.last_event[adapter->dbg.last_event_index] = 494 (u16) eventcause; 495 496 /* Get BSS number and corresponding priv */ 497 priv = mwifiex_get_priv_by_id(adapter, EVENT_GET_BSS_NUM(eventcause), 498 EVENT_GET_BSS_TYPE(eventcause)); 499 if (!priv) 500 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY); 501 502 /* Clear BSS_NO_BITS from event */ 503 eventcause &= EVENT_ID_MASK; 504 adapter->event_cause = eventcause; 505 506 if (skb) { 507 rx_info = MWIFIEX_SKB_RXCB(skb); 508 memset(rx_info, 0, sizeof(*rx_info)); 509 rx_info->bss_num = priv->bss_num; 510 rx_info->bss_type = priv->bss_type; 511 mwifiex_dbg_dump(adapter, EVT_D, "Event Buf:", 512 skb->data, skb->len); 513 } 514 515 mwifiex_dbg(adapter, EVENT, "EVENT: cause: %#x\n", eventcause); 516 517 if (priv->bss_role == MWIFIEX_BSS_ROLE_UAP) 518 ret = mwifiex_process_uap_event(priv); 519 else 520 ret = mwifiex_process_sta_event(priv); 521 522 adapter->event_cause = 0; 523 adapter->event_skb = NULL; 524 adapter->if_ops.event_complete(adapter, skb); 525 526 return ret; 527 } 528 529 /* 530 * This function prepares a command and send it to the firmware. 531 * 532 * Preparation includes - 533 * - Sanity tests to make sure the card is still present or the FW 534 * is not reset 535 * - Getting a new command node from the command free queue 536 * - Initializing the command node for default parameters 537 * - Fill up the non-default parameters and buffer pointers 538 * - Add the command to pending queue 539 */ 540 int mwifiex_send_cmd(struct mwifiex_private *priv, u16 cmd_no, 541 u16 cmd_action, u32 cmd_oid, void *data_buf, bool sync) 542 { 543 int ret; 544 struct mwifiex_adapter *adapter = priv->adapter; 545 struct cmd_ctrl_node *cmd_node; 546 struct host_cmd_ds_command *cmd_ptr; 547 548 if (!adapter) { 549 pr_err("PREP_CMD: adapter is NULL\n"); 550 return -1; 551 } 552 553 if (adapter->is_suspended) { 554 mwifiex_dbg(adapter, ERROR, 555 "PREP_CMD: device in suspended state\n"); 556 return -1; 557 } 558 559 if (adapter->hs_enabling && cmd_no != HostCmd_CMD_802_11_HS_CFG_ENH) { 560 mwifiex_dbg(adapter, ERROR, 561 "PREP_CMD: host entering sleep state\n"); 562 return -1; 563 } 564 565 if (adapter->surprise_removed) { 566 mwifiex_dbg(adapter, ERROR, 567 "PREP_CMD: card is removed\n"); 568 return -1; 569 } 570 571 if (adapter->is_cmd_timedout) { 572 mwifiex_dbg(adapter, ERROR, 573 "PREP_CMD: FW is in bad state\n"); 574 return -1; 575 } 576 577 if (adapter->hw_status == MWIFIEX_HW_STATUS_RESET) { 578 if (cmd_no != HostCmd_CMD_FUNC_INIT) { 579 mwifiex_dbg(adapter, ERROR, 580 "PREP_CMD: FW in reset state\n"); 581 return -1; 582 } 583 } 584 585 /* Get a new command node */ 586 cmd_node = mwifiex_get_cmd_node(adapter); 587 588 if (!cmd_node) { 589 mwifiex_dbg(adapter, ERROR, 590 "PREP_CMD: no free cmd node\n"); 591 return -1; 592 } 593 594 /* Initialize the command node */ 595 mwifiex_init_cmd_node(priv, cmd_node, cmd_oid, data_buf, sync); 596 597 if (!cmd_node->cmd_skb) { 598 mwifiex_dbg(adapter, ERROR, 599 "PREP_CMD: no free cmd buf\n"); 600 return -1; 601 } 602 603 memset(skb_put(cmd_node->cmd_skb, sizeof(struct host_cmd_ds_command)), 604 0, sizeof(struct host_cmd_ds_command)); 605 606 cmd_ptr = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data); 607 cmd_ptr->command = cpu_to_le16(cmd_no); 608 cmd_ptr->result = 0; 609 610 /* Prepare command */ 611 if (cmd_no) { 612 switch (cmd_no) { 613 case HostCmd_CMD_UAP_SYS_CONFIG: 614 case HostCmd_CMD_UAP_BSS_START: 615 case HostCmd_CMD_UAP_BSS_STOP: 616 case HostCmd_CMD_UAP_STA_DEAUTH: 617 case HOST_CMD_APCMD_SYS_RESET: 618 case HOST_CMD_APCMD_STA_LIST: 619 ret = mwifiex_uap_prepare_cmd(priv, cmd_no, cmd_action, 620 cmd_oid, data_buf, 621 cmd_ptr); 622 break; 623 default: 624 ret = mwifiex_sta_prepare_cmd(priv, cmd_no, cmd_action, 625 cmd_oid, data_buf, 626 cmd_ptr); 627 break; 628 } 629 } else { 630 ret = mwifiex_cmd_host_cmd(priv, cmd_ptr, data_buf); 631 cmd_node->cmd_flag |= CMD_F_HOSTCMD; 632 } 633 634 /* Return error, since the command preparation failed */ 635 if (ret) { 636 mwifiex_dbg(adapter, ERROR, 637 "PREP_CMD: cmd %#x preparation failed\n", 638 cmd_no); 639 mwifiex_insert_cmd_to_free_q(adapter, cmd_node); 640 return -1; 641 } 642 643 /* Send command */ 644 if (cmd_no == HostCmd_CMD_802_11_SCAN || 645 cmd_no == HostCmd_CMD_802_11_SCAN_EXT) { 646 mwifiex_queue_scan_cmd(priv, cmd_node); 647 } else { 648 mwifiex_insert_cmd_to_pending_q(adapter, cmd_node, true); 649 queue_work(adapter->workqueue, &adapter->main_work); 650 if (cmd_node->wait_q_enabled) 651 ret = mwifiex_wait_queue_complete(adapter, cmd_node); 652 } 653 654 return ret; 655 } 656 657 /* 658 * This function queues a command to the command pending queue. 659 * 660 * This in effect adds the command to the command list to be executed. 661 * Exit PS command is handled specially, by placing it always to the 662 * front of the command queue. 663 */ 664 void 665 mwifiex_insert_cmd_to_pending_q(struct mwifiex_adapter *adapter, 666 struct cmd_ctrl_node *cmd_node, u32 add_tail) 667 { 668 struct host_cmd_ds_command *host_cmd = NULL; 669 u16 command; 670 unsigned long flags; 671 672 host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data); 673 if (!host_cmd) { 674 mwifiex_dbg(adapter, ERROR, "QUEUE_CMD: host_cmd is NULL\n"); 675 return; 676 } 677 678 command = le16_to_cpu(host_cmd->command); 679 680 /* Exit_PS command needs to be queued in the header always. */ 681 if (command == HostCmd_CMD_802_11_PS_MODE_ENH) { 682 struct host_cmd_ds_802_11_ps_mode_enh *pm = 683 &host_cmd->params.psmode_enh; 684 if ((le16_to_cpu(pm->action) == DIS_PS) || 685 (le16_to_cpu(pm->action) == DIS_AUTO_PS)) { 686 if (adapter->ps_state != PS_STATE_AWAKE) 687 add_tail = false; 688 } 689 } 690 691 spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags); 692 if (add_tail) 693 list_add_tail(&cmd_node->list, &adapter->cmd_pending_q); 694 else 695 list_add(&cmd_node->list, &adapter->cmd_pending_q); 696 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags); 697 698 atomic_inc(&adapter->cmd_pending); 699 mwifiex_dbg(adapter, CMD, 700 "cmd: QUEUE_CMD: cmd=%#x, cmd_pending=%d\n", 701 command, atomic_read(&adapter->cmd_pending)); 702 } 703 704 /* 705 * This function executes the next command in command pending queue. 706 * 707 * This function will fail if a command is already in processing stage, 708 * otherwise it will dequeue the first command from the command pending 709 * queue and send to the firmware. 710 * 711 * If the device is currently in host sleep mode, any commands, except the 712 * host sleep configuration command will de-activate the host sleep. For PS 713 * mode, the function will put the firmware back to sleep if applicable. 714 */ 715 int mwifiex_exec_next_cmd(struct mwifiex_adapter *adapter) 716 { 717 struct mwifiex_private *priv; 718 struct cmd_ctrl_node *cmd_node; 719 int ret = 0; 720 struct host_cmd_ds_command *host_cmd; 721 unsigned long cmd_flags; 722 unsigned long cmd_pending_q_flags; 723 724 /* Check if already in processing */ 725 if (adapter->curr_cmd) { 726 mwifiex_dbg(adapter, FATAL, 727 "EXEC_NEXT_CMD: cmd in processing\n"); 728 return -1; 729 } 730 731 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags); 732 /* Check if any command is pending */ 733 spin_lock_irqsave(&adapter->cmd_pending_q_lock, cmd_pending_q_flags); 734 if (list_empty(&adapter->cmd_pending_q)) { 735 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, 736 cmd_pending_q_flags); 737 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags); 738 return 0; 739 } 740 cmd_node = list_first_entry(&adapter->cmd_pending_q, 741 struct cmd_ctrl_node, list); 742 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, 743 cmd_pending_q_flags); 744 745 host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data); 746 priv = cmd_node->priv; 747 748 if (adapter->ps_state != PS_STATE_AWAKE) { 749 mwifiex_dbg(adapter, ERROR, 750 "%s: cannot send cmd in sleep state,\t" 751 "this should not happen\n", __func__); 752 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags); 753 return ret; 754 } 755 756 spin_lock_irqsave(&adapter->cmd_pending_q_lock, cmd_pending_q_flags); 757 list_del(&cmd_node->list); 758 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, 759 cmd_pending_q_flags); 760 761 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags); 762 ret = mwifiex_dnld_cmd_to_fw(priv, cmd_node); 763 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY); 764 /* Any command sent to the firmware when host is in sleep 765 * mode should de-configure host sleep. We should skip the 766 * host sleep configuration command itself though 767 */ 768 if (priv && (host_cmd->command != 769 cpu_to_le16(HostCmd_CMD_802_11_HS_CFG_ENH))) { 770 if (adapter->hs_activated) { 771 adapter->is_hs_configured = false; 772 mwifiex_hs_activated_event(priv, false); 773 } 774 } 775 776 return ret; 777 } 778 779 /* 780 * This function handles the command response. 781 * 782 * After processing, the function cleans the command node and puts 783 * it back to the command free queue. 784 */ 785 int mwifiex_process_cmdresp(struct mwifiex_adapter *adapter) 786 { 787 struct host_cmd_ds_command *resp; 788 struct mwifiex_private *priv = 789 mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY); 790 int ret = 0; 791 uint16_t orig_cmdresp_no; 792 uint16_t cmdresp_no; 793 uint16_t cmdresp_result; 794 unsigned long flags; 795 796 /* Now we got response from FW, cancel the command timer */ 797 del_timer_sync(&adapter->cmd_timer); 798 799 if (!adapter->curr_cmd || !adapter->curr_cmd->resp_skb) { 800 resp = (struct host_cmd_ds_command *) adapter->upld_buf; 801 mwifiex_dbg(adapter, ERROR, 802 "CMD_RESP: NULL curr_cmd, %#x\n", 803 le16_to_cpu(resp->command)); 804 return -1; 805 } 806 807 adapter->is_cmd_timedout = 0; 808 809 resp = (struct host_cmd_ds_command *) adapter->curr_cmd->resp_skb->data; 810 if (adapter->curr_cmd->cmd_flag & CMD_F_HOSTCMD) { 811 /* Copy original response back to response buffer */ 812 struct mwifiex_ds_misc_cmd *hostcmd; 813 uint16_t size = le16_to_cpu(resp->size); 814 mwifiex_dbg(adapter, INFO, 815 "info: host cmd resp size = %d\n", size); 816 size = min_t(u16, size, MWIFIEX_SIZE_OF_CMD_BUFFER); 817 if (adapter->curr_cmd->data_buf) { 818 hostcmd = adapter->curr_cmd->data_buf; 819 hostcmd->len = size; 820 memcpy(hostcmd->cmd, resp, size); 821 } 822 } 823 orig_cmdresp_no = le16_to_cpu(resp->command); 824 825 /* Get BSS number and corresponding priv */ 826 priv = mwifiex_get_priv_by_id(adapter, 827 HostCmd_GET_BSS_NO(le16_to_cpu(resp->seq_num)), 828 HostCmd_GET_BSS_TYPE(le16_to_cpu(resp->seq_num))); 829 if (!priv) 830 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY); 831 /* Clear RET_BIT from HostCmd */ 832 resp->command = cpu_to_le16(orig_cmdresp_no & HostCmd_CMD_ID_MASK); 833 834 cmdresp_no = le16_to_cpu(resp->command); 835 cmdresp_result = le16_to_cpu(resp->result); 836 837 /* Save the last command response to debug log */ 838 adapter->dbg.last_cmd_resp_index = 839 (adapter->dbg.last_cmd_resp_index + 1) % DBG_CMD_NUM; 840 adapter->dbg.last_cmd_resp_id[adapter->dbg.last_cmd_resp_index] = 841 orig_cmdresp_no; 842 843 mwifiex_dbg(adapter, CMD, 844 "cmd: CMD_RESP: 0x%x, result %d, len %d, seqno 0x%x\n", 845 orig_cmdresp_no, cmdresp_result, 846 le16_to_cpu(resp->size), le16_to_cpu(resp->seq_num)); 847 mwifiex_dbg_dump(adapter, CMD_D, "CMD_RESP buffer:", resp, 848 le16_to_cpu(resp->size)); 849 850 if (!(orig_cmdresp_no & HostCmd_RET_BIT)) { 851 mwifiex_dbg(adapter, ERROR, "CMD_RESP: invalid cmd resp\n"); 852 if (adapter->curr_cmd->wait_q_enabled) 853 adapter->cmd_wait_q.status = -1; 854 855 mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd); 856 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags); 857 adapter->curr_cmd = NULL; 858 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags); 859 return -1; 860 } 861 862 if (adapter->curr_cmd->cmd_flag & CMD_F_HOSTCMD) { 863 adapter->curr_cmd->cmd_flag &= ~CMD_F_HOSTCMD; 864 if ((cmdresp_result == HostCmd_RESULT_OK) && 865 (cmdresp_no == HostCmd_CMD_802_11_HS_CFG_ENH)) 866 ret = mwifiex_ret_802_11_hs_cfg(priv, resp); 867 } else { 868 /* handle response */ 869 ret = mwifiex_process_sta_cmdresp(priv, cmdresp_no, resp); 870 } 871 872 /* Check init command response */ 873 if (adapter->hw_status == MWIFIEX_HW_STATUS_INITIALIZING) { 874 if (ret) { 875 mwifiex_dbg(adapter, ERROR, 876 "%s: cmd %#x failed during\t" 877 "initialization\n", __func__, cmdresp_no); 878 mwifiex_init_fw_complete(adapter); 879 return -1; 880 } else if (adapter->last_init_cmd == cmdresp_no) 881 adapter->hw_status = MWIFIEX_HW_STATUS_INIT_DONE; 882 } 883 884 if (adapter->curr_cmd) { 885 if (adapter->curr_cmd->wait_q_enabled) 886 adapter->cmd_wait_q.status = ret; 887 888 mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd); 889 890 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags); 891 adapter->curr_cmd = NULL; 892 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags); 893 } 894 895 return ret; 896 } 897 898 /* 899 * This function handles the timeout of command sending. 900 * 901 * It will re-send the same command again. 902 */ 903 void 904 mwifiex_cmd_timeout_func(unsigned long function_context) 905 { 906 struct mwifiex_adapter *adapter = 907 (struct mwifiex_adapter *) function_context; 908 struct cmd_ctrl_node *cmd_node; 909 910 adapter->is_cmd_timedout = 1; 911 if (!adapter->curr_cmd) { 912 mwifiex_dbg(adapter, ERROR, 913 "cmd: empty curr_cmd\n"); 914 return; 915 } 916 cmd_node = adapter->curr_cmd; 917 if (cmd_node) { 918 adapter->dbg.timeout_cmd_id = 919 adapter->dbg.last_cmd_id[adapter->dbg.last_cmd_index]; 920 adapter->dbg.timeout_cmd_act = 921 adapter->dbg.last_cmd_act[adapter->dbg.last_cmd_index]; 922 mwifiex_dbg(adapter, MSG, 923 "%s: Timeout cmd id = %#x, act = %#x\n", __func__, 924 adapter->dbg.timeout_cmd_id, 925 adapter->dbg.timeout_cmd_act); 926 927 mwifiex_dbg(adapter, MSG, 928 "num_data_h2c_failure = %d\n", 929 adapter->dbg.num_tx_host_to_card_failure); 930 mwifiex_dbg(adapter, MSG, 931 "num_cmd_h2c_failure = %d\n", 932 adapter->dbg.num_cmd_host_to_card_failure); 933 934 mwifiex_dbg(adapter, MSG, 935 "is_cmd_timedout = %d\n", 936 adapter->is_cmd_timedout); 937 mwifiex_dbg(adapter, MSG, 938 "num_tx_timeout = %d\n", 939 adapter->dbg.num_tx_timeout); 940 941 mwifiex_dbg(adapter, MSG, 942 "last_cmd_index = %d\n", 943 adapter->dbg.last_cmd_index); 944 mwifiex_dbg(adapter, MSG, 945 "last_cmd_id: %*ph\n", 946 (int)sizeof(adapter->dbg.last_cmd_id), 947 adapter->dbg.last_cmd_id); 948 mwifiex_dbg(adapter, MSG, 949 "last_cmd_act: %*ph\n", 950 (int)sizeof(adapter->dbg.last_cmd_act), 951 adapter->dbg.last_cmd_act); 952 953 mwifiex_dbg(adapter, MSG, 954 "last_cmd_resp_index = %d\n", 955 adapter->dbg.last_cmd_resp_index); 956 mwifiex_dbg(adapter, MSG, 957 "last_cmd_resp_id: %*ph\n", 958 (int)sizeof(adapter->dbg.last_cmd_resp_id), 959 adapter->dbg.last_cmd_resp_id); 960 961 mwifiex_dbg(adapter, MSG, 962 "last_event_index = %d\n", 963 adapter->dbg.last_event_index); 964 mwifiex_dbg(adapter, MSG, 965 "last_event: %*ph\n", 966 (int)sizeof(adapter->dbg.last_event), 967 adapter->dbg.last_event); 968 969 mwifiex_dbg(adapter, MSG, 970 "data_sent=%d cmd_sent=%d\n", 971 adapter->data_sent, adapter->cmd_sent); 972 973 mwifiex_dbg(adapter, MSG, 974 "ps_mode=%d ps_state=%d\n", 975 adapter->ps_mode, adapter->ps_state); 976 977 if (cmd_node->wait_q_enabled) { 978 adapter->cmd_wait_q.status = -ETIMEDOUT; 979 mwifiex_cancel_pending_ioctl(adapter); 980 } 981 } 982 if (adapter->hw_status == MWIFIEX_HW_STATUS_INITIALIZING) { 983 mwifiex_init_fw_complete(adapter); 984 return; 985 } 986 987 if (adapter->if_ops.device_dump) 988 adapter->if_ops.device_dump(adapter); 989 990 if (adapter->if_ops.card_reset) 991 adapter->if_ops.card_reset(adapter); 992 } 993 994 void 995 mwifiex_cancel_pending_scan_cmd(struct mwifiex_adapter *adapter) 996 { 997 struct cmd_ctrl_node *cmd_node = NULL, *tmp_node; 998 unsigned long flags; 999 1000 /* Cancel all pending scan command */ 1001 spin_lock_irqsave(&adapter->scan_pending_q_lock, flags); 1002 list_for_each_entry_safe(cmd_node, tmp_node, 1003 &adapter->scan_pending_q, list) { 1004 list_del(&cmd_node->list); 1005 cmd_node->wait_q_enabled = false; 1006 mwifiex_insert_cmd_to_free_q(adapter, cmd_node); 1007 } 1008 spin_unlock_irqrestore(&adapter->scan_pending_q_lock, flags); 1009 } 1010 1011 /* 1012 * This function cancels all the pending commands. 1013 * 1014 * The current command, all commands in command pending queue and all scan 1015 * commands in scan pending queue are cancelled. All the completion callbacks 1016 * are called with failure status to ensure cleanup. 1017 */ 1018 void 1019 mwifiex_cancel_all_pending_cmd(struct mwifiex_adapter *adapter) 1020 { 1021 struct cmd_ctrl_node *cmd_node = NULL, *tmp_node; 1022 unsigned long flags, cmd_flags; 1023 struct mwifiex_private *priv; 1024 int i; 1025 1026 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags); 1027 /* Cancel current cmd */ 1028 if ((adapter->curr_cmd) && (adapter->curr_cmd->wait_q_enabled)) { 1029 adapter->cmd_wait_q.status = -1; 1030 mwifiex_complete_cmd(adapter, adapter->curr_cmd); 1031 adapter->curr_cmd->wait_q_enabled = false; 1032 /* no recycle probably wait for response */ 1033 } 1034 /* Cancel all pending command */ 1035 spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags); 1036 list_for_each_entry_safe(cmd_node, tmp_node, 1037 &adapter->cmd_pending_q, list) { 1038 list_del(&cmd_node->list); 1039 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags); 1040 1041 if (cmd_node->wait_q_enabled) 1042 adapter->cmd_wait_q.status = -1; 1043 mwifiex_recycle_cmd_node(adapter, cmd_node); 1044 spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags); 1045 } 1046 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags); 1047 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags); 1048 1049 mwifiex_cancel_pending_scan_cmd(adapter); 1050 1051 if (adapter->scan_processing) { 1052 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags); 1053 adapter->scan_processing = false; 1054 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags); 1055 for (i = 0; i < adapter->priv_num; i++) { 1056 priv = adapter->priv[i]; 1057 if (!priv) 1058 continue; 1059 if (priv->scan_request) { 1060 mwifiex_dbg(adapter, WARN, "info: aborting scan\n"); 1061 cfg80211_scan_done(priv->scan_request, 1); 1062 priv->scan_request = NULL; 1063 } 1064 } 1065 } 1066 } 1067 1068 /* 1069 * This function cancels all pending commands that matches with 1070 * the given IOCTL request. 1071 * 1072 * Both the current command buffer and the pending command queue are 1073 * searched for matching IOCTL request. The completion callback of 1074 * the matched command is called with failure status to ensure cleanup. 1075 * In case of scan commands, all pending commands in scan pending queue 1076 * are cancelled. 1077 */ 1078 void 1079 mwifiex_cancel_pending_ioctl(struct mwifiex_adapter *adapter) 1080 { 1081 struct cmd_ctrl_node *cmd_node = NULL; 1082 unsigned long cmd_flags; 1083 struct mwifiex_private *priv; 1084 int i; 1085 1086 if ((adapter->curr_cmd) && 1087 (adapter->curr_cmd->wait_q_enabled)) { 1088 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags); 1089 cmd_node = adapter->curr_cmd; 1090 /* setting curr_cmd to NULL is quite dangerous, because 1091 * mwifiex_process_cmdresp checks curr_cmd to be != NULL 1092 * at the beginning then relies on it and dereferences 1093 * it at will 1094 * this probably works since mwifiex_cmd_timeout_func 1095 * is the only caller of this function and responses 1096 * at that point 1097 */ 1098 adapter->curr_cmd = NULL; 1099 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags); 1100 1101 mwifiex_recycle_cmd_node(adapter, cmd_node); 1102 } 1103 1104 mwifiex_cancel_pending_scan_cmd(adapter); 1105 1106 if (adapter->scan_processing) { 1107 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags); 1108 adapter->scan_processing = false; 1109 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags); 1110 for (i = 0; i < adapter->priv_num; i++) { 1111 priv = adapter->priv[i]; 1112 if (!priv) 1113 continue; 1114 if (priv->scan_request) { 1115 mwifiex_dbg(adapter, WARN, "info: aborting scan\n"); 1116 cfg80211_scan_done(priv->scan_request, 1); 1117 priv->scan_request = NULL; 1118 } 1119 } 1120 } 1121 } 1122 1123 /* 1124 * This function sends the sleep confirm command to firmware, if 1125 * possible. 1126 * 1127 * The sleep confirm command cannot be issued if command response, 1128 * data response or event response is awaiting handling, or if we 1129 * are in the middle of sending a command, or expecting a command 1130 * response. 1131 */ 1132 void 1133 mwifiex_check_ps_cond(struct mwifiex_adapter *adapter) 1134 { 1135 if (!adapter->cmd_sent && 1136 !adapter->curr_cmd && !IS_CARD_RX_RCVD(adapter)) 1137 mwifiex_dnld_sleep_confirm_cmd(adapter); 1138 else 1139 mwifiex_dbg(adapter, CMD, 1140 "cmd: Delay Sleep Confirm (%s%s%s)\n", 1141 (adapter->cmd_sent) ? "D" : "", 1142 (adapter->curr_cmd) ? "C" : "", 1143 (IS_CARD_RX_RCVD(adapter)) ? "R" : ""); 1144 } 1145 1146 /* 1147 * This function sends a Host Sleep activated event to applications. 1148 * 1149 * This event is generated by the driver, with a blank event body. 1150 */ 1151 void 1152 mwifiex_hs_activated_event(struct mwifiex_private *priv, u8 activated) 1153 { 1154 if (activated) { 1155 if (priv->adapter->is_hs_configured) { 1156 priv->adapter->hs_activated = true; 1157 mwifiex_update_rxreor_flags(priv->adapter, 1158 RXREOR_FORCE_NO_DROP); 1159 mwifiex_dbg(priv->adapter, EVENT, 1160 "event: hs_activated\n"); 1161 priv->adapter->hs_activate_wait_q_woken = true; 1162 wake_up_interruptible( 1163 &priv->adapter->hs_activate_wait_q); 1164 } else { 1165 mwifiex_dbg(priv->adapter, EVENT, 1166 "event: HS not configured\n"); 1167 } 1168 } else { 1169 mwifiex_dbg(priv->adapter, EVENT, 1170 "event: hs_deactivated\n"); 1171 priv->adapter->hs_activated = false; 1172 } 1173 } 1174 1175 /* 1176 * This function handles the command response of a Host Sleep configuration 1177 * command. 1178 * 1179 * Handling includes changing the header fields into CPU format 1180 * and setting the current host sleep activation status in driver. 1181 * 1182 * In case host sleep status change, the function generates an event to 1183 * notify the applications. 1184 */ 1185 int mwifiex_ret_802_11_hs_cfg(struct mwifiex_private *priv, 1186 struct host_cmd_ds_command *resp) 1187 { 1188 struct mwifiex_adapter *adapter = priv->adapter; 1189 struct host_cmd_ds_802_11_hs_cfg_enh *phs_cfg = 1190 &resp->params.opt_hs_cfg; 1191 uint32_t conditions = le32_to_cpu(phs_cfg->params.hs_config.conditions); 1192 1193 if (phs_cfg->action == cpu_to_le16(HS_ACTIVATE) && 1194 adapter->iface_type != MWIFIEX_USB) { 1195 mwifiex_hs_activated_event(priv, true); 1196 return 0; 1197 } else { 1198 mwifiex_dbg(adapter, CMD, 1199 "cmd: CMD_RESP: HS_CFG cmd reply\t" 1200 " result=%#x, conditions=0x%x gpio=0x%x gap=0x%x\n", 1201 resp->result, conditions, 1202 phs_cfg->params.hs_config.gpio, 1203 phs_cfg->params.hs_config.gap); 1204 } 1205 if (conditions != HS_CFG_CANCEL) { 1206 adapter->is_hs_configured = true; 1207 if (adapter->iface_type == MWIFIEX_USB) 1208 mwifiex_hs_activated_event(priv, true); 1209 } else { 1210 adapter->is_hs_configured = false; 1211 if (adapter->hs_activated) 1212 mwifiex_hs_activated_event(priv, false); 1213 } 1214 1215 return 0; 1216 } 1217 1218 /* 1219 * This function wakes up the adapter and generates a Host Sleep 1220 * cancel event on receiving the power up interrupt. 1221 */ 1222 void 1223 mwifiex_process_hs_config(struct mwifiex_adapter *adapter) 1224 { 1225 mwifiex_dbg(adapter, INFO, 1226 "info: %s: auto cancelling host sleep\t" 1227 "since there is interrupt from the firmware\n", 1228 __func__); 1229 1230 adapter->if_ops.wakeup(adapter); 1231 adapter->hs_activated = false; 1232 adapter->is_hs_configured = false; 1233 adapter->is_suspended = false; 1234 mwifiex_hs_activated_event(mwifiex_get_priv(adapter, 1235 MWIFIEX_BSS_ROLE_ANY), 1236 false); 1237 } 1238 EXPORT_SYMBOL_GPL(mwifiex_process_hs_config); 1239 1240 /* 1241 * This function handles the command response of a sleep confirm command. 1242 * 1243 * The function sets the card state to SLEEP if the response indicates success. 1244 */ 1245 void 1246 mwifiex_process_sleep_confirm_resp(struct mwifiex_adapter *adapter, 1247 u8 *pbuf, u32 upld_len) 1248 { 1249 struct host_cmd_ds_command *cmd = (struct host_cmd_ds_command *) pbuf; 1250 struct mwifiex_private *priv = 1251 mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY); 1252 uint16_t result = le16_to_cpu(cmd->result); 1253 uint16_t command = le16_to_cpu(cmd->command); 1254 uint16_t seq_num = le16_to_cpu(cmd->seq_num); 1255 1256 if (!upld_len) { 1257 mwifiex_dbg(adapter, ERROR, 1258 "%s: cmd size is 0\n", __func__); 1259 return; 1260 } 1261 1262 mwifiex_dbg(adapter, CMD, 1263 "cmd: CMD_RESP: 0x%x, result %d, len %d, seqno 0x%x\n", 1264 command, result, le16_to_cpu(cmd->size), seq_num); 1265 1266 /* Get BSS number and corresponding priv */ 1267 priv = mwifiex_get_priv_by_id(adapter, HostCmd_GET_BSS_NO(seq_num), 1268 HostCmd_GET_BSS_TYPE(seq_num)); 1269 if (!priv) 1270 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY); 1271 1272 /* Update sequence number */ 1273 seq_num = HostCmd_GET_SEQ_NO(seq_num); 1274 /* Clear RET_BIT from HostCmd */ 1275 command &= HostCmd_CMD_ID_MASK; 1276 1277 if (command != HostCmd_CMD_802_11_PS_MODE_ENH) { 1278 mwifiex_dbg(adapter, ERROR, 1279 "%s: rcvd unexpected resp for cmd %#x, result = %x\n", 1280 __func__, command, result); 1281 return; 1282 } 1283 1284 if (result) { 1285 mwifiex_dbg(adapter, ERROR, 1286 "%s: sleep confirm cmd failed\n", 1287 __func__); 1288 adapter->pm_wakeup_card_req = false; 1289 adapter->ps_state = PS_STATE_AWAKE; 1290 return; 1291 } 1292 adapter->pm_wakeup_card_req = true; 1293 if (adapter->is_hs_configured) 1294 mwifiex_hs_activated_event(mwifiex_get_priv 1295 (adapter, MWIFIEX_BSS_ROLE_ANY), 1296 true); 1297 adapter->ps_state = PS_STATE_SLEEP; 1298 cmd->command = cpu_to_le16(command); 1299 cmd->seq_num = cpu_to_le16(seq_num); 1300 } 1301 EXPORT_SYMBOL_GPL(mwifiex_process_sleep_confirm_resp); 1302 1303 /* 1304 * This function prepares an enhanced power mode command. 1305 * 1306 * This function can be used to disable power save or to configure 1307 * power save with auto PS or STA PS or auto deep sleep. 1308 * 1309 * Preparation includes - 1310 * - Setting command ID, action and proper size 1311 * - Setting Power Save bitmap, PS parameters TLV, PS mode TLV, 1312 * auto deep sleep TLV (as required) 1313 * - Ensuring correct endian-ness 1314 */ 1315 int mwifiex_cmd_enh_power_mode(struct mwifiex_private *priv, 1316 struct host_cmd_ds_command *cmd, 1317 u16 cmd_action, uint16_t ps_bitmap, 1318 struct mwifiex_ds_auto_ds *auto_ds) 1319 { 1320 struct host_cmd_ds_802_11_ps_mode_enh *psmode_enh = 1321 &cmd->params.psmode_enh; 1322 u8 *tlv; 1323 u16 cmd_size = 0; 1324 1325 cmd->command = cpu_to_le16(HostCmd_CMD_802_11_PS_MODE_ENH); 1326 if (cmd_action == DIS_AUTO_PS) { 1327 psmode_enh->action = cpu_to_le16(DIS_AUTO_PS); 1328 psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap); 1329 cmd->size = cpu_to_le16(S_DS_GEN + sizeof(psmode_enh->action) + 1330 sizeof(psmode_enh->params.ps_bitmap)); 1331 } else if (cmd_action == GET_PS) { 1332 psmode_enh->action = cpu_to_le16(GET_PS); 1333 psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap); 1334 cmd->size = cpu_to_le16(S_DS_GEN + sizeof(psmode_enh->action) + 1335 sizeof(psmode_enh->params.ps_bitmap)); 1336 } else if (cmd_action == EN_AUTO_PS) { 1337 psmode_enh->action = cpu_to_le16(EN_AUTO_PS); 1338 psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap); 1339 cmd_size = S_DS_GEN + sizeof(psmode_enh->action) + 1340 sizeof(psmode_enh->params.ps_bitmap); 1341 tlv = (u8 *) cmd + cmd_size; 1342 if (ps_bitmap & BITMAP_STA_PS) { 1343 struct mwifiex_adapter *adapter = priv->adapter; 1344 struct mwifiex_ie_types_ps_param *ps_tlv = 1345 (struct mwifiex_ie_types_ps_param *) tlv; 1346 struct mwifiex_ps_param *ps_mode = &ps_tlv->param; 1347 ps_tlv->header.type = cpu_to_le16(TLV_TYPE_PS_PARAM); 1348 ps_tlv->header.len = cpu_to_le16(sizeof(*ps_tlv) - 1349 sizeof(struct mwifiex_ie_types_header)); 1350 cmd_size += sizeof(*ps_tlv); 1351 tlv += sizeof(*ps_tlv); 1352 mwifiex_dbg(priv->adapter, CMD, 1353 "cmd: PS Command: Enter PS\n"); 1354 ps_mode->null_pkt_interval = 1355 cpu_to_le16(adapter->null_pkt_interval); 1356 ps_mode->multiple_dtims = 1357 cpu_to_le16(adapter->multiple_dtim); 1358 ps_mode->bcn_miss_timeout = 1359 cpu_to_le16(adapter->bcn_miss_time_out); 1360 ps_mode->local_listen_interval = 1361 cpu_to_le16(adapter->local_listen_interval); 1362 ps_mode->adhoc_wake_period = 1363 cpu_to_le16(adapter->adhoc_awake_period); 1364 ps_mode->delay_to_ps = 1365 cpu_to_le16(adapter->delay_to_ps); 1366 ps_mode->mode = cpu_to_le16(adapter->enhanced_ps_mode); 1367 1368 } 1369 if (ps_bitmap & BITMAP_AUTO_DS) { 1370 struct mwifiex_ie_types_auto_ds_param *auto_ds_tlv = 1371 (struct mwifiex_ie_types_auto_ds_param *) tlv; 1372 u16 idletime = 0; 1373 1374 auto_ds_tlv->header.type = 1375 cpu_to_le16(TLV_TYPE_AUTO_DS_PARAM); 1376 auto_ds_tlv->header.len = 1377 cpu_to_le16(sizeof(*auto_ds_tlv) - 1378 sizeof(struct mwifiex_ie_types_header)); 1379 cmd_size += sizeof(*auto_ds_tlv); 1380 tlv += sizeof(*auto_ds_tlv); 1381 if (auto_ds) 1382 idletime = auto_ds->idle_time; 1383 mwifiex_dbg(priv->adapter, CMD, 1384 "cmd: PS Command: Enter Auto Deep Sleep\n"); 1385 auto_ds_tlv->deep_sleep_timeout = cpu_to_le16(idletime); 1386 } 1387 cmd->size = cpu_to_le16(cmd_size); 1388 } 1389 return 0; 1390 } 1391 1392 /* 1393 * This function handles the command response of an enhanced power mode 1394 * command. 1395 * 1396 * Handling includes changing the header fields into CPU format 1397 * and setting the current enhanced power mode in driver. 1398 */ 1399 int mwifiex_ret_enh_power_mode(struct mwifiex_private *priv, 1400 struct host_cmd_ds_command *resp, 1401 struct mwifiex_ds_pm_cfg *pm_cfg) 1402 { 1403 struct mwifiex_adapter *adapter = priv->adapter; 1404 struct host_cmd_ds_802_11_ps_mode_enh *ps_mode = 1405 &resp->params.psmode_enh; 1406 uint16_t action = le16_to_cpu(ps_mode->action); 1407 uint16_t ps_bitmap = le16_to_cpu(ps_mode->params.ps_bitmap); 1408 uint16_t auto_ps_bitmap = 1409 le16_to_cpu(ps_mode->params.ps_bitmap); 1410 1411 mwifiex_dbg(adapter, INFO, 1412 "info: %s: PS_MODE cmd reply result=%#x action=%#X\n", 1413 __func__, resp->result, action); 1414 if (action == EN_AUTO_PS) { 1415 if (auto_ps_bitmap & BITMAP_AUTO_DS) { 1416 mwifiex_dbg(adapter, CMD, 1417 "cmd: Enabled auto deep sleep\n"); 1418 priv->adapter->is_deep_sleep = true; 1419 } 1420 if (auto_ps_bitmap & BITMAP_STA_PS) { 1421 mwifiex_dbg(adapter, CMD, 1422 "cmd: Enabled STA power save\n"); 1423 if (adapter->sleep_period.period) 1424 mwifiex_dbg(adapter, CMD, 1425 "cmd: set to uapsd/pps mode\n"); 1426 } 1427 } else if (action == DIS_AUTO_PS) { 1428 if (ps_bitmap & BITMAP_AUTO_DS) { 1429 priv->adapter->is_deep_sleep = false; 1430 mwifiex_dbg(adapter, CMD, 1431 "cmd: Disabled auto deep sleep\n"); 1432 } 1433 if (ps_bitmap & BITMAP_STA_PS) { 1434 mwifiex_dbg(adapter, CMD, 1435 "cmd: Disabled STA power save\n"); 1436 if (adapter->sleep_period.period) { 1437 adapter->delay_null_pkt = false; 1438 adapter->tx_lock_flag = false; 1439 adapter->pps_uapsd_mode = false; 1440 } 1441 } 1442 } else if (action == GET_PS) { 1443 if (ps_bitmap & BITMAP_STA_PS) 1444 adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_PSP; 1445 else 1446 adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_CAM; 1447 1448 mwifiex_dbg(adapter, CMD, 1449 "cmd: ps_bitmap=%#x\n", ps_bitmap); 1450 1451 if (pm_cfg) { 1452 /* This section is for get power save mode */ 1453 if (ps_bitmap & BITMAP_STA_PS) 1454 pm_cfg->param.ps_mode = 1; 1455 else 1456 pm_cfg->param.ps_mode = 0; 1457 } 1458 } 1459 return 0; 1460 } 1461 1462 /* 1463 * This function prepares command to get hardware specifications. 1464 * 1465 * Preparation includes - 1466 * - Setting command ID, action and proper size 1467 * - Setting permanent address parameter 1468 * - Ensuring correct endian-ness 1469 */ 1470 int mwifiex_cmd_get_hw_spec(struct mwifiex_private *priv, 1471 struct host_cmd_ds_command *cmd) 1472 { 1473 struct host_cmd_ds_get_hw_spec *hw_spec = &cmd->params.hw_spec; 1474 1475 cmd->command = cpu_to_le16(HostCmd_CMD_GET_HW_SPEC); 1476 cmd->size = 1477 cpu_to_le16(sizeof(struct host_cmd_ds_get_hw_spec) + S_DS_GEN); 1478 memcpy(hw_spec->permanent_addr, priv->curr_addr, ETH_ALEN); 1479 1480 return 0; 1481 } 1482 1483 /* 1484 * This function handles the command response of get hardware 1485 * specifications. 1486 * 1487 * Handling includes changing the header fields into CPU format 1488 * and saving/updating the following parameters in driver - 1489 * - Firmware capability information 1490 * - Firmware band settings 1491 * - Ad-hoc start band and channel 1492 * - Ad-hoc 11n activation status 1493 * - Firmware release number 1494 * - Number of antennas 1495 * - Hardware address 1496 * - Hardware interface version 1497 * - Firmware version 1498 * - Region code 1499 * - 11n capabilities 1500 * - MCS support fields 1501 * - MP end port 1502 */ 1503 int mwifiex_ret_get_hw_spec(struct mwifiex_private *priv, 1504 struct host_cmd_ds_command *resp) 1505 { 1506 struct host_cmd_ds_get_hw_spec *hw_spec = &resp->params.hw_spec; 1507 struct mwifiex_adapter *adapter = priv->adapter; 1508 struct mwifiex_ie_types_header *tlv; 1509 struct hw_spec_api_rev *api_rev; 1510 u16 resp_size, api_id; 1511 int i, left_len, parsed_len = 0; 1512 1513 adapter->fw_cap_info = le32_to_cpu(hw_spec->fw_cap_info); 1514 1515 if (IS_SUPPORT_MULTI_BANDS(adapter)) 1516 adapter->fw_bands = (u8) GET_FW_DEFAULT_BANDS(adapter); 1517 else 1518 adapter->fw_bands = BAND_B; 1519 1520 adapter->config_bands = adapter->fw_bands; 1521 1522 if (adapter->fw_bands & BAND_A) { 1523 if (adapter->fw_bands & BAND_GN) { 1524 adapter->config_bands |= BAND_AN; 1525 adapter->fw_bands |= BAND_AN; 1526 } 1527 if (adapter->fw_bands & BAND_AN) { 1528 adapter->adhoc_start_band = BAND_A | BAND_AN; 1529 adapter->adhoc_11n_enabled = true; 1530 } else { 1531 adapter->adhoc_start_band = BAND_A; 1532 } 1533 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL_A; 1534 } else if (adapter->fw_bands & BAND_GN) { 1535 adapter->adhoc_start_band = BAND_G | BAND_B | BAND_GN; 1536 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL; 1537 adapter->adhoc_11n_enabled = true; 1538 } else if (adapter->fw_bands & BAND_G) { 1539 adapter->adhoc_start_band = BAND_G | BAND_B; 1540 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL; 1541 } else if (adapter->fw_bands & BAND_B) { 1542 adapter->adhoc_start_band = BAND_B; 1543 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL; 1544 } 1545 1546 adapter->fw_release_number = le32_to_cpu(hw_spec->fw_release_number); 1547 adapter->fw_api_ver = (adapter->fw_release_number >> 16) & 0xff; 1548 adapter->number_of_antenna = le16_to_cpu(hw_spec->number_of_antenna); 1549 1550 if (le32_to_cpu(hw_spec->dot_11ac_dev_cap)) { 1551 adapter->is_hw_11ac_capable = true; 1552 1553 /* Copy 11AC cap */ 1554 adapter->hw_dot_11ac_dev_cap = 1555 le32_to_cpu(hw_spec->dot_11ac_dev_cap); 1556 adapter->usr_dot_11ac_dev_cap_bg = adapter->hw_dot_11ac_dev_cap 1557 & ~MWIFIEX_DEF_11AC_CAP_BF_RESET_MASK; 1558 adapter->usr_dot_11ac_dev_cap_a = adapter->hw_dot_11ac_dev_cap 1559 & ~MWIFIEX_DEF_11AC_CAP_BF_RESET_MASK; 1560 1561 /* Copy 11AC mcs */ 1562 adapter->hw_dot_11ac_mcs_support = 1563 le32_to_cpu(hw_spec->dot_11ac_mcs_support); 1564 adapter->usr_dot_11ac_mcs_support = 1565 adapter->hw_dot_11ac_mcs_support; 1566 } else { 1567 adapter->is_hw_11ac_capable = false; 1568 } 1569 1570 resp_size = le16_to_cpu(resp->size) - S_DS_GEN; 1571 if (resp_size > sizeof(struct host_cmd_ds_get_hw_spec)) { 1572 /* we have variable HW SPEC information */ 1573 left_len = resp_size - sizeof(struct host_cmd_ds_get_hw_spec); 1574 while (left_len > sizeof(struct mwifiex_ie_types_header)) { 1575 tlv = (void *)&hw_spec->tlvs + parsed_len; 1576 switch (le16_to_cpu(tlv->type)) { 1577 case TLV_TYPE_API_REV: 1578 api_rev = (struct hw_spec_api_rev *)tlv; 1579 api_id = le16_to_cpu(api_rev->api_id); 1580 switch (api_id) { 1581 case KEY_API_VER_ID: 1582 adapter->key_api_major_ver = 1583 api_rev->major_ver; 1584 adapter->key_api_minor_ver = 1585 api_rev->minor_ver; 1586 mwifiex_dbg(adapter, INFO, 1587 "key_api v%d.%d\n", 1588 adapter->key_api_major_ver, 1589 adapter->key_api_minor_ver); 1590 break; 1591 case FW_API_VER_ID: 1592 adapter->fw_api_ver = 1593 api_rev->major_ver; 1594 mwifiex_dbg(adapter, INFO, 1595 "Firmware api version %d\n", 1596 adapter->fw_api_ver); 1597 break; 1598 default: 1599 mwifiex_dbg(adapter, FATAL, 1600 "Unknown api_id: %d\n", 1601 api_id); 1602 break; 1603 } 1604 break; 1605 default: 1606 mwifiex_dbg(adapter, FATAL, 1607 "Unknown GET_HW_SPEC TLV type: %#x\n", 1608 le16_to_cpu(tlv->type)); 1609 break; 1610 } 1611 parsed_len += le16_to_cpu(tlv->len) + 1612 sizeof(struct mwifiex_ie_types_header); 1613 left_len -= le16_to_cpu(tlv->len) + 1614 sizeof(struct mwifiex_ie_types_header); 1615 } 1616 } 1617 1618 mwifiex_dbg(adapter, INFO, 1619 "info: GET_HW_SPEC: fw_release_number- %#x\n", 1620 adapter->fw_release_number); 1621 mwifiex_dbg(adapter, INFO, 1622 "info: GET_HW_SPEC: permanent addr: %pM\n", 1623 hw_spec->permanent_addr); 1624 mwifiex_dbg(adapter, INFO, 1625 "info: GET_HW_SPEC: hw_if_version=%#x version=%#x\n", 1626 le16_to_cpu(hw_spec->hw_if_version), 1627 le16_to_cpu(hw_spec->version)); 1628 1629 ether_addr_copy(priv->adapter->perm_addr, hw_spec->permanent_addr); 1630 adapter->region_code = le16_to_cpu(hw_spec->region_code); 1631 1632 for (i = 0; i < MWIFIEX_MAX_REGION_CODE; i++) 1633 /* Use the region code to search for the index */ 1634 if (adapter->region_code == region_code_index[i]) 1635 break; 1636 1637 /* If it's unidentified region code, use the default (world) */ 1638 if (i >= MWIFIEX_MAX_REGION_CODE) { 1639 adapter->region_code = 0x00; 1640 mwifiex_dbg(adapter, WARN, 1641 "cmd: unknown region code, use default (USA)\n"); 1642 } 1643 1644 adapter->hw_dot_11n_dev_cap = le32_to_cpu(hw_spec->dot_11n_dev_cap); 1645 adapter->hw_dev_mcs_support = hw_spec->dev_mcs_support; 1646 adapter->user_dev_mcs_support = adapter->hw_dev_mcs_support; 1647 1648 if (adapter->if_ops.update_mp_end_port) 1649 adapter->if_ops.update_mp_end_port(adapter, 1650 le16_to_cpu(hw_spec->mp_end_port)); 1651 1652 if (adapter->fw_api_ver == MWIFIEX_FW_V15) 1653 adapter->scan_chan_gap_enabled = true; 1654 1655 return 0; 1656 } 1657 1658 /* This function handles the command response of hs wakeup reason 1659 * command. 1660 */ 1661 int mwifiex_ret_wakeup_reason(struct mwifiex_private *priv, 1662 struct host_cmd_ds_command *resp, 1663 struct host_cmd_ds_wakeup_reason *wakeup_reason) 1664 { 1665 wakeup_reason->wakeup_reason = 1666 resp->params.hs_wakeup_reason.wakeup_reason; 1667 1668 return 0; 1669 } 1670