1 /*
2  * Marvell Wireless LAN device driver: SDIO specific handling
3  *
4  * Copyright (C) 2011-2014, Marvell International Ltd.
5  *
6  * This software file (the "File") is distributed by Marvell International
7  * Ltd. under the terms of the GNU General Public License Version 2, June 1991
8  * (the "License").  You may use, redistribute and/or modify this File in
9  * accordance with the terms and conditions of the License, a copy of which
10  * is available by writing to the Free Software Foundation, Inc.,
11  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
12  * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
13  *
14  * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
15  * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
16  * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
17  * this warranty disclaimer.
18  */
19 
20 #include <linux/firmware.h>
21 
22 #include "decl.h"
23 #include "ioctl.h"
24 #include "util.h"
25 #include "fw.h"
26 #include "main.h"
27 #include "wmm.h"
28 #include "11n.h"
29 #include "sdio.h"
30 
31 
32 #define SDIO_VERSION	"1.0"
33 
34 /* The mwifiex_sdio_remove() callback function is called when
35  * user removes this module from kernel space or ejects
36  * the card from the slot. The driver handles these 2 cases
37  * differently.
38  * If the user is removing the module, the few commands (FUNC_SHUTDOWN,
39  * HS_CANCEL etc.) are sent to the firmware.
40  * If the card is removed, there is no need to send these command.
41  *
42  * The variable 'user_rmmod' is used to distinguish these two
43  * scenarios. This flag is initialized as FALSE in case the card
44  * is removed, and will be set to TRUE for module removal when
45  * module_exit function is called.
46  */
47 static u8 user_rmmod;
48 
49 static struct mwifiex_if_ops sdio_ops;
50 static unsigned long iface_work_flags;
51 
52 static struct semaphore add_remove_card_sem;
53 
54 static struct memory_type_mapping generic_mem_type_map[] = {
55 	{"DUMP", NULL, 0, 0xDD},
56 };
57 
58 static struct memory_type_mapping mem_type_mapping_tbl[] = {
59 	{"ITCM", NULL, 0, 0xF0},
60 	{"DTCM", NULL, 0, 0xF1},
61 	{"SQRAM", NULL, 0, 0xF2},
62 	{"APU", NULL, 0, 0xF3},
63 	{"CIU", NULL, 0, 0xF4},
64 	{"ICU", NULL, 0, 0xF5},
65 	{"MAC", NULL, 0, 0xF6},
66 	{"EXT7", NULL, 0, 0xF7},
67 	{"EXT8", NULL, 0, 0xF8},
68 	{"EXT9", NULL, 0, 0xF9},
69 	{"EXT10", NULL, 0, 0xFA},
70 	{"EXT11", NULL, 0, 0xFB},
71 	{"EXT12", NULL, 0, 0xFC},
72 	{"EXT13", NULL, 0, 0xFD},
73 	{"EXTLAST", NULL, 0, 0xFE},
74 };
75 
76 static const struct of_device_id mwifiex_sdio_of_match_table[] = {
77 	{ .compatible = "marvell,sd8897" },
78 	{ .compatible = "marvell,sd8997" },
79 	{ }
80 };
81 
82 static irqreturn_t mwifiex_wake_irq_wifi(int irq, void *priv)
83 {
84 	struct mwifiex_plt_wake_cfg *cfg = priv;
85 
86 	if (cfg->irq_wifi >= 0) {
87 		pr_info("%s: wake by wifi", __func__);
88 		cfg->wake_by_wifi = true;
89 		disable_irq_nosync(irq);
90 	}
91 
92 	return IRQ_HANDLED;
93 }
94 
95 /* This function parse device tree node using mmc subnode devicetree API.
96  * The device node is saved in card->plt_of_node.
97  * if the device tree node exist and include interrupts attributes, this
98  * function will also request platform specific wakeup interrupt.
99  */
100 static int mwifiex_sdio_probe_of(struct device *dev, struct sdio_mmc_card *card)
101 {
102 	struct mwifiex_plt_wake_cfg *cfg;
103 	int ret;
104 
105 	if (!of_match_node(mwifiex_sdio_of_match_table, dev->of_node)) {
106 		dev_err(dev, "required compatible string missing\n");
107 		return -EINVAL;
108 	}
109 
110 	card->plt_of_node = dev->of_node;
111 	card->plt_wake_cfg = devm_kzalloc(dev, sizeof(*card->plt_wake_cfg),
112 					  GFP_KERNEL);
113 	cfg = card->plt_wake_cfg;
114 	if (cfg && card->plt_of_node) {
115 		cfg->irq_wifi = irq_of_parse_and_map(card->plt_of_node, 0);
116 		if (!cfg->irq_wifi) {
117 			dev_dbg(dev,
118 				"fail to parse irq_wifi from device tree\n");
119 		} else {
120 			ret = devm_request_irq(dev, cfg->irq_wifi,
121 					       mwifiex_wake_irq_wifi,
122 					       IRQF_TRIGGER_LOW,
123 					       "wifi_wake", cfg);
124 			if (ret) {
125 				dev_err(dev,
126 					"Failed to request irq_wifi %d (%d)\n",
127 					cfg->irq_wifi, ret);
128 			}
129 			disable_irq(cfg->irq_wifi);
130 		}
131 	}
132 
133 	return 0;
134 }
135 
136 /*
137  * SDIO probe.
138  *
139  * This function probes an mwifiex device and registers it. It allocates
140  * the card structure, enables SDIO function number and initiates the
141  * device registration and initialization procedure by adding a logical
142  * interface.
143  */
144 static int
145 mwifiex_sdio_probe(struct sdio_func *func, const struct sdio_device_id *id)
146 {
147 	int ret;
148 	struct sdio_mmc_card *card = NULL;
149 
150 	pr_debug("info: vendor=0x%4.04X device=0x%4.04X class=%d function=%d\n",
151 		 func->vendor, func->device, func->class, func->num);
152 
153 	card = kzalloc(sizeof(struct sdio_mmc_card), GFP_KERNEL);
154 	if (!card)
155 		return -ENOMEM;
156 
157 	card->func = func;
158 	card->device_id = id;
159 
160 	func->card->quirks |= MMC_QUIRK_BLKSZ_FOR_BYTE_MODE;
161 
162 	if (id->driver_data) {
163 		struct mwifiex_sdio_device *data = (void *)id->driver_data;
164 
165 		card->firmware = data->firmware;
166 		card->reg = data->reg;
167 		card->max_ports = data->max_ports;
168 		card->mp_agg_pkt_limit = data->mp_agg_pkt_limit;
169 		card->supports_sdio_new_mode = data->supports_sdio_new_mode;
170 		card->has_control_mask = data->has_control_mask;
171 		card->tx_buf_size = data->tx_buf_size;
172 		card->mp_tx_agg_buf_size = data->mp_tx_agg_buf_size;
173 		card->mp_rx_agg_buf_size = data->mp_rx_agg_buf_size;
174 		card->can_dump_fw = data->can_dump_fw;
175 		card->fw_dump_enh = data->fw_dump_enh;
176 		card->can_auto_tdls = data->can_auto_tdls;
177 		card->can_ext_scan = data->can_ext_scan;
178 	}
179 
180 	sdio_claim_host(func);
181 	ret = sdio_enable_func(func);
182 	sdio_release_host(func);
183 
184 	if (ret) {
185 		dev_err(&func->dev, "failed to enable function\n");
186 		goto err_free;
187 	}
188 
189 	/* device tree node parsing and platform specific configuration*/
190 	if (func->dev.of_node) {
191 		ret = mwifiex_sdio_probe_of(&func->dev, card);
192 		if (ret) {
193 			dev_err(&func->dev, "SDIO dt node parse failed\n");
194 			goto err_disable;
195 		}
196 	}
197 
198 	ret = mwifiex_add_card(card, &add_remove_card_sem, &sdio_ops,
199 			       MWIFIEX_SDIO);
200 	if (ret) {
201 		dev_err(&func->dev, "add card failed\n");
202 		goto err_disable;
203 	}
204 
205 	return 0;
206 
207 err_disable:
208 	sdio_claim_host(func);
209 	sdio_disable_func(func);
210 	sdio_release_host(func);
211 err_free:
212 	kfree(card);
213 
214 	return ret;
215 }
216 
217 /*
218  * SDIO resume.
219  *
220  * Kernel needs to suspend all functions separately. Therefore all
221  * registered functions must have drivers with suspend and resume
222  * methods. Failing that the kernel simply removes the whole card.
223  *
224  * If already not resumed, this function turns on the traffic and
225  * sends a host sleep cancel request to the firmware.
226  */
227 static int mwifiex_sdio_resume(struct device *dev)
228 {
229 	struct sdio_func *func = dev_to_sdio_func(dev);
230 	struct sdio_mmc_card *card;
231 	struct mwifiex_adapter *adapter;
232 	mmc_pm_flag_t pm_flag = 0;
233 
234 	if (func) {
235 		pm_flag = sdio_get_host_pm_caps(func);
236 		card = sdio_get_drvdata(func);
237 		if (!card || !card->adapter) {
238 			pr_err("resume: invalid card or adapter\n");
239 			return 0;
240 		}
241 	} else {
242 		pr_err("resume: sdio_func is not specified\n");
243 		return 0;
244 	}
245 
246 	adapter = card->adapter;
247 
248 	if (!adapter->is_suspended) {
249 		mwifiex_dbg(adapter, WARN,
250 			    "device already resumed\n");
251 		return 0;
252 	}
253 
254 	adapter->is_suspended = false;
255 
256 	/* Disable Host Sleep */
257 	mwifiex_cancel_hs(mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_STA),
258 			  MWIFIEX_SYNC_CMD);
259 
260 	/* Disable platform specific wakeup interrupt */
261 	if (card->plt_wake_cfg && card->plt_wake_cfg->irq_wifi >= 0) {
262 		disable_irq_wake(card->plt_wake_cfg->irq_wifi);
263 		if (!card->plt_wake_cfg->wake_by_wifi)
264 			disable_irq(card->plt_wake_cfg->irq_wifi);
265 	}
266 
267 	return 0;
268 }
269 
270 /*
271  * SDIO remove.
272  *
273  * This function removes the interface and frees up the card structure.
274  */
275 static void
276 mwifiex_sdio_remove(struct sdio_func *func)
277 {
278 	struct sdio_mmc_card *card;
279 	struct mwifiex_adapter *adapter;
280 	struct mwifiex_private *priv;
281 
282 	card = sdio_get_drvdata(func);
283 	if (!card)
284 		return;
285 
286 	adapter = card->adapter;
287 	if (!adapter || !adapter->priv_num)
288 		return;
289 
290 	mwifiex_dbg(adapter, INFO, "info: SDIO func num=%d\n", func->num);
291 
292 	if (user_rmmod) {
293 		if (adapter->is_suspended)
294 			mwifiex_sdio_resume(adapter->dev);
295 
296 		mwifiex_deauthenticate_all(adapter);
297 
298 		priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
299 		mwifiex_disable_auto_ds(priv);
300 		mwifiex_init_shutdown_fw(priv, MWIFIEX_FUNC_SHUTDOWN);
301 	}
302 
303 	mwifiex_remove_card(card->adapter, &add_remove_card_sem);
304 }
305 
306 /*
307  * SDIO suspend.
308  *
309  * Kernel needs to suspend all functions separately. Therefore all
310  * registered functions must have drivers with suspend and resume
311  * methods. Failing that the kernel simply removes the whole card.
312  *
313  * If already not suspended, this function allocates and sends a host
314  * sleep activate request to the firmware and turns off the traffic.
315  */
316 static int mwifiex_sdio_suspend(struct device *dev)
317 {
318 	struct sdio_func *func = dev_to_sdio_func(dev);
319 	struct sdio_mmc_card *card;
320 	struct mwifiex_adapter *adapter;
321 	mmc_pm_flag_t pm_flag = 0;
322 	int ret = 0;
323 
324 	if (func) {
325 		pm_flag = sdio_get_host_pm_caps(func);
326 		pr_debug("cmd: %s: suspend: PM flag = 0x%x\n",
327 			 sdio_func_id(func), pm_flag);
328 		if (!(pm_flag & MMC_PM_KEEP_POWER)) {
329 			pr_err("%s: cannot remain alive while host is"
330 				" suspended\n", sdio_func_id(func));
331 			return -ENOSYS;
332 		}
333 
334 		card = sdio_get_drvdata(func);
335 		if (!card || !card->adapter) {
336 			pr_err("suspend: invalid card or adapter\n");
337 			return 0;
338 		}
339 	} else {
340 		pr_err("suspend: sdio_func is not specified\n");
341 		return 0;
342 	}
343 
344 	adapter = card->adapter;
345 
346 	/* Enable platform specific wakeup interrupt */
347 	if (card->plt_wake_cfg && card->plt_wake_cfg->irq_wifi >= 0) {
348 		card->plt_wake_cfg->wake_by_wifi = false;
349 		enable_irq(card->plt_wake_cfg->irq_wifi);
350 		enable_irq_wake(card->plt_wake_cfg->irq_wifi);
351 	}
352 
353 	/* Enable the Host Sleep */
354 	if (!mwifiex_enable_hs(adapter)) {
355 		mwifiex_dbg(adapter, ERROR,
356 			    "cmd: failed to suspend\n");
357 		adapter->hs_enabling = false;
358 		return -EFAULT;
359 	}
360 
361 	mwifiex_dbg(adapter, INFO,
362 		    "cmd: suspend with MMC_PM_KEEP_POWER\n");
363 	ret = sdio_set_host_pm_flags(func, MMC_PM_KEEP_POWER);
364 
365 	/* Indicate device suspended */
366 	adapter->is_suspended = true;
367 	adapter->hs_enabling = false;
368 
369 	return ret;
370 }
371 
372 /* Device ID for SD8786 */
373 #define SDIO_DEVICE_ID_MARVELL_8786   (0x9116)
374 /* Device ID for SD8787 */
375 #define SDIO_DEVICE_ID_MARVELL_8787   (0x9119)
376 /* Device ID for SD8797 */
377 #define SDIO_DEVICE_ID_MARVELL_8797   (0x9129)
378 /* Device ID for SD8897 */
379 #define SDIO_DEVICE_ID_MARVELL_8897   (0x912d)
380 /* Device ID for SD8887 */
381 #define SDIO_DEVICE_ID_MARVELL_8887   (0x9135)
382 /* Device ID for SD8801 */
383 #define SDIO_DEVICE_ID_MARVELL_8801   (0x9139)
384 /* Device ID for SD8997 */
385 #define SDIO_DEVICE_ID_MARVELL_8997   (0x9141)
386 
387 
388 /* WLAN IDs */
389 static const struct sdio_device_id mwifiex_ids[] = {
390 	{SDIO_DEVICE(SDIO_VENDOR_ID_MARVELL, SDIO_DEVICE_ID_MARVELL_8786),
391 		.driver_data = (unsigned long) &mwifiex_sdio_sd8786},
392 	{SDIO_DEVICE(SDIO_VENDOR_ID_MARVELL, SDIO_DEVICE_ID_MARVELL_8787),
393 		.driver_data = (unsigned long) &mwifiex_sdio_sd8787},
394 	{SDIO_DEVICE(SDIO_VENDOR_ID_MARVELL, SDIO_DEVICE_ID_MARVELL_8797),
395 		.driver_data = (unsigned long) &mwifiex_sdio_sd8797},
396 	{SDIO_DEVICE(SDIO_VENDOR_ID_MARVELL, SDIO_DEVICE_ID_MARVELL_8897),
397 		.driver_data = (unsigned long) &mwifiex_sdio_sd8897},
398 	{SDIO_DEVICE(SDIO_VENDOR_ID_MARVELL, SDIO_DEVICE_ID_MARVELL_8887),
399 		.driver_data = (unsigned long)&mwifiex_sdio_sd8887},
400 	{SDIO_DEVICE(SDIO_VENDOR_ID_MARVELL, SDIO_DEVICE_ID_MARVELL_8801),
401 		.driver_data = (unsigned long)&mwifiex_sdio_sd8801},
402 	{SDIO_DEVICE(SDIO_VENDOR_ID_MARVELL, SDIO_DEVICE_ID_MARVELL_8997),
403 		.driver_data = (unsigned long)&mwifiex_sdio_sd8997},
404 	{},
405 };
406 
407 MODULE_DEVICE_TABLE(sdio, mwifiex_ids);
408 
409 static const struct dev_pm_ops mwifiex_sdio_pm_ops = {
410 	.suspend = mwifiex_sdio_suspend,
411 	.resume = mwifiex_sdio_resume,
412 };
413 
414 static struct sdio_driver mwifiex_sdio = {
415 	.name = "mwifiex_sdio",
416 	.id_table = mwifiex_ids,
417 	.probe = mwifiex_sdio_probe,
418 	.remove = mwifiex_sdio_remove,
419 	.drv = {
420 		.owner = THIS_MODULE,
421 		.pm = &mwifiex_sdio_pm_ops,
422 	}
423 };
424 
425 /* Write data into SDIO card register. Caller claims SDIO device. */
426 static int
427 mwifiex_write_reg_locked(struct sdio_func *func, u32 reg, u8 data)
428 {
429 	int ret = -1;
430 	sdio_writeb(func, data, reg, &ret);
431 	return ret;
432 }
433 
434 /*
435  * This function writes data into SDIO card register.
436  */
437 static int
438 mwifiex_write_reg(struct mwifiex_adapter *adapter, u32 reg, u8 data)
439 {
440 	struct sdio_mmc_card *card = adapter->card;
441 	int ret;
442 
443 	sdio_claim_host(card->func);
444 	ret = mwifiex_write_reg_locked(card->func, reg, data);
445 	sdio_release_host(card->func);
446 
447 	return ret;
448 }
449 
450 /*
451  * This function reads data from SDIO card register.
452  */
453 static int
454 mwifiex_read_reg(struct mwifiex_adapter *adapter, u32 reg, u8 *data)
455 {
456 	struct sdio_mmc_card *card = adapter->card;
457 	int ret = -1;
458 	u8 val;
459 
460 	sdio_claim_host(card->func);
461 	val = sdio_readb(card->func, reg, &ret);
462 	sdio_release_host(card->func);
463 
464 	*data = val;
465 
466 	return ret;
467 }
468 
469 /*
470  * This function writes multiple data into SDIO card memory.
471  *
472  * This does not work in suspended mode.
473  */
474 static int
475 mwifiex_write_data_sync(struct mwifiex_adapter *adapter,
476 			u8 *buffer, u32 pkt_len, u32 port)
477 {
478 	struct sdio_mmc_card *card = adapter->card;
479 	int ret;
480 	u8 blk_mode =
481 		(port & MWIFIEX_SDIO_BYTE_MODE_MASK) ? BYTE_MODE : BLOCK_MODE;
482 	u32 blk_size = (blk_mode == BLOCK_MODE) ? MWIFIEX_SDIO_BLOCK_SIZE : 1;
483 	u32 blk_cnt =
484 		(blk_mode ==
485 		 BLOCK_MODE) ? (pkt_len /
486 				MWIFIEX_SDIO_BLOCK_SIZE) : pkt_len;
487 	u32 ioport = (port & MWIFIEX_SDIO_IO_PORT_MASK);
488 
489 	if (adapter->is_suspended) {
490 		mwifiex_dbg(adapter, ERROR,
491 			    "%s: not allowed while suspended\n", __func__);
492 		return -1;
493 	}
494 
495 	sdio_claim_host(card->func);
496 
497 	ret = sdio_writesb(card->func, ioport, buffer, blk_cnt * blk_size);
498 
499 	sdio_release_host(card->func);
500 
501 	return ret;
502 }
503 
504 /*
505  * This function reads multiple data from SDIO card memory.
506  */
507 static int mwifiex_read_data_sync(struct mwifiex_adapter *adapter, u8 *buffer,
508 				  u32 len, u32 port, u8 claim)
509 {
510 	struct sdio_mmc_card *card = adapter->card;
511 	int ret;
512 	u8 blk_mode = (port & MWIFIEX_SDIO_BYTE_MODE_MASK) ? BYTE_MODE
513 		       : BLOCK_MODE;
514 	u32 blk_size = (blk_mode == BLOCK_MODE) ? MWIFIEX_SDIO_BLOCK_SIZE : 1;
515 	u32 blk_cnt = (blk_mode == BLOCK_MODE) ? (len / MWIFIEX_SDIO_BLOCK_SIZE)
516 			: len;
517 	u32 ioport = (port & MWIFIEX_SDIO_IO_PORT_MASK);
518 
519 	if (claim)
520 		sdio_claim_host(card->func);
521 
522 	ret = sdio_readsb(card->func, buffer, ioport, blk_cnt * blk_size);
523 
524 	if (claim)
525 		sdio_release_host(card->func);
526 
527 	return ret;
528 }
529 
530 /*
531  * This function wakes up the card.
532  *
533  * A host power up command is written to the card configuration
534  * register to wake up the card.
535  */
536 static int mwifiex_pm_wakeup_card(struct mwifiex_adapter *adapter)
537 {
538 	mwifiex_dbg(adapter, EVENT,
539 		    "event: wakeup device...\n");
540 
541 	return mwifiex_write_reg(adapter, CONFIGURATION_REG, HOST_POWER_UP);
542 }
543 
544 /*
545  * This function is called after the card has woken up.
546  *
547  * The card configuration register is reset.
548  */
549 static int mwifiex_pm_wakeup_card_complete(struct mwifiex_adapter *adapter)
550 {
551 	mwifiex_dbg(adapter, EVENT,
552 		    "cmd: wakeup device completed\n");
553 
554 	return mwifiex_write_reg(adapter, CONFIGURATION_REG, 0);
555 }
556 
557 static int mwifiex_sdio_dnld_fw(struct mwifiex_adapter *adapter,
558 			struct mwifiex_fw_image *fw)
559 {
560 	struct sdio_mmc_card *card = adapter->card;
561 	int ret;
562 
563 	sdio_claim_host(card->func);
564 	ret = mwifiex_dnld_fw(adapter, fw);
565 	sdio_release_host(card->func);
566 
567 	return ret;
568 }
569 
570 /*
571  * This function is used to initialize IO ports for the
572  * chipsets supporting SDIO new mode eg SD8897.
573  */
574 static int mwifiex_init_sdio_new_mode(struct mwifiex_adapter *adapter)
575 {
576 	u8 reg;
577 	struct sdio_mmc_card *card = adapter->card;
578 
579 	adapter->ioport = MEM_PORT;
580 
581 	/* enable sdio new mode */
582 	if (mwifiex_read_reg(adapter, card->reg->card_cfg_2_1_reg, &reg))
583 		return -1;
584 	if (mwifiex_write_reg(adapter, card->reg->card_cfg_2_1_reg,
585 			      reg | CMD53_NEW_MODE))
586 		return -1;
587 
588 	/* Configure cmd port and enable reading rx length from the register */
589 	if (mwifiex_read_reg(adapter, card->reg->cmd_cfg_0, &reg))
590 		return -1;
591 	if (mwifiex_write_reg(adapter, card->reg->cmd_cfg_0,
592 			      reg | CMD_PORT_RD_LEN_EN))
593 		return -1;
594 
595 	/* Enable Dnld/Upld ready auto reset for cmd port after cmd53 is
596 	 * completed
597 	 */
598 	if (mwifiex_read_reg(adapter, card->reg->cmd_cfg_1, &reg))
599 		return -1;
600 	if (mwifiex_write_reg(adapter, card->reg->cmd_cfg_1,
601 			      reg | CMD_PORT_AUTO_EN))
602 		return -1;
603 
604 	return 0;
605 }
606 
607 /* This function initializes the IO ports.
608  *
609  * The following operations are performed -
610  *      - Read the IO ports (0, 1 and 2)
611  *      - Set host interrupt Reset-To-Read to clear
612  *      - Set auto re-enable interrupt
613  */
614 static int mwifiex_init_sdio_ioport(struct mwifiex_adapter *adapter)
615 {
616 	u8 reg;
617 	struct sdio_mmc_card *card = adapter->card;
618 
619 	adapter->ioport = 0;
620 
621 	if (card->supports_sdio_new_mode) {
622 		if (mwifiex_init_sdio_new_mode(adapter))
623 			return -1;
624 		goto cont;
625 	}
626 
627 	/* Read the IO port */
628 	if (!mwifiex_read_reg(adapter, card->reg->io_port_0_reg, &reg))
629 		adapter->ioport |= (reg & 0xff);
630 	else
631 		return -1;
632 
633 	if (!mwifiex_read_reg(adapter, card->reg->io_port_1_reg, &reg))
634 		adapter->ioport |= ((reg & 0xff) << 8);
635 	else
636 		return -1;
637 
638 	if (!mwifiex_read_reg(adapter, card->reg->io_port_2_reg, &reg))
639 		adapter->ioport |= ((reg & 0xff) << 16);
640 	else
641 		return -1;
642 cont:
643 	mwifiex_dbg(adapter, INFO,
644 		    "info: SDIO FUNC1 IO port: %#x\n", adapter->ioport);
645 
646 	/* Set Host interrupt reset to read to clear */
647 	if (!mwifiex_read_reg(adapter, card->reg->host_int_rsr_reg, &reg))
648 		mwifiex_write_reg(adapter, card->reg->host_int_rsr_reg,
649 				  reg | card->reg->sdio_int_mask);
650 	else
651 		return -1;
652 
653 	/* Dnld/Upld ready set to auto reset */
654 	if (!mwifiex_read_reg(adapter, card->reg->card_misc_cfg_reg, &reg))
655 		mwifiex_write_reg(adapter, card->reg->card_misc_cfg_reg,
656 				  reg | AUTO_RE_ENABLE_INT);
657 	else
658 		return -1;
659 
660 	return 0;
661 }
662 
663 /*
664  * This function sends data to the card.
665  */
666 static int mwifiex_write_data_to_card(struct mwifiex_adapter *adapter,
667 				      u8 *payload, u32 pkt_len, u32 port)
668 {
669 	u32 i = 0;
670 	int ret;
671 
672 	do {
673 		ret = mwifiex_write_data_sync(adapter, payload, pkt_len, port);
674 		if (ret) {
675 			i++;
676 			mwifiex_dbg(adapter, ERROR,
677 				    "host_to_card, write iomem\t"
678 				    "(%d) failed: %d\n", i, ret);
679 			if (mwifiex_write_reg(adapter, CONFIGURATION_REG, 0x04))
680 				mwifiex_dbg(adapter, ERROR,
681 					    "write CFG reg failed\n");
682 
683 			ret = -1;
684 			if (i > MAX_WRITE_IOMEM_RETRY)
685 				return ret;
686 		}
687 	} while (ret == -1);
688 
689 	return ret;
690 }
691 
692 /*
693  * This function gets the read port.
694  *
695  * If control port bit is set in MP read bitmap, the control port
696  * is returned, otherwise the current read port is returned and
697  * the value is increased (provided it does not reach the maximum
698  * limit, in which case it is reset to 1)
699  */
700 static int mwifiex_get_rd_port(struct mwifiex_adapter *adapter, u8 *port)
701 {
702 	struct sdio_mmc_card *card = adapter->card;
703 	const struct mwifiex_sdio_card_reg *reg = card->reg;
704 	u32 rd_bitmap = card->mp_rd_bitmap;
705 
706 	mwifiex_dbg(adapter, DATA,
707 		    "data: mp_rd_bitmap=0x%08x\n", rd_bitmap);
708 
709 	if (card->supports_sdio_new_mode) {
710 		if (!(rd_bitmap & reg->data_port_mask))
711 			return -1;
712 	} else {
713 		if (!(rd_bitmap & (CTRL_PORT_MASK | reg->data_port_mask)))
714 			return -1;
715 	}
716 
717 	if ((card->has_control_mask) &&
718 	    (card->mp_rd_bitmap & CTRL_PORT_MASK)) {
719 		card->mp_rd_bitmap &= (u32) (~CTRL_PORT_MASK);
720 		*port = CTRL_PORT;
721 		mwifiex_dbg(adapter, DATA,
722 			    "data: port=%d mp_rd_bitmap=0x%08x\n",
723 			    *port, card->mp_rd_bitmap);
724 		return 0;
725 	}
726 
727 	if (!(card->mp_rd_bitmap & (1 << card->curr_rd_port)))
728 		return -1;
729 
730 	/* We are now handling the SDIO data ports */
731 	card->mp_rd_bitmap &= (u32)(~(1 << card->curr_rd_port));
732 	*port = card->curr_rd_port;
733 
734 	if (++card->curr_rd_port == card->max_ports)
735 		card->curr_rd_port = reg->start_rd_port;
736 
737 	mwifiex_dbg(adapter, DATA,
738 		    "data: port=%d mp_rd_bitmap=0x%08x -> 0x%08x\n",
739 		    *port, rd_bitmap, card->mp_rd_bitmap);
740 
741 	return 0;
742 }
743 
744 /*
745  * This function gets the write port for data.
746  *
747  * The current write port is returned if available and the value is
748  * increased (provided it does not reach the maximum limit, in which
749  * case it is reset to 1)
750  */
751 static int mwifiex_get_wr_port_data(struct mwifiex_adapter *adapter, u32 *port)
752 {
753 	struct sdio_mmc_card *card = adapter->card;
754 	const struct mwifiex_sdio_card_reg *reg = card->reg;
755 	u32 wr_bitmap = card->mp_wr_bitmap;
756 
757 	mwifiex_dbg(adapter, DATA,
758 		    "data: mp_wr_bitmap=0x%08x\n", wr_bitmap);
759 
760 	if (!(wr_bitmap & card->mp_data_port_mask)) {
761 		adapter->data_sent = true;
762 		return -EBUSY;
763 	}
764 
765 	if (card->mp_wr_bitmap & (1 << card->curr_wr_port)) {
766 		card->mp_wr_bitmap &= (u32) (~(1 << card->curr_wr_port));
767 		*port = card->curr_wr_port;
768 		if (++card->curr_wr_port == card->mp_end_port)
769 			card->curr_wr_port = reg->start_wr_port;
770 	} else {
771 		adapter->data_sent = true;
772 		return -EBUSY;
773 	}
774 
775 	if ((card->has_control_mask) && (*port == CTRL_PORT)) {
776 		mwifiex_dbg(adapter, ERROR,
777 			    "invalid data port=%d cur port=%d mp_wr_bitmap=0x%08x -> 0x%08x\n",
778 			    *port, card->curr_wr_port, wr_bitmap,
779 			    card->mp_wr_bitmap);
780 		return -1;
781 	}
782 
783 	mwifiex_dbg(adapter, DATA,
784 		    "data: port=%d mp_wr_bitmap=0x%08x -> 0x%08x\n",
785 		    *port, wr_bitmap, card->mp_wr_bitmap);
786 
787 	return 0;
788 }
789 
790 /*
791  * This function polls the card status.
792  */
793 static int
794 mwifiex_sdio_poll_card_status(struct mwifiex_adapter *adapter, u8 bits)
795 {
796 	struct sdio_mmc_card *card = adapter->card;
797 	u32 tries;
798 	u8 cs;
799 
800 	for (tries = 0; tries < MAX_POLL_TRIES; tries++) {
801 		if (mwifiex_read_reg(adapter, card->reg->poll_reg, &cs))
802 			break;
803 		else if ((cs & bits) == bits)
804 			return 0;
805 
806 		usleep_range(10, 20);
807 	}
808 
809 	mwifiex_dbg(adapter, ERROR,
810 		    "poll card status failed, tries = %d\n", tries);
811 
812 	return -1;
813 }
814 
815 /*
816  * This function reads the firmware status.
817  */
818 static int
819 mwifiex_sdio_read_fw_status(struct mwifiex_adapter *adapter, u16 *dat)
820 {
821 	struct sdio_mmc_card *card = adapter->card;
822 	const struct mwifiex_sdio_card_reg *reg = card->reg;
823 	u8 fws0, fws1;
824 
825 	if (mwifiex_read_reg(adapter, reg->status_reg_0, &fws0))
826 		return -1;
827 
828 	if (mwifiex_read_reg(adapter, reg->status_reg_1, &fws1))
829 		return -1;
830 
831 	*dat = (u16) ((fws1 << 8) | fws0);
832 
833 	return 0;
834 }
835 
836 /*
837  * This function disables the host interrupt.
838  *
839  * The host interrupt mask is read, the disable bit is reset and
840  * written back to the card host interrupt mask register.
841  */
842 static void mwifiex_sdio_disable_host_int(struct mwifiex_adapter *adapter)
843 {
844 	struct sdio_mmc_card *card = adapter->card;
845 	struct sdio_func *func = card->func;
846 
847 	sdio_claim_host(func);
848 	mwifiex_write_reg_locked(func, card->reg->host_int_mask_reg, 0);
849 	sdio_release_irq(func);
850 	sdio_release_host(func);
851 }
852 
853 /*
854  * This function reads the interrupt status from card.
855  */
856 static void mwifiex_interrupt_status(struct mwifiex_adapter *adapter)
857 {
858 	struct sdio_mmc_card *card = adapter->card;
859 	u8 sdio_ireg;
860 	unsigned long flags;
861 
862 	if (mwifiex_read_data_sync(adapter, card->mp_regs,
863 				   card->reg->max_mp_regs,
864 				   REG_PORT | MWIFIEX_SDIO_BYTE_MODE_MASK, 0)) {
865 		mwifiex_dbg(adapter, ERROR, "read mp_regs failed\n");
866 		return;
867 	}
868 
869 	sdio_ireg = card->mp_regs[card->reg->host_int_status_reg];
870 	if (sdio_ireg) {
871 		/*
872 		 * DN_LD_HOST_INT_STATUS and/or UP_LD_HOST_INT_STATUS
873 		 * For SDIO new mode CMD port interrupts
874 		 *	DN_LD_CMD_PORT_HOST_INT_STATUS and/or
875 		 *	UP_LD_CMD_PORT_HOST_INT_STATUS
876 		 * Clear the interrupt status register
877 		 */
878 		mwifiex_dbg(adapter, INTR,
879 			    "int: sdio_ireg = %#x\n", sdio_ireg);
880 		spin_lock_irqsave(&adapter->int_lock, flags);
881 		adapter->int_status |= sdio_ireg;
882 		spin_unlock_irqrestore(&adapter->int_lock, flags);
883 	}
884 }
885 
886 /*
887  * SDIO interrupt handler.
888  *
889  * This function reads the interrupt status from firmware and handles
890  * the interrupt in current thread (ksdioirqd) right away.
891  */
892 static void
893 mwifiex_sdio_interrupt(struct sdio_func *func)
894 {
895 	struct mwifiex_adapter *adapter;
896 	struct sdio_mmc_card *card;
897 
898 	card = sdio_get_drvdata(func);
899 	if (!card || !card->adapter) {
900 		pr_err("int: func=%p card=%p adapter=%p\n",
901 		       func, card, card ? card->adapter : NULL);
902 		return;
903 	}
904 	adapter = card->adapter;
905 
906 	if (!adapter->pps_uapsd_mode && adapter->ps_state == PS_STATE_SLEEP)
907 		adapter->ps_state = PS_STATE_AWAKE;
908 
909 	mwifiex_interrupt_status(adapter);
910 	mwifiex_main_process(adapter);
911 }
912 
913 /*
914  * This function enables the host interrupt.
915  *
916  * The host interrupt enable mask is written to the card
917  * host interrupt mask register.
918  */
919 static int mwifiex_sdio_enable_host_int(struct mwifiex_adapter *adapter)
920 {
921 	struct sdio_mmc_card *card = adapter->card;
922 	struct sdio_func *func = card->func;
923 	int ret;
924 
925 	sdio_claim_host(func);
926 
927 	/* Request the SDIO IRQ */
928 	ret = sdio_claim_irq(func, mwifiex_sdio_interrupt);
929 	if (ret) {
930 		mwifiex_dbg(adapter, ERROR,
931 			    "claim irq failed: ret=%d\n", ret);
932 		goto out;
933 	}
934 
935 	/* Simply write the mask to the register */
936 	ret = mwifiex_write_reg_locked(func, card->reg->host_int_mask_reg,
937 				       card->reg->host_int_enable);
938 	if (ret) {
939 		mwifiex_dbg(adapter, ERROR,
940 			    "enable host interrupt failed\n");
941 		sdio_release_irq(func);
942 	}
943 
944 out:
945 	sdio_release_host(func);
946 	return ret;
947 }
948 
949 /*
950  * This function sends a data buffer to the card.
951  */
952 static int mwifiex_sdio_card_to_host(struct mwifiex_adapter *adapter,
953 				     u32 *type, u8 *buffer,
954 				     u32 npayload, u32 ioport)
955 {
956 	int ret;
957 	u32 nb;
958 
959 	if (!buffer) {
960 		mwifiex_dbg(adapter, ERROR,
961 			    "%s: buffer is NULL\n", __func__);
962 		return -1;
963 	}
964 
965 	ret = mwifiex_read_data_sync(adapter, buffer, npayload, ioport, 1);
966 
967 	if (ret) {
968 		mwifiex_dbg(adapter, ERROR,
969 			    "%s: read iomem failed: %d\n", __func__,
970 			ret);
971 		return -1;
972 	}
973 
974 	nb = le16_to_cpu(*(__le16 *) (buffer));
975 	if (nb > npayload) {
976 		mwifiex_dbg(adapter, ERROR,
977 			    "%s: invalid packet, nb=%d npayload=%d\n",
978 			    __func__, nb, npayload);
979 		return -1;
980 	}
981 
982 	*type = le16_to_cpu(*(__le16 *) (buffer + 2));
983 
984 	return ret;
985 }
986 
987 /*
988  * This function downloads the firmware to the card.
989  *
990  * Firmware is downloaded to the card in blocks. Every block download
991  * is tested for CRC errors, and retried a number of times before
992  * returning failure.
993  */
994 static int mwifiex_prog_fw_w_helper(struct mwifiex_adapter *adapter,
995 				    struct mwifiex_fw_image *fw)
996 {
997 	struct sdio_mmc_card *card = adapter->card;
998 	const struct mwifiex_sdio_card_reg *reg = card->reg;
999 	int ret;
1000 	u8 *firmware = fw->fw_buf;
1001 	u32 firmware_len = fw->fw_len;
1002 	u32 offset = 0;
1003 	u8 base0, base1;
1004 	u8 *fwbuf;
1005 	u16 len = 0;
1006 	u32 txlen, tx_blocks = 0, tries;
1007 	u32 i = 0;
1008 
1009 	if (!firmware_len) {
1010 		mwifiex_dbg(adapter, ERROR,
1011 			    "firmware image not found! Terminating download\n");
1012 		return -1;
1013 	}
1014 
1015 	mwifiex_dbg(adapter, INFO,
1016 		    "info: downloading FW image (%d bytes)\n",
1017 		    firmware_len);
1018 
1019 	/* Assume that the allocated buffer is 8-byte aligned */
1020 	fwbuf = kzalloc(MWIFIEX_UPLD_SIZE, GFP_KERNEL);
1021 	if (!fwbuf)
1022 		return -ENOMEM;
1023 
1024 	sdio_claim_host(card->func);
1025 
1026 	/* Perform firmware data transfer */
1027 	do {
1028 		/* The host polls for the DN_LD_CARD_RDY and CARD_IO_READY
1029 		   bits */
1030 		ret = mwifiex_sdio_poll_card_status(adapter, CARD_IO_READY |
1031 						    DN_LD_CARD_RDY);
1032 		if (ret) {
1033 			mwifiex_dbg(adapter, ERROR,
1034 				    "FW download with helper:\t"
1035 				    "poll status timeout @ %d\n", offset);
1036 			goto done;
1037 		}
1038 
1039 		/* More data? */
1040 		if (offset >= firmware_len)
1041 			break;
1042 
1043 		for (tries = 0; tries < MAX_POLL_TRIES; tries++) {
1044 			ret = mwifiex_read_reg(adapter, reg->base_0_reg,
1045 					       &base0);
1046 			if (ret) {
1047 				mwifiex_dbg(adapter, ERROR,
1048 					    "dev BASE0 register read failed:\t"
1049 					    "base0=%#04X(%d). Terminating dnld\n",
1050 					    base0, base0);
1051 				goto done;
1052 			}
1053 			ret = mwifiex_read_reg(adapter, reg->base_1_reg,
1054 					       &base1);
1055 			if (ret) {
1056 				mwifiex_dbg(adapter, ERROR,
1057 					    "dev BASE1 register read failed:\t"
1058 					    "base1=%#04X(%d). Terminating dnld\n",
1059 					    base1, base1);
1060 				goto done;
1061 			}
1062 			len = (u16) (((base1 & 0xff) << 8) | (base0 & 0xff));
1063 
1064 			if (len)
1065 				break;
1066 
1067 			usleep_range(10, 20);
1068 		}
1069 
1070 		if (!len) {
1071 			break;
1072 		} else if (len > MWIFIEX_UPLD_SIZE) {
1073 			mwifiex_dbg(adapter, ERROR,
1074 				    "FW dnld failed @ %d, invalid length %d\n",
1075 				    offset, len);
1076 			ret = -1;
1077 			goto done;
1078 		}
1079 
1080 		txlen = len;
1081 
1082 		if (len & BIT(0)) {
1083 			i++;
1084 			if (i > MAX_WRITE_IOMEM_RETRY) {
1085 				mwifiex_dbg(adapter, ERROR,
1086 					    "FW dnld failed @ %d, over max retry\n",
1087 					    offset);
1088 				ret = -1;
1089 				goto done;
1090 			}
1091 			mwifiex_dbg(adapter, ERROR,
1092 				    "CRC indicated by the helper:\t"
1093 				    "len = 0x%04X, txlen = %d\n", len, txlen);
1094 			len &= ~BIT(0);
1095 			/* Setting this to 0 to resend from same offset */
1096 			txlen = 0;
1097 		} else {
1098 			i = 0;
1099 
1100 			/* Set blocksize to transfer - checking for last
1101 			   block */
1102 			if (firmware_len - offset < txlen)
1103 				txlen = firmware_len - offset;
1104 
1105 			tx_blocks = (txlen + MWIFIEX_SDIO_BLOCK_SIZE - 1)
1106 				    / MWIFIEX_SDIO_BLOCK_SIZE;
1107 
1108 			/* Copy payload to buffer */
1109 			memmove(fwbuf, &firmware[offset], txlen);
1110 		}
1111 
1112 		ret = mwifiex_write_data_sync(adapter, fwbuf, tx_blocks *
1113 					      MWIFIEX_SDIO_BLOCK_SIZE,
1114 					      adapter->ioport);
1115 		if (ret) {
1116 			mwifiex_dbg(adapter, ERROR,
1117 				    "FW download, write iomem (%d) failed @ %d\n",
1118 				    i, offset);
1119 			if (mwifiex_write_reg(adapter, CONFIGURATION_REG, 0x04))
1120 				mwifiex_dbg(adapter, ERROR,
1121 					    "write CFG reg failed\n");
1122 
1123 			ret = -1;
1124 			goto done;
1125 		}
1126 
1127 		offset += txlen;
1128 	} while (true);
1129 
1130 	mwifiex_dbg(adapter, MSG,
1131 		    "info: FW download over, size %d bytes\n", offset);
1132 
1133 	ret = 0;
1134 done:
1135 	sdio_release_host(card->func);
1136 	kfree(fwbuf);
1137 	return ret;
1138 }
1139 
1140 /*
1141  * This function checks the firmware status in card.
1142  */
1143 static int mwifiex_check_fw_status(struct mwifiex_adapter *adapter,
1144 				   u32 poll_num)
1145 {
1146 	int ret = 0;
1147 	u16 firmware_stat;
1148 	u32 tries;
1149 
1150 	for (tries = 0; tries < poll_num; tries++) {
1151 		ret = mwifiex_sdio_read_fw_status(adapter, &firmware_stat);
1152 		if (ret)
1153 			continue;
1154 		if (firmware_stat == FIRMWARE_READY_SDIO) {
1155 			ret = 0;
1156 			break;
1157 		} else {
1158 			msleep(100);
1159 			ret = -1;
1160 		}
1161 	}
1162 
1163 	return ret;
1164 }
1165 
1166 /* This function checks if WLAN is the winner.
1167  */
1168 static int mwifiex_check_winner_status(struct mwifiex_adapter *adapter)
1169 {
1170 	int ret = 0;
1171 	u8 winner = 0;
1172 	struct sdio_mmc_card *card = adapter->card;
1173 
1174 	if (mwifiex_read_reg(adapter, card->reg->status_reg_0, &winner))
1175 		return -1;
1176 
1177 	if (winner)
1178 		adapter->winner = 0;
1179 	else
1180 		adapter->winner = 1;
1181 
1182 	return ret;
1183 }
1184 
1185 /*
1186  * This function decode sdio aggreation pkt.
1187  *
1188  * Based on the the data block size and pkt_len,
1189  * skb data will be decoded to few packets.
1190  */
1191 static void mwifiex_deaggr_sdio_pkt(struct mwifiex_adapter *adapter,
1192 				    struct sk_buff *skb)
1193 {
1194 	u32 total_pkt_len, pkt_len;
1195 	struct sk_buff *skb_deaggr;
1196 	u32 pkt_type;
1197 	u16 blk_size;
1198 	u8 blk_num;
1199 	u8 *data;
1200 
1201 	data = skb->data;
1202 	total_pkt_len = skb->len;
1203 
1204 	while (total_pkt_len >= (SDIO_HEADER_OFFSET + INTF_HEADER_LEN)) {
1205 		if (total_pkt_len < adapter->sdio_rx_block_size)
1206 			break;
1207 		blk_num = *(data + BLOCK_NUMBER_OFFSET);
1208 		blk_size = adapter->sdio_rx_block_size * blk_num;
1209 		if (blk_size > total_pkt_len) {
1210 			mwifiex_dbg(adapter, ERROR,
1211 				    "%s: error in blk_size,\t"
1212 				    "blk_num=%d, blk_size=%d, total_pkt_len=%d\n",
1213 				    __func__, blk_num, blk_size, total_pkt_len);
1214 			break;
1215 		}
1216 		pkt_len = le16_to_cpu(*(__le16 *)(data + SDIO_HEADER_OFFSET));
1217 		pkt_type = le16_to_cpu(*(__le16 *)(data + SDIO_HEADER_OFFSET +
1218 					 2));
1219 		if ((pkt_len + SDIO_HEADER_OFFSET) > blk_size) {
1220 			mwifiex_dbg(adapter, ERROR,
1221 				    "%s: error in pkt_len,\t"
1222 				    "pkt_len=%d, blk_size=%d\n",
1223 				    __func__, pkt_len, blk_size);
1224 			break;
1225 		}
1226 
1227 		skb_deaggr = mwifiex_alloc_dma_align_buf(pkt_len, GFP_KERNEL);
1228 		if (!skb_deaggr)
1229 			break;
1230 		skb_put(skb_deaggr, pkt_len);
1231 		memcpy(skb_deaggr->data, data + SDIO_HEADER_OFFSET, pkt_len);
1232 		skb_pull(skb_deaggr, INTF_HEADER_LEN);
1233 
1234 		mwifiex_handle_rx_packet(adapter, skb_deaggr);
1235 		data += blk_size;
1236 		total_pkt_len -= blk_size;
1237 	}
1238 }
1239 
1240 /*
1241  * This function decodes a received packet.
1242  *
1243  * Based on the type, the packet is treated as either a data, or
1244  * a command response, or an event, and the correct handler
1245  * function is invoked.
1246  */
1247 static int mwifiex_decode_rx_packet(struct mwifiex_adapter *adapter,
1248 				    struct sk_buff *skb, u32 upld_typ)
1249 {
1250 	u8 *cmd_buf;
1251 	__le16 *curr_ptr = (__le16 *)skb->data;
1252 	u16 pkt_len = le16_to_cpu(*curr_ptr);
1253 	struct mwifiex_rxinfo *rx_info;
1254 
1255 	if (upld_typ != MWIFIEX_TYPE_AGGR_DATA) {
1256 		skb_trim(skb, pkt_len);
1257 		skb_pull(skb, INTF_HEADER_LEN);
1258 	}
1259 
1260 	switch (upld_typ) {
1261 	case MWIFIEX_TYPE_AGGR_DATA:
1262 		mwifiex_dbg(adapter, INFO,
1263 			    "info: --- Rx: Aggr Data packet ---\n");
1264 		rx_info = MWIFIEX_SKB_RXCB(skb);
1265 		rx_info->buf_type = MWIFIEX_TYPE_AGGR_DATA;
1266 		if (adapter->rx_work_enabled) {
1267 			skb_queue_tail(&adapter->rx_data_q, skb);
1268 			atomic_inc(&adapter->rx_pending);
1269 			adapter->data_received = true;
1270 		} else {
1271 			mwifiex_deaggr_sdio_pkt(adapter, skb);
1272 			dev_kfree_skb_any(skb);
1273 		}
1274 		break;
1275 
1276 	case MWIFIEX_TYPE_DATA:
1277 		mwifiex_dbg(adapter, DATA,
1278 			    "info: --- Rx: Data packet ---\n");
1279 		if (adapter->rx_work_enabled) {
1280 			skb_queue_tail(&adapter->rx_data_q, skb);
1281 			adapter->data_received = true;
1282 			atomic_inc(&adapter->rx_pending);
1283 		} else {
1284 			mwifiex_handle_rx_packet(adapter, skb);
1285 		}
1286 		break;
1287 
1288 	case MWIFIEX_TYPE_CMD:
1289 		mwifiex_dbg(adapter, CMD,
1290 			    "info: --- Rx: Cmd Response ---\n");
1291 		/* take care of curr_cmd = NULL case */
1292 		if (!adapter->curr_cmd) {
1293 			cmd_buf = adapter->upld_buf;
1294 
1295 			if (adapter->ps_state == PS_STATE_SLEEP_CFM)
1296 				mwifiex_process_sleep_confirm_resp(adapter,
1297 								   skb->data,
1298 								   skb->len);
1299 
1300 			memcpy(cmd_buf, skb->data,
1301 			       min_t(u32, MWIFIEX_SIZE_OF_CMD_BUFFER,
1302 				     skb->len));
1303 
1304 			dev_kfree_skb_any(skb);
1305 		} else {
1306 			adapter->cmd_resp_received = true;
1307 			adapter->curr_cmd->resp_skb = skb;
1308 		}
1309 		break;
1310 
1311 	case MWIFIEX_TYPE_EVENT:
1312 		mwifiex_dbg(adapter, EVENT,
1313 			    "info: --- Rx: Event ---\n");
1314 		adapter->event_cause = le32_to_cpu(*(__le32 *) skb->data);
1315 
1316 		if ((skb->len > 0) && (skb->len  < MAX_EVENT_SIZE))
1317 			memcpy(adapter->event_body,
1318 			       skb->data + MWIFIEX_EVENT_HEADER_LEN,
1319 			       skb->len);
1320 
1321 		/* event cause has been saved to adapter->event_cause */
1322 		adapter->event_received = true;
1323 		adapter->event_skb = skb;
1324 
1325 		break;
1326 
1327 	default:
1328 		mwifiex_dbg(adapter, ERROR,
1329 			    "unknown upload type %#x\n", upld_typ);
1330 		dev_kfree_skb_any(skb);
1331 		break;
1332 	}
1333 
1334 	return 0;
1335 }
1336 
1337 /*
1338  * This function transfers received packets from card to driver, performing
1339  * aggregation if required.
1340  *
1341  * For data received on control port, or if aggregation is disabled, the
1342  * received buffers are uploaded as separate packets. However, if aggregation
1343  * is enabled and required, the buffers are copied onto an aggregation buffer,
1344  * provided there is space left, processed and finally uploaded.
1345  */
1346 static int mwifiex_sdio_card_to_host_mp_aggr(struct mwifiex_adapter *adapter,
1347 					     u16 rx_len, u8 port)
1348 {
1349 	struct sdio_mmc_card *card = adapter->card;
1350 	s32 f_do_rx_aggr = 0;
1351 	s32 f_do_rx_cur = 0;
1352 	s32 f_aggr_cur = 0;
1353 	s32 f_post_aggr_cur = 0;
1354 	struct sk_buff *skb_deaggr;
1355 	struct sk_buff *skb = NULL;
1356 	u32 pkt_len, pkt_type, mport, pind;
1357 	u8 *curr_ptr;
1358 
1359 	if ((card->has_control_mask) && (port == CTRL_PORT)) {
1360 		/* Read the command Resp without aggr */
1361 		mwifiex_dbg(adapter, CMD,
1362 			    "info: %s: no aggregation for cmd\t"
1363 			    "response\n", __func__);
1364 
1365 		f_do_rx_cur = 1;
1366 		goto rx_curr_single;
1367 	}
1368 
1369 	if (!card->mpa_rx.enabled) {
1370 		mwifiex_dbg(adapter, WARN,
1371 			    "info: %s: rx aggregation disabled\n",
1372 			    __func__);
1373 
1374 		f_do_rx_cur = 1;
1375 		goto rx_curr_single;
1376 	}
1377 
1378 	if ((!card->has_control_mask && (card->mp_rd_bitmap &
1379 					 card->reg->data_port_mask)) ||
1380 	    (card->has_control_mask && (card->mp_rd_bitmap &
1381 					(~((u32) CTRL_PORT_MASK))))) {
1382 		/* Some more data RX pending */
1383 		mwifiex_dbg(adapter, INFO,
1384 			    "info: %s: not last packet\n", __func__);
1385 
1386 		if (MP_RX_AGGR_IN_PROGRESS(card)) {
1387 			if (MP_RX_AGGR_BUF_HAS_ROOM(card, rx_len)) {
1388 				f_aggr_cur = 1;
1389 			} else {
1390 				/* No room in Aggr buf, do rx aggr now */
1391 				f_do_rx_aggr = 1;
1392 				f_post_aggr_cur = 1;
1393 			}
1394 		} else {
1395 			/* Rx aggr not in progress */
1396 			f_aggr_cur = 1;
1397 		}
1398 
1399 	} else {
1400 		/* No more data RX pending */
1401 		mwifiex_dbg(adapter, INFO,
1402 			    "info: %s: last packet\n", __func__);
1403 
1404 		if (MP_RX_AGGR_IN_PROGRESS(card)) {
1405 			f_do_rx_aggr = 1;
1406 			if (MP_RX_AGGR_BUF_HAS_ROOM(card, rx_len))
1407 				f_aggr_cur = 1;
1408 			else
1409 				/* No room in Aggr buf, do rx aggr now */
1410 				f_do_rx_cur = 1;
1411 		} else {
1412 			f_do_rx_cur = 1;
1413 		}
1414 	}
1415 
1416 	if (f_aggr_cur) {
1417 		mwifiex_dbg(adapter, INFO,
1418 			    "info: current packet aggregation\n");
1419 		/* Curr pkt can be aggregated */
1420 		mp_rx_aggr_setup(card, rx_len, port);
1421 
1422 		if (MP_RX_AGGR_PKT_LIMIT_REACHED(card) ||
1423 		    mp_rx_aggr_port_limit_reached(card)) {
1424 			mwifiex_dbg(adapter, INFO,
1425 				    "info: %s: aggregated packet\t"
1426 				    "limit reached\n", __func__);
1427 			/* No more pkts allowed in Aggr buf, rx it */
1428 			f_do_rx_aggr = 1;
1429 		}
1430 	}
1431 
1432 	if (f_do_rx_aggr) {
1433 		/* do aggr RX now */
1434 		mwifiex_dbg(adapter, DATA,
1435 			    "info: do_rx_aggr: num of packets: %d\n",
1436 			    card->mpa_rx.pkt_cnt);
1437 
1438 		if (card->supports_sdio_new_mode) {
1439 			int i;
1440 			u32 port_count;
1441 
1442 			for (i = 0, port_count = 0; i < card->max_ports; i++)
1443 				if (card->mpa_rx.ports & BIT(i))
1444 					port_count++;
1445 
1446 			/* Reading data from "start_port + 0" to "start_port +
1447 			 * port_count -1", so decrease the count by 1
1448 			 */
1449 			port_count--;
1450 			mport = (adapter->ioport | SDIO_MPA_ADDR_BASE |
1451 				 (port_count << 8)) + card->mpa_rx.start_port;
1452 		} else {
1453 			mport = (adapter->ioport | SDIO_MPA_ADDR_BASE |
1454 				 (card->mpa_rx.ports << 4)) +
1455 				 card->mpa_rx.start_port;
1456 		}
1457 
1458 		if (card->mpa_rx.pkt_cnt == 1)
1459 			mport = adapter->ioport + port;
1460 
1461 		if (mwifiex_read_data_sync(adapter, card->mpa_rx.buf,
1462 					   card->mpa_rx.buf_len, mport, 1))
1463 			goto error;
1464 
1465 		curr_ptr = card->mpa_rx.buf;
1466 
1467 		for (pind = 0; pind < card->mpa_rx.pkt_cnt; pind++) {
1468 			u32 *len_arr = card->mpa_rx.len_arr;
1469 
1470 			/* get curr PKT len & type */
1471 			pkt_len = le16_to_cpu(*(__le16 *) &curr_ptr[0]);
1472 			pkt_type = le16_to_cpu(*(__le16 *) &curr_ptr[2]);
1473 
1474 			/* copy pkt to deaggr buf */
1475 			skb_deaggr = mwifiex_alloc_dma_align_buf(len_arr[pind],
1476 								 GFP_KERNEL);
1477 			if (!skb_deaggr) {
1478 				mwifiex_dbg(adapter, ERROR, "skb allocation failure\t"
1479 					    "drop pkt len=%d type=%d\n",
1480 					    pkt_len, pkt_type);
1481 				curr_ptr += len_arr[pind];
1482 				continue;
1483 			}
1484 
1485 			skb_put(skb_deaggr, len_arr[pind]);
1486 
1487 			if ((pkt_type == MWIFIEX_TYPE_DATA ||
1488 			     (pkt_type == MWIFIEX_TYPE_AGGR_DATA &&
1489 			      adapter->sdio_rx_aggr_enable)) &&
1490 			    (pkt_len <= len_arr[pind])) {
1491 
1492 				memcpy(skb_deaggr->data, curr_ptr, pkt_len);
1493 
1494 				skb_trim(skb_deaggr, pkt_len);
1495 
1496 				/* Process de-aggr packet */
1497 				mwifiex_decode_rx_packet(adapter, skb_deaggr,
1498 							 pkt_type);
1499 			} else {
1500 				mwifiex_dbg(adapter, ERROR,
1501 					    "drop wrong aggr pkt:\t"
1502 					    "sdio_single_port_rx_aggr=%d\t"
1503 					    "type=%d len=%d max_len=%d\n",
1504 					    adapter->sdio_rx_aggr_enable,
1505 					    pkt_type, pkt_len, len_arr[pind]);
1506 				dev_kfree_skb_any(skb_deaggr);
1507 			}
1508 			curr_ptr += len_arr[pind];
1509 		}
1510 		MP_RX_AGGR_BUF_RESET(card);
1511 	}
1512 
1513 rx_curr_single:
1514 	if (f_do_rx_cur) {
1515 		mwifiex_dbg(adapter, INFO, "info: RX: port: %d, rx_len: %d\n",
1516 			    port, rx_len);
1517 
1518 		skb = mwifiex_alloc_dma_align_buf(rx_len, GFP_KERNEL);
1519 		if (!skb) {
1520 			mwifiex_dbg(adapter, ERROR,
1521 				    "single skb allocated fail,\t"
1522 				    "drop pkt port=%d len=%d\n", port, rx_len);
1523 			if (mwifiex_sdio_card_to_host(adapter, &pkt_type,
1524 						      card->mpa_rx.buf, rx_len,
1525 						      adapter->ioport + port))
1526 				goto error;
1527 			return 0;
1528 		}
1529 
1530 		skb_put(skb, rx_len);
1531 
1532 		if (mwifiex_sdio_card_to_host(adapter, &pkt_type,
1533 					      skb->data, skb->len,
1534 					      adapter->ioport + port))
1535 			goto error;
1536 		if (!adapter->sdio_rx_aggr_enable &&
1537 		    pkt_type == MWIFIEX_TYPE_AGGR_DATA) {
1538 			mwifiex_dbg(adapter, ERROR, "drop wrong pkt type %d\t"
1539 				    "current SDIO RX Aggr not enabled\n",
1540 				    pkt_type);
1541 			dev_kfree_skb_any(skb);
1542 			return 0;
1543 		}
1544 
1545 		mwifiex_decode_rx_packet(adapter, skb, pkt_type);
1546 	}
1547 	if (f_post_aggr_cur) {
1548 		mwifiex_dbg(adapter, INFO,
1549 			    "info: current packet aggregation\n");
1550 		/* Curr pkt can be aggregated */
1551 		mp_rx_aggr_setup(card, rx_len, port);
1552 	}
1553 
1554 	return 0;
1555 error:
1556 	if (MP_RX_AGGR_IN_PROGRESS(card))
1557 		MP_RX_AGGR_BUF_RESET(card);
1558 
1559 	if (f_do_rx_cur && skb)
1560 		/* Single transfer pending. Free curr buff also */
1561 		dev_kfree_skb_any(skb);
1562 
1563 	return -1;
1564 }
1565 
1566 /*
1567  * This function checks the current interrupt status.
1568  *
1569  * The following interrupts are checked and handled by this function -
1570  *      - Data sent
1571  *      - Command sent
1572  *      - Packets received
1573  *
1574  * Since the firmware does not generate download ready interrupt if the
1575  * port updated is command port only, command sent interrupt checking
1576  * should be done manually, and for every SDIO interrupt.
1577  *
1578  * In case of Rx packets received, the packets are uploaded from card to
1579  * host and processed accordingly.
1580  */
1581 static int mwifiex_process_int_status(struct mwifiex_adapter *adapter)
1582 {
1583 	struct sdio_mmc_card *card = adapter->card;
1584 	const struct mwifiex_sdio_card_reg *reg = card->reg;
1585 	int ret = 0;
1586 	u8 sdio_ireg;
1587 	struct sk_buff *skb;
1588 	u8 port = CTRL_PORT;
1589 	u32 len_reg_l, len_reg_u;
1590 	u32 rx_blocks;
1591 	u16 rx_len;
1592 	unsigned long flags;
1593 	u32 bitmap;
1594 	u8 cr;
1595 
1596 	spin_lock_irqsave(&adapter->int_lock, flags);
1597 	sdio_ireg = adapter->int_status;
1598 	adapter->int_status = 0;
1599 	spin_unlock_irqrestore(&adapter->int_lock, flags);
1600 
1601 	if (!sdio_ireg)
1602 		return ret;
1603 
1604 	/* Following interrupt is only for SDIO new mode */
1605 	if (sdio_ireg & DN_LD_CMD_PORT_HOST_INT_STATUS && adapter->cmd_sent)
1606 		adapter->cmd_sent = false;
1607 
1608 	/* Following interrupt is only for SDIO new mode */
1609 	if (sdio_ireg & UP_LD_CMD_PORT_HOST_INT_STATUS) {
1610 		u32 pkt_type;
1611 
1612 		/* read the len of control packet */
1613 		rx_len = card->mp_regs[reg->cmd_rd_len_1] << 8;
1614 		rx_len |= (u16)card->mp_regs[reg->cmd_rd_len_0];
1615 		rx_blocks = DIV_ROUND_UP(rx_len, MWIFIEX_SDIO_BLOCK_SIZE);
1616 		if (rx_len <= INTF_HEADER_LEN ||
1617 		    (rx_blocks * MWIFIEX_SDIO_BLOCK_SIZE) >
1618 		     MWIFIEX_RX_DATA_BUF_SIZE)
1619 			return -1;
1620 		rx_len = (u16) (rx_blocks * MWIFIEX_SDIO_BLOCK_SIZE);
1621 		mwifiex_dbg(adapter, INFO, "info: rx_len = %d\n", rx_len);
1622 
1623 		skb = mwifiex_alloc_dma_align_buf(rx_len, GFP_KERNEL);
1624 		if (!skb)
1625 			return -1;
1626 
1627 		skb_put(skb, rx_len);
1628 
1629 		if (mwifiex_sdio_card_to_host(adapter, &pkt_type, skb->data,
1630 					      skb->len, adapter->ioport |
1631 							CMD_PORT_SLCT)) {
1632 			mwifiex_dbg(adapter, ERROR,
1633 				    "%s: failed to card_to_host", __func__);
1634 			dev_kfree_skb_any(skb);
1635 			goto term_cmd;
1636 		}
1637 
1638 		if ((pkt_type != MWIFIEX_TYPE_CMD) &&
1639 		    (pkt_type != MWIFIEX_TYPE_EVENT))
1640 			mwifiex_dbg(adapter, ERROR,
1641 				    "%s:Received wrong packet on cmd port",
1642 				    __func__);
1643 
1644 		mwifiex_decode_rx_packet(adapter, skb, pkt_type);
1645 	}
1646 
1647 	if (sdio_ireg & DN_LD_HOST_INT_STATUS) {
1648 		bitmap = (u32) card->mp_regs[reg->wr_bitmap_l];
1649 		bitmap |= ((u32) card->mp_regs[reg->wr_bitmap_u]) << 8;
1650 		if (card->supports_sdio_new_mode) {
1651 			bitmap |=
1652 				((u32) card->mp_regs[reg->wr_bitmap_1l]) << 16;
1653 			bitmap |=
1654 				((u32) card->mp_regs[reg->wr_bitmap_1u]) << 24;
1655 		}
1656 		card->mp_wr_bitmap = bitmap;
1657 
1658 		mwifiex_dbg(adapter, INTR,
1659 			    "int: DNLD: wr_bitmap=0x%x\n",
1660 			    card->mp_wr_bitmap);
1661 		if (adapter->data_sent &&
1662 		    (card->mp_wr_bitmap & card->mp_data_port_mask)) {
1663 			mwifiex_dbg(adapter, INTR,
1664 				    "info:  <--- Tx DONE Interrupt --->\n");
1665 			adapter->data_sent = false;
1666 		}
1667 	}
1668 
1669 	/* As firmware will not generate download ready interrupt if the port
1670 	   updated is command port only, cmd_sent should be done for any SDIO
1671 	   interrupt. */
1672 	if (card->has_control_mask && adapter->cmd_sent) {
1673 		/* Check if firmware has attach buffer at command port and
1674 		   update just that in wr_bit_map. */
1675 		card->mp_wr_bitmap |=
1676 			(u32) card->mp_regs[reg->wr_bitmap_l] & CTRL_PORT_MASK;
1677 		if (card->mp_wr_bitmap & CTRL_PORT_MASK)
1678 			adapter->cmd_sent = false;
1679 	}
1680 
1681 	mwifiex_dbg(adapter, INTR, "info: cmd_sent=%d data_sent=%d\n",
1682 		    adapter->cmd_sent, adapter->data_sent);
1683 	if (sdio_ireg & UP_LD_HOST_INT_STATUS) {
1684 		bitmap = (u32) card->mp_regs[reg->rd_bitmap_l];
1685 		bitmap |= ((u32) card->mp_regs[reg->rd_bitmap_u]) << 8;
1686 		if (card->supports_sdio_new_mode) {
1687 			bitmap |=
1688 				((u32) card->mp_regs[reg->rd_bitmap_1l]) << 16;
1689 			bitmap |=
1690 				((u32) card->mp_regs[reg->rd_bitmap_1u]) << 24;
1691 		}
1692 		card->mp_rd_bitmap = bitmap;
1693 		mwifiex_dbg(adapter, INTR,
1694 			    "int: UPLD: rd_bitmap=0x%x\n",
1695 			    card->mp_rd_bitmap);
1696 
1697 		while (true) {
1698 			ret = mwifiex_get_rd_port(adapter, &port);
1699 			if (ret) {
1700 				mwifiex_dbg(adapter, INFO,
1701 					    "info: no more rd_port available\n");
1702 				break;
1703 			}
1704 			len_reg_l = reg->rd_len_p0_l + (port << 1);
1705 			len_reg_u = reg->rd_len_p0_u + (port << 1);
1706 			rx_len = ((u16) card->mp_regs[len_reg_u]) << 8;
1707 			rx_len |= (u16) card->mp_regs[len_reg_l];
1708 			mwifiex_dbg(adapter, INFO,
1709 				    "info: RX: port=%d rx_len=%u\n",
1710 				    port, rx_len);
1711 			rx_blocks =
1712 				(rx_len + MWIFIEX_SDIO_BLOCK_SIZE -
1713 				 1) / MWIFIEX_SDIO_BLOCK_SIZE;
1714 			if (rx_len <= INTF_HEADER_LEN ||
1715 			    (card->mpa_rx.enabled &&
1716 			     ((rx_blocks * MWIFIEX_SDIO_BLOCK_SIZE) >
1717 			      card->mpa_rx.buf_size))) {
1718 				mwifiex_dbg(adapter, ERROR,
1719 					    "invalid rx_len=%d\n",
1720 					    rx_len);
1721 				return -1;
1722 			}
1723 
1724 			rx_len = (u16) (rx_blocks * MWIFIEX_SDIO_BLOCK_SIZE);
1725 			mwifiex_dbg(adapter, INFO, "info: rx_len = %d\n",
1726 				    rx_len);
1727 
1728 			if (mwifiex_sdio_card_to_host_mp_aggr(adapter, rx_len,
1729 							      port)) {
1730 				mwifiex_dbg(adapter, ERROR,
1731 					    "card_to_host_mpa failed: int status=%#x\n",
1732 					    sdio_ireg);
1733 				goto term_cmd;
1734 			}
1735 		}
1736 	}
1737 
1738 	return 0;
1739 
1740 term_cmd:
1741 	/* terminate cmd */
1742 	if (mwifiex_read_reg(adapter, CONFIGURATION_REG, &cr))
1743 		mwifiex_dbg(adapter, ERROR, "read CFG reg failed\n");
1744 	else
1745 		mwifiex_dbg(adapter, INFO,
1746 			    "info: CFG reg val = %d\n", cr);
1747 
1748 	if (mwifiex_write_reg(adapter, CONFIGURATION_REG, (cr | 0x04)))
1749 		mwifiex_dbg(adapter, ERROR,
1750 			    "write CFG reg failed\n");
1751 	else
1752 		mwifiex_dbg(adapter, INFO, "info: write success\n");
1753 
1754 	if (mwifiex_read_reg(adapter, CONFIGURATION_REG, &cr))
1755 		mwifiex_dbg(adapter, ERROR,
1756 			    "read CFG reg failed\n");
1757 	else
1758 		mwifiex_dbg(adapter, INFO,
1759 			    "info: CFG reg val =%x\n", cr);
1760 
1761 	return -1;
1762 }
1763 
1764 /*
1765  * This function aggregates transmission buffers in driver and downloads
1766  * the aggregated packet to card.
1767  *
1768  * The individual packets are aggregated by copying into an aggregation
1769  * buffer and then downloaded to the card. Previous unsent packets in the
1770  * aggregation buffer are pre-copied first before new packets are added.
1771  * Aggregation is done till there is space left in the aggregation buffer,
1772  * or till new packets are available.
1773  *
1774  * The function will only download the packet to the card when aggregation
1775  * stops, otherwise it will just aggregate the packet in aggregation buffer
1776  * and return.
1777  */
1778 static int mwifiex_host_to_card_mp_aggr(struct mwifiex_adapter *adapter,
1779 					u8 *payload, u32 pkt_len, u32 port,
1780 					u32 next_pkt_len)
1781 {
1782 	struct sdio_mmc_card *card = adapter->card;
1783 	int ret = 0;
1784 	s32 f_send_aggr_buf = 0;
1785 	s32 f_send_cur_buf = 0;
1786 	s32 f_precopy_cur_buf = 0;
1787 	s32 f_postcopy_cur_buf = 0;
1788 	u32 mport;
1789 	int index;
1790 
1791 	if (!card->mpa_tx.enabled ||
1792 	    (card->has_control_mask && (port == CTRL_PORT)) ||
1793 	    (card->supports_sdio_new_mode && (port == CMD_PORT_SLCT))) {
1794 		mwifiex_dbg(adapter, WARN,
1795 			    "info: %s: tx aggregation disabled\n",
1796 			    __func__);
1797 
1798 		f_send_cur_buf = 1;
1799 		goto tx_curr_single;
1800 	}
1801 
1802 	if (next_pkt_len) {
1803 		/* More pkt in TX queue */
1804 		mwifiex_dbg(adapter, INFO,
1805 			    "info: %s: more packets in queue.\n",
1806 			    __func__);
1807 
1808 		if (MP_TX_AGGR_IN_PROGRESS(card)) {
1809 			if (MP_TX_AGGR_BUF_HAS_ROOM(card, pkt_len)) {
1810 				f_precopy_cur_buf = 1;
1811 
1812 				if (!(card->mp_wr_bitmap &
1813 				      (1 << card->curr_wr_port)) ||
1814 				    !MP_TX_AGGR_BUF_HAS_ROOM(
1815 					    card, pkt_len + next_pkt_len))
1816 					f_send_aggr_buf = 1;
1817 			} else {
1818 				/* No room in Aggr buf, send it */
1819 				f_send_aggr_buf = 1;
1820 
1821 				if (!(card->mp_wr_bitmap &
1822 				      (1 << card->curr_wr_port)))
1823 					f_send_cur_buf = 1;
1824 				else
1825 					f_postcopy_cur_buf = 1;
1826 			}
1827 		} else {
1828 			if (MP_TX_AGGR_BUF_HAS_ROOM(card, pkt_len) &&
1829 			    (card->mp_wr_bitmap & (1 << card->curr_wr_port)))
1830 				f_precopy_cur_buf = 1;
1831 			else
1832 				f_send_cur_buf = 1;
1833 		}
1834 	} else {
1835 		/* Last pkt in TX queue */
1836 		mwifiex_dbg(adapter, INFO,
1837 			    "info: %s: Last packet in Tx Queue.\n",
1838 			    __func__);
1839 
1840 		if (MP_TX_AGGR_IN_PROGRESS(card)) {
1841 			/* some packs in Aggr buf already */
1842 			f_send_aggr_buf = 1;
1843 
1844 			if (MP_TX_AGGR_BUF_HAS_ROOM(card, pkt_len))
1845 				f_precopy_cur_buf = 1;
1846 			else
1847 				/* No room in Aggr buf, send it */
1848 				f_send_cur_buf = 1;
1849 		} else {
1850 			f_send_cur_buf = 1;
1851 		}
1852 	}
1853 
1854 	if (f_precopy_cur_buf) {
1855 		mwifiex_dbg(adapter, DATA,
1856 			    "data: %s: precopy current buffer\n",
1857 			    __func__);
1858 		MP_TX_AGGR_BUF_PUT(card, payload, pkt_len, port);
1859 
1860 		if (MP_TX_AGGR_PKT_LIMIT_REACHED(card) ||
1861 		    mp_tx_aggr_port_limit_reached(card))
1862 			/* No more pkts allowed in Aggr buf, send it */
1863 			f_send_aggr_buf = 1;
1864 	}
1865 
1866 	if (f_send_aggr_buf) {
1867 		mwifiex_dbg(adapter, DATA,
1868 			    "data: %s: send aggr buffer: %d %d\n",
1869 			    __func__, card->mpa_tx.start_port,
1870 			    card->mpa_tx.ports);
1871 		if (card->supports_sdio_new_mode) {
1872 			u32 port_count;
1873 			int i;
1874 
1875 			for (i = 0, port_count = 0; i < card->max_ports; i++)
1876 				if (card->mpa_tx.ports & BIT(i))
1877 					port_count++;
1878 
1879 			/* Writing data from "start_port + 0" to "start_port +
1880 			 * port_count -1", so decrease the count by 1
1881 			 */
1882 			port_count--;
1883 			mport = (adapter->ioport | SDIO_MPA_ADDR_BASE |
1884 				 (port_count << 8)) + card->mpa_tx.start_port;
1885 		} else {
1886 			mport = (adapter->ioport | SDIO_MPA_ADDR_BASE |
1887 				 (card->mpa_tx.ports << 4)) +
1888 				 card->mpa_tx.start_port;
1889 		}
1890 
1891 		if (card->mpa_tx.pkt_cnt == 1)
1892 			mport = adapter->ioport + port;
1893 
1894 		ret = mwifiex_write_data_to_card(adapter, card->mpa_tx.buf,
1895 						 card->mpa_tx.buf_len, mport);
1896 
1897 		/* Save the last multi port tx aggreagation info to debug log */
1898 		index = adapter->dbg.last_sdio_mp_index;
1899 		index = (index + 1) % MWIFIEX_DBG_SDIO_MP_NUM;
1900 		adapter->dbg.last_sdio_mp_index = index;
1901 		adapter->dbg.last_mp_wr_ports[index] = mport;
1902 		adapter->dbg.last_mp_wr_bitmap[index] = card->mp_wr_bitmap;
1903 		adapter->dbg.last_mp_wr_len[index] = card->mpa_tx.buf_len;
1904 		adapter->dbg.last_mp_curr_wr_port[index] = card->curr_wr_port;
1905 
1906 		MP_TX_AGGR_BUF_RESET(card);
1907 	}
1908 
1909 tx_curr_single:
1910 	if (f_send_cur_buf) {
1911 		mwifiex_dbg(adapter, DATA,
1912 			    "data: %s: send current buffer %d\n",
1913 			    __func__, port);
1914 		ret = mwifiex_write_data_to_card(adapter, payload, pkt_len,
1915 						 adapter->ioport + port);
1916 	}
1917 
1918 	if (f_postcopy_cur_buf) {
1919 		mwifiex_dbg(adapter, DATA,
1920 			    "data: %s: postcopy current buffer\n",
1921 			    __func__);
1922 		MP_TX_AGGR_BUF_PUT(card, payload, pkt_len, port);
1923 	}
1924 
1925 	return ret;
1926 }
1927 
1928 /*
1929  * This function downloads data from driver to card.
1930  *
1931  * Both commands and data packets are transferred to the card by this
1932  * function.
1933  *
1934  * This function adds the SDIO specific header to the front of the buffer
1935  * before transferring. The header contains the length of the packet and
1936  * the type. The firmware handles the packets based upon this set type.
1937  */
1938 static int mwifiex_sdio_host_to_card(struct mwifiex_adapter *adapter,
1939 				     u8 type, struct sk_buff *skb,
1940 				     struct mwifiex_tx_param *tx_param)
1941 {
1942 	struct sdio_mmc_card *card = adapter->card;
1943 	int ret;
1944 	u32 buf_block_len;
1945 	u32 blk_size;
1946 	u32 port = CTRL_PORT;
1947 	u8 *payload = (u8 *)skb->data;
1948 	u32 pkt_len = skb->len;
1949 
1950 	/* Allocate buffer and copy payload */
1951 	blk_size = MWIFIEX_SDIO_BLOCK_SIZE;
1952 	buf_block_len = (pkt_len + blk_size - 1) / blk_size;
1953 	*(__le16 *)&payload[0] = cpu_to_le16((u16)pkt_len);
1954 	*(__le16 *)&payload[2] = cpu_to_le16(type);
1955 
1956 	/*
1957 	 * This is SDIO specific header
1958 	 *  u16 length,
1959 	 *  u16 type (MWIFIEX_TYPE_DATA = 0, MWIFIEX_TYPE_CMD = 1,
1960 	 *  MWIFIEX_TYPE_EVENT = 3)
1961 	 */
1962 	if (type == MWIFIEX_TYPE_DATA) {
1963 		ret = mwifiex_get_wr_port_data(adapter, &port);
1964 		if (ret) {
1965 			mwifiex_dbg(adapter, ERROR,
1966 				    "%s: no wr_port available\n",
1967 				    __func__);
1968 			return ret;
1969 		}
1970 	} else {
1971 		adapter->cmd_sent = true;
1972 		/* Type must be MWIFIEX_TYPE_CMD */
1973 
1974 		if (pkt_len <= INTF_HEADER_LEN ||
1975 		    pkt_len > MWIFIEX_UPLD_SIZE)
1976 			mwifiex_dbg(adapter, ERROR,
1977 				    "%s: payload=%p, nb=%d\n",
1978 				    __func__, payload, pkt_len);
1979 
1980 		if (card->supports_sdio_new_mode)
1981 			port = CMD_PORT_SLCT;
1982 	}
1983 
1984 	/* Transfer data to card */
1985 	pkt_len = buf_block_len * blk_size;
1986 
1987 	if (tx_param)
1988 		ret = mwifiex_host_to_card_mp_aggr(adapter, payload, pkt_len,
1989 						   port, tx_param->next_pkt_len
1990 						   );
1991 	else
1992 		ret = mwifiex_host_to_card_mp_aggr(adapter, payload, pkt_len,
1993 						   port, 0);
1994 
1995 	if (ret) {
1996 		if (type == MWIFIEX_TYPE_CMD)
1997 			adapter->cmd_sent = false;
1998 		if (type == MWIFIEX_TYPE_DATA) {
1999 			adapter->data_sent = false;
2000 			/* restore curr_wr_port in error cases */
2001 			card->curr_wr_port = port;
2002 			card->mp_wr_bitmap |= (u32)(1 << card->curr_wr_port);
2003 		}
2004 	} else {
2005 		if (type == MWIFIEX_TYPE_DATA) {
2006 			if (!(card->mp_wr_bitmap & (1 << card->curr_wr_port)))
2007 				adapter->data_sent = true;
2008 			else
2009 				adapter->data_sent = false;
2010 		}
2011 	}
2012 
2013 	return ret;
2014 }
2015 
2016 /*
2017  * This function allocates the MPA Tx and Rx buffers.
2018  */
2019 static int mwifiex_alloc_sdio_mpa_buffers(struct mwifiex_adapter *adapter,
2020 				   u32 mpa_tx_buf_size, u32 mpa_rx_buf_size)
2021 {
2022 	struct sdio_mmc_card *card = adapter->card;
2023 	u32 rx_buf_size;
2024 	int ret = 0;
2025 
2026 	card->mpa_tx.buf = kzalloc(mpa_tx_buf_size, GFP_KERNEL);
2027 	if (!card->mpa_tx.buf) {
2028 		ret = -1;
2029 		goto error;
2030 	}
2031 
2032 	card->mpa_tx.buf_size = mpa_tx_buf_size;
2033 
2034 	rx_buf_size = max_t(u32, mpa_rx_buf_size,
2035 			    (u32)SDIO_MAX_AGGR_BUF_SIZE);
2036 	card->mpa_rx.buf = kzalloc(rx_buf_size, GFP_KERNEL);
2037 	if (!card->mpa_rx.buf) {
2038 		ret = -1;
2039 		goto error;
2040 	}
2041 
2042 	card->mpa_rx.buf_size = rx_buf_size;
2043 
2044 error:
2045 	if (ret) {
2046 		kfree(card->mpa_tx.buf);
2047 		kfree(card->mpa_rx.buf);
2048 		card->mpa_tx.buf_size = 0;
2049 		card->mpa_rx.buf_size = 0;
2050 	}
2051 
2052 	return ret;
2053 }
2054 
2055 /*
2056  * This function unregisters the SDIO device.
2057  *
2058  * The SDIO IRQ is released, the function is disabled and driver
2059  * data is set to null.
2060  */
2061 static void
2062 mwifiex_unregister_dev(struct mwifiex_adapter *adapter)
2063 {
2064 	struct sdio_mmc_card *card = adapter->card;
2065 
2066 	if (adapter->card) {
2067 		sdio_claim_host(card->func);
2068 		sdio_disable_func(card->func);
2069 		sdio_release_host(card->func);
2070 	}
2071 }
2072 
2073 /*
2074  * This function registers the SDIO device.
2075  *
2076  * SDIO IRQ is claimed, block size is set and driver data is initialized.
2077  */
2078 static int mwifiex_register_dev(struct mwifiex_adapter *adapter)
2079 {
2080 	int ret;
2081 	struct sdio_mmc_card *card = adapter->card;
2082 	struct sdio_func *func = card->func;
2083 
2084 	/* save adapter pointer in card */
2085 	card->adapter = adapter;
2086 	adapter->tx_buf_size = card->tx_buf_size;
2087 
2088 	sdio_claim_host(func);
2089 
2090 	/* Set block size */
2091 	ret = sdio_set_block_size(card->func, MWIFIEX_SDIO_BLOCK_SIZE);
2092 	sdio_release_host(func);
2093 	if (ret) {
2094 		mwifiex_dbg(adapter, ERROR,
2095 			    "cannot set SDIO block size\n");
2096 		return ret;
2097 	}
2098 
2099 
2100 	adapter->dev = &func->dev;
2101 
2102 	strcpy(adapter->fw_name, card->firmware);
2103 	if (card->fw_dump_enh) {
2104 		adapter->mem_type_mapping_tbl = generic_mem_type_map;
2105 		adapter->num_mem_types = 1;
2106 	} else {
2107 		adapter->mem_type_mapping_tbl = mem_type_mapping_tbl;
2108 		adapter->num_mem_types = ARRAY_SIZE(mem_type_mapping_tbl);
2109 	}
2110 
2111 	return 0;
2112 }
2113 
2114 /*
2115  * This function initializes the SDIO driver.
2116  *
2117  * The following initializations steps are followed -
2118  *      - Read the Host interrupt status register to acknowledge
2119  *        the first interrupt got from bootloader
2120  *      - Disable host interrupt mask register
2121  *      - Get SDIO port
2122  *      - Initialize SDIO variables in card
2123  *      - Allocate MP registers
2124  *      - Allocate MPA Tx and Rx buffers
2125  */
2126 static int mwifiex_init_sdio(struct mwifiex_adapter *adapter)
2127 {
2128 	struct sdio_mmc_card *card = adapter->card;
2129 	const struct mwifiex_sdio_card_reg *reg = card->reg;
2130 	int ret;
2131 	u8 sdio_ireg;
2132 
2133 	sdio_set_drvdata(card->func, card);
2134 
2135 	/*
2136 	 * Read the host_int_status_reg for ACK the first interrupt got
2137 	 * from the bootloader. If we don't do this we get a interrupt
2138 	 * as soon as we register the irq.
2139 	 */
2140 	mwifiex_read_reg(adapter, card->reg->host_int_status_reg, &sdio_ireg);
2141 
2142 	/* Get SDIO ioport */
2143 	mwifiex_init_sdio_ioport(adapter);
2144 
2145 	/* Initialize SDIO variables in card */
2146 	card->mp_rd_bitmap = 0;
2147 	card->mp_wr_bitmap = 0;
2148 	card->curr_rd_port = reg->start_rd_port;
2149 	card->curr_wr_port = reg->start_wr_port;
2150 
2151 	card->mp_data_port_mask = reg->data_port_mask;
2152 
2153 	card->mpa_tx.buf_len = 0;
2154 	card->mpa_tx.pkt_cnt = 0;
2155 	card->mpa_tx.start_port = 0;
2156 
2157 	card->mpa_tx.enabled = 1;
2158 	card->mpa_tx.pkt_aggr_limit = card->mp_agg_pkt_limit;
2159 
2160 	card->mpa_rx.buf_len = 0;
2161 	card->mpa_rx.pkt_cnt = 0;
2162 	card->mpa_rx.start_port = 0;
2163 
2164 	card->mpa_rx.enabled = 1;
2165 	card->mpa_rx.pkt_aggr_limit = card->mp_agg_pkt_limit;
2166 
2167 	/* Allocate buffers for SDIO MP-A */
2168 	card->mp_regs = kzalloc(reg->max_mp_regs, GFP_KERNEL);
2169 	if (!card->mp_regs)
2170 		return -ENOMEM;
2171 
2172 	/* Allocate skb pointer buffers */
2173 	card->mpa_rx.skb_arr = kzalloc((sizeof(void *)) *
2174 				       card->mp_agg_pkt_limit, GFP_KERNEL);
2175 	if (!card->mpa_rx.skb_arr) {
2176 		kfree(card->mp_regs);
2177 		return -ENOMEM;
2178 	}
2179 
2180 	card->mpa_rx.len_arr = kzalloc(sizeof(*card->mpa_rx.len_arr) *
2181 				       card->mp_agg_pkt_limit, GFP_KERNEL);
2182 	if (!card->mpa_rx.len_arr) {
2183 		kfree(card->mp_regs);
2184 		kfree(card->mpa_rx.skb_arr);
2185 		return -ENOMEM;
2186 	}
2187 
2188 	ret = mwifiex_alloc_sdio_mpa_buffers(adapter,
2189 					     card->mp_tx_agg_buf_size,
2190 					     card->mp_rx_agg_buf_size);
2191 
2192 	/* Allocate 32k MPA Tx/Rx buffers if 64k memory allocation fails */
2193 	if (ret && (card->mp_tx_agg_buf_size == MWIFIEX_MP_AGGR_BUF_SIZE_MAX ||
2194 		    card->mp_rx_agg_buf_size == MWIFIEX_MP_AGGR_BUF_SIZE_MAX)) {
2195 		/* Disable rx single port aggregation */
2196 		adapter->host_disable_sdio_rx_aggr = true;
2197 
2198 		ret = mwifiex_alloc_sdio_mpa_buffers
2199 			(adapter, MWIFIEX_MP_AGGR_BUF_SIZE_32K,
2200 			 MWIFIEX_MP_AGGR_BUF_SIZE_32K);
2201 		if (ret) {
2202 			/* Disable multi port aggregation */
2203 			card->mpa_tx.enabled = 0;
2204 			card->mpa_rx.enabled = 0;
2205 		}
2206 	}
2207 
2208 	adapter->auto_tdls = card->can_auto_tdls;
2209 	adapter->ext_scan = card->can_ext_scan;
2210 	return 0;
2211 }
2212 
2213 /*
2214  * This function resets the MPA Tx and Rx buffers.
2215  */
2216 static void mwifiex_cleanup_mpa_buf(struct mwifiex_adapter *adapter)
2217 {
2218 	struct sdio_mmc_card *card = adapter->card;
2219 
2220 	MP_TX_AGGR_BUF_RESET(card);
2221 	MP_RX_AGGR_BUF_RESET(card);
2222 }
2223 
2224 /*
2225  * This function cleans up the allocated card buffers.
2226  *
2227  * The following are freed by this function -
2228  *      - MP registers
2229  *      - MPA Tx buffer
2230  *      - MPA Rx buffer
2231  */
2232 static void mwifiex_cleanup_sdio(struct mwifiex_adapter *adapter)
2233 {
2234 	struct sdio_mmc_card *card = adapter->card;
2235 
2236 	kfree(card->mp_regs);
2237 	kfree(card->mpa_rx.skb_arr);
2238 	kfree(card->mpa_rx.len_arr);
2239 	kfree(card->mpa_tx.buf);
2240 	kfree(card->mpa_rx.buf);
2241 	sdio_set_drvdata(card->func, NULL);
2242 	kfree(card);
2243 }
2244 
2245 /*
2246  * This function updates the MP end port in card.
2247  */
2248 static void
2249 mwifiex_update_mp_end_port(struct mwifiex_adapter *adapter, u16 port)
2250 {
2251 	struct sdio_mmc_card *card = adapter->card;
2252 	const struct mwifiex_sdio_card_reg *reg = card->reg;
2253 	int i;
2254 
2255 	card->mp_end_port = port;
2256 
2257 	card->mp_data_port_mask = reg->data_port_mask;
2258 
2259 	if (reg->start_wr_port) {
2260 		for (i = 1; i <= card->max_ports - card->mp_end_port; i++)
2261 			card->mp_data_port_mask &=
2262 					~(1 << (card->max_ports - i));
2263 	}
2264 
2265 	card->curr_wr_port = reg->start_wr_port;
2266 
2267 	mwifiex_dbg(adapter, CMD,
2268 		    "cmd: mp_end_port %d, data port mask 0x%x\n",
2269 		    port, card->mp_data_port_mask);
2270 }
2271 
2272 static void mwifiex_recreate_adapter(struct sdio_mmc_card *card)
2273 {
2274 	struct sdio_func *func = card->func;
2275 	const struct sdio_device_id *device_id = card->device_id;
2276 
2277 	/* TODO mmc_hw_reset does not require destroying and re-probing the
2278 	 * whole adapter. Hence there was no need to for this rube-goldberg
2279 	 * design to reload the fw from an external workqueue. If we don't
2280 	 * destroy the adapter we could reload the fw from
2281 	 * mwifiex_main_work_queue directly.
2282 	 * The real difficulty with fw reset is to restore all the user
2283 	 * settings applied through ioctl. By destroying and recreating the
2284 	 * adapter, we take the easy way out, since we rely on user space to
2285 	 * restore them. We assume that user space will treat the new
2286 	 * incarnation of the adapter(interfaces) as if they had been just
2287 	 * discovered and initializes them from scratch.
2288 	 */
2289 
2290 	mwifiex_sdio_remove(func);
2291 
2292 	/* power cycle the adapter */
2293 	sdio_claim_host(func);
2294 	mmc_hw_reset(func->card->host);
2295 	sdio_release_host(func);
2296 
2297 	mwifiex_sdio_probe(func, device_id);
2298 }
2299 
2300 static struct mwifiex_adapter *save_adapter;
2301 static void mwifiex_sdio_card_reset_work(struct mwifiex_adapter *adapter)
2302 {
2303 	struct sdio_mmc_card *card = adapter->card;
2304 
2305 	/* TODO card pointer is unprotected. If the adapter is removed
2306 	 * physically, sdio core might trigger mwifiex_sdio_remove, before this
2307 	 * workqueue is run, which will destroy the adapter struct. When this
2308 	 * workqueue eventually exceutes it will dereference an invalid adapter
2309 	 * pointer
2310 	 */
2311 	mwifiex_recreate_adapter(card);
2312 }
2313 
2314 /* This function read/write firmware */
2315 static enum
2316 rdwr_status mwifiex_sdio_rdwr_firmware(struct mwifiex_adapter *adapter,
2317 				       u8 doneflag)
2318 {
2319 	struct sdio_mmc_card *card = adapter->card;
2320 	int ret, tries;
2321 	u8 ctrl_data = 0;
2322 
2323 	sdio_writeb(card->func, card->reg->fw_dump_host_ready,
2324 		    card->reg->fw_dump_ctrl, &ret);
2325 	if (ret) {
2326 		mwifiex_dbg(adapter, ERROR, "SDIO Write ERR\n");
2327 		return RDWR_STATUS_FAILURE;
2328 	}
2329 	for (tries = 0; tries < MAX_POLL_TRIES; tries++) {
2330 		ctrl_data = sdio_readb(card->func, card->reg->fw_dump_ctrl,
2331 				       &ret);
2332 		if (ret) {
2333 			mwifiex_dbg(adapter, ERROR, "SDIO read err\n");
2334 			return RDWR_STATUS_FAILURE;
2335 		}
2336 		if (ctrl_data == FW_DUMP_DONE)
2337 			break;
2338 		if (doneflag && ctrl_data == doneflag)
2339 			return RDWR_STATUS_DONE;
2340 		if (ctrl_data != card->reg->fw_dump_host_ready) {
2341 			mwifiex_dbg(adapter, WARN,
2342 				    "The ctrl reg was changed, re-try again\n");
2343 			sdio_writeb(card->func, card->reg->fw_dump_host_ready,
2344 				    card->reg->fw_dump_ctrl, &ret);
2345 			if (ret) {
2346 				mwifiex_dbg(adapter, ERROR, "SDIO write err\n");
2347 				return RDWR_STATUS_FAILURE;
2348 			}
2349 		}
2350 		usleep_range(100, 200);
2351 	}
2352 	if (ctrl_data == card->reg->fw_dump_host_ready) {
2353 		mwifiex_dbg(adapter, ERROR,
2354 			    "Fail to pull ctrl_data\n");
2355 		return RDWR_STATUS_FAILURE;
2356 	}
2357 
2358 	return RDWR_STATUS_SUCCESS;
2359 }
2360 
2361 /* This function dump firmware memory to file */
2362 static void mwifiex_sdio_fw_dump(struct mwifiex_adapter *adapter)
2363 {
2364 	struct sdio_mmc_card *card = adapter->card;
2365 	int ret = 0;
2366 	unsigned int reg, reg_start, reg_end;
2367 	u8 *dbg_ptr, *end_ptr, dump_num, idx, i, read_reg, doneflag = 0;
2368 	enum rdwr_status stat;
2369 	u32 memory_size;
2370 
2371 	if (!card->can_dump_fw)
2372 		return;
2373 
2374 	for (idx = 0; idx < ARRAY_SIZE(mem_type_mapping_tbl); idx++) {
2375 		struct memory_type_mapping *entry = &mem_type_mapping_tbl[idx];
2376 
2377 		if (entry->mem_ptr) {
2378 			vfree(entry->mem_ptr);
2379 			entry->mem_ptr = NULL;
2380 		}
2381 		entry->mem_size = 0;
2382 	}
2383 
2384 	mwifiex_pm_wakeup_card(adapter);
2385 	sdio_claim_host(card->func);
2386 
2387 	mwifiex_dbg(adapter, MSG, "== mwifiex firmware dump start ==\n");
2388 
2389 	stat = mwifiex_sdio_rdwr_firmware(adapter, doneflag);
2390 	if (stat == RDWR_STATUS_FAILURE)
2391 		goto done;
2392 
2393 	reg = card->reg->fw_dump_start;
2394 	/* Read the number of the memories which will dump */
2395 	dump_num = sdio_readb(card->func, reg, &ret);
2396 	if (ret) {
2397 		mwifiex_dbg(adapter, ERROR, "SDIO read memory length err\n");
2398 		goto done;
2399 	}
2400 
2401 	/* Read the length of every memory which will dump */
2402 	for (idx = 0; idx < dump_num; idx++) {
2403 		struct memory_type_mapping *entry = &mem_type_mapping_tbl[idx];
2404 
2405 		stat = mwifiex_sdio_rdwr_firmware(adapter, doneflag);
2406 		if (stat == RDWR_STATUS_FAILURE)
2407 			goto done;
2408 
2409 		memory_size = 0;
2410 		reg = card->reg->fw_dump_start;
2411 		for (i = 0; i < 4; i++) {
2412 			read_reg = sdio_readb(card->func, reg, &ret);
2413 			if (ret) {
2414 				mwifiex_dbg(adapter, ERROR, "SDIO read err\n");
2415 				goto done;
2416 			}
2417 			memory_size |= (read_reg << i*8);
2418 			reg++;
2419 		}
2420 
2421 		if (memory_size == 0) {
2422 			mwifiex_dbg(adapter, DUMP, "Firmware dump Finished!\n");
2423 			ret = mwifiex_write_reg(adapter,
2424 						card->reg->fw_dump_ctrl,
2425 						FW_DUMP_READ_DONE);
2426 			if (ret) {
2427 				mwifiex_dbg(adapter, ERROR, "SDIO write err\n");
2428 				return;
2429 			}
2430 			break;
2431 		}
2432 
2433 		mwifiex_dbg(adapter, DUMP,
2434 			    "%s_SIZE=0x%x\n", entry->mem_name, memory_size);
2435 		entry->mem_ptr = vmalloc(memory_size + 1);
2436 		entry->mem_size = memory_size;
2437 		if (!entry->mem_ptr) {
2438 			mwifiex_dbg(adapter, ERROR, "Vmalloc %s failed\n",
2439 				    entry->mem_name);
2440 			goto done;
2441 		}
2442 		dbg_ptr = entry->mem_ptr;
2443 		end_ptr = dbg_ptr + memory_size;
2444 
2445 		doneflag = entry->done_flag;
2446 		mwifiex_dbg(adapter, DUMP,
2447 			    "Start %s output, please wait...\n",
2448 			    entry->mem_name);
2449 
2450 		do {
2451 			stat = mwifiex_sdio_rdwr_firmware(adapter, doneflag);
2452 			if (stat == RDWR_STATUS_FAILURE)
2453 				goto done;
2454 
2455 			reg_start = card->reg->fw_dump_start;
2456 			reg_end = card->reg->fw_dump_end;
2457 			for (reg = reg_start; reg <= reg_end; reg++) {
2458 				*dbg_ptr = sdio_readb(card->func, reg, &ret);
2459 				if (ret) {
2460 					mwifiex_dbg(adapter, ERROR,
2461 						    "SDIO read err\n");
2462 					goto done;
2463 				}
2464 				if (dbg_ptr < end_ptr)
2465 					dbg_ptr++;
2466 				else
2467 					mwifiex_dbg(adapter, ERROR,
2468 						    "Allocated buf not enough\n");
2469 			}
2470 
2471 			if (stat != RDWR_STATUS_DONE)
2472 				continue;
2473 
2474 			mwifiex_dbg(adapter, DUMP, "%s done: size=0x%tx\n",
2475 				    entry->mem_name, dbg_ptr - entry->mem_ptr);
2476 			break;
2477 		} while (1);
2478 	}
2479 	mwifiex_dbg(adapter, MSG, "== mwifiex firmware dump end ==\n");
2480 
2481 done:
2482 	sdio_release_host(card->func);
2483 }
2484 
2485 static void mwifiex_sdio_generic_fw_dump(struct mwifiex_adapter *adapter)
2486 {
2487 	struct sdio_mmc_card *card = adapter->card;
2488 	struct memory_type_mapping *entry = &generic_mem_type_map[0];
2489 	unsigned int reg, reg_start, reg_end;
2490 	u8 start_flag = 0, done_flag = 0;
2491 	u8 *dbg_ptr, *end_ptr;
2492 	enum rdwr_status stat;
2493 	int ret = -1, tries;
2494 
2495 	if (!card->fw_dump_enh)
2496 		return;
2497 
2498 	if (entry->mem_ptr) {
2499 		vfree(entry->mem_ptr);
2500 		entry->mem_ptr = NULL;
2501 	}
2502 	entry->mem_size = 0;
2503 
2504 	mwifiex_pm_wakeup_card(adapter);
2505 	sdio_claim_host(card->func);
2506 
2507 	mwifiex_dbg(adapter, MSG, "== mwifiex firmware dump start ==\n");
2508 
2509 	stat = mwifiex_sdio_rdwr_firmware(adapter, done_flag);
2510 	if (stat == RDWR_STATUS_FAILURE)
2511 		goto done;
2512 
2513 	reg_start = card->reg->fw_dump_start;
2514 	reg_end = card->reg->fw_dump_end;
2515 	for (reg = reg_start; reg <= reg_end; reg++) {
2516 		for (tries = 0; tries < MAX_POLL_TRIES; tries++) {
2517 			start_flag = sdio_readb(card->func, reg, &ret);
2518 			if (ret) {
2519 				mwifiex_dbg(adapter, ERROR,
2520 					    "SDIO read err\n");
2521 				goto done;
2522 			}
2523 			if (start_flag == 0)
2524 				break;
2525 			if (tries == MAX_POLL_TRIES) {
2526 				mwifiex_dbg(adapter, ERROR,
2527 					    "FW not ready to dump\n");
2528 				ret = -1;
2529 				goto done;
2530 			}
2531 		}
2532 		usleep_range(100, 200);
2533 	}
2534 
2535 	entry->mem_ptr = vmalloc(0xf0000 + 1);
2536 	if (!entry->mem_ptr) {
2537 		ret = -1;
2538 		goto done;
2539 	}
2540 	dbg_ptr = entry->mem_ptr;
2541 	entry->mem_size = 0xf0000;
2542 	end_ptr = dbg_ptr + entry->mem_size;
2543 
2544 	done_flag = entry->done_flag;
2545 	mwifiex_dbg(adapter, DUMP,
2546 		    "Start %s output, please wait...\n", entry->mem_name);
2547 
2548 	while (true) {
2549 		stat = mwifiex_sdio_rdwr_firmware(adapter, done_flag);
2550 		if (stat == RDWR_STATUS_FAILURE)
2551 			goto done;
2552 		for (reg = reg_start; reg <= reg_end; reg++) {
2553 			*dbg_ptr = sdio_readb(card->func, reg, &ret);
2554 			if (ret) {
2555 				mwifiex_dbg(adapter, ERROR,
2556 					    "SDIO read err\n");
2557 				goto done;
2558 			}
2559 			dbg_ptr++;
2560 			if (dbg_ptr >= end_ptr) {
2561 				u8 *tmp_ptr;
2562 
2563 				tmp_ptr = vmalloc(entry->mem_size + 0x4000 + 1);
2564 				if (!tmp_ptr)
2565 					goto done;
2566 
2567 				memcpy(tmp_ptr, entry->mem_ptr,
2568 				       entry->mem_size);
2569 				vfree(entry->mem_ptr);
2570 				entry->mem_ptr = tmp_ptr;
2571 				tmp_ptr = NULL;
2572 				dbg_ptr = entry->mem_ptr + entry->mem_size;
2573 				entry->mem_size += 0x4000;
2574 				end_ptr = entry->mem_ptr + entry->mem_size;
2575 			}
2576 		}
2577 		if (stat == RDWR_STATUS_DONE) {
2578 			entry->mem_size = dbg_ptr - entry->mem_ptr;
2579 			mwifiex_dbg(adapter, DUMP, "dump %s done size=0x%x\n",
2580 				    entry->mem_name, entry->mem_size);
2581 			ret = 0;
2582 			break;
2583 		}
2584 	}
2585 	mwifiex_dbg(adapter, MSG, "== mwifiex firmware dump end ==\n");
2586 
2587 done:
2588 	if (ret) {
2589 		mwifiex_dbg(adapter, ERROR, "firmware dump failed\n");
2590 		if (entry->mem_ptr) {
2591 			vfree(entry->mem_ptr);
2592 			entry->mem_ptr = NULL;
2593 		}
2594 		entry->mem_size = 0;
2595 	}
2596 	sdio_release_host(card->func);
2597 }
2598 
2599 static void mwifiex_sdio_device_dump_work(struct mwifiex_adapter *adapter)
2600 {
2601 	struct sdio_mmc_card *card = adapter->card;
2602 
2603 	mwifiex_drv_info_dump(adapter);
2604 	if (card->fw_dump_enh)
2605 		mwifiex_sdio_generic_fw_dump(adapter);
2606 	else
2607 		mwifiex_sdio_fw_dump(adapter);
2608 	mwifiex_upload_device_dump(adapter);
2609 }
2610 
2611 static void mwifiex_sdio_work(struct work_struct *work)
2612 {
2613 	if (test_and_clear_bit(MWIFIEX_IFACE_WORK_DEVICE_DUMP,
2614 			       &iface_work_flags))
2615 		mwifiex_sdio_device_dump_work(save_adapter);
2616 	if (test_and_clear_bit(MWIFIEX_IFACE_WORK_CARD_RESET,
2617 			       &iface_work_flags))
2618 		mwifiex_sdio_card_reset_work(save_adapter);
2619 }
2620 
2621 static DECLARE_WORK(sdio_work, mwifiex_sdio_work);
2622 /* This function resets the card */
2623 static void mwifiex_sdio_card_reset(struct mwifiex_adapter *adapter)
2624 {
2625 	save_adapter = adapter;
2626 	if (test_bit(MWIFIEX_IFACE_WORK_CARD_RESET, &iface_work_flags))
2627 		return;
2628 
2629 	set_bit(MWIFIEX_IFACE_WORK_CARD_RESET, &iface_work_flags);
2630 
2631 	schedule_work(&sdio_work);
2632 }
2633 
2634 /* This function dumps FW information */
2635 static void mwifiex_sdio_device_dump(struct mwifiex_adapter *adapter)
2636 {
2637 	save_adapter = adapter;
2638 	if (test_bit(MWIFIEX_IFACE_WORK_DEVICE_DUMP, &iface_work_flags))
2639 		return;
2640 
2641 	set_bit(MWIFIEX_IFACE_WORK_DEVICE_DUMP, &iface_work_flags);
2642 	schedule_work(&sdio_work);
2643 }
2644 
2645 /* Function to dump SDIO function registers and SDIO scratch registers in case
2646  * of FW crash
2647  */
2648 static int
2649 mwifiex_sdio_reg_dump(struct mwifiex_adapter *adapter, char *drv_buf)
2650 {
2651 	char *p = drv_buf;
2652 	struct sdio_mmc_card *cardp = adapter->card;
2653 	int ret = 0;
2654 	u8 count, func, data, index = 0, size = 0;
2655 	u8 reg, reg_start, reg_end;
2656 	char buf[256], *ptr;
2657 
2658 	if (!p)
2659 		return 0;
2660 
2661 	mwifiex_dbg(adapter, MSG, "SDIO register dump start\n");
2662 
2663 	mwifiex_pm_wakeup_card(adapter);
2664 
2665 	sdio_claim_host(cardp->func);
2666 
2667 	for (count = 0; count < 5; count++) {
2668 		memset(buf, 0, sizeof(buf));
2669 		ptr = buf;
2670 
2671 		switch (count) {
2672 		case 0:
2673 			/* Read the registers of SDIO function0 */
2674 			func = count;
2675 			reg_start = 0;
2676 			reg_end = 9;
2677 			break;
2678 		case 1:
2679 			/* Read the registers of SDIO function1 */
2680 			func = count;
2681 			reg_start = cardp->reg->func1_dump_reg_start;
2682 			reg_end = cardp->reg->func1_dump_reg_end;
2683 			break;
2684 		case 2:
2685 			index = 0;
2686 			func = 1;
2687 			reg_start = cardp->reg->func1_spec_reg_table[index++];
2688 			size = cardp->reg->func1_spec_reg_num;
2689 			reg_end = cardp->reg->func1_spec_reg_table[size-1];
2690 			break;
2691 		default:
2692 			/* Read the scratch registers of SDIO function1 */
2693 			if (count == 4)
2694 				mdelay(100);
2695 			func = 1;
2696 			reg_start = cardp->reg->func1_scratch_reg;
2697 			reg_end = reg_start + MWIFIEX_SDIO_SCRATCH_SIZE;
2698 		}
2699 
2700 		if (count != 2)
2701 			ptr += sprintf(ptr, "SDIO Func%d (%#x-%#x): ",
2702 				       func, reg_start, reg_end);
2703 		else
2704 			ptr += sprintf(ptr, "SDIO Func%d: ", func);
2705 
2706 		for (reg = reg_start; reg <= reg_end;) {
2707 			if (func == 0)
2708 				data = sdio_f0_readb(cardp->func, reg, &ret);
2709 			else
2710 				data = sdio_readb(cardp->func, reg, &ret);
2711 
2712 			if (count == 2)
2713 				ptr += sprintf(ptr, "(%#x) ", reg);
2714 			if (!ret) {
2715 				ptr += sprintf(ptr, "%02x ", data);
2716 			} else {
2717 				ptr += sprintf(ptr, "ERR");
2718 				break;
2719 			}
2720 
2721 			if (count == 2 && reg < reg_end)
2722 				reg = cardp->reg->func1_spec_reg_table[index++];
2723 			else
2724 				reg++;
2725 		}
2726 
2727 		mwifiex_dbg(adapter, MSG, "%s\n", buf);
2728 		p += sprintf(p, "%s\n", buf);
2729 	}
2730 
2731 	sdio_release_host(cardp->func);
2732 
2733 	mwifiex_dbg(adapter, MSG, "SDIO register dump end\n");
2734 
2735 	return p - drv_buf;
2736 }
2737 
2738 static struct mwifiex_if_ops sdio_ops = {
2739 	.init_if = mwifiex_init_sdio,
2740 	.cleanup_if = mwifiex_cleanup_sdio,
2741 	.check_fw_status = mwifiex_check_fw_status,
2742 	.check_winner_status = mwifiex_check_winner_status,
2743 	.prog_fw = mwifiex_prog_fw_w_helper,
2744 	.register_dev = mwifiex_register_dev,
2745 	.unregister_dev = mwifiex_unregister_dev,
2746 	.enable_int = mwifiex_sdio_enable_host_int,
2747 	.disable_int = mwifiex_sdio_disable_host_int,
2748 	.process_int_status = mwifiex_process_int_status,
2749 	.host_to_card = mwifiex_sdio_host_to_card,
2750 	.wakeup = mwifiex_pm_wakeup_card,
2751 	.wakeup_complete = mwifiex_pm_wakeup_card_complete,
2752 
2753 	/* SDIO specific */
2754 	.update_mp_end_port = mwifiex_update_mp_end_port,
2755 	.cleanup_mpa_buf = mwifiex_cleanup_mpa_buf,
2756 	.cmdrsp_complete = mwifiex_sdio_cmdrsp_complete,
2757 	.event_complete = mwifiex_sdio_event_complete,
2758 	.dnld_fw = mwifiex_sdio_dnld_fw,
2759 	.card_reset = mwifiex_sdio_card_reset,
2760 	.reg_dump = mwifiex_sdio_reg_dump,
2761 	.device_dump = mwifiex_sdio_device_dump,
2762 	.deaggr_pkt = mwifiex_deaggr_sdio_pkt,
2763 };
2764 
2765 /*
2766  * This function initializes the SDIO driver.
2767  *
2768  * This initiates the semaphore and registers the device with
2769  * SDIO bus.
2770  */
2771 static int
2772 mwifiex_sdio_init_module(void)
2773 {
2774 	sema_init(&add_remove_card_sem, 1);
2775 
2776 	/* Clear the flag in case user removes the card. */
2777 	user_rmmod = 0;
2778 
2779 	return sdio_register_driver(&mwifiex_sdio);
2780 }
2781 
2782 /*
2783  * This function cleans up the SDIO driver.
2784  *
2785  * The following major steps are followed for cleanup -
2786  *      - Resume the device if its suspended
2787  *      - Disconnect the device if connected
2788  *      - Shutdown the firmware
2789  *      - Unregister the device from SDIO bus.
2790  */
2791 static void
2792 mwifiex_sdio_cleanup_module(void)
2793 {
2794 	if (!down_interruptible(&add_remove_card_sem))
2795 		up(&add_remove_card_sem);
2796 
2797 	/* Set the flag as user is removing this module. */
2798 	user_rmmod = 1;
2799 	cancel_work_sync(&sdio_work);
2800 
2801 	sdio_unregister_driver(&mwifiex_sdio);
2802 }
2803 
2804 module_init(mwifiex_sdio_init_module);
2805 module_exit(mwifiex_sdio_cleanup_module);
2806 
2807 MODULE_AUTHOR("Marvell International Ltd.");
2808 MODULE_DESCRIPTION("Marvell WiFi-Ex SDIO Driver version " SDIO_VERSION);
2809 MODULE_VERSION(SDIO_VERSION);
2810 MODULE_LICENSE("GPL v2");
2811 MODULE_FIRMWARE(SD8786_DEFAULT_FW_NAME);
2812 MODULE_FIRMWARE(SD8787_DEFAULT_FW_NAME);
2813 MODULE_FIRMWARE(SD8797_DEFAULT_FW_NAME);
2814 MODULE_FIRMWARE(SD8897_DEFAULT_FW_NAME);
2815 MODULE_FIRMWARE(SD8887_DEFAULT_FW_NAME);
2816 MODULE_FIRMWARE(SD8997_DEFAULT_FW_NAME);
2817