12865d42cSLarry Finger /******************************************************************************
22865d42cSLarry Finger  * rtl8712_cmd.c
32865d42cSLarry Finger  *
42865d42cSLarry Finger  * Copyright(c) 2007 - 2010 Realtek Corporation. All rights reserved.
52865d42cSLarry Finger  * Linux device driver for RTL8192SU
62865d42cSLarry Finger  *
72865d42cSLarry Finger  * This program is free software; you can redistribute it and/or modify it
82865d42cSLarry Finger  * under the terms of version 2 of the GNU General Public License as
92865d42cSLarry Finger  * published by the Free Software Foundation.
102865d42cSLarry Finger  *
112865d42cSLarry Finger  * This program is distributed in the hope that it will be useful, but WITHOUT
122865d42cSLarry Finger  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
132865d42cSLarry Finger  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
142865d42cSLarry Finger  * more details.
152865d42cSLarry Finger  *
162865d42cSLarry Finger  * You should have received a copy of the GNU General Public License along with
172865d42cSLarry Finger  * this program; if not, write to the Free Software Foundation, Inc.,
182865d42cSLarry Finger  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
192865d42cSLarry Finger  *
202865d42cSLarry Finger  * Modifications for inclusion into the Linux staging tree are
212865d42cSLarry Finger  * Copyright(c) 2010 Larry Finger. All rights reserved.
222865d42cSLarry Finger  *
232865d42cSLarry Finger  * Contact information:
242865d42cSLarry Finger  * WLAN FAE <wlanfae@realtek.com>.
252865d42cSLarry Finger  * Larry Finger <Larry.Finger@lwfinger.net>
262865d42cSLarry Finger  *
272865d42cSLarry Finger  ******************************************************************************/
282865d42cSLarry Finger 
292865d42cSLarry Finger #define _RTL8712_CMD_C_
302865d42cSLarry Finger 
31359140aaSAli Bahar #include <linux/compiler.h>
32359140aaSAli Bahar #include <linux/kernel.h>
33359140aaSAli Bahar #include <linux/errno.h>
34359140aaSAli Bahar #include <linux/slab.h>
353f07c014SIngo Molnar #include <linux/sched/signal.h>
36359140aaSAli Bahar #include <linux/module.h>
37359140aaSAli Bahar #include <linux/kref.h>
38359140aaSAli Bahar #include <linux/netdevice.h>
39359140aaSAli Bahar #include <linux/skbuff.h>
40359140aaSAli Bahar #include <linux/usb.h>
41359140aaSAli Bahar #include <linux/usb/ch9.h>
42359140aaSAli Bahar #include <linux/circ_buf.h>
43359140aaSAli Bahar #include <linux/uaccess.h>
44359140aaSAli Bahar #include <asm/byteorder.h>
45359140aaSAli Bahar #include <linux/atomic.h>
46359140aaSAli Bahar #include <linux/semaphore.h>
47359140aaSAli Bahar #include <linux/rtnetlink.h>
48359140aaSAli Bahar 
492865d42cSLarry Finger #include "osdep_service.h"
502865d42cSLarry Finger #include "drv_types.h"
512865d42cSLarry Finger #include "recv_osdep.h"
522865d42cSLarry Finger #include "mlme_osdep.h"
532865d42cSLarry Finger #include "rtl871x_ioctl_set.h"
542865d42cSLarry Finger 
552865d42cSLarry Finger static void check_hw_pbc(struct _adapter *padapter)
562865d42cSLarry Finger {
572865d42cSLarry Finger 	u8	tmp1byte;
582865d42cSLarry Finger 
592865d42cSLarry Finger 	r8712_write8(padapter, MAC_PINMUX_CTRL, (GPIOMUX_EN | GPIOSEL_GPIO));
602865d42cSLarry Finger 	tmp1byte = r8712_read8(padapter, GPIO_IO_SEL);
612865d42cSLarry Finger 	tmp1byte &= ~(HAL_8192S_HW_GPIO_WPS_BIT);
622865d42cSLarry Finger 	r8712_write8(padapter, GPIO_IO_SEL, tmp1byte);
632865d42cSLarry Finger 	tmp1byte = r8712_read8(padapter, GPIO_CTRL);
642865d42cSLarry Finger 	if (tmp1byte == 0xff)
652865d42cSLarry Finger 		return;
662865d42cSLarry Finger 	if (tmp1byte & HAL_8192S_HW_GPIO_WPS_BIT) {
672865d42cSLarry Finger 		/* Here we only set bPbcPressed to true
68ed9c838aSPunit Vara 		 * After trigger PBC, the variable will be set to false
69ed9c838aSPunit Vara 		 */
702865d42cSLarry Finger 		DBG_8712("CheckPbcGPIO - PBC is pressed !!!!\n");
712865d42cSLarry Finger 		/* 0 is the default value and it means the application monitors
72ed9c838aSPunit Vara 		 * the HW PBC doesn't provide its pid to driver.
73ed9c838aSPunit Vara 		 */
742865d42cSLarry Finger 		if (padapter->pid == 0)
752865d42cSLarry Finger 			return;
762865d42cSLarry Finger 		kill_pid(find_vpid(padapter->pid), SIGUSR1, 1);
772865d42cSLarry Finger 	}
782865d42cSLarry Finger }
792865d42cSLarry Finger 
802865d42cSLarry Finger /* query rx phy status from fw.
812865d42cSLarry Finger  * Adhoc mode: beacon.
82ed9c838aSPunit Vara  * Infrastructure mode: beacon , data.
83ed9c838aSPunit Vara  */
842865d42cSLarry Finger static void query_fw_rx_phy_status(struct _adapter *padapter)
852865d42cSLarry Finger {
862865d42cSLarry Finger 	u32 val32 = 0;
872865d42cSLarry Finger 	int pollingcnts = 50;
882865d42cSLarry Finger 
891ca96884SLuis de Bethencourt 	if (check_fwstate(&padapter->mlmepriv, _FW_LINKED)) {
902865d42cSLarry Finger 		r8712_write32(padapter, IOCMD_CTRL_REG, 0xf4000001);
912865d42cSLarry Finger 		msleep(100);
922865d42cSLarry Finger 		/* Wait FW complete IO Cmd */
932865d42cSLarry Finger 		while ((r8712_read32(padapter, IOCMD_CTRL_REG)) &&
942865d42cSLarry Finger 		       (pollingcnts > 0)) {
952865d42cSLarry Finger 			pollingcnts--;
962865d42cSLarry Finger 			msleep(20);
972865d42cSLarry Finger 		}
982865d42cSLarry Finger 		if (pollingcnts != 0)
992865d42cSLarry Finger 			val32 = r8712_read32(padapter, IOCMD_DATA_REG);
1002865d42cSLarry Finger 		else /* time out */
1012865d42cSLarry Finger 			val32 = 0;
102ae52e527SAya Mahfouz 		val32 >>= 4;
1032865d42cSLarry Finger 		padapter->recvpriv.fw_rssi =
1042865d42cSLarry Finger 			 (u8)r8712_signal_scale_mapping(val32);
1052865d42cSLarry Finger 	}
1062865d42cSLarry Finger }
1072865d42cSLarry Finger 
1082865d42cSLarry Finger /* check mlme, hw, phy, or dynamic algorithm status. */
1092865d42cSLarry Finger static void StatusWatchdogCallback(struct _adapter *padapter)
1102865d42cSLarry Finger {
1112865d42cSLarry Finger 	check_hw_pbc(padapter);
1122865d42cSLarry Finger 	query_fw_rx_phy_status(padapter);
1132865d42cSLarry Finger }
1142865d42cSLarry Finger 
1152865d42cSLarry Finger static void r871x_internal_cmd_hdl(struct _adapter *padapter, u8 *pbuf)
1162865d42cSLarry Finger {
1172865d42cSLarry Finger 	struct drvint_cmd_parm *pdrvcmd;
1182865d42cSLarry Finger 
1192865d42cSLarry Finger 	if (!pbuf)
1202865d42cSLarry Finger 		return;
1212865d42cSLarry Finger 	pdrvcmd = (struct drvint_cmd_parm *)pbuf;
1222865d42cSLarry Finger 	switch (pdrvcmd->i_cid) {
1232865d42cSLarry Finger 	case WDG_WK_CID:
1242865d42cSLarry Finger 		StatusWatchdogCallback(padapter);
1252865d42cSLarry Finger 		break;
1262865d42cSLarry Finger 	default:
1272865d42cSLarry Finger 		break;
1282865d42cSLarry Finger 	}
1292865d42cSLarry Finger 	kfree(pdrvcmd->pbuf);
1302865d42cSLarry Finger }
1312865d42cSLarry Finger 
1322865d42cSLarry Finger static u8 read_macreg_hdl(struct _adapter *padapter, u8 *pbuf)
1332865d42cSLarry Finger {
1342865d42cSLarry Finger 	void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj	*pcmd);
1352865d42cSLarry Finger 	struct cmd_obj *pcmd  = (struct cmd_obj *)pbuf;
1362865d42cSLarry Finger 
1372865d42cSLarry Finger 	/*  invoke cmd->callback function */
1382865d42cSLarry Finger 	pcmd_callback = cmd_callback[pcmd->cmdcode].callback;
1397fcf92c0SJuliana Rodrigues 	if (!pcmd_callback)
1402865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
1412865d42cSLarry Finger 	else
1422865d42cSLarry Finger 		pcmd_callback(padapter, pcmd);
1432865d42cSLarry Finger 	return H2C_SUCCESS;
1442865d42cSLarry Finger }
1452865d42cSLarry Finger 
1462865d42cSLarry Finger static u8 write_macreg_hdl(struct _adapter *padapter, u8 *pbuf)
1472865d42cSLarry Finger {
1482865d42cSLarry Finger 	void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj	*pcmd);
1492865d42cSLarry Finger 	struct cmd_obj *pcmd  = (struct cmd_obj *)pbuf;
1502865d42cSLarry Finger 
1512865d42cSLarry Finger 	/*  invoke cmd->callback function */
1522865d42cSLarry Finger 	pcmd_callback = cmd_callback[pcmd->cmdcode].callback;
1537fcf92c0SJuliana Rodrigues 	if (!pcmd_callback)
1542865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
1552865d42cSLarry Finger 	else
1562865d42cSLarry Finger 		pcmd_callback(padapter, pcmd);
1572865d42cSLarry Finger 	return H2C_SUCCESS;
1582865d42cSLarry Finger }
1592865d42cSLarry Finger 
1602865d42cSLarry Finger static u8 read_bbreg_hdl(struct _adapter *padapter, u8 *pbuf)
1612865d42cSLarry Finger {
1622865d42cSLarry Finger 	u32 val;
1632865d42cSLarry Finger 	void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj	*pcmd);
1642865d42cSLarry Finger 	struct cmd_obj *pcmd  = (struct cmd_obj *)pbuf;
1652865d42cSLarry Finger 
1662865d42cSLarry Finger 	if (pcmd->rsp && pcmd->rspsz > 0)
1672865d42cSLarry Finger 		memcpy(pcmd->rsp, (u8 *)&val, pcmd->rspsz);
1682865d42cSLarry Finger 	pcmd_callback = cmd_callback[pcmd->cmdcode].callback;
1697fcf92c0SJuliana Rodrigues 	if (!pcmd_callback)
1702865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
1712865d42cSLarry Finger 	else
1722865d42cSLarry Finger 		pcmd_callback(padapter, pcmd);
1732865d42cSLarry Finger 	return H2C_SUCCESS;
1742865d42cSLarry Finger }
1752865d42cSLarry Finger 
1762865d42cSLarry Finger static u8 write_bbreg_hdl(struct _adapter *padapter, u8 *pbuf)
1772865d42cSLarry Finger {
1782865d42cSLarry Finger 	void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj *pcmd);
1792865d42cSLarry Finger 	struct cmd_obj *pcmd  = (struct cmd_obj *)pbuf;
1802865d42cSLarry Finger 
1812865d42cSLarry Finger 	pcmd_callback = cmd_callback[pcmd->cmdcode].callback;
1827fcf92c0SJuliana Rodrigues 	if (!pcmd_callback)
1832865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
1842865d42cSLarry Finger 	else
1852865d42cSLarry Finger 		pcmd_callback(padapter, pcmd);
1862865d42cSLarry Finger 	return H2C_SUCCESS;
1872865d42cSLarry Finger }
1882865d42cSLarry Finger 
1892865d42cSLarry Finger static u8 read_rfreg_hdl(struct _adapter *padapter, u8 *pbuf)
1902865d42cSLarry Finger {
1912865d42cSLarry Finger 	u32 val;
1922865d42cSLarry Finger 	void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj *pcmd);
1932865d42cSLarry Finger 	struct cmd_obj *pcmd  = (struct cmd_obj *)pbuf;
1942865d42cSLarry Finger 
1952865d42cSLarry Finger 	if (pcmd->rsp && pcmd->rspsz > 0)
1962865d42cSLarry Finger 		memcpy(pcmd->rsp, (u8 *)&val, pcmd->rspsz);
1972865d42cSLarry Finger 	pcmd_callback = cmd_callback[pcmd->cmdcode].callback;
1987fcf92c0SJuliana Rodrigues 	if (!pcmd_callback)
1992865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
2002865d42cSLarry Finger 	else
2012865d42cSLarry Finger 		pcmd_callback(padapter, pcmd);
2022865d42cSLarry Finger 	return H2C_SUCCESS;
2032865d42cSLarry Finger }
2042865d42cSLarry Finger 
2052865d42cSLarry Finger static u8 write_rfreg_hdl(struct _adapter *padapter, u8 *pbuf)
2062865d42cSLarry Finger {
2072865d42cSLarry Finger 	void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj *pcmd);
2082865d42cSLarry Finger 	struct cmd_obj *pcmd  = (struct cmd_obj *)pbuf;
2092865d42cSLarry Finger 
2102865d42cSLarry Finger 	pcmd_callback = cmd_callback[pcmd->cmdcode].callback;
2117fcf92c0SJuliana Rodrigues 	if (!pcmd_callback)
2122865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
2132865d42cSLarry Finger 	else
2142865d42cSLarry Finger 		pcmd_callback(padapter, pcmd);
2152865d42cSLarry Finger 	return H2C_SUCCESS;
2162865d42cSLarry Finger }
2172865d42cSLarry Finger 
2182865d42cSLarry Finger static u8 sys_suspend_hdl(struct _adapter *padapter, u8 *pbuf)
2192865d42cSLarry Finger {
2202865d42cSLarry Finger 	struct cmd_obj *pcmd  = (struct cmd_obj *)pbuf;
2212865d42cSLarry Finger 
2222865d42cSLarry Finger 	r8712_free_cmd_obj(pcmd);
2232865d42cSLarry Finger 	return H2C_SUCCESS;
2242865d42cSLarry Finger }
2252865d42cSLarry Finger 
2262865d42cSLarry Finger static struct cmd_obj *cmd_hdl_filter(struct _adapter *padapter,
2272865d42cSLarry Finger 				      struct cmd_obj *pcmd)
2282865d42cSLarry Finger {
2292865d42cSLarry Finger 	struct cmd_obj *pcmd_r;
2302865d42cSLarry Finger 
2317fcf92c0SJuliana Rodrigues 	if (!pcmd)
2322865d42cSLarry Finger 		return pcmd;
2332865d42cSLarry Finger 	pcmd_r = NULL;
2342865d42cSLarry Finger 
2352865d42cSLarry Finger 	switch (pcmd->cmdcode) {
2362865d42cSLarry Finger 	case GEN_CMD_CODE(_Read_MACREG):
2372865d42cSLarry Finger 		read_macreg_hdl(padapter, (u8 *)pcmd);
2382865d42cSLarry Finger 		pcmd_r = pcmd;
2392865d42cSLarry Finger 		break;
2402865d42cSLarry Finger 	case GEN_CMD_CODE(_Write_MACREG):
2412865d42cSLarry Finger 		write_macreg_hdl(padapter, (u8 *)pcmd);
2422865d42cSLarry Finger 		pcmd_r = pcmd;
2432865d42cSLarry Finger 		break;
2442865d42cSLarry Finger 	case GEN_CMD_CODE(_Read_BBREG):
2452865d42cSLarry Finger 		read_bbreg_hdl(padapter, (u8 *)pcmd);
2462865d42cSLarry Finger 		break;
2472865d42cSLarry Finger 	case GEN_CMD_CODE(_Write_BBREG):
2482865d42cSLarry Finger 		write_bbreg_hdl(padapter, (u8 *)pcmd);
2492865d42cSLarry Finger 		break;
2502865d42cSLarry Finger 	case GEN_CMD_CODE(_Read_RFREG):
2512865d42cSLarry Finger 		read_rfreg_hdl(padapter, (u8 *)pcmd);
2522865d42cSLarry Finger 		break;
2532865d42cSLarry Finger 	case GEN_CMD_CODE(_Write_RFREG):
2542865d42cSLarry Finger 		write_rfreg_hdl(padapter, (u8 *)pcmd);
2552865d42cSLarry Finger 		break;
2562865d42cSLarry Finger 	case GEN_CMD_CODE(_SetUsbSuspend):
2572865d42cSLarry Finger 		sys_suspend_hdl(padapter, (u8 *)pcmd);
2582865d42cSLarry Finger 		break;
2592865d42cSLarry Finger 	case GEN_CMD_CODE(_JoinBss):
2602865d42cSLarry Finger 		r8712_joinbss_reset(padapter);
2612865d42cSLarry Finger 		/* Before set JoinBss_CMD to FW, driver must ensure FW is in
2622865d42cSLarry Finger 		 * PS_MODE_ACTIVE. Directly write rpwm to radio on and assign
2632865d42cSLarry Finger 		 * new pwr_mode to Driver, instead of use workitem to change
264ed9c838aSPunit Vara 		 * state.
265ed9c838aSPunit Vara 		 */
2662865d42cSLarry Finger 		if (padapter->pwrctrlpriv.pwr_mode > PS_MODE_ACTIVE) {
2672865d42cSLarry Finger 			padapter->pwrctrlpriv.pwr_mode = PS_MODE_ACTIVE;
2685c2ba8b8SBinoy Jayan 			mutex_lock(&padapter->pwrctrlpriv.mutex_lock);
2692865d42cSLarry Finger 			r8712_set_rpwm(padapter, PS_STATE_S4);
2705c2ba8b8SBinoy Jayan 			mutex_unlock(&padapter->pwrctrlpriv.mutex_lock);
2712865d42cSLarry Finger 		}
2722865d42cSLarry Finger 		pcmd_r = pcmd;
2732865d42cSLarry Finger 		break;
2742865d42cSLarry Finger 	case _DRV_INT_CMD_:
2752865d42cSLarry Finger 		r871x_internal_cmd_hdl(padapter, pcmd->parmbuf);
2762865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
2772865d42cSLarry Finger 		pcmd_r = NULL;
2782865d42cSLarry Finger 		break;
2792865d42cSLarry Finger 	default:
2802865d42cSLarry Finger 		pcmd_r = pcmd;
2812865d42cSLarry Finger 		break;
2822865d42cSLarry Finger 	}
2832865d42cSLarry Finger 	return pcmd_r; /* if returning pcmd_r == NULL, pcmd must be free. */
2842865d42cSLarry Finger }
2852865d42cSLarry Finger 
2862865d42cSLarry Finger static u8 check_cmd_fifo(struct _adapter *padapter, uint sz)
2872865d42cSLarry Finger {
2888ffca9eaSPeter Senna Tschudin 	return _SUCCESS;
2892865d42cSLarry Finger }
2902865d42cSLarry Finger 
2912865d42cSLarry Finger u8 r8712_fw_cmd(struct _adapter *pAdapter, u32 cmd)
2922865d42cSLarry Finger {
2932865d42cSLarry Finger 	int pollingcnts = 50;
2942865d42cSLarry Finger 
2952865d42cSLarry Finger 	r8712_write32(pAdapter, IOCMD_CTRL_REG, cmd);
2962865d42cSLarry Finger 	msleep(100);
29797e2ba90SRakhi Sharma 	while ((r8712_read32(pAdapter, IOCMD_CTRL_REG != 0)) &&
2982865d42cSLarry Finger 	       (pollingcnts > 0)) {
2992865d42cSLarry Finger 		pollingcnts--;
3002865d42cSLarry Finger 		msleep(20);
3012865d42cSLarry Finger 	}
3022865d42cSLarry Finger 	if (pollingcnts == 0)
3032865d42cSLarry Finger 		return false;
3042865d42cSLarry Finger 	return true;
3052865d42cSLarry Finger }
3062865d42cSLarry Finger 
3072865d42cSLarry Finger void r8712_fw_cmd_data(struct _adapter *pAdapter, u32 *value, u8 flag)
3082865d42cSLarry Finger {
3092865d42cSLarry Finger 	if (flag == 0)	/* set */
3102865d42cSLarry Finger 		r8712_write32(pAdapter, IOCMD_DATA_REG, *value);
3112865d42cSLarry Finger 	else		/* query */
3122865d42cSLarry Finger 		*value = r8712_read32(pAdapter, IOCMD_DATA_REG);
3132865d42cSLarry Finger }
3142865d42cSLarry Finger 
3152865d42cSLarry Finger int r8712_cmd_thread(void *context)
3162865d42cSLarry Finger {
3172865d42cSLarry Finger 	struct cmd_obj *pcmd;
318e8cd841bSJannik Becher 	unsigned int cmdsz, wr_sz;
319e8cd841bSJannik Becher 	__le32 *pcmdbuf;
3202865d42cSLarry Finger 	struct tx_desc *pdesc;
3212865d42cSLarry Finger 	void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj *pcmd);
32256238e45SBhaktipriya Shridhar 	struct _adapter *padapter = context;
3232865d42cSLarry Finger 	struct	cmd_priv	*pcmdpriv = &(padapter->cmdpriv);
3242865d42cSLarry Finger 
325fee51243SJames A Shackleford 	allow_signal(SIGTERM);
3262865d42cSLarry Finger 	while (1) {
3270f89054aSBinoy Jayan 		if (wait_for_completion_interruptible(&pcmdpriv->cmd_queue_comp))
3282865d42cSLarry Finger 			break;
3291ca96884SLuis de Bethencourt 		if (padapter->bDriverStopped || padapter->bSurpriseRemoved)
3302865d42cSLarry Finger 			break;
3312865d42cSLarry Finger 		if (r8712_register_cmd_alive(padapter) != _SUCCESS)
3322865d42cSLarry Finger 			continue;
3332865d42cSLarry Finger _next:
3342865d42cSLarry Finger 		pcmd = r8712_dequeue_cmd(&(pcmdpriv->cmd_queue));
3352865d42cSLarry Finger 		if (!(pcmd)) {
3362865d42cSLarry Finger 			r8712_unregister_cmd_alive(padapter);
3372865d42cSLarry Finger 			continue;
3382865d42cSLarry Finger 		}
339e8cd841bSJannik Becher 		pcmdbuf = (__le32 *)pcmdpriv->cmd_buf;
3402865d42cSLarry Finger 		pdesc = (struct tx_desc *)pcmdbuf;
3412865d42cSLarry Finger 		memset(pdesc, 0, TXDESC_SIZE);
3422865d42cSLarry Finger 		pcmd = cmd_hdl_filter(padapter, pcmd);
3432865d42cSLarry Finger 		if (pcmd) { /* if pcmd != NULL, cmd will be handled by f/w */
344adc08cc4SShivani Bhardwaj 			struct dvobj_priv *pdvobj = &padapter->dvobjpriv;
3452865d42cSLarry Finger 			u8 blnPending = 0;
34602a29d2dSTapasweni Pathak 
3472865d42cSLarry Finger 			pcmdpriv->cmd_issued_cnt++;
348d913e54eSJames A Shackleford 			cmdsz = round_up(pcmd->cmdsz, 8);
3492865d42cSLarry Finger 			wr_sz = TXDESC_SIZE + 8 + cmdsz;
3502865d42cSLarry Finger 			pdesc->txdw0 |= cpu_to_le32((wr_sz - TXDESC_SIZE) &
3512865d42cSLarry Finger 						     0x0000ffff);
3522865d42cSLarry Finger 			if (pdvobj->ishighspeed) {
3532865d42cSLarry Finger 				if ((wr_sz % 512) == 0)
3542865d42cSLarry Finger 					blnPending = 1;
3552865d42cSLarry Finger 			} else {
3562865d42cSLarry Finger 				if ((wr_sz % 64) == 0)
3572865d42cSLarry Finger 					blnPending = 1;
3582865d42cSLarry Finger 			}
3592865d42cSLarry Finger 			if (blnPending) /* 32 bytes for TX Desc - 8 offset */
3602865d42cSLarry Finger 				pdesc->txdw0 |= cpu_to_le32(((TXDESC_SIZE +
3612865d42cSLarry Finger 						OFFSET_SZ + 8) << OFFSET_SHT) &
3622865d42cSLarry Finger 						0x00ff0000);
3632865d42cSLarry Finger 			else {
3642865d42cSLarry Finger 				pdesc->txdw0 |= cpu_to_le32(((TXDESC_SIZE +
3652865d42cSLarry Finger 							      OFFSET_SZ) <<
3662865d42cSLarry Finger 							      OFFSET_SHT) &
3672865d42cSLarry Finger 							      0x00ff0000);
3682865d42cSLarry Finger 			}
3692865d42cSLarry Finger 			pdesc->txdw0 |= cpu_to_le32(OWN | FSG | LSG);
3702865d42cSLarry Finger 			pdesc->txdw1 |= cpu_to_le32((0x13 << QSEL_SHT) &
3712865d42cSLarry Finger 						    0x00001f00);
3722865d42cSLarry Finger 			pcmdbuf += (TXDESC_SIZE >> 2);
3732865d42cSLarry Finger 			*pcmdbuf = cpu_to_le32((cmdsz & 0x0000ffff) |
3742865d42cSLarry Finger 					       (pcmd->cmdcode << 16) |
3752865d42cSLarry Finger 					       (pcmdpriv->cmd_seq << 24));
376be10ac2bSJustin P. Mattock 			pcmdbuf += 2; /* 8 bytes alignment */
3772865d42cSLarry Finger 			memcpy((u8 *)pcmdbuf, pcmd->parmbuf, pcmd->cmdsz);
3782865d42cSLarry Finger 			while (check_cmd_fifo(padapter, wr_sz) == _FAIL) {
3791ca96884SLuis de Bethencourt 				if (padapter->bDriverStopped ||
3801ca96884SLuis de Bethencourt 				    padapter->bSurpriseRemoved)
3812865d42cSLarry Finger 					break;
3822865d42cSLarry Finger 				msleep(100);
3832865d42cSLarry Finger 				continue;
3842865d42cSLarry Finger 			}
3852865d42cSLarry Finger 			if (blnPending)
3862865d42cSLarry Finger 				wr_sz += 8;   /* Append 8 bytes */
3872865d42cSLarry Finger 			r8712_write_mem(padapter, RTL8712_DMA_H2CCMD, wr_sz,
3882865d42cSLarry Finger 				       (u8 *)pdesc);
3892865d42cSLarry Finger 			pcmdpriv->cmd_seq++;
3902865d42cSLarry Finger 			if (pcmd->cmdcode == GEN_CMD_CODE(_CreateBss)) {
3912865d42cSLarry Finger 				pcmd->res = H2C_SUCCESS;
3922865d42cSLarry Finger 				pcmd_callback = cmd_callback[pcmd->
3932865d42cSLarry Finger 						cmdcode].callback;
3942865d42cSLarry Finger 				if (pcmd_callback)
3952865d42cSLarry Finger 					pcmd_callback(padapter, pcmd);
3962865d42cSLarry Finger 				continue;
3972865d42cSLarry Finger 			}
3982865d42cSLarry Finger 			if (pcmd->cmdcode == GEN_CMD_CODE(_SetPwrMode)) {
3992865d42cSLarry Finger 				if (padapter->pwrctrlpriv.bSleep) {
4005c2ba8b8SBinoy Jayan 					mutex_lock(&padapter->
4015c2ba8b8SBinoy Jayan 						       pwrctrlpriv.mutex_lock);
4022865d42cSLarry Finger 					r8712_set_rpwm(padapter, PS_STATE_S2);
4035c2ba8b8SBinoy Jayan 					mutex_unlock(&padapter->pwrctrlpriv.mutex_lock);
4042865d42cSLarry Finger 				}
4052865d42cSLarry Finger 			}
4062865d42cSLarry Finger 			r8712_free_cmd_obj(pcmd);
407df353f61SJames A Shackleford 			if (list_empty(&pcmdpriv->cmd_queue.queue)) {
4082865d42cSLarry Finger 				r8712_unregister_cmd_alive(padapter);
4092865d42cSLarry Finger 				continue;
410168a2c10SLuis de Bethencourt 			} else {
4112865d42cSLarry Finger 				goto _next;
412168a2c10SLuis de Bethencourt 			}
413168a2c10SLuis de Bethencourt 		} else {
4142865d42cSLarry Finger 			goto _next;
415168a2c10SLuis de Bethencourt 		}
4162865d42cSLarry Finger 		flush_signals_thread();
4172865d42cSLarry Finger 	}
4182865d42cSLarry Finger 	/* free all cmd_obj resources */
4192865d42cSLarry Finger 	do {
4202865d42cSLarry Finger 		pcmd = r8712_dequeue_cmd(&(pcmdpriv->cmd_queue));
4217fcf92c0SJuliana Rodrigues 		if (!pcmd)
4222865d42cSLarry Finger 			break;
4232865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
4242865d42cSLarry Finger 	} while (1);
425204a8ac1SBinoy Jayan 	complete(&pcmdpriv->terminate_cmdthread_comp);
4262865d42cSLarry Finger 	thread_exit();
4272865d42cSLarry Finger }
4282865d42cSLarry Finger 
429bcb91a5cSJannik Becher void r8712_event_handle(struct _adapter *padapter, __le32 *peventbuf)
4302865d42cSLarry Finger {
4312865d42cSLarry Finger 	u8 evt_code, evt_seq;
4322865d42cSLarry Finger 	u16 evt_sz;
4332865d42cSLarry Finger 	void (*event_callback)(struct _adapter *dev, u8 *pbuf);
4342865d42cSLarry Finger 	struct	evt_priv *pevt_priv = &(padapter->evtpriv);
4352865d42cSLarry Finger 
4367fcf92c0SJuliana Rodrigues 	if (!peventbuf)
4372865d42cSLarry Finger 		goto _abort_event_;
4382865d42cSLarry Finger 	evt_sz = (u16)(le32_to_cpu(*peventbuf) & 0xffff);
4392865d42cSLarry Finger 	evt_seq = (u8)((le32_to_cpu(*peventbuf) >> 24) & 0x7f);
4402865d42cSLarry Finger 	evt_code = (u8)((le32_to_cpu(*peventbuf) >> 16) & 0xff);
4412865d42cSLarry Finger 	/* checking event sequence... */
4422865d42cSLarry Finger 	if ((evt_seq & 0x7f) != pevt_priv->event_seq) {
4432865d42cSLarry Finger 		pevt_priv->event_seq = ((evt_seq + 1) & 0x7f);
4442865d42cSLarry Finger 		goto _abort_event_;
4452865d42cSLarry Finger 	}
4462865d42cSLarry Finger 	/* checking if event code is valid */
4472865d42cSLarry Finger 	if (evt_code >= MAX_C2HEVT) {
4482865d42cSLarry Finger 		pevt_priv->event_seq = ((evt_seq + 1) & 0x7f);
4492865d42cSLarry Finger 		goto _abort_event_;
4502865d42cSLarry Finger 	} else if ((evt_code == GEN_EVT_CODE(_Survey)) &&
4512865d42cSLarry Finger 		   (evt_sz > sizeof(struct wlan_bssid_ex))) {
4522865d42cSLarry Finger 		pevt_priv->event_seq = ((evt_seq + 1) & 0x7f);
4532865d42cSLarry Finger 		goto _abort_event_;
4542865d42cSLarry Finger 	}
4552865d42cSLarry Finger 	/* checking if event size match the event parm size */
4562865d42cSLarry Finger 	if ((wlanevents[evt_code].parmsize) &&
4572865d42cSLarry Finger 	    (wlanevents[evt_code].parmsize != evt_sz)) {
4582865d42cSLarry Finger 		pevt_priv->event_seq = ((evt_seq + 1) & 0x7f);
4592865d42cSLarry Finger 		goto _abort_event_;
4602865d42cSLarry Finger 	} else if ((evt_sz == 0) && (evt_code != GEN_EVT_CODE(_WPS_PBC))) {
4612865d42cSLarry Finger 		pevt_priv->event_seq = ((evt_seq + 1) & 0x7f);
4622865d42cSLarry Finger 		goto _abort_event_;
4632865d42cSLarry Finger 	}
4642865d42cSLarry Finger 	pevt_priv->event_seq++;	/* update evt_seq */
4652865d42cSLarry Finger 	if (pevt_priv->event_seq > 127)
4662865d42cSLarry Finger 		pevt_priv->event_seq = 0;
46757b6686eSTapasweni Pathak 	/* move to event content, 8 bytes alignment */
46857b6686eSTapasweni Pathak 	peventbuf = peventbuf + 2;
4692865d42cSLarry Finger 	event_callback = wlanevents[evt_code].event_callback;
4702865d42cSLarry Finger 	if (event_callback)
4712865d42cSLarry Finger 		event_callback(padapter, (u8 *)peventbuf);
4722865d42cSLarry Finger 	pevt_priv->evt_done_cnt++;
4732865d42cSLarry Finger _abort_event_:
4742865d42cSLarry Finger 	return;
4752865d42cSLarry Finger }
476