12865d42cSLarry Finger /******************************************************************************
22865d42cSLarry Finger  * rtl8712_cmd.c
32865d42cSLarry Finger  *
42865d42cSLarry Finger  * Copyright(c) 2007 - 2010 Realtek Corporation. All rights reserved.
52865d42cSLarry Finger  * Linux device driver for RTL8192SU
62865d42cSLarry Finger  *
72865d42cSLarry Finger  * This program is free software; you can redistribute it and/or modify it
82865d42cSLarry Finger  * under the terms of version 2 of the GNU General Public License as
92865d42cSLarry Finger  * published by the Free Software Foundation.
102865d42cSLarry Finger  *
112865d42cSLarry Finger  * This program is distributed in the hope that it will be useful, but WITHOUT
122865d42cSLarry Finger  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
132865d42cSLarry Finger  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
142865d42cSLarry Finger  * more details.
152865d42cSLarry Finger  *
162865d42cSLarry Finger  * You should have received a copy of the GNU General Public License along with
172865d42cSLarry Finger  * this program; if not, write to the Free Software Foundation, Inc.,
182865d42cSLarry Finger  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
192865d42cSLarry Finger  *
202865d42cSLarry Finger  * Modifications for inclusion into the Linux staging tree are
212865d42cSLarry Finger  * Copyright(c) 2010 Larry Finger. All rights reserved.
222865d42cSLarry Finger  *
232865d42cSLarry Finger  * Contact information:
242865d42cSLarry Finger  * WLAN FAE <wlanfae@realtek.com>.
252865d42cSLarry Finger  * Larry Finger <Larry.Finger@lwfinger.net>
262865d42cSLarry Finger  *
272865d42cSLarry Finger  ******************************************************************************/
282865d42cSLarry Finger 
292865d42cSLarry Finger #define _RTL8712_CMD_C_
302865d42cSLarry Finger 
31359140aaSAli Bahar #include <linux/compiler.h>
32359140aaSAli Bahar #include <linux/kernel.h>
33359140aaSAli Bahar #include <linux/errno.h>
34359140aaSAli Bahar #include <linux/slab.h>
35359140aaSAli Bahar #include <linux/module.h>
36359140aaSAli Bahar #include <linux/kref.h>
37359140aaSAli Bahar #include <linux/netdevice.h>
38359140aaSAli Bahar #include <linux/skbuff.h>
39359140aaSAli Bahar #include <linux/usb.h>
40359140aaSAli Bahar #include <linux/usb/ch9.h>
41359140aaSAli Bahar #include <linux/circ_buf.h>
42359140aaSAli Bahar #include <linux/uaccess.h>
43359140aaSAli Bahar #include <asm/byteorder.h>
44359140aaSAli Bahar #include <linux/atomic.h>
45359140aaSAli Bahar #include <linux/semaphore.h>
46359140aaSAli Bahar #include <linux/rtnetlink.h>
47359140aaSAli Bahar 
482865d42cSLarry Finger #include "osdep_service.h"
492865d42cSLarry Finger #include "drv_types.h"
502865d42cSLarry Finger #include "recv_osdep.h"
512865d42cSLarry Finger #include "mlme_osdep.h"
522865d42cSLarry Finger #include "rtl871x_ioctl_set.h"
532865d42cSLarry Finger 
542865d42cSLarry Finger static void check_hw_pbc(struct _adapter *padapter)
552865d42cSLarry Finger {
562865d42cSLarry Finger 	u8	tmp1byte;
572865d42cSLarry Finger 
582865d42cSLarry Finger 	r8712_write8(padapter, MAC_PINMUX_CTRL, (GPIOMUX_EN | GPIOSEL_GPIO));
592865d42cSLarry Finger 	tmp1byte = r8712_read8(padapter, GPIO_IO_SEL);
602865d42cSLarry Finger 	tmp1byte &= ~(HAL_8192S_HW_GPIO_WPS_BIT);
612865d42cSLarry Finger 	r8712_write8(padapter, GPIO_IO_SEL, tmp1byte);
622865d42cSLarry Finger 	tmp1byte = r8712_read8(padapter, GPIO_CTRL);
632865d42cSLarry Finger 	if (tmp1byte == 0xff)
642865d42cSLarry Finger 		return;
652865d42cSLarry Finger 	if (tmp1byte & HAL_8192S_HW_GPIO_WPS_BIT) {
662865d42cSLarry Finger 		/* Here we only set bPbcPressed to true
67ed9c838aSPunit Vara 		 * After trigger PBC, the variable will be set to false
68ed9c838aSPunit Vara 		 */
692865d42cSLarry Finger 		DBG_8712("CheckPbcGPIO - PBC is pressed !!!!\n");
702865d42cSLarry Finger 		/* 0 is the default value and it means the application monitors
71ed9c838aSPunit Vara 		 * the HW PBC doesn't provide its pid to driver.
72ed9c838aSPunit Vara 		 */
732865d42cSLarry Finger 		if (padapter->pid == 0)
742865d42cSLarry Finger 			return;
752865d42cSLarry Finger 		kill_pid(find_vpid(padapter->pid), SIGUSR1, 1);
762865d42cSLarry Finger 	}
772865d42cSLarry Finger }
782865d42cSLarry Finger 
792865d42cSLarry Finger /* query rx phy status from fw.
802865d42cSLarry Finger  * Adhoc mode: beacon.
81ed9c838aSPunit Vara  * Infrastructure mode: beacon , data.
82ed9c838aSPunit Vara  */
832865d42cSLarry Finger static void query_fw_rx_phy_status(struct _adapter *padapter)
842865d42cSLarry Finger {
852865d42cSLarry Finger 	u32 val32 = 0;
862865d42cSLarry Finger 	int pollingcnts = 50;
872865d42cSLarry Finger 
881ca96884SLuis de Bethencourt 	if (check_fwstate(&padapter->mlmepriv, _FW_LINKED)) {
892865d42cSLarry Finger 		r8712_write32(padapter, IOCMD_CTRL_REG, 0xf4000001);
902865d42cSLarry Finger 		msleep(100);
912865d42cSLarry Finger 		/* Wait FW complete IO Cmd */
922865d42cSLarry Finger 		while ((r8712_read32(padapter, IOCMD_CTRL_REG)) &&
932865d42cSLarry Finger 		       (pollingcnts > 0)) {
942865d42cSLarry Finger 			pollingcnts--;
952865d42cSLarry Finger 			msleep(20);
962865d42cSLarry Finger 		}
972865d42cSLarry Finger 		if (pollingcnts != 0)
982865d42cSLarry Finger 			val32 = r8712_read32(padapter, IOCMD_DATA_REG);
992865d42cSLarry Finger 		else /* time out */
1002865d42cSLarry Finger 			val32 = 0;
101ae52e527SAya Mahfouz 		val32 >>= 4;
1022865d42cSLarry Finger 		padapter->recvpriv.fw_rssi =
1032865d42cSLarry Finger 			 (u8)r8712_signal_scale_mapping(val32);
1042865d42cSLarry Finger 	}
1052865d42cSLarry Finger }
1062865d42cSLarry Finger 
1072865d42cSLarry Finger /* check mlme, hw, phy, or dynamic algorithm status. */
1082865d42cSLarry Finger static void StatusWatchdogCallback(struct _adapter *padapter)
1092865d42cSLarry Finger {
1102865d42cSLarry Finger 	check_hw_pbc(padapter);
1112865d42cSLarry Finger 	query_fw_rx_phy_status(padapter);
1122865d42cSLarry Finger }
1132865d42cSLarry Finger 
1142865d42cSLarry Finger static void r871x_internal_cmd_hdl(struct _adapter *padapter, u8 *pbuf)
1152865d42cSLarry Finger {
1162865d42cSLarry Finger 	struct drvint_cmd_parm *pdrvcmd;
1172865d42cSLarry Finger 
1182865d42cSLarry Finger 	if (!pbuf)
1192865d42cSLarry Finger 		return;
1202865d42cSLarry Finger 	pdrvcmd = (struct drvint_cmd_parm *)pbuf;
1212865d42cSLarry Finger 	switch (pdrvcmd->i_cid) {
1222865d42cSLarry Finger 	case WDG_WK_CID:
1232865d42cSLarry Finger 		StatusWatchdogCallback(padapter);
1242865d42cSLarry Finger 		break;
1252865d42cSLarry Finger 	default:
1262865d42cSLarry Finger 		break;
1272865d42cSLarry Finger 	}
1282865d42cSLarry Finger 	kfree(pdrvcmd->pbuf);
1292865d42cSLarry Finger }
1302865d42cSLarry Finger 
1312865d42cSLarry Finger static u8 read_macreg_hdl(struct _adapter *padapter, u8 *pbuf)
1322865d42cSLarry Finger {
1332865d42cSLarry Finger 	void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj	*pcmd);
1342865d42cSLarry Finger 	struct cmd_obj *pcmd  = (struct cmd_obj *)pbuf;
1352865d42cSLarry Finger 
1362865d42cSLarry Finger 	/*  invoke cmd->callback function */
1372865d42cSLarry Finger 	pcmd_callback = cmd_callback[pcmd->cmdcode].callback;
1387fcf92c0SJuliana Rodrigues 	if (!pcmd_callback)
1392865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
1402865d42cSLarry Finger 	else
1412865d42cSLarry Finger 		pcmd_callback(padapter, pcmd);
1422865d42cSLarry Finger 	return H2C_SUCCESS;
1432865d42cSLarry Finger }
1442865d42cSLarry Finger 
1452865d42cSLarry Finger static u8 write_macreg_hdl(struct _adapter *padapter, u8 *pbuf)
1462865d42cSLarry Finger {
1472865d42cSLarry Finger 	void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj	*pcmd);
1482865d42cSLarry Finger 	struct cmd_obj *pcmd  = (struct cmd_obj *)pbuf;
1492865d42cSLarry Finger 
1502865d42cSLarry Finger 	/*  invoke cmd->callback function */
1512865d42cSLarry Finger 	pcmd_callback = cmd_callback[pcmd->cmdcode].callback;
1527fcf92c0SJuliana Rodrigues 	if (!pcmd_callback)
1532865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
1542865d42cSLarry Finger 	else
1552865d42cSLarry Finger 		pcmd_callback(padapter, pcmd);
1562865d42cSLarry Finger 	return H2C_SUCCESS;
1572865d42cSLarry Finger }
1582865d42cSLarry Finger 
1592865d42cSLarry Finger static u8 read_bbreg_hdl(struct _adapter *padapter, u8 *pbuf)
1602865d42cSLarry Finger {
1612865d42cSLarry Finger 	u32 val;
1622865d42cSLarry Finger 	void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj	*pcmd);
1632865d42cSLarry Finger 	struct cmd_obj *pcmd  = (struct cmd_obj *)pbuf;
1642865d42cSLarry Finger 
1652865d42cSLarry Finger 	if (pcmd->rsp && pcmd->rspsz > 0)
1662865d42cSLarry Finger 		memcpy(pcmd->rsp, (u8 *)&val, pcmd->rspsz);
1672865d42cSLarry Finger 	pcmd_callback = cmd_callback[pcmd->cmdcode].callback;
1687fcf92c0SJuliana Rodrigues 	if (!pcmd_callback)
1692865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
1702865d42cSLarry Finger 	else
1712865d42cSLarry Finger 		pcmd_callback(padapter, pcmd);
1722865d42cSLarry Finger 	return H2C_SUCCESS;
1732865d42cSLarry Finger }
1742865d42cSLarry Finger 
1752865d42cSLarry Finger static u8 write_bbreg_hdl(struct _adapter *padapter, u8 *pbuf)
1762865d42cSLarry Finger {
1772865d42cSLarry Finger 	void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj *pcmd);
1782865d42cSLarry Finger 	struct cmd_obj *pcmd  = (struct cmd_obj *)pbuf;
1792865d42cSLarry Finger 
1802865d42cSLarry Finger 	pcmd_callback = cmd_callback[pcmd->cmdcode].callback;
1817fcf92c0SJuliana Rodrigues 	if (!pcmd_callback)
1822865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
1832865d42cSLarry Finger 	else
1842865d42cSLarry Finger 		pcmd_callback(padapter, pcmd);
1852865d42cSLarry Finger 	return H2C_SUCCESS;
1862865d42cSLarry Finger }
1872865d42cSLarry Finger 
1882865d42cSLarry Finger static u8 read_rfreg_hdl(struct _adapter *padapter, u8 *pbuf)
1892865d42cSLarry Finger {
1902865d42cSLarry Finger 	u32 val;
1912865d42cSLarry Finger 	void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj *pcmd);
1922865d42cSLarry Finger 	struct cmd_obj *pcmd  = (struct cmd_obj *)pbuf;
1932865d42cSLarry Finger 
1942865d42cSLarry Finger 	if (pcmd->rsp && pcmd->rspsz > 0)
1952865d42cSLarry Finger 		memcpy(pcmd->rsp, (u8 *)&val, pcmd->rspsz);
1962865d42cSLarry Finger 	pcmd_callback = cmd_callback[pcmd->cmdcode].callback;
1977fcf92c0SJuliana Rodrigues 	if (!pcmd_callback)
1982865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
1992865d42cSLarry Finger 	else
2002865d42cSLarry Finger 		pcmd_callback(padapter, pcmd);
2012865d42cSLarry Finger 	return H2C_SUCCESS;
2022865d42cSLarry Finger }
2032865d42cSLarry Finger 
2042865d42cSLarry Finger static u8 write_rfreg_hdl(struct _adapter *padapter, u8 *pbuf)
2052865d42cSLarry Finger {
2062865d42cSLarry Finger 	void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj *pcmd);
2072865d42cSLarry Finger 	struct cmd_obj *pcmd  = (struct cmd_obj *)pbuf;
2082865d42cSLarry Finger 
2092865d42cSLarry Finger 	pcmd_callback = cmd_callback[pcmd->cmdcode].callback;
2107fcf92c0SJuliana Rodrigues 	if (!pcmd_callback)
2112865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
2122865d42cSLarry Finger 	else
2132865d42cSLarry Finger 		pcmd_callback(padapter, pcmd);
2142865d42cSLarry Finger 	return H2C_SUCCESS;
2152865d42cSLarry Finger }
2162865d42cSLarry Finger 
2172865d42cSLarry Finger static u8 sys_suspend_hdl(struct _adapter *padapter, u8 *pbuf)
2182865d42cSLarry Finger {
2192865d42cSLarry Finger 	struct cmd_obj *pcmd  = (struct cmd_obj *)pbuf;
2202865d42cSLarry Finger 
2212865d42cSLarry Finger 	r8712_free_cmd_obj(pcmd);
2222865d42cSLarry Finger 	return H2C_SUCCESS;
2232865d42cSLarry Finger }
2242865d42cSLarry Finger 
2252865d42cSLarry Finger static struct cmd_obj *cmd_hdl_filter(struct _adapter *padapter,
2262865d42cSLarry Finger 				      struct cmd_obj *pcmd)
2272865d42cSLarry Finger {
2282865d42cSLarry Finger 	struct cmd_obj *pcmd_r;
2292865d42cSLarry Finger 
2307fcf92c0SJuliana Rodrigues 	if (!pcmd)
2312865d42cSLarry Finger 		return pcmd;
2322865d42cSLarry Finger 	pcmd_r = NULL;
2332865d42cSLarry Finger 
2342865d42cSLarry Finger 	switch (pcmd->cmdcode) {
2352865d42cSLarry Finger 	case GEN_CMD_CODE(_Read_MACREG):
2362865d42cSLarry Finger 		read_macreg_hdl(padapter, (u8 *)pcmd);
2372865d42cSLarry Finger 		pcmd_r = pcmd;
2382865d42cSLarry Finger 		break;
2392865d42cSLarry Finger 	case GEN_CMD_CODE(_Write_MACREG):
2402865d42cSLarry Finger 		write_macreg_hdl(padapter, (u8 *)pcmd);
2412865d42cSLarry Finger 		pcmd_r = pcmd;
2422865d42cSLarry Finger 		break;
2432865d42cSLarry Finger 	case GEN_CMD_CODE(_Read_BBREG):
2442865d42cSLarry Finger 		read_bbreg_hdl(padapter, (u8 *)pcmd);
2452865d42cSLarry Finger 		break;
2462865d42cSLarry Finger 	case GEN_CMD_CODE(_Write_BBREG):
2472865d42cSLarry Finger 		write_bbreg_hdl(padapter, (u8 *)pcmd);
2482865d42cSLarry Finger 		break;
2492865d42cSLarry Finger 	case GEN_CMD_CODE(_Read_RFREG):
2502865d42cSLarry Finger 		read_rfreg_hdl(padapter, (u8 *)pcmd);
2512865d42cSLarry Finger 		break;
2522865d42cSLarry Finger 	case GEN_CMD_CODE(_Write_RFREG):
2532865d42cSLarry Finger 		write_rfreg_hdl(padapter, (u8 *)pcmd);
2542865d42cSLarry Finger 		break;
2552865d42cSLarry Finger 	case GEN_CMD_CODE(_SetUsbSuspend):
2562865d42cSLarry Finger 		sys_suspend_hdl(padapter, (u8 *)pcmd);
2572865d42cSLarry Finger 		break;
2582865d42cSLarry Finger 	case GEN_CMD_CODE(_JoinBss):
2592865d42cSLarry Finger 		r8712_joinbss_reset(padapter);
2602865d42cSLarry Finger 		/* Before set JoinBss_CMD to FW, driver must ensure FW is in
2612865d42cSLarry Finger 		 * PS_MODE_ACTIVE. Directly write rpwm to radio on and assign
2622865d42cSLarry Finger 		 * new pwr_mode to Driver, instead of use workitem to change
263ed9c838aSPunit Vara 		 * state.
264ed9c838aSPunit Vara 		 */
2652865d42cSLarry Finger 		if (padapter->pwrctrlpriv.pwr_mode > PS_MODE_ACTIVE) {
2662865d42cSLarry Finger 			padapter->pwrctrlpriv.pwr_mode = PS_MODE_ACTIVE;
2672865d42cSLarry Finger 			_enter_pwrlock(&(padapter->pwrctrlpriv.lock));
2682865d42cSLarry Finger 			r8712_set_rpwm(padapter, PS_STATE_S4);
2692865d42cSLarry Finger 			up(&(padapter->pwrctrlpriv.lock));
2702865d42cSLarry Finger 		}
2712865d42cSLarry Finger 		pcmd_r = pcmd;
2722865d42cSLarry Finger 		break;
2732865d42cSLarry Finger 	case _DRV_INT_CMD_:
2742865d42cSLarry Finger 		r871x_internal_cmd_hdl(padapter, pcmd->parmbuf);
2752865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
2762865d42cSLarry Finger 		pcmd_r = NULL;
2772865d42cSLarry Finger 		break;
2782865d42cSLarry Finger 	default:
2792865d42cSLarry Finger 		pcmd_r = pcmd;
2802865d42cSLarry Finger 		break;
2812865d42cSLarry Finger 	}
2822865d42cSLarry Finger 	return pcmd_r; /* if returning pcmd_r == NULL, pcmd must be free. */
2832865d42cSLarry Finger }
2842865d42cSLarry Finger 
2852865d42cSLarry Finger static u8 check_cmd_fifo(struct _adapter *padapter, uint sz)
2862865d42cSLarry Finger {
2878ffca9eaSPeter Senna Tschudin 	return _SUCCESS;
2882865d42cSLarry Finger }
2892865d42cSLarry Finger 
2902865d42cSLarry Finger u8 r8712_fw_cmd(struct _adapter *pAdapter, u32 cmd)
2912865d42cSLarry Finger {
2922865d42cSLarry Finger 	int pollingcnts = 50;
2932865d42cSLarry Finger 
2942865d42cSLarry Finger 	r8712_write32(pAdapter, IOCMD_CTRL_REG, cmd);
2952865d42cSLarry Finger 	msleep(100);
29697e2ba90SRakhi Sharma 	while ((r8712_read32(pAdapter, IOCMD_CTRL_REG != 0)) &&
2972865d42cSLarry Finger 	       (pollingcnts > 0)) {
2982865d42cSLarry Finger 		pollingcnts--;
2992865d42cSLarry Finger 		msleep(20);
3002865d42cSLarry Finger 	}
3012865d42cSLarry Finger 	if (pollingcnts == 0)
3022865d42cSLarry Finger 		return false;
3032865d42cSLarry Finger 	return true;
3042865d42cSLarry Finger }
3052865d42cSLarry Finger 
3062865d42cSLarry Finger void r8712_fw_cmd_data(struct _adapter *pAdapter, u32 *value, u8 flag)
3072865d42cSLarry Finger {
3082865d42cSLarry Finger 	if (flag == 0)	/* set */
3092865d42cSLarry Finger 		r8712_write32(pAdapter, IOCMD_DATA_REG, *value);
3102865d42cSLarry Finger 	else		/* query */
3112865d42cSLarry Finger 		*value = r8712_read32(pAdapter, IOCMD_DATA_REG);
3122865d42cSLarry Finger }
3132865d42cSLarry Finger 
3142865d42cSLarry Finger int r8712_cmd_thread(void *context)
3152865d42cSLarry Finger {
3162865d42cSLarry Finger 	struct cmd_obj *pcmd;
317e29d3ebcSSudip Mukherjee 	unsigned int cmdsz, wr_sz, *pcmdbuf;
3182865d42cSLarry Finger 	struct tx_desc *pdesc;
3192865d42cSLarry Finger 	void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj *pcmd);
32056238e45SBhaktipriya Shridhar 	struct _adapter *padapter = context;
3212865d42cSLarry Finger 	struct	cmd_priv	*pcmdpriv = &(padapter->cmdpriv);
3222865d42cSLarry Finger 
323fee51243SJames A Shackleford 	allow_signal(SIGTERM);
3242865d42cSLarry Finger 	while (1) {
3252865d42cSLarry Finger 		if ((_down_sema(&(pcmdpriv->cmd_queue_sema))) == _FAIL)
3262865d42cSLarry Finger 			break;
3271ca96884SLuis de Bethencourt 		if (padapter->bDriverStopped || padapter->bSurpriseRemoved)
3282865d42cSLarry Finger 			break;
3292865d42cSLarry Finger 		if (r8712_register_cmd_alive(padapter) != _SUCCESS)
3302865d42cSLarry Finger 			continue;
3312865d42cSLarry Finger _next:
3322865d42cSLarry Finger 		pcmd = r8712_dequeue_cmd(&(pcmdpriv->cmd_queue));
3332865d42cSLarry Finger 		if (!(pcmd)) {
3342865d42cSLarry Finger 			r8712_unregister_cmd_alive(padapter);
3352865d42cSLarry Finger 			continue;
3362865d42cSLarry Finger 		}
3372865d42cSLarry Finger 		pcmdbuf = (unsigned int *)pcmdpriv->cmd_buf;
3382865d42cSLarry Finger 		pdesc = (struct tx_desc *)pcmdbuf;
3392865d42cSLarry Finger 		memset(pdesc, 0, TXDESC_SIZE);
3402865d42cSLarry Finger 		pcmd = cmd_hdl_filter(padapter, pcmd);
3412865d42cSLarry Finger 		if (pcmd) { /* if pcmd != NULL, cmd will be handled by f/w */
342adc08cc4SShivani Bhardwaj 			struct dvobj_priv *pdvobj = &padapter->dvobjpriv;
3432865d42cSLarry Finger 			u8 blnPending = 0;
34402a29d2dSTapasweni Pathak 
3452865d42cSLarry Finger 			pcmdpriv->cmd_issued_cnt++;
346d913e54eSJames A Shackleford 			cmdsz = round_up(pcmd->cmdsz, 8);
3472865d42cSLarry Finger 			wr_sz = TXDESC_SIZE + 8 + cmdsz;
3482865d42cSLarry Finger 			pdesc->txdw0 |= cpu_to_le32((wr_sz - TXDESC_SIZE) &
3492865d42cSLarry Finger 						     0x0000ffff);
3502865d42cSLarry Finger 			if (pdvobj->ishighspeed) {
3512865d42cSLarry Finger 				if ((wr_sz % 512) == 0)
3522865d42cSLarry Finger 					blnPending = 1;
3532865d42cSLarry Finger 			} else {
3542865d42cSLarry Finger 				if ((wr_sz % 64) == 0)
3552865d42cSLarry Finger 					blnPending = 1;
3562865d42cSLarry Finger 			}
3572865d42cSLarry Finger 			if (blnPending) /* 32 bytes for TX Desc - 8 offset */
3582865d42cSLarry Finger 				pdesc->txdw0 |= cpu_to_le32(((TXDESC_SIZE +
3592865d42cSLarry Finger 						OFFSET_SZ + 8) << OFFSET_SHT) &
3602865d42cSLarry Finger 						0x00ff0000);
3612865d42cSLarry Finger 			else {
3622865d42cSLarry Finger 				pdesc->txdw0 |= cpu_to_le32(((TXDESC_SIZE +
3632865d42cSLarry Finger 							      OFFSET_SZ) <<
3642865d42cSLarry Finger 							      OFFSET_SHT) &
3652865d42cSLarry Finger 							      0x00ff0000);
3662865d42cSLarry Finger 			}
3672865d42cSLarry Finger 			pdesc->txdw0 |= cpu_to_le32(OWN | FSG | LSG);
3682865d42cSLarry Finger 			pdesc->txdw1 |= cpu_to_le32((0x13 << QSEL_SHT) &
3692865d42cSLarry Finger 						    0x00001f00);
3702865d42cSLarry Finger 			pcmdbuf += (TXDESC_SIZE >> 2);
3712865d42cSLarry Finger 			*pcmdbuf = cpu_to_le32((cmdsz & 0x0000ffff) |
3722865d42cSLarry Finger 					       (pcmd->cmdcode << 16) |
3732865d42cSLarry Finger 					       (pcmdpriv->cmd_seq << 24));
374be10ac2bSJustin P. Mattock 			pcmdbuf += 2; /* 8 bytes alignment */
3752865d42cSLarry Finger 			memcpy((u8 *)pcmdbuf, pcmd->parmbuf, pcmd->cmdsz);
3762865d42cSLarry Finger 			while (check_cmd_fifo(padapter, wr_sz) == _FAIL) {
3771ca96884SLuis de Bethencourt 				if (padapter->bDriverStopped ||
3781ca96884SLuis de Bethencourt 				    padapter->bSurpriseRemoved)
3792865d42cSLarry Finger 					break;
3802865d42cSLarry Finger 				msleep(100);
3812865d42cSLarry Finger 				continue;
3822865d42cSLarry Finger 			}
3832865d42cSLarry Finger 			if (blnPending)
3842865d42cSLarry Finger 				wr_sz += 8;   /* Append 8 bytes */
3852865d42cSLarry Finger 			r8712_write_mem(padapter, RTL8712_DMA_H2CCMD, wr_sz,
3862865d42cSLarry Finger 				       (u8 *)pdesc);
3872865d42cSLarry Finger 			pcmdpriv->cmd_seq++;
3882865d42cSLarry Finger 			if (pcmd->cmdcode == GEN_CMD_CODE(_CreateBss)) {
3892865d42cSLarry Finger 				pcmd->res = H2C_SUCCESS;
3902865d42cSLarry Finger 				pcmd_callback = cmd_callback[pcmd->
3912865d42cSLarry Finger 						cmdcode].callback;
3922865d42cSLarry Finger 				if (pcmd_callback)
3932865d42cSLarry Finger 					pcmd_callback(padapter, pcmd);
3942865d42cSLarry Finger 				continue;
3952865d42cSLarry Finger 			}
3962865d42cSLarry Finger 			if (pcmd->cmdcode == GEN_CMD_CODE(_SetPwrMode)) {
3972865d42cSLarry Finger 				if (padapter->pwrctrlpriv.bSleep) {
3982865d42cSLarry Finger 					_enter_pwrlock(&(padapter->
3992865d42cSLarry Finger 						       pwrctrlpriv.lock));
4002865d42cSLarry Finger 					r8712_set_rpwm(padapter, PS_STATE_S2);
4012865d42cSLarry Finger 					up(&padapter->pwrctrlpriv.lock);
4022865d42cSLarry Finger 				}
4032865d42cSLarry Finger 			}
4042865d42cSLarry Finger 			r8712_free_cmd_obj(pcmd);
405df353f61SJames A Shackleford 			if (list_empty(&pcmdpriv->cmd_queue.queue)) {
4062865d42cSLarry Finger 				r8712_unregister_cmd_alive(padapter);
4072865d42cSLarry Finger 				continue;
408168a2c10SLuis de Bethencourt 			} else {
4092865d42cSLarry Finger 				goto _next;
410168a2c10SLuis de Bethencourt 			}
411168a2c10SLuis de Bethencourt 		} else {
4122865d42cSLarry Finger 			goto _next;
413168a2c10SLuis de Bethencourt 		}
4142865d42cSLarry Finger 		flush_signals_thread();
4152865d42cSLarry Finger 	}
4162865d42cSLarry Finger 	/* free all cmd_obj resources */
4172865d42cSLarry Finger 	do {
4182865d42cSLarry Finger 		pcmd = r8712_dequeue_cmd(&(pcmdpriv->cmd_queue));
4197fcf92c0SJuliana Rodrigues 		if (!pcmd)
4202865d42cSLarry Finger 			break;
4212865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
4222865d42cSLarry Finger 	} while (1);
4232865d42cSLarry Finger 	up(&pcmdpriv->terminate_cmdthread_sema);
4242865d42cSLarry Finger 	thread_exit();
4252865d42cSLarry Finger }
4262865d42cSLarry Finger 
4272865d42cSLarry Finger void r8712_event_handle(struct _adapter *padapter, uint *peventbuf)
4282865d42cSLarry Finger {
4292865d42cSLarry Finger 	u8 evt_code, evt_seq;
4302865d42cSLarry Finger 	u16 evt_sz;
4312865d42cSLarry Finger 	void (*event_callback)(struct _adapter *dev, u8 *pbuf);
4322865d42cSLarry Finger 	struct	evt_priv *pevt_priv = &(padapter->evtpriv);
4332865d42cSLarry Finger 
4347fcf92c0SJuliana Rodrigues 	if (!peventbuf)
4352865d42cSLarry Finger 		goto _abort_event_;
4362865d42cSLarry Finger 	evt_sz = (u16)(le32_to_cpu(*peventbuf) & 0xffff);
4372865d42cSLarry Finger 	evt_seq = (u8)((le32_to_cpu(*peventbuf) >> 24) & 0x7f);
4382865d42cSLarry Finger 	evt_code = (u8)((le32_to_cpu(*peventbuf) >> 16) & 0xff);
4392865d42cSLarry Finger 	/* checking event sequence... */
4402865d42cSLarry Finger 	if ((evt_seq & 0x7f) != pevt_priv->event_seq) {
4412865d42cSLarry Finger 		pevt_priv->event_seq = ((evt_seq + 1) & 0x7f);
4422865d42cSLarry Finger 		goto _abort_event_;
4432865d42cSLarry Finger 	}
4442865d42cSLarry Finger 	/* checking if event code is valid */
4452865d42cSLarry Finger 	if (evt_code >= MAX_C2HEVT) {
4462865d42cSLarry Finger 		pevt_priv->event_seq = ((evt_seq + 1) & 0x7f);
4472865d42cSLarry Finger 		goto _abort_event_;
4482865d42cSLarry Finger 	} else if ((evt_code == GEN_EVT_CODE(_Survey)) &&
4492865d42cSLarry Finger 		   (evt_sz > sizeof(struct wlan_bssid_ex))) {
4502865d42cSLarry Finger 		pevt_priv->event_seq = ((evt_seq + 1) & 0x7f);
4512865d42cSLarry Finger 		goto _abort_event_;
4522865d42cSLarry Finger 	}
4532865d42cSLarry Finger 	/* checking if event size match the event parm size */
4542865d42cSLarry Finger 	if ((wlanevents[evt_code].parmsize) &&
4552865d42cSLarry Finger 	    (wlanevents[evt_code].parmsize != evt_sz)) {
4562865d42cSLarry Finger 		pevt_priv->event_seq = ((evt_seq + 1) & 0x7f);
4572865d42cSLarry Finger 		goto _abort_event_;
4582865d42cSLarry Finger 	} else if ((evt_sz == 0) && (evt_code != GEN_EVT_CODE(_WPS_PBC))) {
4592865d42cSLarry Finger 		pevt_priv->event_seq = ((evt_seq + 1) & 0x7f);
4602865d42cSLarry Finger 		goto _abort_event_;
4612865d42cSLarry Finger 	}
4622865d42cSLarry Finger 	pevt_priv->event_seq++;	/* update evt_seq */
4632865d42cSLarry Finger 	if (pevt_priv->event_seq > 127)
4642865d42cSLarry Finger 		pevt_priv->event_seq = 0;
46557b6686eSTapasweni Pathak 	/* move to event content, 8 bytes alignment */
46657b6686eSTapasweni Pathak 	peventbuf = peventbuf + 2;
4672865d42cSLarry Finger 	event_callback = wlanevents[evt_code].event_callback;
4682865d42cSLarry Finger 	if (event_callback)
4692865d42cSLarry Finger 		event_callback(padapter, (u8 *)peventbuf);
4702865d42cSLarry Finger 	pevt_priv->evt_done_cnt++;
4712865d42cSLarry Finger _abort_event_:
4722865d42cSLarry Finger 	return;
4732865d42cSLarry Finger }
474