12865d42cSLarry Finger /****************************************************************************** 22865d42cSLarry Finger * rtl8712_cmd.c 32865d42cSLarry Finger * 42865d42cSLarry Finger * Copyright(c) 2007 - 2010 Realtek Corporation. All rights reserved. 52865d42cSLarry Finger * Linux device driver for RTL8192SU 62865d42cSLarry Finger * 72865d42cSLarry Finger * This program is free software; you can redistribute it and/or modify it 82865d42cSLarry Finger * under the terms of version 2 of the GNU General Public License as 92865d42cSLarry Finger * published by the Free Software Foundation. 102865d42cSLarry Finger * 112865d42cSLarry Finger * This program is distributed in the hope that it will be useful, but WITHOUT 122865d42cSLarry Finger * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or 132865d42cSLarry Finger * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for 142865d42cSLarry Finger * more details. 152865d42cSLarry Finger * 162865d42cSLarry Finger * You should have received a copy of the GNU General Public License along with 172865d42cSLarry Finger * this program; if not, write to the Free Software Foundation, Inc., 182865d42cSLarry Finger * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA 192865d42cSLarry Finger * 202865d42cSLarry Finger * Modifications for inclusion into the Linux staging tree are 212865d42cSLarry Finger * Copyright(c) 2010 Larry Finger. All rights reserved. 222865d42cSLarry Finger * 232865d42cSLarry Finger * Contact information: 242865d42cSLarry Finger * WLAN FAE <wlanfae@realtek.com>. 252865d42cSLarry Finger * Larry Finger <Larry.Finger@lwfinger.net> 262865d42cSLarry Finger * 272865d42cSLarry Finger ******************************************************************************/ 282865d42cSLarry Finger 292865d42cSLarry Finger #define _RTL8712_CMD_C_ 302865d42cSLarry Finger 31359140aaSAli Bahar #include <linux/compiler.h> 32359140aaSAli Bahar #include <linux/kernel.h> 33359140aaSAli Bahar #include <linux/errno.h> 34359140aaSAli Bahar #include <linux/slab.h> 35359140aaSAli Bahar #include <linux/module.h> 36359140aaSAli Bahar #include <linux/kref.h> 37359140aaSAli Bahar #include <linux/netdevice.h> 38359140aaSAli Bahar #include <linux/skbuff.h> 39359140aaSAli Bahar #include <linux/usb.h> 40359140aaSAli Bahar #include <linux/usb/ch9.h> 41359140aaSAli Bahar #include <linux/circ_buf.h> 42359140aaSAli Bahar #include <linux/uaccess.h> 43359140aaSAli Bahar #include <asm/byteorder.h> 44359140aaSAli Bahar #include <linux/atomic.h> 45359140aaSAli Bahar #include <linux/semaphore.h> 46359140aaSAli Bahar #include <linux/rtnetlink.h> 47359140aaSAli Bahar 482865d42cSLarry Finger #include "osdep_service.h" 492865d42cSLarry Finger #include "drv_types.h" 502865d42cSLarry Finger #include "recv_osdep.h" 512865d42cSLarry Finger #include "mlme_osdep.h" 522865d42cSLarry Finger #include "rtl871x_ioctl_set.h" 532865d42cSLarry Finger 542865d42cSLarry Finger static void check_hw_pbc(struct _adapter *padapter) 552865d42cSLarry Finger { 562865d42cSLarry Finger u8 tmp1byte; 572865d42cSLarry Finger 582865d42cSLarry Finger r8712_write8(padapter, MAC_PINMUX_CTRL, (GPIOMUX_EN | GPIOSEL_GPIO)); 592865d42cSLarry Finger tmp1byte = r8712_read8(padapter, GPIO_IO_SEL); 602865d42cSLarry Finger tmp1byte &= ~(HAL_8192S_HW_GPIO_WPS_BIT); 612865d42cSLarry Finger r8712_write8(padapter, GPIO_IO_SEL, tmp1byte); 622865d42cSLarry Finger tmp1byte = r8712_read8(padapter, GPIO_CTRL); 632865d42cSLarry Finger if (tmp1byte == 0xff) 642865d42cSLarry Finger return; 652865d42cSLarry Finger if (tmp1byte&HAL_8192S_HW_GPIO_WPS_BIT) { 662865d42cSLarry Finger /* Here we only set bPbcPressed to true 672865d42cSLarry Finger * After trigger PBC, the variable will be set to false */ 682865d42cSLarry Finger DBG_8712("CheckPbcGPIO - PBC is pressed !!!!\n"); 692865d42cSLarry Finger /* 0 is the default value and it means the application monitors 70be10ac2bSJustin P. Mattock * the HW PBC doesn't provide its pid to driver. */ 712865d42cSLarry Finger if (padapter->pid == 0) 722865d42cSLarry Finger return; 732865d42cSLarry Finger kill_pid(find_vpid(padapter->pid), SIGUSR1, 1); 742865d42cSLarry Finger } 752865d42cSLarry Finger } 762865d42cSLarry Finger 772865d42cSLarry Finger /* query rx phy status from fw. 782865d42cSLarry Finger * Adhoc mode: beacon. 792865d42cSLarry Finger * Infrastructure mode: beacon , data. */ 802865d42cSLarry Finger static void query_fw_rx_phy_status(struct _adapter *padapter) 812865d42cSLarry Finger { 822865d42cSLarry Finger u32 val32 = 0; 832865d42cSLarry Finger int pollingcnts = 50; 842865d42cSLarry Finger 852865d42cSLarry Finger if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) == true) { 862865d42cSLarry Finger r8712_write32(padapter, IOCMD_CTRL_REG, 0xf4000001); 872865d42cSLarry Finger msleep(100); 882865d42cSLarry Finger /* Wait FW complete IO Cmd */ 892865d42cSLarry Finger while ((r8712_read32(padapter, IOCMD_CTRL_REG)) && 902865d42cSLarry Finger (pollingcnts > 0)) { 912865d42cSLarry Finger pollingcnts--; 922865d42cSLarry Finger msleep(20); 932865d42cSLarry Finger } 942865d42cSLarry Finger if (pollingcnts != 0) 952865d42cSLarry Finger val32 = r8712_read32(padapter, IOCMD_DATA_REG); 962865d42cSLarry Finger else /* time out */ 972865d42cSLarry Finger val32 = 0; 982865d42cSLarry Finger val32 = val32 >> 4; 992865d42cSLarry Finger padapter->recvpriv.fw_rssi = 1002865d42cSLarry Finger (u8)r8712_signal_scale_mapping(val32); 1012865d42cSLarry Finger } 1022865d42cSLarry Finger } 1032865d42cSLarry Finger 1042865d42cSLarry Finger /* check mlme, hw, phy, or dynamic algorithm status. */ 1052865d42cSLarry Finger static void StatusWatchdogCallback(struct _adapter *padapter) 1062865d42cSLarry Finger { 1072865d42cSLarry Finger check_hw_pbc(padapter); 1082865d42cSLarry Finger query_fw_rx_phy_status(padapter); 1092865d42cSLarry Finger } 1102865d42cSLarry Finger 1112865d42cSLarry Finger static void r871x_internal_cmd_hdl(struct _adapter *padapter, u8 *pbuf) 1122865d42cSLarry Finger { 1132865d42cSLarry Finger struct drvint_cmd_parm *pdrvcmd; 1142865d42cSLarry Finger 1152865d42cSLarry Finger if (!pbuf) 1162865d42cSLarry Finger return; 1172865d42cSLarry Finger pdrvcmd = (struct drvint_cmd_parm *)pbuf; 1182865d42cSLarry Finger switch (pdrvcmd->i_cid) { 1192865d42cSLarry Finger case WDG_WK_CID: 1202865d42cSLarry Finger StatusWatchdogCallback(padapter); 1212865d42cSLarry Finger break; 1222865d42cSLarry Finger default: 1232865d42cSLarry Finger break; 1242865d42cSLarry Finger } 1252865d42cSLarry Finger kfree(pdrvcmd->pbuf); 1262865d42cSLarry Finger } 1272865d42cSLarry Finger 1282865d42cSLarry Finger static u8 read_macreg_hdl(struct _adapter *padapter, u8 *pbuf) 1292865d42cSLarry Finger { 1302865d42cSLarry Finger void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj *pcmd); 1312865d42cSLarry Finger struct cmd_obj *pcmd = (struct cmd_obj *)pbuf; 1322865d42cSLarry Finger 1332865d42cSLarry Finger /* invoke cmd->callback function */ 1342865d42cSLarry Finger pcmd_callback = cmd_callback[pcmd->cmdcode].callback; 1352865d42cSLarry Finger if (pcmd_callback == NULL) 1362865d42cSLarry Finger r8712_free_cmd_obj(pcmd); 1372865d42cSLarry Finger else 1382865d42cSLarry Finger pcmd_callback(padapter, pcmd); 1392865d42cSLarry Finger return H2C_SUCCESS; 1402865d42cSLarry Finger } 1412865d42cSLarry Finger 1422865d42cSLarry Finger static u8 write_macreg_hdl(struct _adapter *padapter, u8 *pbuf) 1432865d42cSLarry Finger { 1442865d42cSLarry Finger void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj *pcmd); 1452865d42cSLarry Finger struct cmd_obj *pcmd = (struct cmd_obj *)pbuf; 1462865d42cSLarry Finger 1472865d42cSLarry Finger /* invoke cmd->callback function */ 1482865d42cSLarry Finger pcmd_callback = cmd_callback[pcmd->cmdcode].callback; 1492865d42cSLarry Finger if (pcmd_callback == NULL) 1502865d42cSLarry Finger r8712_free_cmd_obj(pcmd); 1512865d42cSLarry Finger else 1522865d42cSLarry Finger pcmd_callback(padapter, pcmd); 1532865d42cSLarry Finger return H2C_SUCCESS; 1542865d42cSLarry Finger } 1552865d42cSLarry Finger 1562865d42cSLarry Finger static u8 read_bbreg_hdl(struct _adapter *padapter, u8 *pbuf) 1572865d42cSLarry Finger { 1582865d42cSLarry Finger u32 val; 1592865d42cSLarry Finger void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj *pcmd); 1602865d42cSLarry Finger struct readBB_parm *prdbbparm; 1612865d42cSLarry Finger struct cmd_obj *pcmd = (struct cmd_obj *)pbuf; 1622865d42cSLarry Finger 1632865d42cSLarry Finger prdbbparm = (struct readBB_parm *)pcmd->parmbuf; 1642865d42cSLarry Finger if (pcmd->rsp && pcmd->rspsz > 0) 1652865d42cSLarry Finger memcpy(pcmd->rsp, (u8 *)&val, pcmd->rspsz); 1662865d42cSLarry Finger pcmd_callback = cmd_callback[pcmd->cmdcode].callback; 1672865d42cSLarry Finger if (pcmd_callback == NULL) 1682865d42cSLarry Finger r8712_free_cmd_obj(pcmd); 1692865d42cSLarry Finger else 1702865d42cSLarry Finger pcmd_callback(padapter, pcmd); 1712865d42cSLarry Finger return H2C_SUCCESS; 1722865d42cSLarry Finger } 1732865d42cSLarry Finger 1742865d42cSLarry Finger static u8 write_bbreg_hdl(struct _adapter *padapter, u8 *pbuf) 1752865d42cSLarry Finger { 1762865d42cSLarry Finger void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj *pcmd); 1772865d42cSLarry Finger struct writeBB_parm *pwritebbparm; 1782865d42cSLarry Finger struct cmd_obj *pcmd = (struct cmd_obj *)pbuf; 1792865d42cSLarry Finger 1802865d42cSLarry Finger pwritebbparm = (struct writeBB_parm *)pcmd->parmbuf; 1812865d42cSLarry Finger pcmd_callback = cmd_callback[pcmd->cmdcode].callback; 1822865d42cSLarry Finger if (pcmd_callback == NULL) 1832865d42cSLarry Finger r8712_free_cmd_obj(pcmd); 1842865d42cSLarry Finger else 1852865d42cSLarry Finger pcmd_callback(padapter, pcmd); 1862865d42cSLarry Finger return H2C_SUCCESS; 1872865d42cSLarry Finger } 1882865d42cSLarry Finger 1892865d42cSLarry Finger static u8 read_rfreg_hdl(struct _adapter *padapter, u8 *pbuf) 1902865d42cSLarry Finger { 1912865d42cSLarry Finger u32 val; 1922865d42cSLarry Finger void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj *pcmd); 1932865d42cSLarry Finger struct readRF_parm *prdrfparm; 1942865d42cSLarry Finger struct cmd_obj *pcmd = (struct cmd_obj *)pbuf; 1952865d42cSLarry Finger 1962865d42cSLarry Finger prdrfparm = (struct readRF_parm *)pcmd->parmbuf; 1972865d42cSLarry Finger if (pcmd->rsp && pcmd->rspsz > 0) 1982865d42cSLarry Finger memcpy(pcmd->rsp, (u8 *)&val, pcmd->rspsz); 1992865d42cSLarry Finger pcmd_callback = cmd_callback[pcmd->cmdcode].callback; 2002865d42cSLarry Finger if (pcmd_callback == NULL) 2012865d42cSLarry Finger r8712_free_cmd_obj(pcmd); 2022865d42cSLarry Finger else 2032865d42cSLarry Finger pcmd_callback(padapter, pcmd); 2042865d42cSLarry Finger return H2C_SUCCESS; 2052865d42cSLarry Finger } 2062865d42cSLarry Finger 2072865d42cSLarry Finger static u8 write_rfreg_hdl(struct _adapter *padapter, u8 *pbuf) 2082865d42cSLarry Finger { 2092865d42cSLarry Finger void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj *pcmd); 2102865d42cSLarry Finger struct writeRF_parm *pwriterfparm; 2112865d42cSLarry Finger struct cmd_obj *pcmd = (struct cmd_obj *)pbuf; 2122865d42cSLarry Finger 2132865d42cSLarry Finger pwriterfparm = (struct writeRF_parm *)pcmd->parmbuf; 2142865d42cSLarry Finger pcmd_callback = cmd_callback[pcmd->cmdcode].callback; 2152865d42cSLarry Finger if (pcmd_callback == NULL) 2162865d42cSLarry Finger r8712_free_cmd_obj(pcmd); 2172865d42cSLarry Finger else 2182865d42cSLarry Finger pcmd_callback(padapter, pcmd); 2192865d42cSLarry Finger return H2C_SUCCESS; 2202865d42cSLarry Finger } 2212865d42cSLarry Finger 2222865d42cSLarry Finger static u8 sys_suspend_hdl(struct _adapter *padapter, u8 *pbuf) 2232865d42cSLarry Finger { 2242865d42cSLarry Finger struct cmd_obj *pcmd = (struct cmd_obj *)pbuf; 2252865d42cSLarry Finger struct usb_suspend_parm *psetusbsuspend; 2262865d42cSLarry Finger 2272865d42cSLarry Finger psetusbsuspend = (struct usb_suspend_parm *)pcmd->parmbuf; 2282865d42cSLarry Finger r8712_free_cmd_obj(pcmd); 2292865d42cSLarry Finger return H2C_SUCCESS; 2302865d42cSLarry Finger } 2312865d42cSLarry Finger 2322865d42cSLarry Finger static struct cmd_obj *cmd_hdl_filter(struct _adapter *padapter, 2332865d42cSLarry Finger struct cmd_obj *pcmd) 2342865d42cSLarry Finger { 2352865d42cSLarry Finger struct cmd_obj *pcmd_r; 2362865d42cSLarry Finger 2372865d42cSLarry Finger if (pcmd == NULL) 2382865d42cSLarry Finger return pcmd; 2392865d42cSLarry Finger pcmd_r = NULL; 2402865d42cSLarry Finger 2412865d42cSLarry Finger switch (pcmd->cmdcode) { 2422865d42cSLarry Finger case GEN_CMD_CODE(_Read_MACREG): 2432865d42cSLarry Finger read_macreg_hdl(padapter, (u8 *)pcmd); 2442865d42cSLarry Finger pcmd_r = pcmd; 2452865d42cSLarry Finger break; 2462865d42cSLarry Finger case GEN_CMD_CODE(_Write_MACREG): 2472865d42cSLarry Finger write_macreg_hdl(padapter, (u8 *)pcmd); 2482865d42cSLarry Finger pcmd_r = pcmd; 2492865d42cSLarry Finger break; 2502865d42cSLarry Finger case GEN_CMD_CODE(_Read_BBREG): 2512865d42cSLarry Finger read_bbreg_hdl(padapter, (u8 *)pcmd); 2522865d42cSLarry Finger break; 2532865d42cSLarry Finger case GEN_CMD_CODE(_Write_BBREG): 2542865d42cSLarry Finger write_bbreg_hdl(padapter, (u8 *)pcmd); 2552865d42cSLarry Finger break; 2562865d42cSLarry Finger case GEN_CMD_CODE(_Read_RFREG): 2572865d42cSLarry Finger read_rfreg_hdl(padapter, (u8 *)pcmd); 2582865d42cSLarry Finger break; 2592865d42cSLarry Finger case GEN_CMD_CODE(_Write_RFREG): 2602865d42cSLarry Finger write_rfreg_hdl(padapter, (u8 *)pcmd); 2612865d42cSLarry Finger break; 2622865d42cSLarry Finger case GEN_CMD_CODE(_SetUsbSuspend): 2632865d42cSLarry Finger sys_suspend_hdl(padapter, (u8 *)pcmd); 2642865d42cSLarry Finger break; 2652865d42cSLarry Finger case GEN_CMD_CODE(_JoinBss): 2662865d42cSLarry Finger r8712_joinbss_reset(padapter); 2672865d42cSLarry Finger /* Before set JoinBss_CMD to FW, driver must ensure FW is in 2682865d42cSLarry Finger * PS_MODE_ACTIVE. Directly write rpwm to radio on and assign 2692865d42cSLarry Finger * new pwr_mode to Driver, instead of use workitem to change 2702865d42cSLarry Finger * state. */ 2712865d42cSLarry Finger if (padapter->pwrctrlpriv.pwr_mode > PS_MODE_ACTIVE) { 2722865d42cSLarry Finger padapter->pwrctrlpriv.pwr_mode = PS_MODE_ACTIVE; 2732865d42cSLarry Finger _enter_pwrlock(&(padapter->pwrctrlpriv.lock)); 2742865d42cSLarry Finger r8712_set_rpwm(padapter, PS_STATE_S4); 2752865d42cSLarry Finger up(&(padapter->pwrctrlpriv.lock)); 2762865d42cSLarry Finger } 2772865d42cSLarry Finger pcmd_r = pcmd; 2782865d42cSLarry Finger break; 2792865d42cSLarry Finger case _DRV_INT_CMD_: 2802865d42cSLarry Finger r871x_internal_cmd_hdl(padapter, pcmd->parmbuf); 2812865d42cSLarry Finger r8712_free_cmd_obj(pcmd); 2822865d42cSLarry Finger pcmd_r = NULL; 2832865d42cSLarry Finger break; 2842865d42cSLarry Finger default: 2852865d42cSLarry Finger pcmd_r = pcmd; 2862865d42cSLarry Finger break; 2872865d42cSLarry Finger } 2882865d42cSLarry Finger return pcmd_r; /* if returning pcmd_r == NULL, pcmd must be free. */ 2892865d42cSLarry Finger } 2902865d42cSLarry Finger 2912865d42cSLarry Finger static u8 check_cmd_fifo(struct _adapter *padapter, uint sz) 2922865d42cSLarry Finger { 2938ffca9eaSPeter Senna Tschudin return _SUCCESS; 2942865d42cSLarry Finger } 2952865d42cSLarry Finger 2962865d42cSLarry Finger u8 r8712_fw_cmd(struct _adapter *pAdapter, u32 cmd) 2972865d42cSLarry Finger { 2982865d42cSLarry Finger int pollingcnts = 50; 2992865d42cSLarry Finger 3002865d42cSLarry Finger r8712_write32(pAdapter, IOCMD_CTRL_REG, cmd); 3012865d42cSLarry Finger msleep(100); 3022865d42cSLarry Finger while ((0 != r8712_read32(pAdapter, IOCMD_CTRL_REG)) && 3032865d42cSLarry Finger (pollingcnts > 0)) { 3042865d42cSLarry Finger pollingcnts--; 3052865d42cSLarry Finger msleep(20); 3062865d42cSLarry Finger } 3072865d42cSLarry Finger if (pollingcnts == 0) 3082865d42cSLarry Finger return false; 3092865d42cSLarry Finger return true; 3102865d42cSLarry Finger } 3112865d42cSLarry Finger 3122865d42cSLarry Finger void r8712_fw_cmd_data(struct _adapter *pAdapter, u32 *value, u8 flag) 3132865d42cSLarry Finger { 3142865d42cSLarry Finger if (flag == 0) /* set */ 3152865d42cSLarry Finger r8712_write32(pAdapter, IOCMD_DATA_REG, *value); 3162865d42cSLarry Finger else /* query */ 3172865d42cSLarry Finger *value = r8712_read32(pAdapter, IOCMD_DATA_REG); 3182865d42cSLarry Finger } 3192865d42cSLarry Finger 3202865d42cSLarry Finger int r8712_cmd_thread(void *context) 3212865d42cSLarry Finger { 3222865d42cSLarry Finger struct cmd_obj *pcmd; 3232865d42cSLarry Finger unsigned int cmdsz, wr_sz, *pcmdbuf, *prspbuf; 3242865d42cSLarry Finger struct tx_desc *pdesc; 3252865d42cSLarry Finger void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj *pcmd); 3262865d42cSLarry Finger struct _adapter *padapter = (struct _adapter *)context; 3272865d42cSLarry Finger struct cmd_priv *pcmdpriv = &(padapter->cmdpriv); 3282865d42cSLarry Finger 3292865d42cSLarry Finger thread_enter(padapter); 3302865d42cSLarry Finger while (1) { 3312865d42cSLarry Finger if ((_down_sema(&(pcmdpriv->cmd_queue_sema))) == _FAIL) 3322865d42cSLarry Finger break; 3332865d42cSLarry Finger if ((padapter->bDriverStopped == true) || 3342865d42cSLarry Finger (padapter->bSurpriseRemoved == true)) 3352865d42cSLarry Finger break; 3362865d42cSLarry Finger if (r8712_register_cmd_alive(padapter) != _SUCCESS) 3372865d42cSLarry Finger continue; 3382865d42cSLarry Finger _next: 3392865d42cSLarry Finger pcmd = r8712_dequeue_cmd(&(pcmdpriv->cmd_queue)); 3402865d42cSLarry Finger if (!(pcmd)) { 3412865d42cSLarry Finger r8712_unregister_cmd_alive(padapter); 3422865d42cSLarry Finger continue; 3432865d42cSLarry Finger } 3442865d42cSLarry Finger pcmdbuf = (unsigned int *)pcmdpriv->cmd_buf; 3452865d42cSLarry Finger prspbuf = (unsigned int *)pcmdpriv->rsp_buf; 3462865d42cSLarry Finger pdesc = (struct tx_desc *)pcmdbuf; 3472865d42cSLarry Finger memset(pdesc, 0, TXDESC_SIZE); 3482865d42cSLarry Finger pcmd = cmd_hdl_filter(padapter, pcmd); 3492865d42cSLarry Finger if (pcmd) { /* if pcmd != NULL, cmd will be handled by f/w */ 3502865d42cSLarry Finger struct dvobj_priv *pdvobj = (struct dvobj_priv *) 3512865d42cSLarry Finger &padapter->dvobjpriv; 3522865d42cSLarry Finger u8 blnPending = 0; 3532865d42cSLarry Finger pcmdpriv->cmd_issued_cnt++; 3542865d42cSLarry Finger cmdsz = _RND8((pcmd->cmdsz)); /* _RND8 */ 3552865d42cSLarry Finger wr_sz = TXDESC_SIZE + 8 + cmdsz; 3562865d42cSLarry Finger pdesc->txdw0 |= cpu_to_le32((wr_sz-TXDESC_SIZE) & 3572865d42cSLarry Finger 0x0000ffff); 3582865d42cSLarry Finger if (pdvobj->ishighspeed) { 3592865d42cSLarry Finger if ((wr_sz % 512) == 0) 3602865d42cSLarry Finger blnPending = 1; 3612865d42cSLarry Finger } else { 3622865d42cSLarry Finger if ((wr_sz % 64) == 0) 3632865d42cSLarry Finger blnPending = 1; 3642865d42cSLarry Finger } 3652865d42cSLarry Finger if (blnPending) /* 32 bytes for TX Desc - 8 offset */ 3662865d42cSLarry Finger pdesc->txdw0 |= cpu_to_le32(((TXDESC_SIZE + 3672865d42cSLarry Finger OFFSET_SZ + 8) << OFFSET_SHT) & 3682865d42cSLarry Finger 0x00ff0000); 3692865d42cSLarry Finger else { 3702865d42cSLarry Finger pdesc->txdw0 |= cpu_to_le32(((TXDESC_SIZE + 3712865d42cSLarry Finger OFFSET_SZ) << 3722865d42cSLarry Finger OFFSET_SHT) & 3732865d42cSLarry Finger 0x00ff0000); 3742865d42cSLarry Finger } 3752865d42cSLarry Finger pdesc->txdw0 |= cpu_to_le32(OWN | FSG | LSG); 3762865d42cSLarry Finger pdesc->txdw1 |= cpu_to_le32((0x13 << QSEL_SHT) & 3772865d42cSLarry Finger 0x00001f00); 3782865d42cSLarry Finger pcmdbuf += (TXDESC_SIZE >> 2); 3792865d42cSLarry Finger *pcmdbuf = cpu_to_le32((cmdsz & 0x0000ffff) | 3802865d42cSLarry Finger (pcmd->cmdcode << 16) | 3812865d42cSLarry Finger (pcmdpriv->cmd_seq << 24)); 382be10ac2bSJustin P. Mattock pcmdbuf += 2; /* 8 bytes alignment */ 3832865d42cSLarry Finger memcpy((u8 *)pcmdbuf, pcmd->parmbuf, pcmd->cmdsz); 3842865d42cSLarry Finger while (check_cmd_fifo(padapter, wr_sz) == _FAIL) { 3852865d42cSLarry Finger if ((padapter->bDriverStopped == true) || 3862865d42cSLarry Finger (padapter->bSurpriseRemoved == true)) 3872865d42cSLarry Finger break; 3882865d42cSLarry Finger msleep(100); 3892865d42cSLarry Finger continue; 3902865d42cSLarry Finger } 3912865d42cSLarry Finger if (blnPending) 3922865d42cSLarry Finger wr_sz += 8; /* Append 8 bytes */ 3932865d42cSLarry Finger r8712_write_mem(padapter, RTL8712_DMA_H2CCMD, wr_sz, 3942865d42cSLarry Finger (u8 *)pdesc); 3952865d42cSLarry Finger pcmdpriv->cmd_seq++; 3962865d42cSLarry Finger if (pcmd->cmdcode == GEN_CMD_CODE(_CreateBss)) { 3972865d42cSLarry Finger pcmd->res = H2C_SUCCESS; 3982865d42cSLarry Finger pcmd_callback = cmd_callback[pcmd-> 3992865d42cSLarry Finger cmdcode].callback; 4002865d42cSLarry Finger if (pcmd_callback) 4012865d42cSLarry Finger pcmd_callback(padapter, pcmd); 4022865d42cSLarry Finger continue; 4032865d42cSLarry Finger } 4042865d42cSLarry Finger if (pcmd->cmdcode == GEN_CMD_CODE(_SetPwrMode)) { 4052865d42cSLarry Finger if (padapter->pwrctrlpriv.bSleep) { 4062865d42cSLarry Finger _enter_pwrlock(&(padapter-> 4072865d42cSLarry Finger pwrctrlpriv.lock)); 4082865d42cSLarry Finger r8712_set_rpwm(padapter, PS_STATE_S2); 4092865d42cSLarry Finger up(&padapter->pwrctrlpriv.lock); 4102865d42cSLarry Finger } 4112865d42cSLarry Finger } 4122865d42cSLarry Finger r8712_free_cmd_obj(pcmd); 4132865d42cSLarry Finger if (_queue_empty(&(pcmdpriv->cmd_queue))) { 4142865d42cSLarry Finger r8712_unregister_cmd_alive(padapter); 4152865d42cSLarry Finger continue; 4162865d42cSLarry Finger } else 4172865d42cSLarry Finger goto _next; 4182865d42cSLarry Finger } else 4192865d42cSLarry Finger goto _next; 4202865d42cSLarry Finger flush_signals_thread(); 4212865d42cSLarry Finger } 4222865d42cSLarry Finger /* free all cmd_obj resources */ 4232865d42cSLarry Finger do { 4242865d42cSLarry Finger pcmd = r8712_dequeue_cmd(&(pcmdpriv->cmd_queue)); 4252865d42cSLarry Finger if (pcmd == NULL) 4262865d42cSLarry Finger break; 4272865d42cSLarry Finger r8712_free_cmd_obj(pcmd); 4282865d42cSLarry Finger } while (1); 4292865d42cSLarry Finger up(&pcmdpriv->terminate_cmdthread_sema); 4302865d42cSLarry Finger thread_exit(); 4312865d42cSLarry Finger } 4322865d42cSLarry Finger 4332865d42cSLarry Finger void r8712_event_handle(struct _adapter *padapter, uint *peventbuf) 4342865d42cSLarry Finger { 4352865d42cSLarry Finger u8 evt_code, evt_seq; 4362865d42cSLarry Finger u16 evt_sz; 4372865d42cSLarry Finger void (*event_callback)(struct _adapter *dev, u8 *pbuf); 4382865d42cSLarry Finger struct evt_priv *pevt_priv = &(padapter->evtpriv); 4392865d42cSLarry Finger 4402865d42cSLarry Finger if (peventbuf == NULL) 4412865d42cSLarry Finger goto _abort_event_; 4422865d42cSLarry Finger evt_sz = (u16)(le32_to_cpu(*peventbuf) & 0xffff); 4432865d42cSLarry Finger evt_seq = (u8)((le32_to_cpu(*peventbuf) >> 24) & 0x7f); 4442865d42cSLarry Finger evt_code = (u8)((le32_to_cpu(*peventbuf) >> 16) & 0xff); 4452865d42cSLarry Finger /* checking event sequence... */ 4462865d42cSLarry Finger if ((evt_seq & 0x7f) != pevt_priv->event_seq) { 4472865d42cSLarry Finger pevt_priv->event_seq = ((evt_seq + 1) & 0x7f); 4482865d42cSLarry Finger goto _abort_event_; 4492865d42cSLarry Finger } 4502865d42cSLarry Finger /* checking if event code is valid */ 4512865d42cSLarry Finger if (evt_code >= MAX_C2HEVT) { 4522865d42cSLarry Finger pevt_priv->event_seq = ((evt_seq+1) & 0x7f); 4532865d42cSLarry Finger goto _abort_event_; 4542865d42cSLarry Finger } else if ((evt_code == GEN_EVT_CODE(_Survey)) && 4552865d42cSLarry Finger (evt_sz > sizeof(struct wlan_bssid_ex))) { 4562865d42cSLarry Finger pevt_priv->event_seq = ((evt_seq+1)&0x7f); 4572865d42cSLarry Finger goto _abort_event_; 4582865d42cSLarry Finger } 4592865d42cSLarry Finger /* checking if event size match the event parm size */ 4602865d42cSLarry Finger if ((wlanevents[evt_code].parmsize) && 4612865d42cSLarry Finger (wlanevents[evt_code].parmsize != evt_sz)) { 4622865d42cSLarry Finger pevt_priv->event_seq = ((evt_seq+1)&0x7f); 4632865d42cSLarry Finger goto _abort_event_; 4642865d42cSLarry Finger } else if ((evt_sz == 0) && (evt_code != GEN_EVT_CODE(_WPS_PBC))) { 4652865d42cSLarry Finger pevt_priv->event_seq = ((evt_seq+1)&0x7f); 4662865d42cSLarry Finger goto _abort_event_; 4672865d42cSLarry Finger } 4682865d42cSLarry Finger pevt_priv->event_seq++; /* update evt_seq */ 4692865d42cSLarry Finger if (pevt_priv->event_seq > 127) 4702865d42cSLarry Finger pevt_priv->event_seq = 0; 471be10ac2bSJustin P. Mattock peventbuf = peventbuf + 2; /* move to event content, 8 bytes alignment */ 4722865d42cSLarry Finger event_callback = wlanevents[evt_code].event_callback; 4732865d42cSLarry Finger if (event_callback) 4742865d42cSLarry Finger event_callback(padapter, (u8 *)peventbuf); 4752865d42cSLarry Finger pevt_priv->evt_done_cnt++; 4762865d42cSLarry Finger _abort_event_: 4772865d42cSLarry Finger return; 4782865d42cSLarry Finger } 479