12865d42cSLarry Finger /******************************************************************************
22865d42cSLarry Finger  * rtl8712_cmd.c
32865d42cSLarry Finger  *
42865d42cSLarry Finger  * Copyright(c) 2007 - 2010 Realtek Corporation. All rights reserved.
52865d42cSLarry Finger  * Linux device driver for RTL8192SU
62865d42cSLarry Finger  *
72865d42cSLarry Finger  * This program is free software; you can redistribute it and/or modify it
82865d42cSLarry Finger  * under the terms of version 2 of the GNU General Public License as
92865d42cSLarry Finger  * published by the Free Software Foundation.
102865d42cSLarry Finger  *
112865d42cSLarry Finger  * This program is distributed in the hope that it will be useful, but WITHOUT
122865d42cSLarry Finger  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
132865d42cSLarry Finger  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
142865d42cSLarry Finger  * more details.
152865d42cSLarry Finger  *
162865d42cSLarry Finger  * You should have received a copy of the GNU General Public License along with
172865d42cSLarry Finger  * this program; if not, write to the Free Software Foundation, Inc.,
182865d42cSLarry Finger  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
192865d42cSLarry Finger  *
202865d42cSLarry Finger  * Modifications for inclusion into the Linux staging tree are
212865d42cSLarry Finger  * Copyright(c) 2010 Larry Finger. All rights reserved.
222865d42cSLarry Finger  *
232865d42cSLarry Finger  * Contact information:
242865d42cSLarry Finger  * WLAN FAE <wlanfae@realtek.com>.
252865d42cSLarry Finger  * Larry Finger <Larry.Finger@lwfinger.net>
262865d42cSLarry Finger  *
272865d42cSLarry Finger  ******************************************************************************/
282865d42cSLarry Finger 
292865d42cSLarry Finger #define _RTL8712_CMD_C_
302865d42cSLarry Finger 
31359140aaSAli Bahar #include <linux/compiler.h>
32359140aaSAli Bahar #include <linux/kernel.h>
33359140aaSAli Bahar #include <linux/errno.h>
34359140aaSAli Bahar #include <linux/slab.h>
35359140aaSAli Bahar #include <linux/module.h>
36359140aaSAli Bahar #include <linux/kref.h>
37359140aaSAli Bahar #include <linux/netdevice.h>
38359140aaSAli Bahar #include <linux/skbuff.h>
39359140aaSAli Bahar #include <linux/usb.h>
40359140aaSAli Bahar #include <linux/usb/ch9.h>
41359140aaSAli Bahar #include <linux/circ_buf.h>
42359140aaSAli Bahar #include <linux/uaccess.h>
43359140aaSAli Bahar #include <asm/byteorder.h>
44359140aaSAli Bahar #include <linux/atomic.h>
45359140aaSAli Bahar #include <linux/semaphore.h>
46359140aaSAli Bahar #include <linux/rtnetlink.h>
47359140aaSAli Bahar 
482865d42cSLarry Finger #include "osdep_service.h"
492865d42cSLarry Finger #include "drv_types.h"
502865d42cSLarry Finger #include "recv_osdep.h"
512865d42cSLarry Finger #include "mlme_osdep.h"
522865d42cSLarry Finger #include "rtl871x_ioctl_set.h"
532865d42cSLarry Finger 
542865d42cSLarry Finger static void check_hw_pbc(struct _adapter *padapter)
552865d42cSLarry Finger {
562865d42cSLarry Finger 	u8	tmp1byte;
572865d42cSLarry Finger 
582865d42cSLarry Finger 	r8712_write8(padapter, MAC_PINMUX_CTRL, (GPIOMUX_EN | GPIOSEL_GPIO));
592865d42cSLarry Finger 	tmp1byte = r8712_read8(padapter, GPIO_IO_SEL);
602865d42cSLarry Finger 	tmp1byte &= ~(HAL_8192S_HW_GPIO_WPS_BIT);
612865d42cSLarry Finger 	r8712_write8(padapter, GPIO_IO_SEL, tmp1byte);
622865d42cSLarry Finger 	tmp1byte = r8712_read8(padapter, GPIO_CTRL);
632865d42cSLarry Finger 	if (tmp1byte == 0xff)
642865d42cSLarry Finger 		return;
652865d42cSLarry Finger 	if (tmp1byte&HAL_8192S_HW_GPIO_WPS_BIT) {
662865d42cSLarry Finger 		/* Here we only set bPbcPressed to true
672865d42cSLarry Finger 		 * After trigger PBC, the variable will be set to false */
682865d42cSLarry Finger 		DBG_8712("CheckPbcGPIO - PBC is pressed !!!!\n");
692865d42cSLarry Finger 		/* 0 is the default value and it means the application monitors
70be10ac2bSJustin P. Mattock 		 * the HW PBC doesn't provide its pid to driver. */
712865d42cSLarry Finger 		if (padapter->pid == 0)
722865d42cSLarry Finger 			return;
732865d42cSLarry Finger 		kill_pid(find_vpid(padapter->pid), SIGUSR1, 1);
742865d42cSLarry Finger 	}
752865d42cSLarry Finger }
762865d42cSLarry Finger 
772865d42cSLarry Finger /* query rx phy status from fw.
782865d42cSLarry Finger  * Adhoc mode: beacon.
792865d42cSLarry Finger  * Infrastructure mode: beacon , data. */
802865d42cSLarry Finger static void query_fw_rx_phy_status(struct _adapter *padapter)
812865d42cSLarry Finger {
822865d42cSLarry Finger 	u32 val32 = 0;
832865d42cSLarry Finger 	int pollingcnts = 50;
842865d42cSLarry Finger 
852865d42cSLarry Finger 	if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) == true) {
862865d42cSLarry Finger 		r8712_write32(padapter, IOCMD_CTRL_REG, 0xf4000001);
872865d42cSLarry Finger 		msleep(100);
882865d42cSLarry Finger 		/* Wait FW complete IO Cmd */
892865d42cSLarry Finger 		while ((r8712_read32(padapter, IOCMD_CTRL_REG)) &&
902865d42cSLarry Finger 		       (pollingcnts > 0)) {
912865d42cSLarry Finger 			pollingcnts--;
922865d42cSLarry Finger 			msleep(20);
932865d42cSLarry Finger 		}
942865d42cSLarry Finger 		if (pollingcnts != 0)
952865d42cSLarry Finger 			val32 = r8712_read32(padapter, IOCMD_DATA_REG);
962865d42cSLarry Finger 		else /* time out */
972865d42cSLarry Finger 			val32 = 0;
98ae52e527SAya Mahfouz 		val32 >>= 4;
992865d42cSLarry Finger 		padapter->recvpriv.fw_rssi =
1002865d42cSLarry Finger 			 (u8)r8712_signal_scale_mapping(val32);
1012865d42cSLarry Finger 	}
1022865d42cSLarry Finger }
1032865d42cSLarry Finger 
1042865d42cSLarry Finger /* check mlme, hw, phy, or dynamic algorithm status. */
1052865d42cSLarry Finger static void StatusWatchdogCallback(struct _adapter *padapter)
1062865d42cSLarry Finger {
1072865d42cSLarry Finger 	check_hw_pbc(padapter);
1082865d42cSLarry Finger 	query_fw_rx_phy_status(padapter);
1092865d42cSLarry Finger }
1102865d42cSLarry Finger 
1112865d42cSLarry Finger static void r871x_internal_cmd_hdl(struct _adapter *padapter, u8 *pbuf)
1122865d42cSLarry Finger {
1132865d42cSLarry Finger 	struct drvint_cmd_parm *pdrvcmd;
1142865d42cSLarry Finger 
1152865d42cSLarry Finger 	if (!pbuf)
1162865d42cSLarry Finger 		return;
1172865d42cSLarry Finger 	pdrvcmd = (struct drvint_cmd_parm *)pbuf;
1182865d42cSLarry Finger 	switch (pdrvcmd->i_cid) {
1192865d42cSLarry Finger 	case WDG_WK_CID:
1202865d42cSLarry Finger 		StatusWatchdogCallback(padapter);
1212865d42cSLarry Finger 		break;
1222865d42cSLarry Finger 	default:
1232865d42cSLarry Finger 		break;
1242865d42cSLarry Finger 	}
1252865d42cSLarry Finger 	kfree(pdrvcmd->pbuf);
1262865d42cSLarry Finger }
1272865d42cSLarry Finger 
1282865d42cSLarry Finger static u8 read_macreg_hdl(struct _adapter *padapter, u8 *pbuf)
1292865d42cSLarry Finger {
1302865d42cSLarry Finger 	void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj	*pcmd);
1312865d42cSLarry Finger 	struct cmd_obj *pcmd  = (struct cmd_obj *)pbuf;
1322865d42cSLarry Finger 
1332865d42cSLarry Finger 	/*  invoke cmd->callback function */
1342865d42cSLarry Finger 	pcmd_callback = cmd_callback[pcmd->cmdcode].callback;
1352865d42cSLarry Finger 	if (pcmd_callback == NULL)
1362865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
1372865d42cSLarry Finger 	else
1382865d42cSLarry Finger 		pcmd_callback(padapter, pcmd);
1392865d42cSLarry Finger 	return H2C_SUCCESS;
1402865d42cSLarry Finger }
1412865d42cSLarry Finger 
1422865d42cSLarry Finger static u8 write_macreg_hdl(struct _adapter *padapter, u8 *pbuf)
1432865d42cSLarry Finger {
1442865d42cSLarry Finger 	void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj	*pcmd);
1452865d42cSLarry Finger 	struct cmd_obj *pcmd  = (struct cmd_obj *)pbuf;
1462865d42cSLarry Finger 
1472865d42cSLarry Finger 	/*  invoke cmd->callback function */
1482865d42cSLarry Finger 	pcmd_callback = cmd_callback[pcmd->cmdcode].callback;
1492865d42cSLarry Finger 	if (pcmd_callback == NULL)
1502865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
1512865d42cSLarry Finger 	else
1522865d42cSLarry Finger 		pcmd_callback(padapter, pcmd);
1532865d42cSLarry Finger 	return H2C_SUCCESS;
1542865d42cSLarry Finger }
1552865d42cSLarry Finger 
1562865d42cSLarry Finger static u8 read_bbreg_hdl(struct _adapter *padapter, u8 *pbuf)
1572865d42cSLarry Finger {
1582865d42cSLarry Finger 	u32 val;
1592865d42cSLarry Finger 	void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj	*pcmd);
1602865d42cSLarry Finger 	struct cmd_obj *pcmd  = (struct cmd_obj *)pbuf;
1612865d42cSLarry Finger 
1622865d42cSLarry Finger 	if (pcmd->rsp && pcmd->rspsz > 0)
1632865d42cSLarry Finger 		memcpy(pcmd->rsp, (u8 *)&val, pcmd->rspsz);
1642865d42cSLarry Finger 	pcmd_callback = cmd_callback[pcmd->cmdcode].callback;
1652865d42cSLarry Finger 	if (pcmd_callback == NULL)
1662865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
1672865d42cSLarry Finger 	else
1682865d42cSLarry Finger 		pcmd_callback(padapter, pcmd);
1692865d42cSLarry Finger 	return H2C_SUCCESS;
1702865d42cSLarry Finger }
1712865d42cSLarry Finger 
1722865d42cSLarry Finger static u8 write_bbreg_hdl(struct _adapter *padapter, u8 *pbuf)
1732865d42cSLarry Finger {
1742865d42cSLarry Finger 	void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj *pcmd);
1752865d42cSLarry Finger 	struct cmd_obj *pcmd  = (struct cmd_obj *)pbuf;
1762865d42cSLarry Finger 
1772865d42cSLarry Finger 	pcmd_callback = cmd_callback[pcmd->cmdcode].callback;
1782865d42cSLarry Finger 	if (pcmd_callback == NULL)
1792865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
1802865d42cSLarry Finger 	else
1812865d42cSLarry Finger 		pcmd_callback(padapter, pcmd);
1822865d42cSLarry Finger 	return H2C_SUCCESS;
1832865d42cSLarry Finger }
1842865d42cSLarry Finger 
1852865d42cSLarry Finger static u8 read_rfreg_hdl(struct _adapter *padapter, u8 *pbuf)
1862865d42cSLarry Finger {
1872865d42cSLarry Finger 	u32 val;
1882865d42cSLarry Finger 	void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj *pcmd);
1892865d42cSLarry Finger 	struct cmd_obj *pcmd  = (struct cmd_obj *)pbuf;
1902865d42cSLarry Finger 
1912865d42cSLarry Finger 	if (pcmd->rsp && pcmd->rspsz > 0)
1922865d42cSLarry Finger 		memcpy(pcmd->rsp, (u8 *)&val, pcmd->rspsz);
1932865d42cSLarry Finger 	pcmd_callback = cmd_callback[pcmd->cmdcode].callback;
1942865d42cSLarry Finger 	if (pcmd_callback == NULL)
1952865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
1962865d42cSLarry Finger 	else
1972865d42cSLarry Finger 		pcmd_callback(padapter, pcmd);
1982865d42cSLarry Finger 	return H2C_SUCCESS;
1992865d42cSLarry Finger }
2002865d42cSLarry Finger 
2012865d42cSLarry Finger static u8 write_rfreg_hdl(struct _adapter *padapter, u8 *pbuf)
2022865d42cSLarry Finger {
2032865d42cSLarry Finger 	void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj *pcmd);
2042865d42cSLarry Finger 	struct cmd_obj *pcmd  = (struct cmd_obj *)pbuf;
2052865d42cSLarry Finger 
2062865d42cSLarry Finger 	pcmd_callback = cmd_callback[pcmd->cmdcode].callback;
2072865d42cSLarry Finger 	if (pcmd_callback == NULL)
2082865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
2092865d42cSLarry Finger 	else
2102865d42cSLarry Finger 		pcmd_callback(padapter, pcmd);
2112865d42cSLarry Finger 	return H2C_SUCCESS;
2122865d42cSLarry Finger }
2132865d42cSLarry Finger 
2142865d42cSLarry Finger static u8 sys_suspend_hdl(struct _adapter *padapter, u8 *pbuf)
2152865d42cSLarry Finger {
2162865d42cSLarry Finger 	struct cmd_obj *pcmd  = (struct cmd_obj *)pbuf;
2172865d42cSLarry Finger 
2182865d42cSLarry Finger 	r8712_free_cmd_obj(pcmd);
2192865d42cSLarry Finger 	return H2C_SUCCESS;
2202865d42cSLarry Finger }
2212865d42cSLarry Finger 
2222865d42cSLarry Finger static struct cmd_obj *cmd_hdl_filter(struct _adapter *padapter,
2232865d42cSLarry Finger 				      struct cmd_obj *pcmd)
2242865d42cSLarry Finger {
2252865d42cSLarry Finger 	struct cmd_obj *pcmd_r;
2262865d42cSLarry Finger 
2272865d42cSLarry Finger 	if (pcmd == NULL)
2282865d42cSLarry Finger 		return pcmd;
2292865d42cSLarry Finger 	pcmd_r = NULL;
2302865d42cSLarry Finger 
2312865d42cSLarry Finger 	switch (pcmd->cmdcode) {
2322865d42cSLarry Finger 	case GEN_CMD_CODE(_Read_MACREG):
2332865d42cSLarry Finger 		read_macreg_hdl(padapter, (u8 *)pcmd);
2342865d42cSLarry Finger 		pcmd_r = pcmd;
2352865d42cSLarry Finger 		break;
2362865d42cSLarry Finger 	case GEN_CMD_CODE(_Write_MACREG):
2372865d42cSLarry Finger 		write_macreg_hdl(padapter, (u8 *)pcmd);
2382865d42cSLarry Finger 		pcmd_r = pcmd;
2392865d42cSLarry Finger 		break;
2402865d42cSLarry Finger 	case GEN_CMD_CODE(_Read_BBREG):
2412865d42cSLarry Finger 		read_bbreg_hdl(padapter, (u8 *)pcmd);
2422865d42cSLarry Finger 		break;
2432865d42cSLarry Finger 	case GEN_CMD_CODE(_Write_BBREG):
2442865d42cSLarry Finger 		write_bbreg_hdl(padapter, (u8 *)pcmd);
2452865d42cSLarry Finger 		break;
2462865d42cSLarry Finger 	case GEN_CMD_CODE(_Read_RFREG):
2472865d42cSLarry Finger 		read_rfreg_hdl(padapter, (u8 *)pcmd);
2482865d42cSLarry Finger 		break;
2492865d42cSLarry Finger 	case GEN_CMD_CODE(_Write_RFREG):
2502865d42cSLarry Finger 		write_rfreg_hdl(padapter, (u8 *)pcmd);
2512865d42cSLarry Finger 		break;
2522865d42cSLarry Finger 	case GEN_CMD_CODE(_SetUsbSuspend):
2532865d42cSLarry Finger 		sys_suspend_hdl(padapter, (u8 *)pcmd);
2542865d42cSLarry Finger 		break;
2552865d42cSLarry Finger 	case GEN_CMD_CODE(_JoinBss):
2562865d42cSLarry Finger 		r8712_joinbss_reset(padapter);
2572865d42cSLarry Finger 		/* Before set JoinBss_CMD to FW, driver must ensure FW is in
2582865d42cSLarry Finger 		 * PS_MODE_ACTIVE. Directly write rpwm to radio on and assign
2592865d42cSLarry Finger 		 * new pwr_mode to Driver, instead of use workitem to change
2602865d42cSLarry Finger 		 * state. */
2612865d42cSLarry Finger 		if (padapter->pwrctrlpriv.pwr_mode > PS_MODE_ACTIVE) {
2622865d42cSLarry Finger 			padapter->pwrctrlpriv.pwr_mode = PS_MODE_ACTIVE;
2632865d42cSLarry Finger 			_enter_pwrlock(&(padapter->pwrctrlpriv.lock));
2642865d42cSLarry Finger 			r8712_set_rpwm(padapter, PS_STATE_S4);
2652865d42cSLarry Finger 			up(&(padapter->pwrctrlpriv.lock));
2662865d42cSLarry Finger 		}
2672865d42cSLarry Finger 		pcmd_r = pcmd;
2682865d42cSLarry Finger 		break;
2692865d42cSLarry Finger 	case _DRV_INT_CMD_:
2702865d42cSLarry Finger 		r871x_internal_cmd_hdl(padapter, pcmd->parmbuf);
2712865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
2722865d42cSLarry Finger 		pcmd_r = NULL;
2732865d42cSLarry Finger 		break;
2742865d42cSLarry Finger 	default:
2752865d42cSLarry Finger 		pcmd_r = pcmd;
2762865d42cSLarry Finger 		break;
2772865d42cSLarry Finger 	}
2782865d42cSLarry Finger 	return pcmd_r; /* if returning pcmd_r == NULL, pcmd must be free. */
2792865d42cSLarry Finger }
2802865d42cSLarry Finger 
2812865d42cSLarry Finger static u8 check_cmd_fifo(struct _adapter *padapter, uint sz)
2822865d42cSLarry Finger {
2838ffca9eaSPeter Senna Tschudin 	return _SUCCESS;
2842865d42cSLarry Finger }
2852865d42cSLarry Finger 
2862865d42cSLarry Finger u8 r8712_fw_cmd(struct _adapter *pAdapter, u32 cmd)
2872865d42cSLarry Finger {
2882865d42cSLarry Finger 	int pollingcnts = 50;
2892865d42cSLarry Finger 
2902865d42cSLarry Finger 	r8712_write32(pAdapter, IOCMD_CTRL_REG, cmd);
2912865d42cSLarry Finger 	msleep(100);
2922865d42cSLarry Finger 	while ((0 != r8712_read32(pAdapter, IOCMD_CTRL_REG)) &&
2932865d42cSLarry Finger 	       (pollingcnts > 0)) {
2942865d42cSLarry Finger 		pollingcnts--;
2952865d42cSLarry Finger 		msleep(20);
2962865d42cSLarry Finger 	}
2972865d42cSLarry Finger 	if (pollingcnts == 0)
2982865d42cSLarry Finger 		return false;
2992865d42cSLarry Finger 	return true;
3002865d42cSLarry Finger }
3012865d42cSLarry Finger 
3022865d42cSLarry Finger void r8712_fw_cmd_data(struct _adapter *pAdapter, u32 *value, u8 flag)
3032865d42cSLarry Finger {
3042865d42cSLarry Finger 	if (flag == 0)	/* set */
3052865d42cSLarry Finger 		r8712_write32(pAdapter, IOCMD_DATA_REG, *value);
3062865d42cSLarry Finger 	else		/* query */
3072865d42cSLarry Finger 		*value = r8712_read32(pAdapter, IOCMD_DATA_REG);
3082865d42cSLarry Finger }
3092865d42cSLarry Finger 
3102865d42cSLarry Finger int r8712_cmd_thread(void *context)
3112865d42cSLarry Finger {
3122865d42cSLarry Finger 	struct cmd_obj *pcmd;
313e29d3ebcSSudip Mukherjee 	unsigned int cmdsz, wr_sz, *pcmdbuf;
3142865d42cSLarry Finger 	struct tx_desc *pdesc;
3152865d42cSLarry Finger 	void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj *pcmd);
3162865d42cSLarry Finger 	struct _adapter *padapter = (struct _adapter *)context;
3172865d42cSLarry Finger 	struct	cmd_priv	*pcmdpriv = &(padapter->cmdpriv);
3182865d42cSLarry Finger 
319fee51243SJames A Shackleford 	allow_signal(SIGTERM);
3202865d42cSLarry Finger 	while (1) {
3212865d42cSLarry Finger 		if ((_down_sema(&(pcmdpriv->cmd_queue_sema))) == _FAIL)
3222865d42cSLarry Finger 			break;
3232865d42cSLarry Finger 		if ((padapter->bDriverStopped == true) ||
3242865d42cSLarry Finger 		    (padapter->bSurpriseRemoved == true))
3252865d42cSLarry Finger 			break;
3262865d42cSLarry Finger 		if (r8712_register_cmd_alive(padapter) != _SUCCESS)
3272865d42cSLarry Finger 			continue;
3282865d42cSLarry Finger _next:
3292865d42cSLarry Finger 		pcmd = r8712_dequeue_cmd(&(pcmdpriv->cmd_queue));
3302865d42cSLarry Finger 		if (!(pcmd)) {
3312865d42cSLarry Finger 			r8712_unregister_cmd_alive(padapter);
3322865d42cSLarry Finger 			continue;
3332865d42cSLarry Finger 		}
3342865d42cSLarry Finger 		pcmdbuf = (unsigned int *)pcmdpriv->cmd_buf;
3352865d42cSLarry Finger 		pdesc = (struct tx_desc *)pcmdbuf;
3362865d42cSLarry Finger 		memset(pdesc, 0, TXDESC_SIZE);
3372865d42cSLarry Finger 		pcmd = cmd_hdl_filter(padapter, pcmd);
3382865d42cSLarry Finger 		if (pcmd) { /* if pcmd != NULL, cmd will be handled by f/w */
3392865d42cSLarry Finger 			struct dvobj_priv *pdvobj = (struct dvobj_priv *)
3402865d42cSLarry Finger 						    &padapter->dvobjpriv;
3412865d42cSLarry Finger 			u8 blnPending = 0;
34202a29d2dSTapasweni Pathak 
3432865d42cSLarry Finger 			pcmdpriv->cmd_issued_cnt++;
344d913e54eSJames A Shackleford 			cmdsz = round_up(pcmd->cmdsz, 8);
3452865d42cSLarry Finger 			wr_sz = TXDESC_SIZE + 8 + cmdsz;
3462865d42cSLarry Finger 			pdesc->txdw0 |= cpu_to_le32((wr_sz-TXDESC_SIZE) &
3472865d42cSLarry Finger 						     0x0000ffff);
3482865d42cSLarry Finger 			if (pdvobj->ishighspeed) {
3492865d42cSLarry Finger 				if ((wr_sz % 512) == 0)
3502865d42cSLarry Finger 					blnPending = 1;
3512865d42cSLarry Finger 			} else {
3522865d42cSLarry Finger 				if ((wr_sz % 64) == 0)
3532865d42cSLarry Finger 					blnPending = 1;
3542865d42cSLarry Finger 			}
3552865d42cSLarry Finger 			if (blnPending) /* 32 bytes for TX Desc - 8 offset */
3562865d42cSLarry Finger 				pdesc->txdw0 |= cpu_to_le32(((TXDESC_SIZE +
3572865d42cSLarry Finger 						OFFSET_SZ + 8) << OFFSET_SHT) &
3582865d42cSLarry Finger 						0x00ff0000);
3592865d42cSLarry Finger 			else {
3602865d42cSLarry Finger 				pdesc->txdw0 |= cpu_to_le32(((TXDESC_SIZE +
3612865d42cSLarry Finger 							      OFFSET_SZ) <<
3622865d42cSLarry Finger 							      OFFSET_SHT) &
3632865d42cSLarry Finger 							      0x00ff0000);
3642865d42cSLarry Finger 			}
3652865d42cSLarry Finger 			pdesc->txdw0 |= cpu_to_le32(OWN | FSG | LSG);
3662865d42cSLarry Finger 			pdesc->txdw1 |= cpu_to_le32((0x13 << QSEL_SHT) &
3672865d42cSLarry Finger 						    0x00001f00);
3682865d42cSLarry Finger 			pcmdbuf += (TXDESC_SIZE >> 2);
3692865d42cSLarry Finger 			*pcmdbuf = cpu_to_le32((cmdsz & 0x0000ffff) |
3702865d42cSLarry Finger 					       (pcmd->cmdcode << 16) |
3712865d42cSLarry Finger 					       (pcmdpriv->cmd_seq << 24));
372be10ac2bSJustin P. Mattock 			pcmdbuf += 2; /* 8 bytes alignment */
3732865d42cSLarry Finger 			memcpy((u8 *)pcmdbuf, pcmd->parmbuf, pcmd->cmdsz);
3742865d42cSLarry Finger 			while (check_cmd_fifo(padapter, wr_sz) == _FAIL) {
3752865d42cSLarry Finger 				if ((padapter->bDriverStopped == true) ||
3762865d42cSLarry Finger 				    (padapter->bSurpriseRemoved == true))
3772865d42cSLarry Finger 					break;
3782865d42cSLarry Finger 				msleep(100);
3792865d42cSLarry Finger 				continue;
3802865d42cSLarry Finger 			}
3812865d42cSLarry Finger 			if (blnPending)
3822865d42cSLarry Finger 				wr_sz += 8;   /* Append 8 bytes */
3832865d42cSLarry Finger 			r8712_write_mem(padapter, RTL8712_DMA_H2CCMD, wr_sz,
3842865d42cSLarry Finger 				       (u8 *)pdesc);
3852865d42cSLarry Finger 			pcmdpriv->cmd_seq++;
3862865d42cSLarry Finger 			if (pcmd->cmdcode == GEN_CMD_CODE(_CreateBss)) {
3872865d42cSLarry Finger 				pcmd->res = H2C_SUCCESS;
3882865d42cSLarry Finger 				pcmd_callback = cmd_callback[pcmd->
3892865d42cSLarry Finger 						cmdcode].callback;
3902865d42cSLarry Finger 				if (pcmd_callback)
3912865d42cSLarry Finger 					pcmd_callback(padapter, pcmd);
3922865d42cSLarry Finger 				continue;
3932865d42cSLarry Finger 			}
3942865d42cSLarry Finger 			if (pcmd->cmdcode == GEN_CMD_CODE(_SetPwrMode)) {
3952865d42cSLarry Finger 				if (padapter->pwrctrlpriv.bSleep) {
3962865d42cSLarry Finger 					_enter_pwrlock(&(padapter->
3972865d42cSLarry Finger 						       pwrctrlpriv.lock));
3982865d42cSLarry Finger 					r8712_set_rpwm(padapter, PS_STATE_S2);
3992865d42cSLarry Finger 					up(&padapter->pwrctrlpriv.lock);
4002865d42cSLarry Finger 				}
4012865d42cSLarry Finger 			}
4022865d42cSLarry Finger 			r8712_free_cmd_obj(pcmd);
403df353f61SJames A Shackleford 			if (list_empty(&pcmdpriv->cmd_queue.queue)) {
4042865d42cSLarry Finger 				r8712_unregister_cmd_alive(padapter);
4052865d42cSLarry Finger 				continue;
4062865d42cSLarry Finger 			} else
4072865d42cSLarry Finger 				goto _next;
4082865d42cSLarry Finger 		} else
4092865d42cSLarry Finger 			goto _next;
4102865d42cSLarry Finger 		flush_signals_thread();
4112865d42cSLarry Finger 	}
4122865d42cSLarry Finger 	/* free all cmd_obj resources */
4132865d42cSLarry Finger 	do {
4142865d42cSLarry Finger 		pcmd = r8712_dequeue_cmd(&(pcmdpriv->cmd_queue));
4152865d42cSLarry Finger 		if (pcmd == NULL)
4162865d42cSLarry Finger 			break;
4172865d42cSLarry Finger 		r8712_free_cmd_obj(pcmd);
4182865d42cSLarry Finger 	} while (1);
4192865d42cSLarry Finger 	up(&pcmdpriv->terminate_cmdthread_sema);
4202865d42cSLarry Finger 	thread_exit();
4212865d42cSLarry Finger }
4222865d42cSLarry Finger 
4232865d42cSLarry Finger void r8712_event_handle(struct _adapter *padapter, uint *peventbuf)
4242865d42cSLarry Finger {
4252865d42cSLarry Finger 	u8 evt_code, evt_seq;
4262865d42cSLarry Finger 	u16 evt_sz;
4272865d42cSLarry Finger 	void (*event_callback)(struct _adapter *dev, u8 *pbuf);
4282865d42cSLarry Finger 	struct	evt_priv *pevt_priv = &(padapter->evtpriv);
4292865d42cSLarry Finger 
4302865d42cSLarry Finger 	if (peventbuf == NULL)
4312865d42cSLarry Finger 		goto _abort_event_;
4322865d42cSLarry Finger 	evt_sz = (u16)(le32_to_cpu(*peventbuf) & 0xffff);
4332865d42cSLarry Finger 	evt_seq = (u8)((le32_to_cpu(*peventbuf) >> 24) & 0x7f);
4342865d42cSLarry Finger 	evt_code = (u8)((le32_to_cpu(*peventbuf) >> 16) & 0xff);
4352865d42cSLarry Finger 	/* checking event sequence... */
4362865d42cSLarry Finger 	if ((evt_seq & 0x7f) != pevt_priv->event_seq) {
4372865d42cSLarry Finger 		pevt_priv->event_seq = ((evt_seq + 1) & 0x7f);
4382865d42cSLarry Finger 		goto _abort_event_;
4392865d42cSLarry Finger 	}
4402865d42cSLarry Finger 	/* checking if event code is valid */
4412865d42cSLarry Finger 	if (evt_code >= MAX_C2HEVT) {
4422865d42cSLarry Finger 		pevt_priv->event_seq = ((evt_seq+1) & 0x7f);
4432865d42cSLarry Finger 		goto _abort_event_;
4442865d42cSLarry Finger 	} else if ((evt_code == GEN_EVT_CODE(_Survey)) &&
4452865d42cSLarry Finger 		   (evt_sz > sizeof(struct wlan_bssid_ex))) {
4462865d42cSLarry Finger 		pevt_priv->event_seq = ((evt_seq+1)&0x7f);
4472865d42cSLarry Finger 		goto _abort_event_;
4482865d42cSLarry Finger 	}
4492865d42cSLarry Finger 	/* checking if event size match the event parm size */
4502865d42cSLarry Finger 	if ((wlanevents[evt_code].parmsize) &&
4512865d42cSLarry Finger 	    (wlanevents[evt_code].parmsize != evt_sz)) {
4522865d42cSLarry Finger 		pevt_priv->event_seq = ((evt_seq+1)&0x7f);
4532865d42cSLarry Finger 		goto _abort_event_;
4542865d42cSLarry Finger 	} else if ((evt_sz == 0) && (evt_code != GEN_EVT_CODE(_WPS_PBC))) {
4552865d42cSLarry Finger 		pevt_priv->event_seq = ((evt_seq+1)&0x7f);
4562865d42cSLarry Finger 		goto _abort_event_;
4572865d42cSLarry Finger 	}
4582865d42cSLarry Finger 	pevt_priv->event_seq++;	/* update evt_seq */
4592865d42cSLarry Finger 	if (pevt_priv->event_seq > 127)
4602865d42cSLarry Finger 		pevt_priv->event_seq = 0;
46157b6686eSTapasweni Pathak 	/* move to event content, 8 bytes alignment */
46257b6686eSTapasweni Pathak 	peventbuf = peventbuf + 2;
4632865d42cSLarry Finger 	event_callback = wlanevents[evt_code].event_callback;
4642865d42cSLarry Finger 	if (event_callback)
4652865d42cSLarry Finger 		event_callback(padapter, (u8 *)peventbuf);
4662865d42cSLarry Finger 	pevt_priv->evt_done_cnt++;
4672865d42cSLarry Finger _abort_event_:
4682865d42cSLarry Finger 	return;
4692865d42cSLarry Finger }
470