• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /*
2  * Marvell Wireless LAN device driver: commands and events
3  *
4  * Copyright (C) 2011, Marvell International Ltd.
5  *
6  * This software file (the "File") is distributed by Marvell International
7  * Ltd. under the terms of the GNU General Public License Version 2, June 1991
8  * (the "License").  You may use, redistribute and/or modify this File in
9  * accordance with the terms and conditions of the License, a copy of which
10  * is available by writing to the Free Software Foundation, Inc.,
11  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
12  * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
13  *
14  * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
15  * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
16  * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
17  * this warranty disclaimer.
18  */
19 
20 #include "decl.h"
21 #include "ioctl.h"
22 #include "util.h"
23 #include "fw.h"
24 #include "main.h"
25 #include "wmm.h"
26 #include "11n.h"
27 
28 /*
29  * This function initializes a command node.
30  *
31  * The actual allocation of the node is not done by this function. It only
32  * initiates a node by filling it with default parameters. Similarly,
33  * allocation of the different buffers used (IOCTL buffer, data buffer) are
34  * not done by this function either.
35  */
36 static void
mwifiex_init_cmd_node(struct mwifiex_private * priv,struct cmd_ctrl_node * cmd_node,u32 cmd_oid,void * data_buf)37 mwifiex_init_cmd_node(struct mwifiex_private *priv,
38 		      struct cmd_ctrl_node *cmd_node,
39 		      u32 cmd_oid, void *data_buf)
40 {
41 	cmd_node->priv = priv;
42 	cmd_node->cmd_oid = cmd_oid;
43 	if (priv->adapter->cmd_wait_q_required) {
44 		cmd_node->wait_q_enabled = priv->adapter->cmd_wait_q_required;
45 		priv->adapter->cmd_wait_q_required = false;
46 		cmd_node->cmd_wait_q_woken = false;
47 		cmd_node->condition = &cmd_node->cmd_wait_q_woken;
48 	}
49 	cmd_node->data_buf = data_buf;
50 	cmd_node->cmd_skb = cmd_node->skb;
51 }
52 
53 /*
54  * This function returns a command node from the free queue depending upon
55  * availability.
56  */
57 static struct cmd_ctrl_node *
mwifiex_get_cmd_node(struct mwifiex_adapter * adapter)58 mwifiex_get_cmd_node(struct mwifiex_adapter *adapter)
59 {
60 	struct cmd_ctrl_node *cmd_node;
61 	unsigned long flags;
62 
63 	spin_lock_irqsave(&adapter->cmd_free_q_lock, flags);
64 	if (list_empty(&adapter->cmd_free_q)) {
65 		dev_err(adapter->dev, "GET_CMD_NODE: cmd node not available\n");
66 		spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
67 		return NULL;
68 	}
69 	cmd_node = list_first_entry(&adapter->cmd_free_q,
70 				    struct cmd_ctrl_node, list);
71 	list_del(&cmd_node->list);
72 	spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
73 
74 	return cmd_node;
75 }
76 
77 /*
78  * This function cleans up a command node.
79  *
80  * The function resets the fields including the buffer pointers.
81  * This function does not try to free the buffers. They must be
82  * freed before calling this function.
83  *
84  * This function will however call the receive completion callback
85  * in case a response buffer is still available before resetting
86  * the pointer.
87  */
88 static void
mwifiex_clean_cmd_node(struct mwifiex_adapter * adapter,struct cmd_ctrl_node * cmd_node)89 mwifiex_clean_cmd_node(struct mwifiex_adapter *adapter,
90 		       struct cmd_ctrl_node *cmd_node)
91 {
92 	cmd_node->cmd_oid = 0;
93 	cmd_node->cmd_flag = 0;
94 	cmd_node->data_buf = NULL;
95 	cmd_node->wait_q_enabled = false;
96 
97 	if (cmd_node->cmd_skb)
98 		skb_trim(cmd_node->cmd_skb, 0);
99 
100 	if (cmd_node->resp_skb) {
101 		adapter->if_ops.cmdrsp_complete(adapter, cmd_node->resp_skb);
102 		cmd_node->resp_skb = NULL;
103 	}
104 }
105 
106 /*
107  * This function sends a host command to the firmware.
108  *
109  * The function copies the host command into the driver command
110  * buffer, which will be transferred to the firmware later by the
111  * main thread.
112  */
mwifiex_cmd_host_cmd(struct mwifiex_private * priv,struct host_cmd_ds_command * cmd,struct mwifiex_ds_misc_cmd * pcmd_ptr)113 static int mwifiex_cmd_host_cmd(struct mwifiex_private *priv,
114 				struct host_cmd_ds_command *cmd,
115 				struct mwifiex_ds_misc_cmd *pcmd_ptr)
116 {
117 	/* Copy the HOST command to command buffer */
118 	memcpy(cmd, pcmd_ptr->cmd, pcmd_ptr->len);
119 	dev_dbg(priv->adapter->dev, "cmd: host cmd size = %d\n", pcmd_ptr->len);
120 	return 0;
121 }
122 
123 /*
124  * This function downloads a command to the firmware.
125  *
126  * The function performs sanity tests, sets the command sequence
127  * number and size, converts the header fields to CPU format before
128  * sending. Afterwards, it logs the command ID and action for debugging
129  * and sets up the command timeout timer.
130  */
mwifiex_dnld_cmd_to_fw(struct mwifiex_private * priv,struct cmd_ctrl_node * cmd_node)131 static int mwifiex_dnld_cmd_to_fw(struct mwifiex_private *priv,
132 				  struct cmd_ctrl_node *cmd_node)
133 {
134 
135 	struct mwifiex_adapter *adapter = priv->adapter;
136 	int ret;
137 	struct host_cmd_ds_command *host_cmd;
138 	uint16_t cmd_code;
139 	uint16_t cmd_size;
140 	struct timeval tstamp;
141 	unsigned long flags;
142 
143 	if (!adapter || !cmd_node)
144 		return -1;
145 
146 	host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
147 
148 	/* Sanity test */
149 	if (host_cmd == NULL || host_cmd->size == 0) {
150 		dev_err(adapter->dev, "DNLD_CMD: host_cmd is null"
151 			" or cmd size is 0, not sending\n");
152 		if (cmd_node->wait_q_enabled)
153 			adapter->cmd_wait_q.status = -1;
154 		mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
155 		return -1;
156 	}
157 
158 	/* Set command sequence number */
159 	adapter->seq_num++;
160 	host_cmd->seq_num = cpu_to_le16(HostCmd_SET_SEQ_NO_BSS_INFO
161 					(adapter->seq_num,
162 					 cmd_node->priv->bss_num,
163 					 cmd_node->priv->bss_type));
164 
165 	spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
166 	adapter->curr_cmd = cmd_node;
167 	spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
168 
169 	cmd_code = le16_to_cpu(host_cmd->command);
170 	cmd_size = le16_to_cpu(host_cmd->size);
171 
172 	skb_trim(cmd_node->cmd_skb, cmd_size);
173 
174 	do_gettimeofday(&tstamp);
175 	dev_dbg(adapter->dev, "cmd: DNLD_CMD: (%lu.%lu): %#x, act %#x, len %d,"
176 		" seqno %#x\n",
177 		tstamp.tv_sec, tstamp.tv_usec, cmd_code,
178 		le16_to_cpu(*(__le16 *) ((u8 *) host_cmd + S_DS_GEN)), cmd_size,
179 		le16_to_cpu(host_cmd->seq_num));
180 
181 	skb_push(cmd_node->cmd_skb, INTF_HEADER_LEN);
182 
183 	ret = adapter->if_ops.host_to_card(adapter, MWIFIEX_TYPE_CMD,
184 					   cmd_node->cmd_skb, NULL);
185 
186 	skb_pull(cmd_node->cmd_skb, INTF_HEADER_LEN);
187 
188 	if (ret == -1) {
189 		dev_err(adapter->dev, "DNLD_CMD: host to card failed\n");
190 		if (cmd_node->wait_q_enabled)
191 			adapter->cmd_wait_q.status = -1;
192 		mwifiex_insert_cmd_to_free_q(adapter, adapter->curr_cmd);
193 
194 		spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
195 		adapter->curr_cmd = NULL;
196 		spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
197 
198 		adapter->dbg.num_cmd_host_to_card_failure++;
199 		return -1;
200 	}
201 
202 	/* Save the last command id and action to debug log */
203 	adapter->dbg.last_cmd_index =
204 			(adapter->dbg.last_cmd_index + 1) % DBG_CMD_NUM;
205 	adapter->dbg.last_cmd_id[adapter->dbg.last_cmd_index] = cmd_code;
206 	adapter->dbg.last_cmd_act[adapter->dbg.last_cmd_index] =
207 			le16_to_cpu(*(__le16 *) ((u8 *) host_cmd + S_DS_GEN));
208 
209 	/* Clear BSS_NO_BITS from HostCmd */
210 	cmd_code &= HostCmd_CMD_ID_MASK;
211 
212 	/* Setup the timer after transmit command */
213 	mod_timer(&adapter->cmd_timer,
214 		  jiffies + (MWIFIEX_TIMER_10S * HZ) / 1000);
215 
216 	return 0;
217 }
218 
219 /*
220  * This function downloads a sleep confirm command to the firmware.
221  *
222  * The function performs sanity tests, sets the command sequence
223  * number and size, converts the header fields to CPU format before
224  * sending.
225  *
226  * No responses are needed for sleep confirm command.
227  */
mwifiex_dnld_sleep_confirm_cmd(struct mwifiex_adapter * adapter)228 static int mwifiex_dnld_sleep_confirm_cmd(struct mwifiex_adapter *adapter)
229 {
230 	int ret;
231 	struct mwifiex_private *priv;
232 	struct mwifiex_opt_sleep_confirm *sleep_cfm_buf =
233 				(struct mwifiex_opt_sleep_confirm *)
234 						adapter->sleep_cfm->data;
235 	priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
236 
237 	sleep_cfm_buf->seq_num =
238 		cpu_to_le16((HostCmd_SET_SEQ_NO_BSS_INFO
239 					(adapter->seq_num, priv->bss_num,
240 					 priv->bss_type)));
241 	adapter->seq_num++;
242 
243 	skb_push(adapter->sleep_cfm, INTF_HEADER_LEN);
244 	ret = adapter->if_ops.host_to_card(adapter, MWIFIEX_TYPE_CMD,
245 					   adapter->sleep_cfm, NULL);
246 	skb_pull(adapter->sleep_cfm, INTF_HEADER_LEN);
247 
248 	if (ret == -1) {
249 		dev_err(adapter->dev, "SLEEP_CFM: failed\n");
250 		adapter->dbg.num_cmd_sleep_cfm_host_to_card_failure++;
251 		return -1;
252 	}
253 	if (GET_BSS_ROLE(mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY))
254 	    == MWIFIEX_BSS_ROLE_STA) {
255 		if (!sleep_cfm_buf->resp_ctrl)
256 			/* Response is not needed for sleep
257 			   confirm command */
258 			adapter->ps_state = PS_STATE_SLEEP;
259 		else
260 			adapter->ps_state = PS_STATE_SLEEP_CFM;
261 
262 		if (!sleep_cfm_buf->resp_ctrl &&
263 		    (adapter->is_hs_configured &&
264 		     !adapter->sleep_period.period)) {
265 			adapter->pm_wakeup_card_req = true;
266 			mwifiex_hs_activated_event(mwifiex_get_priv
267 					(adapter, MWIFIEX_BSS_ROLE_STA), true);
268 		}
269 	}
270 
271 	return ret;
272 }
273 
274 /*
275  * This function allocates the command buffers and links them to
276  * the command free queue.
277  *
278  * The driver uses a pre allocated number of command buffers, which
279  * are created at driver initializations and freed at driver cleanup.
280  * Every command needs to obtain a command buffer from this pool before
281  * it can be issued. The command free queue lists the command buffers
282  * currently free to use, while the command pending queue lists the
283  * command buffers already in use and awaiting handling. Command buffers
284  * are returned to the free queue after use.
285  */
mwifiex_alloc_cmd_buffer(struct mwifiex_adapter * adapter)286 int mwifiex_alloc_cmd_buffer(struct mwifiex_adapter *adapter)
287 {
288 	struct cmd_ctrl_node *cmd_array;
289 	u32 buf_size;
290 	u32 i;
291 
292 	/* Allocate and initialize struct cmd_ctrl_node */
293 	buf_size = sizeof(struct cmd_ctrl_node) * MWIFIEX_NUM_OF_CMD_BUFFER;
294 	cmd_array = kzalloc(buf_size, GFP_KERNEL);
295 	if (!cmd_array) {
296 		dev_err(adapter->dev, "%s: failed to alloc cmd_array\n",
297 			__func__);
298 		return -ENOMEM;
299 	}
300 
301 	adapter->cmd_pool = cmd_array;
302 	memset(adapter->cmd_pool, 0, buf_size);
303 
304 	/* Allocate and initialize command buffers */
305 	for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++) {
306 		cmd_array[i].skb = dev_alloc_skb(MWIFIEX_SIZE_OF_CMD_BUFFER);
307 		if (!cmd_array[i].skb) {
308 			dev_err(adapter->dev, "ALLOC_CMD_BUF: out of memory\n");
309 			return -1;
310 		}
311 	}
312 
313 	for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++)
314 		mwifiex_insert_cmd_to_free_q(adapter, &cmd_array[i]);
315 
316 	return 0;
317 }
318 
319 /*
320  * This function frees the command buffers.
321  *
322  * The function calls the completion callback for all the command
323  * buffers that still have response buffers associated with them.
324  */
mwifiex_free_cmd_buffer(struct mwifiex_adapter * adapter)325 int mwifiex_free_cmd_buffer(struct mwifiex_adapter *adapter)
326 {
327 	struct cmd_ctrl_node *cmd_array;
328 	u32 i;
329 
330 	/* Need to check if cmd pool is allocated or not */
331 	if (!adapter->cmd_pool) {
332 		dev_dbg(adapter->dev, "info: FREE_CMD_BUF: cmd_pool is null\n");
333 		return 0;
334 	}
335 
336 	cmd_array = adapter->cmd_pool;
337 
338 	/* Release shared memory buffers */
339 	for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++) {
340 		if (cmd_array[i].skb) {
341 			dev_dbg(adapter->dev, "cmd: free cmd buffer %d\n", i);
342 			dev_kfree_skb_any(cmd_array[i].skb);
343 		}
344 		if (!cmd_array[i].resp_skb)
345 			continue;
346 		dev_kfree_skb_any(cmd_array[i].resp_skb);
347 	}
348 	/* Release struct cmd_ctrl_node */
349 	if (adapter->cmd_pool) {
350 		dev_dbg(adapter->dev, "cmd: free cmd pool\n");
351 		kfree(adapter->cmd_pool);
352 		adapter->cmd_pool = NULL;
353 	}
354 
355 	return 0;
356 }
357 
358 /*
359  * This function handles events generated by firmware.
360  *
361  * Event body of events received from firmware are not used (though they are
362  * saved), only the event ID is used. Some events are re-invoked by
363  * the driver, with a new event body.
364  *
365  * After processing, the function calls the completion callback
366  * for cleanup.
367  */
mwifiex_process_event(struct mwifiex_adapter * adapter)368 int mwifiex_process_event(struct mwifiex_adapter *adapter)
369 {
370 	int ret;
371 	struct mwifiex_private *priv =
372 		mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
373 	struct sk_buff *skb = adapter->event_skb;
374 	u32 eventcause = adapter->event_cause;
375 	struct timeval tstamp;
376 	struct mwifiex_rxinfo *rx_info;
377 
378 	/* Save the last event to debug log */
379 	adapter->dbg.last_event_index =
380 			(adapter->dbg.last_event_index + 1) % DBG_CMD_NUM;
381 	adapter->dbg.last_event[adapter->dbg.last_event_index] =
382 							(u16) eventcause;
383 
384 	/* Get BSS number and corresponding priv */
385 	priv = mwifiex_get_priv_by_id(adapter, EVENT_GET_BSS_NUM(eventcause),
386 				      EVENT_GET_BSS_TYPE(eventcause));
387 	if (!priv)
388 		priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
389 	/* Clear BSS_NO_BITS from event */
390 	eventcause &= EVENT_ID_MASK;
391 	adapter->event_cause = eventcause;
392 
393 	if (skb) {
394 		rx_info = MWIFIEX_SKB_RXCB(skb);
395 		rx_info->bss_num = priv->bss_num;
396 		rx_info->bss_type = priv->bss_type;
397 	}
398 
399 	if (eventcause != EVENT_PS_SLEEP && eventcause != EVENT_PS_AWAKE) {
400 		do_gettimeofday(&tstamp);
401 		dev_dbg(adapter->dev, "event: %lu.%lu: cause: %#x\n",
402 			tstamp.tv_sec, tstamp.tv_usec, eventcause);
403 	}
404 
405 	ret = mwifiex_process_sta_event(priv);
406 
407 	adapter->event_cause = 0;
408 	adapter->event_skb = NULL;
409 	adapter->if_ops.event_complete(adapter, skb);
410 
411 	return ret;
412 }
413 
414 /*
415  * This function is used to send synchronous command to the firmware.
416  *
417  * it allocates a wait queue for the command and wait for the command
418  * response.
419  */
mwifiex_send_cmd_sync(struct mwifiex_private * priv,uint16_t cmd_no,u16 cmd_action,u32 cmd_oid,void * data_buf)420 int mwifiex_send_cmd_sync(struct mwifiex_private *priv, uint16_t cmd_no,
421 			  u16 cmd_action, u32 cmd_oid, void *data_buf)
422 {
423 	int ret = 0;
424 	struct mwifiex_adapter *adapter = priv->adapter;
425 
426 	adapter->cmd_wait_q_required = true;
427 
428 	ret = mwifiex_send_cmd_async(priv, cmd_no, cmd_action, cmd_oid,
429 				     data_buf);
430 	if (!ret)
431 		ret = mwifiex_wait_queue_complete(adapter);
432 
433 	return ret;
434 }
435 
436 
437 /*
438  * This function prepares a command and asynchronously send it to the firmware.
439  *
440  * Preparation includes -
441  *      - Sanity tests to make sure the card is still present or the FW
442  *        is not reset
443  *      - Getting a new command node from the command free queue
444  *      - Initializing the command node for default parameters
445  *      - Fill up the non-default parameters and buffer pointers
446  *      - Add the command to pending queue
447  */
mwifiex_send_cmd_async(struct mwifiex_private * priv,uint16_t cmd_no,u16 cmd_action,u32 cmd_oid,void * data_buf)448 int mwifiex_send_cmd_async(struct mwifiex_private *priv, uint16_t cmd_no,
449 			   u16 cmd_action, u32 cmd_oid, void *data_buf)
450 {
451 	int ret;
452 	struct mwifiex_adapter *adapter = priv->adapter;
453 	struct cmd_ctrl_node *cmd_node;
454 	struct host_cmd_ds_command *cmd_ptr;
455 
456 	if (!adapter) {
457 		pr_err("PREP_CMD: adapter is NULL\n");
458 		return -1;
459 	}
460 
461 	if (adapter->is_suspended) {
462 		dev_err(adapter->dev, "PREP_CMD: device in suspended state\n");
463 		return -1;
464 	}
465 
466 	if (adapter->surprise_removed) {
467 		dev_err(adapter->dev, "PREP_CMD: card is removed\n");
468 		return -1;
469 	}
470 
471 	if (adapter->hw_status == MWIFIEX_HW_STATUS_RESET) {
472 		if (cmd_no != HostCmd_CMD_FUNC_INIT) {
473 			dev_err(adapter->dev, "PREP_CMD: FW in reset state\n");
474 			return -1;
475 		}
476 	}
477 
478 	/* Get a new command node */
479 	cmd_node = mwifiex_get_cmd_node(adapter);
480 
481 	if (!cmd_node) {
482 		dev_err(adapter->dev, "PREP_CMD: no free cmd node\n");
483 		return -1;
484 	}
485 
486 	/* Initialize the command node */
487 	mwifiex_init_cmd_node(priv, cmd_node, cmd_oid, data_buf);
488 
489 	if (!cmd_node->cmd_skb) {
490 		dev_err(adapter->dev, "PREP_CMD: no free cmd buf\n");
491 		return -1;
492 	}
493 
494 	memset(skb_put(cmd_node->cmd_skb, sizeof(struct host_cmd_ds_command)),
495 	       0, sizeof(struct host_cmd_ds_command));
496 
497 	cmd_ptr = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
498 	cmd_ptr->command = cpu_to_le16(cmd_no);
499 	cmd_ptr->result = 0;
500 
501 	/* Prepare command */
502 	if (cmd_no) {
503 		ret = mwifiex_sta_prepare_cmd(priv, cmd_no, cmd_action,
504 					      cmd_oid, data_buf, cmd_ptr);
505 	} else {
506 		ret = mwifiex_cmd_host_cmd(priv, cmd_ptr, data_buf);
507 		cmd_node->cmd_flag |= CMD_F_HOSTCMD;
508 	}
509 
510 	/* Return error, since the command preparation failed */
511 	if (ret) {
512 		dev_err(adapter->dev, "PREP_CMD: cmd %#x preparation failed\n",
513 			cmd_no);
514 		mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
515 		return -1;
516 	}
517 
518 	/* Send command */
519 	if (cmd_no == HostCmd_CMD_802_11_SCAN) {
520 		mwifiex_queue_scan_cmd(priv, cmd_node);
521 	} else {
522 		adapter->cmd_queued = cmd_node;
523 		mwifiex_insert_cmd_to_pending_q(adapter, cmd_node, true);
524 	}
525 
526 	return ret;
527 }
528 
529 /*
530  * This function returns a command to the command free queue.
531  *
532  * The function also calls the completion callback if required, before
533  * cleaning the command node and re-inserting it into the free queue.
534  */
535 void
mwifiex_insert_cmd_to_free_q(struct mwifiex_adapter * adapter,struct cmd_ctrl_node * cmd_node)536 mwifiex_insert_cmd_to_free_q(struct mwifiex_adapter *adapter,
537 			     struct cmd_ctrl_node *cmd_node)
538 {
539 	unsigned long flags;
540 
541 	if (!cmd_node)
542 		return;
543 
544 	if (cmd_node->wait_q_enabled)
545 		mwifiex_complete_cmd(adapter, cmd_node);
546 	/* Clean the node */
547 	mwifiex_clean_cmd_node(adapter, cmd_node);
548 
549 	/* Insert node into cmd_free_q */
550 	spin_lock_irqsave(&adapter->cmd_free_q_lock, flags);
551 	list_add_tail(&cmd_node->list, &adapter->cmd_free_q);
552 	spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
553 }
554 
555 /*
556  * This function queues a command to the command pending queue.
557  *
558  * This in effect adds the command to the command list to be executed.
559  * Exit PS command is handled specially, by placing it always to the
560  * front of the command queue.
561  */
562 void
mwifiex_insert_cmd_to_pending_q(struct mwifiex_adapter * adapter,struct cmd_ctrl_node * cmd_node,u32 add_tail)563 mwifiex_insert_cmd_to_pending_q(struct mwifiex_adapter *adapter,
564 				struct cmd_ctrl_node *cmd_node, u32 add_tail)
565 {
566 	struct host_cmd_ds_command *host_cmd = NULL;
567 	u16 command;
568 	unsigned long flags;
569 
570 	host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
571 	if (!host_cmd) {
572 		dev_err(adapter->dev, "QUEUE_CMD: host_cmd is NULL\n");
573 		return;
574 	}
575 
576 	command = le16_to_cpu(host_cmd->command);
577 
578 	/* Exit_PS command needs to be queued in the header always. */
579 	if (command == HostCmd_CMD_802_11_PS_MODE_ENH) {
580 		struct host_cmd_ds_802_11_ps_mode_enh *pm =
581 						&host_cmd->params.psmode_enh;
582 		if ((le16_to_cpu(pm->action) == DIS_PS) ||
583 		    (le16_to_cpu(pm->action) == DIS_AUTO_PS)) {
584 			if (adapter->ps_state != PS_STATE_AWAKE)
585 				add_tail = false;
586 		}
587 	}
588 
589 	spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
590 	if (add_tail)
591 		list_add_tail(&cmd_node->list, &adapter->cmd_pending_q);
592 	else
593 		list_add(&cmd_node->list, &adapter->cmd_pending_q);
594 	spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
595 
596 	dev_dbg(adapter->dev, "cmd: QUEUE_CMD: cmd=%#x is queued\n", command);
597 }
598 
599 /*
600  * This function executes the next command in command pending queue.
601  *
602  * This function will fail if a command is already in processing stage,
603  * otherwise it will dequeue the first command from the command pending
604  * queue and send to the firmware.
605  *
606  * If the device is currently in host sleep mode, any commands, except the
607  * host sleep configuration command will de-activate the host sleep. For PS
608  * mode, the function will put the firmware back to sleep if applicable.
609  */
mwifiex_exec_next_cmd(struct mwifiex_adapter * adapter)610 int mwifiex_exec_next_cmd(struct mwifiex_adapter *adapter)
611 {
612 	struct mwifiex_private *priv;
613 	struct cmd_ctrl_node *cmd_node;
614 	int ret = 0;
615 	struct host_cmd_ds_command *host_cmd;
616 	unsigned long cmd_flags;
617 	unsigned long cmd_pending_q_flags;
618 
619 	/* Check if already in processing */
620 	if (adapter->curr_cmd) {
621 		dev_err(adapter->dev, "EXEC_NEXT_CMD: cmd in processing\n");
622 		return -1;
623 	}
624 
625 	spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
626 	/* Check if any command is pending */
627 	spin_lock_irqsave(&adapter->cmd_pending_q_lock, cmd_pending_q_flags);
628 	if (list_empty(&adapter->cmd_pending_q)) {
629 		spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
630 				       cmd_pending_q_flags);
631 		spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
632 		return 0;
633 	}
634 	cmd_node = list_first_entry(&adapter->cmd_pending_q,
635 				    struct cmd_ctrl_node, list);
636 	spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
637 			       cmd_pending_q_flags);
638 
639 	host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
640 	priv = cmd_node->priv;
641 
642 	if (adapter->ps_state != PS_STATE_AWAKE) {
643 		dev_err(adapter->dev, "%s: cannot send cmd in sleep state,"
644 				" this should not happen\n", __func__);
645 		spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
646 		return ret;
647 	}
648 
649 	spin_lock_irqsave(&adapter->cmd_pending_q_lock, cmd_pending_q_flags);
650 	list_del(&cmd_node->list);
651 	spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
652 			       cmd_pending_q_flags);
653 
654 	spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
655 	ret = mwifiex_dnld_cmd_to_fw(priv, cmd_node);
656 	priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
657 	/* Any command sent to the firmware when host is in sleep
658 	 * mode should de-configure host sleep. We should skip the
659 	 * host sleep configuration command itself though
660 	 */
661 	if (priv && (host_cmd->command !=
662 	     cpu_to_le16(HostCmd_CMD_802_11_HS_CFG_ENH))) {
663 		if (adapter->hs_activated) {
664 			adapter->is_hs_configured = false;
665 			mwifiex_hs_activated_event(priv, false);
666 		}
667 	}
668 
669 	return ret;
670 }
671 
672 /*
673  * This function handles the command response.
674  *
675  * After processing, the function cleans the command node and puts
676  * it back to the command free queue.
677  */
mwifiex_process_cmdresp(struct mwifiex_adapter * adapter)678 int mwifiex_process_cmdresp(struct mwifiex_adapter *adapter)
679 {
680 	struct host_cmd_ds_command *resp;
681 	struct mwifiex_private *priv =
682 		mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
683 	int ret = 0;
684 	uint16_t orig_cmdresp_no;
685 	uint16_t cmdresp_no;
686 	uint16_t cmdresp_result;
687 	struct timeval tstamp;
688 	unsigned long flags;
689 
690 	/* Now we got response from FW, cancel the command timer */
691 	del_timer(&adapter->cmd_timer);
692 
693 	if (!adapter->curr_cmd || !adapter->curr_cmd->resp_skb) {
694 		resp = (struct host_cmd_ds_command *) adapter->upld_buf;
695 		dev_err(adapter->dev, "CMD_RESP: NULL curr_cmd, %#x\n",
696 			le16_to_cpu(resp->command));
697 		return -1;
698 	}
699 
700 	adapter->num_cmd_timeout = 0;
701 
702 	resp = (struct host_cmd_ds_command *) adapter->curr_cmd->resp_skb->data;
703 	if (adapter->curr_cmd->cmd_flag & CMD_F_CANCELED) {
704 		dev_err(adapter->dev, "CMD_RESP: %#x been canceled\n",
705 			le16_to_cpu(resp->command));
706 		mwifiex_insert_cmd_to_free_q(adapter, adapter->curr_cmd);
707 		spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
708 		adapter->curr_cmd = NULL;
709 		spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
710 		return -1;
711 	}
712 
713 	if (adapter->curr_cmd->cmd_flag & CMD_F_HOSTCMD) {
714 		/* Copy original response back to response buffer */
715 		struct mwifiex_ds_misc_cmd *hostcmd;
716 		uint16_t size = le16_to_cpu(resp->size);
717 		dev_dbg(adapter->dev, "info: host cmd resp size = %d\n", size);
718 		size = min_t(u16, size, MWIFIEX_SIZE_OF_CMD_BUFFER);
719 		if (adapter->curr_cmd->data_buf) {
720 			hostcmd = adapter->curr_cmd->data_buf;
721 			hostcmd->len = size;
722 			memcpy(hostcmd->cmd, resp, size);
723 		}
724 	}
725 	orig_cmdresp_no = le16_to_cpu(resp->command);
726 
727 	/* Get BSS number and corresponding priv */
728 	priv = mwifiex_get_priv_by_id(adapter,
729 			     HostCmd_GET_BSS_NO(le16_to_cpu(resp->seq_num)),
730 			     HostCmd_GET_BSS_TYPE(le16_to_cpu(resp->seq_num)));
731 	if (!priv)
732 		priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
733 	/* Clear RET_BIT from HostCmd */
734 	resp->command = cpu_to_le16(orig_cmdresp_no & HostCmd_CMD_ID_MASK);
735 
736 	cmdresp_no = le16_to_cpu(resp->command);
737 	cmdresp_result = le16_to_cpu(resp->result);
738 
739 	/* Save the last command response to debug log */
740 	adapter->dbg.last_cmd_resp_index =
741 			(adapter->dbg.last_cmd_resp_index + 1) % DBG_CMD_NUM;
742 	adapter->dbg.last_cmd_resp_id[adapter->dbg.last_cmd_resp_index] =
743 								orig_cmdresp_no;
744 
745 	do_gettimeofday(&tstamp);
746 	dev_dbg(adapter->dev, "cmd: CMD_RESP: (%lu.%lu): 0x%x, result %d,"
747 		" len %d, seqno 0x%x\n",
748 	       tstamp.tv_sec, tstamp.tv_usec, orig_cmdresp_no, cmdresp_result,
749 	       le16_to_cpu(resp->size), le16_to_cpu(resp->seq_num));
750 
751 	if (!(orig_cmdresp_no & HostCmd_RET_BIT)) {
752 		dev_err(adapter->dev, "CMD_RESP: invalid cmd resp\n");
753 		if (adapter->curr_cmd->wait_q_enabled)
754 			adapter->cmd_wait_q.status = -1;
755 
756 		mwifiex_insert_cmd_to_free_q(adapter, adapter->curr_cmd);
757 		spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
758 		adapter->curr_cmd = NULL;
759 		spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
760 		return -1;
761 	}
762 
763 	if (adapter->curr_cmd->cmd_flag & CMD_F_HOSTCMD) {
764 		adapter->curr_cmd->cmd_flag &= ~CMD_F_HOSTCMD;
765 		if ((cmdresp_result == HostCmd_RESULT_OK) &&
766 		    (cmdresp_no == HostCmd_CMD_802_11_HS_CFG_ENH))
767 			ret = mwifiex_ret_802_11_hs_cfg(priv, resp);
768 	} else {
769 		/* handle response */
770 		ret = mwifiex_process_sta_cmdresp(priv, cmdresp_no, resp);
771 	}
772 
773 	/* Check init command response */
774 	if (adapter->hw_status == MWIFIEX_HW_STATUS_INITIALIZING) {
775 		if (ret) {
776 			dev_err(adapter->dev, "%s: cmd %#x failed during "
777 				"initialization\n", __func__, cmdresp_no);
778 			mwifiex_init_fw_complete(adapter);
779 			return -1;
780 		} else if (adapter->last_init_cmd == cmdresp_no)
781 			adapter->hw_status = MWIFIEX_HW_STATUS_INIT_DONE;
782 	}
783 
784 	if (adapter->curr_cmd) {
785 		if (adapter->curr_cmd->wait_q_enabled)
786 			adapter->cmd_wait_q.status = ret;
787 
788 		/* Clean up and put current command back to cmd_free_q */
789 		mwifiex_insert_cmd_to_free_q(adapter, adapter->curr_cmd);
790 
791 		spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
792 		adapter->curr_cmd = NULL;
793 		spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
794 	}
795 
796 	return ret;
797 }
798 
799 /*
800  * This function handles the timeout of command sending.
801  *
802  * It will re-send the same command again.
803  */
804 void
mwifiex_cmd_timeout_func(unsigned long function_context)805 mwifiex_cmd_timeout_func(unsigned long function_context)
806 {
807 	struct mwifiex_adapter *adapter =
808 		(struct mwifiex_adapter *) function_context;
809 	struct cmd_ctrl_node *cmd_node;
810 	struct timeval tstamp;
811 
812 	adapter->num_cmd_timeout++;
813 	adapter->dbg.num_cmd_timeout++;
814 	if (!adapter->curr_cmd) {
815 		dev_dbg(adapter->dev, "cmd: empty curr_cmd\n");
816 		return;
817 	}
818 	cmd_node = adapter->curr_cmd;
819 	if (cmd_node) {
820 		adapter->dbg.timeout_cmd_id =
821 			adapter->dbg.last_cmd_id[adapter->dbg.last_cmd_index];
822 		adapter->dbg.timeout_cmd_act =
823 			adapter->dbg.last_cmd_act[adapter->dbg.last_cmd_index];
824 		do_gettimeofday(&tstamp);
825 		dev_err(adapter->dev,
826 			"%s: Timeout cmd id (%lu.%lu) = %#x, act = %#x\n",
827 			__func__, tstamp.tv_sec, tstamp.tv_usec,
828 			adapter->dbg.timeout_cmd_id,
829 			adapter->dbg.timeout_cmd_act);
830 
831 		dev_err(adapter->dev, "num_data_h2c_failure = %d\n",
832 			adapter->dbg.num_tx_host_to_card_failure);
833 		dev_err(adapter->dev, "num_cmd_h2c_failure = %d\n",
834 			adapter->dbg.num_cmd_host_to_card_failure);
835 
836 		dev_err(adapter->dev, "num_cmd_timeout = %d\n",
837 			adapter->dbg.num_cmd_timeout);
838 		dev_err(adapter->dev, "num_tx_timeout = %d\n",
839 			adapter->dbg.num_tx_timeout);
840 
841 		dev_err(adapter->dev, "last_cmd_index = %d\n",
842 			adapter->dbg.last_cmd_index);
843 		print_hex_dump_bytes("last_cmd_id: ", DUMP_PREFIX_OFFSET,
844 				     adapter->dbg.last_cmd_id, DBG_CMD_NUM);
845 		print_hex_dump_bytes("last_cmd_act: ", DUMP_PREFIX_OFFSET,
846 				     adapter->dbg.last_cmd_act, DBG_CMD_NUM);
847 
848 		dev_err(adapter->dev, "last_cmd_resp_index = %d\n",
849 			adapter->dbg.last_cmd_resp_index);
850 		print_hex_dump_bytes("last_cmd_resp_id: ", DUMP_PREFIX_OFFSET,
851 				     adapter->dbg.last_cmd_resp_id,
852 				     DBG_CMD_NUM);
853 
854 		dev_err(adapter->dev, "last_event_index = %d\n",
855 			adapter->dbg.last_event_index);
856 		print_hex_dump_bytes("last_event: ", DUMP_PREFIX_OFFSET,
857 				     adapter->dbg.last_event, DBG_CMD_NUM);
858 
859 		dev_err(adapter->dev, "data_sent=%d cmd_sent=%d\n",
860 			adapter->data_sent, adapter->cmd_sent);
861 
862 		dev_err(adapter->dev, "ps_mode=%d ps_state=%d\n",
863 			adapter->ps_mode, adapter->ps_state);
864 
865 		if (cmd_node->wait_q_enabled) {
866 			adapter->cmd_wait_q.status = -ETIMEDOUT;
867 			wake_up_interruptible(&adapter->cmd_wait_q.wait);
868 			mwifiex_cancel_pending_ioctl(adapter);
869 			/* reset cmd_sent flag to unblock new commands */
870 			adapter->cmd_sent = false;
871 		}
872 	}
873 	if (adapter->hw_status == MWIFIEX_HW_STATUS_INITIALIZING)
874 		mwifiex_init_fw_complete(adapter);
875 }
876 
877 /*
878  * This function cancels all the pending commands.
879  *
880  * The current command, all commands in command pending queue and all scan
881  * commands in scan pending queue are cancelled. All the completion callbacks
882  * are called with failure status to ensure cleanup.
883  */
884 void
mwifiex_cancel_all_pending_cmd(struct mwifiex_adapter * adapter)885 mwifiex_cancel_all_pending_cmd(struct mwifiex_adapter *adapter)
886 {
887 	struct cmd_ctrl_node *cmd_node = NULL, *tmp_node;
888 	unsigned long flags;
889 
890 	/* Cancel current cmd */
891 	if ((adapter->curr_cmd) && (adapter->curr_cmd->wait_q_enabled)) {
892 		spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
893 		adapter->curr_cmd->wait_q_enabled = false;
894 		spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
895 		adapter->cmd_wait_q.status = -1;
896 		mwifiex_complete_cmd(adapter, adapter->curr_cmd);
897 	}
898 	/* Cancel all pending command */
899 	spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
900 	list_for_each_entry_safe(cmd_node, tmp_node,
901 				 &adapter->cmd_pending_q, list) {
902 		list_del(&cmd_node->list);
903 		spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
904 
905 		if (cmd_node->wait_q_enabled) {
906 			adapter->cmd_wait_q.status = -1;
907 			mwifiex_complete_cmd(adapter, cmd_node);
908 			cmd_node->wait_q_enabled = false;
909 		}
910 		mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
911 		spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
912 	}
913 	spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
914 
915 	/* Cancel all pending scan command */
916 	spin_lock_irqsave(&adapter->scan_pending_q_lock, flags);
917 	list_for_each_entry_safe(cmd_node, tmp_node,
918 				 &adapter->scan_pending_q, list) {
919 		list_del(&cmd_node->list);
920 		spin_unlock_irqrestore(&adapter->scan_pending_q_lock, flags);
921 
922 		cmd_node->wait_q_enabled = false;
923 		mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
924 		spin_lock_irqsave(&adapter->scan_pending_q_lock, flags);
925 	}
926 	spin_unlock_irqrestore(&adapter->scan_pending_q_lock, flags);
927 
928 	spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
929 	adapter->scan_processing = false;
930 	spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
931 }
932 
933 /*
934  * This function cancels all pending commands that matches with
935  * the given IOCTL request.
936  *
937  * Both the current command buffer and the pending command queue are
938  * searched for matching IOCTL request. The completion callback of
939  * the matched command is called with failure status to ensure cleanup.
940  * In case of scan commands, all pending commands in scan pending queue
941  * are cancelled.
942  */
943 void
mwifiex_cancel_pending_ioctl(struct mwifiex_adapter * adapter)944 mwifiex_cancel_pending_ioctl(struct mwifiex_adapter *adapter)
945 {
946 	struct cmd_ctrl_node *cmd_node = NULL, *tmp_node = NULL;
947 	unsigned long cmd_flags;
948 	unsigned long scan_pending_q_flags;
949 	uint16_t cancel_scan_cmd = false;
950 
951 	if ((adapter->curr_cmd) &&
952 	    (adapter->curr_cmd->wait_q_enabled)) {
953 		spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
954 		cmd_node = adapter->curr_cmd;
955 		cmd_node->wait_q_enabled = false;
956 		cmd_node->cmd_flag |= CMD_F_CANCELED;
957 		mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
958 		mwifiex_complete_cmd(adapter, adapter->curr_cmd);
959 		adapter->curr_cmd = NULL;
960 		spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
961 	}
962 
963 	/* Cancel all pending scan command */
964 	spin_lock_irqsave(&adapter->scan_pending_q_lock,
965 			  scan_pending_q_flags);
966 	list_for_each_entry_safe(cmd_node, tmp_node,
967 				 &adapter->scan_pending_q, list) {
968 		list_del(&cmd_node->list);
969 		spin_unlock_irqrestore(&adapter->scan_pending_q_lock,
970 				       scan_pending_q_flags);
971 		cmd_node->wait_q_enabled = false;
972 		mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
973 		spin_lock_irqsave(&adapter->scan_pending_q_lock,
974 				  scan_pending_q_flags);
975 		cancel_scan_cmd = true;
976 	}
977 	spin_unlock_irqrestore(&adapter->scan_pending_q_lock,
978 			       scan_pending_q_flags);
979 
980 	if (cancel_scan_cmd) {
981 		spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
982 		adapter->scan_processing = false;
983 		spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
984 	}
985 	adapter->cmd_wait_q.status = -1;
986 }
987 
988 /*
989  * This function sends the sleep confirm command to firmware, if
990  * possible.
991  *
992  * The sleep confirm command cannot be issued if command response,
993  * data response or event response is awaiting handling, or if we
994  * are in the middle of sending a command, or expecting a command
995  * response.
996  */
997 void
mwifiex_check_ps_cond(struct mwifiex_adapter * adapter)998 mwifiex_check_ps_cond(struct mwifiex_adapter *adapter)
999 {
1000 	if (!adapter->cmd_sent &&
1001 	    !adapter->curr_cmd && !IS_CARD_RX_RCVD(adapter))
1002 		mwifiex_dnld_sleep_confirm_cmd(adapter);
1003 	else
1004 		dev_dbg(adapter->dev,
1005 			"cmd: Delay Sleep Confirm (%s%s%s)\n",
1006 			(adapter->cmd_sent) ? "D" : "",
1007 			(adapter->curr_cmd) ? "C" : "",
1008 			(IS_CARD_RX_RCVD(adapter)) ? "R" : "");
1009 }
1010 
1011 /*
1012  * This function sends a Host Sleep activated event to applications.
1013  *
1014  * This event is generated by the driver, with a blank event body.
1015  */
1016 void
mwifiex_hs_activated_event(struct mwifiex_private * priv,u8 activated)1017 mwifiex_hs_activated_event(struct mwifiex_private *priv, u8 activated)
1018 {
1019 	if (activated) {
1020 		if (priv->adapter->is_hs_configured) {
1021 			priv->adapter->hs_activated = true;
1022 			dev_dbg(priv->adapter->dev, "event: hs_activated\n");
1023 			priv->adapter->hs_activate_wait_q_woken = true;
1024 			wake_up_interruptible(
1025 				&priv->adapter->hs_activate_wait_q);
1026 		} else {
1027 			dev_dbg(priv->adapter->dev, "event: HS not configured\n");
1028 		}
1029 	} else {
1030 		dev_dbg(priv->adapter->dev, "event: hs_deactivated\n");
1031 		priv->adapter->hs_activated = false;
1032 	}
1033 }
1034 
1035 /*
1036  * This function handles the command response of a Host Sleep configuration
1037  * command.
1038  *
1039  * Handling includes changing the header fields into CPU format
1040  * and setting the current host sleep activation status in driver.
1041  *
1042  * In case host sleep status change, the function generates an event to
1043  * notify the applications.
1044  */
mwifiex_ret_802_11_hs_cfg(struct mwifiex_private * priv,struct host_cmd_ds_command * resp)1045 int mwifiex_ret_802_11_hs_cfg(struct mwifiex_private *priv,
1046 			      struct host_cmd_ds_command *resp)
1047 {
1048 	struct mwifiex_adapter *adapter = priv->adapter;
1049 	struct host_cmd_ds_802_11_hs_cfg_enh *phs_cfg =
1050 		&resp->params.opt_hs_cfg;
1051 	uint32_t conditions = le32_to_cpu(phs_cfg->params.hs_config.conditions);
1052 
1053 	if (phs_cfg->action == cpu_to_le16(HS_ACTIVATE)) {
1054 		mwifiex_hs_activated_event(priv, true);
1055 		return 0;
1056 	} else {
1057 		dev_dbg(adapter->dev, "cmd: CMD_RESP: HS_CFG cmd reply"
1058 			" result=%#x, conditions=0x%x gpio=0x%x gap=0x%x\n",
1059 			resp->result, conditions,
1060 			phs_cfg->params.hs_config.gpio,
1061 			phs_cfg->params.hs_config.gap);
1062 	}
1063 	if (conditions != HOST_SLEEP_CFG_CANCEL) {
1064 		adapter->is_hs_configured = true;
1065 	} else {
1066 		adapter->is_hs_configured = false;
1067 		if (adapter->hs_activated)
1068 			mwifiex_hs_activated_event(priv, false);
1069 	}
1070 
1071 	return 0;
1072 }
1073 
1074 /*
1075  * This function wakes up the adapter and generates a Host Sleep
1076  * cancel event on receiving the power up interrupt.
1077  */
1078 void
mwifiex_process_hs_config(struct mwifiex_adapter * adapter)1079 mwifiex_process_hs_config(struct mwifiex_adapter *adapter)
1080 {
1081 	dev_dbg(adapter->dev, "info: %s: auto cancelling host sleep"
1082 		" since there is interrupt from the firmware\n", __func__);
1083 
1084 	adapter->if_ops.wakeup(adapter);
1085 	adapter->hs_activated = false;
1086 	adapter->is_hs_configured = false;
1087 	adapter->is_suspended = false;
1088 	mwifiex_hs_activated_event(mwifiex_get_priv(adapter,
1089 						    MWIFIEX_BSS_ROLE_ANY),
1090 				   false);
1091 }
1092 
1093 /*
1094  * This function handles the command response of a sleep confirm command.
1095  *
1096  * The function sets the card state to SLEEP if the response indicates success.
1097  */
1098 void
mwifiex_process_sleep_confirm_resp(struct mwifiex_adapter * adapter,u8 * pbuf,u32 upld_len)1099 mwifiex_process_sleep_confirm_resp(struct mwifiex_adapter *adapter,
1100 				   u8 *pbuf, u32 upld_len)
1101 {
1102 	struct host_cmd_ds_command *cmd = (struct host_cmd_ds_command *) pbuf;
1103 	struct mwifiex_private *priv =
1104 		mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
1105 	uint16_t result = le16_to_cpu(cmd->result);
1106 	uint16_t command = le16_to_cpu(cmd->command);
1107 	uint16_t seq_num = le16_to_cpu(cmd->seq_num);
1108 
1109 	if (!upld_len) {
1110 		dev_err(adapter->dev, "%s: cmd size is 0\n", __func__);
1111 		return;
1112 	}
1113 
1114 	/* Get BSS number and corresponding priv */
1115 	priv = mwifiex_get_priv_by_id(adapter, HostCmd_GET_BSS_NO(seq_num),
1116 				      HostCmd_GET_BSS_TYPE(seq_num));
1117 	if (!priv)
1118 		priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
1119 
1120 	/* Update sequence number */
1121 	seq_num = HostCmd_GET_SEQ_NO(seq_num);
1122 	/* Clear RET_BIT from HostCmd */
1123 	command &= HostCmd_CMD_ID_MASK;
1124 
1125 	if (command != HostCmd_CMD_802_11_PS_MODE_ENH) {
1126 		dev_err(adapter->dev,
1127 			"%s: rcvd unexpected resp for cmd %#x, result = %x\n",
1128 			__func__, command, result);
1129 		return;
1130 	}
1131 
1132 	if (result) {
1133 		dev_err(adapter->dev, "%s: sleep confirm cmd failed\n",
1134 			__func__);
1135 		adapter->pm_wakeup_card_req = false;
1136 		adapter->ps_state = PS_STATE_AWAKE;
1137 		return;
1138 	}
1139 	adapter->pm_wakeup_card_req = true;
1140 	if (adapter->is_hs_configured)
1141 		mwifiex_hs_activated_event(mwifiex_get_priv
1142 						(adapter, MWIFIEX_BSS_ROLE_ANY),
1143 					   true);
1144 	adapter->ps_state = PS_STATE_SLEEP;
1145 	cmd->command = cpu_to_le16(command);
1146 	cmd->seq_num = cpu_to_le16(seq_num);
1147 }
1148 EXPORT_SYMBOL_GPL(mwifiex_process_sleep_confirm_resp);
1149 
1150 /*
1151  * This function prepares an enhanced power mode command.
1152  *
1153  * This function can be used to disable power save or to configure
1154  * power save with auto PS or STA PS or auto deep sleep.
1155  *
1156  * Preparation includes -
1157  *      - Setting command ID, action and proper size
1158  *      - Setting Power Save bitmap, PS parameters TLV, PS mode TLV,
1159  *        auto deep sleep TLV (as required)
1160  *      - Ensuring correct endian-ness
1161  */
mwifiex_cmd_enh_power_mode(struct mwifiex_private * priv,struct host_cmd_ds_command * cmd,u16 cmd_action,uint16_t ps_bitmap,struct mwifiex_ds_auto_ds * auto_ds)1162 int mwifiex_cmd_enh_power_mode(struct mwifiex_private *priv,
1163 			       struct host_cmd_ds_command *cmd,
1164 			       u16 cmd_action, uint16_t ps_bitmap,
1165 			       struct mwifiex_ds_auto_ds *auto_ds)
1166 {
1167 	struct host_cmd_ds_802_11_ps_mode_enh *psmode_enh =
1168 		&cmd->params.psmode_enh;
1169 	u8 *tlv;
1170 	u16 cmd_size = 0;
1171 
1172 	cmd->command = cpu_to_le16(HostCmd_CMD_802_11_PS_MODE_ENH);
1173 	if (cmd_action == DIS_AUTO_PS) {
1174 		psmode_enh->action = cpu_to_le16(DIS_AUTO_PS);
1175 		psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1176 		cmd->size = cpu_to_le16(S_DS_GEN + sizeof(psmode_enh->action) +
1177 					sizeof(psmode_enh->params.ps_bitmap));
1178 	} else if (cmd_action == GET_PS) {
1179 		psmode_enh->action = cpu_to_le16(GET_PS);
1180 		psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1181 		cmd->size = cpu_to_le16(S_DS_GEN + sizeof(psmode_enh->action) +
1182 					sizeof(psmode_enh->params.ps_bitmap));
1183 	} else if (cmd_action == EN_AUTO_PS) {
1184 		psmode_enh->action = cpu_to_le16(EN_AUTO_PS);
1185 		psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1186 		cmd_size = S_DS_GEN + sizeof(psmode_enh->action) +
1187 					sizeof(psmode_enh->params.ps_bitmap);
1188 		tlv = (u8 *) cmd + cmd_size;
1189 		if (ps_bitmap & BITMAP_STA_PS) {
1190 			struct mwifiex_adapter *adapter = priv->adapter;
1191 			struct mwifiex_ie_types_ps_param *ps_tlv =
1192 				(struct mwifiex_ie_types_ps_param *) tlv;
1193 			struct mwifiex_ps_param *ps_mode = &ps_tlv->param;
1194 			ps_tlv->header.type = cpu_to_le16(TLV_TYPE_PS_PARAM);
1195 			ps_tlv->header.len = cpu_to_le16(sizeof(*ps_tlv) -
1196 					sizeof(struct mwifiex_ie_types_header));
1197 			cmd_size += sizeof(*ps_tlv);
1198 			tlv += sizeof(*ps_tlv);
1199 			dev_dbg(adapter->dev, "cmd: PS Command: Enter PS\n");
1200 			ps_mode->null_pkt_interval =
1201 					cpu_to_le16(adapter->null_pkt_interval);
1202 			ps_mode->multiple_dtims =
1203 					cpu_to_le16(adapter->multiple_dtim);
1204 			ps_mode->bcn_miss_timeout =
1205 					cpu_to_le16(adapter->bcn_miss_time_out);
1206 			ps_mode->local_listen_interval =
1207 				cpu_to_le16(adapter->local_listen_interval);
1208 			ps_mode->adhoc_wake_period =
1209 				cpu_to_le16(adapter->adhoc_awake_period);
1210 			ps_mode->delay_to_ps =
1211 					cpu_to_le16(adapter->delay_to_ps);
1212 			ps_mode->mode = cpu_to_le16(adapter->enhanced_ps_mode);
1213 
1214 		}
1215 		if (ps_bitmap & BITMAP_AUTO_DS) {
1216 			struct mwifiex_ie_types_auto_ds_param *auto_ds_tlv =
1217 				(struct mwifiex_ie_types_auto_ds_param *) tlv;
1218 			u16 idletime = 0;
1219 
1220 			auto_ds_tlv->header.type =
1221 				cpu_to_le16(TLV_TYPE_AUTO_DS_PARAM);
1222 			auto_ds_tlv->header.len =
1223 				cpu_to_le16(sizeof(*auto_ds_tlv) -
1224 					sizeof(struct mwifiex_ie_types_header));
1225 			cmd_size += sizeof(*auto_ds_tlv);
1226 			tlv += sizeof(*auto_ds_tlv);
1227 			if (auto_ds)
1228 				idletime = auto_ds->idle_time;
1229 			dev_dbg(priv->adapter->dev,
1230 				"cmd: PS Command: Enter Auto Deep Sleep\n");
1231 			auto_ds_tlv->deep_sleep_timeout = cpu_to_le16(idletime);
1232 		}
1233 		cmd->size = cpu_to_le16(cmd_size);
1234 	}
1235 	return 0;
1236 }
1237 
1238 /*
1239  * This function handles the command response of an enhanced power mode
1240  * command.
1241  *
1242  * Handling includes changing the header fields into CPU format
1243  * and setting the current enhanced power mode in driver.
1244  */
mwifiex_ret_enh_power_mode(struct mwifiex_private * priv,struct host_cmd_ds_command * resp,struct mwifiex_ds_pm_cfg * pm_cfg)1245 int mwifiex_ret_enh_power_mode(struct mwifiex_private *priv,
1246 			       struct host_cmd_ds_command *resp,
1247 			       struct mwifiex_ds_pm_cfg *pm_cfg)
1248 {
1249 	struct mwifiex_adapter *adapter = priv->adapter;
1250 	struct host_cmd_ds_802_11_ps_mode_enh *ps_mode =
1251 		&resp->params.psmode_enh;
1252 	uint16_t action = le16_to_cpu(ps_mode->action);
1253 	uint16_t ps_bitmap = le16_to_cpu(ps_mode->params.ps_bitmap);
1254 	uint16_t auto_ps_bitmap =
1255 		le16_to_cpu(ps_mode->params.ps_bitmap);
1256 
1257 	dev_dbg(adapter->dev,
1258 		"info: %s: PS_MODE cmd reply result=%#x action=%#X\n",
1259 		__func__, resp->result, action);
1260 	if (action == EN_AUTO_PS) {
1261 		if (auto_ps_bitmap & BITMAP_AUTO_DS) {
1262 			dev_dbg(adapter->dev, "cmd: Enabled auto deep sleep\n");
1263 			priv->adapter->is_deep_sleep = true;
1264 		}
1265 		if (auto_ps_bitmap & BITMAP_STA_PS) {
1266 			dev_dbg(adapter->dev, "cmd: Enabled STA power save\n");
1267 			if (adapter->sleep_period.period)
1268 				dev_dbg(adapter->dev,
1269 					"cmd: set to uapsd/pps mode\n");
1270 		}
1271 	} else if (action == DIS_AUTO_PS) {
1272 		if (ps_bitmap & BITMAP_AUTO_DS) {
1273 			priv->adapter->is_deep_sleep = false;
1274 			dev_dbg(adapter->dev, "cmd: Disabled auto deep sleep\n");
1275 		}
1276 		if (ps_bitmap & BITMAP_STA_PS) {
1277 			dev_dbg(adapter->dev, "cmd: Disabled STA power save\n");
1278 			if (adapter->sleep_period.period) {
1279 				adapter->delay_null_pkt = false;
1280 				adapter->tx_lock_flag = false;
1281 				adapter->pps_uapsd_mode = false;
1282 			}
1283 		}
1284 	} else if (action == GET_PS) {
1285 		if (ps_bitmap & BITMAP_STA_PS)
1286 			adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_PSP;
1287 		else
1288 			adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_CAM;
1289 
1290 		dev_dbg(adapter->dev, "cmd: ps_bitmap=%#x\n", ps_bitmap);
1291 
1292 		if (pm_cfg) {
1293 			/* This section is for get power save mode */
1294 			if (ps_bitmap & BITMAP_STA_PS)
1295 				pm_cfg->param.ps_mode = 1;
1296 			else
1297 				pm_cfg->param.ps_mode = 0;
1298 		}
1299 	}
1300 	return 0;
1301 }
1302 
1303 /*
1304  * This function prepares command to get hardware specifications.
1305  *
1306  * Preparation includes -
1307  *      - Setting command ID, action and proper size
1308  *      - Setting permanent address parameter
1309  *      - Ensuring correct endian-ness
1310  */
mwifiex_cmd_get_hw_spec(struct mwifiex_private * priv,struct host_cmd_ds_command * cmd)1311 int mwifiex_cmd_get_hw_spec(struct mwifiex_private *priv,
1312 			    struct host_cmd_ds_command *cmd)
1313 {
1314 	struct host_cmd_ds_get_hw_spec *hw_spec = &cmd->params.hw_spec;
1315 
1316 	cmd->command = cpu_to_le16(HostCmd_CMD_GET_HW_SPEC);
1317 	cmd->size =
1318 		cpu_to_le16(sizeof(struct host_cmd_ds_get_hw_spec) + S_DS_GEN);
1319 	memcpy(hw_spec->permanent_addr, priv->curr_addr, ETH_ALEN);
1320 
1321 	return 0;
1322 }
1323 
1324 /*
1325  * This function handles the command response of get hardware
1326  * specifications.
1327  *
1328  * Handling includes changing the header fields into CPU format
1329  * and saving/updating the following parameters in driver -
1330  *      - Firmware capability information
1331  *      - Firmware band settings
1332  *      - Ad-hoc start band and channel
1333  *      - Ad-hoc 11n activation status
1334  *      - Firmware release number
1335  *      - Number of antennas
1336  *      - Hardware address
1337  *      - Hardware interface version
1338  *      - Firmware version
1339  *      - Region code
1340  *      - 11n capabilities
1341  *      - MCS support fields
1342  *      - MP end port
1343  */
mwifiex_ret_get_hw_spec(struct mwifiex_private * priv,struct host_cmd_ds_command * resp)1344 int mwifiex_ret_get_hw_spec(struct mwifiex_private *priv,
1345 			    struct host_cmd_ds_command *resp)
1346 {
1347 	struct host_cmd_ds_get_hw_spec *hw_spec = &resp->params.hw_spec;
1348 	struct mwifiex_adapter *adapter = priv->adapter;
1349 	int i;
1350 
1351 	adapter->fw_cap_info = le32_to_cpu(hw_spec->fw_cap_info);
1352 
1353 	if (IS_SUPPORT_MULTI_BANDS(adapter))
1354 		adapter->fw_bands = (u8) GET_FW_DEFAULT_BANDS(adapter);
1355 	else
1356 		adapter->fw_bands = BAND_B;
1357 
1358 	adapter->config_bands = adapter->fw_bands;
1359 
1360 	if (adapter->fw_bands & BAND_A) {
1361 		if (adapter->fw_bands & BAND_GN) {
1362 			adapter->config_bands |= BAND_AN;
1363 			adapter->fw_bands |= BAND_AN;
1364 		}
1365 		if (adapter->fw_bands & BAND_AN) {
1366 			adapter->adhoc_start_band = BAND_A | BAND_AN;
1367 			adapter->adhoc_11n_enabled = true;
1368 		} else {
1369 			adapter->adhoc_start_band = BAND_A;
1370 		}
1371 		priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL_A;
1372 	} else if (adapter->fw_bands & BAND_GN) {
1373 		adapter->adhoc_start_band = BAND_G | BAND_B | BAND_GN;
1374 		priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1375 		adapter->adhoc_11n_enabled = true;
1376 	} else if (adapter->fw_bands & BAND_G) {
1377 		adapter->adhoc_start_band = BAND_G | BAND_B;
1378 		priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1379 	} else if (adapter->fw_bands & BAND_B) {
1380 		adapter->adhoc_start_band = BAND_B;
1381 		priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1382 	}
1383 
1384 	adapter->fw_release_number = le32_to_cpu(hw_spec->fw_release_number);
1385 	adapter->number_of_antenna = le16_to_cpu(hw_spec->number_of_antenna);
1386 
1387 	dev_dbg(adapter->dev, "info: GET_HW_SPEC: fw_release_number- %#x\n",
1388 		adapter->fw_release_number);
1389 	dev_dbg(adapter->dev, "info: GET_HW_SPEC: permanent addr: %pM\n",
1390 		hw_spec->permanent_addr);
1391 	dev_dbg(adapter->dev,
1392 		"info: GET_HW_SPEC: hw_if_version=%#x version=%#x\n",
1393 		le16_to_cpu(hw_spec->hw_if_version),
1394 		le16_to_cpu(hw_spec->version));
1395 
1396 	if (priv->curr_addr[0] == 0xff)
1397 		memmove(priv->curr_addr, hw_spec->permanent_addr, ETH_ALEN);
1398 
1399 	adapter->region_code = le16_to_cpu(hw_spec->region_code);
1400 
1401 	for (i = 0; i < MWIFIEX_MAX_REGION_CODE; i++)
1402 		/* Use the region code to search for the index */
1403 		if (adapter->region_code == region_code_index[i])
1404 			break;
1405 
1406 	/* If it's unidentified region code, use the default (USA) */
1407 	if (i >= MWIFIEX_MAX_REGION_CODE) {
1408 		adapter->region_code = 0x10;
1409 		dev_dbg(adapter->dev,
1410 			"cmd: unknown region code, use default (USA)\n");
1411 	}
1412 
1413 	adapter->hw_dot_11n_dev_cap = le32_to_cpu(hw_spec->dot_11n_dev_cap);
1414 	adapter->hw_dev_mcs_support = hw_spec->dev_mcs_support;
1415 
1416 	if (adapter->if_ops.update_mp_end_port)
1417 		adapter->if_ops.update_mp_end_port(adapter,
1418 					le16_to_cpu(hw_spec->mp_end_port));
1419 
1420 	return 0;
1421 }
1422