1 /*
2  * Marvell Wireless LAN device driver: commands and events
3  *
4  * Copyright (C) 2011, Marvell International Ltd.
5  *
6  * This software file (the "File") is distributed by Marvell International
7  * Ltd. under the terms of the GNU General Public License Version 2, June 1991
8  * (the "License").  You may use, redistribute and/or modify this File in
9  * accordance with the terms and conditions of the License, a copy of which
10  * is available by writing to the Free Software Foundation, Inc.,
11  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
12  * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
13  *
14  * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
15  * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
16  * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
17  * this warranty disclaimer.
18  */
19 
20 #include "decl.h"
21 #include "ioctl.h"
22 #include "util.h"
23 #include "fw.h"
24 #include "main.h"
25 #include "wmm.h"
26 #include "11n.h"
27 
28 /*
29  * This function initializes a command node.
30  *
31  * The actual allocation of the node is not done by this function. It only
32  * initiates a node by filling it with default parameters. Similarly,
33  * allocation of the different buffers used (IOCTL buffer, data buffer) are
34  * not done by this function either.
35  */
36 static void
mwifiex_init_cmd_node(struct mwifiex_private * priv,struct cmd_ctrl_node * cmd_node,u32 cmd_oid,void * data_buf)37 mwifiex_init_cmd_node(struct mwifiex_private *priv,
38 		      struct cmd_ctrl_node *cmd_node,
39 		      u32 cmd_oid, void *data_buf)
40 {
41 	cmd_node->priv = priv;
42 	cmd_node->cmd_oid = cmd_oid;
43 	if (priv->adapter->cmd_wait_q_required) {
44 		cmd_node->wait_q_enabled = priv->adapter->cmd_wait_q_required;
45 		priv->adapter->cmd_wait_q_required = false;
46 		cmd_node->cmd_wait_q_woken = false;
47 		cmd_node->condition = &cmd_node->cmd_wait_q_woken;
48 	}
49 	cmd_node->data_buf = data_buf;
50 	cmd_node->cmd_skb = cmd_node->skb;
51 }
52 
53 /*
54  * This function returns a command node from the free queue depending upon
55  * availability.
56  */
57 static struct cmd_ctrl_node *
mwifiex_get_cmd_node(struct mwifiex_adapter * adapter)58 mwifiex_get_cmd_node(struct mwifiex_adapter *adapter)
59 {
60 	struct cmd_ctrl_node *cmd_node;
61 	unsigned long flags;
62 
63 	spin_lock_irqsave(&adapter->cmd_free_q_lock, flags);
64 	if (list_empty(&adapter->cmd_free_q)) {
65 		dev_err(adapter->dev, "GET_CMD_NODE: cmd node not available\n");
66 		spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
67 		return NULL;
68 	}
69 	cmd_node = list_first_entry(&adapter->cmd_free_q,
70 			struct cmd_ctrl_node, list);
71 	list_del(&cmd_node->list);
72 	spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
73 
74 	return cmd_node;
75 }
76 
77 /*
78  * This function cleans up a command node.
79  *
80  * The function resets the fields including the buffer pointers.
81  * This function does not try to free the buffers. They must be
82  * freed before calling this function.
83  *
84  * This function will however call the receive completion callback
85  * in case a response buffer is still available before resetting
86  * the pointer.
87  */
88 static void
mwifiex_clean_cmd_node(struct mwifiex_adapter * adapter,struct cmd_ctrl_node * cmd_node)89 mwifiex_clean_cmd_node(struct mwifiex_adapter *adapter,
90 		       struct cmd_ctrl_node *cmd_node)
91 {
92 	cmd_node->cmd_oid = 0;
93 	cmd_node->cmd_flag = 0;
94 	cmd_node->data_buf = NULL;
95 	cmd_node->wait_q_enabled = false;
96 
97 	if (cmd_node->cmd_skb)
98 		skb_trim(cmd_node->cmd_skb, 0);
99 
100 	if (cmd_node->resp_skb) {
101 		adapter->if_ops.cmdrsp_complete(adapter, cmd_node->resp_skb);
102 		cmd_node->resp_skb = NULL;
103 	}
104 }
105 
106 /*
107  * This function sends a host command to the firmware.
108  *
109  * The function copies the host command into the driver command
110  * buffer, which will be transferred to the firmware later by the
111  * main thread.
112  */
mwifiex_cmd_host_cmd(struct mwifiex_private * priv,struct host_cmd_ds_command * cmd,struct mwifiex_ds_misc_cmd * pcmd_ptr)113 static int mwifiex_cmd_host_cmd(struct mwifiex_private *priv,
114 				struct host_cmd_ds_command *cmd,
115 				struct mwifiex_ds_misc_cmd *pcmd_ptr)
116 {
117 	/* Copy the HOST command to command buffer */
118 	memcpy(cmd, pcmd_ptr->cmd, pcmd_ptr->len);
119 	dev_dbg(priv->adapter->dev, "cmd: host cmd size = %d\n", pcmd_ptr->len);
120 	return 0;
121 }
122 
123 /*
124  * This function downloads a command to the firmware.
125  *
126  * The function performs sanity tests, sets the command sequence
127  * number and size, converts the header fields to CPU format before
128  * sending. Afterwards, it logs the command ID and action for debugging
129  * and sets up the command timeout timer.
130  */
mwifiex_dnld_cmd_to_fw(struct mwifiex_private * priv,struct cmd_ctrl_node * cmd_node)131 static int mwifiex_dnld_cmd_to_fw(struct mwifiex_private *priv,
132 				  struct cmd_ctrl_node *cmd_node)
133 {
134 
135 	struct mwifiex_adapter *adapter = priv->adapter;
136 	int ret;
137 	struct host_cmd_ds_command *host_cmd;
138 	uint16_t cmd_code;
139 	uint16_t cmd_size;
140 	struct timeval tstamp;
141 	unsigned long flags;
142 
143 	if (!adapter || !cmd_node)
144 		return -1;
145 
146 	host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
147 
148 	/* Sanity test */
149 	if (host_cmd == NULL || host_cmd->size == 0) {
150 		dev_err(adapter->dev, "DNLD_CMD: host_cmd is null"
151 			" or cmd size is 0, not sending\n");
152 		if (cmd_node->wait_q_enabled)
153 			adapter->cmd_wait_q.status = -1;
154 		mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
155 		return -1;
156 	}
157 
158 	/* Set command sequence number */
159 	adapter->seq_num++;
160 	host_cmd->seq_num = cpu_to_le16(HostCmd_SET_SEQ_NO_BSS_INFO
161 			    (adapter->seq_num, cmd_node->priv->bss_num,
162 			     cmd_node->priv->bss_type));
163 
164 	spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
165 	adapter->curr_cmd = cmd_node;
166 	spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
167 
168 	cmd_code = le16_to_cpu(host_cmd->command);
169 	cmd_size = le16_to_cpu(host_cmd->size);
170 
171 	skb_trim(cmd_node->cmd_skb, cmd_size);
172 
173 	do_gettimeofday(&tstamp);
174 	dev_dbg(adapter->dev, "cmd: DNLD_CMD: (%lu.%lu): %#x, act %#x, len %d,"
175 		" seqno %#x\n",
176 		tstamp.tv_sec, tstamp.tv_usec, cmd_code,
177 	       le16_to_cpu(*(__le16 *) ((u8 *) host_cmd + S_DS_GEN)), cmd_size,
178 	       le16_to_cpu(host_cmd->seq_num));
179 
180 	skb_push(cmd_node->cmd_skb, INTF_HEADER_LEN);
181 
182 	ret = adapter->if_ops.host_to_card(adapter, MWIFIEX_TYPE_CMD,
183 					   cmd_node->cmd_skb, NULL);
184 
185 	skb_pull(cmd_node->cmd_skb, INTF_HEADER_LEN);
186 
187 	if (ret == -1) {
188 		dev_err(adapter->dev, "DNLD_CMD: host to card failed\n");
189 		if (cmd_node->wait_q_enabled)
190 			adapter->cmd_wait_q.status = -1;
191 		mwifiex_insert_cmd_to_free_q(adapter, adapter->curr_cmd);
192 
193 		spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
194 		adapter->curr_cmd = NULL;
195 		spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
196 
197 		adapter->dbg.num_cmd_host_to_card_failure++;
198 		return -1;
199 	}
200 
201 	/* Save the last command id and action to debug log */
202 	adapter->dbg.last_cmd_index =
203 		(adapter->dbg.last_cmd_index + 1) % DBG_CMD_NUM;
204 	adapter->dbg.last_cmd_id[adapter->dbg.last_cmd_index] = cmd_code;
205 	adapter->dbg.last_cmd_act[adapter->dbg.last_cmd_index] =
206 		le16_to_cpu(*(__le16 *) ((u8 *) host_cmd + S_DS_GEN));
207 
208 	/* Clear BSS_NO_BITS from HostCmd */
209 	cmd_code &= HostCmd_CMD_ID_MASK;
210 
211 	/* Setup the timer after transmit command */
212 	mod_timer(&adapter->cmd_timer,
213 		jiffies + (MWIFIEX_TIMER_10S * HZ) / 1000);
214 
215 	return 0;
216 }
217 
218 /*
219  * This function downloads a sleep confirm command to the firmware.
220  *
221  * The function performs sanity tests, sets the command sequence
222  * number and size, converts the header fields to CPU format before
223  * sending.
224  *
225  * No responses are needed for sleep confirm command.
226  */
mwifiex_dnld_sleep_confirm_cmd(struct mwifiex_adapter * adapter)227 static int mwifiex_dnld_sleep_confirm_cmd(struct mwifiex_adapter *adapter)
228 {
229 	int ret;
230 	struct mwifiex_private *priv;
231 	struct mwifiex_opt_sleep_confirm *sleep_cfm_buf =
232 				(struct mwifiex_opt_sleep_confirm *)
233 				adapter->sleep_cfm->data;
234 	priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
235 
236 	sleep_cfm_buf->seq_num =
237 		cpu_to_le16((HostCmd_SET_SEQ_NO_BSS_INFO
238 					(adapter->seq_num, priv->bss_num,
239 					 priv->bss_type)));
240 	adapter->seq_num++;
241 
242 	skb_push(adapter->sleep_cfm, INTF_HEADER_LEN);
243 	ret = adapter->if_ops.host_to_card(adapter, MWIFIEX_TYPE_CMD,
244 					   adapter->sleep_cfm, NULL);
245 	skb_pull(adapter->sleep_cfm, INTF_HEADER_LEN);
246 
247 	if (ret == -1) {
248 		dev_err(adapter->dev, "SLEEP_CFM: failed\n");
249 		adapter->dbg.num_cmd_sleep_cfm_host_to_card_failure++;
250 		return -1;
251 	}
252 	if (GET_BSS_ROLE(mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY))
253 			== MWIFIEX_BSS_ROLE_STA) {
254 		if (!sleep_cfm_buf->resp_ctrl)
255 			/* Response is not needed for sleep
256 			   confirm command */
257 			adapter->ps_state = PS_STATE_SLEEP;
258 		else
259 			adapter->ps_state = PS_STATE_SLEEP_CFM;
260 
261 		if (!sleep_cfm_buf->resp_ctrl
262 				&& (adapter->is_hs_configured
263 					&& !adapter->sleep_period.period)) {
264 			adapter->pm_wakeup_card_req = true;
265 			mwifiex_hs_activated_event(mwifiex_get_priv(adapter,
266 						MWIFIEX_BSS_ROLE_STA), true);
267 		}
268 	}
269 
270 	return ret;
271 }
272 
273 /*
274  * This function allocates the command buffers and links them to
275  * the command free queue.
276  *
277  * The driver uses a pre allocated number of command buffers, which
278  * are created at driver initializations and freed at driver cleanup.
279  * Every command needs to obtain a command buffer from this pool before
280  * it can be issued. The command free queue lists the command buffers
281  * currently free to use, while the command pending queue lists the
282  * command buffers already in use and awaiting handling. Command buffers
283  * are returned to the free queue after use.
284  */
mwifiex_alloc_cmd_buffer(struct mwifiex_adapter * adapter)285 int mwifiex_alloc_cmd_buffer(struct mwifiex_adapter *adapter)
286 {
287 	struct cmd_ctrl_node *cmd_array;
288 	u32 buf_size;
289 	u32 i;
290 
291 	/* Allocate and initialize struct cmd_ctrl_node */
292 	buf_size = sizeof(struct cmd_ctrl_node) * MWIFIEX_NUM_OF_CMD_BUFFER;
293 	cmd_array = kzalloc(buf_size, GFP_KERNEL);
294 	if (!cmd_array) {
295 		dev_err(adapter->dev, "%s: failed to alloc cmd_array\n",
296 				__func__);
297 		return -ENOMEM;
298 	}
299 
300 	adapter->cmd_pool = cmd_array;
301 	memset(adapter->cmd_pool, 0, buf_size);
302 
303 	/* Allocate and initialize command buffers */
304 	for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++) {
305 		cmd_array[i].skb = dev_alloc_skb(MWIFIEX_SIZE_OF_CMD_BUFFER);
306 		if (!cmd_array[i].skb) {
307 			dev_err(adapter->dev, "ALLOC_CMD_BUF: out of memory\n");
308 			return -1;
309 		}
310 	}
311 
312 	for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++)
313 		mwifiex_insert_cmd_to_free_q(adapter, &cmd_array[i]);
314 
315 	return 0;
316 }
317 
318 /*
319  * This function frees the command buffers.
320  *
321  * The function calls the completion callback for all the command
322  * buffers that still have response buffers associated with them.
323  */
mwifiex_free_cmd_buffer(struct mwifiex_adapter * adapter)324 int mwifiex_free_cmd_buffer(struct mwifiex_adapter *adapter)
325 {
326 	struct cmd_ctrl_node *cmd_array;
327 	u32 i;
328 
329 	/* Need to check if cmd pool is allocated or not */
330 	if (!adapter->cmd_pool) {
331 		dev_dbg(adapter->dev, "info: FREE_CMD_BUF: cmd_pool is null\n");
332 		return 0;
333 	}
334 
335 	cmd_array = adapter->cmd_pool;
336 
337 	/* Release shared memory buffers */
338 	for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++) {
339 		if (cmd_array[i].skb) {
340 			dev_dbg(adapter->dev, "cmd: free cmd buffer %d\n", i);
341 			dev_kfree_skb_any(cmd_array[i].skb);
342 		}
343 		if (!cmd_array[i].resp_skb)
344 			continue;
345 		dev_kfree_skb_any(cmd_array[i].resp_skb);
346 	}
347 	/* Release struct cmd_ctrl_node */
348 	if (adapter->cmd_pool) {
349 		dev_dbg(adapter->dev, "cmd: free cmd pool\n");
350 		kfree(adapter->cmd_pool);
351 		adapter->cmd_pool = NULL;
352 	}
353 
354 	return 0;
355 }
356 
357 /*
358  * This function handles events generated by firmware.
359  *
360  * Event body of events received from firmware are not used (though they are
361  * saved), only the event ID is used. Some events are re-invoked by
362  * the driver, with a new event body.
363  *
364  * After processing, the function calls the completion callback
365  * for cleanup.
366  */
mwifiex_process_event(struct mwifiex_adapter * adapter)367 int mwifiex_process_event(struct mwifiex_adapter *adapter)
368 {
369 	int ret;
370 	struct mwifiex_private *priv =
371 		mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
372 	struct sk_buff *skb = adapter->event_skb;
373 	u32 eventcause = adapter->event_cause;
374 	struct timeval tstamp;
375 	struct mwifiex_rxinfo *rx_info;
376 
377 	/* Save the last event to debug log */
378 	adapter->dbg.last_event_index =
379 		(adapter->dbg.last_event_index + 1) % DBG_CMD_NUM;
380 	adapter->dbg.last_event[adapter->dbg.last_event_index] =
381 		(u16) eventcause;
382 
383 	/* Get BSS number and corresponding priv */
384 	priv = mwifiex_get_priv_by_id(adapter, EVENT_GET_BSS_NUM(eventcause),
385 				      EVENT_GET_BSS_TYPE(eventcause));
386 	if (!priv)
387 		priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
388 	/* Clear BSS_NO_BITS from event */
389 	eventcause &= EVENT_ID_MASK;
390 	adapter->event_cause = eventcause;
391 
392 	if (skb) {
393 		rx_info = MWIFIEX_SKB_RXCB(skb);
394 		rx_info->bss_index = priv->bss_index;
395 	}
396 
397 	if (eventcause != EVENT_PS_SLEEP && eventcause != EVENT_PS_AWAKE) {
398 		do_gettimeofday(&tstamp);
399 		dev_dbg(adapter->dev, "event: %lu.%lu: cause: %#x\n",
400 		       tstamp.tv_sec, tstamp.tv_usec, eventcause);
401 	}
402 
403 	ret = mwifiex_process_sta_event(priv);
404 
405 	adapter->event_cause = 0;
406 	adapter->event_skb = NULL;
407 	adapter->if_ops.event_complete(adapter, skb);
408 
409 	return ret;
410 }
411 
412 /*
413  * This function is used to send synchronous command to the firmware.
414  *
415  * it allocates a wait queue for the command and wait for the command
416  * response.
417  */
mwifiex_send_cmd_sync(struct mwifiex_private * priv,uint16_t cmd_no,u16 cmd_action,u32 cmd_oid,void * data_buf)418 int mwifiex_send_cmd_sync(struct mwifiex_private *priv, uint16_t cmd_no,
419 			  u16 cmd_action, u32 cmd_oid, void *data_buf)
420 {
421 	int ret = 0;
422 	struct mwifiex_adapter *adapter = priv->adapter;
423 
424 	adapter->cmd_wait_q_required = true;
425 
426 	ret = mwifiex_send_cmd_async(priv, cmd_no, cmd_action, cmd_oid,
427 				     data_buf);
428 	if (!ret)
429 		ret = mwifiex_wait_queue_complete(adapter);
430 
431 	return ret;
432 }
433 
434 
435 /*
436  * This function prepares a command and asynchronously send it to the firmware.
437  *
438  * Preparation includes -
439  *      - Sanity tests to make sure the card is still present or the FW
440  *        is not reset
441  *      - Getting a new command node from the command free queue
442  *      - Initializing the command node for default parameters
443  *      - Fill up the non-default parameters and buffer pointers
444  *      - Add the command to pending queue
445  */
mwifiex_send_cmd_async(struct mwifiex_private * priv,uint16_t cmd_no,u16 cmd_action,u32 cmd_oid,void * data_buf)446 int mwifiex_send_cmd_async(struct mwifiex_private *priv, uint16_t cmd_no,
447 			   u16 cmd_action, u32 cmd_oid, void *data_buf)
448 {
449 	int ret;
450 	struct mwifiex_adapter *adapter = priv->adapter;
451 	struct cmd_ctrl_node *cmd_node;
452 	struct host_cmd_ds_command *cmd_ptr;
453 
454 	if (!adapter) {
455 		pr_err("PREP_CMD: adapter is NULL\n");
456 		return -1;
457 	}
458 
459 	if (adapter->is_suspended) {
460 		dev_err(adapter->dev, "PREP_CMD: device in suspended state\n");
461 		return -1;
462 	}
463 
464 	if (adapter->surprise_removed) {
465 		dev_err(adapter->dev, "PREP_CMD: card is removed\n");
466 		return -1;
467 	}
468 
469 	if (adapter->hw_status == MWIFIEX_HW_STATUS_RESET) {
470 		if (cmd_no != HostCmd_CMD_FUNC_INIT) {
471 			dev_err(adapter->dev, "PREP_CMD: FW in reset state\n");
472 			return -1;
473 		}
474 	}
475 
476 	/* Get a new command node */
477 	cmd_node = mwifiex_get_cmd_node(adapter);
478 
479 	if (!cmd_node) {
480 		dev_err(adapter->dev, "PREP_CMD: no free cmd node\n");
481 		return -1;
482 	}
483 
484 	/* Initialize the command node */
485 	mwifiex_init_cmd_node(priv, cmd_node, cmd_oid, data_buf);
486 
487 	if (!cmd_node->cmd_skb) {
488 		dev_err(adapter->dev, "PREP_CMD: no free cmd buf\n");
489 		return -1;
490 	}
491 
492 	memset(skb_put(cmd_node->cmd_skb, sizeof(struct host_cmd_ds_command)),
493 	       0, sizeof(struct host_cmd_ds_command));
494 
495 	cmd_ptr = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
496 	cmd_ptr->command = cpu_to_le16(cmd_no);
497 	cmd_ptr->result = 0;
498 
499 	/* Prepare command */
500 	if (cmd_no) {
501 		ret = mwifiex_sta_prepare_cmd(priv, cmd_no, cmd_action,
502 					      cmd_oid, data_buf, cmd_ptr);
503 	} else {
504 		ret = mwifiex_cmd_host_cmd(priv, cmd_ptr, data_buf);
505 		cmd_node->cmd_flag |= CMD_F_HOSTCMD;
506 	}
507 
508 	/* Return error, since the command preparation failed */
509 	if (ret) {
510 		dev_err(adapter->dev, "PREP_CMD: cmd %#x preparation failed\n",
511 							cmd_no);
512 		mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
513 		return -1;
514 	}
515 
516 	/* Send command */
517 	if (cmd_no == HostCmd_CMD_802_11_SCAN) {
518 		mwifiex_queue_scan_cmd(priv, cmd_node);
519 	} else {
520 		adapter->cmd_queued = cmd_node;
521 		mwifiex_insert_cmd_to_pending_q(adapter, cmd_node, true);
522 	}
523 
524 	return ret;
525 }
526 
527 /*
528  * This function returns a command to the command free queue.
529  *
530  * The function also calls the completion callback if required, before
531  * cleaning the command node and re-inserting it into the free queue.
532  */
533 void
mwifiex_insert_cmd_to_free_q(struct mwifiex_adapter * adapter,struct cmd_ctrl_node * cmd_node)534 mwifiex_insert_cmd_to_free_q(struct mwifiex_adapter *adapter,
535 			     struct cmd_ctrl_node *cmd_node)
536 {
537 	unsigned long flags;
538 
539 	if (!cmd_node)
540 		return;
541 
542 	if (cmd_node->wait_q_enabled)
543 		mwifiex_complete_cmd(adapter, cmd_node);
544 	/* Clean the node */
545 	mwifiex_clean_cmd_node(adapter, cmd_node);
546 
547 	/* Insert node into cmd_free_q */
548 	spin_lock_irqsave(&adapter->cmd_free_q_lock, flags);
549 	list_add_tail(&cmd_node->list, &adapter->cmd_free_q);
550 	spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
551 }
552 
553 /*
554  * This function queues a command to the command pending queue.
555  *
556  * This in effect adds the command to the command list to be executed.
557  * Exit PS command is handled specially, by placing it always to the
558  * front of the command queue.
559  */
560 void
mwifiex_insert_cmd_to_pending_q(struct mwifiex_adapter * adapter,struct cmd_ctrl_node * cmd_node,u32 add_tail)561 mwifiex_insert_cmd_to_pending_q(struct mwifiex_adapter *adapter,
562 				struct cmd_ctrl_node *cmd_node, u32 add_tail)
563 {
564 	struct host_cmd_ds_command *host_cmd = NULL;
565 	u16 command;
566 	unsigned long flags;
567 
568 	host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
569 	if (!host_cmd) {
570 		dev_err(adapter->dev, "QUEUE_CMD: host_cmd is NULL\n");
571 		return;
572 	}
573 
574 	command = le16_to_cpu(host_cmd->command);
575 
576 	/* Exit_PS command needs to be queued in the header always. */
577 	if (command == HostCmd_CMD_802_11_PS_MODE_ENH) {
578 		struct host_cmd_ds_802_11_ps_mode_enh *pm =
579 			&host_cmd->params.psmode_enh;
580 		if ((le16_to_cpu(pm->action) == DIS_PS)
581 		    || (le16_to_cpu(pm->action) == DIS_AUTO_PS)) {
582 			if (adapter->ps_state != PS_STATE_AWAKE)
583 				add_tail = false;
584 		}
585 	}
586 
587 	spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
588 	if (add_tail)
589 		list_add_tail(&cmd_node->list, &adapter->cmd_pending_q);
590 	else
591 		list_add(&cmd_node->list, &adapter->cmd_pending_q);
592 	spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
593 
594 	dev_dbg(adapter->dev, "cmd: QUEUE_CMD: cmd=%#x is queued\n", command);
595 }
596 
597 /*
598  * This function executes the next command in command pending queue.
599  *
600  * This function will fail if a command is already in processing stage,
601  * otherwise it will dequeue the first command from the command pending
602  * queue and send to the firmware.
603  *
604  * If the device is currently in host sleep mode, any commands, except the
605  * host sleep configuration command will de-activate the host sleep. For PS
606  * mode, the function will put the firmware back to sleep if applicable.
607  */
mwifiex_exec_next_cmd(struct mwifiex_adapter * adapter)608 int mwifiex_exec_next_cmd(struct mwifiex_adapter *adapter)
609 {
610 	struct mwifiex_private *priv;
611 	struct cmd_ctrl_node *cmd_node;
612 	int ret = 0;
613 	struct host_cmd_ds_command *host_cmd;
614 	unsigned long cmd_flags;
615 	unsigned long cmd_pending_q_flags;
616 
617 	/* Check if already in processing */
618 	if (adapter->curr_cmd) {
619 		dev_err(adapter->dev, "EXEC_NEXT_CMD: cmd in processing\n");
620 		return -1;
621 	}
622 
623 	spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
624 	/* Check if any command is pending */
625 	spin_lock_irqsave(&adapter->cmd_pending_q_lock, cmd_pending_q_flags);
626 	if (list_empty(&adapter->cmd_pending_q)) {
627 		spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
628 				       cmd_pending_q_flags);
629 		spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
630 		return 0;
631 	}
632 	cmd_node = list_first_entry(&adapter->cmd_pending_q,
633 				    struct cmd_ctrl_node, list);
634 	spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
635 			       cmd_pending_q_flags);
636 
637 	host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
638 	priv = cmd_node->priv;
639 
640 	if (adapter->ps_state != PS_STATE_AWAKE) {
641 		dev_err(adapter->dev, "%s: cannot send cmd in sleep state,"
642 				" this should not happen\n", __func__);
643 		spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
644 		return ret;
645 	}
646 
647 	spin_lock_irqsave(&adapter->cmd_pending_q_lock, cmd_pending_q_flags);
648 	list_del(&cmd_node->list);
649 	spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
650 			       cmd_pending_q_flags);
651 
652 	spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
653 	ret = mwifiex_dnld_cmd_to_fw(priv, cmd_node);
654 	priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
655 	/* Any command sent to the firmware when host is in sleep
656 	 * mode should de-configure host sleep. We should skip the
657 	 * host sleep configuration command itself though
658 	 */
659 	if (priv && (host_cmd->command !=
660 	     cpu_to_le16(HostCmd_CMD_802_11_HS_CFG_ENH))) {
661 		if (adapter->hs_activated) {
662 			adapter->is_hs_configured = false;
663 			mwifiex_hs_activated_event(priv, false);
664 		}
665 	}
666 
667 	return ret;
668 }
669 
670 /*
671  * This function handles the command response.
672  *
673  * After processing, the function cleans the command node and puts
674  * it back to the command free queue.
675  */
mwifiex_process_cmdresp(struct mwifiex_adapter * adapter)676 int mwifiex_process_cmdresp(struct mwifiex_adapter *adapter)
677 {
678 	struct host_cmd_ds_command *resp;
679 	struct mwifiex_private *priv =
680 		mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
681 	int ret = 0;
682 	uint16_t orig_cmdresp_no;
683 	uint16_t cmdresp_no;
684 	uint16_t cmdresp_result;
685 	struct timeval tstamp;
686 	unsigned long flags;
687 
688 	/* Now we got response from FW, cancel the command timer */
689 	del_timer(&adapter->cmd_timer);
690 
691 	if (!adapter->curr_cmd || !adapter->curr_cmd->resp_skb) {
692 		resp = (struct host_cmd_ds_command *) adapter->upld_buf;
693 		dev_err(adapter->dev, "CMD_RESP: NULL curr_cmd, %#x\n",
694 		       le16_to_cpu(resp->command));
695 		return -1;
696 	}
697 
698 	adapter->num_cmd_timeout = 0;
699 
700 	resp = (struct host_cmd_ds_command *) adapter->curr_cmd->resp_skb->data;
701 	if (adapter->curr_cmd->cmd_flag & CMD_F_CANCELED) {
702 		dev_err(adapter->dev, "CMD_RESP: %#x been canceled\n",
703 				le16_to_cpu(resp->command));
704 		mwifiex_insert_cmd_to_free_q(adapter, adapter->curr_cmd);
705 		spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
706 		adapter->curr_cmd = NULL;
707 		spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
708 		return -1;
709 	}
710 
711 	if (adapter->curr_cmd->cmd_flag & CMD_F_HOSTCMD) {
712 		/* Copy original response back to response buffer */
713 		struct mwifiex_ds_misc_cmd *hostcmd;
714 		uint16_t size = le16_to_cpu(resp->size);
715 		dev_dbg(adapter->dev, "info: host cmd resp size = %d\n", size);
716 		size = min_t(u16, size, MWIFIEX_SIZE_OF_CMD_BUFFER);
717 		if (adapter->curr_cmd->data_buf) {
718 			hostcmd = adapter->curr_cmd->data_buf;
719 			hostcmd->len = size;
720 			memcpy(hostcmd->cmd, resp, size);
721 		}
722 	}
723 	orig_cmdresp_no = le16_to_cpu(resp->command);
724 
725 	/* Get BSS number and corresponding priv */
726 	priv = mwifiex_get_priv_by_id(adapter,
727 			HostCmd_GET_BSS_NO(le16_to_cpu(resp->seq_num)),
728 			HostCmd_GET_BSS_TYPE(le16_to_cpu(resp->seq_num)));
729 	if (!priv)
730 		priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
731 	/* Clear RET_BIT from HostCmd */
732 	resp->command = cpu_to_le16(orig_cmdresp_no & HostCmd_CMD_ID_MASK);
733 
734 	cmdresp_no = le16_to_cpu(resp->command);
735 	cmdresp_result = le16_to_cpu(resp->result);
736 
737 	/* Save the last command response to debug log */
738 	adapter->dbg.last_cmd_resp_index =
739 		(adapter->dbg.last_cmd_resp_index + 1) % DBG_CMD_NUM;
740 	adapter->dbg.last_cmd_resp_id[adapter->dbg.last_cmd_resp_index] =
741 		orig_cmdresp_no;
742 
743 	do_gettimeofday(&tstamp);
744 	dev_dbg(adapter->dev, "cmd: CMD_RESP: (%lu.%lu): 0x%x, result %d,"
745 		" len %d, seqno 0x%x\n",
746 	       tstamp.tv_sec, tstamp.tv_usec, orig_cmdresp_no, cmdresp_result,
747 	       le16_to_cpu(resp->size), le16_to_cpu(resp->seq_num));
748 
749 	if (!(orig_cmdresp_no & HostCmd_RET_BIT)) {
750 		dev_err(adapter->dev, "CMD_RESP: invalid cmd resp\n");
751 		if (adapter->curr_cmd->wait_q_enabled)
752 			adapter->cmd_wait_q.status = -1;
753 
754 		mwifiex_insert_cmd_to_free_q(adapter, adapter->curr_cmd);
755 		spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
756 		adapter->curr_cmd = NULL;
757 		spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
758 		return -1;
759 	}
760 
761 	if (adapter->curr_cmd->cmd_flag & CMD_F_HOSTCMD) {
762 		adapter->curr_cmd->cmd_flag &= ~CMD_F_HOSTCMD;
763 		if ((cmdresp_result == HostCmd_RESULT_OK)
764 		    && (cmdresp_no == HostCmd_CMD_802_11_HS_CFG_ENH))
765 			ret = mwifiex_ret_802_11_hs_cfg(priv, resp);
766 	} else {
767 		/* handle response */
768 		ret = mwifiex_process_sta_cmdresp(priv, cmdresp_no, resp);
769 	}
770 
771 	/* Check init command response */
772 	if (adapter->hw_status == MWIFIEX_HW_STATUS_INITIALIZING) {
773 		if (ret == -1) {
774 			dev_err(adapter->dev, "%s: cmd %#x failed during "
775 				"initialization\n", __func__, cmdresp_no);
776 			mwifiex_init_fw_complete(adapter);
777 			return -1;
778 		} else if (adapter->last_init_cmd == cmdresp_no)
779 			adapter->hw_status = MWIFIEX_HW_STATUS_INIT_DONE;
780 	}
781 
782 	if (adapter->curr_cmd) {
783 		if (adapter->curr_cmd->wait_q_enabled && (!ret))
784 			adapter->cmd_wait_q.status = 0;
785 		else if (adapter->curr_cmd->wait_q_enabled && (ret == -1))
786 			adapter->cmd_wait_q.status = -1;
787 
788 		/* Clean up and put current command back to cmd_free_q */
789 		mwifiex_insert_cmd_to_free_q(adapter, adapter->curr_cmd);
790 
791 		spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
792 		adapter->curr_cmd = NULL;
793 		spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
794 	}
795 
796 	return ret;
797 }
798 
799 /*
800  * This function handles the timeout of command sending.
801  *
802  * It will re-send the same command again.
803  */
804 void
mwifiex_cmd_timeout_func(unsigned long function_context)805 mwifiex_cmd_timeout_func(unsigned long function_context)
806 {
807 	struct mwifiex_adapter *adapter =
808 		(struct mwifiex_adapter *) function_context;
809 	struct cmd_ctrl_node *cmd_node;
810 	struct timeval tstamp;
811 
812 	adapter->num_cmd_timeout++;
813 	adapter->dbg.num_cmd_timeout++;
814 	if (!adapter->curr_cmd) {
815 		dev_dbg(adapter->dev, "cmd: empty curr_cmd\n");
816 		return;
817 	}
818 	cmd_node = adapter->curr_cmd;
819 	if (cmd_node->wait_q_enabled)
820 		adapter->cmd_wait_q.status = -ETIMEDOUT;
821 
822 	if (cmd_node) {
823 		adapter->dbg.timeout_cmd_id =
824 			adapter->dbg.last_cmd_id[adapter->dbg.last_cmd_index];
825 		adapter->dbg.timeout_cmd_act =
826 			adapter->dbg.last_cmd_act[adapter->dbg.last_cmd_index];
827 		do_gettimeofday(&tstamp);
828 		dev_err(adapter->dev, "%s: Timeout cmd id (%lu.%lu) = %#x,"
829 			" act = %#x\n", __func__,
830 		       tstamp.tv_sec, tstamp.tv_usec,
831 		       adapter->dbg.timeout_cmd_id,
832 		       adapter->dbg.timeout_cmd_act);
833 
834 		dev_err(adapter->dev, "num_data_h2c_failure = %d\n",
835 		       adapter->dbg.num_tx_host_to_card_failure);
836 		dev_err(adapter->dev, "num_cmd_h2c_failure = %d\n",
837 		       adapter->dbg.num_cmd_host_to_card_failure);
838 
839 		dev_err(adapter->dev, "num_cmd_timeout = %d\n",
840 		       adapter->dbg.num_cmd_timeout);
841 		dev_err(adapter->dev, "num_tx_timeout = %d\n",
842 		       adapter->dbg.num_tx_timeout);
843 
844 		dev_err(adapter->dev, "last_cmd_index = %d\n",
845 		       adapter->dbg.last_cmd_index);
846 		print_hex_dump_bytes("last_cmd_id: ", DUMP_PREFIX_OFFSET,
847 				adapter->dbg.last_cmd_id, DBG_CMD_NUM);
848 		print_hex_dump_bytes("last_cmd_act: ", DUMP_PREFIX_OFFSET,
849 				adapter->dbg.last_cmd_act, DBG_CMD_NUM);
850 
851 		dev_err(adapter->dev, "last_cmd_resp_index = %d\n",
852 		       adapter->dbg.last_cmd_resp_index);
853 		print_hex_dump_bytes("last_cmd_resp_id: ", DUMP_PREFIX_OFFSET,
854 				adapter->dbg.last_cmd_resp_id, DBG_CMD_NUM);
855 
856 		dev_err(adapter->dev, "last_event_index = %d\n",
857 		       adapter->dbg.last_event_index);
858 		print_hex_dump_bytes("last_event: ", DUMP_PREFIX_OFFSET,
859 				adapter->dbg.last_event, DBG_CMD_NUM);
860 
861 		dev_err(adapter->dev, "data_sent=%d cmd_sent=%d\n",
862 		       adapter->data_sent, adapter->cmd_sent);
863 
864 		dev_err(adapter->dev, "ps_mode=%d ps_state=%d\n",
865 				adapter->ps_mode, adapter->ps_state);
866 	}
867 	if (adapter->hw_status == MWIFIEX_HW_STATUS_INITIALIZING)
868 		mwifiex_init_fw_complete(adapter);
869 }
870 
871 /*
872  * This function cancels all the pending commands.
873  *
874  * The current command, all commands in command pending queue and all scan
875  * commands in scan pending queue are cancelled. All the completion callbacks
876  * are called with failure status to ensure cleanup.
877  */
878 void
mwifiex_cancel_all_pending_cmd(struct mwifiex_adapter * adapter)879 mwifiex_cancel_all_pending_cmd(struct mwifiex_adapter *adapter)
880 {
881 	struct cmd_ctrl_node *cmd_node = NULL, *tmp_node;
882 	unsigned long flags;
883 
884 	/* Cancel current cmd */
885 	if ((adapter->curr_cmd) && (adapter->curr_cmd->wait_q_enabled)) {
886 		spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
887 		adapter->curr_cmd->wait_q_enabled = false;
888 		spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
889 		adapter->cmd_wait_q.status = -1;
890 		mwifiex_complete_cmd(adapter, adapter->curr_cmd);
891 	}
892 	/* Cancel all pending command */
893 	spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
894 	list_for_each_entry_safe(cmd_node, tmp_node,
895 				 &adapter->cmd_pending_q, list) {
896 		list_del(&cmd_node->list);
897 		spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
898 
899 		if (cmd_node->wait_q_enabled) {
900 			adapter->cmd_wait_q.status = -1;
901 			mwifiex_complete_cmd(adapter, cmd_node);
902 			cmd_node->wait_q_enabled = false;
903 		}
904 		mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
905 		spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
906 	}
907 	spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
908 
909 	/* Cancel all pending scan command */
910 	spin_lock_irqsave(&adapter->scan_pending_q_lock, flags);
911 	list_for_each_entry_safe(cmd_node, tmp_node,
912 				 &adapter->scan_pending_q, list) {
913 		list_del(&cmd_node->list);
914 		spin_unlock_irqrestore(&adapter->scan_pending_q_lock, flags);
915 
916 		cmd_node->wait_q_enabled = false;
917 		mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
918 		spin_lock_irqsave(&adapter->scan_pending_q_lock, flags);
919 	}
920 	spin_unlock_irqrestore(&adapter->scan_pending_q_lock, flags);
921 
922 	spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
923 	adapter->scan_processing = false;
924 	spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
925 }
926 
927 /*
928  * This function cancels all pending commands that matches with
929  * the given IOCTL request.
930  *
931  * Both the current command buffer and the pending command queue are
932  * searched for matching IOCTL request. The completion callback of
933  * the matched command is called with failure status to ensure cleanup.
934  * In case of scan commands, all pending commands in scan pending queue
935  * are cancelled.
936  */
937 void
mwifiex_cancel_pending_ioctl(struct mwifiex_adapter * adapter)938 mwifiex_cancel_pending_ioctl(struct mwifiex_adapter *adapter)
939 {
940 	struct cmd_ctrl_node *cmd_node = NULL, *tmp_node = NULL;
941 	unsigned long cmd_flags;
942 	unsigned long scan_pending_q_flags;
943 	uint16_t cancel_scan_cmd = false;
944 
945 	if ((adapter->curr_cmd) &&
946 	     (adapter->curr_cmd->wait_q_enabled)) {
947 		spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
948 		cmd_node = adapter->curr_cmd;
949 		cmd_node->wait_q_enabled = false;
950 		cmd_node->cmd_flag |= CMD_F_CANCELED;
951 		mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
952 		mwifiex_complete_cmd(adapter, adapter->curr_cmd);
953 		adapter->curr_cmd = NULL;
954 		spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
955 	}
956 
957 	/* Cancel all pending scan command */
958 	spin_lock_irqsave(&adapter->scan_pending_q_lock,
959 			  scan_pending_q_flags);
960 	list_for_each_entry_safe(cmd_node, tmp_node,
961 				 &adapter->scan_pending_q, list) {
962 		list_del(&cmd_node->list);
963 		spin_unlock_irqrestore(&adapter->scan_pending_q_lock,
964 				       scan_pending_q_flags);
965 		cmd_node->wait_q_enabled = false;
966 		mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
967 		spin_lock_irqsave(&adapter->scan_pending_q_lock,
968 				  scan_pending_q_flags);
969 		cancel_scan_cmd = true;
970 	}
971 	spin_unlock_irqrestore(&adapter->scan_pending_q_lock,
972 			       scan_pending_q_flags);
973 
974 	if (cancel_scan_cmd) {
975 		spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
976 		adapter->scan_processing = false;
977 		spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
978 	}
979 	adapter->cmd_wait_q.status = -1;
980 }
981 
982 /*
983  * This function sends the sleep confirm command to firmware, if
984  * possible.
985  *
986  * The sleep confirm command cannot be issued if command response,
987  * data response or event response is awaiting handling, or if we
988  * are in the middle of sending a command, or expecting a command
989  * response.
990  */
991 void
mwifiex_check_ps_cond(struct mwifiex_adapter * adapter)992 mwifiex_check_ps_cond(struct mwifiex_adapter *adapter)
993 {
994 	if (!adapter->cmd_sent &&
995 	    !adapter->curr_cmd && !IS_CARD_RX_RCVD(adapter))
996 		mwifiex_dnld_sleep_confirm_cmd(adapter);
997 	else
998 		dev_dbg(adapter->dev,
999 			"cmd: Delay Sleep Confirm (%s%s%s)\n",
1000 		       (adapter->cmd_sent) ? "D" : "",
1001 		       (adapter->curr_cmd) ? "C" : "",
1002 		       (IS_CARD_RX_RCVD(adapter)) ? "R" : "");
1003 }
1004 
1005 /*
1006  * This function sends a Host Sleep activated event to applications.
1007  *
1008  * This event is generated by the driver, with a blank event body.
1009  */
1010 void
mwifiex_hs_activated_event(struct mwifiex_private * priv,u8 activated)1011 mwifiex_hs_activated_event(struct mwifiex_private *priv, u8 activated)
1012 {
1013 	if (activated) {
1014 		if (priv->adapter->is_hs_configured) {
1015 			priv->adapter->hs_activated = true;
1016 			dev_dbg(priv->adapter->dev, "event: hs_activated\n");
1017 			priv->adapter->hs_activate_wait_q_woken = true;
1018 			wake_up_interruptible(
1019 				&priv->adapter->hs_activate_wait_q);
1020 		} else {
1021 			dev_dbg(priv->adapter->dev, "event: HS not configured\n");
1022 		}
1023 	} else {
1024 		dev_dbg(priv->adapter->dev, "event: hs_deactivated\n");
1025 		priv->adapter->hs_activated = false;
1026 	}
1027 }
1028 
1029 /*
1030  * This function handles the command response of a Host Sleep configuration
1031  * command.
1032  *
1033  * Handling includes changing the header fields into CPU format
1034  * and setting the current host sleep activation status in driver.
1035  *
1036  * In case host sleep status change, the function generates an event to
1037  * notify the applications.
1038  */
mwifiex_ret_802_11_hs_cfg(struct mwifiex_private * priv,struct host_cmd_ds_command * resp)1039 int mwifiex_ret_802_11_hs_cfg(struct mwifiex_private *priv,
1040 			      struct host_cmd_ds_command *resp)
1041 {
1042 	struct mwifiex_adapter *adapter = priv->adapter;
1043 	struct host_cmd_ds_802_11_hs_cfg_enh *phs_cfg =
1044 		&resp->params.opt_hs_cfg;
1045 	uint32_t conditions = le32_to_cpu(phs_cfg->params.hs_config.conditions);
1046 
1047 	if (phs_cfg->action == cpu_to_le16(HS_ACTIVATE)) {
1048 		mwifiex_hs_activated_event(priv, true);
1049 		return 0;
1050 	} else {
1051 		dev_dbg(adapter->dev, "cmd: CMD_RESP: HS_CFG cmd reply"
1052 			" result=%#x, conditions=0x%x gpio=0x%x gap=0x%x\n",
1053 			resp->result, conditions,
1054 		       phs_cfg->params.hs_config.gpio,
1055 		       phs_cfg->params.hs_config.gap);
1056 	}
1057 	if (conditions != HOST_SLEEP_CFG_CANCEL) {
1058 		adapter->is_hs_configured = true;
1059 	} else {
1060 		adapter->is_hs_configured = false;
1061 		if (adapter->hs_activated)
1062 			mwifiex_hs_activated_event(priv, false);
1063 	}
1064 
1065 	return 0;
1066 }
1067 
1068 /*
1069  * This function wakes up the adapter and generates a Host Sleep
1070  * cancel event on receiving the power up interrupt.
1071  */
1072 void
mwifiex_process_hs_config(struct mwifiex_adapter * adapter)1073 mwifiex_process_hs_config(struct mwifiex_adapter *adapter)
1074 {
1075 	dev_dbg(adapter->dev, "info: %s: auto cancelling host sleep"
1076 		" since there is interrupt from the firmware\n", __func__);
1077 
1078 	adapter->if_ops.wakeup(adapter);
1079 	adapter->hs_activated = false;
1080 	adapter->is_hs_configured = false;
1081 	mwifiex_hs_activated_event(mwifiex_get_priv(adapter,
1082 				   MWIFIEX_BSS_ROLE_ANY), false);
1083 }
1084 
1085 /*
1086  * This function handles the command response of a sleep confirm command.
1087  *
1088  * The function sets the card state to SLEEP if the response indicates success.
1089  */
1090 void
mwifiex_process_sleep_confirm_resp(struct mwifiex_adapter * adapter,u8 * pbuf,u32 upld_len)1091 mwifiex_process_sleep_confirm_resp(struct mwifiex_adapter *adapter,
1092 				   u8 *pbuf, u32 upld_len)
1093 {
1094 	struct host_cmd_ds_command *cmd = (struct host_cmd_ds_command *) pbuf;
1095 	struct mwifiex_private *priv =
1096 		mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
1097 	uint16_t result = le16_to_cpu(cmd->result);
1098 	uint16_t command = le16_to_cpu(cmd->command);
1099 	uint16_t seq_num = le16_to_cpu(cmd->seq_num);
1100 
1101 	if (!upld_len) {
1102 		dev_err(adapter->dev, "%s: cmd size is 0\n", __func__);
1103 		return;
1104 	}
1105 
1106 	/* Get BSS number and corresponding priv */
1107 	priv = mwifiex_get_priv_by_id(adapter, HostCmd_GET_BSS_NO(seq_num),
1108 				      HostCmd_GET_BSS_TYPE(seq_num));
1109 	if (!priv)
1110 		priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
1111 
1112 	/* Update sequence number */
1113 	seq_num = HostCmd_GET_SEQ_NO(seq_num);
1114 	/* Clear RET_BIT from HostCmd */
1115 	command &= HostCmd_CMD_ID_MASK;
1116 
1117 	if (command != HostCmd_CMD_802_11_PS_MODE_ENH) {
1118 		dev_err(adapter->dev, "%s: received unexpected response for"
1119 			" cmd %x, result = %x\n", __func__, command, result);
1120 		return;
1121 	}
1122 
1123 	if (result) {
1124 		dev_err(adapter->dev, "%s: sleep confirm cmd failed\n",
1125 						__func__);
1126 		adapter->pm_wakeup_card_req = false;
1127 		adapter->ps_state = PS_STATE_AWAKE;
1128 		return;
1129 	}
1130 	adapter->pm_wakeup_card_req = true;
1131 	if (adapter->is_hs_configured)
1132 		mwifiex_hs_activated_event(mwifiex_get_priv(adapter,
1133 					   MWIFIEX_BSS_ROLE_ANY), true);
1134 	adapter->ps_state = PS_STATE_SLEEP;
1135 	cmd->command = cpu_to_le16(command);
1136 	cmd->seq_num = cpu_to_le16(seq_num);
1137 }
1138 EXPORT_SYMBOL_GPL(mwifiex_process_sleep_confirm_resp);
1139 
1140 /*
1141  * This function prepares an enhanced power mode command.
1142  *
1143  * This function can be used to disable power save or to configure
1144  * power save with auto PS or STA PS or auto deep sleep.
1145  *
1146  * Preparation includes -
1147  *      - Setting command ID, action and proper size
1148  *      - Setting Power Save bitmap, PS parameters TLV, PS mode TLV,
1149  *        auto deep sleep TLV (as required)
1150  *      - Ensuring correct endian-ness
1151  */
mwifiex_cmd_enh_power_mode(struct mwifiex_private * priv,struct host_cmd_ds_command * cmd,u16 cmd_action,uint16_t ps_bitmap,struct mwifiex_ds_auto_ds * auto_ds)1152 int mwifiex_cmd_enh_power_mode(struct mwifiex_private *priv,
1153 			       struct host_cmd_ds_command *cmd,
1154 			       u16 cmd_action, uint16_t ps_bitmap,
1155 			       struct mwifiex_ds_auto_ds *auto_ds)
1156 {
1157 	struct host_cmd_ds_802_11_ps_mode_enh *psmode_enh =
1158 		&cmd->params.psmode_enh;
1159 	u8 *tlv;
1160 	u16 cmd_size = 0;
1161 
1162 	cmd->command = cpu_to_le16(HostCmd_CMD_802_11_PS_MODE_ENH);
1163 	if (cmd_action == DIS_AUTO_PS) {
1164 		psmode_enh->action = cpu_to_le16(DIS_AUTO_PS);
1165 		psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1166 		cmd->size = cpu_to_le16(S_DS_GEN + sizeof(psmode_enh->action) +
1167 				sizeof(psmode_enh->params.ps_bitmap));
1168 	} else if (cmd_action == GET_PS) {
1169 		psmode_enh->action = cpu_to_le16(GET_PS);
1170 		psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1171 		cmd->size = cpu_to_le16(S_DS_GEN + sizeof(psmode_enh->action) +
1172 				sizeof(psmode_enh->params.ps_bitmap));
1173 	} else if (cmd_action == EN_AUTO_PS) {
1174 		psmode_enh->action = cpu_to_le16(EN_AUTO_PS);
1175 		psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1176 		cmd_size = S_DS_GEN + sizeof(psmode_enh->action) +
1177 				sizeof(psmode_enh->params.ps_bitmap);
1178 		tlv = (u8 *) cmd + cmd_size;
1179 		if (ps_bitmap & BITMAP_STA_PS) {
1180 			struct mwifiex_adapter *adapter = priv->adapter;
1181 			struct mwifiex_ie_types_ps_param *ps_tlv =
1182 				(struct mwifiex_ie_types_ps_param *) tlv;
1183 			struct mwifiex_ps_param *ps_mode = &ps_tlv->param;
1184 			ps_tlv->header.type = cpu_to_le16(TLV_TYPE_PS_PARAM);
1185 			ps_tlv->header.len = cpu_to_le16(sizeof(*ps_tlv) -
1186 					sizeof(struct mwifiex_ie_types_header));
1187 			cmd_size += sizeof(*ps_tlv);
1188 			tlv += sizeof(*ps_tlv);
1189 			dev_dbg(adapter->dev, "cmd: PS Command: Enter PS\n");
1190 			ps_mode->null_pkt_interval =
1191 				cpu_to_le16(adapter->null_pkt_interval);
1192 			ps_mode->multiple_dtims =
1193 				cpu_to_le16(adapter->multiple_dtim);
1194 			ps_mode->bcn_miss_timeout =
1195 				cpu_to_le16(adapter->bcn_miss_time_out);
1196 			ps_mode->local_listen_interval =
1197 				cpu_to_le16(adapter->local_listen_interval);
1198 			ps_mode->adhoc_wake_period =
1199 				cpu_to_le16(adapter->adhoc_awake_period);
1200 			ps_mode->delay_to_ps =
1201 				cpu_to_le16(adapter->delay_to_ps);
1202 			ps_mode->mode =
1203 				cpu_to_le16(adapter->enhanced_ps_mode);
1204 
1205 		}
1206 		if (ps_bitmap & BITMAP_AUTO_DS) {
1207 			struct mwifiex_ie_types_auto_ds_param *auto_ds_tlv =
1208 				(struct mwifiex_ie_types_auto_ds_param *) tlv;
1209 			u16 idletime = 0;
1210 
1211 			auto_ds_tlv->header.type =
1212 				cpu_to_le16(TLV_TYPE_AUTO_DS_PARAM);
1213 			auto_ds_tlv->header.len =
1214 				cpu_to_le16(sizeof(*auto_ds_tlv) -
1215 					sizeof(struct mwifiex_ie_types_header));
1216 			cmd_size += sizeof(*auto_ds_tlv);
1217 			tlv += sizeof(*auto_ds_tlv);
1218 			if (auto_ds)
1219 				idletime = auto_ds->idle_time;
1220 			dev_dbg(priv->adapter->dev,
1221 					"cmd: PS Command: Enter Auto Deep Sleep\n");
1222 			auto_ds_tlv->deep_sleep_timeout = cpu_to_le16(idletime);
1223 		}
1224 		cmd->size = cpu_to_le16(cmd_size);
1225 	}
1226 	return 0;
1227 }
1228 
1229 /*
1230  * This function handles the command response of an enhanced power mode
1231  * command.
1232  *
1233  * Handling includes changing the header fields into CPU format
1234  * and setting the current enhanced power mode in driver.
1235  */
mwifiex_ret_enh_power_mode(struct mwifiex_private * priv,struct host_cmd_ds_command * resp,struct mwifiex_ds_pm_cfg * pm_cfg)1236 int mwifiex_ret_enh_power_mode(struct mwifiex_private *priv,
1237 			       struct host_cmd_ds_command *resp,
1238 			       struct mwifiex_ds_pm_cfg *pm_cfg)
1239 {
1240 	struct mwifiex_adapter *adapter = priv->adapter;
1241 	struct host_cmd_ds_802_11_ps_mode_enh *ps_mode =
1242 		&resp->params.psmode_enh;
1243 	uint16_t action = le16_to_cpu(ps_mode->action);
1244 	uint16_t ps_bitmap = le16_to_cpu(ps_mode->params.ps_bitmap);
1245 	uint16_t auto_ps_bitmap =
1246 		le16_to_cpu(ps_mode->params.ps_bitmap);
1247 
1248 	dev_dbg(adapter->dev, "info: %s: PS_MODE cmd reply result=%#x action=%#X\n",
1249 					__func__, resp->result, action);
1250 	if (action == EN_AUTO_PS) {
1251 		if (auto_ps_bitmap & BITMAP_AUTO_DS) {
1252 			dev_dbg(adapter->dev, "cmd: Enabled auto deep sleep\n");
1253 			priv->adapter->is_deep_sleep = true;
1254 		}
1255 		if (auto_ps_bitmap & BITMAP_STA_PS) {
1256 			dev_dbg(adapter->dev, "cmd: Enabled STA power save\n");
1257 			if (adapter->sleep_period.period)
1258 				dev_dbg(adapter->dev, "cmd: set to uapsd/pps mode\n");
1259 		}
1260 	} else if (action == DIS_AUTO_PS) {
1261 		if (ps_bitmap & BITMAP_AUTO_DS) {
1262 			priv->adapter->is_deep_sleep = false;
1263 			dev_dbg(adapter->dev, "cmd: Disabled auto deep sleep\n");
1264 		}
1265 		if (ps_bitmap & BITMAP_STA_PS) {
1266 			dev_dbg(adapter->dev, "cmd: Disabled STA power save\n");
1267 			if (adapter->sleep_period.period) {
1268 				adapter->delay_null_pkt = false;
1269 				adapter->tx_lock_flag = false;
1270 				adapter->pps_uapsd_mode = false;
1271 			}
1272 		}
1273 	} else if (action == GET_PS) {
1274 		if (ps_bitmap & BITMAP_STA_PS)
1275 			adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_PSP;
1276 		else
1277 			adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_CAM;
1278 
1279 		dev_dbg(adapter->dev, "cmd: ps_bitmap=%#x\n", ps_bitmap);
1280 
1281 		if (pm_cfg) {
1282 			/* This section is for get power save mode */
1283 			if (ps_bitmap & BITMAP_STA_PS)
1284 				pm_cfg->param.ps_mode = 1;
1285 			else
1286 				pm_cfg->param.ps_mode = 0;
1287 		}
1288 	}
1289 	return 0;
1290 }
1291 
1292 /*
1293  * This function prepares command to get hardware specifications.
1294  *
1295  * Preparation includes -
1296  *      - Setting command ID, action and proper size
1297  *      - Setting permanent address parameter
1298  *      - Ensuring correct endian-ness
1299  */
mwifiex_cmd_get_hw_spec(struct mwifiex_private * priv,struct host_cmd_ds_command * cmd)1300 int mwifiex_cmd_get_hw_spec(struct mwifiex_private *priv,
1301 			    struct host_cmd_ds_command *cmd)
1302 {
1303 	struct host_cmd_ds_get_hw_spec *hw_spec = &cmd->params.hw_spec;
1304 
1305 	cmd->command = cpu_to_le16(HostCmd_CMD_GET_HW_SPEC);
1306 	cmd->size =
1307 		cpu_to_le16(sizeof(struct host_cmd_ds_get_hw_spec) + S_DS_GEN);
1308 	memcpy(hw_spec->permanent_addr, priv->curr_addr, ETH_ALEN);
1309 
1310 	return 0;
1311 }
1312 
1313 /*
1314  * This function handles the command response of get hardware
1315  * specifications.
1316  *
1317  * Handling includes changing the header fields into CPU format
1318  * and saving/updating the following parameters in driver -
1319  *      - Firmware capability information
1320  *      - Firmware band settings
1321  *      - Ad-hoc start band and channel
1322  *      - Ad-hoc 11n activation status
1323  *      - Firmware release number
1324  *      - Number of antennas
1325  *      - Hardware address
1326  *      - Hardware interface version
1327  *      - Firmware version
1328  *      - Region code
1329  *      - 11n capabilities
1330  *      - MCS support fields
1331  *      - MP end port
1332  */
mwifiex_ret_get_hw_spec(struct mwifiex_private * priv,struct host_cmd_ds_command * resp)1333 int mwifiex_ret_get_hw_spec(struct mwifiex_private *priv,
1334 			    struct host_cmd_ds_command *resp)
1335 {
1336 	struct host_cmd_ds_get_hw_spec *hw_spec = &resp->params.hw_spec;
1337 	struct mwifiex_adapter *adapter = priv->adapter;
1338 	int i;
1339 
1340 	adapter->fw_cap_info = le32_to_cpu(hw_spec->fw_cap_info);
1341 
1342 	if (IS_SUPPORT_MULTI_BANDS(adapter))
1343 		adapter->fw_bands = (u8) GET_FW_DEFAULT_BANDS(adapter);
1344 	else
1345 		adapter->fw_bands = BAND_B;
1346 
1347 	adapter->config_bands = adapter->fw_bands;
1348 
1349 	if (adapter->fw_bands & BAND_A) {
1350 		if (adapter->fw_bands & BAND_GN) {
1351 			adapter->config_bands |= BAND_AN;
1352 			adapter->fw_bands |= BAND_AN;
1353 		}
1354 		if (adapter->fw_bands & BAND_AN) {
1355 			adapter->adhoc_start_band = BAND_A | BAND_AN;
1356 			adapter->adhoc_11n_enabled = true;
1357 		} else {
1358 			adapter->adhoc_start_band = BAND_A;
1359 		}
1360 		priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL_A;
1361 	} else if (adapter->fw_bands & BAND_GN) {
1362 		adapter->adhoc_start_band = BAND_G | BAND_B | BAND_GN;
1363 		priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1364 		adapter->adhoc_11n_enabled = true;
1365 	} else if (adapter->fw_bands & BAND_G) {
1366 		adapter->adhoc_start_band = BAND_G | BAND_B;
1367 		priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1368 	} else if (adapter->fw_bands & BAND_B) {
1369 		adapter->adhoc_start_band = BAND_B;
1370 		priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1371 	}
1372 
1373 	adapter->fw_release_number = le32_to_cpu(hw_spec->fw_release_number);
1374 	adapter->number_of_antenna = le16_to_cpu(hw_spec->number_of_antenna);
1375 
1376 	dev_dbg(adapter->dev, "info: GET_HW_SPEC: fw_release_number- %#x\n",
1377 	       adapter->fw_release_number);
1378 	dev_dbg(adapter->dev, "info: GET_HW_SPEC: permanent addr: %pM\n",
1379 					hw_spec->permanent_addr);
1380 	dev_dbg(adapter->dev, "info: GET_HW_SPEC: hw_if_version=%#x  version=%#x\n",
1381 		le16_to_cpu(hw_spec->hw_if_version),
1382 	       le16_to_cpu(hw_spec->version));
1383 
1384 	if (priv->curr_addr[0] == 0xff)
1385 		memmove(priv->curr_addr, hw_spec->permanent_addr, ETH_ALEN);
1386 
1387 	adapter->region_code = le16_to_cpu(hw_spec->region_code);
1388 
1389 	for (i = 0; i < MWIFIEX_MAX_REGION_CODE; i++)
1390 		/* Use the region code to search for the index */
1391 		if (adapter->region_code == region_code_index[i])
1392 			break;
1393 
1394 	/* If it's unidentified region code, use the default (USA) */
1395 	if (i >= MWIFIEX_MAX_REGION_CODE) {
1396 		adapter->region_code = 0x10;
1397 		dev_dbg(adapter->dev, "cmd: unknown region code, use default (USA)\n");
1398 	}
1399 
1400 	adapter->hw_dot_11n_dev_cap = le32_to_cpu(hw_spec->dot_11n_dev_cap);
1401 	adapter->hw_dev_mcs_support = hw_spec->dev_mcs_support;
1402 
1403 	if (adapter->if_ops.update_mp_end_port)
1404 		adapter->if_ops.update_mp_end_port(adapter,
1405 					le16_to_cpu(hw_spec->mp_end_port));
1406 
1407 	return 0;
1408 }
1409