drivers/net/wireless/mwifiex/cmdevt.c

   1 /*
   2  * Marvell Wireless LAN device driver: commands and events
   3  *
   4  * Copyright (C) 2011, Marvell International Ltd.
   5  *
   6  * This software file (the "File") is distributed by Marvell International
   7  * Ltd. under the terms of the GNU General Public License Version 2, June 1991
   8  * (the "License").  You may use, redistribute and/or modify this File in
   9  * accordance with the terms and conditions of the License, a copy of which
  10  * is available by writing to the Free Software Foundation, Inc.,
  11  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
  12  * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
  13  *
  14  * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
  15  * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
  16  * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
  17  * this warranty disclaimer.
  18  */
  19
  20 #include "decl.h"
  21 #include "ioctl.h"
  22 #include "util.h"
  23 #include "fw.h"
  24 #include "main.h"
  25 #include "wmm.h"
  26 #include "11n.h"
  27 #include "11ac.h"
  28
  29 /*
  30  * This function initializes a command node.
  31  *
  32  * The actual allocation of the node is not done by this function. It only
  33  * initiates a node by filling it with default parameters. Similarly,
  34  * allocation of the different buffers used (IOCTL buffer, data buffer) are
  35  * not done by this function either.
  36  */
  37 static void
  38 mwifiex_init_cmd_node(struct mwifiex_private *priv,
  39                       struct cmd_ctrl_node *cmd_node,
  40                       u32 cmd_oid, void *data_buf)
  41 {
  42         cmd_node->priv = priv;
  43         cmd_node->cmd_oid = cmd_oid;
  44         if (priv->adapter->cmd_wait_q_required) {
  45                 cmd_node->wait_q_enabled = priv->adapter->cmd_wait_q_required;
  46                 priv->adapter->cmd_wait_q_required = false;
  47                 cmd_node->cmd_wait_q_woken = false;
  48                 cmd_node->condition = &cmd_node->cmd_wait_q_woken;
  49         }
  50         cmd_node->data_buf = data_buf;
  51         cmd_node->cmd_skb = cmd_node->skb;
  52 }
  53
  54 /*
  55  * This function returns a command node from the free queue depending upon
  56  * availability.
  57  */
  58 static struct cmd_ctrl_node *
  59 mwifiex_get_cmd_node(struct mwifiex_adapter *adapter)
  60 {
  61         struct cmd_ctrl_node *cmd_node;
  62         unsigned long flags;
  63
  64         spin_lock_irqsave(&adapter->cmd_free_q_lock, flags);
  65         if (list_empty(&adapter->cmd_free_q)) {
  66                 dev_err(adapter->dev, "GET_CMD_NODE: cmd node not available\n");
  67                 spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
  68                 return NULL;
  69         }
  70         cmd_node = list_first_entry(&adapter->cmd_free_q,
  71                                     struct cmd_ctrl_node, list);
  72         list_del(&cmd_node->list);
  73         spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
  74
  75         return cmd_node;
  76 }
  77
  78 /*
  79  * This function cleans up a command node.
  80  *
  81  * The function resets the fields including the buffer pointers.
  82  * This function does not try to free the buffers. They must be
  83  * freed before calling this function.
  84  *
  85  * This function will however call the receive completion callback
  86  * in case a response buffer is still available before resetting
  87  * the pointer.
  88  */
  89 static void
  90 mwifiex_clean_cmd_node(struct mwifiex_adapter *adapter,
  91                        struct cmd_ctrl_node *cmd_node)
  92 {
  93         cmd_node->cmd_oid = 0;
  94         cmd_node->cmd_flag = 0;
  95         cmd_node->data_buf = NULL;
  96         cmd_node->wait_q_enabled = false;
  97
  98         if (cmd_node->cmd_skb)
  99                 skb_trim(cmd_node->cmd_skb, 0);
 100
 101         if (cmd_node->resp_skb) {
 102                 adapter->if_ops.cmdrsp_complete(adapter, cmd_node->resp_skb);
 103                 cmd_node->resp_skb = NULL;
 104         }
 105 }
 106
 107 /*
 108  * This function sends a host command to the firmware.
 109  *
 110  * The function copies the host command into the driver command
 111  * buffer, which will be transferred to the firmware later by the
 112  * main thread.
 113  */
 114 static int mwifiex_cmd_host_cmd(struct mwifiex_private *priv,
 115                                 struct host_cmd_ds_command *cmd,
 116                                 struct mwifiex_ds_misc_cmd *pcmd_ptr)
 117 {
 118         /* Copy the HOST command to command buffer */
 119         memcpy(cmd, pcmd_ptr->cmd, pcmd_ptr->len);
 120         dev_dbg(priv->adapter->dev, "cmd: host cmd size = %d\n", pcmd_ptr->len);
 121         return 0;
 122 }
 123
 124 /*
 125  * This function downloads a command to the firmware.
 126  *
 127  * The function performs sanity tests, sets the command sequence
 128  * number and size, converts the header fields to CPU format before
 129  * sending. Afterwards, it logs the command ID and action for debugging
 130  * and sets up the command timeout timer.
 131  */
 132 static int mwifiex_dnld_cmd_to_fw(struct mwifiex_private *priv,
 133                                   struct cmd_ctrl_node *cmd_node)
 134 {
 135
 136         struct mwifiex_adapter *adapter = priv->adapter;
 137         int ret;
 138         struct host_cmd_ds_command *host_cmd;
 139         uint16_t cmd_code;
 140         uint16_t cmd_size;
 141         struct timeval tstamp;
 142         unsigned long flags;
 143         __le32 tmp;
 144
 145         if (!adapter || !cmd_node)
 146                 return -1;
 147
 148         host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
 149
 150         /* Sanity test */
 151         if (host_cmd == NULL || host_cmd->size == 0) {
 152                 dev_err(adapter->dev, "DNLD_CMD: host_cmd is null"
 153                         " or cmd size is 0, not sending\n");
 154                 if (cmd_node->wait_q_enabled)
 155                         adapter->cmd_wait_q.status = -1;
 156                 mwifiex_recycle_cmd_node(adapter, cmd_node);
 157                 return -1;
 158         }
 159
 160         cmd_code = le16_to_cpu(host_cmd->command);
 161         cmd_size = le16_to_cpu(host_cmd->size);
 162
 163         if (adapter->hw_status == MWIFIEX_HW_STATUS_RESET &&
 164             cmd_code != HostCmd_CMD_FUNC_SHUTDOWN &&
 165             cmd_code != HostCmd_CMD_FUNC_INIT) {
 166                 dev_err(adapter->dev,
 167                         "DNLD_CMD: FW in reset state, ignore cmd %#x\n",
 168                         cmd_code);
 169                 mwifiex_complete_cmd(adapter, cmd_node);
 170                 mwifiex_recycle_cmd_node(adapter, cmd_node);
 171                 return -1;
 172         }
 173
 174         /* Set command sequence number */
 175         adapter->seq_num++;
 176         host_cmd->seq_num = cpu_to_le16(HostCmd_SET_SEQ_NO_BSS_INFO
 177                                         (adapter->seq_num,
 178                                          cmd_node->priv->bss_num,
 179                                          cmd_node->priv->bss_type));
 180
 181         spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 182         adapter->curr_cmd = cmd_node;
 183         spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 184
 185         /* Adjust skb length */
 186         if (cmd_node->cmd_skb->len > cmd_size)
 187                 /*
 188                  * cmd_size is less than sizeof(struct host_cmd_ds_command).
 189                  * Trim off the unused portion.
 190                  */
 191                 skb_trim(cmd_node->cmd_skb, cmd_size);
 192         else if (cmd_node->cmd_skb->len < cmd_size)
 193                 /*
 194                  * cmd_size is larger than sizeof(struct host_cmd_ds_command)
 195                  * because we have appended custom IE TLV. Increase skb length
 196                  * accordingly.
 197                  */
 198                 skb_put(cmd_node->cmd_skb, cmd_size - cmd_node->cmd_skb->len);
 199
 200         do_gettimeofday(&tstamp);
 201         dev_dbg(adapter->dev, "cmd: DNLD_CMD: (%lu.%lu): %#x, act %#x, len %d,"
 202                 " seqno %#x\n",
 203                 tstamp.tv_sec, tstamp.tv_usec, cmd_code,
 204                 le16_to_cpu(*(__le16 *) ((u8 *) host_cmd + S_DS_GEN)), cmd_size,
 205                 le16_to_cpu(host_cmd->seq_num));
 206
 207         if (adapter->iface_type == MWIFIEX_USB) {
 208                 tmp = cpu_to_le32(MWIFIEX_USB_TYPE_CMD);
 209                 skb_push(cmd_node->cmd_skb, MWIFIEX_TYPE_LEN);
 210                 memcpy(cmd_node->cmd_skb->data, &tmp, MWIFIEX_TYPE_LEN);
 211                 adapter->cmd_sent = true;
 212                 ret = adapter->if_ops.host_to_card(adapter,
 213                                                    MWIFIEX_USB_EP_CMD_EVENT,
 214                                                    cmd_node->cmd_skb, NULL);
 215                 skb_pull(cmd_node->cmd_skb, MWIFIEX_TYPE_LEN);
 216                 if (ret == -EBUSY)
 217                         cmd_node->cmd_skb = NULL;
 218         } else {
 219                 skb_push(cmd_node->cmd_skb, INTF_HEADER_LEN);
 220                 ret = adapter->if_ops.host_to_card(adapter, MWIFIEX_TYPE_CMD,
 221                                                    cmd_node->cmd_skb, NULL);
 222                 skb_pull(cmd_node->cmd_skb, INTF_HEADER_LEN);
 223         }
 224
 225         if (ret == -1) {
 226                 dev_err(adapter->dev, "DNLD_CMD: host to card failed\n");
 227                 if (adapter->iface_type == MWIFIEX_USB)
 228                         adapter->cmd_sent = false;
 229                 if (cmd_node->wait_q_enabled)
 230                         adapter->cmd_wait_q.status = -1;
 231                 mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd);
 232
 233                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 234                 adapter->curr_cmd = NULL;
 235                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 236
 237                 adapter->dbg.num_cmd_host_to_card_failure++;
 238                 return -1;
 239         }
 240
 241         /* Save the last command id and action to debug log */
 242         adapter->dbg.last_cmd_index =
 243                         (adapter->dbg.last_cmd_index + 1) % DBG_CMD_NUM;
 244         adapter->dbg.last_cmd_id[adapter->dbg.last_cmd_index] = cmd_code;
 245         adapter->dbg.last_cmd_act[adapter->dbg.last_cmd_index] =
 246                         le16_to_cpu(*(__le16 *) ((u8 *) host_cmd + S_DS_GEN));
 247
 248         /* Clear BSS_NO_BITS from HostCmd */
 249         cmd_code &= HostCmd_CMD_ID_MASK;
 250
 251         /* Setup the timer after transmit command */
 252         mod_timer(&adapter->cmd_timer,
 253                   jiffies + msecs_to_jiffies(MWIFIEX_TIMER_10S));
 254
 255         return 0;
 256 }
 257
 258 /*
 259  * This function downloads a sleep confirm command to the firmware.
 260  *
 261  * The function performs sanity tests, sets the command sequence
 262  * number and size, converts the header fields to CPU format before
 263  * sending.
 264  *
 265  * No responses are needed for sleep confirm command.
 266  */
 267 static int mwifiex_dnld_sleep_confirm_cmd(struct mwifiex_adapter *adapter)
 268 {
 269         int ret;
 270         struct mwifiex_private *priv;
 271         struct mwifiex_opt_sleep_confirm *sleep_cfm_buf =
 272                                 (struct mwifiex_opt_sleep_confirm *)
 273                                                 adapter->sleep_cfm->data;
 274         struct sk_buff *sleep_cfm_tmp;
 275         __le32 tmp;
 276
 277         priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 278
 279         sleep_cfm_buf->seq_num =
 280                 cpu_to_le16((HostCmd_SET_SEQ_NO_BSS_INFO
 281                                         (adapter->seq_num, priv->bss_num,
 282                                          priv->bss_type)));
 283         adapter->seq_num++;
 284
 285         if (adapter->iface_type == MWIFIEX_USB) {
 286                 sleep_cfm_tmp =
 287                         dev_alloc_skb(sizeof(struct mwifiex_opt_sleep_confirm)
 288                                       + MWIFIEX_TYPE_LEN);
 289                 skb_put(sleep_cfm_tmp, sizeof(struct mwifiex_opt_sleep_confirm)
 290                         + MWIFIEX_TYPE_LEN);
 291                 tmp = cpu_to_le32(MWIFIEX_USB_TYPE_CMD);
 292                 memcpy(sleep_cfm_tmp->data, &tmp, MWIFIEX_TYPE_LEN);
 293                 memcpy(sleep_cfm_tmp->data + MWIFIEX_TYPE_LEN,
 294                        adapter->sleep_cfm->data,
 295                        sizeof(struct mwifiex_opt_sleep_confirm));
 296                 ret = adapter->if_ops.host_to_card(adapter,
 297                                                    MWIFIEX_USB_EP_CMD_EVENT,
 298                                                    sleep_cfm_tmp, NULL);
 299                 if (ret != -EBUSY)
 300                         dev_kfree_skb_any(sleep_cfm_tmp);
 301         } else {
 302                 skb_push(adapter->sleep_cfm, INTF_HEADER_LEN);
 303                 ret = adapter->if_ops.host_to_card(adapter, MWIFIEX_TYPE_CMD,
 304                                                    adapter->sleep_cfm, NULL);
 305                 skb_pull(adapter->sleep_cfm, INTF_HEADER_LEN);
 306         }
 307
 308         if (ret == -1) {
 309                 dev_err(adapter->dev, "SLEEP_CFM: failed\n");
 310                 adapter->dbg.num_cmd_sleep_cfm_host_to_card_failure++;
 311                 return -1;
 312         }
 313         if (GET_BSS_ROLE(mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY))
 314             == MWIFIEX_BSS_ROLE_STA) {
 315                 if (!sleep_cfm_buf->resp_ctrl)
 316                         /* Response is not needed for sleep
 317                            confirm command */
 318                         adapter->ps_state = PS_STATE_SLEEP;
 319                 else
 320                         adapter->ps_state = PS_STATE_SLEEP_CFM;
 321
 322                 if (!sleep_cfm_buf->resp_ctrl &&
 323                     (adapter->is_hs_configured &&
 324                      !adapter->sleep_period.period)) {
 325                         adapter->pm_wakeup_card_req = true;
 326                         mwifiex_hs_activated_event(mwifiex_get_priv
 327                                         (adapter, MWIFIEX_BSS_ROLE_STA), true);
 328                 }
 329         }
 330
 331         return ret;
 332 }
 333
 334 /*
 335  * This function allocates the command buffers and links them to
 336  * the command free queue.
 337  *
 338  * The driver uses a pre allocated number of command buffers, which
 339  * are created at driver initializations and freed at driver cleanup.
 340  * Every command needs to obtain a command buffer from this pool before
 341  * it can be issued. The command free queue lists the command buffers
 342  * currently free to use, while the command pending queue lists the
 343  * command buffers already in use and awaiting handling. Command buffers
 344  * are returned to the free queue after use.
 345  */
 346 int mwifiex_alloc_cmd_buffer(struct mwifiex_adapter *adapter)
 347 {
 348         struct cmd_ctrl_node *cmd_array;
 349         u32 i;
 350
 351         /* Allocate and initialize struct cmd_ctrl_node */
 352         cmd_array = kcalloc(MWIFIEX_NUM_OF_CMD_BUFFER,
 353                             sizeof(struct cmd_ctrl_node), GFP_KERNEL);
 354         if (!cmd_array)
 355                 return -ENOMEM;
 356
 357         adapter->cmd_pool = cmd_array;
 358
 359         /* Allocate and initialize command buffers */
 360         for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++) {
 361                 cmd_array[i].skb = dev_alloc_skb(MWIFIEX_SIZE_OF_CMD_BUFFER);
 362                 if (!cmd_array[i].skb) {
 363                         dev_err(adapter->dev, "ALLOC_CMD_BUF: out of memory\n");
 364                         return -1;
 365                 }
 366         }
 367
 368         for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++)
 369                 mwifiex_insert_cmd_to_free_q(adapter, &cmd_array[i]);
 370
 371         return 0;
 372 }
 373
 374 /*
 375  * This function frees the command buffers.
 376  *
 377  * The function calls the completion callback for all the command
 378  * buffers that still have response buffers associated with them.
 379  */
 380 int mwifiex_free_cmd_buffer(struct mwifiex_adapter *adapter)
 381 {
 382         struct cmd_ctrl_node *cmd_array;
 383         u32 i;
 384
 385         /* Need to check if cmd pool is allocated or not */
 386         if (!adapter->cmd_pool) {
 387                 dev_dbg(adapter->dev, "info: FREE_CMD_BUF: cmd_pool is null\n");
 388                 return 0;
 389         }
 390
 391         cmd_array = adapter->cmd_pool;
 392
 393         /* Release shared memory buffers */
 394         for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++) {
 395                 if (cmd_array[i].skb) {
 396                         dev_dbg(adapter->dev, "cmd: free cmd buffer %d\n", i);
 397                         dev_kfree_skb_any(cmd_array[i].skb);
 398                 }
 399                 if (!cmd_array[i].resp_skb)
 400                         continue;
 401
 402                 if (adapter->iface_type == MWIFIEX_USB)
 403                         adapter->if_ops.cmdrsp_complete(adapter,
 404                                                         cmd_array[i].resp_skb);
 405                 else
 406                         dev_kfree_skb_any(cmd_array[i].resp_skb);
 407         }
 408         /* Release struct cmd_ctrl_node */
 409         if (adapter->cmd_pool) {
 410                 dev_dbg(adapter->dev, "cmd: free cmd pool\n");
 411                 kfree(adapter->cmd_pool);
 412                 adapter->cmd_pool = NULL;
 413         }
 414
 415         return 0;
 416 }
 417
 418 /*
 419  * This function handles events generated by firmware.
 420  *
 421  * Event body of events received from firmware are not used (though they are
 422  * saved), only the event ID is used. Some events are re-invoked by
 423  * the driver, with a new event body.
 424  *
 425  * After processing, the function calls the completion callback
 426  * for cleanup.
 427  */
 428 int mwifiex_process_event(struct mwifiex_adapter *adapter)
 429 {
 430         int ret;
 431         struct mwifiex_private *priv =
 432                 mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 433         struct sk_buff *skb = adapter->event_skb;
 434         u32 eventcause = adapter->event_cause;
 435         struct timeval tstamp;
 436         struct mwifiex_rxinfo *rx_info;
 437
 438         /* Save the last event to debug log */
 439         adapter->dbg.last_event_index =
 440                         (adapter->dbg.last_event_index + 1) % DBG_CMD_NUM;
 441         adapter->dbg.last_event[adapter->dbg.last_event_index] =
 442                                                         (u16) eventcause;
 443
 444         /* Get BSS number and corresponding priv */
 445         priv = mwifiex_get_priv_by_id(adapter, EVENT_GET_BSS_NUM(eventcause),
 446                                       EVENT_GET_BSS_TYPE(eventcause));
 447         if (!priv)
 448                 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 449         /* Clear BSS_NO_BITS from event */
 450         eventcause &= EVENT_ID_MASK;
 451         adapter->event_cause = eventcause;
 452
 453         if (skb) {
 454                 rx_info = MWIFIEX_SKB_RXCB(skb);
 455                 rx_info->bss_num = priv->bss_num;
 456                 rx_info->bss_type = priv->bss_type;
 457         }
 458
 459         if (eventcause != EVENT_PS_SLEEP && eventcause != EVENT_PS_AWAKE) {
 460                 do_gettimeofday(&tstamp);
 461                 dev_dbg(adapter->dev, "event: %lu.%lu: cause: %#x\n",
 462                         tstamp.tv_sec, tstamp.tv_usec, eventcause);
 463         } else {
 464                 /* Handle PS_SLEEP/AWAKE events on STA */
 465                 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_STA);
 466                 if (!priv)
 467                         priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 468         }
 469
 470         if (priv->bss_role == MWIFIEX_BSS_ROLE_UAP)
 471                 ret = mwifiex_process_uap_event(priv);
 472         else
 473                 ret = mwifiex_process_sta_event(priv);
 474
 475         adapter->event_cause = 0;
 476         adapter->event_skb = NULL;
 477         adapter->if_ops.event_complete(adapter, skb);
 478
 479         return ret;
 480 }
 481
 482 /*
 483  * This function is used to send synchronous command to the firmware.
 484  *
 485  * it allocates a wait queue for the command and wait for the command
 486  * response.
 487  */
 488 int mwifiex_send_cmd_sync(struct mwifiex_private *priv, uint16_t cmd_no,
 489                           u16 cmd_action, u32 cmd_oid, void *data_buf)
 490 {
 491         int ret = 0;
 492         struct mwifiex_adapter *adapter = priv->adapter;
 493
 494         adapter->cmd_wait_q_required = true;
 495
 496         ret = mwifiex_send_cmd_async(priv, cmd_no, cmd_action, cmd_oid,
 497                                      data_buf);
 498
 499         return ret;
 500 }
 501
 502
 503 /*
 504  * This function prepares a command and asynchronously send it to the firmware.
 505  *
 506  * Preparation includes -
 507  *      - Sanity tests to make sure the card is still present or the FW
 508  *        is not reset
 509  *      - Getting a new command node from the command free queue
 510  *      - Initializing the command node for default parameters
 511  *      - Fill up the non-default parameters and buffer pointers
 512  *      - Add the command to pending queue
 513  */
 514 int mwifiex_send_cmd_async(struct mwifiex_private *priv, uint16_t cmd_no,
 515                            u16 cmd_action, u32 cmd_oid, void *data_buf)
 516 {
 517         int ret;
 518         struct mwifiex_adapter *adapter = priv->adapter;
 519         struct cmd_ctrl_node *cmd_node;
 520         struct host_cmd_ds_command *cmd_ptr;
 521
 522         if (!adapter) {
 523                 pr_err("PREP_CMD: adapter is NULL\n");
 524                 return -1;
 525         }
 526
 527         if (adapter->is_suspended) {
 528                 dev_err(adapter->dev, "PREP_CMD: device in suspended state\n");
 529                 return -1;
 530         }
 531
 532         if (adapter->surprise_removed) {
 533                 dev_err(adapter->dev, "PREP_CMD: card is removed\n");
 534                 return -1;
 535         }
 536
 537         if (adapter->hw_status == MWIFIEX_HW_STATUS_RESET) {
 538                 if (cmd_no != HostCmd_CMD_FUNC_INIT) {
 539                         dev_err(adapter->dev, "PREP_CMD: FW in reset state\n");
 540                         return -1;
 541                 }
 542         }
 543
 544         /* Get a new command node */
 545         cmd_node = mwifiex_get_cmd_node(adapter);
 546
 547         if (!cmd_node) {
 548                 dev_err(adapter->dev, "PREP_CMD: no free cmd node\n");
 549                 return -1;
 550         }
 551
 552         /* Initialize the command node */
 553         mwifiex_init_cmd_node(priv, cmd_node, cmd_oid, data_buf);
 554
 555         if (!cmd_node->cmd_skb) {
 556                 dev_err(adapter->dev, "PREP_CMD: no free cmd buf\n");
 557                 return -1;
 558         }
 559
 560         memset(skb_put(cmd_node->cmd_skb, sizeof(struct host_cmd_ds_command)),
 561                0, sizeof(struct host_cmd_ds_command));
 562
 563         cmd_ptr = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
 564         cmd_ptr->command = cpu_to_le16(cmd_no);
 565         cmd_ptr->result = 0;
 566
 567         /* Prepare command */
 568         if (cmd_no) {
 569                 switch (cmd_no) {
 570                 case HostCmd_CMD_UAP_SYS_CONFIG:
 571                 case HostCmd_CMD_UAP_BSS_START:
 572                 case HostCmd_CMD_UAP_BSS_STOP:
 573                 case HostCmd_CMD_UAP_STA_DEAUTH:
 574                         ret = mwifiex_uap_prepare_cmd(priv, cmd_no, cmd_action,
 575                                                       cmd_oid, data_buf,
 576                                                       cmd_ptr);
 577                         break;
 578                 default:
 579                         ret = mwifiex_sta_prepare_cmd(priv, cmd_no, cmd_action,
 580                                                       cmd_oid, data_buf,
 581                                                       cmd_ptr);
 582                         break;
 583                 }
 584         } else {
 585                 ret = mwifiex_cmd_host_cmd(priv, cmd_ptr, data_buf);
 586                 cmd_node->cmd_flag |= CMD_F_HOSTCMD;
 587         }
 588
 589         /* Return error, since the command preparation failed */
 590         if (ret) {
 591                 dev_err(adapter->dev, "PREP_CMD: cmd %#x preparation failed\n",
 592                         cmd_no);
 593                 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
 594                 return -1;
 595         }
 596
 597         /* Send command */
 598         if (cmd_no == HostCmd_CMD_802_11_SCAN) {
 599                 mwifiex_queue_scan_cmd(priv, cmd_node);
 600         } else {
 601                 mwifiex_insert_cmd_to_pending_q(adapter, cmd_node, true);
 602                 queue_work(adapter->workqueue, &adapter->main_work);
 603                 if (cmd_node->wait_q_enabled)
 604                         ret = mwifiex_wait_queue_complete(adapter, cmd_node);
 605         }
 606
 607         return ret;
 608 }
 609
 610 /*
 611  * This function returns a command to the command free queue.
 612  *
 613  * The function also calls the completion callback if required, before
 614  * cleaning the command node and re-inserting it into the free queue.
 615  */
 616 void
 617 mwifiex_insert_cmd_to_free_q(struct mwifiex_adapter *adapter,
 618                              struct cmd_ctrl_node *cmd_node)
 619 {
 620         unsigned long flags;
 621
 622         if (!cmd_node)
 623                 return;
 624
 625         if (cmd_node->wait_q_enabled)
 626                 mwifiex_complete_cmd(adapter, cmd_node);
 627         /* Clean the node */
 628         mwifiex_clean_cmd_node(adapter, cmd_node);
 629
 630         /* Insert node into cmd_free_q */
 631         spin_lock_irqsave(&adapter->cmd_free_q_lock, flags);
 632         list_add_tail(&cmd_node->list, &adapter->cmd_free_q);
 633         spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
 634 }
 635
 636 /* This function reuses a command node. */
 637 void mwifiex_recycle_cmd_node(struct mwifiex_adapter *adapter,
 638                               struct cmd_ctrl_node *cmd_node)
 639 {
 640         struct host_cmd_ds_command *host_cmd = (void *)cmd_node->cmd_skb->data;
 641
 642         mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
 643
 644         atomic_dec(&adapter->cmd_pending);
 645         dev_dbg(adapter->dev, "cmd: FREE_CMD: cmd=%#x, cmd_pending=%d\n",
 646                 le16_to_cpu(host_cmd->command),
 647                 atomic_read(&adapter->cmd_pending));
 648 }
 649
 650 /*
 651  * This function queues a command to the command pending queue.
 652  *
 653  * This in effect adds the command to the command list to be executed.
 654  * Exit PS command is handled specially, by placing it always to the
 655  * front of the command queue.
 656  */
 657 void
 658 mwifiex_insert_cmd_to_pending_q(struct mwifiex_adapter *adapter,
 659                                 struct cmd_ctrl_node *cmd_node, u32 add_tail)
 660 {
 661         struct host_cmd_ds_command *host_cmd = NULL;
 662         u16 command;
 663         unsigned long flags;
 664
 665         host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
 666         if (!host_cmd) {
 667                 dev_err(adapter->dev, "QUEUE_CMD: host_cmd is NULL\n");
 668                 return;
 669         }
 670
 671         command = le16_to_cpu(host_cmd->command);
 672
 673         /* Exit_PS command needs to be queued in the header always. */
 674         if (command == HostCmd_CMD_802_11_PS_MODE_ENH) {
 675                 struct host_cmd_ds_802_11_ps_mode_enh *pm =
 676                                                 &host_cmd->params.psmode_enh;
 677                 if ((le16_to_cpu(pm->action) == DIS_PS) ||
 678                     (le16_to_cpu(pm->action) == DIS_AUTO_PS)) {
 679                         if (adapter->ps_state != PS_STATE_AWAKE)
 680                                 add_tail = false;
 681                 }
 682         }
 683
 684         spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
 685         if (add_tail)
 686                 list_add_tail(&cmd_node->list, &adapter->cmd_pending_q);
 687         else
 688                 list_add(&cmd_node->list, &adapter->cmd_pending_q);
 689         spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
 690
 691         atomic_inc(&adapter->cmd_pending);
 692         dev_dbg(adapter->dev, "cmd: QUEUE_CMD: cmd=%#x, cmd_pending=%d\n",
 693                 command, atomic_read(&adapter->cmd_pending));
 694 }
 695
 696 /*
 697  * This function executes the next command in command pending queue.
 698  *
 699  * This function will fail if a command is already in processing stage,
 700  * otherwise it will dequeue the first command from the command pending
 701  * queue and send to the firmware.
 702  *
 703  * If the device is currently in host sleep mode, any commands, except the
 704  * host sleep configuration command will de-activate the host sleep. For PS
 705  * mode, the function will put the firmware back to sleep if applicable.
 706  */
 707 int mwifiex_exec_next_cmd(struct mwifiex_adapter *adapter)
 708 {
 709         struct mwifiex_private *priv;
 710         struct cmd_ctrl_node *cmd_node;
 711         int ret = 0;
 712         struct host_cmd_ds_command *host_cmd;
 713         unsigned long cmd_flags;
 714         unsigned long cmd_pending_q_flags;
 715
 716         /* Check if already in processing */
 717         if (adapter->curr_cmd) {
 718                 dev_err(adapter->dev, "EXEC_NEXT_CMD: cmd in processing\n");
 719                 return -1;
 720         }
 721
 722         spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
 723         /* Check if any command is pending */
 724         spin_lock_irqsave(&adapter->cmd_pending_q_lock, cmd_pending_q_flags);
 725         if (list_empty(&adapter->cmd_pending_q)) {
 726                 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
 727                                        cmd_pending_q_flags);
 728                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
 729                 return 0;
 730         }
 731         cmd_node = list_first_entry(&adapter->cmd_pending_q,
 732                                     struct cmd_ctrl_node, list);
 733         spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
 734                                cmd_pending_q_flags);
 735
 736         host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
 737         priv = cmd_node->priv;
 738
 739         if (adapter->ps_state != PS_STATE_AWAKE) {
 740                 dev_err(adapter->dev, "%s: cannot send cmd in sleep state,"
 741                                 " this should not happen\n", __func__);
 742                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
 743                 return ret;
 744         }
 745
 746         spin_lock_irqsave(&adapter->cmd_pending_q_lock, cmd_pending_q_flags);
 747         list_del(&cmd_node->list);
 748         spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
 749                                cmd_pending_q_flags);
 750
 751         spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
 752         ret = mwifiex_dnld_cmd_to_fw(priv, cmd_node);
 753         priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 754         /* Any command sent to the firmware when host is in sleep
 755          * mode should de-configure host sleep. We should skip the
 756          * host sleep configuration command itself though
 757          */
 758         if (priv && (host_cmd->command !=
 759              cpu_to_le16(HostCmd_CMD_802_11_HS_CFG_ENH))) {
 760                 if (adapter->hs_activated) {
 761                         adapter->is_hs_configured = false;
 762                         mwifiex_hs_activated_event(priv, false);
 763                 }
 764         }
 765
 766         return ret;
 767 }
 768
 769 /*
 770  * This function handles the command response.
 771  *
 772  * After processing, the function cleans the command node and puts
 773  * it back to the command free queue.
 774  */
 775 int mwifiex_process_cmdresp(struct mwifiex_adapter *adapter)
 776 {
 777         struct host_cmd_ds_command *resp;
 778         struct mwifiex_private *priv =
 779                 mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 780         int ret = 0;
 781         uint16_t orig_cmdresp_no;
 782         uint16_t cmdresp_no;
 783         uint16_t cmdresp_result;
 784         struct timeval tstamp;
 785         unsigned long flags;
 786
 787         /* Now we got response from FW, cancel the command timer */
 788         del_timer(&adapter->cmd_timer);
 789
 790         if (!adapter->curr_cmd || !adapter->curr_cmd->resp_skb) {
 791                 resp = (struct host_cmd_ds_command *) adapter->upld_buf;
 792                 dev_err(adapter->dev, "CMD_RESP: NULL curr_cmd, %#x\n",
 793                         le16_to_cpu(resp->command));
 794                 return -1;
 795         }
 796
 797         adapter->num_cmd_timeout = 0;
 798
 799         resp = (struct host_cmd_ds_command *) adapter->curr_cmd->resp_skb->data;
 800         if (adapter->curr_cmd->cmd_flag & CMD_F_CANCELED) {
 801                 dev_err(adapter->dev, "CMD_RESP: %#x been canceled\n",
 802                         le16_to_cpu(resp->command));
 803                 mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd);
 804                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 805                 adapter->curr_cmd = NULL;
 806                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 807                 return -1;
 808         }
 809
 810         if (adapter->curr_cmd->cmd_flag & CMD_F_HOSTCMD) {
 811                 /* Copy original response back to response buffer */
 812                 struct mwifiex_ds_misc_cmd *hostcmd;
 813                 uint16_t size = le16_to_cpu(resp->size);
 814                 dev_dbg(adapter->dev, "info: host cmd resp size = %d\n", size);
 815                 size = min_t(u16, size, MWIFIEX_SIZE_OF_CMD_BUFFER);
 816                 if (adapter->curr_cmd->data_buf) {
 817                         hostcmd = adapter->curr_cmd->data_buf;
 818                         hostcmd->len = size;
 819                         memcpy(hostcmd->cmd, resp, size);
 820                 }
 821         }
 822         orig_cmdresp_no = le16_to_cpu(resp->command);
 823
 824         /* Get BSS number and corresponding priv */
 825         priv = mwifiex_get_priv_by_id(adapter,
 826                              HostCmd_GET_BSS_NO(le16_to_cpu(resp->seq_num)),
 827                              HostCmd_GET_BSS_TYPE(le16_to_cpu(resp->seq_num)));
 828         if (!priv)
 829                 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 830         /* Clear RET_BIT from HostCmd */
 831         resp->command = cpu_to_le16(orig_cmdresp_no & HostCmd_CMD_ID_MASK);
 832
 833         cmdresp_no = le16_to_cpu(resp->command);
 834         cmdresp_result = le16_to_cpu(resp->result);
 835
 836         /* Save the last command response to debug log */
 837         adapter->dbg.last_cmd_resp_index =
 838                         (adapter->dbg.last_cmd_resp_index + 1) % DBG_CMD_NUM;
 839         adapter->dbg.last_cmd_resp_id[adapter->dbg.last_cmd_resp_index] =
 840                                                                 orig_cmdresp_no;
 841
 842         do_gettimeofday(&tstamp);
 843         dev_dbg(adapter->dev, "cmd: CMD_RESP: (%lu.%lu): 0x%x, result %d,"
 844                 " len %d, seqno 0x%x\n",
 845                tstamp.tv_sec, tstamp.tv_usec, orig_cmdresp_no, cmdresp_result,
 846                le16_to_cpu(resp->size), le16_to_cpu(resp->seq_num));
 847
 848         if (!(orig_cmdresp_no & HostCmd_RET_BIT)) {
 849                 dev_err(adapter->dev, "CMD_RESP: invalid cmd resp\n");
 850                 if (adapter->curr_cmd->wait_q_enabled)
 851                         adapter->cmd_wait_q.status = -1;
 852
 853                 mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd);
 854                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 855                 adapter->curr_cmd = NULL;
 856                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 857                 return -1;
 858         }
 859
 860         if (adapter->curr_cmd->cmd_flag & CMD_F_HOSTCMD) {
 861                 adapter->curr_cmd->cmd_flag &= ~CMD_F_HOSTCMD;
 862                 if ((cmdresp_result == HostCmd_RESULT_OK) &&
 863                     (cmdresp_no == HostCmd_CMD_802_11_HS_CFG_ENH))
 864                         ret = mwifiex_ret_802_11_hs_cfg(priv, resp);
 865         } else {
 866                 /* handle response */
 867                 ret = mwifiex_process_sta_cmdresp(priv, cmdresp_no, resp);
 868         }
 869
 870         /* Check init command response */
 871         if (adapter->hw_status == MWIFIEX_HW_STATUS_INITIALIZING) {
 872                 if (ret) {
 873                         dev_err(adapter->dev, "%s: cmd %#x failed during "
 874                                 "initialization\n", __func__, cmdresp_no);
 875                         mwifiex_init_fw_complete(adapter);
 876                         return -1;
 877                 } else if (adapter->last_init_cmd == cmdresp_no)
 878                         adapter->hw_status = MWIFIEX_HW_STATUS_INIT_DONE;
 879         }
 880
 881         if (adapter->curr_cmd) {
 882                 if (adapter->curr_cmd->wait_q_enabled)
 883                         adapter->cmd_wait_q.status = ret;
 884
 885                 mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd);
 886
 887                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 888                 adapter->curr_cmd = NULL;
 889                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 890         }
 891
 892         return ret;
 893 }
 894
 895 /*
 896  * This function handles the timeout of command sending.
 897  *
 898  * It will re-send the same command again.
 899  */
 900 void
 901 mwifiex_cmd_timeout_func(unsigned long function_context)
 902 {
 903         struct mwifiex_adapter *adapter =
 904                 (struct mwifiex_adapter *) function_context;
 905         struct cmd_ctrl_node *cmd_node;
 906         struct timeval tstamp;
 907
 908         adapter->num_cmd_timeout++;
 909         adapter->dbg.num_cmd_timeout++;
 910         if (!adapter->curr_cmd) {
 911                 dev_dbg(adapter->dev, "cmd: empty curr_cmd\n");
 912                 return;
 913         }
 914         cmd_node = adapter->curr_cmd;
 915         if (cmd_node) {
 916                 adapter->dbg.timeout_cmd_id =
 917                         adapter->dbg.last_cmd_id[adapter->dbg.last_cmd_index];
 918                 adapter->dbg.timeout_cmd_act =
 919                         adapter->dbg.last_cmd_act[adapter->dbg.last_cmd_index];
 920                 do_gettimeofday(&tstamp);
 921                 dev_err(adapter->dev,
 922                         "%s: Timeout cmd id (%lu.%lu) = %#x, act = %#x\n",
 923                         __func__, tstamp.tv_sec, tstamp.tv_usec,
 924                         adapter->dbg.timeout_cmd_id,
 925                         adapter->dbg.timeout_cmd_act);
 926
 927                 dev_err(adapter->dev, "num_data_h2c_failure = %d\n",
 928                         adapter->dbg.num_tx_host_to_card_failure);
 929                 dev_err(adapter->dev, "num_cmd_h2c_failure = %d\n",
 930                         adapter->dbg.num_cmd_host_to_card_failure);
 931
 932                 dev_err(adapter->dev, "num_cmd_timeout = %d\n",
 933                         adapter->dbg.num_cmd_timeout);
 934                 dev_err(adapter->dev, "num_tx_timeout = %d\n",
 935                         adapter->dbg.num_tx_timeout);
 936
 937                 dev_err(adapter->dev, "last_cmd_index = %d\n",
 938                         adapter->dbg.last_cmd_index);
 939                 dev_err(adapter->dev, "last_cmd_id: %*ph\n",
 940                         (int)sizeof(adapter->dbg.last_cmd_id),
 941                         adapter->dbg.last_cmd_id);
 942                 dev_err(adapter->dev, "last_cmd_act: %*ph\n",
 943                         (int)sizeof(adapter->dbg.last_cmd_act),
 944                         adapter->dbg.last_cmd_act);
 945
 946                 dev_err(adapter->dev, "last_cmd_resp_index = %d\n",
 947                         adapter->dbg.last_cmd_resp_index);
 948                 dev_err(adapter->dev, "last_cmd_resp_id: %*ph\n",
 949                         (int)sizeof(adapter->dbg.last_cmd_resp_id),
 950                         adapter->dbg.last_cmd_resp_id);
 951
 952                 dev_err(adapter->dev, "last_event_index = %d\n",
 953                         adapter->dbg.last_event_index);
 954                 dev_err(adapter->dev, "last_event: %*ph\n",
 955                         (int)sizeof(adapter->dbg.last_event),
 956                         adapter->dbg.last_event);
 957
 958                 dev_err(adapter->dev, "data_sent=%d cmd_sent=%d\n",
 959                         adapter->data_sent, adapter->cmd_sent);
 960
 961                 dev_err(adapter->dev, "ps_mode=%d ps_state=%d\n",
 962                         adapter->ps_mode, adapter->ps_state);
 963
 964                 if (cmd_node->wait_q_enabled) {
 965                         adapter->cmd_wait_q.status = -ETIMEDOUT;
 966                         wake_up_interruptible(&adapter->cmd_wait_q.wait);
 967                         mwifiex_cancel_pending_ioctl(adapter);
 968                         /* reset cmd_sent flag to unblock new commands */
 969                         adapter->cmd_sent = false;
 970                 }
 971         }
 972         if (adapter->hw_status == MWIFIEX_HW_STATUS_INITIALIZING)
 973                 mwifiex_init_fw_complete(adapter);
 974
 975         if (adapter->if_ops.card_reset)
 976                 adapter->if_ops.card_reset(adapter);
 977 }
 978
 979 /*
 980  * This function cancels all the pending commands.
 981  *
 982  * The current command, all commands in command pending queue and all scan
 983  * commands in scan pending queue are cancelled. All the completion callbacks
 984  * are called with failure status to ensure cleanup.
 985  */
 986 void
 987 mwifiex_cancel_all_pending_cmd(struct mwifiex_adapter *adapter)
 988 {
 989         struct cmd_ctrl_node *cmd_node = NULL, *tmp_node;
 990         unsigned long flags;
 991
 992         /* Cancel current cmd */
 993         if ((adapter->curr_cmd) && (adapter->curr_cmd->wait_q_enabled)) {
 994                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 995                 adapter->curr_cmd->wait_q_enabled = false;
 996                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 997                 adapter->cmd_wait_q.status = -1;
 998                 mwifiex_complete_cmd(adapter, adapter->curr_cmd);
 999         }
1000         /* Cancel all pending command */
1001         spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
1002         list_for_each_entry_safe(cmd_node, tmp_node,
1003                                  &adapter->cmd_pending_q, list) {
1004                 list_del(&cmd_node->list);
1005                 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
1006
1007                 if (cmd_node->wait_q_enabled) {
1008                         adapter->cmd_wait_q.status = -1;
1009                         mwifiex_complete_cmd(adapter, cmd_node);
1010                         cmd_node->wait_q_enabled = false;
1011                 }
1012                 mwifiex_recycle_cmd_node(adapter, cmd_node);
1013                 spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
1014         }
1015         spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
1016
1017         /* Cancel all pending scan command */
1018         spin_lock_irqsave(&adapter->scan_pending_q_lock, flags);
1019         list_for_each_entry_safe(cmd_node, tmp_node,
1020                                  &adapter->scan_pending_q, list) {
1021                 list_del(&cmd_node->list);
1022                 spin_unlock_irqrestore(&adapter->scan_pending_q_lock, flags);
1023
1024                 cmd_node->wait_q_enabled = false;
1025                 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
1026                 spin_lock_irqsave(&adapter->scan_pending_q_lock, flags);
1027         }
1028         spin_unlock_irqrestore(&adapter->scan_pending_q_lock, flags);
1029
1030         spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
1031         adapter->scan_processing = false;
1032         spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
1033 }
1034
1035 /*
1036  * This function cancels all pending commands that matches with
1037  * the given IOCTL request.
1038  *
1039  * Both the current command buffer and the pending command queue are
1040  * searched for matching IOCTL request. The completion callback of
1041  * the matched command is called with failure status to ensure cleanup.
1042  * In case of scan commands, all pending commands in scan pending queue
1043  * are cancelled.
1044  */
1045 void
1046 mwifiex_cancel_pending_ioctl(struct mwifiex_adapter *adapter)
1047 {
1048         struct cmd_ctrl_node *cmd_node = NULL, *tmp_node = NULL;
1049         unsigned long cmd_flags;
1050         unsigned long scan_pending_q_flags;
1051         uint16_t cancel_scan_cmd = false;
1052
1053         if ((adapter->curr_cmd) &&
1054             (adapter->curr_cmd->wait_q_enabled)) {
1055                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
1056                 cmd_node = adapter->curr_cmd;
1057                 cmd_node->wait_q_enabled = false;
1058                 cmd_node->cmd_flag |= CMD_F_CANCELED;
1059                 mwifiex_recycle_cmd_node(adapter, cmd_node);
1060                 mwifiex_complete_cmd(adapter, adapter->curr_cmd);
1061                 adapter->curr_cmd = NULL;
1062                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
1063         }
1064
1065         /* Cancel all pending scan command */
1066         spin_lock_irqsave(&adapter->scan_pending_q_lock,
1067                           scan_pending_q_flags);
1068         list_for_each_entry_safe(cmd_node, tmp_node,
1069                                  &adapter->scan_pending_q, list) {
1070                 list_del(&cmd_node->list);
1071                 spin_unlock_irqrestore(&adapter->scan_pending_q_lock,
1072                                        scan_pending_q_flags);
1073                 cmd_node->wait_q_enabled = false;
1074                 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
1075                 spin_lock_irqsave(&adapter->scan_pending_q_lock,
1076                                   scan_pending_q_flags);
1077                 cancel_scan_cmd = true;
1078         }
1079         spin_unlock_irqrestore(&adapter->scan_pending_q_lock,
1080                                scan_pending_q_flags);
1081
1082         if (cancel_scan_cmd) {
1083                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
1084                 adapter->scan_processing = false;
1085                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
1086         }
1087         adapter->cmd_wait_q.status = -1;
1088 }
1089
1090 /*
1091  * This function sends the sleep confirm command to firmware, if
1092  * possible.
1093  *
1094  * The sleep confirm command cannot be issued if command response,
1095  * data response or event response is awaiting handling, or if we
1096  * are in the middle of sending a command, or expecting a command
1097  * response.
1098  */
1099 void
1100 mwifiex_check_ps_cond(struct mwifiex_adapter *adapter)
1101 {
1102         if (!adapter->cmd_sent &&
1103             !adapter->curr_cmd && !IS_CARD_RX_RCVD(adapter))
1104                 mwifiex_dnld_sleep_confirm_cmd(adapter);
1105         else
1106                 dev_dbg(adapter->dev,
1107                         "cmd: Delay Sleep Confirm (%s%s%s)\n",
1108                         (adapter->cmd_sent) ? "D" : "",
1109                         (adapter->curr_cmd) ? "C" : "",
1110                         (IS_CARD_RX_RCVD(adapter)) ? "R" : "");
1111 }
1112
1113 /*
1114  * This function sends a Host Sleep activated event to applications.
1115  *
1116  * This event is generated by the driver, with a blank event body.
1117  */
1118 void
1119 mwifiex_hs_activated_event(struct mwifiex_private *priv, u8 activated)
1120 {
1121         if (activated) {
1122                 if (priv->adapter->is_hs_configured) {
1123                         priv->adapter->hs_activated = true;
1124                         mwifiex_update_rxreor_flags(priv->adapter,
1125                                                     RXREOR_FORCE_NO_DROP);
1126                         dev_dbg(priv->adapter->dev, "event: hs_activated\n");
1127                         priv->adapter->hs_activate_wait_q_woken = true;
1128                         wake_up_interruptible(
1129                                 &priv->adapter->hs_activate_wait_q);
1130                 } else {
1131                         dev_dbg(priv->adapter->dev, "event: HS not configured\n");
1132                 }
1133         } else {
1134                 dev_dbg(priv->adapter->dev, "event: hs_deactivated\n");
1135                 priv->adapter->hs_activated = false;
1136         }
1137 }
1138
1139 /*
1140  * This function handles the command response of a Host Sleep configuration
1141  * command.
1142  *
1143  * Handling includes changing the header fields into CPU format
1144  * and setting the current host sleep activation status in driver.
1145  *
1146  * In case host sleep status change, the function generates an event to
1147  * notify the applications.
1148  */
1149 int mwifiex_ret_802_11_hs_cfg(struct mwifiex_private *priv,
1150                               struct host_cmd_ds_command *resp)
1151 {
1152         struct mwifiex_adapter *adapter = priv->adapter;
1153         struct host_cmd_ds_802_11_hs_cfg_enh *phs_cfg =
1154                 &resp->params.opt_hs_cfg;
1155         uint32_t conditions = le32_to_cpu(phs_cfg->params.hs_config.conditions);
1156
1157         if (phs_cfg->action == cpu_to_le16(HS_ACTIVATE) &&
1158             adapter->iface_type != MWIFIEX_USB) {
1159                 mwifiex_hs_activated_event(priv, true);
1160                 return 0;
1161         } else {
1162                 dev_dbg(adapter->dev, "cmd: CMD_RESP: HS_CFG cmd reply"
1163                         " result=%#x, conditions=0x%x gpio=0x%x gap=0x%x\n",
1164                         resp->result, conditions,
1165                         phs_cfg->params.hs_config.gpio,
1166                         phs_cfg->params.hs_config.gap);
1167         }
1168         if (conditions != HS_CFG_CANCEL) {
1169                 adapter->is_hs_configured = true;
1170                 if (adapter->iface_type == MWIFIEX_USB)
1171                         mwifiex_hs_activated_event(priv, true);
1172         } else {
1173                 adapter->is_hs_configured = false;
1174                 if (adapter->hs_activated)
1175                         mwifiex_hs_activated_event(priv, false);
1176         }
1177
1178         return 0;
1179 }
1180
1181 /*
1182  * This function wakes up the adapter and generates a Host Sleep
1183  * cancel event on receiving the power up interrupt.
1184  */
1185 void
1186 mwifiex_process_hs_config(struct mwifiex_adapter *adapter)
1187 {
1188         dev_dbg(adapter->dev, "info: %s: auto cancelling host sleep"
1189                 " since there is interrupt from the firmware\n", __func__);
1190
1191         adapter->if_ops.wakeup(adapter);
1192         adapter->hs_activated = false;
1193         adapter->is_hs_configured = false;
1194         adapter->is_suspended = false;
1195         mwifiex_hs_activated_event(mwifiex_get_priv(adapter,
1196                                                     MWIFIEX_BSS_ROLE_ANY),
1197                                    false);
1198 }
1199 EXPORT_SYMBOL_GPL(mwifiex_process_hs_config);
1200
1201 /*
1202  * This function handles the command response of a sleep confirm command.
1203  *
1204  * The function sets the card state to SLEEP if the response indicates success.
1205  */
1206 void
1207 mwifiex_process_sleep_confirm_resp(struct mwifiex_adapter *adapter,
1208                                    u8 *pbuf, u32 upld_len)
1209 {
1210         struct host_cmd_ds_command *cmd = (struct host_cmd_ds_command *) pbuf;
1211         struct mwifiex_private *priv =
1212                 mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
1213         uint16_t result = le16_to_cpu(cmd->result);
1214         uint16_t command = le16_to_cpu(cmd->command);
1215         uint16_t seq_num = le16_to_cpu(cmd->seq_num);
1216
1217         if (!upld_len) {
1218                 dev_err(adapter->dev, "%s: cmd size is 0\n", __func__);
1219                 return;
1220         }
1221
1222         /* Get BSS number and corresponding priv */
1223         priv = mwifiex_get_priv_by_id(adapter, HostCmd_GET_BSS_NO(seq_num),
1224                                       HostCmd_GET_BSS_TYPE(seq_num));
1225         if (!priv)
1226                 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
1227
1228         /* Update sequence number */
1229         seq_num = HostCmd_GET_SEQ_NO(seq_num);
1230         /* Clear RET_BIT from HostCmd */
1231         command &= HostCmd_CMD_ID_MASK;
1232
1233         if (command != HostCmd_CMD_802_11_PS_MODE_ENH) {
1234                 dev_err(adapter->dev,
1235                         "%s: rcvd unexpected resp for cmd %#x, result = %x\n",
1236                         __func__, command, result);
1237                 return;
1238         }
1239
1240         if (result) {
1241                 dev_err(adapter->dev, "%s: sleep confirm cmd failed\n",
1242                         __func__);
1243                 adapter->pm_wakeup_card_req = false;
1244                 adapter->ps_state = PS_STATE_AWAKE;
1245                 return;
1246         }
1247         adapter->pm_wakeup_card_req = true;
1248         if (adapter->is_hs_configured)
1249                 mwifiex_hs_activated_event(mwifiex_get_priv
1250                                                 (adapter, MWIFIEX_BSS_ROLE_ANY),
1251                                            true);
1252         adapter->ps_state = PS_STATE_SLEEP;
1253         cmd->command = cpu_to_le16(command);
1254         cmd->seq_num = cpu_to_le16(seq_num);
1255 }
1256 EXPORT_SYMBOL_GPL(mwifiex_process_sleep_confirm_resp);
1257
1258 /*
1259  * This function prepares an enhanced power mode command.
1260  *
1261  * This function can be used to disable power save or to configure
1262  * power save with auto PS or STA PS or auto deep sleep.
1263  *
1264  * Preparation includes -
1265  *      - Setting command ID, action and proper size
1266  *      - Setting Power Save bitmap, PS parameters TLV, PS mode TLV,
1267  *        auto deep sleep TLV (as required)
1268  *      - Ensuring correct endian-ness
1269  */
1270 int mwifiex_cmd_enh_power_mode(struct mwifiex_private *priv,
1271                                struct host_cmd_ds_command *cmd,
1272                                u16 cmd_action, uint16_t ps_bitmap,
1273                                struct mwifiex_ds_auto_ds *auto_ds)
1274 {
1275         struct host_cmd_ds_802_11_ps_mode_enh *psmode_enh =
1276                 &cmd->params.psmode_enh;
1277         u8 *tlv;
1278         u16 cmd_size = 0;
1279
1280         cmd->command = cpu_to_le16(HostCmd_CMD_802_11_PS_MODE_ENH);
1281         if (cmd_action == DIS_AUTO_PS) {
1282                 psmode_enh->action = cpu_to_le16(DIS_AUTO_PS);
1283                 psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1284                 cmd->size = cpu_to_le16(S_DS_GEN + sizeof(psmode_enh->action) +
1285                                         sizeof(psmode_enh->params.ps_bitmap));
1286         } else if (cmd_action == GET_PS) {
1287                 psmode_enh->action = cpu_to_le16(GET_PS);
1288                 psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1289                 cmd->size = cpu_to_le16(S_DS_GEN + sizeof(psmode_enh->action) +
1290                                         sizeof(psmode_enh->params.ps_bitmap));
1291         } else if (cmd_action == EN_AUTO_PS) {
1292                 psmode_enh->action = cpu_to_le16(EN_AUTO_PS);
1293                 psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1294                 cmd_size = S_DS_GEN + sizeof(psmode_enh->action) +
1295                                         sizeof(psmode_enh->params.ps_bitmap);
1296                 tlv = (u8 *) cmd + cmd_size;
1297                 if (ps_bitmap & BITMAP_STA_PS) {
1298                         struct mwifiex_adapter *adapter = priv->adapter;
1299                         struct mwifiex_ie_types_ps_param *ps_tlv =
1300                                 (struct mwifiex_ie_types_ps_param *) tlv;
1301                         struct mwifiex_ps_param *ps_mode = &ps_tlv->param;
1302                         ps_tlv->header.type = cpu_to_le16(TLV_TYPE_PS_PARAM);
1303                         ps_tlv->header.len = cpu_to_le16(sizeof(*ps_tlv) -
1304                                         sizeof(struct mwifiex_ie_types_header));
1305                         cmd_size += sizeof(*ps_tlv);
1306                         tlv += sizeof(*ps_tlv);
1307                         dev_dbg(adapter->dev, "cmd: PS Command: Enter PS\n");
1308                         ps_mode->null_pkt_interval =
1309                                         cpu_to_le16(adapter->null_pkt_interval);
1310                         ps_mode->multiple_dtims =
1311                                         cpu_to_le16(adapter->multiple_dtim);
1312                         ps_mode->bcn_miss_timeout =
1313                                         cpu_to_le16(adapter->bcn_miss_time_out);
1314                         ps_mode->local_listen_interval =
1315                                 cpu_to_le16(adapter->local_listen_interval);
1316                         ps_mode->adhoc_wake_period =
1317                                 cpu_to_le16(adapter->adhoc_awake_period);
1318                         ps_mode->delay_to_ps =
1319                                         cpu_to_le16(adapter->delay_to_ps);
1320                         ps_mode->mode = cpu_to_le16(adapter->enhanced_ps_mode);
1321
1322                 }
1323                 if (ps_bitmap & BITMAP_AUTO_DS) {
1324                         struct mwifiex_ie_types_auto_ds_param *auto_ds_tlv =
1325                                 (struct mwifiex_ie_types_auto_ds_param *) tlv;
1326                         u16 idletime = 0;
1327
1328                         auto_ds_tlv->header.type =
1329                                 cpu_to_le16(TLV_TYPE_AUTO_DS_PARAM);
1330                         auto_ds_tlv->header.len =
1331                                 cpu_to_le16(sizeof(*auto_ds_tlv) -
1332                                         sizeof(struct mwifiex_ie_types_header));
1333                         cmd_size += sizeof(*auto_ds_tlv);
1334                         tlv += sizeof(*auto_ds_tlv);
1335                         if (auto_ds)
1336                                 idletime = auto_ds->idle_time;
1337                         dev_dbg(priv->adapter->dev,
1338                                 "cmd: PS Command: Enter Auto Deep Sleep\n");
1339                         auto_ds_tlv->deep_sleep_timeout = cpu_to_le16(idletime);
1340                 }
1341                 cmd->size = cpu_to_le16(cmd_size);
1342         }
1343         return 0;
1344 }
1345
1346 /*
1347  * This function handles the command response of an enhanced power mode
1348  * command.
1349  *
1350  * Handling includes changing the header fields into CPU format
1351  * and setting the current enhanced power mode in driver.
1352  */
1353 int mwifiex_ret_enh_power_mode(struct mwifiex_private *priv,
1354                                struct host_cmd_ds_command *resp,
1355                                struct mwifiex_ds_pm_cfg *pm_cfg)
1356 {
1357         struct mwifiex_adapter *adapter = priv->adapter;
1358         struct host_cmd_ds_802_11_ps_mode_enh *ps_mode =
1359                 &resp->params.psmode_enh;
1360         uint16_t action = le16_to_cpu(ps_mode->action);
1361         uint16_t ps_bitmap = le16_to_cpu(ps_mode->params.ps_bitmap);
1362         uint16_t auto_ps_bitmap =
1363                 le16_to_cpu(ps_mode->params.ps_bitmap);
1364
1365         dev_dbg(adapter->dev,
1366                 "info: %s: PS_MODE cmd reply result=%#x action=%#X\n",
1367                 __func__, resp->result, action);
1368         if (action == EN_AUTO_PS) {
1369                 if (auto_ps_bitmap & BITMAP_AUTO_DS) {
1370                         dev_dbg(adapter->dev, "cmd: Enabled auto deep sleep\n");
1371                         priv->adapter->is_deep_sleep = true;
1372                 }
1373                 if (auto_ps_bitmap & BITMAP_STA_PS) {
1374                         dev_dbg(adapter->dev, "cmd: Enabled STA power save\n");
1375                         if (adapter->sleep_period.period)
1376                                 dev_dbg(adapter->dev,
1377                                         "cmd: set to uapsd/pps mode\n");
1378                 }
1379         } else if (action == DIS_AUTO_PS) {
1380                 if (ps_bitmap & BITMAP_AUTO_DS) {
1381                         priv->adapter->is_deep_sleep = false;
1382                         dev_dbg(adapter->dev, "cmd: Disabled auto deep sleep\n");
1383                 }
1384                 if (ps_bitmap & BITMAP_STA_PS) {
1385                         dev_dbg(adapter->dev, "cmd: Disabled STA power save\n");
1386                         if (adapter->sleep_period.period) {
1387                                 adapter->delay_null_pkt = false;
1388                                 adapter->tx_lock_flag = false;
1389                                 adapter->pps_uapsd_mode = false;
1390                         }
1391                 }
1392         } else if (action == GET_PS) {
1393                 if (ps_bitmap & BITMAP_STA_PS)
1394                         adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_PSP;
1395                 else
1396                         adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_CAM;
1397
1398                 dev_dbg(adapter->dev, "cmd: ps_bitmap=%#x\n", ps_bitmap);
1399
1400                 if (pm_cfg) {
1401                         /* This section is for get power save mode */
1402                         if (ps_bitmap & BITMAP_STA_PS)
1403                                 pm_cfg->param.ps_mode = 1;
1404                         else
1405                                 pm_cfg->param.ps_mode = 0;
1406                 }
1407         }
1408         return 0;
1409 }
1410
1411 /*
1412  * This function prepares command to get hardware specifications.
1413  *
1414  * Preparation includes -
1415  *      - Setting command ID, action and proper size
1416  *      - Setting permanent address parameter
1417  *      - Ensuring correct endian-ness
1418  */
1419 int mwifiex_cmd_get_hw_spec(struct mwifiex_private *priv,
1420                             struct host_cmd_ds_command *cmd)
1421 {
1422         struct host_cmd_ds_get_hw_spec *hw_spec = &cmd->params.hw_spec;
1423
1424         cmd->command = cpu_to_le16(HostCmd_CMD_GET_HW_SPEC);
1425         cmd->size =
1426                 cpu_to_le16(sizeof(struct host_cmd_ds_get_hw_spec) + S_DS_GEN);
1427         memcpy(hw_spec->permanent_addr, priv->curr_addr, ETH_ALEN);
1428
1429         return 0;
1430 }
1431
1432 /*
1433  * This function handles the command response of get hardware
1434  * specifications.
1435  *
1436  * Handling includes changing the header fields into CPU format
1437  * and saving/updating the following parameters in driver -
1438  *      - Firmware capability information
1439  *      - Firmware band settings
1440  *      - Ad-hoc start band and channel
1441  *      - Ad-hoc 11n activation status
1442  *      - Firmware release number
1443  *      - Number of antennas
1444  *      - Hardware address
1445  *      - Hardware interface version
1446  *      - Firmware version
1447  *      - Region code
1448  *      - 11n capabilities
1449  *      - MCS support fields
1450  *      - MP end port
1451  */
1452 int mwifiex_ret_get_hw_spec(struct mwifiex_private *priv,
1453                             struct host_cmd_ds_command *resp)
1454 {
1455         struct host_cmd_ds_get_hw_spec *hw_spec = &resp->params.hw_spec;
1456         struct mwifiex_adapter *adapter = priv->adapter;
1457         int i;
1458
1459         adapter->fw_cap_info = le32_to_cpu(hw_spec->fw_cap_info);
1460
1461         if (IS_SUPPORT_MULTI_BANDS(adapter))
1462                 adapter->fw_bands = (u8) GET_FW_DEFAULT_BANDS(adapter);
1463         else
1464                 adapter->fw_bands = BAND_B;
1465
1466         adapter->config_bands = adapter->fw_bands;
1467
1468         if (adapter->fw_bands & BAND_A) {
1469                 if (adapter->fw_bands & BAND_GN) {
1470                         adapter->config_bands |= BAND_AN;
1471                         adapter->fw_bands |= BAND_AN;
1472                 }
1473                 if (adapter->fw_bands & BAND_AN) {
1474                         adapter->adhoc_start_band = BAND_A | BAND_AN;
1475                         adapter->adhoc_11n_enabled = true;
1476                 } else {
1477                         adapter->adhoc_start_band = BAND_A;
1478                 }
1479                 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL_A;
1480         } else if (adapter->fw_bands & BAND_GN) {
1481                 adapter->adhoc_start_band = BAND_G | BAND_B | BAND_GN;
1482                 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1483                 adapter->adhoc_11n_enabled = true;
1484         } else if (adapter->fw_bands & BAND_G) {
1485                 adapter->adhoc_start_band = BAND_G | BAND_B;
1486                 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1487         } else if (adapter->fw_bands & BAND_B) {
1488                 adapter->adhoc_start_band = BAND_B;
1489                 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1490         }
1491
1492         adapter->fw_release_number = le32_to_cpu(hw_spec->fw_release_number);
1493         adapter->number_of_antenna = le16_to_cpu(hw_spec->number_of_antenna);
1494
1495         if (le32_to_cpu(hw_spec->dot_11ac_dev_cap)) {
1496                 adapter->is_hw_11ac_capable = true;
1497
1498                 /* Copy 11AC cap */
1499                 adapter->hw_dot_11ac_dev_cap =
1500                                         le32_to_cpu(hw_spec->dot_11ac_dev_cap);
1501                 adapter->usr_dot_11ac_dev_cap_bg = adapter->hw_dot_11ac_dev_cap;
1502                 adapter->usr_dot_11ac_dev_cap_a = adapter->hw_dot_11ac_dev_cap;
1503
1504                 /* Copy 11AC mcs */
1505                 adapter->hw_dot_11ac_mcs_support =
1506                                 le32_to_cpu(hw_spec->dot_11ac_mcs_support);
1507                 adapter->usr_dot_11ac_mcs_support =
1508                                         adapter->hw_dot_11ac_mcs_support;
1509         } else {
1510                 adapter->is_hw_11ac_capable = false;
1511         }
1512
1513         dev_dbg(adapter->dev, "info: GET_HW_SPEC: fw_release_number- %#x\n",
1514                 adapter->fw_release_number);
1515         dev_dbg(adapter->dev, "info: GET_HW_SPEC: permanent addr: %pM\n",
1516                 hw_spec->permanent_addr);
1517         dev_dbg(adapter->dev,
1518                 "info: GET_HW_SPEC: hw_if_version=%#x version=%#x\n",
1519                 le16_to_cpu(hw_spec->hw_if_version),
1520                 le16_to_cpu(hw_spec->version));
1521
1522         if (priv->curr_addr[0] == 0xff)
1523                 memmove(priv->curr_addr, hw_spec->permanent_addr, ETH_ALEN);
1524
1525         adapter->region_code = le16_to_cpu(hw_spec->region_code);
1526
1527         for (i = 0; i < MWIFIEX_MAX_REGION_CODE; i++)
1528                 /* Use the region code to search for the index */
1529                 if (adapter->region_code == region_code_index[i])
1530                         break;
1531
1532         /* If it's unidentified region code, use the default (USA) */
1533         if (i >= MWIFIEX_MAX_REGION_CODE) {
1534                 adapter->region_code = 0x10;
1535                 dev_dbg(adapter->dev,
1536                         "cmd: unknown region code, use default (USA)\n");
1537         }
1538
1539         adapter->hw_dot_11n_dev_cap = le32_to_cpu(hw_spec->dot_11n_dev_cap);
1540         adapter->hw_dev_mcs_support = hw_spec->dev_mcs_support;
1541
1542         if (adapter->if_ops.update_mp_end_port)
1543                 adapter->if_ops.update_mp_end_port(adapter,
1544                                         le16_to_cpu(hw_spec->mp_end_port));
1545
1546         return 0;
1547 }