2 * ============================================================================
3 * Copyright (c) 1996-2002 Winbond Electronic Corporation
9 * Processing the Rx message from down layer
11 * ============================================================================
13 #include <linux/usb.h>
14 #include <linux/slab.h>
20 static void packet_came(struct ieee80211_hw *hw, char *pRxBufferAddress, int PacketSize)
22 struct wbsoft_priv *priv = hw->priv;
24 struct ieee80211_rx_status rx_status = {0};
29 skb = dev_alloc_skb(PacketSize);
31 printk("Not enough memory for packet, FIXME\n");
35 memcpy(skb_put(skb, PacketSize), pRxBufferAddress, PacketSize);
37 memcpy(IEEE80211_SKB_RXCB(skb), &rx_status, sizeof(rx_status));
38 ieee80211_rx_irqsafe(hw, skb);
41 static void Wb35Rx_adjust(struct wb35_descriptor *pRxDes)
43 u32 *pRxBufferAddress;
48 DecryptionMethod = pRxDes->R01.R01_decryption_method;
49 pRxBufferAddress = pRxDes->buffer_address[0];
50 BufferSize = pRxDes->buffer_size[0];
52 /* Adjust the last part of data. Only data left */
53 BufferSize -= 4; /* For CRC-32 */
56 if (DecryptionMethod == 3) /* For CCMP */
59 /* Adjust the IV field which after 802.11 header and ICV field. */
60 if (DecryptionMethod == 1) { /* For WEP */
61 for (i = 6; i > 0; i--)
62 pRxBufferAddress[i] = pRxBufferAddress[i - 1];
63 pRxDes->buffer_address[0] = pRxBufferAddress + 1;
64 BufferSize -= 4; /* 4 byte for IV */
65 } else if (DecryptionMethod) { /* For TKIP and CCMP */
66 for (i = 7; i > 1; i--)
67 pRxBufferAddress[i] = pRxBufferAddress[i - 2];
68 pRxDes->buffer_address[0] = pRxBufferAddress + 2; /* Update the descriptor, shift 8 byte */
69 BufferSize -= 8; /* 8 byte for IV + ICV */
71 pRxDes->buffer_size[0] = BufferSize;
74 static u16 Wb35Rx_indicate(struct ieee80211_hw *hw)
76 struct wbsoft_priv *priv = hw->priv;
77 struct hw_data *pHwData = &priv->sHwData;
78 struct wb35_descriptor RxDes;
79 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx;
82 u16 stmp, BufferSize, stmp2 = 0;
85 /* Only one thread be allowed to run into the following */
87 RxBufferId = pWb35Rx->RxProcessIndex;
88 if (pWb35Rx->RxOwner[RxBufferId]) /* Owner by VM */
91 pWb35Rx->RxProcessIndex++;
92 pWb35Rx->RxProcessIndex %= MAX_USB_RX_BUFFER_NUMBER;
94 pRxBufferAddress = pWb35Rx->pDRx;
95 BufferSize = pWb35Rx->RxBufferSize[RxBufferId];
97 /* Parse the bulkin buffer */
98 while (BufferSize >= 4) {
99 if ((cpu_to_le32(*(u32 *)pRxBufferAddress) & 0x0fffffff) == RX_END_TAG) /* Is ending? */
102 /* Get the R00 R01 first */
103 RxDes.R00.value = le32_to_cpu(*(u32 *)pRxBufferAddress);
104 PacketSize = (u16)RxDes.R00.R00_receive_byte_count;
105 RxDes.R01.value = le32_to_cpu(*((u32 *)(pRxBufferAddress + 4)));
107 if ((PacketSize & 0x03) > 0)
110 /* Basic check for Rx length. Is length valid? */
111 if (PacketSize > MAX_PACKET_SIZE) {
112 pr_debug("Serious ERROR : Rx data size too long, size =%d\n", PacketSize);
113 pWb35Rx->EP3vm_state = VM_STOP;
114 pWb35Rx->Ep3ErrorCount2++;
119 * Wb35Rx_indicate() is called synchronously so it isn't
120 * necessary to set "RxDes.Desctriptor_ID = RxBufferID;"
122 BufferSize -= 8; /* subtract 8 byte for 35's USB header length */
123 pRxBufferAddress += 8;
125 RxDes.buffer_address[0] = pRxBufferAddress;
126 RxDes.buffer_size[0] = PacketSize;
127 RxDes.buffer_number = 1;
128 RxDes.buffer_start_index = 0;
129 RxDes.buffer_total_size = RxDes.buffer_size[0];
130 Wb35Rx_adjust(&RxDes);
132 packet_came(hw, pRxBufferAddress, PacketSize);
134 /* Move RxBuffer point to the next */
135 stmp = PacketSize + 3;
136 stmp &= ~0x03; /* 4n alignment */
137 pRxBufferAddress += stmp;
142 /* Reclaim resource */
143 pWb35Rx->RxOwner[RxBufferId] = 1;
148 static void Wb35Rx(struct ieee80211_hw *hw);
150 static void Wb35Rx_Complete(struct urb *urb)
152 struct ieee80211_hw *hw = urb->context;
153 struct wbsoft_priv *priv = hw->priv;
154 struct hw_data *pHwData = &priv->sHwData;
155 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx;
156 u8 *pRxBufferAddress;
160 struct R00_descriptor R00;
162 /* Variable setting */
163 pWb35Rx->EP3vm_state = VM_COMPLETED;
164 pWb35Rx->EP3VM_status = urb->status; /* Store the last result of Irp */
166 RxBufferId = pWb35Rx->CurrentRxBufferId;
168 pRxBufferAddress = pWb35Rx->pDRx;
169 BulkLength = (u16)urb->actual_length;
171 /* The IRP is completed */
172 pWb35Rx->EP3vm_state = VM_COMPLETED;
174 if (pHwData->SurpriseRemove) /* Must be here, or RxBufferId is invalid */
177 if (pWb35Rx->rx_halt)
180 /* Start to process the data only in successful condition */
181 pWb35Rx->RxOwner[RxBufferId] = 0; /* Set the owner to driver */
182 R00.value = le32_to_cpu(*(u32 *)pRxBufferAddress);
184 /* The URB is completed, check the result */
185 if (pWb35Rx->EP3VM_status != 0) {
186 pr_debug("EP3 IoCompleteRoutine return error\n");
187 pWb35Rx->EP3vm_state = VM_STOP;
191 /* For recovering. check if operating in single USB mode */
192 if (!HAL_USB_MODE_BURST(pHwData)) {
193 SizeCheck = R00.R00_receive_byte_count;
194 if ((SizeCheck & 0x03) > 0)
196 SizeCheck = (SizeCheck + 3) & ~0x03;
197 SizeCheck += 12; /* 8 + 4 badbeef */
198 if ((BulkLength > 1600) ||
199 (SizeCheck > 1600) ||
200 (BulkLength != SizeCheck) ||
201 (BulkLength == 0)) { /* Add for fail Urb */
202 pWb35Rx->EP3vm_state = VM_STOP;
203 pWb35Rx->Ep3ErrorCount2++;
207 /* Indicating the receiving data */
208 pWb35Rx->ByteReceived += BulkLength;
209 pWb35Rx->RxBufferSize[RxBufferId] = BulkLength;
211 if (!pWb35Rx->RxOwner[RxBufferId])
214 kfree(pWb35Rx->pDRx);
215 /* Do the next receive */
220 pWb35Rx->RxOwner[RxBufferId] = 1; /* Set the owner to hardware */
221 atomic_dec(&pWb35Rx->RxFireCounter);
222 pWb35Rx->EP3vm_state = VM_STOP;
225 /* This function cannot reentrain */
226 static void Wb35Rx(struct ieee80211_hw *hw)
228 struct wbsoft_priv *priv = hw->priv;
229 struct hw_data *pHwData = &priv->sHwData;
230 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx;
231 u8 *pRxBufferAddress;
232 struct urb *urb = pWb35Rx->RxUrb;
237 if (pHwData->SurpriseRemove)
240 if (pWb35Rx->rx_halt)
243 /* Get RxBuffer's ID */
244 RxBufferId = pWb35Rx->RxBufferId;
245 if (!pWb35Rx->RxOwner[RxBufferId]) {
246 /* It's impossible to run here. */
247 pr_debug("Rx driver fifo unavailable\n");
251 /* Update buffer point, then start to bulkin the data from USB */
252 pWb35Rx->RxBufferId++;
253 pWb35Rx->RxBufferId %= MAX_USB_RX_BUFFER_NUMBER;
255 pWb35Rx->CurrentRxBufferId = RxBufferId;
257 pWb35Rx->pDRx = kzalloc(MAX_USB_RX_BUFFER, GFP_ATOMIC);
258 if (!pWb35Rx->pDRx) {
259 printk("w35und: Rx memory alloc failed\n");
262 pRxBufferAddress = pWb35Rx->pDRx;
264 usb_fill_bulk_urb(urb, pHwData->WbUsb.udev,
265 usb_rcvbulkpipe(pHwData->WbUsb.udev, 3),
266 pRxBufferAddress, MAX_USB_RX_BUFFER,
267 Wb35Rx_Complete, hw);
269 pWb35Rx->EP3vm_state = VM_RUNNING;
271 retv = usb_submit_urb(urb, GFP_ATOMIC);
274 printk("Rx URB sending error\n");
281 pWb35Rx->EP3vm_state = VM_STOP;
282 atomic_dec(&pWb35Rx->RxFireCounter);
285 void Wb35Rx_start(struct ieee80211_hw *hw)
287 struct wbsoft_priv *priv = hw->priv;
288 struct hw_data *pHwData = &priv->sHwData;
289 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx;
291 /* Allow only one thread to run into the Wb35Rx() function */
292 if (atomic_inc_return(&pWb35Rx->RxFireCounter) == 1) {
293 pWb35Rx->EP3vm_state = VM_RUNNING;
296 atomic_dec(&pWb35Rx->RxFireCounter);
299 static void Wb35Rx_reset_descriptor(struct hw_data *pHwData)
301 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx;
304 pWb35Rx->ByteReceived = 0;
305 pWb35Rx->RxProcessIndex = 0;
306 pWb35Rx->RxBufferId = 0;
307 pWb35Rx->EP3vm_state = VM_STOP;
308 pWb35Rx->rx_halt = 0;
310 /* Initial the Queue. The last buffer is reserved for used if the Rx resource is unavailable. */
311 for (i = 0; i < MAX_USB_RX_BUFFER_NUMBER; i++)
312 pWb35Rx->RxOwner[i] = 1;
315 unsigned char Wb35Rx_initial(struct hw_data *pHwData)
317 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx;
319 /* Initial the Buffer Queue */
320 Wb35Rx_reset_descriptor(pHwData);
322 pWb35Rx->RxUrb = usb_alloc_urb(0, GFP_ATOMIC);
323 return !!pWb35Rx->RxUrb;
326 void Wb35Rx_stop(struct hw_data *pHwData)
328 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx;
330 /* Canceling the Irp if already sends it out. */
331 if (pWb35Rx->EP3vm_state == VM_RUNNING) {
332 usb_unlink_urb(pWb35Rx->RxUrb); /* Only use unlink, let Wb35Rx_destroy to free them */
333 pr_debug("EP3 Rx stop\n");
337 /* Needs process context */
338 void Wb35Rx_destroy(struct hw_data *pHwData)
340 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx;
343 msleep(10); /* Delay for waiting function enter */
344 } while (pWb35Rx->EP3vm_state != VM_STOP);
345 msleep(10); /* Delay for waiting function exit */
348 usb_free_urb(pWb35Rx->RxUrb);
349 pr_debug("Wb35Rx_destroy OK\n");