2 * Copyright (c) 2010 Broadcom Corporation
4 * Permission to use, copy, modify, and/or distribute this software for any
5 * purpose with or without fee is hereby granted, provided that the above
6 * copyright notice and this permission notice appear in all copies.
8 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
11 * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
13 * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
14 * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
19 #include <linux/init.h>
20 #include <linux/kernel.h>
21 #include <linux/kthread.h>
22 #include <linux/slab.h>
23 #include <linux/skbuff.h>
24 #include <linux/netdevice.h>
25 #include <linux/etherdevice.h>
26 #include <linux/mmc/sdio_func.h>
27 #include <linux/random.h>
28 #include <linux/spinlock.h>
29 #include <linux/ethtool.h>
30 #include <linux/fcntl.h>
32 #include <linux/uaccess.h>
33 #include <linux/hardirq.h>
34 #include <linux/mutex.h>
35 #include <linux/wait.h>
36 #include <linux/module.h>
37 #include <net/cfg80211.h>
38 #include <net/rtnetlink.h>
40 #include <brcmu_utils.h>
41 #include <brcmu_wifi.h>
45 #include "dhd_proto.h"
47 #include "wl_cfg80211.h"
49 MODULE_AUTHOR("Broadcom Corporation");
50 MODULE_DESCRIPTION("Broadcom 802.11n wireless LAN fullmac driver.");
51 MODULE_SUPPORTED_DEVICE("Broadcom 802.11n WLAN fullmac cards");
52 MODULE_LICENSE("Dual BSD/GPL");
55 /* Interface control information */
57 struct brcmf_pub
*drvr
; /* back pointer to brcmf_pub */
58 /* OS/stack specifics */
59 struct net_device
*ndev
;
60 struct net_device_stats stats
;
61 int idx
; /* iface idx in dongle */
62 u8 mac_addr
[ETH_ALEN
]; /* assigned MAC address */
66 int brcmf_msg_level
= BRCMF_ERROR_VAL
;
67 module_param(brcmf_msg_level
, int, 0);
69 int brcmf_ifname2idx(struct brcmf_pub
*drvr
, char *name
)
71 int i
= BRCMF_MAX_IFS
;
74 if (name
== NULL
|| *name
== '\0')
78 ifp
= drvr
->iflist
[i
];
79 if (ifp
&& !strncmp(ifp
->ndev
->name
, name
, IFNAMSIZ
))
83 brcmf_dbg(TRACE
, "return idx %d for \"%s\"\n", i
, name
);
85 return i
; /* default - the primary interface */
88 char *brcmf_ifname(struct brcmf_pub
*drvr
, int ifidx
)
90 if (ifidx
< 0 || ifidx
>= BRCMF_MAX_IFS
) {
91 brcmf_dbg(ERROR
, "ifidx %d out of range\n", ifidx
);
95 if (drvr
->iflist
[ifidx
] == NULL
) {
96 brcmf_dbg(ERROR
, "null i/f %d\n", ifidx
);
100 if (drvr
->iflist
[ifidx
]->ndev
)
101 return drvr
->iflist
[ifidx
]->ndev
->name
;
106 static void _brcmf_set_multicast_list(struct work_struct
*work
)
108 struct net_device
*ndev
;
109 struct netdev_hw_addr
*ha
;
112 __le32 dcmd_le_value
;
114 struct brcmf_dcmd dcmd
;
119 struct brcmf_pub
*drvr
= container_of(work
, struct brcmf_pub
,
122 ndev
= drvr
->iflist
[0]->ndev
;
123 cnt
= netdev_mc_count(ndev
);
125 /* Determine initial value of allmulti flag */
126 dcmd_value
= (ndev
->flags
& IFF_ALLMULTI
) ? true : false;
128 /* Send down the multicast list first. */
130 buflen
= sizeof("mcast_list") + sizeof(cnt
) + (cnt
* ETH_ALEN
);
131 bufp
= buf
= kmalloc(buflen
, GFP_ATOMIC
);
135 strcpy(bufp
, "mcast_list");
136 bufp
+= strlen("mcast_list") + 1;
138 cnt_le
= cpu_to_le32(cnt
);
139 memcpy(bufp
, &cnt_le
, sizeof(cnt
));
140 bufp
+= sizeof(cnt_le
);
142 netdev_for_each_mc_addr(ha
, ndev
) {
145 memcpy(bufp
, ha
->addr
, ETH_ALEN
);
150 memset(&dcmd
, 0, sizeof(dcmd
));
151 dcmd
.cmd
= BRCMF_C_SET_VAR
;
156 ret
= brcmf_proto_dcmd(drvr
, 0, &dcmd
, dcmd
.len
);
158 brcmf_dbg(ERROR
, "%s: set mcast_list failed, cnt %d\n",
159 brcmf_ifname(drvr
, 0), cnt
);
160 dcmd_value
= cnt
? true : dcmd_value
;
165 /* Now send the allmulti setting. This is based on the setting in the
166 * net_device flags, but might be modified above to be turned on if we
167 * were trying to set some addresses and dongle rejected it...
170 buflen
= sizeof("allmulti") + sizeof(dcmd_value
);
171 buf
= kmalloc(buflen
, GFP_ATOMIC
);
175 dcmd_le_value
= cpu_to_le32(dcmd_value
);
178 ("allmulti", (void *)&dcmd_le_value
,
179 sizeof(dcmd_le_value
), buf
, buflen
)) {
180 brcmf_dbg(ERROR
, "%s: mkiovar failed for allmulti, datalen %d buflen %u\n",
181 brcmf_ifname(drvr
, 0),
182 (int)sizeof(dcmd_value
), buflen
);
187 memset(&dcmd
, 0, sizeof(dcmd
));
188 dcmd
.cmd
= BRCMF_C_SET_VAR
;
193 ret
= brcmf_proto_dcmd(drvr
, 0, &dcmd
, dcmd
.len
);
195 brcmf_dbg(ERROR
, "%s: set allmulti %d failed\n",
196 brcmf_ifname(drvr
, 0),
197 le32_to_cpu(dcmd_le_value
));
202 /* Finally, pick up the PROMISC flag as well, like the NIC
205 dcmd_value
= (ndev
->flags
& IFF_PROMISC
) ? true : false;
206 dcmd_le_value
= cpu_to_le32(dcmd_value
);
208 memset(&dcmd
, 0, sizeof(dcmd
));
209 dcmd
.cmd
= BRCMF_C_SET_PROMISC
;
210 dcmd
.buf
= &dcmd_le_value
;
211 dcmd
.len
= sizeof(dcmd_le_value
);
214 ret
= brcmf_proto_dcmd(drvr
, 0, &dcmd
, dcmd
.len
);
216 brcmf_dbg(ERROR
, "%s: set promisc %d failed\n",
217 brcmf_ifname(drvr
, 0),
218 le32_to_cpu(dcmd_le_value
));
223 _brcmf_set_mac_address(struct work_struct
*work
)
226 struct brcmf_dcmd dcmd
;
229 struct brcmf_pub
*drvr
= container_of(work
, struct brcmf_pub
,
232 brcmf_dbg(TRACE
, "enter\n");
233 if (!brcmf_c_mkiovar("cur_etheraddr", (char *)drvr
->macvalue
,
234 ETH_ALEN
, buf
, 32)) {
235 brcmf_dbg(ERROR
, "%s: mkiovar failed for cur_etheraddr\n",
236 brcmf_ifname(drvr
, 0));
239 memset(&dcmd
, 0, sizeof(dcmd
));
240 dcmd
.cmd
= BRCMF_C_SET_VAR
;
245 ret
= brcmf_proto_dcmd(drvr
, 0, &dcmd
, dcmd
.len
);
247 brcmf_dbg(ERROR
, "%s: set cur_etheraddr failed\n",
248 brcmf_ifname(drvr
, 0));
250 memcpy(drvr
->iflist
[0]->ndev
->dev_addr
,
251 drvr
->macvalue
, ETH_ALEN
);
256 static int brcmf_netdev_set_mac_address(struct net_device
*ndev
, void *addr
)
258 struct brcmf_if
*ifp
= netdev_priv(ndev
);
259 struct brcmf_pub
*drvr
= ifp
->drvr
;
260 struct sockaddr
*sa
= (struct sockaddr
*)addr
;
262 memcpy(&drvr
->macvalue
, sa
->sa_data
, ETH_ALEN
);
263 schedule_work(&drvr
->setmacaddr_work
);
267 static void brcmf_netdev_set_multicast_list(struct net_device
*ndev
)
269 struct brcmf_if
*ifp
= netdev_priv(ndev
);
270 struct brcmf_pub
*drvr
= ifp
->drvr
;
272 schedule_work(&drvr
->multicast_work
);
275 static int brcmf_netdev_start_xmit(struct sk_buff
*skb
, struct net_device
*ndev
)
278 struct brcmf_if
*ifp
= netdev_priv(ndev
);
279 struct brcmf_pub
*drvr
= ifp
->drvr
;
281 brcmf_dbg(TRACE
, "Enter\n");
284 if (!drvr
->bus_if
->drvr_up
||
285 (drvr
->bus_if
->state
== BRCMF_BUS_DOWN
)) {
286 brcmf_dbg(ERROR
, "xmit rejected drvup=%d state=%d\n",
287 drvr
->bus_if
->drvr_up
,
288 drvr
->bus_if
->state
);
289 netif_stop_queue(ndev
);
293 if (!drvr
->iflist
[ifp
->idx
]) {
294 brcmf_dbg(ERROR
, "bad ifidx %d\n", ifp
->idx
);
295 netif_stop_queue(ndev
);
299 /* Make sure there's enough room for any header */
300 if (skb_headroom(skb
) < drvr
->hdrlen
) {
301 struct sk_buff
*skb2
;
303 brcmf_dbg(INFO
, "%s: insufficient headroom\n",
304 brcmf_ifname(drvr
, ifp
->idx
));
305 drvr
->bus_if
->tx_realloc
++;
306 skb2
= skb_realloc_headroom(skb
, drvr
->hdrlen
);
310 brcmf_dbg(ERROR
, "%s: skb_realloc_headroom failed\n",
311 brcmf_ifname(drvr
, ifp
->idx
));
317 /* Update multicast statistic */
318 if (skb
->len
>= ETH_ALEN
) {
319 u8
*pktdata
= (u8
*)(skb
->data
);
320 struct ethhdr
*eh
= (struct ethhdr
*)pktdata
;
322 if (is_multicast_ether_addr(eh
->h_dest
))
323 drvr
->tx_multicast
++;
324 if (ntohs(eh
->h_proto
) == ETH_P_PAE
)
325 atomic_inc(&drvr
->pend_8021x_cnt
);
328 /* If the protocol uses a data header, apply it */
329 brcmf_proto_hdrpush(drvr
, ifp
->idx
, skb
);
331 /* Use bus module to send data frame */
332 ret
= drvr
->bus_if
->brcmf_bus_txdata(drvr
->dev
, skb
);
336 drvr
->bus_if
->dstats
.tx_dropped
++;
338 drvr
->bus_if
->dstats
.tx_packets
++;
340 /* Return ok: we always eat the packet */
344 void brcmf_txflowblock(struct device
*dev
, bool state
)
346 struct net_device
*ndev
;
347 struct brcmf_bus
*bus_if
= dev_get_drvdata(dev
);
348 struct brcmf_pub
*drvr
= bus_if
->drvr
;
351 brcmf_dbg(TRACE
, "Enter\n");
353 for (i
= 0; i
< BRCMF_MAX_IFS
; i
++)
354 if (drvr
->iflist
[i
]) {
355 ndev
= drvr
->iflist
[i
]->ndev
;
357 netif_stop_queue(ndev
);
359 netif_wake_queue(ndev
);
363 static int brcmf_host_event(struct brcmf_pub
*drvr
, int *ifidx
,
364 void *pktdata
, struct brcmf_event_msg
*event
,
369 bcmerror
= brcmf_c_host_event(drvr
, ifidx
, pktdata
, event
, data
);
373 if (drvr
->iflist
[*ifidx
]->ndev
)
374 brcmf_cfg80211_event(drvr
->iflist
[*ifidx
]->ndev
,
380 void brcmf_rx_frame(struct device
*dev
, int ifidx
,
381 struct sk_buff_head
*skb_list
)
386 struct sk_buff
*skb
, *pnext
;
387 struct brcmf_if
*ifp
;
388 struct brcmf_event_msg event
;
389 struct brcmf_bus
*bus_if
= dev_get_drvdata(dev
);
390 struct brcmf_pub
*drvr
= bus_if
->drvr
;
392 brcmf_dbg(TRACE
, "Enter\n");
394 skb_queue_walk_safe(skb_list
, skb
, pnext
) {
395 skb_unlink(skb
, skb_list
);
397 /* Get the protocol, maintain skb around eth_type_trans()
398 * The main reason for this hack is for the limitation of
399 * Linux 2.4 where 'eth_type_trans' uses the
400 * 'net->hard_header_len'
401 * to perform skb_pull inside vs ETH_HLEN. Since to avoid
402 * coping of the packet coming from the network stack to add
403 * BDC, Hardware header etc, during network interface
405 * we set the 'net->hard_header_len' to ETH_HLEN + extra space
407 * for BDC, Hardware header etc. and not just the ETH_HLEN
412 ifp
= drvr
->iflist
[ifidx
];
414 ifp
= drvr
->iflist
[0];
416 if (!ifp
|| !ifp
->ndev
||
417 ifp
->ndev
->reg_state
!= NETREG_REGISTERED
) {
418 brcmu_pkt_buf_free_skb(skb
);
422 skb
->dev
= ifp
->ndev
;
423 skb
->protocol
= eth_type_trans(skb
, skb
->dev
);
425 if (skb
->pkt_type
== PACKET_MULTICAST
)
426 bus_if
->dstats
.multicast
++;
431 /* Strip header, count, deliver upward */
432 skb_pull(skb
, ETH_HLEN
);
434 /* Process special event packets and then discard them */
435 if (ntohs(skb
->protocol
) == ETH_P_LINK_CTL
)
436 brcmf_host_event(drvr
, &ifidx
,
440 if (drvr
->iflist
[ifidx
]) {
441 ifp
= drvr
->iflist
[ifidx
];
442 ifp
->ndev
->last_rx
= jiffies
;
445 bus_if
->dstats
.rx_bytes
+= skb
->len
;
446 bus_if
->dstats
.rx_packets
++; /* Local count */
451 /* If the receive is not processed inside an ISR,
452 * the softirqd must be woken explicitly to service
453 * the NET_RX_SOFTIRQ. In 2.6 kernels, this is handled
454 * by netif_rx_ni(), but in earlier kernels, we need
461 void brcmf_txcomplete(struct device
*dev
, struct sk_buff
*txp
, bool success
)
466 struct brcmf_bus
*bus_if
= dev_get_drvdata(dev
);
467 struct brcmf_pub
*drvr
= bus_if
->drvr
;
469 brcmf_proto_hdrpull(dev
, &ifidx
, txp
);
471 eh
= (struct ethhdr
*)(txp
->data
);
472 type
= ntohs(eh
->h_proto
);
474 if (type
== ETH_P_PAE
)
475 atomic_dec(&drvr
->pend_8021x_cnt
);
479 static struct net_device_stats
*brcmf_netdev_get_stats(struct net_device
*ndev
)
481 struct brcmf_if
*ifp
= netdev_priv(ndev
);
482 struct brcmf_bus
*bus_if
= ifp
->drvr
->bus_if
;
484 brcmf_dbg(TRACE
, "Enter\n");
486 /* Copy dongle stats to net device stats */
487 ifp
->stats
.rx_packets
= bus_if
->dstats
.rx_packets
;
488 ifp
->stats
.tx_packets
= bus_if
->dstats
.tx_packets
;
489 ifp
->stats
.rx_bytes
= bus_if
->dstats
.rx_bytes
;
490 ifp
->stats
.tx_bytes
= bus_if
->dstats
.tx_bytes
;
491 ifp
->stats
.rx_errors
= bus_if
->dstats
.rx_errors
;
492 ifp
->stats
.tx_errors
= bus_if
->dstats
.tx_errors
;
493 ifp
->stats
.rx_dropped
= bus_if
->dstats
.rx_dropped
;
494 ifp
->stats
.tx_dropped
= bus_if
->dstats
.tx_dropped
;
495 ifp
->stats
.multicast
= bus_if
->dstats
.multicast
;
500 /* Retrieve current toe component enables, which are kept
501 as a bitmap in toe_ol iovar */
502 static int brcmf_toe_get(struct brcmf_pub
*drvr
, int ifidx
, u32
*toe_ol
)
504 struct brcmf_dcmd dcmd
;
509 memset(&dcmd
, 0, sizeof(dcmd
));
511 dcmd
.cmd
= BRCMF_C_GET_VAR
;
513 dcmd
.len
= (uint
) sizeof(buf
);
516 strcpy(buf
, "toe_ol");
517 ret
= brcmf_proto_dcmd(drvr
, ifidx
, &dcmd
, dcmd
.len
);
519 /* Check for older dongle image that doesn't support toe_ol */
521 brcmf_dbg(ERROR
, "%s: toe not supported by device\n",
522 brcmf_ifname(drvr
, ifidx
));
526 brcmf_dbg(INFO
, "%s: could not get toe_ol: ret=%d\n",
527 brcmf_ifname(drvr
, ifidx
), ret
);
531 memcpy(&toe_le
, buf
, sizeof(u32
));
532 *toe_ol
= le32_to_cpu(toe_le
);
536 /* Set current toe component enables in toe_ol iovar,
537 and set toe global enable iovar */
538 static int brcmf_toe_set(struct brcmf_pub
*drvr
, int ifidx
, u32 toe_ol
)
540 struct brcmf_dcmd dcmd
;
543 __le32 toe_le
= cpu_to_le32(toe_ol
);
545 memset(&dcmd
, 0, sizeof(dcmd
));
547 dcmd
.cmd
= BRCMF_C_SET_VAR
;
549 dcmd
.len
= (uint
) sizeof(buf
);
552 /* Set toe_ol as requested */
553 strcpy(buf
, "toe_ol");
554 memcpy(&buf
[sizeof("toe_ol")], &toe_le
, sizeof(u32
));
556 ret
= brcmf_proto_dcmd(drvr
, ifidx
, &dcmd
, dcmd
.len
);
558 brcmf_dbg(ERROR
, "%s: could not set toe_ol: ret=%d\n",
559 brcmf_ifname(drvr
, ifidx
), ret
);
563 /* Enable toe globally only if any components are enabled. */
564 toe_le
= cpu_to_le32(toe_ol
!= 0);
567 memcpy(&buf
[sizeof("toe")], &toe_le
, sizeof(u32
));
569 ret
= brcmf_proto_dcmd(drvr
, ifidx
, &dcmd
, dcmd
.len
);
571 brcmf_dbg(ERROR
, "%s: could not set toe: ret=%d\n",
572 brcmf_ifname(drvr
, ifidx
), ret
);
579 static void brcmf_ethtool_get_drvinfo(struct net_device
*ndev
,
580 struct ethtool_drvinfo
*info
)
582 struct brcmf_if
*ifp
= netdev_priv(ndev
);
583 struct brcmf_pub
*drvr
= ifp
->drvr
;
585 sprintf(info
->driver
, KBUILD_MODNAME
);
586 sprintf(info
->version
, "%lu", drvr
->drv_version
);
587 sprintf(info
->bus_info
, "%s", dev_name(drvr
->dev
));
590 static const struct ethtool_ops brcmf_ethtool_ops
= {
591 .get_drvinfo
= brcmf_ethtool_get_drvinfo
,
594 static int brcmf_ethtool(struct brcmf_pub
*drvr
, void __user
*uaddr
)
596 struct ethtool_drvinfo info
;
597 char drvname
[sizeof(info
.driver
)];
599 struct ethtool_value edata
;
600 u32 toe_cmpnt
, csum_dir
;
603 brcmf_dbg(TRACE
, "Enter\n");
605 /* all ethtool calls start with a cmd word */
606 if (copy_from_user(&cmd
, uaddr
, sizeof(u32
)))
610 case ETHTOOL_GDRVINFO
:
611 /* Copy out any request driver name */
612 if (copy_from_user(&info
, uaddr
, sizeof(info
)))
614 strncpy(drvname
, info
.driver
, sizeof(info
.driver
));
615 drvname
[sizeof(info
.driver
) - 1] = '\0';
617 /* clear struct for return */
618 memset(&info
, 0, sizeof(info
));
621 /* if requested, identify ourselves */
622 if (strcmp(drvname
, "?dhd") == 0) {
623 sprintf(info
.driver
, "dhd");
624 strcpy(info
.version
, BRCMF_VERSION_STR
);
627 /* otherwise, require dongle to be up */
628 else if (!drvr
->bus_if
->drvr_up
) {
629 brcmf_dbg(ERROR
, "dongle is not up\n");
633 /* finally, report dongle driver type */
635 sprintf(info
.driver
, "wl");
637 sprintf(info
.driver
, "xx");
639 sprintf(info
.version
, "%lu", drvr
->drv_version
);
640 if (copy_to_user(uaddr
, &info
, sizeof(info
)))
642 brcmf_dbg(CTL
, "given %*s, returning %s\n",
643 (int)sizeof(drvname
), drvname
, info
.driver
);
646 /* Get toe offload components from dongle */
647 case ETHTOOL_GRXCSUM
:
648 case ETHTOOL_GTXCSUM
:
649 ret
= brcmf_toe_get(drvr
, 0, &toe_cmpnt
);
654 (cmd
== ETHTOOL_GTXCSUM
) ? TOE_TX_CSUM_OL
: TOE_RX_CSUM_OL
;
657 edata
.data
= (toe_cmpnt
& csum_dir
) ? 1 : 0;
659 if (copy_to_user(uaddr
, &edata
, sizeof(edata
)))
663 /* Set toe offload components in dongle */
664 case ETHTOOL_SRXCSUM
:
665 case ETHTOOL_STXCSUM
:
666 if (copy_from_user(&edata
, uaddr
, sizeof(edata
)))
669 /* Read the current settings, update and write back */
670 ret
= brcmf_toe_get(drvr
, 0, &toe_cmpnt
);
675 (cmd
== ETHTOOL_STXCSUM
) ? TOE_TX_CSUM_OL
: TOE_RX_CSUM_OL
;
678 toe_cmpnt
|= csum_dir
;
680 toe_cmpnt
&= ~csum_dir
;
682 ret
= brcmf_toe_set(drvr
, 0, toe_cmpnt
);
686 /* If setting TX checksum mode, tell Linux the new mode */
687 if (cmd
== ETHTOOL_STXCSUM
) {
689 drvr
->iflist
[0]->ndev
->features
|=
692 drvr
->iflist
[0]->ndev
->features
&=
705 static int brcmf_netdev_ioctl_entry(struct net_device
*ndev
, struct ifreq
*ifr
,
708 struct brcmf_if
*ifp
= netdev_priv(ndev
);
709 struct brcmf_pub
*drvr
= ifp
->drvr
;
711 brcmf_dbg(TRACE
, "ifidx %d, cmd 0x%04x\n", ifp
->idx
, cmd
);
713 if (!drvr
->iflist
[ifp
->idx
])
716 if (cmd
== SIOCETHTOOL
)
717 return brcmf_ethtool(drvr
, ifr
->ifr_data
);
722 /* called only from within this driver. Sends a command to the dongle. */
723 s32
brcmf_exec_dcmd(struct net_device
*ndev
, u32 cmd
, void *arg
, u32 len
)
725 struct brcmf_dcmd dcmd
;
729 struct brcmf_if
*ifp
= netdev_priv(ndev
);
730 struct brcmf_pub
*drvr
= ifp
->drvr
;
732 memset(&dcmd
, 0, sizeof(dcmd
));
737 if (dcmd
.buf
!= NULL
)
738 buflen
= min_t(uint
, dcmd
.len
, BRCMF_DCMD_MAXLEN
);
740 /* send to dongle (must be up, and wl) */
741 if ((drvr
->bus_if
->state
!= BRCMF_BUS_DATA
)) {
742 brcmf_dbg(ERROR
, "DONGLE_DOWN\n");
753 * Intercept BRCMF_C_SET_KEY CMD - serialize M4 send and
754 * set key CMD to prevent M4 encryption.
756 is_set_key_cmd
= ((dcmd
.cmd
== BRCMF_C_SET_KEY
) ||
757 ((dcmd
.cmd
== BRCMF_C_SET_VAR
) &&
758 !(strncmp("wsec_key", dcmd
.buf
, 9))) ||
759 ((dcmd
.cmd
== BRCMF_C_SET_VAR
) &&
760 !(strncmp("bsscfg:wsec_key", dcmd
.buf
, 15))));
762 brcmf_netdev_wait_pend8021x(ndev
);
764 err
= brcmf_proto_dcmd(drvr
, ifp
->idx
, &dcmd
, buflen
);
773 int brcmf_netlink_dcmd(struct net_device
*ndev
, struct brcmf_dcmd
*dcmd
)
775 brcmf_dbg(TRACE
, "enter: cmd %x buf %p len %d\n",
776 dcmd
->cmd
, dcmd
->buf
, dcmd
->len
);
778 return brcmf_exec_dcmd(ndev
, dcmd
->cmd
, dcmd
->buf
, dcmd
->len
);
781 static int brcmf_netdev_stop(struct net_device
*ndev
)
783 struct brcmf_if
*ifp
= netdev_priv(ndev
);
784 struct brcmf_pub
*drvr
= ifp
->drvr
;
786 brcmf_dbg(TRACE
, "Enter\n");
787 brcmf_cfg80211_down(drvr
->config
);
788 if (drvr
->bus_if
->drvr_up
== 0)
791 /* Set state and stop OS transmissions */
792 drvr
->bus_if
->drvr_up
= false;
793 netif_stop_queue(ndev
);
798 static int brcmf_netdev_open(struct net_device
*ndev
)
800 struct brcmf_if
*ifp
= netdev_priv(ndev
);
801 struct brcmf_pub
*drvr
= ifp
->drvr
;
802 struct brcmf_bus
*bus_if
= drvr
->bus_if
;
807 brcmf_dbg(TRACE
, "ifidx %d\n", ifp
->idx
);
809 if (ifp
->idx
== 0) { /* do it only for primary eth0 */
810 /* If bus is not ready, can't continue */
811 if (bus_if
->state
!= BRCMF_BUS_DATA
) {
812 brcmf_dbg(ERROR
, "failed bus is not ready\n");
816 atomic_set(&drvr
->pend_8021x_cnt
, 0);
818 memcpy(ndev
->dev_addr
, drvr
->mac
, ETH_ALEN
);
820 /* Get current TOE mode from dongle */
821 if (brcmf_toe_get(drvr
, ifp
->idx
, &toe_ol
) >= 0
822 && (toe_ol
& TOE_TX_CSUM_OL
) != 0)
823 drvr
->iflist
[ifp
->idx
]->ndev
->features
|=
826 drvr
->iflist
[ifp
->idx
]->ndev
->features
&=
830 /* make sure RF is ready for work */
831 brcmf_proto_cdc_set_dcmd(drvr
, 0, BRCMF_C_UP
, (char *)&up
, sizeof(up
));
833 /* Allow transmit calls */
834 netif_start_queue(ndev
);
835 drvr
->bus_if
->drvr_up
= true;
836 if (brcmf_cfg80211_up(drvr
->config
)) {
837 brcmf_dbg(ERROR
, "failed to bring up cfg80211\n");
844 static const struct net_device_ops brcmf_netdev_ops_pri
= {
845 .ndo_open
= brcmf_netdev_open
,
846 .ndo_stop
= brcmf_netdev_stop
,
847 .ndo_get_stats
= brcmf_netdev_get_stats
,
848 .ndo_do_ioctl
= brcmf_netdev_ioctl_entry
,
849 .ndo_start_xmit
= brcmf_netdev_start_xmit
,
850 .ndo_set_mac_address
= brcmf_netdev_set_mac_address
,
851 .ndo_set_rx_mode
= brcmf_netdev_set_multicast_list
854 static int brcmf_net_attach(struct brcmf_if
*ifp
)
856 struct brcmf_pub
*drvr
= ifp
->drvr
;
857 struct net_device
*ndev
;
858 u8 temp_addr
[ETH_ALEN
];
860 brcmf_dbg(TRACE
, "ifidx %d\n", ifp
->idx
);
862 ndev
= drvr
->iflist
[ifp
->idx
]->ndev
;
863 ndev
->netdev_ops
= &brcmf_netdev_ops_pri
;
866 * determine mac address to use
868 if (is_valid_ether_addr(ifp
->mac_addr
))
869 memcpy(temp_addr
, ifp
->mac_addr
, ETH_ALEN
);
871 memcpy(temp_addr
, drvr
->mac
, ETH_ALEN
);
874 brcmf_dbg(TRACE
, "ACCESS POINT MAC:\n");
875 /* ACCESSPOINT INTERFACE CASE */
876 temp_addr
[0] |= 0X02; /* set bit 2 ,
877 - Locally Administered address */
880 ndev
->hard_header_len
= ETH_HLEN
+ drvr
->hdrlen
;
881 ndev
->ethtool_ops
= &brcmf_ethtool_ops
;
883 drvr
->rxsz
= ndev
->mtu
+ ndev
->hard_header_len
+
886 memcpy(ndev
->dev_addr
, temp_addr
, ETH_ALEN
);
888 /* attach to cfg80211 for primary interface */
890 drvr
->config
= brcmf_cfg80211_attach(ndev
, drvr
->dev
, drvr
);
891 if (drvr
->config
== NULL
) {
892 brcmf_dbg(ERROR
, "wl_cfg80211_attach failed\n");
897 if (register_netdev(ndev
) != 0) {
898 brcmf_dbg(ERROR
, "couldn't register the net device\n");
902 brcmf_dbg(INFO
, "%s: Broadcom Dongle Host Driver\n", ndev
->name
);
907 ndev
->netdev_ops
= NULL
;
912 brcmf_add_if(struct device
*dev
, int ifidx
, char *name
, u8
*mac_addr
)
914 struct brcmf_if
*ifp
;
915 struct net_device
*ndev
;
916 struct brcmf_bus
*bus_if
= dev_get_drvdata(dev
);
917 struct brcmf_pub
*drvr
= bus_if
->drvr
;
919 brcmf_dbg(TRACE
, "idx %d\n", ifidx
);
921 ifp
= drvr
->iflist
[ifidx
];
923 * Delete the existing interface before overwriting it
924 * in case we missed the BRCMF_E_IF_DEL event.
927 brcmf_dbg(ERROR
, "ERROR: netdev:%s already exists, try free & unregister\n",
929 netif_stop_queue(ifp
->ndev
);
930 unregister_netdev(ifp
->ndev
);
931 free_netdev(ifp
->ndev
);
932 drvr
->iflist
[ifidx
] = NULL
;
935 /* Allocate netdev, including space for private structure */
936 ndev
= alloc_netdev(sizeof(struct brcmf_if
), name
, ether_setup
);
938 brcmf_dbg(ERROR
, "OOM - alloc_netdev\n");
942 ifp
= netdev_priv(ndev
);
945 drvr
->iflist
[ifidx
] = ifp
;
947 if (mac_addr
!= NULL
)
948 memcpy(&ifp
->mac_addr
, mac_addr
, ETH_ALEN
);
950 if (brcmf_net_attach(ifp
)) {
951 brcmf_dbg(ERROR
, "brcmf_net_attach failed");
952 free_netdev(ifp
->ndev
);
953 drvr
->iflist
[ifidx
] = NULL
;
957 brcmf_dbg(TRACE
, " ==== pid:%x, net_device for if:%s created ===\n",
958 current
->pid
, ifp
->ndev
->name
);
963 void brcmf_del_if(struct brcmf_pub
*drvr
, int ifidx
)
965 struct brcmf_if
*ifp
;
967 brcmf_dbg(TRACE
, "idx %d\n", ifidx
);
969 ifp
= drvr
->iflist
[ifidx
];
971 brcmf_dbg(ERROR
, "Null interface\n");
976 if (ifp
->ndev
->netdev_ops
== &brcmf_netdev_ops_pri
) {
978 brcmf_netdev_stop(ifp
->ndev
);
982 netif_stop_queue(ifp
->ndev
);
985 unregister_netdev(ifp
->ndev
);
986 drvr
->iflist
[ifidx
] = NULL
;
988 brcmf_cfg80211_detach(drvr
->config
);
989 free_netdev(ifp
->ndev
);
993 int brcmf_attach(uint bus_hdrlen
, struct device
*dev
)
995 struct brcmf_pub
*drvr
= NULL
;
998 brcmf_dbg(TRACE
, "Enter\n");
1000 /* Allocate primary brcmf_info */
1001 drvr
= kzalloc(sizeof(struct brcmf_pub
), GFP_ATOMIC
);
1005 mutex_init(&drvr
->proto_block
);
1007 /* Link to bus module */
1008 drvr
->hdrlen
= bus_hdrlen
;
1009 drvr
->bus_if
= dev_get_drvdata(dev
);
1010 drvr
->bus_if
->drvr
= drvr
;
1013 /* create device debugfs folder */
1014 brcmf_debugfs_attach(drvr
);
1016 /* Attach and link in the protocol */
1017 ret
= brcmf_proto_attach(drvr
);
1019 brcmf_dbg(ERROR
, "brcmf_prot_attach failed\n");
1023 INIT_WORK(&drvr
->setmacaddr_work
, _brcmf_set_mac_address
);
1024 INIT_WORK(&drvr
->multicast_work
, _brcmf_set_multicast_list
);
1026 INIT_LIST_HEAD(&drvr
->bus_if
->dcmd_list
);
1036 int brcmf_bus_start(struct device
*dev
)
1039 /* Room for "event_msgs" + '\0' + bitvec */
1040 char iovbuf
[BRCMF_EVENTING_MASK_LEN
+ 12];
1041 struct brcmf_bus
*bus_if
= dev_get_drvdata(dev
);
1042 struct brcmf_pub
*drvr
= bus_if
->drvr
;
1044 brcmf_dbg(TRACE
, "\n");
1046 /* Bring up the bus */
1047 ret
= bus_if
->brcmf_bus_init(dev
);
1049 brcmf_dbg(ERROR
, "brcmf_sdbrcm_bus_init failed %d\n", ret
);
1053 brcmf_c_mkiovar("event_msgs", drvr
->eventmask
, BRCMF_EVENTING_MASK_LEN
,
1054 iovbuf
, sizeof(iovbuf
));
1055 brcmf_proto_cdc_query_dcmd(drvr
, 0, BRCMF_C_GET_VAR
, iovbuf
,
1057 memcpy(drvr
->eventmask
, iovbuf
, BRCMF_EVENTING_MASK_LEN
);
1059 setbit(drvr
->eventmask
, BRCMF_E_SET_SSID
);
1060 setbit(drvr
->eventmask
, BRCMF_E_PRUNE
);
1061 setbit(drvr
->eventmask
, BRCMF_E_AUTH
);
1062 setbit(drvr
->eventmask
, BRCMF_E_REASSOC
);
1063 setbit(drvr
->eventmask
, BRCMF_E_REASSOC_IND
);
1064 setbit(drvr
->eventmask
, BRCMF_E_DEAUTH_IND
);
1065 setbit(drvr
->eventmask
, BRCMF_E_DISASSOC_IND
);
1066 setbit(drvr
->eventmask
, BRCMF_E_DISASSOC
);
1067 setbit(drvr
->eventmask
, BRCMF_E_JOIN
);
1068 setbit(drvr
->eventmask
, BRCMF_E_ASSOC_IND
);
1069 setbit(drvr
->eventmask
, BRCMF_E_PSK_SUP
);
1070 setbit(drvr
->eventmask
, BRCMF_E_LINK
);
1071 setbit(drvr
->eventmask
, BRCMF_E_NDIS_LINK
);
1072 setbit(drvr
->eventmask
, BRCMF_E_MIC_ERROR
);
1073 setbit(drvr
->eventmask
, BRCMF_E_PMKID_CACHE
);
1074 setbit(drvr
->eventmask
, BRCMF_E_TXFAIL
);
1075 setbit(drvr
->eventmask
, BRCMF_E_JOIN_START
);
1076 setbit(drvr
->eventmask
, BRCMF_E_SCAN_COMPLETE
);
1078 /* enable dongle roaming event */
1080 drvr
->pktfilter_count
= 1;
1081 /* Setup filter to allow only unicast */
1082 drvr
->pktfilter
[0] = "100 0 0 0 0x01 0x00";
1084 /* Bus is ready, do any protocol initialization */
1085 ret
= brcmf_proto_init(drvr
);
1089 /* add primary networking interface */
1090 ret
= brcmf_add_if(dev
, 0, "wlan%d", drvr
->mac
);
1094 /* signal bus ready */
1095 bus_if
->state
= BRCMF_BUS_DATA
;
1099 static void brcmf_bus_detach(struct brcmf_pub
*drvr
)
1101 brcmf_dbg(TRACE
, "Enter\n");
1104 /* Stop the protocol module */
1105 brcmf_proto_stop(drvr
);
1107 /* Stop the bus module */
1108 drvr
->bus_if
->brcmf_bus_stop(drvr
->dev
);
1112 void brcmf_detach(struct device
*dev
)
1115 struct brcmf_bus
*bus_if
= dev_get_drvdata(dev
);
1116 struct brcmf_pub
*drvr
= bus_if
->drvr
;
1118 brcmf_dbg(TRACE
, "Enter\n");
1121 /* make sure primary interface removed last */
1122 for (i
= BRCMF_MAX_IFS
-1; i
> -1; i
--)
1123 if (drvr
->iflist
[i
])
1124 brcmf_del_if(drvr
, i
);
1126 brcmf_bus_detach(drvr
);
1129 cancel_work_sync(&drvr
->setmacaddr_work
);
1130 cancel_work_sync(&drvr
->multicast_work
);
1131 brcmf_proto_detach(drvr
);
1134 brcmf_debugfs_detach(drvr
);
1135 bus_if
->drvr
= NULL
;
1139 static int brcmf_get_pend_8021x_cnt(struct brcmf_pub
*drvr
)
1141 return atomic_read(&drvr
->pend_8021x_cnt
);
1144 #define MAX_WAIT_FOR_8021X_TX 10
1146 int brcmf_netdev_wait_pend8021x(struct net_device
*ndev
)
1148 struct brcmf_if
*ifp
= netdev_priv(ndev
);
1149 struct brcmf_pub
*drvr
= ifp
->drvr
;
1150 int timeout
= 10 * HZ
/ 1000;
1151 int ntimes
= MAX_WAIT_FOR_8021X_TX
;
1152 int pend
= brcmf_get_pend_8021x_cnt(drvr
);
1154 while (ntimes
&& pend
) {
1156 set_current_state(TASK_INTERRUPTIBLE
);
1157 schedule_timeout(timeout
);
1158 set_current_state(TASK_RUNNING
);
1161 pend
= brcmf_get_pend_8021x_cnt(drvr
);
1167 int brcmf_write_to_file(struct brcmf_pub
*drvr
, const u8
*buf
, int size
)
1171 mm_segment_t old_fs
;
1174 /* change to KERNEL_DS address limit */
1178 /* open file to write */
1179 fp
= filp_open("/tmp/mem_dump", O_WRONLY
| O_CREAT
, 0640);
1181 brcmf_dbg(ERROR
, "open file error\n");
1186 /* Write buf to file */
1187 fp
->f_op
->write(fp
, (char __user
*)buf
, size
, &pos
);
1190 /* free buf before return */
1192 /* close file before return */
1194 filp_close(fp
, NULL
);
1195 /* restore previous address limit */
1202 static void brcmf_driver_init(struct work_struct
*work
)
1204 brcmf_debugfs_init();
1206 #ifdef CONFIG_BRCMFMAC_SDIO
1209 #ifdef CONFIG_BRCMFMAC_USB
1213 static DECLARE_WORK(brcmf_driver_work
, brcmf_driver_init
);
1215 static int __init
brcmfmac_module_init(void)
1217 if (!schedule_work(&brcmf_driver_work
))
1223 static void __exit
brcmfmac_module_exit(void)
1225 cancel_work_sync(&brcmf_driver_work
);
1227 #ifdef CONFIG_BRCMFMAC_SDIO
1230 #ifdef CONFIG_BRCMFMAC_USB
1233 brcmf_debugfs_exit();
1236 module_init(brcmfmac_module_init
);
1237 module_exit(brcmfmac_module_exit
);