projects / deliverable / linux.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
brcmfmac: rename chip download functions
[deliverable/linux.git] / drivers / net / wireless / brcm80211 / brcmfmac / msgbuf.c
1 /* Copyright (c) 2014 Broadcom Corporation
2 *
3 * Permission to use, copy, modify, and/or distribute this software for any
4 * purpose with or without fee is hereby granted, provided that the above
5 * copyright notice and this permission notice appear in all copies.
6 *
7 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
8 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
9 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
10 * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
11 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
12 * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
13 * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
14 */
15
16 /*******************************************************************************
17 * Communicates with the dongle by using dcmd codes.
18 * For certain dcmd codes, the dongle interprets string data from the host.
19 ******************************************************************************/
20
21 #include <linux/types.h>
22 #include <linux/netdevice.h>
23
24 #include <brcmu_utils.h>
25 #include <brcmu_wifi.h>
26
27 #include "core.h"
28 #include "debug.h"
29 #include "proto.h"
30 #include "msgbuf.h"
31 #include "commonring.h"
32 #include "flowring.h"
33 #include "bus.h"
34 #include "tracepoint.h"
35
36
37 #define MSGBUF_IOCTL_RESP_TIMEOUT 2000
38
39 #define MSGBUF_TYPE_GEN_STATUS 0x1
40 #define MSGBUF_TYPE_RING_STATUS 0x2
41 #define MSGBUF_TYPE_FLOW_RING_CREATE 0x3
42 #define MSGBUF_TYPE_FLOW_RING_CREATE_CMPLT 0x4
43 #define MSGBUF_TYPE_FLOW_RING_DELETE 0x5
44 #define MSGBUF_TYPE_FLOW_RING_DELETE_CMPLT 0x6
45 #define MSGBUF_TYPE_FLOW_RING_FLUSH 0x7
46 #define MSGBUF_TYPE_FLOW_RING_FLUSH_CMPLT 0x8
47 #define MSGBUF_TYPE_IOCTLPTR_REQ 0x9
48 #define MSGBUF_TYPE_IOCTLPTR_REQ_ACK 0xA
49 #define MSGBUF_TYPE_IOCTLRESP_BUF_POST 0xB
50 #define MSGBUF_TYPE_IOCTL_CMPLT 0xC
51 #define MSGBUF_TYPE_EVENT_BUF_POST 0xD
52 #define MSGBUF_TYPE_WL_EVENT 0xE
53 #define MSGBUF_TYPE_TX_POST 0xF
54 #define MSGBUF_TYPE_TX_STATUS 0x10
55 #define MSGBUF_TYPE_RXBUF_POST 0x11
56 #define MSGBUF_TYPE_RX_CMPLT 0x12
57 #define MSGBUF_TYPE_LPBK_DMAXFER 0x13
58 #define MSGBUF_TYPE_LPBK_DMAXFER_CMPLT 0x14
59
60 #define NR_TX_PKTIDS 2048
61 #define NR_RX_PKTIDS 1024
62
63 #define BRCMF_IOCTL_REQ_PKTID 0xFFFE
64
65 #define BRCMF_MSGBUF_MAX_PKT_SIZE 2048
66 #define BRCMF_MSGBUF_RXBUFPOST_THRESHOLD 32
67 #define BRCMF_MSGBUF_MAX_IOCTLRESPBUF_POST 8
68 #define BRCMF_MSGBUF_MAX_EVENTBUF_POST 8
69
70 #define BRCMF_MSGBUF_PKT_FLAGS_FRAME_802_3 0x01
71 #define BRCMF_MSGBUF_PKT_FLAGS_PRIO_SHIFT 5
72
73 #define BRCMF_MSGBUF_TX_FLUSH_CNT1 32
74 #define BRCMF_MSGBUF_TX_FLUSH_CNT2 96
75
76 #define BRCMF_MSGBUF_DELAY_TXWORKER_THRS 64
77 #define BRCMF_MSGBUF_TRICKLE_TXWORKER_THRS 32
78
79 struct msgbuf_common_hdr {
80 u8 msgtype;
81 u8 ifidx;
82 u8 flags;
83 u8 rsvd0;
84 __le32 request_id;
85 };
86
87 struct msgbuf_buf_addr {
88 __le32 low_addr;
89 __le32 high_addr;
90 };
91
92 struct msgbuf_ioctl_req_hdr {
93 struct msgbuf_common_hdr msg;
94 __le32 cmd;
95 __le16 trans_id;
96 __le16 input_buf_len;
97 __le16 output_buf_len;
98 __le16 rsvd0[3];
99 struct msgbuf_buf_addr req_buf_addr;
100 __le32 rsvd1[2];
101 };
102
103 struct msgbuf_tx_msghdr {
104 struct msgbuf_common_hdr msg;
105 u8 txhdr[ETH_HLEN];
106 u8 flags;
107 u8 seg_cnt;
108 struct msgbuf_buf_addr metadata_buf_addr;
109 struct msgbuf_buf_addr data_buf_addr;
110 __le16 metadata_buf_len;
111 __le16 data_len;
112 __le32 rsvd0;
113 };
114
115 struct msgbuf_rx_bufpost {
116 struct msgbuf_common_hdr msg;
117 __le16 metadata_buf_len;
118 __le16 data_buf_len;
119 __le32 rsvd0;
120 struct msgbuf_buf_addr metadata_buf_addr;
121 struct msgbuf_buf_addr data_buf_addr;
122 };
123
124 struct msgbuf_rx_ioctl_resp_or_event {
125 struct msgbuf_common_hdr msg;
126 __le16 host_buf_len;
127 __le16 rsvd0[3];
128 struct msgbuf_buf_addr host_buf_addr;
129 __le32 rsvd1[4];
130 };
131
132 struct msgbuf_completion_hdr {
133 __le16 status;
134 __le16 flow_ring_id;
135 };
136
137 struct msgbuf_rx_event {
138 struct msgbuf_common_hdr msg;
139 struct msgbuf_completion_hdr compl_hdr;
140 __le16 event_data_len;
141 __le16 seqnum;
142 __le16 rsvd0[4];
143 };
144
145 struct msgbuf_ioctl_resp_hdr {
146 struct msgbuf_common_hdr msg;
147 struct msgbuf_completion_hdr compl_hdr;
148 __le16 resp_len;
149 __le16 trans_id;
150 __le32 cmd;
151 __le32 rsvd0;
152 };
153
154 struct msgbuf_tx_status {
155 struct msgbuf_common_hdr msg;
156 struct msgbuf_completion_hdr compl_hdr;
157 __le16 metadata_len;
158 __le16 tx_status;
159 };
160
161 struct msgbuf_rx_complete {
162 struct msgbuf_common_hdr msg;
163 struct msgbuf_completion_hdr compl_hdr;
164 __le16 metadata_len;
165 __le16 data_len;
166 __le16 data_offset;
167 __le16 flags;
168 __le32 rx_status_0;
169 __le32 rx_status_1;
170 __le32 rsvd0;
171 };
172
173 struct msgbuf_tx_flowring_create_req {
174 struct msgbuf_common_hdr msg;
175 u8 da[ETH_ALEN];
176 u8 sa[ETH_ALEN];
177 u8 tid;
178 u8 if_flags;
179 __le16 flow_ring_id;
180 u8 tc;
181 u8 priority;
182 __le16 int_vector;
183 __le16 max_items;
184 __le16 len_item;
185 struct msgbuf_buf_addr flow_ring_addr;
186 };
187
188 struct msgbuf_tx_flowring_delete_req {
189 struct msgbuf_common_hdr msg;
190 __le16 flow_ring_id;
191 __le16 reason;
192 __le32 rsvd0[7];
193 };
194
195 struct msgbuf_flowring_create_resp {
196 struct msgbuf_common_hdr msg;
197 struct msgbuf_completion_hdr compl_hdr;
198 __le32 rsvd0[3];
199 };
200
201 struct msgbuf_flowring_delete_resp {
202 struct msgbuf_common_hdr msg;
203 struct msgbuf_completion_hdr compl_hdr;
204 __le32 rsvd0[3];
205 };
206
207 struct msgbuf_flowring_flush_resp {
208 struct msgbuf_common_hdr msg;
209 struct msgbuf_completion_hdr compl_hdr;
210 __le32 rsvd0[3];
211 };
212
213 struct brcmf_msgbuf_work_item {
214 struct list_head queue;
215 u32 flowid;
216 int ifidx;
217 u8 sa[ETH_ALEN];
218 u8 da[ETH_ALEN];
219 };
220
221 struct brcmf_msgbuf {
222 struct brcmf_pub *drvr;
223
224 struct brcmf_commonring **commonrings;
225 struct brcmf_commonring **flowrings;
226 dma_addr_t *flowring_dma_handle;
227 u16 nrof_flowrings;
228
229 u16 rx_dataoffset;
230 u32 max_rxbufpost;
231 u16 rx_metadata_offset;
232 u32 rxbufpost;
233
234 u32 max_ioctlrespbuf;
235 u32 cur_ioctlrespbuf;
236 u32 max_eventbuf;
237 u32 cur_eventbuf;
238
239 void *ioctbuf;
240 dma_addr_t ioctbuf_handle;
241 u32 ioctbuf_phys_hi;
242 u32 ioctbuf_phys_lo;
243 int ioctl_resp_status;
244 u32 ioctl_resp_ret_len;
245 u32 ioctl_resp_pktid;
246
247 u16 data_seq_no;
248 u16 ioctl_seq_no;
249 u32 reqid;
250 wait_queue_head_t ioctl_resp_wait;
251 bool ctl_completed;
252
253 struct brcmf_msgbuf_pktids *tx_pktids;
254 struct brcmf_msgbuf_pktids *rx_pktids;
255 struct brcmf_flowring *flow;
256
257 struct workqueue_struct *txflow_wq;
258 struct work_struct txflow_work;
259 unsigned long *flow_map;
260 unsigned long *txstatus_done_map;
261
262 struct work_struct flowring_work;
263 spinlock_t flowring_work_lock;
264 struct list_head work_queue;
265 };
266
267 struct brcmf_msgbuf_pktid {
268 atomic_t allocated;
269 u16 data_offset;
270 struct sk_buff *skb;
271 dma_addr_t physaddr;
272 };
273
274 struct brcmf_msgbuf_pktids {
275 u32 array_size;
276 u32 last_allocated_idx;
277 enum dma_data_direction direction;
278 struct brcmf_msgbuf_pktid *array;
279 };
280
281
282 /* dma flushing needs implementation for mips and arm platforms. Should
283 * be put in util. Note, this is not real flushing. It is virtual non
284 * cached memory. Only write buffers should have to be drained. Though
285 * this may be different depending on platform......
286 */
287 #define brcmf_dma_flush(addr, len)
288 #define brcmf_dma_invalidate_cache(addr, len)
289
290
291 static void brcmf_msgbuf_rxbuf_ioctlresp_post(struct brcmf_msgbuf *msgbuf);
292
293
294 static struct brcmf_msgbuf_pktids *
295 brcmf_msgbuf_init_pktids(u32 nr_array_entries,
296 enum dma_data_direction direction)
297 {
298 struct brcmf_msgbuf_pktid *array;
299 struct brcmf_msgbuf_pktids *pktids;
300
301 array = kcalloc(nr_array_entries, sizeof(*array), GFP_KERNEL);
302 if (!array)
303 return NULL;
304
305 pktids = kzalloc(sizeof(*pktids), GFP_KERNEL);
306 if (!pktids) {
307 kfree(array);
308 return NULL;
309 }
310 pktids->array = array;
311 pktids->array_size = nr_array_entries;
312
313 return pktids;
314 }
315
316
317 static int
318 brcmf_msgbuf_alloc_pktid(struct device *dev,
319 struct brcmf_msgbuf_pktids *pktids,
320 struct sk_buff *skb, u16 data_offset,
321 dma_addr_t *physaddr, u32 *idx)
322 {
323 struct brcmf_msgbuf_pktid *array;
324 u32 count;
325
326 array = pktids->array;
327
328 *physaddr = dma_map_single(dev, skb->data + data_offset,
329 skb->len - data_offset, pktids->direction);
330
331 if (dma_mapping_error(dev, *physaddr)) {
332 brcmf_err("dma_map_single failed !!\n");
333 return -ENOMEM;
334 }
335
336 *idx = pktids->last_allocated_idx;
337
338 count = 0;
339 do {
340 (*idx)++;
341 if (*idx == pktids->array_size)
342 *idx = 0;
343 if (array[*idx].allocated.counter == 0)
344 if (atomic_cmpxchg(&array[*idx].allocated, 0, 1) == 0)
345 break;
346 count++;
347 } while (count < pktids->array_size);
348
349 if (count == pktids->array_size)
350 return -ENOMEM;
351
352 array[*idx].data_offset = data_offset;
353 array[*idx].physaddr = *physaddr;
354 array[*idx].skb = skb;
355
356 pktids->last_allocated_idx = *idx;
357
358 return 0;
359 }
360
361
362 static struct sk_buff *
363 brcmf_msgbuf_get_pktid(struct device *dev, struct brcmf_msgbuf_pktids *pktids,
364 u32 idx)
365 {
366 struct brcmf_msgbuf_pktid *pktid;
367 struct sk_buff *skb;
368
369 if (idx >= pktids->array_size) {
370 brcmf_err("Invalid packet id %d (max %d)\n", idx,
371 pktids->array_size);
372 return NULL;
373 }
374 if (pktids->array[idx].allocated.counter) {
375 pktid = &pktids->array[idx];
376 dma_unmap_single(dev, pktid->physaddr,
377 pktid->skb->len - pktid->data_offset,
378 pktids->direction);
379 skb = pktid->skb;
380 pktid->allocated.counter = 0;
381 return skb;
382 } else {
383 brcmf_err("Invalid packet id %d (not in use)\n", idx);
384 }
385
386 return NULL;
387 }
388
389
390 static void
391 brcmf_msgbuf_release_array(struct device *dev,
392 struct brcmf_msgbuf_pktids *pktids)
393 {
394 struct brcmf_msgbuf_pktid *array;
395 struct brcmf_msgbuf_pktid *pktid;
396 u32 count;
397
398 array = pktids->array;
399 count = 0;
400 do {
401 if (array[count].allocated.counter) {
402 pktid = &array[count];
403 dma_unmap_single(dev, pktid->physaddr,
404 pktid->skb->len - pktid->data_offset,
405 pktids->direction);
406 brcmu_pkt_buf_free_skb(pktid->skb);
407 }
408 count++;
409 } while (count < pktids->array_size);
410
411 kfree(array);
412 kfree(pktids);
413 }
414
415
416 static void brcmf_msgbuf_release_pktids(struct brcmf_msgbuf *msgbuf)
417 {
418 if (msgbuf->rx_pktids)
419 brcmf_msgbuf_release_array(msgbuf->drvr->bus_if->dev,
420 msgbuf->rx_pktids);
421 if (msgbuf->tx_pktids)
422 brcmf_msgbuf_release_array(msgbuf->drvr->bus_if->dev,
423 msgbuf->tx_pktids);
424 }
425
426
427 static int brcmf_msgbuf_tx_ioctl(struct brcmf_pub *drvr, int ifidx,
428 uint cmd, void *buf, uint len)
429 {
430 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
431 struct brcmf_commonring *commonring;
432 struct msgbuf_ioctl_req_hdr *request;
433 u16 buf_len;
434 void *ret_ptr;
435 int err;
436
437 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_CONTROL_SUBMIT];
438 brcmf_commonring_lock(commonring);
439 ret_ptr = brcmf_commonring_reserve_for_write(commonring);
440 if (!ret_ptr) {
441 brcmf_err("Failed to reserve space in commonring\n");
442 brcmf_commonring_unlock(commonring);
443 return -ENOMEM;
444 }
445
446 msgbuf->reqid++;
447
448 request = (struct msgbuf_ioctl_req_hdr *)ret_ptr;
449 request->msg.msgtype = MSGBUF_TYPE_IOCTLPTR_REQ;
450 request->msg.ifidx = (u8)ifidx;
451 request->msg.flags = 0;
452 request->msg.request_id = cpu_to_le32(BRCMF_IOCTL_REQ_PKTID);
453 request->cmd = cpu_to_le32(cmd);
454 request->output_buf_len = cpu_to_le16(len);
455 request->trans_id = cpu_to_le16(msgbuf->reqid);
456
457 buf_len = min_t(u16, len, BRCMF_TX_IOCTL_MAX_MSG_SIZE);
458 request->input_buf_len = cpu_to_le16(buf_len);
459 request->req_buf_addr.high_addr = cpu_to_le32(msgbuf->ioctbuf_phys_hi);
460 request->req_buf_addr.low_addr = cpu_to_le32(msgbuf->ioctbuf_phys_lo);
461 if (buf)
462 memcpy(msgbuf->ioctbuf, buf, buf_len);
463 else
464 memset(msgbuf->ioctbuf, 0, buf_len);
465 brcmf_dma_flush(ioctl_buf, buf_len);
466
467 err = brcmf_commonring_write_complete(commonring);
468 brcmf_commonring_unlock(commonring);
469
470 return err;
471 }
472
473
474 static int brcmf_msgbuf_ioctl_resp_wait(struct brcmf_msgbuf *msgbuf)
475 {
476 return wait_event_timeout(msgbuf->ioctl_resp_wait,
477 msgbuf->ctl_completed,
478 msecs_to_jiffies(MSGBUF_IOCTL_RESP_TIMEOUT));
479 }
480
481
482 static void brcmf_msgbuf_ioctl_resp_wake(struct brcmf_msgbuf *msgbuf)
483 {
484 msgbuf->ctl_completed = true;
485 if (waitqueue_active(&msgbuf->ioctl_resp_wait))
486 wake_up(&msgbuf->ioctl_resp_wait);
487 }
488
489
490 static int brcmf_msgbuf_query_dcmd(struct brcmf_pub *drvr, int ifidx,
491 uint cmd, void *buf, uint len)
492 {
493 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
494 struct sk_buff *skb = NULL;
495 int timeout;
496 int err;
497
498 brcmf_dbg(MSGBUF, "ifidx=%d, cmd=%d, len=%d\n", ifidx, cmd, len);
499 msgbuf->ctl_completed = false;
500 err = brcmf_msgbuf_tx_ioctl(drvr, ifidx, cmd, buf, len);
501 if (err)
502 return err;
503
504 timeout = brcmf_msgbuf_ioctl_resp_wait(msgbuf);
505 if (!timeout) {
506 brcmf_err("Timeout on response for query command\n");
507 return -EIO;
508 }
509
510 skb = brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev,
511 msgbuf->rx_pktids,
512 msgbuf->ioctl_resp_pktid);
513 if (msgbuf->ioctl_resp_ret_len != 0) {
514 if (!skb) {
515 brcmf_err("Invalid packet id idx recv'd %d\n",
516 msgbuf->ioctl_resp_pktid);
517 return -EBADF;
518 }
519 memcpy(buf, skb->data, (len < msgbuf->ioctl_resp_ret_len) ?
520 len : msgbuf->ioctl_resp_ret_len);
521 }
522 brcmu_pkt_buf_free_skb(skb);
523
524 return msgbuf->ioctl_resp_status;
525 }
526
527
528 static int brcmf_msgbuf_set_dcmd(struct brcmf_pub *drvr, int ifidx,
529 uint cmd, void *buf, uint len)
530 {
531 return brcmf_msgbuf_query_dcmd(drvr, ifidx, cmd, buf, len);
532 }
533
534
535 static int brcmf_msgbuf_hdrpull(struct brcmf_pub *drvr, bool do_fws,
536 u8 *ifidx, struct sk_buff *skb)
537 {
538 return -ENODEV;
539 }
540
541
542 static void
543 brcmf_msgbuf_remove_flowring(struct brcmf_msgbuf *msgbuf, u16 flowid)
544 {
545 u32 dma_sz;
546 void *dma_buf;
547
548 brcmf_dbg(MSGBUF, "Removing flowring %d\n", flowid);
549
550 dma_sz = BRCMF_H2D_TXFLOWRING_MAX_ITEM * BRCMF_H2D_TXFLOWRING_ITEMSIZE;
551 dma_buf = msgbuf->flowrings[flowid]->buf_addr;
552 dma_free_coherent(msgbuf->drvr->bus_if->dev, dma_sz, dma_buf,
553 msgbuf->flowring_dma_handle[flowid]);
554
555 brcmf_flowring_delete(msgbuf->flow, flowid);
556 }
557
558
559 static struct brcmf_msgbuf_work_item *
560 brcmf_msgbuf_dequeue_work(struct brcmf_msgbuf *msgbuf)
561 {
562 struct brcmf_msgbuf_work_item *work = NULL;
563 ulong flags;
564
565 spin_lock_irqsave(&msgbuf->flowring_work_lock, flags);
566 if (!list_empty(&msgbuf->work_queue)) {
567 work = list_first_entry(&msgbuf->work_queue,
568 struct brcmf_msgbuf_work_item, queue);
569 list_del(&work->queue);
570 }
571 spin_unlock_irqrestore(&msgbuf->flowring_work_lock, flags);
572
573 return work;
574 }
575
576
577 static u32
578 brcmf_msgbuf_flowring_create_worker(struct brcmf_msgbuf *msgbuf,
579 struct brcmf_msgbuf_work_item *work)
580 {
581 struct msgbuf_tx_flowring_create_req *create;
582 struct brcmf_commonring *commonring;
583 void *ret_ptr;
584 u32 flowid;
585 void *dma_buf;
586 u32 dma_sz;
587 u64 address;
588 int err;
589
590 flowid = work->flowid;
591 dma_sz = BRCMF_H2D_TXFLOWRING_MAX_ITEM * BRCMF_H2D_TXFLOWRING_ITEMSIZE;
592 dma_buf = dma_alloc_coherent(msgbuf->drvr->bus_if->dev, dma_sz,
593 &msgbuf->flowring_dma_handle[flowid],
594 GFP_KERNEL);
595 if (!dma_buf) {
596 brcmf_err("dma_alloc_coherent failed\n");
597 brcmf_flowring_delete(msgbuf->flow, flowid);
598 return BRCMF_FLOWRING_INVALID_ID;
599 }
600
601 brcmf_commonring_config(msgbuf->flowrings[flowid],
602 BRCMF_H2D_TXFLOWRING_MAX_ITEM,
603 BRCMF_H2D_TXFLOWRING_ITEMSIZE, dma_buf);
604
605 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_CONTROL_SUBMIT];
606 brcmf_commonring_lock(commonring);
607 ret_ptr = brcmf_commonring_reserve_for_write(commonring);
608 if (!ret_ptr) {
609 brcmf_err("Failed to reserve space in commonring\n");
610 brcmf_commonring_unlock(commonring);
611 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
612 return BRCMF_FLOWRING_INVALID_ID;
613 }
614
615 create = (struct msgbuf_tx_flowring_create_req *)ret_ptr;
616 create->msg.msgtype = MSGBUF_TYPE_FLOW_RING_CREATE;
617 create->msg.ifidx = work->ifidx;
618 create->msg.request_id = 0;
619 create->tid = brcmf_flowring_tid(msgbuf->flow, flowid);
620 create->flow_ring_id = cpu_to_le16(flowid +
621 BRCMF_NROF_H2D_COMMON_MSGRINGS);
622 memcpy(create->sa, work->sa, ETH_ALEN);
623 memcpy(create->da, work->da, ETH_ALEN);
624 address = (u64)msgbuf->flowring_dma_handle[flowid];
625 create->flow_ring_addr.high_addr = cpu_to_le32(address >> 32);
626 create->flow_ring_addr.low_addr = cpu_to_le32(address & 0xffffffff);
627 create->max_items = cpu_to_le16(BRCMF_H2D_TXFLOWRING_MAX_ITEM);
628 create->len_item = cpu_to_le16(BRCMF_H2D_TXFLOWRING_ITEMSIZE);
629
630 brcmf_dbg(MSGBUF, "Send Flow Create Req flow ID %d for peer %pM prio %d ifindex %d\n",
631 flowid, work->da, create->tid, work->ifidx);
632
633 err = brcmf_commonring_write_complete(commonring);
634 brcmf_commonring_unlock(commonring);
635 if (err) {
636 brcmf_err("Failed to write commonring\n");
637 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
638 return BRCMF_FLOWRING_INVALID_ID;
639 }
640
641 return flowid;
642 }
643
644
645 static void brcmf_msgbuf_flowring_worker(struct work_struct *work)
646 {
647 struct brcmf_msgbuf *msgbuf;
648 struct brcmf_msgbuf_work_item *create;
649
650 msgbuf = container_of(work, struct brcmf_msgbuf, flowring_work);
651
652 while ((create = brcmf_msgbuf_dequeue_work(msgbuf))) {
653 brcmf_msgbuf_flowring_create_worker(msgbuf, create);
654 kfree(create);
655 }
656 }
657
658
659 static u32 brcmf_msgbuf_flowring_create(struct brcmf_msgbuf *msgbuf, int ifidx,
660 struct sk_buff *skb)
661 {
662 struct brcmf_msgbuf_work_item *create;
663 struct ethhdr *eh = (struct ethhdr *)(skb->data);
664 u32 flowid;
665 ulong flags;
666
667 create = kzalloc(sizeof(*create), GFP_ATOMIC);
668 if (create == NULL)
669 return BRCMF_FLOWRING_INVALID_ID;
670
671 flowid = brcmf_flowring_create(msgbuf->flow, eh->h_dest,
672 skb->priority, ifidx);
673 if (flowid == BRCMF_FLOWRING_INVALID_ID) {
674 kfree(create);
675 return flowid;
676 }
677
678 create->flowid = flowid;
679 create->ifidx = ifidx;
680 memcpy(create->sa, eh->h_source, ETH_ALEN);
681 memcpy(create->da, eh->h_dest, ETH_ALEN);
682
683 spin_lock_irqsave(&msgbuf->flowring_work_lock, flags);
684 list_add_tail(&create->queue, &msgbuf->work_queue);
685 spin_unlock_irqrestore(&msgbuf->flowring_work_lock, flags);
686 schedule_work(&msgbuf->flowring_work);
687
688 return flowid;
689 }
690
691
692 static void brcmf_msgbuf_txflow(struct brcmf_msgbuf *msgbuf, u8 flowid)
693 {
694 struct brcmf_flowring *flow = msgbuf->flow;
695 struct brcmf_commonring *commonring;
696 void *ret_ptr;
697 u32 count;
698 struct sk_buff *skb;
699 dma_addr_t physaddr;
700 u32 pktid;
701 struct msgbuf_tx_msghdr *tx_msghdr;
702 u64 address;
703
704 commonring = msgbuf->flowrings[flowid];
705 if (!brcmf_commonring_write_available(commonring))
706 return;
707
708 brcmf_commonring_lock(commonring);
709
710 count = BRCMF_MSGBUF_TX_FLUSH_CNT2 - BRCMF_MSGBUF_TX_FLUSH_CNT1;
711 while (brcmf_flowring_qlen(flow, flowid)) {
712 skb = brcmf_flowring_dequeue(flow, flowid);
713 if (skb == NULL) {
714 brcmf_err("No SKB, but qlen %d\n",
715 brcmf_flowring_qlen(flow, flowid));
716 break;
717 }
718 skb_orphan(skb);
719 if (brcmf_msgbuf_alloc_pktid(msgbuf->drvr->bus_if->dev,
720 msgbuf->tx_pktids, skb, ETH_HLEN,
721 &physaddr, &pktid)) {
722 brcmf_flowring_reinsert(flow, flowid, skb);
723 brcmf_err("No PKTID available !!\n");
724 break;
725 }
726 ret_ptr = brcmf_commonring_reserve_for_write(commonring);
727 if (!ret_ptr) {
728 brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev,
729 msgbuf->tx_pktids, pktid);
730 brcmf_flowring_reinsert(flow, flowid, skb);
731 break;
732 }
733 count++;
734
735 tx_msghdr = (struct msgbuf_tx_msghdr *)ret_ptr;
736
737 tx_msghdr->msg.msgtype = MSGBUF_TYPE_TX_POST;
738 tx_msghdr->msg.request_id = cpu_to_le32(pktid);
739 tx_msghdr->msg.ifidx = brcmf_flowring_ifidx_get(flow, flowid);
740 tx_msghdr->flags = BRCMF_MSGBUF_PKT_FLAGS_FRAME_802_3;
741 tx_msghdr->flags |= (skb->priority & 0x07) <<
742 BRCMF_MSGBUF_PKT_FLAGS_PRIO_SHIFT;
743 tx_msghdr->seg_cnt = 1;
744 memcpy(tx_msghdr->txhdr, skb->data, ETH_HLEN);
745 tx_msghdr->data_len = cpu_to_le16(skb->len - ETH_HLEN);
746 address = (u64)physaddr;
747 tx_msghdr->data_buf_addr.high_addr = cpu_to_le32(address >> 32);
748 tx_msghdr->data_buf_addr.low_addr =
749 cpu_to_le32(address & 0xffffffff);
750 tx_msghdr->metadata_buf_len = 0;
751 tx_msghdr->metadata_buf_addr.high_addr = 0;
752 tx_msghdr->metadata_buf_addr.low_addr = 0;
753 atomic_inc(&commonring->outstanding_tx);
754 if (count >= BRCMF_MSGBUF_TX_FLUSH_CNT2) {
755 brcmf_commonring_write_complete(commonring);
756 count = 0;
757 }
758 }
759 if (count)
760 brcmf_commonring_write_complete(commonring);
761 brcmf_commonring_unlock(commonring);
762 }
763
764
765 static void brcmf_msgbuf_txflow_worker(struct work_struct *worker)
766 {
767 struct brcmf_msgbuf *msgbuf;
768 u32 flowid;
769
770 msgbuf = container_of(worker, struct brcmf_msgbuf, txflow_work);
771 for_each_set_bit(flowid, msgbuf->flow_map, msgbuf->nrof_flowrings) {
772 clear_bit(flowid, msgbuf->flow_map);
773 brcmf_msgbuf_txflow(msgbuf, flowid);
774 }
775 }
776
777
778 static int brcmf_msgbuf_schedule_txdata(struct brcmf_msgbuf *msgbuf, u32 flowid,
779 bool force)
780 {
781 struct brcmf_commonring *commonring;
782
783 set_bit(flowid, msgbuf->flow_map);
784 commonring = msgbuf->flowrings[flowid];
785 if ((force) || (atomic_read(&commonring->outstanding_tx) <
786 BRCMF_MSGBUF_DELAY_TXWORKER_THRS))
787 queue_work(msgbuf->txflow_wq, &msgbuf->txflow_work);
788
789 return 0;
790 }
791
792
793 static int brcmf_msgbuf_txdata(struct brcmf_pub *drvr, int ifidx,
794 u8 offset, struct sk_buff *skb)
795 {
796 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
797 struct brcmf_flowring *flow = msgbuf->flow;
798 struct ethhdr *eh = (struct ethhdr *)(skb->data);
799 u32 flowid;
800
801 flowid = brcmf_flowring_lookup(flow, eh->h_dest, skb->priority, ifidx);
802 if (flowid == BRCMF_FLOWRING_INVALID_ID) {
803 flowid = brcmf_msgbuf_flowring_create(msgbuf, ifidx, skb);
804 if (flowid == BRCMF_FLOWRING_INVALID_ID)
805 return -ENOMEM;
806 }
807 brcmf_flowring_enqueue(flow, flowid, skb);
808 brcmf_msgbuf_schedule_txdata(msgbuf, flowid, false);
809
810 return 0;
811 }
812
813
814 static void
815 brcmf_msgbuf_configure_addr_mode(struct brcmf_pub *drvr, int ifidx,
816 enum proto_addr_mode addr_mode)
817 {
818 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
819
820 brcmf_flowring_configure_addr_mode(msgbuf->flow, ifidx, addr_mode);
821 }
822
823
824 static void
825 brcmf_msgbuf_delete_peer(struct brcmf_pub *drvr, int ifidx, u8 peer[ETH_ALEN])
826 {
827 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
828
829 brcmf_flowring_delete_peer(msgbuf->flow, ifidx, peer);
830 }
831
832
833 static void
834 brcmf_msgbuf_add_tdls_peer(struct brcmf_pub *drvr, int ifidx, u8 peer[ETH_ALEN])
835 {
836 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
837
838 brcmf_flowring_add_tdls_peer(msgbuf->flow, ifidx, peer);
839 }
840
841
842 static void
843 brcmf_msgbuf_process_ioctl_complete(struct brcmf_msgbuf *msgbuf, void *buf)
844 {
845 struct msgbuf_ioctl_resp_hdr *ioctl_resp;
846
847 ioctl_resp = (struct msgbuf_ioctl_resp_hdr *)buf;
848
849 msgbuf->ioctl_resp_status =
850 (s16)le16_to_cpu(ioctl_resp->compl_hdr.status);
851 msgbuf->ioctl_resp_ret_len = le16_to_cpu(ioctl_resp->resp_len);
852 msgbuf->ioctl_resp_pktid = le32_to_cpu(ioctl_resp->msg.request_id);
853
854 brcmf_msgbuf_ioctl_resp_wake(msgbuf);
855
856 if (msgbuf->cur_ioctlrespbuf)
857 msgbuf->cur_ioctlrespbuf--;
858 brcmf_msgbuf_rxbuf_ioctlresp_post(msgbuf);
859 }
860
861
862 static void
863 brcmf_msgbuf_process_txstatus(struct brcmf_msgbuf *msgbuf, void *buf)
864 {
865 struct brcmf_commonring *commonring;
866 struct msgbuf_tx_status *tx_status;
867 u32 idx;
868 struct sk_buff *skb;
869 u16 flowid;
870
871 tx_status = (struct msgbuf_tx_status *)buf;
872 idx = le32_to_cpu(tx_status->msg.request_id);
873 flowid = le16_to_cpu(tx_status->compl_hdr.flow_ring_id);
874 flowid -= BRCMF_NROF_H2D_COMMON_MSGRINGS;
875 skb = brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev,
876 msgbuf->tx_pktids, idx);
877 if (!skb) {
878 brcmf_err("Invalid packet id idx recv'd %d\n", idx);
879 return;
880 }
881
882 set_bit(flowid, msgbuf->txstatus_done_map);
883 commonring = msgbuf->flowrings[flowid];
884 atomic_dec(&commonring->outstanding_tx);
885
886 brcmf_txfinalize(msgbuf->drvr, skb, tx_status->msg.ifidx, true);
887 }
888
889
890 static u32 brcmf_msgbuf_rxbuf_data_post(struct brcmf_msgbuf *msgbuf, u32 count)
891 {
892 struct brcmf_commonring *commonring;
893 void *ret_ptr;
894 struct sk_buff *skb;
895 u16 alloced;
896 u32 pktlen;
897 dma_addr_t physaddr;
898 struct msgbuf_rx_bufpost *rx_bufpost;
899 u64 address;
900 u32 pktid;
901 u32 i;
902
903 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_RXPOST_SUBMIT];
904 ret_ptr = brcmf_commonring_reserve_for_write_multiple(commonring,
905 count,
906 &alloced);
907 if (!ret_ptr) {
908 brcmf_dbg(MSGBUF, "Failed to reserve space in commonring\n");
909 return 0;
910 }
911
912 for (i = 0; i < alloced; i++) {
913 rx_bufpost = (struct msgbuf_rx_bufpost *)ret_ptr;
914 memset(rx_bufpost, 0, sizeof(*rx_bufpost));
915
916 skb = brcmu_pkt_buf_get_skb(BRCMF_MSGBUF_MAX_PKT_SIZE);
917
918 if (skb == NULL) {
919 brcmf_err("Failed to alloc SKB\n");
920 brcmf_commonring_write_cancel(commonring, alloced - i);
921 break;
922 }
923
924 pktlen = skb->len;
925 if (brcmf_msgbuf_alloc_pktid(msgbuf->drvr->bus_if->dev,
926 msgbuf->rx_pktids, skb, 0,
927 &physaddr, &pktid)) {
928 dev_kfree_skb_any(skb);
929 brcmf_err("No PKTID available !!\n");
930 brcmf_commonring_write_cancel(commonring, alloced - i);
931 break;
932 }
933
934 if (msgbuf->rx_metadata_offset) {
935 address = (u64)physaddr;
936 rx_bufpost->metadata_buf_len =
937 cpu_to_le16(msgbuf->rx_metadata_offset);
938 rx_bufpost->metadata_buf_addr.high_addr =
939 cpu_to_le32(address >> 32);
940 rx_bufpost->metadata_buf_addr.low_addr =
941 cpu_to_le32(address & 0xffffffff);
942
943 skb_pull(skb, msgbuf->rx_metadata_offset);
944 pktlen = skb->len;
945 physaddr += msgbuf->rx_metadata_offset;
946 }
947 rx_bufpost->msg.msgtype = MSGBUF_TYPE_RXBUF_POST;
948 rx_bufpost->msg.request_id = cpu_to_le32(pktid);
949
950 address = (u64)physaddr;
951 rx_bufpost->data_buf_len = cpu_to_le16((u16)pktlen);
952 rx_bufpost->data_buf_addr.high_addr =
953 cpu_to_le32(address >> 32);
954 rx_bufpost->data_buf_addr.low_addr =
955 cpu_to_le32(address & 0xffffffff);
956
957 ret_ptr += brcmf_commonring_len_item(commonring);
958 }
959
960 if (i)
961 brcmf_commonring_write_complete(commonring);
962
963 return i;
964 }
965
966
967 static void
968 brcmf_msgbuf_rxbuf_data_fill(struct brcmf_msgbuf *msgbuf)
969 {
970 u32 fillbufs;
971 u32 retcount;
972
973 fillbufs = msgbuf->max_rxbufpost - msgbuf->rxbufpost;
974
975 while (fillbufs) {
976 retcount = brcmf_msgbuf_rxbuf_data_post(msgbuf, fillbufs);
977 if (!retcount)
978 break;
979 msgbuf->rxbufpost += retcount;
980 fillbufs -= retcount;
981 }
982 }
983
984
985 static void
986 brcmf_msgbuf_update_rxbufpost_count(struct brcmf_msgbuf *msgbuf, u16 rxcnt)
987 {
988 msgbuf->rxbufpost -= rxcnt;
989 if (msgbuf->rxbufpost <= (msgbuf->max_rxbufpost -
990 BRCMF_MSGBUF_RXBUFPOST_THRESHOLD))
991 brcmf_msgbuf_rxbuf_data_fill(msgbuf);
992 }
993
994
995 static u32
996 brcmf_msgbuf_rxbuf_ctrl_post(struct brcmf_msgbuf *msgbuf, bool event_buf,
997 u32 count)
998 {
999 struct brcmf_commonring *commonring;
1000 void *ret_ptr;
1001 struct sk_buff *skb;
1002 u16 alloced;
1003 u32 pktlen;
1004 dma_addr_t physaddr;
1005 struct msgbuf_rx_ioctl_resp_or_event *rx_bufpost;
1006 u64 address;
1007 u32 pktid;
1008 u32 i;
1009
1010 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_CONTROL_SUBMIT];
1011 brcmf_commonring_lock(commonring);
1012 ret_ptr = brcmf_commonring_reserve_for_write_multiple(commonring,
1013 count,
1014 &alloced);
1015 if (!ret_ptr) {
1016 brcmf_err("Failed to reserve space in commonring\n");
1017 brcmf_commonring_unlock(commonring);
1018 return 0;
1019 }
1020
1021 for (i = 0; i < alloced; i++) {
1022 rx_bufpost = (struct msgbuf_rx_ioctl_resp_or_event *)ret_ptr;
1023 memset(rx_bufpost, 0, sizeof(*rx_bufpost));
1024
1025 skb = brcmu_pkt_buf_get_skb(BRCMF_MSGBUF_MAX_PKT_SIZE);
1026
1027 if (skb == NULL) {
1028 brcmf_err("Failed to alloc SKB\n");
1029 brcmf_commonring_write_cancel(commonring, alloced - i);
1030 break;
1031 }
1032
1033 pktlen = skb->len;
1034 if (brcmf_msgbuf_alloc_pktid(msgbuf->drvr->bus_if->dev,
1035 msgbuf->rx_pktids, skb, 0,
1036 &physaddr, &pktid)) {
1037 dev_kfree_skb_any(skb);
1038 brcmf_err("No PKTID available !!\n");
1039 brcmf_commonring_write_cancel(commonring, alloced - i);
1040 break;
1041 }
1042 if (event_buf)
1043 rx_bufpost->msg.msgtype = MSGBUF_TYPE_EVENT_BUF_POST;
1044 else
1045 rx_bufpost->msg.msgtype =
1046 MSGBUF_TYPE_IOCTLRESP_BUF_POST;
1047 rx_bufpost->msg.request_id = cpu_to_le32(pktid);
1048
1049 address = (u64)physaddr;
1050 rx_bufpost->host_buf_len = cpu_to_le16((u16)pktlen);
1051 rx_bufpost->host_buf_addr.high_addr =
1052 cpu_to_le32(address >> 32);
1053 rx_bufpost->host_buf_addr.low_addr =
1054 cpu_to_le32(address & 0xffffffff);
1055
1056 ret_ptr += brcmf_commonring_len_item(commonring);
1057 }
1058
1059 if (i)
1060 brcmf_commonring_write_complete(commonring);
1061
1062 brcmf_commonring_unlock(commonring);
1063
1064 return i;
1065 }
1066
1067
1068 static void brcmf_msgbuf_rxbuf_ioctlresp_post(struct brcmf_msgbuf *msgbuf)
1069 {
1070 u32 count;
1071
1072 count = msgbuf->max_ioctlrespbuf - msgbuf->cur_ioctlrespbuf;
1073 count = brcmf_msgbuf_rxbuf_ctrl_post(msgbuf, false, count);
1074 msgbuf->cur_ioctlrespbuf += count;
1075 }
1076
1077
1078 static void brcmf_msgbuf_rxbuf_event_post(struct brcmf_msgbuf *msgbuf)
1079 {
1080 u32 count;
1081
1082 count = msgbuf->max_eventbuf - msgbuf->cur_eventbuf;
1083 count = brcmf_msgbuf_rxbuf_ctrl_post(msgbuf, true, count);
1084 msgbuf->cur_eventbuf += count;
1085 }
1086
1087
1088 static void
1089 brcmf_msgbuf_rx_skb(struct brcmf_msgbuf *msgbuf, struct sk_buff *skb,
1090 u8 ifidx)
1091 {
1092 struct brcmf_if *ifp;
1093
1094 /* The ifidx is the idx to map to matching netdev/ifp. When receiving
1095 * events this is easy because it contains the bssidx which maps
1096 * 1-on-1 to the netdev/ifp. But for data frames the ifidx is rcvd.
1097 * bssidx 1 is used for p2p0 and no data can be received or
1098 * transmitted on it. Therefor bssidx is ifidx + 1 if ifidx > 0
1099 */
1100 if (ifidx)
1101 (ifidx)++;
1102 ifp = msgbuf->drvr->iflist[ifidx];
1103 if (!ifp || !ifp->ndev) {
1104 brcmf_err("Received pkt for invalid ifidx %d\n", ifidx);
1105 brcmu_pkt_buf_free_skb(skb);
1106 return;
1107 }
1108 brcmf_netif_rx(ifp, skb);
1109 }
1110
1111
1112 static void brcmf_msgbuf_process_event(struct brcmf_msgbuf *msgbuf, void *buf)
1113 {
1114 struct msgbuf_rx_event *event;
1115 u32 idx;
1116 u16 buflen;
1117 struct sk_buff *skb;
1118
1119 event = (struct msgbuf_rx_event *)buf;
1120 idx = le32_to_cpu(event->msg.request_id);
1121 buflen = le16_to_cpu(event->event_data_len);
1122
1123 if (msgbuf->cur_eventbuf)
1124 msgbuf->cur_eventbuf--;
1125 brcmf_msgbuf_rxbuf_event_post(msgbuf);
1126
1127 skb = brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev,
1128 msgbuf->rx_pktids, idx);
1129 if (!skb)
1130 return;
1131
1132 if (msgbuf->rx_dataoffset)
1133 skb_pull(skb, msgbuf->rx_dataoffset);
1134
1135 skb_trim(skb, buflen);
1136
1137 brcmf_msgbuf_rx_skb(msgbuf, skb, event->msg.ifidx);
1138 }
1139
1140
1141 static void
1142 brcmf_msgbuf_process_rx_complete(struct brcmf_msgbuf *msgbuf, void *buf)
1143 {
1144 struct msgbuf_rx_complete *rx_complete;
1145 struct sk_buff *skb;
1146 u16 data_offset;
1147 u16 buflen;
1148 u32 idx;
1149
1150 brcmf_msgbuf_update_rxbufpost_count(msgbuf, 1);
1151
1152 rx_complete = (struct msgbuf_rx_complete *)buf;
1153 data_offset = le16_to_cpu(rx_complete->data_offset);
1154 buflen = le16_to_cpu(rx_complete->data_len);
1155 idx = le32_to_cpu(rx_complete->msg.request_id);
1156
1157 skb = brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev,
1158 msgbuf->rx_pktids, idx);
1159
1160 if (data_offset)
1161 skb_pull(skb, data_offset);
1162 else if (msgbuf->rx_dataoffset)
1163 skb_pull(skb, msgbuf->rx_dataoffset);
1164
1165 skb_trim(skb, buflen);
1166
1167 brcmf_msgbuf_rx_skb(msgbuf, skb, rx_complete->msg.ifidx);
1168 }
1169
1170
1171 static void
1172 brcmf_msgbuf_process_flow_ring_create_response(struct brcmf_msgbuf *msgbuf,
1173 void *buf)
1174 {
1175 struct msgbuf_flowring_create_resp *flowring_create_resp;
1176 u16 status;
1177 u16 flowid;
1178
1179 flowring_create_resp = (struct msgbuf_flowring_create_resp *)buf;
1180
1181 flowid = le16_to_cpu(flowring_create_resp->compl_hdr.flow_ring_id);
1182 flowid -= BRCMF_NROF_H2D_COMMON_MSGRINGS;
1183 status = le16_to_cpu(flowring_create_resp->compl_hdr.status);
1184
1185 if (status) {
1186 brcmf_err("Flowring creation failed, code %d\n", status);
1187 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
1188 return;
1189 }
1190 brcmf_dbg(MSGBUF, "Flowring %d Create response status %d\n", flowid,
1191 status);
1192
1193 brcmf_flowring_open(msgbuf->flow, flowid);
1194
1195 brcmf_msgbuf_schedule_txdata(msgbuf, flowid, true);
1196 }
1197
1198
1199 static void
1200 brcmf_msgbuf_process_flow_ring_delete_response(struct brcmf_msgbuf *msgbuf,
1201 void *buf)
1202 {
1203 struct msgbuf_flowring_delete_resp *flowring_delete_resp;
1204 u16 status;
1205 u16 flowid;
1206
1207 flowring_delete_resp = (struct msgbuf_flowring_delete_resp *)buf;
1208
1209 flowid = le16_to_cpu(flowring_delete_resp->compl_hdr.flow_ring_id);
1210 flowid -= BRCMF_NROF_H2D_COMMON_MSGRINGS;
1211 status = le16_to_cpu(flowring_delete_resp->compl_hdr.status);
1212
1213 if (status) {
1214 brcmf_err("Flowring deletion failed, code %d\n", status);
1215 brcmf_flowring_delete(msgbuf->flow, flowid);
1216 return;
1217 }
1218 brcmf_dbg(MSGBUF, "Flowring %d Delete response status %d\n", flowid,
1219 status);
1220
1221 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
1222 }
1223
1224
1225 static void brcmf_msgbuf_process_msgtype(struct brcmf_msgbuf *msgbuf, void *buf)
1226 {
1227 struct msgbuf_common_hdr *msg;
1228
1229 msg = (struct msgbuf_common_hdr *)buf;
1230 switch (msg->msgtype) {
1231 case MSGBUF_TYPE_FLOW_RING_CREATE_CMPLT:
1232 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_FLOW_RING_CREATE_CMPLT\n");
1233 brcmf_msgbuf_process_flow_ring_create_response(msgbuf, buf);
1234 break;
1235 case MSGBUF_TYPE_FLOW_RING_DELETE_CMPLT:
1236 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_FLOW_RING_DELETE_CMPLT\n");
1237 brcmf_msgbuf_process_flow_ring_delete_response(msgbuf, buf);
1238 break;
1239 case MSGBUF_TYPE_IOCTLPTR_REQ_ACK:
1240 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_IOCTLPTR_REQ_ACK\n");
1241 break;
1242 case MSGBUF_TYPE_IOCTL_CMPLT:
1243 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_IOCTL_CMPLT\n");
1244 brcmf_msgbuf_process_ioctl_complete(msgbuf, buf);
1245 break;
1246 case MSGBUF_TYPE_WL_EVENT:
1247 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_WL_EVENT\n");
1248 brcmf_msgbuf_process_event(msgbuf, buf);
1249 break;
1250 case MSGBUF_TYPE_TX_STATUS:
1251 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_TX_STATUS\n");
1252 brcmf_msgbuf_process_txstatus(msgbuf, buf);
1253 break;
1254 case MSGBUF_TYPE_RX_CMPLT:
1255 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_RX_CMPLT\n");
1256 brcmf_msgbuf_process_rx_complete(msgbuf, buf);
1257 break;
1258 default:
1259 brcmf_err("Unsupported msgtype %d\n", msg->msgtype);
1260 break;
1261 }
1262 }
1263
1264
1265 static void brcmf_msgbuf_process_rx(struct brcmf_msgbuf *msgbuf,
1266 struct brcmf_commonring *commonring)
1267 {
1268 void *buf;
1269 u16 count;
1270
1271 again:
1272 buf = brcmf_commonring_get_read_ptr(commonring, &count);
1273 if (buf == NULL)
1274 return;
1275
1276 while (count) {
1277 brcmf_msgbuf_process_msgtype(msgbuf,
1278 buf + msgbuf->rx_dataoffset);
1279 buf += brcmf_commonring_len_item(commonring);
1280 count--;
1281 }
1282 brcmf_commonring_read_complete(commonring);
1283
1284 if (commonring->r_ptr == 0)
1285 goto again;
1286 }
1287
1288
1289 int brcmf_proto_msgbuf_rx_trigger(struct device *dev)
1290 {
1291 struct brcmf_bus *bus_if = dev_get_drvdata(dev);
1292 struct brcmf_pub *drvr = bus_if->drvr;
1293 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
1294 struct brcmf_commonring *commonring;
1295 void *buf;
1296 u32 flowid;
1297 int qlen;
1298
1299 buf = msgbuf->commonrings[BRCMF_D2H_MSGRING_RX_COMPLETE];
1300 brcmf_msgbuf_process_rx(msgbuf, buf);
1301 buf = msgbuf->commonrings[BRCMF_D2H_MSGRING_TX_COMPLETE];
1302 brcmf_msgbuf_process_rx(msgbuf, buf);
1303 buf = msgbuf->commonrings[BRCMF_D2H_MSGRING_CONTROL_COMPLETE];
1304 brcmf_msgbuf_process_rx(msgbuf, buf);
1305
1306 for_each_set_bit(flowid, msgbuf->txstatus_done_map,
1307 msgbuf->nrof_flowrings) {
1308 clear_bit(flowid, msgbuf->txstatus_done_map);
1309 commonring = msgbuf->flowrings[flowid];
1310 qlen = brcmf_flowring_qlen(msgbuf->flow, flowid);
1311 if ((qlen > BRCMF_MSGBUF_TRICKLE_TXWORKER_THRS) ||
1312 ((qlen) && (atomic_read(&commonring->outstanding_tx) <
1313 BRCMF_MSGBUF_TRICKLE_TXWORKER_THRS)))
1314 brcmf_msgbuf_schedule_txdata(msgbuf, flowid, true);
1315 }
1316
1317 return 0;
1318 }
1319
1320
1321 void brcmf_msgbuf_delete_flowring(struct brcmf_pub *drvr, u8 flowid)
1322 {
1323 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
1324 struct msgbuf_tx_flowring_delete_req *delete;
1325 struct brcmf_commonring *commonring;
1326 void *ret_ptr;
1327 u8 ifidx;
1328 int err;
1329
1330 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_CONTROL_SUBMIT];
1331 brcmf_commonring_lock(commonring);
1332 ret_ptr = brcmf_commonring_reserve_for_write(commonring);
1333 if (!ret_ptr) {
1334 brcmf_err("FW unaware, flowring will be removed !!\n");
1335 brcmf_commonring_unlock(commonring);
1336 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
1337 return;
1338 }
1339
1340 delete = (struct msgbuf_tx_flowring_delete_req *)ret_ptr;
1341
1342 ifidx = brcmf_flowring_ifidx_get(msgbuf->flow, flowid);
1343
1344 delete->msg.msgtype = MSGBUF_TYPE_FLOW_RING_DELETE;
1345 delete->msg.ifidx = ifidx;
1346 delete->msg.request_id = 0;
1347
1348 delete->flow_ring_id = cpu_to_le16(flowid +
1349 BRCMF_NROF_H2D_COMMON_MSGRINGS);
1350 delete->reason = 0;
1351
1352 brcmf_dbg(MSGBUF, "Send Flow Delete Req flow ID %d, ifindex %d\n",
1353 flowid, ifidx);
1354
1355 err = brcmf_commonring_write_complete(commonring);
1356 brcmf_commonring_unlock(commonring);
1357 if (err) {
1358 brcmf_err("Failed to submit RING_DELETE, flowring will be removed\n");
1359 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
1360 }
1361 }
1362
1363
1364 int brcmf_proto_msgbuf_attach(struct brcmf_pub *drvr)
1365 {
1366 struct brcmf_bus_msgbuf *if_msgbuf;
1367 struct brcmf_msgbuf *msgbuf;
1368 u64 address;
1369 u32 count;
1370
1371 if_msgbuf = drvr->bus_if->msgbuf;
1372 msgbuf = kzalloc(sizeof(*msgbuf), GFP_KERNEL);
1373 if (!msgbuf)
1374 goto fail;
1375
1376 msgbuf->txflow_wq = create_singlethread_workqueue("msgbuf_txflow");
1377 if (msgbuf->txflow_wq == NULL) {
1378 brcmf_err("workqueue creation failed\n");
1379 goto fail;
1380 }
1381 INIT_WORK(&msgbuf->txflow_work, brcmf_msgbuf_txflow_worker);
1382 count = BITS_TO_LONGS(if_msgbuf->nrof_flowrings);
1383 count = count * sizeof(unsigned long);
1384 msgbuf->flow_map = kzalloc(count, GFP_KERNEL);
1385 if (!msgbuf->flow_map)
1386 goto fail;
1387
1388 msgbuf->txstatus_done_map = kzalloc(count, GFP_KERNEL);
1389 if (!msgbuf->txstatus_done_map)
1390 goto fail;
1391
1392 msgbuf->drvr = drvr;
1393 msgbuf->ioctbuf = dma_alloc_coherent(drvr->bus_if->dev,
1394 BRCMF_TX_IOCTL_MAX_MSG_SIZE,
1395 &msgbuf->ioctbuf_handle,
1396 GFP_KERNEL);
1397 if (!msgbuf->ioctbuf)
1398 goto fail;
1399 address = (u64)msgbuf->ioctbuf_handle;
1400 msgbuf->ioctbuf_phys_hi = address >> 32;
1401 msgbuf->ioctbuf_phys_lo = address & 0xffffffff;
1402
1403 drvr->proto->hdrpull = brcmf_msgbuf_hdrpull;
1404 drvr->proto->query_dcmd = brcmf_msgbuf_query_dcmd;
1405 drvr->proto->set_dcmd = brcmf_msgbuf_set_dcmd;
1406 drvr->proto->txdata = brcmf_msgbuf_txdata;
1407 drvr->proto->configure_addr_mode = brcmf_msgbuf_configure_addr_mode;
1408 drvr->proto->delete_peer = brcmf_msgbuf_delete_peer;
1409 drvr->proto->add_tdls_peer = brcmf_msgbuf_add_tdls_peer;
1410 drvr->proto->pd = msgbuf;
1411
1412 init_waitqueue_head(&msgbuf->ioctl_resp_wait);
1413
1414 msgbuf->commonrings =
1415 (struct brcmf_commonring **)if_msgbuf->commonrings;
1416 msgbuf->flowrings = (struct brcmf_commonring **)if_msgbuf->flowrings;
1417 msgbuf->nrof_flowrings = if_msgbuf->nrof_flowrings;
1418 msgbuf->flowring_dma_handle = kzalloc(msgbuf->nrof_flowrings *
1419 sizeof(*msgbuf->flowring_dma_handle), GFP_KERNEL);
1420 if (!msgbuf->flowring_dma_handle)
1421 goto fail;
1422
1423 msgbuf->rx_dataoffset = if_msgbuf->rx_dataoffset;
1424 msgbuf->max_rxbufpost = if_msgbuf->max_rxbufpost;
1425
1426 msgbuf->max_ioctlrespbuf = BRCMF_MSGBUF_MAX_IOCTLRESPBUF_POST;
1427 msgbuf->max_eventbuf = BRCMF_MSGBUF_MAX_EVENTBUF_POST;
1428
1429 msgbuf->tx_pktids = brcmf_msgbuf_init_pktids(NR_TX_PKTIDS,
1430 DMA_TO_DEVICE);
1431 if (!msgbuf->tx_pktids)
1432 goto fail;
1433 msgbuf->rx_pktids = brcmf_msgbuf_init_pktids(NR_RX_PKTIDS,
1434 DMA_FROM_DEVICE);
1435 if (!msgbuf->rx_pktids)
1436 goto fail;
1437
1438 msgbuf->flow = brcmf_flowring_attach(drvr->bus_if->dev,
1439 if_msgbuf->nrof_flowrings);
1440 if (!msgbuf->flow)
1441 goto fail;
1442
1443
1444 brcmf_dbg(MSGBUF, "Feeding buffers, rx data %d, rx event %d, rx ioctl resp %d\n",
1445 msgbuf->max_rxbufpost, msgbuf->max_eventbuf,
1446 msgbuf->max_ioctlrespbuf);
1447 count = 0;
1448 do {
1449 brcmf_msgbuf_rxbuf_data_fill(msgbuf);
1450 if (msgbuf->max_rxbufpost != msgbuf->rxbufpost)
1451 msleep(10);
1452 else
1453 break;
1454 count++;
1455 } while (count < 10);
1456 brcmf_msgbuf_rxbuf_event_post(msgbuf);
1457 brcmf_msgbuf_rxbuf_ioctlresp_post(msgbuf);
1458
1459 INIT_WORK(&msgbuf->flowring_work, brcmf_msgbuf_flowring_worker);
1460 spin_lock_init(&msgbuf->flowring_work_lock);
1461 INIT_LIST_HEAD(&msgbuf->work_queue);
1462
1463 return 0;
1464
1465 fail:
1466 if (msgbuf) {
1467 kfree(msgbuf->flow_map);
1468 kfree(msgbuf->txstatus_done_map);
1469 brcmf_msgbuf_release_pktids(msgbuf);
1470 kfree(msgbuf->flowring_dma_handle);
1471 if (msgbuf->ioctbuf)
1472 dma_free_coherent(drvr->bus_if->dev,
1473 BRCMF_TX_IOCTL_MAX_MSG_SIZE,
1474 msgbuf->ioctbuf,
1475 msgbuf->ioctbuf_handle);
1476 kfree(msgbuf);
1477 }
1478 return -ENOMEM;
1479 }
1480
1481
1482 void brcmf_proto_msgbuf_detach(struct brcmf_pub *drvr)
1483 {
1484 struct brcmf_msgbuf *msgbuf;
1485 struct brcmf_msgbuf_work_item *work;
1486
1487 brcmf_dbg(TRACE, "Enter\n");
1488 if (drvr->proto->pd) {
1489 msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
1490 cancel_work_sync(&msgbuf->flowring_work);
1491 while (!list_empty(&msgbuf->work_queue)) {
1492 work = list_first_entry(&msgbuf->work_queue,
1493 struct brcmf_msgbuf_work_item,
1494 queue);
1495 list_del(&work->queue);
1496 kfree(work);
1497 }
1498 kfree(msgbuf->flow_map);
1499 kfree(msgbuf->txstatus_done_map);
1500 if (msgbuf->txflow_wq)
1501 destroy_workqueue(msgbuf->txflow_wq);
1502
1503 brcmf_flowring_detach(msgbuf->flow);
1504 dma_free_coherent(drvr->bus_if->dev,
1505 BRCMF_TX_IOCTL_MAX_MSG_SIZE,
1506 msgbuf->ioctbuf, msgbuf->ioctbuf_handle);
1507 brcmf_msgbuf_release_pktids(msgbuf);
1508 kfree(msgbuf->flowring_dma_handle);
1509 kfree(msgbuf);
1510 drvr->proto->pd = NULL;
1511 }
1512 }
Linux kernel - Deliverables
This page took 0.08153 seconds and 5 git commands to generate.