2 * Copyright (c) 2010 Broadcom Corporation
4 * Permission to use, copy, modify, and/or distribute this software for any
5 * purpose with or without fee is hereby granted, provided that the above
6 * copyright notice and this permission notice appear in all copies.
8 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
11 * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
13 * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
14 * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
16 #include <linux/types.h>
17 #include <linux/module.h>
18 #include <linux/if_ether.h>
19 #include <linux/spinlock.h>
20 #include <linux/skbuff.h>
21 #include <linux/netdevice.h>
22 #include <linux/etherdevice.h>
23 #include <linux/err.h>
24 #include <linux/jiffies.h>
25 #include <net/cfg80211.h>
27 #include <brcmu_utils.h>
28 #include <brcmu_wifi.h>
30 #include "dhd_proto.h"
34 #include "fwil_types.h"
38 #include "wl_cfg80211.h"
41 * DOC: Firmware Signalling
43 * Firmware can send signals to host and vice versa, which are passed in the
44 * data packets using TLV based header. This signalling layer is on top of the
45 * BDC bus protocol layer.
49 * single definition for firmware-driver flow control tlv's.
51 * each tlv is specified by BRCMF_FWS_TLV_DEF(name, ID, length).
52 * A length value 0 indicates variable length tlv.
54 #define BRCMF_FWS_TLV_DEFLIST \
55 BRCMF_FWS_TLV_DEF(MAC_OPEN, 1, 1) \
56 BRCMF_FWS_TLV_DEF(MAC_CLOSE, 2, 1) \
57 BRCMF_FWS_TLV_DEF(MAC_REQUEST_CREDIT, 3, 2) \
58 BRCMF_FWS_TLV_DEF(TXSTATUS, 4, 4) \
59 BRCMF_FWS_TLV_DEF(PKTTAG, 5, 4) \
60 BRCMF_FWS_TLV_DEF(MACDESC_ADD, 6, 8) \
61 BRCMF_FWS_TLV_DEF(MACDESC_DEL, 7, 8) \
62 BRCMF_FWS_TLV_DEF(RSSI, 8, 1) \
63 BRCMF_FWS_TLV_DEF(INTERFACE_OPEN, 9, 1) \
64 BRCMF_FWS_TLV_DEF(INTERFACE_CLOSE, 10, 1) \
65 BRCMF_FWS_TLV_DEF(FIFO_CREDITBACK, 11, 6) \
66 BRCMF_FWS_TLV_DEF(PENDING_TRAFFIC_BMP, 12, 2) \
67 BRCMF_FWS_TLV_DEF(MAC_REQUEST_PACKET, 13, 3) \
68 BRCMF_FWS_TLV_DEF(HOST_REORDER_RXPKTS, 14, 10) \
69 BRCMF_FWS_TLV_DEF(TRANS_ID, 18, 6) \
70 BRCMF_FWS_TLV_DEF(COMP_TXSTATUS, 19, 1) \
71 BRCMF_FWS_TLV_DEF(FILLER, 255, 0)
74 * enum brcmf_fws_tlv_type - definition of tlv identifiers.
76 #define BRCMF_FWS_TLV_DEF(name, id, len) \
77 BRCMF_FWS_TYPE_ ## name = id,
78 enum brcmf_fws_tlv_type {
80 BRCMF_FWS_TYPE_INVALID
82 #undef BRCMF_FWS_TLV_DEF
85 * enum brcmf_fws_tlv_len - definition of tlv lengths.
87 #define BRCMF_FWS_TLV_DEF(name, id, len) \
88 BRCMF_FWS_TYPE_ ## name ## _LEN = (len),
89 enum brcmf_fws_tlv_len {
92 #undef BRCMF_FWS_TLV_DEF
96 * brcmf_fws_tlv_names - array of tlv names.
98 #define BRCMF_FWS_TLV_DEF(name, id, len) \
101 enum brcmf_fws_tlv_type id;
103 } brcmf_fws_tlv_names[] = {
104 BRCMF_FWS_TLV_DEFLIST
106 #undef BRCMF_FWS_TLV_DEF
108 static const char *brcmf_fws_get_tlv_name(enum brcmf_fws_tlv_type id)
112 for (i = 0; i < ARRAY_SIZE(brcmf_fws_tlv_names); i++)
113 if (brcmf_fws_tlv_names[i].id == id)
114 return brcmf_fws_tlv_names[i].name;
119 static const char *brcmf_fws_get_tlv_name(enum brcmf_fws_tlv_type id)
126 * flags used to enable tlv signalling from firmware.
128 #define BRCMF_FWS_FLAGS_RSSI_SIGNALS 0x0001
129 #define BRCMF_FWS_FLAGS_XONXOFF_SIGNALS 0x0002
130 #define BRCMF_FWS_FLAGS_CREDIT_STATUS_SIGNALS 0x0004
131 #define BRCMF_FWS_FLAGS_HOST_PROPTXSTATUS_ACTIVE 0x0008
132 #define BRCMF_FWS_FLAGS_PSQ_GENERATIONFSM_ENABLE 0x0010
133 #define BRCMF_FWS_FLAGS_PSQ_ZERO_BUFFER_ENABLE 0x0020
134 #define BRCMF_FWS_FLAGS_HOST_RXREORDER_ACTIVE 0x0040
136 #define BRCMF_FWS_MAC_DESC_TABLE_SIZE 32
137 #define BRCMF_FWS_MAC_DESC_ID_INVALID 0xff
139 #define BRCMF_FWS_HOSTIF_FLOWSTATE_OFF 0
140 #define BRCMF_FWS_HOSTIF_FLOWSTATE_ON 1
141 #define BRCMF_FWS_FLOWCONTROL_HIWATER 128
142 #define BRCMF_FWS_FLOWCONTROL_LOWATER 64
144 #define BRCMF_FWS_PSQ_PREC_COUNT ((BRCMF_FWS_FIFO_COUNT + 1) * 2)
145 #define BRCMF_FWS_PSQ_LEN 256
147 #define BRCMF_FWS_HTOD_FLAG_PKTFROMHOST 0x01
148 #define BRCMF_FWS_HTOD_FLAG_PKT_REQUESTED 0x02
150 #define BRCMF_FWS_RET_OK_NOSCHEDULE 0
151 #define BRCMF_FWS_RET_OK_SCHEDULE 1
154 * enum brcmf_fws_skb_state - indicates processing state of skb.
156 * @BRCMF_FWS_SKBSTATE_NEW: sk_buff is newly arrived in the driver.
157 * @BRCMF_FWS_SKBSTATE_DELAYED: sk_buff had to wait on queue.
158 * @BRCMF_FWS_SKBSTATE_SUPPRESSED: sk_buff has been suppressed by firmware.
159 * @BRCMF_FWS_SKBSTATE_TIM: allocated for TIM update info.
161 enum brcmf_fws_skb_state {
162 BRCMF_FWS_SKBSTATE_NEW,
163 BRCMF_FWS_SKBSTATE_DELAYED,
164 BRCMF_FWS_SKBSTATE_SUPPRESSED,
165 BRCMF_FWS_SKBSTATE_TIM
169 * struct brcmf_skbuff_cb - control buffer associated with skbuff.
171 * @if_flags: holds interface index and packet related flags.
172 * @htod: host to device packet identifier (used in PKTTAG tlv).
173 * @state: transmit state of the packet.
174 * @mac: descriptor related to destination for this packet.
176 * This information is stored in control buffer struct sk_buff::cb, which
177 * provides 48 bytes of storage so this structure should not exceed that.
179 struct brcmf_skbuff_cb {
182 enum brcmf_fws_skb_state state;
183 struct brcmf_fws_mac_descriptor *mac;
187 * macro casting skbuff control buffer to struct brcmf_skbuff_cb.
189 #define brcmf_skbcb(skb) ((struct brcmf_skbuff_cb *)((skb)->cb))
192 * sk_buff control if flags
194 * b[11] - packet sent upon firmware request.
195 * b[10] - packet only contains signalling data.
196 * b[9] - packet is a tx packet.
197 * b[8] - packet used requested credit
198 * b[7] - interface in AP mode.
199 * b[3:0] - interface index.
201 #define BRCMF_SKB_IF_FLAGS_REQUESTED_MASK 0x0800
202 #define BRCMF_SKB_IF_FLAGS_REQUESTED_SHIFT 11
203 #define BRCMF_SKB_IF_FLAGS_SIGNAL_ONLY_MASK 0x0400
204 #define BRCMF_SKB_IF_FLAGS_SIGNAL_ONLY_SHIFT 10
205 #define BRCMF_SKB_IF_FLAGS_TRANSMIT_MASK 0x0200
206 #define BRCMF_SKB_IF_FLAGS_TRANSMIT_SHIFT 9
207 #define BRCMF_SKB_IF_FLAGS_REQ_CREDIT_MASK 0x0100
208 #define BRCMF_SKB_IF_FLAGS_REQ_CREDIT_SHIFT 8
209 #define BRCMF_SKB_IF_FLAGS_IF_AP_MASK 0x0080
210 #define BRCMF_SKB_IF_FLAGS_IF_AP_SHIFT 7
211 #define BRCMF_SKB_IF_FLAGS_INDEX_MASK 0x000f
212 #define BRCMF_SKB_IF_FLAGS_INDEX_SHIFT 0
214 #define brcmf_skb_if_flags_set_field(skb, field, value) \
215 brcmu_maskset16(&(brcmf_skbcb(skb)->if_flags), \
216 BRCMF_SKB_IF_FLAGS_ ## field ## _MASK, \
217 BRCMF_SKB_IF_FLAGS_ ## field ## _SHIFT, (value))
218 #define brcmf_skb_if_flags_get_field(skb, field) \
219 brcmu_maskget16(brcmf_skbcb(skb)->if_flags, \
220 BRCMF_SKB_IF_FLAGS_ ## field ## _MASK, \
221 BRCMF_SKB_IF_FLAGS_ ## field ## _SHIFT)
224 * sk_buff control packet identifier
226 * 32-bit packet identifier used in PKTTAG tlv from host to dongle.
228 * - Generated at the host (e.g. dhd)
229 * - Seen as a generic sequence number by firmware except for the flags field.
231 * Generation : b[31] => generation number for this packet [host->fw]
232 * OR, current generation number [fw->host]
233 * Flags : b[30:27] => command, status flags
234 * FIFO-AC : b[26:24] => AC-FIFO id
235 * h-slot : b[23:8] => hanger-slot
236 * freerun : b[7:0] => A free running counter
238 #define BRCMF_SKB_HTOD_TAG_GENERATION_MASK 0x80000000
239 #define BRCMF_SKB_HTOD_TAG_GENERATION_SHIFT 31
240 #define BRCMF_SKB_HTOD_TAG_FLAGS_MASK 0x78000000
241 #define BRCMF_SKB_HTOD_TAG_FLAGS_SHIFT 27
242 #define BRCMF_SKB_HTOD_TAG_FIFO_MASK 0x07000000
243 #define BRCMF_SKB_HTOD_TAG_FIFO_SHIFT 24
244 #define BRCMF_SKB_HTOD_TAG_HSLOT_MASK 0x00ffff00
245 #define BRCMF_SKB_HTOD_TAG_HSLOT_SHIFT 8
246 #define BRCMF_SKB_HTOD_TAG_FREERUN_MASK 0x000000ff
247 #define BRCMF_SKB_HTOD_TAG_FREERUN_SHIFT 0
249 #define brcmf_skb_htod_tag_set_field(skb, field, value) \
250 brcmu_maskset32(&(brcmf_skbcb(skb)->htod), \
251 BRCMF_SKB_HTOD_TAG_ ## field ## _MASK, \
252 BRCMF_SKB_HTOD_TAG_ ## field ## _SHIFT, (value))
253 #define brcmf_skb_htod_tag_get_field(skb, field) \
254 brcmu_maskget32(brcmf_skbcb(skb)->htod, \
255 BRCMF_SKB_HTOD_TAG_ ## field ## _MASK, \
256 BRCMF_SKB_HTOD_TAG_ ## field ## _SHIFT)
258 #define BRCMF_FWS_TXSTAT_GENERATION_MASK 0x80000000
259 #define BRCMF_FWS_TXSTAT_GENERATION_SHIFT 31
260 #define BRCMF_FWS_TXSTAT_FLAGS_MASK 0x78000000
261 #define BRCMF_FWS_TXSTAT_FLAGS_SHIFT 27
262 #define BRCMF_FWS_TXSTAT_FIFO_MASK 0x07000000
263 #define BRCMF_FWS_TXSTAT_FIFO_SHIFT 24
264 #define BRCMF_FWS_TXSTAT_HSLOT_MASK 0x00FFFF00
265 #define BRCMF_FWS_TXSTAT_HSLOT_SHIFT 8
266 #define BRCMF_FWS_TXSTAT_PKTID_MASK 0x00FFFFFF
267 #define BRCMF_FWS_TXSTAT_PKTID_SHIFT 0
269 #define brcmf_txstatus_get_field(txs, field) \
270 brcmu_maskget32(txs, BRCMF_FWS_TXSTAT_ ## field ## _MASK, \
271 BRCMF_FWS_TXSTAT_ ## field ## _SHIFT)
273 /* How long to defer borrowing in jiffies */
274 #define BRCMF_FWS_BORROW_DEFER_PERIOD (HZ / 10)
277 * enum brcmf_fws_fifo - fifo indices used by dongle firmware.
279 * @BRCMF_FWS_FIFO_FIRST: first fifo, ie. background.
280 * @BRCMF_FWS_FIFO_AC_BK: fifo for background traffic.
281 * @BRCMF_FWS_FIFO_AC_BE: fifo for best-effort traffic.
282 * @BRCMF_FWS_FIFO_AC_VI: fifo for video traffic.
283 * @BRCMF_FWS_FIFO_AC_VO: fifo for voice traffic.
284 * @BRCMF_FWS_FIFO_BCMC: fifo for broadcast/multicast (AP only).
285 * @BRCMF_FWS_FIFO_ATIM: fifo for ATIM (AP only).
286 * @BRCMF_FWS_FIFO_COUNT: number of fifos.
288 enum brcmf_fws_fifo {
289 BRCMF_FWS_FIFO_FIRST,
290 BRCMF_FWS_FIFO_AC_BK = BRCMF_FWS_FIFO_FIRST,
291 BRCMF_FWS_FIFO_AC_BE,
292 BRCMF_FWS_FIFO_AC_VI,
293 BRCMF_FWS_FIFO_AC_VO,
300 * enum brcmf_fws_txstatus - txstatus flag values.
302 * @BRCMF_FWS_TXSTATUS_DISCARD:
303 * host is free to discard the packet.
304 * @BRCMF_FWS_TXSTATUS_CORE_SUPPRESS:
305 * 802.11 core suppressed the packet.
306 * @BRCMF_FWS_TXSTATUS_FW_PS_SUPPRESS:
307 * firmware suppress the packet as device is already in PS mode.
308 * @BRCMF_FWS_TXSTATUS_FW_TOSSED:
309 * firmware tossed the packet.
310 * @BRCMF_FWS_TXSTATUS_HOST_TOSSED:
311 * host tossed the packet.
313 enum brcmf_fws_txstatus {
314 BRCMF_FWS_TXSTATUS_DISCARD,
315 BRCMF_FWS_TXSTATUS_CORE_SUPPRESS,
316 BRCMF_FWS_TXSTATUS_FW_PS_SUPPRESS,
317 BRCMF_FWS_TXSTATUS_FW_TOSSED,
318 BRCMF_FWS_TXSTATUS_HOST_TOSSED
321 enum brcmf_fws_fcmode {
322 BRCMF_FWS_FCMODE_NONE,
323 BRCMF_FWS_FCMODE_IMPLIED_CREDIT,
324 BRCMF_FWS_FCMODE_EXPLICIT_CREDIT
327 enum brcmf_fws_mac_desc_state {
328 BRCMF_FWS_STATE_OPEN = 1,
329 BRCMF_FWS_STATE_CLOSE
333 * struct brcmf_fws_mac_descriptor - firmware signalling data per node/interface
335 * @occupied: slot is in use.
336 * @mac_handle: handle for mac entry determined by firmware.
337 * @interface_id: interface index.
338 * @state: current state.
339 * @suppressed: mac entry is suppressed.
340 * @generation: generation bit.
341 * @ac_bitmap: ac queue bitmap.
342 * @requested_credit: credits requested by firmware.
343 * @ea: ethernet address.
344 * @seq: per-node free-running sequence.
345 * @psq: power-save queue.
346 * @transit_count: packet in transit to firmware.
348 struct brcmf_fws_mac_descriptor {
360 u8 seq[BRCMF_FWS_FIFO_COUNT];
363 int suppr_transit_count;
364 bool send_tim_signal;
365 u8 traffic_pending_bmp;
366 u8 traffic_lastreported_bmp;
369 #define BRCMF_FWS_HANGER_MAXITEMS 1024
372 * enum brcmf_fws_hanger_item_state - state of hanger item.
374 * @BRCMF_FWS_HANGER_ITEM_STATE_FREE: item is free for use.
375 * @BRCMF_FWS_HANGER_ITEM_STATE_INUSE: item is in use.
376 * @BRCMF_FWS_HANGER_ITEM_STATE_INUSE_SUPPRESSED: item was suppressed.
378 enum brcmf_fws_hanger_item_state {
379 BRCMF_FWS_HANGER_ITEM_STATE_FREE = 1,
380 BRCMF_FWS_HANGER_ITEM_STATE_INUSE,
381 BRCMF_FWS_HANGER_ITEM_STATE_INUSE_SUPPRESSED
386 * struct brcmf_fws_hanger_item - single entry for tx pending packet.
388 * @state: entry is either free or occupied.
389 * @pkt: packet itself.
391 struct brcmf_fws_hanger_item {
392 enum brcmf_fws_hanger_item_state state;
397 * struct brcmf_fws_hanger - holds packets awaiting firmware txstatus.
399 * @pushed: packets pushed to await txstatus.
400 * @popped: packets popped upon handling txstatus.
401 * @failed_to_push: packets that could not be pushed.
402 * @failed_to_pop: packets that could not be popped.
403 * @failed_slotfind: packets for which failed to find an entry.
404 * @slot_pos: last returned item index for a free entry.
405 * @items: array of hanger items.
407 struct brcmf_fws_hanger {
414 struct brcmf_fws_hanger_item items[BRCMF_FWS_HANGER_MAXITEMS];
417 struct brcmf_fws_macdesc_table {
418 struct brcmf_fws_mac_descriptor nodes[BRCMF_FWS_MAC_DESC_TABLE_SIZE];
419 struct brcmf_fws_mac_descriptor iface[BRCMF_MAX_IFS];
420 struct brcmf_fws_mac_descriptor other;
423 struct brcmf_fws_info {
424 struct brcmf_pub *drvr;
425 struct brcmf_fws_stats stats;
426 struct brcmf_fws_hanger hanger;
427 enum brcmf_fws_fcmode fcmode;
428 bool bcmc_credit_check;
429 struct brcmf_fws_macdesc_table desc;
430 struct workqueue_struct *fws_wq;
431 struct work_struct fws_dequeue_work;
432 u32 fifo_enqpkt[BRCMF_FWS_FIFO_COUNT];
433 int fifo_credit[BRCMF_FWS_FIFO_COUNT];
434 int credits_borrowed[BRCMF_FWS_FIFO_AC_VO + 1];
435 int deq_node_pos[BRCMF_FWS_FIFO_COUNT];
438 unsigned long borrow_defer_timestamp;
439 bool bus_flow_blocked;
440 bool creditmap_received;
444 * brcmf_fws_prio2fifo - mapping from 802.1d priority to firmware fifo index.
446 static const int brcmf_fws_prio2fifo[] = {
447 BRCMF_FWS_FIFO_AC_BE,
448 BRCMF_FWS_FIFO_AC_BK,
449 BRCMF_FWS_FIFO_AC_BK,
450 BRCMF_FWS_FIFO_AC_BE,
451 BRCMF_FWS_FIFO_AC_VI,
452 BRCMF_FWS_FIFO_AC_VI,
453 BRCMF_FWS_FIFO_AC_VO,
458 module_param(fcmode, int, S_IRUSR);
459 MODULE_PARM_DESC(fcmode, "mode of firmware signalled flow control");
461 #define BRCMF_FWS_TLV_DEF(name, id, len) \
462 case BRCMF_FWS_TYPE_ ## name: \
466 * brcmf_fws_get_tlv_len() - returns defined length for given tlv id.
468 * @fws: firmware-signalling information.
469 * @id: identifier of the TLV.
471 * Return: the specified length for the given TLV; Otherwise -EINVAL.
473 static int brcmf_fws_get_tlv_len(struct brcmf_fws_info *fws,
474 enum brcmf_fws_tlv_type id)
477 BRCMF_FWS_TLV_DEFLIST
479 fws->stats.tlv_invalid_type++;
484 #undef BRCMF_FWS_TLV_DEF
486 static bool brcmf_fws_ifidx_match(struct sk_buff *skb, void *arg)
488 u32 ifidx = brcmf_skb_if_flags_get_field(skb, INDEX);
489 return ifidx == *(int *)arg;
492 static void brcmf_fws_psq_flush(struct brcmf_fws_info *fws, struct pktq *q,
495 bool (*matchfn)(struct sk_buff *, void *) = NULL;
500 matchfn = brcmf_fws_ifidx_match;
501 for (prec = 0; prec < q->num_prec; prec++) {
502 skb = brcmu_pktq_pdeq_match(q, prec, matchfn, &ifidx);
504 brcmu_pkt_buf_free_skb(skb);
505 skb = brcmu_pktq_pdeq_match(q, prec, matchfn, &ifidx);
510 static void brcmf_fws_hanger_init(struct brcmf_fws_hanger *hanger)
514 memset(hanger, 0, sizeof(*hanger));
515 for (i = 0; i < ARRAY_SIZE(hanger->items); i++)
516 hanger->items[i].state = BRCMF_FWS_HANGER_ITEM_STATE_FREE;
519 static u32 brcmf_fws_hanger_get_free_slot(struct brcmf_fws_hanger *h)
523 i = (h->slot_pos + 1) % BRCMF_FWS_HANGER_MAXITEMS;
525 while (i != h->slot_pos) {
526 if (h->items[i].state == BRCMF_FWS_HANGER_ITEM_STATE_FREE) {
531 if (i == BRCMF_FWS_HANGER_MAXITEMS)
534 brcmf_err("all slots occupied\n");
535 h->failed_slotfind++;
536 i = BRCMF_FWS_HANGER_MAXITEMS;
541 static int brcmf_fws_hanger_pushpkt(struct brcmf_fws_hanger *h,
542 struct sk_buff *pkt, u32 slot_id)
544 if (slot_id >= BRCMF_FWS_HANGER_MAXITEMS)
547 if (h->items[slot_id].state != BRCMF_FWS_HANGER_ITEM_STATE_FREE) {
548 brcmf_err("slot is not free\n");
553 h->items[slot_id].state = BRCMF_FWS_HANGER_ITEM_STATE_INUSE;
554 h->items[slot_id].pkt = pkt;
559 static int brcmf_fws_hanger_poppkt(struct brcmf_fws_hanger *h,
560 u32 slot_id, struct sk_buff **pktout,
563 if (slot_id >= BRCMF_FWS_HANGER_MAXITEMS)
566 if (h->items[slot_id].state == BRCMF_FWS_HANGER_ITEM_STATE_FREE) {
567 brcmf_err("entry not in use\n");
572 *pktout = h->items[slot_id].pkt;
574 h->items[slot_id].state = BRCMF_FWS_HANGER_ITEM_STATE_FREE;
575 h->items[slot_id].pkt = NULL;
581 static int brcmf_fws_hanger_mark_suppressed(struct brcmf_fws_hanger *h,
584 if (slot_id >= BRCMF_FWS_HANGER_MAXITEMS)
587 if (h->items[slot_id].state == BRCMF_FWS_HANGER_ITEM_STATE_FREE) {
588 brcmf_err("entry not in use\n");
592 h->items[slot_id].state = BRCMF_FWS_HANGER_ITEM_STATE_INUSE_SUPPRESSED;
596 static void brcmf_fws_hanger_cleanup(struct brcmf_fws_info *fws,
597 bool (*fn)(struct sk_buff *, void *),
600 struct brcmf_fws_hanger *h = &fws->hanger;
603 enum brcmf_fws_hanger_item_state s;
605 for (i = 0; i < ARRAY_SIZE(h->items); i++) {
606 s = h->items[i].state;
607 if (s == BRCMF_FWS_HANGER_ITEM_STATE_INUSE ||
608 s == BRCMF_FWS_HANGER_ITEM_STATE_INUSE_SUPPRESSED) {
609 skb = h->items[i].pkt;
610 if (fn == NULL || fn(skb, &ifidx)) {
611 /* suppress packets freed from psq */
612 if (s == BRCMF_FWS_HANGER_ITEM_STATE_INUSE)
613 brcmu_pkt_buf_free_skb(skb);
615 BRCMF_FWS_HANGER_ITEM_STATE_FREE;
621 static void brcmf_fws_macdesc_set_name(struct brcmf_fws_info *fws,
622 struct brcmf_fws_mac_descriptor *desc)
624 if (desc == &fws->desc.other)
625 strlcpy(desc->name, "MAC-OTHER", sizeof(desc->name));
626 else if (desc->mac_handle)
627 scnprintf(desc->name, sizeof(desc->name), "MAC-%d:%d",
628 desc->mac_handle, desc->interface_id);
630 scnprintf(desc->name, sizeof(desc->name), "MACIF:%d",
634 static void brcmf_fws_macdesc_init(struct brcmf_fws_mac_descriptor *desc,
638 "enter: desc %p ea=%pM, ifidx=%u\n", desc, addr, ifidx);
640 desc->state = BRCMF_FWS_STATE_OPEN;
641 desc->requested_credit = 0;
642 desc->requested_packet = 0;
643 /* depending on use may need ifp->bssidx instead */
644 desc->interface_id = ifidx;
645 desc->ac_bitmap = 0xff; /* update this when handling APSD */
647 memcpy(&desc->ea[0], addr, ETH_ALEN);
651 void brcmf_fws_macdesc_deinit(struct brcmf_fws_mac_descriptor *desc)
654 "enter: ea=%pM, ifidx=%u\n", desc->ea, desc->interface_id);
656 desc->state = BRCMF_FWS_STATE_CLOSE;
657 desc->requested_credit = 0;
658 desc->requested_packet = 0;
661 static struct brcmf_fws_mac_descriptor *
662 brcmf_fws_macdesc_lookup(struct brcmf_fws_info *fws, u8 *ea)
664 struct brcmf_fws_mac_descriptor *entry;
668 return ERR_PTR(-EINVAL);
670 entry = &fws->desc.nodes[0];
671 for (i = 0; i < ARRAY_SIZE(fws->desc.nodes); i++) {
672 if (entry->occupied && !memcmp(entry->ea, ea, ETH_ALEN))
677 return ERR_PTR(-ENOENT);
680 static struct brcmf_fws_mac_descriptor*
681 brcmf_fws_macdesc_find(struct brcmf_fws_info *fws, struct brcmf_if *ifp, u8 *da)
683 struct brcmf_fws_mac_descriptor *entry = &fws->desc.other;
686 multicast = is_multicast_ether_addr(da);
688 /* Multicast destination, STA and P2P clients get the interface entry.
689 * STA/GC gets the Mac Entry for TDLS destinations, TDLS destinations
690 * have their own entry.
692 if (multicast && ifp->fws_desc) {
693 entry = ifp->fws_desc;
697 entry = brcmf_fws_macdesc_lookup(fws, da);
699 entry = ifp->fws_desc;
705 static bool brcmf_fws_macdesc_closed(struct brcmf_fws_info *fws,
706 struct brcmf_fws_mac_descriptor *entry,
709 struct brcmf_fws_mac_descriptor *if_entry;
712 /* for unique destination entries the related interface
715 if (entry->mac_handle) {
716 if_entry = &fws->desc.iface[entry->interface_id];
717 if (if_entry->state == BRCMF_FWS_STATE_CLOSE)
720 /* an entry is closed when the state is closed and
721 * the firmware did not request anything.
723 closed = entry->state == BRCMF_FWS_STATE_CLOSE &&
724 !entry->requested_credit && !entry->requested_packet;
726 /* Or firmware does not allow traffic for given fifo */
727 return closed || !(entry->ac_bitmap & BIT(fifo));
730 static void brcmf_fws_macdesc_cleanup(struct brcmf_fws_info *fws,
731 struct brcmf_fws_mac_descriptor *entry,
734 if (entry->occupied && (ifidx == -1 || ifidx == entry->interface_id)) {
735 brcmf_fws_psq_flush(fws, &entry->psq, ifidx);
736 entry->occupied = !!(entry->psq.len);
740 static void brcmf_fws_bus_txq_cleanup(struct brcmf_fws_info *fws,
741 bool (*fn)(struct sk_buff *, void *),
744 struct brcmf_fws_hanger_item *hi;
750 txq = brcmf_bus_gettxq(fws->drvr->bus_if);
752 brcmf_dbg(TRACE, "no txq to clean up\n");
756 for (prec = 0; prec < txq->num_prec; prec++) {
757 skb = brcmu_pktq_pdeq_match(txq, prec, fn, &ifidx);
759 hslot = brcmf_skb_htod_tag_get_field(skb, HSLOT);
760 hi = &fws->hanger.items[hslot];
761 WARN_ON(skb != hi->pkt);
762 hi->state = BRCMF_FWS_HANGER_ITEM_STATE_FREE;
763 brcmu_pkt_buf_free_skb(skb);
764 skb = brcmu_pktq_pdeq_match(txq, prec, fn, &ifidx);
769 static void brcmf_fws_cleanup(struct brcmf_fws_info *fws, int ifidx)
772 struct brcmf_fws_mac_descriptor *table;
773 bool (*matchfn)(struct sk_buff *, void *) = NULL;
779 matchfn = brcmf_fws_ifidx_match;
781 /* cleanup individual nodes */
782 table = &fws->desc.nodes[0];
783 for (i = 0; i < ARRAY_SIZE(fws->desc.nodes); i++)
784 brcmf_fws_macdesc_cleanup(fws, &table[i], ifidx);
786 brcmf_fws_macdesc_cleanup(fws, &fws->desc.other, ifidx);
787 brcmf_fws_bus_txq_cleanup(fws, matchfn, ifidx);
788 brcmf_fws_hanger_cleanup(fws, matchfn, ifidx);
791 static int brcmf_fws_hdrpush(struct brcmf_fws_info *fws, struct sk_buff *skb)
793 struct brcmf_fws_mac_descriptor *entry = brcmf_skbcb(skb)->mac;
797 __le32 pkttag = cpu_to_le32(brcmf_skbcb(skb)->htod);
799 brcmf_dbg(TRACE, "enter: ea=%pM, ifidx=%u (%u), pkttag=0x%08X, hslot=%d\n",
800 entry->ea, entry->interface_id,
801 brcmf_skb_if_flags_get_field(skb, INDEX),
802 le32_to_cpu(pkttag), (le32_to_cpu(pkttag) >> 8) & 0xffff);
803 if (entry->send_tim_signal)
804 data_offset += 2 + BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP_LEN;
806 /* +2 is for Type[1] and Len[1] in TLV, plus TIM signal */
807 data_offset += 2 + BRCMF_FWS_TYPE_PKTTAG_LEN;
808 fillers = round_up(data_offset, 4) - data_offset;
809 data_offset += fillers;
811 skb_push(skb, data_offset);
814 wlh[0] = BRCMF_FWS_TYPE_PKTTAG;
815 wlh[1] = BRCMF_FWS_TYPE_PKTTAG_LEN;
816 memcpy(&wlh[2], &pkttag, sizeof(pkttag));
817 wlh += BRCMF_FWS_TYPE_PKTTAG_LEN + 2;
819 if (entry->send_tim_signal) {
820 entry->send_tim_signal = 0;
821 wlh[0] = BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP;
822 wlh[1] = BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP_LEN;
823 wlh[2] = entry->mac_handle;
824 wlh[3] = entry->traffic_pending_bmp;
825 brcmf_dbg(TRACE, "adding TIM info: %02X:%02X:%02X:%02X\n",
826 wlh[0], wlh[1], wlh[2], wlh[3]);
827 wlh += BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP_LEN + 2;
828 entry->traffic_lastreported_bmp = entry->traffic_pending_bmp;
831 memset(wlh, BRCMF_FWS_TYPE_FILLER, fillers);
833 brcmf_proto_hdrpush(fws->drvr, brcmf_skb_if_flags_get_field(skb, INDEX),
834 data_offset >> 2, skb);
838 static bool brcmf_fws_tim_update(struct brcmf_fws_info *fws,
839 struct brcmf_fws_mac_descriptor *entry,
840 int fifo, bool send_immediately)
843 struct brcmf_bus *bus;
844 struct brcmf_skbuff_cb *skcb;
848 /* check delayedQ and suppressQ in one call using bitmap */
849 if (brcmu_pktq_mlen(&entry->psq, 3 << (fifo * 2)) == 0)
850 entry->traffic_pending_bmp &= ~NBITVAL(fifo);
852 entry->traffic_pending_bmp |= NBITVAL(fifo);
854 entry->send_tim_signal = false;
855 if (entry->traffic_lastreported_bmp != entry->traffic_pending_bmp)
856 entry->send_tim_signal = true;
857 if (send_immediately && entry->send_tim_signal &&
858 entry->state == BRCMF_FWS_STATE_CLOSE) {
859 /* create a dummy packet and sent that. The traffic */
860 /* bitmap info will automatically be attached to that packet */
861 len = BRCMF_FWS_TYPE_PKTTAG_LEN + 2 +
862 BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP_LEN + 2 +
863 4 + fws->drvr->hdrlen;
864 skb = brcmu_pkt_buf_get_skb(len);
868 skcb = brcmf_skbcb(skb);
870 skcb->state = BRCMF_FWS_SKBSTATE_TIM;
871 bus = fws->drvr->bus_if;
872 err = brcmf_fws_hdrpush(fws, skb);
874 err = brcmf_bus_txdata(bus, skb);
876 brcmu_pkt_buf_free_skb(skb);
883 brcmf_fws_flow_control_check(struct brcmf_fws_info *fws, struct pktq *pq,
886 struct brcmf_if *ifp = fws->drvr->iflist[!if_id ? 0 : if_id + 1];
891 if ((ifp->netif_stop & BRCMF_NETIF_STOP_REASON_FWS_FC) &&
892 pq->len <= BRCMF_FWS_FLOWCONTROL_LOWATER)
893 brcmf_txflowblock_if(ifp,
894 BRCMF_NETIF_STOP_REASON_FWS_FC, false);
895 if (!(ifp->netif_stop & BRCMF_NETIF_STOP_REASON_FWS_FC) &&
896 pq->len >= BRCMF_FWS_FLOWCONTROL_HIWATER) {
897 fws->stats.fws_flow_block++;
898 brcmf_txflowblock_if(ifp, BRCMF_NETIF_STOP_REASON_FWS_FC, true);
903 static int brcmf_fws_rssi_indicate(struct brcmf_fws_info *fws, s8 rssi)
905 brcmf_dbg(CTL, "rssi %d\n", rssi);
910 int brcmf_fws_macdesc_indicate(struct brcmf_fws_info *fws, u8 type, u8 *data)
912 struct brcmf_fws_mac_descriptor *entry, *existing;
917 mac_handle = *data++;
921 entry = &fws->desc.nodes[mac_handle & 0x1F];
922 if (type == BRCMF_FWS_TYPE_MACDESC_DEL) {
923 if (entry->occupied) {
924 brcmf_dbg(TRACE, "deleting %s mac %pM\n",
926 brcmf_fws_macdesc_cleanup(fws, entry, -1);
927 brcmf_fws_macdesc_deinit(entry);
929 fws->stats.mac_update_failed++;
933 existing = brcmf_fws_macdesc_lookup(fws, addr);
934 if (IS_ERR(existing)) {
935 if (!entry->occupied) {
936 entry->mac_handle = mac_handle;
937 brcmf_fws_macdesc_init(entry, addr, ifidx);
938 brcmf_fws_macdesc_set_name(fws, entry);
939 brcmu_pktq_init(&entry->psq, BRCMF_FWS_PSQ_PREC_COUNT,
941 brcmf_dbg(TRACE, "add %s mac %pM\n", entry->name, addr);
943 fws->stats.mac_update_failed++;
946 if (entry != existing) {
947 brcmf_dbg(TRACE, "copy mac %s\n", existing->name);
948 memcpy(entry, existing,
949 offsetof(struct brcmf_fws_mac_descriptor, psq));
950 entry->mac_handle = mac_handle;
951 brcmf_fws_macdesc_deinit(existing);
952 brcmf_fws_macdesc_set_name(fws, entry);
953 brcmf_dbg(TRACE, "relocate %s mac %pM\n", entry->name,
956 brcmf_dbg(TRACE, "use existing\n");
957 WARN_ON(entry->mac_handle != mac_handle);
958 /* TODO: what should we do here: continue, reinit, .. */
964 static int brcmf_fws_macdesc_state_indicate(struct brcmf_fws_info *fws,
967 struct brcmf_fws_mac_descriptor *entry;
970 mac_handle = data[0];
971 entry = &fws->desc.nodes[mac_handle & 0x1F];
972 if (!entry->occupied) {
973 fws->stats.mac_ps_update_failed++;
976 /* a state update should wipe old credits */
977 entry->requested_credit = 0;
978 entry->requested_packet = 0;
979 if (type == BRCMF_FWS_TYPE_MAC_OPEN) {
980 entry->state = BRCMF_FWS_STATE_OPEN;
981 return BRCMF_FWS_RET_OK_SCHEDULE;
983 entry->state = BRCMF_FWS_STATE_CLOSE;
984 brcmf_fws_tim_update(fws, entry, BRCMF_FWS_FIFO_AC_BK, false);
985 brcmf_fws_tim_update(fws, entry, BRCMF_FWS_FIFO_AC_BE, false);
986 brcmf_fws_tim_update(fws, entry, BRCMF_FWS_FIFO_AC_VI, false);
987 brcmf_fws_tim_update(fws, entry, BRCMF_FWS_FIFO_AC_VO, true);
989 return BRCMF_FWS_RET_OK_NOSCHEDULE;
992 static int brcmf_fws_interface_state_indicate(struct brcmf_fws_info *fws,
995 struct brcmf_fws_mac_descriptor *entry;
1001 if (ifidx >= BRCMF_MAX_IFS) {
1006 entry = &fws->desc.iface[ifidx];
1007 if (!entry->occupied) {
1012 brcmf_dbg(TRACE, "%s (%d): %s\n", brcmf_fws_get_tlv_name(type), type,
1015 case BRCMF_FWS_TYPE_INTERFACE_OPEN:
1016 entry->state = BRCMF_FWS_STATE_OPEN;
1017 return BRCMF_FWS_RET_OK_SCHEDULE;
1018 case BRCMF_FWS_TYPE_INTERFACE_CLOSE:
1019 entry->state = BRCMF_FWS_STATE_CLOSE;
1020 return BRCMF_FWS_RET_OK_NOSCHEDULE;
1026 fws->stats.if_update_failed++;
1030 static int brcmf_fws_request_indicate(struct brcmf_fws_info *fws, u8 type,
1033 struct brcmf_fws_mac_descriptor *entry;
1035 entry = &fws->desc.nodes[data[1] & 0x1F];
1036 if (!entry->occupied) {
1037 if (type == BRCMF_FWS_TYPE_MAC_REQUEST_CREDIT)
1038 fws->stats.credit_request_failed++;
1040 fws->stats.packet_request_failed++;
1044 brcmf_dbg(TRACE, "%s (%d): %s cnt %d bmp %d\n",
1045 brcmf_fws_get_tlv_name(type), type, entry->name,
1047 if (type == BRCMF_FWS_TYPE_MAC_REQUEST_CREDIT)
1048 entry->requested_credit = data[0];
1050 entry->requested_packet = data[0];
1052 entry->ac_bitmap = data[2];
1053 return BRCMF_FWS_RET_OK_SCHEDULE;
1057 brcmf_fws_macdesc_use_req_credit(struct brcmf_fws_mac_descriptor *entry,
1058 struct sk_buff *skb)
1060 if (entry->requested_credit > 0) {
1061 entry->requested_credit--;
1062 brcmf_skb_if_flags_set_field(skb, REQUESTED, 1);
1063 brcmf_skb_if_flags_set_field(skb, REQ_CREDIT, 1);
1064 if (entry->state != BRCMF_FWS_STATE_CLOSE)
1065 brcmf_err("requested credit set while mac not closed!\n");
1066 } else if (entry->requested_packet > 0) {
1067 entry->requested_packet--;
1068 brcmf_skb_if_flags_set_field(skb, REQUESTED, 1);
1069 brcmf_skb_if_flags_set_field(skb, REQ_CREDIT, 0);
1070 if (entry->state != BRCMF_FWS_STATE_CLOSE)
1071 brcmf_err("requested packet set while mac not closed!\n");
1073 brcmf_skb_if_flags_set_field(skb, REQUESTED, 0);
1074 brcmf_skb_if_flags_set_field(skb, REQ_CREDIT, 0);
1078 static void brcmf_fws_macdesc_return_req_credit(struct sk_buff *skb)
1080 struct brcmf_fws_mac_descriptor *entry = brcmf_skbcb(skb)->mac;
1082 if ((brcmf_skb_if_flags_get_field(skb, REQ_CREDIT)) &&
1083 (entry->state == BRCMF_FWS_STATE_CLOSE))
1084 entry->requested_credit++;
1087 static void brcmf_fws_return_credits(struct brcmf_fws_info *fws,
1088 u8 fifo, u8 credits)
1097 fws->fifo_credit_map |= 1 << fifo;
1099 if ((fifo == BRCMF_FWS_FIFO_AC_BE) &&
1100 (fws->credits_borrowed[0])) {
1101 for (lender_ac = BRCMF_FWS_FIFO_AC_VO; lender_ac >= 0;
1103 borrowed = &fws->credits_borrowed[lender_ac];
1105 fws->fifo_credit_map |= (1 << lender_ac);
1106 fifo_credit = &fws->fifo_credit[lender_ac];
1107 if (*borrowed >= credits) {
1108 *borrowed -= credits;
1109 *fifo_credit += credits;
1112 credits -= *borrowed;
1113 *fifo_credit += *borrowed;
1120 fws->fifo_credit[fifo] += credits;
1123 static void brcmf_fws_schedule_deq(struct brcmf_fws_info *fws)
1125 /* only schedule dequeue when there are credits for delayed traffic */
1126 if (fws->fifo_credit_map & fws->fifo_delay_map)
1127 queue_work(fws->fws_wq, &fws->fws_dequeue_work);
1130 static int brcmf_fws_enq(struct brcmf_fws_info *fws,
1131 enum brcmf_fws_skb_state state, int fifo,
1134 int prec = 2 * fifo;
1135 u32 *qfull_stat = &fws->stats.delayq_full_error;
1137 struct brcmf_fws_mac_descriptor *entry;
1139 entry = brcmf_skbcb(p)->mac;
1140 if (entry == NULL) {
1141 brcmf_err("no mac descriptor found for skb %p\n", p);
1145 brcmf_dbg(DATA, "enter: fifo %d skb %p\n", fifo, p);
1146 if (state == BRCMF_FWS_SKBSTATE_SUPPRESSED) {
1148 qfull_stat = &fws->stats.supprq_full_error;
1151 if (brcmu_pktq_penq(&entry->psq, prec, p) == NULL) {
1156 /* increment total enqueued packet count */
1157 fws->fifo_delay_map |= 1 << fifo;
1158 fws->fifo_enqpkt[fifo]++;
1160 /* update the sk_buff state */
1161 brcmf_skbcb(p)->state = state;
1164 * A packet has been pushed so update traffic
1165 * availability bitmap, if applicable
1167 brcmf_fws_tim_update(fws, entry, fifo, true);
1168 brcmf_fws_flow_control_check(fws, &entry->psq,
1169 brcmf_skb_if_flags_get_field(p, INDEX));
1173 static struct sk_buff *brcmf_fws_deq(struct brcmf_fws_info *fws, int fifo)
1175 struct brcmf_fws_mac_descriptor *table;
1176 struct brcmf_fws_mac_descriptor *entry;
1184 table = (struct brcmf_fws_mac_descriptor *)&fws->desc;
1185 num_nodes = sizeof(fws->desc) / sizeof(struct brcmf_fws_mac_descriptor);
1186 node_pos = fws->deq_node_pos[fifo];
1188 for (i = 0; i < num_nodes; i++) {
1189 entry = &table[(node_pos + i) % num_nodes];
1190 if (!entry->occupied ||
1191 brcmf_fws_macdesc_closed(fws, entry, fifo))
1194 if (entry->suppressed)
1198 p = brcmu_pktq_mdeq(&entry->psq, pmsk << (fifo * 2), &prec_out);
1200 if (entry->suppressed) {
1201 if (entry->suppr_transit_count)
1203 entry->suppressed = false;
1204 p = brcmu_pktq_mdeq(&entry->psq,
1205 1 << (fifo * 2), &prec_out);
1211 brcmf_fws_macdesc_use_req_credit(entry, p);
1213 /* move dequeue position to ensure fair round-robin */
1214 fws->deq_node_pos[fifo] = (node_pos + i + 1) % num_nodes;
1215 brcmf_fws_flow_control_check(fws, &entry->psq,
1216 brcmf_skb_if_flags_get_field(p,
1220 * A packet has been picked up, update traffic
1221 * availability bitmap, if applicable
1223 brcmf_fws_tim_update(fws, entry, fifo, false);
1226 * decrement total enqueued fifo packets and
1227 * clear delay bitmap if done.
1229 fws->fifo_enqpkt[fifo]--;
1230 if (fws->fifo_enqpkt[fifo] == 0)
1231 fws->fifo_delay_map &= ~(1 << fifo);
1236 brcmf_dbg(DATA, "exit: fifo %d skb %p\n", fifo, p);
1240 static int brcmf_fws_txstatus_suppressed(struct brcmf_fws_info *fws, int fifo,
1241 struct sk_buff *skb, u32 genbit)
1243 struct brcmf_fws_mac_descriptor *entry = brcmf_skbcb(skb)->mac;
1248 hslot = brcmf_skb_htod_tag_get_field(skb, HSLOT);
1250 /* this packet was suppressed */
1251 if (!entry->suppressed) {
1252 entry->suppressed = true;
1253 entry->suppr_transit_count = entry->transit_count;
1254 brcmf_dbg(DATA, "suppress %s: transit %d\n",
1255 entry->name, entry->transit_count);
1258 entry->generation = genbit;
1260 ret = brcmf_proto_hdrpull(fws->drvr, false, &ifidx, skb);
1262 ret = brcmf_fws_enq(fws, BRCMF_FWS_SKBSTATE_SUPPRESSED, fifo,
1265 /* suppress q is full or hdrpull failed, drop this packet */
1266 brcmf_fws_hanger_poppkt(&fws->hanger, hslot, &skb,
1270 * Mark suppressed to avoid a double free during
1273 brcmf_fws_hanger_mark_suppressed(&fws->hanger, hslot);
1280 brcmf_fws_txs_process(struct brcmf_fws_info *fws, u8 flags, u32 hslot,
1285 bool remove_from_hanger = true;
1286 struct sk_buff *skb;
1287 struct brcmf_skbuff_cb *skcb;
1288 struct brcmf_fws_mac_descriptor *entry = NULL;
1290 brcmf_dbg(DATA, "flags %d\n", flags);
1292 if (flags == BRCMF_FWS_TXSTATUS_DISCARD)
1293 fws->stats.txs_discard++;
1294 else if (flags == BRCMF_FWS_TXSTATUS_CORE_SUPPRESS) {
1295 fws->stats.txs_supp_core++;
1296 remove_from_hanger = false;
1297 } else if (flags == BRCMF_FWS_TXSTATUS_FW_PS_SUPPRESS) {
1298 fws->stats.txs_supp_ps++;
1299 remove_from_hanger = false;
1300 } else if (flags == BRCMF_FWS_TXSTATUS_FW_TOSSED)
1301 fws->stats.txs_tossed++;
1302 else if (flags == BRCMF_FWS_TXSTATUS_HOST_TOSSED)
1303 fws->stats.txs_host_tossed++;
1305 brcmf_err("unexpected txstatus\n");
1307 ret = brcmf_fws_hanger_poppkt(&fws->hanger, hslot, &skb,
1308 remove_from_hanger);
1310 brcmf_err("no packet in hanger slot: hslot=%d\n", hslot);
1314 skcb = brcmf_skbcb(skb);
1316 if (WARN_ON(!entry)) {
1317 brcmu_pkt_buf_free_skb(skb);
1320 entry->transit_count--;
1321 if (entry->suppressed && entry->suppr_transit_count)
1322 entry->suppr_transit_count--;
1324 brcmf_dbg(DATA, "%s flags %X htod %X\n", entry->name, skcb->if_flags,
1327 /* pick up the implicit credit from this packet */
1328 fifo = brcmf_skb_htod_tag_get_field(skb, FIFO);
1329 if ((fws->fcmode == BRCMF_FWS_FCMODE_IMPLIED_CREDIT) ||
1330 (brcmf_skb_if_flags_get_field(skb, REQ_CREDIT)) ||
1331 (flags == BRCMF_FWS_TXSTATUS_HOST_TOSSED)) {
1332 brcmf_fws_return_credits(fws, fifo, 1);
1333 brcmf_fws_schedule_deq(fws);
1335 brcmf_fws_macdesc_return_req_credit(skb);
1337 if (!remove_from_hanger)
1338 ret = brcmf_fws_txstatus_suppressed(fws, fifo, skb, genbit);
1340 if (remove_from_hanger || ret)
1341 brcmf_txfinalize(fws->drvr, skb, true);
1346 static int brcmf_fws_fifocreditback_indicate(struct brcmf_fws_info *fws,
1351 if (fws->fcmode != BRCMF_FWS_FCMODE_EXPLICIT_CREDIT) {
1352 brcmf_dbg(INFO, "ignored\n");
1353 return BRCMF_FWS_RET_OK_NOSCHEDULE;
1356 brcmf_dbg(DATA, "enter: data %pM\n", data);
1357 for (i = 0; i < BRCMF_FWS_FIFO_COUNT; i++)
1358 brcmf_fws_return_credits(fws, i, data[i]);
1360 brcmf_dbg(DATA, "map: credit %x delay %x\n", fws->fifo_credit_map,
1361 fws->fifo_delay_map);
1362 return BRCMF_FWS_RET_OK_SCHEDULE;
1365 static int brcmf_fws_txstatus_indicate(struct brcmf_fws_info *fws, u8 *data)
1373 fws->stats.txs_indicate++;
1374 memcpy(&status_le, data, sizeof(status_le));
1375 status = le32_to_cpu(status_le);
1376 flags = brcmf_txstatus_get_field(status, FLAGS);
1377 hslot = brcmf_txstatus_get_field(status, HSLOT);
1378 genbit = brcmf_txstatus_get_field(status, GENERATION);
1380 return brcmf_fws_txs_process(fws, flags, hslot, genbit);
1383 static int brcmf_fws_dbg_seqnum_check(struct brcmf_fws_info *fws, u8 *data)
1387 memcpy(×tamp, &data[2], sizeof(timestamp));
1388 brcmf_dbg(CTL, "received: seq %d, timestamp %d\n", data[1],
1389 le32_to_cpu(timestamp));
1393 /* using macro so sparse checking does not complain
1394 * about locking imbalance.
1396 #define brcmf_fws_lock(drvr, flags) \
1399 spin_lock_irqsave(&((drvr)->fws_spinlock), (flags)); \
1402 /* using macro so sparse checking does not complain
1403 * about locking imbalance.
1405 #define brcmf_fws_unlock(drvr, flags) \
1406 spin_unlock_irqrestore(&((drvr)->fws_spinlock), (flags))
1408 static int brcmf_fws_notify_credit_map(struct brcmf_if *ifp,
1409 const struct brcmf_event_msg *e,
1412 struct brcmf_fws_info *fws = ifp->drvr->fws;
1417 if (e->datalen < BRCMF_FWS_FIFO_COUNT) {
1418 brcmf_err("event payload too small (%d)\n", e->datalen);
1421 if (fws->creditmap_received)
1424 fws->creditmap_received = true;
1426 brcmf_dbg(TRACE, "enter: credits %pM\n", credits);
1427 brcmf_fws_lock(ifp->drvr, flags);
1428 for (i = 0; i < ARRAY_SIZE(fws->fifo_credit); i++) {
1430 fws->fifo_credit_map |= 1 << i;
1432 fws->fifo_credit_map &= ~(1 << i);
1433 fws->fifo_credit[i] = *credits++;
1435 brcmf_fws_schedule_deq(fws);
1436 brcmf_fws_unlock(ifp->drvr, flags);
1440 static int brcmf_fws_notify_bcmc_credit_support(struct brcmf_if *ifp,
1441 const struct brcmf_event_msg *e,
1444 struct brcmf_fws_info *fws = ifp->drvr->fws;
1447 brcmf_fws_lock(ifp->drvr, flags);
1449 fws->bcmc_credit_check = true;
1450 brcmf_fws_unlock(ifp->drvr, flags);
1454 int brcmf_fws_hdrpull(struct brcmf_pub *drvr, int ifidx, s16 signal_len,
1455 struct sk_buff *skb)
1457 struct brcmf_fws_info *fws = drvr->fws;
1467 brcmf_dbg(HDRS, "enter: ifidx %d, skblen %u, sig %d\n",
1468 ifidx, skb->len, signal_len);
1470 WARN_ON(signal_len > skb->len);
1472 /* if flow control disabled, skip to packet data and leave */
1473 if (!signal_len || !drvr->fw_signals) {
1474 skb_pull(skb, signal_len);
1478 /* lock during tlv parsing */
1479 brcmf_fws_lock(drvr, flags);
1481 fws->stats.header_pulls++;
1482 data_len = signal_len;
1483 signal_data = skb->data;
1485 status = BRCMF_FWS_RET_OK_NOSCHEDULE;
1486 while (data_len > 0) {
1487 /* extract tlv info */
1488 type = signal_data[0];
1490 /* FILLER type is actually not a TLV, but
1491 * a single byte that can be skipped.
1493 if (type == BRCMF_FWS_TYPE_FILLER) {
1498 len = signal_data[1];
1499 data = signal_data + 2;
1501 brcmf_dbg(HDRS, "tlv type=%s (%d), len=%d (%d)\n",
1502 brcmf_fws_get_tlv_name(type), type, len,
1503 brcmf_fws_get_tlv_len(fws, type));
1505 /* abort parsing when length invalid */
1506 if (data_len < len + 2)
1509 if (len < brcmf_fws_get_tlv_len(fws, type))
1512 err = BRCMF_FWS_RET_OK_NOSCHEDULE;
1514 case BRCMF_FWS_TYPE_HOST_REORDER_RXPKTS:
1515 case BRCMF_FWS_TYPE_COMP_TXSTATUS:
1517 case BRCMF_FWS_TYPE_MACDESC_ADD:
1518 case BRCMF_FWS_TYPE_MACDESC_DEL:
1519 brcmf_fws_macdesc_indicate(fws, type, data);
1521 case BRCMF_FWS_TYPE_MAC_OPEN:
1522 case BRCMF_FWS_TYPE_MAC_CLOSE:
1523 err = brcmf_fws_macdesc_state_indicate(fws, type, data);
1525 case BRCMF_FWS_TYPE_INTERFACE_OPEN:
1526 case BRCMF_FWS_TYPE_INTERFACE_CLOSE:
1527 err = brcmf_fws_interface_state_indicate(fws, type,
1530 case BRCMF_FWS_TYPE_MAC_REQUEST_CREDIT:
1531 case BRCMF_FWS_TYPE_MAC_REQUEST_PACKET:
1532 err = brcmf_fws_request_indicate(fws, type, data);
1534 case BRCMF_FWS_TYPE_TXSTATUS:
1535 brcmf_fws_txstatus_indicate(fws, data);
1537 case BRCMF_FWS_TYPE_FIFO_CREDITBACK:
1538 err = brcmf_fws_fifocreditback_indicate(fws, data);
1540 case BRCMF_FWS_TYPE_RSSI:
1541 brcmf_fws_rssi_indicate(fws, *data);
1543 case BRCMF_FWS_TYPE_TRANS_ID:
1544 brcmf_fws_dbg_seqnum_check(fws, data);
1546 case BRCMF_FWS_TYPE_PKTTAG:
1547 case BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP:
1549 fws->stats.tlv_invalid_type++;
1552 if (err == BRCMF_FWS_RET_OK_SCHEDULE)
1553 status = BRCMF_FWS_RET_OK_SCHEDULE;
1554 signal_data += len + 2;
1555 data_len -= len + 2;
1559 fws->stats.tlv_parse_failed++;
1561 if (status == BRCMF_FWS_RET_OK_SCHEDULE)
1562 brcmf_fws_schedule_deq(fws);
1564 /* signalling processing result does
1565 * not affect the actual ethernet packet.
1567 skb_pull(skb, signal_len);
1569 /* this may be a signal-only packet
1572 fws->stats.header_only_pkt++;
1574 brcmf_fws_unlock(drvr, flags);
1578 static void brcmf_fws_precommit_skb(struct brcmf_fws_info *fws, int fifo,
1581 struct brcmf_skbuff_cb *skcb = brcmf_skbcb(p);
1582 struct brcmf_fws_mac_descriptor *entry = skcb->mac;
1585 brcmf_skb_if_flags_set_field(p, TRANSMIT, 1);
1586 brcmf_skb_htod_tag_set_field(p, GENERATION, entry->generation);
1587 flags = BRCMF_FWS_HTOD_FLAG_PKTFROMHOST;
1588 if (brcmf_skb_if_flags_get_field(p, REQUESTED)) {
1590 * Indicate that this packet is being sent in response to an
1591 * explicit request from the firmware side.
1593 flags |= BRCMF_FWS_HTOD_FLAG_PKT_REQUESTED;
1595 brcmf_skb_htod_tag_set_field(p, FLAGS, flags);
1596 brcmf_fws_hdrpush(fws, p);
1599 static void brcmf_fws_rollback_toq(struct brcmf_fws_info *fws,
1600 struct sk_buff *skb, int fifo)
1602 struct brcmf_fws_mac_descriptor *entry;
1603 struct sk_buff *pktout;
1607 entry = brcmf_skbcb(skb)->mac;
1608 if (entry->occupied) {
1610 if (brcmf_skbcb(skb)->state == BRCMF_FWS_SKBSTATE_SUPPRESSED)
1613 pktout = brcmu_pktq_penq_head(&entry->psq, qidx, skb);
1614 if (pktout == NULL) {
1615 brcmf_err("%s queue %d full\n", entry->name, qidx);
1619 brcmf_err("%s entry removed\n", entry->name);
1624 fws->stats.rollback_failed++;
1625 hslot = brcmf_skb_htod_tag_get_field(skb, HSLOT);
1626 brcmf_fws_txs_process(fws, BRCMF_FWS_TXSTATUS_HOST_TOSSED,
1629 fws->stats.rollback_success++;
1630 brcmf_fws_return_credits(fws, fifo, 1);
1631 brcmf_fws_macdesc_return_req_credit(skb);
1635 static int brcmf_fws_borrow_credit(struct brcmf_fws_info *fws)
1639 if (time_after(fws->borrow_defer_timestamp, jiffies)) {
1640 fws->fifo_credit_map &= ~(1 << BRCMF_FWS_FIFO_AC_BE);
1644 for (lender_ac = 0; lender_ac <= BRCMF_FWS_FIFO_AC_VO; lender_ac++) {
1645 if (fws->fifo_credit[lender_ac]) {
1646 fws->credits_borrowed[lender_ac]++;
1647 fws->fifo_credit[lender_ac]--;
1648 if (fws->fifo_credit[lender_ac] == 0)
1649 fws->fifo_credit_map &= ~(1 << lender_ac);
1650 fws->fifo_credit_map |= (1 << BRCMF_FWS_FIFO_AC_BE);
1651 brcmf_dbg(DATA, "borrow credit from: %d\n", lender_ac);
1655 fws->fifo_credit_map &= ~(1 << BRCMF_FWS_FIFO_AC_BE);
1659 static int brcmf_fws_commit_skb(struct brcmf_fws_info *fws, int fifo,
1660 struct sk_buff *skb)
1662 struct brcmf_skbuff_cb *skcb = brcmf_skbcb(skb);
1663 struct brcmf_fws_mac_descriptor *entry;
1664 struct brcmf_bus *bus = fws->drvr->bus_if;
1670 return PTR_ERR(entry);
1672 brcmf_fws_precommit_skb(fws, fifo, skb);
1673 rc = brcmf_bus_txdata(bus, skb);
1674 brcmf_dbg(DATA, "%s flags %X htod %X bus_tx %d\n", entry->name,
1675 skcb->if_flags, skcb->htod, rc);
1677 brcmf_proto_hdrpull(fws->drvr, false, &ifidx, skb);
1681 entry->transit_count++;
1682 if (entry->suppressed)
1683 entry->suppr_transit_count++;
1684 fws->stats.pkt2bus++;
1685 fws->stats.send_pkts[fifo]++;
1686 if (brcmf_skb_if_flags_get_field(skb, REQUESTED))
1687 fws->stats.requested_sent[fifo]++;
1692 brcmf_fws_rollback_toq(fws, skb, fifo);
1696 static int brcmf_fws_assign_htod(struct brcmf_fws_info *fws, struct sk_buff *p,
1699 struct brcmf_skbuff_cb *skcb = brcmf_skbcb(p);
1702 hslot = brcmf_fws_hanger_get_free_slot(&fws->hanger);
1703 brcmf_skb_htod_tag_set_field(p, HSLOT, hslot);
1704 brcmf_skb_htod_tag_set_field(p, FREERUN, skcb->mac->seq[fifo]);
1705 brcmf_skb_htod_tag_set_field(p, FIFO, fifo);
1706 rc = brcmf_fws_hanger_pushpkt(&fws->hanger, p, hslot);
1708 skcb->mac->seq[fifo]++;
1710 fws->stats.generic_error++;
1714 int brcmf_fws_process_skb(struct brcmf_if *ifp, struct sk_buff *skb)
1716 struct brcmf_pub *drvr = ifp->drvr;
1717 struct brcmf_fws_info *fws = drvr->fws;
1718 struct brcmf_skbuff_cb *skcb = brcmf_skbcb(skb);
1719 struct ethhdr *eh = (struct ethhdr *)(skb->data);
1721 int fifo = BRCMF_FWS_FIFO_BCMC;
1722 bool multicast = is_multicast_ether_addr(eh->h_dest);
1724 /* determine the priority */
1726 skb->priority = cfg80211_classify8021d(skb);
1728 drvr->tx_multicast += !!multicast;
1729 if (ntohs(eh->h_proto) == ETH_P_PAE)
1730 atomic_inc(&ifp->pend_8021x_cnt);
1732 if (!brcmf_fws_fc_active(fws)) {
1733 /* If the protocol uses a data header, apply it */
1734 brcmf_proto_hdrpush(drvr, ifp->ifidx, 0, skb);
1736 /* Use bus module to send data frame */
1737 return brcmf_bus_txdata(drvr->bus_if, skb);
1740 /* set control buffer information */
1742 skcb->state = BRCMF_FWS_SKBSTATE_NEW;
1743 brcmf_skb_if_flags_set_field(skb, INDEX, ifp->ifidx);
1745 fifo = brcmf_fws_prio2fifo[skb->priority];
1747 brcmf_fws_lock(drvr, flags);
1748 if (fifo != BRCMF_FWS_FIFO_AC_BE && fifo < BRCMF_FWS_FIFO_BCMC)
1749 fws->borrow_defer_timestamp = jiffies +
1750 BRCMF_FWS_BORROW_DEFER_PERIOD;
1752 skcb->mac = brcmf_fws_macdesc_find(fws, ifp, eh->h_dest);
1753 brcmf_dbg(DATA, "%s mac %pM multi %d fifo %d\n", skcb->mac->name,
1754 eh->h_dest, multicast, fifo);
1755 if (!brcmf_fws_assign_htod(fws, skb, fifo)) {
1756 brcmf_fws_enq(fws, BRCMF_FWS_SKBSTATE_DELAYED, fifo, skb);
1757 brcmf_fws_schedule_deq(fws);
1759 brcmf_err("drop skb: no hanger slot\n");
1760 brcmu_pkt_buf_free_skb(skb);
1762 brcmf_fws_unlock(drvr, flags);
1766 void brcmf_fws_reset_interface(struct brcmf_if *ifp)
1768 struct brcmf_fws_mac_descriptor *entry = ifp->fws_desc;
1770 brcmf_dbg(TRACE, "enter: idx=%d\n", ifp->bssidx);
1774 brcmf_fws_macdesc_init(entry, ifp->mac_addr, ifp->ifidx);
1777 void brcmf_fws_add_interface(struct brcmf_if *ifp)
1779 struct brcmf_fws_info *fws = ifp->drvr->fws;
1780 struct brcmf_fws_mac_descriptor *entry;
1782 if (!ifp->ndev || !ifp->drvr->fw_signals)
1785 entry = &fws->desc.iface[ifp->ifidx];
1786 ifp->fws_desc = entry;
1787 brcmf_fws_macdesc_init(entry, ifp->mac_addr, ifp->ifidx);
1788 brcmf_fws_macdesc_set_name(fws, entry);
1789 brcmu_pktq_init(&entry->psq, BRCMF_FWS_PSQ_PREC_COUNT,
1791 brcmf_dbg(TRACE, "added %s\n", entry->name);
1794 void brcmf_fws_del_interface(struct brcmf_if *ifp)
1796 struct brcmf_fws_mac_descriptor *entry = ifp->fws_desc;
1802 brcmf_fws_lock(ifp->drvr, flags);
1803 ifp->fws_desc = NULL;
1804 brcmf_dbg(TRACE, "deleting %s\n", entry->name);
1805 brcmf_fws_macdesc_deinit(entry);
1806 brcmf_fws_cleanup(ifp->drvr->fws, ifp->ifidx);
1807 brcmf_fws_unlock(ifp->drvr, flags);
1810 static void brcmf_fws_dequeue_worker(struct work_struct *worker)
1812 struct brcmf_fws_info *fws;
1813 struct sk_buff *skb;
1817 fws = container_of(worker, struct brcmf_fws_info, fws_dequeue_work);
1819 brcmf_fws_lock(fws->drvr, flags);
1820 for (fifo = BRCMF_FWS_FIFO_BCMC; fifo >= 0 && !fws->bus_flow_blocked;
1822 while ((fws->fifo_credit[fifo]) || ((!fws->bcmc_credit_check) &&
1823 (fifo == BRCMF_FWS_FIFO_BCMC))) {
1824 skb = brcmf_fws_deq(fws, fifo);
1827 fws->fifo_credit[fifo]--;
1828 if (brcmf_fws_commit_skb(fws, fifo, skb))
1830 if (fws->bus_flow_blocked)
1833 if ((fifo == BRCMF_FWS_FIFO_AC_BE) &&
1834 (fws->fifo_credit[fifo] == 0) &&
1835 (!fws->bus_flow_blocked)) {
1836 while (brcmf_fws_borrow_credit(fws) == 0) {
1837 skb = brcmf_fws_deq(fws, fifo);
1839 brcmf_fws_return_credits(fws, fifo, 1);
1842 if (brcmf_fws_commit_skb(fws, fifo, skb))
1844 if (fws->bus_flow_blocked)
1849 brcmf_fws_unlock(fws->drvr, flags);
1852 int brcmf_fws_init(struct brcmf_pub *drvr)
1854 u32 tlv = BRCMF_FWS_FLAGS_RSSI_SIGNALS;
1857 if (!drvr->fw_signals)
1860 spin_lock_init(&drvr->fws_spinlock);
1862 drvr->fws = kzalloc(sizeof(*(drvr->fws)), GFP_KERNEL);
1868 /* set linkage back */
1869 drvr->fws->drvr = drvr;
1870 drvr->fws->fcmode = fcmode;
1872 drvr->fws->fws_wq = create_singlethread_workqueue("brcmf_fws_wq");
1873 if (drvr->fws->fws_wq == NULL) {
1874 brcmf_err("workqueue creation failed\n");
1878 INIT_WORK(&drvr->fws->fws_dequeue_work, brcmf_fws_dequeue_worker);
1880 /* enable firmware signalling if fcmode active */
1881 if (drvr->fws->fcmode != BRCMF_FWS_FCMODE_NONE)
1882 tlv |= BRCMF_FWS_FLAGS_XONXOFF_SIGNALS |
1883 BRCMF_FWS_FLAGS_CREDIT_STATUS_SIGNALS |
1884 BRCMF_FWS_FLAGS_HOST_PROPTXSTATUS_ACTIVE;
1886 rc = brcmf_fweh_register(drvr, BRCMF_E_FIFO_CREDIT_MAP,
1887 brcmf_fws_notify_credit_map);
1889 brcmf_err("register credit map handler failed\n");
1892 rc = brcmf_fweh_register(drvr, BRCMF_E_BCMC_CREDIT_SUPPORT,
1893 brcmf_fws_notify_bcmc_credit_support);
1895 brcmf_err("register bcmc credit handler failed\n");
1896 brcmf_fweh_unregister(drvr, BRCMF_E_FIFO_CREDIT_MAP);
1900 /* setting the iovar may fail if feature is unsupported
1901 * so leave the rc as is so driver initialization can
1904 if (brcmf_fil_iovar_int_set(drvr->iflist[0], "tlv", tlv)) {
1905 brcmf_err("failed to set bdcv2 tlv signaling\n");
1909 brcmf_fws_hanger_init(&drvr->fws->hanger);
1910 brcmf_fws_macdesc_init(&drvr->fws->desc.other, NULL, 0);
1911 brcmf_fws_macdesc_set_name(drvr->fws, &drvr->fws->desc.other);
1912 brcmu_pktq_init(&drvr->fws->desc.other.psq, BRCMF_FWS_PSQ_PREC_COUNT,
1915 /* create debugfs file for statistics */
1916 brcmf_debugfs_create_fws_stats(drvr, &drvr->fws->stats);
1918 brcmf_dbg(INFO, "%s bdcv2 tlv signaling [%x]\n",
1919 drvr->fw_signals ? "enabled" : "disabled", tlv);
1923 brcmf_fweh_unregister(drvr, BRCMF_E_BCMC_CREDIT_SUPPORT);
1924 brcmf_fweh_unregister(drvr, BRCMF_E_FIFO_CREDIT_MAP);
1926 brcmf_fws_deinit(drvr);
1930 void brcmf_fws_deinit(struct brcmf_pub *drvr)
1932 struct brcmf_fws_info *fws = drvr->fws;
1938 /* disable firmware signalling entirely
1939 * to avoid using the workqueue.
1941 drvr->fw_signals = false;
1943 if (drvr->fws->fws_wq)
1944 destroy_workqueue(drvr->fws->fws_wq);
1947 brcmf_fws_lock(drvr, flags);
1948 brcmf_fws_cleanup(fws, -1);
1950 brcmf_fws_unlock(drvr, flags);
1952 /* free top structure */
1956 bool brcmf_fws_fc_active(struct brcmf_fws_info *fws)
1961 return fws->fcmode != BRCMF_FWS_FCMODE_NONE;
1964 void brcmf_fws_bustxfail(struct brcmf_fws_info *fws, struct sk_buff *skb)
1969 if (brcmf_skbcb(skb)->state == BRCMF_FWS_SKBSTATE_TIM) {
1970 brcmu_pkt_buf_free_skb(skb);
1973 brcmf_fws_lock(fws->drvr, flags);
1974 hslot = brcmf_skb_htod_tag_get_field(skb, HSLOT);
1975 brcmf_fws_txs_process(fws, BRCMF_FWS_TXSTATUS_HOST_TOSSED, hslot, 0);
1976 brcmf_fws_unlock(fws->drvr, flags);
1979 void brcmf_fws_bus_blocked(struct brcmf_pub *drvr, bool flow_blocked)
1981 struct brcmf_fws_info *fws = drvr->fws;
1983 fws->bus_flow_blocked = flow_blocked;
1985 brcmf_fws_schedule_deq(fws);
1987 fws->stats.bus_flow_block++;