drivers/net/wireless/mwifiex/cmdevt.c

   1 /*
   2  * Marvell Wireless LAN device driver: commands and events
   3  *
   4  * Copyright (C) 2011, Marvell International Ltd.
   5  *
   6  * This software file (the "File") is distributed by Marvell International
   7  * Ltd. under the terms of the GNU General Public License Version 2, June 1991
   8  * (the "License").  You may use, redistribute and/or modify this File in
   9  * accordance with the terms and conditions of the License, a copy of which
  10  * is available by writing to the Free Software Foundation, Inc.,
  11  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
  12  * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
  13  *
  14  * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
  15  * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
  16  * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
  17  * this warranty disclaimer.
  18  */
  19
  20 #include "decl.h"
  21 #include "ioctl.h"
  22 #include "util.h"
  23 #include "fw.h"
  24 #include "main.h"
  25 #include "wmm.h"
  26 #include "11n.h"
  27
  28 /*
  29  * This function initializes a command node.
  30  *
  31  * The actual allocation of the node is not done by this function. It only
  32  * initiates a node by filling it with default parameters. Similarly,
  33  * allocation of the different buffers used (IOCTL buffer, data buffer) are
  34  * not done by this function either.
  35  */
  36 static void
  37 mwifiex_init_cmd_node(struct mwifiex_private *priv,
  38                       struct cmd_ctrl_node *cmd_node,
  39                       u32 cmd_oid, void *data_buf)
  40 {
  41         cmd_node->priv = priv;
  42         cmd_node->cmd_oid = cmd_oid;
  43         if (priv->adapter->cmd_wait_q_required) {
  44                 cmd_node->wait_q_enabled = priv->adapter->cmd_wait_q_required;
  45                 priv->adapter->cmd_wait_q_required = false;
  46                 cmd_node->cmd_wait_q_woken = false;
  47                 cmd_node->condition = &cmd_node->cmd_wait_q_woken;
  48         }
  49         cmd_node->data_buf = data_buf;
  50         cmd_node->cmd_skb = cmd_node->skb;
  51 }
  52
  53 /*
  54  * This function returns a command node from the free queue depending upon
  55  * availability.
  56  */
  57 static struct cmd_ctrl_node *
  58 mwifiex_get_cmd_node(struct mwifiex_adapter *adapter)
  59 {
  60         struct cmd_ctrl_node *cmd_node;
  61         unsigned long flags;
  62
  63         spin_lock_irqsave(&adapter->cmd_free_q_lock, flags);
  64         if (list_empty(&adapter->cmd_free_q)) {
  65                 dev_err(adapter->dev, "GET_CMD_NODE: cmd node not available\n");
  66                 spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
  67                 return NULL;
  68         }
  69         cmd_node = list_first_entry(&adapter->cmd_free_q,
  70                                     struct cmd_ctrl_node, list);
  71         list_del(&cmd_node->list);
  72         spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
  73
  74         return cmd_node;
  75 }
  76
  77 /*
  78  * This function cleans up a command node.
  79  *
  80  * The function resets the fields including the buffer pointers.
  81  * This function does not try to free the buffers. They must be
  82  * freed before calling this function.
  83  *
  84  * This function will however call the receive completion callback
  85  * in case a response buffer is still available before resetting
  86  * the pointer.
  87  */
  88 static void
  89 mwifiex_clean_cmd_node(struct mwifiex_adapter *adapter,
  90                        struct cmd_ctrl_node *cmd_node)
  91 {
  92         cmd_node->cmd_oid = 0;
  93         cmd_node->cmd_flag = 0;
  94         cmd_node->data_buf = NULL;
  95         cmd_node->wait_q_enabled = false;
  96
  97         if (cmd_node->cmd_skb)
  98                 skb_trim(cmd_node->cmd_skb, 0);
  99
 100         if (cmd_node->resp_skb) {
 101                 adapter->if_ops.cmdrsp_complete(adapter, cmd_node->resp_skb);
 102                 cmd_node->resp_skb = NULL;
 103         }
 104 }
 105
 106 /*
 107  * This function sends a host command to the firmware.
 108  *
 109  * The function copies the host command into the driver command
 110  * buffer, which will be transferred to the firmware later by the
 111  * main thread.
 112  */
 113 static int mwifiex_cmd_host_cmd(struct mwifiex_private *priv,
 114                                 struct host_cmd_ds_command *cmd,
 115                                 struct mwifiex_ds_misc_cmd *pcmd_ptr)
 116 {
 117         /* Copy the HOST command to command buffer */
 118         memcpy(cmd, pcmd_ptr->cmd, pcmd_ptr->len);
 119         dev_dbg(priv->adapter->dev, "cmd: host cmd size = %d\n", pcmd_ptr->len);
 120         return 0;
 121 }
 122
 123 /*
 124  * This function downloads a command to the firmware.
 125  *
 126  * The function performs sanity tests, sets the command sequence
 127  * number and size, converts the header fields to CPU format before
 128  * sending. Afterwards, it logs the command ID and action for debugging
 129  * and sets up the command timeout timer.
 130  */
 131 static int mwifiex_dnld_cmd_to_fw(struct mwifiex_private *priv,
 132                                   struct cmd_ctrl_node *cmd_node)
 133 {
 134
 135         struct mwifiex_adapter *adapter = priv->adapter;
 136         int ret;
 137         struct host_cmd_ds_command *host_cmd;
 138         uint16_t cmd_code;
 139         uint16_t cmd_size;
 140         struct timeval tstamp;
 141         unsigned long flags;
 142         __le32 tmp;
 143
 144         if (!adapter || !cmd_node)
 145                 return -1;
 146
 147         host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
 148
 149         /* Sanity test */
 150         if (host_cmd == NULL || host_cmd->size == 0) {
 151                 dev_err(adapter->dev, "DNLD_CMD: host_cmd is null"
 152                         " or cmd size is 0, not sending\n");
 153                 if (cmd_node->wait_q_enabled)
 154                         adapter->cmd_wait_q.status = -1;
 155                 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
 156                 return -1;
 157         }
 158
 159         /* Set command sequence number */
 160         adapter->seq_num++;
 161         host_cmd->seq_num = cpu_to_le16(HostCmd_SET_SEQ_NO_BSS_INFO
 162                                         (adapter->seq_num,
 163                                          cmd_node->priv->bss_num,
 164                                          cmd_node->priv->bss_type));
 165
 166         spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 167         adapter->curr_cmd = cmd_node;
 168         spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 169
 170         cmd_code = le16_to_cpu(host_cmd->command);
 171         cmd_size = le16_to_cpu(host_cmd->size);
 172
 173         skb_trim(cmd_node->cmd_skb, cmd_size);
 174
 175         do_gettimeofday(&tstamp);
 176         dev_dbg(adapter->dev, "cmd: DNLD_CMD: (%lu.%lu): %#x, act %#x, len %d,"
 177                 " seqno %#x\n",
 178                 tstamp.tv_sec, tstamp.tv_usec, cmd_code,
 179                 le16_to_cpu(*(__le16 *) ((u8 *) host_cmd + S_DS_GEN)), cmd_size,
 180                 le16_to_cpu(host_cmd->seq_num));
 181
 182         if (adapter->iface_type == MWIFIEX_USB) {
 183                 tmp = cpu_to_le32(MWIFIEX_USB_TYPE_CMD);
 184                 skb_push(cmd_node->cmd_skb, MWIFIEX_TYPE_LEN);
 185                 memcpy(cmd_node->cmd_skb->data, &tmp, MWIFIEX_TYPE_LEN);
 186                 adapter->cmd_sent = true;
 187                 ret = adapter->if_ops.host_to_card(adapter,
 188                                                    MWIFIEX_USB_EP_CMD_EVENT,
 189                                                    cmd_node->cmd_skb, NULL);
 190                 skb_pull(cmd_node->cmd_skb, MWIFIEX_TYPE_LEN);
 191                 if (ret == -EBUSY)
 192                         cmd_node->cmd_skb = NULL;
 193         } else {
 194                 skb_push(cmd_node->cmd_skb, INTF_HEADER_LEN);
 195                 ret = adapter->if_ops.host_to_card(adapter, MWIFIEX_TYPE_CMD,
 196                                                    cmd_node->cmd_skb, NULL);
 197                 skb_pull(cmd_node->cmd_skb, INTF_HEADER_LEN);
 198         }
 199
 200         if (ret == -1) {
 201                 dev_err(adapter->dev, "DNLD_CMD: host to card failed\n");
 202                 if (adapter->iface_type == MWIFIEX_USB)
 203                         adapter->cmd_sent = false;
 204                 if (cmd_node->wait_q_enabled)
 205                         adapter->cmd_wait_q.status = -1;
 206                 mwifiex_insert_cmd_to_free_q(adapter, adapter->curr_cmd);
 207
 208                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 209                 adapter->curr_cmd = NULL;
 210                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 211
 212                 adapter->dbg.num_cmd_host_to_card_failure++;
 213                 return -1;
 214         }
 215
 216         /* Save the last command id and action to debug log */
 217         adapter->dbg.last_cmd_index =
 218                         (adapter->dbg.last_cmd_index + 1) % DBG_CMD_NUM;
 219         adapter->dbg.last_cmd_id[adapter->dbg.last_cmd_index] = cmd_code;
 220         adapter->dbg.last_cmd_act[adapter->dbg.last_cmd_index] =
 221                         le16_to_cpu(*(__le16 *) ((u8 *) host_cmd + S_DS_GEN));
 222
 223         /* Clear BSS_NO_BITS from HostCmd */
 224         cmd_code &= HostCmd_CMD_ID_MASK;
 225
 226         /* Setup the timer after transmit command */
 227         mod_timer(&adapter->cmd_timer,
 228                   jiffies + (MWIFIEX_TIMER_10S * HZ) / 1000);
 229
 230         return 0;
 231 }
 232
 233 /*
 234  * This function downloads a sleep confirm command to the firmware.
 235  *
 236  * The function performs sanity tests, sets the command sequence
 237  * number and size, converts the header fields to CPU format before
 238  * sending.
 239  *
 240  * No responses are needed for sleep confirm command.
 241  */
 242 static int mwifiex_dnld_sleep_confirm_cmd(struct mwifiex_adapter *adapter)
 243 {
 244         int ret;
 245         struct mwifiex_private *priv;
 246         struct mwifiex_opt_sleep_confirm *sleep_cfm_buf =
 247                                 (struct mwifiex_opt_sleep_confirm *)
 248                                                 adapter->sleep_cfm->data;
 249         struct sk_buff *sleep_cfm_tmp;
 250         __le32 tmp;
 251
 252         priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 253
 254         sleep_cfm_buf->seq_num =
 255                 cpu_to_le16((HostCmd_SET_SEQ_NO_BSS_INFO
 256                                         (adapter->seq_num, priv->bss_num,
 257                                          priv->bss_type)));
 258         adapter->seq_num++;
 259
 260         if (adapter->iface_type == MWIFIEX_USB) {
 261                 sleep_cfm_tmp =
 262                         dev_alloc_skb(sizeof(struct mwifiex_opt_sleep_confirm)
 263                                       + MWIFIEX_TYPE_LEN);
 264                 skb_put(sleep_cfm_tmp, sizeof(struct mwifiex_opt_sleep_confirm)
 265                         + MWIFIEX_TYPE_LEN);
 266                 tmp = cpu_to_le32(MWIFIEX_USB_TYPE_CMD);
 267                 memcpy(sleep_cfm_tmp->data, &tmp, MWIFIEX_TYPE_LEN);
 268                 memcpy(sleep_cfm_tmp->data + MWIFIEX_TYPE_LEN,
 269                        adapter->sleep_cfm->data,
 270                        sizeof(struct mwifiex_opt_sleep_confirm));
 271                 ret = adapter->if_ops.host_to_card(adapter,
 272                                                    MWIFIEX_USB_EP_CMD_EVENT,
 273                                                    sleep_cfm_tmp, NULL);
 274                 if (ret != -EBUSY)
 275                         dev_kfree_skb_any(sleep_cfm_tmp);
 276         } else {
 277                 skb_push(adapter->sleep_cfm, INTF_HEADER_LEN);
 278                 ret = adapter->if_ops.host_to_card(adapter, MWIFIEX_TYPE_CMD,
 279                                                    adapter->sleep_cfm, NULL);
 280                 skb_pull(adapter->sleep_cfm, INTF_HEADER_LEN);
 281         }
 282
 283         if (ret == -1) {
 284                 dev_err(adapter->dev, "SLEEP_CFM: failed\n");
 285                 adapter->dbg.num_cmd_sleep_cfm_host_to_card_failure++;
 286                 return -1;
 287         }
 288         if (GET_BSS_ROLE(mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY))
 289             == MWIFIEX_BSS_ROLE_STA) {
 290                 if (!sleep_cfm_buf->resp_ctrl)
 291                         /* Response is not needed for sleep
 292                            confirm command */
 293                         adapter->ps_state = PS_STATE_SLEEP;
 294                 else
 295                         adapter->ps_state = PS_STATE_SLEEP_CFM;
 296
 297                 if (!sleep_cfm_buf->resp_ctrl &&
 298                     (adapter->is_hs_configured &&
 299                      !adapter->sleep_period.period)) {
 300                         adapter->pm_wakeup_card_req = true;
 301                         mwifiex_hs_activated_event(mwifiex_get_priv
 302                                         (adapter, MWIFIEX_BSS_ROLE_STA), true);
 303                 }
 304         }
 305
 306         return ret;
 307 }
 308
 309 /*
 310  * This function allocates the command buffers and links them to
 311  * the command free queue.
 312  *
 313  * The driver uses a pre allocated number of command buffers, which
 314  * are created at driver initializations and freed at driver cleanup.
 315  * Every command needs to obtain a command buffer from this pool before
 316  * it can be issued. The command free queue lists the command buffers
 317  * currently free to use, while the command pending queue lists the
 318  * command buffers already in use and awaiting handling. Command buffers
 319  * are returned to the free queue after use.
 320  */
 321 int mwifiex_alloc_cmd_buffer(struct mwifiex_adapter *adapter)
 322 {
 323         struct cmd_ctrl_node *cmd_array;
 324         u32 buf_size;
 325         u32 i;
 326
 327         /* Allocate and initialize struct cmd_ctrl_node */
 328         buf_size = sizeof(struct cmd_ctrl_node) * MWIFIEX_NUM_OF_CMD_BUFFER;
 329         cmd_array = kzalloc(buf_size, GFP_KERNEL);
 330         if (!cmd_array) {
 331                 dev_err(adapter->dev, "%s: failed to alloc cmd_array\n",
 332                         __func__);
 333                 return -ENOMEM;
 334         }
 335
 336         adapter->cmd_pool = cmd_array;
 337         memset(adapter->cmd_pool, 0, buf_size);
 338
 339         /* Allocate and initialize command buffers */
 340         for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++) {
 341                 cmd_array[i].skb = dev_alloc_skb(MWIFIEX_SIZE_OF_CMD_BUFFER);
 342                 if (!cmd_array[i].skb) {
 343                         dev_err(adapter->dev, "ALLOC_CMD_BUF: out of memory\n");
 344                         return -1;
 345                 }
 346         }
 347
 348         for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++)
 349                 mwifiex_insert_cmd_to_free_q(adapter, &cmd_array[i]);
 350
 351         return 0;
 352 }
 353
 354 /*
 355  * This function frees the command buffers.
 356  *
 357  * The function calls the completion callback for all the command
 358  * buffers that still have response buffers associated with them.
 359  */
 360 int mwifiex_free_cmd_buffer(struct mwifiex_adapter *adapter)
 361 {
 362         struct cmd_ctrl_node *cmd_array;
 363         u32 i;
 364
 365         /* Need to check if cmd pool is allocated or not */
 366         if (!adapter->cmd_pool) {
 367                 dev_dbg(adapter->dev, "info: FREE_CMD_BUF: cmd_pool is null\n");
 368                 return 0;
 369         }
 370
 371         cmd_array = adapter->cmd_pool;
 372
 373         /* Release shared memory buffers */
 374         for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++) {
 375                 if (cmd_array[i].skb) {
 376                         dev_dbg(adapter->dev, "cmd: free cmd buffer %d\n", i);
 377                         dev_kfree_skb_any(cmd_array[i].skb);
 378                 }
 379                 if (!cmd_array[i].resp_skb)
 380                         continue;
 381
 382                 if (adapter->iface_type == MWIFIEX_USB)
 383                         adapter->if_ops.cmdrsp_complete(adapter,
 384                                                         cmd_array[i].resp_skb);
 385                 else
 386                         dev_kfree_skb_any(cmd_array[i].resp_skb);
 387         }
 388         /* Release struct cmd_ctrl_node */
 389         if (adapter->cmd_pool) {
 390                 dev_dbg(adapter->dev, "cmd: free cmd pool\n");
 391                 kfree(adapter->cmd_pool);
 392                 adapter->cmd_pool = NULL;
 393         }
 394
 395         return 0;
 396 }
 397
 398 /*
 399  * This function handles events generated by firmware.
 400  *
 401  * Event body of events received from firmware are not used (though they are
 402  * saved), only the event ID is used. Some events are re-invoked by
 403  * the driver, with a new event body.
 404  *
 405  * After processing, the function calls the completion callback
 406  * for cleanup.
 407  */
 408 int mwifiex_process_event(struct mwifiex_adapter *adapter)
 409 {
 410         int ret;
 411         struct mwifiex_private *priv =
 412                 mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 413         struct sk_buff *skb = adapter->event_skb;
 414         u32 eventcause = adapter->event_cause;
 415         struct timeval tstamp;
 416         struct mwifiex_rxinfo *rx_info;
 417
 418         /* Save the last event to debug log */
 419         adapter->dbg.last_event_index =
 420                         (adapter->dbg.last_event_index + 1) % DBG_CMD_NUM;
 421         adapter->dbg.last_event[adapter->dbg.last_event_index] =
 422                                                         (u16) eventcause;
 423
 424         /* Get BSS number and corresponding priv */
 425         priv = mwifiex_get_priv_by_id(adapter, EVENT_GET_BSS_NUM(eventcause),
 426                                       EVENT_GET_BSS_TYPE(eventcause));
 427         if (!priv)
 428                 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 429         /* Clear BSS_NO_BITS from event */
 430         eventcause &= EVENT_ID_MASK;
 431         adapter->event_cause = eventcause;
 432
 433         if (skb) {
 434                 rx_info = MWIFIEX_SKB_RXCB(skb);
 435                 rx_info->bss_num = priv->bss_num;
 436                 rx_info->bss_type = priv->bss_type;
 437         }
 438
 439         if (eventcause != EVENT_PS_SLEEP && eventcause != EVENT_PS_AWAKE) {
 440                 do_gettimeofday(&tstamp);
 441                 dev_dbg(adapter->dev, "event: %lu.%lu: cause: %#x\n",
 442                         tstamp.tv_sec, tstamp.tv_usec, eventcause);
 443         } else {
 444                 /* Handle PS_SLEEP/AWAKE events on STA */
 445                 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_STA);
 446                 if (!priv)
 447                         priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 448         }
 449
 450         ret = mwifiex_process_sta_event(priv);
 451
 452         adapter->event_cause = 0;
 453         adapter->event_skb = NULL;
 454         adapter->if_ops.event_complete(adapter, skb);
 455
 456         return ret;
 457 }
 458
 459 /*
 460  * This function is used to send synchronous command to the firmware.
 461  *
 462  * it allocates a wait queue for the command and wait for the command
 463  * response.
 464  */
 465 int mwifiex_send_cmd_sync(struct mwifiex_private *priv, uint16_t cmd_no,
 466                           u16 cmd_action, u32 cmd_oid, void *data_buf)
 467 {
 468         int ret = 0;
 469         struct mwifiex_adapter *adapter = priv->adapter;
 470
 471         adapter->cmd_wait_q_required = true;
 472
 473         ret = mwifiex_send_cmd_async(priv, cmd_no, cmd_action, cmd_oid,
 474                                      data_buf);
 475         if (!ret)
 476                 ret = mwifiex_wait_queue_complete(adapter);
 477
 478         return ret;
 479 }
 480
 481
 482 /*
 483  * This function prepares a command and asynchronously send it to the firmware.
 484  *
 485  * Preparation includes -
 486  *      - Sanity tests to make sure the card is still present or the FW
 487  *        is not reset
 488  *      - Getting a new command node from the command free queue
 489  *      - Initializing the command node for default parameters
 490  *      - Fill up the non-default parameters and buffer pointers
 491  *      - Add the command to pending queue
 492  */
 493 int mwifiex_send_cmd_async(struct mwifiex_private *priv, uint16_t cmd_no,
 494                            u16 cmd_action, u32 cmd_oid, void *data_buf)
 495 {
 496         int ret;
 497         struct mwifiex_adapter *adapter = priv->adapter;
 498         struct cmd_ctrl_node *cmd_node;
 499         struct host_cmd_ds_command *cmd_ptr;
 500
 501         if (!adapter) {
 502                 pr_err("PREP_CMD: adapter is NULL\n");
 503                 return -1;
 504         }
 505
 506         if (adapter->is_suspended) {
 507                 dev_err(adapter->dev, "PREP_CMD: device in suspended state\n");
 508                 return -1;
 509         }
 510
 511         if (adapter->surprise_removed) {
 512                 dev_err(adapter->dev, "PREP_CMD: card is removed\n");
 513                 return -1;
 514         }
 515
 516         if (adapter->hw_status == MWIFIEX_HW_STATUS_RESET) {
 517                 if (cmd_no != HostCmd_CMD_FUNC_INIT) {
 518                         dev_err(adapter->dev, "PREP_CMD: FW in reset state\n");
 519                         return -1;
 520                 }
 521         }
 522
 523         /* Get a new command node */
 524         cmd_node = mwifiex_get_cmd_node(adapter);
 525
 526         if (!cmd_node) {
 527                 dev_err(adapter->dev, "PREP_CMD: no free cmd node\n");
 528                 return -1;
 529         }
 530
 531         /* Initialize the command node */
 532         mwifiex_init_cmd_node(priv, cmd_node, cmd_oid, data_buf);
 533
 534         if (!cmd_node->cmd_skb) {
 535                 dev_err(adapter->dev, "PREP_CMD: no free cmd buf\n");
 536                 return -1;
 537         }
 538
 539         memset(skb_put(cmd_node->cmd_skb, sizeof(struct host_cmd_ds_command)),
 540                0, sizeof(struct host_cmd_ds_command));
 541
 542         cmd_ptr = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
 543         cmd_ptr->command = cpu_to_le16(cmd_no);
 544         cmd_ptr->result = 0;
 545
 546         /* Prepare command */
 547         if (cmd_no) {
 548                 switch (cmd_no) {
 549                 case HostCmd_CMD_UAP_SYS_CONFIG:
 550                 case HostCmd_CMD_UAP_BSS_START:
 551                 case HostCmd_CMD_UAP_BSS_STOP:
 552                         ret = mwifiex_uap_prepare_cmd(priv, cmd_no, cmd_action,
 553                                                       cmd_oid, data_buf,
 554                                                       cmd_ptr);
 555                         break;
 556                 default:
 557                         ret = mwifiex_sta_prepare_cmd(priv, cmd_no, cmd_action,
 558                                                       cmd_oid, data_buf,
 559                                                       cmd_ptr);
 560                         break;
 561                 }
 562         } else {
 563                 ret = mwifiex_cmd_host_cmd(priv, cmd_ptr, data_buf);
 564                 cmd_node->cmd_flag |= CMD_F_HOSTCMD;
 565         }
 566
 567         /* Return error, since the command preparation failed */
 568         if (ret) {
 569                 dev_err(adapter->dev, "PREP_CMD: cmd %#x preparation failed\n",
 570                         cmd_no);
 571                 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
 572                 return -1;
 573         }
 574
 575         /* Send command */
 576         if (cmd_no == HostCmd_CMD_802_11_SCAN) {
 577                 mwifiex_queue_scan_cmd(priv, cmd_node);
 578         } else {
 579                 adapter->cmd_queued = cmd_node;
 580                 mwifiex_insert_cmd_to_pending_q(adapter, cmd_node, true);
 581                 queue_work(adapter->workqueue, &adapter->main_work);
 582         }
 583
 584         return ret;
 585 }
 586
 587 /*
 588  * This function returns a command to the command free queue.
 589  *
 590  * The function also calls the completion callback if required, before
 591  * cleaning the command node and re-inserting it into the free queue.
 592  */
 593 void
 594 mwifiex_insert_cmd_to_free_q(struct mwifiex_adapter *adapter,
 595                              struct cmd_ctrl_node *cmd_node)
 596 {
 597         unsigned long flags;
 598
 599         if (!cmd_node)
 600                 return;
 601
 602         if (cmd_node->wait_q_enabled)
 603                 mwifiex_complete_cmd(adapter, cmd_node);
 604         /* Clean the node */
 605         mwifiex_clean_cmd_node(adapter, cmd_node);
 606
 607         /* Insert node into cmd_free_q */
 608         spin_lock_irqsave(&adapter->cmd_free_q_lock, flags);
 609         list_add_tail(&cmd_node->list, &adapter->cmd_free_q);
 610         spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
 611 }
 612
 613 /*
 614  * This function queues a command to the command pending queue.
 615  *
 616  * This in effect adds the command to the command list to be executed.
 617  * Exit PS command is handled specially, by placing it always to the
 618  * front of the command queue.
 619  */
 620 void
 621 mwifiex_insert_cmd_to_pending_q(struct mwifiex_adapter *adapter,
 622                                 struct cmd_ctrl_node *cmd_node, u32 add_tail)
 623 {
 624         struct host_cmd_ds_command *host_cmd = NULL;
 625         u16 command;
 626         unsigned long flags;
 627
 628         host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
 629         if (!host_cmd) {
 630                 dev_err(adapter->dev, "QUEUE_CMD: host_cmd is NULL\n");
 631                 return;
 632         }
 633
 634         command = le16_to_cpu(host_cmd->command);
 635
 636         /* Exit_PS command needs to be queued in the header always. */
 637         if (command == HostCmd_CMD_802_11_PS_MODE_ENH) {
 638                 struct host_cmd_ds_802_11_ps_mode_enh *pm =
 639                                                 &host_cmd->params.psmode_enh;
 640                 if ((le16_to_cpu(pm->action) == DIS_PS) ||
 641                     (le16_to_cpu(pm->action) == DIS_AUTO_PS)) {
 642                         if (adapter->ps_state != PS_STATE_AWAKE)
 643                                 add_tail = false;
 644                 }
 645         }
 646
 647         spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
 648         if (add_tail)
 649                 list_add_tail(&cmd_node->list, &adapter->cmd_pending_q);
 650         else
 651                 list_add(&cmd_node->list, &adapter->cmd_pending_q);
 652         spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
 653
 654         dev_dbg(adapter->dev, "cmd: QUEUE_CMD: cmd=%#x is queued\n", command);
 655 }
 656
 657 /*
 658  * This function executes the next command in command pending queue.
 659  *
 660  * This function will fail if a command is already in processing stage,
 661  * otherwise it will dequeue the first command from the command pending
 662  * queue and send to the firmware.
 663  *
 664  * If the device is currently in host sleep mode, any commands, except the
 665  * host sleep configuration command will de-activate the host sleep. For PS
 666  * mode, the function will put the firmware back to sleep if applicable.
 667  */
 668 int mwifiex_exec_next_cmd(struct mwifiex_adapter *adapter)
 669 {
 670         struct mwifiex_private *priv;
 671         struct cmd_ctrl_node *cmd_node;
 672         int ret = 0;
 673         struct host_cmd_ds_command *host_cmd;
 674         unsigned long cmd_flags;
 675         unsigned long cmd_pending_q_flags;
 676
 677         /* Check if already in processing */
 678         if (adapter->curr_cmd) {
 679                 dev_err(adapter->dev, "EXEC_NEXT_CMD: cmd in processing\n");
 680                 return -1;
 681         }
 682
 683         spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
 684         /* Check if any command is pending */
 685         spin_lock_irqsave(&adapter->cmd_pending_q_lock, cmd_pending_q_flags);
 686         if (list_empty(&adapter->cmd_pending_q)) {
 687                 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
 688                                        cmd_pending_q_flags);
 689                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
 690                 return 0;
 691         }
 692         cmd_node = list_first_entry(&adapter->cmd_pending_q,
 693                                     struct cmd_ctrl_node, list);
 694         spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
 695                                cmd_pending_q_flags);
 696
 697         host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
 698         priv = cmd_node->priv;
 699
 700         if (adapter->ps_state != PS_STATE_AWAKE) {
 701                 dev_err(adapter->dev, "%s: cannot send cmd in sleep state,"
 702                                 " this should not happen\n", __func__);
 703                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
 704                 return ret;
 705         }
 706
 707         spin_lock_irqsave(&adapter->cmd_pending_q_lock, cmd_pending_q_flags);
 708         list_del(&cmd_node->list);
 709         spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
 710                                cmd_pending_q_flags);
 711
 712         spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
 713         ret = mwifiex_dnld_cmd_to_fw(priv, cmd_node);
 714         priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 715         /* Any command sent to the firmware when host is in sleep
 716          * mode should de-configure host sleep. We should skip the
 717          * host sleep configuration command itself though
 718          */
 719         if (priv && (host_cmd->command !=
 720              cpu_to_le16(HostCmd_CMD_802_11_HS_CFG_ENH))) {
 721                 if (adapter->hs_activated) {
 722                         adapter->is_hs_configured = false;
 723                         mwifiex_hs_activated_event(priv, false);
 724                 }
 725         }
 726
 727         return ret;
 728 }
 729
 730 /*
 731  * This function handles the command response.
 732  *
 733  * After processing, the function cleans the command node and puts
 734  * it back to the command free queue.
 735  */
 736 int mwifiex_process_cmdresp(struct mwifiex_adapter *adapter)
 737 {
 738         struct host_cmd_ds_command *resp;
 739         struct mwifiex_private *priv =
 740                 mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 741         int ret = 0;
 742         uint16_t orig_cmdresp_no;
 743         uint16_t cmdresp_no;
 744         uint16_t cmdresp_result;
 745         struct timeval tstamp;
 746         unsigned long flags;
 747
 748         /* Now we got response from FW, cancel the command timer */
 749         del_timer(&adapter->cmd_timer);
 750
 751         if (!adapter->curr_cmd || !adapter->curr_cmd->resp_skb) {
 752                 resp = (struct host_cmd_ds_command *) adapter->upld_buf;
 753                 dev_err(adapter->dev, "CMD_RESP: NULL curr_cmd, %#x\n",
 754                         le16_to_cpu(resp->command));
 755                 return -1;
 756         }
 757
 758         adapter->num_cmd_timeout = 0;
 759
 760         resp = (struct host_cmd_ds_command *) adapter->curr_cmd->resp_skb->data;
 761         if (adapter->curr_cmd->cmd_flag & CMD_F_CANCELED) {
 762                 dev_err(adapter->dev, "CMD_RESP: %#x been canceled\n",
 763                         le16_to_cpu(resp->command));
 764                 mwifiex_insert_cmd_to_free_q(adapter, adapter->curr_cmd);
 765                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 766                 adapter->curr_cmd = NULL;
 767                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 768                 return -1;
 769         }
 770
 771         if (adapter->curr_cmd->cmd_flag & CMD_F_HOSTCMD) {
 772                 /* Copy original response back to response buffer */
 773                 struct mwifiex_ds_misc_cmd *hostcmd;
 774                 uint16_t size = le16_to_cpu(resp->size);
 775                 dev_dbg(adapter->dev, "info: host cmd resp size = %d\n", size);
 776                 size = min_t(u16, size, MWIFIEX_SIZE_OF_CMD_BUFFER);
 777                 if (adapter->curr_cmd->data_buf) {
 778                         hostcmd = adapter->curr_cmd->data_buf;
 779                         hostcmd->len = size;
 780                         memcpy(hostcmd->cmd, resp, size);
 781                 }
 782         }
 783         orig_cmdresp_no = le16_to_cpu(resp->command);
 784
 785         /* Get BSS number and corresponding priv */
 786         priv = mwifiex_get_priv_by_id(adapter,
 787                              HostCmd_GET_BSS_NO(le16_to_cpu(resp->seq_num)),
 788                              HostCmd_GET_BSS_TYPE(le16_to_cpu(resp->seq_num)));
 789         if (!priv)
 790                 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 791         /* Clear RET_BIT from HostCmd */
 792         resp->command = cpu_to_le16(orig_cmdresp_no & HostCmd_CMD_ID_MASK);
 793
 794         cmdresp_no = le16_to_cpu(resp->command);
 795         cmdresp_result = le16_to_cpu(resp->result);
 796
 797         /* Save the last command response to debug log */
 798         adapter->dbg.last_cmd_resp_index =
 799                         (adapter->dbg.last_cmd_resp_index + 1) % DBG_CMD_NUM;
 800         adapter->dbg.last_cmd_resp_id[adapter->dbg.last_cmd_resp_index] =
 801                                                                 orig_cmdresp_no;
 802
 803         do_gettimeofday(&tstamp);
 804         dev_dbg(adapter->dev, "cmd: CMD_RESP: (%lu.%lu): 0x%x, result %d,"
 805                 " len %d, seqno 0x%x\n",
 806                tstamp.tv_sec, tstamp.tv_usec, orig_cmdresp_no, cmdresp_result,
 807                le16_to_cpu(resp->size), le16_to_cpu(resp->seq_num));
 808
 809         if (!(orig_cmdresp_no & HostCmd_RET_BIT)) {
 810                 dev_err(adapter->dev, "CMD_RESP: invalid cmd resp\n");
 811                 if (adapter->curr_cmd->wait_q_enabled)
 812                         adapter->cmd_wait_q.status = -1;
 813
 814                 mwifiex_insert_cmd_to_free_q(adapter, adapter->curr_cmd);
 815                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 816                 adapter->curr_cmd = NULL;
 817                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 818                 return -1;
 819         }
 820
 821         if (adapter->curr_cmd->cmd_flag & CMD_F_HOSTCMD) {
 822                 adapter->curr_cmd->cmd_flag &= ~CMD_F_HOSTCMD;
 823                 if ((cmdresp_result == HostCmd_RESULT_OK) &&
 824                     (cmdresp_no == HostCmd_CMD_802_11_HS_CFG_ENH))
 825                         ret = mwifiex_ret_802_11_hs_cfg(priv, resp);
 826         } else {
 827                 /* handle response */
 828                 ret = mwifiex_process_sta_cmdresp(priv, cmdresp_no, resp);
 829         }
 830
 831         /* Check init command response */
 832         if (adapter->hw_status == MWIFIEX_HW_STATUS_INITIALIZING) {
 833                 if (ret) {
 834                         dev_err(adapter->dev, "%s: cmd %#x failed during "
 835                                 "initialization\n", __func__, cmdresp_no);
 836                         mwifiex_init_fw_complete(adapter);
 837                         return -1;
 838                 } else if (adapter->last_init_cmd == cmdresp_no)
 839                         adapter->hw_status = MWIFIEX_HW_STATUS_INIT_DONE;
 840         }
 841
 842         if (adapter->curr_cmd) {
 843                 if (adapter->curr_cmd->wait_q_enabled)
 844                         adapter->cmd_wait_q.status = ret;
 845
 846                 /* Clean up and put current command back to cmd_free_q */
 847                 mwifiex_insert_cmd_to_free_q(adapter, adapter->curr_cmd);
 848
 849                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 850                 adapter->curr_cmd = NULL;
 851                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 852         }
 853
 854         return ret;
 855 }
 856
 857 /*
 858  * This function handles the timeout of command sending.
 859  *
 860  * It will re-send the same command again.
 861  */
 862 void
 863 mwifiex_cmd_timeout_func(unsigned long function_context)
 864 {
 865         struct mwifiex_adapter *adapter =
 866                 (struct mwifiex_adapter *) function_context;
 867         struct cmd_ctrl_node *cmd_node;
 868         struct timeval tstamp;
 869
 870         adapter->num_cmd_timeout++;
 871         adapter->dbg.num_cmd_timeout++;
 872         if (!adapter->curr_cmd) {
 873                 dev_dbg(adapter->dev, "cmd: empty curr_cmd\n");
 874                 return;
 875         }
 876         cmd_node = adapter->curr_cmd;
 877         if (cmd_node->wait_q_enabled)
 878                 adapter->cmd_wait_q.status = -ETIMEDOUT;
 879
 880         if (cmd_node) {
 881                 adapter->dbg.timeout_cmd_id =
 882                         adapter->dbg.last_cmd_id[adapter->dbg.last_cmd_index];
 883                 adapter->dbg.timeout_cmd_act =
 884                         adapter->dbg.last_cmd_act[adapter->dbg.last_cmd_index];
 885                 do_gettimeofday(&tstamp);
 886                 dev_err(adapter->dev,
 887                         "%s: Timeout cmd id (%lu.%lu) = %#x, act = %#x\n",
 888                         __func__, tstamp.tv_sec, tstamp.tv_usec,
 889                         adapter->dbg.timeout_cmd_id,
 890                         adapter->dbg.timeout_cmd_act);
 891
 892                 dev_err(adapter->dev, "num_data_h2c_failure = %d\n",
 893                         adapter->dbg.num_tx_host_to_card_failure);
 894                 dev_err(adapter->dev, "num_cmd_h2c_failure = %d\n",
 895                         adapter->dbg.num_cmd_host_to_card_failure);
 896
 897                 dev_err(adapter->dev, "num_cmd_timeout = %d\n",
 898                         adapter->dbg.num_cmd_timeout);
 899                 dev_err(adapter->dev, "num_tx_timeout = %d\n",
 900                         adapter->dbg.num_tx_timeout);
 901
 902                 dev_err(adapter->dev, "last_cmd_index = %d\n",
 903                         adapter->dbg.last_cmd_index);
 904                 print_hex_dump_bytes("last_cmd_id: ", DUMP_PREFIX_OFFSET,
 905                                      adapter->dbg.last_cmd_id, DBG_CMD_NUM);
 906                 print_hex_dump_bytes("last_cmd_act: ", DUMP_PREFIX_OFFSET,
 907                                      adapter->dbg.last_cmd_act, DBG_CMD_NUM);
 908
 909                 dev_err(adapter->dev, "last_cmd_resp_index = %d\n",
 910                         adapter->dbg.last_cmd_resp_index);
 911                 print_hex_dump_bytes("last_cmd_resp_id: ", DUMP_PREFIX_OFFSET,
 912                                      adapter->dbg.last_cmd_resp_id,
 913                                      DBG_CMD_NUM);
 914
 915                 dev_err(adapter->dev, "last_event_index = %d\n",
 916                         adapter->dbg.last_event_index);
 917                 print_hex_dump_bytes("last_event: ", DUMP_PREFIX_OFFSET,
 918                                      adapter->dbg.last_event, DBG_CMD_NUM);
 919
 920                 dev_err(adapter->dev, "data_sent=%d cmd_sent=%d\n",
 921                         adapter->data_sent, adapter->cmd_sent);
 922
 923                 dev_err(adapter->dev, "ps_mode=%d ps_state=%d\n",
 924                         adapter->ps_mode, adapter->ps_state);
 925         }
 926         if (adapter->hw_status == MWIFIEX_HW_STATUS_INITIALIZING)
 927                 mwifiex_init_fw_complete(adapter);
 928 }
 929
 930 /*
 931  * This function cancels all the pending commands.
 932  *
 933  * The current command, all commands in command pending queue and all scan
 934  * commands in scan pending queue are cancelled. All the completion callbacks
 935  * are called with failure status to ensure cleanup.
 936  */
 937 void
 938 mwifiex_cancel_all_pending_cmd(struct mwifiex_adapter *adapter)
 939 {
 940         struct cmd_ctrl_node *cmd_node = NULL, *tmp_node;
 941         unsigned long flags;
 942
 943         /* Cancel current cmd */
 944         if ((adapter->curr_cmd) && (adapter->curr_cmd->wait_q_enabled)) {
 945                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 946                 adapter->curr_cmd->wait_q_enabled = false;
 947                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 948                 adapter->cmd_wait_q.status = -1;
 949                 mwifiex_complete_cmd(adapter, adapter->curr_cmd);
 950         }
 951         /* Cancel all pending command */
 952         spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
 953         list_for_each_entry_safe(cmd_node, tmp_node,
 954                                  &adapter->cmd_pending_q, list) {
 955                 list_del(&cmd_node->list);
 956                 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
 957
 958                 if (cmd_node->wait_q_enabled) {
 959                         adapter->cmd_wait_q.status = -1;
 960                         mwifiex_complete_cmd(adapter, cmd_node);
 961                         cmd_node->wait_q_enabled = false;
 962                 }
 963                 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
 964                 spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
 965         }
 966         spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
 967
 968         /* Cancel all pending scan command */
 969         spin_lock_irqsave(&adapter->scan_pending_q_lock, flags);
 970         list_for_each_entry_safe(cmd_node, tmp_node,
 971                                  &adapter->scan_pending_q, list) {
 972                 list_del(&cmd_node->list);
 973                 spin_unlock_irqrestore(&adapter->scan_pending_q_lock, flags);
 974
 975                 cmd_node->wait_q_enabled = false;
 976                 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
 977                 spin_lock_irqsave(&adapter->scan_pending_q_lock, flags);
 978         }
 979         spin_unlock_irqrestore(&adapter->scan_pending_q_lock, flags);
 980
 981         spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 982         adapter->scan_processing = false;
 983         spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 984 }
 985
 986 /*
 987  * This function cancels all pending commands that matches with
 988  * the given IOCTL request.
 989  *
 990  * Both the current command buffer and the pending command queue are
 991  * searched for matching IOCTL request. The completion callback of
 992  * the matched command is called with failure status to ensure cleanup.
 993  * In case of scan commands, all pending commands in scan pending queue
 994  * are cancelled.
 995  */
 996 void
 997 mwifiex_cancel_pending_ioctl(struct mwifiex_adapter *adapter)
 998 {
 999         struct cmd_ctrl_node *cmd_node = NULL, *tmp_node = NULL;
1000         unsigned long cmd_flags;
1001         unsigned long scan_pending_q_flags;
1002         uint16_t cancel_scan_cmd = false;
1003
1004         if ((adapter->curr_cmd) &&
1005             (adapter->curr_cmd->wait_q_enabled)) {
1006                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
1007                 cmd_node = adapter->curr_cmd;
1008                 cmd_node->wait_q_enabled = false;
1009                 cmd_node->cmd_flag |= CMD_F_CANCELED;
1010                 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
1011                 mwifiex_complete_cmd(adapter, adapter->curr_cmd);
1012                 adapter->curr_cmd = NULL;
1013                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
1014         }
1015
1016         /* Cancel all pending scan command */
1017         spin_lock_irqsave(&adapter->scan_pending_q_lock,
1018                           scan_pending_q_flags);
1019         list_for_each_entry_safe(cmd_node, tmp_node,
1020                                  &adapter->scan_pending_q, list) {
1021                 list_del(&cmd_node->list);
1022                 spin_unlock_irqrestore(&adapter->scan_pending_q_lock,
1023                                        scan_pending_q_flags);
1024                 cmd_node->wait_q_enabled = false;
1025                 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
1026                 spin_lock_irqsave(&adapter->scan_pending_q_lock,
1027                                   scan_pending_q_flags);
1028                 cancel_scan_cmd = true;
1029         }
1030         spin_unlock_irqrestore(&adapter->scan_pending_q_lock,
1031                                scan_pending_q_flags);
1032
1033         if (cancel_scan_cmd) {
1034                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
1035                 adapter->scan_processing = false;
1036                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
1037         }
1038         adapter->cmd_wait_q.status = -1;
1039 }
1040
1041 /*
1042  * This function sends the sleep confirm command to firmware, if
1043  * possible.
1044  *
1045  * The sleep confirm command cannot be issued if command response,
1046  * data response or event response is awaiting handling, or if we
1047  * are in the middle of sending a command, or expecting a command
1048  * response.
1049  */
1050 void
1051 mwifiex_check_ps_cond(struct mwifiex_adapter *adapter)
1052 {
1053         if (!adapter->cmd_sent &&
1054             !adapter->curr_cmd && !IS_CARD_RX_RCVD(adapter))
1055                 mwifiex_dnld_sleep_confirm_cmd(adapter);
1056         else
1057                 dev_dbg(adapter->dev,
1058                         "cmd: Delay Sleep Confirm (%s%s%s)\n",
1059                         (adapter->cmd_sent) ? "D" : "",
1060                         (adapter->curr_cmd) ? "C" : "",
1061                         (IS_CARD_RX_RCVD(adapter)) ? "R" : "");
1062 }
1063
1064 /*
1065  * This function sends a Host Sleep activated event to applications.
1066  *
1067  * This event is generated by the driver, with a blank event body.
1068  */
1069 void
1070 mwifiex_hs_activated_event(struct mwifiex_private *priv, u8 activated)
1071 {
1072         if (activated) {
1073                 if (priv->adapter->is_hs_configured) {
1074                         priv->adapter->hs_activated = true;
1075                         dev_dbg(priv->adapter->dev, "event: hs_activated\n");
1076                         priv->adapter->hs_activate_wait_q_woken = true;
1077                         wake_up_interruptible(
1078                                 &priv->adapter->hs_activate_wait_q);
1079                 } else {
1080                         dev_dbg(priv->adapter->dev, "event: HS not configured\n");
1081                 }
1082         } else {
1083                 dev_dbg(priv->adapter->dev, "event: hs_deactivated\n");
1084                 priv->adapter->hs_activated = false;
1085         }
1086 }
1087
1088 /*
1089  * This function handles the command response of a Host Sleep configuration
1090  * command.
1091  *
1092  * Handling includes changing the header fields into CPU format
1093  * and setting the current host sleep activation status in driver.
1094  *
1095  * In case host sleep status change, the function generates an event to
1096  * notify the applications.
1097  */
1098 int mwifiex_ret_802_11_hs_cfg(struct mwifiex_private *priv,
1099                               struct host_cmd_ds_command *resp)
1100 {
1101         struct mwifiex_adapter *adapter = priv->adapter;
1102         struct host_cmd_ds_802_11_hs_cfg_enh *phs_cfg =
1103                 &resp->params.opt_hs_cfg;
1104         uint32_t conditions = le32_to_cpu(phs_cfg->params.hs_config.conditions);
1105
1106         if (phs_cfg->action == cpu_to_le16(HS_ACTIVATE) &&
1107             adapter->iface_type == MWIFIEX_SDIO) {
1108                 mwifiex_hs_activated_event(priv, true);
1109                 return 0;
1110         } else {
1111                 dev_dbg(adapter->dev, "cmd: CMD_RESP: HS_CFG cmd reply"
1112                         " result=%#x, conditions=0x%x gpio=0x%x gap=0x%x\n",
1113                         resp->result, conditions,
1114                         phs_cfg->params.hs_config.gpio,
1115                         phs_cfg->params.hs_config.gap);
1116         }
1117         if (conditions != HOST_SLEEP_CFG_CANCEL) {
1118                 adapter->is_hs_configured = true;
1119                 if (adapter->iface_type == MWIFIEX_USB ||
1120                     adapter->iface_type == MWIFIEX_PCIE)
1121                         mwifiex_hs_activated_event(priv, true);
1122         } else {
1123                 adapter->is_hs_configured = false;
1124                 if (adapter->hs_activated)
1125                         mwifiex_hs_activated_event(priv, false);
1126         }
1127
1128         return 0;
1129 }
1130
1131 /*
1132  * This function wakes up the adapter and generates a Host Sleep
1133  * cancel event on receiving the power up interrupt.
1134  */
1135 void
1136 mwifiex_process_hs_config(struct mwifiex_adapter *adapter)
1137 {
1138         dev_dbg(adapter->dev, "info: %s: auto cancelling host sleep"
1139                 " since there is interrupt from the firmware\n", __func__);
1140
1141         adapter->if_ops.wakeup(adapter);
1142         adapter->hs_activated = false;
1143         adapter->is_hs_configured = false;
1144         mwifiex_hs_activated_event(mwifiex_get_priv(adapter,
1145                                                     MWIFIEX_BSS_ROLE_ANY),
1146                                    false);
1147 }
1148 EXPORT_SYMBOL_GPL(mwifiex_process_hs_config);
1149
1150 /*
1151  * This function handles the command response of a sleep confirm command.
1152  *
1153  * The function sets the card state to SLEEP if the response indicates success.
1154  */
1155 void
1156 mwifiex_process_sleep_confirm_resp(struct mwifiex_adapter *adapter,
1157                                    u8 *pbuf, u32 upld_len)
1158 {
1159         struct host_cmd_ds_command *cmd = (struct host_cmd_ds_command *) pbuf;
1160         struct mwifiex_private *priv =
1161                 mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
1162         uint16_t result = le16_to_cpu(cmd->result);
1163         uint16_t command = le16_to_cpu(cmd->command);
1164         uint16_t seq_num = le16_to_cpu(cmd->seq_num);
1165
1166         if (!upld_len) {
1167                 dev_err(adapter->dev, "%s: cmd size is 0\n", __func__);
1168                 return;
1169         }
1170
1171         /* Get BSS number and corresponding priv */
1172         priv = mwifiex_get_priv_by_id(adapter, HostCmd_GET_BSS_NO(seq_num),
1173                                       HostCmd_GET_BSS_TYPE(seq_num));
1174         if (!priv)
1175                 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
1176
1177         /* Update sequence number */
1178         seq_num = HostCmd_GET_SEQ_NO(seq_num);
1179         /* Clear RET_BIT from HostCmd */
1180         command &= HostCmd_CMD_ID_MASK;
1181
1182         if (command != HostCmd_CMD_802_11_PS_MODE_ENH) {
1183                 dev_err(adapter->dev,
1184                         "%s: rcvd unexpected resp for cmd %#x, result = %x\n",
1185                         __func__, command, result);
1186                 return;
1187         }
1188
1189         if (result) {
1190                 dev_err(adapter->dev, "%s: sleep confirm cmd failed\n",
1191                         __func__);
1192                 adapter->pm_wakeup_card_req = false;
1193                 adapter->ps_state = PS_STATE_AWAKE;
1194                 return;
1195         }
1196         adapter->pm_wakeup_card_req = true;
1197         if (adapter->is_hs_configured)
1198                 mwifiex_hs_activated_event(mwifiex_get_priv
1199                                                 (adapter, MWIFIEX_BSS_ROLE_ANY),
1200                                            true);
1201         adapter->ps_state = PS_STATE_SLEEP;
1202         cmd->command = cpu_to_le16(command);
1203         cmd->seq_num = cpu_to_le16(seq_num);
1204 }
1205 EXPORT_SYMBOL_GPL(mwifiex_process_sleep_confirm_resp);
1206
1207 /*
1208  * This function prepares an enhanced power mode command.
1209  *
1210  * This function can be used to disable power save or to configure
1211  * power save with auto PS or STA PS or auto deep sleep.
1212  *
1213  * Preparation includes -
1214  *      - Setting command ID, action and proper size
1215  *      - Setting Power Save bitmap, PS parameters TLV, PS mode TLV,
1216  *        auto deep sleep TLV (as required)
1217  *      - Ensuring correct endian-ness
1218  */
1219 int mwifiex_cmd_enh_power_mode(struct mwifiex_private *priv,
1220                                struct host_cmd_ds_command *cmd,
1221                                u16 cmd_action, uint16_t ps_bitmap,
1222                                struct mwifiex_ds_auto_ds *auto_ds)
1223 {
1224         struct host_cmd_ds_802_11_ps_mode_enh *psmode_enh =
1225                 &cmd->params.psmode_enh;
1226         u8 *tlv;
1227         u16 cmd_size = 0;
1228
1229         cmd->command = cpu_to_le16(HostCmd_CMD_802_11_PS_MODE_ENH);
1230         if (cmd_action == DIS_AUTO_PS) {
1231                 psmode_enh->action = cpu_to_le16(DIS_AUTO_PS);
1232                 psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1233                 cmd->size = cpu_to_le16(S_DS_GEN + sizeof(psmode_enh->action) +
1234                                         sizeof(psmode_enh->params.ps_bitmap));
1235         } else if (cmd_action == GET_PS) {
1236                 psmode_enh->action = cpu_to_le16(GET_PS);
1237                 psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1238                 cmd->size = cpu_to_le16(S_DS_GEN + sizeof(psmode_enh->action) +
1239                                         sizeof(psmode_enh->params.ps_bitmap));
1240         } else if (cmd_action == EN_AUTO_PS) {
1241                 psmode_enh->action = cpu_to_le16(EN_AUTO_PS);
1242                 psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1243                 cmd_size = S_DS_GEN + sizeof(psmode_enh->action) +
1244                                         sizeof(psmode_enh->params.ps_bitmap);
1245                 tlv = (u8 *) cmd + cmd_size;
1246                 if (ps_bitmap & BITMAP_STA_PS) {
1247                         struct mwifiex_adapter *adapter = priv->adapter;
1248                         struct mwifiex_ie_types_ps_param *ps_tlv =
1249                                 (struct mwifiex_ie_types_ps_param *) tlv;
1250                         struct mwifiex_ps_param *ps_mode = &ps_tlv->param;
1251                         ps_tlv->header.type = cpu_to_le16(TLV_TYPE_PS_PARAM);
1252                         ps_tlv->header.len = cpu_to_le16(sizeof(*ps_tlv) -
1253                                         sizeof(struct mwifiex_ie_types_header));
1254                         cmd_size += sizeof(*ps_tlv);
1255                         tlv += sizeof(*ps_tlv);
1256                         dev_dbg(adapter->dev, "cmd: PS Command: Enter PS\n");
1257                         ps_mode->null_pkt_interval =
1258                                         cpu_to_le16(adapter->null_pkt_interval);
1259                         ps_mode->multiple_dtims =
1260                                         cpu_to_le16(adapter->multiple_dtim);
1261                         ps_mode->bcn_miss_timeout =
1262                                         cpu_to_le16(adapter->bcn_miss_time_out);
1263                         ps_mode->local_listen_interval =
1264                                 cpu_to_le16(adapter->local_listen_interval);
1265                         ps_mode->adhoc_wake_period =
1266                                 cpu_to_le16(adapter->adhoc_awake_period);
1267                         ps_mode->delay_to_ps =
1268                                         cpu_to_le16(adapter->delay_to_ps);
1269                         ps_mode->mode = cpu_to_le16(adapter->enhanced_ps_mode);
1270
1271                 }
1272                 if (ps_bitmap & BITMAP_AUTO_DS) {
1273                         struct mwifiex_ie_types_auto_ds_param *auto_ds_tlv =
1274                                 (struct mwifiex_ie_types_auto_ds_param *) tlv;
1275                         u16 idletime = 0;
1276
1277                         auto_ds_tlv->header.type =
1278                                 cpu_to_le16(TLV_TYPE_AUTO_DS_PARAM);
1279                         auto_ds_tlv->header.len =
1280                                 cpu_to_le16(sizeof(*auto_ds_tlv) -
1281                                         sizeof(struct mwifiex_ie_types_header));
1282                         cmd_size += sizeof(*auto_ds_tlv);
1283                         tlv += sizeof(*auto_ds_tlv);
1284                         if (auto_ds)
1285                                 idletime = auto_ds->idle_time;
1286                         dev_dbg(priv->adapter->dev,
1287                                 "cmd: PS Command: Enter Auto Deep Sleep\n");
1288                         auto_ds_tlv->deep_sleep_timeout = cpu_to_le16(idletime);
1289                 }
1290                 cmd->size = cpu_to_le16(cmd_size);
1291         }
1292         return 0;
1293 }
1294
1295 /*
1296  * This function handles the command response of an enhanced power mode
1297  * command.
1298  *
1299  * Handling includes changing the header fields into CPU format
1300  * and setting the current enhanced power mode in driver.
1301  */
1302 int mwifiex_ret_enh_power_mode(struct mwifiex_private *priv,
1303                                struct host_cmd_ds_command *resp,
1304                                struct mwifiex_ds_pm_cfg *pm_cfg)
1305 {
1306         struct mwifiex_adapter *adapter = priv->adapter;
1307         struct host_cmd_ds_802_11_ps_mode_enh *ps_mode =
1308                 &resp->params.psmode_enh;
1309         uint16_t action = le16_to_cpu(ps_mode->action);
1310         uint16_t ps_bitmap = le16_to_cpu(ps_mode->params.ps_bitmap);
1311         uint16_t auto_ps_bitmap =
1312                 le16_to_cpu(ps_mode->params.ps_bitmap);
1313
1314         dev_dbg(adapter->dev,
1315                 "info: %s: PS_MODE cmd reply result=%#x action=%#X\n",
1316                 __func__, resp->result, action);
1317         if (action == EN_AUTO_PS) {
1318                 if (auto_ps_bitmap & BITMAP_AUTO_DS) {
1319                         dev_dbg(adapter->dev, "cmd: Enabled auto deep sleep\n");
1320                         priv->adapter->is_deep_sleep = true;
1321                 }
1322                 if (auto_ps_bitmap & BITMAP_STA_PS) {
1323                         dev_dbg(adapter->dev, "cmd: Enabled STA power save\n");
1324                         if (adapter->sleep_period.period)
1325                                 dev_dbg(adapter->dev,
1326                                         "cmd: set to uapsd/pps mode\n");
1327                 }
1328         } else if (action == DIS_AUTO_PS) {
1329                 if (ps_bitmap & BITMAP_AUTO_DS) {
1330                         priv->adapter->is_deep_sleep = false;
1331                         dev_dbg(adapter->dev, "cmd: Disabled auto deep sleep\n");
1332                 }
1333                 if (ps_bitmap & BITMAP_STA_PS) {
1334                         dev_dbg(adapter->dev, "cmd: Disabled STA power save\n");
1335                         if (adapter->sleep_period.period) {
1336                                 adapter->delay_null_pkt = false;
1337                                 adapter->tx_lock_flag = false;
1338                                 adapter->pps_uapsd_mode = false;
1339                         }
1340                 }
1341         } else if (action == GET_PS) {
1342                 if (ps_bitmap & BITMAP_STA_PS)
1343                         adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_PSP;
1344                 else
1345                         adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_CAM;
1346
1347                 dev_dbg(adapter->dev, "cmd: ps_bitmap=%#x\n", ps_bitmap);
1348
1349                 if (pm_cfg) {
1350                         /* This section is for get power save mode */
1351                         if (ps_bitmap & BITMAP_STA_PS)
1352                                 pm_cfg->param.ps_mode = 1;
1353                         else
1354                                 pm_cfg->param.ps_mode = 0;
1355                 }
1356         }
1357         return 0;
1358 }
1359
1360 /*
1361  * This function prepares command to get hardware specifications.
1362  *
1363  * Preparation includes -
1364  *      - Setting command ID, action and proper size
1365  *      - Setting permanent address parameter
1366  *      - Ensuring correct endian-ness
1367  */
1368 int mwifiex_cmd_get_hw_spec(struct mwifiex_private *priv,
1369                             struct host_cmd_ds_command *cmd)
1370 {
1371         struct host_cmd_ds_get_hw_spec *hw_spec = &cmd->params.hw_spec;
1372
1373         cmd->command = cpu_to_le16(HostCmd_CMD_GET_HW_SPEC);
1374         cmd->size =
1375                 cpu_to_le16(sizeof(struct host_cmd_ds_get_hw_spec) + S_DS_GEN);
1376         memcpy(hw_spec->permanent_addr, priv->curr_addr, ETH_ALEN);
1377
1378         return 0;
1379 }
1380
1381 /*
1382  * This function handles the command response of get hardware
1383  * specifications.
1384  *
1385  * Handling includes changing the header fields into CPU format
1386  * and saving/updating the following parameters in driver -
1387  *      - Firmware capability information
1388  *      - Firmware band settings
1389  *      - Ad-hoc start band and channel
1390  *      - Ad-hoc 11n activation status
1391  *      - Firmware release number
1392  *      - Number of antennas
1393  *      - Hardware address
1394  *      - Hardware interface version
1395  *      - Firmware version
1396  *      - Region code
1397  *      - 11n capabilities
1398  *      - MCS support fields
1399  *      - MP end port
1400  */
1401 int mwifiex_ret_get_hw_spec(struct mwifiex_private *priv,
1402                             struct host_cmd_ds_command *resp)
1403 {
1404         struct host_cmd_ds_get_hw_spec *hw_spec = &resp->params.hw_spec;
1405         struct mwifiex_adapter *adapter = priv->adapter;
1406         int i;
1407
1408         adapter->fw_cap_info = le32_to_cpu(hw_spec->fw_cap_info);
1409
1410         if (IS_SUPPORT_MULTI_BANDS(adapter))
1411                 adapter->fw_bands = (u8) GET_FW_DEFAULT_BANDS(adapter);
1412         else
1413                 adapter->fw_bands = BAND_B;
1414
1415         adapter->config_bands = adapter->fw_bands;
1416
1417         if (adapter->fw_bands & BAND_A) {
1418                 if (adapter->fw_bands & BAND_GN) {
1419                         adapter->config_bands |= BAND_AN;
1420                         adapter->fw_bands |= BAND_AN;
1421                 }
1422                 if (adapter->fw_bands & BAND_AN) {
1423                         adapter->adhoc_start_band = BAND_A | BAND_AN;
1424                         adapter->adhoc_11n_enabled = true;
1425                 } else {
1426                         adapter->adhoc_start_band = BAND_A;
1427                 }
1428                 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL_A;
1429         } else if (adapter->fw_bands & BAND_GN) {
1430                 adapter->adhoc_start_band = BAND_G | BAND_B | BAND_GN;
1431                 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1432                 adapter->adhoc_11n_enabled = true;
1433         } else if (adapter->fw_bands & BAND_G) {
1434                 adapter->adhoc_start_band = BAND_G | BAND_B;
1435                 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1436         } else if (adapter->fw_bands & BAND_B) {
1437                 adapter->adhoc_start_band = BAND_B;
1438                 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1439         }
1440
1441         adapter->fw_release_number = le32_to_cpu(hw_spec->fw_release_number);
1442         adapter->number_of_antenna = le16_to_cpu(hw_spec->number_of_antenna);
1443
1444         dev_dbg(adapter->dev, "info: GET_HW_SPEC: fw_release_number- %#x\n",
1445                 adapter->fw_release_number);
1446         dev_dbg(adapter->dev, "info: GET_HW_SPEC: permanent addr: %pM\n",
1447                 hw_spec->permanent_addr);
1448         dev_dbg(adapter->dev,
1449                 "info: GET_HW_SPEC: hw_if_version=%#x version=%#x\n",
1450                 le16_to_cpu(hw_spec->hw_if_version),
1451                 le16_to_cpu(hw_spec->version));
1452
1453         if (priv->curr_addr[0] == 0xff)
1454                 memmove(priv->curr_addr, hw_spec->permanent_addr, ETH_ALEN);
1455
1456         adapter->region_code = le16_to_cpu(hw_spec->region_code);
1457
1458         for (i = 0; i < MWIFIEX_MAX_REGION_CODE; i++)
1459                 /* Use the region code to search for the index */
1460                 if (adapter->region_code == region_code_index[i])
1461                         break;
1462
1463         /* If it's unidentified region code, use the default (USA) */
1464         if (i >= MWIFIEX_MAX_REGION_CODE) {
1465                 adapter->region_code = 0x10;
1466                 dev_dbg(adapter->dev,
1467                         "cmd: unknown region code, use default (USA)\n");
1468         }
1469
1470         adapter->hw_dot_11n_dev_cap = le32_to_cpu(hw_spec->dot_11n_dev_cap);
1471         adapter->hw_dev_mcs_support = hw_spec->dev_mcs_support;
1472
1473         if (adapter->if_ops.update_mp_end_port)
1474                 adapter->if_ops.update_mp_end_port(adapter,
1475                                         le16_to_cpu(hw_spec->mp_end_port));
1476
1477         return 0;
1478 }