mwifiex: fix a possible double free issue
[pandora-kernel.git] / drivers / net / wireless / mwifiex / main.c
1 /*
2  * Marvell Wireless LAN device driver: major functions
3  *
4  * Copyright (C) 2011-2014, Marvell International Ltd.
5  *
6  * This software file (the "File") is distributed by Marvell International
7  * Ltd. under the terms of the GNU General Public License Version 2, June 1991
8  * (the "License").  You may use, redistribute and/or modify this File in
9  * accordance with the terms and conditions of the License, a copy of which
10  * is available by writing to the Free Software Foundation, Inc.,
11  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
12  * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
13  *
14  * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
15  * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
16  * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
17  * this warranty disclaimer.
18  */
19
20 #include "main.h"
21 #include "wmm.h"
22 #include "cfg80211.h"
23 #include "11n.h"
24
25 #define VERSION "1.0"
26
27 static unsigned int debug_mask = MWIFIEX_DEFAULT_DEBUG_MASK;
28 module_param(debug_mask, uint, 0);
29 MODULE_PARM_DESC(debug_mask, "bitmap for debug flags");
30
31 const char driver_version[] = "mwifiex " VERSION " (%s) ";
32 static char *cal_data_cfg;
33 module_param(cal_data_cfg, charp, 0);
34
35 static unsigned short driver_mode;
36 module_param(driver_mode, ushort, 0);
37 MODULE_PARM_DESC(driver_mode,
38                  "station=0x1(default), ap-sta=0x3, station-p2p=0x5, ap-sta-p2p=0x7");
39
40 /*
41  * This function registers the device and performs all the necessary
42  * initializations.
43  *
44  * The following initialization operations are performed -
45  *      - Allocate adapter structure
46  *      - Save interface specific operations table in adapter
47  *      - Call interface specific initialization routine
48  *      - Allocate private structures
49  *      - Set default adapter structure parameters
50  *      - Initialize locks
51  *
52  * In case of any errors during inittialization, this function also ensures
53  * proper cleanup before exiting.
54  */
55 static int mwifiex_register(void *card, struct mwifiex_if_ops *if_ops,
56                             void **padapter)
57 {
58         struct mwifiex_adapter *adapter;
59         int i;
60
61         adapter = kzalloc(sizeof(struct mwifiex_adapter), GFP_KERNEL);
62         if (!adapter)
63                 return -ENOMEM;
64
65         *padapter = adapter;
66         adapter->card = card;
67
68         /* Save interface specific operations in adapter */
69         memmove(&adapter->if_ops, if_ops, sizeof(struct mwifiex_if_ops));
70         adapter->debug_mask = debug_mask;
71
72         /* card specific initialization has been deferred until now .. */
73         if (adapter->if_ops.init_if)
74                 if (adapter->if_ops.init_if(adapter))
75                         goto error;
76
77         adapter->priv_num = 0;
78
79         for (i = 0; i < MWIFIEX_MAX_BSS_NUM; i++) {
80                 /* Allocate memory for private structure */
81                 adapter->priv[i] =
82                         kzalloc(sizeof(struct mwifiex_private), GFP_KERNEL);
83                 if (!adapter->priv[i])
84                         goto error;
85
86                 adapter->priv[i]->adapter = adapter;
87                 adapter->priv_num++;
88         }
89         mwifiex_init_lock_list(adapter);
90
91         setup_timer(&adapter->cmd_timer, mwifiex_cmd_timeout_func,
92                     (unsigned long)adapter);
93
94         return 0;
95
96 error:
97         mwifiex_dbg(adapter, ERROR,
98                     "info: leave mwifiex_register with error\n");
99
100         for (i = 0; i < adapter->priv_num; i++)
101                 kfree(adapter->priv[i]);
102
103         kfree(adapter);
104
105         return -1;
106 }
107
108 /*
109  * This function unregisters the device and performs all the necessary
110  * cleanups.
111  *
112  * The following cleanup operations are performed -
113  *      - Free the timers
114  *      - Free beacon buffers
115  *      - Free private structures
116  *      - Free adapter structure
117  */
118 static int mwifiex_unregister(struct mwifiex_adapter *adapter)
119 {
120         s32 i;
121
122         if (adapter->if_ops.cleanup_if)
123                 adapter->if_ops.cleanup_if(adapter);
124
125         del_timer_sync(&adapter->cmd_timer);
126
127         /* Free private structures */
128         for (i = 0; i < adapter->priv_num; i++) {
129                 if (adapter->priv[i]) {
130                         mwifiex_free_curr_bcn(adapter->priv[i]);
131                         kfree(adapter->priv[i]);
132                 }
133         }
134
135         vfree(adapter->chan_stats);
136         kfree(adapter);
137         return 0;
138 }
139
140 void mwifiex_queue_main_work(struct mwifiex_adapter *adapter)
141 {
142         unsigned long flags;
143
144         spin_lock_irqsave(&adapter->main_proc_lock, flags);
145         if (adapter->mwifiex_processing) {
146                 adapter->more_task_flag = true;
147                 spin_unlock_irqrestore(&adapter->main_proc_lock, flags);
148         } else {
149                 spin_unlock_irqrestore(&adapter->main_proc_lock, flags);
150                 queue_work(adapter->workqueue, &adapter->main_work);
151         }
152 }
153 EXPORT_SYMBOL_GPL(mwifiex_queue_main_work);
154
155 static void mwifiex_queue_rx_work(struct mwifiex_adapter *adapter)
156 {
157         unsigned long flags;
158
159         spin_lock_irqsave(&adapter->rx_proc_lock, flags);
160         if (adapter->rx_processing) {
161                 spin_unlock_irqrestore(&adapter->rx_proc_lock, flags);
162         } else {
163                 spin_unlock_irqrestore(&adapter->rx_proc_lock, flags);
164                 queue_work(adapter->rx_workqueue, &adapter->rx_work);
165         }
166 }
167
168 static int mwifiex_process_rx(struct mwifiex_adapter *adapter)
169 {
170         unsigned long flags;
171         struct sk_buff *skb;
172         struct mwifiex_rxinfo *rx_info;
173
174         spin_lock_irqsave(&adapter->rx_proc_lock, flags);
175         if (adapter->rx_processing || adapter->rx_locked) {
176                 spin_unlock_irqrestore(&adapter->rx_proc_lock, flags);
177                 goto exit_rx_proc;
178         } else {
179                 adapter->rx_processing = true;
180                 spin_unlock_irqrestore(&adapter->rx_proc_lock, flags);
181         }
182
183         /* Check for Rx data */
184         while ((skb = skb_dequeue(&adapter->rx_data_q))) {
185                 atomic_dec(&adapter->rx_pending);
186                 if ((adapter->delay_main_work ||
187                      adapter->iface_type == MWIFIEX_USB) &&
188                     (atomic_read(&adapter->rx_pending) < LOW_RX_PENDING)) {
189                         if (adapter->if_ops.submit_rem_rx_urbs)
190                                 adapter->if_ops.submit_rem_rx_urbs(adapter);
191                         adapter->delay_main_work = false;
192                         mwifiex_queue_main_work(adapter);
193                 }
194                 rx_info = MWIFIEX_SKB_RXCB(skb);
195                 if (rx_info->buf_type == MWIFIEX_TYPE_AGGR_DATA) {
196                         if (adapter->if_ops.deaggr_pkt)
197                                 adapter->if_ops.deaggr_pkt(adapter, skb);
198                         dev_kfree_skb_any(skb);
199                 } else {
200                         mwifiex_handle_rx_packet(adapter, skb);
201                 }
202         }
203         spin_lock_irqsave(&adapter->rx_proc_lock, flags);
204         adapter->rx_processing = false;
205         spin_unlock_irqrestore(&adapter->rx_proc_lock, flags);
206
207 exit_rx_proc:
208         return 0;
209 }
210
211 /*
212  * The main process.
213  *
214  * This function is the main procedure of the driver and handles various driver
215  * operations. It runs in a loop and provides the core functionalities.
216  *
217  * The main responsibilities of this function are -
218  *      - Ensure concurrency control
219  *      - Handle pending interrupts and call interrupt handlers
220  *      - Wake up the card if required
221  *      - Handle command responses and call response handlers
222  *      - Handle events and call event handlers
223  *      - Execute pending commands
224  *      - Transmit pending data packets
225  */
226 int mwifiex_main_process(struct mwifiex_adapter *adapter)
227 {
228         int ret = 0;
229         unsigned long flags;
230
231         spin_lock_irqsave(&adapter->main_proc_lock, flags);
232
233         /* Check if already processing */
234         if (adapter->mwifiex_processing || adapter->main_locked) {
235                 adapter->more_task_flag = true;
236                 spin_unlock_irqrestore(&adapter->main_proc_lock, flags);
237                 goto exit_main_proc;
238         } else {
239                 adapter->mwifiex_processing = true;
240                 spin_unlock_irqrestore(&adapter->main_proc_lock, flags);
241         }
242 process_start:
243         do {
244                 if ((adapter->hw_status == MWIFIEX_HW_STATUS_CLOSING) ||
245                     (adapter->hw_status == MWIFIEX_HW_STATUS_NOT_READY))
246                         break;
247
248                 /* For non-USB interfaces, If we process interrupts first, it
249                  * would increase RX pending even further. Avoid this by
250                  * checking if rx_pending has crossed high threshold and
251                  * schedule rx work queue and then process interrupts.
252                  * For USB interface, there are no interrupts. We already have
253                  * HIGH_RX_PENDING check in usb.c
254                  */
255                 if (atomic_read(&adapter->rx_pending) >= HIGH_RX_PENDING &&
256                     adapter->iface_type != MWIFIEX_USB) {
257                         adapter->delay_main_work = true;
258                         mwifiex_queue_rx_work(adapter);
259                         break;
260                 }
261
262                 /* Handle pending interrupt if any */
263                 if (adapter->int_status) {
264                         if (adapter->hs_activated)
265                                 mwifiex_process_hs_config(adapter);
266                         if (adapter->if_ops.process_int_status)
267                                 adapter->if_ops.process_int_status(adapter);
268                 }
269
270                 if (adapter->rx_work_enabled && adapter->data_received)
271                         mwifiex_queue_rx_work(adapter);
272
273                 /* Need to wake up the card ? */
274                 if ((adapter->ps_state == PS_STATE_SLEEP) &&
275                     (adapter->pm_wakeup_card_req &&
276                      !adapter->pm_wakeup_fw_try) &&
277                     (is_command_pending(adapter) ||
278                      !skb_queue_empty(&adapter->tx_data_q) ||
279                      !mwifiex_wmm_lists_empty(adapter))) {
280                         adapter->pm_wakeup_fw_try = true;
281                         mod_timer(&adapter->wakeup_timer, jiffies + (HZ*3));
282                         adapter->if_ops.wakeup(adapter);
283                         continue;
284                 }
285
286                 if (IS_CARD_RX_RCVD(adapter)) {
287                         adapter->data_received = false;
288                         adapter->pm_wakeup_fw_try = false;
289                         del_timer(&adapter->wakeup_timer);
290                         if (adapter->ps_state == PS_STATE_SLEEP)
291                                 adapter->ps_state = PS_STATE_AWAKE;
292                 } else {
293                         /* We have tried to wakeup the card already */
294                         if (adapter->pm_wakeup_fw_try)
295                                 break;
296                         if (adapter->ps_state != PS_STATE_AWAKE ||
297                             adapter->tx_lock_flag)
298                                 break;
299
300                         if ((!adapter->scan_chan_gap_enabled &&
301                              adapter->scan_processing) || adapter->data_sent ||
302                             (mwifiex_wmm_lists_empty(adapter) &&
303                              skb_queue_empty(&adapter->tx_data_q))) {
304                                 if (adapter->cmd_sent || adapter->curr_cmd ||
305                                     (!is_command_pending(adapter)))
306                                         break;
307                         }
308                 }
309
310                 /* Check for event */
311                 if (adapter->event_received) {
312                         adapter->event_received = false;
313                         mwifiex_process_event(adapter);
314                 }
315
316                 /* Check for Cmd Resp */
317                 if (adapter->cmd_resp_received) {
318                         adapter->cmd_resp_received = false;
319                         mwifiex_process_cmdresp(adapter);
320
321                         /* call mwifiex back when init_fw is done */
322                         if (adapter->hw_status == MWIFIEX_HW_STATUS_INIT_DONE) {
323                                 adapter->hw_status = MWIFIEX_HW_STATUS_READY;
324                                 mwifiex_init_fw_complete(adapter);
325                         }
326                 }
327
328                 /* Check if we need to confirm Sleep Request
329                    received previously */
330                 if (adapter->ps_state == PS_STATE_PRE_SLEEP) {
331                         if (!adapter->cmd_sent && !adapter->curr_cmd)
332                                 mwifiex_check_ps_cond(adapter);
333                 }
334
335                 /* * The ps_state may have been changed during processing of
336                  * Sleep Request event.
337                  */
338                 if ((adapter->ps_state == PS_STATE_SLEEP) ||
339                     (adapter->ps_state == PS_STATE_PRE_SLEEP) ||
340                     (adapter->ps_state == PS_STATE_SLEEP_CFM) ||
341                     adapter->tx_lock_flag){
342                         continue;
343                 }
344
345                 if (!adapter->cmd_sent && !adapter->curr_cmd) {
346                         if (mwifiex_exec_next_cmd(adapter) == -1) {
347                                 ret = -1;
348                                 break;
349                         }
350                 }
351
352                 if ((adapter->scan_chan_gap_enabled ||
353                      !adapter->scan_processing) &&
354                     !adapter->data_sent &&
355                     !skb_queue_empty(&adapter->tx_data_q)) {
356                         mwifiex_process_tx_queue(adapter);
357                         if (adapter->hs_activated) {
358                                 adapter->is_hs_configured = false;
359                                 mwifiex_hs_activated_event
360                                         (mwifiex_get_priv
361                                         (adapter, MWIFIEX_BSS_ROLE_ANY),
362                                         false);
363                         }
364                 }
365
366                 if ((adapter->scan_chan_gap_enabled ||
367                      !adapter->scan_processing) &&
368                     !adapter->data_sent && !mwifiex_wmm_lists_empty(adapter)) {
369                         mwifiex_wmm_process_tx(adapter);
370                         if (adapter->hs_activated) {
371                                 adapter->is_hs_configured = false;
372                                 mwifiex_hs_activated_event
373                                         (mwifiex_get_priv
374                                          (adapter, MWIFIEX_BSS_ROLE_ANY),
375                                          false);
376                         }
377                 }
378
379                 if (adapter->delay_null_pkt && !adapter->cmd_sent &&
380                     !adapter->curr_cmd && !is_command_pending(adapter) &&
381                     (mwifiex_wmm_lists_empty(adapter) &&
382                      skb_queue_empty(&adapter->tx_data_q))) {
383                         if (!mwifiex_send_null_packet
384                             (mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_STA),
385                              MWIFIEX_TxPD_POWER_MGMT_NULL_PACKET |
386                              MWIFIEX_TxPD_POWER_MGMT_LAST_PACKET)) {
387                                 adapter->delay_null_pkt = false;
388                                 adapter->ps_state = PS_STATE_SLEEP;
389                         }
390                         break;
391                 }
392         } while (true);
393
394         spin_lock_irqsave(&adapter->main_proc_lock, flags);
395         if (adapter->more_task_flag) {
396                 adapter->more_task_flag = false;
397                 spin_unlock_irqrestore(&adapter->main_proc_lock, flags);
398                 goto process_start;
399         }
400         adapter->mwifiex_processing = false;
401         spin_unlock_irqrestore(&adapter->main_proc_lock, flags);
402
403 exit_main_proc:
404         if (adapter->hw_status == MWIFIEX_HW_STATUS_CLOSING)
405                 mwifiex_shutdown_drv(adapter);
406         return ret;
407 }
408 EXPORT_SYMBOL_GPL(mwifiex_main_process);
409
410 /*
411  * This function frees the adapter structure.
412  *
413  * Additionally, this closes the netlink socket, frees the timers
414  * and private structures.
415  */
416 static void mwifiex_free_adapter(struct mwifiex_adapter *adapter)
417 {
418         if (!adapter) {
419                 pr_err("%s: adapter is NULL\n", __func__);
420                 return;
421         }
422
423         mwifiex_unregister(adapter);
424         pr_debug("info: %s: free adapter\n", __func__);
425 }
426
427 /*
428  * This function cancels all works in the queue and destroys
429  * the main workqueue.
430  */
431 static void mwifiex_terminate_workqueue(struct mwifiex_adapter *adapter)
432 {
433         flush_workqueue(adapter->workqueue);
434         destroy_workqueue(adapter->workqueue);
435         adapter->workqueue = NULL;
436
437         if (adapter->rx_workqueue) {
438                 flush_workqueue(adapter->rx_workqueue);
439                 destroy_workqueue(adapter->rx_workqueue);
440                 adapter->rx_workqueue = NULL;
441         }
442 }
443
444 /*
445  * This function gets firmware and initializes it.
446  *
447  * The main initialization steps followed are -
448  *      - Download the correct firmware to card
449  *      - Issue the init commands to firmware
450  */
451 static void mwifiex_fw_dpc(const struct firmware *firmware, void *context)
452 {
453         int ret;
454         char fmt[64];
455         struct mwifiex_private *priv;
456         struct mwifiex_adapter *adapter = context;
457         struct mwifiex_fw_image fw;
458         struct semaphore *sem = adapter->card_sem;
459         bool init_failed = false;
460         struct wireless_dev *wdev;
461
462         if (!firmware) {
463                 mwifiex_dbg(adapter, ERROR,
464                             "Failed to get firmware %s\n", adapter->fw_name);
465                 goto err_dnld_fw;
466         }
467
468         memset(&fw, 0, sizeof(struct mwifiex_fw_image));
469         adapter->firmware = firmware;
470         fw.fw_buf = (u8 *) adapter->firmware->data;
471         fw.fw_len = adapter->firmware->size;
472
473         if (adapter->if_ops.dnld_fw)
474                 ret = adapter->if_ops.dnld_fw(adapter, &fw);
475         else
476                 ret = mwifiex_dnld_fw(adapter, &fw);
477         if (ret == -1)
478                 goto err_dnld_fw;
479
480         mwifiex_dbg(adapter, MSG, "WLAN FW is active\n");
481
482         if (cal_data_cfg) {
483                 if ((request_firmware(&adapter->cal_data, cal_data_cfg,
484                                       adapter->dev)) < 0)
485                         mwifiex_dbg(adapter, ERROR,
486                                     "Cal data request_firmware() failed\n");
487         }
488
489         /* enable host interrupt after fw dnld is successful */
490         if (adapter->if_ops.enable_int) {
491                 if (adapter->if_ops.enable_int(adapter))
492                         goto err_dnld_fw;
493         }
494
495         adapter->init_wait_q_woken = false;
496         ret = mwifiex_init_fw(adapter);
497         if (ret == -1) {
498                 goto err_init_fw;
499         } else if (!ret) {
500                 adapter->hw_status = MWIFIEX_HW_STATUS_READY;
501                 goto done;
502         }
503         /* Wait for mwifiex_init to complete */
504         wait_event_interruptible(adapter->init_wait_q,
505                                  adapter->init_wait_q_woken);
506         if (adapter->hw_status != MWIFIEX_HW_STATUS_READY)
507                 goto err_init_fw;
508
509         priv = adapter->priv[MWIFIEX_BSS_ROLE_STA];
510         if (mwifiex_register_cfg80211(adapter)) {
511                 mwifiex_dbg(adapter, ERROR,
512                             "cannot register with cfg80211\n");
513                 goto err_init_fw;
514         }
515
516         if (mwifiex_init_channel_scan_gap(adapter)) {
517                 mwifiex_dbg(adapter, ERROR,
518                             "could not init channel stats table\n");
519                 goto err_init_fw;
520         }
521
522         if (driver_mode) {
523                 driver_mode &= MWIFIEX_DRIVER_MODE_BITMASK;
524                 driver_mode |= MWIFIEX_DRIVER_MODE_STA;
525         }
526
527         rtnl_lock();
528         /* Create station interface by default */
529         wdev = mwifiex_add_virtual_intf(adapter->wiphy, "mlan%d", NET_NAME_ENUM,
530                                         NL80211_IFTYPE_STATION, NULL, NULL);
531         if (IS_ERR(wdev)) {
532                 mwifiex_dbg(adapter, ERROR,
533                             "cannot create default STA interface\n");
534                 rtnl_unlock();
535                 goto err_add_intf;
536         }
537
538         if (driver_mode & MWIFIEX_DRIVER_MODE_UAP) {
539                 wdev = mwifiex_add_virtual_intf(adapter->wiphy, "uap%d", NET_NAME_ENUM,
540                                                 NL80211_IFTYPE_AP, NULL, NULL);
541                 if (IS_ERR(wdev)) {
542                         mwifiex_dbg(adapter, ERROR,
543                                     "cannot create AP interface\n");
544                         rtnl_unlock();
545                         goto err_add_intf;
546                 }
547         }
548
549         if (driver_mode & MWIFIEX_DRIVER_MODE_P2P) {
550                 wdev = mwifiex_add_virtual_intf(adapter->wiphy, "p2p%d", NET_NAME_ENUM,
551                                                 NL80211_IFTYPE_P2P_CLIENT, NULL,
552                                                 NULL);
553                 if (IS_ERR(wdev)) {
554                         mwifiex_dbg(adapter, ERROR,
555                                     "cannot create p2p client interface\n");
556                         rtnl_unlock();
557                         goto err_add_intf;
558                 }
559         }
560         rtnl_unlock();
561
562         mwifiex_drv_get_driver_version(adapter, fmt, sizeof(fmt) - 1);
563         mwifiex_dbg(adapter, MSG, "driver_version = %s\n", fmt);
564         goto done;
565
566 err_add_intf:
567         wiphy_unregister(adapter->wiphy);
568         wiphy_free(adapter->wiphy);
569 err_init_fw:
570         if (adapter->if_ops.disable_int)
571                 adapter->if_ops.disable_int(adapter);
572 err_dnld_fw:
573         mwifiex_dbg(adapter, ERROR,
574                     "info: %s: unregister device\n", __func__);
575         if (adapter->if_ops.unregister_dev)
576                 adapter->if_ops.unregister_dev(adapter);
577
578         if (adapter->hw_status == MWIFIEX_HW_STATUS_READY) {
579                 pr_debug("info: %s: shutdown mwifiex\n", __func__);
580                 adapter->init_wait_q_woken = false;
581
582                 if (mwifiex_shutdown_drv(adapter) == -EINPROGRESS)
583                         wait_event_interruptible(adapter->init_wait_q,
584                                                  adapter->init_wait_q_woken);
585         }
586         adapter->surprise_removed = true;
587         mwifiex_terminate_workqueue(adapter);
588         init_failed = true;
589 done:
590         if (adapter->cal_data) {
591                 release_firmware(adapter->cal_data);
592                 adapter->cal_data = NULL;
593         }
594         if (adapter->firmware) {
595                 release_firmware(adapter->firmware);
596                 adapter->firmware = NULL;
597         }
598         if (init_failed)
599                 mwifiex_free_adapter(adapter);
600         up(sem);
601         return;
602 }
603
604 /*
605  * This function initializes the hardware and gets firmware.
606  */
607 static int mwifiex_init_hw_fw(struct mwifiex_adapter *adapter)
608 {
609         int ret;
610
611         ret = request_firmware_nowait(THIS_MODULE, 1, adapter->fw_name,
612                                       adapter->dev, GFP_KERNEL, adapter,
613                                       mwifiex_fw_dpc);
614         if (ret < 0)
615                 mwifiex_dbg(adapter, ERROR,
616                             "request_firmware_nowait error %d\n", ret);
617         return ret;
618 }
619
620 /*
621  * CFG802.11 network device handler for open.
622  *
623  * Starts the data queue.
624  */
625 static int
626 mwifiex_open(struct net_device *dev)
627 {
628         netif_carrier_off(dev);
629
630         return 0;
631 }
632
633 /*
634  * CFG802.11 network device handler for close.
635  */
636 static int
637 mwifiex_close(struct net_device *dev)
638 {
639         struct mwifiex_private *priv = mwifiex_netdev_get_priv(dev);
640
641         if (priv->scan_request) {
642                 mwifiex_dbg(priv->adapter, INFO,
643                             "aborting scan on ndo_stop\n");
644                 cfg80211_scan_done(priv->scan_request, 1);
645                 priv->scan_request = NULL;
646                 priv->scan_aborting = true;
647         }
648
649         return 0;
650 }
651
652 /*
653  * Add buffer into wmm tx queue and queue work to transmit it.
654  */
655 int mwifiex_queue_tx_pkt(struct mwifiex_private *priv, struct sk_buff *skb)
656 {
657         struct netdev_queue *txq;
658         int index = mwifiex_1d_to_wmm_queue[skb->priority];
659
660         if (atomic_inc_return(&priv->wmm_tx_pending[index]) >= MAX_TX_PENDING) {
661                 txq = netdev_get_tx_queue(priv->netdev, index);
662                 if (!netif_tx_queue_stopped(txq)) {
663                         netif_tx_stop_queue(txq);
664                         mwifiex_dbg(priv->adapter, DATA,
665                                     "stop queue: %d\n", index);
666                 }
667         }
668
669         atomic_inc(&priv->adapter->tx_pending);
670         mwifiex_wmm_add_buf_txqueue(priv, skb);
671
672         mwifiex_queue_main_work(priv->adapter);
673
674         return 0;
675 }
676
677 struct sk_buff *
678 mwifiex_clone_skb_for_tx_status(struct mwifiex_private *priv,
679                                 struct sk_buff *skb, u8 flag, u64 *cookie)
680 {
681         struct sk_buff *orig_skb = skb;
682         struct mwifiex_txinfo *tx_info, *orig_tx_info;
683
684         skb = skb_clone(skb, GFP_ATOMIC);
685         if (skb) {
686                 unsigned long flags;
687                 int id;
688
689                 spin_lock_irqsave(&priv->ack_status_lock, flags);
690                 id = idr_alloc(&priv->ack_status_frames, orig_skb,
691                                1, 0xff, GFP_ATOMIC);
692                 spin_unlock_irqrestore(&priv->ack_status_lock, flags);
693
694                 if (id >= 0) {
695                         tx_info = MWIFIEX_SKB_TXCB(skb);
696                         tx_info->ack_frame_id = id;
697                         tx_info->flags |= flag;
698                         orig_tx_info = MWIFIEX_SKB_TXCB(orig_skb);
699                         orig_tx_info->ack_frame_id = id;
700                         orig_tx_info->flags |= flag;
701
702                         if (flag == MWIFIEX_BUF_FLAG_ACTION_TX_STATUS && cookie)
703                                 orig_tx_info->cookie = *cookie;
704
705                 } else if (skb_shared(skb)) {
706                         kfree_skb(orig_skb);
707                 } else {
708                         kfree_skb(skb);
709                         skb = orig_skb;
710                 }
711         } else {
712                 /* couldn't clone -- lose tx status ... */
713                 skb = orig_skb;
714         }
715
716         return skb;
717 }
718
719 /*
720  * CFG802.11 network device handler for data transmission.
721  */
722 static int
723 mwifiex_hard_start_xmit(struct sk_buff *skb, struct net_device *dev)
724 {
725         struct mwifiex_private *priv = mwifiex_netdev_get_priv(dev);
726         struct sk_buff *new_skb;
727         struct mwifiex_txinfo *tx_info;
728         bool multicast;
729
730         mwifiex_dbg(priv->adapter, DATA,
731                     "data: %lu BSS(%d-%d): Data <= kernel\n",
732                     jiffies, priv->bss_type, priv->bss_num);
733
734         if (priv->adapter->surprise_removed) {
735                 kfree_skb(skb);
736                 priv->stats.tx_dropped++;
737                 return 0;
738         }
739         if (!skb->len || (skb->len > ETH_FRAME_LEN)) {
740                 mwifiex_dbg(priv->adapter, ERROR,
741                             "Tx: bad skb len %d\n", skb->len);
742                 kfree_skb(skb);
743                 priv->stats.tx_dropped++;
744                 return 0;
745         }
746         if (skb_headroom(skb) < MWIFIEX_MIN_DATA_HEADER_LEN) {
747                 mwifiex_dbg(priv->adapter, DATA,
748                             "data: Tx: insufficient skb headroom %d\n",
749                             skb_headroom(skb));
750                 /* Insufficient skb headroom - allocate a new skb */
751                 new_skb =
752                         skb_realloc_headroom(skb, MWIFIEX_MIN_DATA_HEADER_LEN);
753                 if (unlikely(!new_skb)) {
754                         mwifiex_dbg(priv->adapter, ERROR,
755                                     "Tx: cannot alloca new_skb\n");
756                         kfree_skb(skb);
757                         priv->stats.tx_dropped++;
758                         return 0;
759                 }
760                 kfree_skb(skb);
761                 skb = new_skb;
762                 mwifiex_dbg(priv->adapter, INFO,
763                             "info: new skb headroomd %d\n",
764                             skb_headroom(skb));
765         }
766
767         tx_info = MWIFIEX_SKB_TXCB(skb);
768         memset(tx_info, 0, sizeof(*tx_info));
769         tx_info->bss_num = priv->bss_num;
770         tx_info->bss_type = priv->bss_type;
771         tx_info->pkt_len = skb->len;
772
773         multicast = is_multicast_ether_addr(skb->data);
774
775         if (unlikely(!multicast && skb->sk &&
776                      skb_shinfo(skb)->tx_flags & SKBTX_WIFI_STATUS &&
777                      priv->adapter->fw_api_ver == MWIFIEX_FW_V15))
778                 skb = mwifiex_clone_skb_for_tx_status(priv,
779                                                       skb,
780                                         MWIFIEX_BUF_FLAG_EAPOL_TX_STATUS, NULL);
781
782         /* Record the current time the packet was queued; used to
783          * determine the amount of time the packet was queued in
784          * the driver before it was sent to the firmware.
785          * The delay is then sent along with the packet to the
786          * firmware for aggregate delay calculation for stats and
787          * MSDU lifetime expiry.
788          */
789         __net_timestamp(skb);
790
791         if (ISSUPP_TDLS_ENABLED(priv->adapter->fw_cap_info) &&
792             priv->bss_type == MWIFIEX_BSS_TYPE_STA &&
793             !ether_addr_equal_unaligned(priv->cfg_bssid, skb->data)) {
794                 if (priv->adapter->auto_tdls && priv->check_tdls_tx)
795                         mwifiex_tdls_check_tx(priv, skb);
796         }
797
798         mwifiex_queue_tx_pkt(priv, skb);
799
800         return 0;
801 }
802
803 /*
804  * CFG802.11 network device handler for setting MAC address.
805  */
806 static int
807 mwifiex_set_mac_address(struct net_device *dev, void *addr)
808 {
809         struct mwifiex_private *priv = mwifiex_netdev_get_priv(dev);
810         struct sockaddr *hw_addr = addr;
811         int ret;
812
813         memcpy(priv->curr_addr, hw_addr->sa_data, ETH_ALEN);
814
815         /* Send request to firmware */
816         ret = mwifiex_send_cmd(priv, HostCmd_CMD_802_11_MAC_ADDRESS,
817                                HostCmd_ACT_GEN_SET, 0, NULL, true);
818
819         if (!ret)
820                 memcpy(priv->netdev->dev_addr, priv->curr_addr, ETH_ALEN);
821         else
822                 mwifiex_dbg(priv->adapter, ERROR,
823                             "set mac address failed: ret=%d\n", ret);
824
825         memcpy(dev->dev_addr, priv->curr_addr, ETH_ALEN);
826
827         return ret;
828 }
829
830 /*
831  * CFG802.11 network device handler for setting multicast list.
832  */
833 static void mwifiex_set_multicast_list(struct net_device *dev)
834 {
835         struct mwifiex_private *priv = mwifiex_netdev_get_priv(dev);
836         struct mwifiex_multicast_list mcast_list;
837
838         if (dev->flags & IFF_PROMISC) {
839                 mcast_list.mode = MWIFIEX_PROMISC_MODE;
840         } else if (dev->flags & IFF_ALLMULTI ||
841                    netdev_mc_count(dev) > MWIFIEX_MAX_MULTICAST_LIST_SIZE) {
842                 mcast_list.mode = MWIFIEX_ALL_MULTI_MODE;
843         } else {
844                 mcast_list.mode = MWIFIEX_MULTICAST_MODE;
845                 mcast_list.num_multicast_addr =
846                         mwifiex_copy_mcast_addr(&mcast_list, dev);
847         }
848         mwifiex_request_set_multicast_list(priv, &mcast_list);
849 }
850
851 /*
852  * CFG802.11 network device handler for transmission timeout.
853  */
854 static void
855 mwifiex_tx_timeout(struct net_device *dev)
856 {
857         struct mwifiex_private *priv = mwifiex_netdev_get_priv(dev);
858
859         priv->num_tx_timeout++;
860         priv->tx_timeout_cnt++;
861         mwifiex_dbg(priv->adapter, ERROR,
862                     "%lu : Tx timeout(#%d), bss_type-num = %d-%d\n",
863                     jiffies, priv->tx_timeout_cnt, priv->bss_type,
864                     priv->bss_num);
865         mwifiex_set_trans_start(dev);
866
867         if (priv->tx_timeout_cnt > TX_TIMEOUT_THRESHOLD &&
868             priv->adapter->if_ops.card_reset) {
869                 mwifiex_dbg(priv->adapter, ERROR,
870                             "tx_timeout_cnt exceeds threshold.\t"
871                             "Triggering card reset!\n");
872                 priv->adapter->if_ops.card_reset(priv->adapter);
873         }
874 }
875
876 void mwifiex_dump_drv_info(struct mwifiex_adapter *adapter)
877 {
878         void *p;
879         char drv_version[64];
880         struct usb_card_rec *cardp;
881         struct sdio_mmc_card *sdio_card;
882         struct mwifiex_private *priv;
883         int i, idx;
884         struct netdev_queue *txq;
885         struct mwifiex_debug_info *debug_info;
886
887         if (adapter->drv_info_dump) {
888                 vfree(adapter->drv_info_dump);
889                 adapter->drv_info_dump = NULL;
890                 adapter->drv_info_size = 0;
891         }
892
893         mwifiex_dbg(adapter, MSG, "=== DRIVER INFO DUMP START===\n");
894
895         adapter->drv_info_dump = vzalloc(MWIFIEX_DRV_INFO_SIZE_MAX);
896
897         if (!adapter->drv_info_dump)
898                 return;
899
900         p = (char *)(adapter->drv_info_dump);
901         p += sprintf(p, "driver_name = " "\"mwifiex\"\n");
902
903         mwifiex_drv_get_driver_version(adapter, drv_version,
904                                        sizeof(drv_version) - 1);
905         p += sprintf(p, "driver_version = %s\n", drv_version);
906
907         if (adapter->iface_type == MWIFIEX_USB) {
908                 cardp = (struct usb_card_rec *)adapter->card;
909                 p += sprintf(p, "tx_cmd_urb_pending = %d\n",
910                              atomic_read(&cardp->tx_cmd_urb_pending));
911                 p += sprintf(p, "tx_data_urb_pending = %d\n",
912                              atomic_read(&cardp->tx_data_urb_pending));
913                 p += sprintf(p, "rx_cmd_urb_pending = %d\n",
914                              atomic_read(&cardp->rx_cmd_urb_pending));
915                 p += sprintf(p, "rx_data_urb_pending = %d\n",
916                              atomic_read(&cardp->rx_data_urb_pending));
917         }
918
919         p += sprintf(p, "tx_pending = %d\n",
920                      atomic_read(&adapter->tx_pending));
921         p += sprintf(p, "rx_pending = %d\n",
922                      atomic_read(&adapter->rx_pending));
923
924         if (adapter->iface_type == MWIFIEX_SDIO) {
925                 sdio_card = (struct sdio_mmc_card *)adapter->card;
926                 p += sprintf(p, "\nmp_rd_bitmap=0x%x curr_rd_port=0x%x\n",
927                              sdio_card->mp_rd_bitmap, sdio_card->curr_rd_port);
928                 p += sprintf(p, "mp_wr_bitmap=0x%x curr_wr_port=0x%x\n",
929                              sdio_card->mp_wr_bitmap, sdio_card->curr_wr_port);
930         }
931
932         for (i = 0; i < adapter->priv_num; i++) {
933                 if (!adapter->priv[i] || !adapter->priv[i]->netdev)
934                         continue;
935                 priv = adapter->priv[i];
936                 p += sprintf(p, "\n[interface  : \"%s\"]\n",
937                              priv->netdev->name);
938                 p += sprintf(p, "wmm_tx_pending[0] = %d\n",
939                              atomic_read(&priv->wmm_tx_pending[0]));
940                 p += sprintf(p, "wmm_tx_pending[1] = %d\n",
941                              atomic_read(&priv->wmm_tx_pending[1]));
942                 p += sprintf(p, "wmm_tx_pending[2] = %d\n",
943                              atomic_read(&priv->wmm_tx_pending[2]));
944                 p += sprintf(p, "wmm_tx_pending[3] = %d\n",
945                              atomic_read(&priv->wmm_tx_pending[3]));
946                 p += sprintf(p, "media_state=\"%s\"\n", !priv->media_connected ?
947                              "Disconnected" : "Connected");
948                 p += sprintf(p, "carrier %s\n", (netif_carrier_ok(priv->netdev)
949                              ? "on" : "off"));
950                 for (idx = 0; idx < priv->netdev->num_tx_queues; idx++) {
951                         txq = netdev_get_tx_queue(priv->netdev, idx);
952                         p += sprintf(p, "tx queue %d:%s  ", idx,
953                                      netif_tx_queue_stopped(txq) ?
954                                      "stopped" : "started");
955                 }
956                 p += sprintf(p, "\n%s: num_tx_timeout = %d\n",
957                              priv->netdev->name, priv->num_tx_timeout);
958         }
959
960         if (adapter->iface_type == MWIFIEX_SDIO) {
961                 p += sprintf(p, "\n=== SDIO register DUMP===\n");
962                 if (adapter->if_ops.reg_dump)
963                         p += adapter->if_ops.reg_dump(adapter, p);
964         }
965
966         p += sprintf(p, "\n=== MORE DEBUG INFORMATION\n");
967         debug_info = kzalloc(sizeof(*debug_info), GFP_KERNEL);
968         if (debug_info) {
969                 for (i = 0; i < adapter->priv_num; i++) {
970                         if (!adapter->priv[i] || !adapter->priv[i]->netdev)
971                                 continue;
972                         priv = adapter->priv[i];
973                         mwifiex_get_debug_info(priv, debug_info);
974                         p += mwifiex_debug_info_to_buffer(priv, p, debug_info);
975                         break;
976                 }
977                 kfree(debug_info);
978         }
979
980         adapter->drv_info_size = p - adapter->drv_info_dump;
981         mwifiex_dbg(adapter, MSG, "=== DRIVER INFO DUMP END===\n");
982 }
983 EXPORT_SYMBOL_GPL(mwifiex_dump_drv_info);
984
985 /*
986  * CFG802.11 network device handler for statistics retrieval.
987  */
988 static struct net_device_stats *mwifiex_get_stats(struct net_device *dev)
989 {
990         struct mwifiex_private *priv = mwifiex_netdev_get_priv(dev);
991
992         return &priv->stats;
993 }
994
995 static u16
996 mwifiex_netdev_select_wmm_queue(struct net_device *dev, struct sk_buff *skb,
997                                 void *accel_priv, select_queue_fallback_t fallback)
998 {
999         skb->priority = cfg80211_classify8021d(skb, NULL);
1000         return mwifiex_1d_to_wmm_queue[skb->priority];
1001 }
1002
1003 /* Network device handlers */
1004 static const struct net_device_ops mwifiex_netdev_ops = {
1005         .ndo_open = mwifiex_open,
1006         .ndo_stop = mwifiex_close,
1007         .ndo_start_xmit = mwifiex_hard_start_xmit,
1008         .ndo_set_mac_address = mwifiex_set_mac_address,
1009         .ndo_tx_timeout = mwifiex_tx_timeout,
1010         .ndo_get_stats = mwifiex_get_stats,
1011         .ndo_set_rx_mode = mwifiex_set_multicast_list,
1012         .ndo_select_queue = mwifiex_netdev_select_wmm_queue,
1013 };
1014
1015 /*
1016  * This function initializes the private structure parameters.
1017  *
1018  * The following wait queues are initialized -
1019  *      - IOCTL wait queue
1020  *      - Command wait queue
1021  *      - Statistics wait queue
1022  *
1023  * ...and the following default parameters are set -
1024  *      - Current key index     : Set to 0
1025  *      - Rate index            : Set to auto
1026  *      - Media connected       : Set to disconnected
1027  *      - Adhoc link sensed     : Set to false
1028  *      - Nick name             : Set to null
1029  *      - Number of Tx timeout  : Set to 0
1030  *      - Device address        : Set to current address
1031  *      - Rx histogram statistc : Set to 0
1032  *
1033  * In addition, the CFG80211 work queue is also created.
1034  */
1035 void mwifiex_init_priv_params(struct mwifiex_private *priv,
1036                               struct net_device *dev)
1037 {
1038         dev->netdev_ops = &mwifiex_netdev_ops;
1039         dev->destructor = free_netdev;
1040         /* Initialize private structure */
1041         priv->current_key_index = 0;
1042         priv->media_connected = false;
1043         memset(priv->mgmt_ie, 0,
1044                sizeof(struct mwifiex_ie) * MAX_MGMT_IE_INDEX);
1045         priv->beacon_idx = MWIFIEX_AUTO_IDX_MASK;
1046         priv->proberesp_idx = MWIFIEX_AUTO_IDX_MASK;
1047         priv->assocresp_idx = MWIFIEX_AUTO_IDX_MASK;
1048         priv->gen_idx = MWIFIEX_AUTO_IDX_MASK;
1049         priv->num_tx_timeout = 0;
1050         ether_addr_copy(priv->curr_addr, priv->adapter->perm_addr);
1051         memcpy(dev->dev_addr, priv->curr_addr, ETH_ALEN);
1052
1053         if (GET_BSS_ROLE(priv) == MWIFIEX_BSS_ROLE_STA ||
1054             GET_BSS_ROLE(priv) == MWIFIEX_BSS_ROLE_UAP) {
1055                 priv->hist_data = kmalloc(sizeof(*priv->hist_data), GFP_KERNEL);
1056                 if (priv->hist_data)
1057                         mwifiex_hist_data_reset(priv);
1058         }
1059 }
1060
1061 /*
1062  * This function check if command is pending.
1063  */
1064 int is_command_pending(struct mwifiex_adapter *adapter)
1065 {
1066         unsigned long flags;
1067         int is_cmd_pend_q_empty;
1068
1069         spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
1070         is_cmd_pend_q_empty = list_empty(&adapter->cmd_pending_q);
1071         spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
1072
1073         return !is_cmd_pend_q_empty;
1074 }
1075
1076 /*
1077  * This is the RX work queue function.
1078  *
1079  * It handles the RX operations.
1080  */
1081 static void mwifiex_rx_work_queue(struct work_struct *work)
1082 {
1083         struct mwifiex_adapter *adapter =
1084                 container_of(work, struct mwifiex_adapter, rx_work);
1085
1086         if (adapter->surprise_removed)
1087                 return;
1088         mwifiex_process_rx(adapter);
1089 }
1090
1091 /*
1092  * This is the main work queue function.
1093  *
1094  * It handles the main process, which in turn handles the complete
1095  * driver operations.
1096  */
1097 static void mwifiex_main_work_queue(struct work_struct *work)
1098 {
1099         struct mwifiex_adapter *adapter =
1100                 container_of(work, struct mwifiex_adapter, main_work);
1101
1102         if (adapter->surprise_removed)
1103                 return;
1104         mwifiex_main_process(adapter);
1105 }
1106
1107 /*
1108  * This function adds the card.
1109  *
1110  * This function follows the following major steps to set up the device -
1111  *      - Initialize software. This includes probing the card, registering
1112  *        the interface operations table, and allocating/initializing the
1113  *        adapter structure
1114  *      - Set up the netlink socket
1115  *      - Create and start the main work queue
1116  *      - Register the device
1117  *      - Initialize firmware and hardware
1118  *      - Add logical interfaces
1119  */
1120 int
1121 mwifiex_add_card(void *card, struct semaphore *sem,
1122                  struct mwifiex_if_ops *if_ops, u8 iface_type)
1123 {
1124         struct mwifiex_adapter *adapter;
1125
1126         if (down_interruptible(sem))
1127                 goto exit_sem_err;
1128
1129         if (mwifiex_register(card, if_ops, (void **)&adapter)) {
1130                 pr_err("%s: software init failed\n", __func__);
1131                 goto err_init_sw;
1132         }
1133
1134         adapter->iface_type = iface_type;
1135         adapter->card_sem = sem;
1136
1137         adapter->hw_status = MWIFIEX_HW_STATUS_INITIALIZING;
1138         adapter->surprise_removed = false;
1139         init_waitqueue_head(&adapter->init_wait_q);
1140         adapter->is_suspended = false;
1141         adapter->hs_activated = false;
1142         init_waitqueue_head(&adapter->hs_activate_wait_q);
1143         init_waitqueue_head(&adapter->cmd_wait_q.wait);
1144         adapter->cmd_wait_q.status = 0;
1145         adapter->scan_wait_q_woken = false;
1146
1147         if ((num_possible_cpus() > 1) || adapter->iface_type == MWIFIEX_USB) {
1148                 adapter->rx_work_enabled = true;
1149                 pr_notice("rx work enabled, cpus %d\n", num_possible_cpus());
1150         }
1151
1152         adapter->workqueue =
1153                 alloc_workqueue("MWIFIEX_WORK_QUEUE",
1154                                 WQ_HIGHPRI | WQ_MEM_RECLAIM | WQ_UNBOUND, 1);
1155         if (!adapter->workqueue)
1156                 goto err_kmalloc;
1157
1158         INIT_WORK(&adapter->main_work, mwifiex_main_work_queue);
1159
1160         if (adapter->rx_work_enabled) {
1161                 adapter->rx_workqueue = alloc_workqueue("MWIFIEX_RX_WORK_QUEUE",
1162                                                         WQ_HIGHPRI |
1163                                                         WQ_MEM_RECLAIM |
1164                                                         WQ_UNBOUND, 1);
1165                 if (!adapter->rx_workqueue)
1166                         goto err_kmalloc;
1167
1168                 INIT_WORK(&adapter->rx_work, mwifiex_rx_work_queue);
1169         }
1170
1171         /* Register the device. Fill up the private data structure with relevant
1172            information from the card. */
1173         if (adapter->if_ops.register_dev(adapter)) {
1174                 pr_err("%s: failed to register mwifiex device\n", __func__);
1175                 goto err_registerdev;
1176         }
1177
1178         if (mwifiex_init_hw_fw(adapter)) {
1179                 pr_err("%s: firmware init failed\n", __func__);
1180                 goto err_init_fw;
1181         }
1182
1183         return 0;
1184
1185 err_init_fw:
1186         pr_debug("info: %s: unregister device\n", __func__);
1187         if (adapter->if_ops.unregister_dev)
1188                 adapter->if_ops.unregister_dev(adapter);
1189         if (adapter->hw_status == MWIFIEX_HW_STATUS_READY) {
1190                 pr_debug("info: %s: shutdown mwifiex\n", __func__);
1191                 adapter->init_wait_q_woken = false;
1192
1193                 if (mwifiex_shutdown_drv(adapter) == -EINPROGRESS)
1194                         wait_event_interruptible(adapter->init_wait_q,
1195                                                  adapter->init_wait_q_woken);
1196         }
1197 err_registerdev:
1198         adapter->surprise_removed = true;
1199         mwifiex_terminate_workqueue(adapter);
1200 err_kmalloc:
1201         mwifiex_free_adapter(adapter);
1202
1203 err_init_sw:
1204         up(sem);
1205
1206 exit_sem_err:
1207         return -1;
1208 }
1209 EXPORT_SYMBOL_GPL(mwifiex_add_card);
1210
1211 /*
1212  * This function removes the card.
1213  *
1214  * This function follows the following major steps to remove the device -
1215  *      - Stop data traffic
1216  *      - Shutdown firmware
1217  *      - Remove the logical interfaces
1218  *      - Terminate the work queue
1219  *      - Unregister the device
1220  *      - Free the adapter structure
1221  */
1222 int mwifiex_remove_card(struct mwifiex_adapter *adapter, struct semaphore *sem)
1223 {
1224         struct mwifiex_private *priv = NULL;
1225         int i;
1226
1227         if (down_interruptible(sem))
1228                 goto exit_sem_err;
1229
1230         if (!adapter)
1231                 goto exit_remove;
1232
1233         /* We can no longer handle interrupts once we start doing the teardown
1234          * below. */
1235         if (adapter->if_ops.disable_int)
1236                 adapter->if_ops.disable_int(adapter);
1237
1238         adapter->surprise_removed = true;
1239
1240         mwifiex_terminate_workqueue(adapter);
1241
1242         /* Stop data */
1243         for (i = 0; i < adapter->priv_num; i++) {
1244                 priv = adapter->priv[i];
1245                 if (priv && priv->netdev) {
1246                         mwifiex_stop_net_dev_queue(priv->netdev, adapter);
1247                         if (netif_carrier_ok(priv->netdev))
1248                                 netif_carrier_off(priv->netdev);
1249                 }
1250         }
1251
1252         mwifiex_dbg(adapter, CMD,
1253                     "cmd: calling mwifiex_shutdown_drv...\n");
1254         adapter->init_wait_q_woken = false;
1255
1256         if (mwifiex_shutdown_drv(adapter) == -EINPROGRESS)
1257                 wait_event_interruptible(adapter->init_wait_q,
1258                                          adapter->init_wait_q_woken);
1259         mwifiex_dbg(adapter, CMD,
1260                     "cmd: mwifiex_shutdown_drv done\n");
1261         if (atomic_read(&adapter->rx_pending) ||
1262             atomic_read(&adapter->tx_pending) ||
1263             atomic_read(&adapter->cmd_pending)) {
1264                 mwifiex_dbg(adapter, ERROR,
1265                             "rx_pending=%d, tx_pending=%d,\t"
1266                             "cmd_pending=%d\n",
1267                             atomic_read(&adapter->rx_pending),
1268                             atomic_read(&adapter->tx_pending),
1269                             atomic_read(&adapter->cmd_pending));
1270         }
1271
1272         for (i = 0; i < adapter->priv_num; i++) {
1273                 priv = adapter->priv[i];
1274
1275                 if (!priv)
1276                         continue;
1277
1278                 rtnl_lock();
1279                 if (priv->netdev &&
1280                     priv->wdev.iftype != NL80211_IFTYPE_UNSPECIFIED)
1281                         mwifiex_del_virtual_intf(adapter->wiphy, &priv->wdev);
1282                 rtnl_unlock();
1283         }
1284
1285         wiphy_unregister(adapter->wiphy);
1286         wiphy_free(adapter->wiphy);
1287
1288         /* Unregister device */
1289         mwifiex_dbg(adapter, INFO,
1290                     "info: unregister device\n");
1291         if (adapter->if_ops.unregister_dev)
1292                 adapter->if_ops.unregister_dev(adapter);
1293         /* Free adapter structure */
1294         mwifiex_dbg(adapter, INFO,
1295                     "info: free adapter\n");
1296         mwifiex_free_adapter(adapter);
1297
1298 exit_remove:
1299         up(sem);
1300 exit_sem_err:
1301         return 0;
1302 }
1303 EXPORT_SYMBOL_GPL(mwifiex_remove_card);
1304
1305 /*
1306  * This function initializes the module.
1307  *
1308  * The debug FS is also initialized if configured.
1309  */
1310 static int
1311 mwifiex_init_module(void)
1312 {
1313 #ifdef CONFIG_DEBUG_FS
1314         mwifiex_debugfs_init();
1315 #endif
1316         return 0;
1317 }
1318
1319 /*
1320  * This function cleans up the module.
1321  *
1322  * The debug FS is removed if available.
1323  */
1324 static void
1325 mwifiex_cleanup_module(void)
1326 {
1327 #ifdef CONFIG_DEBUG_FS
1328         mwifiex_debugfs_remove();
1329 #endif
1330 }
1331
1332 module_init(mwifiex_init_module);
1333 module_exit(mwifiex_cleanup_module);
1334
1335 MODULE_AUTHOR("Marvell International Ltd.");
1336 MODULE_DESCRIPTION("Marvell WiFi-Ex Driver version " VERSION);
1337 MODULE_VERSION(VERSION);
1338 MODULE_LICENSE("GPL v2");