drivers/net/wireless/wl12xx/tx.c

   1 /*
   2  * This file is part of wl1271
   3  *
   4  * Copyright (C) 2009 Nokia Corporation
   5  *
   6  * Contact: Luciano Coelho <luciano.coelho@nokia.com>
   7  *
   8  * This program is free software; you can redistribute it and/or
   9  * modify it under the terms of the GNU General Public License
  10  * version 2 as published by the Free Software Foundation.
  11  *
  12  * This program is distributed in the hope that it will be useful, but
  13  * WITHOUT ANY WARRANTY; without even the implied warranty of
  14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  15  * General Public License for more details.
  16  *
  17  * You should have received a copy of the GNU General Public License
  18  * along with this program; if not, write to the Free Software
  19  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
  20  * 02110-1301 USA
  21  *
  22  */
  23
  24 #include <linux/kernel.h>
  25 #include <linux/module.h>
  26 #include <linux/etherdevice.h>
  27
  28 #include "wl12xx.h"
  29 #include "io.h"
  30 #include "reg.h"
  31 #include "ps.h"
  32 #include "tx.h"
  33
  34 static int wl1271_set_default_wep_key(struct wl1271 *wl, u8 id)
  35 {
  36         int ret;
  37         bool is_ap = (wl->bss_type == BSS_TYPE_AP_BSS);
  38
  39         if (is_ap)
  40                 ret = wl1271_cmd_set_ap_default_wep_key(wl, id);
  41         else
  42                 ret = wl1271_cmd_set_sta_default_wep_key(wl, id);
  43
  44         if (ret < 0)
  45                 return ret;
  46
  47         wl1271_debug(DEBUG_CRYPT, "default wep key idx: %d", (int)id);
  48         return 0;
  49 }
  50
  51 static int wl1271_alloc_tx_id(struct wl1271 *wl, struct sk_buff *skb)
  52 {
  53         int id;
  54
  55         id = find_first_zero_bit(wl->tx_frames_map, ACX_TX_DESCRIPTORS);
  56         if (id >= ACX_TX_DESCRIPTORS)
  57                 return -EBUSY;
  58
  59         __set_bit(id, wl->tx_frames_map);
  60         wl->tx_frames[id] = skb;
  61         wl->tx_frames_cnt++;
  62         return id;
  63 }
  64
  65 static void wl1271_free_tx_id(struct wl1271 *wl, int id)
  66 {
  67         if (__test_and_clear_bit(id, wl->tx_frames_map)) {
  68                 wl->tx_frames[id] = NULL;
  69                 wl->tx_frames_cnt--;
  70         }
  71 }
  72
  73 static void wl1271_tx_ap_update_inconnection_sta(struct wl1271 *wl,
  74                                                  struct sk_buff *skb)
  75 {
  76         struct ieee80211_hdr *hdr;
  77
  78         /*
  79          * add the station to the known list before transmitting the
  80          * authentication response. this way it won't get de-authed by FW
  81          * when transmitting too soon.
  82          */
  83         hdr = (struct ieee80211_hdr *)(skb->data +
  84                                        sizeof(struct wl1271_tx_hw_descr));
  85         if (ieee80211_is_auth(hdr->frame_control))
  86                 wl1271_acx_set_inconnection_sta(wl, hdr->addr1);
  87 }
  88
  89 static void wl1271_tx_regulate_link(struct wl1271 *wl, u8 hlid)
  90 {
  91         bool fw_ps;
  92         u8 tx_blks;
  93
  94         /* only regulate station links */
  95         if (hlid < WL1271_AP_STA_HLID_START)
  96                 return;
  97
  98         fw_ps = test_bit(hlid, (unsigned long *)&wl->ap_fw_ps_map);
  99         tx_blks = wl->links[hlid].allocated_blks;
 100
 101         /*
 102          * if in FW PS and there is enough data in FW we can put the link
 103          * into high-level PS and clean out its TX queues.
 104          */
 105         if (fw_ps && tx_blks >= WL1271_PS_STA_MAX_BLOCKS)
 106                 wl1271_ps_link_start(wl, hlid, true);
 107 }
 108
 109 u8 wl1271_tx_get_hlid(struct sk_buff *skb)
 110 {
 111         struct ieee80211_tx_info *control = IEEE80211_SKB_CB(skb);
 112
 113         if (control->control.sta) {
 114                 struct wl1271_station *wl_sta;
 115
 116                 wl_sta = (struct wl1271_station *)
 117                                 control->control.sta->drv_priv;
 118                 return wl_sta->hlid;
 119         } else {
 120                 struct ieee80211_hdr *hdr;
 121
 122                 hdr = (struct ieee80211_hdr *)skb->data;
 123                 if (ieee80211_is_mgmt(hdr->frame_control))
 124                         return WL1271_AP_GLOBAL_HLID;
 125                 else
 126                         return WL1271_AP_BROADCAST_HLID;
 127         }
 128 }
 129
 130 static int wl1271_tx_allocate(struct wl1271 *wl, struct sk_buff *skb, u32 extra,
 131                                 u32 buf_offset, u8 hlid)
 132 {
 133         struct wl1271_tx_hw_descr *desc;
 134         u32 total_len = skb->len + sizeof(struct wl1271_tx_hw_descr) + extra;
 135         u32 len;
 136         u32 total_blocks;
 137         int id, ret = -EBUSY;
 138
 139         if (buf_offset + total_len > WL1271_AGGR_BUFFER_SIZE)
 140                 return -EAGAIN;
 141
 142         /* allocate free identifier for the packet */
 143         id = wl1271_alloc_tx_id(wl, skb);
 144         if (id < 0)
 145                 return id;
 146
 147         /* approximate the number of blocks required for this packet
 148            in the firmware */
 149         if (wl->block_size)
 150                 len = ALIGN(total_len, wl->block_size);
 151         else
 152                 len = total_len;
 153
 154         total_blocks = (len + TX_HW_BLOCK_SIZE - 1) / TX_HW_BLOCK_SIZE +
 155                 TX_HW_BLOCK_SPARE;
 156
 157         if (total_blocks <= wl->tx_blocks_available) {
 158                 desc = (struct wl1271_tx_hw_descr *)skb_push(
 159                         skb, total_len - skb->len);
 160
 161                 /* HW descriptor fields change between wl127x and wl128x */
 162                 if (wl->chip.id == CHIP_ID_1283_PG20) {
 163                         desc->wl128x_mem.total_mem_blocks = total_blocks;
 164                 } else {
 165                         desc->wl127x_mem.extra_blocks = TX_HW_BLOCK_SPARE;
 166                         desc->wl127x_mem.total_mem_blocks = total_blocks;
 167                 }
 168
 169                 desc->id = id;
 170
 171                 wl->tx_blocks_available -= total_blocks;
 172
 173                 if (wl->bss_type == BSS_TYPE_AP_BSS)
 174                         wl->links[hlid].allocated_blks += total_blocks;
 175
 176                 ret = 0;
 177
 178                 wl1271_debug(DEBUG_TX,
 179                              "tx_allocate: size: %d, blocks: %d, id: %d",
 180                              total_len, total_blocks, id);
 181         } else {
 182                 wl1271_free_tx_id(wl, id);
 183         }
 184
 185         return ret;
 186 }
 187
 188 static void wl1271_tx_fill_hdr(struct wl1271 *wl, struct sk_buff *skb,
 189                               u32 extra, struct ieee80211_tx_info *control,
 190                               u8 hlid)
 191 {
 192         struct timespec ts;
 193         struct wl1271_tx_hw_descr *desc;
 194         int aligned_len, ac, rate_idx;
 195         s64 hosttime;
 196         u16 tx_attr;
 197
 198         desc = (struct wl1271_tx_hw_descr *) skb->data;
 199
 200         /* relocate space for security header */
 201         if (extra) {
 202                 void *framestart = skb->data + sizeof(*desc);
 203                 u16 fc = *(u16 *)(framestart + extra);
 204                 int hdrlen = ieee80211_hdrlen(cpu_to_le16(fc));
 205                 memmove(framestart, framestart + extra, hdrlen);
 206         }
 207
 208         /* configure packet life time */
 209         getnstimeofday(&ts);
 210         hosttime = (timespec_to_ns(&ts) >> 10);
 211         desc->start_time = cpu_to_le32(hosttime - wl->time_offset);
 212
 213         if (wl->bss_type != BSS_TYPE_AP_BSS)
 214                 desc->life_time = cpu_to_le16(TX_HW_MGMT_PKT_LIFETIME_TU);
 215         else
 216                 desc->life_time = cpu_to_le16(TX_HW_AP_MODE_PKT_LIFETIME_TU);
 217
 218         /* queue (we use same identifiers for tid's and ac's */
 219         ac = wl1271_tx_get_queue(skb_get_queue_mapping(skb));
 220         desc->tid = ac;
 221
 222         if (skb->pkt_type == TX_PKT_TYPE_DUMMY_REQ) {
 223                 /*
 224                  * FW expects the dummy packet to have an invalid session id -
 225                  * any session id that is different than the one set in the join
 226                  */
 227                 tx_attr = ((~wl->session_counter) <<
 228                            TX_HW_ATTR_OFST_SESSION_COUNTER) &
 229                            TX_HW_ATTR_SESSION_COUNTER;
 230
 231                 tx_attr |= TX_HW_ATTR_TX_DUMMY_REQ;
 232
 233                 /* Dummy packets require the TID to be management */
 234                 desc->tid = WL1271_TID_MGMT;
 235         } else {
 236                 /* configure the tx attributes */
 237                 tx_attr =
 238                         wl->session_counter << TX_HW_ATTR_OFST_SESSION_COUNTER;
 239         }
 240
 241         if (wl->bss_type != BSS_TYPE_AP_BSS) {
 242                 desc->aid = hlid;
 243
 244                 /* if the packets are destined for AP (have a STA entry)
 245                    send them with AP rate policies, otherwise use default
 246                    basic rates */
 247                 if (control->control.sta)
 248                         rate_idx = ACX_TX_AP_FULL_RATE;
 249                 else
 250                         rate_idx = ACX_TX_BASIC_RATE;
 251         } else {
 252                 desc->hlid = hlid;
 253                 switch (hlid) {
 254                 case WL1271_AP_GLOBAL_HLID:
 255                         rate_idx = ACX_TX_AP_MODE_MGMT_RATE;
 256                         break;
 257                 case WL1271_AP_BROADCAST_HLID:
 258                         rate_idx = ACX_TX_AP_MODE_BCST_RATE;
 259                         break;
 260                 default:
 261                         rate_idx = ac;
 262                         break;
 263                 }
 264         }
 265
 266         tx_attr |= rate_idx << TX_HW_ATTR_OFST_RATE_POLICY;
 267         desc->reserved = 0;
 268
 269         if (wl->block_size) {
 270                 aligned_len = ALIGN(skb->len, wl->block_size);
 271
 272                 desc->wl128x_mem.extra_bytes = aligned_len - skb->len;
 273                 desc->length = cpu_to_le16(aligned_len >> 2);
 274
 275                 wl1271_debug(DEBUG_TX, "tx_fill_hdr: hlid: %d "
 276                              "tx_attr: 0x%x len: %d life: %d mem: %d",
 277                              desc->hlid, tx_attr,
 278                              le16_to_cpu(desc->length),
 279                              le16_to_cpu(desc->life_time),
 280                              desc->wl128x_mem.total_mem_blocks);
 281         } else {
 282                 int pad;
 283
 284                 /* align the length (and store in terms of words) */
 285                 aligned_len = ALIGN(skb->len, WL1271_TX_ALIGN_TO);
 286                 desc->length = cpu_to_le16(aligned_len >> 2);
 287
 288                 /* calculate number of padding bytes */
 289                 pad = aligned_len - skb->len;
 290                 tx_attr |= pad << TX_HW_ATTR_OFST_LAST_WORD_PAD;
 291
 292                 wl1271_debug(DEBUG_TX, "tx_fill_hdr: pad: %d hlid: %d "
 293                              "tx_attr: 0x%x len: %d life: %d mem: %d", pad,
 294                              desc->hlid, tx_attr,
 295                              le16_to_cpu(desc->length),
 296                              le16_to_cpu(desc->life_time),
 297                              desc->wl127x_mem.total_mem_blocks);
 298         }
 299
 300         desc->tx_attr = cpu_to_le16(tx_attr);
 301 }
 302
 303 /* caller must hold wl->mutex */
 304 static int wl1271_prepare_tx_frame(struct wl1271 *wl, struct sk_buff *skb,
 305                                                         u32 buf_offset)
 306 {
 307         struct ieee80211_tx_info *info;
 308         u32 extra = 0;
 309         int ret = 0;
 310         u32 total_len;
 311         u8 hlid;
 312
 313         if (!skb)
 314                 return -EINVAL;
 315
 316         info = IEEE80211_SKB_CB(skb);
 317
 318         if (info->control.hw_key &&
 319             info->control.hw_key->cipher == WLAN_CIPHER_SUITE_TKIP)
 320                 extra = WL1271_TKIP_IV_SPACE;
 321
 322         if (info->control.hw_key) {
 323                 bool is_wep;
 324                 u8 idx = info->control.hw_key->hw_key_idx;
 325                 u32 cipher = info->control.hw_key->cipher;
 326
 327                 is_wep = (cipher == WLAN_CIPHER_SUITE_WEP40) ||
 328                          (cipher == WLAN_CIPHER_SUITE_WEP104);
 329
 330                 if (unlikely(is_wep && wl->default_key != idx)) {
 331                         ret = wl1271_set_default_wep_key(wl, idx);
 332                         if (ret < 0)
 333                                 return ret;
 334                         wl->default_key = idx;
 335                 }
 336         }
 337
 338         if (wl->bss_type == BSS_TYPE_AP_BSS)
 339                 hlid = wl1271_tx_get_hlid(skb);
 340         else
 341                 hlid = TX_HW_DEFAULT_AID;
 342
 343         ret = wl1271_tx_allocate(wl, skb, extra, buf_offset, hlid);
 344         if (ret < 0)
 345                 return ret;
 346
 347         if (wl->bss_type == BSS_TYPE_AP_BSS) {
 348                 wl1271_tx_ap_update_inconnection_sta(wl, skb);
 349                 wl1271_tx_regulate_link(wl, hlid);
 350         }
 351
 352         wl1271_tx_fill_hdr(wl, skb, extra, info, hlid);
 353
 354         /*
 355          * The length of each packet is stored in terms of
 356          * words. Thus, we must pad the skb data to make sure its
 357          * length is aligned.  The number of padding bytes is computed
 358          * and set in wl1271_tx_fill_hdr.
 359          * In special cases, we want to align to a specific block size
 360          * (eg. for wl128x with SDIO we align to 256).
 361          */
 362         if (wl->block_size)
 363                 total_len = ALIGN(skb->len, wl->block_size);
 364         else
 365                 total_len = ALIGN(skb->len, WL1271_TX_ALIGN_TO);
 366
 367         memcpy(wl->aggr_buf + buf_offset, skb->data, skb->len);
 368         memset(wl->aggr_buf + buf_offset + skb->len, 0, total_len - skb->len);
 369
 370         return total_len;
 371 }
 372
 373 u32 wl1271_tx_enabled_rates_get(struct wl1271 *wl, u32 rate_set)
 374 {
 375         struct ieee80211_supported_band *band;
 376         u32 enabled_rates = 0;
 377         int bit;
 378
 379         band = wl->hw->wiphy->bands[wl->band];
 380         for (bit = 0; bit < band->n_bitrates; bit++) {
 381                 if (rate_set & 0x1)
 382                         enabled_rates |= band->bitrates[bit].hw_value;
 383                 rate_set >>= 1;
 384         }
 385
 386 #ifdef CONFIG_WL12XX_HT
 387         /* MCS rates indication are on bits 16 - 23 */
 388         rate_set >>= HW_HT_RATES_OFFSET - band->n_bitrates;
 389
 390         for (bit = 0; bit < 8; bit++) {
 391                 if (rate_set & 0x1)
 392                         enabled_rates |= (CONF_HW_BIT_RATE_MCS_0 << bit);
 393                 rate_set >>= 1;
 394         }
 395 #endif
 396
 397         return enabled_rates;
 398 }
 399
 400 void wl1271_handle_tx_low_watermark(struct wl1271 *wl)
 401 {
 402         unsigned long flags;
 403
 404         if (test_bit(WL1271_FLAG_TX_QUEUE_STOPPED, &wl->flags) &&
 405             wl->tx_queue_count <= WL1271_TX_QUEUE_LOW_WATERMARK) {
 406                 /* firmware buffer has space, restart queues */
 407                 spin_lock_irqsave(&wl->wl_lock, flags);
 408                 ieee80211_wake_queues(wl->hw);
 409                 clear_bit(WL1271_FLAG_TX_QUEUE_STOPPED, &wl->flags);
 410                 spin_unlock_irqrestore(&wl->wl_lock, flags);
 411         }
 412 }
 413
 414 static struct sk_buff *wl1271_sta_skb_dequeue(struct wl1271 *wl)
 415 {
 416         struct sk_buff *skb = NULL;
 417         unsigned long flags;
 418
 419         skb = skb_dequeue(&wl->tx_queue[CONF_TX_AC_VO]);
 420         if (skb)
 421                 goto out;
 422         skb = skb_dequeue(&wl->tx_queue[CONF_TX_AC_VI]);
 423         if (skb)
 424                 goto out;
 425         skb = skb_dequeue(&wl->tx_queue[CONF_TX_AC_BE]);
 426         if (skb)
 427                 goto out;
 428         skb = skb_dequeue(&wl->tx_queue[CONF_TX_AC_BK]);
 429
 430 out:
 431         if (skb) {
 432                 spin_lock_irqsave(&wl->wl_lock, flags);
 433                 wl->tx_queue_count--;
 434                 spin_unlock_irqrestore(&wl->wl_lock, flags);
 435         }
 436
 437         return skb;
 438 }
 439
 440 static struct sk_buff *wl1271_ap_skb_dequeue(struct wl1271 *wl)
 441 {
 442         struct sk_buff *skb = NULL;
 443         unsigned long flags;
 444         int i, h, start_hlid;
 445
 446         /* start from the link after the last one */
 447         start_hlid = (wl->last_tx_hlid + 1) % AP_MAX_LINKS;
 448
 449         /* dequeue according to AC, round robin on each link */
 450         for (i = 0; i < AP_MAX_LINKS; i++) {
 451                 h = (start_hlid + i) % AP_MAX_LINKS;
 452
 453                 skb = skb_dequeue(&wl->links[h].tx_queue[CONF_TX_AC_VO]);
 454                 if (skb)
 455                         goto out;
 456                 skb = skb_dequeue(&wl->links[h].tx_queue[CONF_TX_AC_VI]);
 457                 if (skb)
 458                         goto out;
 459                 skb = skb_dequeue(&wl->links[h].tx_queue[CONF_TX_AC_BE]);
 460                 if (skb)
 461                         goto out;
 462                 skb = skb_dequeue(&wl->links[h].tx_queue[CONF_TX_AC_BK]);
 463                 if (skb)
 464                         goto out;
 465         }
 466
 467 out:
 468         if (skb) {
 469                 wl->last_tx_hlid = h;
 470                 spin_lock_irqsave(&wl->wl_lock, flags);
 471                 wl->tx_queue_count--;
 472                 spin_unlock_irqrestore(&wl->wl_lock, flags);
 473         } else {
 474                 wl->last_tx_hlid = 0;
 475         }
 476
 477         return skb;
 478 }
 479
 480 static struct sk_buff *wl1271_skb_dequeue(struct wl1271 *wl)
 481 {
 482         if (wl->bss_type == BSS_TYPE_AP_BSS)
 483                 return wl1271_ap_skb_dequeue(wl);
 484
 485         return wl1271_sta_skb_dequeue(wl);
 486 }
 487
 488 static void wl1271_skb_queue_head(struct wl1271 *wl, struct sk_buff *skb)
 489 {
 490         unsigned long flags;
 491         int q = wl1271_tx_get_queue(skb_get_queue_mapping(skb));
 492
 493         if (wl->bss_type == BSS_TYPE_AP_BSS) {
 494                 u8 hlid = wl1271_tx_get_hlid(skb);
 495                 skb_queue_head(&wl->links[hlid].tx_queue[q], skb);
 496
 497                 /* make sure we dequeue the same packet next time */
 498                 wl->last_tx_hlid = (hlid + AP_MAX_LINKS - 1) % AP_MAX_LINKS;
 499         } else {
 500                 skb_queue_head(&wl->tx_queue[q], skb);
 501         }
 502
 503         spin_lock_irqsave(&wl->wl_lock, flags);
 504         wl->tx_queue_count++;
 505         spin_unlock_irqrestore(&wl->wl_lock, flags);
 506 }
 507
 508 void wl1271_tx_work_locked(struct wl1271 *wl)
 509 {
 510         struct sk_buff *skb;
 511         bool woken_up = false;
 512         u32 buf_offset = 0;
 513         bool sent_packets = false;
 514         int ret;
 515
 516         if (unlikely(wl->state == WL1271_STATE_OFF))
 517                 goto out;
 518
 519         while ((skb = wl1271_skb_dequeue(wl))) {
 520                 if (!woken_up) {
 521                         ret = wl1271_ps_elp_wakeup(wl);
 522                         if (ret < 0)
 523                                 goto out_ack;
 524                         woken_up = true;
 525                 }
 526
 527                 ret = wl1271_prepare_tx_frame(wl, skb, buf_offset);
 528                 if (ret == -EAGAIN) {
 529                         /*
 530                          * Aggregation buffer is full.
 531                          * Flush buffer and try again.
 532                          */
 533                         wl1271_skb_queue_head(wl, skb);
 534                         wl1271_write(wl, WL1271_SLV_MEM_DATA, wl->aggr_buf,
 535                                      buf_offset, true);
 536                         sent_packets = true;
 537                         buf_offset = 0;
 538                         continue;
 539                 } else if (ret == -EBUSY) {
 540                         /*
 541                          * Firmware buffer is full.
 542                          * Queue back last skb, and stop aggregating.
 543                          */
 544                         wl1271_skb_queue_head(wl, skb);
 545                         /* No work left, avoid scheduling redundant tx work */
 546                         set_bit(WL1271_FLAG_FW_TX_BUSY, &wl->flags);
 547                         goto out_ack;
 548                 } else if (ret < 0) {
 549                         dev_kfree_skb(skb);
 550                         goto out_ack;
 551                 }
 552                 buf_offset += ret;
 553                 wl->tx_packets_count++;
 554         }
 555
 556 out_ack:
 557         if (buf_offset) {
 558                 wl1271_write(wl, WL1271_SLV_MEM_DATA, wl->aggr_buf,
 559                                 buf_offset, true);
 560                 sent_packets = true;
 561         }
 562         if (sent_packets) {
 563                 /*
 564                  * Interrupt the firmware with the new packets. This is only
 565                  * required for older hardware revisions
 566                  */
 567                 if (wl->quirks & WL12XX_QUIRK_END_OF_TRANSACTION)
 568                         wl1271_write32(wl, WL1271_HOST_WR_ACCESS,
 569                                        wl->tx_packets_count);
 570
 571                 wl1271_handle_tx_low_watermark(wl);
 572         }
 573
 574 out:
 575         if (woken_up)
 576                 wl1271_ps_elp_sleep(wl);
 577 }
 578
 579 void wl1271_tx_work(struct work_struct *work)
 580 {
 581         struct wl1271 *wl = container_of(work, struct wl1271, tx_work);
 582
 583         mutex_lock(&wl->mutex);
 584         wl1271_tx_work_locked(wl);
 585         mutex_unlock(&wl->mutex);
 586 }
 587
 588 static void wl1271_tx_complete_packet(struct wl1271 *wl,
 589                                       struct wl1271_tx_hw_res_descr *result)
 590 {
 591         struct ieee80211_tx_info *info;
 592         struct sk_buff *skb;
 593         int id = result->id;
 594         int rate = -1;
 595         u8 retries = 0;
 596
 597         /* check for id legality */
 598         if (unlikely(id >= ACX_TX_DESCRIPTORS || wl->tx_frames[id] == NULL)) {
 599                 wl1271_warning("TX result illegal id: %d", id);
 600                 return;
 601         }
 602
 603         skb = wl->tx_frames[id];
 604         info = IEEE80211_SKB_CB(skb);
 605
 606         if (skb->pkt_type == TX_PKT_TYPE_DUMMY_REQ) {
 607                 dev_kfree_skb(skb);
 608                 wl1271_free_tx_id(wl, id);
 609                 return;
 610         }
 611
 612         /* update the TX status info */
 613         if (result->status == TX_SUCCESS) {
 614                 if (!(info->flags & IEEE80211_TX_CTL_NO_ACK))
 615                         info->flags |= IEEE80211_TX_STAT_ACK;
 616                 rate = wl1271_rate_to_idx(result->rate_class_index, wl->band);
 617                 retries = result->ack_failures;
 618         } else if (result->status == TX_RETRY_EXCEEDED) {
 619                 wl->stats.excessive_retries++;
 620                 retries = result->ack_failures;
 621         }
 622
 623         info->status.rates[0].idx = rate;
 624         info->status.rates[0].count = retries;
 625         info->status.rates[0].flags = 0;
 626         info->status.ack_signal = -1;
 627
 628         wl->stats.retry_count += result->ack_failures;
 629
 630         /* update security sequence number */
 631         wl->tx_security_seq += (result->lsb_security_sequence_number -
 632                                 wl->tx_security_last_seq);
 633         wl->tx_security_last_seq = result->lsb_security_sequence_number;
 634
 635         /* remove private header from packet */
 636         skb_pull(skb, sizeof(struct wl1271_tx_hw_descr));
 637
 638         /* remove TKIP header space if present */
 639         if (info->control.hw_key &&
 640             info->control.hw_key->cipher == WLAN_CIPHER_SUITE_TKIP) {
 641                 int hdrlen = ieee80211_get_hdrlen_from_skb(skb);
 642                 memmove(skb->data + WL1271_TKIP_IV_SPACE, skb->data, hdrlen);
 643                 skb_pull(skb, WL1271_TKIP_IV_SPACE);
 644         }
 645
 646         wl1271_debug(DEBUG_TX, "tx status id %u skb 0x%p failures %u rate 0x%x"
 647                      " status 0x%x",
 648                      result->id, skb, result->ack_failures,
 649                      result->rate_class_index, result->status);
 650
 651         /* return the packet to the stack */
 652         skb_queue_tail(&wl->deferred_tx_queue, skb);
 653         ieee80211_queue_work(wl->hw, &wl->netstack_work);
 654         wl1271_free_tx_id(wl, result->id);
 655 }
 656
 657 /* Called upon reception of a TX complete interrupt */
 658 void wl1271_tx_complete(struct wl1271 *wl)
 659 {
 660         struct wl1271_acx_mem_map *memmap =
 661                 (struct wl1271_acx_mem_map *)wl->target_mem_map;
 662         u32 count, fw_counter;
 663         u32 i;
 664
 665         /* read the tx results from the chipset */
 666         wl1271_read(wl, le32_to_cpu(memmap->tx_result),
 667                     wl->tx_res_if, sizeof(*wl->tx_res_if), false);
 668         fw_counter = le32_to_cpu(wl->tx_res_if->tx_result_fw_counter);
 669
 670         /* write host counter to chipset (to ack) */
 671         wl1271_write32(wl, le32_to_cpu(memmap->tx_result) +
 672                        offsetof(struct wl1271_tx_hw_res_if,
 673                                 tx_result_host_counter), fw_counter);
 674
 675         count = fw_counter - wl->tx_results_count;
 676         wl1271_debug(DEBUG_TX, "tx_complete received, packets: %d", count);
 677
 678         /* verify that the result buffer is not getting overrun */
 679         if (unlikely(count > TX_HW_RESULT_QUEUE_LEN))
 680                 wl1271_warning("TX result overflow from chipset: %d", count);
 681
 682         /* process the results */
 683         for (i = 0; i < count; i++) {
 684                 struct wl1271_tx_hw_res_descr *result;
 685                 u8 offset = wl->tx_results_count & TX_HW_RESULT_QUEUE_LEN_MASK;
 686
 687                 /* process the packet */
 688                 result =  &(wl->tx_res_if->tx_results_queue[offset]);
 689                 wl1271_tx_complete_packet(wl, result);
 690
 691                 wl->tx_results_count++;
 692         }
 693 }
 694
 695 void wl1271_tx_reset_link_queues(struct wl1271 *wl, u8 hlid)
 696 {
 697         struct sk_buff *skb;
 698         int i, total = 0;
 699         unsigned long flags;
 700         struct ieee80211_tx_info *info;
 701
 702         for (i = 0; i < NUM_TX_QUEUES; i++) {
 703                 while ((skb = skb_dequeue(&wl->links[hlid].tx_queue[i]))) {
 704                         wl1271_debug(DEBUG_TX, "link freeing skb 0x%p", skb);
 705                         info = IEEE80211_SKB_CB(skb);
 706                         info->status.rates[0].idx = -1;
 707                         info->status.rates[0].count = 0;
 708                         ieee80211_tx_status(wl->hw, skb);
 709                         total++;
 710                 }
 711         }
 712
 713         spin_lock_irqsave(&wl->wl_lock, flags);
 714         wl->tx_queue_count -= total;
 715         spin_unlock_irqrestore(&wl->wl_lock, flags);
 716
 717         wl1271_handle_tx_low_watermark(wl);
 718 }
 719
 720 /* caller must hold wl->mutex */
 721 void wl1271_tx_reset(struct wl1271 *wl)
 722 {
 723         int i;
 724         struct sk_buff *skb;
 725         struct ieee80211_tx_info *info;
 726
 727         /* TX failure */
 728         if (wl->bss_type == BSS_TYPE_AP_BSS) {
 729                 for (i = 0; i < AP_MAX_LINKS; i++) {
 730                         wl1271_tx_reset_link_queues(wl, i);
 731                         wl->links[i].allocated_blks = 0;
 732                         wl->links[i].prev_freed_blks = 0;
 733                 }
 734
 735                 wl->last_tx_hlid = 0;
 736         } else {
 737                 for (i = 0; i < NUM_TX_QUEUES; i++) {
 738                         while ((skb = skb_dequeue(&wl->tx_queue[i]))) {
 739                                 wl1271_debug(DEBUG_TX, "freeing skb 0x%p",
 740                                              skb);
 741
 742                                 if (skb->pkt_type == TX_PKT_TYPE_DUMMY_REQ) {
 743                                         dev_kfree_skb(skb);
 744                                 } else {
 745                                         info = IEEE80211_SKB_CB(skb);
 746                                         info->status.rates[0].idx = -1;
 747                                         info->status.rates[0].count = 0;
 748                                         ieee80211_tx_status(wl->hw, skb);
 749                                 }
 750                         }
 751                 }
 752         }
 753
 754         wl->tx_queue_count = 0;
 755
 756         /*
 757          * Make sure the driver is at a consistent state, in case this
 758          * function is called from a context other than interface removal.
 759          */
 760         wl1271_handle_tx_low_watermark(wl);
 761
 762         for (i = 0; i < ACX_TX_DESCRIPTORS; i++) {
 763                 if (wl->tx_frames[i] == NULL)
 764                         continue;
 765
 766                 skb = wl->tx_frames[i];
 767                 wl1271_free_tx_id(wl, i);
 768                 wl1271_debug(DEBUG_TX, "freeing skb 0x%p", skb);
 769
 770                 if (skb->pkt_type == TX_PKT_TYPE_DUMMY_REQ) {
 771                         dev_kfree_skb(skb);
 772                 } else {
 773                         /*
 774                          * Remove private headers before passing the skb to
 775                          * mac80211
 776                          */
 777                         info = IEEE80211_SKB_CB(skb);
 778                         skb_pull(skb, sizeof(struct wl1271_tx_hw_descr));
 779                         if (info->control.hw_key &&
 780                             info->control.hw_key->cipher ==
 781                             WLAN_CIPHER_SUITE_TKIP) {
 782                                 int hdrlen = ieee80211_get_hdrlen_from_skb(skb);
 783                                 memmove(skb->data + WL1271_TKIP_IV_SPACE,
 784                                         skb->data, hdrlen);
 785                                 skb_pull(skb, WL1271_TKIP_IV_SPACE);
 786                         }
 787
 788                         info->status.rates[0].idx = -1;
 789                         info->status.rates[0].count = 0;
 790
 791                         ieee80211_tx_status(wl->hw, skb);
 792                 }
 793         }
 794 }
 795
 796 #define WL1271_TX_FLUSH_TIMEOUT 500000
 797
 798 /* caller must *NOT* hold wl->mutex */
 799 void wl1271_tx_flush(struct wl1271 *wl)
 800 {
 801         unsigned long timeout;
 802         timeout = jiffies + usecs_to_jiffies(WL1271_TX_FLUSH_TIMEOUT);
 803
 804         while (!time_after(jiffies, timeout)) {
 805                 mutex_lock(&wl->mutex);
 806                 wl1271_debug(DEBUG_TX, "flushing tx buffer: %d %d",
 807                              wl->tx_frames_cnt, wl->tx_queue_count);
 808                 if ((wl->tx_frames_cnt == 0) && (wl->tx_queue_count == 0)) {
 809                         mutex_unlock(&wl->mutex);
 810                         return;
 811                 }
 812                 mutex_unlock(&wl->mutex);
 813                 msleep(1);
 814         }
 815
 816         wl1271_warning("Unable to flush all TX buffers, timed out.");
 817 }
 818
 819 u32 wl1271_tx_min_rate_get(struct wl1271 *wl)
 820 {
 821         int i;
 822         u32 rate = 0;
 823
 824         if (!wl->basic_rate_set) {
 825                 WARN_ON(1);
 826                 wl->basic_rate_set = wl->conf.tx.basic_rate;
 827         }
 828
 829         for (i = 0; !rate; i++) {
 830                 if ((wl->basic_rate_set >> i) & 0x1)
 831                         rate = 1 << i;
 832         }
 833
 834         return rate;
 835 }