2 * This file is part of wl1251
4 * Copyright (c) 1998-2007 Texas Instruments Incorporated
5 * Copyright (C) 2008 Nokia Corporation
7 * Contact: Kalle Valo <kalle.valo@nokia.com>
9 * This program is free software; you can redistribute it and/or
10 * modify it under the terms of the GNU General Public License
11 * version 2 as published by the Free Software Foundation.
13 * This program is distributed in the hope that it will be useful, but
14 * WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 * General Public License for more details.
18 * You should have received a copy of the GNU General Public License
19 * along with this program; if not, write to the Free Software
20 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
25 #include <linux/kernel.h>
26 #include <linux/module.h>
29 #include "wl1251_reg.h"
30 #include "wl1251_tx.h"
31 #include "wl1251_ps.h"
32 #include "wl1251_io.h"
34 static bool wl1251_tx_double_buffer_busy(struct wl1251 *wl, u32 data_out_count)
36 int used, data_in_count;
38 data_in_count = wl->data_in_count;
40 if (data_in_count < data_out_count)
41 /* data_in_count has wrapped */
42 data_in_count += TX_STATUS_DATA_OUT_COUNT_MASK + 1;
44 used = data_in_count - data_out_count;
47 WARN_ON(used > DP_TX_PACKET_RING_CHUNK_NUM);
49 if (used >= DP_TX_PACKET_RING_CHUNK_NUM)
55 static int wl1251_tx_path_status(struct wl1251 *wl)
57 u32 status, addr, data_out_count;
60 addr = wl->data_path->tx_control_addr;
61 status = wl1251_mem_read32(wl, addr);
62 data_out_count = status & TX_STATUS_DATA_OUT_COUNT_MASK;
63 busy = wl1251_tx_double_buffer_busy(wl, data_out_count);
71 static int wl1251_tx_id(struct wl1251 *wl, struct sk_buff *skb)
75 for (i = 0; i < FW_TX_CMPLT_BLOCK_SIZE; i++)
76 if (wl->tx_frames[i] == NULL) {
77 wl->tx_frames[i] = skb;
84 static void wl1251_tx_control(struct tx_double_buffer_desc *tx_hdr,
85 struct ieee80211_tx_info *control, u16 fc)
87 *(u16 *)&tx_hdr->control = 0;
89 tx_hdr->control.rate_policy = 0;
92 tx_hdr->control.packet_type = 0;
94 if (control->flags & IEEE80211_TX_CTL_NO_ACK)
95 tx_hdr->control.ack_policy = 1;
97 tx_hdr->control.tx_complete = 1;
99 if ((fc & IEEE80211_FTYPE_DATA) &&
100 ((fc & IEEE80211_STYPE_QOS_DATA) ||
101 (fc & IEEE80211_STYPE_QOS_NULLFUNC)))
102 tx_hdr->control.qos = 1;
105 /* RSN + MIC = 8 + 8 = 16 bytes (worst case - AES). */
106 #define MAX_MSDU_SECURITY_LENGTH 16
107 #define MAX_MPDU_SECURITY_LENGTH 16
108 #define WLAN_QOS_HDR_LEN 26
109 #define MAX_MPDU_HEADER_AND_SECURITY (MAX_MPDU_SECURITY_LENGTH + \
111 #define HW_BLOCK_SIZE 252
112 static void wl1251_tx_frag_block_num(struct tx_double_buffer_desc *tx_hdr)
114 u16 payload_len, frag_threshold, mem_blocks;
115 u16 num_mpdus, mem_blocks_per_frag;
117 frag_threshold = IEEE80211_MAX_FRAG_THRESHOLD;
118 tx_hdr->frag_threshold = cpu_to_le16(frag_threshold);
120 payload_len = le16_to_cpu(tx_hdr->length) + MAX_MSDU_SECURITY_LENGTH;
122 if (payload_len > frag_threshold) {
123 mem_blocks_per_frag =
124 ((frag_threshold + MAX_MPDU_HEADER_AND_SECURITY) /
126 num_mpdus = payload_len / frag_threshold;
127 mem_blocks = num_mpdus * mem_blocks_per_frag;
128 payload_len -= num_mpdus * frag_threshold;
132 mem_blocks_per_frag = 0;
137 mem_blocks += (payload_len / HW_BLOCK_SIZE) + 1;
140 mem_blocks += min(num_mpdus, mem_blocks_per_frag);
142 tx_hdr->num_mem_blocks = mem_blocks;
145 static int wl1251_tx_fill_hdr(struct wl1251 *wl, struct sk_buff *skb,
146 struct ieee80211_tx_info *control)
148 struct tx_double_buffer_desc *tx_hdr;
149 struct ieee80211_rate *rate;
156 id = wl1251_tx_id(wl, skb);
160 fc = *(u16 *)skb->data;
161 tx_hdr = (struct tx_double_buffer_desc *) skb_push(skb,
164 tx_hdr->length = cpu_to_le16(skb->len - sizeof(*tx_hdr));
165 rate = ieee80211_get_tx_rate(wl->hw, control);
166 tx_hdr->rate = cpu_to_le16(rate->hw_value);
167 tx_hdr->expiry_time = cpu_to_le32(1 << 16);
170 tx_hdr->xmit_queue = wl1251_tx_get_queue(skb_get_queue_mapping(skb));
172 wl1251_tx_control(tx_hdr, control, fc);
173 wl1251_tx_frag_block_num(tx_hdr);
178 /* We copy the packet to the target */
179 static int wl1251_tx_send_packet(struct wl1251 *wl, struct sk_buff *skb,
180 struct ieee80211_tx_info *control)
182 struct tx_double_buffer_desc *tx_hdr;
189 tx_hdr = (struct tx_double_buffer_desc *) skb->data;
191 if (control->control.hw_key &&
192 control->control.hw_key->alg == ALG_TKIP) {
198 fc = *(__le16 *)(skb->data + sizeof(*tx_hdr));
199 length = le16_to_cpu(tx_hdr->length) + WL1251_TKIP_IV_SPACE;
200 tx_hdr->length = cpu_to_le16(length);
202 hdrlen = ieee80211_hdrlen(fc);
204 pos = skb_push(skb, WL1251_TKIP_IV_SPACE);
205 memmove(pos, pos + WL1251_TKIP_IV_SPACE,
206 sizeof(*tx_hdr) + hdrlen);
209 /* Revisit. This is a workaround for getting non-aligned packets.
210 This happens at least with EAPOL packets from the user space.
211 Our DMA requires packets to be aligned on a 4-byte boundary.
213 if (unlikely((long)skb->data & 0x03)) {
214 int offset = (4 - (long)skb->data) & 0x03;
215 wl1251_debug(DEBUG_TX, "skb offset %d", offset);
217 /* check whether the current skb can be used */
218 if (!skb_cloned(skb) && (skb_tailroom(skb) >= offset)) {
219 unsigned char *src = skb->data;
221 /* align the buffer on a 4-byte boundary */
222 skb_reserve(skb, offset);
223 memmove(skb->data, src, skb->len);
224 tx_hdr = (struct tx_double_buffer_desc *) skb->data;
226 wl1251_info("No handler, fixme!");
231 /* Our skb->data at this point includes the HW header */
232 len = WL1251_TX_ALIGN(skb->len);
234 if (wl->data_in_count & 0x1)
235 addr = wl->data_path->tx_packet_ring_addr +
236 wl->data_path->tx_packet_ring_chunk_size;
238 addr = wl->data_path->tx_packet_ring_addr;
240 wl1251_mem_write(wl, addr, skb->data, len);
242 wl1251_debug(DEBUG_TX, "tx id %u skb 0x%p payload %u rate 0x%x "
243 "queue %d", tx_hdr->id, skb, tx_hdr->length,
244 tx_hdr->rate, tx_hdr->xmit_queue);
249 static void wl1251_tx_trigger(struct wl1251 *wl)
253 if (wl->data_in_count & 0x1) {
254 addr = ACX_REG_INTERRUPT_TRIG_H;
255 data = INTR_TRIG_TX_PROC1;
257 addr = ACX_REG_INTERRUPT_TRIG;
258 data = INTR_TRIG_TX_PROC0;
261 wl1251_reg_write32(wl, addr, data);
263 /* Bumping data in */
264 wl->data_in_count = (wl->data_in_count + 1) &
265 TX_STATUS_DATA_OUT_COUNT_MASK;
268 /* caller must hold wl->mutex */
269 static int wl1251_tx_frame(struct wl1251 *wl, struct sk_buff *skb)
271 struct ieee80211_tx_info *info;
275 info = IEEE80211_SKB_CB(skb);
277 if (info->control.hw_key) {
278 idx = info->control.hw_key->hw_key_idx;
279 if (unlikely(wl->default_key != idx)) {
280 ret = wl1251_acx_default_key(wl, idx);
286 ret = wl1251_tx_path_status(wl);
290 ret = wl1251_tx_fill_hdr(wl, skb, info);
294 ret = wl1251_tx_send_packet(wl, skb, info);
298 wl1251_tx_trigger(wl);
303 void wl1251_tx_work(struct work_struct *work)
305 struct wl1251 *wl = container_of(work, struct wl1251, tx_work);
307 bool woken_up = false;
310 mutex_lock(&wl->mutex);
312 if (unlikely(wl->state == WL1251_STATE_OFF))
315 while ((skb = skb_dequeue(&wl->tx_queue))) {
317 ret = wl1251_ps_elp_wakeup(wl);
323 ret = wl1251_tx_frame(wl, skb);
325 /* firmware buffer is full, stop queues */
326 wl1251_debug(DEBUG_TX, "tx_work: fw buffer full, "
328 ieee80211_stop_queues(wl->hw);
329 wl->tx_queue_stopped = true;
330 skb_queue_head(&wl->tx_queue, skb);
332 } else if (ret < 0) {
340 wl1251_ps_elp_sleep(wl);
342 mutex_unlock(&wl->mutex);
345 static const char *wl1251_tx_parse_status(u8 status)
347 /* 8 bit status field, one character per bit plus null */
351 memset(buf, 0, sizeof(buf));
353 if (status & TX_DMA_ERROR)
355 if (status & TX_DISABLED)
357 if (status & TX_RETRY_EXCEEDED)
359 if (status & TX_TIMEOUT)
361 if (status & TX_KEY_NOT_FOUND)
363 if (status & TX_ENCRYPT_FAIL)
365 if (status & TX_UNAVAILABLE_PRIORITY)
368 /* bit 0 is unused apparently */
373 static void wl1251_tx_packet_cb(struct wl1251 *wl,
374 struct tx_result *result)
376 struct ieee80211_tx_info *info;
381 skb = wl->tx_frames[result->id];
383 wl1251_error("SKB for packet %d is NULL", result->id);
387 info = IEEE80211_SKB_CB(skb);
389 if (!(info->flags & IEEE80211_TX_CTL_NO_ACK) &&
390 (result->status == TX_SUCCESS))
391 info->flags |= IEEE80211_TX_STAT_ACK;
393 info->status.rates[0].count = result->ack_failures + 1;
394 wl->stats.retry_count += result->ack_failures;
397 * We have to remove our private TX header before pushing
398 * the skb back to mac80211.
400 frame = skb_pull(skb, sizeof(struct tx_double_buffer_desc));
401 if (info->control.hw_key &&
402 info->control.hw_key->alg == ALG_TKIP) {
403 hdrlen = ieee80211_get_hdrlen_from_skb(skb);
404 memmove(frame + WL1251_TKIP_IV_SPACE, frame, hdrlen);
405 skb_pull(skb, WL1251_TKIP_IV_SPACE);
408 wl1251_debug(DEBUG_TX, "tx status id %u skb 0x%p failures %u rate 0x%x"
410 result->id, skb, result->ack_failures, result->rate,
411 result->status, wl1251_tx_parse_status(result->status));
414 ieee80211_tx_status(wl->hw, skb);
416 wl->tx_frames[result->id] = NULL;
418 if (wl->tx_queue_stopped) {
419 wl1251_debug(DEBUG_TX, "cb: queue was stopped");
421 skb = skb_dequeue(&wl->tx_queue);
423 /* The skb can be NULL because tx_work might have been
424 scheduled before the queue was stopped making the
428 ret = wl1251_tx_frame(wl, skb);
430 /* firmware buffer is still full */
431 wl1251_debug(DEBUG_TX, "cb: fw buffer "
433 skb_queue_head(&wl->tx_queue, skb);
435 } else if (ret < 0) {
441 wl1251_debug(DEBUG_TX, "cb: waking queues");
442 ieee80211_wake_queues(wl->hw);
443 wl->tx_queue_stopped = false;
447 /* Called upon reception of a TX complete interrupt */
448 void wl1251_tx_complete(struct wl1251 *wl)
450 int i, result_index, num_complete = 0;
451 struct tx_result result[FW_TX_CMPLT_BLOCK_SIZE], *result_ptr;
453 if (unlikely(wl->state != WL1251_STATE_ON))
456 /* First we read the result */
457 wl1251_mem_read(wl, wl->data_path->tx_complete_addr,
458 result, sizeof(result));
460 result_index = wl->next_tx_complete;
462 for (i = 0; i < ARRAY_SIZE(result); i++) {
463 result_ptr = &result[result_index];
465 if (result_ptr->done_1 == 1 &&
466 result_ptr->done_2 == 1) {
467 wl1251_tx_packet_cb(wl, result_ptr);
469 result_ptr->done_1 = 0;
470 result_ptr->done_2 = 0;
472 result_index = (result_index + 1) &
473 (FW_TX_CMPLT_BLOCK_SIZE - 1);
480 /* Every completed frame needs to be acknowledged */
483 * If we've wrapped, we have to clear
484 * the results in 2 steps.
486 if (result_index > wl->next_tx_complete) {
487 /* Only 1 write is needed */
489 wl->data_path->tx_complete_addr +
490 (wl->next_tx_complete *
491 sizeof(struct tx_result)),
492 &result[wl->next_tx_complete],
494 sizeof(struct tx_result));
497 } else if (result_index < wl->next_tx_complete) {
498 /* 2 writes are needed */
500 wl->data_path->tx_complete_addr +
501 (wl->next_tx_complete *
502 sizeof(struct tx_result)),
503 &result[wl->next_tx_complete],
504 (FW_TX_CMPLT_BLOCK_SIZE -
505 wl->next_tx_complete) *
506 sizeof(struct tx_result));
509 wl->data_path->tx_complete_addr,
512 FW_TX_CMPLT_BLOCK_SIZE +
513 wl->next_tx_complete) *
514 sizeof(struct tx_result));
517 /* We have to write the whole array */
519 wl->data_path->tx_complete_addr,
521 FW_TX_CMPLT_BLOCK_SIZE *
522 sizeof(struct tx_result));
527 wl->next_tx_complete = result_index;
530 /* caller must hold wl->mutex */
531 void wl1251_tx_flush(struct wl1251 *wl)
535 struct ieee80211_tx_info *info;
538 /* control->flags = 0; FIXME */
540 while ((skb = skb_dequeue(&wl->tx_queue))) {
541 info = IEEE80211_SKB_CB(skb);
543 wl1251_debug(DEBUG_TX, "flushing skb 0x%p", skb);
545 if (!(info->flags & IEEE80211_TX_CTL_REQ_TX_STATUS))
548 ieee80211_tx_status(wl->hw, skb);
551 for (i = 0; i < FW_TX_CMPLT_BLOCK_SIZE; i++)
552 if (wl->tx_frames[i] != NULL) {
553 skb = wl->tx_frames[i];
554 info = IEEE80211_SKB_CB(skb);
556 if (!(info->flags & IEEE80211_TX_CTL_REQ_TX_STATUS))
559 ieee80211_tx_status(wl->hw, skb);
560 wl->tx_frames[i] = NULL;