1 /*
2  * Marvell Wireless LAN device driver: HW/FW Initialization
3  *
4  * Copyright (C) 2011-2014, Marvell International Ltd.
5  *
6  * This software file (the "File") is distributed by Marvell International
7  * Ltd. under the terms of the GNU General Public License Version 2, June 1991
8  * (the "License").  You may use, redistribute and/or modify this File in
9  * accordance with the terms and conditions of the License, a copy of which
10  * is available by writing to the Free Software Foundation, Inc.,
11  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
12  * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
13  *
14  * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
15  * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
16  * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
17  * this warranty disclaimer.
18  */
19 
20 #include "decl.h"
21 #include "ioctl.h"
22 #include "util.h"
23 #include "fw.h"
24 #include "main.h"
25 #include "wmm.h"
26 #include "11n.h"
27 
28 /*
29  * This function adds a BSS priority table to the table list.
30  *
31  * The function allocates a new BSS priority table node and adds it to
32  * the end of BSS priority table list, kept in driver memory.
33  */
mwifiex_add_bss_prio_tbl(struct mwifiex_private * priv)34 static int mwifiex_add_bss_prio_tbl(struct mwifiex_private *priv)
35 {
36 	struct mwifiex_adapter *adapter = priv->adapter;
37 	struct mwifiex_bss_prio_node *bss_prio;
38 	struct mwifiex_bss_prio_tbl *tbl = adapter->bss_prio_tbl;
39 	unsigned long flags;
40 
41 	bss_prio = kzalloc(sizeof(struct mwifiex_bss_prio_node), GFP_KERNEL);
42 	if (!bss_prio)
43 		return -ENOMEM;
44 
45 	bss_prio->priv = priv;
46 	INIT_LIST_HEAD(&bss_prio->list);
47 
48 	spin_lock_irqsave(&tbl[priv->bss_priority].bss_prio_lock, flags);
49 	list_add_tail(&bss_prio->list, &tbl[priv->bss_priority].bss_prio_head);
50 	spin_unlock_irqrestore(&tbl[priv->bss_priority].bss_prio_lock, flags);
51 
52 	return 0;
53 }
54 
wakeup_timer_fn(unsigned long data)55 static void wakeup_timer_fn(unsigned long data)
56 {
57 	struct mwifiex_adapter *adapter = (struct mwifiex_adapter *)data;
58 
59 	dev_err(adapter->dev, "Firmware wakeup failed\n");
60 	adapter->hw_status = MWIFIEX_HW_STATUS_RESET;
61 	mwifiex_cancel_all_pending_cmd(adapter);
62 
63 	if (adapter->if_ops.card_reset)
64 		adapter->if_ops.card_reset(adapter);
65 }
66 
67 /*
68  * This function initializes the private structure and sets default
69  * values to the members.
70  *
71  * Additionally, it also initializes all the locks and sets up all the
72  * lists.
73  */
mwifiex_init_priv(struct mwifiex_private * priv)74 int mwifiex_init_priv(struct mwifiex_private *priv)
75 {
76 	u32 i;
77 
78 	priv->media_connected = false;
79 	eth_broadcast_addr(priv->curr_addr);
80 
81 	priv->pkt_tx_ctrl = 0;
82 	priv->bss_mode = NL80211_IFTYPE_UNSPECIFIED;
83 	priv->data_rate = 0;	/* Initially indicate the rate as auto */
84 	priv->is_data_rate_auto = true;
85 	priv->bcn_avg_factor = DEFAULT_BCN_AVG_FACTOR;
86 	priv->data_avg_factor = DEFAULT_DATA_AVG_FACTOR;
87 
88 	priv->sec_info.wep_enabled = 0;
89 	priv->sec_info.authentication_mode = NL80211_AUTHTYPE_OPEN_SYSTEM;
90 	priv->sec_info.encryption_mode = 0;
91 	for (i = 0; i < ARRAY_SIZE(priv->wep_key); i++)
92 		memset(&priv->wep_key[i], 0, sizeof(struct mwifiex_wep_key));
93 	priv->wep_key_curr_index = 0;
94 	priv->curr_pkt_filter = HostCmd_ACT_MAC_RX_ON | HostCmd_ACT_MAC_TX_ON |
95 				HostCmd_ACT_MAC_ETHERNETII_ENABLE;
96 
97 	priv->beacon_period = 100; /* beacon interval */ ;
98 	priv->attempted_bss_desc = NULL;
99 	memset(&priv->curr_bss_params, 0, sizeof(priv->curr_bss_params));
100 	priv->listen_interval = MWIFIEX_DEFAULT_LISTEN_INTERVAL;
101 
102 	memset(&priv->prev_ssid, 0, sizeof(priv->prev_ssid));
103 	memset(&priv->prev_bssid, 0, sizeof(priv->prev_bssid));
104 	memset(&priv->assoc_rsp_buf, 0, sizeof(priv->assoc_rsp_buf));
105 	priv->assoc_rsp_size = 0;
106 	priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
107 	priv->atim_window = 0;
108 	priv->adhoc_state = ADHOC_IDLE;
109 	priv->tx_power_level = 0;
110 	priv->max_tx_power_level = 0;
111 	priv->min_tx_power_level = 0;
112 	priv->tx_rate = 0;
113 	priv->rxpd_htinfo = 0;
114 	priv->rxpd_rate = 0;
115 	priv->rate_bitmap = 0;
116 	priv->data_rssi_last = 0;
117 	priv->data_rssi_avg = 0;
118 	priv->data_nf_avg = 0;
119 	priv->data_nf_last = 0;
120 	priv->bcn_rssi_last = 0;
121 	priv->bcn_rssi_avg = 0;
122 	priv->bcn_nf_avg = 0;
123 	priv->bcn_nf_last = 0;
124 	memset(&priv->wpa_ie, 0, sizeof(priv->wpa_ie));
125 	memset(&priv->aes_key, 0, sizeof(priv->aes_key));
126 	priv->wpa_ie_len = 0;
127 	priv->wpa_is_gtk_set = false;
128 
129 	memset(&priv->assoc_tlv_buf, 0, sizeof(priv->assoc_tlv_buf));
130 	priv->assoc_tlv_buf_len = 0;
131 	memset(&priv->wps, 0, sizeof(priv->wps));
132 	memset(&priv->gen_ie_buf, 0, sizeof(priv->gen_ie_buf));
133 	priv->gen_ie_buf_len = 0;
134 	memset(priv->vs_ie, 0, sizeof(priv->vs_ie));
135 
136 	priv->wmm_required = true;
137 	priv->wmm_enabled = false;
138 	priv->wmm_qosinfo = 0;
139 	priv->curr_bcn_buf = NULL;
140 	priv->curr_bcn_size = 0;
141 	priv->wps_ie = NULL;
142 	priv->wps_ie_len = 0;
143 	priv->ap_11n_enabled = 0;
144 	memset(&priv->roc_cfg, 0, sizeof(priv->roc_cfg));
145 
146 	priv->scan_block = false;
147 
148 	priv->csa_chan = 0;
149 	priv->csa_expire_time = 0;
150 	priv->del_list_idx = 0;
151 	priv->hs2_enabled = false;
152 	priv->check_tdls_tx = false;
153 	memcpy(priv->tos_to_tid_inv, tos_to_tid_inv, MAX_NUM_TID);
154 
155 	mwifiex_init_11h_params(priv);
156 
157 	return mwifiex_add_bss_prio_tbl(priv);
158 }
159 
160 /*
161  * This function allocates buffers for members of the adapter
162  * structure.
163  *
164  * The memory allocated includes scan table, command buffers, and
165  * sleep confirm command buffer. In addition, the queues are
166  * also initialized.
167  */
mwifiex_allocate_adapter(struct mwifiex_adapter * adapter)168 static int mwifiex_allocate_adapter(struct mwifiex_adapter *adapter)
169 {
170 	int ret;
171 
172 	/* Allocate command buffer */
173 	ret = mwifiex_alloc_cmd_buffer(adapter);
174 	if (ret) {
175 		dev_err(adapter->dev, "%s: failed to alloc cmd buffer\n",
176 			__func__);
177 		return -1;
178 	}
179 
180 	adapter->sleep_cfm =
181 		dev_alloc_skb(sizeof(struct mwifiex_opt_sleep_confirm)
182 			      + INTF_HEADER_LEN);
183 
184 	if (!adapter->sleep_cfm) {
185 		dev_err(adapter->dev, "%s: failed to alloc sleep cfm"
186 			" cmd buffer\n", __func__);
187 		return -1;
188 	}
189 	skb_reserve(adapter->sleep_cfm, INTF_HEADER_LEN);
190 
191 	return 0;
192 }
193 
194 /*
195  * This function initializes the adapter structure and sets default
196  * values to the members of adapter.
197  *
198  * This also initializes the WMM related parameters in the driver private
199  * structures.
200  */
mwifiex_init_adapter(struct mwifiex_adapter * adapter)201 static void mwifiex_init_adapter(struct mwifiex_adapter *adapter)
202 {
203 	struct mwifiex_opt_sleep_confirm *sleep_cfm_buf = NULL;
204 
205 	skb_put(adapter->sleep_cfm, sizeof(struct mwifiex_opt_sleep_confirm));
206 
207 	adapter->cmd_sent = false;
208 
209 	if (adapter->iface_type == MWIFIEX_SDIO)
210 		adapter->data_sent = true;
211 	else
212 		adapter->data_sent = false;
213 
214 	adapter->cmd_resp_received = false;
215 	adapter->event_received = false;
216 	adapter->data_received = false;
217 
218 	adapter->surprise_removed = false;
219 
220 	adapter->hw_status = MWIFIEX_HW_STATUS_INITIALIZING;
221 
222 	adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_CAM;
223 	adapter->ps_state = PS_STATE_AWAKE;
224 	adapter->need_to_wakeup = false;
225 
226 	adapter->scan_mode = HostCmd_BSS_MODE_ANY;
227 	adapter->specific_scan_time = MWIFIEX_SPECIFIC_SCAN_CHAN_TIME;
228 	adapter->active_scan_time = MWIFIEX_ACTIVE_SCAN_CHAN_TIME;
229 	adapter->passive_scan_time = MWIFIEX_PASSIVE_SCAN_CHAN_TIME;
230 	adapter->scan_chan_gap_time = MWIFIEX_DEF_SCAN_CHAN_GAP_TIME;
231 
232 	adapter->scan_probes = 1;
233 
234 	adapter->multiple_dtim = 1;
235 
236 	adapter->local_listen_interval = 0;	/* default value in firmware
237 						   will be used */
238 
239 	adapter->is_deep_sleep = false;
240 
241 	adapter->delay_null_pkt = false;
242 	adapter->delay_to_ps = 1000;
243 	adapter->enhanced_ps_mode = PS_MODE_AUTO;
244 
245 	adapter->gen_null_pkt = false;	/* Disable NULL Pkg generation by
246 					   default */
247 	adapter->pps_uapsd_mode = false; /* Disable pps/uapsd mode by
248 					   default */
249 	adapter->pm_wakeup_card_req = false;
250 
251 	adapter->pm_wakeup_fw_try = false;
252 
253 	adapter->curr_tx_buf_size = MWIFIEX_TX_DATA_BUF_SIZE_2K;
254 
255 	adapter->is_hs_configured = false;
256 	adapter->hs_cfg.conditions = cpu_to_le32(HS_CFG_COND_DEF);
257 	adapter->hs_cfg.gpio = HS_CFG_GPIO_DEF;
258 	adapter->hs_cfg.gap = HS_CFG_GAP_DEF;
259 	adapter->hs_activated = false;
260 
261 	memset(adapter->event_body, 0, sizeof(adapter->event_body));
262 	adapter->hw_dot_11n_dev_cap = 0;
263 	adapter->hw_dev_mcs_support = 0;
264 	adapter->sec_chan_offset = 0;
265 	adapter->adhoc_11n_enabled = false;
266 
267 	mwifiex_wmm_init(adapter);
268 
269 	sleep_cfm_buf = (struct mwifiex_opt_sleep_confirm *)
270 					adapter->sleep_cfm->data;
271 	memset(sleep_cfm_buf, 0, adapter->sleep_cfm->len);
272 	sleep_cfm_buf->command = cpu_to_le16(HostCmd_CMD_802_11_PS_MODE_ENH);
273 	sleep_cfm_buf->size = cpu_to_le16(adapter->sleep_cfm->len);
274 	sleep_cfm_buf->result = 0;
275 	sleep_cfm_buf->action = cpu_to_le16(SLEEP_CONFIRM);
276 	sleep_cfm_buf->resp_ctrl = cpu_to_le16(RESP_NEEDED);
277 
278 	memset(&adapter->sleep_params, 0, sizeof(adapter->sleep_params));
279 	memset(&adapter->sleep_period, 0, sizeof(adapter->sleep_period));
280 	adapter->tx_lock_flag = false;
281 	adapter->null_pkt_interval = 0;
282 	adapter->fw_bands = 0;
283 	adapter->config_bands = 0;
284 	adapter->adhoc_start_band = 0;
285 	adapter->scan_channels = NULL;
286 	adapter->fw_release_number = 0;
287 	adapter->fw_cap_info = 0;
288 	memset(&adapter->upld_buf, 0, sizeof(adapter->upld_buf));
289 	adapter->event_cause = 0;
290 	adapter->region_code = 0;
291 	adapter->bcn_miss_time_out = DEFAULT_BCN_MISS_TIMEOUT;
292 	adapter->adhoc_awake_period = 0;
293 	memset(&adapter->arp_filter, 0, sizeof(adapter->arp_filter));
294 	adapter->arp_filter_size = 0;
295 	adapter->max_mgmt_ie_index = MAX_MGMT_IE_INDEX;
296 	adapter->key_api_major_ver = 0;
297 	adapter->key_api_minor_ver = 0;
298 	eth_broadcast_addr(adapter->perm_addr);
299 	adapter->iface_limit.sta_intf = MWIFIEX_MAX_STA_NUM;
300 	adapter->iface_limit.uap_intf = MWIFIEX_MAX_UAP_NUM;
301 	adapter->iface_limit.p2p_intf = MWIFIEX_MAX_P2P_NUM;
302 
303 	setup_timer(&adapter->wakeup_timer, wakeup_timer_fn,
304 		    (unsigned long)adapter);
305 }
306 
307 /*
308  * This function sets trans_start per tx_queue
309  */
mwifiex_set_trans_start(struct net_device * dev)310 void mwifiex_set_trans_start(struct net_device *dev)
311 {
312 	int i;
313 
314 	for (i = 0; i < dev->num_tx_queues; i++)
315 		netdev_get_tx_queue(dev, i)->trans_start = jiffies;
316 
317 	dev->trans_start = jiffies;
318 }
319 
320 /*
321  * This function wakes up all queues in net_device
322  */
mwifiex_wake_up_net_dev_queue(struct net_device * netdev,struct mwifiex_adapter * adapter)323 void mwifiex_wake_up_net_dev_queue(struct net_device *netdev,
324 					struct mwifiex_adapter *adapter)
325 {
326 	unsigned long dev_queue_flags;
327 	unsigned int i;
328 
329 	spin_lock_irqsave(&adapter->queue_lock, dev_queue_flags);
330 
331 	for (i = 0; i < netdev->num_tx_queues; i++) {
332 		struct netdev_queue *txq = netdev_get_tx_queue(netdev, i);
333 
334 		if (netif_tx_queue_stopped(txq))
335 			netif_tx_wake_queue(txq);
336 	}
337 
338 	spin_unlock_irqrestore(&adapter->queue_lock, dev_queue_flags);
339 }
340 
341 /*
342  * This function stops all queues in net_device
343  */
mwifiex_stop_net_dev_queue(struct net_device * netdev,struct mwifiex_adapter * adapter)344 void mwifiex_stop_net_dev_queue(struct net_device *netdev,
345 					struct mwifiex_adapter *adapter)
346 {
347 	unsigned long dev_queue_flags;
348 	unsigned int i;
349 
350 	spin_lock_irqsave(&adapter->queue_lock, dev_queue_flags);
351 
352 	for (i = 0; i < netdev->num_tx_queues; i++) {
353 		struct netdev_queue *txq = netdev_get_tx_queue(netdev, i);
354 
355 		if (!netif_tx_queue_stopped(txq))
356 			netif_tx_stop_queue(txq);
357 	}
358 
359 	spin_unlock_irqrestore(&adapter->queue_lock, dev_queue_flags);
360 }
361 
362 /*
363  *  This function releases the lock variables and frees the locks and
364  *  associated locks.
365  */
mwifiex_free_lock_list(struct mwifiex_adapter * adapter)366 static void mwifiex_free_lock_list(struct mwifiex_adapter *adapter)
367 {
368 	struct mwifiex_private *priv;
369 	s32 i, j;
370 
371 	/* Free lists */
372 	list_del(&adapter->cmd_free_q);
373 	list_del(&adapter->cmd_pending_q);
374 	list_del(&adapter->scan_pending_q);
375 
376 	for (i = 0; i < adapter->priv_num; i++)
377 		list_del(&adapter->bss_prio_tbl[i].bss_prio_head);
378 
379 	for (i = 0; i < adapter->priv_num; i++) {
380 		if (adapter->priv[i]) {
381 			priv = adapter->priv[i];
382 			for (j = 0; j < MAX_NUM_TID; ++j)
383 				list_del(&priv->wmm.tid_tbl_ptr[j].ra_list);
384 			list_del(&priv->tx_ba_stream_tbl_ptr);
385 			list_del(&priv->rx_reorder_tbl_ptr);
386 			list_del(&priv->sta_list);
387 			list_del(&priv->auto_tdls_list);
388 		}
389 	}
390 }
391 
392 /*
393  * This function performs cleanup for adapter structure.
394  *
395  * The cleanup is done recursively, by canceling all pending
396  * commands, freeing the member buffers previously allocated
397  * (command buffers, scan table buffer, sleep confirm command
398  * buffer), stopping the timers and calling the cleanup routines
399  * for every interface.
400  */
401 static void
mwifiex_adapter_cleanup(struct mwifiex_adapter * adapter)402 mwifiex_adapter_cleanup(struct mwifiex_adapter *adapter)
403 {
404 	int idx;
405 
406 	if (!adapter) {
407 		pr_err("%s: adapter is NULL\n", __func__);
408 		return;
409 	}
410 
411 	del_timer(&adapter->wakeup_timer);
412 	mwifiex_cancel_all_pending_cmd(adapter);
413 	wake_up_interruptible(&adapter->cmd_wait_q.wait);
414 	wake_up_interruptible(&adapter->hs_activate_wait_q);
415 
416 	/* Free lock variables */
417 	mwifiex_free_lock_list(adapter);
418 
419 	/* Free command buffer */
420 	dev_dbg(adapter->dev, "info: free cmd buffer\n");
421 	mwifiex_free_cmd_buffer(adapter);
422 
423 	for (idx = 0; idx < adapter->num_mem_types; idx++) {
424 		struct memory_type_mapping *entry =
425 				&adapter->mem_type_mapping_tbl[idx];
426 
427 		if (entry->mem_ptr) {
428 			vfree(entry->mem_ptr);
429 			entry->mem_ptr = NULL;
430 		}
431 		entry->mem_size = 0;
432 	}
433 
434 	if (adapter->drv_info_dump) {
435 		vfree(adapter->drv_info_dump);
436 		adapter->drv_info_size = 0;
437 	}
438 
439 	if (adapter->sleep_cfm)
440 		dev_kfree_skb_any(adapter->sleep_cfm);
441 }
442 
443 /*
444  *  This function intializes the lock variables and
445  *  the list heads.
446  */
mwifiex_init_lock_list(struct mwifiex_adapter * adapter)447 int mwifiex_init_lock_list(struct mwifiex_adapter *adapter)
448 {
449 	struct mwifiex_private *priv;
450 	s32 i, j;
451 
452 	spin_lock_init(&adapter->mwifiex_lock);
453 	spin_lock_init(&adapter->int_lock);
454 	spin_lock_init(&adapter->main_proc_lock);
455 	spin_lock_init(&adapter->mwifiex_cmd_lock);
456 	spin_lock_init(&adapter->queue_lock);
457 	for (i = 0; i < adapter->priv_num; i++) {
458 		if (adapter->priv[i]) {
459 			priv = adapter->priv[i];
460 			spin_lock_init(&priv->rx_pkt_lock);
461 			spin_lock_init(&priv->wmm.ra_list_spinlock);
462 			spin_lock_init(&priv->curr_bcn_buf_lock);
463 			spin_lock_init(&priv->sta_list_spinlock);
464 			spin_lock_init(&priv->auto_tdls_lock);
465 		}
466 	}
467 
468 	/* Initialize cmd_free_q */
469 	INIT_LIST_HEAD(&adapter->cmd_free_q);
470 	/* Initialize cmd_pending_q */
471 	INIT_LIST_HEAD(&adapter->cmd_pending_q);
472 	/* Initialize scan_pending_q */
473 	INIT_LIST_HEAD(&adapter->scan_pending_q);
474 
475 	spin_lock_init(&adapter->cmd_free_q_lock);
476 	spin_lock_init(&adapter->cmd_pending_q_lock);
477 	spin_lock_init(&adapter->scan_pending_q_lock);
478 	spin_lock_init(&adapter->rx_proc_lock);
479 
480 	skb_queue_head_init(&adapter->rx_data_q);
481 	skb_queue_head_init(&adapter->tx_data_q);
482 
483 	for (i = 0; i < adapter->priv_num; ++i) {
484 		INIT_LIST_HEAD(&adapter->bss_prio_tbl[i].bss_prio_head);
485 		spin_lock_init(&adapter->bss_prio_tbl[i].bss_prio_lock);
486 	}
487 
488 	for (i = 0; i < adapter->priv_num; i++) {
489 		if (!adapter->priv[i])
490 			continue;
491 		priv = adapter->priv[i];
492 		for (j = 0; j < MAX_NUM_TID; ++j)
493 			INIT_LIST_HEAD(&priv->wmm.tid_tbl_ptr[j].ra_list);
494 		INIT_LIST_HEAD(&priv->tx_ba_stream_tbl_ptr);
495 		INIT_LIST_HEAD(&priv->rx_reorder_tbl_ptr);
496 		INIT_LIST_HEAD(&priv->sta_list);
497 		INIT_LIST_HEAD(&priv->auto_tdls_list);
498 		skb_queue_head_init(&priv->tdls_txq);
499 
500 		spin_lock_init(&priv->tx_ba_stream_tbl_lock);
501 		spin_lock_init(&priv->rx_reorder_tbl_lock);
502 
503 		spin_lock_init(&priv->ack_status_lock);
504 		idr_init(&priv->ack_status_frames);
505 	}
506 
507 	return 0;
508 }
509 
510 /*
511  * This function initializes the firmware.
512  *
513  * The following operations are performed sequentially -
514  *      - Allocate adapter structure
515  *      - Initialize the adapter structure
516  *      - Initialize the private structure
517  *      - Add BSS priority tables to the adapter structure
518  *      - For each interface, send the init commands to firmware
519  *      - Send the first command in command pending queue, if available
520  */
mwifiex_init_fw(struct mwifiex_adapter * adapter)521 int mwifiex_init_fw(struct mwifiex_adapter *adapter)
522 {
523 	int ret;
524 	struct mwifiex_private *priv;
525 	u8 i, first_sta = true;
526 	int is_cmd_pend_q_empty;
527 	unsigned long flags;
528 
529 	adapter->hw_status = MWIFIEX_HW_STATUS_INITIALIZING;
530 
531 	/* Allocate memory for member of adapter structure */
532 	ret = mwifiex_allocate_adapter(adapter);
533 	if (ret)
534 		return -1;
535 
536 	/* Initialize adapter structure */
537 	mwifiex_init_adapter(adapter);
538 
539 	for (i = 0; i < adapter->priv_num; i++) {
540 		if (adapter->priv[i]) {
541 			priv = adapter->priv[i];
542 
543 			/* Initialize private structure */
544 			ret = mwifiex_init_priv(priv);
545 			if (ret)
546 				return -1;
547 		}
548 	}
549 
550 	if (adapter->if_ops.init_fw_port) {
551 		if (adapter->if_ops.init_fw_port(adapter))
552 			return -1;
553 	}
554 
555 	for (i = 0; i < adapter->priv_num; i++) {
556 		if (adapter->priv[i]) {
557 			ret = mwifiex_sta_init_cmd(adapter->priv[i], first_sta,
558 						   true);
559 			if (ret == -1)
560 				return -1;
561 
562 			first_sta = false;
563 		}
564 	}
565 
566 	spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
567 	is_cmd_pend_q_empty = list_empty(&adapter->cmd_pending_q);
568 	spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
569 	if (!is_cmd_pend_q_empty) {
570 		/* Send the first command in queue and return */
571 		if (mwifiex_main_process(adapter) != -1)
572 			ret = -EINPROGRESS;
573 	} else {
574 		adapter->hw_status = MWIFIEX_HW_STATUS_READY;
575 	}
576 
577 	return ret;
578 }
579 
580 /*
581  * This function deletes the BSS priority tables.
582  *
583  * The function traverses through all the allocated BSS priority nodes
584  * in every BSS priority table and frees them.
585  */
mwifiex_delete_bss_prio_tbl(struct mwifiex_private * priv)586 static void mwifiex_delete_bss_prio_tbl(struct mwifiex_private *priv)
587 {
588 	int i;
589 	struct mwifiex_adapter *adapter = priv->adapter;
590 	struct mwifiex_bss_prio_node *bssprio_node, *tmp_node;
591 	struct list_head *head;
592 	spinlock_t *lock; /* bss priority lock */
593 	unsigned long flags;
594 
595 	for (i = 0; i < adapter->priv_num; ++i) {
596 		head = &adapter->bss_prio_tbl[i].bss_prio_head;
597 		lock = &adapter->bss_prio_tbl[i].bss_prio_lock;
598 		dev_dbg(adapter->dev, "info: delete BSS priority table,"
599 				" bss_type = %d, bss_num = %d, i = %d,"
600 				" head = %p\n",
601 			      priv->bss_type, priv->bss_num, i, head);
602 
603 		{
604 			spin_lock_irqsave(lock, flags);
605 			if (list_empty(head)) {
606 				spin_unlock_irqrestore(lock, flags);
607 				continue;
608 			}
609 			list_for_each_entry_safe(bssprio_node, tmp_node, head,
610 						 list) {
611 				if (bssprio_node->priv == priv) {
612 					dev_dbg(adapter->dev, "info: Delete "
613 						"node %p, next = %p\n",
614 						bssprio_node, tmp_node);
615 					list_del(&bssprio_node->list);
616 					kfree(bssprio_node);
617 				}
618 			}
619 			spin_unlock_irqrestore(lock, flags);
620 		}
621 	}
622 }
623 
624 /*
625  * This function frees the private structure, including cleans
626  * up the TX and RX queues and frees the BSS priority tables.
627  */
mwifiex_free_priv(struct mwifiex_private * priv)628 void mwifiex_free_priv(struct mwifiex_private *priv)
629 {
630 	mwifiex_clean_txrx(priv);
631 	mwifiex_delete_bss_prio_tbl(priv);
632 	mwifiex_free_curr_bcn(priv);
633 }
634 
635 /*
636  * This function is used to shutdown the driver.
637  *
638  * The following operations are performed sequentially -
639  *      - Check if already shut down
640  *      - Make sure the main process has stopped
641  *      - Clean up the Tx and Rx queues
642  *      - Delete BSS priority tables
643  *      - Free the adapter
644  *      - Notify completion
645  */
646 int
mwifiex_shutdown_drv(struct mwifiex_adapter * adapter)647 mwifiex_shutdown_drv(struct mwifiex_adapter *adapter)
648 {
649 	int ret = -EINPROGRESS;
650 	struct mwifiex_private *priv;
651 	s32 i;
652 	unsigned long flags;
653 	struct sk_buff *skb;
654 
655 	/* mwifiex already shutdown */
656 	if (adapter->hw_status == MWIFIEX_HW_STATUS_NOT_READY)
657 		return 0;
658 
659 	adapter->hw_status = MWIFIEX_HW_STATUS_CLOSING;
660 	/* wait for mwifiex_process to complete */
661 	if (adapter->mwifiex_processing) {
662 		dev_warn(adapter->dev, "main process is still running\n");
663 		return ret;
664 	}
665 
666 	/* cancel current command */
667 	if (adapter->curr_cmd) {
668 		dev_warn(adapter->dev, "curr_cmd is still in processing\n");
669 		del_timer_sync(&adapter->cmd_timer);
670 		mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd);
671 		adapter->curr_cmd = NULL;
672 	}
673 
674 	/* shut down mwifiex */
675 	dev_dbg(adapter->dev, "info: shutdown mwifiex...\n");
676 
677 	/* Clean up Tx/Rx queues and delete BSS priority table */
678 	for (i = 0; i < adapter->priv_num; i++) {
679 		if (adapter->priv[i]) {
680 			priv = adapter->priv[i];
681 
682 			mwifiex_clean_auto_tdls(priv);
683 			mwifiex_abort_cac(priv);
684 			mwifiex_clean_txrx(priv);
685 			mwifiex_delete_bss_prio_tbl(priv);
686 		}
687 	}
688 
689 	atomic_set(&adapter->tx_queued, 0);
690 	while ((skb = skb_dequeue(&adapter->tx_data_q)))
691 		mwifiex_write_data_complete(adapter, skb, 0, 0);
692 
693 	spin_lock_irqsave(&adapter->rx_proc_lock, flags);
694 
695 	while ((skb = skb_dequeue(&adapter->rx_data_q))) {
696 		struct mwifiex_rxinfo *rx_info = MWIFIEX_SKB_RXCB(skb);
697 
698 		atomic_dec(&adapter->rx_pending);
699 		priv = adapter->priv[rx_info->bss_num];
700 		if (priv)
701 			priv->stats.rx_dropped++;
702 
703 		dev_kfree_skb_any(skb);
704 	}
705 
706 	spin_unlock_irqrestore(&adapter->rx_proc_lock, flags);
707 
708 	spin_lock(&adapter->mwifiex_lock);
709 
710 	mwifiex_adapter_cleanup(adapter);
711 
712 	spin_unlock(&adapter->mwifiex_lock);
713 
714 	/* Notify completion */
715 	ret = mwifiex_shutdown_fw_complete(adapter);
716 
717 	return ret;
718 }
719 
720 /*
721  * This function downloads the firmware to the card.
722  *
723  * The actual download is preceded by two sanity checks -
724  *      - Check if firmware is already running
725  *      - Check if the interface is the winner to download the firmware
726  *
727  * ...and followed by another -
728  *      - Check if the firmware is downloaded successfully
729  *
730  * After download is successfully completed, the host interrupts are enabled.
731  */
mwifiex_dnld_fw(struct mwifiex_adapter * adapter,struct mwifiex_fw_image * pmfw)732 int mwifiex_dnld_fw(struct mwifiex_adapter *adapter,
733 		    struct mwifiex_fw_image *pmfw)
734 {
735 	int ret;
736 	u32 poll_num = 1;
737 
738 	if (adapter->if_ops.check_fw_status) {
739 		adapter->winner = 0;
740 
741 		/* check if firmware is already running */
742 		ret = adapter->if_ops.check_fw_status(adapter, poll_num);
743 		if (!ret) {
744 			dev_notice(adapter->dev,
745 				   "WLAN FW already running! Skip FW dnld\n");
746 			return 0;
747 		}
748 
749 		poll_num = MAX_FIRMWARE_POLL_TRIES;
750 
751 		/* check if we are the winner for downloading FW */
752 		if (!adapter->winner) {
753 			dev_notice(adapter->dev,
754 				   "FW already running! Skip FW dnld\n");
755 			goto poll_fw;
756 		}
757 	}
758 
759 	if (pmfw) {
760 		/* Download firmware with helper */
761 		ret = adapter->if_ops.prog_fw(adapter, pmfw);
762 		if (ret) {
763 			dev_err(adapter->dev, "prog_fw failed ret=%#x\n", ret);
764 			return ret;
765 		}
766 	}
767 
768 poll_fw:
769 	/* Check if the firmware is downloaded successfully or not */
770 	ret = adapter->if_ops.check_fw_status(adapter, poll_num);
771 	if (ret)
772 		dev_err(adapter->dev, "FW failed to be active in time\n");
773 
774 	return ret;
775 }
776