1 /******************************************************************************
2  *
3  * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
4  *
5  * This program is free software; you can redistribute it and/or modify it
6  * under the terms of version 2 of the GNU General Public License as
7  * published by the Free Software Foundation.
8  *
9  * This program is distributed in the hope that it will be useful, but WITHOUT
10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
11  * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
12  * more details.
13  *
14  * You should have received a copy of the GNU General Public License along with
15  * this program; if not, write to the Free Software Foundation, Inc.,
16  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
17  *
18  ******************************************************************************/
19 #define _USB_OPS_LINUX_C_
20 
21 #include <drv_types.h>
22 #include <recv_osdep.h>
23 #include <rtw_sreset.h>
24 
interrupt_handler_8188eu(struct adapter * adapt,u16 pkt_len,u8 * pbuf)25 static void interrupt_handler_8188eu(struct adapter *adapt, u16 pkt_len, u8 *pbuf)
26 {
27 	struct hal_data_8188e	*haldata = GET_HAL_DATA(adapt);
28 
29 	if (pkt_len != INTERRUPT_MSG_FORMAT_LEN) {
30 		DBG_88E("%s Invalid interrupt content length (%d)!\n", __func__, pkt_len);
31 		return;
32 	}
33 
34 	/*  HISR */
35 	memcpy(&(haldata->IntArray[0]), &(pbuf[USB_INTR_CONTENT_HISR_OFFSET]), 4);
36 	memcpy(&(haldata->IntArray[1]), &(pbuf[USB_INTR_CONTENT_HISRE_OFFSET]), 4);
37 
38 	/*  C2H Event */
39 	if (pbuf[0] != 0)
40 		memcpy(&(haldata->C2hArray[0]), &(pbuf[USB_INTR_CONTENT_C2H_OFFSET]), 16);
41 }
42 
recvbuf2recvframe(struct adapter * adapt,struct sk_buff * pskb)43 static int recvbuf2recvframe(struct adapter *adapt, struct sk_buff *pskb)
44 {
45 	u8	*pbuf;
46 	u8	shift_sz = 0;
47 	u16	pkt_cnt;
48 	u32	pkt_offset, skb_len, alloc_sz;
49 	s32	transfer_len;
50 	struct recv_stat	*prxstat;
51 	struct phy_stat	*pphy_status = NULL;
52 	struct sk_buff *pkt_copy = NULL;
53 	struct recv_frame	*precvframe = NULL;
54 	struct rx_pkt_attrib	*pattrib = NULL;
55 	struct hal_data_8188e	*haldata = GET_HAL_DATA(adapt);
56 	struct recv_priv	*precvpriv = &adapt->recvpriv;
57 	struct __queue *pfree_recv_queue = &precvpriv->free_recv_queue;
58 
59 	transfer_len = (s32)pskb->len;
60 	pbuf = pskb->data;
61 
62 	prxstat = (struct recv_stat *)pbuf;
63 	pkt_cnt = (le32_to_cpu(prxstat->rxdw2) >> 16) & 0xff;
64 
65 	do {
66 		RT_TRACE(_module_rtl871x_recv_c_, _drv_info_,
67 			 ("recvbuf2recvframe: rxdesc=offsset 0:0x%08x, 4:0x%08x, 8:0x%08x, C:0x%08x\n",
68 			  prxstat->rxdw0, prxstat->rxdw1, prxstat->rxdw2, prxstat->rxdw4));
69 
70 		prxstat = (struct recv_stat *)pbuf;
71 
72 		precvframe = rtw_alloc_recvframe(pfree_recv_queue);
73 		if (precvframe == NULL) {
74 			RT_TRACE(_module_rtl871x_recv_c_, _drv_err_, ("recvbuf2recvframe: precvframe==NULL\n"));
75 			DBG_88E("%s()-%d: rtw_alloc_recvframe() failed! RX Drop!\n", __func__, __LINE__);
76 			goto _exit_recvbuf2recvframe;
77 		}
78 
79 		INIT_LIST_HEAD(&precvframe->list);
80 		precvframe->len = 0;
81 
82 		update_recvframe_attrib_88e(precvframe, prxstat);
83 
84 		pattrib = &precvframe->attrib;
85 
86 		if ((pattrib->crc_err) || (pattrib->icv_err)) {
87 			DBG_88E("%s: RX Warning! crc_err=%d icv_err=%d, skip!\n", __func__, pattrib->crc_err, pattrib->icv_err);
88 
89 			rtw_free_recvframe(precvframe, pfree_recv_queue);
90 			goto _exit_recvbuf2recvframe;
91 		}
92 
93 		if ((pattrib->physt) && (pattrib->pkt_rpt_type == NORMAL_RX))
94 			pphy_status = (struct phy_stat *)(pbuf + RXDESC_OFFSET);
95 
96 		pkt_offset = RXDESC_SIZE + pattrib->drvinfo_sz + pattrib->shift_sz + pattrib->pkt_len;
97 
98 		if ((pattrib->pkt_len <= 0) || (pkt_offset > transfer_len)) {
99 			RT_TRACE(_module_rtl871x_recv_c_, _drv_info_, ("recvbuf2recvframe: pkt_len<=0\n"));
100 			DBG_88E("%s()-%d: RX Warning!,pkt_len<=0 or pkt_offset> transfoer_len\n", __func__, __LINE__);
101 			rtw_free_recvframe(precvframe, pfree_recv_queue);
102 			goto _exit_recvbuf2recvframe;
103 		}
104 
105 		/*	Modified by Albert 20101213 */
106 		/*	For 8 bytes IP header alignment. */
107 		if (pattrib->qos)	/*	Qos data, wireless lan header length is 26 */
108 			shift_sz = 6;
109 		else
110 			shift_sz = 0;
111 
112 		skb_len = pattrib->pkt_len;
113 
114 		/*  for first fragment packet, driver need allocate 1536+drvinfo_sz+RXDESC_SIZE to defrag packet. */
115 		/*  modify alloc_sz for recvive crc error packet by thomas 2011-06-02 */
116 		if ((pattrib->mfrag == 1) && (pattrib->frag_num == 0)) {
117 			if (skb_len <= 1650)
118 				alloc_sz = 1664;
119 			else
120 				alloc_sz = skb_len + 14;
121 		} else {
122 			alloc_sz = skb_len;
123 			/*	6 is for IP header 8 bytes alignment in QoS packet case. */
124 			/*	8 is for skb->data 4 bytes alignment. */
125 			alloc_sz += 14;
126 		}
127 
128 		pkt_copy = netdev_alloc_skb(adapt->pnetdev, alloc_sz);
129 		if (pkt_copy) {
130 			pkt_copy->dev = adapt->pnetdev;
131 			precvframe->pkt = pkt_copy;
132 			precvframe->rx_head = pkt_copy->data;
133 			precvframe->rx_end = pkt_copy->data + alloc_sz;
134 			skb_reserve(pkt_copy, 8 - ((size_t)(pkt_copy->data) & 7));/* force pkt_copy->data at 8-byte alignment address */
135 			skb_reserve(pkt_copy, shift_sz);/* force ip_hdr at 8-byte alignment address according to shift_sz. */
136 			memcpy(pkt_copy->data, (pbuf + pattrib->drvinfo_sz + RXDESC_SIZE), skb_len);
137 			precvframe->rx_tail = pkt_copy->data;
138 			precvframe->rx_data = pkt_copy->data;
139 		} else {
140 			if ((pattrib->mfrag == 1) && (pattrib->frag_num == 0)) {
141 				DBG_88E("recvbuf2recvframe: alloc_skb fail , drop frag frame\n");
142 				rtw_free_recvframe(precvframe, pfree_recv_queue);
143 				goto _exit_recvbuf2recvframe;
144 			}
145 			precvframe->pkt = skb_clone(pskb, GFP_ATOMIC);
146 			if (precvframe->pkt) {
147 				precvframe->rx_tail = pbuf + pattrib->drvinfo_sz + RXDESC_SIZE;
148 				precvframe->rx_head = precvframe->rx_tail;
149 				precvframe->rx_data = precvframe->rx_tail;
150 				precvframe->rx_end =  pbuf + pattrib->drvinfo_sz + RXDESC_SIZE + alloc_sz;
151 			} else {
152 				DBG_88E("recvbuf2recvframe: skb_clone fail\n");
153 				rtw_free_recvframe(precvframe, pfree_recv_queue);
154 				goto _exit_recvbuf2recvframe;
155 			}
156 		}
157 
158 		recvframe_put(precvframe, skb_len);
159 
160 		switch (haldata->UsbRxAggMode) {
161 		case USB_RX_AGG_DMA:
162 		case USB_RX_AGG_MIX:
163 			pkt_offset = (u16)round_up(pkt_offset, 128);
164 			break;
165 		case USB_RX_AGG_USB:
166 			pkt_offset = (u16)round_up(pkt_offset, 4);
167 			break;
168 		case USB_RX_AGG_DISABLE:
169 		default:
170 			break;
171 		}
172 		if (pattrib->pkt_rpt_type == NORMAL_RX) { /* Normal rx packet */
173 			if (pattrib->physt)
174 				update_recvframe_phyinfo_88e(precvframe, (struct phy_stat *)pphy_status);
175 			if (rtw_recv_entry(precvframe) != _SUCCESS) {
176 				RT_TRACE(_module_rtl871x_recv_c_, _drv_err_,
177 					("recvbuf2recvframe: rtw_recv_entry(precvframe) != _SUCCESS\n"));
178 			}
179 		} else {
180 			/* enqueue recvframe to txrtp queue */
181 			if (pattrib->pkt_rpt_type == TX_REPORT1) {
182 				/* CCX-TXRPT ack for xmit mgmt frames. */
183 				handle_txrpt_ccx_88e(adapt, precvframe->rx_data);
184 			} else if (pattrib->pkt_rpt_type == TX_REPORT2) {
185 				ODM_RA_TxRPT2Handle_8188E(
186 							&haldata->odmpriv,
187 							precvframe->rx_data,
188 							pattrib->pkt_len,
189 							pattrib->MacIDValidEntry[0],
190 							pattrib->MacIDValidEntry[1]
191 							);
192 			} else if (pattrib->pkt_rpt_type == HIS_REPORT) {
193 				interrupt_handler_8188eu(adapt, pattrib->pkt_len, precvframe->rx_data);
194 			}
195 			rtw_free_recvframe(precvframe, pfree_recv_queue);
196 		}
197 		pkt_cnt--;
198 		transfer_len -= pkt_offset;
199 		pbuf += pkt_offset;
200 		precvframe = NULL;
201 		pkt_copy = NULL;
202 
203 		if (transfer_len > 0 && pkt_cnt == 0)
204 			pkt_cnt = (le32_to_cpu(prxstat->rxdw2)>>16) & 0xff;
205 
206 	} while ((transfer_len > 0) && (pkt_cnt > 0));
207 
208 _exit_recvbuf2recvframe:
209 
210 	return _SUCCESS;
211 }
212 
ffaddr2pipehdl(struct dvobj_priv * pdvobj,u32 addr)213 unsigned int ffaddr2pipehdl(struct dvobj_priv *pdvobj, u32 addr)
214 {
215 	unsigned int pipe = 0, ep_num = 0;
216 	struct usb_device *pusbd = pdvobj->pusbdev;
217 
218 	if (addr == RECV_BULK_IN_ADDR) {
219 		pipe = usb_rcvbulkpipe(pusbd, pdvobj->RtInPipe[0]);
220 	} else if (addr == RECV_INT_IN_ADDR) {
221 		pipe = usb_rcvbulkpipe(pusbd, pdvobj->RtInPipe[1]);
222 	} else if (addr < HW_QUEUE_ENTRY) {
223 		ep_num = pdvobj->Queue2Pipe[addr];
224 		pipe = usb_sndbulkpipe(pusbd, ep_num);
225 	}
226 
227 	return pipe;
228 }
229 
usbctrl_vendorreq(struct adapter * adapt,u8 request,u16 value,u16 index,void * pdata,u16 len,u8 requesttype)230 static int usbctrl_vendorreq(struct adapter *adapt, u8 request, u16 value, u16 index, void *pdata, u16 len, u8 requesttype)
231 {
232 	struct dvobj_priv  *dvobjpriv = adapter_to_dvobj(adapt);
233 	struct usb_device *udev = dvobjpriv->pusbdev;
234 	unsigned int pipe;
235 	int status = 0;
236 	u8 reqtype;
237 	u8 *pIo_buf;
238 	int vendorreq_times = 0;
239 
240 	if ((adapt->bSurpriseRemoved) || (adapt->pwrctrlpriv.pnp_bstop_trx)) {
241 		RT_TRACE(_module_hci_ops_os_c_, _drv_err_, ("usbctrl_vendorreq:(adapt->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n"));
242 		status = -EPERM;
243 		goto exit;
244 	}
245 
246 	if (len > MAX_VENDOR_REQ_CMD_SIZE) {
247 		DBG_88E("[%s] Buffer len error ,vendor request failed\n", __func__);
248 		status = -EINVAL;
249 		goto exit;
250 	}
251 
252 	if (mutex_lock_interruptible(&dvobjpriv->usb_vendor_req_mutex)) {
253 		status = -ERESTARTSYS;
254 		goto exit;
255 	}
256 
257 	/*  Acquire IO memory for vendorreq */
258 	pIo_buf = dvobjpriv->usb_vendor_req_buf;
259 
260 	if (pIo_buf == NULL) {
261 		DBG_88E("[%s] pIo_buf == NULL\n", __func__);
262 		status = -ENOMEM;
263 		goto release_mutex;
264 	}
265 
266 	while (++vendorreq_times <= MAX_USBCTRL_VENDORREQ_TIMES) {
267 		memset(pIo_buf, 0, len);
268 
269 		if (requesttype == 0x01) {
270 			pipe = usb_rcvctrlpipe(udev, 0);/* read_in */
271 			reqtype =  REALTEK_USB_VENQT_READ;
272 		} else {
273 			pipe = usb_sndctrlpipe(udev, 0);/* write_out */
274 			reqtype =  REALTEK_USB_VENQT_WRITE;
275 			memcpy(pIo_buf, pdata, len);
276 		}
277 
278 		status = usb_control_msg(udev, pipe, request, reqtype, value, index, pIo_buf, len, RTW_USB_CONTROL_MSG_TIMEOUT);
279 
280 		if (status == len) {   /*  Success this control transfer. */
281 			if (requesttype == 0x01)
282 				memcpy(pdata, pIo_buf,  len);
283 		} else { /*  error cases */
284 			DBG_88E("reg 0x%x, usb %s %u fail, status:%d value=0x%x, vendorreq_times:%d\n",
285 				value, (requesttype == 0x01) ? "read" : "write",
286 				len, status, *(u32 *)pdata, vendorreq_times);
287 
288 			if (status < 0) {
289 				if (status == (-ESHUTDOWN) || status == -ENODEV) {
290 					adapt->bSurpriseRemoved = true;
291 				} else {
292 					struct hal_data_8188e	*haldata = GET_HAL_DATA(adapt);
293 					haldata->srestpriv.Wifi_Error_Status = USB_VEN_REQ_CMD_FAIL;
294 				}
295 			} else { /*  status != len && status >= 0 */
296 				if (status > 0) {
297 					if (requesttype == 0x01) {
298 						/*  For Control read transfer, we have to copy the read data from pIo_buf to pdata. */
299 						memcpy(pdata, pIo_buf,  len);
300 					}
301 				}
302 			}
303 
304 		}
305 
306 		/*  firmware download is checksumed, don't retry */
307 		if ((value >= FW_8188E_START_ADDRESS && value <= FW_8188E_END_ADDRESS) || status == len)
308 			break;
309 	}
310 release_mutex:
311 	mutex_unlock(&dvobjpriv->usb_vendor_req_mutex);
312 exit:
313 	return status;
314 }
315 
usb_read8(struct adapter * adapter,u32 addr)316 u8 usb_read8(struct adapter *adapter, u32 addr)
317 {
318 	u8 request;
319 	u8 requesttype;
320 	u16 wvalue;
321 	u16 index;
322 	u16 len;
323 	u8 data = 0;
324 
325 
326 	request = 0x05;
327 	requesttype = 0x01;/* read_in */
328 	index = 0;/* n/a */
329 
330 	wvalue = (u16)(addr&0x0000ffff);
331 	len = 1;
332 
333 	usbctrl_vendorreq(adapter, request, wvalue, index, &data, len, requesttype);
334 
335 
336 	return data;
337 
338 }
339 
usb_read16(struct adapter * adapter,u32 addr)340 u16 usb_read16(struct adapter *adapter, u32 addr)
341 {
342 	u8 request;
343 	u8 requesttype;
344 	u16 wvalue;
345 	u16 index;
346 	u16 len;
347 	__le32 data;
348 
349 	request = 0x05;
350 	requesttype = 0x01;/* read_in */
351 	index = 0;/* n/a */
352 	wvalue = (u16)(addr&0x0000ffff);
353 	len = 2;
354 	usbctrl_vendorreq(adapter, request, wvalue, index, &data, len, requesttype);
355 
356 	return (u16)(le32_to_cpu(data)&0xffff);
357 }
358 
usb_read32(struct adapter * adapter,u32 addr)359 u32 usb_read32(struct adapter *adapter, u32 addr)
360 {
361 	u8 request;
362 	u8 requesttype;
363 	u16 wvalue;
364 	u16 index;
365 	u16 len;
366 	__le32 data;
367 
368 
369 	request = 0x05;
370 	requesttype = 0x01;/* read_in */
371 	index = 0;/* n/a */
372 
373 	wvalue = (u16)(addr&0x0000ffff);
374 	len = 4;
375 
376 	usbctrl_vendorreq(adapter, request, wvalue, index, &data, len, requesttype);
377 
378 
379 	return le32_to_cpu(data);
380 }
381 
usb_read_port_complete(struct urb * purb,struct pt_regs * regs)382 static void usb_read_port_complete(struct urb *purb, struct pt_regs *regs)
383 {
384 	struct recv_buf	*precvbuf = (struct recv_buf *)purb->context;
385 	struct adapter	*adapt = (struct adapter *)precvbuf->adapter;
386 	struct recv_priv *precvpriv = &adapt->recvpriv;
387 
388 	RT_TRACE(_module_hci_ops_os_c_, _drv_err_, ("usb_read_port_complete!!!\n"));
389 
390 	precvpriv->rx_pending_cnt--;
391 
392 	if (adapt->bSurpriseRemoved || adapt->bDriverStopped || adapt->bReadPortCancel) {
393 		RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
394 			 ("usb_read_port_complete:bDriverStopped(%d) OR bSurpriseRemoved(%d)\n",
395 			 adapt->bDriverStopped, adapt->bSurpriseRemoved));
396 
397 		precvbuf->reuse = true;
398 		DBG_88E("%s() RX Warning! bDriverStopped(%d) OR bSurpriseRemoved(%d) bReadPortCancel(%d)\n",
399 			__func__, adapt->bDriverStopped,
400 			adapt->bSurpriseRemoved, adapt->bReadPortCancel);
401 		return;
402 	}
403 
404 	if (purb->status == 0) { /* SUCCESS */
405 		if ((purb->actual_length > MAX_RECVBUF_SZ) || (purb->actual_length < RXDESC_SIZE)) {
406 			RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
407 				 ("usb_read_port_complete: (purb->actual_length > MAX_RECVBUF_SZ) || (purb->actual_length < RXDESC_SIZE)\n"));
408 			precvbuf->reuse = true;
409 			usb_read_port(adapt, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
410 			DBG_88E("%s()-%d: RX Warning!\n", __func__, __LINE__);
411 		} else {
412 			skb_put(precvbuf->pskb, purb->actual_length);
413 			skb_queue_tail(&precvpriv->rx_skb_queue, precvbuf->pskb);
414 
415 			if (skb_queue_len(&precvpriv->rx_skb_queue) <= 1)
416 				tasklet_schedule(&precvpriv->recv_tasklet);
417 
418 			precvbuf->pskb = NULL;
419 			precvbuf->reuse = false;
420 			usb_read_port(adapt, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
421 		}
422 	} else {
423 		RT_TRACE(_module_hci_ops_os_c_, _drv_err_, ("usb_read_port_complete : purb->status(%d) != 0\n", purb->status));
424 
425 		DBG_88E("###=> usb_read_port_complete => urb status(%d)\n", purb->status);
426 		skb_put(precvbuf->pskb, purb->actual_length);
427 		precvbuf->pskb = NULL;
428 
429 		switch (purb->status) {
430 		case -EINVAL:
431 		case -EPIPE:
432 		case -ENODEV:
433 		case -ESHUTDOWN:
434 			adapt->bSurpriseRemoved = true;
435 		case -ENOENT:
436 			adapt->bDriverStopped = true;
437 			RT_TRACE(_module_hci_ops_os_c_, _drv_err_, ("usb_read_port_complete:bDriverStopped=true\n"));
438 			break;
439 		case -EPROTO:
440 		case -EOVERFLOW:
441 			{
442 				struct hal_data_8188e	*haldata = GET_HAL_DATA(adapt);
443 				haldata->srestpriv.Wifi_Error_Status = USB_READ_PORT_FAIL;
444 			}
445 			precvbuf->reuse = true;
446 			usb_read_port(adapt, precvpriv->ff_hwaddr, 0, (unsigned char *)precvbuf);
447 			break;
448 		case -EINPROGRESS:
449 			DBG_88E("ERROR: URB IS IN PROGRESS!\n");
450 			break;
451 		default:
452 			break;
453 		}
454 	}
455 }
456 
usb_read_port(struct adapter * adapter,u32 addr,u32 cnt,u8 * rmem)457 u32 usb_read_port(struct adapter *adapter, u32 addr, u32 cnt, u8 *rmem)
458 {
459 	struct urb *purb = NULL;
460 	struct recv_buf	*precvbuf = (struct recv_buf *)rmem;
461 	struct dvobj_priv	*pdvobj = adapter_to_dvobj(adapter);
462 	struct recv_priv	*precvpriv = &adapter->recvpriv;
463 	struct usb_device	*pusbd = pdvobj->pusbdev;
464 	int err;
465 	unsigned int pipe;
466 	size_t tmpaddr = 0;
467 	size_t alignment = 0;
468 	u32 ret = _SUCCESS;
469 
470 
471 	if (adapter->bDriverStopped || adapter->bSurpriseRemoved ||
472 	    adapter->pwrctrlpriv.pnp_bstop_trx) {
473 		RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
474 			 ("usb_read_port:(adapt->bDriverStopped ||adapt->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n"));
475 		return _FAIL;
476 	}
477 
478 	if (!precvbuf) {
479 		RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
480 			 ("usb_read_port:precvbuf==NULL\n"));
481 		return _FAIL;
482 	}
483 
484 	if ((!precvbuf->reuse) || (precvbuf->pskb == NULL)) {
485 		precvbuf->pskb = skb_dequeue(&precvpriv->free_recv_skb_queue);
486 		if (NULL != precvbuf->pskb)
487 			precvbuf->reuse = true;
488 	}
489 
490 	/* re-assign for linux based on skb */
491 	if ((!precvbuf->reuse) || (precvbuf->pskb == NULL)) {
492 		precvbuf->pskb = netdev_alloc_skb(adapter->pnetdev, MAX_RECVBUF_SZ + RECVBUFF_ALIGN_SZ);
493 		if (precvbuf->pskb == NULL) {
494 			RT_TRACE(_module_hci_ops_os_c_, _drv_err_, ("init_recvbuf(): alloc_skb fail!\n"));
495 			DBG_88E("#### usb_read_port() alloc_skb fail!#####\n");
496 			return _FAIL;
497 		}
498 
499 		tmpaddr = (size_t)precvbuf->pskb->data;
500 		alignment = tmpaddr & (RECVBUFF_ALIGN_SZ-1);
501 		skb_reserve(precvbuf->pskb, (RECVBUFF_ALIGN_SZ - alignment));
502 	} else { /* reuse skb */
503 		precvbuf->reuse = false;
504 	}
505 
506 	precvpriv->rx_pending_cnt++;
507 
508 	purb = precvbuf->purb;
509 
510 	/* translate DMA FIFO addr to pipehandle */
511 	pipe = ffaddr2pipehdl(pdvobj, addr);
512 
513 	usb_fill_bulk_urb(purb, pusbd, pipe,
514 			  precvbuf->pskb->data,
515 			  MAX_RECVBUF_SZ,
516 			  usb_read_port_complete,
517 			  precvbuf);/* context is precvbuf */
518 
519 	err = usb_submit_urb(purb, GFP_ATOMIC);
520 	if ((err) && (err != (-EPERM))) {
521 		RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
522 			 ("cannot submit rx in-token(err=0x%.8x), URB_STATUS =0x%.8x",
523 			 err, purb->status));
524 		DBG_88E("cannot submit rx in-token(err = 0x%08x),urb_status = %d\n",
525 			err, purb->status);
526 		ret = _FAIL;
527 	}
528 
529 	return ret;
530 }
531 
usb_read_port_cancel(struct adapter * padapter)532 void usb_read_port_cancel(struct adapter *padapter)
533 {
534 	int i;
535 	struct recv_buf *precvbuf;
536 
537 	precvbuf = (struct recv_buf *)padapter->recvpriv.precv_buf;
538 
539 	DBG_88E("%s\n", __func__);
540 
541 	padapter->bReadPortCancel = true;
542 
543 	for (i = 0; i < NR_RECVBUFF; i++) {
544 		precvbuf->reuse = true;
545 		if (precvbuf->purb)
546 			usb_kill_urb(precvbuf->purb);
547 		precvbuf++;
548 	}
549 }
550 
usb_write8(struct adapter * adapter,u32 addr,u8 val)551 int usb_write8(struct adapter *adapter, u32 addr, u8 val)
552 {
553 	u8 request;
554 	u8 requesttype;
555 	u16 wvalue;
556 	u16 index;
557 	u16 len;
558 	u8 data;
559 
560 	request = 0x05;
561 	requesttype = 0x00;/* write_out */
562 	index = 0;/* n/a */
563 	wvalue = (u16)(addr&0x0000ffff);
564 	len = 1;
565 	data = val;
566 	return usbctrl_vendorreq(adapter, request, wvalue,
567 				 index, &data, len, requesttype);
568 }
569 
usb_write16(struct adapter * adapter,u32 addr,u16 val)570 int usb_write16(struct adapter *adapter, u32 addr, u16 val)
571 {
572 	u8 request;
573 	u8 requesttype;
574 	u16 wvalue;
575 	u16 index;
576 	u16 len;
577 	__le32 data;
578 
579 
580 	request = 0x05;
581 	requesttype = 0x00;/* write_out */
582 	index = 0;/* n/a */
583 
584 	wvalue = (u16)(addr&0x0000ffff);
585 	len = 2;
586 
587 	data = cpu_to_le32(val & 0x0000ffff);
588 
589 	return usbctrl_vendorreq(adapter, request, wvalue,
590 				 index, &data, len, requesttype);
591 
592 
593 }
594 
usb_write32(struct adapter * adapter,u32 addr,u32 val)595 int usb_write32(struct adapter *adapter, u32 addr, u32 val)
596 {
597 	u8 request;
598 	u8 requesttype;
599 	u16 wvalue;
600 	u16 index;
601 	u16 len;
602 	__le32 data;
603 
604 
605 	request = 0x05;
606 	requesttype = 0x00;/* write_out */
607 	index = 0;/* n/a */
608 
609 	wvalue = (u16)(addr&0x0000ffff);
610 	len = 4;
611 	data = cpu_to_le32(val);
612 
613 	return usbctrl_vendorreq(adapter, request, wvalue,
614 				 index, &data, len, requesttype);
615 
616 
617 }
618 
usb_write_port_complete(struct urb * purb,struct pt_regs * regs)619 static void usb_write_port_complete(struct urb *purb, struct pt_regs *regs)
620 {
621 	struct xmit_buf *pxmitbuf = (struct xmit_buf *)purb->context;
622 	struct adapter	*padapter = pxmitbuf->padapter;
623 	struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;
624 
625 	switch (pxmitbuf->flags) {
626 	case VO_QUEUE_INX:
627 		pxmitpriv->voq_cnt--;
628 		break;
629 	case VI_QUEUE_INX:
630 		pxmitpriv->viq_cnt--;
631 		break;
632 	case BE_QUEUE_INX:
633 		pxmitpriv->beq_cnt--;
634 		break;
635 	case BK_QUEUE_INX:
636 		pxmitpriv->bkq_cnt--;
637 		break;
638 	case HIGH_QUEUE_INX:
639 #ifdef CONFIG_88EU_AP_MODE
640 		rtw_chk_hi_queue_cmd(padapter);
641 #endif
642 		break;
643 	default:
644 		break;
645 	}
646 
647 	if (padapter->bSurpriseRemoved || padapter->bDriverStopped ||
648 	    padapter->bWritePortCancel) {
649 		RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
650 			 ("usb_write_port_complete:bDriverStopped(%d) OR bSurpriseRemoved(%d)",
651 			 padapter->bDriverStopped, padapter->bSurpriseRemoved));
652 		DBG_88E("%s(): TX Warning! bDriverStopped(%d) OR bSurpriseRemoved(%d) bWritePortCancel(%d) pxmitbuf->ext_tag(%x)\n",
653 			__func__, padapter->bDriverStopped,
654 			padapter->bSurpriseRemoved, padapter->bReadPortCancel,
655 			pxmitbuf->ext_tag);
656 
657 		goto check_completion;
658 	}
659 
660 	if (purb->status) {
661 		RT_TRACE(_module_hci_ops_os_c_, _drv_err_, ("usb_write_port_complete : purb->status(%d) != 0\n", purb->status));
662 		DBG_88E("###=> urb_write_port_complete status(%d)\n", purb->status);
663 		if ((purb->status == -EPIPE) || (purb->status == -EPROTO)) {
664 			sreset_set_wifi_error_status(padapter, USB_WRITE_PORT_FAIL);
665 		} else if (purb->status == -EINPROGRESS) {
666 			RT_TRACE(_module_hci_ops_os_c_, _drv_err_, ("usb_write_port_complete: EINPROGESS\n"));
667 			goto check_completion;
668 		} else if (purb->status == -ENOENT) {
669 			DBG_88E("%s: -ENOENT\n", __func__);
670 			goto check_completion;
671 		} else if (purb->status == -ECONNRESET) {
672 			DBG_88E("%s: -ECONNRESET\n", __func__);
673 			goto check_completion;
674 		} else if (purb->status == -ESHUTDOWN) {
675 			RT_TRACE(_module_hci_ops_os_c_, _drv_err_, ("usb_write_port_complete: ESHUTDOWN\n"));
676 			padapter->bDriverStopped = true;
677 			RT_TRACE(_module_hci_ops_os_c_, _drv_err_, ("usb_write_port_complete:bDriverStopped = true\n"));
678 			goto check_completion;
679 		} else {
680 			padapter->bSurpriseRemoved = true;
681 			DBG_88E("bSurpriseRemoved = true\n");
682 			RT_TRACE(_module_hci_ops_os_c_, _drv_err_, ("usb_write_port_complete:bSurpriseRemoved = true\n"));
683 
684 			goto check_completion;
685 		}
686 	}
687 
688 check_completion:
689 	rtw_sctx_done_err(&pxmitbuf->sctx,
690 			  purb->status ? RTW_SCTX_DONE_WRITE_PORT_ERR :
691 			  RTW_SCTX_DONE_SUCCESS);
692 
693 	rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
694 
695 	tasklet_hi_schedule(&pxmitpriv->xmit_tasklet);
696 }
697 
usb_write_port(struct adapter * padapter,u32 addr,u32 cnt,u8 * wmem)698 u32 usb_write_port(struct adapter *padapter, u32 addr, u32 cnt, u8 *wmem)
699 {
700 	unsigned long irqL;
701 	unsigned int pipe;
702 	int status;
703 	u32 ret = _FAIL;
704 	struct urb *purb = NULL;
705 	struct dvobj_priv	*pdvobj = adapter_to_dvobj(padapter);
706 	struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;
707 	struct xmit_buf *pxmitbuf = (struct xmit_buf *)wmem;
708 	struct xmit_frame *pxmitframe = (struct xmit_frame *)pxmitbuf->priv_data;
709 	struct usb_device *pusbd = pdvobj->pusbdev;
710 
711 
712 	RT_TRACE(_module_hci_ops_os_c_, _drv_err_, ("+usb_write_port\n"));
713 
714 	if ((padapter->bDriverStopped) || (padapter->bSurpriseRemoved) ||
715 	    (padapter->pwrctrlpriv.pnp_bstop_trx)) {
716 		RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
717 			 ("usb_write_port:( padapter->bDriverStopped ||padapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n"));
718 		rtw_sctx_done_err(&pxmitbuf->sctx, RTW_SCTX_DONE_TX_DENY);
719 		goto exit;
720 	}
721 
722 	spin_lock_irqsave(&pxmitpriv->lock, irqL);
723 
724 	switch (addr) {
725 	case VO_QUEUE_INX:
726 		pxmitpriv->voq_cnt++;
727 		pxmitbuf->flags = VO_QUEUE_INX;
728 		break;
729 	case VI_QUEUE_INX:
730 		pxmitpriv->viq_cnt++;
731 		pxmitbuf->flags = VI_QUEUE_INX;
732 		break;
733 	case BE_QUEUE_INX:
734 		pxmitpriv->beq_cnt++;
735 		pxmitbuf->flags = BE_QUEUE_INX;
736 		break;
737 	case BK_QUEUE_INX:
738 		pxmitpriv->bkq_cnt++;
739 		pxmitbuf->flags = BK_QUEUE_INX;
740 		break;
741 	case HIGH_QUEUE_INX:
742 		pxmitbuf->flags = HIGH_QUEUE_INX;
743 		break;
744 	default:
745 		pxmitbuf->flags = MGT_QUEUE_INX;
746 		break;
747 	}
748 
749 	spin_unlock_irqrestore(&pxmitpriv->lock, irqL);
750 
751 	purb	= pxmitbuf->pxmit_urb[0];
752 
753 	/* translate DMA FIFO addr to pipehandle */
754 	pipe = ffaddr2pipehdl(pdvobj, addr);
755 
756 	usb_fill_bulk_urb(purb, pusbd, pipe,
757 			  pxmitframe->buf_addr, /*  pxmitbuf->pbuf */
758 			  cnt,
759 			  usb_write_port_complete,
760 			  pxmitbuf);/* context is pxmitbuf */
761 
762 	status = usb_submit_urb(purb, GFP_ATOMIC);
763 	if (status) {
764 		rtw_sctx_done_err(&pxmitbuf->sctx, RTW_SCTX_DONE_WRITE_PORT_ERR);
765 		DBG_88E("usb_write_port, status =%d\n", status);
766 		RT_TRACE(_module_hci_ops_os_c_, _drv_err_, ("usb_write_port(): usb_submit_urb, status =%x\n", status));
767 
768 		switch (status) {
769 		case -ENODEV:
770 			padapter->bDriverStopped = true;
771 			break;
772 		default:
773 			break;
774 		}
775 		goto exit;
776 	}
777 
778 	ret = _SUCCESS;
779 
780 /*    We add the URB_ZERO_PACKET flag to urb so that the host will send the zero packet automatically. */
781 
782 	RT_TRACE(_module_hci_ops_os_c_, _drv_err_, ("-usb_write_port\n"));
783 
784 exit:
785 	if (ret != _SUCCESS)
786 		rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
787 	return ret;
788 }
789 
usb_write_port_cancel(struct adapter * padapter)790 void usb_write_port_cancel(struct adapter *padapter)
791 {
792 	int i, j;
793 	struct xmit_buf *pxmitbuf = (struct xmit_buf *)padapter->xmitpriv.pxmitbuf;
794 
795 	DBG_88E("%s\n", __func__);
796 
797 	padapter->bWritePortCancel = true;
798 
799 	for (i = 0; i < NR_XMITBUFF; i++) {
800 		for (j = 0; j < 8; j++) {
801 			if (pxmitbuf->pxmit_urb[j])
802 				usb_kill_urb(pxmitbuf->pxmit_urb[j]);
803 		}
804 		pxmitbuf++;
805 	}
806 
807 	pxmitbuf = (struct xmit_buf *)padapter->xmitpriv.pxmit_extbuf;
808 	for (i = 0; i < NR_XMIT_EXTBUFF; i++) {
809 		for (j = 0; j < 8; j++) {
810 			if (pxmitbuf->pxmit_urb[j])
811 				usb_kill_urb(pxmitbuf->pxmit_urb[j]);
812 		}
813 		pxmitbuf++;
814 	}
815 }
816 
rtl8188eu_recv_tasklet(void * priv)817 void rtl8188eu_recv_tasklet(void *priv)
818 {
819 	struct sk_buff *pskb;
820 	struct adapter *adapt = priv;
821 	struct recv_priv *precvpriv = &adapt->recvpriv;
822 
823 	while (NULL != (pskb = skb_dequeue(&precvpriv->rx_skb_queue))) {
824 		if ((adapt->bDriverStopped) || (adapt->bSurpriseRemoved)) {
825 			DBG_88E("recv_tasklet => bDriverStopped or bSurpriseRemoved\n");
826 			dev_kfree_skb_any(pskb);
827 			break;
828 		}
829 		recvbuf2recvframe(adapt, pskb);
830 		skb_reset_tail_pointer(pskb);
831 		pskb->len = 0;
832 		skb_queue_tail(&precvpriv->free_recv_skb_queue, pskb);
833 	}
834 }
835 
rtl8188eu_xmit_tasklet(void * priv)836 void rtl8188eu_xmit_tasklet(void *priv)
837 {
838 	int ret = false;
839 	struct adapter *adapt = priv;
840 	struct xmit_priv *pxmitpriv = &adapt->xmitpriv;
841 
842 	if (check_fwstate(&adapt->mlmepriv, _FW_UNDER_SURVEY))
843 		return;
844 
845 	while (1) {
846 		if ((adapt->bDriverStopped) ||
847 		    (adapt->bSurpriseRemoved) ||
848 		    (adapt->bWritePortCancel)) {
849 			DBG_88E("xmit_tasklet => bDriverStopped or bSurpriseRemoved or bWritePortCancel\n");
850 			break;
851 		}
852 
853 		ret = rtl8188eu_xmitframe_complete(adapt, pxmitpriv, NULL);
854 
855 		if (!ret)
856 			break;
857 	}
858 }
859