1/*
2 * Marvell Wireless LAN device driver: HW/FW Initialization
3 *
4 * Copyright (C) 2011-2014, Marvell International Ltd.
5 *
6 * This software file (the "File") is distributed by Marvell International
7 * Ltd. under the terms of the GNU General Public License Version 2, June 1991
8 * (the "License").  You may use, redistribute and/or modify this File in
9 * accordance with the terms and conditions of the License, a copy of which
10 * is available by writing to the Free Software Foundation, Inc.,
11 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
12 * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
13 *
14 * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
15 * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
16 * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
17 * this warranty disclaimer.
18 */
19
20#include "decl.h"
21#include "ioctl.h"
22#include "util.h"
23#include "fw.h"
24#include "main.h"
25#include "wmm.h"
26#include "11n.h"
27
28/*
29 * This function adds a BSS priority table to the table list.
30 *
31 * The function allocates a new BSS priority table node and adds it to
32 * the end of BSS priority table list, kept in driver memory.
33 */
34static int mwifiex_add_bss_prio_tbl(struct mwifiex_private *priv)
35{
36	struct mwifiex_adapter *adapter = priv->adapter;
37	struct mwifiex_bss_prio_node *bss_prio;
38	struct mwifiex_bss_prio_tbl *tbl = adapter->bss_prio_tbl;
39	unsigned long flags;
40
41	bss_prio = kzalloc(sizeof(struct mwifiex_bss_prio_node), GFP_KERNEL);
42	if (!bss_prio)
43		return -ENOMEM;
44
45	bss_prio->priv = priv;
46	INIT_LIST_HEAD(&bss_prio->list);
47
48	spin_lock_irqsave(&tbl[priv->bss_priority].bss_prio_lock, flags);
49	list_add_tail(&bss_prio->list, &tbl[priv->bss_priority].bss_prio_head);
50	spin_unlock_irqrestore(&tbl[priv->bss_priority].bss_prio_lock, flags);
51
52	return 0;
53}
54
55static void wakeup_timer_fn(unsigned long data)
56{
57	struct mwifiex_adapter *adapter = (struct mwifiex_adapter *)data;
58
59	dev_err(adapter->dev, "Firmware wakeup failed\n");
60	adapter->hw_status = MWIFIEX_HW_STATUS_RESET;
61	mwifiex_cancel_all_pending_cmd(adapter);
62
63	if (adapter->if_ops.card_reset)
64		adapter->if_ops.card_reset(adapter);
65}
66
67/*
68 * This function initializes the private structure and sets default
69 * values to the members.
70 *
71 * Additionally, it also initializes all the locks and sets up all the
72 * lists.
73 */
74int mwifiex_init_priv(struct mwifiex_private *priv)
75{
76	u32 i;
77
78	priv->media_connected = false;
79	eth_broadcast_addr(priv->curr_addr);
80
81	priv->pkt_tx_ctrl = 0;
82	priv->bss_mode = NL80211_IFTYPE_UNSPECIFIED;
83	priv->data_rate = 0;	/* Initially indicate the rate as auto */
84	priv->is_data_rate_auto = true;
85	priv->bcn_avg_factor = DEFAULT_BCN_AVG_FACTOR;
86	priv->data_avg_factor = DEFAULT_DATA_AVG_FACTOR;
87
88	priv->sec_info.wep_enabled = 0;
89	priv->sec_info.authentication_mode = NL80211_AUTHTYPE_OPEN_SYSTEM;
90	priv->sec_info.encryption_mode = 0;
91	for (i = 0; i < ARRAY_SIZE(priv->wep_key); i++)
92		memset(&priv->wep_key[i], 0, sizeof(struct mwifiex_wep_key));
93	priv->wep_key_curr_index = 0;
94	priv->curr_pkt_filter = HostCmd_ACT_MAC_RX_ON | HostCmd_ACT_MAC_TX_ON |
95				HostCmd_ACT_MAC_ETHERNETII_ENABLE;
96
97	priv->beacon_period = 100; /* beacon interval */ ;
98	priv->attempted_bss_desc = NULL;
99	memset(&priv->curr_bss_params, 0, sizeof(priv->curr_bss_params));
100	priv->listen_interval = MWIFIEX_DEFAULT_LISTEN_INTERVAL;
101
102	memset(&priv->prev_ssid, 0, sizeof(priv->prev_ssid));
103	memset(&priv->prev_bssid, 0, sizeof(priv->prev_bssid));
104	memset(&priv->assoc_rsp_buf, 0, sizeof(priv->assoc_rsp_buf));
105	priv->assoc_rsp_size = 0;
106	priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
107	priv->atim_window = 0;
108	priv->adhoc_state = ADHOC_IDLE;
109	priv->tx_power_level = 0;
110	priv->max_tx_power_level = 0;
111	priv->min_tx_power_level = 0;
112	priv->tx_rate = 0;
113	priv->rxpd_htinfo = 0;
114	priv->rxpd_rate = 0;
115	priv->rate_bitmap = 0;
116	priv->data_rssi_last = 0;
117	priv->data_rssi_avg = 0;
118	priv->data_nf_avg = 0;
119	priv->data_nf_last = 0;
120	priv->bcn_rssi_last = 0;
121	priv->bcn_rssi_avg = 0;
122	priv->bcn_nf_avg = 0;
123	priv->bcn_nf_last = 0;
124	memset(&priv->wpa_ie, 0, sizeof(priv->wpa_ie));
125	memset(&priv->aes_key, 0, sizeof(priv->aes_key));
126	priv->wpa_ie_len = 0;
127	priv->wpa_is_gtk_set = false;
128
129	memset(&priv->assoc_tlv_buf, 0, sizeof(priv->assoc_tlv_buf));
130	priv->assoc_tlv_buf_len = 0;
131	memset(&priv->wps, 0, sizeof(priv->wps));
132	memset(&priv->gen_ie_buf, 0, sizeof(priv->gen_ie_buf));
133	priv->gen_ie_buf_len = 0;
134	memset(priv->vs_ie, 0, sizeof(priv->vs_ie));
135
136	priv->wmm_required = true;
137	priv->wmm_enabled = false;
138	priv->wmm_qosinfo = 0;
139	priv->curr_bcn_buf = NULL;
140	priv->curr_bcn_size = 0;
141	priv->wps_ie = NULL;
142	priv->wps_ie_len = 0;
143	priv->ap_11n_enabled = 0;
144	memset(&priv->roc_cfg, 0, sizeof(priv->roc_cfg));
145
146	priv->scan_block = false;
147
148	priv->csa_chan = 0;
149	priv->csa_expire_time = 0;
150	priv->del_list_idx = 0;
151	priv->hs2_enabled = false;
152	priv->check_tdls_tx = false;
153	memcpy(priv->tos_to_tid_inv, tos_to_tid_inv, MAX_NUM_TID);
154
155	mwifiex_init_11h_params(priv);
156
157	return mwifiex_add_bss_prio_tbl(priv);
158}
159
160/*
161 * This function allocates buffers for members of the adapter
162 * structure.
163 *
164 * The memory allocated includes scan table, command buffers, and
165 * sleep confirm command buffer. In addition, the queues are
166 * also initialized.
167 */
168static int mwifiex_allocate_adapter(struct mwifiex_adapter *adapter)
169{
170	int ret;
171
172	/* Allocate command buffer */
173	ret = mwifiex_alloc_cmd_buffer(adapter);
174	if (ret) {
175		dev_err(adapter->dev, "%s: failed to alloc cmd buffer\n",
176			__func__);
177		return -1;
178	}
179
180	adapter->sleep_cfm =
181		dev_alloc_skb(sizeof(struct mwifiex_opt_sleep_confirm)
182			      + INTF_HEADER_LEN);
183
184	if (!adapter->sleep_cfm) {
185		dev_err(adapter->dev, "%s: failed to alloc sleep cfm"
186			" cmd buffer\n", __func__);
187		return -1;
188	}
189	skb_reserve(adapter->sleep_cfm, INTF_HEADER_LEN);
190
191	return 0;
192}
193
194/*
195 * This function initializes the adapter structure and sets default
196 * values to the members of adapter.
197 *
198 * This also initializes the WMM related parameters in the driver private
199 * structures.
200 */
201static void mwifiex_init_adapter(struct mwifiex_adapter *adapter)
202{
203	struct mwifiex_opt_sleep_confirm *sleep_cfm_buf = NULL;
204
205	skb_put(adapter->sleep_cfm, sizeof(struct mwifiex_opt_sleep_confirm));
206
207	adapter->cmd_sent = false;
208
209	if (adapter->iface_type == MWIFIEX_SDIO)
210		adapter->data_sent = true;
211	else
212		adapter->data_sent = false;
213
214	adapter->cmd_resp_received = false;
215	adapter->event_received = false;
216	adapter->data_received = false;
217
218	adapter->surprise_removed = false;
219
220	adapter->hw_status = MWIFIEX_HW_STATUS_INITIALIZING;
221
222	adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_CAM;
223	adapter->ps_state = PS_STATE_AWAKE;
224	adapter->need_to_wakeup = false;
225
226	adapter->scan_mode = HostCmd_BSS_MODE_ANY;
227	adapter->specific_scan_time = MWIFIEX_SPECIFIC_SCAN_CHAN_TIME;
228	adapter->active_scan_time = MWIFIEX_ACTIVE_SCAN_CHAN_TIME;
229	adapter->passive_scan_time = MWIFIEX_PASSIVE_SCAN_CHAN_TIME;
230	adapter->scan_chan_gap_time = MWIFIEX_DEF_SCAN_CHAN_GAP_TIME;
231
232	adapter->scan_probes = 1;
233
234	adapter->multiple_dtim = 1;
235
236	adapter->local_listen_interval = 0;	/* default value in firmware
237						   will be used */
238
239	adapter->is_deep_sleep = false;
240
241	adapter->delay_null_pkt = false;
242	adapter->delay_to_ps = 1000;
243	adapter->enhanced_ps_mode = PS_MODE_AUTO;
244
245	adapter->gen_null_pkt = false;	/* Disable NULL Pkg generation by
246					   default */
247	adapter->pps_uapsd_mode = false; /* Disable pps/uapsd mode by
248					   default */
249	adapter->pm_wakeup_card_req = false;
250
251	adapter->pm_wakeup_fw_try = false;
252
253	adapter->curr_tx_buf_size = MWIFIEX_TX_DATA_BUF_SIZE_2K;
254
255	adapter->is_hs_configured = false;
256	adapter->hs_cfg.conditions = cpu_to_le32(HS_CFG_COND_DEF);
257	adapter->hs_cfg.gpio = HS_CFG_GPIO_DEF;
258	adapter->hs_cfg.gap = HS_CFG_GAP_DEF;
259	adapter->hs_activated = false;
260
261	memset(adapter->event_body, 0, sizeof(adapter->event_body));
262	adapter->hw_dot_11n_dev_cap = 0;
263	adapter->hw_dev_mcs_support = 0;
264	adapter->sec_chan_offset = 0;
265	adapter->adhoc_11n_enabled = false;
266
267	mwifiex_wmm_init(adapter);
268
269	sleep_cfm_buf = (struct mwifiex_opt_sleep_confirm *)
270					adapter->sleep_cfm->data;
271	memset(sleep_cfm_buf, 0, adapter->sleep_cfm->len);
272	sleep_cfm_buf->command = cpu_to_le16(HostCmd_CMD_802_11_PS_MODE_ENH);
273	sleep_cfm_buf->size = cpu_to_le16(adapter->sleep_cfm->len);
274	sleep_cfm_buf->result = 0;
275	sleep_cfm_buf->action = cpu_to_le16(SLEEP_CONFIRM);
276	sleep_cfm_buf->resp_ctrl = cpu_to_le16(RESP_NEEDED);
277
278	memset(&adapter->sleep_params, 0, sizeof(adapter->sleep_params));
279	memset(&adapter->sleep_period, 0, sizeof(adapter->sleep_period));
280	adapter->tx_lock_flag = false;
281	adapter->null_pkt_interval = 0;
282	adapter->fw_bands = 0;
283	adapter->config_bands = 0;
284	adapter->adhoc_start_band = 0;
285	adapter->scan_channels = NULL;
286	adapter->fw_release_number = 0;
287	adapter->fw_cap_info = 0;
288	memset(&adapter->upld_buf, 0, sizeof(adapter->upld_buf));
289	adapter->event_cause = 0;
290	adapter->region_code = 0;
291	adapter->bcn_miss_time_out = DEFAULT_BCN_MISS_TIMEOUT;
292	adapter->adhoc_awake_period = 0;
293	memset(&adapter->arp_filter, 0, sizeof(adapter->arp_filter));
294	adapter->arp_filter_size = 0;
295	adapter->max_mgmt_ie_index = MAX_MGMT_IE_INDEX;
296	adapter->key_api_major_ver = 0;
297	adapter->key_api_minor_ver = 0;
298	eth_broadcast_addr(adapter->perm_addr);
299	adapter->iface_limit.sta_intf = MWIFIEX_MAX_STA_NUM;
300	adapter->iface_limit.uap_intf = MWIFIEX_MAX_UAP_NUM;
301	adapter->iface_limit.p2p_intf = MWIFIEX_MAX_P2P_NUM;
302
303	setup_timer(&adapter->wakeup_timer, wakeup_timer_fn,
304		    (unsigned long)adapter);
305}
306
307/*
308 * This function sets trans_start per tx_queue
309 */
310void mwifiex_set_trans_start(struct net_device *dev)
311{
312	int i;
313
314	for (i = 0; i < dev->num_tx_queues; i++)
315		netdev_get_tx_queue(dev, i)->trans_start = jiffies;
316
317	dev->trans_start = jiffies;
318}
319
320/*
321 * This function wakes up all queues in net_device
322 */
323void mwifiex_wake_up_net_dev_queue(struct net_device *netdev,
324					struct mwifiex_adapter *adapter)
325{
326	unsigned long dev_queue_flags;
327	unsigned int i;
328
329	spin_lock_irqsave(&adapter->queue_lock, dev_queue_flags);
330
331	for (i = 0; i < netdev->num_tx_queues; i++) {
332		struct netdev_queue *txq = netdev_get_tx_queue(netdev, i);
333
334		if (netif_tx_queue_stopped(txq))
335			netif_tx_wake_queue(txq);
336	}
337
338	spin_unlock_irqrestore(&adapter->queue_lock, dev_queue_flags);
339}
340
341/*
342 * This function stops all queues in net_device
343 */
344void mwifiex_stop_net_dev_queue(struct net_device *netdev,
345					struct mwifiex_adapter *adapter)
346{
347	unsigned long dev_queue_flags;
348	unsigned int i;
349
350	spin_lock_irqsave(&adapter->queue_lock, dev_queue_flags);
351
352	for (i = 0; i < netdev->num_tx_queues; i++) {
353		struct netdev_queue *txq = netdev_get_tx_queue(netdev, i);
354
355		if (!netif_tx_queue_stopped(txq))
356			netif_tx_stop_queue(txq);
357	}
358
359	spin_unlock_irqrestore(&adapter->queue_lock, dev_queue_flags);
360}
361
362/*
363 *  This function releases the lock variables and frees the locks and
364 *  associated locks.
365 */
366static void mwifiex_free_lock_list(struct mwifiex_adapter *adapter)
367{
368	struct mwifiex_private *priv;
369	s32 i, j;
370
371	/* Free lists */
372	list_del(&adapter->cmd_free_q);
373	list_del(&adapter->cmd_pending_q);
374	list_del(&adapter->scan_pending_q);
375
376	for (i = 0; i < adapter->priv_num; i++)
377		list_del(&adapter->bss_prio_tbl[i].bss_prio_head);
378
379	for (i = 0; i < adapter->priv_num; i++) {
380		if (adapter->priv[i]) {
381			priv = adapter->priv[i];
382			for (j = 0; j < MAX_NUM_TID; ++j)
383				list_del(&priv->wmm.tid_tbl_ptr[j].ra_list);
384			list_del(&priv->tx_ba_stream_tbl_ptr);
385			list_del(&priv->rx_reorder_tbl_ptr);
386			list_del(&priv->sta_list);
387			list_del(&priv->auto_tdls_list);
388		}
389	}
390}
391
392/*
393 * This function performs cleanup for adapter structure.
394 *
395 * The cleanup is done recursively, by canceling all pending
396 * commands, freeing the member buffers previously allocated
397 * (command buffers, scan table buffer, sleep confirm command
398 * buffer), stopping the timers and calling the cleanup routines
399 * for every interface.
400 */
401static void
402mwifiex_adapter_cleanup(struct mwifiex_adapter *adapter)
403{
404	int idx;
405
406	if (!adapter) {
407		pr_err("%s: adapter is NULL\n", __func__);
408		return;
409	}
410
411	del_timer(&adapter->wakeup_timer);
412	mwifiex_cancel_all_pending_cmd(adapter);
413	wake_up_interruptible(&adapter->cmd_wait_q.wait);
414	wake_up_interruptible(&adapter->hs_activate_wait_q);
415
416	/* Free lock variables */
417	mwifiex_free_lock_list(adapter);
418
419	/* Free command buffer */
420	dev_dbg(adapter->dev, "info: free cmd buffer\n");
421	mwifiex_free_cmd_buffer(adapter);
422
423	for (idx = 0; idx < adapter->num_mem_types; idx++) {
424		struct memory_type_mapping *entry =
425				&adapter->mem_type_mapping_tbl[idx];
426
427		if (entry->mem_ptr) {
428			vfree(entry->mem_ptr);
429			entry->mem_ptr = NULL;
430		}
431		entry->mem_size = 0;
432	}
433
434	if (adapter->drv_info_dump) {
435		vfree(adapter->drv_info_dump);
436		adapter->drv_info_size = 0;
437	}
438
439	if (adapter->sleep_cfm)
440		dev_kfree_skb_any(adapter->sleep_cfm);
441}
442
443/*
444 *  This function intializes the lock variables and
445 *  the list heads.
446 */
447int mwifiex_init_lock_list(struct mwifiex_adapter *adapter)
448{
449	struct mwifiex_private *priv;
450	s32 i, j;
451
452	spin_lock_init(&adapter->mwifiex_lock);
453	spin_lock_init(&adapter->int_lock);
454	spin_lock_init(&adapter->main_proc_lock);
455	spin_lock_init(&adapter->mwifiex_cmd_lock);
456	spin_lock_init(&adapter->queue_lock);
457	for (i = 0; i < adapter->priv_num; i++) {
458		if (adapter->priv[i]) {
459			priv = adapter->priv[i];
460			spin_lock_init(&priv->rx_pkt_lock);
461			spin_lock_init(&priv->wmm.ra_list_spinlock);
462			spin_lock_init(&priv->curr_bcn_buf_lock);
463			spin_lock_init(&priv->sta_list_spinlock);
464			spin_lock_init(&priv->auto_tdls_lock);
465		}
466	}
467
468	/* Initialize cmd_free_q */
469	INIT_LIST_HEAD(&adapter->cmd_free_q);
470	/* Initialize cmd_pending_q */
471	INIT_LIST_HEAD(&adapter->cmd_pending_q);
472	/* Initialize scan_pending_q */
473	INIT_LIST_HEAD(&adapter->scan_pending_q);
474
475	spin_lock_init(&adapter->cmd_free_q_lock);
476	spin_lock_init(&adapter->cmd_pending_q_lock);
477	spin_lock_init(&adapter->scan_pending_q_lock);
478	spin_lock_init(&adapter->rx_proc_lock);
479
480	skb_queue_head_init(&adapter->rx_data_q);
481	skb_queue_head_init(&adapter->tx_data_q);
482
483	for (i = 0; i < adapter->priv_num; ++i) {
484		INIT_LIST_HEAD(&adapter->bss_prio_tbl[i].bss_prio_head);
485		spin_lock_init(&adapter->bss_prio_tbl[i].bss_prio_lock);
486	}
487
488	for (i = 0; i < adapter->priv_num; i++) {
489		if (!adapter->priv[i])
490			continue;
491		priv = adapter->priv[i];
492		for (j = 0; j < MAX_NUM_TID; ++j)
493			INIT_LIST_HEAD(&priv->wmm.tid_tbl_ptr[j].ra_list);
494		INIT_LIST_HEAD(&priv->tx_ba_stream_tbl_ptr);
495		INIT_LIST_HEAD(&priv->rx_reorder_tbl_ptr);
496		INIT_LIST_HEAD(&priv->sta_list);
497		INIT_LIST_HEAD(&priv->auto_tdls_list);
498		skb_queue_head_init(&priv->tdls_txq);
499
500		spin_lock_init(&priv->tx_ba_stream_tbl_lock);
501		spin_lock_init(&priv->rx_reorder_tbl_lock);
502
503		spin_lock_init(&priv->ack_status_lock);
504		idr_init(&priv->ack_status_frames);
505	}
506
507	return 0;
508}
509
510/*
511 * This function initializes the firmware.
512 *
513 * The following operations are performed sequentially -
514 *      - Allocate adapter structure
515 *      - Initialize the adapter structure
516 *      - Initialize the private structure
517 *      - Add BSS priority tables to the adapter structure
518 *      - For each interface, send the init commands to firmware
519 *      - Send the first command in command pending queue, if available
520 */
521int mwifiex_init_fw(struct mwifiex_adapter *adapter)
522{
523	int ret;
524	struct mwifiex_private *priv;
525	u8 i, first_sta = true;
526	int is_cmd_pend_q_empty;
527	unsigned long flags;
528
529	adapter->hw_status = MWIFIEX_HW_STATUS_INITIALIZING;
530
531	/* Allocate memory for member of adapter structure */
532	ret = mwifiex_allocate_adapter(adapter);
533	if (ret)
534		return -1;
535
536	/* Initialize adapter structure */
537	mwifiex_init_adapter(adapter);
538
539	for (i = 0; i < adapter->priv_num; i++) {
540		if (adapter->priv[i]) {
541			priv = adapter->priv[i];
542
543			/* Initialize private structure */
544			ret = mwifiex_init_priv(priv);
545			if (ret)
546				return -1;
547		}
548	}
549
550	if (adapter->if_ops.init_fw_port) {
551		if (adapter->if_ops.init_fw_port(adapter))
552			return -1;
553	}
554
555	for (i = 0; i < adapter->priv_num; i++) {
556		if (adapter->priv[i]) {
557			ret = mwifiex_sta_init_cmd(adapter->priv[i], first_sta,
558						   true);
559			if (ret == -1)
560				return -1;
561
562			first_sta = false;
563		}
564	}
565
566	spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
567	is_cmd_pend_q_empty = list_empty(&adapter->cmd_pending_q);
568	spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
569	if (!is_cmd_pend_q_empty) {
570		/* Send the first command in queue and return */
571		if (mwifiex_main_process(adapter) != -1)
572			ret = -EINPROGRESS;
573	} else {
574		adapter->hw_status = MWIFIEX_HW_STATUS_READY;
575	}
576
577	return ret;
578}
579
580/*
581 * This function deletes the BSS priority tables.
582 *
583 * The function traverses through all the allocated BSS priority nodes
584 * in every BSS priority table and frees them.
585 */
586static void mwifiex_delete_bss_prio_tbl(struct mwifiex_private *priv)
587{
588	int i;
589	struct mwifiex_adapter *adapter = priv->adapter;
590	struct mwifiex_bss_prio_node *bssprio_node, *tmp_node;
591	struct list_head *head;
592	spinlock_t *lock; /* bss priority lock */
593	unsigned long flags;
594
595	for (i = 0; i < adapter->priv_num; ++i) {
596		head = &adapter->bss_prio_tbl[i].bss_prio_head;
597		lock = &adapter->bss_prio_tbl[i].bss_prio_lock;
598		dev_dbg(adapter->dev, "info: delete BSS priority table,"
599				" bss_type = %d, bss_num = %d, i = %d,"
600				" head = %p\n",
601			      priv->bss_type, priv->bss_num, i, head);
602
603		{
604			spin_lock_irqsave(lock, flags);
605			if (list_empty(head)) {
606				spin_unlock_irqrestore(lock, flags);
607				continue;
608			}
609			list_for_each_entry_safe(bssprio_node, tmp_node, head,
610						 list) {
611				if (bssprio_node->priv == priv) {
612					dev_dbg(adapter->dev, "info: Delete "
613						"node %p, next = %p\n",
614						bssprio_node, tmp_node);
615					list_del(&bssprio_node->list);
616					kfree(bssprio_node);
617				}
618			}
619			spin_unlock_irqrestore(lock, flags);
620		}
621	}
622}
623
624/*
625 * This function frees the private structure, including cleans
626 * up the TX and RX queues and frees the BSS priority tables.
627 */
628void mwifiex_free_priv(struct mwifiex_private *priv)
629{
630	mwifiex_clean_txrx(priv);
631	mwifiex_delete_bss_prio_tbl(priv);
632	mwifiex_free_curr_bcn(priv);
633}
634
635/*
636 * This function is used to shutdown the driver.
637 *
638 * The following operations are performed sequentially -
639 *      - Check if already shut down
640 *      - Make sure the main process has stopped
641 *      - Clean up the Tx and Rx queues
642 *      - Delete BSS priority tables
643 *      - Free the adapter
644 *      - Notify completion
645 */
646int
647mwifiex_shutdown_drv(struct mwifiex_adapter *adapter)
648{
649	int ret = -EINPROGRESS;
650	struct mwifiex_private *priv;
651	s32 i;
652	unsigned long flags;
653	struct sk_buff *skb;
654
655	/* mwifiex already shutdown */
656	if (adapter->hw_status == MWIFIEX_HW_STATUS_NOT_READY)
657		return 0;
658
659	adapter->hw_status = MWIFIEX_HW_STATUS_CLOSING;
660	/* wait for mwifiex_process to complete */
661	if (adapter->mwifiex_processing) {
662		dev_warn(adapter->dev, "main process is still running\n");
663		return ret;
664	}
665
666	/* cancel current command */
667	if (adapter->curr_cmd) {
668		dev_warn(adapter->dev, "curr_cmd is still in processing\n");
669		del_timer_sync(&adapter->cmd_timer);
670		mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd);
671		adapter->curr_cmd = NULL;
672	}
673
674	/* shut down mwifiex */
675	dev_dbg(adapter->dev, "info: shutdown mwifiex...\n");
676
677	/* Clean up Tx/Rx queues and delete BSS priority table */
678	for (i = 0; i < adapter->priv_num; i++) {
679		if (adapter->priv[i]) {
680			priv = adapter->priv[i];
681
682			mwifiex_clean_auto_tdls(priv);
683			mwifiex_abort_cac(priv);
684			mwifiex_clean_txrx(priv);
685			mwifiex_delete_bss_prio_tbl(priv);
686		}
687	}
688
689	atomic_set(&adapter->tx_queued, 0);
690	while ((skb = skb_dequeue(&adapter->tx_data_q)))
691		mwifiex_write_data_complete(adapter, skb, 0, 0);
692
693	spin_lock_irqsave(&adapter->rx_proc_lock, flags);
694
695	while ((skb = skb_dequeue(&adapter->rx_data_q))) {
696		struct mwifiex_rxinfo *rx_info = MWIFIEX_SKB_RXCB(skb);
697
698		atomic_dec(&adapter->rx_pending);
699		priv = adapter->priv[rx_info->bss_num];
700		if (priv)
701			priv->stats.rx_dropped++;
702
703		dev_kfree_skb_any(skb);
704	}
705
706	spin_unlock_irqrestore(&adapter->rx_proc_lock, flags);
707
708	spin_lock(&adapter->mwifiex_lock);
709
710	mwifiex_adapter_cleanup(adapter);
711
712	spin_unlock(&adapter->mwifiex_lock);
713
714	/* Notify completion */
715	ret = mwifiex_shutdown_fw_complete(adapter);
716
717	return ret;
718}
719
720/*
721 * This function downloads the firmware to the card.
722 *
723 * The actual download is preceded by two sanity checks -
724 *      - Check if firmware is already running
725 *      - Check if the interface is the winner to download the firmware
726 *
727 * ...and followed by another -
728 *      - Check if the firmware is downloaded successfully
729 *
730 * After download is successfully completed, the host interrupts are enabled.
731 */
732int mwifiex_dnld_fw(struct mwifiex_adapter *adapter,
733		    struct mwifiex_fw_image *pmfw)
734{
735	int ret;
736	u32 poll_num = 1;
737
738	if (adapter->if_ops.check_fw_status) {
739		adapter->winner = 0;
740
741		/* check if firmware is already running */
742		ret = adapter->if_ops.check_fw_status(adapter, poll_num);
743		if (!ret) {
744			dev_notice(adapter->dev,
745				   "WLAN FW already running! Skip FW dnld\n");
746			return 0;
747		}
748
749		poll_num = MAX_FIRMWARE_POLL_TRIES;
750
751		/* check if we are the winner for downloading FW */
752		if (!adapter->winner) {
753			dev_notice(adapter->dev,
754				   "FW already running! Skip FW dnld\n");
755			goto poll_fw;
756		}
757	}
758
759	if (pmfw) {
760		/* Download firmware with helper */
761		ret = adapter->if_ops.prog_fw(adapter, pmfw);
762		if (ret) {
763			dev_err(adapter->dev, "prog_fw failed ret=%#x\n", ret);
764			return ret;
765		}
766	}
767
768poll_fw:
769	/* Check if the firmware is downloaded successfully or not */
770	ret = adapter->if_ops.check_fw_status(adapter, poll_num);
771	if (ret)
772		dev_err(adapter->dev, "FW failed to be active in time\n");
773
774	return ret;
775}
776