2 * Marvell Wireless LAN device driver: commands and events
4 * Copyright (C) 2011-2014, Marvell International Ltd.
6 * This software file (the "File") is distributed by Marvell International
7 * Ltd. under the terms of the GNU General Public License Version 2, June 1991
8 * (the "License"). You may use, redistribute and/or modify this File in
9 * accordance with the terms and conditions of the License, a copy of which
10 * is available by writing to the Free Software Foundation, Inc.,
11 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
12 * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
14 * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
15 * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
16 * ARE EXPRESSLY DISCLAIMED. The License provides additional details about
17 * this warranty disclaimer.
30 * This function initializes a command node.
32 * The actual allocation of the node is not done by this function. It only
33 * initiates a node by filling it with default parameters. Similarly,
34 * allocation of the different buffers used (IOCTL buffer, data buffer) are
35 * not done by this function either.
38 mwifiex_init_cmd_node(struct mwifiex_private *priv,
39 struct cmd_ctrl_node *cmd_node,
40 u32 cmd_oid, void *data_buf, bool sync)
42 cmd_node->priv = priv;
43 cmd_node->cmd_oid = cmd_oid;
45 cmd_node->wait_q_enabled = true;
46 cmd_node->cmd_wait_q_woken = false;
47 cmd_node->condition = &cmd_node->cmd_wait_q_woken;
49 cmd_node->data_buf = data_buf;
50 cmd_node->cmd_skb = cmd_node->skb;
54 * This function returns a command node from the free queue depending upon
57 static struct cmd_ctrl_node *
58 mwifiex_get_cmd_node(struct mwifiex_adapter *adapter)
60 struct cmd_ctrl_node *cmd_node;
63 spin_lock_irqsave(&adapter->cmd_free_q_lock, flags);
64 if (list_empty(&adapter->cmd_free_q)) {
65 mwifiex_dbg(adapter, ERROR,
66 "GET_CMD_NODE: cmd node not available\n");
67 spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
70 cmd_node = list_first_entry(&adapter->cmd_free_q,
71 struct cmd_ctrl_node, list);
72 list_del(&cmd_node->list);
73 spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
79 * This function cleans up a command node.
81 * The function resets the fields including the buffer pointers.
82 * This function does not try to free the buffers. They must be
83 * freed before calling this function.
85 * This function will however call the receive completion callback
86 * in case a response buffer is still available before resetting
90 mwifiex_clean_cmd_node(struct mwifiex_adapter *adapter,
91 struct cmd_ctrl_node *cmd_node)
93 cmd_node->cmd_oid = 0;
94 cmd_node->cmd_flag = 0;
95 cmd_node->data_buf = NULL;
96 cmd_node->wait_q_enabled = false;
98 if (cmd_node->cmd_skb)
99 skb_trim(cmd_node->cmd_skb, 0);
101 if (cmd_node->resp_skb) {
102 adapter->if_ops.cmdrsp_complete(adapter, cmd_node->resp_skb);
103 cmd_node->resp_skb = NULL;
108 * This function returns a command to the command free queue.
110 * The function also calls the completion callback if required, before
111 * cleaning the command node and re-inserting it into the free queue.
114 mwifiex_insert_cmd_to_free_q(struct mwifiex_adapter *adapter,
115 struct cmd_ctrl_node *cmd_node)
122 if (cmd_node->wait_q_enabled)
123 mwifiex_complete_cmd(adapter, cmd_node);
125 mwifiex_clean_cmd_node(adapter, cmd_node);
127 /* Insert node into cmd_free_q */
128 spin_lock_irqsave(&adapter->cmd_free_q_lock, flags);
129 list_add_tail(&cmd_node->list, &adapter->cmd_free_q);
130 spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
133 /* This function reuses a command node. */
134 void mwifiex_recycle_cmd_node(struct mwifiex_adapter *adapter,
135 struct cmd_ctrl_node *cmd_node)
137 struct host_cmd_ds_command *host_cmd = (void *)cmd_node->cmd_skb->data;
139 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
141 atomic_dec(&adapter->cmd_pending);
142 mwifiex_dbg(adapter, CMD,
143 "cmd: FREE_CMD: cmd=%#x, cmd_pending=%d\n",
144 le16_to_cpu(host_cmd->command),
145 atomic_read(&adapter->cmd_pending));
149 * This function sends a host command to the firmware.
151 * The function copies the host command into the driver command
152 * buffer, which will be transferred to the firmware later by the
155 static int mwifiex_cmd_host_cmd(struct mwifiex_private *priv,
156 struct host_cmd_ds_command *cmd,
157 struct mwifiex_ds_misc_cmd *pcmd_ptr)
159 /* Copy the HOST command to command buffer */
160 memcpy(cmd, pcmd_ptr->cmd, pcmd_ptr->len);
161 mwifiex_dbg(priv->adapter, CMD,
162 "cmd: host cmd size = %d\n", pcmd_ptr->len);
167 * This function downloads a command to the firmware.
169 * The function performs sanity tests, sets the command sequence
170 * number and size, converts the header fields to CPU format before
171 * sending. Afterwards, it logs the command ID and action for debugging
172 * and sets up the command timeout timer.
174 static int mwifiex_dnld_cmd_to_fw(struct mwifiex_private *priv,
175 struct cmd_ctrl_node *cmd_node)
178 struct mwifiex_adapter *adapter = priv->adapter;
180 struct host_cmd_ds_command *host_cmd;
186 if (!adapter || !cmd_node)
189 host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
192 if (host_cmd == NULL || host_cmd->size == 0) {
193 mwifiex_dbg(adapter, ERROR,
194 "DNLD_CMD: host_cmd is null\t"
195 "or cmd size is 0, not sending\n");
196 if (cmd_node->wait_q_enabled)
197 adapter->cmd_wait_q.status = -1;
198 mwifiex_recycle_cmd_node(adapter, cmd_node);
202 cmd_code = le16_to_cpu(host_cmd->command);
203 cmd_size = le16_to_cpu(host_cmd->size);
205 if (adapter->hw_status == MWIFIEX_HW_STATUS_RESET &&
206 cmd_code != HostCmd_CMD_FUNC_SHUTDOWN &&
207 cmd_code != HostCmd_CMD_FUNC_INIT) {
208 mwifiex_dbg(adapter, ERROR,
209 "DNLD_CMD: FW in reset state, ignore cmd %#x\n",
211 mwifiex_recycle_cmd_node(adapter, cmd_node);
212 queue_work(adapter->workqueue, &adapter->main_work);
216 /* Set command sequence number */
218 host_cmd->seq_num = cpu_to_le16(HostCmd_SET_SEQ_NO_BSS_INFO
220 cmd_node->priv->bss_num,
221 cmd_node->priv->bss_type));
223 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
224 adapter->curr_cmd = cmd_node;
225 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
227 /* Adjust skb length */
228 if (cmd_node->cmd_skb->len > cmd_size)
230 * cmd_size is less than sizeof(struct host_cmd_ds_command).
231 * Trim off the unused portion.
233 skb_trim(cmd_node->cmd_skb, cmd_size);
234 else if (cmd_node->cmd_skb->len < cmd_size)
236 * cmd_size is larger than sizeof(struct host_cmd_ds_command)
237 * because we have appended custom IE TLV. Increase skb length
240 skb_put(cmd_node->cmd_skb, cmd_size - cmd_node->cmd_skb->len);
242 mwifiex_dbg(adapter, CMD,
243 "cmd: DNLD_CMD: %#x, act %#x, len %d, seqno %#x\n",
245 le16_to_cpu(*(__le16 *)((u8 *)host_cmd + S_DS_GEN)),
246 cmd_size, le16_to_cpu(host_cmd->seq_num));
247 mwifiex_dbg_dump(adapter, CMD_D, "cmd buffer:", host_cmd, cmd_size);
249 if (adapter->iface_type == MWIFIEX_USB) {
250 tmp = cpu_to_le32(MWIFIEX_USB_TYPE_CMD);
251 skb_push(cmd_node->cmd_skb, MWIFIEX_TYPE_LEN);
252 memcpy(cmd_node->cmd_skb->data, &tmp, MWIFIEX_TYPE_LEN);
253 adapter->cmd_sent = true;
254 ret = adapter->if_ops.host_to_card(adapter,
255 MWIFIEX_USB_EP_CMD_EVENT,
256 cmd_node->cmd_skb, NULL);
257 skb_pull(cmd_node->cmd_skb, MWIFIEX_TYPE_LEN);
259 cmd_node->cmd_skb = NULL;
261 skb_push(cmd_node->cmd_skb, INTF_HEADER_LEN);
262 ret = adapter->if_ops.host_to_card(adapter, MWIFIEX_TYPE_CMD,
263 cmd_node->cmd_skb, NULL);
264 skb_pull(cmd_node->cmd_skb, INTF_HEADER_LEN);
268 mwifiex_dbg(adapter, ERROR,
269 "DNLD_CMD: host to card failed\n");
270 if (adapter->iface_type == MWIFIEX_USB)
271 adapter->cmd_sent = false;
272 if (cmd_node->wait_q_enabled)
273 adapter->cmd_wait_q.status = -1;
274 mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd);
276 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
277 adapter->curr_cmd = NULL;
278 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
280 adapter->dbg.num_cmd_host_to_card_failure++;
284 /* Save the last command id and action to debug log */
285 adapter->dbg.last_cmd_index =
286 (adapter->dbg.last_cmd_index + 1) % DBG_CMD_NUM;
287 adapter->dbg.last_cmd_id[adapter->dbg.last_cmd_index] = cmd_code;
288 adapter->dbg.last_cmd_act[adapter->dbg.last_cmd_index] =
289 le16_to_cpu(*(__le16 *) ((u8 *) host_cmd + S_DS_GEN));
291 /* Clear BSS_NO_BITS from HostCmd */
292 cmd_code &= HostCmd_CMD_ID_MASK;
294 /* Setup the timer after transmit command */
295 mod_timer(&adapter->cmd_timer,
296 jiffies + msecs_to_jiffies(MWIFIEX_TIMER_10S));
302 * This function downloads a sleep confirm command to the firmware.
304 * The function performs sanity tests, sets the command sequence
305 * number and size, converts the header fields to CPU format before
308 * No responses are needed for sleep confirm command.
310 static int mwifiex_dnld_sleep_confirm_cmd(struct mwifiex_adapter *adapter)
313 struct mwifiex_private *priv;
314 struct mwifiex_opt_sleep_confirm *sleep_cfm_buf =
315 (struct mwifiex_opt_sleep_confirm *)
316 adapter->sleep_cfm->data;
317 struct sk_buff *sleep_cfm_tmp;
320 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
323 sleep_cfm_buf->seq_num =
324 cpu_to_le16(HostCmd_SET_SEQ_NO_BSS_INFO
325 (adapter->seq_num, priv->bss_num,
328 mwifiex_dbg(adapter, CMD,
329 "cmd: DNLD_CMD: %#x, act %#x, len %d, seqno %#x\n",
330 le16_to_cpu(sleep_cfm_buf->command),
331 le16_to_cpu(sleep_cfm_buf->action),
332 le16_to_cpu(sleep_cfm_buf->size),
333 le16_to_cpu(sleep_cfm_buf->seq_num));
334 mwifiex_dbg_dump(adapter, CMD_D, "SLEEP_CFM buffer: ", sleep_cfm_buf,
335 le16_to_cpu(sleep_cfm_buf->size));
337 if (adapter->iface_type == MWIFIEX_USB) {
339 dev_alloc_skb(sizeof(struct mwifiex_opt_sleep_confirm)
341 skb_put(sleep_cfm_tmp, sizeof(struct mwifiex_opt_sleep_confirm)
343 tmp = cpu_to_le32(MWIFIEX_USB_TYPE_CMD);
344 memcpy(sleep_cfm_tmp->data, &tmp, MWIFIEX_TYPE_LEN);
345 memcpy(sleep_cfm_tmp->data + MWIFIEX_TYPE_LEN,
346 adapter->sleep_cfm->data,
347 sizeof(struct mwifiex_opt_sleep_confirm));
348 ret = adapter->if_ops.host_to_card(adapter,
349 MWIFIEX_USB_EP_CMD_EVENT,
350 sleep_cfm_tmp, NULL);
352 dev_kfree_skb_any(sleep_cfm_tmp);
354 skb_push(adapter->sleep_cfm, INTF_HEADER_LEN);
355 ret = adapter->if_ops.host_to_card(adapter, MWIFIEX_TYPE_CMD,
356 adapter->sleep_cfm, NULL);
357 skb_pull(adapter->sleep_cfm, INTF_HEADER_LEN);
361 mwifiex_dbg(adapter, ERROR, "SLEEP_CFM: failed\n");
362 adapter->dbg.num_cmd_sleep_cfm_host_to_card_failure++;
366 if (!le16_to_cpu(sleep_cfm_buf->resp_ctrl))
367 /* Response is not needed for sleep confirm command */
368 adapter->ps_state = PS_STATE_SLEEP;
370 adapter->ps_state = PS_STATE_SLEEP_CFM;
372 if (!le16_to_cpu(sleep_cfm_buf->resp_ctrl) &&
373 (adapter->is_hs_configured &&
374 !adapter->sleep_period.period)) {
375 adapter->pm_wakeup_card_req = true;
376 mwifiex_hs_activated_event(mwifiex_get_priv
377 (adapter, MWIFIEX_BSS_ROLE_ANY), true);
384 * This function allocates the command buffers and links them to
385 * the command free queue.
387 * The driver uses a pre allocated number of command buffers, which
388 * are created at driver initializations and freed at driver cleanup.
389 * Every command needs to obtain a command buffer from this pool before
390 * it can be issued. The command free queue lists the command buffers
391 * currently free to use, while the command pending queue lists the
392 * command buffers already in use and awaiting handling. Command buffers
393 * are returned to the free queue after use.
395 int mwifiex_alloc_cmd_buffer(struct mwifiex_adapter *adapter)
397 struct cmd_ctrl_node *cmd_array;
400 /* Allocate and initialize struct cmd_ctrl_node */
401 cmd_array = kcalloc(MWIFIEX_NUM_OF_CMD_BUFFER,
402 sizeof(struct cmd_ctrl_node), GFP_KERNEL);
406 adapter->cmd_pool = cmd_array;
408 /* Allocate and initialize command buffers */
409 for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++) {
410 cmd_array[i].skb = dev_alloc_skb(MWIFIEX_SIZE_OF_CMD_BUFFER);
411 if (!cmd_array[i].skb) {
412 mwifiex_dbg(adapter, ERROR,
413 "unable to allocate command buffer\n");
418 for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++)
419 mwifiex_insert_cmd_to_free_q(adapter, &cmd_array[i]);
425 * This function frees the command buffers.
427 * The function calls the completion callback for all the command
428 * buffers that still have response buffers associated with them.
430 int mwifiex_free_cmd_buffer(struct mwifiex_adapter *adapter)
432 struct cmd_ctrl_node *cmd_array;
435 /* Need to check if cmd pool is allocated or not */
436 if (!adapter->cmd_pool) {
437 mwifiex_dbg(adapter, FATAL,
438 "info: FREE_CMD_BUF: cmd_pool is null\n");
442 cmd_array = adapter->cmd_pool;
444 /* Release shared memory buffers */
445 for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++) {
446 if (cmd_array[i].skb) {
447 mwifiex_dbg(adapter, CMD,
448 "cmd: free cmd buffer %d\n", i);
449 dev_kfree_skb_any(cmd_array[i].skb);
451 if (!cmd_array[i].resp_skb)
454 if (adapter->iface_type == MWIFIEX_USB)
455 adapter->if_ops.cmdrsp_complete(adapter,
456 cmd_array[i].resp_skb);
458 dev_kfree_skb_any(cmd_array[i].resp_skb);
460 /* Release struct cmd_ctrl_node */
461 if (adapter->cmd_pool) {
462 mwifiex_dbg(adapter, CMD,
463 "cmd: free cmd pool\n");
464 kfree(adapter->cmd_pool);
465 adapter->cmd_pool = NULL;
472 * This function handles events generated by firmware.
474 * Event body of events received from firmware are not used (though they are
475 * saved), only the event ID is used. Some events are re-invoked by
476 * the driver, with a new event body.
478 * After processing, the function calls the completion callback
481 int mwifiex_process_event(struct mwifiex_adapter *adapter)
484 struct mwifiex_private *priv =
485 mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
486 struct sk_buff *skb = adapter->event_skb;
488 struct mwifiex_rxinfo *rx_info;
490 if ((adapter->event_cause & EVENT_ID_MASK) == EVENT_RADAR_DETECTED) {
491 for (i = 0; i < adapter->priv_num; i++) {
492 priv = adapter->priv[i];
493 if (priv && mwifiex_is_11h_active(priv)) {
494 adapter->event_cause |=
495 ((priv->bss_num & 0xff) << 16) |
496 ((priv->bss_type & 0xff) << 24);
502 eventcause = adapter->event_cause;
504 /* Save the last event to debug log */
505 adapter->dbg.last_event_index =
506 (adapter->dbg.last_event_index + 1) % DBG_CMD_NUM;
507 adapter->dbg.last_event[adapter->dbg.last_event_index] =
510 /* Get BSS number and corresponding priv */
511 priv = mwifiex_get_priv_by_id(adapter, EVENT_GET_BSS_NUM(eventcause),
512 EVENT_GET_BSS_TYPE(eventcause));
514 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
516 /* Clear BSS_NO_BITS from event */
517 eventcause &= EVENT_ID_MASK;
518 adapter->event_cause = eventcause;
521 rx_info = MWIFIEX_SKB_RXCB(skb);
522 memset(rx_info, 0, sizeof(*rx_info));
523 rx_info->bss_num = priv->bss_num;
524 rx_info->bss_type = priv->bss_type;
525 mwifiex_dbg_dump(adapter, EVT_D, "Event Buf:",
526 skb->data, skb->len);
529 mwifiex_dbg(adapter, EVENT, "EVENT: cause: %#x\n", eventcause);
531 if (priv->bss_role == MWIFIEX_BSS_ROLE_UAP)
532 ret = mwifiex_process_uap_event(priv);
534 ret = mwifiex_process_sta_event(priv);
536 adapter->event_cause = 0;
537 adapter->event_skb = NULL;
538 adapter->if_ops.event_complete(adapter, skb);
544 * This function prepares a command and send it to the firmware.
546 * Preparation includes -
547 * - Sanity tests to make sure the card is still present or the FW
549 * - Getting a new command node from the command free queue
550 * - Initializing the command node for default parameters
551 * - Fill up the non-default parameters and buffer pointers
552 * - Add the command to pending queue
554 int mwifiex_send_cmd(struct mwifiex_private *priv, u16 cmd_no,
555 u16 cmd_action, u32 cmd_oid, void *data_buf, bool sync)
558 struct mwifiex_adapter *adapter = priv->adapter;
559 struct cmd_ctrl_node *cmd_node;
560 struct host_cmd_ds_command *cmd_ptr;
563 pr_err("PREP_CMD: adapter is NULL\n");
567 if (adapter->is_suspended) {
568 mwifiex_dbg(adapter, ERROR,
569 "PREP_CMD: device in suspended state\n");
573 if (adapter->hs_enabling && cmd_no != HostCmd_CMD_802_11_HS_CFG_ENH) {
574 mwifiex_dbg(adapter, ERROR,
575 "PREP_CMD: host entering sleep state\n");
579 if (adapter->surprise_removed) {
580 mwifiex_dbg(adapter, ERROR,
581 "PREP_CMD: card is removed\n");
585 if (adapter->is_cmd_timedout) {
586 mwifiex_dbg(adapter, ERROR,
587 "PREP_CMD: FW is in bad state\n");
591 if (adapter->hw_status == MWIFIEX_HW_STATUS_RESET) {
592 if (cmd_no != HostCmd_CMD_FUNC_INIT) {
593 mwifiex_dbg(adapter, ERROR,
594 "PREP_CMD: FW in reset state\n");
598 /* We don't expect commands in manufacturing mode. They are cooked
599 * in application and ready to download buffer is passed to the driver
601 if (adapter->mfg_mode && cmd_no) {
602 dev_dbg(adapter->dev, "Ignoring commands in manufacturing mode\n");
607 /* Get a new command node */
608 cmd_node = mwifiex_get_cmd_node(adapter);
611 mwifiex_dbg(adapter, ERROR,
612 "PREP_CMD: no free cmd node\n");
616 /* Initialize the command node */
617 mwifiex_init_cmd_node(priv, cmd_node, cmd_oid, data_buf, sync);
619 if (!cmd_node->cmd_skb) {
620 mwifiex_dbg(adapter, ERROR,
621 "PREP_CMD: no free cmd buf\n");
625 memset(skb_put(cmd_node->cmd_skb, sizeof(struct host_cmd_ds_command)),
626 0, sizeof(struct host_cmd_ds_command));
628 cmd_ptr = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
629 cmd_ptr->command = cpu_to_le16(cmd_no);
632 /* Prepare command */
635 case HostCmd_CMD_UAP_SYS_CONFIG:
636 case HostCmd_CMD_UAP_BSS_START:
637 case HostCmd_CMD_UAP_BSS_STOP:
638 case HostCmd_CMD_UAP_STA_DEAUTH:
639 case HOST_CMD_APCMD_SYS_RESET:
640 case HOST_CMD_APCMD_STA_LIST:
641 ret = mwifiex_uap_prepare_cmd(priv, cmd_no, cmd_action,
646 ret = mwifiex_sta_prepare_cmd(priv, cmd_no, cmd_action,
652 ret = mwifiex_cmd_host_cmd(priv, cmd_ptr, data_buf);
653 cmd_node->cmd_flag |= CMD_F_HOSTCMD;
656 /* Return error, since the command preparation failed */
658 mwifiex_dbg(adapter, ERROR,
659 "PREP_CMD: cmd %#x preparation failed\n",
661 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
666 if (cmd_no == HostCmd_CMD_802_11_SCAN ||
667 cmd_no == HostCmd_CMD_802_11_SCAN_EXT) {
668 mwifiex_queue_scan_cmd(priv, cmd_node);
670 mwifiex_insert_cmd_to_pending_q(adapter, cmd_node, true);
671 queue_work(adapter->workqueue, &adapter->main_work);
672 if (cmd_node->wait_q_enabled)
673 ret = mwifiex_wait_queue_complete(adapter, cmd_node);
680 * This function queues a command to the command pending queue.
682 * This in effect adds the command to the command list to be executed.
683 * Exit PS command is handled specially, by placing it always to the
684 * front of the command queue.
687 mwifiex_insert_cmd_to_pending_q(struct mwifiex_adapter *adapter,
688 struct cmd_ctrl_node *cmd_node, u32 add_tail)
690 struct host_cmd_ds_command *host_cmd = NULL;
694 host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
696 mwifiex_dbg(adapter, ERROR, "QUEUE_CMD: host_cmd is NULL\n");
700 command = le16_to_cpu(host_cmd->command);
702 /* Exit_PS command needs to be queued in the header always. */
703 if (command == HostCmd_CMD_802_11_PS_MODE_ENH) {
704 struct host_cmd_ds_802_11_ps_mode_enh *pm =
705 &host_cmd->params.psmode_enh;
706 if ((le16_to_cpu(pm->action) == DIS_PS) ||
707 (le16_to_cpu(pm->action) == DIS_AUTO_PS)) {
708 if (adapter->ps_state != PS_STATE_AWAKE)
713 spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
715 list_add_tail(&cmd_node->list, &adapter->cmd_pending_q);
717 list_add(&cmd_node->list, &adapter->cmd_pending_q);
718 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
720 atomic_inc(&adapter->cmd_pending);
721 mwifiex_dbg(adapter, CMD,
722 "cmd: QUEUE_CMD: cmd=%#x, cmd_pending=%d\n",
723 command, atomic_read(&adapter->cmd_pending));
727 * This function executes the next command in command pending queue.
729 * This function will fail if a command is already in processing stage,
730 * otherwise it will dequeue the first command from the command pending
731 * queue and send to the firmware.
733 * If the device is currently in host sleep mode, any commands, except the
734 * host sleep configuration command will de-activate the host sleep. For PS
735 * mode, the function will put the firmware back to sleep if applicable.
737 int mwifiex_exec_next_cmd(struct mwifiex_adapter *adapter)
739 struct mwifiex_private *priv;
740 struct cmd_ctrl_node *cmd_node;
742 struct host_cmd_ds_command *host_cmd;
743 unsigned long cmd_flags;
744 unsigned long cmd_pending_q_flags;
746 /* Check if already in processing */
747 if (adapter->curr_cmd) {
748 mwifiex_dbg(adapter, FATAL,
749 "EXEC_NEXT_CMD: cmd in processing\n");
753 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
754 /* Check if any command is pending */
755 spin_lock_irqsave(&adapter->cmd_pending_q_lock, cmd_pending_q_flags);
756 if (list_empty(&adapter->cmd_pending_q)) {
757 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
758 cmd_pending_q_flags);
759 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
762 cmd_node = list_first_entry(&adapter->cmd_pending_q,
763 struct cmd_ctrl_node, list);
764 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
765 cmd_pending_q_flags);
767 host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
768 priv = cmd_node->priv;
770 if (adapter->ps_state != PS_STATE_AWAKE) {
771 mwifiex_dbg(adapter, ERROR,
772 "%s: cannot send cmd in sleep state,\t"
773 "this should not happen\n", __func__);
774 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
778 spin_lock_irqsave(&adapter->cmd_pending_q_lock, cmd_pending_q_flags);
779 list_del(&cmd_node->list);
780 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
781 cmd_pending_q_flags);
783 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
784 ret = mwifiex_dnld_cmd_to_fw(priv, cmd_node);
785 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
786 /* Any command sent to the firmware when host is in sleep
787 * mode should de-configure host sleep. We should skip the
788 * host sleep configuration command itself though
790 if (priv && (host_cmd->command !=
791 cpu_to_le16(HostCmd_CMD_802_11_HS_CFG_ENH))) {
792 if (adapter->hs_activated) {
793 adapter->is_hs_configured = false;
794 mwifiex_hs_activated_event(priv, false);
802 * This function handles the command response.
804 * After processing, the function cleans the command node and puts
805 * it back to the command free queue.
807 int mwifiex_process_cmdresp(struct mwifiex_adapter *adapter)
809 struct host_cmd_ds_command *resp;
810 struct mwifiex_private *priv =
811 mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
813 uint16_t orig_cmdresp_no;
815 uint16_t cmdresp_result;
818 /* Now we got response from FW, cancel the command timer */
819 del_timer_sync(&adapter->cmd_timer);
821 if (!adapter->curr_cmd || !adapter->curr_cmd->resp_skb) {
822 resp = (struct host_cmd_ds_command *) adapter->upld_buf;
823 mwifiex_dbg(adapter, ERROR,
824 "CMD_RESP: NULL curr_cmd, %#x\n",
825 le16_to_cpu(resp->command));
829 adapter->is_cmd_timedout = 0;
831 resp = (struct host_cmd_ds_command *) adapter->curr_cmd->resp_skb->data;
832 if (adapter->curr_cmd->cmd_flag & CMD_F_HOSTCMD) {
833 /* Copy original response back to response buffer */
834 struct mwifiex_ds_misc_cmd *hostcmd;
835 uint16_t size = le16_to_cpu(resp->size);
836 mwifiex_dbg(adapter, INFO,
837 "info: host cmd resp size = %d\n", size);
838 size = min_t(u16, size, MWIFIEX_SIZE_OF_CMD_BUFFER);
839 if (adapter->curr_cmd->data_buf) {
840 hostcmd = adapter->curr_cmd->data_buf;
842 memcpy(hostcmd->cmd, resp, size);
845 orig_cmdresp_no = le16_to_cpu(resp->command);
847 /* Get BSS number and corresponding priv */
848 priv = mwifiex_get_priv_by_id(adapter,
849 HostCmd_GET_BSS_NO(le16_to_cpu(resp->seq_num)),
850 HostCmd_GET_BSS_TYPE(le16_to_cpu(resp->seq_num)));
852 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
853 /* Clear RET_BIT from HostCmd */
854 resp->command = cpu_to_le16(orig_cmdresp_no & HostCmd_CMD_ID_MASK);
856 cmdresp_no = le16_to_cpu(resp->command);
857 cmdresp_result = le16_to_cpu(resp->result);
859 /* Save the last command response to debug log */
860 adapter->dbg.last_cmd_resp_index =
861 (adapter->dbg.last_cmd_resp_index + 1) % DBG_CMD_NUM;
862 adapter->dbg.last_cmd_resp_id[adapter->dbg.last_cmd_resp_index] =
865 mwifiex_dbg(adapter, CMD,
866 "cmd: CMD_RESP: 0x%x, result %d, len %d, seqno 0x%x\n",
867 orig_cmdresp_no, cmdresp_result,
868 le16_to_cpu(resp->size), le16_to_cpu(resp->seq_num));
869 mwifiex_dbg_dump(adapter, CMD_D, "CMD_RESP buffer:", resp,
870 le16_to_cpu(resp->size));
872 if (!(orig_cmdresp_no & HostCmd_RET_BIT)) {
873 mwifiex_dbg(adapter, ERROR, "CMD_RESP: invalid cmd resp\n");
874 if (adapter->curr_cmd->wait_q_enabled)
875 adapter->cmd_wait_q.status = -1;
877 mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd);
878 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
879 adapter->curr_cmd = NULL;
880 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
884 if (adapter->curr_cmd->cmd_flag & CMD_F_HOSTCMD) {
885 adapter->curr_cmd->cmd_flag &= ~CMD_F_HOSTCMD;
886 if ((cmdresp_result == HostCmd_RESULT_OK) &&
887 (cmdresp_no == HostCmd_CMD_802_11_HS_CFG_ENH))
888 ret = mwifiex_ret_802_11_hs_cfg(priv, resp);
890 /* handle response */
891 ret = mwifiex_process_sta_cmdresp(priv, cmdresp_no, resp);
894 /* Check init command response */
895 if (adapter->hw_status == MWIFIEX_HW_STATUS_INITIALIZING) {
897 mwifiex_dbg(adapter, ERROR,
898 "%s: cmd %#x failed during\t"
899 "initialization\n", __func__, cmdresp_no);
900 mwifiex_init_fw_complete(adapter);
902 } else if (adapter->last_init_cmd == cmdresp_no)
903 adapter->hw_status = MWIFIEX_HW_STATUS_INIT_DONE;
906 if (adapter->curr_cmd) {
907 if (adapter->curr_cmd->wait_q_enabled)
908 adapter->cmd_wait_q.status = ret;
910 mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd);
912 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
913 adapter->curr_cmd = NULL;
914 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
921 * This function handles the timeout of command sending.
923 * It will re-send the same command again.
926 mwifiex_cmd_timeout_func(unsigned long function_context)
928 struct mwifiex_adapter *adapter =
929 (struct mwifiex_adapter *) function_context;
930 struct cmd_ctrl_node *cmd_node;
932 adapter->is_cmd_timedout = 1;
933 if (!adapter->curr_cmd) {
934 mwifiex_dbg(adapter, ERROR,
935 "cmd: empty curr_cmd\n");
938 cmd_node = adapter->curr_cmd;
940 adapter->dbg.timeout_cmd_id =
941 adapter->dbg.last_cmd_id[adapter->dbg.last_cmd_index];
942 adapter->dbg.timeout_cmd_act =
943 adapter->dbg.last_cmd_act[adapter->dbg.last_cmd_index];
944 mwifiex_dbg(adapter, MSG,
945 "%s: Timeout cmd id = %#x, act = %#x\n", __func__,
946 adapter->dbg.timeout_cmd_id,
947 adapter->dbg.timeout_cmd_act);
949 mwifiex_dbg(adapter, MSG,
950 "num_data_h2c_failure = %d\n",
951 adapter->dbg.num_tx_host_to_card_failure);
952 mwifiex_dbg(adapter, MSG,
953 "num_cmd_h2c_failure = %d\n",
954 adapter->dbg.num_cmd_host_to_card_failure);
956 mwifiex_dbg(adapter, MSG,
957 "is_cmd_timedout = %d\n",
958 adapter->is_cmd_timedout);
959 mwifiex_dbg(adapter, MSG,
960 "num_tx_timeout = %d\n",
961 adapter->dbg.num_tx_timeout);
963 mwifiex_dbg(adapter, MSG,
964 "last_cmd_index = %d\n",
965 adapter->dbg.last_cmd_index);
966 mwifiex_dbg(adapter, MSG,
967 "last_cmd_id: %*ph\n",
968 (int)sizeof(adapter->dbg.last_cmd_id),
969 adapter->dbg.last_cmd_id);
970 mwifiex_dbg(adapter, MSG,
971 "last_cmd_act: %*ph\n",
972 (int)sizeof(adapter->dbg.last_cmd_act),
973 adapter->dbg.last_cmd_act);
975 mwifiex_dbg(adapter, MSG,
976 "last_cmd_resp_index = %d\n",
977 adapter->dbg.last_cmd_resp_index);
978 mwifiex_dbg(adapter, MSG,
979 "last_cmd_resp_id: %*ph\n",
980 (int)sizeof(adapter->dbg.last_cmd_resp_id),
981 adapter->dbg.last_cmd_resp_id);
983 mwifiex_dbg(adapter, MSG,
984 "last_event_index = %d\n",
985 adapter->dbg.last_event_index);
986 mwifiex_dbg(adapter, MSG,
987 "last_event: %*ph\n",
988 (int)sizeof(adapter->dbg.last_event),
989 adapter->dbg.last_event);
991 mwifiex_dbg(adapter, MSG,
992 "data_sent=%d cmd_sent=%d\n",
993 adapter->data_sent, adapter->cmd_sent);
995 mwifiex_dbg(adapter, MSG,
996 "ps_mode=%d ps_state=%d\n",
997 adapter->ps_mode, adapter->ps_state);
999 if (cmd_node->wait_q_enabled) {
1000 adapter->cmd_wait_q.status = -ETIMEDOUT;
1001 mwifiex_cancel_pending_ioctl(adapter);
1004 if (adapter->hw_status == MWIFIEX_HW_STATUS_INITIALIZING) {
1005 mwifiex_init_fw_complete(adapter);
1009 if (adapter->if_ops.device_dump)
1010 adapter->if_ops.device_dump(adapter);
1012 if (adapter->if_ops.card_reset)
1013 adapter->if_ops.card_reset(adapter);
1017 mwifiex_cancel_pending_scan_cmd(struct mwifiex_adapter *adapter)
1019 struct cmd_ctrl_node *cmd_node = NULL, *tmp_node;
1020 unsigned long flags;
1022 /* Cancel all pending scan command */
1023 spin_lock_irqsave(&adapter->scan_pending_q_lock, flags);
1024 list_for_each_entry_safe(cmd_node, tmp_node,
1025 &adapter->scan_pending_q, list) {
1026 list_del(&cmd_node->list);
1027 cmd_node->wait_q_enabled = false;
1028 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
1030 spin_unlock_irqrestore(&adapter->scan_pending_q_lock, flags);
1034 * This function cancels all the pending commands.
1036 * The current command, all commands in command pending queue and all scan
1037 * commands in scan pending queue are cancelled. All the completion callbacks
1038 * are called with failure status to ensure cleanup.
1041 mwifiex_cancel_all_pending_cmd(struct mwifiex_adapter *adapter)
1043 struct cmd_ctrl_node *cmd_node = NULL, *tmp_node;
1044 unsigned long flags, cmd_flags;
1046 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
1047 /* Cancel current cmd */
1048 if ((adapter->curr_cmd) && (adapter->curr_cmd->wait_q_enabled)) {
1049 adapter->cmd_wait_q.status = -1;
1050 mwifiex_complete_cmd(adapter, adapter->curr_cmd);
1051 adapter->curr_cmd->wait_q_enabled = false;
1052 /* no recycle probably wait for response */
1054 /* Cancel all pending command */
1055 spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
1056 list_for_each_entry_safe(cmd_node, tmp_node,
1057 &adapter->cmd_pending_q, list) {
1058 list_del(&cmd_node->list);
1059 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
1061 if (cmd_node->wait_q_enabled)
1062 adapter->cmd_wait_q.status = -1;
1063 mwifiex_recycle_cmd_node(adapter, cmd_node);
1064 spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
1066 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
1067 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
1069 mwifiex_cancel_scan(adapter);
1073 * This function cancels all pending commands that matches with
1074 * the given IOCTL request.
1076 * Both the current command buffer and the pending command queue are
1077 * searched for matching IOCTL request. The completion callback of
1078 * the matched command is called with failure status to ensure cleanup.
1079 * In case of scan commands, all pending commands in scan pending queue
1083 mwifiex_cancel_pending_ioctl(struct mwifiex_adapter *adapter)
1085 struct cmd_ctrl_node *cmd_node = NULL;
1086 unsigned long cmd_flags;
1088 if ((adapter->curr_cmd) &&
1089 (adapter->curr_cmd->wait_q_enabled)) {
1090 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
1091 cmd_node = adapter->curr_cmd;
1092 /* setting curr_cmd to NULL is quite dangerous, because
1093 * mwifiex_process_cmdresp checks curr_cmd to be != NULL
1094 * at the beginning then relies on it and dereferences
1096 * this probably works since mwifiex_cmd_timeout_func
1097 * is the only caller of this function and responses
1100 adapter->curr_cmd = NULL;
1101 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
1103 mwifiex_recycle_cmd_node(adapter, cmd_node);
1106 mwifiex_cancel_scan(adapter);
1110 * This function sends the sleep confirm command to firmware, if
1113 * The sleep confirm command cannot be issued if command response,
1114 * data response or event response is awaiting handling, or if we
1115 * are in the middle of sending a command, or expecting a command
1119 mwifiex_check_ps_cond(struct mwifiex_adapter *adapter)
1121 if (!adapter->cmd_sent &&
1122 !adapter->curr_cmd && !IS_CARD_RX_RCVD(adapter))
1123 mwifiex_dnld_sleep_confirm_cmd(adapter);
1125 mwifiex_dbg(adapter, CMD,
1126 "cmd: Delay Sleep Confirm (%s%s%s)\n",
1127 (adapter->cmd_sent) ? "D" : "",
1128 (adapter->curr_cmd) ? "C" : "",
1129 (IS_CARD_RX_RCVD(adapter)) ? "R" : "");
1133 * This function sends a Host Sleep activated event to applications.
1135 * This event is generated by the driver, with a blank event body.
1138 mwifiex_hs_activated_event(struct mwifiex_private *priv, u8 activated)
1141 if (priv->adapter->is_hs_configured) {
1142 priv->adapter->hs_activated = true;
1143 mwifiex_update_rxreor_flags(priv->adapter,
1144 RXREOR_FORCE_NO_DROP);
1145 mwifiex_dbg(priv->adapter, EVENT,
1146 "event: hs_activated\n");
1147 priv->adapter->hs_activate_wait_q_woken = true;
1148 wake_up_interruptible(
1149 &priv->adapter->hs_activate_wait_q);
1151 mwifiex_dbg(priv->adapter, EVENT,
1152 "event: HS not configured\n");
1155 mwifiex_dbg(priv->adapter, EVENT,
1156 "event: hs_deactivated\n");
1157 priv->adapter->hs_activated = false;
1162 * This function handles the command response of a Host Sleep configuration
1165 * Handling includes changing the header fields into CPU format
1166 * and setting the current host sleep activation status in driver.
1168 * In case host sleep status change, the function generates an event to
1169 * notify the applications.
1171 int mwifiex_ret_802_11_hs_cfg(struct mwifiex_private *priv,
1172 struct host_cmd_ds_command *resp)
1174 struct mwifiex_adapter *adapter = priv->adapter;
1175 struct host_cmd_ds_802_11_hs_cfg_enh *phs_cfg =
1176 &resp->params.opt_hs_cfg;
1177 uint32_t conditions = le32_to_cpu(phs_cfg->params.hs_config.conditions);
1179 if (phs_cfg->action == cpu_to_le16(HS_ACTIVATE) &&
1180 adapter->iface_type != MWIFIEX_USB) {
1181 mwifiex_hs_activated_event(priv, true);
1184 mwifiex_dbg(adapter, CMD,
1185 "cmd: CMD_RESP: HS_CFG cmd reply\t"
1186 " result=%#x, conditions=0x%x gpio=0x%x gap=0x%x\n",
1187 resp->result, conditions,
1188 phs_cfg->params.hs_config.gpio,
1189 phs_cfg->params.hs_config.gap);
1191 if (conditions != HS_CFG_CANCEL) {
1192 adapter->is_hs_configured = true;
1193 if (adapter->iface_type == MWIFIEX_USB)
1194 mwifiex_hs_activated_event(priv, true);
1196 adapter->is_hs_configured = false;
1197 if (adapter->hs_activated)
1198 mwifiex_hs_activated_event(priv, false);
1205 * This function wakes up the adapter and generates a Host Sleep
1206 * cancel event on receiving the power up interrupt.
1209 mwifiex_process_hs_config(struct mwifiex_adapter *adapter)
1211 mwifiex_dbg(adapter, INFO,
1212 "info: %s: auto cancelling host sleep\t"
1213 "since there is interrupt from the firmware\n",
1216 adapter->if_ops.wakeup(adapter);
1217 adapter->hs_activated = false;
1218 adapter->is_hs_configured = false;
1219 adapter->is_suspended = false;
1220 mwifiex_hs_activated_event(mwifiex_get_priv(adapter,
1221 MWIFIEX_BSS_ROLE_ANY),
1224 EXPORT_SYMBOL_GPL(mwifiex_process_hs_config);
1227 * This function handles the command response of a sleep confirm command.
1229 * The function sets the card state to SLEEP if the response indicates success.
1232 mwifiex_process_sleep_confirm_resp(struct mwifiex_adapter *adapter,
1233 u8 *pbuf, u32 upld_len)
1235 struct host_cmd_ds_command *cmd = (struct host_cmd_ds_command *) pbuf;
1236 struct mwifiex_private *priv =
1237 mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
1238 uint16_t result = le16_to_cpu(cmd->result);
1239 uint16_t command = le16_to_cpu(cmd->command);
1240 uint16_t seq_num = le16_to_cpu(cmd->seq_num);
1243 mwifiex_dbg(adapter, ERROR,
1244 "%s: cmd size is 0\n", __func__);
1248 mwifiex_dbg(adapter, CMD,
1249 "cmd: CMD_RESP: 0x%x, result %d, len %d, seqno 0x%x\n",
1250 command, result, le16_to_cpu(cmd->size), seq_num);
1252 /* Get BSS number and corresponding priv */
1253 priv = mwifiex_get_priv_by_id(adapter, HostCmd_GET_BSS_NO(seq_num),
1254 HostCmd_GET_BSS_TYPE(seq_num));
1256 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
1258 /* Update sequence number */
1259 seq_num = HostCmd_GET_SEQ_NO(seq_num);
1260 /* Clear RET_BIT from HostCmd */
1261 command &= HostCmd_CMD_ID_MASK;
1263 if (command != HostCmd_CMD_802_11_PS_MODE_ENH) {
1264 mwifiex_dbg(adapter, ERROR,
1265 "%s: rcvd unexpected resp for cmd %#x, result = %x\n",
1266 __func__, command, result);
1271 mwifiex_dbg(adapter, ERROR,
1272 "%s: sleep confirm cmd failed\n",
1274 adapter->pm_wakeup_card_req = false;
1275 adapter->ps_state = PS_STATE_AWAKE;
1278 adapter->pm_wakeup_card_req = true;
1279 if (adapter->is_hs_configured)
1280 mwifiex_hs_activated_event(mwifiex_get_priv
1281 (adapter, MWIFIEX_BSS_ROLE_ANY),
1283 adapter->ps_state = PS_STATE_SLEEP;
1284 cmd->command = cpu_to_le16(command);
1285 cmd->seq_num = cpu_to_le16(seq_num);
1287 EXPORT_SYMBOL_GPL(mwifiex_process_sleep_confirm_resp);
1290 * This function prepares an enhanced power mode command.
1292 * This function can be used to disable power save or to configure
1293 * power save with auto PS or STA PS or auto deep sleep.
1295 * Preparation includes -
1296 * - Setting command ID, action and proper size
1297 * - Setting Power Save bitmap, PS parameters TLV, PS mode TLV,
1298 * auto deep sleep TLV (as required)
1299 * - Ensuring correct endian-ness
1301 int mwifiex_cmd_enh_power_mode(struct mwifiex_private *priv,
1302 struct host_cmd_ds_command *cmd,
1303 u16 cmd_action, uint16_t ps_bitmap,
1304 struct mwifiex_ds_auto_ds *auto_ds)
1306 struct host_cmd_ds_802_11_ps_mode_enh *psmode_enh =
1307 &cmd->params.psmode_enh;
1311 cmd->command = cpu_to_le16(HostCmd_CMD_802_11_PS_MODE_ENH);
1312 if (cmd_action == DIS_AUTO_PS) {
1313 psmode_enh->action = cpu_to_le16(DIS_AUTO_PS);
1314 psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1315 cmd->size = cpu_to_le16(S_DS_GEN + sizeof(psmode_enh->action) +
1316 sizeof(psmode_enh->params.ps_bitmap));
1317 } else if (cmd_action == GET_PS) {
1318 psmode_enh->action = cpu_to_le16(GET_PS);
1319 psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1320 cmd->size = cpu_to_le16(S_DS_GEN + sizeof(psmode_enh->action) +
1321 sizeof(psmode_enh->params.ps_bitmap));
1322 } else if (cmd_action == EN_AUTO_PS) {
1323 psmode_enh->action = cpu_to_le16(EN_AUTO_PS);
1324 psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1325 cmd_size = S_DS_GEN + sizeof(psmode_enh->action) +
1326 sizeof(psmode_enh->params.ps_bitmap);
1327 tlv = (u8 *) cmd + cmd_size;
1328 if (ps_bitmap & BITMAP_STA_PS) {
1329 struct mwifiex_adapter *adapter = priv->adapter;
1330 struct mwifiex_ie_types_ps_param *ps_tlv =
1331 (struct mwifiex_ie_types_ps_param *) tlv;
1332 struct mwifiex_ps_param *ps_mode = &ps_tlv->param;
1333 ps_tlv->header.type = cpu_to_le16(TLV_TYPE_PS_PARAM);
1334 ps_tlv->header.len = cpu_to_le16(sizeof(*ps_tlv) -
1335 sizeof(struct mwifiex_ie_types_header));
1336 cmd_size += sizeof(*ps_tlv);
1337 tlv += sizeof(*ps_tlv);
1338 mwifiex_dbg(priv->adapter, CMD,
1339 "cmd: PS Command: Enter PS\n");
1340 ps_mode->null_pkt_interval =
1341 cpu_to_le16(adapter->null_pkt_interval);
1342 ps_mode->multiple_dtims =
1343 cpu_to_le16(adapter->multiple_dtim);
1344 ps_mode->bcn_miss_timeout =
1345 cpu_to_le16(adapter->bcn_miss_time_out);
1346 ps_mode->local_listen_interval =
1347 cpu_to_le16(adapter->local_listen_interval);
1348 ps_mode->adhoc_wake_period =
1349 cpu_to_le16(adapter->adhoc_awake_period);
1350 ps_mode->delay_to_ps =
1351 cpu_to_le16(adapter->delay_to_ps);
1352 ps_mode->mode = cpu_to_le16(adapter->enhanced_ps_mode);
1355 if (ps_bitmap & BITMAP_AUTO_DS) {
1356 struct mwifiex_ie_types_auto_ds_param *auto_ds_tlv =
1357 (struct mwifiex_ie_types_auto_ds_param *) tlv;
1360 auto_ds_tlv->header.type =
1361 cpu_to_le16(TLV_TYPE_AUTO_DS_PARAM);
1362 auto_ds_tlv->header.len =
1363 cpu_to_le16(sizeof(*auto_ds_tlv) -
1364 sizeof(struct mwifiex_ie_types_header));
1365 cmd_size += sizeof(*auto_ds_tlv);
1366 tlv += sizeof(*auto_ds_tlv);
1368 idletime = auto_ds->idle_time;
1369 mwifiex_dbg(priv->adapter, CMD,
1370 "cmd: PS Command: Enter Auto Deep Sleep\n");
1371 auto_ds_tlv->deep_sleep_timeout = cpu_to_le16(idletime);
1373 cmd->size = cpu_to_le16(cmd_size);
1379 * This function handles the command response of an enhanced power mode
1382 * Handling includes changing the header fields into CPU format
1383 * and setting the current enhanced power mode in driver.
1385 int mwifiex_ret_enh_power_mode(struct mwifiex_private *priv,
1386 struct host_cmd_ds_command *resp,
1387 struct mwifiex_ds_pm_cfg *pm_cfg)
1389 struct mwifiex_adapter *adapter = priv->adapter;
1390 struct host_cmd_ds_802_11_ps_mode_enh *ps_mode =
1391 &resp->params.psmode_enh;
1392 uint16_t action = le16_to_cpu(ps_mode->action);
1393 uint16_t ps_bitmap = le16_to_cpu(ps_mode->params.ps_bitmap);
1394 uint16_t auto_ps_bitmap =
1395 le16_to_cpu(ps_mode->params.ps_bitmap);
1397 mwifiex_dbg(adapter, INFO,
1398 "info: %s: PS_MODE cmd reply result=%#x action=%#X\n",
1399 __func__, resp->result, action);
1400 if (action == EN_AUTO_PS) {
1401 if (auto_ps_bitmap & BITMAP_AUTO_DS) {
1402 mwifiex_dbg(adapter, CMD,
1403 "cmd: Enabled auto deep sleep\n");
1404 priv->adapter->is_deep_sleep = true;
1406 if (auto_ps_bitmap & BITMAP_STA_PS) {
1407 mwifiex_dbg(adapter, CMD,
1408 "cmd: Enabled STA power save\n");
1409 if (adapter->sleep_period.period)
1410 mwifiex_dbg(adapter, CMD,
1411 "cmd: set to uapsd/pps mode\n");
1413 } else if (action == DIS_AUTO_PS) {
1414 if (ps_bitmap & BITMAP_AUTO_DS) {
1415 priv->adapter->is_deep_sleep = false;
1416 mwifiex_dbg(adapter, CMD,
1417 "cmd: Disabled auto deep sleep\n");
1419 if (ps_bitmap & BITMAP_STA_PS) {
1420 mwifiex_dbg(adapter, CMD,
1421 "cmd: Disabled STA power save\n");
1422 if (adapter->sleep_period.period) {
1423 adapter->delay_null_pkt = false;
1424 adapter->tx_lock_flag = false;
1425 adapter->pps_uapsd_mode = false;
1428 } else if (action == GET_PS) {
1429 if (ps_bitmap & BITMAP_STA_PS)
1430 adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_PSP;
1432 adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_CAM;
1434 mwifiex_dbg(adapter, CMD,
1435 "cmd: ps_bitmap=%#x\n", ps_bitmap);
1438 /* This section is for get power save mode */
1439 if (ps_bitmap & BITMAP_STA_PS)
1440 pm_cfg->param.ps_mode = 1;
1442 pm_cfg->param.ps_mode = 0;
1449 * This function prepares command to get hardware specifications.
1451 * Preparation includes -
1452 * - Setting command ID, action and proper size
1453 * - Setting permanent address parameter
1454 * - Ensuring correct endian-ness
1456 int mwifiex_cmd_get_hw_spec(struct mwifiex_private *priv,
1457 struct host_cmd_ds_command *cmd)
1459 struct host_cmd_ds_get_hw_spec *hw_spec = &cmd->params.hw_spec;
1461 cmd->command = cpu_to_le16(HostCmd_CMD_GET_HW_SPEC);
1463 cpu_to_le16(sizeof(struct host_cmd_ds_get_hw_spec) + S_DS_GEN);
1464 memcpy(hw_spec->permanent_addr, priv->curr_addr, ETH_ALEN);
1470 * This function handles the command response of get hardware
1473 * Handling includes changing the header fields into CPU format
1474 * and saving/updating the following parameters in driver -
1475 * - Firmware capability information
1476 * - Firmware band settings
1477 * - Ad-hoc start band and channel
1478 * - Ad-hoc 11n activation status
1479 * - Firmware release number
1480 * - Number of antennas
1481 * - Hardware address
1482 * - Hardware interface version
1483 * - Firmware version
1485 * - 11n capabilities
1486 * - MCS support fields
1489 int mwifiex_ret_get_hw_spec(struct mwifiex_private *priv,
1490 struct host_cmd_ds_command *resp)
1492 struct host_cmd_ds_get_hw_spec *hw_spec = &resp->params.hw_spec;
1493 struct mwifiex_adapter *adapter = priv->adapter;
1494 struct mwifiex_ie_types_header *tlv;
1495 struct hw_spec_api_rev *api_rev;
1496 u16 resp_size, api_id;
1497 int i, left_len, parsed_len = 0;
1499 adapter->fw_cap_info = le32_to_cpu(hw_spec->fw_cap_info);
1501 if (IS_SUPPORT_MULTI_BANDS(adapter))
1502 adapter->fw_bands = (u8) GET_FW_DEFAULT_BANDS(adapter);
1504 adapter->fw_bands = BAND_B;
1506 adapter->config_bands = adapter->fw_bands;
1508 if (adapter->fw_bands & BAND_A) {
1509 if (adapter->fw_bands & BAND_GN) {
1510 adapter->config_bands |= BAND_AN;
1511 adapter->fw_bands |= BAND_AN;
1513 if (adapter->fw_bands & BAND_AN) {
1514 adapter->adhoc_start_band = BAND_A | BAND_AN;
1515 adapter->adhoc_11n_enabled = true;
1517 adapter->adhoc_start_band = BAND_A;
1519 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL_A;
1520 } else if (adapter->fw_bands & BAND_GN) {
1521 adapter->adhoc_start_band = BAND_G | BAND_B | BAND_GN;
1522 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1523 adapter->adhoc_11n_enabled = true;
1524 } else if (adapter->fw_bands & BAND_G) {
1525 adapter->adhoc_start_band = BAND_G | BAND_B;
1526 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1527 } else if (adapter->fw_bands & BAND_B) {
1528 adapter->adhoc_start_band = BAND_B;
1529 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1532 adapter->fw_release_number = le32_to_cpu(hw_spec->fw_release_number);
1533 adapter->fw_api_ver = (adapter->fw_release_number >> 16) & 0xff;
1534 adapter->number_of_antenna = le16_to_cpu(hw_spec->number_of_antenna);
1536 if (le32_to_cpu(hw_spec->dot_11ac_dev_cap)) {
1537 adapter->is_hw_11ac_capable = true;
1540 adapter->hw_dot_11ac_dev_cap =
1541 le32_to_cpu(hw_spec->dot_11ac_dev_cap);
1542 adapter->usr_dot_11ac_dev_cap_bg = adapter->hw_dot_11ac_dev_cap
1543 & ~MWIFIEX_DEF_11AC_CAP_BF_RESET_MASK;
1544 adapter->usr_dot_11ac_dev_cap_a = adapter->hw_dot_11ac_dev_cap
1545 & ~MWIFIEX_DEF_11AC_CAP_BF_RESET_MASK;
1548 adapter->hw_dot_11ac_mcs_support =
1549 le32_to_cpu(hw_spec->dot_11ac_mcs_support);
1550 adapter->usr_dot_11ac_mcs_support =
1551 adapter->hw_dot_11ac_mcs_support;
1553 adapter->is_hw_11ac_capable = false;
1556 resp_size = le16_to_cpu(resp->size) - S_DS_GEN;
1557 if (resp_size > sizeof(struct host_cmd_ds_get_hw_spec)) {
1558 /* we have variable HW SPEC information */
1559 left_len = resp_size - sizeof(struct host_cmd_ds_get_hw_spec);
1560 while (left_len > sizeof(struct mwifiex_ie_types_header)) {
1561 tlv = (void *)&hw_spec->tlvs + parsed_len;
1562 switch (le16_to_cpu(tlv->type)) {
1563 case TLV_TYPE_API_REV:
1564 api_rev = (struct hw_spec_api_rev *)tlv;
1565 api_id = le16_to_cpu(api_rev->api_id);
1567 case KEY_API_VER_ID:
1568 adapter->key_api_major_ver =
1570 adapter->key_api_minor_ver =
1572 mwifiex_dbg(adapter, INFO,
1574 adapter->key_api_major_ver,
1575 adapter->key_api_minor_ver);
1578 adapter->fw_api_ver =
1580 mwifiex_dbg(adapter, INFO,
1581 "Firmware api version %d\n",
1582 adapter->fw_api_ver);
1585 mwifiex_dbg(adapter, FATAL,
1586 "Unknown api_id: %d\n",
1592 mwifiex_dbg(adapter, FATAL,
1593 "Unknown GET_HW_SPEC TLV type: %#x\n",
1594 le16_to_cpu(tlv->type));
1597 parsed_len += le16_to_cpu(tlv->len) +
1598 sizeof(struct mwifiex_ie_types_header);
1599 left_len -= le16_to_cpu(tlv->len) +
1600 sizeof(struct mwifiex_ie_types_header);
1604 mwifiex_dbg(adapter, INFO,
1605 "info: GET_HW_SPEC: fw_release_number- %#x\n",
1606 adapter->fw_release_number);
1607 mwifiex_dbg(adapter, INFO,
1608 "info: GET_HW_SPEC: permanent addr: %pM\n",
1609 hw_spec->permanent_addr);
1610 mwifiex_dbg(adapter, INFO,
1611 "info: GET_HW_SPEC: hw_if_version=%#x version=%#x\n",
1612 le16_to_cpu(hw_spec->hw_if_version),
1613 le16_to_cpu(hw_spec->version));
1615 ether_addr_copy(priv->adapter->perm_addr, hw_spec->permanent_addr);
1616 adapter->region_code = le16_to_cpu(hw_spec->region_code);
1618 for (i = 0; i < MWIFIEX_MAX_REGION_CODE; i++)
1619 /* Use the region code to search for the index */
1620 if (adapter->region_code == region_code_index[i])
1623 /* If it's unidentified region code, use the default (world) */
1624 if (i >= MWIFIEX_MAX_REGION_CODE) {
1625 adapter->region_code = 0x00;
1626 mwifiex_dbg(adapter, WARN,
1627 "cmd: unknown region code, use default (USA)\n");
1630 adapter->hw_dot_11n_dev_cap = le32_to_cpu(hw_spec->dot_11n_dev_cap);
1631 adapter->hw_dev_mcs_support = hw_spec->dev_mcs_support;
1632 adapter->user_dev_mcs_support = adapter->hw_dev_mcs_support;
1634 if (adapter->if_ops.update_mp_end_port)
1635 adapter->if_ops.update_mp_end_port(adapter,
1636 le16_to_cpu(hw_spec->mp_end_port));
1638 if (adapter->fw_api_ver == MWIFIEX_FW_V15)
1639 adapter->scan_chan_gap_enabled = true;
1644 /* This function handles the command response of hs wakeup reason
1647 int mwifiex_ret_wakeup_reason(struct mwifiex_private *priv,
1648 struct host_cmd_ds_command *resp,
1649 struct host_cmd_ds_wakeup_reason *wakeup_reason)
1651 wakeup_reason->wakeup_reason =
1652 resp->params.hs_wakeup_reason.wakeup_reason;