drivers/staging/vt6656/usbpipe.c

   1 // SPDX-License-Identifier: GPL-2.0+
   2 /*
   3  * Copyright (c) 1996, 2003 VIA Networking Technologies, Inc.
   4  * All rights reserved.
   5  *
   6  * File: usbpipe.c
   7  *
   8  * Purpose: Handle USB control endpoint
   9  *
  10  * Author: Warren Hsu
  11  *
  12  * Date: Mar. 29, 2005
  13  *
  14  * Functions:
  15  *      vnt_control_out - Write variable length bytes to MEM/BB/MAC/EEPROM
  16  *      vnt_control_in - Read variable length bytes from MEM/BB/MAC/EEPROM
  17  *      vnt_control_out_u8 - Write one byte to MEM/BB/MAC/EEPROM
  18  *      vnt_control_in_u8 - Read one byte from MEM/BB/MAC/EEPROM
  19  *
  20  * Revision History:
  21  *      04-05-2004 Jerry Chen: Initial release
  22  *      11-24-2004 Warren Hsu: Add ControlvWriteByte,ControlvReadByte,
  23  *                             ControlvMaskByte
  24  *
  25  */
  26
  27 #include "rxtx.h"
  28 #include "desc.h"
  29 #include "device.h"
  30 #include "usbpipe.h"
  31 #include "mac.h"
  32 #include "rf.h"
  33
  34 #define USB_CTL_WAIT    500 /* ms */
  35
  36 int vnt_control_out(struct vnt_private *priv, u8 request, u16 value,
  37                     u16 index, u16 length, const u8 *buffer)
  38 {
  39         int ret = 0;
  40         u8 *usb_buffer;
  41
  42         if (test_bit(DEVICE_FLAGS_DISCONNECTED, &priv->flags)) {
  43                 ret = -EINVAL;
  44                 goto end;
  45         }
  46
  47         mutex_lock(&priv->usb_lock);
  48
  49         usb_buffer = kmemdup(buffer, length, GFP_KERNEL);
  50         if (!usb_buffer) {
  51                 ret = -ENOMEM;
  52                 goto end_unlock;
  53         }
  54
  55         ret = usb_control_msg(priv->usb,
  56                               usb_sndctrlpipe(priv->usb, 0),
  57                               request, 0x40, value,
  58                               index, usb_buffer, length, USB_CTL_WAIT);
  59
  60         kfree(usb_buffer);
  61
  62         if (ret == (int)length)
  63                 ret = 0;
  64         else
  65                 ret = -EIO;
  66
  67 end_unlock:
  68         mutex_unlock(&priv->usb_lock);
  69 end:
  70         return ret;
  71 }
  72
  73 int vnt_control_out_u8(struct vnt_private *priv, u8 reg, u8 reg_off, u8 data)
  74 {
  75         return vnt_control_out(priv, MESSAGE_TYPE_WRITE,
  76                                reg_off, reg, sizeof(u8), &data);
  77 }
  78
  79 int vnt_control_out_blocks(struct vnt_private *priv,
  80                            u16 block, u8 reg, u16 length, u8 *data)
  81 {
  82         int ret = 0, i;
  83
  84         for (i = 0; i < length; i += block) {
  85                 u16 len = min_t(int, length - i, block);
  86
  87                 ret = vnt_control_out(priv, MESSAGE_TYPE_WRITE,
  88                                       i, reg, len, data + i);
  89                 if (ret)
  90                         goto end;
  91         }
  92 end:
  93         return ret;
  94 }
  95
  96 int vnt_control_in(struct vnt_private *priv, u8 request, u16 value,
  97                    u16 index, u16 length, u8 *buffer)
  98 {
  99         int ret = 0;
 100         u8 *usb_buffer;
 101
 102         if (test_bit(DEVICE_FLAGS_DISCONNECTED, &priv->flags)) {
 103                 ret = -EINVAL;
 104                 goto end;
 105         }
 106
 107         mutex_lock(&priv->usb_lock);
 108
 109         usb_buffer = kmalloc(length, GFP_KERNEL);
 110         if (!usb_buffer) {
 111                 ret = -ENOMEM;
 112                 goto end_unlock;
 113         }
 114
 115         ret = usb_control_msg(priv->usb,
 116                               usb_rcvctrlpipe(priv->usb, 0),
 117                               request, 0xc0, value,
 118                               index, usb_buffer, length, USB_CTL_WAIT);
 119
 120         if (ret == length)
 121                 memcpy(buffer, usb_buffer, length);
 122
 123         kfree(usb_buffer);
 124
 125         if (ret == (int)length)
 126                 ret = 0;
 127         else
 128                 ret = -EIO;
 129
 130 end_unlock:
 131         mutex_unlock(&priv->usb_lock);
 132 end:
 133         return ret;
 134 }
 135
 136 int vnt_control_in_u8(struct vnt_private *priv, u8 reg, u8 reg_off, u8 *data)
 137 {
 138         return vnt_control_in(priv, MESSAGE_TYPE_READ,
 139                               reg_off, reg, sizeof(u8), data);
 140 }
 141
 142 static int vnt_int_report_rate(struct vnt_private *priv, u8 pkt_no, u8 tsr)
 143 {
 144         struct vnt_usb_send_context *context;
 145         struct ieee80211_tx_info *info;
 146         u8 tx_retry = (tsr & 0xf0) >> 4;
 147         s8 idx;
 148
 149         if (pkt_no >= priv->num_tx_context)
 150                 return -EINVAL;
 151
 152         context = priv->tx_context[pkt_no];
 153
 154         if (!context->skb)
 155                 return -EINVAL;
 156
 157         info = IEEE80211_SKB_CB(context->skb);
 158         idx = info->control.rates[0].idx;
 159
 160         ieee80211_tx_info_clear_status(info);
 161
 162         info->status.rates[0].count = tx_retry;
 163
 164         if (!(tsr & TSR_TMO)) {
 165                 info->status.rates[0].idx = idx;
 166
 167                 if (!(info->flags & IEEE80211_TX_CTL_NO_ACK))
 168                         info->flags |= IEEE80211_TX_STAT_ACK;
 169         }
 170
 171         ieee80211_tx_status_irqsafe(priv->hw, context->skb);
 172
 173         context->in_use = false;
 174
 175         return 0;
 176 }
 177
 178 static void vnt_int_process_data(struct vnt_private *priv)
 179 {
 180         struct vnt_interrupt_data *int_data;
 181         struct ieee80211_low_level_stats *low_stats = &priv->low_stats;
 182
 183         dev_dbg(&priv->usb->dev, "---->s_nsInterruptProcessData\n");
 184
 185         int_data = (struct vnt_interrupt_data *)priv->int_buf.data_buf;
 186
 187         if (int_data->tsr0 & TSR_VALID)
 188                 vnt_int_report_rate(priv, int_data->pkt0, int_data->tsr0);
 189
 190         if (int_data->tsr1 & TSR_VALID)
 191                 vnt_int_report_rate(priv, int_data->pkt1, int_data->tsr1);
 192
 193         if (int_data->tsr2 & TSR_VALID)
 194                 vnt_int_report_rate(priv, int_data->pkt2, int_data->tsr2);
 195
 196         if (int_data->tsr3 & TSR_VALID)
 197                 vnt_int_report_rate(priv, int_data->pkt3, int_data->tsr3);
 198
 199         if (int_data->isr0 != 0) {
 200                 if (int_data->isr0 & ISR_BNTX &&
 201                     priv->op_mode == NL80211_IFTYPE_AP)
 202                         vnt_schedule_command(priv, WLAN_CMD_BECON_SEND);
 203
 204                 if (int_data->isr0 & ISR_TBTT &&
 205                     priv->hw->conf.flags & IEEE80211_CONF_PS) {
 206                         if (!priv->wake_up_count)
 207                                 priv->wake_up_count =
 208                                         priv->hw->conf.listen_interval;
 209
 210                         --priv->wake_up_count;
 211
 212                         /* Turn on wake up to listen next beacon */
 213                         if (priv->wake_up_count == 1)
 214                                 vnt_schedule_command(priv,
 215                                                      WLAN_CMD_TBTT_WAKEUP);
 216                 }
 217                 priv->current_tsf = le64_to_cpu(int_data->tsf);
 218
 219                 low_stats->dot11RTSSuccessCount += int_data->rts_success;
 220                 low_stats->dot11RTSFailureCount += int_data->rts_fail;
 221                 low_stats->dot11ACKFailureCount += int_data->ack_fail;
 222                 low_stats->dot11FCSErrorCount += int_data->fcs_err;
 223         }
 224 }
 225
 226 static void vnt_start_interrupt_urb_complete(struct urb *urb)
 227 {
 228         struct vnt_private *priv = urb->context;
 229         int status = urb->status;
 230
 231         switch (status) {
 232         case 0:
 233         case -ETIMEDOUT:
 234                 break;
 235         case -ECONNRESET:
 236         case -ENOENT:
 237         case -ESHUTDOWN:
 238                 return;
 239         default:
 240                 break;
 241         }
 242
 243         if (status)
 244                 dev_dbg(&priv->usb->dev, "%s status = %d\n", __func__, status);
 245         else
 246                 vnt_int_process_data(priv);
 247
 248         status = usb_submit_urb(priv->interrupt_urb, GFP_ATOMIC);
 249         if (status)
 250                 dev_dbg(&priv->usb->dev, "Submit int URB failed %d\n", status);
 251 }
 252
 253 int vnt_start_interrupt_urb(struct vnt_private *priv)
 254 {
 255         int ret = 0;
 256
 257         dev_dbg(&priv->usb->dev, "---->Interrupt Polling Thread\n");
 258
 259         usb_fill_int_urb(priv->interrupt_urb,
 260                          priv->usb,
 261                          usb_rcvintpipe(priv->usb, 1),
 262                          priv->int_buf.data_buf,
 263                          MAX_INTERRUPT_SIZE,
 264                          vnt_start_interrupt_urb_complete,
 265                          priv,
 266                          priv->int_interval);
 267
 268         ret = usb_submit_urb(priv->interrupt_urb, GFP_ATOMIC);
 269         if (ret)
 270                 dev_dbg(&priv->usb->dev, "Submit int URB failed %d\n", ret);
 271
 272         return ret;
 273 }
 274
 275 static int vnt_rx_data(struct vnt_private *priv, struct vnt_rcb *ptr_rcb,
 276                        unsigned long bytes_received)
 277 {
 278         struct ieee80211_hw *hw = priv->hw;
 279         struct ieee80211_supported_band *sband;
 280         struct sk_buff *skb;
 281         struct ieee80211_rx_status *rx_status;
 282         struct vnt_rx_header *head;
 283         struct vnt_rx_tail *tail;
 284         u32 frame_size;
 285         int ii;
 286         u16 rx_bitrate, pay_load_with_padding;
 287         u8 rate_idx = 0;
 288         long rx_dbm;
 289
 290         skb = ptr_rcb->skb;
 291         rx_status = IEEE80211_SKB_RXCB(skb);
 292
 293         /* [31:16]RcvByteCount ( not include 4-byte Status ) */
 294         head = (struct vnt_rx_header *)skb->data;
 295         frame_size = head->wbk_status >> 16;
 296         frame_size += 4;
 297
 298         if (bytes_received != frame_size) {
 299                 dev_dbg(&priv->usb->dev, "------- WRONG Length 1\n");
 300                 return false;
 301         }
 302
 303         if ((bytes_received > 2372) || (bytes_received <= 40)) {
 304                 /* Frame Size error drop this packet.*/
 305                 dev_dbg(&priv->usb->dev, "------ WRONG Length 2\n");
 306                 return false;
 307         }
 308
 309         /* real Frame Size = USBframe_size -4WbkStatus - 4RxStatus */
 310         /* -8TSF - 4RSR - 4SQ3 - ?Padding */
 311
 312         /* if SQ3 the range is 24~27, if no SQ3 the range is 20~23 */
 313
 314         /*Fix hardware bug => PLCP_Length error */
 315         if (((bytes_received - head->pay_load_len) > 27) ||
 316             ((bytes_received - head->pay_load_len) < 24) ||
 317             (bytes_received < head->pay_load_len)) {
 318                 dev_dbg(&priv->usb->dev, "Wrong PLCP Length %x\n",
 319                         head->pay_load_len);
 320                 return false;
 321         }
 322
 323         sband = hw->wiphy->bands[hw->conf.chandef.chan->band];
 324         rx_bitrate = head->rx_rate * 5; /* rx_rate * 5 */
 325
 326         for (ii = 0; ii < sband->n_bitrates; ii++) {
 327                 if (sband->bitrates[ii].bitrate == rx_bitrate) {
 328                         rate_idx = ii;
 329                                 break;
 330                 }
 331         }
 332
 333         if (ii == sband->n_bitrates) {
 334                 dev_dbg(&priv->usb->dev, "Wrong Rx Bit Rate %d\n", rx_bitrate);
 335                 return false;
 336         }
 337
 338         pay_load_with_padding = ((head->pay_load_len / 4) +
 339                 ((head->pay_load_len % 4) ? 1 : 0)) * 4;
 340
 341         tail = (struct vnt_rx_tail *)(skb->data +
 342                                       sizeof(*head) + pay_load_with_padding);
 343         priv->tsf_time = le64_to_cpu(tail->tsf_time);
 344
 345         if (tail->rsr & (RSR_IVLDTYP | RSR_IVLDLEN))
 346                 return false;
 347
 348         vnt_rf_rssi_to_dbm(priv, tail->rssi, &rx_dbm);
 349
 350         priv->bb_pre_ed_rssi = (u8)-rx_dbm + 1;
 351         priv->current_rssi = priv->bb_pre_ed_rssi;
 352
 353         skb_pull(skb, sizeof(*head));
 354         skb_trim(skb, head->pay_load_len);
 355
 356         rx_status->mactime = priv->tsf_time;
 357         rx_status->band = hw->conf.chandef.chan->band;
 358         rx_status->signal = rx_dbm;
 359         rx_status->flag = 0;
 360         rx_status->freq = hw->conf.chandef.chan->center_freq;
 361
 362         if (!(tail->rsr & RSR_CRCOK))
 363                 rx_status->flag |= RX_FLAG_FAILED_FCS_CRC;
 364
 365         rx_status->rate_idx = rate_idx;
 366
 367         if (tail->new_rsr & NEWRSR_DECRYPTOK)
 368                 rx_status->flag |= RX_FLAG_DECRYPTED;
 369
 370         ieee80211_rx_irqsafe(priv->hw, skb);
 371
 372         return true;
 373 }
 374
 375 static void vnt_submit_rx_urb_complete(struct urb *urb)
 376 {
 377         struct vnt_rcb *rcb = urb->context;
 378         struct vnt_private *priv = rcb->priv;
 379
 380         switch (urb->status) {
 381         case 0:
 382                 break;
 383         case -ECONNRESET:
 384         case -ENOENT:
 385         case -ESHUTDOWN:
 386                 return;
 387         case -ETIMEDOUT:
 388         default:
 389                 dev_dbg(&priv->usb->dev, "BULK In failed %d\n", urb->status);
 390                 break;
 391         }
 392
 393         if (urb->actual_length) {
 394                 if (vnt_rx_data(priv, rcb, urb->actual_length)) {
 395                         rcb->skb = dev_alloc_skb(priv->rx_buf_sz);
 396                         if (!rcb->skb)
 397                                 return;
 398                 } else {
 399                         skb_push(rcb->skb, skb_headroom(rcb->skb));
 400                         skb_trim(rcb->skb, 0);
 401                 }
 402
 403                 urb->transfer_buffer = skb_put(rcb->skb,
 404                                                skb_tailroom(rcb->skb));
 405         }
 406
 407         if (usb_submit_urb(urb, GFP_ATOMIC))
 408                 dev_dbg(&priv->usb->dev, "Failed to re submit rx skb\n");
 409 }
 410
 411 int vnt_submit_rx_urb(struct vnt_private *priv, struct vnt_rcb *rcb)
 412 {
 413         int ret = 0;
 414         struct urb *urb = rcb->urb;
 415
 416         if (!rcb->skb) {
 417                 dev_dbg(&priv->usb->dev, "rcb->skb is null\n");
 418                 ret = -EINVAL;
 419                 goto end;
 420         }
 421
 422         usb_fill_bulk_urb(urb,
 423                           priv->usb,
 424                           usb_rcvbulkpipe(priv->usb, 2),
 425                           skb_put(rcb->skb, skb_tailroom(rcb->skb)),
 426                           MAX_TOTAL_SIZE_WITH_ALL_HEADERS,
 427                           vnt_submit_rx_urb_complete,
 428                           rcb);
 429
 430         ret = usb_submit_urb(urb, GFP_ATOMIC);
 431         if (ret)
 432                 dev_dbg(&priv->usb->dev, "Submit Rx URB failed %d\n", ret);
 433 end:
 434         return ret;
 435 }
 436
 437 static void vnt_tx_context_complete(struct urb *urb)
 438 {
 439         struct vnt_usb_send_context *context = urb->context;
 440         struct vnt_private *priv = context->priv;
 441
 442         switch (urb->status) {
 443         case 0:
 444                 dev_dbg(&priv->usb->dev, "Write %d bytes\n", context->buf_len);
 445                 break;
 446         case -ECONNRESET:
 447         case -ENOENT:
 448         case -ESHUTDOWN:
 449                 context->in_use = false;
 450                 return;
 451         case -ETIMEDOUT:
 452         default:
 453                 dev_dbg(&priv->usb->dev, "BULK Out failed %d\n", urb->status);
 454                 break;
 455         }
 456
 457         if (context->type == CONTEXT_DATA_PACKET)
 458                 ieee80211_wake_queues(priv->hw);
 459
 460         if (urb->status || context->type == CONTEXT_BEACON_PACKET) {
 461                 if (context->skb)
 462                         ieee80211_free_txskb(priv->hw, context->skb);
 463
 464                 context->in_use = false;
 465         }
 466 }
 467
 468 int vnt_tx_context(struct vnt_private *priv,
 469                    struct vnt_usb_send_context *context)
 470 {
 471         int status;
 472         struct urb *urb = context->urb;
 473
 474         if (test_bit(DEVICE_FLAGS_DISCONNECTED, &priv->flags)) {
 475                 context->in_use = false;
 476                 return -ENODEV;
 477         }
 478
 479         usb_fill_bulk_urb(urb,
 480                           priv->usb,
 481                           usb_sndbulkpipe(priv->usb, 3),
 482                           context->data,
 483                           context->buf_len,
 484                           vnt_tx_context_complete,
 485                           context);
 486
 487         status = usb_submit_urb(urb, GFP_ATOMIC);
 488         if (status) {
 489                 dev_dbg(&priv->usb->dev, "Submit Tx URB failed %d\n", status);
 490
 491                 context->in_use = false;
 492         }
 493
 494         return status;
 495 }